@agenticmail/enterprise 0.5.324 → 0.5.326

package/src/mcp/adapters/google-ads.adapter.ts

@@ -78,7 +78,7 @@ function formatMicros(micros: string | number | undefined, currency?: string): s
 }
 
 /** Extract resource ID from a Google Ads resource name like "customers/123/campaigns/456". */
-function extractResourceId(resourceName: string | undefined): string {
+function _extractResourceId(resourceName: string | undefined): string {
   if (!resourceName) return 'unknown';
   const parts = resourceName.split('/');
   return parts[parts.length - 1] ?? 'unknown';

package/src/mcp/adapters/kubernetes.adapter.ts

@@ -32,7 +32,7 @@ function k8sError(err: unknown): ToolResult {
   if (err instanceof Error) {
     const data = (err as any).data;
     if (data && typeof data === 'object') {
-      const status = data.status || '';
+      const _status = data.status || '';
       const message = data.message || '';
       const reason = data.reason || '';
       const code = data.code || '';

package/src/mcp/adapters/mixpanel.adapter.ts

@@ -159,7 +159,7 @@ const mixpanelGetFunnels: ToolHandler = {
 
       const data = await ctx.apiExecutor.get('/funnels', query);
 
-      const meta = data.meta ?? {};
+      const _meta = data.meta ?? {};
       const funnelData = data.data ?? {};
       const dates = Object.keys(funnelData).sort();
 

package/src/mcp/adapters/recurly.adapter.ts

@@ -304,7 +304,7 @@ const recurlyGetAccount: ToolHandler = {
       const email = acct.email ?? 'N/A';
       const state = acct.state ?? 'unknown';
       const created = formatDate(acct.created_at);
-      const balance = formatAmount(acct.hosted_login_token ? undefined : 0, acct.bill_to ?? 'USD');
+      const _balance = formatAmount(acct.hosted_login_token ? undefined : 0, acct.bill_to ?? 'USD');
 
       const addr = acct.address ?? {};
       const addressStr = [addr.street1, addr.street2, addr.city, addr.region, addr.postal_code, addr.country]

package/src/mcp/adapters/sap.adapter.ts

@@ -19,7 +19,7 @@ function sapBaseUrl(ctx: ToolExecutionContext): string {
   if (!host) {
     throw new Error('SAP host is required in skillConfig (e.g. { host: "mycompany.s4hana.ondemand.com" })');
   }
-  const client = ctx.skillConfig.client || '100';
+  const _client = ctx.skillConfig.client || '100';
   return `https://${host}/sap/opu/odata/sap`;
 }
 
@@ -45,7 +45,7 @@ function sapError(err: unknown): ToolResult {
 }
 
 /** Format an SAP OData entity for display */
-function formatEntity(entity: any, fields: string[]): string {
+function _formatEntity(entity: any, fields: string[]): string {
   return fields
     .map(f => `${f}: ${entity[f] ?? 'N/A'}`)
     .filter(Boolean)

package/src/mcp/adapters/shortcut.adapter.ts

@@ -164,7 +164,7 @@ const searchStories: ToolHandler = {
 
   async execute(params: Record<string, any>, ctx: ToolExecutionContext): Promise<ToolResult> {
     try {
-      const body: Record<string, any> = {
+      const _body: Record<string, any> = {
         query: params.query,
         page_size: params.page_size ?? 25,
       };

package/src/mcp/adapters/snowflake.adapter.ts

@@ -132,7 +132,7 @@ const executeQuery: ToolHandler = {
       });
 
       const statementHandle = result.statementHandle || '';
-      const status = result.statementStatusUrl || '';
+      const _status = result.statementStatusUrl || '';
       const rowCount = result.resultSetMetaData?.numRows ?? result.data?.length ?? 0;
 
       const formatted = formatResultSet(result);

package/src/mcp/adapters/stripe.adapter.ts

@@ -32,7 +32,7 @@ function formatAmount(amountCents: number | undefined, currency: string | undefi
 }
 
 /** Format a Unix timestamp into a readable date. */
-function fromUnix(ts: number | undefined): string {
+function _fromUnix(ts: number | undefined): string {
   if (!ts) return 'unknown';
   return new Date(ts * 1000).toLocaleString('en-US', {
     month: 'short',

package/src/mcp/adapters/supabase.adapter.ts

@@ -328,7 +328,7 @@ export const supabaseAdapter: SkillAdapter = {
       placeholder: 'abcdefghijklmnop',
     },
   },
-  async initialize(credentials: ResolvedCredentials) {
+  async initialize(_credentials: ResolvedCredentials) {
     // Dynamic base URL will be set by the framework using projectRef from config
   },
 };

package/src/mcp/adapters/zuora.adapter.ts

@@ -254,7 +254,7 @@ const zuoraListAccounts: ToolHandler = {
     additionalProperties: false,
   },
 
-  async execute(params, ctx): Promise<ToolResult> {
+  async execute(_params, ctx): Promise<ToolResult> {
     try {
       const base = zuoraBaseUrl(ctx);
 

package/src/middleware/request-limits.ts

@@ -43,7 +43,7 @@ export function requestBodyLimit(): MiddlewareHandler {
  * Reads timeout from firewallConfig.network.requestTimeoutSec.
  */
 export function requestTimeout(): MiddlewareHandler {
-  return async (c, next) => {
+  return async (_c, next) => {
     const config = await getNetworkConfig();
     const timeoutSec = config.network?.requestTimeoutSec || DEFAULT_TIMEOUT_SEC;
 

package/src/runtime/agent-loop.ts

@@ -14,7 +14,7 @@
 import type { AgentConfig, AgentMessage, RuntimeHooks, SessionState, StreamEvent, ToolCall } from './types.js';
 import { callLLM, toolsToDefinitions, estimateMessageTokens, type LLMResponse } from './llm-client.js';
 import { ToolRegistry, executeTool } from './tool-executor.js';
-import { compactContext, needsCompaction, COMPACTION_THRESHOLD } from './compaction.js';
+import { compactContext, COMPACTION_THRESHOLD } from './compaction.js';
 import { buildModelChain, withModelFallback, type ModelFallbackConfig } from '../engine/model-fallback.js';
 
 // ─── Constants ───────────────────────────────────────────
@@ -709,8 +709,8 @@ var FALLBACK_PRICES: Record<string, { input: number; output: number }> = {
 };
 
 // In-memory cache for DB pricing (refreshed every 5 min)
-var pricingCache: { data: Record<string, { input: number; output: number }>; expiresAt: number } | null = null;
-var PRICING_CACHE_TTL = 5 * 60_000;
+var _pricingCache: { data: Record<string, { input: number; output: number }>; expiresAt: number } | null = null;
+var _PRICING_CACHE_TTL = 5 * 60_000;
 
 async function estimateCostAsync(
   hooks: import('./types.js').RuntimeHooks,

package/src/runtime/compaction.ts

@@ -439,7 +439,7 @@ function buildTranscript(previousSummaries: MessageGroup[], groups: MessageGroup
 
   // Build transcript from groups (in original order — re-sort by position)
   // Groups are sorted by importance, but transcript needs chronological order
-  const chronoGroups = [...groups];
+  const _chronoGroups = [...groups];
   // We don't have explicit position, but original array order is chronological
   // Since we only sorted a copy, use the original `groups` order... 
   // Actually, groups come from groupMessages which is already chronological.
@@ -492,7 +492,7 @@ async function llmSummarize(
   transcript: string,
   config: AgentConfig,
   apiKey: string,
-  tokenBudget: number,
+  _tokenBudget: number,
 ): Promise<LLMSummaryResult> {
   // If transcript fits in one chunk, do single call
   if (transcript.length <= CHUNK_MAX_CHARS) {

package/src/runtime/followup.ts

@@ -169,7 +169,7 @@ export class FollowUpScheduler {
     var now = Date.now();
     var due: FollowUp[] = [];
 
-    for (var [id, fu] of this.followUps) {
+    for (var [_id, fu] of this.followUps) {
       if (fu.status === 'pending' && fu.executeAt <= now) {
         due.push(fu);
       }

package/src/runtime/hooks.ts

@@ -73,7 +73,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
 
   return {
     // ─── Before LLM Call ────────────────────────────
-    async beforeLLMCall(messages, agentId, sessionId): Promise<AgentMessage[]> {
+    async beforeLLMCall(messages, agentId, _sessionId): Promise<AgentMessage[]> {
       var injectedMessages = [...messages];
 
       // Inject knowledge base context
@@ -157,7 +157,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
     },
 
     // ─── Budget Check ──────────────────────────────
-    async checkBudget(agentId, orgId, estimatedTokens): Promise<BudgetCheckResult> {
+    async checkBudget(agentId, _orgId, _estimatedTokens): Promise<BudgetCheckResult> {
       try {
         var { lifecycle } = await import('../engine/routes.js');
 
@@ -212,7 +212,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
         var b = budget as any;
         var dailySpend = u.costToday ?? u.dailyCostUsd ?? 0;
         var monthlySpend = u.costThisMonth ?? u.monthlyCostUsd ?? 0;
-        var weeklySpend = u.costThisWeek ?? 0;
+        var _weeklySpend = u.costThisWeek ?? 0;
         var dailyTokens = u.tokensToday ?? u.dailyTokens ?? 0;
         var monthlyTokens = u.tokensThisMonth ?? u.monthlyTokens ?? 0;
 

package/src/runtime/index.ts

@@ -41,9 +41,8 @@ import type {
   FollowUp,
 } from './types.js';
 import { SessionManager } from './session-manager.js';
-import { createRuntimeHooks, createNoopHooks } from './hooks.js';
+import { createRuntimeHooks } from './hooks.js';
 import { runAgentLoop } from './agent-loop.js';
-import { createAllTools } from '../agent-tools/index.js';
 import { createToolsForContext, detectSessionContext, getToolSetStats, getToolsForSession, clearSessionToolState, type SessionContext } from '../agent-tools/tool-resolver.js';
 import { resolveModelForContext as resolveModel, type ModelRoute, type ModelContext } from './model-router.js';
 import { createRuntimeGateway, emitSessionEvent } from './gateway.js';
@@ -150,7 +149,7 @@ export class AgentRuntime {
       agentMemoryManager: this.config.agentMemoryManager,
       engineDb: this.config.engineDb,
       knowledgeEngine: this.config.knowledgeEngine,
-      orgId: 'default', // TODO: resolve from agent's org
+      orgId: this.config.orgId || process.env.ORG_ID || 'default',
       runtimeRef: {
         sendMessage: (sid: string, message: string) => self.sendMessage(sid, message),
         getCurrentSessionId: () => sessionId,
@@ -276,7 +275,7 @@ export class AgentRuntime {
         } catch {}
         return null;
       },
-      async findActiveSession(agentId, senderEmail) {
+      async findActiveSession(agentId, _senderEmail) {
         var sessions = await self.sessionManager!.listSessions(agentId, { status: 'active', limit: 1 });
         return sessions.length > 0 ? await self.sessionManager!.getSession(sessions[0].id) : null;
       },
@@ -659,7 +658,7 @@ export class AgentRuntime {
     if (!this.started) return;
 
     // Cancel all active sessions
-    for (var [sessionId, controller] of this.activeSessions) {
+    for (var [_sessionId, controller] of this.activeSessions) {
       controller.abort();
     }
     this.activeSessions.clear();
@@ -1004,7 +1003,7 @@ export class AgentRuntime {
   private customProviders: CustomProviderDef[] = [];
   private orgToolSecurity: any = null;
 
-  private resolveApiKey(provider: string, agentId?: string): string | undefined {
+  private _resolveApiKey(provider: string, agentId?: string): string | undefined {
     // Synchronous system-wide resolution
     return resolveApiKeyForProvider(provider, this.config.apiKeys, this.customProviders);
   }

package/src/runtime/llm-client.ts

@@ -15,7 +15,7 @@
  */
 
 import type { AgentMessage, StreamEvent, ToolCall } from './types.js';
-import { PROVIDER_REGISTRY, resolveProvider, type ApiType, type CustomProviderDef } from './providers.js';
+import { resolveProvider, type ApiType, type CustomProviderDef } from './providers.js';
 
 // ─── Types ───────────────────────────────────────────────
 

package/src/runtime/subagent.ts

@@ -6,7 +6,6 @@
  * get their own email accounts.
  */
 
-import { nanoid } from 'nanoid';
 import type { ModelConfig, SessionState } from './types.js';
 
 // ─── Types ───────────────────────────────────────────────

package/src/runtime/types.ts

@@ -144,6 +144,8 @@ export interface RuntimeConfig {
   databaseManager?: import('../database-access/connection-manager.js').DatabaseConnectionManager;
   /** Knowledge base engine for RAG search tools */
   knowledgeEngine?: any;
+  /** Organization ID for this runtime instance */
+  orgId?: string;
   /** Real-time agent status tracker */
   agentStatusTracker?: import('../engine/agent-status.js').AgentStatusTracker;
   /** Resolve org-scoped LLM API key (provider → key). Called before system-wide fallback. */

package/src/security/brute-force.ts

@@ -172,7 +172,7 @@ class AttemptStore {
     let totalAttempts = 0;
     const ipAttemptCounts = new Map<string, number>();
     
-    for (const [ip, attempts] of this.attempts.entries()) {
+    for (const [ip, _attempts] of this.attempts.entries()) {
       const recentAttempts = this.getRecentAttempts(ip, 'login').length + 
                            this.getRecentAttempts(ip, 'api_key').length;
       totalAttempts += recentAttempts;

package/src/security/csp.ts

@@ -384,7 +384,7 @@ export const CSP_USE_CASES = {
  * Auto-detect appropriate CSP configuration based on request
  */
 export function detectCspConfig(req: any): CspConfig {
-  const userAgent = req.headers['user-agent'] || '';
+  const _userAgent = req.headers['user-agent'] || '';
   const path = req.url || req.path || '';
   
   // API endpoints

package/src/security/index.ts

@@ -297,7 +297,7 @@ export class SecurityEngine {
   /**
    * Get CSP policy for request
    */
-  getCspPolicy(request?: any): string {
+  getCspPolicy(_request?: any): string {
     if (!this.config.securityConfig.contentSecurity.enabled) {
       return '';
     }
@@ -316,7 +316,7 @@ export class SecurityEngine {
   /**
    * Apply CSP headers to response
    */
-  applyCspHeaders(response: any, request?: any): void {
+  applyCspHeaders(response: any, _request?: any): void {
     if (!this.config.securityConfig.contentSecurity.enabled) {
       return;
     }
@@ -335,7 +335,7 @@ export class SecurityEngine {
   /**
    * Get merged configuration for agent
    */
-  getConfig(agentId?: string, agentOverrides?: Partial<SecurityConfig>): SecurityConfig {
+  getConfig(_agentId?: string, agentOverrides?: Partial<SecurityConfig>): SecurityConfig {
     return mergeSecurityConfig(
       this.config.securityConfig,
       agentOverrides || {}

package/src/security/input-sanitizer.ts

@@ -205,7 +205,7 @@ function sanitizeHtml(
   stripHtml: boolean, 
   blockScripts: boolean,
   allowedTags: string[],
-  allowedAttributes: string[]
+  _allowedAttributes: string[]
 ): { sanitized: string; violations: string[] } {
   const violations: string[] = [];
   let sanitized = input;

package/src/security/threat-logger.ts

@@ -426,8 +426,8 @@ export class SecurityEventAggregator {
    */
   static generateReport(
     events: SecurityEvent[],
-    fromDate?: string,
-    toDate?: string
+    _fromDate?: string,
+    _toDate?: string
   ): {
     summary: {
       totalEvents: number;

package/src/server.ts

@@ -162,7 +162,7 @@ export function createServer(config: ServerConfig): ServerInstance {
     return []; // empty = allow all
   }
   app.use('*', cors({
-    origin: async (origin, c) => {
+    origin: async (origin, _c) => {
       const allowed = await getCorsOrigins();
       // If no CORS configured, allow all (open)
       if (!allowed.length) return origin || '*';
@@ -364,7 +364,7 @@ export function createServer(config: ServerConfig): ServerInstance {
   // Loaded lazily on first request to avoid top-level await.
   // On first hit, also initializes the EngineDatabase and runs engine migrations.
   let engineInitialized = false;
-  api.all('/engine/*', async (c, next) => {
+  api.all('/engine/*', async (c, _next) => {
     try {
       const { engineRoutes, setEngineDb } = await import('./engine/routes.js');
       const { EngineDatabase } = await import('./engine/db-adapter.js');

package/src/setup/database.ts

@@ -39,7 +39,7 @@ export async function promptDatabase(
 
   // Put Supabase first and mark as recommended
   const supabaseIdx = databases.findIndex((d: any) => d.type === 'supabase');
-  const choices = databases.map((d: any, i: number) => ({
+  const choices = databases.map((d: any, _i: number) => ({
     name: d.type === 'supabase'
       ? `${d.label}  ${chalk.green('← recommended (free tier)')}  ${chalk.dim('(cloud)')}`
       : `${d.label}  ${chalk.dim(`(${d.group})`)}`,

package/src/setup/index.ts

@@ -16,8 +16,7 @@
 
 import { execSync } from 'child_process';
 import { createRequire } from 'module';
-import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
+import { join } from 'path';
 import { promptCompanyInfo } from './company.js';
 import { promptDatabase } from './database.js';
 import { promptDeployment } from './deployment.js';

package/src/setup/provision.ts

@@ -453,7 +453,7 @@ async function deploy(
 
 // ─── Success Messages ───────────────────────────────
 
-function printCloudSuccess(
+function _printCloudSuccess(
   chalk: any,
   url: string,
   adminEmail: string,