@agenticmail/enterprise 0.5.322 → 0.5.324

package/dist/cli-serve-7JQ4FVUQ.js

@@ -0,0 +1,260 @@
+import "./chunk-KFQGP6VL.js";
+
+// src/cli-serve.ts
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+function loadEnvFile() {
+  const candidates = [
+    join(process.cwd(), ".env"),
+    join(homedir(), ".agenticmail", ".env")
+  ];
+  for (const envPath of candidates) {
+    if (!existsSync(envPath)) continue;
+    try {
+      const content = readFileSync(envPath, "utf8");
+      for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#")) continue;
+        const eq = trimmed.indexOf("=");
+        if (eq < 0) continue;
+        const key = trimmed.slice(0, eq).trim();
+        let val = trimmed.slice(eq + 1).trim();
+        if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
+          val = val.slice(1, -1);
+        }
+        if (!process.env[key]) process.env[key] = val;
+      }
+      console.log(`Loaded config from ${envPath}`);
+      return;
+    } catch {
+    }
+  }
+}
+async function ensureSecrets() {
+  const { randomUUID } = await import("crypto");
+  const envDir = join(homedir(), ".agenticmail");
+  const envPath = join(envDir, ".env");
+  let dirty = false;
+  if (!process.env.JWT_SECRET) {
+    process.env.JWT_SECRET = randomUUID() + randomUUID();
+    dirty = true;
+    console.log("[startup] Generated new JWT_SECRET (existing sessions will need to re-login)");
+  }
+  if (!process.env.AGENTICMAIL_VAULT_KEY) {
+    process.env.AGENTICMAIL_VAULT_KEY = randomUUID() + randomUUID();
+    dirty = true;
+    console.log("[startup] Generated new AGENTICMAIL_VAULT_KEY");
+    console.log("[startup] \u26A0\uFE0F  Previously encrypted credentials will need to be re-entered in the dashboard");
+  }
+  if (dirty) {
+    try {
+      if (!existsSync(envDir)) {
+        const { mkdirSync } = await import("fs");
+        mkdirSync(envDir, { recursive: true });
+      }
+      const { appendFileSync } = await import("fs");
+      const lines = [];
+      let existing = "";
+      if (existsSync(envPath)) {
+        existing = readFileSync(envPath, "utf8");
+      }
+      if (!existing.includes("JWT_SECRET=")) {
+        lines.push(`JWT_SECRET=${process.env.JWT_SECRET}`);
+      }
+      if (!existing.includes("AGENTICMAIL_VAULT_KEY=")) {
+        lines.push(`AGENTICMAIL_VAULT_KEY=${process.env.AGENTICMAIL_VAULT_KEY}`);
+      }
+      if (lines.length) {
+        appendFileSync(envPath, "\n" + lines.join("\n") + "\n", { mode: 384 });
+        console.log(`[startup] Saved secrets to ${envPath}`);
+      }
+    } catch (e) {
+      console.warn(`[startup] Could not save secrets to ${envPath}: ${e.message}`);
+    }
+  }
+}
+async function runServe(_args) {
+  loadEnvFile();
+  const DATABASE_URL = process.env.DATABASE_URL;
+  const PORT = parseInt(process.env.PORT || "8080", 10);
+  await ensureSecrets();
+  const JWT_SECRET = process.env.JWT_SECRET;
+  const VAULT_KEY = process.env.AGENTICMAIL_VAULT_KEY;
+  if (!DATABASE_URL) {
+    console.error("ERROR: DATABASE_URL is required.");
+    console.error("");
+    console.error("Set it via environment variable or .env file:");
+    console.error("  DATABASE_URL=postgresql://user:pass@host:5432/db npx @agenticmail/enterprise start");
+    console.error("");
+    console.error("Or create a .env file (in cwd or ~/.agenticmail/.env):");
+    console.error("  DATABASE_URL=postgresql://user:pass@host:5432/db");
+    console.error("  JWT_SECRET=your-secret-here");
+    console.error("  PORT=3200");
+    process.exit(1);
+  }
+  const { createAdapter, smartDbConfig } = await import("./factory-MQASIPEB.js");
+  const { createServer } = await import("./server-7NT4LMSQ.js");
+  const db = await createAdapter(smartDbConfig(DATABASE_URL));
+  await db.migrate();
+  const server = createServer({
+    port: PORT,
+    db,
+    jwtSecret: JWT_SECRET,
+    corsOrigins: ["*"]
+  });
+  await server.start();
+  console.log(`AgenticMail Enterprise server running on :${PORT}`);
+  try {
+    const { startPreventSleep } = await import("./screen-unlock-4RPZBHOI.js");
+    const adminDb = server.getAdminDb?.() || server.adminDb;
+    if (adminDb) {
+      const settings = await adminDb.getSettings?.().catch(() => null);
+      const screenAccess = settings?.securityConfig?.screenAccess;
+      if (screenAccess?.enabled && screenAccess?.preventSleep) {
+        startPreventSleep();
+        console.log("[startup] Prevent-sleep enabled \u2014 system will stay awake while agents are active");
+      }
+    }
+  } catch {
+  }
+  try {
+    await setupSystemPersistence();
+  } catch (e) {
+    console.warn("[startup] System persistence setup skipped: " + e.message);
+  }
+  const tunnelToken = process.env.CLOUDFLARED_TOKEN;
+  if (tunnelToken) {
+    try {
+      const { execSync, spawn } = await import("child_process");
+      try {
+        execSync("which cloudflared", { timeout: 3e3 });
+      } catch {
+        console.log("[startup] cloudflared not found \u2014 skipping tunnel auto-start");
+        console.log("[startup] Install cloudflared to enable tunnel: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/");
+        return;
+      }
+      try {
+        execSync('pgrep -f "cloudflared.*tunnel.*run"', { timeout: 3e3 });
+        console.log("[startup] cloudflared tunnel already running");
+        return;
+      } catch {
+      }
+      const subdomain = process.env.AGENTICMAIL_SUBDOMAIN || process.env.AGENTICMAIL_DOMAIN || "";
+      console.log(`[startup] Starting cloudflared tunnel${subdomain ? ` for ${subdomain}.agenticmail.io` : ""}...`);
+      const child = spawn("cloudflared", ["tunnel", "--no-autoupdate", "run", "--token", tunnelToken], {
+        detached: true,
+        stdio: "ignore"
+      });
+      child.unref();
+      console.log("[startup] cloudflared tunnel started (pid " + child.pid + ")");
+    } catch (e) {
+      console.warn("[startup] Could not auto-start cloudflared: " + e.message);
+    }
+  }
+}
+async function setupSystemPersistence() {
+  const { execSync, spawnSync } = await import("child_process");
+  const { existsSync: exists, writeFileSync, mkdirSync } = await import("fs");
+  const { join: pathJoin } = await import("path");
+  const platform = process.platform;
+  if (!process.env.PM2_HOME && !process.env.pm_id) {
+    return;
+  }
+  const markerDir = pathJoin(homedir(), ".agenticmail");
+  const markerFile = pathJoin(markerDir, ".persistence-configured");
+  if (exists(markerFile)) {
+    try {
+      execSync("pm2 save --silent", { timeout: 1e4, stdio: "ignore" });
+    } catch {
+    }
+    return;
+  }
+  console.log("[startup] Configuring system persistence (one-time setup)...");
+  try {
+    if (platform === "darwin") {
+      const result = spawnSync("pm2", ["startup", "launchd", "--silent"], {
+        timeout: 15e3,
+        stdio: "pipe",
+        encoding: "utf-8"
+      });
+      const output = (result.stdout || "") + (result.stderr || "");
+      const sudoMatch = output.match(/sudo\s+env\s+.*pm2\s+startup.*/);
+      if (sudoMatch) {
+        console.log("[startup] PM2 startup requires sudo. Run this once:");
+        console.log("  " + sudoMatch[0]);
+      } else {
+        console.log("[startup] PM2 startup configured (launchd)");
+      }
+      const plistPath = pathJoin(homedir(), "Library", "LaunchAgents", `pm2.${process.env.USER || "user"}.plist`);
+      if (exists(plistPath)) {
+        try {
+          execSync(`launchctl load -w "${plistPath}"`, { timeout: 5e3, stdio: "ignore" });
+        } catch {
+        }
+      }
+    } else if (platform === "linux") {
+      const result = spawnSync("pm2", ["startup", "systemd", "--silent"], {
+        timeout: 15e3,
+        stdio: "pipe",
+        encoding: "utf-8"
+      });
+      const output = (result.stdout || "") + (result.stderr || "");
+      const sudoMatch = output.match(/sudo\s+env\s+.*pm2\s+startup.*/);
+      if (sudoMatch) {
+        try {
+          execSync(sudoMatch[0], { timeout: 15e3, stdio: "ignore" });
+          console.log("[startup] PM2 startup configured (systemd)");
+        } catch {
+          console.log("[startup] PM2 startup requires root. Run this once:");
+          console.log("  " + sudoMatch[0]);
+        }
+      } else {
+        console.log("[startup] PM2 startup configured (systemd)");
+      }
+    } else if (platform === "win32") {
+      try {
+        execSync("npm list -g pm2-windows-startup", { timeout: 1e4, stdio: "ignore" });
+      } catch {
+        console.log("[startup] Installing pm2-windows-startup...");
+        try {
+          execSync("npm install -g pm2-windows-startup", { timeout: 6e4, stdio: "ignore" });
+          execSync("pm2-startup install", { timeout: 15e3, stdio: "ignore" });
+          console.log("[startup] PM2 startup configured (Windows Service)");
+        } catch (e) {
+          console.warn("[startup] Could not install pm2-windows-startup: " + e.message);
+        }
+      }
+    }
+  } catch (e) {
+    console.warn("[startup] PM2 startup setup: " + e.message);
+  }
+  try {
+    const moduleList = execSync("pm2 ls --silent 2>/dev/null || true", { timeout: 1e4, encoding: "utf-8" });
+    if (!moduleList.includes("pm2-logrotate")) {
+      console.log("[startup] Installing pm2-logrotate...");
+      execSync("pm2 install pm2-logrotate --silent", { timeout: 6e4, stdio: "ignore" });
+      execSync("pm2 set pm2-logrotate:max_size 10M --silent", { timeout: 5e3, stdio: "ignore" });
+      execSync("pm2 set pm2-logrotate:retain 5 --silent", { timeout: 5e3, stdio: "ignore" });
+      execSync("pm2 set pm2-logrotate:compress true --silent", { timeout: 5e3, stdio: "ignore" });
+      console.log("[startup] Log rotation configured (10MB, 5 files)");
+    }
+  } catch {
+  }
+  try {
+    execSync("pm2 save --silent", { timeout: 1e4, stdio: "ignore" });
+    console.log("[startup] Process list saved");
+  } catch {
+  }
+  try {
+    if (!exists(markerDir)) mkdirSync(markerDir, { recursive: true });
+    writeFileSync(markerFile, (/* @__PURE__ */ new Date()).toISOString() + `
+platform=${platform}
+`, { mode: 384 });
+    console.log("[startup] System persistence configured successfully");
+  } catch {
+  }
+}
+export {
+  runServe
+};

package/dist/cli.js

@@ -57,14 +57,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-53FVANQK.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-7JQ4FVUQ.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
-    import("./cli-agent-ION2W5JF.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
+    import("./cli-agent-USMKX7WN.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-T6KYFR7O.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-6NUSB4XO.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/dashboard/app.js

@@ -31,6 +31,7 @@ import { DatabaseAccessPage } from './pages/database-access.js';
 import { OrganizationsPage } from './pages/organizations.js';
 import { RolesPage } from './pages/roles.js';
 import { MemoryTransferPage } from './pages/memory-transfer.js';
+import { ClusterPage } from './pages/cluster.js';
 
 // ─── Toast System ────────────────────────────────────────
 let toastId = 0;
@@ -252,7 +253,7 @@ function App() {
         setUser(d.user);
         // Immediately restrict permissions for client org users (before async fetch)
         if (d.user.clientOrgId) {
-          setPermissions({ dashboard: true, agents: true, roles: true, skills: true, 'community-skills': true, 'skill-connections': true, 'database-access': true, knowledge: true, 'knowledge-contributions': true, 'memory-transfer': true, approvals: true, 'org-chart': true, 'task-pipeline': true, workforce: true, messages: true, guardrails: true, journal: true, activity: true, dlp: true, compliance: true, vault: true, audit: true, settings: true });
+          setPermissions({ dashboard: true, agents: true, roles: true, skills: true, 'community-skills': true, 'skill-connections': true, 'database-access': true, knowledge: true, 'knowledge-contributions': true, 'memory-transfer': true, approvals: true, 'org-chart': true, 'task-pipeline': true, cluster: true, workforce: true, messages: true, guardrails: true, journal: true, activity: true, dlp: true, compliance: true, vault: true, audit: true, settings: true });
         }
         // Then fetch computed permissions for the definitive set
         apiCall('/me/permissions').then(function(p) { if (p && p.permissions) setPermissions(p.permissions); }).catch(function() {});
@@ -404,6 +405,7 @@ function App() {
     { section: 'Operations', items: [
       { id: 'org-chart', icon: I.orgChart, label: 'Org Chart' },
       { id: 'task-pipeline', icon: I.workflow, label: 'Task Pipeline' },
+      { id: 'cluster', icon: I.server, label: 'Cluster' },
       { id: 'workforce', icon: I.clock, label: 'Workforce' },
       { id: 'messages', icon: I.messages, label: 'Messages' },
       { id: 'guardrails', icon: I.guardrails, label: 'Guardrails' },
@@ -447,6 +449,7 @@ function App() {
     organizations: OrganizationsPage,
     roles: RolesPage,
     'memory-transfer': MemoryTransferPage,
+    cluster: ClusterPage,
   };
 
   const navigateToAgent = (agentId) => { _setSelectedAgentId(agentId); history.pushState(null, '', '/dashboard/agents/' + agentId); };

package/dist/dashboard/components/icons.js

@@ -58,6 +58,7 @@ chevronRight: () => h('svg', S, h('polyline', { points: '9 18 15 12 9 6' })),
 chevronDown: () => h('svg', S, h('polyline', { points: '6 9 12 15 18 9' })),
 mail: () => h('svg', S, h('path', { d: 'M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z' }), h('polyline', { points: '22,6 12,13 2,6' })),
   building: () => h('svg', S, h('path', { d: 'M3 21h18M3 10h18M3 7l9-4 9 4M4 10v11M20 10v11M8 14v.01M12 14v.01M16 14v.01M8 18v.01M12 18v.01M16 18v.01' })),
+  server: () => h('svg', S, h('rect', { x: 2, y: 2, width: 20, height: 8, rx: 2, ry: 2 }), h('rect', { x: 2, y: 14, width: 20, height: 8, rx: 2, ry: 2 }), h('line', { x1: 6, y1: 6, x2: 6.01, y2: 6 }), h('line', { x1: 6, y1: 18, x2: 6.01, y2: 18 })),
   brain: () => h('svg', S, h('path', { d: 'M9.5 2a3.5 3.5 0 00-3.21 4.87A3.5 3.5 0 004 10.5a3.5 3.5 0 002.81 3.43A3.5 3.5 0 009.5 18h1V2z' }), h('path', { d: 'M14.5 2a3.5 3.5 0 013.21 4.87A3.5 3.5 0 0120 10.5a3.5 3.5 0 01-2.81 3.43A3.5 3.5 0 0114.5 18h-1V2z' }), h('path', { d: 'M12 2v16' }), h('path', { d: 'M4.93 7.5h2.57M16.5 7.5h2.57M7 13h3M14 13h3' })),
   edit: () => h('svg', S, h('path', { d: 'M11 4H4a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7' }), h('path', { d: 'M18.5 2.5a2.121 2.121 0 0 1 3 3L12 15l-4 1 1-4 9.5-9.5z' })),
 };

package/dist/dashboard/pages/agent-detail/index.js

@@ -103,14 +103,35 @@ export function AgentDetailPage(props) {
 
   useEffect(function() { load(); }, [agentId]);
 
+  // ─── Real-Time Status from Agent Process ────────────────
+  var [liveStatus, setLiveStatus] = useState(null);
+  useEffect(function() {
+    var es = new EventSource('/api/engine/agent-status-stream?agentId=' + encodeURIComponent(agentId));
+    es.onmessage = function(ev) {
+      try {
+        var d = JSON.parse(ev.data);
+        if (d.type === 'status' && d.agentId === agentId) { setLiveStatus(d); }
+      } catch(e) {}
+    };
+    es.onerror = function() { /* reconnects automatically */ };
+    return function() { es.close(); };
+  }, [agentId]);
+
   // ─── Derived Values ─────────────────────────────────────
 
   var ea = engineAgent || {};
   var a = agent || {};
   var config = ea.config || {};
   var identity = config.identity || {};
-  var state = ea.state || ea.status || a.status || 'unknown';
-  var stateColor = { running: 'success', active: 'success', deploying: 'info', starting: 'info', provisioning: 'info', degraded: 'warning', error: 'danger', stopped: 'neutral', draft: 'neutral', ready: 'primary' }[state] || 'neutral';
+  // Prefer live process status over DB state
+  var liveState = liveStatus ? liveStatus.status : null;
+  var dbState = ea.state || ea.status || a.status || 'unknown';
+  var state = liveState || dbState;
+  // Map live statuses: online→running, idle→idle, offline→stopped, error→error
+  if (state === 'online') state = 'running';
+  if (state === 'idle') state = 'idle';
+  if (state === 'offline') state = 'stopped';
+  var stateColor = { running: 'success', active: 'success', idle: 'info', deploying: 'info', starting: 'info', provisioning: 'info', degraded: 'warning', error: 'danger', stopped: 'neutral', draft: 'neutral', ready: 'primary' }[state] || 'neutral';
   var displayName = identity.name || config.name || config.displayName || a.name || 'Unnamed Agent';
   var displayEmail = identity.email || config.email || a.email || '';
   var avatarUrl = identity.avatar && identity.avatar.length > 2 ? identity.avatar : null;
@@ -175,7 +196,8 @@ export function AgentDetailPage(props) {
       h('div', { style: { flex: 1, minWidth: 0 } },
         h('div', { style: { display: 'flex', alignItems: 'center', gap: 8, flexWrap: 'wrap' } },
           h('h1', { style: { fontSize: 20, fontWeight: 700, margin: 0 } }, displayName),
-          h('span', { className: 'badge badge-' + stateColor, style: { textTransform: 'capitalize' } }, state)
+          h('span', { className: 'badge badge-' + stateColor, style: { textTransform: 'capitalize' } }, state),
+          liveStatus && liveStatus.currentActivity && h('span', { style: { fontSize: 11, color: 'var(--text-muted)', fontStyle: 'italic' } }, liveStatus.currentActivity.detail || liveStatus.currentActivity.type)
         ),
         h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginTop: 4 } },
           displayEmail && h('span', { style: { fontFamily: 'var(--font-mono, monospace)', fontSize: 12, color: 'var(--text-muted)' } }, displayEmail),

package/dist/dashboard/pages/agents.js

@@ -1132,6 +1132,25 @@ export function AgentsPage({ onSelectAgent }) {
   var orgCtx = useOrgContext();
   const [agents, setAgents] = useState([]);
   const [creating, setCreating] = useState(false);
+  const [liveStatuses, setLiveStatuses] = useState({});
+
+  // Subscribe to real-time agent status
+  useEffect(function() {
+    var es = new EventSource('/api/engine/agent-status-stream');
+    es.onmessage = function(ev) {
+      try {
+        var d = JSON.parse(ev.data);
+        if (d.type === 'status' && d.agentId) {
+          setLiveStatuses(function(prev) {
+            var next = Object.assign({}, prev);
+            next[d.agentId] = d;
+            return next;
+          });
+        }
+      } catch(e) {}
+    };
+    return function() { es.close(); };
+  }, []);
 
   const perms = app.permissions || '*';
   const allowedAgents = perms === '*' ? '*' : (perms._allowedAgents || '*');
@@ -1190,7 +1209,17 @@ export function AgentsPage({ onSelectAgent }) {
                   h('td', null, h('strong', { style: { cursor: 'pointer', color: 'var(--accent-text)' }, onClick: () => onSelectAgent && onSelectAgent(a.id) }, a.name)),
                   h('td', null, h('span', { style: { fontFamily: 'var(--font-mono)', fontSize: 12 } }, a.email || '-')),
                   h('td', null, h('span', { className: 'badge badge-neutral' }, a.role || 'agent')),
-                  h('td', null, h('span', { className: 'badge badge-' + (a.status === 'active' ? 'success' : a.status === 'archived' ? 'neutral' : 'warning') }, a.status || 'active')),
+                  h('td', null, (function() {
+                    var live = liveStatuses[a.id];
+                    var st = live ? live.status : null;
+                    var label = st === 'online' ? 'running' : st === 'idle' ? 'idle' : st === 'offline' ? 'stopped' : st === 'error' ? 'error' : (a.status || 'active');
+                    var color = { running: 'success', idle: 'info', stopped: 'neutral', error: 'danger', active: 'success', archived: 'neutral' }[label] || 'warning';
+                    var activity = live && live.currentActivity ? live.currentActivity.detail || live.currentActivity.type : null;
+                    return h(Fragment, null,
+                      h('span', { className: 'badge badge-' + color, style: { textTransform: 'capitalize' } }, label),
+                      activity && h('span', { style: { fontSize: 10, color: 'var(--text-muted)', marginLeft: 6, fontStyle: 'italic' } }, activity)
+                    );
+                  })()),
                   h('td', { style: { fontSize: 12, color: 'var(--text-muted)' } }, a.createdAt ? new Date(a.createdAt).toLocaleDateString() : '-'),
                   h('td', null,
                     h('div', { style: { display: 'flex', gap: 4 } },

package/dist/dashboard/pages/cluster.js

@@ -0,0 +1,181 @@
+import { h, useState, useEffect, Fragment, useApp, engineCall } from '../components/utils.js';
+import { I } from '../components/icons.js';
+
+export function ClusterPage() {
+  var app = useApp();
+  var toast = app.toast;
+  var [nodes, setNodes] = useState([]);
+  var [stats, setStats] = useState(null);
+  var [loading, setLoading] = useState(true);
+
+  var load = function() {
+    engineCall('/cluster/nodes').then(function(d) {
+      setNodes(d.nodes || []);
+      setStats(d.stats || null);
+      setLoading(false);
+    }).catch(function() { setLoading(false); });
+  };
+
+  useEffect(function() { load(); }, []);
+
+  // Real-time updates via SSE
+  useEffect(function() {
+    var es = new EventSource('/api/engine/cluster/stream');
+    es.onmessage = function(ev) {
+      try {
+        var d = JSON.parse(ev.data);
+        if (d.type === 'node') {
+          setNodes(function(prev) {
+            var idx = prev.findIndex(function(n) { return n.nodeId === d.nodeId; });
+            var next = prev.slice();
+            if (idx >= 0) {
+              if (d.event === 'offline') { next[idx] = Object.assign({}, next[idx], { status: 'offline' }); }
+              else { next[idx] = d; }
+            } else if (d.event === 'register' || d.event === 'snapshot') {
+              next.push(d);
+            }
+            return next;
+          });
+        }
+      } catch(e) {}
+    };
+    return function() { es.close(); };
+  }, []);
+
+  var removeNode = function(nodeId) {
+    if (!confirm('Remove worker node "' + nodeId + '"? Agents on it will become unreachable.')) return;
+    engineCall('/cluster/nodes/' + nodeId, { method: 'DELETE' }).then(function() {
+      toast('Node removed', 'success');
+      load();
+    }).catch(function(e) { toast(e.message, 'error'); });
+  };
+
+  var statusColor = function(s) {
+    return { online: 'success', degraded: 'warning', offline: 'neutral' }[s] || 'neutral';
+  };
+
+  var formatBytes = function(mb) {
+    if (mb >= 1024) return (mb / 1024).toFixed(1) + ' GB';
+    return mb + ' MB';
+  };
+
+  var timeSince = function(iso) {
+    if (!iso) return 'never';
+    var s = Math.floor((Date.now() - new Date(iso).getTime()) / 1000);
+    if (s < 60) return s + 's ago';
+    if (s < 3600) return Math.floor(s / 60) + 'm ago';
+    if (s < 86400) return Math.floor(s / 3600) + 'h ago';
+    return Math.floor(s / 86400) + 'd ago';
+  };
+
+  if (loading) return h('div', { style: { padding: 40, textAlign: 'center', color: 'var(--text-muted)' } }, 'Loading cluster...');
+
+  return h(Fragment, null,
+    h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 20 } },
+      h('div', null,
+        h('h1', { style: { fontSize: 20, fontWeight: 700 } }, 'Cluster'),
+        h('p', { style: { color: 'var(--text-muted)', fontSize: 13 } }, 'Manage worker nodes running agents across multiple machines')
+      ),
+      h('button', { className: 'btn btn-secondary btn-sm', onClick: load }, I.refresh(), ' Refresh')
+    ),
+
+    // Stats cards
+    stats && h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(160px, 1fr))', gap: 12, marginBottom: 20 } },
+      h('div', { className: 'card' }, h('div', { className: 'card-body', style: { padding: 16 } },
+        h('div', { style: { fontSize: 24, fontWeight: 700 } }, stats.totalNodes),
+        h('div', { style: { fontSize: 12, color: 'var(--text-muted)' } }, 'Total Nodes')
+      )),
+      h('div', { className: 'card' }, h('div', { className: 'card-body', style: { padding: 16 } },
+        h('div', { style: { fontSize: 24, fontWeight: 700, color: 'var(--accent-green)' } }, stats.onlineNodes),
+        h('div', { style: { fontSize: 12, color: 'var(--text-muted)' } }, 'Online')
+      )),
+      h('div', { className: 'card' }, h('div', { className: 'card-body', style: { padding: 16 } },
+        h('div', { style: { fontSize: 24, fontWeight: 700 } }, stats.totalAgents),
+        h('div', { style: { fontSize: 12, color: 'var(--text-muted)' } }, 'Running Agents')
+      )),
+      h('div', { className: 'card' }, h('div', { className: 'card-body', style: { padding: 16 } },
+        h('div', { style: { fontSize: 24, fontWeight: 700 } }, stats.totalCpus),
+        h('div', { style: { fontSize: 12, color: 'var(--text-muted)' } }, 'Total CPUs')
+      )),
+      h('div', { className: 'card' }, h('div', { className: 'card-body', style: { padding: 16 } },
+        h('div', { style: { fontSize: 24, fontWeight: 700 } }, formatBytes(stats.totalMemoryMb)),
+        h('div', { style: { fontSize: 12, color: 'var(--text-muted)' } }, 'Total Memory')
+      ))
+    ),
+
+    // Nodes
+    nodes.length === 0
+      ? h('div', { className: 'card' }, h('div', { className: 'card-body' },
+          h('div', { className: 'empty-state' },
+            I.server(),
+            h('h3', null, 'No worker nodes'),
+            h('p', null, 'Worker nodes auto-register when you deploy agents to remote machines.'),
+            h('div', { style: { marginTop: 16, padding: 16, background: 'var(--bg-secondary)', borderRadius: 8, textAlign: 'left', maxWidth: 500, margin: '16px auto' } },
+              h('div', { style: { fontWeight: 600, marginBottom: 8 } }, 'How to add a worker node:'),
+              h('ol', { style: { paddingLeft: 20, fontSize: 13, color: 'var(--text-muted)', lineHeight: 1.8 } },
+                h('li', null, 'Install on the remote machine: ', h('code', null, 'npm i -g @agenticmail/enterprise')),
+                h('li', null, 'Set environment variables:'),
+                h('pre', { style: { background: 'var(--bg-primary)', padding: 8, borderRadius: 4, fontSize: 11, overflow: 'auto', margin: '4px 0' } },
+                  'ENTERPRISE_URL=https://your-dashboard.agenticmail.io\nWORKER_NODE_ID=mac-mini-2\nWORKER_NAME="Office Mac Mini"\nDATABASE_URL=postgres://...'
+                ),
+                h('li', null, 'Start agent: ', h('code', null, 'agenticmail-enterprise agent --id <agent-id>')),
+                h('li', null, 'The node will auto-register and appear here')
+              )
+            )
+          )
+        ))
+      : h('div', { style: { display: 'grid', gap: 12 } },
+          nodes.map(function(node) {
+            return h('div', { key: node.nodeId, className: 'card' },
+              h('div', { className: 'card-body', style: { padding: 16 } },
+                h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start' } },
+                  h('div', null,
+                    h('div', { style: { display: 'flex', alignItems: 'center', gap: 8 } },
+                      h('span', { style: { fontSize: 16, fontWeight: 700 } }, node.name || node.nodeId),
+                      h('span', { className: 'badge badge-' + statusColor(node.status), style: { textTransform: 'capitalize' } }, node.status)
+                    ),
+                    h('div', { style: { fontSize: 12, color: 'var(--text-muted)', marginTop: 4 } },
+                      node.host + ':' + node.port, ' | ',
+                      node.platform + '/' + node.arch, ' | ',
+                      'v' + node.version
+                    )
+                  ),
+                  h('button', { className: 'btn btn-ghost btn-sm', onClick: function() { removeNode(node.nodeId); }, title: 'Remove' },
+                    I.trash()
+                  )
+                ),
+                // Resources
+                h('div', { style: { display: 'flex', gap: 20, marginTop: 12 } },
+                  h('div', null,
+                    h('div', { style: { fontSize: 11, color: 'var(--text-muted)' } }, 'CPUs'),
+                    h('div', { style: { fontWeight: 600 } }, node.cpuCount)
+                  ),
+                  h('div', null,
+                    h('div', { style: { fontSize: 11, color: 'var(--text-muted)' } }, 'Memory'),
+                    h('div', { style: { fontWeight: 600 } }, formatBytes(node.memoryMb))
+                  ),
+                  h('div', null,
+                    h('div', { style: { fontSize: 11, color: 'var(--text-muted)' } }, 'Agents'),
+                    h('div', { style: { fontWeight: 600 } }, node.agents ? node.agents.length : 0)
+                  ),
+                  h('div', null,
+                    h('div', { style: { fontSize: 11, color: 'var(--text-muted)' } }, 'Last Heartbeat'),
+                    h('div', { style: { fontWeight: 600, color: node.status === 'online' ? 'var(--accent-green)' : 'var(--text-muted)' } }, timeSince(node.lastHeartbeat))
+                  )
+                ),
+                // Capabilities
+                node.capabilities && node.capabilities.length > 0 && h('div', { style: { display: 'flex', gap: 4, marginTop: 8 } },
+                  node.capabilities.map(function(c) {
+                    return h('span', { key: c, className: 'badge badge-neutral', style: { fontSize: 10 } }, c);
+                  })
+                ),
+                // Agent list
+                node.agents && node.agents.length > 0 && h('div', { style: { marginTop: 8, fontSize: 12, color: 'var(--text-muted)' } },
+                  'Running: ', node.agents.join(', ')
+                )
+              )
+            );
+          })
+        )
+  );
+}

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-RF2LGX3E.js";
+} from "./chunk-SVSLIQYN.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -28,7 +28,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-7HBGXW7Z.js";
+} from "./chunk-KN3T3CTD.js";
 import {
   ValidationError,
   auditLogger,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-YCWOCIPH.js";
+} from "./chunk-GYB2WHMN.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,
@@ -82,7 +82,7 @@ import {
   init_storage_manager,
   init_tenant,
   init_workforce
-} from "./chunk-CAHNZGGK.js";
+} from "./chunk-CQYLRIQ3.js";
 import {
   ENGINE_TABLES,
   ENGINE_TABLES_POSTGRES,