@agenticmail/enterprise 0.5.351 → 0.5.353

package/dist/{agent-heartbeat-YTW5OANI.js → agent-heartbeat-DOMJAVCK.js}

@@ -466,7 +466,7 @@ var AgentHeartbeatManager = class {
       return;
     }
     try {
-      const { guardrails } = await import("./routes-FPNJY7MF.js");
+      const { guardrails } = await import("./routes-OA6Y74YU.js");
       const status = await guardrails.getStatus(ctx.agentId);
       if (status.paused || status.offDuty) {
         console.log(`[heartbeat] Skipping action dispatch \u2014 agent is ${status.offDuty ? "off duty" : "paused"}`);

package/dist/agent-provisioner-JIT6CRPU.js

@@ -0,0 +1,193 @@
+import {
+  __esm
+} from "./chunk-KFQGP6VL.js";
+
+// src/engine/agent-provisioner.ts
+import { existsSync, readFileSync, writeFileSync, mkdirSync, statSync } from "fs";
+import { resolve, dirname } from "path";
+import { homedir } from "os";
+import { execSync } from "child_process";
+import { fileURLToPath } from "url";
+function slugify(name) {
+  return name.split(/\s+/)[0].toLowerCase().replace(/[^a-z0-9-]/g, "");
+}
+function getPm2Name(config) {
+  const local = config.deployment?.config?.local;
+  if (local?.pm2Name) return local.pm2Name;
+  return `${slugify(config.name)}-agent`;
+}
+function findCliScript() {
+  try {
+    const thisFile = fileURLToPath(import.meta.url);
+    let dir = dirname(thisFile);
+    for (let i = 0; i < 5; i++) {
+      const candidate = resolve(dir, "dist", "cli.js");
+      if (existsSync(candidate)) return candidate;
+      const candidate2 = resolve(dir, "cli.js");
+      if (existsSync(candidate2) && dir.endsWith("dist")) return candidate2;
+      dir = dirname(dir);
+    }
+  } catch {
+  }
+  try {
+    const result = execSync("npm root -g", { encoding: "utf8", timeout: 5e3 }).trim();
+    const candidate = resolve(result, "@agenticmail", "enterprise", "dist", "cli.js");
+    if (existsSync(candidate)) return candidate;
+  } catch {
+  }
+  return null;
+}
+function provisionAgent(config) {
+  const slug = slugify(config.name);
+  const pm2Name = getPm2Name(config);
+  const amDir = resolve(homedir(), ".agenticmail");
+  const envFile = resolve(amDir, `.env.${slug}`);
+  const wrapperScript = resolve(amDir, `agent-${slug}.cjs`);
+  const port = config.deployment?.config?.local?.port || 3101;
+  try {
+    mkdirSync(amDir, { recursive: true });
+  } catch (e) {
+    return { success: false, error: `Cannot create ${amDir}: ${e.message}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  const envLines = [
+    `# Auto-generated for agent: ${config.displayName || config.name}`,
+    `# Created: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    `AGENTICMAIL_AGENT_ID=${config.id}`,
+    `AGENTICMAIL_AGENT_NAME=${config.displayName || config.name}`,
+    `AGENTICMAIL_MODEL=${config.model?.provider || "anthropic"}/${config.model?.modelId || "claude-sonnet-4-20250514"}`,
+    `PORT=${port}`
+  ];
+  if (config.model?.thinkingLevel) {
+    envLines.push(`AGENTICMAIL_THINKING=${config.model.thinkingLevel}`);
+  }
+  const mainEnvFile = resolve(amDir, ".env");
+  const REQUIRED_INHERIT = ["DATABASE_URL", "JWT_SECRET"];
+  const OPTIONAL_INHERIT = ["AGENTICMAIL_VAULT_KEY", "ORG_ID", "ENTERPRISE_URL", "AGENTICMAIL_DOMAIN"];
+  if (!existsSync(mainEnvFile)) {
+    return { success: false, error: `Enterprise .env not found at ${mainEnvFile}. Run setup first.`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  const mainEnvContent = readFileSync(mainEnvFile, "utf8");
+  const missingKeys = [];
+  for (const key of REQUIRED_INHERIT) {
+    const m = mainEnvContent.match(new RegExp(`^${key}=(.+)$`, "m"));
+    if (m) {
+      envLines.push(`${key}=${m[1]}`);
+    } else {
+      missingKeys.push(key);
+    }
+  }
+  if (missingKeys.length > 0) {
+    return { success: false, error: `Missing required keys in ${mainEnvFile}: ${missingKeys.join(", ")}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  for (const key of OPTIONAL_INHERIT) {
+    const m = mainEnvContent.match(new RegExp(`^${key}=(.+)$`, "m"));
+    if (m) envLines.push(`${key}=${m[1]}`);
+  }
+  try {
+    writeFileSync(envFile, envLines.join("\n") + "\n");
+  } catch (e) {
+    return { success: false, error: `Cannot write ${envFile}: ${e.message}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  try {
+    const written = readFileSync(envFile, "utf8");
+    if (!written.includes(`AGENTICMAIL_AGENT_ID=${config.id}`)) {
+      return { success: false, error: `Env file validation failed: AGENTICMAIL_AGENT_ID not found in ${envFile}`, envFile, wrapperScript, slug, pm2Name, port };
+    }
+    if (!written.includes("DATABASE_URL=")) {
+      return { success: false, error: `Env file validation failed: DATABASE_URL not found in ${envFile}`, envFile, wrapperScript, slug, pm2Name, port };
+    }
+  } catch (e) {
+    return { success: false, error: `Cannot read back ${envFile}: ${e.message}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  const cliScript = findCliScript();
+  const wrapperLines = [
+    `#!/usr/bin/env node`,
+    `// Auto-generated agent wrapper for: ${config.displayName || config.name}`,
+    `// Agent ID: ${config.id}`,
+    `// Created: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    `'use strict';`,
+    ``,
+    `const { readFileSync } = require('fs');`,
+    ``,
+    `// \u2500\u2500 Load agent env file \u2500\u2500`,
+    `const envFile = ${JSON.stringify(envFile)};`,
+    `try {`,
+    `  const lines = readFileSync(envFile, 'utf8').split('\\n');`,
+    `  for (const line of lines) {`,
+    `    const m = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);`,
+    `    if (m) process.env[m[1]] = m[2];`,
+    `  }`,
+    `} catch (e) {`,
+    `  console.error('[agent-wrapper] FATAL: Cannot load env file:', envFile, e.message);`,
+    `  process.exit(1);`,
+    `}`,
+    ``,
+    `// \u2500\u2500 Validate required env vars \u2500\u2500`,
+    `const required = ['AGENTICMAIL_AGENT_ID', 'DATABASE_URL', 'JWT_SECRET'];`,
+    `for (const key of required) {`,
+    `  if (!process.env[key]) {`,
+    `    console.error('[agent-wrapper] FATAL: Missing required env var:', key);`,
+    `    process.exit(1);`,
+    `  }`,
+    `}`,
+    `console.log('[agent-wrapper] Agent:', process.env.AGENTICMAIL_AGENT_NAME, '(' + process.env.AGENTICMAIL_AGENT_ID.slice(0, 8) + '...)');`,
+    ``
+  ];
+  if (cliScript) {
+    wrapperLines.push(
+      `// \u2500\u2500 Direct execution (found cli.js at build time) \u2500\u2500`,
+      `// Set argv so cli.js routes to 'agent' command`,
+      `process.argv = [process.execPath, __filename, 'agent'];`,
+      `try {`,
+      `  require(${JSON.stringify(cliScript)});`,
+      `} catch (e) {`,
+      `  // Fallback to npx if direct path is stale (e.g. npx cache cleared)`,
+      `  console.warn('[agent-wrapper] Direct execution failed, falling back to npx:', e.message);`,
+      `  const { spawnSync } = require('child_process');`,
+      `  const r = spawnSync('npx', ['@agenticmail/enterprise', 'agent'], {`,
+      `    stdio: 'inherit', env: process.env, shell: process.platform === 'win32'`,
+      `  });`,
+      `  process.exit(r.status || 0);`,
+      `}`
+    );
+  } else {
+    wrapperLines.push(
+      `// \u2500\u2500 npx execution (cli.js not found at provision time) \u2500\u2500`,
+      `const { spawnSync } = require('child_process');`,
+      `const r = spawnSync('npx', ['@agenticmail/enterprise', 'agent'], {`,
+      `  stdio: 'inherit', env: process.env, shell: process.platform === 'win32'`,
+      `});`,
+      `process.exit(r.status || 0);`
+    );
+  }
+  try {
+    writeFileSync(wrapperScript, wrapperLines.join("\n") + "\n");
+  } catch (e) {
+    return { success: false, error: `Cannot write ${wrapperScript}: ${e.message}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  try {
+    const stat = statSync(wrapperScript);
+    if (stat.size < 100) {
+      return { success: false, error: `Wrapper script too small (${stat.size} bytes): ${wrapperScript}`, envFile, wrapperScript, slug, pm2Name, port };
+    }
+  } catch (e) {
+    return { success: false, error: `Cannot stat wrapper: ${e.message}`, envFile, wrapperScript, slug, pm2Name, port };
+  }
+  return {
+    success: true,
+    envFile,
+    wrapperScript,
+    cliScript: cliScript || void 0,
+    slug,
+    pm2Name,
+    port
+  };
+}
+var init_agent_provisioner = __esm({
+  "src/engine/agent-provisioner.ts"() {
+  }
+});
+init_agent_provisioner();
+export {
+  provisionAgent
+};

package/dist/{chunk-HMTXNZ5P.js → chunk-3IEMACO4.js}

@@ -393,9 +393,6 @@ _Add environment-specific notes here (camera names, SSH hosts, etc.)_
 
 // src/engine/deployer.ts
 import { execSync } from "child_process";
-import { resolve } from "path";
-import { existsSync } from "fs";
-import { homedir } from "os";
 function getPm2Name(config) {
   const local = config.deployment?.config?.local;
   if (local?.pm2Name) return local.pm2Name;
@@ -419,40 +416,6 @@ async function ensurePm2() {
     }
   }
 }
-function generateEcosystemConfig(config) {
-  const pm2Name = getPm2Name(config);
-  const local = config.deployment?.config?.local;
-  const cwd = local?.workDir || process.cwd();
-  let script = resolve(cwd, "dist/cli.js");
-  let useNpx = false;
-  if (!existsSync(script)) {
-    try {
-      const pkgDir = resolve(import.meta.url.replace("file://", "").replace(/\/dist\/.*$|\/src\/.*$/, ""));
-      const candidate = resolve(pkgDir, "dist/cli.js");
-      if (existsSync(candidate)) {
-        script = candidate;
-      } else {
-        useNpx = true;
-      }
-    } catch {
-      useNpx = true;
-    }
-  }
-  const slug = config.name.split(/\s+/)[0].toLowerCase().replace(/[^a-z0-9-]/g, "");
-  const amDir = resolve(homedir(), ".agenticmail");
-  const envFile = resolve(amDir, `.env.${slug}`);
-  const hasEnvFile = existsSync(envFile);
-  const cwdEnvFile = resolve(cwd, `.env.${slug}`);
-  const hasCwdEnvFile = existsSync(cwdEnvFile);
-  return {
-    script,
-    args: "agent",
-    name: pm2Name,
-    cwd,
-    envFile: hasEnvFile ? envFile : hasCwdEnvFile ? cwdEnvFile : void 0,
-    useNpx
-  };
-}
 var DeploymentEngine;
 var init_deployer = __esm({
   "src/engine/deployer.ts"() {
@@ -715,16 +678,23 @@ EOF`);
        * Restarts the PM2 process (or starts it if stopped).
        */
       async deployLocal(config, emit) {
-        const pm2Name = getPm2Name(config);
+        emit("provision", "started", "Creating agent configuration files...");
+        const { provisionAgent } = await import("./agent-provisioner-JIT6CRPU.js");
+        const provision = provisionAgent(config);
+        if (!provision.success) {
+          emit("provision", "failed", `Provisioning failed: ${provision.error}`);
+          return { success: false, events: [], error: provision.error };
+        }
+        emit("provision", "completed", `Agent files created: ${provision.envFile}, ${provision.wrapperScript}${provision.cliScript ? " (direct mode)" : " (npx mode)"}`);
         emit("install", "started", "Checking PM2 installation...");
         const pm2Status = await ensurePm2();
         if (!pm2Status.installed) {
-          emit("install", "failed", `PM2 installation failed: ${pm2Status.error}. Try manually: npm install -g pm2`);
+          emit("install", "failed", `PM2 not available: ${pm2Status.error}. Try: npm install -g pm2`);
           return { success: false, events: [], error: `PM2 not available: ${pm2Status.error}` };
         }
         emit("install", "completed", `PM2 v${pm2Status.version} ready`);
-        emit("provision", "started", `Checking PM2 process "${pm2Name}"...`);
-        const list = await this.execCommand(`pm2 jlist`);
+        const pm2Name = provision.pm2Name;
+        const list = await this.execCommand("pm2 jlist");
         let processExists = false;
         if (list.success) {
           try {
@@ -733,107 +703,38 @@ EOF`);
           } catch {
           }
         }
-        if (!processExists) {
-          emit("provision", "started", `Creating PM2 process "${pm2Name}"...`);
-          const eco = generateEcosystemConfig(config);
-          let startCmd;
-          if (eco.useNpx) {
-            const { writeFileSync: wfs, mkdirSync: mks, readFileSync: rfs } = await import("fs");
-            const amDir = resolve(homedir(), ".agenticmail");
-            try {
-              mks(amDir, { recursive: true });
-            } catch {
-            }
-            const slug = config.name.split(/\s+/)[0].toLowerCase().replace(/[^a-z0-9-]/g, "");
-            const agentEnvFile = resolve(amDir, `.env.${slug}`);
-            const agentEnvVars = [
-              `# Auto-generated for agent: ${config.displayName || config.name}`,
-              `AGENTICMAIL_AGENT_ID=${config.id}`,
-              `AGENTICMAIL_AGENT_NAME=${config.displayName || config.name}`,
-              `AGENTICMAIL_MODEL=${config.model?.provider || "anthropic"}/${config.model?.modelId || "claude-sonnet-4-20250514"}`,
-              `PORT=${config.deployment?.config?.local?.port || 3101}`
-            ];
-            if (config.model?.thinkingLevel) agentEnvVars.push(`AGENTICMAIL_THINKING=${config.model.thinkingLevel}`);
-            const mainEnvFile = resolve(amDir, ".env");
+        if (processExists) {
+          emit("start", "started", `Stopping existing "${pm2Name}"...`);
+          await this.execCommand(`pm2 delete ${pm2Name}`);
+        }
+        emit("start", "started", `Starting "${pm2Name}" via PM2...`);
+        const startResult = await this.execCommand(`pm2 start "${provision.wrapperScript}" --name ${pm2Name}`);
+        if (!startResult.success) {
+          emit("start", "failed", `PM2 start failed: ${startResult.message}`);
+          return { success: false, events: [], error: startResult.message };
+        }
+        await this.execCommand("pm2 save");
+        emit("start", "completed", `PM2 process "${pm2Name}" started`);
+        emit("healthcheck", "started", "Waiting for agent to come online...");
+        let healthy = false;
+        for (let attempt = 0; attempt < 3; attempt++) {
+          await new Promise((r) => setTimeout(r, 5e3));
+          const status = await this.execCommand("pm2 jlist");
+          if (status.success) {
             try {
-              const mainEnv = rfs(mainEnvFile, "utf8");
-              for (const key of ["DATABASE_URL", "JWT_SECRET", "AGENTICMAIL_VAULT_KEY", "ORG_ID", "ENTERPRISE_URL"]) {
-                const m = mainEnv.match(new RegExp(`^${key}=(.*)$`, "m"));
-                if (m) agentEnvVars.push(`${key}=${m[1]}`);
+              const procs = JSON.parse(status.message);
+              const proc = procs.find((p) => p.name === pm2Name);
+              if (proc?.pm2_env?.status === "online") {
+                healthy = true;
+                break;
+              }
+              if (proc?.pm2_env?.status === "errored" || proc?.pm2_env?.status === "stopped") {
+                const logs = await this.execCommand(`pm2 logs ${pm2Name} --nostream --lines 5`);
+                emit("healthcheck", "failed", `Process ${proc.pm2_env.status}: ${logs.message?.slice(0, 200) || "check pm2 logs"}`);
+                return { success: false, events: [], error: `Agent process ${proc.pm2_env.status}. Check: pm2 logs ${pm2Name}` };
               }
             } catch {
             }
-            wfs(agentEnvFile, agentEnvVars.join("\n") + "\n");
-            const wrapperPath = resolve(amDir, `agent-${slug}.cjs`);
-            const wrapperContent = [
-              `// Auto-generated agent wrapper \u2014 do not edit`,
-              `const { readFileSync } = require('fs');`,
-              `const { join } = require('path');`,
-              `try {`,
-              `  const envFile = ${JSON.stringify(agentEnvFile)};`,
-              `  const lines = readFileSync(envFile, 'utf8').split('\\n');`,
-              `  for (const line of lines) {`,
-              `    const m = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);`,
-              `    if (m) process.env[m[1]] = m[2];`,
-              `  }`,
-              `} catch(e) { console.error('Failed to load env:', e.message); }`,
-              `const { spawnSync } = require('child_process');`,
-              `const r = spawnSync('npx', ['@agenticmail/enterprise', '${eco.args}'], {`,
-              `  stdio: 'inherit', env: process.env, shell: process.platform === 'win32'`,
-              `});`,
-              `process.exit(r.status || 0);`
-            ].join("\n");
-            wfs(wrapperPath, wrapperContent);
-            emit("provision", "started", `Created agent env (${agentEnvFile}) and wrapper (${wrapperPath})`);
-            startCmd = ["pm2", "start", wrapperPath, "--name", pm2Name];
-          } else {
-            if (!existsSync(eco.script)) {
-              emit("provision", "failed", `Script not found: ${eco.script}. Run "npm run build" first.`);
-              return { success: false, events: [], error: `Script not found: ${eco.script}` };
-            }
-            const interpreterArgs = eco.envFile ? `--env-file=${eco.envFile}` : "";
-            startCmd = [
-              "pm2",
-              "start",
-              eco.script,
-              "--name",
-              pm2Name,
-              "--cwd",
-              eco.cwd,
-              "--",
-              eco.args
-            ];
-            if (interpreterArgs) {
-              startCmd.splice(2, 0, "--interpreter-args", `"${interpreterArgs}"`);
-            }
-          }
-          const createResult = await this.execCommand(startCmd.join(" "));
-          if (!createResult.success) {
-            emit("provision", "failed", `Failed to create PM2 process: ${createResult.message}`);
-            return { success: false, events: [], error: createResult.message };
-          }
-          await this.execCommand("pm2 save");
-          emit("provision", "completed", `PM2 process "${pm2Name}" created and saved`);
-        } else {
-          emit("provision", "completed", `PM2 process "${pm2Name}" found`);
-          emit("start", "started", `Restarting ${pm2Name}...`);
-          const result = await this.execCommand(`pm2 restart ${pm2Name}`);
-          if (!result.success) {
-            emit("start", "failed", `PM2 restart failed: ${result.message}`);
-            return { success: false, events: [], error: result.message };
-          }
-          emit("start", "completed", `${pm2Name} restarted`);
-        }
-        emit("healthcheck", "started", "Checking process health...");
-        await new Promise((r) => setTimeout(r, 3e3));
-        const status = await this.execCommand(`pm2 jlist`);
-        let healthy = false;
-        if (status.success) {
-          try {
-            const procs = JSON.parse(status.message);
-            const proc = procs.find((p) => p.name === pm2Name);
-            healthy = proc?.pm2_env?.status === "online";
-          } catch {
           }
         }
         if (healthy) {

package/dist/{chunk-H7W5YHOZ.js → chunk-5IRAWWEJ.js}

@@ -356,7 +356,7 @@ function createRuntimeHooks(deps) {
       var injectedMessages = [...messages];
       if (deps.knowledgeBaseEnabled !== false) {
         try {
-          var { knowledgeBase } = await import("./routes-FPNJY7MF.js");
+          var { knowledgeBase } = await import("./routes-OA6Y74YU.js");
           var kbs = await knowledgeBase.listForAgent(agentId);
           if (kbs.length > 0) {
             var contextParts = [];
@@ -389,7 +389,7 @@ ${contextParts.join("\n\n")}`;
       }
       if (deps.memoryEnabled !== false) {
         try {
-          var { memoryManager } = await import("./routes-FPNJY7MF.js");
+          var { memoryManager } = await import("./routes-OA6Y74YU.js");
           var memories = await memoryManager.queryMemories({
             agentId,
             limit: 10,
@@ -410,7 +410,7 @@ ${memories.map(function(m) {
       }
       if (deps.policyEnabled !== false) {
         try {
-          var { policyEngine } = await import("./routes-FPNJY7MF.js");
+          var { policyEngine } = await import("./routes-OA6Y74YU.js");
           var policies = await policyEngine.getAgentPolicies(agentId, deps.orgId);
           if (policies.length > 0) {
             var policyText = policies.map(function(p) {
@@ -435,7 +435,7 @@ ${policyText}`;
     // ─── Budget Check ──────────────────────────────
     async checkBudget(agentId, _orgId, _estimatedTokens) {
       try {
-        var { lifecycle } = await import("./routes-FPNJY7MF.js");
+        var { lifecycle } = await import("./routes-OA6Y74YU.js");
         var now = Date.now();
         var cacheKey = `budget_sync_${agentId}`;
         var lastSync = globalThis[cacheKey] || 0;
@@ -528,7 +528,7 @@ ${policyText}`;
     // ─── Record LLM Usage ──────────────────────────
     async recordLLMUsage(agentId, orgId, usage) {
       try {
-        var { lifecycle } = await import("./routes-FPNJY7MF.js");
+        var { lifecycle } = await import("./routes-OA6Y74YU.js");
         console.log(`[hooks] recordLLMUsage: agent=${agentId}, input=${usage.inputTokens}, output=${usage.outputTokens}`);
         await lifecycle.recordLLMUsage(agentId, {
           inputTokens: usage.inputTokens,
@@ -539,7 +539,7 @@ ${policyText}`;
         console.log(`[hooks] recordLLMUsage error: ${recordErr.message}`);
       }
       try {
-        var { activity } = await import("./routes-FPNJY7MF.js");
+        var { activity } = await import("./routes-OA6Y74YU.js");
         await activity.record({
           agentId,
           orgId,
@@ -587,7 +587,7 @@ ${policyText}`;
         var cacheKey = `${ctx.agentId}:${ctx.toolName}`;
         var cached = getCachedPermission(cacheKey);
         if (cached) return cached;
-        var { permissionEngine } = await import("./routes-FPNJY7MF.js");
+        var { permissionEngine } = await import("./routes-OA6Y74YU.js");
         var permResult = await permissionEngine.checkPermission(ctx.agentId, ctx.toolName);
         var result = {
           allowed: permResult.allowed,
@@ -596,7 +596,7 @@ ${policyText}`;
         };
         if (result.allowed && deps.guardrailsEnabled !== false) {
           try {
-            var { guardrails } = await import("./routes-FPNJY7MF.js");
+            var { guardrails } = await import("./routes-OA6Y74YU.js");
             var status = await guardrails.getStatus(ctx.agentId);
             if (status.paused || status.offDuty) {
               result.allowed = false;
@@ -608,7 +608,7 @@ ${policyText}`;
         }
         if (result.allowed && deps.dlpEnabled !== false && ctx.parameters) {
           try {
-            var { dlp } = await import("./routes-FPNJY7MF.js");
+            var { dlp } = await import("./routes-OA6Y74YU.js");
             var dlpResult = await dlp.scanParameters({
               orgId: ctx.orgId,
               agentId: ctx.agentId,
@@ -628,7 +628,7 @@ ${policyText}`;
         }
         if (result.requiresApproval && result.allowed) {
           try {
-            var { approvals } = await import("./routes-FPNJY7MF.js");
+            var { approvals } = await import("./routes-OA6Y74YU.js");
             var approval = await approvals.createAndWait({
               agentId: ctx.agentId,
               orgId: ctx.orgId,
@@ -658,7 +658,7 @@ ${policyText}`;
     // ─── After Tool Call ────────────────────────────
     async afterToolCall(ctx, result) {
       try {
-        var { activity } = await import("./routes-FPNJY7MF.js");
+        var { activity } = await import("./routes-OA6Y74YU.js");
         await activity.record({
           agentId: ctx.agentId,
           orgId: ctx.orgId,
@@ -675,7 +675,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { lifecycle } = await import("./routes-FPNJY7MF.js");
+        var { lifecycle } = await import("./routes-OA6Y74YU.js");
         await lifecycle.recordToolCall(ctx.agentId, {
           toolId: ctx.toolName,
           tokensUsed: 0,
@@ -687,7 +687,7 @@ ${policyText}`;
       }
       if (result.success && EXTERNAL_TOOLS.has(ctx.toolName)) {
         try {
-          var { journal } = await import("./routes-FPNJY7MF.js");
+          var { journal } = await import("./routes-OA6Y74YU.js");
           await journal.record({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -702,7 +702,7 @@ ${policyText}`;
       }
       if (result.success && COMMUNICATION_TOOLS.has(ctx.toolName)) {
         try {
-          var { commBus } = await import("./routes-FPNJY7MF.js");
+          var { commBus } = await import("./routes-OA6Y74YU.js");
           await commBus.observeMessage({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -716,7 +716,7 @@ ${policyText}`;
     // ─── Session Lifecycle ──────────────────────────
     async onSessionStart(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-FPNJY7MF.js");
+        var { activity } = await import("./routes-OA6Y74YU.js");
         await activity.record({
           agentId,
           orgId,
@@ -729,7 +729,7 @@ ${policyText}`;
     },
     async onSessionEnd(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-FPNJY7MF.js");
+        var { activity } = await import("./routes-OA6Y74YU.js");
         await activity.record({
           agentId,
           orgId,
@@ -743,7 +743,7 @@ ${policyText}`;
     // ─── Context Compaction ─────────────────────────
     async onContextCompaction(sessionId, agentId, summary) {
       try {
-        var { memoryManager } = await import("./routes-FPNJY7MF.js");
+        var { memoryManager } = await import("./routes-OA6Y74YU.js");
         await memoryManager.createMemory({
           agentId,
           orgId: deps.orgId,
@@ -2518,7 +2518,7 @@ async function runAgentLoop(config, initialMessages, hooks, options) {
           console.log(`[agent-loop] \u2705 Tool ${toolCall.name} succeeded (${content.length} chars): ${content.slice(0, 300)}`);
         }
         try {
-          const { activity } = await import("./routes-FPNJY7MF.js");
+          const { activity } = await import("./routes-OA6Y74YU.js");
           activity.recordToolCallCompact({
             agentId: config.agentId,
             orgId: config.orgId,
@@ -3385,7 +3385,7 @@ function createRequestToolsTool(allTools, activeSets, _context) {
   };
 }
 async function createToolsForContext(options, context, opts) {
-  const { createAllTools } = await import("./agent-tools-F3CYENMK.js");
+  const { createAllTools } = await import("./agent-tools-KPMEG6GA.js");
   if (context === "full") {
     return createAllTools(options);
   }

package/dist/{chunk-2L5UZUQ7.js → chunk-6IM6WMM7.js}

@@ -1,3 +1,7 @@
+import {
+  init_agent_tools,
+  init_types
+} from "./chunk-3UAFHUEC.js";
 import {
   init_messaging_history,
   storeMessage
@@ -24,10 +28,6 @@ import {
   init_connection_manager,
   init_query_sanitizer
 } from "./chunk-WYDVMFGJ.js";
-import {
-  init_agent_tools,
-  init_types
-} from "./chunk-3UAFHUEC.js";
 import {
   BUILTIN_SKILLS,
   PRESET_PROFILES,
@@ -40,7 +40,7 @@ import {
   DeploymentEngine,
   init_agent_config,
   init_deployer
-} from "./chunk-HMTXNZ5P.js";
+} from "./chunk-3IEMACO4.js";
 import {
   init_resilience,
   withRetry
@@ -6847,7 +6847,7 @@ function createAgentRoutes(opts) {
   });
   router.post("/system/install-pm2", async (c) => {
     try {
-      const { ensurePm2 } = await import("./deployer-UGWRNS6L.js");
+      const { ensurePm2 } = await import("./deployer-JJYWIRFH.js");
       const result = await ensurePm2();
       if (result.installed) {
         return c.json({ success: true, message: `PM2 ${result.version} installed successfully` });
@@ -7103,7 +7103,7 @@ function createAgentRoutes(opts) {
       }
       const managedAgent = await lifecycle2.createAgent(orgId, config, actor);
       try {
-        const { knowledgeBase: kbEngine } = await import("./routes-FPNJY7MF.js");
+        const { knowledgeBase: kbEngine } = await import("./routes-OA6Y74YU.js");
         const allKbs = kbEngine.getAllKnowledgeBases();
         const clientOrgId = managedAgent?.clientOrgId || config?.clientOrgId || null;
         let kbAssigned = 0;

package/dist/{chunk-PZK2IOQ3.js → chunk-VQHMGRGD.js}

@@ -1234,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-47UUSAA6.js");
+    const { createServer: createServer2 } = await import("./server-Y7MTUIBX.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1535,7 +1535,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-47UUSAA6.js");
+  const { createServer } = await import("./server-Y7MTUIBX.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{chunk-LXIMVAED.js → chunk-XI6E3OBF.js}

@@ -11,7 +11,7 @@ import {
   init_config_bus,
   init_routes,
   routes_exports
-} from "./chunk-2L5UZUQ7.js";
+} from "./chunk-6IM6WMM7.js";
 import {
   CircuitBreaker,
   HealthMonitor,
@@ -4661,7 +4661,7 @@ function createServer(config) {
   let engineInitialized = false;
   api.all("/engine/*", async (c, _next) => {
     try {
-      const { engineRoutes, setEngineDb } = await import("./routes-FPNJY7MF.js");
+      const { engineRoutes, setEngineDb } = await import("./routes-OA6Y74YU.js");
       const { EngineDatabase } = await import("./db-adapter-2T56ORSD.js");
       if (!engineInitialized) {
         engineInitialized = true;
@@ -4691,13 +4691,13 @@ function createServer(config) {
         engineInitialized = true;
         if (config.runtime?.enabled) {
           try {
-            const { createAgentRuntime } = await import("./runtime-3AT5XRJJ.js");
-            const { mountRuntimeApp, setRuntime } = await import("./routes-FPNJY7MF.js");
+            const { createAgentRuntime } = await import("./runtime-ONDAF63W.js");
+            const { mountRuntimeApp, setRuntime } = await import("./routes-OA6Y74YU.js");
             let getEmailConfig;
             let onTokenRefresh;
             let agentMemoryMgr;
             try {
-              const { lifecycle: lc, memoryManager: mm } = await import("./routes-FPNJY7MF.js");
+              const { lifecycle: lc, memoryManager: mm } = await import("./routes-OA6Y74YU.js");
               agentMemoryMgr = mm;
               if (lc) {
                 getEmailConfig = (agentId) => {
@@ -4736,7 +4736,7 @@ function createServer(config) {
               }
             } catch {
             }
-            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-FPNJY7MF.js");
+            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-OA6Y74YU.js");
             const runtime = createAgentRuntime({
               engineDb,
               adminDb: config.db,
@@ -4936,7 +4936,7 @@ function createServer(config) {
             });
             (async () => {
               try {
-                const { engineRoutes, setEngineDb } = await import("./routes-FPNJY7MF.js");
+                const { engineRoutes, setEngineDb } = await import("./routes-OA6Y74YU.js");
                 const { EngineDatabase } = await import("./db-adapter-2T56ORSD.js");
                 if (!engineInitialized) {
                   engineInitialized = true;
@@ -4960,13 +4960,13 @@ function createServer(config) {
                     await setEngineDb(engineDb, config.db);
                     if (config.runtime?.enabled) {
                       try {
-                        const { createAgentRuntime } = await import("./runtime-3AT5XRJJ.js");
-                        const { mountRuntimeApp, setRuntime } = await import("./routes-FPNJY7MF.js");
+                        const { createAgentRuntime } = await import("./runtime-ONDAF63W.js");
+                        const { mountRuntimeApp, setRuntime } = await import("./routes-OA6Y74YU.js");
                         let getEmailConfig;
                         let onTokenRefresh;
                         let agentMemoryMgr;
                         try {
-                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-FPNJY7MF.js");
+                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-OA6Y74YU.js");
                           agentMemoryMgr = mm;
                           if (lc) {
                             getEmailConfig = (agentId) => {
@@ -5005,7 +5005,7 @@ function createServer(config) {
                           }
                         } catch {
                         }
-                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-FPNJY7MF.js");
+                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-OA6Y74YU.js");
                         const runtime = createAgentRuntime({
                           engineDb,
                           adminDb: config.db,
@@ -5017,7 +5017,7 @@ function createServer(config) {
                           agentMemoryManager: agentMemoryMgr,
                           vault: vaultRef2,
                           permissionEngine: permRef2,
-                          hierarchyManager: (await import("./routes-FPNJY7MF.js")).hierarchyManager ?? void 0,
+                          hierarchyManager: (await import("./routes-OA6Y74YU.js")).hierarchyManager ?? void 0,
                           databaseManager: dbMgr2
                         });
                         await runtime.start();
@@ -5031,7 +5031,7 @@ function createServer(config) {
                     }
                     console.log("[engine] Eagerly initialized");
                     try {
-                      const { lifecycle: lcRef } = await import("./routes-FPNJY7MF.js");
+                      const { lifecycle: lcRef } = await import("./routes-OA6Y74YU.js");
                       if (lcRef) {
                         const agents = Array.from(lcRef.agents?.values?.() || []);
                         const hasLocalPm2 = agents.some((a) => {
@@ -5040,7 +5040,7 @@ function createServer(config) {
                           return target === "local" && (!pm || pm === "pm2");
                         });
                         if (hasLocalPm2) {
-                          const { ensurePm2 } = await import("./deployer-UGWRNS6L.js");
+                          const { ensurePm2 } = await import("./deployer-JJYWIRFH.js");
                           const pm2 = await ensurePm2();
                           if (pm2.installed) {
                             console.log(`[startup] PM2 v${pm2.version} available for local deployments`);

package/dist/{cli-agent-CQDER7ML.js → cli-agent-AEG2ZSKO.js}

@@ -762,7 +762,7 @@ async function runAgent(_args) {
   const agent = agentRow[0];
   console.log(`   Agent: ${agent.display_name || agent.name}`);
   console.log(`   State: ${agent.state}`);
-  const routes = await import("./routes-FPNJY7MF.js");
+  const routes = await import("./routes-OA6Y74YU.js");
   await routes.lifecycle.setDb(engineDb);
   await routes.lifecycle.loadFromDb();
   routes.lifecycle.standaloneMode = true;
@@ -820,10 +820,10 @@ async function runAgent(_args) {
     }
   } catch {
   }
-  const { createAgentRuntime } = await import("./runtime-3AT5XRJJ.js");
+  const { createAgentRuntime } = await import("./runtime-ONDAF63W.js");
   let orgIntMgr = null;
   try {
-    const { orgIntegrations: oi } = await import("./routes-FPNJY7MF.js");
+    const { orgIntegrations: oi } = await import("./routes-OA6Y74YU.js");
     orgIntMgr = oi;
   } catch {
   }
@@ -1222,7 +1222,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "permissions") {
         try {
-          const { permissionEngine } = await import("./routes-FPNJY7MF.js");
+          const { permissionEngine } = await import("./routes-OA6Y74YU.js");
           await permissionEngine.setDb(engineDb);
           reloaded.push("permissions");
         } catch {
@@ -1262,7 +1262,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "guardrails") {
         try {
-          const { guardrails } = await import("./routes-FPNJY7MF.js");
+          const { guardrails } = await import("./routes-OA6Y74YU.js");
           await guardrails.loadFromDb?.();
           reloaded.push("guardrails");
         } catch {
@@ -2190,7 +2190,7 @@ Available tools: gmail_send (to, subject, body) or agenticmail_send (to, subject
       console.log("[guardrails] Disabled via autonomy settings");
     }
     try {
-      const { AgentHeartbeatManager } = await import("./agent-heartbeat-YTW5OANI.js");
+      const { AgentHeartbeatManager } = await import("./agent-heartbeat-DOMJAVCK.js");
       const hbOrgRows = await engineDb.query(`SELECT org_id FROM managed_agents WHERE id = $1`, [AGENT_ID]);
       const hbOrgId = hbOrgRows?.[0]?.org_id || "";
       const hbManagerEmail = config.managerEmail || (config.manager?.type === "external" ? config.manager.email : null);

package/dist/{cli-serve-BR5PXNTL.js → cli-serve-RNQ3N477.js}

@@ -94,7 +94,7 @@ async function runServe(_args) {
     process.exit(1);
   }
   const { createAdapter, smartDbConfig } = await import("./factory-RTZU2K54.js");
-  const { createServer } = await import("./server-47UUSAA6.js");
+  const { createServer } = await import("./server-Y7MTUIBX.js");
   const db = await createAdapter(smartDbConfig(DATABASE_URL));
   await db.migrate();
   const server = createServer({

package/dist/cli.js

@@ -57,14 +57,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-BR5PXNTL.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-RNQ3N477.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
-    import("./cli-agent-CQDER7ML.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
+    import("./cli-agent-AEG2ZSKO.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-YIVQCWWM.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-PLIKKNBE.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/{deployer-UGWRNS6L.js → deployer-JJYWIRFH.js}

@@ -2,7 +2,7 @@ import {
   DeploymentEngine,
   ensurePm2,
   init_deployer
-} from "./chunk-HMTXNZ5P.js";
+} from "./chunk-3IEMACO4.js";
 import "./chunk-KFQGP6VL.js";
 init_deployer();
 export {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-PZK2IOQ3.js";
+} from "./chunk-VQHMGRGD.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -28,7 +28,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-H7W5YHOZ.js";
+} from "./chunk-5IRAWWEJ.js";
 import {
   ValidationError,
   auditLogger,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-LXIMVAED.js";
+} from "./chunk-XI6E3OBF.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,
@@ -82,7 +82,8 @@ import {
   init_storage_manager,
   init_tenant,
   init_workforce
-} from "./chunk-2L5UZUQ7.js";
+} from "./chunk-6IM6WMM7.js";
+import "./chunk-3UAFHUEC.js";
 import {
   ENGINE_TABLES,
   ENGINE_TABLES_POSTGRES,
@@ -103,7 +104,6 @@ import "./chunk-74ZCQKYU.js";
 import "./chunk-Z6K5FKAB.js";
 import "./chunk-C6JP5NR6.js";
 import "./chunk-WYDVMFGJ.js";
-import "./chunk-3UAFHUEC.js";
 import {
   BUILTIN_SKILLS,
   PRESET_PROFILES,
@@ -115,7 +115,7 @@ import {
   DeploymentEngine,
   init_agent_config,
   init_deployer
-} from "./chunk-HMTXNZ5P.js";
+} from "./chunk-3IEMACO4.js";
 import {
   CircuitBreaker,
   CircuitOpenError,

package/dist/{routes-FPNJY7MF.js → routes-OA6Y74YU.js}

@@ -35,7 +35,8 @@ import {
   tenants,
   vault,
   workforce
-} from "./chunk-2L5UZUQ7.js";
+} from "./chunk-6IM6WMM7.js";
+import "./chunk-3UAFHUEC.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
 import "./chunk-AF3WSNVX.js";
@@ -43,9 +44,8 @@ import "./chunk-74ZCQKYU.js";
 import "./chunk-Z6K5FKAB.js";
 import "./chunk-C6JP5NR6.js";
 import "./chunk-WYDVMFGJ.js";
-import "./chunk-3UAFHUEC.js";
 import "./chunk-NOAQG5CY.js";
-import "./chunk-HMTXNZ5P.js";
+import "./chunk-3IEMACO4.js";
 import "./chunk-YDD5TC5Q.js";
 import "./chunk-FLQ5FLHW.js";
 import "./chunk-WUAWWKTN.js";

package/dist/{runtime-3AT5XRJJ.js → runtime-ONDAF63W.js}

@@ -14,7 +14,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-H7W5YHOZ.js";
+} from "./chunk-5IRAWWEJ.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,

package/dist/{server-47UUSAA6.js → server-Y7MTUIBX.js}

@@ -1,9 +1,10 @@
 import {
   createServer
-} from "./chunk-LXIMVAED.js";
+} from "./chunk-XI6E3OBF.js";
 import "./chunk-DJBCRQTD.js";
 import "./chunk-UF3ZJMJO.js";
-import "./chunk-2L5UZUQ7.js";
+import "./chunk-6IM6WMM7.js";
+import "./chunk-3UAFHUEC.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
 import "./chunk-AF3WSNVX.js";
@@ -11,9 +12,8 @@ import "./chunk-74ZCQKYU.js";
 import "./chunk-Z6K5FKAB.js";
 import "./chunk-C6JP5NR6.js";
 import "./chunk-WYDVMFGJ.js";
-import "./chunk-3UAFHUEC.js";
 import "./chunk-NOAQG5CY.js";
-import "./chunk-HMTXNZ5P.js";
+import "./chunk-3IEMACO4.js";
 import "./chunk-YDD5TC5Q.js";
 import "./chunk-37ABTUFU.js";
 import "./chunk-NU657BBQ.js";

package/dist/{setup-YIVQCWWM.js → setup-PLIKKNBE.js}

@@ -6,7 +6,7 @@ import {
   promptRegistration,
   provision,
   runSetupWizard
-} from "./chunk-PZK2IOQ3.js";
+} from "./chunk-VQHMGRGD.js";
 import "./chunk-Z3I6GNTS.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/logs/cloudflared-error.log

@@ -137,3 +137,7 @@
 2026-03-05 18:05:38: 2026-03-05T17:05:38Z ERR  error="stream 9 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
 2026-03-05 18:05:38: 2026-03-05T17:05:38Z ERR Request failed error="stream 5 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.192.107 type=http
 2026-03-05 18:05:38: 2026-03-05T17:05:38Z ERR Request failed error="stream 9 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.192.107 type=http
+2026-03-05 19:22:34: 2026-03-05T18:22:34Z ERR  error="stream 365 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:22:34: 2026-03-05T18:22:34Z ERR Request failed error="stream 365 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream event=0 ip=198.41.192.107 type=http
+2026-03-05 19:23:02: 2026-03-05T18:23:02Z ERR  error="stream 357 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:23:02: 2026-03-05T18:23:02Z ERR Request failed error="stream 357 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/cluster/stream event=0 ip=198.41.192.107 type=http

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.351",
+  "version": "0.5.353",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/dist/{agent-tools-F3CYENMK.js → agent-tools-KPMEG6GA.js}

@@ -19,6 +19,12 @@ import {
   wrapExternalContent,
   wrapWebContent
 } from "./chunk-ZB3VC2MR.js";
+import {
+  detectCapabilities,
+  getCapabilitySummary,
+  init_environment,
+  resetCapabilitiesCache
+} from "./chunk-KQWP5AE7.js";
 import {
   createTelegramTools,
   init_telegram
@@ -27,12 +33,6 @@ import {
   createWhatsAppTools,
   init_whatsapp
 } from "./chunk-P7UOSFIE.js";
-import {
-  detectCapabilities,
-  getCapabilitySummary,
-  init_environment,
-  resetCapabilitiesCache
-} from "./chunk-KQWP5AE7.js";
 import {
   MemorySearchIndex,
   init_text_search