@agenticmail/enterprise 0.5.345 → 0.5.347

package/dist/{chunk-URC3SFYD.js → chunk-47GC5I25.js}

@@ -2405,7 +2405,7 @@ function createAdminRoutes(db) {
       const platform = os.default.platform();
       if (platform === "darwin") {
         try {
-          execSync("which brew", { timeout: 3e3 });
+          execSync(process.platform === "win32" ? "where brew" : "which brew", { timeout: 3e3 });
           execSync("brew install cloudflared 2>&1", { encoding: "utf8", timeout: 12e4 });
         } catch {
           const arch = os.default.arch() === "arm64" ? "arm64" : "amd64";
@@ -2494,7 +2494,7 @@ function createAdminRoutes(db) {
         }
       }
       try {
-        execSync("which pm2", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where pm2" : "which pm2", { timeout: 3e3 });
         try {
           execSync("pm2 delete cloudflared 2>/dev/null", { timeout: 5e3 });
         } catch {

package/dist/{chunk-WV6DLTYP.js → chunk-QJKE4CP4.js}

@@ -258,7 +258,7 @@ async function promptDatabase(inquirer, chalk) {
 // src/setup/deployment.ts
 import { execSync, exec as execCb } from "child_process";
 import { promisify } from "util";
-import { existsSync, writeFileSync, readFileSync } from "fs";
+import { existsSync, writeFileSync, readFileSync, statSync } from "fs";
 import { join } from "path";
 import { homedir, platform, arch } from "os";
 var execP = promisify(execCb);
@@ -431,16 +431,32 @@ async function runCloudSetup(inquirer, chalk, existingSubdomain) {
         const archStr = arch() === "arm64" ? "arm64" : "amd64";
         execSync(`curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${archStr} -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared`, { stdio: "pipe", timeout: 12e4 });
       } else if (os === "win32") {
+        const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
+        const cfDir = `${localAppData}\\cloudflared`;
+        const cfExe = `${cfDir}\\cloudflared.exe`;
+        let found = false;
         try {
-          execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+          statSync(cfExe);
+          found = true;
         } catch {
-          console.log(chalk.dim("  winget failed, trying direct download..."));
-          const archStr = arch() === "arm64" ? "arm64" : "amd64";
-          const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
-          const cfDir = `${localAppData}\\cloudflared`;
-          const cfExe = `${cfDir}\\cloudflared.exe`;
-          const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
-          execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "pipe", timeout: 12e4 });
+        }
+        if (!found) {
+          try {
+            execSync("winget install --id Cloudflare.cloudflared --accept-source-agreements --accept-package-agreements", { stdio: "pipe", timeout: 12e4 });
+            found = true;
+          } catch {
+            console.log(chalk.dim("  winget failed, trying direct download..."));
+            try {
+              const archStr = arch() === "arm64" ? "arm64" : "amd64";
+              const dlUrl = `https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-${archStr}.exe`;
+              execSync(`powershell -Command "New-Item -ItemType Directory -Force -Path '${cfDir}' | Out-Null; Invoke-WebRequest -Uri '${dlUrl}' -OutFile '${cfExe}'"`, { stdio: "inherit", timeout: 12e4 });
+              found = true;
+            } catch (dlErr) {
+              console.log(chalk.dim(`  Download failed: ${dlErr.message?.substring(0, 100)}`));
+            }
+          }
+        }
+        if (found) {
           process.env.PATH = `${cfDir};${process.env.PATH}`;
         }
       } else {
@@ -1046,7 +1062,7 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
 // src/setup/provision.ts
 import { randomUUID, randomBytes as randomBytes2 } from "crypto";
 import { execSync as execSync2, spawn } from "child_process";
-import { statSync, readFileSync as readFileSync2 } from "fs";
+import { statSync as statSync2, readFileSync as readFileSync2 } from "fs";
 import { join as join2 } from "path";
 import { homedir as homedir2 } from "os";
 function generateOrgId() {
@@ -1218,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-ZFVGQJUL.js");
+    const { createServer: createServer2 } = await import("./server-EJBLWFHI.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1292,7 +1308,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
         const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
         const candidate = `${localAppData}\\cloudflared\\cloudflared.exe`;
         try {
-          statSync(candidate);
+          statSync2(candidate);
           cfPath = candidate;
         } catch {
         }
@@ -1307,7 +1323,6 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
       const startScript = join2(amDir, "start.cjs");
       writeFileSync2(startScript, [
         `// Auto-generated by AgenticMail setup \u2014 do not edit`,
-        `const { execFileSync } = require('child_process');`,
         `const { readFileSync } = require('fs');`,
         `const { join } = require('path');`,
         `// Load .env`,
@@ -1316,13 +1331,13 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
         `  const lines = readFileSync(envFile, 'utf8').split('\\n');`,
         `  for (const line of lines) {`,
         `    const m = line.match(/^([A-Z_]+)=(.*)$/);`,
-        `    if (m) process.env[m[1]] = m[2];`,
+        `    if (m && !process.env[m[1]]) process.env[m[1]] = m[2];`,
         `  }`,
         `} catch {}`,
-        `// Run the CLI`,
+        `// Run via npx (shell:true handles .cmd on Windows)`,
         `const { spawnSync } = require('child_process');`,
-        `const r = spawnSync(process.execPath, [require.resolve('@agenticmail/enterprise/dist/cli.js'), 'start'], {`,
-        `  stdio: 'inherit', env: process.env`,
+        `const r = spawnSync('npx', ['@agenticmail/enterprise', 'start'], {`,
+        `  stdio: 'inherit', env: process.env, shell: true`,
         `});`,
         `process.exit(r.status || 0);`
       ].join("\n"));
@@ -1400,7 +1415,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
         const localAppData = process.env.LOCALAPPDATA || `${process.env.USERPROFILE}\\AppData\\Local`;
         const candidate = `${localAppData}\\cloudflared\\cloudflared.exe`;
         try {
-          statSync(candidate);
+          statSync2(candidate);
           fallbackCfPath = candidate;
         } catch {
         }
@@ -1520,7 +1535,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-ZFVGQJUL.js");
+  const { createServer } = await import("./server-EJBLWFHI.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{cli-recover-K7A4IIQY.js → cli-recover-CO2RNTTL.js}

@@ -418,7 +418,7 @@ async function runCloudRecover(args, inquirer, chalk, ora) {
       const { execSync } = await import("child_process");
       const { platform, arch } = await import("os");
       try {
-        execSync("which cloudflared", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where cloudflared" : "which cloudflared", { timeout: 3e3 });
         console.log(chalk.green("  cloudflared already installed"));
       } catch {
         const spinner2 = ora("Installing cloudflared...").start();

package/dist/{cli-serve-DUUELMXK.js → cli-serve-F6QWHAUX.js}

@@ -94,7 +94,7 @@ async function runServe(_args) {
     process.exit(1);
   }
   const { createAdapter, smartDbConfig } = await import("./factory-RTZU2K54.js");
-  const { createServer } = await import("./server-ZFVGQJUL.js");
+  const { createServer } = await import("./server-EJBLWFHI.js");
   const db = await createAdapter(smartDbConfig(DATABASE_URL));
   await db.migrate();
   const server = createServer({
@@ -128,21 +128,42 @@ async function runServe(_args) {
     try {
       const { execSync, spawn } = await import("child_process");
       try {
-        execSync("which cloudflared", { timeout: 3e3 });
+        execSync(process.platform === "win32" ? "where cloudflared" : "which cloudflared", { timeout: 3e3 });
       } catch {
         console.log("[startup] cloudflared not found \u2014 skipping tunnel auto-start");
         console.log("[startup] Install cloudflared to enable tunnel: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/");
         return;
       }
       try {
-        execSync('pgrep -f "cloudflared.*tunnel.*run"', { timeout: 3e3 });
-        console.log("[startup] cloudflared tunnel already running");
-        return;
+        if (process.platform === "win32") {
+          const tasklist = execSync('tasklist /FI "IMAGENAME eq cloudflared.exe" /NH', { encoding: "utf8", timeout: 5e3 });
+          if (tasklist.includes("cloudflared.exe")) {
+            console.log("[startup] cloudflared tunnel already running");
+            return;
+          }
+        } else {
+          execSync('pgrep -f "cloudflared.*tunnel.*run"', { timeout: 3e3 });
+          console.log("[startup] cloudflared tunnel already running");
+          return;
+        }
       } catch {
       }
       const subdomain = process.env.AGENTICMAIL_SUBDOMAIN || process.env.AGENTICMAIL_DOMAIN || "";
       console.log(`[startup] Starting cloudflared tunnel${subdomain ? ` for ${subdomain}.agenticmail.io` : ""}...`);
-      const child = spawn("cloudflared", ["tunnel", "--no-autoupdate", "run", "--token", tunnelToken], {
+      let cfBin = "cloudflared";
+      if (process.platform === "win32") {
+        try {
+          cfBin = execSync("where cloudflared", { encoding: "utf8", timeout: 3e3 }).trim().split("\n")[0].trim();
+        } catch {
+          const candidate = `${process.env.LOCALAPPDATA || ""}\\cloudflared\\cloudflared.exe`;
+          try {
+            (await import("fs")).statSync(candidate);
+            cfBin = candidate;
+          } catch {
+          }
+        }
+      }
+      const child = spawn(cfBin, ["tunnel", "--no-autoupdate", "run", "--token", tunnelToken], {
         detached: true,
         stdio: "ignore"
       });

package/dist/cli.js

@@ -14,7 +14,7 @@ switch (command) {
     import("./cli-submit-skill-SNGAHVB7.js").then((m) => m.runSubmitSkill(args.slice(1))).catch(fatal);
     break;
   case "recover":
-    import("./cli-recover-K7A4IIQY.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
+    import("./cli-recover-CO2RNTTL.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
     break;
   case "verify-domain":
     import("./cli-verify-7EMGBE46.js").then((m) => m.runVerifyDomain(args.slice(1))).catch(fatal);
@@ -57,14 +57,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-DUUELMXK.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-F6QWHAUX.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
     import("./cli-agent-35EZUQ4N.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-PIBCCQVU.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-IXC3WPV2.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-WV6DLTYP.js";
+} from "./chunk-QJKE4CP4.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-URC3SFYD.js";
+} from "./chunk-47GC5I25.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,

package/dist/{server-ZFVGQJUL.js → server-EJBLWFHI.js}

@@ -1,6 +1,6 @@
 import {
   createServer
-} from "./chunk-URC3SFYD.js";
+} from "./chunk-47GC5I25.js";
 import "./chunk-DJBCRQTD.js";
 import "./chunk-UF3ZJMJO.js";
 import "./chunk-JDBIUPHF.js";

package/dist/{setup-D7IXATAY.js → setup-IXC3WPV2.js}

@@ -6,7 +6,7 @@ import {
   promptRegistration,
   provision,
   runSetupWizard
-} from "./chunk-2DE62O56.js";
+} from "./chunk-QJKE4CP4.js";
 import "./chunk-Z3I6GNTS.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/logs/cloudflared-error.log

@@ -129,3 +129,7 @@
 2026-03-05 08:08:16: 2026-03-05T07:08:16Z ERR  error="unexpected EOF" connIndex=3 event=1 ingressRule=0 originService=http://localhost:3100
 2026-03-05 08:08:16: 2026-03-05T07:08:16Z ERR Request failed error="unexpected EOF" connIndex=3 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.200.53 type=http
 2026-03-05 08:08:16: 2026-03-05T07:08:16Z ERR Request failed error="unexpected EOF" connIndex=3 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.200.53 type=http
+2026-03-05 17:11:24: 2026-03-05T16:11:24Z ERR  error="stream 2437 canceled by remote with error code 0" connIndex=3 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 17:11:24: 2026-03-05T16:11:24Z ERR  error="stream 2433 canceled by remote with error code 0" connIndex=3 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 17:11:24: 2026-03-05T16:11:24Z ERR Request failed error="stream 2437 canceled by remote with error code 0" connIndex=3 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.200.53 type=http
+2026-03-05 17:11:24: 2026-03-05T16:11:24Z ERR Request failed error="stream 2433 canceled by remote with error code 0" connIndex=3 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.200.53 type=http

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.345",
+  "version": "0.5.347",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {