@elitedcs/ghl-mcp 3.24.0 → 3.25.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 3.25.0 — One-paste Firebase capture
+
+**New bootstrap-and-normal-mode tool. Tool count goes from 212 to 213 (the new tool counts whether you're set up or not).**
+
+The worst-pain step of GHL Command setup has been the three separate IndexedDB lookups buyers had to do for Firebase credentials. v3.0.x tried bookmarklets; per memory that failed because buyers couldn't drag them onto their bookmarks bar. v3.25.0 ships the working version: a tool that hands the buyer a 25-line Chrome console script. One copy, one paste in DevTools, one Enter — the script extracts all three Firebase fields from IndexedDB and copies the result to the clipboard as a JSON object. The buyer pastes the JSON back into `setup_ghl_mcp` (or `enable_workflow_builder`) via a new `firebase_paste` parameter. Three separate captures → one paste.
+
+**New tool: `auto_capture_firebase_script`**. Available in bootstrap mode AND normal mode (the latter so existing buyers can re-grab a fresh token when their refresh rotates). Takes no arguments; returns the script plus a numbered walkthrough.
+
+**Updated tools:**
+
+- `setup_ghl_mcp` accepts a new optional `firebase_paste` parameter. When provided, it parses the three Firebase fields out of the JSON and treats them as if you'd filled `ghl_user_id`, `ghl_firebase_api_key`, `ghl_firebase_refresh_token` manually. The three separate fields still work (manual fallback for locked-down browsers).
+- `enable_workflow_builder` accepts the same `firebase_paste` parameter, again with the three separate fields as fallback.
+
+**Parser is forgiving.** Strips markdown code fences (chat-copy artifact), normalizes curly quotes (email-client artifact), trims whitespace, and demands the API key actually start with `AIza` (catches misdirected pastes — e.g. pasting the PIT key here by mistake).
+
+**Website + email also updated.** `elitedcs.com/ghl-mcp-firebase` now leads with a copy-button that grabs the script, falls back to manual capture in a collapsed details element. The Stripe-webhook welcome email points buyers at `auto_capture_firebase_script` instead of the old four-step DevTools dive.
+
+Locked in by 19 new tests covering parse paths (clean JSON, fence-wrapped, curly-quoted, whitespace, malformed, missing fields, wrong API-key prefix) plus the script contract (self-contained IIFE, IndexedDB + clipboard usage, expected field names, not-logged-in branch).
+
 ## 3.24.0 — Signed-attestation gate closes the credentials.json bypass
 
 **Security fix. Tool count unchanged (212 across 43 modules).**

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.24.0",
+      version: "3.25.0",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 212 tools \u2014 full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -5828,6 +5828,83 @@ var import_zod38 = require("zod");
 var os2 = __toESM(require("os"));
 var crypto2 = __toESM(require("crypto"));
 var import_zod37 = require("zod");
+
+// src/firebase-capture-script.ts
+var FIREBASE_CAPTURE_SCRIPT = `(async () => {
+  try {
+    const db = await new Promise((res, rej) => {
+      const r = indexedDB.open('firebaseLocalStorageDb');
+      r.onsuccess = () => res(r.result);
+      r.onerror = () => rej(r.error);
+    });
+    const tx = db.transaction('firebaseLocalStorage', 'readonly');
+    const store = tx.objectStore('firebaseLocalStorage');
+    const rows = await new Promise((res, rej) => {
+      const r = store.getAll();
+      r.onsuccess = () => res(r.result);
+      r.onerror = () => rej(r.error);
+    });
+    const row = rows.find(r => typeof r?.fbase_key === 'string' && r.fbase_key.startsWith('firebase:authUser:AIza'));
+    if (!row) {
+      console.log('%cGHL Command: no Firebase login found.', 'color:red;font-weight:bold');
+      console.log('Open a tab logged into your GHL account, then run this again in that tab.');
+      return;
+    }
+    const v = row.value || {};
+    const out = {
+      ghl_firebase_api_key: v.apiKey,
+      ghl_user_id: v.uid,
+      ghl_firebase_refresh_token: v.stsTokenManager?.refreshToken,
+    };
+    if (!out.ghl_firebase_api_key || !out.ghl_user_id || !out.ghl_firebase_refresh_token) {
+      console.log('%cGHL Command: found Firebase login but a field was missing.', 'color:red;font-weight:bold');
+      console.log('Try logging out of GHL and back in, then run this again.');
+      return;
+    }
+    const json = JSON.stringify(out, null, 2);
+    console.log('%cGHL Command: paste this into setup_ghl_mcp (firebase_paste field):', 'color:green;font-weight:bold');
+    console.log(json);
+    try {
+      await navigator.clipboard.writeText(json);
+      console.log('%cAlready copied to your clipboard \u2014 Cmd+V / Ctrl+V to paste.', 'color:green');
+    } catch (e) {
+      console.log('%cCopy it manually from above (clipboard access not granted).', 'color:orange');
+    }
+  } catch (err) {
+    console.log('%cGHL Command: script error.', 'color:red;font-weight:bold');
+    console.log(err);
+  }
+})();`;
+function parseFirebasePaste(input) {
+  if (typeof input !== "string") return null;
+  let cleaned = input.trim();
+  cleaned = cleaned.replace(/^```(?:json)?\s*/i, "").replace(/```$/i, "").trim();
+  cleaned = cleaned.replace(/[“”]/g, '"').replace(/[‘’]/g, "'");
+  let parsed;
+  try {
+    parsed = JSON.parse(cleaned);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object") return null;
+  const obj = parsed;
+  const api = obj.ghl_firebase_api_key;
+  const uid = obj.ghl_user_id;
+  const refresh = obj.ghl_firebase_refresh_token;
+  if (typeof api !== "string" || typeof uid !== "string" || typeof refresh !== "string") return null;
+  const trimmedApi = api.trim();
+  const trimmedUid = uid.trim();
+  const trimmedRefresh = refresh.trim();
+  if (!trimmedApi.startsWith("AIza")) return null;
+  if (!trimmedUid || !trimmedRefresh) return null;
+  return {
+    ghl_firebase_api_key: trimmedApi,
+    ghl_user_id: trimmedUid,
+    ghl_firebase_refresh_token: trimmedRefresh
+  };
+}
+
+// src/setup-tool.ts
 var LICENSE_API = "https://elitedcs.com/api/validate-license";
 var CAPTURE_API = "https://elitedcs.com/api/capture-lead";
 var GHL_API = "https://services.leadconnectorhq.com";
@@ -5908,9 +5985,14 @@ function registerSetupTool(server2) {
       ghl_api_key: import_zod37.z.string().min(10).describe("GHL Private Integration key (starts with 'pit-'). Created INSIDE the sub-account at Settings > Integrations > Private Integrations."),
       ghl_location_id: import_zod37.z.string().min(10).describe("GHL Location ID (sub-account ID). Found in your GHL URL: /location/THIS_PART/dashboard."),
       ghl_company_id: import_zod37.z.string().optional().describe("(Agency only) Company ID for multi-location access."),
-      ghl_user_id: import_zod37.z.string().optional().describe("(Workflow Builder, optional) Firebase User ID. See README for browser capture instructions."),
-      ghl_firebase_api_key: import_zod37.z.string().optional().describe("(Workflow Builder, optional) Firebase API Key starting with 'AIza'."),
-      ghl_firebase_refresh_token: import_zod37.z.string().optional().describe("(Workflow Builder, optional) Firebase refresh token starting with 'AMf-'.")
+      // v3.25.0: one-paste shortcut. Run `auto_capture_firebase_script` first;
+      // it returns a console script that fills the clipboard with this exact
+      // JSON payload. Pasting it here removes the need to fill ghl_user_id,
+      // ghl_firebase_api_key, and ghl_firebase_refresh_token individually.
+      firebase_paste: import_zod37.z.string().optional().describe("(Workflow Builder, one-paste path) Paste the JSON output from auto_capture_firebase_script here. Replaces the three separate Firebase fields below."),
+      ghl_user_id: import_zod37.z.string().optional().describe("(Workflow Builder, manual path) Firebase User ID. Prefer firebase_paste instead."),
+      ghl_firebase_api_key: import_zod37.z.string().optional().describe("(Workflow Builder, manual path) Firebase API Key starting with 'AIza'. Prefer firebase_paste instead."),
+      ghl_firebase_refresh_token: import_zod37.z.string().optional().describe("(Workflow Builder, manual path) Firebase refresh token. Prefer firebase_paste instead.")
     },
     async (args) => {
       const lic = await validateLicense(args.email, args.license_key);
@@ -5923,24 +6005,42 @@ Purchase a license at https://elitedcs.com/ghl-mcp-server or contact support.` }
       if (!ghl.ok) {
         return { content: [{ type: "text", text: `GHL credential check failed: ${ghl.error}` }], isError: true };
       }
-      const wantsWorkflowBuilder = args.ghl_user_id || args.ghl_firebase_api_key || args.ghl_firebase_refresh_token;
+      let resolvedUserId = args.ghl_user_id;
+      let resolvedFbApi = args.ghl_firebase_api_key;
+      let resolvedFbRefresh = args.ghl_firebase_refresh_token;
+      if (args.firebase_paste) {
+        const parsed = parseFirebasePaste(args.firebase_paste);
+        if (!parsed) {
+          return {
+            content: [{
+              type: "text",
+              text: "Couldn't parse firebase_paste. Expected the JSON output from auto_capture_firebase_script. Re-run that tool, follow the steps, and paste the entire JSON object it copies to your clipboard."
+            }],
+            isError: true
+          };
+        }
+        resolvedUserId = parsed.ghl_user_id;
+        resolvedFbApi = parsed.ghl_firebase_api_key;
+        resolvedFbRefresh = parsed.ghl_firebase_refresh_token;
+      }
+      const wantsWorkflowBuilder = resolvedUserId || resolvedFbApi || resolvedFbRefresh;
       let workflowBuilderEnabled = false;
       let workflowBuilderNote = "";
       if (wantsWorkflowBuilder) {
-        if (!args.ghl_user_id || !args.ghl_firebase_api_key || !args.ghl_firebase_refresh_token) {
+        if (!resolvedUserId || !resolvedFbApi || !resolvedFbRefresh) {
           return {
             content: [{
               type: "text",
-              text: "Workflow Builder requires ALL THREE Firebase fields: ghl_user_id, ghl_firebase_api_key, ghl_firebase_refresh_token. Either provide all three or omit all three. See https://elitedcs.com/ghl-mcp-server/firebase for one-click capture."
+              text: "Workflow Builder requires ALL THREE Firebase fields: ghl_user_id, ghl_firebase_api_key, ghl_firebase_refresh_token. The easy way is `auto_capture_firebase_script` -> paste the JSON output into `firebase_paste`. Manual capture steps: https://elitedcs.com/ghl-mcp-firebase"
             }],
             isError: true
           };
         }
-        const fb = await validateFirebase(args.ghl_firebase_api_key, args.ghl_firebase_refresh_token);
+        const fb = await validateFirebase(resolvedFbApi, resolvedFbRefresh);
         if (!fb.ok) {
           workflowBuilderNote = `
 
-Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builder. Re-run setup_ghl_mcp later with fresh Firebase fields to enable it.`;
+Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builder. Re-run setup_ghl_mcp later with fresh Firebase fields (use auto_capture_firebase_script for a one-paste flow) to enable it.`;
         } else {
           workflowBuilderEnabled = true;
         }
@@ -5952,9 +6052,9 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
         ghl_api_key: args.ghl_api_key.trim(),
         ghl_location_id: args.ghl_location_id.trim(),
         ghl_company_id: args.ghl_company_id?.trim() || void 0,
-        ghl_user_id: workflowBuilderEnabled ? args.ghl_user_id?.trim() : void 0,
-        ghl_firebase_api_key: workflowBuilderEnabled ? args.ghl_firebase_api_key?.trim() : void 0,
-        ghl_firebase_refresh_token: workflowBuilderEnabled ? args.ghl_firebase_refresh_token?.trim() : void 0,
+        ghl_user_id: workflowBuilderEnabled ? resolvedUserId?.trim() : void 0,
+        ghl_firebase_api_key: workflowBuilderEnabled ? resolvedFbApi?.trim() : void 0,
+        ghl_firebase_refresh_token: workflowBuilderEnabled ? resolvedFbRefresh?.trim() : void 0,
         // v3.24.0+ attestation. Tied to email + license + device fingerprint;
         // verified on every MCP startup. Closes the hand-crafted creds bypass.
         signed_attestation: lic.signedAttestation
@@ -5987,11 +6087,16 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
 function registerEnableWorkflowBuilderTool(server2) {
   server2.tool(
     "enable_workflow_builder",
-    "Add Firebase credentials to an existing GHL Command install to unlock 49 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. Requires you've already run setup_ghl_mcp. Capture the three Firebase values from your GHL browser session \u2014 see elitedcs.com/ghl-mcp-firebase for step-by-step DevTools instructions. Tool count goes from 163 to 212 after the next Claude restart.",
+    "Add Firebase credentials to an existing GHL Command install to unlock 49 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. Requires you've already run setup_ghl_mcp. EASIEST PATH: run `auto_capture_firebase_script` first, paste the JSON output into `firebase_paste` here. MANUAL PATH: capture the three Firebase fields via DevTools and pass them individually. Tool count goes from 163 to 212 after the next Claude restart.",
     {
-      ghl_user_id: import_zod37.z.string().min(10).describe("Firebase User ID (uid). DevTools \u2192 Application \u2192 IndexedDB \u2192 firebaseLocalStorageDb \u2192 firebaseLocalStorage \u2192 the value.uid field of the firebase:authUser row."),
-      ghl_firebase_api_key: import_zod37.z.string().min(10).describe("Firebase API Key starting with 'AIza'. The string between 'firebase:authUser:' and ':[DEFAULT]' in the row's Key column."),
-      ghl_firebase_refresh_token: import_zod37.z.string().min(10).describe("Firebase refresh token. value.stsTokenManager.refreshToken in the firebase:authUser row.")
+      // v3.25.0: one-paste path. Tool runs `auto_capture_firebase_script` to
+      // get the console script; the script returns a JSON object that pastes
+      // cleanly into this field. Saves the buyer from picking out three
+      // separate fields in IndexedDB.
+      firebase_paste: import_zod37.z.string().optional().describe("Paste the JSON output from auto_capture_firebase_script here. Replaces the three separate Firebase fields below."),
+      ghl_user_id: import_zod37.z.string().min(10).optional().describe("(Manual path) Firebase User ID (uid). Prefer firebase_paste."),
+      ghl_firebase_api_key: import_zod37.z.string().min(10).optional().describe("(Manual path) Firebase API Key starting with 'AIza'. Prefer firebase_paste."),
+      ghl_firebase_refresh_token: import_zod37.z.string().min(10).optional().describe("(Manual path) Firebase refresh token. Prefer firebase_paste.")
     },
     async (args) => {
       const existing = readCredentials();
@@ -6004,7 +6109,34 @@ function registerEnableWorkflowBuilderTool(server2) {
           isError: true
         };
       }
-      const fb = await validateFirebase(args.ghl_firebase_api_key.trim(), args.ghl_firebase_refresh_token.trim());
+      let userId = args.ghl_user_id;
+      let fbApi = args.ghl_firebase_api_key;
+      let fbRefresh = args.ghl_firebase_refresh_token;
+      if (args.firebase_paste) {
+        const parsed = parseFirebasePaste(args.firebase_paste);
+        if (!parsed) {
+          return {
+            content: [{
+              type: "text",
+              text: "Couldn't parse firebase_paste. Expected the JSON output from auto_capture_firebase_script. Re-run that tool, follow the steps, and paste the entire JSON object it copies to your clipboard."
+            }],
+            isError: true
+          };
+        }
+        userId = parsed.ghl_user_id;
+        fbApi = parsed.ghl_firebase_api_key;
+        fbRefresh = parsed.ghl_firebase_refresh_token;
+      }
+      if (!userId || !fbApi || !fbRefresh) {
+        return {
+          content: [{
+            type: "text",
+            text: "Workflow Builder needs all three Firebase fields. Easiest: run `auto_capture_firebase_script`, follow the prompt, then pass the JSON output as `firebase_paste`. Manual capture: https://elitedcs.com/ghl-mcp-firebase"
+          }],
+          isError: true
+        };
+      }
+      const fb = await validateFirebase(fbApi.trim(), fbRefresh.trim());
       if (!fb.ok) {
         return {
           content: [{
@@ -6012,7 +6144,7 @@ function registerEnableWorkflowBuilderTool(server2) {
             text: `Firebase credentials rejected: ${fb.error}
 
 Common causes:
-  - The refresh token has rotated (they rotate every few weeks). Re-extract from your GHL browser tab.
+  - The refresh token has rotated (they rotate every few weeks). Re-run auto_capture_firebase_script for a fresh one.
   - The Firebase API Key doesn't match the refresh token's project. Both must come from the SAME firebase:authUser row.
 
 DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
@@ -6022,9 +6154,9 @@ DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
       }
       writeCredentials({
         ...existing,
-        ghl_user_id: args.ghl_user_id.trim(),
-        ghl_firebase_api_key: args.ghl_firebase_api_key.trim(),
-        ghl_firebase_refresh_token: args.ghl_firebase_refresh_token.trim()
+        ghl_user_id: userId.trim(),
+        ghl_firebase_api_key: fbApi.trim(),
+        ghl_firebase_refresh_token: fbRefresh.trim()
       });
       return {
         content: [{
@@ -6045,6 +6177,43 @@ DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
     }
   );
 }
+function registerFirebaseCaptureScriptTool(server2) {
+  server2.tool(
+    "auto_capture_firebase_script",
+    "Get the browser-console script that auto-extracts the 3 Firebase fields needed to enable the Workflow Builder. Run this, copy the script, paste it into Chrome DevTools Console on a tab logged into GHL, press Enter, and the result lands in your clipboard. Then paste the JSON into setup_ghl_mcp's firebase_paste field (or enable_workflow_builder's). No manual IndexedDB digging.",
+    {},
+    async () => {
+      const steps = [
+        "## One-paste Firebase capture",
+        "",
+        "**Step 1.** Open your GoHighLevel account in Chrome. Make sure you're logged in.",
+        "",
+        "**Step 2.** Open DevTools \u2014 press `F12` on Windows / Linux, or `Cmd+Option+I` on Mac. Click the **Console** tab.",
+        "",
+        "**Step 3.** Copy the script below, paste it into the Console, and press Enter:",
+        "",
+        "```javascript",
+        FIREBASE_CAPTURE_SCRIPT,
+        "```",
+        "",
+        "**Step 4.** The script prints a JSON object and copies it to your clipboard automatically. Looks like this (your values will be longer):",
+        "",
+        "```json",
+        "{",
+        `  "ghl_firebase_api_key": "AIza...",`,
+        `  "ghl_user_id": "abc...",`,
+        `  "ghl_firebase_refresh_token": "AMf-..."`,
+        "}",
+        "```",
+        "",
+        "**Step 5.** Come back to Claude. Run `setup_ghl_mcp` (first-time install) or `enable_workflow_builder` (already set up) and paste the JSON into the `firebase_paste` field. The MCP parses it automatically \u2014 you don't need to fill the individual `ghl_user_id`, `ghl_firebase_api_key`, `ghl_firebase_refresh_token` fields.",
+        "",
+        "Step-by-step screenshots: https://elitedcs.com/ghl-mcp-firebase"
+      ].join("\n");
+      return { content: [{ type: "text", text: steps }] };
+    }
+  );
+}
 function registerLeadCaptureTool(server2) {
   server2.tool(
     "request_license",
@@ -8571,15 +8740,17 @@ async function resolveAccessAndRegister() {
     process.stderr.write(
       `[ghl-mcp] Bootstrap mode.
 [ghl-mcp] Need a valid license plus GHL_API_KEY + GHL_LOCATION_ID (env vars or credentials file at ${credentialsPath()}).
-[ghl-mcp] Only setup_ghl_mcp, request_license, and get_mcp_version are available. Run setup_ghl_mcp with your license + GHL credentials \u2014 or request_license if you don't have a license yet.
+[ghl-mcp] Available: setup_ghl_mcp, request_license, auto_capture_firebase_script, get_mcp_version. Run setup_ghl_mcp with your license + GHL credentials \u2014 or request_license if you don't have a license yet.
 `
     );
     registerSetupTool(server);
     registerLeadCaptureTool(server);
+    registerFirebaseCaptureScriptTool(server);
   } else {
     const client = new GHLClient({ apiKey, locationId });
     registerAllTools(server, client, registry, pkg.version);
     registerEnableWorkflowBuilderTool(server);
+    registerFirebaseCaptureScriptTool(server);
     if (fileCreds && !process.env.GHL_API_KEY) {
       process.stderr.write(`[ghl-mcp] Loaded credentials from ${credentialsPath()}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.24.0",
+  "version": "3.25.0",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 212 tools — full CRM, automation, marketing control, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",