@agenticmail/enterprise 0.5.355 → 0.5.357

package/dist/{agent-heartbeat-ZCVMYFMO.js → agent-heartbeat-VAQTRYST.js}

@@ -466,7 +466,7 @@ var AgentHeartbeatManager = class {
       return;
     }
     try {
-      const { guardrails } = await import("./routes-S43BQMDK.js");
+      const { guardrails } = await import("./routes-L5POMDQZ.js");
       const status = await guardrails.getStatus(ctx.agentId);
       if (status.paused || status.offDuty) {
         console.log(`[heartbeat] Skipping action dispatch \u2014 agent is ${status.offDuty ? "off duty" : "paused"}`);

package/dist/{agent-provisioner-JIT6CRPU.js → agent-provisioner-5KANSYPK.js}

@@ -83,6 +83,11 @@ function provisionAgent(config) {
     const m = mainEnvContent.match(new RegExp(`^${key}=(.+)$`, "m"));
     if (m) envLines.push(`${key}=${m[1]}`);
   }
+  if (!envLines.some((l) => l.startsWith("ENTERPRISE_URL="))) {
+    const portMatch = mainEnvContent.match(/^PORT=(\d+)$/m);
+    const serverPort = portMatch ? portMatch[1] : process.env.PORT || "8080";
+    envLines.push(`ENTERPRISE_URL=http://localhost:${serverPort}`);
+  }
   try {
     writeFileSync(envFile, envLines.join("\n") + "\n");
   } catch (e) {

package/dist/{agent-tools-LOVO4CLJ.js → agent-tools-2F6FYYXG.js}

@@ -13752,7 +13752,7 @@ async function createAllTools(options) {
   var smtpEmailTools = [];
   if (options?.emailConfig?.smtpHost && !tp) {
     try {
-      var { executeSmtpEmailTool, getSmtpEmailTools: getSmtpIds } = await import("./smtp-email-WGUG4M45.js");
+      var { executeSmtpEmailTool, getSmtpEmailTools: getSmtpIds } = await import("./smtp-email-UZ53LCJ7.js");
       var smtpToolIds = getSmtpIds();
       var smtpToolDefs = {
         email_send: { desc: "Send an email via SMTP", params: { type: "object", properties: { to: { type: "string", description: "Recipient email" }, cc: { type: "string" }, bcc: { type: "string" }, subject: { type: "string" }, body: { type: "string", description: "Email body text" }, html: { type: "string" }, replyTo: { type: "string" } }, required: ["to", "body"] } },

package/dist/{chunk-3IEMACO4.js → chunk-FT5MAYTU.js}

@@ -679,7 +679,7 @@ EOF`);
        */
       async deployLocal(config, emit) {
         emit("provision", "started", "Creating agent configuration files...");
-        const { provisionAgent } = await import("./agent-provisioner-JIT6CRPU.js");
+        const { provisionAgent } = await import("./agent-provisioner-5KANSYPK.js");
         const provision = provisionAgent(config);
         if (!provision.success) {
           emit("provision", "failed", `Provisioning failed: ${provision.error}`);

package/dist/{chunk-WECNT5FR.js → chunk-G4EXGQSK.js}

@@ -1234,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-5URLZCXN.js");
+    const { createServer: createServer2 } = await import("./server-JVQIW7QZ.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1535,7 +1535,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-5URLZCXN.js");
+  const { createServer } = await import("./server-JVQIW7QZ.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{chunk-PPGBBASR.js → chunk-GIWIAVLJ.js}

@@ -356,7 +356,7 @@ function createRuntimeHooks(deps) {
       var injectedMessages = [...messages];
       if (deps.knowledgeBaseEnabled !== false) {
         try {
-          var { knowledgeBase } = await import("./routes-S43BQMDK.js");
+          var { knowledgeBase } = await import("./routes-L5POMDQZ.js");
           var kbs = await knowledgeBase.listForAgent(agentId);
           if (kbs.length > 0) {
             var contextParts = [];
@@ -389,7 +389,7 @@ ${contextParts.join("\n\n")}`;
       }
       if (deps.memoryEnabled !== false) {
         try {
-          var { memoryManager } = await import("./routes-S43BQMDK.js");
+          var { memoryManager } = await import("./routes-L5POMDQZ.js");
           var memories = await memoryManager.queryMemories({
             agentId,
             limit: 10,
@@ -410,7 +410,7 @@ ${memories.map(function(m) {
       }
       if (deps.policyEnabled !== false) {
         try {
-          var { policyEngine } = await import("./routes-S43BQMDK.js");
+          var { policyEngine } = await import("./routes-L5POMDQZ.js");
           var policies = await policyEngine.getAgentPolicies(agentId, deps.orgId);
           if (policies.length > 0) {
             var policyText = policies.map(function(p) {
@@ -435,7 +435,7 @@ ${policyText}`;
     // ─── Budget Check ──────────────────────────────
     async checkBudget(agentId, _orgId, _estimatedTokens) {
       try {
-        var { lifecycle } = await import("./routes-S43BQMDK.js");
+        var { lifecycle } = await import("./routes-L5POMDQZ.js");
         var now = Date.now();
         var cacheKey = `budget_sync_${agentId}`;
         var lastSync = globalThis[cacheKey] || 0;
@@ -528,7 +528,7 @@ ${policyText}`;
     // ─── Record LLM Usage ──────────────────────────
     async recordLLMUsage(agentId, orgId, usage) {
       try {
-        var { lifecycle } = await import("./routes-S43BQMDK.js");
+        var { lifecycle } = await import("./routes-L5POMDQZ.js");
         console.log(`[hooks] recordLLMUsage: agent=${agentId}, input=${usage.inputTokens}, output=${usage.outputTokens}`);
         await lifecycle.recordLLMUsage(agentId, {
           inputTokens: usage.inputTokens,
@@ -539,7 +539,7 @@ ${policyText}`;
         console.log(`[hooks] recordLLMUsage error: ${recordErr.message}`);
       }
       try {
-        var { activity } = await import("./routes-S43BQMDK.js");
+        var { activity } = await import("./routes-L5POMDQZ.js");
         await activity.record({
           agentId,
           orgId,
@@ -587,7 +587,7 @@ ${policyText}`;
         var cacheKey = `${ctx.agentId}:${ctx.toolName}`;
         var cached = getCachedPermission(cacheKey);
         if (cached) return cached;
-        var { permissionEngine } = await import("./routes-S43BQMDK.js");
+        var { permissionEngine } = await import("./routes-L5POMDQZ.js");
         var permResult = await permissionEngine.checkPermission(ctx.agentId, ctx.toolName);
         var result = {
           allowed: permResult.allowed,
@@ -596,7 +596,7 @@ ${policyText}`;
         };
         if (result.allowed && deps.guardrailsEnabled !== false) {
           try {
-            var { guardrails } = await import("./routes-S43BQMDK.js");
+            var { guardrails } = await import("./routes-L5POMDQZ.js");
             var status = await guardrails.getStatus(ctx.agentId);
             if (status.paused || status.offDuty) {
               result.allowed = false;
@@ -608,7 +608,7 @@ ${policyText}`;
         }
         if (result.allowed && deps.dlpEnabled !== false && ctx.parameters) {
           try {
-            var { dlp } = await import("./routes-S43BQMDK.js");
+            var { dlp } = await import("./routes-L5POMDQZ.js");
             var dlpResult = await dlp.scanParameters({
               orgId: ctx.orgId,
               agentId: ctx.agentId,
@@ -628,7 +628,7 @@ ${policyText}`;
         }
         if (result.requiresApproval && result.allowed) {
           try {
-            var { approvals } = await import("./routes-S43BQMDK.js");
+            var { approvals } = await import("./routes-L5POMDQZ.js");
             var approval = await approvals.createAndWait({
               agentId: ctx.agentId,
               orgId: ctx.orgId,
@@ -658,7 +658,7 @@ ${policyText}`;
     // ─── After Tool Call ────────────────────────────
     async afterToolCall(ctx, result) {
       try {
-        var { activity } = await import("./routes-S43BQMDK.js");
+        var { activity } = await import("./routes-L5POMDQZ.js");
         await activity.record({
           agentId: ctx.agentId,
           orgId: ctx.orgId,
@@ -675,7 +675,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { lifecycle } = await import("./routes-S43BQMDK.js");
+        var { lifecycle } = await import("./routes-L5POMDQZ.js");
         await lifecycle.recordToolCall(ctx.agentId, {
           toolId: ctx.toolName,
           tokensUsed: 0,
@@ -687,7 +687,7 @@ ${policyText}`;
       }
       if (result.success && EXTERNAL_TOOLS.has(ctx.toolName)) {
         try {
-          var { journal } = await import("./routes-S43BQMDK.js");
+          var { journal } = await import("./routes-L5POMDQZ.js");
           await journal.record({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -702,7 +702,7 @@ ${policyText}`;
       }
       if (result.success && COMMUNICATION_TOOLS.has(ctx.toolName)) {
         try {
-          var { commBus } = await import("./routes-S43BQMDK.js");
+          var { commBus } = await import("./routes-L5POMDQZ.js");
           await commBus.observeMessage({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -716,7 +716,7 @@ ${policyText}`;
     // ─── Session Lifecycle ──────────────────────────
     async onSessionStart(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-S43BQMDK.js");
+        var { activity } = await import("./routes-L5POMDQZ.js");
         await activity.record({
           agentId,
           orgId,
@@ -729,7 +729,7 @@ ${policyText}`;
     },
     async onSessionEnd(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-S43BQMDK.js");
+        var { activity } = await import("./routes-L5POMDQZ.js");
         await activity.record({
           agentId,
           orgId,
@@ -743,7 +743,7 @@ ${policyText}`;
     // ─── Context Compaction ─────────────────────────
     async onContextCompaction(sessionId, agentId, summary) {
       try {
-        var { memoryManager } = await import("./routes-S43BQMDK.js");
+        var { memoryManager } = await import("./routes-L5POMDQZ.js");
         await memoryManager.createMemory({
           agentId,
           orgId: deps.orgId,
@@ -2518,7 +2518,7 @@ async function runAgentLoop(config, initialMessages, hooks, options) {
           console.log(`[agent-loop] \u2705 Tool ${toolCall.name} succeeded (${content.length} chars): ${content.slice(0, 300)}`);
         }
         try {
-          const { activity } = await import("./routes-S43BQMDK.js");
+          const { activity } = await import("./routes-L5POMDQZ.js");
           activity.recordToolCallCompact({
             agentId: config.agentId,
             orgId: config.orgId,
@@ -3385,7 +3385,7 @@ function createRequestToolsTool(allTools, activeSets, _context) {
   };
 }
 async function createToolsForContext(options, context, opts) {
-  const { createAllTools } = await import("./agent-tools-LOVO4CLJ.js");
+  const { createAllTools } = await import("./agent-tools-2F6FYYXG.js");
   if (context === "full") {
     return createAllTools(options);
   }

package/dist/{chunk-RCCWFEZI.js → chunk-J7DJJVGJ.js}

@@ -40,7 +40,7 @@ import {
   DeploymentEngine,
   init_agent_config,
   init_deployer
-} from "./chunk-3IEMACO4.js";
+} from "./chunk-FT5MAYTU.js";
 import {
   init_resilience,
   withRetry
@@ -790,7 +790,7 @@ var init_lifecycle = __esm({
       async deploy(agentId, deployedBy) {
         const agent = this.getAgent(agentId);
         if (!agent) throw new Error(`Agent ${agentId} not found`);
-        if (!["ready", "stopped", "error", "degraded", "draft"].includes(agent.state)) {
+        if (!["ready", "stopped", "error", "degraded", "draft", "provisioning", "deploying", "starting"].includes(agent.state)) {
           throw new Error(`Cannot deploy from state "${agent.state}"`);
         }
         if (!this.isConfigComplete(agent.config)) {
@@ -6847,7 +6847,7 @@ function createAgentRoutes(opts) {
   });
   router.post("/system/install-pm2", async (c) => {
     try {
-      const { ensurePm2 } = await import("./deployer-JJYWIRFH.js");
+      const { ensurePm2 } = await import("./deployer-HN7HPTZU.js");
       const result = await ensurePm2();
       if (result.installed) {
         return c.json({ success: true, message: `PM2 ${result.version} installed successfully` });
@@ -7103,7 +7103,7 @@ function createAgentRoutes(opts) {
       }
       const managedAgent = await lifecycle2.createAgent(orgId, config, actor);
       try {
-        const { knowledgeBase: kbEngine } = await import("./routes-S43BQMDK.js");
+        const { knowledgeBase: kbEngine } = await import("./routes-L5POMDQZ.js");
         const allKbs = kbEngine.getAllKnowledgeBases();
         const clientOrgId = managedAgent?.clientOrgId || config?.clientOrgId || null;
         let kbAssigned = 0;
@@ -25364,7 +25364,17 @@ var init_routes3 = __esm({
     engine.post("/agent-status/:agentId", async (c) => {
       try {
         const body = await c.req.json();
-        agentStatus.externalUpdate(c.req.param("agentId"), body);
+        const agentId = c.req.param("agentId");
+        agentStatus.externalUpdate(agentId, body);
+        if (body.status === "online" || body.status === "idle") {
+          const agent = lifecycle.getAgent(agentId);
+          if (agent && agent.state !== "running" && agent.state !== "active") {
+            agent.state = "running";
+            agent.stateMessage = "Agent online (heartbeat)";
+            lifecycle.saveAgent(agentId).catch(() => {
+            });
+          }
+        }
         return c.json({ ok: true });
       } catch (err) {
         return c.json({ error: err.message }, 400);

package/dist/{chunk-3VZOFEQF.js → chunk-KMOGPT4O.js}

@@ -11,7 +11,7 @@ import {
   init_config_bus,
   init_routes,
   routes_exports
-} from "./chunk-RCCWFEZI.js";
+} from "./chunk-J7DJJVGJ.js";
 import {
   CircuitBreaker,
   HealthMonitor,
@@ -4661,7 +4661,7 @@ function createServer(config) {
   let engineInitialized = false;
   api.all("/engine/*", async (c, _next) => {
     try {
-      const { engineRoutes, setEngineDb } = await import("./routes-S43BQMDK.js");
+      const { engineRoutes, setEngineDb } = await import("./routes-L5POMDQZ.js");
       const { EngineDatabase } = await import("./db-adapter-2T56ORSD.js");
       if (!engineInitialized) {
         engineInitialized = true;
@@ -4691,13 +4691,13 @@ function createServer(config) {
         engineInitialized = true;
         if (config.runtime?.enabled) {
           try {
-            const { createAgentRuntime } = await import("./runtime-3GLGCAGF.js");
-            const { mountRuntimeApp, setRuntime } = await import("./routes-S43BQMDK.js");
+            const { createAgentRuntime } = await import("./runtime-PMERZPPG.js");
+            const { mountRuntimeApp, setRuntime } = await import("./routes-L5POMDQZ.js");
             let getEmailConfig;
             let onTokenRefresh;
             let agentMemoryMgr;
             try {
-              const { lifecycle: lc, memoryManager: mm } = await import("./routes-S43BQMDK.js");
+              const { lifecycle: lc, memoryManager: mm } = await import("./routes-L5POMDQZ.js");
               agentMemoryMgr = mm;
               if (lc) {
                 getEmailConfig = (agentId) => {
@@ -4736,7 +4736,7 @@ function createServer(config) {
               }
             } catch {
             }
-            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-S43BQMDK.js");
+            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-L5POMDQZ.js");
             const runtime = createAgentRuntime({
               engineDb,
               adminDb: config.db,
@@ -4936,7 +4936,7 @@ function createServer(config) {
             });
             (async () => {
               try {
-                const { engineRoutes, setEngineDb } = await import("./routes-S43BQMDK.js");
+                const { engineRoutes, setEngineDb } = await import("./routes-L5POMDQZ.js");
                 const { EngineDatabase } = await import("./db-adapter-2T56ORSD.js");
                 if (!engineInitialized) {
                   engineInitialized = true;
@@ -4960,13 +4960,13 @@ function createServer(config) {
                     await setEngineDb(engineDb, config.db);
                     if (config.runtime?.enabled) {
                       try {
-                        const { createAgentRuntime } = await import("./runtime-3GLGCAGF.js");
-                        const { mountRuntimeApp, setRuntime } = await import("./routes-S43BQMDK.js");
+                        const { createAgentRuntime } = await import("./runtime-PMERZPPG.js");
+                        const { mountRuntimeApp, setRuntime } = await import("./routes-L5POMDQZ.js");
                         let getEmailConfig;
                         let onTokenRefresh;
                         let agentMemoryMgr;
                         try {
-                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-S43BQMDK.js");
+                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-L5POMDQZ.js");
                           agentMemoryMgr = mm;
                           if (lc) {
                             getEmailConfig = (agentId) => {
@@ -5005,7 +5005,7 @@ function createServer(config) {
                           }
                         } catch {
                         }
-                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-S43BQMDK.js");
+                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-L5POMDQZ.js");
                         const runtime = createAgentRuntime({
                           engineDb,
                           adminDb: config.db,
@@ -5017,7 +5017,7 @@ function createServer(config) {
                           agentMemoryManager: agentMemoryMgr,
                           vault: vaultRef2,
                           permissionEngine: permRef2,
-                          hierarchyManager: (await import("./routes-S43BQMDK.js")).hierarchyManager ?? void 0,
+                          hierarchyManager: (await import("./routes-L5POMDQZ.js")).hierarchyManager ?? void 0,
                           databaseManager: dbMgr2
                         });
                         await runtime.start();
@@ -5031,7 +5031,7 @@ function createServer(config) {
                     }
                     console.log("[engine] Eagerly initialized");
                     try {
-                      const { lifecycle: lcRef } = await import("./routes-S43BQMDK.js");
+                      const { lifecycle: lcRef } = await import("./routes-L5POMDQZ.js");
                       if (lcRef) {
                         const agents = Array.from(lcRef.agents?.values?.() || []);
                         const hasLocalPm2 = agents.some((a) => {
@@ -5040,7 +5040,7 @@ function createServer(config) {
                           return target === "local" && (!pm || pm === "pm2");
                         });
                         if (hasLocalPm2) {
-                          const { ensurePm2 } = await import("./deployer-JJYWIRFH.js");
+                          const { ensurePm2 } = await import("./deployer-HN7HPTZU.js");
                           const pm2 = await ensurePm2();
                           if (pm2.installed) {
                             console.log(`[startup] PM2 v${pm2.version} available for local deployments`);

package/dist/{cli-agent-SPDASSB7.js → cli-agent-7HSS5FUE.js}

@@ -762,7 +762,7 @@ async function runAgent(_args) {
   const agent = agentRow[0];
   console.log(`   Agent: ${agent.display_name || agent.name}`);
   console.log(`   State: ${agent.state}`);
-  const routes = await import("./routes-S43BQMDK.js");
+  const routes = await import("./routes-L5POMDQZ.js");
   await routes.lifecycle.setDb(engineDb);
   await routes.lifecycle.loadFromDb();
   routes.lifecycle.standaloneMode = true;
@@ -820,10 +820,10 @@ async function runAgent(_args) {
     }
   } catch {
   }
-  const { createAgentRuntime } = await import("./runtime-3GLGCAGF.js");
+  const { createAgentRuntime } = await import("./runtime-PMERZPPG.js");
   let orgIntMgr = null;
   try {
-    const { orgIntegrations: oi } = await import("./routes-S43BQMDK.js");
+    const { orgIntegrations: oi } = await import("./routes-L5POMDQZ.js");
     orgIntMgr = oi;
   } catch {
   }
@@ -1222,7 +1222,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "permissions") {
         try {
-          const { permissionEngine } = await import("./routes-S43BQMDK.js");
+          const { permissionEngine } = await import("./routes-L5POMDQZ.js");
           await permissionEngine.setDb(engineDb);
           reloaded.push("permissions");
         } catch {
@@ -1262,7 +1262,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "guardrails") {
         try {
-          const { guardrails } = await import("./routes-S43BQMDK.js");
+          const { guardrails } = await import("./routes-L5POMDQZ.js");
           await guardrails.loadFromDb?.();
           reloaded.push("guardrails");
         } catch {
@@ -2190,7 +2190,7 @@ Available tools: gmail_send (to, subject, body) or agenticmail_send (to, subject
       console.log("[guardrails] Disabled via autonomy settings");
     }
     try {
-      const { AgentHeartbeatManager } = await import("./agent-heartbeat-ZCVMYFMO.js");
+      const { AgentHeartbeatManager } = await import("./agent-heartbeat-VAQTRYST.js");
       const hbOrgRows = await engineDb.query(`SELECT org_id FROM managed_agents WHERE id = $1`, [AGENT_ID]);
       const hbOrgId = hbOrgRows?.[0]?.org_id || "";
       const hbManagerEmail = config.managerEmail || (config.manager?.type === "external" ? config.manager.email : null);

package/dist/{cli-serve-JS5CDMOW.js → cli-serve-ISFHDWKP.js}

@@ -94,7 +94,7 @@ async function runServe(_args) {
     process.exit(1);
   }
   const { createAdapter, smartDbConfig } = await import("./factory-RTZU2K54.js");
-  const { createServer } = await import("./server-5URLZCXN.js");
+  const { createServer } = await import("./server-JVQIW7QZ.js");
   const db = await createAdapter(smartDbConfig(DATABASE_URL));
   await db.migrate();
   const server = createServer({

package/dist/cli.js

@@ -57,14 +57,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-JS5CDMOW.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-ISFHDWKP.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
-    import("./cli-agent-SPDASSB7.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
+    import("./cli-agent-7HSS5FUE.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-R2ECMQLR.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-Z5TIFVJQ.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/{deployer-JJYWIRFH.js → deployer-HN7HPTZU.js}

@@ -2,7 +2,7 @@ import {
   DeploymentEngine,
   ensurePm2,
   init_deployer
-} from "./chunk-3IEMACO4.js";
+} from "./chunk-FT5MAYTU.js";
 import "./chunk-KFQGP6VL.js";
 init_deployer();
 export {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-WECNT5FR.js";
+} from "./chunk-G4EXGQSK.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -28,7 +28,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-PPGBBASR.js";
+} from "./chunk-GIWIAVLJ.js";
 import {
   ValidationError,
   auditLogger,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-3VZOFEQF.js";
+} from "./chunk-KMOGPT4O.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,
@@ -82,7 +82,7 @@ import {
   init_storage_manager,
   init_tenant,
   init_workforce
-} from "./chunk-RCCWFEZI.js";
+} from "./chunk-J7DJJVGJ.js";
 import "./chunk-3UAFHUEC.js";
 import {
   ENGINE_TABLES,
@@ -115,7 +115,7 @@ import {
   DeploymentEngine,
   init_agent_config,
   init_deployer
-} from "./chunk-3IEMACO4.js";
+} from "./chunk-FT5MAYTU.js";
 import {
   CircuitBreaker,
   CircuitOpenError,

package/dist/{routes-S43BQMDK.js → routes-L5POMDQZ.js}

@@ -35,7 +35,7 @@ import {
   tenants,
   vault,
   workforce
-} from "./chunk-RCCWFEZI.js";
+} from "./chunk-J7DJJVGJ.js";
 import "./chunk-3UAFHUEC.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
@@ -45,7 +45,7 @@ import "./chunk-Z6K5FKAB.js";
 import "./chunk-C6JP5NR6.js";
 import "./chunk-WYDVMFGJ.js";
 import "./chunk-HIQY73V2.js";
-import "./chunk-3IEMACO4.js";
+import "./chunk-FT5MAYTU.js";
 import "./chunk-YDD5TC5Q.js";
 import "./chunk-FLQ5FLHW.js";
 import "./chunk-WUAWWKTN.js";

package/dist/{runtime-3GLGCAGF.js → runtime-PMERZPPG.js}

@@ -14,7 +14,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-PPGBBASR.js";
+} from "./chunk-GIWIAVLJ.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,

package/dist/{server-5URLZCXN.js → server-JVQIW7QZ.js}

@@ -1,9 +1,9 @@
 import {
   createServer
-} from "./chunk-3VZOFEQF.js";
+} from "./chunk-KMOGPT4O.js";
 import "./chunk-DJBCRQTD.js";
 import "./chunk-UF3ZJMJO.js";
-import "./chunk-RCCWFEZI.js";
+import "./chunk-J7DJJVGJ.js";
 import "./chunk-3UAFHUEC.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
@@ -13,7 +13,7 @@ import "./chunk-Z6K5FKAB.js";
 import "./chunk-C6JP5NR6.js";
 import "./chunk-WYDVMFGJ.js";
 import "./chunk-HIQY73V2.js";
-import "./chunk-3IEMACO4.js";
+import "./chunk-FT5MAYTU.js";
 import "./chunk-YDD5TC5Q.js";
 import "./chunk-37ABTUFU.js";
 import "./chunk-NU657BBQ.js";

package/dist/{setup-R2ECMQLR.js → setup-Z5TIFVJQ.js}

@@ -6,7 +6,7 @@ import {
   promptRegistration,
   provision,
   runSetupWizard
-} from "./chunk-WECNT5FR.js";
+} from "./chunk-G4EXGQSK.js";
 import "./chunk-Z3I6GNTS.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{smtp-email-WGUG4M45.js → smtp-email-UZ53LCJ7.js}

@@ -6,11 +6,13 @@ import { ImapFlow } from "imapflow";
 function getSmtpConfig(ctx) {
   const ec = ctx.emailConfig;
   if (!ec?.smtpHost) throw new Error("SMTP not configured. Set up email credentials in agent settings.");
+  const pass = ec.smtpPass || ec.password;
+  if (!pass) throw new Error("No password configured. Set email password in agent email settings.");
   return {
     host: ec.smtpHost,
     port: ec.smtpPort || 587,
     secure: (ec.smtpPort || 587) === 465,
-    auth: { user: ec.smtpUser || ec.email, pass: ec.smtpPass }
+    auth: { user: ec.smtpUser || ec.email, pass }
   };
 }
 function getImapConfig(ctx) {
@@ -24,11 +26,13 @@ function getImapConfig(ctx) {
     else if (smtpHost.includes("smtp.yahoo")) imapHost = "imap.mail.yahoo.com";
     else imapHost = smtpHost.replace("smtp.", "imap.");
   }
+  const pass = ec.smtpPass || ec.imapPass || ec.password;
+  if (!pass) throw new Error("No password configured. Set email password in agent email settings.");
   return {
     host: imapHost,
     port: ec.imapPort || 993,
     secure: true,
-    auth: { user: ec.smtpUser || ec.imapUser || ec.email, pass: ec.smtpPass || ec.imapPass },
+    auth: { user: ec.smtpUser || ec.imapUser || ec.email, pass },
     logger: false
   };
 }

package/logs/cloudflared-error.log

@@ -143,3 +143,13 @@
 2026-03-05 19:23:02: 2026-03-05T18:23:02Z ERR Request failed error="stream 357 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/cluster/stream event=0 ip=198.41.192.107 type=http
 2026-03-05 19:53:34: 2026-03-05T18:53:34Z ERR  error="stream 405 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
 2026-03-05 19:53:34: 2026-03-05T18:53:34Z ERR Request failed error="stream 405 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=67ba24f1-c8af-40b4-9df5-c05b81fc1e7a event=0 ip=198.41.192.107 type=http
+2026-03-05 19:53:47: 2026-03-05T18:53:47Z ERR  error="stream 377 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:53:47: 2026-03-05T18:53:47Z ERR Request failed error="stream 377 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=67ba24f1-c8af-40b4-9df5-c05b81fc1e7a event=0 ip=198.41.192.107 type=http
+2026-03-05 19:53:50: 2026-03-05T18:53:50Z ERR  error="stream 777 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:53:50: 2026-03-05T18:53:50Z ERR Request failed error="stream 777 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=67ba24f1-c8af-40b4-9df5-c05b81fc1e7a event=0 ip=198.41.192.107 type=http
+2026-03-05 19:55:34: 2026-03-05T18:55:34Z ERR  error="stream 881 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:55:34: 2026-03-05T18:55:34Z ERR Request failed error="stream 881 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream event=0 ip=198.41.192.107 type=http
+2026-03-05 19:55:49: 2026-03-05T18:55:49Z ERR  error="stream 753 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:55:49: 2026-03-05T18:55:49Z ERR Request failed error="stream 753 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=67ba24f1-c8af-40b4-9df5-c05b81fc1e7a event=0 ip=198.41.192.107 type=http
+2026-03-05 19:56:02: 2026-03-05T18:56:02Z ERR  error="stream 913 canceled by remote with error code 0" connIndex=0 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-05 19:56:02: 2026-03-05T18:56:02Z ERR Request failed error="stream 913 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.192.107 type=http

package/logs/enterprise-out.log

@@ -15,3 +15,79 @@
 2026-03-05 08:01:57: Loaded config from /Users/ope/Desktop/projects/agenticmail/enterprise/.env
 2026-03-05 08:04:00: Loaded config from /Users/ope/Desktop/projects/agenticmail/enterprise/.env
 2026-03-05 08:08:16: Loaded config from /Users/ope/Desktop/projects/agenticmail/enterprise/.env
+2026-03-05 19:54:10: Closing session: SessionEntry {
+2026-03-05 19:54:10:   _chains: {
+2026-03-05 19:54:10:     BQDZFLrx0MLImqzD3cvFwPpOQBCZv3izA6ZtPewySrJl: { chainKey: [Object], chainType: 2, messageKeys: {} },
+2026-03-05 19:54:10:     'Ba7peRFQL4jv9e7JsA/oCYEcBIOilGAyHCnBfiGt5UJA': { chainKey: [Object], chainType: 1, messageKeys: {} }
+2026-03-05 19:54:10:   },
+2026-03-05 19:54:10:   registrationId: 6971310,
+2026-03-05 19:54:10:   currentRatchet: {
+2026-03-05 19:54:10:     ephemeralKeyPair: {
+2026-03-05 19:54:10:       pubKey: <Buffer 05 ae e9 79 11 50 2f 88 ef f5 ee c9 b0 0f e8 09 81 1c 04 83 a2 94 60 32 1c 29 c1 7e 21 ad e5 42 40>,
+2026-03-05 19:54:10:       privKey: <Buffer d8 85 b7 b0 8a 43 fe 8e 7c 5f c9 d3 af 0d 33 89 a2 da 36 4c 95 72 e1 d8 ef 6a 5b a4 c9 dd ca 75>
+2026-03-05 19:54:10:     },
+2026-03-05 19:54:10:     lastRemoteEphemeralKey: <Buffer 05 00 d9 14 ba f1 d0 c2 c8 9a ac c3 dd cb c5 c0 fa 4e 40 10 99 bf 78 b3 03 a6 6d 3d ec 32 4a b2 65>,
+2026-03-05 19:54:10:     previousCounter: 0,
+2026-03-05 19:54:10:     rootKey: <Buffer 9c ea de a7 65 11 20 cd 78 4d 26 af 04 97 89 3a 60 f3 ae c9 3d 77 f4 59 ea 5c 1b 20 ea 1b 68 7e>
+2026-03-05 19:54:10:   },
+2026-03-05 19:54:10:   indexInfo: {
+2026-03-05 19:54:10:     baseKey: <Buffer 05 ef 03 72 3e 7b c1 f1 d0 7b 7f ca a5 44 51 22 9a fc 82 5b 47 60 92 c8 a1 db 84 ad 6b 79 12 35 22>,
+2026-03-05 19:54:10:     baseKeyType: 2,
+2026-03-05 19:54:10:     closed: -1,
+2026-03-05 19:54:10:     used: 1772736848203,
+2026-03-05 19:54:10:     created: 1772736848203,
+2026-03-05 19:54:10:     remoteIdentityKey: <Buffer 05 77 f5 0b 9d bd dc 37 d4 af cf 0e ba 1e f9 62 e2 31 0c d6 13 ce 68 ff 0c f9 a7 d4 7b fb ec ce 1d>
+2026-03-05 19:54:10:   }
+2026-03-05 19:54:10: }
+2026-03-05 19:56:01: Closing session: SessionEntry {
+2026-03-05 19:56:01:   _chains: {
+2026-03-05 19:56:01:     BWzsTCgB4Oexii4nnddiCmEWWOeeoCnxjE1kZXetZnEp: { chainKey: [Object], chainType: 2, messageKeys: {} },
+2026-03-05 19:56:01:     'BUK3+8ASHqSDX27FF4QognQvAVUV3FJrddpzukI9V98F': { chainKey: [Object], chainType: 1, messageKeys: {} }
+2026-03-05 19:56:01:   },
+2026-03-05 19:56:01:   registrationId: 6971310,
+2026-03-05 19:56:01:   currentRatchet: {
+2026-03-05 19:56:01:     ephemeralKeyPair: {
+2026-03-05 19:56:01:       pubKey: <Buffer 05 42 b7 fb c0 12 1e a4 83 5f 6e c5 17 84 28 82 74 2f 01 55 15 dc 52 6b 75 da 73 ba 42 3d 57 df 05>,
+2026-03-05 19:56:01:       privKey: <Buffer 90 b4 00 87 ba 0b 0b de 13 b9 c5 4c 58 97 90 01 5d 93 16 0f f1 a4 67 e7 21 a5 e4 a7 90 85 81 4a>
+2026-03-05 19:56:01:     },
+2026-03-05 19:56:01:     lastRemoteEphemeralKey: <Buffer 05 6c ec 4c 28 01 e0 e7 b1 8a 2e 27 9d d7 62 0a 61 16 58 e7 9e a0 29 f1 8c 4d 64 65 77 ad 66 71 29>,
+2026-03-05 19:56:01:     previousCounter: 0,
+2026-03-05 19:56:01:     rootKey: <Buffer 2f 8d 69 30 67 7c df 08 b4 14 2b cb da 81 74 0c 6d 75 6d 1d dd 16 a7 ee ba 81 c5 e7 4c be 86 bb>
+2026-03-05 19:56:01:   },
+2026-03-05 19:56:01:   indexInfo: {
+2026-03-05 19:56:01:     baseKey: <Buffer 05 af 0d cc 21 e1 dd 7e fd 6a 29 3f 4c 40 1d 1d 25 be f6 1e 00 65 05 2d a5 47 b1 18 e4 78 52 05 5b>,
+2026-03-05 19:56:01:     baseKeyType: 2,
+2026-03-05 19:56:01:     closed: -1,
+2026-03-05 19:56:01:     used: 1772736960772,
+2026-03-05 19:56:01:     created: 1772736960772,
+2026-03-05 19:56:01:     remoteIdentityKey: <Buffer 05 77 f5 0b 9d bd dc 37 d4 af cf 0e ba 1e f9 62 e2 31 0c d6 13 ce 68 ff 0c f9 a7 d4 7b fb ec ce 1d>
+2026-03-05 19:56:01:   }
+2026-03-05 19:56:01: }
+2026-03-05 19:56:06: Closing session: SessionEntry {
+2026-03-05 19:56:06:   _chains: {
+2026-03-05 19:56:06:     'BfboMzdiDlz8szVAP/BdZIOC5RokX5mkejM32IMi+gAn': { chainKey: [Object], chainType: 1, messageKeys: {} }
+2026-03-05 19:56:06:   },
+2026-03-05 19:56:06:   registrationId: 179,
+2026-03-05 19:56:06:   currentRatchet: {
+2026-03-05 19:56:06:     ephemeralKeyPair: {
+2026-03-05 19:56:06:       pubKey: <Buffer 05 f6 e8 33 37 62 0e 5c fc b3 35 40 3f f0 5d 64 83 82 e5 1a 24 5f 99 a4 7a 33 37 d8 83 22 fa 00 27>,
+2026-03-05 19:56:06:       privKey: <Buffer d8 9f 70 09 9a 2e ae ea b3 ea 37 eb 56 dc 87 51 a8 be 3e 92 f7 5d a1 3a 83 dc 21 45 fe 70 24 40>
+2026-03-05 19:56:06:     },
+2026-03-05 19:56:06:     lastRemoteEphemeralKey: <Buffer 05 62 84 f4 72 b0 65 2d 5b 72 08 94 18 2c dd 77 53 86 a9 60 9f 45 7c 7f fa 3e d7 23 47 a0 8f d1 14>,
+2026-03-05 19:56:06:     previousCounter: 0,
+2026-03-05 19:56:06:     rootKey: <Buffer 2b 0e 69 ed e4 19 ae 59 d9 86 f1 b0 8c 96 38 3b e8 20 5d 1a 65 2b ff b0 a2 77 46 06 91 b7 5f fb>
+2026-03-05 19:56:06:   },
+2026-03-05 19:56:06:   indexInfo: {
+2026-03-05 19:56:06:     baseKey: <Buffer 05 6d 54 bd 52 9b 1e d5 5c cc 78 a0 6e 6c da f8 6a 58 57 83 bf 31 83 1f 89 09 52 ea c3 2f 93 73 5c>,
+2026-03-05 19:56:06:     baseKeyType: 1,
+2026-03-05 19:56:06:     closed: -1,
+2026-03-05 19:56:06:     used: 1772736962010,
+2026-03-05 19:56:06:     created: 1772736962010,
+2026-03-05 19:56:06:     remoteIdentityKey: <Buffer 05 49 ad f2 cf 3b 33 c5 c7 e9 e7 fe a0 78 40 6d 9d 6c f6 e2 1c 34 66 e9 da 59 54 01 48 6b ed 9a 61>
+2026-03-05 19:56:06:   },
+2026-03-05 19:56:06:   pendingPreKey: {
+2026-03-05 19:56:06:     signedKeyId: 1,
+2026-03-05 19:56:06:     baseKey: <Buffer 05 6d 54 bd 52 9b 1e d5 5c cc 78 a0 6e 6c da f8 6a 58 57 83 bf 31 83 1f 89 09 52 ea c3 2f 93 73 5c>,
+2026-03-05 19:56:06:     preKeyId: 1135
+2026-03-05 19:56:06:   }
+2026-03-05 19:56:06: }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.355",
+  "version": "0.5.357",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {