@elitedcs/ghl-mcp 3.53.1 → 3.53.2

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 3.53.2 — Fixes a serious 3.53.1 regression: upgrade immediately
+
+3.53.1 resolved the machine identity randomly when nothing was passed in, and
+that is exactly how attestation verification asks for it. Cached attestations
+failed to verify, the tool dropped to bootstrap, and each restart would have
+claimed another install slot until the member hit their cap.
+
+- No-argument identity resolution is deterministic again: stored `device_id`
+  first, then the fingerprint inside an existing attestation (so an upgrade
+  keeps the slot it already holds), then the legacy scheme as a last resort.
+- Two tests pin the determinism so this cannot ship again.
+
+If you ran 3.53.1, upgrade. If your install count looks inflated, write to
+support@ghlcommand.com and we will reset it.
+
 ## 3.53.1 — Laptops stop eating install slots; "cancelled" stops lying
 
 Reported by Carlos Boyd, who hit his install cap with two physical machines.

package/dist/index.js

@@ -1010,8 +1010,26 @@ function deviceFingerprint(opts) {
     return opts.cached;
   }
   const crypto4 = require("node:crypto");
+  if (!opts) {
+    try {
+      const store = (init_credentials_store(), __toCommonJS(credentials_store_exports));
+      const creds = store.readCredentials();
+      if (creds?.device_id) return creds.device_id;
+      const adopted = creds?.signed_attestation ? parseAttestationPayload(creds.signed_attestation)?.device_fingerprint : void 0;
+      const id = adopted || crypto4.randomBytes(8).toString("hex");
+      if (creds) {
+        try {
+          store.writeCredentials({ ...creds, device_id: id });
+        } catch {
+        }
+      }
+      return id;
+    } catch {
+      return legacyDeviceFingerprint();
+    }
+  }
   const fresh = crypto4.randomBytes(8).toString("hex");
-  opts?.persist?.(fresh);
+  opts.persist?.(fresh);
   return fresh;
 }
 function base64urlDecode(s) {
@@ -2084,7 +2102,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.53.1",
+      version: "3.53.2",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 232 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.53.1",
+  "version": "3.53.2",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 232 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",