@elitedcs/ghl-mcp 3.84.0 → 3.84.1

package/dist/index.js

@@ -9483,12 +9483,24 @@ function boundNumbers(agent) {
   }
   return [...out];
 }
+function hasSingleNumberField(agent) {
+  const a = isRecord7(agent) ? agent : {};
+  return a.inboundNumber !== null && a.inboundNumber !== void 0 && a.inboundNumber !== "";
+}
+function routedNumbers(agent) {
+  const a = isRecord7(agent) ? agent : {};
+  if (hasSingleNumberField(a) || !Array.isArray(a.inboundNumbers)) return [];
+  return [...new Set(a.inboundNumbers.filter((n) => typeof n === "string" && n.length > 0))];
+}
+function unprovenNumbers(agent) {
+  return hasSingleNumberField(agent) ? boundNumbers(agent) : [];
+}
 function poolBinding(agent) {
   const a = isRecord7(agent) ? agent : {};
   return typeof a.numberPoolId === "string" && a.numberPoolId.trim() ? a.numberPoolId : null;
 }
 function isLiveBound(agent) {
-  return boundNumbers(agent).length > 0 || poolBinding(agent) !== null;
+  return routedNumbers(agent).length > 0 || poolBinding(agent) !== null;
 }
 function inBackupRota(agent) {
   return isRecord7(agent) && agent.isAgentAsBackupDisabled === false;
@@ -9498,7 +9510,7 @@ function canTakeCall(agent) {
 }
 function liveDescription(agent) {
   const parts = [];
-  const nums = boundNumbers(agent);
+  const nums = routedNumbers(agent);
   if (nums.length) parts.push(`answers on ${nums.join(", ")}`);
   const pool = poolBinding(agent);
   if (pool) parts.push(`answers through pool ${pool}`);
@@ -9506,7 +9518,7 @@ function liveDescription(agent) {
   return parts.length ? parts.join(", and ") : null;
 }
 function agentWriteDifferences(sent, stored) {
-  return Object.keys(sent).filter((k) => k !== "locationId" && k !== "inboundNumber" && k !== "numberPoolId" && !sentSubsetOfStored(sent[k], stored[k])).sort();
+  return Object.keys(sent).filter((k) => k !== "locationId" && k !== "inboundNumber" && k !== "inboundNumbers" && k !== "numberPoolId" && !sentSubsetOfStored(sent[k], stored[k])).sort();
 }
 function poolNumbers(pool) {
   if (!isRecord7(pool)) return [];
@@ -9778,7 +9790,12 @@ function registerVoiceAiTools(server2, shared) {
       const { numbers, pools, poolObjects } = await readNumbers(client, loc);
       const agents = await listAllVoiceAgents(client, loc);
       const holders = /* @__PURE__ */ new Map();
-      for (const a of agents) for (const n of boundNumbers(a)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: "inboundNumber" });
+      for (const a of agents) for (const n of routedNumbers(a)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: "inboundNumber" });
+      const unproven = agents.filter((a) => unprovenNumbers(a).length > 0).map((a) => {
+        const nums = unprovenNumbers(a);
+        return { agentId: String(a.id), agentName: String(a.agentName), numbers: nums, stored: { inboundNumber: a.inboundNumber, inboundNumbers: a.inboundNumbers }, fix: UNPROVEN_BINDING_FIX(String(a.agentName), nums) };
+      });
+      const heldUnproven = new Set(unproven.flatMap((u) => u.numbers));
       const poolBound = agents.filter((a) => poolBinding(a) !== null).map((a) => {
         const pool = poolBinding(a);
         const obj = poolObjects.find((p) => poolId(p) === pool);
@@ -9788,10 +9805,11 @@ function registerVoiceAiTools(server2, shared) {
       });
       const unresolvedPool = poolBound.some((p) => typeof p.poolNumbers === "string");
       const numberRows = numbers.map((n) => ({ number: n, answeredBy: holders.get(n) ?? null }));
-      const free = unresolvedPool ? [] : numberRows.filter((r) => !r.answeredBy).map((r) => r.number);
+      const free = unresolvedPool ? [] : numberRows.filter((r) => !r.answeredBy && !heldUnproven.has(r.number)).map((r) => r.number);
       const rota = agents.filter(inBackupRota).map((a) => ({ agentId: String(a.id), agentName: String(a.agentName) }));
       const ready = numberRows.some((r) => r.answeredBy) || poolBound.length > 0;
-      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolBound.length ? `, and ${poolBound.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried as inboundNumber or numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
+      const unprovenLine = unproven.length ? ` ${unproven.length} agent(s) carry a number binding NOT proven to route (${unproven.map((u) => `"${u.agentName}" on ${u.numbers.join(", ")}`).join("; ")}): see unprovenBindings for the fix.` : "";
+      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolBound.length ? `, and ${poolBound.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.${unprovenLine}` : unproven.length ? `NOT PROVEN TO ROUTE: no number is bound in the shape GoHighLevel routes to an agent.${unprovenLine}${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""}` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried in inboundNumbers or as numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
       return {
         locationId: loc,
         verdict,
@@ -9800,10 +9818,11 @@ function registerVoiceAiTools(server2, shared) {
         freeNumbersNote: unresolvedPool ? "No number is called free: at least one agent answers through a pool whose numbers this API does not list. Check the pool in GoHighLevel before binding anything." : void 0,
         pools,
         poolBoundAgents: poolBound,
+        ...unproven.length ? { unprovenBindings: unproven } : {},
         backupRotaAgents: rota,
-        agents: agents.map((a) => ({ id: a.id, agentName: a.agentName, businessName: a.businessName, answersOn: boundNumbers(a), pool: poolBinding(a), inBackupRota: inBackupRota(a), canTakeCall: canTakeCall(a), language: a.language, maxCallDuration: a.maxCallDuration, actions: Array.isArray(a.actions) ? a.actions.length : 0 })),
+        agents: agents.map((a) => ({ id: a.id, agentName: a.agentName, businessName: a.businessName, answersOn: routedNumbers(a), ...unprovenNumbers(a).length ? { heldNotProvenToRoute: unprovenNumbers(a) } : {}, pool: poolBinding(a), inBackupRota: inBackupRota(a), canTakeCall: canTakeCall(a), language: a.language, maxCallDuration: a.maxCallDuration, actions: Array.isArray(a.actions) ? a.actions.length : 0 })),
         manualTask: numbers.length === 0 ? NO_NUMBER_TASK : void 0,
-        note: "This reads what the API exposes: each agent's inboundNumber(s) and numberPoolId, and whether it sits in the backup rota (isAgentAsBackupDisabled false). Two things it cannot see: routing set on the number itself in GoHighLevel's Phone Numbers screen, and A2P/SHAKEN-STIR status in Trust Center \u2014 check both there before promising real caller traffic. One real account seen while this was built answers calls with agents that carry no inboundNumber by API (read 2026-09-04)."
+        note: "This reads what the API exposes: each agent's inboundNumbers and numberPoolId, and whether it sits in the backup rota (isAgentAsBackupDisabled false). A number counts as answered only when it is in an agent's inboundNumbers while that agent's inboundNumber is null, the shape GoHighLevel's Deploy tab stores and the one that routed a real call (2026-09-15); a number carried in inboundNumber did not. Two things it cannot see: routing set on the number itself in GoHighLevel's Phone Numbers screen, and A2P/SHAKEN-STIR status in Trust Center \u2014 check both there before promising real caller traffic. One real account seen while this was built answers calls with agents that carry no inboundNumber by API (read 2026-09-04)."
       };
     }
   );
@@ -9839,7 +9858,9 @@ function registerVoiceAiTools(server2, shared) {
       const loc = client.resolveLocationId(locationId2);
       const agent = await readVoiceAgent(client, loc, agentId);
       const live = liveDescription(agent);
-      return { agent, answersOn: boundNumbers(agent), pool: poolBinding(agent), inBackupRota: inBackupRota(agent), note: live ? `This agent can take calls: it ${live}.` : UNBOUND_NOTE };
+      const unproven = unprovenNumbers(agent);
+      const unprovenNote = unproven.length ? `Its number binding is not proven to route: ${UNPROVEN_BINDING_FIX(String(agent.agentName), unproven)}` : "";
+      return { agent, answersOn: routedNumbers(agent), ...unproven.length ? { heldNotProvenToRoute: unproven } : {}, pool: poolBinding(agent), inBackupRota: inBackupRota(agent), note: live ? `This agent can take calls: it ${live}.${unprovenNote ? ` ${unprovenNote}` : ""}` : unprovenNote || UNBOUND_NOTE };
     }
   );
   safeTool(
@@ -9852,11 +9873,12 @@ function registerVoiceAiTools(server2, shared) {
       businessName: import_zod37.z.string().min(1).describe("The business it answers for, as it should say it."),
       ...(({ businessName: _b, isAgentAsBackupDisabled: _k, ...rest }) => rest)(AGENT_FIELDS),
       inboundNumber: import_zod37.z.string().nullable().optional().describe("REFUSED here. Creation never binds a number; create, read the agent, then bind with update_voice_agent."),
+      inboundNumbers: import_zod37.z.array(import_zod37.z.string()).optional().describe("REFUSED here, like inboundNumber. Creation never binds a number; bind with update_voice_agent afterwards."),
       numberPoolId: import_zod37.z.string().nullable().optional().describe("REFUSED here. Creation never binds a pool; use update_voice_agent afterwards."),
       isAgentAsBackupDisabled: import_zod37.z.boolean().optional().describe("Always true at creation. false is REFUSED here; let the agent into the backup rota with update_voice_agent once you have read it.")
     },
-    async ({ locationId: locationId2, inboundNumber, numberPoolId, isAgentAsBackupDisabled, ...fields }) => {
-      if (inboundNumber !== void 0 || numberPoolId !== void 0) throw new Error("create_voice_agent never binds a number or a number pool \u2014 an agent is born non-live so nothing half-built can take a call. Create it, read it with get_voice_agent, then bind with update_voice_agent (inboundNumber or numberPoolId), which checks the number is this sub-account's and free.");
+    async ({ locationId: locationId2, inboundNumber, inboundNumbers, numberPoolId, isAgentAsBackupDisabled, ...fields }) => {
+      if (inboundNumber !== void 0 || inboundNumbers !== void 0 || numberPoolId !== void 0) throw new Error("create_voice_agent never binds a number or a number pool \u2014 an agent is born non-live so nothing half-built can take a call. Create it, read it with get_voice_agent, then bind with update_voice_agent (inboundNumber or numberPoolId), which checks the number is this sub-account's and free.");
       if (isAgentAsBackupDisabled === false) throw new Error("create_voice_agent always keeps the new agent OUT of the backup rota (isAgentAsBackupDisabled true). Let it in with update_voice_agent once you have read the agent.");
       const client = shared.pinned();
       const loc = client.resolveLocationId(locationId2);
@@ -9864,6 +9886,7 @@ function registerVoiceAiTools(server2, shared) {
       resolveResponsiveness(body);
       if (body.maxCallDuration === void 0) body.maxCallDuration = DEFAULT_MAX_CALL_SECONDS;
       delete body.inboundNumber;
+      delete body.inboundNumbers;
       delete body.numberPoolId;
       body.isAgentAsBackupDisabled = true;
       const problem = agentBodyProblem(body);
@@ -9899,13 +9922,13 @@ function registerVoiceAiTools(server2, shared) {
   safeTool(
     server2,
     "update_voice_agent",
-    "Change any part of a Voice AI agent, including the two things creation never does: bind a number (inboundNumber, or numberPoolId) and let it into the backup rota (isAgentAsBackupDisabled: false). Send only what changes: GoHighLevel applies it as a partial update and the rest survives (read back and diffed here). A number must be this sub-account's and free; inboundNumber: null unbinds. Post-call workflows must be published. Returns what changed, the fields that differ before \u2192 after, and the agent as it now reads.",
+    "Change any part of a Voice AI agent, including the two things creation never does: bind a number (inboundNumber, or numberPoolId) and let it into the backup rota (isAgentAsBackupDisabled: false). Send only what changes: GoHighLevel applies it as a partial update and the rest survives (read back and diffed here). A number must be this sub-account's and free. The number is written to the agent's inboundNumbers list with inboundNumber cleared, the shape GoHighLevel's Deploy tab stores and the one that routed a real call; it is VERIFIED only when it reads back that way. inboundNumber: null unbinds every number. Re-binding an agent's own number repairs a binding check_voice_ai_readiness calls not proven to route. Post-call workflows must be published. Returns what changed, the fields that differ before \u2192 after, and the agent as it now reads.",
     {
       agentId: import_zod37.z.string().describe("Agent id."),
       locationId: LOCATION,
       agentName: import_zod37.z.string().min(1).max(40).optional(),
       ...AGENT_FIELDS,
-      inboundNumber: import_zod37.z.string().nullable().optional().describe("Bind a number this sub-account owns that no other agent answers on; null unbinds."),
+      inboundNumber: import_zod37.z.string().nullable().optional().describe("Bind a number this sub-account owns that no other agent answers on. Stored in the agent's inboundNumbers list beside any it already answers on, with GoHighLevel's single inboundNumber field cleared. null unbinds every number."),
       numberPoolId: import_zod37.z.string().nullable().optional().describe("Bind a number pool; null unbinds.")
     },
     async ({ agentId, locationId: locationId2, inboundNumber, numberPoolId, ...fields }) => {
@@ -9913,10 +9936,17 @@ function registerVoiceAiTools(server2, shared) {
       const loc = client.resolveLocationId(locationId2);
       const change = dropUndefined({ ...fields });
       resolveResponsiveness(change);
-      if (inboundNumber !== void 0) change.inboundNumber = inboundNumber;
       if (numberPoolId !== void 0) change.numberPoolId = numberPoolId;
-      if (Object.keys(change).length === 0) throw new Error("Nothing to update \u2014 pass at least one field to change.");
+      if (Object.keys(change).length === 0 && inboundNumber === void 0) throw new Error("Nothing to update \u2014 pass at least one field to change.");
       const before = await readVoiceAgent(client, loc, agentId);
+      if (typeof inboundNumber === "string") {
+        const current = Array.isArray(before.inboundNumbers) ? before.inboundNumbers.filter((n) => typeof n === "string" && n.length > 0) : [];
+        change.inboundNumbers = [.../* @__PURE__ */ new Set([...current, inboundNumber])];
+        if (hasSingleNumberField(before)) change.inboundNumber = null;
+      } else if (inboundNumber === null) {
+        change.inboundNumber = null;
+        change.inboundNumbers = [];
+      }
       const merged = { ...change };
       if (change.language !== void 0 || change.translation !== void 0) {
         if (merged.language === void 0 && typeof before.language === "string") merged.language = before.language;
@@ -9968,11 +9998,15 @@ function registerVoiceAiTools(server2, shared) {
       if (typeof inboundNumber === "string" && !boundNumbers(after).includes(inboundNumber)) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: ${inboundNumber} was sent but the read-back does not show it bound.`);
+      } else if (typeof inboundNumber === "string" && !routedNumbers(after).includes(inboundNumber)) {
+        asserted2 = true;
+        notes.push(`ASSERTED ONLY: ${inboundNumber} reads back, but not in the shape proven to route a call (inboundNumber ${JSON.stringify(after.inboundNumber)}, inboundNumbers ${JSON.stringify(after.inboundNumbers)}). Check the agent's Deploy tab in GoHighLevel before telling anyone it answers.`);
       }
       if (inboundNumber === null && boundNumbers(after).length) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: unbind was sent but the read-back still shows ${boundNumbers(after).join(", ")}.`);
       }
+      if (inboundNumber === void 0 && unprovenNumbers(after).length) notes.push(`Its number binding is not proven to route: ${UNPROVEN_BINDING_FIX(String(after.agentName), unprovenNumbers(after))}`);
       if (typeof numberPoolId === "string" && poolBinding(after) !== numberPoolId) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: number pool ${numberPoolId} was sent but the read-back shows ${JSON.stringify(after.numberPoolId)}.`);
@@ -9981,7 +10015,7 @@ function registerVoiceAiTools(server2, shared) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: pool unbind was sent but the read-back still shows pool ${poolBinding(after)}.`);
       }
-      const bound = boundNumbers(after);
+      const bound = routedNumbers(after);
       const live = liveDescription(after);
       if (change.isAgentAsBackupDisabled === false && inBackupRota(after)) notes.push("This agent is now in the backup rota: GoHighLevel may hand it unanswered calls on this sub-account's numbers even with nothing bound.");
       if (!canTakeCall(after)) notes.push(UNBOUND_NOTE);
@@ -10191,7 +10225,7 @@ function registerVoiceAiTools(server2, shared) {
     }
   );
 }
-var import_zod37, VOICE_LANGUAGES, PATIENCE_LEVELS, VOICE_ACTION_TYPES, PATIENCE_TO_RESPONSIVENESS, ACTION_NAME, TRANSFER_NUMBER, IANA_TZ, MAX_CALL_SECONDS, DEFAULT_MAX_CALL_SECONDS, VOICE_AGENT_COMPARABLE, READBACK_FAILED, AGENT_PAGE_SIZE, AGENT_PAGE_CAP, NO_NUMBER_TASK, WorkingHours, PostCallNotify, Translation, AGENT_FIELDS;
+var import_zod37, VOICE_LANGUAGES, PATIENCE_LEVELS, VOICE_ACTION_TYPES, PATIENCE_TO_RESPONSIVENESS, ACTION_NAME, TRANSFER_NUMBER, IANA_TZ, MAX_CALL_SECONDS, DEFAULT_MAX_CALL_SECONDS, VOICE_AGENT_COMPARABLE, UNPROVEN_BINDING_FIX, READBACK_FAILED, AGENT_PAGE_SIZE, AGENT_PAGE_CAP, NO_NUMBER_TASK, WorkingHours, PostCallNotify, Translation, AGENT_FIELDS;
 var init_voice_ai = __esm({
   "src/tools/voice-ai.ts"() {
     "use strict";
@@ -10228,6 +10262,7 @@ var init_voice_ai = __esm({
       "isAgentAsBackupDisabled",
       "translation"
     ];
+    UNPROVEN_BINDING_FIX = (agentName, numbers) => `"${agentName}" carries ${numbers.join(", ")} in a shape GoHighLevel did not route to the agent when tested (a call went to voicemail, 2026-09-15). Rebind it with update_voice_agent (inboundNumber "${numbers[0]}"), or connect the number in the agent's Deploy tab in GoHighLevel, then run check_voice_ai_readiness again.`;
     READBACK_FAILED = (what, id, error) => `GoHighLevel accepted the ${what} (${id}) but the read after it failed: ${error.slice(0, 200)}. The write is ASSERTED, not proven. Do NOT repeat the write \u2014 read get_voice_agent first.`;
     AGENT_PAGE_SIZE = 50;
     AGENT_PAGE_CAP = 100;
@@ -11773,6 +11808,9 @@ function hexToOklch(hex) {
   if (!c) throw new Error(`not a colour: ${hex}`);
   return rgbToOklch(c);
 }
+function oklchToHex(o) {
+  return toHex(oklchToRgb(o));
+}
 function oklchCss(o) {
   return `oklch(${(o.l * 100).toFixed(1)}% ${o.c.toFixed(3)} ${o.h.toFixed(1)})`;
 }
@@ -12182,6 +12220,176 @@ var init_ghl_page = __esm({
   }
 });
 
+// src/command-os/design/rendered-palette.ts
+function kindOf(prop) {
+  if (/background|bgcolor/i.test(prop)) return "background";
+  if (/border|outline|shadow/i.test(prop)) return "border";
+  if (prop === "color") return "text";
+  return "other";
+}
+function pageVariables(envelope) {
+  const defs = /* @__PURE__ */ new Map();
+  const fromCss = (css2) => {
+    for (const block of css2.matchAll(/:root\s*\{([^}]*)\}/g)) {
+      for (const m of block[1].matchAll(/--([\w-]+)\s*:\s*([^;]+)/g)) if (!defs.has(m[1])) defs.set(m[1], m[2].trim());
+    }
+  };
+  const root = isRecord8(envelope) ? envelope : {};
+  if (typeof root.pageStyles === "string") fromCss(root.pageStyles);
+  const walk = (node) => {
+    if (Array.isArray(node)) return void node.forEach(walk);
+    if (!isRecord8(node)) return;
+    for (const [k, v] of Object.entries(node)) {
+      if (k.startsWith("--") && typeof v === "string" && !defs.has(k.slice(2))) defs.set(k.slice(2), v.trim());
+      else if (typeof v === "string" && v.includes(":root")) fromCss(v);
+      else walk(v);
+    }
+  };
+  walk(root);
+  return defs;
+}
+function resolveValue(raw, defs) {
+  let v = raw.trim();
+  for (let i = 0; i < 10; i++) {
+    const m = /^var\(\s*--([\w-]+)\s*(?:,\s*([^)]*))?\)$/.exec(v);
+    if (!m) return v;
+    const next = defs.get(m[1]) ?? m[2];
+    if (next === void 0) return null;
+    v = next.trim();
+  }
+  return null;
+}
+function normaliseColour(value) {
+  if (value === null) return null;
+  if (/^transparent$/i.test(value)) return "transparent";
+  const c = parseColor(value);
+  if (!c) return null;
+  if (c.a === 0) return "transparent";
+  if (c.a < 1) return `rgba(${Math.round(c.r)}, ${Math.round(c.g)}, ${Math.round(c.b)}, ${Number(c.a.toFixed(3))})`;
+  return toHex(c);
+}
+function renderedPalette(envelope) {
+  const defs = pageVariables(envelope);
+  const paints = [];
+  const walk = (node, path40, prop) => {
+    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path40}[${i}]`, prop));
+    if (isRecord8(node)) {
+      for (const [k, x] of Object.entries(node)) {
+        if (DEFINITION_KEYS.has(k) || k.startsWith("--")) continue;
+        walk(x, `${path40}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
+      }
+      return;
+    }
+    if (typeof node !== "string") return;
+    const raw = node.trim();
+    if (!/^var\(/.test(raw) && !COLOUR_LITERAL.test(raw)) return;
+    const resolved2 = resolveValue(raw, defs);
+    const colour = normaliseColour(resolved2);
+    if (colour === null && resolved2 !== null) return;
+    paints.push({ path: path40, prop, kind: kindOf(prop), colour });
+  };
+  walk(envelope, "", "");
+  const face = (name, settingsKey) => {
+    const fromVar = resolveValue(`var(--${name})`, defs);
+    if (fromVar) return fromVar.replace(/['"]/g, "").trim() || null;
+    const settings = envelope?.settings?.settings?.typography?.fonts?.[settingsKey];
+    return typeof settings?.value?.text === "string" && settings.value.text.trim() ? settings.value.text.trim() : null;
+  };
+  return { paints, fonts: { headline: face("headlinefont", "headlineFont"), body: face("contentfont", "contentFont") } };
+}
+function contrastLosses(before, after) {
+  const afterByPath = new Map(after.paints.map((p) => [p.path, p.colour]));
+  const groups = /* @__PURE__ */ new Map();
+  for (const p of before.paints) {
+    const to = afterByPath.get(p.path);
+    if (p.kind !== "text" && p.kind !== "background" || !p.colour?.startsWith("#") || !to?.startsWith("#")) continue;
+    const g = groups.get(paintGroup(p.path)) ?? { texts: [], backgrounds: [] };
+    (p.kind === "text" ? g.texts : g.backgrounds).push([p.colour, to]);
+    groups.set(paintGroup(p.path), g);
+  }
+  const out = /* @__PURE__ */ new Map();
+  for (const [where, g] of groups) {
+    for (const [t0, t1] of g.texts) for (const [b0, b1] of g.backgrounds) {
+      const was = contrastHex(t0, b0), now = contrastHex(t1, b1);
+      if (was >= 4.5 && now < 4.5 && !out.has(`${t1} ${b1}`)) out.set(`${t1} ${b1}`, { where, text: t1, background: b1, before: Number(was.toFixed(2)), after: Number(now.toFixed(2)) });
+    }
+  }
+  return [...out.values()];
+}
+function repaintReport(before, after) {
+  const a = renderedPalette(before), b = renderedPalette(after);
+  const afterByPath = new Map(b.paints.map((p) => [p.path, p]));
+  const changes = /* @__PURE__ */ new Map();
+  const unchanged = /* @__PURE__ */ new Map();
+  const tally = { background: { uses: 0, changed: 0 }, neutral: { uses: 0, changed: 0 }, text: { uses: 0, changed: 0 } };
+  const coloured = (c) => c.startsWith("#") && hexToOklch(c).c >= CARRIES_COLOUR;
+  for (const p of a.paints) {
+    if (!p.colour || p.colour === "transparent") continue;
+    const q2 = afterByPath.get(p.path);
+    const to = q2?.colour ?? null;
+    const differs = to !== null && looksDifferent(p.colour, to);
+    if (p.kind === "background" || p.kind === "text") {
+      const t = p.kind === "text" ? tally.text : coloured(p.colour) ? tally.background : tally.neutral;
+      t.uses++;
+      if (differs) t.changed++;
+      else {
+        const key = `${p.kind} ${p.colour}`;
+        const u = unchanged.get(key) ?? { kind: p.kind, colour: p.colour, uses: 0 };
+        u.uses++;
+        unchanged.set(key, u);
+      }
+    }
+    if (differs) {
+      const key = `${p.kind} ${p.colour} ${to}`;
+      const c = changes.get(key) ?? { kind: p.kind, from: p.colour, to, uses: 0 };
+      c.uses++;
+      changes.set(key, c);
+    }
+  }
+  const byUses = (xs) => [...xs].sort((x, y) => y.uses - x.uses);
+  const changeList = byUses(changes.values());
+  const unchangedList = byUses(unchanged.values());
+  const fonts = { headline: { from: a.fonts.headline, to: b.fonts.headline }, body: { from: a.fonts.body, to: b.fonts.body } };
+  const fontsChanged = fonts.headline.from !== fonts.headline.to || fonts.body.from !== fonts.body.to;
+  const bg = tally.background;
+  const share = bg.uses ? bg.changed / bg.uses : 0;
+  const verdict = changeList.length === 0 && !fontsChanged ? "unchanged" : share < BARELY_SHARE ? "barely" : "repainted";
+  const list2 = (xs, n = 6) => xs.slice(0, n).map((x) => x.colour ? `${x.colour} on ${x.uses}` : `${x.from} to ${x.to} on ${x.uses}`).join(", ");
+  const bgChanges = changeList.filter((c) => c.kind === "background" && coloured(c.from));
+  const bgKept = unchangedList.filter((u) => u.kind === "background" && coloured(u.colour));
+  const faceLine = (role, f) => f.from === f.to ? `${role} still ${f.from ?? "no set face"}` : `${role} ${f.from ?? "no set face"} to ${f.to ?? "no set face"}`;
+  const colourLine = verdict === "unchanged" ? "Nothing the page paints changed: every background, text colour and face is the template's own." : bg.uses === 0 ? "The visible palette barely changed: the template paints no background in a colour, only white, black and greys, so there was little colour to repaint." : verdict === "barely" ? `The visible palette barely changed: ${bg.changed} of ${bg.uses} coloured backgrounds now look different${bgChanges.length ? ` (${list2(bgChanges)})` : ""}.${bgKept.length ? ` Still in the template's own colours: ${list2(bgKept)}.` : ""}` : `Repainted: ${bg.changed} of ${bg.uses} coloured backgrounds now look different (${list2(bgChanges)}).${bgKept.length ? ` Left looking as they were: ${list2(bgKept)}.` : ""}`;
+  const contrast = contrastLosses(a, b);
+  const summary = [
+    ...contrast.length ? [`Harder to read: ${contrast.length} text and background pair(s) that met WCAG AA no longer do (${contrast.slice(0, 4).map((c) => `${c.text} type on ${c.background} is ${c.after}:1, was ${c.before}:1`).join("; ")}).`] : [],
+    colourLine,
+    `White, black and grey backgrounds: ${tally.neutral.changed} of ${tally.neutral.uses} look different.`,
+    `Text colour changed on ${tally.text.changed} of ${tally.text.uses} uses.`,
+    `Faces: ${faceLine("headlines", fonts.headline)}, ${faceLine("body text", fonts.body)}.`
+  ].join(" ");
+  return { verdict, summary, backgrounds: bg, neutralBackgrounds: tally.neutral, text: tally.text, changes: changeList, unchanged: unchangedList, fonts, contrast };
+}
+var DEFINITION_KEYS, WRAPPER_KEYS, isRecord8, COLOUR_LITERAL, VISIBLE_CHANGE, BARELY_SHARE, CARRIES_COLOUR, paintGroup, looksDifferent;
+var init_rendered_palette = __esm({
+  "src/command-os/design/rendered-palette.ts"() {
+    "use strict";
+    init_color();
+    DEFINITION_KEYS = /* @__PURE__ */ new Set(["pageStyles", "general", "rootVars", "sectionStyles", "typography", "fontsToLoad", "fontsToLoadForPreview"]);
+    WRAPPER_KEYS = /* @__PURE__ */ new Set(["value", "styles", "extra", "metaData"]);
+    isRecord8 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    COLOUR_LITERAL = /^(#[0-9a-fA-F]{3,8}|rgba?\([^)]*\)|hsla?\([^)]*\)|transparent)$/i;
+    VISIBLE_CHANGE = 0.05;
+    BARELY_SHARE = 0.5;
+    CARRIES_COLOUR = 0.02;
+    paintGroup = (path40) => /^\.(sections|popups)\[\d+\]/.exec(path40)?.[0]?.slice(1) ?? "page";
+    looksDifferent = (a, b) => {
+      if (a === b) return false;
+      if (a === "transparent" || b === "transparent" || a.startsWith("rgba") || b.startsWith("rgba")) return a !== b;
+      return deltaEHex(a, b) >= VISIBLE_CHANGE;
+    };
+  }
+});
+
 // src/command-os/design/retheme.ts
 function hexHistogram(envelope) {
   const counts = /* @__PURE__ */ new Map();
@@ -12194,49 +12402,147 @@ function hexHistogram(envelope) {
 function isIconFont(family) {
   return ICON_FONTS.test(family);
 }
-function derivePalette(envelope) {
-  const hist = [...hexHistogram(envelope).entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
+function usageOf(paints) {
+  const u = { background: /* @__PURE__ */ new Map(), text: /* @__PURE__ */ new Map(), all: /* @__PURE__ */ new Map() };
+  const bump = (m, hex) => m.set(hex, (m.get(hex) ?? 0) + 1);
+  for (const p of paints) {
+    if (!p.colour || !p.colour.startsWith("#")) continue;
+    const hex = p.colour.toLowerCase();
+    bump(u.all, hex);
+    if (p.kind === "background") bump(u.background, hex);
+    if (p.kind === "text") bump(u.text, hex);
+  }
+  return u;
+}
+function usageOrHexes(envelope) {
+  const u = usageOf(renderedPalette(envelope).paints);
+  if (u.all.size === 0) for (const [hex, n] of hexHistogram(envelope)) u.all.set(hex, n);
+  return u;
+}
+function derivePaletteFromUsage(u, fonts) {
+  const sorted = (m) => [...m.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
+  const painted = u.background.size + u.text.size > 0;
+  const merged = new Map(u.background);
+  for (const [hex, n] of u.text) merged.set(hex, (merged.get(hex) ?? 0) + n);
+  const primary = painted ? merged : u.all;
+  const hist = sorted(primary);
   const undecided = [];
-  const coloured = hist.filter(([hex]) => !isNeutralHex(hex) && hexToOklch(hex).c >= BRAND_CHROMA);
-  const neutrals = hist.filter(([hex]) => isNeutralHex(hex) || hexToOklch(hex).c < BRAND_CHROMA);
-  const accent = coloured[0]?.[0] ?? null;
+  const isColoured = (hex) => !isNeutralHex(hex) && hexToOklch(hex).c >= BRAND_CHROMA;
+  const isGreyish = (hex) => isNeutralHex(hex) || hexToOklch(hex).c < BRAND_CHROMA;
+  const firstOf = (pred, ...maps) => {
+    for (const m of maps) {
+      const hit = sorted(m).find(([hex]) => pred(hex));
+      if (hit) return hit[0];
+    }
+    return null;
+  };
+  const accent = painted ? firstOf(isColoured, u.background, u.text) : firstOf(isColoured, primary);
   if (!accent) undecided.push("no strongly-coloured hex appears in this page, so it has no accent to swap \u2014 it is already a greyscale design");
   const SECOND_COLOUR_DISTANCE = 0.12;
-  const secondary = accent ? coloured.find(([hex]) => deltaEHex(hex, accent) > SECOND_COLOUR_DISTANCE)?.[0] ?? null : null;
-  const lights = neutrals.filter(([hex]) => hexToOklch(hex).l > 0.85);
-  const darks = neutrals.filter(([hex]) => hexToOklch(hex).l < 0.4);
-  const surface = lights[0]?.[0] ?? null;
-  const text2 = darks[0]?.[0] ?? null;
+  const secondary = accent ? hist.find(([hex]) => isColoured(hex) && deltaEHex(hex, accent) > SECOND_COLOUR_DISTANCE)?.[0] ?? null : null;
+  const light = (hex) => isGreyish(hex) && hexToOklch(hex).l > 0.85;
+  const dark = (hex) => isGreyish(hex) && hexToOklch(hex).l < 0.4;
+  const surface = painted ? firstOf(light, u.background, primary) : firstOf(light, primary);
+  const text2 = painted ? firstOf(dark, u.text, primary) : firstOf(dark, primary);
   if (!surface) undecided.push("no light neutral is used often enough to be the page background");
   if (!text2) undecided.push("no dark neutral is used often enough to be the body text colour");
-  const varSlug = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
-  const serialized = JSON.stringify(envelope);
-  const fonts = declaredFonts(envelope).filter((f) => !isIconFont(f)).map((f) => ({ family: f, uses: (serialized.match(new RegExp(`--${varSlug(f)}\\b`, "g")) ?? []).length })).filter((f) => f.uses > 0).sort((a, b) => b.uses - a.uses || a.family.localeCompare(b.family)).map((f) => f.family).slice(0, 2);
-  const tint = hist.find(([hex]) => {
+  const isTint = (hex) => {
     if (hex === surface || hex === accent) return false;
     const { l } = hexToOklch(hex);
     return l > 0.7 && l < 0.97;
-  })?.[0] ?? null;
-  return { accent, surface, text: text2, secondary, tint, fonts, undecided };
+  };
+  const tint = painted ? firstOf(isTint, u.background, primary) : firstOf(isTint, primary);
+  const taken = new Set([accent, surface, text2, secondary, tint].filter((x) => !!x));
+  const tones = painted ? hist.map(([hex]) => hex).filter((hex) => !taken.has(hex) && isGreyish(hex) && hexToOklch(hex).c >= TONE_CHROMA) : [];
+  return { accent, surface, text: text2, secondary, tint, tones, fonts, undecided };
+}
+function pageFaces(envelope) {
+  const named = renderedPalette(envelope).fonts;
+  const real = (f) => !!f && !isIconFont(f) && !/^var\(/.test(f);
+  const varSlug = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
+  const serialized = JSON.stringify(envelope);
+  const byUse = declaredFonts(envelope).filter((f) => !isIconFont(f)).map((f) => ({ family: f, uses: (serialized.match(new RegExp(`--${varSlug(f)}\\b`, "g")) ?? []).length })).filter((f) => f.uses > 0).sort((a, b) => b.uses - a.uses || a.family.localeCompare(b.family)).map((f) => f.family);
+  const ordered = [.../* @__PURE__ */ new Set([...real(named.headline) ? [named.headline] : [], ...real(named.body) ? [named.body] : [], ...byUse])];
+  return ordered.slice(0, 2);
+}
+function derivePalette(envelope) {
+  return derivePaletteFromUsage(usageOrHexes(envelope), pageFaces(envelope));
+}
+function sectionPairs(envelope) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const p of renderedPalette(envelope).paints) {
+    if (!p.colour?.startsWith("#") || p.kind !== "background" && p.kind !== "text") continue;
+    const key = /^\.(sections|popups)\[\d+\]/.exec(p.path)?.[0] ?? "page";
+    const g = groups.get(key) ?? { where: key.replace(/^\./, ""), backgrounds: /* @__PURE__ */ new Set(), texts: /* @__PURE__ */ new Set() };
+    (p.kind === "background" ? g.backgrounds : g.texts).add(p.colour.toLowerCase());
+    groups.set(key, g);
+  }
+  return [...groups.values()];
 }
 function rethemeEnvelope(envelope, brand, derived = derivePalette(envelope)) {
   const swaps = [];
   const skipped = [];
   const warnings = [...derived.undecided];
-  let text2 = JSON.stringify(envelope);
-  const swap = (role, from, to) => {
+  const plan = [];
+  const want = (role, from, to, guarded2 = false) => {
     if (!from) return void skipped.push(`${role}: the template has none to replace`);
     if (from.toLowerCase() === to.toLowerCase()) return void skipped.push(`${role}: the template already uses ${to}`);
-    const re = new RegExp(escapeRe(from), "gi");
+    plan.push({ role, from: from.toLowerCase(), to, guarded: guarded2 });
+  };
+  want("accent", derived.accent, brand.colors.accent.hex);
+  want("surface", derived.surface, brand.colors.surface.hex);
+  want("body text", derived.text, brand.colors.fg.hex);
+  if (derived.secondary) want("second colour", derived.secondary, brand.colors.muted.hex);
+  if (derived.tint) want("section tint", derived.tint, brand.pageStudioTheme.primarySoft, true);
+  const brandHue = hexToOklch(brand.colors.accent.hex);
+  for (const tone of derived.tones ?? []) {
+    if (brandHue.c < NEUTRAL_CHROMA) {
+      skipped.push(`tone ${tone}: the brand's accent is a grey, so it has no hue to carry`);
+      continue;
+    }
+    const o = hexToOklch(tone);
+    want("design tone", tone, oklchToHex({ l: o.l, c: o.c, h: brandHue.h }), true);
+  }
+  const target = (hex) => plan.find((x) => x.from === hex)?.to ?? hex;
+  const pairs = sectionPairs(envelope);
+  const losses = () => {
+    const out = [];
+    for (const g of pairs) for (const bg of g.backgrounds) for (const t of g.texts) {
+      const before = contrastHex(t, bg);
+      if (before < 4.5) continue;
+      const after = contrastHex(target(t), target(bg));
+      if (after >= 4.5) continue;
+      out.push({ where: g.where, t, bg, before, after, involved: plan.filter((x) => x.from === t || x.from === bg) });
+    }
+    return out;
+  };
+  const sayLoss = (l) => `${l.where}: ${target(l.t).toUpperCase()} type on ${target(l.bg).toUpperCase()} would be ${l.after.toFixed(2)}:1 (it was ${l.before.toFixed(2)}:1); WCAG AA wants 4.5.`;
+  for (let pass = 0; pass <= plan.length; pass++) {
+    const hit = losses().find((l) => l.involved.some((x) => x.guarded));
+    if (!hit) break;
+    for (const step of hit.involved.filter((x) => x.guarded)) {
+      skipped.push(`${step.role} ${step.from}: left as it was, because ${sayLoss(hit)}`);
+      plan.splice(plan.indexOf(step), 1);
+    }
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const l of losses()) {
+    const line3 = `${sayLoss(l)} Kept, because ${l.involved.map((x) => `the ${x.role}`).join(" and ")} ${l.involved.length > 1 ? "are" : "is"} the brand's own colour: check this section before a client sees it.`;
+    if (!seen.has(`${target(l.t)} ${target(l.bg)}`)) warnings.push(line3);
+    seen.add(`${target(l.t)} ${target(l.bg)}`);
+  }
+  let text2 = JSON.stringify(envelope);
+  const colourTokens = [];
+  plan.forEach((step, i) => {
+    const re = new RegExp(escapeRe(step.from), "gi");
     const occurrences = (text2.match(re) ?? []).length;
-    text2 = text2.replace(re, to);
-    swaps.push({ role, from, to, occurrences });
-  };
-  swap("accent", derived.accent, brand.colors.accent.hex);
-  swap("surface", derived.surface, brand.colors.surface.hex);
-  swap("body text", derived.text, brand.colors.fg.hex);
-  if (derived.secondary) swap("second colour", derived.secondary, brand.colors.muted.hex);
-  if (derived.tint) swap("section tint", derived.tint, brand.pageStudioTheme.primarySoft);
+    if (occurrences === 0) return;
+    const token2 = `\0COLOUR${i}\0`;
+    text2 = text2.replace(re, token2);
+    colourTokens.push({ token: token2, to: step.to });
+    swaps.push({ role: step.role, from: step.from, to: step.to, occurrences });
+  });
+  for (const { token: token2, to } of colourTokens) text2 = text2.split(token2).join(to);
   const display = brand.pageStudioTheme.headingFont;
   const body = brand.pageStudioTheme.bodyFont;
   const slug3 = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
@@ -12262,27 +12568,30 @@ function rethemeEnvelope(envelope, brand, derived = derivePalette(envelope)) {
       `White text on this brand's accent ${brand.colors.accent.hex} is ${onAccent.toFixed(2)}:1 \u2014 WCAG AA wants 4.5. If the template puts white on its buttons they will fail; ${brand.colors.fg.hex} on that accent is ${contrastHex(brand.colors.fg.hex, brand.colors.accent.hex).toFixed(2)}:1.`
     );
   }
-  return { envelope: JSON.parse(text2), swaps, skipped, warnings };
+  const painted = JSON.parse(text2);
+  return { envelope: painted, swaps, skipped, warnings, report: repaintReport(envelope, painted) };
 }
 function derivePaletteAcross(envelopes) {
-  const pooled2 = /* @__PURE__ */ new Map();
+  const pooled2 = { background: /* @__PURE__ */ new Map(), text: /* @__PURE__ */ new Map(), all: /* @__PURE__ */ new Map() };
   for (const env2 of envelopes) {
-    for (const [hex, n] of hexHistogram(env2)) pooled2.set(hex, (pooled2.get(hex) ?? 0) + n);
+    const u = usageOrHexes(env2);
+    for (const k of ["background", "text", "all"]) for (const [hex, n] of u[k]) pooled2[k].set(hex, (pooled2[k].get(hex) ?? 0) + n);
   }
-  const synthetic = [...pooled2.entries()].flatMap(([hex, n]) => Array.from({ length: n }, () => hex));
-  const base = derivePalette({ pooled: synthetic });
   const fonts = [];
-  for (const env2 of envelopes) for (const f of derivePalette(env2).fonts) if (!fonts.includes(f)) fonts.push(f);
-  return { ...base, fonts };
+  for (const env2 of envelopes) for (const f of pageFaces(env2)) if (!fonts.includes(f)) fonts.push(f);
+  return derivePaletteFromUsage(pooled2, fonts.slice(0, 2));
 }
-var ICON_FONTS, BRAND_CHROMA, escapeRe;
+var ICON_FONTS, BRAND_CHROMA, TONE_CHROMA, escapeRe;
 var init_retheme = __esm({
   "src/command-os/design/retheme.ts"() {
     "use strict";
     init_color();
     init_ghl_page();
+    init_rendered_palette();
+    init_rendered_palette();
     ICON_FONTS = /font\s*awesome|material\s*(icons|symbols)|glyphicons|ionicons|feather|bootstrap-icons|fontello|typicons|dashicons/i;
     BRAND_CHROMA = 0.06;
+    TONE_CHROMA = 0.02;
     escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   }
 });
@@ -16782,7 +17091,8 @@ ${await response.text()}`);
             problems.push(`${step.name}: the branded page saved but GoHighLevel is not serving it`);
             continue;
           }
-          const savedText = JSON.stringify(await (await fetch(savedUrl)).json()).toLowerCase();
+          const savedPage = await (await fetch(savedUrl)).json();
+          const savedText = JSON.stringify(savedPage).toLowerCase();
           const stillThere = palette.accent && savedText.includes(palette.accent.toLowerCase());
           if (stillThere) {
             problems.push(`${step.name}: the template's own ${palette.accent} is still in the saved page \u2014 a partial swap, so the original was kept`);
@@ -16793,14 +17103,25 @@ ${await response.text()}`);
             problems.push(`${step.name}: the brand's ${brand.colors.accent.hex} is not in the saved page \u2014 the paint did not land, so the original was kept`);
             continue;
           }
+          const repaint = repaintReport(envelope, savedPage);
+          const pageWarnings = painted.warnings.filter((w) => !palette.undecided.includes(w));
           done.push({
             page: step.name,
             newPageId,
             oldStepId: step.stepId,
-            swaps: painted.swaps.map((sw) => `${sw.role} ${sw.from} \u2192 ${sw.to} (${sw.occurrences}\xD7)`),
+            repaint: {
+              verdict: repaint.verdict,
+              summary: repaint.summary,
+              backgrounds: repaint.backgrounds,
+              neutralBackgrounds: repaint.neutralBackgrounds,
+              text: repaint.text,
+              changes: repaint.changes.filter((c) => c.kind === "background" || c.kind === "text"),
+              fonts: repaint.fonts,
+              contrast: repaint.contrast
+            },
             skipped: painted.skipped,
-            preview: ghlPreviewUrl(newPageId),
-            readBack: `template ${palette.accent ?? "(no accent)"} gone; brand ${brand.colors.accent.hex} present`
+            ...pageWarnings.length ? { warnings: pageWarnings } : {},
+            preview: ghlPreviewUrl(newPageId)
           });
         } catch (e) {
           problems.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
@@ -16827,6 +17148,19 @@ ${await response.text()}`);
         brand: { slug: brand.slug, accent: brand.colors.accent.hex, display: brand.pageStudioTheme.headingFont, body: brand.pageStudioTheme.bodyFont },
         templatePalette: { accent: palette.accent, surface: palette.surface, text: palette.text, secondary: palette.secondary, faces: palette.fonts, undecided: palette.undecided },
         pages: done,
+        ...(() => {
+          const faint = done.filter((d) => d.repaint.verdict !== "repainted").map((d) => String(d.page));
+          const hard = done.filter((d) => d.repaint.contrast.length > 0);
+          const lines = [
+            ...faint.length ? [`On ${faint.join(", ")} the visible palette barely changed. Each page's repaint says what still paints in the template's own colours.`] : [],
+            ...hard.length ? [`On ${hard.map((d) => String(d.page)).join(", ")} some type is now harder to read than WCAG AA allows; each page's repaint.contrast names the colours.`] : []
+          ];
+          const contrast = hard.flatMap((d) => d.repaint.contrast.map((c) => `${String(d.page)}: ${c.text} type on ${c.background} is ${c.after}:1 (was ${c.before}:1).`));
+          return {
+            ...lines.length ? { repaintNote: `${lines.join(" ")} Look at the preview before calling it branded.` } : {},
+            ...contrast.length ? { contrast } : {}
+          };
+        })(),
         originalsRemoved: complete && removeOriginals ? removed : 0,
         ...problems.length > 0 && { problems, kept: "Every original step was LEFT IN PLACE because something failed. Nothing was deleted." },
         ...namedButNotNew && { identification: "GoHighLevel named a funnel that this account ALREADY had before the install. That name was discarded and the account was compared instead, so the funnel above was identified the cautious way and originals are only removed if you asked for it explicitly. Worth reporting: it means the install response no longer means what it did." },
@@ -19516,7 +19850,7 @@ function traceOpportunityContext(node, byId2) {
   }
   return "dangling";
 }
-function isRecord8(v) {
+function isRecord9(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isUuidV4(id) {
@@ -19612,8 +19946,8 @@ function checkSaveBlockers(workflow) {
       });
     }
     {
-      const attrs = isRecord8(a.attributes) ? a.attributes : void 0;
-      const startAfter = attrs && isRecord8(attrs.startAfter) ? attrs.startAfter : void 0;
+      const attrs = isRecord9(a.attributes) ? a.attributes : void 0;
+      const startAfter = attrs && isRecord9(attrs.startAfter) ? attrs.startAfter : void 0;
       if (startAfter && (startAfter.type === "day" || startAfter.type === "minute")) {
         findings.push({
           severity: "warning",
@@ -19625,8 +19959,8 @@ function checkSaveBlockers(workflow) {
       }
     }
     if (type === "internal_notification") {
-      const attrs = isRecord8(a.attributes) ? a.attributes : void 0;
-      const notif = attrs && isRecord8(attrs.notification) ? attrs.notification : void 0;
+      const attrs = isRecord9(a.attributes) ? a.attributes : void 0;
+      const notif = attrs && isRecord9(attrs.notification) ? attrs.notification : void 0;
       const selected = notif?.selectedUser;
       const blank = selected === void 0 || selected === null || typeof selected === "string" && selected.trim() === "";
       if (notif?.userType === "user" && blank) {
@@ -22362,7 +22696,7 @@ function executablePlanLines(saved) {
     funnel: "funnel"
   };
   const words = (s) => s.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[_.-]+/g, " ").trim();
-  const kindOf = (s) => kinds[s] || words(s).replace(/s$/, "") || "plan object";
+  const kindOf2 = (s) => kinds[s] || words(s).replace(/s$/, "") || "plan object";
   const names = /* @__PURE__ */ new Map();
   const objects = /* @__PURE__ */ new Map();
   const label = (x, kind) => x.name?.trim() || x.title?.trim() || [x.firstName, x.lastName].filter(Boolean).join(" ") || `Unnamed ${kind}`;
@@ -22384,7 +22718,7 @@ function executablePlanLines(saved) {
   const refs = [...names.keys()].sort((a, b) => b.length - a.length);
   const refPattern = refs.length ? new RegExp(`(?<![\\w./:@])(?:${refs.map(escapeRE).join("|")})(?![\\w]|\\.[\\w])`, "g") : void 0;
   const missingRefPattern = /(?<![\w./:@])(user|pipeline|stage|field|tag|workflow|form|calendar|email_template|sms_template|email|sms|cv|handoff|funnel)\.[a-z0-9_]+(?![\w]|\.[\w])/g;
-  const resolve12 = (s) => s.replace(missingRefPattern, (ref) => names.get(ref) || `Unnamed ${kindOf(ref.split(".")[0])}`);
+  const resolve12 = (s) => s.replace(missingRefPattern, (ref) => names.get(ref) || `Unnamed ${kindOf2(ref.split(".")[0])}`);
   const renderRefs = (s) => resolve12(refPattern ? s.replace(refPattern, (ref) => names.get(ref)) : s);
   const mergeLabel = (field) => {
     const [group, ...parts] = field.trim().split(".");
@@ -22403,7 +22737,7 @@ function executablePlanLines(saved) {
     const code = entity[2].toLowerCase() === "x" ? parseInt(entity.slice(3), 16) : parseInt(entity.slice(2), 10);
     return code <= 1114111 ? String.fromCodePoint(code) : entity;
   }).replace(/{{\s*([^{}]+?)\s*}}/g, (_all, field) => `[${mergeLabel(field)}]`)).replace(/\bMCP\b/g, "GHL Command").replace(/Agency OS/g, "Command OS").replace(/\s*—\s*/g, " ").replace(/\s+/g, " ").replace(/\s+([.,;!?])/g, "$1").trim();
-  const show = (v, key = "") => typeof v === "string" ? names.get(v) || (/Refs?$/.test(key) ? `Unnamed ${kindOf(key.replace(/Refs?$/, "").replace(/^teamMember$/, "user").replace(/^template$/, "message template"))}` : plain(key === "mergeTags" ? `{{${v}}}` : key === "type" ? words(v) : v)) : Array.isArray(v) ? v.map((value) => show(value, key)).join(", ") : v && typeof v === "object" ? Object.entries(v).filter(([k]) => k !== "ref").map(([k, value]) => `${words(k.replace(/Refs?$/, ""))}: ${show(value, k)}`).join("; ") : String(v ?? "");
+  const show = (v, key = "") => typeof v === "string" ? names.get(v) || (/Refs?$/.test(key) ? `Unnamed ${kindOf2(key.replace(/Refs?$/, "").replace(/^teamMember$/, "user").replace(/^template$/, "message template"))}` : plain(key === "mergeTags" ? `{{${v}}}` : key === "type" ? words(v) : v)) : Array.isArray(v) ? v.map((value) => show(value, key)).join(", ") : v && typeof v === "object" ? Object.entries(v).filter(([k]) => k !== "ref").map(([k, value]) => `${words(k.replace(/Refs?$/, ""))}: ${show(value, k)}`).join("; ") : String(v ?? "");
   const sentence = (s) => {
     const text2 = plain(s);
     return text2 && !/[.!?…]$/.test(text2) ? `${text2}.` : text2;
@@ -22411,7 +22745,7 @@ function executablePlanLines(saved) {
   const messageCopy = (t) => [t.subject ? `Subject: ${sentence(t.subject)}` : "", t.body || t.html ? `Message: ${sentence(t.body || t.html)}` : t.bodyOutline ? `Message outline: ${sentence(t.bodyOutline)}` : ""].filter(Boolean).join(" ");
   for (const section2 of ["users", "pipelines", "customFields", "fields", "tags", "customValues", "calendars", "forms", "funnels"]) for (const x of p?.[section2] ?? []) {
     const existing = preview?.items?.find((i) => i.ref === x.ref)?.status === "existing";
-    lines.push(`${existing ? "Reuse" : "Create"} ${kindOf(section2)}: ${label(x, kindOf(section2))}. ${show(Object.fromEntries(Object.entries(x).filter(([k]) => !["ref", "name"].includes(k))))}`);
+    lines.push(`${existing ? "Reuse" : "Create"} ${kindOf2(section2)}: ${label(x, kindOf2(section2))}. ${show(Object.fromEntries(Object.entries(x).filter(([k]) => !["ref", "name"].includes(k))))}`);
   }
   for (const w of p?.workflows ?? []) {
     lines.push(`Workflow: ${label(w, "workflow")}. ${show(w.trigger || w.triggers || "")}`);
@@ -26851,6 +27185,7 @@ ${saved.summary}
 5. ${STAFF_NOTIFICATION_RULE} A notification step whose recipient is empty is listed in issues as waiting for a staff member, never left unmentioned.
 6. ${MISSING_STEP_RULE}
 If the tool reports that no saved plan exists, STOP and finish with RESULT: {"ok":false,"error":"no saved plan on this machine \u2014 run the build stage fresh"}.
+If apply_build_plan answers phase:"scope" (nothing is selected for this client, or the selection changed after the plan was saved), STOP: build nothing else and finish with RESULT: {"ok":false,"error":"<its error, word for word>"}.
 ${NO_INVENTED_CAUSE_RULE}
 Finish with EXACTLY one final line:
 RESULT: {"ok":true,"summary":"<what was created vs already in place: counts of pipelines/fields/tags/workflows>","issues":["<anything skipped or needing a human>"]}`;
@@ -30060,14 +30395,7 @@ function assessmentFeatureLines(snapshot, purchased = [], availableOnly = true)
   });
 }
 function assessmentPurchasesFor(state, id) {
-  const saved = state.assessmentPurchases?.[id], scope = state.scope?.[id];
-  if (!scope) return saved;
-  return [...new Set([
-    ...saved ?? [],
-    ...scope.features.map((f) => BUILD_ASSESSMENT_FEATURE[f]),
-    "pipeline"
-    // Every scoped build includes the pipeline foundation.
-  ].filter(Boolean))];
+  return state.assessmentPurchases?.[id];
 }
 function upsellFigure(snapshot, feature) {
   const id = BUILD_ASSESSMENT_FEATURE[feature];
@@ -30707,6 +31035,16 @@ function savePlanRecord(rec, base) {
   fs22.writeFileSync(file2, JSON.stringify({ ...rec, contentHash: contentHash(rec.plan), inputHash: rec.inputHash ?? process.env.GHL_COMMAND_INTAKE_HASH, dependencies: rec.dependencies ?? planDependencies(rec.plan) }, null, 2), { mode: 384 });
   return file2;
 }
+function savedPlanMatchesScope(saved, current) {
+  if (!saved) return false;
+  if (!current || current.wholePreset) return !saved.scope;
+  if (!saved.scope) return false;
+  const omitted = (saved.scope.omitted ?? []).map((f) => f.id);
+  const offered = /* @__PURE__ */ new Set([...saved.scope.built, ...saved.scope.notBuilt.map((f) => f.id), ...omitted]);
+  const selected = new Set(current.features.filter((f) => offered.has(f)));
+  const planned = /* @__PURE__ */ new Set([...saved.scope.built, ...omitted]);
+  return selected.size === planned.size && [...planned].every((f) => selected.has(f));
+}
 function readSavedPlan(locationId2, base) {
   try {
     return JSON.parse(fs22.readFileSync(path20.join(plansDir(base), `${locationId2}.json`), "utf8"));
@@ -31230,7 +31568,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.84.0",
+      version: "3.84.1",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -32240,16 +32578,8 @@ async function assessmentAttachmentAction(args, deps) {
       const chosen = args.purchasedFeatureIds;
       if (!Array.isArray(chosen) || chosen.some((id2) => !ASSESSMENT_FEATURES.some((f) => f.id === id2))) throw new Error("Choose features from the list.");
       const state2 = deps.read();
-      const scope = state2.scope?.[id];
-      const features = FEATURE_IDS.filter((f) => chosen.includes(BUILD_ASSESSMENT_FEATURE[f]));
-      const next = {
-        ...state2,
-        scope: { ...state2.scope, [id]: { ...scope ?? {}, features, setAt: (/* @__PURE__ */ new Date()).toISOString() } },
-        assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] }
-      };
-      next.assessmentPurchases[id] = assessmentPurchasesFor(next, id);
-      deps.write(next);
-      detail.message = "What they bought is saved for this client document.";
+      deps.write({ ...state2, assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] } });
+      detail.message = state2.scope?.[id] ? "What they bought is saved for this client document. The build still follows the selection confirmed on the Review screen." : "What they bought is saved. Nothing is built until you confirm what to build on the Review screen, which is ticked from this.";
       break;
     }
     default:
@@ -32271,7 +32601,6 @@ var init_attachment_actions = __esm({
   "src/command-os/assessment/attachment-actions.ts"() {
     "use strict";
     init_attachment();
-    init_features();
   }
 });
 
@@ -34745,14 +35074,15 @@ function reviewDocumentHtml(review, opts) {
   const date = (/* @__PURE__ */ new Date()).toLocaleDateString(void 0, { year: "numeric", month: "long", day: "numeric" });
   const gap = (g) => `<div class="gap ${g.priority}"><div class="gt">${esc8(g.title)}<span class="pri">${g.priority === "now" ? "Fix first" : g.priority === "soon" ? "Next" : "Later"}</span></div>${g.cost ? `<div class="gc">${esc8(g.cost)}</div>` : ""}${g.fix ? `<div class="gf">What we do: ${esc8(g.fix)}</div>` : ""}</div>`;
   const o = review.offer;
-  const purchased = opts.scope || opts.purchasedFeatureIds ? [.../* @__PURE__ */ new Set([
+  const confirmed = opts.scope && !opts.scope.wholePreset && !opts.scope.awaitingConfirmation ? opts.scope : void 0;
+  const purchased = confirmed || opts.purchasedFeatureIds ? [.../* @__PURE__ */ new Set([
     ...opts.purchasedFeatureIds ?? [],
-    ...opts.scope ? [...opts.scope.built.map((f) => BUILD_ASSESSMENT_FEATURE[f.id]), "pipeline"] : []
+    ...confirmed ? [...confirmed.built.map((f) => BUILD_ASSESSMENT_FEATURE[f.id]), "pipeline"] : []
   ])] : void 0;
-  const unbought = opts.scope?.notBuilt.filter((f) => !purchased?.includes(BUILD_ASSESSMENT_FEATURE[f.id])) ?? [];
-  const represented = [...opts.scope?.built ?? [], ...unbought].map((f) => BUILD_ASSESSMENT_FEATURE[f.id]);
+  const unbuilt = opts.scope?.notBuilt ?? [];
+  const represented = [...opts.scope?.built ?? [], ...unbuilt].map((f) => BUILD_ASSESSMENT_FEATURE[f.id]).concat(opts.scope && !opts.scope.awaitingConfirmation ? ["pipeline"] : []);
   const assessmentNext = opts.assessment && purchased ? assessmentFeatureLines(opts.assessment, [...purchased, ...represented]) : [];
-  const available = unbought.map((f) => `<div class="build"><b>${esc8(f.name)}</b><span>${esc8(f.what)}${f.figure ? ` <b>${esc8(f.figure)}</b>` : ""}</span></div>`).join("") + assessmentNext.map((line3) => `<p>${esc8(line3)}</p>`).join("");
+  const available = unbuilt.map((f) => `<div class="build"><b>${esc8(f.name)}</b><span>${esc8(f.what)}${f.figure ? ` <b>${esc8(f.figure)}</b>` : ""}</span></div>`).join("") + assessmentNext.map((line3) => `<p>${esc8(line3)}</p>`).join("");
   return `<!doctype html><html><head><meta charset="utf-8"><title>${esc8(opts.clientName)} \u2014 Growth Blueprint</title><style>
   @page{margin:0.6in}
   *{box-sizing:border-box}
@@ -34809,7 +35139,9 @@ function reviewDocumentHtml(review, opts) {
     ${o.recommendedOffer ? `<div class="lead"><b>Run this instead:</b> ${esc8(o.recommendedOffer)}</div>` : ""}` : ""}
   ${review.gaps?.length ? `<div class="head">What's leaking today (${review.gaps.length})</div>${review.gaps.map(gap).join("")}` : ""}
   ${review.build?.length ? `<div class="head">What we're building</div>${review.build.map((b) => `<div class="build"><b>${esc8(b.item)}</b><span>${esc8(b.because)}</span></div>`).join("")}` : ""}
-  ${opts.scope ? `<div class="head">What this build includes</div>
+  ${opts.scope?.awaitingConfirmation ? `<div class="head">What this build includes</div>
+    <p>Not confirmed yet. What you bought is recorded, and the build waits until the features to build are confirmed.</p>
+` : opts.scope ? `<div class="head">What this build includes</div>
     <p>${opts.scope.package ? `Built to your <b>${esc8(opts.scope.package)}</b> package: ` : ""}${opts.scope.built.length ? esc8(opts.scope.built.map((b) => b.name).join(", ")) : "the foundation only"}. Always included: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing.</p>
 ` : ""}
   ${review.unknowns?.length ? `<div class="head">What we still need from you</div><div class="ask"><ul>${review.unknowns.map((u) => `<li>${esc8(u)}</li>`).join("")}</ul></div>` : ""}
@@ -35985,6 +36317,7 @@ __export(dashboard_exports, {
   resolvePlan: () => resolvePlan2,
   runDashboard: () => runDashboard,
   safeDocName: () => safeDocName,
+  scopePrefillFor: () => scopePrefillFor,
   setAccountIndustry: () => setAccountIndustry,
   setAccountType: () => setAccountType,
   setBuildApproval: () => setBuildApproval,
@@ -36046,6 +36379,8 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   const all = { ...state.scope ?? {} };
   if (!scope) {
     delete all[locationId2];
+  } else if ("wholePreset" in scope) {
+    all[locationId2] = { wholePreset: true, features: [...FEATURE_IDS], setAt: now().toISOString() };
   } else {
     const features = [...new Set(scope.features.filter(isFeatureId))];
     const pkg2 = typeof scope.package === "string" ? scope.package.trim().slice(0, 80) : "";
@@ -36053,19 +36388,18 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   }
   const next = { ...state, scope: all };
   if (!Object.keys(all).length) delete next.scope;
-  const purchases = { ...state.assessmentPurchases };
-  if (scope) purchases[locationId2] = assessmentPurchasesFor(next, locationId2);
-  return { ...next, assessmentPurchases: purchases };
+  return next;
 }
 function documentScopeFor(state, locationId2) {
   const sc = state.scope?.[locationId2];
-  if (!sc) return void 0;
+  if (!sc && Array.isArray(state.assessmentPurchases?.[locationId2])) return { awaitingConfirmation: true, built: [], notBuilt: [] };
   let offered = FEATURE_IDS;
   try {
     const chosen = loadPresetChoice(void 0, presetForIndustry(state.accounts?.[locationId2]?.industry));
     if (chosen.ok) offered = featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
   } catch {
   }
+  if (!sc || sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
   return {
     ...sc.package ? { package: sc.package } : {},
     // Built = the confirmed scope, the one record the build follows. The purchase
@@ -36078,6 +36412,11 @@ function documentScopeFor(state, locationId2) {
     })
   };
 }
+function scopePrefillFor(state, locationId2) {
+  const bought = state.assessmentPurchases?.[locationId2];
+  if (state.scope?.[locationId2] || !Array.isArray(bought)) return void 0;
+  return FEATURE_IDS.filter((f) => bought.includes(BUILD_ASSESSMENT_FEATURE[f]));
+}
 function assessmentFiguresFor(state, locationId2) {
   const snap = state.assessmentAttachments?.[locationId2];
   if (!snap) return {};
@@ -36164,9 +36503,11 @@ function startRun(locationId2, stage, onDone, meta = {}) {
     }).map((q2) => ({ key: q2.key, label: q2.label, from: INTAKE_QUESTIONS.find((b) => b.key === q2.key)?.label })),
     removedKeys: INTAKE_QUESTIONS.filter((b) => !composed.some((q2) => q2.key === b.key)).map((b) => b.key),
     // A build re-run reuses the approved plan already saved for this account (finding 10).
+    // ...and only while it still builds the scope the member has confirmed now: a
+    // changed selection composes the plan fresh from the preset (delta round 3, T-M4).
     savedPlan: (() => {
       const sp = stage === 3 ? readSavedPlan(locationId2) : null;
-      return sp && sp.inputHash === meta.inputHash ? { planId: sp.planId, savedAt: sp.savedAt, summary: planSummary(sp) } : void 0;
+      return sp && sp.inputHash === meta.inputHash && savedPlanMatchesScope(sp, state.scope?.[locationId2]) ? { planId: sp.planId, savedAt: sp.savedAt, summary: planSummary(sp) } : void 0;
     })()
   };
   if (context.savedPlan) run.lines.push(`Using the build plan saved on ${context.savedPlan.savedAt}.`);
@@ -37090,7 +37431,7 @@ function scopeBlock(id,state){
  const sel=document.createElement("select");sel.style.cssText="padding:.35rem .5rem;border:1px solid var(--line);border-radius:6px;font-size:var(--fs-sm);background:var(--surface);max-width:100%";
  const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"Everything the preset has (no package)":"Everything the preset has (no packages saved yet: add them on Your agency)";sel.appendChild(o0);
  for(const p of pk){const o=document.createElement("option");o.value=p.id;o.textContent=p.name+(p.price?" \xB7 "+p.price:"");sel.appendChild(o)}
- let ticked=new Set(saved?saved.features:Object.keys(FEATS));if(saved&&saved.package)sel.value=saved.package;
+ const prefill=(state.scopePrefill||{})[id];let ticked=new Set(saved&&!saved.wholePreset?saved.features:(prefill||Object.keys(FEATS)));if(saved&&saved.package)sel.value=saved.package;
  const boxes=document.createElement("div");boxes.style.cssText="margin:.5rem 0";
  function drawBoxes(){boxes.innerHTML="";for(const k of Object.keys(FEATS)){const l=document.createElement("label");l.style.cssText="display:flex;gap:.5rem;align-items:flex-start;margin:.3rem 0;font-size:var(--fs-sm);cursor:pointer";
   const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(k);c.style.marginTop=".25rem";c.onchange=()=>{if(c.checked)ticked.add(k);else ticked.delete(k)};l.appendChild(c);
@@ -37102,7 +37443,7 @@ function scopeBlock(id,state){
  const note=document.createElement("p");note.className="muted";note.textContent="Always built, whatever is ticked: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing. Unticked features go in the client document as available next.";
  const sv=document.createElement("button");sv.className="runbtn";sv.textContent="Save what they bought";
  sv.onclick=async()=>{const all=Object.keys(FEATS).every(k=>ticked.has(k));const body={locationId:id,features:(all&&!sel.value)?null:[...ticked]};if(sel.value)body.package=sel.value;if(await postJSON("/api/scope",body)){delete assessmentCards[id];load()}};
- const status=document.createElement("p");status.className="muted";status.textContent=saved?("Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):"Nothing saved: the whole preset is built.";
+ const status=document.createElement("p");status.className="muted";status.textContent=saved?(saved.wholePreset?"Saved: the whole preset. The build follows this.":"Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):prefill?"Not confirmed yet: ticked from what they bought. Nothing is built until you save.":"Nothing saved: the whole preset is built.";
  sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(status);
  return sc}
 async function rLoad(id){const r=await(await fetch("/api/review?locationId="+id)).json();rData[id]=r;render(lastState,lastRun)}
@@ -38351,6 +38692,11 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }
         const assessmentFigures = {};
         for (const loc of Object.keys(st.assessmentAttachments ?? {})) assessmentFigures[loc] = assessmentFiguresFor(st, loc);
+        const scopePrefill = {};
+        for (const loc of Object.keys(st.assessmentPurchases ?? {})) {
+          const p = scopePrefillFor(st, loc);
+          if (p) scopePrefill[loc] = p;
+        }
         const buildViews = Object.fromEntries(currentRoster().map((c) => {
           const saved = readSavedPlan(c.locationId);
           const approval = st.planApprovals?.[c.locationId];
@@ -38368,7 +38714,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }));
         for (const [id, view] of Object.entries(buildViews)) if (!view.planHash || !view.approvedAt || view.stale.length || st.outcomes?.[`${id}:4`]?.ok !== true || st.manualTasks?.[id]?.length || st.outcomes?.[`${id}:4`]?.issues?.length) liveClaims[id] = { live: false };
         const outcomes = Object.fromEntries(Object.entries(st.outcomes ?? {}).map(([key, value]) => [key, { ...value, ...key.endsWith(":4") && value.verification ? { plain: verifyPanelOutcome(value) } : { ...plainFallbackOutcome(value), plain: plainFallbackOutcome(value.plain ?? value) }, error: value.error ? "The step did not finish. Check the account before retrying." : void 0 }]));
-        res.end(JSON.stringify({ ...st, assessmentFigures, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
+        res.end(JSON.stringify({ ...st, assessmentFigures, scopePrefill, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
           const records = st.outcomes?.[`${id}:4`]?.verification;
           const allowed = records ? verifyReadback(records).allowPublishing : false;
           return [id, tasks2.map((t) => ({ ...t, text: verifyPublishingText(plainFallback(t.text, { nextStep: true }), allowed) })).filter((t) => t.text)];
@@ -39325,8 +39671,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         try {
           const { locationId: locationId2, package: pkg2, features } = JSON.parse(body);
           if (!locationId2 || !currentRoster().some((r) => r.locationId === locationId2)) throw new Error("unknown client");
-          if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to build everything");
-          const next = features === null ? null : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
+          if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to confirm the whole preset");
+          const next = features === null ? { wholePreset: true } : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
           writeCockpitState(setClientScope(readCockpitState(), locationId2, next));
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[locationId2] ?? null }));
@@ -48495,6 +48841,137 @@ var init_delivery_audit = __esm({
   }
 });
 
+// src/command-os/build/verify-findings.ts
+var verify_findings_exports = {};
+__export(verify_findings_exports, {
+  CHECKABLE_KINDS: () => CHECKABLE_KINDS,
+  CHECKABLE_KIND_NAMES: () => CHECKABLE_KIND_NAMES,
+  isCheckableKind: () => isCheckableKind,
+  neverLookedAt: () => neverLookedAt,
+  normaliseKind: () => normaliseKind,
+  refuseUnseenFindings: () => refuseUnseenFindings
+});
+async function readPaged(read2, spec, locationId2, wanted) {
+  const base = spec.params?.(locationId2) ?? {};
+  const seen = /* @__PURE__ */ new Set();
+  let skip = 0;
+  for (let reads = 0; reads < MAX_READS; reads++) {
+    const raw = await read2(spec.path(locationId2), { ...base, limit: String(PAGE), skip: String(skip) });
+    const ids = spec.ids(raw);
+    const total = totalOf(raw);
+    let added = 0;
+    for (const id of ids) if (!seen.has(id)) {
+      seen.add(id);
+      added++;
+    }
+    if ([...wanted].every((id) => seen.has(id))) return { seen };
+    if (total !== void 0 && seen.size >= total) return { seen };
+    if (ids.length === 0) {
+      return total !== void 0 && seen.size < total ? { seen, incomplete: `the account says it has ${total} but returned ${seen.size}` } : { seen };
+    }
+    if (added === 0) return { seen, incomplete: "the account returned the same entries again when asked for the next page" };
+    skip += ids.length;
+  }
+  return { seen, incomplete: `it was still returning new entries after ${MAX_READS} pages` };
+}
+function isCheckableKind(kind) {
+  return Object.hasOwn(CHECKABLE_KINDS, normaliseKind(kind));
+}
+function normaliseKind(kind) {
+  const snake = kind.trim().replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[\s-]+/g, "_").toLowerCase();
+  const singular = snake.endsWith("s") && !snake.endsWith("ss") ? snake.slice(0, -1) : snake;
+  return singular === "stage" ? "pipeline_stage" : singular;
+}
+async function refuseUnseenFindings(read2, locationId2, findings) {
+  const refusals = [];
+  const rawByRead = /* @__PURE__ */ new Map();
+  const readByKind = /* @__PURE__ */ new Map();
+  const wantedByKind = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    const kind = normaliseKind(f.kind);
+    wantedByKind.set(kind, (wantedByKind.get(kind) ?? /* @__PURE__ */ new Set()).add(f.id));
+  }
+  for (const f of findings) {
+    const kind = normaliseKind(f.kind);
+    const spec = Object.hasOwn(CHECKABLE_KINDS, kind) ? CHECKABLE_KINDS[kind] : void 0;
+    if (!spec) {
+      refusals.push({ finding: f, because: `"${f.id}" is a "${f.kind}", which the planner cannot check against the account. Findings it can check: ${CHECKABLE_KIND_NAMES}.` });
+      continue;
+    }
+    let got = readByKind.get(kind);
+    if (got === void 0) {
+      if (spec.paged) {
+        try {
+          got = await readPaged(read2, spec, locationId2, wantedByKind.get(kind) ?? /* @__PURE__ */ new Set());
+        } catch (e) {
+          got = e instanceof Error ? e : new Error(String(e));
+        }
+      } else {
+        const readKey = `${spec.path(locationId2)}?${JSON.stringify(spec.params?.(locationId2) ?? {})}`;
+        let raw = rawByRead.get(readKey);
+        if (raw === void 0) {
+          try {
+            raw = await read2(spec.path(locationId2), spec.params?.(locationId2));
+          } catch (e) {
+            raw = e instanceof Error ? e : new Error(String(e));
+          }
+          rawByRead.set(readKey, raw);
+        }
+        got = raw instanceof Error ? raw : { seen: new Set(spec.ids(raw)) };
+      }
+      readByKind.set(kind, got);
+    }
+    if (got instanceof Error) {
+      const why = got.message.split("\n")[0].slice(0, 160);
+      refusals.push({ finding: f, because: `The account's ${kind.replace(/_/g, " ")} list could not be read (${why}), so "${f.id}" cannot be verified. Nothing is planned against an id that could not be checked.` });
+      continue;
+    }
+    if (got.seen.has(f.id)) continue;
+    refusals.push({
+      finding: f,
+      because: got.incomplete ? `The account's ${kind.replace(/_/g, " ")} list could not be read in full (${got.incomplete}). "${f.id}" was not among the entries it did return, but the list was not read to the end, so it is neither verified nor called missing. Nothing is planned against an id that could not be checked.` : neverLookedAt(f.id)
+    });
+  }
+  return refusals;
+}
+var PAGE, MAX_READS, totalOf, rows, idsOf, byLocation, CHECKABLE_KINDS, CHECKABLE_KIND_NAMES, neverLookedAt;
+var init_verify_findings = __esm({
+  "src/command-os/build/verify-findings.ts"() {
+    "use strict";
+    PAGE = 100;
+    MAX_READS = 50;
+    totalOf = (raw) => {
+      const body = raw;
+      const t = body?.total ?? body?.meta?.total;
+      return typeof t === "number" && Number.isFinite(t) && t >= 0 ? t : void 0;
+    };
+    rows = (raw, key) => {
+      const body = raw;
+      const list2 = Array.isArray(body?.[key]) ? body?.[key] : Array.isArray(raw) ? raw : [];
+      return list2.filter((x) => !!x && typeof x === "object");
+    };
+    idsOf = (raw, key) => rows(raw, key).map((r) => r.id).filter((id) => typeof id === "string" && id.length > 0);
+    byLocation = (locationId2) => ({ locationId: locationId2 });
+    CHECKABLE_KINDS = {
+      pipeline: { path: () => "/opportunities/pipelines", params: byLocation, ids: (raw) => idsOf(raw, "pipelines") },
+      pipeline_stage: {
+        path: () => "/opportunities/pipelines",
+        params: byLocation,
+        ids: (raw) => rows(raw, "pipelines").flatMap((p) => idsOf({ stages: p.stages }, "stages"))
+      },
+      workflow: { path: () => "/workflows/", params: byLocation, ids: (raw) => idsOf(raw, "workflows") },
+      custom_field: { path: (loc) => `/locations/${loc}/customFields`, ids: (raw) => idsOf(raw, "customFields") },
+      custom_value: { path: (loc) => `/locations/${loc}/customValues`, ids: (raw) => idsOf(raw, "customValues") },
+      tag: { path: (loc) => `/locations/${loc}/tags`, ids: (raw) => idsOf(raw, "tags"), paged: true },
+      calendar: { path: () => "/calendars/", params: byLocation, ids: (raw) => idsOf(raw, "calendars") },
+      form: { path: () => "/forms/", params: byLocation, ids: (raw) => idsOf(raw, "forms"), paged: true },
+      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") }
+    };
+    CHECKABLE_KIND_NAMES = Object.keys(CHECKABLE_KINDS).join(", ");
+    neverLookedAt = (id) => `"${id}" was never looked at. A step aimed at an unverified id silently kills every action after it, so this is refused rather than attempted.`;
+  }
+});
+
 // src/command-os/build/automation.ts
 function canonical(v) {
   if (Array.isArray(v)) return v.map(canonical);
@@ -48535,7 +49012,7 @@ function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), know
     const at = new Date(f.observedAt).getTime();
     if (!Number.isFinite(at)) continue;
     if (at < cutoff) continue;
-    explored.set(f.id, f);
+    explored.set(f.id, (explored.get(f.id) ?? /* @__PURE__ */ new Set()).add(normaliseKind(f.kind)));
   }
   const staleIds = new Set(
     findings.filter((f) => {
@@ -48555,7 +49032,13 @@ function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), know
     const deps = [];
     for (const t of s.targets) {
       if (isExisting(t)) {
-        if (explored.has(t.existing)) continue;
+        const kinds = explored.get(t.existing);
+        if (kinds) {
+          if (!kinds.has(normaliseKind(t.kind))) {
+            refusals.push({ step: s.id, because: `"${t.existing}" was looked at as a ${[...kinds].join(" or ").replace(/_/g, " ")}, and this step aims at it as a ${t.kind}. The wrong kind of id silently kills every action after it, so this is refused rather than attempted.` });
+          }
+          continue;
+        }
         if (staleIds.has(t.existing)) {
           refusals.push({ step: s.id, because: `"${t.existing}" was last looked at more than an hour ago. Ids move; look again before planning against it.` });
         } else {
@@ -48727,6 +49210,7 @@ var init_automation = __esm({
   "src/command-os/build/automation.ts"() {
     "use strict";
     import_node_crypto11 = require("node:crypto");
+    init_verify_findings();
     isExisting = (t) => "existing" in t;
     FINDINGS_STALE_AFTER_MINUTES = 60;
   }
@@ -48821,113 +49305,263 @@ var init_store5 = __esm({
   }
 });
 
-// src/command-os/build/verify-findings.ts
-var verify_findings_exports = {};
-__export(verify_findings_exports, {
-  CHECKABLE_KINDS: () => CHECKABLE_KINDS,
-  CHECKABLE_KIND_NAMES: () => CHECKABLE_KIND_NAMES,
-  isCheckableKind: () => isCheckableKind,
-  neverLookedAt: () => neverLookedAt,
-  normaliseKind: () => normaliseKind,
-  refuseUnseenFindings: () => refuseUnseenFindings
-});
-async function readAll(read2, spec, locationId2) {
-  const base = spec.params?.(locationId2);
-  if (!spec.paged) return new Set(spec.ids(await read2(spec.path(locationId2), base)));
-  const seen = /* @__PURE__ */ new Set();
-  for (let page = 0; page < MAX_PAGES2; page++) {
-    const ids = spec.ids(await read2(spec.path(locationId2), { ...base ?? {}, limit: String(PAGE), skip: String(page * PAGE) }));
-    for (const id of ids) seen.add(id);
-    if (ids.length < PAGE) return seen;
-  }
-  throw new Error(`more than ${PAGE * MAX_PAGES2} entries; the list was not read to the end`);
+// src/command-os/build/arg-ids.ts
+function isIdShapedKey(key) {
+  return /(?:Id|ID)s?$|_ids?$/.test(key);
 }
-function isCheckableKind(kind) {
-  return Object.hasOwn(CHECKABLE_KINDS, normaliseKind(kind));
-}
-function normaliseKind(kind) {
-  const snake = kind.trim().replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[\s-]+/g, "_").toLowerCase();
-  const singular = snake.endsWith("s") && !snake.endsWith("ss") ? snake.slice(0, -1) : snake;
-  return singular === "stage" ? "pipeline_stage" : singular;
-}
-async function refuseUnseenFindings(read2, locationId2, findings) {
-  const refusals = [];
-  const rawByRead = /* @__PURE__ */ new Map();
-  const seenByKind = /* @__PURE__ */ new Map();
-  for (const f of findings) {
-    const kind = normaliseKind(f.kind);
-    const spec = Object.hasOwn(CHECKABLE_KINDS, kind) ? CHECKABLE_KINDS[kind] : void 0;
-    if (!spec) {
-      refusals.push({ finding: f, because: `"${f.id}" is a "${f.kind}", which the planner cannot check against the account. Findings it can check: ${CHECKABLE_KIND_NAMES}.` });
-      continue;
+function scanArgs(args, maxNodes = MAX_ARG_NODES) {
+  const out = { ids: [], locations: [], unknown: [], uncheckable: [] };
+  const add = (kind, v, key) => {
+    const list2 = Array.isArray(v) ? v : [v];
+    for (const x of list2) {
+      const id = typeof x === "number" ? String(x) : x;
+      if (typeof id === "string" && id.trim()) out.ids.push({ kind, id, key });
     }
-    let seen = seenByKind.get(kind);
-    if (seen === void 0) {
-      if (spec.paged) {
-        try {
-          seen = await readAll(read2, spec, locationId2);
-        } catch (e) {
-          seen = e instanceof Error ? e : new Error(String(e));
-        }
-      } else {
-        const readKey = `${spec.path(locationId2)}?${JSON.stringify(spec.params?.(locationId2) ?? {})}`;
-        let raw = rawByRead.get(readKey);
-        if (raw === void 0) {
-          try {
-            raw = await read2(spec.path(locationId2), spec.params?.(locationId2));
-          } catch (e) {
-            raw = e instanceof Error ? e : new Error(String(e));
-          }
-          rawByRead.set(readKey, raw);
-        }
-        seen = raw instanceof Error ? raw : new Set(spec.ids(raw));
-      }
-      seenByKind.set(kind, seen);
+  };
+  const hasValue = (v) => typeof v === "string" && v.trim().length > 0 || typeof v === "number" || Array.isArray(v) && v.some(hasValue);
+  const stack = [{ v: args, inFields: false }];
+  let visited = 0;
+  while (stack.length) {
+    const { v, inFields, nodeType: parentType } = stack.pop();
+    if (++visited > maxNodes) {
+      out.incomplete = `The step's arguments are too large to check in full (more than ${maxNodes} values), so the ids in them could not all be verified.`;
+      break;
     }
-    if (seen instanceof Error) {
-      const why = seen.message.split("\n")[0].slice(0, 160);
-      refusals.push({ finding: f, because: `The account's ${kind.replace(/_/g, " ")} list could not be read (${why}), so "${f.id}" cannot be verified. Nothing is planned against an id that could not be checked.` });
+    if (Array.isArray(v)) {
+      for (const x of v) stack.push({ v: x, inFields, nodeType: parentType });
       continue;
     }
-    if (!seen.has(f.id)) refusals.push({ finding: f, because: neverLookedAt(f.id) });
+    if (!isRecord10(v)) continue;
+    const nodeType = typeof v.type === "string" && v.type ? v.type : parentType;
+    const refs = [];
+    if (typeof v.type === "string" && isRecord10(v.attributes)) extractFromAction(v, refs);
+    if (Array.isArray(v.conditions)) extractFromTrigger(v, refs);
+    for (const r of refs) {
+      if (r.byKey) continue;
+      const kind = AUDIT_KIND[r.kind];
+      if (kind) out.ids.push({ kind, id: r.id, key: r.where });
+      else out.uncheckable.push({ kind: r.kind, id: r.id, key: r.where });
+    }
+    for (const [k, x] of Object.entries(v)) {
+      if (k === "locationId") {
+        if (typeof x === "string" && x.length > 0) out.locations.push(x);
+      } else if (k === "traffic_weightage" && isRecord10(x)) {
+        add("user", Object.keys(x), k);
+        continue;
+      } else if (k === "traffic_index" && Array.isArray(x)) {
+        add("user", x.map((e) => isRecord10(e) ? e.id : void 0), k);
+      } else if (k === "selectedUser") {
+        if (v.userType !== "all") add("user", x, k);
+      } else if (k === "field" && inFields) {
+        if (typeof x === "string") {
+          const standardKey = STANDARD_CONTACT_FIELDS.has(x.toLowerCase());
+          if (!standardKey || isIdShaped(x)) add("custom_field", x, "fields[].field");
+        }
+      } else if (k === "customFields" && Array.isArray(x)) {
+        add("custom_field", x.map((e) => isRecord10(e) ? e.id : void 0), "customFields[].id");
+      } else if (k === "customField" && isRecord10(x)) {
+        add("custom_field", x.id, "customField.id");
+      } else if (Object.hasOwn(ID_ARG_KINDS, k)) {
+        add(ID_ARG_KINDS[k], x, k);
+      } else if (isIdShapedKey(k) && !Object.hasOwn(NOT_CHECKABLE_ID_ARGS, k) && hasValue(x)) {
+        out.unknown.push({ key: k, value: JSON.stringify(x).slice(0, 80), ...nodeType ? { nodeType } : {} });
+      }
+      if ((k === "filterField" || k === "field" && !inFields) && typeof x === "string" && Object.hasOwn(CONDITION_FIELD_KINDS, x)) {
+        add(CONDITION_FIELD_KINDS[x], Object.hasOwn(v, "secondValue") ? v.secondValue : v.value, `${k} ${x}`);
+      }
+      if (x && typeof x === "object") stack.push({ v: x, inFields: k === "fields" && Array.isArray(x), nodeType });
+    }
   }
-  return refusals;
+  return out;
 }
-var PAGE, MAX_PAGES2, rows, idsOf, byLocation, CHECKABLE_KINDS, CHECKABLE_KIND_NAMES, neverLookedAt;
-var init_verify_findings = __esm({
-  "src/command-os/build/verify-findings.ts"() {
+var ID_ARG_KINDS, CONDITION_FIELD_KINDS, AUDIT_KIND, NOT_CHECKABLE_ID_ARGS, MAX_ARG_NODES, isRecord10;
+var init_arg_ids = __esm({
+  "src/command-os/build/arg-ids.ts"() {
     "use strict";
-    PAGE = 100;
-    MAX_PAGES2 = 20;
-    rows = (raw, key) => {
-      const body = raw;
-      const list2 = Array.isArray(body?.[key]) ? body?.[key] : Array.isArray(raw) ? raw : [];
-      return list2.filter((x) => !!x && typeof x === "object");
-    };
-    idsOf = (raw, key) => rows(raw, key).map((r) => r.id).filter((id) => typeof id === "string" && id.length > 0);
-    byLocation = (locationId2) => ({ locationId: locationId2 });
-    CHECKABLE_KINDS = {
-      pipeline: { path: () => "/opportunities/pipelines", params: byLocation, ids: (raw) => idsOf(raw, "pipelines") },
-      pipeline_stage: {
-        path: () => "/opportunities/pipelines",
-        params: byLocation,
-        ids: (raw) => rows(raw, "pipelines").flatMap((p) => idsOf({ stages: p.stages }, "stages"))
-      },
-      workflow: { path: () => "/workflows/", params: byLocation, ids: (raw) => idsOf(raw, "workflows") },
-      custom_field: { path: (loc) => `/locations/${loc}/customFields`, ids: (raw) => idsOf(raw, "customFields") },
-      custom_value: { path: (loc) => `/locations/${loc}/customValues`, ids: (raw) => idsOf(raw, "customValues") },
-      tag: { path: (loc) => `/locations/${loc}/tags`, ids: (raw) => idsOf(raw, "tags"), paged: true },
-      calendar: { path: () => "/calendars/", params: byLocation, ids: (raw) => idsOf(raw, "calendars") },
-      form: { path: () => "/forms/", params: byLocation, ids: (raw) => idsOf(raw, "forms"), paged: true },
-      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") }
-    };
-    CHECKABLE_KIND_NAMES = Object.keys(CHECKABLE_KINDS).join(", ");
-    neverLookedAt = (id) => `"${id}" was never looked at. A step aimed at an unverified id silently kills every action after it, so this is refused rather than attempted.`;
+    init_validators();
+    init_id_shape();
+    ID_ARG_KINDS = Object.freeze({
+      pipelineId: "pipeline",
+      pipelineIds: "pipeline",
+      pipeline_id: "pipeline",
+      defaultInPipelines: "pipeline",
+      pipelineStageId: "pipeline_stage",
+      pipeline_stage_id: "pipeline_stage",
+      // the workflow create_opportunity node (validators.ts)
+      stageId: "pipeline_stage",
+      workflowId: "workflow",
+      workflowIds: "workflow",
+      workflow_id: "workflow",
+      sourceWorkflowId: "workflow",
+      callEndWorkflowIds: "workflow",
+      fieldId: "custom_field",
+      customFieldId: "custom_field",
+      consentFieldId: "custom_field",
+      customDateFieldId: "custom_field",
+      valueId: "custom_value",
+      customValueId: "custom_value",
+      // The live DBR workflows: update_custom_value and math_operation
+      // (round-4 delta review, 2026-09-15).
+      custom_value_id: "custom_value",
+      sourceCustomValueId: "custom_value",
+      targetCustomValueId: "custom_value",
+      tagId: "tag",
+      calendarId: "calendar",
+      formId: "form",
+      formIds: "form",
+      // a form_submission goal's extras (build_goal_event)
+      userId: "user",
+      userIds: "user",
+      assignedUserId: "user",
+      sentBy: "user",
+      // send_document's sender (release review F2)
+      // Workflow action payloads (CLAUDE.md action schemas). These do not end in
+      // "Id", which is exactly why the guess never saw them.
+      assignedTo: "user",
+      user_list: "user"
+    });
+    CONDITION_FIELD_KINDS = Object.freeze({
+      ...ID_ARG_KINDS,
+      "form.id": "form",
+      "calendar.id": "calendar",
+      "opportunity.pipelineId": "pipeline",
+      "opportunity.pipelineStageId": "pipeline_stage",
+      "opportunity.assignedTo": "user",
+      "contact.assignedTo": "user",
+      "workflow.id": "workflow"
+    });
+    AUDIT_KIND = Object.freeze({
+      pipeline: "pipeline",
+      stage: "pipeline_stage",
+      custom_field: "custom_field",
+      user: "user",
+      workflow: "workflow",
+      form: "form",
+      calendar: "calendar",
+      survey: null
+    });
+    NOT_CHECKABLE_ID_ARGS = Object.freeze({
+      // The account itself, not an object inside it. One account per plan is
+      // enforced separately, and the build is bound to it (agency-build.ts).
+      locationId: "the sub-account itself",
+      location_id: "the sub-account itself",
+      altId: "the sub-account itself",
+      companyId: "the agency itself",
+      company_id: "the agency itself",
+      ghl_location_id: "the sub-account itself",
+      ghl_company_id: "the agency itself",
+      test_location_id: "the sub-account itself",
+      demoLocationId: "a sub-account, not an object inside one",
+      clientLocationId: "a sub-account, not an object inside one",
+      sourceLocationId: "a sub-account, not an object inside one",
+      // Objects that live in the account but have no list the planner reads back.
+      contactId: "contacts are not listed in full by the planner",
+      contactIds: "contacts are not listed in full by the planner",
+      opportunityId: "opportunities are not listed in full by the planner",
+      templateId: "templates have no read-back list here",
+      agentId: "AI agents have no read-back list here",
+      assignedEmployeeId: "a Conversation AI employee; no read-back list here",
+      knowledgeBaseId: "knowledge bases have no read-back list here",
+      knowledgeBaseIds: "knowledge bases have no read-back list here",
+      lastKnowledgeBaseId: "knowledge bases have no read-back list here",
+      faqId: "knowledge base entries have no read-back list here",
+      lastFaqId: "knowledge base entries have no read-back list here",
+      urlIds: "knowledge base entries have no read-back list here",
+      funnelId: "funnels have no read-back list here",
+      pageId: "funnel pages have no read-back list here",
+      stepId: "funnel steps (and this plan's own steps) have no read-back list here",
+      recordId: "custom object records have no read-back list here",
+      targetRecordId: "custom object records have no read-back list here",
+      relationId: "associations have no read-back list here",
+      associationId: "associations have no read-back list here",
+      productId: "products have no read-back list here",
+      productIds: "products have no read-back list here",
+      invoiceId: "invoices have no read-back list here",
+      estimateId: "estimates have no read-back list here",
+      orderId: "orders have no read-back list here",
+      subscriptionId: "subscriptions have no read-back list here",
+      couponId: "coupons have no read-back list here",
+      entityId: "payment records have no read-back list here",
+      actionId: "AI agent actions have no read-back list here",
+      actionIds: "AI agent actions have no read-back list here",
+      listId: "smart lists have no read-back list here",
+      webhookId: "webhooks have no read-back list here",
+      taskId: "contact tasks have no read-back list here",
+      eventId: "appointments have no read-back list here",
+      postId: "social posts have no read-back list here",
+      accountIds: "social accounts have no read-back list here",
+      messageId: "messages have no read-back list here",
+      conversationId: "conversations have no read-back list here",
+      conversationProviderId: "conversation providers have no read-back list here",
+      documentId: "documents have no read-back list here",
+      businessId: "businesses have no read-back list here",
+      numberPoolId: "number pools have no read-back list here",
+      linkId: "trigger links have no read-back list here",
+      blogId: "blogs have no read-back list here",
+      categoryId: "categories have no read-back list here",
+      surveyId: "surveys have no read-back list here",
+      submissionId: "form submissions have no read-back list here",
+      mediaId: "media files have no read-back list here",
+      photoAssetId: "media files have no read-back list here",
+      beforeAssetId: "media files have no read-back list here",
+      afterAssetId: "media files have no read-back list here",
+      domainId: "domains have no read-back list here",
+      chatWidgetId: "chat widgets have no read-back list here",
+      callId: "calls have no read-back list here",
+      voiceId: "voices have no read-back list here",
+      placeId: "a Google Business place, outside the account",
+      reviewLinkId: "review links have no read-back list here",
+      linkIds: "a link_click goal's trigger links, which have no read-back list here",
+      globalProductIds: "a payment_received goal's products, which have no read-back list here",
+      global_product_ids: "products have no read-back list here",
+      snapshot_id: "snapshots belong to the agency, not the sub-account",
+      parentId: "a folder or parent record with no read-back list here",
+      // Outside GoHighLevel altogether.
+      stripeCustomerId: "a Stripe record, not a GoHighLevel one",
+      google_oauth_client_id: "a Google OAuth client, not a GoHighLevel record",
+      ghl_user_id: "the Firebase login's uid, not an object in the sub-account",
+      device_id: "this machine's id",
+      // This product's own records.
+      buildId: "a Layer 5 build on this machine",
+      runId: "a build run on this machine",
+      planId: "a saved plan on this machine",
+      briefId: "a brief on this machine",
+      operationId: "an operation on this machine",
+      questionId: "an intake question",
+      ruleId: "a design rule",
+      startAfterId: "a paging cursor",
+      purchasedFeatureIds: "feature names, not account objects",
+      // Ids inside a workflow's or a page's own document: the node, branch or
+      // element they belong to, never an object in the account.
+      _id: "an element's own id inside a document",
+      nodeId: "an element's own id inside a page",
+      appId: "an element's own id inside a page",
+      goToId: "an element's own id inside a page",
+      __conditionId: "a condition's own id inside a workflow",
+      __id: "an operator's own id inside a math step",
+      __segmentId: "a segment's own id inside a workflow",
+      ifElseNodeId: "a node's own id inside a workflow",
+      target_node_id: "a node's own id inside a workflow",
+      targetNodeId: "the step a goto jumps to, inside the same workflow",
+      stepIds: "the steps an email_event goal waits on, inside the same workflow",
+      invoiceStepId: "the step an invoice_paid goal waits on, inside the same workflow",
+      sourceId: `GoHighLevel's attribution key on an email edited in its UI, "<workflowId>:<stepId>"; not checked on save (workflow-builder-client.ts)`,
+      origin_id: "a trigger's own id inside a workflow"
+    });
+    MAX_ARG_NODES = 2e5;
+    isRecord10 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
   }
 });
 
 // src/tools/agency-build.ts
-function registerAgencyBuildTools(server2, knownTools, verify) {
+function accountMismatch(a, active) {
+  if (!a.locationId) {
+    return "This build was saved before builds recorded the sub-account their ids were checked against, so nothing can say which account they belong to: plan it again (plan_automation) and approve the new plan.";
+  }
+  if (active === a.locationId) return null;
+  return active ? `This build's ids were checked against sub-account ${a.locationId}, and the server is now pointed at ${active}. An id checked on one account means nothing on another, so nothing is approved or recorded here. switch_location back to ${a.locationId}, confirm it with get_current_location, then try again.` : `This build's ids were checked against sub-account ${a.locationId}, and the server is not pointed at any sub-account. switch_location to ${a.locationId}, confirm it with get_current_location, then try again.`;
+}
+function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
   safeTool(
     server2,
     "plan_automation",
@@ -48955,43 +49589,67 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const found = findings.map((f) => ({ ...f, observedAt: f.observedAt ?? now.toISOString() }));
       const plan = steps;
       const check = checkPlan(goal, found, plan, now, knownTools?.());
+      let boundAccount;
       if (check.ok) {
-        const named = /* @__PURE__ */ new Set();
-        const collectLocations = (v, depth) => {
-          if (!v || typeof v !== "object" || depth > 4) return;
-          for (const [k, x] of Object.entries(v)) {
-            if (k === "locationId" && typeof x === "string" && x.length > 0) named.add(x);
-            collectLocations(x, depth + 1);
-          }
-        };
-        for (const s of plan) collectLocations(s.args, 0);
+        const scans = plan.map((s) => ({ step: s, scan: scanArgs(s.args) }));
+        const named = new Set(scans.flatMap(({ scan }) => scan.locations));
         if (locationId2) named.add(locationId2);
         if (named.size > 1) {
           return { planned: false, refusals: [{ because: `The steps name ${named.size} different sub-accounts (${[...named].join(", ")}). A plan runs against one account; split it.` }], note: "Nothing was saved." };
         }
-        const account2 = [...named][0];
-        const declaredRefs = new Set(plan.flatMap((s) => (s.creates ?? []).map((c) => c.ref)));
-        const knownIds = new Set(found.map((f) => f.id));
+        const account2 = [...named][0] ?? activeLocation?.();
+        if (!account2) {
+          return { planned: false, refusals: [{ because: "The plan names no sub-account and the server is pointed at none, so there is no sub-account to check its ids against or to run it on. switch_location to the client's account first." }], note: "Nothing was saved." };
+        }
+        const refKinds = new Map(plan.flatMap((s) => (s.creates ?? []).map((c) => [c.ref, normaliseKind(c.kind)])));
+        const seenKeys = new Set(found.map((f) => `${normaliseKind(f.kind)}:${f.id}`));
         const hidden = [];
-        const hiddenIds = /* @__PURE__ */ new Set();
-        const scan = (v, depth) => {
-          if (!v || typeof v !== "object" || depth > 4) return;
-          for (const [k, x] of Object.entries(v)) {
-            if (/Id$/.test(k) && k !== "locationId" && k !== "companyId" && typeof x === "string" && x.length > 0 && !knownIds.has(x) && !declaredRefs.has(x) && !hiddenIds.has(x) && isCheckableKind(k.replace(/Id$/, ""))) {
-              hiddenIds.add(x);
-              hidden.push({ kind: k.replace(/Id$/, ""), id: x, observedAt: now.toISOString() });
+        const argRefusals = [];
+        for (const { step: s, scan } of scans) {
+          if (scan.incomplete) argRefusals.push({ because: `Step "${s.id}": ${scan.incomplete}`, finding: { kind: "arguments", id: s.id } });
+          for (const u of scan.unknown) {
+            const inNode = u.nodeType ? ` inside a "${u.nodeType}" node` : "";
+            argRefusals.push({
+              because: `Step "${s.id}" passes "${u.key}"${inNode}: ${u.value}. The planner has no way to check that id against the account, so the plan is refused rather than trusted: a step aimed at an unverified id silently kills every action after it. Two ways on: leave that step out of the plan and do it by hand, or report the node type and key (${u.nodeType ? `"${u.nodeType}" / ` : ""}"${u.key}") so it can be added to the ids this checks.`,
+              finding: { kind: u.key, id: u.value }
+            });
+          }
+          for (const { kind, id } of scan.uncheckable) {
+            const key = `${kind}:${id}`;
+            if (seenKeys.has(key)) continue;
+            seenKeys.add(key);
+            hidden.push({ kind, id, observedAt: now.toISOString() });
+          }
+          for (const { kind, id } of scan.ids) {
+            const refKind = refKinds.get(id);
+            if (refKind !== void 0) {
+              if (refKind !== kind) {
+                argRefusals.push({
+                  because: `Step "${s.id}" passes "${id}" where a ${kind.replace(/_/g, " ")} goes, but "${id}" is what an earlier step creates as a ${refKind.replace(/_/g, " ")}. The wrong kind of id silently kills every action after it, so this is refused.`,
+                  finding: { kind, id }
+                });
+              }
+              continue;
             }
-            scan(x, depth + 1);
+            const key = `${kind}:${id}`;
+            if (seenKeys.has(key)) continue;
+            seenKeys.add(key);
+            hidden.push({ kind, id, observedAt: now.toISOString() });
           }
-        };
-        for (const s of plan) scan(s.args, 0);
+        }
+        if (argRefusals.length) {
+          return { planned: false, refusals: argRefusals, note: "Nothing was saved. These arguments carry ids that cannot be checked as they stand." };
+        }
         const toVerify = [...found, ...hidden];
+        boundAccount = account2;
         const refusals = toVerify.length === 0 ? [] : verify ? await verify(account2, toVerify) : toVerify.map((f) => ({ finding: f, because: `"${f.id}" could not be checked against any account, so it is refused rather than trusted.` }));
         if (refusals.length) {
           return {
             planned: false,
             refusals: refusals.map((r) => ({ because: r.because, finding: { kind: r.finding.kind, id: r.finding.id } })),
-            note: "Nothing was saved. Every finding is read back from the account before a plan is kept, and these were not there."
+            // Not "these were not there": a list that could not be read in full
+            // proves nothing is missing, and each refusal says which it was (G-M2).
+            note: "Nothing was saved. Every finding is read back from the account before a plan is kept, and these could not be verified there. Each reason above says whether the id is missing or the list could not be read."
           };
         }
       }
@@ -49005,6 +49663,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const a = {
         id: newAutomationId(),
         goal,
+        // check.ok is true here, so the block above set it.
+        locationId: boundAccount,
         createdAt: now.toISOString(),
         planId: planFingerprint(goal, plan),
         findings: found,
@@ -49021,7 +49681,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
           const s = plan.find((x) => x.id === id);
           return { step: s.id, does: s.why, tool: s.tool };
         }),
-        nextStep: `Read the steps above. Nothing runs until you approve this exact plan: approve_automation with buildId ${a.id} and planId ${a.planId}.`,
+        account: a.locationId,
+        nextStep: `Read the steps above. Nothing runs until you approve this exact plan: approve_automation with buildId ${a.id} and planId ${a.planId}. Its ids were checked against sub-account ${a.locationId}, so it is approved and run only while the server is pointed at that account.`,
         note: "Change any step after this and the plan gets a new fingerprint, which voids the approval. That is on purpose: the plan you read and the plan that runs have to be the same document."
       };
     }
@@ -49038,6 +49699,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
     async ({ buildId, planId, approvedBy }) => {
       const a = readAutomation(buildId);
       if (!a) return { approved: false, error: `There is no build "${buildId}" on this machine.` };
+      const wrong = accountMismatch(a, activeLocation?.());
+      if (wrong) return { approved: false, error: wrong };
       const now = /* @__PURE__ */ new Date();
       const r = approve(a, approvedBy, planId, now.toISOString(), now);
       if (!r.ok) return { approved: false, error: r.because };
@@ -49063,6 +49726,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
     async ({ buildId, stepId, state, undo, because, result, resolved: resolved2, retry }) => {
       const a = readAutomation(buildId);
       if (!a) return { recorded: false, error: `There is no build "${buildId}" on this machine.` };
+      const wrong = state === "applied" ? accountMismatch(a, activeLocation?.()) : null;
+      if (wrong) return { recorded: false, error: wrong };
       const r = recordStep(a, { stepId, state, at: (/* @__PURE__ */ new Date()).toISOString(), undo, because, result, resolved: resolved2, retryOf: retry });
       if (!r.ok) return { recorded: false, error: r.because };
       saveAutomation(r.automation);
@@ -49111,13 +49776,16 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const rows2 = ids.map((id) => {
         const a = all[id];
         const p = position(a);
+        const wrongAccount = p.nextStep ? accountMismatch(a, activeLocation?.()) : null;
         return {
           buildId: id,
           goal: a.goal,
+          account: a.locationId ?? null,
           where: p.line,
           phase: p.phase,
           stepsDone: `${p.done} of ${p.total}`,
-          nextStep: p.nextStep ? { step: p.nextStep.id, does: p.nextStep.why, tool: p.nextStep.tool } : null,
+          nextStep: p.nextStep && !wrongAccount ? { step: p.nextStep.id, does: p.nextStep.why, tool: p.nextStep.tool } : null,
+          ...wrongAccount ? { wrongAccount } : {},
           stalledOn: p.stalledOn,
           blocked: p.blocked,
           approvedBy: a.approval?.by ?? null,
@@ -49142,6 +49810,7 @@ var init_agency_build = __esm({
     init_automation();
     init_store5();
     init_verify_findings();
+    init_arg_ids();
     targetSchema = import_zod74.z.union([
       import_zod74.z.object({ existing: import_zod74.z.string().describe("A real id, which must appear in `findings`."), kind: import_zod74.z.string() }),
       import_zod74.z.object({ ref: import_zod74.z.string().describe("Something an earlier step in this plan creates."), kind: import_zod74.z.string() })
@@ -53085,8 +53754,13 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           });
         }
         if (!briefArg.scope) {
-          const saved2 = readBoardState().scope?.[activeLocation];
-          if (saved2 && Array.isArray(saved2.features)) {
+          const board = readBoardState();
+          const saved2 = board.scope?.[activeLocation];
+          if (saved2?.wholePreset) {
+            scopeSource = "cockpit";
+          } else if (!saved2 && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
+            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: NOT_CONFIRMED_SCOPE });
+          } else if (saved2 && Array.isArray(saved2.features)) {
             const features = saved2.features.filter(isFeatureId);
             if (!features.length) {
               return jsonResponse({
@@ -53143,6 +53817,31 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
       if (!gate2.ok) return jsonResponse({ ok: false, phase: "plan", error: gate2.error, savedPlan: saved ? { planId: saved.planId, savedAt: saved.savedAt } : void 0 });
       const plan = gate2.plan;
       const planSource = gate2.source;
+      if (planSource === "saved") {
+        const board = readBoardState();
+        const current = board.scope?.[activeLocation];
+        if (!current && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
+          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: NOT_CONFIRMED_SCOPE });
+        }
+        if (current && !current.wholePreset && Array.isArray(current.features) && !current.features.some(isFeatureId)) {
+          return jsonResponse({
+            ok: false,
+            phase: "scope",
+            scopeSource: "cockpit",
+            error: "No features are selected for this client, so nothing was built, not even from the saved plan. Open the client's Review screen, tick the features to build, confirm, and run the build again."
+          });
+        }
+        if (!savedPlanMatchesScope(saved, current)) {
+          const planned = saved?.scope ? [...saved.scope.built, ...(saved.scope.omitted ?? []).map((f) => f.id)].join(", ") || "no features" : "everything in the preset";
+          const now = current?.wholePreset ? "everything in the preset (confirmed)" : current ? current.features.filter(isFeatureId).join(", ") : "everything in the preset (nothing is saved)";
+          return jsonResponse({
+            ok: false,
+            phase: "scope",
+            scopeSource: "cockpit",
+            error: `The features selected for this client changed after this plan was saved (the saved plan builds: ${planned}; the Review screen now says: ${now}), so the saved plan is not what was confirmed and nothing was built. Run the build again without useSavedPlan, composing the plan fresh from the preset (fromPreset), so it follows the current selection.`
+          });
+        }
+      }
       const scopeForValidation = composed?.scope ?? (planSource === "saved" ? saved?.scope : void 0);
       const validation = validateBuildPlan(plan, { nurtureNotBought: Boolean(scopeForValidation && !scopeForValidation.built.includes("nurture")) });
       if (!validation.valid || !validation.plan) {
@@ -53211,7 +53910,8 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           contentHash: contentHash(typedPlan),
           inputHash: process.env.GHL_COMMAND_INTAKE_HASH || saved?.inputHash,
           dependencies: planDependencies(typedPlan),
-          preview: result
+          preview: result,
+          scope: scopeForValidation
         });
         const deps = makeExecuteDeps(client, builderClient, activeLocation, registry2);
         const gatedWorkflowRefs = new Set(result.workflows.filter((w) => w.gatedBy.length > 0).map((w) => w.ref));
@@ -53823,7 +54523,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod81, customFieldItemSchema, sleep6;
+var import_zod81, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -53869,6 +54569,7 @@ var init_intake_to_build = __esm({
       picklistOptions: import_zod81.z.array(import_zod81.z.string()).optional()
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
+    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. Open the client's Review screen: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
   }
 });
 
@@ -53915,7 +54616,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env2 = process
     }
     const reader = token2 ? new GHLClient({ apiKey: token2.apiKey, locationId: loc }) : client;
     return refuseUnseenFindings2((path40, params) => reader.get(path40, params ? { params } : void 0), loc, findings);
-  });
+  }, () => client.defaultLocationId);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
   registerDailyBriefTools(wrap(DAILY_BRIEF_MODULE), registry2);