@startanaicompany/crm 1.0.1 → 1.0.2

package/README.md

@@ -8,44 +8,61 @@ AI-first CRM CLI (`saac_crm`) — manage leads, API keys, and user accounts from
 npm install -g @startanaicompany/crm
 ```
 
-## First-Time Setup
+---
+
+## 🤖 AI Agent Quick Start (zero-auth, no human needed)
+
+Agents bootstrap themselves with a single command — **no credentials required**:
 
 ```bash
-# 1. Point at your CRM deployment
+# Step 1: create your own API key (no auth needed)
 saac_crm config set --url https://your-crm.example.com
+saac_crm keys create --name my-agent
+# → returns crm_xxxxxxxxxxxx — store this as your API key
 
-# 2. Register your workspace and create the first admin key
-#    (prompts for deployment admin password)
-saac_crm register --workspace mycompany --name "main-admin-key"
-
-# 3. Save the returned key as default (or use SAAC_CRM_API_KEY env)
-saac_crm config set --api-key crm_xxxxxxxxxxxx
-# OR
+# Step 2: set the key and start managing leads
 export SAAC_CRM_API_KEY=crm_xxxxxxxxxxxx
+saac_crm leads create --name "Jane Smith" --email "jane@example.com"
+saac_crm leads list
 ```
 
 > **Auth priority**: `--api-key` flag > `SAAC_CRM_API_KEY` env var > config file (`~/.saac_crm/config.json`)
 
-## Commands
+> ⚠️ **Agents: never call `saac_crm register`** — that command is for one-time operator setup only (requires deployment password). Your entry point is always `keys create --name`.
 
-### Workspace Registration
+---
+
+## 👤 Operator Setup (one-time, human)
+
+This is done once per deployment — **not by agents**:
 
 ```bash
-# Register workspace + create first admin key (all-in-one)
-saac_crm register --workspace mycompany --name "admin-key"
+# 1. Point at your deployment
+saac_crm config set --url https://your-crm.example.com
 
-# Check current workspace slug (public — no auth needed)
-curl https://your-crm.example.com/api/v1/workspace
+# 2. Register workspace + create admin key (prompts for workspace slug and password)
+saac_crm register --name "main-admin-key"
+# → prompts: Workspace slug (e.g. mycompany):
+# → prompts: Deployment admin password:
+# → returns crm_xxx admin key — store securely
+
+# 3. Save admin key and create first human user account
+saac_crm config set --api-key crm_xxx_admin_key
+saac_crm users create --email admin@example.com --name "Admin" --role admin
 ```
 
+---
+
+## Commands
+
 ### API Keys
 
 ```bash
-# Create an agent key (no auth required)
+# Create agent key — ZERO AUTH, no prior setup needed
 saac_crm keys create --name "my-agent"
 
-# Create an admin scope key (requires deployment password + workspace slug)
-saac_crm keys create --name "admin-agent" --scope admin \
+# Create admin scope key (operator only — requires deployment password + workspace slug)
+saac_crm keys create --name "admin-key" --scope admin \
   --workspace mycompany --admin-password <deployment-password>
 
 # List all keys (metadata only — full key never shown again)
@@ -83,7 +100,8 @@ saac_crm leads history <id>
 ### Users (requires admin scope key)
 
 ```bash
-# Create a human user account
+# Create a human user account (both commands are equivalent)
+saac_crm users create --email admin@example.com --name "Admin User" --role admin
 saac_crm users register --email admin@example.com --name "Admin User" --role admin
 
 # List users
@@ -96,6 +114,23 @@ saac_crm users update <id> --role viewer
 saac_crm users deactivate <id>
 ```
 
+### Human Login
+
+```bash
+# Log in as admin/viewer — saves JWT to config for dashboard access
+saac_crm login --workspace mycompany --email admin@example.com
+# → prompts for password, saves JWT to ~/.saac_crm/config.json
+```
+
+### Workspace Registration (operator only)
+
+```bash
+# First-time setup — registers workspace slug + creates admin key
+# Prompts for --workspace and --admin-password if not provided
+saac_crm register --name "main-admin-key"
+saac_crm register --name "main-admin-key" --workspace mycompany --admin-password <pw>
+```
+
 ### Configuration
 
 ```bash
@@ -111,11 +146,10 @@ saac_crm config get
 --url <url>       Override API base URL for this command
 ```
 
-## Human Login
+## Architecture
 
-Humans log in via the web UI at the deployment URL. Login requires:
-1. **Workspace slug** (e.g. `mycompany`)
-2. **Email**
-3. **Password**
+This is a **single-tenant** system: one workspace slug per deployment, registered once by an operator.
 
-User accounts are created by an AI agent using an admin scope key via `saac_crm users register`.
+- **Agents** → self-service `keys create` → manage leads
+- **Operators** → `register` once → `users create` → human accounts
+- **Humans** → `login` → web dashboard at your deployment URL

package/index.js

@@ -99,7 +99,7 @@ const program = new Command();
 program
   .name('saac_crm')
   .description('AI-first CRM CLI — manage leads and API keys')
-  .version('1.0.1')
+  .version('1.0.2')
   .option('--api-key <key>', 'API key (overrides SAAC_CRM_API_KEY env and config)')
   .option('--url <url>', 'API base URL (overrides config)');
 
@@ -115,9 +115,14 @@ configCmd
   .option('--url <url>', 'CRM API base URL (e.g. https://yourapp.example.com)')
   .option('--api-key <key>', 'Default API key to use')
   .action((opts) => {
+    // NOTE: commander.js may consume --url and --api-key at the parent program level
+    // if they share the same option names. Always fall back to program.opts().
+    const globalOpts = program.opts();
     const cfg = loadConfig();
-    if (opts.url) cfg.apiUrl = opts.url;
-    if (opts.apiKey) cfg.apiKey = opts.apiKey;
+    const urlValue = opts.url || globalOpts.url;
+    const apiKeyValue = opts.apiKey || globalOpts.apiKey;
+    if (urlValue) cfg.apiUrl = urlValue;
+    if (apiKeyValue) cfg.apiKey = apiKeyValue;
     saveConfig(cfg);
     console.log('Configuration saved to', CONFIG_FILE);
     printJSON(cfg);
@@ -317,7 +322,7 @@ leadsCmd
     };
     try {
       const res = await client.post('/leads', body, { headers });
-      printJSON(res.data.data);
+      printJSON(res.data);
     } catch (err) {
       handleError(err);
     }
@@ -330,15 +335,20 @@ leadsCmd
   .option('--email <email>', 'Filter by email (partial match)')
   .option('--company <company>', 'Filter by company (partial match)')
   .option('--tag <tag>', 'Filter by tag — repeatable, AND logic', (v, prev) => prev.concat([v]), [])
+  .option('--api-key-id <id>', 'Filter by the API key ID that created the lead')
+  .option('--self', 'Filter leads created by the current API key (shorthand for --api-key-id self)')
   .option('--page <n>', 'Page number', '1')
   .option('--per-page <n>', 'Results per page', '20')
   .action(async (opts) => {
     const globalOpts = program.opts();
     const client = getClient(globalOpts);
+    // --self is a shorthand for --api-key-id self
+    const apiKeyIdFilter = opts.self ? 'self' : opts.apiKeyId;
     const params = {
       ...(opts.status && { status: opts.status }),
       ...(opts.email && { email: opts.email }),
       ...(opts.company && { company: opts.company }),
+      ...(apiKeyIdFilter && { api_key_id: apiKeyIdFilter }),
       page: opts.page,
       per_page: opts.perPage
     };
@@ -361,7 +371,7 @@ leadsCmd
     const client = getClient(globalOpts);
     try {
       const res = await client.get(`/leads/${id}`);
-      printJSON(res.data.data);
+      printJSON(res.data);
     } catch (err) {
       handleError(err);
     }
@@ -399,7 +409,7 @@ leadsCmd
     };
     try {
       const res = await client.put(`/leads/${id}`, body);
-      printJSON(res.data.data);
+      printJSON(res.data);
     } catch (err) {
       handleError(err);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startanaicompany/crm",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "AI-first CRM CLI — manage leads and API keys from the terminal",
   "main": "index.js",
   "bin": {