@fleox-agent-crm/agentcrm 0.3.0 → 0.3.1

package/dist/agent/chunks/{tools-Bew8lxKx.mjs → tools-iSH-yMpl.mjs}

@@ -6,24 +6,24 @@ const __filename = __acrmPath(import.meta.url);
 const __dirname = __acrmDirname(__filename);
 import { recordLabel, normalizeEmail, formatFieldValue } from "./fields-B0bitgmr.mjs";
 import { r as resolveField } from "./query-C5nJB_3C.mjs";
-import { F as FILTER_OPS, A as ACTIVITY_TYPES, e as FIELD_TYPES } from "../agentcrm.mjs";
+import { F as FILTER_OPS, A as ACTIVITY_TYPES, a as FIELD_TYPES } from "../agentcrm.mjs";
 import { OpsError } from "./context-CxFfqS4D.mjs";
 import { listActivities, addNote, addActivity, createTask, completeTask, listTasks } from "./activities-Cj_SIOay.mjs";
 import { mergeRecords } from "./dedupe-BepmsaHv.mjs";
-import { importCsv } from "./importCsv-DmE_sBch.mjs";
-import { moveStage, forecast, listPipelines } from "./pipelines-DCdRBNBV.mjs";
-import { getRecord, searchRecords, listRecords, getRecordDetails, createRecord, updateRecord, deleteRecord, queryContext } from "./records-DoqiT9xR.mjs";
-import { runReport, REPORTS } from "./reports-BB59N6ke.mjs";
-import { describeSchema, createField } from "./schema-DlHt2PxI.mjs";
+import { importCsv } from "./importCsv-LVmMTaWU.mjs";
+import { moveStage, forecast, listPipelines } from "./pipelines-BAKpPk1w.mjs";
+import { getRecord, searchRecords, listRecords, getRecordDetails, createRecord, updateRecord, deleteRecord, queryContext } from "./records-DcHFelq5.mjs";
+import { runReport, REPORTS } from "./reports-BACHGccj.mjs";
+import { describeSchema, createField } from "./schema-C4lSslXv.mjs";
 import { objectOf, recordOf, userOf, activitiesOf, fileOf } from "./store-5gqRSKXg.mjs";
-import { ACTION_TYPES, TRIGGER_TYPES, listAutomationRuns, AUTOMATION_TEMPLATES, listAutomations, createAutomationFromTemplate, createAutomation, setAutomationEnabled, testAutomation, runScheduled } from "./automations-BWrvLqP6.mjs";
-import { listForms, ingestInbox } from "./forms-BKU5F9WF.mjs";
-import { B as BUTTON_STYLES, C as CONTRASTS, d as COLOR_MODES, S as SIDEBAR_STYLES, e as DENSITIES, R as RADII, N as NEUTRALS, F as FONTS } from "./schema-7-4-qtSS.mjs";
-import { listPresets, getAppearance, setAppearance, applyPreset } from "./appearance-BaShelzt.mjs";
-import { listExtensions, setExtensionEnabled } from "./extensions-BP1k60md.mjs";
-import { listModules, setModuleEnabled } from "./modules-CqdVQVJb.mjs";
+import { ACTION_TYPES, TRIGGER_TYPES, listAutomationRuns, AUTOMATION_TEMPLATES, listAutomations, createAutomationFromTemplate, createAutomation, setAutomationEnabled, testAutomation, runScheduled } from "./automations-DwWruxmu.mjs";
+import { listForms, ingestInbox } from "./forms-BfuWaQjA.mjs";
+import { B as BUTTON_STYLES, C as CONTRASTS, d as COLOR_MODES, S as SIDEBAR_STYLES, e as DENSITIES, R as RADII, N as NEUTRALS, F as FONTS } from "./schema-DnLj8dUO.mjs";
+import { listPresets, getAppearance, setAppearance, applyPreset } from "./appearance-BloHbiLA.mjs";
+import { listExtensions, setExtensionEnabled } from "./extensions-Bp72uZ9a.mjs";
+import { listModules, setModuleEnabled } from "./modules-clWdE-K2.mjs";
 import { inlineFileIds, formatBytes, fileKind } from "./files-CjsPJSR6.mjs";
-import { listFiles, fileUsage } from "./files-q8Xu5bft.mjs";
+import { listFiles, fileUsage } from "./files-D1daDgY0.mjs";
 import { l as labelOf } from "./relations-B9TynBmA.mjs";
 import "node:util";
 import "node:fs";
@@ -35,17 +35,17 @@ import "node:child_process";
 import "node:http";
 import "./pluginRegistry-DyHtlkcr.mjs";
 import "./ids-CvnmrMJX.mjs";
-import "./papaparse-DjBYnQM2.mjs";
+import "./papaparse-Df7i1dHr.mjs";
 import "./_commonjsHelpers-ClciMIcB.mjs";
 import "stream";
 import "./utils-DmI8FtXP.mjs";
 import "./standardObjects-CheqfDqa.mjs";
-import "./settings-BtvR_jdm.mjs";
+import "./settings-Di8nzNEL.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
 import "./extensionActions-D2HtpQz4.mjs";
 import "./themes-DPZFv3yc.mjs";
-import "./api-B6OqNVWp.mjs";
-import "./package-DWbn3t2R.mjs";
+import "./api-Cz0Ubj-B.mjs";
+import "./package-B7mI6HGi.mjs";
 import "./index-w03ReRs4.mjs";
 import "events";
 import "buffer";
@@ -824,18 +824,58 @@ function subscribeAiTools(listener) {
 function findTool(name) {
   return AI_TOOLS.find((t) => t.name === name) ?? extraTools.get(name);
 }
+function jsonTypeOf(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+function checkToolInput(schema, value, path) {
+  const types = schema.type === void 0 ? [] : Array.isArray(schema.type) ? schema.type : [schema.type];
+  let v = value;
+  if (types.length && v !== null && v !== void 0) {
+    const actual = jsonTypeOf(v);
+    const accepts = (t) => t === actual || t === "integer" && actual === "number" && Number.isInteger(v);
+    if (!types.some(accepts)) {
+      if ((types.includes("number") || types.includes("integer")) && typeof v === "string" && v.trim() !== "" && Number.isFinite(Number(v))) v = Number(v);
+      else if (types.includes("boolean") && (v === "true" || v === "false")) v = v === "true";
+      else throw new OpsError("validation", `${path} must be ${types.map((t) => t === "array" || t === "object" || t === "integer" ? `an ${t}` : `a ${t}`).join(" or ")}, got ${actual === "array" || actual === "object" ? `an ${actual}` : `${actual} ${JSON.stringify(v)}`.slice(0, 80)}.`);
+    }
+  }
+  if (v === null || v === void 0) return v;
+  if (schema.enum && !schema.enum.includes(v)) {
+    throw new OpsError("validation", `${path} must be one of ${schema.enum.map((e) => JSON.stringify(e)).join(", ")}, got ${JSON.stringify(v).slice(0, 80)}.`);
+  }
+  if (Array.isArray(v) && schema.items) {
+    const items = schema.items;
+    return v.map((item, i) => checkToolInput(items, item, `${path}[${i}]`));
+  }
+  if (jsonTypeOf(v) === "object" && (schema.properties || schema.required)) {
+    const obj = { ...v };
+    for (const key of schema.required ?? []) {
+      if (obj[key] === void 0 || obj[key] === null) throw new OpsError("validation", `${path}: missing required "${key}".`);
+    }
+    for (const [key, sub] of Object.entries(schema.properties ?? {})) {
+      if (obj[key] !== void 0) obj[key] = checkToolInput(sub, obj[key], `${path}.${key}`);
+    }
+    return obj;
+  }
+  return v;
+}
 async function callTool(ctx, name, input) {
   const tool = findTool(name);
   if (!tool) throw new OpsError("notFound", `Unknown tool "${name}". Tools: ${listAiTools().map((t) => t.name).join(", ")}.`);
-  const args = input && typeof input === "object" ? input : {};
+  if (input !== void 0 && input !== null && jsonTypeOf(input) !== "object") throw new OpsError("validation", `${name}: the input must be a JSON object, got ${jsonTypeOf(input) === "array" ? "an array" : `a ${jsonTypeOf(input)}`}.`);
+  const raw = input ?? {};
   for (const key of tool.inputSchema.required ?? []) {
-    if (args[key] === void 0 || args[key] === null) throw new OpsError("validation", `${name}: missing required "${key}".`);
+    if (raw[key] === void 0 || raw[key] === null) throw new OpsError("validation", `${name}: missing required "${key}".`);
   }
+  const args = checkToolInput({ ...tool.inputSchema, required: [] }, raw, name);
   return tool.handler(ctx, args);
 }
 export {
   AI_TOOLS,
   callTool,
+  checkToolInput,
   findTool,
   listAiTools,
   registerAiTool,

package/dist/agent/chunks/{views-fO_BM5U_.mjs → views-DH1n9Lrt.mjs}

@@ -7,7 +7,7 @@ const __dirname = __acrmDirname(__filename);
 import { n as newId } from "./ids-CvnmrMJX.mjs";
 import { F as FILTER_OPS } from "../agentcrm.mjs";
 import { OpsError, assertCan, can } from "./context-CxFfqS4D.mjs";
-import { listRecords } from "./records-DoqiT9xR.mjs";
+import { listRecords } from "./records-DcHFelq5.mjs";
 import { requireObject, asDoc, viewsOf, thaw, pipelinesOf } from "./store-5gqRSKXg.mjs";
 import "node:util";
 import "node:fs";

package/dist/version.json

@@ -1,6 +1,6 @@
 {
   "name": "@fleox-agent-crm/agentcrm",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "minSkillsVersion": "0.1.0",
   "dataSchema": 1,
   "repository": "github:fleox/agentcrm"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fleox-agent-crm/agentcrm",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "description": "The static CRM your AI agent can run: a Twenty / HubSpot-style CRM that runs entirely in the browser or headless through the agentcrm CLI, with data on storage you own.",
   "license": "SEE LICENSE IN LICENSE",

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentcrm",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Skills to install AgentCRM (the static CRM your AI agent can run), manage its sites, run and customise the CRM (modules, appearance, extensions), drive sales workflows and build extension modules and themes.",
   "author": {
     "name": "fleox"

package/plugin/skills/agentcrm-admin/SKILL.md

@@ -4,7 +4,7 @@ description: Run an AgentCRM like its admin does - find, list, create, update, d
 license: PolyForm-Noncommercial-1.0.0
 compatibility: Requires Node.js 20+.
 metadata:
-  version: "0.3.0"
+  version: "0.3.1"
   repository: "https://github.com/fleox/agentcrm"
 allowed-tools: Bash Read Write
 ---
@@ -15,7 +15,7 @@ The CLI runs the admin's own engine headless: the same validation, roles and aut
 
 **Language:** talk to the user in their language; keep commands and files in English.
 
-Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.0 <command> --json`; always pass `--site <alias>` (see `agentcrm-manage` to pick one). Read `error.hint` when `ok` is false. `npx -y @fleox-agent-crm/agentcrm@0.3.0 help records --json` lists any command's actions and options.
+Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.1 <command> --json`; always pass `--site <alias>` (see `agentcrm-manage` to pick one). Read `error.hint` when `ok` is false. `npx -y @fleox-agent-crm/agentcrm@0.3.1 help records --json` lists any command's actions and options.
 
 ## Rules
 
@@ -27,13 +27,13 @@ Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.0 <command> --json`; alwa
 ## Records
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records list --site acme --object deals --filter stage:in:proposal,negotiation --filter amount:gte:10000 --sort amount:desc --limit 20 --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records get <id> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records search "globex" --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records create --site acme --object people --set firstName=Grace --set lastName=Hopper --set email=grace@globex.com --set company=<companyId> --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records update <id> --site acme --set jobTitle=CTO --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records delete <id> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records restore <id> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records list --site acme --object deals --filter stage:in:proposal,negotiation --filter amount:gte:10000 --sort amount:desc --limit 20 --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records get <id> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records search "globex" --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records create --site acme --object people --set firstName=Grace --set lastName=Hopper --set email=grace@globex.com --set company=<companyId> --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records update <id> --site acme --set jobTitle=CTO --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records delete <id> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records restore <id> --site acme --json
 ```
 
 - Filters: `--filter field:op:value`, repeatable. Ops: eq, neq, contains, notContains, empty, notEmpty, gt, gte, lt, lte, in, notIn, before, after, withinDays. Dates: `YYYY-MM-DD`, `today`, `+30d`. Also `id`, `ownerId`, `createdAt`, `updatedAt`.
@@ -46,13 +46,13 @@ More examples per object: references/records.md.
 ## Timeline and tasks
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 notes add <recordId> --site acme --body "Met at the expo; wants a demo in June." --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 activities add --site acme --type call --title "Discovery call" --record <personId> --record <dealId> --meta '{"durationMin":25}' --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 activities list --site acme --record <companyId> --related --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tasks add --site acme --title "Send the proposal" --due 2026-11-10 --assignee me --record <dealId> --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tasks list --site acme --assignee me --overdue --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tasks done <taskId> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tasks reassign <taskId> --site acme --assignee sam@acme.com --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 notes add <recordId> --site acme --body "Met at the expo; wants a demo in June." --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 activities add --site acme --type call --title "Discovery call" --record <personId> --record <dealId> --meta '{"durationMin":25}' --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 activities list --site acme --record <companyId> --related --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tasks add --site acme --title "Send the proposal" --due 2026-11-10 --assignee me --record <dealId> --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tasks list --site acme --assignee me --overdue --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tasks done <taskId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tasks reassign <taskId> --site acme --assignee sam@acme.com --json
 ```
 
 Activity types: note, task, call, email, meeting. `--body @notes.md` reads a file.
@@ -62,18 +62,18 @@ Activity types: note, task, call, email, meeting. `--body @notes.md` reads a fil
 People have a **photo** (`avatar` field) and companies a **logo** (`logo`), shown next to the name everywhere; custom objects get one by adding an `image` field (the first becomes the object's image). Files (any type: images, PDFs, Office documents…) attach to a record or to an activity (note, task, call, email, meeting).
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records image <personId> ./ada.jpg --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records image <companyId> ./logo.svg --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records image <personId> --remove --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 notes add <recordId> --body "Signed contract attached." --attach ./contract.pdf --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tasks add --title "Review the quote" --record <dealId> --attach ./quote.xlsx --attach ./scope.pdf --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 activities add --type meeting --title "Workshop" --record <companyId> --attach ./whiteboard.png --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files upload ./brochure.pdf ./photo.png --record <companyId> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files upload ./minutes.docx --activity <noteId> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files list --record <companyId> --related --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files get <fileId> --out ./contract.pdf --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files delete <fileId> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 files usage --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records image <personId> ./ada.jpg --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records image <companyId> ./logo.svg --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records image <personId> --remove --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 notes add <recordId> --body "Signed contract attached." --attach ./contract.pdf --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tasks add --title "Review the quote" --record <dealId> --attach ./quote.xlsx --attach ./scope.pdf --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 activities add --type meeting --title "Workshop" --record <companyId> --attach ./whiteboard.png --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files upload ./brochure.pdf ./photo.png --record <companyId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files upload ./minutes.docx --activity <noteId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files list --record <companyId> --related --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files get <fileId> --out ./contract.pdf --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files delete <fileId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 files usage --site acme --json
 ```
 
 - Files live next to the data and are **encrypted with the same passphrase** on the journal backend; IndexedDB in local mode; the data repo (`files/`) for git-json (warn: history keeps them); Firebase Storage for Firebase (Storage must be enabled, see docs/files.md).
@@ -86,9 +86,9 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 files usage --site acme --json
 ## Pipelines
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 pipelines list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 pipelines move <dealId> Negotiation --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 pipelines move <dealId> Lost --lost-reason "Budget" --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 pipelines list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 pipelines move <dealId> Negotiation --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 pipelines move <dealId> Lost --lost-reason "Budget" --site acme --json
 ```
 
 Moving sets the deal's probability to the stage's. Adding / renaming stages is done in the admin (Settings → Data model).
@@ -102,10 +102,10 @@ See references/schema.md for objects, fields (types, options, relations), views,
 Built-in modules: dashboard, deals (deals object + pipelines), reports, forms, tasks, automations, integrations (email and calendar), assistant (in-admin AI); records, search, settings, setup and customize are required. Installed extension modules are listed with `source: "extension"`. Disabling hides pages, navigation, widgets and owned objects for every user; it never deletes data, and enabling again brings everything back.
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules disable forms --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules disable forms --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules enable deals --site acme --cascade --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules disable forms --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules disable forms --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules enable deals --site acme --cascade --yes --json
 ```
 
 - When the user says "we only manage contacts" or "hide what we don't use": list the modules, propose which to turn off (with what each hides), and apply only after they agree.
@@ -117,14 +117,14 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 modules enable deals --site acme --cascad
 One accent color drives the whole palette (a 50 to 950 scale is generated). Applies live to every user.
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance get --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance presets --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance set --site acme --accent "#0f766e" --neutral stone --radius lg --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance preset ocean --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance logo ./logo.svg --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance favicon ./favicon.png --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance css ./brand.css --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance reset --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance get --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance presets --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance set --site acme --accent "#0f766e" --neutral stone --radius lg --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance preset ocean --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance logo ./logo.svg --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance favicon ./favicon.png --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance css ./brand.css --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 appearance reset --site acme --json
 ```
 
 - **Brand from a hex:** `appearance set --accent <hex>`, then pick `--neutral` by temperature (blue / teal brands: slate; warm brands: stone; otherwise zinc), `--buttons accent` for a colorful brand. **From a logo:** read the dominant non-gray color of the SVG (its `fill`) or the image, propose it as the accent, and upload the logo itself with `appearance logo`.
@@ -134,9 +134,9 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance reset --site acme --json
 ## Extensions (installed modules and themes)
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext disable sales-goals --site acme --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext enable sales-goals --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 ext list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 ext disable sales-goals --site acme --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 ext enable sales-goals --site acme --yes --json
 ```
 
 Installing, building or debugging extensions: the `agentcrm-extensions` skill. Installing runs third-party code with admin rights: always show the plan and ask. If the admin misbehaves after an extension change, `ext disable <id> --yes`, or open the admin with `?safe=1`; CLI commands accept `--safe` to skip extensions.
@@ -144,11 +144,11 @@ Installing, building or debugging extensions: the `agentcrm-extensions` skill. I
 ## Import and export
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 import csv contacts.csv --site acme --object people --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 import csv contacts.csv --site acme --object people --yes --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 export csv --site acme --object companies --out companies.csv --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 export json --site acme --out backup.json --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 export zip --site acme --out backup.zip --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 import csv contacts.csv --site acme --object people --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 import csv contacts.csv --site acme --object people --yes --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 export csv --site acme --object companies --out companies.csv --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 export json --site acme --out backup.json --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 export zip --site acme --out backup.zip --json
 ```
 
 The import is a DRY RUN until `--yes`: read the report (mapping, per-row action, errors, new select options, companies to create) with the user before applying. Mapping, dedupe and coercion rules: references/import.md.
@@ -156,25 +156,25 @@ The import is a DRY RUN until `--yes`: read the report (mapping, per-row action,
 ## Reports and stats
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report pipeline --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report forecast --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report won-lost --site acme --months 6 --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report activity --site acme --days 30 --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report lead-sources --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report stale --site acme --days 21 --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 report conversion --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 stats --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report pipeline --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report forecast --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report won-lost --site acme --months 6 --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report activity --site acme --days 30 --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report lead-sources --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report stale --site acme --days 21 --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 report conversion --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 stats --site acme --json
 ```
 
 ## Automations and lead forms
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 automations list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 automations disable <id> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 automations run --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 forms list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 forms publish <formId> --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 forms ingest --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 automations list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 automations disable <id> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 automations run --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 forms list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 forms publish <formId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 forms ingest --site acme --json
 ```
 
 Event automations (record created, field changed, stage changed) fire on every write, from the CLI too. Building automations and forms is done in the admin; the CLI enables / disables, runs the scheduled ones and ingests form submissions. For a cron, see the `agentcrm-manage` skill.
@@ -184,8 +184,8 @@ Event automations (record created, field changed, stage changed) fire on every w
 The same tools the MCP server and the in-admin assistant expose, including the tools of enabled extension modules (`source: "extension"`) the customisation tools (`list_modules`, `set_module_enabled`, `get_appearance`, `set_appearance`, `apply_appearance_preset`, `list_extensions`, `set_extension_enabled`) and the file tools (`list_files`, `describe_attachments`):
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tools list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 tools call pipeline_summary --site acme --input '{}' --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tools list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 tools call pipeline_summary --site acme --input '{}' --json
 ```
 
 Useful when a tool returns exactly what you need in one call (`get_record` with relations and latest activities, `pipeline_summary`).

package/plugin/skills/agentcrm-admin/references/appearance.md

@@ -18,7 +18,7 @@
 Changing a visual value marks the preset `custom`. Other actions:
 
 - `appearance preset <id>`: default, ocean, forest, sunset, graphite, rose, high-contrast, or a theme extension id. Keeps logo, favicon, custom CSS and the default mode.
-- `appearance logo <file>` / `appearance favicon <file>`: PNG, JPEG, GIF, WebP, SVG or ICO, at most 200 KB; `--remove` deletes it.
+- `appearance logo <file>` / `appearance favicon <file>`: PNG, JPEG, GIF, WebP, SVG or ICO, at most 200 KB (SVGs with scripts or event handlers are refused); `--remove` deletes it.
 - `appearance css <file|->`: plain CSS (no `<style>` / `<script>`), at most 50 KB, loaded last; `--remove` deletes it. Style through the CSS variables (`--acc-50` to `--acc-950`, `--srf-50` to `--srf-950`, `--primary`, `--radius-scale`, `--font-sans`, `--row-h`…) as `rgb(var(--acc-600))`.
 - `appearance reset`: back to defaults, keeping logo and favicon (`--branding` removes them too).
 - `appearance get --full` includes the logo / favicon data URLs and the custom CSS.

package/plugin/skills/agentcrm-admin/references/records.md

@@ -12,17 +12,17 @@ Always confirm with `objects get <object>`: admins add fields and options.
 
 ```bash
 # A company and its contact
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records create --site acme --object companies --set name="Globex" --set domain=globex.com --set industry=software --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records create --site acme --object people --fields @grace.json --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records create --site acme --object companies --set name="Globex" --set domain=globex.com --set industry=software --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records create --site acme --object people --fields @grace.json --json
 
 # A deal linked to both
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records create --site acme --object deals --fields '{"name":"Globex pilot","amount":12000,"closeDate":"2026-12-15","company":"<companyId>","contacts":["<personId>"]}' --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records create --site acme --object deals --fields '{"name":"Globex pilot","amount":12000,"closeDate":"2026-12-15","company":"<companyId>","contacts":["<personId>"]}' --json
 
 # Leads created this week, without an owner
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records list --site acme --object people --filter lifecycleStage:eq:lead --filter createdAt:withinDays:-7 --filter ownerId:empty --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records list --site acme --object people --filter lifecycleStage:eq:lead --filter createdAt:withinDays:-7 --filter ownerId:empty --json
 
 # Assign an owner
-npx -y @fleox-agent-crm/agentcrm@0.3.0 records update <id> --site acme --owner <userId> --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 records update <id> --site acme --owner <userId> --json
 ```
 
 `records get` returns `relations` (records this one points to) and `related` (records pointing to it, e.g. a company's people and deals) plus `activityCount`.

package/plugin/skills/agentcrm-admin/references/schema.md

@@ -5,24 +5,24 @@ All schema commands need the admin role.
 ## Objects
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 objects list --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 objects get deals --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 objects create --site acme --singular Project --plural Projects --icon folder --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 objects update projects --site acme --plural "Client projects" --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 objects delete projects --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 objects list --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 objects get deals --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 objects create --site acme --singular Project --plural Projects --icon folder --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 objects update projects --site acme --plural "Client projects" --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 objects delete projects --site acme --json
 ```
 
 Deleting an object deletes all its records (plan first).
 
 ## Fields
 
-Types: text, longText, number, currency, percent, date, datetime, boolean, select, multiSelect, email, phone, url, relation, user, rating, address, tags.
+Types: text, longText, number, currency, percent, date, datetime, boolean, select, multiSelect, email, phone, url, relation, user, rating, address, tags, image (one picture; the first one becomes the record avatar), files (attachments).
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 fields add --site acme --object deals --label "Contract type" --type select --options "New,Renewal,Upsell" --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 fields add --site acme --object projects --label Client --type relation --relation-object companies --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 fields update contractType --site acme --object deals --options "New,Renewal,Upsell,Cross-sell" --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 fields delete contractType --site acme --object deals --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 fields add --site acme --object deals --label "Contract type" --type select --options "New,Renewal,Upsell" --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 fields add --site acme --object projects --label Client --type relation --relation-object companies --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 fields update contractType --site acme --object deals --options "New,Renewal,Upsell,Cross-sell" --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 fields delete contractType --site acme --object deals --json
 ```
 
 `fields update --type <t>` converts existing values (the result reports what could not be converted). Standard fields can't be deleted.
@@ -30,10 +30,10 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 fields delete contractType --site acme --
 ## Views
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 views list --site acme --object deals --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 views create --site acme --object deals --name "Closing this month" --filter closeDate:withinDays:30 --sort closeDate --columns name,amount,stage,closeDate --shared --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 views create --site acme --object deals --name Board --type kanban --group-by stage --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 views delete <viewId> --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 views list --site acme --object deals --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 views create --site acme --object deals --name "Closing this month" --filter closeDate:withinDays:30 --sort closeDate --columns name,amount,stage,closeDate --shared --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 views create --site acme --object deals --name Board --type kanban --group-by stage --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 views delete <viewId> --site acme --json
 ```
 
 ## Users and roles
@@ -41,10 +41,10 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 views delete <viewId> --site acme --json
 Roles: `admin` (everything), `member` (records, activities, own views, import / export), `viewer` (read only).
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 users list --site acme --all --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 users add --site acme --email sam@acme.com --name "Sam Rivera" --role member --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 users role sam@acme.com admin --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 users disable sam@acme.com --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 users list --site acme --all --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 users add --site acme --email sam@acme.com --name "Sam Rivera" --role member --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 users role sam@acme.com admin --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 users disable sam@acme.com --site acme --json
 ```
 
 Firebase / git-json sites: the login itself is created on that service (Firebase Authentication, a repository collaborator).
@@ -52,8 +52,8 @@ Firebase / git-json sites: the login itself is created on that service (Firebase
 ## Settings
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 settings get --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 settings set --site acme --set name="Acme CRM" --set defaultCurrency=EUR --set locale=fr-FR --set staleDealDays=21 --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 settings get --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 settings set --site acme --set name="Acme CRM" --set defaultCurrency=EUR --set locale=fr-FR --set staleDealDays=21 --json
 ```
 
 Secrets are refused in settings.

package/plugin/skills/agentcrm-extensions/SKILL.md

@@ -4,7 +4,7 @@ description: Create, test and ship AgentCRM extensions - scaffold a module or th
 license: PolyForm-Noncommercial-1.0.0
 compatibility: Requires Node.js 20+ (npm for the extension project's own build).
 metadata:
-  version: "0.3.0"
+  version: "0.3.1"
   repository: "https://github.com/fleox/agentcrm"
 allowed-tools: Bash Read Write Edit
 ---
@@ -33,14 +33,14 @@ AgentCRM is a static CRM: the admin is a single-page app that runs in the browse
 
 ## The toolchain: `agentcrm ext`
 
-Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.0 <command> … --json`. Read `error.hint` when `ok` is false.
+Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.1 <command> … --json`. Read `error.hint` when `ok` is false.
 
 | Action | What it does |
 |---|---|
 | `ext new module\|theme <id> [--dir <path>] [--name "…"] [--description "…"] [--author "…"] [--force]` | Scaffolds a standalone project: `package.json` (scripts build / typecheck / check / pack), `vite.config.ts` (runtime specifiers external, one `bundle.js`), `tsconfig.json` mapped to `types/agentcrm-runtime.d.ts` (copied from the CLI), `manifest.json`, `src/index.tsx` (module: a page with a nav entry, a record tab, an AI tool, en + fr strings) or `src/index.ts` + `src/style.css` (theme), README. |
 | `ext check [<dir\|zip>] [--kind module\|theme] [--no-call]` | Validates manifest (id, kind, semver, apiVersion range, unknown keys), sizes, bundle imports (runtime specifiers only), default export, production JSX; then installs it in a throw-away demo CRM, loads it through the real loader and reports what it registers: routes, navigation, slots, settings page, i18n, AI tools (each one without required inputs is called once with `{}` on demo data), automation actions, hooks, theme values. Exit code 1 when `data.valid` is false. |
 | `ext pack [<dir>] [--out <zip>]` | Writes `<id>-<version>.zip` (manifest.json + bundle.js + style.css) for Settings, Modules, Install, or `ext install`. |
-| `ext install <zip\|dir> --site <alias> [--disabled] [--yes]` | Plan (install or upgrade, author, size, dependencies, warnings), then installs and loads it in the session (`load.status` must be `loaded`). Upgrades keep the enabled state and the module config. |
+| `ext install <zip\|dir> --site <alias> [--disabled] [--force] [--yes]` | First loads the bundle in a throw-away CRM like `ext check` (a package that fails is refused with `invalid-package` and nothing changes; `--force` skips this). Plan (install or upgrade, author, size, dependencies, warnings: downgrade, same version), then installs and loads it in the session (`load.status` must be `loaded`). Upgrades keep the enabled state and the module config. |
 | `ext list --site <alias>` | Installed extensions with version, enabled state and load status. |
 | `ext enable\|disable <id> --site <alias> [--cascade] [--yes]` | Switch it on or off without uninstalling. |
 | `ext uninstall <id> --site <alias> [--force] [--yes]` | Remove it (its module config is kept for a later re-install). |
@@ -51,7 +51,7 @@ Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.0 <command> … --json`.
 1. **Understand the request.** A new look = a **theme**. New pages, widgets, record tabs, AI tools, automation steps or reactions to CRM events = a **module**. Pick an id: lowercase letters, digits and dashes, 3 to 50 characters, not a built-in module id (records, deals, dashboard, reports, forms, tasks, automations, integrations, assistant, search, settings, setup, customize) nor agentcrm, core, runtime, admin, app, custom, default. Prefix it with the company or product (`acme-quotes`).
 2. **Scaffold and install the toolchain:**
    ```bash
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 ext new module acme-quotes --author "Acme" --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 ext new module acme-quotes --author "Acme" --json
    cd acme-quotes && npm install
    ```
 3. **Read the scaffold**, then the reference for what you are building:
@@ -64,15 +64,15 @@ Every command is `npx -y @fleox-agent-crm/agentcrm@0.3.0 <command> … --json`.
    ```bash
    npm run typecheck
    npm run build
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 ext check . --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 ext check . --json
    ```
    Fix every error; read the warnings (missing French strings, tool names without the module prefix, nav entries without a route).
 6. **Pack and install** (plan first, then `--yes` once the user agreed):
    ```bash
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 ext pack . --json
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 ext install . --site acme --json
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 ext install . --site acme --yes --json
-   npx -y @fleox-agent-crm/agentcrm@0.3.0 tools list --site acme --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 ext pack . --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 ext install . --site acme --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 ext install . --site acme --yes --json
+   npx -y @fleox-agent-crm/agentcrm@0.3.1 tools list --site acme --json
    ```
    For a new release, bump `version` in `manifest.json` (semver) and install again: it upgrades in place.
 

package/plugin/skills/agentcrm-extensions/references/module-recipes.md

@@ -182,8 +182,8 @@ function SettingsPage() {
 In AI tools / actions read it with `readConfig(ops.getModuleConfig(ctx, ID))`. From the CLI:
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules config get acme-projects --site acme --json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules config set acme-projects --value '{"budgetAlert":50000}' --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules config get acme-projects --site acme --json
+npx -y @fleox-agent-crm/agentcrm@0.3.1 modules config set acme-projects --value '{"budgetAlert":50000}' --site acme --json
 ```
 
 (the second prints a plan; add `--yes`).