@elitedcs/ghl-mcp 3.83.0 → 3.83.2

package/dist/index.js

@@ -241,7 +241,7 @@ function foldCredentialsIntoEnv(creds, env = process.env) {
   ];
   for (const [credKey, envKey] of mappings) {
     const value = creds[credKey];
-    if (value && !env[envKey]) {
+    if (typeof value === "string" && value && !env[envKey]) {
       env[envKey] = value;
     }
   }
@@ -740,13 +740,13 @@ var init_token_registry = __esm({
       name: import_zod2.z.string().optional()
     });
     TokenRegistryDataSchema = import_zod2.z.object({
-      tokens: import_zod2.z.record(LocationTokenSchema),
+      tokens: import_zod2.z.record(import_zod2.z.string(), LocationTokenSchema),
       agencyKey: import_zod2.z.string().optional(),
       // "Home" Firebase — the company the install was set up for (credentials.json).
       firebase: FirebaseConfigSchema.optional(),
       // Additional companies' Firebase auth, keyed by GHL companyId. Lets ONE
       // process operate the workflow builder across multiple clients' GHL accounts.
-      firebaseByCompany: import_zod2.z.record(CompanyFirebaseSchema).optional()
+      firebaseByCompany: import_zod2.z.record(import_zod2.z.string(), CompanyFirebaseSchema).optional()
     });
     TokenRegistry = class _TokenRegistry {
       data;
@@ -1256,7 +1256,7 @@ var init_trigger_schemas = __esm({
       masterType: import_zod3.z.string().optional(),
       name: import_zod3.z.string().optional(),
       actions: import_zod3.z.array(TriggerActionSchema).optional(),
-      schedule_config: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+      schedule_config: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
       date_updated: import_zod3.z.string().optional()
     }).passthrough();
     ContactTagTriggerSchema = TriggerCommonSchema.extend({
@@ -1547,7 +1547,7 @@ var init_trigger_schemas = __esm({
     });
     UnknownTriggerSchema = TriggerCommonSchema.extend({
       type: import_zod3.z.string(),
-      conditions: import_zod3.z.array(import_zod3.z.record(import_zod3.z.unknown())).optional()
+      conditions: import_zod3.z.array(import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown())).optional()
     });
     WorkflowTriggerSchema = import_zod3.z.union([
       ContactTagTriggerSchema,
@@ -3883,7 +3883,8 @@ function annotateListResponse(raw, listKey, limit, nextHint) {
   };
 }
 function safeTool(server2, name, description, schema, handler) {
-  server2.tool(name, description, schema, async (args) => {
+  const toolServer = server2;
+  toolServer.tool(name, description, schema, async (args) => {
     try {
       return jsonResponse(await handler(args));
     } catch (error) {
@@ -5090,7 +5091,7 @@ function registerCalendarTools(server2, client) {
       slug: import_zod12.z.string().optional().describe("Calendar slug"),
       widgetSlug: import_zod12.z.string().optional().describe("Widget slug for embedding"),
       calendarType: import_zod12.z.string().optional().describe("Calendar type"),
-      teamMembers: import_zod12.z.array(import_zod12.z.record(import_zod12.z.unknown())).optional().describe("Array of team member objects"),
+      teamMembers: import_zod12.z.array(import_zod12.z.record(import_zod12.z.string(), import_zod12.z.unknown())).optional().describe("Array of team member objects"),
       eventTitle: import_zod12.z.string().optional().describe("Default event title"),
       eventColor: import_zod12.z.string().optional().describe("Event color hex code"),
       slotDuration: import_zod12.z.number().optional().describe("Slot duration in minutes"),
@@ -5386,7 +5387,7 @@ function registerLocationTools(server2, client) {
       timezone: import_zod13.z.string().optional().describe("IANA timezone (e.g., 'America/New_York')."),
       phone: import_zod13.z.string().optional().describe("Phone number."),
       email: import_zod13.z.string().optional().describe("Email address."),
-      settings: import_zod13.z.record(import_zod13.z.unknown()).optional().describe("Location settings object with key-value pairs."),
+      settings: import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown()).optional().describe("Location settings object with key-value pairs."),
       overwriteBusinessInfo: import_zod13.z.boolean().optional().describe(
         "Allow a CHANGE to business details on a sub-account that already has a registered A2P brand. Off by default. Only needed when the account has a brandId AND you are changing (not filling) one of name/address/city/state/postalCode/country/phone/website/email."
       )
@@ -6726,7 +6727,7 @@ function registerUserTools(server2, client, registry2) {
       role: import_zod22.z.enum(["admin", "user"]).describe("GHL role on this sub-account. 'admin' = full settings access; 'user' = day-to-day staff (contacts, conversations, calendar, opportunities)."),
       phone: import_zod22.z.string().optional().describe("Phone number (E.164 preferred)."),
       password: import_zod22.z.string().min(8).optional().describe("Only if you must set one. Omit it (recommended) so GHL sends the invite instead."),
-      permissions: import_zod22.z.record(import_zod22.z.boolean()).optional().describe("Override the default per-role permissions object entirely (GHL UserPermissions booleans)."),
+      permissions: import_zod22.z.record(import_zod22.z.string(), import_zod22.z.boolean()).optional().describe("Override the default per-role permissions object entirely (GHL UserPermissions booleans)."),
       companyId: import_zod22.z.string().optional().describe("Agency/company id. Resolved from the registered location by default; pass it only when that lookup fails."),
       locationId: import_zod22.z.string().optional().describe("Sub-account to add the user to (defaults to the active location). The user is granted access to this ONE location.")
     },
@@ -7432,8 +7433,8 @@ function registerEmailTools(server2, client) {
   );
 }
 function registerEmailBuilderInternalTools(server2, builderClient, publicClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function builderRequest(method, path39, body) {
     const headers = await client.buildHeaders();
     const response = await fetch(`${EMAIL_BUILDER_BASE}${path39}`, {
@@ -7712,7 +7713,7 @@ function registerCustomObjectTools(server2, client) {
     {
       schemaKey: import_zod30.z.string().describe("The custom object schema key."),
       locationId: import_zod30.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env."),
-      properties: import_zod30.z.record(import_zod30.z.unknown()).describe("Key-value pairs of field values for the new record.")
+      properties: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).describe("Key-value pairs of field values for the new record.")
     },
     async ({ schemaKey, locationId: locationId2, properties }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -7729,7 +7730,7 @@ function registerCustomObjectTools(server2, client) {
       schemaKey: import_zod30.z.string().describe("The custom object schema key."),
       recordId: import_zod30.z.string().describe("The record ID to update."),
       locationId: import_zod30.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env."),
-      properties: import_zod30.z.record(import_zod30.z.unknown()).describe("Key-value pairs of field values to update.")
+      properties: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).describe("Key-value pairs of field values to update.")
     },
     async ({ schemaKey, recordId, locationId: locationId2, properties }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -7990,7 +7991,7 @@ function registerEstimateTools(server2, client) {
         price: import_zod32.z.number().describe("Unit price, in the estimate currency."),
         currency: import_zod32.z.string().optional().describe("Currency code (e.g. USD).")
       })).optional().describe("Updated line items. Give quantity and price; they are translated to the qty/amount/type GHL requires."),
-      discount: import_zod32.z.record(import_zod32.z.unknown()).optional().describe("Updated discount object.")
+      discount: import_zod32.z.record(import_zod32.z.string(), import_zod32.z.unknown()).optional().describe("Updated discount object.")
     },
     async ({ estimateId, locationId: locationId2, name, title: title2, items, discount }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -8769,7 +8770,7 @@ function registerConversationAiTools(server2, client) {
       agentId: import_zod35.z.string().describe("Agent id."),
       type: import_zod35.z.enum(ACTION_TYPES),
       name: import_zod35.z.string().min(1).describe("Name the operator sees."),
-      details: import_zod35.z.record(import_zod35.z.unknown()).describe("Type-specific details. humanHandOver: enabled, triggerCondition, handoverType (contactRequest|lackOfInformation|failedToResolveIssue|custom), examples[], assignToUserId, finalMessage, reactivateEnabled(+sleepTime/Unit). appointmentBooking: calendarId, onlySendLink, triggerWorkflow(+workflowIds), sleepAfterBooking(+sleepTime/Unit), transferBot(+transferAgent), rescheduleEnabled, cancelEnabled. triggerWorkflow: workflowIds[], triggerCondition, triggerMessage. stopBot: stopBotDetectionType (Goodbye|Custom), stopBotTriggerCondition, stopBotExamples[] (2+), finalMessage, enabled, reactivateEnabled, tags[]. updateContactField: contactFieldId, description, contactUpdateExamples[]. transferBot: transferBotType, transferToBot, enabled. advancedFollowup: enabled, scenarioId, followupSequence[].")
+      details: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown()).describe("Type-specific details. humanHandOver: enabled, triggerCondition, handoverType (contactRequest|lackOfInformation|failedToResolveIssue|custom), examples[], assignToUserId, finalMessage, reactivateEnabled(+sleepTime/Unit). appointmentBooking: calendarId, onlySendLink, triggerWorkflow(+workflowIds), sleepAfterBooking(+sleepTime/Unit), transferBot(+transferAgent), rescheduleEnabled, cancelEnabled. triggerWorkflow: workflowIds[], triggerCondition, triggerMessage. stopBot: stopBotDetectionType (Goodbye|Custom), stopBotTriggerCondition, stopBotExamples[] (2+), finalMessage, enabled, reactivateEnabled, tags[]. updateContactField: contactFieldId, description, contactUpdateExamples[]. transferBot: transferBotType, transferToBot, enabled. advancedFollowup: enabled, scenarioId, followupSequence[].")
     },
     async ({ agentId, type, name, details }) => {
       const problem = actionBodyProblem(type, details);
@@ -8787,7 +8788,7 @@ function registerConversationAiTools(server2, client) {
       actionId: import_zod35.z.string().describe("Action id."),
       type: import_zod35.z.enum(ACTION_TYPES),
       name: import_zod35.z.string().min(1),
-      details: import_zod35.z.record(import_zod35.z.unknown()).describe("The complete details for this type.")
+      details: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown()).describe("The complete details for this type.")
     },
     async ({ agentId, actionId, type, name, details }) => {
       const problem = actionBodyProblem(type, details);
@@ -10024,7 +10025,7 @@ function registerVoiceAiTools(server2, shared) {
       locationId: LOCATION,
       actionType: import_zod37.z.enum(VOICE_ACTION_TYPES),
       name: import_zod37.z.string().min(1).describe("Name the operator sees. Letters, numbers, spaces, _ and - only."),
-      actionParameters: import_zod37.z.record(import_zod37.z.unknown()).describe(ACTION_PARAMS_DOC)
+      actionParameters: import_zod37.z.record(import_zod37.z.string(), import_zod37.z.unknown()).describe(ACTION_PARAMS_DOC)
     },
     async ({ agentId, locationId: locationId2, actionType, name, actionParameters }) => {
       const client = shared.pinned();
@@ -10060,7 +10061,7 @@ function registerVoiceAiTools(server2, shared) {
       locationId: LOCATION,
       actionType: import_zod37.z.enum(VOICE_ACTION_TYPES),
       name: import_zod37.z.string().min(1),
-      actionParameters: import_zod37.z.record(import_zod37.z.unknown()).describe("The complete parameters for this type.")
+      actionParameters: import_zod37.z.record(import_zod37.z.string(), import_zod37.z.unknown()).describe("The complete parameters for this type.")
     },
     async ({ agentId, actionId, locationId: locationId2, actionType, name, actionParameters }) => {
       const client = shared.pinned();
@@ -10522,7 +10523,7 @@ var init_webhooks = __esm({
       import_zod38.z.string().describe("A GHL trigger type, e.g. 'contact_created'. Fires with no filter."),
       import_zod38.z.object({
         type: import_zod38.z.string().describe("A GHL trigger type, e.g. 'contact_tag' or 'pipeline_stage_updated'."),
-        conditions: import_zod38.z.array(import_zod38.z.record(import_zod38.z.unknown())).optional().describe(
+        conditions: import_zod38.z.array(import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown())).optional().describe(
           "Filter conditions, exactly as update_workflow_actions takes them. Use get_trigger_registry to find the valid fields for a trigger type. Omit to fire on every event of that type."
         )
       })
@@ -10607,8 +10608,8 @@ function registerDocumentTools(server2, client) {
       sentBy: import_zod39.z.string().optional().describe("GHL user ID of the sender (required by the API; falls back to GHL_USER_ID env)."),
       documentName: import_zod39.z.string().optional().describe("Override the document name shown to recipients."),
       medium: import_zod39.z.string().optional().describe("Delivery medium, e.g. 'email'. Defaults to email."),
-      ccRecipients: import_zod39.z.array(import_zod39.z.record(import_zod39.z.unknown())).optional().describe("Optional CC recipients: [{id, email, contactName, firstName, lastName, imageUrl}]."),
-      notificationSettings: import_zod39.z.record(import_zod39.z.unknown()).optional().describe("Optional sender/receiver notification settings: {sender:{fromName,fromEmail}, receive:{subject,templateId}}."),
+      ccRecipients: import_zod39.z.array(import_zod39.z.record(import_zod39.z.string(), import_zod39.z.unknown())).optional().describe("Optional CC recipients: [{id, email, contactName, firstName, lastName, imageUrl}]."),
+      notificationSettings: import_zod39.z.record(import_zod39.z.string(), import_zod39.z.unknown()).optional().describe("Optional sender/receiver notification settings: {sender:{fromName,fromEmail}, receive:{subject,templateId}}."),
       locationId: import_zod39.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env.")
     },
     async ({ documentId, sentBy, documentName, medium, ccRecipients, notificationSettings, locationId: locationId2 }) => {
@@ -11055,7 +11056,7 @@ function registerWorkflowBuilderTools(server2, client) {
         "invoice_paid",
         "review_request_clicked"
       ]).describe("The goal-condition identifier. Extras shape per condition: email_event \u2192 {stepIds:[]}; link_click \u2192 {linkIds:[]}; appointment_status \u2192 {calendarId}; payment_received \u2192 {globalProductIds:[]}; form_submission \u2192 {formIds:[]}; document_status \u2192 {templateId}; invoice_paid \u2192 {invoiceStepId}; review_request_clicked \u2192 {reviewTypes:['sms'|'email'], reviewLinkId}; add_contact_tag/remove_contact_tag \u2192 {tags:[]} (uncaptured but inferred)."),
-      extras: import_zod40.z.record(import_zod40.z.unknown()).optional().describe("Goal-condition-specific config. See goal_condition description for the expected shape per value. Pass {} or omit for goal_conditions without extras."),
+      extras: import_zod40.z.record(import_zod40.z.string(), import_zod40.z.unknown()).optional().describe("Goal-condition-specific config. See goal_condition description for the expected shape per value. Pass {} or omit for goal_conditions without extras."),
       action: import_zod40.z.enum(["exit", "continue", "wait"]).default("exit").describe("What happens when the goal fires (per GHL's GoalAction enum). 'exit' terminates the workflow path (verified). 'continue' lets it proceed to a downstream node. 'wait' pauses on the goal."),
       name: import_zod40.z.string().default("Goal").describe("Display name in the GHL UI."),
       op: import_zod40.z.enum(["or", "and"]).default("or").describe("Top-level boolean operator across segments. Default 'or'."),
@@ -11134,7 +11135,7 @@ var init_workflow_builder = __esm({
       id: import_zod40.z.string().optional().describe("Action ID (auto-generated if omitted)."),
       name: import_zod40.z.string().describe("Display name for this action step."),
       type: import_zod40.z.string().describe("Action type."),
-      attributes: import_zod40.z.record(import_zod40.z.unknown()).optional().describe("Action-specific configuration."),
+      attributes: import_zod40.z.record(import_zod40.z.string(), import_zod40.z.unknown()).optional().describe("Action-specific configuration."),
       next: import_zod40.z.union([import_zod40.z.string(), import_zod40.z.array(import_zod40.z.string())]).optional().describe("Next action id, or branch id array for condition nodes."),
       parent: import_zod40.z.string().optional().describe("Branch parent node id."),
       parentKey: import_zod40.z.string().optional().describe("Previous action id or branch parent id."),
@@ -11190,8 +11191,7 @@ var init_page_reads = __esm({
 
 // src/tools/funnel-builder.ts
 function registerFunnelBuilderTools(server2, builderClient) {
-  const client = builderClient;
-  if (!client) {
+  if (!builderClient) {
     server2.tool(
       "funnel_builder_status",
       "Check whether the funnel / page builder is configured. It needs Firebase credentials, added via enable_workflow_builder.",
@@ -11219,6 +11219,7 @@ function registerFunnelBuilderTools(server2, builderClient) {
     );
     return;
   }
+  const client = builderClient;
   async function internalGet(path39) {
     return client.request("GET", path39);
   }
@@ -11524,7 +11525,7 @@ ${await response.text()}`);
     "Update a funnel/website page's builder content \u2014 sections, elements, settings, pageStyles, trackingCode, popups, popupsList, fontsForPreview. Use get_page_content first to see the current structure, modify it, then pass the full envelope here. Writes via GHL's builder autosave and returns the new pageDataUrl. \u26A0\uFE0F GHL accepts a save onto a page that already has content but may never make it the visible version (live-tested 2026-07-28 and again 2026-08-31). The tool now VERIFIES this for you: every response carries `save_check`, and `save_check.visible: false` means the content was stored but visitors still see the previous page \u2014 rebuild on a fresh step (create_funnel_page) and save onto that. Never report a page as updated without reading save_check. Saves as a draft unless isPublished is true.",
     {
       pageId: import_zod41.z.string().describe("The page ID to update."),
-      content: import_zod41.z.record(import_zod41.z.unknown()).describe("The full page content JSON \u2014 the 8-field envelope: sections, settings, general, pageStyles, trackingCode, fontsForPreview, popups, popupsList. Start from get_page_content and modify it."),
+      content: import_zod41.z.record(import_zod41.z.string(), import_zod41.z.unknown()).describe("The full page content JSON \u2014 the 8-field envelope: sections, settings, general, pageStyles, trackingCode, fontsForPreview, popups, popupsList. Start from get_page_content and modify it."),
       funnelId: import_zod41.z.string().optional().describe("Funnel ID that owns the page. Optional \u2014 auto-resolved from the page metadata if omitted."),
       isPublished: import_zod41.z.boolean().optional().describe("Mark the page published after the save. Defaults to false (draft).")
     },
@@ -16437,8 +16438,8 @@ function removalHoldBack(opts) {
   return null;
 }
 function registerPageStudioTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   const templateApi = () => ({
     headers: () => client.buildHeaders(),
     companyId: () => client.getIntendedCompanyId() ?? client.getCurrentCompanyId(),
@@ -17148,7 +17149,7 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     "Update a form's structure \u2014 fields, labels, conditional logic, auto-responder, email notifications, styling. Use get_form_full first to read the current form, modify the formData object, then pass it here. If name is omitted, the current name is preserved (one extra GET).",
     {
       formId: import_zod44.z.string().describe("The form ID to update."),
-      formData: import_zod44.z.record(import_zod44.z.unknown()).describe("The updated formData object containing form fields, settings, autoResponder config, etc."),
+      formData: import_zod44.z.record(import_zod44.z.string(), import_zod44.z.unknown()).describe("The updated formData object containing form fields, settings, autoResponder config, etc."),
       name: import_zod44.z.string().optional().describe("Updated form name. If omitted, the current name is preserved.")
     },
     async ({ formId, formData, name }) => {
@@ -17407,7 +17408,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
       funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that creates the GHL contact). POSTed as JSON."),
       sentinelEmail: import_zod45.z.string().optional().describe("Override the minted sentinel email. Default: a unique blueprint-qa.<id>@example.com (won't deliver; used only to find the contact)."),
       testPhone: import_zod45.z.string().optional().describe("Include a phone on the submission (enables SMS-path checks). Must be a test-safe number you control \u2014 real SMS may send + bill."),
-      submitBody: import_zod45.z.record(import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
+      submitBody: import_zod45.z.record(import_zod45.z.string(), import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
       expectCustom: import_zod45.z.array(customFieldInput).optional().describe("Custom fields the form sends \u2014 each is asserted to PERSIST with the sent value (field-value fidelity, Carlos #3)."),
       expectStandard: import_zod45.z.array(import_zod45.z.string()).optional().describe("Standard contact keys to assert saved (e.g. ['phone','first_name']). email is always asserted."),
       triggerTag: import_zod45.z.string().optional().describe("The tag the form/bridge should add (the speed-to-lead trigger). Asserted to land on the contact."),
@@ -17665,8 +17666,8 @@ var init_funnel_qa = __esm({
 
 // src/tools/pipeline-builder.ts
 function registerPipelineBuilderTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function pipelineRequest(method, path39, body) {
     const headers = await client.buildHeaders();
     const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path39}`;
@@ -18580,19 +18581,20 @@ function deviceFingerprint(opts) {
 function base64urlDecode(s) {
   const b64 = s.replace(/-/g, "+").replace(/_/g, "/");
   const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
-  return new Uint8Array(Buffer.from(padded, "base64"));
+  return new Uint8Array(new Uint8Array(Buffer.from(padded, "base64")).buffer);
 }
 async function getPublicKey() {
   if (cachedPublicKey) return cachedPublicKey;
   const raw = Buffer.from(ATTESTATION_PUBLIC_KEY_B64, "base64");
-  cachedPublicKey = await import_node_crypto3.webcrypto.subtle.importKey(
+  const key = await import_node_crypto3.webcrypto.subtle.importKey(
     "raw",
     raw,
     { name: "Ed25519" },
     false,
     ["verify"]
   );
-  return cachedPublicKey;
+  cachedPublicKey = key;
+  return key;
 }
 function parseAttestationPayload(token2) {
   try {
@@ -20007,7 +20009,8 @@ function registerValidatorTools(server2, client, builderClient) {
         const workflow = await builderClient.getWorkflow(workflowId);
         if (!workflow) return errorResponse(new Error(`Workflow ${workflowId} not found`));
         const refs = [];
-        const socialPlatforms = await connectedSocialPlatforms(client, client.defaultLocationId);
+        const locationId2 = client.resolveLocationId();
+        const socialPlatforms = await connectedSocialPlatforms(client, locationId2);
         const shape = [
           ...checkActionShapes(workflow),
           ...checkSaveBlockers(workflow),
@@ -20020,7 +20023,7 @@ function registerValidatorTools(server2, client, builderClient) {
           return jsonResponse({ workflowId, workflowName: workflow.name, ...summarizeFindings(shape), references_scanned: 0, actions_checked: actionsChecked, findings: shape });
         const needWorkflows = refs.some((r) => r.kind === "workflow");
         const catalog2 = needWorkflows ? await fullWorkflowCatalog(builderClient) : { ids: /* @__PURE__ */ new Set(), complete: true };
-        const lookups = await fetchAndBuildLookups(client, builderClient, client.defaultLocationId, { ids: catalog2.ids, complete: catalog2.complete });
+        const lookups = await fetchAndBuildLookups(client, builderClient, locationId2, { ids: catalog2.ids, complete: catalog2.complete });
         const findings = [...shape, ...checkRefs(refs, workflowId, lookups)];
         const report2 = {
           workflowId,
@@ -20042,7 +20045,7 @@ function registerValidatorTools(server2, client, builderClient) {
     {},
     async () => {
       try {
-        const locationId2 = client.defaultLocationId;
+        const locationId2 = client.resolveLocationId();
         const catalog2 = await fullWorkflowCatalog(builderClient);
         if (catalog2.rows.length === 0)
           return jsonResponse({
@@ -24836,7 +24839,7 @@ var init_plan = __esm({
       workflows: import_zod51.z.array(workflowSchema).optional(),
       handoffs: import_zod51.z.array(handoffSchema).optional(),
       buildOrder: import_zod51.z.array(import_zod51.z.string()).optional(),
-      idMap: import_zod51.z.record(import_zod51.z.string()).optional()
+      idMap: import_zod51.z.record(import_zod51.z.string(), import_zod51.z.string()).optional()
     }).strict();
     PLAN_ERROR_CODES = {
       /** A workflow named like /nurture/i whose waits add up to < 30 days. */
@@ -26374,15 +26377,29 @@ function newRunId(now = /* @__PURE__ */ new Date(), rand = defaultRand) {
 function defaultRand() {
   return Math.floor(Math.random() * 65536).toString(16).padStart(4, "0");
 }
+function legacyFunnelParentage(plan) {
+  const funnels = plan.funnels;
+  if (!Array.isArray(funnels)) return [];
+  const pairs = [];
+  for (const funnel of funnels) {
+    if (typeof funnel !== "object" || funnel === null) continue;
+    const { ref, pages } = funnel;
+    if (typeof ref !== "string" || !Array.isArray(pages)) continue;
+    for (const page of pages) {
+      if (typeof page !== "object" || page === null) continue;
+      const pageRef = page.ref;
+      if (typeof pageRef === "string") pairs.push([pageRef, ref]);
+    }
+  }
+  return pairs;
+}
 function parentRefIndex(plan) {
   const parents = /* @__PURE__ */ new Map();
   if (!plan) return parents;
   for (const p of plan.pipelines ?? []) {
     for (const st of p.stages ?? []) parents.set(st.ref, p.ref);
   }
-  for (const fn of plan.funnels ?? []) {
-    for (const pg of fn.pages ?? []) parents.set(pg.ref, fn.ref);
-  }
+  for (const [pageRef, funnelRef] of legacyFunnelParentage(plan)) parents.set(pageRef, funnelRef);
   return parents;
 }
 function buildRunRecord(input) {
@@ -28540,7 +28557,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.83.0",
+      version: "3.83.2",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -28555,11 +28572,6 @@ var require_package = __commonJS({
         "src/command-os/design/rules/anti-default.json",
         "src/command-os/design/rules/web.json",
         "src/command-os/design/rules/anti-default-contract.mjs",
-        "src/command-os/design/rules/check-static.mjs",
-        "src/command-os/design/rules/fixtures/claude-default.html",
-        "src/command-os/design/rules/fixtures/house-clean.html",
-        "src/command-os/design/rules/fixtures/generator-run-1.html",
-        "src/command-os/design/rules/fixtures/external-css.html",
         "dist/index.js",
         "dist/capture-helper.js",
         "templates/action-schemas.json",
@@ -28577,6 +28589,7 @@ var require_package = __commonJS({
       ],
       scripts: {
         build: "node src/command-os/assessment/build-app.mjs && esbuild src/index.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/index.js --packages=external && esbuild src/capture-helper.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/capture-helper.js --packages=external",
+        typecheck: "tsc --noEmit",
         setup: "node setup-wizard.mjs",
         catalogue: "node scripts/export-command-os-catalogue.mjs",
         "manifest:write": "node scripts/write-package-manifest.mjs",
@@ -29001,7 +29014,8 @@ function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath
   throw new Error("Something else saved this record while you were editing. Nothing was changed \u2014 reload and enter it again.");
 }
 function floorFor(e, profile) {
-  const offer = e.offer && profile.offers?.find((o) => o.name.trim().toLowerCase() === e.offer.trim().toLowerCase());
+  const wanted = e.offer?.trim().toLowerCase();
+  const offer = wanted ? profile.offers?.find((o) => o.name.trim().toLowerCase() === wanted) : void 0;
   if (offer?.priceFloor !== void 0) return offer.priceFloor;
   if (e.cadence === "monthly") return profile.pricing?.minMonthly;
   if (e.cadence === "one-time") return profile.pricing?.minSetup;
@@ -30024,13 +30038,14 @@ function pickLatest(notes) {
   }
   return null;
 }
-var PIPELINE_NAME, NOTE_TITLE, MACHINE_MARKER, MARKER_LINE, NOTE_LIMIT;
+var PIPELINE_NAME, NOTE_TITLE, MACHINE_MARKER, STAGES, MARKER_LINE, NOTE_LIMIT;
 var init_store2 = __esm({
   "src/command-os/assessment/store.ts"() {
     "use strict";
     PIPELINE_NAME = "Assessments";
     NOTE_TITLE = "GHL COMMAND ASSESSMENT";
     MACHINE_MARKER = "--- machine block, do not edit below this line ---";
+    STAGES = ["Gathering", "Findings", "Proposal sent", "Won", "Lost"];
     MARKER_LINE = /^--- machine block, do not edit below this line ---(?: \((\d+)\/(\d+)(?: s=([a-z0-9]{6}))?\))?[ \t]*$/gm;
     NOTE_LIMIT = 2e4;
   }
@@ -30044,7 +30059,8 @@ async function loadAssessmentRecord(reader, contactId) {
 }
 async function findAssessmentPipeline(reader, locationId2) {
   const raw = await reader.get("/opportunities/pipelines", { params: { locationId: locationId2 } });
-  return (raw?.pipelines ?? []).find((p) => String(p.name).trim().toLowerCase() === PIPELINE_NAME.toLowerCase());
+  const pipelines = Array.isArray(raw?.pipelines) ? raw.pipelines : [];
+  return pipelines.find((p) => String(p.name).trim().toLowerCase() === PIPELINE_NAME.toLowerCase());
 }
 async function listAssessmentRecords(reader, locationId2) {
   const pipeline = await findAssessmentPipeline(reader, locationId2);
@@ -33394,7 +33410,7 @@ function registerAssessmentTools(server2, client) {
         quote: import_zod52.z.string().describe("The owner's own words, VERBATIM from the transcript. Do not tidy it up \u2014 if it is not in the transcript the answer is thrown out."),
         reasoning: import_zod52.z.string().optional().describe("How you got from the quote to the value, when they are not the same.")
       })).describe("One entry per question you could answer. Leave out anything the conversation did not cover."),
-      existing: import_zod52.z.record(import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
+      existing: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
     },
     async ({ transcript, proposed, existing }) => {
       const gated = gateExtraction(transcript, proposed, QUESTION_UNITS);
@@ -33517,9 +33533,9 @@ var init_assessment = __esm({
     StateSchema = import_zod52.z.object({
       biz: import_zod52.z.string().min(1).describe("The prospect's business name."),
       trade: import_zod52.z.string().optional().describe("Their trade. Decides which benchmarks may be applied."),
-      ans: import_zod52.z.record(import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).describe("questionId -> answer, exactly as typed."),
-      skip: import_zod52.z.record(import_zod52.z.boolean()).optional().describe("questionId -> true where they did not know."),
-      asm: import_zod52.z.record(import_zod52.z.number()).optional().describe("assumption id -> rate as a decimal."),
+      ans: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).describe("questionId -> answer, exactly as typed."),
+      skip: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.boolean()).optional().describe("questionId -> true where they did not know."),
+      asm: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.number()).optional().describe("assumption id -> rate as a decimal."),
       client: import_zod52.z.object({ name: import_zod52.z.string().max(120), role: import_zod52.z.string().max(80), email: import_zod52.z.string().max(200), phone: import_zod52.z.string().max(40), website: import_zod52.z.string().max(300), city: import_zod52.z.string().max(120) }).partial().optional().describe("The person and place this is for, as typed on The client step. Rides with the answers so a load brings it back.")
     });
   }
@@ -34096,7 +34112,7 @@ function startRun(locationId2, stage, onDone, meta = {}) {
       const obligations = (context.manualObligations ?? []).filter((o) => !deps.some((d) => d.ref === o.ref) && !(outcome.manualChecks ?? []).some((c) => c.ref === o.ref && c.type === o.type && c.ok && c.evidence.trim()));
       for (const h of plan?.plan?.handoffs ?? []) if (!obligations.some((o) => o.ref === h.ref) && !(outcome.manualChecks ?? []).some((c) => c.ref === h.ref && c.ok && c.evidence.trim())) obligations.push({ ref: h.ref, type: "handoff", name: h.title || h.name || h.ref, reason: h.instruction || "Finish this manual action." });
       outcome.ok = verifyBuildPassed(outcome, readback, plan?.plan);
-      verifyRaw = { summary: outcome.summary, issues: outcome.issues, verification: { deps, checks, readback, obligations, buildOk: outcome.ok, liveProofApplicable: Boolean(plan?.plan?.funnels?.length), liveProof: outcome.liveProof ?? { ok: false, evidence: outcome.error || "No test-lead result was returned." } } };
+      verifyRaw = { summary: outcome.summary, issues: outcome.issues, verification: { deps, checks, readback, obligations, buildOk: outcome.ok, liveProofApplicable: Boolean(plan?.plan && typeof plan.plan === "object" && "funnels" in plan.plan && Array.isArray(plan.plan.funnels) && plan.plan.funnels.length), liveProof: outcome.liveProof ?? { ok: false, evidence: outcome.error || "No test-lead result was returned." } } };
       if (!plan?.plan) {
         outcome.ok = false;
         verifyRaw.issues = [...verifyRaw.issues ?? [], "Run Build before verifying."];
@@ -36987,8 +37003,9 @@ async function runDashboard(argv) {
           state = setAccountType(state, outcome.locationId, "client");
           if (args.industry) state = setAccountIndustry(state, outcome.locationId, args.industry);
           if (!outcome.registered) {
-            state = setPending(state, outcome.locationId, args.name, args.industry || void 0);
-            if (outcome.saveFailed) state.pending[outcome.locationId].saveFailed = true;
+            const pending = setPending(state, outcome.locationId, args.name, args.industry || void 0);
+            if (outcome.saveFailed) pending.pending[outcome.locationId].saveFailed = true;
+            state = pending;
           }
           writeCockpitState(state);
           res.writeHead(200, { "Content-Type": "application/json" });
@@ -37996,7 +38013,7 @@ function registerBulkOperationTools(server2, client) {
     "Update the same field(s) on multiple contacts at once. Rate-limited. Example: set a custom field value, change source, update address for a batch of contacts.",
     {
       contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to update."),
-      fields: import_zod54.z.record(import_zod54.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
+      fields: import_zod54.z.record(import_zod54.z.string(), import_zod54.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
     },
     async ({ contactIds, fields }) => {
       if (Object.keys(fields).length === 0) {
@@ -39054,10 +39071,12 @@ function registerWorkflowClonerTools(server2, builderClient) {
             workflowId: void 0
             // Will be set by the new workflow
           };
-          if (cloned.data && typeof cloned.data === "object" && "targetActionId" in cloned.data) {
+          const clonedData = cloned.data;
+          if (clonedData && typeof clonedData === "object" && "targetActionId" in clonedData) {
+            const targetActionId = clonedData.targetActionId;
             cloned.data = {
-              ...cloned.data,
-              targetActionId: remap(cloned.data.targetActionId)
+              ...clonedData,
+              targetActionId: typeof targetActionId === "string" ? remap(targetActionId) : targetActionId
             };
           }
           return cloned;
@@ -39170,8 +39189,8 @@ function buildContactSmartListBody(args) {
   };
 }
 function registerSmartListTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function smartListRequest(method, path39, body) {
     const headers = await client.buildHeaders();
     const url = `${SMARTLIST_BASE}${path39}`;
@@ -39232,7 +39251,7 @@ ${await res.text()}`);
     {
       name: import_zod57.z.string().describe("Display name for the smart list."),
       tagFilters: import_zod57.z.array(import_zod57.z.array(import_zod57.z.string())).optional().describe('Tag conditions. Each inner array is one filter requiring ALL those tags, e.g. [["escalated"]] for "has the escalated tag".'),
-      rawFilters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
+      rawFilters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ name, tagFilters, rawFilters, locationId: locationId2 }) => {
@@ -39317,8 +39336,8 @@ ${await res.text()}`);
     {
       name: import_zod57.z.string().describe("Display name for the smart list."),
       objectKey: import_zod57.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
+      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
+      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
       pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
       defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs where this list is the default view."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
@@ -39344,8 +39363,8 @@ ${await res.text()}`);
     {
       listId: import_zod57.z.string().describe("The smart list ID to update."),
       name: import_zod57.z.string().optional().describe("New display name."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Replace the column array entirely."),
+      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
+      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the column array entirely."),
       pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the pipeline scope."),
       defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the default-in-pipelines list."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
@@ -39412,8 +39431,8 @@ var init_smart_lists = __esm({
 
 // src/tools/reputation.ts
 function registerReputationTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function reputationRequest(method, path39) {
     const headers = await client.buildHeaders();
     const response = await fetch(`${REPUTATION_BASE}${path39}`, { method, headers });
@@ -39558,8 +39577,8 @@ var init_email_campaigns = __esm({
 
 // src/tools/memberships.ts
 function registerMembershipTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function membershipRequest(path39, method = "GET", body) {
     const headers = await client.buildHeaders();
     const response = await fetch(`${MEMBERSHIP_BASE2}${path39}`, {
@@ -39875,7 +39894,7 @@ function registerTemplateDeployerTools(server2, client) {
     "Deploy a template to set up a GHL sub-account. Creates tags, custom fields, pipelines with stages, calendars, workflows, and forms based on the template and the user's questionnaire answers. This is the main setup automation tool.",
     {
       templateFile: import_zod61.z.string().describe("Path to the template JSON file."),
-      answers: import_zod61.z.record(import_zod61.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
+      answers: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
       locationId: import_zod61.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
       dryRun: import_zod61.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false."),
       overwriteBusinessInfo: import_zod61.z.boolean().optional().describe(
@@ -40281,7 +40300,7 @@ var init_template_deployer = __esm({
         required: import_zod61.z.boolean().optional(),
         placeholder: import_zod61.z.string().optional()
       })).optional().default([]),
-      location: import_zod61.z.record(import_zod61.z.unknown()).optional(),
+      location: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).optional(),
       tags: import_zod61.z.array(import_zod61.z.string()).optional(),
       customFields: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
@@ -40294,7 +40313,7 @@ var init_template_deployer = __esm({
       workflows: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
         condition: import_zod61.z.string().optional(),
-        actions: import_zod61.z.array(import_zod61.z.record(import_zod61.z.unknown())).optional().default([])
+        actions: import_zod61.z.array(import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown())).optional().default([])
       })).optional(),
       calendars: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
@@ -40334,13 +40353,17 @@ var init_version_check = __esm({
 });
 
 // src/tools/diagnostics.ts
+function anthropicKeyCheckStatus(verdict) {
+  const severity = ANTHROPIC_KEY_STATUS[verdict];
+  return severity === "ok" ? "pass" : severity;
+}
 async function collectInstallChecks(installedVersion, client, builderClient, registry2, getGatingReport, plan = "mcp", probeAnthropic = probeAnthropicKey) {
   const checks = [];
   const anthropicPromise = plan === "command-os" ? (async () => {
     const r = await probeAnthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
     return {
       name: "Anthropic key (Command OS demo builder)",
-      status: ANTHROPIC_KEY_STATUS[r.verdict],
+      status: anthropicKeyCheckStatus(r.verdict),
       detail: r.raw ? `${r.detail} Anthropic said: "${r.raw}"` : r.detail
     };
   })() : null;
@@ -46256,7 +46279,7 @@ function registerAgencyBuildTools(server2, knownTools) {
         why: import_zod72.z.string().min(3).describe("Plain English. This is what the operator reads before approving."),
         targets: import_zod72.z.array(targetSchema).default([]),
         creates: import_zod72.z.array(import_zod72.z.object({ ref: import_zod72.z.string(), kind: import_zod72.z.string() })).optional().describe("What this step brings into existence, for later steps to point at."),
-        args: import_zod72.z.record(import_zod72.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
+        args: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
       })).min(1)
     },
     async ({ goal, findings, steps }) => {
@@ -46326,7 +46349,7 @@ function registerAgencyBuildTools(server2, knownTools) {
       undo: import_zod72.z.string().optional().describe("Required on 'applied'. How to reverse this exact write, specifically enough to act on months later."),
       because: import_zod72.z.string().optional().describe("Required on 'failed'. What the account actually said."),
       result: import_zod72.z.unknown().optional().describe("What came back, kept so a stall can be diagnosed without re-running anything."),
-      resolved: import_zod72.z.record(import_zod72.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
+      resolved: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
       retry: import_zod72.z.boolean().optional().describe("This is a second run of a step that failed. Both attempts are kept, and the earlier failure stops blocking what came after it.")
     },
     async ({ buildId, stepId, state, undo, because, result, resolved: resolved2, retry }) => {
@@ -47191,7 +47214,7 @@ function registerAuditReportTools(server2) {
     "build_audit_report",
     "Turn the output of `audit_workflows` into a client-ready assessment: plain-English findings with money attached where it can honestly be attached, ranked worst-first, plus an explicit list of what could NOT be checked. Call `audit_workflows` first and pass its result here \u2014 this does not re-read the account. Give `leadsPerMonth`, `closeRate` and `monthlyValuePerClient` if you know them and the findings get costed in dollars; leave them out and it says which input is missing instead of guessing. `monthlyValuePerClient` defaults to your saved minimum monthly fee from your agency profile. Use this to produce the document you send or present, not to diagnose \u2014 the diagnosing already happened.",
     {
-      audit: import_zod74.z.record(import_zod74.z.unknown()).describe("The full JSON result returned by audit_workflows."),
+      audit: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The full JSON result returned by audit_workflows."),
       audience: import_zod74.z.enum(["internal", "prospect"]).optional().describe("Who reads it. 'internal' (default) is a report about an account you already run, and may use your own minimum monthly as what a client is worth. 'prospect' is a document about somebody else's business: your numbers are NEVER used, so findings stay uncosted unless you supply THEIR lead volume, close rate and client value."),
       accountName: import_zod74.z.string().describe("The client's name as they should see it on the document."),
       locationId: import_zod74.z.string().optional().describe("Sub-account id. Recorded on the document, never shown in the body."),
@@ -47256,7 +47279,7 @@ function registerAuditReportTools(server2) {
     "build_site_audit_report",
     "Turn a website read-through into the assessment document you put in front of a PROSPECT \u2014 someone whose GoHighLevel account you do not have. Pass the verified observations from a site crawl and it returns plain-English findings, ranked, each one carrying the quote and the page it came from. Use it before a sales call, or alongside a receptionist demo, so the same read of their site fills both. It never invents money: a website cannot tell you what a lead is worth to that business, so findings come back uncosted unless you supply THEIR figures, and the document says why. It also never repeats a claim the crawl could not stand up \u2014 anything refused is returned separately, so you can see what was thrown out rather than wonder what was missed.",
     {
-      observations: import_zod74.z.record(import_zod74.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
+      observations: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
       businessName: import_zod74.z.string().describe("The business's name as it should appear on the document."),
       leadsPerMonth: import_zod74.z.number().min(0).optional().describe("THEIR leads per month, if they told you. Never your own figure."),
       closeRate: import_zod74.z.number().min(0).max(1).optional().describe("THEIR close rate, 0-1, if they told you. Never guessed."),
@@ -48138,7 +48161,7 @@ var init_brief2 = __esm({
       preset: presetSchema,
       briefSource: briefSourceSchema,
       /** Partner-OS deep structures (ICA / offer / brand-DNA), carried verbatim. */
-      extended: import_zod79.z.record(import_zod79.z.unknown()).optional(),
+      extended: import_zod79.z.record(import_zod79.z.string(), import_zod79.z.unknown()).optional(),
       business: import_zod79.z.object({
         name: import_zod79.z.string(),
         type: import_zod79.z.string().optional(),
@@ -49913,7 +49936,7 @@ async function executeBackbone(plan, deps, opts = {}) {
         pendStaff(u, `Staff member "${name}" (${u.email}) was not created: no agency key is registered (creating users is an agency-level write). Run register_agency_key with an agency-level Private Integration key that has users.write, then re-run \u2014 or add them in Settings \u2192 Team and re-run to bind them by email.`);
         continue;
       }
-      let outcome;
+      let outcome = void 0;
       let recoveredUser;
       try {
         outcome = await deps.createUser({ firstName: u.firstName, lastName: u.lastName, email: u.email, role: u.role, phone: u.phone });
@@ -51353,14 +51376,14 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "validate_brief",
     "Validate an Intake-to-Build Brief object against the \xA74 schema. Returns {valid, errors}. Use to check a normalized brief before handing it to the plan-generation skill.",
     {
-      brief: import_zod80.z.record(import_zod80.z.unknown()).describe("The Brief object to validate.")
+      brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).describe("The Brief object to validate.")
     },
     async ({ brief }) => validateBrief(brief)
   );
   const buildPlanSchema2 = {
-    plan: import_zod80.z.record(import_zod80.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
+    plan: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
     fromPreset: import_zod80.z.boolean().optional().describe("PLAN-FROM-PRESET (PRD row 4d): compose the \xA75 plan SERVER-SIDE from the industry preset + the \xA74 brief, deterministically, in milliseconds \u2014 never author workflow actions by hand when a preset covers the brief. Pass `brief` (required) and optionally `preset` and `copy`; omit `plan`. The composed plan carries the preset's full structure (workflows, templates with complete send-ready copy token-filled from the brief, staff users, calendars with the brief's appointment lengths, pipeline stages, notification targets) and then flows through the exact same validate \u2192 dry_run/execute path as a passed plan, including being saved on execute. The dry_run response lists copySlots \u2014 the template refs whose subject/body the model MAY refine via `copy` on the execute call. If the preset cannot cover the brief the tool answers phase:\"compose\" with the reasons; only then author a plan by hand."),
-    brief: import_zod80.z.record(import_zod80.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
+    brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
     preset: import_zod80.z.string().optional().describe("fromPreset only: which preset to compose from \u2014 a preset id (med_spa, clinic, coach, local_service, ecom, generic), an alias (dental, medspa, home_services\u2026), or an industry slug (med-spa, local-service, ecommerce\u2026). Defaults to the brief's own preset field; an unknown value falls back to the generic preset (noted in the response)."),
     copy: import_zod80.z.array(
       import_zod80.z.object({
@@ -52013,7 +52036,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     {
       formId: import_zod80.z.string().describe("The intake form ID (from install_intake_form)."),
       submissionId: import_zod80.z.string().optional().describe("Specific submission to normalize. Defaults to the most recent."),
-      fieldMap: import_zod80.z.record(import_zod80.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
+      fieldMap: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
       preset: import_zod80.z.string().optional().describe("Override the preset. Defaults to one derived from business_type.")
     },
     async ({ formId, submissionId, fieldMap, preset }) => {
@@ -52145,7 +52168,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env = process.
   registerConnectorTools(wrap(CONNECTORS_MODULE));
   registerGoogleCalendarTools(wrap(GOOGLE_CALENDAR_MODULE));
   registerDeliveryAuditTools(wrap(DELIVERY_AUDIT_MODULE));
-  registerDesignStudioTools(wrap(DESIGN_STUDIO_MODULE), builderClient, client);
+  registerDesignStudioTools(wrap(DESIGN_STUDIO_MODULE));
   registerAgencyBuildTools(wrap(AGENCY_BUILD_MODULE), () => registeredTools);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
@@ -52291,9 +52314,16 @@ var init_tools = __esm({
       [registerAssociationTools, "associations"],
       [registerEstimateTools, "estimates"],
       [registerCouponTools, "coupons"],
-      [registerKnowledgeBaseTools, "knowledge-base"],
-      [registerConversationAiTools, "conversation-ai"],
-      [registerAiEmployeeDemoTools, "ai-employee-demo"],
+      [(server2, client) => registerKnowledgeBaseTools(server2, client), "knowledge-base"],
+      // Wrapped, not listed bare: this registrar's third parameter is a `deps`
+      // object, not the TokenRegistry the loop below passes to everything in this
+      // list. Today that is harmless — every key of `deps` is optional and a
+      // TokenRegistry has none of them, so every read falls back to its default —
+      // but it is harmless by luck, and stops being harmless the day TokenRegistry
+      // grows a `sleep`, `now` or `journalDir`. The wrapper passes nothing, which
+      // is what the registrar effectively receives now.
+      [(server2, client) => registerConversationAiTools(server2, client), "conversation-ai"],
+      [(server2, client) => registerAiEmployeeDemoTools(server2, client), "ai-employee-demo"],
       [registerVoiceAiTools, "voice-ai"],
       [registerDocumentTools, "documents"],
       [registerBulkOperationTools, "bulk-operations"],
@@ -52542,6 +52572,12 @@ var init_cli2 = __esm({
 });
 
 // src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  TRANSITIONAL_ATTESTATION_DEADLINE: () => TRANSITIONAL_ATTESTATION_DEADLINE,
+  licenseGateFailureMessage: () => licenseGateFailureMessage
+});
+module.exports = __toCommonJS(index_exports);
 var dotenv2 = __toESM(require("dotenv"));
 var path38 = __toESM(require("path"));
 var fs39 = __toESM(require("fs"));
@@ -52909,6 +52945,12 @@ registerMetaTools(server, pkg.version);
 var inBootstrapMode = true;
 var telemetryTier = "none";
 var TRANSITIONAL_ATTESTATION_DEADLINE = Date.parse("2026-06-15T00:00:00.000Z");
+function licenseGateFailureMessage(lic, deadline = TRANSITIONAL_ATTESTATION_DEADLINE) {
+  if (!lic.ok) return `[ghl-mcp] License check failed: ${lic.error}
+`;
+  return `[ghl-mcp] Your license is valid, but our license server did not return a signed attestation, which has been required since ${new Date(deadline).toISOString().slice(0, 10)}. This is on our side, not your install. Please write support@ghlcommand.com.
+`;
+}
 async function renewAttestation(creds) {
   if (!creds.email || !creds.license_key) return "unauthorized";
   let lic;
@@ -52991,7 +53033,9 @@ async function resolveAccessAndRegister() {
       attestationStatus = "renewed-from-legacy";
     } else {
       attestationStatus = "needs-reset";
-      if (renewed === "cancelled" || renewed === "unauthorized") {
+      if (renewed === "install_limit") {
+        process.stderr.write("[ghl-mcp] Bootstrap mode. Free a device on your license, or write support@ghlcommand.com.\n");
+      } else if (renewed === "cancelled" || renewed === "unauthorized") {
         process.stderr.write(`[ghl-mcp] Server says license is ${renewed}. Bootstrap mode.
 `);
       } else if (renewed === "renewed-unsigned") {
@@ -53028,8 +53072,7 @@ async function resolveAccessAndRegister() {
         } catch {
         }
       } else {
-        process.stderr.write(`[ghl-mcp] License check failed: ${lic.error}
-`);
+        process.stderr.write(licenseGateFailureMessage(lic));
       }
     } else {
       process.stderr.write(
@@ -53231,3 +53274,8 @@ main().catch((error) => {
   process.stderr.write(`[ghl-mcp] Failed to start: ${error}
 `);
 });
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  TRANSITIONAL_ATTESTATION_DEADLINE,
+  licenseGateFailureMessage
+});