@agenticmail/enterprise 0.3.2 → 0.4.0

package/dashboards/rails/routes/guardrails.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+# Guardrails Controller
+
+get '/guardrails' do
+  require_auth!
+  status_res = api_get('/engine/guardrails/status')
+  interventions_res = api_get('/engine/guardrails/interventions')
+  rules_res = api_get('/engine/anomaly-rules')
+  @guardrail_status = status_res[:status] == 200 ? status_res[:body] : {}
+  @interventions = interventions_res[:status] == 200 ? (interventions_res[:body]['interventions'] || interventions_res[:body]) : []
+  @interventions = @interventions.is_a?(Array) ? @interventions : []
+  @anomaly_rules = rules_res[:status] == 200 ? (rules_res[:body]['rules'] || rules_res[:body]) : []
+  @anomaly_rules = @anomaly_rules.is_a?(Array) ? @anomaly_rules : []
+  erb :guardrails
+end
+
+post '/guardrails/pause' do
+  require_auth!
+  res = api_post('/engine/guardrails/pause', {})
+  set_flash(res[:status] < 300 ? 'Guardrails paused' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/guardrails'
+end
+
+post '/guardrails/resume' do
+  require_auth!
+  res = api_post('/engine/guardrails/resume', {})
+  set_flash(res[:status] < 300 ? 'Guardrails resumed' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/guardrails'
+end
+
+post '/guardrails/kill' do
+  require_auth!
+  res = api_post('/engine/guardrails/kill', {})
+  set_flash(res[:status] < 300 ? 'Guardrails killed' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/guardrails'
+end
+
+post '/anomaly-rules' do
+  require_auth!
+  res = api_post('/engine/anomaly-rules', { name: params[:name], condition: params[:condition], threshold: params[:threshold], action: params[:action] })
+  set_flash(res[:status] < 300 ? 'Anomaly rule created' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/guardrails'
+end
+
+post '/anomaly-rules/:id/delete' do
+  require_auth!
+  res = api_delete("/engine/anomaly-rules/#{params[:id]}")
+  set_flash(res[:status] < 300 ? 'Anomaly rule deleted' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/guardrails'
+end

package/dashboards/rails/routes/journal.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+# Journal Controller
+
+get '/journal' do
+  require_auth!
+  @page = (params[:page] || 1).to_i
+  @limit = 25
+  offset = (@page - 1) * @limit
+  stats_res = api_get('/engine/journal/stats/default')
+  entries_res = api_get("/engine/journal?limit=#{@limit}&offset=#{offset}")
+  @stats = stats_res[:status] == 200 ? stats_res[:body] : {}
+  body = entries_res[:status] == 200 ? entries_res[:body] : {}
+  @entries = body.is_a?(Hash) ? (body['entries'] || body['journal'] || []) : (body.is_a?(Array) ? body : [])
+  @total = body.is_a?(Hash) ? (body['total'] || @entries.size) : @entries.size
+  erb :journal
+end
+
+post '/journal/:id/rollback' do
+  require_auth!
+  res = api_post("/engine/journal/#{params[:id]}/rollback", {})
+  set_flash(res[:status] < 300 ? 'Entry rolled back' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/journal'
+end

package/dashboards/rails/routes/messages.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# Messages Controller
+
+get '/messages' do
+  require_auth!
+  @page = (params[:page] || 1).to_i
+  @limit = 25
+  offset = (@page - 1) * @limit
+  res = api_get("/engine/messages?limit=#{@limit}&offset=#{offset}")
+  body = res[:status] == 200 ? res[:body] : {}
+  @messages = body.is_a?(Hash) ? (body['messages'] || []) : (body.is_a?(Array) ? body : [])
+  @total = body.is_a?(Hash) ? (body['total'] || @messages.size) : @messages.size
+  erb :messages
+end
+
+post '/messages' do
+  require_auth!
+  res = api_post('/engine/messages', { to: params[:to], subject: params[:subject], body: params[:body_text] })
+  set_flash(res[:status] < 300 ? 'Message sent' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/messages'
+end

package/dashboards/rails/routes/settings.rb

@@ -0,0 +1,196 @@
+# frozen_string_literal: true
+
+# Settings Controller
+
+get '/settings' do
+  require_auth!
+  res = api_get('/api/settings')
+  @settings = res[:status] == 200 ? res[:body] : {}
+
+  # Fetch tool security config
+  ts_res = api_get('/api/settings/tool-security')
+  @tool_security = ts_res[:status] == 200 ? (ts_res[:body]['toolSecurityConfig'] || ts_res[:body]) : {}
+
+  # Fetch firewall config
+  fw_res = api_get('/api/settings/firewall')
+  @firewall = fw_res[:status] == 200 ? (fw_res[:body]['firewallConfig'] || fw_res[:body]) : {}
+
+  # Fetch model pricing config
+  mp_res = api_get('/api/settings/model-pricing')
+  @model_pricing = mp_res[:status] == 200 ? (mp_res[:body]['modelPricingConfig'] || mp_res[:body]) : {}
+
+  erb :settings
+end
+
+post '/settings' do
+  require_auth!
+  payload = {}
+  %w[org_name default_model max_agents rate_limit webhook_url].each do |k|
+    payload[k] = params[k] if params[k] && !params[k].empty?
+  end
+  res = api_patch('/api/settings', payload)
+  set_flash(res[:status] < 300 ? 'Settings updated' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/settings'
+end
+
+# Tool Security settings — save org-wide config
+post '/settings/tool-security' do
+  require_auth!
+
+  security = {
+    'pathSandbox' => {
+      'enabled' => params['path_sandbox_enabled'] == 'on',
+      'allowedDirs' => (params['path_sandbox_allowed_dirs'] || '').split(',').map(&:strip).reject(&:empty?),
+      'blockedPatterns' => (params['path_sandbox_blocked_patterns'] || '').split(',').map(&:strip).reject(&:empty?)
+    },
+    'ssrf' => {
+      'enabled' => params['ssrf_enabled'] == 'on',
+      'allowedHosts' => (params['ssrf_allowed_hosts'] || '').split(',').map(&:strip).reject(&:empty?),
+      'blockedCidrs' => (params['ssrf_blocked_cidrs'] || '').split(',').map(&:strip).reject(&:empty?)
+    },
+    'commandSanitizer' => {
+      'enabled' => params['command_sanitizer_enabled'] == 'on',
+      'mode' => params['command_sanitizer_mode'] || 'blocklist',
+      'allowedCommands' => (params['command_sanitizer_allowed'] || '').split(',').map(&:strip).reject(&:empty?),
+      'blockedPatterns' => (params['command_sanitizer_blocked'] || '').split(',').map(&:strip).reject(&:empty?)
+    }
+  }
+
+  middleware = {
+    'audit' => {
+      'enabled' => params['audit_enabled'] == 'on',
+      'redactKeys' => (params['audit_redact_keys'] || '').split(',').map(&:strip).reject(&:empty?)
+    },
+    'rateLimit' => {
+      'enabled' => params['rate_limit_mw_enabled'] == 'on',
+      'overrides' => {}
+    },
+    'circuitBreaker' => {
+      'enabled' => params['circuit_breaker_enabled'] == 'on'
+    },
+    'telemetry' => {
+      'enabled' => params['telemetry_enabled'] == 'on'
+    }
+  }
+
+  payload = { 'security' => security, 'middleware' => middleware }
+  res = api_put('/api/settings/tool-security', payload)
+  set_flash(res[:status] < 300 ? 'Tool security settings saved' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/settings'
+end
+
+# Network & Firewall settings — save config
+post '/settings/firewall' do
+  require_auth!
+
+  ip_access = {
+    'enabled' => params['fw_ip_enabled'] == 'on',
+    'mode' => params['fw_ip_mode'] || 'allowlist',
+    'allowlist' => (params['fw_ip_allowlist'] || '').split(',').map(&:strip).reject(&:empty?),
+    'blocklist' => (params['fw_ip_blocklist'] || '').split(',').map(&:strip).reject(&:empty?),
+    'bypassPaths' => (params['fw_ip_bypass_paths'] || '').split(',').map(&:strip).reject(&:empty?)
+  }
+
+  egress = {
+    'enabled' => params['fw_egress_enabled'] == 'on',
+    'mode' => params['fw_egress_mode'] || 'blocklist',
+    'allowedHosts' => (params['fw_egress_allowed_hosts'] || '').split(',').map(&:strip).reject(&:empty?),
+    'blockedHosts' => (params['fw_egress_blocked_hosts'] || '').split(',').map(&:strip).reject(&:empty?),
+    'allowedPorts' => (params['fw_egress_allowed_ports'] || '').split(',').map(&:strip).reject(&:empty?).map(&:to_i),
+    'blockedPorts' => (params['fw_egress_blocked_ports'] || '').split(',').map(&:strip).reject(&:empty?).map(&:to_i)
+  }
+
+  proxy = {
+    'httpProxy' => params['fw_proxy_http'] || '',
+    'httpsProxy' => params['fw_proxy_https'] || '',
+    'noProxy' => (params['fw_proxy_no_proxy'] || '').split(',').map(&:strip).reject(&:empty?)
+  }
+
+  trusted_proxies = {
+    'enabled' => params['fw_trusted_proxies_enabled'] == 'on',
+    'ips' => (params['fw_trusted_proxies_ips'] || '').split(',').map(&:strip).reject(&:empty?)
+  }
+
+  rate_limit = {
+    'enabled' => params['fw_rate_limit_enabled'] == 'on',
+    'requestsPerMinute' => (params['fw_rate_limit_rpm'] || '120').to_i,
+    'skipPaths' => (params['fw_rate_limit_skip_paths'] || '').split(',').map(&:strip).reject(&:empty?)
+  }
+
+  network = {
+    'corsOrigins' => (params['fw_cors_origins'] || '').split(',').map(&:strip).reject(&:empty?),
+    'rateLimit' => rate_limit,
+    'httpsEnforcement' => {
+      'enabled' => params['fw_https_enabled'] == 'on',
+      'excludePaths' => (params['fw_https_exclude_paths'] || '').split(',').map(&:strip).reject(&:empty?)
+    },
+    'securityHeaders' => {
+      'hsts' => params['fw_hsts_enabled'] == 'on',
+      'hstsMaxAge' => (params['fw_hsts_max_age'] || '31536000').to_i,
+      'xFrameOptions' => params['fw_x_frame_options'] || 'DENY',
+      'xContentTypeOptions' => params['fw_x_content_type_options'] == 'on',
+      'referrerPolicy' => params['fw_referrer_policy'] || 'strict-origin-when-cross-origin',
+      'permissionsPolicy' => params['fw_permissions_policy'] || 'camera=(), microphone=(), geolocation=()'
+    }
+  }
+
+  payload = {
+    'ipAccess' => ip_access,
+    'egress' => egress,
+    'proxy' => proxy,
+    'trustedProxies' => trusted_proxies,
+    'network' => network
+  }
+
+  res = api_put('/api/settings/firewall', payload)
+  set_flash(res[:status] < 300 ? 'Network & firewall settings saved' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/settings'
+end
+
+# Model Pricing settings — save config
+post '/settings/model-pricing' do
+  require_auth!
+
+  # Collect existing models from hidden fields
+  models = []
+  idx = 0
+  while params["model_provider_#{idx}"]
+    models << {
+      'provider' => params["model_provider_#{idx}"],
+      'modelId' => params["model_id_#{idx}"],
+      'displayName' => params["model_display_name_#{idx}"] || '',
+      'inputCostPerMillion' => (params["model_input_cost_#{idx}"] || '0').to_f,
+      'outputCostPerMillion' => (params["model_output_cost_#{idx}"] || '0').to_f,
+      'contextWindow' => (params["model_context_window_#{idx}"] || '0').to_i
+    }
+    idx += 1
+  end
+
+  # Check if a new model is being added
+  if params['new_model_provider'] && !params['new_model_provider'].empty? &&
+     params['new_model_id'] && !params['new_model_id'].empty?
+    models << {
+      'provider' => params['new_model_provider'],
+      'modelId' => params['new_model_id'],
+      'displayName' => params['new_model_display_name'] || '',
+      'inputCostPerMillion' => (params['new_model_input_cost'] || '0').to_f,
+      'outputCostPerMillion' => (params['new_model_output_cost'] || '0').to_f,
+      'contextWindow' => (params['new_model_context_window'] || '0').to_i
+    }
+  end
+
+  # Check if a model should be removed
+  if params['remove_model_index']
+    remove_idx = params['remove_model_index'].to_i
+    models.delete_at(remove_idx)
+  end
+
+  payload = {
+    'models' => models,
+    'currency' => params['mp_currency'] || 'USD'
+  }
+
+  res = api_put('/api/settings/model-pricing', payload)
+  set_flash(res[:status] < 300 ? 'Model pricing settings saved' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/settings'
+end

package/dashboards/rails/routes/skills.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+# Skills Controller
+
+get '/skills' do
+  require_auth!
+  categories_res = api_get('/engine/skills/by-category')
+  @categories = categories_res[:status] == 200 ? (categories_res[:body]['categories'] || categories_res[:body]) : {}
+  @categories = @categories.is_a?(Hash) ? @categories : {}
+  installed_res = api_get('/engine/community/installed?orgId=default')
+  @installed = installed_res[:status] == 200 ? (installed_res[:body]['skills'] || installed_res[:body]) : []
+  @installed = @installed.is_a?(Array) ? @installed : []
+  erb :skills
+end
+
+post '/skills/enable' do
+  require_auth!
+  skill_id = params[:skill_id]
+  res = api_post("/engine/community/#{skill_id}/enable", {})
+  set_flash(res[:status] < 300 ? 'Skill enabled' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/skills'
+end
+
+post '/skills/disable' do
+  require_auth!
+  skill_id = params[:skill_id]
+  res = api_post("/engine/community/#{skill_id}/disable", {})
+  set_flash(res[:status] < 300 ? 'Skill disabled' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/skills'
+end
+
+post '/skills/uninstall' do
+  require_auth!
+  skill_id = params[:skill_id]
+  res = api_delete("/engine/community/#{skill_id}")
+  set_flash(res[:status] < 300 ? 'Skill uninstalled' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/skills'
+end

package/dashboards/rails/routes/users.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# Users Controller
+
+get '/users' do
+  require_auth!
+  res = api_get('/api/users')
+  @users = res[:status] == 200 ? (res[:body]['users'] || res[:body]) : []
+  @users = @users.is_a?(Array) ? @users : []
+  erb :users
+end
+
+post '/users' do
+  require_auth!
+  res = api_post('/api/users', { name: params[:name], email: params[:email], role: params[:role] })
+  set_flash(res[:status] < 300 ? 'User created' : (res[:body]['error'] || 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/users'
+end

package/dashboards/rails/routes/vault.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+# Vault Controller
+
+get '/vault' do
+  require_auth!
+  res = api_get('/api/engine/vault/secrets?orgId=default')
+  @secrets = res[:status] == 200 ? (res[:body]['secrets'] || res[:body]) : []
+  @secrets = @secrets.is_a?(Array) ? @secrets : []
+  erb :vault
+end
+
+post '/vault' do
+  require_auth!
+  res = api_post('/api/engine/vault/secrets', {
+    name: params[:name],
+    value: params[:value],
+    category: params[:category] || 'custom',
+    orgId: 'default'
+  })
+  set_flash(res[:status] < 300 ? 'Secret added' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/vault'
+end
+
+post '/vault/:id/delete' do
+  require_auth!
+  res = api_delete("/api/engine/vault/secrets/#{params[:id]}")
+  set_flash(res[:status] < 300 ? 'Secret deleted' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/vault'
+end
+
+post '/vault/:id/rotate' do
+  require_auth!
+  res = api_post("/api/engine/vault/secrets/#{params[:id]}/rotate", {})
+  set_flash(res[:status] < 300 ? 'Secret encryption rotated' : (res[:body].is_a?(Hash) ? res[:body]['error'] || 'Failed' : 'Failed'), res[:status] < 300 ? 'success' : 'danger')
+  redirect '/vault'
+end