@elitedcs/ghl-mcp 3.8.0 → 3.9.0

package/CHANGELOG.md

@@ -1,5 +1,101 @@
 # Changelog
 
+## 3.9.0 — Products + Trigger Links CRUD (gap-closure round 1)
+
+**187 tools across 39 modules. Bundle: 300.9 KB.**
+
+Closes two known buyer-visible write gaps surfaced in the v3.8.1 gap analysis. Both use the public GHL API (no Firebase required) so they unlock for every install, not just buyers who've completed Firebase setup.
+
+### Products (6 new tools)
+New module `src/tools/products.ts`. Products underlie invoices, memberships, courses, and e-commerce — previously invisible to MCP write tools.
+
+- `list_products` — paginated list with optional name+description search
+- `get_product` — full details (media, variants, taxes, status)
+- `create_product` — name + productType (DIGITAL / PHYSICAL / SERVICE / PHYSICAL_DIGITAL), optional description, image, statement descriptor
+- `update_product` — partial updates work (fetch-then-merge: only the fields you pass change)
+- `delete_product` — confirm:"DELETE" gated
+- `list_product_prices` — read prices on a single product
+
+**Honest scope note:** Price writes (POST/PUT/DELETE on `/products/{id}/price`) return 403 with sub-account Private Integration scopes. Probably need agency-level auth. Not exposed.
+
+### Trigger Links (3 new tools, on top of existing `get_trigger_links`)
+Agencies use trigger links heavily for campaign tracking. The list endpoint was already there but write tools were missing.
+
+- `create_trigger_link` — name + redirectTo (URL or merge-field like `{{contact.website}}`)
+- `update_trigger_link` — rename or change destination; tracking key + short URL stay the same
+- `delete_trigger_link` — confirm:"DELETE" gated
+
+**Verified end-to-end** against MCP Testing: created → updated → listed → deleted, both modules.
+
+### Gap analysis findings (what we DIDN'T ship and why)
+
+Probed GHL's public API for every Tier 1+2 item from the v3.8.1 gap analysis. Results:
+
+| Area | Public API status | Action |
+|---|---|---|
+| Products CRUD | ✅ 200 | **Shipped in v3.9.0** |
+| Trigger Links CRUD | ✅ 200 / 201 | **Shipped in v3.9.0** |
+| Email templates | ❌ 404 (no endpoint) | Would need internal-API reverse-engineering |
+| SMS templates / snippets | ❌ 404 | Same |
+| Email campaigns create/send | ❌ 404 (only list works) | Same |
+| Reviews / reputation | ❌ 404 | Same |
+| Smart Lists / saved searches | ❌ 404 / 400 | Same |
+| Memberships sub-features (offers, lessons) | ❌ 404 | Same |
+| Product price writes | ❌ 403 with sub-account scope | Likely agency-only |
+
+For the 404 items, the same DevTools-capture methodology we used for workflow-builder and funnel-builder would work, but each one is a Phase-2-style investment.
+
+### Tool count impact
+- Total: 178 → 187 (+9)
+- Without Firebase: 148 → 157 (all new tools use public API, no Firebase required)
+- With Firebase: 178 → 187
+- Modules: 38 → 39 (new products module)
+
+### Files changed
+- `src/tools/products.ts` (NEW)
+- `src/tools/trigger-links.ts` — added 3 write tools
+- `src/tools/index.ts` — registered new products module
+- `src/setup-tool.ts` — refreshed tool counts (148 → 157, 178 → 187)
+
+## 3.8.1 — Vitest test suite + pre-publish gate
+
+**178 tools across 38 modules. Bundle: 291.3 KB (unchanged).**
+
+Strict safety patch. No new features, no behavior changes — just tests covering the high-risk code paths so regressions get caught at build time instead of in production.
+
+### New: Vitest test suite (87 tests, 154ms)
+Four test files added under `src/`:
+
+- `retry.test.ts` (15 tests) — `computeRetryDelay`: Retry-After delta-seconds + HTTP-date parsing + clamping + full-jitter backoff math. Catches the "5junk" mixed-string regression and the "doubles per attempt" backoff guarantee.
+- `trigger-schemas.test.ts` (60 tests) — Every one of the 57 native trigger types parses through its typed variant. Unknown future types fall through to the permissive fallback. Real-world `form_submission` payload preserves passthrough fields.
+- `workflow-builder-client.test.ts` (7 tests) — `normalizeRemoveFromWorkflowAction` covers all branches (no-op when both fields present, synthesize string from array, synthesize array from string, multi-element array picks first, empty array no-op, non-target action type no-op, missing attributes no-op).
+- `version-check.test.ts` (5 + tests) — `fetchLatestVersion` + `getVersionStatus` with mocked `fetch`: 200/non-2xx/network-error/missing-version-field/non-string-version cases.
+
+### CI gate
+The npm publish workflow now runs `npm test` before the tag-vs-version check. **Tests must pass for a release to ship.** Combined with the post-publish smoke test that verifies the package boots cleanly on a fresh machine, both surfaces are now covered:
+
+- Pre-publish: schema correctness, normalization logic, retry math
+- Post-publish: server boots, tool registry includes required tools
+
+### New npm scripts
+- `npm test` — run once, exit
+- `npm run test:watch` — re-run on file change during development
+
+### Dev-only dep added
+- `vitest@^4.1.6` (devDependencies — not shipped to consumers; the npm tarball is unchanged size)
+
+### `normalizeRemoveFromWorkflowAction` now exported
+Was private in v3.8.0. Made public so tests can exercise it directly. Still not exposed via MCP — it's a runtime detail used by `getWorkflow` (read) and `buildActionChain` (write).
+
+### Files changed
+- `src/retry.test.ts` (NEW)
+- `src/trigger-schemas.test.ts` (NEW)
+- `src/workflow-builder-client.test.ts` (NEW)
+- `src/version-check.test.ts` (NEW)
+- `src/workflow-builder-client.ts` — `normalizeRemoveFromWorkflowAction` now exported
+- `package.json` — `vitest` dev dep + `test` / `test:watch` scripts
+- `.github/workflows/publish.yml` — added pre-publish test step
+
 ## 3.8.0 — Bundle re-extraction wins (triggers + goal events) + correctness fixes
 
 **178 tools across 38 modules. Bundle: 291.3 KB.**

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 178 tools across 36 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
+**Full GoHighLevel API access for Claude.** 187 tools across 39 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 
@@ -138,7 +138,7 @@ https://app.gohighlevel.com/v2/location/YOUR_LOCATION_ID/dashboard
 
 ## Enable Workflow Builder (Optional)
 
-The 30 builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL'''s internal API and require Firebase credentials. Without them, the other 148 tools work fine — you just won'''t have workflow/funnel/form/pipeline editing.
+The 30 builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL'''s internal API and require Firebase credentials. Without them, the other 157 tools work fine — you just won'''t have workflow/funnel/form/pipeline editing.
 
 Grab the three values from your GHL browser session, then re-run `setup_ghl_mcp` with them:
 
@@ -167,9 +167,9 @@ Re-run setup_ghl_mcp with workflow builder:
 
 ---
 
-## Tools (178)
+## Tools (187)
 
-> **v3.7.0 fixes Don Harris's 2026-05-14 funnel-builder audit.** All six previously-broken funnel write tools (`update_funnel`, `create_funnel_page`, `delete_funnel_page`, `delete_funnel`, `update_page_content`, plus `create_funnel` which 401'd) now hit the correct GHL endpoints. New: `update_funnel_step` for per-step renames / slugs / domains. Origin + Referer headers added to all funnel writes — required by GHL's IAM, missing before.
+> **v3.9.0 closes the Products + Trigger Links gap.** New: full Products CRUD (`list_products`, `get_product`, `create_product`, `update_product`, `delete_product`, `list_product_prices`) — products underlie invoices, memberships, courses, and e-commerce. New: Trigger Links CRUD (`create_trigger_link`, `update_trigger_link`, `delete_trigger_link`) — agencies use these for trackable links in campaigns. Both use the public GHL API (no Firebase needed).
 
 ### CRM & Contacts (15 tools)