@elitedcs/ghl-mcp 3.77.0 → 3.78.0

package/CHANGELOG.md

@@ -1,5 +1,93 @@
 # Changelog
 
+## 3.78.0 — GoHighLevel's own template library, repainted in your client's colours
+
+GoHighLevel ships more than 900 designed funnel templates. You could always install
+one and then spend an afternoon recolouring it by hand. Now it is one call.
+
+`find_ghl_template` searches the library. `install_ghl_template` installs the one you
+picked into the sub-account you are switched to, and with a `brandSlug` it repaints the
+whole funnel in that brand's colours and typefaces on the way in.
+
+**What "repaint" honestly means.** It reads every page of the template first and works
+out ONE palette for the whole funnel, because per-page guessing gave five pages of the
+same template two different second colours. It then swaps that palette for your client's.
+Some large background bands keep the template's own colour, so the result is your
+client's funnel in your client's colours, not a bespoke design. Every branded page is
+read back and measured before anything is removed, and if a single page fails to land,
+nothing is removed at all.
+
+**It is careful about your account, and it does not delete anything unless you ask.** It
+installs one funnel and its pages. It touches no workflow, form, pipeline, custom field or
+calendar. The template's original pages are now KEPT by default, sitting beside the branded
+ones, and only removed if you pass `keepOriginals: false`. That is deliberate: the tool
+works out which funnel it just created by comparing the account before and after, and on a
+busy sub-account, where somebody may be building a funnel in the UI at the same moment,
+that comparison cannot be certain. If two new funnels appear it stops and brands nothing.
+If your account holds so many funnels that it cannot see them all at once, or if a step
+holds a split test, it refuses to remove anything and tells you why. Every result carries
+the one call that undoes the whole thing.
+
+Run it on a quiet sub-account when you can, and look at the result before asking it to
+remove the originals.
+
+These templates are other people's designs, and they are frequently not accessible. The
+tool says so, and points you at `verify_design` on the installed page before a client
+sees it.
+
+**Also in this release**
+
+Page Studio no longer serves images that belong to other GoHighLevel accounts.
+
+A local security fix in the Command OS cockpit. When you start a design run from the
+brand card, the text you type is passed to the run as data. Before this release a
+value that began with two dashes could be read as an instruction instead, which could
+have moved where the run wrote its files. It is contained structurally now, and the
+build fails if anyone reintroduces the old shape.
+
+The Security Controls guide PDF had been promising a switch for 233 tools since around
+v3.56.0, because the PDF had no generator and nothing read it back. It now says 250, it
+is rendered from the HTML beside it, and a test reads the finished PDF and fails on a
+stale number.
+
+Counts: 250 tools, 51 modules, free tier 112.
+
+## 3.77.1 — the Blueprint can build a client account, and had been saying it could not
+
+If you ran the Blueprint, it planned the account, showed you the two checklists, and then
+printed this at the bottom:
+
+> _v1 stops here. When you approve, the automatic list is ready for one-shot staging (phase 2)._
+
+**That was wrong, and it had been wrong for months.** The Blueprint builds. You approve the
+plan, it dry-runs the automatic list without writing anything, shows you exactly what it
+would create, and on your go it builds: pipelines and stages, custom fields, tags, custom
+values, calendars, forms, funnel structure, templates, and workflows chained and verified,
+each object read back before anything that depends on it is created.
+
+The plan-only sentence was true of the first version. The builder was finished afterwards
+and nobody removed the old wording. It was in four files, and those files ship inside the
+package, so it has been on your machine reading the wrong thing to you the whole time.
+
+**Two of them were worse than a stale sentence.** One instructed the assistant to tell you
+execution was not available yet, so it was not merely present, it was being read out. And
+the description of `apply_build_plan` itself said `execute = live writes (not yet enabled)`
+three hundred lines above the code that performs those writes, which means an assistant
+reading that description could decline to run a build you had just asked for. Meanwhile the
+same skill file gave the correct build instruction further down, so it contradicted itself
+and the half you saw was the false one.
+
+**What has not changed is the gate.** Nothing is built until you say so, the dry run still
+writes nothing, and workflows are still created as drafts unless you ask for them
+published. The old wording carried that promise correctly, which is a large part of why the
+false half went unnoticed. The gate stays; only the claim that building does not exist is
+gone.
+
+A test now fails the build on any of the six ways this was phrased, anywhere in the skill or
+in that tool, so it cannot come back quietly.
+
+Counts unchanged: 248 tools, 51 modules, free tier 112.
+
 ## 3.77.0 — the account you aimed at, even when two things run at once
 
 `switch_location` used to change your API key first and your location a moment later.

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 248 tools across 51 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
+**Full GoHighLevel API access for Claude.** 250 tools across 51 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 
@@ -137,7 +137,7 @@ Run setup_ghl_mcp to activate GHL Command:
   ghl_location_id: YOUR_LOCATION_ID
 ```
 
-Approve the tool call. Server validates your license, verifies your GHL credentials, writes them to a per-user config file. **Quit Claude one more time and reopen** — the full core toolset is now unlocked (248 tools total with the optional Workflow Builder Firebase add-on).
+Approve the tool call. Server validates your license, verifies your GHL credentials, writes them to a per-user config file. **Quit Claude one more time and reopen** — the full core toolset is now unlocked (250 tools total with the optional Workflow Builder Firebase add-on).
 
 ### 4. Try it
 
@@ -523,7 +523,7 @@ Highlights (full guide: [`docs/HEADLESS.md`](docs/HEADLESS.md)):
 |---|---|
 | `get_mcp_version` | Check installed version against the latest published to npm. Confirms an upgrade landed after restarting Claude. Available even before GHL credentials are configured. |
 | `health_check` | Run a full health check: npm registry + version status, GHL API key validity, default location reachability, Firebase auth status, token registry presence. Use when something feels broken. |
-| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock 53 additional Firebase-gated tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, memberships, validate_workflow). No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
+| `enable_workflow_builder` | Add Firebase credentials to an existing install to unlock 55 additional Firebase-gated tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, memberships, validate_workflow). No need to re-enter license / API key / location ID. Run this any time after the basic setup, on the buyer's schedule. |
 
 ### Other Modules
 
@@ -803,7 +803,7 @@ Source repo is private. Contributors need an invitation from `drjerryrelth`. The
 
 ### Reducing context / token usage
 
-Every registered MCP tool's schema is shipped to the model on every message. With 248 tools that's a meaningful per-message context cost even in chats that never touch GHL. If you only use a slice of GHL Command, restrict the tool surface with `GHL_ENABLED_MODULES` and/or `GHL_ENABLED_TOOLS`:
+Every registered MCP tool's schema is shipped to the model on every message. With 250 tools that's a meaningful per-message context cost even in chats that never touch GHL. If you only use a slice of GHL Command, restrict the tool surface with `GHL_ENABLED_MODULES` and/or `GHL_ENABLED_TOOLS`:
 
 ```jsonc
 // Claude Desktop config — enable whole modules
@@ -897,7 +897,7 @@ Built by **[Elite DCs, LLC](https://elitedcs.com)** — a digital marketing and
 
 **Tech stack:** TypeScript, Node.js, esbuild, MCP SDK, Zod, GHL API v2, Firebase Auth
 
-**Version:** 3.77.0
+**Version:** 3.78.0
 
 ---