@elitedcs/ghl-mcp 3.83.6 → 3.83.8

package/dist/index.js

@@ -545,7 +545,14 @@ var init_account_rules = __esm({
 });
 
 // src/ghl-client.ts
-var GHL_BASE_URL, GHL_API_VERSION, MAX_RETRIES, BASE_DELAY_MS, GHLClient;
+function requestError(error) {
+  if (error !== null && typeof error === "object") requestErrors.add(error);
+  return error;
+}
+function isGHLRequestError(error) {
+  return error !== null && typeof error === "object" && requestErrors.has(error);
+}
+var GHL_BASE_URL, GHL_API_VERSION, MAX_RETRIES, BASE_DELAY_MS, requestErrors, GHLClient;
 var init_ghl_client = __esm({
   "src/ghl-client.ts"() {
     "use strict";
@@ -556,6 +563,7 @@ var init_ghl_client = __esm({
     GHL_API_VERSION = "2021-07-28";
     MAX_RETRIES = 3;
     BASE_DELAY_MS = 500;
+    requestErrors = /* @__PURE__ */ new WeakSet();
     GHLClient = class _GHLClient {
       apiKey;
       defaultLocationId;
@@ -639,7 +647,7 @@ var init_ghl_client = __esm({
         } catch (error) {
           clearTimeout(timeout);
           if (error instanceof Error && error.name === "AbortError") {
-            throw new Error(`Request timeout (30s): ${method} ${path39}`);
+            throw requestError(new Error(`Request timeout (30s): ${method} ${path39}`));
           }
           if (!inBuildRequestScope() && !options.noRetry && attempt < MAX_RETRIES) {
             const delay5 = computeRetryDelay(null, attempt, BASE_DELAY_MS);
@@ -648,7 +656,7 @@ var init_ghl_client = __esm({
             await new Promise((r) => setTimeout(r, delay5));
             return this.request(method, path39, options, attempt + 1);
           }
-          throw error;
+          throw requestError(error);
         } finally {
           clearTimeout(timeout);
         }
@@ -665,12 +673,17 @@ var init_ghl_client = __esm({
             errorBody = await response.text();
           } catch {
           }
-          throw new Error(
+          throw requestError(new Error(
             `GHL API Error ${response.status} ${response.statusText}: ${method} ${path39}
 ${errorBody}`
-          );
+          ));
+        }
+        let text;
+        try {
+          text = await response.text();
+        } catch (error) {
+          throw requestError(error);
         }
-        const text = await response.text();
         if (!text) return {};
         try {
           return JSON.parse(text);
@@ -15488,11 +15501,11 @@ function deriveBrandDna(raw, opts = {}) {
     return m ? parseFloat(m[1]) : null;
   };
   const sizePx = raw.typography.sizes.map((s) => ({ v: px(s.value), count: s.count })).filter((s) => s.v !== null);
-  const h1 = b?.h1Size ?? sizePx.filter((s) => s.v >= 32).sort((a, z82) => z82.v - a.v)[0]?.v;
-  const bodySize = b?.bodySize ?? sizePx.filter((s) => s.v >= 14 && s.v <= 20).sort((a, z82) => z82.count - a.count)[0]?.v;
+  const h1 = b?.h1Size ?? sizePx.filter((s) => s.v >= 32).sort((a, z84) => z84.v - a.v)[0]?.v;
+  const bodySize = b?.bodySize ?? sizePx.filter((s) => s.v >= 14 && s.v <= 20).sort((a, z84) => z84.count - a.count)[0]?.v;
   const sizes = { ...h1 && { h1 }, ...bodySize && { body: bodySize } };
   const scaleRatio = h1 && bodySize ? Math.round(Math.pow(h1 / bodySize, 1 / 4) * 1e3) / 1e3 : void 0;
-  const radiiPx = raw.radii.map((r) => px(r.value.split(/\s+/)[0])).filter((n) => n !== null && n < 100).sort((a, z82) => a - z82);
+  const radiiPx = raw.radii.map((r) => px(r.value.split(/\s+/)[0])).filter((n) => n !== null && n < 100).sort((a, z84) => a - z84);
   const fcRadius = fc?.borderRadius ? px(fc.borderRadius) : null;
   const distinct = [...new Set(radiiPx)];
   const radius = fcRadius !== null ? { sm: Math.max(0, fcRadius - 2), md: fcRadius, lg: fcRadius * 2 } : distinct.length ? { sm: distinct[0], md: distinct[Math.floor(distinct.length / 2)], lg: distinct[distinct.length - 1] } : { sm: 4, md: 8, lg: 16 };
@@ -27038,6 +27051,37 @@ var init_client_preflight = __esm({
   }
 });
 
+// src/command-os/design/brief-validation.ts
+function designValidationMessage(error) {
+  return [...new Set(error.issues.map((issue) => {
+    const field = issue.path.join(".");
+    if (field === "options.slides") return SLIDES_MESSAGE;
+    if (field === "content.points" && issue.code === "too_big") return POINTS_MESSAGE;
+    if (field.startsWith("content.points")) return "Enter each point as text.";
+    if (field === "content.headline") return "Enter a headline.";
+    return "Check the design details before trying again.";
+  }))].join(" ");
+}
+var import_zod52, slideSchema, pointsSchema, slidesMin, slidesMax, pointsMax, DESIGN_FORM_LIMITS, SLIDES_MESSAGE, POINTS_MESSAGE;
+var init_brief_validation = __esm({
+  "src/command-os/design/brief-validation.ts"() {
+    "use strict";
+    import_zod52 = require("zod");
+    init_schema();
+    slideSchema = DesignBriefSchema.shape.options.unwrap().shape.slides.unwrap();
+    pointsSchema = DesignBriefSchema.shape.content.shape.points;
+    slidesMin = slideSchema.minValue;
+    slidesMax = slideSchema.maxValue;
+    pointsMax = import_zod52.z.toJSONSchema(pointsSchema).maxItems;
+    if (typeof slidesMin !== "number" || !Number.isFinite(slidesMin) || typeof slidesMax !== "number" || !Number.isFinite(slidesMax) || typeof pointsMax !== "number" || !Number.isFinite(pointsMax)) {
+      throw new Error("The design schema must expose a minimum and maximum slide count and a maximum point count.");
+    }
+    DESIGN_FORM_LIMITS = { slidesMin, slidesMax, pointsMax };
+    SLIDES_MESSAGE = `Choose a whole number of slides from ${DESIGN_FORM_LIMITS.slidesMin} to ${DESIGN_FORM_LIMITS.slidesMax}.`;
+    POINTS_MESSAGE = `Use at most ${DESIGN_FORM_LIMITS.pointsMax} points.`;
+  }
+});
+
 // src/command-os/design/run-jobs.ts
 function validateRunRequest(input) {
   const a = input ?? {};
@@ -27050,13 +27094,13 @@ function validateRunRequest(input) {
   if (headline3.length < 3 || headline3.length > 300) return { ok: false, error: "headline must be between 3 and 300 characters." };
   const points = Array.isArray(a.points) ? a.points.filter((p) => typeof p === "string" && p.trim().length > 0).map((p) => p.trim()) : [];
   if (points.length === 0) return { ok: false, error: "points must be a non-empty list." };
-  if (points.length > 20) return { ok: false, error: "points: 20 at most." };
+  if (points.length > DESIGN_FORM_LIMITS.pointsMax) return { ok: false, error: POINTS_MESSAGE };
   if (points.some((p) => p.includes("|"))) return { ok: false, error: "a point may not contain the | character; it separates them on the command line." };
   if (points.some((p) => p.length > 400)) return { ok: false, error: "a point may be 400 characters at most." };
   const model = str3("model");
   if (model && !MODEL.test(model)) return { ok: false, error: "model must be a plain engine name." };
-  const slides = typeof a.slides === "number" && Number.isInteger(a.slides) ? a.slides : void 0;
-  if (slides !== void 0 && (slides < 1 || slides > 40)) return { ok: false, error: "slides must be between 1 and 40." };
+  const slides = a.slides;
+  if (slides !== void 0 && (typeof slides !== "number" || !Number.isInteger(slides) || slides < DESIGN_FORM_LIMITS.slidesMin || slides > DESIGN_FORM_LIMITS.slidesMax)) return { ok: false, error: SLIDES_MESSAGE };
   let refusal = null;
   const optional = (k, max = 400) => {
     const v = str3(k);
@@ -27102,6 +27146,9 @@ function argvFor(r, outDir) {
   return argv;
 }
 function startDesignRun(request, opts = {}) {
+  const checked = validateRunRequest(request);
+  if (!checked.ok) throw new Error(checked.error);
+  request = checked.value;
   const id = (0, import_node_crypto6.randomUUID)();
   const outDir = (0, import_node_path5.join)(designRunsDir(), id);
   (0, import_node_fs5.mkdirSync)(outDir, { recursive: true });
@@ -27179,6 +27226,7 @@ var init_run_jobs = __esm({
     import_node_crypto6 = require("node:crypto");
     init_credentials_store();
     init_schema();
+    init_brief_validation();
     SLUG2 = /^[a-z0-9][a-z0-9-]{0,63}$/;
     MODEL = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
     JOINED_FLAG = /^--[a-z][a-z-]*=/;
@@ -28605,7 +28653,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.83.6",
+      version: "3.83.8",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -30520,6 +30568,16 @@ border-bottom:1px solid var(--rule);font-size:var(--fs-sm)}
 </div>
 
 <script>
+// Shared by the save schema and the standalone page (inlined by build-app.mjs).
+var CLIENT_FIELDS = {
+  name: { max: 120, label: "Client name" },
+  role: { max: 80, label: "Client role" },
+  email: { max: 200, label: "Client email" },
+  phone: { max: 40, label: "Client phone" },
+  website: { max: 300, label: "Client website" },
+  city: { max: 120, label: "Client city" }
+};
+
 /**
  * The assessment engine \u2014 the ONE place the questions and the findings maths live.
  *
@@ -31257,7 +31315,7 @@ function inputFor(q){
  * assessment belongs to, so Save to GoHighLevel knows where to put it.
  */
 function escH(s){return String(s==null?"":s).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}
-function cf(k,ph,type){var c=S.client||{};return '<input class="a" type="'+(type||"text")+'" placeholder="'+escH(ph)+'" value="'+escH(c[k]||"")+'" oninput="setClient(\\''+k+'\\',this.value)">'}
+function cf(k,ph,type){var c=S.client||{};return '<input class="a" type="'+(type||"text")+'" maxlength="'+CLIENT_FIELDS[k].max+'" placeholder="'+escH(ph)+'" value="'+escH(c[k]||"")+'" oninput="setClient(\\''+k+'\\',this.value)">'}
 function setClient(k,v){if(!S.client)S.client={};S.client[k]=v;save();head()}
 function setSaveTo(v){S.saveTo=v;save();try{localStorage.setItem(K+":saveTo",v)}catch(e){}}
 function accountSelectHtml(){
@@ -31365,7 +31423,7 @@ function openReport(){
 }
 function showSource(){
   var text=reportHtml(), name=slug(S.biz)+"-report.html";
-  dump(savedMsg(saveFile(name,text,"text/html"),name), text);
+  offerContents(savedMsg(saveFile(name,text,"text/html"),name), text);
 }
 function draw(){
   head();
@@ -31396,6 +31454,17 @@ function dump(title,text){
   var t=w.querySelector("textarea");t.value=text;t.focus();t.select();
   w.scrollIntoView({behavior:"smooth",block:"nearest"});
 }
+/** Offer a copy fallback without opening the file's source on a normal save. */
+function offerContents(message,text){
+  var old=document.getElementById("dump");if(old)old.remove();
+  var previous=document.getElementById("file-contents");if(previous)previous.remove();
+  var box=document.createElement("div");box.id="file-contents";box.className="note";
+  var note=document.createElement("p");note.textContent=message;box.appendChild(note);
+  var button=document.createElement("button");button.type="button";button.className="mini";
+  button.textContent="Show the file's contents";
+  button.onclick=function(){dump("Select all, copy, and save the file's contents.",text)};
+  box.appendChild(button);document.getElementById("body").appendChild(box);
+}
 function slug(s){return String(s||"assessment").toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"assessment"}
 /**
  * Write a real file to the operator's downloads.
@@ -31421,17 +31490,17 @@ function saveFile(name,text,type){
  * simply refuses \u2014 which is exactly what some Chrome configurations do to a page
  * opened from file://, the way this one ships. So a true return means "asked",
  * never "saved", so announcing a completed save on the strength of it would be
- * a confident claim about something unobserved. The copy box is shown every
- * time and the wording is true under both outcomes.
+ * a confident claim about something unobserved. The copy box is offered behind an explicit control
+ * and the wording is true under both outcomes.
  */
 function savedMsg(ok,name){
   return ok
-    ? "Asked your browser to save it as "+name+". If it did not appear in your downloads, it was blocked \u2014 the same text is here, so select all, copy, and save it as "+name+"."
-    : "Your browser would not save the file. Select all, copy, and save it as "+name+".";
+    ? "Asked your browser to save it as "+name+". If it did not appear in your downloads, choose Show the file's contents to copy and save it as "+name+"."
+    : "Your browser would not save the file. Choose Show the file's contents to copy and save it as "+name+".";
 }
 function dl(){
   var text=JSON.stringify(S,null,2), name=slug(S.biz)+"-answers.json";
-  dump(savedMsg(saveFile(name,text,"application/json"),name), text);
+  offerContents(savedMsg(saveFile(name,text,"application/json"),name), text);
 }
 function wipe(){if(!confirm)return;S.ans={};S.skip={};S.biz="";S.trade="";S.client={};S.tab="ask";S.area="client";save();draw()}
 /** Save into the chosen account through Command OS on this computer: the same
@@ -32384,12 +32453,12 @@ ${d.voice.samples.length ? `<h2>Voice</h2><ul>${d.voice.samples.map((s) => `<li>
 ${opts.screenshot ? `<h2>Their site, as rendered</h2><img class="shot" src="/brand/${encodeURIComponent(d.slug)}/screenshot.png" alt="Screenshot of ${esc5(d.name)}'s website">` : ""}
 <h2>Make something in this brand</h2>
 <p class="small">Runs on <b>your own Claude</b>, on this computer, never our key. ${esc5(RUN_EXPECTATION)} The run keeps going if you close this tab. Write the headline and the points you want made, not instructions.</p>
-<form id="make"><div class="two">
+<form id="make" novalidate><div class="two">
 <div><label for="mk-medium">What</label><select id="mk-medium"><option value="deck">A deck</option><option value="site">A landing page</option><option value="report">A report</option></select></div>
-<div><label for="mk-slides">Slides (a deck only)</label><input id="mk-slides" type="number" min="1" max="40" value="6"></div>
+<div><label for="mk-slides">Slides (a deck only)</label><input id="mk-slides" type="number" min="${DESIGN_FORM_LIMITS.slidesMin}" max="${DESIGN_FORM_LIMITS.slidesMax}" step="1" value="6"></div>
 </div>
 <label for="mk-headline">Headline</label><input id="mk-headline" type="text" placeholder="The one sentence this has to land" autocomplete="off">
-<label for="mk-points">Points, one per line</label><input id="mk-points" type="text" placeholder="first point | second point | third point" autocomplete="off">
+<label for="mk-points">Points, one per line</label><input id="mk-points" data-max-points="${DESIGN_FORM_LIMITS.pointsMax}" type="text" placeholder="first point | second point | third point" autocomplete="off">
 <div class="two">
 <div><label for="mk-audience">Who it is for</label><input id="mk-audience" type="text" placeholder="clinic owners with two locations" autocomplete="off"></div>
 <div><label for="mk-cta">Button label</label><input id="mk-cta" type="text" placeholder="Book the first visit" autocomplete="off"></div>
@@ -32430,6 +32499,9 @@ document.getElementById("make").addEventListener("submit",async function(e){
   var g=function(id){return document.getElementById(id).value.trim()};
   var pts=g("mk-points").split("|").map(function(x){return x.trim()}).filter(Boolean);
   if(!g("mk-headline")||!pts.length){say("mk-status","A headline and at least one point, please.","err");return}
+  if(pts.length>${DESIGN_FORM_LIMITS.pointsMax}){say("mk-status",${scriptJson(POINTS_MESSAGE)},"err");return}
+  var slideCount=Number(g("mk-slides"));
+  if(g("mk-medium")==="deck"&&(!Number.isInteger(slideCount)||slideCount<${DESIGN_FORM_LIMITS.slidesMin}||slideCount>${DESIGN_FORM_LIMITS.slidesMax})){say("mk-status",${scriptJson(SLIDES_MESSAGE)},"err");return}
   var body={brand:${scriptJson(d.slug)},medium:g("mk-medium"),headline:g("mk-headline"),points:pts};
   if(g("mk-audience"))body.audience=g("mk-audience");
   if(g("mk-cta"))body.cta=g("mk-cta");
@@ -32442,7 +32514,7 @@ document.getElementById("make").addEventListener("submit",async function(e){
     document.getElementById("mk-cancel").hidden=false;
     started=Date.now();passes=0;tick();ticker=setInterval(tick,1000);
     poll=setInterval(async function(){
-      var s=await (await fetch("/api/design/run?id="+encodeURIComponent(runId))).json();
+      var s=await (await fetch("/api/design/run?id="+encodeURIComponent(runId),{headers:{"x-command-os-seat":KEY}})).json();
       var lines=s.tail||[];
       show(lines.join("\\n"));
       passes=lines.filter(function(l){return l.trim().slice(0,5)==="pass "}).length;
@@ -32468,6 +32540,7 @@ var esc5, STYLE, SHELL_JS, foot;
 var init_brand_page = __esm({
   "src/command-os/design/brand-page.ts"() {
     "use strict";
+    init_brief_validation();
     init_run_expectations();
     init_fonts();
     init_cockpit_shell();
@@ -32905,6 +32978,22 @@ var init_capability_runs = __esm({
   }
 });
 
+// src/command-os/assessment/client-fields.js
+var CLIENT_FIELDS;
+var init_client_fields = __esm({
+  "src/command-os/assessment/client-fields.js"() {
+    "use strict";
+    CLIENT_FIELDS = {
+      name: { max: 120, label: "Client name" },
+      role: { max: 80, label: "Client role" },
+      email: { max: 200, label: "Client email" },
+      phone: { max: 40, label: "Client phone" },
+      website: { max: 300, label: "Client website" },
+      city: { max: 120, label: "Client city" }
+    };
+  }
+});
+
 // src/command-os/assessment/transcript.ts
 function loose(s) {
   return String(s ?? "").replace(/[‘’ʼ]/g, "'").replace(/[“”]/g, '"').replace(/[–—]/g, "-").replace(/\s+/g, " ").trim().toLowerCase();
@@ -33212,6 +33301,20 @@ var init_report = __esm({
 });
 
 // src/tools/assessment.ts
+function assessmentValidationMessage(error) {
+  if (!(error instanceof import_zod53.z.ZodError)) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  return error.issues.flatMap((issue) => {
+    const key = issue.path.join(".");
+    if (seen.has(key)) return [];
+    seen.add(key);
+    const field = issue.path[0] === "client" ? Object.entries(CLIENT_FIELDS).find(([name]) => name === issue.path[1])?.[1] : void 0;
+    if (field && issue.code === "too_big") return [`${field.label} is too long, ${field.max} characters at most.`];
+    if (field) return [`Enter ${field.label.toLowerCase()} as text.`];
+    if (key === "biz") return ["Enter the business name before saving."];
+    return ["Check the assessment answers before saving."];
+  }).join(" ");
+}
 function today() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 }
@@ -33240,7 +33343,7 @@ async function createPipeline(client, locationId2) {
     });
     return { ok: true };
   } catch (e) {
-    return { error: `could not create the "${PIPELINE_NAME}" pipeline: ${String(e)}` };
+    return { error: `could not create the "${PIPELINE_NAME}" pipeline: ${String(e)}`, failure: { detail: (0, import_node_util3.inspect)(e) } };
   }
 }
 async function findStage(client, locationId2, stage, mayCreate = false) {
@@ -33252,7 +33355,7 @@ async function findStage(client, locationId2, stage, mayCreate = false) {
   try {
     pipelines = await read2();
   } catch (e) {
-    return { error: `could not read pipelines: ${String(e)}` };
+    return { error: `could not read pipelines: ${String(e)}`, failure: { detail: (0, import_node_util3.inspect)(e) } };
   }
   const named = (list2) => list2.find((p) => (p.name ?? "").trim().toLowerCase() === PIPELINE_NAME.toLowerCase());
   let pipe = named(pipelines);
@@ -33262,7 +33365,7 @@ async function findStage(client, locationId2, stage, mayCreate = false) {
     try {
       pipe = named(await read2());
     } catch (e) {
-      return { error: `created the "${PIPELINE_NAME}" pipeline but could not read it back: ${String(e)}` };
+      return { error: `created the "${PIPELINE_NAME}" pipeline but could not read it back: ${String(e)}`, failure: { detail: (0, import_node_util3.inspect)(e) } };
     }
     if (!pipe) return { error: `created the "${PIPELINE_NAME}" pipeline but it is not in the account when read back. Nothing was assumed; try saving again.` };
   }
@@ -33275,7 +33378,7 @@ async function findStage(client, locationId2, stage, mayCreate = false) {
   }
   return { pipelineId: pipe.id, stageId: st.id, stageName: stage };
 }
-async function saveAssessment(client, locationId2, args) {
+async function saveAssessment(client, locationId2, args, onOpportunityNoteFailure) {
   const state = normalise(args.assessment);
   const computed = computedFor(state);
   const stage = stageFor({ verdict: computed.verdict, proposalSent: args.proposalSent, outcome: args.outcome });
@@ -33311,6 +33414,7 @@ async function saveAssessment(client, locationId2, args) {
   let opportunityNote = null;
   if ("error" in hit) {
     opportunityNote = hit.error;
+    if (hit.failure) onOpportunityNoteFailure?.(hit.failure);
   } else {
     const body = {
       locationId: locationId2,
@@ -33362,11 +33466,11 @@ function registerAssessmentTools(server2, client) {
     "attach_assessment",
     "Attach a saved assessment to a client card, so the numbers from the sales conversation follow them into the intake and their build. Keep your own account active. Nothing is written to a GoHighLevel account. Use fill to save the overlapping intake answers, detach to remove the snapshot, or purchases to record what they bought.",
     {
-      clientLocationId: import_zod52.z.string().min(1).describe("The destination client card. This is not the account holding the saved assessment."),
-      action: import_zod52.z.enum(["get", "attach", "fill", "detach", "purchases"]).default("attach"),
-      contactId: import_zod52.z.string().optional().describe("The saved assessment contact from list_assessments in your active account."),
-      opportunityId: import_zod52.z.string().optional(),
-      purchasedFeatureIds: import_zod52.z.array(import_zod52.z.string()).optional().describe("Feature ids returned by get. Record only what the client bought. An empty list explicitly means none.")
+      clientLocationId: import_zod53.z.string().min(1).describe("The destination client card. This is not the account holding the saved assessment."),
+      action: import_zod53.z.enum(["get", "attach", "fill", "detach", "purchases"]).default("attach"),
+      contactId: import_zod53.z.string().optional().describe("The saved assessment contact from list_assessments in your active account."),
+      opportunityId: import_zod53.z.string().optional(),
+      purchasedFeatureIds: import_zod53.z.array(import_zod53.z.string()).optional().describe("Feature ids returned by get. Record only what the client bought. An empty list explicitly means none.")
     },
     async (args) => {
       const [{ readCockpitState: readCockpitState2, writeCockpitState: writeCockpitState2 }, { TokenRegistry: TokenRegistry2 }, { composeQuestionSet: composeQuestionSet2 }, { readOverlay: readOverlay2 }] = await Promise.all([
@@ -33390,15 +33494,15 @@ function registerAssessmentTools(server2, client) {
     "save_assessment",
     "Save an assessment into YOUR OWN GoHighLevel: the prospect as a contact, the answer sheet as a note on that contact, and the deal as an opportunity in your Assessments pipeline. Nothing is stored anywhere else. Re-saving writes a new note rather than overwriting, so the history is kept and the newest is what loads back.",
     {
-      locationId: import_zod52.z.string().optional().describe("Your own GHL sub-account. Defaults to the active one."),
+      locationId: import_zod53.z.string().optional().describe("Your own GHL sub-account. Defaults to the active one."),
       assessment: StateSchema,
-      contactName: import_zod52.z.string().optional().describe("The person you spoke to."),
-      email: import_zod52.z.string().optional(),
-      phone: import_zod52.z.string().optional(),
-      proposalValue: import_zod52.z.number().optional().describe("What you quoted, if you have quoted. Used as the opportunity value instead of the annual figure."),
-      outcome: import_zod52.z.enum(["won", "lost"]).optional().describe("Set only when the deal has actually closed."),
-      proposalSent: import_zod52.z.boolean().optional(),
-      createPipeline: import_zod52.z.boolean().optional().describe('Create the "Assessments" pipeline in your own GoHighLevel if it is not there yet. Off by default: it is a write to your account, so it is asked for rather than assumed. Say yes the first time and never again.')
+      contactName: import_zod53.z.string().optional().describe("The person you spoke to."),
+      email: import_zod53.z.string().optional(),
+      phone: import_zod53.z.string().optional(),
+      proposalValue: import_zod53.z.number().optional().describe("What you quoted, if you have quoted. Used as the opportunity value instead of the annual figure."),
+      outcome: import_zod53.z.enum(["won", "lost"]).optional().describe("Set only when the deal has actually closed."),
+      proposalSent: import_zod53.z.boolean().optional(),
+      createPipeline: import_zod53.z.boolean().optional().describe('Create the "Assessments" pipeline in your own GoHighLevel if it is not there yet. Off by default: it is a write to your account, so it is asked for rather than assumed. Say yes the first time and never again.')
     },
     async (args) => saveAssessment(client, client.resolveLocationId(args.locationId), args)
   );
@@ -33407,7 +33511,7 @@ function registerAssessmentTools(server2, client) {
     "load_assessment",
     "Load a saved assessment back out of your GoHighLevel, so someone else on your team can pick it up. Reads the notes on a contact and returns the most recent complete answer sheet. If a note has been edited or a piece is missing it returns nothing rather than a partial record.",
     {
-      contactId: import_zod52.z.string().describe("The contact the assessment was saved against.")
+      contactId: import_zod53.z.string().describe("The contact the assessment was saved against.")
     },
     async ({ contactId }) => {
       const { record: joined, notesRead } = await loadAssessmentRecord(client, contactId);
@@ -33437,8 +33541,8 @@ function registerAssessmentTools(server2, client) {
     "list_assessments",
     "List the assessments on your Assessments pipeline: who they are for, what stage each is at, and what the deal is worth. This is the board an agency owner checks, and the list a remote employee picks their next job from.",
     {
-      locationId: import_zod52.z.string().optional().describe("Your own GHL sub-account. Defaults to the active one."),
-      stage: import_zod52.z.enum(["Gathering", "Findings", "Proposal sent", "Won", "Lost"]).optional().describe("Only this stage.")
+      locationId: import_zod53.z.string().optional().describe("Your own GHL sub-account. Defaults to the active one."),
+      stage: import_zod53.z.enum(["Gathering", "Findings", "Proposal sent", "Won", "Lost"]).optional().describe("Only this stage.")
     },
     async ({ locationId: loc, stage }) => {
       const locationId2 = client.resolveLocationId(loc);
@@ -33464,14 +33568,14 @@ function registerAssessmentTools(server2, client) {
     "read_assessment_transcript",
     "Turn a recorded conversation into assessment answers, WITHOUT letting anything into the record that the owner did not say. You read the transcript and propose answers; each one must carry the verbatim words it came from. This checks every quote actually appears in the transcript and throws out the ones that do not, and holds back anything you worked out rather than heard so the operator can confirm it. Use it after a coffee-shop meeting, a Zoom call or a Plaud recording.",
     {
-      transcript: import_zod52.z.string().min(20).describe("The recording, as text. Paste the whole thing."),
-      proposed: import_zod52.z.array(import_zod52.z.object({
-        questionId: import_zod52.z.string().describe("The assessment question this answers."),
-        value: import_zod52.z.string().describe("What to store, in the unit the question wants."),
-        quote: import_zod52.z.string().describe("The owner's own words, VERBATIM from the transcript. Do not tidy it up \u2014 if it is not in the transcript the answer is thrown out."),
-        reasoning: import_zod52.z.string().optional().describe("How you got from the quote to the value, when they are not the same.")
+      transcript: import_zod53.z.string().min(20).describe("The recording, as text. Paste the whole thing."),
+      proposed: import_zod53.z.array(import_zod53.z.object({
+        questionId: import_zod53.z.string().describe("The assessment question this answers."),
+        value: import_zod53.z.string().describe("What to store, in the unit the question wants."),
+        quote: import_zod53.z.string().describe("The owner's own words, VERBATIM from the transcript. Do not tidy it up \u2014 if it is not in the transcript the answer is thrown out."),
+        reasoning: import_zod53.z.string().optional().describe("How you got from the quote to the value, when they are not the same.")
       })).describe("One entry per question you could answer. Leave out anything the conversation did not cover."),
-      existing: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
+      existing: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.union([import_zod53.z.string(), import_zod53.z.number()])).optional().describe("Answers already captured, so this adds to them rather than replacing them.")
     },
     async ({ transcript, proposed, existing }) => {
       const gated = gateExtraction(transcript, proposed, QUESTION_UNITS);
@@ -33497,15 +33601,15 @@ function registerAssessmentTools(server2, client) {
     "Write the finished assessment report to a file on THIS machine, ready to hand to the prospect. The file is a complete, self-contained page: no fonts, scripts or images loaded from anywhere, so it opens on any host, in any browser, forever. It is written in the operator's branding and carries nothing about the software that produced it. We never publish it anywhere ourselves \u2014 the operator owns where it goes.",
     {
       assessment: StateSchema,
-      agencyName: import_zod52.z.string().optional().describe("Whose letterhead this goes out on. Read from your agency profile if you have one set."),
-      agencyContact: import_zod52.z.string().optional().describe("Email or phone for the footer."),
-      accent: import_zod52.z.string().optional().describe("Brand colour as a hex code, e.g. #8A2B2B."),
-      services: import_zod52.z.array(import_zod52.z.object({
-        name: import_zod52.z.string().describe("Your service, in the words you sell it in."),
-        price: import_zod52.z.number().optional().describe("Your price. Leave it out and the report shows the plan without an investment section rather than inventing a number."),
-        covers: import_zod52.z.array(import_zod52.z.string()).describe("Which findings it fixes: missed, waited, quotes, noshow.")
+      agencyName: import_zod53.z.string().optional().describe("Whose letterhead this goes out on. Read from your agency profile if you have one set."),
+      agencyContact: import_zod53.z.string().optional().describe("Email or phone for the footer."),
+      accent: import_zod53.z.string().optional().describe("Brand colour as a hex code, e.g. #8A2B2B."),
+      services: import_zod53.z.array(import_zod53.z.object({
+        name: import_zod53.z.string().describe("Your service, in the words you sell it in."),
+        price: import_zod53.z.number().optional().describe("Your price. Leave it out and the report shows the plan without an investment section rather than inventing a number."),
+        covers: import_zod53.z.array(import_zod53.z.string()).describe("Which findings it fixes: missed, waited, quotes, noshow.")
       })).optional().describe("YOUR menu at YOUR prices. Never ours."),
-      outDir: import_zod52.z.string().optional().describe("Where to write it. Defaults to ~/Documents/assessments.")
+      outDir: import_zod53.z.string().optional().describe("Where to write it. Defaults to ~/Documents/assessments.")
     },
     async (args) => {
       const state = normalise(args.assessment);
@@ -33564,11 +33668,13 @@ function registerAssessmentTools(server2, client) {
     }
   );
 }
-var import_zod52, import_node_crypto8, import_node_fs6, import_node_os, import_node_path6, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
+var import_node_util3, import_zod53, import_node_crypto8, import_node_fs6, import_node_os, import_node_path6, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
 var init_assessment = __esm({
   "src/tools/assessment.ts"() {
     "use strict";
-    import_zod52 = require("zod");
+    import_node_util3 = require("node:util");
+    import_zod53 = require("zod");
+    init_client_fields();
     init_attachment();
     init_attachment_actions();
     init_tool_helpers();
@@ -33591,13 +33697,13 @@ var init_assessment = __esm({
       areaOrder: () => AREAS.map((a) => a[1]),
       assumption: (id) => ASSUMPTION_LABEL.get(id)
     };
-    StateSchema = import_zod52.z.object({
-      biz: import_zod52.z.string().min(1).describe("The prospect's business name."),
-      trade: import_zod52.z.string().optional().describe("Their trade. Decides which benchmarks may be applied."),
-      ans: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.union([import_zod52.z.string(), import_zod52.z.number()])).describe("questionId -> answer, exactly as typed."),
-      skip: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.boolean()).optional().describe("questionId -> true where they did not know."),
-      asm: import_zod52.z.record(import_zod52.z.string(), import_zod52.z.number()).optional().describe("assumption id -> rate as a decimal."),
-      client: import_zod52.z.object({ name: import_zod52.z.string().max(120), role: import_zod52.z.string().max(80), email: import_zod52.z.string().max(200), phone: import_zod52.z.string().max(40), website: import_zod52.z.string().max(300), city: import_zod52.z.string().max(120) }).partial().optional().describe("The person and place this is for, as typed on The client step. Rides with the answers so a load brings it back.")
+    StateSchema = import_zod53.z.object({
+      biz: import_zod53.z.string().min(1).describe("The prospect's business name."),
+      trade: import_zod53.z.string().optional().describe("Their trade. Decides which benchmarks may be applied."),
+      ans: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.union([import_zod53.z.string(), import_zod53.z.number()])).describe("questionId -> answer, exactly as typed."),
+      skip: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.boolean()).optional().describe("questionId -> true where they did not know."),
+      asm: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.number()).optional().describe("assumption id -> rate as a decimal."),
+      client: import_zod53.z.object({ name: import_zod53.z.string().max(CLIENT_FIELDS.name.max), role: import_zod53.z.string().max(CLIENT_FIELDS.role.max), email: import_zod53.z.string().max(CLIENT_FIELDS.email.max), phone: import_zod53.z.string().max(CLIENT_FIELDS.phone.max), website: import_zod53.z.string().max(CLIENT_FIELDS.website.max), city: import_zod53.z.string().max(CLIENT_FIELDS.city.max) }).partial().optional().describe("The person and place this is for, as typed on The client step. Rides with the answers so a load brings it back.")
     });
   }
 });
@@ -33985,9 +34091,12 @@ __export(dashboard_exports, {
   insideDir: () => insideDir,
   intakeInput: () => intakeInput,
   intakeRequestError: () => intakeRequestError,
+  isAllowedCockpitHost: () => isAllowedCockpitHost,
   isLoopback: () => isLoopback,
+  isUpstreamFailure: () => isUpstreamFailure,
   launcherAlreadyOffered: () => launcherAlreadyOffered,
   listClientDocs: () => listClientDocs,
+  mayServeSeat: () => mayServeSeat,
   memberFacingError: () => memberFacingError,
   newClientFailure: () => newClientFailure,
   normalizedIntake: () => normalizedIntake,
@@ -34457,19 +34566,34 @@ function memberFacingError(e, own = []) {
   const raw = e instanceof Error ? e.message : String(e);
   return own.includes(raw) ? raw : readFailureText(e);
 }
-function newClientFailure(error, surface = "command-os") {
+function isUpstreamFailure(error) {
+  if (typeof error === "string") return /^\s*(?:\{\s*"|\[\s*\{)/.test(error);
+  const seen = /* @__PURE__ */ new Set();
+  let current = error;
+  while (current !== null && typeof current === "object" && !seen.has(current)) {
+    seen.add(current);
+    if (isGHLRequestError(current) || current instanceof TypeError || current instanceof DOMException) return true;
+    if ("name" in current && (current.name === "AbortError" || current.name === "TimeoutError")) return true;
+    if ("code" in current && typeof current.code === "string" && /^(?:E[A-Z0-9_]+|UND_ERR_[A-Z0-9_]+)$/.test(current.code)) return true;
+    current = "cause" in current ? current.cause : void 0;
+  }
+  return false;
+}
+function newClientFailure(error, surface = "command-os", account2) {
   const connect2 = surface === "command-os" ? "paste its key into Command OS" : "register it in GHL Command with its key";
-  const refusal = subAccountRefusal(error, "create", surface);
+  const refusal = account2 ? void 0 : subAccountRefusal(error, "create", surface);
   if (refusal) return refusal;
   const raw = error instanceof Error ? error.message : String(error);
-  if (raw === CREATE_PLAN_REFUSAL) return surface === "command-os" ? raw : "Create it in GoHighLevel and register it in GHL Command with its key.";
-  if (raw === "Choose the client industry." || raw === "Connect your agency in Your agency before creating a sub-account.") return raw;
-  if (raw === "business name is required") return "Enter the business name, then create the sub-account.";
-  if (raw.startsWith("No agency key registered.")) return `No agency key is registered; add your agency Private Integration key to let GHL Command create sub-accounts on GoHighLevel's Agency Pro plan, or on other plans create it in GoHighLevel and ${connect2}.`;
-  if (raw.startsWith("Couldn't resolve the agency company ID")) return "The agency company ID is missing; check the agency registered in GHL Command before creating the sub-account.";
-  if (/GHL API Error 401/.test(raw)) return "GoHighLevel refused the agency key; check whether the agency Private Integration has expired or been revoked before trying again.";
-  if (/GHL API Error 403/.test(raw)) return "GoHighLevel refused access for this agency; check the agency Private Integration permissions and plan in GoHighLevel before trying again.";
-  if (/GHL API Error 422/.test(raw)) return "GoHighLevel rejected the sub-account details; check the business and owner details before trying again.";
+  if (account2 && !account2.fromCaughtError && !isUpstreamFailure(error)) return raw;
+  if (raw === CREATE_PLAN_REFUSAL && !account2) return surface === "command-os" ? raw : "Create it in GoHighLevel and register it in GHL Command with its key.";
+  if (!account2 && (raw === "Choose the client industry." || raw === "Connect your agency in Your agency before creating a sub-account.")) return raw;
+  if (!account2 && raw === "business name is required") return "Enter the business name, then create the sub-account.";
+  if (!account2 && raw.startsWith("No agency key registered.")) return `No agency key is registered; add your agency Private Integration key to let GHL Command create sub-accounts on GoHighLevel's Agency Pro plan, or on other plans create it in GoHighLevel and ${connect2}.`;
+  if (!account2 && raw.startsWith("Couldn't resolve the agency company ID")) return "The agency company ID is missing; check the agency registered in GHL Command before creating the sub-account.";
+  if (/GHL API Error 401/.test(raw)) return account2 ? `${account2.failed}: the key for this account was refused. Check the account key and its permissions in GoHighLevel. ${account2.next}` : "GoHighLevel refused the agency key; check whether the agency Private Integration has expired or been revoked before trying again.";
+  if (/GHL API Error 403/.test(raw)) return account2 ? `${account2.failed}: the key for this account was refused. Check the account key and its permissions in GoHighLevel. ${account2.next}` : "GoHighLevel refused access for this agency; check the agency Private Integration permissions and plan in GoHighLevel before trying again.";
+  if (/GHL API Error 422/.test(raw)) return account2 ? `${account2.failed}: GoHighLevel rejected the details. Check the entered details in this account. ${account2.next}` : "GoHighLevel rejected the sub-account details; check the business and owner details before trying again.";
+  if (account2) return `${account2.failed}. ${account2.next}`;
   return `GHL Command could not confirm whether the sub-account was created; check GoHighLevel before trying again to avoid creating a duplicate, and ${connect2} if it exists.`;
 }
 function insideDir(dir, p) {
@@ -35752,22 +35876,45 @@ function checkSeatToken(req, expected) {
   }
   return null;
 }
-function checkMutationGuard(req, port) {
-  const method = (req.method || "GET").toUpperCase();
-  if (method === "GET" || method === "HEAD" || method === "OPTIONS") return null;
-  const header = (name) => {
-    const v = req.headers[name];
-    return (Array.isArray(v) ? v[0] : v ?? "").trim();
-  };
-  const allowedHosts = [`127.0.0.1:${port}`, `localhost:${port}`];
-  if (!allowedHosts.includes(header("host").toLowerCase())) {
-    return { status: 403, error: "host not allowed" };
+function cockpitHeader(req, name) {
+  const value = req.headers[name];
+  return Array.isArray(value) ? value.join(",") : value ?? "";
+}
+function isAllowedCockpitHost(req, port) {
+  const host = cockpitHeader(req, "host").toLowerCase();
+  return host === `127.0.0.1:${port}` || host === `localhost:${port}`;
+}
+function mayServeSeat(req, port) {
+  return isLoopback(req) && isAllowedCockpitHost(req, port);
+}
+function cockpitPath(req) {
+  return (req.url || "/").split("?")[0];
+}
+function checkCockpitPath(req) {
+  const pathname = cockpitPath(req);
+  if (!pathname.startsWith("/") || /\/\/|\\|#|[\x00-\x20\x7f]|%(?:2e|2f|5c)|%(?![0-9a-f]{2})/i.test(pathname) || pathname.split("/").some((segment) => segment === "." || segment === "..")) {
+    return { status: 400, error: "Use a canonical cockpit path." };
   }
-  const origin = header("origin").toLowerCase();
-  if (origin && !allowedHosts.some((h) => origin === `http://${h}`)) {
+  return null;
+}
+function checkCockpitOrigin(req, port) {
+  const origin = cockpitHeader(req, "origin").toLowerCase();
+  if (req.headers.origin !== void 0 && origin !== `http://127.0.0.1:${port}` && origin !== `http://localhost:${port}`) {
     return { status: 403, error: "cross-origin request rejected" };
   }
-  if (header("content-type").split(";")[0].trim().toLowerCase() !== "application/json") {
+  return null;
+}
+function checkMutationGuard(req, port) {
+  if (!isAllowedCockpitHost(req, port)) {
+    return { status: 403, error: "This Host is not allowed to access the cockpit." };
+  }
+  const pathDenied = checkCockpitPath(req);
+  if (pathDenied) return pathDenied;
+  const method = (req.method || "GET").toUpperCase();
+  if (method === "GET" || method === "HEAD" || method === "OPTIONS") return null;
+  const originDenied = checkCockpitOrigin(req, port);
+  if (originDenied) return originDenied;
+  if (cockpitHeader(req, "content-type").split(";")[0].trim().toLowerCase() !== "application/json") {
     return { status: 415, error: "expected application/json" };
   }
   return null;
@@ -35775,8 +35922,13 @@ function checkMutationGuard(req, port) {
 function cockpitGate(req, seatToken, port) {
   const denied = checkMutationGuard(req, port) ?? checkSeatToken(req, seatToken);
   if (denied) return denied;
-  const pathname = (req.url ?? "/").split("?")[0];
-  if (SEAT_GUARDED_READS.includes(pathname)) return checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
+  const pathname = cockpitPath(req);
+  if (SEAT_GUARDED_READS.includes(pathname) || pathname === "/api/design" || pathname.startsWith("/api/design/")) {
+    if (cockpitHeader(req, "sec-fetch-site").toLowerCase() === "cross-site") {
+      return { status: 403, error: "cross-site request rejected" };
+    }
+    return checkCockpitOrigin(req, port) ?? checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
+  }
   return null;
 }
 function guarded(seatToken, port, routes) {
@@ -35901,7 +36053,7 @@ async function runDashboard(argv) {
     questions: (id) => composeQuestionSet({ industry: readCockpitState().accounts?.[id]?.industry, agency: readOverlay() })
   };
   const server2 = http.createServer(guarded(seatToken, port, (req, res) => {
-    const url = req.url || "/";
+    const url = cockpitPath(req);
     if (req.method === "POST" && url === "/api/client-assessment") {
       readBody(req, res, 2e4, async (body) => {
         try {
@@ -35910,7 +36062,11 @@ async function runDashboard(argv) {
           res.end(JSON.stringify(result));
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "The assessment could not be attached." }));
+          logQuietly(`client assessment: ${(0, import_node_util4.inspect)(e)}`);
+          res.end(JSON.stringify({ ok: false, error: newClientFailure(e, "command-os", {
+            failed: "The assessment could not be loaded or attached",
+            next: "Check the selected account and refresh assessments before attaching again."
+          }) }));
         }
       });
       return;
@@ -35923,10 +36079,10 @@ async function runDashboard(argv) {
         return;
       }
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(html(currentRoster(), isLoopback(req) ? seatToken : "", "for", cap));
+      res.end(html(currentRoster(), mayServeSeat(req, port) ? seatToken : "", "for", cap));
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/capability")) {
+    if (req.method === "GET" && url === "/api/capability") {
       const u = new URL(req.url ?? "/", "http://127.0.0.1");
       const cap = capabilityByKey(u.searchParams.get("key") ?? "");
       const locationId2 = u.searchParams.get("locationId") ?? "";
@@ -36046,22 +36202,38 @@ async function runDashboard(argv) {
             const c = clientFor(locationId2);
             if (!c) throw new Error("No key on file for that account. Register it in GHL Command first.");
             const assessment = StateSchema.parse(args.assessment);
+            let opportunityNoteFailure;
             const out = await saveAssessment(c, locationId2, {
               assessment,
               contactName: args.contactName || void 0,
               email: args.email || void 0,
               phone: args.phone || void 0,
               createPipeline: args.createPipeline === true
+            }, (failure) => {
+              opportunityNoteFailure = failure;
             });
+            if (out.opportunityNote && (opportunityNoteFailure || isUpstreamFailure(out.opportunityNote))) {
+              logQuietly(`assessment pipeline: ${out.opportunityNote}
+${opportunityNoteFailure?.detail ?? ""}`);
+              out.opportunityNote = newClientFailure(out.opportunityNote, "command-os", {
+                fromCaughtError: Boolean(opportunityNoteFailure),
+                failed: "The answers were saved, but the Assessments pipeline could not be checked",
+                next: "Check the Assessments pipeline in GoHighLevel before saving again."
+              });
+            }
             res.end(JSON.stringify({ ok: true, ...out }));
           } catch (e) {
-            res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : String(e) }));
+            logQuietly(`assessment save: ${(0, import_node_util4.inspect)(e)}`);
+            res.end(JSON.stringify({ ok: false, error: assessmentValidationMessage(e) ?? newClientFailure(e, "command-os", {
+              failed: "The assessment save could not be confirmed",
+              next: "Check the contact and its notes in GoHighLevel before saving again."
+            }) }));
           }
         })();
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/intake-documents")) {
+    if (req.method === "GET" && url === "/api/intake-documents") {
       const u = new URL(req.url ?? "/", "http://127.0.0.1");
       const seat = checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
       if (seat) {
@@ -36109,7 +36281,7 @@ async function runDashboard(argv) {
     const boardScreen = BOARD_ROUTES[url];
     if (req.method === "GET" && boardScreen) {
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(html(currentRoster(), isLoopback(req) ? seatToken : "", boardScreen));
+      res.end(html(currentRoster(), mayServeSeat(req, port) ? seatToken : "", boardScreen));
       return;
     }
     if ((req.method === "GET" || req.method === "HEAD") && (url === "/assessment" || url === "/assessment.html")) {
@@ -36121,7 +36293,7 @@ async function runDashboard(argv) {
         "X-Robots-Tag": "noindex, nofollow"
       });
       const roster2 = currentRoster().map((r) => ({ locationId: r.locationId, name: r.name }));
-      const clientsTag = `<script>window.COMMAND_OS_CLIENTS=${scriptJson(roster2)};window.COMMAND_OS_SEAT=${scriptJson(isLoopback(req) ? seatToken : "")};</script>`;
+      const clientsTag = `<script>window.COMMAND_OS_CLIENTS=${scriptJson(roster2)};window.COMMAND_OS_SEAT=${scriptJson(mayServeSeat(req, port) ? seatToken : "")};</script>`;
       res.end(req.method === "HEAD" ? void 0 : withCockpitShell(ASSESSMENT_HTML, "assessment", assessmentAgencyTag() + clientsTag));
       return;
     }
@@ -36164,14 +36336,14 @@ async function runDashboard(argv) {
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/client-preflight?")) {
+    if (req.method === "GET" && url === "/api/client-preflight") {
       const seat = checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
       if (seat) {
         res.writeHead(seat.status);
         res.end(JSON.stringify({ ok: false, error: seat.error }));
         return;
       }
-      const id = new URL(url, "http://x").searchParams.get("locationId") || "";
+      const id = new URL(req.url || "/", "http://x").searchParams.get("locationId") || "";
       if (!readableAccount(id)) {
         res.writeHead(400);
         res.end(JSON.stringify({ ok: false, error: "Choose a registered client." }));
@@ -36327,8 +36499,8 @@ async function runDashboard(argv) {
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/intake")) {
-      const industry = new URL(url, "http://x").searchParams.get("industry") || void 0;
+    if (req.method === "GET" && url === "/api/intake") {
+      const industry = new URL(req.url || "/", "http://x").searchParams.get("industry") || void 0;
       const agency = readOverlay();
       const composed = composeQuestionSet({ industry, agency });
       res.writeHead(200, { "Content-Type": "application/json" });
@@ -36357,10 +36529,10 @@ async function runDashboard(argv) {
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/client-intake")) {
+    if (req.method === "GET" && url === "/api/client-intake") {
       (async () => {
         try {
-          const locationId2 = new URL(url, "http://x").searchParams.get("locationId") || "";
+          const locationId2 = new URL(req.url || "/", "http://x").searchParams.get("locationId") || "";
           const seat = checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
           if (seat) {
             res.writeHead(seat.status, { "Content-Type": "application/json" });
@@ -36384,7 +36556,7 @@ async function runDashboard(argv) {
           res.end(JSON.stringify({ ok: true, ...snap, questions, industry, inputHash: hash, unansweredRequired: questions.filter((q2) => q2.required && !String(answers[q2.label] ?? answers[q2.key] ?? "").trim()).map((q2) => q2.label), costs: readRunCosts().filter((r) => r.locationId === locationId2 && (r.kind === "intake extraction" || r.kind === "engine-check")).slice(-10), submittedAnswers: snap.answers ?? {}, answers, savedAt: st.intakeDrafts?.[locationId2]?.savedAt, connectionPending: !c }));
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
-          logQuietly(`client-intake ${new URL(url, "http://x").searchParams.get("locationId") || ""}: ${e instanceof Error ? e.message : String(e)}`);
+          logQuietly(`client-intake ${new URL(req.url || "/", "http://x").searchParams.get("locationId") || ""}: ${e instanceof Error ? e.message : String(e)}`);
           res.end(JSON.stringify({ ok: false, error: intakeRequestError(e) }));
         }
       })();
@@ -36508,12 +36680,12 @@ async function runDashboard(argv) {
         if (!rows.some((r) => r.locationId === locationId2)) rows.push({ locationId: locationId2, name: e.clientName || "(no account connected)", engagement: e });
       }
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(agencyProfilePageHtml(readAgencyProfile(), rows, isLoopback(req) ? seatToken : ""));
+      res.end(agencyProfilePageHtml(readAgencyProfile(), rows, mayServeSeat(req, port) ? seatToken : ""));
       return;
     }
     if (req.method === "GET" && url === "/brands") {
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
-      res.end(brandsPageHtml(listBrands(), houseLooks(), listReferenceLooks(), isLoopback(req) ? seatToken : ""));
+      res.end(brandsPageHtml(listBrands(), houseLooks(), listReferenceLooks(), mayServeSeat(req, port) ? seatToken : ""));
       return;
     }
     if (req.method === "GET" && /^\/brand\/[a-z0-9-]+\/screenshot\.png$/.test(url)) {
@@ -36534,7 +36706,7 @@ async function runDashboard(argv) {
         const dna = houseLooks().find((d) => d.slug === slug3) ?? readBrand(slug3);
         const dir = brandExists(slug3) ? brandDir(slug3) : void 0;
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
-        res.end(brandCardHtml(dna, { screenshot: dir ? fs27.existsSync(path26.join(dir, "screenshot.png")) : false, dir, seatToken: isLoopback(req) ? seatToken : "" }));
+        res.end(brandCardHtml(dna, { screenshot: dir ? fs27.existsSync(path26.join(dir, "screenshot.png")) : false, dir, seatToken: mayServeSeat(req, port) ? seatToken : "" }));
       } catch (e) {
         res.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
         res.end(e.message);
@@ -36560,8 +36732,8 @@ async function runDashboard(argv) {
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/design/run")) {
-      const id = new URL(url, "http://x").searchParams.get("id");
+    if (req.method === "GET" && url === "/api/design/run") {
+      const id = new URL(req.url || "/", "http://x").searchParams.get("id");
       const payload = id ? designRunStatus(id) : { runs: listDesignRuns() };
       res.writeHead(payload ? 200 : 404, { "Content-Type": "application/json", "Cache-Control": "no-store" });
       res.end(JSON.stringify(payload ?? { ok: false, error: "no such run" }));
@@ -36687,8 +36859,8 @@ async function runDashboard(argv) {
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/handoff?")) {
-      const locationId2 = new URL(url, "http://x").searchParams.get("locationId") || "";
+    if (req.method === "GET" && url === "/handoff") {
+      const locationId2 = new URL(req.url || "/", "http://x").searchParams.get("locationId") || "";
       if (!readableAccount(locationId2)) {
         res.writeHead(400);
         res.end("Choose a registered client.");
@@ -36786,13 +36958,17 @@ async function runDashboard(argv) {
           }
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "The handoff result is uncertain. Check Conversations before retrying." }));
+          logQuietly(`handoff email: ${(0, import_node_util4.inspect)(e)}`);
+          res.end(JSON.stringify({ ok: false, error: newClientFailure(e, "command-os", {
+            failed: url === "/api/handoff-prepare" ? "The handoff email could not be prepared" : "The handoff email send could not be confirmed",
+            next: "Check Conversations in GoHighLevel before trying again."
+          }) }));
         }
       });
       return;
     }
-    if (req.method === "GET" && url.startsWith("/blueprint")) {
-      const q2 = new URL(url, "http://x").searchParams;
+    if (req.method === "GET" && url === "/blueprint") {
+      const q2 = new URL(req.url || "/", "http://x").searchParams;
       const locationId2 = q2.get("locationId") || "";
       const st = readCockpitState();
       const review = st.reviews?.[locationId2];
@@ -36806,8 +36982,8 @@ async function runDashboard(argv) {
       res.end(reviewDocumentHtml(review, { assessment: st.assessmentAttachments?.[locationId2], purchasedFeatureIds: st.assessmentPurchases?.[locationId2], planLines: readSavedPlan(locationId2) ? executablePlanLines(readSavedPlan(locationId2)) : [], clientName: name, agencyName: q2.get("agency") || st.agencyName, accent: q2.get("accent") || st.agencyAccent }));
       return;
     }
-    if (req.method === "GET" && url.startsWith("/api/review")) {
-      const locationId2 = new URL(url, "http://x").searchParams.get("locationId") || "";
+    if (req.method === "GET" && url === "/api/review") {
+      const locationId2 = new URL(req.url || "/", "http://x").searchParams.get("locationId") || "";
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify(readCockpitState().reviews?.[locationId2] ?? { ok: false, error: "not generated yet" }));
       return;
@@ -37281,10 +37457,11 @@ async function runDashboard(argv) {
     process.on("SIGTERM", stop);
   });
 }
-var fs27, path26, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS;
+var import_node_util4, fs27, path26, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
+    import_node_util4 = require("node:util");
     init_verify_readback();
     init_intake_notification();
     init_approved_status_writer();
@@ -37399,7 +37576,7 @@ var init_dashboard = __esm({
     anthropicKeyWrites = Promise.resolve();
     SEAT_TOKEN_HEADER = "x-command-os-seat";
     NOT_SIGNED_IN_MSG = "This browser isn't signed in to Command OS on this computer. Open Command OS on the machine it runs on, and use the page it opens for you.";
-    SEAT_GUARDED_READS = ["/api/capability", "/api/client-intake", "/api/intake-documents", "/api/snapshots"];
+    SEAT_GUARDED_READS = ["/api/capability", "/api/client-intake", "/api/intake-documents", "/api/snapshots", "/api/agency-connection", "/api/client-preflight"];
   }
 });
 
@@ -37522,7 +37699,7 @@ Token registry: ${registeredCount} location(s) registered${versionLine}`
     "switch_location",
     "Switch the active GHL sub-account. Automatically swaps the API key from the token registry if available. After switching, all tools default to the new location.",
     {
-      locationId: import_zod53.z.string().describe("The Location ID to switch to.")
+      locationId: import_zod54.z.string().describe("The Location ID to switch to.")
     },
     async ({ locationId: locationId2 }) => withSwitchLock(async () => {
       const previousId = client.defaultLocationId;
@@ -37598,9 +37775,9 @@ Still on: ${previousId || "none"}${hint}` }],
     "register_location",
     "Add a GHL sub-account to the token registry so switch_location can automatically use its API key. Each sub-account needs its own Private Integration key created in GHL Settings > Integrations.",
     {
-      locationId: import_zod53.z.string().describe("The GHL Location ID (from Settings > Business Profile)."),
-      name: import_zod53.z.string().describe("A friendly name for this sub-account (e.g. 'PNTracker', 'Med Spa Template')."),
-      apiKey: import_zod53.z.string().describe("The Private Integration API key for this sub-account (starts with 'pit-').")
+      locationId: import_zod54.z.string().describe("The GHL Location ID (from Settings > Business Profile)."),
+      name: import_zod54.z.string().describe("A friendly name for this sub-account (e.g. 'PNTracker', 'Med Spa Template')."),
+      apiKey: import_zod54.z.string().describe("The Private Integration API key for this sub-account (starts with 'pit-').")
     },
     async ({ locationId: locationId2, name, apiKey: apiKey2 }) => {
       const result = await registerVerifiedLocation(registry2, locationId2, apiKey2);
@@ -37622,7 +37799,7 @@ You can now use switch_location to switch to this sub-account.`
     "register_agency_key",
     "Store the AGENCY-level (company-scoped) API key in the token registry. This key powers agency-wide tools: list_snapshots, create_snapshot_share_link, and list_available_locations across all sub-accounts. Create it at the AGENCY level in GHL (Agency Settings > Private Integrations) \u2014 it is different from a sub-account's key. The key is validated before saving.",
     {
-      apiKey: import_zod53.z.string().describe("The agency-level Private Integration API key (starts with 'pit-'). Must be created in AGENCY settings, not inside a sub-account.")
+      apiKey: import_zod54.z.string().describe("The agency-level Private Integration API key (starts with 'pit-'). Must be created in AGENCY settings, not inside a sub-account.")
     },
     async ({ apiKey: apiKey2 }) => {
       if (!registry2) {
@@ -37676,7 +37853,7 @@ Agency-wide tools now available: list_snapshots, create_snapshot_share_link, and
     "unregister_location",
     "Remove a GHL sub-account from the token registry.",
     {
-      locationId: import_zod53.z.string().describe("The Location ID to remove.")
+      locationId: import_zod54.z.string().describe("The Location ID to remove.")
     },
     async ({ locationId: locationId2 }) => {
       if (!registry2) {
@@ -37702,12 +37879,12 @@ Agency-wide tools now available: list_snapshots, create_snapshot_share_link, and
     "register_company_firebase",
     "Register a GHL company's Firebase credentials so the workflow builder and all Firebase-gated tools work when you switch into THAT company's sub-accounts. Firebase refresh tokens are company-scoped, so managing a client's GHL (e.g. an account where you're an admin user) requires that company's own token. Capture the values from a browser session logged into the client's account. The tool stores them under the company ID the Firebase token itself authenticates as (decoded from the token), so you do NOT need to hunt down the exact internal company ID \u2014 pass whatever ID you have and it self-corrects. After this, switch_location to any of that company's locations authenticates the workflow builder correctly. DevTools capture steps: elitedcs.com/ghl-mcp-firebase.",
     {
-      companyId: import_zod53.z.string().describe("A GHL company/agency ID for this client (from switch_location/register_location output, or the GHL agency URL). Best-effort only: the tool re-keys the entry to the company ID the Firebase token actually authenticates as, which can differ from the ID shown in the agency URL. Just pass what you have."),
-      name: import_zod53.z.string().describe("Friendly name for this client/company (e.g. 'Acme Health \u2014 main agency')."),
-      ghl_firebase_refresh_token: import_zod53.z.string().min(10).describe("Firebase refresh token captured from a browser session logged into THIS company's GHL. value.stsTokenManager.refreshToken in the firebase:authUser IndexedDB row."),
-      ghl_user_id: import_zod53.z.string().min(5).describe("Firebase User ID (uid) from the same session. value.uid in the firebase:authUser row."),
-      ghl_firebase_api_key: import_zod53.z.string().optional().describe("Firebase API key (starts with 'AIza'). Optional \u2014 defaults to your home Firebase API key, which is identical across GHL accounts."),
-      test_location_id: import_zod53.z.string().optional().describe("Optional but recommended: a registered location ID belonging to this company. The tool then makes a real workflow-builder call to confirm these credentials actually work for this company before you rely on them.")
+      companyId: import_zod54.z.string().describe("A GHL company/agency ID for this client (from switch_location/register_location output, or the GHL agency URL). Best-effort only: the tool re-keys the entry to the company ID the Firebase token actually authenticates as, which can differ from the ID shown in the agency URL. Just pass what you have."),
+      name: import_zod54.z.string().describe("Friendly name for this client/company (e.g. 'Acme Health \u2014 main agency')."),
+      ghl_firebase_refresh_token: import_zod54.z.string().min(10).describe("Firebase refresh token captured from a browser session logged into THIS company's GHL. value.stsTokenManager.refreshToken in the firebase:authUser IndexedDB row."),
+      ghl_user_id: import_zod54.z.string().min(5).describe("Firebase User ID (uid) from the same session. value.uid in the firebase:authUser row."),
+      ghl_firebase_api_key: import_zod54.z.string().optional().describe("Firebase API key (starts with 'AIza'). Optional \u2014 defaults to your home Firebase API key, which is identical across GHL accounts."),
+      test_location_id: import_zod54.z.string().optional().describe("Optional but recommended: a registered location ID belonging to this company. The tool then makes a real workflow-builder call to confirm these credentials actually work for this company before you rely on them.")
     },
     async (args) => {
       if (!registry2) {
@@ -37811,7 +37988,7 @@ Now run switch_location to any of this company's sub-accounts \u2014 the workflo
     "unregister_company_firebase",
     "Remove a company's Firebase credentials from the registry. Workflow-builder tools will stop working for that company's sub-accounts until re-registered.",
     {
-      companyId: import_zod53.z.string().describe("The company ID to remove Firebase credentials for.")
+      companyId: import_zod54.z.string().describe("The company ID to remove Firebase credentials for.")
     },
     async ({ companyId }) => {
       if (!registry2) {
@@ -37879,8 +38056,8 @@ ${lines.join("\n")}
     "list_available_locations",
     "List all GHL sub-accounts (locations) accessible with the current or agency API key. Shows locations that exist in the GHL account \u2014 use register_location to add their tokens. Offset-based pagination via skip/limit.",
     {
-      limit: import_zod53.z.number().optional().describe("Max locations to return. Defaults to 20."),
-      skip: import_zod53.z.number().optional().describe("Number to skip for pagination.")
+      limit: import_zod54.z.number().optional().describe("Max locations to return. Defaults to 20."),
+      skip: import_zod54.z.number().optional().describe("Number to skip for pagination.")
     },
     async ({ limit, skip }) => {
       try {
@@ -37924,21 +38101,21 @@ ${lines.join("\n")}
     "create_sub_account",
     "Create a NEW GHL sub-account (location) under the agency, optionally loading a snapshot at creation \u2014 the first step of fully programmatic client provisioning (create \u2192 Blueprint build \u2192 verify_funnel). Requires an agency-level API key with the locations.write scope (add via register_agency_key). After creating, this probes whether the agency key can operate the new location and auto-registers it in the token registry when it can (switch_location then works immediately); if the probe fails, create a Private Integration Token inside the new sub-account and run register_location. Company Firebase (register_company_firebase) covers the internal-API builder tools in the new location either way.",
     {
-      name: import_zod53.z.string().min(1).describe("Business / sub-account name."),
-      snapshot_id: import_zod53.z.string().optional().describe("Snapshot ID to load at creation (see list_snapshots)."),
-      company_id: import_zod53.z.string().optional().describe("Agency company ID. Defaults to the active location's registered companyId."),
-      first_name: import_zod53.z.string().optional().describe("Prospect/owner first name."),
-      last_name: import_zod53.z.string().optional().describe("Prospect/owner last name."),
-      email: import_zod53.z.string().email().optional().describe("Prospect/owner email."),
-      phone: import_zod53.z.string().optional().describe("Business phone (E.164, e.g. +15551234567)."),
-      address: import_zod53.z.string().optional().describe("Street address."),
-      city: import_zod53.z.string().optional(),
-      state: import_zod53.z.string().optional(),
-      postal_code: import_zod53.z.string().optional(),
-      country: import_zod53.z.string().optional().describe("Two-letter country code. Defaults to US."),
-      website: import_zod53.z.string().optional(),
-      timezone: import_zod53.z.string().optional().describe("IANA timezone, e.g. America/Los_Angeles."),
-      auto_register: import_zod53.z.boolean().optional().describe("Probe the new location with the agency key and add it to the token registry on success. Default true.")
+      name: import_zod54.z.string().min(1).describe("Business / sub-account name."),
+      snapshot_id: import_zod54.z.string().optional().describe("Snapshot ID to load at creation (see list_snapshots)."),
+      company_id: import_zod54.z.string().optional().describe("Agency company ID. Defaults to the active location's registered companyId."),
+      first_name: import_zod54.z.string().optional().describe("Prospect/owner first name."),
+      last_name: import_zod54.z.string().optional().describe("Prospect/owner last name."),
+      email: import_zod54.z.string().email().optional().describe("Prospect/owner email."),
+      phone: import_zod54.z.string().optional().describe("Business phone (E.164, e.g. +15551234567)."),
+      address: import_zod54.z.string().optional().describe("Street address."),
+      city: import_zod54.z.string().optional(),
+      state: import_zod54.z.string().optional(),
+      postal_code: import_zod54.z.string().optional(),
+      country: import_zod54.z.string().optional().describe("Two-letter country code. Defaults to US."),
+      website: import_zod54.z.string().optional(),
+      timezone: import_zod54.z.string().optional().describe("IANA timezone, e.g. America/Los_Angeles."),
+      auto_register: import_zod54.z.boolean().optional().describe("Probe the new location with the agency key and add it to the token registry on success. Default true.")
     },
     async (args) => {
       if (readAgencyProfile().canCreateSubAccounts === false) return { content: [{ type: "text", text: "Create it in GoHighLevel and register it in GHL Command with its key." }], isError: true };
@@ -37961,9 +38138,9 @@ ${lines.join("\n")}
     "delete_sub_account",
     "Permanently delete a GHL sub-account (location) via the agency API. IRREVERSIBLE \u2014 every contact, workflow, funnel, and setting inside the sub-account is destroyed. Refuses to delete the currently active location. Also removes the location from the token registry. Requires an agency-level key with locations.write.",
     {
-      location_id: import_zod53.z.string().min(1).describe("The location ID to delete."),
-      confirm: import_zod53.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action."),
-      delete_twilio: import_zod53.z.boolean().optional().describe("Also delete the location's Twilio sub-account. Default false.")
+      location_id: import_zod54.z.string().min(1).describe("The location ID to delete."),
+      confirm: import_zod54.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action."),
+      delete_twilio: import_zod54.z.boolean().optional().describe("Also delete the location's Twilio sub-account. Default false.")
     },
     async ({ location_id, delete_twilio }) => {
       const agencyKey = registry2?.getAgencyKey();
@@ -37999,11 +38176,11 @@ ${lines.join("\n")}
     }
   );
 }
-var import_zod53, WRONG_LOCATION_KEY, DIFFERENT_LOCATION_KEY, switchChain;
+var import_zod54, WRONG_LOCATION_KEY, DIFFERENT_LOCATION_KEY, switchChain;
 var init_location_switcher = __esm({
   "src/tools/location-switcher.ts"() {
     "use strict";
-    import_zod53 = require("zod");
+    import_zod54 = require("zod");
     init_ghl_client();
     init_sub_account_errors();
     init_agency_profile();
@@ -38029,8 +38206,8 @@ function registerBulkOperationTools(server2, client) {
     "bulk_add_tags",
     "Add tags to multiple contacts at once. Rate-limited to avoid API throttling. Returns a summary of successes and failures.",
     {
-      contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to tag."),
-      tags: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one tag required.").describe("Tags to add to each contact.")
+      contactIds: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to tag."),
+      tags: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one tag required.").describe("Tags to add to each contact.")
     },
     async ({ contactIds, tags }) => {
       const results = { success: 0, failed: 0, errors: [] };
@@ -38052,8 +38229,8 @@ function registerBulkOperationTools(server2, client) {
     "bulk_remove_tags",
     "Remove tags from multiple contacts at once. Rate-limited.",
     {
-      contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs."),
-      tags: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one tag required.").describe("Tags to remove from each contact.")
+      contactIds: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs."),
+      tags: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one tag required.").describe("Tags to remove from each contact.")
     },
     async ({ contactIds, tags }) => {
       const results = { success: 0, failed: 0, errors: [] };
@@ -38074,8 +38251,8 @@ function registerBulkOperationTools(server2, client) {
     "bulk_update_contacts",
     "Update the same field(s) on multiple contacts at once. Rate-limited. Example: set a custom field value, change source, update address for a batch of contacts.",
     {
-      contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to update."),
-      fields: import_zod54.z.record(import_zod54.z.string(), import_zod54.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
+      contactIds: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to update."),
+      fields: import_zod55.z.record(import_zod55.z.string(), import_zod55.z.unknown()).describe("Fields to set on each contact (e.g. {customField: {id: 'xxx', value: 'yyy'}}, {source: 'Import'}).")
     },
     async ({ contactIds, fields }) => {
       if (Object.keys(fields).length === 0) {
@@ -38101,8 +38278,8 @@ function registerBulkOperationTools(server2, client) {
     "bulk_add_to_workflow",
     "Enroll multiple contacts into a workflow at once. Rate-limited.",
     {
-      contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to enroll."),
-      workflowId: import_zod54.z.string().describe("The workflow ID to enroll contacts into.")
+      contactIds: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to enroll."),
+      workflowId: import_zod55.z.string().describe("The workflow ID to enroll contacts into.")
     },
     async ({ contactIds, workflowId }) => {
       const results = { success: 0, failed: 0, errors: [] };
@@ -38123,8 +38300,8 @@ function registerBulkOperationTools(server2, client) {
     "bulk_delete_contacts",
     "Delete multiple contacts at once. IRREVERSIBLE. Rate-limited. Use with extreme caution.",
     {
-      contactIds: import_zod54.z.array(import_zod54.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to permanently delete."),
-      confirm: import_zod54.z.literal("DELETE").describe("Must pass the string 'DELETE' to confirm. This is a safety check.")
+      contactIds: import_zod55.z.array(import_zod55.z.string()).min(1, "At least one contact ID required.").describe("Array of contact IDs to permanently delete."),
+      confirm: import_zod55.z.literal("DELETE").describe("Must pass the string 'DELETE' to confirm. This is a safety check.")
     },
     async ({ contactIds, confirm: confirm2 }) => {
       if (confirm2 !== "DELETE") {
@@ -38150,11 +38327,11 @@ ${deleted.join("\n")}` : "";
     }
   );
 }
-var import_zod54;
+var import_zod55;
 var init_bulk_operations = __esm({
   "src/tools/bulk-operations.ts"() {
     "use strict";
-    import_zod54 = require("zod");
+    import_zod55 = require("zod");
     init_tool_helpers();
   }
 });
@@ -38582,8 +38759,8 @@ function registerAccountExportTools(server2, client, registry2, builderClient) {
     "export_account",
     "Export a complete inventory of the GHL sub-account: location info, contacts (count + sample), pipelines with stages, workflows (with full actions if builder auth is configured), funnels with pages, forms, custom fields, custom values, tags, calendars, and users. Returns a comprehensive JSON report for auditing or backup.",
     {
-      locationId: import_zod55.z.string().optional().describe("Location ID to export. Uses default if not specified."),
-      includeContacts: import_zod55.z.boolean().optional().describe("Include contact list (first 100). Defaults to false for speed.")
+      locationId: import_zod56.z.string().optional().describe("Location ID to export. Uses default if not specified."),
+      includeContacts: import_zod56.z.boolean().optional().describe("Include contact list (first 100). Defaults to false for speed.")
     },
     async ({ locationId: locationId2, includeContacts }) => {
       try {
@@ -38713,8 +38890,8 @@ function registerAccountExportTools(server2, client, registry2, builderClient) {
     "compare_locations",
     "Compare two GHL sub-accounts side by side. For pipelines, workflows, custom fields, tags and forms it returns the count on each side plus the NAMES present in one account and missing from the other, so a setup gap reads directly. If a section cannot be read (commonly the API key has no access to the second location), that section is reported as unavailable with the reason \u2014 never as a count of zero.",
     {
-      locationA: import_zod55.z.string().describe("First Location ID."),
-      locationB: import_zod55.z.string().describe("Second Location ID.")
+      locationA: import_zod56.z.string().describe("First Location ID."),
+      locationB: import_zod56.z.string().describe("Second Location ID.")
     },
     async ({ locationA, locationB }) => {
       try {
@@ -38784,11 +38961,11 @@ function registerAccountExportTools(server2, client, registry2, builderClient) {
     "build_offboarding_kit",
     "Assemble the complete exit package for a sub-account: a full contact export, an inventory of everything the account contains, an access map of every person and connected account that can reach it, the recorded owner of each asset, a key-rotation checklist, and a plain-language handoff document the next operator can follow. Read-only: it changes nothing. locationId is REQUIRED and never defaults, because exporting the wrong client's account is the one mistake this tool must not be able to make. Assets nobody has recorded an owner for come back under ownership.unanswered \u2014 answer those with record_asset_ownership and they stay answered. Key VALUES are never included: GoHighLevel does not expose them to any tool, so the kit lists where each key lives instead.",
     {
-      locationId: import_zod55.z.string().describe("Sub-account to build the kit for. REQUIRED \u2014 this tool never falls back to the active account."),
-      contacts: import_zod55.z.enum(["summary", "csv"]).optional().describe(
+      locationId: import_zod56.z.string().describe("Sub-account to build the kit for. REQUIRED \u2014 this tool never falls back to the active account."),
+      contacts: import_zod56.z.enum(["summary", "csv"]).optional().describe(
         "'summary' (default) returns contact counts only. 'csv' also returns the full contact export as CSV text, which can be large \u2014 ask for it when you are ready to save the file."
       ),
-      maxContacts: import_zod55.z.number().int().positive().optional().describe(`Ceiling on contacts read. Defaults to ${DEFAULT_MAX_CONTACTS}. If the ceiling is hit, the kit says so in the handoff document itself rather than quietly returning a short list.`)
+      maxContacts: import_zod56.z.number().int().positive().optional().describe(`Ceiling on contacts read. Defaults to ${DEFAULT_MAX_CONTACTS}. If the ceiling is hit, the kit says so in the handoff document itself rather than quietly returning a short list.`)
     },
     async ({ locationId: locationId2, contacts, maxContacts }) => {
       const originalKey = client.getApiKey();
@@ -38942,12 +39119,12 @@ function registerAccountExportTools(server2, client, registry2, builderClient) {
     "record_asset_ownership",
     "Record who owns an asset attached to a sub-account: the client, the agency, something borrowed for the engagement, or an outside vendor. Stored as custom values inside the client's own account, so the record outlives this tool and the client can read it without asking anyone. Answer these once at setup and build_offboarding_kit needs no interview later. Re-recording the same asset updates it in place instead of adding a duplicate. locationId is REQUIRED: writing ownership into the wrong client's account is worth preventing outright.",
     {
-      locationId: import_zod55.z.string().describe("Sub-account to record ownership in. REQUIRED \u2014 never falls back to the active account."),
-      assets: import_zod55.z.array(
-        import_zod55.z.object({
-          asset: import_zod55.z.string().describe("What it is, in the words you would say out loud. e.g. 'Website domain' or 'Phone number +16025551234'."),
-          owner: import_zod55.z.enum(OWNER_KINDS).describe("client = stays with them. agency = leaves with you. borrowed = must be returned or replaced at exit. third-party = an outside vendor controls it."),
-          note: import_zod55.z.string().optional().describe("Anything the next person needs, e.g. 'registered on the client's own GoDaddy account'.")
+      locationId: import_zod56.z.string().describe("Sub-account to record ownership in. REQUIRED \u2014 never falls back to the active account."),
+      assets: import_zod56.z.array(
+        import_zod56.z.object({
+          asset: import_zod56.z.string().describe("What it is, in the words you would say out loud. e.g. 'Website domain' or 'Phone number +16025551234'."),
+          owner: import_zod56.z.enum(OWNER_KINDS).describe("client = stays with them. agency = leaves with you. borrowed = must be returned or replaced at exit. third-party = an outside vendor controls it."),
+          note: import_zod56.z.string().optional().describe("Anything the next person needs, e.g. 'registered on the client's own GoDaddy account'.")
         })
       ).min(1).describe("One entry per asset. Send several at once.")
     },
@@ -39066,11 +39243,11 @@ function buildLocationComparison(dataA, dataB, sections) {
   }
   return { comparison, unavailable };
 }
-var import_zod55, OFF_PLATFORM_ASSETS;
+var import_zod56, OFF_PLATFORM_ASSETS;
 var init_account_export = __esm({
   "src/tools/account-export.ts"() {
     "use strict";
-    import_zod55 = require("zod");
+    import_zod56 = require("zod");
     init_tool_helpers();
     init_contact_export();
     init_asset_ownership();
@@ -39095,8 +39272,8 @@ function registerWorkflowClonerTools(server2, builderClient) {
     "clone_workflow",
     "Deep clone a workflow \u2014 creates an exact copy with new IDs for all actions, triggers, and references. The clone starts as a draft. Useful for creating templates or duplicating workflows across projects.",
     {
-      sourceWorkflowId: import_zod56.z.string().describe("The workflow ID to clone."),
-      newName: import_zod56.z.string().describe("Name for the cloned workflow.")
+      sourceWorkflowId: import_zod57.z.string().describe("The workflow ID to clone."),
+      newName: import_zod57.z.string().describe("Name for the cloned workflow.")
     },
     async ({ sourceWorkflowId, newName }) => {
       try {
@@ -39224,11 +39401,11 @@ function registerWorkflowClonerTools(server2, builderClient) {
     }
   );
 }
-var import_zod56, crypto6;
+var import_zod57, crypto6;
 var init_workflow_cloner = __esm({
   "src/tools/workflow-cloner.ts"() {
     "use strict";
-    import_zod56 = require("zod");
+    import_zod57 = require("zod");
     crypto6 = __toESM(require("crypto"));
   }
 });
@@ -39270,11 +39447,11 @@ ${text2}`);
     "list_smart_lists",
     "List smart lists (dynamic / saved-filter lists) in a location. Smart Lists are saved searches over contacts or opportunities \u2014 agencies use them to segment by complex criteria. Filters and columns aren't returned in the list view; use get_smart_list for the full filter spec.",
     {
-      objectKey: import_zod57.z.enum(OBJECT_KEYS).describe("The object type the lists segment over. 'contacts' for contact-segments, 'opportunity' for opportunity-segments. Required \u2014 GHL rejects requests without it."),
-      query: import_zod57.z.string().optional().describe("Free-text search across smart list names."),
-      limit: import_zod57.z.number().optional().describe("Max smart lists per page. Defaults to 20 on GHL's side."),
-      startAfter: import_zod57.z.string().optional().describe("Cursor for pagination \u2014 pass the last list's id from the previous page."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      objectKey: import_zod58.z.enum(OBJECT_KEYS).describe("The object type the lists segment over. 'contacts' for contact-segments, 'opportunity' for opportunity-segments. Required \u2014 GHL rejects requests without it."),
+      query: import_zod58.z.string().optional().describe("Free-text search across smart list names."),
+      limit: import_zod58.z.number().optional().describe("Max smart lists per page. Defaults to 20 on GHL's side."),
+      startAfter: import_zod58.z.string().optional().describe("Cursor for pagination \u2014 pass the last list's id from the previous page."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ objectKey, query, limit, startAfter, locationId: locationId2 }) => {
       try {
@@ -39307,10 +39484,10 @@ ${await res.text()}`);
     "create_contact_smart_list",
     "Create a CONTACT smart list (saved filter over contacts) with working filters \u2014 the owner-exception views a dashboard needs. Uses GHL's contacts/smartlist service and its captured OR-of-AND filter envelope. `tagFilters` is the common case: each entry is a list of tag names the contact must ALL carry. For anything else pass `rawFilters` (leaf objects: {field, operator, value, options}). NOTE: create_smart_list (the older tool) targets the opportunity-list service and cannot express contact filters.",
     {
-      name: import_zod57.z.string().describe("Display name for the smart list."),
-      tagFilters: import_zod57.z.array(import_zod57.z.array(import_zod57.z.string())).optional().describe('Tag conditions. Each inner array is one filter requiring ALL those tags, e.g. [["escalated"]] for "has the escalated tag".'),
-      rawFilters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      name: import_zod58.z.string().describe("Display name for the smart list."),
+      tagFilters: import_zod58.z.array(import_zod58.z.array(import_zod58.z.string())).optional().describe('Tag conditions. Each inner array is one filter requiring ALL those tags, e.g. [["escalated"]] for "has the escalated tag".'),
+      rawFilters: import_zod58.z.array(import_zod58.z.record(import_zod58.z.string(), import_zod58.z.unknown())).optional().describe("Advanced: raw filter leaves {field, operator, value, options}. Combined with tagFilters into one AND group."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ name, tagFilters, rawFilters, locationId: locationId2 }) => {
       try {
@@ -39334,7 +39511,7 @@ ${await res.text()}`);
     "get_contact_smart_list",
     "Get a CONTACT smart list by id INCLUDING its filterSpecs. Use this to verify a contact smart list's filters after creating it \u2014 get_smart_list targets the opportunity-list service and returns the record without any filters, which reads as 'no filters set'.",
     {
-      listId: import_zod57.z.string().describe("The contact smart list id.")
+      listId: import_zod58.z.string().describe("The contact smart list id.")
     },
     async ({ listId }) => {
       try {
@@ -39352,8 +39529,8 @@ ${await res.text()}`);
     "delete_contact_smart_list",
     "Delete a CONTACT smart list by id.",
     {
-      listId: import_zod57.z.string().describe("The contact smart list id."),
-      confirm: import_zod57.z.literal("DELETE").describe('Type "DELETE" to confirm.')
+      listId: import_zod58.z.string().describe("The contact smart list id."),
+      confirm: import_zod58.z.literal("DELETE").describe('Type "DELETE" to confirm.')
     },
     async ({ listId }) => {
       try {
@@ -39371,8 +39548,8 @@ ${await res.text()}`);
     "get_smart_list",
     "Get a single smart list by ID with its full configuration: filters, columns, permissions, and metadata. The filters array is what defines who/what is in the list.",
     {
-      listId: import_zod57.z.string().describe("The smart list ID (from list_smart_lists or a previous create_smart_list response)."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      listId: import_zod58.z.string().describe("The smart list ID (from list_smart_lists or a previous create_smart_list response)."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ listId, locationId: locationId2 }) => {
       try {
@@ -39388,13 +39565,13 @@ ${await res.text()}`);
     "create_smart_list",
     "Create a new smart list (dynamic filter list). Required: name + objectKey. Filters define the saved-search criteria \u2014 pass an empty array to create an empty list and add filters later via update_smart_list. The shape of filters/columns is opaque here; query an existing smart list with get_smart_list to see the format GHL expects.",
     {
-      name: import_zod57.z.string().describe("Display name for the smart list."),
-      objectKey: import_zod57.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
-      pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
-      defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs where this list is the default view."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      name: import_zod58.z.string().describe("Display name for the smart list."),
+      objectKey: import_zod58.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
+      filters: import_zod58.z.array(import_zod58.z.record(import_zod58.z.string(), import_zod58.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
+      columns: import_zod58.z.array(import_zod58.z.record(import_zod58.z.string(), import_zod58.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
+      pipelineIds: import_zod58.z.array(import_zod58.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
+      defaultInPipelines: import_zod58.z.array(import_zod58.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs where this list is the default view."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ name, objectKey, filters, columns, pipelineIds, defaultInPipelines, locationId: locationId2 }) => {
       try {
@@ -39415,13 +39592,13 @@ ${await res.text()}`);
     "update_smart_list",
     "Update an existing smart list's name, filters, or columns. The objectKey CANNOT be changed after creation (GHL rejects with 422 if you try). Use get_smart_list first to inspect the current filters; partial updates work \u2014 pass only the fields you want to change.",
     {
-      listId: import_zod57.z.string().describe("The smart list ID to update."),
-      name: import_zod57.z.string().optional().describe("New display name."),
-      filters: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
-      columns: import_zod57.z.array(import_zod57.z.record(import_zod57.z.string(), import_zod57.z.unknown())).optional().describe("Replace the column array entirely."),
-      pipelineIds: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the pipeline scope."),
-      defaultInPipelines: import_zod57.z.array(import_zod57.z.string()).optional().describe("(opportunity only) Update the default-in-pipelines list."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      listId: import_zod58.z.string().describe("The smart list ID to update."),
+      name: import_zod58.z.string().optional().describe("New display name."),
+      filters: import_zod58.z.array(import_zod58.z.record(import_zod58.z.string(), import_zod58.z.unknown())).optional().describe("Replace the filter array entirely. To add a filter, fetch the current list, append, and pass the new array."),
+      columns: import_zod58.z.array(import_zod58.z.record(import_zod58.z.string(), import_zod58.z.unknown())).optional().describe("Replace the column array entirely."),
+      pipelineIds: import_zod58.z.array(import_zod58.z.string()).optional().describe("(opportunity only) Update the pipeline scope."),
+      defaultInPipelines: import_zod58.z.array(import_zod58.z.string()).optional().describe("(opportunity only) Update the default-in-pipelines list."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ listId, name, filters, columns, pipelineIds, defaultInPipelines, locationId: locationId2 }) => {
       try {
@@ -39446,9 +39623,9 @@ ${await res.text()}`);
     "delete_smart_list",
     "Permanently delete a smart list. IRREVERSIBLE. The list configuration is removed but the contacts/opportunities themselves are NOT touched \u2014 smart lists are just saved filters. Any workflow trigger / dashboard / report that referenced this list by ID will stop working.",
     {
-      listId: import_zod57.z.string().describe("The smart list ID to delete."),
-      confirm: import_zod57.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action."),
-      locationId: import_zod57.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      listId: import_zod58.z.string().describe("The smart list ID to delete."),
+      confirm: import_zod58.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action."),
+      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ listId, locationId: locationId2 }) => {
       try {
@@ -39461,11 +39638,11 @@ ${await res.text()}`);
     }
   );
 }
-var import_zod57, SMARTLIST_BASE, OBJECT_KEYS, CONTACT_SMARTLIST_BASE, CONTACT_SMARTLIST_DELETE, DEFAULT_CONTACT_SMARTLIST_COLUMNS;
+var import_zod58, SMARTLIST_BASE, OBJECT_KEYS, CONTACT_SMARTLIST_BASE, CONTACT_SMARTLIST_DELETE, DEFAULT_CONTACT_SMARTLIST_COLUMNS;
 var init_smart_lists = __esm({
   "src/tools/smart-lists.ts"() {
     "use strict";
-    import_zod57 = require("zod");
+    import_zod58 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     SMARTLIST_BASE = "https://backend.leadconnectorhq.com/lists/dynamic";
@@ -39504,7 +39681,7 @@ ${text2}`);
     "get_review_link_list",
     "List the review-link destinations configured for a location \u2014 the platforms (Google, Facebook, etc.) where review requests send contacts. Each entry has a label and the public review URL. Useful for: building review-request workflows (the workflow goal condition `review_request_clicked` references these review-link ids), and auditing which review platforms a sub-account has connected.",
     {
-      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      locationId: import_zod59.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39516,13 +39693,13 @@ ${text2}`);
     "list_reviews",
     "List the reviews a location has received (Google, Facebook, etc.) with rating, author, text, reply status, sentiment score, and source. Filter by an exact star rating or a range \u2014 'everything under 4 stars' is minRating 1 + maxRating 3. NOTE: location is resolved through nested filter params internally \u2014 a flat locationId is what caused the long-standing 'No Location Found' error, now fixed. Responding to a review is not yet available via API. Requires Firebase auth.",
     {
-      locationId: import_zod58.z.string().optional().describe("Location ID. Falls back to the active builder client's location."),
-      pageNumber: import_zod58.z.number().optional().describe("1-based page number. Defaults to 1."),
-      pageSize: import_zod58.z.number().optional().describe("Results per page. Defaults to 10."),
-      rating: import_zod58.z.number().min(1).max(5).optional().describe("Exact star rating (1-5). Takes precedence over minRating/maxRating."),
-      minRating: import_zod58.z.number().min(1).max(5).optional().describe("Lowest star rating to include (1-5), inclusive."),
-      maxRating: import_zod58.z.number().min(1).max(5).optional().describe("Highest star rating to include (1-5), inclusive. For 'under 4 stars', pass 3."),
-      includeDeleted: import_zod58.z.boolean().optional().describe("Include deleted reviews. Defaults to false.")
+      locationId: import_zod59.z.string().optional().describe("Location ID. Falls back to the active builder client's location."),
+      pageNumber: import_zod59.z.number().optional().describe("1-based page number. Defaults to 1."),
+      pageSize: import_zod59.z.number().optional().describe("Results per page. Defaults to 10."),
+      rating: import_zod59.z.number().min(1).max(5).optional().describe("Exact star rating (1-5). Takes precedence over minRating/maxRating."),
+      minRating: import_zod59.z.number().min(1).max(5).optional().describe("Lowest star rating to include (1-5), inclusive."),
+      maxRating: import_zod59.z.number().min(1).max(5).optional().describe("Highest star rating to include (1-5), inclusive. For 'under 4 stars', pass 3."),
+      includeDeleted: import_zod59.z.boolean().optional().describe("Include deleted reviews. Defaults to false.")
     },
     async ({ locationId: locationId2, pageNumber, pageSize, rating, minRating, maxRating, includeDeleted }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39560,11 +39737,11 @@ function buildReviewsQuery(locationId2, opts = {}) {
   }).join("&");
   return `/reviews?${query}`;
 }
-var import_zod58, REPUTATION_BASE;
+var import_zod59, REPUTATION_BASE;
 var init_reputation = __esm({
   "src/tools/reputation.ts"() {
     "use strict";
-    import_zod58 = require("zod");
+    import_zod59 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     REPUTATION_BASE = "https://backend.leadconnectorhq.com/reputation";
@@ -39580,15 +39757,15 @@ function registerEmailCampaignTools(server2, builderClient) {
     "create_email_campaign",
     "Create an email campaign / broadcast DRAFT from an existing email template. Requires a templateId (create one first with create_email_template). The campaign is created as a draft \u2014 to actually SEND or schedule it, finish in the GHL UI: the send/schedule endpoint isn't available through the API yet. There's also no API delete for campaigns, so drafts created here are removed via the GHL UI. Despite those limits, this gets the campaign 90% built \u2014 template, subject, sender, name all set programmatically.",
     {
-      templateId: import_zod59.z.string().describe("ID of an email template (from create_email_template or list_email_templates) to use as the campaign body."),
-      name: import_zod59.z.string().optional().describe("Internal campaign name (shown in the campaigns list, not to recipients). Defaults to a GHL-generated name."),
-      subject: import_zod59.z.string().optional().describe("Email subject line recipients see."),
-      fromName: import_zod59.z.string().optional().describe("Sender display name."),
-      fromEmail: import_zod59.z.string().optional().describe("Sender email address. Must be a verified sending address in the location."),
-      isPlainText: import_zod59.z.boolean().optional().describe("Send as plain text instead of HTML. Defaults to false."),
-      enableResendToUnopened: import_zod59.z.boolean().optional().describe("Auto-resend to contacts who didn't open. Defaults to false."),
-      hasUtmTracking: import_zod59.z.boolean().optional().describe("Append UTM tracking params to links. Defaults to false."),
-      locationId: import_zod59.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      templateId: import_zod60.z.string().describe("ID of an email template (from create_email_template or list_email_templates) to use as the campaign body."),
+      name: import_zod60.z.string().optional().describe("Internal campaign name (shown in the campaigns list, not to recipients). Defaults to a GHL-generated name."),
+      subject: import_zod60.z.string().optional().describe("Email subject line recipients see."),
+      fromName: import_zod60.z.string().optional().describe("Sender display name."),
+      fromEmail: import_zod60.z.string().optional().describe("Sender email address. Must be a verified sending address in the location."),
+      isPlainText: import_zod60.z.boolean().optional().describe("Send as plain text instead of HTML. Defaults to false."),
+      enableResendToUnopened: import_zod60.z.boolean().optional().describe("Auto-resend to contacts who didn't open. Defaults to false."),
+      hasUtmTracking: import_zod60.z.boolean().optional().describe("Append UTM tracking params to links. Defaults to false."),
+      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ templateId, name, subject, fromName, fromEmail, isPlainText, enableResendToUnopened, hasUtmTracking, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39615,11 +39792,11 @@ ${text2}`);
     }
   );
 }
-var import_zod59, SVC_BASE;
+var import_zod60, SVC_BASE;
 var init_email_campaigns = __esm({
   "src/tools/email-campaigns.ts"() {
     "use strict";
-    import_zod59 = require("zod");
+    import_zod60 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     SVC_BASE = "https://services.leadconnectorhq.com";
@@ -39646,7 +39823,7 @@ ${text2}`);
     "list_membership_offers",
     "List a location's membership offers and products in one call. Returns { products: [...], offers: [...] }. Products are courses/communities; offers are the access grants (what a contact gets enrolled in). Use the returned ids with membership trigger conditions like offer_access_granted / product_completed.",
     {
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39658,8 +39835,8 @@ ${text2}`);
     "list_membership_categories",
     "List all membership/course categories in a location. Categories group lessons inside a course/product. Use the returned ids with the category_completed / category_started trigger conditions. READ-ONLY.",
     {
-      limit: import_zod60.z.number().optional().describe("Max categories to return. Defaults to a large value (effectively all)."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      limit: import_zod61.z.number().optional().describe("Max categories to return. Defaults to a large value (effectively all)."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ limit, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39671,8 +39848,8 @@ ${text2}`);
     "list_membership_lessons",
     "List all membership/course lessons in a location. Use the returned ids with the lesson_completed / lesson_started trigger conditions. READ-ONLY.",
     {
-      limit: import_zod60.z.number().optional().describe("Max lessons to return. Defaults to a large value (effectively all)."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      limit: import_zod61.z.number().optional().describe("Max lessons to return. Defaults to a large value (effectively all)."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ limit, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39684,9 +39861,9 @@ ${text2}`);
     "create_course",
     "Create a membership course (a 'product') in a location. Creates the course shell with a title and description; add categories (create_membership_category) and lessons (create_membership_lesson) into it, and an offer (create_membership_offer) to grant access. Returns the new product, including its id. Requires Firebase auth. NOTE: GoHighLevel's membership API exposes no delete or update for this, so it cannot be removed or renamed through the product afterwards \u2014 only in the GHL UI. Create deliberately.",
     {
-      title: import_zod60.z.string().describe("Course title."),
-      description: import_zod60.z.string().optional().describe("Course description. Defaults to empty."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      title: import_zod61.z.string().describe("Course title."),
+      description: import_zod61.z.string().optional().describe("Course description. Defaults to empty."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ title: title2, description, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39698,13 +39875,13 @@ ${text2}`);
     "create_membership_category",
     "Create a category (module/section) inside a membership course. Categories group lessons. Needs the productId of the course (from create_course or list_membership_offers). Returns the new category, including its id (use it as categoryId when creating lessons). Requires Firebase auth. NOTE: GoHighLevel's membership API exposes no delete or update for this, so it cannot be removed or renamed through the product afterwards \u2014 only in the GHL UI. Create deliberately.",
     {
-      title: import_zod60.z.string().describe("Category title (e.g. 'Module 1')."),
-      productId: import_zod60.z.string().describe("The course/product id this category belongs to."),
-      description: import_zod60.z.string().optional().describe("Category description. Defaults to empty."),
-      visibility: import_zod60.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
-      sequenceNo: import_zod60.z.number().optional().describe("Display order within the course. Defaults to 0."),
-      dripDays: import_zod60.z.number().optional().describe("Days after enrollment before this category unlocks. Defaults to 0 (no drip)."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      title: import_zod61.z.string().describe("Category title (e.g. 'Module 1')."),
+      productId: import_zod61.z.string().describe("The course/product id this category belongs to."),
+      description: import_zod61.z.string().optional().describe("Category description. Defaults to empty."),
+      visibility: import_zod61.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
+      sequenceNo: import_zod61.z.number().optional().describe("Display order within the course. Defaults to 0."),
+      dripDays: import_zod61.z.number().optional().describe("Days after enrollment before this category unlocks. Defaults to 0 (no drip)."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ title: title2, productId, description, visibility, sequenceNo, dripDays, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39716,14 +39893,14 @@ ${text2}`);
     "create_membership_lesson",
     "Create a lesson (a 'post') inside a membership course category. Needs both the categoryId (from create_membership_category) and the productId of the course. Description is the lesson body as HTML. Returns the new lesson, including its id. Requires Firebase auth. NOTE: GoHighLevel's membership API exposes no delete or update for this, so it cannot be removed or renamed through the product afterwards \u2014 only in the GHL UI. Create deliberately.",
     {
-      title: import_zod60.z.string().describe("Lesson title."),
-      categoryId: import_zod60.z.string().describe("The category id this lesson belongs to (from create_membership_category)."),
-      productId: import_zod60.z.string().describe("The course/product id this lesson belongs to."),
-      description: import_zod60.z.string().optional().describe("Lesson body as HTML. Defaults to empty."),
-      contentType: import_zod60.z.enum(["video", "audio", "text", "pdf", "assignment"]).optional().describe("Lesson content type. Defaults to 'video'."),
-      visibility: import_zod60.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
-      sequenceNo: import_zod60.z.number().optional().describe("Display order within the category. Defaults to 0."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      title: import_zod61.z.string().describe("Lesson title."),
+      categoryId: import_zod61.z.string().describe("The category id this lesson belongs to (from create_membership_category)."),
+      productId: import_zod61.z.string().describe("The course/product id this lesson belongs to."),
+      description: import_zod61.z.string().optional().describe("Lesson body as HTML. Defaults to empty."),
+      contentType: import_zod61.z.enum(["video", "audio", "text", "pdf", "assignment"]).optional().describe("Lesson content type. Defaults to 'video'."),
+      visibility: import_zod61.z.enum(["published", "draft"]).optional().describe("'published' (default) or 'draft'."),
+      sequenceNo: import_zod61.z.number().optional().describe("Display order within the category. Defaults to 0."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ title: title2, categoryId, productId, description, contentType, visibility, sequenceNo, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39735,12 +39912,12 @@ ${text2}`);
     "create_membership_offer",
     "Create a membership offer \u2014 the access grant that enrolls contacts into one or more courses/products. Link it to course product ids. Defaults to a free offer; for paid, set type to 'recurring' or 'one_time' with an amount. Returns the new offer, including its id (referenced by the offer_access_granted trigger). Requires Firebase auth. NOTE: GoHighLevel's membership API exposes no delete or update for this, so it cannot be removed or renamed through the product afterwards \u2014 only in the GHL UI. Create deliberately.",
     {
-      title: import_zod60.z.string().describe("Offer title (shown at checkout / in the offer list)."),
-      productIds: import_zod60.z.array(import_zod60.z.string()).describe("Course/product ids this offer grants access to (from create_course or list_membership_offers)."),
-      type: import_zod60.z.enum(["free", "recurring", "one_time"]).optional().describe("Offer type. Defaults to 'free'."),
-      amount: import_zod60.z.number().optional().describe("Price for paid offers. Defaults to 0 (free)."),
-      currency: import_zod60.z.string().optional().describe("Currency code for paid offers. Defaults to 'USD'."),
-      locationId: import_zod60.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
+      title: import_zod61.z.string().describe("Offer title (shown at checkout / in the offer list)."),
+      productIds: import_zod61.z.array(import_zod61.z.string()).describe("Course/product ids this offer grants access to (from create_course or list_membership_offers)."),
+      type: import_zod61.z.enum(["free", "recurring", "one_time"]).optional().describe("Offer type. Defaults to 'free'."),
+      amount: import_zod61.z.number().optional().describe("Price for paid offers. Defaults to 0 (free)."),
+      currency: import_zod61.z.string().optional().describe("Currency code for paid offers. Defaults to 'USD'."),
+      locationId: import_zod61.z.string().optional().describe("Location ID. Falls back to the active builder client's location.")
     },
     async ({ title: title2, productIds, type, amount, currency, locationId: locationId2 }) => {
       const loc = locationId2 ?? client.locationId;
@@ -39807,11 +39984,11 @@ function buildOfferPayload(o) {
     currency: o.currency ?? "USD"
   };
 }
-var import_zod60, MEMBERSHIP_BASE2;
+var import_zod61, MEMBERSHIP_BASE2;
 var init_memberships = __esm({
   "src/tools/memberships.ts"() {
     "use strict";
-    import_zod60 = require("zod");
+    import_zod61 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     MEMBERSHIP_BASE2 = "https://backend.leadconnectorhq.com/membership";
@@ -39907,7 +40084,7 @@ function registerTemplateDeployerTools(server2, client) {
     "get_template_questionnaire",
     "Get the questionnaire for a specific template. Returns all the questions that need to be answered before deploying. Present these to the user one at a time in a conversational style.",
     {
-      templateFile: import_zod61.z.string().describe("Path to the template JSON file (from list_templates).")
+      templateFile: import_zod62.z.string().describe("Path to the template JSON file (from list_templates).")
     },
     async ({ templateFile }) => {
       try {
@@ -39940,11 +40117,11 @@ function registerTemplateDeployerTools(server2, client) {
     "deploy_template",
     "Deploy a template to set up a GHL sub-account. Creates tags, custom fields, pipelines with stages, calendars, workflows, and forms based on the template and the user's questionnaire answers. This is the main setup automation tool.",
     {
-      templateFile: import_zod61.z.string().describe("Path to the template JSON file."),
-      answers: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
-      locationId: import_zod61.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
-      dryRun: import_zod61.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false."),
-      overwriteBusinessInfo: import_zod61.z.boolean().optional().describe(
+      templateFile: import_zod62.z.string().describe("Path to the template JSON file."),
+      answers: import_zod62.z.record(import_zod62.z.string(), import_zod62.z.unknown()).describe("Questionnaire answers keyed by question ID (e.g. {business_name: 'My Clinic', business_phone: '+15551234567', ...})."),
+      locationId: import_zod62.z.string().optional().describe("Location ID to deploy to. Uses default if not specified."),
+      dryRun: import_zod62.z.boolean().optional().describe("If true, shows what would be created without actually creating anything. Defaults to false."),
+      overwriteBusinessInfo: import_zod62.z.boolean().optional().describe(
         "Allow this deploy to CHANGE business details the sub-account already has (legal name, address, city, state, postal code, country, phone, email, website). Off by default: those are the fields A2P / 10DLC brand registration is filed against, so changing them on a live account can put SMS registration at risk. Blank fields are always filled without needing this. Only pass true when you intend to correct the account's business record and know its A2P state."
       )
     },
@@ -40324,45 +40501,45 @@ ${errors.join("\n")}` : dryRun ? "\nNo errors!" : "\nNo errors \u2014 every item
     }
   );
 }
-var import_zod61, fs28, path27, TemplateSchema;
+var import_zod62, fs28, path27, TemplateSchema;
 var init_template_deployer = __esm({
   "src/tools/template-deployer.ts"() {
     "use strict";
-    import_zod61 = require("zod");
+    import_zod62 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     fs28 = __toESM(require("fs"));
     path27 = __toESM(require("path"));
     init_workflow_builder_client();
-    TemplateSchema = import_zod61.z.object({
-      templateName: import_zod61.z.string(),
-      templateVersion: import_zod61.z.string().optional(),
-      description: import_zod61.z.string().optional().default(""),
-      questionnaire: import_zod61.z.array(import_zod61.z.object({
-        id: import_zod61.z.string(),
-        question: import_zod61.z.string(),
-        type: import_zod61.z.string(),
-        required: import_zod61.z.boolean().optional(),
-        placeholder: import_zod61.z.string().optional()
+    TemplateSchema = import_zod62.z.object({
+      templateName: import_zod62.z.string(),
+      templateVersion: import_zod62.z.string().optional(),
+      description: import_zod62.z.string().optional().default(""),
+      questionnaire: import_zod62.z.array(import_zod62.z.object({
+        id: import_zod62.z.string(),
+        question: import_zod62.z.string(),
+        type: import_zod62.z.string(),
+        required: import_zod62.z.boolean().optional(),
+        placeholder: import_zod62.z.string().optional()
       })).optional().default([]),
-      location: import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown()).optional(),
-      tags: import_zod61.z.array(import_zod61.z.string()).optional(),
-      customFields: import_zod61.z.array(import_zod61.z.object({
-        name: import_zod61.z.string(),
-        dataType: import_zod61.z.string()
+      location: import_zod62.z.record(import_zod62.z.string(), import_zod62.z.unknown()).optional(),
+      tags: import_zod62.z.array(import_zod62.z.string()).optional(),
+      customFields: import_zod62.z.array(import_zod62.z.object({
+        name: import_zod62.z.string(),
+        dataType: import_zod62.z.string()
       })).optional(),
-      pipelines: import_zod61.z.array(import_zod61.z.object({
-        name: import_zod61.z.string(),
-        stages: import_zod61.z.array(import_zod61.z.object({ position: import_zod61.z.number(), name: import_zod61.z.string() }))
+      pipelines: import_zod62.z.array(import_zod62.z.object({
+        name: import_zod62.z.string(),
+        stages: import_zod62.z.array(import_zod62.z.object({ position: import_zod62.z.number(), name: import_zod62.z.string() }))
       })).optional(),
-      workflows: import_zod61.z.array(import_zod61.z.object({
-        name: import_zod61.z.string(),
-        condition: import_zod61.z.string().optional(),
-        actions: import_zod61.z.array(import_zod61.z.record(import_zod61.z.string(), import_zod61.z.unknown())).optional().default([])
+      workflows: import_zod62.z.array(import_zod62.z.object({
+        name: import_zod62.z.string(),
+        condition: import_zod62.z.string().optional(),
+        actions: import_zod62.z.array(import_zod62.z.record(import_zod62.z.string(), import_zod62.z.unknown())).optional().default([])
       })).optional(),
-      calendars: import_zod61.z.array(import_zod61.z.object({
-        name: import_zod61.z.string(),
-        description: import_zod61.z.string().optional()
+      calendars: import_zod62.z.array(import_zod62.z.object({
+        name: import_zod62.z.string(),
+        description: import_zod62.z.string().optional()
       })).optional()
     });
   }
@@ -40842,8 +41019,8 @@ function registerCheckupTools(server2, installedVersion, client, builderClient,
     "run_checkup",
     `The full GHL Command checkup \u2014 the answer to "am I using it all, and is it all still working?". Three sections: (1) CONNECTION, the same install checks as health_check; (2) WHAT STILL WORKS, one live read-only probe against every GHL capability family, which distinguishes "working but you own none" from "GoHighLevel changed something and this is broken"; (3) WHAT YOU ARE NOT USING YET, derived from what the account actually contains, each line carrying the exact sentence to paste back. Read-only and safe on live client accounts. Use format:'json' for a machine-readable report. Run it monthly, after a GHL update, or any time something feels off.`,
     {
-      locationId: import_zod62.z.string().optional().describe("Sub-account to check. Defaults to the active location."),
-      format: import_zod62.z.enum(["report", "json"]).optional().describe("'report' (default) is the plain-English checkup. 'json' returns the same data for scripts and support tickets.")
+      locationId: import_zod63.z.string().optional().describe("Sub-account to check. Defaults to the active location."),
+      format: import_zod63.z.enum(["report", "json"]).optional().describe("'report' (default) is the plain-English checkup. 'json' returns the same data for scripts and support tickets.")
     },
     async ({ locationId: locationId2, format }) => {
       let loc;
@@ -40878,11 +41055,11 @@ function registerCheckupTools(server2, installedVersion, client, builderClient,
     }
   );
 }
-var import_zod62, PROBES, BUILDER_PROBE_KEY, CONFIRM_ATTEMPTS, CONFIRM_DELAY_MS, BUILDER_AUTH_FAILURE, VERDICT_SYMBOL;
+var import_zod63, PROBES, BUILDER_PROBE_KEY, CONFIRM_ATTEMPTS, CONFIRM_DELAY_MS, BUILDER_AUTH_FAILURE, VERDICT_SYMBOL;
 var init_checkup = __esm({
   "src/tools/checkup.ts"() {
     "use strict";
-    import_zod62 = require("zod");
+    import_zod63 = require("zod");
     init_diagnostics();
     PROBES = [
       { key: "contacts", label: "Contacts", path: "/contacts/", params: { locationId: "{loc}", limit: 1 }, listKeys: ["contacts"] },
@@ -40966,7 +41143,7 @@ function registerUserGuideTools(server2) {
   server2.tool(
     "get_user_guide",
     "List what is in the GHL Command user guide \u2014 the library of plain-English guides with copy-paste prompts (count and report contacts, build a nurture sequence, audit workflows, and more). Ships with every install, free or paid. By default this only RETURNS the contents list and the guide's file path; it changes nothing on screen. Set open=true ONLY when the person has actually asked to see the guide, because opening it takes over their screen with a browser window in front of whatever they are doing.",
-    { open: import_zod63.z.boolean().optional().describe("Open the guide in the browser. Takes over the person's screen \u2014 only when they asked for it.") },
+    { open: import_zod64.z.boolean().optional().describe("Open the guide in the browser. Takes over the person's screen \u2014 only when they asked for it.") },
     async ({ open }) => {
       const guidePath = resolveGuidePath();
       if (!fs29.existsSync(guidePath)) {
@@ -41002,12 +41179,12 @@ ${guidePath}`;
     }
   );
 }
-var import_child_process6, import_zod63, fs29, path28;
+var import_child_process6, import_zod64, fs29, path28;
 var init_user_guide = __esm({
   "src/tools/user-guide.ts"() {
     "use strict";
     import_child_process6 = require("child_process");
-    import_zod63 = require("zod");
+    import_zod64 = require("zod");
     fs29 = __toESM(require("fs"));
     path28 = __toESM(require("path"));
   }
@@ -41045,30 +41222,30 @@ function registerAgencyProfileTools(server2) {
     "set_agency_profile",
     "Save or update YOUR agency's profile (see get_agency_profile). Send only the fields you are changing \u2014 anything you omit is left exactly as it was, so this is safe to call repeatedly to fill the profile in a few pieces. To CLEAR a field, pass null for it. The brand colour must be #rrggbb. Local file on this machine; never touches GoHighLevel.",
     {
-      agencyName: import_zod64.z.string().optional().describe("How the agency is named to clients."),
-      legalName: import_zod64.z.string().optional().describe("Registered entity, when it differs from the trading name (contracts, A2P)."),
-      accent: import_zod64.z.string().optional().describe("Brand colour as #rrggbb. Anything else is rejected rather than stored."),
-      logoUrl: import_zod64.z.string().optional(),
-      website: import_zod64.z.string().optional(),
-      sender: import_zod64.z.object({
-        fromName: import_zod64.z.string().optional(),
-        replyTo: import_zod64.z.string().optional(),
-        phone: import_zod64.z.string().optional()
+      agencyName: import_zod65.z.string().optional().describe("How the agency is named to clients."),
+      legalName: import_zod65.z.string().optional().describe("Registered entity, when it differs from the trading name (contracts, A2P)."),
+      accent: import_zod65.z.string().optional().describe("Brand colour as #rrggbb. Anything else is rejected rather than stored."),
+      logoUrl: import_zod65.z.string().optional(),
+      website: import_zod65.z.string().optional(),
+      sender: import_zod65.z.object({
+        fromName: import_zod65.z.string().optional(),
+        replyTo: import_zod65.z.string().optional(),
+        phone: import_zod65.z.string().optional()
       }).optional().describe("Who a client-facing message comes from."),
-      offers: import_zod64.z.array(OfferSchema).optional(),
-      pricing: import_zod64.z.object({
-        minMonthly: import_zod64.z.number().min(0).optional(),
-        minSetup: import_zod64.z.number().min(0).optional(),
-        currency: import_zod64.z.string().optional()
+      offers: import_zod65.z.array(OfferSchema).optional(),
+      pricing: import_zod65.z.object({
+        minMonthly: import_zod65.z.number().min(0).optional(),
+        minSetup: import_zod65.z.number().min(0).optional(),
+        currency: import_zod65.z.string().optional()
       }).optional(),
-      delivery: import_zod64.z.object({
-        sops: import_zod64.z.array(import_zod64.z.string()).optional(),
-        hoursToDeliverTarget: import_zod64.z.number().min(0).optional()
+      delivery: import_zod65.z.object({
+        sops: import_zod65.z.array(import_zod65.z.string()).optional(),
+        hoursToDeliverTarget: import_zod65.z.number().min(0).optional()
       }).optional(),
-      staff: import_zod64.z.array(StaffSchema).optional(),
-      defaults: import_zod64.z.object({
-        timezone: import_zod64.z.string().optional(),
-        industry: import_zod64.z.string().optional()
+      staff: import_zod65.z.array(StaffSchema).optional(),
+      defaults: import_zod65.z.object({
+        timezone: import_zod65.z.string().optional(),
+        industry: import_zod65.z.string().optional()
       }).optional()
     },
     async (args) => {
@@ -41079,24 +41256,24 @@ function registerAgencyProfileTools(server2) {
     }
   );
 }
-var import_zod64, OfferSchema, StaffSchema;
+var import_zod65, OfferSchema, StaffSchema;
 var init_agency_profile2 = __esm({
   "src/tools/agency-profile.ts"() {
     "use strict";
-    import_zod64 = require("zod");
+    import_zod65 = require("zod");
     init_tool_helpers();
     init_agency_profile();
-    OfferSchema = import_zod64.z.object({
-      name: import_zod64.z.string().describe("What you sell it as, in the words you use on a call."),
-      priceFloor: import_zod64.z.number().min(0).optional().describe("The number below which you don't take the work."),
-      cadence: import_zod64.z.enum(["one-time", "monthly"]).optional(),
-      notes: import_zod64.z.string().optional()
+    OfferSchema = import_zod65.z.object({
+      name: import_zod65.z.string().describe("What you sell it as, in the words you use on a call."),
+      priceFloor: import_zod65.z.number().min(0).optional().describe("The number below which you don't take the work."),
+      cadence: import_zod65.z.enum(["one-time", "monthly"]).optional(),
+      notes: import_zod65.z.string().optional()
     });
-    StaffSchema = import_zod64.z.object({
-      name: import_zod64.z.string(),
-      role: import_zod64.z.string().optional(),
-      email: import_zod64.z.string().optional(),
-      mayApprove: import_zod64.z.array(import_zod64.z.string()).optional().describe("Advisory list of what this person signs off on. The approval gates are enforced by the ritual, not by this field.")
+    StaffSchema = import_zod65.z.object({
+      name: import_zod65.z.string(),
+      role: import_zod65.z.string().optional(),
+      email: import_zod65.z.string().optional(),
+      mayApprove: import_zod65.z.array(import_zod65.z.string()).optional().describe("Advisory list of what this person signs off on. The approval gates are enforced by the ritual, not by this field.")
     });
   }
 });
@@ -42585,7 +42762,7 @@ function checkConversion(p, ctx, rendered) {
   {
     const ctaColours = primaries.map((c) => ({ c, ch: chroma(c.bg) })).filter((x) => x.ch !== null);
     const all = [...ctaColours.map((x) => ({ hex: hexOf(x.c.bg), ch: x.ch })), ...p.sections.map((s) => ({ hex: hexOf(s.bg), ch: chroma(s.bg) })).filter((x) => x.hex && x.ch !== null)];
-    const hottest = all.sort((a, z82) => z82.ch - a.ch)[0] ?? null;
+    const hottest = all.sort((a, z84) => z84.ch - a.ch)[0] ?? null;
     const bad = [];
     if (primaries.length === 0) bad.push("no primary CTA on the page for the hot colour to be on");
     if (!hottest) bad.push("no readable background colour on any CTA or section");
@@ -42612,7 +42789,7 @@ function checkConversion(p, ctx, rendered) {
     if (real.length > 1) bad.push(`primary CTAs split across ${real.length} destinations (${real.join(", ")})`);
     if (real.length === 0) bad.push("no primary CTA resolves to a form, calendar, tel: or checkout");
     if (p.docHeight > 5e3 && primaries.length < 5) bad.push(`${primaries.length} primary CTAs on a ${Math.round(p.docHeight)} px page (needs 5+)`);
-    const ys = primaries.map((c) => c.y).sort((a, z82) => a - z82);
+    const ys = primaries.map((c) => c.y).sort((a, z84) => a - z84);
     let maxGap = ys.length ? ys[0] : p.docHeight;
     for (let i = 1; i < ys.length; i++) maxGap = Math.max(maxGap, ys[i] - ys[i - 1]);
     if (ys.length) maxGap = Math.max(maxGap, p.docHeight - ys[ys.length - 1]);
@@ -43604,23 +43781,23 @@ function normaliseNull(v) {
   for (const k of ["firstBreakdown", "fix"]) if (o[k] === "null" || o[k] === "") o[k] = null;
   return o;
 }
-var import_zod65, COPY_STANDARD, Score, CopyGradeSchema;
+var import_zod66, COPY_STANDARD, Score, CopyGradeSchema;
 var init_copy_grade = __esm({
   "src/command-os/design/copy-grade.ts"() {
     "use strict";
-    import_zod65 = require("zod");
+    import_zod66 = require("zod");
     init_copy();
     COPY_STANDARD = copy_default;
-    Score = import_zod65.z.number().int().min(1).max(5);
-    CopyGradeSchema = import_zod65.z.object({
-      verdict: import_zod65.z.enum(["PASS", "FAIL"]),
-      icp: import_zod65.z.string(),
-      icpInferred: import_zod65.z.boolean().optional(),
-      scores: import_zod65.z.object({ attention: Score, resonance: Score, belief: Score, action: Score }),
-      firstBreakdown: import_zod65.z.enum(["attention", "resonance", "belief", "action"]).nullable(),
-      evidence: import_zod65.z.record(import_zod65.z.string(), import_zod65.z.string()).optional(),
-      fix: import_zod65.z.string().nullable(),
-      summary: import_zod65.z.string()
+    Score = import_zod66.z.number().int().min(1).max(5);
+    CopyGradeSchema = import_zod66.z.object({
+      verdict: import_zod66.z.enum(["PASS", "FAIL"]),
+      icp: import_zod66.z.string(),
+      icpInferred: import_zod66.z.boolean().optional(),
+      scores: import_zod66.z.object({ attention: Score, resonance: Score, belief: Score, action: Score }),
+      firstBreakdown: import_zod66.z.enum(["attention", "resonance", "belief", "action"]).nullable(),
+      evidence: import_zod66.z.record(import_zod66.z.string(), import_zod66.z.string()).optional(),
+      fix: import_zod66.z.string().nullable(),
+      summary: import_zod66.z.string()
     });
   }
 });
@@ -43713,7 +43890,9 @@ async function defaultVerify(file2, medium, brand, outDir, mode, headless = true
 }
 async function runDesign(opts) {
   const dna = resolveBrand(opts.brand);
-  const brief = DesignBriefSchema.parse({ schemaVersion: 1, brandSlug: dna.slug, ...opts.brief });
+  const checkedBrief = DesignBriefSchema.safeParse({ schemaVersion: 1, brandSlug: dna.slug, ...opts.brief });
+  if (!checkedBrief.success) throw new Error(designValidationMessage(checkedBrief.error));
+  const brief = checkedBrief.data;
   const medium = brief.medium;
   const outDir = (0, import_node_path7.resolve)(opts.outDir);
   (0, import_node_fs7.mkdirSync)(outDir, { recursive: true });
@@ -43807,6 +43986,7 @@ var init_run = __esm({
     init_verify();
     init_looks();
     init_store();
+    init_brief_validation();
     init_schema();
     DEFAULT_MODEL = "opus";
     FIRST = `You have no tools in this session. Write the complete file now and reply with ONLY the HTML, in one \`\`\`html fenced block, nothing before or after it. Do not describe it; do not ask; output the file.`;
@@ -43820,13 +44000,13 @@ function registerDesignStudioTools(server2) {
     "extract_brand",
     "Read a website's brand and store it on this machine: six colours, two faces, radius, logo, headline voice, each with its source and a confidence. Asks nothing of any account. Static read first; add useBrowser:true for a rendered pass in the automation browser (needed for script-built sites); a Firecrawl key, if you have one, is used as a fourth source. State your rights to the site once; it is recorded, not checked.",
     {
-      url: import_zod66.z.string().url().describe("The site to read, e.g. https://example-clinic.com"),
-      rights: import_zod66.z.enum(RIGHTS).describe("own \xB7 client-authorized \xB7 written-permission \xB7 none. Recorded on the brand; with 'none' the logo is still stored for reference but flagged."),
-      name: import_zod66.z.string().optional().describe("Brand name; defaults to the page title."),
-      slug: import_zod66.z.string().optional().describe("Folder name for the brand; defaults from the name."),
-      useBrowser: import_zod66.z.boolean().optional().describe("Also render the page in the automation browser for computed colours, the real display face and a screenshot. Automatic when the static read looks like a script-built shell."),
-      firecrawlKey: import_zod66.z.string().optional().describe("Optional. Uses Firecrawl's branding format as an extra source. Never stored."),
-      overwrite: import_zod66.z.boolean().optional().describe("Replace an existing brand with this slug. Default false: refuses rather than clobbers.")
+      url: import_zod67.z.string().url().describe("The site to read, e.g. https://example-clinic.com"),
+      rights: import_zod67.z.enum(RIGHTS).describe("own \xB7 client-authorized \xB7 written-permission \xB7 none. Recorded on the brand; with 'none' the logo is still stored for reference but flagged."),
+      name: import_zod67.z.string().optional().describe("Brand name; defaults to the page title."),
+      slug: import_zod67.z.string().optional().describe("Folder name for the brand; defaults from the name."),
+      useBrowser: import_zod67.z.boolean().optional().describe("Also render the page in the automation browser for computed colours, the real display face and a screenshot. Automatic when the static read looks like a script-built shell."),
+      firecrawlKey: import_zod67.z.string().optional().describe("Optional. Uses Firecrawl's branding format as an extra source. Never stored."),
+      overwrite: import_zod67.z.boolean().optional().describe("Replace an existing brand with this slug. Default false: refuses rather than clobbers.")
     },
     async (a) => {
       const raw = await extractStatic(a.url);
@@ -43859,9 +44039,9 @@ function registerDesignStudioTools(server2) {
     "import_reference_look",
     `Fetch one reference look (Apple, Notion, Stripe, Linear and about seventy more) from ${REFERENCE_SOURCE.repo} at a pinned commit onto this machine, as a starting palette: colours, faces, radius, tone. Never the reference brand's logo, never its mark-usage rules, and the pages you make must not name it. Then pull the client's own logo and accent over it with set_brand.`,
     {
-      look: import_zod66.z.string().describe("The reference slug, e.g. apple, notion, stripe, linear.app. list_brands shows them all."),
-      as: import_zod66.z.string().optional().describe("Store under this slug instead (e.g. 'northside-clinic-start'). Default: 'look-<look>'."),
-      overwrite: import_zod66.z.boolean().optional()
+      look: import_zod67.z.string().describe("The reference slug, e.g. apple, notion, stripe, linear.app. list_brands shows them all."),
+      as: import_zod67.z.string().optional().describe("Store under this slug instead (e.g. 'northside-clinic-start'). Default: 'look-<look>'."),
+      overwrite: import_zod67.z.boolean().optional()
     },
     async (a) => {
       const entry = listReferenceLooks().find((e) => e.slug === a.look);
@@ -43891,7 +44071,7 @@ function registerDesignStudioTools(server2) {
     server2,
     "get_brand",
     "Read one brand in full: colours with OKLCH twins and contrast-corrected text shades, faces and what renders, shape, logo, voice, and the provenance of every value. House looks (calm-clinic, bold-local, quiet-luxury, night-studio, warm-practice, civic-clear) read without being stored first.",
-    { slug: import_zod66.z.string().describe("A stored brand's slug or a house look's slug.") },
+    { slug: import_zod67.z.string().describe("A stored brand's slug or a house look's slug.") },
     async ({ slug: slug3 }) => {
       const house = houseLooks().find((d) => d.slug === slug3);
       const dna = house ?? readBrand(slugify(slug3));
@@ -43903,22 +44083,22 @@ function registerDesignStudioTools(server2) {
     "set_brand",
     "Change values on a stored brand, or copy a house look into a stored brand. Send only what changes; every change is recorded in the brand's provenance with who and when. Colours are #rrggbb; faces are family names (a licensed face is kept and its Google fallback recorded).",
     {
-      slug: import_zod66.z.string().describe("The brand to change, or a house-look slug to copy."),
-      as: import_zod66.z.string().optional().describe("When copying a house look: the new slug to store it under."),
-      name: import_zod66.z.string().optional(),
-      accent: import_zod66.z.string().optional(),
-      bg: import_zod66.z.string().optional(),
-      fg: import_zod66.z.string().optional(),
-      muted: import_zod66.z.string().optional(),
-      border: import_zod66.z.string().optional(),
-      surface: import_zod66.z.string().optional(),
-      displayFont: import_zod66.z.string().optional(),
-      bodyFont: import_zod66.z.string().optional(),
-      radiusMd: import_zod66.z.number().min(0).max(64).optional(),
-      logoSvg: import_zod66.z.string().optional().describe("Inline SVG for the client's own logo; replaces the stored one."),
-      tone: import_zod66.z.string().optional(),
-      audience: import_zod66.z.string().optional(),
-      changedBy: import_zod66.z.string().optional().describe("Who is making the change; goes into provenance.")
+      slug: import_zod67.z.string().describe("The brand to change, or a house-look slug to copy."),
+      as: import_zod67.z.string().optional().describe("When copying a house look: the new slug to store it under."),
+      name: import_zod67.z.string().optional(),
+      accent: import_zod67.z.string().optional(),
+      bg: import_zod67.z.string().optional(),
+      fg: import_zod67.z.string().optional(),
+      muted: import_zod67.z.string().optional(),
+      border: import_zod67.z.string().optional(),
+      surface: import_zod67.z.string().optional(),
+      displayFont: import_zod67.z.string().optional(),
+      bodyFont: import_zod67.z.string().optional(),
+      radiusMd: import_zod67.z.number().min(0).max(64).optional(),
+      logoSvg: import_zod67.z.string().optional().describe("Inline SVG for the client's own logo; replaces the stored one."),
+      tone: import_zod67.z.string().optional(),
+      audience: import_zod67.z.string().optional(),
+      changedBy: import_zod67.z.string().optional().describe("Who is making the change; goes into provenance.")
     },
     async (a) => {
       const house = houseLooks().find((d2) => d2.slug === a.slug);
@@ -43985,19 +44165,19 @@ function registerDesignStudioTools(server2) {
     "compose_design_brief",
     "The pack your own Claude writes from: brand tokens ready to paste, the rules it will be graded on with thresholds, the output contract (one self-contained file, the data markers the verifier reads), the sameness tells as banned, and the file name. Calls no model. Write the file, then lint_design_contract, then verify_design.",
     {
-      medium: import_zod66.z.enum(MEDIA).describe("deck (16:9 slides) \xB7 site (one responsive page) \xB7 report (a branded document)"),
-      brandSlug: import_zod66.z.string().describe("A stored brand or a house look."),
-      headline: import_zod66.z.string().describe("The one-line message."),
-      points: import_zod66.z.array(import_zod66.z.string()).max(12).describe("Deck: 3\u20135 points. Site: the sections in order. Report: the section titles."),
-      audience: import_zod66.z.string().optional(),
-      job: import_zod66.z.string().optional().describe("Site: the ONE thing a visitor should do."),
-      ctaLabel: import_zod66.z.string().optional(),
-      proof: import_zod66.z.string().optional().describe("One line of proof for the hero."),
-      mode: import_zod66.z.enum(["presenter", "document"]).optional().describe("Deck only. Default presenter."),
-      ratio: import_zod66.z.number().min(1.1).max(1.7).optional().describe("Type scale ratio. Default 1.333."),
-      theme: import_zod66.z.enum(["light", "dark", "both"]).optional().describe("Default both."),
-      logo: import_zod66.z.enum(["bottom-left", "bottom-right", "top-left", "omit"]).optional().describe("Deck logo placement. Default bottom-left."),
-      slides: import_zod66.z.number().int().min(3).max(24).optional()
+      medium: import_zod67.z.enum(MEDIA).describe("deck (16:9 slides) \xB7 site (one responsive page) \xB7 report (a branded document)"),
+      brandSlug: import_zod67.z.string().describe("A stored brand or a house look."),
+      headline: import_zod67.z.string().describe("The one-line message."),
+      points: import_zod67.z.array(import_zod67.z.string()).max(12).describe("Deck: 3\u20135 points. Site: the sections in order. Report: the section titles."),
+      audience: import_zod67.z.string().optional(),
+      job: import_zod67.z.string().optional().describe("Site: the ONE thing a visitor should do."),
+      ctaLabel: import_zod67.z.string().optional(),
+      proof: import_zod67.z.string().optional().describe("One line of proof for the hero."),
+      mode: import_zod67.z.enum(["presenter", "document"]).optional().describe("Deck only. Default presenter."),
+      ratio: import_zod67.z.number().min(1.1).max(1.7).optional().describe("Type scale ratio. Default 1.333."),
+      theme: import_zod67.z.enum(["light", "dark", "both"]).optional().describe("Default both."),
+      logo: import_zod67.z.enum(["bottom-left", "bottom-right", "top-left", "omit"]).optional().describe("Deck logo placement. Default bottom-left."),
+      slides: import_zod67.z.number().int().min(3).max(24).optional()
     },
     async (a) => {
       const dna = houseLooks().find((d) => d.slug === a.brandSlug) ?? readBrand(slugify(a.brandSlug));
@@ -44016,7 +44196,7 @@ function registerDesignStudioTools(server2) {
     server2,
     "lint_design_contract",
     "Check a written HTML file honours the output contract before grading: section and role markers present and consistent, no outside scripts, one h1 on a page, every image described. Deterministic; no browser. A file that fails this is not graded by verify_design.",
-    { file: import_zod66.z.string().describe("Path to the .html file."), medium: import_zod66.z.enum(MEDIA) },
+    { file: import_zod67.z.string().describe("Path to the .html file."), medium: import_zod67.z.enum(MEDIA) },
     async ({ file: file2, medium }) => {
       const abs = path30.resolve(file2);
       if (!fs31.existsSync(abs)) throw new Error(`No file at ${abs}.`);
@@ -44029,14 +44209,14 @@ function registerDesignStudioTools(server2) {
     "verify_design",
     "Render a deck or page (a local .html or a published URL) in the automation browser and measure it against the design rules and the sameness tells. Every rule on its own line: measured, proxy or judgment call, with the value and the evidence. Writes verification.json, verification.html and screenshots to outDir. PASS means zero failed measured rules and NOTHING MORE: every rule measures craft \u2014 type, spacing, colour, contrast, structure, performance and the machine-made tells \u2014 and none of them measures whether the page persuades anyone. A page can pass every rule and still be boring and unsellable. Never report a pass as a quality claim; judge the writing separately. GoHighLevel pages: pass placement:'ghl' to grade on the builder subset.",
     {
-      target: import_zod66.z.string().describe("A local .html path or an http(s) URL."),
-      medium: import_zod66.z.enum(MEDIA),
-      brandSlug: import_zod66.z.string().optional().describe("The brand to measure against (accent share, logo, faces)."),
-      outDir: import_zod66.z.string().optional().describe("Where to write the report. Default: <file dir>/verify-<name>/ or ./verify-<host>/ for URLs."),
-      placement: import_zod66.z.enum(["html", "ghl"]).optional(),
-      mode: import_zod66.z.enum(["presenter", "document"]).optional(),
-      ratio: import_zod66.z.number().optional(),
-      logo: import_zod66.z.enum(["keep", "omit"]).optional()
+      target: import_zod67.z.string().describe("A local .html path or an http(s) URL."),
+      medium: import_zod67.z.enum(MEDIA),
+      brandSlug: import_zod67.z.string().optional().describe("The brand to measure against (accent share, logo, faces)."),
+      outDir: import_zod67.z.string().optional().describe("Where to write the report. Default: <file dir>/verify-<name>/ or ./verify-<host>/ for URLs."),
+      placement: import_zod67.z.enum(["html", "ghl"]).optional(),
+      mode: import_zod67.z.enum(["presenter", "document"]).optional(),
+      ratio: import_zod67.z.number().optional(),
+      logo: import_zod67.z.enum(["keep", "omit"]).optional()
     },
     async (a) => {
       const brand = a.brandSlug ? houseLooks().find((d) => d.slug === a.brandSlug) ?? readBrand(slugify(a.brandSlug)) : void 0;
@@ -44067,18 +44247,18 @@ function registerDesignStudioTools(server2) {
     "check_page_theme",
     "After Page Studio has saved a GoHighLevel page with a brand_to_theme theme, read the page back and prove the brand landed: each of the six slots is measured in the data GoHighLevel actually saved, and the donor template's own colour or face must be GONE \u2014 a half-finished swap is the failure this catches, and it is invisible in a preview snapshot. Also confirms the page's preview address by fetching it, so verify_design has a real URL to grade. Reads only: no key, no account API, nothing written.",
     {
-      pageDataDownloadUrl: import_zod66.z.string().url().optional().describe("The pageDataDownloadUrl from get_page_full. The page data is fetched here so the whole envelope never has to pass through the conversation."),
-      file: import_zod66.z.string().optional().describe("Alternative to the URL: a local .json file holding the saved page data."),
-      brandSlug: import_zod66.z.string().optional().describe("The stored brand whose theme was sent. Defaults to comparing against the theme passed in `theme`."),
-      theme: import_zod66.z.object({
-        primary: import_zod66.z.string().optional(),
-        primarySoft: import_zod66.z.string().optional(),
-        surface: import_zod66.z.string().optional(),
-        textDark: import_zod66.z.string().optional(),
-        headingFont: import_zod66.z.string().optional(),
-        bodyFont: import_zod66.z.string().optional()
+      pageDataDownloadUrl: import_zod67.z.string().url().optional().describe("The pageDataDownloadUrl from get_page_full. The page data is fetched here so the whole envelope never has to pass through the conversation."),
+      file: import_zod67.z.string().optional().describe("Alternative to the URL: a local .json file holding the saved page data."),
+      brandSlug: import_zod67.z.string().optional().describe("The stored brand whose theme was sent. Defaults to comparing against the theme passed in `theme`."),
+      theme: import_zod67.z.object({
+        primary: import_zod67.z.string().optional(),
+        primarySoft: import_zod67.z.string().optional(),
+        surface: import_zod67.z.string().optional(),
+        textDark: import_zod67.z.string().optional(),
+        headingFont: import_zod67.z.string().optional(),
+        bodyFont: import_zod67.z.string().optional()
       }).optional().describe("The theme that was sent, if it was not brand_to_theme's output for brandSlug."),
-      pageId: import_zod66.z.string().optional().describe("The page id. With it, the preview address is derived and FETCHED once, and reported only if it answered.")
+      pageId: import_zod67.z.string().optional().describe("The page id. With it, the preview address is derived and FETCHED once, and reported only if it answered.")
     },
     async (a) => {
       if (!a.pageDataDownloadUrl && !a.file) throw new Error("Pass pageDataDownloadUrl (from get_page_full) or file.");
@@ -44118,10 +44298,10 @@ function registerDesignStudioTools(server2) {
     "grade_copy",
     "Grade whether a page or deck would actually persuade the reader it is for \u2014 the half the design rules cannot reach. Scores the four sequential jobs persuasive copy must do, in reading order (Attention, Resonance, Belief, Action), names the FIRST place the right prospect falls off, and gives a concrete rewrite of that one thing. This is a JUDGEMENT made by a model on YOUR OWN Claude subscription, never our key, and it is deliberately separate from verify_design: a page is ready when both pass, and a design pass on its own says nothing about whether anyone would buy.",
     {
-      file: import_zod66.z.string().optional().describe("Path to the .html file to grade."),
-      text: import_zod66.z.string().optional().describe("Alternative to file: the copy itself."),
-      icp: import_zod66.z.string().optional().describe("Who the page is for, in one line, e.g. 'agency owners drowning in client onboarding'. Without it the grader infers a reader and says so \u2014 and grading against the wrong reader is the commonest way this comes back wrong."),
-      model: import_zod66.z.string().optional().describe("Which engine grades it. Defaults to the runner's default.")
+      file: import_zod67.z.string().optional().describe("Path to the .html file to grade."),
+      text: import_zod67.z.string().optional().describe("Alternative to file: the copy itself."),
+      icp: import_zod67.z.string().optional().describe("Who the page is for, in one line, e.g. 'agency owners drowning in client onboarding'. Without it the grader infers a reader and says so \u2014 and grading against the wrong reader is the commonest way this comes back wrong."),
+      model: import_zod67.z.string().optional().describe("Which engine grades it. Defaults to the runner's default.")
     },
     async (a) => {
       if (!a.file && !a.text) throw new Error("Pass file or text.");
@@ -44156,7 +44336,7 @@ function registerDesignStudioTools(server2) {
     server2,
     "brand_to_theme",
     "The six-slot theme Page Studio's compose_page / compose_website accept, derived from a stored brand, with the warnings about what the donor cannot carry. A re-skin of the donor template, not a port of the design system. Pass the theme straight through as compose_page's `theme`.",
-    { slug: import_zod66.z.string() },
+    { slug: import_zod67.z.string() },
     async ({ slug: slug3 }) => {
       const d = houseLooks().find((x) => x.slug === slug3) ?? readBrand(slugify(slug3));
       const { warnings, ...theme } = d.pageStudioTheme;
@@ -44164,11 +44344,11 @@ function registerDesignStudioTools(server2) {
     }
   );
 }
-var import_zod66, fs31, path30, summarise2;
+var import_zod67, fs31, path30, summarise2;
 var init_design_studio = __esm({
   "src/tools/design-studio.ts"() {
     "use strict";
-    import_zod66 = require("zod");
+    import_zod67 = require("zod");
     fs31 = __toESM(require("node:fs"));
     path30 = __toESM(require("node:path"));
     init_tool_helpers();
@@ -44992,9 +45172,9 @@ function registerConnectorTools(server2) {
     "connect_system",
     "Store a connector's credentials on THIS machine so that system can be read. The key is written next to your GoHighLevel credentials, readable only by you, and is never sent anywhere, never returned by any tool, and never written to a log. Today: Stripe, which answers who owes you money, what each person or company pays you and when they renew.",
     {
-      system: import_zod67.z.enum(["stripe"]).describe("The system to connect. Stripe is the one that is built."),
-      key: import_zod67.z.string().min(8).describe("A Stripe RESTRICTED key with read access to subscriptions, invoices and customers. A restricted key is deliberate: nothing here writes, so nothing here needs a key that can."),
-      label: import_zod67.z.string().optional().describe("Which account this is, so you can tell two apart later.")
+      system: import_zod68.z.enum(["stripe"]).describe("The system to connect. Stripe is the one that is built."),
+      key: import_zod68.z.string().min(8).describe("A Stripe RESTRICTED key with read access to subscriptions, invoices and customers. A restricted key is deliberate: nothing here writes, so nothing here needs a key that can."),
+      label: import_zod68.z.string().optional().describe("Which account this is, so you can tell two apart later.")
     },
     async ({ system, key, label }) => {
       const h = await health(stripeFetcher(key));
@@ -45048,7 +45228,7 @@ function registerConnectorTools(server2) {
     server2,
     "disconnect_system",
     "Remove a connector's credentials from this machine. The data already written into your income records stays; only the ability to read that system again is removed.",
-    { system: import_zod67.z.enum(["stripe"]) },
+    { system: import_zod68.z.enum(["stripe"]) },
     async ({ system }) => ({
       removed: disconnect(system),
       note: "Anything already written into your income records is untouched."
@@ -45059,10 +45239,10 @@ function registerConnectorTools(server2) {
     "sync_stripe",
     "Read your Stripe and fill in what your records do not know: what each person or company pays you, when they renew, and who owes you money. Handles both shapes of income \u2014 clients whose GoHighLevel accounts you run (confirmLinks) and people who simply pay you, like software subscribers and event fees (recordAsIncome). DRY RUN BY DEFAULT \u2014 it shows you every change before making any. A client whose Stripe customer cannot be matched to one of your clients is reported, never guessed at.",
     {
-      apply: import_zod67.z.boolean().optional().describe("Write the changes into your income records. Defaults to false: look first."),
-      confirmLinks: import_zod67.z.array(import_zod67.z.object({
-        stripeCustomerId: import_zod67.z.string(),
-        clientKey: import_zod67.z.string().describe("The client in your records this Stripe customer is.")
+      apply: import_zod68.z.boolean().optional().describe("Write the changes into your income records. Defaults to false: look first."),
+      confirmLinks: import_zod68.z.array(import_zod68.z.object({
+        stripeCustomerId: import_zod68.z.string(),
+        clientKey: import_zod68.z.string().describe("The client in your records this Stripe customer is.")
       })).optional().describe("Matches you are confirming \u2014 a Stripe customer that IS one of the clients already in your records. An email match alone is never enough to move money against a client's name."),
       // ADDED 2026-09-01, and it is the half that was missing. confirmLinks can
       // only point a Stripe customer at a record that already exists. On Jerry's
@@ -45070,10 +45250,10 @@ function registerConnectorTools(server2) {
       // buy software and the record only held GoHighLevel accounts. There was no
       // move that turned "Stripe knows Dane pays $97" into a record — so the
       // brief kept saying "no client has a commercial record yet" forever.
-      recordAsIncome: import_zod67.z.array(import_zod67.z.object({
-        stripeCustomerId: import_zod67.z.string(),
-        kind: import_zod67.z.enum(["software", "other"]).describe("'software' for a licence or subscription, 'other' for an event fee, revenue share or training. Use confirmLinks instead if this customer is a client whose GoHighLevel account you run."),
-        clientName: import_zod67.z.string().optional().describe("What to call them. Defaults to the name on the Stripe customer.")
+      recordAsIncome: import_zod68.z.array(import_zod68.z.object({
+        stripeCustomerId: import_zod68.z.string(),
+        kind: import_zod68.z.enum(["software", "other"]).describe("'software' for a licence or subscription, 'other' for an event fee, revenue share or training. Use confirmLinks instead if this customer is a client whose GoHighLevel account you run."),
+        clientName: import_zod68.z.string().optional().describe("What to call them. Defaults to the name on the Stripe customer.")
       })).optional().describe("Stripe customers that are income in their own right, with no GoHighLevel account. Creates a record keyed by the Stripe customer id and fills in what they pay and when they renew, from Stripe.")
     },
     async ({ apply, confirmLinks, recordAsIncome }) => {
@@ -45233,11 +45413,11 @@ function registerConnectorTools(server2) {
     }
   );
 }
-var import_zod67;
+var import_zod68;
 var init_connectors = __esm({
   "src/tools/connectors.ts"() {
     "use strict";
-    import_zod67 = require("zod");
+    import_zod68 = require("zod");
     init_tool_helpers();
     init_store3();
     init_stripe();
@@ -45297,22 +45477,22 @@ function removeCalendarSecret() {
     throw new Error("The Google Calendar sign-in could not be removed from this machine.");
   }
 }
-var fs33, path32, import_node_crypto9, import_zod68, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
+var fs33, path32, import_node_crypto9, import_zod69, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
 var init_google_calendar_store = __esm({
   "src/command-os/connectors/google-calendar-store.ts"() {
     "use strict";
     fs33 = __toESM(require("node:fs"));
     path32 = __toESM(require("node:path"));
     import_node_crypto9 = require("node:crypto");
-    import_zod68 = require("zod");
+    import_zod69 = require("zod");
     init_credentials_store();
     CALENDAR_SCOPE = "https://www.googleapis.com/auth/calendar.readonly";
-    SecretSchema = import_zod68.z.object({
-      clientId: import_zod68.z.string().min(1),
-      clientSecret: import_zod68.z.string().min(1),
-      refreshToken: import_zod68.z.string().min(8),
-      scope: import_zod68.z.literal(CALENDAR_SCOPE),
-      connectedAt: import_zod68.z.string()
+    SecretSchema = import_zod69.z.object({
+      clientId: import_zod69.z.string().min(1),
+      clientSecret: import_zod69.z.string().min(1),
+      refreshToken: import_zod69.z.string().min(8),
+      scope: import_zod69.z.literal(CALENDAR_SCOPE),
+      connectedAt: import_zod69.z.string()
     });
     googleCalendarPath = () => path32.join(appDataDir(), "google-calendar.json");
   }
@@ -45425,7 +45605,7 @@ function createGoogleCalendar(deps = {}) {
       for (const [k, v] of Object.entries(query)) url.searchParams.set(k, v);
       if (pageToken) url.searchParams.set("pageToken", pageToken);
       const data = parsed(
-        import_zod69.z.object({ items: import_zod69.z.array(item).optional(), nextPageToken: import_zod69.z.string().optional(), kind: import_zod69.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path39.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
+        import_zod70.z.object({ items: import_zod70.z.array(item).optional(), nextPageToken: import_zod70.z.string().optional(), kind: import_zod70.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path39.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
         await request(url.href, { headers: { Authorization: `Bearer ${access}` } })
       );
       result.push(...data.items ?? []);
@@ -45628,14 +45808,14 @@ function createGoogleCalendar(deps = {}) {
     close: clearPending2
   };
 }
-var import_node_http, import_node_crypto10, import_node_child_process5, import_zod69, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema2, eventSchema;
+var import_node_http, import_node_crypto10, import_node_child_process5, import_zod70, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema2, eventSchema;
 var init_google_calendar = __esm({
   "src/command-os/connectors/google-calendar.ts"() {
     "use strict";
     import_node_http = require("node:http");
     import_node_crypto10 = require("node:crypto");
     import_node_child_process5 = require("node:child_process");
-    import_zod69 = require("zod");
+    import_zod70 = require("zod");
     init_credentials_store();
     init_agency_profile();
     init_account_read_retry();
@@ -45643,22 +45823,22 @@ var init_google_calendar = __esm({
     TOKEN_URL = "https://oauth2.googleapis.com/token";
     REVOKE_URL = "https://oauth2.googleapis.com/revoke";
     API = "https://www.googleapis.com/calendar/v3";
-    tokenSchema = import_zod69.z.object({ access_token: import_zod69.z.string().min(1), refresh_token: import_zod69.z.string().optional(), scope: import_zod69.z.string().optional() });
-    calendarSchema2 = import_zod69.z.object({
-      id: import_zod69.z.string().min(1),
-      summary: import_zod69.z.string().optional(),
-      summaryOverride: import_zod69.z.string().optional(),
-      primary: import_zod69.z.boolean().optional(),
-      timeZone: import_zod69.z.string().optional(),
-      accessRole: import_zod69.z.enum(["none", "freeBusyReader", "reader", "writer", "owner"]).optional()
+    tokenSchema = import_zod70.z.object({ access_token: import_zod70.z.string().min(1), refresh_token: import_zod70.z.string().optional(), scope: import_zod70.z.string().optional() });
+    calendarSchema2 = import_zod70.z.object({
+      id: import_zod70.z.string().min(1),
+      summary: import_zod70.z.string().optional(),
+      summaryOverride: import_zod70.z.string().optional(),
+      primary: import_zod70.z.boolean().optional(),
+      timeZone: import_zod70.z.string().optional(),
+      accessRole: import_zod70.z.enum(["none", "freeBusyReader", "reader", "writer", "owner"]).optional()
     });
-    eventSchema = import_zod69.z.object({
-      summary: import_zod69.z.string().optional(),
-      status: import_zod69.z.string().optional(),
-      start: import_zod69.z.object({ date: import_zod69.z.string().optional(), dateTime: import_zod69.z.string().optional() }),
-      end: import_zod69.z.object({ date: import_zod69.z.string().optional(), dateTime: import_zod69.z.string().optional() }),
-      attendees: import_zod69.z.array(import_zod69.z.object({ email: import_zod69.z.string().optional(), displayName: import_zod69.z.string().optional(), self: import_zod69.z.boolean().optional() })).optional(),
-      attendeesOmitted: import_zod69.z.boolean().optional()
+    eventSchema = import_zod70.z.object({
+      summary: import_zod70.z.string().optional(),
+      status: import_zod70.z.string().optional(),
+      start: import_zod70.z.object({ date: import_zod70.z.string().optional(), dateTime: import_zod70.z.string().optional() }),
+      end: import_zod70.z.object({ date: import_zod70.z.string().optional(), dateTime: import_zod70.z.string().optional() }),
+      attendees: import_zod70.z.array(import_zod70.z.object({ email: import_zod70.z.string().optional(), displayName: import_zod70.z.string().optional(), self: import_zod70.z.boolean().optional() })).optional(),
+      attendeesOmitted: import_zod70.z.boolean().optional()
     });
   }
 });
@@ -45669,7 +45849,7 @@ function registerGoogleCalendarTools(server2, calendar = createGoogleCalendar())
     server2,
     "connect_google_calendar",
     "Connect your own Google Calendar with read-only access. The first run opens Google sign-in and saves nothing. The second run finishes after reading your calendars. Use status when asked what is connected. Use disconnect to remove the local sign-in and revoke it with Google. No tool shows a secret.",
-    { action: import_zod70.z.enum(["start", "finish", "status", "disconnect"]).optional().describe("Use start to open sign-in. Use finish after browser sign-in. Use status to show only the last four characters. Use disconnect to remove and revoke access.") },
+    { action: import_zod71.z.enum(["start", "finish", "status", "disconnect"]).optional().describe("Use start to open sign-in. Use finish after browser sign-in. Use status to show only the last four characters. Use disconnect to remove and revoke access.") },
     async ({ action }) => calendar.connect(action)
   );
   safeTool(
@@ -45677,18 +45857,18 @@ function registerGoogleCalendarTools(server2, calendar = createGoogleCalendar())
     "read_my_calendar",
     "Read today or the week ahead from your own Google Calendar. Each entry shows its time in your timezone and the other people attending. All-day entries say all day. An empty window says so. Your primary calendar is read unless you name another one. For a morning brief, show this as a separate personal calendar section and never count these entries as client appointments.",
     {
-      days: import_zod70.z.number().int().min(1).max(31).optional().describe("Use 1 for today. Use 7 for the week ahead. Use 3 for the next three days."),
-      calendar: import_zod70.z.string().min(1).optional().describe("The calendar name or identifier. Defaults to your primary calendar."),
-      timezone: import_zod70.z.string().min(1).optional().describe("Your IANA timezone, such as America/Phoenix. Defaults to your agency timezone, then your primary Google Calendar timezone, then this machine's timezone.")
+      days: import_zod71.z.number().int().min(1).max(31).optional().describe("Use 1 for today. Use 7 for the week ahead. Use 3 for the next three days."),
+      calendar: import_zod71.z.string().min(1).optional().describe("The calendar name or identifier. Defaults to your primary calendar."),
+      timezone: import_zod71.z.string().min(1).optional().describe("Your IANA timezone, such as America/Phoenix. Defaults to your agency timezone, then your primary Google Calendar timezone, then this machine's timezone.")
     },
     async (options) => calendar.read(options)
   );
 }
-var import_zod70;
+var import_zod71;
 var init_google_calendar2 = __esm({
   "src/tools/google-calendar.ts"() {
     "use strict";
-    import_zod70 = require("zod");
+    import_zod71 = require("zod");
     init_tool_helpers();
     init_google_calendar();
   }
@@ -45917,12 +46097,12 @@ function registerDeliveryAuditTools(server2) {
     "audit_my_delivery",
     "Audit your OWN agency: how many hours a month each recurring job costs you, ranked worst first, with the ones that can already be taken off you named. Call it with nothing to see the questions; call it again with answers as you get them \u2014 they are saved, so you can finish it over several sittings. A job you cannot put minutes against is named as needing measuring and is never estimated.",
     {
-      answers: import_zod71.z.record(import_zod71.z.string(), import_zod71.z.object({
-        minutes: import_zod71.z.union([import_zod71.z.number(), import_zod71.z.string()]).optional().describe("Minutes for ONE instance of the job. 'unknown' is a real answer and is recorded as one."),
-        timesPerMonth: import_zod71.z.union([import_zod71.z.number(), import_zod71.z.string()]).optional().describe("How many times a month it happens.")
+      answers: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.object({
+        minutes: import_zod72.z.union([import_zod72.z.number(), import_zod72.z.string()]).optional().describe("Minutes for ONE instance of the job. 'unknown' is a real answer and is recorded as one."),
+        timesPerMonth: import_zod72.z.union([import_zod72.z.number(), import_zod72.z.string()]).optional().describe("How many times a month it happens.")
       })).optional().describe("Keyed by task id, from the questions this tool returns. Merges with what is already saved."),
-      available: import_zod71.z.record(import_zod71.z.string(), import_zod71.z.boolean()).optional().describe("Which tools this operator actually has, if it is not all of them. Omit on a normal licence."),
-      reset: import_zod71.z.boolean().optional().describe("Throw away the saved answers and start the audit again. Only on an explicit ask.")
+      available: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.boolean()).optional().describe("Which tools this operator actually has, if it is not all of them. Omit on a normal licence."),
+      reset: import_zod72.z.boolean().optional().describe("Throw away the saved answers and start the audit again. Only on an explicit ask.")
     },
     async ({ answers, available, reset }) => {
       if (reset) resetDeliveryAudit();
@@ -45964,11 +46144,11 @@ function registerDeliveryAuditTools(server2) {
     }
   );
 }
-var import_zod71, tasks, areas, areaLabel;
+var import_zod72, tasks, areas, areaLabel;
 var init_delivery_audit = __esm({
   "src/tools/delivery-audit.ts"() {
     "use strict";
-    import_zod71 = require("zod");
+    import_zod72 = require("zod");
     init_tool_helpers();
     init_audit();
     init_store4();
@@ -46311,20 +46491,20 @@ function registerAgencyBuildTools(server2, knownTools) {
     "plan_automation",
     "Plan one of YOUR OWN automations \u2014 something specific to your agency, built out of the tools you already have. Give it the goal, what you found when you looked at the account (every id you are going to touch), and the steps. It refuses a plan that targets an id nobody looked at, a plan whose steps cannot run in any order, and a step with no reason on it. It writes nothing: it produces a plan you read and approve.",
     {
-      goal: import_zod72.z.string().min(4).describe("What this build is for, in your own words."),
-      findings: import_zod72.z.array(import_zod72.z.object({
-        kind: import_zod72.z.string().describe("pipeline, custom_field, workflow, calendar \u2014 whatever it is."),
-        id: import_zod72.z.string().describe("The real id, as the account reported it."),
-        name: import_zod72.z.string().optional(),
-        observedAt: import_zod72.z.string().optional().describe("When you looked. Defaults to now. Anything older than an hour is treated as not having looked.")
+      goal: import_zod73.z.string().min(4).describe("What this build is for, in your own words."),
+      findings: import_zod73.z.array(import_zod73.z.object({
+        kind: import_zod73.z.string().describe("pipeline, custom_field, workflow, calendar \u2014 whatever it is."),
+        id: import_zod73.z.string().describe("The real id, as the account reported it."),
+        name: import_zod73.z.string().optional(),
+        observedAt: import_zod73.z.string().optional().describe("When you looked. Defaults to now. Anything older than an hour is treated as not having looked.")
       })).describe("What you found when you explored. Every existing id a step targets has to be in here."),
-      steps: import_zod72.z.array(import_zod72.z.object({
-        id: import_zod72.z.string().describe("Short, unique within this plan."),
-        tool: import_zod72.z.string().describe("The tool that does it."),
-        why: import_zod72.z.string().min(3).describe("Plain English. This is what the operator reads before approving."),
-        targets: import_zod72.z.array(targetSchema).default([]),
-        creates: import_zod72.z.array(import_zod72.z.object({ ref: import_zod72.z.string(), kind: import_zod72.z.string() })).optional().describe("What this step brings into existence, for later steps to point at."),
-        args: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
+      steps: import_zod73.z.array(import_zod73.z.object({
+        id: import_zod73.z.string().describe("Short, unique within this plan."),
+        tool: import_zod73.z.string().describe("The tool that does it."),
+        why: import_zod73.z.string().min(3).describe("Plain English. This is what the operator reads before approving."),
+        targets: import_zod73.z.array(targetSchema).default([]),
+        creates: import_zod73.z.array(import_zod73.z.object({ ref: import_zod73.z.string(), kind: import_zod73.z.string() })).optional().describe("What this step brings into existence, for later steps to point at."),
+        args: import_zod73.z.record(import_zod73.z.string(), import_zod73.z.unknown()).optional().describe("The arguments, kept verbatim \u2014 the approval covers these, so changing one voids it.")
       })).min(1)
     },
     async ({ goal, findings, steps }) => {
@@ -46368,9 +46548,9 @@ function registerAgencyBuildTools(server2, knownTools) {
     "approve_automation",
     "Record that the OPERATOR has read this exact plan and approved it. Requires the plan's fingerprint: if a single argument changed since they read it, the approval is refused, because it covered a different document. Nothing may be recorded as applied until this has been done.",
     {
-      buildId: import_zod72.z.string(),
-      planId: import_zod72.z.string().describe("The fingerprint from plan_automation. It must match the plan as it stands now."),
-      approvedBy: import_zod72.z.string().describe("Who approved it. Their name, not yours.")
+      buildId: import_zod73.z.string(),
+      planId: import_zod73.z.string().describe("The fingerprint from plan_automation. It must match the plan as it stands now."),
+      approvedBy: import_zod73.z.string().describe("Who approved it. Their name, not yours.")
     },
     async ({ buildId, planId, approvedBy }) => {
       const a = readAutomation(buildId);
@@ -46388,14 +46568,14 @@ function registerAgencyBuildTools(server2, knownTools) {
     "record_automation_step",
     "Record what happened when a step was run: applied, with how to undo it, or failed, with what came back. A step cannot be recorded as done without its undo \u2014 a write with no way back is the one thing this refuses \u2014 and a step cannot be recorded before the thing it depends on has run. A step that FAILED can be run again once you have fixed what stopped it: record the second attempt with retry:true and both attempts are kept.",
     {
-      buildId: import_zod72.z.string(),
-      stepId: import_zod72.z.string(),
-      state: import_zod72.z.enum(["applied", "failed"]),
-      undo: import_zod72.z.string().optional().describe("Required on 'applied'. How to reverse this exact write, specifically enough to act on months later."),
-      because: import_zod72.z.string().optional().describe("Required on 'failed'. What the account actually said."),
-      result: import_zod72.z.unknown().optional().describe("What came back, kept so a stall can be diagnosed without re-running anything."),
-      resolved: import_zod72.z.record(import_zod72.z.string(), import_zod72.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
-      retry: import_zod72.z.boolean().optional().describe("This is a second run of a step that failed. Both attempts are kept, and the earlier failure stops blocking what came after it.")
+      buildId: import_zod73.z.string(),
+      stepId: import_zod73.z.string(),
+      state: import_zod73.z.enum(["applied", "failed"]),
+      undo: import_zod73.z.string().optional().describe("Required on 'applied'. How to reverse this exact write, specifically enough to act on months later."),
+      because: import_zod73.z.string().optional().describe("Required on 'failed'. What the account actually said."),
+      result: import_zod73.z.unknown().optional().describe("What came back, kept so a stall can be diagnosed without re-running anything."),
+      resolved: import_zod73.z.record(import_zod73.z.string(), import_zod73.z.string()).optional().describe("The real ids this step created, keyed by the ref later steps use."),
+      retry: import_zod73.z.boolean().optional().describe("This is a second run of a step that failed. Both attempts are kept, and the earlier failure stops blocking what came after it.")
     },
     async ({ buildId, stepId, state, undo, because, result, resolved: resolved2, retry }) => {
       const a = readAutomation(buildId);
@@ -46418,8 +46598,8 @@ function registerAgencyBuildTools(server2, knownTools) {
     "abandon_automation",
     "Stop a build for good. It does NOT undo anything and does not pretend to: it hands you back everything that is still applied to the account, so abandoning the plan and cleaning up after it stay two separate acts. A build abandoned with no reason recorded is one somebody re-plans identically next month, so a reason is required.",
     {
-      buildId: import_zod72.z.string(),
-      because: import_zod72.z.string().min(3).describe("Why it is being stopped. Kept with the build.")
+      buildId: import_zod73.z.string(),
+      because: import_zod73.z.string().min(3).describe("Why it is being stopped. Kept with the build.")
     },
     async ({ buildId, because }) => {
       const a = readAutomation(buildId);
@@ -46439,7 +46619,7 @@ function registerAgencyBuildTools(server2, knownTools) {
     server2,
     "automation_status",
     "Where your own builds actually are. A build that stopped is reported as STALLED, naming the step and what the account said \u2014 never as a percentage, because a build that is '70% complete' is one somebody lives with for three weeks. Also gives you the undo list, newest first.",
-    { buildId: import_zod72.z.string().optional().describe("One build. Omit for all of them.") },
+    { buildId: import_zod73.z.string().optional().describe("One build. Omit for all of them.") },
     async ({ buildId }) => {
       const all = readAutomations();
       const ids = buildId ? [buildId] : Object.keys(all);
@@ -46470,17 +46650,17 @@ function registerAgencyBuildTools(server2, knownTools) {
     }
   );
 }
-var import_zod72, targetSchema;
+var import_zod73, targetSchema;
 var init_agency_build = __esm({
   "src/tools/agency-build.ts"() {
     "use strict";
-    import_zod72 = require("zod");
+    import_zod73 = require("zod");
     init_tool_helpers();
     init_automation();
     init_store5();
-    targetSchema = import_zod72.z.union([
-      import_zod72.z.object({ existing: import_zod72.z.string().describe("A real id, which must appear in `findings`."), kind: import_zod72.z.string() }),
-      import_zod72.z.object({ ref: import_zod72.z.string().describe("Something an earlier step in this plan creates."), kind: import_zod72.z.string() })
+    targetSchema = import_zod73.z.union([
+      import_zod73.z.object({ existing: import_zod73.z.string().describe("A real id, which must appear in `findings`."), kind: import_zod73.z.string() }),
+      import_zod73.z.object({ ref: import_zod73.z.string().describe("Something an earlier step in this plan creates."), kind: import_zod73.z.string() })
     ]);
   }
 });
@@ -46654,7 +46834,7 @@ function registerClientEngagementTools(server2, registry2) {
     server2,
     "get_income_sources",
     "Read every source of income you have recorded \u2014 clients whose GoHighLevel accounts you run, software subscribers, event fees, revenue shares \u2014 with the offer they are on, what they pay, monthly or one-time, when it started, when it renews, who runs the account, and any SOPs specific to them. Use this before quoting, renewing, writing a proposal or planning a client's week, instead of asking the user again. Also returns your recurring revenue as a FLOOR (the sum of everything active and monthly that has a price recorded, whatever kind of income it is) plus a count of the ones that do not, because a total assembled from partial data is not a total. Pass locationId for one record, or nothing for all of them. The locationId in the reply is for calling set_income_source \u2014 refer to people and companies by name when you answer the user, never by id. Local file on this machine; never touches GoHighLevel.",
-    { locationId: import_zod73.z.string().optional().describe("One record's id \u2014 a sub-account id for a client, or the key you recorded other income under. Omit for the whole roster.") },
+    { locationId: import_zod74.z.string().optional().describe("One record's id \u2014 a sub-account id for a client, or the key you recorded other income under. Omit for the whole roster.") },
     async ({ locationId: locationId2 }) => {
       const profile = readAgencyProfile();
       const saved = readClientEngagements();
@@ -46700,32 +46880,32 @@ function registerClientEngagementTools(server2, registry2) {
     "set_income_source",
     "Record or update ONE source of income \u2014 a client whose GoHighLevel account you run, a software subscriber, an event fee \u2014 with its offer, price, monthly or one-time, start and renewal dates, status, who runs the account, and SOPs specific to it. Send only the fields you are changing; anything you omit is left exactly as it was, so this is safe to call repeatedly. To CLEAR a field pass null for it, and to remove the record entirely pass remove:true. Dates are YYYY-MM-DD. Local file on this machine; never touches GoHighLevel.",
     {
-      locationId: import_zod73.z.string().optional().describe("The client's GHL sub-account id \u2014 the same id the board uses. Use this for a client whose GoHighLevel account you run. For income with no sub-account, use `key` instead."),
+      locationId: import_zod74.z.string().optional().describe("The client's GHL sub-account id \u2014 the same id the board uses. Use this for a client whose GoHighLevel account you run. For income with no sub-account, use `key` instead."),
       // WIDENED 2026-09-01 (Jerry: "different clients pay for different things.
       // My income comes from a variety of sources"). Two argument names for one
       // slot, rather than one argument whose name lies about half its uses: a
       // Stripe-only software subscriber has no locationId, and calling their
       // Stripe customer id a "locationId" is the kind of description-contradicts-
       // the-code defect this product keeps paying for.
-      key: import_zod73.z.string().optional().describe("Identifier for income that is NOT a GoHighLevel account you run \u2014 a software subscriber, an event fee, a revenue share. Anything stable and unique that is NOT one of your GoHighLevel account ids; a Stripe customer id is ideal because it makes the Stripe pairing automatic. Send this instead of locationId, never both."),
-      kind: import_zod73.z.enum(["client", "software", "other"]).nullable().optional().describe("What kind of income this is. 'client' (the default) = you run a GoHighLevel account for them, so they belong on the build board and are measured against your price floor. 'software' = they bought a licence or subscription. 'other' = events, revenue share, training, referrals. Only 'client' ever appears as a build."),
+      key: import_zod74.z.string().optional().describe("Identifier for income that is NOT a GoHighLevel account you run \u2014 a software subscriber, an event fee, a revenue share. Anything stable and unique that is NOT one of your GoHighLevel account ids; a Stripe customer id is ideal because it makes the Stripe pairing automatic. Send this instead of locationId, never both."),
+      kind: import_zod74.z.enum(["client", "software", "other"]).nullable().optional().describe("What kind of income this is. 'client' (the default) = you run a GoHighLevel account for them, so they belong on the build board and are measured against your price floor. 'software' = they bought a licence or subscription. 'other' = events, revenue share, training, referrals. Only 'client' ever appears as a build."),
       // Every editable field is NULLABLE, not just optional. The description
       // promises "pass null to clear", and a schema that rejects null would make
       // that promise a lie the tests never caught, because they cleared fields by
       // calling the store directly instead of through this surface (Codex,
       // 2026-08-28). Absent = untouched; null = clear; a value = set.
-      clientName: import_zod73.z.string().nullable().optional().describe("How you refer to them, if it differs from the account name."),
-      offer: import_zod73.z.string().nullable().optional().describe("Which of your offers they are on. Matched against your agency profile so a typo is reported."),
-      price: import_zod73.z.number().min(0).nullable().optional().describe("What they actually pay \u2014 not your floor."),
-      cadence: import_zod73.z.enum(["one-time", "monthly"]).nullable().optional(),
-      currency: import_zod73.z.string().nullable().optional(),
-      startedOn: import_zod73.z.string().nullable().optional().describe("YYYY-MM-DD."),
-      renewsOn: import_zod73.z.string().nullable().optional().describe("YYYY-MM-DD."),
-      status: import_zod73.z.enum(["active", "paused", "ended"]).nullable().optional(),
-      owner: import_zod73.z.string().nullable().optional().describe("Which staff member runs this account."),
-      sops: import_zod73.z.array(import_zod73.z.string()).nullable().optional().describe("SOPs that apply to this one only. Leave empty to use your agency's."),
-      notes: import_zod73.z.string().nullable().optional(),
-      remove: import_zod73.z.boolean().optional().describe("Delete this record entirely.")
+      clientName: import_zod74.z.string().nullable().optional().describe("How you refer to them, if it differs from the account name."),
+      offer: import_zod74.z.string().nullable().optional().describe("Which of your offers they are on. Matched against your agency profile so a typo is reported."),
+      price: import_zod74.z.number().min(0).nullable().optional().describe("What they actually pay \u2014 not your floor."),
+      cadence: import_zod74.z.enum(["one-time", "monthly"]).nullable().optional(),
+      currency: import_zod74.z.string().nullable().optional(),
+      startedOn: import_zod74.z.string().nullable().optional().describe("YYYY-MM-DD."),
+      renewsOn: import_zod74.z.string().nullable().optional().describe("YYYY-MM-DD."),
+      status: import_zod74.z.enum(["active", "paused", "ended"]).nullable().optional(),
+      owner: import_zod74.z.string().nullable().optional().describe("Which staff member runs this account."),
+      sops: import_zod74.z.array(import_zod74.z.string()).nullable().optional().describe("SOPs that apply to this one only. Leave empty to use your agency's."),
+      notes: import_zod74.z.string().nullable().optional(),
+      remove: import_zod74.z.boolean().optional().describe("Delete this record entirely.")
     },
     async (args) => {
       const { locationId: locationId2, key, remove, ...rest } = args;
@@ -46775,7 +46955,7 @@ function registerClientEngagementTools(server2, registry2) {
     server2,
     "client_this_week",
     "Answer 'what should I be doing for this client this week' for ONE client, from what you already know: what they bought, where their build has stopped, what is waiting on you versus already in motion, a renewal that is close, whether the price is under your own floor, and the SOP that applies. Names the client by name or by account id. Everything it cannot know is listed plainly rather than guessed. Local files on this machine; never touches GoHighLevel.",
-    { client: import_zod73.z.string().describe("The client's name as you refer to them, or their sub-account id.") },
+    { client: import_zod74.z.string().describe("The client's name as you refer to them, or their sub-account id.") },
     async ({ client }) => {
       const state = readBoardState();
       const roster = knownClients(registry2, state);
@@ -46795,11 +46975,11 @@ function registerClientEngagementTools(server2, registry2) {
     }
   );
 }
-var import_zod73;
+var import_zod74;
 var init_client_engagements2 = __esm({
   "src/tools/client-engagements.ts"() {
     "use strict";
-    import_zod73 = require("zod");
+    import_zod74 = require("zod");
     init_tool_helpers();
     init_agency_profile();
     init_client_engagements();
@@ -47259,14 +47439,14 @@ function registerAuditReportTools(server2) {
     "build_audit_report",
     "Turn the output of `audit_workflows` into a client-ready assessment: plain-English findings with money attached where it can honestly be attached, ranked worst-first, plus an explicit list of what could NOT be checked. Call `audit_workflows` first and pass its result here \u2014 this does not re-read the account. Give `leadsPerMonth`, `closeRate` and `monthlyValuePerClient` if you know them and the findings get costed in dollars; leave them out and it says which input is missing instead of guessing. `monthlyValuePerClient` defaults to your saved minimum monthly fee from your agency profile. Use this to produce the document you send or present, not to diagnose \u2014 the diagnosing already happened.",
     {
-      audit: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The full JSON result returned by audit_workflows."),
-      audience: import_zod74.z.enum(["internal", "prospect"]).optional().describe("Who reads it. 'internal' (default) is a report about an account you already run, and may use your own minimum monthly as what a client is worth. 'prospect' is a document about somebody else's business: your numbers are NEVER used, so findings stay uncosted unless you supply THEIR lead volume, close rate and client value."),
-      accountName: import_zod74.z.string().describe("The client's name as they should see it on the document."),
-      locationId: import_zod74.z.string().optional().describe("Sub-account id. Recorded on the document, never shown in the body."),
-      leadsPerMonth: import_zod74.z.number().min(0).optional().describe("Leads this account actually receives per month, if known. Without it, findings are not costed in dollars."),
-      closeRate: import_zod74.z.number().min(0).max(1).optional().describe("Share of reached leads that become clients, 0-1. Never guessed."),
-      monthlyValuePerClient: import_zod74.z.number().min(0).optional().describe("What one new client is worth per month. Defaults to your agency profile's minimum monthly fee."),
-      generatedAt: import_zod74.z.string().optional().describe("ISO timestamp for the document. Defaults to now.")
+      audit: import_zod75.z.record(import_zod75.z.string(), import_zod75.z.unknown()).describe("The full JSON result returned by audit_workflows."),
+      audience: import_zod75.z.enum(["internal", "prospect"]).optional().describe("Who reads it. 'internal' (default) is a report about an account you already run, and may use your own minimum monthly as what a client is worth. 'prospect' is a document about somebody else's business: your numbers are NEVER used, so findings stay uncosted unless you supply THEIR lead volume, close rate and client value."),
+      accountName: import_zod75.z.string().describe("The client's name as they should see it on the document."),
+      locationId: import_zod75.z.string().optional().describe("Sub-account id. Recorded on the document, never shown in the body."),
+      leadsPerMonth: import_zod75.z.number().min(0).optional().describe("Leads this account actually receives per month, if known. Without it, findings are not costed in dollars."),
+      closeRate: import_zod75.z.number().min(0).max(1).optional().describe("Share of reached leads that become clients, 0-1. Never guessed."),
+      monthlyValuePerClient: import_zod75.z.number().min(0).optional().describe("What one new client is worth per month. Defaults to your agency profile's minimum monthly fee."),
+      generatedAt: import_zod75.z.string().optional().describe("ISO timestamp for the document. Defaults to now.")
     },
     async (args) => {
       const a = args;
@@ -47324,12 +47504,12 @@ function registerAuditReportTools(server2) {
     "build_site_audit_report",
     "Turn a website read-through into the assessment document you put in front of a PROSPECT \u2014 someone whose GoHighLevel account you do not have. Pass the verified observations from a site crawl and it returns plain-English findings, ranked, each one carrying the quote and the page it came from. Use it before a sales call, or alongside a receptionist demo, so the same read of their site fills both. It never invents money: a website cannot tell you what a lead is worth to that business, so findings come back uncosted unless you supply THEIR figures, and the document says why. It also never repeats a claim the crawl could not stand up \u2014 anything refused is returned separately, so you can see what was thrown out rather than wonder what was missed.",
     {
-      observations: import_zod74.z.record(import_zod74.z.string(), import_zod74.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
-      businessName: import_zod74.z.string().describe("The business's name as it should appear on the document."),
-      leadsPerMonth: import_zod74.z.number().min(0).optional().describe("THEIR leads per month, if they told you. Never your own figure."),
-      closeRate: import_zod74.z.number().min(0).max(1).optional().describe("THEIR close rate, 0-1, if they told you. Never guessed."),
-      monthlyValuePerClient: import_zod74.z.number().min(0).optional().describe("What one client is worth to THEM per month, if they told you."),
-      generatedAt: import_zod74.z.string().optional().describe("ISO timestamp for the document. Defaults to now.")
+      observations: import_zod75.z.record(import_zod75.z.string(), import_zod75.z.unknown()).describe("The verified observations payload from the site read: site, pagesRead, observations, limits. Passed through as-is."),
+      businessName: import_zod75.z.string().describe("The business's name as it should appear on the document."),
+      leadsPerMonth: import_zod75.z.number().min(0).optional().describe("THEIR leads per month, if they told you. Never your own figure."),
+      closeRate: import_zod75.z.number().min(0).max(1).optional().describe("THEIR close rate, 0-1, if they told you. Never guessed."),
+      monthlyValuePerClient: import_zod75.z.number().min(0).optional().describe("What one client is worth to THEM per month, if they told you."),
+      generatedAt: import_zod75.z.string().optional().describe("ISO timestamp for the document. Defaults to now.")
     },
     async (args) => {
       const a = args;
@@ -47388,11 +47568,11 @@ function registerAuditReportTools(server2) {
     }
   );
 }
-var import_zod74;
+var import_zod75;
 var init_audit_report2 = __esm({
   "src/tools/audit-report.ts"() {
     "use strict";
-    import_zod74 = require("zod");
+    import_zod75 = require("zod");
     init_tool_helpers();
     init_audit_report();
     init_audit_translate();
@@ -47660,9 +47840,9 @@ function registerDailyBriefTools(server2, registry2) {
     "daily_brief",
     "The morning brief across ALL your clients: today's appointments first, then what is waiting on YOU, what is already running, renewals inside 30 days, clients PAYING YOU WHO HAVE BOOKED NOTHING IN THREE WEEKS, clients under your own price floor, and new leads overnight. Use it to answer 'what do I need to do today' or 'anything I'm missing' without opening a single sub-account. Reads today's calendar and new-contact counts live from each connected account; pass live=false for records only. Accounts that could not be read are named with the reason \u2014 it never reports an account as quiet when it simply could not get in.",
     {
-      live: import_zod75.z.boolean().optional().describe("Read today's calendars and lead counts from the connected accounts. Default true. false answers from local records alone."),
-      hoursBack: import_zod75.z.number().min(1).max(72).optional().describe("Count new leads over this many hours instead of since midnight."),
-      quietAfterDays: import_zod75.z.number().min(1).max(180).optional().describe("How many days a paying client has to book nothing before the brief says so. Defaults to 21.")
+      live: import_zod76.z.boolean().optional().describe("Read today's calendars and lead counts from the connected accounts. Default true. false answers from local records alone."),
+      hoursBack: import_zod76.z.number().min(1).max(72).optional().describe("Count new leads over this many hours instead of since midnight."),
+      quietAfterDays: import_zod76.z.number().min(1).max(180).optional().describe("How many days a paying client has to book nothing before the brief says so. Defaults to 21.")
     },
     async ({ live, hoursBack, quietAfterDays }) => {
       const now = /* @__PURE__ */ new Date();
@@ -47699,11 +47879,11 @@ function registerDailyBriefTools(server2, registry2) {
     }
   );
 }
-var import_zod75;
+var import_zod76;
 var init_daily_brief2 = __esm({
   "src/tools/daily-brief.ts"() {
     "use strict";
-    import_zod75 = require("zod");
+    import_zod76 = require("zod");
     init_tool_helpers();
     init_ghl_client();
     init_agency_profile();
@@ -47756,7 +47936,7 @@ function registerSnapshotTools(server2, client, registry2) {
     "list_snapshots",
     "List the agency's GHL snapshots (id, name, type) so you can pick the right one by name before applying it to a sub-account. Reads the agency/company-scoped key (not a sub-account PIT). companyId defaults to the active location's company; pass it explicitly to target a different company you have the agency key for. Read-only.",
     {
-      companyId: import_zod76.z.string().optional().describe(
+      companyId: import_zod77.z.string().optional().describe(
         "Agency/company ID whose snapshots to list. Defaults to the active location's company. Must match the company your agency key is scoped to."
       )
     },
@@ -47781,11 +47961,11 @@ function registerSnapshotTools(server2, client, registry2) {
     "create_snapshot_share_link",
     "Create a shareable load link for one of the agency's snapshots (returns a gohighlevel.com/?share=... URL to import the snapshot into a sub-account). Uses the agency/company-scoped key. WARNING: this is NOT idempotent \u2014 each call mints a NEW link, and there is no API to list or revoke links (revoke in the GHL UI under the snapshot's share settings). Pick share_type deliberately. Use list_snapshots first to get the snapshot id.",
     {
-      snapshot_id: import_zod76.z.string().describe("The snapshot id to share (from list_snapshots)."),
-      share_type: import_zod76.z.enum(SHARE_TYPES).describe(
+      snapshot_id: import_zod77.z.string().describe("The snapshot id to share (from list_snapshots)."),
+      share_type: import_zod77.z.enum(SHARE_TYPES).describe(
         "Share link type. 'link' = standard share link; 'permanent_link' = non-expiring; 'agency_link' = share to agencies; 'location_link' = load into a sub-account/location; 'marketplace_link' = marketplace listing. No default \u2014 choose intentionally."
       ),
-      companyId: import_zod76.z.string().optional().describe(
+      companyId: import_zod77.z.string().optional().describe(
         "Agency/company ID that owns the snapshot. Defaults to the active location's company. Must match the company your agency key is scoped to."
       )
     },
@@ -47813,16 +47993,16 @@ function registerSnapshotTools(server2, client, registry2) {
     }
   );
 }
-var import_zod76, SnapshotSchema, SnapshotsResponseSchema, ShareLinkResponseSchema, SHARE_TYPES;
+var import_zod77, SnapshotSchema, SnapshotsResponseSchema, ShareLinkResponseSchema, SHARE_TYPES;
 var init_snapshots = __esm({
   "src/tools/snapshots.ts"() {
     "use strict";
-    import_zod76 = require("zod");
+    import_zod77 = require("zod");
     init_ghl_client();
     init_tool_helpers();
-    SnapshotSchema = import_zod76.z.object({ id: import_zod76.z.string(), name: import_zod76.z.string(), type: import_zod76.z.string() }).passthrough();
-    SnapshotsResponseSchema = import_zod76.z.object({ snapshots: import_zod76.z.array(SnapshotSchema) }).passthrough();
-    ShareLinkResponseSchema = import_zod76.z.object({ id: import_zod76.z.string(), shareLink: import_zod76.z.string() }).passthrough();
+    SnapshotSchema = import_zod77.z.object({ id: import_zod77.z.string(), name: import_zod77.z.string(), type: import_zod77.z.string() }).passthrough();
+    SnapshotsResponseSchema = import_zod77.z.object({ snapshots: import_zod77.z.array(SnapshotSchema) }).passthrough();
+    ShareLinkResponseSchema = import_zod77.z.object({ id: import_zod77.z.string(), shareLink: import_zod77.z.string() }).passthrough();
     SHARE_TYPES = [
       "link",
       "permanent_link",
@@ -47840,7 +48020,7 @@ function registerPhoneTools(server2, client) {
     "list_phone_numbers",
     "List the LC Phone numbers provisioned for a location (sid, number, label). Read-only. Use to verify or count purchased numbers (e.g. provisioning step 11). Number purchase is not exposed (billable write).",
     {
-      locationId: import_zod77.z.string().optional().describe("Defaults to the active location.")
+      locationId: import_zod78.z.string().optional().describe("Defaults to the active location.")
     },
     async ({ locationId: locationId2 }) => {
       const loc = client.resolveLocationId(locationId2);
@@ -47858,7 +48038,7 @@ function registerPhoneTools(server2, client) {
     "list_number_pools",
     "List LC Phone number pools configured for a location. Read-only.",
     {
-      locationId: import_zod77.z.string().optional().describe("Defaults to the active location.")
+      locationId: import_zod78.z.string().optional().describe("Defaults to the active location.")
     },
     async ({ locationId: locationId2 }) => {
       const loc = client.resolveLocationId(locationId2);
@@ -47868,15 +48048,15 @@ function registerPhoneTools(server2, client) {
     }
   );
 }
-var import_zod77, PhoneNumberSchema, NumbersResponseSchema, PoolsResponseSchema;
+var import_zod78, PhoneNumberSchema, NumbersResponseSchema, PoolsResponseSchema;
 var init_phone = __esm({
   "src/tools/phone.ts"() {
     "use strict";
-    import_zod77 = require("zod");
+    import_zod78 = require("zod");
     init_tool_helpers();
-    PhoneNumberSchema = import_zod77.z.object({ sid: import_zod77.z.string(), value: import_zod77.z.string(), title: import_zod77.z.string().optional() }).passthrough();
-    NumbersResponseSchema = import_zod77.z.object({ phoneNumbers: import_zod77.z.array(PhoneNumberSchema) }).passthrough();
-    PoolsResponseSchema = import_zod77.z.object({ pools: import_zod77.z.array(import_zod77.z.object({}).passthrough()) }).passthrough();
+    PhoneNumberSchema = import_zod78.z.object({ sid: import_zod78.z.string(), value: import_zod78.z.string(), title: import_zod78.z.string().optional() }).passthrough();
+    NumbersResponseSchema = import_zod78.z.object({ phoneNumbers: import_zod78.z.array(PhoneNumberSchema) }).passthrough();
+    PoolsResponseSchema = import_zod78.z.object({ pools: import_zod78.z.array(import_zod78.z.object({}).passthrough()) }).passthrough();
   }
 });
 
@@ -47894,8 +48074,8 @@ function registerAccountHealthTools(server2, client) {
     "get_account_health_summary",
     "Account-health summary for a location, composed from existing reads (GHL has no reporting API). Returns: total contacts + NEW contacts in the window; total opportunities + counts by status (open/won/lost/abandoned); total conversations; phone-number count. Every metric is explicitly labeled all_time vs window (with start/end) \u2014 windowed and all-time numbers are never conflated. Sections that can't be read return status:'unavailable' (never a misleading 0). Revenue and appointments are intentionally excluded (not reachable / too costly via the public API).",
     {
-      locationId: import_zod78.z.string().optional().describe("Defaults to the active location."),
-      windowDays: import_zod78.z.number().int().positive().max(365).optional().describe("Lookback window in days for windowed metrics (new contacts). Default 30.")
+      locationId: import_zod79.z.string().optional().describe("Defaults to the active location."),
+      windowDays: import_zod79.z.number().int().positive().max(365).optional().describe("Lookback window in days for windowed metrics (new contacts). Default 30.")
     },
     async ({ locationId: locationId2, windowDays }) => {
       const loc = client.resolveLocationId(locationId2);
@@ -47959,16 +48139,16 @@ function registerAccountHealthTools(server2, client) {
     }
   );
 }
-var import_zod78, MetaTotalSchema, TotalSchema2, NumbersSchema, OPP_STATUSES;
+var import_zod79, MetaTotalSchema, TotalSchema2, NumbersSchema, OPP_STATUSES;
 var init_account_health = __esm({
   "src/tools/account-health.ts"() {
     "use strict";
-    import_zod78 = require("zod");
+    import_zod79 = require("zod");
     init_tool_helpers();
     init_contact_window();
-    MetaTotalSchema = import_zod78.z.object({ meta: import_zod78.z.object({ total: import_zod78.z.number() }).passthrough() }).passthrough();
-    TotalSchema2 = import_zod78.z.object({ total: import_zod78.z.number() }).passthrough();
-    NumbersSchema = import_zod78.z.object({ phoneNumbers: import_zod78.z.array(import_zod78.z.unknown()) }).passthrough();
+    MetaTotalSchema = import_zod79.z.object({ meta: import_zod79.z.object({ total: import_zod79.z.number() }).passthrough() }).passthrough();
+    TotalSchema2 = import_zod79.z.object({ total: import_zod79.z.number() }).passthrough();
+    NumbersSchema = import_zod79.z.object({ phoneNumbers: import_zod79.z.array(import_zod79.z.unknown()) }).passthrough();
     OPP_STATUSES = ["open", "won", "lost", "abandoned"];
   }
 });
@@ -48161,11 +48341,11 @@ function validateBrief(input) {
     warnings: []
   };
 }
-var import_zod79, BRIEF_SCHEMA_VERSION, PRESETS, presetSchema, BRIEF_SOURCES, briefSourceSchema, pricePointSchema, staffMemberSchema, BRIEF_CALENDAR_TYPES, briefCalendarSchema, TRI_STATES, briefSchema;
+var import_zod80, BRIEF_SCHEMA_VERSION, PRESETS, presetSchema, BRIEF_SOURCES, briefSourceSchema, pricePointSchema, staffMemberSchema, BRIEF_CALENDAR_TYPES, briefCalendarSchema, TRI_STATES, briefSchema;
 var init_brief2 = __esm({
   "src/intake-to-build/brief.ts"() {
     "use strict";
-    import_zod79 = require("zod");
+    import_zod80 = require("zod");
     BRIEF_SCHEMA_VERSION = "0.1";
     PRESETS = [
       "generic",
@@ -48175,105 +48355,105 @@ var init_brief2 = __esm({
       "ecom",
       "agency"
     ];
-    presetSchema = import_zod79.z.enum(PRESETS);
+    presetSchema = import_zod80.z.enum(PRESETS);
     BRIEF_SOURCES = ["agency_os", "business_os", "intake_form", "hybrid"];
-    briefSourceSchema = import_zod79.z.enum(BRIEF_SOURCES);
-    pricePointSchema = import_zod79.z.object({
-      name: import_zod79.z.string(),
-      price: import_zod79.z.string()
+    briefSourceSchema = import_zod80.z.enum(BRIEF_SOURCES);
+    pricePointSchema = import_zod80.z.object({
+      name: import_zod80.z.string(),
+      price: import_zod80.z.string()
     });
-    staffMemberSchema = import_zod79.z.object({
-      name: import_zod79.z.string().min(1),
-      email: import_zod79.z.string().min(1),
+    staffMemberSchema = import_zod80.z.object({
+      name: import_zod80.z.string().min(1),
+      email: import_zod80.z.string().min(1),
       /** Job title as the client wrote it ("Front desk", "Provider"); omitted when
        *  the line had none. The plan decides admin/user from it. */
-      role: import_zod79.z.string().optional(),
-      mobile: import_zod79.z.string().optional()
+      role: import_zod80.z.string().optional(),
+      mobile: import_zod80.z.string().optional()
     });
     BRIEF_CALENDAR_TYPES = ["one_on_one", "round_robin", "class"];
-    briefCalendarSchema = import_zod79.z.object({
-      name: import_zod79.z.string().min(1),
-      type: import_zod79.z.enum(BRIEF_CALENDAR_TYPES),
-      staffNames: import_zod79.z.array(import_zod79.z.string()),
+    briefCalendarSchema = import_zod80.z.object({
+      name: import_zod80.z.string().min(1),
+      type: import_zod80.z.enum(BRIEF_CALENDAR_TYPES),
+      staffNames: import_zod80.z.array(import_zod80.z.string()),
       /** Appointment length in minutes, when the client said one ("15 minutes").
        *  Lands on the plan calendar as slotDuration (finding 25). */
-      durationMinutes: import_zod79.z.number().int().positive().optional()
+      durationMinutes: import_zod80.z.number().int().positive().optional()
     });
     TRI_STATES = ["yes", "no", "unsure"];
-    briefSchema = import_zod79.z.object({
-      schemaVersion: import_zod79.z.string(),
-      briefId: import_zod79.z.string(),
+    briefSchema = import_zod80.z.object({
+      schemaVersion: import_zod80.z.string(),
+      briefId: import_zod80.z.string(),
       preset: presetSchema,
       briefSource: briefSourceSchema,
       /** Partner-OS deep structures (ICA / offer / brand-DNA), carried verbatim. */
-      extended: import_zod79.z.record(import_zod79.z.string(), import_zod79.z.unknown()).optional(),
-      business: import_zod79.z.object({
-        name: import_zod79.z.string(),
-        type: import_zod79.z.string().optional(),
-        website: import_zod79.z.string().optional(),
-        location: import_zod79.z.string().optional(),
-        timezone: import_zod79.z.string().optional(),
+      extended: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional(),
+      business: import_zod80.z.object({
+        name: import_zod80.z.string(),
+        type: import_zod80.z.string().optional(),
+        website: import_zod80.z.string().optional(),
+        location: import_zod80.z.string().optional(),
+        timezone: import_zod80.z.string().optional(),
         // Ratified additions (atlas 2026-06-15). Enum-ish but kept as strings for
         // the same tolerance reason as business.type (don't reject valid briefs).
-        teamSize: import_zod79.z.string().optional(),
-        monthlyLeadVolume: import_zod79.z.string().optional(),
-        hours: import_zod79.z.string().optional()
+        teamSize: import_zod80.z.string().optional(),
+        monthlyLeadVolume: import_zod80.z.string().optional(),
+        hours: import_zod80.z.string().optional()
       }).passthrough(),
-      offer: import_zod79.z.object({
-        summary: import_zod79.z.string().optional(),
+      offer: import_zod80.z.object({
+        summary: import_zod80.z.string().optional(),
         // Parsed best-effort; tolerate a raw string when parsing was not possible.
-        pricePoints: import_zod79.z.union([import_zod79.z.array(pricePointSchema), import_zod79.z.string()]).optional(),
-        leadMagnet: import_zod79.z.string().optional(),
-        avgDealValue: import_zod79.z.string().optional()
+        pricePoints: import_zod80.z.union([import_zod80.z.array(pricePointSchema), import_zod80.z.string()]).optional(),
+        leadMagnet: import_zod80.z.string().optional(),
+        avgDealValue: import_zod80.z.string().optional()
       }).passthrough().optional(),
-      audience: import_zod79.z.object({
-        ideal: import_zod79.z.string().optional(),
-        painPoints: import_zod79.z.array(import_zod79.z.string()).optional(),
-        objections: import_zod79.z.array(import_zod79.z.string()).optional()
+      audience: import_zod80.z.object({
+        ideal: import_zod80.z.string().optional(),
+        painPoints: import_zod80.z.array(import_zod80.z.string()).optional(),
+        objections: import_zod80.z.array(import_zod80.z.string()).optional()
       }).passthrough().optional(),
-      goal: import_zod79.z.object({
+      goal: import_zod80.z.object({
         // Kept as string: the form option labels are the canonical values, but
         // the contract sample shortens some (e.g. "high-touch"). See §7 note.
-        primary: import_zod79.z.string(),
-        salesStages: import_zod79.z.array(import_zod79.z.string()).optional(),
-        bookingNeeded: import_zod79.z.boolean().optional(),
-        followUpStyle: import_zod79.z.string().optional()
+        primary: import_zod80.z.string(),
+        salesStages: import_zod80.z.array(import_zod80.z.string()).optional(),
+        bookingNeeded: import_zod80.z.boolean().optional(),
+        followUpStyle: import_zod80.z.string().optional()
       }).passthrough(),
-      channels: import_zod79.z.object({
-        email: import_zod79.z.boolean().optional(),
-        sms: import_zod79.z.boolean().optional(),
-        a2pStatus: import_zod79.z.string().optional(),
-        payment: import_zod79.z.string().optional(),
-        calendarConnected: import_zod79.z.boolean().optional(),
-        social: import_zod79.z.array(import_zod79.z.string()).optional(),
+      channels: import_zod80.z.object({
+        email: import_zod80.z.boolean().optional(),
+        sms: import_zod80.z.boolean().optional(),
+        a2pStatus: import_zod80.z.string().optional(),
+        payment: import_zod80.z.string().optional(),
+        calendarConnected: import_zod80.z.boolean().optional(),
+        social: import_zod80.z.array(import_zod80.z.string()).optional(),
         /** "Do you already have a phone number in GoHighLevel?" */
-        hasPhoneNumber: import_zod79.z.enum(TRI_STATES).optional()
+        hasPhoneNumber: import_zod80.z.enum(TRI_STATES).optional()
       }).passthrough().optional(),
       /** Section G — who is on the account and who gets pinged. */
-      team: import_zod79.z.object({
-        staff: import_zod79.z.array(staffMemberSchema).optional(),
+      team: import_zod80.z.object({
+        staff: import_zod80.z.array(staffMemberSchema).optional(),
         /** Who is notified about new leads: a staff name, or "the owner". */
-        notifyName: import_zod79.z.string().optional(),
+        notifyName: import_zod80.z.string().optional(),
         /** Who takes booking / follow-up calls: a staff name, or "the owner". */
-        callsName: import_zod79.z.string().optional()
+        callsName: import_zod80.z.string().optional()
       }).passthrough().optional(),
       /** Section H — every booking calendar the client asked for. */
-      calendars: import_zod79.z.array(briefCalendarSchema).optional(),
+      calendars: import_zod80.z.array(briefCalendarSchema).optional(),
       /** Section I — copy inputs, verbatim. */
-      voice: import_zod79.z.object({
-        threeWords: import_zod79.z.string().optional(),
-        signatureLine: import_zod79.z.string().optional()
+      voice: import_zod80.z.object({
+        threeWords: import_zod80.z.string().optional(),
+        signatureLine: import_zod80.z.string().optional()
       }).passthrough().optional(),
-      assets: import_zod79.z.object({
-        existingPipeline: import_zod79.z.string().optional(),
-        existingWorkflows: import_zod79.z.string().optional(),
-        brand: import_zod79.z.string().optional(),
-        notes: import_zod79.z.string().optional()
+      assets: import_zod80.z.object({
+        existingPipeline: import_zod80.z.string().optional(),
+        existingWorkflows: import_zod80.z.string().optional(),
+        brand: import_zod80.z.string().optional(),
+        notes: import_zod80.z.string().optional()
       }).passthrough().optional(),
-      flags: import_zod79.z.array(import_zod79.z.string()).optional(),
+      flags: import_zod80.z.array(import_zod80.z.string()).optional(),
       /** Parse-time notes from the normalizer (a staff line it could not read,
        *  a calendar type it had to assume). Never fatal; surfaced by validate_brief. */
-      warnings: import_zod79.z.array(import_zod79.z.string()).optional()
+      warnings: import_zod80.z.array(import_zod80.z.string()).optional()
     }).strict();
   }
 });
@@ -51391,7 +51571,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "get_intake_question_set",
     `Return the Intake-to-Build question set (the questions the installed intake form asks) plus each question's GHL field mapping and the Brief field it feeds. Read-only. Pass industry (e.g. "clinic", "med-spa") to see the tailored set \u2014 base questions + that industry's pack + the agency's own overlay, exactly what install_intake_form installs for that industry; omit it for the base set. Use this to review or render the intake before installing it.`,
     {
-      industry: import_zod80.z.string().optional().describe(`Industry pack slug to compose in (${INDUSTRY_PACKS.map((p) => p.slug).join(", ")}). Omit for the base set.`)
+      industry: import_zod81.z.string().optional().describe(`Industry pack slug to compose in (${INDUSTRY_PACKS.map((p) => p.slug).join(", ")}). Omit for the base set.`)
     },
     async ({ industry }) => {
       const agency = readOverlay();
@@ -51422,32 +51602,32 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "validate_brief",
     "Validate an Intake-to-Build Brief object against the \xA74 schema. Returns {valid, errors}. Use to check a normalized brief before handing it to the plan-generation skill.",
     {
-      brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).describe("The Brief object to validate.")
+      brief: import_zod81.z.record(import_zod81.z.string(), import_zod81.z.unknown()).describe("The Brief object to validate.")
     },
     async ({ brief }) => validateBrief(brief)
   );
   const buildPlanSchema2 = {
-    plan: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
-    fromPreset: import_zod80.z.boolean().optional().describe("PLAN-FROM-PRESET (PRD row 4d): compose the \xA75 plan SERVER-SIDE from the industry preset + the \xA74 brief, deterministically, in milliseconds \u2014 never author workflow actions by hand when a preset covers the brief. Pass `brief` (required) and optionally `preset` and `copy`; omit `plan`. The composed plan carries the preset's full structure (workflows, templates with complete send-ready copy token-filled from the brief, staff users, calendars with the brief's appointment lengths, pipeline stages, notification targets) and then flows through the exact same validate \u2192 dry_run/execute path as a passed plan, including being saved on execute. The dry_run response lists copySlots \u2014 the template refs whose subject/body the model MAY refine via `copy` on the execute call. If the preset cannot cover the brief the tool answers phase:\"compose\" with the reasons; only then author a plan by hand."),
-    brief: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
-    preset: import_zod80.z.string().optional().describe("fromPreset only: which preset to compose from \u2014 a preset id (med_spa, clinic, coach, local_service, ecom, generic), an alias (dental, medspa, home_services\u2026), or an industry slug (med-spa, local-service, ecommerce\u2026). Defaults to the brief's own preset field; an unknown value falls back to the generic preset (noted in the response)."),
-    copy: import_zod80.z.array(
-      import_zod80.z.object({
-        ref: import_zod80.z.string().describe("email_template.* or sms_template.* ref from the composed plan"),
-        subject: import_zod80.z.string().optional(),
-        html: import_zod80.z.string().optional(),
-        body: import_zod80.z.string().optional()
+    plan: import_zod81.z.record(import_zod81.z.string(), import_zod81.z.unknown()).optional().describe("The approved \xA75 Build Plan object. Omit it and pass useSavedPlan:true to build from the plan already saved for this account."),
+    fromPreset: import_zod81.z.boolean().optional().describe("PLAN-FROM-PRESET (PRD row 4d): compose the \xA75 plan SERVER-SIDE from the industry preset + the \xA74 brief, deterministically, in milliseconds \u2014 never author workflow actions by hand when a preset covers the brief. Pass `brief` (required) and optionally `preset` and `copy`; omit `plan`. The composed plan carries the preset's full structure (workflows, templates with complete send-ready copy token-filled from the brief, staff users, calendars with the brief's appointment lengths, pipeline stages, notification targets) and then flows through the exact same validate \u2192 dry_run/execute path as a passed plan, including being saved on execute. The dry_run response lists copySlots \u2014 the template refs whose subject/body the model MAY refine via `copy` on the execute call. If the preset cannot cover the brief the tool answers phase:\"compose\" with the reasons; only then author a plan by hand."),
+    brief: import_zod81.z.record(import_zod81.z.string(), import_zod81.z.unknown()).optional().describe("fromPreset only: the \xA74 Brief (from normalize_submission_to_brief, or assembled from the cockpit intake answers)."),
+    preset: import_zod81.z.string().optional().describe("fromPreset only: which preset to compose from \u2014 a preset id (med_spa, clinic, coach, local_service, ecom, generic), an alias (dental, medspa, home_services\u2026), or an industry slug (med-spa, local-service, ecommerce\u2026). Defaults to the brief's own preset field; an unknown value falls back to the generic preset (noted in the response)."),
+    copy: import_zod81.z.array(
+      import_zod81.z.object({
+        ref: import_zod81.z.string().describe("email_template.* or sms_template.* ref from the composed plan"),
+        subject: import_zod81.z.string().optional(),
+        html: import_zod81.z.string().optional(),
+        body: import_zod81.z.string().optional()
       })
     ).optional().describe("fromPreset only: client-specific copy overrides \u2014 subject/html for an email template, body for an SMS template. Copy ONLY; structure is never overridable. Overrides land on the template AND its reviewable asset. An unknown ref is an error, never a silent no-op."),
-    useSavedPlan: import_zod80.z.boolean().optional().describe("Load the approved plan saved for the active location by an earlier execute (plans/<locationId>.json on this machine) instead of passing one. The right choice for ANY re-run: re-authoring a plan drifts and duplicates objects."),
-    replaceSavedPlan: import_zod80.z.boolean().optional().describe("Only with a new `plan` whose planId differs from the saved one: confirms the operator approved the new plan, so it replaces the saved plan on execute. Without it, a differently named plan is refused while a saved plan exists."),
-    mode: import_zod80.z.enum(["dry_run", "execute"]).optional().describe("dry_run (default) = resolve/expand/scan/report, no writes. execute = live writes. Run dry_run FIRST, show the operator the report, and run execute only on their go."),
-    locationId: import_zod80.z.string().optional().describe("Target sub-account. MUST match the active location; if it differs the tool refuses (confirm/switch first)."),
-    metHandoffs: import_zod80.z.array(import_zod80.z.string()).optional().describe('Handoff refs the operator has already satisfied (e.g. ["handoff.a2p"]) \u2014 lifts their gate so dependent workflows are not held DRAFT.'),
-    publishWorkflows: import_zod80.z.boolean().optional().describe("If true, ungated workflows would be published instead of left DRAFT. Default false (DRAFT)."),
-    onConflict: import_zod80.z.enum(["skip", "abort"]).optional().describe("skip (default) = bind same-named existing objects and continue. abort = report conflicts as a halt.")
+    useSavedPlan: import_zod81.z.boolean().optional().describe("Load the approved plan saved for the active location by an earlier execute (plans/<locationId>.json on this machine) instead of passing one. The right choice for ANY re-run: re-authoring a plan drifts and duplicates objects."),
+    replaceSavedPlan: import_zod81.z.boolean().optional().describe("Only with a new `plan` whose planId differs from the saved one: confirms the operator approved the new plan, so it replaces the saved plan on execute. Without it, a differently named plan is refused while a saved plan exists."),
+    mode: import_zod81.z.enum(["dry_run", "execute"]).optional().describe("dry_run (default) = resolve/expand/scan/report, no writes. execute = live writes. Run dry_run FIRST, show the operator the report, and run execute only on their go."),
+    locationId: import_zod81.z.string().optional().describe("Target sub-account. MUST match the active location; if it differs the tool refuses (confirm/switch first)."),
+    metHandoffs: import_zod81.z.array(import_zod81.z.string()).optional().describe('Handoff refs the operator has already satisfied (e.g. ["handoff.a2p"]) \u2014 lifts their gate so dependent workflows are not held DRAFT.'),
+    publishWorkflows: import_zod81.z.boolean().optional().describe("If true, ungated workflows would be published instead of left DRAFT. Default false (DRAFT)."),
+    onConflict: import_zod81.z.enum(["skip", "abort"]).optional().describe("skip (default) = bind same-named existing objects and continue. abort = report conflicts as a halt.")
   };
-  const buildPlanArgs = import_zod80.z.object(buildPlanSchema2);
+  const buildPlanArgs = import_zod81.z.object(buildPlanSchema2);
   const runBuildPlan = async ({ plan: planArgIn, fromPreset, brief: briefArg, preset: presetArg, copy: copyArg, useSavedPlan, replaceSavedPlan, mode, locationId: locationId2, metHandoffs, publishWorkflows, onConflict }, persistPreview = false) => {
     try {
       const resolvedMode = mode ?? "dry_run";
@@ -51765,7 +51945,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
   server2.tool(
     "validate_build_plan",
     "Validate a Build Plan and its references. With preview:true, compose from a brief or resolve a plan using the same executable planner as Build, read existing account assets, and save the complete preview locally. This tool cannot execute or write to the account. Approve the saved plan before running Build.",
-    { ...buildPlanSchema2, mode: import_zod80.z.literal("dry_run").optional(), preview: import_zod80.z.boolean().optional().describe("Prepare and save the executable preview using account reads only.") },
+    { ...buildPlanSchema2, mode: import_zod81.z.literal("dry_run").optional(), preview: import_zod81.z.boolean().optional().describe("Prepare and save the executable preview using account reads only.") },
     async ({ preview, ...args }) => {
       try {
         return preview ? await runBuildPlan({ ...args, mode: "dry_run", publishWorkflows: false }, true) : jsonResponse(validateBuildPlan(args.plan));
@@ -51778,9 +51958,9 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "revert_build",
     `Undo a Blueprint build: remove the objects a recorded apply_build_plan run CREATED in the current sub-account, and nothing else. PREVIEWS BY DEFAULT \u2014 with no confirm it writes nothing and returns a plain-English list of exactly what would be removed, grouped, plus what it will leave alone and why. Pass confirm:"DELETE" to actually remove them. Acts on one recorded run: pass runId, or omit it for the most recent run in the ACTIVE account (runs from any other sub-account are in a different journal and can never be reached from here). The one hard rule: it removes only objects the run's never-clobber ledger recorded as CREATED \u2014 anything the build merely BOUND to (a pipeline, tag, calendar or workflow that was already in the account) is never touched, so a build run against an account that already had assets cannot delete the client's own work. Deletes run in the exact reverse of the build order (workflows first, then templates, funnels and their pages, forms, calendars, custom values, tags, custom fields, pipelines) so nothing is removed while something else still points at it. A refusal from GoHighLevel never aborts the run: refusals are collected and reported at the end with what to do about each. After the deletes the account is re-read independently and each object is reported as confirmed gone or as accepted-but-unconfirmed. Idempotent: run it twice and the second run finds nothing left and says so. Two kinds are deliberately NEVER removed automatically \u2014 staff users (a person's login; removing it can strip them off appointments and assignments) and text-message templates (GoHighLevel exposes no delete for them) \u2014 both are listed with where to remove them by hand.`,
     {
-      runId: import_zod80.z.string().optional().describe('The recorded build run to undo (the `runId` apply_build_plan returned, e.g. "r-20260827T0142-9c1e"). Omit for the most recent run recorded for the active sub-account.'),
-      confirm: import_zod80.z.literal("DELETE").optional().describe('Omit for a preview (no writes at all). Pass "DELETE" to actually remove the objects the preview listed.'),
-      locationId: import_zod80.z.string().optional().describe("Target sub-account. MUST match the active location; if it differs the tool refuses (confirm/switch first).")
+      runId: import_zod81.z.string().optional().describe('The recorded build run to undo (the `runId` apply_build_plan returned, e.g. "r-20260827T0142-9c1e"). Omit for the most recent run recorded for the active sub-account.'),
+      confirm: import_zod81.z.literal("DELETE").optional().describe('Omit for a preview (no writes at all). Pass "DELETE" to actually remove the objects the preview listed.'),
+      locationId: import_zod81.z.string().optional().describe("Target sub-account. MUST match the active location; if it differs the tool refuses (confirm/switch first).")
     },
     async ({ runId, confirm: confirm2, locationId: locationId2 }) => {
       try {
@@ -51958,10 +52138,10 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "install_intake_form",
     `Install the Intake-to-Build client-intake form into the CURRENT GHL location (whatever get_current_location returns). Account-agnostic, zero hardcoded IDs. Creates any missing intake custom fields (idempotent \u2014 reused on re-run), then builds the form with the proven GHL form-builder field shapes and verifies it. Pass industry (e.g. "clinic", "med-spa") to install the TAILORED set \u2014 base questions + that industry's pack + the agency's own overlay (added / removed questions), the same set the intake interview asks \u2014 so no cockpit answer is left without a form field; omit it for the base set. Returns {formId, formUrl, fieldMap} \u2014 formUrl is the public link to send the client; keep fieldMap. NOTE: the answers come back on a CONTACT tagged "blueprint-intake", not as a form submission (GoHighLevel reports no submissions for forms created through the API), so read the contact and assemble the Brief from its fields. Pass dryRun:true to preview what would be created without writing. Pass formId to update an existing intake form in place (e.g. to add an industry's questions to a form installed without one) instead of creating a new one.`,
     {
-      dryRun: import_zod80.z.boolean().optional().describe("Preview the fields/form that would be created without writing anything."),
-      formId: import_zod80.z.string().optional().describe("Update this existing form in place instead of creating a new one."),
-      formName: import_zod80.z.string().optional().describe(`Form name. Defaults to "${INTAKE_FORM_NAME}".`),
-      industry: import_zod80.z.string().optional().describe(`Industry pack to install with the base set (${INDUSTRY_PACKS.map((p) => p.slug).join(", ")}). Omit for the base set only.`)
+      dryRun: import_zod81.z.boolean().optional().describe("Preview the fields/form that would be created without writing anything."),
+      formId: import_zod81.z.string().optional().describe("Update this existing form in place instead of creating a new one."),
+      formName: import_zod81.z.string().optional().describe(`Form name. Defaults to "${INTAKE_FORM_NAME}".`),
+      industry: import_zod81.z.string().optional().describe(`Industry pack to install with the base set (${INDUSTRY_PACKS.map((p) => p.slug).join(", ")}). Omit for the base set only.`)
     },
     async ({ dryRun, formId, formName, industry }) => {
       try {
@@ -52080,10 +52260,10 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
     "normalize_submission_to_brief",
     `Read an intake form submission and normalize it into a \xA74 Brief (briefSource:"intake_form"). ONLY works for a form whose submissions GoHighLevel actually reports, which in practice means a form built in GHL's own editor \u2014 for an intake form installed by install_intake_form it will answer "No submissions found" even after the client has filled it in, and the answers should be read from the contact tagged "blueprint-intake" instead. Pass the formId; by default the most recent submission is used (or pass submissionId). The intakeKey->customFieldId map is taken from fieldMap if provided (the install_intake_form output, most robust), otherwise reconstructed from the live form. Returns {brief, validation, submissionId} \u2014 validation flags any missing required fields (e.g. an incomplete submission).`,
     {
-      formId: import_zod80.z.string().describe("The intake form ID (from install_intake_form)."),
-      submissionId: import_zod80.z.string().optional().describe("Specific submission to normalize. Defaults to the most recent."),
-      fieldMap: import_zod80.z.record(import_zod80.z.string(), import_zod80.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
-      preset: import_zod80.z.string().optional().describe("Override the preset. Defaults to one derived from business_type.")
+      formId: import_zod81.z.string().describe("The intake form ID (from install_intake_form)."),
+      submissionId: import_zod81.z.string().optional().describe("Specific submission to normalize. Defaults to the most recent."),
+      fieldMap: import_zod81.z.record(import_zod81.z.string(), import_zod81.z.string()).optional().describe("intakeKey -> customFieldId map from install_intake_form. Reconstructed from the form if omitted."),
+      preset: import_zod81.z.string().optional().describe("Override the preset. Defaults to one derived from business_type.")
     },
     async ({ formId, submissionId, fieldMap, preset }) => {
       try {
@@ -52112,7 +52292,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           const formFull = await formApiRequest(bc, "GET", `/${formId}?locationId=${locationId2}`);
           resolvedMap = buildFieldMapFromFormFields(extractFormFields(formFull));
         }
-        const presetSchema2 = import_zod80.z.enum(["generic", "med_spa", "clinic_launch_a2p", "coach", "ecom", "agency"]).optional();
+        const presetSchema2 = import_zod81.z.enum(["generic", "med_spa", "clinic_launch_a2p", "coach", "ecom", "agency"]).optional();
         const presetParsed = presetSchema2.safeParse(preset);
         const brief = normalizeSubmissionToBrief({
           others,
@@ -52138,7 +52318,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod80, customFieldItemSchema, sleep6;
+var import_zod81, customFieldItemSchema, sleep6;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -52146,7 +52326,7 @@ var init_intake_to_build = __esm({
     init_workflow_repair_approval();
     init_build_contract();
     init_build_obligations();
-    import_zod80 = require("zod");
+    import_zod81 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
     init_form_builder();
@@ -52170,16 +52350,16 @@ var init_intake_to_build = __esm({
     init_plan_from_preset();
     init_executor();
     init_execute();
-    customFieldItemSchema = import_zod80.z.object({
-      id: import_zod80.z.string(),
-      name: import_zod80.z.string(),
-      fieldKey: import_zod80.z.string(),
-      dataType: import_zod80.z.string(),
-      model: import_zod80.z.string().optional(),
-      parentId: import_zod80.z.string().optional(),
-      position: import_zod80.z.number().optional(),
-      dateAdded: import_zod80.z.string().optional(),
-      picklistOptions: import_zod80.z.array(import_zod80.z.string()).optional()
+    customFieldItemSchema = import_zod81.z.object({
+      id: import_zod81.z.string(),
+      name: import_zod81.z.string(),
+      fieldKey: import_zod81.z.string(),
+      dataType: import_zod81.z.string(),
+      model: import_zod81.z.string().optional(),
+      parentId: import_zod81.z.string().optional(),
+      position: import_zod81.z.number().optional(),
+      dateAdded: import_zod81.z.string().optional(),
+      picklistOptions: import_zod81.z.array(import_zod81.z.string()).optional()
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
   }
@@ -52564,28 +52744,34 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
   const outDir = str3("out") ?? (0, import_node_path8.join)((0, import_node_os2.tmpdir)(), `design-run-${brand}-${medium}-${Date.now()}`);
   const model = str3("model") ?? DEFAULT_MODEL;
   io.out(`design-run: ${medium} for ${brand} on your Claude (${model}), up to ${passes} pass(es) \u2192 ${outDir}`);
-  const r = await runDesign({
-    brand,
-    brief: {
-      medium,
-      content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str3("audience"), job: str3("job"), ctaLabel: str3("cta"), proof: str3("proof") },
-      options: {
-        ...str3("mode") && { mode: str3("mode") },
-        ...a.slides && { slides: Number(a.slides) },
-        theme: str3("theme") ?? "both",
-        ...conversion ? { pageMode: "conversion" } : {}
-      },
-      ...conversion ? { conversion } : {}
-    },
-    ...gate2 ? { gate: gate2 } : {},
-    outDir,
-    model,
-    maxPasses: passes,
-    headless: !a.headed,
-    onPass: (p) => io.out(`  pass ${p.pass}: ${p.lint ? p.verdict === "PASS" ? "PASS" : `${p.verdict}${p.failed.length ? " \u2014 " + p.failed.join(" | ") : ""}` : `contract: ${p.lintProblems.join("; ")}`}  ($${p.costUsd.toFixed(3)}, ${Math.round(p.ms / 1e3)}s)`),
-    // Two verdicts, never one: craft is measured, copy is judged.
-    ...str3("grade-copy") ? { gradeCopyFor: str3("grade-copy") } : {}
-  });
+  let r;
+  try {
+    r = await runDesign({
+      brand,
+      brief: {
+        medium,
+        content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str3("audience"), job: str3("job"), ctaLabel: str3("cta"), proof: str3("proof") },
+        options: {
+          ...str3("mode") && { mode: str3("mode") },
+          ...a.slides && { slides: Number(a.slides) },
+          theme: str3("theme") ?? "both",
+          ...conversion ? { pageMode: "conversion" } : {}
+        },
+        ...conversion ? { conversion } : {}
+      },
+      ...gate2 ? { gate: gate2 } : {},
+      outDir,
+      model,
+      maxPasses: passes,
+      headless: !a.headed,
+      onPass: (p) => io.out(`  pass ${p.pass}: ${p.lint ? p.verdict === "PASS" ? "PASS" : `${p.verdict}${p.failed.length ? " \u2014 " + p.failed.join(" | ") : ""}` : `contract: ${p.lintProblems.join("; ")}`}  ($${p.costUsd.toFixed(3)}, ${Math.round(p.ms / 1e3)}s)`),
+      // Two verdicts, never one: craft is measured, copy is judged.
+      ...str3("grade-copy") ? { gradeCopyFor: str3("grade-copy") } : {}
+    });
+  } catch (error) {
+    io.err(error instanceof import_zod83.z.ZodError ? designValidationMessage(error) : error instanceof Error ? error.message : "The design run could not finish. Check the design details before trying again.");
+    return 2;
+  }
   io.out(summariseRun(r));
   if (r.file) io.out(`file:   ${r.file}`);
   if (r.report) io.out(`report: ${r.report}`);
@@ -52595,10 +52781,12 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
   }
   return r.ok ? 0 : 1;
 }
-var import_node_child_process6, import_node_path8, import_node_os2, USAGE2;
+var import_zod83, import_node_child_process6, import_node_path8, import_node_os2, USAGE2;
 var init_cli2 = __esm({
   "src/command-os/design/cli.ts"() {
     "use strict";
+    import_zod83 = require("zod");
+    init_brief_validation();
     import_node_child_process6 = require("node:child_process");
     import_node_path8 = require("node:path");
     import_node_os2 = require("node:os");
@@ -52695,7 +52883,7 @@ init_credentials_store();
 init_setup_tool();
 
 // src/tools/skills.ts
-var import_zod81 = require("zod");
+var import_zod82 = require("zod");
 
 // src/skill-installer.ts
 var import_node_crypto12 = require("node:crypto");
@@ -52831,7 +53019,7 @@ function registerSkillsTool(server2, packageVersion, baseDir) {
     "install_skills",
     "Install (or repair) the guided skills bundled with GHL Command \u2014 Blueprint (build a whole client account from one intake), Clone Site (clone and rebrand a live web page for a client, with a rights declaration and a pre-launch liability report), and GHL Reports (verified counts, lists, and weekly reports without token burn) \u2014 into your ~/.claude/skills/ so Claude can use them. Runs automatically on startup; call this to verify what is installed, or to re-install after deleting a skill. NEVER overwrites files you have edited (your version is kept and reported). Restart Claude after install for new skills to load.",
     {
-      targetDir: import_zod81.z.string().optional().describe("Override the install directory. Default: ~/.claude/skills")
+      targetDir: import_zod82.z.string().optional().describe("Override the install directory. Default: ~/.claude/skills")
     },
     async ({ targetDir }) => {
       try {