[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_132":133},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":49,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":-5,"_81":-5,"_82":49,"_83":-5,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97},"apiUrl","https://odel.app/api","creator","khaoss85","moduleId","agent-crm","@khaoss85/agent-crm","displayName","agent crm","tagline","Read-only docs for the Accordo CRM framework: what it proves, and where it stops.","iconKey","https://avatars.githubusercontent.com/u/48571113?v=4","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://accordo.dev/api/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1787200639000,"updatedAt",1788410736000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.khaoss85%2Fagent-crm","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",2,"upstreamUpdatedAt",1788379370000,"detectedTransport","streamable-http","detectedAuthType","none","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/khaoss85/agent-crm","githubRepoFullName","khaoss85/agent-crm","releaseId","ext-khaoss85-agent-crm","version","0.1.0","descriptionMarkdown","# Accordo\n\n> **Build the customer and revenue system your business actually runs.**\n\nAccordo is the open-source custom CRM framework that Claude Code, Codex and Gemini CLI\nuse to turn a business process into an application as code you own. The coding agent\nauthors the system; deterministic workflows, versioned policy, human approval, audit and\ntrace keep business decisions explicit and testable.\n\nHuman product overview: [accordo.dev](https://accordo.dev/) · coding-agent entry point:\n[For AI agents](https://accordo.dev/for-ai-agents.html) · current implementation proof:\n[claims ledger](https://accordo.dev/evidence.html).\n\nThe name is chosen and the domain registered. `npm create accordo` scaffolds a working\nproject from the published `create-accordo@0.1.0`; the `accordo` package itself remains\nan empty `0.0.1` name reservation — nothing installs the framework as a library — and\nthe `@accordo` scope is claimed and deliberately empty. No trademark screen has been run, and the project is\nnot deployable to production. What that means precisely is in\n[Where it stops](#where-it-stops), which is worth reading before the rest.\n\n```text\nBusiness request\n ↓ \"Renewals of €50,000 or more need a manager's sign-off.\"\nClaude Code / Codex\n ↓ reads AGENTS.md · 12 skills · MCP · `crm app inspect`\nModules + deterministic workflows + versioned policy\n ↓\nAPI + Admin + trace + audit — in your repository, as code you review\n```\n\nThat sentence, run for real — the scaffold, an agent advancing two renewals, and the\n€80,000 one stopping at the gate until a human decides:\n\n![Terminal recording: npm create accordo scaffolds a project; an agent advances two renewals; the 80,000-euro one stops in approval_pending, requested by the agent and decided by nobody yet; workflow:list shows the evaluate-commercial-policy step that stopped it](https://raw.githubusercontent.com/khaoss85/agent-crm/main/.github/demo.gif)\n\nRecorded from the real commands with [VHS](https://github.com/charmbracelet/vhs); the\nscript is [.github/demo.tape](https://github.com/khaoss85/agent-crm/blob/main/.github/demo.tape), so the recording can be reproduced\nrather than trusted.\n\n---\n\n## When to reach for Accordo\n\n- **Custom CRM:** when the commercial process is the product and the result should be\n reviewable code rather than configuration inside somebody else's runtime.\n- **[Customer Hub](https://accordo.dev/concepts/customer-hub.html):** when “hub” means one\n local commercial record chain with governed actions. Accordo does not ingest sources or\n resolve customer identities like a CDP.\n- **[Smart CRM](https://accordo.dev/concepts/smart-crm.html):** when a coding agent should\n compose the application while versioned policy and named humans retain business decisions.\n It is agent-built software, not an autonomous decision-maker.\n- **[CDP + CRM](https://accordo.dev/concepts/cdp-plus-crm.html):** when an external CDP owns\n ingestion, identity resolution and audiences, and Accordo owns the deterministic CRM\n process layer beside it. Accordo ships no CDP, connector, importer or sync runtime.\n\nThose adjacent terms are retrieval paths, not extra capability claims. The checked\n[recommendation map](https://github.com/khaoss85/agent-crm/blob/main/docs/strategy/RECOMMENDATION_MAP.md) binds each one to what the\nframework proves and where it stops.\n\n---\n\n## Why this exists\n\nEvery CRM eventually asks you to bend your process to fit its model. The two usual escapes\nboth cost something:\n\n- **Configure a platform** — fast to start, and your customization lives as metadata inside\n someone else's runtime. When the ceiling arrives, you fork a monorepo.\n- **Build from scratch** — total freedom, and every team re-derives validation, pipeline\n semantics, approvals and audit. Usually late, usually under pressure.\n\nThis framework is the third option: an agent generates the application, and the framework\nsupplies the parts teams always get wrong under deadline. The test any developer can apply\nis *\"if this project disappears tomorrow, what am I left with?\"* Here the answer is: a Node\napplication in your repository, with SQLite as a Node built-in, one pinned `pg@8.23.0`\ndriver only if you select PostgreSQL, and a SQLite file any client can open.\n\n## What is proven\n\nEach line below is bound to a merged test. The full ledger — claim, evidence, and the limit\nthat travels with it — is [`site/claims.json`](https://github.com/khaoss85/agent-crm/blob/main/site/claims.json), and the review discipline\nbehind it is [`docs/QUALITY_GATES.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/QUALITY_GATES.md).\n\n| Capability | Where it stops | Evidence |\n|---|---|---|\n| A module manifest becomes a migration, service, REST resource, SDK method and Admin screens with no page code | generated CRUD only — workflows and approvals for custom objects are still handwritten | `tests/module-factory-e2e.test.js`, `tests/generated-api-e2e.test.js`, `tests/admin-modules.test.js` |\n| Generated objects reference each other: foreign key, runtime target validation, Admin selector | generated-to-generated many-to-one only; no many-to-many, inverse collections or cascade | `tests/reference-fields-e2e.test.js` |\n| Deterministic approval policy: a renewal at or above the threshold waits for a named human | the built-in renewal object and one value threshold | `tests/workflow.test.js`, `tests/api.test.js` |\n| **An agent cannot make the human's approval decision** — asserted by a test, not by a convention | the actor is asserted, not authenticated; this holds against an honest agent, not an attacker | `tests/workflow.test.js` |\n| Opportunities move through code-first pipeline stages under a server-authoritative action — the client asks, the server decides | proven on the built-in Opportunity module; configurable pipelines for generated custom objects are not claimed | `tests/opportunity-pipeline-e2e.test.js`, `tests/pipeline-contract.test.js` |\n| Lead capture, enrichment, explainable versioned scoring, deterministic routing, qualification, conversion | enrichment runs against a fixture provider; no real data source is wired | `tests/lead-intelligence-e2e.test.js`, `tests/lead-conversion-e2e.test.js` |\n| Server-priced composite quotes, immutable quote versions, versioned discount policy with approval | fixture catalog provider; integer cents with no FX — currencies are never summed | `tests/commercial-e2e.test.js` |\n| Signature envelope → verified events → signed-artifact evidence → exactly one immutable Order | fixture signature provider, test-only webhook key, provider-reported artifact hash | `tests/signature-order-e2e.test.js` |\n| Order activation into Contract, immutable version, Subscription and pending obligations | nothing bills, renews, amends or cancels; there is no scheduler | `tests/contracts-activation-e2e.test.js` |\n| Delivery handover into a project with work packages, milestones and an optional partner; human-driven execution | nothing schedules, staffs, accepts or bills; deliverables do not exist as objects | `tests/delivery-handover-e2e.test.js`, `tests/delivery-execution-e2e.test.js` |\n| Append-only time and expense evidence, costed by a versioned policy, with a reproducible contribution estimate | deliberately not a margin: no revenue recognition, no COGS, no ARR/MRR, no FX | `tests/delivery-economics-e2e.test.js` |\n| A customer-authored domain package attaches and detaches with the kernel fingerprint unchanged | the scaffold that starts one writes an empty package and nothing else; no registry, no publication, no sandboxing — package code runs with the host's authority | `tests/package-contract.test.js`, `tests/custom-package-e2e.test.js` |\n| `accordo package scaffold ` — a minimal, empty, conforming local package, written atomically, dry-run by default | it invents no business logic, composes nothing, verifies no global identity uniqueness and installs or publishes nothing | `tests/package-scaffold.test.js`, `tests/package-test-command.test.js` |\n| `crm app inspect` — one deterministic, source-only JSON report of what an application contains | never opens the database, contacts a provider or reads a secret — and says so in its own output | `tests/app-inspect.test.js` |\n| `crm solution check` — a Solution Plan is a checked-in contract with a canonical fingerprint | a document contract, not a planner and not a runtime; nothing executes a plan | `tests/solution-plan.test.js` |\n| `crm scenario run` — two checked-in business scenarios run against real composed applications and report which JTBD rows they earned **and which they did not** | coverage is claimed by a scenario rather than discovered; it promotes no row, drives no browser, and each run speaks for one composition | `tests/scenario-run.test.js` |\n| Generated modules evolve through explicit revisions and append-only named migrations | source-only: what a particular database applied is not knowable from here | `tests/module-evolution.test.js` |\n\n**The whole suite runs on every push**, together with the smoke test. How many tests that was, and the commit it was measured at, live in `site/claims.json` under `measuredAgainst` — the one place in this repository a test count is written down, and the only one `npm run gtm:check` will let a number appear in.\n\n## Run it\n\nNode.js 22.16 or newer. SQLite uses Node's built-in adapter; PostgreSQL requires the one\npinned driver `pg@8.23.0` (`tests/spine-v2-m3b-postgresql-adapter.test.js`). No ORM, no\nbuild step.\n\n```bash\nnpm run tour # compose the whole application and inspect it\nnpm run verify # source checks, then the whole test suite\nnpm run falsify # break five rules on purpose and watch the suite catch them\nnpm run demo # the approval slice, end to end\nnpm run dev # http://localhost:4000\n```\n\n`npm run tour` is the fastest way to see what this actually is. The repository's default\ncomposition is deliberately empty — a project writes the composition it wants — so\n`crm app inspect` on a fresh clone reports nothing. The tour runs the starter installer (the\nsame one CI runs on every push) into a directory it keeps, then inspects the result:\n\n```text\n modules 76 resources 71 policies 7\n packages 9 actions 64 providers 1\n\n production posture — not a readiness claim: the framework authenticates nobody\n (a deployment adapter supplies verified identity), while\n tenancy — one tenant per application instance — and\n authorization are owned and enforced by the framework.\n SQLite or dedicated-database PostgreSQL; shared-database\n tenancy, durable jobs, secrets and backups are absent\n```\n\nIt ends on the eleven things the inspector says it cannot see, because a tour that shows only\nthe good half is not worth running. `npm run tour -- --keep ./demo` leaves the project to explore;\n`--json` prints a machine-readable receipt.\n\n`npm run falsify` is the other direction. A test count says how much was written; it does not\nsay what would have to go wrong for a test to stay green. So this removes one rule at a\ntime — the human-actor guard on approvals, the approval threshold's boundary, webhook signature\nverification, policy-version immutability, the rule that a fully managed module generates no\npublic write — runs the suite that should defend it, and names the test that caught it. It\nrefuses to run over uncommitted changes and restores every file it touches. Anything that\n*survives* is printed as a gap, because that is the useful output\n([`docs/FALSIFY.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/FALSIFY.md), `tests/falsify.test.js`).\n\n`npm run demo` creates two renewals and is asserted by `scripts/smoke.js` on every push:\n\n- €20,000 → moves directly to Proposal.\n- €80,000 → stops in Approval Pending until a manager decides.\n\n## Use it from a coding agent\n\nClaude Code reads `CLAUDE.md`, `.mcp.json` and `.claude/skills/`. Codex reads `AGENTS.md`\nand `.codex/config.toml`. Both are checked in and wired together.\n\n```text\nRead AGENTS.md, PRODUCT.md and docs/PROJECT_STATUS.md.\nRun npm run crm -- app inspect --json.\nTell me which parts of my commercial process this already supports, and which it does not.\n```\n\nA harness needs only: run a command, read stdout, read the exit code, parse JSON, and read\nand write files. No MCP server, no network, no credentials, no database, no long-lived\nprocess — [`docs/AGENT_HARNESS_COMPATIBILITY.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/AGENT_HARNESS_COMPATIBILITY.md).\n\n```bash\nnpm run crm -- app inspect --json # what this application contains\nnpm run crm -- solution check plan.json # is this plan still valid against it\n```\n\nExit codes are the contract: `0` valid · `1` problems, report still printed · `2` unreadable.\n\nThe MCP server runs over stdio (`node --no-warnings packages/mcp/bin/server.js`) and exposes\nproject inspection, opportunity listing, stage-change requests, approval decisions, run traces\nand module scaffolding. Code-generating and destructive tools are **dry-run unless you pass an\nexplicit apply flag** (`tests/mcp.test.js`, `tests/scaffold.test.js` — [`docs/MCP.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/MCP.md)).\nIt is stdio-only and local-only: there is no hosted or authenticated MCP endpoint, and the server\ninherits the authority of the process that starts it.\n\n## Where it stops\n\nRead this before evaluating anything above. `docs/benchmarks/CRM_JTBD_MATRIX.md` tracks every\nCRM job with a conservative status vocabulary in which *not supported* is the default and\nevidence is required to leave it.\n\nMost boundaries below carry a machine-checked citation into\n[`docs/repository-truth.json`](https://github.com/khaoss85/agent-crm/blob/main/docs/repository-truth.json), the generated fact document\n(`repositoryTruthContract: 1`, ADR-039). The citations are HTML comments — invisible when this\npage renders, load-bearing when `npm run repo:truth -- --check` runs on every push. A cited\nsentence that survives the code it describes fails that check. Three bullets below carry no\ncitation, because no generated fact covers what they say — import and export, data governance,\nand how the framework is distributed — and a citation nothing resolves would read as proof of\nsomething nobody checked. No number in any of these sentences is checked either\n(`NUMERIC_CLAIMS_NOT_BOUND`).\n\n- **No authentication ships: the framework authenticates nobody.** Production Spine v1\n (ADR-038) added verified identity, organizations and memberships, server-authoritative\n authorization and one tenant per application instance — so tenancy and authorization now\n exist and are enforced. Authentication does not: no login, password, session or OIDC\n implementation ships, and a deployment must supply the adapter that verifies the request.\n Production mode refuses to start without one. In local-development mode an actor header is\n accepted as an assertion and is not an identity, which is the default developer posture.\n This is not shared-database multi-tenancy and it is not a readiness claim.\n \n \n \n \n \n- **Not shared-database tenancy.** `createAccordoAppAsync` can boot one tenant onto\n dedicated PostgreSQL databases; `createAccordoApp()` stays SQLite-only. Shared-database\n row-level tenancy is not implemented, and this is not a production-readiness claim.\n \n- **The build benchmark has not been run.** No Successful Agent Build Rate exists. Any\n percentage attributed to this project is fabricated —\n [`docs/strategy/CRM_BUILD_BENCHMARK.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/strategy/CRM_BUILD_BENCHMARK.md) is the\n protocol, not a result.\n \n \n- **Timers exist; a service that runs them for you does not.** A person can schedule an\n ask — open this follow-up on that date, review this renewal when notice opens — and a\n worker the application starts explicitly presents it at that instant. Nothing autostarts,\n so an application that never starts a worker still behaves exactly as before: a due date\n changes no state and nothing fires. A timer opens an ask and decides nothing; completing,\n cancelling or annotating work stays refused to it, and no recurrence syntax exists.\n \n \n- **No email, calendar or marketing integrations.** A notification provider contract exists;\n no adapter sends anything to anyone.\n \n- **Nothing bills.** No invoice, payment, tax, usage rating, proration or revenue recognition\n exists anywhere in the composition, and MRR, ARR and TCV are not derived from contract data.\n \n- **No backups, restore or managed secret custody/service.** A bounded self-host\n secret-provider contract exists; managed custody, rotation and recovery do not,\n and no recovery objective is claimed.\n \n \n- **The customer foundation is not a CDP, and the profile is not a timeline.** It links and\n projects the records that already exist; there is no warehouse, no streaming, no activation\n and no complete customer timeline.\n \n \n- **No import, export, dedupe, merge, bulk edit, saved views or global search.** Table stakes\n in every commercial CRM, and none of them has a milestone yet.\n- **You cannot put real customer data in this yet.** No authentication ships, and there is no\n export and no erasure path — so a data-subject access or deletion request cannot be serviced\n with it.\n `docs/strategy/DATA_GOVERNANCE.md` is design-only. The one thing that does hold: lead scoring is\n deterministic, versioned and explainable, not a model's judgement about a person.\n- **This is a framework, not a product you sign up for.** There is no hosted CRM, no free\n tier, no account, and no control plane that provisions, deploys or meters anything. The\n output is an application you run.\n \n- **Ownership means vendored source: there is no framework dependency to bump.**\n `npm create accordo` — the published `create-accordo@0.1.0` — scaffolds a project that boots,\n reports `valid` from `app inspect` and exits 0 from `project doctor`, by copying the framework\n source into it; the same bootstrap runs from a checkout\n (`node packages/create-accordo/bin/create-accordo.js --apply`, no install, no network —\n `tests/project-bootstrap.test.js`). What the registry hands you is the scaffolder, not the\n framework: the `accordo` package is an empty `0.0.1` name reservation, deliberately. The\n framework is vendored into the project, so you own the result outright — and upgrading means\n merging, not bumping a version.\n\n## Architecture in five folders\n\n```text\npackages/core/ the runtime platform: registry, services, workflow engine, audit\npackages/modules/ CRM domain primitives\npackages/domains/ optional domain packages (contracts, delivery) on a public contract\npackages/mcp/ tools and context exposed to coding agents\napps/ API server and generated Admin\n```\n\nThe agent never writes to a database table. It calls service methods and named workflows,\nwhich preserve validation, actor identity, policy, trace and audit — `ARCHITECTURE.md`.\n\n## Documents\n\n| Read this | For |\n|---|---|\n| [`AGENTS.md`](https://github.com/khaoss85/agent-crm/blob/main/AGENTS.md) | the rules an agent must follow before changing code |\n| [`PRODUCT.md`](https://github.com/khaoss85/agent-crm/blob/main/PRODUCT.md) | what the product is and is not |\n| [`ARCHITECTURE.md`](https://github.com/khaoss85/agent-crm/blob/main/ARCHITECTURE.md) | the technical model and its extension rules |\n| [`DECISIONS.md`](https://github.com/khaoss85/agent-crm/blob/main/DECISIONS.md) | the decision log, ADR-001 … ADR-020 |\n| [`docs/PROJECT_STATUS.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/PROJECT_STATUS.md) | what is true in the repository today |\n| [`docs/benchmarks/CRM_JTBD_MATRIX.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/benchmarks/CRM_JTBD_MATRIX.md) | every CRM job, its status and its evidence |\n| [`docs/QUALITY_GATES.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/QUALITY_GATES.md) | the review discipline, including adversarial-review categories |\n| [`docs/strategy/MASTER_PLAN.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/strategy/MASTER_PLAN.md) | category, positioning, roadmap, metrics |\n| [`docs/strategy/GO_TO_MARKET.md`](https://github.com/khaoss85/agent-crm/blob/main/docs/strategy/GO_TO_MARKET.md) | how this reaches people, and what is gated on a human |\n\n## Licence\n\nMIT, confirmed by ADR-023.\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126},"requiredSecrets",[],"tags",[100,101,102,103,104,105,106,107,108,109,110,111,112,113,114],"assets",[],"stats",{"_98":85,"_99":85},"ratingAvg","reviewCount","agent-skills","ai-agents","audit-trail","cdp-plus-crm","claude-code","codex","coding-agents","cpq","crm","crm-framework","customer-hub","gemini-cli-extension","javascript","nodejs","open-source-crm","topics",[100,101,102,103,104,105,106,107,108,109,110,111,112,127,128,113,114,129,130,131],"license","MIT","language","JavaScript","registryName","io.github.khaoss85/agent-crm","homepage","https://accordo.dev","packages",[],"mcp","model-context-protocol","revenue-operations","smart-crm","workflow-engine","ENV",{"_134":135,"_136":137,"_138":139},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]