@agenticmail/enterprise 0.3.2 → 0.4.0

package/dist/cli.js

@@ -1,383 +1,57 @@
 #!/usr/bin/env node
-import {
-  getSupportedDatabases
-} from "./chunk-BS2WCSHO.js";
-import "./chunk-PNKVD2UK.js";
 
-// src/setup/company.ts
-async function promptCompanyInfo(inquirer, chalk) {
-  console.log(chalk.bold.cyan("  Step 1 of 4: Company Info"));
-  console.log(chalk.dim("  Tell us about your organization.\n"));
-  const { companyName, adminEmail, adminPassword } = await inquirer.prompt([
-    {
-      type: "input",
-      name: "companyName",
-      message: "Company name:",
-      validate: (v) => {
-        if (!v.trim()) return "Company name is required";
-        if (v.length > 100) return "Company name must be under 100 characters";
-        return true;
-      }
-    },
-    {
-      type: "input",
-      name: "adminEmail",
-      message: "Admin email:",
-      validate: (v) => {
-        if (!v.includes("@") || !v.includes(".")) return "Enter a valid email address";
-        return true;
-      }
-    },
-    {
-      type: "password",
-      name: "adminPassword",
-      message: "Admin password:",
-      mask: "*",
-      validate: (v) => {
-        if (v.length < 8) return "Password must be at least 8 characters";
-        if (!/[A-Z]/.test(v) && !/[0-9]/.test(v)) {
-          return "Password should contain at least one uppercase letter or number";
-        }
-        return true;
-      }
-    }
-  ]);
-  const subdomain = companyName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 63);
-  return { companyName, adminEmail, adminPassword, subdomain };
-}
-
-// src/setup/database.ts
-var CONNECTION_HINTS = {
-  postgres: "postgresql://user:pass@host:5432/dbname",
-  mysql: "mysql://user:pass@host:3306/dbname",
-  mongodb: "mongodb+srv://user:pass@cluster.mongodb.net/dbname",
-  supabase: "postgresql://postgres:pass@db.xxxx.supabase.co:5432/postgres",
-  neon: "postgresql://user:pass@ep-xxx.us-east-1.aws.neon.tech/dbname?sslmode=require",
-  planetscale: 'mysql://user:pass@aws.connect.psdb.cloud/dbname?ssl={"rejectUnauthorized":true}',
-  cockroachdb: "postgresql://user:pass@cluster.cockroachlabs.cloud:26257/dbname?sslmode=verify-full"
-};
-async function promptDatabase(inquirer, chalk) {
-  console.log("");
-  console.log(chalk.bold.cyan("  Step 2 of 4: Database"));
-  console.log(chalk.dim("  Where should your data live?\n"));
-  const databases = getSupportedDatabases();
-  const { dbType } = await inquirer.prompt([
-    {
-      type: "list",
-      name: "dbType",
-      message: "Database backend:",
-      choices: databases.map((d) => ({
-        name: `${d.label}  ${chalk.dim(`(${d.group})`)}`,
-        value: d.type
-      }))
-    }
-  ]);
-  if (dbType === "sqlite") {
-    const { dbPath } = await inquirer.prompt([{
-      type: "input",
-      name: "dbPath",
-      message: "Database file path:",
-      default: "./agenticmail-enterprise.db"
-    }]);
-    return { type: dbType, connectionString: dbPath };
-  }
-  if (dbType === "dynamodb") {
-    const answers = await inquirer.prompt([
-      {
-        type: "input",
-        name: "region",
-        message: "AWS Region:",
-        default: "us-east-1"
-      },
-      {
-        type: "input",
-        name: "accessKeyId",
-        message: "AWS Access Key ID:",
-        validate: (v) => v.length > 0 || "Required"
-      },
-      {
-        type: "password",
-        name: "secretAccessKey",
-        message: "AWS Secret Access Key:",
-        mask: "*",
-        validate: (v) => v.length > 0 || "Required"
-      }
-    ]);
-    return { type: dbType, ...answers };
-  }
-  if (dbType === "turso") {
-    const answers = await inquirer.prompt([
-      {
-        type: "input",
-        name: "connectionString",
-        message: "Turso database URL:",
-        suffix: chalk.dim("  (e.g. libsql://db-org.turso.io)"),
-        validate: (v) => v.length > 0 || "Required"
-      },
-      {
-        type: "password",
-        name: "authToken",
-        message: "Turso auth token:",
-        mask: "*",
-        validate: (v) => v.length > 0 || "Required"
-      }
-    ]);
-    return { type: dbType, connectionString: answers.connectionString, authToken: answers.authToken };
-  }
-  const hint = CONNECTION_HINTS[dbType] || "";
-  const { connectionString } = await inquirer.prompt([{
-    type: "input",
-    name: "connectionString",
-    message: "Connection string:",
-    suffix: hint ? chalk.dim(`  (e.g. ${hint})`) : "",
-    validate: (v) => v.length > 0 || "Connection string is required"
-  }]);
-  return { type: dbType, connectionString };
-}
-
-// src/setup/deployment.ts
-async function promptDeployment(inquirer, chalk) {
-  console.log("");
-  console.log(chalk.bold.cyan("  Step 3 of 4: Deployment"));
-  console.log(chalk.dim("  Where should your dashboard run?\n"));
-  const { deployTarget } = await inquirer.prompt([{
-    type: "list",
-    name: "deployTarget",
-    message: "Deploy to:",
-    choices: [
-      {
-        name: `AgenticMail Cloud  ${chalk.dim("(managed, instant URL)")}`,
-        value: "cloud"
-      },
-      {
-        name: `Fly.io  ${chalk.dim("(your account)")}`,
-        value: "fly"
-      },
-      {
-        name: `Railway  ${chalk.dim("(your account)")}`,
-        value: "railway"
-      },
-      {
-        name: `Docker  ${chalk.dim("(self-hosted)")}`,
-        value: "docker"
-      },
-      {
-        name: `Local  ${chalk.dim("(dev/testing, runs here)")}`,
-        value: "local"
-      }
-    ]
-  }]);
-  return { target: deployTarget };
-}
-
-// src/setup/domain.ts
-async function promptDomain(inquirer, chalk, deployTarget) {
-  if (deployTarget === "local") {
-    return {};
-  }
-  console.log("");
-  console.log(chalk.bold.cyan("  Step 4 of 4: Custom Domain"));
-  console.log(chalk.dim("  Optional \u2014 you can add this later.\n"));
-  const { wantsDomain } = await inquirer.prompt([{
-    type: "confirm",
-    name: "wantsDomain",
-    message: "Add a custom domain?",
-    default: false
-  }]);
-  if (!wantsDomain) return {};
-  const { domain } = await inquirer.prompt([{
-    type: "input",
-    name: "domain",
-    message: "Custom domain:",
-    suffix: chalk.dim("  (e.g. agents.acme.com)"),
-    validate: (v) => {
-      if (!v.includes(".")) return "Enter a valid domain (e.g. agents.acme.com)";
-      return true;
-    }
-  }]);
-  return { customDomain: domain };
-}
+// src/cli.ts
+var args = process.argv.slice(2);
+var command = args[0];
+switch (command) {
+  case "validate":
+    import("./cli-validate-WJBUOEGW.js").then((m) => m.runValidate(args.slice(1))).catch(fatal);
+    break;
+  case "build-skill":
+    import("./cli-build-skill-XOYECCLE.js").then((m) => m.runBuildSkill(args.slice(1))).catch(fatal);
+    break;
+  case "submit-skill":
+    import("./cli-submit-skill-RSBLF5XN.js").then((m) => m.runSubmitSkill(args.slice(1))).catch(fatal);
+    break;
+  case "recover":
+    import("./cli-recover-SSGGSKZJ.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
+    break;
+  case "verify-domain":
+    import("./cli-verify-V3GPFMWU.js").then((m) => m.runVerifyDomain(args.slice(1))).catch(fatal);
+    break;
+  case "--help":
+  case "-h":
+    console.log(`
+AgenticMail Enterprise CLI
 
-// src/setup/provision.ts
-import { randomUUID } from "crypto";
-async function provision(config, ora, chalk) {
-  const spinner = ora("Connecting to database...").start();
-  const jwtSecret = randomUUID() + randomUUID();
-  try {
-    const { createAdapter } = await import("./factory-HINWFYZ3.js");
-    const db = await createAdapter(config.database);
-    spinner.text = "Running migrations...";
-    await db.migrate();
-    spinner.succeed("Database ready");
-    spinner.start("Creating company...");
-    await db.updateSettings({
-      name: config.company.companyName,
-      subdomain: config.company.subdomain,
-      domain: config.domain.customDomain
-    });
-    spinner.succeed("Company created");
-    spinner.start("Creating admin account...");
-    const admin = await db.createUser({
-      email: config.company.adminEmail,
-      name: "Admin",
-      role: "owner",
-      password: config.company.adminPassword
-    });
-    await db.logEvent({
-      actor: admin.id,
-      actorType: "system",
-      action: "setup.complete",
-      resource: `company:${config.company.subdomain}`,
-      details: {
-        dbType: config.database.type,
-        deployTarget: config.deployTarget,
-        companyName: config.company.companyName
-      }
-    });
-    spinner.succeed("Admin account created");
-    const result = await deploy(config, db, jwtSecret, spinner, chalk);
-    return {
-      success: true,
-      url: result.url,
-      jwtSecret,
-      db,
-      serverClose: result.close
-    };
-  } catch (err) {
-    spinner.fail(`Setup failed: ${err.message}`);
-    return {
-      success: false,
-      error: err.message,
-      jwtSecret,
-      db: null
-    };
-  }
-}
-async function deploy(config, db, jwtSecret, spinner, chalk) {
-  const { deployTarget, company, database, domain } = config;
-  if (deployTarget === "cloud") {
-    spinner.start("Deploying to AgenticMail Cloud...");
-    const { deployToCloud } = await import("./managed-RZITNPXG.js");
-    const result = await deployToCloud({
-      subdomain: company.subdomain,
-      plan: "free",
-      dbType: database.type,
-      dbConnectionString: database.connectionString || "",
-      jwtSecret
-    });
-    spinner.succeed(`Deployed to ${result.url}`);
-    printCloudSuccess(chalk, result.url, company.adminEmail, domain.customDomain, company.subdomain);
-    return { url: result.url };
-  }
-  if (deployTarget === "docker") {
-    const { generateDockerCompose } = await import("./managed-RZITNPXG.js");
-    const compose = generateDockerCompose({
-      dbType: database.type,
-      dbConnectionString: database.connectionString || "",
-      port: 3e3,
-      jwtSecret
-    });
-    const { writeFileSync } = await import("fs");
-    writeFileSync("docker-compose.yml", compose);
-    spinner.succeed("docker-compose.yml generated");
-    console.log("");
-    console.log(chalk.green.bold("  Docker deployment ready!"));
-    console.log("");
-    console.log(`  Run:       ${chalk.cyan("docker compose up -d")}`);
-    console.log(`  Dashboard: ${chalk.cyan("http://localhost:3000")}`);
-    return { url: "http://localhost:3000" };
-  }
-  if (deployTarget === "fly") {
-    const { generateFlyToml } = await import("./managed-RZITNPXG.js");
-    const flyToml = generateFlyToml(`am-${company.subdomain}`, "iad");
-    const { writeFileSync } = await import("fs");
-    writeFileSync("fly.toml", flyToml);
-    spinner.succeed("fly.toml generated");
-    console.log("");
-    console.log(chalk.green.bold("  Fly.io deployment ready!"));
-    console.log("");
-    console.log(`  1. ${chalk.cyan("fly launch --copy-config")}`);
-    console.log(`  2. ${chalk.cyan(`fly secrets set DATABASE_URL="${database.connectionString}" JWT_SECRET="${jwtSecret}"`)}`);
-    console.log(`  3. ${chalk.cyan("fly deploy")}`);
-    return {};
-  }
-  if (deployTarget === "railway") {
-    const { generateRailwayConfig } = await import("./managed-RZITNPXG.js");
-    const railwayConfig = generateRailwayConfig();
-    const { writeFileSync } = await import("fs");
-    writeFileSync("railway.toml", railwayConfig);
-    spinner.succeed("railway.toml generated");
-    console.log("");
-    console.log(chalk.green.bold("  Railway deployment ready!"));
-    console.log("");
-    console.log(`  1. ${chalk.cyan("railway init")}`);
-    console.log(`  2. ${chalk.cyan("railway link")}`);
-    console.log(`  3. ${chalk.cyan("railway up")}`);
-    return {};
-  }
-  spinner.start("Starting local server...");
-  const { createServer } = await import("./server-H3C6WUOS.js");
-  const server = createServer({ port: 3e3, db, jwtSecret });
-  const handle = await server.start();
-  spinner.succeed("Server running");
-  console.log("");
-  console.log(chalk.green.bold("  AgenticMail Enterprise is running!"));
-  console.log("");
-  console.log(`  ${chalk.bold("Dashboard:")}  ${chalk.cyan("http://localhost:3000")}`);
-  console.log(`  ${chalk.bold("API:")}        ${chalk.cyan("http://localhost:3000/api")}`);
-  console.log(`  ${chalk.bold("Admin:")}      ${company.adminEmail}`);
-  console.log("");
-  console.log(chalk.dim("  Press Ctrl+C to stop"));
-  return { url: "http://localhost:3000", close: handle.close };
-}
-function printCloudSuccess(chalk, url, adminEmail, customDomain, subdomain) {
-  console.log("");
-  console.log(chalk.green.bold("  Your dashboard is live!"));
-  console.log("");
-  console.log(`  ${chalk.bold("URL:")}      ${chalk.cyan(url)}`);
-  console.log(`  ${chalk.bold("Admin:")}    ${adminEmail}`);
-  console.log(`  ${chalk.bold("Password:")} (the one you just set)`);
-  if (customDomain) {
-    console.log("");
-    console.log(chalk.dim(`  To use ${customDomain}:`));
-    console.log(chalk.dim(`  Add CNAME: ${customDomain} \u2192 ${subdomain}.agenticmail.cloud`));
-  }
-}
+Commands:
+  setup                   Interactive setup wizard (default)
+  validate <path>         Validate a community skill manifest
+    --all                 Validate all skills in community-skills/
+    --json                Machine-readable output
+  build-skill             AI-assisted skill scaffolding
+  submit-skill <path>     Submit a skill as a PR
+  recover                 Recover a domain registration on a new machine
+  verify-domain           Check DNS verification for your domain
 
-// src/setup/index.ts
-async function runSetupWizard() {
-  const { default: inquirer } = await import("inquirer");
-  const { default: ora } = await import("ora");
-  const { default: chalk } = await import("chalk");
-  console.log("");
-  console.log(chalk.bold("  AgenticMail Enterprise"));
-  console.log(chalk.dim("  AI Agent Identity & Email for Organizations"));
-  console.log("");
-  console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log("");
-  const company = await promptCompanyInfo(inquirer, chalk);
-  const database = await promptDatabase(inquirer, chalk);
-  const { target: deployTarget } = await promptDeployment(inquirer, chalk);
-  const domain = await promptDomain(inquirer, chalk, deployTarget);
-  console.log("");
-  console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log("");
-  const result = await provision(
-    { company, database, deployTarget, domain },
-    ora,
-    chalk
-  );
-  if (!result.success) {
-    console.error("");
-    console.error(chalk.red(`  Setup failed: ${result.error}`));
-    console.error(chalk.dim("  Check your database connection and try again."));
-    process.exit(1);
-  }
-  console.log("");
-}
+Domain Registration:
+  agenticmail-enterprise recover --domain agents.agenticmail.io --key <hex>
+  agenticmail-enterprise verify-domain
+  agenticmail-enterprise verify-domain --domain agents.agenticmail.io
 
-// src/cli.ts
-runSetupWizard().catch((err) => {
+Skill Development:
+  agenticmail-enterprise validate ./community-skills/github-issues/
+  agenticmail-enterprise validate --all
+  agenticmail-enterprise build-skill
+  agenticmail-enterprise submit-skill ./community-skills/my-skill/
+`);
+    break;
+  case "setup":
+  default:
+    import("./setup-RCYNX5NA.js").then((m) => m.runSetupWizard()).catch(fatal);
+    break;
+}
+function fatal(err) {
   console.error("Fatal error:", err.message);
   process.exit(1);
-});
+}

package/dist/config-store-CRMKWBON.js

@@ -0,0 +1,58 @@
+import "./chunk-KFQGP6VL.js";
+
+// src/lib/config-store.ts
+import { scryptSync, randomBytes, createCipheriv, createDecipheriv } from "crypto";
+import { readFileSync, writeFileSync, existsSync } from "fs";
+import { join } from "path";
+var CONFIG_FILE = ".agenticmail.enc";
+var ALGORITHM = "aes-256-gcm";
+var SCRYPT_KEYLEN = 32;
+var SCRYPT_PARAMS = { N: 16384, r: 8, p: 1 };
+function deriveKey(secret, salt) {
+  return scryptSync(secret, salt, SCRYPT_KEYLEN, SCRYPT_PARAMS);
+}
+function getConfigPath() {
+  return join(process.cwd(), CONFIG_FILE);
+}
+async function saveDbConfig(config, secret) {
+  const salt = randomBytes(16);
+  const key = deriveKey(secret, salt);
+  const iv = randomBytes(12);
+  const cipher = createCipheriv(ALGORITHM, key, iv);
+  const plaintext = JSON.stringify(config);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  const payload = {
+    iv: iv.toString("base64"),
+    tag: tag.toString("base64"),
+    salt: salt.toString("base64"),
+    data: encrypted.toString("base64")
+  };
+  writeFileSync(getConfigPath(), JSON.stringify(payload, null, 2), "utf-8");
+}
+async function loadDbConfig(secret) {
+  const path = getConfigPath();
+  if (!existsSync(path)) return null;
+  try {
+    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    const salt = Buffer.from(raw.salt, "base64");
+    const iv = Buffer.from(raw.iv, "base64");
+    const tag = Buffer.from(raw.tag, "base64");
+    const data = Buffer.from(raw.data, "base64");
+    const key = deriveKey(secret, salt);
+    const decipher = createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(data), decipher.final()]);
+    return JSON.parse(decrypted.toString("utf-8"));
+  } catch {
+    return null;
+  }
+}
+function configFileExists() {
+  return existsSync(getConfigPath());
+}
+export {
+  configFileExists,
+  loadDbConfig,
+  saveDbConfig
+};