@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/express/routes/apiKeys.js

@@ -0,0 +1,107 @@
+/**
+ * AgenticMail Enterprise Dashboard — API Keys Routes
+ * GET /api-keys, POST /api-keys, POST /api-keys/:id/revoke
+ */
+
+const { Router } = require('express');
+const { requireAuth } = require('../middleware/auth');
+const { apiGet, apiPost, apiDelete } = require('../utils/api');
+const { layout } = require('../views/layout');
+const { buildTable } = require('../views/components/table');
+const { apiKeyCreateForm } = require('../views/components/modal');
+const { esc, badge, statusBadge, timeAgo } = require('../utils/helpers');
+
+const router = Router();
+
+router.get('/api-keys', requireAuth, async (req, res) => {
+  const flash = req.session.flash;
+  delete req.session.flash;
+
+  const result = await apiGet('/api/api-keys', req.session.token);
+  const keys = result.status === 200
+    ? (Array.isArray(result.body.api_keys) ? result.body.api_keys
+      : Array.isArray(result.body.keys) ? result.body.keys
+      : Array.isArray(result.body) ? result.body : [])
+    : [];
+
+  const rows = keys.map(k => {
+    const prefix = k.prefix || k.key_prefix || (k.key ? k.key.substring(0, 12) + '...' : '-');
+    const scopes = (k.scopes || []).map(s => badge(s)).join(' ');
+    const revokeBtn = (k.status || '').toLowerCase() !== 'revoked'
+      ? `<form method="post" action="/api-keys/${esc(k.id)}/revoke" style="display:inline" onsubmit="return confirm('Revoke this API key? This cannot be undone.')">
+           <button class="btn btn-sm btn-danger" type="submit">Revoke</button>
+         </form>`
+      : '';
+    return [
+      `<strong>${esc(k.name || '-')}</strong>`,
+      `<code>${esc(prefix)}</code>`,
+      scopes,
+      statusBadge(k.status || 'active'),
+      `<span style="color:var(--text-muted)">${timeAgo(k.created_at)}</span>`,
+      revokeBtn,
+    ];
+  });
+
+  const table = buildTable(
+    ['Name', 'Key Prefix', 'Scopes', 'Status', 'Created', 'Actions'],
+    rows,
+    '&#128273;',
+    'No API keys. Generate one above.'
+  );
+
+  // Show-once key banner if a key was just created
+  let keyBanner = '';
+  if (flash && flash.createdKey) {
+    keyBanner = `<div class="key-banner">
+      <strong>Save this key now!</strong> It will not be shown again.
+      <code>${esc(flash.createdKey)}</code>
+    </div>`;
+  }
+
+  const content = `
+    <div class="page-header">
+      <h1>API Keys</h1>
+      <p>Manage programmatic access credentials</p>
+    </div>
+    ${keyBanner}
+    ${apiKeyCreateForm()}
+    <div class="card">
+      <h3>Active Keys (${keys.length})</h3>
+      ${table}
+    </div>`;
+
+  res.send(layout('keys', req.session.user, content, flash));
+});
+
+router.post('/api-keys', requireAuth, async (req, res) => {
+  const scopes = (req.body.scopes || '').split(',').map(s => s.trim()).filter(Boolean);
+  const result = await apiPost('/api/api-keys', req.session.token, {
+    name: req.body.name,
+    scopes,
+  });
+
+  if (result.status < 300) {
+    const plaintext = result.body.key || result.body.api_key || result.body.token || result.body.plaintext;
+    req.session.flash = {
+      message: 'API key created',
+      type: 'success',
+      createdKey: plaintext || null,
+    };
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Failed to create API key', type: 'danger' };
+  }
+  res.redirect('/api-keys');
+});
+
+router.post('/api-keys/:id/revoke', requireAuth, async (req, res) => {
+  const result = await apiDelete(`/api/api-keys/${req.params.id}`, req.session.token);
+
+  if (result.status < 300) {
+    req.session.flash = { message: 'API key revoked', type: 'success' };
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Failed to revoke key', type: 'danger' };
+  }
+  res.redirect('/api-keys');
+});
+
+module.exports = router;

package/dashboards/express/routes/audit.js

@@ -0,0 +1,75 @@
+/**
+ * AgenticMail Enterprise Dashboard — Audit Routes
+ * GET /audit?page=N
+ */
+
+const { Router } = require('express');
+const { requireAuth } = require('../middleware/auth');
+const { apiGet } = require('../utils/api');
+const { layout } = require('../views/layout');
+const { buildTable } = require('../views/components/table');
+const { esc, timeAgo } = require('../utils/helpers');
+
+const router = Router();
+const LIMIT = 25;
+
+router.get('/audit', requireAuth, async (req, res) => {
+  const flash = req.session.flash;
+  delete req.session.flash;
+
+  const page = Math.max(1, parseInt(req.query.page) || 1);
+  const offset = (page - 1) * LIMIT;
+
+  const result = await apiGet(`/api/audit?limit=${LIMIT}&offset=${offset}`, req.session.token);
+  const body = result.status === 200 ? result.body : {};
+  const events = body.events
+    ? (Array.isArray(body.events) ? body.events : [])
+    : (Array.isArray(body) ? body : []);
+  const total = body.total || events.length;
+
+  const rows = events.map(ev => [
+    esc(ev.action || ev.event || 'unknown'),
+    esc(ev.actor || ev.user || ev.email || '-'),
+    esc(ev.resource || ev.target || '-'),
+    `<span style="color:var(--text-muted)"><code>${esc(ev.ip || ev.ip_address || '-')}</code></span>`,
+    `<span style="color:var(--text-muted)">${timeAgo(ev.created_at || ev.timestamp)}</span>`,
+  ]);
+
+  const table = buildTable(
+    ['Event', 'Actor', 'Resource', 'IP Address', 'Time'],
+    rows,
+    '&#128220;',
+    'No audit events recorded'
+  );
+
+  // Pagination
+  let pagination = '';
+  if (events.length > 0) {
+    const prevLink = page > 1
+      ? `<a href="/audit?page=${page - 1}">&laquo; Previous</a>`
+      : '';
+    const nextLink = events.length >= LIMIT
+      ? `<a href="/audit?page=${page + 1}">Next &raquo;</a>`
+      : '';
+    pagination = `<div class="pagination">
+      ${prevLink}
+      <span class="current">Page ${page}</span>
+      ${nextLink}
+      <span style="color:var(--text-muted);font-size:12px;margin-left:auto">${total} total events</span>
+    </div>`;
+  }
+
+  const content = `
+    <div class="page-header">
+      <h1>Audit Log</h1>
+      <p>Security and activity event history</p>
+    </div>
+    <div class="card">
+      ${table}
+      ${pagination}
+    </div>`;
+
+  res.send(layout('audit', req.session.user, content, flash));
+});
+
+module.exports = router;

package/dashboards/express/routes/auth.js

@@ -0,0 +1,38 @@
+/**
+ * AgenticMail Enterprise Dashboard — Auth Routes
+ * GET /login, POST /login, GET /logout
+ */
+
+const { Router } = require('express');
+const { apiPost } = require('../utils/api');
+const { loginPage } = require('../views/login');
+
+const router = Router();
+
+router.get('/login', (req, res) => {
+  if (req.session.token) return res.redirect('/');
+  res.send(loginPage(null));
+});
+
+router.post('/login', async (req, res) => {
+  const result = await apiPost('/auth/login', null, {
+    email: req.body.email,
+    password: req.body.password,
+  });
+
+  if (result.status === 200 && result.body && result.body.token) {
+    req.session.token = result.body.token;
+    req.session.user = result.body.user || { email: req.body.email };
+    return res.redirect('/');
+  }
+
+  const error = (result.body && result.body.error) || 'Invalid credentials';
+  res.send(loginPage(error));
+});
+
+router.get('/logout', (req, res) => {
+  req.session.destroy();
+  res.redirect('/login');
+});
+
+module.exports = router;

package/dashboards/express/routes/compliance.js

@@ -0,0 +1,93 @@
+/**
+ * AgenticMail Enterprise Dashboard — Compliance Routes
+ * GET /compliance, POST /compliance/generate
+ */
+
+const { Router } = require('express');
+const { requireAuth } = require('../middleware/auth');
+const { apiGet, apiPost } = require('../utils/api');
+const { layout } = require('../views/layout');
+const { buildTable } = require('../views/components/table');
+const { esc, statusBadge, timeAgo } = require('../utils/helpers');
+
+const router = Router();
+
+router.get('/compliance', requireAuth, async (req, res) => {
+  const flash = req.session.flash;
+  delete req.session.flash;
+
+  const reportsResult = await apiGet('/engine/compliance/reports', req.session.token);
+  const reports = reportsResult.status === 200
+    ? (Array.isArray(reportsResult.body.reports) ? reportsResult.body.reports : (Array.isArray(reportsResult.body) ? reportsResult.body : []))
+    : [];
+
+  const rows = reports.map(r => [
+    `<strong>${esc(r.name || r.type || '-')}</strong>`,
+    esc(r.framework || r.standard || '-'),
+    statusBadge(r.status || 'generated'),
+    `<span style="color:var(--text-muted)">${esc(r.score != null ? r.score + '%' : '-')}</span>`,
+    `<span style="color:var(--text-muted)">${timeAgo(r.created_at || r.createdAt)}</span>`,
+  ]);
+
+  const table = buildTable(
+    ['Report', 'Framework', 'Status', 'Score', 'Generated'],
+    rows,
+    '&#128203;',
+    'No compliance reports yet. Generate one below.'
+  );
+
+  const content = `
+    <div class="page-header">
+      <h1>Compliance</h1>
+      <p>Generate and review compliance reports for regulatory frameworks</p>
+    </div>
+    <div class="card">
+      <h3>Generate Report</h3>
+      <form method="post" action="/compliance/generate">
+        <div class="form-row">
+          <div class="form-group">
+            <label>Framework</label>
+            <select name="framework" required>
+              <option value="soc2">SOC 2</option>
+              <option value="gdpr">GDPR</option>
+              <option value="audit">Audit</option>
+            </select>
+          </div>
+          <div class="form-group">
+            <label>Report Name</label>
+            <input type="text" name="name" placeholder="Optional custom name">
+          </div>
+        </div>
+        <button class="btn btn-primary" type="submit">Generate Report</button>
+      </form>
+    </div>
+    <div class="card">
+      <h3>Compliance Reports (${reports.length})</h3>
+      ${table}
+    </div>`;
+
+  res.send(layout('compliance', req.session.user, content, flash));
+});
+
+router.post('/compliance/generate', requireAuth, async (req, res) => {
+  const framework = req.body.framework;
+  const endpoints = {
+    soc2: '/engine/compliance/reports/soc2',
+    gdpr: '/engine/compliance/reports/gdpr',
+    audit: '/engine/compliance/reports/audit',
+  };
+  const endpoint = endpoints[framework] || endpoints.soc2;
+
+  const result = await apiPost(endpoint, req.session.token, {
+    name: req.body.name || undefined,
+  });
+
+  if (result.status < 300) {
+    req.session.flash = { message: `${framework.toUpperCase()} compliance report generated`, type: 'success' };
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Failed to generate report', type: 'danger' };
+  }
+  res.redirect('/compliance');
+});
+
+module.exports = router;

package/dashboards/express/routes/dashboard.js

@@ -0,0 +1,65 @@
+/**
+ * AgenticMail Enterprise Dashboard — Dashboard Route
+ * GET /
+ */
+
+const { Router } = require('express');
+const { requireAuth } = require('../middleware/auth');
+const { apiGet } = require('../utils/api');
+const { layout } = require('../views/layout');
+const { statsGrid } = require('../views/components/stats');
+const { buildTable } = require('../views/components/table');
+const { esc, timeAgo } = require('../utils/helpers');
+
+const router = Router();
+
+router.get('/', requireAuth, async (req, res) => {
+  const flash = req.session.flash;
+  delete req.session.flash;
+
+  const [statsRes, auditRes] = await Promise.all([
+    apiGet('/api/stats', req.session.token),
+    apiGet('/api/audit?limit=8', req.session.token),
+  ]);
+
+  const stats = statsRes.status === 200 ? statsRes.body : {};
+  const events = auditRes.status === 200
+    ? (Array.isArray(auditRes.body.events) ? auditRes.body.events : (Array.isArray(auditRes.body) ? auditRes.body : []))
+    : [];
+
+  const statCards = statsGrid([
+    { label: 'Total Agents', value: stats.agents || stats.total_agents || stats.totalAgents || 0, pink: true },
+    { label: 'Total Users', value: stats.users || stats.total_users || stats.totalUsers || 0 },
+    { label: 'Messages Today', value: stats.messages_today || stats.messages || 0 },
+    { label: 'API Keys', value: stats.api_keys || stats.total_api_keys || stats.totalApiKeys || 0 },
+  ]);
+
+  const auditRows = events.map(ev => [
+    esc(ev.action || ev.event || 'unknown'),
+    esc(ev.actor || ev.user || ev.email || '-'),
+    esc(ev.resource || ev.target || '-'),
+    `<span style="color:var(--text-muted)">${timeAgo(ev.created_at || ev.timestamp)}</span>`,
+  ]);
+
+  const auditTable = buildTable(
+    ['Event', 'Actor', 'Resource', 'Time'],
+    auditRows,
+    '&#128220;',
+    'No recent audit events'
+  );
+
+  const content = `
+    <div class="page-header">
+      <h1>Dashboard</h1>
+      <p>Overview of your AgenticMail Enterprise instance</p>
+    </div>
+    ${statCards}
+    <div class="card">
+      <h3>Recent Audit Events</h3>
+      ${auditTable}
+    </div>`;
+
+  res.send(layout('dashboard', req.session.user, content, flash));
+});
+
+module.exports = router;

package/dashboards/express/routes/dlp.js

@@ -0,0 +1,165 @@
+/**
+ * AgenticMail Enterprise Dashboard — DLP Routes
+ * GET /dlp, POST /dlp/rules/create, POST /dlp/rules/:id/delete, POST /dlp/scan
+ */
+
+const { Router } = require('express');
+const { requireAuth } = require('../middleware/auth');
+const { apiGet, apiPost, apiDelete } = require('../utils/api');
+const { layout } = require('../views/layout');
+const { buildTable } = require('../views/components/table');
+const { esc, statusBadge, timeAgo } = require('../utils/helpers');
+
+const router = Router();
+
+router.get('/dlp', requireAuth, async (req, res) => {
+  const flash = req.session.flash;
+  delete req.session.flash;
+
+  const rulesResult = await apiGet('/engine/dlp/rules?orgId=default', req.session.token);
+  const rules = rulesResult.status === 200
+    ? (Array.isArray(rulesResult.body.rules) ? rulesResult.body.rules : (Array.isArray(rulesResult.body) ? rulesResult.body : []))
+    : [];
+
+  const violationsResult = await apiGet('/engine/dlp/violations', req.session.token);
+  const violations = violationsResult.status === 200
+    ? (Array.isArray(violationsResult.body.violations) ? violationsResult.body.violations : (Array.isArray(violationsResult.body) ? violationsResult.body : []))
+    : [];
+
+  const ruleRows = rules.map(r => {
+    const deleteBtn = `<form method="post" action="/dlp/rules/${esc(r.id)}/delete" style="display:inline" onsubmit="return confirm('Delete this DLP rule?')">
+           <button class="btn btn-sm btn-danger" type="submit">Delete</button>
+         </form>`;
+    return [
+      `<strong>${esc(r.name || '-')}</strong>`,
+      `<code>${esc(r.pattern || '-')}</code>`,
+      statusBadge(r.status || 'enabled'),
+      `<span style="color:var(--text-muted)">${esc(r.action || 'block')}</span>`,
+      deleteBtn,
+    ];
+  });
+
+  const ruleTable = buildTable(
+    ['Name', 'Pattern', 'Status', 'Action', ''],
+    ruleRows,
+    '&#128274;',
+    'No DLP rules defined. Create one below.'
+  );
+
+  const violationRows = violations.map(v => [
+    `<strong>${esc(v.rule_name || v.ruleName || '-')}</strong>`,
+    `<code>${esc(v.matched || v.content || '-')}</code>`,
+    esc(v.agent || v.sender || '-'),
+    `<span style="color:var(--text-muted)">${timeAgo(v.created_at || v.createdAt)}</span>`,
+  ]);
+
+  const violationTable = buildTable(
+    ['Rule', 'Matched Content', 'Agent/Sender', 'Time'],
+    violationRows,
+    '&#9989;',
+    'No DLP violations detected.'
+  );
+
+  const content = `
+    <div class="page-header">
+      <h1>Data Loss Prevention</h1>
+      <p>Protect sensitive data with pattern-based scanning rules</p>
+    </div>
+    <div class="card">
+      <h3>Create DLP Rule</h3>
+      <form method="post" action="/dlp/rules/create">
+        <div class="form-row">
+          <div class="form-group">
+            <label>Rule Name</label>
+            <input type="text" name="name" required placeholder="e.g. Credit Card Numbers">
+          </div>
+          <div class="form-group">
+            <label>Pattern (regex)</label>
+            <input type="text" name="pattern" required placeholder="e.g. \\d{4}-\\d{4}-\\d{4}-\\d{4}">
+          </div>
+        </div>
+        <div class="form-row">
+          <div class="form-group">
+            <label>Action</label>
+            <select name="action">
+              <option value="block">Block</option>
+              <option value="redact">Redact</option>
+              <option value="flag">Flag Only</option>
+            </select>
+          </div>
+          <div class="form-group">
+            <label>Description</label>
+            <input type="text" name="description" placeholder="Optional description">
+          </div>
+        </div>
+        <button class="btn btn-primary" type="submit">Create Rule</button>
+      </form>
+    </div>
+    <div class="card">
+      <h3>Scan Content</h3>
+      <form method="post" action="/dlp/scan">
+        <div class="form-group">
+          <label>Content to Scan</label>
+          <textarea name="content" rows="3" required placeholder="Paste content to test against DLP rules..."></textarea>
+        </div>
+        <button class="btn btn-primary" type="submit">Scan</button>
+      </form>
+    </div>
+    <div class="card">
+      <h3>DLP Rules (${rules.length})</h3>
+      ${ruleTable}
+    </div>
+    <div class="card">
+      <h3>Recent Violations (${violations.length})</h3>
+      ${violationTable}
+    </div>`;
+
+  res.send(layout('dlp', req.session.user, content, flash));
+});
+
+router.post('/dlp/rules/create', requireAuth, async (req, res) => {
+  const result = await apiPost('/engine/dlp/rules', req.session.token, {
+    name: req.body.name,
+    pattern: req.body.pattern,
+    action: req.body.action,
+    description: req.body.description,
+  });
+
+  if (result.status < 300) {
+    req.session.flash = { message: 'DLP rule created', type: 'success' };
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Failed to create DLP rule', type: 'danger' };
+  }
+  res.redirect('/dlp');
+});
+
+router.post('/dlp/rules/:id/delete', requireAuth, async (req, res) => {
+  const result = await apiDelete(`/engine/dlp/rules/${req.params.id}`, req.session.token);
+
+  if (result.status < 300) {
+    req.session.flash = { message: 'DLP rule deleted', type: 'success' };
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Failed to delete DLP rule', type: 'danger' };
+  }
+  res.redirect('/dlp');
+});
+
+router.post('/dlp/scan', requireAuth, async (req, res) => {
+  const result = await apiPost('/engine/dlp/scan', req.session.token, {
+    content: req.body.content,
+  });
+
+  if (result.status < 300) {
+    const matches = result.body.matches || result.body.violations || [];
+    if (matches.length > 0) {
+      req.session.flash = { message: `Scan complete: ${matches.length} violation(s) found`, type: 'warning' };
+    } else {
+      req.session.flash = { message: 'Scan complete: no violations found', type: 'success' };
+    }
+  } else {
+    req.session.flash = { message: (result.body && result.body.error) || 'Scan failed', type: 'danger' };
+  }
+  res.redirect('/dlp');
+});
+
+module.exports = router;