storymaps 1.4.1 → 1.4.2

package/lib/commands/init.js

@@ -7,6 +7,7 @@ import { resolve } from 'node:path';
 import { confirm } from '@inquirer/prompts';
 import chalk from 'chalk';
 import { getMap, postMap } from '../util/api.js';
+import { siteToBaseUrl } from '../util/identity.js';
 import { writeEtag } from '../util/file.js';
 
 export function template(site) {
@@ -72,8 +73,7 @@ export async function initCommand(opts) {
     }
 
     const site = opts.site || 'storymaps.io';
-    const baseUrl = site === 'localhost' ? 'http://localhost:3000'
-        : `https://${site}`;
+    const baseUrl = siteToBaseUrl(site);
 
     let output = template(site);
     let id = null;

package/lib/util/prompt.js

@@ -56,15 +56,20 @@ export async function guard({ message, force, stopMessage }) {
 
 // A password, hashed: from STORYMAPS_PASSWORD when allowed and set, or typed in a terminal.
 // confirmTwice asks again, for setting a new password. Throws a StopError when neither is possible.
+// A new password, set with confirmTwice, needs at least 4 characters, the same as in the app
+const MIN_PASSWORD_LENGTH = 4;
+const tooShort = () => new StopError(`Use a password of at least ${MIN_PASSWORD_LENGTH} characters, the same as in the app.`);
+
 export async function askPassword({ allowEnv = true, confirmTwice = false, noPasswordMessage } = {}) {
-    if (allowEnv) {
-        const fromEnv = envPasswordHash();
-        if (fromEnv) return fromEnv;
+    if (allowEnv && process.env[PASSWORD_ENV]) {
+        if (confirmTwice && process.env[PASSWORD_ENV].length < MIN_PASSWORD_LENGTH) throw tooShort();
+        return envPasswordHash();
     }
     if (!isInteractive()) {
         throw new StopError(noPasswordMessage || `This needs a password, and there's no terminal to type it in. Set ${PASSWORD_ENV} for this command.`);
     }
     const pw = await password({ message: 'Password:', theme: THEME });
+    if (confirmTwice && pw.length < MIN_PASSWORD_LENGTH) throw tooShort();
     if (confirmTwice) {
         const again = await password({ message: 'Confirm password:', theme: THEME });
         if (pw !== again) throw new StopError('Passwords do not match.');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "storymaps",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "CLI tool for storymaps.io - import, export, validate, and manage user story maps from the terminal",
   "type": "module",
   "bin": {