@checkbox-site/cli 0.4.3 → 0.4.5

package/dist/checkbox.js

@@ -123,7 +123,37 @@ var init_args = __esm({
 // src/config.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { dirname, join, resolve } from "node:path";
+function readEnvValue(text, name) {
+  const re = new RegExp(`^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=[ \\t]*(?:"([^"\\r\\n]*)"|'([^'\\r\\n]*)'|([^\\s#]*))[ \\t]*(?:#.*)?$`, "gm");
+  let found;
+  for (let m = re.exec(text); m; m = re.exec(text)) found = (m[1] ?? m[2] ?? m[3] ?? "").trim();
+  return found || void 0;
+}
+function findProjectKey(cwd, env2 = {}) {
+  const home = resolve(env2.HOME || homedir());
+  let dir = resolve(cwd);
+  for (let depth = 0; depth < 8; depth++) {
+    for (const f of PROJECT_KEY_FILES) {
+      let text;
+      try {
+        text = readFileSync(join(dir, f), "utf8");
+      } catch {
+        continue;
+      }
+      const v = readEnvValue(text, "CHECKBOX_SECRET_KEY");
+      if (v && looksLikeApiKey(v)) {
+        const up = depth === 0 ? "" : "../".repeat(depth);
+        return { apiKey: v, file: `${up}${f}` };
+      }
+    }
+    if (existsSync(join(dir, ".git")) || dir === home) break;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return void 0;
+}
 function configDir(env2) {
   if (env2.CHECKBOX_CONFIG_DIR) return env2.CHECKBOX_CONFIG_DIR;
   const base = env2.XDG_CONFIG_HOME || join(env2.HOME || homedir(), ".config");
@@ -167,27 +197,35 @@ function createConfigStore(env2) {
     }
   };
 }
-function resolveCredentials(env2, stored, flags) {
+function resolveCredentials(env2, stored, flags, project) {
   const apiBase = (flags.apiBase || env2.CHECKBOX_API_BASE || stored.api_base || DEFAULT_API_BASE).replace(/\/+$/, "");
   if (flags.apiKey) return { apiKey: flags.apiKey, apiBase, source: "flag" };
   if (env2.CHECKBOX_API_KEY) return { apiKey: env2.CHECKBOX_API_KEY, apiBase, source: "env" };
   if (env2.CHECKBOX_SECRET_KEY) return { apiKey: env2.CHECKBOX_SECRET_KEY, apiBase, source: "env" };
+  if (project) return { apiKey: project.apiKey, apiBase, source: "project", file: project.file };
   if (stored.api_key) return { apiKey: stored.api_key, apiBase, source: "config" };
   return void 0;
 }
+function describeKeySource(c, env2 = {}) {
+  if (c.source === "flag") return "--api-key";
+  if (c.source === "env") return env2.CHECKBOX_API_KEY ? "CHECKBOX_API_KEY" : "CHECKBOX_SECRET_KEY in the environment";
+  if (c.source === "project") return `this project's ${c.file ?? ".env.local"}`;
+  return "your saved login (checkbox login)";
+}
 function maskKey(key) {
-  const m = /^([a-z]{2}_(?:live|test)_)/.exec(key);
+  const m = /^([a-z]{2,3}_(?:live|test)_)/.exec(key);
   const prefix = m?.[1] ?? key.slice(0, 3);
   return `${prefix}\u2026${key.slice(-4)}`;
 }
 function looksLikeApiKey(key) {
   return /^(?:ckr|ck|rk|sk)_(?:live|test)_[A-Za-z0-9_-]{8,}$/.test(key.trim());
 }
-var DEFAULT_API_BASE;
+var DEFAULT_API_BASE, PROJECT_KEY_FILES;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
     DEFAULT_API_BASE = "https://app.checkbox.site";
+    PROJECT_KEY_FILES = [".env.local", ".env", ".checkbox/keys.env"];
   }
 });
 
@@ -2444,7 +2482,7 @@ var init_operations = __esm({
       /**
        * Connect a billing platform.
        *
-       * Connects the site's billing platform with the one restricted key (a Stripe restricted key, a Recharge token, a Shopify Admin API token, a Chargebee read-only API key, a Recurly private API key or a Paddle API key with read permissions), so Checkbox reads the customer-portal and reminder settings. Stripe: One Stripe restricted key per site: Read permissions for the checks, and Write permissions that Checkbox uses only after you click Approve on a fix, or in test mode (the one exception: Webhook Endpoints, used once to add Checkbox's webhook endpoint when you connect the key) (checklist: https://checkbox.site/docs/guides/stripe-key). A full secret key (sk_test_ / sk_live_) is refused on every path with test_key_not_restricted: use a restricted key. API keys and AI agents may connect TEST-mode keys (rk_test_…) only; a live key (rk_live_ / sk_live_) is refused with live_key_requires_dashboard, because only a person signed in to the Checkbox dashboard can connect one. The credentials are validated by reading the settings once and stored encrypted. When the key's Stripe account looks like another site's (the site's prices or Payment Links are not in it, or it is already connected in another workspace), nothing is connected and the error billing_account_mismatch asks the human to confirm; retry with confirm_account_mismatch: true only after they said yes. The account owner is emailed about every key connected.
+       * Connects the site's billing platform with the one restricted key (a Stripe restricted key, a Recharge token, a Shopify Admin API token, a Chargebee read-only API key, a Recurly private API key or a Paddle API key with read permissions), so Checkbox reads the customer-portal and reminder settings. Stripe: One Stripe restricted key per site: Read permissions for the checks, and Write permissions that Checkbox uses only after you click Approve on a fix, or in test mode (the one exception: Webhook Endpoints, used once to add Checkbox's webhook endpoint when you connect the key) (checklist: https://checkbox.site/docs/guides/stripe-key). A full secret key (sk_test_ / sk_live_) is refused on every path with test_key_not_restricted: use a restricted key. API keys and AI agents may connect TEST-mode keys (rk_test_…) only; a live key (rk_live_ / sk_live_) is refused with live_key_requires_dashboard, because only a person signed in to the Checkbox dashboard can connect one. The credentials are validated by reading the settings once and stored encrypted. When the key's Stripe account looks like another site's (the site's prices or Payment Links are not in it, or it is already connected in another workspace), nothing is connected and the error billing_account_mismatch asks the human to confirm; retry with confirm_account_mismatch: true only after they said yes; the key is then held until a person confirms the account in the dashboard (an agent cannot confirm it). The account owner is emailed about every key connected.
        *
        * @param site Unique identifier of the site (site_…).
        * @see POST /v1/sites/{site}/integrations (operation `connectBillingPlatform`, scope `sites:write`)
@@ -2874,7 +2912,7 @@ var init_operations = __esm({
       /**
        * List due notices.
        *
-       * The legally required emails you owe subscribers (sites in "You send" mode, the default): kind, the subscriber (billing-platform ids), the legal window for the subscriber's state, the recommended send date, the copy-ready email and the BCC address. Default: everything not yet sent (upcoming, due, overdue), soonest first. Live keys list live subscribers' notices, test keys test-mode ones. Send each one on its send_date (inside its window), then call markNoticeSent (or BCC the notice's bcc address). Subscribe to the notice.due webhook to get each one on its send date.
+       * The legally required emails you owe subscribers (sites in "You send" mode, the default): kind, the subscriber (billing-platform ids), the legal window for the subscriber's state, the recommended send date, the email (ready to send once email.missing_fields is empty) and the BCC address. Default: everything not yet sent (upcoming, due, overdue), soonest first. Live keys list live subscribers' notices, test keys test-mode ones. Send each one on its send_date (inside its window), then call markNoticeSent (or BCC the notice's bcc address). Subscribe to the notice.due webhook to get each one on its send date.
        *
        * @see GET /v1/notices/due (operation `listDueNotices`, scope `notices:read`)
        */
@@ -2904,7 +2942,7 @@ var init_operations = __esm({
       /**
        * Retrieve a due notice.
        *
-       * One notice you owe a subscriber, with its window, recommended send date, copy-ready email, BCC address and send status.
+       * One notice you owe a subscriber, with its window, recommended send date, email (ready to send once email.missing_fields is empty), BCC address and send status.
        *
        * @param notice Unique identifier of the due notice (ntd_…).
        * @see GET /v1/notices/{notice} (operation `retrieveDueNotice`, scope `notices:read`)
@@ -2972,7 +3010,7 @@ var init_operations = __esm({
       /**
        * Check Stripe Checkout Session params.
        *
-       * Pass exactly the object your code gives stripe.checkout.sessions.create (plus merchant.merchant_name and merchant.cancel_url, and merchant.price/interval when line_items use a Price id). Checkbox models the Stripe-hosted page those params render and returns findings plus `correction`: a JSON Patch (RFC 6902) and the full corrected params (custom_text.submit with the renewal terms, consent_collection.terms_of_service = "required", custom_text.terms_of_service_acceptance as the consent label), verified by the engine. Stripe's own small grey styling keeps "clear and conspicuous" at needs_review on any Stripe-hosted page; also show the terms on your page before redirecting. Stateless and deterministic: nothing is stored, the same input on the same as_of date gives the same verdicts. Every verdict comes from the Checkbox rules engine over the legal catalog (federal ROSCA / EFTA plus the state automatic-renewal laws); the response carries rules_version, catalog_version and a disclaimer (not legal advice). Read `verdict`, then `next_action`: it tells you exactly what to change and to call the check again until verdict is pass.
+       * Body: `{ params, merchant }` (or `{ params, site }`). `params` is exactly the object your code gives stripe.checkout.sessions.create; `merchant` adds merchant_name, cancel_url, and price/interval when line_items use a Price id. Checkbox models the Stripe-hosted page those params render and returns findings plus `correction`: a JSON Patch (RFC 6902) and the full corrected params (custom_text.submit with the renewal terms, consent_collection.terms_of_service = "required", custom_text.terms_of_service_acceptance as the consent label), verified by the engine. Stripe's own small grey styling keeps "clear and conspicuous" at needs_review on any Stripe-hosted page; also show the terms on your page before redirecting. Stateless and deterministic: nothing is stored, the same input on the same as_of date gives the same verdicts. Every verdict comes from the Checkbox rules engine over the legal catalog (federal ROSCA / EFTA plus the state automatic-renewal laws); the response carries rules_version, catalog_version and a disclaimer (not legal advice). Read `verdict`, then `next_action`: it tells you exactly what to change and to call the check again until verdict is pass.
        *
        * @see POST /v1/checks/stripe_checkout_session (operation `checkStripeCheckoutSession`, scope `checks:read`)
        */
@@ -3257,7 +3295,7 @@ var init_operations = __esm({
       /**
        * Store a billing test-mode key.
        *
-       * Stores the site's Stripe TEST-mode restricted key (rk_test_…), after checking it with Stripe the way the dashboard's Connect Stripe does. An agent may call this itself once the owner approved the setup; every store is logged on the site's setup timeline and Billing connection line, and the human can revoke it in one click. Live keys are refused (test_key_not_test_mode: a human adds live keys in the dashboard); a key whose Stripe account looks like another site's is refused with billing_account_mismatch until the human confirms (confirm_account_mismatch: true); secret keys (sk_test_…) are refused (test_key_not_restricted). On a test-mode site without a Stripe connection the key also becomes the site's Stripe connection: one key for checks, fixes (only after the human approves each) and test runs. The key's checklist: Customers: Write, Products: Read, Prices: Read, Coupons: Read, Subscriptions: Write, Test clocks: Write, Customer portal: Write, Checkout Sessions: Write, Payment Links: Write, Webhook Endpoints: Write. Replaces an existing key. Next: createTestRun.
+       * Stores the site's Stripe TEST-mode restricted key (rk_test_…), after checking it with Stripe the way the dashboard's Connect Stripe does. An agent may call this itself once the owner approved the setup; every store is logged on the site's setup timeline and Billing connection line, and the human can revoke it in one click. Live keys are refused (test_key_not_test_mode: a human adds live keys in the dashboard); the owner must have ticked "Let your agent store a Stripe test-mode key" on the approval page of the agent's sign-in or connection (else test_key_declined); a key whose Stripe account looks like another site's is refused with billing_account_mismatch (with confirm_account_mismatch: true the key is connected on hold until a person confirms the account in the dashboard; only a person can confirm it); secret keys (sk_test_…) are refused (test_key_not_restricted). On a test-mode site without a Stripe connection the key also becomes the site's Stripe connection: one key for checks, fixes (only after the human approves each) and test runs. The key's checklist: Customers: Write, Products: Read, Prices: Read, Coupons: Read, Subscriptions: Write, Test clocks: Write, Customer portal: Write, Checkout Sessions: Write, Payment Links: Write, Webhook Endpoints: Write. Replaces an existing key. Next: createTestRun.
        *
        * @param site Unique identifier of the site (site_…).
        * @see POST /v1/sites/{site}/test_credentials (operation `createTestCredential`, scope `test_runs:write`)
@@ -3365,7 +3403,7 @@ var init_operations = __esm({
       /**
        * Start a lifecycle test run.
        *
-       * Starts a synthetic test subscription in TEST mode and returns it queued. Stripe runs mirror your checkout into a test-mode Checkout Session, subscribe a test customer (card 4242) whose email is a Checkbox inbox, wait for your acknowledgment, advance a test clock through every legal notice window before trial end and renewal, cancel online in the customer portal and wait for the confirmation; then delete the test clock. Usually takes 2-4 minutes (longer when your own emails are slow to arrive): poll retrieveTestRun (next_action says when) or listen for test_run.completed. Each step reports observations, check results and agent-readable fixes; apply them and run again to verify.
+       * Starts a synthetic test subscription in TEST mode and returns it queued. Stripe runs mirror your checkout into a test-mode Checkout Session, subscribe a test customer (card 4242) whose email is a Checkbox inbox, wait for your acknowledgment, advance a test clock through every legal notice window before trial end and renewal, cancel online in the customer portal and wait for the confirmation; then delete the test clock. Usually takes 1-2 minutes; a real_checkout run a few minutes (longer when your own emails are slow to arrive): poll retrieveTestRun (next_action says when) or listen for test_run.completed. Each step reports observations, check results and agent-readable fixes; apply them and run again to verify.
        *
        * @param site Unique identifier of the site (site_…).
        * @see POST /v1/sites/{site}/test_runs (operation `createTestRun`, scope `test_runs:write`, live mode needs an activated account)
@@ -3579,7 +3617,7 @@ var SDK_VERSION;
 var init_version = __esm({
   "../sdk-node/src/version.ts"() {
     "use strict";
-    SDK_VERSION = "0.2.1";
+    SDK_VERSION = "0.2.3";
   }
 });
 
@@ -3768,9 +3806,9 @@ var init_client = __esm({
       const p = globalThis.process;
       return p?.env?.[name] || void 0;
     };
-    sleep = (ms, signal) => new Promise((resolve9, reject) => {
+    sleep = (ms, signal) => new Promise((resolve10, reject) => {
       if (signal?.aborted) return reject(signal.reason);
-      const t = setTimeout(resolve9, ms);
+      const t = setTimeout(resolve10, ms);
       signal?.addEventListener("abort", () => (clearTimeout(t), reject(signal.reason)), { once: true });
     });
     Checkbox = class {
@@ -4164,7 +4202,7 @@ var init_types2 = __esm({
 
 // src/run.ts
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
-import { dirname, join as join2 } from "node:path";
+import { dirname as dirname2, join as join2 } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 function registerCommands(registry) {
   REGISTRY = registry;
@@ -4208,11 +4246,11 @@ async function listCommands(dir = COMMANDS_DIR) {
 }
 function readAll(stream) {
   if (!stream || stream.isTTY) return Promise.resolve("");
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     let data = "";
     stream.setEncoding?.("utf8");
     stream.on("data", (c) => data += c.toString());
-    stream.on("end", () => resolve9(data));
+    stream.on("end", () => resolve10(data));
     stream.on("error", reject);
   });
 }
@@ -4230,7 +4268,8 @@ async function helpText(dir) {
     "",
     "Global flags:",
     "  --json            One JSON document on stdout (for agents and scripts)",
-    "  --api-key <key>   Use this key (default: $CHECKBOX_API_KEY, then the key saved by `checkbox login`)",
+    "  --api-key <key>   Use this key (default: $CHECKBOX_API_KEY, then CHECKBOX_SECRET_KEY from the environment or",
+    "                    this project's .env.local / .env, then the key saved by `checkbox login`)",
     "  --api-base <url>  API base URL (default: $CHECKBOX_API_BASE or https://app.checkbox.site)",
     "  -q, --quiet       Only print errors",
     "  --no-color        Plain output",
@@ -4293,7 +4332,18 @@ async function run(argv, io) {
   }
   const flags = { json: g.json, quiet: g.quiet, color, help: false, ...g.apiKey ? { apiKey: g.apiKey } : {}, ...g.apiBase ? { apiBase: g.apiBase } : {} };
   const config = createConfigStore(io.env);
-  const credentials = () => resolveCredentials(io.env, config.load(), flags);
+  let projectKey = null;
+  const project = () => projectKey === null ? projectKey = findProjectKey(io.cwd, io.env) : projectKey;
+  const credentials = () => resolveCredentials(io.env, config.load(), flags, project());
+  let saidWhichKey = false;
+  const sayWhichKey = (c) => {
+    if (saidWhichKey || !c) return;
+    saidWhichKey = true;
+    const stored = config.load().api_key;
+    if (c.source !== "config" && stored && stored !== c.apiKey) {
+      out.info(out.c.dim(`Using the key from ${describeKeySource(c, io.env)} (${maskKey(c.apiKey)}), not your saved login (${maskKey(stored)}).`));
+    }
+  };
   const ctx = {
     argv: rest,
     flags,
@@ -4307,6 +4357,7 @@ async function run(argv, io) {
       const c = credentials();
       const apiKey = o.apiKey ?? c?.apiKey;
       if (!apiKey) throw new NotLoggedInError();
+      if (!o.apiKey) sayWhichKey(c);
       return createApiClient({ apiKey, apiBase: o.apiBase ?? c?.apiBase ?? resolveCredentials(io.env, {}, flags)?.apiBase ?? "https://app.checkbox.site", userAgent: `checkbox-cli/${CLI_VERSION}`, ...io.fetch ? { fetch: io.fetch } : {} });
     },
     readStdin: () => readAll(io.stdin),
@@ -4315,10 +4366,21 @@ async function run(argv, io) {
   try {
     return await cmd.run(ctx);
   } catch (err) {
-    return reportError(out, err);
+    return reportError(out, err, { credentials: credentials(), project: project() ?? void 0, env: io.env });
+  }
+}
+function authNextAction(ctxInfo) {
+  const used = ctxInfo?.credentials;
+  const proj = ctxInfo?.project;
+  if (proj && used && proj.apiKey !== used.apiKey) {
+    return {
+      type: "use_project_key",
+      message: `The key from ${describeKeySource(used, ctxInfo?.env)} (${maskKey(used.apiKey)}) was rejected, but this project's ${proj.file} has another key (${maskKey(proj.apiKey)}). Unset ${used.source === "env" ? "that environment variable" : "the --api-key flag"} so the CLI uses it, or check that the right key is in ${proj.file}.`
+    };
   }
+  return void 0;
 }
-function reportError(out, err) {
+function reportError(out, err, auth) {
   if (err instanceof UsageError) {
     out.error({ message: err.message, code: "usage_error", type: "usage_error" });
     return EXIT.usage;
@@ -4341,7 +4403,10 @@ function reportError(out, err) {
       ...err.requestId ? { request_id: err.requestId } : {},
       ...err.docUrl ? { doc_url: err.docUrl } : {},
       status: apiStatus(err),
-      ...apiStatus(err) === 0 ? { next_action: { type: "retry", message: "Check your network (and --api-base / CHECKBOX_API_BASE), or add --offline to run a check locally." } } : err.nextAction ? { next_action: err.nextAction } : isAuthError(err) ? { next_action: { type: "login", message: "The API key was rejected. Run `checkbox login` with a valid key, or set CHECKBOX_API_KEY." } } : {}
+      ...apiStatus(err) === 0 ? { next_action: { type: "retry", message: "Check your network (and --api-base / CHECKBOX_API_BASE), or add --offline to run a check locally." } } : isAuthError(err) && authNextAction(auth) ? (
+        // The server's 401 next step sends agents to device approval; a key this CLI can see locally comes first.
+        { next_action: authNextAction(auth), ...auth?.credentials ? { key_source: auth.credentials.source, ...auth.credentials.file ? { key_file: auth.credentials.file } : {} } : {} }
+      ) : err.nextAction ? { next_action: err.nextAction } : isAuthError(err) ? { next_action: { type: "login", message: "The API key was rejected. Run `checkbox login` with a valid key, or set CHECKBOX_API_KEY." } } : {}
     });
     return isAuthError(err) ? EXIT.auth : apiStatus(err) === 400 ? EXIT.usage : EXIT.error;
   }
@@ -4357,7 +4422,7 @@ var init_run = __esm({
     init_http();
     init_output();
     init_types2();
-    HERE = dirname(fileURLToPath(import.meta.url));
+    HERE = dirname2(fileURLToPath(import.meta.url));
     COMMANDS_DIR = join2(HERE, "commands");
     CLI_VERSION = (() => {
       try {
@@ -4368,7 +4433,7 @@ var init_run = __esm({
     })();
     NotLoggedInError = class extends Error {
       constructor() {
-        super("Not logged in: no API key found (flag --api-key, env CHECKBOX_API_KEY, or `checkbox login`).");
+        super("Not logged in: no API key found (flag --api-key, env CHECKBOX_API_KEY, CHECKBOX_SECRET_KEY in .env.local, or `checkbox login`).");
         this.name = "NotLoggedInError";
       }
     };
@@ -4707,7 +4772,8 @@ var init_secrets = __esm({
       { name: "stripe_webhook_secret", re: /\bwhsec_[A-Za-z0-9+/=_-]{4,}/g, replace: keepPrefix(() => 6) },
       { name: "stripe_publishable_live", re: /\bpk_live_[A-Za-z0-9_-]{4,}/g, replace: keepPrefix(() => 8) },
       // Checkbox API keys (ck_test_ / ck_live_) and scoped tokens.
-      { name: "checkbox_key", re: /\bck_(?:live|test)_[A-Za-z0-9_-]{4,}/g, replace: keepPrefix((m) => m.indexOf("_", 3) + 1) },
+      // ckr_ (restricted) keys too: round 29 found they were left whole.
+      { name: "checkbox_key", re: /\bckr?_(?:live|test)_[A-Za-z0-9_-]{4,}/g, replace: keepPrefix((m) => m.indexOf("_", 4) + 1) },
       // AWS access key ids (and the secret that usually follows them on the same line).
       { name: "aws_access_key", re: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g, replace: () => "AKIA[redacted]" },
       { name: "aws_secret", re: /(aws_secret_access_key|AWS_SECRET_ACCESS_KEY|secretAccessKey)(\s*[:=]\s*["']?)[A-Za-z0-9/+=]{30,}/g, replace: (m) => m.replace(/[A-Za-z0-9/+=]{30,}$/, "[redacted]") },
@@ -5126,7 +5192,7 @@ var init_california = __esm({
         sourceUrl: URL_ARTICLE,
         effectiveDate: ORIGINAL,
         lastVerified: LAST_VERIFIED,
-        summary: 'Clear and conspicuous offer terms next to the consent request; affirmative (and since July 2025, express affirmative) consent; retainable acknowledgment; online "click to cancel" for online sign-ups; a notice 3-21 days before a free trial or promotional price lasting more than 31 days ends, and 15-45 days before a term of one year or longer renews; 7-30 day fee-change notice; annual reminder; same-medium cancellation; limits on save offers; consent records kept 3 years, or 1 year after termination if longer. Remedies: civil (UCL) remedies only (\xA7 17604); unconsented goods are gifts (\xA7 17603).',
+        summary: 'Clear and conspicuous offer terms next to the consent request; affirmative (and since July 2025, express affirmative) consent; retainable acknowledgment; online "click to cancel" for online sign-ups; a notice 3-21 days before a free trial or promotional price lasting more than 31 days ends, and 15-45 days before a term of one year or longer renews; 7-30 day fee-change notice; annual reminder; same-medium cancellation; limits on save offers; consent records kept 3 years, or 1 year after termination if longer. No criminal penalties; civil remedies apply (\xA7 17604), in practice through the UCL, FAL and CLRA; unconsented goods are gifts (\xA7 17603).',
         status: "in_force",
         confidence: "high",
         verification: "primary",
@@ -5250,14 +5316,14 @@ var init_federal = __esm({
         effectiveDate: EFTA_EFFECTIVE,
         stage: "reminder",
         title: "Advance notice when a recurring debit will change in amount",
-        summary: "When a preauthorized debit from a consumer's account will vary in amount from the previous transfer or from the authorized amount (e.g. a subscription price increase billed to a debit card or by ACH), the payee must send written notice of the amount and date of the transfer at least 10 days before the scheduled transfer date.",
+        summary: "When a preauthorized debit from a consumer's account will vary in amount from the previous transfer or from the authorized amount (e.g. a subscription price increase billed to a debit card or by ACH), the payee must send written notice of the amount and date of the transfer at least 10 days before the scheduled transfer date (\xA7 1005.10(d)(1)). The payee must tell the consumer of the right to notice of every varying transfer, but may let the consumer choose notice only when a transfer falls outside a specified range of amounts, or differs from the most recent transfer by more than an agreed amount (\xA7 1005.10(d)(2)).",
         appliesWhen: { paymentMethods: ["debit", "ach"] },
         checkIds: ["reminder.price_change"],
         severity: "medium",
         noticeWindow: noticeWindowAtLeast(10, "charge"),
         notes: notes(
           windowNote(noticeWindowAtLeast(10, "charge"), "the changed debit"),
-          "Applies only to debits from consumer asset accounts (debit, prepaid, ACH), not credit cards. The payee may instead let the consumer elect to be notified only when the amount falls outside a specified range or differs from the most recent transfer by more than an agreed amount."
+          "Applies only to debits from consumer asset accounts (debit, prepaid, ACH), not credit cards. A consumer who chose range-only notice under \xA7 1005.10(d)(2) gets no notice for a change inside that range; Checkbox cannot see that choice, so the checks expect the notice for every price change."
         )
       })
     ];
@@ -5406,7 +5472,7 @@ var init_exposure = __esm({
         fees: NO_PRIVATE
       },
       "US-FED.1005.": {
-        privateSuit: "Yes: the Electronic Fund Transfer Act lets consumers sue (15 U.S.C. \xA7 1693m). Applies when the subscription is paid by debit card or ACH.",
+        privateSuit: "Yes, in the law itself: the Electronic Fund Transfer Act lets consumers sue (15 U.S.C. \xA7 1693m). Applies when the subscription is paid by debit card or ACH.",
         damages: "Actual damages, plus statutory damages of $100 to $1,000 in an individual action, or in a class action up to the lesser of $500,000 or 1% of the defendant's net worth (15 U.S.C. \xA7 1693m(a)(1), (2)).",
         penalties: "None in private suits: \xA7 1693m provides damages, costs and fees, not civil penalties. The CFPB enforces the Act (15 U.S.C. \xA7 1693o(a)(5)) and can seek civil money penalties for a violation of federal consumer financial law, which includes the Act (12 U.S.C. \xA7\xA7 5481(12)(C), 5565(a)(2)(H)): up to $5,000 a day, $25,000 a day if reckless and $1,000,000 a day if knowing, before inflation adjustment (12 U.S.C. \xA7 5565(c)(2)).",
         fees: "Costs and reasonable attorney's fees for a successful action (15 U.S.C. \xA7 1693m(a)(3))."
@@ -5418,7 +5484,7 @@ var init_exposure = __esm({
         fees: NO_PRIVATE
       },
       "US-CA": {
-        privateSuit: "Through general consumer law: the ARL has no private right of its own (Mayron v. Google, 2020); plaintiffs sue under the UCL, FAL and CLRA and must show economic injury. Before suing for damages under the CLRA, the consumer must send a written notice and demand by certified or registered mail at least 30 days ahead, and no damages action lies if an appropriate correction is given or agreed within 30 days (Cal. Civ. Code \xA7 1782(a), (b)); a CLRA claim for an injunction needs no prior notice (\xA7 1782(d)).",
+        privateSuit: "Yes, through general consumer law: the ARL has no private right of its own (Mayron v. Google, 2020); plaintiffs sue under the UCL, FAL and CLRA and must show economic injury. Before suing for damages under the CLRA, the consumer must send a written notice and demand by certified or registered mail at least 30 days ahead, and no damages action lies if an appropriate correction is given or agreed within 30 days (Cal. Civ. Code \xA7 1782(a), (b)); a CLRA claim for an injunction needs no prior notice (\xA7 1782(d)).",
         damages: "Goods or services provided without the required consent are an unconditional gift (Cal. Bus. & Prof. Code \xA7 17603); all civil remedies are available (\xA7 17604, with a good-faith-compliance safe harbor). Under the CLRA: actual damages (in a class action, at least $1,000 in total), an injunction, restitution of property, punitive damages and other relief the court deems proper (Cal. Civ. Code \xA7 1780(a)). Under the UCL and the FAL: an injunction and orders restoring money or property acquired by the unlawful practice (restitution) (Cal. Bus. & Prof. Code \xA7\xA7 17203, 17535); a private plaintiff must have suffered injury in fact and lost money or property (\xA7 17535, for the FAL). Neither section provides damages.",
         penalties: "In public actions only (the Attorney General, district attorneys and some county counsel and city attorneys): up to $2,500 per violation under the UCL (Cal. Bus. & Prof. Code \xA7 17206(a)) and up to $2,500 per violation under the FAL (\xA7 17536(a)).",
         fees: "Under the CLRA: the court shall award costs and attorney's fees to a prevailing plaintiff; a prevailing defendant may get reasonable fees only if the suit was not brought in good faith (Cal. Civ. Code \xA7 1780(e)). The UCL and FAL sections provide no attorney's fees (Cal. Bus. & Prof. Code \xA7\xA7 17203, 17535). Plaintiffs sometimes seek fees under the private attorney general statute, which lets a court award fees to a successful party in an action that enforced an important right affecting the public interest, when its conditions are met (Cal. Code Civ. Proc. \xA7 1021.5).",
@@ -5551,7 +5617,7 @@ var init_exposure = __esm({
         fees: OPEN
       },
       "US-ND": {
-        privateSuit: "Yes: a person aggrieved may sue to enjoin the violation or for restitution, or both (N.D. Cent. Code \xA7 51-37-06).",
+        privateSuit: "Yes, in the law itself: a person aggrieved may sue to enjoin the violation or for restitution, or both (N.D. Cent. Code \xA7 51-37-06).",
         damages: "Restitution (N.D. Cent. Code \xA7 51-37-06); goods or services provided under a non-compliant renewal, or after an attempt to cancel, are an unconditional gift (\xA7 51-37-04).",
         penalties: "Each act is a separate violation of N.D. Cent. Code ch. 51-15, enforced by the attorney general with that chapter's remedies (\xA7 51-37-05). Unsettled: the figure is not yet confirmed from the statute text.",
         fees: "Costs, expenses and reasonable attorney's fees (N.D. Cent. Code \xA7 51-37-06)."
@@ -9824,7 +9890,7 @@ var init_catalog = __esm({
     init_states();
     init_terms();
     init_types3();
-    CATALOG_VERSION = "2026.11.09.2";
+    CATALOG_VERSION = "2026.11.09.3";
     CATALOG = [
       ...FEDERAL_REQUIREMENTS,
       ...CALIFORNIA_REQUIREMENTS,
@@ -10645,7 +10711,7 @@ function analyzePolicyText(input) {
 function clausesOf(clauses, code2) {
   return clauses.filter((c) => c.code === code2);
 }
-var POLICY_KINDS, POLICY_FRAGMENT, POLICY_FETCHER_USER_AGENT, SUBSCRIPTION_WORDS, NO_CANCEL, OFFLINE_ONLY, CONTACT_TO_CANCEL, ACCOUNT_NOT_PLACE, CANCEL_ONLINE_STRONG, NOTICE_PERIOD, ALL_SALES_FINAL, CANCEL_ONLINE, AUTO_RENEWAL, HOW_TO_CANCEL, NO_REFUNDS, REFUND_WINDOW, GUARANTEE, REFUND_EXCEPTION;
+var POLICY_KINDS, POLICY_FRAGMENT, POLICY_FETCHER_USER_AGENT, SUBSCRIPTION_WORDS, NO_CANCEL, OFFLINE_ONLY, STOP_SUBSCRIPTION, CONTACT_TO_CANCEL, ACCOUNT_NOT_PLACE, CANCEL_ONLINE_STRONG, NOTICE_PERIOD, ALL_SALES_FINAL, CANCEL_ONLINE, AUTO_RENEWAL, HOW_TO_CANCEL, NO_REFUNDS, REFUND_WINDOW, GUARANTEE, REFUND_EXCEPTION;
 var init_policy_docs = __esm({
   "../rules/src/policy-docs.ts"() {
     "use strict";
@@ -10666,9 +10732,12 @@ var init_policy_docs = __esm({
       /\bcancell?(?:ations?|ing)?\b[^.]{0,80}\b(?:only|solely|exclusively)\b[^.]{0,60}\b(?:phone|telephone|mail|post|in writing|in person|fax)\b/i,
       /\bcancell?ation requests?\b[^.]{0,60}\b(?:by|via) (?:certified |registered )?(?:mail|post|letter|fax|phone|telephone)\b/i
     ];
+    STOP_SUBSCRIPTION = "(?:stop|end|terminate|discontinue|turn off)\\s+(?:your |the |a |my |this )?(?:paid |monthly |annual |yearly )?(?:subscription|membership|plan|auto-?renewal|automatic renewal|recurring (?:billing|payments?|charges?))";
     CONTACT_TO_CANCEL = [
       /\bto cancel\b[^.]{0,80}\b(?:contact|email|e-mail|reach out to|message)\b/i,
       /\b(?:contact|email|e-mail)\b[^.]{0,60}\bto cancel\b/i,
+      new RegExp(`\\bto ${STOP_SUBSCRIPTION}\\b[^.]{0,80}(?:\\b(?:contact|email|e-mail|reach out to|message|write to)\\b|\\[redacted\\])`, "i"),
+      new RegExp(`(?:\\b(?:contact|email|e-mail|write to)\\b|\\[redacted\\])[^.]{0,60}\\bto ${STOP_SUBSCRIPTION}\\b`, "i"),
       // Round 2 pilot: "You may cancel by contacting support" / "cancellations are handled by emailing us".
       /\bcancel\w*\b[^.]{0,60}\b(?:by|through|via)\s+(?:contacting|emailing|e-mailing|messaging|writing to|reaching out to|calling|phoning|sending (?:us )?an? (?:email|e-mail|message))\b/i,
       // Normal round 2 (nextjs): the scanner redacts e-mail addresses before the rules see the text, so
@@ -11309,7 +11378,7 @@ function noticePlanOptions(ctx, priceChange = false) {
   const newPrices = (ctx.events ?? []).filter((e) => e.type === "price_change_scheduled").map((e) => e.amount).filter((n) => typeof n === "number" && n > 0).map((n) => n / 10 ** currencyDigitsOf(currency));
   if (priceChange && newPrices.length) return { plans: plans.map((p) => ({ ...p, amount: -1 })), extraAmounts: newPrices };
   if (!plans.length) return { plans: [], extraAmounts: [] };
-  return { plans, extraAmounts: newPrices };
+  return { plans, extraAmounts: newPrices, ...ctx.events?.length ? { events: ctx.events } : {} };
 }
 function declaredPlansFrom(plans) {
   const out = [];
@@ -11551,11 +11620,11 @@ function siteOffers(input) {
   };
   for (const d of declared) {
     const price3 = stripe.find((s2) => sameTerms(s2, d));
-    const trial = d.trialDays && d.trialDays > 0 ? d.trialDays : price3?.trialDays && price3.trialDays > 0 ? price3.trialDays : soldTrial({ ...d, ...price3 ? { priceId: price3.id } : {} });
+    const trial = d.trialDays && d.trialDays > 0 ? d.trialDays : soldTrial({ ...d, ...price3 ? { priceId: price3.id } : {} }) || (price3?.trialDays && price3.trialDays > 0 ? price3.trialDays : 0);
     push(toOffer(d, "declared", { trialDays: trial, ...price3 ? { priceId: price3.id } : {} }));
   }
   const chosen = input.facts?.planPriceId ? stripe.find((p) => p.id === input.facts.planPriceId) : void 0;
-  if (chosen) push(toOffer(chosen, "chosen", chosen.trialDays && chosen.trialDays > 0 ? {} : { trialDays: soldTrial(chosen) }));
+  if (chosen) push(toOffer(chosen, "chosen", soldTrial(chosen) > 0 ? { trialDays: soldTrial(chosen) } : {}));
   if (!declared.length) {
     for (const s2 of sold) {
       const price3 = stripe.find((p) => sameTerms(p, s2));
@@ -11570,7 +11639,7 @@ function siteOffers(input) {
     const anchors = stripe.filter((s2) => out.some((o) => o.priceId === s2.id));
     for (const s2 of stripe) {
       if (out.some((o) => o.priceId === s2.id) || !anchors.some((a) => sameProductName(a.name, s2.name))) continue;
-      push(toOffer(s2, "stripe", s2.trialDays && s2.trialDays > 0 ? {} : { trialDays: soldTrial(s2) }));
+      push(toOffer(s2, "stripe", soldTrial(s2) > 0 ? { trialDays: soldTrial(s2) } : {}));
     }
   }
   const facts = input.facts;
@@ -12937,14 +13006,14 @@ var init_visible_html = __esm({
 
 // ../rules/src/checks/context.ts
 function heuristicReader() {
-  const cache = /* @__PURE__ */ new Map();
+  const cache2 = /* @__PURE__ */ new Map();
   return {
     mode: "heuristic",
     async analyze(text) {
-      let a = cache.get(text);
+      let a = cache2.get(text);
       if (!a) {
         a = analyzeTerms(text);
-        cache.set(text, a);
+        cache2.set(text, a);
       }
       return a;
     }
@@ -13103,6 +13172,14 @@ function offerSlice(c, g) {
     links: keep(c.links)
   };
 }
+function offerCardName(text, cta, index) {
+  const t = normalizeText(text).replace(/\s+/g, " ").trim();
+  const money3 = /(?:[$€£]\s?\d[\d,]*(?:\.\d{1,2})?|\d[\d,]*(?:\.\d{1,2})?\s?(?:USD|EUR|GBP))(?:\s*(?:\/|per|a|an|every)\s*(?:month|mo|year|yr|week|day|quarter)\b)?/i.exec(t);
+  const before = (money3 ? t.slice(0, money3.index) : "").replace(new RegExp(`^${cta.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\s*`, "i"), "").replace(/[\s:·|–—-]+$/, "").trim();
+  const heading = before && before.length <= 40 ? before : before ? before.split(" ").slice(0, 4).join(" ") : "";
+  const price3 = money3?.[0].trim();
+  return heading && price3 ? `${heading}, ${price3}` : heading || price3 || `card ${index + 1}`;
+}
 function buildSignupView(capture, offer) {
   const c = offer === void 0 ? capture : offerSlice(capture, offer);
   const device = c.device === "mobile" ? "mobile" : "desktop";
@@ -13127,9 +13204,11 @@ function buildSignupView(capture, offer) {
     [...c.disclosures ?? [], ...checkboxes, ...allLinks].filter(isVisible).map((e) => e.style?.fontSizePx ?? NaN)
   );
   const offerCta = offer === void 0 ? void 0 : capture.offers?.[offer]?.cta ?? primaryCta2?.text;
+  const sameCta = offer !== void 0 && offerCta ? (capture.offers ?? []).filter((o) => normalizeText(o.cta) === normalizeText(offerCta)).length > 1 : false;
+  const card = sameCta ? offerCardName(capture.offers[offer].text, offerCta, offer) : void 0;
   return {
     capture,
-    label: offerCta ? `${captureLabel(c)} \u2014 plan button \u201C${normalizeText(offerCta).slice(0, 60)}\u201D` : captureLabel(c),
+    label: offerCta ? `${captureLabel(c)} \u2014 plan button \u201C${normalizeText(offerCta).slice(0, 60)}\u201D${card ? ` in the card \u201C${card}\u201D` : ""}` : captureLabel(c),
     ...offer !== void 0 ? { offer: { index: offer, cta: normalizeText(offerCta ?? "").slice(0, 120) } } : {},
     device,
     viewport,
@@ -13783,7 +13862,7 @@ function remediationFor(checkId, platform) {
   if (guide?.snippet) rem.snippet = { ...guide.snippet };
   return rem;
 }
-var DISCLOSURE_COPY_TEMPLATE, CONSENT_COPY_TEMPLATE, ACKNOWLEDGMENT_COPY_TEMPLATE, TRIAL_ACKNOWLEDGMENT_COPY_TEMPLATE, TRIAL_REMINDER_COPY_TEMPLATE, RENEWAL_REMINDER_COPY_TEMPLATE, PRICE_CHANGE_COPY_TEMPLATE, ANNUAL_TERMS_COPY_TEMPLATE, CHARGE_NOTICE_COPY_TEMPLATE, CANCELLATION_CONFIRMATION_COPY_TEMPLATE, TERMS_CANCELLATION_COPY_TEMPLATE, TERMS_REFUND_COPY_TEMPLATE, TERMS_RENEWAL_COPY_TEMPLATE, PLACEHOLDER_STEP, CUSTOM_DISCLOSURE_HTML, CUSTOM_CONSENT_HTML, STRIPE_CHECKOUT_TS, STRIPE_ANNUAL_REMINDER_TS, STRIPE_CHARGE_NOTICE_TS, STRIPE_PORTAL_TS, STRIPE_ACK_WEBHOOK_TS, STRIPE_CANCEL_CONFIRMATION_TS, SHOPIFY_LIQUID, SHOPIFY_CHECKOUT_EXTENSION_TSX, CUSTOM_ACCOUNT_CANCEL_HTML, CUSTOM_ACK_EMAIL_HTML, VERIFY, VERIFY_TERMS, VERIFY_EMAIL, CB_CHECKOUT, CB_PORTAL, CB_EMAILS, CHARGEBEE_DISCLOSURE, CHARGEBEE_CONSENT, CHARGEBEE_ACK, CHARGEBEE_PORTAL, CHARGEBEE_TRIAL_REMINDER, CHARGEBEE_RENEWAL_REMINDER, CHARGEBEE_ANNUAL_TERMS, CHARGEBEE_CHARGE_NOTICE, RC_ACCOUNT_PAGES, RC_EMAILS, RECURLY_DISCLOSURE, RECURLY_CONSENT, RECURLY_ACK, RECURLY_PORTAL, RECURLY_TRIAL_REMINDER, RECURLY_RENEWAL_REMINDER, RECURLY_ANNUAL_TERMS, RECURLY_CHARGE_NOTICE, PD_RETAIN, PADDLE_DISCLOSURE, PADDLE_CONSENT, PADDLE_ACK, PADDLE_PORTAL, PADDLE_TRIAL_REMINDER, PADDLE_RENEWAL_REMINDER, PADDLE_ANNUAL_TERMS, PADDLE_CHARGE_NOTICE, STRIPE_DISCLOSURE, SHOPIFY_DISCLOSURE, RECHARGE_DISCLOSURE, CUSTOM_DISCLOSURE, DISCLOSURE_PLATFORMS, STRIPE_ACK, SHOPIFY_ACK, RECHARGE_ACK, CUSTOM_ACK, ACK_PLATFORMS, STRIPE_PORTAL, SHOPIFY_PORTAL, RECHARGE_PORTAL, CUSTOM_PORTAL, PORTAL_PLATFORMS, STRIPE_TRIAL_REMINDER, STRIPE_RENEWAL_REMINDER, STRIPE_ANNUAL_TERMS, STRIPE_CHARGE_NOTICE, SHOPIFY_ANNUAL_TERMS, SHOPIFY_CHARGE_NOTICE, RECHARGE_ANNUAL_TERMS, RECHARGE_CHARGE_NOTICE, CUSTOM_ANNUAL_TERMS, CUSTOM_CHARGE_NOTICE, SHOPIFY_REMINDER, RECHARGE_REMINDER, CUSTOM_REMINDER, SPECS, PLATFORM_LABELS, OFFER_PERMISSION_FIX, OFFER_QUESTION_STOP_FIX, OFFER_PERMISSION_SNIPPET, CANCEL_HANDLER_REMEDIATION, OFFER_PERMISSION_REMEDIATION;
+var DISCLOSURE_COPY_TEMPLATE, CONSENT_COPY_TEMPLATE, ACKNOWLEDGMENT_COPY_TEMPLATE, TRIAL_ACKNOWLEDGMENT_COPY_TEMPLATE, TRIAL_REMINDER_COPY_TEMPLATE, RENEWAL_REMINDER_COPY_TEMPLATE, PRICE_CHANGE_COPY_TEMPLATE, ANNUAL_TERMS_COPY_TEMPLATE, CHARGE_NOTICE_COPY_TEMPLATE, CANCELLATION_CONFIRMATION_COPY_TEMPLATE, TERMS_CANCELLATION_COPY_TEMPLATE, TERMS_REFUND_COPY_TEMPLATE, TERMS_RENEWAL_COPY_TEMPLATE, PLACEHOLDER_STEP, CUSTOM_DISCLOSURE_HTML, CUSTOM_CONSENT_HTML, STRIPE_CHECKOUT_TS, STRIPE_ANNUAL_REMINDER_TS, STRIPE_CHARGE_NOTICE_TS, STRIPE_PORTAL_TS, STRIPE_ACK_WEBHOOK_TS, STRIPE_CANCEL_CONFIRMATION_TS, SHOPIFY_LIQUID, SHOPIFY_CHECKOUT_EXTENSION_TSX, CUSTOM_ACCOUNT_CANCEL_HTML, CUSTOM_ACK_EMAIL_HTML, VERIFY, VERIFY_TERMS, VERIFY_EMAIL, CB_CHECKOUT, CB_PORTAL, CB_EMAILS, CHARGEBEE_DISCLOSURE, CHARGEBEE_CONSENT, CHARGEBEE_ACK, CHARGEBEE_PORTAL, CHARGEBEE_TRIAL_REMINDER, CHARGEBEE_RENEWAL_REMINDER, CHARGEBEE_ANNUAL_TERMS, CHARGEBEE_CHARGE_NOTICE, RC_ACCOUNT_PAGES, RC_EMAILS, RECURLY_DISCLOSURE, RECURLY_CONSENT, RECURLY_ACK, RECURLY_PORTAL, RECURLY_TRIAL_REMINDER, RECURLY_RENEWAL_REMINDER, RECURLY_ANNUAL_TERMS, RECURLY_CHARGE_NOTICE, PD_RETAIN, PADDLE_DISCLOSURE, PADDLE_CONSENT_HTML, PADDLE_CONSENT, PADDLE_ACK, PADDLE_PORTAL, PADDLE_TRIAL_REMINDER, PADDLE_RENEWAL_REMINDER, PADDLE_ANNUAL_TERMS, PADDLE_CHARGE_NOTICE, STRIPE_DISCLOSURE, SHOPIFY_DISCLOSURE, RECHARGE_DISCLOSURE, CUSTOM_DISCLOSURE, DISCLOSURE_PLATFORMS, STRIPE_ACK, SHOPIFY_ACK, RECHARGE_ACK, CUSTOM_ACK, ACK_PLATFORMS, STRIPE_PORTAL, SHOPIFY_PORTAL, RECHARGE_PORTAL, CUSTOM_PORTAL, PORTAL_PLATFORMS, STRIPE_TRIAL_REMINDER, STRIPE_RENEWAL_REMINDER, STRIPE_ANNUAL_TERMS, STRIPE_CHARGE_NOTICE, SHOPIFY_ANNUAL_TERMS, SHOPIFY_CHARGE_NOTICE, RECHARGE_ANNUAL_TERMS, RECHARGE_CHARGE_NOTICE, CUSTOM_ANNUAL_TERMS, CUSTOM_CHARGE_NOTICE, SHOPIFY_REMINDER, RECHARGE_REMINDER, CUSTOM_REMINDER, SPECS, PLATFORM_LABELS, OFFER_PERMISSION_FIX, OFFER_QUESTION_STOP_FIX, OFFER_PERMISSION_SNIPPET, CANCEL_HANDLER_REMEDIATION, OFFER_PERMISSION_REMEDIATION;
 var init_remediation = __esm({
   "../rules/src/remediation.ts"() {
     "use strict";
@@ -14099,13 +14178,32 @@ and click \u201CCancel subscription\u201D. You can cancel anytime online.</p>`;
       ],
       snippet: { language: "html", code: CUSTOM_DISCLOSURE_HTML }
     };
+    PADDLE_CONSENT_HTML = `<!-- Replace your button that opens Paddle Checkout with this form (Paddle.js must be loaded and initialized). -->
+<form id="checkbox-paddle-checkout">
+  <label style="display:flex;gap:8px;align-items:flex-start;font-size:14px;color:#1f2937;">
+    <!-- Never add the "checked" attribute: consent must be an affirmative act -->
+    <input type="checkbox" name="auto_renew_consent" value="yes" required>
+    <span>I agree that my subscription will automatically renew every {interval} at {price} until I cancel.</span>
+  </label>
+  <button type="submit">Subscribe</button>
+</form>
+<script>
+  document.getElementById('checkbox-paddle-checkout').addEventListener('submit', function (event) {
+    event.preventDefault(); // the browser only gets here once the required box is ticked
+    var label = this.querySelector('label span').textContent.trim();
+    Paddle.Checkout.open({
+      items: [{ priceId: 'pri_REPLACE_ME', quantity: 1 }],
+      customData: { auto_renew_consent: { at: new Date().toISOString(), label: label } },
+    });
+  });
+</script>`;
     PADDLE_CONSENT = {
       steps: [
         "Add a required, unchecked renewal-consent checkbox (the wording below) on your page, directly above the button that opens Paddle Checkout, and only open checkout once it is ticked.",
-        "Save when it was ticked and the terms that were shown, so you can prove consent later.",
-        "For developers: call Paddle.Checkout.open() only after the box is ticked, and pass the consent time in customData so it is stored on the transaction."
+        'Paddle opens checkout from a button, not a form, so a "required" box alone blocks nothing: put the box and the button in one form (the snippet does) or keep the button disabled until the box is ticked.',
+        "Save when it was ticked and the terms that were shown, so you can prove consent later: the snippet passes them in customData, which Paddle stores on the transaction. On Lemon Squeezy, pass them as checkout[custom][\u2026] on the checkout URL."
       ],
-      snippet: { language: "html", code: CUSTOM_CONSENT_HTML }
+      snippet: { language: "html", code: PADDLE_CONSENT_HTML }
     };
     PADDLE_ACK = {
       steps: [
@@ -15056,6 +15154,11 @@ function offerQuestionStop(flow) {
   const last = [...flow.steps ?? []].reverse().find((s2) => s2.pageKind !== "account");
   return last && OFFER_PERMISSION_RE.test(normalizeText(last.text)) ? last : void 0;
 }
+function stuckHint(flow) {
+  const blockers = flow.blockers ?? [];
+  if (flow.completed || blockers.some((b) => /answered the cancel request with an error/i.test(b))) return "";
+  return blockers.some((b) => /no further cancel option|not completed within \d+ steps/i.test(b)) ? `. ${CANCEL_STEPS_HINT}` : "";
+}
 function offerQuestionStopResult(id, stop, refs2, data) {
   return makeResult(
     id,
@@ -15345,7 +15448,7 @@ function notRefreshedUnits(stale, fresh) {
     };
   });
 }
-var CANCEL_MAX_STEPS, CANCEL_MAX_RETENTION_OFFERS, CANCEL_LINK_MIN_FONT_PX, CANCEL_LINK_MIN_CONTRAST, CANCEL_FLOW_MAX_AGE_DAYS, CLICK_TO_CANCEL_JURISDICTIONS, OFFER_PERMISSION_JURISDICTIONS, RETENTION_PAGE_RE, OFFER_PERMISSION_RE, ONLINE_ALTERNATIVE_RE, NO_CANCEL_ATTEMPT_MESSAGE, OBSTACLE_BLOCKER_RE, CONTACT_BLOCKER_RE, NOT_FOUND_BLOCKER_RE, RETENTION_BLOCKER_RE, TECHNICAL_BLOCKER_RE, CONTACT_TO_CANCEL_RE, CANCEL_CONTROL_RE, ORDER_ONLY_RE, MANAGE_RE, HOSTED_FLOW_NOTE, onlineAvailable, SUBSCRIPTION_CANCEL_LINK_RE, BILLING_ITEM_RE, NO_ACTIVE_SUBSCRIPTION_RE, FIND_RANK, mechanismFindable, flowFriction, CANCEL_CONFIRM_EMAIL_RE, confirmation, CANCELLATION_CHECKS;
+var CANCEL_MAX_STEPS, CANCEL_MAX_RETENTION_OFFERS, CANCEL_LINK_MIN_FONT_PX, CANCEL_LINK_MIN_CONTRAST, CANCEL_FLOW_MAX_AGE_DAYS, CLICK_TO_CANCEL_JURISDICTIONS, OFFER_PERMISSION_JURISDICTIONS, RETENTION_PAGE_RE, OFFER_PERMISSION_RE, ONLINE_ALTERNATIVE_RE, NO_CANCEL_ATTEMPT_MESSAGE, OBSTACLE_BLOCKER_RE, CONTACT_BLOCKER_RE, NOT_FOUND_BLOCKER_RE, RETENTION_BLOCKER_RE, TECHNICAL_BLOCKER_RE, CONTACT_TO_CANCEL_RE, CANCEL_CONTROL_RE, ORDER_ONLY_RE, MANAGE_RE, HOSTED_FLOW_NOTE, CANCEL_STEPS_HINT, onlineAvailable, SUBSCRIPTION_CANCEL_LINK_RE, BILLING_ITEM_RE, NO_ACTIVE_SUBSCRIPTION_RE, FIND_RANK, mechanismFindable, flowFriction, CANCEL_CONFIRM_EMAIL_RE, confirmation, CANCELLATION_CHECKS;
 var init_cancellation = __esm({
   "../rules/src/checks/cancellation.ts"() {
     "use strict";
@@ -15379,6 +15482,7 @@ var init_cancellation = __esm({
     ORDER_ONLY_RE = /\bcancel\s+(?:this\s+|my\s+)?order\b/i;
     MANAGE_RE = /\b(?:manage\s+(?:my\s+|your\s+)?(?:subscriptions?|membership|plan|billing)|billing\s+portal|customer\s+portal|subscription\s+settings|my\s+subscriptions?|membership\s+settings|billing\s+(?:&|and)\s+plans?)\b/i;
     HOSTED_FLOW_NOTE = "Checkbox-hosted cancellation page: subscribers confirm their email through a one-time link, then cancel in two clicks (choose the subscription, confirm), with at most one save offer shown behind a continuously displayed cancel button and an on-screen and emailed confirmation";
+    CANCEL_STEPS_HINT = `If Checkbox took a wrong turn on your pages, list the clicks in the site's scan settings as cancel_steps (for example: click "Cancel membership", then click "No thanks, cancel") and re-check`;
     onlineAvailable = {
       id: "cancel.online_available",
       usesText: false,
@@ -15485,10 +15589,10 @@ var init_cancellation = __esm({
           return makeResult(
             id,
             "needs_review",
-            `The test cancellation did not complete${flow.blockers?.length ? ` (${flow.blockers.join("; ")})` : ""}, so online cancellation could not be confirmed`,
+            `The test cancellation did not complete${flow.blockers?.length ? ` (${flow.blockers.join("; ")})` : ""}, so online cancellation could not be confirmed${stuckHint(flow)}`,
             refs2,
             0.4,
-            data
+            stuckHint(flow) ? { ...data, suggestCancelSteps: true } : data
           );
         }
         const offline = offlineOnlyCancellation(input);
@@ -15734,13 +15838,13 @@ var init_cancellation = __esm({
         const offerStop = offerQuestionStop(flow);
         if (offerStop) return offerQuestionStopResult(id, offerStop, refs2, data);
         if (b.other.length) {
-          return makeResult(id, "needs_review", `The cancellation flow reported: ${b.other.join("; ")}`, refs2, 0.6, data);
+          return makeResult(id, "needs_review", `The cancellation flow reported: ${b.other.join("; ")}${stuckHint(flow)}`, refs2, 0.6, stuckHint(flow) ? { ...data, suggestCancelSteps: true } : data);
         }
         if (!flow.completed) {
           return makeResult(
             id,
             "needs_review",
-            `The test cancellation did not complete${flow.blockers?.length ? ` (${flow.blockers.join("; ")})` : ""}; friction could not be fully assessed`,
+            `The test cancellation did not complete${flow.blockers?.length ? ` (${flow.blockers.join("; ")})` : ""}; friction could not be fully assessed${stuckHint(flow)}`,
             refs2,
             0.4,
             data
@@ -15999,6 +16103,19 @@ var init_config2 = __esm({
           }
           return makeResult(id, "fail", `Self-serve cancellation is turned off in ${name}'s customer portal`, refs(input), 0.9, { ...data, cancelPath: "portal_only" });
         }
+        if (model.otherOnlineWorks) {
+          const flow = input.ctx.cancellation;
+          const works = inApp?.state === "works" && !!flow;
+          const via = works ? "subscribers cancel online through your own page (a test cancellation completed; see \u201Ccancel online\u201D)" : model.hosted?.state === "offered" ? `subscribers cancel through the Checkbox hosted cancellation page (${model.hosted.url}); see \u201Ccancel online\u201D` : `your own page offers a cancel option (${inApp?.url}); online cancellation is judged on that page (see \u201Ccancel online\u201D), so the portal setting is not required`;
+          return makeResult(
+            id,
+            "not_applicable",
+            `Checkbox could not read whether self-serve cancellation is on in ${name}'s portal, but ${via}`,
+            [...refs(input), ...works ? [flow.id] : []],
+            works ? 0.75 : 0.6,
+            { ...data, verifiedBy: "cancel.online_available", ...works ? { cancellationId: flow.id } : { ownCancelPage: true }, ...inApp ? { cancelsInApp: true } : {} }
+          );
+        }
         return makeResult(id, "needs_review", `Could not read whether self-serve cancellation is enabled in ${name}`, refs(input), 0.4, data);
       }
     };
@@ -16262,15 +16379,34 @@ function offlineOnlyCancelIn(text, cancelMethods) {
   const online = cancelMethods.some((m) => !CONTACT_TO_CANCEL_RE.test(m.text) && !/@|\d{3}[\s.-]\d{4}|\b(?:call|phone|chat|e-?mail|contact|mail|reply)\b/i.test(m.text));
   return online ? null : offline;
 }
+function inForceAmount(e, events, fallbackCurrency = "usd") {
+  const own = e.noticeTerms;
+  if (own && typeof own.amount === "number" && own.amount > 0) return own.amount / 10 ** currencyDigitsOf(typeof own.currency === "string" ? own.currency : fallbackCurrency);
+  const ref = typeof e.subscriptionRef === "string" ? e.subscriptionRef.trim() : "";
+  const sent2 = toDate(e.receivedAt)?.getTime();
+  if (!ref || sent2 === void 0) return void 0;
+  let best;
+  let bestAt = -Infinity;
+  for (const ev of events) {
+    if (ev.subscriptionRef !== ref || !CHARGE_AMOUNT_EVENTS.has(ev.type) || !(typeof ev.amount === "number" && ev.amount > 0)) continue;
+    const at = toDate(ev.occurredAt)?.getTime();
+    if (at === void 0 || at > sent2 + 36e5 || at < bestAt) continue;
+    best = ev;
+    bestAt = at;
+  }
+  return best ? best.amount / 10 ** currencyDigitsOf(best.currency ?? fallbackCurrency) : void 0;
+}
 function noticeContent(e, opts = {}) {
   const body = emailBody(e);
   const a = analyzeTerms(body);
   const quotes = {};
   const wrong = {};
   const plans = opts.plans ?? [];
+  const inForce = opts.events ? inForceAmount(e, opts.events, plans[0]?.currency) : void 0;
   const expected = [
     ...plans.map((p) => p.amount / 10 ** currencyDigitsOf(p.currency)),
-    ...opts.extraAmounts ?? []
+    ...opts.extraAmounts ?? [],
+    ...inForce !== void 0 ? [inForce] : []
   ];
   const amount = a.recurringPrices[0]?.money ?? positiveAmounts(a)[0];
   const stated = positiveAmounts(a).filter((m) => m.amount !== null);
@@ -16335,7 +16471,7 @@ function contentFixFromText(checkId, text) {
   const m = new RegExp(`^the ${noun} \\(.*?\\) .*? does not state (.+?)(?: correctly \\(| \u2014 )`, "i").exec(text.trim());
   return m ? `Add ${m[1]} to the ${noun}; Checkbox's template has every required line.` : void 0;
 }
-var ELEMENT_LABELS, CHARGE_FOLLOWS_RE, DATE_TAG_RE, TRIAL_END_WHEN_RE, PRODUCT_RE, CONTACT_RE, CANCEL_URL_RE, NOTICE_NOUN;
+var ELEMENT_LABELS, CHARGE_FOLLOWS_RE, DATE_TAG_RE, TRIAL_END_WHEN_RE, PRODUCT_RE, CONTACT_RE, CANCEL_URL_RE, CHARGE_AMOUNT_EVENTS, NOTICE_NOUN;
 var init_notice_content = __esm({
   "../rules/src/checks/notice-content.ts"() {
     "use strict";
@@ -16361,6 +16497,7 @@ var init_notice_content = __esm({
     PRODUCT_RE = /\b(?:[Yy]our|[Tt]he|[Tt]his)\s+(?:[A-Z0-9][\w&'’.+-]*\s+){1,5}(?:[Ss]ubscription|[Mm]embership|[Pp]lan|[Bb]ox|[Ss]ervice|[Cc]lub|[Pp]ackage)\b|\b(?:[Pp]lan|[Pp]roduct|[Ss]ubscription|[Mm]embership)\s*:\s*\S[^\n]{1,60}/;
     CONTACT_RE = /[\w.+-]+@[\w-]+(?:\.[\w-]+)+|(?:\+?1[\s.-]?)?\(?\d{3}\)?[\s.-]\d{3}[\s.-]\d{4}\b|\bcontact\s+(?:us|support|our\s+(?:support|customer|help))\b[^\n]{0,80}(?:https?:\/\/\S+|@)|\b(?:support|help)\s+(?:center|centre)\s*:?\s*https?:\/\/\S+/i;
     CANCEL_URL_RE = /https?:\/\/\S*(?:cancel|billing\.stripe\.com|customer[-_]?portal|\/portal|manage|subscription|account)\S*/i;
+    CHARGE_AMOUNT_EVENTS = /* @__PURE__ */ new Set(["subscription_created", "subscription_renewed", "upcoming_renewal", "trial_will_end"]);
     NOTICE_NOUN = {
       "reminder.trial_ending": "trial-ending reminder",
       "reminder.annual_renewal": "renewal reminder",
@@ -16430,6 +16567,64 @@ var init_email_plan = __esm({
   }
 });
 
+// ../rules/src/checks/forwarded.ts
+function headerAddress(block, name) {
+  const m = new RegExp(String.raw`^\s*[*>]*\s*${name}\s*:\s*\*?\s*(.+)$`, "im").exec(block);
+  if (!m) return void 0;
+  const a = ADDRESS_RE.exec(m[1]);
+  return a ? a[0].toLowerCase().replace(/[.>]+$/, "") : void 0;
+}
+function forwardedInfo(e) {
+  const hit = cache.get(e);
+  if (hit) return hit;
+  const text = e.text ?? "";
+  const marker = FWD_MARKER_RE.exec(text);
+  const forwarded = !!marker || FWD_SUBJECT_RE.test(e.subject ?? "");
+  const info = { forwarded };
+  if (forwarded) {
+    const start = marker ? marker.index : 0;
+    const block = text.slice(start, start + 1200);
+    const from = headerAddress(block, "From");
+    const to = headerAddress(block, "To");
+    if (from) info.originalFrom = from;
+    if (to) info.originalTo = to;
+  }
+  cache.set(e, info);
+  return info;
+}
+function domainOf(address) {
+  const m = /@([^\s<>"]+)/.exec(address ?? "");
+  return m ? m[1].toLowerCase().replace(/[>.]+$/, "") : "";
+}
+function isMorDomain(domain) {
+  return !!domain && MERCHANT_OF_RECORD_DOMAINS.some((d) => domain === d || domain.endsWith(`.${d}`));
+}
+function isMerchantOfRecordEmail(e) {
+  return isMorDomain(domainOf(e.from)) || isMorDomain(domainOf(forwardedInfo(e).originalFrom));
+}
+function inboundDomain() {
+  const env2 = typeof process !== "undefined" ? process.env.INBOUND_EMAIL_DOMAIN : void 0;
+  return (env2 ?? "").trim().replace(/^@/, "").replace(/\.$/, "").toLowerCase() || "inbound.subcomply.localhost";
+}
+function sentStraightToCheckbox(e) {
+  if (forwardedInfo(e).originalTo) return false;
+  if (e.scanId || e.relatedSignupAt || e.subscriptionRef || e.testRun) return false;
+  const addresses = (e.to ?? "").match(/[^\s<>,"]+@[^\s<>,"]+/g) ?? [];
+  const domain = inboundDomain();
+  return addresses.length > 0 && addresses.every((a) => domainOf(a) === domain);
+}
+var FWD_SUBJECT_RE, FWD_MARKER_RE, ADDRESS_RE, cache, MERCHANT_OF_RECORD_DOMAINS;
+var init_forwarded = __esm({
+  "../rules/src/checks/forwarded.ts"() {
+    "use strict";
+    FWD_SUBJECT_RE = /^\s*(?:(?:re|aw|sv)\s*:\s*)*(?:fwd?|fw|wg|tr)\s*:/i;
+    FWD_MARKER_RE = /(?:-{2,}\s*Forwarded message\s*-{2,}|Begin forwarded message\s*:|-{2,}\s*Original Message\s*-{2,}|-{2,}\s*Forwarded Message\s*-{2,}|^\s*_{8,}\s*$\s*^\s*From\s*:)/im;
+    ADDRESS_RE = /[^\s<>,"':;()[\]]+@[^\s<>,"':;()[\]]+\.[a-z]{2,}/i;
+    cache = /* @__PURE__ */ new WeakMap();
+    MERCHANT_OF_RECORD_DOMAINS = ["paddle.com", "paddle.net", "lemonsqueezy.com", "fastspring.com"];
+  }
+});
+
 // ../rules/src/checks/confirmation.ts
 function isPostSignupEmail(e) {
   if (e.kind !== "other" || !e.scanId || !e.relatedSignupAt) return false;
@@ -16442,10 +16637,12 @@ function findAcknowledgments(emails) {
   if (cached) return cached;
   const acks = [];
   const receipts = [];
-  const acknowledged = new Set(emails.filter((e) => e.kind === "acknowledgment").map((e) => recipientOf(e)).filter((r) => r !== ""));
+  const explicit = emails.filter((e) => e.kind === "acknowledgment");
+  const acknowledged = new Set(explicit.map((e) => recipientOf(e)).filter((r) => r !== ""));
   for (const e of emails) {
     if (e.kind === "acknowledgment") acks.push(e);
     else if (acknowledged.has(recipientOf(e))) continue;
+    else if (explicit.length && e.kind === "receipt" && (forwardedInfo(e).forwarded || isMerchantOfRecordEmail(e) || sentStraightToCheckbox(e))) continue;
     else if (e.kind === "receipt" || isPostSignupEmail(e)) {
       (looksLikeSubscriptionTerms(analyzeTerms(emailBody(e))) ? acks : receipts).push(e);
     }
@@ -16455,6 +16652,8 @@ function findAcknowledgments(emails) {
   return set;
 }
 function recipientOf(e) {
+  const original = forwardedInfo(e).originalTo;
+  if (original) return original;
   const m = /[^\s<>,"]+@[^\s<>,"]+/.exec(e.to ?? "");
   return m ? m[0].toLowerCase() : "";
 }
@@ -16664,6 +16863,7 @@ var init_confirmation = __esm({
     init_intro_terms();
     init_offer();
     init_email_plan();
+    init_forwarded();
     ACK_MAX_DELAY_HOURS = 24;
     NO_ACK_EMAIL_MESSAGE = "No acknowledgment email captured yet \u2014 BCC your sign-up confirmation email to your Checkbox inbound address (see Install), or add a test purchase to your scan settings so our shopper inbox receives it.";
     ackCache = /* @__PURE__ */ new WeakMap();
@@ -18280,6 +18480,17 @@ function requiredFor(reqs) {
   if (!out.size) for (const el of CHARGE_NOTICE_REQUIRED) out.add(el);
   return [...out];
 }
+function chargeGapPhrase(content, gaps, expected) {
+  const wrong = gaps.filter((g) => content.wrong?.[g]);
+  const absent = gaps.filter((g) => !content.wrong?.[g]);
+  const parts = [];
+  if (absent.length) parts.push(`do not state ${describeMissing(absent)}`);
+  for (const g of wrong) {
+    const said = content.wrong[g];
+    parts.push(g === "amount" ? `states ${ELEMENT_LABELS[g]} as \u201C${said}\u201D${expected ? `, but ${expected}` : ""}` : `states ${ELEMENT_LABELS[g]} as \u201C${said}\u201D, which does not count`);
+  }
+  return parts.join("; ");
+}
 async function runChargeNotice(input) {
   const id = "reminder.charge_notice";
   const configRefs = input.data.configRef ? [input.data.configRef] : [];
@@ -18307,6 +18518,12 @@ async function runChargeNotice(input) {
     }
     return c;
   };
+  const chargeExpected = (e) => {
+    const own = inForceAmount(e, input.ctx.events ?? [], chargePlanOpts.plans[0]?.currency);
+    const cur = (chargePlanOpts.plans[0]?.currency ?? "usd").toUpperCase();
+    if (own !== void 0) return `this subscription\u2019s charge is ${own.toFixed(2)} ${cur}`;
+    return chargePlanOpts.plans.length ? `the plan is ${chargePlanOpts.plans.map((p) => `${planAmount(p).toFixed(2)} ${p.currency.toUpperCase()} ${planEvery(p)}`).join(", ")}` : "";
+  };
   const counted = judged.filter((j) => j.state === "matched" || j.state === "partial" || j.state === "outside_window" || j.state === "missing");
   const matched = counted.filter((j) => j.state === "matched");
   const partial = counted.filter((j) => j.state === "partial");
@@ -18338,10 +18555,12 @@ async function runChargeNotice(input) {
       return makeResult(
         id,
         "fail",
-        `${incompleteMatched.length} of ${matched.length} charge notice(s) do not state ${describeMissing(x.missing)} (e.g. ${emailLabel(x.j.email)})`,
+        `${incompleteMatched.length} of ${matched.length} charge notice(s) ${chargeGapPhrase(content(x.j.email), x.missing, chargeExpected(x.j.email))} (e.g. ${emailLabel(x.j.email)})`,
         [...refs2(incompleteMatched.map((i) => i.j)), ...refs2(missing), ...refs2(outside)],
         0.75,
-        data
+        // Round 29 (pilot 28 item 11): when every failing notice is Checkbox Notices' own send, the plan fixes Checkbox's
+        // template and settings; it never asks the merchant's agent to change an email it does not send.
+        incompleteMatched.every((x2) => isCheckboxSentEmail(x2.j.email)) && !missing.length && !outside.length ? { ...data, contentByCheckbox: true } : data
       );
     }
     if (outside.length) {
@@ -18529,7 +18748,12 @@ async function overViews(checkId, input, headlines, evaluateView) {
   for (const view of views) outcomes.push({ view, unit: await evaluateView(view) });
   const failing = outcomes.filter((o) => o.unit.status === "fail");
   const introOnly = checkId === "signup.disclosure.price" && failing.length > 0 && failing.every((o) => typeof o.unit.meta?.introFix === "string");
-  return aggregateViews(checkId, outcomes, introOnly ? { ...headlines, fail: "The introductory offer next to the purchase button is missing or misstated" } : headlines);
+  const mismatchOnly = checkId === "signup.disclosure.price" && !introOnly && failing.length > 0 && failing.every((o) => o.unit.meta?.priceMismatch === true);
+  return aggregateViews(
+    checkId,
+    outcomes,
+    introOnly ? { ...headlines, fail: "The introductory offer next to the purchase button is missing or misstated" } : mismatchOnly ? { ...headlines, fail: "The recurring charge stated next to the purchase button is not what the plan charges" } : headlines
+  );
 }
 function pageAnalysis(view) {
   const entry = heuristicCache.get(view) ?? {};
@@ -18821,6 +19045,12 @@ function introPriceUnit(u, view, plans, promosDeclared = false) {
     { quote: said, meta: { ...u.meta ?? {}, priceMismatch: true, introPriceMismatch: true, introFix: introFixLine(p.plan) } }
   );
 }
+function setOffAdvice(sizePx, contrast, weight, ref) {
+  const refWeight = ref.fontWeight ?? 400;
+  const larger = Math.ceil(ref.fontSizePx * SET_OFF_MIN_SIZE_RATIO);
+  const ways = [`${larger}px or larger (the surrounding text is about ${ref.fontSizePx}px)`, ...refWeight < 600 ? ["semibold or bold (weight 600+; the surrounding text is weight " + refWeight + ")"] : [], "a contrasting colour", "a border or shaded box (confirm by eye: borders and symbols cannot be measured from a capture)"];
+  return `the renewal terms are legible (${sizePx}px, weight ${weight}${contrast !== null ? `, ${contrast}:1 contrast` : ""}) but look like the surrounding text (about ${ref.fontSizePx}px, weight ${refWeight}${refWeight >= 600 ? ": already bold, so a bolder weight cannot set them apart" : ""}, similar colour) \u2014 California requires larger type, contrasting type / font / color, or setting them off with symbols or a border. Any one of these would: ${ways.join("; ")}`;
+}
 function trialObservedOutsideCheckout(input) {
   const ctx = input.ctx;
   return [...ctx.config?.plans ?? [], ...ctx.referencePlans ?? []].some((p) => (p.trialDays ?? 0) > 0) || (ctx.events ?? []).some((e) => e.type === "trial_will_end" || (e.trialDays ?? 0) > 0) || input.data.emails.some((e) => e.kind === "trial_ending");
@@ -19767,7 +19997,7 @@ ${view.pageText}`;
             if (setOff && !setOff.differentiators.length) {
               return unit(
                 "needs_review",
-                setOff.referenceUnknown ? `the renewal terms are legible (${best.a.fontSizePx}px, ${best.a.contrastRatio}:1 contrast), but there is no surrounding text to show they are set apart from it \u2014 California requires larger type, contrasting type / font / color, or setting them off with symbols or a border` : `the renewal terms are legible (${best.a.fontSizePx}px, ${best.a.contrastRatio}:1 contrast) but look like the surrounding text (about ${setOff.reference.fontSizePx}px, same weight and color) \u2014 California requires larger type, contrasting type / font / color, or setting them off with symbols or a border (borders and symbols cannot be measured from a capture: confirm by eye)`,
+                setOff.referenceUnknown ? `the renewal terms are legible (${best.a.fontSizePx}px, ${best.a.contrastRatio}:1 contrast), but there is no surrounding text to show they are set apart from it \u2014 California requires larger type, contrasting type / font / color, or setting them off with symbols or a border` : setOffAdvice(best.a.fontSizePx, best.a.contrastRatio, best.el.style?.fontWeight ?? 400, setOff.reference),
                 0.55,
                 { meta: { ...meta, ...setOffMeta }, quote: q2 }
               );
@@ -20472,7 +20702,7 @@ var NOTICES_TEST_MODE_NOTE, NOTICE_KIND_CHECKS, NOT_SEEN_RE;
 var init_notices_on = __esm({
   "../rules/src/checks/notices-on.ts"() {
     "use strict";
-    NOTICES_TEST_MODE_NOTE = "Test mode: Checkbox Notices does not email test customers. Use 'Send me a test' or a test run to see it work.";
+    NOTICES_TEST_MODE_NOTE = "Test mode: emails for a Stripe test customer go to you as a marked \u201CTest mode copy\u201D (and to the test-run inbox during a test run), never to the test customer. Use 'Send me a test' or a test run to see it work.";
     NOTICE_KIND_CHECKS = {
       acknowledgment: ["confirmation.email.sent", "confirmation.email.terms", "confirmation.email.cancellation_instructions", "confirmation.email.trial_terms"],
       trial_ending: ["reminder.trial_ending", "config.trial_reminder_enabled"],
@@ -20623,9 +20853,9 @@ function limiter(max) {
       run2();
     }
   };
-  return async (fn) => new Promise((resolve9, reject) => {
+  return async (fn) => new Promise((resolve10, reject) => {
     queue.push(() => {
-      fn().then(resolve9, reject).finally(() => {
+      fn().then(resolve10, reject).finally(() => {
         active--;
         next();
       });
@@ -22016,6 +22246,9 @@ function planFrequencyFix(c) {
   const every = /\bplans? (?:is|are) billed (every [a-z0-9 ]+?)(?= \/ | —|[.;,]|$)/i.exec(c.detail)?.[1];
   return every ? `State how often it is charged ("${every}").` : void 0;
 }
+function billingUnread(findings) {
+  return findings.some((f) => String(f.checkId).startsWith("config.") && /^No billing platform (?:connected|settings to read)/i.test(f.detail ?? ""));
+}
 function rollup(items, opts = {}) {
   const counts = { needs_fix: 0, your_call: 0, pending_live_check: 0, verified_live: 0, compliant: 0, not_applicable: 0, not_set_up: 0, not_checked: 0 };
   const pending = [];
@@ -22059,7 +22292,8 @@ function rollup(items, opts = {}) {
     label = `${counts.not_checked} not checked yet${counts.pending_live_check ? ` \xB7 ${plural2(counts.pending_live_check, "live check", "live checks")} pending` : ""}`;
   } else {
     status = "compliant";
-    label = counts.pending_live_check ? `Checks pass \xB7 ${plural2(counts.pending_live_check, "live check", "live checks")} pending` : counts.verified_live ? "Checks pass \xB7 verified live" : "Checks pass";
+    const pass = opts.billingUnread ? CHECKS_PASS_UNREAD_LABEL : "Checks pass";
+    label = counts.pending_live_check ? `${pass} \xB7 ${plural2(counts.pending_live_check, "live check", "live checks")} pending` : counts.verified_live ? `${pass} \xB7 verified live` : pass;
   }
   return { status, label, counts, pending, suggestions, ...opts.groupOf ? { byTask: Object.fromEntries(groups) } : {} };
 }
@@ -22092,7 +22326,7 @@ function classifyFindings(findings) {
     info: classify({ checkId: f.checkId, status: f.status, detail: f.detail, missing: f.evidence?.missing, data: f.data, origin: "evaluation", siblings })
   }));
 }
-var STATUS_LABELS, CHECK_TIERS, LIVE_CHECKS, has, isStripeInput, HOSTED_BEFORE_LINE_NOTE, HOSTED_CHECKOUT_NOTE, family, isEmailCheck, ask, PLAN_FACTS_FIX, STRIPE_CANCEL_UNREAD_FIX, BILLING_CONTRADICTS_FIX, VERIFIED_FROM_STRIPE_NOTE, VERIFIED_FROM_HOSTED_NOTE, HOSTED_UNLINKED_FIX, NOT_CHECKED_CANCEL_FIX, EMAIL_EXISTS, RULES, STATUS_RULES, NY_EMAIL_ONLY_LABEL, NY_EMAIL_ONLY_NOTE, STRIPE_HOSTED_UNITS, PLATFORM_NAMES2, PORTAL_REQUIRED_FIX, PORTAL_IN_APP_BROKEN_FIX, PORTAL_OFFLINE_FIX, PAYMENT_LINK_PORTAL_FIX, PAYMENT_LINK_OFFLINE_FIX, FAIL_FIX, STATUS_RANK;
+var STATUS_LABELS, CHECK_TIERS, LIVE_CHECKS, has, isStripeInput, HOSTED_BEFORE_LINE_NOTE, HOSTED_CHECKOUT_NOTE, family, isEmailCheck, ask, PLAN_FACTS_FIX, STRIPE_CANCEL_UNREAD_FIX, BILLING_CONTRADICTS_FIX, VERIFIED_FROM_STRIPE_NOTE, VERIFIED_FROM_HOSTED_NOTE, HOSTED_UNLINKED_FIX, NOT_CHECKED_CANCEL_FIX, EMAIL_EXISTS, RULES, STATUS_RULES, NY_EMAIL_ONLY_LABEL, NY_EMAIL_ONLY_NOTE, STRIPE_HOSTED_UNITS, PLATFORM_NAMES2, PORTAL_REQUIRED_FIX, PORTAL_IN_APP_BROKEN_FIX, PORTAL_OFFLINE_FIX, PAYMENT_LINK_PORTAL_FIX, PAYMENT_LINK_OFFLINE_FIX, FAIL_FIX, CHECKS_PASS_UNREAD_LABEL, STATUS_RANK;
 var init_status = __esm({
   "../rules/src/status.ts"() {
     "use strict";
@@ -22317,7 +22551,7 @@ var init_status = __esm({
           )
         })
       },
-      { code: "consent_implied", category: "content", when: has(/consent is implied by clicking/), build: () => ({ status: "needs_fix", fix: 'Add one unchecked checkbox "I agree to the automatic renewal terms above".' }) },
+      { code: "consent_implied", category: "content", when: has(/consent is implied by clicking/), build: () => ({ status: "needs_fix", fix: 'Ask for a separate yes to the renewal: usually one unchecked box, "I agree to the automatic renewal terms above".' }) },
       { code: "consent_general_terms", category: "content", when: has(/covers general terms, not the/), build: () => ({ status: "needs_fix", fix: 'Make the checkbox about the renewal: "I agree to the automatic renewal terms above."' }) },
       // Round 23 (pilot 22 nontech-founder done blocker): "does not appear to be required" means the capture could not see
       // whether the box is enforced (a script may block the purchase, as Stripe's own page does). A person who can try it
@@ -22760,7 +22994,7 @@ var init_status = __esm({
       "signup.disclosure.term_length": 'Say how often it renews ("renews every month until you cancel").',
       "signup.disclosure.proximity": "Put the renewal line under the price, before the card and email fields and the pay button.",
       "signup.disclosure.conspicuous": "Show the renewal line at body size, semibold, in your normal text colour.",
-      "signup.consent.affirmative": 'Add one unchecked checkbox "I agree to the automatic renewal terms above".',
+      "signup.consent.affirmative": 'Ask for a separate yes to the renewal: usually one unchecked box, "I agree to the automatic renewal terms above".',
       "signup.consent.not_prechecked": "Leave the consent checkbox unchecked by default.",
       "confirmation.email.sent": "Send an acknowledgment email right after sign-up (Checkbox has a template).",
       "confirmation.email.terms": "Restate the renewal terms (price, frequency, until cancelled) in the acknowledgment.",
@@ -22781,6 +23015,7 @@ var init_status = __esm({
       "terms.refund_policy_consistent": "Make the refund policy match the money-back promise on your site.",
       "terms.renewal_terms_present": "Add a short automatic-renewal section to your Terms."
     };
+    CHECKS_PASS_UNREAD_LABEL = "Checks pass on what we can see";
     STATUS_RANK = { needs_fix: 0, not_set_up: 1, your_call: 2, not_checked: 3, pending_live_check: 4, verified_live: 5, compliant: 6, not_applicable: 7 };
   }
 });
@@ -23140,7 +23375,7 @@ async function runEvaluationInScope(input, opts) {
   }
   const classified = classifyFindings(findings);
   for (const { finding, info } of classified) finding.compliance = info;
-  const complianceRollup = rollup(classified.map(({ finding, info }) => ({ checkId: finding.checkId, info })), { groupOf: taskGroupOf });
+  const complianceRollup = rollup(classified.map(({ finding, info }) => ({ checkId: finding.checkId, info })), { groupOf: taskGroupOf, billingUnread: billingUnread(findings) });
   const { score, insurable } = scoreFindings(findings);
   const summary = { pass: 0, fail: 0, needs_review: 0, not_applicable: 0 };
   for (const f of findings) summary[f.status]++;
@@ -24488,16 +24723,24 @@ function readParams(params, merchant, kind, asOf) {
     throw new PreflightInputError("The billing interval is unknown: pass line_items[].price_data.recurring.interval or merchant.interval", "merchant.interval");
   }
   const plan2 = resolvePlan(merged, "merchant.");
-  if (coupon && merchantIntro && coupon.duration !== "forever" && plan2.introAmount !== void 0) {
+  if (coupon && merchantIntro && plan2.introAmount !== void 0) {
     const pct = typeof coupon.percent_off === "number" ? coupon.percent_off : void 0;
     const off = typeof coupon.amount_off === "number" ? coupon.amount_off : void 0;
     const fromCoupon = pct !== void 0 ? Math.round(plan2.amount * (1 - pct / 100)) : off !== void 0 ? plan2.amount - off : void 0;
-    if (fromCoupon !== void 0 && Math.abs(fromCoupon - plan2.introAmount) >= 1) {
+    const months = plan2.interval === "year" ? 12 * plan2.intervalCount : plan2.interval === "month" ? plan2.intervalCount : void 0;
+    const couponPeriods = coupon.duration === "forever" ? Infinity : coupon.duration === "once" ? 1 : coupon.duration === "repeating" && typeof coupon.duration_in_months === "number" && months ? Math.max(1, Math.ceil(coupon.duration_in_months / months)) : void 0;
+    const declaredPeriods = plan2.introPeriods ?? 1;
+    const amountDiffers = fromCoupon !== void 0 && Math.abs(fromCoupon - plan2.introAmount) >= 1;
+    const durationDiffers = couponPeriods !== void 0 && couponPeriods !== declaredPeriods;
+    if (amountDiffers || durationDiffers) {
       const id = typeof coupon.id === "string" ? `coupon ${coupon.id}` : "the coupon";
+      const per = (n) => n === Infinity ? "every billing period (forever)" : n === 1 ? "the first billing period" : `the first ${n} billing periods`;
+      const couponSays = `${pct !== void 0 ? `${pct}% off` : off !== void 0 ? `${formatMoney(off, plan2.currency)} off` : "a discount"}${fromCoupon !== void 0 ? ` (${formatMoney(fromCoupon, plan2.currency)})` : ""} for ${couponPeriods !== void 0 ? per(couponPeriods) : `an unknown duration (${String(coupon.duration ?? "not given")})`}`;
+      const declaredSays = `${formatMoney(plan2.introAmount, plan2.currency)} for ${per(declaredPeriods)}`;
       caveats.push({
         checks: ["signup.disclosure.price"],
         status: "needs_review",
-        reason: `discounts apply ${id} (${pct !== void 0 ? `${pct}% off` : `${off} off in minor units`}), which makes the first charge ${fromCoupon} in minor units, but the plan's declared intro price is ${plan2.introAmount}: the coupon or the declared intro is wrong \u2014 make them the same, then state that promo`,
+        reason: `discounts apply ${id}, which gives ${couponSays}, but the plan's declared intro is ${declaredSays}: the coupon or the declared intro is wrong \u2014 make them the same, then state that promo`,
         param: "params.discounts"
       });
     }
@@ -25851,7 +26094,7 @@ __export(check_exports, {
   default: () => check_default
 });
 import { readFileSync as readFileSync3 } from "node:fs";
-import { resolve } from "node:path";
+import { resolve as resolve2 } from "node:path";
 function operationFor(endpoint) {
   const op = Object.values(OPERATIONS).find((o) => o.httpMethod === "POST" && o.path === endpoint);
   if (!op) throw new Error(`No API operation for POST ${endpoint}`);
@@ -25860,7 +26103,7 @@ function operationFor(endpoint) {
 async function readInput(ctx, file) {
   if (file === "-") return ctx.readStdin();
   try {
-    return readFileSync3(resolve(ctx.cwd, file), "utf8");
+    return readFileSync3(resolve2(ctx.cwd, file), "utf8");
   } catch (err) {
     throw new UsageError(`Cannot read ${file}: ${err.code ?? err.message}`);
   }
@@ -26148,7 +26391,7 @@ var init_check = __esm({
 
 // src/ci/config.ts
 import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { dirname as dirname2, isAbsolute, join as join3, resolve as resolve2 } from "node:path";
+import { dirname as dirname3, isAbsolute, join as join3, resolve as resolve3 } from "node:path";
 function planList(config, ref) {
   if (Array.isArray(ref)) return ref;
   if (ref === "all" && !(config.plans ?? []).some((p) => p.name === "all")) return (config.plans ?? []).map((p) => p.name);
@@ -26156,7 +26399,7 @@ function planList(config, ref) {
 }
 function findConfig(cwd, explicit) {
   if (explicit) {
-    const p = isAbsolute(explicit) ? explicit : resolve2(cwd, explicit);
+    const p = isAbsolute(explicit) ? explicit : resolve3(cwd, explicit);
     return existsSync3(p) ? p : void 0;
   }
   for (const f of CONFIG_FILES) if (existsSync3(join3(cwd, f))) return join3(cwd, f);
@@ -26177,7 +26420,7 @@ function loadConfig(path) {
   }
   const issues = validateConfig(value);
   if (issues.length) throw new ConfigError(path, issues);
-  return { config: value, path, dir: dirname2(path), raw };
+  return { config: value, path, dir: dirname3(path), raw };
 }
 function validateConfig(value) {
   const is = new Issues();
@@ -26460,7 +26703,7 @@ function parseObjectLiteral(source, env2 = {}) {
   const p = new Parser(source, env2);
   if (p.peek() !== "{") return { value: null, unresolved: ["<not an object literal>"] };
   const v = p.object("");
-  return { value: v === UNKNOWN ? null : v, unresolved: [...new Set(p.unresolved)] };
+  return { value: v === UNKNOWN ? null : v, unresolved: [...new Set(p.unresolved)], ...Object.keys(p.fromEnv).length ? { fromEnv: p.fromEnv } : {} };
 }
 var UNKNOWN, Parser;
 var init_literal = __esm({
@@ -26474,6 +26717,7 @@ var init_literal = __esm({
       }
       i = 0;
       unresolved = [];
+      fromEnv = {};
       ws() {
         for (; ; ) {
           while (this.i < this.s.length && /\s/.test(this.s[this.i])) this.i++;
@@ -26560,7 +26804,10 @@ var init_literal = __esm({
           if (name === "null") return null;
           if (name === "undefined") return void 0;
           const env2 = /^(?:process\.env|import\.meta\.env)\.([A-Za-z_][A-Za-z0-9_]*)$/.exec(name);
-          if (env2) return this.env[env2[1]] ?? UNKNOWN;
+          if (env2) {
+            if (this.env[env2[1]] !== void 0 && path) this.fromEnv[path] = name;
+            return this.env[env2[1]] ?? UNKNOWN;
+          }
           return UNKNOWN;
         }
         this.skipExpr();
@@ -26875,11 +27122,17 @@ function findStripeKey(env2, processEnv) {
     sources.push([`${k} (environment)`, processEnv[k]]);
     sources.push([`${k} (.env)`, env2[k]]);
   }
-  const found = sources.filter((s2) => typeof s2[1] === "string" && /^(sk|rk)_test_[A-Za-z0-9]{10,}$/.test(s2[1].trim()));
-  const pick = found.find((s2) => s2[1].startsWith("rk_test_")) ?? found[0];
-  if (!pick) return void 0;
-  const key = pick[1].trim();
-  return { key, hint: `${key.slice(0, 8)}\u2026${key.slice(-4)}`, source: pick[0], restricted: key.startsWith("rk_test_") };
+  const found = sources.filter((s2) => typeof s2[1] === "string" && /^(sk|rk)_(test|live)_[A-Za-z0-9]{10,}$/.test(s2[1].trim())).map(([src, v]) => [src, v.trim()]);
+  const hint = (key) => `${key.slice(0, 8)}\u2026${key.slice(-4)}`;
+  const pick = found.find((s2) => s2[1].startsWith("rk_test_"));
+  if (pick) return { key: { key: pick[1], hint: hint(pick[1]), source: pick[0], restricted: true } };
+  const other = found.find((s2) => s2[1].startsWith("sk_test_")) ?? found[0];
+  if (!other) return {};
+  return { refused: { hint: hint(other[1]), source: other[0], kind: /_live_/.test(other[1]) ? "live" : "secret" } };
+}
+function stripeKeyRefusedMessage(r) {
+  const what = r.kind === "live" ? `${r.hint} in ${r.source} is a LIVE Stripe key. Live keys are never stored by the CLI or an agent: a person adds them in the Checkbox dashboard.` : `${r.hint} in ${r.source} is the Stripe secret key, which can do everything in your Stripe test account, so Checkbox refuses it.`;
+  return `${what} For test runs, make a restricted TEST key instead: in Stripe, switch to Test mode, open Developers \u2192 API keys \u2192 Create restricted key, tick the permissions on https://checkbox.site/docs/guides/stripe-key, and put the key (rk_test_\u2026) in STRIPE_RESTRICTED_KEY in .env.local (never in a chat). Then run \`checkbox init\` again.`;
 }
 function sessionLiteral(text, index) {
   const open2 = text.indexOf("{", index);
@@ -26961,7 +27214,8 @@ function detectProject(root, processEnv = {}) {
     checkoutCode,
     payButtons,
     checkoutSessions,
-    ...stripeKey ? { stripeTestKey: stripeKey } : {},
+    ...stripeKey.key ? { stripeTestKey: stripeKey.key } : {},
+    ...stripeKey.refused ? { stripeKeyRefused: stripeKey.refused } : {},
     ...brand ? { brand } : {},
     plans: plansFromSessions(checkoutSessions),
     env: env2
@@ -27001,8 +27255,8 @@ var init_detect = __esm({
 });
 
 // src/ci/scaffold.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
-import { basename, join as join5, relative as relative2 } from "node:path";
+import { existsSync as existsSync5, readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
+import { basename, dirname as dirname4, join as join5, relative as relative2 } from "node:path";
 function walk3(root, visit) {
   let n = 0;
   const go = (dir, depth) => {
@@ -27035,20 +27289,70 @@ function emailKindOf(file) {
   const name = basename(file).replace(/\.[^.]+$/, "");
   return EMAIL_NAMES.find(([re]) => re.test(name))?.[1];
 }
-function scaffoldConfig(root, env2 = {}) {
+function plansFromLiterals(text, file) {
+  const out = [];
+  for (const m of text.matchAll(/(?:(?:['"]?)([A-Za-z_$][\w$ -]*)['"]?\s*:\s*)?\{([^{}]{0,600})\}/g)) {
+    const body = m[2];
+    const interval = /\binterval\s*:\s*['"](day|week|month|year)['"]/.exec(body)?.[1];
+    if (!interval) continue;
+    const price3 = /\bprice\s*:\s*(\d+(?:\.\d{1,2})?)\b/.exec(body)?.[1];
+    const minor = /\b(?:amount|unit_amount|price_cents|cents)\s*:\s*(\d+)\b/.exec(body)?.[1];
+    const major = price3 !== void 0 ? Number(price3) : minor !== void 0 ? Number(minor) / 100 : void 0;
+    if (major === void 0 || !(major > 0)) continue;
+    const name = /\b(?:name|title|label)\s*:\s*['"]([^'"]{1,80})['"]/.exec(body)?.[1] ?? m[1]?.trim();
+    if (!name) continue;
+    const currency = /\bcurrency\s*:\s*['"]([a-z]{3})['"]/i.exec(body)?.[1]?.toLowerCase() ?? "usd";
+    const count = /\binterval_?count\s*:\s*(\d+)/i.exec(body)?.[1];
+    const trial = /\btrial(?:_period)?_?days\s*:\s*(\d+)/i.exec(body)?.[1];
+    if (out.some((p) => p.name === name)) continue;
+    const key = m[1]?.trim() && /^[A-Za-z_$][\w$]*$/.test(m[1].trim()) ? m[1].trim() : void 0;
+    out.push({ name, ...key ? { key } : {}, price: major, currency, interval, ...count && Number(count) > 1 ? { interval_count: Number(count) } : {}, ...trial && Number(trial) > 0 ? { trial_days: Number(trial) } : {}, source: file });
+  }
+  return out;
+}
+function paramsBuilder(root, file, line2) {
+  let text;
+  try {
+    text = readFileSync6(join5(root, file), "utf8");
+  } catch {
+    return void 0;
+  }
+  const from = text.split("\n").slice(line2 - 1).join("\n");
+  const call = /checkout\.sessions\.create\s*\(\s*(?:await\s+)?([A-Za-z_$][\w$]*)\s*\(([^)]*)\)/.exec(from);
+  if (!call) return void 0;
+  const fn = call[1];
+  const takesArgs = call[2].trim().length > 0;
+  const imp = new RegExp(`import\\s*\\{[^}]*\\b${fn}\\b[^}]*\\}\\s*from\\s*['"](\\.{1,2}/[^'"]+)['"]`).exec(text);
+  let target;
+  if (imp) {
+    const base = join5(dirname4(file), imp[1]).split("\\").join("/");
+    target = [base, ...[".ts", ".tsx", ".js", ".mjs", "/index.ts", "/index.js"].map((e) => `${base.replace(/\.(?:[cm]?js)$/, "")}${e}`)].find((f) => /\.[cm]?[jt]sx?$/.test(f) && existsSync5(join5(root, f)));
+  } else if (new RegExp(`export\\s+(?:async\\s+)?function\\s+${fn}\\b|export\\s+const\\s+${fn}\\b`).test(text)) target = file;
+  return target ? { module: `${target}#${fn}`, takesArgs } : void 0;
+}
+function scaffoldConfig(root, env2 = {}, facts = {}) {
   const det = detectProject(root, env2);
   const todos = [];
   const found = [];
   const names = /* @__PURE__ */ new Set();
   const merchant = {};
-  merchant.name = det.brand?.name ?? "TODO: the brand subscribers see";
-  if (!det.brand) todos.push("merchant.name: the brand subscribers see");
+  const fact = (k) => typeof facts[k] === "string" && facts[k].trim() ? facts[k].trim() : void 0;
+  const brand = fact("merchant_name") ?? det.brand?.name;
+  merchant.name = brand ?? "TODO: the brand subscribers see";
+  if (!brand) todos.push("merchant.name: the brand subscribers see");
+  if (fact("merchant_name")) found.push(`merchant name "${fact("merchant_name")}" (from checkbox init)`);
   const cancelPath = det.policyPaths.cancellation;
-  if (det.siteUrl && cancelPath) merchant.cancel_url = `${originOf(det.siteUrl)}${cancelPath}`;
+  const siteUrl = fact("site_url") ?? det.siteUrl;
+  const cancelFact = fact("cancellation_url") ?? fact("account_url");
+  if (cancelFact) {
+    merchant.cancel_url = cancelFact;
+    found.push(`cancel URL ${cancelFact} (from checkbox init)`);
+  } else if (siteUrl && cancelPath) merchant.cancel_url = `${originOf(siteUrl)}${cancelPath}`;
   else {
     merchant.cancel_url = "TODO: https://\u2026 page where subscribers cancel online";
     todos.push("merchant.cancel_url: the page where subscribers cancel online");
   }
+  if (fact("support_email")) merchant.support_contact = fact("support_email");
   const plans = det.plans.map((p, i) => ({
     name: p.name ?? `Plan ${i + 1}`,
     amount: p.amount,
@@ -27058,6 +27362,32 @@ function scaffoldConfig(root, env2 = {}) {
     ...p.trial_days ? { trial_days: p.trial_days } : {}
   }));
   for (const p of det.plans) found.push(`plan ${p.name ?? ""} ${p.amount / 100} ${p.currency}/${p.interval} (${p.source})`.replace(/\s+/g, " "));
+  const planKeys = /* @__PURE__ */ new Map();
+  if (!plans.length && Array.isArray(facts.plans)) {
+    for (const [i, p] of facts.plans.entries()) {
+      if (typeof p.amount !== "number" || typeof p.interval !== "string") continue;
+      plans.push({ name: typeof p.name === "string" ? p.name : `Plan ${i + 1}`, amount: p.amount, currency: typeof p.currency === "string" ? p.currency : "usd", interval: p.interval, ...typeof p.interval_count === "number" ? { interval_count: p.interval_count } : {}, ...typeof p.trial_days === "number" ? { trial_days: p.trial_days } : {} });
+      found.push(`plan ${String(plans[plans.length - 1].name)} (from checkbox init --plan)`);
+    }
+  }
+  if (!plans.length) {
+    walk3(root, (rel2) => {
+      if (!PLAN_FILE.test(rel2) || plans.length >= 8) return;
+      let text = "";
+      try {
+        text = readFileSync6(join5(root, rel2), "utf8");
+      } catch {
+        return;
+      }
+      for (const p of plansFromLiterals(text, rel2)) {
+        if (plans.some((x) => x.name === p.name)) continue;
+        const { source, key, ...plan2 } = p;
+        plans.push(plan2);
+        if (key) planKeys.set(p.name, key);
+        found.push(`plan ${p.name} ${p.price} ${p.currency}/${p.interval} (${source})`);
+      }
+    });
+  }
   if (!plans.length) {
     plans.push({ name: "TODO: plan name", price: "TODO: e.g. 19.99", currency: "usd", interval: "month" });
     todos.push("plans: the price, interval and trial of each plan (the checkout uses Price ids, which cannot be read from code)");
@@ -27071,6 +27401,22 @@ function scaffoldConfig(root, env2 = {}) {
     const call = (perFile.get(s2.file) ?? 0) + 1;
     perFile.set(s2.file, call);
     const entry = { name: unique(names, `Stripe Checkout (${basename(s2.file)}${call > 1 ? ` #${call}` : ""})`), source: s2.file, ...call > 1 ? { call } : {} };
+    const builder = !s2.params ? paramsBuilder(root, s2.file, s2.line) : void 0;
+    if (builder) {
+      found.push(`${s2.file}:${s2.line}: Checkout Session built by ${builder.module}`);
+      const keyed = plans.length > 1 && plans.every((p) => planKeys.has(String(p.name)));
+      if (builder.takesArgs && plans.length > 1) {
+        for (const p of plans) {
+          const n = String(p.name);
+          stripe.push({ name: unique(names, `Checkout (${n})`), module: builder.module, args: [keyed ? planKeys.get(n) : `TODO: the argument for plan ${n}`], plan: n, strict: true });
+        }
+        if (!keyed) todos.push(`${builder.module}: the argument that builds each plan's params ("args")`);
+      } else {
+        stripe.push({ name: entry.name, module: builder.module, ...builder.takesArgs ? { args: [plans.length === 1 && planKeys.size ? [...planKeys.values()][0] : "TODO: the function argument"] } : {}, ...plans.length === 1 ? { plan: String(plans[0].name) } : {}, strict: true });
+        if (builder.takesArgs && !(plans.length === 1 && planKeys.size)) todos.push(`${builder.module}: the argument that builds the params ("args")`);
+      }
+      continue;
+    }
     if (!s2.params) {
       todos.push(`${s2.file}:${s2.line}: the params are not an object literal; use "module" (an exported function returning the params) instead of "source"`);
       delete entry.source;
@@ -27134,7 +27480,7 @@ function scaffoldConfig(root, env2 = {}) {
     found
   };
 }
-var IGNORE, MAX_FILES2, EMAIL_NAMES, IN_EMAIL_DIR, PAGE_FILE, DISCLOSURE_TEXT, unique;
+var IGNORE, MAX_FILES2, EMAIL_NAMES, IN_EMAIL_DIR, PAGE_FILE, DISCLOSURE_TEXT, unique, PLAN_FILE;
 var init_scaffold = __esm({
   "src/ci/scaffold.ts"() {
     "use strict";
@@ -27160,12 +27506,13 @@ var init_scaffold = __esm({
       names.add(n);
       return n;
     };
+    PLAN_FILE = /(?:^|\/)(?:plans?|pricing|prices|tiers|subscriptions?|billing|products?)(?:\.config)?\.(?:[cm]?[jt]sx?|json)$/i;
   }
 });
 
 // src/ci/coverage.ts
 import { readFileSync as readFileSync7 } from "node:fs";
-import { join as join6, relative as relative3, resolve as resolve3 } from "node:path";
+import { join as join6, relative as relative3, resolve as resolve4 } from "node:path";
 function callsIn(text, file) {
   const hits = [];
   for (const [re, kind] of PATTERNS) {
@@ -27187,7 +27534,7 @@ function callsIn(text, file) {
 }
 function coverageOf(loaded, root, files) {
   const cfg = loaded.config;
-  const toRoot = (p) => relative3(root, resolve3(loaded.dir, p)).split("\\").join("/");
+  const toRoot = (p) => relative3(root, resolve4(loaded.dir, p)).split("\\").join("/");
   const calls = [];
   const visit = (rel2) => {
     if (!CODE.test(rel2) || TESTISH.test(rel2)) return;
@@ -27287,11 +27634,11 @@ var init_coverage = __esm({
 
 // src/ci/inputs.ts
 import { execFile } from "node:child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync8 } from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join7, relative as relative4, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync8 } from "node:fs";
+import { dirname as dirname5, isAbsolute as isAbsolute2, join as join7, relative as relative4, resolve as resolve5 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 function readRel(dir, file) {
-  const abs = isAbsolute2(file) ? file : resolve4(dir, file);
+  const abs = isAbsolute2(file) ? file : resolve5(dir, file);
   try {
     return readFileSync8(abs, "utf8");
   } catch (err) {
@@ -27301,28 +27648,44 @@ function readRel(dir, file) {
 }
 function hasTsx(dir) {
   for (let d = dir, i = 0; i < 8; i++) {
-    if (existsSync5(join7(d, "node_modules", "tsx", "package.json"))) return true;
-    const up = dirname3(d);
+    if (existsSync6(join7(d, "node_modules", "tsx", "package.json"))) return true;
+    const up = dirname5(d);
+    if (up === d) break;
+    d = up;
+  }
+  return false;
+}
+function declaresTsx(dir) {
+  for (let d = dir, i = 0; i < 8; i++) {
+    try {
+      const pkg = JSON.parse(readFileSync8(join7(d, "package.json"), "utf8"));
+      if (pkg.dependencies?.tsx || pkg.devDependencies?.tsx) return true;
+    } catch {
+    }
+    const up = dirname5(d);
     if (up === d) break;
     d = up;
   }
   return false;
 }
+function addTsx(dir, detail = "") {
+  return declaresTsx(dir) ? NOT_INSTALLED : `Add tsx to the project (npm install -D tsx${detail})`;
+}
 function loaderFlags(file, dir, nodeVersion = process.versions.node, features = process.features) {
   if (/\.[cm]?js$/.test(file)) return [];
   if (hasTsx(dir)) return ["--import", "tsx"];
-  if (/\.[jt]sx$/.test(file)) return `${file}: JSX modules need tsx (npm install -D tsx), or export the rendered { subject, html } from a .js / .ts file`;
+  if (/\.[jt]sx$/.test(file)) return declaresTsx(dir) ? `${file}: ${NOT_INSTALLED}` : `${file}: JSX modules need tsx (npm install -D tsx), or export the rendered { subject, html } from a .js / .ts file`;
   if (features.typescript) return [];
   const [major, minor] = nodeVersion.split(".").map(Number);
   if (major > 22 || major === 22 && minor >= 6) return ["--experimental-strip-types"];
-  return `${file}: TypeScript modules need Node 22.6+ (type stripping) or tsx in the project (npm install -D tsx); or point "file" at a JSON export`;
+  return declaresTsx(dir) ? `${file}: ${NOT_INSTALLED}` : `${file}: TypeScript modules need Node 22.6+ (type stripping) or tsx in the project (npm install -D tsx); or point "file" at a JSON export`;
 }
 function runModule(dir, ref, args = [], env2 = process.env, timeoutMs = 3e4) {
   const hash = ref.lastIndexOf("#");
   const file = hash > 0 ? ref.slice(0, hash) : ref;
   const name = hash > 0 ? ref.slice(hash + 1) : "default";
-  const abs = resolve4(dir, file);
-  if (!existsSync5(abs)) return Promise.reject(new InputError(`${file} does not exist (paths are relative to checkbox.json)`));
+  const abs = resolve5(dir, file);
+  if (!existsSync6(abs)) return Promise.reject(new InputError(`${file} does not exist (paths are relative to checkbox.json)`));
   const flags = loaderFlags(file, dir);
   if (typeof flags === "string") return Promise.reject(new InputError(flags));
   return new Promise((resolvePromise, reject) => {
@@ -27341,12 +27704,39 @@ function runModule(dir, ref, args = [], env2 = process.env, timeoutMs = 3e4) {
           return;
         }
         const own = /__CHECKBOX_ERR__ (.+)/.exec(stderr)?.[1];
-        const tail = stderr.trim().split("\n").filter((l) => !/^\s+at /.test(l)).slice(-4).join(" / ");
-        reject(new InputError(`${ref}: ${own ?? (err && err.killed ? `did not finish within ${timeoutMs / 1e3}s` : tail || err?.message || "no output")}`));
+        reject(new InputError(`${ref}: ${own ?? (err && err.killed ? `did not finish within ${timeoutMs / 1e3}s` : moduleErrorMessage(stderr, dir, flags) || err?.message || "no output")}`));
       }
     );
   });
 }
+function moduleErrorMessage(stderr, dir, flags = []) {
+  const text = stderr.trim();
+  if (!text) return "";
+  const rel2 = (p) => {
+    const r = relative4(dir, p.replace(/^file:\/\//, ""));
+    return r && !r.startsWith("..") ? r.split("\\").join("/") : p;
+  };
+  const tsx = flags.includes("tsx");
+  const missing = /Cannot find (module|package) '([^']+)' imported from (\S+)/.exec(text);
+  if (missing) {
+    const [, what, target, from] = missing;
+    if (what === "package" || !/^[./]|^[A-Za-z]:[\\/]/.test(target) && !target.startsWith(dir)) {
+      return `${rel2(from)} imports the package "${target}", which is not installed here. Install the project's dependencies before checkbox ci (e.g. npm ci in the workflow).`;
+    }
+    const noExt = !/\.[cm]?[jt]sx?$|\.json$/.test(target);
+    if (noExt && !tsx) {
+      return `${rel2(from)} imports ${rel2(target)} without a file extension, which Node cannot resolve on its own. ${addTsx(dir, "; checkbox ci then imports modules the way your bundler does")}, or write the import with its extension (e.g. './${rel2(target).split("/").pop()}.ts').`;
+    }
+    return `${rel2(from)} imports ${rel2(target)}, which does not exist${noExt ? " (tsx found no .ts / .js file of that name either)" : ""}.`;
+  }
+  if (/ERR_UNKNOWN_FILE_EXTENSION/.test(text)) {
+    const file = /Unknown file extension "([^"]+)" for (\S+)/.exec(text);
+    return `Node cannot import ${file ? `${rel2(file[2])} (${file[1]})` : "a file the module imports"}. ${addTsx(dir)}, or point the entry at a .js / .ts file that imports no ${file?.[1] ?? "such"} files.`;
+  }
+  const lines = text.split("\n").map((l) => l.trim()).filter((l) => l && !/^at /.test(l) && !/^Node\.js v\d/.test(l));
+  const first2 = lines.find((l) => /^(?:[A-Z]\w*)?Error\b.*:/.test(l)) ?? lines.find((l) => /error/i.test(l)) ?? lines[lines.length - 1] ?? "";
+  return first2.replace(/file:\/\/\S+/g, (u) => rel2(u)).replace(/\s+/g, " ").slice(0, 400);
+}
 function paramsFromSource(text, file, call = 1, env2 = {}) {
   const calls = [...text.matchAll(/checkout\.sessions\.create\s*\(/g)];
   if (!calls.length) throw new InputError(`${file} has no stripe.checkout.sessions.create( call`);
@@ -27357,7 +27747,32 @@ function paramsFromSource(text, file, call = 1, env2 = {}) {
   if (!lit) throw new InputError(`${file}:${line2}: the params are not an object literal; use "module" (a function returning the params) or "file" instead`);
   const parsed = parseObjectLiteral(lit, env2);
   if (!parsed.value) throw new InputError(`${file}:${line2}: could not read the params object`);
-  return { params: parsed.value, line: line2, unresolved: parsed.unresolved };
+  return { params: parsed.value, line: line2, unresolved: parsed.unresolved, ...parsed.fromEnv ? { fromEnv: parsed.fromEnv } : {} };
+}
+function lineOfAny(text, needles) {
+  const lower2 = text.toLowerCase();
+  for (const n of needles) {
+    const k = n.trim().toLowerCase();
+    if (k.length < 2) continue;
+    const i = lower2.indexOf(k);
+    if (i >= 0) return text.slice(0, i).split("\n").length;
+  }
+  return void 0;
+}
+function exportLine(dir, ref) {
+  const hash = ref.lastIndexOf("#");
+  const file = hash > 0 ? ref.slice(0, hash) : ref;
+  const name = hash > 0 ? ref.slice(hash + 1) : "default";
+  let text;
+  try {
+    text = readFileSync8(resolve5(dir, file), "utf8");
+  } catch {
+    return 1;
+  }
+  const esc3 = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const re = name === "default" ? /^\s*export\s+default\b/m : new RegExp(`^\\s*export\\s+(?:async\\s+)?(?:function\\*?|const|let|var|class)\\s+${esc3}\\b|^\\s*export\\s*\\{[^}]*\\b${esc3}\\b`, "m");
+  const m = re.exec(text);
+  return m ? text.slice(0, m.index).split("\n").length + (m[0].startsWith("\n") ? 1 : 0) : 1;
 }
 function projectEnv(dir) {
   const out = {};
@@ -27389,7 +27804,7 @@ function planTerms(config, plan2) {
   return t;
 }
 function rel(loaded, root, file) {
-  return relative4(root, resolve4(loaded.dir, file)).split("\\").join("/") || file;
+  return relative4(root, resolve5(loaded.dir, file)).split("\\").join("/") || file;
 }
 function emailFromFile(content, file, subject) {
   let body = content;
@@ -27423,15 +27838,22 @@ async function stripeJob(loaded, e, o, root) {
       }
     } else if (e.module) {
       const file = e.module.replace(/#.*$/, "");
-      job.target = { file: rel(loaded, root, file), line: 1 };
+      job.target = { file: rel(loaded, root, file), line: exportLine(dir, e.module) };
       job.inputs.push(file);
       params = await runModule(dir, e.module, e.args ?? [], o.env);
+      const unset = (Array.isArray(params?.line_items) ? params.line_items : []).flatMap((li, i) => li && typeof li === "object" && !Array.isArray(li) && li.price === void 0 && li.price_data === void 0 ? [`line_items[${i}].price`] : []);
+      if (unset.length) {
+        job.placeholders = Object.fromEntries(unset.map((p) => [p, "{{your Stripe Price id: unset when checkbox ci ran the module}}"]));
+        job.warnings.push(`${unset.join(", ")} ${unset.length === 1 ? "was" : "were"} not set when Checkbox ran ${e.module} (an environment variable this job does not set?). The checks use "plan" in checkbox.json for the price, and corrected params keep a placeholder there for your own value.`);
+      }
     } else {
       const src = e.source;
       job.inputs.push(src);
       const r = paramsFromSource(readRel(dir, src), src, e.call ?? 1, projectEnv(dir));
       job.target = { file: rel(loaded, root, src), line: r.line };
+      job.fromSource = true;
       params = r.params;
+      if (r.fromEnv) job.placeholders = Object.fromEntries(Object.entries(r.fromEnv).map(([p, expr]) => [p, `{{${expr}}}`]));
       if (r.unresolved.length) {
         job.partial = true;
         job.unresolved = r.unresolved;
@@ -27507,16 +27929,32 @@ function pageJob(loaded, e, o, root) {
   if (e.source) {
     job.target = { file: rel(loaded, root, e.source), line: 1 };
     job.inputs.push(e.source);
+    const src = e.source;
+    job.locate = (needles) => {
+      try {
+        return lineOfAny(readRel(dir, src), needles);
+      } catch {
+        return void 0;
+      }
+    };
   }
   if (e.url) {
-    if (!o.online) job.skip = "URL pages are fetched by the API: run with --online (and CHECKBOX_SECRET_KEY)";
+    if (!o.online) job.skip = 'URL pages are fetched by the API: run with --online and a live-mode key (ck_live_\u2026 on an activated account), or list the built page under "file" to check it offline';
     else job.body = { url: e.url, ...common3 };
     return job;
   }
   try {
     if (!e.source) job.target = { file: rel(loaded, root, e.file), line: 1 };
     job.inputs.push(e.file);
-    job.body = { html: readRel(dir, e.file), ...common3 };
+    let html;
+    try {
+      html = readRel(dir, e.file);
+    } catch (err) {
+      if (!existsSync6(resolve5(dir, e.file))) throw new InputError(`${e.file} does not exist (paths are relative to checkbox.json). If it is build output, build it before checkbox ci: in GitHub Actions, add a build step before the Checkbox step (\`checkbox ci init\` writes one when package.json has a build script).`);
+      throw err;
+    }
+    if (!e.source) job.locate = (needles) => lineOfAny(html, needles);
+    job.body = { html, ...common3 };
   } catch (err) {
     job.error = err.message;
   }
@@ -27533,7 +27971,7 @@ async function emailJob(loaded, e, o, root, planName = e.plan, name = e.name) {
       msg2 = emailFromFile(readRel(dir, e.file), e.file, e.subject);
     } else if (e.module) {
       const file = e.module.replace(/#.*$/, "");
-      job.target = { file: rel(loaded, root, file), line: 1 };
+      job.target = { file: rel(loaded, root, file), line: exportLine(dir, e.module) };
       job.inputs.push(file);
       const v = await runModule(dir, e.module, e.args ?? [], o.env);
       if (typeof v === "string") msg2 = emailFromFile(v, /^\s*</.test(v) ? "x.html" : "x.txt", e.subject);
@@ -27581,7 +28019,7 @@ async function resolveJobs(loaded, o) {
   }
   return jobs;
 }
-var InputError, CHILD, jurisdictionsOf;
+var InputError, NOT_INSTALLED, CHILD, jurisdictionsOf;
 var init_inputs = __esm({
   "src/ci/inputs.ts"() {
     "use strict";
@@ -27594,6 +28032,7 @@ var init_inputs = __esm({
         this.name = "InputError";
       }
     };
+    NOT_INSTALLED = "tsx is in package.json but not installed: install the project's dependencies before checkbox ci (npm ci; in GitHub Actions a `- run: npm ci` step before the Checkbox step, which `checkbox ci init` writes)";
     CHILD = `
 const [url, name, argsJson] = process.argv.slice(1);
 const mod = await import(url);
@@ -27612,102 +28051,6 @@ process.exit(0);
   }
 });
 
-// src/ci/report.ts
-function icon(s2, c) {
-  if (s2 === "pass") return c.green("\u2713");
-  if (s2 === "fail" || s2 === "error") return c.red("\u2717");
-  if (s2 === "needs_review") return c.yellow("?");
-  return c.dim("\u2013");
-}
-function overallLine(run2) {
-  const s2 = run2.summary;
-  const parts = [];
-  if (s2.error) parts.push(`${s2.error} could not run`);
-  if (s2.fail) parts.push(`${s2.fail} need${s2.fail === 1 ? "s" : ""} a fix`);
-  if (s2.needs_review) parts.push(`${s2.needs_review} need${s2.needs_review === 1 ? "s" : ""} review${run2.strict ? " (strict)" : ""}`);
-  if (s2.pass) parts.push(`${s2.pass} pass`);
-  if (s2.not_applicable) parts.push(`${s2.not_applicable} not required`);
-  if (s2.skipped) parts.push(`${s2.skipped} skipped`);
-  return parts.join(" \xB7 ") || "nothing checked";
-}
-function renderHuman(run2, c, opts = {}) {
-  const lines = [];
-  const versions = run2.rules_version ? ` \xB7 rules ${run2.rules_version} \xB7 catalog ${run2.catalog_version}` : "";
-  lines.push(`${c.bold("Checkbox CI")}  ${run2.config} \xB7 ${run2.mode}${versions} \xB7 ${run2.checks.length} check${run2.checks.length === 1 ? "" : "s"}`);
-  const width = Math.min(40, Math.max(...run2.checks.map((x) => x.name.length), 10));
-  for (const x of run2.checks) {
-    const label = x.status === "fail" || x.status === "error" ? c.red(x.label) : x.status === "needs_review" ? c.yellow(x.label) : x.status === "pass" ? c.green(x.label) : c.dim(x.label);
-    lines.push(`  ${icon(x.status, c)} ${x.name.padEnd(width)} \u2192 ${label}`);
-    if (x.message) lines.push(c.dim(`      ${wrap(x.message, 110, "      ")}`));
-    if (x.fix) lines.push(`      fix: ${wrap(x.fix, 110, "           ")}${c.dim(` (${where(x)})`)}`);
-    if (opts.verbose) for (const f of x.fixes.slice(1)) lines.push(`      fix: ${wrap(f, 110, "           ")}`);
-    for (const w of x.warnings.slice(0, opts.verbose ? 10 : 1)) lines.push(c.dim(`      note: ${wrap(w, 110, "            ")}`));
-    if (x.corrected && opts.verbose) lines.push(c.dim(`      ${x.corrected.title}:`), ...x.corrected.body.split("\n").map((l) => c.dim(`        ${l}`)));
-  }
-  const tone = run2.status === "pass" ? c.green : run2.status === "needs_review" && run2.exit_code === 0 ? c.yellow : c.red;
-  lines.push("", `${tone(overallLine(run2))} \xB7 exit ${run2.exit_code}`);
-  if (run2.checks.some((x) => x.corrected) && !opts.verbose) lines.push(c.dim("Corrected params / text: --verbose, --json, or the job summary in GitHub Actions."));
-  lines.push(c.dim(run2.disclaimer));
-  return lines;
-}
-function annotations(run2) {
-  const out = [];
-  for (const x of run2.checks) {
-    const level = x.status === "fail" || x.status === "error" ? "error" : x.status === "needs_review" ? run2.strict || x.blocking ? "error" : "warning" : void 0;
-    if (!level) continue;
-    const props = [`file=${escProp(x.target.file)}`, ...x.target.line ? [`line=${x.target.line}`] : [], `title=${escProp(`Checkbox: ${x.name} \u2014 ${x.label}`)}`];
-    const body = x.status === "error" ? x.fix ? `${x.message ?? ""}
-${x.fix}` : `Could not run: ${x.message ?? ""}` : [x.fix ?? x.label, ...x.fixes.slice(1, 4).map((f) => `\u2022 ${f}`), x.corrected ? `${x.corrected.title}: see the job summary.` : ""].filter(Boolean).join("\n");
-    out.push(`::${level} ${props.join(",")}::${escData(body)}`);
-  }
-  return out;
-}
-function stepSummary(run2) {
-  const lines = [];
-  lines.push("## Checkbox compliance checks", "");
-  const versions = run2.rules_version ? ` \xB7 rules ${run2.rules_version} \xB7 catalog ${run2.catalog_version}` : "";
-  lines.push(`**${overallLine(run2)}** \u2014 \`${run2.config}\` \xB7 ${run2.mode}${versions}`, "");
-  lines.push("| Check | Status | Fix | File |", "|---|---|---|---|");
-  for (const x of run2.checks) {
-    const fix = x.status === "error" || x.status === "skipped" ? [x.message, x.fix].filter(Boolean).join(" ") : x.fix ? `${x.fix}${x.fixes.length > 1 ? ` (+${x.fixes.length - 1} more)` : ""}` : "";
-    lines.push(`| ${STATUS_MD[x.status]} ${cell(x.name)}<br><sub>${TYPE_LABEL[x.type]}</sub> | ${cell(x.label)} | ${cell(fix)} | \`${cell(where(x))}\` |`);
-  }
-  const detailed = run2.checks.filter((x) => x.corrected || x.fixes.length > 1);
-  for (const x of detailed) {
-    lines.push("", `<details><summary><b>${escapeHtml(x.name)}</b>: ${escapeHtml(x.corrected ? x.corrected.title.toLowerCase() : `${x.fixes.length} fixes`)}</summary>`, "");
-    if (x.fixes.length) lines.push(...x.fixes.map((f) => `- ${f}`), "");
-    if (x.corrected) {
-      const fence = x.corrected.body.includes("```") ? "````" : "```";
-      lines.push(`${fence}${x.corrected.format === "json" ? "json" : "text"}`, x.corrected.body, fence, "");
-    }
-    lines.push("</details>");
-  }
-  lines.push("", `<sub>${run2.disclaimer} Docs: https://checkbox.site/docs/guides/ci</sub>`, "");
-  return lines.join("\n");
-}
-function escapeHtml(s2) {
-  return s2.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-var TYPE_LABEL, where, escData, escProp, cell, STATUS_MD;
-var init_report = __esm({
-  "src/ci/report.ts"() {
-    "use strict";
-    init_output();
-    TYPE_LABEL = {
-      stripe_checkout: "Stripe Checkout",
-      disclosure: "Disclosure",
-      page: "Page",
-      email: "Email",
-      notice_schedule: "Notice schedule"
-    };
-    where = (c) => `${c.target.file}${c.target.line && c.target.line > 1 ? `:${c.target.line}` : ""}`;
-    escData = (s2) => s2.replace(/%/g, "%25").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
-    escProp = (s2) => escData(s2).replace(/:/g, "%3A").replace(/,/g, "%2C");
-    cell = (s2) => s2.replace(/\|/g, "\\|").replace(/\r?\n/g, "<br>");
-    STATUS_MD = { pass: "\u2705", fail: "\u274C", needs_review: "\u26A0\uFE0F", error: "\u274C", skipped: "\u23ED\uFE0F", not_applicable: "\u2796" };
-  }
-});
-
 // ../rules/src/fixes/conflicts.ts
 var init_conflicts = __esm({
   "../rules/src/fixes/conflicts.ts"() {
@@ -27874,6 +28217,10 @@ function pickDaysBefore(kind, range) {
   if (open2) return lo + OPEN_WINDOW_MARGIN_DAYS;
   return lo + Math.floor((range.maxDays - lo) / 2);
 }
+function sendLeadDays(range, days) {
+  if (range.maxDays >= OPEN_ENDED_DAYS2 || !Number.isInteger(days) || days <= 0) return days;
+  return days <= range.maxDays ? days + BOUNDED_SEND_MARGIN_DAYS : days;
+}
 function stabWindows(windows) {
   const sorted = [...windows].sort((a, b) => a.window.maxDays - b.window.maxDays || a.window.minDays - b.window.minDays);
   const groups = [];
@@ -27891,11 +28238,15 @@ function stabWindows(windows) {
 function slotOf(kind, anchorAt, range, members, daysBefore) {
   const days = daysBefore ?? pickDaysBefore(kind, range);
   const maxDays = Math.min(range.maxDays, OPEN_ENDED_DAYS2);
+  const lead = sendLeadDays(range, days);
+  const sendAt = new Date(anchorAt.getTime() - lead * DAY_MS5);
+  const opensAt = new Date(anchorAt.getTime() - maxDays * DAY_MS5);
   return {
     slot: `d${days}`,
     daysBefore: days,
-    sendAt: new Date(anchorAt.getTime() - days * DAY_MS5),
-    opensAt: new Date(anchorAt.getTime() - maxDays * DAY_MS5),
+    sendAt,
+    // The send time is inside [opensAt, closesAt] (a bounded window's send sits inside its maximum's rounding).
+    opensAt: sendAt.getTime() < opensAt.getTime() ? sendAt : opensAt,
     closesAt: new Date(anchorAt.getTime() - range.minDays * DAY_MS5),
     range: { minDays: range.minDays, maxDays },
     jurisdictions: [...new Set(members.map((m) => m.jurisdiction))].sort(),
@@ -27976,7 +28327,7 @@ function renewalReminderApplies(termMonths2, jurisdictions, asOf, requirements)
     (r) => r.appliesWhen?.minTermMonths !== void 0 && r.appliesWhen.minTermMonths <= termMonths2
   );
 }
-var DAY_MS5, HOUR_MS2, OPEN_ENDED_DAYS2, OPEN_WINDOW_MARGIN_DAYS, TRIAL_MIN_MARGIN_DAYS, TRIAL_SIGNUP_GAP_DAYS, PRICE_CHANGE_MAX_LEAD_DAYS, ANNUAL_TERMS_DEFAULT_WINDOW, NOTICE_CHECKS2, isImmediateKind, KIND_ANCHORS, FALLBACK_WINDOWS, BUSINESS_DAY_MINIMUMS;
+var DAY_MS5, HOUR_MS2, OPEN_ENDED_DAYS2, OPEN_WINDOW_MARGIN_DAYS, TRIAL_MIN_MARGIN_DAYS, TRIAL_SIGNUP_GAP_DAYS, BOUNDED_SEND_MARGIN_DAYS, PRICE_CHANGE_MAX_LEAD_DAYS, ANNUAL_TERMS_DEFAULT_WINDOW, NOTICE_CHECKS2, isImmediateKind, KIND_ANCHORS, FALLBACK_WINDOWS, BUSINESS_DAY_MINIMUMS;
 var init_timing = __esm({
   "../../apps/api/src/notices/timing.ts"() {
     "use strict";
@@ -27987,6 +28338,7 @@ var init_timing = __esm({
     OPEN_WINDOW_MARGIN_DAYS = 2;
     TRIAL_MIN_MARGIN_DAYS = 0.5;
     TRIAL_SIGNUP_GAP_DAYS = 1 / 24;
+    BOUNDED_SEND_MARGIN_DAYS = 0.25;
     PRICE_CHANGE_MAX_LEAD_DAYS = 60;
     ANNUAL_TERMS_DEFAULT_WINDOW = { minDays: 15, maxDays: 45 };
     NOTICE_CHECKS2 = {
@@ -28039,7 +28391,7 @@ function singleDayNote(requirementIds, days) {
   const lower2 = [...new Set(windows.filter((w) => w.minDays === days).map((w) => jur(w.id)))];
   const upper = [...new Set(windows.filter((w) => w.maxDays === days).map((w) => jur(w.id)))];
   const why = lower2.length && upper.length ? `at least ${days} days (${lower2.slice(0, 4).join(", ")}) and at most ${days} days (${upper.slice(0, 4).join(", ")}) leave a single day` : `the states' windows meet on a single day`;
-  return `Exactly ${days} days before: ${why}. Send at send_at (the anchor's time of day, ${days} days earlier). Checkbox counts whole days, so a send within a few hours of send_at still counts as ${days} days; half a day or more never does.`;
+  return `Exactly ${days} days before: ${why}. Send at send_at, ${days} days and 6 hours before the anchor. The one rule: a minimum counts only full days, less a 2-hour allowance for delivery; a maximum is rounded to the nearest day. So a send counts as ${days} days when it goes out less than ${days + 0.5} days and at least ${days} days less 2 hours before the anchor; anything earlier or later does not.`;
 }
 function addInterval(d, interval, n) {
   if (interval === "day") return new Date(d.getTime() + n * DAY_MS5);
@@ -28202,6 +28554,32 @@ function operationFor2(kind) {
 function onlineEngine(client) {
   return { mode: "online", run: (kind, body) => client.sdk.call(operationFor2(kind), body) };
 }
+function ciVocabulary(text) {
+  return text.replace(/Pass every plan the page sells \(plans: \[\.\.\.\]\)/g, 'Set "plan": "all" on this page entry in checkbox.json (every plan the page sells)').replace(/Pass plans with every plan the page sells/g, 'Set "plan": "all" on this page entry in checkbox.json').replace(/\(page_kind "checkout"\)/g, '(a pages entry with "kind": "checkout")').replace(/page_kind "checkout"/g, '"kind": "checkout"').replace(/check the renewal (text|text itself) with check_disclosure/g, 'check the renewal $1 with a "disclosures" entry').replace(/\bcheck_disclosure\b/g, 'a "disclosures" entry').replace(/pass merchant\.price \(e\.g\. 19\.99\), merchant\.currency and merchant\.interval/g, 'add the plan to "plans" in checkbox.json (price, currency, interval) and name it in "plan" on this entry').replace(/merchant\.price \+ merchant\.interval/g, 'a plan in "plans" of checkbox.json (and "plan" on this entry)').replace(/pass merchant\.price and merchant\.interval/gi, 'add the plan to "plans" in checkbox.json and name it in "plan" on this entry').replace(/merchant\.intro_percent_off \(or intro_amount_off\) and merchant\.intro_periods/g, "intro_percent_off (or intro_amount_off) and intro_periods on the plan in checkbox.json").replace(/merchant\.intro_\*/g, "the plan's intro_* in checkbox.json").replace(/merchant\.trial_days \((\d+)\)/g, "trial_days ($1) of the plan in checkbox.json").replace(/merchant\.price was ignored/g, "the plan's price in checkbox.json was ignored").replace(/In test mode, pass the page source as html\./g, 'With a test key, list the built page under "file" in checkbox.json instead of "url" (or run --online with a live key, ck_live_\u2026).');
+}
+function pricingPageFixes(fixes) {
+  const reworded = fixes.map(
+    (f) => f.replace(/,? before the card and email fields and the (?:pay|purchase) button/g, ", next to the plan's button").replace(/,? before the card and email fields/g, ", next to the plan's button")
+  );
+  const out = [];
+  const renewalLineFor = /* @__PURE__ */ new Set();
+  for (const f of reworded) {
+    const card = /^(Plan card [^:]+): /.exec(f)?.[1] ?? "";
+    const isRenewalLine = /\b(?:Add one line under the price|Put the renewal line under the price|Move the renewal line under the price)/.test(f);
+    if (isRenewalLine) {
+      if (renewalLineFor.has(card)) continue;
+      renewalLineFor.add(card);
+    }
+    if (!out.includes(f)) out.push(f);
+  }
+  return out;
+}
+function stripeConsentFix(text, params) {
+  if (!/^(Ask for a separate yes to the renewal|Add one unchecked checkbox)/.test(text)) return text;
+  const cc = params?.consent_collection;
+  if (cc?.terms_of_service === "required") return text;
+  return 'Set consent_collection: { terms_of_service: "required" } in the params: Stripe then shows an unchecked consent checkbox, labelled with custom_text.terms_of_service_acceptance.message.';
+}
 function ciStatusOf(r) {
   const cs = r.compliance_status;
   if (r.verdict === "not_applicable") return "not_applicable";
@@ -28210,9 +28588,9 @@ function ciStatusOf(r) {
   if (cs && OK_STATUSES.has(cs)) return "pass";
   return "needs_review";
 }
-function fixesOf(r) {
+function fixesOf(r, onlyNeedsFix = false) {
   const out = [];
-  const failing = (r.checks ?? []).filter((c) => (c.status === "fail" || c.status === "needs_review") && !(c.compliance_status && OK_STATUSES.has(c.compliance_status)));
+  const failing = (r.checks ?? []).filter((c) => (c.status === "fail" || c.status === "needs_review") && !(c.compliance_status && OK_STATUSES.has(c.compliance_status)) && (!onlyNeedsFix || c.compliance_status === "needs_fix"));
   failing.sort((a, b) => (a.compliance_status === "needs_fix" ? 0 : 1) - (b.compliance_status === "needs_fix" ? 0 : 1) || (RANK2[a.status] ?? 2) - (RANK2[b.status] ?? 2));
   for (const c of failing) {
     const base = c.compliance?.fix || c.fix || c.compliance?.question?.text || c.explanation || c.title || c.check_id;
@@ -28225,14 +28603,25 @@ function fixesOf(r) {
 function failingCards(explanation) {
   if (!explanation) return [];
   if (/\(\d+ checkout page views? checked\) — e\.g\./.test(explanation)) return [];
-  return [...new Set([...explanation.matchAll(/plan button “([^”]{1,80})”/g)].map((m) => m[1]))];
+  return [...new Set([...explanation.matchAll(/plan button “([^”]{1,80})”(?: in the card “([^”]{1,80})”)?/g)].map((m) => m[2] ?? m[1]))];
+}
+function withPlaceholders(params, placeholders) {
+  if (!placeholders || !params || typeof params !== "object") return params;
+  const copy = JSON.parse(JSON.stringify(params));
+  for (const [path, value] of Object.entries(placeholders)) {
+    const keys = path.split(/\.|\[(\d+)\]/).filter((k) => k !== void 0 && k !== "");
+    let node = copy;
+    for (const k of keys.slice(0, -1)) node = node && typeof node === "object" ? node[k] : void 0;
+    if (node && typeof node === "object") node[keys[keys.length - 1]] = value;
+  }
+  return copy;
 }
-function correctedOf(type, r, partial = false) {
+function correctedOf(type, r, partial = false, placeholders) {
   if (type === "stripe_checkout" && r.correction?.patch?.length && partial) {
     return { format: "json", title: `Changes to make to the params (JSON Patch; keep your other values)${r.correction.verification?.passes ? ", verified by the rules engine" : ""}`, body: JSON.stringify(r.correction.patch, null, 2) };
   }
   if (type === "stripe_checkout" && r.correction?.patch?.length) {
-    return { format: "json", title: `Corrected params${r.correction.verification?.passes ? " (verified by the rules engine)" : ""}`, body: JSON.stringify(r.correction.corrected_params, null, 2) };
+    return { format: "json", title: `Corrected params${r.correction.verification?.passes ? " (verified by the rules engine)" : ""}${placeholders ? "; keep your own values where it says {{\u2026}}" : ""}`, body: JSON.stringify(withPlaceholders(r.correction.corrected_params, placeholders), null, 2) };
   }
   const perPlan = (r.plan_replacements ?? []).filter((p) => p.disclosure_text);
   if (type === "page" && perPlan.length >= 2 && ciStatusOf(r) !== "pass") {
@@ -28264,11 +28653,38 @@ ${r.template.text}` };
   }
   return void 0;
 }
-function noticeCoverage(config, planName, schedule) {
+function declaredByCheckbox(config) {
+  const sb = config.notices?.sent_by_checkbox;
+  return sb === true ? Object.values(NOTICE_TO_EMAIL) : Array.isArray(sb) ? sb : [];
+}
+function sentByNotices(seen) {
+  if ("error" in seen || seen.mode !== "checkbox" || seen.real_sends === "off") return /* @__PURE__ */ new Set();
+  return new Set(seen.enabled);
+}
+function noticesCrossCheck(config, seen, target) {
+  const declared = declaredByCheckbox(config);
+  if (!declared.length) return void 0;
+  const base = { name: "Checkbox Notices (site settings)", type: "notice_schedule", target, warnings: [] };
+  if ("error" in seen) {
+    return { ...base, status: "needs_review", label: "Not checked: could not read the site's Notice settings", message: seen.error, fixes: [] };
+  }
+  const real = sentByNotices(seen);
+  const all = config.notices?.sent_by_checkbox === true;
+  const missing = all ? real.size ? [] : declared : declared.filter((k) => !real.has(k));
+  if (!missing.length) {
+    const note = seen.real_sends === "needs_confirmation" ? " (a person still has to confirm sending to real subscribers once in the dashboard: Emails tab)" : seen.real_sends === "test_mode" ? " (test mode: they go to test-run inboxes only)" : "";
+    return { ...base, status: "pass", label: `Checks pass \xB7 Checkbox Notices is on for ${seen.site}${all ? ` (${real.size} kind${real.size === 1 ? "" : "s"} turned on)` : ` and sends the ${declared.length} email${declared.length === 1 ? "" : "s"} checkbox.json declares`}${note}`, fixes: [] };
+  }
+  const why = seen.mode !== "checkbox" ? `${seen.site} is in "You send" mode (Checkbox Notices sends nothing)` : seen.real_sends === "off" || !real.size ? `Checkbox Notices is off for ${seen.site}` : `${seen.site} does not have ${missing.map((k) => `"${k}"`).join(", ")} turned on in Checkbox Notices`;
+  const fix = `checkbox.json says Checkbox Notices sends ${all ? "the required emails" : missing.map((k) => `"${k}"`).join(", ")}, but ${why}. Turn ${missing.length === 1 ? "it" : "them"} on in the dashboard (Emails tab) or with updateNoticeSettings, or remove ${missing.length === 1 ? "it" : "them"} from "notices.sent_by_checkbox" and add the templates to checks.emails.`;
+  return { ...base, status: "fail", label: all ? "Checkbox Notices sends nothing for this site" : `${missing.length} declared email${missing.length === 1 ? " is" : "s are"} not sent by Checkbox Notices`, fix, fixes: [fix] };
+}
+function noticeCoverage(config, planName, schedule, opts = {}) {
   const plan2 = (config.plans ?? []).find((p) => p.name === planName);
   const have = new Set((config.checks.emails ?? []).filter((e) => !e.plan || e.plan === planName || planList(config, e.plan)?.includes(planName)).map((e) => e.kind));
-  const sb = config.notices?.sent_by_checkbox;
-  const byCheckbox = new Set(sb === true ? Object.values(NOTICE_TO_EMAIL) : Array.isArray(sb) ? sb : []);
+  const declared = declaredByCheckbox(config);
+  const real = opts.notices && !("error" in opts.notices) ? sentByNotices(opts.notices) : void 0;
+  const byCheckbox = new Set(real ? declared.filter((k) => real.has(k)) : declared);
   for (const k of byCheckbox) have.add(k);
   const yearly = plan2 ? (plan2.interval === "year" ? 12 * (plan2.interval_count ?? 1) : plan2.interval === "month" ? plan2.interval_count ?? 1 : 0) >= 12 : false;
   if (yearly && have.has("renewal_reminder")) have.add("annual_terms");
@@ -28280,8 +28696,8 @@ function noticeCoverage(config, planName, schedule) {
   const missing = [...required].filter(([k]) => !have.has(k));
   if (!required.size) return { status: "not_applicable", label: "No reminder emails required", fixes: [] };
   const sent2 = [...required.keys()].filter((k) => byCheckbox.has(k)).length;
-  if (!missing.length) return { status: "pass", label: `Checks pass \xB7 ${required.size} required email${required.size === 1 ? "" : "s"} covered${sent2 ? ` (${sent2} sent by Checkbox Notices, as checkbox.json declares)` : ""}`, fixes: [] };
-  const fixes = missing.map(([k, w]) => `Add a ${EMAIL_LABEL[k]} to checks.emails (kind "${k}"; ${w.days > 0 ? `${w.days} days before: ${w.occasion}` : w.occasion}), or have Checkbox Notices send it.`);
+  if (!missing.length) return { status: "pass", label: `Checks pass \xB7 ${required.size} required email${required.size === 1 ? "" : "s"} covered${sent2 ? ` (${sent2} sent by Checkbox Notices, ${real ? "as the site's Notice settings confirm" : "as checkbox.json declares; --online confirms it against the site"})` : ""}`, fixes: [] };
+  const fixes = missing.map(([k, w]) => `Add ${/^[aeiou]/i.test(EMAIL_LABEL[k]) ? "an" : "a"} ${EMAIL_LABEL[k]} to checks.emails (kind "${k}"; ${w.days > 0 ? `${w.days} days before: ${w.occasion}` : w.occasion}), or have Checkbox Notices send it${declared.includes(k) ? " (checkbox.json says it does, but the site's Notice settings do not send it)" : ""}.`);
   return { status: "needs_review", label: `${missing.length} required email${missing.length === 1 ? "" : "s"} not in checkbox.json`, fix: fixes[0], fixes };
 }
 function unverifiedOffer(r) {
@@ -28295,8 +28711,8 @@ function unverifiedOffer(r) {
   if (coupon && open2.length) return coupon.message;
   return void 0;
 }
-async function runJob(job, engine, config) {
-  const base = { name: job.name, type: job.type, ...job.plan ? { plan: job.plan } : {}, target: job.target, warnings: [...job.warnings] };
+async function runJob(job, engine, config, opts = {}) {
+  const base = { name: job.name, type: job.type, ...job.plan ? { plan: job.plan } : {}, target: { ...job.target }, ...job.fromSource ? { fromSource: true } : {}, warnings: [...job.warnings] };
   if (job.error) return { ...base, status: "error", label: "Could not run", message: job.error, fixes: [] };
   if (job.skip || !job.body) return { ...base, status: "skipped", label: "Skipped", message: job.skip ?? "nothing to check", fixes: [] };
   let report;
@@ -28305,49 +28721,91 @@ async function runJob(job, engine, config) {
   } catch (err) {
     const e = err;
     const failure = isAuthError(err) ? "auth" : err instanceof CheckboxError && (!e.statusCode || e.statusCode >= 500 || e.statusCode === 429) ? "api" : void 0;
-    return { ...base, status: "error", label: "Could not run", message: `${e.message}${e.param ? ` (${e.param})` : ""}`, fixes: [], ...failure ? { failure } : {} };
+    return { ...base, status: "error", label: "Could not run", message: `${ciVocabulary(e.message)}${e.param && !failure && /^merchant\./.test(e.param) ? "" : e.param ? ` (${e.param})` : ""}`, fixes: [], ...failure ? { failure } : {} };
   }
-  if (job.type === "notice_schedule") return { ...base, ...noticeCoverage(config, job.plan, report), report };
-  for (const w of report.warnings ?? []) base.warnings.push(w.message);
+  if (job.type === "notice_schedule") return { ...base, ...noticeCoverage(config, job.plan, report, opts), report };
+  const alerts = job.warnings.filter((w) => /^The params and checkbox\.json disagree/.test(w));
+  for (const w of report.warnings ?? []) {
+    const text = ciVocabulary(w.message);
+    base.warnings.push(text);
+    if (ALERT_CODES.has(w.code)) alerts.push(text);
+  }
+  if (alerts.length) Object.assign(base, { alerts });
   const status = ciStatusOf(report);
-  const fixes = status === "pass" || status === "not_applicable" ? [] : fixesOf(report);
+  const params = job.type === "stripe_checkout" ? job.body?.params ?? void 0 : void 0;
+  let fixes = (status === "pass" || status === "not_applicable" ? [] : fixesOf(report)).map((f) => ciVocabulary(job.type === "stripe_checkout" ? stripeConsentFix(f, params) : f));
+  const pricingPage = job.type === "page" && job.body?.page_kind === "pricing";
+  if (pricingPage) fixes = pricingPageFixes(fixes);
   const unreadText = (job.unresolved ?? []).filter((p) => /^(?:custom_text|consent_collection|discounts|subscription_data|allow_promotion_codes|payment_method_collection)\b/.test(p));
   const unread = job.type === "stripe_checkout" && unreadText.length > 0 && (status === "fail" || status === "needs_review" || status === "pass" && unreadText.some((p) => /^(?:custom_text|consent_collection|discounts|subscription_data\.trial)/.test(p)));
   if (unread) {
     fixes.splice(0, fixes.length, `${unreadText.slice(0, 3).join(", ")} ${unreadText.length === 1 ? "is an expression" : "are expressions"} Checkbox cannot read statically (e.g. a ternary or PLANS.monthly.*), so the checks that depend on ${unreadText.length === 1 ? "it were" : "them were"} not checked (no fix is given for a value Checkbox did not read). Use "module" (a function returning the exact params for each plan) or "file" instead of "source".`);
   }
+  const literal = [];
+  if (unread) {
+    const consentRead = !(job.unresolved ?? []).some((p) => /^(?:consent_collection|\.\.\.)/.test(p));
+    const consentFails = (report.checks ?? []).some((c) => c.check_id === "signup.consent.affirmative" && (c.status === "fail" || c.compliance_status === "needs_fix"));
+    if (consentRead && consentFails && params?.consent_collection?.terms_of_service !== "required") literal.push(stripeConsentFix("Add one unchecked checkbox", params));
+    fixes.unshift(...literal);
+  }
   const offer = !unread && status === "needs_review" && job.type === "stripe_checkout" ? unverifiedOffer(report) : void 0;
   if (offer) {
     fixes.unshift(
       `What the shopper is charged first is not verified (${offer.replace(/\.$/, "")}). Declare the discount on the plan in checkbox.json (intro_percent_off, intro_amount_off or intro_price, with intro_periods) and state it in custom_text.submit, or remove the discount. This fails the run (exit 2) until it is resolved.`
     );
   }
-  const finalStatus = unread ? "needs_review" : status;
-  const corrected = unread ? void 0 : correctedOf(job.type, report, job.partial);
+  if (job.locate && (status === "fail" || status === "needs_review")) {
+    const named = (report.checks ?? []).filter((c) => c.status === "fail" || c.status === "needs_review").flatMap((c) => failingCards(c.explanation));
+    const needles = named.flatMap((n) => [n.split(", ")[0], ...n.split(", ").slice(1)]);
+    const line2 = needles.length ? job.locate(needles) : void 0;
+    if (line2) base.target = { ...base.target, line: line2 };
+  }
+  const declaredCoupon = !unread && status === "pass" && job.type === "stripe_checkout" ? (report.warnings ?? []).find((w) => w.code === "coupon_unverified" && /merchant\.intro_\* and are not verified/.test(w.message)) : void 0;
+  if (declaredCoupon) {
+    const id = /discounts use (coupon|promotion code) (\S+?),/.exec(declaredCoupon.message);
+    const what = id ? `${id[1]} ${id[2]}` : "the coupon";
+    fixes.unshift(
+      engine.mode === "offline" ? `The intro price is declared in checkbox.json, not verified: offline, Checkbox cannot read ${what} from Stripe. Run with --online (CHECKBOX_SECRET_KEY, and the site's Stripe key connected) so Checkbox reads it and compares its percent / amount off and duration with the declared intro.` : `The intro price is declared in checkbox.json, not verified: Checkbox could not read ${what} through the site's connected Stripe key (is the site known, via --site or CHECKBOX_SITE, and does the key have Coupons: Read?). Until it is read, its percent / amount off and duration are not compared with the declared intro.`
+    );
+  }
+  const finalStatus = unread ? literal.length ? "fail" : "needs_review" : declaredCoupon ? "needs_review" : status;
+  const corrected = unread ? void 0 : correctedOf(job.type, report, job.partial, job.placeholders);
+  if (corrected?.format === "json" && job.placeholders) {
+    const unset = job.warnings.filter((w) => /(?:was|were) not set when Checkbox ran/.test(w));
+    if (unset.length) Object.assign(base, { alerts: [...unset, ...base.alerts ?? []] });
+  }
   const blocking = unread || status === "needs_review" && (job.type === "page" || job.type === "disclosure") && (report.compliance_status === "incomplete" || report.compliance_status === "not_checked") || status === "needs_review" && job.type === "stripe_checkout" && (!!job.strict || !!offer);
   return {
     ...base,
     status: finalStatus,
     ...blocking ? { blocking: true } : {},
-    label: unread ? `Not checked: ${unreadText[0]} is an expression` : report.compliance?.label || DEFAULT_LABEL[status],
+    label: unread ? `${literal.length ? `${literal.length} fix${literal.length === 1 ? "" : "es"} needed \xB7 ` : ""}Not checked: ${unreadText[0]} is an expression` : declaredCoupon ? "Needs review \xB7 coupon declared, not verified" : countedLabel(report.compliance?.label || DEFAULT_LABEL[status], report, pricingPage ? (f) => pricingPageFixes(f.map(ciVocabulary)) : void 0),
     ...fixes[0] ? { fix: fixes[0] } : {},
     fixes,
     ...corrected ? { corrected } : {},
     report
   };
 }
+function countedLabel(label, r, adjust) {
+  const m = /^(\d+) fix(?:es)? needed/.exec(label);
+  if (!m) return label;
+  const n = (adjust ? adjust(fixesOf(r, true)) : fixesOf(r, true)).length;
+  if (!n || n === Number(m[1])) return label;
+  return label.replace(m[0], `${n} fix${n === 1 ? "" : "es"} needed`);
+}
 function exitCodeOf(checks, strict) {
   if (checks.some((c) => c.failure === "auth")) return { status: "error", exit: EXIT.auth };
   if (checks.some((c) => c.failure === "api")) return { status: "error", exit: EXIT.error };
   if (checks.some((c) => c.status === "error")) return { status: "error", exit: EXIT.usage };
   if (checks.some((c) => c.status === "fail")) return { status: "fail", exit: EXIT.fail };
   if (checks.some((c) => c.status === "needs_review")) return { status: "needs_review", exit: strict || checks.some((c) => c.blocking) ? EXIT.needs_review : EXIT.ok };
+  if (!checks.some((c) => c.status === "pass")) return { status: "skipped", exit: EXIT.needs_review };
   return { status: "pass", exit: EXIT.ok };
 }
 function mergeSourcePatches(checks) {
   const groups = /* @__PURE__ */ new Map();
   for (const c of checks) {
-    if (c.type !== "stripe_checkout" || c.corrected?.format !== "json" || !c.target.line) continue;
+    if (c.type !== "stripe_checkout" || c.corrected?.format !== "json" || !c.target.line || !c.fromSource) continue;
     const key = `${c.target.file}:${c.target.line}`;
     groups.set(key, [...groups.get(key) ?? [], c]);
   }
@@ -28363,9 +28821,16 @@ function mergeSourcePatches(checks) {
     }
   }
 }
+function nothingCheckedMessage(run2) {
+  const urlSkipped = run2.checks.some((c) => c.status === "skipped" && /^URL pages/.test(c.message ?? ""));
+  const how = urlSkipped ? run2.mode === "offline" ? ' Page entries with a "url" are fetched only with --online and an API key (CHECKBOX_SECRET_KEY); offline, point them at the built HTML with "file" instead.' : ' Page entries with a "url" need a key that can read that site (a live key for a live site); or point them at the built HTML with "file".' : ' Add a check checkbox.json can run (a "file" page, a disclosure, Stripe Checkout params or an email).';
+  return `Nothing was checked: every check was skipped or does not apply, so this run is not a pass (exit 2).${how}`;
+}
 async function runCi(jobs, engine, opts) {
   const checks = [...opts.extra ?? []];
-  for (const j of jobs) checks.push(await runJob(j, engine, opts.config));
+  for (const j of jobs) checks.push(await runJob(j, engine, opts.config, { ...opts.notices ? { notices: opts.notices } : {} }));
+  const cross = opts.notices ? noticesCrossCheck(opts.config, opts.notices, opts.noticesTarget ?? { file: opts.configPath }) : void 0;
+  if (cross) checks.push(cross);
   mergeSourcePatches(checks);
   const summary = { pass: 0, fail: 0, needs_review: 0, not_applicable: 0, skipped: 0, error: 0 };
   for (const c of checks) summary[c.status]++;
@@ -28385,7 +28850,7 @@ async function runCi(jobs, engine, opts) {
     disclaimer: CI_DISCLAIMER
   };
 }
-var ENGINE_KIND, CI_DISCLAIMER, RANK2, OK_STATUSES, NOTICE_TO_EMAIL, EMAIL_LABEL, DEFAULT_LABEL;
+var ENGINE_KIND, CI_DISCLAIMER, RANK2, OK_STATUSES, NOTICE_TO_EMAIL, EMAIL_LABEL, DEFAULT_LABEL, ALERT_CODES;
 var init_runner = __esm({
   "src/ci/runner.ts"() {
     "use strict";
@@ -28422,16 +28887,205 @@ var init_runner = __esm({
       cancellation_confirmation: "cancellation confirmation"
     };
     DEFAULT_LABEL = { pass: "Checks pass", fail: "Fixes needed", needs_review: "Needs review", not_applicable: "Not required for this plan" };
+    ALERT_CODES = /* @__PURE__ */ new Set(["coupon_unverified", "coupon_read", "merchant_trial_ignored", "merchant_price_ignored", "price_not_in_site_plans", "price_from_setup_plan", "plan_terms_conflict", "trial_mismatch", "intro_mismatch"]);
   }
 });
 
-// src/ci/workflow.ts
-var WORKFLOW_PATH, WORKFLOW_YAML;
-var init_workflow = __esm({
-  "src/ci/workflow.ts"() {
+// src/ci/report.ts
+function icon(s2, c) {
+  if (s2 === "pass") return c.green("\u2713");
+  if (s2 === "fail" || s2 === "error") return c.red("\u2717");
+  if (s2 === "needs_review") return c.yellow("?");
+  return c.dim("\u2013");
+}
+function overallLine(run2) {
+  const s2 = run2.summary;
+  const parts = [];
+  if (s2.error) parts.push(`${s2.error} could not run`);
+  if (s2.fail) parts.push(`${s2.fail} need${s2.fail === 1 ? "s" : ""} a fix`);
+  if (s2.needs_review) parts.push(`${s2.needs_review} need${s2.needs_review === 1 ? "s" : ""} review${run2.strict ? " (strict)" : ""}`);
+  if (s2.pass) parts.push(`${s2.pass} pass`);
+  if (s2.not_applicable) parts.push(`${s2.not_applicable} not required`);
+  if (s2.skipped) parts.push(`${s2.skipped} skipped`);
+  return parts.join(" \xB7 ") || "nothing checked";
+}
+function renderHuman(run2, c, opts = {}) {
+  const lines = [];
+  const versions = run2.rules_version ? ` \xB7 rules ${run2.rules_version} \xB7 catalog ${run2.catalog_version}` : "";
+  lines.push(`${c.bold("Checkbox CI")}  ${run2.config} \xB7 ${run2.mode}${versions} \xB7 ${run2.checks.length} check${run2.checks.length === 1 ? "" : "s"}`);
+  const width = Math.min(40, Math.max(...run2.checks.map((x) => x.name.length), 10));
+  for (const x of run2.checks) {
+    const label = x.status === "fail" || x.status === "error" ? c.red(x.label) : x.status === "needs_review" ? c.yellow(x.label) : x.status === "pass" ? c.green(x.label) : c.dim(x.label);
+    lines.push(`  ${icon(x.status, c)} ${x.name.padEnd(width)} \u2192 ${label}`);
+    if (x.message) lines.push(c.dim(`      ${wrap(x.message, 110, "      ")}`));
+    if (x.fix) lines.push(`      fix: ${wrap(x.fix, 110, "           ")}${c.dim(` (${where(x)})`)}`);
+    if (opts.verbose) for (const f of x.fixes.slice(1)) lines.push(`      fix: ${wrap(f, 110, "           ")}`);
+    const alerts = x.alerts ?? [];
+    for (const a of alerts) lines.push(c.yellow(`      warning: ${wrap(a, 110, "               ")}`));
+    for (const w of x.warnings.filter((w2) => !alerts.includes(w2)).slice(0, opts.verbose ? 10 : alerts.length ? 0 : 1)) lines.push(c.dim(`      note: ${wrap(w, 110, "            ")}`));
+    if (x.corrected && opts.verbose) lines.push(c.dim(`      ${x.corrected.title}:`), ...x.corrected.body.split("\n").map((l) => c.dim(`        ${l}`)));
+  }
+  const tone = run2.status === "pass" ? c.green : run2.status === "needs_review" && run2.exit_code === 0 ? c.yellow : c.red;
+  if (run2.status === "skipped") lines.push("", c.red(wrap(nothingCheckedMessage(run2), 110, "")));
+  lines.push("", `${tone(overallLine(run2))} \xB7 exit ${run2.exit_code}`);
+  if (run2.checks.some((x) => x.corrected) && !opts.verbose) lines.push(c.dim("Corrected params / text: --verbose, --json, or the job summary in GitHub Actions."));
+  lines.push(c.dim(run2.disclaimer));
+  return lines;
+}
+function annotations(run2) {
+  const out = [];
+  for (const x of run2.checks) {
+    const alerts = x.alerts ?? [];
+    const level = x.status === "fail" || x.status === "error" ? "error" : x.status === "needs_review" ? run2.strict || x.blocking ? "error" : "warning" : alerts.length ? "warning" : void 0;
+    if (!level) continue;
+    const props = [`file=${escProp(x.target.file)}`, ...x.target.line ? [`line=${x.target.line}`] : [], `title=${escProp(`Checkbox: ${x.name} \u2014 ${x.label}`)}`];
+    const body = x.status === "error" ? x.fix ? `${x.message ?? ""}
+${x.fix}` : `Could not run: ${x.message ?? ""}` : [x.status === "pass" && !x.fix ? "" : x.fix ?? x.label, ...x.fixes.slice(1, 4).map((f) => `\u2022 ${f}`), ...alerts.map((a) => `Warning: ${a}`), x.corrected ? `${x.corrected.title}: see the job summary.` : ""].filter(Boolean).join("\n");
+    out.push(`::${level} ${props.join(",")}::${escData(body)}`);
+  }
+  if (run2.status === "skipped") out.push(`::error file=${escProp(run2.config)},title=${escProp("Checkbox: nothing was checked")}::${escData(nothingCheckedMessage(run2))}`);
+  return out;
+}
+function stepSummary(run2) {
+  const lines = [];
+  lines.push("## Checkbox compliance checks", "");
+  const versions = run2.rules_version ? ` \xB7 rules ${run2.rules_version} \xB7 catalog ${run2.catalog_version}` : "";
+  lines.push(`**${overallLine(run2)}** \u2014 \`${run2.config}\` \xB7 ${run2.mode}${versions}`, "");
+  if (run2.status === "skipped") lines.push(`\u274C ${nothingCheckedMessage(run2)}`, "");
+  lines.push("| Check | Status | Fix | File |", "|---|---|---|---|");
+  for (const x of run2.checks) {
+    const fix0 = x.status === "error" || x.status === "skipped" ? [x.message, x.fix].filter(Boolean).join(" ") : x.fix ? `${x.fix}${x.fixes.length > 1 ? ` (+${x.fixes.length - 1} more)` : ""}` : x.status === "needs_review" && x.message ? x.message : "";
+    const fix = [fix0, ...(x.alerts ?? []).map((a) => `\u26A0\uFE0F ${a}`)].filter(Boolean).join("\n");
+    lines.push(`| ${STATUS_MD[x.status]} ${cell(x.name)}<br><sub>${TYPE_LABEL[x.type]}</sub> | ${cell(x.label)} | ${cell(fix)} | \`${cell(where(x))}\` |`);
+  }
+  const detailed = run2.checks.filter((x) => x.corrected || x.fixes.length > 1);
+  for (const x of detailed) {
+    lines.push("", `<details><summary><b>${escapeHtml(x.name)}</b>: ${escapeHtml(x.corrected ? x.corrected.title.toLowerCase() : `${x.fixes.length} fixes`)}</summary>`, "");
+    if (x.fixes.length) lines.push(...x.fixes.map((f) => `- ${f}`), "");
+    if (x.corrected) {
+      const fence = x.corrected.body.includes("```") ? "````" : "```";
+      lines.push(`${fence}${x.corrected.format === "json" ? "json" : "text"}`, x.corrected.body, fence, "");
+    }
+    lines.push("</details>");
+  }
+  lines.push("", `<sub>${run2.disclaimer} Docs: https://checkbox.site/docs/guides/ci</sub>`, "");
+  return lines.join("\n");
+}
+function escapeHtml(s2) {
+  return s2.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+var TYPE_LABEL, where, escData, escProp, cell, STATUS_MD;
+var init_report = __esm({
+  "src/ci/report.ts"() {
     "use strict";
-    WORKFLOW_PATH = ".github/workflows/checkbox.yml";
-    WORKFLOW_YAML = `# Checkbox: automatic-renewal law checks on every pull request (https://checkbox.site/docs/guides/ci).
+    init_output();
+    init_runner();
+    TYPE_LABEL = {
+      stripe_checkout: "Stripe Checkout",
+      disclosure: "Disclosure",
+      page: "Page",
+      email: "Email",
+      notice_schedule: "Notice schedule"
+    };
+    where = (c) => `${c.target.file}${c.target.line && c.target.line > 1 ? `:${c.target.line}` : ""}`;
+    escData = (s2) => s2.replace(/%/g, "%25").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
+    escProp = (s2) => escData(s2).replace(/:/g, "%3A").replace(/,/g, "%2C");
+    cell = (s2) => s2.replace(/\|/g, "\\|").replace(/\r?\n/g, "<br>");
+    STATUS_MD = { pass: "\u2705", fail: "\u274C", needs_review: "\u26A0\uFE0F", error: "\u274C", skipped: "\u23ED\uFE0F", not_applicable: "\u2796" };
+  }
+});
+
+// src/commands/plan/lib.ts
+import { dirname as dirname6, resolve as resolve6 } from "node:path";
+async function resolveSite(ctx, flag, client) {
+  const explicit = flag ?? ctx.env.CHECKBOX_SITE;
+  if (explicit) {
+    if (!SITE_RE.test(explicit) && !/^[0-9a-f-]{36}$/i.test(explicit)) throw new UsageError(`--site must be a site id (site_\u2026), got "${explicit}"`);
+    return explicit;
+  }
+  const projects = ctx.config.load().init?.projects ?? {};
+  for (let dir = resolve6(ctx.cwd); ; dir = dirname6(dir)) {
+    const site = projects[dir]?.site;
+    if (site) return site;
+    if (dirname6(dir) === dir) break;
+  }
+  const list2 = await client.sdk.sites.list({ limit: 3 });
+  const sites = list2?.data ?? [];
+  if (sites.length === 1) return sites[0].id;
+  throw new UsageError(
+    sites.length ? `This account has several sites; pass --site <id> (e.g. ${sites.map((s2) => s2.id).join(", ")}) or set CHECKBOX_SITE.` : "No site yet: run `checkbox init` in your project first (it creates the site and remembers it here)."
+  );
+}
+function nextLine(n) {
+  const text = n.description ?? n.message ?? n.type;
+  return `${text}${n.command ? `
+      $ ${n.command}` : n.endpoint ? `
+      ${n.endpoint}` : ""}`;
+}
+function renderPlan(p, c, opts = {}) {
+  const head = `${c.bold(`Compliance plan ${p.site}`)} \u2014 ${p.compliance?.label ? p.status === "compliant" ? c.green(p.compliance.label) : p.status === "action_required" ? c.red(p.compliance.label) : c.yellow(p.compliance.label) : statusColor(p.status, c)}`;
+  const tasks = opts.all ? p.tasks : p.tasks.filter((t) => t.status !== "done" && t.status !== "wont_fix");
+  const lines = [head, p.summary, ""];
+  for (const t of tasks) {
+    lines.push(`${STATUS_MARK[t.status] ?? "[ ]"} ${String(t.order).padStart(2)}. ${t.title} ${c.dim(`(${t.priority}, ${t.id})`)}`);
+    if (t.status === "manual" && t.next_action?.type === "ask_human_to_confirm") lines.push(`        ${c.yellow("waiting for the human to confirm:")} ${t.next_action.description}`);
+    else if (t.status === "manual" && t.question) lines.push(`        ${c.yellow("ask the human:")} ${t.question.text}  ${c.dim(`\u2192 checkbox answer ${t.id} <${t.question.options?.join("|") ?? "yes|no"}>`)}`);
+    else if ((t.status === "done" || t.status === "wont_fix") && t.closed_reason) lines.push(c.dim(`        closed: ${t.closed_reason.replace(/_/g, " ")}`));
+    else if (t.blocked_by.length) lines.push(c.dim(`        after ${t.blocked_by.join(", ")}`));
+    else if (t.status === "open" || t.status === "in_progress") lines.push(c.dim(`        ${t.where.file_hint ?? t.where.url ?? t.where.stripe_object ?? t.where.kind} \xB7 ${t.change.type} \xB7 checkbox fix ${t.id}`));
+  }
+  const hidden = p.tasks.length - tasks.length;
+  if (hidden) lines.push(c.dim(`   \u2026 ${hidden} done / declined (--all to show)`));
+  lines.push("", `${c.cyan("next")}  ${nextLine(p.next_action)}`);
+  return lines;
+}
+function statusColor(s2, c) {
+  return s2 === "compliant" ? c.green("all observed checks passing") : s2 === "action_required" ? c.red(s2) : c.yellow(s2);
+}
+function renderVerification(v, c) {
+  const mark = v.status === "passed" ? c.green("passed") : v.status === "failed" ? c.red("failed") : v.status === "passed_with_gaps" ? c.yellow("passed with gaps (not verified)") : v.status === "passed_with_notes" ? c.yellow("passed with notes (a check outside your control needs review)") : v.status === "not_checked" ? c.yellow("not checked yet (missing evidence, nothing to change)") : v.status === "pending_live_check" ? c.yellow("live check pending (content passes; waiting for a real send)") : c.yellow("pending");
+  const firstCheck = !v.task && v.next_action?.type === "first_check_complete";
+  const lines = [`${c.bold(`Verification ${v.id}`)}${v.task ? ` for ${v.task}` : ""}: ${firstCheck ? c.cyan("first check complete") : mark} (${v.method})`];
+  if (v.precheck) lines.push(`  pre-check (${v.precheck.source}): ${v.precheck.verdict} \u2014 ${v.precheck.note}`);
+  if (v.scan) lines.push(c.dim(`  confirming scan ${v.scan}`));
+  for (const d of v.diff.slice(0, 12)) lines.push(`  ${d.observed === "fail" ? c.red("\u2717") : c.yellow("?")} ${d.check_id}: expected ${d.expected}, observed ${d.observed} \u2014 ${d.detail}`);
+  if (v.diff.length > 12) lines.push(c.dim(`  \u2026 ${v.diff.length - 12} more`));
+  lines.push(`${c.cyan("next")}  ${nextLine(v.next_action)}`);
+  return lines;
+}
+var SITE_RE, STATUS_MARK;
+var init_lib = __esm({
+  "src/commands/plan/lib.ts"() {
+    "use strict";
+    init_args();
+    SITE_RE = /^site_[0-9a-f]{32}$/;
+    STATUS_MARK = { open: "[ ]", in_progress: "[~]", verifying: "[?]", done: "[x]", wont_fix: "[-]", manual: "[!]" };
+  }
+});
+
+// src/ci/workflow.ts
+import { execFileSync } from "node:child_process";
+import { existsSync as existsSync7, readFileSync as readFileSync9 } from "node:fs";
+import { join as join8 } from "node:path";
+function workflowYaml(needs = {}) {
+  const node = !!(needs.install || needs.build);
+  const steps = ["      - uses: actions/checkout@v4"];
+  if (node) {
+    steps.push("      - uses: actions/setup-node@v4", "        with:", "          node-version: 20");
+    if (needs.install) steps.push(`      # ${needs.why?.install ?? 'checkbox.json "module" entries import your code and its dependencies.'}`, `      - run: ${needs.install}`);
+    if (needs.build) steps.push(`      # ${needs.why?.build ?? 'checkbox.json "pages" read built HTML, which a fresh clone does not have.'}`, `      - run: ${needs.build}`);
+  } else {
+    steps.push('      # Only needed when checkbox.json uses "module" entries that import your dependencies:', "      # - run: npm ci");
+  }
+  steps.push("      - uses: checkbox-site/checkbox@v1", "        # with:", "        #   strict: true          # also fail when a check needs review");
+  if (needs.urlPages) {
+    steps.push(
+      '        #   args: --online        # "url" pages are fetched by the API: needs a LIVE key (ck_live_\u2026) on an',
+      '        #                         # activated account. Without one, list the built page as "file" instead.'
+    );
+  } else steps.push("        #   args: --online        # URL pages via the API; needs the env below");
+  steps.push("        # env:", "        #   CHECKBOX_SECRET_KEY: ${{ secrets.CHECKBOX_SECRET_KEY }}");
+  return `# Checkbox: automatic-renewal law checks on every pull request (https://checkbox.site/docs/guides/ci).
 # Runs the checks listed in checkbox.json with the Checkbox rules engine, offline (no key, no network), annotates the
 # lines that need a fix and writes a summary with the corrected params / text to the job page.
 name: Checkbox
@@ -28449,35 +29103,85 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
-      # Only needed when checkbox.json uses "module" entries that import your dependencies:
-      # - run: npm ci
-      - uses: checkbox-site/checkbox@v1
-        # with:
-        #   strict: true          # also fail when a check needs review
-        #   args: --online        # URL pages via the API; needs the env below
-        # env:
-        #   CHECKBOX_SECRET_KEY: \${{ secrets.CHECKBOX_SECRET_KEY }}
+${steps.join("\n")}
 `;
+}
+function installCommand(root) {
+  if (existsSync7(join8(root, "pnpm-lock.yaml"))) return "corepack enable && pnpm install --frozen-lockfile";
+  if (existsSync7(join8(root, "yarn.lock"))) return "corepack enable && yarn install --immutable";
+  if (existsSync7(join8(root, "bun.lockb")) || existsSync7(join8(root, "bun.lock"))) return "npx --yes bun install --frozen-lockfile";
+  if (existsSync7(join8(root, "package-lock.json")) || existsSync7(join8(root, "npm-shrinkwrap.json"))) return "npm ci";
+  return "npm install";
+}
+function runScript(root, script) {
+  if (existsSync7(join8(root, "pnpm-lock.yaml"))) return `pnpm run ${script}`;
+  if (existsSync7(join8(root, "yarn.lock"))) return `yarn run ${script}`;
+  return `npm run ${script}`;
+}
+function notInClone(root, files) {
+  if (!files.length) return [];
+  let tracked = null;
+  try {
+    const out = execFileSync("git", ["ls-files", "-z", "--", ...files], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3 });
+    tracked = new Set(out.split("\0").filter(Boolean));
+  } catch {
+    tracked = null;
+  }
+  return files.filter((f) => tracked ? !tracked.has(f.replace(/^\.\//, "")) : !existsSync7(join8(root, f)));
+}
+function workflowNeeds(root, config) {
+  const checks = config.checks ?? {};
+  const list2 = (k) => Array.isArray(checks[k]) ? checks[k] : [];
+  const modules = [...list2("stripe_checkout"), ...list2("emails"), ...list2("disclosures")].some((e) => typeof e.module === "string" && !!e.module);
+  const pageFiles = list2("pages").flatMap((e) => typeof e.file === "string" && !e.file.startsWith("TODO") ? [e.file] : []);
+  const urlPages = list2("pages").some((e) => typeof e.url === "string");
+  let pkg = null;
+  try {
+    pkg = JSON.parse(readFileSync9(join8(root, "package.json"), "utf8"));
+  } catch {
+    pkg = null;
+  }
+  const built = notInClone(root, pageFiles);
+  const buildScript = pkg?.scripts?.build ? "build" : void 0;
+  const needs = { why: {} };
+  if (built.length && buildScript) {
+    needs.build = runScript(root, buildScript);
+    needs.why.build = `checkbox.json "pages" read ${built.slice(0, 2).join(", ")}${built.length > 2 ? ", \u2026" : ""}, built here (not in git).`;
+  }
+  if (pkg && (modules || needs.build)) {
+    needs.install = installCommand(root);
+    needs.why.install = modules ? 'checkbox.json "module" entries import your code and its dependencies.' : "The build needs your dependencies.";
+  }
+  if (urlPages) needs.urlPages = true;
+  return needs;
+}
+var WORKFLOW_PATH, WORKFLOW_YAML;
+var init_workflow = __esm({
+  "src/ci/workflow.ts"() {
+    "use strict";
+    WORKFLOW_PATH = ".github/workflows/checkbox.yml";
+    WORKFLOW_YAML = workflowYaml();
   }
 });
 
 // src/commands/ci/index.ts
 var ci_exports = {};
 __export(ci_exports, {
+  attachSiteForCoupons: () => attachSiteForCoupons,
+  couponIdsIn: () => couponIdsIn,
   default: () => ci_default,
   touchesConfig: () => touchesConfig,
   undiffableInputs: () => undiffableInputs
 });
-import { execFileSync } from "node:child_process";
-import { appendFileSync, existsSync as existsSync6, mkdirSync as mkdirSync2, realpathSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { appendFileSync, existsSync as existsSync8, mkdirSync as mkdirSync2, realpathSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { createInterface } from "node:readline";
-import { dirname as dirname4, join as join8, relative as relative5, resolve as resolve5 } from "node:path";
+import { dirname as dirname7, join as join9, relative as relative5, resolve as resolve7 } from "node:path";
 function gitChanged(cwd, base) {
   try {
-    const root = execFileSync("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
-    const out = execFileSync("git", ["diff", "--name-only", `${base}...HEAD`], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
-    return { root, files: out.split("\n").map((l) => l.trim()).filter(Boolean).map((f) => resolve5(root, f)) };
+    const root = execFileSync2("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+    const out = execFileSync2("git", ["diff", "--name-only", `${base}...HEAD`], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+    return { root, files: out.split("\n").map((l) => l.trim()).filter(Boolean).map((f) => resolve7(root, f)) };
   } catch (err) {
     const msg2 = String(err.stderr || err.message).trim().split("\n")[0];
     return `git diff ${base}...HEAD failed (${msg2}); fetch the base branch (actions/checkout with fetch-depth: 0)`;
@@ -28487,13 +29191,13 @@ function undiffableInputs(loaded, jobs, gitRoot) {
   const need = [];
   const out = [];
   for (const e of loaded.config.checks.pages ?? []) {
-    if (e.source) need.push({ path: resolve5(loaded.dir, e.source), label: `pages "${e.name}" source ${e.source}` });
+    if (e.source) need.push({ path: resolve7(loaded.dir, e.source), label: `pages "${e.name}" source ${e.source}` });
     else if (e.url) out.push(`pages "${e.name}" is a URL with no "source" file to diff`);
-    else if (e.file) need.push({ path: resolve5(loaded.dir, e.file), label: `pages "${e.name}" file ${e.file}` });
+    else if (e.file) need.push({ path: resolve7(loaded.dir, e.file), label: `pages "${e.name}" file ${e.file}` });
   }
   for (const j of jobs) {
     if (j.type === "page") continue;
-    for (const f of j.inputs) need.push({ path: resolve5(loaded.dir, f), label: `"${j.name}" reads ${f}` });
+    for (const f of j.inputs) need.push({ path: resolve7(loaded.dir, f), label: `"${j.name}" reads ${f}` });
   }
   if (!need.length) return out;
   const real = (p) => {
@@ -28508,8 +29212,8 @@ function undiffableInputs(loaded, jobs, gitRoot) {
   let tracked;
   try {
     const rels = [...new Set(need.map((n) => relative5(gitRoot, n.path)))];
-    const listed = execFileSync("git", ["ls-files", "-z", "--", ...rels], { cwd: gitRoot, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
-    tracked = new Set(listed.split("\0").filter(Boolean).map((f) => resolve5(gitRoot, f)));
+    const listed = execFileSync2("git", ["ls-files", "-z", "--", ...rels], { cwd: gitRoot, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+    tracked = new Set(listed.split("\0").filter(Boolean).map((f) => resolve7(gitRoot, f)));
   } catch (err) {
     return `git ls-files failed (${String(err.stderr || err.message).trim().split("\n")[0]})`;
   }
@@ -28521,7 +29225,7 @@ function touchesConfig(loaded, jobs, changed) {
   if (set.has(loaded.path)) return true;
   const codeChanged = changed.some((f) => /\.(?:[cm]?[jt]sx?)$/.test(f));
   for (const j of jobs) {
-    for (const f of j.inputs) if (set.has(resolve5(loaded.dir, f))) return true;
+    for (const f of j.inputs) if (set.has(resolve7(loaded.dir, f))) return true;
   }
   const hasModules = [...loaded.config.checks.stripe_checkout ?? [], ...loaded.config.checks.emails ?? []].some((e) => "module" in e && e.module);
   return hasModules && codeChanged;
@@ -28546,15 +29250,26 @@ async function runInit(ctx, argv) {
   const p = parseArgs(argv, { boolean: ["yes", "force", "dry-run", "workflow"], string: ["config"], alias: { y: "yes" } });
   if (p.positionals.length) throw new UsageError(`Unexpected argument "${p.positionals[0]}"`);
   const explicit = str(p.flags, "config");
-  const configPath = explicit ? resolve5(ctx.cwd, explicit) : CONFIG_FILES.map((f) => join8(ctx.cwd, f)).find((f) => existsSync6(f)) ?? join8(ctx.cwd, CONFIG_FILES[0]);
-  const workflowPath = join8(ctx.cwd, WORKFLOW_PATH);
+  const configPath = explicit ? resolve7(ctx.cwd, explicit) : CONFIG_FILES.map((f) => join9(ctx.cwd, f)).find((f) => existsSync8(f)) ?? join9(ctx.cwd, CONFIG_FILES[0]);
+  const workflowPath = join9(ctx.cwd, WORKFLOW_PATH);
   const force = bool(p.flags, "force") === true;
   const withWorkflow = bool(p.flags, "workflow") !== false;
-  const s2 = scaffoldConfig(ctx.cwd, ctx.env);
-  const actionFor = (f) => existsSync6(f) ? force ? "overwrite" : "keep" : "create";
+  const projects = ctx.config.load().init?.projects ?? {};
+  let facts = {};
+  for (let dir = resolve7(ctx.cwd); ; dir = dirname7(dir)) {
+    if (projects[dir]?.facts) {
+      facts = projects[dir].facts;
+      break;
+    }
+    if (dirname7(dir) === dir) break;
+  }
+  const s2 = scaffoldConfig(ctx.cwd, ctx.env, facts);
+  const actionFor = (f) => existsSync8(f) ? force ? "overwrite" : "keep" : "create";
   const files = [{ path: configPath, content: `${JSON.stringify(s2.config, null, 2)}
 `, action: actionFor(configPath) }];
-  if (withWorkflow) files.push({ path: workflowPath, content: WORKFLOW_YAML, action: actionFor(workflowPath) });
+  const needs = workflowNeeds(ctx.cwd, s2.config);
+  const workflowSteps = [...needs.install ? [needs.install] : [], ...needs.build ? [needs.build] : []];
+  if (withWorkflow) files.push({ path: workflowPath, content: workflowYaml(needs), action: actionFor(workflowPath) });
   const toWrite = files.filter((f) => f.action !== "keep");
   const dry = bool(p.flags, "dry-run") === true;
   let write = !dry && toWrite.length > 0;
@@ -28566,7 +29281,7 @@ async function runInit(ctx, argv) {
   }
   if (write) {
     for (const f of toWrite) {
-      mkdirSync2(dirname4(f.path), { recursive: true });
+      mkdirSync2(dirname7(f.path), { recursive: true });
       writeFileSync2(f.path, f.content);
     }
   }
@@ -28577,6 +29292,7 @@ async function runInit(ctx, argv) {
     kept: files.filter((f) => f.action === "keep").map((f) => relName(f.path)),
     ...write ? {} : { would_write: toWrite.map((f) => relName(f.path)) },
     found: s2.found,
+    ...withWorkflow ? { workflow_steps: workflowSteps } : {},
     todos: s2.todos,
     config: s2.config,
     next_action: s2.todos.length ? { type: "edit_config", message: `Fill in the ${s2.todos.length} TODO item(s) in ${relName(configPath)} (checkbox ci refuses TODO values), then run \`checkbox ci\` and fix what it reports.` } : { type: "run_ci", message: "Run `checkbox ci` locally, fix what it reports, then commit checkbox.json and the workflow." }
@@ -28586,6 +29302,8 @@ async function runInit(ctx, argv) {
     for (const f of files) lines.push(`${f.action === "keep" ? ctx.out.c.dim("kept   ") : write ? ctx.out.c.green(f.action === "create" ? "created" : "wrote  ") : ctx.out.c.yellow("would write")} ${relName(f.path)}${f.action === "keep" ? ctx.out.c.dim(" (exists; --force overwrites)") : ""}`);
     if (!write && toWrite.length && !dry) lines.push(ctx.out.c.dim("Nothing written: add --yes to write without asking."));
     if (s2.found.length) lines.push("", "Found:", ...s2.found.map((f) => `  - ${f}`));
+    if (withWorkflow && workflowSteps.length) lines.push("", `The workflow runs ${workflowSteps.map((c) => `\`${c}\``).join(" and ")} before the checks, so they work on a fresh clone.`);
+    if (needs.urlPages) lines.push("", 'Note: "url" pages are fetched by the API (checkbox ci --online), which needs a LIVE key (ck_live_\u2026) on an activated account. Without one, list the built page as "file".');
     if (s2.todos.length) lines.push("", "To do:", ...s2.todos.map((t) => `  - ${t}`));
     lines.push("", `${ctx.out.c.cyan("Next:")} ${result.next_action.message}`);
     if (!write) lines.push("", ctx.out.c.dim(`${relName(configPath)}:`), ...JSON.stringify(s2.config, null, 2).split("\n").map((l) => ctx.out.c.dim(`  ${l}`)));
@@ -28593,7 +29311,37 @@ async function runInit(ctx, argv) {
   });
   return EXIT.ok;
 }
-var HELP2, ci_default;
+async function readNotices(ctx, client, siteFlag) {
+  let site;
+  try {
+    site = await resolveSite(ctx, siteFlag, client);
+  } catch (err) {
+    return { error: `${err.message} checkbox.json says Checkbox Notices sends emails; --online checks that against the site's Notice settings once it knows the site (--site or CHECKBOX_SITE).` };
+  }
+  try {
+    const s2 = await client.sdk.noticeSettings.retrieve(site);
+    return { site, mode: s2.mode, enabled: (s2.enabled_kinds ?? []).map((k) => NOTICE_KIND_TO_EMAIL[k] ?? k), real_sends: s2.real_sends };
+  } catch (err) {
+    return { error: `Could not read the Notice settings of ${site} (${err.message}).` };
+  }
+}
+async function attachSiteForCoupons(ctx, client, jobs, siteFlag) {
+  const withCoupon = jobs.filter((j) => j.type === "stripe_checkout" && j.body && couponIdsIn(j.body.params).length);
+  if (!withCoupon.length) return;
+  let site;
+  try {
+    site = await resolveSite(ctx, siteFlag, client);
+  } catch (err) {
+    for (const j of withCoupon) j.warnings.push(`The coupon was not read from Stripe: ${err.message} --online reads it through the site's connected Stripe key once it knows the site (--site or CHECKBOX_SITE).`);
+    return;
+  }
+  for (const j of withCoupon) j.body = { ...j.body, site };
+}
+function couponIdsIn(params) {
+  const discounts = params?.discounts;
+  return (Array.isArray(discounts) ? discounts : []).flatMap((d) => d && typeof d === "object" && typeof d.coupon === "string" ? [d.coupon] : []);
+}
+var HELP2, NOTICE_KIND_TO_EMAIL, ci_default;
 var init_ci = __esm({
   "src/commands/ci/index.ts"() {
     "use strict";
@@ -28603,6 +29351,8 @@ var init_ci = __esm({
     init_inputs();
     init_report();
     init_runner();
+    init_run();
+    init_lib();
     init_scaffold();
     init_workflow();
     init_types2();
@@ -28611,7 +29361,10 @@ var init_ci = __esm({
       "",
       "Flags:",
       "  --config <path>     Config file (default: checkbox.json, then .checkbox.json)",
-      "  --online            Use the API (CHECKBOX_SECRET_KEY / CHECKBOX_API_KEY): URL pages and site-aware checks",
+      "  --online            Use the API (CHECKBOX_SECRET_KEY / CHECKBOX_API_KEY): URL pages (these need a live-mode",
+      '                      key on an activated account; with a test key list the built page as "file") and site-aware checks;',
+      `                      with "notices" in checkbox.json, also checks that the site's Checkbox Notices really send them`,
+      "  --site <site_\u2026>     The site for --online (default: $CHECKBOX_SITE, the site `checkbox init` saved, or the only one)",
       '  --strict            "Needs review" fails too (exit 2)',
       "  --changed-only      Skip when no file the config reads changed (git diff against --base, or",
       "                      origin/$GITHUB_BASE_REF in a pull request). Never skips while a page or file it reads",
@@ -28625,15 +29378,18 @@ var init_ci = __esm({
       "",
       "Exit: 0 pass (or needs review without --strict) \xB7 1 a check needs a fix \xB7 2 needs review with --strict, or a",
       "      page / disclosure with no renewal terms to judge, a checkout whose coupon / trial is not verified, or a",
-      '      checkout entry with "strict": true that needs review \xB7',
+      '      checkout entry with "strict": true that needs review, or nothing was checked (every check skipped or',
+      "      not applicable, e.g. url pages without --online) \xB7",
       "      3 config / usage error \xB7 4 auth (--online) \xB7 5 API or network error",
       "",
       "checkbox ci init [--yes] [--force] [--dry-run] [--no-workflow]",
       '  Writes checkbox.json from the project (Stripe Checkout calls, plans, email templates, pages; "TODO" where it',
-      "  cannot tell) and .github/workflows/checkbox.yml. Asks first on a terminal; --yes writes without asking (agents).",
+      '  cannot tell) and .github/workflows/checkbox.yml (with the install and build steps a fresh clone needs for "module"',
+      "  entries and built pages). Asks first on a terminal; --yes writes without asking (agents).",
       "",
       "Docs: https://checkbox.site/docs/guides/ci"
     ].join("\n");
+    NOTICE_KIND_TO_EMAIL = { trial_ending: "trial_reminder" };
     ci_default = defineCommand({
       name: "ci",
       summary: "Run the checks in checkbox.json (CI: annotations + job summary); `ci init` scaffolds the config and workflow",
@@ -28641,7 +29397,7 @@ var init_ci = __esm({
       help: HELP2,
       async run(ctx) {
         if (ctx.argv[0] === "init") return runInit(ctx, ctx.argv.slice(1));
-        const p = parseArgs(ctx.argv, { boolean: ["online", "offline", "strict", "verbose", "changed-only"], string: ["config", "base"] });
+        const p = parseArgs(ctx.argv, { boolean: ["online", "offline", "strict", "verbose", "changed-only"], string: ["config", "base", "site"] });
         if (p.positionals.length) throw new UsageError(`Unexpected argument "${p.positionals[0]}" (did you mean \`checkbox ci init\`?)`);
         const gha = ctx.env.GITHUB_ACTIONS === "true";
         const strict = bool(p.flags, "strict") === true;
@@ -28672,7 +29428,7 @@ var init_ci = __esm({
         const workspace = ctx.env.GITHUB_WORKSPACE ?? ctx.cwd;
         const extra = (loaded.config.coverage === false ? [] : coverageResults(coverageOf(loaded, loaded.dir))).map((r) => ({
           ...r,
-          target: { ...r.target, file: relative5(workspace, join8(loaded.dir, r.target.file)).split("\\").join("/") || r.target.file }
+          target: { ...r.target, file: relative5(workspace, join9(loaded.dir, r.target.file)).split("\\").join("/") || r.target.file }
         }));
         if (bool(p.flags, "changed-only")) {
           const base = str(p.flags, "base") ?? (ctx.env.GITHUB_BASE_REF ? `origin/${ctx.env.GITHUB_BASE_REF}` : void 0);
@@ -28698,8 +29454,22 @@ ${message}
             }
           }
         }
-        const engine = online ? onlineEngine(ctx.client()) : offlineEngine();
-        const run2 = await runCi(jobs, engine, { config: loaded.config, configPath: configName, strict, extra });
+        let client;
+        if (online) {
+          try {
+            client = ctx.client();
+          } catch (err) {
+            if (!(err instanceof NotLoggedInError)) throw err;
+            if (gha) emit("::error title=Checkbox::--online needs CHECKBOX_SECRET_KEY. Add it as a repository secret, or drop --online (checkbox ci runs offline without a key).");
+            ctx.out.error({ message: `${err.message}`, code: "not_logged_in", type: "authentication_error", next_action: { type: "set_key", message: "--online needs an API key: set CHECKBOX_SECRET_KEY (a repository secret in GitHub Actions), or drop --online: checkbox ci runs offline with no key." } });
+            return EXIT.auth;
+          }
+        }
+        if (client) await attachSiteForCoupons(ctx, client, jobs, str(p.flags, "site"));
+        const engine = client ? onlineEngine(client) : offlineEngine();
+        const notices = client && declaredByCheckbox(loaded.config).length ? await readNotices(ctx, client, str(p.flags, "site")) : void 0;
+        const noticesLine = Math.max(1, loaded.raw.split("\n").findIndex((l) => l.includes('"sent_by_checkbox"')) + 1);
+        const run2 = await runCi(jobs, engine, { config: loaded.config, configPath: configName, strict, extra, ...notices ? { notices, noticesTarget: { file: relative5(workspace, path).split("\\").join("/") || configName, line: noticesLine } } : {} });
         ctx.out.result(run2, () => renderHuman(run2, ctx.out.c, { verbose: bool(p.flags, "verbose") === true }));
         if (gha) {
           for (const a of annotations(run2)) emit(a);
@@ -28931,8 +29701,8 @@ var init_patch = __esm({
 });
 
 // src/commands/plan/fix.ts
-import { existsSync as existsSync7, readFileSync as readFileSync9, writeFileSync as writeFileSync3 } from "node:fs";
-import { relative as relative6, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync10, writeFileSync as writeFileSync3 } from "node:fs";
+import { relative as relative6, resolve as resolve8 } from "node:path";
 function fixForTask(task, cwd, file) {
   const base = {
     object: "task_fix",
@@ -28944,12 +29714,12 @@ function fixForTask(task, cwd, file) {
     verify: task.verify
   };
   const verifyCmd = `checkbox verify ${task.id} --wait`;
-  const candidate = file ?? (task.where.file_hint && existsSync7(resolve6(cwd, task.where.file_hint)) ? task.where.file_hint : void 0);
+  const candidate = file ?? (task.where.file_hint && existsSync9(resolve8(cwd, task.where.file_hint)) ? task.where.file_hint : void 0);
   if (task.change.type === "patch" && task.change.edits.length && candidate) {
-    const path = resolve6(cwd, candidate);
+    const path = resolve8(cwd, candidate);
     let src;
     try {
-      src = readFileSync9(path, "utf8");
+      src = readFileSync10(path, "utf8");
     } catch (err) {
       throw new UsageError(`Cannot read ${candidate}: ${err.code ?? err.message}`);
     }
@@ -29009,7 +29779,7 @@ var init_fix = __esm({
         const task = await ctx.client().sdk.tasks.retrieve(id);
         const result = fixForTask(task, ctx.cwd, str(flags, "file"));
         const out = str(flags, "out");
-        if (out && result.diff) writeFileSync3(resolve6(ctx.cwd, out), result.diff);
+        if (out && result.diff) writeFileSync3(resolve8(ctx.cwd, out), result.diff);
         ctx.out.result({ ...result, task_object: task }, () => {
           const c = ctx.out.c;
           const lines = [`${c.bold(task.title)} ${c.dim(`(${task.priority}, ${task.id})`)}`, c.dim(`${task.requirement.citation}`), task.why, ""];
@@ -29111,12 +29881,12 @@ var init_device = __esm({
 });
 
 // src/commands/init/patch.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync10, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname5, join as join9 } from "node:path";
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname8, join as join10 } from "node:path";
 function read(root, rel2) {
   try {
-    return readFileSync10(join9(root, rel2), "utf8");
+    return readFileSync11(join10(root, rel2), "utf8");
   } catch {
     return null;
   }
@@ -29294,7 +30064,7 @@ function mask(v) {
 }
 function isGitTracked(root, file) {
   try {
-    execFileSync2("git", ["ls-files", "--error-unmatch", "--", file], { cwd: root, stdio: "ignore", timeout: 5e3 });
+    execFileSync3("git", ["ls-files", "--error-unmatch", "--", file], { cwd: root, stdio: "ignore", timeout: 5e3 });
     return true;
   } catch {
     return false;
@@ -29311,7 +30081,7 @@ function planGitignore(d) {
     const covered = lines.some((l) => l === env2 || l === `/${env2}` || l === ".env*" || l === "*.env" || env2 === ".env.local" && (l === ".env*.local" || l === "*.local" || l === ".env.local*") || env2 === ".env" && l === ".env*");
     if (covered) return null;
   }
-  if (existing === null && !existsSync8(join9(d.root, ".git"))) return null;
+  if (existing === null && !existsSync10(join10(d.root, ".git"))) return null;
   const text = `${existing ?? ""}${existing && !existing.endsWith("\n") ? "\n" : ""}# Checkbox keys (checkbox init)
 ${env2}
 `;
@@ -29327,8 +30097,8 @@ function planWellKnown(d, token) {
 }
 function applyChange(root, c) {
   if (c.action === "unchanged" || c.contents === void 0) return;
-  const abs = join9(root, c.file);
-  mkdirSync3(dirname5(abs), { recursive: true });
+  const abs = join10(root, c.file);
+  mkdirSync3(dirname8(abs), { recursive: true });
   writeFileSync4(abs, c.contents, c.file.startsWith(".env") ? { mode: 384 } : void 0);
 }
 var MARK_START, MARK_END, NEXT_DOCUMENT, NUXT_PLUGIN;
@@ -29375,8 +30145,8 @@ __export(init_exports, {
   parsePlanFlag: () => parsePlanFlag,
   syncCheckoutConfigs: () => syncCheckoutConfigs
 });
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync11 } from "node:fs";
+import { join as join11 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline";
 function loadState(ctx, root) {
   const cfg = ctx.config.load().init ?? {};
@@ -29396,7 +30166,7 @@ function saveState(ctx, root, patch) {
 async function ask2(question) {
   const rl = createInterface2({ input: process.stdin, output: process.stderr, terminal: true });
   try {
-    return await new Promise((resolve9) => rl.question(question, resolve9));
+    return await new Promise((resolve10) => rl.question(question, resolve10));
   } finally {
     rl.close();
   }
@@ -29474,7 +30244,7 @@ async function syncCheckoutConfigs(client, site, sessions, root) {
     const from = configFileOf(c.name);
     if (!from) continue;
     const sameFile = perFile.has(from.file);
-    const gone = !sameFile && !existsSync9(join10(root, from.file));
+    const gone = !sameFile && !existsSync11(join11(root, from.file));
     const current = sameFile && from.call !== void 0 && from.call <= perFile.get(from.file) && c.name === configNameOf(from.file, from.call);
     if (!sameFile && !gone || current) continue;
     if (await client.sdk.stripeCheckoutConfigs.del(c.id).then(() => true, () => false)) {
@@ -29514,6 +30284,7 @@ function detectionSummary(d, siteUrl) {
     pay_buttons: d.payButtons.map((c) => ({ file: c.file, line: c.line })),
     checkout_sessions: d.checkoutSessions.map((s2) => ({ file: s2.file, line: s2.line, readable: !!s2.params, unresolved: s2.unresolved })),
     stripe_test_key: d.stripeTestKey ? { hint: d.stripeTestKey.hint, source: d.stripeTestKey.source, restricted: d.stripeTestKey.restricted } : null,
+    ...d.stripeKeyRefused ? { stripe_key_refused: { ...d.stripeKeyRefused, message: stripeKeyRefusedMessage(d.stripeKeyRefused) } } : {},
     merchant_name: d.brand ?? null,
     plans: d.plans
   };
@@ -29608,7 +30379,7 @@ var init_init = __esm({
         "  3. writes CHECKBOX_SECRET_KEY and the publishable key to .env.local / .env (and git-ignores it)",
         "  4. installs the Checkbox snippet in the root layout (marked with checkbox:snippet comments)",
         "  5. registers the site, Terms / refund / cancellation policy URLs (fetched and checked by Checkbox)",
-        "  6. with your permission, uses the project's Stripe TEST key for a synthetic test subscription",
+        "  6. with your permission, uses the project's Stripe restricted TEST key (rk_test_\u2026; sk_test_ and live keys are refused) for a synthetic test subscription",
         "  7. runs the first checks and prints the next step (`checkbox plan --json`); the human gets the summary email",
         "     when the setup is finished (every check passes, or `checkbox init --complete`)",
         "",
@@ -29804,7 +30575,20 @@ var init_init = __esm({
         }
         const policyFromPaths = (kind) => siteUrl && d.policyPaths[kind] ? `${siteUrl}${d.policyPaths[kind]}` : void 0;
         const agent = detectAgent(ctx.env, agentName);
-        const plans = flagPlans ?? (d.plans.length ? d.plans.map(({ source: _source, ...p }) => p) : void 0);
+        let plans = flagPlans ?? (d.plans.length ? d.plans.map(({ source: _source, ...p }) => p) : void 0);
+        if (plans?.length && !planFlag) {
+          let current = null;
+          try {
+            current = await client.sdk.setupSessions.retrieve(sessionId);
+          } catch {
+            current = null;
+          }
+          const saved = Array.isArray(current?.business?.plans) ? current.business.plans : [];
+          if (saved.length) {
+            plans = void 0;
+            out.info(`Kept the ${saved.length} plan${saved.length === 1 ? "" : "s"} already saved for this site (pass --plan to replace ${saved.length === 1 ? "it" : "them"}).`);
+          }
+        }
         const brand = merchantName ?? d.brand?.name;
         const update = {
           ...siteUrl ? { site_url: siteUrl } : {},
@@ -29870,13 +30654,16 @@ var init_init = __esm({
           if (consent && d.stripeTestKey && !session.stripe.test_credential_stored) {
             try {
               await client.sdk.testCredentials.create(site, { type: "stripe_test", secret_key: d.stripeTestKey.key });
-              stripe.test_credential = { stored: true, key: d.stripeTestKey.hint, restricted: d.stripeTestKey.restricted };
-              if (!d.stripeTestKey.restricted) warnings.push(`Stored your full Stripe TEST key (${d.stripeTestKey.hint}) because no restricted key was found. Recommended: create a restricted test key (${session.stripe.restricted_key.create_url}) with ${session.stripe.restricted_key.permissions.map((p) => `${p.resource} ${p.access}`).join(", ")}, put it in STRIPE_RESTRICTED_KEY and run \`checkbox init\` again.`);
+              stripe.test_credential = { stored: true, key: d.stripeTestKey.hint, restricted: true };
             } catch (err) {
               stripe.test_credential = { stored: false, error: err instanceof ApiError ? `${err.code ?? ""} ${err.message}`.trim() : String(err) };
               warnings.push(`Stripe test key not stored: ${stripe.test_credential.error}`);
             }
           }
+          if (!d.stripeTestKey && d.stripeKeyRefused) {
+            stripe.test_credential = { stored: false, refused: d.stripeKeyRefused.kind };
+            warnings.push(stripeKeyRefusedMessage(d.stripeKeyRefused));
+          }
           const configs = await syncCheckoutConfigs(client, site, d.checkoutSessions, root);
           if (configs.length) stripe.checkout_configs = configs;
           const registered = configs.find((c) => c.id);
@@ -29979,10 +30766,11 @@ var init_whoami = __esm({
             object: "whoami",
             key: creds ? maskKey(creds.apiKey) : null,
             key_source: creds?.source ?? null,
+            ...creds?.file ? { key_file: creds.file } : {},
             api_base: client.apiBase,
             account: account.raw
           },
-          () => [describeAccount(account), ctx.out.c.dim(`key ${creds ? maskKey(creds.apiKey) : "?"} from ${creds?.source ?? "?"} \xB7 ${client.apiBase}`)]
+          () => [describeAccount(account), ctx.out.c.dim(`key ${creds ? maskKey(creds.apiKey) : "?"} from ${creds ? describeKeySource(creds, ctx.env) : "?"} \xB7 ${client.apiBase}`)]
         );
         return EXIT.ok;
       }
@@ -29999,7 +30787,7 @@ import { createInterface as createInterface3 } from "node:readline";
 async function prompt(question) {
   const rl = createInterface3({ input: process.stdin, output: process.stderr, terminal: true });
   try {
-    return await new Promise((resolve9) => rl.question(question, resolve9));
+    return await new Promise((resolve10) => rl.question(question, resolve10));
   } finally {
     rl.close();
   }
@@ -30093,74 +30881,6 @@ var init_logout = __esm({
   }
 });
 
-// src/commands/plan/lib.ts
-import { dirname as dirname6, resolve as resolve7 } from "node:path";
-async function resolveSite(ctx, flag, client) {
-  const explicit = flag ?? ctx.env.CHECKBOX_SITE;
-  if (explicit) {
-    if (!SITE_RE.test(explicit) && !/^[0-9a-f-]{36}$/i.test(explicit)) throw new UsageError(`--site must be a site id (site_\u2026), got "${explicit}"`);
-    return explicit;
-  }
-  const projects = ctx.config.load().init?.projects ?? {};
-  for (let dir = resolve7(ctx.cwd); ; dir = dirname6(dir)) {
-    const site = projects[dir]?.site;
-    if (site) return site;
-    if (dirname6(dir) === dir) break;
-  }
-  const list2 = await client.sdk.sites.list({ limit: 3 });
-  const sites = list2?.data ?? [];
-  if (sites.length === 1) return sites[0].id;
-  throw new UsageError(
-    sites.length ? `This account has several sites; pass --site <id> (e.g. ${sites.map((s2) => s2.id).join(", ")}) or set CHECKBOX_SITE.` : "No site yet: run `checkbox init` in your project first (it creates the site and remembers it here)."
-  );
-}
-function nextLine(n) {
-  const text = n.description ?? n.message ?? n.type;
-  return `${text}${n.command ? `
-      $ ${n.command}` : n.endpoint ? `
-      ${n.endpoint}` : ""}`;
-}
-function renderPlan(p, c, opts = {}) {
-  const head = `${c.bold(`Compliance plan ${p.site}`)} \u2014 ${p.compliance?.label ? p.status === "compliant" ? c.green(p.compliance.label) : p.status === "action_required" ? c.red(p.compliance.label) : c.yellow(p.compliance.label) : statusColor(p.status, c)}`;
-  const tasks = opts.all ? p.tasks : p.tasks.filter((t) => t.status !== "done" && t.status !== "wont_fix");
-  const lines = [head, p.summary, ""];
-  for (const t of tasks) {
-    lines.push(`${STATUS_MARK[t.status] ?? "[ ]"} ${String(t.order).padStart(2)}. ${t.title} ${c.dim(`(${t.priority}, ${t.id})`)}`);
-    if (t.status === "manual" && t.next_action?.type === "ask_human_to_confirm") lines.push(`        ${c.yellow("waiting for the human to confirm:")} ${t.next_action.description}`);
-    else if (t.status === "manual" && t.question) lines.push(`        ${c.yellow("ask the human:")} ${t.question.text}  ${c.dim(`\u2192 checkbox answer ${t.id} <${t.question.options?.join("|") ?? "yes|no"}>`)}`);
-    else if ((t.status === "done" || t.status === "wont_fix") && t.closed_reason) lines.push(c.dim(`        closed: ${t.closed_reason.replace(/_/g, " ")}`));
-    else if (t.blocked_by.length) lines.push(c.dim(`        after ${t.blocked_by.join(", ")}`));
-    else if (t.status === "open" || t.status === "in_progress") lines.push(c.dim(`        ${t.where.file_hint ?? t.where.url ?? t.where.stripe_object ?? t.where.kind} \xB7 ${t.change.type} \xB7 checkbox fix ${t.id}`));
-  }
-  const hidden = p.tasks.length - tasks.length;
-  if (hidden) lines.push(c.dim(`   \u2026 ${hidden} done / declined (--all to show)`));
-  lines.push("", `${c.cyan("next")}  ${nextLine(p.next_action)}`);
-  return lines;
-}
-function statusColor(s2, c) {
-  return s2 === "compliant" ? c.green("all observed checks passing") : s2 === "action_required" ? c.red(s2) : c.yellow(s2);
-}
-function renderVerification(v, c) {
-  const mark = v.status === "passed" ? c.green("passed") : v.status === "failed" ? c.red("failed") : v.status === "passed_with_gaps" ? c.yellow("passed with gaps (not verified)") : v.status === "passed_with_notes" ? c.yellow("passed with notes (a check outside your control needs review)") : v.status === "not_checked" ? c.yellow("not checked yet (missing evidence, nothing to change)") : v.status === "pending_live_check" ? c.yellow("live check pending (content passes; waiting for a real send)") : c.yellow("pending");
-  const firstCheck = !v.task && v.next_action?.type === "first_check_complete";
-  const lines = [`${c.bold(`Verification ${v.id}`)}${v.task ? ` for ${v.task}` : ""}: ${firstCheck ? c.cyan("first check complete") : mark} (${v.method})`];
-  if (v.precheck) lines.push(`  pre-check (${v.precheck.source}): ${v.precheck.verdict} \u2014 ${v.precheck.note}`);
-  if (v.scan) lines.push(c.dim(`  confirming scan ${v.scan}`));
-  for (const d of v.diff.slice(0, 12)) lines.push(`  ${d.observed === "fail" ? c.red("\u2717") : c.yellow("?")} ${d.check_id}: expected ${d.expected}, observed ${d.observed} \u2014 ${d.detail}`);
-  if (v.diff.length > 12) lines.push(c.dim(`  \u2026 ${v.diff.length - 12} more`));
-  lines.push(`${c.cyan("next")}  ${nextLine(v.next_action)}`);
-  return lines;
-}
-var SITE_RE, STATUS_MARK;
-var init_lib = __esm({
-  "src/commands/plan/lib.ts"() {
-    "use strict";
-    init_args();
-    SITE_RE = /^site_[0-9a-f]{32}$/;
-    STATUS_MARK = { open: "[ ]", in_progress: "[~]", verifying: "[?]", done: "[x]", wont_fix: "[-]", manual: "[!]" };
-  }
-});
-
 // src/commands/plan/index.ts
 var plan_exports = {};
 __export(plan_exports, {
@@ -30201,11 +30921,11 @@ var init_plan = __esm({
 });
 
 // src/commands/plan/verify.ts
-import { readFileSync as readFileSync11 } from "node:fs";
-import { resolve as resolve8 } from "node:path";
+import { readFileSync as readFileSync12 } from "node:fs";
+import { resolve as resolve9 } from "node:path";
 function readJson2(ctx, file, what) {
   try {
-    const v = JSON.parse(readFileSync11(resolve8(ctx.cwd, file), "utf8"));
+    const v = JSON.parse(readFileSync12(resolve9(ctx.cwd, file), "utf8"));
     if (!v || typeof v !== "object" || Array.isArray(v)) throw new Error("not a JSON object");
     return v;
   } catch (err) {
@@ -30251,7 +30971,7 @@ var init_verify2 = __esm({
           const htmlFile = str(flags, "html-file");
           if (htmlFile) {
             try {
-              body.html = readFileSync11(resolve8(ctx.cwd, htmlFile), "utf8");
+              body.html = readFileSync12(resolve9(ctx.cwd, htmlFile), "utf8");
             } catch (err) {
               throw new UsageError(`Cannot read ${htmlFile}: ${err.code ?? err.message}`);
             }