@agenticmail/enterprise 0.5.32 → 0.5.34

package/dist/runtime-J4MZ7O4W.js

@@ -0,0 +1,47 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-DR2F2RWV.js";
+import "./chunk-TYW5XTOW.js";
+import "./chunk-JLSQOQ5L.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/runtime-TR2AKTLN.js

@@ -0,0 +1,47 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-BXUATBCN.js";
+import "./chunk-TYW5XTOW.js";
+import "./chunk-JLSQOQ5L.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/server-2Z6TXCDZ.js

@@ -0,0 +1,12 @@
+import {
+  createServer
+} from "./chunk-HN7G4HGB.js";
+import "./chunk-3SMTCIR4.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/server-RIF222HK.js

@@ -0,0 +1,12 @@
+import {
+  createServer
+} from "./chunk-LLRHGL2Z.js";
+import "./chunk-3SMTCIR4.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-67KZYSLU.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-MFRJ6JGJ.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-R6YVL6Y6.js";
+import "./chunk-WEWW2XJW.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-TD7NDNIX.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-PEGTWAPQ.js";
+import "./chunk-ZMZCLNTY.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.32",
+  "version": "0.5.34",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/db/postgres.ts

@@ -359,7 +359,7 @@ export class PostgresAdapter extends DatabaseAdapter {
     return {
       events: rows.map((r: any) => ({
         id: r.id, timestamp: r.timestamp, actor: r.actor, actorType: r.actor_type,
-        action: r.action, resource: r.resource, details: JSON.parse(r.details || '{}'), ip: r.ip,
+        action: r.action, resource: r.resource, details: typeof r.details === 'string' ? JSON.parse(r.details || '{}') : (r.details || {}), ip: r.ip,
       })),
       total,
     };
@@ -464,7 +464,7 @@ export class PostgresAdapter extends DatabaseAdapter {
     return {
       enabled: !!rows[0].enabled,
       retainDays: rows[0].retain_days,
-      excludeTags: JSON.parse(rows[0].exclude_tags || '[]'),
+      excludeTags: typeof rows[0].exclude_tags === 'string' ? JSON.parse(rows[0].exclude_tags || '[]') : (rows[0].exclude_tags || []),
       archiveFirst: !!rows[0].archive_first,
     };
   }

package/src/engine/db-adapter.ts

@@ -10,8 +10,10 @@
 import type { ManagedAgent, AgentState, StateTransition, AgentUsage, LifecycleEvent } from './lifecycle.js';
 
 /** Safe JSON parse — returns fallback on malformed data instead of throwing */
-function sj(val: string | null | undefined, fallback: any = {}): any {
-  if (!val) return fallback;
+function sj(val: any, fallback: any = {}): any {
+  if (val == null) return fallback;
+  if (typeof val === 'object') return val; // Postgres JSON/JSONB returns parsed objects
+  if (typeof val !== 'string') return fallback;
   try { return JSON.parse(val); } catch { return fallback; }
 }
 import type { AgentPermissionProfile } from './skills.js';

package/src/engine/guardrails.ts

@@ -122,7 +122,7 @@ export class GuardrailEngine {
       for (const r of rules) {
         this.anomalyRules.set(r.id, {
           id: r.id, orgId: r.org_id, name: r.name, description: r.description,
-          ruleType: r.rule_type, config: JSON.parse(r.config),
+          ruleType: r.rule_type, config: typeof r.config === "string" ? JSON.parse(r.config) : (r.config || {}),
           action: r.action, enabled: !!r.enabled,
           createdAt: r.created_at, updatedAt: r.updated_at,
         });

package/src/engine/journal.ts

@@ -91,8 +91,8 @@ export class ActionJournal {
       this.entries = rows.map((r: any) => ({
         id: r.id, orgId: r.org_id, agentId: r.agent_id, sessionId: r.session_id,
         toolId: r.tool_id, toolName: r.tool_name, actionType: r.action_type,
-        forwardData: JSON.parse(r.forward_data),
-        reverseData: r.reverse_data ? JSON.parse(r.reverse_data) : undefined,
+        forwardData: typeof r.forward_data === "string" ? JSON.parse(r.forward_data) : (r.forward_data || {}),
+        reverseData: r.reverse_data ? (typeof r.reverse_data === "string" ? JSON.parse(r.reverse_data) : r.reverse_data) : undefined,
         reversible: !!r.reversible, reversed: !!r.reversed,
         reversedAt: r.reversed_at, reversedBy: r.reversed_by,
         createdAt: r.created_at,

package/src/engine/oauth-connect-routes.ts

@@ -82,14 +82,13 @@ export function createOAuthConnectRoutes(vault: SecureVault) {
 
       // Resolve provider
       const providerKey = SKILL_PROVIDER_MAP[skillId];
-      if (providerKey === undefined) {
-        return c.json({ error: `Unknown skill: ${skillId}` }, 404);
-      }
-      if (providerKey === null) {
-        return c.json(
-          { error: `Skill "${skillId}" does not use OAuth. Configure it with an API key or bot token instead.` },
-          400,
-        );
+      if (providerKey === undefined || providerKey === null) {
+        // Skill doesn't use OAuth — instruct client to use token-based auth (POST /authorize/:skillId)
+        return c.json({
+          error: `Skill "${skillId}" uses API key authentication, not OAuth. Use the token input to save your API key.`,
+          authType: 'token',
+          skillId,
+        }, 200);
       }
 
       const provider: OAuthProviderDefinition | undefined =
@@ -149,6 +148,34 @@ export function createOAuthConnectRoutes(vault: SecureVault) {
     }
   });
 
+  // ─── POST /authorize/:skillId — Save API key/token directly ─────
+
+  router.post('/authorize/:skillId', async (c) => {
+    try {
+      const skillId = c.req.param('skillId');
+      const orgId = c.req.query('orgId') || 'default';
+      const { token } = await c.req.json();
+
+      if (!token || typeof token !== 'string' || !token.trim()) {
+        return c.json({ error: 'A non-empty token value is required' }, 400);
+      }
+
+      // Store as access_token in vault (same format as OAuth tokens)
+      await vault.storeSecret(
+        orgId,
+        `skill:${skillId}:access_token`,
+        'skill_credential',
+        token.trim(),
+        { provider: 'api_key', manualEntry: true },
+        'dashboard',
+      );
+
+      return c.json({ success: true, skillId, connected: true });
+    } catch (e: any) {
+      return c.json({ error: e.message }, 500);
+    }
+  });
+
   // ─── GET /callback — Handle OAuth redirect ───────────
 
   router.get('/callback', async (c) => {

package/src/engine/org-policies.ts

@@ -118,8 +118,8 @@ export class OrgPolicyEngine {
           priority: r.priority,
           version: r.version,
           enforcement: r.enforcement as PolicyEnforcement,
-          appliesTo: JSON.parse(r.applies_to || '["*"]'),
-          tags: JSON.parse(r.tags || '[]'),
+          appliesTo: typeof r.applies_to === 'string' ? JSON.parse(r.applies_to || '["*"]') : (r.applies_to || ['*']),
+          tags: typeof r.tags === 'string' ? JSON.parse(r.tags || '[]') : (r.tags || []),
           enabled: !!r.enabled,
           createdBy: r.created_by,
           createdAt: r.created_at,

package/src/engine/policy-import.ts

@@ -745,9 +745,9 @@ export class PolicyImporter {
       for (const r of rows) {
         this.jobs.set(r.id, {
           id: r.id, orgId: r.org_id, format: r.format, status: r.status,
-          progress: JSON.parse(r.progress || '{}'),
-          errors: JSON.parse(r.errors || '[]'),
-          policyIds: JSON.parse(r.policy_ids || '[]'),
+          progress: typeof r.progress === "string" ? JSON.parse(r.progress || "{}") : (r.progress || {}),
+          errors: typeof r.errors === "string" ? JSON.parse(r.errors || "[]") : (r.errors || []),
+          policyIds: typeof r.policy_ids === "string" ? JSON.parse(r.policy_ids || "[]") : (r.policy_ids || []),
           createdBy: r.created_by, createdAt: r.created_at,
           completedAt: r.completed_at || undefined,
         });

package/src/engine/storage-manager.ts

@@ -233,7 +233,7 @@ export class StorageManager {
     return rows.map((r: any) => ({
       id: r.id, orgId: r.org_id, storageKey: r.storage_key, originalName: r.original_name,
       contentType: r.content_type, size: r.size, relatedType: r.related_type,
-      relatedId: r.related_id, metadata: JSON.parse(r.metadata || '{}'),
+      relatedId: r.related_id, metadata: typeof r.metadata === "string" ? JSON.parse(r.metadata || "{}") : (r.metadata || {}),
       createdBy: r.created_by, createdAt: r.created_at,
     }));
   }