nrdocs 0.1.7 → 0.2.0

package/dist/bin.mjs

@@ -680,6 +680,7 @@ jobs:
         run: nrdocs publish --docs-dir ${docsDir}
         env:
           NRDOCS_API_URL: ${apiUrl}
+          NRDOCS_DOCS_PASSWORD: \${{ secrets.NRDOCS_DOCS_PASSWORD }}
 `;
 }
 function parseInitArgs(args2) {
@@ -6204,10 +6205,16 @@ function wrapInTemplate(options) {
 <script>
 (function(){
   function theme(){var t=document.documentElement.dataset.theme;return t==='dark'||t==='light'?t:(window.matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light');}
+  function api(){
+    var g=typeof globalThis!=='undefined'?globalThis:(typeof window!=='undefined'?window:null);
+    if(!g||!g.mermaid)return null;
+    var m=g.mermaid;
+    return (m.default&&typeof m.default.initialize==='function')?m.default:m;
+  }
   function initMermaid(){
-    if(typeof mermaid==='undefined')return;
-    mermaid.initialize({startOnLoad:true,theme:theme()==='dark'?'dark':'default'});
-    mermaid.run();
+    var m=api();if(!m)return;
+    m.initialize({startOnLoad:true,theme:theme()==='dark'?'dark':'default'});
+    m.run();
   }
   document.addEventListener('DOMContentLoaded',initMermaid);
   document.addEventListener('nrdocs-theme-change',initMermaid);
@@ -6912,15 +6919,23 @@ var ApiClient = class {
       password
     });
   }
+  async setSelfPasswordAllow(owner, repo, allow) {
+    const path12 = allow ? `/api/repos/${owner}/${repo}/allow-self-password` : `/api/repos/${owner}/${repo}/disallow-self-password`;
+    return this.request("POST", path12);
+  }
   async listRules() {
     return this.request("GET", "/api/auto-approval-rules");
   }
-  async addRule(pattern, accessMode, applyExisting) {
-    return this.request("POST", "/api/auto-approval-rules", {
+  async addRule(pattern, accessMode, applyExisting, defaultAllowSelfPassword) {
+    const body = {
       pattern,
       access_mode: accessMode,
       apply_existing: applyExisting ?? false
-    });
+    };
+    if (defaultAllowSelfPassword !== void 0) {
+      body["default_allow_repo_owner_password"] = defaultAllowSelfPassword;
+    }
+    return this.request("POST", "/api/auto-approval-rules", body);
   }
   async removeRule(ruleId) {
     return this.request("DELETE", `/api/auto-approval-rules/${ruleId}`);
@@ -7222,6 +7237,10 @@ async function handlePublish(args2) {
     artifact: { format: "tar.gz", size_bytes: archive.length },
     nrdocs: { cli_version: "0.1.1" }
   }));
+  const docsPasswordRaw = process.env["NRDOCS_DOCS_PASSWORD"];
+  if (typeof docsPasswordRaw === "string" && docsPasswordRaw.length > 0) {
+    formData.append("password", docsPasswordRaw);
+  }
   const result = await client.publish(formData, opts.verbose);
   if (result.ok) {
     const data = result.data;
@@ -8182,6 +8201,83 @@ async function handlePasswordSet(args2) {
     console.log(`Password set for ${owner}/${repo}.`);
   }
 }
+function parsePasswordAllowArgs(args2) {
+  const opts = {};
+  for (let i = 0; i < args2.length; i++) {
+    const arg = args2[i];
+    if (arg === "--json") {
+      opts.json = true;
+    } else if (!arg?.startsWith("--") && !opts.repo) {
+      opts.repo = arg;
+    }
+  }
+  return opts;
+}
+function parsePasswordDisallowArgs(args2) {
+  return parsePasswordAllowArgs(args2);
+}
+async function handlePasswordAllow(args2) {
+  const opts = parsePasswordAllowArgs(args2);
+  if (!opts.repo) {
+    console.error("Error: Repository required. Usage: nrdocs password allow owner/repo");
+    process.exit(2);
+  }
+  const parts = opts.repo.split("/");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    console.error('Error: Repository must be in "owner/repo" format.');
+    process.exit(2);
+  }
+  const [owner, repo] = parts;
+  let creds;
+  try {
+    creds = resolveCredentials();
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
+  const client = new ApiClient(creds.api_url, creds.operator_token);
+  const res = await client.setSelfPasswordAllow(owner, repo, true);
+  if (!res.ok) {
+    console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(res.data, null, 2));
+  } else {
+    console.log(`Self-service password enabled for ${owner}/${repo}.`);
+  }
+}
+async function handlePasswordDisallow(args2) {
+  const opts = parsePasswordDisallowArgs(args2);
+  if (!opts.repo) {
+    console.error("Error: Repository required. Usage: nrdocs password disallow owner/repo");
+    process.exit(2);
+  }
+  const parts = opts.repo.split("/");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    console.error('Error: Repository must be in "owner/repo" format.');
+    process.exit(2);
+  }
+  const [owner, repo] = parts;
+  let creds;
+  try {
+    creds = resolveCredentials();
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
+  const client = new ApiClient(creds.api_url, creds.operator_token);
+  const res = await client.setSelfPasswordAllow(owner, repo, false);
+  if (!res.ok) {
+    console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(res.data, null, 2));
+  } else {
+    console.log(`Self-service password disabled for ${owner}/${repo}.`);
+  }
+}
 
 // src/commands/rules.ts
 function parseRulesListArgs(args2) {
@@ -8200,6 +8296,13 @@ function parseRulesAddArgs(args2) {
       opts.access = args2[++i];
     } else if (arg === "--apply-existing") {
       opts.applyExisting = true;
+    } else if (arg === "--self-set-password" && i + 1 < args2.length) {
+      const v = args2[++i];
+      if (v === "allow" || v === "deny") {
+        opts.selfSetPassword = v;
+      } else {
+        opts.selfSetPassword = "__invalid__";
+      }
     } else if (arg === "--json") {
       opts.json = true;
     } else if (!arg?.startsWith("--")) {
@@ -8223,11 +8326,12 @@ function parseRulesRemoveArgs(args2) {
 }
 function formatRulesTable(rules) {
   if (rules.length === 0) return "No rules configured.";
-  const headers = ["ID", "PATTERN", "ACCESS", "ENABLED", "PRIORITY"];
+  const headers = ["ID", "PATTERN", "ACCESS", "SELF-PWD", "ENABLED", "PRIORITY"];
   const rows = rules.map((r) => [
     String(r["id"] ?? "-").slice(0, 8),
     String(r["pattern"] ?? "-"),
     String(r["access_mode"] ?? "-"),
+    r["default_allow_repo_owner_password"] === true ? "allow" : "deny",
     String(r["enabled"] ?? "-"),
     String(r["priority"] ?? "-")
   ]);
@@ -8280,6 +8384,11 @@ async function handleRulesAdd(args2) {
     console.error('Error: --access is required and must be "public" or "password".');
     process.exit(2);
   }
+  if (opts.selfSetPassword !== void 0 && opts.selfSetPassword !== "allow" && opts.selfSetPassword !== "deny") {
+    console.error('Error: --self-set-password must be "allow" or "deny".');
+    process.exit(2);
+  }
+  const defaultAllowSelfPassword = opts.selfSetPassword === void 0 ? true : opts.selfSetPassword === "allow";
   let creds;
   try {
     creds = resolveCredentials();
@@ -8288,7 +8397,7 @@ async function handleRulesAdd(args2) {
     process.exit(1);
   }
   const client = new ApiClient(creds.api_url, creds.operator_token);
-  const res = await client.addRule(opts.pattern, opts.access, opts.applyExisting);
+  const res = await client.addRule(opts.pattern, opts.access, opts.applyExisting, defaultAllowSelfPassword);
   if (!res.ok) {
     console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
     process.exit(1);
@@ -8558,11 +8667,19 @@ async function runCommand(args2) {
       }
       break;
     case "password":
-      if (subCmd === "set") {
-        await handlePasswordSet(args2.slice(2));
-      } else {
-        console.error("Usage: nrdocs password set <owner/repo> [--from-stdin]");
-        process.exitCode = 1;
+      switch (subCmd) {
+        case "set":
+          await handlePasswordSet(args2.slice(2));
+          break;
+        case "allow":
+          await handlePasswordAllow(args2.slice(2));
+          break;
+        case "disallow":
+          await handlePasswordDisallow(args2.slice(2));
+          break;
+        default:
+          console.error("Usage: nrdocs password <set|allow|disallow> <owner/repo> [...]");
+          process.exitCode = 1;
       }
       break;
     case "rules":
@@ -8676,7 +8793,7 @@ Operator commands:
   approve     Approve a repo for serving
   disable     Disable serving for a repo
   access      Change access mode
-  password    Set or rotate password
+  password    Manage passwords (set | allow | disallow)
   rules       Manage auto-approval rules
   status      Show repo status
   config      Show configuration