@agenticmail/enterprise 0.5.405 → 0.5.407

package/dist/routes-SW334HKW.js

@@ -0,0 +1,10 @@
+import {
+  registerBrowserRoutes
+} from "./chunk-EFH6FMUG.js";
+import "./chunk-DTNJPDWB.js";
+import "./chunk-HJGNJNT4.js";
+import "./chunk-A3PUJDNH.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  registerBrowserRoutes
+};

package/dist/runtime-7CF5TFSA.js

@@ -0,0 +1,46 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-QL2LZO6K.js";
+import "./chunk-WPM52NBU.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-UF3ZJMJO.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/runtime-HBOONSFP.js

@@ -0,0 +1,46 @@
+import {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  runAgentLoop,
+  toolsToDefinitions
+} from "./chunk-EM4DE3ZR.js";
+import "./chunk-WPM52NBU.js";
+import {
+  PROVIDER_REGISTRY,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider
+} from "./chunk-UF3ZJMJO.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  AgentRuntime,
+  EmailChannel,
+  FollowUpScheduler,
+  PROVIDER_REGISTRY,
+  SessionManager,
+  SubAgentManager,
+  ToolRegistry,
+  callLLM,
+  createAgentRuntime,
+  createNoopHooks,
+  createRuntimeHooks,
+  estimateMessageTokens,
+  estimateTokens,
+  executeTool,
+  listAllProviders,
+  resolveApiKeyForProvider,
+  resolveProvider,
+  runAgentLoop,
+  toolsToDefinitions
+};

package/dist/server-3ENVSPWR.js

@@ -0,0 +1,28 @@
+import {
+  createServer
+} from "./chunk-KEIOV7DI.js";
+import "./chunk-DJBCRQTD.js";
+import "./chunk-UF3ZJMJO.js";
+import "./chunk-ZZQWXIAX.js";
+import "./chunk-WYDVMFGJ.js";
+import "./chunk-3UAFHUEC.js";
+import "./chunk-E6B4W3WG.js";
+import "./chunk-Z7NVD3OQ.js";
+import "./chunk-VSBC4SWO.js";
+import "./chunk-AF3WSNVX.js";
+import "./chunk-74ZCQKYU.js";
+import "./chunk-ZNLABJCS.js";
+import "./chunk-C6JP5NR6.js";
+import "./chunk-WUAWWKTN.js";
+import "./chunk-E5QPDR3O.js";
+import "./chunk-YDD5TC5Q.js";
+import "./chunk-37ABTUFU.js";
+import "./chunk-NU657BBQ.js";
+import "./chunk-PGAU3W3M.js";
+import "./chunk-FLQ5FLHW.js";
+import "./chunk-YZRJHYKB.js";
+import "./chunk-22U7TZPN.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/server-Z5OZ5VXP.js

@@ -0,0 +1,28 @@
+import {
+  createServer
+} from "./chunk-EQ276K4X.js";
+import "./chunk-DJBCRQTD.js";
+import "./chunk-UF3ZJMJO.js";
+import "./chunk-ZZQWXIAX.js";
+import "./chunk-WYDVMFGJ.js";
+import "./chunk-3UAFHUEC.js";
+import "./chunk-E6B4W3WG.js";
+import "./chunk-Z7NVD3OQ.js";
+import "./chunk-VSBC4SWO.js";
+import "./chunk-AF3WSNVX.js";
+import "./chunk-74ZCQKYU.js";
+import "./chunk-ZNLABJCS.js";
+import "./chunk-C6JP5NR6.js";
+import "./chunk-WUAWWKTN.js";
+import "./chunk-E5QPDR3O.js";
+import "./chunk-YDD5TC5Q.js";
+import "./chunk-37ABTUFU.js";
+import "./chunk-NU657BBQ.js";
+import "./chunk-PGAU3W3M.js";
+import "./chunk-FLQ5FLHW.js";
+import "./chunk-YZRJHYKB.js";
+import "./chunk-22U7TZPN.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/server-context-R73GCSDP.js

@@ -0,0 +1,12 @@
+import {
+  createBrowserRouteContext,
+  listKnownProfileNames
+} from "./chunk-YEJL3G2Z.js";
+import "./chunk-DTNJPDWB.js";
+import "./chunk-HJGNJNT4.js";
+import "./chunk-A3PUJDNH.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createBrowserRouteContext,
+  listKnownProfileNames
+};

package/dist/server-middleware-LDFLXQEZ.js

@@ -0,0 +1,153 @@
+import {
+  isLoopbackHost,
+  safeEqualSecret
+} from "./chunk-A3PUJDNH.js";
+import "./chunk-KFQGP6VL.js";
+
+// src/browser/server-middleware.ts
+import express from "express";
+
+// src/browser/csrf.ts
+function firstHeader(value) {
+  return Array.isArray(value) ? value[0] ?? "" : value ?? "";
+}
+function isMutatingMethod(method) {
+  const m = (method || "").trim().toUpperCase();
+  return m === "POST" || m === "PUT" || m === "PATCH" || m === "DELETE";
+}
+function isLoopbackUrl(value) {
+  const v = value.trim();
+  if (!v || v === "null") {
+    return false;
+  }
+  try {
+    const parsed = new URL(v);
+    return isLoopbackHost(parsed.hostname);
+  } catch {
+    return false;
+  }
+}
+function shouldRejectBrowserMutation(params) {
+  if (!isMutatingMethod(params.method)) {
+    return false;
+  }
+  const secFetchSite = (params.secFetchSite ?? "").trim().toLowerCase();
+  if (secFetchSite === "cross-site") {
+    return true;
+  }
+  const origin = (params.origin ?? "").trim();
+  if (origin) {
+    return !isLoopbackUrl(origin);
+  }
+  const referer = (params.referer ?? "").trim();
+  if (referer) {
+    return !isLoopbackUrl(referer);
+  }
+  return false;
+}
+function browserMutationGuardMiddleware() {
+  return (req, res, next) => {
+    const method = (req.method || "").trim().toUpperCase();
+    if (method === "OPTIONS") {
+      return next();
+    }
+    const origin = firstHeader(req.headers.origin);
+    const referer = firstHeader(req.headers.referer);
+    const secFetchSite = firstHeader(req.headers["sec-fetch-site"]);
+    if (shouldRejectBrowserMutation({
+      method,
+      origin,
+      referer,
+      secFetchSite
+    })) {
+      res.status(403).send("Forbidden");
+      return;
+    }
+    next();
+  };
+}
+
+// src/browser/http-auth.ts
+function firstHeaderValue(value) {
+  return Array.isArray(value) ? value[0] ?? "" : value ?? "";
+}
+function parseBearerToken(authorization) {
+  if (!authorization || !authorization.toLowerCase().startsWith("bearer ")) {
+    return void 0;
+  }
+  const token = authorization.slice(7).trim();
+  return token || void 0;
+}
+function parseBasicPassword(authorization) {
+  if (!authorization || !authorization.toLowerCase().startsWith("basic ")) {
+    return void 0;
+  }
+  const encoded = authorization.slice(6).trim();
+  if (!encoded) {
+    return void 0;
+  }
+  try {
+    const decoded = Buffer.from(encoded, "base64").toString("utf8");
+    const sep = decoded.indexOf(":");
+    if (sep < 0) {
+      return void 0;
+    }
+    const password = decoded.slice(sep + 1).trim();
+    return password || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isAuthorizedBrowserRequest(req, auth) {
+  const authorization = firstHeaderValue(req.headers.authorization).trim();
+  if (auth.token) {
+    const bearer = parseBearerToken(authorization);
+    if (bearer && safeEqualSecret(bearer, auth.token)) {
+      return true;
+    }
+  }
+  if (auth.password) {
+    const passwordHeader = firstHeaderValue(req.headers["x-agenticmail-password"]).trim();
+    if (passwordHeader && safeEqualSecret(passwordHeader, auth.password)) {
+      return true;
+    }
+    const basicPassword = parseBasicPassword(authorization);
+    if (basicPassword && safeEqualSecret(basicPassword, auth.password)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+// src/browser/server-middleware.ts
+function installBrowserCommonMiddleware(app) {
+  app.use((req, res, next) => {
+    const ctrl = new AbortController();
+    const abort = () => ctrl.abort(new Error("request aborted"));
+    req.once("aborted", abort);
+    res.once("close", () => {
+      if (!res.writableEnded) {
+        abort();
+      }
+    });
+    req.signal = ctrl.signal;
+    next();
+  });
+  app.use(express.json({ limit: "1mb" }));
+  app.use(browserMutationGuardMiddleware());
+}
+function installBrowserAuthMiddleware(app, auth) {
+  if (!auth.token && !auth.password) {
+    return;
+  }
+  app.use((req, res, next) => {
+    if (isAuthorizedBrowserRequest(req, auth)) {
+      return next();
+    }
+    res.status(401).send("Unauthorized");
+  });
+}
+export {
+  installBrowserAuthMiddleware,
+  installBrowserCommonMiddleware
+};

package/dist/setup-KYMWN3YP.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-IC7LGL7B.js";
+import "./chunk-P6W565WH.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/dist/setup-NRCDVREG.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-VR472JIR.js";
+import "./chunk-P6W565WH.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/logs/cloudflared-error.log

@@ -273,3 +273,9 @@
 2026-03-06 06:36:47: 2026-03-06T05:36:47Z ERR Request failed error="stream 3129 canceled by remote with error code 0" connIndex=0 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.200.43 type=http
 2026-03-06 06:40:49: 2026-03-06T05:40:49Z ERR  error="stream 649 canceled by remote with error code 0" connIndex=1 event=1 ingressRule=0 originService=http://localhost:3100
 2026-03-06 06:40:49: 2026-03-06T05:40:49Z ERR Request failed error="stream 649 canceled by remote with error code 0" connIndex=1 dest=https://enterprise.agenticmail.io/api/engine/agent-status-stream?agentId=3eecd57d-03ae-440d-8945-5b35f43a8d90 event=0 ip=198.41.192.37 type=http
+2026-03-06 15:54:20: 2026-03-06T14:54:20Z ERR  error="stream 981 canceled by remote with error code 0" connIndex=2 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-06 15:54:20: 2026-03-06T14:54:20Z ERR Request failed error="stream 981 canceled by remote with error code 0" connIndex=2 dest=https://enterprise.agenticmail.io/api/engine/task-pipeline/stream event=0 ip=198.41.192.47 type=http
+2026-03-06 15:54:30: 2026-03-06T14:54:30Z ERR  error="stream 1301 canceled by remote with error code 0" connIndex=2 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-06 15:54:30: 2026-03-06T14:54:30Z ERR Request failed error="stream 1301 canceled by remote with error code 0" connIndex=2 dest=https://enterprise.agenticmail.io/api/engine/task-pipeline/stream event=0 ip=198.41.192.47 type=http
+2026-03-06 16:01:25: 2026-03-06T15:01:25Z ERR  error="unexpected EOF" connIndex=2 event=1 ingressRule=0 originService=http://localhost:3100
+2026-03-06 16:01:25: 2026-03-06T15:01:25Z ERR Request failed error="unexpected EOF" connIndex=2 dest=https://enterprise.agenticmail.io/api/engine/task-pipeline/stream event=0 ip=198.41.192.47 type=http

package/logs/john-error.log

@@ -14,3 +14,5 @@
 2026-03-06 03:46:50: [TaskPoller] spawnForTask error: No API key configured for provider: undefined
 2026-03-06 14:40:46: [TaskPoller] spawnForTask error: No API key configured for provider: undefined
 2026-03-06 14:44:45: [TaskPoller] spawnForTask error: No API key configured for provider: undefined
+2026-03-06 15:48:10: Fatal error: current transaction is aborted, commands ignored until end of transaction block
+2026-03-06 16:01:22: [shutdown] Email notification error: Invalid character

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.405",
+  "version": "0.5.407",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {