@agenticmail/enterprise 0.5.341 → 0.5.343

package/dist/{chunk-MGNDXWOU.js → chunk-2DE62O56.js}

@@ -436,8 +436,12 @@ async function runCloudSetup(inquirer, chalk, existingSubdomain) {
         } catch {
           console.log(chalk.dim("  winget failed, trying direct download..."));
           const archStr = arch() === "arm64" ? "arm64" : "amd64";
-          execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '$env:LOCALAPPDATA\\cloudflared' | Out-Null; Invoke-WebRequest -Uri 'https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe' -OutFile '$env:LOCALAPPDATA\\cloudflared\\cloudflared.exe'"`, { stdio: "pipe", timeout: 12e4 });
-          process.env.PATH = `${process.env.LOCALAPPDATA}\\cloudflared;${process.env.PATH}`;
+          const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+          const cfDir = `${localAppData}\\cloudflared`;
+          const cfExe = `${cfDir}\\cloudflared.exe`;
+          const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+          execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+          process.env.PATH = `${cfDir};${process.env.PATH}`;
         }
       } else {
         console.log(chalk.yellow("  Please install cloudflared manually: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/"));
@@ -1241,8 +1245,12 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
             execSync2("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
           } catch {
             const archStr = process.arch === "arm64" ? "arm64" : "amd64";
-            execSync2(`powershell -Command "New-Item -ItemType Directory -Force -Path '$env:LOCALAPPDATA\\\\cloudflared' | Out-Null; Invoke-WebRequest -Uri 'https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe' -OutFile '$env:LOCALAPPDATA\\\\cloudflared\\\\cloudflared.exe'"`, { stdio: "pipe", timeout: 12e4 });
-            process.env.PATH = `${process.env.LOCALAPPDATA}\\cloudflared;${process.env.PATH}`;
+            const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+            const cfDir = `${localAppData}\\cloudflared`;
+            const cfExe = `${cfDir}\\cloudflared.exe`;
+            const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+            execSync2(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+            process.env.PATH = `${cfDir};${process.env.PATH}`;
           }
         } else if (process.platform === "darwin") {
           execSync2("brew install cloudflared", { stdio: "pipe", timeout: 12e4 });
@@ -1531,7 +1539,7 @@ async function runSetupWizard() {
   const { default: chalk } = await import("chalk");
   console.log("");
   console.log(chalk.cyan("       \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
-  console.log(chalk.cyan("       \u2551") + chalk.bold.white("   \u2709  AgenticMail Enterprise  \u2709          ") + chalk.cyan("\u2551"));
+  console.log(chalk.cyan("       \u2551") + chalk.bold.white("   \u{1F380}  AgenticMail Enterprise  \u{1F380}          ") + chalk.cyan("\u2551"));
   console.log(chalk.cyan("       \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"));
   console.log("");
   console.log(chalk.bold.white("  The AI Agent Operating System for Organizations"));

package/dist/{chunk-G5EUEON7.js → chunk-FWGDL7KF.js}

@@ -1,11 +1,14 @@
 import {
   getSupportedDatabases
 } from "./chunk-Z3I6GNTS.js";
+import {
+  __require
+} from "./chunk-KFQGP6VL.js";
 
 // src/setup/index.ts
 import { execSync as execSync3 } from "child_process";
 import { createRequire } from "module";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 
 // src/setup/company.ts
 function toSlug(name) {
@@ -256,15 +259,15 @@ async function promptDatabase(inquirer, chalk) {
 }
 
 // src/setup/deployment.ts
-import { execSync as execSync2, exec as execCb } from "child_process";
+import { execSync, exec as execCb } from "child_process";
 import { promisify } from "util";
 import { existsSync, writeFileSync, readFileSync } from "fs";
-import { join } from "path";
-import { homedir, platform, arch } from "os";
+import { join as join2 } from "path";
+import { homedir as homedir2, platform, arch } from "os";
 var execP = promisify(execCb);
 function whichCmd(bin) {
   const cmd = platform() === "win32" ? `where ${bin}` : `which ${bin}`;
-  return execSync2(cmd, { encoding: "utf8", timeout: 5e3, stdio: ["pipe", "pipe", "pipe"] }).trim().split(/\r?\n/)[0];
+  return execSync(cmd, { encoding: "utf8", timeout: 5e3, stdio: ["pipe", "pipe", "pipe"] }).trim().split(/\r?\n/)[0];
 }
 var SUBDOMAIN_REGISTRY_URL = process.env.AGENTICMAIL_SUBDOMAIN_REGISTRY_URL || "https://registry.agenticmail.io";
 async function promptDeployment(inquirer, chalk, existingSubdomain) {
@@ -426,18 +429,22 @@ async function runCloudSetup(inquirer, chalk, existingSubdomain) {
     try {
       const os = platform();
       if (os === "darwin") {
-        execSync2("brew install cloudflared", { stdio: "pipe", timeout: 12e4 });
+        execSync("brew install cloudflared", { stdio: "pipe", timeout: 12e4 });
       } else if (os === "linux") {
         const archStr = arch() === "arm64" ? "arm64" : "amd64";
-        execSync2(`curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
+        execSync(`curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
       } else if (os === "win32") {
         try {
-          execSync2("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+          execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
         } catch {
           console.log(chalk.dim("  winget failed, trying direct download..."));
           const archStr = arch() === "arm64" ? "arm64" : "amd64";
-          execSync2(`powershell -Command "Invoke-WebRequest -Uri 'https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe' -OutFile '$env:LOCALAPPDATA\\cloudflared\\cloudflared.exe'"`, { stdio: "pipe", timeout: 12e4 });
-          process.env.PATH = `${process.env.LOCALAPPDATA}\\cloudflared;${process.env.PATH}`;
+          const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+          const cfDir = `${localAppData}\\cloudflared`;
+          const cfExe = `${cfDir}\\cloudflared.exe`;
+          const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+          execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+          process.env.PATH = `${cfDir};${process.env.PATH}`;
         }
       } else {
         console.log(chalk.yellow("  Please install cloudflared manually: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/"));
@@ -481,7 +488,7 @@ async function runCloudSetup(inquirer, chalk, existingSubdomain) {
   console.log(`    ${chalk.cyan("npx @agenticmail/enterprise start")}`);
   console.log("");
   console.log(chalk.dim("  Or let the setup wizard start them with PM2 (next step).\n"));
-  const envPath = join(homedir(), ".agenticmail", ".env");
+  const envPath = join2(homedir2(), ".agenticmail", ".env");
   try {
     let envContent = "";
     if (existsSync(envPath)) {
@@ -501,7 +508,7 @@ CLOUDFLARED_TOKEN=${tunnelToken}
 `;
     }
     const { mkdirSync } = await import("fs");
-    mkdirSync(join(homedir(), ".agenticmail"), { recursive: true });
+    mkdirSync(join2(homedir2(), ".agenticmail"), { recursive: true });
     writeFileSync(envPath, envContent, { mode: 384 });
   } catch {
   }
@@ -522,7 +529,7 @@ async function runTunnelSetup(inquirer, chalk) {
   let installed = false;
   let version = "";
   try {
-    version = execSync2("cloudflared --version 2>&1", { encoding: "utf8", timeout: 5e3 }).trim();
+    version = execSync("cloudflared --version 2>&1", { encoding: "utf8", timeout: 5e3 }).trim();
     installed = true;
   } catch {
   }
@@ -545,7 +552,7 @@ async function runTunnelSetup(inquirer, chalk) {
     console.log(chalk.dim("     Installing..."));
     try {
       await installCloudflared();
-      version = execSync2("cloudflared --version 2>&1", { encoding: "utf8", timeout: 5e3 }).trim();
+      version = execSync("cloudflared --version 2>&1", { encoding: "utf8", timeout: 5e3 }).trim();
       console.log(chalk.green(`     \u2713 Installed (${version})
 `));
     } catch (err) {
@@ -555,8 +562,8 @@ async function runTunnelSetup(inquirer, chalk) {
     }
   }
   console.log(chalk.bold("  2. Cloudflare Authentication"));
-  const cfDir = join(homedir(), ".cloudflared");
-  const certPath = join(cfDir, "cert.pem");
+  const cfDir = join2(homedir2(), ".cloudflared");
+  const certPath = join2(cfDir, "cert.pem");
   const loggedIn = existsSync(certPath);
   if (loggedIn) {
     console.log(chalk.green("     \u2713 Already authenticated\n"));
@@ -608,14 +615,14 @@ async function runTunnelSetup(inquirer, chalk) {
   let tunnelId = "";
   try {
     console.log(chalk.dim("     Creating tunnel..."));
-    const out = execSync2(`cloudflared tunnel create ${tunnelName} 2>&1`, { encoding: "utf8", timeout: 3e4 });
+    const out = execSync(`cloudflared tunnel create ${tunnelName} 2>&1`, { encoding: "utf8", timeout: 3e4 });
     const match = out.match(/Created tunnel .+ with id ([a-f0-9-]+)/);
     tunnelId = match?.[1] || "";
     console.log(chalk.green(`     \u2713 Tunnel created: ${tunnelName} (${tunnelId})`));
   } catch (e) {
     if (e.message?.includes("already exists") || e.stderr?.includes("already exists")) {
       try {
-        const listOut = execSync2("cloudflared tunnel list --output json 2>&1", { encoding: "utf8", timeout: 15e3 });
+        const listOut = execSync("cloudflared tunnel list --output json 2>&1", { encoding: "utf8", timeout: 15e3 });
         const tunnels = JSON.parse(listOut);
         const existing = tunnels.find((t) => t.name === tunnelName);
         if (existing) {
@@ -637,17 +644,17 @@ async function runTunnelSetup(inquirer, chalk) {
   }
   const config = [
     `tunnel: ${tunnelId}`,
-    `credentials-file: ${join(cfDir, tunnelId + ".json")}`,
+    `credentials-file: ${join2(cfDir, tunnelId + ".json")}`,
     "",
     "ingress:",
     `  - hostname: ${domain}`,
     `    service: http://localhost:${port}`,
     "  - service: http_status:404"
   ].join("\n");
-  writeFileSync(join(cfDir, "config.yml"), config);
+  writeFileSync(join2(cfDir, "config.yml"), config);
   console.log(chalk.green(`     \u2713 Config written: ${domain} \u2192 localhost:${port}`));
   try {
-    execSync2(`cloudflared tunnel route dns ${tunnelId} ${domain} 2>&1`, { encoding: "utf8", timeout: 3e4 });
+    execSync(`cloudflared tunnel route dns ${tunnelId} ${domain} 2>&1`, { encoding: "utf8", timeout: 3e4 });
     console.log(chalk.green(`     \u2713 DNS CNAME created: ${domain}`));
   } catch (e) {
     if (e.message?.includes("already exists") || e.stderr?.includes("already exists")) {
@@ -660,19 +667,19 @@ async function runTunnelSetup(inquirer, chalk) {
   try {
     whichCmd("pm2");
     try {
-      execSync2("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
+      execSync("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
     } catch {
     }
-    execSync2(`pm2 start cloudflared --name cloudflared -- tunnel run`, { encoding: "utf8", timeout: 15e3 });
+    execSync(`pm2 start cloudflared --name cloudflared -- tunnel run`, { encoding: "utf8", timeout: 15e3 });
     try {
-      execSync2("pm2 save 2>/dev/null", { timeout: 5e3 });
+      execSync("pm2 save 2>/dev/null", { timeout: 5e3 });
     } catch {
     }
     try {
-      const startupOut = execSync2("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
+      const startupOut = execSync("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
       const sudoMatch = startupOut.match(/sudo .+$/m);
       if (sudoMatch) try {
-        execSync2(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
+        execSync(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
       } catch {
       }
     } catch {
@@ -684,21 +691,21 @@ async function runTunnelSetup(inquirer, chalk) {
   if (!started) {
     try {
       console.log(chalk.dim("     Installing PM2 for process management..."));
-      execSync2("npm install -g pm2", { timeout: 6e4, stdio: "pipe" });
+      execSync("npm install -g pm2", { timeout: 6e4, stdio: "pipe" });
       try {
-        execSync2("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
+        execSync("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
       } catch {
       }
-      execSync2(`pm2 start cloudflared --name cloudflared -- tunnel run`, { encoding: "utf8", timeout: 15e3 });
+      execSync(`pm2 start cloudflared --name cloudflared -- tunnel run`, { encoding: "utf8", timeout: 15e3 });
       try {
-        execSync2("pm2 save 2>/dev/null", { timeout: 5e3 });
+        execSync("pm2 save 2>/dev/null", { timeout: 5e3 });
       } catch {
       }
       try {
-        const startupOut = execSync2("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
+        const startupOut = execSync("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
         const sudoMatch = startupOut.match(/sudo .+$/m);
         if (sudoMatch) try {
-          execSync2(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
+          execSync(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
         } catch {
         }
       } catch {
@@ -728,18 +735,18 @@ async function installCloudflared() {
   if (plat === "darwin") {
     try {
       whichCmd("brew");
-      execSync2("brew install cloudflared 2>&1", { encoding: "utf8", timeout: 12e4 });
+      execSync("brew install cloudflared 2>&1", { encoding: "utf8", timeout: 12e4 });
       return;
     } catch {
     }
     const cfArch = a === "arm64" ? "arm64" : "amd64";
-    execSync2(
+    execSync(
       `curl -L -o /usr/local/bin/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-darwin-${cfArch} && chmod +x /usr/local/bin/cloudflared`,
       { timeout: 6e4 }
     );
   } else if (plat === "linux") {
     const cfArch = a === "arm64" ? "arm64" : "amd64";
-    execSync2(
+    execSync(
       `curl -L -o /usr/local/bin/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${cfArch} && chmod +x /usr/local/bin/cloudflared`,
       { timeout: 6e4 }
     );
@@ -1041,6 +1048,7 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
 
 // src/setup/provision.ts
 import { randomUUID, randomBytes as randomBytes2 } from "crypto";
+import { execSync as execSync2 } from "child_process";
 function generateOrgId() {
   const chars = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
   const bytes = randomBytes2(10);
@@ -1152,13 +1160,13 @@ async function provision(config, ora, chalk) {
     spinner.succeed("Admin account created");
     try {
       const { writeFileSync: writeFileSync2, existsSync: existsSync2, mkdirSync } = await import("fs");
-      const { join: join3 } = await import("path");
-      const { homedir: homedir2 } = await import("os");
-      const envDir = join3(homedir2(), ".agenticmail");
+      const { join: join4 } = await import("path");
+      const { homedir: homedir3 } = await import("os");
+      const envDir = join4(homedir3(), ".agenticmail");
       if (!existsSync2(envDir)) mkdirSync(envDir, { recursive: true });
       const port = config.tunnel?.port || (config.deployTarget === "local" ? 3e3 : void 0) || (config.deployTarget === "docker" ? 3e3 : void 0) || 3200;
       let existingEnv = "";
-      const envFilePath = join3(envDir, ".env");
+      const envFilePath = join4(envDir, ".env");
       if (existsSync2(envFilePath)) {
         try {
           existingEnv = (await import("fs")).readFileSync(envFilePath, "utf8");
@@ -1184,7 +1192,7 @@ async function provision(config, ora, chalk) {
         "# BACK UP THIS FILE! You need it to recover on a new machine.",
         ...Array.from(envMap.entries()).map(([k, v]) => `${k}=${v}`)
       ].join("\n") + "\n";
-      writeFileSync2(join3(envDir, ".env"), envContent, { mode: 384 });
+      writeFileSync2(join4(envDir, ".env"), envContent, { mode: 384 });
       spinner.succeed(`Config saved to ~/.agenticmail/.env`);
     } catch {
     }
@@ -1231,55 +1239,68 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     spinner.start("Configuring agenticmail.io deployment...");
     try {
       const whichCmd2 = process.platform === "win32" ? "where" : "which";
-      execSync(`${whichCmd2} cloudflared`, { stdio: "pipe", timeout: 5e3 });
+      execSync2(`${whichCmd2} cloudflared`, { stdio: "pipe", timeout: 5e3 });
     } catch {
       spinner.text = "Installing cloudflared...";
       try {
         if (process.platform === "win32") {
           try {
-            execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+            execSync2("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
           } catch {
             const archStr = process.arch === "arm64" ? "arm64" : "amd64";
-            execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '$env:LOCALAPPDATA\\\\cloudflared' | Out-Null; Invoke-WebRequest -Uri 'https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe' -OutFile '$env:LOCALAPPDATA\\\\cloudflared\\\\cloudflared.exe'"`, { stdio: "pipe", timeout: 12e4 });
-            process.env.PATH = `${process.env.LOCALAPPDATA}\\cloudflared;${process.env.PATH}`;
+            const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+            const cfDir = `${localAppData}\\cloudflared`;
+            const cfExe = `${cfDir}\\cloudflared.exe`;
+            const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+            execSync2(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+            process.env.PATH = `${cfDir};${process.env.PATH}`;
           }
         } else if (process.platform === "darwin") {
-          execSync("brew install cloudflared", { stdio: "pipe", timeout: 12e4 });
+          execSync2("brew install cloudflared", { stdio: "pipe", timeout: 12e4 });
         } else {
           const archStr = process.arch === "arm64" ? "arm64" : "amd64";
-          execSync(`curl -L -o /usr/local/bin/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
+          execSync2(`curl -L -o /usr/local/bin/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
         }
       } catch {
       }
     }
     try {
-      execSync("npm ls -g pm2 --depth=0", { stdio: "pipe", timeout: 1e4 });
+      execSync2("npm ls -g pm2 --depth=0", { stdio: "pipe", timeout: 1e4 });
     } catch {
       spinner.text = "Installing PM2 process manager...";
       try {
-        execSync("npm install -g pm2", { stdio: "pipe", timeout: 6e4 });
+        execSync2("npm install -g pm2", { stdio: "pipe", timeout: 6e4 });
       } catch {
       }
     }
     try {
       try {
-        execSync("pm2 delete cloudflared 2>&1", { stdio: "pipe", timeout: 1e4 });
+        execSync2("pm2 delete cloudflared 2>&1", { stdio: "pipe", timeout: 1e4 });
+      } catch {
+      }
+      try {
+        execSync2("pm2 delete enterprise 2>&1", { stdio: "pipe", timeout: 1e4 });
       } catch {
       }
+      let cfPath = "cloudflared";
       try {
-        execSync("pm2 delete enterprise 2>&1", { stdio: "pipe", timeout: 1e4 });
+        const whichBin = process.platform === "win32" ? "where" : "which";
+        cfPath = execSync2(`${whichBin} cloudflared`, { encoding: "utf8", timeout: 5e3 }).trim().split("\n")[0].trim();
       } catch {
       }
-      execSync(`pm2 start cloudflared --name cloudflared --interpreter none -- tunnel --no-autoupdate run --token ${cloud.tunnelToken}`, { stdio: "pipe", timeout: 15e3 });
-      const envVars = [
-        `PORT=${cloud.port || 8080}`,
-        `DATABASE_URL=${database.connectionString || ""}`,
-        `JWT_SECRET=${jwtSecret}`,
-        `AGENTICMAIL_VAULT_KEY=${vaultKey}`,
-        `AGENTICMAIL_DOMAIN=${cloud.fqdn}`
-      ].join(" ");
-      const pm2Env = process.platform === "win32" ? `--env PORT=${cloud.port || 8080}` : "";
-      execSync(`pm2 start npx --name enterprise -- @agenticmail/enterprise start`, {
+      execSync2(`pm2 start "${cfPath}" --name cloudflared --interpreter none -- tunnel --no-autoupdate run --token ${cloud.tunnelToken}`, { stdio: "pipe", timeout: 15e3 });
+      const envFile = join(homedir(), ".agenticmail", ".env");
+      const entryPoint = join(__require.resolve("@agenticmail/enterprise/package.json"), "..", "bin", "agenticmail-enterprise.cjs");
+      let startCmd;
+      try {
+        const { statSync } = __require("fs");
+        statSync(entryPoint);
+        startCmd = `pm2 start "${process.execPath}" --name enterprise -- "${entryPoint}" start`;
+      } catch {
+        const npxPath = process.platform === "win32" ? join(process.env.APPDATA || "", "npm", "npx.cmd") : "npx";
+        startCmd = `pm2 start "${npxPath}" --name enterprise -- @agenticmail/enterprise start`;
+      }
+      execSync2(startCmd, {
         stdio: "pipe",
         timeout: 15e3,
         env: {
@@ -1291,15 +1312,30 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
           AGENTICMAIL_DOMAIN: cloud.fqdn
         }
       });
+      await new Promise((r) => setTimeout(r, 3e3));
       try {
-        execSync("pm2 save", { timeout: 1e4, stdio: "pipe" });
+        const jlist = execSync2("pm2 jlist", { encoding: "utf8", timeout: 1e4 });
+        const procs = JSON.parse(jlist);
+        const cfProc = procs.find((p) => p.name === "cloudflared");
+        const entProc = procs.find((p) => p.name === "enterprise");
+        if (cfProc?.pm2_env?.status !== "online") {
+          throw new Error("cloudflared not running");
+        }
+        if (entProc?.pm2_env?.status !== "online") {
+          throw new Error("enterprise server not running");
+        }
+      } catch (verifyErr) {
+        throw new Error(`Processes not healthy: ${verifyErr.message}`);
+      }
+      try {
+        execSync2("pm2 save", { timeout: 1e4, stdio: "pipe" });
       } catch {
       }
       try {
-        const startupOut = execSync("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
+        const startupOut = execSync2("pm2 startup 2>&1", { encoding: "utf8", timeout: 15e3 });
         const sudoMatch = startupOut.match(/sudo .+$/m);
         if (sudoMatch) try {
-          execSync(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
+          execSync2(sudoMatch[0], { timeout: 15e3, stdio: "pipe" });
         } catch {
         }
       } catch {
@@ -1308,9 +1344,42 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
       console.log(chalk.dim("  PM2 will auto-restart on crash and survive reboots."));
     } catch (e) {
       spinner.warn(`PM2 setup failed: ${e.message}`);
-      console.log(`  Start manually:`);
-      console.log(`    cloudflared tunnel --no-autoupdate run --token ${cloud.tunnelToken}`);
-      console.log(`    npx @agenticmail/enterprise start`);
+      console.log(chalk.dim("  Starting processes directly instead...\n"));
+      const { spawn } = __require("child_process");
+      let cfPath = "cloudflared";
+      try {
+        const whichBin = process.platform === "win32" ? "where" : "which";
+        cfPath = execSync2(`${whichBin} cloudflared`, { encoding: "utf8", timeout: 5e3 }).trim().split("\n")[0].trim();
+      } catch {
+      }
+      const cfProc = spawn(cfPath, ["tunnel", "--no-autoupdate", "run", "--token", cloud.tunnelToken], {
+        detached: true,
+        stdio: "ignore",
+        env: process.env
+      });
+      cfProc.unref();
+      const entProc = spawn(process.execPath, [
+        "-e",
+        `process.env.PORT='${cloud.port || 8080}';process.env.DATABASE_URL='${(database.connectionString || "").replace(/'/g, "\\'")}';process.env.JWT_SECRET='${jwtSecret}';process.env.AGENTICMAIL_VAULT_KEY='${vaultKey}';process.env.AGENTICMAIL_DOMAIN='${cloud.fqdn}';require('@agenticmail/enterprise/dist/cli.js');`,
+        "--",
+        "start"
+      ], {
+        detached: true,
+        stdio: "ignore",
+        env: {
+          ...process.env,
+          PORT: String(cloud.port || 8080),
+          DATABASE_URL: database.connectionString || "",
+          JWT_SECRET: jwtSecret,
+          AGENTICMAIL_VAULT_KEY: vaultKey,
+          AGENTICMAIL_DOMAIN: cloud.fqdn
+        }
+      });
+      entProc.unref();
+      await new Promise((r) => setTimeout(r, 5e3));
+      spinner.succeed(`Live at https://${cloud.fqdn}`);
+      console.log(chalk.yellow("  Note: Processes running in background. They will stop when you close this terminal."));
+      console.log(chalk.dim("  For persistence, install PM2: npm install -g pm2"));
     }
     console.log("");
     console.log(chalk.bold.green("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
@@ -1490,7 +1559,7 @@ async function ensureDbDriver(dbType, ora, chalk) {
     }
     if (!found) {
       try {
-        const req = createRequire(join2(process.cwd(), "index.js"));
+        const req = createRequire(join3(process.cwd(), "index.js"));
         req.resolve(pkg);
         found = true;
       } catch {
@@ -1499,7 +1568,7 @@ async function ensureDbDriver(dbType, ora, chalk) {
     if (!found) {
       try {
         const globalPrefix = execSync3("npm prefix -g", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
-        const req = createRequire(join2(globalPrefix, "lib", "node_modules", ".package-lock.json"));
+        const req = createRequire(join3(globalPrefix, "lib", "node_modules", ".package-lock.json"));
         req.resolve(pkg);
         found = true;
       } catch {
@@ -1530,7 +1599,7 @@ async function runSetupWizard() {
   const { default: chalk } = await import("chalk");
   console.log("");
   console.log(chalk.cyan("       \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
-  console.log(chalk.cyan("       \u2551") + chalk.bold.white("   \u2709  AgenticMail Enterprise  \u2709          ") + chalk.cyan("\u2551"));
+  console.log(chalk.cyan("       \u2551") + chalk.bold.white("   \u{1F380}  AgenticMail Enterprise  \u{1F380}          ") + chalk.cyan("\u2551"));
   console.log(chalk.cyan("       \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"));
   console.log("");
   console.log(chalk.bold.white("  The AI Agent Operating System for Organizations"));

package/dist/cli.js

@@ -64,7 +64,7 @@ Skill Development:
     break;
   case "setup":
   default:
-    import("./setup-ZZSBCXJ3.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-KHWRJILU.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-MGNDXWOU.js";
+} from "./chunk-FWGDL7KF.js";
 import {
   AgentRuntime,
   EmailChannel,

package/dist/setup-D7IXATAY.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-2DE62O56.js";
+import "./chunk-Z3I6GNTS.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-KHWRJILU.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-FWGDL7KF.js";
+import "./chunk-Z3I6GNTS.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/logs/enterprise-error.log

@@ -0,0 +1,6 @@
+2026-03-05 16:03:41: [chat-poller] Error polling Agentic Mail Support Space: The operation was aborted due to timeout
+2026-03-05 16:03:41: [chat-poller] 1 consecutive errors, backing off 30s
+2026-03-05 16:07:41: [chat-poller] Error polling Agentic Mail Support Space: The operation was aborted due to timeout
+2026-03-05 16:07:41: [chat-poller] 1 consecutive errors, backing off 30s
+2026-03-05 16:18:12: [chat-poller] Error polling Agentic Mail Support Space: The operation was aborted due to timeout
+2026-03-05 16:18:12: [chat-poller] 1 consecutive errors, backing off 30s

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.341",
+  "version": "0.5.343",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {