frontpage-host 0.1.17 → 0.1.19

package/AGENTS.md

@@ -2,6 +2,8 @@
 
 This file ships inside the `frontpage-host` npm package. Prefer it over scraping the product website.
 
+The public CLI operates on Scale, Enterprise, and Internal sites. Site-scoped commands return 403 on lower tiers (`The CLI is included on Scale.`). `frontpage sites` still lists sites the key owner belongs to.
+
 ## Install and invoke
 
 | Item | Value |
@@ -93,10 +95,11 @@ Rules:
 2. **Pull before push** so `baseCommitSha` is set (CAS). Still required even if you already pulled to edit.
 3. **Do not push** while an agent run is active (`status` / `runs`).
 4. Push updates **staging** (subdomain). Production is unchanged until someone runs `publish`.
-5. Pushing module markup may auto-activate modules (same as the editor agent).
-6. Binaries use base64; do not UTF-8 round-trip them.
-7. After push, wait for the site compile (`frontpage push --wait` or `frontpage deploy wait`) before reviewing or publishing. Verify `<meta name="frontpage:commit">` when checking production.
-8. The **UI / canvas agent does not use this CLI** — it edits the live tip in-process. Only CLI checkouts need `pull`.
+5. A local delete of an allowlisted path is part of the next push (remote-only files are sent as deletes). `frontpage diff` shows them as `D`.
+6. Pushing module markup may auto-activate modules (same as the editor agent).
+7. Binaries use base64; do not UTF-8 round-trip them.
+8. After push, wait for the site compile (`frontpage push --wait` or `frontpage deploy wait`) before reviewing or publishing. Verify `<meta name="frontpage:commit">` when checking production.
+9. The **UI / canvas agent does not use this CLI** — it edits the live tip in-process. Only CLI checkouts need `pull`.
 
 ## Site contract (Astro)
 
@@ -106,10 +109,12 @@ Sites are Astro 6 + Tailwind v4. More detail: `frontpage help site-building` or
 2. **`src/config/site.ts`** — keep `pages` (path registry) and `nav` in sync when adding/renaming/deleting page files. Tab title comes from BaseLayout, not the `pages` map label.
 3. **One file per URL** for similar page sets (services, guides, …). Do not default to `getStaticPaths()` over `src/data/*.ts`. Blog/news → `frontpage articles`, not a hand-rolled catalog.
 4. **No backends / databases / fake forms or checkout.** Real forms use `<form data-fp-form="slug">` + `frontpage modules`. Refuse or use modules for payments.
-5. **Tokens** in `src/config/tokens.ts` — keep required color/font/spacing/radii keys; style via CSS variables / token Tailwind. **Fonts load rule:** the build bundles catalog faces when the family string appears in `tokens.ts` and/or in a real CSS `font-family` / `fontFamily` / `font-['…']` context under `src/pages|components|styles` — not from prose alone. Preferred path: `frontpage fonts` → exact `value` → `frontpage tokens set --group fonts --key <role> --value "…"` → **APPLY** `font-sans` / `font-serif` / `font-mono` / `font-display` (or `var(--font-*)`) on elements. Inline catalog `font-family` accents can bundle after rebuild, but brand roles still prefer tokens + utilities. Off-catalog families silently fall back to system fonts (push may warn). Module how-tos: `frontpage modules docs <key>` / `frontpage extensions docs <key>`.
-6. **Shared chrome** — prefer `src/components/Header.astro` + `Footer.astro` (or `chrome: { managed: true }` in `site.ts`).
-7. **404** — customize `src/pages/404.astro` if needed; keep `frontpage:404` meta; never register `/404` in `nav`/`pages`.
-8. **Platform-owned paths** stay off-limits (BaseLayout overlay, module/extension shells, `package.json`, …). Customer layouts like `DocsLayout` / `GuideLayout` are OK.
+5. **Quoted attributes vs frontmatter.** In frontmatter JavaScript, a backslash-quote is an escape. In an Astro attribute it is not — the quote after `href=` closes the string and the next token fails the compile. Put HTML in a frontmatter const and pass it as an expression (`auditBody={auditBody}`), or use an expression attribute. Never put an HTML tag or a backslash-quote inside a quoted JSX attribute.
+6. **Tokens** in `src/config/tokens.ts` — keep required color/font/spacing/radii keys; style via CSS variables / token Tailwind. **Fonts load rule:** the build bundles catalog faces when the family string appears in `tokens.ts` and/or in a real CSS `font-family` / `fontFamily` / `font-['…']` context under `src/pages|components|styles` — not from prose alone. Preferred path: `frontpage fonts` → exact `value` → `frontpage tokens set --group fonts --key <role> --value "…"` → **APPLY** `font-sans` / `font-serif` / `font-mono` / `font-display` (or `var(--font-*)`) on elements. Inline catalog `font-family` accents can bundle after rebuild, but brand roles still prefer tokens + utilities. Off-catalog families silently fall back to system fonts (push may warn). Module how-tos: `frontpage modules docs <key>` / `frontpage extensions docs <key>`.
+7. **Shared chrome** — prefer `src/components/Header.astro` + `Footer.astro` (or `chrome: { managed: true }` in `site.ts`).
+8. **404** — customize `src/pages/404.astro` if needed; keep `frontpage:404` meta; never register `/404` in `nav`/`pages`.
+9. **Redirects** — real 301/308s are `frontpage redirects list|set|rm`, not site files. `set --from /old --to /new` is instant (no push/build). Do not ship `Astro.redirect`, `location.replace`, or meta refresh for a permanent move. `frontpage revert` does not undo redirects; `redirects rm` does.
+10. **Platform-owned paths** stay off-limits (BaseLayout overlay, module/extension shells, `package.json`, …). Customer layouts like `DocsLayout` / `GuideLayout` are OK.
 
 ## Modules & articles
 
@@ -122,6 +127,8 @@ Sites are Astro 6 + Tailwind v4. More detail: `frontpage help site-building` or
 - Media: `frontpage media upload <file>` — images/PDF ≤25 MB, video (MP4/WebM/MOV) ≤50 MB, SVG/text ≤4 MB (sanitizing proxy). Human output prints `sitePath:` first (use that in markup — never raw blob hosts), then optional `url:`. Optional `?w=` on rasters only. **Text/CSV** uploads are inline only — **not** added to the media library and **cannot** be linked via `/__media` (`media upload --json` omits full `content`; use `inbox … --csv` for submission exports).
 - Generated images: `frontpage images generate --prompt "…"` `[--count N]` — one prompt, 1–4 variations of that same picture. Prints `sitePath:` first. Counts against AI $ and storage. Flag-off environments return 404 (`Image generation is not enabled.`). Do not call xAI / Imagine yourself.
 - Analytics: bare `frontpage analytics` = dashboard; also `summary|query|funnel|timeseries|compare|sql` for structured reads (SQL is guard + RLS site-scoped).
+- People CRM: `frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide|tag|export`. Site-scoped person graph (email or phone). Inbox stays the raw ledger. Hide is not forget. List export is CSV (not a one-person legal dump). Full guide: https://frontpage.host/developers/people
+- Store catalog: `frontpage shop items|variants|settings|orders|payments`. Integer cents only (`$49.99` is `4999`). Stock `--add` / `--remove` become signed delta (`added 5` / `removed 5` / `set to 20` / `stockNow`). Connect stays `frontpage modules shop|payments connect`. Square `ordering` is a different module. Full guide: https://frontpage.host/developers/shop
 
 ## Agent prompt loop
 

package/dist/bin-path.d.ts

@@ -0,0 +1,21 @@
+export type PathFrontpageVerdict = {
+    stale: boolean;
+    path: string | null;
+    pathVersion: string | null;
+    reason: "older-than-compile-wait" | "older-than-this-package" | "unreadable" | null;
+};
+export declare function resolveRealPath(path: string): string;
+export declare function interpretPathFrontpage(args: {
+    thisVersion: string;
+    thisBin: string | null;
+    pathBin: string | null;
+    pathVersionLine: string | null;
+    minVersion?: string;
+}): PathFrontpageVerdict;
+export declare function whichFrontpage(): string | null;
+export declare function frontpageVersionAt(bin: string): string | null;
+export declare function inspectPathFrontpage(opts?: {
+    thisBin?: string | null;
+    thisVersion?: string;
+}): PathFrontpageVerdict;
+export declare function stalePathUpgradeMessage(v: PathFrontpageVerdict): string;

package/dist/bin-path.js

@@ -0,0 +1,65 @@
+/**
+ * Detect a stale `frontpage` on PATH (global 0.1.9 vs this package).
+ * Does not uninstall anything — doctor prints the uninstall command.
+ */
+import { spawnSync } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { COMPILE_WAIT_MIN_VERSION, isOlderThan, packageIdentity, parseVersionLine, } from "./version.js";
+export function resolveRealPath(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return path;
+    }
+}
+export function interpretPathFrontpage(args) {
+    if (!args.pathBin) {
+        return { stale: false, path: null, pathVersion: null, reason: null };
+    }
+    if (args.thisBin && resolveRealPath(args.pathBin) === resolveRealPath(args.thisBin)) {
+        return { stale: false, path: args.pathBin, pathVersion: args.thisVersion, reason: null };
+    }
+    const pathVersion = parseVersionLine(args.pathVersionLine ?? "");
+    if (!pathVersion) {
+        return { stale: true, path: args.pathBin, pathVersion: null, reason: "unreadable" };
+    }
+    const floor = args.minVersion ?? COMPILE_WAIT_MIN_VERSION;
+    if (isOlderThan(pathVersion, floor)) {
+        return { stale: true, path: args.pathBin, pathVersion, reason: "older-than-compile-wait" };
+    }
+    if (isOlderThan(pathVersion, args.thisVersion)) {
+        return { stale: true, path: args.pathBin, pathVersion, reason: "older-than-this-package" };
+    }
+    return { stale: false, path: args.pathBin, pathVersion, reason: null };
+}
+export function whichFrontpage() {
+    const r = spawnSync("sh", ["-c", "command -v frontpage"], { encoding: "utf8" });
+    const line = (r.stdout ?? "").trim().split("\n")[0]?.trim();
+    return line || null;
+}
+export function frontpageVersionAt(bin) {
+    const r = spawnSync(bin, ["--version"], { encoding: "utf8" });
+    const text = `${r.stdout ?? ""}\n${r.stderr ?? ""}`;
+    return parseVersionLine(text);
+}
+export function inspectPathFrontpage(opts) {
+    const thisVersion = opts?.thisVersion ?? packageIdentity().version;
+    const thisBin = opts?.thisBin ?? process.argv[1] ?? null;
+    const pathBin = whichFrontpage();
+    const pathVersionLine = pathBin ? frontpageVersionAt(pathBin) : null;
+    return interpretPathFrontpage({
+        thisVersion,
+        thisBin,
+        pathBin,
+        pathVersionLine,
+    });
+}
+export function stalePathUpgradeMessage(v) {
+    const found = v.pathVersion ? `frontpage-host ${v.pathVersion}` : "an unknown frontpage-host";
+    const where = v.path ? ` at ${v.path}` : "";
+    return (`PATH frontpage is ${found}${where}. Compile-wait needs frontpage-host ${COMPILE_WAIT_MIN_VERSION} or newer. ` +
+        `Uninstall the stale global (npm uninstall -g frontpage-host) and install ` +
+        `npm i -g frontpage-host@${COMPILE_WAIT_MIN_VERSION} (or npx frontpage-host@${COMPILE_WAIT_MIN_VERSION}). ` +
+        `In the Frontpage repo, run node <repo>/cli/dist/bin.js instead of a global binary.`);
+}

package/dist/bin.js

@@ -27,6 +27,10 @@ import { runMedia } from "./commands/media.js";
 import { runImages } from "./commands/images.js";
 import { runInbox } from "./commands/inbox.js";
 import { runSeo } from "./commands/seo.js";
+import { runRedirects } from "./commands/redirects.js";
+import { runPeople } from "./commands/people.js";
+import { runShop } from "./commands/shop.js";
+import { runMail } from "./commands/mail.js";
 import { runArticles } from "./commands/articles.js";
 import { runSettings } from "./commands/settings.js";
 import { runEdit } from "./commands/edit.js";
@@ -112,8 +116,16 @@ async function main() {
             return runImages(args);
         case "inbox":
             return runInbox(args);
+        case "people":
+            return runPeople(args);
+        case "shop":
+            return runShop(args);
+        case "mail":
+            return runMail(args);
         case "seo":
             return runSeo(args);
+        case "redirects":
+            return runRedirects(args);
         case "articles":
             return runArticles(args);
         case "settings":

package/dist/commands/mail.d.ts

@@ -0,0 +1 @@
+export declare function runMail(args: string[]): Promise<number>;

package/dist/commands/mail.js

@@ -0,0 +1,482 @@
+import { readFile } from "node:fs/promises";
+import { resolveSlug } from "../site.js";
+import { CliHttpError, EXIT_OK, EXIT_USAGE, exitCodeForError, v1Delete, v1Get, v1Patch, v1Post, v1Put, } from "../http/client.js";
+import { assertNoUnknownFlags, hasFlag, takeFlag } from "../argv.js";
+import { emitErr, emitOk, isJson } from "../runtime.js";
+const USAGE = "Usage: frontpage mail settings|email|template|series|send|sends|enrolments|suppress … [--site <slug>] [--json]";
+const ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function requireId(work, kind) {
+    const fromFlag = takeFlag(work, "--id");
+    const positional = work.find((a) => !a.startsWith("-"));
+    const raw = fromFlag ?? (positional ? work.splice(work.indexOf(positional), 1)[0] : undefined);
+    if (!raw || !ID_RE.test(raw)) {
+        throw new CliHttpError(`${kind} not found.`, EXIT_USAGE, 404, "not_found");
+    }
+    return raw;
+}
+function takeAll(work, name) {
+    const out = [];
+    let v = takeFlag(work, name);
+    while (v !== undefined) {
+        out.push(v);
+        v = takeFlag(work, name);
+    }
+    return out;
+}
+function parseVars(pairs) {
+    const vars = {};
+    for (const pair of pairs) {
+        const eq = pair.indexOf("=");
+        if (eq <= 0)
+            continue;
+        vars[pair.slice(0, eq)] = pair.slice(eq + 1);
+    }
+    return vars;
+}
+function parseRecipients(work) {
+    const tos = takeAll(work, "--to").flatMap((v) => v.split(",").map((s) => s.trim()).filter(Boolean));
+    const name = takeFlag(work, "--name");
+    const vars = parseVars(takeAll(work, "--var"));
+    if (tos.length === 0) {
+        throw new CliHttpError("Usage: --to a@x.com", EXIT_USAGE, 0, "bad_request");
+    }
+    return tos.map((email) => ({
+        email,
+        ...(name ? { name } : {}),
+        ...(Object.keys(vars).length ? { vars } : {}),
+    }));
+}
+async function readJsonFile(path) {
+    const raw = await readFile(path, "utf8");
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Error("not an object");
+        }
+        return parsed;
+    }
+    catch {
+        throw new CliHttpError("File must be a JSON object.", EXIT_USAGE, 0, "bad_request");
+    }
+}
+function parseStepFlag(raw) {
+    const parts = raw.split(",").map((s) => s.trim());
+    let templateId = "";
+    let delay = 0;
+    for (const part of parts) {
+        const [k, v] = part.split("=");
+        if (k === "template" || k === "templateId")
+            templateId = v ?? "";
+        if (k === "delay")
+            delay = v ?? 0;
+    }
+    if (!templateId) {
+        throw new CliHttpError("Each --step needs template=<id>.", EXIT_USAGE, 0, "bad_request");
+    }
+    return { templateId, delayMinutes: delay };
+}
+export async function runMail(args) {
+    try {
+        const { slug, rest } = await resolveSlug(args);
+        const group = rest[0];
+        const base = `/api/v1/sites/${encodeURIComponent(slug)}/mail`;
+        if (group === "settings") {
+            const sub = rest[1] ?? "get";
+            const work = rest.slice(2);
+            if (sub === "get") {
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/settings`);
+                if (isJson()) {
+                    emitOk("mail", data);
+                    return EXIT_OK;
+                }
+                const s = (data.settings ?? {});
+                console.log(`${s.timezone ?? "UTC"}  ${s.postalLine ?? "(no postal)"}  ${s.replyTo ?? ""}`);
+                return EXIT_OK;
+            }
+            if (sub === "set") {
+                const postal = takeFlag(work, "--postal") ?? takeFlag(work, "--postal-line");
+                const replyTo = takeFlag(work, "--reply-to");
+                const fromName = takeFlag(work, "--from-name");
+                const timezone = takeFlag(work, "--timezone");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Patch(`${base}/settings`, {
+                    postalLine: postal,
+                    replyTo,
+                    fromName,
+                    timezone,
+                });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Settings saved.");
+                return EXIT_OK;
+            }
+        }
+        if (group === "email" || group === "template") {
+            const noun = group;
+            const plural = group === "email" ? "emails" : "templates";
+            const sub = rest[1] ?? "list";
+            const work = rest.slice(2);
+            if (sub === "list") {
+                const q = takeFlag(work, "--q");
+                const limit = takeFlag(work, "--limit");
+                const cursor = takeFlag(work, "--cursor");
+                assertNoUnknownFlags(work, "mail");
+                const params = new URLSearchParams();
+                if (q)
+                    params.set("q", q);
+                if (limit)
+                    params.set("limit", limit);
+                if (cursor)
+                    params.set("cursor", cursor);
+                const qs = params.toString();
+                const data = await v1Get(qs ? `${base}/${plural}?${qs}` : `${base}/${plural}`);
+                if (isJson()) {
+                    emitOk("mail", data);
+                    return EXIT_OK;
+                }
+                const rows = data[plural] ?? [];
+                if (rows.length === 0) {
+                    console.log(group === "email" ? "No drafts." : "No templates.");
+                    return EXIT_OK;
+                }
+                for (const row of rows)
+                    console.log(`${row.id}  ${row.name ?? ""}  ${row.subject ?? ""}`);
+                return EXIT_OK;
+            }
+            if (sub === "get") {
+                const id = requireId(work, "Document");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/${plural}/${id}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else {
+                    const doc = (data[noun] ?? data.document);
+                    console.log(`${doc?.id}  ${doc?.subject ?? ""}`);
+                }
+                return EXIT_OK;
+            }
+            if (sub === "create") {
+                const file = takeFlag(work, "--file");
+                const name = takeFlag(work, "--name");
+                const subject = takeFlag(work, "--subject");
+                const preheader = takeFlag(work, "--preheader");
+                assertNoUnknownFlags(work, "mail");
+                if (!file)
+                    throw new CliHttpError("Usage: --file email.json", EXIT_USAGE, 0, "bad_request");
+                const body = await readJsonFile(file);
+                if (name)
+                    body.name = name;
+                if (subject)
+                    body.subject = subject;
+                if (preheader)
+                    body.preheader = preheader;
+                const data = await v1Post(`${base}/${plural}`, body);
+                if (isJson())
+                    emitOk("mail", data);
+                else {
+                    const doc = (data[noun] ?? data.document);
+                    console.log(doc?.id ?? "");
+                }
+                return EXIT_OK;
+            }
+            if (sub === "set") {
+                const id = requireId(work, "Document");
+                const file = takeFlag(work, "--file");
+                const name = takeFlag(work, "--name");
+                const subject = takeFlag(work, "--subject");
+                const preheader = takeFlag(work, "--preheader");
+                assertNoUnknownFlags(work, "mail");
+                const body = file ? await readJsonFile(file) : {};
+                if (name)
+                    body.name = name;
+                if (subject)
+                    body.subject = subject;
+                if (preheader)
+                    body.preheader = preheader;
+                const data = await v1Patch(`${base}/${plural}/${id}`, body);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Saved.");
+                return EXIT_OK;
+            }
+            if (sub === "rm") {
+                const id = requireId(work, "Document");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Delete(`${base}/${plural}/${id}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Deleted.");
+                return EXIT_OK;
+            }
+            if (sub === "preview") {
+                const id = requireId(work, "Document");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Post(`${base}/${plural}/${id}/preview`, {});
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log((data.preview ?? {}).subject ?? "Preview ready.");
+                return EXIT_OK;
+            }
+        }
+        if (group === "series") {
+            const sub = rest[1] ?? "list";
+            const work = rest.slice(2);
+            if (sub === "list") {
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/series`);
+                if (isJson()) {
+                    emitOk("mail", data);
+                    return EXIT_OK;
+                }
+                const rows = data.series ?? [];
+                for (const row of rows)
+                    console.log(`${row.id}  ${row.status ?? ""}  ${row.name ?? ""}`);
+                return EXIT_OK;
+            }
+            if (sub === "get") {
+                const id = requireId(work, "Series");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/series/${id}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log((data.series ?? {}).id ?? "");
+                return EXIT_OK;
+            }
+            if (sub === "create") {
+                const name = takeFlag(work, "--name");
+                assertNoUnknownFlags(work, "mail");
+                if (!name)
+                    throw new CliHttpError("Usage: frontpage mail series create --name …", EXIT_USAGE, 0, "bad_request");
+                const data = await v1Post(`${base}/series`, { name });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log((data.series ?? {}).id ?? "");
+                return EXIT_OK;
+            }
+            if (sub === "set") {
+                const id = requireId(work, "Series");
+                const name = takeFlag(work, "--name");
+                const status = takeFlag(work, "--status");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Patch(`${base}/series/${id}`, { name, status });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Saved.");
+                return EXIT_OK;
+            }
+            if (sub === "rm") {
+                const id = requireId(work, "Series");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Delete(`${base}/series/${id}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Deleted.");
+                return EXIT_OK;
+            }
+            if (sub === "activate" || sub === "pause") {
+                const id = requireId(work, "Series");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Patch(`${base}/series/${id}`, {
+                    status: sub === "activate" ? "active" : "paused",
+                });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log(sub === "activate" ? "Active." : "Paused.");
+                return EXIT_OK;
+            }
+            if (sub === "steps") {
+                const verb = work[0];
+                const restSteps = work.slice(1);
+                if (verb !== "set") {
+                    throw new CliHttpError("Usage: frontpage mail series steps set <id> --file steps.json", EXIT_USAGE, 0, "bad_request");
+                }
+                const id = requireId(restSteps, "Series");
+                const file = takeFlag(restSteps, "--file");
+                const stepFlags = takeAll(restSteps, "--step");
+                assertNoUnknownFlags(restSteps, "mail");
+                let steps = [];
+                if (file) {
+                    const body = await readJsonFile(file);
+                    steps = Array.isArray(body.steps) ? body.steps : Array.isArray(body) ? body : [];
+                }
+                else {
+                    steps = stepFlags.map(parseStepFlag);
+                }
+                const data = await v1Put(`${base}/series/${id}/steps`, { steps });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Steps saved.");
+                return EXIT_OK;
+            }
+        }
+        if (group === "send") {
+            const work = rest.slice(1);
+            const file = takeFlag(work, "--file");
+            const wait = hasFlag(work, "--wait");
+            const test = hasFlag(work, "--test");
+            const kind = work[0];
+            if (file) {
+                const recipients = parseRecipients(work);
+                assertNoUnknownFlags(work, "mail");
+                const body = await readJsonFile(file);
+                const data = await v1Post(`${base}/send`, {
+                    ...body,
+                    recipients,
+                    wait,
+                    test,
+                });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log(data.batchId ?? "Queued.");
+                return EXIT_OK;
+            }
+            if (kind === "email" || kind === "template" || kind === "series") {
+                const restKind = work.slice(1);
+                const id = requireId(restKind, kind === "series" ? "Series" : "Document");
+                const recipients = parseRecipients(restKind);
+                assertNoUnknownFlags(restKind, "mail");
+                const path = kind === "series" ? `${base}/series/${id}/send` : `${base}/${kind === "email" ? "emails" : "templates"}/${id}/send`;
+                const data = await v1Post(path, { recipients, wait, test });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log(data.batchId ?? "Queued.");
+                return EXIT_OK;
+            }
+            throw new CliHttpError("Usage: frontpage mail send --file email.json --to a@x.com | send email|template|series <id> --to a@x.com", EXIT_USAGE, 0, "bad_request");
+        }
+        if (group === "sends") {
+            const sub = rest[1] ?? "list";
+            const work = rest.slice(2);
+            if (sub === "list") {
+                const batchId = takeFlag(work, "--batch");
+                const limit = takeFlag(work, "--limit");
+                const cursor = takeFlag(work, "--cursor");
+                assertNoUnknownFlags(work, "mail");
+                const params = new URLSearchParams();
+                if (batchId)
+                    params.set("batchId", batchId);
+                if (limit)
+                    params.set("limit", limit);
+                if (cursor)
+                    params.set("cursor", cursor);
+                const qs = params.toString();
+                const data = await v1Get(qs ? `${base}/sends?${qs}` : `${base}/sends`);
+                if (isJson()) {
+                    emitOk("mail", data);
+                    return EXIT_OK;
+                }
+                const rows = data.sends ?? [];
+                for (const row of rows)
+                    console.log(`${row.id}  ${row.status ?? ""}  ${row.email ?? ""}`);
+                return EXIT_OK;
+            }
+            if (sub === "get") {
+                const id = requireId(work, "Send");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/sends/${id}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log((data.send ?? {}).status ?? "");
+                return EXIT_OK;
+            }
+        }
+        if (group === "enrolments") {
+            const sub = rest[1] ?? "list";
+            const work = rest.slice(2);
+            if (sub === "list") {
+                const seriesId = takeFlag(work, "--series");
+                assertNoUnknownFlags(work, "mail");
+                const params = new URLSearchParams();
+                if (seriesId)
+                    params.set("seriesId", seriesId);
+                const qs = params.toString();
+                const data = await v1Get(qs ? `${base}/enrolments?${qs}` : `${base}/enrolments`);
+                if (isJson())
+                    emitOk("mail", data);
+                else {
+                    const rows = data.enrolments ?? [];
+                    for (const row of rows)
+                        console.log(`${row.id}  ${row.status ?? ""}  ${row.email ?? ""}`);
+                }
+                return EXIT_OK;
+            }
+            if (sub === "cancel") {
+                const id = requireId(work, "Enrolment");
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Post(`${base}/enrolments/${id}/cancel`, {});
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Cancelled.");
+                return EXIT_OK;
+            }
+        }
+        if (group === "suppress") {
+            const sub = rest[1] ?? "list";
+            const work = rest.slice(2);
+            if (sub === "list") {
+                assertNoUnknownFlags(work, "mail");
+                const data = await v1Get(`${base}/suppressions`);
+                if (isJson())
+                    emitOk("mail", data);
+                else {
+                    const rows = data.suppressions ?? [];
+                    for (const row of rows)
+                        console.log(`${row.email ?? ""}  ${row.reason ?? ""}`);
+                }
+                return EXIT_OK;
+            }
+            if (sub === "add") {
+                const email = takeFlag(work, "--email") ?? work.find((a) => !a.startsWith("-"));
+                if (email && !email.startsWith("-") && !takeFlag(work, "--email")) {
+                    work.splice(work.indexOf(email), 1);
+                }
+                assertNoUnknownFlags(work, "mail");
+                if (!email)
+                    throw new CliHttpError("Usage: frontpage mail suppress add --email a@x.com", EXIT_USAGE, 0, "bad_request");
+                const data = await v1Post(`${base}/suppressions`, { email });
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Suppressed.");
+                return EXIT_OK;
+            }
+            if (sub === "rm") {
+                const email = takeFlag(work, "--email") ?? work.find((a) => !a.startsWith("-"));
+                if (email && !email.startsWith("-") && work.includes(email))
+                    work.splice(work.indexOf(email), 1);
+                assertNoUnknownFlags(work, "mail");
+                if (!email)
+                    throw new CliHttpError("Usage: frontpage mail suppress rm --email a@x.com", EXIT_USAGE, 0, "bad_request");
+                const data = await v1Delete(`${base}/suppressions/${encodeURIComponent(email)}`);
+                if (isJson())
+                    emitOk("mail", data);
+                else
+                    console.log("Removed.");
+                return EXIT_OK;
+            }
+        }
+        console.error(USAGE);
+        return EXIT_USAGE;
+    }
+    catch (err) {
+        if (isJson())
+            return emitErr("mail", err);
+        console.error(err instanceof Error ? err.message : String(err));
+        return exitCodeForError(err);
+    }
+}

package/dist/commands/people.d.ts

@@ -0,0 +1 @@
+export declare function runPeople(args: string[]): Promise<number>;