@fleox-agent-crm/agentcrm 0.3.3 → 0.4.0

package/dist/agent/chunks/{firebaseRules-iori-s7U.mjs → firebaseRules-Jq85MBBN.mjs}

@@ -124,7 +124,7 @@ function buildFirestoreRules(input) {
     "      // Nobody changes their own role / email / disabled flag.",
     "      allow update: if (isAdmin() && validRole(request.resource.data.role))",
     "        || (isActive() && request.auth.uid == uid",
-    "            && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['name', 'avatarUrl', 'updatedAt']));",
+    "            && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['name', 'avatarUrl', 'updatedAt', '_ts']));",
     "      allow delete: if isAdmin();",
     "    }",
     "",
@@ -152,7 +152,7 @@ function buildFirestoreRules(input) {
     "      allow read: if isActive();",
     "      allow create, delete: if isAdmin();",
     "      allow update: if isAdmin()",
-    "        || (isMember() && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['lastRunAt', 'updatedAt']));",
+    "        || (isMember() && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['lastRunAt', 'updatedAt', '_ts']));",
     "    }",
     "",
     "    match /automationRuns/{id} {",
@@ -180,6 +180,17 @@ function buildFirestoreRules(input) {
     "      allow write: if isAdmin();",
     "    }",
     "",
+    "    // Tombstones of deleted documents, so cached copies drop them on the",
+    "    // next incremental read (src/data/firebase/api.ts, withChangeTracking).",
+    "    // Written in the same batch as the delete, which the rules above judge.",
+    "    match /deletions/{id} {",
+    "      allow read: if isActive();",
+    "      allow create, update: if isMember()",
+    "        && request.resource.data.keys().hasOnly(['collection', 'id', '_ts'])",
+    "        && request.resource.data._ts == request.time;",
+    "      allow delete: if isAdmin();",
+    "    }",
+    "",
     "    // ─── inbox/{id}: public lead-form submissions ──────────────────────",
     "    function validSubmission(d) {",
     "      return d.keys().hasAll(['formId', 'data', 'createdAt'])",
@@ -213,7 +224,7 @@ function buildFirestoreRules(input) {
   );
   return lines.join("\n");
 }
-[...MEMBER_WRITE, "views", "automations", "automationRuns", "files", ...ADMIN_WRITE, "users"];
+[...MEMBER_WRITE, "views", "automations", "automationRuns", "files", ...ADMIN_WRITE, "users", "deletions"];
 export {
   INBOX_LIMITS,
   buildFirestoreRules,

package/dist/agent/chunks/{hosting-Dnn1k3cV.mjs → hosting-C_UDyMkm.mjs}

@@ -8,7 +8,7 @@ import { statSync, rmSync, existsSync, unlinkSync, readFileSync, mkdirSync, writ
 import { resolve, dirname, sep, join, relative } from "node:path";
 import { buildConfigJsSource } from "./runtimeConfig-CCOFg1RM.mjs";
 import { a as createGitPagesConnector, b as createS3Connector } from "./s3-Dz50-NuA.mjs";
-import { C as CliError, r as readVersionInfo, j as distRoot } from "../agentcrm.mjs";
+import { C as CliError, r as readVersionInfo, l as distRoot } from "../agentcrm.mjs";
 import { pathToFileURL } from "node:url";
 import "./index-BM8qeGOb.mjs";
 import "./http-Bk9ICb7I.mjs";

package/dist/agent/chunks/{index-DtCezG4R.mjs → index-DWecFbTi.mjs}

@@ -126,7 +126,7 @@ registerBackend("journal", (config, opts) => {
   store.identity = async () => (await missingJournalAccess(cfg.connectorId, settings)).length ? null : identity();
   return store;
 });
-registerBackend("firebase", async (config, opts) => (await import("./firebase-DWR0K1OC.mjs")).createFirebaseStore(config, opts));
+registerBackend("firebase", async (config, opts) => (await import("./firebase-Bknru2pE.mjs")).createFirebaseStore(config, opts));
 registerBackend("git-json", async (config, opts) => (await import("./gitJson-fjr8mcHe.mjs")).createGitJsonStore(config, opts));
 async function createDataStore(config, opts = {}) {
   const factory = getBackendFactory(config.backend);

package/dist/agent/chunks/{install-Bp-CwDVC.mjs → install-BLNflFes.mjs}

@@ -8,8 +8,8 @@ import { generatePassphrase } from "./index-CWrrF1wl.mjs";
 import { r as resolveGitPagesToken, c as createRemoteGitTransport } from "./s3-Dz50-NuA.mjs";
 import { i as instantiateStorageConnector } from "./registry-DijAKZ24.mjs";
 import { S as StorageError, s as subscribeToToasts } from "./http-Bk9ICb7I.mjs";
-import { s as setCredential, h as openStore, i as installBrowserEnv } from "../agentcrm.mjs";
-import { adminOps, applyOps, buildConnector } from "./hosting-Dnn1k3cV.mjs";
+import { s as setCredential, j as openStore, k as installBrowserEnv } from "../agentcrm.mjs";
+import { adminOps, applyOps, buildConnector } from "./hosting-C_UDyMkm.mjs";
 import "./index-BM8qeGOb.mjs";
 import "./runtimeConfig-CCOFg1RM.mjs";
 import "./encoding-C9MzdP95.mjs";
@@ -134,7 +134,7 @@ async function checkPlan(plan) {
     const runtime = plan.runtime;
     try {
       installBrowserEnv();
-      const { firebaseApiFor, checkFirebaseAccess } = await import("./firebase-DWR0K1OC.mjs");
+      const { firebaseApiFor, checkFirebaseAccess } = await import("./firebase-Bknru2pE.mjs");
       data = await checkFirebaseAccess(await firebaseApiFor(runtime), plan.backendSecrets, runtime.firebase.projectId ?? "");
     } catch (err) {
       data = { ok: false, detail: err.message, existing: false };