@ghostystudio/cli 0.34.0 → 0.36.0

package/README.md

@@ -18,6 +18,7 @@ ghosty usage                                          # plan and usage this week
 ghosty usage --workspace SLUG [--by agent,day] [--days 14]   # a workspace's turns and tokens per agent/day (owner or staff)
 ghosty engines ls [--models]                          # valid --engine / --model values and what each model costs
 ghosty bags ls|create|set|rm <workspace> ["bag"]      [--tokens 20M] [--recurring on|off] [--hard-cap on|off] [--note]   # token bags (changing: staff)
+ghosty spaces create <slug>                          [--combo …: staff] [--dry-run]   # yours, trial
 ghosty spaces renew <workspace> --until YYYY-MM-DD   [--note] [--dry-run]   # staff
 ghosty spaces rename <old> <new>                     [--dry-run]            # staff, slug only
 ghosty agents ls [--engine E] [--ids] [--sponsor EMAIL | --owner EMAIL]   # --sponsor/--owner: any account (Ghosty staff)
@@ -58,7 +59,7 @@ ghosty boards ls|create|assign|move-cards|rm <workspace|agent> …   [--columns-
 ghosty cards ls <id>                     [--q TEXT] [--limit 20]              # recent cards on its sales board
 ghosty cards show <id> <folio|phone|id>  [--limit 20]                         # a card's thread, attachments and whether gs kept a copy
 ghosty cards archive <id>                --integration X | --column X | --before 30d   [--dry-run]
-ghosty mcp get|set <id>                  [--file servers.json]
+ghosty mcp get|set <id>                  [--file servers.json]               # http headers accept ${turn.token} (per-turn key)
 
 ghosty try <id> "message"                [--session] [--reset]
 ghosty try <id> "message" --waba --session PHONE [--media FILE [--as-formmy]] [--history FILE]   # real WhatsApp path, nothing sent
@@ -97,6 +98,12 @@ Every command has its own help with examples: `ghosty <command> --help` or `ghos
 
 Exit codes: `0` ok · `1` API error · `2` usage error · `3` not signed in.
 
+### Changes in 0.35.0
+
+- `spaces create <slug> [--dry-run]`: create a workspace of your own from the terminal (trial, same rules as the web form). Then `partner enable <slug>`.
+- `mcp set`: an `http` server's headers accept `${turn.token}`, filled per turn with the `turnToken` that `message-stream`/`turns` receive (one key per end user; the token never reaches the box).
+- `partner --help`: the `gpk_`/`gps_` pair also signs `message-stream` for the normal agents of the partner's workspace.
+
 ### Changes in 0.33.0
 
 - Staff: `agents doctor --user EMAIL` (their agents: doctor, latest turns and whether the app picked up each answer, plan/bag, boxes with duplicates flagged), `usage --images [--plan free] [--by user]` (image charges vs deliveries, real cost vs the table), `conversations show <agent> <conv> --tools` (every tool it ran, secrets masked, and the external domains it named).
@@ -136,6 +143,7 @@ Exit codes: `0` ok · `1` API error · `2` usage error · `3` not signed in.
 - `partner credentials create|rotate --env-file PATH` (mode 600, nothing printed) or `--format env` (pipe to `fly secrets import`). The secret's env var is now `GHOSTY_PARTNER_KEY_SECRET` (`GHOSTY_PARTNER_SECRET` still works).
 - `partner agent apply --prompt-file prompt.md`; `partner try --verbose` prints each tool's arguments and milliseconds.
 - `partner agent get|apply --agent SLUG` and `partner try --agent SLUG`: several agents per partner (e.g. `nik-admin`, `nik-public`). `channels whatsapp link … --partner-tenant <externalId> --partner-agent <slug>`: a business's WhatsApp Business number answered by that partner agent.
+- `partner wa groups ls|create|link|unlink`: WhatsApp groups of a partner agent's own number (e.g. `nik-admin`), each linked to a business.
 - Empty `partner ls|credentials ls|tenants ls` say what to do next. `login --device --profile <client>` explains how to sign in a client's account (they approve the link).
 
 ### Changes in 0.27.1

package/dist/index.js

@@ -8065,6 +8065,18 @@ var SERVER_MESSAGES = [
   ["las memorias s\xF3lo se tocan en el chat personal de la persona", "memories can only be changed in the person's personal chat"],
   ["la persona la ve y la edita en Memorias de su app", "the person sees and edits it in Memories in their app"],
   ["No pude abrir el chat nuevo: {}", "Couldn't open the new chat: {}"],
+  // — Espacios y turnToken por turno (spaces create, mcp set, message-stream)
+  ["combo distinto de teams: s\xF3lo el staff de Ghosty", "a combo other than teams: Ghosty staff only"],
+  ['el espacio "{}" ya existe', 'workspace "{}" already exists'],
+  ["{} ya tiene {} espacio(s) y su plan permite {}", "{} already owns {} workspace(s) and their plan allows {}"],
+  ["no se pudo crear el espacio", "couldn't create the workspace"],
+  ["${turn.token} s\xF3lo funciona en motores del pool (claude-worker y similares), no en ACP", "${turn.token} only works on pool engines (claude-worker and similar), not ACP"],
+  ["servers[{}]: ${turn.token} s\xF3lo va en headers de un MCP http (url)", "servers[{}]: ${turn.token} only goes in the headers of an http MCP (url)"],
+  ["turnToken debe ser un string no vac\xEDo", "turnToken must be a non-empty string"],
+  ["turnToken debe tener al menos {} caracteres", "turnToken must be at least {} characters"],
+  ["turnToken excede {} caracteres", "turnToken exceeds {} characters"],
+  ["turnToken no puede llevar espacios", "turnToken can't contain whitespace"],
+  ["turnToken requerido: los MCP de este agente usan ${turn.token}", "turnToken required: this agent's MCP servers use ${turn.token}"],
   // — Infra interna (casi nunca llega al CLI, pero por si acaso)
   ["SESSION_SECRET ausente en producci\xF3n \u2014 las cookies quedar\xEDan firmadas con un valor p\xFAblico. Inyectarlo con ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32).", "SESSION_SECRET missing in production \u2014 cookies would be signed with a public value. Inject it with ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32)."],
   ["sqld: fetch sin namespace", "sqld: fetch without namespace"],
@@ -8367,7 +8379,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.34.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.36.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -8409,7 +8421,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.34.0"}`,
+      "user-agent": `ghosty-cli/${"0.36.0"}`,
       "accept-language": lang(),
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
@@ -9505,6 +9517,12 @@ ${bold("Tenants")}  ${dim("(your customers, by externalId \u2014 config only, no
   partner tenants set <externalId> --config '{"name":"\u2026","timezone":"America/Mexico_City"}'
   partner tenants rm <externalId>         Deletes its config AND its memory
 
+${bold("WhatsApp groups")}  ${dim("(the number of a partner agent, e.g. nik-admin, paired by Baileys)")}
+  partner wa groups ls [--agent SLUG] [--invites]       Groups, the business each one answers, on/off
+  partner wa groups create --tenant ID --name N --agent SLUG   New group for that business, on (max 10/hour)
+  partner wa groups link <jid> --tenant ID --agent SLUG [--off]   Link a group the number is already in
+  partner wa groups unlink <jid> [--agent SLUG]          Unlink and turn off (the number stays in the group)
+
 ${bold("Try it")}
   partner try <externalId> "message"      One turn  [--agent SLUG] [--group END_USER_ID] [--turn-token SHORT_LIVED_TOKEN] [--verbose: tool args and ms]
                                           (the turn token goes to YOUR MCP as \${turn.token}; --token also works here)
@@ -9515,6 +9533,7 @@ ${bold("Options")}
 
 ${bold("Server credential mode")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_KEY_SECRET=gps_\u2026 ghosty partner agent get
 ${dim("(GHOSTY_PARTNER_SECRET also works; it is NOT the gs server's global secret)")}
+${dim("The same gpk_/gps_ pair signs POST /api/v2/fleet-agents/<id>/message-stream for the normal agents of this space (claude-worker), with turnToken per end user.")}
 ${dim("Docs: https://www.ghosty.studio/docs/cli/partners")}`,
   `${bold("Uso:")} ghosty partner <comando> [opciones]
 
@@ -9537,6 +9556,12 @@ ${bold("Tenants")}  ${dim("(tus clientes, por externalId \u2014 s\xF3lo config,
   partner tenants set <externalId> --config '{"name":"\u2026","timezone":"America/Mexico_City"}'
   partner tenants rm <externalId>         Borra su config Y su memoria
 
+${bold("Grupos de WhatsApp")}  ${dim("(el n\xFAmero de un agente de partner, p. ej. nik-admin, pareado por Baileys)")}
+  partner wa groups ls [--agent SLUG] [--invites]       Grupos, a qu\xE9 negocio contesta cada uno, prendido/apagado
+  partner wa groups create --tenant ID --name N --agent SLUG   Grupo nuevo para ese negocio, prendido (m\xE1x. 10/hora)
+  partner wa groups link <jid> --tenant ID --agent SLUG [--off]   Liga un grupo donde ya est\xE1 el n\xFAmero
+  partner wa groups unlink <jid> [--agent SLUG]          Lo desliga y lo apaga (el n\xFAmero sigue en el grupo)
+
 ${bold("Pru\xE9balo")}
   partner try <externalId> "mensaje"      Un turno  [--agent SLUG] [--group END_USER_ID] [--turn-token TOKEN_DE_VIDA_CORTA] [--verbose: args y ms de cada tool]
                                           (el token del turno llega a TU MCP como \${turn.token}; --token tambi\xE9n sirve aqu\xED)
@@ -9547,6 +9572,7 @@ ${bold("Opciones")}
 
 ${bold("Modo credencial de servidor")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_KEY_SECRET=gps_\u2026 ghosty partner agent get
 ${dim("(GHOSTY_PARTNER_SECRET tambi\xE9n vale; NO es el secreto global del servidor de gs)")}
+${dim("El mismo par gpk_/gps_ firma POST /api/v2/fleet-agents/<id>/message-stream de los agentes normales de este espacio (claude-worker), con turnToken por usuario final.")}
 ${dim("Docs: https://www.ghosty.studio/docs/cli/partners")}`
 );
 var enc5 = encodeURIComponent;
@@ -9569,7 +9595,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.34.0"}`
+        "user-agent": `ghosty-cli/${"0.36.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -9717,7 +9743,38 @@ async function tryCmd(externalId, text, v) {
   }
   if (!globals.json && full) process.stdout.write("\n");
 }
-async function partnerCmd(sub, a1, a2, v) {
+async function waCmd(what, sub, jid, v) {
+  if (what !== "groups") throw usage(t("Try: ghosty partner wa groups ls", "Prueba: ghosty partner wa groups ls"));
+  const base = "/api/v2/partner/wa/groups";
+  if (!sub || sub === "ls" || sub === "list") {
+    const q = new URLSearchParams();
+    if (v.agent) q.set("agent", v.agent);
+    if (v.invites) q.set("invites", "1");
+    const r = await json(`${base}${q.size ? `?${q}` : ""}`, v);
+    return out(
+      r,
+      () => r.groups.length ? table(r.groups.map((g) => ({ name: g.name, jid: g.jid, business: g.externalId ?? dim("\u2014"), agent: g.agent ?? "app", status: g.enabled ? lavender("on") : dim("off"), ...v.invites ? { invite: g.inviteUrl ?? "" } : {} })), ["name", "jid", "business", "agent", "status", ...v.invites ? ["invite"] : []]) : dim(t("No groups. The number has to be paired (ghosty channels wa \u2026) and in at least one group.", "Sin grupos. El n\xFAmero tiene que estar pareado (ghosty channels wa \u2026) y en al menos un grupo."))
+    );
+  }
+  if (sub === "create") {
+    if (!v.tenant || !v.name || !v.agent) throw usage(t("Missing --tenant, --name or --agent.", "Falta --tenant, --name o --agent."), `${t("Example", "Ejemplo")}: ghosty partner wa groups create --tenant org_123 --name "Nik \xB7 Spa Luna" --agent nik-admin`);
+    const r = await json(base, v, { method: "POST", body: { externalId: v.tenant, name: v.name, agent: v.agent } });
+    return out(r, () => `${lavender("\u2713")} ${r.jid}
+${t("Invite", "Invitaci\xF3n")}: ${r.inviteUrl}`);
+  }
+  if (!jid) throw usage(t("Missing the group jid (\u2026@g.us).", "Falta el jid del grupo (\u2026@g.us)."), `${t("See them", "Velos")}: ghosty partner wa groups ls`);
+  if (sub === "link") {
+    if (!v.tenant || !v.agent) throw usage(t("Missing --tenant or --agent.", "Falta --tenant o --agent."), `${t("Example", "Ejemplo")}: ghosty partner wa groups link ${jid} --tenant org_123 --agent nik-admin`);
+    const r = await json(`${base}/${enc5(jid)}`, v, { method: "PUT", body: { externalId: v.tenant, agent: v.agent, enabled: !v.off } });
+    return out(r, () => `${lavender("\u2713")} ${r.group.name} \u2192 ${r.group.externalId} \xB7 ${r.group.enabled ? t("on (answers everything)", "prendido (contesta todo)") : t("off", "apagado")}`);
+  }
+  if (sub === "unlink" || sub === "rm") {
+    const r = await json(`${base}/${enc5(jid)}${v.agent ? `?agent=${enc5(v.agent)}` : ""}`, v, { method: "DELETE" });
+    return out(r, () => r.unlinked ? `${lavender("\u2713")} ${t("Unlinked and off. The number stays in the group.", "Desligado y apagado. El n\xFAmero sigue en el grupo.")}` : dim(t("It wasn't linked.", "No estaba ligado.")));
+  }
+  throw usage(t(`Unknown wa groups subcommand: ${sub}.`, `Subcomando de wa groups desconocido: ${sub}.`), t("Try", "Prueba") + ": ghosty partner wa groups ls | create | link | unlink");
+}
+async function partnerCmd(sub, a1, a2, v, a3) {
   switch (sub) {
     case void 0:
     case "help":
@@ -9745,6 +9802,8 @@ async function partnerCmd(sub, a1, a2, v) {
     }
     case "try":
       return tryCmd(a1, a2, v);
+    case "wa":
+      return waCmd(a1, a2, a3, v);
     default:
       throw usage(t(`Unknown partner subcommand: ${sub}.`, `Subcomando de partner desconocido: ${sub}.`), t("Run", "Corre") + ": ghosty partner --help");
   }
@@ -10379,7 +10438,7 @@ async function channelsCmd(kind, sub, id, ref, v) {
   if (sub === "link" || sub === "unlink") return linkCmd(sub, id, v);
   if (sub === "history") return historyCmd(id, v);
   if (sub === "integrations") return integrationsCmd(id, v.email);
-  if (sub === "import" || sub === "status" || sub === "pause" || sub === "pair") return waCmd(sub, id, v);
+  if (sub === "import" || sub === "status" || sub === "pause" || sub === "pair") return waCmd2(sub, id, v);
   if (sub === "enable" && !v["dry-run"]) requireYesIfHeadless(v.yes, `ghosty channels whatsapp enable ${id} ${ref ?? "<number>"}`);
   const path = `/api/v2/agents/${enc7(id)}/whatsapp`;
   const listing = !sub || sub === "ls" || sub === "list";
@@ -10493,7 +10552,7 @@ function originText(o) {
     groups
   ].join("\n");
 }
-async function waCmd(sub, id, v) {
+async function waCmd2(sub, id, v) {
   if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + `: ghosty channels wa ${sub} <agent-id>`);
   const base = `/api/v2/agents/${enc7(id)}/wa`;
   if (sub === "status") {
@@ -11151,16 +11210,16 @@ var HELPS_ES = {
     notes: ["ls dice, de una ya enviada, cu\xE1ntos entreg\xF3 y rechaz\xF3 FCM (del push log, desde el 1-oct).", "--image se publica en img.ghosty.studio (WebP 1200 px). --to vac\xEDo = todos. send sin --at la manda ya (pregunta); --at '' quita la programaci\xF3n.", "--min-version N (versionCode de Android): si la app del tester es m\xE1s vieja, el bot\xF3n dice \xABActualizar\xBB y lanza la actualizaci\xF3n de Play desde la app; '' la quita."]
   },
   spaces: {
-    summary: "Espacios: lista los tuyos (o, staff, los de cualquiera) y operaciones del staff de Ghosty \u2014 entrar/salir del espacio de un cliente, cambiar su combo, mover \xABpagado hasta\xBB, renombrar su slug. Cada cambio queda en la bit\xE1cora del espacio.",
+    summary: "Espacios: crea uno a tu nombre (prueba), lista los tuyos (o, staff, los de cualquiera) y operaciones del staff de Ghosty \u2014 entrar/salir del espacio de un cliente, cambiar su combo, mover \xABpagado hasta\xBB, renombrar su slug. Cada cambio queda en la bit\xE1cora del espacio.",
     flags: [
       ["--user EMAIL", "ls (staff): los espacios de esa persona"],
-      ["--combo C", "set (staff): teams | sales | both \u2014 sin Ventas sus tableros existen pero nadie los ve"],
+      ["--combo C", "set (staff): teams | sales | both \u2014 sin Ventas sus tableros existen pero nadie los ve; create: distinto de teams, s\xF3lo staff"],
       ["--until DATE", "renew: el nuevo \xABpagado hasta\xBB (AAAA-MM-DD)"],
       ["--note TEXT", "renew: por qu\xE9 (va a la bit\xE1cora)"],
       ["-n, --dry-run", "ense\xF1a qu\xE9 cambia, no cambia nada"],
       ["--yes", "s\xE1ltate la confirmaci\xF3n (obligatorio sin terminal)"]
     ],
-    notes: ["Con suscripci\xF3n de Stripe renew se niega: la fecha la mueve la factura pagada.", "rename cambia s\xF3lo el slug (id y namespace se quedan, as\xED que tablero, Stripe y WhatsApp siguen funcionando); las ligas viejas <slug>.sales dejan de servir."]
+    notes: ["create sigue las reglas de la web: queda a tu nombre, nace como prueba de 30 d\xEDas, tu correo debe estar confirmado y tu plan topa cu\xE1ntos tienes. Sigue: ghosty partner enable <slug>.", "Con suscripci\xF3n de Stripe renew se niega: la fecha la mueve la factura pagada.", "rename cambia s\xF3lo el slug (id y namespace se quedan, as\xED que tablero, Stripe y WhatsApp siguen funcionando); las ligas viejas <slug>.sales dejan de servir."]
   }
 };
 var HELP_ALIASES = { creds: "credentials", board: "cards", conversations: "chat", workspaces: "spaces" };
@@ -11724,18 +11783,18 @@ HELPS.novedades = {
   learn: `${REF}#soporte`
 };
 HELPS.spaces = {
-  summary: "Workspaces: list yours (or, staff, anyone's), and Ghosty staff operations \u2014 join/leave a client's workspace, change its combo, move \xABpaid until\xBB, rename its slug. Each change is logged in the workspace's audit.",
-  usage: ["ghosty spaces ls [--user EMAIL]", "ghosty spaces join|leave <workspace>", "ghosty spaces set <workspace> --combo teams|sales|both [--dry-run]", "ghosty spaces renew <workspace> --until YYYY-MM-DD [--note TEXT] [--dry-run] [--yes]", "ghosty spaces rename <old> <new> [--dry-run] [--yes]"],
+  summary: "Workspaces: create one of your own (trial), list yours (or, staff, anyone's), and Ghosty staff operations \u2014 join/leave a client's workspace, change its combo, move \xABpaid until\xBB, rename its slug. Each change is logged in the workspace's audit.",
+  usage: ["ghosty spaces ls [--user EMAIL]", "ghosty spaces create <slug> [--combo teams|sales|both] [--dry-run]", "ghosty spaces join|leave <workspace>", "ghosty spaces set <workspace> --combo teams|sales|both [--dry-run]", "ghosty spaces renew <workspace> --until YYYY-MM-DD [--note TEXT] [--dry-run] [--yes]", "ghosty spaces rename <old> <new> [--dry-run] [--yes]"],
   flags: [
     ["--user EMAIL", "ls (staff): that person's workspaces"],
-    ["--combo C", "set (staff): teams | sales | both \u2014 without Sales its boards exist but nobody sees them"],
+    ["--combo C", "set (staff): teams | sales | both \u2014 without Sales its boards exist but nobody sees them; create: other than teams, staff only"],
     ["--until DATE", "renew: the new \xABpaid until\xBB (YYYY-MM-DD)"],
     ["--note TEXT", "renew: why (goes into the audit)"],
     ["-n, --dry-run", "show what changes, change nothing"],
     ["--yes", "skip the confirmation (required without a terminal)"]
   ],
-  examples: ["ghosty spaces ls", "ghosty spaces ls --user brenda@siiqtec.com", "ghosty spaces join denik", "ghosty spaces set denik --combo sales --dry-run", 'ghosty spaces renew descti --until 2026-11-01 --note "pag\xF3 octubre"', "ghosty spaces rename totequim siiqtec --dry-run"],
-  notes: ["With a Stripe subscription renew refuses: the paid invoice moves the date.", "rename changes only the slug (id and namespace stay, so board, Stripe and WhatsApp keep working); old <slug>.sales links stop working."],
+  examples: ["ghosty spaces ls", "ghosty spaces create mailmask --dry-run", "ghosty spaces ls --user brenda@siiqtec.com", "ghosty spaces join denik", "ghosty spaces set denik --combo sales --dry-run", 'ghosty spaces renew descti --until 2026-11-01 --note "pag\xF3 octubre"', "ghosty spaces rename totequim siiqtec --dry-run"],
+  notes: ["create follows the same rules as the web: you own it, it starts as a 30-day trial, your email must be confirmed, and your plan caps how many you own. Next: ghosty partner enable <slug>.", "With a Stripe subscription renew refuses: the paid invoice moves the date.", "rename changes only the slug (id and namespace stay, so board, Stripe and WhatsApp keep working); old <slug>.sales links stop working."],
   learn: `${REF}#espacios`
 };
 HELPS.workspaces = HELPS.spaces;
@@ -12220,12 +12279,21 @@ ${bagsText(r)}`);
   }
 }
 async function spacesCmd(sub, slug, arg, v, context) {
-  const ex = "ghosty spaces ls [--user EMAIL] \xB7 join|leave <workspace> \xB7 set <workspace> --combo teams|sales|both \xB7 renew <workspace> --until 2026-11-01 [--note TEXT] \xB7 rename <old> <new> [--dry-run]";
+  const ex = "ghosty spaces ls [--user EMAIL] \xB7 create <slug> [--combo teams|sales|both] [--dry-run] \xB7 join|leave <workspace> \xB7 set <workspace> --combo teams|sales|both \xB7 renew <workspace> --until 2026-11-01 [--note TEXT] \xB7 rename <old> <new> [--dry-run]";
   if (!sub || sub === "ls" || sub === "list") {
     const r = await api(`/api/v2/workspaces${v.user ? `?user=${enc10(v.user)}` : ""}`);
     const rows = r.workspaces.map((w) => ({ workspace: w.slug, role: w.role ?? "", plan: w.plan, combo: w.combo, owner: w.owner ?? "", paid: w.paidUntil ?? "" }));
     return out(r, () => rows.length ? `${bold(r.user)}
 ${table(rows, ["workspace", "role", "plan", "combo", "owner", "paid"])}` : dim(t(`${r.user} has no workspaces.`, `${r.user} no tiene espacios.`)));
+  }
+  if (sub === "create") {
+    slug = needSpace(slug, "ghosty spaces create <slug> [--combo teams|sales|both] [--dry-run]");
+    const r = await api("/api/v2/workspaces", { method: "POST", body: { slug, ...v.combo ? { combo: v.combo } : {}, ...v["dry-run"] ? { dryRun: true } : {} } });
+    const line2 = `${r.workspace} \xB7 ${r.owner} \xB7 ${r.plan} \xB7 ${r.combo}`;
+    if (!r.created) return out(r, () => `${line2}
+${dim(t("Dry run: nothing created.", "Simulaci\xF3n: no se cre\xF3 nada."))}`);
+    return out(r, () => `${lavender("\u2713")} ${line2}
+${dim(t(`Next: ghosty use ${r.workspace} \xB7 ghosty partner enable ${r.workspace}`, `Sigue: ghosty use ${r.workspace} \xB7 ghosty partner enable ${r.workspace}`))}`);
   }
   if (sub === "join" || sub === "leave") {
     slug = needSpace(slug, `ghosty spaces ${sub} <workspace>`);
@@ -12663,6 +12731,7 @@ ${bold("Session")}
 ${bold("Workspaces")}  ${dim("(changing them: Ghosty staff)")}
   bags ls|create|set|rm <workspace> ["bag"]   Token bags its agents spend from   [--tokens 20M] [--recurring on|off] [--hard-cap on|off] [--note]
   spaces ls                                   Your workspaces (role, plan, combo)   [--user EMAIL: someone else's]
+  spaces create <slug>                        New workspace owned by you (trial)   [--combo teams|sales|both: staff] [--dry-run]
   spaces join|leave <workspace>               Enter or leave a client's workspace as staff (no seat; logged)
   spaces set <workspace> --combo sales        teams | sales | both (without Sales its boards are invisible)
   spaces renew <workspace> --until DATE       Move \xABpaid until\xBB (logged)   [--note] [--dry-run]
@@ -12708,7 +12777,7 @@ ${bold("Configure an agent")}
   skills templates <id>              pdf-doc templates it sees: its own and Ghosty's, and which folder wins
   dbs ls|tables|query|import|rehost|grant|revoke|rename|rm <id> [db]   Databases it uses   [--write] [--external-write t1,t2] [--external-rows t:col] [--from easybits:ID --dry-run] [--table T --column C]
   dbs photos put <id> <db> --table T --key-column K --dir DIR   Loose photos to a catalog (SKU-123.jpg \u2192 its row), permanent links   [--column C] [--dry-run]
-  mcp get|set <id>                   MCP servers                    [--file servers.json]
+  mcp get|set <id>                   MCP servers                    [--file servers.json]  (http headers accept \${turn.token})
   channels whatsapp ls|enable|disable <id> [number]   Which WhatsApp Business numbers it answers   [--dry-run]
   channels whatsapp integrations <id>    Its owner's WhatsApp Business numbers in Formmy (number, who answers today, Integration id)
   channels whatsapp link|unlink <id> --integration ID --answer on|off   Bring a WhatsApp Business number from Formmy/EasyBits to this agent, or send it back   [--forward] [--ads-only on|off] [--dry-run]
@@ -12791,6 +12860,7 @@ ${bold("Sesi\xF3n")}
 ${bold("Espacios")}  ${dim("(cambiarlos: staff de Ghosty)")}
   bags ls|create|set|rm <espacio> ["bolsa"]   Bolsas de tokens de las que gastan sus agentes   [--tokens 20M] [--recurring on|off] [--hard-cap on|off] [--note]
   spaces ls                                   Tus espacios (rol, plan, combo)   [--user CORREO: los de alguien m\xE1s]
+  spaces create <slug>                        Espacio nuevo a tu nombre (trial)   [--combo teams|sales|both: staff] [--dry-run]
   spaces join|leave <espacio>                 Entra o sal del espacio de un cliente como staff (sin asiento; queda en bit\xE1cora)
   spaces set <espacio> --combo sales          teams | sales | both (sin Ventas sus tableros no se ven)
   spaces renew <espacio> --until FECHA        Mueve \xABpagado hasta\xBB (queda en bit\xE1cora)   [--note] [--dry-run]
@@ -12836,7 +12906,7 @@ ${bold("Configurar un agente")}
   skills templates <id>              Plantillas de pdf-doc que ve: las suyas y las de Ghosty, y qu\xE9 carpeta gana
   dbs ls|tables|query|import|rehost|grant|revoke|rename|rm <id> [db]   Bases de datos que usa   [--write] [--external-write t1,t2] [--external-rows t:col] [--from easybits:ID --dry-run] [--table T --column C]
   dbs photos put <id> <db> --table T --key-column K --dir DIR   Fotos sueltas a un cat\xE1logo (SKU-123.jpg \u2192 su fila), ligas permanentes   [--column C] [--dry-run]
-  mcp get|set <id>                   Servidores MCP                 [--file servers.json]
+  mcp get|set <id>                   Servidores MCP                 [--file servers.json]  (headers http admiten \${turn.token})
   channels whatsapp ls|enable|disable <id> [n\xFAmero]   Qu\xE9 n\xFAmeros de WhatsApp Business contesta   [--dry-run]
   channels whatsapp integrations <id>    Los n\xFAmeros de WhatsApp Business de su due\xF1o en Formmy (n\xFAmero, qui\xE9n contesta hoy, id de la Integration)
   channels whatsapp link|unlink <id> --integration ID --answer on|off   Trae un n\xFAmero de WhatsApp Business de Formmy/EasyBits a este agente, o devu\xE9lvelo   [--forward] [--ads-only on|off] [--dry-run]
@@ -13091,6 +13161,8 @@ async function main() {
       draft: { type: "boolean" },
       "ads-only": { type: "string" },
       "partner-tenant": { type: "string" },
+      tenant: { type: "string" },
+      invites: { type: "boolean" },
       "partner-agent": { type: "string" },
       list: { type: "boolean" },
       "only-ads": { type: "boolean" },
@@ -13116,7 +13188,7 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.34.0" }, () => "0.34.0");
+  if (v.version) return out({ version: "0.36.0" }, () => "0.36.0");
   for (const n of normalizeArgs(pos, v)) if (!globals.json) info(dim(n));
   const context = (await readConfig()).workspace;
   if (!explicitToken()?.startsWith("gat_")) {
@@ -13229,7 +13301,7 @@ async function main() {
     case "schedule":
       return scheduleCmd(sub, a1, a2, v);
     case "partner":
-      return partnerCmd(sub, a1, a2, { ...v, token: tokens.turn });
+      return partnerCmd(sub, a1, a2, { ...v, token: tokens.turn }, pos[4]);
     case "usage":
       if (v.images) return imageUsage(v);
       if (v.boxes && v.by === "template") return fleetBoxes();
@@ -13265,7 +13337,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.34.0").catch(() => null);
+var notice = updateNotice("0.36.0").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {