onboardconnect-agent 0.1.1

package/dist/uninstall.js

@@ -0,0 +1,127 @@
+import chalk from "chalk";
+import ora from "ora";
+import inquirer from "inquirer";
+import { existsSync, rmSync } from "fs";
+import { execSync } from "child_process";
+import { join } from "path";
+const OC_CONFIG_DIR = process.platform === "win32"
+    ? join(process.env["PROGRAMDATA"] ?? "C:\\ProgramData", "OnboardConnect")
+    : "/etc/onboardconnect";
+const OC_LOG_DIR = process.platform === "win32"
+    ? join(process.env["USERPROFILE"] ?? "C:\\Users\\Default", ".oc-agent")
+    : join(process.env["HOME"] ?? "/root", ".oc-agent");
+async function ocStopAndRemoveService() {
+    const spinner = ora("Stopping OC Agent service...").start();
+    if (process.platform === "win32") {
+        try {
+            const { Service } = await import("node-windows");
+            const svc = new Service({
+                name: "OnboardConnect Agent",
+                script: "",
+            });
+            await new Promise((resolve) => {
+                svc.on("stop", () => {
+                    spinner.text = "Removing OC Agent service...";
+                    svc.uninstall();
+                });
+                svc.on("uninstall", resolve);
+                svc.on("error", () => resolve());
+                try {
+                    svc.stop();
+                }
+                catch {
+                    resolve();
+                }
+            });
+            spinner.succeed("Service stopped and removed ✓");
+        }
+        catch {
+            spinner.warn("Service stop/remove skipped (may not be installed as a service)");
+        }
+    }
+    else {
+        try {
+            execSync("systemctl stop oc-agent 2>/dev/null || true", { stdio: "pipe" });
+            execSync("systemctl disable oc-agent 2>/dev/null || true", { stdio: "pipe" });
+            const unitPath = "/etc/systemd/system/oc-agent.service";
+            if (existsSync(unitPath)) {
+                rmSync(unitPath);
+                execSync("systemctl daemon-reload", { stdio: "pipe" });
+            }
+            spinner.succeed("Service stopped and removed ✓");
+        }
+        catch {
+            spinner.warn("Service stop/remove skipped (service may not be installed)");
+        }
+    }
+}
+function ocDeleteConfigDir(removeLogs) {
+    if (existsSync(OC_CONFIG_DIR)) {
+        const spinner = ora(`Deleting config directory: ${OC_CONFIG_DIR}`).start();
+        try {
+            rmSync(OC_CONFIG_DIR, { recursive: true, force: true });
+            spinner.succeed("Config directory deleted ✓");
+        }
+        catch (err) {
+            spinner.fail(`Failed to delete config dir: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    else {
+        console.log(chalk.gray(`  Config directory not found, skipping: ${OC_CONFIG_DIR}`));
+    }
+    if (removeLogs && existsSync(OC_LOG_DIR)) {
+        const spinner = ora(`Deleting log directory: ${OC_LOG_DIR}`).start();
+        try {
+            rmSync(OC_LOG_DIR, { recursive: true, force: true });
+            spinner.succeed("Log directory deleted ✓");
+        }
+        catch (err) {
+            spinner.fail(`Failed to delete log dir: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+}
+function ocUninstallPackage() {
+    const spinner = ora("Removing npm global package...").start();
+    try {
+        execSync("npm uninstall -g onboardconnect-agent", { stdio: "pipe" });
+        spinner.succeed("Package removed ✓");
+    }
+    catch {
+        spinner.warn("npm uninstall skipped (package may not be globally installed)");
+    }
+}
+export async function ocUninstall() {
+    console.log(chalk.bold.red("\n  OnboardConnect Local Agent — Uninstall\n"));
+    console.log(chalk.gray("  This will stop the agent service, remove all configuration,\n  and optionally uninstall the npm package.\n"));
+    const { confirm } = await inquirer.prompt([{
+            type: "confirm",
+            name: "confirm",
+            message: chalk.yellow("Are you sure you want to uninstall the OC Agent?"),
+            default: false,
+        }]);
+    if (!confirm) {
+        console.log(chalk.gray("\n  Uninstall cancelled.\n"));
+        return;
+    }
+    const { removeLogs } = await inquirer.prompt([{
+            type: "confirm",
+            name: "removeLogs",
+            message: "Also delete agent log files?",
+            default: false,
+        }]);
+    const { removePackage } = await inquirer.prompt([{
+            type: "confirm",
+            name: "removePackage",
+            message: "Remove the onboardconnect-agent npm package?",
+            default: true,
+        }]);
+    console.log("");
+    await ocStopAndRemoveService();
+    ocDeleteConfigDir(removeLogs);
+    if (removePackage) {
+        ocUninstallPackage();
+    }
+    console.log(chalk.bold.green("\n  ✓ Uninstall complete.\n"));
+    console.log(chalk.gray("  To reinstall, run: npm install -g onboardconnect-agent\n"));
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../src/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,KAAK,OAAO;IAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,iBAAiB,EAAE,gBAAgB,CAAC;IACzE,CAAC,CAAC,qBAAqB,CAAC;AAE5B,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO;IAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,oBAAoB,EAAE,WAAW,CAAC;IACvE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,WAAW,CAAC,CAAC;AAExD,KAAK,UAAU,sBAAsB;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,8BAA8B,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;gBACtB,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;oBAClB,OAAO,CAAC,IAAI,GAAG,8BAA8B,CAAC;oBAC9C,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC7B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,QAAQ,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,QAAQ,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,sCAAsC,CAAC;YACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjB,QAAQ,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAmB;IAC5C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,8BAA8B,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,2CAA2C,aAAa,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,QAAQ,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC,CAAC;IAExI,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB,CAAC;YAC/D,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,kDAAkD,CAAC;YACzE,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAA0B,CAAC;YACrE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,8BAA8B;YACvC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAA6B,CAAC;YAC3E,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,8CAA8C;YACvD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,CAAC;IAEJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE9B,IAAI,aAAa,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC,CAAC;AACxF,CAAC"}

package/dist/updater.d.ts

@@ -0,0 +1,4 @@
+export declare class OcUpdater {
+    checkForUpdates(): Promise<void>;
+}
+//# sourceMappingURL=updater.d.ts.map

package/dist/updater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAKA,qBAAa,SAAS;IACd,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;CA+BvC"}

package/dist/updater.js

@@ -0,0 +1,30 @@
+import { OcLogger } from "./logger.js";
+import { createRequire } from "module";
+const logger = new OcLogger("updater");
+export class OcUpdater {
+    async checkForUpdates() {
+        try {
+            const require = createRequire(import.meta.url);
+            const pkg = require("../package.json");
+            const current = pkg.version;
+            const response = await fetch("https://registry.npmjs.org/onboardconnect-agent/latest", {
+                signal: AbortSignal.timeout(5000),
+            });
+            if (!response.ok)
+                return;
+            const data = await response.json();
+            const latest = data.version;
+            if (latest !== current) {
+                logger.warn(`⚠️  New version available: ${latest} (current: ${current})`, { current, latest });
+                console.log(`\n  ╔══════════════════════════════════════════════╗\n` +
+                    `  ║  Update available: v${current} → v${latest}  ║\n` +
+                    `  ║  Run: npx onboardconnect-agent@latest upgrade ║\n` +
+                    `  ╚══════════════════════════════════════════════╝\n`);
+            }
+        }
+        catch {
+            // Non-fatal — agent proceeds without update check if npm is unreachable
+        }
+    }
+}
+//# sourceMappingURL=updater.js.map

package/dist/updater.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updater.js","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEvC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEvC,MAAM,OAAO,SAAS;IACpB,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAE5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,wDAAwD,EAAE;gBACrF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO;YAEzB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;YAE5B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CACT,8BAA8B,MAAM,cAAc,OAAO,GAAG,EAC5D,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,wDAAwD;oBACxD,2BAA2B,OAAO,OAAO,MAAM,OAAO;oBACtD,uDAAuD;oBACvD,sDAAsD,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "onboardconnect-agent",
+  "version": "0.1.1",
+  "description": "OnboardConnect On-Prem Agent — LDAP provisioning bridge for on-premises Active Directory",
+  "keywords": [
+    "onboardconnect",
+    "active-directory",
+    "ldap",
+    "provisioning",
+    "slate-crm"
+  ],
+  "homepage": "https://onboardconnectapp.com/docs/agent",
+  "license": "UNLICENSED",
+  "type": "module",
+  "bin": {
+    "oc-agent": "dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "scripts",
+    "ui"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "setup": "tsx src/setup.ts",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "test:unit": "vitest run",
+    "clean": "rimraf dist *.tsbuildinfo",
+    "uninstall": "tsx src/uninstall.ts",
+    "postinstall": "node scripts/postinstall.js"
+  },
+  "dependencies": {
+    "ldapts": "^7.2.0",
+    "ssh2": "^1.16.0",
+    "winston": "^3.17.0",
+    "winston-daily-rotate-file": "^5.0.0",
+    "lru-cache": "^11.0.0",
+    "inquirer": "^12.0.0",
+    "chalk": "^5.4.0",
+    "ora": "^8.0.0",
+    "ws": "^8.18.0",
+    "zod": "^3.24.0",
+    "semver": "^7.7.0"
+  },
+  "devDependencies": {
+    "@oc/types": "workspace:*",
+    "@types/node": "^22.0.0",
+    "@types/ssh2": "^1.15.0",
+    "@types/ws": "^8.5.0",
+    "@types/semver": "^7.5.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.0.0",
+    "rimraf": "^6.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}

package/scripts/install.ps1

@@ -0,0 +1,133 @@
+#Requires -RunAsAdministrator
+<#
+.SYNOPSIS
+    OnboardConnect Local Agent — Windows Installer
+.DESCRIPTION
+    Installs the OnboardConnect On-Prem Agent as a Windows service.
+    Requires: Windows 10/11 or Server 2016+, outbound HTTPS on port 443.
+.EXAMPLE
+    # Run from an elevated PowerShell prompt:
+    iwr https://api.onboardconnectapp.com/api/public/agent/install.ps1 -UseBasicParsing | iex
+#>
+
+param(
+    [string]$ApiBase = "https://api.onboardconnectapp.com"
+)
+
+$ErrorActionPreference = "Stop"
+$ProgressPreference     = "SilentlyContinue"   # faster Invoke-WebRequest
+
+# ─── Banner ───────────────────────────────────────────────────────────────────
+
+Write-Host ""
+Write-Host "  ╔══════════════════════════════════════════════════════╗" -ForegroundColor Cyan
+Write-Host "  ║    OnboardConnect On-Prem Agent  —  Installer        ║" -ForegroundColor Cyan
+Write-Host "  ╚══════════════════════════════════════════════════════╝" -ForegroundColor Cyan
+Write-Host ""
+
+# ─── Helper ───────────────────────────────────────────────────────────────────
+
+function Write-Step([int]$n, [int]$total, [string]$text) {
+    Write-Host "  [$n/$total] $text" -ForegroundColor White
+}
+function Write-OK([string]$text)   { Write-Host "        $text" -ForegroundColor Green  }
+function Write-Warn([string]$text) { Write-Host "        $text" -ForegroundColor Yellow }
+function Write-Fail([string]$text) { Write-Host "  ERROR: $text" -ForegroundColor Red   }
+
+# ─── Step 1: Node.js ──────────────────────────────────────────────────────────
+
+Write-Step 1 4 "Checking Node.js (>= 18 required)..."
+
+$nodeOk = $false
+try {
+    $nodeRaw = (& node --version 2>$null).TrimStart("v")
+    $nodeMajor = [int]($nodeRaw -split "\.")[0]
+    if ($nodeMajor -ge 18) {
+        Write-OK "Node.js $nodeRaw found ✓"
+        $nodeOk = $true
+    } else {
+        Write-Warn "Node.js $nodeRaw found — version 18+ required. Will upgrade."
+    }
+} catch {
+    Write-Warn "Node.js not found. Installing via winget..."
+}
+
+if (-not $nodeOk) {
+    try {
+        winget install --id OpenJS.NodeJS.LTS `
+            --accept-source-agreements `
+            --accept-package-agreements `
+            --silent | Out-Null
+
+        # Refresh PATH for current session
+        $machinePath = [System.Environment]::GetEnvironmentVariable("PATH", "Machine")
+        $userPath    = [System.Environment]::GetEnvironmentVariable("PATH", "User")
+        $env:PATH    = "$machinePath;$userPath"
+
+        $newVer = (& node --version 2>$null).TrimStart("v")
+        Write-OK "Node.js $newVer installed ✓"
+    } catch {
+        Write-Fail "Could not auto-install Node.js. Please install Node.js 18+ from https://nodejs.org and re-run this script."
+        exit 1
+    }
+}
+
+# ─── Step 2: Install agent package ───────────────────────────────────────────
+
+Write-Step 2 4 "Installing onboardconnect-agent via npm..."
+try {
+    & npm install -g onboardconnect-agent --quiet 2>&1 | Out-Null
+    $agentVer = (& npm list -g onboardconnect-agent --depth=0 --json 2>$null | ConvertFrom-Json).dependencies."onboardconnect-agent".version
+    Write-OK "onboardconnect-agent@$agentVer installed ✓"
+} catch {
+    Write-Fail "npm install failed: $_"
+    Write-Warn "Ensure npm is in your PATH and you have internet access."
+    exit 1
+}
+
+# ─── Step 3: Prerequisites reminder ──────────────────────────────────────────
+
+Write-Step 3 4 "Prerequisites checklist"
+Write-Host ""
+Write-Host "  Before continuing, confirm the following:" -ForegroundColor DarkGray
+Write-Host "    ✦ A service account with LDAP bind rights is ready." -ForegroundColor DarkGray
+Write-Host "    ✦ Port 636 (LDAPS) or 389 (LDAP) is reachable from this server." -ForegroundColor DarkGray
+Write-Host "    ✦ Outbound HTTPS (port 443) to $ApiBase is allowed." -ForegroundColor DarkGray
+Write-Host "    ✦ You have a one-time Setup Token from your Tenant Portal." -ForegroundColor DarkGray
+Write-Host "      (Connections → New Connection → On-Prem Agent → Generate Setup Token)" -ForegroundColor DarkGray
+Write-Host ""
+$confirm = Read-Host "  Ready to continue? (Y/N)"
+if ($confirm -notmatch "^[Yy]") {
+    Write-Host "  Setup cancelled. Re-run this script when ready." -ForegroundColor Yellow
+    exit 0
+}
+
+# ─── Step 4: Run setup wizard ────────────────────────────────────────────────
+
+Write-Step 4 4 "Launching OnboardConnect Agent Setup Wizard..."
+Write-Host ""
+
+$env:OC_API_BASE = $ApiBase
+try {
+    & oc-agent setup
+} catch {
+    Write-Fail "Setup wizard failed: $_"
+    Write-Warn "You can re-run setup at any time with: oc-agent setup"
+    exit 1
+}
+
+# ─── Done ────────────────────────────────────────────────────────────────────
+
+Write-Host ""
+Write-Host "  ╔══════════════════════════════════════════════════════╗" -ForegroundColor Green
+Write-Host "  ║              Installation complete!                  ║" -ForegroundColor Green
+Write-Host "  ╚══════════════════════════════════════════════════════╝" -ForegroundColor Green
+Write-Host ""
+Write-Host "  The agent is now running as a Windows service." -ForegroundColor DarkGray
+Write-Host "  View status in your Tenant Portal → Connections." -ForegroundColor DarkGray
+Write-Host ""
+Write-Host "  Useful commands:" -ForegroundColor DarkGray
+Write-Host "    Get-Service OnboardConnectAgent          # Service status" -ForegroundColor DarkGray
+Write-Host "    sc query OnboardConnectAgent             # Detailed status" -ForegroundColor DarkGray
+Write-Host "    oc-agent setup                           # Re-run setup" -ForegroundColor DarkGray
+Write-Host ""

package/scripts/install.sh

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# OnboardConnect Local Agent — Linux / macOS Installer
+#
+# Run as root:
+#   curl -sSL https://api.onboardconnectapp.com/api/public/agent/install.sh | sudo bash
+#
+# Or download and inspect first:
+#   curl -fsSLO https://api.onboardconnectapp.com/api/public/agent/install.sh
+#   chmod +x install.sh && sudo ./install.sh
+
+set -euo pipefail
+
+OC_API_BASE="${OC_API_BASE:-https://api.onboardconnectapp.com}"
+OC_NODE_MIN=18
+
+# ─── Helpers ─────────────────────────────────────────────────────────────────
+
+CYAN='\033[0;36m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; RED='\033[0;31m'
+GRAY='\033[0;90m'; BOLD='\033[1m'; RESET='\033[0m'
+
+step()  { echo -e "\n  ${BOLD}[$1/$2]${RESET} $3"; }
+ok()    { echo -e "        ${GREEN}$1${RESET}"; }
+warn()  { echo -e "        ${YELLOW}$1${RESET}"; }
+fail()  { echo -e "\n  ${RED}ERROR: $1${RESET}\n"; exit 1; }
+info()  { echo -e "        ${GRAY}$1${RESET}"; }
+
+# ─── Root check ───────────────────────────────────────────────────────────────
+
+if [ "$EUID" -ne 0 ]; then
+    fail "This installer must be run as root. Use: sudo bash install.sh"
+fi
+
+# ─── Banner ───────────────────────────────────────────────────────────────────
+
+echo ""
+echo -e "  ${CYAN}╔══════════════════════════════════════════════════════╗${RESET}"
+echo -e "  ${CYAN}║      OnboardConnect Local Agent  —  Installer        ║${RESET}"
+echo -e "  ${CYAN}╚══════════════════════════════════════════════════════╝${RESET}"
+echo ""
+
+# ─── Step 1: Node.js ──────────────────────────────────────────────────────────
+
+step 1 4 "Checking Node.js (>= $OC_NODE_MIN required)..."
+
+NODE_OK=false
+if command -v node &>/dev/null; then
+    NODE_VER=$(node --version | tr -d 'v')
+    NODE_MAJOR=$(echo "$NODE_VER" | cut -d. -f1)
+    if [ "$NODE_MAJOR" -ge "$OC_NODE_MIN" ]; then
+        ok "Node.js $NODE_VER found ✓"
+        NODE_OK=true
+    else
+        warn "Node.js $NODE_VER found — version $OC_NODE_MIN+ required. Will install."
+    fi
+else
+    warn "Node.js not found. Installing..."
+fi
+
+if [ "$NODE_OK" = false ]; then
+    # Detect OS and install accordingly
+    if [ -f /etc/debian_version ] || grep -qi ubuntu /etc/os-release 2>/dev/null; then
+        info "Detected Debian/Ubuntu. Installing via NodeSource..."
+        apt-get update -qq
+        apt-get install -y curl gnupg
+        curl -fsSL https://deb.nodesource.com/setup_20.x | bash - >/dev/null 2>&1
+        apt-get install -y nodejs >/dev/null 2>&1
+    elif [ -f /etc/redhat-release ] || grep -qi "centos\|rhel\|fedora" /etc/os-release 2>/dev/null; then
+        info "Detected RHEL/CentOS/Fedora. Installing via NodeSource..."
+        curl -fsSL https://rpm.nodesource.com/setup_20.x | bash - >/dev/null 2>&1
+        yum install -y nodejs >/dev/null 2>&1
+    elif [[ "$(uname)" == "Darwin" ]]; then
+        info "Detected macOS. Installing via Homebrew..."
+        if ! command -v brew &>/dev/null; then
+            fail "Homebrew not found. Install it from https://brew.sh then re-run."
+        fi
+        brew install node@20 >/dev/null 2>&1
+    else
+        fail "Unsupported OS. Install Node.js 18+ manually from https://nodejs.org and re-run."
+    fi
+
+    NODE_VER=$(node --version | tr -d 'v')
+    ok "Node.js $NODE_VER installed ✓"
+fi
+
+# ─── Step 2: Install agent package ───────────────────────────────────────────
+
+step 2 4 "Installing onboardconnect-agent via npm..."
+
+npm install -g onboardconnect-agent --quiet >/dev/null 2>&1
+AGENT_VER=$(npm list -g onboardconnect-agent --depth=0 --json 2>/dev/null | node -e "process.stdin||(p=require('/dev/stdin')),process.stdout.write(JSON.parse(require('fs').readFileSync('/dev/stdin','utf8')).dependencies['onboardconnect-agent'].version)" 2>/dev/null || echo "installed")
+ok "onboardconnect-agent@${AGENT_VER} installed ✓"
+
+# ─── Step 3: Prerequisites reminder ──────────────────────────────────────────
+
+step 3 4 "Prerequisites checklist"
+echo ""
+echo -e "  ${GRAY}Before continuing, confirm the following:${RESET}"
+echo -e "  ${GRAY}  ✦ A service account with LDAP bind rights is ready.${RESET}"
+echo -e "  ${GRAY}  ✦ Port 636 (LDAPS) or 389 (LDAP) is reachable from this server.${RESET}"
+echo -e "  ${GRAY}  ✦ Outbound HTTPS (port 443) to ${OC_API_BASE} is allowed.${RESET}"
+echo -e "  ${GRAY}  ✦ You have a one-time Setup Token from your Tenant Portal.${RESET}"
+echo -e "  ${GRAY}    (Connections → New Connection → On-Prem Agent → Generate Setup Token)${RESET}"
+echo ""
+read -rp "  Ready to continue? (y/N) " CONFIRM
+if [[ ! "$CONFIRM" =~ ^[Yy]$ ]]; then
+    echo -e "\n  Setup cancelled. Re-run when ready.\n"
+    exit 0
+fi
+
+# ─── Step 4: Run setup wizard ────────────────────────────────────────────────
+
+step 4 4 "Launching OnboardConnect Agent Setup Wizard..."
+echo ""
+
+export OC_API_BASE
+oc-agent setup
+
+# ─── Done ────────────────────────────────────────────────────────────────────
+
+echo ""
+echo -e "  ${GREEN}╔══════════════════════════════════════════════════════╗${RESET}"
+echo -e "  ${GREEN}║              Installation complete!                  ║${RESET}"
+echo -e "  ${GREEN}╚══════════════════════════════════════════════════════╝${RESET}"
+echo ""
+echo -e "  ${GRAY}The agent is now running as a systemd service.${RESET}"
+echo -e "  ${GRAY}View status in your Tenant Portal → Connections.${RESET}"
+echo ""
+echo -e "  ${GRAY}Useful commands:${RESET}"
+echo -e "  ${GRAY}  systemctl status oc-agent       # Service status${RESET}"
+echo -e "  ${GRAY}  journalctl -u oc-agent -f       # Live logs${RESET}"
+echo -e "  ${GRAY}  oc-agent setup                  # Re-run setup${RESET}"
+echo ""

package/scripts/postinstall.js

@@ -0,0 +1,21 @@
+if (process.env["CI"] || process.env["npm_config_yes"]) process.exit(0);
+
+console.log(`
+  ╔═══════════════════════════════════════════════════════╗
+  ║         OnboardConnect Local Agent installed          ║
+  ╚═══════════════════════════════════════════════════════╝
+
+  To configure this agent for the first time, run:
+
+    npx oc-agent setup
+
+  You will need a one-time setup token from your Tenant Portal:
+    https://portal.onboardconnectapp.com/agents
+
+  Prerequisites:
+    • Node.js >= 18
+    • cloudflared  (https://developers.cloudflare.com/cloudflare-one/
+                   connections/connect-networks/downloads/)
+    • LDAP/AD service account credentials
+
+`);

package/scripts/postinstall.ts

@@ -0,0 +1,24 @@
+// Runs after `npm install` / `pnpm install` to print first-run guidance.
+// Skipped automatically in CI environments.
+
+if (process.env["CI"] || process.env["npm_config_yes"]) process.exit(0);
+
+console.log(`
+  ╔═══════════════════════════════════════════════════════╗
+  ║         OnboardConnect Local Agent installed          ║
+  ╚═══════════════════════════════════════════════════════╝
+
+  To configure this agent for the first time, run:
+
+    npx oc-agent setup
+
+  You will need a one-time setup token from your Tenant Portal:
+    https://portal.onboardconnectapp.com/agents
+
+  Prerequisites:
+    • Node.js >= 18
+    • cloudflared  (https://developers.cloudflare.com/cloudflare-one/
+                   connections/connect-networks/downloads/)
+    • LDAP/AD service account credentials
+
+`);

package/scripts/uninstall.ps1

@@ -0,0 +1,93 @@
+#Requires -RunAsAdministrator
+<#
+.SYNOPSIS
+  Uninstalls the OnboardConnect Local Agent from Windows.
+
+.DESCRIPTION
+  Stops and removes the Windows service, deletes the config directory
+  (C:\ProgramData\OnboardConnect), and optionally removes the npm package.
+
+.PARAMETER KeepLogs
+  If specified, the log directory (~\.oc-agent) is NOT deleted.
+
+.PARAMETER KeepPackage
+  If specified, the npm global package is NOT removed.
+
+.EXAMPLE
+  .\uninstall.ps1
+  .\uninstall.ps1 -KeepLogs -KeepPackage
+#>
+
+param(
+  [switch]$KeepLogs,
+  [switch]$KeepPackage
+)
+
+$ErrorActionPreference = "Continue"
+
+Write-Host ""
+Write-Host "  OnboardConnect Local Agent — Uninstall" -ForegroundColor Red
+Write-Host ""
+Write-Host "  This will stop and remove the OC Agent Windows Service" -ForegroundColor Gray
+Write-Host "  and delete all configuration files." -ForegroundColor Gray
+Write-Host ""
+
+$answer = Read-Host "  Are you sure? Type YES to continue"
+if ($answer -ne "YES") {
+  Write-Host "  Cancelled." -ForegroundColor Yellow
+  exit 0
+}
+
+Write-Host ""
+
+# ── 1. Stop and remove service ─────────────────────────────────────────────────
+Write-Host "  Stopping OnboardConnect Agent service..." -ForegroundColor Cyan
+
+$svc = Get-Service -Name "OnboardConnectAgent" -ErrorAction SilentlyContinue
+if ($svc) {
+  if ($svc.Status -eq "Running") {
+    Stop-Service -Name "OnboardConnectAgent" -Force -ErrorAction SilentlyContinue
+    Write-Host "  Service stopped." -ForegroundColor Green
+  }
+  sc.exe delete "OnboardConnectAgent" | Out-Null
+  Write-Host "  Service removed." -ForegroundColor Green
+} else {
+  Write-Host "  Service not found (may not have been installed as a service)." -ForegroundColor Gray
+}
+
+# ── 2. Delete config directory ─────────────────────────────────────────────────
+$configDir = "$env:PROGRAMDATA\OnboardConnect"
+if (Test-Path $configDir) {
+  Write-Host "  Deleting config directory: $configDir ..." -ForegroundColor Cyan
+  Remove-Item -Path $configDir -Recurse -Force -ErrorAction SilentlyContinue
+  Write-Host "  Config directory deleted." -ForegroundColor Green
+} else {
+  Write-Host "  Config directory not found, skipping." -ForegroundColor Gray
+}
+
+# ── 3. Delete log directory (optional) ────────────────────────────────────────
+if (-not $KeepLogs) {
+  $logDir = "$env:USERPROFILE\.oc-agent"
+  if (Test-Path $logDir) {
+    Write-Host "  Deleting log directory: $logDir ..." -ForegroundColor Cyan
+    Remove-Item -Path $logDir -Recurse -Force -ErrorAction SilentlyContinue
+    Write-Host "  Log directory deleted." -ForegroundColor Green
+  }
+}
+
+# ── 4. Remove npm package (optional) ──────────────────────────────────────────
+if (-not $KeepPackage) {
+  Write-Host "  Removing onboardconnect-agent npm package..." -ForegroundColor Cyan
+  try {
+    npm uninstall -g onboardconnect-agent 2>&1 | Out-Null
+    Write-Host "  Package removed." -ForegroundColor Green
+  } catch {
+    Write-Host "  npm uninstall skipped (package may not be installed globally)." -ForegroundColor Gray
+  }
+}
+
+Write-Host ""
+Write-Host "  Uninstall complete." -ForegroundColor Green
+Write-Host ""
+Write-Host "  To reinstall: npm install -g onboardconnect-agent" -ForegroundColor Gray
+Write-Host ""