@elitedcs/ghl-mcp 3.83.8 → 3.83.9

package/dist/index.js

@@ -443,13 +443,13 @@ function setProtectedAccount(locationId2, name, file2 = accountRulesPath()) {
 function isWriteMethod(method) {
   return WRITE_METHODS.has(method.toUpperCase());
 }
-function locationIdsInRequest(path39, opts = {}) {
+function locationIdsInRequest(path40, opts = {}) {
   const found = /* @__PURE__ */ new Set();
   const add = (v) => {
     if (typeof v === "string" && v.trim()) found.add(v.trim());
     else if (Array.isArray(v)) v.forEach(add);
   };
-  const seg = /\/locations\/([^/?#]+)/i.exec(path39);
+  const seg = /\/locations\/([^/?#]+)/i.exec(path40);
   if (seg) add(decodeURIComponent(seg[1]));
   for (const src of [opts.params, opts.body]) {
     if (!src || typeof src !== "object") continue;
@@ -476,7 +476,7 @@ function protectedRefusalFor(locationId2, rulesFile) {
   const name = rules.protected[id];
   return name ? protectedRefusalMessage(name, false) : null;
 }
-function assertWriteAllowed(method, path39, opts = {}) {
+function assertWriteAllowed(method, path40, opts = {}) {
   if (!isWriteMethod(method)) return;
   let rules;
   try {
@@ -485,7 +485,7 @@ function assertWriteAllowed(method, path39, opts = {}) {
     throw new Error(UNREADABLE_RULES_MSG);
   }
   if (Object.keys(rules.protected).length === 0) return;
-  for (const id of locationIdsInRequest(path39, opts)) {
+  for (const id of locationIdsInRequest(path40, opts)) {
     const name = rules.protected[id];
     if (name) throw new Error(protectedRefusalMessage(name, false));
   }
@@ -552,6 +552,10 @@ function requestError(error) {
 function isGHLRequestError(error) {
   return error !== null && typeof error === "object" && requestErrors.has(error);
 }
+function keyHint(key) {
+  if (!key) return "NOT SET";
+  return key.length > 8 ? `ending \u2026${key.slice(-4)}` : "set";
+}
 var GHL_BASE_URL, GHL_API_VERSION, MAX_RETRIES, BASE_DELAY_MS, requestErrors, GHLClient;
 var init_ghl_client = __esm({
   "src/ghl-client.ts"() {
@@ -587,10 +591,10 @@ var init_ghl_client = __esm({
         this.apiKey = apiKey2;
       }
       /**
-       * Get the current API key (for diagnostics)
+       * Which key is loaded, for diagnostics — never the key itself. See keyHint.
        */
-      getApiKeyPrefix() {
-        return this.apiKey ? `${this.apiKey.substring(0, 12)}...` : "NOT SET";
+      getApiKeyHint() {
+        return keyHint(this.apiKey);
       }
       /**
        * Return the current API key. Only used internally by switch_location to
@@ -607,8 +611,8 @@ var init_ghl_client = __esm({
           Version: version || GHL_API_VERSION
         };
       }
-      buildUrl(path39, params) {
-        const url = new URL(path39, GHL_BASE_URL);
+      buildUrl(path40, params) {
+        const url = new URL(path40, GHL_BASE_URL);
         if (params) {
           for (const [key, value] of Object.entries(params)) {
             if (value !== void 0 && value !== null) {
@@ -618,18 +622,18 @@ var init_ghl_client = __esm({
         }
         return url.toString();
       }
-      async request(method, path39, options = {}, attempt = 0) {
+      async request(method, path40, options = {}, attempt = 0) {
         if (inBuildRequestScope() && method === "GET" && !inAccountReadAttempt()) {
-          return retryAccountRead(() => this.request(method, path39, options, attempt), `${method} ${path39}`);
+          return retryAccountRead(() => this.request(method, path40, options, attempt), `${method} ${path40}`);
         }
         if (attempt === 0) {
-          assertWriteAllowed(method, path39, {
+          assertWriteAllowed(method, path40, {
             params: options.params,
             body: options.body,
             defaultLocationId: this.defaultLocationId
           });
         }
-        const url = this.buildUrl(path39, options.params);
+        const url = this.buildUrl(path40, options.params);
         const headers = this.buildHeaders(options.version);
         const fetchOptions = {
           method,
@@ -647,14 +651,14 @@ var init_ghl_client = __esm({
         } catch (error) {
           clearTimeout(timeout);
           if (error instanceof Error && error.name === "AbortError") {
-            throw requestError(new Error(`Request timeout (30s): ${method} ${path39}`));
+            throw requestError(new Error(`Request timeout (30s): ${method} ${path40}`));
           }
           if (!inBuildRequestScope() && !options.noRetry && attempt < MAX_RETRIES) {
             const delay5 = computeRetryDelay(null, attempt, BASE_DELAY_MS);
-            process.stderr.write(`[ghl-mcp] Network error on ${method} ${path39}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+            process.stderr.write(`[ghl-mcp] Network error on ${method} ${path40}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
             await new Promise((r) => setTimeout(r, delay5));
-            return this.request(method, path39, options, attempt + 1);
+            return this.request(method, path40, options, attempt + 1);
           }
           throw requestError(error);
         } finally {
@@ -662,10 +666,10 @@ var init_ghl_client = __esm({
         }
         if (!inBuildRequestScope() && !options.noRetry && (response.status === 429 || response.status >= 500) && attempt < MAX_RETRIES) {
           const delay5 = computeRetryDelay(response.headers.get("Retry-After"), attempt, BASE_DELAY_MS);
-          process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path39}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+          process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path40}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
           await new Promise((r) => setTimeout(r, delay5));
-          return this.request(method, path39, options, attempt + 1);
+          return this.request(method, path40, options, attempt + 1);
         }
         if (!response.ok) {
           let errorBody = "";
@@ -674,7 +678,7 @@ var init_ghl_client = __esm({
           } catch {
           }
           throw requestError(new Error(
-            `GHL API Error ${response.status} ${response.statusText}: ${method} ${path39}
+            `GHL API Error ${response.status} ${response.statusText}: ${method} ${path40}
 ${errorBody}`
           ));
         }
@@ -691,20 +695,20 @@ ${errorBody}`
           return { message: text };
         }
       }
-      async get(path39, options) {
-        return this.request("GET", path39, options);
+      async get(path40, options) {
+        return this.request("GET", path40, options);
       }
-      async post(path39, options) {
-        return this.request("POST", path39, options);
+      async post(path40, options) {
+        return this.request("POST", path40, options);
       }
-      async put(path39, options) {
-        return this.request("PUT", path39, options);
+      async put(path40, options) {
+        return this.request("PUT", path40, options);
       }
-      async patch(path39, options) {
-        return this.request("PATCH", path39, options);
+      async patch(path40, options) {
+        return this.request("PATCH", path40, options);
       }
-      async delete(path39, options) {
-        return this.request("DELETE", path39, options);
+      async delete(path40, options) {
+        return this.request("DELETE", path40, options);
       }
       /**
        * Helper: resolves locationId from args or falls back to default
@@ -7467,11 +7471,11 @@ function registerEmailTools(server2, client) {
 function registerEmailBuilderInternalTools(server2, builderClient, publicClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function builderRequest2(method, path39, body) {
-    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path39}`, body ? { body } : {});
+  async function builderRequest2(method, path40, body) {
+    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path40}`, body ? { body } : {});
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path39}
+      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -11185,11 +11189,11 @@ async function readPageFull(client, pageId, fetcher = fetch) {
   const headers = await client.buildHeaders();
   headers.Origin = "https://app.gohighlevel.com";
   headers.Referer = "https://app.gohighlevel.com/";
-  const path39 = `/page/${pageId}?locationId=${client.locationId}`;
-  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path39}`, { method: "GET", headers });
+  const path40 = `/page/${pageId}?locationId=${client.locationId}`;
+  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path40}`, { method: "GET", headers });
   if (!response.ok) {
     const text2 = await response.text();
-    throw new Error(`Funnel API Error ${response.status}: GET ${path39}
+    throw new Error(`Funnel API Error ${response.status}: GET ${path40}
 ${text2}`);
   }
   const text = await response.text();
@@ -11248,20 +11252,20 @@ function registerFunnelBuilderTools(server2, builderClient) {
     return;
   }
   const client = builderClient;
-  async function internalGet(path39) {
-    return client.request("GET", path39);
+  async function internalGet(path40) {
+    return client.request("GET", path40);
   }
-  async function internalPost(path39, body) {
-    return client.request("POST", path39, body);
+  async function internalPost(path40, body) {
+    return client.request("POST", path40, body);
   }
-  async function internalPut(path39, body) {
-    return client.request("PUT", path39, body);
+  async function internalPut(path40, body) {
+    return client.request("PUT", path40, body);
   }
-  async function internalDelete(path39) {
-    return client.request("DELETE", path39);
+  async function internalDelete(path40) {
+    return client.request("DELETE", path40);
   }
-  async function funnelRequest(method, path39, body) {
-    const url = `https://backend.leadconnectorhq.com/funnels${path39}`;
+  async function funnelRequest(method, path40, body) {
+    const url = `https://backend.leadconnectorhq.com/funnels${path40}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, {
       ...sendsBody ? { body } : {},
@@ -11274,7 +11278,7 @@ function registerFunnelBuilderTools(server2, builderClient) {
     });
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Funnel API Error ${response.status}: ${method} ${path39}
+      throw new Error(`Funnel API Error ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -11850,17 +11854,17 @@ function requireCompany(api) {
   }
   return company;
 }
-async function call(api, path39, init) {
+async function call(api, path40, init) {
   const headers = { ...await api.headers(), Origin: "https://app.gohighlevel.com", Referer: "https://app.gohighlevel.com/" };
-  if (MUTATING_PATHS.some((mutating) => path39.startsWith(mutating))) {
-    assertWriteAllowed("POST", SVC + path39, { defaultLocationId: api.locationId() });
+  if (MUTATING_PATHS.some((mutating) => path40.startsWith(mutating))) {
+    assertWriteAllowed("POST", SVC + path40, { defaultLocationId: api.locationId() });
   }
   const doFetch = api.fetch ?? fetch;
-  const response = await doFetch(SVC + path39, { ...init, headers });
+  const response = await doFetch(SVC + path40, { ...init, headers });
   const text = await response.text();
   if (!response.ok) {
     const hint = response.status === 401 && /not authorized to access this company/i.test(text) ? " \u2014 the Firebase session is authenticated as a DIFFERENT company than the one that owns this sub-account. Run switch_location for this sub-account and try again." : response.status === 401 ? " \u2014 the template library needs the workflow-builder Firebase session, not the API key alone. Run enable_workflow_builder for this sub-account." : "";
-    throw new Error(`GoHighLevel template library ${response.status} on ${path39}${hint}
+    throw new Error(`GoHighLevel template library ${response.status} on ${path40}${hint}
 ${text.slice(0, 300)}`);
   }
   return text ? JSON.parse(text) : {};
@@ -16506,8 +16510,8 @@ function registerPageStudioTools(server2, builderClient) {
     }
     return { map: out, truncated };
   }
-  async function funnelRequest(method, path39, body) {
-    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path39}`, {
+  async function funnelRequest(method, path40, body) {
+    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path40}`, {
       ...body ? { body } : {},
       headers: {
         // Internal-API calls require the app origin (autosave needs the
@@ -16516,7 +16520,7 @@ function registerPageStudioTools(server2, builderClient) {
         Referer: "https://app.gohighlevel.com/"
       }
     });
-    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path39}
+    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path40}
 ${await response.text()}`);
     const text = await response.text();
     return text ? JSON.parse(text) : {};
@@ -17120,13 +17124,13 @@ function cleanFormDataForSave(formData) {
   const cleaned = dropRedundantCaseCollidingKeys(formData);
   return isJsonObject(cleaned) ? cleaned : formData;
 }
-async function formApiRequest(client, method, path39, body) {
-  const url = `https://backend.leadconnectorhq.com/forms${path39}`;
+async function formApiRequest(client, method, path40, body) {
+  const url = `https://backend.leadconnectorhq.com/forms${path40}`;
   const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
   const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
   if (!response.ok) {
     const text2 = await response.text();
-    throw new Error(`Form API Error ${response.status}: ${method} ${path39}
+    throw new Error(`Form API Error ${response.status}: ${method} ${path40}
 ${text2}`);
   }
   const text = await response.text();
@@ -17168,7 +17172,7 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     );
     return;
   }
-  const formRequest = (method, path39, body) => formApiRequest(client, method, path39, body);
+  const formRequest = (method, path40, body) => formApiRequest(client, method, path40, body);
   server2.tool(
     "get_form_full",
     "Get a form with full builder data: all fields (labels, types, IDs, validation), conditional logic, auto-responder config, email notification settings, styling, and version history. This is the internal API \u2014 it returns what the form builder UI shows, with one exception: where GoHighLevel stores the same value under two spellings of one key that differ only in case (it writes custom fields with both `Id` and `id`), only the lowercase one is returned. No value is lost, and the result can be edited and passed straight back to update_form.",
@@ -17302,10 +17306,10 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     },
     async ({ formId, limit, skip }) => {
       try {
-        let path39 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
-        if (formId) path39 += `&formId=${formId}`;
-        if (skip) path39 += `&skip=${skip}`;
-        const result = await formRequest("GET", path39);
+        let path40 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
+        if (formId) path40 += `&formId=${formId}`;
+        if (skip) path40 += `&skip=${skip}`;
+        const result = await formRequest("GET", path40);
         return {
           content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
         };
@@ -17713,13 +17717,13 @@ var init_funnel_qa = __esm({
 function registerPipelineBuilderTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function pipelineRequest(method, path39, body) {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path39}`;
+  async function pipelineRequest(method, path40, body) {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path40}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT" || method === "PATCH");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path39}
+      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -18586,9 +18590,9 @@ function planFromPayload(payload) {
   return payload?.plan === "command-os" ? "command-os" : "mcp";
 }
 function legacyDeviceFingerprint() {
-  const os7 = require("node:os");
+  const os8 = require("node:os");
   const crypto7 = require("node:crypto");
-  const raw = `${os7.hostname()}:${os7.userInfo().username}:${os7.platform()}:${os7.arch()}`;
+  const raw = `${os8.hostname()}:${os8.userInfo().username}:${os8.platform()}:${os8.arch()}`;
   return crypto7.createHash("sha256").update(raw).digest("hex").slice(0, 16);
 }
 function deviceFingerprint(opts) {
@@ -23188,6 +23192,97 @@ var init_build_obligations = __esm({
   }
 });
 
+// src/claude-locate.ts
+function unusableShimMessage(shim) {
+  return `Claude Code on this computer is an npm shim Command OS cannot start safely (${shim}). Install Claude Code with Anthropic's installer, then reopen the cockpit.`;
+}
+function runnable(p) {
+  try {
+    fs14.accessSync(p, fs14.constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function claudeFileNames(platform2, env) {
+  if (platform2 !== "win32") return ["claude"];
+  const exts = (env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").map((e) => e.trim().toLowerCase()).filter(Boolean);
+  return [...exts.map((ext) => `claude${ext}`), "claude"];
+}
+function isShim(file2) {
+  const ext = path13.extname(file2).toLowerCase();
+  return ext === ".cmd" || ext === ".bat";
+}
+function shimTarget(shim) {
+  let text;
+  try {
+    text = fs14.readFileSync(shim, "utf8");
+  } catch {
+    return null;
+  }
+  const refs = [...text.matchAll(/"%~?dp0%?\\([^"\r\n]+)"/g)].map((m) => m[1]);
+  const resolve12 = (rel) => path13.join(path13.dirname(shim), ...rel.split(/[\\/]/));
+  const script = refs.find((r) => /\.(?:js|cjs|mjs)$/i.test(r));
+  if (script) {
+    const p = resolve12(script);
+    return fs14.existsSync(p) ? { kind: "script", path: p } : null;
+  }
+  const program = refs.find((r) => /\.exe$/i.test(r) && !/(^|[\\/])node\.exe$/i.test(r));
+  if (program) {
+    const p = resolve12(program);
+    return fs14.existsSync(p) ? { kind: "program", path: p } : null;
+  }
+  return null;
+}
+function claudeBin(lookup = {}) {
+  const platform2 = lookup.platform ?? process.platform;
+  const env = lookup.env ?? process.env;
+  const home = lookup.home ?? os3.homedir();
+  const names = claudeFileNames(platform2, env);
+  const dirs = (env.PATH || env.Path || "").split(platform2 === "win32" ? ";" : ":").map((d) => platform2 === "win32" ? d.replace(/^"|"$/g, "") : d).filter(Boolean);
+  let unusableShim = null;
+  for (const dir of dirs) {
+    for (const name of names) {
+      const candidate = path13.join(dir, name);
+      if (!runnable(candidate)) continue;
+      if (platform2 === "win32" && isShim(candidate) && !shimTarget(candidate)) {
+        unusableShim ??= candidate;
+        continue;
+      }
+      return candidate;
+    }
+  }
+  const fallback = path13.join(home, ".local", "bin", platform2 === "win32" ? "claude.exe" : "claude");
+  if (runnable(fallback)) return fallback;
+  throw new Error(unusableShim ? unusableShimMessage(unusableShim) : NOT_FOUND_MESSAGE);
+}
+function claudeCommand(bin, args, lookup = {}) {
+  const platform2 = lookup.platform ?? process.platform;
+  if (platform2 !== "win32") return { command: bin, args };
+  let resolved2 = bin;
+  if (bin === "claude") {
+    try {
+      resolved2 = claudeBin(lookup);
+    } catch {
+      return { command: bin, args };
+    }
+  }
+  if (!isShim(resolved2)) return { command: resolved2, args };
+  const target = shimTarget(resolved2);
+  if (!target) return { command: resolved2, args };
+  return target.kind === "script" ? { command: lookup.execPath ?? process.execPath, args: [target.path, ...args] } : { command: target.path, args };
+}
+var fs14, os3, path13, NOT_FOUND_MESSAGE;
+var init_claude_locate = __esm({
+  "src/claude-locate.ts"() {
+    "use strict";
+    fs14 = __toESM(require("node:fs"));
+    os3 = __toESM(require("node:os"));
+    path13 = __toESM(require("node:path"));
+    NOT_FOUND_MESSAGE = "Claude Code CLI not found. Install it, then reopen the cockpit.";
+  }
+});
+
 // src/claude-cli.ts
 function parseVersion(text) {
   const m = /(\d+)\.(\d+)\.(\d+)/.exec(text || "");
@@ -23205,7 +23300,8 @@ function meetsFloor(version, floor = MIN_CLAUDE_VERSION) {
 }
 function readClaudeVersion(bin) {
   try {
-    const r = (0, import_child_process2.spawnSync)(bin, ["--version"], { encoding: "utf8", timeout: 15e3 });
+    const cmd = claudeCommand(bin, ["--version"]);
+    const r = (0, import_child_process2.spawnSync)(cmd.command, cmd.args, { encoding: "utf8", timeout: 15e3 });
     if (r.error || r.status !== 0) return null;
     const parsed2 = parseVersion(`${r.stdout ?? ""} ${r.stderr ?? ""}`);
     return parsed2 ? `${parsed2.major}.${parsed2.minor}.${parsed2.patch}` : null;
@@ -23218,21 +23314,21 @@ function tooOldMessage(found) {
   return `Command OS needs Claude Code ${MIN_CLAUDE_VERSION} or newer to run a stage. ${seen} Update Claude Code, then reopen Command OS. Nothing was started and nothing was spent.`;
 }
 function enginePath() {
-  return path13.join(appDataDir(), "command-os-engine.json");
+  return path14.join(appDataDir(), "command-os-engine.json");
 }
 function readEngineRecord(file2 = enginePath()) {
   try {
-    const r = JSON.parse(fs14.readFileSync(file2, "utf8"));
+    const r = JSON.parse(fs15.readFileSync(file2, "utf8"));
     return typeof r?.version === "string" ? r : null;
   } catch {
     return null;
   }
 }
 function writeEngineRecord(rec, file2 = enginePath()) {
-  fs14.mkdirSync(path13.dirname(file2), { recursive: true });
-  fs14.writeFileSync(file2, JSON.stringify(rec, null, 2), { mode: 384 });
+  fs15.mkdirSync(path14.dirname(file2), { recursive: true });
+  fs15.writeFileSync(file2, JSON.stringify(rec, null, 2), { mode: 384 });
   try {
-    fs14.chmodSync(file2, 384);
+    fs15.chmodSync(file2, 384);
   } catch {
   }
 }
@@ -23263,7 +23359,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
         resolve12(r);
       }
     };
-    const child = (0, import_child_process2.spawn)(bin, [
+    const cmd = claudeCommand(bin, [
       "-p",
       SMOKE_PROMPT,
       "--output-format",
@@ -23276,7 +23372,8 @@ function runSmoke(bin, timeoutMs = 9e4) {
       // model needs no tool to answer with one line.
       "--disallowedTools",
       "Bash,Read,Write,Edit,Glob,Grep,WebFetch,WebSearch,Task"
-    ], { stdio: ["ignore", "pipe", "pipe"] });
+    ]);
+    const child = (0, import_child_process2.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"] });
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
       done({ ok: false, error: "the engine check did not finish in time" });
@@ -23370,14 +23467,15 @@ async function ensureEngineReady(bin, onNote = () => {
   onNote(`Claude Code ${version} checked out${smoke.model ? ` (${smoke.model})` : ""}. Starting the step.`);
   return { ok: true, version, smoked: true, smokeCostUsd: smoke.costUsd, smokeModel: smoke.model };
 }
-var import_child_process2, fs14, path13, MIN_CLAUDE_VERSION, SMOKE_PROMPT;
+var import_child_process2, fs15, path14, MIN_CLAUDE_VERSION, SMOKE_PROMPT;
 var init_claude_cli = __esm({
   "src/claude-cli.ts"() {
     "use strict";
     import_child_process2 = require("child_process");
-    fs14 = __toESM(require("fs"));
-    path13 = __toESM(require("path"));
+    fs15 = __toESM(require("fs"));
+    path14 = __toESM(require("path"));
     init_credentials_store();
+    init_claude_locate();
     MIN_CLAUDE_VERSION = "2.1.0";
     SMOKE_PROMPT = 'Reply with exactly this one line and nothing else: RESULT: {"ok":true,"summary":"engine check"}';
   }
@@ -23545,17 +23643,17 @@ var init_stage_boundary = __esm({
 // src/plan-guide.ts
 function skillRoot() {
   const candidates = [
-    path14.join(__dirname, "..", "skills", "blueprint"),
+    path15.join(__dirname, "..", "skills", "blueprint"),
     // dist/ → package root
-    path14.join(__dirname, "..", "..", "skills", "blueprint"),
+    path15.join(__dirname, "..", "..", "skills", "blueprint"),
     // src/ in dev
-    path14.join(process.cwd(), "skills", "blueprint")
+    path15.join(process.cwd(), "skills", "blueprint")
   ];
-  return candidates.find((c) => fs15.existsSync(path14.join(c, "references", "build-plan-schema.md"))) ?? null;
+  return candidates.find((c) => fs16.existsSync(path15.join(c, "references", "build-plan-schema.md"))) ?? null;
 }
 function readIf(p, max) {
   try {
-    const t = fs15.readFileSync(p, "utf8");
+    const t = fs16.readFileSync(p, "utf8");
     return t.length > max ? t.slice(0, max) : t;
   } catch {
     return null;
@@ -23568,12 +23666,12 @@ function presetForIndustry(industry) {
 function loadPlanGuide(industry) {
   const root = skillRoot();
   if (!root) return "";
-  const schema = readIf(path14.join(root, "references", "build-plan-schema.md"), CAP_SCHEMA);
+  const schema = readIf(path15.join(root, "references", "build-plan-schema.md"), CAP_SCHEMA);
   const presetName = presetForIndustry(industry);
-  const preset = readIf(path14.join(root, "presets", `${presetName}.preset.json`), CAP_PRESET);
+  const preset = readIf(path15.join(root, "presets", `${presetName}.preset.json`), CAP_PRESET);
   const exampleFile = EXAMPLE_FOR_PRESET[presetName] ?? "sample-build-plan.json";
-  const example = readIf(path14.join(root, "examples", exampleFile), CAP_EXAMPLE);
-  const copyGuide = readIf(path14.join(root, "references", "copy-guide.md"), CAP_COPY_GUIDE);
+  const example = readIf(path15.join(root, "examples", exampleFile), CAP_EXAMPLE);
+  const copyGuide = readIf(path15.join(root, "references", "copy-guide.md"), CAP_COPY_GUIDE);
   if (!schema) return "";
   return `
 PLAN GUIDE \u2014 everything you need to write the build plan is below. Do NOT try to read files; you cannot.
@@ -23591,12 +23689,12 @@ ${example}
 ` : "") + `=== End of plan guide ===
 `;
 }
-var fs15, path14, PRESET_FOR_INDUSTRY, EXAMPLE_FOR_PRESET, COPY_INSTRUCTION, CALENDAR_INSTRUCTION, CAP_SCHEMA, CAP_PRESET, CAP_EXAMPLE, CAP_COPY_GUIDE;
+var fs16, path15, PRESET_FOR_INDUSTRY, EXAMPLE_FOR_PRESET, COPY_INSTRUCTION, CALENDAR_INSTRUCTION, CAP_SCHEMA, CAP_PRESET, CAP_EXAMPLE, CAP_COPY_GUIDE;
 var init_plan_guide = __esm({
   "src/plan-guide.ts"() {
     "use strict";
-    fs15 = __toESM(require("fs"));
-    path14 = __toESM(require("path"));
+    fs16 = __toESM(require("fs"));
+    path15 = __toESM(require("path"));
     PRESET_FOR_INDUSTRY = {
       "med-spa": "med-spa",
       clinic: "clinic",
@@ -26210,10 +26308,10 @@ function progressLine(e) {
   }
 }
 function defaultProgressDir(base = appDataDir()) {
-  return path15.join(base, "progress");
+  return path16.join(base, "progress");
 }
 function progressFilePath(dir, locationId2) {
-  return path15.join(dir, `${locationId2.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
+  return path16.join(dir, `${locationId2.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
 }
 function createProgressFileSink(locationId2, plan, dir = process.env[PROGRESS_DIR_ENV]) {
   if (!dir) return null;
@@ -26221,10 +26319,10 @@ function createProgressFileSink(locationId2, plan, dir = process.env[PROGRESS_DI
   const file2 = progressFilePath(dir, locationId2);
   const write = () => {
     try {
-      fs16.mkdirSync(dir, { recursive: true, mode: 448 });
+      fs17.mkdirSync(dir, { recursive: true, mode: 448 });
       const tmp = `${file2}.tmp`;
-      fs16.writeFileSync(tmp, JSON.stringify({ locationId: locationId2, progress: tracker.snapshot() }), { mode: 384 });
-      fs16.renameSync(tmp, file2);
+      fs17.writeFileSync(tmp, JSON.stringify({ locationId: locationId2, progress: tracker.snapshot() }), { mode: 384 });
+      fs17.renameSync(tmp, file2);
     } catch {
     }
   };
@@ -26242,7 +26340,7 @@ function createProgressFileSink(locationId2, plan, dir = process.env[PROGRESS_DI
 }
 function readProgressSnapshot(dir, locationId2) {
   try {
-    const raw = JSON.parse(fs16.readFileSync(progressFilePath(dir, locationId2), "utf8"));
+    const raw = JSON.parse(fs17.readFileSync(progressFilePath(dir, locationId2), "utf8"));
     const p = raw?.progress;
     if (!p || !Array.isArray(p.groups) || typeof p.updatedAt !== "string") return null;
     return p;
@@ -26263,12 +26361,12 @@ function tapPush(arr, onItem) {
   };
   Object.defineProperty(arr, "push", { value: tapped, writable: true, configurable: true, enumerable: false });
 }
-var fs16, path15, PROGRESS_GROUPS, GROUP_INDEX, TYPE_TO_GROUP, HALT_TYPE_TO_GROUP, CREATING_LINE, BuildProgressTracker, PROGRESS_DIR_ENV;
+var fs17, path16, PROGRESS_GROUPS, GROUP_INDEX, TYPE_TO_GROUP, HALT_TYPE_TO_GROUP, CREATING_LINE, BuildProgressTracker, PROGRESS_DIR_ENV;
 var init_build_progress = __esm({
   "src/build-progress.ts"() {
     "use strict";
-    fs16 = __toESM(require("fs"));
-    path15 = __toESM(require("path"));
+    fs17 = __toESM(require("fs"));
+    path16 = __toESM(require("path"));
     init_executor();
     init_credentials_store();
     PROGRESS_GROUPS = [
@@ -26406,10 +26504,10 @@ var init_build_progress = __esm({
 
 // src/build-journal.ts
 function journalDir(base = appDataDir()) {
-  return path16.join(base, "build-journal");
+  return path17.join(base, "build-journal");
 }
 function journalPath(locationId2, base) {
-  return path16.join(journalDir(base), `${locationId2}.jsonl`);
+  return path17.join(journalDir(base), `${locationId2}.jsonl`);
 }
 function newRunId(now = /* @__PURE__ */ new Date(), rand = defaultRand) {
   const iso2 = now.toISOString();
@@ -26469,16 +26567,16 @@ function buildRunRecord(input) {
 }
 function appendJournal(record, base) {
   const dir = journalDir(base);
-  fs17.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs18.mkdirSync(dir, { recursive: true, mode: 448 });
   const file2 = journalPath(record.locationId, base);
-  fs17.appendFileSync(file2, `${JSON.stringify(record)}
+  fs18.appendFileSync(file2, `${JSON.stringify(record)}
 `, { mode: 384 });
   return file2;
 }
 function readJournal(locationId2, base) {
   let raw;
   try {
-    raw = fs17.readFileSync(journalPath(locationId2, base), "utf8");
+    raw = fs18.readFileSync(journalPath(locationId2, base), "utf8");
   } catch {
     return [];
   }
@@ -26522,12 +26620,12 @@ function describeRuns(locationId2, base) {
     reverted: reverted.has(r.runId)
   })).reverse();
 }
-var fs17, path16;
+var fs18, path17;
 var init_build_journal = __esm({
   "src/build-journal.ts"() {
     "use strict";
-    fs17 = __toESM(require("fs"));
-    path16 = __toESM(require("path"));
+    fs18 = __toESM(require("fs"));
+    path17 = __toESM(require("path"));
     init_credentials_store();
   }
 });
@@ -26578,24 +26676,6 @@ function stageBlockedBy(stages, stage) {
   }
   return null;
 }
-function claudeBin() {
-  const fallback = path17.join(os3.homedir(), ".local", "bin", "claude");
-  const fromPath = (process.env.PATH || "").split(path17.delimiter).map((d) => path17.join(d, "claude")).find((p) => {
-    try {
-      fs18.accessSync(p, fs18.constants.X_OK);
-      return true;
-    } catch {
-      return false;
-    }
-  });
-  if (fromPath) return fromPath;
-  try {
-    fs18.accessSync(fallback, fs18.constants.X_OK);
-    return fallback;
-  } catch {
-  }
-  throw new Error("Claude Code CLI not found. Install it, then reopen the cockpit.");
-}
 function verifyReadbackPrompt(ctx) {
   return "\nAccount read-back has already run in code. These records decide existence, regardless of RESULT ok or dependencyChecks: " + JSON.stringify(ctx?.readback ?? []) + "\nDo not contradict any record. Keep dependencyChecks for evidence you establish yourself. The final report replaces the standing Checked and Not checked headings with the deterministic roll-call. Use the live URL on the funnel or page record, and the triggerTags and id on the speed-to-lead workflow record, for the existing fake-client check. Do not invent a URL or a trigger tag. Before calling verify_funnel, disclose that it submits a marked test lead and may fire this client's automations once. Preserve the existing verify_funnel submission and cleanup. If the funnel has no working page, report the reason that live proof could not run. Add liveProof:{ok,evidence} to RESULT. Set liveProof.ok true only when verify_funnel reports that the marked lead arrived and the test contact was deleted. Quote that result's evidence, including its contact id and cleanup result. Otherwise set liveProof.ok false with the check's own failure or the reason it could not run.\n";
 }
@@ -26662,11 +26742,12 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
       const progressDir = opts.onProgress ? defaultProgressDir() : void 0;
       if (progressDir) {
         try {
-          fs18.rmSync(progressFilePath(progressDir, locationId2), { force: true });
+          fs19.rmSync(progressFilePath(progressDir, locationId2), { force: true });
         } catch {
         }
       }
-      const child = (0, import_child_process3.spawn)(bin, buildClaudeArgs(spec, locationId2, locationName, opts.context), {
+      const cmd = claudeCommand(bin, buildClaudeArgs(spec, locationId2, locationName, opts.context));
+      const child = (0, import_child_process3.spawn)(cmd.command, cmd.args, {
         stdio: ["ignore", "pipe", "pipe"],
         env: { ...process.env, ...progressDir ? { [PROGRESS_DIR_ENV]: progressDir } : {}, GHL_COMMAND_STAGE: String(stage), GHL_COMMAND_INTAKE_HASH: opts.context?.inputHash ?? "" }
       });
@@ -26775,21 +26856,20 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
     });
   });
 }
-var import_child_process3, fs18, os3, path17, STAFF_NOTIFICATION_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES;
+var import_child_process3, fs19, STAFF_NOTIFICATION_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES;
 var init_stage_runner = __esm({
   "src/stage-runner.ts"() {
     "use strict";
     init_intake_notification();
     import_child_process3 = require("child_process");
-    fs18 = __toESM(require("fs"));
-    os3 = __toESM(require("os"));
-    path17 = __toESM(require("path"));
+    fs19 = __toESM(require("fs"));
     init_stage_boundary();
     init_plan_guide();
     init_question_set();
     init_build_progress();
     init_build_journal();
     init_claude_cli();
+    init_claude_locate();
     init_account_rules();
     init_account_rules();
     STAFF_NOTIFICATION_RULE = `Staff notifications ALWAYS stay in the workflow. Call get_users on THIS account and use only a user id it returns as the recipient. If get_users returns no users, leave the recipient EMPTY ("") \u2014 never use a user id from another account, from the agency, from an earlier conversation or from memory (a foreign id looks like it worked and notifies nobody). An empty recipient can make publish fail: then keep the workflow as a draft with the notification step still in it, and list that step in the RESULT issues as "waiting for a staff member: add one in Settings \u2192 My Staff, then pick them on the notification step and publish".`;
@@ -27254,17 +27334,17 @@ function runCostPath() {
   return path18.join(appDataDir(), "command-os-run-cost.jsonl");
 }
 function recordRunCost(rec, file2 = runCostPath()) {
-  fs19.mkdirSync(path18.dirname(file2), { recursive: true });
-  fs19.appendFileSync(file2, `${JSON.stringify(rec)}
+  fs20.mkdirSync(path18.dirname(file2), { recursive: true });
+  fs20.appendFileSync(file2, `${JSON.stringify(rec)}
 `, { mode: 384 });
   try {
-    fs19.chmodSync(file2, 384);
+    fs20.chmodSync(file2, 384);
   } catch {
   }
 }
 function readRunCosts(file2 = runCostPath()) {
   try {
-    return fs19.readFileSync(file2, "utf8").split("\n").filter((l) => l.trim()).map((l) => {
+    return fs20.readFileSync(file2, "utf8").split("\n").filter((l) => l.trim()).map((l) => {
       try {
         return JSON.parse(l);
       } catch {
@@ -27295,11 +27375,11 @@ function costLines(o) {
   if (o.engineCheckRan && o.engineCheckCostUsd === void 0) out.push("Claude readiness check: cost not reported.");
   return out;
 }
-var fs19, path18;
+var fs20, path18;
 var init_run_cost = __esm({
   "src/run-cost.ts"() {
     "use strict";
-    fs19 = __toESM(require("fs"));
+    fs20 = __toESM(require("fs"));
     path18 = __toESM(require("path"));
     init_credentials_store();
   }
@@ -27314,7 +27394,8 @@ function callClaudeRecorded(bin, argv, context, onCost = () => {
     let stderr = "";
     let facts = {};
     let settled = false;
-    const child = (0, import_node_child_process2.spawn)(bin, [...argv, "--output-format", "stream-json", "--verbose"], { stdio: ["ignore", "pipe", "pipe"] });
+    const cmd = claudeCommand(bin, [...argv, "--output-format", "stream-json", "--verbose"]);
+    const child = (0, import_node_child_process2.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"] });
     const timer = setTimeout(() => child.kill("SIGKILL"), 6 * 60 * 1e3);
     const finish3 = (ok) => {
       if (settled) return;
@@ -27365,6 +27446,7 @@ var init_claude_call = __esm({
     import_node_child_process2 = require("node:child_process");
     init_run_cost();
     init_claude_cli();
+    init_claude_locate();
   }
 });
 
@@ -28127,14 +28209,14 @@ function plansDir(base = appDataDir()) {
 }
 function savePlanRecord(rec, base) {
   const dir = plansDir(base);
-  fs20.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs21.mkdirSync(dir, { recursive: true, mode: 448 });
   const file2 = path19.join(dir, `${rec.locationId}.json`);
-  fs20.writeFileSync(file2, JSON.stringify({ ...rec, contentHash: contentHash(rec.plan), inputHash: rec.inputHash ?? process.env.GHL_COMMAND_INTAKE_HASH, dependencies: rec.dependencies ?? planDependencies(rec.plan) }, null, 2), { mode: 384 });
+  fs21.writeFileSync(file2, JSON.stringify({ ...rec, contentHash: contentHash(rec.plan), inputHash: rec.inputHash ?? process.env.GHL_COMMAND_INTAKE_HASH, dependencies: rec.dependencies ?? planDependencies(rec.plan) }, null, 2), { mode: 384 });
   return file2;
 }
 function readSavedPlan(locationId2, base) {
   try {
-    return JSON.parse(fs20.readFileSync(path19.join(plansDir(base), `${locationId2}.json`), "utf8"));
+    return JSON.parse(fs21.readFileSync(path19.join(plansDir(base), `${locationId2}.json`), "utf8"));
   } catch {
     return null;
   }
@@ -28157,11 +28239,11 @@ function planSummary(rec) {
   if (wfs.length) parts.push(`workflows: ${wfs.map((w) => `${w.name} (${Array.isArray(w.actions) ? w.actions.length : "?"} actions)`).join("; ")}`);
   return parts.join("\n") || "(plan has no recognisable sections)";
 }
-var fs20, path19;
+var fs21, path19;
 var init_plan_store = __esm({
   "src/plan-store.ts"() {
     "use strict";
-    fs20 = __toESM(require("fs"));
+    fs21 = __toESM(require("fs"));
     path19 = __toESM(require("path"));
     init_credentials_store();
     init_build_contract();
@@ -28179,7 +28261,8 @@ function askNoTools(prompt, opts = {}) {
       resolve12("");
       return;
     }
-    const child = (0, import_node_child_process3.spawn)(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY], { stdio: ["ignore", "pipe", "pipe"], env: { ...process.env } });
+    const cmd = claudeCommand(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY]);
+    const child = (0, import_node_child_process3.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"], env: { ...process.env } });
     const timeout = setTimeout(() => child.kill("SIGKILL"), opts.timeoutMs ?? 3 * 60 * 1e3);
     let lastText = "";
     let buffered = "";
@@ -28228,6 +28311,7 @@ var init_handoff_run = __esm({
     "use strict";
     import_node_child_process3 = require("node:child_process");
     init_stage_runner();
+    init_claude_locate();
     init_handoff_pack();
     CLIENT_SENTENCE_RULES = "Write for the business owner, not a developer. Complete sentences that end with a period; never trail off. One or two sentences per item, no more. Everyday words: say 'text messaging registration (A2P)' not 'A2P'; 'the calendar is not connected to Google or Outlook yet' not 'OAuth'; 'nothing was wrong' not 'status ok'. No tool names, no ids, no field names in code style, no JSON, no arrows. Keep the names of workflows, pipelines and forms because the client will recognise them. If a list is long, name the first few and say how many in total. State what is in place, or what is missing and why, plainly. An item marked 'done but not confirmed' has NOT been confirmed: never describe it as having happened or been observed; say what is still to be confirmed and how (for example, 'this is confirmed on the handoff call, when you complete one task in the account without help').";
     NO_TOOLS_DENY = "Bash,Write,Edit,MultiEdit,NotebookEdit,WebFetch,WebSearch,Task,TodoWrite,Read,Glob,Grep";
@@ -28392,7 +28476,7 @@ var init_client_capabilities = __esm({
       { key: "reputation", label: "Reputation and content", blurb: "Reviews, social posts and the blog." },
       { key: "health", label: "Health and handoff", blurb: "Proving it works, keeping it clean, and handing it over." }
     ];
-    N = (label, path39, params, key, nameField, version) => ({ label, path: path39, params, key, nameField, version });
+    N = (label, path40, params, key, nameField, version) => ({ label, path: path40, params, key, nameField, version });
     AI2 = "2021-04-15";
     CAPABILITIES = [
       // ── Set up ──────────────────────────────────────────────────────────────
@@ -28653,7 +28737,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.83.8",
+      version: "3.83.9",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -28752,17 +28836,17 @@ var require_package = __commonJS({
 });
 
 // src/package-version.ts
-var fs21, path20, bundledPkg, pkg;
+var fs22, path20, bundledPkg, pkg;
 var init_package_version = __esm({
   "src/package-version.ts"() {
     "use strict";
-    fs21 = __toESM(require("fs"));
+    fs22 = __toESM(require("fs"));
     path20 = __toESM(require("path"));
     bundledPkg = require_package();
     pkg = (() => {
       try {
         const onDisk = JSON.parse(
-          fs21.readFileSync(path20.resolve(__dirname, "..", "package.json"), "utf8")
+          fs22.readFileSync(path20.resolve(__dirname, "..", "package.json"), "utf8")
         );
         if (typeof onDisk.version === "string" && onDisk.version.length > 0) {
           return { version: onDisk.version };
@@ -29034,7 +29118,7 @@ function sanitizeEngagements(raw) {
 }
 function readClientEngagements(file2 = clientEngagementsPath()) {
   try {
-    const raw = JSON.parse(fs22.readFileSync(file2, "utf8"));
+    const raw = JSON.parse(fs23.readFileSync(file2, "utf8"));
     if (raw && typeof raw === "object") return sanitizeEngagements(raw);
   } catch {
   }
@@ -29061,7 +29145,7 @@ function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath
   if (!id || FORBIDDEN_KEY.has(id)) throw new Error("An id is required.");
   const stamp = () => {
     try {
-      return fs22.readFileSync(file2, "utf8");
+      return fs23.readFileSync(file2, "utf8");
     } catch {
       return "";
     }
@@ -29081,20 +29165,20 @@ function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath
   };
   const persist = (next) => {
     if (file2 === clientEngagementsPath() && !process.env[CLIENT_ENGAGEMENTS_ENV]) ensureAppDataDir();
-    fs22.mkdirSync(path21.dirname(file2), { recursive: true });
+    fs23.mkdirSync(path21.dirname(file2), { recursive: true });
     const tmp = `${file2}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}`;
     try {
-      fs22.writeFileSync(tmp, JSON.stringify(next, null, 2) + "\n", "utf-8");
+      fs23.writeFileSync(tmp, JSON.stringify(next, null, 2) + "\n", "utf-8");
       if (process.platform !== "win32") {
         try {
-          fs22.chmodSync(tmp, 384);
+          fs23.chmodSync(tmp, 384);
         } catch {
         }
       }
-      fs22.renameSync(tmp, file2);
+      fs23.renameSync(tmp, file2);
     } catch (e) {
       try {
-        fs22.unlinkSync(tmp);
+        fs23.unlinkSync(tmp);
       } catch {
       }
       throw e;
@@ -29166,11 +29250,11 @@ function monthlyFloor(roster, profile) {
     byKind
   };
 }
-var fs22, path21, CLIENT_ENGAGEMENTS_ENV, ENGAGEMENT_STATUSES, ENGAGEMENT_KINDS, DEFAULT_ENGAGEMENT_KIND, EMPTY2, MAX_NOTES, MAX_SOP2, MAX_CLIENTS, FORBIDDEN_KEY;
+var fs23, path21, CLIENT_ENGAGEMENTS_ENV, ENGAGEMENT_STATUSES, ENGAGEMENT_KINDS, DEFAULT_ENGAGEMENT_KIND, EMPTY2, MAX_NOTES, MAX_SOP2, MAX_CLIENTS, FORBIDDEN_KEY;
 var init_client_engagements = __esm({
   "src/client-engagements.ts"() {
     "use strict";
-    fs22 = __toESM(require("fs"));
+    fs23 = __toESM(require("fs"));
     path21 = __toESM(require("path"));
     init_credentials_store();
     init_field_sanitize();
@@ -29189,7 +29273,7 @@ var init_client_engagements = __esm({
 // src/agency-profile-page.ts
 function agencyProfilePageHtml(p, clients = [], seatToken = "") {
   const offers = (p.offers ?? []).map((o) => `${o.name}${o.priceFloor ? ` - ${o.priceFloor}${o.cadence === "monthly" ? "/mo" : ""}` : ""}`).join("\n");
-  const os7 = p.agencyOs ?? {};
+  const os8 = p.agencyOs ?? {};
   const lines = (xs) => (xs ?? []).join("\n");
   const sops = (p.delivery?.sops ?? []).join("\n");
   const staff = (p.staff ?? []).map((m) => [m.name, m.role, m.email].filter(Boolean).join(" \xB7 ")).join("\n");
@@ -29301,50 +29385,50 @@ ${cockpitHeaderHtml("agency")}
   <fieldset><legend>Your brand: who you are</legend>
    <p class="hint">Filled in once, in your own words. Used on the assessment report, in proposals, in every Claude session's opening brief, and by every Command OS build.</p>
    <label for="story">Your story: why this agency exists, in two or three sentences</label>
-   <textarea id="story" name="story" placeholder="I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026">${esc4(os7.story)}</textarea>
+   <textarea id="story" name="story" placeholder="I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026">${esc4(os8.story)}</textarea>
    <label for="method">Your method: how you get results, and what you call it</label>
-   <textarea id="method" name="method" placeholder="The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave">${esc4(os7.method)}</textarea>
+   <textarea id="method" name="method" placeholder="The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave">${esc4(os8.method)}</textarea>
    <div class="two">
-    <div><label for="voice">How you sound: three words, then a sentence</label><textarea id="voice" name="voice" placeholder="Direct, warm, clinical. Specifics over hype.">${esc4(os7.voice)}</textarea></div>
-    <div><label for="goals">Your goal for the next twelve months</label><textarea id="goals" name="goals" placeholder="$50k a month from 51 subscribers">${esc4(os7.goals)}</textarea></div>
+    <div><label for="voice">How you sound: three words, then a sentence</label><textarea id="voice" name="voice" placeholder="Direct, warm, clinical. Specifics over hype.">${esc4(os8.voice)}</textarea></div>
+    <div><label for="goals">Your goal for the next twelve months</label><textarea id="goals" name="goals" placeholder="$50k a month from 51 subscribers">${esc4(os8.goals)}</textarea></div>
    </div>
    <label for="values">What you stand for and what you refuse to do: one per line</label>
-   <textarea id="values" name="values" placeholder="Never a false all-clear&#10;No cold texting anyone who did not opt in">${esc4(lines(os7.values))}</textarea>
+   <textarea id="values" name="values" placeholder="Never a false all-clear&#10;No cold texting anyone who did not opt in">${esc4(lines(os8.values))}</textarea>
    <label for="proof">Proof you may state, with permission: one per line</label>
-   <textarea id="proof" name="proof" placeholder="Radiance Med Spa: 34 consults booked in one weekend (permission on file)">${esc4(lines(os7.proof))}</textarea>
+   <textarea id="proof" name="proof" placeholder="Radiance Med Spa: 34 consults booked in one weekend (permission on file)">${esc4(lines(os8.proof))}</textarea>
   </fieldset>
 
   <fieldset><legend>Ideal client: who you serve</legend>
    <label for="icaWho">Who they are: role, business, size, where</label>
-   <textarea id="icaWho" name="icaWho" placeholder="The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself">${esc4(os7.ica?.who)}</textarea>
+   <textarea id="icaWho" name="icaWho" placeholder="The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself">${esc4(os8.ica?.who)}</textarea>
    <div class="two">
-    <div><label for="icaPains">Their pains, worst first: one per line</label><textarea id="icaPains" name="icaPains">${esc4(lines(os7.ica?.pains))}</textarea></div>
-    <div><label for="icaDesires">What they want, most first: one per line</label><textarea id="icaDesires" name="icaDesires">${esc4(lines(os7.ica?.desires))}</textarea></div>
+    <div><label for="icaPains">Their pains, worst first: one per line</label><textarea id="icaPains" name="icaPains">${esc4(lines(os8.ica?.pains))}</textarea></div>
+    <div><label for="icaDesires">What they want, most first: one per line</label><textarea id="icaDesires" name="icaDesires">${esc4(lines(os8.ica?.desires))}</textarea></div>
    </div>
    <div class="two">
-    <div><label for="icaObjections">Why they say no: one per line</label><textarea id="icaObjections" name="icaObjections">${esc4(lines(os7.ica?.objections))}</textarea></div>
-    <div><label for="icaTriggers">What makes them buy now: one per line</label><textarea id="icaTriggers" name="icaTriggers">${esc4(lines(os7.ica?.triggers))}</textarea></div>
+    <div><label for="icaObjections">Why they say no: one per line</label><textarea id="icaObjections" name="icaObjections">${esc4(lines(os8.ica?.objections))}</textarea></div>
+    <div><label for="icaTriggers">What makes them buy now: one per line</label><textarea id="icaTriggers" name="icaTriggers">${esc4(lines(os8.ica?.triggers))}</textarea></div>
    </div>
    <div class="two">
-    <div><label for="icaVocabulary">Their own words for the problem: one per line</label><textarea id="icaVocabulary" name="icaVocabulary">${esc4(lines(os7.ica?.vocabulary))}</textarea></div>
-    <div><label for="icaHangouts">Where they read, listen and gather: one per line</label><textarea id="icaHangouts" name="icaHangouts">${esc4(lines(os7.ica?.hangouts))}</textarea></div>
+    <div><label for="icaVocabulary">Their own words for the problem: one per line</label><textarea id="icaVocabulary" name="icaVocabulary">${esc4(lines(os8.ica?.vocabulary))}</textarea></div>
+    <div><label for="icaHangouts">Where they read, listen and gather: one per line</label><textarea id="icaHangouts" name="icaHangouts">${esc4(lines(os8.ica?.hangouts))}</textarea></div>
    </div>
    <label for="icaVillains">What they have tried and blame: one per line</label>
-   <textarea id="icaVillains" name="icaVillains" placeholder="The last agency that charged $3,000 a month for two posts a week">${esc4(lines(os7.ica?.villains))}</textarea>
+   <textarea id="icaVillains" name="icaVillains" placeholder="The last agency that charged $3,000 a month for two posts a week">${esc4(lines(os8.ica?.villains))}</textarea>
   </fieldset>
 
   <fieldset><legend>The offer: what you promise</legend>
    <div class="two">
-    <div><label for="offerName">The offer's name</label><input id="offerName" name="offerName" value="${esc4(os7.offer?.name)}" placeholder="The Full Room"></div>
-    <div><label for="offerPrice">Price, and what it is per</label><input id="offerPrice" name="offerPrice" value="${esc4(os7.offer?.price)}" placeholder="$5,000 per event plus 30% of revenue"></div>
+    <div><label for="offerName">The offer's name</label><input id="offerName" name="offerName" value="${esc4(os8.offer?.name)}" placeholder="The Full Room"></div>
+    <div><label for="offerPrice">Price, and what it is per</label><input id="offerPrice" name="offerPrice" value="${esc4(os8.offer?.price)}" placeholder="$5,000 per event plus 30% of revenue"></div>
    </div>
    <label for="offerPromise">The promise: one sentence a prospect could repeat</label>
-   <textarea id="offerPromise" name="offerPromise" placeholder="A full room in one weekend, and a system that keeps booking after we leave">${esc4(os7.offer?.promise)}</textarea>
+   <textarea id="offerPromise" name="offerPromise" placeholder="A full room in one weekend, and a system that keeps booking after we leave">${esc4(os8.offer?.promise)}</textarea>
    <label for="offerStack">What is in it: one per line</label>
-   <textarea id="offerStack" name="offerStack" placeholder="The campaign page&#10;The AI receptionist&#10;The 30-day nurture">${esc4(lines(os7.offer?.valueStack))}</textarea>
+   <textarea id="offerStack" name="offerStack" placeholder="The campaign page&#10;The AI receptionist&#10;The 30-day nurture">${esc4(lines(os8.offer?.valueStack))}</textarea>
    <div class="two">
-    <div><label for="offerGuarantee">The guarantee, exactly as you would say it</label><textarea id="offerGuarantee" name="offerGuarantee">${esc4(os7.offer?.guarantee)}</textarea></div>
-    <div><label for="offerAccelerators">Why now: bonuses, deadlines, scarcity, one per line</label><textarea id="offerAccelerators" name="offerAccelerators">${esc4(lines(os7.offer?.accelerators))}</textarea></div>
+    <div><label for="offerGuarantee">The guarantee, exactly as you would say it</label><textarea id="offerGuarantee" name="offerGuarantee">${esc4(os8.offer?.guarantee)}</textarea></div>
+    <div><label for="offerAccelerators">Why now: bonuses, deadlines, scarcity, one per line</label><textarea id="offerAccelerators" name="offerAccelerators">${esc4(lines(os8.offer?.accelerators))}</textarea></div>
    </div>
   </fieldset>
 
@@ -31551,7 +31635,7 @@ function planLauncher(platform2, home, port = 7300, entry = installingEntry()) {
     const systemApps = "/Applications";
     let base = home;
     try {
-      fs23.accessSync(systemApps, fs23.constants.W_OK);
+      fs24.accessSync(systemApps, fs24.constants.W_OK);
       base = "";
     } catch {
     }
@@ -31628,7 +31712,7 @@ function planLauncher(platform2, home, port = 7300, entry = installingEntry()) {
 function launcherInstalled(port = 7300, platform2 = process.platform, home = os4.homedir()) {
   try {
     const plan = planLauncher(platform2, home, port, installingEntry());
-    return plan.files.every((f) => fs23.existsSync(f.path));
+    return plan.files.every((f) => fs24.existsSync(f.path));
   } catch {
     return false;
   }
@@ -31639,8 +31723,8 @@ function installLauncher(argv = []) {
   const plan = planLauncher(process.platform, os4.homedir(), port, installingEntry());
   try {
     for (const f of plan.files) {
-      fs23.mkdirSync(path22.dirname(f.path), { recursive: true });
-      fs23.writeFileSync(f.path, f.contents, { mode: f.executable ? 493 : 420 });
+      fs24.mkdirSync(path22.dirname(f.path), { recursive: true });
+      fs24.writeFileSync(f.path, f.contents, { mode: f.executable ? 493 : 420 });
     }
   } catch (e) {
     process.stderr.write(`
@@ -31660,16 +31744,66 @@ function installLauncher(argv = []) {
   ].join("\n"));
   return 0;
 }
-var fs23, os4, path22;
+var fs24, os4, path22;
 var init_launcher = __esm({
   "src/launcher.ts"() {
     "use strict";
-    fs23 = __toESM(require("fs"));
+    fs24 = __toESM(require("fs"));
     os4 = __toESM(require("os"));
     path22 = __toESM(require("path"));
   }
 });
 
+// src/npx-cache-check.ts
+function defaultNpxCacheDir(env = process.env, platform2 = process.platform, home = os5.homedir()) {
+  const configured = env.npm_config_cache?.trim();
+  const cache = configured ? configured : platform2 === "win32" ? path23.join(env.LOCALAPPDATA?.trim() || path23.join(home, "AppData", "Local"), "npm-cache") : path23.join(home, ".npm");
+  return path23.join(cache, "_npx");
+}
+function damagedNpxDownloads(npxDir) {
+  let entries;
+  try {
+    entries = fs25.readdirSync(npxDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const damaged = [];
+  const gone = (p) => {
+    try {
+      fs25.statSync(p);
+      return false;
+    } catch (e) {
+      return e.code === "ENOENT";
+    }
+  };
+  for (const entry of entries) {
+    const dir = path23.join(npxDir, entry.name);
+    const pkg2 = path23.join(dir, PACKAGE_SUBDIR);
+    try {
+      if (!fs25.statSync(dir).isDirectory() || !fs25.statSync(pkg2).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    if (gone(path23.join(dir, "package.json")) || gone(path23.join(pkg2, "package.json"))) damaged.push(dir);
+  }
+  return damaged.sort();
+}
+function damagedDownloadLine(dirs) {
+  if (dirs.length === 0) return null;
+  const one = dirs.length === 1;
+  return `${one ? "One earlier download" : "Earlier downloads"} of GHL Command on this computer ${one ? "is" : "are"} damaged, which makes Claude say "Connection closed" instead of starting it. Delete ${one ? "this folder" : "these folders"}, then start Claude again: ${dirs.join(" and ")}`;
+}
+var fs25, os5, path23, PACKAGE_SUBDIR;
+var init_npx_cache_check = __esm({
+  "src/npx-cache-check.ts"() {
+    "use strict";
+    fs25 = __toESM(require("node:fs"));
+    os5 = __toESM(require("node:os"));
+    path23 = __toESM(require("node:path"));
+    PACKAGE_SUBDIR = path23.join("node_modules", "@elitedcs", "ghl-mcp");
+  }
+});
+
 // src/config-installer.ts
 var config_installer_exports = {};
 __export(config_installer_exports, {
@@ -31687,44 +31821,45 @@ __export(config_installer_exports, {
 });
 function defaultIO() {
   return {
+    npxCacheDir: defaultNpxCacheDir(),
     out: (l) => process.stdout.write(l + "\n"),
     err: (l) => process.stderr.write(l + "\n"),
-    rename: (from, to) => fs24.renameSync(from, to),
+    rename: (from, to) => fs26.renameSync(from, to),
     sleep: (ms) => new Promise((r) => setTimeout(r, ms))
   };
 }
 function candidateConfigPaths(opts) {
   const platform2 = opts?.platform ?? process.platform;
-  const home = opts?.home ?? os5.homedir();
+  const home = opts?.home ?? os6.homedir();
   const file2 = "claude_desktop_config.json";
   const candidates = [];
   if (platform2 === "darwin") {
-    candidates.push(path23.join(home, "Library", "Application Support", "Claude", file2));
+    candidates.push(path24.join(home, "Library", "Application Support", "Claude", file2));
   } else if (platform2 === "win32") {
-    const appData = opts?.appData ?? process.env.APPDATA ?? path23.join(home, "AppData", "Roaming");
-    candidates.push(path23.join(appData, "Claude", file2));
-    const localAppData = opts?.localAppData ?? process.env.LOCALAPPDATA ?? path23.join(home, "AppData", "Local");
-    const packagesDir = path23.join(localAppData, "Packages");
+    const appData = opts?.appData ?? process.env.APPDATA ?? path24.join(home, "AppData", "Roaming");
+    candidates.push(path24.join(appData, "Claude", file2));
+    const localAppData = opts?.localAppData ?? process.env.LOCALAPPDATA ?? path24.join(home, "AppData", "Local");
+    const packagesDir = path24.join(localAppData, "Packages");
     try {
-      for (const entry of fs24.readdirSync(packagesDir)) {
+      for (const entry of fs26.readdirSync(packagesDir)) {
         if (entry.startsWith("Claude_")) {
-          candidates.push(path23.join(packagesDir, entry, "LocalCache", "Roaming", "Claude", file2));
+          candidates.push(path24.join(packagesDir, entry, "LocalCache", "Roaming", "Claude", file2));
         }
       }
     } catch {
     }
   } else {
-    candidates.push(path23.join(home, ".config", "Claude", file2));
+    candidates.push(path24.join(home, ".config", "Claude", file2));
   }
   return candidates;
 }
 function resolveConfigPath(explicitPath) {
   if (explicitPath) {
-    const p = path23.resolve(explicitPath);
-    return { configPath: p, exists: fs24.existsSync(p) };
+    const p = path24.resolve(explicitPath);
+    return { configPath: p, exists: fs26.existsSync(p) };
   }
   const candidates = candidateConfigPaths();
-  const existing = candidates.filter((c) => fs24.existsSync(c));
+  const existing = candidates.filter((c) => fs26.existsSync(c));
   if (existing.length > 1) {
     throw new InstallStop(
       EXIT_REFUSED,
@@ -31738,25 +31873,25 @@ function resolveConfigPath(explicitPath) {
   if (existing.length === 1) return { configPath: existing[0], exists: true };
   return { configPath: candidates[0], exists: false };
 }
-function resolveSymlinkPolicy(configPath, explicitPath, home = os5.homedir()) {
+function resolveSymlinkPolicy(configPath, explicitPath, home = os6.homedir()) {
   let st;
   try {
-    st = fs24.lstatSync(configPath);
+    st = fs26.lstatSync(configPath);
   } catch {
     return configPath;
   }
   if (!st.isSymbolicLink()) return configPath;
   let real;
   try {
-    real = fs24.realpathSync(configPath);
+    real = fs26.realpathSync(configPath);
   } catch {
     throw new InstallStop(
       EXIT_REFUSED,
       `${configPath} is a link that points to a file that does not exist. Fix or remove the link, or run again with --path to a real file. Nothing was changed.`
     );
   }
-  const rel = path23.relative(path23.resolve(home), real);
-  const outsideHome = rel.startsWith("..") || path23.isAbsolute(rel);
+  const rel = path24.relative(path24.resolve(home), real);
+  const outsideHome = rel.startsWith("..") || path24.isAbsolute(rel);
   if (outsideHome && !explicitPath) {
     throw new InstallStop(
       EXIT_REFUSED,
@@ -31766,8 +31901,8 @@ function resolveSymlinkPolicy(configPath, explicitPath, home = os5.homedir()) {
   return real;
 }
 function readConfigBytes(configPath) {
-  const bytes = fs24.readFileSync(configPath);
-  const stat = fs24.statSync(configPath);
+  const bytes = fs26.readFileSync(configPath);
+  const stat = fs26.statSync(configPath);
   if (bytes.length >= 2 && (bytes[0] === 255 && bytes[1] === 254 || bytes[0] === 254 && bytes[1] === 255)) {
     throw new InstallStop(
       EXIT_REFUSED,
@@ -31841,23 +31976,23 @@ function backupStamp(now) {
 }
 function chooseBackupPath(configPath, now = /* @__PURE__ */ new Date()) {
   const base = `${configPath}.bak-${backupStamp(now)}`;
-  if (!fs24.existsSync(base)) return base;
+  if (!fs26.existsSync(base)) return base;
   for (let i = 2; ; i++) {
     const candidate = `${base}-${i}`;
-    if (!fs24.existsSync(candidate)) return candidate;
+    if (!fs26.existsSync(candidate)) return candidate;
   }
 }
 function writeVerifiedBackup(configPath, originalBytes) {
   const backupPath = chooseBackupPath(configPath);
   try {
-    fs24.writeFileSync(backupPath, originalBytes);
-    const readBack = fs24.readFileSync(backupPath);
+    fs26.writeFileSync(backupPath, originalBytes);
+    const readBack = fs26.readFileSync(backupPath);
     if (!readBack.equals(originalBytes)) {
       throw new Error("backup read-back did not match");
     }
   } catch (e) {
     try {
-      fs24.rmSync(backupPath, { force: true });
+      fs26.rmSync(backupPath, { force: true });
     } catch {
     }
     throw new InstallStop(
@@ -31876,9 +32011,9 @@ function baselineOf(bytes, stat) {
 function assertNotStale(configPath, baseline) {
   let ok = false;
   try {
-    const st = fs24.statSync(configPath);
+    const st = fs26.statSync(configPath);
     if (st.size === baseline.size && st.mtimeMs === baseline.mtimeMs) {
-      ok = sha256(fs24.readFileSync(configPath)) === baseline.hash;
+      ok = sha256(fs26.readFileSync(configPath)) === baseline.hash;
     } else {
       ok = false;
     }
@@ -31893,14 +32028,14 @@ function assertNotStale(configPath, baseline) {
   }
 }
 async function atomicReplace(opts) {
-  const dir = path23.dirname(opts.configPath);
-  const tempPath = path23.join(dir, `.${path23.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto7.randomBytes)(4).toString("hex")}`);
-  const fd = fs24.openSync(tempPath, "w");
+  const dir = path24.dirname(opts.configPath);
+  const tempPath = path24.join(dir, `.${path24.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto7.randomBytes)(4).toString("hex")}`);
+  const fd = fs26.openSync(tempPath, "w");
   try {
-    fs24.writeFileSync(fd, opts.newBytes);
-    fs24.fsyncSync(fd);
+    fs26.writeFileSync(fd, opts.newBytes);
+    fs26.fsyncSync(fd);
   } finally {
-    fs24.closeSync(fd);
+    fs26.closeSync(fd);
   }
   try {
     for (let attempt = 0; ; attempt++) {
@@ -31925,21 +32060,27 @@ async function atomicReplace(opts) {
     }
   } catch (e) {
     try {
-      fs24.rmSync(tempPath, { force: true });
+      fs26.rmSync(tempPath, { force: true });
     } catch {
     }
     throw e;
   }
   try {
-    const dirFd = fs24.openSync(dir, "r");
+    const dirFd = fs26.openSync(dir, "r");
     try {
-      fs24.fsyncSync(dirFd);
+      fs26.fsyncSync(dirFd);
     } finally {
-      fs24.closeSync(dirFd);
+      fs26.closeSync(dirFd);
     }
   } catch {
   }
 }
+function reportDamagedDownloads(io) {
+  const line3 = damagedDownloadLine(damagedNpxDownloads(io.npxCacheDir));
+  if (!line3) return;
+  io.out("");
+  io.out(line3);
+}
 function successReport(io, args) {
   io.out("Added GHL Command to Claude Desktop.");
   io.out("");
@@ -31987,7 +32128,7 @@ async function runInstall(argv, ioOverride) {
   try {
     const resolved2 = resolveConfigPath(flags.path);
     const configPath = resolveSymlinkPolicy(resolved2.configPath, flags.path !== void 0);
-    const exists = fs24.existsSync(configPath);
+    const exists = fs26.existsSync(configPath);
     let read2 = null;
     let outcome;
     if (exists) {
@@ -31999,6 +32140,7 @@ async function runInstall(argv, ioOverride) {
     const { merged, keptServers, action } = outcome.tier === 3 ? { merged: { mcpServers: { [SERVER_KEY]: { command: DESIRED_ENTRY.command, args: [...DESIRED_ENTRY.args] } } }, keptServers: [], action: "added" } : mergeGhlEntry(outcome.root, flags.force === true);
     if (action === "identical") {
       io.out("GHL Command is already set up in Claude Desktop \u2014 nothing to do.");
+      reportDamagedDownloads(io);
       return EXIT_OK;
     }
     const newText = JSON.stringify(merged, null, 2) + "\n";
@@ -32014,10 +32156,11 @@ async function runInstall(argv, ioOverride) {
       if (exists) io.out(`Would back up: ${chooseBackupPath(configPath)}`);
       if (outcome.tier === 2) io.out("Would rewrite the file in a cleaner format (original kept as the backup).");
       if (outcome.tier === 3) io.out("Would write a fresh settings file (original kept as the backup).");
+      reportDamagedDownloads(io);
       return EXIT_OK;
     }
     const backupPath = exists && read2 ? writeVerifiedBackup(configPath, read2.bytes) : null;
-    if (!exists) fs24.mkdirSync(path23.dirname(configPath), { recursive: true });
+    if (!exists) fs26.mkdirSync(path24.dirname(configPath), { recursive: true });
     await atomicReplace({
       configPath,
       newBytes,
@@ -32025,6 +32168,7 @@ async function runInstall(argv, ioOverride) {
       io
     });
     successReport(io, { configPath, backupPath, keptServers, tier: outcome.tier, hadOriginal: exists });
+    reportDamagedDownloads(io);
     return EXIT_OK;
   } catch (e) {
     if (e instanceof InstallStop) {
@@ -32035,16 +32179,17 @@ async function runInstall(argv, ioOverride) {
     return EXIT_ABORTED;
   }
 }
-var fs24, os5, path23, import_node_crypto7, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
+var fs26, os6, path24, import_node_crypto7, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
 var init_config_installer = __esm({
   "src/config-installer.ts"() {
     "use strict";
-    fs24 = __toESM(require("node:fs"));
-    os5 = __toESM(require("node:os"));
-    path23 = __toESM(require("node:path"));
+    fs26 = __toESM(require("node:fs"));
+    os6 = __toESM(require("node:os"));
+    path24 = __toESM(require("node:path"));
     import_node_crypto7 = require("node:crypto");
     import_node_util = require("node:util");
     import_json5 = __toESM(require("json5"));
+    init_npx_cache_check();
     SERVER_KEY = "ghl";
     DESIRED_ENTRY = Object.freeze({
       command: "npx",
@@ -32074,9 +32219,9 @@ function errLine(msg3) {
 function preflightWritable() {
   try {
     const dir = ensureAppDataDir();
-    const probe = path24.join(dir, `.write-probe.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}`);
-    fs25.writeFileSync(probe, "ok");
-    fs25.unlinkSync(probe);
+    const probe = path25.join(dir, `.write-probe.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}`);
+    fs27.writeFileSync(probe, "ok");
+    fs27.unlinkSync(probe);
     return true;
   } catch (error) {
     errLine(`Config dir is not writable: ${error instanceof Error ? error.message : String(error)}`);
@@ -32264,7 +32409,7 @@ async function cmdRegisterAgencyKey(argv, registry2) {
     return EXIT_FS;
   }
   if (!confirmSaved(registry2)) return EXIT_FS;
-  process.stdout.write(`Registered agency key: ${apiKey2.substring(0, 12)}... \u2192 ${tokenRegistryPath()}
+  process.stdout.write(`Registered agency key (${keyHint(apiKey2)}) \u2192 ${tokenRegistryPath()}
 `);
   restartReminder();
   return EXIT_OK2;
@@ -32345,13 +32490,13 @@ async function runCli(subcommand, argv) {
       return EXIT_USAGE2;
   }
 }
-var import_node_util2, fs25, path24, import_crypto2, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
+var import_node_util2, fs27, path25, import_crypto2, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
 var init_cli = __esm({
   "src/cli.ts"() {
     "use strict";
     import_node_util2 = require("node:util");
-    fs25 = __toESM(require("fs"));
-    path24 = __toESM(require("path"));
+    fs27 = __toESM(require("fs"));
+    path25 = __toESM(require("path"));
     import_crypto2 = require("crypto");
     init_ghl_client();
     init_token_registry();
@@ -32877,11 +33022,11 @@ __export(intake_overlay_exports, {
   writeOverlay: () => writeOverlay
 });
 function overlayPath() {
-  return path25.join(appDataDir(), "intake-overlay.json");
+  return path26.join(appDataDir(), "intake-overlay.json");
 }
 function readOverlay() {
   try {
-    const raw = JSON.parse(fs26.readFileSync(overlayPath(), "utf8"));
+    const raw = JSON.parse(fs28.readFileSync(overlayPath(), "utf8"));
     if (raw && typeof raw === "object") return raw;
   } catch {
   }
@@ -32889,14 +33034,14 @@ function readOverlay() {
 }
 function writeOverlay(layer) {
   ensureAppDataDir();
-  fs26.writeFileSync(overlayPath(), JSON.stringify(layer, null, 2), { mode: 384 });
+  fs28.writeFileSync(overlayPath(), JSON.stringify(layer, null, 2), { mode: 384 });
 }
-var fs26, path25;
+var fs28, path26;
 var init_intake_overlay = __esm({
   "src/intake-overlay.ts"() {
     "use strict";
-    fs26 = __toESM(require("fs"));
-    path25 = __toESM(require("path"));
+    fs28 = __toESM(require("fs"));
+    path26 = __toESM(require("path"));
     init_credentials_store();
   }
 });
@@ -34135,11 +34280,11 @@ function recoverStuckStages(state) {
   return { state: { ...state, clients }, recovered };
 }
 function cockpitStatePath() {
-  return path26.join(appDataDir(), "cockpit-state.json");
+  return path27.join(appDataDir(), "cockpit-state.json");
 }
 function readCockpitState() {
   try {
-    const raw = JSON.parse(fs27.readFileSync(cockpitStatePath(), "utf8"));
+    const raw = JSON.parse(fs29.readFileSync(cockpitStatePath(), "utf8"));
     if (raw && raw.v === 1 && raw.clients && typeof raw.clients === "object") return raw;
   } catch {
   }
@@ -34147,7 +34292,7 @@ function readCockpitState() {
 }
 function writeCockpitState(state) {
   ensureAppDataDir();
-  fs27.writeFileSync(cockpitStatePath(), JSON.stringify(state, null, 2), { mode: 384 });
+  fs29.writeFileSync(cockpitStatePath(), JSON.stringify(state, null, 2), { mode: 384 });
 }
 function setStage(state, locationId2, stageIndex, status) {
   if (!Number.isInteger(stageIndex) || stageIndex < 0 || stageIndex >= STAGES2.length) throw new Error("bad stage index");
@@ -34424,7 +34569,7 @@ function notify(message) {
 `);
   try {
     ensureAppDataDir();
-    fs27.appendFileSync(path26.join(appDataDir(), "cockpit.log"), `[${(/* @__PURE__ */ new Date()).toISOString()}] ${message}
+    fs29.appendFileSync(path27.join(appDataDir(), "cockpit.log"), `[${(/* @__PURE__ */ new Date()).toISOString()}] ${message}
 `);
   } catch {
   }
@@ -34494,20 +34639,20 @@ function withCockpitShell(page, screen, extraHead = "") {
 function clientDocsDir(locationId2, base = appDataDir()) {
   const safeLoc = String(locationId2).replace(/[^A-Za-z0-9_-]/g, "");
   if (!safeLoc) throw new Error("no client");
-  return path26.join(base, "clients", safeLoc, "documents");
+  return path27.join(base, "clients", safeLoc, "documents");
 }
 function safeDocName(name) {
-  const cleaned = path26.basename(String(name ?? "")).replace(/[^A-Za-z0-9._ -]/g, "_").replace(/\s+/g, " ").trim();
-  const ext = path26.extname(cleaned).toLowerCase();
+  const cleaned = path27.basename(String(name ?? "")).replace(/[^A-Za-z0-9._ -]/g, "_").replace(/\s+/g, " ").trim();
+  const ext = path27.extname(cleaned).toLowerCase();
   if (!cleaned || cleaned.startsWith(".") || !DOC_EXTS.has(ext)) throw new Error("Only plain text (.txt, .md, .csv), .vtt and .srt files can be saved here.");
   const stem = cleaned.slice(0, cleaned.length - ext.length).slice(0, 120 - ext.length).trim();
   return `${stem || "document"}${ext}`;
 }
 function listClientDocs(locationId2, base = appDataDir()) {
   const dir = clientDocsDir(locationId2, base);
-  if (!fs27.existsSync(dir)) return [];
-  return fs27.readdirSync(dir).filter((f) => DOC_EXTS.has(path26.extname(f).toLowerCase())).map((f) => {
-    const st = fs27.statSync(path26.join(dir, f));
+  if (!fs29.existsSync(dir)) return [];
+  return fs29.readdirSync(dir).filter((f) => DOC_EXTS.has(path27.extname(f).toLowerCase())).map((f) => {
+    const st = fs29.statSync(path27.join(dir, f));
     return { name: f, bytes: st.size, savedAt: st.mtime.toISOString() };
   }).sort((a, b) => b.savedAt.localeCompare(a.savedAt));
 }
@@ -34525,7 +34670,7 @@ function readFailureText(e) {
 function logQuietly(message) {
   try {
     ensureAppDataDir();
-    fs27.appendFileSync(path26.join(appDataDir(), "cockpit.log"), `[${(/* @__PURE__ */ new Date()).toISOString()}] ${message}
+    fs29.appendFileSync(path27.join(appDataDir(), "cockpit.log"), `[${(/* @__PURE__ */ new Date()).toISOString()}] ${message}
 `);
   } catch {
   }
@@ -34598,40 +34743,40 @@ function newClientFailure(error, surface = "command-os", account2) {
 }
 function insideDir(dir, p) {
   try {
-    const real = fs27.realpathSync(p);
-    const base = fs27.realpathSync(dir);
-    return real === base || real.startsWith(base + path26.sep);
+    const real = fs29.realpathSync(p);
+    const base = fs29.realpathSync(dir);
+    return real === base || real.startsWith(base + path27.sep);
   } catch {
     return false;
   }
 }
 function uniqueDocName(dir, name) {
-  const ext = path26.extname(name), stem = name.slice(0, name.length - ext.length);
+  const ext = path27.extname(name), stem = name.slice(0, name.length - ext.length);
   let candidate = name;
-  for (let n = 2; fs27.existsSync(path26.join(dir, candidate)); n++) candidate = `${stem} (${n})${ext}`;
+  for (let n = 2; fs29.existsSync(path27.join(dir, candidate)); n++) candidate = `${stem} (${n})${ext}`;
   return candidate;
 }
 function writeDocAtomically(dir, name, bytes) {
-  fs27.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs29.mkdirSync(dir, { recursive: true, mode: 448 });
   const finalName = uniqueDocName(dir, name);
-  const tmp = path26.join(dir, `.${finalName}.${process.pid}.tmp`);
-  const fd = fs27.openSync(tmp, fs27.constants.O_WRONLY | fs27.constants.O_CREAT | fs27.constants.O_EXCL | (fs27.constants.O_NOFOLLOW ?? 0), 384);
+  const tmp = path27.join(dir, `.${finalName}.${process.pid}.tmp`);
+  const fd = fs29.openSync(tmp, fs29.constants.O_WRONLY | fs29.constants.O_CREAT | fs29.constants.O_EXCL | (fs29.constants.O_NOFOLLOW ?? 0), 384);
   try {
-    fs27.writeSync(fd, bytes);
-    fs27.fsyncSync(fd);
+    fs29.writeSync(fd, bytes);
+    fs29.fsyncSync(fd);
   } finally {
-    fs27.closeSync(fd);
+    fs29.closeSync(fd);
   }
-  const dest = path26.join(dir, finalName);
+  const dest = path27.join(dir, finalName);
   try {
-    if (fs27.lstatSync(dest).isSymbolicLink()) {
-      fs27.unlinkSync(tmp);
+    if (fs29.lstatSync(dest).isSymbolicLink()) {
+      fs29.unlinkSync(tmp);
       throw new Error("that name is taken by a link");
     }
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
-  fs27.renameSync(tmp, dest);
+  fs29.renameSync(tmp, dest);
   return finalName;
 }
 function readableAccount(locationId2, roster = currentRosterRef(), state = readCockpitState()) {
@@ -35880,8 +36025,23 @@ function cockpitHeader(req, name) {
   const value = req.headers[name];
   return Array.isArray(value) ? value.join(",") : value ?? "";
 }
+function headerFields(req, name) {
+  if (req instanceof http.IncomingMessage || "rawHeaders" in req) {
+    const raw = req.rawHeaders;
+    if (!Array.isArray(raw)) return [];
+    const values = [];
+    for (let i = 0; i + 1 < raw.length; i += 2) {
+      if (typeof raw[i] === "string" && raw[i].toLowerCase() === name) values.push(String(raw[i + 1]));
+    }
+    return values;
+  }
+  const value = req.headers[name];
+  return value === void 0 ? [] : Array.isArray(value) ? value : [value];
+}
 function isAllowedCockpitHost(req, port) {
-  const host = cockpitHeader(req, "host").toLowerCase();
+  const hosts = headerFields(req, "host");
+  if (hosts.length !== 1) return false;
+  const host = hosts[0].toLowerCase();
   return host === `127.0.0.1:${port}` || host === `localhost:${port}`;
 }
 function mayServeSeat(req, port) {
@@ -35898,8 +36058,10 @@ function checkCockpitPath(req) {
   return null;
 }
 function checkCockpitOrigin(req, port) {
-  const origin = cockpitHeader(req, "origin").toLowerCase();
-  if (req.headers.origin !== void 0 && origin !== `http://127.0.0.1:${port}` && origin !== `http://localhost:${port}`) {
+  const origins = headerFields(req, "origin");
+  if (origins.length === 0) return null;
+  const origin = origins.length === 1 ? origins[0].toLowerCase() : "";
+  if (origin !== `http://127.0.0.1:${port}` && origin !== `http://localhost:${port}`) {
     return { status: 403, error: "cross-origin request rejected" };
   }
   return null;
@@ -35924,7 +36086,8 @@ function cockpitGate(req, seatToken, port) {
   if (denied) return denied;
   const pathname = cockpitPath(req);
   if (SEAT_GUARDED_READS.includes(pathname) || pathname === "/api/design" || pathname.startsWith("/api/design/")) {
-    if (cockpitHeader(req, "sec-fetch-site").toLowerCase() === "cross-site") {
+    const sites = headerFields(req, "sec-fetch-site").map((v) => v.trim().toLowerCase());
+    if (sites.length > 1 || sites.length === 1 && sites[0] !== "same-origin" && sites[0] !== "none") {
       return { status: 403, error: "cross-site request rejected" };
     }
     return checkCockpitOrigin(req, port) ?? checkSeatToken({ method: "POST", headers: req.headers }, seatToken);
@@ -35961,7 +36124,7 @@ async function runDashboard(argv) {
   if (await cockpitAlreadyRunning(port)) {
     openBrowser(port);
     process.stderr.write(`
-  Command OS is already running. Opening http://localhost:${port}
+  Command OS is already running. Opening localhost:${port}
 
 `);
     return 0;
@@ -36266,8 +36429,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           if (!bytes.length) throw new Error("that file is empty");
           if (bytes.length > DOC_MAX_BYTES) throw new Error("that file is over 20 MB");
           const dir = clientDocsDir(args.locationId);
-          fs27.mkdirSync(dir, { recursive: true, mode: 448 });
-          if (!insideDir(path26.join(appDataDir(), "clients"), dir)) throw new Error("This client's documents folder is not where it should be, so nothing was saved.");
+          fs29.mkdirSync(dir, { recursive: true, mode: 448 });
+          if (!insideDir(path27.join(appDataDir(), "clients"), dir)) throw new Error("This client's documents folder is not where it should be, so nothing was saved.");
           const saved = writeDocAtomically(dir, name, bytes);
           res.end(JSON.stringify({ ok: true, name: saved, files: listClientDocs(args.locationId) }));
         } catch (e) {
@@ -36614,10 +36777,10 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             if (args.file) {
               const name = safeDocName(args.file);
               const dir = clientDocsDir(args.locationId);
-              const p = path26.join(dir, name);
-              if (!fs27.existsSync(p)) throw new Error("that document is not saved for this client");
-              if (fs27.lstatSync(p).isSymbolicLink() || !insideDir(dir, p)) throw new Error("that document is not saved for this client");
-              const text = fs27.readFileSync(p, "utf8");
+              const p = path27.join(dir, name);
+              if (!fs29.existsSync(p)) throw new Error("that document is not saved for this client");
+              if (fs29.lstatSync(p).isSymbolicLink() || !insideDir(dir, p)) throw new Error("that document is not saved for this client");
+              const text = fs29.readFileSync(p, "utf8");
               if (text.length > 6e4) throw new Error("The limit is 60,000 characters. Paste an excerpt or shorten this text file.");
               fileSource = { kind: "text", text };
             }
@@ -36625,7 +36788,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             let recorderPatterns = [];
             if (source.kind === "recorder") {
               recorderPatterns = await new Promise((resolve12) => {
-                const ls = (0, import_child_process5.spawn)(claudeBin(), ["mcp", "list"], { stdio: ["ignore", "pipe", "ignore"] });
+                const mcpList = claudeCommand(claudeBin(), ["mcp", "list"]);
+                const ls = (0, import_child_process5.spawn)(mcpList.command, mcpList.args, { stdio: ["ignore", "pipe", "ignore"] });
                 let buf = "";
                 ls.stdout.on("data", (d) => {
                   buf += d.toString();
@@ -36690,14 +36854,14 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     }
     if (req.method === "GET" && /^\/brand\/[a-z0-9-]+\/screenshot\.png$/.test(url)) {
       const slug3 = url.split("/")[2];
-      const file2 = path26.join(brandDir(slug3), "screenshot.png");
-      if (!fs27.existsSync(file2)) {
+      const file2 = path27.join(brandDir(slug3), "screenshot.png");
+      if (!fs29.existsSync(file2)) {
         res.writeHead(404);
         res.end();
         return;
       }
       res.writeHead(200, { "Content-Type": "image/png", "Cache-Control": "no-store" });
-      res.end(fs27.readFileSync(file2));
+      res.end(fs29.readFileSync(file2));
       return;
     }
     if (req.method === "GET" && /^\/brand\/[a-z0-9-]+$/.test(url)) {
@@ -36706,7 +36870,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         const dna = houseLooks().find((d) => d.slug === slug3) ?? readBrand(slug3);
         const dir = brandExists(slug3) ? brandDir(slug3) : void 0;
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
-        res.end(brandCardHtml(dna, { screenshot: dir ? fs27.existsSync(path26.join(dir, "screenshot.png")) : false, dir, seatToken: mayServeSeat(req, port) ? seatToken : "" }));
+        res.end(brandCardHtml(dna, { screenshot: dir ? fs29.existsSync(path27.join(dir, "screenshot.png")) : false, dir, seatToken: mayServeSeat(req, port) ? seatToken : "" }));
       } catch (e) {
         res.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
         res.end(e.message);
@@ -36868,7 +37032,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       }
       try {
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-        res.end(fs27.readFileSync(localCopyPath(locationId2), "utf8"));
+        res.end(fs29.readFileSync(localCopyPath(locationId2), "utf8"));
       } catch {
         res.end("The handoff is not prepared yet. Run Verify first.");
       }
@@ -37434,7 +37598,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
   }
   const roster = currentRoster();
   process.stderr.write(`
-  Command OS cockpit running: http://localhost:${port}
+  Command OS cockpit running: localhost:${port}
   ${roster.length} client${roster.length === 1 ? "" : "s"} on the board. Ctrl-C to stop.
 
 `);
@@ -37457,7 +37621,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     process.on("SIGTERM", stop);
   });
 }
-var import_node_util4, fs27, path26, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS;
+var import_node_util4, fs29, path27, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
@@ -37476,8 +37640,8 @@ var init_dashboard = __esm({
     init_handoff_snapshot();
     init_member_progress();
     init_build_obligations();
-    fs27 = __toESM(require("fs"));
-    path26 = __toESM(require("path"));
+    fs29 = __toESM(require("fs"));
+    path27 = __toESM(require("path"));
     http = __toESM(require("http"));
     import_child_process4 = require("child_process");
     init_credentials_store();
@@ -37525,6 +37689,7 @@ var init_dashboard = __esm({
     init_blueprint_review();
     init_intake_overlay();
     init_stage_runner();
+    init_claude_locate();
     import_child_process5 = require("child_process");
     init_ghl_client();
     init_client_capabilities();
@@ -37677,7 +37842,7 @@ GHL Command version: v${mcpVersion}` : "";
                 type: "text",
                 text: `Current location: ${loc?.name || "Unknown"}
 ID: ${client.defaultLocationId}
-API Key: ${client.getApiKeyPrefix()}
+API key: ${client.getApiKeyHint()}
 Address: ${loc?.address || "N/A"}
 Email: ${loc?.email || "N/A"}
 Token registry: ${registeredCount} location(s) registered${versionLine}`
@@ -37703,7 +37868,7 @@ Token registry: ${registeredCount} location(s) registered${versionLine}`
     },
     async ({ locationId: locationId2 }) => withSwitchLock(async () => {
       const previousId = client.defaultLocationId;
-      const previousKeyPrefix = client.getApiKeyPrefix();
+      const previousKeyHint = client.getApiKeyHint();
       const previousApiKey = client.getApiKey();
       const previousBuilderApiKey = builderClient?.getApiKey();
       try {
@@ -37736,7 +37901,7 @@ Token registry: ${registeredCount} location(s) registered${versionLine}`
         const protectedLine = protectedName ? `
 
 \u{1F512} ${protectedName} is on this machine's protected list. You can read and report on it; nothing here can be created, changed or deleted, and no approval overrides that.` : "";
-        const keyStatus = keySwapped ? `API key swapped: ${previousKeyPrefix} \u2192 ${client.getApiKeyPrefix()}` : `API key unchanged (${client.getApiKeyPrefix()})${!registry2?.getToken(locationId2) ? " \u2014 consider using register_location to add this location's key" : ""}`;
+        const keyStatus = keySwapped ? `API key swapped: ${previousKeyHint} \u2192 ${client.getApiKeyHint()}` : `API key unchanged (${client.getApiKeyHint()})${!registry2?.getToken(locationId2) ? " \u2014 consider using register_location to add this location's key" : ""}`;
         return {
           content: [
             {
@@ -37840,7 +38005,7 @@ Make sure:
         content: [
           {
             type: "text",
-            text: `Agency key ${hadKey ? "replaced" : "registered"}: ${apiKey2.substring(0, 12)}...
+            text: `Agency key ${hadKey ? "replaced" : "registered"} (${keyHint(apiKey2)}).
 Saved to the token registry.
 
 Agency-wide tools now available: list_snapshots, create_snapshot_share_link, and list_available_locations (across all sub-accounts).`
@@ -38130,7 +38295,7 @@ ${lines.join("\n")}
       }
       return { content: [{
         type: "text",
-        text: `Created ${args.name} (${outcome.locationId}). ` + (outcome.snapshotId ? `Snapshot ${outcome.snapshotId} is loading. GoHighLevel applies its assets over the next minute or two. ` : "No snapshot loaded. ") + (outcome.registered ? "Continue with its intake in GHL Command. " : "In this sub-account, create a Private Integration key in Settings. Register it in GHL Command with its key. ") + `Open http://localhost:7300/new#client=${encodeURIComponent(outcome.locationId)}.`
+        text: `Created ${args.name} (${outcome.locationId}). ` + (outcome.snapshotId ? `Snapshot ${outcome.snapshotId} is loading. GoHighLevel applies its assets over the next minute or two. ` : "No snapshot loaded. ") + (outcome.registered ? "Continue with its intake in GHL Command. " : "In this sub-account, create a Private Integration key in Settings. Register it in GHL Command with its key. ") + `Open localhost:7300/new#client=${encodeURIComponent(outcome.locationId)}.`
       }] };
     }
   );
@@ -39430,13 +39595,13 @@ function buildContactSmartListBody(args) {
 function registerSmartListTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function smartListRequest(method, path39, body) {
-    const url = `${SMARTLIST_BASE}${path39}`;
+  async function smartListRequest(method, path40, body) {
+    const url = `${SMARTLIST_BASE}${path40}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path39}
+      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -39665,11 +39830,11 @@ var init_smart_lists = __esm({
 function registerReputationTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function reputationRequest(method, path39) {
-    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path39}`);
+  async function reputationRequest(method, path40) {
+    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path40}`);
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Reputation API Error ${response.status}: ${method} ${path39}
+      throw new Error(`Reputation API Error ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -39807,11 +39972,11 @@ var init_email_campaigns = __esm({
 function registerMembershipTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function membershipRequest(path39, method = "GET", body) {
-    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path39}`, body ? { body } : {});
+  async function membershipRequest(path40, method = "GET", body) {
+    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path40}`, body ? { body } : {});
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Membership API Error ${response.status}: ${method} ${path39}
+      throw new Error(`Membership API Error ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -40004,21 +40169,21 @@ function isAlreadyExistsError(message) {
 }
 function registerTemplateDeployerTools(server2, client) {
   const builderClient = WorkflowBuilderClient.fromEnv();
-  const templatesDir = path27.resolve(__dirname, "..", "templates");
+  const templatesDir = path28.resolve(__dirname, "..", "templates");
   function validateTemplatePath(templateFile) {
-    const resolved2 = path27.resolve(templateFile);
-    const realPath = fs28.existsSync(resolved2) ? fs28.realpathSync(resolved2) : resolved2;
+    const resolved2 = path28.resolve(templateFile);
+    const realPath = fs30.existsSync(resolved2) ? fs30.realpathSync(resolved2) : resolved2;
     const allowedDirs = [
       templatesDir,
-      path27.resolve(process.cwd(), "templates"),
-      path27.resolve(__dirname, "..", "..", "templates")
-    ].map((d) => fs28.existsSync(d) ? fs28.realpathSync(d) : d);
-    const isAllowed = allowedDirs.some((dir) => realPath.startsWith(dir + path27.sep));
+      path28.resolve(process.cwd(), "templates"),
+      path28.resolve(__dirname, "..", "..", "templates")
+    ].map((d) => fs30.existsSync(d) ? fs30.realpathSync(d) : d);
+    const isAllowed = allowedDirs.some((dir) => realPath.startsWith(dir + path28.sep));
     if (!isAllowed) {
       throw new Error(`Template file must be inside a templates/ directory. Got: ${realPath}`);
     }
-    if (path27.relative(allowedDirs[0], realPath).startsWith("..")) {
-      const otherMatch = allowedDirs.slice(1).some((d) => !path27.relative(d, realPath).startsWith(".."));
+    if (path28.relative(allowedDirs[0], realPath).startsWith("..")) {
+      const otherMatch = allowedDirs.slice(1).some((d) => !path28.relative(d, realPath).startsWith(".."));
       if (!otherMatch) {
         throw new Error(`Template path escapes allowed directory.`);
       }
@@ -40033,26 +40198,26 @@ function registerTemplateDeployerTools(server2, client) {
       try {
         const dirs = [
           templatesDir,
-          path27.resolve(process.cwd(), "templates"),
-          path27.resolve(__dirname, "..", "..", "templates")
+          path28.resolve(process.cwd(), "templates"),
+          path28.resolve(__dirname, "..", "..", "templates")
         ];
         const templates = [];
         const seen = /* @__PURE__ */ new Set();
         for (const dir of dirs) {
-          if (!fs28.existsSync(dir)) continue;
-          const files = fs28.readdirSync(dir).filter((f) => f.endsWith(".json"));
+          if (!fs30.existsSync(dir)) continue;
+          const files = fs30.readdirSync(dir).filter((f) => f.endsWith(".json"));
           for (const file2 of files) {
-            const full = path27.join(dir, file2);
+            const full = path28.join(dir, file2);
             let real;
             try {
-              real = fs28.realpathSync(full);
+              real = fs30.realpathSync(full);
             } catch {
               continue;
             }
             if (seen.has(real)) continue;
             seen.add(real);
             try {
-              const content = JSON.parse(fs28.readFileSync(full, "utf-8"));
+              const content = JSON.parse(fs30.readFileSync(full, "utf-8"));
               if (typeof content.templateName !== "string" || !content.templateName) continue;
               const parsed2 = TemplateSchema.safeParse(content);
               templates.push({
@@ -40089,7 +40254,7 @@ function registerTemplateDeployerTools(server2, client) {
     async ({ templateFile }) => {
       try {
         const safePath = validateTemplatePath(templateFile);
-        const content = JSON.parse(fs28.readFileSync(safePath, "utf-8"));
+        const content = JSON.parse(fs30.readFileSync(safePath, "utf-8"));
         return {
           content: [
             {
@@ -40129,7 +40294,7 @@ function registerTemplateDeployerTools(server2, client) {
       try {
         const locId = client.resolveLocationId(locationId2);
         const safePath = validateTemplatePath(templateFile);
-        const template = TemplateSchema.parse(JSON.parse(fs28.readFileSync(safePath, "utf-8")));
+        const template = TemplateSchema.parse(JSON.parse(fs30.readFileSync(safePath, "utf-8")));
         const resolve12 = (text) => {
           if (typeof text !== "string") return text;
           let result = text;
@@ -40501,15 +40666,15 @@ ${errors.join("\n")}` : dryRun ? "\nNo errors!" : "\nNo errors \u2014 every item
     }
   );
 }
-var import_zod62, fs28, path27, TemplateSchema;
+var import_zod62, fs30, path28, TemplateSchema;
 var init_template_deployer = __esm({
   "src/tools/template-deployer.ts"() {
     "use strict";
     import_zod62 = require("zod");
     init_workflow_builder_client();
     init_tool_helpers();
-    fs28 = __toESM(require("fs"));
-    path27 = __toESM(require("path"));
+    fs30 = __toESM(require("fs"));
+    path28 = __toESM(require("path"));
     init_workflow_builder_client();
     TemplateSchema = import_zod62.z.object({
       templateName: import_zod62.z.string(),
@@ -40607,15 +40772,15 @@ async function collectInstallChecks(installedVersion, client, builderClient, reg
         signal: AbortSignal.timeout(8e3)
       });
       if (response.status === 401) {
-        return { name: "GHL API key", status: "fail", detail: `401 Unauthorized \u2014 key ${client.getApiKeyPrefix()} is invalid or revoked. Run setup_ghl_mcp with a fresh key.` };
+        return { name: "GHL API key", status: "fail", detail: `401 Unauthorized \u2014 the key ${client.getApiKeyHint()} is invalid or revoked. Run setup_ghl_mcp with a fresh key.` };
       }
       if (response.status === 403) {
-        return { name: "GHL API key", status: "fail", detail: `403 Forbidden \u2014 key ${client.getApiKeyPrefix()} doesn't have access to location ${locId}. The key may belong to a different sub-account.` };
+        return { name: "GHL API key", status: "fail", detail: `403 Forbidden \u2014 the key ${client.getApiKeyHint()} doesn't have access to location ${locId}. The key may belong to a different sub-account.` };
       }
       if (!response.ok) {
         return { name: "GHL API key", status: "warn", detail: `HTTP ${response.status} reading /locations/${locId} \u2014 key may be limited or GHL is having issues.` };
       }
-      return { name: "GHL API key", status: "pass", detail: `Valid (key ${client.getApiKeyPrefix()}).` };
+      return { name: "GHL API key", status: "pass", detail: `Valid (key ${client.getApiKeyHint()}).` };
     } catch (error) {
       return { name: "GHL API key", status: "warn", detail: `Network error: ${error instanceof Error ? error.message : String(error)}. Server starts anyway; tool calls will report errors when invoked.` };
     }
@@ -40830,10 +40995,10 @@ async function confirm(run) {
 async function runProbes(client, loc) {
   return Promise.all(
     PROBES.map((probe) => confirm(async () => {
-      const path39 = probe.path.replace("{loc}", loc);
+      const path40 = probe.path.replace("{loc}", loc);
       const params = probe.params ? Object.fromEntries(Object.entries(probe.params).map(([k, v]) => [k, substitute(v, loc)])) : void 0;
       try {
-        const raw = await client.get(path39, { params, noRetry: true });
+        const raw = await client.get(path40, { params, noRetry: true });
         const count2 = countRows(raw, probe.listKeys);
         return {
           key: probe.key,
@@ -41106,14 +41271,14 @@ var init_checkup = __esm({
 
 // src/tools/user-guide.ts
 function resolveGuidePath() {
-  const bundled = path28.resolve(__dirname, "..", "guide", "guide.html");
-  if (fs29.existsSync(bundled)) return bundled;
-  const devRoot = path28.resolve(__dirname, "..", "..");
+  const bundled = path29.resolve(__dirname, "..", "guide", "guide.html");
+  if (fs31.existsSync(bundled)) return bundled;
+  const devRoot = path29.resolve(__dirname, "..", "..");
   try {
-    const pkg2 = JSON.parse(fs29.readFileSync(path28.join(devRoot, "package.json"), "utf8"));
+    const pkg2 = JSON.parse(fs31.readFileSync(path29.join(devRoot, "package.json"), "utf8"));
     if (pkg2.name === "@elitedcs/ghl-mcp") {
-      const dev = path28.join(devRoot, "guide", "guide.html");
-      if (fs29.existsSync(dev)) return dev;
+      const dev = path29.join(devRoot, "guide", "guide.html");
+      if (fs31.existsSync(dev)) return dev;
     }
   } catch {
   }
@@ -41122,7 +41287,7 @@ function resolveGuidePath() {
 function guideContents(file2) {
   let html2 = "";
   try {
-    html2 = fs29.readFileSync(file2, "utf8");
+    html2 = fs31.readFileSync(file2, "utf8");
   } catch {
     return "The guide is installed but could not be read.";
   }
@@ -41146,11 +41311,11 @@ function registerUserGuideTools(server2) {
     { open: import_zod64.z.boolean().optional().describe("Open the guide in the browser. Takes over the person's screen \u2014 only when they asked for it.") },
     async ({ open }) => {
       const guidePath = resolveGuidePath();
-      if (!fs29.existsSync(guidePath)) {
+      if (!fs31.existsSync(guidePath)) {
         return {
           content: [{
             type: "text",
-            text: `The bundled user guide is missing (expected at ${guidePath}). Installed copies always include it \u2014 a reinstall restores it: npx -y @elitedcs/ghl-mcp cli install. In a development checkout, render it with: node scripts/build-guides.mjs`
+            text: `The bundled user guide is missing (expected at ${guidePath}). Installed copies always include it \u2014 a reinstall restores it: npx -y @elitedcs/ghl-mcp@latest cli install. In a development checkout, render it with: node scripts/build-guides.mjs`
           }]
         };
       }
@@ -41179,14 +41344,14 @@ ${guidePath}`;
     }
   );
 }
-var import_child_process6, import_zod64, fs29, path28;
+var import_child_process6, import_zod64, fs31, path29;
 var init_user_guide = __esm({
   "src/tools/user-guide.ts"() {
     "use strict";
     import_child_process6 = require("child_process");
     import_zod64 = require("zod");
-    fs29 = __toESM(require("fs"));
-    path28 = __toESM(require("path"));
+    fs31 = __toESM(require("fs"));
+    path29 = __toESM(require("path"));
   }
 });
 
@@ -43389,9 +43554,9 @@ async function settle(page) {
 }
 async function readTarget(target) {
   if (isUrl(target)) return { html: null, url: target };
-  const abs = path29.resolve(target);
-  if (!fs30.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-  return { html: fs30.readFileSync(abs, "utf8"), url: (0, import_node_url.pathToFileURL)(abs).toString() };
+  const abs = path30.resolve(target);
+  if (!fs32.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+  return { html: fs32.readFileSync(abs, "utf8"), url: (0, import_node_url.pathToFileURL)(abs).toString() };
 }
 function slidePixels(index, png, file2, sec, brand) {
   let img;
@@ -43439,7 +43604,7 @@ async function verifyDesign(opts) {
   const { html: html2, url } = await readTarget(opts.target);
   const placement = opts.placement ?? "html";
   const medium = opts.medium;
-  fs30.mkdirSync(opts.outDir, { recursive: true });
+  fs32.mkdirSync(opts.outDir, { recursive: true });
   const files = [];
   const screenshots = [];
   const at = (/* @__PURE__ */ new Date()).toISOString();
@@ -43484,8 +43649,8 @@ async function verifyDesign(opts) {
             try {
               await loc.scrollIntoViewIfNeeded({ timeout: 5e3 });
               const png = await loc.screenshot({ type: "png", timeout: 15e3 });
-              fs30.writeFileSync(path29.join(opts.outDir, file2), png);
-              files.push(path29.join(opts.outDir, file2));
+              fs32.writeFileSync(path30.join(opts.outDir, file2), png);
+              files.push(path30.join(opts.outDir, file2));
               screenshots.push(file2);
               pixels.push(slidePixels(sec.index, png, file2, sec, opts.brand));
             } catch {
@@ -43517,8 +43682,8 @@ async function verifyDesign(opts) {
           const shot = "page-1440.png";
           try {
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs30.writeFileSync(path29.join(opts.outDir, shot), png);
-            files.push(path29.join(opts.outDir, shot));
+            fs32.writeFileSync(path30.join(opts.outDir, shot), png);
+            files.push(path30.join(opts.outDir, shot));
             screenshots.push(shot);
           } catch {
           }
@@ -43526,8 +43691,8 @@ async function verifyDesign(opts) {
             await page.setViewportSize({ width: 390, height: 844 });
             await page.evaluate(SETTLE_SCROLL_JS).catch(() => void 0);
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs30.writeFileSync(path29.join(opts.outDir, "page-390.png"), png);
-            files.push(path29.join(opts.outDir, "page-390.png"));
+            fs32.writeFileSync(path30.join(opts.outDir, "page-390.png"), png);
+            files.push(path30.join(opts.outDir, "page-390.png"));
             screenshots.push("page-390.png");
           } catch {
           }
@@ -43600,21 +43765,21 @@ async function verifyDesign(opts) {
     screenshots
   };
   const checked = VerificationSchema.parse(report2);
-  const jsonPath = path29.join(opts.outDir, "verification.json");
-  fs30.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
+  const jsonPath = path30.join(opts.outDir, "verification.json");
+  fs32.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
   files.push(jsonPath);
   const reportHtml = renderVerificationHtml(checked, opts.branding);
-  const htmlPath = path29.join(opts.outDir, "verification.html");
-  fs30.writeFileSync(htmlPath, reportHtml);
+  const htmlPath = path30.join(opts.outDir, "verification.html");
+  fs32.writeFileSync(htmlPath, reportHtml);
   files.push(htmlPath);
   return { report: checked, files, reportHtml };
 }
-var fs30, path29, import_node_url, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS;
+var fs32, path30, import_node_url, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS;
 var init_verify = __esm({
   "src/command-os/design/verify.ts"() {
     "use strict";
-    fs30 = __toESM(require("node:fs"));
-    path29 = __toESM(require("node:path"));
+    fs32 = __toESM(require("node:fs"));
+    path30 = __toESM(require("node:path"));
     import_node_url = require("node:url");
     init_lint();
     init_probe();
@@ -43819,7 +43984,8 @@ function extractHtml(text) {
 function claudeGenerate(model = DEFAULT_MODEL, bin = "claude") {
   return (instruction, { cwd }) => new Promise((resolveP) => {
     const t0 = Date.now();
-    const child = (0, import_node_child_process4.spawn)(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model], {
+    const cmd = claudeCommand(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model]);
+    const child = (0, import_node_child_process4.spawn)(cmd.command, cmd.args, {
       cwd,
       env: { ...process.env, CLAUDECODE: "", CLAUDE_CODE_ENTRYPOINT: "" },
       stdio: ["pipe", "pipe", "pipe"]
@@ -43978,6 +44144,7 @@ var init_run = __esm({
   "src/command-os/design/run.ts"() {
     "use strict";
     import_node_child_process4 = require("node:child_process");
+    init_claude_locate();
     import_node_fs7 = require("node:fs");
     import_node_path7 = require("node:path");
     init_brief();
@@ -44031,7 +44198,7 @@ function registerDesignStudioTools(server2) {
       const { dna, logoSvg, logoPng } = deriveBrandDna(raw, { name, slug: slug3, rights: { declaration: a.rights, at: (/* @__PURE__ */ new Date()).toISOString() }, browser, firecrawl: fc });
       if (a.rights === "none" && dna.logo) notes.push("Rights declared as none: the logo is stored for reference only; do not place it on a client-facing page.");
       const written = writeBrand(dna, { logoSvg, logoPng, screenshotPng: browser?.screenshotPng });
-      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path30.basename(f)), notes };
+      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path31.basename(f)), notes };
     }
   );
   safeTool(
@@ -44198,9 +44365,9 @@ function registerDesignStudioTools(server2) {
     "Check a written HTML file honours the output contract before grading: section and role markers present and consistent, no outside scripts, one h1 on a page, every image described. Deterministic; no browser. A file that fails this is not graded by verify_design.",
     { file: import_zod67.z.string().describe("Path to the .html file."), medium: import_zod67.z.enum(MEDIA) },
     async ({ file: file2, medium }) => {
-      const abs = path30.resolve(file2);
-      if (!fs31.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-      const r = lintDesignContract(fs31.readFileSync(abs, "utf8"), medium);
+      const abs = path31.resolve(file2);
+      if (!fs33.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+      const r = lintDesignContract(fs33.readFileSync(abs, "utf8"), medium);
       return { ok: r.ok, problems: r.problems, warnings: r.warnings, facts: r.facts };
     }
   );
@@ -44221,7 +44388,7 @@ function registerDesignStudioTools(server2) {
     async (a) => {
       const brand = a.brandSlug ? houseLooks().find((d) => d.slug === a.brandSlug) ?? readBrand(slugify(a.brandSlug)) : void 0;
       const isUrl2 = /^https?:\/\//i.test(a.target);
-      const outDir = a.outDir ?? (isUrl2 ? path30.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path30.join(path30.dirname(path30.resolve(a.target)), `verify-${path30.basename(a.target, ".html")}`));
+      const outDir = a.outDir ?? (isUrl2 ? path31.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path31.join(path31.dirname(path31.resolve(a.target)), `verify-${path31.basename(a.target, ".html")}`));
       const r = await verifyDesign({ target: a.target, medium: a.medium, brand, outDir, placement: a.placement, mode: a.mode, ratio: a.ratio, logo: a.logo, branding: readAgencyBranding() });
       const v = r.report;
       const failed = v.rules.filter((x) => x.state === "MEASURED-FAIL").map((x) => `${x.ruleId} ${x.name}: ${x.measured ?? ""}`);
@@ -44236,7 +44403,7 @@ function registerDesignStudioTools(server2) {
         judgments: v.rules.filter((x) => x.state === "ASSERTED").map((x) => `${x.ruleId} ${x.name}: ${x.detail ?? ""}`),
         notApplicable: v.rules.filter((x) => x.state === "N-A").map((x) => `${x.ruleId}: ${x.detail ?? ""}`),
         brandMatch: v.brandMatch,
-        report: path30.join(outDir, "verification.html"),
+        report: path31.join(outDir, "verification.html"),
         files: r.files,
         ...a.placement === "ghl" && { builderOwned: builderOwnedRules().map((b) => `${b.rule.id} ${b.rule.name}: ${b.why}`) }
       };
@@ -44264,9 +44431,9 @@ function registerDesignStudioTools(server2) {
       if (!a.pageDataDownloadUrl && !a.file) throw new Error("Pass pageDataDownloadUrl (from get_page_full) or file.");
       let page;
       if (a.file) {
-        const abs = path30.resolve(a.file);
-        if (!fs31.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        page = JSON.parse(fs31.readFileSync(abs, "utf8"));
+        const abs = path31.resolve(a.file);
+        if (!fs33.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        page = JSON.parse(fs33.readFileSync(abs, "utf8"));
       } else {
         const response = await fetch(a.pageDataDownloadUrl, { headers: { Accept: "application/json,*/*" } });
         if (!response.ok) throw new Error(`Could not download the page data: HTTP ${response.status}. Re-read get_page_full \u2014 the download URL expires.`);
@@ -44307,9 +44474,9 @@ function registerDesignStudioTools(server2) {
       if (!a.file && !a.text) throw new Error("Pass file or text.");
       let html2 = a.text ?? "";
       if (a.file) {
-        const abs = path30.resolve(a.file);
-        if (!fs31.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        html2 = fs31.readFileSync(abs, "utf8");
+        const abs = path31.resolve(a.file);
+        if (!fs33.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        html2 = fs33.readFileSync(abs, "utf8");
       }
       const r = await gradeCopy(html2, claudeGenerate(a.model), { icp: a.icp });
       if (!r.grade) {
@@ -44344,13 +44511,13 @@ function registerDesignStudioTools(server2) {
     }
   );
 }
-var import_zod67, fs31, path30, summarise2;
+var import_zod67, fs33, path31, summarise2;
 var init_design_studio = __esm({
   "src/tools/design-studio.ts"() {
     "use strict";
     import_zod67 = require("zod");
-    fs31 = __toESM(require("node:fs"));
-    path30 = __toESM(require("node:path"));
+    fs33 = __toESM(require("node:fs"));
+    path31 = __toESM(require("node:path"));
     init_tool_helpers();
     init_extract();
     init_extract_browser();
@@ -44387,11 +44554,11 @@ var init_design_studio = __esm({
 
 // src/command-os/connectors/store.ts
 function connectorsPath() {
-  return path31.join(appDataDir(), "connectors.json");
+  return path32.join(appDataDir(), "connectors.json");
 }
 function readFile() {
   try {
-    const raw = fs32.readFileSync(connectorsPath(), "utf-8");
+    const raw = fs34.readFileSync(connectorsPath(), "utf-8");
     const parsed2 = JSON.parse(raw);
     if (!parsed2 || typeof parsed2 !== "object" || !parsed2.connectors) return { v: 1, connectors: {} };
     return parsed2;
@@ -44403,7 +44570,7 @@ function readForWrite() {
   const target = connectorsPath();
   let raw;
   try {
-    raw = fs32.readFileSync(target, "utf-8");
+    raw = fs34.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { v: 1, connectors: {} };
     throw new Error("Your connector file could not be read, so nothing was changed. Nothing was lost.");
@@ -44415,8 +44582,8 @@ function readForWrite() {
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs32.copyFileSync(target, kept);
-      fs32.chmodSync(kept, 384);
+      fs34.copyFileSync(target, kept);
+      fs34.chmodSync(kept, 384);
     } catch {
     }
     throw new Error(
@@ -44430,23 +44597,23 @@ function writeFile(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs32.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs34.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
     try {
-      fs32.chmodSync(tmp, 384);
+      fs34.chmodSync(tmp, 384);
     } catch {
     }
-    fs32.renameSync(tmp, target);
+    fs34.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs32.unlinkSync(tmp);
+        fs34.unlinkSync(tmp);
       } catch {
       }
     }
   }
   try {
-    fs32.chmodSync(target, 384);
+    fs34.chmodSync(target, 384);
   } catch {
   }
 }
@@ -44480,12 +44647,12 @@ async function withKey(system, fn) {
   if (!s) throw new Error(`${system} is not connected on this machine.`);
   return fn(s.key);
 }
-var fs32, path31, hintOf;
+var fs34, path32, hintOf;
 var init_store3 = __esm({
   "src/command-os/connectors/store.ts"() {
     "use strict";
-    fs32 = __toESM(require("node:fs"));
-    path31 = __toESM(require("node:path"));
+    fs34 = __toESM(require("node:fs"));
+    path32 = __toESM(require("node:path"));
     init_credentials_store();
     hintOf = (key) => `\u2026${String(key).slice(-4)}`;
   }
@@ -45141,8 +45308,8 @@ var init_to_engagements = __esm({
 
 // src/tools/connectors.ts
 function stripeFetcher(key) {
-  return async (path39, query) => {
-    const url = new URL(`https://api.stripe.com${path39}`);
+  return async (path40, query) => {
+    const url = new URL(`https://api.stripe.com${path40}`);
     for (const [k, v] of Object.entries(query ?? {})) url.searchParams.set(k, v);
     const res = await fetch(url, { headers: { Authorization: `Bearer ${key}` } });
     if (!res.ok) {
@@ -45151,13 +45318,13 @@ function stripeFetcher(key) {
     return res.json();
   };
 }
-async function listAll(f, path39, extra = {}) {
+async function listAll(f, path40, extra = {}) {
   const out = [];
   let after;
   for (let page = 0; page < 20; page++) {
     const q2 = { limit: "100", ...extra };
     if (after) q2.starting_after = after;
-    const res = await f(path39, q2);
+    const res = await f(path40, q2);
     const data = res?.data ?? [];
     out.push(...data);
     if (!res?.has_more || !data.length) break;
@@ -45430,7 +45597,7 @@ var init_connectors = __esm({
 // src/command-os/connectors/google-calendar-store.ts
 function read() {
   try {
-    return SecretSchema.parse(JSON.parse(fs33.readFileSync(googleCalendarPath(), "utf8")));
+    return SecretSchema.parse(JSON.parse(fs35.readFileSync(googleCalendarPath(), "utf8")));
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw new Error("The Google Calendar sign-in on this machine could not be read. Connect your Google Calendar again.");
@@ -45453,16 +45620,16 @@ function saveCalendarSecret(secret) {
   try {
     const validated = SecretSchema.parse(secret);
     const dir = ensureAppDataDir();
-    if (process.platform !== "win32") fs33.chmodSync(dir, 448);
+    if (process.platform !== "win32") fs35.chmodSync(dir, 448);
     tmp = `${googleCalendarPath()}.${(0, import_node_crypto9.randomUUID)()}.tmp`;
-    fs33.writeFileSync(tmp, JSON.stringify(validated) + "\n", { mode: 384, flag: "wx" });
-    fs33.renameSync(tmp, googleCalendarPath());
+    fs35.writeFileSync(tmp, JSON.stringify(validated) + "\n", { mode: 384, flag: "wx" });
+    fs35.renameSync(tmp, googleCalendarPath());
   } catch {
     throw new Error("The Google Calendar sign-in could not be saved privately on this machine. Nothing new was saved.");
   } finally {
     if (tmp) {
       try {
-        fs33.unlinkSync(tmp);
+        fs35.unlinkSync(tmp);
       } catch {
       }
     }
@@ -45470,19 +45637,19 @@ function saveCalendarSecret(secret) {
 }
 function removeCalendarSecret() {
   try {
-    fs33.unlinkSync(googleCalendarPath());
+    fs35.unlinkSync(googleCalendarPath());
     return true;
   } catch (error) {
     if (error.code === "ENOENT") return false;
     throw new Error("The Google Calendar sign-in could not be removed from this machine.");
   }
 }
-var fs33, path32, import_node_crypto9, import_zod69, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
+var fs35, path33, import_node_crypto9, import_zod69, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
 var init_google_calendar_store = __esm({
   "src/command-os/connectors/google-calendar-store.ts"() {
     "use strict";
-    fs33 = __toESM(require("node:fs"));
-    path32 = __toESM(require("node:path"));
+    fs35 = __toESM(require("node:fs"));
+    path33 = __toESM(require("node:path"));
     import_node_crypto9 = require("node:crypto");
     import_zod69 = require("zod");
     init_credentials_store();
@@ -45494,7 +45661,7 @@ var init_google_calendar_store = __esm({
       scope: import_zod69.z.literal(CALENDAR_SCOPE),
       connectedAt: import_zod69.z.string()
     });
-    googleCalendarPath = () => path32.join(appDataDir(), "google-calendar.json");
+    googleCalendarPath = () => path33.join(appDataDir(), "google-calendar.json");
   }
 });
 
@@ -45596,16 +45763,16 @@ function createGoogleCalendar(deps = {}) {
     requireOnlyCalendar(result.scope);
     return result.access_token;
   }
-  async function pages(path39, access, item, query = {}) {
+  async function pages(path40, access, item, query = {}) {
     const result = [];
     const seen = /* @__PURE__ */ new Set();
     let pageToken;
     for (let page = 0; page < 100; page++) {
-      const url = new URL(`${API}${path39}`);
+      const url = new URL(`${API}${path40}`);
       for (const [k, v] of Object.entries(query)) url.searchParams.set(k, v);
       if (pageToken) url.searchParams.set("pageToken", pageToken);
       const data = parsed(
-        import_zod70.z.object({ items: import_zod70.z.array(item).optional(), nextPageToken: import_zod70.z.string().optional(), kind: import_zod70.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path39.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
+        import_zod70.z.object({ items: import_zod70.z.array(item).optional(), nextPageToken: import_zod70.z.string().optional(), kind: import_zod70.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path40.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
         await request(url.href, { headers: { Authorization: `Bearer ${access}` } })
       );
       result.push(...data.items ?? []);
@@ -45907,10 +46074,10 @@ function score(answers, available) {
     }
     var hours = minutes * times / 60;
     if (hours <= 0) return;
-    var runnable = t.tools.filter(function(n) {
+    var runnable2 = t.tools.filter(function(n) {
       return known ? have[n] === true : true;
     });
-    var usable = t.tools.length > 0 && runnable.length === t.tools.length;
+    var usable = t.tools.length > 0 && runnable2.length === t.tools.length;
     scored.push({
       task: t.id,
       label: t.label,
@@ -46012,11 +46179,11 @@ var init_audit = __esm({
 // src/command-os/delivery-audit/store.ts
 function deliveryAuditPath() {
   const override = process.env[DELIVERY_AUDIT_ENV];
-  return override && override.trim() ? override : path33.join(appDataDir(), "delivery-audit.json");
+  return override && override.trim() ? override : path34.join(appDataDir(), "delivery-audit.json");
 }
 function readDeliveryAudit() {
   try {
-    const parsed2 = JSON.parse(fs34.readFileSync(deliveryAuditPath(), "utf-8"));
+    const parsed2 = JSON.parse(fs36.readFileSync(deliveryAuditPath(), "utf-8"));
     if (!parsed2 || typeof parsed2 !== "object" || !parsed2.answers || typeof parsed2.answers !== "object") return { ...EMPTY3 };
     return { v: 1, answers: parsed2.answers, updated_at: parsed2.updated_at };
   } catch {
@@ -46027,7 +46194,7 @@ function readForWrite2() {
   const target = deliveryAuditPath();
   let raw;
   try {
-    raw = fs34.readFileSync(target, "utf-8");
+    raw = fs36.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { ...EMPTY3 };
     throw new Error("Your saved audit could not be read, so nothing was changed. Nothing was lost.");
@@ -46039,7 +46206,7 @@ function readForWrite2() {
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs34.copyFileSync(target, kept);
+      fs36.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(`Your saved audit is damaged, so nothing was written over it. A copy is at ${kept}. Start again with reset:true when you are ready.`);
@@ -46051,13 +46218,13 @@ function writeFile2(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs34.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs34.renameSync(tmp, target);
+    fs36.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs36.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs34.unlinkSync(tmp);
+        fs36.unlinkSync(tmp);
       } catch {
       }
     }
@@ -46078,12 +46245,12 @@ function resetDeliveryAudit(now = () => /* @__PURE__ */ new Date()) {
   writeFile2(next);
   return next;
 }
-var fs34, path33, EMPTY3, DELIVERY_AUDIT_ENV;
+var fs36, path34, EMPTY3, DELIVERY_AUDIT_ENV;
 var init_store4 = __esm({
   "src/command-os/delivery-audit/store.ts"() {
     "use strict";
-    fs34 = __toESM(require("node:fs"));
-    path33 = __toESM(require("node:path"));
+    fs36 = __toESM(require("node:fs"));
+    path34 = __toESM(require("node:path"));
     init_credentials_store();
     EMPTY3 = { v: 1, answers: {} };
     DELIVERY_AUDIT_ENV = "GHL_MCP_DELIVERY_AUDIT";
@@ -46398,7 +46565,7 @@ var init_automation = __esm({
 // src/command-os/build/store.ts
 function automationsPath() {
   const override = process.env[AUTOMATIONS_ENV];
-  return override && override.trim() ? override : path34.join(appDataDir(), "automations.json");
+  return override && override.trim() ? override : path35.join(appDataDir(), "automations.json");
 }
 function parse4(raw) {
   const p = JSON.parse(raw);
@@ -46407,7 +46574,7 @@ function parse4(raw) {
 }
 function readAutomations() {
   try {
-    return parse4(fs35.readFileSync(automationsPath(), "utf-8")).builds;
+    return parse4(fs37.readFileSync(automationsPath(), "utf-8")).builds;
   } catch {
     return { ...EMPTY4.builds };
   }
@@ -46416,7 +46583,7 @@ function readForWrite3() {
   const target = automationsPath();
   let raw;
   try {
-    raw = fs35.readFileSync(target, "utf-8");
+    raw = fs37.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { v: 1, builds: {} };
     throw new Error("Your builds file could not be read, so nothing was changed. Nothing was lost.");
@@ -46426,7 +46593,7 @@ function readForWrite3() {
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs35.copyFileSync(target, kept);
+      fs37.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(
@@ -46440,13 +46607,13 @@ function writeFile3(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs35.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs35.renameSync(tmp, target);
+    fs37.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs37.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs35.unlinkSync(tmp);
+        fs37.unlinkSync(tmp);
       } catch {
       }
     }
@@ -46472,12 +46639,12 @@ function newAutomationId(now = () => /* @__PURE__ */ new Date()) {
   }
   return id;
 }
-var fs35, path34, AUTOMATIONS_ENV, EMPTY4;
+var fs37, path35, AUTOMATIONS_ENV, EMPTY4;
 var init_store5 = __esm({
   "src/command-os/build/store.ts"() {
     "use strict";
-    fs35 = __toESM(require("node:fs"));
-    path34 = __toESM(require("node:path"));
+    fs37 = __toESM(require("node:fs"));
+    path35 = __toESM(require("node:path"));
     init_credentials_store();
     AUTOMATIONS_ENV = "GHL_MCP_AUTOMATIONS";
     EMPTY4 = { v: 1, builds: {} };
@@ -46773,7 +46940,7 @@ var init_client_week = __esm({
 // src/board-roster.ts
 function readBoardState() {
   try {
-    const raw = JSON.parse(fs36.readFileSync(path35.join(appDataDir(), "cockpit-state.json"), "utf8"));
+    const raw = JSON.parse(fs38.readFileSync(path36.join(appDataDir(), "cockpit-state.json"), "utf8"));
     if (raw && typeof raw === "object" && raw.clients && typeof raw.clients === "object") return raw;
   } catch {
   }
@@ -46791,12 +46958,12 @@ function knownClients(registry2, state) {
   }
   return [...out.values()];
 }
-var fs36, path35;
+var fs38, path36;
 var init_board_roster = __esm({
   "src/board-roster.ts"() {
     "use strict";
-    fs36 = __toESM(require("fs"));
-    path35 = __toESM(require("path"));
+    fs38 = __toESM(require("fs"));
+    path36 = __toESM(require("path"));
     init_credentials_store();
     init_client_engagements();
   }
@@ -48831,9 +48998,9 @@ function presetForBusinessType(type) {
       return "generic";
   }
 }
-function setPath(target, path39, value) {
+function setPath(target, path40, value) {
   if (value === void 0) return;
-  const parts = path39.split(".");
+  const parts = path40.split(".");
   let node = target;
   for (let i = 0; i < parts.length - 1; i++) {
     const k = parts[i];
@@ -49904,17 +50071,17 @@ function planFromPreset(input) {
 }
 function presetsRoot() {
   const candidates = [
-    path36.join(__dirname, "..", "skills", "blueprint", "presets"),
+    path37.join(__dirname, "..", "skills", "blueprint", "presets"),
     // dist/ → package root
-    path36.join(__dirname, "..", "..", "skills", "blueprint", "presets"),
+    path37.join(__dirname, "..", "..", "skills", "blueprint", "presets"),
     // src/intake-to-build in dev
-    path36.join(process.cwd(), "skills", "blueprint", "presets")
+    path37.join(process.cwd(), "skills", "blueprint", "presets")
   ];
-  return candidates.find((c) => fs37.existsSync(c)) ?? null;
+  return candidates.find((c) => fs39.existsSync(c)) ?? null;
 }
 function readPresetFile(dir, base) {
   try {
-    const raw = JSON.parse(fs37.readFileSync(path36.join(dir, `${base}.preset.json`), "utf8"));
+    const raw = JSON.parse(fs39.readFileSync(path37.join(dir, `${base}.preset.json`), "utf8"));
     if (raw && typeof raw === "object" && typeof raw.presetId === "string" && raw.skeleton) return raw;
     return null;
   } catch {
@@ -49926,7 +50093,7 @@ function loadPresetChoice(requested, briefPreset) {
   if (!dir) {
     return { ok: false, error: "The preset library is not installed with this copy of the tool (skills/blueprint/presets is missing) \u2014 reinstall, or author the plan by hand." };
   }
-  const bases = fs37.readdirSync(dir).filter((f) => f.endsWith(".preset.json")).map((f) => f.replace(/\.preset\.json$/, ""));
+  const bases = fs39.readdirSync(dir).filter((f) => f.endsWith(".preset.json")).map((f) => f.replace(/\.preset\.json$/, ""));
   const tryMatch = (want) => {
     const norm6 = slugify2(want);
     for (const base of bases) {
@@ -49957,12 +50124,12 @@ function loadPresetChoice(requested, briefPreset) {
   if (generic) return { ok: true, preset: generic, file: "generic-client.preset.json", note: "Using the generic preset." };
   return { ok: false, error: "No usable preset file was found in the library." };
 }
-var fs37, path36, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, BRIEF_CALENDAR_TYPE_MAP;
+var fs39, path37, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, BRIEF_CALENDAR_TYPE_MAP;
 var init_plan_from_preset = __esm({
   "src/intake-to-build/plan-from-preset.ts"() {
     "use strict";
-    fs37 = __toESM(require("fs"));
-    path36 = __toESM(require("path"));
+    fs39 = __toESM(require("fs"));
+    path37 = __toESM(require("path"));
     init_plan();
     init_brief2();
     init_normalizer();
@@ -51186,13 +51353,13 @@ ${text2}`);
   };
 }
 function makePipelineApi(builderClient) {
-  return async (method, path39, body) => {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path39}`;
+  return async (method, path40, body) => {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path40}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Pipeline API ${response.status}: ${method} ${path39}
+      throw new Error(`Pipeline API ${response.status}: ${method} ${path40}
 ${text2}`);
     }
     const text = await response.text();
@@ -51205,8 +51372,8 @@ ${text2}`);
   };
 }
 function makeFunnelApi(builderClient) {
-  return async (method, path39, body) => {
-    const url = `https://backend.leadconnectorhq.com/funnels${path39}`;
+  return async (method, path40, body) => {
+    const url = `https://backend.leadconnectorhq.com/funnels${path40}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, {
       ...sendsBody ? { body } : {},
@@ -51219,7 +51386,7 @@ function makeFunnelApi(builderClient) {
     });
     if (!response.ok) {
       const text2 = await response.text();
-      throw new Error(`Funnel API ${response.status}: ${method} ${path39}
+      throw new Error(`Funnel API ${response.status}: ${method} ${path40}
 ${text2.slice(0, 300)}`);
     }
     const text = await response.text();
@@ -52814,8 +52981,8 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var dotenv2 = __toESM(require("dotenv"));
-var path38 = __toESM(require("path"));
-var fs39 = __toESM(require("fs"));
+var path39 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 
 // src/version-compare.ts
@@ -52887,9 +53054,9 @@ var import_zod82 = require("zod");
 
 // src/skill-installer.ts
 var import_node_crypto12 = require("node:crypto");
-var fs38 = __toESM(require("node:fs"));
-var path37 = __toESM(require("node:path"));
-var os6 = __toESM(require("node:os"));
+var fs40 = __toESM(require("node:fs"));
+var path38 = __toESM(require("node:path"));
+var os7 = __toESM(require("node:os"));
 function sha2562(buf) {
   return (0, import_node_crypto12.createHash)("sha256").update(buf).digest("hex");
 }
@@ -52903,9 +53070,9 @@ function isOlderRelease(candidate, installed) {
   return false;
 }
 function bundledSkillsDir(baseDir) {
-  const candidate = path37.resolve(baseDir, "..", "skills");
+  const candidate = path38.resolve(baseDir, "..", "skills");
   try {
-    return fs38.statSync(candidate).isDirectory() ? candidate : null;
+    return fs40.statSync(candidate).isDirectory() ? candidate : null;
   } catch {
     return null;
   }
@@ -52913,10 +53080,10 @@ function bundledSkillsDir(baseDir) {
 function listFiles(root) {
   const out = [];
   const walk = (dir) => {
-    for (const entry of fs38.readdirSync(dir, { withFileTypes: true })) {
-      const full = path37.join(dir, entry.name);
+    for (const entry of fs40.readdirSync(dir, { withFileTypes: true })) {
+      const full = path38.join(dir, entry.name);
       if (entry.isDirectory()) walk(full);
-      else if (entry.isFile()) out.push(path37.relative(root, full));
+      else if (entry.isFile()) out.push(path38.relative(root, full));
     }
   };
   walk(root);
@@ -52924,7 +53091,7 @@ function listFiles(root) {
 }
 function readMarker(markerPath) {
   try {
-    const parsed2 = JSON.parse(fs38.readFileSync(markerPath, "utf8"));
+    const parsed2 = JSON.parse(fs40.readFileSync(markerPath, "utf8"));
     return parsed2 && typeof parsed2 === "object" && parsed2.files ? parsed2 : null;
   } catch {
     return null;
@@ -52938,35 +53105,35 @@ function installBundledSkills(opts) {
     skippedOlderPackage: [],
     unchanged: [],
     errors: [],
-    targetDir: opts.targetDir ?? path37.join(os6.homedir(), ".claude", "skills"),
+    targetDir: opts.targetDir ?? path38.join(os7.homedir(), ".claude", "skills"),
     bundledDir: null
   };
   const bundled = bundledSkillsDir(opts.baseDir);
   result.bundledDir = bundled;
   if (!bundled) return result;
   try {
-    fs38.mkdirSync(result.targetDir, { recursive: true });
+    fs40.mkdirSync(result.targetDir, { recursive: true });
   } catch (e) {
     result.errors.push(`cannot create ${result.targetDir}: ${String(e)}`);
     return result;
   }
-  const markerPath = path37.join(result.targetDir, ".ghl-command-skills.json");
+  const markerPath = path38.join(result.targetDir, ".ghl-command-skills.json");
   const marker = readMarker(markerPath) ?? { packageVersion: "", files: {} };
   const newMarker = { packageVersion: opts.packageVersion, files: { ...marker.files } };
   for (const rel of listFiles(bundled)) {
     try {
-      const src = fs38.readFileSync(path37.join(bundled, rel));
-      const dest = path37.join(result.targetDir, rel);
+      const src = fs40.readFileSync(path38.join(bundled, rel));
+      const dest = path38.join(result.targetDir, rel);
       const srcHash = sha2562(src);
       let destBuf = null;
       try {
-        destBuf = fs38.readFileSync(dest);
+        destBuf = fs40.readFileSync(dest);
       } catch {
         destBuf = null;
       }
       if (destBuf === null) {
-        fs38.mkdirSync(path37.dirname(dest), { recursive: true });
-        fs38.writeFileSync(dest, src);
+        fs40.mkdirSync(path38.dirname(dest), { recursive: true });
+        fs40.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.installed.push(rel);
         continue;
@@ -52983,7 +53150,7 @@ function installBundledSkills(opts) {
         newMarker.packageVersion = marker.packageVersion;
         result.skippedOlderPackage.push(rel);
       } else if (lastWritten && destHash === lastWritten) {
-        fs38.writeFileSync(dest, src);
+        fs40.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.updated.push(rel);
       } else {
@@ -52994,20 +53161,27 @@ function installBundledSkills(opts) {
     }
   }
   try {
-    fs38.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
+    fs40.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
   } catch (e) {
     result.errors.push(`marker write failed: ${String(e)}`);
   }
   return result;
 }
+function skillNames(files) {
+  return [...new Set(files.map((rel) => rel.split(/[\\/]/)[0]))].sort();
+}
 function summarizeInstall(r) {
   if (!r.bundledDir) return "";
   const bits = [];
-  if (r.installed.length) bits.push(`${r.installed.length} installed`);
-  if (r.updated.length) bits.push(`${r.updated.length} updated`);
-  if (r.skippedUserModified.length) bits.push(`${r.skippedUserModified.length} kept (your edits)`);
-  if (r.skippedOlderPackage.length) bits.push(`${r.skippedOlderPackage.length} kept (newer than this version)`);
-  if (r.errors.length) bits.push(`${r.errors.length} errors`);
+  const bucket = (files, label) => {
+    const names = skillNames(files);
+    if (names.length) bits.push(`${names.length} ${label} (${names.join(", ")})`);
+  };
+  bucket(r.installed, "installed");
+  bucket(r.updated, "updated");
+  bucket(r.skippedUserModified, "kept with your edits");
+  bucket(r.skippedOlderPackage, "kept, newer than this version");
+  if (r.errors.length) bits.push(`${r.errors.length} file error${r.errors.length === 1 ? "" : "s"}`);
   if (bits.length === 0) return "";
   return `Skills: ${bits.join(", ")} \u2192 ${r.targetDir}`;
 }
@@ -53033,6 +53207,8 @@ function registerSkillsTool(server2, packageVersion, baseDir) {
         return jsonResponse({
           ok: result.errors.length === 0,
           targetDir: result.targetDir,
+          // Skills, by name, before the per-file detail (BUG-2026-09-14-03).
+          skills: { installed: skillNames(result.installed), updated: skillNames(result.updated), keptYourEdits: skillNames(result.skippedUserModified) },
           installed: result.installed,
           updated: result.updated,
           keptYourEdits: result.skippedUserModified,
@@ -53080,11 +53256,11 @@ function agencyPrimer(p) {
   if (staff.length) lines.push(`Their team: ${staff.join("; ")}.`);
   const sops = (p.delivery?.sops ?? []).filter(Boolean);
   if (sops.length) lines.push(`How they deliver, in their words: ${sops.map((s) => `"${s}"`).join(" ")}`);
-  const os7 = p.agencyOs;
-  if (os7?.method) lines.push(`Their method: ${os7.method}`);
-  if (os7?.voice) lines.push(`How they sound, and how you should sound for them: ${os7.voice}`);
-  if (os7?.ica?.who) lines.push(`Who they serve: ${os7.ica.who}`);
-  if (os7?.offer?.name || os7?.offer?.promise) lines.push(`Their core offer: ${[os7.offer?.name, os7.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
+  const os8 = p.agencyOs;
+  if (os8?.method) lines.push(`Their method: ${os8.method}`);
+  if (os8?.voice) lines.push(`How they sound, and how you should sound for them: ${os8.voice}`);
+  if (os8?.ica?.who) lines.push(`Who they serve: ${os8.ica.who}`);
+  if (os8?.offer?.name || os8?.offer?.promise) lines.push(`Their core offer: ${[os8.offer?.name, os8.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
   if (!lines.length) return void 0;
   lines.push("These are the agency's own details, not any client's. Client-by-client records are a tool call away, not in here.");
   const text = lines.join("\n");
@@ -53141,7 +53317,7 @@ dotenv2.config();
 setPkgVersion(pkg.version);
 {
   const configDirOverride = process.env.GHL_MCP_CONFIG_DIR?.trim();
-  if (configDirOverride && !path38.isAbsolute(configDirOverride)) {
+  if (configDirOverride && !path39.isAbsolute(configDirOverride)) {
     process.stderr.write(
       `[ghl-mcp] GHL_MCP_CONFIG_DIR must be an absolute path (got "${configDirOverride}"). Use e.g. /data/ghl-mcp in a container, with a volume mounted at /data.
 `
@@ -53154,20 +53330,20 @@ process.on("unhandledRejection", (reason2) => {
 `);
 });
 function hardenSecretFilePerms() {
-  const repoDir = path38.resolve(__dirname, "..");
+  const repoDir = path39.resolve(__dirname, "..");
   const candidates = [
-    { file: path38.join(repoDir, "start-mcp.sh"), mode: 448 },
+    { file: path39.join(repoDir, "start-mcp.sh"), mode: 448 },
     // Legacy registry location (pre-migration); new location lives in app-data.
-    { file: path38.join(repoDir, ".ghl-tokens.json"), mode: 384 },
+    { file: path39.join(repoDir, ".ghl-tokens.json"), mode: 384 },
     { file: tokenRegistryPath(), mode: 384 }
   ];
   for (const { file: file2, mode } of candidates) {
     let current;
     try {
-      if (!fs39.existsSync(file2)) continue;
-      current = fs39.statSync(file2).mode & 511;
+      if (!fs41.existsSync(file2)) continue;
+      current = fs41.statSync(file2).mode & 511;
       if (current !== mode) {
-        fs39.chmodSync(file2, mode);
+        fs41.chmodSync(file2, mode);
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);