@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/java/templates/Components.java

@@ -0,0 +1,142 @@
+/**
+ * Components — Reusable HTML component builders: badges, stat cards, tables, modals, pagination.
+ */
+
+import java.util.*;
+
+public class Components {
+
+    // ─── Badges ─────────────────────────────────────────
+
+    public static String badge(String text) {
+        return badge(text, "default");
+    }
+
+    public static String badge(String text, String variant) {
+        return "<span class='badge badge-" + Helpers.esc(variant) + "'>" + Helpers.esc(text) + "</span>";
+    }
+
+    public static String statusBadge(String status) {
+        if (status == null) status = "unknown";
+        String v;
+        switch (status.toLowerCase()) {
+            case "active": case "enabled": case "running": case "success":
+                v = "success"; break;
+            case "archived": case "disabled": case "revoked":
+                v = "danger"; break;
+            case "pending": case "paused":
+                v = "warning"; break;
+            case "admin":
+                v = "primary"; break;
+            case "owner":
+                v = "owner"; break;
+            case "member":
+                v = "member"; break;
+            case "viewer":
+                v = "viewer"; break;
+            default:
+                v = "default"; break;
+        }
+        return badge(status, v);
+    }
+
+    public static String roleBadge(String role) {
+        if (role == null) role = "member";
+        String v;
+        switch (role.toLowerCase()) {
+            case "owner": v = "owner"; break;
+            case "admin": v = "primary"; break;
+            case "viewer": v = "viewer"; break;
+            default: v = "member"; break;
+        }
+        return badge(role, v);
+    }
+
+    // ─── Stat Card ──────────────────────────────────────
+
+    public static String statCard(String label, Object value, boolean pink) {
+        return String.format(
+            "<div class='stat-card'><div class='label'>%s</div><div class='value%s'>%s</div></div>",
+            Helpers.esc(label),
+            pink ? " pink" : "",
+            Helpers.esc(value)
+        );
+    }
+
+    public static String statCard(String label, Object value) {
+        return statCard(label, value, false);
+    }
+
+    // ─── Table Wrappers ─────────────────────────────────
+
+    public static String tableStart(String... headers) {
+        StringBuilder sb = new StringBuilder("<div class='table-wrap'><table><thead><tr>");
+        for (String h : headers) {
+            sb.append("<th>").append(Helpers.esc(h)).append("</th>");
+        }
+        sb.append("</tr></thead><tbody>");
+        return sb.toString();
+    }
+
+    public static String tableEnd() {
+        return "</tbody></table></div>";
+    }
+
+    // ─── Empty State ────────────────────────────────────
+
+    public static String empty(String icon, String message) {
+        return "<div class='empty'><span class='icon'>" + icon + "</span>" + Helpers.esc(message) + "</div>";
+    }
+
+    // ─── Modal (confirm dialogs) ────────────────────────
+
+    public static String confirmForm(String action, String buttonText, String confirmMessage) {
+        return String.format(
+            "<form method='POST' action='%s' style='display:inline' onsubmit=\"return confirm('%s')\">" +
+            "<button class='btn btn-sm btn-danger' type='submit'>%s</button></form>",
+            Helpers.esc(action),
+            Helpers.esc(confirmMessage).replace("'", "\\'"),
+            Helpers.esc(buttonText)
+        );
+    }
+
+    // ─── Pagination ─────────────────────────────────────
+
+    public static String pagination(String baseUrl, int page, int limit, int totalEvents, int currentCount) {
+        StringBuilder sb = new StringBuilder("<div class='pagination'>");
+        if (page > 1) {
+            sb.append("<a href='").append(baseUrl).append("?page=").append(page - 1).append("'>&laquo; Previous</a>");
+        }
+        sb.append("<span class='current'>Page ").append(page).append("</span>");
+        if (currentCount >= limit) {
+            sb.append("<a href='").append(baseUrl).append("?page=").append(page + 1).append("'>Next &raquo;</a>");
+        }
+        sb.append("<span style='color:var(--text-muted);font-size:12px;margin-left:auto'>")
+          .append(totalEvents).append(" total events</span>");
+        sb.append("</div>");
+        return sb.toString();
+    }
+
+    // ─── Page Header ────────────────────────────────────
+
+    public static String pageHeader(String title, String description) {
+        return "<div class='page-header'><h1>" + Helpers.esc(title) + "</h1><p>" + Helpers.esc(description) + "</p></div>";
+    }
+
+    // ─── Card Wrappers ──────────────────────────────────
+
+    public static String cardStart(String title) {
+        return "<div class='card'><h3>" + Helpers.esc(title) + "</h3>";
+    }
+
+    public static String cardEnd() {
+        return "</div>";
+    }
+
+    // ─── Key Banner (show-once API key) ─────────────────
+
+    public static String keyBanner(String key) {
+        return "<div class='key-banner'>Your new API key (shown only once — copy it now):<code>" +
+            Helpers.esc(key) + "</code></div>";
+    }
+}

package/dashboards/java/templates/Helpers.java

@@ -0,0 +1,106 @@
+/**
+ * Helpers — Utility methods: HTML escaping, time formatting, safe map access.
+ */
+
+import java.time.*;
+import java.time.format.DateTimeFormatter;
+import java.util.*;
+
+public class Helpers {
+
+    // ─── HTML Escaping ──────────────────────────────────
+
+    public static String esc(Object v) {
+        if (v == null) return "";
+        return v.toString()
+            .replace("&", "&")
+            .replace("<", "&lt;")
+            .replace(">", "&gt;")
+            .replace("\"", "&quot;")
+            .replace("'", "&#39;");
+    }
+
+    // ─── Safe Map Access ────────────────────────────────
+
+    public static int intVal(Map<String, Object> m, String key) {
+        if (m == null) return 0;
+        Object v = m.get(key);
+        if (v instanceof Number) return ((Number) v).intValue();
+        if (v instanceof String) {
+            try { return Integer.parseInt((String) v); }
+            catch (NumberFormatException e) { return 0; }
+        }
+        return 0;
+    }
+
+    public static String strVal(Map<String, Object> m, String key) {
+        if (m == null) return "";
+        Object v = m.get(key);
+        return v != null ? v.toString() : "";
+    }
+
+    @SuppressWarnings("unchecked")
+    public static List<Map<String, Object>> listVal(Map<String, Object> m, String key) {
+        if (m == null) return List.of();
+        Object v = m.get(key);
+        if (v instanceof List) return (List<Map<String, Object>>) v;
+        return List.of();
+    }
+
+    @SuppressWarnings("unchecked")
+    public static Map<String, Object> mapVal(Map<String, Object> m, String key) {
+        if (m == null) return Map.of();
+        Object v = m.get(key);
+        if (v instanceof Map) return (Map<String, Object>) v;
+        return Map.of();
+    }
+
+    // ─── Time Formatting ────────────────────────────────
+
+    public static String timeAgo(Object isoVal) {
+        if (isoVal == null) return "N/A";
+        String iso = isoVal.toString();
+        if (iso.isEmpty()) return "N/A";
+        try {
+            Instant then;
+            try {
+                then = Instant.parse(iso);
+            } catch (Exception e) {
+                then = LocalDateTime.parse(iso, DateTimeFormatter.ISO_LOCAL_DATE_TIME)
+                    .atZone(ZoneId.systemDefault()).toInstant();
+            }
+            long diffSec = Duration.between(then, Instant.now()).getSeconds();
+            if (diffSec < 0) diffSec = 0;
+            if (diffSec < 60) return diffSec + "s ago";
+            if (diffSec < 3600) return (diffSec / 60) + "m ago";
+            if (diffSec < 86400) return (diffSec / 3600) + "h ago";
+            return (diffSec / 86400) + "d ago";
+        } catch (Exception e) {
+            return iso;
+        }
+    }
+
+    // ─── Query String Parsing ───────────────────────────
+
+    public static Map<String, String> parseQuery(String query) {
+        Map<String, String> params = new LinkedHashMap<>();
+        if (query == null || query.isEmpty()) return params;
+        for (String pair : query.split("&")) {
+            String[] kv = pair.split("=", 2);
+            if (kv.length == 2) {
+                params.put(kv[0], kv[1]);
+            } else if (kv.length == 1) {
+                params.put(kv[0], "");
+            }
+        }
+        return params;
+    }
+
+    public static int queryInt(String query, String key, int defaultVal) {
+        Map<String, String> params = parseQuery(query);
+        String val = params.get(key);
+        if (val == null) return defaultVal;
+        try { return Integer.parseInt(val); }
+        catch (NumberFormatException e) { return defaultVal; }
+    }
+}

package/dashboards/java/templates/Layout.java

@@ -0,0 +1,98 @@
+/**
+ * Layout — Full page layout, login page, sidebar navigation, CSS link.
+ */
+
+import java.util.*;
+
+public class Layout {
+
+    // ─── Sidebar Nav Item ───────────────────────────────
+
+    private static String navItem(String href, String icon, String label, String activePage) {
+        String cls = activePage.equals(href) ? " active" : "";
+        return String.format(
+            "<a href='%s' class='%s'>%s <span>%s</span></a>",
+            href, cls, icon, Helpers.esc(label)
+        );
+    }
+
+    // ─── Main Layout ────────────────────────────────────
+
+    public static String layout(String activePage, Map<String, Object> user, String flash, String content) {
+        String userName = user != null ? Helpers.esc(user.getOrDefault("name", user.getOrDefault("email", "Admin"))) : "Admin";
+        String userEmail = user != null ? Helpers.esc(user.getOrDefault("email", "")) : "";
+
+        return "<!DOCTYPE html><html lang='en'><head>" +
+            "<meta charset='UTF-8'><meta name='viewport' content='width=device-width,initial-scale=1'>" +
+            "<title>AgenticMail Enterprise - Java</title>" +
+            "<link rel='stylesheet' href='/static/styles.css'>" +
+            "</head><body>" +
+            "<aside class='sidebar'>" +
+            "<div class='sidebar-brand'>&#127970; AgenticMail Enterprise<small>Admin Dashboard &middot; Java</small></div>" +
+            "<nav class='sidebar-nav'>" +
+            navItem("/", "&#128202;", "Dashboard", activePage) +
+            navItem("/agents", "&#129302;", "Agents", activePage) +
+            navItem("/users", "&#128101;", "Users", activePage) +
+            navItem("/api-keys", "&#128273;", "API Keys", activePage) +
+            navItem("/audit", "&#128220;", "Audit Log", activePage) +
+            navItem("/settings", "&#9881;&#65039;", "Settings", activePage) +
+            "<div class='sidebar-section'>Management</div>" +
+            navItem("/messages", "&#128231;", "Messages", activePage) +
+            navItem("/guardrails", "&#128737;", "Guardrails", activePage) +
+            navItem("/journal", "&#128214;", "Journal", activePage) +
+            "<div class='sidebar-section'>Security</div>" +
+            navItem("/dlp", "&#128274;", "DLP", activePage) +
+            navItem("/compliance", "&#128203;", "Compliance", activePage) +
+            "<div class='sidebar-section'>System</div>" +
+            navItem("/vault", "&#128272;", "Vault", activePage) +
+            navItem("/skills", "&#9889;", "Skills", activePage) +
+            "</nav>" +
+            "<div class='sidebar-footer'>" +
+            "<div style='margin-bottom:4px'>" + userName + "</div>" +
+            "<div style='font-size:11px;color:var(--text-muted);margin-bottom:6px'>" + userEmail + "</div>" +
+            "<a href='/logout'>Sign out</a>" +
+            " &middot; " +
+            "<button class='theme-toggle' onclick=\"toggleTheme()\" title='Toggle dark mode'>&#127763;</button>" +
+            "</div>" +
+            "</aside>" +
+            "<main class='main'>" +
+            flash +
+            content +
+            "</main>" +
+            "<script>" +
+            "if(localStorage.getItem('dark')==='1')document.documentElement.setAttribute('data-theme','dark');" +
+            "function toggleTheme(){var d=document.documentElement;if(d.getAttribute('data-theme')==='dark'){d.removeAttribute('data-theme');localStorage.removeItem('dark')}else{d.setAttribute('data-theme','dark');localStorage.setItem('dark','1')}}" +
+            "</script>" +
+            "</body></html>";
+    }
+
+    // ─── Login Page ─────────────────────────────────────
+
+    public static String loginPage(String error) {
+        String errorHtml = "";
+        if (error != null && !error.isEmpty()) {
+            errorHtml = "<div class='login-error'>" + Helpers.esc(error) + "</div>";
+        }
+
+        return "<!DOCTYPE html><html lang='en'><head>" +
+            "<meta charset='UTF-8'><meta name='viewport' content='width=device-width,initial-scale=1'>" +
+            "<title>Sign In - AgenticMail Enterprise</title>" +
+            "<link rel='stylesheet' href='/static/styles.css'>" +
+            "</head><body class='login-screen'>" +
+            "<div class='login-box'>" +
+            "<h1>&#127970; AgenticMail Enterprise</h1>" +
+            "<p class='subtitle'>Admin Dashboard &middot; Java</p>" +
+            "<div class='login-card'>" +
+            errorHtml +
+            "<form method='POST' action='/login'>" +
+            "<div class='form-group'><label>Email</label>" +
+            "<input type='email' name='email' required autofocus placeholder='admin@company.com'></div>" +
+            "<div class='form-group'><label>Password</label>" +
+            "<input type='password' name='password' required placeholder='Enter password'></div>" +
+            "<button class='btn btn-primary btn-block' type='submit'>Sign In</button>" +
+            "</form>" +
+            "</div></div>" +
+            "<script>if(localStorage.getItem('dark')==='1')document.documentElement.setAttribute('data-theme','dark');</script>" +
+            "</body></html>";
+    }
+}

package/dashboards/laravel/controllers/AgentController.php

@@ -0,0 +1,250 @@
+<?php
+/**
+ * AgentController — list, create, and archive agents.
+ */
+class AgentController
+{
+    /**
+     * List all agents.
+     */
+    public function index(): void
+    {
+        $agents = Api::request('GET', '/api/agents');
+
+        $title   = 'Agents';
+        $page    = 'agents';
+        $content = $this->render($agents);
+        include __DIR__ . '/../views/layout.php';
+    }
+
+    /**
+     * Create a new agent.
+     */
+    public function store(): void
+    {
+        $payload = [
+            'name'        => $_POST['name'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'provider'    => $_POST['provider'] ?? 'anthropic',
+        ];
+        $soulId = $_POST['soul_id'] ?? '';
+        if (!empty($soulId)) {
+            $payload['soul_id'] = $soulId;
+        }
+        $persona = [
+            'gender' => $_POST['gender'] ?: null,
+            'dateOfBirth' => !empty($_POST['date_of_birth']) ? $_POST['date_of_birth'] : null,
+            'maritalStatus' => $_POST['marital_status'] ?: null,
+            'culturalBackground' => $_POST['cultural_background'] ?: null,
+            'language' => $_POST['language'] ?: null,
+            'traits' => [
+                'communication' => $_POST['trait_communication'] ?? 'direct',
+                'detail' => $_POST['trait_detail'] ?? 'detail-oriented',
+                'energy' => $_POST['trait_energy'] ?? 'calm',
+                'humor' => $_POST['humor'] ?? 'warm',
+                'formality' => $_POST['formality'] ?? 'adaptive',
+                'empathy' => $_POST['empathy'] ?? 'moderate',
+                'patience' => $_POST['patience'] ?? 'patient',
+                'creativity' => $_POST['creativity'] ?? 'creative',
+            ],
+        ];
+        $payload['persona'] = $persona;
+        $res = Api::request('POST', '/api/agents', $payload);
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent created successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error creating agent.', 'danger');
+        }
+        Helpers::redirect('/agents');
+    }
+
+    /**
+     * Archive an agent by ID.
+     */
+    public function archive(string $id): void
+    {
+        $res = Api::request('DELETE', '/api/agents/' . urlencode($id));
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent archived successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error archiving agent.', 'danger');
+        }
+        Helpers::redirect('/agents');
+    }
+
+    /**
+     * Show a single agent's detail page.
+     */
+    public function show(string $id): void
+    {
+        $agent = Api::request('GET', '/api/agents/' . urlencode($id));
+
+        // Fetch activity data
+        $events = [];
+        $tool_calls = [];
+        $journal_entries = [];
+        try {
+            $evRes = Api::request('GET', '/api/engine/activity/events?agentId=' . urlencode($id) . '&limit=50');
+            $events = Api::ok($evRes) ? Api::items($evRes) : [];
+        } catch (\Exception $ex) { /* ignore */ }
+        try {
+            $tcRes = Api::request('GET', '/api/engine/activity/tool-calls?agentId=' . urlencode($id) . '&limit=50');
+            $tool_calls = Api::ok($tcRes) ? Api::items($tcRes) : [];
+        } catch (\Exception $ex) { /* ignore */ }
+        try {
+            $jRes = Api::request('GET', '/api/engine/journal?agentId=' . urlencode($id) . '&orgId=default&limit=50');
+            $journal_entries = Api::ok($jRes) ? Api::items($jRes) : [];
+        } catch (\Exception $ex) { /* ignore */ }
+
+        // Fetch tool security data
+        $toolSecData = [];
+        try {
+            $toolSecData = Api::request('GET', '/engine/agents/' . urlencode($id) . '/tool-security');
+        } catch (\Exception $ex) { /* ignore */ }
+
+        $title   = 'Agent Detail';
+        $page    = 'agents';
+        $content = $this->renderDetail($agent, $id, $events, $tool_calls, $journal_entries, $toolSecData);
+        include __DIR__ . '/../views/layout.php';
+    }
+
+    /**
+     * Save agent-level tool security overrides.
+     */
+    public function saveToolSecurity(string $id): void
+    {
+        $parseList = function(string $field): array {
+            $val = trim($_POST[$field] ?? '');
+            if ($val === '') return [];
+            return array_values(array_filter(array_map('trim', explode(',', $val))));
+        };
+
+        $body = [
+            'toolSecurity' => [
+                'security' => [
+                    'pathSandbox' => [
+                        'enabled' => isset($_POST['ps_enabled']),
+                        'allowedDirs' => $parseList('ps_allowedDirs'),
+                        'blockedPatterns' => $parseList('ps_blockedPatterns'),
+                    ],
+                    'ssrf' => [
+                        'enabled' => isset($_POST['ssrf_enabled']),
+                        'allowedHosts' => $parseList('ssrf_allowedHosts'),
+                        'blockedCidrs' => $parseList('ssrf_blockedCidrs'),
+                    ],
+                    'commandSanitizer' => [
+                        'enabled' => isset($_POST['cs_enabled']),
+                        'mode' => $_POST['cs_mode'] ?? 'blocklist',
+                        'allowedCommands' => $parseList('cs_allowedCommands'),
+                        'blockedPatterns' => $parseList('cs_blockedPatterns'),
+                    ],
+                ],
+                'middleware' => [
+                    'audit' => [
+                        'enabled' => isset($_POST['audit_enabled']),
+                        'redactKeys' => $parseList('audit_redactKeys'),
+                    ],
+                    'rateLimit' => [
+                        'enabled' => isset($_POST['rl_enabled']),
+                    ],
+                    'circuitBreaker' => [
+                        'enabled' => isset($_POST['cb_enabled']),
+                    ],
+                    'telemetry' => [
+                        'enabled' => isset($_POST['tel_enabled']),
+                    ],
+                ],
+            ],
+            'updatedBy' => 'dashboard',
+        ];
+
+        $res = Api::request('PATCH', '/engine/agents/' . urlencode($id) . '/tool-security', $body);
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent tool security saved successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error saving agent tool security.', 'danger');
+        }
+        Helpers::redirect('/agents/' . urlencode($id));
+    }
+
+    /**
+     * Reset agent-level tool security to org defaults.
+     */
+    public function resetToolSecurity(string $id): void
+    {
+        $res = Api::request('PATCH', '/engine/agents/' . urlencode($id) . '/tool-security', [
+            'toolSecurity' => (object)[],
+            'updatedBy' => 'dashboard',
+        ]);
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent tool security reset to org defaults.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error resetting agent tool security.', 'danger');
+        }
+        Helpers::redirect('/agents/' . urlencode($id));
+    }
+
+    /**
+     * Deploy an agent by ID.
+     */
+    public function deploy(string $id): void
+    {
+        $res = Api::request('POST', '/engine/agents/' . urlencode($id) . '/deploy');
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent deployed successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error deploying agent.', 'danger');
+        }
+        Helpers::redirect('/agents/' . urlencode($id));
+    }
+
+    /**
+     * Stop an agent by ID.
+     */
+    public function stop(string $id): void
+    {
+        $res = Api::request('POST', '/engine/agents/' . urlencode($id) . '/stop');
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent stopped successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error stopping agent.', 'danger');
+        }
+        Helpers::redirect('/agents/' . urlencode($id));
+    }
+
+    /**
+     * Restart an agent by ID.
+     */
+    public function restart(string $id): void
+    {
+        $res = Api::request('POST', '/engine/agents/' . urlencode($id) . '/restart');
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('Agent restarted successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error restarting agent.', 'danger');
+        }
+        Helpers::redirect('/agents/' . urlencode($id));
+    }
+
+    private function render(array $agents): string
+    {
+        ob_start();
+        $items = Api::items($agents);
+        include __DIR__ . '/../views/agents.php';
+        return ob_get_clean();
+    }
+
+    private function renderDetail(array $agent, string $agentId, array $events = [], array $tool_calls = [], array $journal_entries = [], array $toolSecData = []): string
+    {
+        ob_start();
+        include __DIR__ . '/../views/agent-detail.php';
+        return ob_get_clean();
+    }
+}

package/dashboards/laravel/controllers/ApiKeyController.php

@@ -0,0 +1,73 @@
+<?php
+/**
+ * ApiKeyController — list, create, and revoke API keys.
+ */
+class ApiKeyController
+{
+    /**
+     * List all API keys.
+     */
+    public function index(): void
+    {
+        $keys = Api::request('GET', '/api/api-keys');
+
+        // Check for a newly created key in the session (show-once banner)
+        $newKey = null;
+        if (isset($_SESSION['new_api_key'])) {
+            $newKey = $_SESSION['new_api_key'];
+            unset($_SESSION['new_api_key']);
+        }
+
+        $title   = 'API Keys';
+        $page    = 'api-keys';
+        $content = $this->render($keys, $newKey);
+        include __DIR__ . '/../views/layout.php';
+    }
+
+    /**
+     * Create a new API key.
+     */
+    public function store(): void
+    {
+        $payload = [
+            'name'   => $_POST['name'] ?? '',
+            'scopes' => $_POST['scopes'] ?? 'read',
+        ];
+        $res = Api::request('POST', '/api/api-keys', $payload);
+
+        if (Api::ok($res)) {
+            // Store the full key for show-once banner display
+            $fullKey = $res['key'] ?? $res['api_key'] ?? $res['token'] ?? null;
+            if ($fullKey) {
+                $_SESSION['new_api_key'] = $fullKey;
+            }
+            Helpers::setFlash('API key created successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error creating API key.', 'danger');
+        }
+        Helpers::redirect('/api-keys');
+    }
+
+    /**
+     * Revoke an API key by ID.
+     */
+    public function revoke(string $id): void
+    {
+        $res = Api::request('DELETE', '/api/api-keys/' . urlencode($id));
+
+        if (Api::ok($res)) {
+            Helpers::setFlash('API key revoked successfully.', 'success');
+        } else {
+            Helpers::setFlash($res['message'] ?? 'Error revoking API key.', 'danger');
+        }
+        Helpers::redirect('/api-keys');
+    }
+
+    private function render(array $keys, ?string $newKey): string
+    {
+        ob_start();
+        $items = Api::items($keys);
+        include __DIR__ . '/../views/api-keys.php';
+        return ob_get_clean();
+    }
+}