@fleox-agent-crm/agentcrm 0.3.0 → 0.3.2

package/README.md

@@ -52,14 +52,14 @@ The `agentcrm-install` skill asks where the data lives, then where the admin is
 ### By hand
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 options                         # backends, locations, hostings, plan format
-npx -y @fleox-agent-crm/agentcrm@0.3.0 credentials set s3:main          # hidden prompt
-npx -y @fleox-agent-crm/agentcrm@0.3.0 install --plan plan.json --dry-run
-npx -y @fleox-agent-crm/agentcrm@0.3.0 install --plan plan.json
-npx -y @fleox-agent-crm/agentcrm@0.3.0 doctor --site acme
+npx -y @fleox-agent-crm/agentcrm@0.3.2 options                         # backends, locations, hostings, plan format
+npx -y @fleox-agent-crm/agentcrm@0.3.2 credentials set s3:main          # hidden prompt
+npx -y @fleox-agent-crm/agentcrm@0.3.2 install --plan plan.json --dry-run
+npx -y @fleox-agent-crm/agentcrm@0.3.2 install --plan plan.json
+npx -y @fleox-agent-crm/agentcrm@0.3.2 doctor --site acme
 ```
 
-Or try it without any account: `npx -y @fleox-agent-crm/agentcrm@0.3.0 serve` opens the setup wizard; pick **This browser** (optionally with demo data).
+Or try it without any account: `npx -y @fleox-agent-crm/agentcrm@0.3.2 serve` opens the setup wizard; pick **This browser** (optionally with demo data).
 
 ## Features
 
@@ -85,8 +85,8 @@ Everything you can customise in the admin, an AI agent can do too (CLI, MCP tool
 Settings → **Modules** switches built-in features off for the whole workspace: dashboard, deals & pipelines, reports, lead forms, tasks, automations, email & calendar, AI assistant. Disabling hides pages, navigation, widgets and owned objects; it never deletes data. Dependencies are checked (cascade on request). [docs/modules.md](docs/modules.md)
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules list --site acme
-npx -y @fleox-agent-crm/agentcrm@0.3.0 modules disable forms --site acme --yes
+npx -y @fleox-agent-crm/agentcrm@0.3.2 modules list --site acme
+npx -y @fleox-agent-crm/agentcrm@0.3.2 modules disable forms --site acme --yes
 ```
 
 ### Appearance — make it yours
@@ -94,9 +94,9 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 modules disable forms --site acme --yes
 Settings → **Appearance**: one accent color generates the whole palette; neutral grays, radius, density, font (system or Google fonts), sidebar style, accent or neutral buttons, high contrast, default light / dark mode, logo, favicon, custom CSS, seven presets (default, ocean, forest, sunset, graphite, rose, high-contrast) and theme extensions. [docs/appearance.md](docs/appearance.md)
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance set --accent "#0f766e" --neutral stone --buttons accent --site acme --yes
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance logo ./logo.svg --site acme --yes
-npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance preset ocean --site acme --yes
+npx -y @fleox-agent-crm/agentcrm@0.3.2 appearance set --accent "#0f766e" --neutral stone --buttons accent --site acme --yes
+npx -y @fleox-agent-crm/agentcrm@0.3.2 appearance logo ./logo.svg --site acme --yes
+npx -y @fleox-agent-crm/agentcrm@0.3.2 appearance preset ocean --site acme --yes
 ```
 
 ### Extensions — add features without rebuilding
@@ -104,10 +104,10 @@ npx -y @fleox-agent-crm/agentcrm@0.3.0 appearance preset ocean --site acme --yes
 Modules (pages, record tabs, dashboard widgets, settings pages, AI tools, automation actions, hooks) and themes are ZIPs installed from Settings → Modules → **Installed extensions** or the CLI, stored in the CRM's own data and loaded at runtime by every admin — and by the CLI / MCP server, so their AI tools and automation actions work there too. Installing runs code with admin rights: the admin and the CLI always show who made it and what it adds first; safe mode (`?safe=1`, or `--safe`) starts without extensions. [docs/extensions.md](docs/extensions.md)
 
 ```bash
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext new module acme-projects     # scaffold (Vite + typings + en/fr)
+npx -y @fleox-agent-crm/agentcrm@0.3.2 ext new module acme-projects     # scaffold (Vite + typings + en/fr)
 cd acme-projects && npm install && npm run build
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext check .                      # validate + load it like the admin
-npx -y @fleox-agent-crm/agentcrm@0.3.0 ext install . --site acme --yes  # install (plan without --yes)
+npx -y @fleox-agent-crm/agentcrm@0.3.2 ext check .                      # validate + load it like the admin
+npx -y @fleox-agent-crm/agentcrm@0.3.2 ext install . --site acme --yes  # install (plan without --yes)
 ```
 
 Guides: [creating a module](docs/creating-a-module.md), [creating a theme](docs/creating-a-theme.md), [runtime API reference](docs/runtime-api-reference.md). Examples: [`external/`](external).
@@ -157,7 +157,7 @@ S3 / R2 / OVH / Scaleway buckets (HTTPS), GitHub Pages, GitLab Pages, Cloudflare
 
 ## CLI
 
-`agentcrm` runs on Node.js 20+ (`npx -y @fleox-agent-crm/agentcrm@0.3.0 <command>`). Every command accepts `--json` and prints exactly one `{ ok, data }` / `{ ok: false, error: { code, message, hint } }` object; destructive commands print a plan unless `--yes`.
+`agentcrm` runs on Node.js 20+ (`npx -y @fleox-agent-crm/agentcrm@0.3.2 <command>`). Every command accepts `--json` and prints exactly one `{ ok, data }` / `{ ok: false, error: { code, message, hint } }` object; destructive commands print a plan unless `--yes`.
 
 | Area | Commands |
 |---|---|
@@ -176,7 +176,7 @@ Full reference: [docs/cli.md](docs/cli.md).
 ## MCP server
 
 ```bash
-claude mcp add agentcrm -- npx -y @fleox-agent-crm/agentcrm@0.3.0 mcp --site acme
+claude mcp add agentcrm -- npx -y @fleox-agent-crm/agentcrm@0.3.2 mcp --site acme
 ```
 
 Tools = the shared AI catalog (search, list, get, create, update, delete, merge records, notes, activities, tasks, deal stages, reports, CSV import, automations…), resources = schema, pipelines, modules and appearance, plus the tools of the site's enabled extension modules; prompts = pipeline review, follow-up email, lead qualification. `--read-only` hides every tool that writes. Claude Desktop / Cursor config: [docs/mcp.md](docs/mcp.md).

package/changelog.json

@@ -1,5 +1,35 @@
 {
   "versions": [
+    {
+      "version": "0.3.2",
+      "date": "2026-11-04",
+      "breaking": false,
+      "changes": [
+        "CLI / MCP on a Firebase CRM: the stored firebase:<name> login now signs in. Up to 0.3.1 the CLI read and wrote Firestore unauthenticated, so the rules refused every write (install, doctor --repair, records…) and reads came back empty.",
+        "Firebase sessions are kept between CLI runs (~/.agentcrm/sessions/, mode 0600) instead of a password sign-in per command, which Firebase rate-limits; `credentials set` / `remove` forget the session of that login.",
+        "install --dry-run on Firebase really checks access: it signs in, refuses an unverified address and reads through the rules (it used to report ok without checking anything)."
+      ],
+      "actions": []
+    },
+    {
+      "version": "0.3.1",
+      "date": "2026-11-03",
+      "breaking": false,
+      "changes": [
+        "Package published on npm as @fleox-agent-crm/agentcrm; releases are published from GitHub Actions with provenance (trusted publishing).",
+        "Security: SVG logos / favicons containing scripts or event handlers are refused; module config refuses common secret keys (apiKey, token, secret…); ext install trial-loads the bundle first and refuses one that does not load (--force to skip), warns on downgrades and same-version re-installs.",
+        "AI tools / MCP: inputs are validated against each tool JSON schema (clear errors instead of crashes); extension console output no longer pollutes --json or the MCP stream; MCP re-syncs extensions after a mutating tool so disabled modules drop their tools.",
+        "Records: an unknown field in an explicit filter or sort is now an error listing the valid fields (it used to return every record).",
+        "CLI: admin hosted in a local folder without a public URL is detected (install, doctor, status, deploy-admin); --out creates missing folders; import zip validates the archive in the plan and warns before overwriting another CRM; settings refuse unknown keys and invalid locale / time zone; objects get returns the object; global flags accepted before the command (agentcrm --safe …); clearer hints for usage, validation and module dependency conflicts.",
+        "Admin: button icons back to 16 px; settings pages no longer scroll the whole shell; bulk Update field works for select fields; numbers follow the UI language without reload; fields added to a custom object appear in its table; report amounts rounded; legend on the lead sources chart; translation fixes in setup and tables.",
+        "Demo data: company country and phone prefix match their city.",
+        "Docs and skills: image / files field types, full MCP tool and resource list, links to github.com/fleox/agentcrm/blob/master."
+      ],
+      "actions": [
+        "Redeploy the admin (agentcrm deploy-admin) to get the UI fixes.",
+        "Update the agent skills (Claude Code: /plugin marketplace update agentcrm)."
+      ]
+    },
     {
       "version": "0.3.0",
       "date": "2026-11-03",

package/dist/admin/admin-files.json

@@ -1,18 +1,18 @@
 {
-  "version": "0.3.0",
+  "version": "0.3.2",
   "dataSchema": 1,
   "files": [
-    "assets/chartsImpl-CE2akJat.js",
-    "assets/firebase-BHSUggRo.js",
-    "assets/gitJson-BulGh2KV.js",
-    "assets/index-DidVVK7L.js",
-    "assets/index-hMXwHSvN.css",
+    "assets/chartsImpl-qlHW3VOv.js",
+    "assets/firebase-U38f5kc9.js",
+    "assets/gitJson-wy2Tytfd.js",
+    "assets/index-BpaxrJx9.js",
+    "assets/index-TcjySLVg.css",
     "assets/index.esm-BFc7vwnl.js",
     "assets/index.esm-CtEQZRb1.js",
     "assets/index.esm-Dum0J07z.js",
     "assets/index.esm2017-EOzKbpUS.js",
-    "assets/lucide-react.min-DEDlHCPj.js",
-    "assets/sdk-CnrLnlRo.js",
+    "assets/lucide-react.min-Djrg16BH.js",
+    "assets/sdk-mu08RFtk.js",
     "favicon.svg",
     "index.html",
     "runtime/agentcrm-runtime.js",