@agenticmail/enterprise 0.2.2 → 0.3.0

package/src/db/sqlite.ts

@@ -52,10 +52,13 @@ export class SqliteAdapter extends DatabaseAdapter {
     const stmts = getAllCreateStatements();
     const tx = this.db.transaction(() => {
       for (const stmt of stmts) this.db.exec(stmt);
-      // Seed retention policy
+      // Seed defaults
       this.db.prepare(
         `INSERT OR IGNORE INTO retention_policy (id) VALUES ('default')`
       ).run();
+      this.db.prepare(
+        `INSERT OR IGNORE INTO company_settings (id, name, subdomain) VALUES ('default', 'My Company', 'my-company')`
+      ).run();
     });
     tx();
   }

package/src/server.ts

@@ -107,7 +107,7 @@ export function createServer(config: ServerConfig): ServerInstance {
 
   app.get('/health', (c) => c.json({
     status: 'ok',
-    version: '0.2.2',
+    version: '0.3.0',
     uptime: process.uptime(),
   }));
 

package/src/setup/company.ts

@@ -0,0 +1,64 @@
+/**
+ * Setup Wizard — Step 1: Company Info
+ *
+ * Collects company name, admin email, and admin password.
+ */
+
+export interface CompanyInfo {
+  companyName: string;
+  adminEmail: string;
+  adminPassword: string;
+  subdomain: string;
+}
+
+export async function promptCompanyInfo(
+  inquirer: any,
+  chalk: any,
+): Promise<CompanyInfo> {
+  console.log(chalk.bold.cyan('  Step 1 of 4: Company Info'));
+  console.log(chalk.dim('  Tell us about your organization.\n'));
+
+  const { companyName, adminEmail, adminPassword } = await inquirer.prompt([
+    {
+      type: 'input',
+      name: 'companyName',
+      message: 'Company name:',
+      validate: (v: string) => {
+        if (!v.trim()) return 'Company name is required';
+        if (v.length > 100) return 'Company name must be under 100 characters';
+        return true;
+      },
+    },
+    {
+      type: 'input',
+      name: 'adminEmail',
+      message: 'Admin email:',
+      validate: (v: string) => {
+        if (!v.includes('@') || !v.includes('.')) return 'Enter a valid email address';
+        return true;
+      },
+    },
+    {
+      type: 'password',
+      name: 'adminPassword',
+      message: 'Admin password:',
+      mask: '*',
+      validate: (v: string) => {
+        if (v.length < 8) return 'Password must be at least 8 characters';
+        if (!/[A-Z]/.test(v) && !/[0-9]/.test(v)) {
+          return 'Password should contain at least one uppercase letter or number';
+        }
+        return true;
+      },
+    },
+  ]);
+
+  // Derive subdomain from company name
+  const subdomain = companyName
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-|-$/g, '')
+    .slice(0, 63);
+
+  return { companyName, adminEmail, adminPassword, subdomain };
+}

package/src/setup/database.ts

@@ -0,0 +1,119 @@
+/**
+ * Setup Wizard — Step 2: Database Selection
+ *
+ * Lets the user pick from 10 database backends and
+ * collects the connection details specific to each one.
+ */
+
+import { getSupportedDatabases } from '../db/factory.js';
+
+export interface DatabaseSelection {
+  type: string;
+  connectionString?: string;
+  region?: string;
+  accessKeyId?: string;
+  secretAccessKey?: string;
+  authToken?: string;
+}
+
+const CONNECTION_HINTS: Record<string, string> = {
+  postgres: 'postgresql://user:pass@host:5432/dbname',
+  mysql: 'mysql://user:pass@host:3306/dbname',
+  mongodb: 'mongodb+srv://user:pass@cluster.mongodb.net/dbname',
+  supabase: 'postgresql://postgres:pass@db.xxxx.supabase.co:5432/postgres',
+  neon: 'postgresql://user:pass@ep-xxx.us-east-1.aws.neon.tech/dbname?sslmode=require',
+  planetscale: 'mysql://user:pass@aws.connect.psdb.cloud/dbname?ssl={"rejectUnauthorized":true}',
+  cockroachdb: 'postgresql://user:pass@cluster.cockroachlabs.cloud:26257/dbname?sslmode=verify-full',
+};
+
+export async function promptDatabase(
+  inquirer: any,
+  chalk: any,
+): Promise<DatabaseSelection> {
+  console.log('');
+  console.log(chalk.bold.cyan('  Step 2 of 4: Database'));
+  console.log(chalk.dim('  Where should your data live?\n'));
+
+  const databases = getSupportedDatabases();
+  const { dbType } = await inquirer.prompt([
+    {
+      type: 'list',
+      name: 'dbType',
+      message: 'Database backend:',
+      choices: databases.map((d: any) => ({
+        name: `${d.label}  ${chalk.dim(`(${d.group})`)}`,
+        value: d.type,
+      })),
+    },
+  ]);
+
+  // ─── SQLite ────────────────────────────────────────
+  if (dbType === 'sqlite') {
+    const { dbPath } = await inquirer.prompt([{
+      type: 'input',
+      name: 'dbPath',
+      message: 'Database file path:',
+      default: './agenticmail-enterprise.db',
+    }]);
+    return { type: dbType, connectionString: dbPath };
+  }
+
+  // ─── DynamoDB ──────────────────────────────────────
+  if (dbType === 'dynamodb') {
+    const answers = await inquirer.prompt([
+      {
+        type: 'input',
+        name: 'region',
+        message: 'AWS Region:',
+        default: 'us-east-1',
+      },
+      {
+        type: 'input',
+        name: 'accessKeyId',
+        message: 'AWS Access Key ID:',
+        validate: (v: string) => v.length > 0 || 'Required',
+      },
+      {
+        type: 'password',
+        name: 'secretAccessKey',
+        message: 'AWS Secret Access Key:',
+        mask: '*',
+        validate: (v: string) => v.length > 0 || 'Required',
+      },
+    ]);
+    return { type: dbType, ...answers };
+  }
+
+  // ─── Turso / LibSQL ────────────────────────────────
+  if (dbType === 'turso') {
+    const answers = await inquirer.prompt([
+      {
+        type: 'input',
+        name: 'connectionString',
+        message: 'Turso database URL:',
+        suffix: chalk.dim('  (e.g. libsql://db-org.turso.io)'),
+        validate: (v: string) => v.length > 0 || 'Required',
+      },
+      {
+        type: 'password',
+        name: 'authToken',
+        message: 'Turso auth token:',
+        mask: '*',
+        validate: (v: string) => v.length > 0 || 'Required',
+      },
+    ]);
+    return { type: dbType, connectionString: answers.connectionString, authToken: answers.authToken };
+  }
+
+  // ─── All others (connection string) ────────────────
+  const hint = CONNECTION_HINTS[dbType] || '';
+  const { connectionString } = await inquirer.prompt([{
+    type: 'input',
+    name: 'connectionString',
+    message: 'Connection string:',
+    suffix: hint ? chalk.dim(`  (e.g. ${hint})`) : '',
+    validate: (v: string) => v.length > 0 || 'Connection string is required',
+  }]);
+
+  return { type: dbType, connectionString };
+}

package/src/setup/deployment.ts

@@ -0,0 +1,50 @@
+/**
+ * Setup Wizard — Step 3: Deployment Target
+ *
+ * Choose where the enterprise server will run.
+ */
+
+export type DeployTarget = 'cloud' | 'fly' | 'railway' | 'docker' | 'local';
+
+export interface DeploymentSelection {
+  target: DeployTarget;
+}
+
+export async function promptDeployment(
+  inquirer: any,
+  chalk: any,
+): Promise<DeploymentSelection> {
+  console.log('');
+  console.log(chalk.bold.cyan('  Step 3 of 4: Deployment'));
+  console.log(chalk.dim('  Where should your dashboard run?\n'));
+
+  const { deployTarget } = await inquirer.prompt([{
+    type: 'list',
+    name: 'deployTarget',
+    message: 'Deploy to:',
+    choices: [
+      {
+        name: `AgenticMail Cloud  ${chalk.dim('(managed, instant URL)')}`,
+        value: 'cloud',
+      },
+      {
+        name: `Fly.io  ${chalk.dim('(your account)')}`,
+        value: 'fly',
+      },
+      {
+        name: `Railway  ${chalk.dim('(your account)')}`,
+        value: 'railway',
+      },
+      {
+        name: `Docker  ${chalk.dim('(self-hosted)')}`,
+        value: 'docker',
+      },
+      {
+        name: `Local  ${chalk.dim('(dev/testing, runs here)')}`,
+        value: 'local',
+      },
+    ],
+  }]);
+
+  return { target: deployTarget };
+}

package/src/setup/domain.ts

@@ -0,0 +1,46 @@
+/**
+ * Setup Wizard — Step 4: Custom Domain (Optional)
+ *
+ * Optionally configure a custom domain for the dashboard.
+ */
+
+export interface DomainSelection {
+  customDomain?: string;
+}
+
+export async function promptDomain(
+  inquirer: any,
+  chalk: any,
+  deployTarget: string,
+): Promise<DomainSelection> {
+  // Skip for local deployments
+  if (deployTarget === 'local') {
+    return {};
+  }
+
+  console.log('');
+  console.log(chalk.bold.cyan('  Step 4 of 4: Custom Domain'));
+  console.log(chalk.dim('  Optional — you can add this later.\n'));
+
+  const { wantsDomain } = await inquirer.prompt([{
+    type: 'confirm',
+    name: 'wantsDomain',
+    message: 'Add a custom domain?',
+    default: false,
+  }]);
+
+  if (!wantsDomain) return {};
+
+  const { domain } = await inquirer.prompt([{
+    type: 'input',
+    name: 'domain',
+    message: 'Custom domain:',
+    suffix: chalk.dim('  (e.g. agents.acme.com)'),
+    validate: (v: string) => {
+      if (!v.includes('.')) return 'Enter a valid domain (e.g. agents.acme.com)';
+      return true;
+    },
+  }]);
+
+  return { customDomain: domain };
+}

package/src/setup/index.ts

@@ -0,0 +1,82 @@
+/**
+ * Setup Wizard — Orchestrator
+ *
+ * Runs the 4-step interactive setup wizard by composing
+ * the individual step modules. Each step is in its own file
+ * so the wizard logic stays manageable.
+ *
+ * Steps:
+ *   1. Company Info   (setup/company.ts)
+ *   2. Database       (setup/database.ts)
+ *   3. Deployment     (setup/deployment.ts)
+ *   4. Custom Domain  (setup/domain.ts)
+ *   → Provision       (setup/provision.ts)
+ */
+
+import { promptCompanyInfo } from './company.js';
+import { promptDatabase } from './database.js';
+import { promptDeployment } from './deployment.js';
+import { promptDomain } from './domain.js';
+import { provision } from './provision.js';
+
+export { promptCompanyInfo } from './company.js';
+export { promptDatabase } from './database.js';
+export { promptDeployment } from './deployment.js';
+export { promptDomain } from './domain.js';
+export { provision } from './provision.js';
+export type { CompanyInfo } from './company.js';
+export type { DatabaseSelection } from './database.js';
+export type { DeployTarget, DeploymentSelection } from './deployment.js';
+export type { DomainSelection } from './domain.js';
+export type { ProvisionConfig, ProvisionResult } from './provision.js';
+
+/**
+ * Run the full interactive setup wizard.
+ * Returns when provisioning is complete (or the local server is running).
+ */
+export async function runSetupWizard(): Promise<void> {
+  // Dynamic imports — these are optional CLI deps
+  const { default: inquirer } = await import('inquirer');
+  const { default: ora } = await import('ora');
+  const { default: chalk } = await import('chalk');
+
+  // ─── Banner ──────────────────────────────────────
+  console.log('');
+  console.log(chalk.bold('  AgenticMail Enterprise'));
+  console.log(chalk.dim('  AI Agent Identity & Email for Organizations'));
+  console.log('');
+  console.log(chalk.dim('  ─────────────────────────────────────────'));
+  console.log('');
+
+  // ─── Step 1: Company ─────────────────────────────
+  const company = await promptCompanyInfo(inquirer, chalk);
+
+  // ─── Step 2: Database ────────────────────────────
+  const database = await promptDatabase(inquirer, chalk);
+
+  // ─── Step 3: Deployment ──────────────────────────
+  const { target: deployTarget } = await promptDeployment(inquirer, chalk);
+
+  // ─── Step 4: Custom Domain ───────────────────────
+  const domain = await promptDomain(inquirer, chalk, deployTarget);
+
+  // ─── Provision ───────────────────────────────────
+  console.log('');
+  console.log(chalk.dim('  ─────────────────────────────────────────'));
+  console.log('');
+
+  const result = await provision(
+    { company, database, deployTarget, domain },
+    ora,
+    chalk,
+  );
+
+  if (!result.success) {
+    console.error('');
+    console.error(chalk.red(`  Setup failed: ${result.error}`));
+    console.error(chalk.dim('  Check your database connection and try again.'));
+    process.exit(1);
+  }
+
+  console.log('');
+}

package/src/setup/provision.ts

@@ -0,0 +1,226 @@
+/**
+ * Setup Wizard — Provisioning
+ *
+ * Connects to the database, runs migrations, creates the admin account,
+ * and deploys to the selected target. This is the "do the work" step
+ * after all prompts are collected.
+ */
+
+import { randomUUID } from 'crypto';
+import type { DatabaseAdapter } from '../db/adapter.js';
+import type { CompanyInfo } from './company.js';
+import type { DatabaseSelection } from './database.js';
+import type { DeployTarget } from './deployment.js';
+import type { DomainSelection } from './domain.js';
+
+export interface ProvisionConfig {
+  company: CompanyInfo;
+  database: DatabaseSelection;
+  deployTarget: DeployTarget;
+  domain: DomainSelection;
+}
+
+export interface ProvisionResult {
+  success: boolean;
+  url?: string;
+  error?: string;
+  jwtSecret: string;
+  db: DatabaseAdapter;
+  serverClose?: () => void;
+}
+
+export async function provision(
+  config: ProvisionConfig,
+  ora: any,
+  chalk: any,
+): Promise<ProvisionResult> {
+  const spinner = ora('Connecting to database...').start();
+  const jwtSecret = randomUUID() + randomUUID();
+
+  try {
+    // ─── Database ──────────────────────────────────
+    const { createAdapter } = await import('../db/factory.js');
+    const db = await createAdapter(config.database as any);
+    spinner.text = 'Running migrations...';
+    await db.migrate();
+    spinner.succeed('Database ready');
+
+    // ─── Company Settings ──────────────────────────
+    spinner.start('Creating company...');
+    await db.updateSettings({
+      name: config.company.companyName,
+      subdomain: config.company.subdomain,
+      domain: config.domain.customDomain,
+    });
+    spinner.succeed('Company created');
+
+    // ─── Admin Account ─────────────────────────────
+    spinner.start('Creating admin account...');
+    const admin = await db.createUser({
+      email: config.company.adminEmail,
+      name: 'Admin',
+      role: 'owner',
+      password: config.company.adminPassword,
+    });
+    await db.logEvent({
+      actor: admin.id,
+      actorType: 'system',
+      action: 'setup.complete',
+      resource: `company:${config.company.subdomain}`,
+      details: {
+        dbType: config.database.type,
+        deployTarget: config.deployTarget,
+        companyName: config.company.companyName,
+      },
+    });
+    spinner.succeed('Admin account created');
+
+    // ─── Deploy ────────────────────────────────────
+    const result = await deploy(config, db, jwtSecret, spinner, chalk);
+
+    return {
+      success: true,
+      url: result.url,
+      jwtSecret,
+      db,
+      serverClose: result.close,
+    };
+  } catch (err: any) {
+    spinner.fail(`Setup failed: ${err.message}`);
+    return {
+      success: false,
+      error: err.message,
+      jwtSecret,
+      db: null as any,
+    };
+  }
+}
+
+// ─── Deploy to selected target ──────────────────────
+
+interface DeployResult {
+  url?: string;
+  close?: () => void;
+}
+
+async function deploy(
+  config: ProvisionConfig,
+  db: DatabaseAdapter,
+  jwtSecret: string,
+  spinner: any,
+  chalk: any,
+): Promise<DeployResult> {
+  const { deployTarget, company, database, domain } = config;
+
+  // ── Cloud ─────────────────────────────────────────
+  if (deployTarget === 'cloud') {
+    spinner.start('Deploying to AgenticMail Cloud...');
+    const { deployToCloud } = await import('../deploy/managed.js');
+    const result = await deployToCloud({
+      subdomain: company.subdomain,
+      plan: 'free',
+      dbType: database.type,
+      dbConnectionString: database.connectionString || '',
+      jwtSecret,
+    });
+    spinner.succeed(`Deployed to ${result.url}`);
+
+    printCloudSuccess(chalk, result.url, company.adminEmail, domain.customDomain, company.subdomain);
+    return { url: result.url };
+  }
+
+  // ── Docker ────────────────────────────────────────
+  if (deployTarget === 'docker') {
+    const { generateDockerCompose } = await import('../deploy/managed.js');
+    const compose = generateDockerCompose({
+      dbType: database.type,
+      dbConnectionString: database.connectionString || '',
+      port: 3000,
+      jwtSecret,
+    });
+    const { writeFileSync } = await import('fs');
+    writeFileSync('docker-compose.yml', compose);
+    spinner.succeed('docker-compose.yml generated');
+
+    console.log('');
+    console.log(chalk.green.bold('  Docker deployment ready!'));
+    console.log('');
+    console.log(`  Run:       ${chalk.cyan('docker compose up -d')}`);
+    console.log(`  Dashboard: ${chalk.cyan('http://localhost:3000')}`);
+    return { url: 'http://localhost:3000' };
+  }
+
+  // ── Fly.io ────────────────────────────────────────
+  if (deployTarget === 'fly') {
+    const { generateFlyToml } = await import('../deploy/managed.js');
+    const flyToml = generateFlyToml(`am-${company.subdomain}`, 'iad');
+    const { writeFileSync } = await import('fs');
+    writeFileSync('fly.toml', flyToml);
+    spinner.succeed('fly.toml generated');
+
+    console.log('');
+    console.log(chalk.green.bold('  Fly.io deployment ready!'));
+    console.log('');
+    console.log(`  1. ${chalk.cyan('fly launch --copy-config')}`);
+    console.log(`  2. ${chalk.cyan(`fly secrets set DATABASE_URL="${database.connectionString}" JWT_SECRET="${jwtSecret}"`)}`);
+    console.log(`  3. ${chalk.cyan('fly deploy')}`);
+    return {};
+  }
+
+  // ── Railway ───────────────────────────────────────
+  if (deployTarget === 'railway') {
+    const { generateRailwayConfig } = await import('../deploy/managed.js');
+    const railwayConfig = generateRailwayConfig();
+    const { writeFileSync } = await import('fs');
+    writeFileSync('railway.toml', railwayConfig);
+    spinner.succeed('railway.toml generated');
+
+    console.log('');
+    console.log(chalk.green.bold('  Railway deployment ready!'));
+    console.log('');
+    console.log(`  1. ${chalk.cyan('railway init')}`);
+    console.log(`  2. ${chalk.cyan('railway link')}`);
+    console.log(`  3. ${chalk.cyan('railway up')}`);
+    return {};
+  }
+
+  // ── Local ─────────────────────────────────────────
+  spinner.start('Starting local server...');
+  const { createServer } = await import('../server.js');
+  const server = createServer({ port: 3000, db, jwtSecret });
+  const handle = await server.start();
+  spinner.succeed('Server running');
+
+  console.log('');
+  console.log(chalk.green.bold('  AgenticMail Enterprise is running!'));
+  console.log('');
+  console.log(`  ${chalk.bold('Dashboard:')}  ${chalk.cyan('http://localhost:3000')}`);
+  console.log(`  ${chalk.bold('API:')}        ${chalk.cyan('http://localhost:3000/api')}`);
+  console.log(`  ${chalk.bold('Admin:')}      ${company.adminEmail}`);
+  console.log('');
+  console.log(chalk.dim('  Press Ctrl+C to stop'));
+
+  return { url: 'http://localhost:3000', close: handle.close };
+}
+
+// ─── Success Messages ───────────────────────────────
+
+function printCloudSuccess(
+  chalk: any,
+  url: string,
+  adminEmail: string,
+  customDomain?: string,
+  subdomain?: string,
+) {
+  console.log('');
+  console.log(chalk.green.bold('  Your dashboard is live!'));
+  console.log('');
+  console.log(`  ${chalk.bold('URL:')}      ${chalk.cyan(url)}`);
+  console.log(`  ${chalk.bold('Admin:')}    ${adminEmail}`);
+  console.log(`  ${chalk.bold('Password:')} (the one you just set)`);
+  if (customDomain) {
+    console.log('');
+    console.log(chalk.dim(`  To use ${customDomain}:`));
+    console.log(chalk.dim(`  Add CNAME: ${customDomain} → ${subdomain}.agenticmail.cloud`));
+  }
+}