@startanaicompany/crm 1.0.0

package/README.md

@@ -0,0 +1,78 @@
+# @startanaicompany/crm
+
+AI-first CRM CLI (`saac_crm`) — manage leads, API keys, and user accounts from the terminal.
+
+## Installation
+
+```bash
+npm install -g @startanaicompany/crm
+```
+
+## Configuration
+
+```bash
+# Set API URL and default key
+saac_crm config set --url https://yourapp.example.com --api-key crm_xxxx
+
+# Auth priority: --api-key flag > SAAC_CRM_API_KEY env > config file
+export SAAC_CRM_API_KEY=crm_xxxx
+```
+
+## Commands
+
+### API Keys
+
+```bash
+# Create an agent key (no auth required)
+saac_crm keys create --name "my-agent"
+
+# Create an admin scope key (requires deployment password)
+saac_crm keys create --name "admin-agent" --scope admin --admin-password <password>
+
+# List all keys
+saac_crm keys list
+
+# Show current key info
+saac_crm keys self
+
+# Revoke a key
+saac_crm keys revoke <id>
+```
+
+### Leads
+
+```bash
+# Create a lead
+saac_crm leads create --name "Jane Smith" --email "jane@example.com" --company "Acme"
+
+# List leads (with filters)
+saac_crm leads list --status new --tag vip --tag enterprise
+
+# Get single lead
+saac_crm leads get <id>
+
+# Update lead
+saac_crm leads update <id> --status contacted --notes "Called, interested"
+
+# Delete lead (soft)
+saac_crm leads delete <id>
+
+# Status history
+saac_crm leads history <id>
+```
+
+### Users (requires admin scope key)
+
+```bash
+# Create a human user account
+saac_crm users register --email admin@example.com --name "Admin User" --role admin
+
+# List users
+saac_crm users list
+
+# Update user
+saac_crm users update <id> --role viewer
+
+# Deactivate user
+saac_crm users deactivate <id>
+```

package/index.js

@@ -0,0 +1,521 @@
+#!/usr/bin/env node
+'use strict';
+
+const { Command } = require('commander');
+const axios = require('axios');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const readline = require('readline');
+
+// ============================================================
+// CONFIG — ~/.saac_crm/config.json
+// ============================================================
+
+const CONFIG_DIR = path.join(os.homedir(), '.saac_crm');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+
+function loadConfig() {
+  try {
+    if (fs.existsSync(CONFIG_FILE)) {
+      return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+    }
+  } catch (_) {}
+  return {};
+}
+
+function saveConfig(config) {
+  if (!fs.existsSync(CONFIG_DIR)) fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+
+// Priority: --api-key flag > SAAC_CRM_API_KEY env > config file
+function resolveApiKey(cliApiKey) {
+  if (cliApiKey) return cliApiKey;
+  if (process.env.SAAC_CRM_API_KEY) return process.env.SAAC_CRM_API_KEY;
+  const cfg = loadConfig();
+  return cfg.apiKey || null;
+}
+
+function resolveApiUrl(cliUrl) {
+  if (cliUrl) return cliUrl;
+  const cfg = loadConfig();
+  return cfg.apiUrl || null;
+}
+
+function getClient(options = {}) {
+  const apiKey = resolveApiKey(options.apiKey);
+  const apiUrl = resolveApiUrl(options.url);
+
+  if (!apiUrl) {
+    console.error('Error: API URL not configured. Run: saac_crm config set --url <api-url>');
+    process.exit(1);
+  }
+  if (!apiKey) {
+    console.error('Error: API key not set. Use --api-key, set SAAC_CRM_API_KEY env, or run: saac_crm config set --api-key <key>');
+    process.exit(1);
+  }
+
+  return axios.create({
+    baseURL: `${apiUrl.replace(/\/$/, '')}/api/v1`,
+    headers: {
+      'Authorization': `Bearer ${apiKey}`,
+      'Content-Type': 'application/json'
+    }
+  });
+}
+
+function printJSON(data) {
+  console.log(JSON.stringify(data, null, 2));
+}
+
+function handleError(err) {
+  if (err.response) {
+    const e = err.response.data?.error || {};
+    console.error(`Error ${err.response.status}: [${e.code || 'ERROR'}] ${e.message || err.response.statusText}`);
+    if (e.field) console.error(`Field: ${e.field}`);
+  } else {
+    console.error('Error:', err.message);
+  }
+  process.exit(1);
+}
+
+function promptSecret(question) {
+  return new Promise((resolve) => {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve(answer);
+    });
+  });
+}
+
+// ============================================================
+// CLI PROGRAM
+// ============================================================
+
+const program = new Command();
+
+program
+  .name('saac_crm')
+  .description('AI-first CRM CLI — manage leads and API keys')
+  .version('1.0.0')
+  .option('--api-key <key>', 'API key (overrides SAAC_CRM_API_KEY env and config)')
+  .option('--url <url>', 'API base URL (overrides config)');
+
+// ============================================================
+// CONFIG COMMANDS
+// ============================================================
+
+const configCmd = program.command('config').description('Manage CLI configuration');
+
+configCmd
+  .command('set')
+  .description('Set configuration values')
+  .option('--url <url>', 'CRM API base URL (e.g. https://yourapp.example.com)')
+  .option('--api-key <key>', 'Default API key to use')
+  .action((opts) => {
+    const cfg = loadConfig();
+    if (opts.url) cfg.apiUrl = opts.url;
+    if (opts.apiKey) cfg.apiKey = opts.apiKey;
+    saveConfig(cfg);
+    console.log('Configuration saved to', CONFIG_FILE);
+    printJSON(cfg);
+  });
+
+configCmd
+  .command('get')
+  .description('Show current configuration')
+  .action(() => {
+    const cfg = loadConfig();
+    // Mask the api key for display
+    if (cfg.apiKey) cfg.apiKey = cfg.apiKey.substring(0, 12) + '...';
+    printJSON(cfg);
+  });
+
+// ============================================================
+// KEYS COMMANDS
+// ============================================================
+
+const keysCmd = program.command('keys').description('Manage API keys');
+
+keysCmd
+  .command('create')
+  .description('Create a new API key')
+  .requiredOption('--name <name>', 'Name/label for the key')
+  .option('--scope <scope>', 'Key scope: agent (default) or admin', 'agent')
+  .option('--workspace <slug>', 'Workspace slug (required for scope=admin, e.g. goldenrecruit101)')
+  .option('--admin-password <password>', 'Admin password (required for scope=admin)')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const apiUrl = resolveApiUrl(globalOpts.url);
+    if (!apiUrl) {
+      console.error('Error: API URL not configured. Run: saac_crm config set --url <api-url>');
+      process.exit(1);
+    }
+
+    const body = { name: opts.name, scope: opts.scope };
+
+    if (opts.scope === 'admin') {
+      if (!opts.workspace) {
+        console.error('Error: --workspace <slug> is required for scope=admin');
+        process.exit(1);
+      }
+      body.workspace = opts.workspace;
+
+      let adminPw = opts.adminPassword;
+      if (!adminPw) {
+        adminPw = await promptSecret('Admin password: ');
+      }
+      body.admin_password = adminPw;
+    }
+
+    try {
+      // key creation doesn't require auth
+      const res = await axios.post(
+        `${apiUrl.replace(/\/$/, '')}/api/v1/keys`,
+        body,
+        { headers: { 'Content-Type': 'application/json' } }
+      );
+      console.log('API key created successfully. Store the key — it will not be shown again.');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+// ============================================================
+// REGISTER — shortcut for first admin setup
+// ============================================================
+
+program
+  .command('register')
+  .description('Register this workspace and create an admin scope API key')
+  .requiredOption('--workspace <slug>', 'Workspace slug (3-30 chars, a-z0-9 only, e.g. goldenrecruit101)')
+  .requiredOption('--name <name>', 'Name/label for this admin key')
+  .option('--scope <scope>', 'Key scope (must be admin)', 'admin')
+  .option('--admin-password <password>', 'Deployment admin password (will prompt if not provided)')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const apiUrl = resolveApiUrl(globalOpts.url);
+    if (!apiUrl) {
+      console.error('Error: API URL not configured. Run: saac_crm config set --url <api-url>');
+      process.exit(1);
+    }
+
+    let adminPw = opts.adminPassword;
+    if (!adminPw) {
+      adminPw = await promptSecret('Deployment admin password: ');
+    }
+
+    const body = {
+      name: opts.name,
+      scope: 'admin',
+      workspace: opts.workspace,
+      admin_password: adminPw
+    };
+
+    try {
+      const res = await axios.post(
+        `${apiUrl.replace(/\/$/, '')}/api/v1/keys`,
+        body,
+        { headers: { 'Content-Type': 'application/json' } }
+      );
+      console.log(`Workspace '${opts.workspace}' registered. Admin key created — store it securely.`);
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+keysCmd
+  .command('list')
+  .description('List all API keys (metadata only)')
+  .action(async () => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get('/keys');
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+keysCmd
+  .command('self')
+  .description('Show current key metadata')
+  .action(async () => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get('/keys/self');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+keysCmd
+  .command('revoke <id>')
+  .description('Revoke an API key by ID')
+  .action(async (id) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.delete(`/keys/${id}`);
+      console.log('Key revoked.');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+// ============================================================
+// LEADS COMMANDS
+// ============================================================
+
+const leadsCmd = program.command('leads').description('Manage leads');
+
+leadsCmd
+  .command('create')
+  .description('Create a new lead')
+  .requiredOption('--name <name>', 'Lead full name')
+  .requiredOption('--email <email>', 'Lead email address')
+  .option('--phone <phone>', 'Phone number')
+  .option('--company <company>', 'Company name')
+  .option('--status <status>', 'Status: new|contacted|qualified|unresponsive|converted|lost', 'new')
+  .option('--source <source>', 'Source: api|import|referral', 'api')
+  .option('--notes <notes>', 'Notes')
+  .option('--assigned-to <assignedTo>', 'Assigned to')
+  .option('--tag <tag>', 'Tag (repeatable)', (v, prev) => prev.concat([v]), [])
+  .option('--external-id <externalId>', 'External ID')
+  .option('--idempotency-key <key>', 'Idempotency key for deduplication')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    const headers = {};
+    if (opts.idempotencyKey) headers['Idempotency-Key'] = opts.idempotencyKey;
+    const body = {
+      name: opts.name,
+      email: opts.email,
+      ...(opts.phone && { phone: opts.phone }),
+      ...(opts.company && { company: opts.company }),
+      status: opts.status,
+      source: opts.source,
+      ...(opts.notes && { notes: opts.notes }),
+      ...(opts.assignedTo && { assigned_to: opts.assignedTo }),
+      ...(opts.tag.length > 0 && { tags: opts.tag }),
+      ...(opts.externalId && { external_id: opts.externalId })
+    };
+    try {
+      const res = await client.post('/leads', body, { headers });
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+leadsCmd
+  .command('list')
+  .description('List leads with optional filters')
+  .option('--status <status>', 'Filter by status')
+  .option('--email <email>', 'Filter by email (partial match)')
+  .option('--company <company>', 'Filter by company (partial match)')
+  .option('--tag <tag>', 'Filter by tag — repeatable, AND logic', (v, prev) => prev.concat([v]), [])
+  .option('--page <n>', 'Page number', '1')
+  .option('--per-page <n>', 'Results per page', '20')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    const params = {
+      ...(opts.status && { status: opts.status }),
+      ...(opts.email && { email: opts.email }),
+      ...(opts.company && { company: opts.company }),
+      page: opts.page,
+      per_page: opts.perPage
+    };
+    // Append tag as repeated query params
+    const tagParams = opts.tag.length > 0 ? opts.tag.map(t => `tag=${encodeURIComponent(t)}`).join('&') : '';
+    try {
+      const baseUrl = `/leads?${new URLSearchParams(params).toString()}${tagParams ? '&' + tagParams : ''}`;
+      const res = await client.get(baseUrl);
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+leadsCmd
+  .command('get <id>')
+  .description('Get a single lead by ID')
+  .action(async (id) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get(`/leads/${id}`);
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+leadsCmd
+  .command('update <id>')
+  .description('Update a lead by ID')
+  .option('--name <name>', 'New name')
+  .option('--email <email>', 'New email')
+  .option('--phone <phone>', 'New phone')
+  .option('--company <company>', 'New company')
+  .option('--status <status>', 'New status')
+  .option('--source <source>', 'New source')
+  .option('--notes <notes>', 'New notes')
+  .option('--assigned-to <assignedTo>', 'New assigned-to')
+  .option('--tag <tag>', 'Replace tags (repeatable)', (v, prev) => prev.concat([v]), [])
+  .option('--external-id <externalId>', 'New external ID')
+  .option('--version <version>', 'Optimistic lock version')
+  .action(async (id, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    const body = {
+      ...(opts.name && { name: opts.name }),
+      ...(opts.email && { email: opts.email }),
+      ...(opts.phone !== undefined && { phone: opts.phone }),
+      ...(opts.company !== undefined && { company: opts.company }),
+      ...(opts.status && { status: opts.status }),
+      ...(opts.source && { source: opts.source }),
+      ...(opts.notes !== undefined && { notes: opts.notes }),
+      ...(opts.assignedTo !== undefined && { assigned_to: opts.assignedTo }),
+      ...(opts.tag.length > 0 && { tags: opts.tag }),
+      ...(opts.externalId !== undefined && { external_id: opts.externalId }),
+      ...(opts.version !== undefined && { version: parseInt(opts.version) })
+    };
+    try {
+      const res = await client.put(`/leads/${id}`, body);
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+leadsCmd
+  .command('delete <id>')
+  .description('Soft-delete a lead by ID')
+  .action(async (id) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.delete(`/leads/${id}`);
+      console.log('Lead deleted.');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+leadsCmd
+  .command('history <id>')
+  .description('Show status change history for a lead')
+  .action(async (id) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get(`/leads/${id}/history`);
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+// ============================================================
+// USERS COMMANDS (requires admin scope key)
+// ============================================================
+
+const usersCmd = program.command('users').description('Manage human user accounts (requires admin scope key)');
+
+usersCmd
+  .command('register')
+  .description('Create a new human user account')
+  .requiredOption('--email <email>', 'User email address')
+  .requiredOption('--name <name>', 'User full name')
+  .option('--password <password>', 'User password (will prompt if not provided)')
+  .option('--role <role>', 'Role: admin or viewer', 'viewer')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+
+    let password = opts.password;
+    if (!password) {
+      password = await promptSecret('Password for new user: ');
+    }
+
+    try {
+      const res = await client.post('/users', {
+        email: opts.email,
+        name: opts.name,
+        password,
+        role: opts.role
+      });
+      console.log('User created successfully.');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+usersCmd
+  .command('list')
+  .description('List all user accounts')
+  .action(async () => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get('/users');
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+usersCmd
+  .command('update <id>')
+  .description('Update a user account')
+  .option('--name <name>', 'New name')
+  .option('--role <role>', 'New role: admin or viewer')
+  .option('--password <password>', 'New password')
+  .option('--activate', 'Reactivate a deactivated user')
+  .option('--deactivate', 'Deactivate the user')
+  .action(async (id, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    const body = {
+      ...(opts.name && { name: opts.name }),
+      ...(opts.role && { role: opts.role }),
+      ...(opts.password && { password: opts.password }),
+      ...(opts.activate && { is_active: true }),
+      ...(opts.deactivate && { is_active: false })
+    };
+    try {
+      const res = await client.put(`/users/${id}`, body);
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+usersCmd
+  .command('deactivate <id>')
+  .description('Deactivate (soft-delete) a user account')
+  .action(async (id) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.delete(`/users/${id}`);
+      console.log('User deactivated.');
+      printJSON(res.data.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+program.parse(process.argv);

package/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@startanaicompany/crm",
+  "version": "1.0.0",
+  "description": "AI-first CRM CLI — manage leads and API keys from the terminal",
+  "main": "index.js",
+  "bin": {
+    "saac_crm": "./index.js"
+  },
+  "scripts": {
+    "test": "echo \"No tests yet\""
+  },
+  "keywords": ["crm", "ai", "leads", "api"],
+  "license": "MIT",
+  "dependencies": {
+    "axios": "^1.6.0",
+    "commander": "^11.1.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}