@kanvas/openclaw-plugin 0.1.14 → 0.1.16

package/dist/domains/crm/index.js

@@ -396,7 +396,7 @@ export class CrmService {
     }
     async listLeadMessages(channelSlug, first = 50, page = 1) {
         const query = `
-      query LeadMessages($first: Int, $page: Int, $channelSlug: String!) {
+      query LeadMessages($first: Int, $page: Int, $channelSlug: Mixed!) {
         messages(
           first: $first
           page: $page

package/dist/domains/ecosystem/index.js

@@ -0,0 +1,167 @@
+export class EcosystemService {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    // ── Companies ──────────────────────────────────────────────
+    async listCompanies(first = 25, search, where) {
+        const query = `
+      query ListCompanies($first: Int, $search: String, $where: QueryCompaniesWhereWhereConditions) {
+        companies(first: $first, search: $search, where: $where) {
+          data {
+            id
+            uuid
+            name
+            website
+            email
+            phone
+            address
+            city
+            state
+            country
+            zip
+            is_active
+            total_users
+            total_branches
+            created_at
+          }
+          paginatorInfo {
+            currentPage
+            lastPage
+            total
+          }
+        }
+      }
+    `;
+        return this.client.query(query, { first, search, where });
+    }
+    // ── Branches ───────────────────────────────────────────────
+    async listBranches(first = 25, search, where) {
+        const query = `
+      query ListBranches($first: Int, $search: String, $where: QueryBranchesWhereWhereConditions) {
+        branches(first: $first, search: $search, where: $where) {
+          data {
+            id
+            uuid
+            name
+            companies_id
+            email
+            phone
+            address
+            city
+            state
+            country
+            zip
+            is_default
+            is_active
+            total_users
+            created_at
+          }
+          paginatorInfo {
+            currentPage
+            lastPage
+            total
+          }
+        }
+      }
+    `;
+        return this.client.query(query, { first, search, where });
+    }
+    // ── Roles ──────────────────────────────────────────────────
+    async listRoles(first = 50, search) {
+        const query = `
+      query ListRoles($first: Int, $search: String) {
+        roles(first: $first, search: $search) {
+          data {
+            id
+            name
+            title
+            scope
+            userCount
+            systemRole
+          }
+        }
+      }
+    `;
+        return this.client.query(query, { first, search });
+    }
+    // ── Company Users ──────────────────────────────────────────
+    async listCompanyUsers(first = 25, search, where) {
+        const query = `
+      query ListCompanyUsers($first: Int, $search: String, $where: QueryCompanyUsersWhereWhereConditions) {
+        companyUsers(first: $first, search: $search, where: $where) {
+          data {
+            id
+            uuid
+            firstname
+            lastname
+            email
+            displayname
+            roles
+          }
+          paginatorInfo {
+            currentPage
+            lastPage
+            total
+          }
+        }
+      }
+    `;
+        return this.client.query(query, { first, search, where });
+    }
+    // ── User-Company Management ────────────────────────────────
+    async addUserToCompany(companyId, userId, roleId) {
+        const mutation = `
+      mutation AddUserToCompany($id: ID!, $user_id: ID!, $rol_id: ID) {
+        addUserToCompany(id: $id, user_id: $user_id, rol_id: $rol_id)
+      }
+    `;
+        return this.client.query(mutation, {
+            id: companyId,
+            user_id: userId,
+            rol_id: roleId,
+        });
+    }
+    async removeUserFromCompany(companyId, userId) {
+        const mutation = `
+      mutation RemoveUserFromCompany($id: ID!, $user_id: ID!) {
+        removeUserFromCompany(id: $id, user_id: $user_id)
+      }
+    `;
+        return this.client.query(mutation, { id: companyId, user_id: userId });
+    }
+    // ── User-Branch Management ─────────────────────────────────
+    async addUserToBranch(branchId, userId) {
+        const mutation = `
+      mutation AddUserToBranch($id: ID!, $user_id: ID!) {
+        addUserToBranch(id: $id, user_id: $user_id)
+      }
+    `;
+        return this.client.query(mutation, { id: branchId, user_id: userId });
+    }
+    async removeUserFromBranch(branchId, userId) {
+        const mutation = `
+      mutation RemoveUserFromBranch($id: ID!, $user_id: ID!) {
+        removeUserFromBranch(id: $id, user_id: $user_id)
+      }
+    `;
+        return this.client.query(mutation, { id: branchId, user_id: userId });
+    }
+    // ── Role Assignment ────────────────────────────────────────
+    async assignRoleToUser(userId, roleIds) {
+        const mutation = `
+      mutation AssignRoleToUser($userId: ID!, $roleIds: [ID!]!) {
+        assignRoleToUser(userId: $userId, roleIds: $roleIds)
+      }
+    `;
+        return this.client.query(mutation, { userId, roleIds });
+    }
+    async removeRoleFromUser(userId, role) {
+        const mutation = `
+      mutation RemoveRole($userId: ID!, $role: Mixed!) {
+        removeRole(userId: $userId, role: $role)
+      }
+    `;
+        return this.client.query(mutation, { userId, role });
+    }
+}

package/dist/domains/social/index.js

@@ -39,8 +39,10 @@ export class SocialService {
             }
           }
           custom_fields {
-            name
-            value
+            data {
+              name
+              value
+            }
           }
         }
       }
@@ -70,7 +72,6 @@ export class SocialService {
             is_public
             is_locked
             created_at
-            updated_at
             parent {
               id
               uuid
@@ -126,8 +127,10 @@ export class SocialService {
               }
             }
             custom_fields {
-              name
-              value
+              data {
+                name
+                value
+              }
             }
           }
         }
@@ -147,7 +150,6 @@ export class SocialService {
           message
           is_public
           is_locked
-          updated_at
           messageType {
             id
             name
@@ -160,8 +162,10 @@ export class SocialService {
             }
           }
           custom_fields {
-            name
-            value
+            data {
+              name
+              value
+            }
           }
         }
       }

package/dist/index.js

@@ -4,10 +4,12 @@ import { CrmService } from "./domains/crm/index.js";
 import { InventoryService } from "./domains/inventory/index.js";
 import { OrdersService } from "./domains/orders/index.js";
 import { SocialService } from "./domains/social/index.js";
+import { EcosystemService } from "./domains/ecosystem/index.js";
 import { registerCrmTools } from "./tools/crm.js";
 import { registerInventoryTools } from "./tools/inventory.js";
 import { registerOrdersTools } from "./tools/orders.js";
 import { registerSocialTools } from "./tools/social.js";
+import { registerEcosystemTools } from "./tools/ecosystem.js";
 import { toolResult } from "./tools/helpers.js";
 const DEFAULT_API_URL = "https://graphapi.kanvas.dev/graphql";
 // OpenClaw v2026.4.5+ calls register() per-agent-context (main, subagents,
@@ -20,6 +22,7 @@ let sharedCrm = null;
 let sharedInventory = null;
 let sharedOrders = null;
 let sharedSocial = null;
+let sharedEcosystem = null;
 let startupBannerShown = false;
 let skipBannerShown = false;
 function resolveConfig(pluginConfig) {
@@ -111,6 +114,7 @@ export default {
             sharedInventory = new InventoryService(sharedClient);
             sharedOrders = new OrdersService(sharedClient);
             sharedSocial = new SocialService(sharedClient);
+            sharedEcosystem = new EcosystemService(sharedClient);
         }
         // Tools and hooks must be registered on every api object — each one is
         // a separate agent context (main, subagents, cron lanes).
@@ -119,6 +123,7 @@ export default {
         registerInventoryTools(api, sharedInventory, ensureAuth);
         registerOrdersTools(api, sharedOrders, ensureAuth);
         registerSocialTools(api, sharedSocial, ensureAuth);
+        registerEcosystemTools(api, sharedEcosystem, ensureAuth);
         api.registerTool({
             name: "kanvas_test_connection",
             label: "Test Connection",
@@ -224,6 +229,19 @@ ALWAYS schedule follow-ups in Kanvas so the human team can see them — NEVER st
 - \`kanvas_list_events\` → list scheduled events/follow-ups
 - For structured follow-up data (tracking status, priority, custom fields), use \`kanvas_create_message\` with verb "follow_up" and a JSON payload containing { due_date, lead_id, action, status, priority }.
 
+**Ecosystem (Companies, Branches, Roles, Users)**
+Use when the user asks about companies, branches/locations, user management, roles, or permissions.
+- \`kanvas_list_companies\` → list/search companies
+- \`kanvas_list_branches\` → list/search branches (filter by companies_id for a specific company)
+- \`kanvas_list_roles\` → list available roles (find role IDs like "super admin")
+- \`kanvas_list_company_users\` → list users in the current company
+- \`kanvas_add_user_to_company\` → add a user to a company with optional role
+- \`kanvas_remove_user_from_company\` → remove a user from a company
+- \`kanvas_add_user_to_branch\` → add a user to a branch/location
+- \`kanvas_remove_user_from_branch\` → remove a user from a branch
+- \`kanvas_assign_role_to_user\` → assign roles (e.g. super admin). Call \`kanvas_list_roles\` first to get role IDs.
+- \`kanvas_remove_role_from_user\` → remove a role from a user
+
 **Diagnostics**
 - \`kanvas_test_connection\` → verify the API is reachable
 

package/dist/tools/ecosystem.js

@@ -0,0 +1,145 @@
+import { Type } from "@sinclair/typebox";
+import { toolResult } from "./helpers.js";
+const WhereClause = Type.Optional(Type.Array(Type.Object({
+    column: Type.String(),
+    operator: Type.String({ description: 'e.g. "EQ", "LIKE"' }),
+    value: Type.Unknown(),
+}), { description: "Filter conditions" }));
+export function registerEcosystemTools(api, service, ensureAuth) {
+    // ── Read tools ─────────────────────────────────────────────
+    api.registerTool({
+        name: "kanvas_list_companies",
+        label: "List Companies",
+        description: "List or search companies in the Kanvas ecosystem.",
+        parameters: Type.Object({
+            first: Type.Optional(Type.Number({ description: "Max results (default 25)" })),
+            search: Type.Optional(Type.String({ description: "Search keyword" })),
+            where: WhereClause,
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.listCompanies(params.first, params.search, params.where));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_list_branches",
+        label: "List Branches",
+        description: "List or search company branches. Filter by companies_id to get branches for a specific company.",
+        parameters: Type.Object({
+            first: Type.Optional(Type.Number({ description: "Max results (default 25)" })),
+            search: Type.Optional(Type.String({ description: "Search keyword" })),
+            where: WhereClause,
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.listBranches(params.first, params.search, params.where));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_list_roles",
+        label: "List Roles",
+        description: "List available roles. Use this to find role IDs (e.g. super admin) before assigning roles to users.",
+        parameters: Type.Object({
+            first: Type.Optional(Type.Number({ description: "Max results (default 50)" })),
+            search: Type.Optional(Type.String({ description: "Search by role name" })),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.listRoles(params.first, params.search));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_list_company_users",
+        label: "List Company Users",
+        description: "List users in the current company. Supports search and filtering by user fields.",
+        parameters: Type.Object({
+            first: Type.Optional(Type.Number({ description: "Max results (default 25)" })),
+            search: Type.Optional(Type.String({ description: "Search keyword" })),
+            where: WhereClause,
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.listCompanyUsers(params.first, params.search, params.where));
+        },
+    });
+    // ── Write tools ────────────────────────────────────────────
+    api.registerTool({
+        name: "kanvas_add_user_to_company",
+        label: "Add User to Company",
+        description: "Add an existing user to a company, optionally with a specific role.",
+        parameters: Type.Object({
+            company_id: Type.String({ description: "Company ID" }),
+            user_id: Type.String({ description: "User ID" }),
+            role_id: Type.Optional(Type.String({ description: "Role ID (use kanvas_list_roles to find it)" })),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.addUserToCompany(params.company_id, params.user_id, params.role_id));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_remove_user_from_company",
+        label: "Remove User from Company",
+        description: "Remove a user from a company.",
+        parameters: Type.Object({
+            company_id: Type.String({ description: "Company ID" }),
+            user_id: Type.String({ description: "User ID" }),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.removeUserFromCompany(params.company_id, params.user_id));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_add_user_to_branch",
+        label: "Add User to Branch",
+        description: "Add a user to a company branch/location.",
+        parameters: Type.Object({
+            branch_id: Type.String({ description: "Branch ID" }),
+            user_id: Type.String({ description: "User ID" }),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.addUserToBranch(params.branch_id, params.user_id));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_remove_user_from_branch",
+        label: "Remove User from Branch",
+        description: "Remove a user from a company branch/location.",
+        parameters: Type.Object({
+            branch_id: Type.String({ description: "Branch ID" }),
+            user_id: Type.String({ description: "User ID" }),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.removeUserFromBranch(params.branch_id, params.user_id));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_assign_role_to_user",
+        label: "Assign Role to User",
+        description: "Assign one or more roles to a user. Requires admin privileges. Use kanvas_list_roles to find role IDs.",
+        parameters: Type.Object({
+            user_id: Type.String({ description: "User ID" }),
+            role_ids: Type.Array(Type.String(), { description: "Array of role IDs to assign" }),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.assignRoleToUser(params.user_id, params.role_ids));
+        },
+    });
+    api.registerTool({
+        name: "kanvas_remove_role_from_user",
+        label: "Remove Role from User",
+        description: "Remove a role from a user. The role parameter can be the role ID or name.",
+        parameters: Type.Object({
+            user_id: Type.String({ description: "User ID" }),
+            role: Type.String({ description: "Role ID or name to remove" }),
+        }),
+        async execute(_id, params) {
+            await ensureAuth();
+            return toolResult(await service.removeRoleFromUser(params.user_id, params.role));
+        },
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kanvas/openclaw-plugin",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Connects agents to Kanvas — your company's nervous system for CRM, inventory, orders, and messaging.",
   "license": "MIT",
   "repository": {