@elitedcs/ghl-mcp 3.83.0 → 3.83.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.83.0",
+  "version": "3.83.2",
   "mcpName": "io.github.drjerryrelth/ghl-command",
   "description": "GoHighLevel MCP Server for Claude. 250 tools — full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",
@@ -15,11 +15,6 @@
     "src/command-os/design/rules/anti-default.json",
     "src/command-os/design/rules/web.json",
     "src/command-os/design/rules/anti-default-contract.mjs",
-    "src/command-os/design/rules/check-static.mjs",
-    "src/command-os/design/rules/fixtures/claude-default.html",
-    "src/command-os/design/rules/fixtures/house-clean.html",
-    "src/command-os/design/rules/fixtures/generator-run-1.html",
-    "src/command-os/design/rules/fixtures/external-css.html",
     "dist/index.js",
     "dist/capture-helper.js",
     "templates/action-schemas.json",
@@ -37,6 +32,7 @@
   ],
   "scripts": {
     "build": "node src/command-os/assessment/build-app.mjs && esbuild src/index.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/index.js --packages=external && esbuild src/capture-helper.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/capture-helper.js --packages=external",
+    "typecheck": "tsc --noEmit",
     "setup": "node setup-wizard.mjs",
     "catalogue": "node scripts/export-command-os-catalogue.mjs",
     "manifest:write": "node scripts/write-package-manifest.mjs",

package/skills/blueprint/README.md

@@ -17,11 +17,13 @@ The skill produces the reviewable build plan and the two-part checklist, and sto
 
 ## What you get back
 
-- A build plan for the account: pipeline and stages, custom fields, tags, the intake form, a funnel outline, email and SMS sequences, and the workflows that wire them together.
+- A build plan for the account: pipeline and stages, custom fields, tags, the intake form, email and SMS sequences, and the workflows that wire them together. Blueprint does not build a funnel, a page or a website.
 - Two checklists: what Blueprint will build automatically once you approve, and what only you can do in the GHL UI or with an outside service (A2P, Stripe, calendar, phone number, sending domain), in the order you need to do it.
 
 Every reference in the plan is a name, not a raw GoHighLevel ID. That is what stops the silent-failure bug where one dead ID skips every action under it and the workflow still shows green.
 
-## Funnels: GHL-native or your own site
+## Pages and funnels are a separate job
 
-Each funnel can be built **inside GoHighLevel** (the default — zero setup on your part) or as a **custom site you host** on Cloudflare/Vercel and wire back to your GHL sub-account. The external path is for technically-capable users: you need your own host account + CLI, a GHL Private Integration token you store as a host secret, and comfort with a one-time command-line deploy. Blueprint generates the site, hands you the exact verified wiring values, and runs a live verification gate, but it never deploys for you or holds your keys. If that's not you, pick GHL-native and everything still works.
+Blueprint sets up the account. It does not build a funnel, a page or a website of any kind, and a plan that asks for one is refused rather than half-built. GoHighLevel's own page builder was not good enough to hand a client, so it was taken out.
+
+When you do want pages, that is its own job after the account exists: a **custom site you host** on Cloudflare or Vercel and wire back to your sub-account. It is for technically-capable users. You need your own host account and CLI, a GHL Private Integration token you store as a host secret, and comfort with a one-time command-line deploy. The product generates the site, hands you the exact verified wiring values, and runs a live verification gate, but it never deploys for you and never holds your keys.

package/skills/blueprint/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: blueprint
-description: Turn a GHL Command client intake into a complete, reviewable GoHighLevel account build plan — the GHL Command Blueprint. Detects Agency OS for a deeper brief (else uses the built-in intake form), selects an industry preset, generates a structured build plan (pipeline, fields, tags, calendar, form, funnel, email/SMS, workflows) with symbolic refs not real IDs, and renders a two-part approval checklist (what GHL Command builds automatically vs. what you must do manually, in order). The plan stops at the human approve gate; GHL-native staging then runs via apply_build_plan. Each funnel can be GHL-native (default) or an external site the user hosts (Cloudflare/Vercel) and wires back to GHL — a power-user, capability-gated lane that generates the site, injects verified field IDs, walks the user through their own deploy, and finishes only when verify_funnel passes on the real URL. Triggers on build my Blueprint, run Blueprint, GHL Command Blueprint, build a client account, watch it build a client, new client account, client onboarding build, build plan, account build spec, external funnel, host my own funnel.
+description: Turn a GHL Command client intake into a complete, reviewable GoHighLevel account build plan — the GHL Command Blueprint. Detects Agency OS for a deeper brief (else uses the built-in intake form), selects an industry preset, generates a structured build plan (pipeline, fields, tags, calendar, form, email/SMS, workflows) with symbolic refs not real IDs. Blueprint does not build funnels, pages or websites of any kind, and renders a two-part approval checklist (what GHL Command builds automatically vs. what you must do manually, in order). The plan stops at the human approve gate; GHL-native staging then runs via apply_build_plan. Pages and funnels are a separate job after the account exists, on hosting the member owns. Triggers on build my Blueprint, run Blueprint, GHL Command Blueprint, build a client account, watch it build a client, new client account, client onboarding build, build plan, account build spec, external funnel, host my own funnel.
 compatibility: Claude Code, Claude Cowork, Claude.ai
 ---
 
@@ -17,7 +17,7 @@ This skill produces a **build plan** (the contract in `references/brief-schema.m
 ```
 Detect brief source ─► Source the brief (§2A) ─► Select preset ─► Fill skeleton ─► Derive handoffs ─► Generate copy ─► Assemble plan (per-funnel target) ─► Quality gate ─► Render approval view
                                                                                                                               │
-   external funnel only, AFTER approval ──────────────────────────────────────────────────────────────────────────────────►│ stage GHL side (apply_build_plan) ─► generate + inject site ─► deploy preview→confirm→promote ─► verify_funnel gate ─► done
+   pages/funnels: SEPARATE, after the account    ──────────────────────────────────────────────────────────────────────────────────►│ stage GHL side (apply_build_plan) ─► generate + inject site ─► deploy preview→confirm→promote ─► verify_funnel gate ─► done
 ```
 
 Read `references/preset-format.md` once; it defines the tokens (`{{...}}`), `conditionalOn`, `fillFrom`, and `copyDirection` you will resolve. Read `references/agency-os-detection.md` for the brief-source decision. Read `references/approval-view.md` for the final render. Read `references/external-funnel.md` only when a funnel is `target: "external"` (the capability gate + site gen/deploy + verify lane).
@@ -80,7 +80,7 @@ Default for REVIEW: **outlines** (`subject` + `bodyOutline` + `mergeTags` for em
 
 ## STEP 7 — Assemble the plan (§5)
 
-Emit a §5-conforming object: `schemaVersion`, `planId`, `briefId`, `preset`, `summary`, then the object arrays (`pipelines`, `customFields`, `tags`, `customValues`, `calendars`, `forms`, `funnels`, `emails`, `sms`, `workflows`, `handoffs`), `buildOrder`, and an empty `idMap`. Keep strictly to contract fields (the MCP validators may be strict). Record provenance (preset id + version, brief source) in the `summary` text, not as an extra field. Use GHL-correct enums: `dataType` ∈ {TEXT, LARGE_TEXT, NUMERICAL, PHONE, **MONETORY**, CHECKBOX, SINGLE_OPTIONS, MULTIPLE_OPTIONS, FLOAT, DATE, TEXTBOX_LIST, FILE_UPLOAD, SIGNATURE}; `calendarType` ∈ {round_robin, event, class_booking, collective, service_booking}.
+Emit a §5-conforming object: `schemaVersion`, `planId`, `briefId`, `preset`, `summary`, then the object arrays (`pipelines`, `customFields`, `tags`, `customValues`, `calendars`, `forms`, `emails`, `sms`, `workflows`, `handoffs`) — **never a `funnels` key, not even an empty one: the plan schema forbids it and `apply_build_plan` halts on it**, `buildOrder`, and an empty `idMap`. Keep strictly to contract fields (the MCP validators may be strict). Record provenance (preset id + version, brief source) in the `summary` text, not as an extra field. Use GHL-correct enums: `dataType` ∈ {TEXT, LARGE_TEXT, NUMERICAL, PHONE, **MONETORY**, CHECKBOX, SINGLE_OPTIONS, MULTIPLE_OPTIONS, FLOAT, DATE, TEXTBOX_LIST, FILE_UPLOAD, SIGNATURE}; `calendarType` ∈ {round_robin, event, class_booking, collective, service_booking}.
 
 Workflow actions stay **logical** (type + key params + refs). Do not emit GHL-native action JSON — the executor expands logical actions via `action-schemas.json` and owns the failure-prone shapes (`internal_update_opportunity` node-level discriminator, `internal_notification`/task-notification nesting, `remove_from_workflow` dual id, `wait` `startAfter`, `attachments:[]`, `html` vs `body`, node `next`/`parentKey` chaining). All object pointers are refs. Max 40 actions per workflow; split longer flows into linked + exit workflows.
 
@@ -90,7 +90,7 @@ Workflow actions stay **logical** (type + key params + refs). Do not emit GHL-na
 
 **Branching + appointment-relative actions.** `find_opportunity` is the only branching action and MUST be the last action in its workflow (its found/notFound branches do not rejoin). `wait_appointment` ("N before the appointment") only works in a workflow with an `appointment` trigger. The MCP validator enforces both, plus unique object names within each type and a 40-node cap (a workflow containing a `find_opportunity` branch cannot be auto-split).
 
-**Per-funnel target (GHL-native vs external).** For each funnel, set `target` ∈ `ghl` (default) / `external` (+ `host`/`domain` when external). Ask once per funnel: "Build this funnel inside GHL, or as a custom site you host on Cloudflare/Vercel and wire back to GHL?" The brief may pre-answer. **The instant a funnel is set to `external`, run the capability gate in `references/external-funnel.md` §1** — plainly state the required access (own host account + CLI, a GHL Private Integration token they store as a host secret, comfort with a one-time CLI deploy, optional domain/DNS) and say outright it is for technically-capable users; if that is not them, steer to `target: "ghl"`. Default GHL; never assume dev skills. The chosen target renders per funnel in the approval view (external = the power-user path, with ownership facts).
+**Blueprint builds no funnel, page or website.** GoHighLevel's own page builder was not good enough to hand a client, so it was removed from installation: the plan schema forbids a `funnels` key and `apply_build_plan` halts on one. Never ask which way to build a funnel and never put one in the plan. If the brief asks for pages or a funnel, say plainly that Blueprint sets up the account and that pages are a separate job afterwards, on hosting they own, wired back to the account. That lane is STEP 10 and it runs only after the account exists and the plan is approved.
 
 ## STEP 8 — Quality gate (run on yourself before showing anything)
 
@@ -115,9 +115,9 @@ Invite edits (rename / drop / reorder / adjust). Re-render after edits. End by s
 
 **Workflows default to DRAFT — prompt before publishing.** `apply_build_plan` builds workflows DRAFT unless `publishWorkflows:true`. Before any workflow goes live, ASK the operator: "Publish these now, or leave them DRAFT for review?" Pass `publishWorkflows:true` only on an explicit yes. Workflows gated by an unmet handoff (e.g. SMS workflows behind `handoff.a2p`) never auto-publish even when opted in; pass satisfied handoffs in `metHandoffs` to lift their gate. If any funnel is `target: "external"`, also run STEP 10 after approval.
 
-## STEP 10 — External funnel lane (only if a funnel is `target: "external"`)
+## STEP 10 — Pages and funnels: a separate job, after the account
 
-For each external funnel, run the lane in `references/external-funnel.md` after approval. Summary:
+Only when the member asks for pages after the account is built. Never part of the plan. Run the lane in `references/external-funnel.md`. Summary:
 1. **Stage the GHL side.** Confirm the active sub-account, then `apply_build_plan` `mode:"dry_run"` → show the report → on the operator's go, `mode:"execute"`. Capture the returned `externalWiring` bundle (verified custom-field IDs, `bookingUrl`, trigger tag) and the speed-to-lead workflow id. If `externalWiring.unresolved` is non-empty, stop and re-run execute — never wire a form to an unresolved field.
 2. **Generate + inject the site.** Generate the site with `frontend-design` from the page outlines + brand. Inject the lead form keyed by the bundle's **verified `fieldId`s** (custom fields under `custom: {<fieldId>: value}`, never name-guessed; option values must match GHL option values), the `bookingUrl` into the booking CTA, a honeypot, and Turnstile for production. Fail closed (never a silent success).
 3. **Deploy — the user runs every command; the product deploys nothing and never handles the token.** Scaffold `wrangler.toml` (vars only); the user sets `GHL_PIT` as a host secret themselves. Deploy to a preview URL → confirm → promote to production. Never silently clobber a live deployment.

package/src/command-os/design/rules/check-static.mjs

@@ -1,238 +0,0 @@
-#!/usr/bin/env node
-// Proof harness for anti-default.json.
-//
-// This is NOT the verifier. The real verifier (design-studio-plan.md 3.6) renders the page
-// in the automation Chrome profile and reads computed styles. This runs only the subset of
-// rules that can be decided from the source text of a single self-contained HTML file, with
-// no browser and no dependencies. Its job is to prove the ruleset fires on a slop fixture
-// and stays silent on an honest one.
-//
-// Usage: node check-static.mjs [file.html ...]        (no args = all four fixtures)
-
-import { readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { dirname, join, basename, resolve } from 'node:path';
-import { assertAntiDefaultContract } from './anti-default-contract.mjs';
-
-const here = dirname(fileURLToPath(import.meta.url));
-const RULES = JSON.parse(readFileSync(join(here, 'anti-default.json'), 'utf8'));
-assertAntiDefaultContract(RULES, JSON.parse(readFileSync(join(here, 'web.json'), 'utf8')));
-const byId = Object.fromEntries(RULES.rules.map(r => [r.id, r]));
-
-const srgb = c => { c /= 255; return c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4; };
-const lum = hex => {
-  const h = hex.replace('#', '');
-  const f = h.length === 3 ? h.split('').map(c => c + c).join('') : h;
-  const [r, g, b] = [0, 2, 4].map(i => parseInt(f.slice(i, i + 2), 16));
-  return 0.2126 * srgb(r) + 0.7152 * srgb(g) + 0.0722 * srgb(b);
-};
-const contrast = (a, b) => { const [x, y] = [lum(a), lum(b)].sort((m, n) => n - m); return (x + 0.05) / (y + 0.05); };
-
-function parse(html) {
-  const css = [...html.matchAll(/<style[^>]*>([\s\S]*?)<\/style>/gi)].map(m => m[1]).join('\n');
-  const body = (html.match(/<body[^>]*>([\s\S]*)<\/body>/i) || [, html])[1];
-  const strip = s => s.replace(/<(script|style)[\s\S]*?<\/\1>/gi, ' ').replace(/<[^>]+>/g, ' ');
-  const text = strip(body).replace(/&nbsp;/g, ' ').replace(/[ \t]+/g, ' ');
-  const attrs = [...html.matchAll(/\b(alt|aria-label|title|placeholder)\s*=\s*"([^"]*)"/gi)].map(m => m[2]).join(' \n ');
-  const docTitle = (html.match(/<title[^>]*>([\s\S]*?)<\/title>/i) || [, ''])[1];
-  const heroBlock = (body.match(/<section[^>]*class="[^"]*hero[^"]*"[\s\S]*?<\/section>/i) || [''])[0];
-  const heroText = strip(heroBlock);
-  const headings = [...body.matchAll(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi)].map(m => strip(m[1]));
-  const rule = sel => {
-    const re = new RegExp(sel.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '\\s*\\{([^}]*)\\}', 'i');
-    return (css.match(re) || [, ''])[1];
-  };
-  const vars = Object.fromEntries([...css.matchAll(/(--[\w-]+)\s*:\s*([^;]+);/g)].map(m => [m[1], m[2].trim()]));
-  const resolve = v => (v || '').replace(/var\((--[\w-]+)\)/g, (_, n) => vars[n] || '');
-  const cssPresent = css.trim().length > 0;
-  const externalCss = /<link[^>]+rel\s*=\s*["']?stylesheet/i.test(html);
-  return { css, body, text, attrs, heroText, headings, rule, resolve, cssPresent, externalCss,
-           all: text + '\n' + attrs + '\n' + docTitle };
-}
-
-// A check returns one of three things, never two:
-//   null  the check ran and the page is clean
-//   U     the check could not decide from source (the subject was not visible here)
-//   text  the check ran and the page trips the rule, with what was measured
-// The third state is the whole point. "The source does not show it" is NOT
-// "the page does not do it": styles can live in an external sheet, a utility
-// framework, or JS. A harness without U reports an unreadable page as clean.
-const U = '\u0000UNDECIDABLE';
-
-// Checks that cannot be decided at all when no inline CSS is present.
-const CSS_DEPENDENT = new Set(['AD01','AD02','AD03','AD10','AD11','AD12','AD15','AD16','AD20',
-  'AD27','AD28','AD29','AD42','AD43','AD44','AD59','AD60','AD61','AD62','AD63','AD64','AD65','AD66','AD69']);
-
-// id -> (doc) => null | U | string
-const CHECKS = {
-  AD01: d => { const f = (d.rule('body').match(/font-family\s*:\s*([^;]+)/i) || [, ''])[1]
-      + ',' + (d.rule('h1, h2, h3').match(/font-family\s*:\s*([^;]+)/i) || [, ''])[1];
-    const hit = ['Inter', 'Space Grotesk', 'Roboto', 'Arial', 'Helvetica'].filter(n => new RegExp(`(^|[,'"\\s])${n}\\b`, 'i').test(f));
-    return hit.length ? `display/body face = ${hit.join(', ')}` : null; },
-  AD02: d => { const m = d.rule('body').match(/font-size\s*:\s*(\d+(?:\.\d+)?)px/i);
-    if (!m) return U;
-    return +m[1] < 18 ? `body font-size = ${m[1]}px (floor 18px)` : null; },
-  AD03: d => { const b = d.rule('body'); const hex = v => (d.resolve(v || '').match(/#[0-9a-f]{3,6}\b/i) || [])[0];
-    const fg = hex((b.match(/(?:^|;)\s*color\s*:\s*([^;]+)/i) || [])[1]);
-    const bg = hex((b.match(/background(?:-color)?\s*:\s*([^;]+)/i) || [])[1]);
-    if (!fg || !bg) return U;
-    const r = contrast(fg, bg); return r < 7 ? `body ${fg} on ${bg} = ${r.toFixed(2)}:1 (floor 7.0:1)` : null; },
-  AD10: d => /text-transform\s*:\s*uppercase/i.test(d.rule('body')) ? 'body text-transform: uppercase' : null,
-  AD11: d => /Fraunces|Instrument[_ ]Serif/i.test(d.css) ? 'reflex serif in the stack' : null,
-  AD12: d => { const b = d.rule('body'); if (!b.trim()) return U;
-    const val = re => d.resolve((b.match(re) || [])[1] || '').trim();
-    const fgRaw = val(/(?:^|;)\s*color\s*:\s*([^;]+)/i);
-    const bgRaw = val(/background(?:-color)?\s*:\s*([^;]+)/i);
-    if (!fgRaw || !bgRaw) return U;
-    const isBlack = v => /^(#0{3}|#0{6}|black)$/i.test(v), isWhite = v => /^(#f{3}|#f{6}|white)$/i.test(v);
-    const hRaw = d.resolve((d.rule('h1, h2, h3').match(/color\s*:\s*([^;]+)/i) || [])[1] || '').trim();
-    if (isBlack(fgRaw) && isWhite(bgRaw)) return `pure ${fgRaw} on ${bgRaw}`;
-    if (isWhite(fgRaw) && isBlack(bgRaw)) return `pure ${fgRaw} on ${bgRaw}`;
-    if (isBlack(hRaw) && isWhite(bgRaw)) return `pure ${hRaw} heading on ${bgRaw}`;
-    return null; },
-  AD15: d => /(?:\.hero|header)[^{]*\{[^}]*background[^;}]*(linear|radial)-gradient/i.test(d.css) ? 'gradient on the hero ground' : null,
-  AD16: d => /background-clip\s*:\s*text/i.test(d.css) && /gradient/i.test(d.css) ? 'background-clip: text over a gradient' : null,
-  AD20: d => {
-    let decided = false;
-    const sels = [...d.css.matchAll(/([^{}]+)\{([^}]*)\}/g)]
-      .filter(m => /(\bbutton|\.cta\b|\.btn\b|\[type=["']?submit)/i.test(m[1]));
-    for (const [, sel, block] of sels) {
-      const fg = d.resolve((block.match(/(?:^|;)\s*color\s*:\s*([^;]+)/i) || [, ''])[1]).trim();
-      const bg = d.resolve((block.match(/background(?:-color)?\s*:\s*([^;]+)/i) || [, ''])[1]).trim();
-      const hex = v => (v.match(/#[0-9a-f]{3,8}/i) || [])[0];
-      if (!hex(fg) || !hex(bg)) continue;
-      const r = contrast(hex(fg), hex(bg));
-      if (r < 4.5) return `CTA label ${hex(fg)} on ${hex(bg)} = ${r.toFixed(2)}:1 (floor 4.5:1) on "${sel.trim()}"`;
-      decided = true;
-    }
-    if (!decided && /<button|type=["']?submit|class="[^"]*\b(cta|btn)\b/i.test(d.body)) return U;
-    return null; },
-  AD27: d => { const m = [...d.css.matchAll(/border-radius\s*:\s*(\d+)px/gi)].map(x => +x[1]).filter(v => v >= 24);
-    return m.length ? `border-radius ${m.join('px, ')}px (cards cap at 16px)` : null; },
-  AD28: d => { const hit = [...d.css.matchAll(/\{([^}]*)\}/g)].filter(b =>
-      /border\s*:\s*1px/i.test(b[1]) && /box-shadow\s*:[^;]*?\b(\d+)px\s+(\d+)px/i.test(b[1]) &&
-      +(b[1].match(/box-shadow\s*:[^;]*?\b\d+px\s+(\d+)px/i) || [, 0])[1] >= 16);
-    return hit.length ? `1px border + ${(hit[0][1].match(/box-shadow\s*:[^;]*?\b\d+px\s+(\d+)px/i))[1]}px shadow blur on one element` : null; },
-  AD29: d => { const z = [...d.css.matchAll(/z-index\s*:\s*(\d+)/gi)].map(x => +x[1]).filter(v => v >= 999);
-    return z.length ? `z-index ${z.join(', ')}` : null; },
-  AD42: d => { const m = d.css.match(/border-(?:left|right)\s*:\s*(\d+)px/i);
-    return m && +m[1] > 1 ? `${m[1]}px side-stripe border` : null; },
-  AD43: d => /backdrop-filter\s*:[^;]*blur/i.test(d.css) ? 'backdrop-filter: blur' : null,
-  AD44: d => /repeating-(linear|radial)-gradient/i.test(d.css) ? 'repeating-gradient background' : null,
-  AD45: d => /feTurbulence|feDisplacementMap|\b(sketch|doodle|squiggle|hand-drawn)\b/i.test(d.body + d.css) ? 'sketchy-SVG marker' : null,
-  AD46: d => { const e = d.headings.filter(h => /\p{Extended_Pictographic}/u.test(h));
-    return e.length ? `emoji in heading: ${e[0].trim().slice(0, 40)}` : null; },
-  AD48: d => { const bad = d.text.split('\n').map(l => (l.match(/·/g) || []).length).filter(n => n > 1);
-    return bad.length ? `${Math.max(...bad)} middle dots on one line` : null; },
-  AD50: d => !d.heroText.trim() ? U : /(^|\s)(↓\s*)?scroll( to (explore|discover|begin|walk))?\b/i.test(d.heroText) ? 'scroll cue in the hero' : null,
-  AD53: d => { if (!d.heroText.trim()) return U; const m = d.heroText.match(/\bv\d+\.\d+(\.\d+)?\b|\b(beta|alpha|early access|invite[- ]only|preview|waitlist)\b/i);
-    return m ? `hero status label "${m[0]}"` : null; },
-  AD59: d => /cursor\s*:\s*url\(/i.test(d.css) ? 'custom cursor image' : null,
-  AD60: d => /transition\s*:\s*all\b/i.test(d.css) ? 'transition: all' : null,
-  AD61: d => { const m = [...d.css.matchAll(/scale\((0(?:\.\d+)?)\)/gi)].map(x => +x[1]).filter(v => v <= 0.5);
-    return m.length ? `entry from scale(${m[0]})` : null; },
-  AD62: d => { const m = d.css.match(/(?:transition|animation)[^;{}]*\bease-in\b(?!-out)/i);
-    return m ? 'ease-in timing on an interactive element' : null; },
-  AD63: d => { const m = [...d.css.matchAll(/(?:transition|animation)[^;{}]*?(\d{3,5})ms/gi)].map(x => +x[1]).filter(v => v > 300);
-    return m.length ? `${Math.max(...m)}ms UI duration (budget 300ms)` : null; },
-  AD64: d => { const m = d.css.match(/transition\s*:[^;{}]*\b(width|height|top|left|right|bottom|margin|padding)\b/i);
-    return m ? `animating layout property "${m[1]}"` : null; },
-  AD65: d => (/transition|@keyframes|animation\s*:/i.test(d.css) && !/prefers-reduced-motion/i.test(d.css))
-    ? 'motion present, no prefers-reduced-motion block' : null,
-  AD66: d => { const hov = [...d.css.matchAll(/:hover\s*\{([^}]*)\}/gi)].filter(m => /transform\s*:/i.test(m[1]));
-    if (!hov.length) return null;
-    const gated = /@media\s*\(hover:\s*hover\)[^{]*\{[\s\S]*?:hover\s*\{[^}]*transform/i.test(d.css);
-    return gated ? null : 'hover transform not gated by @media (hover: hover)'; },
-  AD69: d => { const off = /outline\s*:\s*(none|0)\b/i.test(d.css);
-    return off && !/:focus-visible/i.test(d.css) ? 'outline removed with no :focus-visible replacement' : null; },
-  AD70: d => { const inputs = [...d.body.matchAll(/<(input|textarea)\b[^>]*>/gi)].map(m => m[0])
-      .filter(t => /placeholder\s*=/.test(t) && !/aria-label/.test(t))
-      .filter(t => { const id = (t.match(/\bid\s*=\s*"([^"]+)"/i) || [])[1];
-        return !id || !new RegExp(`<label[^>]*for\\s*=\\s*"${id}"`, 'i').test(d.body); });
-    return inputs.length ? `${inputs.length} placeholder-as-label field(s)` : null; },
-  AD74: d => { const n = (d.all.match(/[—–]/g) || []).length;
-    return n ? `${n} em/en dash character(s) in rendered text or attributes` : null; },
-  AD75: d => { const m = d.all.match(/\b(john|jane|joe|jack)\s+(doe|smith|su|chan)\b|\blorem ipsum\b/i); return m ? `"${m[0]}"` : null; },
-  AD76: d => { const m = d.all.match(/\b(acme|nexus|smartflow|cloudly|innovatech|globex|initech)\b/i); return m ? `"${m[0]}"` : null; },
-  AD77: d => { const m = d.all.match(/\b(99\.9{1,2}%|100%|10x|50%|1,?234,?567)\b/i); return m ? `"${m[0]}"` : null; },
-  AD78: d => { const m = d.all.match(/\b(elevate|seamless(ly)?|unleash|supercharge|streamline|empower(s|ing)?|world[- ]class|next[- ]gen(eration)?|revolutioni[sz]e|cutting[- ]edge|game[- ]chang\w*)\b/i); return m ? `"${m[0]}"` : null; },
-  AD79: d => { const m = d.all.match(/\b(quietly (in use|trusted)|from the field|field notes|on our desks|currently on the bench|loose plates)\b/i); return m ? `"${m[0]}"` : null; },
-  AD80: d => { const m = d.all.match(/\b(stage|step|phase|pass)\s*(one|two|three|four|0?\d)\b/i); return m ? `"${m[0]}"` : null; },
-  AD81: d => { const m = d.all.match(/\b\w+ theat(er|re)\b|\bnot just (a |an )?\w+,? it'?s\b|\bactually \w+, not\b/i); return m ? `"${m[0]}"` : null; },
-};
-
-export const implemented = Object.keys(CHECKS);
-
-// Keep source coverage separate from canonical findings: an undecided check is
-// information even if another check of the same canonical rule finds a failure.
-export function gradeStatic(html) {
-  const doc = parse(html);
-  const results = implemented.map(id => {
-    const value = CSS_DEPENDENT.has(id) && !doc.cssPresent ? U : CHECKS[id](doc);
-    return { sourceRuleId: id, ruleId: byId[id].duplicateOf || id,
-      check: byId[id].check, method: 'static-harness',
-      state: value === U ? 'UNDECIDABLE' : value === null ? 'CLEAN' : 'FINDING',
-      detail: value === U ? 'Could not decide from source; rendered evidence is required.' : value };
-  });
-  const group = rows => {
-    const merged = new Map();
-    for (const row of rows) {
-      const prior = merged.get(row.ruleId);
-      merged.set(row.ruleId, { ruleId: row.ruleId, check: row.check, method: row.method,
-        state: row.state, sourceRuleIds: [...(prior?.sourceRuleIds || []), row.sourceRuleId],
-        detail: prior ? `${prior.detail}; ${row.detail}` : row.detail });
-    }
-    return [...merged.values()];
-  };
-  const findings = group(results.filter(row => row.state === 'FINDING'));
-  const undecided = group(results.filter(row => row.state === 'UNDECIDABLE'));
-  const undecidableCount = results.filter(row => row.state === 'UNDECIDABLE').length;
-  const judged = RULES.rules.filter(rule => rule.check === 'judged').map(rule => ({
-    ruleId: rule.id, check: 'judged', state: 'ASSERTED',
-    detail: `${rule.name}. Check: ${rule.howMeasured} Guidance: ${rule.rewrite} This rule requires model judgment and is never scored.`,
-  }));
-  return { findings, undecided, judged, results, decidedCount: results.length - undecidableCount,
-    undecidableCount, litCount: results.filter(row => row.state === 'FINDING').length,
-    externalCssUnread: doc.externalCss && !doc.cssPresent };
-}
-
-export function main(args = process.argv.slice(2)) {
-  const targets = args.length ? args
-    : ['claude-default.html', 'house-clean.html', 'generator-run-1.html', 'external-css.html']
-      .map(f => join(here, 'fixtures', f));
-  console.log(`anti-default.json  ${RULES.rules.length} rules  (${RULES.rules.filter(r => r.check === 'measured').length} measured, ` +
-    `${RULES.rules.filter(r => r.check === 'proxy').length} proxy, ${RULES.rules.filter(r => r.check === 'judged').length} judged)`);
-  console.log(`static harness     ${implemented.length} source-decidable checks; per-page coverage is reported below. The rest need the rendered DOM.\n`);
-
-  let exit = 0;
-  for (const file of targets) {
-    const report = gradeStatic(readFileSync(file, 'utf8'));
-    const { findings, undecided, judged, litCount, decidedCount, undecidableCount } = report;
-    const name = basename(file);
-    const lit = new Set(findings.flatMap(row => row.sourceRuleIds));
-    // These are fixture expectations, not a claim that the page passed design review.
-    const EXPECT = {
-      'claude-default.html': { bar: 'must trip >= 5', ok: () => litCount >= 5 },
-      'house-clean.html': { bar: 'must trip 0 with nothing undecided',
-        ok: () => litCount === 0 && undecidableCount === 0 },
-      'generator-run-1.html': { bar: 'must trip AD02 + AD20, and nothing else',
-        ok: () => lit.has('AD02') && lit.has('AD20') && litCount === 2 },
-      'external-css.html': { bar: 'must decide nothing it cannot see',
-        ok: () => litCount === 0 && undecidableCount === 26 &&
-          [...CSS_DEPENDENT, 'AD50', 'AD53'].every(id => report.results.some(row => row.sourceRuleId === id && row.state === 'UNDECIDABLE')) },
-    };
-    const spec = EXPECT[name];
-    const ok = spec?.ok();
-    if (spec && !ok) exit = 1;
-    console.log(`${spec ? (ok ? 'PASS' : 'FAIL') : 'REPORT'}  ${name}  ${litCount} lit, ${decidedCount} decided, ` +
-      `${undecidableCount} undecidable  (${spec?.bar || 'no fixture bar set'})`);
-    for (const finding of findings) console.log(`      ${finding.ruleId}  ${finding.detail}`);
-    for (const row of undecided) console.log(`      ${row.ruleId}  UNDECIDABLE  ${row.detail} (source: ${row.sourceRuleIds.join(' ')})`);
-    if (report.externalCssUnread) console.log('      Styles are in an external sheet this harness never reads.');
-    for (const rule of judged) console.log(`      ${rule.ruleId}  JUDGED  ${rule.detail}`);
-    console.log('');
-  }
-  return exit;
-}
-
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) process.exitCode = main();

package/src/command-os/design/rules/fixtures/claude-default.html

@@ -1,55 +0,0 @@
-<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><title>Nexus — Elevate Your Workflow</title>
-<style>
-  :root { --brand: #7c3aed; }
-  body { font-family: Inter, sans-serif; color: #666666; background: #ffffff; font-size: 16px; margin: 0; }
-  h1, h2, h3 { font-family: 'Space Grotesk', sans-serif; color: #000000; }
-  .hero { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); padding-top: 180px; padding-bottom: 120px; text-align: center; }
-  .hero h1 { font-size: 112px; letter-spacing: -0.06em; background: linear-gradient(90deg,#fff,#c4b5fd); -webkit-background-clip: text; background-clip: text; color: transparent; }
-  .eyebrow { text-transform: uppercase; letter-spacing: 0.18em; font-size: 12px; }
-  .card { border: 1px solid #e5e7eb; box-shadow: 0 8px 32px rgba(124,58,237,0.25); border-radius: 32px; padding: 24px; background: #fff; }
-  .card::before { content: ""; }
-  .rail { border-left: 4px solid var(--brand); padding-left: 16px; }
-  .dot { width: 8px; height: 8px; border-radius: 50%; background: var(--brand); display: inline-block; }
-  .stripes { background: repeating-linear-gradient(45deg, #f3f4f6 0 8px, #fff 8px 16px); }
-  .sticky { position: fixed; z-index: 9999; }
-  button { transition: all 420ms ease-in; outline: none; cursor: url(/cursor.png), auto; }
-  button:hover { transform: scale(1.05); }
-  .fade { animation: pop 600ms ease-in forwards; }
-  @keyframes pop { from { transform: scale(0); opacity: 0 } to { transform: scale(1); opacity: 1 } }
-  .grow { transition: height 500ms linear, padding 500ms linear; }
-</style></head>
-<body>
-<nav><span class="dot"></span> Product · Pricing · Docs · Company · Blog</nav>
-<section class="hero">
-  <p class="eyebrow">v0.6 · INVITE-ONLY PREVIEW</p>
-  <h1>Elevate Your Workflow</h1>
-  <p>The seamless, world-class platform that empowers teams to unleash their potential — built for the next generation of work.</p>
-  <button>Get Started</button> <button>Start Now</button>
-  <p class="eyebrow">BUILD. SHIP. SCALE.</p>
-  <p>Lisbon 14:23 · 18°C</p>
-  <p>↓ Scroll to explore</p>
-</section>
-<section class="stripes">
-  <p class="eyebrow">01 · Features</p>
-  <h2>Why teams choose Nexus 🚀</h2>
-  <div style="display:grid;grid-template-columns:1fr 1fr 1fr;gap:24px">
-    <div class="card"><h3>Fast</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
-    <div class="card"><h3>Secure</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
-    <div class="card"><h3>Simple</h3><p>Lorem ipsum dolor sit amet, built to scale.</p></div>
-  </div>
-</section>
-<section>
-  <p class="eyebrow">02 · Proof</p>
-  <h2>Quietly in use at</h2>
-  <p>99.99% uptime · 10x faster · trusted by 50% of the Fortune 500</p>
-  <blockquote>Productivity theater is over. — Jane Doe, VP of Operations</blockquote>
-</section>
-<section class="rail">
-  <p class="eyebrow">03 · Process</p>
-  <h2>How it works</h2>
-  <p>Stage 1: Install. Stage 2: Configure. Stage 3: Ship.</p>
-  <form><input type="email" placeholder="Enter your work email"></form>
-</section>
-<footer><p>v1.4.2 · Build 0048 · last sync 4s ago · main</p></footer>
-</body></html>

package/src/command-os/design/rules/fixtures/external-css.html

@@ -1,7 +0,0 @@
-<!doctype html><html><head><meta charset="utf-8"><title>Adversary</title>
-<link rel="stylesheet" href="/styles.css"></head>
-<body class="text-[13px] text-gray-400">
-<main><h1 class="text-6xl">Headline</h1>
-<p>Body copy that is 13px and low contrast, but you cannot see that from here.</p>
-<button class="bg-gray-100 text-white">Book an assessment</button></main>
-</body></html>

package/src/command-os/design/rules/fixtures/generator-run-1.html

@@ -1,31 +0,0 @@
-<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><title>Generator run 1, reproduction</title>
-<!--
-  Reproduction of the two failures design-run's standalone generator shipped on Jerry's own
-  brand (3 passes, 26 minutes, reported by the ghl-command-mcp lane 2026-09-08):
-  13px body text, and a call-to-action at roughly 1.15:1.
-  This fixture exists to answer one question: would anti-default.json have caught them?
-  It is deliberately clean in every other respect, so anything else that lights up is a false positive.
--->
-<style>
-  :root { --ink: #232833; --body: #4a5163; --ground: #ffffff; --line: #e3e3df; --ease-out: cubic-bezier(0.23, 1, 0.32, 1); }
-  body { font-family: "Sora", system-ui, sans-serif; color: var(--body); background: var(--ground);
-         font-size: 13px; line-height: 1.55; margin: 0; }
-  h1 { font-family: "Sora", system-ui, sans-serif; color: var(--ink); font-size: 46px; line-height: 1.15; letter-spacing: -0.02em; }
-  main { max-width: 66ch; margin: 0 auto; padding: 48px 24px; }
-  .cta { background: #efefef; color: #ffffff; border: 0; border-radius: 6px;
-         min-height: 48px; min-width: 48px; padding: 14px 28px; font-size: 17px;
-         transition: transform 160ms var(--ease-out); }
-  .cta:active { transform: scale(0.97); }
-  .cta:focus-visible { outline: 2px solid var(--ink); outline-offset: 3px; }
-  @media (hover: hover) and (pointer: fine) { .cta:hover { transform: translateY(-1px); } }
-  label { display: block; color: var(--ink); font-size: 16px; margin-bottom: 6px; }
-  input { font-size: 17px; padding: 12px; border: 1px solid var(--line); border-radius: 6px; width: 100%; }
-  @media (prefers-reduced-motion: reduce) { .cta { transition: none; } .cta:active { transform: none; } }
-</style></head>
-<body><main>
-  <h1>A shorter recovery, planned before you pay</h1>
-  <p>We map what is happening, then treat it in a fixed number of visits you agree to up front. No open-ended plans.</p>
-  <button class="cta">Book an assessment</button>
-  <form><label for="e">Your email</label><input id="e" type="email"></form>
-</main></body></html>

package/src/command-os/design/rules/fixtures/house-clean.html

@@ -1,59 +0,0 @@
-<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><title>Copper Ridge Chiropractic</title>
-<style>
-  :root {
-    --ink: #262b36; --body: #4a5163; --ground: #f7f7f5; --surface: #ffffff;
-    --accent: #1f5f4f; --line: #dcdcd6;
-    --ease-out: cubic-bezier(0.23, 1, 0.32, 1);
-  }
-  body { font-family: "Source Serif 4", Georgia, serif; color: var(--body); background: var(--ground);
-         font-size: 19px; line-height: 1.55; margin: 0; }
-  h1, h2 { font-family: "Sora", system-ui, sans-serif; color: var(--ink); line-height: 1.15; letter-spacing: -0.02em; }
-  h1 { font-size: 58px; }
-  h2 { font-size: 34px; }
-  main { max-width: 68ch; margin: 0 auto; padding: 0 24px; }
-  .hero { background: var(--surface); padding-top: 72px; padding-bottom: 64px; border-bottom: 1px solid var(--line); }
-  .cta { background: var(--accent); color: var(--surface); border: 0; border-radius: 6px;
-         min-height: 48px; min-width: 48px; padding: 14px 28px; font-size: 18px;
-         transition: transform 160ms var(--ease-out), background-color 160ms var(--ease-out); }
-  .cta:active { transform: scale(0.97); }
-  .cta:focus-visible { outline: 2px solid var(--ink); outline-offset: 3px; }
-  @media (hover: hover) and (pointer: fine) { .cta:hover { background: #17493c; } }
-  label { display: block; color: var(--ink); font-size: 17px; margin-bottom: 6px; }
-  input { font-size: 18px; padding: 12px; border: 1px solid var(--line); border-radius: 6px; width: 100%; }
-  input:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
-  .panel { background: var(--surface); border: 1px solid var(--line); border-radius: 10px; padding: 28px; }
-  .split { display: grid; grid-template-columns: 1.4fr 1fr; gap: 40px; align-items: start; }
-  @media (prefers-reduced-motion: reduce) {
-    .cta { transition: background-color 160ms linear; }
-    .cta:active { transform: none; }
-  }
-</style></head>
-<body>
-<nav><a href="/care">Care</a> <a href="/team">Our team</a> <a href="/visit">Plan a visit</a></nav>
-<section class="hero"><main>
-  <h1>Back pain that has a plan behind it</h1>
-  <p>We map what is actually happening in your spine, then treat it in a fixed number of visits you agree to up front.</p>
-  <button class="cta">Book an assessment</button>
-</main></section>
-<main>
-  <section class="split">
-    <div>
-      <h2>What the first visit covers</h2>
-      <p>Ninety minutes. A movement screen, imaging review if you have it, and a written plan with the visit count on it before you pay for anything.</p>
-    </div>
-    <div class="panel">
-      <p>Dr. Amara Okonkwo has treated 1,340 patients in Copper Ridge since 2019.</p>
-    </div>
-  </section>
-  <section>
-    <h2>Book a first visit</h2>
-    <form>
-      <label for="email">Your email</label>
-      <input id="email" type="email" name="email">
-      <button class="cta" type="submit">Request a time</button>
-    </form>
-  </section>
-</main>
-<footer><main><p>Copper Ridge Chiropractic, 118 Wexler Ave. (406) 555-0173</p></main></footer>
-</body></html>