@agenticmail/enterprise 0.5.32 → 0.5.33

package/dist/runtime-J4MZ7O4W.js

@@ -0,0 +1,47 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-DR2F2RWV.js";
+import "./chunk-TYW5XTOW.js";
+import "./chunk-JLSQOQ5L.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/server-2Z6TXCDZ.js

@@ -0,0 +1,12 @@
+import {
+  createServer
+} from "./chunk-HN7G4HGB.js";
+import "./chunk-3SMTCIR4.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-TD7NDNIX.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-PEGTWAPQ.js";
+import "./chunk-ZMZCLNTY.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.32",
+  "version": "0.5.33",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/engine/oauth-connect-routes.ts

@@ -82,14 +82,13 @@ export function createOAuthConnectRoutes(vault: SecureVault) {
 
       // Resolve provider
       const providerKey = SKILL_PROVIDER_MAP[skillId];
-      if (providerKey === undefined) {
-        return c.json({ error: `Unknown skill: ${skillId}` }, 404);
-      }
-      if (providerKey === null) {
-        return c.json(
-          { error: `Skill "${skillId}" does not use OAuth. Configure it with an API key or bot token instead.` },
-          400,
-        );
+      if (providerKey === undefined || providerKey === null) {
+        // Skill doesn't use OAuth — instruct client to use token-based auth (POST /authorize/:skillId)
+        return c.json({
+          error: `Skill "${skillId}" uses API key authentication, not OAuth. Use the token input to save your API key.`,
+          authType: 'token',
+          skillId,
+        }, 200);
       }
 
       const provider: OAuthProviderDefinition | undefined =
@@ -149,6 +148,34 @@ export function createOAuthConnectRoutes(vault: SecureVault) {
     }
   });
 
+  // ─── POST /authorize/:skillId — Save API key/token directly ─────
+
+  router.post('/authorize/:skillId', async (c) => {
+    try {
+      const skillId = c.req.param('skillId');
+      const orgId = c.req.query('orgId') || 'default';
+      const { token } = await c.req.json();
+
+      if (!token || typeof token !== 'string' || !token.trim()) {
+        return c.json({ error: 'A non-empty token value is required' }, 400);
+      }
+
+      // Store as access_token in vault (same format as OAuth tokens)
+      await vault.storeSecret(
+        orgId,
+        `skill:${skillId}:access_token`,
+        'skill_credential',
+        token.trim(),
+        { provider: 'api_key', manualEntry: true },
+        'dashboard',
+      );
+
+      return c.json({ success: true, skillId, connected: true });
+    } catch (e: any) {
+      return c.json({ error: e.message }, 500);
+    }
+  });
+
   // ─── GET /callback — Handle OAuth redirect ───────────
 
   router.get('/callback', async (c) => {