@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/go/handlers/apikeys.go

@@ -0,0 +1,38 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleAPIKeys handles the API keys list page (GET).
+func HandleAPIKeys(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+	data, _ := services.APICall("/api/api-keys", "GET", s.Token, nil)
+	var tableHTML string
+	if keys, ok := data["keys"].([]interface{}); ok && len(keys) > 0 {
+		rows := ""
+		for _, ky := range keys {
+			k := ky.(map[string]interface{})
+			status := "active"
+			if revoked, ok := k["revoked"].(bool); ok && revoked {
+				status = "revoked"
+			}
+			lastUsed := "Never"
+			if v := templates.StrVal(k, "lastUsedAt"); v != "" {
+				lastUsed = v
+			}
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td><code style="font-size:12px">%s...</code></td><td style="color:var(--muted);font-size:12px">%s</td><td>%s</td></tr>`,
+				templates.Esc(k["name"]), templates.Esc(k["keyPrefix"]), templates.Esc(lastUsed), templates.Badge(status))
+		}
+		tableHTML = `<table><thead><tr><th>Name</th><th>Key</th><th>Last Used</th><th>Status</th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		tableHTML = `<div class="empty"><div class="empty-i">🔑</div>No API keys</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">API Keys</h2><p class="desc">Manage programmatic access</p><div class="card">%s</div>`, tableHTML)
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("keys", s.User, content))
+}

package/dashboards/go/handlers/audit.go

@@ -0,0 +1,52 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleAudit handles the paginated audit log page (GET).
+func HandleAudit(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+	p := 0
+	fmt.Sscanf(r.URL.Query().Get("p"), "%d", &p)
+	if p < 0 {
+		p = 0
+	}
+
+	data, _ := services.APICall(fmt.Sprintf("/api/audit?limit=25&offset=%d", p*25), "GET", s.Token, nil)
+	total := templates.IntVal(data, "total")
+	var tableHTML string
+	if events, ok := data["events"].([]interface{}); ok && len(events) > 0 {
+		rows := ""
+		for _, ev := range events {
+			e := ev.(map[string]interface{})
+			ip := templates.StrVal(e, "ip")
+			if ip == "" {
+				ip = "-"
+			}
+			rows += fmt.Sprintf(`<tr><td style="font-size:12px;color:var(--muted);white-space:nowrap">%s</td><td>%s</td><td style="color:var(--primary);font-weight:500">%s</td><td style="font-size:12px">%s</td><td style="font-size:12px;color:var(--muted)">%s</td></tr>`,
+				templates.Esc(e["timestamp"]), templates.Esc(e["actor"]), templates.Esc(e["action"]), templates.Esc(e["resource"]), templates.Esc(ip))
+		}
+		pages := (total + 24) / 25
+		nav := fmt.Sprintf(`<div style="display:flex;gap:8px;justify-content:center;margin-top:16px"><span style="padding:6px 12px;font-size:12px;color:var(--muted)">Page %d of %d</span></div>`, p+1, pages)
+		if p > 0 {
+			nav = fmt.Sprintf(`<div style="display:flex;gap:8px;justify-content:center;margin-top:16px"><a class="btn btn-sm" href="/audit?p=%d">← Prev</a><span style="padding:6px 12px;font-size:12px;color:var(--muted)">Page %d of %d</span>`, p-1, p+1, pages)
+			if (p+1)*25 < total {
+				nav += fmt.Sprintf(`<a class="btn btn-sm" href="/audit?p=%d">Next →</a>`, p+1)
+			}
+			nav += `</div>`
+		} else if (p+1)*25 < total {
+			nav = fmt.Sprintf(`<div style="display:flex;gap:8px;justify-content:center;margin-top:16px"><span style="padding:6px 12px;font-size:12px;color:var(--muted)">Page %d of %d</span><a class="btn btn-sm" href="/audit?p=%d">Next →</a></div>`, p+1, pages, p+1)
+		}
+		tableHTML = `<table><thead><tr><th>Time</th><th>Actor</th><th>Action</th><th>Resource</th><th>IP</th></tr></thead><tbody>` + rows + `</tbody></table>` + nav
+	} else {
+		tableHTML = `<div class="empty"><div class="empty-i">📋</div>No audit events yet</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Audit Log</h2><p class="desc">%d total events</p><div class="card">%s</div>`, total, tableHTML)
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("audit", s.User, content))
+}

package/dashboards/go/handlers/auth.go

@@ -0,0 +1,39 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleLogin serves the login page (GET) and processes login form submissions (POST).
+func HandleLogin(w http.ResponseWriter, r *http.Request) {
+	if r.Method == "GET" {
+		w.Header().Set("Content-Type", "text/html")
+		fmt.Fprint(w, templates.LoginPage())
+		return
+	}
+	r.ParseForm()
+	data, err := services.APICall("/auth/login", "POST", "", map[string]string{
+		"email": r.FormValue("email"), "password": r.FormValue("password"),
+	})
+	if err != nil || data["token"] == nil {
+		errMsg := "Login failed"
+		if data != nil && data["error"] != nil {
+			errMsg = fmt.Sprintf("%v", data["error"])
+		}
+		w.Header().Set("Content-Type", "text/html")
+		fmt.Fprintf(w, `<html><body style="background:#f8f9fa;color:#ef4444;font-family:sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh"><div>%s <a href="/login" style="color:#e84393">Try again</a></div></body></html>`, templates.Esc(errMsg))
+		return
+	}
+	user, _ := data["user"].(map[string]interface{})
+	services.SetSession(w, &services.Session{Token: fmt.Sprintf("%v", data["token"]), User: user})
+	http.Redirect(w, r, "/", http.StatusFound)
+}
+
+// HandleLogout clears the session and redirects to the login page.
+func HandleLogout(w http.ResponseWriter, r *http.Request) {
+	services.ClearSession(w, r)
+	http.Redirect(w, r, "/login", http.StatusFound)
+}

package/dashboards/go/handlers/compliance.go

@@ -0,0 +1,58 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleCompliance handles the compliance reports page (GET) and report
+// generation (POST).
+func HandleCompliance(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+
+	if r.Method == "POST" {
+		r.ParseForm()
+		action := r.FormValue("action")
+		if action == "generate" {
+			reportType := r.FormValue("type")
+			switch reportType {
+			case "soc2":
+				services.APICall("/engine/compliance/reports/soc2", "POST", s.Token, nil)
+			case "gdpr":
+				services.APICall("/gdpr", "POST", s.Token, nil)
+			case "audit":
+				services.APICall("/audit", "POST", s.Token, nil)
+			}
+		}
+		http.Redirect(w, r, "/compliance", http.StatusFound)
+		return
+	}
+
+	data, _ := services.APICall("/engine/compliance/reports", "GET", s.Token, nil)
+
+	var tableHTML string
+	if reports, ok := data["reports"].([]interface{}); ok && len(reports) > 0 {
+		rows := ""
+		for _, rp := range reports {
+			re := rp.(map[string]interface{})
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td>%s</td><td>%s</td><td style="font-size:12px;color:var(--muted)">%s</td></tr>`,
+				templates.Esc(re["name"]), templates.Badge(templates.StrVal(re, "type")), templates.Badge(templates.StrVal(re, "status")), templates.Esc(re["generatedAt"]))
+		}
+		tableHTML = `<table><thead><tr><th>Name</th><th>Type</th><th>Status</th><th>Generated</th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		tableHTML = `<div class="empty"><div class="empty-i">📊</div>No compliance reports yet</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Compliance</h2><p class="desc">Generate and review compliance reports</p>
+<div class="card" style="margin-bottom:16px"><div class="ct">Generate Report</div>
+<form method="POST" action="/compliance" style="display:flex;gap:10px;align-items:end">
+<input type="hidden" name="action" value="generate">
+<div class="fg" style="margin:0"><label class="fl">Report Type</label><select class="input" name="type"><option value="soc2">SOC 2</option><option value="gdpr">GDPR</option><option value="audit">Audit</option></select></div>
+<button class="btn btn-p" type="submit">Generate</button></form></div>
+<div class="card"><div class="ct">Reports</div>%s</div>`, tableHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("compliance", s.User, content))
+}

package/dashboards/go/handlers/dashboard.go

@@ -0,0 +1,43 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleDashboard renders the main dashboard overview page with stats and recent activity.
+func HandleDashboard(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+	stats, _ := services.APICall("/api/stats", "GET", s.Token, nil)
+	audit, _ := services.APICall("/api/audit?limit=8", "GET", s.Token, nil)
+
+	var eventsHTML string
+	if events, ok := audit["events"].([]interface{}); ok && len(events) > 0 {
+		for _, ev := range events {
+			e := ev.(map[string]interface{})
+			eventsHTML += fmt.Sprintf(`<div style="padding:10px 0;border-bottom:1px solid var(--border);font-size:13px"><span style="color:var(--primary);font-weight:500">%s</span> on %s<div style="font-size:11px;color:var(--muted)">%s</div></div>`,
+				templates.Esc(e["action"]), templates.Esc(e["resource"]), templates.Esc(e["timestamp"]))
+		}
+	} else {
+		eventsHTML = `<div class="empty"><div class="empty-i">📋</div>No activity yet</div>`
+	}
+
+	if stats == nil {
+		stats = map[string]interface{}{}
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Dashboard</h2><p class="desc">Overview of your AgenticMail instance</p>
+<div class="stats">
+<div class="stat"><div class="l">Total Agents</div><div class="v" style="color:var(--primary)">%d</div></div>
+<div class="stat"><div class="l">Active Agents</div><div class="v" style="color:var(--success)">%d</div></div>
+<div class="stat"><div class="l">Users</div><div class="v">%d</div></div>
+<div class="stat"><div class="l">Audit Events</div><div class="v">%d</div></div></div>
+<div class="card"><div class="ct">Recent Activity</div>%s</div>`,
+		templates.IntVal(stats, "totalAgents"), templates.IntVal(stats, "activeAgents"),
+		templates.IntVal(stats, "totalUsers"), templates.IntVal(stats, "totalAuditEvents"), eventsHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("dashboard", s.User, content))
+}

package/dashboards/go/handlers/dlp.go

@@ -0,0 +1,78 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleDlp handles the DLP rules and violations page (GET), and rule creation,
+// rule deletion, and scan triggering (POST).
+func HandleDlp(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+
+	if r.Method == "POST" {
+		r.ParseForm()
+		action := r.FormValue("action")
+		switch action {
+		case "create_rule":
+			services.APICall("/engine/dlp/rules", "POST", s.Token, map[string]string{
+				"name": r.FormValue("name"), "pattern": r.FormValue("pattern"),
+				"severity": r.FormValue("severity"),
+			})
+		case "delete_rule":
+			services.APICall("/engine/dlp/rules/"+r.FormValue("id"), "DELETE", s.Token, nil)
+		case "scan":
+			services.APICall("/engine/dlp/scan", "POST", s.Token, map[string]string{
+				"orgId": "default",
+			})
+		}
+		http.Redirect(w, r, "/dlp", http.StatusFound)
+		return
+	}
+
+	rules, _ := services.APICall("/engine/dlp/rules?orgId=default", "GET", s.Token, nil)
+	violations, _ := services.APICall("/engine/dlp/violations", "GET", s.Token, nil)
+
+	var rulesHTML string
+	if ruleList, ok := rules["rules"].([]interface{}); ok && len(ruleList) > 0 {
+		rows := ""
+		for _, rl := range ruleList {
+			ru := rl.(map[string]interface{})
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td><code style="font-size:12px">%s</code></td><td>%s</td><td><form method="POST" action="/dlp" style="display:inline"><input type="hidden" name="action" value="delete_rule"><input type="hidden" name="id" value="%s"><button class="btn btn-sm btn-d" type="submit">Delete</button></form></td></tr>`,
+				templates.Esc(ru["name"]), templates.Esc(ru["pattern"]), templates.Badge(templates.StrVal(ru, "severity")), templates.Esc(ru["id"]))
+		}
+		rulesHTML = `<table><thead><tr><th>Name</th><th>Pattern</th><th>Severity</th><th></th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		rulesHTML = `<div class="empty"><div class="empty-i">🛡️</div>No DLP rules yet</div>`
+	}
+
+	var violationsHTML string
+	if vList, ok := violations["violations"].([]interface{}); ok && len(vList) > 0 {
+		rows := ""
+		for _, vl := range vList {
+			v := vl.(map[string]interface{})
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td style="color:var(--dim)">%s</td><td>%s</td><td style="font-size:12px;color:var(--muted)">%s</td></tr>`,
+				templates.Esc(v["rule"]), templates.Esc(v["message"]), templates.Badge(templates.StrVal(v, "severity")), templates.Esc(v["timestamp"]))
+		}
+		violationsHTML = `<table><thead><tr><th>Rule</th><th>Message</th><th>Severity</th><th>Time</th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		violationsHTML = `<div class="empty"><div class="empty-i">✅</div>No violations detected</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Data Loss Prevention</h2><p class="desc">Protect sensitive data in agent communications</p>
+<div class="card" style="margin-bottom:16px"><div class="ct">Create Rule</div>
+<form method="POST" action="/dlp" style="display:flex;gap:10px;align-items:end">
+<input type="hidden" name="action" value="create_rule">
+<div class="fg" style="flex:1;margin:0"><label class="fl">Name</label><input class="input" name="name" required placeholder="e.g. SSN Detection"></div>
+<div class="fg" style="flex:1;margin:0"><label class="fl">Pattern</label><input class="input" name="pattern" required placeholder="e.g. \d{3}-\d{2}-\d{4}"></div>
+<div class="fg" style="margin:0"><label class="fl">Severity</label><select class="input" name="severity"><option>high</option><option>medium</option><option>low</option></select></div>
+<button class="btn btn-p" type="submit">Create</button></form></div>
+<div style="display:flex;gap:16px;margin-bottom:16px"><form method="POST" action="/dlp"><input type="hidden" name="action" value="scan"><button class="btn" type="submit">Run Scan</button></form></div>
+<div class="card" style="margin-bottom:16px"><div class="ct">Rules</div>%s</div>
+<div class="card"><div class="ct">Violations</div>%s</div>`, rulesHTML, violationsHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("dlp", s.User, content))
+}

package/dashboards/go/handlers/guardrails.go

@@ -0,0 +1,89 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleGuardrails handles the guardrails page (GET) with interventions and rules,
+// and POST actions for pause, resume, kill, create_rule, and delete_rule.
+func HandleGuardrails(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+
+	if r.Method == "POST" {
+		r.ParseForm()
+		action := r.FormValue("action")
+		switch action {
+		case "pause":
+			services.APICall("/engine/guardrails/pause/"+r.FormValue("id"), "POST", s.Token, nil)
+		case "resume":
+			services.APICall("/engine/guardrails/resume/"+r.FormValue("id"), "POST", s.Token, nil)
+		case "kill":
+			services.APICall("/engine/guardrails/kill/"+r.FormValue("id"), "POST", s.Token, nil)
+		case "create_rule":
+			services.APICall("/engine/anomaly-rules", "POST", s.Token, map[string]string{
+				"name": r.FormValue("name"), "condition": r.FormValue("condition"),
+				"action": r.FormValue("rule_action"),
+			})
+		case "delete_rule":
+			services.APICall("/engine/anomaly-rules/"+r.FormValue("id"), "DELETE", s.Token, nil)
+		}
+		http.Redirect(w, r, "/guardrails", http.StatusFound)
+		return
+	}
+
+	interventions, _ := services.APICall("/engine/guardrails/interventions", "GET", s.Token, nil)
+	rulesData, _ := services.APICall("/engine/anomaly-rules", "GET", s.Token, nil)
+
+	var interventionsHTML string
+	if iList, ok := interventions["interventions"].([]interface{}); ok && len(iList) > 0 {
+		rows := ""
+		for _, iv := range iList {
+			i := iv.(map[string]interface{})
+			actions := fmt.Sprintf(`<form method="POST" action="/guardrails" style="display:inline-flex;gap:4px"><input type="hidden" name="id" value="%s">`, templates.Esc(i["id"]))
+			status := templates.StrVal(i, "status")
+			if status == "active" {
+				actions += `<button class="btn btn-sm" type="submit" name="action" value="pause">Pause</button>`
+				actions += `<button class="btn btn-sm btn-d" type="submit" name="action" value="kill">Kill</button>`
+			} else if status == "paused" {
+				actions += `<button class="btn btn-sm" type="submit" name="action" value="resume">Resume</button>`
+				actions += `<button class="btn btn-sm btn-d" type="submit" name="action" value="kill">Kill</button>`
+			}
+			actions += `</form>`
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td style="color:var(--dim)">%s</td><td>%s</td><td style="font-size:12px;color:var(--muted)">%s</td><td>%s</td></tr>`,
+				templates.Esc(i["agent"]), templates.Esc(i["reason"]), templates.Badge(status), templates.Esc(i["timestamp"]), actions)
+		}
+		interventionsHTML = `<table><thead><tr><th>Agent</th><th>Reason</th><th>Status</th><th>Time</th><th></th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		interventionsHTML = `<div class="empty"><div class="empty-i">🛡️</div>No active interventions</div>`
+	}
+
+	var rulesHTML string
+	if ruleList, ok := rulesData["rules"].([]interface{}); ok && len(ruleList) > 0 {
+		rows := ""
+		for _, rl := range ruleList {
+			ru := rl.(map[string]interface{})
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td style="color:var(--dim)">%s</td><td>%s</td><td><form method="POST" action="/guardrails" style="display:inline"><input type="hidden" name="action" value="delete_rule"><input type="hidden" name="id" value="%s"><button class="btn btn-sm btn-d" type="submit">Delete</button></form></td></tr>`,
+				templates.Esc(ru["name"]), templates.Esc(ru["condition"]), templates.Badge(templates.StrVal(ru, "action")), templates.Esc(ru["id"]))
+		}
+		rulesHTML = `<table><thead><tr><th>Name</th><th>Condition</th><th>Action</th><th></th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		rulesHTML = `<div class="empty"><div class="empty-i">📏</div>No anomaly rules yet</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Guardrails</h2><p class="desc">Monitor and control agent behavior</p>
+<div class="card" style="margin-bottom:16px"><div class="ct">Create Anomaly Rule</div>
+<form method="POST" action="/guardrails" style="display:flex;gap:10px;align-items:end">
+<input type="hidden" name="action" value="create_rule">
+<div class="fg" style="flex:1;margin:0"><label class="fl">Name</label><input class="input" name="name" required placeholder="e.g. Rate limit exceeded"></div>
+<div class="fg" style="flex:1;margin:0"><label class="fl">Condition</label><input class="input" name="condition" required placeholder="e.g. messages > 100/min"></div>
+<div class="fg" style="margin:0"><label class="fl">Action</label><select class="input" name="rule_action"><option>pause</option><option>alert</option><option>kill</option></select></div>
+<button class="btn btn-p" type="submit">Create</button></form></div>
+<div class="card" style="margin-bottom:16px"><div class="ct">Active Interventions</div>%s</div>
+<div class="card"><div class="ct">Anomaly Rules</div>%s</div>`, interventionsHTML, rulesHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("guardrails", s.User, content))
+}

package/dashboards/go/handlers/journal.go

@@ -0,0 +1,60 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleJournal handles the journal page (GET) with entries and stats,
+// and POST for rollback actions.
+func HandleJournal(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+
+	if r.Method == "POST" {
+		r.ParseForm()
+		action := r.FormValue("action")
+		if action == "rollback" {
+			services.APICall("/engine/journal/"+r.FormValue("id")+"/rollback", "POST", s.Token, nil)
+		}
+		http.Redirect(w, r, "/journal", http.StatusFound)
+		return
+	}
+
+	entries, _ := services.APICall("/engine/journal", "GET", s.Token, nil)
+	stats, _ := services.APICall("/engine/journal/stats/default", "GET", s.Token, nil)
+	if stats == nil {
+		stats = map[string]interface{}{}
+	}
+
+	var statsHTML string
+	statsHTML = fmt.Sprintf(`<div class="stats">
+<div class="stat"><div class="l">Total Entries</div><div class="v" style="color:var(--primary)">%d</div></div>
+<div class="stat"><div class="l">Actions Logged</div><div class="v" style="color:var(--success)">%d</div></div>
+<div class="stat"><div class="l">Rollbacks</div><div class="v" style="color:var(--warning)">%d</div></div></div>`,
+		templates.IntVal(stats, "totalEntries"), templates.IntVal(stats, "totalActions"), templates.IntVal(stats, "totalRollbacks"))
+
+	var tableHTML string
+	if entryList, ok := entries["entries"].([]interface{}); ok && len(entryList) > 0 {
+		rows := ""
+		for _, en := range entryList {
+			e := en.(map[string]interface{})
+			rollbackBtn := ""
+			if templates.StrVal(e, "status") != "rolled_back" {
+				rollbackBtn = fmt.Sprintf(`<form method="POST" action="/journal" style="display:inline"><input type="hidden" name="action" value="rollback"><input type="hidden" name="id" value="%s"><button class="btn btn-sm btn-d" type="submit">Rollback</button></form>`, templates.Esc(e["id"]))
+			}
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td style="color:var(--dim)">%s</td><td>%s</td><td style="font-size:12px;color:var(--muted)">%s</td><td>%s</td></tr>`,
+				templates.Esc(e["action"]), templates.Esc(e["agent"]), templates.Badge(templates.StrVal(e, "status")), templates.Esc(e["timestamp"]), rollbackBtn)
+		}
+		tableHTML = `<table><thead><tr><th>Action</th><th>Agent</th><th>Status</th><th>Time</th><th></th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		tableHTML = `<div class="empty"><div class="empty-i">📓</div>No journal entries yet</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Journal</h2><p class="desc">Immutable action log with rollback capability</p>
+%s<div class="card"><div class="ct">Journal Entries</div>%s</div>`, statsHTML, tableHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("journal", s.User, content))
+}

package/dashboards/go/handlers/messages.go

@@ -0,0 +1,59 @@
+package handlers
+
+import (
+	"agenticmail-dashboard/services"
+	"agenticmail-dashboard/templates"
+	"fmt"
+	"net/http"
+)
+
+// HandleMessages handles the messages page (GET) for listing messages,
+// and POST for sending new messages.
+func HandleMessages(w http.ResponseWriter, r *http.Request) {
+	s := services.GetSession(r)
+
+	if r.Method == "POST" {
+		r.ParseForm()
+		action := r.FormValue("action")
+		if action == "send" {
+			services.APICall("/engine/messages", "POST", s.Token, map[string]string{
+				"to": r.FormValue("to"), "subject": r.FormValue("subject"),
+				"body": r.FormValue("body"),
+			})
+		}
+		http.Redirect(w, r, "/messages", http.StatusFound)
+		return
+	}
+
+	data, _ := services.APICall("/engine/messages", "GET", s.Token, nil)
+
+	var tableHTML string
+	if msgList, ok := data["messages"].([]interface{}); ok && len(msgList) > 0 {
+		rows := ""
+		for _, mg := range msgList {
+			m := mg.(map[string]interface{})
+			rows += fmt.Sprintf(`<tr><td style="font-weight:600">%s</td><td style="color:var(--dim)">%s</td><td>%s</td><td>%s</td><td>%s</td><td>%s</td><td style="font-size:12px;color:var(--muted)">%s</td></tr>`,
+				templates.Esc(m["from"]), templates.Esc(m["to"]), templates.Esc(m["subject"]),
+				templates.DirectionBadge(templates.StrVal(m, "direction")),
+				templates.ChannelBadge(templates.StrVal(m, "channel")),
+				templates.Badge(templates.StrVal(m, "status")), templates.Esc(m["timestamp"]))
+		}
+		tableHTML = `<table><thead><tr><th>From</th><th>To</th><th>Subject</th><th>Direction</th><th>Channel</th><th>Status</th><th>Time</th></tr></thead><tbody>` + rows + `</tbody></table>`
+	} else {
+		tableHTML = `<div class="empty"><div class="empty-i">📬</div>No messages yet</div>`
+	}
+
+	content := fmt.Sprintf(`<h2 class="t">Messages</h2><p class="desc">View and send agent messages</p>
+<div class="card" style="margin-bottom:16px"><div class="ct">Send Message</div>
+<form method="POST" action="/messages">
+<input type="hidden" name="action" value="send">
+<div style="display:grid;grid-template-columns:1fr 1fr;gap:10px">
+<div class="fg"><label class="fl">To</label><input class="input" name="to" required placeholder="agent@example.com"></div>
+<div class="fg"><label class="fl">Subject</label><input class="input" name="subject" required placeholder="Message subject"></div></div>
+<div class="fg"><label class="fl">Body</label><textarea class="input" name="body" required rows="3" placeholder="Message content" style="resize:vertical"></textarea></div>
+<button class="btn btn-p" type="submit">Send</button></form></div>
+<div class="card"><div class="ct">Messages</div>%s</div>`, tableHTML)
+
+	w.Header().Set("Content-Type", "text/html")
+	fmt.Fprint(w, templates.Layout("messages", s.User, content))
+}