create-volt 0.19.0 → 0.21.0

package/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to `create-volt` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and this project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [0.21.0] - 2026-06-29
+
+### Added
+- **`import-wp-db`** — import WordPress content by reading its MySQL/MariaDB
+  database directly, for when the REST API is disabled but you have DB access
+  (on the server or via an SSH tunnel). `--prefix` for non-default table
+  prefixes (validated against SQL injection); creds via `WP_DB_URL` to keep them
+  out of shell history; `mysql2` loaded lazily. Reuses the WXR converter; unit
+  tested with an injected connection. Third migration path alongside
+  `import-wp` (REST) and `import-wxr` (file).
+
+## [0.20.0] - 2026-06-29
+
+### Added
+- **`import-wp` — fully-automated WordPress import over the REST API.**
+  `npx create-volt import-wp <https://site>` pulls published posts + pages
+  directly (paginated) into markdown `pages/` — no export file, and **no
+  credentials for public content**. Drafts/private need an Application Password
+  via `WP_USER` + `WP_APP_PASSWORD` (Basic auth, **sent only over HTTPS, never
+  logged**). Falls back to `import-wxr` if the REST API is disabled. Reuses the
+  WXR→markdown converter; unit-tested with a mocked fetch. `/docs/migrate`
+  updated to lead with the automated path.
+
 ## [0.19.0] - 2026-06-29
 
 ### Added
@@ -278,6 +301,8 @@ All notable changes to `create-volt` are documented here. The format follows
   watching and full-page hot reload. Supports `--skip-install` and `--force`,
   and auto-detects npm / pnpm / yarn / bun for the install step.
 
+[0.21.0]: https://github.com/MIR-2025/volt/releases/tag/v0.21.0
+[0.20.0]: https://github.com/MIR-2025/volt/releases/tag/v0.20.0
 [0.19.0]: https://github.com/MIR-2025/volt/releases/tag/v0.19.0
 [0.18.0]: https://github.com/MIR-2025/volt/releases/tag/v0.18.0
 [0.17.0]: https://github.com/MIR-2025/volt/releases/tag/v0.17.0

package/index.js

@@ -62,6 +62,8 @@ const positionals = [];
 let portArg = null;
 let templateArg = null;
 let outArg = null;
+let userArg = null;
+let prefixArg = null;
 for (let i = 0; i < argv.length; i++) {
   const a = argv[i];
   if (a === "--port") portArg = argv[++i];
@@ -70,6 +72,10 @@ for (let i = 0; i < argv.length; i++) {
   else if (a.startsWith("--template=")) templateArg = a.slice("--template=".length);
   else if (a === "--out") outArg = argv[++i];
   else if (a.startsWith("--out=")) outArg = a.slice("--out=".length);
+  else if (a === "--user") userArg = argv[++i];
+  else if (a.startsWith("--user=")) userArg = a.slice("--user=".length);
+  else if (a === "--prefix") prefixArg = argv[++i];
+  else if (a.startsWith("--prefix=")) prefixArg = a.slice("--prefix=".length);
   else if (a.startsWith("-")) flags.add(a);
   else positionals.push(a);
 }
@@ -135,14 +141,8 @@ if (positionals[0] === "config") {
   process.exit(res.status ?? 0);
 }
 
-// --- `import-wxr` subcommand: import a WordPress export into markdown pages ---
-if (positionals[0] === "import-wxr") {
-  const xmlPath = positionals[1];
-  if (!xmlPath) die(`Usage: ${cyan("create-volt import-wxr <export.xml>")} [--out pages] [--drafts] [--force]`);
-  if (!fs.existsSync(xmlPath)) die(`No such file: ${cyan(xmlPath)}`);
-  const outDir = path.resolve(outArg || "pages");
-  const { runImport } = await import("./lib/import-wxr.js");
-  const { imported, stats } = runImport(fs.readFileSync(xmlPath, "utf8"), { drafts: flags.has("--drafts") });
+// Write imported markdown pages to disk and print a summary (shared by both importers).
+function emitImported(imported, stats, outDir) {
   fs.mkdirSync(outDir, { recursive: true });
   let written = 0;
   let skippedExisting = 0;
@@ -160,6 +160,57 @@ if (positionals[0] === "import-wxr") {
   console.log(`\n${cyan(`✓ Imported ${written}`)} page(s) → ${outDir}`);
   console.log(dim(`  source: ${stats.total} items (${types}); skipped ${stats.draftsSkipped} draft(s), ${stats.otherTypeSkipped} non-page/post item(s)${skippedExisting ? `, ${skippedExisting} already-present (use --force)` : ""}.`));
   console.log(dim("  Enable the pages add-on to serve them: npm run dev -- --edit"));
+}
+
+// --- `import-wxr` subcommand: import an offline WordPress export (WXR file) ---
+if (positionals[0] === "import-wxr") {
+  const xmlPath = positionals[1];
+  if (!xmlPath) die(`Usage: ${cyan("create-volt import-wxr <export.xml>")} [--out pages] [--drafts] [--force]`);
+  if (!fs.existsSync(xmlPath)) die(`No such file: ${cyan(xmlPath)}`);
+  const { runImport } = await import("./lib/import-wxr.js");
+  const { imported, stats } = runImport(fs.readFileSync(xmlPath, "utf8"), { drafts: flags.has("--drafts") });
+  emitImported(imported, stats, path.resolve(outArg || "pages"));
+  process.exit(0);
+}
+
+// --- `import-wp` subcommand: pull a live WordPress site over the REST API ---
+if (positionals[0] === "import-wp") {
+  const site = positionals[1];
+  if (!site || !/^https?:\/\//i.test(site)) die(`Usage: ${cyan("create-volt import-wp <https://site.com>")} [--out pages] [--drafts] [--user U]\n  Credentials (for drafts/private): set ${cyan("WP_APP_PASSWORD")} (an Application Password) and ${cyan("WP_USER")} or --user.`);
+  const user = userArg || process.env.WP_USER;
+  const appPassword = process.env.WP_APP_PASSWORD;
+  if ((user || appPassword) && !/^https:\/\//i.test(site)) die("Refusing to send credentials over a non-HTTPS URL.");
+  const { runImportFromWP } = await import("./lib/import-wxr.js");
+  console.log(dim(`Fetching ${site} via the WordPress REST API…${appPassword ? " (authenticated)" : ""}`));
+  let result;
+  try {
+    result = await runImportFromWP(site, { user, appPassword, drafts: flags.has("--drafts") });
+  } catch (e) {
+    die(`${e.message}\n  If the REST API is disabled, export a WXR file and use ${cyan("create-volt import-wxr <export.xml>")}.`);
+  }
+  emitImported(result.imported, result.stats, path.resolve(outArg || "pages"));
+  process.exit(0);
+}
+
+// --- `import-wp-db` subcommand: read a WordPress MySQL database directly ---
+if (positionals[0] === "import-wp-db") {
+  const dbUrl = positionals[1] || process.env.WP_DB_URL || process.env.DATABASE_URL;
+  if (!dbUrl) {
+    die(
+      `Usage: ${cyan("create-volt import-wp-db <mysql://user:pass@host/db>")} [--prefix wp_] [--out pages] [--drafts] [--force]\n` +
+        `  Tip: set ${cyan("WP_DB_URL")} instead of passing the URL, so credentials stay out of shell history.\n` +
+        `  WordPress DBs are usually firewalled to localhost — run this on the server or over an SSH tunnel. Requires ${cyan("mysql2")} (npm i mysql2).`,
+    );
+  }
+  const { runImportFromDB } = await import("./lib/import-wp-db.js");
+  console.log(dim(`Reading WordPress database (prefix ${prefixArg || "wp_"})…`));
+  let result;
+  try {
+    result = await runImportFromDB(dbUrl, { prefix: prefixArg || "wp_", drafts: flags.has("--drafts") });
+  } catch (e) {
+    die(e.message);
+  }
+  emitImported(result.imported, result.stats, path.resolve(outArg || "pages"));
   process.exit(0);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-volt",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "description": "Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.",
   "type": "module",
   "bin": {