core/crm-core

crm-core

Enterprise-ready CRM backend for B2B SaaS platforms. crm-core handles CRM data only—no billing, deploys, or ERP workloads.

Scope & Limits

• ✅ Accounts, contacts, deals, pipelines/stages, activities, notes, tags
• ✅ Multi-tenant by design (tenant_id on every table and query)
• ✅ JWT validation via JWKS (trusted identity-gateway)
• ❌ No billing data or payment secrets
• ❌ No deployment or ERP features

Authentication

crm-core trusts JWTs issued by identity-gateway.

Required claims:

• sub (user ID)
• tenantId
• roles (must include crm.read, crm.write, or crm.admin)

Domain Model

See docs/domain-model.md.

Multi-tenant Enforcement

Every request reads tenantId from the JWT and filters all reads/writes with tenant_id. This prevents data leakage across tenants.

Running Locally

cp .env.example .env
make run

Docker (API + Postgres):

docker-compose up --build

Migrations & sqlc

make migrate-up
make sqlc

Example cURL

curl -X POST http://localhost:8080/api/v1/accounts \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"name":"Acme Corp"}'

curl -X POST http://localhost:8080/api/v1/deals \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"title":"Upgrade","pipeline_id":"<pipeline>","stage_id":"<stage>","value_cents":500000}'