diff --git a/dashboard/src/App.jsx b/dashboard/src/App.jsx
index 888d248..cc75da5 100644
--- a/dashboard/src/App.jsx
+++ b/dashboard/src/App.jsx
@@ -179,7 +179,13 @@ function CustomerForm({ onDone, onCancel, customer }) {
     }
   }
 
+  const [error, setError] = useState('')
+
   const submit = async () => {
+    if (!form.name.trim()) { setError('שם לקוח הוא שדה חובה'); return }
+    if (!form.espocrm_url.trim()) { setError('EspoCRM URL הוא שדה חובה'); return }
+    if (!isEdit && !form.espocrm_api_key) { setError('יש להזין שם משתמש וסיסמה'); return }
+    setError('')
     const payload = { ...form }
     if (!payload.espocrm_api_key) delete payload.espocrm_api_key
     const url = isEdit ? `${API}/customers/${customer.id}` : `${API}/customers`
@@ -223,6 +229,7 @@ function CustomerForm({ onDone, onCancel, customer }) {
           <p className="text-[10px] text-slate-400 text-right">השאר ריק כדי לא לשנות</p>
         )}
       </div>
+      {error && <p className="text-xs text-red-600 font-bold text-right">{error}</p>}
       <div className="flex gap-2">
         <button onClick={submit}
           className="deep-action-gradient text-white px-4 py-2.5 rounded-xl font-bold flex-1 shadow-lg shadow-blue-500/20 active:scale-95 transition-all">
@@ -504,16 +511,7 @@ function CustomerDetail({ customerId, onDelete }) {
         </table>
       </section>
 
-      {available.length > 0 && (
-        <div className="mt-6 bg-white rounded-xl p-6">
-          <h4 className="text-sm font-bold text-slate-400 uppercase tracking-widest mb-3">הוסף הרחבה</h4>
-          <select onChange={e => e.target.value && assign(parseInt(e.target.value))}
-            className="bg-slate-50 border-none rounded-xl px-4 py-2.5 w-full text-sm focus:ring-2 focus:ring-blue-500">
-            <option value="">בחר הרחבה...</option>
-            {available.map(e => <option key={e.id} value={e.id}>{e.name} v{e.latest_version}</option>)}
-          </select>
-        </div>
-      )}
+      {/* Extensions are auto-assigned on customer creation */}
     </div>
   )
 }
diff --git a/server.py b/server.py
index ef8621f..d2953b8 100644
--- a/server.py
+++ b/server.py
@@ -541,7 +541,14 @@ class APIHandler(BaseHTTPRequestHandler):
             VALUES (%s,%s,%s,%s,%s,%s,%s,%s) RETURNING id""",
             (body['name'], body.get('email'), body['espocrm_url'], body['espocrm_api_key'],
              body.get('coolify_url'), body.get('coolify_token'), body.get('coolify_app_uuid'), body.get('notes')), fetch='one')
-        self._respond(201, {'id': row['id'], 'name': body['name']})
+        cid = row['id']
+        # Auto-assign all active extensions to new customer
+        all_exts = query("SELECT id FROM extensions WHERE is_active", fetch='all')
+        for ext in all_exts:
+            query("""INSERT INTO customer_extensions (customer_id, extension_id, auto_update, license_status)
+                VALUES (%s, %s, true, 'active') ON CONFLICT DO NOTHING""",
+                (cid, ext['id']), fetch=None)
+        self._respond(201, {'id': cid, 'name': body['name']})
 
     def _update_customer(self, cid, body):
         fields, values = [], []