@revturbine/cli 0.1.1 → 0.2.0

package/README.md

@@ -25,6 +25,7 @@ Requires Node ≥ 20.
 ## Quick start
 
 ```bash
+revturbine signup                           # create an account (email + password + emailed code)
 revturbine verify ./export-config.json      # schema-validate locally (no network)
 revturbine login                            # authorize this machine (device flow)
 revturbine diff ./export-config.json        # dry-run: live config vs local, no writes
@@ -38,6 +39,7 @@ revturbine deploy <change-set-id>           # submit → approve → deploy (go
 
 | Command | What it does |
 |---|---|
+| `signup` | Create an account headlessly: email + password, then an emailed one-time code to verify, then a token is stored. A business-email domain already claimed by a workspace exits with "an admin must invite you" (no token). |
 | `login` / `logout` | Device-flow auth; tokens stored at `~/.revturbine/credentials.json` (mode 0600). |
 | `verify` | Schema-validate a config offline against the bundled schema. |
 | `diff` | Non-destructive: download the live config, diff against local, dry-run the import. |

package/dist/cli.js

@@ -4999,6 +4999,87 @@ async function deviceLogin(baseUrl, log = console.log) {
   return token;
 }
 
+// src/lib/signup.ts
+import os3 from "os";
+function trimUrl2(u) {
+  return u.replace(/\/+$/, "");
+}
+async function errorMessage(res, fallback) {
+  const body = await res.json().catch(() => ({}));
+  const detail = Array.isArray(body.detail) ? body.detail.join("; ") : typeof body.detail === "string" ? body.detail : void 0;
+  return body.message ?? detail ?? body.error ?? `${fallback} (${res.status})`;
+}
+async function startSignup(baseUrl, body, fetchImpl) {
+  const res = await fetchImpl(`${trimUrl2(baseUrl)}/api/cli/signup`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  if (!res.ok) throw new Error(await errorMessage(res, "Signup failed"));
+  return await res.json();
+}
+async function verifyOtp(baseUrl, email, otp, fetchImpl) {
+  const res = await fetchImpl(`${trimUrl2(baseUrl)}/api/cli/signup/verify`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ email, otp })
+  });
+  if (!res.ok) throw new Error(await errorMessage(res, "Verification failed"));
+}
+async function mintSignupToken(baseUrl, email, password, label, fetchImpl) {
+  const res = await fetchImpl(`${trimUrl2(baseUrl)}/api/cli/signup/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(label ? { email, password, label } : { email, password })
+  });
+  if (!res.ok) throw new Error(await errorMessage(res, "Token request failed"));
+  return await res.json();
+}
+async function signup(opts) {
+  const log = opts.log ?? console.log;
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const save = opts.saveCredentialImpl ?? saveCredential;
+  const maxAttempts = opts.maxOtpAttempts ?? 3;
+  const outcome = await startSignup(
+    opts.baseUrl,
+    { name: opts.name, email: opts.email, password: opts.password },
+    fetchImpl
+  );
+  if (outcome.outcome === "awaiting_invitation") {
+    log(
+      outcome.message ?? "Your email domain belongs to an existing workspace \u2014 an admin must invite you. Check your email."
+    );
+    return { status: "awaiting_invitation" };
+  }
+  log(`
+Account created. Enter the verification code emailed to ${opts.email}.`);
+  for (let attempt = 1; ; attempt++) {
+    const otp = (await opts.promptOtp(attempt)).trim();
+    try {
+      await verifyOtp(opts.baseUrl, opts.email, otp, fetchImpl);
+      break;
+    } catch (err) {
+      if (attempt >= maxAttempts) throw err;
+      log(`  ${err.message} \u2014 try again (${attempt}/${maxAttempts}).`);
+    }
+  }
+  const token = await mintSignupToken(
+    opts.baseUrl,
+    opts.email,
+    opts.password,
+    os3.hostname(),
+    fetchImpl
+  );
+  save(opts.baseUrl, {
+    token: token.access_token,
+    tenant_id: token.tenant_id ?? null,
+    created_at: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  log(`
+\u2713 Signed up and logged in. Token stored for ${opts.baseUrl} (${redactToken(token.access_token)}).`);
+  return { status: "signed_in", token };
+}
+
 // src/lib/config-diff.ts
 var COLLECTIONS = [
   "plans",
@@ -5244,6 +5325,51 @@ program.command("login").description("Authorize this machine via the browser (de
     process.exit(1);
   }
 });
+async function promptLine(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    return (await rl.question(question)).trim();
+  } finally {
+    rl.close();
+  }
+}
+async function promptHidden(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: true });
+  const muted = rl;
+  muted._writeToOutput = (s) => {
+    process.stdout.write(s.includes(question) ? s : "*");
+  };
+  try {
+    const answer = await rl.question(question);
+    process.stdout.write("\n");
+    return answer.trim();
+  } finally {
+    rl.close();
+  }
+}
+program.command("signup").description("Create a RevTurbine account and log in (email + password + emailed verification code).").argument("[url]", `RevTurbine instance URL (default: ${DEFAULT_URL})`).option("--name <name>", "Full name (prompted if omitted)").option("--email <email>", "Email address (prompted if omitted)").option("--password <password>", "Password, min 8 chars (prompted hidden if omitted)").action(async (url, opts) => {
+  const baseUrl = normalizeBaseUrl(url ?? DEFAULT_URL);
+  try {
+    const name = opts.name ?? await promptLine("Name: ");
+    const email = opts.email ?? await promptLine("Email: ");
+    const password = opts.password ?? await promptHidden("Password: ");
+    if (!name || !email || password.length < 8) {
+      console.error(`${LOG} \u2717 Name, email, and a password of at least 8 characters are required.`);
+      process.exit(1);
+    }
+    const result = await signup({
+      baseUrl,
+      name,
+      email,
+      password,
+      promptOtp: (attempt) => promptLine(attempt > 1 ? "Verification code (try again): " : "Verification code: ")
+    });
+    if (result.status === "awaiting_invitation") process.exit(0);
+  } catch (err) {
+    console.error(`${LOG} \u2717 Signup failed: ${err.message}`);
+    process.exit(1);
+  }
+});
 program.command("logout").description("Remove the stored token for <url>.").argument("[url]", `RevTurbine instance URL (default: ${DEFAULT_URL})`).action((url) => {
   const normalized = normalizeBaseUrl(url ?? DEFAULT_URL);
   const removed = removeCredential(normalized);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@revturbine/cli",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "revturbine — verify RevTurbine ExportedConfig files and ship them to a RevTurbine instance through the Change Set lifecycle.",
   "license": "MIT",
   "repository": {