agent-mailbox-cli 0.1.0 → 0.1.2

package/README.md

@@ -0,0 +1,132 @@
+# AgentMailbox
+
+Email addresses for AI agents. Zero cost per account.
+
+AgentMailbox gives any AI agent its own email address at `@agentmailbox.io`. Agents can receive verification codes, order confirmations, and notifications — no Gmail or Google Workspace fees per account.
+
+## Install
+
+```bash
+npm install -g agent-mailbox-cli
+```
+
+## Quick Start
+
+```bash
+# Set your API key
+export AGENT_EMAIL_API_KEY=ae_xxxxx
+
+# Create an email account
+agentmailbox account create grocery-bot
+# → grocery-bot@agentmailbox.io created
+
+# List inbox
+agentmailbox msg list grocery-bot@agentmailbox.io
+
+# Wait for a new email (blocks until one arrives)
+agentmailbox msg wait grocery-bot@agentmailbox.io --timeout 60
+
+# Read a message
+agentmailbox msg read grocery-bot@agentmailbox.io <message-id>
+
+# Reply
+agentmailbox msg reply grocery-bot@agentmailbox.io <message-id> "Got it, thanks"
+```
+
+## API
+
+Base URL: `https://agent-email-api-production.up.railway.app`
+
+Auth: `Authorization: Bearer ae_xxxxx`
+
+### Organizations
+
+```
+POST /v1/orgs                              Create org, get API key
+```
+
+### Accounts
+
+```
+POST   /v1/accounts                        Create email account
+GET    /v1/accounts                        List accounts
+DELETE /v1/accounts/:address               Delete account
+```
+
+### Messages
+
+```
+GET    /v1/accounts/:address/messages                   List inbox
+GET    /v1/accounts/:address/messages/:id               Read message
+GET    /v1/accounts/:address/messages/wait?timeout=30   Wait for new email
+POST   /v1/accounts/:address/messages/:id/reply         Reply to message
+POST   /v1/accounts/:address/send                       Send new email
+DELETE /v1/accounts/:address/messages/:id               Delete message
+```
+
+## Example: Agent Signup Flow
+
+```javascript
+const API = 'https://agent-email-api-production.up.railway.app';
+const KEY = 'ae_xxxxx';
+
+// 1. Create an email for the agent
+const { account } = await fetch(`${API}/v1/accounts`, {
+  method: 'POST',
+  headers: { 'Authorization': `Bearer ${KEY}`, 'Content-Type': 'application/json' },
+  body: JSON.stringify({ local_part: 'bot-123' })
+}).then(r => r.json());
+// → bot-123@agentmailbox.io
+
+// 2. Sign up for a service using that email
+// ... (agent signs up on grocery site with bot-123@agentmailbox.io)
+
+// 3. Wait for verification email
+const { message } = await fetch(
+  `${API}/v1/accounts/bot-123@agentmailbox.io/messages/wait?timeout=60`,
+  { headers: { 'Authorization': `Bearer ${KEY}` } }
+).then(r => r.json());
+
+// 4. Extract verification code
+const code = message.text.match(/\d{6}/)?.[0];
+```
+
+## Architecture
+
+```
+Internet ──SMTP:25──▶ Fly.io (SMTP receiver) ──▶ PostgreSQL (Railway)
+                                                       ▲
+Agents ──HTTPS──▶ Railway (REST API) ─────────────────┘
+```
+
+- **API**: Fastify on Railway
+- **SMTP**: Node.js smtp-server on Fly.io, port 25
+- **Database**: PostgreSQL on Railway
+- **Domain**: agentmailbox.io (Vercel DNS, MX + SPF + DMARC configured)
+
+## Development
+
+```bash
+# Start Postgres
+docker compose up -d
+
+# Init database
+npm run db:init
+
+# Run everything locally
+npm run dev
+
+# Or run API and SMTP separately
+npm run dev:api
+npm run dev:smtp
+```
+
+## Deploy
+
+```bash
+# API → Railway
+railway up -s agent-email-api
+
+# SMTP → Fly.io
+fly deploy --app agent-email-smtp
+```

package/dist/api/auth.d.ts

@@ -1,5 +1,8 @@
 import { FastifyRequest, FastifyReply } from 'fastify';
-export declare function hashApiKey(key: string): string;
+export declare function hashToken(key: string): string;
 export declare function generateApiKey(): string;
+export declare function generateMagicToken(): string;
+export declare function generateSessionToken(): string;
 export declare function authenticate(request: FastifyRequest, reply: FastifyReply): Promise<undefined>;
+export declare function authenticateAdmin(request: FastifyRequest, reply: FastifyReply): Promise<undefined>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/api/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,sBAyBpB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,sBAyBpB;AAGD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,sBAiCpB"}

package/dist/api/auth.js

@@ -1,11 +1,18 @@
 import crypto from 'crypto';
 import { pool } from '../db/index.js';
-export function hashApiKey(key) {
+export function hashToken(key) {
     return crypto.createHash('sha256').update(key).digest('hex');
 }
 export function generateApiKey() {
     return 'ae_' + crypto.randomBytes(24).toString('hex');
 }
+export function generateMagicToken() {
+    return String(crypto.randomInt(100000, 999999));
+}
+export function generateSessionToken() {
+    return 'as_' + crypto.randomBytes(24).toString('hex');
+}
+// Org-level API key auth (existing)
 export async function authenticate(request, reply) {
     const header = request.headers['authorization'] || request.headers['x-api-key'];
     if (!header) {
@@ -15,11 +22,35 @@ export async function authenticate(request, reply) {
     if (!key) {
         return reply.code(401).send({ error: 'Invalid API key' });
     }
-    const hash = hashApiKey(key);
+    const hash = hashToken(key);
     const result = await pool.query('SELECT id, name FROM orgs WHERE api_key_hash = $1', [hash]);
     if (result.rows.length === 0) {
         return reply.code(401).send({ error: 'Invalid API key' });
     }
     request.org = result.rows[0];
 }
+// Admin session auth
+export async function authenticateAdmin(request, reply) {
+    const header = request.headers['authorization'];
+    if (!header) {
+        return reply.code(401).send({ error: 'Missing session token. Run: agentmailbox login' });
+    }
+    const token = typeof header === 'string' ? header.replace(/^Bearer\s+/i, '') : '';
+    if (!token || !token.startsWith('as_')) {
+        return reply.code(401).send({ error: 'Invalid session token' });
+    }
+    const hash = hashToken(token);
+    const result = await pool.query(`SELECT s.id, s.admin_user_id, s.expires_at, u.email
+     FROM admin_sessions s
+     JOIN admin_users u ON u.id = s.admin_user_id
+     WHERE s.token_hash = $1`, [hash]);
+    if (result.rows.length === 0 ||
+        new Date(result.rows[0].expires_at) < new Date()) {
+        return reply.code(401).send({ error: 'Session expired. Run: agentmailbox login' });
+    }
+    request.admin = {
+        id: result.rows[0].admin_user_id,
+        email: result.rows[0].email,
+    };
+}
 //# sourceMappingURL=auth.js.map

package/dist/api/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAuB,EACvB,KAAmB;IAEnB,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,mDAAmD,EACnD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEA,OAAe,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,oCAAoC;AACpC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAuB,EACvB,KAAmB;IAEnB,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,mDAAmD,EACnD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEA,OAAe,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,qBAAqB;AACrB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,KAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GACT,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;6BAGyB,EACzB,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAChD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;IACrF,CAAC;IAEA,OAAe,CAAC,KAAK,GAAG;QACvB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa;QAChC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;KAC5B,CAAC;AACJ,CAAC"}

package/dist/api/routes/auth.d.ts

@@ -0,0 +1,3 @@
+import { FastifyInstance } from 'fastify';
+export declare function authRoutes(fastify: FastifyInstance): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/api/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/api/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AA2B1C,wBAAsB,UAAU,CAAC,OAAO,EAAE,eAAe,iBAkJxD"}

package/dist/api/routes/auth.js

@@ -0,0 +1,102 @@
+import { pool } from '../../db/index.js';
+import { hashToken, generateMagicToken, generateSessionToken, authenticateAdmin, } from '../auth.js';
+import { sendMagicLinkEmail } from '../../email/send.js';
+import { config } from '../../config.js';
+async function sendMagicLink(adminUserId, email) {
+    const token = generateMagicToken();
+    const hash = hashToken(token);
+    const expiresAt = new Date(Date.now() + config.auth.magicLinkTtlMinutes * 60 * 1000);
+    await pool.query(`INSERT INTO magic_link_tokens (admin_user_id, token_hash, expires_at) VALUES ($1, $2, $3)`, [adminUserId, hash, expiresAt]);
+    await sendMagicLinkEmail(email, token);
+    return { emailSent: true };
+}
+export async function authRoutes(fastify) {
+    // Signup
+    fastify.post('/v1/auth/signup', async (request, reply) => {
+        const { email } = request.body || {};
+        if (!email || !email.includes('@')) {
+            return reply.code(400).send({ error: 'Valid email is required' });
+        }
+        const normalized = email.toLowerCase().trim();
+        // Check if already exists
+        const existing = await pool.query('SELECT id FROM admin_users WHERE email = $1', [normalized]);
+        if (existing.rows.length > 0) {
+            return reply
+                .code(409)
+                .send({ error: 'Account already exists. Use: agentmailbox login' });
+        }
+        const result = await pool.query('INSERT INTO admin_users (email) VALUES ($1) RETURNING id', [normalized]);
+        await sendMagicLink(result.rows[0].id, normalized);
+        return reply.code(201).send({
+            message: 'Check your email for a 6-digit verification code.',
+        });
+    });
+    // Login
+    fastify.post('/v1/auth/login', async (request, reply) => {
+        const { email } = request.body || {};
+        if (!email || !email.includes('@')) {
+            return reply.code(400).send({ error: 'Valid email is required' });
+        }
+        const normalized = email.toLowerCase().trim();
+        const result = await pool.query('SELECT id FROM admin_users WHERE email = $1', [normalized]);
+        if (result.rows.length === 0) {
+            return reply
+                .code(404)
+                .send({ error: 'No account with this email. Run: agentmailbox signup' });
+        }
+        await sendMagicLink(result.rows[0].id, normalized);
+        return {
+            message: 'Check your email for a 6-digit verification code.',
+        };
+    });
+    // Verify magic link token
+    fastify.post('/v1/auth/verify', async (request, reply) => {
+        const { token } = request.body || {};
+        if (!token) {
+            return reply.code(400).send({ error: 'Token is required' });
+        }
+        const hash = hashToken(token);
+        // Atomic: mark used only if valid and unused
+        const result = await pool.query(`UPDATE magic_link_tokens
+         SET used_at = NOW()
+         WHERE token_hash = $1 AND used_at IS NULL AND expires_at > NOW()
+         RETURNING admin_user_id`, [hash]);
+        if (result.rows.length === 0) {
+            return reply
+                .code(401)
+                .send({ error: 'Invalid or expired code' });
+        }
+        const adminUserId = result.rows[0].admin_user_id;
+        // Create session
+        const sessionToken = generateSessionToken();
+        const sessionHash = hashToken(sessionToken);
+        const expiresAt = new Date(Date.now() + config.auth.sessionTtlDays * 24 * 60 * 60 * 1000);
+        await pool.query(`INSERT INTO admin_sessions (admin_user_id, token_hash, expires_at) VALUES ($1, $2, $3)`, [adminUserId, sessionHash, expiresAt]);
+        const user = await pool.query('SELECT email FROM admin_users WHERE id = $1', [adminUserId]);
+        return {
+            session_token: sessionToken,
+            admin: { id: adminUserId, email: user.rows[0].email },
+            expires_at: expiresAt,
+        };
+    });
+    // Logout
+    fastify.post('/v1/auth/logout', async (request, reply) => {
+        const header = request.headers['authorization'];
+        if (!header) {
+            return reply.code(401).send({ error: 'Missing session token' });
+        }
+        const token = typeof header === 'string' ? header.replace(/^Bearer\s+/i, '') : '';
+        if (!token) {
+            return reply.code(401).send({ error: 'Invalid session token' });
+        }
+        const hash = hashToken(token);
+        await pool.query('DELETE FROM admin_sessions WHERE token_hash = $1', [hash]);
+        return { message: 'Logged out' };
+    });
+    // Who am I
+    fastify.get('/v1/auth/me', { onRequest: authenticateAdmin }, async (request) => {
+        const admin = request.admin;
+        return { admin };
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/api/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/api/routes/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,GAAG,EAAE,GAAG,IAAI,CACzD,CAAC;IAEF,MAAM,IAAI,CAAC,KAAK,CACd,2FAA2F,EAC3F,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,CAC/B,CAAC;IAEF,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAwB;IACvD,SAAS;IACT,OAAO,CAAC,IAAI,CACV,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAE9C,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,6CAA6C,EAC7C,CAAC,UAAU,CAAC,CACb,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,0DAA0D,EAC1D,CAAC,UAAU,CAAC,CACb,CAAC;QAEF,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,QAAQ;IACR,OAAO,CAAC,IAAI,CACV,gBAAgB,EAChB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,6CAA6C,EAC7C,CAAC,UAAU,CAAC,CACb,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnD,OAAO;YACL,OAAO,EAAE,mDAAmD;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CACV,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE9B,6CAA6C;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;iCAGyB,EACzB,CAAC,IAAI,CAAC,CACP,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAEjD,iBAAiB;QACjB,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAC9D,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CACd,wFAAwF,EACxF,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CACtC,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B,6CAA6C,EAC7C,CAAC,WAAW,CAAC,CACd,CAAC;QAEF,OAAO;YACL,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;YACrD,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,SAAS;IACT,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,KAAK,GACT,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAE7E,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,WAAW;IACX,OAAO,CAAC,GAAG,CACT,aAAa,EACb,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAI,OAAe,CAAC,KAAK,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/api/routes/orgs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../../../src/api/routes/orgs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI1C,wBAAsB,SAAS,CAAC,OAAO,EAAE,eAAe,iBAwBvD"}
+{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../../../src/api/routes/orgs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI1C,wBAAsB,SAAS,CAAC,OAAO,EAAE,eAAe,iBAqEvD"}

package/dist/api/routes/orgs.js

@@ -1,20 +1,43 @@
 import { pool } from '../../db/index.js';
-import { generateApiKey, hashApiKey } from '../auth.js';
+import { generateApiKey, hashToken, authenticateAdmin } from '../auth.js';
 export async function orgRoutes(fastify) {
-    // Create org — this is the only unauthenticated endpoint
-    fastify.post('/v1/orgs', async (request, reply) => {
+    // Create org — requires admin auth
+    fastify.post('/v1/orgs', { onRequest: authenticateAdmin }, async (request, reply) => {
+        const admin = request.admin;
         const { name } = request.body || {};
         if (!name) {
             return reply.code(400).send({ error: 'name is required' });
         }
         const apiKey = generateApiKey();
-        const hash = hashApiKey(apiKey);
-        const result = await pool.query('INSERT INTO orgs (name, api_key_hash) VALUES ($1, $2) RETURNING id, name, created_at', [name, hash]);
+        const hash = hashToken(apiKey);
+        const result = await pool.query('INSERT INTO orgs (name, api_key_hash, admin_user_id) VALUES ($1, $2, $3) RETURNING id, name, created_at', [name, hash, admin.id]);
         return reply.code(201).send({
             org: result.rows[0],
             api_key: apiKey,
             note: 'Save this API key — it cannot be retrieved again.',
         });
     });
+    // List orgs for admin
+    fastify.get('/v1/orgs', { onRequest: authenticateAdmin }, async (request) => {
+        const admin = request.admin;
+        const result = await pool.query('SELECT id, name, created_at FROM orgs WHERE admin_user_id = $1 ORDER BY created_at DESC', [admin.id]);
+        return { orgs: result.rows };
+    });
+    // Rotate API key
+    fastify.post('/v1/orgs/:orgId/rotate-key', { onRequest: authenticateAdmin }, async (request, reply) => {
+        const admin = request.admin;
+        const { orgId } = request.params;
+        const apiKey = generateApiKey();
+        const hash = hashToken(apiKey);
+        const result = await pool.query('UPDATE orgs SET api_key_hash = $1 WHERE id = $2 AND admin_user_id = $3 RETURNING id, name', [hash, orgId, admin.id]);
+        if (result.rows.length === 0) {
+            return reply.code(404).send({ error: 'Org not found' });
+        }
+        return {
+            org: result.rows[0],
+            api_key: apiKey,
+            note: 'Save this API key — it cannot be retrieved again.',
+        };
+    });
 }
 //# sourceMappingURL=orgs.js.map

package/dist/api/routes/orgs.js.map

@@ -1 +1 @@
-{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../../src/api/routes/orgs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAwB;IACtD,yDAAyD;IACzD,OAAO,CAAC,IAAI,CAET,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,sFAAsF,EACtF,CAAC,IAAI,EAAE,IAAI,CAAC,CACb,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,mDAAmD;SAC1D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../../src/api/routes/orgs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAwB;IACtD,mCAAmC;IACnC,OAAO,CAAC,IAAI,CAET,UAAU,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxE,MAAM,KAAK,GAAI,OAAe,CAAC,KAAK,CAAC;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,yGAAyG,EACzG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CACvB,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,mDAAmD;SAC1D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sBAAsB;IACtB,OAAO,CAAC,GAAG,CACT,UAAU,EACV,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAI,OAAe,CAAC,KAAK,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,yFAAyF,EACzF,CAAC,KAAK,CAAC,EAAE,CAAC,CACX,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,iBAAiB;IACjB,OAAO,CAAC,IAAI,CAGV,4BAA4B,EAC5B,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,KAAK,GAAI,OAAe,CAAC,KAAK,CAAC;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,2FAA2F,EAC3F,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CACxB,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,mDAAmD;SAC1D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/api/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAOA,wBAAsB,eAAe;;;GA2BpC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAQA,wBAAsB,eAAe;;;GA4BpC"}

package/dist/api/server.js

@@ -4,6 +4,7 @@ import { config } from '../config.js';
 import { orgRoutes } from './routes/orgs.js';
 import { accountRoutes } from './routes/accounts.js';
 import { messageRoutes } from './routes/messages.js';
+import { authRoutes } from './routes/auth.js';
 export async function createApiServer() {
     const fastify = Fastify({
         logger: true,
@@ -12,6 +13,7 @@ export async function createApiServer() {
     // Health check
     fastify.get('/health', async () => ({ status: 'ok' }));
     // Routes
+    await fastify.register(authRoutes);
     await fastify.register(orgRoutes);
     await fastify.register(accountRoutes);
     await fastify.register(messageRoutes);

package/dist/api/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7B,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvD,SAAS;IACT,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;gBACrB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7B,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvD,SAAS;IACT,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;gBACrB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/config.d.ts

@@ -0,0 +1,9 @@
+export interface CliConfig {
+    api_url: string;
+    session_token?: string;
+    email?: string;
+}
+export declare function loadConfig(): CliConfig;
+export declare function saveConfig(config: CliConfig): void;
+export declare function clearSession(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/cli/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,UAAU,IAAI,SAAS,CAWtC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAGlD;AAED,wBAAgB,YAAY,IAAI,IAAI,CAKnC"}

package/dist/cli/config.js

@@ -0,0 +1,28 @@
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+const CONFIG_DIR = path.join(os.homedir(), '.agentmailbox');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+export function loadConfig() {
+    try {
+        const raw = fs.readFileSync(CONFIG_FILE, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return {
+            api_url: process.env.AGENT_EMAIL_API_URL ||
+                'https://agent-email-api-production.up.railway.app',
+        };
+    }
+}
+export function saveConfig(config) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2) + '\n');
+}
+export function clearSession() {
+    const config = loadConfig();
+    delete config.session_token;
+    delete config.email;
+    saveConfig(config);
+}
+//# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAQzD,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EACL,OAAO,CAAC,GAAG,CAAC,mBAAmB;gBAC/B,mDAAmD;SACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAiB;IAC1C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,aAAa,CAAC;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC;IACpB,UAAU,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC"}