@elitedcs/ghl-mcp 3.91.1 → 3.92.2

package/dist/capture-helper.js

@@ -5,6 +5,14 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -22,61 +30,14 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/interactive-capture.ts
-var fs = __toESM(require("fs"));
-var path2 = __toESM(require("path"));
-var import_zod2 = require("zod");
+// src/attestation.ts
+var init_attestation = __esm({
+  "src/attestation.ts"() {
+    "use strict";
+  }
+});
 
 // src/credentials-store.ts
-var path = __toESM(require("path"));
-var os = __toESM(require("os"));
-var import_zod = require("zod");
-var APP_NAME = "elitedcs-ghl-mcp";
-var CredentialsSchema = import_zod.z.object({
-  license_key: import_zod.z.string().min(1),
-  email: import_zod.z.string().email(),
-  verified_at: import_zod.z.string().min(1),
-  ghl_api_key: import_zod.z.string().min(1),
-  ghl_location_id: import_zod.z.string().min(1),
-  ghl_company_id: import_zod.z.string().optional(),
-  ghl_user_id: import_zod.z.string().optional(),
-  ghl_firebase_api_key: import_zod.z.string().optional(),
-  ghl_firebase_refresh_token: import_zod.z.string().optional(),
-  // Ed25519-signed attestation from elitedcs.com/api/validate-license.
-  // v3.24.0+ writes this on every successful online validation; index.ts
-  // verifies on startup and refuses to load tools without it (closing the
-  // hand-crafted-credentials.json bypass that existed through v3.23.0).
-  // Optional in the schema only so files written by earlier versions still
-  // parse — index.ts's gate forces a re-validate when the field is missing.
-  signed_attestation: import_zod.z.string().optional(),
-  /** Stable machine id (2026-07-28). Replaces the hostname-derived
-   *  fingerprint, which changed with the network on laptops and silently ate
-   *  install slots. Written once and reused forever. */
-  device_id: import_zod.z.string().optional(),
-  /** Per-seat cockpit key (2026-08-27, Command OS PRD row 0). The cockpit binds
-   *  127.0.0.1, which stops other machines reaching the port but not other
-   *  PROGRAMS and other browsers on this one — and on a shared team machine that
-   *  is everybody. Every state-changing cockpit request must carry this value;
-   *  the served page gets it injected so the operator never types anything.
-   *  Written once on the first cockpit run, replaced by
-   *  `ghl-mcp dashboard --rotate-token`. Optional in the schema so files written
-   *  by earlier versions still parse. NEVER printed, logged or displayed. */
-  cockpit_seat_token: import_zod.z.string().optional(),
-  /** The operator's OWN Anthropic key (2026-09-05, hub audit). Command OS runs
-   *  the build stages and Design Studio on the member's Claude account — ours is
-   *  not on offer — and until now that key had no home in setup at all: it had to
-   *  be typed into the Claude Desktop settings file, passed to `claude mcp add -e`,
-   *  or exported in the shell before `dashboard`, and a member who did none of
-   *  those met a stage that simply failed. Saved here from the cockpit's Your
-   *  agency screen and folded into the environment the run inherits.
-   *  NEVER printed, logged or sent back to the page — the screen shows only the
-   *  last four characters of what is saved. */
-  anthropic_api_key: import_zod.z.string().optional(),
-  anthropic_key_check: import_zod.z.object({ fingerprint: import_zod.z.string(), at: import_zod.z.string(), ok: import_zod.z.boolean() }).optional(),
-  // Desktop OAuth app configuration. Never returned by calendar tools.
-  google_oauth_client_id: import_zod.z.string().optional(),
-  google_oauth_client_secret: import_zod.z.string().optional()
-});
 function appDataDir() {
   const override = process.env.GHL_MCP_CONFIG_DIR?.trim();
   if (override) {
@@ -98,8 +59,78 @@ function appDataDir() {
   const xdg = process.env.XDG_CONFIG_HOME || path.join(home, ".config");
   return path.join(xdg, APP_NAME);
 }
+var path, os, import_zod, APP_NAME, CredentialsSchema;
+var init_credentials_store = __esm({
+  "src/credentials-store.ts"() {
+    "use strict";
+    path = __toESM(require("path"));
+    os = __toESM(require("os"));
+    import_zod = require("zod");
+    init_attestation();
+    APP_NAME = "elitedcs-ghl-mcp";
+    CredentialsSchema = import_zod.z.object({
+      license_key: import_zod.z.string().min(1),
+      email: import_zod.z.string().email(),
+      verified_at: import_zod.z.string().min(1),
+      ghl_api_key: import_zod.z.string().min(1),
+      ghl_location_id: import_zod.z.string().min(1),
+      ghl_company_id: import_zod.z.string().optional(),
+      ghl_user_id: import_zod.z.string().optional(),
+      ghl_firebase_api_key: import_zod.z.string().optional(),
+      ghl_firebase_refresh_token: import_zod.z.string().optional(),
+      // Ed25519-signed attestation from elitedcs.com/api/validate-license.
+      // v3.24.0+ writes this on every successful online validation; index.ts
+      // verifies on startup and refuses to load tools without it (closing the
+      // hand-crafted-credentials.json bypass that existed through v3.23.0).
+      // Optional in the schema only so files written by earlier versions still
+      // parse — index.ts's gate forces a re-validate when the field is missing.
+      signed_attestation: import_zod.z.string().optional(),
+      /** The last signed pass, kept when a "no" wipes signed_attestation (Codex final #2, 2026-10-27).
+       *  NEVER a license: nothing reads it for tool access. Setup-only startup reads it only to confirm,
+       *  from a verified signature, that the person on this computer is the license OWNER, the one
+       *  who may still export or switch off a client brain after a cancel. */
+      last_signed_attestation: import_zod.z.string().optional(),
+      /** The client brain's admission credential for elitedcs.com/api/license-status (website security review
+       *  round 4, 2026-10-17): returned by validate-license to an active Command OS owner, replaced on every
+       *  validation, removed when an answer has none. brain_setup saves it in the member's own Supabase project
+       *  (BRAIN_LICENSE_ADMISSION). It only lets the brain ASK whether this key is active. Never printed. */
+      license_status_admission: import_zod.z.string().optional(),
+      /** Stable machine id (2026-07-28). Replaces the hostname-derived
+       *  fingerprint, which changed with the network on laptops and silently ate
+       *  install slots. Written once and reused forever. */
+      device_id: import_zod.z.string().optional(),
+      /** Per-seat cockpit key (2026-08-27, Command OS PRD row 0). The cockpit binds
+       *  127.0.0.1, which stops other machines reaching the port but not other
+       *  PROGRAMS and other browsers on this one — and on a shared team machine that
+       *  is everybody. Every state-changing cockpit request must carry this value;
+       *  the served page gets it injected so the operator never types anything.
+       *  Written once on the first cockpit run, replaced by
+       *  `ghl-mcp dashboard --rotate-token`. Optional in the schema so files written
+       *  by earlier versions still parse. NEVER printed, logged or displayed. */
+      cockpit_seat_token: import_zod.z.string().optional(),
+      /** The operator's OWN Anthropic key (2026-09-05, hub audit). Command OS runs
+       *  the build stages and Design Studio on the member's Claude account — ours is
+       *  not on offer — and until now that key had no home in setup at all: it had to
+       *  be typed into the Claude Desktop settings file, passed to `claude mcp add -e`,
+       *  or exported in the shell before `dashboard`, and a member who did none of
+       *  those met a stage that simply failed. Saved here from the cockpit's Your
+       *  agency screen and folded into the environment the run inherits.
+       *  NEVER printed, logged or sent back to the page — the screen shows only the
+       *  last four characters of what is saved. */
+      anthropic_api_key: import_zod.z.string().optional(),
+      anthropic_key_check: import_zod.z.object({ fingerprint: import_zod.z.string(), at: import_zod.z.string(), ok: import_zod.z.boolean() }).optional(),
+      // Desktop OAuth app configuration. Never returned by calendar tools.
+      google_oauth_client_id: import_zod.z.string().optional(),
+      google_oauth_client_secret: import_zod.z.string().optional()
+    });
+  }
+});
 
 // src/interactive-capture.ts
+var fs = __toESM(require("fs"));
+var path2 = __toESM(require("path"));
+var import_zod2 = require("zod");
+init_credentials_store();
 function chromeProfileDir() {
   return path2.join(appDataDir(), "chrome-profile");
 }