@agenticmail/enterprise 0.5.14 → 0.5.16

package/dist/runtime-U54X4BFZ.js

@@ -0,0 +1,47 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-7PFGWQMJ.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-ZNR5DDTA.js";
+import "./chunk-TYW5XTOW.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/server-HDNZOS5V.js

@@ -0,0 +1,11 @@
+import {
+  createServer
+} from "./chunk-LJNMWZ7Z.js";
+import "./chunk-ZNR5DDTA.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-RWM6G6BK.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-TXWPXWDR.js";
+import "./chunk-6TDW6ZNI.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.14",
+  "version": "0.5.16",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/dashboard/pages/settings.js

@@ -48,6 +48,10 @@ export function SettingsPage() {
   var newProvider = _newProvider[0]; var setNewProvider = _newProvider[1];
   var _discoverResults = useState({});
   var discoverResults = _discoverResults[0]; var setDiscoverResults = _discoverResults[1];
+  var _apiKeyModal = useState(null); // { providerId, providerName, isUpdate }
+  var apiKeyModal = _apiKeyModal[0]; var setApiKeyModal = _apiKeyModal[1];
+  var _apiKeyInput = useState('');
+  var apiKeyInput = _apiKeyInput[0]; var setApiKeyInput = _apiKeyInput[1];
 
   useEffect(() => {
     apiCall('/settings').then(d => { const s = d.settings || d || {}; setSettings(s); if (s.primaryColor) applyBrandColor(s.primaryColor); }).catch(() => {});
@@ -558,6 +562,10 @@ export function SettingsPage() {
       setNewProvider: setNewProvider,
       discoverResults: discoverResults,
       setDiscoverResults: setDiscoverResults,
+      apiKeyModal: apiKeyModal,
+      setApiKeyModal: setApiKeyModal,
+      apiKeyInput: apiKeyInput,
+      setApiKeyInput: setApiKeyInput,
       onSave: function() {
         setPricingSaving(true);
         apiCall('/settings/model-pricing', { method: 'PUT', body: JSON.stringify(pricing) }).then(function(d) {
@@ -1315,22 +1323,14 @@ function ProvidersSection(props) {
               ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
                   h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
                   h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
-                    var key = prompt('Enter new API key for ' + p.name + ' (leave empty to keep current):');
-                    if (key && key.trim()) {
-                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
-                        .then(function() { toast('API key updated for ' + p.name + '. Restart required.', 'success'); window.location.reload(); })
-                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
-                    }
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: true });
                   }}, 'Update Key')
                 )
               : h('div', null,
                   h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
-                    var key = prompt('Enter your ' + p.name + ' API key:');
-                    if (key && key.trim()) {
-                      apiCall('/providers/' + p.id + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: key.trim() }) })
-                        .then(function() { toast('API key saved for ' + p.name + '!', 'success'); window.location.reload(); })
-                        .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
-                    }
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: false });
                   }}, '🔑 Add API Key')
                 )
           ),
@@ -1401,6 +1401,52 @@ function ProvidersSection(props) {
         h('button', { className: 'btn', onClick: function() { props.setShowAddProvider(false); } }, 'Cancel'),
         h('button', { className: 'btn btn-primary', onClick: handleAddProvider }, 'Add Provider')
       )
+    ),
+
+    // API Key Modal
+    props.apiKeyModal && h(Modal, {
+      title: (props.apiKeyModal.isUpdate ? 'Update' : 'Add') + ' API Key — ' + props.apiKeyModal.providerName,
+      onClose: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); },
+    },
+      h('div', { style: { marginBottom: 16 } },
+        h('p', { style: { color: 'var(--text-secondary)', fontSize: 13, margin: '0 0 16px 0', lineHeight: 1.5 } },
+          props.apiKeyModal.isUpdate
+            ? 'Enter a new API key to replace the current one for ' + props.apiKeyModal.providerName + '.'
+            : 'Enter your ' + props.apiKeyModal.providerName + ' API key to enable this provider.'
+        ),
+        h('label', { className: 'form-label' }, 'API Key'),
+        h('input', {
+          className: 'input',
+          type: 'password',
+          placeholder: 'sk-...',
+          value: props.apiKeyInput,
+          autoFocus: true,
+          onChange: function(e) { props.setApiKeyInput(e.target.value); },
+          onKeyDown: function(e) {
+            if (e.key === 'Enter' && props.apiKeyInput.trim()) {
+              var m = props.apiKeyModal;
+              apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+                .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+                .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+            }
+          },
+          style: { fontSize: 14, fontFamily: 'var(--font-mono, monospace)' },
+        }),
+        h('p', { className: 'form-help', style: { marginTop: 6 } }, 'Your key is stored encrypted and never exposed in the dashboard.')
+      ),
+      h('div', { style: { display: 'flex', justifyContent: 'flex-end', gap: 8 } },
+        h('button', { className: 'btn', onClick: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); } }, 'Cancel'),
+        h('button', {
+          className: 'btn btn-primary',
+          disabled: !props.apiKeyInput.trim(),
+          onClick: function() {
+            var m = props.apiKeyModal;
+            apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+              .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+              .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+          }
+        }, props.apiKeyModal.isUpdate ? 'Update Key' : 'Save Key')
+      )
     )
   );
 }
@@ -1434,6 +1480,10 @@ function ModelPricingTab(props) {
       discoverResults: props.discoverResults,
       setDiscoverResults: props.setDiscoverResults,
       toast: props.toast,
+      apiKeyModal: props.apiKeyModal,
+      setApiKeyModal: props.setApiKeyModal,
+      apiKeyInput: props.apiKeyInput,
+      setApiKeyInput: props.setApiKeyInput,
     }),
 
     // Divider

package/src/engine/vault.ts

@@ -11,6 +11,11 @@
 import { createHash, randomBytes, createCipheriv, createDecipheriv, pbkdf2Sync } from 'crypto';
 import type { EngineDatabase } from './db-adapter.js';
 
+function safeJsonParse(val: string | null | undefined, fallback: any = {}): any {
+  if (!val) return fallback;
+  try { return JSON.parse(val); } catch { return fallback; }
+}
+
 // ─── Types ──────────────────────────────────────────────
 
 export interface VaultConfig {
@@ -113,7 +118,7 @@ export class SecureVault {
           name: r.name,
           category: r.category,
           encryptedValue: r.encrypted_value,
-          metadata: JSON.parse(r.metadata || '{}'),
+          metadata: safeJsonParse(r.metadata),
           createdBy: r.created_by,
           createdAt: r.created_at,
           updatedAt: r.updated_at,
@@ -415,7 +420,7 @@ export class SecureVault {
       const rows = await this.engineDb.query<any>('SELECT * FROM deploy_credentials');
 
       for (const row of rows) {
-        const config = JSON.parse(row.config || '{}');
+        const config = safeJsonParse(row.config);
 
         // Skip already-encrypted configs
         if (config._encrypted) continue;
@@ -514,7 +519,7 @@ export class SecureVault {
         action: r.action,
         actor: r.actor,
         ip: r.ip || undefined,
-        metadata: JSON.parse(r.metadata || '{}'),
+        metadata: safeJsonParse(r.metadata),
         createdAt: r.created_at,
       }));
     } catch {