@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/rails/views/skills.erb

@@ -0,0 +1,66 @@
+<div class="page-header">
+  <h1>Skills</h1>
+  <p>Browse builtin skills and manage installed community skills</p>
+</div>
+
+<div class="card">
+  <h3>Builtin Skills</h3>
+  <% if @categories.empty? %>
+    <div class="empty"><span class="icon">&#128295;</span>No builtin skills available</div>
+  <% else %>
+    <div class="skills-grid" style="display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:16px">
+      <% @categories.each do |category, skills| %>
+        <div class="card" style="margin:0">
+          <h4 style="margin-bottom:8px"><%= escape_html(category.to_s) %></h4>
+          <% (skills.is_a?(Array) ? skills : []).each do |skill| %>
+            <div style="padding:6px 0;border-bottom:1px solid var(--border)">
+              <strong><%= escape_html(skill['name'] || skill['id'] || '-') %></strong>
+              <% if skill['description'] %>
+                <div style="color:var(--muted);font-size:13px"><%= escape_html(skill['description']) %></div>
+              <% end %>
+            </div>
+          <% end %>
+        </div>
+      <% end %>
+    </div>
+  <% end %>
+</div>
+
+<div class="card">
+  <h3>Installed Community Skills (<%= @installed.size %>)</h3>
+  <% if @installed.empty? %>
+    <div class="empty"><span class="icon">&#128230;</span>No community skills installed</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Version</th><th>Status</th><th>Actions</th></tr></thead>
+        <tbody>
+          <% @installed.each do |s| %>
+            <tr>
+              <td><strong><%= escape_html(s['name'] || s['id'] || '-') %></strong></td>
+              <td><code><%= escape_html(s['version'] || '-') %></code></td>
+              <td><%= status_badge(s['enabled'] == true || s['enabled'] == 'true' ? 'enabled' : 'disabled') %></td>
+              <td>
+                <% if s['enabled'] == true || s['enabled'] == 'true' %>
+                  <form method="post" action="/skills/disable" style="display:inline">
+                    <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                    <button class="btn btn-sm" type="submit">Disable</button>
+                  </form>
+                <% else %>
+                  <form method="post" action="/skills/enable" style="display:inline">
+                    <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                    <button class="btn btn-sm btn-primary" type="submit">Enable</button>
+                  </form>
+                <% end %>
+                <form method="post" action="/skills/uninstall" style="display:inline" onsubmit="return confirm('Uninstall this skill?')">
+                  <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                  <button class="btn btn-sm btn-danger" type="submit">Uninstall</button>
+                </form>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/rails/views/users.erb

@@ -0,0 +1,53 @@
+<div class="page-header">
+  <h1>Users</h1>
+  <p>Manage user accounts and roles</p>
+</div>
+
+<div class="card">
+  <h3>Invite User</h3>
+  <form method="post" action="/users">
+    <div class="form-row">
+      <div class="form-group">
+        <label>Name</label>
+        <input type="text" name="name" required placeholder="Full name">
+      </div>
+      <div class="form-group">
+        <label>Email</label>
+        <input type="email" name="email" required placeholder="user@company.com">
+      </div>
+    </div>
+    <div class="form-group">
+      <label>Role</label>
+      <select name="role">
+        <option value="member">Member</option>
+        <option value="admin">Admin</option>
+        <option value="viewer">Viewer</option>
+      </select>
+    </div>
+    <button class="btn btn-primary" type="submit">Create User</button>
+  </form>
+</div>
+
+<div class="card">
+  <h3>All Users (<%= @users.size %>)</h3>
+  <% if @users.empty? %>
+    <div class="empty"><span class="icon">&#128101;</span>No users found</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Status</th><th>Joined</th></tr></thead>
+        <tbody>
+          <% @users.each do |u| %>
+            <tr>
+              <td><strong><%= escape_html(u['name'] || '-') %></strong></td>
+              <td><%= escape_html(u['email'] || '-') %></td>
+              <td><%= badge(u['role'] || 'member') %></td>
+              <td><%= status_badge(u['status'] || 'active') %></td>
+              <td style="color:var(--muted)"><%= time_ago(u['created_at']) %></td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/rails/views/vault.erb

@@ -0,0 +1,66 @@
+<div class="page-header">
+  <h1>Vault</h1>
+  <p>Encrypted secrets management</p>
+</div>
+
+<div class="card">
+  <h3>Add Secret</h3>
+  <form method="post" action="/vault">
+    <div class="form-row">
+      <div class="form-group">
+        <label>Secret Name</label>
+        <input type="text" name="name" required placeholder="e.g. OPENAI_API_KEY">
+      </div>
+      <div class="form-group">
+        <label>Secret Value</label>
+        <input type="password" name="value" required placeholder="Enter secret value">
+      </div>
+    </div>
+    <div class="form-row">
+      <div class="form-group">
+        <label>Category</label>
+        <select name="category">
+          <option value="deploy">deploy</option>
+          <option value="cloud_storage">cloud storage</option>
+          <option value="api_key">api key</option>
+          <option value="skill_credential">skill credential</option>
+          <option value="custom">custom</option>
+        </select>
+      </div>
+      <div class="form-group" style="display:flex;align-items:flex-end">
+        <button class="btn btn-primary" type="submit">Add Secret</button>
+      </div>
+    </div>
+  </form>
+</div>
+
+<div class="card">
+  <h3>Stored Secrets (<%= @secrets.size %>)</h3>
+  <% if @secrets.empty? %>
+    <div class="empty"><span class="icon">&#128274;</span>No secrets stored yet. Add one above.</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Category</th><th>Created By</th><th>Created</th><th>Actions</th></tr></thead>
+        <tbody>
+          <% @secrets.each do |s| %>
+            <tr>
+              <td><strong><%= escape_html(s['name'] || '-') %></strong></td>
+              <td><%= category_badge(s['category']) %></td>
+              <td style="color:var(--muted)"><%= escape_html(s['createdBy'] || s['created_by'] || '-') %></td>
+              <td style="color:var(--muted)"><%= time_ago(s['created_at'] || s['createdAt']) %></td>
+              <td>
+                <form method="post" action="/vault/<%= s['id'] %>/rotate" style="display:inline" onsubmit="return confirm('Rotate encryption for this secret?')">
+                  <button class="btn btn-sm" type="submit">Rotate</button>
+                </form>
+                <form method="post" action="/vault/<%= s['id'] %>/delete" style="display:inline" onsubmit="return confirm('Delete this secret?')">
+                  <button class="btn btn-sm btn-danger" type="submit">Delete</button>
+                </form>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/ruby/app.rb

@@ -1,195 +1,66 @@
-# 🎀 AgenticMail Enterprise Dashboard — Ruby/Sinatra Edition
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# AgenticMail Enterprise Dashboard — Ruby/Sinatra Edition (Modular)
 #
 # Setup:
-#   gem install sinatra json
+#   gem install sinatra
 #   ruby app.rb
 #
-# Or: AGENTICMAIL_URL=https://your-company.agenticmail.cloud ruby app.rb
+# Or: AGENTICMAIL_URL=https://your-company.agenticmail.io ruby app.rb
 
 require 'sinatra'
 require 'json'
-require 'net/http'
-require 'uri'
 require 'securerandom'
 
-enable :sessions
-set :session_secret, SecureRandom.hex(32)
+# =============================================================================
+# Configuration
+# =============================================================================
 set :port, 4567
-
-API_URL = ENV['AGENTICMAIL_URL'] || 'http://localhost:3000'
-
-# ─── API Client ──────────────────────────────────────────
-
-def api(path, method: :get, body: nil)
-  uri = URI("#{API_URL}#{path}")
-  http = Net::HTTP.new(uri.host, uri.port)
-  http.use_ssl = uri.scheme == 'https'
-  http.open_timeout = 5
-  http.read_timeout = 10
-
-  req = case method
-        when :get    then Net::HTTP::Get.new(uri)
-        when :post   then Net::HTTP::Post.new(uri)
-        when :patch  then Net::HTTP::Patch.new(uri)
-        when :delete then Net::HTTP::Delete.new(uri)
-        end
-
-  req['Content-Type'] = 'application/json'
-  req['Authorization'] = "Bearer #{session[:token]}" if session[:token]
-  req.body = body.to_json if body
-
-  resp = http.request(req)
-  JSON.parse(resp.body) rescue { 'error' => 'Invalid response' }
-rescue => e
-  { 'error' => e.message }
-end
-
-def badge(status)
-  colors = { 'active' => '#22c55e', 'archived' => '#888', 'suspended' => '#ef4444',
-             'owner' => '#f59e0b', 'admin' => '#e84393', 'member' => '#888', 'viewer' => '#555' }
-  c = colors[status.to_s] || '#888'
-  "<span style='display:inline-block;padding:2px 10px;border-radius:999px;font-size:11px;font-weight:600;background:#{c}20;color:#{c}'>#{status}</span>"
-end
-
-# ─── Shared Layout ───────────────────────────────────────
-
-def layout(page, &block)
-  user = session[:user] || {}
-  content = yield
-  erb_str = <<~HTML
-    <!DOCTYPE html>
-    <html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1.0">
-    <title>🎀 AgenticMail Enterprise — Ruby</title>
-    <style>*{box-sizing:border-box;margin:0;padding:0}:root,[data-theme=light]{--bg:#f8f9fa;--surface:#fff;--border:#dee2e6;--text:#212529;--dim:#495057;--muted:#868e96;--primary:#e84393;--success:#2b8a3e;--danger:#c92a2a;--warning:#e67700;--r:6px;color-scheme:light dark}[data-theme=dark]{--bg:#0f1114;--surface:#16181d;--border:#2c3038;--text:#e1e4e8;--dim:#b0b8c4;--muted:#6b7280;--primary:#f06595;--success:#37b24d;--danger:#f03e3e;--warning:#f08c00}@media(prefers-color-scheme:dark){:root:not([data-theme=light]){--bg:#0f1114;--surface:#16181d;--border:#2c3038;--text:#e1e4e8;--dim:#b0b8c4;--muted:#6b7280;--primary:#f06595;--success:#37b24d;--danger:#f03e3e;--warning:#f08c00}}body{font-family:-apple-system,sans-serif;background:var(--bg);color:var(--text)}.layout{display:flex;min-height:100vh}.sidebar{width:240px;background:var(--surface);border-right:1px solid var(--border);position:fixed;top:0;left:0;bottom:0;display:flex;flex-direction:column}.sh{padding:20px;border-bottom:1px solid var(--border)}.sh h2{font-size:16px}.sh h2 em{font-style:normal;color:var(--primary)}.sh small{font-size:11px;color:var(--muted);display:block;margin-top:2px}.nav{flex:1;padding:8px 0}.ns{font-size:10px;text-transform:uppercase;letter-spacing:0.08em;color:var(--muted);padding:12px 20px 4px}.nav a{display:flex;align-items:center;gap:10px;padding:10px 20px;color:var(--dim);text-decoration:none;font-size:13px}.nav a:hover{color:var(--text);background:rgba(255,255,255,0.03)}.nav a.on{color:var(--primary);background:rgba(232,67,147,0.12);border-right:2px solid var(--primary)}.sf{padding:16px 20px;border-top:1px solid var(--border);font-size:12px}.content{flex:1;margin-left:240px;padding:32px;max-width:1100px}h2.t{font-size:22px;font-weight:700;margin-bottom:4px}.desc{font-size:13px;color:var(--dim);margin-bottom:24px}.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:16px;margin-bottom:24px}.stat{background:var(--surface);border:1px solid var(--border);border-radius:12px;padding:20px}.stat .l{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:0.06em}.stat .v{font-size:30px;font-weight:700;margin-top:4px}.card{background:var(--surface);border:1px solid var(--border);border-radius:12px;padding:20px;margin-bottom:16px}.ct{font-size:13px;color:var(--dim);text-transform:uppercase;letter-spacing:0.05em;font-weight:600;margin-bottom:12px}table{width:100%;border-collapse:collapse;font-size:13px}th{text-align:left;padding:10px 12px;color:var(--muted);font-size:11px;text-transform:uppercase;letter-spacing:0.05em;border-bottom:1px solid var(--border)}td{padding:12px;border-bottom:1px solid var(--border)}tr:hover td{background:rgba(255,255,255,0.015)}.btn{display:inline-flex;align-items:center;padding:8px 16px;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;border:1px solid var(--border);background:var(--surface);color:var(--text);text-decoration:none}.btn:hover{background:rgba(255,255,255,0.05)}.btn-p{background:var(--primary);border-color:var(--primary);color:#fff}.btn-d{color:var(--danger);border-color:var(--danger)}.btn-sm{padding:4px 10px;font-size:12px}.input{width:100%;padding:10px 14px;background:var(--bg);border:1px solid var(--border);border-radius:8px;color:var(--text);font-size:14px}.fg{margin-bottom:14px}.fl{display:block;font-size:12px;color:var(--dim);margin-bottom:4px}.empty{text-align:center;padding:48px 20px;color:var(--muted)}.flash{padding:12px 16px;border-radius:8px;margin-bottom:16px;font-size:13px;background:rgba(34,197,94,0.1);border:1px solid var(--success);color:var(--success)}</style></head>
-    <body><div class="layout">
-    <div class="sidebar"><div class="sh"><h2>🏢 <em>Agentic</em>Mail</h2><small>Enterprise · Ruby</small></div>
-    <div class="nav"><div class="ns">Overview</div><a href="/" class="#{page == 'dashboard' ? 'on' : ''}">📊 Dashboard</a>
-    <div class="ns">Manage</div><a href="/agents" class="#{page == 'agents' ? 'on' : ''}">🤖 Agents</a>
-    <a href="/users" class="#{page == 'users' ? 'on' : ''}">👥 Users</a><a href="/api-keys" class="#{page == 'keys' ? 'on' : ''}">🔑 API Keys</a>
-    <div class="ns">System</div><a href="/audit" class="#{page == 'audit' ? 'on' : ''}">📋 Audit Log</a>
-    <a href="/settings" class="#{page == 'settings' ? 'on' : ''}">⚙️ Settings</a></div>
-    <div class="sf"><div style="color:var(--dim)">#{Rack::Utils.escape_html(user['name'].to_s)}</div><div style="color:var(--muted);font-size:11px">#{Rack::Utils.escape_html(user['email'].to_s)}</div><a href="/logout" style="color:var(--muted);font-size:11px;margin-top:6px;display:inline-block">Sign out</a></div></div>
-    <div class="content">#{content}</div></div></body></html>
-  HTML
-  erb_str
-end
-
-# ─── Auth ────────────────────────────────────────────────
-
+set :bind, '0.0.0.0'
+set :sessions, true
+set :session_secret, ENV.fetch('SESSION_SECRET', SecureRandom.hex(32))
+set :views, File.join(File.dirname(__FILE__), 'views')
+set :public_folder, File.join(File.dirname(__FILE__), 'public')
+
+# =============================================================================
+# Helpers
+# =============================================================================
+require_relative 'helpers/api'
+require_relative 'helpers/auth'
+require_relative 'helpers/view'
+
+# =============================================================================
+# Before filter — require auth for all pages except login and static assets
+# =============================================================================
 before do
-  pass if ['/login', '/logout'].include?(request.path_info)
-  redirect '/login' unless session[:token]
-end
-
-get '/login' do
-  <<~HTML
-    <!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1.0"><title>🎀 AgenticMail Enterprise</title>
-    <style>*{box-sizing:border-box;margin:0;padding:0}body{font-family:-apple-system,sans-serif;background:#f8f9fa;color:#212529;display:flex;align-items:center;justify-content:center;min-height:100vh}.box{width:380px}h1{text-align:center;font-size:22px;margin-bottom:4px}h1 em{font-style:normal;color:#e84393}.sub{text-align:center;color:#868e96;font-size:13px;margin-bottom:32px}.fg{margin-bottom:14px}.fl{display:block;font-size:12px;color:#868e96;margin-bottom:4px}.input{width:100%;padding:10px 14px;background:#ffffff;border:1px solid #dee2e6;border-radius:8px;color:#212529;font-size:14px;outline:none}.input:focus{border-color:#e84393}.btn{width:100%;padding:10px;background:#e84393;border:none;border-radius:8px;color:#fff;font-size:14px;font-weight:600;cursor:pointer}</style></head>
-    <body><div class="box"><h1>🏢 <em>AgenticMail</em> Enterprise</h1><p class="sub">Sign in · Ruby Dashboard</p>
-    <form method="POST" action="/login"><div class="fg"><label class="fl">Email</label><input class="input" type="email" name="email" required></div>
-    <div class="fg"><label class="fl">Password</label><input class="input" type="password" name="password" required></div>
-    <button class="btn" type="submit">Sign In</button></form></div></body></html>
-  HTML
-end
-
-post '/login' do
-  data = api('/auth/login', method: :post, body: { email: params[:email], password: params[:password] })
-  if data['token']
-    session[:token] = data['token']
-    session[:user] = data['user']
-    redirect '/'
-  else
-    "Login failed: #{data['error']}"
-  end
-end
-
-get '/logout' do
-  session.clear
-  redirect '/login'
-end
-
-# ─── Pages ───────────────────────────────────────────────
-
-get '/' do
-  stats = api('/api/stats')
-  audit = api('/api/audit?limit=8')
-  events = (audit['events'] || []).map { |e|
-    "<div style='padding:10px 0;border-bottom:1px solid var(--border);font-size:13px'><span style='color:var(--primary);font-weight:500'>#{Rack::Utils.escape_html(e['action'])}</span> on #{Rack::Utils.escape_html(e['resource'])}<div style='font-size:11px;color:var(--muted)'>#{e['timestamp']}</div></div>"
-  }.join
-
-  layout('dashboard') {
-    "<h2 class='t'>Dashboard</h2><p class='desc'>Overview</p>" +
-    "<div class='stats'><div class='stat'><div class='l'>Total Agents</div><div class='v' style='color:var(--primary)'>#{stats['totalAgents']}</div></div>" +
-    "<div class='stat'><div class='l'>Active Agents</div><div class='v' style='color:var(--success)'>#{stats['activeAgents']}</div></div>" +
-    "<div class='stat'><div class='l'>Users</div><div class='v'>#{stats['totalUsers']}</div></div>" +
-    "<div class='stat'><div class='l'>Audit Events</div><div class='v'>#{stats['totalAuditEvents']}</div></div></div>" +
-    "<div class='card'><div class='ct'>Recent Activity</div>#{events.empty? ? "<div class='empty'>No activity yet</div>" : events}</div>"
-  }
-end
-
-get '/agents' do
-  data = api('/api/agents')
-  agents = data['agents'] || []
-  rows = agents.map { |a|
-    "<tr><td style='font-weight:600'>#{Rack::Utils.escape_html(a['name'])}</td><td style='color:var(--dim)'>#{Rack::Utils.escape_html(a['email'])}</td><td>#{a['role']}</td><td>#{badge(a['status'])}</td><td>#{a['status'] == 'active' ? "<a class='btn btn-sm btn-d' href='/agents/#{a['id']}/archive'>Archive</a>" : ''}</td></tr>"
-  }.join
-  layout('agents') {
-    "<h2 class='t'>Agents</h2><p class='desc'>Manage AI agent identities</p>" +
-    "<div class='card'>#{agents.empty? ? "<div class='empty'>🤖 No agents yet</div>" : "<table><thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Status</th><th></th></tr></thead><tbody>#{rows}</tbody></table>"}</div>"
-  }
-end
-
-get '/agents/:id/archive' do
-  api("/api/agents/#{params[:id]}/archive", method: :post)
-  redirect '/agents'
-end
-
-get '/users' do
-  data = api('/api/users')
-  users = data['users'] || []
-  rows = users.map { |u|
-    "<tr><td style='font-weight:600'>#{Rack::Utils.escape_html(u['name'])}</td><td style='color:var(--dim)'>#{Rack::Utils.escape_html(u['email'])}</td><td>#{badge(u['role'])}</td><td style='color:var(--muted);font-size:12px'>#{u['lastLoginAt'] || 'Never'}</td></tr>"
-  }.join
-  layout('users') {
-    "<h2 class='t'>Users</h2><p class='desc'>Manage team members</p>" +
-    "<div class='card'>#{users.empty? ? "<div class='empty'>👥 No users yet</div>" : "<table><thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Last Login</th></tr></thead><tbody>#{rows}</tbody></table>"}</div>"
-  }
-end
-
-get '/api-keys' do
-  data = api('/api/api-keys')
-  keys = data['keys'] || []
-  rows = keys.map { |k|
-    "<tr><td style='font-weight:600'>#{Rack::Utils.escape_html(k['name'])}</td><td><code style='font-size:12px'>#{k['keyPrefix']}...</code></td><td style='color:var(--muted);font-size:12px'>#{k['lastUsedAt'] || 'Never'}</td><td>#{badge(k['revoked'] ? 'archived' : 'active')}</td></tr>"
-  }.join
-  layout('keys') {
-    "<h2 class='t'>API Keys</h2><p class='desc'>Manage programmatic access</p>" +
-    "<div class='card'>#{keys.empty? ? "<div class='empty'>🔑 No API keys</div>" : "<table><thead><tr><th>Name</th><th>Key</th><th>Last Used</th><th>Status</th></tr></thead><tbody>#{rows}</tbody></table>"}</div>"
-  }
-end
-
-get '/audit' do
-  p = [0, (params[:p] || 0).to_i].max
-  data = api("/api/audit?limit=25&offset=#{p * 25}")
-  events = data['events'] || []
-  total = data['total'] || 0
-  rows = events.map { |e|
-    "<tr><td style='font-size:12px;color:var(--muted)'>#{e['timestamp']}</td><td>#{Rack::Utils.escape_html(e['actor'])}</td><td style='color:var(--primary);font-weight:500'>#{Rack::Utils.escape_html(e['action'])}</td><td style='font-size:12px'>#{Rack::Utils.escape_html(e['resource'])}</td><td style='font-size:12px;color:var(--muted)'>#{e['ip'] || '-'}</td></tr>"
-  }.join
-  layout('audit') {
-    "<h2 class='t'>Audit Log</h2><p class='desc'>#{total} total events</p>" +
-    "<div class='card'>#{events.empty? ? "<div class='empty'>📋 No audit events</div>" : "<table><thead><tr><th>Time</th><th>Actor</th><th>Action</th><th>Resource</th><th>IP</th></tr></thead><tbody>#{rows}</tbody></table>"}</div>"
-  }
-end
-
-get '/settings' do
-  s = api('/api/settings')
-  layout('settings') {
-    "<h2 class='t'>Settings</h2><p class='desc'>Configure your organization</p>" +
-    "<div class='card'><div class='ct'>General</div><div style='font-size:13px'>Name: #{Rack::Utils.escape_html(s['name'].to_s)}<br>Domain: #{Rack::Utils.escape_html(s['domain'].to_s)}<br>Plan: #{badge((s['plan'] || 'free').upcase)}</div></div>"
-  }
+  pass if request.path_info == '/login'
+  pass if request.path_info.start_with?('/styles')
 end
 
-puts "\n🏢 🎀 AgenticMail Enterprise Dashboard (Ruby/Sinatra)"
-puts "   API:       #{API_URL}"
-puts "   Dashboard: http://localhost:4567\n"
+# =============================================================================
+# Routes
+# =============================================================================
+require_relative 'routes/auth'
+require_relative 'routes/dashboard'
+require_relative 'routes/agents'
+require_relative 'routes/users'
+require_relative 'routes/api_keys'
+require_relative 'routes/vault'
+require_relative 'routes/skills'
+require_relative 'routes/audit'
+require_relative 'routes/settings'
+require_relative 'routes/messages'
+require_relative 'routes/guardrails'
+require_relative 'routes/journal'
+require_relative 'routes/dlp'
+require_relative 'routes/compliance'
+
+# =============================================================================
+# Startup banner
+# =============================================================================
+puts
+puts "  AgenticMail Enterprise Dashboard (Ruby/Sinatra)"
+puts "  API:       #{Sinatra::ApiHelper::API_BASE}"
+puts "  Dashboard: http://localhost:#{settings.port}"
+puts

package/dashboards/ruby/helpers/api.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require 'net/http'
+require 'uri'
+require 'json'
+
+# API client helper — wraps Net::HTTP for AgenticMail API calls
+module Sinatra
+  module ApiHelper
+    API_BASE = ENV.fetch('AGENTICMAIL_URL', 'http://localhost:3000')
+
+    def api_request(method, path, body: nil, token: nil)
+      uri = URI("#{API_BASE}#{path}")
+      http = Net::HTTP.new(uri.host, uri.port)
+      http.use_ssl = uri.scheme == 'https'
+      http.open_timeout = 5
+      http.read_timeout = 10
+
+      req = case method
+            when :get    then Net::HTTP::Get.new(uri)
+            when :post   then Net::HTTP::Post.new(uri)
+            when :patch  then Net::HTTP::Patch.new(uri)
+            when :put    then Net::HTTP::Put.new(uri)
+            when :delete then Net::HTTP::Delete.new(uri)
+            end
+
+      req['Content-Type'] = 'application/json'
+      req['Accept'] = 'application/json'
+      tk = token || session[:token]
+      req['Authorization'] = "Bearer #{tk}" if tk
+      req.body = body.to_json if body
+
+      res = http.request(req)
+      { status: res.code.to_i, body: JSON.parse(res.body) rescue res.body }
+    rescue Errno::ECONNREFUSED, Errno::ECONNRESET, Net::OpenTimeout, Net::ReadTimeout => e
+      { status: 0, body: { 'error' => "API unreachable: #{e.message}" } }
+    rescue JSON::ParserError
+      { status: 500, body: { 'error' => 'Invalid JSON from API' } }
+    end
+
+    def api_get(path)
+      api_request(:get, path)
+    end
+
+    def api_post(path, body)
+      api_request(:post, path, body: body)
+    end
+
+    def api_put(path, body)
+      api_request(:put, path, body: body)
+    end
+
+    def api_patch(path, body)
+      api_request(:patch, path, body: body)
+    end
+
+    def api_delete(path)
+      api_request(:delete, path)
+    end
+  end
+
+  helpers ApiHelper
+end

package/dashboards/ruby/helpers/auth.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+# Authentication helpers — session management and access control
+module Sinatra
+  module AuthHelper
+    def logged_in?
+      !!session[:token]
+    end
+
+    def current_user
+      session[:user] || {}
+    end
+
+    def require_auth!
+      redirect '/login' unless logged_in?
+    end
+  end
+
+  helpers AuthHelper
+end

package/dashboards/ruby/helpers/view.rb

@@ -0,0 +1,91 @@
+# frozen_string_literal: true
+
+require 'time'
+
+# View helpers — badges, formatting, flash messages
+module Sinatra
+  module ViewHelper
+    def active?(path)
+      return 'active' if request.path_info == path
+      return 'active' if path != '/' && request.path_info.start_with?(path)
+      ''
+    end
+
+    def time_ago(iso)
+      return 'N/A' unless iso
+      t = Time.parse(iso.to_s) rescue return(iso.to_s)
+      diff = (Time.now - t).to_i
+      case diff
+      when 0..59       then "#{diff}s ago"
+      when 60..3599    then "#{diff / 60}m ago"
+      when 3600..86399 then "#{diff / 3600}h ago"
+      else "#{diff / 86400}d ago"
+      end
+    end
+
+    def badge(text, variant = 'default')
+      "<span class=\"badge badge-#{escape_html(variant)}\">#{escape_html(text.to_s)}</span>"
+    end
+
+    def status_badge(status)
+      v = case status.to_s.downcase
+          when 'active', 'enabled', 'running', 'success' then 'success'
+          when 'archived', 'disabled', 'revoked'          then 'danger'
+          when 'pending', 'paused'                         then 'warning'
+          else 'default'
+          end
+      badge(status, v)
+    end
+
+    def category_badge(category)
+      colors = {
+        'deploy' => 'primary',
+        'cloud_storage' => 'info',
+        'api_key' => 'warning',
+        'skill_credential' => 'success',
+        'custom' => 'default',
+      }
+      v = colors[category.to_s] || 'default'
+      badge(category.to_s.empty? ? 'custom' : category.to_s.gsub('_', ' '), v)
+    end
+
+    def direction_badge(direction)
+      v = case direction.to_s.downcase
+          when 'inbound'  then 'primary'
+          when 'outbound' then 'success'
+          when 'internal' then 'default'
+          else 'default'
+          end
+      badge(direction.to_s.empty? ? '-' : direction, v)
+    end
+
+    def channel_badge(channel)
+      v = case channel.to_s.downcase
+          when 'email'    then 'primary'
+          when 'api'      then 'warning'
+          when 'internal' then 'default'
+          when 'webhook'  then 'info'
+          else 'default'
+          end
+      badge(channel.to_s.empty? ? '-' : channel, v)
+    end
+
+    def escape_html(s)
+      Rack::Utils.escape_html(s.to_s)
+    end
+
+    def flash_messages
+      msg = session.delete(:flash)
+      return '' unless msg
+      type = session.delete(:flash_type) || 'info'
+      "<div class=\"flash flash-#{escape_html(type)}\">#{escape_html(msg)}</div>"
+    end
+
+    def set_flash(msg, type = 'info')
+      session[:flash] = msg
+      session[:flash_type] = type
+    end
+  end
+
+  helpers ViewHelper
+end