@devkitvault/recall 1.0.0 → 1.0.1

package/README.md

@@ -1,15 +1,14 @@
 # @devkitvault/recall
 
-**Install the recall CLI from npm** — on first run, this package downloads the official native binary for your OS from [GitHub Releases](https://github.com/devkitvault/recall/releases) into `~/.local/bin`, then runs it. Later runs reuse the same binary.
+**Install the recall CLI from npm** as a normal **Node.js** package: small download (compiled TypeScript + runtime dependencies), **no ~100MB native binary**. The published tarball contains the same logic as `packages/cli` in this repo (`tsc` output).
 
-recall is a **cloud-synced command vault**: save shell commands, templates, snippets, env sets, and aliases — same account as [recall.devkitvault.com](https://recall.devkitvault.com) and the [VS Code extension](https://marketplace.visualstudio.com/items?itemName=devkitvault.recall-cmd).
+Your auth token is stored under **`~/.recall/token`** (this npm build does not ship `keytar`; the CLI already falls back to that file when the OS keychain module is unavailable).
 
-## Requirements
+recall is a **cloud-synced command vault** — same account as [recall.devkitvault.com](https://recall.devkitvault.com) and the [VS Code extension](https://marketplace.visualstudio.com/items?itemName=devkitvault.recall-cmd).
 
-- **Node.js 18+** (only for this installer wrapper)
-- **Supported platforms** (prebuilt binaries): macOS (Apple Silicon + Intel), Linux x64, Windows x64
+## Requirements
 
-Other architectures: use the [curl / PowerShell installers](https://devkitvault.com) or build from source in `packages/cli`.
+- **Node.js 18+**
 
 ## Install
 
@@ -17,8 +16,6 @@ Other architectures: use the [curl / PowerShell installers](https://devkitvault.
 npm install -g @devkitvault/recall
 ```
 
-Ensure `~/.local/bin` is on your `PATH` (the installer places `recall` there). On Windows, that path is `%USERPROFILE%\.local\bin`.
-
 ## Use
 
 ```sh
@@ -28,24 +25,20 @@ recall save "docker compose up -d" -n "start stack"
 recall search docker
 ```
 
-## Re-download the binary
-
-If a release was updated or your download was corrupted:
+## Native binary instead (optional)
 
-```sh
-RECALL_REINSTALL=1 recall --version
-```
+If you want a **single self-contained executable** (~100MB Bun compile) without Node, use the [PowerShell / curl installers](https://devkitvault.com) from GitHub Releases — they install to `%USERPROFILE%\.local\bin` / `~/.local/bin`.
 
-## Release tag vs npm version
+## Publishing (maintainers)
 
-Downloads use a Git **tag** on `devkitvault/recall` (default: `v` + `version` from this package’s `package.json`). If you ship an npm **patch** without a matching GitHub tag, set either:
+From the **monorepo root**, with `pnpm` installed:
 
-- `recall.releaseTag` in `package.json`, or  
-- environment variable `RECALL_RELEASE_TAG` (e.g. `v1.0.0`)
-
-before running `recall`, so the wrapper points at an existing release.
+```powershell
+cd packages/npm-cli
+npm publish
+```
 
-Maintainers: after [Release CLI](https://github.com/devkitvault/recall/blob/master/.github/workflows/release.yml) publishes assets for `vX.Y.Z`, publish this npm package with the same `version` **or** set `recall.releaseTag` accordingly.
+`prepublishOnly` runs **`pnpm --filter @recall/cli run build`** and copies **`packages/cli/dist`** into **`packages/npm-cli/dist`**. Ensure the CLI compiles before publishing.
 
 ## License
 

package/dist/commands/alias.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aliasCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const cli_table3_1 = __importDefault(require("cli-table3"));
+const commander_1 = require("commander");
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+const auth_1 = require("../lib/auth");
+const aliasSet = new commander_1.Command('set')
+    .argument('<alias>', 'Short alias')
+    .argument('<name>', 'Command name to alias')
+    .description('Create a short alias for a command')
+    .action(async (alias, name) => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)(`Setting alias "${alias}" → "${name}"...`).start();
+    try {
+        const cmd = await api_1.ApiClient.get(`/commands/by-name/${encodeURIComponent(name)}`, token);
+        await api_1.ApiClient.post('/aliases', { alias, commandId: cmd.id }, token);
+        spinner.succeed(chalk_1.default.green(`Alias set: ${chalk_1.default.white(alias)} → ${chalk_1.default.white(name)}`));
+        console.log(chalk_1.default.dim(`\n  Run it with: recall run ${alias}\n`));
+    }
+    catch {
+        spinner.fail(chalk_1.default.red(`Command "${name}" not found`));
+    }
+});
+const aliasList = new commander_1.Command('list')
+    .description('List all your aliases')
+    .action(async () => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)('Fetching aliases...').start();
+    try {
+        const { aliases } = await api_1.ApiClient.get('/aliases', token);
+        spinner.stop();
+        if (!aliases.length) {
+            console.log(chalk_1.default.dim('\n  No aliases yet. Run: recall alias set <alias> <name>\n'));
+            return;
+        }
+        const table = new cli_table3_1.default({
+            head: [chalk_1.default.cyan('Alias'), chalk_1.default.cyan('Command name'), chalk_1.default.cyan('Command')],
+            style: { head: [], border: ['grey'] },
+            colWidths: [16, 20, 46],
+            wordWrap: true,
+        });
+        for (const a of aliases) {
+            const cmdName = a.command?.name ?? '—';
+            const cmdCommand = a.command?.command ?? '—';
+            const truncated = cmdCommand.length > 44
+                ? cmdCommand.slice(0, 44) + '…'
+                : cmdCommand;
+            table.push([
+                chalk_1.default.white(a.alias),
+                cmdName,
+                truncated,
+            ]);
+        }
+        console.log(table.toString());
+    }
+    catch {
+        spinner.fail(chalk_1.default.red('Failed to fetch aliases'));
+    }
+});
+const aliasDelete = new commander_1.Command('delete')
+    .argument('<alias>', 'Alias to delete')
+    .description('Delete an alias')
+    .action(async (alias) => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)(`Deleting alias "${alias}"...`).start();
+    try {
+        await api_1.ApiClient.delete(`/aliases/${encodeURIComponent(alias)}`, token);
+        spinner.succeed(chalk_1.default.green(`Deleted alias "${alias}"`));
+    }
+    catch {
+        spinner.fail(chalk_1.default.red(`Alias "${alias}" not found`));
+    }
+});
+exports.aliasCommand = new commander_1.Command('alias')
+    .description('Manage command aliases')
+    .addCommand(aliasSet)
+    .addCommand(aliasList)
+    .addCommand(aliasDelete);

package/dist/commands/approve.js

@@ -0,0 +1,108 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.approveCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const child_process_1 = require("child_process");
+const commander_1 = require("commander");
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+const auth_1 = require("../lib/auth");
+const approveRequest = new commander_1.Command('request')
+    .argument('<command-name>', 'Org command name to request approval for')
+    .description('Request approval to run an org command')
+    .action(async (commandName) => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)('Creating approval request...').start();
+    try {
+        const orgRes = await api_1.ApiClient.get('/orgs/me', token);
+        const org = orgRes.org;
+        const { commands } = await api_1.ApiClient.get(`/orgs/${org.id}/commands`, token);
+        const cmd = commands.find((c) => c.name === commandName);
+        if (!cmd) {
+            spinner.fail(chalk_1.default.red(`Command "${commandName}" not found in org vault`));
+            return;
+        }
+        const result = await api_1.ApiClient.post(`/orgs/${org.id}/commands/${cmd.id}/request-approval`, {}, token);
+        spinner.stop();
+        console.log(chalk_1.default.bold('\n  Approval request created\n'));
+        console.log(`  ${chalk_1.default.dim('Command:')} ${chalk_1.default.white(cmd.command)}`);
+        console.log();
+        console.log(chalk_1.default.dim('  Share this with an org admin to approve:'));
+        console.log(`  ${chalk_1.default.cyan(result.approveCommand)}`);
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        if (err instanceof api_1.ApiError) {
+            console.error(chalk_1.default.red(`\n  ${err.message}\n`));
+        }
+    }
+});
+const approveGrant = new commander_1.Command('grant')
+    .argument('<token>', 'Approval token')
+    .description('Approve a pending request')
+    .option('-r, --run', 'Run the command immediately after approving')
+    .action(async (token, opts) => {
+    const authToken = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)('Processing approval...').start();
+    try {
+        const result = await api_1.ApiClient.post(`/orgs/approve/${token}`, {}, authToken);
+        spinner.succeed(chalk_1.default.green('Approved!'));
+        console.log();
+        console.log(`  ${chalk_1.default.dim('Command:')} ${chalk_1.default.white(result.command)}`);
+        console.log();
+        if (opts.run) {
+            console.log(chalk_1.default.dim(`  Running: ${result.command}\n`));
+            (0, child_process_1.execSync)(result.command, { stdio: 'inherit' });
+        }
+        else {
+            console.log(chalk_1.default.dim('  Run it with: recall org run ' + result.name));
+        }
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        if (err instanceof api_1.ApiError) {
+            console.error(chalk_1.default.red(`\n  ${err.message}\n`));
+        }
+    }
+});
+const approveList = new commander_1.Command('list')
+    .description('List pending approval requests in your org')
+    .action(async () => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)('Fetching approvals...').start();
+    try {
+        const orgRes = await api_1.ApiClient.get('/orgs/me', token);
+        const org = orgRes.org;
+        const { approvals } = await api_1.ApiClient.get(`/orgs/${org.id}/approvals`, token);
+        spinner.stop();
+        if (!approvals.length) {
+            console.log(chalk_1.default.dim('\n  No pending approval requests.\n'));
+            return;
+        }
+        console.log(chalk_1.default.bold(`\n  Pending approvals — ${org.name}\n`));
+        for (const a of approvals) {
+            const time = new Date(a.createdAt).toLocaleString();
+            console.log(`  ${chalk_1.default.yellow('●')}  ` +
+                `${chalk_1.default.dim(time)}  ` +
+                chalk_1.default.dim(`command: ${a.commandId}`));
+            console.log(`     Approve with: ${chalk_1.default.cyan('recall approve grant ' + a.token)}`);
+            console.log();
+        }
+    }
+    catch (err) {
+        spinner.stop();
+        if (err instanceof api_1.ApiError) {
+            console.error(chalk_1.default.red(`\n  ${err.message}\n`));
+        }
+    }
+});
+exports.approveCommand = new commander_1.Command('approve')
+    .description('Manage command approval requests (Team plan)')
+    .addCommand(approveRequest)
+    .addCommand(approveGrant)
+    .addCommand(approveList);

package/dist/commands/audit.js

@@ -0,0 +1,58 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+const auth_1 = require("../lib/auth");
+const ACTION_COLORS = {
+    approval_requested: 'yellow',
+    approval_granted: 'green',
+    require_approval_on: 'cyan',
+    require_approval_off: 'dim',
+    command_run: 'white',
+    member_joined: 'green',
+    member_removed: 'red',
+};
+exports.auditCommand = new commander_1.Command('audit')
+    .description('Show org audit log (Team plan)')
+    .option('-l, --limit <n>', 'Number of entries', '30')
+    .action(async (opts) => {
+    const token = await (0, auth_1.requireAuth)();
+    const spinner = (0, ora_1.default)('Fetching audit log...').start();
+    try {
+        const { user } = await api_1.ApiClient.get('/auth/me', token);
+        const orgRes = await api_1.ApiClient.get('/orgs/me', token);
+        const org = orgRes.org;
+        const { audit } = await api_1.ApiClient.get(`/orgs/${org.id}/audit?limit=${opts.limit}`, token);
+        spinner.stop();
+        if (!audit.length) {
+            console.log(chalk_1.default.dim('\n  No audit events yet.\n'));
+            return;
+        }
+        console.log(chalk_1.default.bold(`\n  Audit log — ${org.name}\n`));
+        for (const log of audit) {
+            const time = new Date(log.createdAt).toLocaleString();
+            const color = ACTION_COLORS[log.action] ?? 'white';
+            const action = chalk_1.default[color]?.(log.action) ?? log.action;
+            const username = chalk_1.default.cyan(log.username);
+            const details = log.details ? chalk_1.default.dim(` — ${log.details}`) : '';
+            console.log(`  ${chalk_1.default.dim(time)}  ${username}  ${action}${details}`);
+        }
+        console.log();
+    }
+    catch (err) {
+        spinner.stop();
+        if (err instanceof api_1.ApiError && err.status === 403) {
+            console.log(chalk_1.default.yellow('\n  Audit log requires a Team plan.'));
+            console.log(chalk_1.default.dim('  Run: recall upgrade\n'));
+        }
+        else {
+            console.error(chalk_1.default.red('\n  Failed to fetch audit log\n'));
+        }
+    }
+});

package/dist/commands/auth/forgot.js

@@ -0,0 +1,33 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.forgotCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../../lib/api");
+const config_1 = require("../../lib/config");
+exports.forgotCommand = new commander_1.Command('forgot')
+    .description('Request a password reset token')
+    .argument('<email>', 'Your account email')
+    .action(async (email) => {
+    const spinner = (0, ora_1.default)('Sending reset request...').start();
+    try {
+        await api_1.ApiClient.post('/auth/forgot-password', { email });
+        spinner.stop();
+        console.log(chalk_1.default.green('\n  Reset request sent.\n'));
+        console.log(chalk_1.default.dim('  Check your email for the reset token.'));
+        console.log(chalk_1.default.dim('  Then run: recall auth reset <token>\n'));
+        // Dev hint — API logs token to console
+        const { apiUrl } = (0, config_1.getConfig)();
+        if (apiUrl.includes('127.0.0.1') || apiUrl.includes('localhost')) {
+            console.log(chalk_1.default.dim('  (Dev mode: check the API terminal for the token)\n'));
+        }
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red('Request failed'));
+        console.error(chalk_1.default.dim(`  ${err.message}\n`));
+    }
+});

package/dist/commands/auth/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authCommand = void 0;
+const commander_1 = require("commander");
+const forgot_1 = require("./forgot");
+const login_1 = require("./login");
+const logout_1 = require("./logout");
+const register_1 = require("./register");
+const reset_1 = require("./reset");
+exports.authCommand = new commander_1.Command('auth')
+    .description('Manage authentication')
+    .addCommand(register_1.registerCommand)
+    .addCommand(login_1.loginCommand)
+    .addCommand(logout_1.logoutCommand)
+    .addCommand(forgot_1.forgotCommand)
+    .addCommand(reset_1.resetCommand);

package/dist/commands/auth/login.js

@@ -0,0 +1,151 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const inquirer_1 = __importDefault(require("inquirer"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../../lib/api");
+const auth_1 = require("../../lib/auth");
+const config_1 = require("../../lib/config");
+async function loginWithCredentials() {
+    const answers = await inquirer_1.default.prompt([
+        {
+            type: 'input',
+            name: 'username',
+            message: 'Username:',
+            validate: (v) => v.length > 0 || 'Required',
+        },
+        {
+            type: 'password',
+            name: 'password',
+            message: 'Password:',
+            mask: '*',
+            validate: (v) => v.length > 0 || 'Required',
+        },
+    ]);
+    const spinner = (0, ora_1.default)('Authenticating...').start();
+    try {
+        const { token, username } = await api_1.ApiClient.post('/auth/login', {
+            username: answers.username,
+            password: answers.password,
+        });
+        await (0, auth_1.setToken)(token);
+        (0, config_1.saveConfig)({ username });
+        spinner.succeed(chalk_1.default.green('Authenticated successfully!'));
+        console.log(chalk_1.default.dim(`\n  Logged in as ${chalk_1.default.white(username)}\n`));
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red('Authentication failed'));
+        console.error(chalk_1.default.dim(`  ${err.message}\n`));
+        process.exit(1);
+    }
+}
+async function loginWithBrowser() {
+    const http = require('http');
+    const crypto = require('crypto');
+    const open = (await Promise.resolve().then(() => __importStar(require('open')))).default;
+    const state = crypto.randomBytes(16).toString('hex');
+    const spinner = (0, ora_1.default)('Opening browser...').start();
+    const { token, username } = await new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            const url = new URL(req.url, 'http://localhost:9876');
+            if (url.pathname !== '/callback') {
+                res.end();
+                return;
+            }
+            const returnedState = url.searchParams.get('state');
+            const returnedToken = url.searchParams.get('token');
+            const returnedUser = url.searchParams.get('username') ?? '';
+            if (returnedState !== state || !returnedToken) {
+                res.writeHead(400);
+                res.end('Invalid callback.');
+                reject(new Error('Invalid state'));
+                return;
+            }
+            // Return simple response — browser already shows success UI
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(`<!DOCTYPE html>
+<html>
+  <head><meta charset="utf-8"></head>
+  <body style="font-family:system-ui;max-width:480px;margin:80px auto;text-align:center;background:#080b0f;color:#e2e8f0;">
+    <h2 style="color:#4ade80;margin-bottom:12px;">✓ Authenticated!</h2>
+    <p style="color:#6b7e94;font-family:monospace;">You can close this tab and return to your terminal.</p>
+  </body>
+</html>`);
+            server.close();
+            resolve({ token: returnedToken, username: returnedUser });
+        });
+        server.listen(9876, () => {
+            const authUrl = `https://recall.devkitvault.com/cli-login?state=${state}&redirect=http://localhost:9876/callback`;
+            open(authUrl);
+            spinner.text = 'Waiting for browser authentication...';
+        });
+        setTimeout(() => {
+            server.close();
+            reject(new Error('Timed out after 5 minutes'));
+        }, 5 * 60 * 1000);
+    });
+    await (0, auth_1.setToken)(token);
+    (0, config_1.saveConfig)({ username });
+    spinner.succeed(chalk_1.default.green('Authenticated successfully!'));
+    console.log(chalk_1.default.dim(`\n  Logged in as ${chalk_1.default.white(username)}\n`));
+}
+exports.loginCommand = new commander_1.Command('login')
+    .description('Log in to recall')
+    .action(async () => {
+    console.log(chalk_1.default.bold('\n  recall auth\n'));
+    const { method } = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'method',
+            message: 'How would you like to log in?',
+            choices: [
+                { name: 'Login with credentials  (username + password)', value: 'credentials' },
+                { name: 'Login with browser       (opens devkitvault.com)', value: 'browser' },
+            ],
+        },
+    ]);
+    if (method === 'credentials') {
+        await loginWithCredentials();
+    }
+    else {
+        await loginWithBrowser();
+    }
+});

package/dist/commands/auth/logout.js

@@ -0,0 +1,15 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logoutCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const auth_1 = require("../../lib/auth");
+exports.logoutCommand = new commander_1.Command('logout')
+    .description('Log out of recall')
+    .action(async () => {
+    await (0, auth_1.deleteToken)();
+    console.log(chalk_1.default.green('\n  Logged out successfully.\n'));
+});

package/dist/commands/auth/register.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const inquirer_1 = __importDefault(require("inquirer"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../../lib/api");
+const auth_1 = require("../../lib/auth");
+const config_1 = require("../../lib/config");
+exports.registerCommand = new commander_1.Command('register')
+    .description('Create a new recall account')
+    .action(async () => {
+    console.log(chalk_1.default.bold('\n  Create your recall account\n'));
+    const answers = await inquirer_1.default.prompt([
+        {
+            type: 'input',
+            name: 'username',
+            message: 'Username:',
+            validate: (v) => {
+                if (v.length < 3)
+                    return 'Username must be at least 3 characters';
+                if (v.length > 30)
+                    return 'Username must be under 30 characters';
+                if (!/^[a-zA-Z0-9_-]+$/.test(v))
+                    return 'Only letters, numbers, - and _ allowed';
+                return true;
+            },
+        },
+        {
+            type: 'input',
+            name: 'email',
+            message: 'Email:',
+            validate: (v) => {
+                if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v))
+                    return 'Enter a valid email';
+                return true;
+            },
+        },
+        {
+            type: 'password',
+            name: 'password',
+            message: 'Password:',
+            mask: '*',
+            validate: (v) => {
+                if (v.length < 8)
+                    return 'Password must be at least 8 characters';
+                return true;
+            },
+        },
+        {
+            type: 'password',
+            name: 'confirm',
+            message: 'Confirm password:',
+            mask: '*',
+            validate: (v, answers) => {
+                if (v !== answers.password)
+                    return 'Passwords do not match';
+                return true;
+            },
+        },
+    ]);
+    const spinner = (0, ora_1.default)('Creating account...').start();
+    try {
+        const { token, username } = await api_1.ApiClient.post('/auth/register', {
+            username: answers.username,
+            email: answers.email,
+            password: answers.password,
+        });
+        await (0, auth_1.setToken)(token);
+        (0, config_1.saveConfig)({ username });
+        spinner.succeed(chalk_1.default.green('Account created successfully!'));
+        console.log(chalk_1.default.dim(`\n  Logged in as ${chalk_1.default.white(username)}`));
+        console.log(chalk_1.default.dim(`  Plan: ${chalk_1.default.white('free')}\n`));
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red('Registration failed'));
+        console.error(chalk_1.default.dim(`  ${err.message}\n`));
+        process.exit(1);
+    }
+});

package/dist/commands/auth/reset.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const commander_1 = require("commander");
+const inquirer_1 = __importDefault(require("inquirer"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../../lib/api");
+exports.resetCommand = new commander_1.Command('reset')
+    .description('Reset your password using a reset token')
+    .argument('<token>', 'Reset token from email')
+    .action(async (token) => {
+    console.log(chalk_1.default.bold('\n  Reset your password\n'));
+    const { newPassword, confirm } = await inquirer_1.default.prompt([
+        {
+            type: 'password',
+            name: 'newPassword',
+            message: 'New password:',
+            mask: '*',
+            validate: (v) => v.length >= 8 || 'Password must be at least 8 characters',
+        },
+        {
+            type: 'password',
+            name: 'confirm',
+            message: 'Confirm new password:',
+            mask: '*',
+            validate: (v, answers) => v === answers.newPassword || 'Passwords do not match',
+        },
+    ]);
+    const spinner = (0, ora_1.default)('Resetting password...').start();
+    try {
+        await api_1.ApiClient.post('/auth/reset-password', { token, newPassword });
+        spinner.succeed(chalk_1.default.green('Password reset successfully!'));
+        console.log(chalk_1.default.dim('\n  Run: recall auth login\n'));
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red('Reset failed'));
+        console.error(chalk_1.default.dim(`  ${err.message}\n`));
+    }
+});