@elitedcs/ghl-mcp 3.89.0-beta.8 → 3.89.0

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # Changelog
 
+## 3.89.0: the Secret Shopper reports what it saw
+
+This release is everything in 3.89.0-beta.2 to 3.89.0-beta.10 and 3.89.0-rc.1 below, plus the changes here. It carries the 3.88.4 fix as well: no test tool deletes a contact.
+
+**The Secret Shopper report says what each check saw, where and when.** The top line is a count, such as "Checked 16 things on this site: 11 in place, 3 not in place, 2 not checked." A check that was not sure says "Not checked" with its reason, and is never counted as a fail.
+
+**16 checks are reported in this version:** https, the move from http to https, the phone layout tag, being open to search engines, sideways scrolling on a phone, speed, tracking, the title, the description, the main heading, the sitemap, the amount of text, tap to call, a phone number on the page, an enquiry form and an email link.
+
+**16 checks say "Not checked in this version." and earn no points:** Google PageSpeed's speed and search scores, the three Google Business Profile checks, reviews, chat, questions and answers, being named in AI answers, AI search tools reading the site, the follow-up test, online booking, local business details (schema) and whether they hold the address and phone, pages that open, and image descriptions. The score table marks them the same way. On the brand card, the page's headlines also say "Not checked in this version."
+
+**A "no" that rests on a network answer is asked twice,** 10 seconds apart, and stands when both answers agree. Plain http counts as moving to https when that move is seen.
+
+**Each Secret Shopper check runs in a process of its own,** stopped at 20 minutes or when it and its browser together reach 5 GB of memory, and one check runs at a time. A stopped check answers "Not checked: the check of this website stopped before it finished", with the reason, and makes no report. **Secret Shopper runs on a Mac in this version of GHL Command. It does not run on Windows or Linux yet.** On Windows or Linux it answers with that sentence and checks nothing. Known limit: if Chrome updates itself while a check is running, that check's browser may keep running in the background after the check ends.
+
+**Coming from 3.88.4, you will also notice:**
+
+**Some questions in the cockpit now open as a panel under the button you pressed, not a browser pop-up:** approving a plan, marking a step done and the intake's questions.
+
+**Reading a call recording uses the recorder's own read tools and nothing else.** When the intake fills answers from a recording, it may call your recorder's read tools by their exact names; its other tools, every other connected service and the web are blocked for that read, and it writes nothing.
+
+**A build checks the staff list you approved.** If the staff list changes after you approve, the approval no longer counts, and Build starts nothing until you approve again.
+
+**A template made by a build remains on the job list until you confirm it.** Finding the template in the account is not taken as proof its content is right, so Verify leaves that job open for you to check and confirm.
+
+**Reading a link into the intake is switched off, as in 3.88.4.** The intake says "Reading a link isn't available in this version." and asks you to paste the page's text instead.
+
+## 3.89.0-rc.1: the Secret Shopper is back, and refusals say why
+
+This is a release candidate, for testers only. It is everything in 3.89.0-beta.10, plus the changes below.
+
+**The Secret Shopper is back, rebuilt.** Give it a prospect's website and it reads the site the way a new client would on a phone, then writes a one-page report you can walk them through. Every check gives one of three answers:
+- **Yes**, when it saw the thing on the page as drawn on a phone, or in the page's code for the checks that live there (title, description, schema).
+- **No**, only about what it actually read: a home-page check from the home page, and anything about the whole site only when it read the whole site.
+- **Not checked**, with the reason, whenever it could not be sure.
+
+Some things always ship as not checked: colors and the logo (what a phone actually paints cannot be confirmed from outside), text inside a slider, a folded menu or another box that hides part of its content (a page holding it gives no "no" for the whole site), a tap-to-call link that sits only in a folded menu it did not open, the Google Business Profile itself, and follow-up speed. On 10 clinic and wellness websites whose facts we had checked by hand, its answers about a phone number shown, a tap-to-call link, reviews shown and an enquiry form were 27 yes, 13 not checked and 0 wrong. The blind test on 15 randomly drawn sites follows with the stable release.
+
+**It is part of Command Pro and the plans above it, not GHL Command.** A license that does not include it says so in one sentence and changes nothing.
+
+**extract_brand refuses a page under 150 words and says so,** rather than taking colors and fonts from a page too short to be sure it is the site.
+
+**verify_funnel says "not checked" instead of guessing.** It never reports lost leads when it could not send or confirm a test lead:
+- a private or local address: "Not checked: the address is private, so no test lead was sent."
+- a form endpoint that answers with a redirect, which is not followed;
+- a spam gate that blocks the automated test lead;
+- an endpoint that answers the test lead with an error, which it reports as that answer.
+
+**verify_funnel no longer deletes anything; it lists its test contacts for you to remove.** It does not run at all when a test address it would use already belongs to a contact in the account, and it says a test lead arrived only when a contact carrying the run's own test address appears after the submit.
+
+**run_secret_shopper no longer removes its test lead; the result names it for you to remove.** Both tools list every contact that now carries the test address, with its name, phone, email and created date. If your form matches leads by phone, some may be existing customers, so check each before deleting.
+It still reports a lost lead when a test lead was accepted and no contact appeared. A run where nothing could be checked now says not checked, never pass.
+
+**Refusals are said plainly.** extract_brand and verify_design say in one sentence when an address, or a redirect to one, is local or private and never opened, instead of "status 0" or a raw browser error. verify_design does not grade an error page or a bot check as the site; it says not checked and why.
+
+**Saved packages are kept.** Packages you save on Your agency stay saved and show on step 8 of Build a client account.
+
+US spelling in what the tools say: color, license, recognize, catalog and the rest.
+
+## 3.89.0-beta.10: tools reach public web addresses only
+
+This is a beta, for testers only. It is everything in 3.89.0-beta.9, plus the changes below.
+
+**Security fix: every tool that opens a web address you or Claude give it now reaches public addresses only.** That covers extract_brand, verify_design, check_page_theme, verify_funnel, Workflow Audit Pro, install_ghl_template, the build's email previews and the cockpit's handoff page checks. An address on your own computer or office network is refused with one sentence saying why.
+
+**verify_design and extract_brand open pages in a fresh browser** with no saved logins. verify_design renders a local page only from your project folder or your brand folder. To use another folder, set GHL_MCP_DESIGN_DIR to it.
+
+**The Secret Shopper is being rebuilt and returns in a coming release.** It is not available in this beta.
+
+## 3.89.0-beta.9: your license is checked while you work
+
+This is a beta, for testers only. Everything in 3.89.0-beta.8, plus the changes below. Installing this beta does not change anyone's plan: what each person can use is decided by their license.
+
+**Your license is checked while you work.** GHL Command asks the license server again every 4 hours, not only when it starts, and the license server's answer is the only one that counts. If a membership ends or a computer is taken off the license, the tools stop at the next check with a sentence saying why. Nothing in any account is changed when that happens.
+
+**Setup gives advice that fits.** At your computer limit, it tells you how to free a computer on your license. If a membership has ended, it says how to renew. Only a key we do not recognize is pointed at getting one.
+
+**A tool your license does not include says so plainly,** in one sentence, and changes nothing. Everything your license includes works exactly as before.
+
+**Smaller fixes.** The Health page and the handoff box count confirmed items in the same sentence as step 10. A retry test that could fail about once in a thousand runs is now steady.
+
 ## 3.89.0-beta.8: build a client account in twelve steps, with nothing switched on and an undo that puts things back
 
 This is a beta, for testers only. Tested on wellness clinics: a tester who had never seen the cockpit took a red light therapy clinic through all twelve steps to Sign-Off twice, an agency owner did it once clicking every step himself, and each build was then undone and the account read back as it started. The other industries use the same steps but have not been taken to Sign-Off on a real account yet.
@@ -246,6 +326,20 @@ This is a beta, a test build for members who want the next release early. It is
 
 **What to try:** switch on a workflow that has a known error and see it named; ask Claude to change one step of a live workflow; run Workflow Audit Pro on a sandbox client and try a fix, then Undo; pick a brand for a report and save it as a PDF; ask Claude to run the Secret Shopper on a prospect's site; add a client's staff from the new step before Intake.
 
+## 3.88.4: no test tool deletes a contact
+
+**verify_funnel no longer deletes anything; it lists its test contacts for you to remove.** It checks every test address before it sends anything and does not run if one is already in use. It says a test lead arrived only when a contact carrying the run's own test address appears after the submit, a private or local funnel address gets one sentence, "Not checked: the address is private, so no test lead was sent.", and a form endpoint that answers with a redirect is reported as not checked instead of as lost leads. The rest of verify_funnel's not-checked cases arrive in 3.89.0.
+
+**run_secret_shopper no longer removes its test lead; the result names it for you to remove.** Both tools list every contact that now carries the test address, with its name, phone, email and created date. If your form matches leads by phone, some may be existing customers, so check each before deleting.
+
+## 3.88.3: tools reach public web addresses only
+
+**Security fix: every tool that opens a web address you or Claude give it now reaches public addresses only.** That covers extract_brand, verify_design, check_page_theme, verify_funnel, Workflow Audit Pro, install_ghl_template, the build's email previews and the cockpit's handoff page checks. An address on your own computer or office network is refused with one sentence saying why.
+
+**verify_design and extract_brand open pages in a fresh browser** with no saved logins. verify_design renders a local page only from your project folder or your brand folder. To use another folder, set GHL_MCP_DESIGN_DIR to it.
+
+**The cockpit intake no longer reads a link.** Open the page, copy its text, and paste it into Paste a transcript.
+
 ## 3.88.2: a workflow waiting on a calendar is never switched on
 
 When a build asks to switch its workflows on, any workflow whose calendar could not be made yet now stays a draft, and the build lists it as a step for you with the reason. Before this fix such a workflow could be switched on without its calendar filter, so it would have reacted to bookings on every calendar in the account. Set up the calendar, then switch the workflow on.

package/README.md

@@ -899,7 +899,7 @@ Built by **[Elite DCs, LLC](https://elitedcs.com)** — a digital marketing and
 
 **Tech stack:** TypeScript, Node.js, esbuild, MCP SDK, Zod, GHL API v2, Firebase Auth
 
-**Version:** 3.89.0-beta.8
+**Version:** 3.89.0
 
 ---