@elitedcs/ghl-mcp 3.79.0 → 3.81.0

package/CHANGELOG.md

@@ -1,5 +1,90 @@
 # Changelog
 
+## 3.81.0 — one cockpit, and a launcher that makes itself, for Command OS subscribers
+
+The Command OS cockpit had grown into four screens that read as four products: the
+board in one dark theme and font, Your agency in another, Brands in light cream, and
+the assessment in a third dark theme with no way back except the browser's Back button.
+This release gives all four one shell: the same colours, type and top bar, and every
+screen can reach the hub, the board and each other.
+
+Text got bigger. Measured in a browser at a 20px base setting, the share of characters
+smaller than 18px went from 77% to 15% on the board, 74% to 6% on the assessment and
+45% to 5% on Brands. What is still small is a chip, a badge or a legend, never a sentence.
+
+**Your Anthropic key has a home.** Command OS runs the stages and Design Studio on your
+own Claude account, and until now the key had three places to live, none of which the
+cockpit told you about. It is now a field on the Your agency screen. Before it is kept,
+Anthropic is asked whether it works, because a key can be present and still refuse
+every request. It is stored beside your licence, handed to the runs the cockpit starts,
+and never shown back beyond its last four characters. Removing it hands back whatever
+your computer already set, instead of throwing that away too.
+
+**The desktop launcher makes itself.** On a Command OS licence the double-click
+launcher is created the first time the cockpit starts, and when you run the install
+command, once. Nothing asks you to paste a second line. If you delete the icon it stays
+deleted. A launcher that was only half written no longer counts as installed, so one
+failed write cannot block every later repair.
+
+**The $97 product is unchanged at 250 tools, 51 modules, 112 free.**
+
+**Also in this release**
+
+A readiness note in the AI employee demo no longer names a private account. The
+`list_templates` description said clinic, med spa, dental and more while exactly one
+template ships; it now says so.
+
+On board but not yet offered: Design Studio's conversion mode, a rulebook for a page
+that has to sell. The code is in this version and nothing in the cockpit or the hub
+reaches it yet. It gets its own release after a run on a real brand.
+
+## 3.80.0 — the phone side of the AI employee, for Command OS subscribers
+
+GoHighLevel's Voice AI answers a client's calls. Until now the only way to set one up
+was by hand in the GoHighLevel screen. This release adds twelve tools that build, wire,
+bind and prove a phone agent from a conversation, and **they belong to the Command OS
+plan**: on a GHL Command licence Claude says they are not included and nothing runs.
+**The $97 product is unchanged at 250 tools, 51 modules, 112 free.**
+
+What they do: say whether a call can land on the sub-account at all (the numbers it
+owns, which agent answers each, the backup rota, the number pools); list, read, create,
+change and remove an agent; give it what it may do mid-call (transfer to a person, text
+the caller, fill a contact field from what was said, book on a calendar, start a
+workflow, answer from a knowledge base, call an outside API); and read the call logs
+with their transcripts, which is how "it answered" is shown rather than claimed.
+
+What they refuse, because GoHighLevel does not. A new agent is always born unable to
+take a call: no number, no pool, and out of the backup rota. Binding the number is a
+separate, deliberate step, and it checks the number is this sub-account's and that no
+other agent already answers on it, because GoHighLevel will silently let a second agent
+take a live number from the first. A draft workflow set to run after a call is refused:
+GoHighLevel accepts it and it never runs. A custom API action carrying headers or
+parameters is refused before the call, because they crash GoHighLevel's server and the
+action is saved anyway. Every write answers "verified" or "asserted" from an
+independent read after it, including when that read fails, so a write that landed is
+never reported as an error that invites a duplicate.
+
+Proven live, not claimed: every shape was read off GoHighLevel on a sandbox before a
+line was written; the finished tools were driven through the built server with every
+object deleted afterwards and the sandbox read back at zero; and a real 67-second test
+call was listed and read back in full by the tools. Six adversarial review rounds to a
+ship verdict, twenty-three findings fixed on the way.
+
+Two things are stated as unproven rather than glossed: the shape of a number-pool
+object, because no sandbox holds one, so pools are handled cautiously; and the
+create-then-bind-then-ring path on an agent these tools created, which needs a number
+that is not live to real callers.
+
+**Also in this release**
+
+The install guide now answers the three things buyers hit in their first ten minutes:
+it names the Claude Code install line beside the Desktop one, says a fresh start is two
+full quits (Cmd+Q on a Mac, the system tray on Windows, not just closing the window),
+and adds three rows to its questions table: the website Claude cannot run the installer,
+tools only load on a fresh start, and API access needs the $297 or $497 GoHighLevel plan.
+
+Counts: 250 tools, 51 modules, free tier 112.
+
 ## 3.79.0 — the automations agencies actually sell, written down
 
 The guide library grew by seven, and every one of them is a thing you can sell on a

package/README.md

@@ -513,7 +513,7 @@ Highlights (full guide: [`docs/HEADLESS.md`](docs/HEADLESS.md)):
 
 | Tool | What It Does |
 |---|---|
-| `list_templates` | List available setup templates (clinic, med spa, dental, etc.) |
+| `list_templates` | List the setup templates that ship with this install (currently one: Clinic / Med Spa) |
 | `get_template_questionnaire` | Get the questionnaire for a template — present to user conversationally |
 | `deploy_template` | Deploy a complete sub-account setup from a template (tags, fields, pipelines, workflows, forms). Supports dry-run mode. |
 
@@ -897,7 +897,7 @@ Built by **[Elite DCs, LLC](https://elitedcs.com)** — a digital marketing and
 
 **Tech stack:** TypeScript, Node.js, esbuild, MCP SDK, Zod, GHL API v2, Firebase Auth
 
-**Version:** 3.79.0
+**Version:** 3.81.0
 
 ---
 

package/dist/capture-helper.js

@@ -61,7 +61,17 @@ var CredentialsSchema = import_zod.z.object({
    *  Written once on the first cockpit run, replaced by
    *  `ghl-mcp dashboard --rotate-token`. Optional in the schema so files written
    *  by earlier versions still parse. NEVER printed, logged or displayed. */
-  cockpit_seat_token: import_zod.z.string().optional()
+  cockpit_seat_token: import_zod.z.string().optional(),
+  /** The operator's OWN Anthropic key (2026-09-05, hub audit). Command OS runs
+   *  the build stages and Design Studio on the member's Claude account — ours is
+   *  not on offer — and until now that key had no home in setup at all: it had to
+   *  be typed into the Claude Desktop settings file, passed to `claude mcp add -e`,
+   *  or exported in the shell before `dashboard`, and a member who did none of
+   *  those met a stage that simply failed. Saved here from the cockpit's Your
+   *  agency screen and folded into the environment the run inherits.
+   *  NEVER printed, logged or sent back to the page — the screen shows only the
+   *  last four characters of what is saved. */
+  anthropic_api_key: import_zod.z.string().optional()
 });
 function appDataDir() {
   const override = process.env.GHL_MCP_CONFIG_DIR?.trim();