@agenticmail/enterprise 0.5.16 → 0.5.18

package/dist/cli-recover-UHALNDIN.js

@@ -0,0 +1,97 @@
+import {
+  DomainLock
+} from "./chunk-UPU23ZRG.js";
+import "./chunk-KFQGP6VL.js";
+
+// src/domain-lock/cli-recover.ts
+function getFlag(args, name) {
+  const idx = args.indexOf(name);
+  if (idx !== -1 && args[idx + 1]) return args[idx + 1];
+  return void 0;
+}
+async function runRecover(args) {
+  const { default: inquirer } = await import("inquirer");
+  const { default: chalk } = await import("chalk");
+  const { default: ora } = await import("ora");
+  console.log("");
+  console.log(chalk.bold("  AgenticMail Enterprise \u2014 Domain Recovery"));
+  console.log(chalk.dim("  Recover your domain registration on a new machine."));
+  console.log("");
+  let domain = getFlag(args, "--domain");
+  if (!domain) {
+    const answer = await inquirer.prompt([{
+      type: "input",
+      name: "domain",
+      message: "Domain to recover:",
+      suffix: chalk.dim("  (e.g. agents.agenticmail.io)"),
+      validate: (v) => v.includes(".") || "Enter a valid domain"
+    }]);
+    domain = answer.domain;
+  }
+  let key = getFlag(args, "--key");
+  if (!key) {
+    const answer = await inquirer.prompt([{
+      type: "password",
+      name: "key",
+      message: "Deployment key:",
+      mask: "*",
+      validate: (v) => {
+        if (v.length !== 64) return "Deployment key should be 64 hex characters";
+        if (!/^[0-9a-fA-F]+$/.test(v)) return "Deployment key should be hexadecimal";
+        return true;
+      }
+    }]);
+    key = answer.key;
+  }
+  const spinner = ora("Contacting AgenticMail registry...").start();
+  const lock = new DomainLock();
+  const result = await lock.recover(domain, key);
+  if (!result.success) {
+    spinner.fail("Recovery failed");
+    console.log("");
+    console.error(chalk.red(`  ${result.error}`));
+    console.log("");
+    process.exit(1);
+  }
+  spinner.succeed("Domain recovery initiated");
+  const { default: bcrypt } = await import("bcryptjs");
+  const keyHash = await bcrypt.hash(key, 12);
+  const dbPath = getFlag(args, "--db");
+  const dbType = getFlag(args, "--db-type") || "sqlite";
+  if (dbPath) {
+    try {
+      const spinnerDb = ora("Saving to local database...").start();
+      const { createAdapter } = await import("./factory-5C7EC3SE.js");
+      const db = await createAdapter({ type: dbType, connectionString: dbPath });
+      await db.migrate();
+      await db.updateSettings({
+        domain,
+        deploymentKeyHash: keyHash,
+        domainRegistrationId: result.registrationId,
+        domainDnsChallenge: result.dnsChallenge,
+        domainRegisteredAt: (/* @__PURE__ */ new Date()).toISOString(),
+        domainStatus: "pending_dns"
+      });
+      spinnerDb.succeed("Local database updated");
+      await db.disconnect();
+    } catch (err) {
+      console.log(chalk.yellow(`
+  Could not update local DB: ${err.message}`));
+      console.log(chalk.dim("  You can manually update settings after setup."));
+    }
+  }
+  console.log("");
+  console.log(chalk.green.bold("  Domain recovery successful!"));
+  console.log("");
+  console.log(chalk.bold("  Update your DNS TXT record:"));
+  console.log("");
+  console.log(`  ${chalk.bold("Host:")}   ${chalk.cyan(`_agenticmail-verify.${domain}`)}`);
+  console.log(`  ${chalk.bold("Type:")}   ${chalk.cyan("TXT")}`);
+  console.log(`  ${chalk.bold("Value:")}  ${chalk.cyan(result.dnsChallenge)}`);
+  console.log("");
+  console.log(chalk.dim("  Then run: npx @agenticmail/enterprise verify-domain"));
+  console.log("");
+}
+export {
+  runRecover
+};

package/dist/cli-verify-CN5WNXQI.js

@@ -0,0 +1,98 @@
+import {
+  DomainLock
+} from "./chunk-UPU23ZRG.js";
+import "./chunk-KFQGP6VL.js";
+
+// src/domain-lock/cli-verify.ts
+function getFlag(args, name) {
+  const idx = args.indexOf(name);
+  if (idx !== -1 && args[idx + 1]) return args[idx + 1];
+  return void 0;
+}
+async function runVerifyDomain(args) {
+  const { default: chalk } = await import("chalk");
+  const { default: ora } = await import("ora");
+  console.log("");
+  console.log(chalk.bold("  AgenticMail Enterprise \u2014 Domain Verification"));
+  console.log("");
+  let domain = getFlag(args, "--domain");
+  let dnsChallenge;
+  let dbConnected = false;
+  let db = null;
+  if (!domain) {
+    const dbPath = getFlag(args, "--db");
+    const dbType = getFlag(args, "--db-type") || "sqlite";
+    if (dbPath) {
+      try {
+        const { createAdapter } = await import("./factory-5C7EC3SE.js");
+        db = await createAdapter({ type: dbType, connectionString: dbPath });
+        await db.migrate();
+        const settings = await db.getSettings();
+        domain = settings?.domain;
+        dnsChallenge = settings?.domainDnsChallenge;
+        dbConnected = true;
+      } catch {
+      }
+    }
+  }
+  if (!domain) {
+    const { default: inquirer } = await import("inquirer");
+    const answer = await inquirer.prompt([{
+      type: "input",
+      name: "domain",
+      message: "Domain to verify:",
+      suffix: chalk.dim("  (e.g. agents.agenticmail.io)"),
+      validate: (v) => v.includes(".") || "Enter a valid domain"
+    }]);
+    domain = answer.domain;
+  }
+  const spinner = ora("Checking DNS verification...").start();
+  const lock = new DomainLock();
+  const result = await lock.checkVerification(domain);
+  if (!result.success) {
+    spinner.fail("Verification check failed");
+    console.log("");
+    console.error(chalk.red(`  ${result.error}`));
+    console.log("");
+    if (db) await db.disconnect();
+    process.exit(1);
+  }
+  if (result.verified) {
+    spinner.succeed("Domain verified!");
+    if (dbConnected && db) {
+      try {
+        await db.updateSettings({
+          domainStatus: "verified",
+          domainVerifiedAt: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch {
+      }
+    }
+    console.log("");
+    console.log(chalk.green.bold(`  ${domain} is verified and protected.`));
+    console.log(chalk.dim("  Your deployment domain is locked. No other instance can claim it."));
+    console.log("");
+  } else {
+    spinner.info("DNS record not found yet");
+    console.log("");
+    console.log(chalk.yellow("  The DNS TXT record has not been detected."));
+    console.log("");
+    console.log(chalk.bold("  Make sure this record exists:"));
+    console.log("");
+    console.log(`  ${chalk.bold("Host:")}   ${chalk.cyan(`_agenticmail-verify.${domain}`)}`);
+    console.log(`  ${chalk.bold("Type:")}   ${chalk.cyan("TXT")}`);
+    if (dnsChallenge) {
+      console.log(`  ${chalk.bold("Value:")}  ${chalk.cyan(dnsChallenge)}`);
+    } else {
+      console.log(`  ${chalk.bold("Value:")}  ${chalk.dim("(check your setup records or dashboard)")}`);
+    }
+    console.log("");
+    console.log(chalk.dim("  DNS changes can take up to 48 hours to propagate."));
+    console.log(chalk.dim("  Run this command again after adding the record."));
+    console.log("");
+  }
+  if (db) await db.disconnect();
+}
+export {
+  runVerifyDomain
+};

package/dist/cli.js

@@ -14,10 +14,10 @@ switch (command) {
     import("./cli-submit-skill-LDFJGSKO.js").then((m) => m.runSubmitSkill(args.slice(1))).catch(fatal);
     break;
   case "recover":
-    import("./cli-recover-BPRSA6ND.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
+    import("./cli-recover-UHALNDIN.js").then((m) => m.runRecover(args.slice(1))).catch(fatal);
     break;
   case "verify-domain":
-    import("./cli-verify-Y34ZU5GM.js").then((m) => m.runVerifyDomain(args.slice(1))).catch(fatal);
+    import("./cli-verify-CN5WNXQI.js").then((m) => m.runVerifyDomain(args.slice(1))).catch(fatal);
     break;
   case "--help":
   case "-h":
@@ -48,7 +48,7 @@ Skill Development:
     break;
   case "setup":
   default:
-    import("./setup-RWM6G6BK.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-HAVYNSWT.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/dashboard/app.js

@@ -1,5 +1,5 @@
 // ─── Imports ─────────────────────────────────────────────
-import { h, useState, useEffect, useCallback, useRef, Fragment, AppContext, useApp, apiCall, authCall, engineCall, applyBrandColor } from './components/utils.js';
+import { h, useState, useEffect, useCallback, useRef, Fragment, AppContext, useApp, apiCall, authCall, engineCall, applyBrandColor, setOrgId } from './components/utils.js';
 import { I } from './components/icons.js';
 import { ErrorBoundary } from './components/error-boundary.js';
 import { Modal } from './components/modal.js';
@@ -113,7 +113,7 @@ function App() {
   useEffect(() => {
     if (!authed) return;
     engineCall('/approvals/pending').then(d => setPendingCount((d.requests || []).length)).catch(() => {});
-    apiCall('/settings').then(d => { const s = d.settings || d || {}; if (s.primaryColor) applyBrandColor(s.primaryColor); }).catch(() => {});
+    apiCall('/settings').then(d => { const s = d.settings || d || {}; if (s.primaryColor) applyBrandColor(s.primaryColor); if (s.orgId) setOrgId(s.orgId); }).catch(() => {});
   }, [authed]);
 
   const logout = useCallback(() => { authCall('/logout', { method: 'POST' }).catch(() => {}).finally(() => { setAuthed(false); setUser(null); }); }, []);

package/dist/dashboard/components/utils.js

@@ -5,6 +5,25 @@ export { h, useState, useEffect, useCallback, useRef, Fragment, createContext, u
 
 export function useApp() { return useContext(AppContext); }
 
+// Org ID — set from server settings after setup wizard, cached in localStorage
+var _orgIdLoaded = false;
+export function getOrgId() {
+  var id = localStorage.getItem('em_org_id');
+  if (!id && !_orgIdLoaded) {
+    _orgIdLoaded = true;
+    // Fetch from server settings (async, will update on next call)
+    apiCall('/settings').then(function(s) {
+      if (s && s.orgId) {
+        localStorage.setItem('em_org_id', s.orgId);
+      }
+    }).catch(function() {});
+  }
+  return id || 'default';
+}
+export function setOrgId(id) {
+  if (id) localStorage.setItem('em_org_id', id);
+}
+
 // Derive accent color variants from a hex color
 export function applyBrandColor(hex) {
   if (!hex || !/^#[0-9a-fA-F]{6}$/.test(hex)) return;

package/dist/dashboard/pages/activity.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, Fragment, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge } from '../components/utils.js';
+import { h, useState, useEffect, Fragment, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge , getOrgId } from '../components/utils.js';
 
 export function ActivityPage() {
   const [events, setEvents] = useState([]);
@@ -10,7 +10,7 @@ export function ActivityPage() {
   useEffect(() => {
     engineCall('/activity/events?limit=100').then(d => setEvents(d.events || [])).catch(() => {});
     engineCall('/activity/tool-calls?limit=100').then(d => setToolCalls(d.toolCalls || [])).catch(() => {});
-    engineCall('/agents?orgId=default').then(d => setAgents(d.agents || [])).catch(() => {});
+    engineCall('/agents?orgId=' + getOrgId()).then(d => setAgents(d.agents || [])).catch(() => {});
   }, []);
 
   const emailMap = buildAgentEmailMap(agents);

package/dist/dashboard/pages/agent-detail.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, useCallback, Fragment, useApp, apiCall, engineCall, formatUptime, buildAgentDataMap, renderAgentBadge, showConfirm } from '../components/utils.js';
+import { h, useState, useEffect, useCallback, Fragment, useApp, apiCall, engineCall, formatUptime, buildAgentDataMap, renderAgentBadge, showConfirm , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 import { DetailModal } from '../components/modal.js';
 import { CULTURES, LANGUAGES, DEFAULT_TRAITS, computeAge, PersonaForm } from '../components/persona-fields.js';
@@ -202,7 +202,7 @@ function OverviewSection(props) {
 
   var initiateOnboarding = function() {
     setActing('onboard');
-    engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: 'default' }) })
+    engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: getOrgId() }) })
       .then(function() { toast('Onboarding initiated', 'success'); setOnboardingStatus(function(s) { return Object.assign({}, s, { onboarded: true, status: 'in_progress' }); }); reload(); })
       .catch(function(err) { toast(err.message, 'error'); })
       .finally(function() { setActing(''); });
@@ -700,7 +700,7 @@ function PermissionsSection(props) {
   useEffect(function() {
     setLoading(true);
     Promise.all([
-      engineCall('/policies/agent/' + agentId + '?orgId=default').catch(function() { return { policies: [] }; }),
+      engineCall('/policies/agent/' + agentId + '?orgId=' + getOrgId()).catch(function() { return { policies: [] }; }),
       engineCall('/profiles/presets').catch(function() { return { presets: [] }; }),
       engineCall('/souls/by-category').catch(function() { return { categories: {}, categoryMeta: {} }; })
     ]).then(function(results) {
@@ -1490,7 +1490,7 @@ function ActivitySection(props) {
       .catch(function() {});
   };
   var loadJournal = function() {
-    engineCall('/journal?agentId=' + agentId + '&orgId=default&limit=50')
+    engineCall('/journal?agentId=' + agentId + '&orgId=' + getOrgId() + '&limit=50')
       .then(function(d) { setJournalEntries(d.entries || []); })
       .catch(function() {});
   };
@@ -1500,7 +1500,7 @@ function ActivitySection(props) {
     Promise.all([
       engineCall('/activity/events?agentId=' + agentId + '&limit=50').then(function(d) { setEvents(d.events || []); }).catch(function() {}),
       engineCall('/activity/tool-calls?agentId=' + agentId + '&limit=50').then(function(d) { setToolCalls(d.toolCalls || []); }).catch(function() {}),
-      engineCall('/journal?agentId=' + agentId + '&orgId=default&limit=50').then(function(d) { setJournalEntries(d.entries || []); }).catch(function() {}),
+      engineCall('/journal?agentId=' + agentId + '&orgId=' + getOrgId() + '&limit=50').then(function(d) { setJournalEntries(d.entries || []); }).catch(function() {}),
     ]).then(function() { setLoading(false); }).catch(function() { setLoading(false); });
   };
 
@@ -1674,17 +1674,17 @@ function CommunicationSection(props) {
   var form = _form[0]; var setForm = _form[1];
 
   var loadMessages = function() {
-    engineCall('/messages?agentId=' + agentId + '&orgId=default&limit=50')
+    engineCall('/messages?agentId=' + agentId + '&orgId=' + getOrgId() + '&limit=50')
       .then(function(d) { setMessages(d.messages || []); })
       .catch(function() {});
   };
   var loadInbox = function() {
-    engineCall('/messages/inbox/' + agentId + '?orgId=default')
+    engineCall('/messages/inbox/' + agentId + '?orgId=' + getOrgId())
       .then(function(d) { setInbox(d.messages || []); })
       .catch(function() {});
   };
   var loadTopology = function() {
-    engineCall('/messages/topology?agentId=' + agentId + '&orgId=default')
+    engineCall('/messages/topology?agentId=' + agentId + '&orgId=' + getOrgId())
       .then(function(d) { setTopology(d.topology || d || null); })
       .catch(function() {});
   };
@@ -1708,7 +1708,7 @@ function CommunicationSection(props) {
     var body = {
       fromAgentId: agentId,
       toAgentId: form.toAgentId,
-      orgId: 'default',
+      orgId: getOrgId(),
       subject: form.subject,
       content: form.content,
       priority: form.priority
@@ -1991,7 +1991,7 @@ function MemorySection(props) {
     var tagsArray = createForm.tags ? createForm.tags.split(',').map(function(s) { return s.trim(); }).filter(Boolean) : [];
     var body = {
       agentId: agentId,
-      orgId: 'default',
+      orgId: getOrgId(),
       title: createForm.title,
       content: createForm.content,
       category: createForm.category,
@@ -2549,7 +2549,7 @@ function GuardrailsSection(props) {
   };
 
   var initiateOnboarding = function() {
-    engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: 'default' }) })
+    engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: getOrgId() }) })
       .then(function() { toast('Onboarding initiated', 'success'); loadAll(); })
       .catch(function(err) { toast(err.message, 'error'); });
   };
@@ -3448,7 +3448,7 @@ function AgentDetailPage(props) {
     Promise.all([
       engineCall('/bridge/agents/' + agentId + '/full').catch(function() { return null; }),
       apiCall('/agents/' + agentId).catch(function() { return null; }),
-      engineCall('/agents?orgId=default').catch(function() { return { agents: [] }; })
+      engineCall('/agents?orgId=' + getOrgId()).catch(function() { return { agents: [] }; })
     ]).then(function(results) {
       var fullData = results[0];
       var adminData = results[1];

package/dist/dashboard/pages/agents.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, useCallback, Fragment, useApp, apiCall, engineCall, DEPLOY_PHASES, DEPLOY_PHASE_LABELS, showConfirm } from '../components/utils.js';
+import { h, useState, useEffect, useCallback, Fragment, useApp, apiCall, engineCall, DEPLOY_PHASES, DEPLOY_PHASE_LABELS, showConfirm , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 import { CULTURES, LANGUAGES, PersonaForm } from '../components/persona-fields.js';
 
@@ -16,7 +16,7 @@ export function DeployModal({ agentId, agentConfig, onClose, onDeployed, toast }
   const [error, setError] = useState('');
 
   useEffect(() => {
-    engineCall('/deploy-credentials?orgId=default').then(d => setCredentials(d.credentials || [])).catch(() => {});
+    engineCall('/deploy-credentials?orgId=' + getOrgId()).then(d => setCredentials(d.credentials || [])).catch(() => {});
   }, []);
 
   const targets = [
@@ -400,7 +400,7 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
     setLoading(true);
     try {
       const result = await engineCall('/bridge/agents', { method: 'POST', body: JSON.stringify({
-        orgId: 'default',
+        orgId: getOrgId(),
         name: form.name,
         displayName: form.name,
         email: form.email || form.name.toLowerCase().replace(/\s+/g, '.') + '@agenticmail.local',
@@ -436,7 +436,7 @@ export function CreateAgentWizard({ onClose, onCreated, toast }) {
 
       if (form.autoOnboard && agentId) {
         try {
-          await engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: 'default' }) });
+          await engineCall('/onboarding/initiate/' + agentId, { method: 'POST', body: JSON.stringify({ orgId: getOrgId() }) });
           toast('Agent "' + form.name + '" created and onboarding started', 'success');
         } catch (e) {
           toast('Agent created but onboarding failed: ' + e.message, 'warning');

package/dist/dashboard/pages/approvals.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, Fragment, useApp, engineCall, showConfirm, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge } from '../components/utils.js';
+import { h, useState, useEffect, Fragment, useApp, engineCall, showConfirm, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 
 export function ApprovalsPage() {
@@ -12,7 +12,7 @@ export function ApprovalsPage() {
   const load = () => {
     engineCall('/approvals/pending').then(d => setPending(d.requests || [])).catch(() => {});
     engineCall('/approvals/history?limit=50').then(d => setHistory(d.requests || [])).catch(() => {});
-    engineCall('/agents?orgId=default').then(d => setAgents(d.agents || [])).catch(() => {});
+    engineCall('/agents?orgId=' + getOrgId()).then(d => setAgents(d.agents || [])).catch(() => {});
   };
   useEffect(() => { load(); }, []);
 

package/dist/dashboard/pages/community-skills.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, useCallback, Fragment, useApp, engineCall } from '../components/utils.js';
+import { h, useState, useEffect, useCallback, Fragment, useApp, engineCall , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 
 export function CommunitySkillsPage() {
@@ -37,7 +37,7 @@ export function CommunitySkillsPage() {
     engineCall('/community/skills?' + params.toString())
       .then(d => { setSkills(d.skills || []); setTotal(d.total || 0); })
       .catch(() => {});
-    engineCall('/community/installed?orgId=default')
+    engineCall('/community/installed?orgId=' + getOrgId())
       .then(d => setInstalled(d.installed || []))
       .catch(() => {});
     engineCall('/community/skills/featured')
@@ -52,16 +52,16 @@ export function CommunitySkillsPage() {
   }, [filters]);
 
   var loadUpdates = useCallback(function() {
-    engineCall('/skill-updates/config?orgId=default')
+    engineCall('/skill-updates/config?orgId=' + getOrgId())
       .then(function(d) { setUpdateConfig(d.config || d || { autoUpdate: false, checkInterval: 'daily', maxRiskLevel: 'medium' }); })
       .catch(function() {});
-    engineCall('/skill-updates/available?orgId=default')
+    engineCall('/skill-updates/available?orgId=' + getOrgId())
       .then(function(d) { setAvailableUpdates(d.updates || []); })
       .catch(function() {});
-    engineCall('/skill-updates/history?orgId=default')
+    engineCall('/skill-updates/history?orgId=' + getOrgId())
       .then(function(d) { setUpdateHistory(d.history || d.updates || []); })
       .catch(function() {});
-    engineCall('/skill-updates/stats?orgId=default')
+    engineCall('/skill-updates/stats?orgId=' + getOrgId())
       .then(function(d) { setUpdateStats(d || {}); })
       .catch(function() {});
   }, []);
@@ -87,7 +87,7 @@ export function CommunitySkillsPage() {
     try {
       await engineCall('/community/skills/' + skillId + '/install', {
         method: 'POST',
-        body: JSON.stringify({ orgId: 'default' })
+        body: JSON.stringify({ orgId: getOrgId() })
       });
       toast('Skill installed', 'success');
       load();
@@ -98,7 +98,7 @@ export function CommunitySkillsPage() {
     try {
       await engineCall('/community/skills/' + skillId + '/uninstall', {
         method: 'DELETE',
-        body: JSON.stringify({ orgId: 'default' })
+        body: JSON.stringify({ orgId: getOrgId() })
       });
       toast('Skill uninstalled', 'success');
       load();
@@ -109,7 +109,7 @@ export function CommunitySkillsPage() {
     try {
       await engineCall('/community/skills/' + skillId + '/' + (enable ? 'enable' : 'disable'), {
         method: 'PUT',
-        body: JSON.stringify({ orgId: 'default' })
+        body: JSON.stringify({ orgId: getOrgId() })
       });
       toast('Skill ' + (enable ? 'enabled' : 'disabled'), 'success');
       load();
@@ -166,7 +166,7 @@ export function CommunitySkillsPage() {
     try {
       await engineCall('/skill-updates/check', {
         method: 'POST',
-        body: JSON.stringify({ orgId: 'default' })
+        body: JSON.stringify({ orgId: getOrgId() })
       });
       toast('Update check complete', 'success');
       loadUpdates();
@@ -179,7 +179,7 @@ export function CommunitySkillsPage() {
       await engineCall('/skill-updates/config', {
         method: 'PUT',
         body: JSON.stringify({
-          orgId: 'default',
+          orgId: getOrgId(),
           autoUpdate: updateConfig.autoUpdate,
           checkInterval: updateConfig.checkInterval,
           maxRiskLevel: updateConfig.maxRiskLevel
@@ -210,7 +210,7 @@ export function CommunitySkillsPage() {
     try {
       await engineCall('/skill-updates/apply-all', {
         method: 'POST',
-        body: JSON.stringify({ orgId: 'default' })
+        body: JSON.stringify({ orgId: getOrgId() })
       });
       toast('All updates applied', 'success');
       loadUpdates();

package/dist/dashboard/pages/compliance.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, Fragment, useApp, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge } from '../components/utils.js';
+import { h, useState, useEffect, Fragment, useApp, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 
 export function CompliancePage() {
@@ -6,13 +6,13 @@ export function CompliancePage() {
   const [reports, setReports] = useState([]);
   const [tab, setTab] = useState('reports');
   const [generating, setGenerating] = useState(false);
-  const [form, setForm] = useState({ type: 'soc2', orgId: 'default', agentId: '', from: new Date(Date.now() - 30 * 86400000).toISOString().split('T')[0], to: new Date().toISOString().split('T')[0] });
+  const [form, setForm] = useState({ type: 'soc2', orgId: getOrgId(), agentId: '', from: new Date(Date.now() - 30 * 86400000).toISOString().split('T')[0], to: new Date().toISOString().split('T')[0] });
 
   const [agents, setAgents] = useState([]);
 
   const load = () => {
-    engineCall('/compliance/reports?orgId=default').then(d => setReports(d.reports || [])).catch(() => {});
-    engineCall('/agents?orgId=default').then(d => setAgents(d.agents || [])).catch(() => {});
+    engineCall('/compliance/reports?orgId=' + getOrgId()).then(d => setReports(d.reports || [])).catch(() => {});
+    engineCall('/agents?orgId=' + getOrgId()).then(d => setAgents(d.agents || [])).catch(() => {});
   };
   useEffect(load, []);
 

package/dist/dashboard/pages/dashboard.js

@@ -1,5 +1,5 @@
-import { h, useState, useEffect, Fragment, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge } from '../components/utils.js';
-import { useApp, apiCall, engineCall } from '../components/utils.js';
+import { h, useState, useEffect, Fragment, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge , getOrgId } from '../components/utils.js';
+import { useApp, apiCall, engineCall , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 import { DetailModal } from '../components/modal.js';
 
@@ -58,7 +58,7 @@ export function DashboardPage() {
   useEffect(() => {
     apiCall('/stats').then(setStats).catch(() => {});
     apiCall('/agents').then(d => setAgents(d.agents || d || [])).catch(() => {});
-    engineCall('/agents?orgId=default').then(d => setEngineAgents(d.agents || [])).catch(() => {});
+    engineCall('/agents?orgId=' + getOrgId()).then(d => setEngineAgents(d.agents || [])).catch(() => {});
     engineCall('/activity/events?limit=10').then(d => setEvents(d.events || [])).catch(() => {});
   }, []);
 

package/dist/dashboard/pages/dlp.js

@@ -1,4 +1,4 @@
-import { h, useState, useEffect, Fragment, useApp, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge } from '../components/utils.js';
+import { h, useState, useEffect, Fragment, useApp, engineCall, buildAgentEmailMap, buildAgentDataMap, resolveAgentEmail, renderAgentBadge , getOrgId } from '../components/utils.js';
 import { I } from '../components/icons.js';
 
 export function DLPPage() {
@@ -7,16 +7,16 @@ export function DLPPage() {
   const [violations, setViolations] = useState([]);
   const [tab, setTab] = useState('rules');
   const [showModal, setShowModal] = useState(false);
-  const [form, setForm] = useState({ name: '', orgId: 'default', patternType: 'regex', pattern: '', action: 'block', appliesTo: 'both', severity: 'high', enabled: true });
+  const [form, setForm] = useState({ name: '', orgId: getOrgId(), patternType: 'regex', pattern: '', action: 'block', appliesTo: 'both', severity: 'high', enabled: true });
   const [testContent, setTestContent] = useState('');
   const [testResults, setTestResults] = useState(null);
 
   const [agents, setAgents] = useState([]);
 
   const load = () => {
-    engineCall('/dlp/rules?orgId=default').then(d => setRules(d.rules || [])).catch(() => {});
-    engineCall('/dlp/violations?orgId=default&limit=100').then(d => setViolations(d.violations || [])).catch(() => {});
-    engineCall('/agents?orgId=default').then(d => setAgents(d.agents || [])).catch(() => {});
+    engineCall('/dlp/rules?orgId=' + getOrgId()).then(d => setRules(d.rules || [])).catch(() => {});
+    engineCall('/dlp/violations?orgId=' + getOrgId() + '&limit=100').then(d => setViolations(d.violations || [])).catch(() => {});
+    engineCall('/agents?orgId=' + getOrgId()).then(d => setAgents(d.agents || [])).catch(() => {});
   };
   useEffect(load, []);
 
@@ -31,7 +31,7 @@ export function DLPPage() {
   };
   const testScan = async () => {
     if (!testContent) return;
-    try { const r = await engineCall('/dlp/scan', { method: 'POST', body: JSON.stringify({ orgId: 'default', content: testContent }) }); setTestResults(r); } catch (e) { toast(e.message, 'error'); }
+    try { const r = await engineCall('/dlp/scan', { method: 'POST', body: JSON.stringify({ orgId: getOrgId(), content: testContent }) }); setTestResults(r); } catch (e) { toast(e.message, 'error'); }
   };
 
   const severityColor = (s) => s === 'critical' ? 'var(--danger)' : s === 'high' ? 'var(--warning)' : s === 'medium' ? 'var(--info)' : 'var(--text-muted)';