@angeloashmore/prismic-cli-poc 0.0.0-canary.2ff9563

package/src/token-set-name.ts

@@ -0,0 +1,165 @@
+import { parseArgs } from "node:util";
+import * as v from "valibot";
+
+import { isAuthenticated } from "./lib/auth";
+import { safeGetRepositoryFromConfig } from "./lib/config";
+import { stringify } from "./lib/json";
+import { ForbiddenRequestError, request, UnauthorizedRequestError } from "./lib/request";
+import { getRepoUrl } from "./lib/url";
+import { getAccessTokens, getWriteTokens, type OAuthApp, OAuthAppSchema, type WriteToken } from "./token-list";
+
+const HELP = `
+Set the name of a token in a Prismic repository.
+
+Note: Only access tokens can be renamed. Write tokens cannot be renamed without
+changing the token value.
+
+By default, this command reads the repository from prismic.config.json at the
+project root.
+
+USAGE
+  prismic token set-name <token> <name> [flags]
+
+ARGUMENTS
+  token   The token value (or partial match)
+  name    New name for the token
+
+FLAGS
+  -r, --repo string   Repository domain
+  -h, --help          Show help for command
+
+LEARN MORE
+  Use \`prismic token <command> --help\` for more information about a command.
+`.trim();
+
+export async function tokenSetName(): Promise<void> {
+	const {
+		values: { help, repo = await safeGetRepositoryFromConfig() },
+		positionals: [tokenValue, newName],
+	} = parseArgs({
+		args: process.argv.slice(4), // skip: node, script, "token", "set-name"
+		options: {
+			repo: { type: "string", short: "r" },
+			help: { type: "boolean", short: "h" },
+		},
+		allowPositionals: true,
+	});
+
+	if (help) {
+		console.info(HELP);
+		return;
+	}
+
+	if (!tokenValue) {
+		console.error("Missing required argument: token");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!newName) {
+		console.error("Missing required argument: name");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!repo) {
+		console.error("Missing prismic.config.json or --repo option");
+		process.exitCode = 1;
+		return;
+	}
+
+	const authenticated = await isAuthenticated();
+	if (!authenticated) {
+		handleUnauthenticated();
+		return;
+	}
+
+	// First, find the token in access tokens or write tokens
+	const [accessResponse, writeResponse] = await Promise.all([
+		getAccessTokens(repo),
+		getWriteTokens(repo),
+	]);
+
+	if (!accessResponse.ok) {
+		if (accessResponse.error instanceof ForbiddenRequestError || accessResponse.error instanceof UnauthorizedRequestError) {
+			handleUnauthenticated();
+		} else if (v.isValiError(accessResponse.error)) {
+			console.error(`Failed to list access tokens: Invalid response: ${stringify(accessResponse.error.issues)}`);
+			process.exitCode = 1;
+		} else {
+			console.error(`Failed to list access tokens: ${stringify(accessResponse.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	if (!writeResponse.ok) {
+		if (writeResponse.error instanceof ForbiddenRequestError || writeResponse.error instanceof UnauthorizedRequestError) {
+			handleUnauthenticated();
+		} else if (v.isValiError(writeResponse.error)) {
+			console.error(`Failed to list write tokens: Invalid response: ${stringify(writeResponse.error.issues)}`);
+			process.exitCode = 1;
+		} else {
+			console.error(`Failed to list write tokens: ${stringify(writeResponse.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	// Find in access tokens
+	let foundApp: OAuthApp | undefined;
+	for (const app of accessResponse.value) {
+		for (const auth of app.wroom_auths) {
+			if (auth.token === tokenValue || auth.token.startsWith(tokenValue) || auth.token.endsWith(tokenValue)) {
+				foundApp = app;
+				break;
+			}
+		}
+		if (foundApp) break;
+	}
+
+	if (foundApp) {
+		// Update OAuth app name
+		const url = new URL(`settings/security/oauthapp/${foundApp.id}`, await getRepoUrl(repo));
+		const response = await request(url, {
+			method: "POST",
+			body: { name: newName },
+			schema: OAuthAppSchema,
+		});
+
+		if (!response.ok) {
+			if (response.error instanceof ForbiddenRequestError || response.error instanceof UnauthorizedRequestError) {
+				handleUnauthenticated();
+			} else if (v.isValiError(response.error)) {
+				console.error(`Failed to rename token: Invalid response: ${stringify(response.error.issues)}`);
+				process.exitCode = 1;
+			} else {
+				console.error(`Failed to rename token: ${stringify(response.value)}`);
+				process.exitCode = 1;
+			}
+			return;
+		}
+
+		console.info(`Token renamed to: ${newName}`);
+		return;
+	}
+
+	// Check if it's a write token
+	const foundWriteToken = writeResponse.value.tokens.find(
+		(t: WriteToken) => t.token === tokenValue || t.token.startsWith(tokenValue) || t.token.endsWith(tokenValue),
+	);
+
+	if (foundWriteToken) {
+		console.error("Write tokens cannot be renamed. Delete and create a new token with the desired name.");
+		process.exitCode = 1;
+		return;
+	}
+
+	console.error(`Token not found: ${tokenValue}`);
+	process.exitCode = 1;
+}
+
+function handleUnauthenticated(): void {
+	console.error("Not logged in. Run `prismic login` first.");
+	process.exitCode = 1;
+}

package/src/token.ts

@@ -0,0 +1,60 @@
+import { parseArgs } from "node:util";
+
+import { tokenCreate } from "./token-create";
+import { tokenDelete } from "./token-delete";
+import { tokenList } from "./token-list";
+import { tokenSetName } from "./token-set-name";
+
+const HELP = `
+Manage API tokens for a Prismic repository.
+
+USAGE
+  prismic token <command> [flags]
+
+COMMANDS
+  list        List all tokens
+  create      Create a new token
+  set-name    Set token name (access tokens only)
+  delete      Delete a token
+
+FLAGS
+  -h, --help   Show help for command
+
+LEARN MORE
+  Use \`prismic token <command> --help\` for more information about a command.
+`.trim();
+
+export async function token(): Promise<void> {
+	const {
+		positionals: [subcommand],
+	} = parseArgs({
+		args: process.argv.slice(3), // skip: node, script, "token"
+		options: {
+			help: { type: "boolean", short: "h" },
+		},
+		allowPositionals: true,
+		strict: false,
+	});
+
+	switch (subcommand) {
+		case "list":
+			await tokenList();
+			break;
+		case "create":
+			await tokenCreate();
+			break;
+		case "set-name":
+			await tokenSetName();
+			break;
+		case "delete":
+			await tokenDelete();
+			break;
+		default: {
+			if (subcommand) {
+				console.error(`Unknown token subcommand: ${subcommand}\n`);
+				process.exitCode = 1;
+			}
+			console.info(HELP);
+		}
+	}
+}

package/src/webhook-add-header.ts

@@ -0,0 +1,118 @@
+import { parseArgs } from "node:util";
+
+import { isAuthenticated } from "./lib/auth";
+import { safeGetRepositoryFromConfig } from "./lib/config";
+import { stringify } from "./lib/json";
+import { ForbiddenRequestError } from "./lib/request";
+import { updateWebhook } from "./webhook-enable";
+import { getWebhooks } from "./webhook-view";
+
+const HELP = `
+Add a custom HTTP header to a webhook.
+
+By default, this command reads the repository from prismic.config.json at the
+project root.
+
+USAGE
+  prismic webhook add-header <url> <key> <value> [flags]
+
+ARGUMENTS
+  <url>     Webhook URL
+  <key>     Header name
+  <value>   Header value
+
+FLAGS
+  -r, --repo string   Repository domain
+  -h, --help          Show help for command
+
+LEARN MORE
+  Use \`prismic <command> <subcommand> --help\` for more information about a command.
+`.trim();
+
+export async function webhookAddHeader(): Promise<void> {
+	const {
+		values: { help, repo = await safeGetRepositoryFromConfig() },
+		positionals: [webhookUrl, headerKey, headerValue],
+	} = parseArgs({
+		args: process.argv.slice(4), // skip: node, script, "webhook", "add-header"
+		options: {
+			repo: { type: "string", short: "r" },
+			help: { type: "boolean", short: "h" },
+		},
+		allowPositionals: true,
+	});
+
+	if (help) {
+		console.info(HELP);
+		return;
+	}
+
+	if (!webhookUrl) {
+		console.error("Missing required argument: <url>");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!headerKey) {
+		console.error("Missing required argument: <key>");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!headerValue) {
+		console.error("Missing required argument: <value>");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!repo) {
+		console.error("Missing prismic.config.json or --repo option");
+		process.exitCode = 1;
+		return;
+	}
+
+	const authenticated = await isAuthenticated();
+	if (!authenticated) {
+		handleUnauthenticated();
+		return;
+	}
+
+	const webhooksResponse = await getWebhooks(repo);
+	if (!webhooksResponse.ok) {
+		if (webhooksResponse.error instanceof ForbiddenRequestError) {
+			handleUnauthenticated();
+		} else {
+			console.error(`Failed to add header: ${stringify(webhooksResponse.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	const webhook = webhooksResponse.value.find((w) => w.config.url === webhookUrl);
+	if (!webhook) {
+		console.error(`Webhook not found: ${webhookUrl}`);
+		process.exitCode = 1;
+		return;
+	}
+
+	const updatedConfig = structuredClone(webhook.config);
+	updatedConfig.headers[headerKey] = headerValue;
+
+	const response = await updateWebhook(repo, webhook.config._id, updatedConfig);
+	if (!response.ok) {
+		if (response.error instanceof ForbiddenRequestError) {
+			handleUnauthenticated();
+		} else {
+			console.error(`Failed to add header: ${stringify(response.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	console.info(`Header added: ${headerKey}`);
+}
+
+function handleUnauthenticated() {
+	console.error("Not logged in. Run `prismic login` first.");
+	process.exitCode = 1;
+}

package/src/webhook-create.ts

@@ -0,0 +1,152 @@
+import { parseArgs } from "node:util";
+
+import { isAuthenticated } from "./lib/auth";
+import { safeGetRepositoryFromConfig } from "./lib/config";
+import { stringify } from "./lib/json";
+import { ForbiddenRequestError, request } from "./lib/request";
+import { getRepoUrl } from "./lib/url";
+import { TRIGGER_DISPLAY, type Webhook } from "./webhook-view";
+
+const HELP = `
+Create a new webhook in a Prismic repository.
+
+By default, this command reads the repository from prismic.config.json at the
+project root.
+
+USAGE
+  prismic webhook create <url> [flags]
+
+ARGUMENTS
+  <url>   Webhook URL to receive events
+
+FLAGS
+  -n, --name string      Webhook name
+  -s, --secret string    Secret for webhook signature
+  -t, --trigger string   Trigger events (can be repeated)
+  -r, --repo string      Repository domain
+  -h, --help             Show help for command
+
+TRIGGERS
+  document.published    When documents are published
+  document.unpublished  When documents are unpublished
+  release.created       When a release is created
+  release.updated       When a release is edited or deleted
+  tag.created           When a tag is created
+  tag.deleted           When a tag is deleted
+
+If no triggers specified, all are enabled.
+
+LEARN MORE
+  Use \`prismic <command> <subcommand> --help\` for more information about a command.
+`.trim();
+
+const VALID_TRIGGERS = Object.values(TRIGGER_DISPLAY);
+
+export async function webhookCreate(): Promise<void> {
+	const {
+		values: { help, repo = await safeGetRepositoryFromConfig(), name, secret, trigger = [] },
+		positionals: [webhookUrl],
+	} = parseArgs({
+		args: process.argv.slice(4), // skip: node, script, "webhook", "create"
+		options: {
+			name: { type: "string", short: "n" },
+			secret: { type: "string", short: "s" },
+			trigger: { type: "string", multiple: true, short: "t" },
+			repo: { type: "string", short: "r" },
+			help: { type: "boolean", short: "h" },
+		},
+		allowPositionals: true,
+	});
+
+	if (help) {
+		console.info(HELP);
+		return;
+	}
+
+	if (!webhookUrl) {
+		console.error("Missing required argument: <url>");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!repo) {
+		console.error("Missing prismic.config.json or --repo option");
+		process.exitCode = 1;
+		return;
+	}
+
+	// Validate triggers
+	for (const t of trigger) {
+		if (!VALID_TRIGGERS.includes(t)) {
+			console.error(`Invalid trigger: ${t}`);
+			console.error(`Valid triggers: ${VALID_TRIGGERS.join(", ")}`);
+			process.exitCode = 1;
+			return;
+		}
+	}
+
+	const authenticated = await isAuthenticated();
+	if (!authenticated) {
+		handleUnauthenticated();
+		return;
+	}
+
+	// Build trigger settings
+	const defaultValue = trigger.length > 0 ? false : true;
+	const triggers: Record<keyof typeof TRIGGER_DISPLAY, boolean> = {
+		documentsPublished: defaultValue,
+		documentsUnpublished: defaultValue,
+		releasesCreated: defaultValue,
+		releasesUpdated: defaultValue,
+		tagsCreated: defaultValue,
+		tagsDeleted: defaultValue,
+	};
+	for (const t of trigger) {
+		const [apiField] = Object.entries(TRIGGER_DISPLAY).find(([, display]) => t === display) ?? [];
+		if (!apiField) continue;
+		triggers[apiField as keyof typeof TRIGGER_DISPLAY] = true;
+	}
+
+	const response = await createWebhook(repo, {
+		url: webhookUrl,
+		name: name ?? null,
+		secret: secret ?? null,
+		...triggers,
+	});
+	if (!response.ok) {
+		if (response.error instanceof ForbiddenRequestError) {
+			handleUnauthenticated();
+		} else {
+			console.error(`Failed to create webhook: ${stringify(response.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	console.info(`Webhook created: ${webhookUrl}`);
+}
+
+async function createWebhook(
+	repo: string,
+	config: Omit<Webhook["config"], "_id" | "active" | "headers">,
+) {
+	const url = new URL("/app/settings/webhooks/create", await getRepoUrl(repo));
+	const body = new FormData();
+	body.set("url", config.url);
+	body.set("name", config.name ?? "");
+	body.set("secret", config.secret ?? "");
+	body.set("headers", JSON.stringify({}));
+	body.set("active", "on");
+	body.set("documentsPublished", config.documentsUnpublished.toString());
+	body.set("documentsUnpublished", config.documentsUnpublished.toString());
+	body.set("releasesCreated", config.documentsUnpublished.toString());
+	body.set("releasesUpdated", config.documentsUnpublished.toString());
+	body.set("tagsCreated", config.documentsUnpublished.toString());
+	body.set("documentsPublished", config.documentsUnpublished.toString());
+	return await request(url, { method: "POST", body });
+}
+
+function handleUnauthenticated() {
+	console.error("Not logged in. Run `prismic login` first.");
+	process.exitCode = 1;
+}

package/src/webhook-disable.ts

@@ -0,0 +1,109 @@
+import { parseArgs } from "node:util";
+
+import { isAuthenticated } from "./lib/auth";
+import { safeGetRepositoryFromConfig } from "./lib/config";
+import { stringify } from "./lib/json";
+import { ForbiddenRequestError } from "./lib/request";
+import { updateWebhook } from "./webhook-enable";
+import { getWebhooks } from "./webhook-view";
+
+const HELP = `
+Disable a webhook in a Prismic repository.
+
+By default, this command reads the repository from prismic.config.json at the
+project root.
+
+USAGE
+  prismic webhook disable <url> [flags]
+
+ARGUMENTS
+  <url>   Webhook URL
+
+FLAGS
+  -r, --repo string   Repository domain
+  -h, --help          Show help for command
+
+LEARN MORE
+  Use \`prismic <command> <subcommand> --help\` for more information about a command.
+`.trim();
+
+export async function webhookDisable(): Promise<void> {
+	const {
+		values: { help, repo = await safeGetRepositoryFromConfig() },
+		positionals: [webhookUrl],
+	} = parseArgs({
+		args: process.argv.slice(4), // skip: node, script, "webhook", "disable"
+		options: {
+			repo: { type: "string", short: "r" },
+			help: { type: "boolean", short: "h" },
+		},
+		allowPositionals: true,
+	});
+
+	if (help) {
+		console.info(HELP);
+		return;
+	}
+
+	if (!webhookUrl) {
+		console.error("Missing required argument: <url>");
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!repo) {
+		console.error("Missing prismic.config.json or --repo option");
+		process.exitCode = 1;
+		return;
+	}
+
+	const authenticated = await isAuthenticated();
+	if (!authenticated) {
+		handleUnauthenticated();
+		return;
+	}
+
+	const webhooksResponse = await getWebhooks(repo);
+	if (!webhooksResponse.ok) {
+		if (webhooksResponse.error instanceof ForbiddenRequestError) {
+			handleUnauthenticated();
+		} else {
+			console.error(`Failed to disable webhook: ${stringify(webhooksResponse.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	const webhook = webhooksResponse.value.find((w) => w.config.url === webhookUrl);
+	if (!webhook) {
+		console.error(`Webhook not found: ${webhookUrl}`);
+		process.exitCode = 1;
+		return;
+	}
+
+	if (!webhook.config.active) {
+		console.info(`Webhook already disabled: ${webhookUrl}`);
+		return;
+	}
+
+	const updatedConfig = structuredClone(webhook.config);
+	updatedConfig.active = false;
+
+	const response = await updateWebhook(repo, webhook.config._id, updatedConfig);
+	if (!response.ok) {
+		if (response.error instanceof ForbiddenRequestError) {
+			handleUnauthenticated();
+		} else {
+			console.error(`Failed to disable webhook: ${stringify(response.value)}`);
+			process.exitCode = 1;
+		}
+		return;
+	}
+
+	console.info(`Webhook disabled: ${webhookUrl}`);
+}
+
+function handleUnauthenticated() {
+	console.error("Not logged in. Run `prismic login` first.");
+	process.exitCode = 1;
+}