@geekity/cms 0.3.0

package/dist/admin/users.js

@@ -0,0 +1,233 @@
+import { randomInt } from 'node:crypto';
+import { passwordProblem, usernameProblem } from './credentials.js';
+import { flash } from './flash.js';
+import { ADMIN_PREFIX } from './session.js';
+import { DuplicateUsernameError } from './store.js';
+import { ADMIN_TEMPLATES } from './templates.js';
+/** Where the users screen lives. The add form posts here too. */
+export const USERS_PATH = `${ADMIN_PREFIX}/users`;
+/** Where the signed-in admin's change-password form posts. */
+export const CHANGE_PASSWORD_PATH = `${USERS_PATH}/password`;
+/** Where a row's delete button posts. */
+export const DELETE_USER_PATH = `${USERS_PATH}/delete`;
+/** The fields the three forms on the screen submit. */
+export const USER_FIELDS = {
+    username: 'username',
+    password: 'password',
+    generate: 'generate',
+    currentPassword: 'current_password',
+    newPassword: 'new_password',
+    newPasswordConfirmation: 'new_password_confirmation',
+    userId: 'user_id',
+};
+/**
+ * Register the users screen: the list, the add form, and the change-password
+ * form for whoever is signed in.
+ *
+ * There is one role, so there is nothing to edit about somebody else: an admin
+ * can add a user, delete one, and change their own password. Changing
+ * somebody else's is deliberately not offered — resetting a colleague's
+ * password from under them is what `geekity user add` and a fresh account are
+ * for, and it keeps the current-password check honest.
+ */
+export function mountUsers(app, options) {
+    const { render } = options;
+    app.get(USERS_PATH, (c) => render(c, ADMIN_TEMPLATES.users, screen(c)));
+    app.post(USERS_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const username = field(body[USER_FIELDS.username]).trim();
+        const supplied = field(body[USER_FIELDS.password]);
+        const generate = field(body[USER_FIELDS.generate]) !== '';
+        const password = generate ? generatePassword() : supplied;
+        const problems = addUserProblems(username, password, generate);
+        if (Object.keys(problems).length === 0) {
+            try {
+                c.var.admin.createUser({ username, password });
+            }
+            catch (error) {
+                if (!(error instanceof DuplicateUsernameError))
+                    throw error;
+                problems.username = error.message;
+            }
+        }
+        if (Object.keys(problems).length > 0) {
+            c.status(400);
+            return render(c, ADMIN_TEMPLATES.users, screen(c, { addForm: { username, generate }, addProblems: problems }));
+        }
+        // A generated password is shown once, here, and never stored in the clear.
+        // The flash lives on the session row, so it is not in the URL, in a cookie
+        // or in anybody's history.
+        flash(c, 'notice', generate
+            ? `Added ${username}. Their password is ${password} — copy it now, it is not shown again.`
+            : `Added ${username}.`);
+        return c.redirect(USERS_PATH, 303);
+    });
+    app.post(CHANGE_PASSWORD_PATH, async (c) => {
+        // The guard has already established that there is a live session with a
+        // user behind it, so both of these are present on every path that gets here.
+        const session = c.var.session;
+        const user = session?.userId === null || session === undefined
+            ? undefined
+            : c.var.admin.getUserById(session.userId);
+        if (session === undefined || user === undefined)
+            return c.redirect(USERS_PATH, 303);
+        const body = await c.req.parseBody();
+        const current = field(body[USER_FIELDS.currentPassword]);
+        const next = field(body[USER_FIELDS.newPassword]);
+        const confirmation = field(body[USER_FIELDS.newPasswordConfirmation]);
+        const problems = changePasswordProblems({
+            correct: c.var.admin.verifyPassword(user.username, current) !== undefined,
+            next,
+            confirmation,
+        });
+        if (Object.keys(problems).length > 0) {
+            c.status(400);
+            // Nothing that was typed is echoed back: every field on this form is a
+            // password, and a password does not belong in rendered HTML.
+            return render(c, ADMIN_TEMPLATES.users, screen(c, { passwordProblems: problems }));
+        }
+        c.var.admin.setPassword(user.id, next);
+        // Every browser that was signed in as this user is signed out, because the
+        // usual reason to change a password is that somebody else may have it. The
+        // one doing the changing is spared, so the admin is not thrown out of the
+        // form they just submitted.
+        const ended = c.var.admin.deleteSessionsForUser(user.id, { except: session.id });
+        flash(c, 'notice', ended === 0
+            ? 'Your password was changed.'
+            : `Your password was changed, and ${signedOut(ended)} signed out.`);
+        return c.redirect(USERS_PATH, 303);
+    });
+    app.post(DELETE_USER_PATH, async (c) => {
+        const admin = c.var.admin;
+        const body = await c.req.parseBody();
+        const id = Number(field(body[USER_FIELDS.userId]));
+        const target = Number.isInteger(id) ? admin.getUserById(id) : undefined;
+        const refusal = deleteUserRefusal({
+            target,
+            signedInAs: c.var.session?.userId ?? null,
+            total: admin.countUsers(),
+        });
+        if (refusal !== undefined) {
+            flash(c, 'error', refusal);
+            return c.redirect(USERS_PATH, 303);
+        }
+        // Their sessions go with them: the foreign key cascades, and the
+        // connection runs with `PRAGMA foreign_keys = ON`.
+        admin.deleteUser(target.id);
+        flash(c, 'notice', `Deleted ${target.username}.`);
+        return c.redirect(USERS_PATH, 303);
+    });
+}
+/**
+ * Delete a user.
+ *
+ * Two refusals, in this order. The last remaining user cannot go, because a
+ * site with no users falls back into first-run setup and anybody who reaches
+ * it becomes its admin. And nobody may delete their own account: it would end
+ * the session doing the deleting, and there is no undo. Both are a flash and a
+ * redirect rather than a 400, because nothing was typed to send back.
+ */
+export function deleteUserRefusal(input) {
+    if (input.target === undefined)
+        return 'That user is already gone.';
+    if (input.total <= 1) {
+        return `${input.target.username} is the only user. Add another before deleting this one.`;
+    }
+    if (input.target.id === input.signedInAs) {
+        return 'You cannot delete your own account. Another admin can do it for you.';
+    }
+    return undefined;
+}
+/**
+ * What is wrong with a proposed password change, one message per field.
+ *
+ * The current password is taken as already checked, rather than checked here,
+ * so this stays a pure function over what the store said.
+ */
+export function changePasswordProblems(input) {
+    const problems = {};
+    if (!input.correct)
+        problems.currentPassword = 'That is not your current password.';
+    const secret = passwordProblem(input.next);
+    if (secret !== undefined)
+        problems.newPassword = secret;
+    else if (input.next !== input.confirmation) {
+        problems.newPassword = 'The two new passwords do not match.';
+    }
+    return problems;
+}
+/** "1 other session was" or "3 other sessions were", for the flash. */
+function signedOut(count) {
+    return count === 1 ? '1 other session was' : `${String(count)} other sessions were`;
+}
+/**
+ * What is wrong with a proposed user, one message per field.
+ *
+ * The rules are the shared ones, so an account made here is one
+ * `/admin/setup` and `geekity user add` would both have accepted. A generated
+ * password is not checked against them — it is made to satisfy them — and the
+ * password field is not read at all when the box is ticked, so a stale value
+ * left in it cannot be what is refused.
+ */
+export function addUserProblems(username, password, generate = false) {
+    const problems = {};
+    const name = usernameProblem(username);
+    if (name !== undefined)
+        problems.username = name;
+    if (!generate) {
+        const secret = passwordProblem(password);
+        if (secret !== undefined)
+            problems.password = secret;
+    }
+    return problems;
+}
+/**
+ * The alphabet a generated password is drawn from: no `0`/`O` and no `1`/`l`,
+ * because a generated password is read off a screen and typed somewhere else.
+ */
+export const GENERATED_PASSWORD_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789';
+/** How many characters a generated password has. 20 is about 116 bits here. */
+export const GENERATED_PASSWORD_LENGTH = 20;
+/** A password nobody chose, from `randomInt` rather than `Math.random`. */
+export function generatePassword() {
+    let password = '';
+    for (let index = 0; index < GENERATED_PASSWORD_LENGTH; index += 1) {
+        password += GENERATED_PASSWORD_ALPHABET[randomInt(GENERATED_PASSWORD_ALPHABET.length)];
+    }
+    return password;
+}
+/** Everything the users template renders. */
+function screen(c, extra = {}) {
+    const signedInAs = c.var.session?.userId ?? null;
+    const users = c.var.admin.listUsers();
+    return {
+        section: 'users',
+        usersUrl: USERS_PATH,
+        changePasswordUrl: CHANGE_PASSWORD_PATH,
+        deleteUserUrl: DELETE_USER_PATH,
+        fields: USER_FIELDS,
+        users: users.map((user) => row(user, { signedInAs, total: users.length })),
+        addForm: { username: '', generate: false },
+        addProblems: {},
+        passwordProblems: {},
+        ...extra,
+    };
+}
+/** A form field as a string. A file upload, or a missing field, is the empty one. */
+function field(value) {
+    return typeof value === 'string' ? value : '';
+}
+/** One user as the table renders it. */
+function row(user, context) {
+    const you = user.id === context.signedInAs;
+    return {
+        id: user.id,
+        username: user.username,
+        createdAt: user.createdAt,
+        you,
+        // The button is rendered for everybody the signed-in admin may actually
+        // delete, so the screen never offers an action it is about to refuse.
+        deletable: !you && context.total > 1,
+    };
+}
+//# sourceMappingURL=users.js.map

package/dist/admin/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/admin/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAKxC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,QAAQ,CAAC;AAElD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,UAAU,WAAW,CAAC;AAE7D,yCAAyC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,UAAU,SAAS,CAAC;AAEvD,uDAAuD;AACvD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,eAAe,EAAE,kBAAkB;IACnC,WAAW,EAAE,cAAc;IAC3B,uBAAuB,EAAE,2BAA2B;IACpD,MAAM,EAAE,SAAS;CACT,CAAC;AAQX;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,GAAqB,EAAE,OAA0B;IAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAE1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC5D,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;YACpC,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,MAAM,CACX,CAAC,EACD,eAAe,CAAC,KAAK,EACrB,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CACtE,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,2BAA2B;QAC3B,KAAK,CACH,CAAC,EACD,QAAQ,EACR,QAAQ;YACN,CAAC,CAAC,SAAS,QAAQ,uBAAuB,QAAQ,wCAAwC;YAC1F,CAAC,CAAC,SAAS,QAAQ,GAAG,CACzB,CAAC;QACF,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,MAAM,IAAI,GACR,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAEpF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAEtE,MAAM,QAAQ,GAAG,sBAAsB,CAAC;YACtC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,SAAS;YACzE,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,uEAAuE;YACvE,6DAA6D;YAC7D,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,4BAA4B;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjF,KAAK,CACH,CAAC,EACD,QAAQ,EACR,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,kCAAkC,SAAS,CAAC,KAAK,CAAC,cAAc,CACrE,CAAC;QACF,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,MAAM;YACN,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI;YACzC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE;SAC1B,CAAC,CAAC;QAEH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,iEAAiE;QACjE,mDAAmD;QACnD,KAAK,CAAC,UAAU,CAAE,MAAe,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAY,MAAe,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAOjC;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC;IACpE,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,0DAA0D,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAKD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,QAAQ,CAAC,eAAe,GAAG,oCAAoC,CAAC;IAEpF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;SACnD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3C,QAAQ,CAAC,WAAW,GAAG,qCAAqC,CAAC;IAC/D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;AACtF,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,QAAgB,EAChB,QAAQ,GAAG,KAAK;IAEhB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS;QAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;IAEjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC;IACvD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,2DAA2D,CAAC;AAE9D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB;IAC9B,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,yBAAyB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,QAAQ,IAAI,2BAA2B,CAAC,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6CAA6C;AAC7C,SAAS,MAAM,CACb,CAA6B,EAC7B,KAAK,GAA4B,EAAE;IAEnC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IAEtC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,oBAAoB;QACvC,aAAa,EAAE,gBAAgB;QAC/B,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC1C,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,EAAE;QACpB,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,wCAAwC;AACxC,SAAS,GAAG,CACV,IAAU,EACV,OAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG;QACH,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,EAAE,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC;KACrC,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+import type { GeekityConfig } from './config.ts';
+export type Command = 'serve' | 'init' | 'sync' | 'user' | 'help' | 'version';
+export interface ParsedArgs {
+    command: Command;
+    /** Path to the config file, relative to the working directory, if the user named one. */
+    configPath: string | undefined;
+    /**
+     * The password `user add` was given on the command line, if any. `undefined`
+     * means "ask"; the empty string means the user passed `--password=` and is
+     * refused by the password rules rather than by the parser.
+     */
+    password: string | undefined;
+    /**
+     * Positional arguments after the command: the directory for `init`, the
+     * subcommand and its arguments for `user`. Flags are never in here.
+     */
+    args: readonly string[];
+}
+/** Turn `process.argv.slice(2)` into a command, its options and its arguments. */
+export declare function parseArgs(argv: readonly string[]): ParsedArgs;
+/**
+ * Load a config module, returning `{}` when the site has no config file.
+ *
+ * A TypeScript config is imported directly first. That is all it takes on Node
+ * 24, which strips types without a flag, and inside this repository, where
+ * the CLI already runs under tsx. A Node started with stripping disabled — and
+ * any file carrying TypeScript syntax that stripping cannot erase — falls back to
+ * registering tsx from the *site's* own dependencies, which is where a site
+ * scaffolded by `geekity init` has it. A site with neither writes
+ * `geekity.config.js` instead; it is in the candidate list for exactly that.
+ */
+export declare function loadConfig(cwd: string, configPath: string | undefined): Promise<GeekityConfig>;
+/**
+ * The site's own tsx, as the directory the package was installed into, or
+ * `undefined` when the site does not have one.
+ *
+ * Node's resolver is deliberately not asked: this has to be the tsx the *site*
+ * installed, and a resolver anchored anywhere else — or patched by a tsx that
+ * is already loaded, which is what happens inside this repository — would
+ * happily answer with somebody else's copy.
+ */
+export declare function findSiteTsx(cwd: string): string | undefined;
+/**
+ * Teach this process to import TypeScript, using the tsx installed alongside
+ * the site.
+ *
+ * tsx is the site's rather than this package's because the CMS does not depend
+ * on it at runtime: a site that runs `server.ts` already has it, and a site
+ * that does not want it writes its config in JavaScript instead.
+ */
+export declare function registerTypeScriptLoader(cwd: string, configFile: string): Promise<void>;
+/** A terminal, as much of one as {@link readPassword} needs. */
+type PasswordInput = NodeJS.ReadableStream & {
+    isTTY?: boolean | undefined;
+    isRaw?: boolean | undefined;
+    setRawMode?: (mode: boolean) => unknown;
+};
+/** Where {@link readPassword} reads from, writes to, and what it says. */
+export interface ReadPasswordOptions {
+    /** Stream to read the password from. Defaults to standard input. */
+    input?: PasswordInput;
+    /** Stream the prompt goes to. Defaults to standard error, so `>` keeps it out of a file. */
+    output?: NodeJS.WritableStream;
+    /** The prompt, shown only on a terminal. */
+    prompt?: string;
+}
+/**
+ * Ask for a password once, without putting it on the screen.
+ *
+ * Two things would otherwise echo it, and both are turned off: the terminal
+ * driver, silenced by putting the input into raw mode, and readline, whose
+ * output goes to a writable that keeps nothing. Readline happens to set raw
+ * mode itself, but it is set here as well rather than relied on: the day that
+ * changes, a password would be printed. Raw mode also means readline sees
+ * Ctrl-C as a byte rather than a signal, so it is turned back into a
+ * cancellation here.
+ *
+ * Off a terminal — a pipe, a heredoc, a CI job — nothing is printed and the
+ * first line is the password, which is what makes
+ * `printf '%s\n' "$PW" | geekity user add ada` work.
+ */
+export declare function readPassword(options?: ReadPasswordOptions): Promise<string>;
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAK9E,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;;OAGG;IACH,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAkCD,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAiE7D;AASD;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW3D;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe7F;AA8KD,gEAAgE;AAChE,KAAK,aAAa,GAAG,MAAM,CAAC,cAAc,GAAG;IAC3C,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;CACzC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4CrF"}