@agenticmail/enterprise 0.5.12 → 0.5.14

package/dist/cli.js

@@ -48,7 +48,7 @@ Skill Development:
     break;
   case "setup":
   default:
-    import("./setup-SZPCU3TC.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-UH5AXHZX.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/dashboard/pages/agents.js

@@ -244,12 +244,20 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
   const [selectedSoul, setSelectedSoul] = useState(null);
   const [previewOpen, setPreviewOpen] = useState(false);
   const [loading, setLoading] = useState(false);
+  const [showSetupGuide, setShowSetupGuide] = useState(false);
+  const [setupChecked, setSetupChecked] = useState(false);
 
   useEffect(() => {
     engineCall('/skills/by-category').then(d => setAllSkills(d.categories || {})).catch(() => {});
     engineCall('/profiles/presets').then(d => setPresets(d.presets || [])).catch(() => {});
     engineCall('/souls/by-category').then(d => { setSoulCategories(d.categories || {}); setSoulMeta(d.categoryMeta || {}); }).catch(() => {});
-    apiCall('/providers').then(function(d) { setProviders(d.providers || []); }).catch(function() {});
+    apiCall('/providers').then(function(d) {
+      var provList = d.providers || [];
+      setProviders(provList);
+      var hasConfigured = provList.some(function(p) { return p.configured; });
+      if (!hasConfigured) { setShowSetupGuide(true); }
+      setSetupChecked(true);
+    }).catch(function() { setShowSetupGuide(true); setSetupChecked(true); });
   }, []);
 
   // Fetch models when provider changes
@@ -452,6 +460,59 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
 
   const stepIcons = ['soul', 'basics', 'skills', 'perms', 'deploy', 'review'];
 
+  // ─── Setup Guide Modal ───────────────────────────────────
+  if (showSetupGuide) {
+    return h('div', { className: 'modal-overlay', onClick: e => { if (e.target === e.currentTarget) onClose(); } },
+      h('div', { className: 'modal', style: { maxWidth: 600 } },
+        h('div', { className: 'modal-header' },
+          h('div', null,
+            h('h2', null, '⚡ Setup Required'),
+            h('p', { style: { fontSize: 12, color: 'var(--text-muted)', margin: '2px 0 0', fontWeight: 400 } }, 'Complete these steps before creating your first agent')
+          ),
+          h('button', { className: 'btn btn-ghost btn-icon', onClick: onClose }, I.x())
+        ),
+        h('div', { className: 'modal-body', style: { padding: '24px' } },
+          h('p', { style: { marginBottom: 20, color: 'var(--text-secondary)', lineHeight: 1.6 } },
+            'Your agents need an LLM provider (like Anthropic or OpenAI) to think and act. Set up at least one provider with an API key before creating agents.'
+          ),
+          h('div', { style: { display: 'flex', flexDirection: 'column', gap: 16 } },
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '1'),
+                h('strong', null, 'Add an LLM Provider API Key')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Go to Settings → LLM Providers and add your API key for at least one provider. Recommended: Anthropic (Claude) or OpenAI (GPT).'
+              )
+            ),
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '2'),
+                h('strong', null, 'Configure Email Domain (Optional)')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Set up your email domain in Settings → Domain so agents can send and receive emails as agent@yourdomain.com.'
+              )
+            ),
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '3'),
+                h('strong', null, 'Set Security Policies (Optional)')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Review Settings → Guardrails to set tool approval policies, rate limits, and data loss prevention rules.'
+              )
+            )
+          ),
+          h('div', { style: { display: 'flex', gap: 12, marginTop: 24, justifyContent: 'flex-end' } },
+            h('button', { className: 'btn btn-ghost', onClick: function() { setShowSetupGuide(false); } }, 'Skip for Now'),
+            h('a', { href: '#/settings', className: 'btn btn-primary', onClick: function() { onClose(); } }, 'Go to Settings')
+          )
+        )
+      )
+    );
+  }
+
   return h('div', { className: 'modal-overlay', onClick: e => { if (e.target === e.currentTarget) onClose(); } },
     h('div', { className: 'modal modal-xl' },
       h('div', { className: 'modal-header' },
@@ -669,14 +730,14 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
                     value: form.provider || 'anthropic',
                     onChange: function(e) { setForm(Object.assign({}, form, { provider: e.target.value })); },
                   },
-                    providers.length > 0
+                    providers.length > 0 && providers.some(function(p) { return p.configured; })
                       ? providers.filter(function(p) { return p.configured; }).map(function(p) {
                           return h('option', { key: p.id, value: p.id }, p.name + (p.isLocal ? ' (Local)' : ''));
                         })
                       : [
-                          h('option', { value: 'anthropic' }, 'Anthropic'),
-                          h('option', { value: 'openai' }, 'OpenAI'),
-                          h('option', { value: 'google' }, 'Google'),
+                          h('option', { value: 'anthropic' }, 'Anthropic (Claude)'),
+                          h('option', { value: 'openai' }, 'OpenAI (GPT)'),
+                          h('option', { value: 'google' }, 'Google (Gemini)'),
                           h('option', { value: 'deepseek' }, 'DeepSeek'),
                           h('option', { value: 'xai' }, 'xAI (Grok)'),
                           h('option', { value: 'mistral' }, 'Mistral'),

package/dist/dashboard/pages/settings.js

@@ -1310,6 +1310,30 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    var key = prompt('Enter new API key for ' + p.name + ' (leave empty to keep current):');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key updated for ' + p.name + '. Restart required.', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    var key = prompt('Enter your ' + p.name + ' API key:');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key saved for ' + p.name + '!', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',

package/dist/index.js

@@ -26,7 +26,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-AXLDCUI7.js";
+} from "./chunk-LNWVYHWX.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,
@@ -36,7 +36,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-WOJ47LRQ.js";
+} from "./chunk-VBKWGYN3.js";
 import {
   ENGINE_TABLES,
   ENGINE_TABLES_POSTGRES,

package/dist/server-JRXIBDTH.js

@@ -0,0 +1,11 @@
+import {
+  createServer
+} from "./chunk-LNWVYHWX.js";
+import "./chunk-ZNR5DDTA.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-UH5AXHZX.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-VBKWGYN3.js";
+import "./chunk-6TDW6ZNI.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.12",
+  "version": "0.5.14",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/admin/routes.ts

@@ -629,6 +629,31 @@ export function createAdminRoutes(db: DatabaseAdapter) {
     return c.json({ ok: true, provider: body });
   });
 
+  // ─── Provider API Key Management ────────────────────────
+  api.post('/providers/:id/api-key', requireRole('admin'), async (c) => {
+    var id = c.req.param('id');
+    var provider = PROVIDER_REGISTRY[id];
+    if (!provider) {
+      return c.json({ error: 'Unknown provider' }, 404);
+    }
+    var body = await c.req.json();
+    if (!body.apiKey || typeof body.apiKey !== 'string' || body.apiKey.trim().length < 5) {
+      return c.json({ error: 'Valid API key required' }, 400);
+    }
+
+    // Store API key in company settings (encrypted field)
+    var settings = await db.getSettings();
+    var config = (settings as any)?.modelPricingConfig || { models: [], currency: 'USD' };
+    config.providerApiKeys = config.providerApiKeys || {};
+    config.providerApiKeys[id] = body.apiKey.trim();
+    await db.updateSettings({ modelPricingConfig: config } as any);
+
+    // Also set in process.env so it takes effect immediately
+    process.env[provider.envKey] = body.apiKey.trim();
+
+    return c.json({ ok: true, message: 'API key saved for ' + provider.name });
+  });
+
   api.put('/providers/:id', requireRole('admin'), async (c) => {
     var id = c.req.param('id');
     if (PROVIDER_REGISTRY[id]) {

package/src/dashboard/pages/agents.js

@@ -244,12 +244,20 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
   const [selectedSoul, setSelectedSoul] = useState(null);
   const [previewOpen, setPreviewOpen] = useState(false);
   const [loading, setLoading] = useState(false);
+  const [showSetupGuide, setShowSetupGuide] = useState(false);
+  const [setupChecked, setSetupChecked] = useState(false);
 
   useEffect(() => {
     engineCall('/skills/by-category').then(d => setAllSkills(d.categories || {})).catch(() => {});
     engineCall('/profiles/presets').then(d => setPresets(d.presets || [])).catch(() => {});
     engineCall('/souls/by-category').then(d => { setSoulCategories(d.categories || {}); setSoulMeta(d.categoryMeta || {}); }).catch(() => {});
-    apiCall('/providers').then(function(d) { setProviders(d.providers || []); }).catch(function() {});
+    apiCall('/providers').then(function(d) {
+      var provList = d.providers || [];
+      setProviders(provList);
+      var hasConfigured = provList.some(function(p) { return p.configured; });
+      if (!hasConfigured) { setShowSetupGuide(true); }
+      setSetupChecked(true);
+    }).catch(function() { setShowSetupGuide(true); setSetupChecked(true); });
   }, []);
 
   // Fetch models when provider changes
@@ -452,6 +460,59 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
 
   const stepIcons = ['soul', 'basics', 'skills', 'perms', 'deploy', 'review'];
 
+  // ─── Setup Guide Modal ───────────────────────────────────
+  if (showSetupGuide) {
+    return h('div', { className: 'modal-overlay', onClick: e => { if (e.target === e.currentTarget) onClose(); } },
+      h('div', { className: 'modal', style: { maxWidth: 600 } },
+        h('div', { className: 'modal-header' },
+          h('div', null,
+            h('h2', null, '⚡ Setup Required'),
+            h('p', { style: { fontSize: 12, color: 'var(--text-muted)', margin: '2px 0 0', fontWeight: 400 } }, 'Complete these steps before creating your first agent')
+          ),
+          h('button', { className: 'btn btn-ghost btn-icon', onClick: onClose }, I.x())
+        ),
+        h('div', { className: 'modal-body', style: { padding: '24px' } },
+          h('p', { style: { marginBottom: 20, color: 'var(--text-secondary)', lineHeight: 1.6 } },
+            'Your agents need an LLM provider (like Anthropic or OpenAI) to think and act. Set up at least one provider with an API key before creating agents.'
+          ),
+          h('div', { style: { display: 'flex', flexDirection: 'column', gap: 16 } },
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '1'),
+                h('strong', null, 'Add an LLM Provider API Key')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Go to Settings → LLM Providers and add your API key for at least one provider. Recommended: Anthropic (Claude) or OpenAI (GPT).'
+              )
+            ),
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '2'),
+                h('strong', null, 'Configure Email Domain (Optional)')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Set up your email domain in Settings → Domain so agents can send and receive emails as agent@yourdomain.com.'
+              )
+            ),
+            h('div', { style: { padding: 16, borderRadius: 'var(--radius-lg)', border: '1px solid var(--border)', background: 'var(--bg-secondary)' } },
+              h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 8 } },
+                h('div', { style: { width: 28, height: 28, borderRadius: '50%', background: 'var(--accent)', color: '#fff', display: 'flex', alignItems: 'center', justifyContent: 'center', fontWeight: 700, fontSize: 14, flexShrink: 0 } }, '3'),
+                h('strong', null, 'Set Security Policies (Optional)')
+              ),
+              h('p', { style: { margin: 0, color: 'var(--text-muted)', fontSize: 13, paddingLeft: 40, lineHeight: 1.5 } },
+                'Review Settings → Guardrails to set tool approval policies, rate limits, and data loss prevention rules.'
+              )
+            )
+          ),
+          h('div', { style: { display: 'flex', gap: 12, marginTop: 24, justifyContent: 'flex-end' } },
+            h('button', { className: 'btn btn-ghost', onClick: function() { setShowSetupGuide(false); } }, 'Skip for Now'),
+            h('a', { href: '#/settings', className: 'btn btn-primary', onClick: function() { onClose(); } }, 'Go to Settings')
+          )
+        )
+      )
+    );
+  }
+
   return h('div', { className: 'modal-overlay', onClick: e => { if (e.target === e.currentTarget) onClose(); } },
     h('div', { className: 'modal modal-xl' },
       h('div', { className: 'modal-header' },
@@ -669,14 +730,14 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
                     value: form.provider || 'anthropic',
                     onChange: function(e) { setForm(Object.assign({}, form, { provider: e.target.value })); },
                   },
-                    providers.length > 0
+                    providers.length > 0 && providers.some(function(p) { return p.configured; })
                       ? providers.filter(function(p) { return p.configured; }).map(function(p) {
                           return h('option', { key: p.id, value: p.id }, p.name + (p.isLocal ? ' (Local)' : ''));
                         })
                       : [
-                          h('option', { value: 'anthropic' }, 'Anthropic'),
-                          h('option', { value: 'openai' }, 'OpenAI'),
-                          h('option', { value: 'google' }, 'Google'),
+                          h('option', { value: 'anthropic' }, 'Anthropic (Claude)'),
+                          h('option', { value: 'openai' }, 'OpenAI (GPT)'),
+                          h('option', { value: 'google' }, 'Google (Gemini)'),
                           h('option', { value: 'deepseek' }, 'DeepSeek'),
                           h('option', { value: 'xai' }, 'xAI (Grok)'),
                           h('option', { value: 'mistral' }, 'Mistral'),

package/src/dashboard/pages/settings.js

@@ -1310,6 +1310,30 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    var key = prompt('Enter new API key for ' + p.name + ' (leave empty to keep current):');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key updated for ' + p.name + '. Restart required.', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    var key = prompt('Enter your ' + p.name + ' API key:');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key saved for ' + p.name + '!', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',

package/src/server.ts

@@ -391,6 +391,29 @@ export function createServer(config: ServerConfig): ServerInstance {
             // Start health monitoring
             healthMonitor.start();
 
+            // Load saved provider API keys from DB into process.env
+            config.db.getSettings().then((settings: any) => {
+              const keys = settings?.modelPricingConfig?.providerApiKeys;
+              if (keys && typeof keys === 'object') {
+                // Map of provider IDs to their env var names
+                const envMap: Record<string, string> = {
+                  anthropic: 'ANTHROPIC_API_KEY', openai: 'OPENAI_API_KEY',
+                  google: 'GOOGLE_API_KEY', deepseek: 'DEEPSEEK_API_KEY',
+                  xai: 'XAI_API_KEY', mistral: 'MISTRAL_API_KEY',
+                  groq: 'GROQ_API_KEY', together: 'TOGETHER_API_KEY',
+                  fireworks: 'FIREWORKS_API_KEY', perplexity: 'PERPLEXITY_API_KEY',
+                  cohere: 'COHERE_API_KEY',
+                };
+                for (const [providerId, apiKey] of Object.entries(keys)) {
+                  const envVar = envMap[providerId];
+                  if (envVar && apiKey && !process.env[envVar]) {
+                    process.env[envVar] = apiKey as string;
+                    console.log(`   🔑 Loaded API key for ${providerId}`);
+                  }
+                }
+              }
+            }).catch(() => {});
+
             // Graceful shutdown
             const shutdown = () => {
               console.log('\n⏳ Shutting down gracefully...');