create-volt 0.20.0 → 0.21.0

package/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to `create-volt` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and this project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [0.21.0] - 2026-06-29
+
+### Added
+- **`import-wp-db`** — import WordPress content by reading its MySQL/MariaDB
+  database directly, for when the REST API is disabled but you have DB access
+  (on the server or via an SSH tunnel). `--prefix` for non-default table
+  prefixes (validated against SQL injection); creds via `WP_DB_URL` to keep them
+  out of shell history; `mysql2` loaded lazily. Reuses the WXR converter; unit
+  tested with an injected connection. Third migration path alongside
+  `import-wp` (REST) and `import-wxr` (file).
+
 ## [0.20.0] - 2026-06-29
 
 ### Added
@@ -290,6 +301,7 @@ All notable changes to `create-volt` are documented here. The format follows
   watching and full-page hot reload. Supports `--skip-install` and `--force`,
   and auto-detects npm / pnpm / yarn / bun for the install step.
 
+[0.21.0]: https://github.com/MIR-2025/volt/releases/tag/v0.21.0
 [0.20.0]: https://github.com/MIR-2025/volt/releases/tag/v0.20.0
 [0.19.0]: https://github.com/MIR-2025/volt/releases/tag/v0.19.0
 [0.18.0]: https://github.com/MIR-2025/volt/releases/tag/v0.18.0

package/index.js

@@ -63,6 +63,7 @@ let portArg = null;
 let templateArg = null;
 let outArg = null;
 let userArg = null;
+let prefixArg = null;
 for (let i = 0; i < argv.length; i++) {
   const a = argv[i];
   if (a === "--port") portArg = argv[++i];
@@ -73,6 +74,8 @@ for (let i = 0; i < argv.length; i++) {
   else if (a.startsWith("--out=")) outArg = a.slice("--out=".length);
   else if (a === "--user") userArg = argv[++i];
   else if (a.startsWith("--user=")) userArg = a.slice("--user=".length);
+  else if (a === "--prefix") prefixArg = argv[++i];
+  else if (a.startsWith("--prefix=")) prefixArg = a.slice("--prefix=".length);
   else if (a.startsWith("-")) flags.add(a);
   else positionals.push(a);
 }
@@ -189,6 +192,28 @@ if (positionals[0] === "import-wp") {
   process.exit(0);
 }
 
+// --- `import-wp-db` subcommand: read a WordPress MySQL database directly ---
+if (positionals[0] === "import-wp-db") {
+  const dbUrl = positionals[1] || process.env.WP_DB_URL || process.env.DATABASE_URL;
+  if (!dbUrl) {
+    die(
+      `Usage: ${cyan("create-volt import-wp-db <mysql://user:pass@host/db>")} [--prefix wp_] [--out pages] [--drafts] [--force]\n` +
+        `  Tip: set ${cyan("WP_DB_URL")} instead of passing the URL, so credentials stay out of shell history.\n` +
+        `  WordPress DBs are usually firewalled to localhost — run this on the server or over an SSH tunnel. Requires ${cyan("mysql2")} (npm i mysql2).`,
+    );
+  }
+  const { runImportFromDB } = await import("./lib/import-wp-db.js");
+  console.log(dim(`Reading WordPress database (prefix ${prefixArg || "wp_"})…`));
+  let result;
+  try {
+    result = await runImportFromDB(dbUrl, { prefix: prefixArg || "wp_", drafts: flags.has("--drafts") });
+  } catch (e) {
+    die(e.message);
+  }
+  emitImported(result.imported, result.stats, path.resolve(outArg || "pages"));
+  process.exit(0);
+}
+
 // --- `studio` subcommand: ephemeral, localhost-only data browser (server.js --studio) ---
 if (positionals[0] === "studio") {
   const cwd = process.cwd();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-volt",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.",
   "type": "module",
   "bin": {