@agenticmail/enterprise 0.5.311 → 0.5.313

package/dist/setup-5JPWW6IP.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-7ILSXGY6.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-CUN6LVUV.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-HKV4FQFW.js";
+import "./chunk-D3KFSWLK.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-D3YHPWPY.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-P4PODSQH.js";
+import "./chunk-MQKIWAHQ.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-D4A5I6UM.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-F5VZ5EUH.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-DOPLXTB3.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-ASD2YB6O.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-E3NSIM6B.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-4QYRS3MS.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-E3V2D7NL.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-52REEVDW.js";
+import "./chunk-NGA7BBPF.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-FSYPGI2C.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-763OMGFI.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-G3RPKRG3.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-LDUD6AZY.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-KJ77HNWK.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-JHRJ4QJ6.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-LPSOY5V5.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-WY42BS3F.js";
+import "./chunk-BSVWPG6I.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-N3ODDSQE.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-XAA4VHHZ.js";
+import "./chunk-MJGGW6MC.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-NLDM3M2P.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-GFEAZN6Y.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-PT6WGOYB.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-OPOBUYJT.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-SWJMNDWF.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-OE3TI4IQ.js";
+import "./chunk-4WLJIZZB.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/system-prompts-6OUTAMH6.js

@@ -0,0 +1,41 @@
+import {
+  BROWSER_RULES,
+  buildCalendarEventPrompt,
+  buildCatchupPrompt,
+  buildContactsPrompt,
+  buildDocsTaskPrompt,
+  buildDriveTaskPrompt,
+  buildFormsPrompt,
+  buildGmailPrompt,
+  buildGoogleChatPrompt,
+  buildGoogleTasksPrompt,
+  buildMeetJoinFromChatPrompt,
+  buildMeetJoinPrompt,
+  buildScheduleBlock,
+  buildScheduleInfo,
+  buildSheetsTaskPrompt,
+  buildSlidesPrompt,
+  buildTaskPrompt,
+  buildTriagePrompt
+} from "./chunk-7UCKD25B.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  BROWSER_RULES,
+  buildCalendarEventPrompt,
+  buildCatchupPrompt,
+  buildContactsPrompt,
+  buildDocsTaskPrompt,
+  buildDriveTaskPrompt,
+  buildFormsPrompt,
+  buildGmailPrompt,
+  buildGoogleChatPrompt,
+  buildGoogleTasksPrompt,
+  buildMeetJoinFromChatPrompt,
+  buildMeetJoinPrompt,
+  buildScheduleBlock,
+  buildScheduleInfo,
+  buildSheetsTaskPrompt,
+  buildSlidesPrompt,
+  buildTaskPrompt,
+  buildTriagePrompt
+};

package/dist/task-queue-YP2I54IA.js

@@ -0,0 +1,9 @@
+import {
+  TaskQueueManager,
+  init_task_queue
+} from "./chunk-BDCFOP7O.js";
+import "./chunk-KFQGP6VL.js";
+init_task_queue();
+export {
+  TaskQueueManager
+};

package/dist/telegram-QRNGRT5M.js

@@ -0,0 +1,17 @@
+import {
+  createTelegramTools,
+  deleteTelegramWebhook,
+  getTelegramWebhookInfo,
+  init_telegram,
+  pollTelegramUpdates,
+  setTelegramWebhook
+} from "./chunk-EX6FQSEV.js";
+import "./chunk-KFQGP6VL.js";
+init_telegram();
+export {
+  createTelegramTools,
+  deleteTelegramWebhook,
+  getTelegramWebhookInfo,
+  pollTelegramUpdates,
+  setTelegramWebhook
+};

package/dist/whatsapp-VYVINCGV.js

@@ -0,0 +1,31 @@
+import {
+  autoStartConnections,
+  createWhatsAppTools,
+  getActiveWhatsAppAgents,
+  getConnection,
+  getConnectionStatus,
+  getOrCreateConnection,
+  getWhatsAppQR,
+  hasAuthState,
+  init_whatsapp,
+  isWhatsAppConnected,
+  onWhatsAppMessage,
+  sendTestMessage,
+  toJid
+} from "./chunk-P7UOSFIE.js";
+import "./chunk-KFQGP6VL.js";
+init_whatsapp();
+export {
+  autoStartConnections,
+  createWhatsAppTools,
+  getActiveWhatsAppAgents,
+  getConnection,
+  getConnectionStatus,
+  getOrCreateConnection,
+  getWhatsAppQR,
+  hasAuthState,
+  isWhatsAppConnected,
+  onWhatsAppMessage,
+  sendTestMessage,
+  toJid
+};

package/god_is_great.html

@@ -0,0 +1,35 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>God is Great</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            display: flex;
+            justify-content: center;
+            align-items: center;
+            height: 100vh;
+            margin: 0;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+        }
+        .message {
+            font-size: 3rem;
+            text-align: center;
+            text-shadow: 2px 2px 4px rgba(0,0,0,0.3);
+            padding: 40px;
+            border-radius: 20px;
+            background: rgba(255,255,255,0.1);
+            backdrop-filter: blur(10px);
+            border: 1px solid rgba(255,255,255,0.2);
+        }
+    </style>
+</head>
+<body>
+    <div class="message">
+        God is Great
+    </div>
+</body>
+</html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.311",
+  "version": "0.5.313",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/admin/routes.ts

@@ -757,13 +757,15 @@ export function createAdminRoutes(db: DatabaseAdapter) {
     const userRole = c.get('userRole' as any);
     if (!userId) return c.json({ error: 'Not authenticated' }, 401);
 
+    const user = await db.getUser(userId);
+    const clientOrgId = user?.clientOrgId || c.get('clientOrgId' as any) || null;
+
     // Owner and admin always get full access
     if (userRole === 'owner' || userRole === 'admin') {
-      return c.json({ permissions: '*', role: userRole });
+      return c.json({ permissions: '*', role: userRole, clientOrgId });
     }
 
-    const user = await db.getUser(userId);
-    return c.json({ permissions: user?.permissions ?? '*', role: userRole, clientOrgId: user?.clientOrgId || null });
+    return c.json({ permissions: user?.permissions ?? '*', role: userRole, clientOrgId });
   });
 
   // ─── Platform Capabilities ──────────────────────────
@@ -2195,8 +2197,26 @@ export function createAdminRoutes(db: DatabaseAdapter) {
 
   // ─── Client Organizations ─────────────────────────────
 
-  api.get('/organizations', requireRole('admin'), async (c) => {
+  api.get('/organizations', async (c) => {
     try {
+      // Org-bound users can only see their own organization
+      const clientOrgId = c.get('clientOrgId' as any);
+      if (clientOrgId) {
+        const isPostgres = (db as any).pool;
+        if (isPostgres) {
+          const { rows } = await (db as any)._query(
+            `SELECT o.*, COUNT(a.id) as agent_count FROM client_organizations o LEFT JOIN agents a ON a.client_org_id = o.id WHERE o.id = $1 GROUP BY o.id`, [clientOrgId]);
+          return c.json({ organizations: rows });
+        }
+        return c.json({ organizations: [] });
+      }
+
+      // Full access for admins/owners
+      const userRole = c.get('userRole' as any);
+      if (userRole !== 'admin' && userRole !== 'owner') {
+        return c.json({ error: 'Insufficient permissions' }, 403);
+      }
+
       const isPostgres = (db as any).pool;
       if (isPostgres) {
         const { rows } = await (db as any)._query(`

package/src/agent-tools/index.ts

@@ -219,9 +219,12 @@ export interface AllToolsOptions extends ToolCreationOptions {
  */
 export async function createAllTools(options?: AllToolsOptions): Promise<AnyAgentTool[]> {
   // Create security primitives
+  // Default allowed dirs: workspace + /tmp + home (agents need temp file access for media processing, etc.)
+  var defaultAllowedDirs = ['/tmp', '/var/tmp', process.env.HOME || '/root'];
+  var configuredDirs = options?.security?.pathSandbox?.allowedDirs || [];
   var pathSandbox = options?.workspaceDir && options?.security?.pathSandbox?.enabled !== false
     ? createPathSandbox(options.workspaceDir, {
-        allowedDirs: options.security?.pathSandbox?.allowedDirs,
+        allowedDirs: [...defaultAllowedDirs, ...configuredDirs],
         blockedPatterns: options.security?.pathSandbox?.blockedPatterns,
       })
     : undefined;

package/src/agent-tools/tool-resolver.ts

@@ -422,6 +422,10 @@ const TOOL_REGISTRY: Record<string, ToolSet> = {
   shell_session_list: 'local_shell',
   shell_session_kill: 'local_shell',
   system_info: 'local_shell',
+  check_dependency: 'local_shell',
+  install_dependency: 'local_shell',
+  check_environment: 'local_shell',
+  cleanup_installed: 'local_shell',
 
   // ── Messaging: WhatsApp (16) ──
   whatsapp_connect: 'msg_whatsapp',
@@ -444,6 +448,7 @@ const TOOL_REGISTRY: Record<string, ToolSet> = {
   // ── Messaging: Telegram (4) ──
   telegram_send: 'msg_telegram',
   telegram_send_media: 'msg_telegram',
+  telegram_download_file: 'msg_telegram',
   telegram_get_me: 'msg_telegram',
   telegram_get_chat: 'msg_telegram',
 
@@ -511,16 +516,22 @@ const CONTEXT_PROMOTIONS: Record<SessionContext, ToolSet[]> = {
     'ent_knowledge',
   ],
 
-  // WhatsApp: lean — only WhatsApp tools + browser
+  // WhatsApp: messaging + essential file/shell tools for media processing
   whatsapp: [
     'msg_whatsapp',
     'browser',
+    'local_shell',
+    'filesystem',
+    'web',
   ],
 
-  // Telegram: lean — only Telegram tools + browser
+  // Telegram: messaging + essential file/shell tools for media processing
   telegram: [
     'msg_telegram',
     'browser',
+    'local_shell',
+    'filesystem',
+    'web',
   ],
 
   // Email handler: focused email + lookups
@@ -807,9 +818,9 @@ const SET_DESCRIPTIONS: Record<ToolSet, string> = {
   ent_knowledge: 'Knowledge base + hub search (3 tools)',
   agenticmail: 'Full email management (40 tools)',
   local_filesystem: 'File read/write/edit/move/delete/search (7 tools)',
-  local_shell: 'Shell exec, PTY sessions, sudo, package install (7 tools)',
+  local_shell: 'Shell exec, PTY sessions, sudo, package install, dependency management (11 tools)',
   msg_whatsapp: 'WhatsApp messaging, media, groups (16 tools)',
-  msg_telegram: 'Telegram messaging and media (4 tools)',
+  msg_telegram: 'Telegram messaging, media, and file download (5 tools)',
   management: 'Team management — delegate tasks, escalate, org chart (10 tools)',
   mcp_bridge: 'MCP integration adapters',
 };

package/src/agent-tools/tools/browser.ts

@@ -665,8 +665,8 @@ export function createBrowserTool(options?: ToolCreationOptions & {
         switch (action) {
           case 'navigate': {
             var url = readStringParam(params, 'url', { required: true });
-            // SSRF guard on navigation URL
-            if (ssrfGuard) {
+            // SSRF guard on navigation URL (skip for file:// — browser can open local files)
+            if (ssrfGuard && !url.startsWith('file://') && !url.startsWith('file:///')) {
               try {
                 await ssrfGuard.validateUrl(url);
               } catch (err: any) {