@agenticmail/enterprise 0.5.325 → 0.5.326

package/src/runtime/followup.ts

@@ -169,7 +169,7 @@ export class FollowUpScheduler {
     var now = Date.now();
     var due: FollowUp[] = [];
 
-    for (var [id, fu] of this.followUps) {
+    for (var [_id, fu] of this.followUps) {
       if (fu.status === 'pending' && fu.executeAt <= now) {
         due.push(fu);
       }

package/src/runtime/hooks.ts

@@ -73,7 +73,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
 
   return {
     // ─── Before LLM Call ────────────────────────────
-    async beforeLLMCall(messages, agentId, sessionId): Promise<AgentMessage[]> {
+    async beforeLLMCall(messages, agentId, _sessionId): Promise<AgentMessage[]> {
       var injectedMessages = [...messages];
 
       // Inject knowledge base context
@@ -157,7 +157,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
     },
 
     // ─── Budget Check ──────────────────────────────
-    async checkBudget(agentId, orgId, estimatedTokens): Promise<BudgetCheckResult> {
+    async checkBudget(agentId, _orgId, _estimatedTokens): Promise<BudgetCheckResult> {
       try {
         var { lifecycle } = await import('../engine/routes.js');
 
@@ -212,7 +212,7 @@ export function createRuntimeHooks(deps: HookDependencies): RuntimeHooks {
         var b = budget as any;
         var dailySpend = u.costToday ?? u.dailyCostUsd ?? 0;
         var monthlySpend = u.costThisMonth ?? u.monthlyCostUsd ?? 0;
-        var weeklySpend = u.costThisWeek ?? 0;
+        var _weeklySpend = u.costThisWeek ?? 0;
         var dailyTokens = u.tokensToday ?? u.dailyTokens ?? 0;
         var monthlyTokens = u.tokensThisMonth ?? u.monthlyTokens ?? 0;
 

package/src/runtime/index.ts

@@ -41,9 +41,8 @@ import type {
   FollowUp,
 } from './types.js';
 import { SessionManager } from './session-manager.js';
-import { createRuntimeHooks, createNoopHooks } from './hooks.js';
+import { createRuntimeHooks } from './hooks.js';
 import { runAgentLoop } from './agent-loop.js';
-import { createAllTools } from '../agent-tools/index.js';
 import { createToolsForContext, detectSessionContext, getToolSetStats, getToolsForSession, clearSessionToolState, type SessionContext } from '../agent-tools/tool-resolver.js';
 import { resolveModelForContext as resolveModel, type ModelRoute, type ModelContext } from './model-router.js';
 import { createRuntimeGateway, emitSessionEvent } from './gateway.js';
@@ -150,7 +149,7 @@ export class AgentRuntime {
       agentMemoryManager: this.config.agentMemoryManager,
       engineDb: this.config.engineDb,
       knowledgeEngine: this.config.knowledgeEngine,
-      orgId: 'default', // TODO: resolve from agent's org
+      orgId: this.config.orgId || process.env.ORG_ID || 'default',
       runtimeRef: {
         sendMessage: (sid: string, message: string) => self.sendMessage(sid, message),
         getCurrentSessionId: () => sessionId,
@@ -276,7 +275,7 @@ export class AgentRuntime {
         } catch {}
         return null;
       },
-      async findActiveSession(agentId, senderEmail) {
+      async findActiveSession(agentId, _senderEmail) {
         var sessions = await self.sessionManager!.listSessions(agentId, { status: 'active', limit: 1 });
         return sessions.length > 0 ? await self.sessionManager!.getSession(sessions[0].id) : null;
       },
@@ -659,7 +658,7 @@ export class AgentRuntime {
     if (!this.started) return;
 
     // Cancel all active sessions
-    for (var [sessionId, controller] of this.activeSessions) {
+    for (var [_sessionId, controller] of this.activeSessions) {
       controller.abort();
     }
     this.activeSessions.clear();
@@ -1004,7 +1003,7 @@ export class AgentRuntime {
   private customProviders: CustomProviderDef[] = [];
   private orgToolSecurity: any = null;
 
-  private resolveApiKey(provider: string, agentId?: string): string | undefined {
+  private _resolveApiKey(provider: string, agentId?: string): string | undefined {
     // Synchronous system-wide resolution
     return resolveApiKeyForProvider(provider, this.config.apiKeys, this.customProviders);
   }

package/src/runtime/llm-client.ts

@@ -15,7 +15,7 @@
  */
 
 import type { AgentMessage, StreamEvent, ToolCall } from './types.js';
-import { PROVIDER_REGISTRY, resolveProvider, type ApiType, type CustomProviderDef } from './providers.js';
+import { resolveProvider, type ApiType, type CustomProviderDef } from './providers.js';
 
 // ─── Types ───────────────────────────────────────────────
 

package/src/runtime/subagent.ts

@@ -6,7 +6,6 @@
  * get their own email accounts.
  */
 
-import { nanoid } from 'nanoid';
 import type { ModelConfig, SessionState } from './types.js';
 
 // ─── Types ───────────────────────────────────────────────

package/src/runtime/types.ts

@@ -144,6 +144,8 @@ export interface RuntimeConfig {
   databaseManager?: import('../database-access/connection-manager.js').DatabaseConnectionManager;
   /** Knowledge base engine for RAG search tools */
   knowledgeEngine?: any;
+  /** Organization ID for this runtime instance */
+  orgId?: string;
   /** Real-time agent status tracker */
   agentStatusTracker?: import('../engine/agent-status.js').AgentStatusTracker;
   /** Resolve org-scoped LLM API key (provider → key). Called before system-wide fallback. */

package/src/security/brute-force.ts

@@ -172,7 +172,7 @@ class AttemptStore {
     let totalAttempts = 0;
     const ipAttemptCounts = new Map<string, number>();
     
-    for (const [ip, attempts] of this.attempts.entries()) {
+    for (const [ip, _attempts] of this.attempts.entries()) {
       const recentAttempts = this.getRecentAttempts(ip, 'login').length + 
                            this.getRecentAttempts(ip, 'api_key').length;
       totalAttempts += recentAttempts;

package/src/security/csp.ts

@@ -384,7 +384,7 @@ export const CSP_USE_CASES = {
  * Auto-detect appropriate CSP configuration based on request
  */
 export function detectCspConfig(req: any): CspConfig {
-  const userAgent = req.headers['user-agent'] || '';
+  const _userAgent = req.headers['user-agent'] || '';
   const path = req.url || req.path || '';
   
   // API endpoints

package/src/security/index.ts

@@ -297,7 +297,7 @@ export class SecurityEngine {
   /**
    * Get CSP policy for request
    */
-  getCspPolicy(request?: any): string {
+  getCspPolicy(_request?: any): string {
     if (!this.config.securityConfig.contentSecurity.enabled) {
       return '';
     }
@@ -316,7 +316,7 @@ export class SecurityEngine {
   /**
    * Apply CSP headers to response
    */
-  applyCspHeaders(response: any, request?: any): void {
+  applyCspHeaders(response: any, _request?: any): void {
     if (!this.config.securityConfig.contentSecurity.enabled) {
       return;
     }
@@ -335,7 +335,7 @@ export class SecurityEngine {
   /**
    * Get merged configuration for agent
    */
-  getConfig(agentId?: string, agentOverrides?: Partial<SecurityConfig>): SecurityConfig {
+  getConfig(_agentId?: string, agentOverrides?: Partial<SecurityConfig>): SecurityConfig {
     return mergeSecurityConfig(
       this.config.securityConfig,
       agentOverrides || {}

package/src/security/input-sanitizer.ts

@@ -205,7 +205,7 @@ function sanitizeHtml(
   stripHtml: boolean, 
   blockScripts: boolean,
   allowedTags: string[],
-  allowedAttributes: string[]
+  _allowedAttributes: string[]
 ): { sanitized: string; violations: string[] } {
   const violations: string[] = [];
   let sanitized = input;

package/src/security/threat-logger.ts

@@ -426,8 +426,8 @@ export class SecurityEventAggregator {
    */
   static generateReport(
     events: SecurityEvent[],
-    fromDate?: string,
-    toDate?: string
+    _fromDate?: string,
+    _toDate?: string
   ): {
     summary: {
       totalEvents: number;

package/src/server.ts

@@ -162,7 +162,7 @@ export function createServer(config: ServerConfig): ServerInstance {
     return []; // empty = allow all
   }
   app.use('*', cors({
-    origin: async (origin, c) => {
+    origin: async (origin, _c) => {
       const allowed = await getCorsOrigins();
       // If no CORS configured, allow all (open)
       if (!allowed.length) return origin || '*';
@@ -364,7 +364,7 @@ export function createServer(config: ServerConfig): ServerInstance {
   // Loaded lazily on first request to avoid top-level await.
   // On first hit, also initializes the EngineDatabase and runs engine migrations.
   let engineInitialized = false;
-  api.all('/engine/*', async (c, next) => {
+  api.all('/engine/*', async (c, _next) => {
     try {
       const { engineRoutes, setEngineDb } = await import('./engine/routes.js');
       const { EngineDatabase } = await import('./engine/db-adapter.js');

package/src/setup/database.ts

@@ -39,7 +39,7 @@ export async function promptDatabase(
 
   // Put Supabase first and mark as recommended
   const supabaseIdx = databases.findIndex((d: any) => d.type === 'supabase');
-  const choices = databases.map((d: any, i: number) => ({
+  const choices = databases.map((d: any, _i: number) => ({
     name: d.type === 'supabase'
       ? `${d.label}  ${chalk.green('← recommended (free tier)')}  ${chalk.dim('(cloud)')}`
       : `${d.label}  ${chalk.dim(`(${d.group})`)}`,

package/src/setup/index.ts

@@ -16,8 +16,7 @@
 
 import { execSync } from 'child_process';
 import { createRequire } from 'module';
-import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
+import { join } from 'path';
 import { promptCompanyInfo } from './company.js';
 import { promptDatabase } from './database.js';
 import { promptDeployment } from './deployment.js';

package/src/setup/provision.ts

@@ -453,7 +453,7 @@ async function deploy(
 
 // ─── Success Messages ───────────────────────────────
 
-function printCloudSuccess(
+function _printCloudSuccess(
   chalk: any,
   url: string,
   adminEmail: string,