@agenticmail/enterprise 0.5.344 → 0.5.346

package/dist/{chunk-URC3SFYD.js → chunk-47GC5I25.js}

@@ -2405,7 +2405,7 @@ function createAdminRoutes(db) {
       const platform = os.default.platform();
       if (platform === "darwin") {
         try {
-          execSync("which brew", { timeout: 3e3 });
+          execSync(process.platform === "win32" ? "where brew" : "which brew", { timeout: 3e3 });
           execSync("brew install cloudflared 2>&1", { encoding: "utf8", timeout: 12e4 });
         } catch {
           const arch = os.default.arch() === "arm64" ? "arm64" : "amd64";
@@ -2494,7 +2494,7 @@ function createAdminRoutes(db) {
         }
       }
       try {
-        execSync("which pm2", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where pm2" : "which pm2", { timeout: 3e3 });
         try {
           execSync("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
         } catch {

package/dist/{chunk-AA6OVVQD.js → chunk-QJKE4CP4.js}

@@ -258,7 +258,7 @@ async function promptDatabase(inquirer, chalk) {
 // src/setup/deployment.ts
 import { execSync, exec as execCb } from "child_process";
 import { promisify } from "util";
-import { existsSync, writeFileSync, readFileSync } from "fs";
+import { existsSync, writeFileSync, readFileSync, statSync } from "fs";
 import { join } from "path";
 import { homedir, platform, arch } from "os";
 var execP = promisify(execCb);
@@ -431,16 +431,32 @@ async function runCloudSetup(inquirer, chalk, existingSubdomain) {
         const archStr = arch() === "arm64" ? "arm64" : "amd64";
         execSync(`curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
       } else if (os === "win32") {
+        const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+        const cfDir = `${localAppData}\\cloudflared`;
+        const cfExe = `${cfDir}\\cloudflared.exe`;
+        let found = false;
         try {
-          execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+          statSync(cfExe);
+          found = true;
         } catch {
-          console.log(chalk.dim("  winget failed, trying direct download..."));
-          const archStr = arch() === "arm64" ? "arm64" : "amd64";
-          const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
-          const cfDir = `${localAppData}\\cloudflared`;
-          const cfExe = `${cfDir}\\cloudflared.exe`;
-          const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
-          execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+        }
+        if (!found) {
+          try {
+            execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+            found = true;
+          } catch {
+            console.log(chalk.dim("  winget failed, trying direct download..."));
+            try {
+              const archStr = arch() === "arm64" ? "arm64" : "amd64";
+              const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+              execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "inherit", timeout: 12e4 });
+              found = true;
+            } catch (dlErr) {
+              console.log(chalk.dim(`  Download failed: ${dlErr.message?.substring(0, 100)}`));
+            }
+          }
+        }
+        if (found) {
           process.env.PATH = `${cfDir};${process.env.PATH}`;
         }
       } else {
@@ -1046,8 +1062,9 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
 // src/setup/provision.ts
 import { randomUUID, randomBytes as randomBytes2 } from "crypto";
 import { execSync as execSync2, spawn } from "child_process";
-import { statSync } from "fs";
+import { statSync as statSync2, readFileSync as readFileSync2 } from "fs";
 import { join as join2 } from "path";
+import { homedir as homedir2 } from "os";
 function generateOrgId() {
   const chars = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
   const bytes = randomBytes2(10);
@@ -1160,8 +1177,8 @@ async function provision(config, ora, chalk) {
     try {
       const { writeFileSync: writeFileSync2, existsSync: existsSync2, mkdirSync } = await import("fs");
       const { join: join4 } = await import("path");
-      const { homedir: homedir2 } = await import("os");
-      const envDir = join4(homedir2(), ".agenticmail");
+      const { homedir: homedir3 } = await import("os");
+      const envDir = join4(homedir3(), ".agenticmail");
       if (!existsSync2(envDir)) mkdirSync(envDir, { recursive: true });
       const port = config.tunnel?.port || (config.deployTarget === "local" ? 3e3 : void 0) || (config.deployTarget === "docker" ? 3e3 : void 0) || 3200;
       let existingEnv = "";
@@ -1217,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-ZFVGQJUL.js");
+    const { createServer: createServer2 } = await import("./server-EJBLWFHI.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1291,30 +1308,70 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
         const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
         const candidate = `${localAppData}\\cloudflared\\cloudflared.exe`;
         try {
-          statSync(candidate);
+          statSync2(candidate);
           cfPath = candidate;
         } catch {
         }
       }
       if (!cfPath) throw new Error("cloudflared not found \u2014 install it first");
-      execSync2(`pm2 start "${cfPath}" --name cloudflared --interpreter none -- tunnel --no-autoupdate run --token ${cloud.tunnelToken}`, { stdio: "pipe", timeout: 15e3 });
-      let npxCmd = "npx";
-      if (process.platform === "win32") {
-        for (const candidate of [
-          join2(process.env.APPDATA || "", "npm", "npx.cmd"),
-          join2(process.env.ProgramFiles || "", "nodejs", "npx.cmd")
-        ]) {
-          try {
-            statSync(candidate);
-            npxCmd = candidate;
-            break;
-          } catch {
+      const amDir = join2(homedir2(), ".agenticmail");
+      const { writeFileSync: writeFileSync2, mkdirSync } = await import("fs");
+      try {
+        mkdirSync(amDir, { recursive: true });
+      } catch {
+      }
+      const startScript = join2(amDir, "start.cjs");
+      writeFileSync2(startScript, [
+        `// Auto-generated by AgenticMail setup \u2014 do not edit`,
+        `const { readFileSync } = require('fs');`,
+        `const { join } = require('path');`,
+        `// Load .env`,
+        `try {`,
+        `  const envFile = join(__dirname, '.env');`,
+        `  const lines = readFileSync(envFile, 'utf8').split('\\n');`,
+        `  for (const line of lines) {`,
+        `    const m = line.match(/^([A-Z_]+)=(.*)$/);`,
+        `    if (m && !process.env[m[1]]) process.env[m[1]] = m[2];`,
+        `  }`,
+        `} catch {}`,
+        `// Run via npx (shell:true handles .cmd on Windows)`,
+        `const { spawnSync } = require('child_process');`,
+        `const r = spawnSync('npx', ['@agenticmail/enterprise', 'start'], {`,
+        `  stdio: 'inherit', env: process.env, shell: true`,
+        `});`,
+        `process.exit(r.status || 0);`
+      ].join("\n"));
+      const cfScript = join2(amDir, "cloudflared.cjs");
+      writeFileSync2(cfScript, [
+        `// Auto-generated by AgenticMail setup \u2014 do not edit`,
+        `const { spawnSync } = require('child_process');`,
+        `const r = spawnSync(${JSON.stringify(cfPath)}, process.argv.slice(2), {`,
+        `  stdio: 'inherit'`,
+        `});`,
+        `process.exit(r.status || 0);`
+      ].join("\n"));
+      execSync2(`pm2 start "${cfScript}" --name cloudflared -- tunnel --no-autoupdate run --token ${cloud.tunnelToken}`, { stdio: "pipe", timeout: 15e3 });
+      const envLines = [
+        `PORT=${cloud.port || 8080}`,
+        `DATABASE_URL=${database.connectionString || ""}`,
+        `JWT_SECRET=${jwtSecret}`,
+        `AGENTICMAIL_VAULT_KEY=${vaultKey}`,
+        `AGENTICMAIL_DOMAIN=${cloud.fqdn}`
+      ];
+      const envFile = join2(amDir, ".env");
+      try {
+        const existing = readFileSync2(envFile, "utf8");
+        for (const line of envLines) {
+          const key = line.split("=")[0];
+          if (!existing.includes(`${key}=`)) {
+            writeFileSync2(envFile, existing.trimEnd() + "\n" + line + "\n");
           }
         }
+      } catch {
       }
-      execSync2(`pm2 start "${npxCmd}" --name enterprise --interpreter none -- @agenticmail/enterprise start`, {
+      execSync2(`pm2 start "${startScript}" --name enterprise`, {
         stdio: "pipe",
-        timeout: 15e3,
+        timeout: 3e4,
         env: {
           ...process.env,
           PORT: String(cloud.port || 8080),
@@ -1324,7 +1381,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
           AGENTICMAIL_DOMAIN: cloud.fqdn
         }
       });
-      await new Promise((r) => setTimeout(r, 3e3));
+      await new Promise((r) => setTimeout(r, 5e3));
       const jlist = execSync2("pm2 jlist", { encoding: "utf8", timeout: 1e4 });
       const procs = JSON.parse(jlist);
       const cfOnline = procs.find((p) => p.name === "cloudflared")?.pm2_env?.status === "online";
@@ -1348,18 +1405,18 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     } catch (e) {
       spinner.warn(`PM2 setup failed: ${e.message}`);
       console.log(chalk.dim("  Starting processes directly instead...\n"));
-      let cfPath = "";
+      let fallbackCfPath = "";
       try {
         const whichBin = process.platform === "win32" ? "where" : "which";
-        cfPath = execSync2(`${whichBin} cloudflared`, { encoding: "utf8", timeout: 5e3 }).trim().split("\n")[0].trim();
+        fallbackCfPath = execSync2(`${whichBin} cloudflared`, { encoding: "utf8", timeout: 5e3 }).trim().split("\n")[0].trim();
       } catch {
       }
-      if (!cfPath && process.platform === "win32") {
+      if (!fallbackCfPath && process.platform === "win32") {
         const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
         const candidate = `${localAppData}\\cloudflared\\cloudflared.exe`;
         try {
-          statSync(candidate);
-          cfPath = candidate;
+          statSync2(candidate);
+          fallbackCfPath = candidate;
         } catch {
         }
       }
@@ -1371,36 +1428,23 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
         AGENTICMAIL_VAULT_KEY: vaultKey,
         AGENTICMAIL_DOMAIN: cloud.fqdn
       };
-      if (cfPath) {
-        const cfProc = spawn(cfPath, ["tunnel", "--no-autoupdate", "run", "--token", cloud.tunnelToken], {
+      if (fallbackCfPath) {
+        const cfProc = spawn(fallbackCfPath, ["tunnel", "--no-autoupdate", "run", "--token", cloud.tunnelToken], {
           detached: true,
           stdio: "ignore",
           env: process.env
         });
         cfProc.unref();
       }
-      let npxCmd = "npx";
-      if (process.platform === "win32") {
-        for (const candidate of [
-          join2(process.env.APPDATA || "", "npm", "npx.cmd"),
-          join2(process.env.ProgramFiles || "", "nodejs", "npx.cmd")
-        ]) {
-          try {
-            statSync(candidate);
-            npxCmd = candidate;
-            break;
-          } catch {
-          }
-        }
-      }
-      const entProc = spawn(npxCmd, ["@agenticmail/enterprise", "start"], {
+      const entProc = spawn("npx", ["@agenticmail/enterprise", "start"], {
         detached: true,
         stdio: "ignore",
         env: serverEnv,
-        shell: process.platform === "win32"
+        shell: true
+        // Required on Windows for npx
       });
       entProc.unref();
-      await new Promise((r) => setTimeout(r, 5e3));
+      await new Promise((r) => setTimeout(r, 8e3));
       spinner.succeed(`Live at https://${cloud.fqdn}`);
       console.log(chalk.yellow("  Note: Processes running in background. They will stop when you close this terminal."));
       console.log(chalk.dim("  For persistence, install PM2: npm install -g pm2"));
@@ -1491,7 +1535,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-ZFVGQJUL.js");
+  const { createServer } = await import("./server-EJBLWFHI.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{cli-recover-K7A4IIQY.js → cli-recover-CO2RNTTL.js}

@@ -418,7 +418,7 @@ async function runCloudRecover(args, inquirer, chalk, ora) {
       const { execSync } = await import("child_process");
       const { platform, arch } = await import("os");
       try {
-        execSync("which cloudflared", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where cloudflared" : "which cloudflared", { timeout: 3e3 });
         console.log(chalk.green("  cloudflared already installed"));
       } catch {
         const spinner2 = ora("Installing cloudflared...").start();

package/dist/{cli-serve-DUUELMXK.js → cli-serve-KE4WNPMF.js}

@@ -94,7 +94,7 @@ async function runServe(_args) {
     process.exit(1);
   }
   const { createAdapter, smartDbConfig } = await import("./factory-RTZU2K54.js");
-  const { createServer } = await import("./server-ZFVGQJUL.js");
+  const { createServer } = await import("./server-EJBLWFHI.js");
   const db = await createAdapter(smartDbConfig(DATABASE_URL));
   await db.migrate();
   const server = createServer({
@@ -128,7 +128,7 @@ async function runServe(_args) {
     try {
       const { execSync, spawn } = await import("child_process");
       try {
-        execSync("which cloudflared", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where cloudflared" : "which cloudflared", { timeout: 3e3 });
       } catch {
         console.log("[startup] cloudflared not found \u2014 skipping tunnel auto-start");
         console.log("[startup] Install cloudflared to enable tunnel: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/");

package/dist/cli.js

@@ -14,7 +14,7 @@ switch (command) {
     import("./cli-submit-skill-SNGAHVB7.js").then((m) => m.runSubmitSkill(args.slice(1))).catch(fatal);
     break;
   case "recover":
-    import("./cli-recover-K7A4IIQY.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
+    import("./cli-recover-CO2RNTTL.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
     break;
   case "verify-domain":
     import("./cli-verify-7EMGBE46.js").then((m) => m.runVerifyDomain(args.slice(1))).catch(fatal);
@@ -57,14 +57,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-DUUELMXK.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-KE4WNPMF.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
     import("./cli-agent-35EZUQ4N.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-4AS2ASES.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-IXC3WPV2.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-AA6OVVQD.js";
+} from "./chunk-QJKE4CP4.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-URC3SFYD.js";
+} from "./chunk-47GC5I25.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,

package/dist/{server-ZFVGQJUL.js → server-EJBLWFHI.js}

@@ -1,6 +1,6 @@
 import {
   createServer
-} from "./chunk-URC3SFYD.js";
+} from "./chunk-47GC5I25.js";
 import "./chunk-DJBCRQTD.js";
 import "./chunk-UF3ZJMJO.js";
 import "./chunk-JDBIUPHF.js";

package/dist/{setup-D7IXATAY.js → setup-IXC3WPV2.js}

@@ -6,7 +6,7 @@ import {
   promptRegistration,
   provision,
   runSetupWizard
-} from "./chunk-2DE62O56.js";
+} from "./chunk-QJKE4CP4.js";
 import "./chunk-Z3I6GNTS.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.344",
+  "version": "0.5.346",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {