@startanaicompany/crm 1.0.0 → 1.0.1

package/README.md

@@ -8,34 +8,53 @@ AI-first CRM CLI (`saac_crm`) — manage leads, API keys, and user accounts from
 npm install -g @startanaicompany/crm
 ```
 
-## Configuration
+## First-Time Setup
 
 ```bash
-# Set API URL and default key
-saac_crm config set --url https://yourapp.example.com --api-key crm_xxxx
+# 1. Point at your CRM deployment
+saac_crm config set --url https://your-crm.example.com
 
-# Auth priority: --api-key flag > SAAC_CRM_API_KEY env > config file
-export SAAC_CRM_API_KEY=crm_xxxx
+# 2. Register your workspace and create the first admin key
+#    (prompts for deployment admin password)
+saac_crm register --workspace mycompany --name "main-admin-key"
+
+# 3. Save the returned key as default (or use SAAC_CRM_API_KEY env)
+saac_crm config set --api-key crm_xxxxxxxxxxxx
+# OR
+export SAAC_CRM_API_KEY=crm_xxxxxxxxxxxx
 ```
 
+> **Auth priority**: `--api-key` flag > `SAAC_CRM_API_KEY` env var > config file (`~/.saac_crm/config.json`)
+
 ## Commands
 
+### Workspace Registration
+
+```bash
+# Register workspace + create first admin key (all-in-one)
+saac_crm register --workspace mycompany --name "admin-key"
+
+# Check current workspace slug (public — no auth needed)
+curl https://your-crm.example.com/api/v1/workspace
+```
+
 ### API Keys
 
 ```bash
 # Create an agent key (no auth required)
 saac_crm keys create --name "my-agent"
 
-# Create an admin scope key (requires deployment password)
-saac_crm keys create --name "admin-agent" --scope admin --admin-password <password>
+# Create an admin scope key (requires deployment password + workspace slug)
+saac_crm keys create --name "admin-agent" --scope admin \
+  --workspace mycompany --admin-password <deployment-password>
 
-# List all keys
+# List all keys (metadata only — full key never shown again)
 saac_crm keys list
 
 # Show current key info
 saac_crm keys self
 
-# Revoke a key
+# Revoke a key by ID
 saac_crm keys revoke <id>
 ```
 
@@ -54,10 +73,10 @@ saac_crm leads get <id>
 # Update lead
 saac_crm leads update <id> --status contacted --notes "Called, interested"
 
-# Delete lead (soft)
+# Soft-delete lead
 saac_crm leads delete <id>
 
-# Status history
+# Status change history
 saac_crm leads history <id>
 ```
 
@@ -76,3 +95,27 @@ saac_crm users update <id> --role viewer
 # Deactivate user
 saac_crm users deactivate <id>
 ```
+
+### Configuration
+
+```bash
+saac_crm config set --url https://your-crm.example.com
+saac_crm config set --api-key crm_xxxxxxxxxxxx
+saac_crm config get
+```
+
+## Global Options
+
+```
+--api-key <key>   Override API key for this command
+--url <url>       Override API base URL for this command
+```
+
+## Human Login
+
+Humans log in via the web UI at the deployment URL. Login requires:
+1. **Workspace slug** (e.g. `mycompany`)
+2. **Email**
+3. **Password**
+
+User accounts are created by an AI agent using an admin scope key via `saac_crm users register`.

package/index.js

@@ -99,7 +99,7 @@ const program = new Command();
 program
   .name('saac_crm')
   .description('AI-first CRM CLI — manage leads and API keys')
-  .version('1.0.0')
+  .version('1.0.1')
   .option('--api-key <key>', 'API key (overrides SAAC_CRM_API_KEY env and config)')
   .option('--url <url>', 'API base URL (overrides config)');
 
@@ -185,15 +185,15 @@ keysCmd
   });
 
 // ============================================================
-// REGISTER — shortcut for first admin setup
+// REGISTER — first-time workspace + admin key setup
+// NOTE: For agent self-service (zero-auth), use: saac_crm keys create --name <name>
 // ============================================================
 
 program
   .command('register')
-  .description('Register this workspace and create an admin scope API key')
-  .requiredOption('--workspace <slug>', 'Workspace slug (3-30 chars, a-z0-9 only, e.g. goldenrecruit101)')
+  .description('First-time setup: register workspace slug and create admin scope API key (prompts for missing values)')
   .requiredOption('--name <name>', 'Name/label for this admin key')
-  .option('--scope <scope>', 'Key scope (must be admin)', 'admin')
+  .option('--workspace <slug>', 'Workspace slug (3-30 chars, a-z0-9 only, e.g. mycompany)')
   .option('--admin-password <password>', 'Deployment admin password (will prompt if not provided)')
   .action(async (opts) => {
     const globalOpts = program.opts();
@@ -203,6 +203,13 @@ program
       process.exit(1);
     }
 
+    // Prompt for workspace slug if not provided
+    let workspace = opts.workspace;
+    if (!workspace) {
+      workspace = await promptSecret('Workspace slug (e.g. mycompany): ');
+    }
+
+    // Prompt for admin password if not provided
     let adminPw = opts.adminPassword;
     if (!adminPw) {
       adminPw = await promptSecret('Deployment admin password: ');
@@ -211,7 +218,7 @@ program
     const body = {
       name: opts.name,
       scope: 'admin',
-      workspace: opts.workspace,
+      workspace: workspace.trim().toLowerCase(),
       admin_password: adminPw
     };
 
@@ -221,7 +228,7 @@ program
         body,
         { headers: { 'Content-Type': 'application/json' } }
       );
-      console.log(`Workspace '${opts.workspace}' registered. Admin key created — store it securely.`);
+      console.log(`Workspace '${workspace}' registered. Admin key created — store it securely.`);
       printJSON(res.data.data);
     } catch (err) {
       handleError(err);
@@ -433,35 +440,47 @@ leadsCmd
 
 const usersCmd = program.command('users').description('Manage human user accounts (requires admin scope key)');
 
+// Shared action for users create / users register
+async function createUserAction(opts) {
+  const globalOpts = program.opts();
+  const client = getClient(globalOpts);
+
+  let password = opts.password;
+  if (!password) {
+    password = await promptSecret('Password for new user: ');
+  }
+
+  try {
+    const res = await client.post('/users', {
+      email: opts.email,
+      name: opts.name,
+      password,
+      role: opts.role
+    });
+    console.log('User created successfully.');
+    printJSON(res.data.data);
+  } catch (err) {
+    handleError(err);
+  }
+}
+
 usersCmd
-  .command('register')
+  .command('create')
   .description('Create a new human user account')
   .requiredOption('--email <email>', 'User email address')
   .requiredOption('--name <name>', 'User full name')
   .option('--password <password>', 'User password (will prompt if not provided)')
   .option('--role <role>', 'Role: admin or viewer', 'viewer')
-  .action(async (opts) => {
-    const globalOpts = program.opts();
-    const client = getClient(globalOpts);
+  .action(createUserAction);
 
-    let password = opts.password;
-    if (!password) {
-      password = await promptSecret('Password for new user: ');
-    }
-
-    try {
-      const res = await client.post('/users', {
-        email: opts.email,
-        name: opts.name,
-        password,
-        role: opts.role
-      });
-      console.log('User created successfully.');
-      printJSON(res.data.data);
-    } catch (err) {
-      handleError(err);
-    }
-  });
+usersCmd
+  .command('register')
+  .description('Create a new human user account (alias for users create)')
+  .requiredOption('--email <email>', 'User email address')
+  .requiredOption('--name <name>', 'User full name')
+  .option('--password <password>', 'User password (will prompt if not provided)')
+  .option('--role <role>', 'Role: admin or viewer', 'viewer')
+  .action(createUserAction);
 
 usersCmd
   .command('list')
@@ -518,4 +537,45 @@ usersCmd
     }
   });
 
+// ============================================================
+// LOGIN — human admin/viewer login, saves JWT to config
+// ============================================================
+
+program
+  .command('login')
+  .description('Log in as a human admin/viewer (workspace + email + password → JWT saved to config)')
+  .requiredOption('--workspace <slug>', 'Workspace slug')
+  .requiredOption('--email <email>', 'Your email address')
+  .option('--password <password>', 'Your password (will prompt if not provided)')
+  .action(async (opts) => {
+    const globalOpts = program.opts();
+    const apiUrl = resolveApiUrl(globalOpts.url);
+    if (!apiUrl) {
+      console.error('Error: API URL not configured. Run: saac_crm config set --url <api-url>');
+      process.exit(1);
+    }
+
+    let password = opts.password;
+    if (!password) {
+      password = await promptSecret('Password: ');
+    }
+
+    try {
+      const res = await axios.post(
+        `${apiUrl.replace(/\/$/, '')}/api/v1/auth/login`,
+        { workspace: opts.workspace, email: opts.email, password },
+        { headers: { 'Content-Type': 'application/json' } }
+      );
+      const { token, user } = res.data.data;
+      // Save token to config for subsequent admin operations
+      const cfg = loadConfig();
+      cfg.token = token;
+      saveConfig(cfg);
+      console.log(`Logged in as ${user.email} (${user.role}). JWT saved to config.`);
+      printJSON({ email: user.email, name: user.name, role: user.role });
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startanaicompany/crm",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "AI-first CRM CLI — manage leads and API keys from the terminal",
   "main": "index.js",
   "bin": {
@@ -9,8 +9,21 @@
   "scripts": {
     "test": "echo \"No tests yet\""
   },
-  "keywords": ["crm", "ai", "leads", "api"],
+  "keywords": ["crm", "ai", "leads", "api", "saac", "agent"],
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.startanaicompany.com/mikaelwestoo/url-friendly-slug-59b2ag.git",
+    "directory": "packages/crm-cli"
+  },
+  "files": [
+    "index.js",
+    "README.md",
+    "package.json"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
   "dependencies": {
     "axios": "^1.6.0",
     "commander": "^11.1.0"