@agenticmail/enterprise 0.5.327 → 0.5.329

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (888) hide show
  1. package/dist/agent-tools-F3CYENMK.js +13949 -0
  2. package/dist/browser-tool-P57PLVW2.js +4002 -0
  3. package/dist/chunk-3RI3AIJN.js +1519 -0
  4. package/dist/chunk-AD4DFKHR.js +4928 -0
  5. package/dist/chunk-UQXPVWXG.js +5101 -0
  6. package/dist/cli-agent-K6UFZRXC.js +2473 -0
  7. package/dist/cli-serve-4MT7RDEL.js +260 -0
  8. package/dist/cli.js +3 -3
  9. package/dist/dashboard/app.js +1 -1
  10. package/dist/dashboard/components/transport-encryption.js +0 -62
  11. package/dist/dashboard/pages/agent-detail/index.js +5 -2
  12. package/dist/dashboard/pages/agent-detail/manager.js +1 -1
  13. package/dist/dashboard/pages/agent-detail/overview.js +4 -2
  14. package/dist/dashboard/pages/agent-detail/tool-security.js +1 -1
  15. package/dist/dashboard/pages/domain-status.js +3 -6
  16. package/dist/dashboard/pages/memory-transfer.js +1 -1
  17. package/dist/dashboard/pages/messages.js +0 -1
  18. package/dist/dashboard/pages/roles.js +0 -2
  19. package/dist/dashboard/pages/workforce.js +0 -1
  20. package/dist/index.js +3 -3
  21. package/dist/runtime-L5ADJORP.js +45 -0
  22. package/dist/server-KSN56EZQ.js +28 -0
  23. package/dist/setup-UUNBBOQH.js +20 -0
  24. package/logs/cloudflared-error.log +42 -0
  25. package/logs/enterprise-out.log +6 -0
  26. package/package.json +1 -1
  27. package/src/admin/page-registry.ts +0 -290
  28. package/src/admin/routes.ts +0 -2968
  29. package/src/agent-tools/common.ts +0 -260
  30. package/src/agent-tools/index.ts +0 -542
  31. package/src/agent-tools/merge.ts +0 -62
  32. package/src/agent-tools/middleware.ts +0 -436
  33. package/src/agent-tools/schema/typebox.ts +0 -25
  34. package/src/agent-tools/security.ts +0 -352
  35. package/src/agent-tools/tool-resolver.ts +0 -1018
  36. package/src/agent-tools/tools/agenticmail.ts +0 -1017
  37. package/src/agent-tools/tools/bash.ts +0 -179
  38. package/src/agent-tools/tools/browser-tool.schema.ts +0 -112
  39. package/src/agent-tools/tools/browser-tool.ts +0 -388
  40. package/src/agent-tools/tools/browser.ts +0 -764
  41. package/src/agent-tools/tools/edit.ts +0 -100
  42. package/src/agent-tools/tools/enterprise-code-sandbox.ts +0 -395
  43. package/src/agent-tools/tools/enterprise-database.ts +0 -377
  44. package/src/agent-tools/tools/enterprise-diff.ts +0 -580
  45. package/src/agent-tools/tools/enterprise-documents.ts +0 -896
  46. package/src/agent-tools/tools/enterprise-http.ts +0 -485
  47. package/src/agent-tools/tools/enterprise-security-scan.ts +0 -528
  48. package/src/agent-tools/tools/enterprise-spreadsheet.ts +0 -825
  49. package/src/agent-tools/tools/glob.ts +0 -129
  50. package/src/agent-tools/tools/google/calendar.ts +0 -230
  51. package/src/agent-tools/tools/google/chat.ts +0 -725
  52. package/src/agent-tools/tools/google/contacts.ts +0 -209
  53. package/src/agent-tools/tools/google/docs.ts +0 -162
  54. package/src/agent-tools/tools/google/drive.ts +0 -392
  55. package/src/agent-tools/tools/google/forms.ts +0 -367
  56. package/src/agent-tools/tools/google/gmail.ts +0 -897
  57. package/src/agent-tools/tools/google/index.ts +0 -86
  58. package/src/agent-tools/tools/google/maps.ts +0 -543
  59. package/src/agent-tools/tools/google/meeting-voice.ts +0 -885
  60. package/src/agent-tools/tools/google/meetings.ts +0 -1094
  61. package/src/agent-tools/tools/google/sheets.ts +0 -215
  62. package/src/agent-tools/tools/google/slides.ts +0 -559
  63. package/src/agent-tools/tools/google/tasks.ts +0 -200
  64. package/src/agent-tools/tools/grep.ts +0 -178
  65. package/src/agent-tools/tools/integrations/_factory.ts +0 -102
  66. package/src/agent-tools/tools/integrations/activecampaign.ts +0 -14
  67. package/src/agent-tools/tools/integrations/adobe-sign.ts +0 -14
  68. package/src/agent-tools/tools/integrations/adp.ts +0 -14
  69. package/src/agent-tools/tools/integrations/airtable.ts +0 -14
  70. package/src/agent-tools/tools/integrations/apollo.ts +0 -14
  71. package/src/agent-tools/tools/integrations/asana.ts +0 -14
  72. package/src/agent-tools/tools/integrations/auth0.ts +0 -14
  73. package/src/agent-tools/tools/integrations/aws.ts +0 -14
  74. package/src/agent-tools/tools/integrations/azure-devops.ts +0 -14
  75. package/src/agent-tools/tools/integrations/bamboohr.ts +0 -14
  76. package/src/agent-tools/tools/integrations/basecamp.ts +0 -14
  77. package/src/agent-tools/tools/integrations/bigcommerce.ts +0 -14
  78. package/src/agent-tools/tools/integrations/bitbucket.ts +0 -14
  79. package/src/agent-tools/tools/integrations/box.ts +0 -14
  80. package/src/agent-tools/tools/integrations/brex.ts +0 -14
  81. package/src/agent-tools/tools/integrations/buffer.ts +0 -14
  82. package/src/agent-tools/tools/integrations/calendly.ts +0 -14
  83. package/src/agent-tools/tools/integrations/canva.ts +0 -14
  84. package/src/agent-tools/tools/integrations/chargebee.ts +0 -14
  85. package/src/agent-tools/tools/integrations/circleci.ts +0 -14
  86. package/src/agent-tools/tools/integrations/clickup.ts +0 -14
  87. package/src/agent-tools/tools/integrations/close.ts +0 -14
  88. package/src/agent-tools/tools/integrations/cloudflare.ts +0 -14
  89. package/src/agent-tools/tools/integrations/confluence.ts +0 -14
  90. package/src/agent-tools/tools/integrations/contentful.ts +0 -14
  91. package/src/agent-tools/tools/integrations/copper.ts +0 -14
  92. package/src/agent-tools/tools/integrations/crisp.ts +0 -14
  93. package/src/agent-tools/tools/integrations/crowdstrike.ts +0 -14
  94. package/src/agent-tools/tools/integrations/datadog.ts +0 -14
  95. package/src/agent-tools/tools/integrations/digitalocean.ts +0 -14
  96. package/src/agent-tools/tools/integrations/discord.ts +0 -14
  97. package/src/agent-tools/tools/integrations/docker.ts +0 -14
  98. package/src/agent-tools/tools/integrations/docusign.ts +0 -14
  99. package/src/agent-tools/tools/integrations/drift.ts +0 -14
  100. package/src/agent-tools/tools/integrations/dropbox.ts +0 -14
  101. package/src/agent-tools/tools/integrations/figma.ts +0 -14
  102. package/src/agent-tools/tools/integrations/firebase.ts +0 -14
  103. package/src/agent-tools/tools/integrations/flyio.ts +0 -14
  104. package/src/agent-tools/tools/integrations/freshbooks.ts +0 -14
  105. package/src/agent-tools/tools/integrations/freshdesk.ts +0 -14
  106. package/src/agent-tools/tools/integrations/freshsales.ts +0 -14
  107. package/src/agent-tools/tools/integrations/freshservice.ts +0 -14
  108. package/src/agent-tools/tools/integrations/front.ts +0 -14
  109. package/src/agent-tools/tools/integrations/github-actions.ts +0 -14
  110. package/src/agent-tools/tools/integrations/github.ts +0 -14
  111. package/src/agent-tools/tools/integrations/gitlab.ts +0 -14
  112. package/src/agent-tools/tools/integrations/gong.ts +0 -14
  113. package/src/agent-tools/tools/integrations/google-ads.ts +0 -14
  114. package/src/agent-tools/tools/integrations/google-analytics.ts +0 -14
  115. package/src/agent-tools/tools/integrations/google-cloud.ts +0 -14
  116. package/src/agent-tools/tools/integrations/gotomeeting.ts +0 -14
  117. package/src/agent-tools/tools/integrations/grafana.ts +0 -14
  118. package/src/agent-tools/tools/integrations/greenhouse.ts +0 -14
  119. package/src/agent-tools/tools/integrations/gusto.ts +0 -14
  120. package/src/agent-tools/tools/integrations/hashicorp-vault.ts +0 -14
  121. package/src/agent-tools/tools/integrations/heroku.ts +0 -14
  122. package/src/agent-tools/tools/integrations/hibob.ts +0 -14
  123. package/src/agent-tools/tools/integrations/hootsuite.ts +0 -14
  124. package/src/agent-tools/tools/integrations/hubspot.ts +0 -14
  125. package/src/agent-tools/tools/integrations/huggingface.ts +0 -14
  126. package/src/agent-tools/tools/integrations/index.ts +0 -474
  127. package/src/agent-tools/tools/integrations/intercom.ts +0 -14
  128. package/src/agent-tools/tools/integrations/jira.ts +0 -14
  129. package/src/agent-tools/tools/integrations/klaviyo.ts +0 -14
  130. package/src/agent-tools/tools/integrations/kubernetes.ts +0 -14
  131. package/src/agent-tools/tools/integrations/lattice.ts +0 -14
  132. package/src/agent-tools/tools/integrations/launchdarkly.ts +0 -14
  133. package/src/agent-tools/tools/integrations/lever.ts +0 -14
  134. package/src/agent-tools/tools/integrations/linear.ts +0 -14
  135. package/src/agent-tools/tools/integrations/linkedin.ts +0 -14
  136. package/src/agent-tools/tools/integrations/livechat.ts +0 -14
  137. package/src/agent-tools/tools/integrations/loom.ts +0 -14
  138. package/src/agent-tools/tools/integrations/mailchimp.ts +0 -14
  139. package/src/agent-tools/tools/integrations/mailgun.ts +0 -14
  140. package/src/agent-tools/tools/integrations/miro.ts +0 -14
  141. package/src/agent-tools/tools/integrations/mixpanel.ts +0 -14
  142. package/src/agent-tools/tools/integrations/monday.ts +0 -14
  143. package/src/agent-tools/tools/integrations/mongodb-atlas.ts +0 -14
  144. package/src/agent-tools/tools/integrations/neon.ts +0 -14
  145. package/src/agent-tools/tools/integrations/netlify.ts +0 -14
  146. package/src/agent-tools/tools/integrations/netsuite.ts +0 -14
  147. package/src/agent-tools/tools/integrations/newrelic.ts +0 -14
  148. package/src/agent-tools/tools/integrations/notion.ts +0 -14
  149. package/src/agent-tools/tools/integrations/okta.ts +0 -14
  150. package/src/agent-tools/tools/integrations/openai.ts +0 -14
  151. package/src/agent-tools/tools/integrations/opsgenie.ts +0 -14
  152. package/src/agent-tools/tools/integrations/outreach.ts +0 -14
  153. package/src/agent-tools/tools/integrations/paddle.ts +0 -14
  154. package/src/agent-tools/tools/integrations/pagerduty.ts +0 -14
  155. package/src/agent-tools/tools/integrations/pandadoc.ts +0 -14
  156. package/src/agent-tools/tools/integrations/paypal.ts +0 -14
  157. package/src/agent-tools/tools/integrations/personio.ts +0 -14
  158. package/src/agent-tools/tools/integrations/pinecone.ts +0 -14
  159. package/src/agent-tools/tools/integrations/pipedrive.ts +0 -14
  160. package/src/agent-tools/tools/integrations/plaid.ts +0 -14
  161. package/src/agent-tools/tools/integrations/postmark.ts +0 -14
  162. package/src/agent-tools/tools/integrations/power-automate.ts +0 -14
  163. package/src/agent-tools/tools/integrations/quickbooks.ts +0 -14
  164. package/src/agent-tools/tools/integrations/recurly.ts +0 -14
  165. package/src/agent-tools/tools/integrations/reddit.ts +0 -14
  166. package/src/agent-tools/tools/integrations/render.ts +0 -14
  167. package/src/agent-tools/tools/integrations/ringcentral.ts +0 -14
  168. package/src/agent-tools/tools/integrations/rippling.ts +0 -14
  169. package/src/agent-tools/tools/integrations/salesforce.ts +0 -14
  170. package/src/agent-tools/tools/integrations/salesloft.ts +0 -14
  171. package/src/agent-tools/tools/integrations/sanity.ts +0 -14
  172. package/src/agent-tools/tools/integrations/sap.ts +0 -14
  173. package/src/agent-tools/tools/integrations/segment.ts +0 -14
  174. package/src/agent-tools/tools/integrations/sendgrid.ts +0 -14
  175. package/src/agent-tools/tools/integrations/sentry.ts +0 -14
  176. package/src/agent-tools/tools/integrations/servicenow.ts +0 -14
  177. package/src/agent-tools/tools/integrations/shopify.ts +0 -14
  178. package/src/agent-tools/tools/integrations/shortcut.ts +0 -14
  179. package/src/agent-tools/tools/integrations/slack.ts +0 -14
  180. package/src/agent-tools/tools/integrations/smartsheet.ts +0 -14
  181. package/src/agent-tools/tools/integrations/snowflake.ts +0 -14
  182. package/src/agent-tools/tools/integrations/snyk.ts +0 -14
  183. package/src/agent-tools/tools/integrations/splunk.ts +0 -14
  184. package/src/agent-tools/tools/integrations/square.ts +0 -14
  185. package/src/agent-tools/tools/integrations/statuspage.ts +0 -14
  186. package/src/agent-tools/tools/integrations/stripe.ts +0 -14
  187. package/src/agent-tools/tools/integrations/supabase.ts +0 -14
  188. package/src/agent-tools/tools/integrations/teamwork.ts +0 -14
  189. package/src/agent-tools/tools/integrations/telegram.ts +0 -14
  190. package/src/agent-tools/tools/integrations/terraform.ts +0 -14
  191. package/src/agent-tools/tools/integrations/todoist.ts +0 -14
  192. package/src/agent-tools/tools/integrations/trello.ts +0 -14
  193. package/src/agent-tools/tools/integrations/twilio.ts +0 -14
  194. package/src/agent-tools/tools/integrations/twitter.ts +0 -14
  195. package/src/agent-tools/tools/integrations/vercel.ts +0 -14
  196. package/src/agent-tools/tools/integrations/weaviate.ts +0 -14
  197. package/src/agent-tools/tools/integrations/webex.ts +0 -14
  198. package/src/agent-tools/tools/integrations/webflow.ts +0 -14
  199. package/src/agent-tools/tools/integrations/whatsapp.ts +0 -14
  200. package/src/agent-tools/tools/integrations/whereby.ts +0 -14
  201. package/src/agent-tools/tools/integrations/woocommerce.ts +0 -14
  202. package/src/agent-tools/tools/integrations/wordpress.ts +0 -14
  203. package/src/agent-tools/tools/integrations/workday.ts +0 -14
  204. package/src/agent-tools/tools/integrations/wrike.ts +0 -14
  205. package/src/agent-tools/tools/integrations/xero.ts +0 -14
  206. package/src/agent-tools/tools/integrations/youtube.ts +0 -14
  207. package/src/agent-tools/tools/integrations/zendesk.ts +0 -14
  208. package/src/agent-tools/tools/integrations/zoho-crm.ts +0 -14
  209. package/src/agent-tools/tools/integrations/zoom.ts +0 -14
  210. package/src/agent-tools/tools/integrations/zuora.ts +0 -14
  211. package/src/agent-tools/tools/knowledge-search.ts +0 -318
  212. package/src/agent-tools/tools/local/coding.ts +0 -626
  213. package/src/agent-tools/tools/local/dependency-manager.ts +0 -647
  214. package/src/agent-tools/tools/local/file-edit.ts +0 -31
  215. package/src/agent-tools/tools/local/file-list.ts +0 -39
  216. package/src/agent-tools/tools/local/file-ops.ts +0 -48
  217. package/src/agent-tools/tools/local/file-read.ts +0 -39
  218. package/src/agent-tools/tools/local/file-search.ts +0 -46
  219. package/src/agent-tools/tools/local/file-write.ts +0 -28
  220. package/src/agent-tools/tools/local/filesystem.ts +0 -5
  221. package/src/agent-tools/tools/local/index.ts +0 -55
  222. package/src/agent-tools/tools/local/resolve-path.ts +0 -18
  223. package/src/agent-tools/tools/local/shell.ts +0 -277
  224. package/src/agent-tools/tools/local/system-info.ts +0 -29
  225. package/src/agent-tools/tools/management.ts +0 -425
  226. package/src/agent-tools/tools/mcp-bridge.ts +0 -142
  227. package/src/agent-tools/tools/mcp-server-tools.ts +0 -91
  228. package/src/agent-tools/tools/meeting-lifecycle.ts +0 -438
  229. package/src/agent-tools/tools/memory.ts +0 -509
  230. package/src/agent-tools/tools/messaging/index.ts +0 -6
  231. package/src/agent-tools/tools/messaging/telegram.ts +0 -167
  232. package/src/agent-tools/tools/messaging/whatsapp.ts +0 -651
  233. package/src/agent-tools/tools/microsoft/contacts.ts +0 -176
  234. package/src/agent-tools/tools/microsoft/excel-vba.ts +0 -331
  235. package/src/agent-tools/tools/microsoft/excel.ts +0 -261
  236. package/src/agent-tools/tools/microsoft/graph-api.ts +0 -161
  237. package/src/agent-tools/tools/microsoft/index.ts +0 -95
  238. package/src/agent-tools/tools/microsoft/onedrive.ts +0 -429
  239. package/src/agent-tools/tools/microsoft/onenote.ts +0 -186
  240. package/src/agent-tools/tools/microsoft/outlook-calendar.ts +0 -286
  241. package/src/agent-tools/tools/microsoft/outlook-mail.ts +0 -723
  242. package/src/agent-tools/tools/microsoft/planner.ts +0 -200
  243. package/src/agent-tools/tools/microsoft/powerbi.ts +0 -266
  244. package/src/agent-tools/tools/microsoft/powerpoint.ts +0 -186
  245. package/src/agent-tools/tools/microsoft/sharepoint.ts +0 -328
  246. package/src/agent-tools/tools/microsoft/teams.ts +0 -463
  247. package/src/agent-tools/tools/microsoft/todo.ts +0 -181
  248. package/src/agent-tools/tools/oauth-token-provider.ts +0 -101
  249. package/src/agent-tools/tools/read.ts +0 -160
  250. package/src/agent-tools/tools/visual-memory/capture.ts +0 -217
  251. package/src/agent-tools/tools/visual-memory/diff.ts +0 -283
  252. package/src/agent-tools/tools/visual-memory/index.ts +0 -698
  253. package/src/agent-tools/tools/visual-memory/phash.ts +0 -120
  254. package/src/agent-tools/tools/visual-memory/similarity.ts +0 -354
  255. package/src/agent-tools/tools/visual-memory/storage.ts +0 -534
  256. package/src/agent-tools/tools/visual-memory/types.ts +0 -100
  257. package/src/agent-tools/tools/web-fetch-utils.ts +0 -202
  258. package/src/agent-tools/tools/web-fetch.ts +0 -464
  259. package/src/agent-tools/tools/web-search.ts +0 -480
  260. package/src/agent-tools/tools/web-shared.ts +0 -232
  261. package/src/agent-tools/tools/write.ts +0 -68
  262. package/src/agent-tools/types.ts +0 -214
  263. package/src/agenticmail/index.ts +0 -34
  264. package/src/agenticmail/manager.ts +0 -253
  265. package/src/agenticmail/providers/google.ts +0 -391
  266. package/src/agenticmail/providers/imap.ts +0 -454
  267. package/src/agenticmail/providers/index.ts +0 -28
  268. package/src/agenticmail/providers/microsoft.ts +0 -260
  269. package/src/agenticmail/types.ts +0 -173
  270. package/src/auth/routes.ts +0 -1589
  271. package/src/browser/bridge-auth-registry.ts +0 -34
  272. package/src/browser/bridge-server.ts +0 -93
  273. package/src/browser/cdp.helpers.ts +0 -180
  274. package/src/browser/cdp.ts +0 -466
  275. package/src/browser/chrome.executables.ts +0 -625
  276. package/src/browser/chrome.profile-decoration.ts +0 -198
  277. package/src/browser/chrome.ts +0 -349
  278. package/src/browser/client-actions-core.ts +0 -259
  279. package/src/browser/client-actions-observe.ts +0 -184
  280. package/src/browser/client-actions-state.ts +0 -284
  281. package/src/browser/client-actions-types.ts +0 -16
  282. package/src/browser/client-actions-url.ts +0 -11
  283. package/src/browser/client-actions.ts +0 -4
  284. package/src/browser/client-fetch.ts +0 -253
  285. package/src/browser/client.ts +0 -337
  286. package/src/browser/config.ts +0 -301
  287. package/src/browser/constants.ts +0 -8
  288. package/src/browser/control-auth.ts +0 -94
  289. package/src/browser/control-service.ts +0 -81
  290. package/src/browser/csrf.ts +0 -87
  291. package/src/browser/enterprise-compat.ts +0 -562
  292. package/src/browser/extension-relay.ts +0 -834
  293. package/src/browser/http-auth.ts +0 -63
  294. package/src/browser/navigation-guard.ts +0 -50
  295. package/src/browser/paths.ts +0 -49
  296. package/src/browser/playwright.d.ts +0 -12
  297. package/src/browser/profiles-service.ts +0 -187
  298. package/src/browser/profiles.ts +0 -114
  299. package/src/browser/proxy-files.ts +0 -41
  300. package/src/browser/pw-ai-module.ts +0 -52
  301. package/src/browser/pw-ai-state.ts +0 -9
  302. package/src/browser/pw-ai.ts +0 -65
  303. package/src/browser/pw-role-snapshot.ts +0 -434
  304. package/src/browser/pw-session.ts +0 -810
  305. package/src/browser/pw-tools-core.activity.ts +0 -68
  306. package/src/browser/pw-tools-core.downloads.ts +0 -281
  307. package/src/browser/pw-tools-core.interactions.ts +0 -646
  308. package/src/browser/pw-tools-core.responses.ts +0 -124
  309. package/src/browser/pw-tools-core.shared.ts +0 -70
  310. package/src/browser/pw-tools-core.snapshot.ts +0 -213
  311. package/src/browser/pw-tools-core.state.ts +0 -209
  312. package/src/browser/pw-tools-core.storage.ts +0 -128
  313. package/src/browser/pw-tools-core.trace.ts +0 -37
  314. package/src/browser/pw-tools-core.ts +0 -8
  315. package/src/browser/resolved-config-refresh.ts +0 -59
  316. package/src/browser/routes/agent.act.shared.ts +0 -52
  317. package/src/browser/routes/agent.act.ts +0 -575
  318. package/src/browser/routes/agent.debug.ts +0 -149
  319. package/src/browser/routes/agent.shared.ts +0 -143
  320. package/src/browser/routes/agent.snapshot.ts +0 -333
  321. package/src/browser/routes/agent.storage.ts +0 -451
  322. package/src/browser/routes/agent.ts +0 -13
  323. package/src/browser/routes/basic.ts +0 -202
  324. package/src/browser/routes/dispatcher.ts +0 -126
  325. package/src/browser/routes/index.ts +0 -11
  326. package/src/browser/routes/path-output.ts +0 -1
  327. package/src/browser/routes/tabs.ts +0 -217
  328. package/src/browser/routes/types.ts +0 -26
  329. package/src/browser/routes/utils.ts +0 -73
  330. package/src/browser/screenshot.ts +0 -54
  331. package/src/browser/server-context.ts +0 -688
  332. package/src/browser/server-context.types.ts +0 -65
  333. package/src/browser/server-lifecycle.ts +0 -48
  334. package/src/browser/server-middleware.ts +0 -37
  335. package/src/browser/server.ts +0 -110
  336. package/src/browser/target-id.ts +0 -30
  337. package/src/browser/trash.ts +0 -21
  338. package/src/cli-agent.ts +0 -2452
  339. package/src/cli-reset-password.ts +0 -138
  340. package/src/cli-serve.ts +0 -314
  341. package/src/cli.ts +0 -103
  342. package/src/dashboard/app.js +0 -579
  343. package/src/dashboard/assets/brand-logos.js +0 -350
  344. package/src/dashboard/assets/icons/emoji-icons.js +0 -893
  345. package/src/dashboard/assets/logo.png +0 -0
  346. package/src/dashboard/assets/provider-logos.js +0 -139
  347. package/src/dashboard/components/error-boundary.js +0 -21
  348. package/src/dashboard/components/help-button.js +0 -65
  349. package/src/dashboard/components/icons.js +0 -64
  350. package/src/dashboard/components/knowledge-link.js +0 -79
  351. package/src/dashboard/components/modal.js +0 -125
  352. package/src/dashboard/components/org-switcher.js +0 -156
  353. package/src/dashboard/components/persona-fields.js +0 -460
  354. package/src/dashboard/components/settings-help.js +0 -193
  355. package/src/dashboard/components/tag-input.js +0 -96
  356. package/src/dashboard/components/timezones.js +0 -352
  357. package/src/dashboard/components/transport-encryption.js +0 -288
  358. package/src/dashboard/components/utils.js +0 -205
  359. package/src/dashboard/data/countries.js +0 -255
  360. package/src/dashboard/docs/activity.html +0 -253
  361. package/src/dashboard/docs/agent-activity.html +0 -199
  362. package/src/dashboard/docs/agent-autonomy.html +0 -161
  363. package/src/dashboard/docs/agent-budget.html +0 -190
  364. package/src/dashboard/docs/agent-channels.html +0 -189
  365. package/src/dashboard/docs/agent-communication.html +0 -171
  366. package/src/dashboard/docs/agent-configuration.html +0 -194
  367. package/src/dashboard/docs/agent-deployment.html +0 -323
  368. package/src/dashboard/docs/agent-email.html +0 -184
  369. package/src/dashboard/docs/agent-guardrails.html +0 -206
  370. package/src/dashboard/docs/agent-manager.html +0 -226
  371. package/src/dashboard/docs/agent-memory.html +0 -215
  372. package/src/dashboard/docs/agent-overview.html +0 -226
  373. package/src/dashboard/docs/agent-permissions.html +0 -305
  374. package/src/dashboard/docs/agent-personal.html +0 -155
  375. package/src/dashboard/docs/agent-security.html +0 -188
  376. package/src/dashboard/docs/agent-skills.html +0 -224
  377. package/src/dashboard/docs/agent-tool-security.html +0 -205
  378. package/src/dashboard/docs/agent-tools.html +0 -238
  379. package/src/dashboard/docs/agent-whatsapp.html +0 -210
  380. package/src/dashboard/docs/agent-workforce.html +0 -199
  381. package/src/dashboard/docs/agents.html +0 -258
  382. package/src/dashboard/docs/approvals.html +0 -200
  383. package/src/dashboard/docs/audit.html +0 -206
  384. package/src/dashboard/docs/browser-providers.html +0 -313
  385. package/src/dashboard/docs/cluster.html +0 -285
  386. package/src/dashboard/docs/community-skills.html +0 -253
  387. package/src/dashboard/docs/compliance.html +0 -221
  388. package/src/dashboard/docs/dashboard.html +0 -84
  389. package/src/dashboard/docs/database-access.html +0 -322
  390. package/src/dashboard/docs/dlp.html +0 -268
  391. package/src/dashboard/docs/docs-style.css +0 -26
  392. package/src/dashboard/docs/domain-status.html +0 -294
  393. package/src/dashboard/docs/guardrails.html +0 -265
  394. package/src/dashboard/docs/journal.html +0 -197
  395. package/src/dashboard/docs/knowledge-contributions.html +0 -286
  396. package/src/dashboard/docs/knowledge.html +0 -268
  397. package/src/dashboard/docs/memory-transfer.html +0 -311
  398. package/src/dashboard/docs/messages.html +0 -217
  399. package/src/dashboard/docs/multi-tenant.html +0 -311
  400. package/src/dashboard/docs/org-chart.html +0 -239
  401. package/src/dashboard/docs/organizations.html +0 -182
  402. package/src/dashboard/docs/roles.html +0 -195
  403. package/src/dashboard/docs/settings-network.html +0 -321
  404. package/src/dashboard/docs/settings-security.html +0 -347
  405. package/src/dashboard/docs/settings-tool-security.html +0 -176
  406. package/src/dashboard/docs/settings.html +0 -280
  407. package/src/dashboard/docs/skill-connections.html +0 -270
  408. package/src/dashboard/docs/skills.html +0 -206
  409. package/src/dashboard/docs/task-pipeline.html +0 -261
  410. package/src/dashboard/docs/transport-encryption.html +0 -359
  411. package/src/dashboard/docs/users.html +0 -225
  412. package/src/dashboard/docs/vault.html +0 -260
  413. package/src/dashboard/docs/workforce.html +0 -245
  414. package/src/dashboard/index.html +0 -444
  415. package/src/dashboard/pages/activity.js +0 -379
  416. package/src/dashboard/pages/agent-detail/activity.js +0 -277
  417. package/src/dashboard/pages/agent-detail/autonomy.js +0 -244
  418. package/src/dashboard/pages/agent-detail/budget.js +0 -269
  419. package/src/dashboard/pages/agent-detail/channels.js +0 -494
  420. package/src/dashboard/pages/agent-detail/communication.js +0 -296
  421. package/src/dashboard/pages/agent-detail/configuration.js +0 -882
  422. package/src/dashboard/pages/agent-detail/deployment.js +0 -958
  423. package/src/dashboard/pages/agent-detail/email.js +0 -674
  424. package/src/dashboard/pages/agent-detail/guardrails.js +0 -521
  425. package/src/dashboard/pages/agent-detail/index.js +0 -261
  426. package/src/dashboard/pages/agent-detail/manager.js +0 -357
  427. package/src/dashboard/pages/agent-detail/meeting-browser.js +0 -933
  428. package/src/dashboard/pages/agent-detail/memory.js +0 -368
  429. package/src/dashboard/pages/agent-detail/overview.js +0 -844
  430. package/src/dashboard/pages/agent-detail/permissions.js +0 -1163
  431. package/src/dashboard/pages/agent-detail/personal-details.js +0 -404
  432. package/src/dashboard/pages/agent-detail/security.js +0 -409
  433. package/src/dashboard/pages/agent-detail/shared.js +0 -85
  434. package/src/dashboard/pages/agent-detail/skills-section.js +0 -183
  435. package/src/dashboard/pages/agent-detail/tool-security.js +0 -380
  436. package/src/dashboard/pages/agent-detail/tools.js +0 -322
  437. package/src/dashboard/pages/agent-detail/whatsapp.js +0 -824
  438. package/src/dashboard/pages/agent-detail/workforce.js +0 -683
  439. package/src/dashboard/pages/agents.js +0 -1242
  440. package/src/dashboard/pages/approvals.js +0 -100
  441. package/src/dashboard/pages/audit.js +0 -198
  442. package/src/dashboard/pages/cluster.js +0 -512
  443. package/src/dashboard/pages/community-skills.js +0 -1219
  444. package/src/dashboard/pages/compliance.js +0 -475
  445. package/src/dashboard/pages/dashboard.js +0 -180
  446. package/src/dashboard/pages/database-access.js +0 -812
  447. package/src/dashboard/pages/dlp.js +0 -293
  448. package/src/dashboard/pages/domain-status.js +0 -951
  449. package/src/dashboard/pages/guardrails.js +0 -1035
  450. package/src/dashboard/pages/journal.js +0 -172
  451. package/src/dashboard/pages/knowledge-contributions.js +0 -1682
  452. package/src/dashboard/pages/knowledge-import.js +0 -455
  453. package/src/dashboard/pages/knowledge.js +0 -582
  454. package/src/dashboard/pages/login.js +0 -1056
  455. package/src/dashboard/pages/memory-transfer.js +0 -631
  456. package/src/dashboard/pages/messages.js +0 -303
  457. package/src/dashboard/pages/org-chart.js +0 -349
  458. package/src/dashboard/pages/organizations.js +0 -1081
  459. package/src/dashboard/pages/roles.js +0 -780
  460. package/src/dashboard/pages/settings.js +0 -3790
  461. package/src/dashboard/pages/skill-connections.js +0 -982
  462. package/src/dashboard/pages/skills.js +0 -879
  463. package/src/dashboard/pages/task-pipeline.js +0 -684
  464. package/src/dashboard/pages/users.js +0 -867
  465. package/src/dashboard/pages/vault.js +0 -791
  466. package/src/dashboard/pages/workforce.js +0 -851
  467. package/src/dashboard/vendor/react-dom.development.js +0 -29924
  468. package/src/dashboard/vendor/react-dom.production.min.js +0 -267
  469. package/src/dashboard/vendor/react.development.js +0 -3343
  470. package/src/dashboard/vendor/react.production.min.js +0 -31
  471. package/src/database-access/agent-tools.ts +0 -193
  472. package/src/database-access/connection-manager.ts +0 -1341
  473. package/src/database-access/index.ts +0 -21
  474. package/src/database-access/query-sanitizer.ts +0 -220
  475. package/src/database-access/routes.ts +0 -226
  476. package/src/database-access/types.ts +0 -226
  477. package/src/db/adapter.ts +0 -510
  478. package/src/db/dynamodb.ts +0 -454
  479. package/src/db/factory.ts +0 -129
  480. package/src/db/mongodb.ts +0 -360
  481. package/src/db/mysql.ts +0 -531
  482. package/src/db/postgres.ts +0 -863
  483. package/src/db/proxy.ts +0 -39
  484. package/src/db/resolve-driver.ts +0 -29
  485. package/src/db/sql-schema.ts +0 -124
  486. package/src/db/sqlite.ts +0 -493
  487. package/src/db/turso.ts +0 -470
  488. package/src/deploy/fly.ts +0 -368
  489. package/src/deploy/managed.ts +0 -235
  490. package/src/domain-lock/cli-recover.ts +0 -591
  491. package/src/domain-lock/cli-verify.ts +0 -190
  492. package/src/domain-lock/index.ts +0 -220
  493. package/src/engine/activity-routes.ts +0 -154
  494. package/src/engine/activity.ts +0 -568
  495. package/src/engine/agent-autonomy.ts +0 -974
  496. package/src/engine/agent-config.ts +0 -646
  497. package/src/engine/agent-heartbeat.ts +0 -720
  498. package/src/engine/agent-hierarchy.ts +0 -1064
  499. package/src/engine/agent-memory.ts +0 -806
  500. package/src/engine/agent-notify.ts +0 -50
  501. package/src/engine/agent-routes.ts +0 -2583
  502. package/src/engine/agent-status.ts +0 -311
  503. package/src/engine/ambient-memory.ts +0 -401
  504. package/src/engine/approvals.ts +0 -615
  505. package/src/engine/assets/thinking-hum.mp3 +0 -0
  506. package/src/engine/catalog-routes.ts +0 -232
  507. package/src/engine/chat-poller.ts +0 -913
  508. package/src/engine/chat-webhook-routes.ts +0 -304
  509. package/src/engine/cli-build-skill.ts +0 -285
  510. package/src/engine/cli-submit-skill.ts +0 -200
  511. package/src/engine/cli-validate.ts +0 -188
  512. package/src/engine/cluster.ts +0 -278
  513. package/src/engine/communication-routes.ts +0 -139
  514. package/src/engine/communication.ts +0 -765
  515. package/src/engine/community-registry.ts +0 -1529
  516. package/src/engine/community-routes.ts +0 -260
  517. package/src/engine/compliance-routes.ts +0 -133
  518. package/src/engine/compliance.ts +0 -1679
  519. package/src/engine/config-bus.ts +0 -103
  520. package/src/engine/db-adapter.ts +0 -1156
  521. package/src/engine/db-schema.ts +0 -1945
  522. package/src/engine/deploy-schema-routes.ts +0 -176
  523. package/src/engine/deployer.ts +0 -957
  524. package/src/engine/dlp-routes.ts +0 -101
  525. package/src/engine/dlp.ts +0 -410
  526. package/src/engine/email-poller.ts +0 -855
  527. package/src/engine/emoji.ts +0 -106
  528. package/src/engine/guardrail-routes.ts +0 -125
  529. package/src/engine/guardrails.ts +0 -465
  530. package/src/engine/index.ts +0 -255
  531. package/src/engine/journal-routes.ts +0 -56
  532. package/src/engine/journal.ts +0 -249
  533. package/src/engine/knowledge-contribution-routes.ts +0 -633
  534. package/src/engine/knowledge-contribution.ts +0 -1386
  535. package/src/engine/knowledge-import/chunker.ts +0 -241
  536. package/src/engine/knowledge-import/import-manager.ts +0 -416
  537. package/src/engine/knowledge-import/index.ts +0 -27
  538. package/src/engine/knowledge-import/processors/clean.ts +0 -149
  539. package/src/engine/knowledge-import/processors/extract-gdrive.ts +0 -102
  540. package/src/engine/knowledge-import/processors/extract-github.ts +0 -74
  541. package/src/engine/knowledge-import/processors/extract-sharepoint.ts +0 -69
  542. package/src/engine/knowledge-import/processors/extract-web.ts +0 -275
  543. package/src/engine/knowledge-import/processors/index.ts +0 -18
  544. package/src/engine/knowledge-import/processors/pipeline.ts +0 -171
  545. package/src/engine/knowledge-import/processors/types.ts +0 -78
  546. package/src/engine/knowledge-import/processors/validate.ts +0 -150
  547. package/src/engine/knowledge-import/provider-file-upload.ts +0 -95
  548. package/src/engine/knowledge-import/provider-github.ts +0 -144
  549. package/src/engine/knowledge-import/provider-google-sites.ts +0 -323
  550. package/src/engine/knowledge-import/provider-sharepoint.ts +0 -276
  551. package/src/engine/knowledge-import/provider-url.ts +0 -218
  552. package/src/engine/knowledge-import/routes.ts +0 -94
  553. package/src/engine/knowledge-import/types.ts +0 -92
  554. package/src/engine/knowledge-routes.ts +0 -231
  555. package/src/engine/knowledge.ts +0 -587
  556. package/src/engine/lifecycle.ts +0 -1420
  557. package/src/engine/mcp-process-manager.ts +0 -573
  558. package/src/engine/meeting-monitor.ts +0 -483
  559. package/src/engine/meeting-voice-intelligence.ts +0 -340
  560. package/src/engine/memory-routes.ts +0 -142
  561. package/src/engine/memory-transfer-routes.ts +0 -339
  562. package/src/engine/messaging-history.ts +0 -177
  563. package/src/engine/messaging-poller.ts +0 -786
  564. package/src/engine/model-fallback.ts +0 -141
  565. package/src/engine/oauth-connect-routes.ts +0 -603
  566. package/src/engine/oauth-connect.ts +0 -304
  567. package/src/engine/onboarding-routes.ts +0 -148
  568. package/src/engine/onboarding.ts +0 -574
  569. package/src/engine/org-approval-routes.ts +0 -146
  570. package/src/engine/org-integration-routes.ts +0 -399
  571. package/src/engine/org-integrations.ts +0 -608
  572. package/src/engine/org-policies.ts +0 -502
  573. package/src/engine/policy-import-routes.ts +0 -125
  574. package/src/engine/policy-import.ts +0 -1186
  575. package/src/engine/policy-routes.ts +0 -163
  576. package/src/engine/routes.ts +0 -1236
  577. package/src/engine/screen-unlock.ts +0 -136
  578. package/src/engine/session-router.ts +0 -212
  579. package/src/engine/skill-updater-routes.ts +0 -132
  580. package/src/engine/skill-updater.ts +0 -480
  581. package/src/engine/skill-validator.ts +0 -331
  582. package/src/engine/skills/agent-management.ts +0 -119
  583. package/src/engine/skills/agent-memory.ts +0 -19
  584. package/src/engine/skills/agenticmail.ts +0 -116
  585. package/src/engine/skills/core-tools.ts +0 -25
  586. package/src/engine/skills/database-access.ts +0 -78
  587. package/src/engine/skills/enterprise-code-sandbox.ts +0 -113
  588. package/src/engine/skills/enterprise-database.ts +0 -123
  589. package/src/engine/skills/enterprise-diff.ts +0 -95
  590. package/src/engine/skills/enterprise-documents.ts +0 -162
  591. package/src/engine/skills/enterprise-http.ts +0 -99
  592. package/src/engine/skills/enterprise-security-scan.ts +0 -125
  593. package/src/engine/skills/enterprise-spreadsheet.ts +0 -171
  594. package/src/engine/skills/gws-admin.ts +0 -18
  595. package/src/engine/skills/gws-calendar.ts +0 -21
  596. package/src/engine/skills/gws-chat.ts +0 -29
  597. package/src/engine/skills/gws-contacts.ts +0 -20
  598. package/src/engine/skills/gws-docs.ts +0 -18
  599. package/src/engine/skills/gws-drive.ts +0 -23
  600. package/src/engine/skills/gws-forms.ts +0 -23
  601. package/src/engine/skills/gws-gmail.ts +0 -30
  602. package/src/engine/skills/gws-groups.ts +0 -17
  603. package/src/engine/skills/gws-keep.ts +0 -17
  604. package/src/engine/skills/gws-maps.ts +0 -25
  605. package/src/engine/skills/gws-meet.ts +0 -23
  606. package/src/engine/skills/gws-sheets.ts +0 -22
  607. package/src/engine/skills/gws-sites.ts +0 -16
  608. package/src/engine/skills/gws-slides.ts +0 -27
  609. package/src/engine/skills/gws-tasks.ts +0 -22
  610. package/src/engine/skills/gws-vault.ts +0 -17
  611. package/src/engine/skills/index.ts +0 -159
  612. package/src/engine/skills/knowledge-search.ts +0 -18
  613. package/src/engine/skills/local-system.ts +0 -61
  614. package/src/engine/skills/m365-admin.ts +0 -18
  615. package/src/engine/skills/m365-bookings.ts +0 -17
  616. package/src/engine/skills/m365-copilot.ts +0 -17
  617. package/src/engine/skills/m365-excel.ts +0 -60
  618. package/src/engine/skills/m365-forms.ts +0 -17
  619. package/src/engine/skills/m365-onedrive.ts +0 -60
  620. package/src/engine/skills/m365-onenote.ts +0 -17
  621. package/src/engine/skills/m365-outlook.ts +0 -27
  622. package/src/engine/skills/m365-planner.ts +0 -18
  623. package/src/engine/skills/m365-power-automate.ts +0 -18
  624. package/src/engine/skills/m365-power-bi.ts +0 -19
  625. package/src/engine/skills/m365-powerpoint.ts +0 -33
  626. package/src/engine/skills/m365-sharepoint.ts +0 -20
  627. package/src/engine/skills/m365-teams.ts +0 -21
  628. package/src/engine/skills/m365-todo.ts +0 -17
  629. package/src/engine/skills/m365-whiteboard.ts +0 -16
  630. package/src/engine/skills/m365-word.ts +0 -42
  631. package/src/engine/skills/mcp-bridge.ts +0 -45
  632. package/src/engine/skills/meeting-lifecycle.ts +0 -20
  633. package/src/engine/skills/messaging.ts +0 -46
  634. package/src/engine/skills/visual-memory.ts +0 -25
  635. package/src/engine/skills.ts +0 -688
  636. package/src/engine/soul-library.ts +0 -142
  637. package/src/engine/soul-templates.json +0 -1525
  638. package/src/engine/storage-manager.ts +0 -252
  639. package/src/engine/storage-routes.ts +0 -113
  640. package/src/engine/storage.ts +0 -528
  641. package/src/engine/task-poller.ts +0 -394
  642. package/src/engine/task-queue-after-spawn.ts +0 -66
  643. package/src/engine/task-queue-before-spawn.ts +0 -113
  644. package/src/engine/task-queue-routes.ts +0 -161
  645. package/src/engine/task-queue.ts +0 -664
  646. package/src/engine/tenant.ts +0 -409
  647. package/src/engine/tool-catalog.ts +0 -354
  648. package/src/engine/vault-routes.ts +0 -134
  649. package/src/engine/vault.ts +0 -601
  650. package/src/engine/workforce-routes.ts +0 -331
  651. package/src/engine/workforce.ts +0 -1161
  652. package/src/index.ts +0 -77
  653. package/src/lib/cidr.ts +0 -122
  654. package/src/lib/config-store.ts +0 -86
  655. package/src/lib/resilience.ts +0 -326
  656. package/src/lib/text-search.ts +0 -358
  657. package/src/mcp/adapters/activecampaign.adapter.ts +0 -391
  658. package/src/mcp/adapters/adobe-sign.adapter.ts +0 -469
  659. package/src/mcp/adapters/adp.adapter.ts +0 -358
  660. package/src/mcp/adapters/airtable.adapter.ts +0 -273
  661. package/src/mcp/adapters/apollo.adapter.ts +0 -420
  662. package/src/mcp/adapters/asana.adapter.ts +0 -315
  663. package/src/mcp/adapters/auth0.adapter.ts +0 -386
  664. package/src/mcp/adapters/aws.adapter.ts +0 -345
  665. package/src/mcp/adapters/azure-devops.adapter.ts +0 -389
  666. package/src/mcp/adapters/bamboohr.adapter.ts +0 -376
  667. package/src/mcp/adapters/basecamp.adapter.ts +0 -366
  668. package/src/mcp/adapters/bigcommerce.adapter.ts +0 -429
  669. package/src/mcp/adapters/bitbucket.adapter.ts +0 -260
  670. package/src/mcp/adapters/box.adapter.ts +0 -350
  671. package/src/mcp/adapters/brex.adapter.ts +0 -367
  672. package/src/mcp/adapters/buffer.adapter.ts +0 -303
  673. package/src/mcp/adapters/calendly.adapter.ts +0 -262
  674. package/src/mcp/adapters/canva.adapter.ts +0 -256
  675. package/src/mcp/adapters/chargebee.adapter.ts +0 -448
  676. package/src/mcp/adapters/circleci.adapter.ts +0 -216
  677. package/src/mcp/adapters/clickup.adapter.ts +0 -335
  678. package/src/mcp/adapters/close.adapter.ts +0 -390
  679. package/src/mcp/adapters/cloudflare.adapter.ts +0 -378
  680. package/src/mcp/adapters/confluence.adapter.ts +0 -301
  681. package/src/mcp/adapters/contentful.adapter.ts +0 -355
  682. package/src/mcp/adapters/copper.adapter.ts +0 -468
  683. package/src/mcp/adapters/crisp.adapter.ts +0 -415
  684. package/src/mcp/adapters/crowdstrike.adapter.ts +0 -413
  685. package/src/mcp/adapters/datadog.adapter.ts +0 -373
  686. package/src/mcp/adapters/digitalocean.adapter.ts +0 -336
  687. package/src/mcp/adapters/discord.adapter.ts +0 -248
  688. package/src/mcp/adapters/docker.adapter.ts +0 -238
  689. package/src/mcp/adapters/docusign.adapter.ts +0 -431
  690. package/src/mcp/adapters/drift.adapter.ts +0 -386
  691. package/src/mcp/adapters/dropbox.adapter.ts +0 -315
  692. package/src/mcp/adapters/figma.adapter.ts +0 -302
  693. package/src/mcp/adapters/firebase.adapter.ts +0 -446
  694. package/src/mcp/adapters/flyio.adapter.ts +0 -302
  695. package/src/mcp/adapters/freshbooks.adapter.ts +0 -474
  696. package/src/mcp/adapters/freshdesk.adapter.ts +0 -441
  697. package/src/mcp/adapters/freshsales.adapter.ts +0 -457
  698. package/src/mcp/adapters/freshservice.adapter.ts +0 -481
  699. package/src/mcp/adapters/front.adapter.ts +0 -357
  700. package/src/mcp/adapters/github-actions.adapter.ts +0 -329
  701. package/src/mcp/adapters/github.adapter.ts +0 -387
  702. package/src/mcp/adapters/gitlab.adapter.ts +0 -368
  703. package/src/mcp/adapters/gong.adapter.ts +0 -386
  704. package/src/mcp/adapters/google-ads.adapter.ts +0 -363
  705. package/src/mcp/adapters/google-analytics.adapter.ts +0 -316
  706. package/src/mcp/adapters/google-cloud.adapter.ts +0 -312
  707. package/src/mcp/adapters/gotomeeting.adapter.ts +0 -255
  708. package/src/mcp/adapters/grafana.adapter.ts +0 -361
  709. package/src/mcp/adapters/greenhouse.adapter.ts +0 -354
  710. package/src/mcp/adapters/gusto.adapter.ts +0 -329
  711. package/src/mcp/adapters/hashicorp-vault.adapter.ts +0 -355
  712. package/src/mcp/adapters/heroku.adapter.ts +0 -291
  713. package/src/mcp/adapters/hibob.adapter.ts +0 -334
  714. package/src/mcp/adapters/hootsuite.adapter.ts +0 -322
  715. package/src/mcp/adapters/hubspot.adapter.ts +0 -400
  716. package/src/mcp/adapters/huggingface.adapter.ts +0 -349
  717. package/src/mcp/adapters/index.ts +0 -524
  718. package/src/mcp/adapters/intercom.adapter.ts +0 -269
  719. package/src/mcp/adapters/jira.adapter.ts +0 -482
  720. package/src/mcp/adapters/klaviyo.adapter.ts +0 -353
  721. package/src/mcp/adapters/kubernetes.adapter.ts +0 -431
  722. package/src/mcp/adapters/lattice.adapter.ts +0 -339
  723. package/src/mcp/adapters/launchdarkly.adapter.ts +0 -368
  724. package/src/mcp/adapters/lever.adapter.ts +0 -347
  725. package/src/mcp/adapters/linear.adapter.ts +0 -300
  726. package/src/mcp/adapters/linkedin.adapter.ts +0 -331
  727. package/src/mcp/adapters/livechat.adapter.ts +0 -259
  728. package/src/mcp/adapters/loom.adapter.ts +0 -230
  729. package/src/mcp/adapters/mailchimp.adapter.ts +0 -394
  730. package/src/mcp/adapters/mailgun.adapter.ts +0 -425
  731. package/src/mcp/adapters/miro.adapter.ts +0 -274
  732. package/src/mcp/adapters/mixpanel.adapter.ts +0 -324
  733. package/src/mcp/adapters/monday.adapter.ts +0 -308
  734. package/src/mcp/adapters/mongodb-atlas.adapter.ts +0 -345
  735. package/src/mcp/adapters/neon.adapter.ts +0 -312
  736. package/src/mcp/adapters/netlify.adapter.ts +0 -324
  737. package/src/mcp/adapters/netsuite.adapter.ts +0 -411
  738. package/src/mcp/adapters/newrelic.adapter.ts +0 -339
  739. package/src/mcp/adapters/notion.adapter.ts +0 -338
  740. package/src/mcp/adapters/okta.adapter.ts +0 -394
  741. package/src/mcp/adapters/openai.adapter.ts +0 -315
  742. package/src/mcp/adapters/opsgenie.adapter.ts +0 -375
  743. package/src/mcp/adapters/outreach.adapter.ts +0 -372
  744. package/src/mcp/adapters/paddle.adapter.ts +0 -467
  745. package/src/mcp/adapters/pagerduty.adapter.ts +0 -412
  746. package/src/mcp/adapters/pandadoc.adapter.ts +0 -389
  747. package/src/mcp/adapters/paypal.adapter.ts +0 -465
  748. package/src/mcp/adapters/personio.adapter.ts +0 -401
  749. package/src/mcp/adapters/pinecone.adapter.ts +0 -340
  750. package/src/mcp/adapters/pipedrive.adapter.ts +0 -324
  751. package/src/mcp/adapters/plaid.adapter.ts +0 -444
  752. package/src/mcp/adapters/postmark.adapter.ts +0 -387
  753. package/src/mcp/adapters/power-automate.adapter.ts +0 -388
  754. package/src/mcp/adapters/quickbooks.adapter.ts +0 -431
  755. package/src/mcp/adapters/recurly.adapter.ts +0 -433
  756. package/src/mcp/adapters/reddit.adapter.ts +0 -371
  757. package/src/mcp/adapters/render.adapter.ts +0 -332
  758. package/src/mcp/adapters/ringcentral.adapter.ts +0 -281
  759. package/src/mcp/adapters/rippling.adapter.ts +0 -287
  760. package/src/mcp/adapters/salesforce.adapter.ts +0 -321
  761. package/src/mcp/adapters/salesloft.adapter.ts +0 -413
  762. package/src/mcp/adapters/sanity.adapter.ts +0 -363
  763. package/src/mcp/adapters/sap.adapter.ts +0 -483
  764. package/src/mcp/adapters/segment.adapter.ts +0 -260
  765. package/src/mcp/adapters/sendgrid.adapter.ts +0 -265
  766. package/src/mcp/adapters/sentry.adapter.ts +0 -331
  767. package/src/mcp/adapters/servicenow.adapter.ts +0 -468
  768. package/src/mcp/adapters/shopify.adapter.ts +0 -451
  769. package/src/mcp/adapters/shortcut.adapter.ts +0 -290
  770. package/src/mcp/adapters/slack.adapter.ts +0 -380
  771. package/src/mcp/adapters/smartsheet.adapter.ts +0 -326
  772. package/src/mcp/adapters/snowflake.adapter.ts +0 -347
  773. package/src/mcp/adapters/snyk.adapter.ts +0 -394
  774. package/src/mcp/adapters/splunk.adapter.ts +0 -403
  775. package/src/mcp/adapters/square.adapter.ts +0 -467
  776. package/src/mcp/adapters/statuspage.adapter.ts +0 -401
  777. package/src/mcp/adapters/stripe.adapter.ts +0 -380
  778. package/src/mcp/adapters/supabase.adapter.ts +0 -334
  779. package/src/mcp/adapters/teamwork.adapter.ts +0 -404
  780. package/src/mcp/adapters/telegram.adapter.ts +0 -299
  781. package/src/mcp/adapters/terraform.adapter.ts +0 -300
  782. package/src/mcp/adapters/todoist.adapter.ts +0 -239
  783. package/src/mcp/adapters/trello.adapter.ts +0 -316
  784. package/src/mcp/adapters/twilio.adapter.ts +0 -233
  785. package/src/mcp/adapters/twitter.adapter.ts +0 -348
  786. package/src/mcp/adapters/vercel.adapter.ts +0 -219
  787. package/src/mcp/adapters/weaviate.adapter.ts +0 -371
  788. package/src/mcp/adapters/webex.adapter.ts +0 -237
  789. package/src/mcp/adapters/webflow.adapter.ts +0 -287
  790. package/src/mcp/adapters/whatsapp.adapter.ts +0 -273
  791. package/src/mcp/adapters/whereby.adapter.ts +0 -240
  792. package/src/mcp/adapters/woocommerce.adapter.ts +0 -454
  793. package/src/mcp/adapters/wordpress.adapter.ts +0 -455
  794. package/src/mcp/adapters/workday.adapter.ts +0 -354
  795. package/src/mcp/adapters/wrike.adapter.ts +0 -349
  796. package/src/mcp/adapters/xero.adapter.ts +0 -472
  797. package/src/mcp/adapters/youtube.adapter.ts +0 -401
  798. package/src/mcp/adapters/zendesk.adapter.ts +0 -399
  799. package/src/mcp/adapters/zoho-crm.adapter.ts +0 -410
  800. package/src/mcp/adapters/zoom.adapter.ts +0 -241
  801. package/src/mcp/adapters/zuora.adapter.ts +0 -476
  802. package/src/mcp/framework/api-executor.ts +0 -192
  803. package/src/mcp/framework/aws-sigv4.ts +0 -216
  804. package/src/mcp/framework/credential-resolver.ts +0 -128
  805. package/src/mcp/framework/oauth-token-manager.ts +0 -22
  806. package/src/mcp/framework/skill-mcp-framework.ts +0 -226
  807. package/src/mcp/framework/types.ts +0 -130
  808. package/src/mcp/index.ts +0 -124
  809. package/src/mcp/integration-catalog.ts +0 -178
  810. package/src/middleware/dns-rebinding.ts +0 -44
  811. package/src/middleware/egress-filter.ts +0 -104
  812. package/src/middleware/firewall.ts +0 -192
  813. package/src/middleware/geo-ip.ts +0 -156
  814. package/src/middleware/index.ts +0 -390
  815. package/src/middleware/network-config.ts +0 -90
  816. package/src/middleware/proxy-config.ts +0 -71
  817. package/src/middleware/request-limits.ts +0 -59
  818. package/src/middleware/transport-encryption.ts +0 -398
  819. package/src/registry/cli.ts +0 -63
  820. package/src/registry/server.ts +0 -504
  821. package/src/runtime/agent-loop.ts +0 -779
  822. package/src/runtime/compaction.ts +0 -638
  823. package/src/runtime/email-channel.ts +0 -120
  824. package/src/runtime/environment.ts +0 -300
  825. package/src/runtime/followup.ts +0 -211
  826. package/src/runtime/gateway.ts +0 -260
  827. package/src/runtime/hooks.ts +0 -564
  828. package/src/runtime/index.ts +0 -1110
  829. package/src/runtime/llm-client.ts +0 -1056
  830. package/src/runtime/model-router.ts +0 -97
  831. package/src/runtime/providers.ts +0 -228
  832. package/src/runtime/session-manager.ts +0 -345
  833. package/src/runtime/subagent.ts +0 -153
  834. package/src/runtime/tool-executor.ts +0 -208
  835. package/src/runtime/types.ts +0 -255
  836. package/src/security/brute-force.ts +0 -423
  837. package/src/security/config.ts +0 -159
  838. package/src/security/csp.ts +0 -407
  839. package/src/security/external-content.ts +0 -299
  840. package/src/security/index.ts +0 -557
  841. package/src/security/input-sanitizer.ts +0 -452
  842. package/src/security/output-filter.ts +0 -575
  843. package/src/security/port-scanner.ts +0 -342
  844. package/src/security/prompt-guard.ts +0 -387
  845. package/src/security/sql-guard.ts +0 -338
  846. package/src/security/threat-logger.ts +0 -484
  847. package/src/server.ts +0 -828
  848. package/src/setup/company.ts +0 -183
  849. package/src/setup/database.ts +0 -153
  850. package/src/setup/deployment.ts +0 -561
  851. package/src/setup/domain.ts +0 -112
  852. package/src/setup/index.ts +0 -171
  853. package/src/setup/provision.ts +0 -532
  854. package/src/setup/registration.ts +0 -302
  855. package/src/system-prompts/catchup.ts +0 -48
  856. package/src/system-prompts/google/calendar.ts +0 -37
  857. package/src/system-prompts/google/chat.ts +0 -92
  858. package/src/system-prompts/google/contacts.ts +0 -25
  859. package/src/system-prompts/google/docs.ts +0 -29
  860. package/src/system-prompts/google/drive.ts +0 -34
  861. package/src/system-prompts/google/forms.ts +0 -25
  862. package/src/system-prompts/google/gmail.ts +0 -50
  863. package/src/system-prompts/google/index.ts +0 -23
  864. package/src/system-prompts/google/maps.ts +0 -20
  865. package/src/system-prompts/google/meet.ts +0 -130
  866. package/src/system-prompts/google/sheets.ts +0 -32
  867. package/src/system-prompts/google/slides.ts +0 -26
  868. package/src/system-prompts/google/tasks.ts +0 -27
  869. package/src/system-prompts/index.ts +0 -88
  870. package/src/system-prompts/microsoft/contacts.ts +0 -34
  871. package/src/system-prompts/microsoft/excel.ts +0 -52
  872. package/src/system-prompts/microsoft/index.ts +0 -31
  873. package/src/system-prompts/microsoft/onedrive.ts +0 -41
  874. package/src/system-prompts/microsoft/onenote.ts +0 -36
  875. package/src/system-prompts/microsoft/outlook-calendar.ts +0 -37
  876. package/src/system-prompts/microsoft/outlook-mail.ts +0 -46
  877. package/src/system-prompts/microsoft/planner.ts +0 -37
  878. package/src/system-prompts/microsoft/powerbi.ts +0 -38
  879. package/src/system-prompts/microsoft/powerpoint.ts +0 -35
  880. package/src/system-prompts/microsoft/sharepoint.ts +0 -44
  881. package/src/system-prompts/microsoft/teams.ts +0 -49
  882. package/src/system-prompts/microsoft/todo.ts +0 -37
  883. package/src/system-prompts/shared-blocks.ts +0 -87
  884. package/src/system-prompts/task.ts +0 -21
  885. package/src/system-prompts/triage.ts +0 -34
  886. package/src/types/hono-env.ts +0 -18
  887. package/src/types/optional-deps.d.ts +0 -10
  888. /package/{src → dist}/dashboard/HELP-TOOLTIPS-GUIDE.md +0 -0
@@ -1,359 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8">
5
- <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
- <title>Transport Encryption — AgenticMail Enterprise</title>
7
- <link rel="stylesheet" href="/docs/docs-style.css">
8
- <script>var t = localStorage.getItem('em_theme') || 'dark'; document.documentElement.setAttribute('data-theme', t);</script>
9
- </head>
10
- <body>
11
- <a href="javascript:history.back()" class="back">&larr; Back to Dashboard</a>
12
- <h1>Transport Encryption</h1>
13
- <p style="color: var(--text-muted); margin-bottom: 24px;">Application-layer encryption for API data in transit between the dashboard and server — defense-in-depth against network sniffing, MITM attacks, and compromised TLS proxies.</p>
14
-
15
- <div class="toc">
16
- <h3>Table of Contents</h3>
17
- <ul>
18
- <li><a href="#overview">Overview</a></li>
19
- <li><a href="#why">Why Transport Encryption?</a></li>
20
- <li><a href="#how-it-works">How It Works</a></li>
21
- <li><a href="#key-concepts">Key Concepts</a></li>
22
- <li><a href="#configuration">Configuration</a></li>
23
- <li><a href="#endpoint-groups">Endpoint Groups</a></li>
24
- <li><a href="#custom-endpoints">Custom Endpoints</a></li>
25
- <li><a href="#advanced">Advanced Settings</a></li>
26
- <li><a href="#best-practices">Best Practices</a></li>
27
- <li><a href="#troubleshooting">Troubleshooting</a></li>
28
- <li><a href="#technical-details">Technical Details</a></li>
29
- <li><a href="#related">Related Pages</a></li>
30
- </ul>
31
- </div>
32
-
33
- <h2 id="overview">Overview</h2>
34
- <p>Transport Encryption adds an additional layer of AES-256-CBC encryption to API calls between the AgenticMail dashboard (your browser) and the server. While HTTPS already encrypts data at the transport layer, this feature provides <strong>application-layer encryption</strong> for defense-in-depth.</p>
35
-
36
- <p>This is particularly important for AgenticMail because the dashboard handles extremely sensitive data:</p>
37
- <ul>
38
- <li><strong>LLM API keys</strong> — Anthropic, OpenAI, Google, xAI, and other provider keys worth thousands of dollars</li>
39
- <li><strong>Database credentials</strong> — Connection strings, passwords, and URLs for PostgreSQL, MySQL, MongoDB, Redis</li>
40
- <li><strong>OAuth tokens</strong> — Google Workspace, Microsoft 365 access and refresh tokens</li>
41
- <li><strong>Email/SMTP passwords</strong> — Agent email configuration credentials</li>
42
- <li><strong>Vault secrets</strong> — Any encrypted secrets stored in the secure vault</li>
43
- <li><strong>Agent configurations</strong> — WhatsApp tokens, Telegram bot tokens, browser configs</li>
44
- </ul>
45
-
46
- <p>You can choose to encrypt <strong>all API calls</strong> for maximum security, or selectively encrypt only the endpoint groups that handle sensitive data.</p>
47
-
48
- <h2 id="why">Why Transport Encryption?</h2>
49
- <p>"But we already use HTTPS!" — Yes, and HTTPS is excellent. However, there are real-world scenarios where HTTPS alone isn't enough:</p>
50
-
51
- <div class="card">
52
- <h3>Threat Scenarios</h3>
53
- <table>
54
- <tr><th>Threat</th><th>HTTPS Alone</th><th>With Transport Encryption</th></tr>
55
- <tr><td>Standard network sniffing</td><td>Protected</td><td>Protected (double-encrypted)</td></tr>
56
- <tr><td>Corporate SSL/TLS inspection proxies</td><td><strong>Exposed</strong> — proxy decrypts/re-encrypts</td><td>Protected — inner encryption survives</td></tr>
57
- <tr><td>Compromised CDN/reverse proxy</td><td><strong>Exposed</strong> — proxy sees plaintext</td><td>Protected — data is still encrypted</td></tr>
58
- <tr><td>Compromised TLS certificate</td><td><strong>Exposed</strong></td><td>Protected — independent encryption layer</td></tr>
59
- <tr><td>Debug/logging proxy (Fiddler, Charles)</td><td><strong>Exposed</strong> — designed to expose</td><td>Protected — payload is opaque</td></tr>
60
- <tr><td>Malicious browser extension reading network</td><td><strong>Exposed</strong> — extension sees decrypted data</td><td>Partially protected — depends on extension capabilities</td></tr>
61
- <tr><td>Replay attacks</td><td>Session-based</td><td>Protected — timestamp + HMAC prevents reuse</td></tr>
62
- </table>
63
- </div>
64
-
65
- <div class="tip">
66
- <strong>When to enable:</strong> If your AgenticMail instance is behind a corporate proxy, CDN (Cloudflare, AWS CloudFront), or accessed over untrusted networks. Also recommended if you manage high-value API keys or sensitive client data.
67
- </div>
68
-
69
- <h2 id="how-it-works">How It Works</h2>
70
-
71
- <h3>Encryption Flow</h3>
72
- <div class="card">
73
- <p><strong>Outgoing Request (Dashboard → Server):</strong></p>
74
- <ol>
75
- <li>Dashboard intercepts the fetch call for a sensitive endpoint</li>
76
- <li>Request body is serialized to JSON</li>
77
- <li>A random 16-byte IV is generated</li>
78
- <li>Data is encrypted with AES-256-CBC using the shared key</li>
79
- <li>SHA-256 checksum is computed for integrity</li>
80
- <li>HMAC-SHA256 signature is computed over IV + ciphertext + timestamp + checksum</li>
81
- <li>Payload is wrapped as <code>{ _enc: "&lt;base64-encoded-payload&gt;" }</code></li>
82
- <li>Server receives, verifies HMAC, verifies timestamp, decrypts, verifies checksum</li>
83
- <li>Handler sees the original plaintext JSON</li>
84
- </ol>
85
- </div>
86
-
87
- <div class="card">
88
- <p><strong>Incoming Response (Server → Dashboard):</strong></p>
89
- <ol>
90
- <li>Server handler returns normal JSON response</li>
91
- <li>Middleware checks if client sent <code>x-transport-encryption: 1</code> header</li>
92
- <li>If yes, response JSON is encrypted with the same algorithm</li>
93
- <li>Response is wrapped as <code>{ _enc: "&lt;base64-encoded-payload&gt;" }</code></li>
94
- <li>Response header <code>x-transport-encrypted: 1</code> is set</li>
95
- <li>Dashboard fetch interceptor detects the header, decrypts the response</li>
96
- <li>Application code receives the original plaintext JSON</li>
97
- </ol>
98
- </div>
99
-
100
- <h3>Key Exchange</h3>
101
- <p>When encryption is enabled, the dashboard requests a key token from the authenticated endpoint <code>/transport-encryption/client-key</code>. This token is used to derive the same AES and HMAC keys that the server uses. The key exchange only happens once per session and requires authentication.</p>
102
-
103
- <h3>Graceful Degradation</h3>
104
- <p>If the client doesn't send the <code>x-transport-encryption: 1</code> header (e.g., direct API calls, third-party integrations), responses are sent in plaintext. This ensures backward compatibility — only the dashboard UI uses encryption.</p>
105
-
106
- <h2 id="key-concepts">Key Concepts</h2>
107
-
108
- <div class="card">
109
- <h3>Encrypt All vs Selective</h3>
110
- <p><strong>Encrypt All:</strong> Every API call between the dashboard and server is encrypted. Maximum security, slight overhead. Recommended for high-security environments.</p>
111
- <p><strong>Selective:</strong> Only the endpoint groups you choose are encrypted. Best balance of security and performance — encrypt sensitive groups (API keys, database, vault) while leaving low-risk endpoints (dashboard stats) in plaintext.</p>
112
- <p><strong>Sensitive Only:</strong> One-click preset that enables encryption for groups marked as "SENSITIVE" — models, auth, email, database, vault, and integrations.</p>
113
- </div>
114
-
115
- <div class="card">
116
- <h3>Endpoint Groups</h3>
117
- <p>Endpoints are organized into 22 logical groups. Each group maps to a set of API path patterns. When you toggle a group, all its endpoints are encrypted/decrypted. Hover over any group in the UI to see the exact path patterns.</p>
118
- </div>
119
-
120
- <div class="card">
121
- <h3>Custom Endpoints</h3>
122
- <p>If you have custom API endpoints (plugins, extensions, or custom routes), you can add their path patterns manually. Use <code>*</code> as a wildcard for single path segments. Example: <code>/api/my-plugin/*/config</code></p>
123
- </div>
124
-
125
- <h2 id="configuration">Configuration</h2>
126
- <p>Navigate to <strong>Settings → Security → Transport Encryption</strong>.</p>
127
-
128
- <h3>Step 1: Enable Transport Encryption</h3>
129
- <p>Toggle "Enable Transport Encryption" to ON. This activates the encryption middleware on the server and the fetch interceptor on the dashboard.</p>
130
-
131
- <h3>Step 2: Choose Encryption Scope</h3>
132
- <p>Select one of three modes:</p>
133
- <ul>
134
- <li><strong>Encrypt All API Calls</strong> — Everything is encrypted. All 22 endpoint groups are activated.</li>
135
- <li><strong>Sensitive Only</strong> — Pre-selected groups that handle credentials, tokens, and secrets.</li>
136
- <li><strong>Custom Selection</strong> — Toggle individual groups manually.</li>
137
- </ul>
138
-
139
- <h3>Step 3: Save</h3>
140
- <p>Click "Save Security Settings". The configuration takes effect immediately — no server restart required.</p>
141
-
142
- <div class="tip">
143
- <strong>No restart needed:</strong> Changes to transport encryption take effect immediately. The middleware reads the updated config on the next request.
144
- </div>
145
-
146
- <h2 id="endpoint-groups">Endpoint Groups</h2>
147
- <p>Each group covers a logical area of the dashboard. Groups marked <span class="badge badge-advanced">SENSITIVE</span> handle credentials or secrets.</p>
148
-
149
- <table>
150
- <tr><th>Group</th><th>Description</th><th>Sensitivity</th></tr>
151
- <tr><td>Settings & Configuration</td><td>System settings, platform config</td><td>Normal</td></tr>
152
- <tr><td>Models & API Keys</td><td>LLM provider API keys</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
153
- <tr><td>Authentication</td><td>Login, sessions, 2FA, SSO</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
154
- <tr><td>Agent Configuration</td><td>Agent configs, tools, permissions</td><td>Normal</td></tr>
155
- <tr><td>Email & SMTP</td><td>Email/SMTP credentials, domain settings</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
156
- <tr><td>Database Connections</td><td>Database URLs, credentials, connection strings</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
157
- <tr><td>Vault & Secrets</td><td>Encrypted secret storage</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
158
- <tr><td>Organization Integrations</td><td>OAuth tokens, Google/Microsoft integrations</td><td><span class="badge badge-advanced">SENSITIVE</span></td></tr>
159
- <tr><td>Skills & Credentials</td><td>Skill API tokens</td><td>Normal</td></tr>
160
- <tr><td>Organizations</td><td>Org management, member data</td><td>Normal</td></tr>
161
- <tr><td>Knowledge Bases</td><td>KB content, documents, embeddings</td><td>Normal</td></tr>
162
- <tr><td>Task Pipeline</td><td>Task queue, results, delegation</td><td>Normal</td></tr>
163
- <tr><td>Workforce & Schedules</td><td>Schedules, clock records, budgets</td><td>Normal</td></tr>
164
- <tr><td>Messages & Channels</td><td>WhatsApp, Telegram, channel configs</td><td>Normal</td></tr>
165
- <tr><td>Guardrails & DLP</td><td>Guardrail rules, DLP policies</td><td>Normal</td></tr>
166
- <tr><td>Activity Journal</td><td>Agent activity logs</td><td>Normal</td></tr>
167
- <tr><td>Approvals</td><td>Approval requests and decisions</td><td>Normal</td></tr>
168
- <tr><td>Compliance & Audit</td><td>Compliance reports, audit logs</td><td>Normal</td></tr>
169
- <tr><td>Domain & DNS</td><td>Domain config, DNS records, SSL</td><td>Normal</td></tr>
170
- <tr><td>Roles & Permissions</td><td>Role templates, permission profiles</td><td>Normal</td></tr>
171
- <tr><td>Memory & Transfer</td><td>Agent memories, memory transfer, schedules</td><td><span style="color:var(--danger);font-weight:600">SENSITIVE</span></td></tr>
172
- <tr><td>Dashboard & Overview</td><td>Dashboard stats, agent summaries</td><td>Normal</td></tr>
173
- </table>
174
-
175
- <h2 id="custom-endpoints">Custom Endpoints</h2>
176
- <p>Add custom API path patterns to encrypt endpoints not covered by the built-in groups.</p>
177
-
178
- <h3>Pattern Syntax</h3>
179
- <ul>
180
- <li><code>/api/exact/path</code> — Matches exactly</li>
181
- <li><code>/api/path/*</code> — Wildcard matches one path segment (e.g., <code>/api/path/123</code> but not <code>/api/path/123/sub</code>)</li>
182
- <li><code>/api/path/*/sub</code> — Wildcard in the middle</li>
183
- </ul>
184
-
185
- <h3>Examples</h3>
186
- <pre><code>/api/my-plugin/*/config
187
- /webhook/incoming
188
- /api/custom-integration/*</code></pre>
189
-
190
- <h2 id="advanced">Advanced Settings</h2>
191
-
192
- <h3>Payload Max Age</h3>
193
- <p>Default: <strong>300 seconds (5 minutes)</strong>. Encrypted payloads include a timestamp. If the server receives a payload older than this limit, it's rejected as a potential replay attack. Increase this if you have slow connections or clock drift between client and server.</p>
194
-
195
- <h3>Debug Logging</h3>
196
- <p>When enabled, encryption/decryption operations are logged to the server console. <strong>Never enable in production</strong> — it could expose sensitive data in log files.</p>
197
-
198
- <h3>Encryption Key</h3>
199
- <p>The encryption key is derived from environment variables in this priority:</p>
200
- <ol>
201
- <li><code>TRANSPORT_ENCRYPTION_KEY</code> — Dedicated key for transport encryption</li>
202
- <li><code>ENCRYPTION_KEY</code> — Shared encryption key</li>
203
- <li><code>JWT_SECRET</code> — Falls back to JWT secret</li>
204
- <li>Built-in default (not recommended for production)</li>
205
- </ol>
206
-
207
- <div class="warning">
208
- <strong>Production recommendation:</strong> Set <code>TRANSPORT_ENCRYPTION_KEY</code> in your environment to a strong random string (32+ characters). Using the default key provides obfuscation but not true security.
209
- </div>
210
-
211
- <h2 id="deployment">Deployment Platforms</h2>
212
- <p>Transport encryption works on every platform. The encryption key (<code>TRANSPORT_ENCRYPTION_KEY</code>) must be set as an environment variable, which every platform supports.</p>
213
-
214
- <div class="card">
215
- <h3>Key Generation &amp; Storage</h3>
216
- <p>During initial setup, the wizard auto-generates a 256-bit key and attempts to:</p>
217
- <ol>
218
- <li><strong>Write to <code>.env</code> file</strong> — Works on persistent filesystems (localhost, VPS, bare metal)</li>
219
- <li><strong>Store in database</strong> — Backup copy in settings table (always works)</li>
220
- <li><strong>Display to user</strong> — For manual platform configuration (always shown)</li>
221
- </ol>
222
- <p>On ephemeral platforms (fly.io, Railway, Docker), the <code>.env</code> write may fail silently. The wizard detects this and shows a clear warning with platform-specific instructions.</p>
223
- </div>
224
-
225
- <table>
226
- <tr><th>Platform</th><th>How to Set Keys</th><th>.env Persists?</th></tr>
227
- <tr><td>Localhost / VPS</td><td>Auto-saved to <code>.env</code></td><td>Yes</td></tr>
228
- <tr><td>fly.io</td><td><code>fly secrets set TRANSPORT_ENCRYPTION_KEY=&lt;key&gt;</code></td><td>No (ephemeral)</td></tr>
229
- <tr><td>Railway</td><td>Dashboard &rarr; Variables, or <code>railway variables set</code></td><td>No (ephemeral)</td></tr>
230
- <tr><td>Render</td><td>Dashboard &rarr; Environment &rarr; Secret Files or Env Vars</td><td>No (ephemeral)</td></tr>
231
- <tr><td>Docker</td><td><code>docker run -e TRANSPORT_ENCRYPTION_KEY=&lt;key&gt;</code> or docker-compose env</td><td>Only if volume-mounted</td></tr>
232
- <tr><td>Cloudflare Workers</td><td><code>wrangler secret put TRANSPORT_ENCRYPTION_KEY</code></td><td>No (serverless)</td></tr>
233
- <tr><td>AWS ECS/Lambda</td><td>Task definition env vars or SSM Parameter Store</td><td>Via SSM/Secrets Manager</td></tr>
234
- <tr><td>Heroku</td><td><code>heroku config:set TRANSPORT_ENCRYPTION_KEY=&lt;key&gt;</code></td><td>No (ephemeral)</td></tr>
235
- <tr><td>AgenticMail Cloud</td><td>Managed automatically</td><td>Yes (managed)</td></tr>
236
- </table>
237
-
238
- <div class="warning">
239
- <strong>Key must be identical across all instances.</strong> If you run multiple replicas (load-balanced), every instance must have the same <code>TRANSPORT_ENCRYPTION_KEY</code>. Otherwise, a request encrypted by one instance can't be decrypted by another.
240
- </div>
241
-
242
- <h2 id="best-practices">Best Practices</h2>
243
-
244
- <div class="card">
245
- <h3>For Most Deployments</h3>
246
- <ul>
247
- <li>Enable "Sensitive Only" — covers API keys, database creds, vault, auth, email, and integrations</li>
248
- <li>Set <code>TRANSPORT_ENCRYPTION_KEY</code> in your environment</li>
249
- <li>Keep payload max age at 300s unless you have specific latency issues</li>
250
- <li>Leave debug logging OFF</li>
251
- </ul>
252
- </div>
253
-
254
- <div class="card">
255
- <h3>For High-Security Environments</h3>
256
- <ul>
257
- <li>Enable "Encrypt All API Calls"</li>
258
- <li>Use a dedicated <code>TRANSPORT_ENCRYPTION_KEY</code> (not shared with other services)</li>
259
- <li>Reduce payload max age to 60-120 seconds</li>
260
- <li>Combine with HTTPS, HSTS, and strict CSP headers</li>
261
- <li>Enable audit logging to track all security events</li>
262
- </ul>
263
- </div>
264
-
265
- <div class="card">
266
- <h3>For Development</h3>
267
- <ul>
268
- <li>Can be left disabled — HTTPS may not be configured locally</li>
269
- <li>If testing encryption, enable debug logging temporarily</li>
270
- <li>The system gracefully degrades — if encryption fails, plaintext is sent</li>
271
- </ul>
272
- </div>
273
-
274
- <h2 id="troubleshooting">Troubleshooting</h2>
275
-
276
- <div class="card">
277
- <h3>Dashboard shows errors after enabling encryption</h3>
278
- <p><strong>Cause:</strong> Key mismatch between client and server, often after changing the encryption key.</p>
279
- <p><strong>Fix:</strong> Hard-refresh the dashboard (Ctrl+Shift+R / Cmd+Shift+R) to re-fetch the key token. If the issue persists, disable encryption, refresh, and re-enable.</p>
280
- </div>
281
-
282
- <div class="card">
283
- <h3>"Encrypted payload expired" errors</h3>
284
- <p><strong>Cause:</strong> Clock drift between the client browser and server exceeds the max age setting.</p>
285
- <p><strong>Fix:</strong> Sync clocks (NTP) or increase the payload max age in Advanced Settings.</p>
286
- </div>
287
-
288
- <div class="card">
289
- <h3>"Invalid signature — payload tampered" errors</h3>
290
- <p><strong>Cause:</strong> A proxy or middleware modified the request body after encryption.</p>
291
- <p><strong>Fix:</strong> Check for request-modifying proxies, WAFs, or middleware that transform JSON bodies.</p>
292
- </div>
293
-
294
- <div class="card">
295
- <h3>API calls from external tools (curl, Postman) fail</h3>
296
- <p><strong>Cause:</strong> External tools don't send the <code>x-transport-encryption: 1</code> header, so the server doesn't encrypt responses. However, if you send an encrypted request body (<code>{ _enc: "..." }</code>), the server will try to decrypt it.</p>
297
- <p><strong>Fix:</strong> For external API access, either disable encryption for those endpoints or don't include the encryption header — the server only encrypts responses when the client explicitly requests it.</p>
298
- </div>
299
-
300
- <div class="card">
301
- <h3>Performance impact</h3>
302
- <p>AES-256-CBC encryption/decryption is very fast (hardware-accelerated on modern CPUs). The overhead is typically &lt;1ms per request. For "Encrypt All" mode, you might notice ~2-5ms total overhead across all dashboard API calls. This is negligible compared to network latency.</p>
303
- </div>
304
-
305
- <h2 id="technical-details">Technical Details</h2>
306
-
307
- <div class="card">
308
- <h3>Cryptographic Specifications</h3>
309
- <table>
310
- <tr><th>Component</th><th>Algorithm</th><th>Details</th></tr>
311
- <tr><td>Encryption</td><td>AES-256-CBC</td><td>256-bit key, PKCS7 padding</td></tr>
312
- <tr><td>Key Derivation</td><td>SHA-256</td><td>Separate keys for encryption and HMAC</td></tr>
313
- <tr><td>Integrity</td><td>SHA-256 checksum</td><td>First 16 hex chars of hash</td></tr>
314
- <tr><td>Authentication</td><td>HMAC-SHA256</td><td>Signs IV + ciphertext + timestamp + checksum</td></tr>
315
- <tr><td>IV Generation</td><td>CSPRNG</td><td>16 random bytes per message</td></tr>
316
- <tr><td>Server Implementation</td><td>Node.js <code>crypto</code></td><td>Native, hardware-accelerated</td></tr>
317
- <tr><td>Client Implementation</td><td>Web Crypto API</td><td>Browser-native, no dependencies</td></tr>
318
- </table>
319
- </div>
320
-
321
- <div class="card">
322
- <h3>Encrypted Payload Format</h3>
323
- <pre><code>// Base64-encoded JSON envelope:
324
- {
325
- "v": 1, // Protocol version
326
- "iv": "...", // Hex-encoded 16-byte IV
327
- "d": "...", // Base64-encoded AES-256-CBC ciphertext
328
- "ts": 1709510400, // Unix timestamp (ms)
329
- "cs": "...", // SHA-256 checksum (first 16 hex chars)
330
- "sig": "..." // HMAC-SHA256 signature (first 32 hex chars)
331
- }
332
-
333
- // Wire format: { "_enc": "&lt;base64 of above JSON&gt;" }</code></pre>
334
- </div>
335
-
336
- <div class="card">
337
- <h3>Source Files</h3>
338
- <ul>
339
- <li><strong>Server middleware:</strong> <code>src/middleware/transport-encryption.ts</code></li>
340
- <li><strong>Dashboard client:</strong> <code>src/dashboard/components/transport-encryption.js</code></li>
341
- <li><strong>Settings UI:</strong> <code>src/dashboard/pages/settings.js</code> (ComprehensiveSecurityTab)</li>
342
- <li><strong>Route wiring:</strong> <code>src/engine/routes.ts</code></li>
343
- </ul>
344
- </div>
345
-
346
- <h2 id="related">Related Pages</h2>
347
- <div class="nav-links">
348
- <a href="/docs/settings">Settings</a>
349
- <a href="/docs/vault">Vault & Secrets</a>
350
- <a href="/docs/database-access">Database Access</a>
351
- <a href="/docs/organizations">Organizations</a>
352
- <a href="/docs/agent-email">Agent Email</a>
353
- <a href="/docs/skills">Skills</a>
354
- </div>
355
-
356
- <hr style="margin: 32px 0; border: none; border-top: 1px solid var(--border);">
357
- <p style="font-size: 12px; color: var(--text-muted);">AgenticMail Enterprise Documentation &mdash; Transport Encryption<br>Found an issue? <a href="https://github.com/agenticmail/enterprise/issues" target="_blank">Report it on GitHub</a></p>
358
- </body>
359
- </html>
@@ -1,225 +0,0 @@
1
- <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
2
- <title>User Management — AgenticMail Enterprise</title>
3
- <link rel="stylesheet" href="/docs/docs-style.css">
4
- <script>document.documentElement.setAttribute('data-theme', localStorage.getItem('em_theme') || 'dark');</script>
5
- </head><body>
6
- <a href="javascript:history.back()" class="back">← Back to Dashboard</a>
7
- <h1>User Management</h1>
8
- <p style="color:var(--text-muted);margin-bottom:24px">Manage dashboard users, roles, permissions, and access control for your AgenticMail Enterprise instance.</p>
9
-
10
- <div class="toc">
11
- <h3>Table of Contents</h3>
12
- <ul>
13
- <li><a href="#overview">Overview</a></li>
14
- <li><a href="#how-it-works">How It Works</a></li>
15
- <li><a href="#key-concepts">Key Concepts</a></li>
16
- <li><a href="#roles">Role System</a></li>
17
- <li><a href="#permissions">Permission Editor</a></li>
18
- <li><a href="#agent-access">Agent Access Control</a></li>
19
- <li><a href="#org-assignment">Client Organization Assignment</a></li>
20
- <li><a href="#user-lifecycle">User Lifecycle</a></li>
21
- <li><a href="#configuration">Configuration &amp; Setup</a></li>
22
- <li><a href="#best-practices">Best Practices</a></li>
23
- <li><a href="#troubleshooting">Troubleshooting</a></li>
24
- <li><a href="#related">Related Pages</a></li>
25
- </ul>
26
- </div>
27
-
28
- <h2 id="overview">Overview</h2>
29
- <div class="card">
30
- <p><strong>For everyone:</strong> The Users page is where you manage who can access your AgenticMail Enterprise dashboard and what they can see and do. Think of it as the "guest list" for your control center — you decide who gets in, what rooms they can enter, and which agents they can interact with.</p>
31
- <p><strong>For technical users:</strong> This page implements a full RBAC (Role-Based Access Control) system with page-level and tab-level permission granularity, per-user agent access restrictions, client organization scoping, and a multi-step destructive action workflow. The backend exposes <code>/users</code>, <code>/users/:id/permissions</code>, <code>/page-registry</code>, and <code>/organizations</code> API endpoints.</p>
32
- </div>
33
-
34
- <h2 id="how-it-works">How It Works</h2>
35
- <ol>
36
- <li><strong>Create a user</strong> — provide email, initial password, name, and role. The user is forced to change their password on first login.</li>
37
- <li><strong>Assign a role</strong> — Owner and Admin get full access automatically. Member and Viewer roles can be restricted via the Permission Editor.</li>
38
- <li><strong>Configure permissions</strong> — Click the shield icon on any Member/Viewer to control which pages, tabs, and agents they can access.</li>
39
- <li><strong>Optionally bind to an organization</strong> — Restrict a user to only see agents and data belonging to a specific client organization.</li>
40
- <li><strong>Manage lifecycle</strong> — Edit, deactivate, reactivate, reset passwords, impersonate, or permanently delete users as needed.</li>
41
- </ol>
42
-
43
- <h2 id="key-concepts">Key Concepts</h2>
44
-
45
- <h3>Page Registry</h3>
46
- <p>The backend maintains a registry of all dashboard pages and their tabs. This registry is fetched via <code>GET /page-registry</code> and used by the Permission Editor to generate the access control UI. Pages are organized into three sections:</p>
47
- <table>
48
- <thead><tr><th>Section</th><th>Description</th></tr></thead>
49
- <tbody>
50
- <tr><td><strong>Overview</strong></td><td>Dashboard home, analytics, and monitoring pages</td></tr>
51
- <tr><td><strong>Management</strong></td><td>Agent management, email, tools, and operational pages</td></tr>
52
- <tr><td><strong>Administration</strong></td><td>Users, vault, compliance, DLP, and system settings</td></tr>
53
- </tbody>
54
- </table>
55
-
56
- <h3>Permission Format</h3>
57
- <p>Permissions are stored as a JSON object or the string <code>"*"</code> for full access:</p>
58
- <pre><code>// Full access
59
- "*"
60
-
61
- // Granular access — page IDs as keys, true or tab array as values
62
- {
63
- "agents": true, // All tabs on agents page
64
- "vault": ["secrets", "audit"], // Only secrets and audit tabs
65
- "_allowedAgents": ["agent-id-1", "agent-id-2"] // Specific agents only
66
- }</code></pre>
67
-
68
- <h2 id="roles">Role System</h2>
69
- <table>
70
- <thead><tr><th>Role</th><th>Access Level</th><th>Permissions Configurable?</th><th>Notes</th></tr></thead>
71
- <tbody>
72
- <tr><td><span class="badge">Owner</span></td><td>Full</td><td>No — always full</td><td>Cannot be restricted. Can impersonate other users.</td></tr>
73
- <tr><td><span class="badge">Admin</span></td><td>Full</td><td>No — always full</td><td>Cannot be restricted. Full administrative access.</td></tr>
74
- <tr><td><span class="badge">Member</span></td><td>Configurable</td><td>Yes</td><td>Can view and act on assigned pages/tabs.</td></tr>
75
- <tr><td><span class="badge">Viewer</span></td><td>Configurable (read-only)</td><td>Yes</td><td>Can view but not modify.</td></tr>
76
- </tbody>
77
- </table>
78
-
79
- <div class="tip">
80
- <strong>Tip:</strong> Owner and Admin users always have full access to all pages — the Permission Editor only affects Member and Viewer roles.
81
- </div>
82
-
83
- <h2 id="permissions">Permission Editor</h2>
84
- <p>The Permission Editor (shield icon) opens a modal where you can configure:</p>
85
- <ul>
86
- <li><strong>Full Access toggle</strong> — grants unrestricted access to all pages, tabs, and agents.</li>
87
- <li><strong>Page-level access</strong> — check/uncheck individual pages grouped by section (Overview, Management, Administration).</li>
88
- <li><strong>Tab-level access</strong> — for pages with tabs (e.g., Agents), expand the page to grant access to specific tabs only.</li>
89
- <li><strong>Quick actions</strong> — "Select All" and "Select None" buttons for bulk toggling.</li>
90
- <li><strong>Agent access</strong> — restrict which agents the user can see and manage (see below).</li>
91
- <li><strong>Organization assignment</strong> — bind user to a client organization.</li>
92
- </ul>
93
-
94
- <p>The editor also shows an inline permission picker when creating new users with Member or Viewer roles, so you can set permissions before the user is created.</p>
95
-
96
- <h2 id="agent-access">Agent Access Control</h2>
97
- <p>Beyond page/tab permissions, you can control which agents a user can see:</p>
98
- <ul>
99
- <li><strong>All Agents</strong> (default) — the user can see and manage every agent in the system.</li>
100
- <li><strong>Specific agents</strong> — uncheck "All Agents" and select individual agents from the list. The user will only see these agents across the entire dashboard.</li>
101
- </ul>
102
-
103
- <div class="warning">
104
- <strong>Warning:</strong> If you select no agents, the user will see an empty agent list everywhere. Make sure at least one agent is selected.
105
- </div>
106
-
107
- <h2 id="org-assignment">Client Organization Assignment</h2>
108
- <p>If your deployment uses multi-tenancy with client organizations:</p>
109
- <ul>
110
- <li>Assign a user to a client organization to restrict them to only that organization's agents and data.</li>
111
- <li>The organization switcher will be locked for that user — they cannot switch to other orgs.</li>
112
- <li>Users without an org assignment are "Internal Users" and can see everything (subject to their role and permissions).</li>
113
- </ul>
114
-
115
- <h2 id="user-lifecycle">User Lifecycle</h2>
116
-
117
- <h3>Creating Users</h3>
118
- <p>Click "Add User" and fill in name, email, initial password (or generate one), and role. For Member/Viewer roles, you can customize permissions inline before creating.</p>
119
-
120
- <div class="tip">
121
- <strong>Tip:</strong> Use the "Generate" button to create a strong random password. The user will be required to change it on first login.
122
- </div>
123
-
124
- <h3>Editing Users</h3>
125
- <p>Click the edit icon to change a user's name, role, or organization. Email cannot be changed after creation.</p>
126
-
127
- <h3>Resetting Passwords</h3>
128
- <p>Click the lock icon to set a new password. If the user has 2FA enabled, the password reset will not affect their TOTP setup.</p>
129
-
130
- <h3>Impersonation (Owner Only)</h3>
131
- <p>Owners can click the impersonate icon to view the dashboard as another user, seeing exactly what they see based on their permissions. Useful for debugging access issues.</p>
132
-
133
- <h3>Deactivation vs. Deletion</h3>
134
-
135
- <table>
136
- <thead><tr><th>Action</th><th>Reversible?</th><th>Effect</th></tr></thead>
137
- <tbody>
138
- <tr><td><strong>Deactivate</strong></td><td>Yes</td><td>Blocks login. All data preserved. User sees "contact your organization" message.</td></tr>
139
- <tr><td><strong>Delete</strong></td><td>No</td><td>Permanently removes user, sessions, API keys, permissions, and 2FA config.</td></tr>
140
- </tbody>
141
- </table>
142
-
143
- <div class="danger">
144
- <strong>Danger:</strong> Deletion is a 5-step process requiring you to type the user's email to confirm. It cannot be undone. Always prefer deactivation unless you are certain.
145
- </div>
146
-
147
- <h3>5-Step Delete Confirmation</h3>
148
- <ol>
149
- <li><strong>Warning</strong> — confirms you understand this is permanent.</li>
150
- <li><strong>Data loss</strong> — lists all data that will be lost (sessions, audit references, API keys, 2FA).</li>
151
- <li><strong>Impact assessment</strong> — warns about orphaned agent assignments, approval workflows, and cron jobs.</li>
152
- <li><strong>Alternative suggestion</strong> — recommends deactivation as the safe option.</li>
153
- <li><strong>Final confirmation</strong> — type the user's email to confirm deletion.</li>
154
- </ol>
155
-
156
- <h2 id="configuration">Configuration &amp; Setup</h2>
157
-
158
- <h3>API Endpoints</h3>
159
- <table>
160
- <thead><tr><th>Method</th><th>Endpoint</th><th>Description</th></tr></thead>
161
- <tbody>
162
- <tr><td>GET</td><td><code>/users</code></td><td>List all users</td></tr>
163
- <tr><td>POST</td><td><code>/users</code></td><td>Create a new user</td></tr>
164
- <tr><td>PATCH</td><td><code>/users/:id</code></td><td>Update user (name, role, clientOrgId)</td></tr>
165
- <tr><td>DELETE</td><td><code>/users/:id</code></td><td>Permanently delete user (requires confirmation token)</td></tr>
166
- <tr><td>GET</td><td><code>/users/:id/permissions</code></td><td>Get user permissions</td></tr>
167
- <tr><td>PUT</td><td><code>/users/:id/permissions</code></td><td>Update user permissions</td></tr>
168
- <tr><td>POST</td><td><code>/users/:id/reset-password</code></td><td>Reset user password</td></tr>
169
- <tr><td>POST</td><td><code>/users/:id/deactivate</code></td><td>Deactivate user</td></tr>
170
- <tr><td>POST</td><td><code>/users/:id/reactivate</code></td><td>Reactivate user</td></tr>
171
- <tr><td>GET</td><td><code>/page-registry</code></td><td>Get page/tab registry for permission editor</td></tr>
172
- <tr><td>GET</td><td><code>/organizations</code></td><td>List client organizations</td></tr>
173
- </tbody>
174
- </table>
175
-
176
- <h3>User Table Columns</h3>
177
- <p>The users table displays: Name, Email, Role, Organization, Status (Active/Deactivated), Access (Full or page count), 2FA (On/Off), Created date, and Actions.</p>
178
-
179
- <h2 id="best-practices">Best Practices</h2>
180
- <div class="card">
181
- <ul>
182
- <li><strong>Principle of least privilege</strong> — start users with Viewer role and only elevate as needed.</li>
183
- <li><strong>Use organizations</strong> — for multi-tenant setups, always bind external users to their client org.</li>
184
- <li><strong>Prefer deactivation</strong> — deactivate users who leave the team instead of deleting them, preserving audit trail integrity.</li>
185
- <li><strong>Limit Owner accounts</strong> — only 1–2 users should have Owner role. Use Admin for day-to-day administration.</li>
186
- <li><strong>Review permissions quarterly</strong> — audit who has access to what and remove unnecessary grants.</li>
187
- <li><strong>Use tab-level restrictions</strong> — if a Member only needs to see agent logs but not configuration, restrict at the tab level.</li>
188
- <li><strong>Generate passwords</strong> — always use the Generate button rather than creating weak passwords manually.</li>
189
- </ul>
190
- </div>
191
-
192
- <h2 id="troubleshooting">Troubleshooting</h2>
193
-
194
- <div class="card">
195
- <h3>User can't see certain pages</h3>
196
- <p>Check their role and permissions. If they're a Member or Viewer, click the shield icon to verify which pages are granted. Remember that Owner and Admin roles always have full access.</p>
197
-
198
- <h3>User can't see any agents</h3>
199
- <p>The agent access control may be set to specific agents with none selected. Open the Permission Editor and either check "All Agents" or select specific agents.</p>
200
-
201
- <h3>Organization switcher is locked</h3>
202
- <p>The user is bound to a client organization. Edit the user and change their organization to "None (Internal User)" to unlock it.</p>
203
-
204
- <h3>"Cannot delete user" error</h3>
205
- <p>Ensure you're sending the correct confirmation token: <code>DELETE_USER_{email}</code>. Only Owners can delete users, and you cannot delete yourself.</p>
206
-
207
- <h3>Permissions not taking effect</h3>
208
- <p>The user may need to refresh their browser or log out and back in for permission changes to take effect.</p>
209
-
210
- <h3>2FA still active after password reset</h3>
211
- <p>This is by design — resetting a password does not disable two-factor authentication. The user's TOTP setup is preserved.</p>
212
- </div>
213
-
214
- <h2 id="related">Related Pages</h2>
215
- <div class="nav">
216
- <a href="/docs/vault.html">Vault</a> — Manage secrets and credentials that users access.
217
- <a href="/docs/compliance.html">Compliance</a> — Generate audit reports that reference user actions.
218
- <a href="/docs/dlp.html">DLP</a> — Data loss prevention rules that apply to user-managed agents.
219
- </div>
220
-
221
- <div style="margin-top:40px;padding-top:16px;border-top:1px solid var(--border);display:flex;justify-content:space-between;align-items:center;font-size:12px;color:var(--text-muted)">
222
- <span>AgenticMail Enterprise Documentation</span>
223
- <a href="https://github.com/agenticmail/enterprise/issues" target="_blank" style="display:inline-flex;align-items:center;gap:4px;color:var(--text-muted);text-decoration:none"><svg width="14" height="14" viewBox="0 0 24 24" fill="currentColor"><path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0024 12c0-6.63-5.37-12-12-12z"/></svg> Report an issue</a>
224
- </div>
225
- </body></html>