@fleox-agent-crm/agentcrm 0.3.0 → 0.3.2

package/dist/agent/chunks/{schema-DlHt2PxI.mjs → schema-C4lSslXv.mjs}

@@ -8,10 +8,10 @@ import { c as camelId } from "./utils-DmI8FtXP.mjs";
 import { colorAt, canConvertType, isEmptyFieldValue, convertValue } from "./fields-B0bitgmr.mjs";
 import { s as slugId } from "./ids-CvnmrMJX.mjs";
 import { d as defaultViewFor } from "./standardObjects-CheqfDqa.mjs";
-import { e as FIELD_TYPES } from "../agentcrm.mjs";
+import { a as FIELD_TYPES } from "../agentcrm.mjs";
 import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
-import { hardDeleteMutations } from "./records-DoqiT9xR.mjs";
-import { requireObject, objectsOf, pipelinesOf, recordsOf, asDoc, viewsOf, thaw } from "./store-5gqRSKXg.mjs";
+import { hardDeleteMutations } from "./records-DcHFelq5.mjs";
+import { requireObject, objectsOf, pipelinesOf, recordsOf, viewsOf, asDoc, thaw } from "./store-5gqRSKXg.mjs";
 import "node:util";
 import "node:fs";
 import "node:path";
@@ -183,9 +183,15 @@ async function createField(ctx, objectId, input) {
   const object = requireObject(ctx.store, objectId);
   const field = buildField(ctx, object, input);
   const imageField = object.imageField ?? (field.type === "image" ? field.id : void 0);
-  await ctx.store.write([saveObject(ctx, { ...object, ...imageField ? { imageField } : {}, fields: [...object.fields, field] })], { message: `Add field ${field.label}` });
+  const mutations = [saveObject(ctx, { ...object, ...imageField ? { imageField } : {}, fields: [...object.fields, field] })];
+  const defaultView = viewsOf(ctx.store, objectId).find((v) => v.id === defaultViewFor(object).id);
+  if (defaultView && defaultView.type === "table" && !field.hidden && field.type !== "image" && !defaultView.columns.includes(field.id) && defaultView.columns.length < DEFAULT_VIEW_MAX_COLUMNS) {
+    mutations.push({ op: "patch", collection: "views", id: defaultView.id, fields: { columns: [...defaultView.columns, field.id] } });
+  }
+  await ctx.store.write(mutations, { message: `Add field ${field.label}` });
   return field;
 }
+const DEFAULT_VIEW_MAX_COLUMNS = 7;
 function requireField(object, fieldId) {
   const f = object.fields.find((x) => x.id === fieldId);
   if (!f) throw new OpsError("notFound", `Field "${fieldId}" not found on ${object.labelPlural}.`);

package/dist/agent/chunks/{schema-7-4-qtSS.mjs → schema-DnLj8dUO.mjs}

@@ -87,6 +87,15 @@ const ENUMS = {
 };
 const IMAGE_RE = /^data:image\/(png|jpeg|gif|webp|svg\+xml|x-icon|vnd\.microsoft\.icon);base64,[A-Za-z0-9+/]+=*$/;
 const ID_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+function svgHasActiveContent(dataUrl) {
+  let text;
+  try {
+    text = atob(dataUrl.slice(dataUrl.indexOf(",") + 1));
+  } catch {
+    return true;
+  }
+  return /<script[\s>/]|<foreignObject[\s>/]|\son[a-z]+\s*=|javascript:/i.test(text);
+}
 function dataUrlBytes(url) {
   const b64 = url.slice(url.indexOf(",") + 1);
   const pad = b64.endsWith("==") ? 2 : b64.endsWith("=") ? 1 : 0;
@@ -96,6 +105,7 @@ function validateImageDataUrl(value, label = "image") {
   if (typeof value !== "string" || !IMAGE_RE.test(value)) return `The ${label} must be a base64 image data URL (PNG, JPEG, GIF, WebP, SVG or ICO).`;
   const bytes = dataUrlBytes(value);
   if (bytes > MAX_IMAGE_BYTES) return `The ${label} is ${Math.round(bytes / 1024)} KB — the limit is ${MAX_IMAGE_BYTES / 1024} KB.`;
+  if (/^data:image\/svg\+xml/i.test(value) && svgHasActiveContent(value)) return `The ${label} SVG contains scripts or event handlers — export it as a plain SVG (or a PNG).`;
   return null;
 }
 function validateAppearancePatch(patch) {