@fleox-agent-crm/agentcrm 0.3.0 → 0.3.1

package/dist/agent/chunks/{api-B6OqNVWp.mjs → api-Cz0Ubj-B.mjs}

@@ -89,9 +89,10 @@ export {
   disabledFromDoc as d,
   builtinModule as e,
   MODULE_CATEGORIES as f,
-  RUNTIME_MODULES as g,
-  RUNTIME_DIR as h,
+  compareVersions as g,
+  RUNTIME_MODULES as h,
   isCompatibleApiVersion as i,
-  RUNTIME_GLOBAL as j,
+  RUNTIME_DIR as j,
+  RUNTIME_GLOBAL as k,
   modules as m
 };

package/dist/agent/chunks/{appearance-BaShelzt.mjs → appearance-BloHbiLA.mjs}

@@ -4,7 +4,7 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { m as mixHex, D as DEFAULT_ACCENT, r as resolveAppearance, A as APPEARANCE_DOC_ID, a as DEFAULT_APPEARANCE, v as validateAppearancePatch, b as validateImageDataUrl, c as APPEARANCE_KEYS } from "./schema-7-4-qtSS.mjs";
+import { m as mixHex, D as DEFAULT_ACCENT, r as resolveAppearance, A as APPEARANCE_DOC_ID, a as DEFAULT_APPEARANCE, v as validateAppearancePatch, b as validateImageDataUrl, c as APPEARANCE_KEYS } from "./schema-DnLj8dUO.mjs";
 import { getExternalTheme } from "./themes-DPZFv3yc.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
 import { extensionDocOf, extensionDocsOf } from "./store-5gqRSKXg.mjs";

package/dist/agent/chunks/{automations-BWrvLqP6.mjs → automations-DwWruxmu.mjs}

@@ -8,13 +8,13 @@ import { toIsoDate, recordLabel, formatFieldValue, normalizeEmail } from "./fiel
 import { n as newId } from "./ids-CvnmrMJX.mjs";
 import { plugins } from "./pluginRegistry-DyHtlkcr.mjs";
 import { r as resolveField, m as matchesFilter } from "./query-C5nJB_3C.mjs";
-import { queryContext, setRecordOwner, updateRecord } from "./records-DoqiT9xR.mjs";
-import { getSettings } from "./settings-BtvR_jdm.mjs";
+import { queryContext, setRecordOwner, updateRecord } from "./records-DcHFelq5.mjs";
+import { getSettings } from "./settings-Di8nzNEL.mjs";
 import { userOf, automationRunsOf, asDoc, requireRecord, requireObject, automationsOf, objectOf, recordsOf, thaw, recordOf, usersOf } from "./store-5gqRSKXg.mjs";
 import { F as FILTER_OPS } from "../agentcrm.mjs";
 import { lastActivityAt, addNote, createTask } from "./activities-Cj_SIOay.mjs";
 import { OpsError, assertCan } from "./context-CxFfqS4D.mjs";
-import { pipelineOfRecord } from "./pipelines-DCdRBNBV.mjs";
+import { pipelineOfRecord } from "./pipelines-BAKpPk1w.mjs";
 import { getAutomationAction, listAutomationActions } from "./extensionActions-D2HtpQz4.mjs";
 import { registerAutomationAction, subscribeAutomationActions } from "./extensionActions-D2HtpQz4.mjs";
 import "./standardObjects-CheqfDqa.mjs";

package/dist/agent/chunks/{backup-ClSmxmFZ.mjs → backup-W3CjgkAJ.mjs}

@@ -7,7 +7,7 @@ const __dirname = __acrmDirname(__filename);
 import { J as JSZip } from "./index-w03ReRs4.mjs";
 import { F as FILE_ID_RE } from "./ids-u-noYcy5.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { exportJson, importJson } from "./exportCsv-B5hRvkNm.mjs";
+import { exportJson, importJson, planImportJson } from "./exportCsv-C6e6XEmB.mjs";
 import { filesOf } from "./store-5gqRSKXg.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";
@@ -15,11 +15,11 @@ import "events";
 import "buffer";
 import "util";
 import "./pluginRegistry-DyHtlkcr.mjs";
-import "./papaparse-DjBYnQM2.mjs";
+import "./papaparse-Df7i1dHr.mjs";
 import "./fields-B0bitgmr.mjs";
 import "./query-C5nJB_3C.mjs";
 import "./types-BOy9PUl7.mjs";
-import "./records-DoqiT9xR.mjs";
+import "./records-DcHFelq5.mjs";
 import "./ids-CvnmrMJX.mjs";
 import "./standardObjects-CheqfDqa.mjs";
 import "./relations-B9TynBmA.mjs";
@@ -94,10 +94,23 @@ async function readBackupZipInfo(input) {
   const files = Object.keys(zip.files).filter((p) => p.startsWith(BACKUP_FILES_DIR) && metaIds.has(p.slice(BACKUP_FILES_DIR.length, -".bin".length))).length;
   return { data, files };
 }
+async function planBackupZip(ctx, input, opts = {}) {
+  assertCan(ctx, "settings.write");
+  let info;
+  try {
+    info = await readBackupZipInfo(input);
+  } catch (err) {
+    if (err instanceof SyntaxError) throw new OpsError("validation", `${BACKUP_DATA_FILE} is not valid JSON.`);
+    throw err;
+  }
+  if (info.files && !ctx.store.files) throw new OpsError("invalid", `The "${ctx.store.kind}" backend can't store files: restore the data JSON only.`);
+  return { ...planImportJson(ctx, info.data, opts), files: info.files, ...info.data.exportedAt ? { exportedAt: info.data.exportedAt } : {} };
+}
 export {
   BACKUP_DATA_FILE,
   BACKUP_FILES_DIR,
   exportBackupZip,
   importBackupZip,
+  planBackupZip,
   readBackupZipInfo
 };

package/dist/agent/chunks/{compact-CsFPaAAq.mjs → compact-BGHI92tm.mjs}

@@ -6,8 +6,8 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { assertCan } from "./context-CxFfqS4D.mjs";
 import { b as fileCleanupMutations } from "./relations-B9TynBmA.mjs";
-import { purgeFiles } from "./files-q8Xu5bft.mjs";
-import { hardDeleteMutations } from "./records-DoqiT9xR.mjs";
+import { purgeFiles } from "./files-D1daDgY0.mjs";
+import { hardDeleteMutations } from "./records-DcHFelq5.mjs";
 import { recordsOf, activitiesOf, automationRunsOf } from "./store-5gqRSKXg.mjs";
 import "./pluginRegistry-DyHtlkcr.mjs";
 import "./fields-B0bitgmr.mjs";

package/dist/agent/chunks/{exportCsv-B5hRvkNm.mjs → exportCsv-C6e6XEmB.mjs}

@@ -4,12 +4,12 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { P as Papa } from "./papaparse-DjBYnQM2.mjs";
+import { P as Papa } from "./papaparse-Df7i1dHr.mjs";
 import { formatAddress, formatFieldValue } from "./fields-B0bitgmr.mjs";
 import { a as applySorts, b as applyFilters, r as resolveField, g as getRecordValue } from "./query-C5nJB_3C.mjs";
 import { COLLECTIONS } from "./types-BOy9PUl7.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { queryContext } from "./records-DoqiT9xR.mjs";
+import { queryContext } from "./records-DcHFelq5.mjs";
 import { requireObject, recordsOf, userOf } from "./store-5gqRSKXg.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";
@@ -62,6 +62,40 @@ function exportJson(ctx, opts = {}) {
     collections: Object.fromEntries(wanted.map((c) => [c, ctx.store.list(c)]))
   };
 }
+function planImportJson(ctx, data, opts = {}) {
+  assertCan(ctx, "settings.write");
+  if (data?.format !== "agentcrm-export") throw new OpsError("validation", "Not an AgentCRM JSON export.");
+  const mode = opts.mode ?? "merge";
+  const plan = { mode, collections: {}, added: 0, overwritten: 0, deleted: 0, warnings: [] };
+  for (const c of COLLECTIONS) {
+    const docs = data.collections[c];
+    if (!docs) continue;
+    const ids = new Set(docs.filter((d) => d && typeof d.id === "string").map((d) => d.id));
+    let added = 0;
+    let overwritten = 0;
+    for (const id of ids) ctx.store.get(c, id) ? overwritten++ : added++;
+    const deleted = mode === "replace" ? ctx.store.list(c).filter((d) => !ids.has(d.id)).length : 0;
+    plan.collections[c] = { added, overwritten, deleted };
+    plan.added += added;
+    plan.overwritten += overwritten;
+    plan.deleted += deleted;
+  }
+  const here = ctx.store.get("settings", "general");
+  const there = (data.collections.settings ?? []).find((d) => d.id === "general");
+  if (here?.name && there?.name && here.name !== there.name) {
+    plan.sourceName = there.name;
+    plan.warnings.push(`This backup comes from another CRM ("${there.name}"): its settings, users and schema replace the ones with the same ids here (this CRM becomes "${there.name}").`);
+  }
+  const users = data.collections.users ?? [];
+  const replacedUsers = users.filter((u) => {
+    const cur = ctx.store.get("users", u.id);
+    return cur?.email && u.email && cur.email.toLowerCase() !== u.email.toLowerCase();
+  });
+  if (replacedUsers.length) {
+    plan.warnings.push(`${replacedUsers.length} user(s) of this CRM are replaced by different people with the same id: ${replacedUsers.map((u) => `${String(ctx.store.get("users", u.id).email)} → ${String(u.email)}`).join(", ")}.`);
+  }
+  return plan;
+}
 async function importJson(ctx, data, opts = {}) {
   assertCan(ctx, "settings.write");
   if (data?.format !== "agentcrm-export") throw new OpsError("validation", "Not an AgentCRM JSON export.");
@@ -91,5 +125,6 @@ async function importJson(ctx, data, opts = {}) {
 export {
   exportCsv,
   exportJson,
-  importJson
+  importJson,
+  planImportJson
 };

package/dist/agent/chunks/{extCheck--7lmVvl7.mjs → extCheck-GgHG1dYB.mjs}

@@ -4,8 +4,8 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { b as EXTENSION_MIN_API_VERSION, E as EXTENSION_API_VERSION, a as EXTENSION_LIMITS, R as RUNTIME_SPECIFIERS } from "./api-B6OqNVWp.mjs";
-import { bundleImports, validateManifest, ExtensionPackageError } from "./package-DWbn3t2R.mjs";
+import { b as EXTENSION_MIN_API_VERSION, E as EXTENSION_API_VERSION, a as EXTENSION_LIMITS, R as RUNTIME_SPECIFIERS } from "./api-Cz0Ubj-B.mjs";
+import { bundleImports, validateManifest, ExtensionPackageError } from "./package-B7mI6HGi.mjs";
 import { n as nodeImportBundle } from "../agentcrm.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
@@ -77,26 +77,31 @@ async function checkExtension(raw, opts = {}) {
   }
   if (manifest?.style && style === void 0) errors.push({ code: "missingStyle", message: 'manifest.json declares "style": "style.css" but there is no style.css.', hint: "Add src/style.css (projects) or style.css next to bundle.js." });
   if (style !== void 0 && bytes(style) > EXTENSION_LIMITS.style) errors.push({ code: "tooLarge", message: `style.css is larger than ${EXTENSION_LIMITS.style / 1024} KB.` });
+  if (style !== void 0) cssWarnings(style, "style.css", warnings);
   for (const f of raw.ignored) warnings.push({ code: "ignored", message: `${f} is not part of the package (only manifest.json, bundle.js and style.css are).${/style\.css$/.test(f) ? ' Declare "style": "style.css" in manifest.json to ship it.' : ""}` });
   if (!errors.length && manifest && bundle) await loadInSandbox(report, manifest, { "bundle.js": bundle, ...style ? { "style.css": style } : {} }, opts);
   report.valid = errors.length === 0;
   return report;
 }
+function cssWarnings(css, label, warnings) {
+  if (/@import\s+(?:url\(\s*)?["']?\s*(?:https?:)?\/\//i.test(css)) warnings.push({ code: "css", message: `${label} @imports a remote stylesheet: every user's browser would fetch it.`, hint: `Inline the CSS; for fonts set the theme's "font" (the CRM loads Google Fonts itself).` });
+  if (/<\/?(?:style|script)/i.test(css)) warnings.push({ code: "css", message: `${label} contains <style> / <script> tags: it must be plain CSS.` });
+}
 async function loadInSandbox(report, manifest, files, opts) {
   const importBundle = await nodeImportBundle();
   const [{ createMemoryStore }, { createOpsContext }, { createPluginRegistry, plugins }, { seedCrm }, { usersOf }, loader, registry, aiTools, actions, features, themes, schema] = await Promise.all([
     import("./memory-WNR3VHUJ.mjs"),
     import("./context-CxFfqS4D.mjs"),
     import("./pluginRegistry-DyHtlkcr.mjs"),
-    import("./seed-CugPGYZL.mjs"),
+    import("./seed-6MRmQQBR.mjs"),
     import("./store-5gqRSKXg.mjs"),
-    import("./loader-C9nm3iwx.mjs"),
-    import("./registry-Ceexawxl.mjs"),
-    import("./tools-Bew8lxKx.mjs"),
+    import("./loader-MPD9iAvh.mjs"),
+    import("./registry-COfJrSmg.mjs"),
+    import("./tools-iSH-yMpl.mjs"),
     import("./extensionActions-D2HtpQz4.mjs"),
-    import("./featureRegistry-C9nbVShp.mjs"),
+    import("./featureRegistry-DSsZbhrh.mjs"),
     import("./themes-DPZFv3yc.mjs"),
-    import("./schema-7-4-qtSS.mjs").then((n) => n.s)
+    import("./schema-DnLj8dUO.mjs").then((n) => n.s)
   ]);
   const store = createMemoryStore();
   await store.ready();
@@ -107,7 +112,7 @@ async function loadInSandbox(report, manifest, files, opts) {
   const now = Date.now();
   const doc = { id: manifest.id, kind: manifest.kind, manifest, enabled: true, files, installedAt: now, updatedAt: now };
   await store.write([{ op: "set", collection: "extensions", doc }]);
-  const { BUILTIN_MODULES } = await import("./api-B6OqNVWp.mjs").then((n) => n.m);
+  const { BUILTIN_MODULES } = await import("./api-Cz0Ubj-B.mjs").then((n) => n.m);
   const missingDeps = (manifest.dependsOn ?? []).filter((d) => !BUILTIN_MODULES.some((b) => b.id === d));
   for (const d of missingDeps) report.warnings.push({ code: "dependency", message: `Depends on "${d}", which is not a built-in module: install that extension first on the real CRM.` });
   const toolsBefore = new Set(aiTools.listAiTools().map((t) => t.name));
@@ -131,6 +136,8 @@ async function loadInSandbox(report, manifest, files, opts) {
       const { errors } = schema.validateAppearancePatch(theme.appearance);
       for (const e of errors) report.errors.push({ code: "appearance", message: `Theme appearance: ${e}` });
       for (const k of ["logo", "favicon", "themeId", "preset"]) if (k in (theme.appearance ?? {})) report.warnings.push({ code: "appearance", message: `Theme appearance sets "${k}" — themes should leave it to the workspace.` });
+      const ownCss = (theme.css ?? "").replace(files["style.css"] ?? "", "");
+      if (ownCss.trim()) cssWarnings(ownCss, "The theme's css", report.warnings);
       report.theme = { name: theme.name, appearance: { ...theme.appearance }, css: bytes(theme.css) };
       return;
     }

package/dist/agent/chunks/{extPackage-BGl5Oqs8.mjs → extPackage-DuZ6GZhp.mjs}

@@ -6,8 +6,8 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { existsSync, statSync, readFileSync } from "node:fs";
 import { resolve, join } from "node:path";
-import { a as EXTENSION_LIMITS } from "./api-B6OqNVWp.mjs";
-import { validatePackage, ExtensionPackageError } from "./package-DWbn3t2R.mjs";
+import { a as EXTENSION_LIMITS } from "./api-Cz0Ubj-B.mjs";
+import { validatePackage, ExtensionPackageError } from "./package-B7mI6HGi.mjs";
 import { C as CliError } from "../agentcrm.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";

package/dist/agent/chunks/{extScaffold-DqxI7R1e.mjs → extScaffold-Aqyjf1nr.mjs}

@@ -6,8 +6,8 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { existsSync, mkdirSync, writeFileSync, copyFileSync } from "node:fs";
 import { join, dirname } from "node:path";
-import { E as EXTENSION_API_VERSION, R as RUNTIME_SPECIFIERS } from "./api-B6OqNVWp.mjs";
-import { EXTENSION_ID_RE, RESERVED_EXTENSION_IDS } from "./package-DWbn3t2R.mjs";
+import { E as EXTENSION_API_VERSION, R as RUNTIME_SPECIFIERS } from "./api-Cz0Ubj-B.mjs";
+import { EXTENSION_ID_RE, RESERVED_EXTENSION_IDS } from "./package-B7mI6HGi.mjs";
 import { C as CliError, r as readVersionInfo, p as packageRoot, o as ownPackageRoot, P as PACKAGE_NAME } from "../agentcrm.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
@@ -243,7 +243,7 @@ Or upload the ZIP in the admin: Settings → Modules → Installed extensions.
 - \`types/agentcrm-runtime.d.ts\` — the runtime API typings (copied from the CLI; refresh with \`${cli} ext new ${kind} ${id} --dir /tmp/x\` and copy the file).
 - \`vite.config.ts\` — keeps react, react-i18next, lucide-react and @agent-crm/runtime external (the admin provides them).
 
-Docs: https://github.com/fleox/agentcrm/blob/main/docs/${kind === "module" ? "creating-a-module.md" : "creating-a-theme.md"}
+Docs: https://github.com/fleox/agentcrm/blob/master/docs/${kind === "module" ? "creating-a-module.md" : "creating-a-theme.md"}
 `;
 }
 function scaffoldExtension(opts) {

package/dist/agent/chunks/{extensions-BP1k60md.mjs → extensions-Bp72uZ9a.mjs}

@@ -4,10 +4,10 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { a as EXTENSION_LIMITS, i as isCompatibleApiVersion } from "./api-B6OqNVWp.mjs";
-import { validatePackage, ExtensionPackageError } from "./package-DWbn3t2R.mjs";
+import { a as EXTENSION_LIMITS, g as compareVersions, i as isCompatibleApiVersion } from "./api-Cz0Ubj-B.mjs";
+import { validatePackage, ExtensionPackageError } from "./package-B7mI6HGi.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { moduleStates, setModuleEnabled } from "./modules-CqdVQVJb.mjs";
+import { moduleStates, setModuleEnabled } from "./modules-clWdE-K2.mjs";
 import { extensionDocOf, asDoc, extensionDocsOf } from "./store-5gqRSKXg.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
@@ -16,7 +16,7 @@ import "events";
 import "buffer";
 import "util";
 import "./pluginRegistry-DyHtlkcr.mjs";
-import "./settings-BtvR_jdm.mjs";
+import "./settings-Di8nzNEL.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
 const bytes = (s) => s ? new TextEncoder().encode(s).length : 0;
 function summarizeExtension(doc) {
@@ -90,6 +90,11 @@ async function installExtension(ctx, pkg, opts = {}) {
       warnings.push(`Installed disabled: it needs ${missing.join(", ")} (${missing.map((d) => states.has(d) ? "disabled" : "not installed").join(", ")}).`);
     }
   }
+  if (existing) {
+    const cmp = compareVersions(manifest.version, existing.manifest.version);
+    if (cmp < 0) warnings.push(`Downgrade: ${existing.manifest.version} → ${manifest.version}.`);
+    else if (cmp === 0) warnings.push(`Version ${manifest.version} is already installed: its files are replaced (bump "version" for a new release).`);
+  }
   const now = ctx.now();
   const doc = {
     id: manifest.id,
@@ -122,11 +127,19 @@ async function setExtensionEnabled(ctx, id, enabled, opts = {}) {
     await setModuleEnabled(ctx, id, enabled, opts);
   } else if (doc.enabled !== enabled) {
     const mutations = [{ op: "patch", collection: "extensions", id, fields: { enabled, updatedAt: ctx.now() } }];
-    if (!enabled && ctx.store.get("config", "appearance")?.themeId === id) mutations.push({ op: "patch", collection: "config", id: "appearance", fields: { themeId: void 0 } });
+    if (!enabled) mutations.push(...clearThemeSelection(ctx, id));
     await ctx.store.write(mutations, { message: `${enabled ? "Enable" : "Disable"} theme ${id}` });
   }
   return summarizeExtension(requireExtension(ctx, id));
 }
+function clearThemeSelection(ctx, id) {
+  const appearance = ctx.store.get("config", "appearance");
+  if (!appearance) return [];
+  const fields = {};
+  if (appearance.themeId === id) fields.themeId = void 0;
+  if (appearance.preset === id) fields.preset = void 0;
+  return Object.keys(fields).length ? [{ op: "patch", collection: "config", id: "appearance", fields }] : [];
+}
 async function uninstallExtension(ctx, id, opts = {}) {
   assertCan(ctx, "extensions.write");
   const doc = requireExtension(ctx, id);
@@ -135,7 +148,7 @@ async function uninstallExtension(ctx, id, opts = {}) {
     if (dependents.length) throw new OpsError("conflict", `${dependents.map((d) => `"${d.name}"`).join(", ")} depend${dependents.length > 1 ? "" : "s"} on "${doc.manifest.name}". Disable or uninstall ${dependents.length > 1 ? "them" : "it"} first.`, { dependents: dependents.map((d) => d.id) });
   }
   const mutations = [{ op: "delete", collection: "extensions", id }];
-  if (ctx.store.get("config", "appearance")?.themeId === id) mutations.push({ op: "patch", collection: "config", id: "appearance", fields: { themeId: void 0 } });
+  mutations.push(...clearThemeSelection(ctx, id));
   await ctx.store.write(mutations, { message: `Uninstall extension ${id}` });
   ctx.log?.(`extension ${id} uninstalled`);
   return { id, removed: true };

package/dist/agent/chunks/{featureRegistry-C9nbVShp.mjs → featureRegistry-DSsZbhrh.mjs}

@@ -6,12 +6,12 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { r as reactExports } from "./index-Bnmav-Oh.mjs";
 import { r as registerI18nNamespace } from "./index-BM8qeGOb.mjs";
-import { moduleStates } from "./modules-CqdVQVJb.mjs";
+import { moduleStates } from "./modules-clWdE-K2.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
-import "./api-B6OqNVWp.mjs";
+import "./api-Cz0Ubj-B.mjs";
 import "./context-CxFfqS4D.mjs";
 import "./pluginRegistry-DyHtlkcr.mjs";
-import "./settings-BtvR_jdm.mjs";
+import "./settings-Di8nzNEL.mjs";
 import "./store-5gqRSKXg.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
 let builtins = [];

package/dist/agent/chunks/{files-q8Xu5bft.mjs → files-D1daDgY0.mjs}

@@ -11,7 +11,7 @@ import { m as mapLimit } from "./http-Bk9ICb7I.mjs";
 import { assertCan, OpsError, actorId } from "./context-CxFfqS4D.mjs";
 import { s as sameTarget, e as fileFieldIds, g as fileIdsIn, f as fileTargetPatch, h as referencedFileIds } from "./relations-B9TynBmA.mjs";
 import { timelineScope } from "./activities-Cj_SIOay.mjs";
-import { updateRecord } from "./records-DoqiT9xR.mjs";
+import { updateRecord } from "./records-DcHFelq5.mjs";
 import { fileOf, requireFile, filesOf, recordOf, activitiesOf, settingsDoc, asDoc, requireRecord, objectOf, requireObject, recordsOf } from "./store-5gqRSKXg.mjs";
 import "./index-BM8qeGOb.mjs";
 import "./pluginRegistry-DyHtlkcr.mjs";

package/dist/agent/chunks/{forms-BKU5F9WF.mjs → forms-BfuWaQjA.mjs}

@@ -8,7 +8,7 @@ import { normalizeEmail, isEmptyFieldValue, normalizeDomain, formatFieldValue, r
 import { n as newId } from "./ids-CvnmrMJX.mjs";
 import { addActivity } from "./activities-Cj_SIOay.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { createRecord, updateRecord, queryContext } from "./records-DoqiT9xR.mjs";
+import { createRecord, updateRecord, queryContext } from "./records-DcHFelq5.mjs";
 import { formsOf, requireObject, asDoc, objectOf, thaw, userOf, recordsOf, activitiesOf } from "./store-5gqRSKXg.mjs";
 import "./query-C5nJB_3C.mjs";
 import "../agentcrm.mjs";

package/dist/agent/chunks/{importCsv-DmE_sBch.mjs → importCsv-LVmMTaWU.mjs}

@@ -4,12 +4,12 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { P as Papa } from "./papaparse-DjBYnQM2.mjs";
+import { P as Papa } from "./papaparse-Df7i1dHr.mjs";
 import { findOption, normalizeEmail, coerceFieldValue, recordLabel, normalizeDomain } from "./fields-B0bitgmr.mjs";
 import { n as newId } from "./ids-CvnmrMJX.mjs";
 import { c as camelId } from "./utils-DmI8FtXP.mjs";
 import { assertCan, OpsError, actorId, emit } from "./context-CxFfqS4D.mjs";
-import { prepareRecordFields, recordPatchMutation } from "./records-DoqiT9xR.mjs";
+import { prepareRecordFields, recordPatchMutation } from "./records-DcHFelq5.mjs";
 import { requireObject, thaw, recordsOf, usersOf, asDoc, objectOf } from "./store-5gqRSKXg.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";

package/dist/agent/chunks/{install-CpHoUFtL.mjs → install-CbpD_7gd.mjs}

@@ -124,7 +124,7 @@ async function checkPlan(plan) {
         }
       } catch (err) {
         const e = err;
-        data = { ok: false, detail: e.name === "PassphraseError" ? `wrong passphrase in ${plan.passphraseAccount}` : e.message, existing: false };
+        data = { ok: false, detail: e.name === "PassphraseError" ? `wrong passphrase in ${plan.passphraseAccount}` : e.message, existing: e.name === "PassphraseError" };
       }
     }
   } else if (plan.runtime.backend === "git-json") {
@@ -153,8 +153,8 @@ async function runInstall(plan, onStep) {
       await store.ready();
       const { createOpsContext } = await import("./context-CxFfqS4D.mjs");
       const { createPluginRegistry } = await import("./pluginRegistry-DyHtlkcr.mjs");
-      const { seedCrm } = await import("./seed-CugPGYZL.mjs");
-      const { setConfigDoc } = await import("./settings-BtvR_jdm.mjs");
+      const { seedCrm } = await import("./seed-6MRmQQBR.mjs");
+      const { setConfigDoc } = await import("./settings-Di8nzNEL.mjs");
       const system = createOpsContext(store, null, { plugins: createPluginRegistry() });
       onStep(`Seeding the CRM${plan.demo ? " (with demo data)" : ""}`);
       const identity = plan.backend === "journal" ? null : await store.identity().catch(() => null);

package/dist/agent/chunks/{loader-C9nm3iwx.mjs → loader-MPD9iAvh.mjs}

@@ -4,25 +4,25 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { h as RUNTIME_DIR, g as RUNTIME_MODULES, i as isCompatibleApiVersion, j as RUNTIME_GLOBAL } from "./api-B6OqNVWp.mjs";
-import { rewriteRuntimeImports, fingerprint, bundleImports } from "./package-DWbn3t2R.mjs";
-import { listLoadedExtensions, deactivateExtension, getLoadedExtension, setExtensionStatus, activateExtension } from "./registry-Ceexawxl.mjs";
+import { j as RUNTIME_DIR, h as RUNTIME_MODULES, i as isCompatibleApiVersion, k as RUNTIME_GLOBAL } from "./api-Cz0Ubj-B.mjs";
+import { rewriteRuntimeImports, fingerprint, bundleImports } from "./package-B7mI6HGi.mjs";
+import { listLoadedExtensions, deactivateExtension, getLoadedExtension, setExtensionStatus, activateExtension } from "./registry-COfJrSmg.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";
 import "events";
 import "buffer";
 import "util";
-import "./featureRegistry-C9nbVShp.mjs";
+import "./featureRegistry-DSsZbhrh.mjs";
 import "./index-Bnmav-Oh.mjs";
 import "./index-BM8qeGOb.mjs";
-import "./modules-CqdVQVJb.mjs";
+import "./modules-clWdE-K2.mjs";
 import "./context-CxFfqS4D.mjs";
 import "./pluginRegistry-DyHtlkcr.mjs";
-import "./settings-BtvR_jdm.mjs";
+import "./settings-Di8nzNEL.mjs";
 import "./store-5gqRSKXg.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
-import "./tools-Bew8lxKx.mjs";
+import "./tools-iSH-yMpl.mjs";
 import "./fields-B0bitgmr.mjs";
 import "./query-C5nJB_3C.mjs";
 import "../agentcrm.mjs";
@@ -38,23 +38,23 @@ import "./activities-Cj_SIOay.mjs";
 import "./ids-CvnmrMJX.mjs";
 import "./relations-B9TynBmA.mjs";
 import "./dedupe-BepmsaHv.mjs";
-import "./importCsv-DmE_sBch.mjs";
-import "./papaparse-DjBYnQM2.mjs";
+import "./importCsv-LVmMTaWU.mjs";
+import "./papaparse-Df7i1dHr.mjs";
 import "./utils-DmI8FtXP.mjs";
-import "./records-DoqiT9xR.mjs";
+import "./records-DcHFelq5.mjs";
 import "./standardObjects-CheqfDqa.mjs";
-import "./pipelines-DCdRBNBV.mjs";
-import "./reports-BB59N6ke.mjs";
-import "./schema-DlHt2PxI.mjs";
-import "./automations-BWrvLqP6.mjs";
+import "./pipelines-BAKpPk1w.mjs";
+import "./reports-BACHGccj.mjs";
+import "./schema-C4lSslXv.mjs";
+import "./automations-DwWruxmu.mjs";
 import "./extensionActions-D2HtpQz4.mjs";
-import "./forms-BKU5F9WF.mjs";
-import "./schema-7-4-qtSS.mjs";
-import "./appearance-BaShelzt.mjs";
+import "./forms-BfuWaQjA.mjs";
+import "./schema-DnLj8dUO.mjs";
+import "./appearance-BloHbiLA.mjs";
 import "./themes-DPZFv3yc.mjs";
-import "./extensions-BP1k60md.mjs";
+import "./extensions-Bp72uZ9a.mjs";
 import "./files-CjsPJSR6.mjs";
-import "./files-q8Xu5bft.mjs";
+import "./files-D1daDgY0.mjs";
 import "./index-RCmo-uld.mjs";
 import "./http-Bk9ICb7I.mjs";
 async function prepareRuntime(specifiers) {
@@ -147,7 +147,7 @@ function syncExtensions(store, opts = {}) {
         report.loaded.push(doc.id);
       } catch (err) {
         const error = err instanceof Error ? err : new Error(String(err));
-        console.error(`[extensions] ${doc.id} failed to load:`, error);
+        if (!opts.onError) console.error(`[extensions] ${doc.id} failed to load:`, error);
         setExtensionStatus(doc, "error", error.message);
         const st = getLoadedExtension(doc.id);
         if (st) st.fingerprint = fp;

package/dist/agent/chunks/{modules-CqdVQVJb.mjs → modules-clWdE-K2.mjs}

@@ -4,9 +4,9 @@ import { dirname as __acrmDirname } from "node:path";
 const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
-import { c as REQUIRED_MODULES, d as disabledFromDoc, B as BUILTIN_MODULES, M as MODULES_CONFIG_ID, i as isCompatibleApiVersion, e as builtinModule } from "./api-B6OqNVWp.mjs";
+import { c as REQUIRED_MODULES, d as disabledFromDoc, B as BUILTIN_MODULES, M as MODULES_CONFIG_ID, i as isCompatibleApiVersion, e as builtinModule } from "./api-Cz0Ubj-B.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { assertNoSecrets } from "./settings-BtvR_jdm.mjs";
+import { assertNoSecrets } from "./settings-Di8nzNEL.mjs";
 import { extensionDocsOf, extensionDocOf } from "./store-5gqRSKXg.mjs";
 import "./pluginRegistry-DyHtlkcr.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
@@ -142,6 +142,30 @@ function getModuleConfig(ctx, id) {
   return configDoc(ctx.store)?.config?.[id];
 }
 const MAX_MODULE_CONFIG = 256 * 1024;
+const MODULE_SECRET_KEYS = /* @__PURE__ */ new Set([
+  "apikey",
+  "apisecret",
+  "secret",
+  "secretkey",
+  "clientsecret",
+  "privatekey",
+  "accesstoken",
+  "authtoken",
+  "bearertoken",
+  "refreshtoken",
+  "password",
+  "token",
+  "webhooksecret"
+]);
+function assertNoModuleSecrets(value, path = "") {
+  if (!value || typeof value !== "object") return;
+  for (const [k, v] of Object.entries(value)) {
+    if (MODULE_SECRET_KEYS.has(k.toLowerCase().replace(/[_-]/g, "")) && v !== "" && v != null) {
+      throw new OpsError("validation", `Refusing to store the secret "${path}${k}" in the module configuration: every CRM user can read it. Keep secrets out of the CRM data.`);
+    }
+    assertNoModuleSecrets(v, `${path}${k}.`);
+  }
+}
 async function setModuleConfig(ctx, id, value) {
   assertCan(ctx, "modules.write");
   assertKnownModule(ctx.store, id);
@@ -155,6 +179,7 @@ async function setModuleConfig(ctx, id, value) {
     if (json === void 0) throw new OpsError("validation", "Module configuration must be JSON-serialisable.");
     if (json.length > MAX_MODULE_CONFIG) throw new OpsError("validation", `Module configuration is larger than ${MAX_MODULE_CONFIG / 1024} KB.`);
     assertNoSecrets(value);
+    assertNoModuleSecrets(value);
   }
   const current = configDoc(ctx.store);
   const next = value === null || value === void 0 ? void 0 : JSON.parse(JSON.stringify(value));

package/dist/agent/chunks/{nodeImport-BPCt5uMu.mjs → nodeImport-ylfRDvqt.mjs}

@@ -8,8 +8,8 @@ import { mkdtemp, writeFile, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { resolve, join } from "node:path";
 import { pathToFileURL } from "node:url";
-import { g as RUNTIME_MODULES } from "./api-B6OqNVWp.mjs";
-import { rewriteRuntimeImports } from "./package-DWbn3t2R.mjs";
+import { h as RUNTIME_MODULES } from "./api-Cz0Ubj-B.mjs";
+import { rewriteRuntimeImports } from "./package-B7mI6HGi.mjs";
 import "./index-w03ReRs4.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";

package/dist/agent/chunks/{package-DWbn3t2R.mjs → package-B7mI6HGi.mjs}

@@ -5,7 +5,7 @@ const require2 = __acrmRequire(import.meta.url);
 const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { J as JSZip } from "./index-w03ReRs4.mjs";
-import { a as EXTENSION_LIMITS, R as RUNTIME_SPECIFIERS, i as isCompatibleApiVersion, b as EXTENSION_MIN_API_VERSION, E as EXTENSION_API_VERSION, B as BUILTIN_MODULES, f as MODULE_CATEGORIES } from "./api-B6OqNVWp.mjs";
+import { a as EXTENSION_LIMITS, R as RUNTIME_SPECIFIERS, i as isCompatibleApiVersion, b as EXTENSION_MIN_API_VERSION, E as EXTENSION_API_VERSION, B as BUILTIN_MODULES, f as MODULE_CATEGORIES } from "./api-Cz0Ubj-B.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";
 import "events";

package/dist/agent/chunks/{papaparse-DjBYnQM2.mjs → papaparse-Df7i1dHr.mjs}

@@ -6,24 +6,43 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { g as getDefaultExportFromCjs } from "./_commonjsHelpers-ClciMIcB.mjs";
 import require$$0 from "stream";
-var papaparse$1 = { exports: {} };
+function _mergeNamespaces(n, m) {
+  for (var i = 0; i < m.length; i++) {
+    const e = m[i];
+    if (typeof e !== "string" && !Array.isArray(e)) {
+      for (const k in e) {
+        if (k !== "default" && !(k in n)) {
+          const d = Object.getOwnPropertyDescriptor(e, k);
+          if (d) {
+            Object.defineProperty(n, k, d.get ? d : {
+              enumerable: true,
+              get: () => e[k]
+            });
+          }
+        }
+      }
+    }
+  }
+  return Object.freeze(Object.defineProperty(n, Symbol.toStringTag, { value: "Module" }));
+}
+var papaparse$2 = { exports: {} };
 /* @license
 Papa Parse
 v5.7.0
 https://github.com/mholt/PapaParse
 License: MIT
 */
-var papaparse = papaparse$1.exports;
+var papaparse$1 = papaparse$2.exports;
 var hasRequiredPapaparse;
 function requirePapaparse() {
-  if (hasRequiredPapaparse) return papaparse$1.exports;
+  if (hasRequiredPapaparse) return papaparse$2.exports;
   hasRequiredPapaparse = 1;
   (function(module, exports) {
     (function(root, factory) {
       {
         module.exports = factory();
       }
-    })(papaparse, function moduleFactory() {
+    })(papaparse$1, function moduleFactory() {
       var global = (function() {
         if (typeof self !== "undefined") {
           return self;
@@ -1275,11 +1294,16 @@ function requirePapaparse() {
       }
       return Papa2;
     });
-  })(papaparse$1);
-  return papaparse$1.exports;
+  })(papaparse$2);
+  return papaparse$2.exports;
 }
 var papaparseExports = requirePapaparse();
 const Papa = /* @__PURE__ */ getDefaultExportFromCjs(papaparseExports);
+const papaparse = /* @__PURE__ */ _mergeNamespaces({
+  __proto__: null,
+  default: Papa
+}, [papaparseExports]);
 export {
-  Papa as P
+  Papa as P,
+  papaparse as p
 };