nrdocs 0.1.8 → 0.2.0

package/dist/bin.mjs

@@ -680,6 +680,7 @@ jobs:
         run: nrdocs publish --docs-dir ${docsDir}
         env:
           NRDOCS_API_URL: ${apiUrl}
+          NRDOCS_DOCS_PASSWORD: \${{ secrets.NRDOCS_DOCS_PASSWORD }}
 `;
 }
 function parseInitArgs(args2) {
@@ -6918,15 +6919,23 @@ var ApiClient = class {
       password
     });
   }
+  async setSelfPasswordAllow(owner, repo, allow) {
+    const path12 = allow ? `/api/repos/${owner}/${repo}/allow-self-password` : `/api/repos/${owner}/${repo}/disallow-self-password`;
+    return this.request("POST", path12);
+  }
   async listRules() {
     return this.request("GET", "/api/auto-approval-rules");
   }
-  async addRule(pattern, accessMode, applyExisting) {
-    return this.request("POST", "/api/auto-approval-rules", {
+  async addRule(pattern, accessMode, applyExisting, defaultAllowSelfPassword) {
+    const body = {
       pattern,
       access_mode: accessMode,
       apply_existing: applyExisting ?? false
-    });
+    };
+    if (defaultAllowSelfPassword !== void 0) {
+      body["default_allow_repo_owner_password"] = defaultAllowSelfPassword;
+    }
+    return this.request("POST", "/api/auto-approval-rules", body);
   }
   async removeRule(ruleId) {
     return this.request("DELETE", `/api/auto-approval-rules/${ruleId}`);
@@ -7228,6 +7237,10 @@ async function handlePublish(args2) {
     artifact: { format: "tar.gz", size_bytes: archive.length },
     nrdocs: { cli_version: "0.1.1" }
   }));
+  const docsPasswordRaw = process.env["NRDOCS_DOCS_PASSWORD"];
+  if (typeof docsPasswordRaw === "string" && docsPasswordRaw.length > 0) {
+    formData.append("password", docsPasswordRaw);
+  }
   const result = await client.publish(formData, opts.verbose);
   if (result.ok) {
     const data = result.data;
@@ -8188,6 +8201,83 @@ async function handlePasswordSet(args2) {
     console.log(`Password set for ${owner}/${repo}.`);
   }
 }
+function parsePasswordAllowArgs(args2) {
+  const opts = {};
+  for (let i = 0; i < args2.length; i++) {
+    const arg = args2[i];
+    if (arg === "--json") {
+      opts.json = true;
+    } else if (!arg?.startsWith("--") && !opts.repo) {
+      opts.repo = arg;
+    }
+  }
+  return opts;
+}
+function parsePasswordDisallowArgs(args2) {
+  return parsePasswordAllowArgs(args2);
+}
+async function handlePasswordAllow(args2) {
+  const opts = parsePasswordAllowArgs(args2);
+  if (!opts.repo) {
+    console.error("Error: Repository required. Usage: nrdocs password allow owner/repo");
+    process.exit(2);
+  }
+  const parts = opts.repo.split("/");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    console.error('Error: Repository must be in "owner/repo" format.');
+    process.exit(2);
+  }
+  const [owner, repo] = parts;
+  let creds;
+  try {
+    creds = resolveCredentials();
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
+  const client = new ApiClient(creds.api_url, creds.operator_token);
+  const res = await client.setSelfPasswordAllow(owner, repo, true);
+  if (!res.ok) {
+    console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(res.data, null, 2));
+  } else {
+    console.log(`Self-service password enabled for ${owner}/${repo}.`);
+  }
+}
+async function handlePasswordDisallow(args2) {
+  const opts = parsePasswordDisallowArgs(args2);
+  if (!opts.repo) {
+    console.error("Error: Repository required. Usage: nrdocs password disallow owner/repo");
+    process.exit(2);
+  }
+  const parts = opts.repo.split("/");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    console.error('Error: Repository must be in "owner/repo" format.');
+    process.exit(2);
+  }
+  const [owner, repo] = parts;
+  let creds;
+  try {
+    creds = resolveCredentials();
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
+  const client = new ApiClient(creds.api_url, creds.operator_token);
+  const res = await client.setSelfPasswordAllow(owner, repo, false);
+  if (!res.ok) {
+    console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(res.data, null, 2));
+  } else {
+    console.log(`Self-service password disabled for ${owner}/${repo}.`);
+  }
+}
 
 // src/commands/rules.ts
 function parseRulesListArgs(args2) {
@@ -8206,6 +8296,13 @@ function parseRulesAddArgs(args2) {
       opts.access = args2[++i];
     } else if (arg === "--apply-existing") {
       opts.applyExisting = true;
+    } else if (arg === "--self-set-password" && i + 1 < args2.length) {
+      const v = args2[++i];
+      if (v === "allow" || v === "deny") {
+        opts.selfSetPassword = v;
+      } else {
+        opts.selfSetPassword = "__invalid__";
+      }
     } else if (arg === "--json") {
       opts.json = true;
     } else if (!arg?.startsWith("--")) {
@@ -8229,11 +8326,12 @@ function parseRulesRemoveArgs(args2) {
 }
 function formatRulesTable(rules) {
   if (rules.length === 0) return "No rules configured.";
-  const headers = ["ID", "PATTERN", "ACCESS", "ENABLED", "PRIORITY"];
+  const headers = ["ID", "PATTERN", "ACCESS", "SELF-PWD", "ENABLED", "PRIORITY"];
   const rows = rules.map((r) => [
     String(r["id"] ?? "-").slice(0, 8),
     String(r["pattern"] ?? "-"),
     String(r["access_mode"] ?? "-"),
+    r["default_allow_repo_owner_password"] === true ? "allow" : "deny",
     String(r["enabled"] ?? "-"),
     String(r["priority"] ?? "-")
   ]);
@@ -8286,6 +8384,11 @@ async function handleRulesAdd(args2) {
     console.error('Error: --access is required and must be "public" or "password".');
     process.exit(2);
   }
+  if (opts.selfSetPassword !== void 0 && opts.selfSetPassword !== "allow" && opts.selfSetPassword !== "deny") {
+    console.error('Error: --self-set-password must be "allow" or "deny".');
+    process.exit(2);
+  }
+  const defaultAllowSelfPassword = opts.selfSetPassword === void 0 ? true : opts.selfSetPassword === "allow";
   let creds;
   try {
     creds = resolveCredentials();
@@ -8294,7 +8397,7 @@ async function handleRulesAdd(args2) {
     process.exit(1);
   }
   const client = new ApiClient(creds.api_url, creds.operator_token);
-  const res = await client.addRule(opts.pattern, opts.access, opts.applyExisting);
+  const res = await client.addRule(opts.pattern, opts.access, opts.applyExisting, defaultAllowSelfPassword);
   if (!res.ok) {
     console.error(`Error: ${res.error?.message ?? "Unknown error"}`);
     process.exit(1);
@@ -8564,11 +8667,19 @@ async function runCommand(args2) {
       }
       break;
     case "password":
-      if (subCmd === "set") {
-        await handlePasswordSet(args2.slice(2));
-      } else {
-        console.error("Usage: nrdocs password set <owner/repo> [--from-stdin]");
-        process.exitCode = 1;
+      switch (subCmd) {
+        case "set":
+          await handlePasswordSet(args2.slice(2));
+          break;
+        case "allow":
+          await handlePasswordAllow(args2.slice(2));
+          break;
+        case "disallow":
+          await handlePasswordDisallow(args2.slice(2));
+          break;
+        default:
+          console.error("Usage: nrdocs password <set|allow|disallow> <owner/repo> [...]");
+          process.exitCode = 1;
       }
       break;
     case "rules":
@@ -8682,7 +8793,7 @@ Operator commands:
   approve     Approve a repo for serving
   disable     Disable serving for a repo
   access      Change access mode
-  password    Set or rotate password
+  password    Manage passwords (set | allow | disallow)
   rules       Manage auto-approval rules
   status      Show repo status
   config      Show configuration

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nrdocs",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "CLI for nrdocs - serverless docs publishing for private GitHub repos",
   "type": "module",
   "bin": {
@@ -23,8 +23,9 @@
     "@types/markdown-it": "^14.1.2",
     "@types/node": "^20.14.0",
     "esbuild": "^0.28.0",
-    "mermaid": "^11.6.0",
+    "fast-check": "^4.8.0",
     "markdown-it": "^14.1.1",
+    "mermaid": "^11.6.0",
     "typescript": "^5.5.0",
     "vitest": "^2.0.0"
   },