Update storage/media_routers.py

storage/media_routers.py

@@ -1,12 +1,15 @@
 import os
 import io
 import shutil
+
+import sqlite3
+
 from pathlib import Path
 
 from fastapi import APIRouter, UploadFile, File, Query, HTTPException
 from fastapi.responses import FileResponse, JSONResponse
 
-# Importa tu clase FileManager según donde la tengas
+
 from storage.files.file_manager import FileManager
 
 router = APIRouter(prefix="/media", tags=["Media Manager"])
@@ -63,6 +66,50 @@ async def upload_db_file(
         }
     )
 
+@router.post("/execute_query", tags=["Database Manager"])
+async def execute_query(
+    db_filename: str = Query(..., description="SQLite .db file name"),
+    query: str = Query(..., description="SQL query to execute"),
+    token: str = Query(..., description="Token required for authorization")
+):
+    """
+    Execute a SQL query against a specified SQLite database file in /data/db.
+
+    Steps:
+    - Validate the token.
+    - Ensure the requested .db file exists inside /data/db.
+    - Connect to the database using sqlite3.
+    - Execute the provided query.
+    - Return the results as a list of dictionaries (column: value).
+    - Capture and return errors if query execution fails.
+    """
+    validate_token(token)
+
+    db_file_path = DB_PATH / db_filename
+
+    if not db_file_path.exists() or not db_file_path.is_file():
+        raise HTTPException(status_code=404, detail=f"Database file {db_filename} not found")
+
+    try:
+        conn = sqlite3.connect(db_file_path)
+        conn.row_factory = sqlite3.Row  # para devolver columnas por nombre
+        cur = conn.cursor()
+
+        cur.execute(query)
+        rows = cur.fetchall()
+
+        # Convert rows to list of dicts
+        results = [dict(row) for row in rows]
+
+        conn.commit()
+        conn.close()
+    except sqlite3.Error as e:
+        raise HTTPException(status_code=400, detail=f"SQL error: {e}")
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"Unexpected error: {e}")
+
+    return JSONResponse(content={"results": results})
+
 @router.delete("/clear_media", tags=["Media Manager"])
 def clear_media(token: str = Query(..., description="Token required for authorization")):
     """