@valentia-ai-skills/framework 1.0.4 → 1.0.5

package/bin/cli.js

@@ -214,6 +214,71 @@ function getLocalSkills() {
   return skills;
 }
 
+// ── Email + OTP Verification ──
+
+async function requestOtpForEmail(emailInput) {
+  let email = emailInput;
+  let attempts = 0;
+
+  while (attempts < 2) {
+    if (!email || !email.includes("@")) {
+      console.log(c("red", "Invalid email."));
+      process.exit(1);
+    }
+
+    console.log(c("dim", "\nVerifying your email..."));
+
+    const response = await fetchJSON(SUPABASE_FUNCTION_URL, { email, action: "request_otp" });
+
+    if (response.error === "not_found") {
+      attempts++;
+      if (attempts >= 2) {
+        console.log(c("red", "\n✗ Email not recognized. Access denied."));
+        console.log(c("dim", "  Contact your Framework Admin to be added to the system.\n"));
+        process.exit(1);
+      }
+      console.log(c("yellow", "\n⚠ Email not found. Please check and try again.\n"));
+      email = await ask(`${c("bold", "Enter your work email:")} `);
+      continue;
+    }
+
+    if (response.error) {
+      throw new Error(response.error);
+    }
+
+    // OTP sent successfully
+    console.log(c("green", `\n✓ Found: ${response.user_name}`));
+    console.log(c("dim", `  A verification code has been sent to ${email}\n`));
+
+    return email;
+  }
+}
+
+async function verifyOtp(email) {
+  const otp = await ask(`${c("bold", "Enter the 6-digit code:")} `);
+
+  if (!otp || otp.length < 4) {
+    console.log(c("red", "Invalid code."));
+    process.exit(1);
+  }
+
+  console.log(c("dim", "\nVerifying code..."));
+
+  const response = await fetchJSON(SUPABASE_FUNCTION_URL, { email, otp, action: "verify_otp" });
+
+  if (response.error === "invalid_otp") {
+    console.log(c("red", "\n✗ Invalid verification code. Please run setup again."));
+    process.exit(1);
+  }
+
+  if (response.error) {
+    throw new Error(response.error);
+  }
+
+  console.log(c("green", "✓ Verified!\n"));
+  return response;
+}
+
 // ── Commands ──
 
 async function cmdSetup() {
@@ -229,37 +294,39 @@ async function cmdSetup() {
   }
 
   // 2. Ask for email
-  const email = await ask(`${c("bold", "Enter your work email:")} `);
-  if (!email || !email.includes("@")) {
-    console.log(c("red", "Invalid email. Please try again."));
-    process.exit(1);
-  }
-
-  // 3. Lookup team from Supabase
-  console.log(c("dim", "\nLooking up your team..."));
+  let email = await ask(`${c("bold", "Enter your work email:")} `);
 
-  let response;
   let skills;
   let teamName = null;
   let useRemote = true;
 
   try {
-    response = await fetchJSON(SUPABASE_FUNCTION_URL, { email });
+    // 3. Request OTP (with 1 retry for wrong email)
+    email = await requestOtpForEmail(email);
+
+    // 4. Verify OTP and get skills
+    const response = await verifyOtp(email);
 
     if (response.team) {
       teamName = response.team.name;
-      console.log(c("green", `\n✓ Team: ${teamName}`));
+      console.log(c("green", `✓ Team: ${teamName}`));
       if (response.user) {
         console.log(c("dim", `  Welcome, ${response.user.name} (${response.user.role})`));
       }
       if (response.team.stack_tags?.length) {
         console.log(c("dim", `  Stack: ${response.team.stack_tags.join(", ")}`));
       }
-    } else {
-      console.log(c("yellow", `\n⚠ ${response.message || "No team found for this email."}`));
+    } else if (response.message) {
+      console.log(c("yellow", `⚠ ${response.message}`));
     }
 
     skills = response.skills || [];
+
+    if (skills.length === 0) {
+      console.log(c("yellow", "\n⚠ No skills are enabled for your team. Contact your Team Lead."));
+      process.exit(1);
+    }
+
     console.log(`  ${c("bold", skills.length)} skill(s) to install\n`);
 
   } catch (err) {
@@ -275,7 +342,7 @@ async function cmdSetup() {
     process.exit(1);
   }
 
-  // 4. Install for each tool
+  // 5. Install for each tool
   for (const toolKey of tools) {
     const tool = TOOL_CONFIGS[toolKey];
     if (!tool) continue;
@@ -290,7 +357,7 @@ async function cmdSetup() {
     console.log("");
   }
 
-  // 5. Save config
+  // 6. Save config
   const config = {
     version: require(path.join(__dirname, "..", "package.json")).version,
     email,
@@ -302,7 +369,7 @@ async function cmdSetup() {
   };
   saveConfig(config);
 
-  // 6. Summary
+  // 7. Summary
   console.log(c("blue", "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"));
   console.log(c("green", "✅ Setup complete!"));
   console.log(`   ${skills.length} skills installed for ${tools.length} tool(s)`);
@@ -320,13 +387,18 @@ async function cmdUpdate() {
     process.exit(1);
   }
 
-  console.log(c("dim", `Updating for ${config.email}...`));
+  const email = config.email;
+  console.log(c("dim", `Updating for ${email}...`));
 
   let skills;
   let teamName = config.team;
 
   try {
-    const response = await fetchJSON(SUPABASE_FUNCTION_URL, { email: config.email });
+    // Request OTP for the saved email
+    await requestOtpForEmail(email);
+
+    // Verify OTP
+    const response = await verifyOtp(email);
     skills = response.skills || [];
     teamName = response.team?.name || config.team;
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@valentia-ai-skills/framework",
-  "version": "1.0.4",
-  "description": "AI development skills framework — centralized coding standards, security patterns, and SOPs for AI-assisted development. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.",
+  "version": "1.0.5",
+  "description": "AI development skills framework — centralized coding standards, security patterns, and SOPs for AI-assisted development. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.",
   "keywords": [
     "ai-skills",
     "claude-code",