Visual workflow composer

The CRM Automations page offers schema-derived triggers, action configurations, all-match conditions, keyboard-accessible reorder/remove controls and explicit linear connections. Every edit invalidates compile review. Saving rereads the catalogue and permissions and uses canonical workflow creation, stopped in dry run. Existing recipes, workflow controls and the run Inspector remain available.

Saved storage contains ordered actions, not graph IDs. Inspect saved sequence reconstructs the trigger, conditions and ordered actions with position-derived node IDs and ephemeral UI edges. Editing and saving creates a new stopped dry-run copy. Branches, cycles and lifecycle expansion are refused. Agent, remote and webhook actions stay visibly held; compilation refuses them before resource lookup. Current schema and creator permission checks remain canonical, never implicit grants. Source implementation awaits configured independent review and normal release acceptance.

REST catalogue requires crm:read. Compile requires crm:edit and current credential write admission; canonical save rechecks creator authority and tenant references. The assembly MCP group shares CRM/automations/CRM API flags and original credentials, excludes runner keys, and requires write-scoped POST protocol admission even for advisory compilation. Neither assembly tool saves, enables, runs, sends or calls a provider/model. Read-only auth-family and transport registration proposals require ROOT adoption before this integration can be offered through all credential paths.