DeskcommCRM
Open-source AI sales OS — self-hosted CRM with native AI agents + WhatsApp (WAHA). Open alternative to Kommo, Octadesk & Intercom for any business that sells by chat. MCP-ready, multi-tenant, LGPD.
Discover how hostgator-setup-kit/install.sh validates environment variables individually. Learn about its recursive prompts and validation functions for robust setup.
How Server Actions and REST Route Handlers Differ in Authentication SurfaceDiscover the authentication differences between Server Actions and REST Route Handlers. Learn how each handles security for your Next.js app and API routes.
How DeskcommCRM SPECS_PARTE Lists Gate New Playwright Specs in CILearn how DeskcommCRM SPECS_PARTE lists gate new Playwright specs in CI. Understand the e2e.yml workflow and spec whitelisting for efficient testing.
How `pnpm test:db` Spins Up an Ephemeral PostgreSQL 15 Container to Run RLS Cross-Tenant InvariantsLearn how pnpm test:db spins up an ephemeral PostgreSQL 15 container using Docker to test Row-Level Security policies and prevent cross-tenant data leakage with Vitest.
How Postgres Migrations Are Versioned in supabase/migrations/ and Replicated in supabase/baseline.sqlDiscover how DeskcommCRM versions Postgres migrations using supabase/migrations/ and replicates them in supabase/baseline.sql. Ensure reproducible database installations with this three-artifact doctrine.
How Sentry's beforeSend Hook Scrubs PII Before Reports Are Sent in DeskcommCRMLearn how DeskcommCRM uses Sentry beforeSend hooks to scrub PII like CPF numbers and emails before sending error reports. Protect sensitive data with this guide.
How the LGPD PDF Export Flow Uses LGPD_SIGNING_KEY and organizations.legal_name in DeskcommCRMExplore how DeskcommCRM's LGPD PDF export uses LGPD_SIGNING_KEY and organizations.legal_name for secure data signing. Learn about digital signatures and integrity hashing.
How requireRole Composes with requirePlatformAdmin for RBAC in DeskcommCRMUnderstand how requireRole composes with requirePlatformAdmin for DeskcommCRM RBAC. Explore two-layer role enforcement and platform admin bypass for robust access control.
How DeskcommCRM Enforces AI Guardrails to Prevent Hallucinated Prices and Unsafe Tool CallsDeskcommCRM enforces AI guardrails to prevent hallucinated prices and unsafe tool calls. Learn how its dual-layer system validates monetary promises and blocks unauthorized tool executions before they happen.
How AI Guardrails Prevent Prompt Injection in DeskcommCRM: A Deep Dive into lib/agent-engine/ and lib/ai/Discover how AI guardrails in DeskcommCRM's lib agent-engine and lib ai prevent prompt injection. Learn about synchronous before-send checks for secure LLM interactions.
How Vercel AI Gateway Tracks Cost and Token Usage in DeskcommCRMDiscover how Vercel AI Gateway automatically tracks cost and token usage for DeskcommCRM. Gain insights into your AI expenses without custom infrastructure.
How Vercel AI Gateway Routes Requests Across Anthropic, OpenAI, and Google Models in DeskcommCRMLearn how DeskcommCRM uses Vercel AI Gateway to route requests to Anthropic, OpenAI, and Google models with a four-tier fallback. Simplify your AI integration.
Have a question about this repo?
These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:
curl -s "https://instagit.com/install.md" 
Maintain an open-source project? Get it listed too →