@elitedcs/ghl-mcp 3.13.0 → 3.13.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -0
- package/dist/index.js +1138 -1068
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,23 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 3.13.1 — Firebase token persistence fixes (reported by Don Harris)
|
|
4
|
+
|
|
5
|
+
**Bug fixes. No tool changes — still 201 tools across 43 modules.**
|
|
6
|
+
|
|
7
|
+
Two related Firebase refresh-token persistence bugs that hit the `npx @elitedcs/ghl-mcp@latest` install path. Both reported by Don Harris (flasheffect@sbcglobal.net) on 2026-05-24.
|
|
8
|
+
|
|
9
|
+
### 1. Rotated refresh token was silently dropped
|
|
10
|
+
|
|
11
|
+
`WorkflowBuilderClient.persistRefreshToken` only wrote to `cwd/.env`. Under npx there is no `.env` in cwd, so the rotated token was discarded and the next restart reloaded the stale token from `credentials.json` — eventually failing Firebase auth once the old token expired.
|
|
12
|
+
|
|
13
|
+
Now persists to **`credentials.json`** (the authoritative store for npm installs) and still writes `.env` when present (legacy wrapper-script / local-dev path). Both writes are independent and non-fatal.
|
|
14
|
+
|
|
15
|
+
### 2. Token registry lived inside the npm cache
|
|
16
|
+
|
|
17
|
+
`TokenRegistry`'s default path resolved via `__dirname` into `~/.npm/_npx/<hash>/...`. Every `@latest` update produced a new hash, orphaning the previous registry (and losing it on cache cleanup).
|
|
18
|
+
|
|
19
|
+
Now defaults to `.ghl-tokens.json` in the per-user app-data dir, alongside `credentials.json`. A one-time migration moves any legacy package-root registry on first run. The registry directory is created (0700) on save if absent, and the file is hardened to 0600.
|
|
20
|
+
|
|
3
21
|
## 3.13.0 — Memberships read + 200-tool milestone (gap-closure round 6, final)
|
|
4
22
|
|
|
5
23
|
**201 tools across 43 modules. Bundle: ~318 KB.**
|