@popoverai/dotrequirements 0.18.0 → 0.19.0

package/README.md

@@ -96,8 +96,26 @@ Initialize a new project. Creates `.requirements/` directory, example files, and
 ```bash
 dotreq init
 dotreq init --name my-project
+dotreq init --invite abc123xyz
 ```
 
+**Options:**
+
+| Option | Description |
+|--------|-------------|
+| `--name <name>` | Set project name (skips prompt) |
+| `--invite <token>` | Join a team using an invite token |
+
+**Joining a team via invite:**
+
+If a team admin shares an invite command with you, join the team and connect in one step:
+
+```bash
+npx dotrequirements init --invite abc123xyz
+```
+
+This shows the team name, prompts you to sign in, adds you to the team, and lets you select a project.
+
 ### `dotreq link`
 
 Link your local environment to an existing project (when you already have a project in dot•requirements cloud).

package/dist/cli.js

@@ -47,6 +47,7 @@ program
     .command('init')
     .description('Initialize a new dotrequirements project')
     .option('-n, --name <name>', 'Project name (defaults to package.json name or directory name)')
+    .option('-i, --invite <token>', 'Join a team using an invite token')
     .action(wrapCommand(initCommand));
 program
     .command('link')

package/dist/commands/init.d.ts

@@ -1,5 +1,6 @@
 interface InitOptions {
     name?: string;
+    invite?: string;
 }
 export declare function initCommand(options?: InitOptions): Promise<void>;
 export {};

package/dist/commands/init.js

@@ -25,6 +25,19 @@ export async function initCommand(options = {}) {
             console.log('Use "dotrequirements link" to connect or reconnect to cloud.\n');
             return;
         }
+        // MEMBERSHIP-18: If invite token provided, use invite flow
+        if (options.invite) {
+            const initSucceeded = await inviteFlow(cwd, options.invite);
+            if (initSucceeded) {
+                console.log('\nDocumentation: https://docs.dotrequirements.io/getting-started');
+                console.log('By using this service, you agree to our Terms: https://app.dotrequirements.io/terms');
+                const setupMcp = await promptConfirm('\nConfigure AI assistant integration?', true);
+                if (setupMcp) {
+                    await mcpSetupCommand();
+                }
+            }
+            return;
+        }
         // INIT-1: Ask user whether to authenticate
         const authChoice = await promptChoice('Do you want to authenticate before initializing a project? (Recommended)', [
             { title: 'Yes', value: 'yes' },
@@ -290,6 +303,101 @@ async function connectExistingProjectFlow(cwd, client, team) {
     console.log('  1. Review the requirements in .requirements/');
     console.log('  2. Add the test harness to your test setup (see README)');
 }
+/**
+ * MEMBERSHIP-18: Invite flow - join a team using an invite token
+ * Returns true if successfully joined and connected
+ */
+async function inviteFlow(cwd, token) {
+    // MEMBERSHIP-18.0: Validate token before auth (no auth needed for this query)
+    const client = new ConvexHttpClient(getConvexUrl());
+    console.log('Validating invite token...');
+    const inviteInfo = await client.query(api.teamInvites.queries.getInviteInfo, { token });
+    // MEMBERSHIP-18.3: Handle invalid tokens
+    if (!inviteInfo.valid) {
+        const errorMessages = {
+            invalid: 'This invite token is not valid.',
+            expired: 'This invite token has expired.',
+            already_used: 'This invite token has already been used.',
+        };
+        const message = errorMessages[inviteInfo.error] || 'Invalid invite token.';
+        console.error(`\n✗ ${message}`);
+        console.log('Please ask the team admin for a new invite link.\n');
+        return false;
+    }
+    console.log(`\nYou've been invited to join team "${inviteInfo.teamName}"\n`);
+    // MEMBERSHIP-18.1: Auth flow
+    let oauthResult;
+    try {
+        oauthResult = await executeOAuthFlow();
+        console.log();
+    }
+    catch (error) {
+        console.error('\nAuthentication failed:', error instanceof Error ? error.message : String(error));
+        console.log('Please try again later.\n');
+        return false;
+    }
+    // Set up authenticated client
+    client.setAuth(oauthResult.accessToken);
+    // Ensure default team (this also claims any pending email invites via MEMBERSHIP-4)
+    await client.mutation(api.teams.mutations.ensureDefaultTeam, {});
+    // MEMBERSHIP-18.1: Accept invite (joins team, marks token used)
+    // MEMBERSHIP-18.2: If already a member, continue gracefully
+    try {
+        await client.action(api.polar.acceptTeamInvite, { token });
+        console.log(`✓ Joined team "${inviteInfo.teamName}"`);
+    }
+    catch (err) {
+        const errorMessage = err instanceof Error ? err.message : String(err);
+        if (errorMessage.includes('already a member')) {
+            console.log(`Already a member of "${inviteInfo.teamName}"`);
+        }
+        else {
+            throw err;
+        }
+    }
+    // MEMBERSHIP-18.1.0: Select project from team
+    const teamId = inviteInfo.teamId;
+    // Get team tier for secret expiry prompt
+    const teams = await client.query(api.teams.queries.listForUserWithUsage);
+    const team = teams.find((t) => t.teamId === teamId);
+    const tier = team?.tier || 'free';
+    const selectedProject = await selectProject(client, teamId);
+    if (!selectedProject) {
+        console.log('Initialization cancelled.');
+        return false;
+    }
+    // AUTHZ-3: Prompt for secret expiry (paid tier only)
+    const expiryDays = await promptExpiryDays(tier);
+    // Get or create secret for this project
+    console.log('\nGetting project credentials...');
+    const secretResult = await getOrCreateProjectSecret(client, selectedProject.projectId, expiryDays);
+    const projectId = selectedProject.projectSlug || selectedProject.projectId;
+    const secret = secretResult.secret;
+    if (secretResult.created) {
+        console.log('✓ Created new project secret');
+    }
+    else {
+        console.log('✓ Retrieved existing project secret');
+    }
+    // Write credentials to project-settings.json
+    writeProjectSettings(cwd, { projectId, projectSecret: secret });
+    console.log('✓ Wrote credentials to .requirements/project-settings.json');
+    // Create directory structure
+    await createRequirementsDirectory(cwd, projectId);
+    // Update .gitignore
+    ensureGitignore(cwd);
+    console.log('✓ Updated .gitignore\n');
+    // Pull existing requirements from cloud
+    console.log('Pulling requirements from cloud...');
+    await pullCommand({ project: projectId });
+    console.log(`\n✓ Successfully connected to project: ${selectedProject.projectName}`);
+    console.log(`  Project ID: ${projectId}`);
+    // Show guidance
+    console.log('\nNext steps:');
+    console.log('  1. Review the requirements in .requirements/');
+    console.log('  2. Add the test harness to your test setup (see README)');
+    return true;
+}
 /**
  * INIT-5: Create .requirements/ directory with README and example
  */

package/dist/convex.d.ts

@@ -39,6 +39,14 @@ export declare const api: {
             ensureDefaultTeam: any;
         };
     };
+    teamInvites: {
+        queries: {
+            getInviteInfo: any;
+        };
+    };
+    polar: {
+        acceptTeamInvite: any;
+    };
     projectSecrets: {
         queries: {
             getOwnSecret: any;

package/dist/convex.js

@@ -41,6 +41,14 @@ export const api = {
             ensureDefaultTeam: 'teams/mutations:ensureDefaultTeam',
         },
     },
+    teamInvites: {
+        queries: {
+            getInviteInfo: 'teamInvites/queries:getInviteInfo',
+        },
+    },
+    polar: {
+        acceptTeamInvite: 'polar:acceptTeamInvite',
+    },
     projectSecrets: {
         queries: {
             getOwnSecret: 'projectSecrets/queries:getOwnSecret',

package/dist/templates/context-file-section.md

@@ -4,6 +4,10 @@ This project uses dotrequirements for requirements tracking. Requirements live i
 
 ### Workflow
 
+**Plan mode:** When planning behavioral changes, your plan should ALWAYS begin
+with a step to write or update requirements. Implementation starts with
+requirements, so your plan should too.
+
 **ALWAYS follow this workflow when changing system behavior** (new features, bug fixes, any behavioral change). Only pure refactoring (same behavior, different code) may skip requirements.
 
 1. **Find or write requirements** - Check `.requirements/` for existing specs; write new ones if needed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@popoverai/dotrequirements",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "Requirements tracking CLI, test harness, and MCP server",
   "type": "module",
   "bin": {