@datasynx/agentic-crm 1.4.0 → 1.5.0

package/README.md

@@ -243,10 +243,17 @@ right customer by sender/recipient domain** (or to one customer with a slug). On
 mailbox connection, all customers populated, same attachment + search pipeline.
 
 ```bash
-DXCRM_IMAP_HOST=outlook.office365.com DXCRM_IMAP_USER=me@org.com DXCRM_IMAP_TOKEN=ey... \
-  dxcrm mailbox sync          # auto-route the whole mailbox to customers by domain
+# One-time OAuth (Gmail & Microsoft 365 require it for IMAP in 2026):
+dxcrm mailbox login gmail --user you@gmail.com
+dxcrm mailbox login microsoft --user you@org.com
+
+# Then auto-route the whole mailbox to customers by domain:
+dxcrm mailbox sync --account gmail:you@gmail.com
 ```
 
+Tokens are stored locally and auto-refreshed. A password-based IMAP server works too
+(`DXCRM_IMAP_HOST` / `DXCRM_IMAP_USER` / `DXCRM_IMAP_PASS`).
+
 <br/>
 
 ## What it's not

package/dist/cli.js

@@ -32,6 +32,7 @@ import { createHash } from "crypto";
 import Table from "cli-table3";
 import os from "os";
 import { execSync, spawn } from "child_process";
+import readline from "readline";
 //#region src/commands/create.ts
 async function createCustomer(opts) {
 	const id = slugify(opts.name, { lower: true });
@@ -4427,6 +4428,17 @@ complianceCommand.command("status", { isDefault: true }).description("Show the a
 });
 //#endregion
 //#region src/commands/mailbox.ts
+/** Default IMAP endpoints for OAuth providers. */
+const PROVIDER_IMAP_HOST = {
+	gmail: {
+		host: "imap.gmail.com",
+		port: 993
+	},
+	microsoft: {
+		host: "outlook.office365.com",
+		port: 993
+	}
+};
 /** Read IMAP mailbox connection settings from the environment. */
 function imapConfigFromEnv(env = process.env) {
 	const host = env["DXCRM_IMAP_HOST"];
@@ -4448,15 +4460,54 @@ function imapConfigFromEnv(env = process.env) {
 		}
 	};
 }
+/** Parse a "provider:user" account string. */
+function parseAccount(account) {
+	const idx = account.indexOf(":");
+	if (idx < 0) return null;
+	const provider = account.slice(0, idx);
+	const user = account.slice(idx + 1);
+	if (provider !== "gmail" && provider !== "microsoft" || !user) return null;
+	return {
+		provider,
+		user
+	};
+}
+/** Build an IMAP config for a stored OAuth account, refreshing the token if needed. */
+async function resolveAccountConfig(dataDir, account, env = process.env, mailbox) {
+	const parsed = parseAccount(account);
+	if (!parsed) throw new Error(`Invalid --account '${account}'. Use 'gmail:you@gmail.com' or 'microsoft:you@org.com'.`);
+	const { getFreshAccessToken } = await import("./token-resolver-BRLOmRvF.js");
+	const accessToken = await getFreshAccessToken(dataDir, parsed.provider, parsed.user, { env });
+	const { host, port } = PROVIDER_IMAP_HOST[parsed.provider];
+	return {
+		host,
+		port,
+		secure: true,
+		mailbox: mailbox ?? env["DXCRM_IMAP_MAILBOX"] ?? "INBOX",
+		auth: {
+			user: parsed.user,
+			accessToken
+		}
+	};
+}
 /**
 * Sync an IMAP mailbox (any provider). With a slug, all mail goes to that one
 * customer; without, mail is auto-routed to customers by sender/recipient
-* domain and unmatched mail is reported as unrouted.
+* domain and unmatched mail is reported as unrouted. Use `account` to sync a
+* stored OAuth mailbox (Gmail/Outlook) instead of env-configured IMAP.
 */
 async function runMailboxSync(opts) {
-	const config = imapConfigFromEnv(opts.env ?? process.env);
+	const env = opts.env ?? process.env;
+	let config;
+	try {
+		config = opts.account ? await resolveAccountConfig(opts.dataDir, opts.account, env) : imapConfigFromEnv(env);
+	} catch (err) {
+		const msg = err.message;
+		console.error(error(msg));
+		return { error: msg };
+	}
 	if (!config) {
-		const msg = "IMAP not configured. Set DXCRM_IMAP_HOST, DXCRM_IMAP_USER and DXCRM_IMAP_PASS (or DXCRM_IMAP_TOKEN).";
+		const msg = "IMAP not configured. Set DXCRM_IMAP_HOST, DXCRM_IMAP_USER and DXCRM_IMAP_PASS (or DXCRM_IMAP_TOKEN), or use --account.";
 		console.error(error(msg));
 		return { error: msg };
 	}
@@ -4473,11 +4524,67 @@ async function runMailboxSync(opts) {
 	if (!opts.slug && result.unrouted > 0) console.log(info(`  ${result.unrouted} message(s) matched no customer. Add their domains via 'dxcrm create <slug> --domain <domain>'.`));
 	return result;
 }
+function ask(question) {
+	const rl = readline.createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	return new Promise((resolve) => rl.question(question, (a) => (rl.close(), resolve(a))));
+}
+/** Interactive `dxcrm mailbox login <provider>` flow. */
+async function runLogin(provider, user) {
+	const dataDir = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+	const print = (l) => console.log(l);
+	if (provider === "gmail") {
+		const clientId = process.env["DXCRM_GOOGLE_CLIENT_ID"];
+		const clientSecret = process.env["DXCRM_GOOGLE_CLIENT_SECRET"];
+		if (!clientId || !clientSecret) {
+			console.error(error("Set DXCRM_GOOGLE_CLIENT_ID and DXCRM_GOOGLE_CLIENT_SECRET (OAuth desktop app)."));
+			return;
+		}
+		const account = user ?? (await ask("Gmail address: ")).trim();
+		const { runGmailLogin } = await import("./login-CYgla6-A.js");
+		await runGmailLogin({
+			dataDir,
+			clientId,
+			clientSecret,
+			user: account,
+			prompt: ask,
+			print
+		});
+		console.log(success(`✓ Gmail authorized for ${bold(account)}. Sync: dxcrm mailbox sync --account gmail:${account}`));
+		return;
+	}
+	if (provider === "microsoft") {
+		const clientId = process.env["DXCRM_MS_CLIENT_ID"];
+		if (!clientId) {
+			console.error(error("Set DXCRM_MS_CLIENT_ID (Azure app registration, public client)."));
+			return;
+		}
+		const tenant = process.env["DXCRM_MS_TENANT"] ?? "common";
+		const account = user ?? (await ask("Outlook/Microsoft address: ")).trim();
+		const { runMicrosoftLogin } = await import("./login-CYgla6-A.js");
+		await runMicrosoftLogin({
+			dataDir,
+			clientId,
+			user: account,
+			tenant,
+			print
+		});
+		console.log(success(`✓ Microsoft authorized for ${bold(account)}. Sync: dxcrm mailbox sync --account microsoft:${account}`));
+		return;
+	}
+	console.error(error(`Unknown provider '${provider}'. Use 'gmail' or 'microsoft'.`));
+}
 const mailboxCommand = new Command("mailbox").description("Sync any IMAP mailbox (Gmail, Outlook, custom) into the CRM");
-mailboxCommand.command("sync").description("Sync an IMAP mailbox; auto-routes to customers by domain unless a slug is given").argument("[slug]", "Route all mail to this customer (omit to auto-route by domain)").option("--since <date>", "Only sync messages after this date (YYYY-MM-DD)").option("--no-attachments", "Skip downloading/converting/indexing attachments").action(async (slug, options) => {
+mailboxCommand.command("login").description("Authorize a Gmail or Microsoft mailbox via OAuth (stores tokens locally)").argument("<provider>", "gmail | microsoft").option("--user <email>", "Mailbox address (otherwise prompted)").action(async (provider, options) => {
+	await runLogin(provider, options.user);
+});
+mailboxCommand.command("sync").description("Sync an IMAP mailbox; auto-routes to customers by domain unless a slug is given").argument("[slug]", "Route all mail to this customer (omit to auto-route by domain)").option("--account <provider:user>", "Use a stored OAuth mailbox (e.g. gmail:you@gmail.com)").option("--since <date>", "Only sync messages after this date (YYYY-MM-DD)").option("--no-attachments", "Skip downloading/converting/indexing attachments").action(async (slug, options) => {
 	await runMailboxSync({
 		dataDir: process.env["DXCRM_DATA_DIR"] ?? process.cwd(),
 		slug,
+		...options.account ? { account: options.account } : {},
 		...options.since ? { since: new Date(options.since) } : {},
 		includeAttachments: options.attachments !== false
 	});