@agenticmail/enterprise 0.5.13 → 0.5.14

package/dist/cli.js

@@ -48,7 +48,7 @@ Skill Development:
     break;
   case "setup":
   default:
-    import("./setup-SZPCU3TC.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-UH5AXHZX.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/dashboard/pages/settings.js

@@ -1310,6 +1310,30 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    var key = prompt('Enter new API key for ' + p.name + ' (leave empty to keep current):');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key updated for ' + p.name + '. Restart required.', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    var key = prompt('Enter your ' + p.name + ' API key:');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key saved for ' + p.name + '!', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',

package/dist/index.js

@@ -26,7 +26,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-AXLDCUI7.js";
+} from "./chunk-LNWVYHWX.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,
@@ -36,7 +36,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-WOJ47LRQ.js";
+} from "./chunk-VBKWGYN3.js";
 import {
   ENGINE_TABLES,
   ENGINE_TABLES_POSTGRES,

package/dist/server-JRXIBDTH.js

@@ -0,0 +1,11 @@
+import {
+  createServer
+} from "./chunk-LNWVYHWX.js";
+import "./chunk-ZNR5DDTA.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-UH5AXHZX.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-VBKWGYN3.js";
+import "./chunk-6TDW6ZNI.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.13",
+  "version": "0.5.14",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/admin/routes.ts

@@ -629,6 +629,31 @@ export function createAdminRoutes(db: DatabaseAdapter) {
     return c.json({ ok: true, provider: body });
   });
 
+  // ─── Provider API Key Management ────────────────────────
+  api.post('/providers/:id/api-key', requireRole('admin'), async (c) => {
+    var id = c.req.param('id');
+    var provider = PROVIDER_REGISTRY[id];
+    if (!provider) {
+      return c.json({ error: 'Unknown provider' }, 404);
+    }
+    var body = await c.req.json();
+    if (!body.apiKey || typeof body.apiKey !== 'string' || body.apiKey.trim().length < 5) {
+      return c.json({ error: 'Valid API key required' }, 400);
+    }
+
+    // Store API key in company settings (encrypted field)
+    var settings = await db.getSettings();
+    var config = (settings as any)?.modelPricingConfig || { models: [], currency: 'USD' };
+    config.providerApiKeys = config.providerApiKeys || {};
+    config.providerApiKeys[id] = body.apiKey.trim();
+    await db.updateSettings({ modelPricingConfig: config } as any);
+
+    // Also set in process.env so it takes effect immediately
+    process.env[provider.envKey] = body.apiKey.trim();
+
+    return c.json({ ok: true, message: 'API key saved for ' + provider.name });
+  });
+
   api.put('/providers/:id', requireRole('admin'), async (c) => {
     var id = c.req.param('id');
     if (PROVIDER_REGISTRY[id]) {

package/src/dashboard/pages/settings.js

@@ -1310,6 +1310,30 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    var key = prompt('Enter new API key for ' + p.name + ' (leave empty to keep current):');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key updated for ' + p.name + '. Restart required.', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    var key = prompt('Enter your ' + p.name + ' API key:');
+                    if (key && key.trim()) {
+                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
+                        .then(function() { toast('API key saved for ' + p.name + '!', 'success'); window.location.reload(); })
+                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+                    }
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',

package/src/server.ts

@@ -391,6 +391,29 @@ export function createServer(config: ServerConfig): ServerInstance {
             // Start health monitoring
             healthMonitor.start();
 
+            // Load saved provider API keys from DB into process.env
+            config.db.getSettings().then((settings: any) => {
+              const keys = settings?.modelPricingConfig?.providerApiKeys;
+              if (keys && typeof keys === 'object') {
+                // Map of provider IDs to their env var names
+                const envMap: Record<string, string> = {
+                  anthropic: 'ANTHROPIC_API_KEY', openai: 'OPENAI_API_KEY',
+                  google: 'GOOGLE_API_KEY', deepseek: 'DEEPSEEK_API_KEY',
+                  xai: 'XAI_API_KEY', mistral: 'MISTRAL_API_KEY',
+                  groq: 'GROQ_API_KEY', together: 'TOGETHER_API_KEY',
+                  fireworks: 'FIREWORKS_API_KEY', perplexity: 'PERPLEXITY_API_KEY',
+                  cohere: 'COHERE_API_KEY',
+                };
+                for (const [providerId, apiKey] of Object.entries(keys)) {
+                  const envVar = envMap[providerId];
+                  if (envVar && apiKey && !process.env[envVar]) {
+                    process.env[envVar] = apiKey as string;
+                    console.log(`   🔑 Loaded API key for ${providerId}`);
+                  }
+                }
+              }
+            }).catch(() => {});
+
             // Graceful shutdown
             const shutdown = () => {
               console.log('\n⏳ Shutting down gracefully...');