changelog

What is shipping

Public-facing release notes. New skills, features, fixes.

Multi-LLM router expanded — DeepSeek + Cerebras

2026-05-09v0.116
  • ·OpenRouter integration unlocks DeepSeek V3 + 200 other models via a single US-hosted gateway. Used for cost arbitrage on bulk classification tasks (lead_classifier, prompt_enhancement, competitor_diff) — wire cost drops 90-95% on those routes.
  • ·Cerebras integration adds Llama 3.3 70B at 1500-2500 tokens/sec — used for low-latency streaming UX (chat widget, voice agent live responses). 20-30× faster perceived response than Sonnet for short answers.
  • ·Router auto-picks the right model for the task: cheap_bulk → DeepSeek via OpenRouter, streaming_low_latency → Cerebras Llama, default routes unchanged.
  • ·Both providers are US-hosted — DeepSeek prompts route through OpenRouter's US infrastructure, not Chinese servers.

Cleaner cost language + LinkedIn deferred

2026-05-07v0.84
  • ·Every paid-action confirm dialog now shows a clean credit cost ($X.XX) — replaced the old verbose API-cost copy with plain pricing.
  • ·LinkedIn hidden from Ad Audiences UI until the LinkedIn Marketing partnership lands. Lib + DB path preserved for when it ships.

Drill-down pages + final audit pass

2026-05-07v0.83
  • ·New drill-downs: /aeo/[id] (citation matrix per model × query), /aeo/proposals/[id] (apply rewrite), /competitors/[id] (URL change history), /competitors/counter/[id] (counter-campaign review).
  • ·SSRF guard centralised in src/lib/security/ssrf.ts — refuses cloud-metadata, RFC1918, loopback, link-local hosts on every user-supplied URL fetcher.
  • ·Cron credit-gate caches removed — each row re-checks balance so a multi-watchlist tenant can't overshoot.
  • ·JSON parse failures in the AEO rewriter + counter-campaign drafter now save a "parse_failed" row instead of throwing after credits already burned.
  • ·Mobile tables fixed (overflow-x-auto on /seo, /benchmarks, /agency).
  • ·Tenant-boundary GET hardening across /aeo/runs, /counter-campaigns.

Agency dashboard + Cross-source insights

2026-05-07v0.82
  • ·/agency — every Looper HQ tenant you have access to in one table. AEO score, competitor changes (7d), leads (30d), active sequences. 1-click switch into any client account.
  • ·/insights — fuses AEO + competitor watchlist + SEO rank + CRM data. Surfaces moments like "X recent leads matched a query AI assistants aren't citing you for" with deep-link CTAs.
  • ·Computed live (no precompute cron). The "act on the intel" play that pure-intel platforms can't do.

Free competitor traffic + Industry benchmarks

2026-05-07v0.81
  • ·Free competitor traffic snapshot per domain via Cloudflare Radar + Wayback Machine — no key required, cached 24h.
  • ·/benchmarks — anonymized industry stats (P25/P50/P75/P90/mean) for 7 metrics across all Looper tenants in your industry. Sample-size guard of 5+ before publishing.
  • ·Daily benchmark cron computes from real tenant data — emails sent, open rate, leads, voice calls. Updates nightly.

SEO research (DataForSEO BYOK) + Similarweb passthrough

2026-05-07v0.80
  • ·/seo — keyword research, SERP rank tracker, backlinks summary via your own DataForSEO API key. 24h cache.
  • ·Daily SERP rank-tracker cron — track up to 100 keywords, plot the trend chart over time.
  • ·/api/similarweb — pass-through for Similarweb visits + referrers when you connect their key.
  • ·Both BYOK-only by design. You bring your provider account; we add the operational layer.

Competitor watchlist + Action engine + Meta Ad Library

2026-05-07v0.79
  • ·/competitors — track up to 25 competitor URLs per watchlist. Daily diff cron detects pricing changes, new offers, copy shifts.
  • ·On a high-significance change, the action engine auto-drafts a counter-campaign (Meta + Google ad copy + 4-step email sequence + landing hook) for human review.
  • ·/ad-intel — pull Meta Ad Library entries for any FB advertiser. Free public source, charges only on real inserts.
  • ·The thing pure-intel platforms can't do: see the change, ship the response in 1 click.

AEO citation tracker + Auto-rewriter

2026-05-06v0.78
  • ·/aeo — daily scans across ChatGPT, Perplexity, Claude, Gemini, Sonar Pro, Sonar Reasoning Pro. Records whether your brand is cited for the queries that matter to you.
  • ·Auto-rewriter proposes a Sonnet-pass rewrite of pages that aren't winning citations — clear definition, FAQ schema, named entities, no fluff.
  • ·Daily cron, per-tenant credit gate, score history per watchlist.
  • ·The category Similarweb just launched — without their proprietary panel, but with a closed-loop "rewrite to win" that they don't have.

Production hardening — 7 audit rounds, 60+ fixes

2026-05-06v0.71-v0.77
  • ·Site-wide paid-action gating: every paid feature now confirms cost before charging. ~30 silent-charge bugs closed.
  • ·DB lockdown: RLS enabled on 50+ tables (gsc_connections OAuth tokens, voice_calls transcripts, tenant_connectors auth_blob, brand_kits, etc.).
  • ·Closed a credit-grant exploit where any signed-in user could RPC marketing.add_credits to gift themselves credits. Revoked EXECUTE from anon+authenticated.
  • ·Twilio webhook HMAC verification on /voice/twilio/incoming, /turn, /status, /recording — prevents spoofed CallSid drains.
  • ·Webhook dispatcher SSRF guard (refuses cloud-metadata, RFC1918, loopback). Same guard reused in workflow_post action.
  • ·BYOK_PASSPHRASE fail-closed in production (was silently using a published default fallback).
  • ·cowork-runner edge fn v9: AES-GCM v2 BYOK decryption + service-role bearer auth gate.
  • ·MODEL_TO_PROVIDER fix — claude-opus-4-7, claude-sonnet-4-6, claude-haiku-4-5-20251001 were missing, silently breaking the reply classifier and booking agent.

Comprehensive onboarding wizard + GDPR self-serve

2026-05-05v0.55
  • ·/onboarding · 17-step guided tour covering every product (brand kit → site → leads → CRM → missions → social → ads → voice → custom apps → marketplace → analytics → billing → team).
  • ·Auto-detection: every step recognizes work done outside the wizard so progress stays in sync.
  • ·Restart + skip + dismiss controls. Persistent state per tenant in `tenant_onboarding_state`.
  • ·/welcome banner now points to the wizard with progress and a one-click restart.
  • ·/settings/privacy · GDPR/CCPA self-serve: download every row we hold, file a deletion request.
  • ·Per-site CSV + JSON traffic exports already in /sites/[id]/analytics overview tab.
  • ·Custom-domain DNS verification endpoint · live SSL + Vercel-side check, surfaced as overall status (live | awaiting_dns | not_found).

Site analytics extensions · goals, banlist, scripts, digest, a11y/perf

2026-05-05v0.54
  • ·Conversion goals editor: define `signup`, `add_to_cart`, etc with custom field schemas. Validated server-side.
  • ·IP / visitor / UA banlist drops abusive traffic before it bills you. Tenant- or site-scoped, with TTL.
  • ·Custom script slots: paste GA, HotJar, or any HTML snippet · auto-injected into <head> or </body> at deploy.
  • ·Weekly traffic digest email · Sun morning, per-site WoW deltas, free.
  • ·A11y + performance scoring added to SEO lint: viewport meta, lang attr, render-blocking, lazy images, inline script bytes.

Privacy doc, first-touch attribution, real-time, exports

2026-05-05v0.53
  • ·Full privacy policy draft replacing the placeholder · 12 sections, subprocessor table.
  • ·First-touch cross-session attribution: 365-day _lpr_ft cookie credits conversions to original source.
  • ·/api/sites/[id]/analytics/stream · Server-Sent Events live feed with rolling 5-min KPIs.
  • ·CSV + JSON traffic exports.

Client-facing site analytics (Phases 1-3)

2026-05-05v0.52
  • ·First-party tracker (/api/track.js) auto-injected on every deployed site.
  • ·Beacon endpoint with SSRF protection, plan-tier quota, overage billing.
  • ·/sites/[id]/analytics dashboard: 7 tabs (overview, live, sources, pages, audience, SEO, settings).
  • ·GSC OAuth + daily sync · top organic queries, average rank, CTR, impressions.
  • ·Per-page SEO lint scanner with severity-weighted scoring.

App marketplace + in-app SaaS builder

2026-05-05v0.50
  • ·In-app SaaS builder: describe a workflow, get tables + pages + blocks generated.
  • ·Drag-and-drop block reordering with @dnd-kit.
  • ·Conditional visibility, role-based block permissions, refresh-blocks on button click.
  • ·App marketplace with Stripe Connect destination charges, 80/20 creator split.
  • ·Listing detail pages with reviews, version history, fork-to-new-copy, update available banner.
  • ·Admin moderation queue with audit log entries.
  • ·Creator payouts dashboard with Stripe Express dashboard link.

Marketing intel rollup

2026-05-05v0.45
  • ·Unified /intel page surfacing post_metrics, review_memos, outputs, product_channels in one dashboard.
  • ·KPIs (impressions/clicks/conversions/revenue), top posts, posting cadence with overdue warnings, weekly product memos.

Visual rewrite + dashboard home + admin CRUD

2026-04-30v0.2
  • ·New /dashboard home replaces /queue as default. 5-second answer to "what is happening with my skills."
  • ·Charts everywhere: time-series, sparklines, funnels, heatmaps, bar charts. No new dependencies.
  • ·Cmd+K command palette. Search across 19 routes.
  • ·CRUD admin pages: products with brand voice editor, channels with test-post button, API keys with revoke.
  • ·Trust layer: about, changelog, docs, roadmap, status page, customers (placeholder).
  • ·Mobile nav with hamburger. Mobile-friendly tables.
  • ·Two paid tiers now: Pro $19.99/mo and Studio $59.99/mo. Studio adds templated skills, email digests, audit log, bulk actions, exports.

Marketplace, votes, explainers, effectiveness, crawler, telemetry

2026-04-30v0.1.5
  • ·Public /catalog separates private skills (6 of mine) from public ones (39 sellable).
  • ·Plain-English explainer on every skill. AI-generated, owner-editable. The "67-year-old test."
  • ·Vote up/down on skills. Community ranking on /catalog.
  • ·Effectiveness analytics linking content_assets to skills. Status pill: producing / firing / idle.
  • ·Daily skill crawler hits GitHub Code Search + Reddit + HackerNews. Rule-filter then Gemini Flash vet. Hard cap $0.50/run.
  • ·Moderation queue at /admin/candidates for borderline scores.
  • ·Local Claude Code SessionEnd hook reports skill firings to telemetry endpoint.
  • ·install.sh bootstrap installs hook automatically.

First production deploy

2026-04-30v0.1
  • ·Multi-tenant from day one. RLS on every table.
  • ·15-table marketing schema in Pulse Supabase.
  • ·Dashboard pages: /queue, /metrics, /campaigns, /tools, /automations, /recommendations.
  • ·Anthropic Routines: weekly-reviewer (Sun), tool-discovery (Mon), competitor-watch (daily), lead-scoring (hourly with kill-switch).
  • ·Local launchd job auto-syncs ~/.claude/skills/ every 6h.
  • ·Stripe ready, gracefully degrades if keys missing.

Schema + foundation

2026-04-30v0.0
  • ·Migration 0027 in PULSE NIGHTCLUB Supabase project.
  • ·6 products seeded (ConsultantVoice, ArbiCall, SwarmTrade, LeadFlow, Pulse, ConvoAlly).
  • ·31 ai_tools seeded (LLMs, MCP connectors, Claude Code skills, Routines, channel APIs).
  • ·8 automations with kill switches.

New entry every time something ships. Subscribe in your account settings to get it by email.