+1

.gitignore

··· 35 35 36 36 # Bun lockfile - keep but binary cache 37 37 bun.lockb 38 38 + packages/ui

+22

.tangled/workflows/lint.yml

··· 1 1 + # Biome lint and format checks 2 2 + 3 3 + when: 4 4 + - event: ["push", "manual"] 5 5 + branch: ["main"] 6 6 + - event: ["pull_request"] 7 7 + branch: ["main"] 8 8 + 9 9 + engine: "nixery" 10 10 + 11 11 + dependencies: 12 12 + nixpkgs: 13 13 + - bun 14 14 + - biome 15 15 + 16 16 + steps: 17 17 + - name: "Install dependencies" 18 18 + command: "bun install" 19 19 + - name: "Lint check" 20 20 + command: "cd packages/cli && biome lint ." 21 21 + - name: "Format check" 22 22 + command: "cd packages/cli && biome format ."

+61

CHANGELOG.md

··· 1 1 + ## [0.3.3.] - 2026-02-04 2 2 + 3 3 + ### ⚙️ Miscellaneous Tasks 4 4 + 5 5 + - Cleaned up remaining auth implementations 6 6 + - Format 7 7 + 8 8 + ## [0.3.2] - 2026-02-05 9 9 + 10 10 + ### 🐛 Bug Fixes 11 11 + 12 12 + - Fixed issue with auth selection in init command 13 13 + 14 14 + ### ⚙️ Miscellaneous Tasks 15 15 + 16 16 + - Release 0.3.2 17 17 + ## [0.3.1] - 2026-02-04 18 18 + 19 19 + ### 🐛 Bug Fixes 20 20 + 21 21 + - Asset subdirectories 22 22 + 23 23 + ### ⚙️ Miscellaneous Tasks 24 24 + 25 25 + - Updated authentication ux 26 26 + - Release 0.3.1 27 27 + - Bumped version 28 28 + ## [0.3.0] - 2026-02-04 29 29 + 30 30 + ### 🚀 Features 31 31 + 32 32 + - Initial oauth implementation 33 33 + - Add stripDatePrefix option for Jekyll-style filenames 34 34 + - Add `update` command 35 35 + 36 36 + ### ⚙️ Miscellaneous Tasks 37 37 + 38 38 + - Update changelog 39 39 + - Added workflows 40 40 + - Updated workflows 41 41 + - Updated workflows 42 42 + - Cleaned up types 43 43 + - Updated icon styles 44 44 + - Updated og image 45 45 + - Updated docs 46 46 + - Docs updates 47 47 + - Bumped version 48 48 + ## [0.2.1] - 2026-02-02 49 49 + 50 50 + ### ⚙️ Miscellaneous Tasks 51 51 + 52 52 + - Added CHANGELOG 53 53 + - Merge main into chore/fronmatter-config-updates 54 54 + - Added linting and formatting 55 55 + - Linting updates 56 56 + - Refactored to use fallback approach if frontmatter.slugField is provided or not 57 57 + - Version bump 1 58 ## [0.2.0] - 2026-02-01 2 59 3 60 ### 🚀 Features ··· 7 64 8 65 ### ⚙️ Miscellaneous Tasks 9 66 67 67 + - Resolved action items from issue #3 68 68 + - Adjusted tags to accept yaml multiline arrays for tags 69 69 + - Updated inject to handle new slug options 70 70 + - Updated comments 10 71 - Update blog post 11 72 - Fix blog build error 12 73 - Adjust blog post

+80 -1

bun.lock

··· 24 24 }, 25 25 "packages/cli": { 26 26 "name": "sequoia-cli", 27 27 - "version": "0.2.0", 27 27 + "version": "0.3.2", 28 28 "bin": { 29 29 "sequoia": "dist/index.js", 30 30 }, 31 31 "dependencies": { 32 32 "@atproto/api": "^0.18.17", 33 33 + "@atproto/oauth-client-node": "^0.3.16", 33 34 "@clack/prompts": "^1.0.0", 34 35 "cmd-ts": "^0.14.3", 35 36 "glob": "^13.0.0", 36 37 "mime-types": "^2.1.35", 37 38 "minimatch": "^10.1.1", 39 39 + "open": "^11.0.0", 38 40 }, 39 41 "devDependencies": { 40 42 "@biomejs/biome": "^2.3.13", ··· 45 47 "typescript": "^5", 46 48 }, 47 49 }, 50 50 + "packages/ui": { 51 51 + "name": "sequoia-ui", 52 52 + "version": "0.1.0", 53 53 + "devDependencies": { 54 54 + "@biomejs/biome": "^2.3.13", 55 55 + "@types/node": "^20", 56 56 + }, 57 57 + "peerDependencies": { 58 58 + "typescript": "^5", 59 59 + }, 60 60 + }, 48 61 }, 49 62 "packages": { 50 63 "@antfu/install-pkg": ["@antfu/install-pkg@1.1.0", "", { "dependencies": { "package-manager-detector": "^1.3.0", "tinyexec": "^1.0.1" } }, "sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ=="], 51 64 65 65 + "@atproto-labs/did-resolver": ["@atproto-labs/did-resolver@0.2.6", "", { "dependencies": { "@atproto-labs/fetch": "0.2.3", "@atproto-labs/pipe": "0.1.1", "@atproto-labs/simple-store": "0.3.0", "@atproto-labs/simple-store-memory": "0.1.4", "@atproto/did": "0.3.0", "zod": "^3.23.8" } }, "sha512-2K1bC04nI2fmgNcvof+yA28IhGlpWn2JKYlPa7To9JTKI45FINCGkQSGiL2nyXlyzDJJ34fZ1aq6/IRFIOIiqg=="], 66 66 + 67 67 + "@atproto-labs/fetch": ["@atproto-labs/fetch@0.2.3", "", { "dependencies": { "@atproto-labs/pipe": "0.1.1" } }, "sha512-NZtbJOCbxKUFRFKMpamT38PUQMY0hX0p7TG5AEYOPhZKZEP7dHZ1K2s1aB8MdVH0qxmqX7nQleNrrvLf09Zfdw=="], 68 68 + 69 69 + "@atproto-labs/fetch-node": ["@atproto-labs/fetch-node@0.2.0", "", { "dependencies": { "@atproto-labs/fetch": "0.2.3", "@atproto-labs/pipe": "0.1.1", "ipaddr.js": "^2.1.0", "undici": "^6.14.1" } }, "sha512-Krq09nH/aeoiU2s9xdHA0FjTEFWG9B5FFenipv1iRixCcPc7V3DhTNDawxG9gI8Ny0k4dBVS9WTRN/IDzBx86Q=="], 70 70 + 71 71 + "@atproto-labs/handle-resolver": ["@atproto-labs/handle-resolver@0.3.6", "", { "dependencies": { "@atproto-labs/simple-store": "0.3.0", "@atproto-labs/simple-store-memory": "0.1.4", "@atproto/did": "0.3.0", "zod": "^3.23.8" } }, "sha512-qnSTXvOBNj1EHhp2qTWSX8MS5q3AwYU5LKlt5fBvSbCjgmTr2j0URHCv+ydrwO55KvsojIkTMgeMOh4YuY4fCA=="], 72 72 + 73 73 + "@atproto-labs/handle-resolver-node": ["@atproto-labs/handle-resolver-node@0.1.25", "", { "dependencies": { "@atproto-labs/fetch-node": "0.2.0", "@atproto-labs/handle-resolver": "0.3.6", "@atproto/did": "0.3.0" } }, "sha512-NY9WYM2VLd3IuMGRkkmvGBg8xqVEaK/fitv1vD8SMXqFTekdpjOLCCyv7EFtqVHouzmDcL83VOvWRfHVa8V9Yw=="], 74 74 + 75 75 + "@atproto-labs/identity-resolver": ["@atproto-labs/identity-resolver@0.3.6", "", { "dependencies": { "@atproto-labs/did-resolver": "0.2.6", "@atproto-labs/handle-resolver": "0.3.6" } }, "sha512-qoWqBDRobln0NR8L8dQjSp79E0chGkBhibEgxQa2f9WD+JbJdjQ0YvwwO5yeQn05pJoJmAwmI2wyJ45zjU7aWg=="], 76 76 + 77 77 + "@atproto-labs/pipe": ["@atproto-labs/pipe@0.1.1", "", {}, "sha512-hdNw2oUs2B6BN1lp+32pF7cp8EMKuIN5Qok2Vvv/aOpG/3tNSJ9YkvfI0k6Zd188LeDDYRUpYpxcoFIcGH/FNg=="], 78 78 + 79 79 + "@atproto-labs/simple-store": ["@atproto-labs/simple-store@0.3.0", "", {}, "sha512-nOb6ONKBRJHRlukW1sVawUkBqReLlLx6hT35VS3imaNPwiXDxLnTK7lxw3Lrl9k5yugSBDQAkZAq3MPTEFSUBQ=="], 80 80 + 81 81 + "@atproto-labs/simple-store-memory": ["@atproto-labs/simple-store-memory@0.1.4", "", { "dependencies": { "@atproto-labs/simple-store": "0.3.0", "lru-cache": "^10.2.0" } }, "sha512-3mKY4dP8I7yKPFj9VKpYyCRzGJOi5CEpOLPlRhoJyLmgs3J4RzDrjn323Oakjz2Aj2JzRU/AIvWRAZVhpYNJHw=="], 82 82 + 52 83 "@atproto/api": ["@atproto/api@0.18.17", "", { "dependencies": { "@atproto/common-web": "^0.4.13", "@atproto/lexicon": "^0.6.1", "@atproto/syntax": "^0.4.3", "@atproto/xrpc": "^0.7.7", "await-lock": "^2.2.2", "multiformats": "^9.9.0", "tlds": "^1.234.0", "zod": "^3.23.8" } }, "sha512-TeJkLGPkiK3jblwTDSNTH+CnS6WgaOiHDZeVVzywtxomyyF0FpQVSMz5eP3sDhxyHJqpI3E2AOYD7PO/JSbzJw=="], 53 84 54 85 "@atproto/common-web": ["@atproto/common-web@0.4.13", "", { "dependencies": { "@atproto/lex-data": "0.0.9", "@atproto/lex-json": "0.0.9", "@atproto/syntax": "0.4.3", "zod": "^3.23.8" } }, "sha512-TewRUyB/dVJ5PtI3QmJzEgT3wDsvpnLJ+48hPl+LuUueJPamZevXKJN6dFjtbKAMFRnl2bKfdsf79qwvdSaLKQ=="], 86 86 + 87 87 + "@atproto/did": ["@atproto/did@0.3.0", "", { "dependencies": { "zod": "^3.23.8" } }, "sha512-raUPzUGegtW/6OxwCmM8bhZvuIMzxG5t9oWsth6Tp91Kb5fTnHV2h/KKNF1C82doeA4BdXCErTyg7ISwLbQkzA=="], 88 88 + 89 89 + "@atproto/jwk": ["@atproto/jwk@0.6.0", "", { "dependencies": { "multiformats": "^9.9.0", "zod": "^3.23.8" } }, "sha512-bDoJPvt7TrQVi/rBfBrSSpGykhtIriKxeYCYQTiPRKFfyRhbgpElF0wPXADjIswnbzZdOwbY63az4E/CFVT3Tw=="], 90 90 + 91 91 + "@atproto/jwk-jose": ["@atproto/jwk-jose@0.1.11", "", { "dependencies": { "@atproto/jwk": "0.6.0", "jose": "^5.2.0" } }, "sha512-i4Fnr2sTBYmMmHXl7NJh8GrCH+tDQEVWrcDMDnV5DjJfkgT17wIqvojIw9SNbSL4Uf0OtfEv6AgG0A+mgh8b5Q=="], 92 92 + 93 93 + "@atproto/jwk-webcrypto": ["@atproto/jwk-webcrypto@0.2.0", "", { "dependencies": { "@atproto/jwk": "0.6.0", "@atproto/jwk-jose": "0.1.11", "zod": "^3.23.8" } }, "sha512-UmgRrrEAkWvxwhlwe30UmDOdTEFidlIzBC7C3cCbeJMcBN1x8B3KH+crXrsTqfWQBG58mXgt8wgSK3Kxs2LhFg=="], 55 94 56 95 "@atproto/lex-data": ["@atproto/lex-data@0.0.9", "", { "dependencies": { "multiformats": "^9.9.0", "tslib": "^2.8.1", "uint8arrays": "3.0.0", "unicode-segmenter": "^0.14.0" } }, "sha512-1slwe4sG0cyWtsq16+rBoWIxNDqGPkkvN+PV6JuzA7dgUK9bjUmXBGQU4eZlUPSS43X1Nhmr/9VjgKmEzU9vDw=="], 57 96 ··· 59 98 60 99 "@atproto/lexicon": ["@atproto/lexicon@0.6.1", "", { "dependencies": { "@atproto/common-web": "^0.4.13", "@atproto/syntax": "^0.4.3", "iso-datestring-validator": "^2.2.2", "multiformats": "^9.9.0", "zod": "^3.23.8" } }, "sha512-/vI1kVlY50Si+5MXpvOucelnYwb0UJ6Qto5mCp+7Q5C+Jtp+SoSykAPVvjVtTnQUH2vrKOFOwpb3C375vSKzXw=="], 61 100 101 101 + "@atproto/oauth-client": ["@atproto/oauth-client@0.5.14", "", { "dependencies": { "@atproto-labs/did-resolver": "0.2.6", "@atproto-labs/fetch": "0.2.3", "@atproto-labs/handle-resolver": "0.3.6", "@atproto-labs/identity-resolver": "0.3.6", "@atproto-labs/simple-store": "0.3.0", "@atproto-labs/simple-store-memory": "0.1.4", "@atproto/did": "0.3.0", "@atproto/jwk": "0.6.0", "@atproto/oauth-types": "0.6.2", "@atproto/xrpc": "0.7.7", "core-js": "^3", "multiformats": "^9.9.0", "zod": "^3.23.8" } }, "sha512-sPH+vcdq9maTEAhJI0HzmFcFAMrkCS19np+RUssNkX6kS8Xr3OYr57tvYRCbkcnIyYTfYcxKQgpwHKx3RVEaYw=="], 102 102 + 103 103 + "@atproto/oauth-client-node": ["@atproto/oauth-client-node@0.3.16", "", { "dependencies": { "@atproto-labs/did-resolver": "0.2.6", "@atproto-labs/handle-resolver-node": "0.1.25", "@atproto-labs/simple-store": "0.3.0", "@atproto/did": "0.3.0", "@atproto/jwk": "0.6.0", "@atproto/jwk-jose": "0.1.11", "@atproto/jwk-webcrypto": "0.2.0", "@atproto/oauth-client": "0.5.14", "@atproto/oauth-types": "0.6.2" } }, "sha512-2dooMzxAkiQ4MkOAZlEQ3iwbB9SEovrbIKMNuBbVCLQYORVNxe20tMdjs3lvhrzdpzvaHLlQnJJhw5dA9VELFw=="], 104 104 + 105 105 + "@atproto/oauth-types": ["@atproto/oauth-types@0.6.2", "", { "dependencies": { "@atproto/did": "0.3.0", "@atproto/jwk": "0.6.0", "zod": "^3.23.8" } }, "sha512-2cuboM4RQBCYR8NQC5uGRkW6KgCgKyq/B5/+tnMmWZYtZGVUQvsUWQHK/ZiMCnVXbcDNtc/RIEJQJDZ8FXMoxg=="], 106 106 + 62 107 "@atproto/syntax": ["@atproto/syntax@0.4.3", "", { "dependencies": { "tslib": "^2.8.1" } }, "sha512-YoZUz40YAJr5nPwvCDWgodEOlt5IftZqPJvA0JDWjuZKD8yXddTwSzXSaKQAzGOpuM+/A3uXRtPzJJqlScc+iA=="], 63 108 64 109 "@atproto/xrpc": ["@atproto/xrpc@0.7.7", "", { "dependencies": { "@atproto/lexicon": "^0.6.0", "zod": "^3.23.8" } }, "sha512-K1ZyO/BU8JNtXX5dmPp7b5UrkLMMqpsIa/Lrj5D3Su+j1Xwq1m6QJ2XJ1AgjEjkI1v4Muzm7klianLE6XGxtmA=="], ··· 615 660 616 661 "bun-types": ["bun-types@1.3.7", "", { "dependencies": { "@types/node": "*" } }, "sha512-qyschsA03Qz+gou+apt6HNl6HnI+sJJLL4wLDke4iugsE6584CMupOtTY1n+2YC9nGVrEKUlTs99jjRLKgWnjQ=="], 617 662 663 663 + "bundle-name": ["bundle-name@4.1.0", "", { "dependencies": { "run-applescript": "^7.0.0" } }, "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q=="], 664 664 + 618 665 "bytes": ["bytes@3.1.2", "", {}, "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="], 619 666 620 667 "cac": ["cac@6.7.14", "", {}, "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ=="], ··· 662 709 "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="], 663 710 664 711 "cookie": ["cookie@1.1.1", "", {}, "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ=="], 712 712 + 713 713 + "core-js": ["core-js@3.48.0", "", {}, "sha512-zpEHTy1fjTMZCKLHUZoVeylt9XrzaIN2rbPXEt0k+q7JE5CkCZdo6bNq55bn24a69CH7ErAVLKijxJja4fw+UQ=="], 665 714 666 715 "cose-base": ["cose-base@1.0.3", "", { "dependencies": { "layout-base": "^1.0.0" } }, "sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg=="], 667 716 ··· 761 810 762 811 "deepmerge": ["deepmerge@4.3.1", "", {}, "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A=="], 763 812 813 813 + "default-browser": ["default-browser@5.4.0", "", { "dependencies": { "bundle-name": "^4.1.0", "default-browser-id": "^5.0.0" } }, "sha512-XDuvSq38Hr1MdN47EDvYtx3U0MTqpCEn+F6ft8z2vYDzMrvQhVp0ui9oQdqW3MvK3vqUETglt1tVGgjLuJ5izg=="], 814 814 + 815 815 + "default-browser-id": ["default-browser-id@5.0.1", "", {}, "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q=="], 816 816 + 817 817 + "define-lazy-prop": ["define-lazy-prop@3.0.0", "", {}, "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg=="], 818 818 + 764 819 "delaunator": ["delaunator@5.0.1", "", { "dependencies": { "robust-predicates": "^3.0.2" } }, "sha512-8nvh+XBe96aCESrGOqMp/84b13H9cdKbG5P2ejQCh4d4sK9RL4371qou9drQjMhvnPmhWl5hnmqbEE0fXr9Xnw=="], 765 820 766 821 "depd": ["depd@2.0.0", "", {}, "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="], ··· 921 976 922 977 "internmap": ["internmap@1.0.1", "", {}, "sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw=="], 923 978 979 979 + "ipaddr.js": ["ipaddr.js@2.3.0", "", {}, "sha512-Zv/pA+ciVFbCSBBjGfaKUya/CcGmUHzTydLMaTwrUUEM2DIEO3iZvueGxmacvmN50fGpGVKeTXpb2LcYQxeVdg=="], 980 980 + 924 981 "is-alphabetical": ["is-alphabetical@2.0.1", "", {}, "sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ=="], 925 982 926 983 "is-alphanumerical": ["is-alphanumerical@2.0.1", "", { "dependencies": { "is-alphabetical": "^2.0.0", "is-decimal": "^2.0.0" } }, "sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw=="], 927 984 928 985 "is-decimal": ["is-decimal@2.0.1", "", {}, "sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A=="], 986 986 + 987 987 + "is-docker": ["is-docker@3.0.0", "", { "bin": { "is-docker": "cli.js" } }, "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ=="], 929 988 930 989 "is-hexadecimal": ["is-hexadecimal@2.0.1", "", {}, "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg=="], 931 990 991 991 + "is-in-ssh": ["is-in-ssh@1.0.0", "", {}, "sha512-jYa6Q9rH90kR1vKB6NM7qqd1mge3Fx4Dhw5TVlK1MUBqhEOuCagrEHMevNuCcbECmXZ0ThXkRm+Ymr51HwEPAw=="], 992 992 + 993 993 + "is-inside-container": ["is-inside-container@1.0.0", "", { "dependencies": { "is-docker": "^3.0.0" }, "bin": { "is-inside-container": "cli.js" } }, "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA=="], 994 994 + 932 995 "is-interactive": ["is-interactive@2.0.0", "", {}, "sha512-qP1vozQRI+BMOPcjFzrjXuQvdak2pHNUMZoeG2eRbiSqyvbEf/wQtEOTOX1guk6E3t36RkaqiSt8A/6YElNxLQ=="], 933 996 934 997 "is-plain-obj": ["is-plain-obj@4.1.0", "", {}, "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg=="], ··· 937 1000 938 1001 "is-unicode-supported": ["is-unicode-supported@1.3.0", "", {}, "sha512-43r2mRvz+8JRIKnWJ+3j8JtjRKZ6GmjzfaE/qiBJnikNnYv/6bagRJ1kUhNk8R5EX/GkobD+r+sfxCPJsiKBLQ=="], 939 1002 1003 1003 + "is-wsl": ["is-wsl@3.1.0", "", { "dependencies": { "is-inside-container": "^1.0.0" } }, "sha512-UcVfVfaK4Sc4m7X3dUSoHoozQGBEFeDC+zVo06t98xe8CzHSZZBekNXH+tu0NalHolcJ/QAGqS46Hef7QXBIMw=="], 1004 1004 + 940 1005 "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="], 941 1006 942 1007 "iso-datestring-validator": ["iso-datestring-validator@2.2.2", "", {}, "sha512-yLEMkBbLZTlVQqOnQ4FiMujR6T4DEcCb1xizmvXS+OxuhwcbtynoosRzdMA69zZCShCNAbi+gJ71FxZBBXx1SA=="], ··· 944 1009 "javascript-stringify": ["javascript-stringify@2.1.0", "", {}, "sha512-JVAfqNPTvNq3sB/VHQJAFxN/sPgKnsKrCwyRt15zwNCdrMMJDdcEOdubuy+DuJYYdm0ox1J4uzEuYKkN+9yhVg=="], 945 1010 946 1011 "jiti": ["jiti@2.6.1", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ=="], 1012 1012 + 1013 1013 + "jose": ["jose@5.10.0", "", {}, "sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg=="], 947 1014 948 1015 "js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="], 949 1016 ··· 1166 1233 "onetime": ["onetime@5.1.2", "", { "dependencies": { "mimic-fn": "^2.1.0" } }, "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg=="], 1167 1234 1168 1235 "oniguruma-to-es": ["oniguruma-to-es@2.3.0", "", { "dependencies": { "emoji-regex-xs": "^1.0.0", "regex": "^5.1.1", "regex-recursion": "^5.1.1" } }, "sha512-bwALDxriqfKGfUufKGGepCzu9x7nJQuoRoAFp4AnwehhC2crqrDIAP/uN2qdlsAvSMpeRC3+Yzhqc7hLmle5+g=="], 1236 1236 + 1237 1237 + "open": ["open@11.0.0", "", { "dependencies": { "default-browser": "^5.4.0", "define-lazy-prop": "^3.0.0", "is-in-ssh": "^1.0.0", "is-inside-container": "^1.0.0", "powershell-utils": "^0.1.0", "wsl-utils": "^0.3.0" } }, "sha512-smsWv2LzFjP03xmvFoJ331ss6h+jixfA4UUV/Bsiyuu4YJPfN+FIQGOIiv4w9/+MoHkfkJ22UIaQWRVFRfH6Vw=="], 1169 1238 1170 1239 "ora": ["ora@7.0.1", "", { "dependencies": { "chalk": "^5.3.0", "cli-cursor": "^4.0.0", "cli-spinners": "^2.9.0", "is-interactive": "^2.0.0", "is-unicode-supported": "^1.3.0", "log-symbols": "^5.1.0", "stdin-discarder": "^0.1.0", "string-width": "^6.1.0", "strip-ansi": "^7.1.0" } }, "sha512-0TUxTiFJWv+JnjWm4o9yvuskpEJLXTcng8MJuKd+SzAzp2o+OP3HWqNhB4OdJRt1Vsd9/mR0oyaEYlOnL7XIRw=="], 1171 1240 ··· 1209 1278 1210 1279 "postcss-value-parser": ["postcss-value-parser@4.2.0", "", {}, "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ=="], 1211 1280 1281 1281 + "powershell-utils": ["powershell-utils@0.1.0", "", {}, "sha512-dM0jVuXJPsDN6DvRpea484tCUaMiXWjuCn++HGTqUWzGDjv5tZkEZldAJ/UMlqRYGFrD/etByo4/xOuC/snX2A=="], 1282 1282 + 1212 1283 "property-information": ["property-information@6.5.0", "", {}, "sha512-PgTgs/BlvHxOu8QuEN7wi5A0OmXaBcHpmCSTehcs6Uuu9IkDIEo13Hy7n898RHfrQ49vKCoGeWZSaAK01nwVig=="], 1213 1284 1214 1285 "radix-ui": ["radix-ui@1.4.3", "", { "dependencies": { "@radix-ui/primitive": "1.1.3", "@radix-ui/react-accessible-icon": "1.1.7", "@radix-ui/react-accordion": "1.2.12", "@radix-ui/react-alert-dialog": "1.1.15", "@radix-ui/react-arrow": "1.1.7", "@radix-ui/react-aspect-ratio": "1.1.7", "@radix-ui/react-avatar": "1.1.10", "@radix-ui/react-checkbox": "1.3.3", "@radix-ui/react-collapsible": "1.1.12", "@radix-ui/react-collection": "1.1.7", "@radix-ui/react-compose-refs": "1.1.2", "@radix-ui/react-context": "1.1.2", "@radix-ui/react-context-menu": "2.2.16", "@radix-ui/react-dialog": "1.1.15", "@radix-ui/react-direction": "1.1.1", "@radix-ui/react-dismissable-layer": "1.1.11", "@radix-ui/react-dropdown-menu": "2.1.16", "@radix-ui/react-focus-guards": "1.1.3", "@radix-ui/react-focus-scope": "1.1.7", "@radix-ui/react-form": "0.1.8", "@radix-ui/react-hover-card": "1.1.15", "@radix-ui/react-label": "2.1.7", "@radix-ui/react-menu": "2.1.16", "@radix-ui/react-menubar": "1.1.16", "@radix-ui/react-navigation-menu": "1.2.14", "@radix-ui/react-one-time-password-field": "0.1.8", "@radix-ui/react-password-toggle-field": "0.1.3", "@radix-ui/react-popover": "1.1.15", "@radix-ui/react-popper": "1.2.8", "@radix-ui/react-portal": "1.1.9", "@radix-ui/react-presence": "1.1.5", "@radix-ui/react-primitive": "2.1.3", "@radix-ui/react-progress": "1.1.7", "@radix-ui/react-radio-group": "1.3.8", "@radix-ui/react-roving-focus": "1.1.11", "@radix-ui/react-scroll-area": "1.2.10", "@radix-ui/react-select": "2.2.6", "@radix-ui/react-separator": "1.1.7", "@radix-ui/react-slider": "1.3.6", "@radix-ui/react-slot": "1.2.3", "@radix-ui/react-switch": "1.2.6", "@radix-ui/react-tabs": "1.1.13", "@radix-ui/react-toast": "1.2.15", "@radix-ui/react-toggle": "1.1.10", "@radix-ui/react-toggle-group": "1.1.11", "@radix-ui/react-toolbar": "1.1.11", "@radix-ui/react-tooltip": "1.2.8", "@radix-ui/react-use-callback-ref": "1.1.1", "@radix-ui/react-use-controllable-state": "1.2.2", "@radix-ui/react-use-effect-event": "0.0.2", "@radix-ui/react-use-escape-keydown": "1.1.1", "@radix-ui/react-use-is-hydrated": "0.1.0", "@radix-ui/react-use-layout-effect": "1.1.1", "@radix-ui/react-use-size": "1.1.1", "@radix-ui/react-visually-hidden": "1.2.3" }, "peerDependencies": { "@types/react": "*", "@types/react-dom": "*", "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc", "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react", "@types/react-dom"] }, "sha512-aWizCQiyeAenIdUbqEpXgRA1ya65P13NKn/W8rWkcN0OPkRDxdBVLWnIEDsS2RpwCK2nobI7oMUSmexzTDyAmA=="], ··· 1283 1354 1284 1355 "roughjs": ["roughjs@4.6.6", "", { "dependencies": { "hachure-fill": "^0.5.2", "path-data-parser": "^0.1.0", "points-on-curve": "^0.2.0", "points-on-path": "^0.2.1" } }, "sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ=="], 1285 1356 1357 1357 + "run-applescript": ["run-applescript@7.1.0", "", {}, "sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q=="], 1358 1358 + 1286 1359 "rw": ["rw@1.3.3", "", {}, "sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ=="], 1287 1360 1288 1361 "safe-buffer": ["safe-buffer@5.2.1", "", {}, "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="], ··· 1297 1370 1298 1371 "sequoia-cli": ["sequoia-cli@workspace:packages/cli"], 1299 1372 1373 1373 + "sequoia-ui": ["sequoia-ui@workspace:packages/ui"], 1374 1374 + 1300 1375 "serve-static": ["serve-static@1.16.3", "", { "dependencies": { "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "parseurl": "~1.3.3", "send": "~0.19.1" } }, "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA=="], 1301 1376 1302 1377 "set-cookie-parser": ["set-cookie-parser@2.7.2", "", {}, "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw=="], ··· 1375 1450 1376 1451 "uint8arrays": ["uint8arrays@3.0.0", "", { "dependencies": { "multiformats": "^9.4.2" } }, "sha512-HRCx0q6O9Bfbp+HHSfQQKD7wU70+lydKVt4EghkdOvlK/NlrF90z+eXV34mUd48rNvVJXwkrMSPpCATkct8fJA=="], 1377 1452 1453 1453 + "undici": ["undici@6.23.0", "", {}, "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g=="], 1454 1454 + 1378 1455 "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="], 1379 1456 1380 1457 "unicode-segmenter": ["unicode-segmenter@0.14.5", "", {}, "sha512-jHGmj2LUuqDcX3hqY12Ql+uhUTn8huuxNZGq7GvtF6bSybzH3aFgedYu/KTzQStEgt1Ra2F3HxadNXsNjb3m3g=="], ··· 1444 1521 "web-namespaces": ["web-namespaces@2.0.1", "", {}, "sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ=="], 1445 1522 1446 1523 "which": ["which@2.0.2", "", { "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "./bin/node-which" } }, "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA=="], 1524 1524 + 1525 1525 + "wsl-utils": ["wsl-utils@0.3.1", "", { "dependencies": { "is-wsl": "^3.1.0", "powershell-utils": "^0.1.0" } }, "sha512-g/eziiSUNBSsdDJtCLB8bdYEUMj4jR7AGeUo96p/3dTafgjHhpF4RiCFPiRILwjQoDXx5MqkBr4fwWtR3Ky4Wg=="], 1447 1526 1448 1527 "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="], 1449 1528

+34 -1

docs/docs/pages/cli-reference.mdx

··· 1 1 # CLI Reference 2 2 3 3 + ## `login` 4 4 + 5 5 + ```bash [Terminal] 6 6 + sequoia login 7 7 + > Login with OAuth (browser-based authentication) 8 8 + 9 9 + OPTIONS: 10 10 + --logout <str> - Remove OAuth session for a specific DID [optional] 11 11 + 12 12 + FLAGS: 13 13 + --list - List all stored OAuth sessions [optional] 14 14 + --help, -h - show help [optional] 15 15 + ``` 16 16 + 17 17 + OAuth is the recommended authentication method as it scopes permissions and refreshes tokens automatically. 18 18 + 3 19 ## `auth` 4 20 5 21 ```bash [Terminal] 6 22 sequoia auth 7 7 - > Authenticate with your ATProto PDS 23 23 + > Authenticate with your ATProto PDS using an app password 8 24 9 25 OPTIONS: 10 26 --logout <str> - Remove credentials for a specific identity (or all if only one exists) [optional] ··· 13 29 --list - List all stored identities [optional] 14 30 --help, -h - show help [optional] 15 31 ``` 32 32 + 33 33 + Use this as an alternative to `login` when OAuth isn't available or for CI environments. 16 34 17 35 ## `init` 18 36 ··· 61 79 --dry-run, -n - Preview what would be synced without making changes [optional] 62 80 --help, -h - show help [optional] 63 81 ``` 82 82 + 83 83 + ## `update` 84 84 + 85 85 + ```bash [Terminal] 86 86 + sequoia update 87 87 + > Update local config or ATProto publication record 88 88 + 89 89 + FLAGS: 90 90 + --help, -h - show help [optional] 91 91 + ``` 92 92 + 93 93 + Interactive command to modify your existing configuration. Choose between: 94 94 + 95 95 + - **Local configuration**: Edit `sequoia.json` settings including site URL, directory paths, frontmatter mappings, advanced options, and Bluesky settings 96 96 + - **ATProto publication**: Update your publication record's name, description, URL, icon, and discover visibility

+13

docs/docs/pages/config.mdx

··· 17 17 | `frontmatter.slugField` | `string` | No | - | Frontmatter field to use for slug (defaults to filepath) | 18 18 | `ignore` | `string[]` | No | - | Glob patterns for files to ignore | 19 19 | `removeIndexFromSlug` | `boolean` | No | `false` | Remove `/index` or `/_index` suffix from slugs | 20 20 + | `stripDatePrefix` | `boolean` | No | `false` | Remove `YYYY-MM-DD-` date prefixes from slugs (Jekyll-style) | 20 21 | `bluesky` | `object` | No | - | Bluesky posting configuration | 21 22 | `bluesky.enabled` | `boolean` | No | `false` | Post to Bluesky when publishing documents | 22 23 | `bluesky.maxAgeDays` | `number` | No | `30` | Only post documents published within this many days | ··· 95 96 ``` 96 97 97 98 If the frontmatter field is not found, it falls back to the filepath. 99 99 + 100 100 + ### Jekyll-Style Date Prefixes 101 101 + 102 102 + Jekyll uses date prefixes in filenames (e.g., `2024-01-15-my-post.md`) for ordering posts. To strip these from generated slugs: 103 103 + 104 104 + ```json 105 105 + { 106 106 + "stripDatePrefix": true 107 107 + } 108 108 + ``` 109 109 + 110 110 + This transforms `2024-01-15-my-post.md` into the slug `my-post`. 98 111 99 112 ### Ignoring Files 100 113

+9 -7

docs/docs/pages/quickstart.mdx

··· 31 31 sequoia 32 32 ``` 33 33 34 34 - ### Authorize 35 35 - 36 36 - In order for Sequoia to publish or update records on your PDS, you need to authorize it with your ATProto handle and an app password. 34 34 + ### Login 37 35 38 38 - :::tip 39 39 - You can create an app password [here](https://bsky.app/settings/app-passwords) 40 40 - ::: 36 36 + In order for Sequoia to publish or update records on your PDS, you need to authenticate with your ATProto account. 41 37 42 38 ```bash [Terminal] 43 43 - sequoia auth 39 39 + sequoia login 44 40 ``` 41 41 + 42 42 + This will open your browser to complete OAuth authentication, and your sessions will refresh automatically as you use the CLI. 43 43 + 44 44 + :::tip 45 45 + Alternatively, you can use `sequoia auth` to authenticate with an [app password](https://bsky.app/settings/app-passwords) instead of OAuth. 46 46 + ::: 45 47 46 48 ### Initialize 47 49

docs/docs/public/icon-dark.png

This is a binary file and will not be displayed.

docs/docs/public/og.png

This is a binary file and will not be displayed.

+4 -2

packages/cli/package.json

··· 1 1 { 2 2 "name": "sequoia-cli", 3 3 - "version": "0.2.1", 3 3 + "version": "0.3.3", 4 4 "type": "module", 5 5 "bin": { 6 6 "sequoia": "dist/index.js" ··· 30 30 }, 31 31 "dependencies": { 32 32 "@atproto/api": "^0.18.17", 33 33 + "@atproto/oauth-client-node": "^0.3.16", 33 34 "@clack/prompts": "^1.0.0", 34 35 "cmd-ts": "^0.14.3", 35 36 "glob": "^13.0.0", 36 37 "mime-types": "^2.1.35", 37 37 - "minimatch": "^10.1.1" 38 38 + "minimatch": "^10.1.1", 39 39 + "open": "^11.0.0" 38 40 } 39 41 }

+1

packages/cli/src/commands/auth.ts

··· 158 158 159 159 // Save credentials 160 160 await saveCredentials({ 161 161 + type: "app-password", 161 162 pdsUrl, 162 163 identifier: identifier, 163 164 password: appPassword,

+28 -7

packages/cli/src/commands/init.ts

··· 13 13 } from "@clack/prompts"; 14 14 import * as path from "node:path"; 15 15 import { findConfig, generateConfigTemplate } from "../lib/config"; 16 16 - import { loadCredentials } from "../lib/credentials"; 16 16 + import { loadCredentials, listAllCredentials } from "../lib/credentials"; 17 17 import { createAgent, createPublication } from "../lib/atproto"; 18 18 + import { selectCredential } from "../lib/credential-select"; 18 19 import type { FrontmatterMapping, BlueskyConfig } from "../lib/types"; 19 20 20 21 async function fileExists(filePath: string): Promise<boolean> { ··· 186 187 } 187 188 188 189 let publicationUri: string; 189 189 - const credentials = await loadCredentials(); 190 190 + let credentials = await loadCredentials(); 190 191 191 192 if (publicationChoice === "create") { 192 193 // Need credentials to create a publication 193 194 if (!credentials) { 195 195 + // Check if there are multiple identities - if so, prompt to select 196 196 + const allCredentials = await listAllCredentials(); 197 197 + if (allCredentials.length > 1) { 198 198 + credentials = await selectCredential(allCredentials); 199 199 + } else if (allCredentials.length === 1) { 200 200 + // Single credential exists but couldn't be loaded - try to load it explicitly 201 201 + credentials = await selectCredential(allCredentials); 202 202 + } else { 203 203 + log.error( 204 204 + "You must authenticate first. Run 'sequoia login' (recommended) or 'sequoia auth' before creating a publication.", 205 205 + ); 206 206 + process.exit(1); 207 207 + } 208 208 + } 209 209 + 210 210 + if (!credentials) { 194 211 log.error( 195 195 - "You must authenticate first. Run 'sequoia auth' before creating a publication.", 212 212 + "Could not load credentials. Try running 'sequoia login' again to re-authenticate.", 196 213 ); 197 214 process.exit(1); 198 215 } ··· 206 223 } catch (_error) { 207 224 s.stop("Failed to connect"); 208 225 log.error( 209 209 - "Failed to connect. Check your credentials with 'sequoia auth'.", 226 226 + "Failed to connect. Try re-authenticating with 'sequoia login' or 'sequoia auth'.", 210 227 ); 211 228 process.exit(1); 212 229 } ··· 287 304 defaultValue: "7", 288 305 placeholder: "7", 289 306 validate: (value) => { 290 290 - const num = parseInt(value, 10); 307 307 + if (!value) { 308 308 + return "Please enter a number"; 309 309 + } 310 310 + const num = Number.parseInt(value, 10); 291 311 if (Number.isNaN(num) || num < 1) { 292 312 return "Please enter a positive number"; 293 313 } ··· 305 325 }; 306 326 } 307 327 308 308 - // Get PDS URL from credentials (already loaded earlier) 309 309 - const pdsUrl = credentials?.pdsUrl; 328 328 + // Get PDS URL from credentials (only available for app-password auth) 329 329 + const pdsUrl = 330 330 + credentials?.type === "app-password" ? credentials.pdsUrl : undefined; 310 331 311 332 // Generate config file 312 333 const configContent = generateConfigTemplate({

+305

packages/cli/src/commands/login.ts

··· 1 1 + import * as http from "node:http"; 2 2 + import { log, note, select, spinner, text } from "@clack/prompts"; 3 3 + import { command, flag, option, optional, string } from "cmd-ts"; 4 4 + import { resolveHandleToDid } from "../lib/atproto"; 5 5 + import { 6 6 + getCallbackPort, 7 7 + getOAuthClient, 8 8 + getOAuthScope, 9 9 + } from "../lib/oauth-client"; 10 10 + import { 11 11 + deleteOAuthSession, 12 12 + getOAuthStorePath, 13 13 + listOAuthSessions, 14 14 + listOAuthSessionsWithHandles, 15 15 + setOAuthHandle, 16 16 + } from "../lib/oauth-store"; 17 17 + import { exitOnCancel } from "../lib/prompts"; 18 18 + 19 19 + const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes 20 20 + 21 21 + export const loginCommand = command({ 22 22 + name: "login", 23 23 + description: "Login with OAuth (browser-based authentication)", 24 24 + args: { 25 25 + logout: option({ 26 26 + long: "logout", 27 27 + description: "Remove OAuth session for a specific DID", 28 28 + type: optional(string), 29 29 + }), 30 30 + list: flag({ 31 31 + long: "list", 32 32 + description: "List all stored OAuth sessions", 33 33 + }), 34 34 + }, 35 35 + handler: async ({ logout, list }) => { 36 36 + // List sessions 37 37 + if (list) { 38 38 + const sessions = await listOAuthSessionsWithHandles(); 39 39 + if (sessions.length === 0) { 40 40 + log.info("No OAuth sessions stored"); 41 41 + } else { 42 42 + log.info("OAuth sessions:"); 43 43 + for (const { did, handle } of sessions) { 44 44 + console.log(` - ${handle || did} (${did})`); 45 45 + } 46 46 + } 47 47 + return; 48 48 + } 49 49 + 50 50 + // Logout 51 51 + if (logout !== undefined) { 52 52 + const did = logout || undefined; 53 53 + 54 54 + if (!did) { 55 55 + // No DID provided - show available and prompt 56 56 + const sessions = await listOAuthSessions(); 57 57 + if (sessions.length === 0) { 58 58 + log.info("No OAuth sessions found"); 59 59 + return; 60 60 + } 61 61 + if (sessions.length === 1) { 62 62 + const deleted = await deleteOAuthSession(sessions[0]!); 63 63 + if (deleted) { 64 64 + log.success(`Removed OAuth session for ${sessions[0]}`); 65 65 + } 66 66 + return; 67 67 + } 68 68 + // Multiple sessions - prompt 69 69 + const selected = exitOnCancel( 70 70 + await select({ 71 71 + message: "Select session to remove:", 72 72 + options: sessions.map((d) => ({ value: d, label: d })), 73 73 + }), 74 74 + ); 75 75 + const deleted = await deleteOAuthSession(selected); 76 76 + if (deleted) { 77 77 + log.success(`Removed OAuth session for ${selected}`); 78 78 + } 79 79 + return; 80 80 + } 81 81 + 82 82 + const deleted = await deleteOAuthSession(did); 83 83 + if (deleted) { 84 84 + log.success(`Removed OAuth session for ${did}`); 85 85 + } else { 86 86 + log.info(`No OAuth session found for ${did}`); 87 87 + } 88 88 + return; 89 89 + } 90 90 + 91 91 + // OAuth login flow 92 92 + note( 93 93 + "OAuth login will open your browser to authenticate.\n\n" + 94 94 + "This is more secure than app passwords and tokens refresh automatically.", 95 95 + "OAuth Login", 96 96 + ); 97 97 + 98 98 + const handle = exitOnCancel( 99 99 + await text({ 100 100 + message: "Handle or DID:", 101 101 + placeholder: "yourhandle.bsky.social", 102 102 + }), 103 103 + ); 104 104 + 105 105 + if (!handle) { 106 106 + log.error("Handle is required"); 107 107 + process.exit(1); 108 108 + } 109 109 + 110 110 + const s = spinner(); 111 111 + s.start("Resolving identity..."); 112 112 + 113 113 + let did: string; 114 114 + try { 115 115 + did = await resolveHandleToDid(handle); 116 116 + s.stop(`Identity resolved`); 117 117 + } catch (error) { 118 118 + s.stop("Failed to resolve identity"); 119 119 + if (error instanceof Error) { 120 120 + log.error(`Error: ${error.message}`); 121 121 + } else { 122 122 + log.error(`Error: ${error}`); 123 123 + } 124 124 + process.exit(1); 125 125 + } 126 126 + 127 127 + s.start("Initializing OAuth..."); 128 128 + 129 129 + try { 130 130 + const client = await getOAuthClient(); 131 131 + 132 132 + // Generate authorization URL using the resolved DID 133 133 + const authUrl = await client.authorize(did, { 134 134 + scope: getOAuthScope(), 135 135 + }); 136 136 + 137 137 + log.info(`Login URL: ${authUrl}`); 138 138 + 139 139 + s.message("Opening browser..."); 140 140 + 141 141 + // Try to open browser 142 142 + let browserOpened = true; 143 143 + try { 144 144 + const open = (await import("open")).default; 145 145 + await open(authUrl.toString()); 146 146 + } catch { 147 147 + browserOpened = false; 148 148 + } 149 149 + 150 150 + s.message("Waiting for authentication..."); 151 151 + 152 152 + // Show URL info 153 153 + if (!browserOpened) { 154 154 + s.stop("Could not open browser automatically"); 155 155 + log.warn("Please open the following URL in your browser:"); 156 156 + log.info(authUrl.toString()); 157 157 + s.start("Waiting for authentication..."); 158 158 + } 159 159 + 160 160 + // Start HTTP server to receive callback 161 161 + const result = await waitForCallback(); 162 162 + 163 163 + if (!result.success) { 164 164 + s.stop("Authentication failed"); 165 165 + log.error(result.error || "OAuth callback failed"); 166 166 + process.exit(1); 167 167 + } 168 168 + 169 169 + s.message("Completing authentication..."); 170 170 + 171 171 + // Exchange code for tokens 172 172 + const { session } = await client.callback( 173 173 + new URLSearchParams(result.params!), 174 174 + ); 175 175 + 176 176 + // Store the handle for friendly display 177 177 + // Use the original handle input (unless it was a DID) 178 178 + const handleToStore = handle.startsWith("did:") ? undefined : handle; 179 179 + if (handleToStore) { 180 180 + await setOAuthHandle(session.did, handleToStore); 181 181 + } 182 182 + 183 183 + // Try to get the handle for display (use the original handle input as fallback) 184 184 + const displayName = handleToStore || session.did; 185 185 + 186 186 + s.stop(`Logged in as ${displayName}`); 187 187 + 188 188 + log.success(`OAuth session saved to ${getOAuthStorePath()}`); 189 189 + log.info("Your session will refresh automatically when needed."); 190 190 + 191 191 + // Exit cleanly - the OAuth client may have background processes 192 192 + process.exit(0); 193 193 + } catch (error) { 194 194 + s.stop("OAuth login failed"); 195 195 + if (error instanceof Error) { 196 196 + log.error(`Error: ${error.message}`); 197 197 + } else { 198 198 + log.error(`Error: ${error}`); 199 199 + } 200 200 + process.exit(1); 201 201 + } 202 202 + }, 203 203 + }); 204 204 + 205 205 + interface CallbackResult { 206 206 + success: boolean; 207 207 + params?: Record<string, string>; 208 208 + error?: string; 209 209 + } 210 210 + 211 211 + function waitForCallback(): Promise<CallbackResult> { 212 212 + return new Promise((resolve) => { 213 213 + const port = getCallbackPort(); 214 214 + let timeoutId: ReturnType<typeof setTimeout> | undefined; 215 215 + 216 216 + const server = http.createServer((req, res) => { 217 217 + const url = new URL(req.url || "/", `http://127.0.0.1:${port}`); 218 218 + 219 219 + if (url.pathname === "/oauth/callback") { 220 220 + const params: Record<string, string> = {}; 221 221 + url.searchParams.forEach((value, key) => { 222 222 + params[key] = value; 223 223 + }); 224 224 + 225 225 + // Clear the timeout 226 226 + if (timeoutId) clearTimeout(timeoutId); 227 227 + 228 228 + // Check for error 229 229 + if (params.error) { 230 230 + res.writeHead(200, { "Content-Type": "text/html" }); 231 231 + res.end(` 232 232 + <html> 233 233 + <head> 234 234 + <link href="https://fonts.googleapis.com/css2?family=Josefin+Sans:wght@400;700&display=swap" rel="stylesheet"> 235 235 + </head> 236 236 + <body style="background: #1A1A1A; color: #F5F3EF; font-family: 'Josefin Sans', system-ui; padding: 2rem; text-align: center; display: flex; flex-direction: column; justify-content: center; align-items: center; min-height: 100vh; margin: 0;"> 237 237 + <img src="https://sequoia.pub/icon-dark.png" alt="sequoia icon" style="width: 100px; height: 100px;" /> 238 238 + <h1 style="font-weight: 400;">Authentication Failed</h1> 239 239 + <p>${params.error_description || params.error}</p> 240 240 + <p>You can close this window.</p> 241 241 + </body> 242 242 + </html> 243 243 + `); 244 244 + server.close(() => { 245 245 + resolve({ 246 246 + success: false, 247 247 + error: params.error_description || params.error, 248 248 + }); 249 249 + }); 250 250 + return; 251 251 + } 252 252 + 253 253 + // Success 254 254 + res.writeHead(200, { "Content-Type": "text/html" }); 255 255 + res.end(` 256 256 + <html> 257 257 + <head> 258 258 + <link href="https://fonts.googleapis.com/css2?family=Josefin+Sans:wght@400;700&display=swap" rel="stylesheet"> 259 259 + </head> 260 260 + <body style="background: #1A1A1A; color: #F5F3EF; font-family: 'Josefin Sans', system-ui; padding: 2rem; text-align: center; display: flex; flex-direction: column; justify-content: center; align-items: center; min-height: 100vh; margin: 0;"> 261 261 + <img src="https://sequoia.pub/icon-dark.png" alt="sequoia icon" style="width: 100px; height: 100px;" /> 262 262 + <h1 style="font-weight: 400;">Authentication Successful</h1> 263 263 + <p>You can close this window and return to the terminal.</p> 264 264 + </body> 265 265 + </html> 266 266 + `); 267 267 + server.close(() => { 268 268 + resolve({ success: true, params }); 269 269 + }); 270 270 + return; 271 271 + } 272 272 + 273 273 + // Not the callback path 274 274 + res.writeHead(404); 275 275 + res.end("Not found"); 276 276 + }); 277 277 + 278 278 + server.on("error", (err: NodeJS.ErrnoException) => { 279 279 + if (timeoutId) clearTimeout(timeoutId); 280 280 + if (err.code === "EADDRINUSE") { 281 281 + resolve({ 282 282 + success: false, 283 283 + error: `Port ${port} is already in use. Please close the application using that port and try again.`, 284 284 + }); 285 285 + } else { 286 286 + resolve({ 287 287 + success: false, 288 288 + error: `Server error: ${err.message}`, 289 289 + }); 290 290 + } 291 291 + }); 292 292 + 293 293 + server.listen(port, "127.0.0.1"); 294 294 + 295 295 + // Timeout after 5 minutes 296 296 + timeoutId = setTimeout(() => { 297 297 + server.close(() => { 298 298 + resolve({ 299 299 + success: false, 300 300 + error: "Timeout waiting for OAuth callback. Please try again.", 301 301 + }); 302 302 + }); 303 303 + }, CALLBACK_TIMEOUT_MS); 304 304 + }); 305 305 + }

+50 -8

packages/cli/src/commands/publish.ts

··· 5 5 import { loadConfig, loadState, saveState, findConfig } from "../lib/config"; 6 6 import { 7 7 loadCredentials, 8 8 - listCredentials, 8 8 + listAllCredentials, 9 9 getCredentials, 10 10 } from "../lib/credentials"; 11 11 + import { getOAuthHandle, getOAuthSession } from "../lib/oauth-store"; 11 12 import { 12 13 createAgent, 13 14 createDocument, ··· 59 60 60 61 // If no credentials resolved, check if we need to prompt for identity selection 61 62 if (!credentials) { 62 62 - const identities = await listCredentials(); 63 63 + const identities = await listAllCredentials(); 63 64 if (identities.length === 0) { 64 64 - log.error("No credentials found. Run 'sequoia auth' first."); 65 65 + log.error( 66 66 + "No credentials found. Run 'sequoia login' or 'sequoia auth' first.", 67 67 + ); 65 68 log.info( 66 69 "Or set ATP_IDENTIFIER and ATP_APP_PASSWORD environment variables.", 67 70 ); 68 71 process.exit(1); 69 72 } 70 73 74 74 + // Build labels with handles for OAuth sessions 75 75 + const options = await Promise.all( 76 76 + identities.map(async (cred) => { 77 77 + if (cred.type === "oauth") { 78 78 + const handle = await getOAuthHandle(cred.id); 79 79 + return { 80 80 + value: cred.id, 81 81 + label: `${handle || cred.id} (OAuth)`, 82 82 + }; 83 83 + } 84 84 + return { 85 85 + value: cred.id, 86 86 + label: `${cred.id} (App Password)`, 87 87 + }; 88 88 + }), 89 89 + ); 90 90 + 71 91 // Multiple identities exist but none selected - prompt user 72 92 log.info("Multiple identities found. Select one to use:"); 73 93 const selected = exitOnCancel( 74 94 await select({ 75 95 message: "Identity:", 76 76 - options: identities.map((id) => ({ value: id, label: id })), 96 96 + options, 77 97 }), 78 98 ); 79 99 80 80 - credentials = await getCredentials(selected); 100 100 + // Load the selected credentials 101 101 + const selectedCred = identities.find((c) => c.id === selected); 102 102 + if (selectedCred?.type === "oauth") { 103 103 + const session = await getOAuthSession(selected); 104 104 + if (session) { 105 105 + const handle = await getOAuthHandle(selected); 106 106 + credentials = { 107 107 + type: "oauth", 108 108 + did: selected, 109 109 + handle: handle || selected, 110 110 + }; 111 111 + } 112 112 + } else { 113 113 + credentials = await getCredentials(selected); 114 114 + } 115 115 + 81 116 if (!credentials) { 82 117 log.error("Failed to load selected credentials."); 83 118 process.exit(1); 84 119 } 85 120 121 121 + const displayId = 122 122 + credentials.type === "oauth" 123 123 + ? credentials.handle || credentials.did 124 124 + : credentials.identifier; 86 125 log.info( 87 87 - `Tip: Add "identity": "${selected}" to sequoia.json to use this by default.`, 126 126 + `Tip: Add "identity": "${displayId}" to sequoia.json to use this by default.`, 88 127 ); 89 128 } 90 129 ··· 110 149 ignorePatterns: config.ignore, 111 150 slugField: config.frontmatter?.slugField, 112 151 removeIndexFromSlug: config.removeIndexFromSlug, 152 152 + stripDatePrefix: config.stripDatePrefix, 113 153 }); 114 154 s.stop(`Found ${posts.length} posts`); 115 155 ··· 205 245 } 206 246 207 247 // Create agent 208 208 - s.start(`Connecting to ${credentials.pdsUrl}...`); 248 248 + const connectingTo = 249 249 + credentials.type === "oauth" ? credentials.handle : credentials.pdsUrl; 250 250 + s.start(`Connecting as ${connectingTo}...`); 209 251 let agent: Awaited<ReturnType<typeof createAgent>> | undefined; 210 252 try { 211 253 agent = await createAgent(credentials); 212 212 - s.stop(`Logged in as ${agent.session?.handle}`); 254 254 + s.stop(`Logged in as ${agent.did}`); 213 255 } catch (error) { 214 256 s.stop("Failed to login"); 215 257 log.error(`Failed to login: ${error}`);

+45 -7

packages/cli/src/commands/sync.ts

··· 5 5 import { loadConfig, loadState, saveState, findConfig } from "../lib/config"; 6 6 import { 7 7 loadCredentials, 8 8 - listCredentials, 8 8 + listAllCredentials, 9 9 getCredentials, 10 10 } from "../lib/credentials"; 11 11 + import { getOAuthHandle, getOAuthSession } from "../lib/oauth-store"; 11 12 import { createAgent, listDocuments } from "../lib/atproto"; 12 13 import { 13 14 scanContentDirectory, ··· 49 50 let credentials = await loadCredentials(config.identity); 50 51 51 52 if (!credentials) { 52 52 - const identities = await listCredentials(); 53 53 + const identities = await listAllCredentials(); 53 54 if (identities.length === 0) { 54 54 - log.error("No credentials found. Run 'sequoia auth' first."); 55 55 + log.error( 56 56 + "No credentials found. Run 'sequoia login' or 'sequoia auth' first.", 57 57 + ); 55 58 process.exit(1); 56 59 } 60 60 + 61 61 + // Build labels with handles for OAuth sessions 62 62 + const options = await Promise.all( 63 63 + identities.map(async (cred) => { 64 64 + if (cred.type === "oauth") { 65 65 + const handle = await getOAuthHandle(cred.id); 66 66 + return { 67 67 + value: cred.id, 68 68 + label: `${handle || cred.id} (OAuth)`, 69 69 + }; 70 70 + } 71 71 + return { 72 72 + value: cred.id, 73 73 + label: `${cred.id} (App Password)`, 74 74 + }; 75 75 + }), 76 76 + ); 57 77 58 78 log.info("Multiple identities found. Select one to use:"); 59 79 const selected = exitOnCancel( 60 80 await select({ 61 81 message: "Identity:", 62 62 - options: identities.map((id) => ({ value: id, label: id })), 82 82 + options, 63 83 }), 64 84 ); 65 85 66 66 - credentials = await getCredentials(selected); 86 86 + // Load the selected credentials 87 87 + const selectedCred = identities.find((c) => c.id === selected); 88 88 + if (selectedCred?.type === "oauth") { 89 89 + const session = await getOAuthSession(selected); 90 90 + if (session) { 91 91 + const handle = await getOAuthHandle(selected); 92 92 + credentials = { 93 93 + type: "oauth", 94 94 + did: selected, 95 95 + handle: handle || selected, 96 96 + }; 97 97 + } 98 98 + } else { 99 99 + credentials = await getCredentials(selected); 100 100 + } 101 101 + 67 102 if (!credentials) { 68 103 log.error("Failed to load selected credentials."); 69 104 process.exit(1); ··· 72 107 73 108 // Create agent 74 109 const s = spinner(); 75 75 - s.start(`Connecting to ${credentials.pdsUrl}...`); 110 110 + const connectingTo = 111 111 + credentials.type === "oauth" ? credentials.handle : credentials.pdsUrl; 112 112 + s.start(`Connecting as ${connectingTo}...`); 76 113 let agent: Awaited<ReturnType<typeof createAgent>> | undefined; 77 114 try { 78 115 agent = await createAgent(credentials); 79 79 - s.stop(`Logged in as ${agent.session?.handle}`); 116 116 + s.stop(`Logged in as ${agent.did}`); 80 117 } catch (error) { 81 118 s.stop("Failed to login"); 82 119 log.error(`Failed to login: ${error}`); ··· 105 142 ignorePatterns: config.ignore, 106 143 slugField: config.frontmatter?.slugField, 107 144 removeIndexFromSlug: config.removeIndexFromSlug, 145 145 + stripDatePrefix: config.stripDatePrefix, 108 146 }); 109 147 s.stop(`Found ${localPosts.length} local posts`); 110 148

+624

packages/cli/src/commands/update.ts

··· 1 1 + import * as fs from "node:fs/promises"; 2 2 + import { command } from "cmd-ts"; 3 3 + import { 4 4 + intro, 5 5 + outro, 6 6 + note, 7 7 + text, 8 8 + confirm, 9 9 + select, 10 10 + spinner, 11 11 + log, 12 12 + } from "@clack/prompts"; 13 13 + import { findConfig, loadConfig, generateConfigTemplate } from "../lib/config"; 14 14 + import { 15 15 + loadCredentials, 16 16 + listAllCredentials, 17 17 + getCredentials, 18 18 + } from "../lib/credentials"; 19 19 + import { getOAuthHandle, getOAuthSession } from "../lib/oauth-store"; 20 20 + import { createAgent, getPublication, updatePublication } from "../lib/atproto"; 21 21 + import { exitOnCancel } from "../lib/prompts"; 22 22 + import type { 23 23 + PublisherConfig, 24 24 + FrontmatterMapping, 25 25 + BlueskyConfig, 26 26 + } from "../lib/types"; 27 27 + 28 28 + export const updateCommand = command({ 29 29 + name: "update", 30 30 + description: "Update local config or ATProto publication record", 31 31 + args: {}, 32 32 + handler: async () => { 33 33 + intro("Sequoia Update"); 34 34 + 35 35 + // Check if config exists 36 36 + const configPath = await findConfig(); 37 37 + if (!configPath) { 38 38 + log.error("No configuration found. Run 'sequoia init' first."); 39 39 + process.exit(1); 40 40 + } 41 41 + 42 42 + const config = await loadConfig(configPath); 43 43 + 44 44 + // Ask what to update 45 45 + const updateChoice = exitOnCancel( 46 46 + await select({ 47 47 + message: "What would you like to update?", 48 48 + options: [ 49 49 + { label: "Local configuration (sequoia.json)", value: "config" }, 50 50 + { label: "ATProto publication record", value: "publication" }, 51 51 + ], 52 52 + }), 53 53 + ); 54 54 + 55 55 + if (updateChoice === "config") { 56 56 + await updateConfigFlow(config, configPath); 57 57 + } else { 58 58 + await updatePublicationFlow(config); 59 59 + } 60 60 + 61 61 + outro("Update complete!"); 62 62 + }, 63 63 + }); 64 64 + 65 65 + async function updateConfigFlow( 66 66 + config: PublisherConfig, 67 67 + configPath: string, 68 68 + ): Promise<void> { 69 69 + // Show current config summary 70 70 + const configSummary = [ 71 71 + `Site URL: ${config.siteUrl}`, 72 72 + `Content Dir: ${config.contentDir}`, 73 73 + `Path Prefix: ${config.pathPrefix || "/posts"}`, 74 74 + `Publication URI: ${config.publicationUri}`, 75 75 + config.imagesDir ? `Images Dir: ${config.imagesDir}` : null, 76 76 + config.outputDir ? `Output Dir: ${config.outputDir}` : null, 77 77 + config.bluesky?.enabled ? `Bluesky: enabled` : null, 78 78 + ] 79 79 + .filter(Boolean) 80 80 + .join("\n"); 81 81 + 82 82 + note(configSummary, "Current Configuration"); 83 83 + 84 84 + let configUpdated = { ...config }; 85 85 + let editing = true; 86 86 + 87 87 + while (editing) { 88 88 + const section = exitOnCancel( 89 89 + await select({ 90 90 + message: "Select a section to edit:", 91 91 + options: [ 92 92 + { label: "Site settings (siteUrl, pathPrefix)", value: "site" }, 93 93 + { 94 94 + label: 95 95 + "Directory paths (contentDir, imagesDir, publicDir, outputDir)", 96 96 + value: "directories", 97 97 + }, 98 98 + { 99 99 + label: 100 100 + "Frontmatter mappings (title, description, publishDate, etc.)", 101 101 + value: "frontmatter", 102 102 + }, 103 103 + { 104 104 + label: 105 105 + "Advanced options (pdsUrl, identity, ignore, removeIndexFromSlug, etc.)", 106 106 + value: "advanced", 107 107 + }, 108 108 + { 109 109 + label: "Bluesky settings (enabled, maxAgeDays)", 110 110 + value: "bluesky", 111 111 + }, 112 112 + { label: "Done editing", value: "done" }, 113 113 + ], 114 114 + }), 115 115 + ); 116 116 + 117 117 + if (section === "done") { 118 118 + editing = false; 119 119 + continue; 120 120 + } 121 121 + 122 122 + switch (section) { 123 123 + case "site": 124 124 + configUpdated = await editSiteSettings(configUpdated); 125 125 + break; 126 126 + case "directories": 127 127 + configUpdated = await editDirectories(configUpdated); 128 128 + break; 129 129 + case "frontmatter": 130 130 + configUpdated = await editFrontmatter(configUpdated); 131 131 + break; 132 132 + case "advanced": 133 133 + configUpdated = await editAdvanced(configUpdated); 134 134 + break; 135 135 + case "bluesky": 136 136 + configUpdated = await editBluesky(configUpdated); 137 137 + break; 138 138 + } 139 139 + } 140 140 + 141 141 + // Confirm before saving 142 142 + const shouldSave = exitOnCancel( 143 143 + await confirm({ 144 144 + message: "Save changes to sequoia.json?", 145 145 + initialValue: true, 146 146 + }), 147 147 + ); 148 148 + 149 149 + if (shouldSave) { 150 150 + const configContent = generateConfigTemplate({ 151 151 + siteUrl: configUpdated.siteUrl, 152 152 + contentDir: configUpdated.contentDir, 153 153 + imagesDir: configUpdated.imagesDir, 154 154 + publicDir: configUpdated.publicDir, 155 155 + outputDir: configUpdated.outputDir, 156 156 + pathPrefix: configUpdated.pathPrefix, 157 157 + publicationUri: configUpdated.publicationUri, 158 158 + pdsUrl: configUpdated.pdsUrl, 159 159 + frontmatter: configUpdated.frontmatter, 160 160 + ignore: configUpdated.ignore, 161 161 + removeIndexFromSlug: configUpdated.removeIndexFromSlug, 162 162 + stripDatePrefix: configUpdated.stripDatePrefix, 163 163 + textContentField: configUpdated.textContentField, 164 164 + bluesky: configUpdated.bluesky, 165 165 + }); 166 166 + 167 167 + await fs.writeFile(configPath, configContent); 168 168 + log.success("Configuration saved!"); 169 169 + } else { 170 170 + log.info("Changes discarded."); 171 171 + } 172 172 + } 173 173 + 174 174 + async function editSiteSettings( 175 175 + config: PublisherConfig, 176 176 + ): Promise<PublisherConfig> { 177 177 + const siteUrl = exitOnCancel( 178 178 + await text({ 179 179 + message: "Site URL:", 180 180 + initialValue: config.siteUrl, 181 181 + validate: (value) => { 182 182 + if (!value) return "Site URL is required"; 183 183 + try { 184 184 + new URL(value); 185 185 + } catch { 186 186 + return "Please enter a valid URL"; 187 187 + } 188 188 + }, 189 189 + }), 190 190 + ); 191 191 + 192 192 + const pathPrefix = exitOnCancel( 193 193 + await text({ 194 194 + message: "URL path prefix for posts:", 195 195 + initialValue: config.pathPrefix || "/posts", 196 196 + }), 197 197 + ); 198 198 + 199 199 + return { 200 200 + ...config, 201 201 + siteUrl, 202 202 + pathPrefix: pathPrefix || undefined, 203 203 + }; 204 204 + } 205 205 + 206 206 + async function editDirectories( 207 207 + config: PublisherConfig, 208 208 + ): Promise<PublisherConfig> { 209 209 + const contentDir = exitOnCancel( 210 210 + await text({ 211 211 + message: "Content directory:", 212 212 + initialValue: config.contentDir, 213 213 + validate: (value) => { 214 214 + if (!value) return "Content directory is required"; 215 215 + }, 216 216 + }), 217 217 + ); 218 218 + 219 219 + const imagesDir = exitOnCancel( 220 220 + await text({ 221 221 + message: "Cover images directory (leave empty to skip):", 222 222 + initialValue: config.imagesDir || "", 223 223 + }), 224 224 + ); 225 225 + 226 226 + const publicDir = exitOnCancel( 227 227 + await text({ 228 228 + message: "Public/static directory:", 229 229 + initialValue: config.publicDir || "./public", 230 230 + }), 231 231 + ); 232 232 + 233 233 + const outputDir = exitOnCancel( 234 234 + await text({ 235 235 + message: "Build output directory:", 236 236 + initialValue: config.outputDir || "./dist", 237 237 + }), 238 238 + ); 239 239 + 240 240 + return { 241 241 + ...config, 242 242 + contentDir, 243 243 + imagesDir: imagesDir || undefined, 244 244 + publicDir: publicDir || undefined, 245 245 + outputDir: outputDir || undefined, 246 246 + }; 247 247 + } 248 248 + 249 249 + async function editFrontmatter( 250 250 + config: PublisherConfig, 251 251 + ): Promise<PublisherConfig> { 252 252 + const currentFrontmatter = config.frontmatter || {}; 253 253 + 254 254 + log.info("Press Enter to keep current value, or type a new field name."); 255 255 + 256 256 + const titleField = exitOnCancel( 257 257 + await text({ 258 258 + message: "Field name for title:", 259 259 + initialValue: currentFrontmatter.title || "title", 260 260 + }), 261 261 + ); 262 262 + 263 263 + const descField = exitOnCancel( 264 264 + await text({ 265 265 + message: "Field name for description:", 266 266 + initialValue: currentFrontmatter.description || "description", 267 267 + }), 268 268 + ); 269 269 + 270 270 + const dateField = exitOnCancel( 271 271 + await text({ 272 272 + message: "Field name for publish date:", 273 273 + initialValue: currentFrontmatter.publishDate || "publishDate", 274 274 + }), 275 275 + ); 276 276 + 277 277 + const coverField = exitOnCancel( 278 278 + await text({ 279 279 + message: "Field name for cover image:", 280 280 + initialValue: currentFrontmatter.coverImage || "ogImage", 281 281 + }), 282 282 + ); 283 283 + 284 284 + const tagsField = exitOnCancel( 285 285 + await text({ 286 286 + message: "Field name for tags:", 287 287 + initialValue: currentFrontmatter.tags || "tags", 288 288 + }), 289 289 + ); 290 290 + 291 291 + const draftField = exitOnCancel( 292 292 + await text({ 293 293 + message: "Field name for draft status:", 294 294 + initialValue: currentFrontmatter.draft || "draft", 295 295 + }), 296 296 + ); 297 297 + 298 298 + const slugField = exitOnCancel( 299 299 + await text({ 300 300 + message: "Field name for slug (leave empty to use filepath):", 301 301 + initialValue: currentFrontmatter.slugField || "", 302 302 + }), 303 303 + ); 304 304 + 305 305 + // Build frontmatter mapping, only including non-default values 306 306 + const fieldMappings: Array<[keyof FrontmatterMapping, string, string]> = [ 307 307 + ["title", titleField, "title"], 308 308 + ["description", descField, "description"], 309 309 + ["publishDate", dateField, "publishDate"], 310 310 + ["coverImage", coverField, "ogImage"], 311 311 + ["tags", tagsField, "tags"], 312 312 + ["draft", draftField, "draft"], 313 313 + ]; 314 314 + 315 315 + const builtMapping = fieldMappings.reduce<FrontmatterMapping>( 316 316 + (acc, [key, value, defaultValue]) => { 317 317 + if (value !== defaultValue) { 318 318 + acc[key] = value; 319 319 + } 320 320 + return acc; 321 321 + }, 322 322 + {}, 323 323 + ); 324 324 + 325 325 + // Handle slugField separately since it has no default 326 326 + if (slugField) { 327 327 + builtMapping.slugField = slugField; 328 328 + } 329 329 + 330 330 + const frontmatter = 331 331 + Object.keys(builtMapping).length > 0 ? builtMapping : undefined; 332 332 + 333 333 + return { 334 334 + ...config, 335 335 + frontmatter, 336 336 + }; 337 337 + } 338 338 + 339 339 + async function editAdvanced(config: PublisherConfig): Promise<PublisherConfig> { 340 340 + const pdsUrl = exitOnCancel( 341 341 + await text({ 342 342 + message: "PDS URL (leave empty for default bsky.social):", 343 343 + initialValue: config.pdsUrl || "", 344 344 + }), 345 345 + ); 346 346 + 347 347 + const identity = exitOnCancel( 348 348 + await text({ 349 349 + message: "Identity/profile to use (leave empty for auto-detect):", 350 350 + initialValue: config.identity || "", 351 351 + }), 352 352 + ); 353 353 + 354 354 + const ignoreInput = exitOnCancel( 355 355 + await text({ 356 356 + message: "Ignore patterns (comma-separated, e.g., _index.md,drafts/**):", 357 357 + initialValue: config.ignore?.join(", ") || "", 358 358 + }), 359 359 + ); 360 360 + 361 361 + const removeIndexFromSlug = exitOnCancel( 362 362 + await confirm({ 363 363 + message: "Remove /index or /_index suffix from paths?", 364 364 + initialValue: config.removeIndexFromSlug || false, 365 365 + }), 366 366 + ); 367 367 + 368 368 + const stripDatePrefix = exitOnCancel( 369 369 + await confirm({ 370 370 + message: "Strip YYYY-MM-DD- prefix from filenames (Jekyll-style)?", 371 371 + initialValue: config.stripDatePrefix || false, 372 372 + }), 373 373 + ); 374 374 + 375 375 + const textContentField = exitOnCancel( 376 376 + await text({ 377 377 + message: 378 378 + "Frontmatter field for textContent (leave empty to use markdown body):", 379 379 + initialValue: config.textContentField || "", 380 380 + }), 381 381 + ); 382 382 + 383 383 + // Parse ignore patterns 384 384 + const ignore = ignoreInput 385 385 + ? ignoreInput 386 386 + .split(",") 387 387 + .map((p) => p.trim()) 388 388 + .filter(Boolean) 389 389 + : undefined; 390 390 + 391 391 + return { 392 392 + ...config, 393 393 + pdsUrl: pdsUrl || undefined, 394 394 + identity: identity || undefined, 395 395 + ignore: ignore && ignore.length > 0 ? ignore : undefined, 396 396 + removeIndexFromSlug: removeIndexFromSlug || undefined, 397 397 + stripDatePrefix: stripDatePrefix || undefined, 398 398 + textContentField: textContentField || undefined, 399 399 + }; 400 400 + } 401 401 + 402 402 + async function editBluesky(config: PublisherConfig): Promise<PublisherConfig> { 403 403 + const enabled = exitOnCancel( 404 404 + await confirm({ 405 405 + message: "Enable automatic Bluesky posting when publishing?", 406 406 + initialValue: config.bluesky?.enabled || false, 407 407 + }), 408 408 + ); 409 409 + 410 410 + if (!enabled) { 411 411 + return { 412 412 + ...config, 413 413 + bluesky: undefined, 414 414 + }; 415 415 + } 416 416 + 417 417 + const maxAgeDaysInput = exitOnCancel( 418 418 + await text({ 419 419 + message: "Maximum age (in days) for posts to be shared on Bluesky:", 420 420 + initialValue: String(config.bluesky?.maxAgeDays || 7), 421 421 + validate: (value) => { 422 422 + if (!value) return "Please enter a number"; 423 423 + const num = Number.parseInt(value, 10); 424 424 + if (Number.isNaN(num) || num < 1) { 425 425 + return "Please enter a positive number"; 426 426 + } 427 427 + }, 428 428 + }), 429 429 + ); 430 430 + 431 431 + const maxAgeDays = parseInt(maxAgeDaysInput, 10); 432 432 + 433 433 + const bluesky: BlueskyConfig = { 434 434 + enabled: true, 435 435 + ...(maxAgeDays !== 7 && { maxAgeDays }), 436 436 + }; 437 437 + 438 438 + return { 439 439 + ...config, 440 440 + bluesky, 441 441 + }; 442 442 + } 443 443 + 444 444 + async function updatePublicationFlow(config: PublisherConfig): Promise<void> { 445 445 + // Load credentials 446 446 + let credentials = await loadCredentials(config.identity); 447 447 + 448 448 + if (!credentials) { 449 449 + const identities = await listAllCredentials(); 450 450 + if (identities.length === 0) { 451 451 + log.error( 452 452 + "No credentials found. Run 'sequoia login' or 'sequoia auth' first.", 453 453 + ); 454 454 + process.exit(1); 455 455 + } 456 456 + 457 457 + // Build labels with handles for OAuth sessions 458 458 + const options = await Promise.all( 459 459 + identities.map(async (cred) => { 460 460 + if (cred.type === "oauth") { 461 461 + const handle = await getOAuthHandle(cred.id); 462 462 + return { 463 463 + value: cred.id, 464 464 + label: `${handle || cred.id} (OAuth)`, 465 465 + }; 466 466 + } 467 467 + return { 468 468 + value: cred.id, 469 469 + label: `${cred.id} (App Password)`, 470 470 + }; 471 471 + }), 472 472 + ); 473 473 + 474 474 + log.info("Multiple identities found. Select one to use:"); 475 475 + const selected = exitOnCancel( 476 476 + await select({ 477 477 + message: "Identity:", 478 478 + options, 479 479 + }), 480 480 + ); 481 481 + 482 482 + // Load the selected credentials 483 483 + const selectedCred = identities.find((c) => c.id === selected); 484 484 + if (selectedCred?.type === "oauth") { 485 485 + const session = await getOAuthSession(selected); 486 486 + if (session) { 487 487 + const handle = await getOAuthHandle(selected); 488 488 + credentials = { 489 489 + type: "oauth", 490 490 + did: selected, 491 491 + handle: handle || selected, 492 492 + }; 493 493 + } 494 494 + } else { 495 495 + credentials = await getCredentials(selected); 496 496 + } 497 497 + 498 498 + if (!credentials) { 499 499 + log.error("Failed to load selected credentials."); 500 500 + process.exit(1); 501 501 + } 502 502 + } 503 503 + 504 504 + const s = spinner(); 505 505 + s.start("Connecting to ATProto..."); 506 506 + 507 507 + let agent: Awaited<ReturnType<typeof createAgent>>; 508 508 + try { 509 509 + agent = await createAgent(credentials); 510 510 + s.stop("Connected!"); 511 511 + } catch (error) { 512 512 + s.stop("Failed to connect"); 513 513 + log.error(`Failed to connect: ${error}`); 514 514 + process.exit(1); 515 515 + } 516 516 + 517 517 + // Fetch existing publication 518 518 + s.start("Fetching publication..."); 519 519 + const publication = await getPublication(agent, config.publicationUri); 520 520 + 521 521 + if (!publication) { 522 522 + s.stop("Publication not found"); 523 523 + log.error(`Could not find publication: ${config.publicationUri}`); 524 524 + process.exit(1); 525 525 + } 526 526 + s.stop("Publication loaded!"); 527 527 + 528 528 + // Show current publication info 529 529 + const pubRecord = publication.value; 530 530 + const pubSummary = [ 531 531 + `Name: ${pubRecord.name}`, 532 532 + `URL: ${pubRecord.url}`, 533 533 + pubRecord.description ? `Description: ${pubRecord.description}` : null, 534 534 + pubRecord.icon ? `Icon: (uploaded)` : null, 535 535 + `Show in Discover: ${pubRecord.preferences?.showInDiscover ?? true}`, 536 536 + `Created: ${pubRecord.createdAt}`, 537 537 + ] 538 538 + .filter(Boolean) 539 539 + .join("\n"); 540 540 + 541 541 + note(pubSummary, "Current Publication"); 542 542 + 543 543 + // Collect updates with pre-populated values 544 544 + const name = exitOnCancel( 545 545 + await text({ 546 546 + message: "Publication name:", 547 547 + initialValue: pubRecord.name, 548 548 + validate: (value) => { 549 549 + if (!value) return "Publication name is required"; 550 550 + }, 551 551 + }), 552 552 + ); 553 553 + 554 554 + const description = exitOnCancel( 555 555 + await text({ 556 556 + message: "Publication description (leave empty to clear):", 557 557 + initialValue: pubRecord.description || "", 558 558 + }), 559 559 + ); 560 560 + 561 561 + const url = exitOnCancel( 562 562 + await text({ 563 563 + message: "Publication URL:", 564 564 + initialValue: pubRecord.url, 565 565 + validate: (value) => { 566 566 + if (!value) return "URL is required"; 567 567 + try { 568 568 + new URL(value); 569 569 + } catch { 570 570 + return "Please enter a valid URL"; 571 571 + } 572 572 + }, 573 573 + }), 574 574 + ); 575 575 + 576 576 + const iconPath = exitOnCancel( 577 577 + await text({ 578 578 + message: "New icon path (leave empty to keep existing):", 579 579 + initialValue: "", 580 580 + }), 581 581 + ); 582 582 + 583 583 + const showInDiscover = exitOnCancel( 584 584 + await confirm({ 585 585 + message: "Show in Discover feed?", 586 586 + initialValue: pubRecord.preferences?.showInDiscover ?? true, 587 587 + }), 588 588 + ); 589 589 + 590 590 + // Confirm before updating 591 591 + const shouldUpdate = exitOnCancel( 592 592 + await confirm({ 593 593 + message: "Update publication on ATProto?", 594 594 + initialValue: true, 595 595 + }), 596 596 + ); 597 597 + 598 598 + if (!shouldUpdate) { 599 599 + log.info("Update cancelled."); 600 600 + return; 601 601 + } 602 602 + 603 603 + // Perform update 604 604 + s.start("Updating publication..."); 605 605 + try { 606 606 + await updatePublication( 607 607 + agent, 608 608 + config.publicationUri, 609 609 + { 610 610 + name, 611 611 + description, 612 612 + url, 613 613 + iconPath: iconPath || undefined, 614 614 + showInDiscover, 615 615 + }, 616 616 + pubRecord, 617 617 + ); 618 618 + s.stop("Publication updated!"); 619 619 + } catch (error) { 620 620 + s.stop("Failed to update publication"); 621 621 + log.error(`Failed to update: ${error}`); 622 622 + process.exit(1); 623 623 + } 624 624 + }

+5 -1

packages/cli/src/index.ts

··· 4 4 import { authCommand } from "./commands/auth"; 5 5 import { initCommand } from "./commands/init"; 6 6 import { injectCommand } from "./commands/inject"; 7 7 + import { loginCommand } from "./commands/login"; 7 8 import { publishCommand } from "./commands/publish"; 8 9 import { syncCommand } from "./commands/sync"; 10 10 + import { updateCommand } from "./commands/update"; 9 11 10 12 const app = subcommands({ 11 13 name: "sequoia", ··· 33 35 34 36 > https://tangled.org/stevedylan.dev/sequoia 35 37 `, 36 36 - version: "0.2.1", 38 38 + version: "0.3.3", 37 39 cmds: { 38 40 auth: authCommand, 39 41 init: initCommand, 40 42 inject: injectCommand, 43 43 + login: loginCommand, 41 44 publish: publishCommand, 42 45 sync: syncCommand, 46 46 + update: updateCommand, 43 47 }, 44 48 }); 45 49

+201 -33

packages/cli/src/lib/atproto.ts

··· 1 1 - import { AtpAgent } from "@atproto/api"; 1 1 + import { Agent, AtpAgent } from "@atproto/api"; 2 2 import * as mimeTypes from "mime-types"; 3 3 import * as fs from "node:fs/promises"; 4 4 import * as path from "node:path"; 5 5 import { stripMarkdownForText } from "./markdown"; 6 6 + import { getOAuthClient } from "./oauth-client"; 6 7 import type { 7 8 BlobObject, 8 9 BlogPost, 9 10 Credentials, 11 11 + PublicationRecord, 10 12 PublisherConfig, 11 13 StrongRef, 12 14 } from "./types"; 15 15 + import { isAppPasswordCredentials, isOAuthCredentials } from "./types"; 16 16 + 17 17 + /** 18 18 + * Type guard to check if a record value is a DocumentRecord 19 19 + */ 20 20 + function isDocumentRecord(value: unknown): value is DocumentRecord { 21 21 + if (!value || typeof value !== "object") return false; 22 22 + const v = value as Record<string, unknown>; 23 23 + return ( 24 24 + v.$type === "site.standard.document" && 25 25 + typeof v.title === "string" && 26 26 + typeof v.site === "string" && 27 27 + typeof v.path === "string" && 28 28 + typeof v.textContent === "string" && 29 29 + typeof v.publishedAt === "string" 30 30 + ); 31 31 + } 13 32 14 33 async function fileExists(filePath: string): Promise<boolean> { 15 34 try { ··· 20 39 } 21 40 } 22 41 42 42 + /** 43 43 + * Resolve a handle to a DID 44 44 + */ 45 45 + export async function resolveHandleToDid(handle: string): Promise<string> { 46 46 + if (handle.startsWith("did:")) { 47 47 + return handle; 48 48 + } 49 49 + 50 50 + // Try to resolve handle via Bluesky API 51 51 + const resolveUrl = `https://public.api.bsky.app/xrpc/com.atproto.identity.resolveHandle?handle=${encodeURIComponent(handle)}`; 52 52 + const resolveResponse = await fetch(resolveUrl); 53 53 + if (!resolveResponse.ok) { 54 54 + throw new Error("Could not resolve handle"); 55 55 + } 56 56 + const resolveData = (await resolveResponse.json()) as { did: string }; 57 57 + return resolveData.did; 58 58 + } 59 59 + 23 60 export async function resolveHandleToPDS(handle: string): Promise<string> { 24 61 // First, resolve the handle to a DID 25 25 - let did: string; 26 26 - 27 27 - if (handle.startsWith("did:")) { 28 28 - did = handle; 29 29 - } else { 30 30 - // Try to resolve handle via Bluesky API 31 31 - const resolveUrl = `https://public.api.bsky.app/xrpc/com.atproto.identity.resolveHandle?handle=${encodeURIComponent(handle)}`; 32 32 - const resolveResponse = await fetch(resolveUrl); 33 33 - if (!resolveResponse.ok) { 34 34 - throw new Error("Could not resolve handle"); 35 35 - } 36 36 - const resolveData = (await resolveResponse.json()) as { did: string }; 37 37 - did = resolveData.did; 38 38 - } 62 62 + const did = await resolveHandleToDid(handle); 39 63 40 64 // Now resolve the DID to get the PDS URL from the DID document 41 65 let pdsUrl: string | undefined; ··· 89 113 showInDiscover?: boolean; 90 114 } 91 115 92 92 - export async function createAgent(credentials: Credentials): Promise<AtpAgent> { 116 116 + export async function createAgent(credentials: Credentials): Promise<Agent> { 117 117 + if (isOAuthCredentials(credentials)) { 118 118 + // OAuth flow - restore session from stored tokens 119 119 + const client = await getOAuthClient(); 120 120 + try { 121 121 + const oauthSession = await client.restore(credentials.did); 122 122 + // Wrap the OAuth session in an Agent which provides the atproto API 123 123 + return new Agent(oauthSession); 124 124 + } catch (error) { 125 125 + if (error instanceof Error) { 126 126 + // Check for common OAuth errors 127 127 + if ( 128 128 + error.message.includes("expired") || 129 129 + error.message.includes("revoked") 130 130 + ) { 131 131 + throw new Error( 132 132 + `OAuth session expired or revoked. Please run 'sequoia login' to re-authenticate.`, 133 133 + ); 134 134 + } 135 135 + } 136 136 + throw error; 137 137 + } 138 138 + } 139 139 + 140 140 + // App password flow 141 141 + if (!isAppPasswordCredentials(credentials)) { 142 142 + throw new Error("Invalid credential type"); 143 143 + } 93 144 const agent = new AtpAgent({ service: credentials.pdsUrl }); 94 145 95 146 await agent.login({ ··· 101 152 } 102 153 103 154 export async function uploadImage( 104 104 - agent: AtpAgent, 155 155 + agent: Agent, 105 156 imagePath: string, 106 157 ): Promise<BlobObject | undefined> { 107 158 if (!(await fileExists(imagePath))) { ··· 139 190 contentDir: string, 140 191 ): Promise<string | null> { 141 192 // Try multiple resolution strategies 142 142 - const filename = path.basename(ogImage); 143 193 144 194 // 1. If imagesDir is specified, look there 145 195 if (imagesDir) { 146 146 - const imagePath = path.join(imagesDir, filename); 196 196 + // Get the base name of the images directory (e.g., "blog-images" from "public/blog-images") 197 197 + const imagesDirBaseName = path.basename(imagesDir); 198 198 + 199 199 + // Check if ogImage contains the images directory name and extract the relative path 200 200 + // e.g., "/blog-images/other/file.png" with imagesDirBaseName "blog-images" -> "other/file.png" 201 201 + const imagesDirIndex = ogImage.indexOf(imagesDirBaseName); 202 202 + let relativePath: string; 203 203 + 204 204 + if (imagesDirIndex !== -1) { 205 205 + // Extract everything after "blog-images/" 206 206 + const afterImagesDir = ogImage.substring( 207 207 + imagesDirIndex + imagesDirBaseName.length, 208 208 + ); 209 209 + // Remove leading slash if present 210 210 + relativePath = afterImagesDir.replace(/^[/\\]/, ""); 211 211 + } else { 212 212 + // Fall back to just the filename 213 213 + relativePath = path.basename(ogImage); 214 214 + } 215 215 + 216 216 + const imagePath = path.join(imagesDir, relativePath); 147 217 if (await fileExists(imagePath)) { 148 218 const stat = await fs.stat(imagePath); 149 219 if (stat.size > 0) { ··· 170 240 } 171 241 172 242 export async function createDocument( 173 173 - agent: AtpAgent, 243 243 + agent: Agent, 174 244 post: BlogPost, 175 245 config: PublisherConfig, 176 246 coverImage?: BlobObject, ··· 213 283 } 214 284 215 285 const response = await agent.com.atproto.repo.createRecord({ 216 216 - repo: agent.session!.did, 286 286 + repo: agent.did!, 217 287 collection: "site.standard.document", 218 288 record, 219 289 }); ··· 222 292 } 223 293 224 294 export async function updateDocument( 225 225 - agent: AtpAgent, 295 295 + agent: Agent, 226 296 post: BlogPost, 227 297 atUri: string, 228 298 config: PublisherConfig, ··· 275 345 } 276 346 277 347 await agent.com.atproto.repo.putRecord({ 278 278 - repo: agent.session!.did, 348 348 + repo: agent.did!, 279 349 collection: collection!, 280 350 rkey: rkey!, 281 351 record, ··· 315 385 } 316 386 317 387 export async function listDocuments( 318 318 - agent: AtpAgent, 388 388 + agent: Agent, 319 389 publicationUri?: string, 320 390 ): Promise<ListDocumentsResult[]> { 321 391 const documents: ListDocumentsResult[] = []; ··· 323 393 324 394 do { 325 395 const response = await agent.com.atproto.repo.listRecords({ 326 326 - repo: agent.session!.did, 396 396 + repo: agent.did!, 327 397 collection: "site.standard.document", 328 398 limit: 100, 329 399 cursor, 330 400 }); 331 401 332 402 for (const record of response.data.records) { 333 333 - const value = record.value as unknown as DocumentRecord; 403 403 + if (!isDocumentRecord(record.value)) { 404 404 + continue; 405 405 + } 334 406 335 407 // If publicationUri is specified, only include documents from that publication 336 336 - if (publicationUri && value.site !== publicationUri) { 408 408 + if (publicationUri && record.value.site !== publicationUri) { 337 409 continue; 338 410 } 339 411 340 412 documents.push({ 341 413 uri: record.uri, 342 414 cid: record.cid, 343 343 - value, 415 415 + value: record.value, 344 416 }); 345 417 } 346 418 ··· 351 423 } 352 424 353 425 export async function createPublication( 354 354 - agent: AtpAgent, 426 426 + agent: Agent, 355 427 options: CreatePublicationOptions, 356 428 ): Promise<string> { 357 429 let icon: BlobObject | undefined; ··· 382 454 } 383 455 384 456 const response = await agent.com.atproto.repo.createRecord({ 385 385 - repo: agent.session!.did, 457 457 + repo: agent.did!, 386 458 collection: "site.standard.publication", 387 459 record, 388 460 }); ··· 390 462 return response.data.uri; 391 463 } 392 464 465 465 + export interface GetPublicationResult { 466 466 + uri: string; 467 467 + cid: string; 468 468 + value: PublicationRecord; 469 469 + } 470 470 + 471 471 + export async function getPublication( 472 472 + agent: Agent, 473 473 + publicationUri: string, 474 474 + ): Promise<GetPublicationResult | null> { 475 475 + const parsed = parseAtUri(publicationUri); 476 476 + if (!parsed) { 477 477 + return null; 478 478 + } 479 479 + 480 480 + try { 481 481 + const response = await agent.com.atproto.repo.getRecord({ 482 482 + repo: parsed.did, 483 483 + collection: parsed.collection, 484 484 + rkey: parsed.rkey, 485 485 + }); 486 486 + 487 487 + return { 488 488 + uri: publicationUri, 489 489 + cid: response.data.cid!, 490 490 + value: response.data.value as unknown as PublicationRecord, 491 491 + }; 492 492 + } catch { 493 493 + return null; 494 494 + } 495 495 + } 496 496 + 497 497 + export interface UpdatePublicationOptions { 498 498 + url?: string; 499 499 + name?: string; 500 500 + description?: string; 501 501 + iconPath?: string; 502 502 + showInDiscover?: boolean; 503 503 + } 504 504 + 505 505 + export async function updatePublication( 506 506 + agent: Agent, 507 507 + publicationUri: string, 508 508 + options: UpdatePublicationOptions, 509 509 + existingRecord: PublicationRecord, 510 510 + ): Promise<void> { 511 511 + const parsed = parseAtUri(publicationUri); 512 512 + if (!parsed) { 513 513 + throw new Error(`Invalid publication URI: ${publicationUri}`); 514 514 + } 515 515 + 516 516 + // Build updated record, preserving createdAt and $type 517 517 + const record: Record<string, unknown> = { 518 518 + $type: existingRecord.$type, 519 519 + url: options.url ?? existingRecord.url, 520 520 + name: options.name ?? existingRecord.name, 521 521 + createdAt: existingRecord.createdAt, 522 522 + }; 523 523 + 524 524 + // Handle description - can be cleared with empty string 525 525 + if (options.description !== undefined) { 526 526 + if (options.description) { 527 527 + record.description = options.description; 528 528 + } 529 529 + // If empty string, don't include description (clears it) 530 530 + } else if (existingRecord.description) { 531 531 + record.description = existingRecord.description; 532 532 + } 533 533 + 534 534 + // Handle icon - upload new if provided, otherwise keep existing 535 535 + if (options.iconPath) { 536 536 + const icon = await uploadImage(agent, options.iconPath); 537 537 + if (icon) { 538 538 + record.icon = icon; 539 539 + } 540 540 + } else if (existingRecord.icon) { 541 541 + record.icon = existingRecord.icon; 542 542 + } 543 543 + 544 544 + // Handle preferences 545 545 + if (options.showInDiscover !== undefined) { 546 546 + record.preferences = { 547 547 + showInDiscover: options.showInDiscover, 548 548 + }; 549 549 + } else if (existingRecord.preferences) { 550 550 + record.preferences = existingRecord.preferences; 551 551 + } 552 552 + 553 553 + await agent.com.atproto.repo.putRecord({ 554 554 + repo: parsed.did, 555 555 + collection: parsed.collection, 556 556 + rkey: parsed.rkey, 557 557 + record, 558 558 + }); 559 559 + } 560 560 + 393 561 // --- Bluesky Post Creation --- 394 562 395 563 export interface CreateBlueskyPostOptions { ··· 435 603 * Create a Bluesky post with external link embed 436 604 */ 437 605 export async function createBlueskyPost( 438 438 - agent: AtpAgent, 606 606 + agent: Agent, 439 607 options: CreateBlueskyPostOptions, 440 608 ): Promise<StrongRef> { 441 609 const { title, description, canonicalUrl, coverImage, publishedAt } = options; ··· 530 698 }; 531 699 532 700 const response = await agent.com.atproto.repo.createRecord({ 533 533 - repo: agent.session!.did, 701 701 + repo: agent.did!, 534 702 collection: "app.bsky.feed.post", 535 703 record, 536 704 }); ··· 545 713 * Add bskyPostRef to an existing document record 546 714 */ 547 715 export async function addBskyPostRefToDocument( 548 548 - agent: AtpAgent, 716 716 + agent: Agent, 549 717 documentAtUri: string, 550 718 bskyPostRef: StrongRef, 551 719 ): Promise<void> {

+5

packages/cli/src/lib/config.ts

··· 82 82 frontmatter?: FrontmatterMapping; 83 83 ignore?: string[]; 84 84 removeIndexFromSlug?: boolean; 85 85 + stripDatePrefix?: boolean; 85 86 textContentField?: string; 86 87 bluesky?: BlueskyConfig; 87 88 }): string { ··· 122 123 123 124 if (options.removeIndexFromSlug) { 124 125 config.removeIndexFromSlug = options.removeIndexFromSlug; 126 126 + } 127 127 + 128 128 + if (options.stripDatePrefix) { 129 129 + config.stripDatePrefix = options.stripDatePrefix; 125 130 } 126 131 127 132 if (options.textContentField) {

+54

packages/cli/src/lib/credential-select.ts

··· 1 1 + import { select } from "@clack/prompts"; 2 2 + import { getOAuthHandle, getOAuthSession } from "./oauth-store"; 3 3 + import { getCredentials } from "./credentials"; 4 4 + import type { Credentials } from "./types"; 5 5 + import { exitOnCancel } from "./prompts"; 6 6 + 7 7 + /** 8 8 + * Prompt user to select from multiple credentials 9 9 + */ 10 10 + export async function selectCredential( 11 11 + allCredentials: Array<{ id: string; type: "app-password" | "oauth" }>, 12 12 + ): Promise<Credentials | null> { 13 13 + // Build options with friendly labels 14 14 + const options = await Promise.all( 15 15 + allCredentials.map(async ({ id, type }) => { 16 16 + let label = id; 17 17 + if (type === "oauth") { 18 18 + const handle = await getOAuthHandle(id); 19 19 + label = handle ? `${handle} (${id})` : id; 20 20 + } 21 21 + return { 22 22 + value: { id, type }, 23 23 + label: `${label} [${type}]`, 24 24 + }; 25 25 + }), 26 26 + ); 27 27 + 28 28 + const selected = exitOnCancel( 29 29 + await select({ 30 30 + message: "Multiple identities found. Select one:", 31 31 + options, 32 32 + }), 33 33 + ); 34 34 + 35 35 + // Load the full credentials for the selected identity 36 36 + if (selected.type === "oauth") { 37 37 + const session = await getOAuthSession(selected.id); 38 38 + if (session) { 39 39 + const handle = await getOAuthHandle(selected.id); 40 40 + return { 41 41 + type: "oauth", 42 42 + did: selected.id, 43 43 + handle: handle || selected.id, 44 44 + }; 45 45 + } 46 46 + } else { 47 47 + const creds = await getCredentials(selected.id); 48 48 + if (creds) { 49 49 + return creds; 50 50 + } 51 51 + } 52 52 + 53 53 + return null; 54 54 + }

+141 -26

packages/cli/src/lib/credentials.ts

··· 1 1 import * as fs from "node:fs/promises"; 2 2 import * as os from "node:os"; 3 3 import * as path from "node:path"; 4 4 - import type { Credentials } from "./types"; 4 4 + import { 5 5 + getOAuthHandle, 6 6 + getOAuthSession, 7 7 + listOAuthSessions, 8 8 + listOAuthSessionsWithHandles, 9 9 + } from "./oauth-store"; 10 10 + import type { 11 11 + AppPasswordCredentials, 12 12 + Credentials, 13 13 + LegacyCredentials, 14 14 + OAuthCredentials, 15 15 + } from "./types"; 5 16 6 17 const CONFIG_DIR = path.join(os.homedir(), ".config", "sequoia"); 7 18 const CREDENTIALS_FILE = path.join(CONFIG_DIR, "credentials.json"); 8 19 9 9 - // Stored credentials keyed by identifier 10 10 - type CredentialsStore = Record<string, Credentials>; 20 20 + // Stored credentials keyed by identifier (can be legacy or typed) 21 21 + type CredentialsStore = Record< 22 22 + string, 23 23 + AppPasswordCredentials | LegacyCredentials 24 24 + >; 11 25 12 26 async function fileExists(filePath: string): Promise<boolean> { 13 27 try { ··· 19 33 } 20 34 21 35 /** 22 22 - * Load all stored credentials 36 36 + * Normalize credentials to have explicit type 23 37 */ 38 38 + function normalizeCredentials( 39 39 + creds: AppPasswordCredentials | LegacyCredentials, 40 40 + ): AppPasswordCredentials { 41 41 + // If it already has type, return as-is 42 42 + if ("type" in creds && creds.type === "app-password") { 43 43 + return creds; 44 44 + } 45 45 + // Migrate legacy format 46 46 + return { 47 47 + type: "app-password", 48 48 + pdsUrl: creds.pdsUrl, 49 49 + identifier: creds.identifier, 50 50 + password: creds.password, 51 51 + }; 52 52 + } 53 53 + 24 54 async function loadCredentialsStore(): Promise<CredentialsStore> { 25 55 if (!(await fileExists(CREDENTIALS_FILE))) { 26 56 return {}; ··· 32 62 33 63 // Handle legacy single-credential format (migrate on read) 34 64 if (parsed.identifier && parsed.password) { 35 35 - const legacy = parsed as Credentials; 65 65 + const legacy = parsed as LegacyCredentials; 36 66 return { [legacy.identifier]: legacy }; 37 67 } 38 68 ··· 52 82 } 53 83 54 84 /** 85 85 + * Try to load OAuth credentials for a given profile (DID or handle) 86 86 + */ 87 87 + async function tryLoadOAuthCredentials( 88 88 + profile: string, 89 89 + ): Promise<OAuthCredentials | null> { 90 90 + // If it looks like a DID, try to get the session directly 91 91 + if (profile.startsWith("did:")) { 92 92 + const session = await getOAuthSession(profile); 93 93 + if (session) { 94 94 + const handle = await getOAuthHandle(profile); 95 95 + return { 96 96 + type: "oauth", 97 97 + did: profile, 98 98 + handle: handle || profile, 99 99 + }; 100 100 + } 101 101 + } 102 102 + 103 103 + // Try to find OAuth session by handle 104 104 + const sessions = await listOAuthSessionsWithHandles(); 105 105 + const match = sessions.find((s) => s.handle === profile); 106 106 + if (match) { 107 107 + return { 108 108 + type: "oauth", 109 109 + did: match.did, 110 110 + handle: match.handle || match.did, 111 111 + }; 112 112 + } 113 113 + 114 114 + return null; 115 115 + } 116 116 + 117 117 + /** 55 118 * Load credentials for a specific identity or resolve which to use. 56 119 * 57 120 * Priority: 58 121 * 1. Full env vars (ATP_IDENTIFIER + ATP_APP_PASSWORD) 59 59 - * 2. SEQUOIA_PROFILE env var - selects from stored credentials 122 122 + * 2. SEQUOIA_PROFILE env var - selects from stored credentials (app-password or OAuth DID) 60 123 * 3. projectIdentity parameter (from sequoia.json) 61 61 - * 4. If only one identity stored, use it 124 124 + * 4. If only one identity stored (app-password or OAuth), use it 62 125 * 5. Return null (caller should prompt user) 63 126 */ 64 127 export async function loadCredentials( ··· 71 134 72 135 if (envIdentifier && envPassword) { 73 136 return { 137 137 + type: "app-password", 74 138 identifier: envIdentifier, 75 139 password: envPassword, 76 140 pdsUrl: envPdsUrl || "https://bsky.social", ··· 78 142 } 79 143 80 144 const store = await loadCredentialsStore(); 81 81 - const identifiers = Object.keys(store); 82 82 - 83 83 - if (identifiers.length === 0) { 84 84 - return null; 85 85 - } 145 145 + const appPasswordIds = Object.keys(store); 146 146 + const oauthDids = await listOAuthSessions(); 86 147 87 148 // 2. SEQUOIA_PROFILE env var 88 149 const profileEnv = process.env.SEQUOIA_PROFILE; 89 89 - if (profileEnv && store[profileEnv]) { 90 90 - return store[profileEnv]; 150 150 + if (profileEnv) { 151 151 + // Try app-password credentials first 152 152 + if (store[profileEnv]) { 153 153 + return normalizeCredentials(store[profileEnv]); 154 154 + } 155 155 + // Try OAuth session (profile could be a DID) 156 156 + const oauth = await tryLoadOAuthCredentials(profileEnv); 157 157 + if (oauth) { 158 158 + return oauth; 159 159 + } 91 160 } 92 161 93 162 // 3. Project-specific identity (from sequoia.json) 94 94 - if (projectIdentity && store[projectIdentity]) { 95 95 - return store[projectIdentity]; 163 163 + if (projectIdentity) { 164 164 + if (store[projectIdentity]) { 165 165 + return normalizeCredentials(store[projectIdentity]); 166 166 + } 167 167 + const oauth = await tryLoadOAuthCredentials(projectIdentity); 168 168 + if (oauth) { 169 169 + return oauth; 170 170 + } 96 171 } 97 172 98 98 - // 4. If only one identity, use it 99 99 - if (identifiers.length === 1 && identifiers[0]) { 100 100 - return store[identifiers[0]] ?? null; 173 173 + // 4. If only one identity total, use it 174 174 + const totalIdentities = appPasswordIds.length + oauthDids.length; 175 175 + if (totalIdentities === 1) { 176 176 + if (appPasswordIds.length === 1 && appPasswordIds[0]) { 177 177 + return normalizeCredentials(store[appPasswordIds[0]]!); 178 178 + } 179 179 + if (oauthDids.length === 1 && oauthDids[0]) { 180 180 + const session = await getOAuthSession(oauthDids[0]); 181 181 + if (session) { 182 182 + const handle = await getOAuthHandle(oauthDids[0]); 183 183 + return { 184 184 + type: "oauth", 185 185 + did: oauthDids[0], 186 186 + handle: handle || oauthDids[0], 187 187 + }; 188 188 + } 189 189 + } 101 190 } 102 191 103 103 - // Multiple identities exist but none selected 192 192 + // Multiple identities exist but none selected, or no identities 104 193 return null; 105 194 } 106 195 107 196 /** 108 108 - * Get a specific identity by identifier 197 197 + * Get a specific identity by identifier (app-password only) 109 198 */ 110 199 export async function getCredentials( 111 200 identifier: string, 112 112 - ): Promise<Credentials | null> { 201 201 + ): Promise<AppPasswordCredentials | null> { 113 202 const store = await loadCredentialsStore(); 114 114 - return store[identifier] || null; 203 203 + const creds = store[identifier]; 204 204 + if (!creds) return null; 205 205 + return normalizeCredentials(creds); 115 206 } 116 207 117 208 /** 118 118 - * List all stored identities 209 209 + * List all stored app-password identities 119 210 */ 120 211 export async function listCredentials(): Promise<string[]> { 121 212 const store = await loadCredentialsStore(); ··· 123 214 } 124 215 125 216 /** 126 126 - * Save credentials for an identity (adds or updates) 217 217 + * List all credentials (both app-password and OAuth) 218 218 + */ 219 219 + export async function listAllCredentials(): Promise< 220 220 + Array<{ id: string; type: "app-password" | "oauth" }> 221 221 + > { 222 222 + const store = await loadCredentialsStore(); 223 223 + const oauthDids = await listOAuthSessions(); 224 224 + 225 225 + const result: Array<{ id: string; type: "app-password" | "oauth" }> = []; 226 226 + 227 227 + for (const id of Object.keys(store)) { 228 228 + result.push({ id, type: "app-password" }); 229 229 + } 230 230 + 231 231 + for (const did of oauthDids) { 232 232 + result.push({ id: did, type: "oauth" }); 233 233 + } 234 234 + 235 235 + return result; 236 236 + } 237 237 + 238 238 + /** 239 239 + * Save app-password credentials for an identity (adds or updates) 127 240 */ 128 128 - export async function saveCredentials(credentials: Credentials): Promise<void> { 241 241 + export async function saveCredentials( 242 242 + credentials: AppPasswordCredentials, 243 243 + ): Promise<void> { 129 244 const store = await loadCredentialsStore(); 130 245 store[credentials.identifier] = credentials; 131 246 await saveCredentialsStore(store);

+14 -1

packages/cli/src/lib/markdown.ts

··· 178 178 export interface SlugOptions { 179 179 slugField?: string; 180 180 removeIndexFromSlug?: boolean; 181 181 + stripDatePrefix?: boolean; 181 182 } 182 183 183 184 export function getSlugFromOptions( ··· 185 186 rawFrontmatter: Record<string, unknown>, 186 187 options: SlugOptions = {}, 187 188 ): string { 188 188 - const { slugField, removeIndexFromSlug = false } = options; 189 189 + const { 190 190 + slugField, 191 191 + removeIndexFromSlug = false, 192 192 + stripDatePrefix = false, 193 193 + } = options; 189 194 190 195 let slug: string; 191 196 ··· 218 223 slug = slug.replace(/\/_?index$/, ""); 219 224 } 220 225 226 226 + // Strip Jekyll-style date prefix (YYYY-MM-DD-) from filename 227 227 + if (stripDatePrefix) { 228 228 + slug = slug.replace(/(^|\/)(\d{4}-\d{2}-\d{2})-/g, "$1"); 229 229 + } 230 230 + 221 231 return slug; 222 232 } 223 233 ··· 243 253 ignorePatterns?: string[]; 244 254 slugField?: string; 245 255 removeIndexFromSlug?: boolean; 256 256 + stripDatePrefix?: boolean; 246 257 } 247 258 248 259 export async function scanContentDirectory( ··· 274 285 ignorePatterns: ignore = [], 275 286 slugField, 276 287 removeIndexFromSlug, 288 288 + stripDatePrefix, 277 289 } = options; 278 290 279 291 const patterns = ["**/*.md", "**/*.mdx"]; ··· 302 314 const slug = getSlugFromOptions(relativePath, rawFrontmatter, { 303 315 slugField, 304 316 removeIndexFromSlug, 317 317 + stripDatePrefix, 305 318 }); 306 319 307 320 posts.push({

+94

packages/cli/src/lib/oauth-client.ts

··· 1 1 + import { 2 2 + NodeOAuthClient, 3 3 + type NodeOAuthClientOptions, 4 4 + } from "@atproto/oauth-client-node"; 5 5 + import { sessionStore, stateStore } from "./oauth-store"; 6 6 + 7 7 + const CALLBACK_PORT = 4000; 8 8 + const CALLBACK_HOST = "127.0.0.1"; 9 9 + const CALLBACK_URL = `http://${CALLBACK_HOST}:${CALLBACK_PORT}/oauth/callback`; 10 10 + 11 11 + // OAuth scope for Sequoia CLI - includes atproto base scope plus our collections 12 12 + const OAUTH_SCOPE = 13 13 + "atproto repo:site.standard.document repo:site.standard.publication repo:app.bsky.feed.post blob:*/*"; 14 14 + 15 15 + let oauthClient: NodeOAuthClient | null = null; 16 16 + 17 17 + // Simple lock implementation for CLI (single process, no contention) 18 18 + // This prevents the "No lock mechanism provided" warning 19 19 + const locks = new Map<string, Promise<void>>(); 20 20 + 21 21 + async function requestLock<T>( 22 22 + key: string, 23 23 + fn: () => T | PromiseLike<T>, 24 24 + ): Promise<T> { 25 25 + // Wait for any existing lock on this key 26 26 + while (locks.has(key)) { 27 27 + await locks.get(key); 28 28 + } 29 29 + 30 30 + // Create our lock 31 31 + let resolve: () => void; 32 32 + const lockPromise = new Promise<void>((r) => { 33 33 + resolve = r; 34 34 + }); 35 35 + locks.set(key, lockPromise); 36 36 + 37 37 + try { 38 38 + return await fn(); 39 39 + } finally { 40 40 + locks.delete(key); 41 41 + resolve!(); 42 42 + } 43 43 + } 44 44 + 45 45 + /** 46 46 + * Get or create the OAuth client singleton 47 47 + */ 48 48 + export async function getOAuthClient(): Promise<NodeOAuthClient> { 49 49 + if (oauthClient) { 50 50 + return oauthClient; 51 51 + } 52 52 + 53 53 + // Build client_id with required parameters 54 54 + const clientIdParams = new URLSearchParams(); 55 55 + clientIdParams.append("redirect_uri", CALLBACK_URL); 56 56 + clientIdParams.append("scope", OAUTH_SCOPE); 57 57 + 58 58 + const clientOptions: NodeOAuthClientOptions = { 59 59 + clientMetadata: { 60 60 + client_id: `http://localhost?${clientIdParams.toString()}`, 61 61 + client_name: "Sequoia CLI", 62 62 + client_uri: "https://github.com/stevedylandev/sequoia", 63 63 + redirect_uris: [CALLBACK_URL], 64 64 + grant_types: ["authorization_code", "refresh_token"], 65 65 + response_types: ["code"], 66 66 + token_endpoint_auth_method: "none", 67 67 + application_type: "web", 68 68 + scope: OAUTH_SCOPE, 69 69 + dpop_bound_access_tokens: false, 70 70 + }, 71 71 + stateStore, 72 72 + sessionStore, 73 73 + // Configure identity resolution 74 74 + plcDirectoryUrl: "https://plc.directory", 75 75 + // Provide lock mechanism to prevent warning 76 76 + requestLock, 77 77 + }; 78 78 + 79 79 + oauthClient = new NodeOAuthClient(clientOptions); 80 80 + 81 81 + return oauthClient; 82 82 + } 83 83 + 84 84 + export function getOAuthScope(): string { 85 85 + return OAUTH_SCOPE; 86 86 + } 87 87 + 88 88 + export function getCallbackUrl(): string { 89 89 + return CALLBACK_URL; 90 90 + } 91 91 + 92 92 + export function getCallbackPort(): number { 93 93 + return CALLBACK_PORT; 94 94 + }

+161

packages/cli/src/lib/oauth-store.ts

··· 1 1 + import * as fs from "node:fs/promises"; 2 2 + import * as os from "node:os"; 3 3 + import * as path from "node:path"; 4 4 + import type { 5 5 + NodeSavedSession, 6 6 + NodeSavedSessionStore, 7 7 + NodeSavedState, 8 8 + NodeSavedStateStore, 9 9 + } from "@atproto/oauth-client-node"; 10 10 + 11 11 + const CONFIG_DIR = path.join(os.homedir(), ".config", "sequoia"); 12 12 + const OAUTH_FILE = path.join(CONFIG_DIR, "oauth.json"); 13 13 + 14 14 + interface OAuthStore { 15 15 + states: Record<string, NodeSavedState>; 16 16 + sessions: Record<string, NodeSavedSession>; 17 17 + handles?: Record<string, string>; // DID -> handle mapping (optional for backwards compat) 18 18 + } 19 19 + 20 20 + async function fileExists(filePath: string): Promise<boolean> { 21 21 + try { 22 22 + await fs.access(filePath); 23 23 + return true; 24 24 + } catch { 25 25 + return false; 26 26 + } 27 27 + } 28 28 + 29 29 + async function loadOAuthStore(): Promise<OAuthStore> { 30 30 + if (!(await fileExists(OAUTH_FILE))) { 31 31 + return { states: {}, sessions: {} }; 32 32 + } 33 33 + 34 34 + try { 35 35 + const content = await fs.readFile(OAUTH_FILE, "utf-8"); 36 36 + return JSON.parse(content) as OAuthStore; 37 37 + } catch { 38 38 + return { states: {}, sessions: {} }; 39 39 + } 40 40 + } 41 41 + 42 42 + async function saveOAuthStore(store: OAuthStore): Promise<void> { 43 43 + await fs.mkdir(CONFIG_DIR, { recursive: true }); 44 44 + await fs.writeFile(OAUTH_FILE, JSON.stringify(store, null, 2)); 45 45 + await fs.chmod(OAUTH_FILE, 0o600); 46 46 + } 47 47 + 48 48 + /** 49 49 + * State store for PKCE flow (temporary, used during auth) 50 50 + */ 51 51 + export const stateStore: NodeSavedStateStore = { 52 52 + async set(key: string, state: NodeSavedState): Promise<void> { 53 53 + const store = await loadOAuthStore(); 54 54 + store.states[key] = state; 55 55 + await saveOAuthStore(store); 56 56 + }, 57 57 + 58 58 + async get(key: string): Promise<NodeSavedState | undefined> { 59 59 + const store = await loadOAuthStore(); 60 60 + return store.states[key]; 61 61 + }, 62 62 + 63 63 + async del(key: string): Promise<void> { 64 64 + const store = await loadOAuthStore(); 65 65 + delete store.states[key]; 66 66 + await saveOAuthStore(store); 67 67 + }, 68 68 + }; 69 69 + 70 70 + /** 71 71 + * Session store for OAuth tokens (persistent) 72 72 + */ 73 73 + export const sessionStore: NodeSavedSessionStore = { 74 74 + async set(sub: string, session: NodeSavedSession): Promise<void> { 75 75 + const store = await loadOAuthStore(); 76 76 + store.sessions[sub] = session; 77 77 + await saveOAuthStore(store); 78 78 + }, 79 79 + 80 80 + async get(sub: string): Promise<NodeSavedSession | undefined> { 81 81 + const store = await loadOAuthStore(); 82 82 + return store.sessions[sub]; 83 83 + }, 84 84 + 85 85 + async del(sub: string): Promise<void> { 86 86 + const store = await loadOAuthStore(); 87 87 + delete store.sessions[sub]; 88 88 + await saveOAuthStore(store); 89 89 + }, 90 90 + }; 91 91 + 92 92 + /** 93 93 + * List all stored OAuth session DIDs 94 94 + */ 95 95 + export async function listOAuthSessions(): Promise<string[]> { 96 96 + const store = await loadOAuthStore(); 97 97 + return Object.keys(store.sessions); 98 98 + } 99 99 + 100 100 + /** 101 101 + * Get an OAuth session by DID 102 102 + */ 103 103 + export async function getOAuthSession( 104 104 + did: string, 105 105 + ): Promise<NodeSavedSession | undefined> { 106 106 + const store = await loadOAuthStore(); 107 107 + return store.sessions[did]; 108 108 + } 109 109 + 110 110 + /** 111 111 + * Delete an OAuth session by DID 112 112 + */ 113 113 + export async function deleteOAuthSession(did: string): Promise<boolean> { 114 114 + const store = await loadOAuthStore(); 115 115 + if (!store.sessions[did]) { 116 116 + return false; 117 117 + } 118 118 + delete store.sessions[did]; 119 119 + await saveOAuthStore(store); 120 120 + return true; 121 121 + } 122 122 + 123 123 + export function getOAuthStorePath(): string { 124 124 + return OAUTH_FILE; 125 125 + } 126 126 + 127 127 + /** 128 128 + * Store handle for an OAuth session (DID -> handle mapping) 129 129 + */ 130 130 + export async function setOAuthHandle( 131 131 + did: string, 132 132 + handle: string, 133 133 + ): Promise<void> { 134 134 + const store = await loadOAuthStore(); 135 135 + if (!store.handles) { 136 136 + store.handles = {}; 137 137 + } 138 138 + store.handles[did] = handle; 139 139 + await saveOAuthStore(store); 140 140 + } 141 141 + 142 142 + /** 143 143 + * Get handle for an OAuth session by DID 144 144 + */ 145 145 + export async function getOAuthHandle(did: string): Promise<string | undefined> { 146 146 + const store = await loadOAuthStore(); 147 147 + return store.handles?.[did]; 148 148 + } 149 149 + 150 150 + /** 151 151 + * List all stored OAuth sessions with their handles 152 152 + */ 153 153 + export async function listOAuthSessionsWithHandles(): Promise< 154 154 + Array<{ did: string; handle?: string }> 155 155 + > { 156 156 + const store = await loadOAuthStore(); 157 157 + return Object.keys(store.sessions).map((did) => ({ 158 158 + did, 159 159 + handle: store.handles?.[did], 160 160 + })); 161 161 + }

+35 -1

packages/cli/src/lib/types.ts

··· 33 33 frontmatter?: FrontmatterMapping; // Custom frontmatter field mappings 34 34 ignore?: string[]; // Glob patterns for files to ignore (e.g., ["_index.md", "**/drafts/**"]) 35 35 removeIndexFromSlug?: boolean; // Remove "/index" or "/_index" suffix from paths (default: false) 36 36 + stripDatePrefix?: boolean; // Remove YYYY-MM-DD- prefix from filenames (Jekyll-style, default: false) 36 37 textContentField?: string; // Frontmatter field to use for textContent instead of markdown body 37 38 bluesky?: BlueskyConfig; // Optional Bluesky posting configuration 38 39 } 39 40 40 40 - export interface Credentials { 41 41 + // Legacy credentials format (for backward compatibility during migration) 42 42 + export interface LegacyCredentials { 41 43 pdsUrl: string; 42 44 identifier: string; 43 45 password: string; 46 46 + } 47 47 + 48 48 + // App password credentials (explicit type) 49 49 + export interface AppPasswordCredentials { 50 50 + type: "app-password"; 51 51 + pdsUrl: string; 52 52 + identifier: string; 53 53 + password: string; 54 54 + } 55 55 + 56 56 + // OAuth credentials (references stored OAuth session) 57 57 + // Note: pdsUrl is not needed for OAuth - the OAuth client resolves PDS from the DID 58 58 + export interface OAuthCredentials { 59 59 + type: "oauth"; 60 60 + did: string; 61 61 + handle: string; 62 62 + } 63 63 + 64 64 + // Union type for all credential types 65 65 + export type Credentials = AppPasswordCredentials | OAuthCredentials; 66 66 + 67 67 + // Helper to check credential type 68 68 + export function isOAuthCredentials( 69 69 + creds: Credentials, 70 70 + ): creds is OAuthCredentials { 71 71 + return creds.type === "oauth"; 72 72 + } 73 73 + 74 74 + export function isAppPasswordCredentials( 75 75 + creds: Credentials, 76 76 + ): creds is AppPasswordCredentials { 77 77 + return creds.type === "app-password"; 44 78 } 45 79 46 80 export interface PostFrontmatter {