@cogenta/cli 0.3.0 → 0.4.0

package/dist/reset-mail.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The one place a password reset token becomes an email — shared between
+ * `cogenta users reset-password --email` (a terminal, `commands/users.ts`)
+ * and `POST /api/auth/forgot-password` (a browser, `commands/serve.ts`'s
+ * `createAuthRouter` wiring).
+ *
+ * Factored out rather than duplicated: both callers already issue the token
+ * through the same `PasswordResetStore`, and a second copy of "how the mail
+ * is worded" would drift the moment one of them changed it.
+ */
+export interface ResetMailSite {
+    readonly name: string;
+    readonly url: string;
+}
+export interface SendResetMailOptions {
+    /** Where the outgoing mail is written. Defaults to `.cogenta/mail` under the project. */
+    readonly mailDir: string;
+    /**
+     * When set, the mail links to this admin screen (with the token appended as
+     * `?token=`) instead of naming the `cogenta users reset-password --token`
+     * terminal command. `runServe` passes this so a person who asked from the
+     * admin's "forgot password" screen gets something they can click; the CLI
+     * command itself never sets it, since whoever ran it is already at a
+     * terminal.
+     */
+    readonly resetUrl?: string;
+}
+/**
+ * Sends the reset mail through `@cogenta/channels`, not through a second
+ * mailer of this command's own — the email adapter and its transport
+ * interface already exist and are the project's one way out.
+ *
+ * The transport is the file one, because it is the only one that exists: a
+ * real SMTP transport is a documented, deliberate gap in that package
+ * (`providers/email/transport.ts`). So this writes a real message to a real
+ * file and says exactly where, rather than pretending mail left the machine.
+ */
+export declare function sendResetMail(options: SendResetMailOptions, site: ResetMailSite, address: string, token: string, expiresAt: string): Promise<string>;
+//# sourceMappingURL=reset-mail.d.ts.map

package/dist/reset-mail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-mail.d.ts","sourceRoot":"","sources":["../src/reset-mail.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAwCjB"}

package/dist/reset-mail.js

@@ -0,0 +1,45 @@
+import { createEmailAdapter, createFileEmailTransport } from '@cogenta/channels';
+/**
+ * Sends the reset mail through `@cogenta/channels`, not through a second
+ * mailer of this command's own — the email adapter and its transport
+ * interface already exist and are the project's one way out.
+ *
+ * The transport is the file one, because it is the only one that exists: a
+ * real SMTP transport is a documented, deliberate gap in that package
+ * (`providers/email/transport.ts`). So this writes a real message to a real
+ * file and says exactly where, rather than pretending mail left the machine.
+ */
+export async function sendResetMail(options, site, address, token, expiresAt) {
+    const { mailDir: directory, resetUrl } = options;
+    const adapter = createEmailAdapter({
+        transport: createFileEmailTransport({ directory }),
+    });
+    const howToUseIt = resetUrl === undefined
+        ? `Run: cogenta users reset-password --token ${token}\n\nThe token works once and expires at ${expiresAt}. If you did not ask for this, ignore this message — the token is useless without it, and asking again replaces it.`
+        : `Open this link: ${resetUrl}${resetUrl.includes('?') ? '&' : '?'}token=${token}\n\nThe link works once and expires at ${expiresAt}. If you did not ask for this, ignore this message — the token is useless without it, and asking again replaces it.`;
+    // `report` of the three fixed message levels: `notification` is one line
+    // with nowhere to put a token, and `alert` would stamp "[WARNING]" on the
+    // subject and demand an incident's `expectedAction`/`adminUrl`. None of the
+    // three was designed for transactional mail; a fourth level would change a
+    // closed union every one of the five adapters renders, for one caller.
+    await adapter.send({ id: address }, {
+        level: 'report',
+        title: `${site.name} — password reset`,
+        keyFigures: [
+            { label: 'Valid until', value: expiresAt },
+            { label: 'Uses left', value: '1' },
+        ],
+        sections: [
+            {
+                heading: 'Your one-time token',
+                body: token,
+            },
+            {
+                heading: 'How to use it',
+                body: howToUseIt,
+            },
+        ],
+    });
+    return directory;
+}
+//# sourceMappingURL=reset-mail.js.map

package/dist/reset-mail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-mail.js","sourceRoot":"","sources":["../src/reset-mail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAgChF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B,EAC7B,IAAmB,EACnB,OAAe,EACf,KAAa,EACb,SAAiB;IAEjB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAEhD,MAAM,OAAO,GAAG,kBAAkB,CAAC;QACjC,SAAS,EAAE,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;KACnD,CAAC,CAAA;IAEF,MAAM,UAAU,GACd,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAC,6CAA6C,KAAK,2CAA2C,SAAS,qHAAqH;QAC7N,CAAC,CAAC,mBAAmB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,0CAA0C,SAAS,qHAAqH,CAAA;IAE5P,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,OAAO,CAAC,IAAI,CAChB,EAAE,EAAE,EAAE,OAAO,EAAE,EACf;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,mBAAmB;QACtC,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;YAC1C,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE;SACnC;QACD,QAAQ,EAAE;YACR;gBACE,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,KAAK;aACZ;YACD;gBACE,OAAO,EAAE,eAAe;gBACxB,IAAI,EAAE,UAAU;aACjB;SACF;KACF,CACF,CAAA;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cogenta/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The Cogenta command line: diagnose an install, run migrations, inspect drivers.",
   "license": "MPL-2.0",
   "type": "module",
@@ -30,17 +30,20 @@
   },
   "dependencies": {
     "graphql": "^17.0.2",
-    "@cogenta/agents": "0.2.0",
-    "@cogenta/blocks": "0.1.3",
-    "@cogenta/channels": "0.2.0",
-    "@cogenta/api": "1.0.0",
-    "@cogenta/auth": "0.2.0",
-    "@cogenta/core": "0.3.0",
-    "@cogenta/import": "0.1.3",
-    "@cogenta/schema": "0.2.0",
-    "@cogenta/seo": "0.2.0",
-    "@cogenta/render": "0.1.3",
-    "@cogenta/theme-canonical": "0.2.0"
+    "@cogenta/agents": "0.2.1",
+    "@cogenta/analytics": "0.2.0",
+    "@cogenta/auth": "0.3.0",
+    "@cogenta/blocks": "0.1.4",
+    "@cogenta/api": "1.1.0",
+    "@cogenta/channels": "0.2.1",
+    "@cogenta/commerce": "0.2.0",
+    "@cogenta/import": "0.1.4",
+    "@cogenta/plugins": "0.2.0",
+    "@cogenta/core": "0.4.0",
+    "@cogenta/theme-canonical": "0.2.1",
+    "@cogenta/schema": "0.3.0",
+    "@cogenta/render": "0.1.4",
+    "@cogenta/seo": "0.2.1"
   },
   "devDependencies": {
     "typescript": "^7.0.2",