@authrim/setup 0.1.20 → 0.1.24

package/dist/cli/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiDH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgXD,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuErE"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiDH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAiXD,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuErE"}

package/dist/cli/commands/init.js

@@ -24,12 +24,13 @@ function printBanner() {
     console.log('');
     console.log(chalk.blue('╔═══════════════════════════════════════════════════════════╗'));
     console.log(chalk.blue('║') +
-        chalk.bold.white('           🔐 Authrim Setup v0.1.14                       ') +
+        chalk.bold.white('           🔐 Authrim Setup v0.1.24                       ') +
         chalk.blue('║'));
     console.log(chalk.blue('║') +
         chalk.gray('     OIDC Provider on Cloudflare Workers                  ') +
         chalk.blue('║'));
     console.log(chalk.blue('╚═══════════════════════════════════════════════════════════╝'));
+    console.log(chalk.gray('  Press Ctrl+C at any time to exit'));
     console.log('');
 }
 // =============================================================================
@@ -396,28 +397,214 @@ export async function initCommand(options) {
 // CLI Setup Flow
 // =============================================================================
 async function runCliSetup(options) {
-    // Step 1: Choose setup mode
-    const setupMode = await select({
-        message: 'Choose setup mode',
-        choices: [
-            {
-                value: 'quick',
-                name: '⚡ Quick Setup (5 minutes)',
-                description: 'Deploy Authrim with minimal configuration',
-            },
-            {
-                value: 'normal',
-                name: '🔧 Custom Setup',
-                description: 'Configure all options step by step',
-            },
-        ],
-    });
-    if (setupMode === 'quick') {
-        await runQuickSetup(options);
+    // Main menu loop - keeps returning to menu until user exits
+    while (true) {
+        const setupMode = await select({
+            message: 'What would you like to do?',
+            choices: [
+                {
+                    value: 'quick',
+                    name: '⚡ Quick Setup (5 minutes)',
+                    description: 'Deploy Authrim with minimal configuration',
+                },
+                {
+                    value: 'normal',
+                    name: '🔧 Custom Setup',
+                    description: 'Configure all options step by step',
+                },
+                {
+                    value: 'manage',
+                    name: '📋 View Existing Environments',
+                    description: 'View, inspect, or delete existing environments',
+                },
+                {
+                    value: 'load',
+                    name: '📂 Load Existing Configuration',
+                    description: 'Resume setup from authrim-config.json',
+                },
+                {
+                    value: 'exit',
+                    name: '❌ Exit',
+                    description: 'Exit setup',
+                },
+            ],
+        });
+        if (setupMode === 'exit') {
+            console.log('');
+            console.log(chalk.gray('Goodbye!'));
+            console.log('');
+            break;
+        }
+        if (setupMode === 'quick') {
+            await runQuickSetup(options);
+            break; // Exit after setup completes
+        }
+        else if (setupMode === 'normal') {
+            await runNormalSetup(options);
+            break; // Exit after setup completes
+        }
+        else if (setupMode === 'manage') {
+            await runManageEnvironments();
+            // Returns to main menu after manage
+            console.log('');
+        }
+        else if (setupMode === 'load') {
+            const shouldContinue = await runLoadConfig();
+            if (!shouldContinue) {
+                // Returns to main menu
+                console.log('');
+            }
+            else {
+                break; // Exit after deploy
+            }
+        }
+    }
+}
+// =============================================================================
+// Manage Existing Environments
+// =============================================================================
+async function runManageEnvironments() {
+    // Loop to allow multiple operations before returning to main menu
+    while (true) {
+        console.log('');
+        console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold('📋 Existing Environments'));
+        console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log('');
+        const spinner = ora('Detecting environments...').start();
+        const environments = await detectEnvironments();
+        spinner.stop();
+        if (environments.length === 0) {
+            console.log(chalk.yellow('No Authrim environments found.'));
+            console.log('');
+            return;
+        }
+        console.log(chalk.bold('Detected Environments:'));
+        console.log('');
+        for (const env of environments) {
+            console.log(`  ${chalk.cyan(env.env)}`);
+            console.log(chalk.gray(`    Workers: ${env.workers.length}, D1: ${env.d1.length}, KV: ${env.kv.length}`));
+        }
+        console.log('');
+        const action = await select({
+            message: 'Select action',
+            choices: [
+                {
+                    value: 'info',
+                    name: '🔍 View Details',
+                    description: 'Show detailed resource information',
+                },
+                {
+                    value: 'delete',
+                    name: '🗑️  Delete Environment',
+                    description: 'Remove environment and resources',
+                },
+                { value: 'back', name: '← Back to Main Menu', description: 'Return to main menu' },
+            ],
+        });
+        if (action === 'back') {
+            return;
+        }
+        const envChoices = environments.map((e) => ({
+            name: `${e.env} (${e.workers.length} workers, ${e.d1.length} D1, ${e.kv.length} KV)`,
+            value: e.env,
+        }));
+        envChoices.push({ name: '← Back', value: '__back__' });
+        const envName = await select({
+            message: 'Select environment',
+            choices: envChoices,
+        });
+        if (envName === '__back__') {
+            continue; // Go back to action selection
+        }
+        if (action === 'info') {
+            const { infoCommand } = await import('./info.js');
+            await infoCommand({ env: envName });
+        }
+        else if (action === 'delete') {
+            const { deleteCommand } = await import('./delete.js');
+            await deleteCommand({ env: envName });
+        }
+        // After action, ask if user wants to continue managing
+        console.log('');
+        const continueManaging = await confirm({
+            message: 'Continue managing environments?',
+            default: true,
+        });
+        if (!continueManaging) {
+            return;
+        }
+    }
+}
+// =============================================================================
+// Load Existing Configuration
+// =============================================================================
+async function runLoadConfig() {
+    console.log('');
+    console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk.bold('📂 Load Existing Configuration'));
+    console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log('');
+    // Check for config file in current directory
+    const defaultConfigPath = './authrim-config.json';
+    const configExists = existsSync(defaultConfigPath);
+    let configPath = defaultConfigPath;
+    if (configExists) {
+        console.log(chalk.green(`✓ Found: ${defaultConfigPath}`));
+        console.log('');
+        const action = await select({
+            message: 'What would you like to do?',
+            choices: [
+                { value: 'load', name: '📂 Load this configuration' },
+                { value: 'other', name: '📁 Specify different file' },
+                { value: 'back', name: '← Back to Main Menu' },
+            ],
+        });
+        if (action === 'back') {
+            return false; // Return to main menu
+        }
+        if (action === 'other') {
+            configPath = await input({
+                message: 'Enter configuration file path',
+                validate: (value) => {
+                    if (!value)
+                        return 'Please enter a path';
+                    if (!existsSync(value))
+                        return `File not found: ${value}`;
+                    return true;
+                },
+            });
+        }
     }
     else {
-        await runNormalSetup(options);
+        console.log(chalk.yellow('No authrim-config.json found in current directory.'));
+        console.log('');
+        console.log(chalk.gray('💡 Tip: You can specify a config file with:'));
+        console.log(chalk.cyan('   npx @authrim/setup --config /path/to/authrim-config.json'));
+        console.log('');
+        const action = await select({
+            message: 'What would you like to do?',
+            choices: [
+                { value: 'specify', name: '📁 Specify file path' },
+                { value: 'back', name: '← Back to Main Menu' },
+            ],
+        });
+        if (action === 'back') {
+            return false;
+        }
+        configPath = await input({
+            message: 'Enter configuration file path',
+            validate: (value) => {
+                if (!value)
+                    return 'Please enter a path';
+                if (!existsSync(value))
+                    return `File not found: ${value}`;
+                return true;
+            },
+        });
     }
+    await handleExistingConfig(configPath);
+    return true; // Config was loaded and processed
 }
 // =============================================================================
 // Quick Setup
@@ -471,17 +658,25 @@ async function runQuickSetup(options) {
             return true;
         },
     });
-    // Step 3: Domain configuration
+    // Step 3: Show infrastructure info
+    console.log('');
+    console.log(chalk.gray('  Workers to deploy: ' + envPrefix + '-ar-router, ' + envPrefix + '-ar-auth, ...'));
+    console.log(chalk.gray('  Default API: https://' + envPrefix + '-ar-router.workers.dev'));
+    console.log('');
+    // Step 4: Domain configuration (single-tenant mode only in Quick Setup)
     const useCustomDomain = await confirm({
-        message: 'Configure custom domain?',
+        message: 'Configure custom domain? (for Issuer URL)',
         default: false,
     });
     let apiDomain = null;
     let loginUiDomain = null;
     let adminUiDomain = null;
     if (useCustomDomain) {
+        console.log('');
+        console.log(chalk.gray('  In single-tenant mode, Issuer URL = API domain'));
+        console.log('');
         apiDomain = await input({
-            message: 'API (issuer) domain',
+            message: 'API / Issuer domain (e.g., auth.example.com)',
             validate: (value) => {
                 if (!value)
                     return true; // Allow empty for workers.dev fallback
@@ -505,7 +700,7 @@ async function runQuickSetup(options) {
     config.urls = {
         api: {
             custom: apiDomain || null,
-            auto: `https://${envPrefix}-ar-router.workers.dev`, // Placeholder
+            auto: `https://${envPrefix}-ar-router.workers.dev`,
         },
         loginUi: {
             custom: loginUiDomain || null,
@@ -522,10 +717,14 @@ async function runQuickSetup(options) {
     console.log(chalk.bold('📋 Configuration Summary'));
     console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
     console.log('');
-    console.log(`  Environment: ${chalk.cyan(envPrefix)}`);
-    console.log(`  API URL:     ${chalk.cyan(config.urls.api.custom || config.urls.api.auto)}`);
-    console.log(`  Login UI:    ${chalk.cyan(config.urls.loginUi.custom || config.urls.loginUi.auto)}`);
-    console.log(`  Admin UI:    ${chalk.cyan(config.urls.adminUi.custom || config.urls.adminUi.auto)}`);
+    console.log(chalk.bold('Infrastructure:'));
+    console.log(`  Environment:   ${chalk.cyan(envPrefix)}`);
+    console.log(`  Worker Prefix: ${chalk.cyan(envPrefix + '-ar-*')}`);
+    console.log('');
+    console.log(chalk.bold('URLs (Single-tenant):'));
+    console.log(`  Issuer URL:    ${chalk.cyan(config.urls.api.custom || config.urls.api.auto)}`);
+    console.log(`  Login UI:      ${chalk.cyan(config.urls.loginUi.custom || config.urls.loginUi.auto)}`);
+    console.log(`  Admin UI:      ${chalk.cyan(config.urls.adminUi.custom || config.urls.adminUi.auto)}`);
     console.log('');
     const proceed = await confirm({
         message: 'Start setup with this configuration?',
@@ -612,38 +811,150 @@ async function runNormalSetup(options) {
         ],
         default: 'basic-op',
     });
-    // Step 4: Domain configuration
-    const useCustomDomain = await confirm({
-        message: 'Configure custom domain?',
+    // Step 4: Infrastructure overview (Workers are auto-generated from env)
+    console.log('');
+    console.log(chalk.blue('━━━ Infrastructure (Auto-generated) ━━━'));
+    console.log('');
+    console.log(chalk.gray('  The following Workers will be deployed:'));
+    console.log(`    Router:     ${chalk.cyan(envPrefix + '-ar-router')}`);
+    console.log(`    Auth:       ${chalk.cyan(envPrefix + '-ar-auth')}`);
+    console.log(`    Token:      ${chalk.cyan(envPrefix + '-ar-token')}`);
+    console.log(`    Management: ${chalk.cyan(envPrefix + '-ar-management')}`);
+    console.log(chalk.gray('    ... and other supporting workers'));
+    console.log('');
+    console.log(chalk.gray('  Default endpoints (without custom domain):'));
+    console.log(`    API:        ${chalk.gray('https://' + envPrefix + '-ar-router.workers.dev')}`);
+    console.log(`    UI:         ${chalk.gray('https://' + envPrefix + '-ar-ui.pages.dev')}`);
+    console.log('');
+    // Step 5: Tenant configuration
+    console.log(chalk.blue('━━━ Tenant Mode ━━━'));
+    console.log('');
+    const multiTenant = await confirm({
+        message: 'Enable multi-tenant mode? (subdomain-based tenant isolation)',
         default: false,
     });
+    let tenantName = 'default';
+    let tenantDisplayName = 'Default Tenant';
+    let baseDomain;
+    // Step 6: URL configuration (depends on tenant mode)
     let apiDomain = null;
     let loginUiDomain = null;
     let adminUiDomain = null;
-    if (useCustomDomain) {
-        apiDomain = await input({
-            message: 'API (issuer) domain',
+    if (multiTenant) {
+        // Multi-tenant mode: base domain is required, becomes the issuer base
+        console.log('');
+        console.log(chalk.blue('━━━ Multi-tenant URL Configuration ━━━'));
+        console.log('');
+        console.log(chalk.gray('  In multi-tenant mode:'));
+        console.log(chalk.gray('    • Each tenant has a subdomain: https://{tenant}.{base-domain}'));
+        console.log(chalk.gray('    • The base domain points to the router Worker'));
+        console.log(chalk.gray('    • Issuer URL is dynamically built from Host header'));
+        console.log('');
+        baseDomain = await input({
+            message: 'Base domain (e.g., authrim.com)',
             validate: (value) => {
                 if (!value)
-                    return true;
+                    return 'Base domain is required for multi-tenant mode';
                 if (!/^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/.test(value)) {
-                    return 'Please enter a valid domain';
+                    return 'Please enter a valid domain (e.g., authrim.com)';
                 }
                 return true;
             },
         });
-        loginUiDomain = await input({
-            message: 'Login UI domain (Enter to skip)',
-            default: '',
+        console.log('');
+        console.log(chalk.green('  ✓ Issuer URL format: https://{tenant}.' + baseDomain));
+        console.log(chalk.gray('    Example: https://acme.' + baseDomain));
+        console.log('');
+        // API domain in multi-tenant is the base domain (or custom apex)
+        apiDomain = baseDomain;
+        tenantName = await input({
+            message: 'Default tenant name (identifier)',
+            default: 'default',
+            validate: (value) => {
+                if (!/^[a-z][a-z0-9-]*$/.test(value)) {
+                    return 'Only lowercase alphanumeric and hyphens allowed';
+                }
+                return true;
+            },
         });
-        adminUiDomain = await input({
-            message: 'Admin UI domain (Enter to skip)',
-            default: '',
+        tenantDisplayName = await input({
+            message: 'Default tenant display name',
+            default: 'Default Tenant',
+        });
+        // UI domains for multi-tenant
+        console.log('');
+        console.log(chalk.blue('━━━ UI Domain Configuration ━━━'));
+        console.log('');
+        const useCustomUiDomain = await confirm({
+            message: 'Configure custom UI domains?',
+            default: false,
         });
+        if (useCustomUiDomain) {
+            loginUiDomain = await input({
+                message: 'Login UI domain (e.g., login.example.com)',
+                default: '',
+            });
+            adminUiDomain = await input({
+                message: 'Admin UI domain (e.g., admin.example.com)',
+                default: '',
+            });
+        }
+    }
+    else {
+        // Single-tenant mode
+        console.log('');
+        console.log(chalk.blue('━━━ Single-tenant URL Configuration ━━━'));
+        console.log('');
+        console.log(chalk.gray('  In single-tenant mode:'));
+        console.log(chalk.gray('    • Issuer URL = API custom domain (or workers.dev fallback)'));
+        console.log(chalk.gray('    • All clients share the same issuer'));
+        console.log('');
+        tenantDisplayName = await input({
+            message: 'Organization name (display name)',
+            default: 'Default Tenant',
+        });
+        const useCustomDomain = await confirm({
+            message: 'Configure custom domain?',
+            default: false,
+        });
+        if (useCustomDomain) {
+            console.log('');
+            console.log(chalk.gray('  Enter custom domains (leave empty to use Cloudflare defaults)'));
+            console.log('');
+            apiDomain = await input({
+                message: 'API / Issuer domain (e.g., auth.example.com)',
+                validate: (value) => {
+                    if (!value)
+                        return true;
+                    if (!/^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/.test(value)) {
+                        return 'Please enter a valid domain';
+                    }
+                    return true;
+                },
+            });
+            loginUiDomain = await input({
+                message: 'Login UI domain (Enter to skip)',
+                default: '',
+            });
+            adminUiDomain = await input({
+                message: 'Admin UI domain (Enter to skip)',
+                default: '',
+            });
+        }
+        if (apiDomain) {
+            console.log('');
+            console.log(chalk.green('  ✓ Issuer URL: https://' + apiDomain));
+        }
+        else {
+            console.log('');
+            console.log(chalk.green('  ✓ Issuer URL: https://' + envPrefix + '-ar-router.workers.dev'));
+            console.log(chalk.gray('    (using Cloudflare workers.dev domain)'));
+        }
     }
     // Step 5: Optional components
     console.log('');
     console.log(chalk.blue('━━━ Optional Components ━━━'));
+    console.log(chalk.gray('  Note: Social Login and Policy Engine are standard components'));
     console.log('');
     const enableSaml = await confirm({
         message: 'Enable SAML support?',
@@ -653,14 +964,6 @@ async function runNormalSetup(options) {
         message: 'Enable Verifiable Credentials?',
         default: false,
     });
-    const enableBridge = await confirm({
-        message: 'Enable External IdP Bridge?',
-        default: false,
-    });
-    const enablePolicy = await confirm({
-        message: 'Enable ReBAC Policy service?',
-        default: false,
-    });
     // Step 6: Feature flags
     console.log('');
     console.log(chalk.blue('━━━ Feature Flags ━━━'));
@@ -772,13 +1075,19 @@ async function runNormalSetup(options) {
     // Create configuration
     const config = createDefaultConfig(envPrefix);
     config.profile = profile;
+    config.tenant = {
+        name: tenantName,
+        displayName: tenantDisplayName,
+        multiTenant,
+        baseDomain,
+    };
     config.components = {
         ...config.components,
         saml: enableSaml,
         async: enableQueue, // async is tied to queue
         vc: enableVc,
-        bridge: enableBridge,
-        policy: enablePolicy,
+        bridge: true, // Standard component
+        policy: true, // Standard component
     };
     config.urls = {
         api: {
@@ -816,20 +1125,43 @@ async function runNormalSetup(options) {
     console.log(chalk.bold('📋 Configuration Summary'));
     console.log(chalk.blue('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
     console.log('');
-    console.log(chalk.bold('Basic Settings:'));
-    console.log(`  Environment:          ${chalk.cyan(envPrefix)}`);
-    console.log(`  Profile:   ${chalk.cyan(profile)}`);
+    // Infrastructure
+    console.log(chalk.bold('Infrastructure:'));
+    console.log(`  Environment:   ${chalk.cyan(envPrefix)}`);
+    console.log(`  Worker Prefix: ${chalk.cyan(envPrefix + '-ar-*')}`);
+    console.log(`  Profile:       ${chalk.cyan(profile)}`);
     console.log('');
-    console.log(chalk.bold('URL Settings:'));
-    console.log(`  API URL:       ${chalk.cyan(config.urls.api.custom || config.urls.api.auto)}`);
+    // Tenant mode and Issuer
+    console.log(chalk.bold('Tenant & Issuer:'));
+    console.log(`  Mode:          ${multiTenant ? chalk.cyan('Multi-tenant') : chalk.cyan('Single-tenant')}`);
+    if (multiTenant && baseDomain) {
+        console.log(`  Base Domain:   ${chalk.cyan(baseDomain)}`);
+        console.log(`  Issuer Format: ${chalk.cyan('https://{tenant}.' + baseDomain)}`);
+        console.log(`  Example:       ${chalk.gray('https://acme.' + baseDomain)}`);
+    }
+    else {
+        const issuerUrl = config.urls.api.custom || config.urls.api.auto;
+        console.log(`  Issuer URL:    ${chalk.cyan(issuerUrl)}`);
+    }
+    console.log(`  Default Tenant: ${chalk.cyan(tenantName)}`);
+    console.log(`  Display Name:  ${chalk.cyan(tenantDisplayName)}`);
+    console.log('');
+    // Public URLs
+    console.log(chalk.bold('Public URLs:'));
+    if (multiTenant && baseDomain) {
+        console.log(`  API Router:    ${chalk.cyan('*.' + baseDomain)} → ${chalk.gray(envPrefix + '-ar-router')}`);
+    }
+    else {
+        console.log(`  API Router:    ${chalk.cyan(config.urls.api.custom || config.urls.api.auto)}`);
+    }
     console.log(`  Login UI:      ${chalk.cyan(config.urls.loginUi.custom || config.urls.loginUi.auto)}`);
     console.log(`  Admin UI:      ${chalk.cyan(config.urls.adminUi.custom || config.urls.adminUi.auto)}`);
     console.log('');
     console.log(chalk.bold('Components:'));
     console.log(`  SAML:          ${enableSaml ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
     console.log(`  VC:            ${enableVc ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  Bridge:        ${enableBridge ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  Policy:        ${enablePolicy ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
+    console.log(`  Social Login:  ${chalk.green('Enabled')} ${chalk.gray('(standard)')}`);
+    console.log(`  Policy Engine: ${chalk.green('Enabled')} ${chalk.gray('(standard)')}`);
     console.log('');
     console.log(chalk.bold('Feature Flags:'));
     console.log(`  Queue:         ${enableQueue ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
@@ -1356,11 +1688,11 @@ async function editUrls(config) {
 // =============================================================================
 async function editComponents(config) {
     console.log(chalk.bold('\nCurrent Component Settings:'));
-    console.log(`  SAML:    ${config.components.saml ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  Async:   ${config.components.async ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  VC:      ${config.components.vc ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  Bridge:  ${config.components.bridge ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
-    console.log(`  Policy:  ${config.components.policy ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
+    console.log(`  SAML:          ${config.components.saml ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
+    console.log(`  Async:         ${config.components.async ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
+    console.log(`  VC:            ${config.components.vc ? chalk.green('Enabled') : chalk.gray('Disabled')}`);
+    console.log(`  Social Login:  ${chalk.green('Enabled')} ${chalk.gray('(standard - always on)')}`);
+    console.log(`  Policy Engine: ${chalk.green('Enabled')} ${chalk.gray('(standard - always on)')}`);
     console.log('');
     config.components.saml = await confirm({
         message: 'Enable SAML support?',
@@ -1374,14 +1706,9 @@ async function editComponents(config) {
         message: 'Enable Verifiable Credentials?',
         default: config.components.vc,
     });
-    config.components.bridge = await confirm({
-        message: 'Enable External IdP Bridge?',
-        default: config.components.bridge,
-    });
-    config.components.policy = await confirm({
-        message: 'Enable ReBAC Policy service?',
-        default: config.components.policy,
-    });
+    // Standard components are always enabled
+    config.components.bridge = true;
+    config.components.policy = true;
     return true;
 }
 // =============================================================================