@elitedcs/ghl-mcp 3.83.1 → 3.83.3

package/dist/index.js

@@ -241,7 +241,7 @@ function foldCredentialsIntoEnv(creds, env = process.env) {
   ];
   for (const [credKey, envKey] of mappings) {
     const value = creds[credKey];
-    if (value && !env[envKey]) {
+    if (typeof value === "string" && value && !env[envKey]) {
       env[envKey] = value;
     }
   }
@@ -740,13 +740,13 @@ var init_token_registry = __esm({
       name: import_zod2.z.string().optional()
     });
     TokenRegistryDataSchema = import_zod2.z.object({
-      tokens: import_zod2.z.record(LocationTokenSchema),
+      tokens: import_zod2.z.record(import_zod2.z.string(), LocationTokenSchema),
       agencyKey: import_zod2.z.string().optional(),
       // "Home" Firebase — the company the install was set up for (credentials.json).
       firebase: FirebaseConfigSchema.optional(),
       // Additional companies' Firebase auth, keyed by GHL companyId. Lets ONE
       // process operate the workflow builder across multiple clients' GHL accounts.
-      firebaseByCompany: import_zod2.z.record(CompanyFirebaseSchema).optional()
+      firebaseByCompany: import_zod2.z.record(import_zod2.z.string(), CompanyFirebaseSchema).optional()
     });
     TokenRegistry = class _TokenRegistry {
       data;
@@ -1256,7 +1256,7 @@ var init_trigger_schemas = __esm({
       masterType: import_zod3.z.string().optional(),
       name: import_zod3.z.string().optional(),
       actions: import_zod3.z.array(TriggerActionSchema).optional(),
-      schedule_config: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+      schedule_config: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
       date_updated: import_zod3.z.string().optional()
     }).passthrough();
     ContactTagTriggerSchema = TriggerCommonSchema.extend({
@@ -1547,7 +1547,7 @@ var init_trigger_schemas = __esm({
     });
     UnknownTriggerSchema = TriggerCommonSchema.extend({
       type: import_zod3.z.string(),
-      conditions: import_zod3.z.array(import_zod3.z.record(import_zod3.z.unknown())).optional()
+      conditions: import_zod3.z.array(import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown())).optional()
     });
     WorkflowTriggerSchema = import_zod3.z.union([
       ContactTagTriggerSchema,
@@ -3883,7 +3883,8 @@ function annotateListResponse(raw, listKey, limit, nextHint) {
   };
 }
 function safeTool(server2, name, description, schema, handler) {
-  server2.tool(name, description, schema, async (args) => {
+  const toolServer = server2;
+  toolServer.tool(name, description, schema, async (args) => {
     try {
       return jsonResponse(await handler(args));
     } catch (error) {
@@ -5090,7 +5091,7 @@ function registerCalendarTools(server2, client) {
       slug: import_zod12.z.string().optional().describe("Calendar slug"),
       widgetSlug: import_zod12.z.string().optional().describe("Widget slug for embedding"),
       calendarType: import_zod12.z.string().optional().describe("Calendar type"),
-      teamMembers: import_zod12.z.array(import_zod12.z.record(import_zod12.z.unknown())).optional().describe("Array of team member objects"),
+      teamMembers: import_zod12.z.array(import_zod12.z.record(import_zod12.z.string(), import_zod12.z.unknown())).optional().describe("Array of team member objects"),
       eventTitle: import_zod12.z.string().optional().describe("Default event title"),
       eventColor: import_zod12.z.string().optional().describe("Event color hex code"),
       slotDuration: import_zod12.z.number().optional().describe("Slot duration in minutes"),
@@ -5386,7 +5387,7 @@ function registerLocationTools(server2, client) {
       timezone: import_zod13.z.string().optional().describe("IANA timezone (e.g., 'America/New_York')."),
       phone: import_zod13.z.string().optional().describe("Phone number."),
       email: import_zod13.z.string().optional().describe("Email address."),
-      settings: import_zod13.z.record(import_zod13.z.unknown()).optional().describe("Location settings object with key-value pairs."),
+      settings: import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown()).optional().describe("Location settings object with key-value pairs."),
       overwriteBusinessInfo: import_zod13.z.boolean().optional().describe(
         "Allow a CHANGE to business details on a sub-account that already has a registered A2P brand. Off by default. Only needed when the account has a brandId AND you are changing (not filling) one of name/address/city/state/postalCode/country/phone/website/email."
       )
@@ -6726,7 +6727,7 @@ function registerUserTools(server2, client, registry2) {
       role: import_zod22.z.enum(["admin", "user"]).describe("GHL role on this sub-account. 'admin' = full settings access; 'user' = day-to-day staff (contacts, conversations, calendar, opportunities)."),
       phone: import_zod22.z.string().optional().describe("Phone number (E.164 preferred)."),
       password: import_zod22.z.string().min(8).optional().describe("Only if you must set one. Omit it (recommended) so GHL sends the invite instead."),
-      permissions: import_zod22.z.record(import_zod22.z.boolean()).optional().describe("Override the default per-role permissions object entirely (GHL UserPermissions booleans)."),
+      permissions: import_zod22.z.record(import_zod22.z.string(), import_zod22.z.boolean()).optional().describe("Override the default per-role permissions object entirely (GHL UserPermissions booleans)."),
       companyId: import_zod22.z.string().optional().describe("Agency/company id. Resolved from the registered location by default; pass it only when that lookup fails."),
       locationId: import_zod22.z.string().optional().describe("Sub-account to add the user to (defaults to the active location). The user is granted access to this ONE location.")
     },
@@ -7432,10 +7433,11 @@ function registerEmailTools(server2, client) {
   );
 }
 function registerEmailBuilderInternalTools(server2, builderClient, publicClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function builderRequest(method, path39, body) {
     const headers = await client.buildHeaders();
+    assertWriteAllowed(method, `${EMAIL_BUILDER_BASE}${path39}`, { defaultLocationId: client.locationId });
     const response = await fetch(`${EMAIL_BUILDER_BASE}${path39}`, {
       method,
       headers,
@@ -7541,6 +7543,7 @@ var init_emails = __esm({
     init_account_reads();
     import_zod28 = require("zod");
     init_tool_helpers();
+    init_account_rules();
     EMAIL_BUILDER_BASE = "https://backend.leadconnectorhq.com/emails/builder";
     SNIPPETS_BASE = "https://services.leadconnectorhq.com/snippets";
     TEMPLATE_TYPES = ["html", "folder", "import", "builder", "blank", "ai_template", "vibe-editor"];
@@ -7712,7 +7715,7 @@ function registerCustomObjectTools(server2, client) {
     {
       schemaKey: import_zod30.z.string().describe("The custom object schema key."),
       locationId: import_zod30.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env."),
-      properties: import_zod30.z.record(import_zod30.z.unknown()).describe("Key-value pairs of field values for the new record.")
+      properties: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).describe("Key-value pairs of field values for the new record.")
     },
     async ({ schemaKey, locationId: locationId2, properties }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -7729,7 +7732,7 @@ function registerCustomObjectTools(server2, client) {
       schemaKey: import_zod30.z.string().describe("The custom object schema key."),
       recordId: import_zod30.z.string().describe("The record ID to update."),
       locationId: import_zod30.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env."),
-      properties: import_zod30.z.record(import_zod30.z.unknown()).describe("Key-value pairs of field values to update.")
+      properties: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).describe("Key-value pairs of field values to update.")
     },
     async ({ schemaKey, recordId, locationId: locationId2, properties }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -7990,7 +7993,7 @@ function registerEstimateTools(server2, client) {
         price: import_zod32.z.number().describe("Unit price, in the estimate currency."),
         currency: import_zod32.z.string().optional().describe("Currency code (e.g. USD).")
       })).optional().describe("Updated line items. Give quantity and price; they are translated to the qty/amount/type GHL requires."),
-      discount: import_zod32.z.record(import_zod32.z.unknown()).optional().describe("Updated discount object.")
+      discount: import_zod32.z.record(import_zod32.z.string(), import_zod32.z.unknown()).optional().describe("Updated discount object.")
     },
     async ({ estimateId, locationId: locationId2, name, title: title2, items, discount }) => {
       const resolvedLocationId = client.resolveLocationId(locationId2);
@@ -8769,7 +8772,7 @@ function registerConversationAiTools(server2, client) {
       agentId: import_zod35.z.string().describe("Agent id."),
       type: import_zod35.z.enum(ACTION_TYPES),
       name: import_zod35.z.string().min(1).describe("Name the operator sees."),
-      details: import_zod35.z.record(import_zod35.z.unknown()).describe("Type-specific details. humanHandOver: enabled, triggerCondition, handoverType (contactRequest|lackOfInformation|failedToResolveIssue|custom), examples[], assignToUserId, finalMessage, reactivateEnabled(+sleepTime/Unit). appointmentBooking: calendarId, onlySendLink, triggerWorkflow(+workflowIds), sleepAfterBooking(+sleepTime/Unit), transferBot(+transferAgent), rescheduleEnabled, cancelEnabled. triggerWorkflow: workflowIds[], triggerCondition, triggerMessage. stopBot: stopBotDetectionType (Goodbye|Custom), stopBotTriggerCondition, stopBotExamples[] (2+), finalMessage, enabled, reactivateEnabled, tags[]. updateContactField: contactFieldId, description, contactUpdateExamples[]. transferBot: transferBotType, transferToBot, enabled. advancedFollowup: enabled, scenarioId, followupSequence[].")
+      details: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown()).describe("Type-specific details. humanHandOver: enabled, triggerCondition, handoverType (contactRequest|lackOfInformation|failedToResolveIssue|custom), examples[], assignToUserId, finalMessage, reactivateEnabled(+sleepTime/Unit). appointmentBooking: calendarId, onlySendLink, triggerWorkflow(+workflowIds), sleepAfterBooking(+sleepTime/Unit), transferBot(+transferAgent), rescheduleEnabled, cancelEnabled. triggerWorkflow: workflowIds[], triggerCondition, triggerMessage. stopBot: stopBotDetectionType (Goodbye|Custom), stopBotTriggerCondition, stopBotExamples[] (2+), finalMessage, enabled, reactivateEnabled, tags[]. updateContactField: contactFieldId, description, contactUpdateExamples[]. transferBot: transferBotType, transferToBot, enabled. advancedFollowup: enabled, scenarioId, followupSequence[].")
     },
     async ({ agentId, type, name, details }) => {
       const problem = actionBodyProblem(type, details);
@@ -8787,7 +8790,7 @@ function registerConversationAiTools(server2, client) {
       actionId: import_zod35.z.string().describe("Action id."),
       type: import_zod35.z.enum(ACTION_TYPES),
       name: import_zod35.z.string().min(1),
-      details: import_zod35.z.record(import_zod35.z.unknown()).describe("The complete details for this type.")
+      details: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown()).describe("The complete details for this type.")
     },
     async ({ agentId, actionId, type, name, details }) => {
       const problem = actionBodyProblem(type, details);
@@ -10024,7 +10027,7 @@ function registerVoiceAiTools(server2, shared) {
       locationId: LOCATION,
       actionType: import_zod37.z.enum(VOICE_ACTION_TYPES),
       name: import_zod37.z.string().min(1).describe("Name the operator sees. Letters, numbers, spaces, _ and - only."),
-      actionParameters: import_zod37.z.record(import_zod37.z.unknown()).describe(ACTION_PARAMS_DOC)
+      actionParameters: import_zod37.z.record(import_zod37.z.string(), import_zod37.z.unknown()).describe(ACTION_PARAMS_DOC)
     },
     async ({ agentId, locationId: locationId2, actionType, name, actionParameters }) => {
       const client = shared.pinned();
@@ -10060,7 +10063,7 @@ function registerVoiceAiTools(server2, shared) {
       locationId: LOCATION,
       actionType: import_zod37.z.enum(VOICE_ACTION_TYPES),
       name: import_zod37.z.string().min(1),
-      actionParameters: import_zod37.z.record(import_zod37.z.unknown()).describe("The complete parameters for this type.")
+      actionParameters: import_zod37.z.record(import_zod37.z.string(), import_zod37.z.unknown()).describe("The complete parameters for this type.")
     },
     async ({ agentId, actionId, locationId: locationId2, actionType, name, actionParameters }) => {
       const client = shared.pinned();
@@ -10288,12 +10291,15 @@ function readId(workflow) {
   const id = workflow._id ?? record.id;
   return typeof id === "string" ? id : "";
 }
+function attributeBag(attributes) {
+  return attributes ? Object.fromEntries(Object.entries(attributes)) : {};
+}
 function summarizeWebhookWorkflow(workflow) {
   const templates = workflow.workflowData?.templates ?? [];
   const webhookActions = templates.filter((action) => action.type === "webhook");
   if (!webhookActions.length) return null;
   const actions = webhookActions.map((action) => {
-    const attributes = action.attributes ?? {};
+    const attributes = attributeBag(action.attributes);
     return {
       actionId: action.id,
       name: action.name,
@@ -10450,7 +10456,7 @@ function registerWebhookTools(server2, builderClient) {
         }
         const target = actionId ? webhookActions.find((a) => a.id === actionId) : webhookActions[0];
         if (!target) throw new Error(`No webhook action with id ${actionId} on workflow ${webhookId}.`);
-        const attributes = target.attributes ?? {};
+        const attributes = attributeBag(target.attributes);
         const validated = buildWebhookAction({
           id: target.id,
           name: target.name,
@@ -10522,7 +10528,7 @@ var init_webhooks = __esm({
       import_zod38.z.string().describe("A GHL trigger type, e.g. 'contact_created'. Fires with no filter."),
       import_zod38.z.object({
         type: import_zod38.z.string().describe("A GHL trigger type, e.g. 'contact_tag' or 'pipeline_stage_updated'."),
-        conditions: import_zod38.z.array(import_zod38.z.record(import_zod38.z.unknown())).optional().describe(
+        conditions: import_zod38.z.array(import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown())).optional().describe(
           "Filter conditions, exactly as update_workflow_actions takes them. Use get_trigger_registry to find the valid fields for a trigger type. Omit to fire on every event of that type."
         )
       })
@@ -10607,8 +10613,8 @@ function registerDocumentTools(server2, client) {
       sentBy: import_zod39.z.string().optional().describe("GHL user ID of the sender (required by the API; falls back to GHL_USER_ID env)."),
       documentName: import_zod39.z.string().optional().describe("Override the document name shown to recipients."),
       medium: import_zod39.z.string().optional().describe("Delivery medium, e.g. 'email'. Defaults to email."),
-      ccRecipients: import_zod39.z.array(import_zod39.z.record(import_zod39.z.unknown())).optional().describe("Optional CC recipients: [{id, email, contactName, firstName, lastName, imageUrl}]."),
-      notificationSettings: import_zod39.z.record(import_zod39.z.unknown()).optional().describe("Optional sender/receiver notification settings: {sender:{fromName,fromEmail}, receive:{subject,templateId}}."),
+      ccRecipients: import_zod39.z.array(import_zod39.z.record(import_zod39.z.string(), import_zod39.z.unknown())).optional().describe("Optional CC recipients: [{id, email, contactName, firstName, lastName, imageUrl}]."),
+      notificationSettings: import_zod39.z.record(import_zod39.z.string(), import_zod39.z.unknown()).optional().describe("Optional sender/receiver notification settings: {sender:{fromName,fromEmail}, receive:{subject,templateId}}."),
       locationId: import_zod39.z.string().optional().describe("GHL Location ID. Optional if GHL_LOCATION_ID is set in env.")
     },
     async ({ documentId, sentBy, documentName, medium, ccRecipients, notificationSettings, locationId: locationId2 }) => {
@@ -11055,7 +11061,7 @@ function registerWorkflowBuilderTools(server2, client) {
         "invoice_paid",
         "review_request_clicked"
       ]).describe("The goal-condition identifier. Extras shape per condition: email_event \u2192 {stepIds:[]}; link_click \u2192 {linkIds:[]}; appointment_status \u2192 {calendarId}; payment_received \u2192 {globalProductIds:[]}; form_submission \u2192 {formIds:[]}; document_status \u2192 {templateId}; invoice_paid \u2192 {invoiceStepId}; review_request_clicked \u2192 {reviewTypes:['sms'|'email'], reviewLinkId}; add_contact_tag/remove_contact_tag \u2192 {tags:[]} (uncaptured but inferred)."),
-      extras: import_zod40.z.record(import_zod40.z.unknown()).optional().describe("Goal-condition-specific config. See goal_condition description for the expected shape per value. Pass {} or omit for goal_conditions without extras."),
+      extras: import_zod40.z.record(import_zod40.z.string(), import_zod40.z.unknown()).optional().describe("Goal-condition-specific config. See goal_condition description for the expected shape per value. Pass {} or omit for goal_conditions without extras."),
       action: import_zod40.z.enum(["exit", "continue", "wait"]).default("exit").describe("What happens when the goal fires (per GHL's GoalAction enum). 'exit' terminates the workflow path (verified). 'continue' lets it proceed to a downstream node. 'wait' pauses on the goal."),
       name: import_zod40.z.string().default("Goal").describe("Display name in the GHL UI."),
       op: import_zod40.z.enum(["or", "and"]).default("or").describe("Top-level boolean operator across segments. Default 'or'."),
@@ -11134,7 +11140,7 @@ var init_workflow_builder = __esm({
       id: import_zod40.z.string().optional().describe("Action ID (auto-generated if omitted)."),
       name: import_zod40.z.string().describe("Display name for this action step."),
       type: import_zod40.z.string().describe("Action type."),
-      attributes: import_zod40.z.record(import_zod40.z.unknown()).optional().describe("Action-specific configuration."),
+      attributes: import_zod40.z.record(import_zod40.z.string(), import_zod40.z.unknown()).optional().describe("Action-specific configuration."),
       next: import_zod40.z.union([import_zod40.z.string(), import_zod40.z.array(import_zod40.z.string())]).optional().describe("Next action id, or branch id array for condition nodes."),
       parent: import_zod40.z.string().optional().describe("Branch parent node id."),
       parentKey: import_zod40.z.string().optional().describe("Previous action id or branch parent id."),
@@ -11190,8 +11196,7 @@ var init_page_reads = __esm({
 
 // src/tools/funnel-builder.ts
 function registerFunnelBuilderTools(server2, builderClient) {
-  const client = builderClient;
-  if (!client) {
+  if (!builderClient) {
     server2.tool(
       "funnel_builder_status",
       "Check whether the funnel / page builder is configured. It needs Firebase credentials, added via enable_workflow_builder.",
@@ -11219,6 +11224,7 @@ function registerFunnelBuilderTools(server2, builderClient) {
     );
     return;
   }
+  const client = builderClient;
   async function internalGet(path39) {
     return client.request("GET", path39);
   }
@@ -11506,6 +11512,7 @@ ${text2}`);
     headers.Origin = "https://page-builder.leadconnectorhq.com";
     headers.Referer = "https://page-builder.leadconnectorhq.com/";
     const url = `https://backend.leadconnectorhq.com/funnels/builder/autosave/${pageId}`;
+    assertWriteAllowed("POST", url, { defaultLocationId: client.locationId });
     const response = await fetch(url, { method: "POST", headers, body: JSON.stringify(body) });
     if (!response.ok) {
       throw new Error(`Funnel API Error ${response.status}: POST /builder/autosave/${pageId}
@@ -11524,7 +11531,7 @@ ${await response.text()}`);
     "Update a funnel/website page's builder content \u2014 sections, elements, settings, pageStyles, trackingCode, popups, popupsList, fontsForPreview. Use get_page_content first to see the current structure, modify it, then pass the full envelope here. Writes via GHL's builder autosave and returns the new pageDataUrl. \u26A0\uFE0F GHL accepts a save onto a page that already has content but may never make it the visible version (live-tested 2026-07-28 and again 2026-08-31). The tool now VERIFIES this for you: every response carries `save_check`, and `save_check.visible: false` means the content was stored but visitors still see the previous page \u2014 rebuild on a fresh step (create_funnel_page) and save onto that. Never report a page as updated without reading save_check. Saves as a draft unless isPublished is true.",
     {
       pageId: import_zod41.z.string().describe("The page ID to update."),
-      content: import_zod41.z.record(import_zod41.z.unknown()).describe("The full page content JSON \u2014 the 8-field envelope: sections, settings, general, pageStyles, trackingCode, fontsForPreview, popups, popupsList. Start from get_page_content and modify it."),
+      content: import_zod41.z.record(import_zod41.z.string(), import_zod41.z.unknown()).describe("The full page content JSON \u2014 the 8-field envelope: sections, settings, general, pageStyles, trackingCode, fontsForPreview, popups, popupsList. Start from get_page_content and modify it."),
       funnelId: import_zod41.z.string().optional().describe("Funnel ID that owns the page. Optional \u2014 auto-resolved from the page metadata if omitted."),
       isPublished: import_zod41.z.boolean().optional().describe("Mark the page published after the save. Defaults to false (draft).")
     },
@@ -11614,6 +11621,7 @@ var init_funnel_builder = __esm({
     import_zod41 = require("zod");
     init_tool_helpers();
     init_page_reads();
+    init_account_rules();
   }
 });
 
@@ -11814,6 +11822,9 @@ function requireCompany(api) {
 }
 async function call(api, path39, init) {
   const headers = { ...await api.headers(), Origin: "https://app.gohighlevel.com", Referer: "https://app.gohighlevel.com/" };
+  if (MUTATING_PATHS.some((mutating) => path39.startsWith(mutating))) {
+    assertWriteAllowed("POST", SVC + path39, { defaultLocationId: api.locationId() });
+  }
   const doFetch = api.fetch ?? fetch;
   const response = await doFetch(SVC + path39, { ...init, headers });
   const text = await response.text();
@@ -11907,12 +11918,14 @@ function rankForBrand(rows, brand) {
     return { ...t, why: parts.join("; ") };
   });
 }
-var SVC, GHL_ID;
+var SVC, MUTATING_PATHS, GHL_ID;
 var init_ghl_templates = __esm({
   "src/command-os/design/ghl-templates.ts"() {
     "use strict";
     init_color();
+    init_account_rules();
     SVC = "https://services.leadconnectorhq.com";
+    MUTATING_PATHS = ["/templates/template/load"];
     GHL_ID = /^[A-Za-z0-9]{15,40}$/;
   }
 });
@@ -16437,8 +16450,8 @@ function removalHoldBack(opts) {
   return null;
 }
 function registerPageStudioTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   const templateApi = () => ({
     headers: () => client.buildHeaders(),
     companyId: () => client.getIntendedCompanyId() ?? client.getCurrentCompanyId(),
@@ -16487,7 +16500,9 @@ ${await response.text()}`);
     const headers = await client.buildHeaders();
     headers.Origin = "https://page-builder.leadconnectorhq.com";
     headers.Referer = "https://page-builder.leadconnectorhq.com/";
-    const response = await fetch(`https://backend.leadconnectorhq.com/funnels/builder/autosave/${pageId}`, {
+    const autosaveUrl = `https://backend.leadconnectorhq.com/funnels/builder/autosave/${pageId}`;
+    assertWriteAllowed("POST", autosaveUrl, { defaultLocationId: client.locationId });
+    const response = await fetch(autosaveUrl, {
       method: "POST",
       headers,
       body: JSON.stringify(body)
@@ -16984,6 +16999,7 @@ var init_page_studio = __esm({
     init_tool_helpers();
     init_compose();
     init_website();
+    init_account_rules();
     valueCardSchema = import_zod43.z.object({
       title: import_zod43.z.string().describe("Card title (short, uppercase reads best)."),
       bodyHtml: import_zod43.z.string().describe("Card body as HTML (<p>\u2026</p>). May use {{location.*}} merge fields."),
@@ -17074,6 +17090,7 @@ function cleanFormDataForSave(formData) {
 async function formApiRequest(client, method, path39, body) {
   const headers = await client.buildHeaders();
   const url = `https://backend.leadconnectorhq.com/forms${path39}`;
+  assertWriteAllowed(method, url, { defaultLocationId: client.locationId });
   const options = { method, headers };
   if (body && (method === "POST" || method === "PUT")) {
     options.body = JSON.stringify(body);
@@ -17148,7 +17165,7 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     "Update a form's structure \u2014 fields, labels, conditional logic, auto-responder, email notifications, styling. Use get_form_full first to read the current form, modify the formData object, then pass it here. If name is omitted, the current name is preserved (one extra GET).",
     {
       formId: import_zod44.z.string().describe("The form ID to update."),
-      formData: import_zod44.z.record(import_zod44.z.unknown()).describe("The updated formData object containing form fields, settings, autoResponder config, etc."),
+      formData: import_zod44.z.record(import_zod44.z.string(), import_zod44.z.unknown()).describe("The updated formData object containing form fields, settings, autoResponder config, etc."),
       name: import_zod44.z.string().optional().describe("Updated form name. If omitted, the current name is preserved.")
     },
     async ({ formId, formData, name }) => {
@@ -17276,6 +17293,7 @@ var init_form_builder = __esm({
     "use strict";
     import_zod44 = require("zod");
     init_tool_helpers();
+    init_account_rules();
   }
 });
 
@@ -17407,7 +17425,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
       funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that creates the GHL contact). POSTed as JSON."),
       sentinelEmail: import_zod45.z.string().optional().describe("Override the minted sentinel email. Default: a unique blueprint-qa.<id>@example.com (won't deliver; used only to find the contact)."),
       testPhone: import_zod45.z.string().optional().describe("Include a phone on the submission (enables SMS-path checks). Must be a test-safe number you control \u2014 real SMS may send + bill."),
-      submitBody: import_zod45.z.record(import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
+      submitBody: import_zod45.z.record(import_zod45.z.string(), import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
       expectCustom: import_zod45.z.array(customFieldInput).optional().describe("Custom fields the form sends \u2014 each is asserted to PERSIST with the sent value (field-value fidelity, Carlos #3)."),
       expectStandard: import_zod45.z.array(import_zod45.z.string()).optional().describe("Standard contact keys to assert saved (e.g. ['phone','first_name']). email is always asserted."),
       triggerTag: import_zod45.z.string().optional().describe("The tag the form/bridge should add (the speed-to-lead trigger). Asserted to land on the contact."),
@@ -17665,11 +17683,12 @@ var init_funnel_qa = __esm({
 
 // src/tools/pipeline-builder.ts
 function registerPipelineBuilderTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function pipelineRequest(method, path39, body) {
     const headers = await client.buildHeaders();
     const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path39}`;
+    assertWriteAllowed(method, url, { defaultLocationId: client.locationId });
     const options = { method, headers };
     if (body && (method === "POST" || method === "PUT" || method === "PATCH")) {
       options.body = JSON.stringify(body);
@@ -17852,6 +17871,7 @@ var init_pipeline_builder = __esm({
   "src/tools/pipeline-builder.ts"() {
     "use strict";
     import_zod46 = require("zod");
+    init_account_rules();
   }
 });
 
@@ -18580,19 +18600,20 @@ function deviceFingerprint(opts) {
 function base64urlDecode(s) {
   const b64 = s.replace(/-/g, "+").replace(/_/g, "/");
   const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
-  return new Uint8Array(Buffer.from(padded, "base64"));
+  return new Uint8Array(new Uint8Array(Buffer.from(padded, "base64")).buffer);
 }
 async function getPublicKey() {
   if (cachedPublicKey) return cachedPublicKey;
   const raw = Buffer.from(ATTESTATION_PUBLIC_KEY_B64, "base64");
-  cachedPublicKey = await import_node_crypto3.webcrypto.subtle.importKey(
+  const key = await import_node_crypto3.webcrypto.subtle.importKey(
     "raw",
     raw,
     { name: "Ed25519" },
     false,
     ["verify"]
   );
-  return cachedPublicKey;
+  cachedPublicKey = key;
+  return key;
 }
 function parseAttestationPayload(token2) {
   try {
@@ -20007,7 +20028,8 @@ function registerValidatorTools(server2, client, builderClient) {
         const workflow = await builderClient.getWorkflow(workflowId);
         if (!workflow) return errorResponse(new Error(`Workflow ${workflowId} not found`));
         const refs = [];
-        const socialPlatforms = await connectedSocialPlatforms(client, client.defaultLocationId);
+        const locationId2 = client.resolveLocationId();
+        const socialPlatforms = await connectedSocialPlatforms(client, locationId2);
         const shape = [
           ...checkActionShapes(workflow),
           ...checkSaveBlockers(workflow),
@@ -20020,7 +20042,7 @@ function registerValidatorTools(server2, client, builderClient) {
           return jsonResponse({ workflowId, workflowName: workflow.name, ...summarizeFindings(shape), references_scanned: 0, actions_checked: actionsChecked, findings: shape });
         const needWorkflows = refs.some((r) => r.kind === "workflow");
         const catalog2 = needWorkflows ? await fullWorkflowCatalog(builderClient) : { ids: /* @__PURE__ */ new Set(), complete: true };
-        const lookups = await fetchAndBuildLookups(client, builderClient, client.defaultLocationId, { ids: catalog2.ids, complete: catalog2.complete });
+        const lookups = await fetchAndBuildLookups(client, builderClient, locationId2, { ids: catalog2.ids, complete: catalog2.complete });
         const findings = [...shape, ...checkRefs(refs, workflowId, lookups)];
         const report2 = {
           workflowId,
@@ -20042,7 +20064,7 @@ function registerValidatorTools(server2, client, builderClient) {
     {},
     async () => {
       try {
-        const locationId2 = client.defaultLocationId;
+        const locationId2 = client.resolveLocationId();
         const catalog2 = await fullWorkflowCatalog(builderClient);
         if (catalog2.rows.length === 0)
           return jsonResponse({
@@ -24836,7 +24858,7 @@ var init_plan = __esm({
       workflows: import_zod51.z.array(workflowSchema).optional(),
       handoffs: import_zod51.z.array(handoffSchema).optional(),
       buildOrder: import_zod51.z.array(import_zod51.z.string()).optional(),
-      idMap: import_zod51.z.record(import_zod51.z.string()).optional()
+      idMap: import_zod51.z.record(import_zod51.z.string(), import_zod51.z.string()).optional()
     }).strict();
     PLAN_ERROR_CODES = {
       /** A workflow named like /nurture/i whose waits add up to < 30 days. */
@@ -26374,15 +26396,29 @@ function newRunId(now = /* @__PURE__ */ new Date(), rand = defaultRand) {
 function defaultRand() {
   return Math.floor(Math.random() * 65536).toString(16).padStart(4, "0");
 }
+function legacyFunnelParentage(plan) {
+  const funnels = plan.funnels;
+  if (!Array.isArray(funnels)) return [];
+  const pairs = [];
+  for (const funnel of funnels) {
+    if (typeof funnel !== "object" || funnel === null) continue;
+    const { ref, pages } = funnel;
+    if (typeof ref !== "string" || !Array.isArray(pages)) continue;
+    for (const page of pages) {
+      if (typeof page !== "object" || page === null) continue;
+      const pageRef = page.ref;
+      if (typeof pageRef === "string") pairs.push([pageRef, ref]);
+    }
+  }
+  return pairs;
+}
 function parentRefIndex(plan) {
   const parents = /* @__PURE__ */ new Map();
   if (!plan) return parents;
   for (const p of plan.pipelines ?? []) {
     for (const st of p.stages ?? []) parents.set(st.ref, p.ref);
   }
-  for (const fn of plan.funnels ?? []) {
-    for (const pg of fn.pages ?? []) parents.set(pg.ref, fn.ref);
-  }
+  for (const [pageRef, funnelRef] of legacyFunnelParentage(plan)) parents.set(pageRef, funnelRef);
   return parents;
 }
 function buildRunRecord(input) {
@@ -26955,8 +26991,13 @@ async function clientPreflight(registry2, locationId2) {
     }
   } catch {
   }
-  lines.push({ key: "authentication", ok: authenticated, text: authenticated ? "The Anthropic key authenticates." : key ? "The Anthropic key did not authenticate. Paste a working key in Your agency and press Check and save this key." : "Paste your Anthropic key in Your agency and press Check and save this key." });
-  return { ok: lines.every((l) => l.ok), lines };
+  lines.push({
+    key: "authentication",
+    ok: authenticated,
+    text: authenticated ? "Your Anthropic key authenticates, so powered runs will bill it." : key ? "The saved Anthropic key did not authenticate, so powered runs will fall back to your Claude sign-in on this computer. Replace it in Your agency, or remove it." : "No Anthropic key saved. Powered runs use your Claude sign-in on this computer and cost you nothing extra."
+  });
+  const blocking = lines.filter((l) => l.key !== "authentication");
+  return { ok: blocking.every((l) => l.ok), lines };
 }
 async function agencyConnectionReady(registry2, companyId) {
   const key = registry2.getAgencyKey();
@@ -28540,7 +28581,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.83.1",
+      version: "3.83.3",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -28555,11 +28596,6 @@ var require_package = __commonJS({
         "src/command-os/design/rules/anti-default.json",
         "src/command-os/design/rules/web.json",
         "src/command-os/design/rules/anti-default-contract.mjs",
-        "src/command-os/design/rules/check-static.mjs",
-        "src/command-os/design/rules/fixtures/claude-default.html",
-        "src/command-os/design/rules/fixtures/house-clean.html",
-        "src/command-os/design/rules/fixtures/generator-run-1.html",
-        "src/command-os/design/rules/fixtures/external-css.html",
         "dist/index.js",
         "dist/capture-helper.js",
         "templates/action-schemas.json",
@@ -28577,6 +28613,7 @@ var require_package = __commonJS({
       ],
       scripts: {
         build: "node src/command-os/assessment/build-app.mjs && esbuild src/index.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/index.js --packages=external && esbuild src/capture-helper.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/capture-helper.js --packages=external",
+        typecheck: "tsc --noEmit",
         setup: "node setup-wizard.mjs",
         catalogue: "node scripts/export-command-os-catalogue.mjs",
         "manifest:write": "node scripts/write-package-manifest.mjs",
@@ -29001,7 +29038,8 @@ function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath
   throw new Error("Something else saved this record while you were editing. Nothing was changed \u2014 reload and enter it again.");
 }
 function floorFor(e, profile) {
-  const offer = e.offer && profile.offers?.find((o) => o.name.trim().toLowerCase() === e.offer.trim().toLowerCase());
+  const wanted = e.offer?.trim().toLowerCase();
+  const offer = wanted ? profile.offers?.find((o) => o.name.trim().toLowerCase() === wanted) : void 0;
   if (offer?.priceFloor !== void 0) return offer.priceFloor;
   if (e.cadence === "monthly") return profile.pricing?.minMonthly;
   if (e.cadence === "one-time") return profile.pricing?.minSetup;
@@ -30024,13 +30062,14 @@ function pickLatest(notes) {
   }
   return null;
 }
-var PIPELINE_NAME, NOTE_TITLE, MACHINE_MARKER, MARKER_LINE, NOTE_LIMIT;
+var PIPELINE_NAME, NOTE_TITLE, MACHINE_MARKER, STAGES, MARKER_LINE, NOTE_LIMIT;
 var init_store2 = __esm({
   "src/command-os/assessment/store.ts"() {
     "use strict";
     PIPELINE_NAME = "Assessments";
     NOTE_TITLE = "GHL COMMAND ASSESSMENT";
     MACHINE_MARKER = "--- machine block, do not edit below this line ---";
+    STAGES = ["Gathering", "Findings", "Proposal sent", "Won", "Lost"];
     MARKER_LINE = /^--- machine block, do not edit below this line ---(?: \((\d+)\/(\d+)(?: s=([a-z0-9]{6}))?\))?[ \t]*$/gm;
     NOTE_LIMIT = 2e4;
   }
@@ -30044,7 +30083,8 @@ async function loadAssessmentRecord(reader, contactId) {
 }
 async function findAssessmentPipeline(reader, locationId2) {
   const raw = await reader.get("/opportunities/pipelines", { params: { locationId: locationId2 } });
-  return (raw?.pipelines ?? []).find((p) => String(p.name).trim().toLowerCase() === PIPELINE_NAME.toLowerCase());
+  const pipelines = Array.isArray(raw?.pipelines) ? raw.pipelines : [];
+  return pipelines.find((p) => String(p.name).trim().toLowerCase() === PIPELINE_NAME.toLowerCase());
 }
 async function listAssessmentRecords(reader, locationId2) {
   const pipeline = await findAssessmentPipeline(reader, locationId2);
@@ -33394,7 +33434,7 @@ function registerAssessmentTools(server2, client) {
         quote: import_zod52.z.string().describe("The owner's own words, VERBATIM from the transcript. Do not tidy it up \u2014 if it is not in the transcript the answer is thrown out."),
         reasoning: import_zod52.z.string().optional().describe("How you got from the quote to the value, when they are not the same.")
       })).describe("One entry per question you could answer. Leave out anything the conversation did not cover."),
-      existing: import_zod52.z.record(import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
+      existing: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
     },
     async ({ transcript, proposed, existing }) => {
       const gated = gateExtraction(transcript, proposed, QUESTION_UNITS);
@@ -33517,9 +33557,9 @@ var init_assessment = __esm({
     StateSchema = import_zod52.z.object({
       biz: import_zod52.z.string().min(1).describe("The prospect's business name."),
       trade: import_zod52.z.string().optional().describe("Their trade. Decides which benchmarks may be applied."),
-      ans: import_zod52.z.record(import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).describe("questionId -> answer, exactly as typed."),
-      skip: import_zod52.z.record(import_zod52.z.boolean()).optional().describe("questionId -> true where they did not know."),
-      asm: import_zod52.z.record(import_zod52.z.number()).optional().describe("assumption id -> rate as a decimal."),
+      ans: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).describe("questionId -> answer, exactly as typed."),
+      skip: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.boolean()).optional().describe("questionId -> true where they did not know."),
+      asm: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.number()).optional().describe("assumption id -> rate as a decimal."),
       client: import_zod52.z.object({ name: import_zod52.z.string().max(120), role: import_zod52.z.string().max(80), email: import_zod52.z.string().max(200), phone: import_zod52.z.string().max(40), website: import_zod52.z.string().max(300), city: import_zod52.z.string().max(120) }).partial().optional().describe("The person and place this is for, as typed on The client step. Rides with the answers so a load brings it back.")
     });
   }
@@ -34096,7 +34136,7 @@ function startRun(locationId2, stage, onDone, meta = {}) {
       const obligations = (context.manualObligations ?? []).filter((o) => !deps.some((d) => d.ref === o.ref) && !(outcome.manualChecks ?? []).some((c) => c.ref === o.ref && c.type === o.type && c.ok && c.evidence.trim()));
       for (const h of plan?.plan?.handoffs ?? []) if (!obligations.some((o) => o.ref === h.ref) && !(outcome.manualChecks ?? []).some((c) => c.ref === h.ref && c.ok && c.evidence.trim())) obligations.push({ ref: h.ref, type: "handoff", name: h.title || h.name || h.ref, reason: h.instruction || "Finish this manual action." });
       outcome.ok = verifyBuildPassed(outcome, readback, plan?.plan);
-      verifyRaw = { summary: outcome.summary, issues: outcome.issues, verification: { deps, checks, readback, obligations, buildOk: outcome.ok, liveProofApplicable: Boolean(plan?.plan?.funnels?.length), liveProof: outcome.liveProof ?? { ok: false, evidence: outcome.error || "No test-lead result was returned." } } };
+      verifyRaw = { summary: outcome.summary, issues: outcome.issues, verification: { deps, checks, readback, obligations, buildOk: outcome.ok, liveProofApplicable: Boolean(plan?.plan && typeof plan.plan === "object" && "funnels" in plan.plan && Array.isArray(plan.plan.funnels) && plan.plan.funnels.length), liveProof: outcome.liveProof ?? { ok: false, evidence: outcome.error || "No test-lead result was returned." } } };
       if (!plan?.plan) {
         outcome.ok = false;
         verifyRaw.issues = [...verifyRaw.issues ?? [], "Run Build before verifying."];
@@ -35190,7 +35230,7 @@ function card(c,state,run){const st=(state.clients[c.locationId]||{stages:STAGES
    el.appendChild(box)}
   // One short line here; the button's confirmation carries the full wording. At 135
   // characters this sentence made every stage box 677 px tall (auditor, 2026-09-07).
-  if(i===4){const disclosure=document.createElement("small");disclosure.textContent="Submits one test lead, then deletes it.";el.appendChild(disclosure)}
+  if(i===4){const disclosure=document.createElement("small");disclosure.textContent="Reads every planned item back. May submit and delete one test lead.";el.appendChild(disclosure)}
   if(gate)el.title=gate;
   if(stale&&!live){const reason=document.createElement("small");reason.textContent=stale.reason;el.appendChild(reason)}
   const oc=(state.outcomes||{})[c.locationId+":"+i];
@@ -36987,8 +37027,9 @@ async function runDashboard(argv) {
           state = setAccountType(state, outcome.locationId, "client");
           if (args.industry) state = setAccountIndustry(state, outcome.locationId, args.industry);
           if (!outcome.registered) {
-            state = setPending(state, outcome.locationId, args.name, args.industry || void 0);
-            if (outcome.saveFailed) state.pending[outcome.locationId].saveFailed = true;
+            const pending = setPending(state, outcome.locationId, args.name, args.industry || void 0);
+            if (outcome.saveFailed) pending.pending[outcome.locationId].saveFailed = true;
+            state = pending;
           }
           writeCockpitState(state);
           res.writeHead(200, { "Content-Type": "application/json" });
@@ -37996,7 +38037,7 @@ function registerBulkOperationTools(server2, client) {
     "Update the same field(s) on multiple contacts at once. Rate-limited. Example: set a custom field value, change source, update address for a batch of contacts.",
     {
       contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to update."),
-      fields: import_zod54.z.record(import_zod54.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
+      fields: import_zod54.z.record(import_zod54.z.string(), import_zod54.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
     },
     async ({ contactIds, fields }) => {
       if (Object.keys(fields).length === 0) {
@@ -39054,10 +39095,12 @@ function registerWorkflowClonerTools(server2, builderClient) {
             workflowId: void 0
             // Will be set by the new workflow
           };
-          if (cloned.data && typeof cloned.data === "object" && "targetActionId" in cloned.data) {
+          const clonedData = cloned.data;
+          if (clonedData && typeof clonedData === "object" && "targetActionId" in clonedData) {
+            const targetActionId = clonedData.targetActionId;
             cloned.data = {
-              ...cloned.data,
-              targetActionId: remap(cloned.data.targetActionId)
+              ...clonedData,
+              targetActionId: typeof targetActionId === "string" ? remap(targetActionId) : targetActionId
             };
           }
           return cloned;
@@ -39170,11 +39213,12 @@ function buildContactSmartListBody(args) {
   };
 }
 function registerSmartListTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function smartListRequest(method, path39, body) {
     const headers = await client.buildHeaders();
     const url = `${SMARTLIST_BASE}${path39}`;
+    assertWriteAllowed(method, url, { defaultLocationId: client.locationId });
     const options = { method, headers };
     if (body && (method === "POST" || method === "PUT")) {
       options.body = JSON.stringify(body);
@@ -39232,7 +39276,7 @@ ${await res.text()}`);
     {
       name: import_zod57.z.string().describe("Display name for the smart list."),
       tagFilters: import_zod57.z.array(import_zod57.z.array(import_zod57.z.string())).optional().describe('Tag conditions. Each inner array is one filter requiring ALL those tags, e.g. [["escalated"]] for "has the escalated tag".'),
-      rawFilters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
+      rawFilters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ name, tagFilters, rawFilters, locationId: locationId2 }) => {
@@ -39244,6 +39288,7 @@ ${await res.text()}`);
         ];
         const body = buildContactSmartListBody({ listName: name, locationId: loc, filters });
         const headers = await client.buildHeaders();
+        assertWriteAllowed("POST", CONTACT_SMARTLIST_BASE, { defaultLocationId: client.locationId });
         const res = await fetch(CONTACT_SMARTLIST_BASE, { method: "POST", headers, body: JSON.stringify(body) });
         if (!res.ok) throw new Error(`Smart Lists API Error ${res.status}: POST /contacts/smartlist
 ${await res.text()}`);
@@ -39281,6 +39326,7 @@ ${await res.text()}`);
     async ({ listId }) => {
       try {
         const headers = await client.buildHeaders();
+        assertWriteAllowed("POST", CONTACT_SMARTLIST_DELETE, { defaultLocationId: client.locationId });
         const res = await fetch(CONTACT_SMARTLIST_DELETE, {
           method: "POST",
           headers,
@@ -39317,8 +39363,8 @@ ${await res.text()}`);
     {
       name: import_zod57.z.string().describe("Display name for the smart list."),
       objectKey: import_zod57.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
+      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
+      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
       pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
       defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs where this list is the default view."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
@@ -39344,8 +39390,8 @@ ${await res.text()}`);
     {
       listId: import_zod57.z.string().describe("The smart list ID to update."),
       name: import_zod57.z.string().optional().describe("New display name."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.unknown())).optional().describe("Replace the column array entirely."),
+      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
+      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the column array entirely."),
       pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the pipeline scope."),
       defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the default-in-pipelines list."),
       locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
@@ -39394,6 +39440,7 @@ var init_smart_lists = __esm({
     "use strict";
     import_zod57 = require("zod");
     init_tool_helpers();
+    init_account_rules();
     SMARTLIST_BASE = "https://backend.leadconnectorhq.com/lists/dynamic";
     OBJECT_KEYS = ["contacts", "opportunity"];
     CONTACT_SMARTLIST_BASE = "https://services.leadconnectorhq.com/contacts/smartlist";
@@ -39412,9 +39459,10 @@ var init_smart_lists = __esm({
 
 // src/tools/reputation.ts
 function registerReputationTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function reputationRequest(method, path39) {
+    assertWriteAllowed(method, `${REPUTATION_BASE}${path39}`, { defaultLocationId: client.locationId });
     const headers = await client.buildHeaders();
     const response = await fetch(`${REPUTATION_BASE}${path39}`, { method, headers });
     if (!response.ok) {
@@ -39493,6 +39541,7 @@ var init_reputation = __esm({
     "use strict";
     import_zod58 = require("zod");
     init_tool_helpers();
+    init_account_rules();
     REPUTATION_BASE = "https://backend.leadconnectorhq.com/reputation";
   }
 });
@@ -39527,6 +39576,7 @@ function registerEmailCampaignTools(server2, builderClient) {
       if (enableResendToUnopened !== void 0) body.enableResendToUnopened = enableResendToUnopened;
       if (hasUtmTracking !== void 0) body.hasUtmTracking = hasUtmTracking;
       const headers = await client.buildHeaders();
+      assertWriteAllowed("POST", `${SVC_BASE}/emails/schedule`, { defaultLocationId: client.locationId });
       const response = await fetch(`${SVC_BASE}/emails/schedule`, {
         method: "POST",
         headers,
@@ -39552,15 +39602,17 @@ var init_email_campaigns = __esm({
     "use strict";
     import_zod59 = require("zod");
     init_tool_helpers();
+    init_account_rules();
     SVC_BASE = "https://services.leadconnectorhq.com";
   }
 });
 
 // src/tools/memberships.ts
 function registerMembershipTools(server2, builderClient) {
+  if (!builderClient) return;
   const client = builderClient;
-  if (!client) return;
   async function membershipRequest(path39, method = "GET", body) {
+    assertWriteAllowed(method, `${MEMBERSHIP_BASE2}${path39}`, { defaultLocationId: client.locationId });
     const headers = await client.buildHeaders();
     const response = await fetch(`${MEMBERSHIP_BASE2}${path39}`, {
       method,
@@ -39748,6 +39800,7 @@ var init_memberships = __esm({
     "use strict";
     import_zod60 = require("zod");
     init_tool_helpers();
+    init_account_rules();
     MEMBERSHIP_BASE2 = "https://backend.leadconnectorhq.com/membership";
   }
 });
@@ -39875,7 +39928,7 @@ function registerTemplateDeployerTools(server2, client) {
     "Deploy a template to set up a GHL sub-account. Creates tags, custom fields, pipelines with stages, calendars, workflows, and forms based on the template and the user's questionnaire answers. This is the main setup automation tool.",
     {
       templateFile: import_zod61.z.string().describe("Path to the template JSON file."),
-      answers: import_zod61.z.record(import_zod61.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
+      answers: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
       locationId: import_zod61.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
       dryRun: import_zod61.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false."),
       overwriteBusinessInfo: import_zod61.z.boolean().optional().describe(
@@ -40096,6 +40149,7 @@ Pipelines: ${template.pipelines.length} to create`);
             } else {
               try {
                 const headers = await builderClient.buildHeaders();
+                assertWriteAllowed("POST", "https://backend.leadconnectorhq.com/opportunities/pipelines", { defaultLocationId: locId });
                 const res = await fetch("https://backend.leadconnectorhq.com/opportunities/pipelines", {
                   method: "POST",
                   headers,
@@ -40270,6 +40324,7 @@ var init_template_deployer = __esm({
     init_tool_helpers();
     fs28 = __toESM(require("fs"));
     path27 = __toESM(require("path"));
+    init_account_rules();
     TemplateSchema = import_zod61.z.object({
       templateName: import_zod61.z.string(),
       templateVersion: import_zod61.z.string().optional(),
@@ -40281,7 +40336,7 @@ var init_template_deployer = __esm({
         required: import_zod61.z.boolean().optional(),
         placeholder: import_zod61.z.string().optional()
       })).optional().default([]),
-      location: import_zod61.z.record(import_zod61.z.unknown()).optional(),
+      location: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).optional(),
       tags: import_zod61.z.array(import_zod61.z.string()).optional(),
       customFields: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
@@ -40294,7 +40349,7 @@ var init_template_deployer = __esm({
       workflows: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
         condition: import_zod61.z.string().optional(),
-        actions: import_zod61.z.array(import_zod61.z.record(import_zod61.z.unknown())).optional().default([])
+        actions: import_zod61.z.array(import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown())).optional().default([])
       })).optional(),
       calendars: import_zod61.z.array(import_zod61.z.object({
         name: import_zod61.z.string(),
@@ -40334,13 +40389,17 @@ var init_version_check = __esm({
 });
 
 // src/tools/diagnostics.ts
+function anthropicKeyCheckStatus(verdict) {
+  const severity = ANTHROPIC_KEY_STATUS[verdict];
+  return severity === "ok" ? "pass" : severity;
+}
 async function collectInstallChecks(installedVersion, client, builderClient, registry2, getGatingReport, plan = "mcp", probeAnthropic = probeAnthropicKey) {
   const checks = [];
   const anthropicPromise = plan === "command-os" ? (async () => {
     const r = await probeAnthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
     return {
       name: "Anthropic key (Command OS demo builder)",
-      status: ANTHROPIC_KEY_STATUS[r.verdict],
+      status: anthropicKeyCheckStatus(r.verdict),
       detail: r.raw ? `${r.detail} Anthropic said: "${r.raw}"` : r.detail
     };
   })() : null;
@@ -46256,7 +46315,7 @@ function registerAgencyBuildTools(server2, knownTools) {
         why: import_zod72.z.string().min(3).describe("Plain English. This is what the operator reads before approving."),
         targets: import_zod72.z.array(targetSchema).default([]),
         creates: import_zod72.z.array(import_zod72.z.object({ ref: import_zod72.z.string(), kind: import_zod72.z.string() })).optional().describe("What this step brings into existence, for later steps to point at."),
-        args: import_zod72.z.record(import_zod72.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
+        args: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
       })).min(1)
     },
     async ({ goal, findings, steps }) => {
@@ -46326,7 +46385,7 @@ function registerAgencyBuildTools(server2, knownTools) {
       undo: import_zod72.z.string().optional().describe("Required on 'applied'. How to reverse this exact write, specifically enough to act on months later."),
       because: import_zod72.z.string().optional().describe("Required on 'failed'. What the account actually said."),
       result: import_zod72.z.unknown().optional().describe("What came back, kept so a stall can be diagnosed without re-running anything."),
-      resolved: import_zod72.z.record(import_zod72.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
+      resolved: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
       retry: import_zod72.z.boolean().optional().describe("This is a second run of a step that failed. Both attempts are kept, and the earlier failure stops blocking what came after it.")
     },
     async ({ buildId, stepId, state, undo, because, result, resolved: resolved2, retry }) => {
@@ -47191,7 +47250,7 @@ function registerAuditReportTools(server2) {
     "build_audit_report",
     "Turn the output of `audit_workflows` into a client-ready assessment: plain-English findings with money attached where it can honestly be attached, ranked worst-first, plus an explicit list of what could NOT be checked. Call `audit_workflows` first and pass its result here \u2014 this does not re-read the account. Give `leadsPerMonth`, `closeRate` and `monthlyValuePerClient` if you know them and the findings get costed in dollars; leave them out and it says which input is missing instead of guessing. `monthlyValuePerClient` defaults to your saved minimum monthly fee from your agency profile. Use this to produce the document you send or present, not to diagnose \u2014 the diagnosing already happened.",
     {
-      audit: import_zod74.z.record(import_zod74.z.unknown()).describe("The full JSON result returned by audit_workflows."),
+      audit: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The full JSON result returned by audit_workflows."),
       audience: import_zod74.z.enum(["internal", "prospect"]).optional().describe("Who reads it. 'internal' (default) is a report about an account you already run, and may use your own minimum monthly as what a client is worth. 'prospect' is a document about somebody else's business: your numbers are NEVER used, so findings stay uncosted unless you supply THEIR lead volume, close rate and client value."),
       accountName: import_zod74.z.string().describe("The client's name as they should see it on the document."),
       locationId: import_zod74.z.string().optional().describe("Sub-account id. Recorded on the document, never shown in the body."),
@@ -47256,7 +47315,7 @@ function registerAuditReportTools(server2) {
     "build_site_audit_report",
     "Turn a website read-through into the assessment document you put in front of a PROSPECT \u2014 someone whose GoHighLevel account you do not have. Pass the verified observations from a site crawl and it returns plain-English findings, ranked, each one carrying the quote and the page it came from. Use it before a sales call, or alongside a receptionist demo, so the same read of their site fills both. It never invents money: a website cannot tell you what a lead is worth to that business, so findings come back uncosted unless you supply THEIR figures, and the document says why. It also never repeats a claim the crawl could not stand up \u2014 anything refused is returned separately, so you can see what was thrown out rather than wonder what was missed.",
     {
-      observations: import_zod74.z.record(import_zod74.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
+      observations: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
       businessName: import_zod74.z.string().describe("The business's name as it should appear on the document."),
       leadsPerMonth: import_zod74.z.number().min(0).optional().describe("THEIR leads per month, if they told you. Never your own figure."),
       closeRate: import_zod74.z.number().min(0).max(1).optional().describe("THEIR close rate, 0-1, if they told you. Never guessed."),
@@ -48138,7 +48197,7 @@ var init_brief2 = __esm({
       preset: presetSchema,
       briefSource: briefSourceSchema,
       /** Partner-OS deep structures (ICA / offer / brand-DNA), carried verbatim. */
-      extended: import_zod79.z.record(import_zod79.z.unknown()).optional(),
+      extended: import_zod79.z.record(import_zod79.z.string(), import_zod79.z.unknown()).optional(),
       business: import_zod79.z.object({
         name: import_zod79.z.string(),
         type: import_zod79.z.string().optional(),
@@ -49913,7 +49972,7 @@ async function executeBackbone(plan, deps, opts = {}) {
         pendStaff(u, `Staff member "${name}" (${u.email}) was not created: no agency key is registered (creating users is an agency-level write). Run register_agency_key with an agency-level Private Integration key that has users.write, then re-run \u2014 or add them in Settings \u2192 Team and re-run to bind them by email.`);
         continue;
       }
-      let outcome;
+      let outcome = void 0;
       let recoveredUser;
       try {
         outcome = await deps.createUser({ firstName: u.firstName, lastName: u.lastName, email: u.email, role: u.role, phone: u.phone });
@@ -50927,6 +50986,7 @@ function pickCalendarPins(workflow) {
 }
 function makeFirebaseRequest(builderClient) {
   return async (url, method, body) => {
+    assertWriteAllowed(method, url, { defaultLocationId: builderClient.locationId });
     const headers = await builderClient.buildHeaders();
     const response = await fetch(url, { method, headers, body: body ? JSON.stringify(body) : void 0 });
     if (!response.ok) {
@@ -51353,14 +51413,14 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "validate_brief",
     "Validate an Intake-to-Build Brief object against the \xA74 schema. Returns {valid, errors}. Use to check a normalized brief before handing it to the plan-generation skill.",
     {
-      brief: import_zod80.z.record(import_zod80.z.unknown()).describe("The Brief object to validate.")
+      brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).describe("The Brief object to validate.")
     },
     async ({ brief }) => validateBrief(brief)
   );
   const buildPlanSchema2 = {
-    plan: import_zod80.z.record(import_zod80.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
+    plan: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
     fromPreset: import_zod80.z.boolean().optional().describe("PLAN-FROM-PRESET (PRD row 4d): compose the \xA75 plan SERVER-SIDE from the industry preset + the \xA74 brief, deterministically, in milliseconds \u2014 never author workflow actions by hand when a preset covers the brief. Pass `brief` (required) and optionally `preset` and `copy`; omit `plan`. The composed plan carries the preset's full structure (workflows, templates with complete send-ready copy token-filled from the brief, staff users, calendars with the brief's appointment lengths, pipeline stages, notification targets) and then flows through the exact same validate \u2192 dry_run/execute path as a passed plan, including being saved on execute. The dry_run response lists copySlots \u2014 the template refs whose subject/body the model MAY refine via `copy` on the execute call. If the preset cannot cover the brief the tool answers phase:\"compose\" with the reasons; only then author a plan by hand."),
-    brief: import_zod80.z.record(import_zod80.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
+    brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
     preset: import_zod80.z.string().optional().describe("fromPreset only: which preset to compose from \u2014 a preset id (med_spa, clinic, coach, local_service, ecom, generic), an alias (dental, medspa, home_services\u2026), or an industry slug (med-spa, local-service, ecommerce\u2026). Defaults to the brief's own preset field; an unknown value falls back to the generic preset (noted in the response)."),
     copy: import_zod80.z.array(
       import_zod80.z.object({
@@ -52013,7 +52073,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     {
       formId: import_zod80.z.string().describe("The intake form ID (from install_intake_form)."),
       submissionId: import_zod80.z.string().optional().describe("Specific submission to normalize. Defaults to the most recent."),
-      fieldMap: import_zod80.z.record(import_zod80.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
+      fieldMap: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
       preset: import_zod80.z.string().optional().describe("Override the preset. Defaults to one derived from business_type.")
     },
     async ({ formId, submissionId, fieldMap, preset }) => {
@@ -52100,6 +52160,7 @@ var init_intake_to_build = __esm({
     init_plan_from_preset();
     init_executor();
     init_execute();
+    init_account_rules();
     customFieldItemSchema = import_zod80.z.object({
       id: import_zod80.z.string(),
       name: import_zod80.z.string(),
@@ -52145,7 +52206,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env = process.
   registerConnectorTools(wrap(CONNECTORS_MODULE));
   registerGoogleCalendarTools(wrap(GOOGLE_CALENDAR_MODULE));
   registerDeliveryAuditTools(wrap(DELIVERY_AUDIT_MODULE));
-  registerDesignStudioTools(wrap(DESIGN_STUDIO_MODULE), builderClient, client);
+  registerDesignStudioTools(wrap(DESIGN_STUDIO_MODULE));
   registerAgencyBuildTools(wrap(AGENCY_BUILD_MODULE), () => registeredTools);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
@@ -52291,9 +52352,16 @@ var init_tools = __esm({
       [registerAssociationTools, "associations"],
       [registerEstimateTools, "estimates"],
       [registerCouponTools, "coupons"],
-      [registerKnowledgeBaseTools, "knowledge-base"],
-      [registerConversationAiTools, "conversation-ai"],
-      [registerAiEmployeeDemoTools, "ai-employee-demo"],
+      [(server2, client) => registerKnowledgeBaseTools(server2, client), "knowledge-base"],
+      // Wrapped, not listed bare: this registrar's third parameter is a `deps`
+      // object, not the TokenRegistry the loop below passes to everything in this
+      // list. Today that is harmless — every key of `deps` is optional and a
+      // TokenRegistry has none of them, so every read falls back to its default —
+      // but it is harmless by luck, and stops being harmless the day TokenRegistry
+      // grows a `sleep`, `now` or `journalDir`. The wrapper passes nothing, which
+      // is what the registrar effectively receives now.
+      [(server2, client) => registerConversationAiTools(server2, client), "conversation-ai"],
+      [(server2, client) => registerAiEmployeeDemoTools(server2, client), "ai-employee-demo"],
       [registerVoiceAiTools, "voice-ai"],
       [registerDocumentTools, "documents"],
       [registerBulkOperationTools, "bulk-operations"],
@@ -52542,6 +52610,12 @@ var init_cli2 = __esm({
 });
 
 // src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  TRANSITIONAL_ATTESTATION_DEADLINE: () => TRANSITIONAL_ATTESTATION_DEADLINE,
+  licenseGateFailureMessage: () => licenseGateFailureMessage
+});
+module.exports = __toCommonJS(index_exports);
 var dotenv2 = __toESM(require("dotenv"));
 var path38 = __toESM(require("path"));
 var fs39 = __toESM(require("fs"));
@@ -52622,6 +52696,15 @@ var os6 = __toESM(require("node:os"));
 function sha2562(buf) {
   return (0, import_node_crypto12.createHash)("sha256").update(buf).digest("hex");
 }
+function isOlderRelease(candidate, installed) {
+  const parts = (v) => v.trim().split(".").map((n) => Number.parseInt(n, 10));
+  const a = parts(candidate), b = parts(installed);
+  if (a.length !== 3 || b.length !== 3 || [...a, ...b].some(Number.isNaN)) return false;
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return a[i] < b[i];
+  }
+  return false;
+}
 function bundledSkillsDir(baseDir) {
   const candidate = path37.resolve(baseDir, "..", "skills");
   try {
@@ -52655,6 +52738,7 @@ function installBundledSkills(opts) {
     installed: [],
     updated: [],
     skippedUserModified: [],
+    skippedOlderPackage: [],
     unchanged: [],
     errors: [],
     targetDir: opts.targetDir ?? path37.join(os6.homedir(), ".claude", "skills"),
@@ -52697,7 +52781,11 @@ function installBundledSkills(opts) {
         continue;
       }
       const lastWritten = marker.files[rel];
-      if (lastWritten && destHash === lastWritten) {
+      if (lastWritten && destHash === lastWritten && isOlderRelease(opts.packageVersion, marker.packageVersion)) {
+        newMarker.files[rel] = destHash;
+        newMarker.packageVersion = marker.packageVersion;
+        result.skippedOlderPackage.push(rel);
+      } else if (lastWritten && destHash === lastWritten) {
         fs38.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.updated.push(rel);
@@ -52721,6 +52809,7 @@ function summarizeInstall(r) {
   if (r.installed.length) bits.push(`${r.installed.length} installed`);
   if (r.updated.length) bits.push(`${r.updated.length} updated`);
   if (r.skippedUserModified.length) bits.push(`${r.skippedUserModified.length} kept (your edits)`);
+  if (r.skippedOlderPackage.length) bits.push(`${r.skippedOlderPackage.length} kept (newer than this version)`);
   if (r.errors.length) bits.push(`${r.errors.length} errors`);
   if (bits.length === 0) return "";
   return `Skills: ${bits.join(", ")} \u2192 ${r.targetDir}`;
@@ -52750,6 +52839,9 @@ function registerSkillsTool(server2, packageVersion, baseDir) {
           installed: result.installed,
           updated: result.updated,
           keptYourEdits: result.skippedUserModified,
+          // A member running an older install alongside a newer one would otherwise
+          // have their skills rolled back without a word. BUG-2026-09-10-01.
+          keptNewerThanThisVersion: result.skippedOlderPackage,
           unchanged: result.unchanged.length,
           errors: result.errors,
           next: result.installed.length > 0 || result.updated.length > 0 ? "Fully restart Claude (quit and reopen) so the new/updated skills load." : "Everything already current."
@@ -52909,6 +53001,12 @@ registerMetaTools(server, pkg.version);
 var inBootstrapMode = true;
 var telemetryTier = "none";
 var TRANSITIONAL_ATTESTATION_DEADLINE = Date.parse("2026-06-15T00:00:00.000Z");
+function licenseGateFailureMessage(lic, deadline = TRANSITIONAL_ATTESTATION_DEADLINE) {
+  if (!lic.ok) return `[ghl-mcp] License check failed: ${lic.error}
+`;
+  return `[ghl-mcp] Your license is valid, but our license server did not return a signed attestation, which has been required since ${new Date(deadline).toISOString().slice(0, 10)}. This is on our side, not your install. Please write support@ghlcommand.com.
+`;
+}
 async function renewAttestation(creds) {
   if (!creds.email || !creds.license_key) return "unauthorized";
   let lic;
@@ -52991,7 +53089,9 @@ async function resolveAccessAndRegister() {
       attestationStatus = "renewed-from-legacy";
     } else {
       attestationStatus = "needs-reset";
-      if (renewed === "cancelled" || renewed === "unauthorized") {
+      if (renewed === "install_limit") {
+        process.stderr.write("[ghl-mcp] Bootstrap mode. Free a device on your license, or write support@ghlcommand.com.\n");
+      } else if (renewed === "cancelled" || renewed === "unauthorized") {
         process.stderr.write(`[ghl-mcp] Server says license is ${renewed}. Bootstrap mode.
 `);
       } else if (renewed === "renewed-unsigned") {
@@ -53028,8 +53128,7 @@ async function resolveAccessAndRegister() {
         } catch {
         }
       } else {
-        process.stderr.write(`[ghl-mcp] License check failed: ${lic.error}
-`);
+        process.stderr.write(licenseGateFailureMessage(lic));
       }
     } else {
       process.stderr.write(
@@ -53231,3 +53330,8 @@ main().catch((error) => {
   process.stderr.write(`[ghl-mcp] Failed to start: ${error}
 `);
 });
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  TRANSITIONAL_ATTESTATION_DEADLINE,
+  licenseGateFailureMessage
+});