@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/ruby/views/skills.erb

@@ -0,0 +1,66 @@
+<div class="page-header">
+  <h1>Skills</h1>
+  <p>Browse builtin skills and manage installed community skills</p>
+</div>
+
+<div class="card">
+  <h3>Builtin Skills</h3>
+  <% if @categories.empty? %>
+    <div class="empty"><span class="icon">&#128295;</span>No builtin skills available</div>
+  <% else %>
+    <div class="skills-grid" style="display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:16px">
+      <% @categories.each do |category, skills| %>
+        <div class="card" style="margin:0">
+          <h4 style="margin-bottom:8px"><%= escape_html(category.to_s) %></h4>
+          <% (skills.is_a?(Array) ? skills : []).each do |skill| %>
+            <div style="padding:6px 0;border-bottom:1px solid var(--border)">
+              <strong><%= escape_html(skill['name'] || skill['id'] || '-') %></strong>
+              <% if skill['description'] %>
+                <div style="color:var(--text-muted);font-size:13px"><%= escape_html(skill['description']) %></div>
+              <% end %>
+            </div>
+          <% end %>
+        </div>
+      <% end %>
+    </div>
+  <% end %>
+</div>
+
+<div class="card">
+  <h3>Installed Community Skills (<%= @installed.size %>)</h3>
+  <% if @installed.empty? %>
+    <div class="empty"><span class="icon">&#128230;</span>No community skills installed</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Version</th><th>Status</th><th>Actions</th></tr></thead>
+        <tbody>
+          <% @installed.each do |s| %>
+            <tr>
+              <td><strong><%= escape_html(s['name'] || s['id'] || '-') %></strong></td>
+              <td><code><%= escape_html(s['version'] || '-') %></code></td>
+              <td><%= status_badge(s['enabled'] == true || s['enabled'] == 'true' ? 'enabled' : 'disabled') %></td>
+              <td>
+                <% if s['enabled'] == true || s['enabled'] == 'true' %>
+                  <form method="post" action="/skills/disable" style="display:inline">
+                    <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                    <button class="btn btn-sm" type="submit">Disable</button>
+                  </form>
+                <% else %>
+                  <form method="post" action="/skills/enable" style="display:inline">
+                    <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                    <button class="btn btn-sm btn-primary" type="submit">Enable</button>
+                  </form>
+                <% end %>
+                <form method="post" action="/skills/uninstall" style="display:inline" onsubmit="return confirm('Uninstall this skill?')">
+                  <input type="hidden" name="skill_id" value="<%= escape_html(s['id'] || s['name']) %>">
+                  <button class="btn btn-sm btn-danger" type="submit">Uninstall</button>
+                </form>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/ruby/views/users.erb

@@ -0,0 +1,53 @@
+<div class="page-header">
+  <h1>Users</h1>
+  <p>Manage user accounts and roles</p>
+</div>
+
+<div class="card">
+  <h3>Invite User</h3>
+  <form method="post" action="/users">
+    <div class="form-row">
+      <div class="form-group">
+        <label>Name</label>
+        <input type="text" name="name" required placeholder="Full name">
+      </div>
+      <div class="form-group">
+        <label>Email</label>
+        <input type="email" name="email" required placeholder="user@company.com">
+      </div>
+    </div>
+    <div class="form-group">
+      <label>Role</label>
+      <select name="role">
+        <option value="member">Member</option>
+        <option value="admin">Admin</option>
+        <option value="viewer">Viewer</option>
+      </select>
+    </div>
+    <button class="btn btn-primary" type="submit">Create User</button>
+  </form>
+</div>
+
+<div class="card">
+  <h3>All Users (<%= @users.size %>)</h3>
+  <% if @users.empty? %>
+    <div class="empty"><span class="icon">&#128101;</span>No users found</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Status</th><th>Joined</th></tr></thead>
+        <tbody>
+          <% @users.each do |u| %>
+            <tr>
+              <td><strong><%= escape_html(u['name'] || '-') %></strong></td>
+              <td><%= escape_html(u['email'] || '-') %></td>
+              <td><%= badge(u['role'] || 'member') %></td>
+              <td><%= status_badge(u['status'] || 'active') %></td>
+              <td style="color:var(--text-muted)"><%= time_ago(u['created_at']) %></td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/ruby/views/vault.erb

@@ -0,0 +1,66 @@
+<div class="page-header">
+  <h1>Vault</h1>
+  <p>Encrypted secrets management</p>
+</div>
+
+<div class="card">
+  <h3>Add Secret</h3>
+  <form method="post" action="/vault">
+    <div class="form-row">
+      <div class="form-group">
+        <label>Secret Name</label>
+        <input type="text" name="name" required placeholder="e.g. OPENAI_API_KEY">
+      </div>
+      <div class="form-group">
+        <label>Secret Value</label>
+        <input type="password" name="value" required placeholder="Enter secret value">
+      </div>
+    </div>
+    <div class="form-row">
+      <div class="form-group">
+        <label>Category</label>
+        <select name="category">
+          <option value="deploy">deploy</option>
+          <option value="cloud_storage">cloud storage</option>
+          <option value="api_key">api key</option>
+          <option value="skill_credential">skill credential</option>
+          <option value="custom">custom</option>
+        </select>
+      </div>
+      <div class="form-group" style="display:flex;align-items:flex-end">
+        <button class="btn btn-primary" type="submit">Add Secret</button>
+      </div>
+    </div>
+  </form>
+</div>
+
+<div class="card">
+  <h3>Stored Secrets (<%= @secrets.size %>)</h3>
+  <% if @secrets.empty? %>
+    <div class="empty"><span class="icon">&#128274;</span>No secrets stored yet. Add one above.</div>
+  <% else %>
+    <div class="table-wrap">
+      <table>
+        <thead><tr><th>Name</th><th>Category</th><th>Created By</th><th>Created</th><th>Actions</th></tr></thead>
+        <tbody>
+          <% @secrets.each do |s| %>
+            <tr>
+              <td><strong><%= escape_html(s['name'] || '-') %></strong></td>
+              <td><%= category_badge(s['category']) %></td>
+              <td style="color:var(--text-muted)"><%= escape_html(s['createdBy'] || s['created_by'] || '-') %></td>
+              <td style="color:var(--text-muted)"><%= time_ago(s['created_at'] || s['createdAt']) %></td>
+              <td>
+                <form method="post" action="/vault/<%= s['id'] %>/rotate" style="display:inline" onsubmit="return confirm('Rotate encryption for this secret?')">
+                  <button class="btn btn-sm" type="submit">Rotate</button>
+                </form>
+                <form method="post" action="/vault/<%= s['id'] %>/delete" style="display:inline" onsubmit="return confirm('Delete this secret?')">
+                  <button class="btn btn-sm btn-danger" type="submit">Delete</button>
+                </form>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</div>

package/dashboards/shared/styles.css

@@ -0,0 +1,322 @@
+/*
+ * AgenticMail Enterprise Dashboard — Shared Design System
+ * Used by all 11 dashboard implementations.
+ * Copy this into your dashboard's public/ or static/ folder.
+ */
+
+/* ─── Theme Variables ─────────────────────────────────── */
+:root, [data-theme="light"] {
+  --bg: #f8f9fa; --surface: #fff; --surface-hover: #f1f3f5;
+  --border: #dee2e6; --border-hover: #ced4da;
+  --text: #212529; --text-dim: #495057; --text-muted: #868e96;
+  --primary: #e84393; --primary-hover: #d63384; --primary-bg: rgba(232,67,147,0.08);
+  --success: #2b8a3e; --success-bg: rgba(43,138,62,0.08);
+  --warning: #e67700; --warning-bg: rgba(230,119,0,0.08);
+  --danger: #c92a2a; --danger-bg: rgba(201,42,42,0.08);
+  --radius: 6px; --radius-lg: 10px;
+  --shadow: 0 1px 3px rgba(0,0,0,0.08);
+  --font: -apple-system, BlinkMacSystemFont, 'Inter', 'Segoe UI', system-ui, sans-serif;
+  color-scheme: light dark;
+}
+[data-theme="dark"] {
+  --bg: #0f1114; --surface: #16181d; --surface-hover: #1c1f26;
+  --border: #2c3038; --border-hover: #3b414c;
+  --text: #e1e4e8; --text-dim: #b0b8c4; --text-muted: #6b7280;
+  --primary: #f06595; --primary-hover: #f783ac; --primary-bg: rgba(240,101,149,0.1);
+  --success: #37b24d; --success-bg: rgba(55,178,77,0.1);
+  --warning: #f08c00; --warning-bg: rgba(240,140,0,0.1);
+  --danger: #f03e3e; --danger-bg: rgba(240,62,62,0.1);
+  --shadow: 0 1px 3px rgba(0,0,0,0.3);
+}
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) {
+    --bg: #0f1114; --surface: #16181d; --surface-hover: #1c1f26;
+    --border: #2c3038; --border-hover: #3b414c;
+    --text: #e1e4e8; --text-dim: #b0b8c4; --text-muted: #6b7280;
+    --primary: #f06595; --primary-hover: #f783ac; --primary-bg: rgba(240,101,149,0.1);
+    --success: #37b24d; --success-bg: rgba(55,178,77,0.1);
+    --warning: #f08c00; --warning-bg: rgba(240,140,0,0.1);
+    --danger: #f03e3e; --danger-bg: rgba(240,62,62,0.1);
+    --shadow: 0 1px 3px rgba(0,0,0,0.3);
+  }
+}
+
+/* ─── Reset ───────────────────────────────────────────── */
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+body {
+  font-family: var(--font);
+  background: var(--bg);
+  color: var(--text);
+  line-height: 1.5;
+  min-height: 100vh;
+  -webkit-font-smoothing: antialiased;
+}
+a { color: var(--primary); text-decoration: none; }
+a:hover { text-decoration: underline; }
+code { font-family: 'SF Mono', 'Fira Code', monospace; font-size: 0.9em; }
+
+/* ─── Login Page ──────────────────────────────────────── */
+.login-screen {
+  display: flex; align-items: center; justify-content: center; min-height: 100vh;
+}
+.login-box {
+  width: 380px; max-width: 90vw;
+}
+.login-box h1 {
+  text-align: center; font-size: 16px; color: var(--primary); margin-bottom: 6px;
+}
+.login-box .subtitle {
+  text-align: center; color: var(--text-muted); font-size: 12px; margin-bottom: 28px;
+}
+.login-card {
+  background: var(--surface); border: 1px solid var(--border);
+  border-radius: var(--radius-lg); padding: 28px;
+}
+.login-error {
+  color: var(--danger); font-size: 13px; text-align: center; margin-bottom: 16px;
+  padding: 10px; background: var(--danger-bg); border-radius: var(--radius);
+}
+
+/* ─── Sidebar ─────────────────────────────────────────── */
+.sidebar {
+  width: 240px; background: var(--surface); border-right: 1px solid var(--border);
+  display: flex; flex-direction: column; position: fixed; top: 0; bottom: 0; left: 0; z-index: 10;
+}
+.sidebar-brand {
+  padding: 20px; font-size: 14px; font-weight: 700;
+  border-bottom: 1px solid var(--border); color: var(--primary); line-height: 1.4;
+}
+.sidebar-brand small {
+  display: block; font-weight: 400; color: var(--text-muted); font-size: 11px; margin-top: 2px;
+}
+.sidebar-nav { flex: 1; padding: 12px 0; }
+.sidebar-nav a {
+  display: flex; align-items: center; gap: 10px; padding: 10px 20px;
+  color: var(--text-dim); font-size: 14px; border-left: 3px solid transparent;
+  transition: all 0.15s;
+}
+.sidebar-nav a:hover {
+  background: var(--bg); color: var(--text); text-decoration: none;
+}
+.sidebar-nav a.active {
+  color: var(--primary); border-left-color: var(--primary);
+  background: var(--bg); font-weight: 600;
+}
+.sidebar-footer {
+  padding: 16px 20px; border-top: 1px solid var(--border);
+  font-size: 12px; color: var(--text-muted);
+}
+.sidebar-footer a { color: var(--danger); font-size: 12px; }
+
+/* ─── Main Content ────────────────────────────────────── */
+.main {
+  margin-left: 240px; flex: 1; padding: 32px; max-width: 1100px; width: 100%;
+}
+.page-header { margin-bottom: 28px; }
+.page-header h1 { font-size: 22px; font-weight: 700; color: var(--text); }
+.page-header p { color: var(--text-muted); font-size: 14px; margin-top: 4px; }
+
+/* ─── Cards ───────────────────────────────────────────── */
+.card {
+  background: var(--surface); border: 1px solid var(--border);
+  border-radius: var(--radius-lg); padding: 20px; margin-bottom: 20px;
+  box-shadow: var(--shadow);
+}
+.card h3 {
+  font-size: 14px; font-weight: 600; margin-bottom: 14px; color: var(--text-dim);
+}
+.card-header {
+  display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px;
+}
+
+/* ─── Stat Cards ──────────────────────────────────────── */
+.stats-grid {
+  display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: 16px; margin-bottom: 24px;
+}
+.stat-card {
+  background: var(--surface); border: 1px solid var(--border);
+  border-radius: var(--radius-lg); padding: 20px;
+}
+.stat-card .label {
+  font-size: 11px; color: var(--text-muted); text-transform: uppercase;
+  letter-spacing: 0.06em; margin-bottom: 6px;
+}
+.stat-card .value {
+  font-size: 28px; font-weight: 700; color: var(--text); letter-spacing: -0.03em;
+}
+.stat-card .value.pink { color: var(--primary); }
+
+/* ─── Tables ──────────────────────────────────────────── */
+.table-wrap { overflow-x: auto; }
+table { width: 100%; border-collapse: collapse; font-size: 14px; }
+th {
+  text-align: left; padding: 10px 12px; color: var(--text-muted);
+  font-weight: 600; font-size: 12px; text-transform: uppercase;
+  letter-spacing: 0.05em; border-bottom: 2px solid var(--border);
+}
+td {
+  padding: 10px 12px; border-bottom: 1px solid var(--border);
+  color: var(--text-dim); vertical-align: middle;
+}
+tr:hover td { background: var(--surface-hover); }
+
+/* ─── Badges ──────────────────────────────────────────── */
+.badge {
+  display: inline-block; padding: 3px 10px; border-radius: 999px;
+  font-size: 11px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.03em;
+}
+.badge-default { background: var(--bg); color: var(--text-muted); border: 1px solid var(--border); }
+.badge-success, .badge-active { background: var(--success-bg); color: var(--success); }
+.badge-danger, .badge-archived, .badge-revoked { background: var(--danger-bg); color: var(--danger); }
+.badge-warning, .badge-pending { background: var(--warning-bg); color: var(--warning); }
+.badge-primary, .badge-admin { background: var(--primary-bg); color: var(--primary); }
+.badge-owner { background: var(--warning-bg); color: var(--warning); }
+.badge-member { background: rgba(136,136,160,0.08); color: var(--text-dim); }
+.badge-viewer { background: rgba(136,136,160,0.06); color: var(--text-muted); }
+
+/* ─── Forms ───────────────────────────────────────────── */
+.form-group { margin-bottom: 16px; }
+.form-group label {
+  display: block; font-size: 13px; font-weight: 600;
+  color: var(--text-dim); margin-bottom: 5px;
+}
+.form-group input,
+.form-group select,
+.form-group textarea {
+  width: 100%; padding: 9px 12px; border: 1px solid var(--border);
+  border-radius: var(--radius); background: var(--bg); color: var(--text);
+  font-size: 14px; outline: none; transition: border-color 0.15s;
+}
+.form-group input:focus,
+.form-group select:focus,
+.form-group textarea:focus { border-color: var(--primary); }
+.form-row { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; }
+
+/* ─── Buttons ─────────────────────────────────────────── */
+.btn {
+  display: inline-flex; align-items: center; justify-content: center; gap: 6px;
+  padding: 8px 18px; border-radius: var(--radius); font-size: 13px;
+  font-weight: 600; border: 1px solid var(--border); background: var(--surface);
+  color: var(--text-dim); cursor: pointer; transition: all 0.15s; text-decoration: none;
+}
+.btn:hover { background: var(--surface-hover); text-decoration: none; }
+.btn-primary { background: var(--primary); color: #fff; border-color: var(--primary); }
+.btn-primary:hover { background: var(--primary-hover); opacity: 0.9; color: #fff; }
+.btn-danger { background: var(--danger); color: #fff; border-color: var(--danger); }
+.btn-danger:hover { opacity: 0.9; color: #fff; }
+.btn-sm { padding: 5px 12px; font-size: 12px; }
+.btn-block { width: 100%; }
+
+/* ─── Modals ──────────────────────────────────────────── */
+.modal-overlay {
+  display: none; position: fixed; inset: 0;
+  background: rgba(0,0,0,0.6); align-items: center; justify-content: center; z-index: 100;
+}
+.modal-overlay.open { display: flex; }
+.modal {
+  background: var(--surface); border: 1px solid var(--border);
+  border-radius: var(--radius-lg); padding: 24px; width: 440px;
+  max-width: 90vw; box-shadow: 0 20px 60px rgba(0,0,0,0.5);
+}
+.modal h3 { font-size: 16px; font-weight: 700; margin-bottom: 16px; }
+.modal-actions { display: flex; gap: 8px; justify-content: flex-end; margin-top: 20px; }
+
+/* ─── Flash Messages ──────────────────────────────────── */
+.flash {
+  padding: 12px 16px; border-radius: var(--radius); margin-bottom: 20px;
+  font-size: 14px; border: 1px solid var(--border);
+}
+.flash-success { background: var(--success-bg); border-color: var(--success); color: var(--success); }
+.flash-danger { background: var(--danger-bg); border-color: var(--danger); color: var(--danger); }
+.flash-info { background: var(--primary-bg); border-color: var(--primary); color: var(--primary); }
+
+/* ─── Toast ───────────────────────────────────────────── */
+.toast {
+  position: fixed; bottom: 24px; right: 24px; padding: 12px 20px;
+  background: var(--surface); border: 1px solid var(--success);
+  border-radius: var(--radius); font-size: 13px; z-index: 200;
+  display: none; animation: slideUp 0.2s ease;
+}
+.toast.error { border-color: var(--danger); }
+.toast.show { display: block; }
+@keyframes slideUp { from { opacity: 0; transform: translateY(10px); } to { opacity: 1; transform: translateY(0); } }
+
+/* ─── Pagination ──────────────────────────────────────── */
+.pagination { display: flex; gap: 8px; margin-top: 20px; align-items: center; }
+.pagination a, .pagination span {
+  padding: 6px 14px; border-radius: var(--radius); font-size: 13px;
+  border: 1px solid var(--border); background: var(--surface); color: var(--text-dim);
+}
+.pagination a:hover { background: var(--surface-hover); text-decoration: none; }
+.pagination span.current { background: var(--primary); color: #fff; border-color: var(--primary); }
+
+/* ─── Empty State ─────────────────────────────────────── */
+.empty { text-align: center; padding: 48px 20px; color: var(--text-muted); font-size: 14px; }
+.empty .icon { font-size: 36px; margin-bottom: 12px; display: block; }
+
+/* ─── Key Banner (API key reveal) ─────────────────────── */
+.key-banner {
+  background: var(--warning-bg); border: 1px solid var(--warning);
+  border-radius: var(--radius); padding: 14px 18px; margin-bottom: 20px;
+  font-size: 13px; color: var(--warning);
+}
+.key-banner code {
+  display: block; margin-top: 6px; padding: 8px 12px; background: var(--bg);
+  border-radius: var(--radius); font-size: 12px; color: var(--text);
+  word-break: break-all;
+}
+
+/* ─── Dark Mode Toggle ────────────────────────────────── */
+.theme-toggle {
+  cursor: pointer; background: none; border: none;
+  color: var(--text-muted); font-size: 16px; padding: 4px;
+}
+
+/* ─── Persona Fieldset ────────────────────────────────── */
+.persona-fieldset {
+  border: 1px solid var(--border); border-radius: var(--radius-lg);
+  padding: 16px; margin: 16px 0 16px;
+}
+.persona-fieldset legend {
+  font-weight: 600; font-size: 13px; padding: 0 8px; color: var(--text-dim);
+}
+.persona-fieldset .form-row { margin-bottom: 0; }
+.persona-fieldset .form-group { margin-bottom: 12px; }
+.persona-fieldset .form-group:last-child { margin-bottom: 0; }
+
+/* ─── Responsive ──────────────────────────────────────── */
+@media (max-width: 768px) {
+  .sidebar { width: 56px; }
+  .sidebar-brand, .sidebar-nav a span, .sidebar-footer { display: none; }
+  .sidebar-nav a { justify-content: center; padding: 14px 0; font-size: 18px; }
+  .main { margin-left: 56px; padding: 16px; }
+  .form-row { grid-template-columns: 1fr; }
+  .stats-grid { grid-template-columns: 1fr 1fr; }
+}
+
+/* ─── Settings Help ─────────────────────────────────── */
+.settings-help-btn {
+  display: inline-flex; align-items: center; justify-content: center;
+  width: 22px; height: 22px; border-radius: 50%;
+  border: 1.5px solid var(--text-muted, #6b7280); background: transparent;
+  color: var(--text-muted, #6b7280); font-size: 12px; font-weight: 700;
+  cursor: pointer; margin-left: 8px; vertical-align: middle;
+  transition: border-color 0.15s, color 0.15s;
+  line-height: 1; padding: 0; flex-shrink: 0;
+}
+.settings-help-btn:hover { border-color: var(--primary, #6366f1); color: var(--primary, #6366f1); }
+.settings-help-panel {
+  display: none; margin: 8px 0 16px;
+  padding: 16px 20px; border-radius: var(--radius, 8px);
+  background: var(--surface, #1e293b);
+  border: 1px solid var(--border, #334155);
+  font-size: 13px; line-height: 1.7;
+  color: var(--text-muted, #9ca3af);
+}
+.settings-help-panel.open { display: block; }
+.settings-help-panel h4 { font-size: 13px; font-weight: 600; margin: 12px 0 6px; color: var(--text, #f1f5f9); }
+.settings-help-panel h4:first-child { margin-top: 0; }
+.settings-help-panel ul { padding-left: 20px; margin: 4px 0 8px; }
+.settings-help-panel li { margin-bottom: 4px; }
+.settings-help-panel strong { color: var(--text, #f1f5f9); }

package/dist/{chunk-TVF23PUW.js → chunk-7FVRYOP4.js}

@@ -140,7 +140,7 @@ async function addCertificate(appName, hostname, fly) {
 }
 async function deployToFly(config, fly) {
   const appName = `am-${config.subdomain}`;
-  const domain = `${config.subdomain}.agenticmail.cloud`;
+  const domain = `${config.subdomain}.agenticmail.io`;
   try {
     console.log(`  Creating app: ${appName}...`);
     await withRetry(() => createApp(appName, fly), {
@@ -183,7 +183,7 @@ async function deployToCloud(config, flyToken) {
   const token = flyToken || process.env.FLY_API_TOKEN;
   if (!token) {
     return {
-      url: `https://${config.subdomain}.agenticmail.cloud`,
+      url: `https://${config.subdomain}.agenticmail.io`,
       appName: `am-${config.subdomain}`,
       region: config.region || "iad",
       status: "pending",
@@ -213,19 +213,28 @@ async function deployToCloud(config, flyToken) {
     error: result.error
   };
 }
+function generateEnvFile(opts) {
+  const lines = [
+    "# AgenticMail Enterprise \u2014 Environment Variables",
+    "# WARNING: Contains secrets. Do NOT commit to version control.",
+    `# Generated at ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    "",
+    `DATABASE_TYPE=${opts.dbType}`,
+    `DATABASE_URL=${opts.dbConnectionString}`,
+    `JWT_SECRET=${opts.jwtSecret}`
+  ];
+  if (opts.smtpUser) lines.push(`SMTP_USER=${opts.smtpUser}`);
+  if (opts.smtpPass) lines.push(`SMTP_PASS=${opts.smtpPass}`);
+  return lines.join("\n") + "\n";
+}
 function generateDockerCompose(opts) {
   const env = [
     `      - NODE_ENV=production`,
-    `      - DATABASE_TYPE=${opts.dbType}`,
-    `      - DATABASE_URL=${opts.dbConnectionString}`,
-    `      - JWT_SECRET=${opts.jwtSecret}`,
     `      - PORT=3000`
   ];
   if (opts.smtpHost) {
     env.push(`      - SMTP_HOST=${opts.smtpHost}`);
     env.push(`      - SMTP_PORT=${opts.smtpPort || 587}`);
-    if (opts.smtpUser) env.push(`      - SMTP_USER=${opts.smtpUser}`);
-    if (opts.smtpPass) env.push(`      - SMTP_PASS=${opts.smtpPass}`);
   }
   return `# AgenticMail Enterprise \u2014 Docker Compose
 # Generated at ${(/* @__PURE__ */ new Date()).toISOString()}
@@ -233,6 +242,9 @@ function generateDockerCompose(opts) {
 # Usage:
 #   docker compose up -d
 #   open http://localhost:${opts.port}
+#
+# Secrets are loaded from .env file (DATABASE_URL, JWT_SECRET, etc.)
+# Do NOT commit .env to version control.
 
 version: "3.8"
 
@@ -241,6 +253,8 @@ services:
     image: agenticmail/enterprise:latest
     ports:
       - "${opts.port}:3000"
+    env_file:
+      - .env
     environment:
 ${env.join("\n")}
     restart: unless-stopped
@@ -332,6 +346,7 @@ function generateRailwayConfig() {
 
 export {
   deployToCloud,
+  generateEnvFile,
   generateDockerCompose,
   generateFlyToml,
   generateRailwayConfig

package/dist/chunk-DRXMYYKN.js

@@ -0,0 +1,79 @@
+// src/lib/cidr.ts
+function ipToNumber(ip) {
+  if (!ip) return null;
+  let cleaned = ip.trim();
+  if (cleaned.startsWith("::ffff:")) cleaned = cleaned.slice(7);
+  const parts = cleaned.split(".");
+  if (parts.length !== 4) return null;
+  let num = 0;
+  for (let i = 0; i < 4; i++) {
+    const octet = parseInt(parts[i], 10);
+    if (isNaN(octet) || octet < 0 || octet > 255) return null;
+    num = num << 8 | octet;
+  }
+  return num >>> 0;
+}
+function parseCidr(cidr) {
+  if (!cidr) return null;
+  const trimmed = cidr.trim();
+  const slashIdx = trimmed.indexOf("/");
+  let ip;
+  let prefix;
+  if (slashIdx === -1) {
+    ip = trimmed;
+    prefix = 32;
+  } else {
+    ip = trimmed.slice(0, slashIdx);
+    prefix = parseInt(trimmed.slice(slashIdx + 1), 10);
+    if (isNaN(prefix) || prefix < 0 || prefix > 32) return null;
+  }
+  const num = ipToNumber(ip);
+  if (num === null) return null;
+  const mask = prefix === 0 ? 0 : ~0 << 32 - prefix >>> 0;
+  const network = (num & mask) >>> 0;
+  return { network, mask, original: trimmed };
+}
+function ipMatchesCidr(ip, cidr) {
+  const num = ipToNumber(ip);
+  if (num === null) return false;
+  return (num & cidr.mask) >>> 0 === cidr.network;
+}
+function compileIpMatcher(entries) {
+  const parsed = [];
+  for (const entry of entries) {
+    const p = parseCidr(entry);
+    if (p) parsed.push(p);
+  }
+  if (parsed.length === 0) return () => false;
+  return function matchIp(ip) {
+    const num = ipToNumber(ip);
+    if (num === null) return false;
+    for (let i = 0; i < parsed.length; i++) {
+      if ((num & parsed[i].mask) >>> 0 === parsed[i].network) return true;
+    }
+    return false;
+  };
+}
+function isValidIpOrCidr(str) {
+  return parseCidr(str) !== null;
+}
+function hostMatchesPattern(host, pattern) {
+  if (!host || !pattern) return false;
+  const h = host.toLowerCase().trim();
+  const p = pattern.toLowerCase().trim();
+  if (p === h) return true;
+  if (p.startsWith("*.")) {
+    const suffix = p.slice(1);
+    return h.endsWith(suffix) || h === p.slice(2);
+  }
+  return false;
+}
+
+export {
+  ipToNumber,
+  parseCidr,
+  ipMatchesCidr,
+  compileIpMatcher,
+  isValidIpOrCidr,
+  hostMatchesPattern
+};