@elitedcs/ghl-mcp 3.34.6 → 3.34.7

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 3.34.7 — Audit now sees UUID pipeline-stage ids (dead-stage silent failure)
+
+- **`audit_workflows` / `validate_workflow` now catch a dead pipeline STAGE
+  reference inside move/create/update-opportunity actions.** GHL pipeline **stage**
+  ids are hyphenated UUIDs (e.g. `ce81a710-7b63-4324-b5dc-c170ad5b8773`), but the
+  id-shape gate (`ID_SHAPE`) only matched hyphen-free alphanumeric ids. Every
+  action-level stage reference (`internal_update_opportunity`,
+  `internal_create_opportunity`, `create_opportunity`) was therefore silently
+  dropped before validation: a workflow that moved or created an opportunity into a
+  **deleted** stage passed the audit clean. This is exactly the silent-failure class
+  the tool exists to catch, and it affected every account whose pipelines use UUID
+  stages (the GHL norm). `validate_workflow` on such a workflow now reports both the
+  pipeline and the stage reference (previously only the pipeline).
+- **Fix:** `ID_SHAPE` accepts both shapes — `[A-Za-z0-9]{17,}` and the canonical
+  UUID. The broadening cannot cause a false break: display names ("Jane Doe") and
+  standard field names still never match, and anything that cannot be resolved is
+  reported as `unverified`, never `error`. Trigger-condition stage refs were already
+  un-gated and unaffected.
+- Tests: 4 new regression cases (dead UUID stage in each of the three opportunity
+  action shapes must flag; a valid UUID stage must produce zero errors and now be
+  extracted). Full suite 273 pass / 1 skip.
+
 ## 3.34.6 — Revert v3.34.5 (internal_update_opportunity save-abort regression)
 
 - **Reverts v3.34.5.** That release made `validateActionChain` throw on *every*

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.34.6",
+      version: "3.34.7",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 218 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -8516,7 +8516,7 @@ ${errors.join("\n")}` : "\nNo errors!",
 // src/tools/validators.ts
 var import_zod47 = require("zod");
 var ALL_CATEGORIES = ["pipeline", "stage", "custom_field", "user", "workflow", "form", "calendar", "survey"];
-var ID_SHAPE = /^[A-Za-z0-9]{17,}$/;
+var ID_SHAPE = /^([A-Za-z0-9]{17,}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/;
 function isIdShaped(s) {
   return typeof s === "string" && ID_SHAPE.test(s);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.34.6",
+  "version": "3.34.7",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 218 tools — full CRM, automation, marketing control, account-wide workflow audit, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",