@elitedcs/ghl-mcp 3.84.0 → 3.84.2

package/dist/index.js

@@ -948,20 +948,33 @@ var init_token_registry = __esm({
         const token2 = this.data.tokens[locationId2];
         if (!token2) return false;
         if (token2.companyId === companyId) return true;
+        const previous = token2.companyId;
         token2.companyId = companyId;
         this.save();
+        if (this.lastSaveError) {
+          if (previous === void 0) delete token2.companyId;
+          else token2.companyId = previous;
+          return false;
+        }
         return true;
       }
       /**
-       * Remove a location from the registry
+       * Remove a location from the registry. Returns true only when the removal
+       * reached the key file on disk: save() swallows a write failure into
+       * lastSaveError, and a key still sitting in .ghl-tokens.json comes back in
+       * full at the next start. A caller that reports "Removed" must not be told
+       * that by a delete from an in-memory map alone.
        */
       removeLocation(locationId2) {
-        if (this.data.tokens[locationId2]) {
-          delete this.data.tokens[locationId2];
-          this.save();
-          return true;
+        const existing = this.data.tokens[locationId2];
+        if (!existing) return false;
+        delete this.data.tokens[locationId2];
+        this.save();
+        if (this.lastSaveError) {
+          this.data.tokens[locationId2] = existing;
+          return false;
         }
-        return false;
+        return true;
       }
       /**
        * List all registered locations
@@ -2610,19 +2623,27 @@ ${errorBody}`
         const result = await this.updateWorkflow(workflowId, { status: "published", triggers });
         let returned = null;
         let readBackFailed = null;
+        let savedSteps = null;
+        let savedTriggers = null;
         try {
           const after = await this.getWorkflow(workflowId);
           returned = typeof after.status === "string" ? after.status : null;
+          savedSteps = (after.workflowData?.templates ?? []).length;
+          savedTriggers = after.triggers ?? [];
         } catch (e) {
           readBackFailed = e instanceof Error ? e.message : String(e);
           returned = isRecord2(result) && typeof result.status === "string" ? result.status : null;
         }
+        const activeTriggers = savedTriggers ? savedTriggers.filter((t) => t.active === true).length : null;
+        const inactiveTriggers = savedTriggers ? savedTriggers.filter((t) => t.active === false).length : 0;
         const publish_check = {
           published: returned === "published",
           status_returned: returned ?? "(GHL returned no status)",
           status_source: readBackFailed ? "the publish response (re-read failed)" : "the saved workflow, read back",
-          steps: steps.length,
-          triggers: triggers.length
+          counts_source: savedTriggers ? "the saved workflow, read back" : "the read taken BEFORE the write (the re-read failed, so these counts do not prove what is saved)",
+          steps: savedSteps ?? steps.length,
+          triggers: savedTriggers ? savedTriggers.length : triggers.length,
+          triggers_active: activeTriggers
         };
         if (readBackFailed) {
           publish_check.warning = `NOT VERIFIED. The publish was accepted but reading the workflow back failed (${readBackFailed}), so this status is only what the publish call echoed, not the saved state. Confirm with get_workflow_full.`;
@@ -2630,7 +2651,10 @@ ${errorBody}`
         if (returned !== "published") {
           publish_check.warning = `NOT LIVE. GHL returned status ${returned === null ? "nothing" : `"${returned}"`} rather than "published", so do not report this workflow as running.`;
         }
-        if (triggers.length === 0) {
+        if (returned === "published" && inactiveTriggers > 0) {
+          publish_check.warning = `TRIGGER NOT ACTIVE. The workflow saved as "published", but ${inactiveTriggers} of ${savedTriggers.length} trigger(s) still read active:false, so ${inactiveTriggers === savedTriggers.length ? "nothing enrols contacts into it on its own" : "those triggers enrol nobody"}. Check the trigger in GHL before reporting this workflow as running.`;
+        }
+        if ((savedTriggers ? savedTriggers.length : triggers.length) === 0) {
           publish_check.note = "This workflow has NO TRIGGER, so nothing starts it on its own. That is only correct if another workflow adds contacts to it; otherwise its trigger did not save.";
         }
         return isRecord2(result) ? { ...result, publish_check } : { result, publish_check };
@@ -5197,8 +5221,40 @@ function registerCalendarTools(server2, client) {
           `update_calendar: could not read calendar ${args.calendarId} before updating it (${e instanceof Error ? e.message : String(e)}). Refusing to write: GHL's calendar update does not merge, so a partial write here would silently reset this calendar's slot length, buffer and availability hours.`
         );
       }
+      if (existing && existing.calendarType === "event") existing = { ...existing, teamMembers: void 0 };
+      if (existing && args.teamMembers === void 0 && Array.isArray(existing.teamMembers)) {
+        const stripped = existing.teamMembers.map((m) => {
+          const r = m ?? {};
+          const configs = Array.isArray(r.locationConfigurations) ? r.locationConfigurations.map((c) => {
+            const x = c ?? {};
+            return { kind: x.kind, position: x.position, ...typeof x.location === "string" ? { location: x.location } : {} };
+          }) : r.locationConfigurations;
+          return { userId: r.userId, priority: r.priority, isPrimary: r.isPrimary, selected: r.selected, locationConfigurations: configs };
+        });
+        const parsed2 = import_zod12.z.array(CalendarTeamMemberSchema).safeParse(stripped);
+        if (!parsed2.success) {
+          const issue = parsed2.error.issues[0];
+          throw new Error(
+            `update_calendar: this calendar's stored team members cannot be carried over in the shape GoHighLevel's update validates (${issue ? `${issue.path.join(".")}: ${issue.message}` : "unknown"}). Nothing was changed, because a partial write here would unassign the staff. Pass teamMembers explicitly (userId, priority 0/0.5/1, isPrimary, selected, locationConfigurations with at least one entry) and run the update again.`
+          );
+        }
+        existing = { ...existing, teamMembers: parsed2.data };
+      }
       const body = buildUpdateCalendarBody(mergeCalendarUpdate(existing, args));
-      return await client.put(`/calendars/${args.calendarId}`, { body });
+      const updated = await client.put(`/calendars/${args.calendarId}`, { body });
+      let storedTeamMembers;
+      try {
+        const after = await client.get(`/calendars/${args.calendarId}`);
+        const cal = after?.calendar ?? after;
+        storedTeamMembers = Array.isArray(cal?.teamMembers) ? cal.teamMembers.length : 0;
+      } catch (e) {
+        storedTeamMembers = `NOT VERIFIED \u2014 the calendar could not be read back after the update (${e instanceof Error ? e.message : String(e)}), so its team-member assignment is unconfirmed. Run get_calendar to check.`;
+      }
+      return {
+        updated,
+        stored_team_members: storedTeamMembers,
+        stored_team_members_source: "GET /calendars/{id} taken AFTER the update \u2014 a read of what GoHighLevel now holds, not the update's own response."
+      };
     }
   );
   safeTool(
@@ -5401,7 +5457,13 @@ var init_calendars = __esm({
       "appointmentPerDay",
       "allowBookingAfter",
       "allowBookingAfterUnit",
-      "availabilityType"
+      "availabilityType",
+      "teamMembers",
+      "description",
+      "slug",
+      "widgetSlug",
+      "eventTitle",
+      "eventColor"
     ];
   }
 });
@@ -8255,6 +8317,16 @@ function normalizeCrawlStatus(raw) {
     urls
   };
 }
+function trainedOfRequested(s, urlIds) {
+  const bucketOf = new Map(s.urls.map((u) => [u.id, u.bucket]));
+  const isTrained = (id) => TRAINED_BUCKET.test(bucketOf.get(id) ?? "");
+  const pending = urlIds.filter((id) => !isTrained(id));
+  return {
+    trained: urlIds.filter(isTrained),
+    pending,
+    buckets: [...new Set(pending.map((id) => bucketOf.get(id) ?? "not listed"))]
+  };
+}
 async function readCrawlStatus(client, locationId2, knowledgeBaseId, operationId) {
   return normalizeCrawlStatus(await client.get("/knowledge-bases/crawler/status", { version: AI_API_VERSION, params: { locationId: locationId2, operationId, knowledgeBaseId } }));
 }
@@ -8306,7 +8378,7 @@ async function crawlAndTrain(client, opts) {
   const d = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitDiscover ?? 90, (x) => isSettled(x.status), { operationId, status: typeof rec.status === "string" ? rec.status : "Processing", mode, url: opts.url });
   if (d.pollError) notes.push(`a status poll failed (${d.pollError})`);
   if (!d.settled && d.s.urls.length > 0) notes.push(`${d.s.urls.length} page(s) listed while the operation still read "${d.s.status}" \u2014 the list may be incomplete; the pages below are what was trained`);
-  let trained = 0, trainStatus = "not started", trainSettled = false;
+  let trained = 0, trainedPages = 0, trainStatus = "not started", trainSettled = false;
   const chosen = mode === "Exact" ? [] : pickPages(d.s.urls, opts.maxPages ?? 8);
   if (mode === "Exact") {
     notes.push("Exact mode: the single page trains itself.");
@@ -8314,17 +8386,23 @@ async function crawlAndTrain(client, opts) {
     notes.push("no pages were listed to train");
   } else {
     await client.post("/knowledge-bases/crawler/train", { ...v, body: { locationId: opts.locationId, urlIds: chosen.map((c) => c.id), knowledgeBaseId: opts.knowledgeBaseId, operationId }, noRetry: true });
-    const t = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitTrain ?? 120, (x) => isSettled(x.status) || x.trainedUrlsCount >= chosen.length, { operationId, status: "Training" });
+    const chosenIds = chosen.map((c) => c.id);
+    const t = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitTrain ?? 120, (x) => trainSettledOn(x, chosenIds), { operationId, status: "Training" });
     trained = t.s.trainedUrlsCount;
     trainStatus = t.s.status;
     trainSettled = t.settled;
+    trainedPages = trainedOfRequested(t.s, chosenIds).trained.length;
     if (t.pollError) notes.push(`a training poll failed (${t.pollError})`);
-    if (!t.settled) notes.push(`training still read "${t.s.status}" after ${opts.waitTrain ?? 120}s`);
+    else if (wasStopped(t.s.status)) notes.push(`GoHighLevel stopped this operation ("${t.s.status}"), so nothing here confirms these pages trained`);
+    else if (!t.settled) {
+      const { pending, buckets } = trainedOfRequested(t.s, chosenIds);
+      notes.push(`${pending.length} of ${chosenIds.length} page(s) are still not in a "Trained" bucket after ${opts.waitTrain ?? 120}s (operation reads "${t.s.status}"; those pages read ${buckets.join(", ")})`);
+    }
   }
   const listed = unwrapEnvelope(await client.get("/knowledge-bases/crawler", { ...v, params: { knowledgeBaseId: opts.knowledgeBaseId, locationId: opts.locationId, page: 1, pageLength: 50 } }));
   const rows2 = isRecord4(listed) && Array.isArray(listed.urls) ? listed.urls : [];
   const pages = rows2.filter(isRecord4).map((r) => ({ id: String(r.id ?? r._id ?? ""), url: String(r.url ?? ""), title: typeof r.title === "string" ? r.title : void 0, content: typeof r.content === "string" ? r.content : void 0 }));
-  return { operationId, discovered: d.s.urls.length, discoverStatus: d.s.status, discoverSettled: d.settled, trained, trainStatus, trainSettled, pages, notes };
+  return { operationId, discovered: d.s.urls.length, discoverStatus: d.s.status, discoverSettled: d.settled, trained, trainedPages, trainStatus, trainSettled, pages, notes };
 }
 function registerKnowledgeBaseTools(server2, client, deps = {}) {
   const sleep7 = deps.sleep ?? realSleep;
@@ -8431,13 +8509,19 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
       const startStatus = typeof rec.status === "string" ? rec.status : "Processing";
       const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => isSettled(x.status), { operationId, status: startStatus, mode: option, url });
       const listed = s.urls.length;
+      const outcome = crawlOutcome(s.status, settled);
       return {
         operationId,
         ...s,
         polls,
         settled,
+        outcome,
         ...pollError ? { pollError } : {},
-        next: option === "Exact" ? "This page trains itself \u2014 do NOT call train_kb_urls on it (GoHighLevel answers 500). Check list_kb_urls in a moment." : pollError ? `A status poll failed (${pollError}); discovery may still be running \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Discovery finished with ${listed} page(s). Pick the ones the agent should know and pass their ids to train_kb_urls with operationId "${operationId}".` : listed > 0 ? `${listed} page(s) listed so far, but the operation still reads "${s.status}" after ${wait}s, so the list may be incomplete. Train these now with train_kb_urls (operationId "${operationId}"), or poll get_kb_crawl_status for more first.` : `Discovery is still running after ${wait}s with nothing listed yet \u2014 poll get_kb_crawl_status with operationId "${operationId}".`
+        next: (
+          // The refusal goes first, Exact included: a page that "trains itself"
+          // trains nothing when GoHighLevel stopped the operation.
+          outcome === "stopped" ? `GoHighLevel stopped this crawl (${s.status}) \u2014 it did not finish reading ${url}${listed ? `, and the ${listed} page(s) listed below are whatever it had before it stopped` : ", and nothing was listed"}. Nothing here says the site was read, so do not train from this run: fix what stopped it and crawl again.` : option === "Exact" ? "This page trains itself \u2014 do NOT call train_kb_urls on it (GoHighLevel answers 500). Check list_kb_urls in a moment." : pollError ? `A status poll failed (${pollError}); discovery may still be running \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Discovery finished with ${listed} page(s). Pick the ones the agent should know and pass their ids to train_kb_urls with operationId "${operationId}".` : listed > 0 ? `${listed} page(s) listed so far, but the operation still reads "${s.status}" after ${wait}s, so the list may be incomplete. Train these now with train_kb_urls (operationId "${operationId}"), or poll get_kb_crawl_status for more first.` : `Discovery is still running after ${wait}s with nothing listed yet \u2014 poll get_kb_crawl_status with operationId "${operationId}".`
+        )
       };
     }
   );
@@ -8457,16 +8541,24 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
       const queued = await client.post("/knowledge-bases/crawler/train", { ...v, body: { locationId: loc, urlIds, knowledgeBaseId, operationId }, noRetry: true });
       const wait = waitSeconds ?? 60;
       if (wait === 0) return { queued, note: "Queued. Poll get_kb_crawl_status for trainedUrlsCount." };
-      const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => isSettled(x.status) || x.trainedUrlsCount >= urlIds.length, { operationId, status: "Training" });
+      const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => trainSettledOn(x, urlIds), { operationId, status: "Training" });
+      const { trained, pending, buckets } = trainedOfRequested(s, urlIds);
+      const outcome = crawlOutcome(s.status, settled);
       return {
         queued,
         status: s.status,
+        outcome,
+        trained,
+        pending,
+        // The operation's own counter, kept because it is what GoHighLevel
+        // reports — it counts every page trained against this operationId,
+        // including earlier train calls, so it is not a result for THIS one.
         trainedUrlsCount: s.trainedUrlsCount,
         requested: urlIds.length,
         polls,
         settled,
         ...pollError ? { pollError } : {},
-        note: pollError ? `Training was queued, then a status poll failed (${pollError}) \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Trained. list_kb_urls shows each page with a link to the text the agent learned.` : `Still training after ${wait}s \u2014 poll get_kb_crawl_status.`
+        note: pollError ? `Training was queued, then a status poll failed (${pollError}) \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : outcome === "stopped" ? `GoHighLevel stopped this operation (${s.status}). ${trained.length} of ${urlIds.length} requested page(s) are in a "Trained" bucket; the other ${pending.length} are not, so the agent has not learned them.` : settled ? `Trained. list_kb_urls shows each page with a link to the text the agent learned.` : `Still training after ${wait}s \u2014 ${pending.length} of ${urlIds.length} requested page(s) are not in a "Trained" bucket yet (they read ${buckets.join(", ")}; the operation reads "${s.status}"). Poll get_kb_crawl_status with operationId "${operationId}".`
       };
     }
   );
@@ -8573,7 +8665,7 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
     }
   );
 }
-var import_zod34, AI_API_VERSION, KB_CAP_PER_LOCATION, realSleep, FINISHED_STATUS, isSettled, PAGE_PRIORITY, HOME_PATH, SKIP;
+var import_zod34, AI_API_VERSION, KB_CAP_PER_LOCATION, realSleep, FINISHED_STATUS, isSettled, STOPPED_STATUS, wasStopped, crawlOutcome, TRAINED_BUCKET, trainSettledOn, PAGE_PRIORITY, HOME_PATH, SKIP;
 var init_knowledge_base = __esm({
   "src/tools/knowledge-base.ts"() {
     "use strict";
@@ -8584,6 +8676,11 @@ var init_knowledge_base = __esm({
     realSleep = (ms) => new Promise((r) => setTimeout(r, ms));
     FINISHED_STATUS = /^(successful|success|failed|failure|existing|restricted|cancelled|canceled|aborted|completed?)$/i;
     isSettled = (status) => FINISHED_STATUS.test(status.trim());
+    STOPPED_STATUS = /^(failed|failure|restricted|cancelled|canceled|aborted)$/i;
+    wasStopped = (status) => STOPPED_STATUS.test(status.trim());
+    crawlOutcome = (status, settled) => !settled ? "running" : wasStopped(status) ? "stopped" : "finished";
+    TRAINED_BUCKET = /^trained$/i;
+    trainSettledOn = (s, urlIds) => wasStopped(s.status) || trainedOfRequested(s, urlIds).pending.length === 0;
     PAGE_PRIORITY = /about|service|treatment|program|plan|product|menu|special|offer|pricing|price|cost|fee|insurance|contact|location|direction|faq|question|help|hour|book|schedule|appointment|new[- ]?patient|patient|client|team|staff|doctor|provider|review|testimonial/i;
     HOME_PATH = /^\/(index(\.html?)?|home(\.html?)?)?\/?$/i;
     SKIP = /privacy|terms|cookie|legal|login|sign[- ]?in|cart|checkout|account|unsubscribe|\.(pdf|jpe?g|png|gif|svg|xml|json|css|js)(\?|$)|\/blog\/|\/news\/|\/tag\/|\/category\/|\/author\/|\/page\/\d/i;
@@ -9260,13 +9357,17 @@ function registerAiEmployeeDemoTools(server2, shared, deps = {}) {
         return {
           runId: run.runId,
           bot: { id: botId, name: upd.after.name, mode: upd.after.mode, knowledgeBaseIds: upd.after.knowledgeBaseIds, businessName: upd.after.businessName },
-          knowledgeBase: { id: kbId, discovered: crawl.discovered, trained: crawl.trained, learned, notes: crawl.notes },
+          // trainedPages = pages GoHighLevel holds in a Trained bucket; the
+          // operation counter climbs across every train call and is named for
+          // what it is (delta review 3).
+          knowledgeBase: { id: kbId, discovered: crawl.discovered, trainedPages: crawl.trainedPages ?? 0, operationTrainedCount: crawl.trained, learned, notes: crawl.notes },
           prospect: { contactId, phone: prospectPhone, fieldsVerified: Object.keys(values).length },
           numberToText,
           primaryOnSms: primary,
           armed: run.armed,
           readiness: [
-            crawl.trained > 0 ? `the bot has learned ${crawl.trained} page(s)` : "the bot has learned NO pages yet",
+            // Per-page buckets, not the operation counter (sweep review 7).
+            (crawl.trainedPages ?? 0) > 0 ? `the bot has learned ${crawl.trainedPages} page(s)` : "the bot has learned NO pages yet",
             armedNow && wasAutoPilot ? "WARNING: the bot was ALREADY on auto-pilot before this demo and answers on its own; end_ai_employee_demo puts it back to auto-pilot, because that is its before-state" : armedNow ? "the bot is on auto-pilot (armed here)" : armAutoPilot ? `WARNING: arming was requested but the bot reads back as "${String(upd.after.mode)}" \u2014 it is NOT answering on its own` : "the bot is NOT armed \u2014 pass armAutoPilot: true to let it answer",
             primary === true ? "the bot is primary on SMS" : primary === false ? "the bot is NOT primary on SMS \u2014 it will not answer texts until it is" : "could not read whether the bot is primary on SMS",
             numberToText ? `text ${numberToText}` : "this sub-account has no phone number",
@@ -9483,12 +9584,24 @@ function boundNumbers(agent) {
   }
   return [...out];
 }
+function hasSingleNumberField(agent) {
+  const a = isRecord7(agent) ? agent : {};
+  return a.inboundNumber !== null && a.inboundNumber !== void 0 && a.inboundNumber !== "";
+}
+function routedNumbers(agent) {
+  const a = isRecord7(agent) ? agent : {};
+  if (hasSingleNumberField(a) || !Array.isArray(a.inboundNumbers)) return [];
+  return [...new Set(a.inboundNumbers.filter((n) => typeof n === "string" && n.length > 0))];
+}
+function unprovenNumbers(agent) {
+  return hasSingleNumberField(agent) ? boundNumbers(agent) : [];
+}
 function poolBinding(agent) {
   const a = isRecord7(agent) ? agent : {};
   return typeof a.numberPoolId === "string" && a.numberPoolId.trim() ? a.numberPoolId : null;
 }
 function isLiveBound(agent) {
-  return boundNumbers(agent).length > 0 || poolBinding(agent) !== null;
+  return routedNumbers(agent).length > 0 || poolBinding(agent) !== null;
 }
 function inBackupRota(agent) {
   return isRecord7(agent) && agent.isAgentAsBackupDisabled === false;
@@ -9498,7 +9611,7 @@ function canTakeCall(agent) {
 }
 function liveDescription(agent) {
   const parts = [];
-  const nums = boundNumbers(agent);
+  const nums = routedNumbers(agent);
   if (nums.length) parts.push(`answers on ${nums.join(", ")}`);
   const pool = poolBinding(agent);
   if (pool) parts.push(`answers through pool ${pool}`);
@@ -9506,7 +9619,7 @@ function liveDescription(agent) {
   return parts.length ? parts.join(", and ") : null;
 }
 function agentWriteDifferences(sent, stored) {
-  return Object.keys(sent).filter((k) => k !== "locationId" && k !== "inboundNumber" && k !== "numberPoolId" && !sentSubsetOfStored(sent[k], stored[k])).sort();
+  return Object.keys(sent).filter((k) => k !== "locationId" && k !== "inboundNumber" && k !== "inboundNumbers" && k !== "numberPoolId" && !sentSubsetOfStored(sent[k], stored[k])).sort();
 }
 function poolNumbers(pool) {
   if (!isRecord7(pool)) return [];
@@ -9778,7 +9891,12 @@ function registerVoiceAiTools(server2, shared) {
       const { numbers, pools, poolObjects } = await readNumbers(client, loc);
       const agents = await listAllVoiceAgents(client, loc);
       const holders = /* @__PURE__ */ new Map();
-      for (const a of agents) for (const n of boundNumbers(a)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: "inboundNumber" });
+      for (const a of agents) for (const n of routedNumbers(a)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: "inboundNumber" });
+      const unproven = agents.filter((a) => unprovenNumbers(a).length > 0).map((a) => {
+        const nums = unprovenNumbers(a);
+        return { agentId: String(a.id), agentName: String(a.agentName), numbers: nums, stored: { inboundNumber: a.inboundNumber, inboundNumbers: a.inboundNumbers }, fix: UNPROVEN_BINDING_FIX(String(a.agentName), nums) };
+      });
+      const heldUnproven = new Set(unproven.flatMap((u) => u.numbers));
       const poolBound = agents.filter((a) => poolBinding(a) !== null).map((a) => {
         const pool = poolBinding(a);
         const obj = poolObjects.find((p) => poolId(p) === pool);
@@ -9786,12 +9904,16 @@ function registerVoiceAiTools(server2, shared) {
         for (const n of held) if (!holders.has(n)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: `pool ${pool}` });
         return { agentId: String(a.id), agentName: String(a.agentName), poolId: pool, poolNumbers: held.length ? held : "unknown \u2014 this API does not list the pool's numbers" };
       });
-      const unresolvedPool = poolBound.some((p) => typeof p.poolNumbers === "string");
+      const poolRouting = poolBound.filter((p) => Array.isArray(p.poolNumbers) && p.poolNumbers.length > 0);
+      const poolUnproven = poolBound.filter((p) => typeof p.poolNumbers === "string");
+      const unresolvedPool = poolUnproven.length > 0;
       const numberRows = numbers.map((n) => ({ number: n, answeredBy: holders.get(n) ?? null }));
-      const free = unresolvedPool ? [] : numberRows.filter((r) => !r.answeredBy).map((r) => r.number);
+      const free = unresolvedPool ? [] : numberRows.filter((r) => !r.answeredBy && !heldUnproven.has(r.number)).map((r) => r.number);
       const rota = agents.filter(inBackupRota).map((a) => ({ agentId: String(a.id), agentName: String(a.agentName) }));
-      const ready = numberRows.some((r) => r.answeredBy) || poolBound.length > 0;
-      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolBound.length ? `, and ${poolBound.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried as inboundNumber or numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
+      const ready = numberRows.some((r) => r.answeredBy) || poolRouting.length > 0;
+      const unprovenLine = unproven.length ? ` ${unproven.length} agent(s) carry a number binding NOT proven to route (${unproven.map((u) => `"${u.agentName}" on ${u.numbers.join(", ")}`).join("; ")}): see unprovenBindings for the fix.` : "";
+      const poolUnprovenLine = poolUnproven.length ? ` ${poolUnproven.length} agent(s) answer through a number pool this API does not list that pool's numbers for (${poolUnproven.map((p) => `"${p.agentName}" on pool ${p.poolId}`).join("; ")}), so nothing here proves a call lands: open the pool in GoHighLevel and check it holds a number.` : "";
+      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolRouting.length ? `, and ${poolRouting.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.${unprovenLine}${poolUnprovenLine}` : unproven.length || poolUnproven.length ? `NOT PROVEN TO ROUTE: no number is bound in the shape GoHighLevel routes to an agent.${unprovenLine}${poolUnprovenLine}${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""}` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried in inboundNumbers or as numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
       return {
         locationId: loc,
         verdict,
@@ -9800,10 +9922,11 @@ function registerVoiceAiTools(server2, shared) {
         freeNumbersNote: unresolvedPool ? "No number is called free: at least one agent answers through a pool whose numbers this API does not list. Check the pool in GoHighLevel before binding anything." : void 0,
         pools,
         poolBoundAgents: poolBound,
+        ...unproven.length ? { unprovenBindings: unproven } : {},
         backupRotaAgents: rota,
-        agents: agents.map((a) => ({ id: a.id, agentName: a.agentName, businessName: a.businessName, answersOn: boundNumbers(a), pool: poolBinding(a), inBackupRota: inBackupRota(a), canTakeCall: canTakeCall(a), language: a.language, maxCallDuration: a.maxCallDuration, actions: Array.isArray(a.actions) ? a.actions.length : 0 })),
+        agents: agents.map((a) => ({ id: a.id, agentName: a.agentName, businessName: a.businessName, answersOn: routedNumbers(a), ...unprovenNumbers(a).length ? { heldNotProvenToRoute: unprovenNumbers(a) } : {}, pool: poolBinding(a), inBackupRota: inBackupRota(a), canTakeCall: canTakeCall(a), language: a.language, maxCallDuration: a.maxCallDuration, actions: Array.isArray(a.actions) ? a.actions.length : 0 })),
         manualTask: numbers.length === 0 ? NO_NUMBER_TASK : void 0,
-        note: "This reads what the API exposes: each agent's inboundNumber(s) and numberPoolId, and whether it sits in the backup rota (isAgentAsBackupDisabled false). Two things it cannot see: routing set on the number itself in GoHighLevel's Phone Numbers screen, and A2P/SHAKEN-STIR status in Trust Center \u2014 check both there before promising real caller traffic. One real account seen while this was built answers calls with agents that carry no inboundNumber by API (read 2026-09-04)."
+        note: "This reads what the API exposes: each agent's inboundNumbers and numberPoolId, and whether it sits in the backup rota (isAgentAsBackupDisabled false). A number counts as answered only when it is in an agent's inboundNumbers while that agent's inboundNumber is null, the shape GoHighLevel's Deploy tab stores and the one that routed a real call (2026-09-15); a number carried in inboundNumber did not. Two things it cannot see: routing set on the number itself in GoHighLevel's Phone Numbers screen, and A2P/SHAKEN-STIR status in Trust Center \u2014 check both there before promising real caller traffic. One real account seen while this was built answers calls with agents that carry no inboundNumber by API (read 2026-09-04)."
       };
     }
   );
@@ -9839,7 +9962,9 @@ function registerVoiceAiTools(server2, shared) {
       const loc = client.resolveLocationId(locationId2);
       const agent = await readVoiceAgent(client, loc, agentId);
       const live = liveDescription(agent);
-      return { agent, answersOn: boundNumbers(agent), pool: poolBinding(agent), inBackupRota: inBackupRota(agent), note: live ? `This agent can take calls: it ${live}.` : UNBOUND_NOTE };
+      const unproven = unprovenNumbers(agent);
+      const unprovenNote = unproven.length ? `Its number binding is not proven to route: ${UNPROVEN_BINDING_FIX(String(agent.agentName), unproven)}` : "";
+      return { agent, answersOn: routedNumbers(agent), ...unproven.length ? { heldNotProvenToRoute: unproven } : {}, pool: poolBinding(agent), inBackupRota: inBackupRota(agent), note: live ? `This agent can take calls: it ${live}.${unprovenNote ? ` ${unprovenNote}` : ""}` : unprovenNote || UNBOUND_NOTE };
     }
   );
   safeTool(
@@ -9852,11 +9977,12 @@ function registerVoiceAiTools(server2, shared) {
       businessName: import_zod37.z.string().min(1).describe("The business it answers for, as it should say it."),
       ...(({ businessName: _b, isAgentAsBackupDisabled: _k, ...rest }) => rest)(AGENT_FIELDS),
       inboundNumber: import_zod37.z.string().nullable().optional().describe("REFUSED here. Creation never binds a number; create, read the agent, then bind with update_voice_agent."),
+      inboundNumbers: import_zod37.z.array(import_zod37.z.string()).optional().describe("REFUSED here, like inboundNumber. Creation never binds a number; bind with update_voice_agent afterwards."),
       numberPoolId: import_zod37.z.string().nullable().optional().describe("REFUSED here. Creation never binds a pool; use update_voice_agent afterwards."),
       isAgentAsBackupDisabled: import_zod37.z.boolean().optional().describe("Always true at creation. false is REFUSED here; let the agent into the backup rota with update_voice_agent once you have read it.")
     },
-    async ({ locationId: locationId2, inboundNumber, numberPoolId, isAgentAsBackupDisabled, ...fields }) => {
-      if (inboundNumber !== void 0 || numberPoolId !== void 0) throw new Error("create_voice_agent never binds a number or a number pool \u2014 an agent is born non-live so nothing half-built can take a call. Create it, read it with get_voice_agent, then bind with update_voice_agent (inboundNumber or numberPoolId), which checks the number is this sub-account's and free.");
+    async ({ locationId: locationId2, inboundNumber, inboundNumbers, numberPoolId, isAgentAsBackupDisabled, ...fields }) => {
+      if (inboundNumber !== void 0 || inboundNumbers !== void 0 || numberPoolId !== void 0) throw new Error("create_voice_agent never binds a number or a number pool \u2014 an agent is born non-live so nothing half-built can take a call. Create it, read it with get_voice_agent, then bind with update_voice_agent (inboundNumber or numberPoolId), which checks the number is this sub-account's and free.");
       if (isAgentAsBackupDisabled === false) throw new Error("create_voice_agent always keeps the new agent OUT of the backup rota (isAgentAsBackupDisabled true). Let it in with update_voice_agent once you have read the agent.");
       const client = shared.pinned();
       const loc = client.resolveLocationId(locationId2);
@@ -9864,6 +9990,7 @@ function registerVoiceAiTools(server2, shared) {
       resolveResponsiveness(body);
       if (body.maxCallDuration === void 0) body.maxCallDuration = DEFAULT_MAX_CALL_SECONDS;
       delete body.inboundNumber;
+      delete body.inboundNumbers;
       delete body.numberPoolId;
       body.isAgentAsBackupDisabled = true;
       const problem = agentBodyProblem(body);
@@ -9899,13 +10026,13 @@ function registerVoiceAiTools(server2, shared) {
   safeTool(
     server2,
     "update_voice_agent",
-    "Change any part of a Voice AI agent, including the two things creation never does: bind a number (inboundNumber, or numberPoolId) and let it into the backup rota (isAgentAsBackupDisabled: false). Send only what changes: GoHighLevel applies it as a partial update and the rest survives (read back and diffed here). A number must be this sub-account's and free; inboundNumber: null unbinds. Post-call workflows must be published. Returns what changed, the fields that differ before \u2192 after, and the agent as it now reads.",
+    "Change any part of a Voice AI agent, including the two things creation never does: bind a number (inboundNumber, or numberPoolId) and let it into the backup rota (isAgentAsBackupDisabled: false). Send only what changes: GoHighLevel applies it as a partial update and the rest survives (read back and diffed here). A number must be this sub-account's and free. The number is written to the agent's inboundNumbers list with inboundNumber cleared, the shape GoHighLevel's Deploy tab stores and the one that routed a real call; it is VERIFIED only when it reads back that way. inboundNumber: null unbinds every number. Re-binding an agent's own number repairs a binding check_voice_ai_readiness calls not proven to route. Post-call workflows must be published. Returns what changed, the fields that differ before \u2192 after, and the agent as it now reads.",
     {
       agentId: import_zod37.z.string().describe("Agent id."),
       locationId: LOCATION,
       agentName: import_zod37.z.string().min(1).max(40).optional(),
       ...AGENT_FIELDS,
-      inboundNumber: import_zod37.z.string().nullable().optional().describe("Bind a number this sub-account owns that no other agent answers on; null unbinds."),
+      inboundNumber: import_zod37.z.string().nullable().optional().describe("Bind a number this sub-account owns that no other agent answers on. Stored in the agent's inboundNumbers list beside any it already answers on, with GoHighLevel's single inboundNumber field cleared. null unbinds every number."),
       numberPoolId: import_zod37.z.string().nullable().optional().describe("Bind a number pool; null unbinds.")
     },
     async ({ agentId, locationId: locationId2, inboundNumber, numberPoolId, ...fields }) => {
@@ -9913,10 +10040,18 @@ function registerVoiceAiTools(server2, shared) {
       const loc = client.resolveLocationId(locationId2);
       const change = dropUndefined({ ...fields });
       resolveResponsiveness(change);
-      if (inboundNumber !== void 0) change.inboundNumber = inboundNumber;
       if (numberPoolId !== void 0) change.numberPoolId = numberPoolId;
-      if (Object.keys(change).length === 0) throw new Error("Nothing to update \u2014 pass at least one field to change.");
+      if (Object.keys(change).length === 0 && inboundNumber === void 0) throw new Error("Nothing to update \u2014 pass at least one field to change.");
       const before = await readVoiceAgent(client, loc, agentId);
+      const bindNotes = [];
+      if (typeof inboundNumber === "string") {
+        const current = Array.isArray(before.inboundNumbers) ? before.inboundNumbers.filter((n) => typeof n === "string" && n.length > 0) : [];
+        change.inboundNumbers = [.../* @__PURE__ */ new Set([...current, inboundNumber])];
+        if (hasSingleNumberField(before)) change.inboundNumber = null;
+      } else if (inboundNumber === null) {
+        change.inboundNumber = null;
+        change.inboundNumbers = [];
+      }
       const merged = { ...change };
       if (change.language !== void 0 || change.translation !== void 0) {
         if (merged.language === void 0 && typeof before.language === "string") merged.language = before.language;
@@ -9935,8 +10070,26 @@ function registerVoiceAiTools(server2, shared) {
         const { numbers, pools, poolObjects } = await readNumbers(client, loc);
         if (typeof inboundNumber === "string") {
           if (!numbers.includes(inboundNumber)) throw new Error(numbers.length ? `${inboundNumber} is not a number on this sub-account. Its numbers: ${numbers.join(", ")}.` : NO_NUMBER_TASK);
-          const clash = bindingClash(inboundNumber, await listAllVoiceAgents(client, loc), agentId, poolObjects);
+          const agents = await listAllVoiceAgents(client, loc);
+          const clash = bindingClash(inboundNumber, agents, agentId, poolObjects);
           if (clash) throw new Error(clash);
+          const dormant = unprovenNumbers(before).filter((n) => n !== inboundNumber);
+          const kept = [];
+          for (const n of change.inboundNumbers) {
+            if (n === inboundNumber) {
+              kept.push(n);
+              continue;
+            }
+            const holder = agents.find((a) => a.id !== agentId && boundNumbers(a).includes(n));
+            if (holder && dormant.includes(n)) {
+              bindNotes.push(`${n} was held by this agent in the shape not proven to route and now answers for agent "${String(holder.agentName)}" (${String(holder.id)}), so it was left off this agent rather than written onto two.`);
+              continue;
+            }
+            if (holder) bindNotes.push(`${n} also answers for agent "${String(holder.agentName)}" (${String(holder.id)}) in GoHighLevel. It stays on this agent, which was routing it; GoHighLevel decides which of the two takes a call, so unbind it on one of them.`);
+            kept.push(n);
+            if (dormant.includes(n)) bindNotes.push(`${n} was held by this agent in the shape not proven to route (BUG-2026-09-15-02) and starts routing to it with this write.`);
+          }
+          change.inboundNumbers = kept;
         }
         if (typeof numberPoolId === "string") {
           if (!pools.includes(numberPoolId)) throw new Error(pools.length ? `Number pool ${numberPoolId} is not on this sub-account. Its pools: ${pools.join(", ")}.` : "This sub-account has no number pools (list_number_pools).");
@@ -9961,18 +10114,22 @@ function registerVoiceAiTools(server2, shared) {
       if (!rb.agent) return { sent: Object.keys(change), changed: [], before: {}, agent: void 0, answersOn: [], pool: null, inBackupRota: void 0, readBack: "ASSERTED", differs: void 0, notes: [READBACK_FAILED("update", agentId, rb.error ?? "unknown error")] };
       const after = rb.agent;
       const changed = diffVoiceAgentSnapshots(before, after);
-      const notes = [];
+      const notes = [...bindNotes];
       const differs = agentWriteDifferences(change, after);
       for (const k of differs) notes.push(`${k}: sent ${JSON.stringify(change[k])}, reads back ${JSON.stringify(after[k])}.`);
       let asserted2 = differs.length > 0;
       if (typeof inboundNumber === "string" && !boundNumbers(after).includes(inboundNumber)) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: ${inboundNumber} was sent but the read-back does not show it bound.`);
+      } else if (typeof inboundNumber === "string" && !routedNumbers(after).includes(inboundNumber)) {
+        asserted2 = true;
+        notes.push(`ASSERTED ONLY: ${inboundNumber} reads back, but not in the shape proven to route a call (inboundNumber ${JSON.stringify(after.inboundNumber)}, inboundNumbers ${JSON.stringify(after.inboundNumbers)}). Check the agent's Deploy tab in GoHighLevel before telling anyone it answers.`);
       }
       if (inboundNumber === null && boundNumbers(after).length) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: unbind was sent but the read-back still shows ${boundNumbers(after).join(", ")}.`);
       }
+      if (inboundNumber === void 0 && unprovenNumbers(after).length) notes.push(`Its number binding is not proven to route: ${UNPROVEN_BINDING_FIX(String(after.agentName), unprovenNumbers(after))}`);
       if (typeof numberPoolId === "string" && poolBinding(after) !== numberPoolId) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: number pool ${numberPoolId} was sent but the read-back shows ${JSON.stringify(after.numberPoolId)}.`);
@@ -9981,7 +10138,7 @@ function registerVoiceAiTools(server2, shared) {
         asserted2 = true;
         notes.push(`ASSERTED ONLY: pool unbind was sent but the read-back still shows pool ${poolBinding(after)}.`);
       }
-      const bound = boundNumbers(after);
+      const bound = routedNumbers(after);
       const live = liveDescription(after);
       if (change.isAgentAsBackupDisabled === false && inBackupRota(after)) notes.push("This agent is now in the backup rota: GoHighLevel may hand it unanswered calls on this sub-account's numbers even with nothing bound.");
       if (!canTakeCall(after)) notes.push(UNBOUND_NOTE);
@@ -10191,7 +10348,7 @@ function registerVoiceAiTools(server2, shared) {
     }
   );
 }
-var import_zod37, VOICE_LANGUAGES, PATIENCE_LEVELS, VOICE_ACTION_TYPES, PATIENCE_TO_RESPONSIVENESS, ACTION_NAME, TRANSFER_NUMBER, IANA_TZ, MAX_CALL_SECONDS, DEFAULT_MAX_CALL_SECONDS, VOICE_AGENT_COMPARABLE, READBACK_FAILED, AGENT_PAGE_SIZE, AGENT_PAGE_CAP, NO_NUMBER_TASK, WorkingHours, PostCallNotify, Translation, AGENT_FIELDS;
+var import_zod37, VOICE_LANGUAGES, PATIENCE_LEVELS, VOICE_ACTION_TYPES, PATIENCE_TO_RESPONSIVENESS, ACTION_NAME, TRANSFER_NUMBER, IANA_TZ, MAX_CALL_SECONDS, DEFAULT_MAX_CALL_SECONDS, VOICE_AGENT_COMPARABLE, UNPROVEN_BINDING_FIX, READBACK_FAILED, AGENT_PAGE_SIZE, AGENT_PAGE_CAP, NO_NUMBER_TASK, WorkingHours, PostCallNotify, Translation, AGENT_FIELDS;
 var init_voice_ai = __esm({
   "src/tools/voice-ai.ts"() {
     "use strict";
@@ -10228,6 +10385,7 @@ var init_voice_ai = __esm({
       "isAgentAsBackupDisabled",
       "translation"
     ];
+    UNPROVEN_BINDING_FIX = (agentName, numbers) => `"${agentName}" carries ${numbers.join(", ")} in a shape GoHighLevel did not route to the agent when tested (a call went to voicemail, 2026-09-15). Rebind it with update_voice_agent (inboundNumber "${numbers[0]}"), or connect the number in the agent's Deploy tab in GoHighLevel, then run check_voice_ai_readiness again.`;
     READBACK_FAILED = (what, id, error) => `GoHighLevel accepted the ${what} (${id}) but the read after it failed: ${error.slice(0, 200)}. The write is ASSERTED, not proven. Do NOT repeat the write \u2014 read get_voice_agent first.`;
     AGENT_PAGE_SIZE = 50;
     AGENT_PAGE_CAP = 100;
@@ -11584,8 +11742,10 @@ ${await response.text()}`);
     async ({ pageId, content, funnelId, isPublished }) => {
       try {
         let meta = {};
+        let preReadOk = false;
         try {
           meta = await funnelRequest("GET", `/page/${pageId}?locationId=${client.locationId}`);
+          preReadOk = true;
         } catch (metaErr) {
           if (!funnelId) throw metaErr;
         }
@@ -11621,14 +11781,24 @@ ${await response.text()}`);
           }
           const afterVersion = typeof after.pageVersion === "number" ? after.pageVersion : null;
           const becameVisible = afterUrl !== "" && afterUrl !== beforeUrl;
-          save_check = {
-            visible: becameVisible,
-            pageVersion_sent: pageVersion,
-            pageVersion_now: afterVersion,
-            ...becameVisible ? {} : {
-              warning: "SAVED BUT NOT VISIBLE. GHL accepted the write and stored the content, but the page's live pointer did not move, so visitors still see the previous version. This is GHL's behaviour on a page that already has content, not a transport error. Rebuild on a fresh step with create_funnel_page and save onto that instead \u2014 do NOT report this page as updated."
-            }
-          };
+          if (!preReadOk) {
+            const versionMismatch = afterVersion !== null && afterVersion !== pageVersion;
+            save_check = {
+              visible: null,
+              pageVersion_sent: pageVersion,
+              pageVersion_now: afterVersion,
+              warning: "SAVE NOT VERIFIED. The page could not be read before the save, so whether the new version is the one visitors see is not verified \u2014 with no baseline pointer, a page that never moved off its old content is indistinguishable from one that took the save. Read it with get_page_full and compare before reporting it as updated." + (versionMismatch ? ` GoHighLevel now reports this page at pageVersion ${afterVersion} while the save was sent as pageVersion ${pageVersion}: the page already held content this save did not build on, which is exactly the case where GHL stores the write and keeps serving the previous version.` : "")
+            };
+          } else {
+            save_check = {
+              visible: becameVisible,
+              pageVersion_sent: pageVersion,
+              pageVersion_now: afterVersion,
+              ...becameVisible ? {} : {
+                warning: "SAVED BUT NOT VISIBLE. GHL accepted the write and stored the content, but the page's live pointer did not move, so visitors still see the previous version. This is GHL's behaviour on a page that already has content, not a transport error. Rebuild on a fresh step with create_funnel_page and save onto that instead \u2014 do NOT report this page as updated."
+              }
+            };
+          }
         } catch (verifyErr) {
           save_check = {
             visible: null,
@@ -11773,6 +11943,9 @@ function hexToOklch(hex) {
   if (!c) throw new Error(`not a colour: ${hex}`);
   return rgbToOklch(c);
 }
+function oklchToHex(o) {
+  return toHex(oklchToRgb(o));
+}
 function oklchCss(o) {
   return `oklch(${(o.l * 100).toFixed(1)}% ${o.c.toFixed(3)} ${o.h.toFixed(1)})`;
 }
@@ -12182,6 +12355,176 @@ var init_ghl_page = __esm({
   }
 });
 
+// src/command-os/design/rendered-palette.ts
+function kindOf(prop) {
+  if (/background|bgcolor/i.test(prop)) return "background";
+  if (/border|outline|shadow/i.test(prop)) return "border";
+  if (prop === "color") return "text";
+  return "other";
+}
+function pageVariables(envelope) {
+  const defs = /* @__PURE__ */ new Map();
+  const fromCss = (css2) => {
+    for (const block of css2.matchAll(/:root\s*\{([^}]*)\}/g)) {
+      for (const m of block[1].matchAll(/--([\w-]+)\s*:\s*([^;]+)/g)) if (!defs.has(m[1])) defs.set(m[1], m[2].trim());
+    }
+  };
+  const root = isRecord8(envelope) ? envelope : {};
+  if (typeof root.pageStyles === "string") fromCss(root.pageStyles);
+  const walk = (node) => {
+    if (Array.isArray(node)) return void node.forEach(walk);
+    if (!isRecord8(node)) return;
+    for (const [k, v] of Object.entries(node)) {
+      if (k.startsWith("--") && typeof v === "string" && !defs.has(k.slice(2))) defs.set(k.slice(2), v.trim());
+      else if (typeof v === "string" && v.includes(":root")) fromCss(v);
+      else walk(v);
+    }
+  };
+  walk(root);
+  return defs;
+}
+function resolveValue(raw, defs) {
+  let v = raw.trim();
+  for (let i = 0; i < 10; i++) {
+    const m = /^var\(\s*--([\w-]+)\s*(?:,\s*([^)]*))?\)$/.exec(v);
+    if (!m) return v;
+    const next = defs.get(m[1]) ?? m[2];
+    if (next === void 0) return null;
+    v = next.trim();
+  }
+  return null;
+}
+function normaliseColour(value) {
+  if (value === null) return null;
+  if (/^transparent$/i.test(value)) return "transparent";
+  const c = parseColor(value);
+  if (!c) return null;
+  if (c.a === 0) return "transparent";
+  if (c.a < 1) return `rgba(${Math.round(c.r)}, ${Math.round(c.g)}, ${Math.round(c.b)}, ${Number(c.a.toFixed(3))})`;
+  return toHex(c);
+}
+function renderedPalette(envelope) {
+  const defs = pageVariables(envelope);
+  const paints = [];
+  const walk = (node, path40, prop) => {
+    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path40}[${i}]`, prop));
+    if (isRecord8(node)) {
+      for (const [k, x] of Object.entries(node)) {
+        if (DEFINITION_KEYS.has(k) || k.startsWith("--")) continue;
+        walk(x, `${path40}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
+      }
+      return;
+    }
+    if (typeof node !== "string") return;
+    const raw = node.trim();
+    if (!/^var\(/.test(raw) && !COLOUR_LITERAL.test(raw)) return;
+    const resolved2 = resolveValue(raw, defs);
+    const colour = normaliseColour(resolved2);
+    if (colour === null && resolved2 !== null) return;
+    paints.push({ path: path40, prop, kind: kindOf(prop), colour });
+  };
+  walk(envelope, "", "");
+  const face = (name, settingsKey) => {
+    const fromVar = resolveValue(`var(--${name})`, defs);
+    if (fromVar) return fromVar.replace(/['"]/g, "").trim() || null;
+    const settings = envelope?.settings?.settings?.typography?.fonts?.[settingsKey];
+    return typeof settings?.value?.text === "string" && settings.value.text.trim() ? settings.value.text.trim() : null;
+  };
+  return { paints, fonts: { headline: face("headlinefont", "headlineFont"), body: face("contentfont", "contentFont") } };
+}
+function contrastLosses(before, after) {
+  const afterByPath = new Map(after.paints.map((p) => [p.path, p.colour]));
+  const groups = /* @__PURE__ */ new Map();
+  for (const p of before.paints) {
+    const to = afterByPath.get(p.path);
+    if (p.kind !== "text" && p.kind !== "background" || !p.colour?.startsWith("#") || !to?.startsWith("#")) continue;
+    const g = groups.get(paintGroup(p.path)) ?? { texts: [], backgrounds: [] };
+    (p.kind === "text" ? g.texts : g.backgrounds).push([p.colour, to]);
+    groups.set(paintGroup(p.path), g);
+  }
+  const out = /* @__PURE__ */ new Map();
+  for (const [where, g] of groups) {
+    for (const [t0, t1] of g.texts) for (const [b0, b1] of g.backgrounds) {
+      const was = contrastHex(t0, b0), now = contrastHex(t1, b1);
+      if (was >= 4.5 && now < 4.5 && !out.has(`${t1} ${b1}`)) out.set(`${t1} ${b1}`, { where, text: t1, background: b1, before: Number(was.toFixed(2)), after: Number(now.toFixed(2)) });
+    }
+  }
+  return [...out.values()];
+}
+function repaintReport(before, after) {
+  const a = renderedPalette(before), b = renderedPalette(after);
+  const afterByPath = new Map(b.paints.map((p) => [p.path, p]));
+  const changes = /* @__PURE__ */ new Map();
+  const unchanged = /* @__PURE__ */ new Map();
+  const tally = { background: { uses: 0, changed: 0 }, neutral: { uses: 0, changed: 0 }, text: { uses: 0, changed: 0 } };
+  const coloured = (c) => c.startsWith("#") && hexToOklch(c).c >= CARRIES_COLOUR;
+  for (const p of a.paints) {
+    if (!p.colour || p.colour === "transparent") continue;
+    const q2 = afterByPath.get(p.path);
+    const to = q2?.colour ?? null;
+    const differs = to !== null && looksDifferent(p.colour, to);
+    if (p.kind === "background" || p.kind === "text") {
+      const t = p.kind === "text" ? tally.text : coloured(p.colour) ? tally.background : tally.neutral;
+      t.uses++;
+      if (differs) t.changed++;
+      else {
+        const key = `${p.kind} ${p.colour}`;
+        const u = unchanged.get(key) ?? { kind: p.kind, colour: p.colour, uses: 0 };
+        u.uses++;
+        unchanged.set(key, u);
+      }
+    }
+    if (differs) {
+      const key = `${p.kind} ${p.colour} ${to}`;
+      const c = changes.get(key) ?? { kind: p.kind, from: p.colour, to, uses: 0 };
+      c.uses++;
+      changes.set(key, c);
+    }
+  }
+  const byUses = (xs) => [...xs].sort((x, y) => y.uses - x.uses);
+  const changeList = byUses(changes.values());
+  const unchangedList = byUses(unchanged.values());
+  const fonts = { headline: { from: a.fonts.headline, to: b.fonts.headline }, body: { from: a.fonts.body, to: b.fonts.body } };
+  const fontsChanged = fonts.headline.from !== fonts.headline.to || fonts.body.from !== fonts.body.to;
+  const bg = tally.background;
+  const share = bg.uses ? bg.changed / bg.uses : 0;
+  const verdict = changeList.length === 0 && !fontsChanged ? "unchanged" : share < BARELY_SHARE ? "barely" : "repainted";
+  const list2 = (xs, n = 6) => xs.slice(0, n).map((x) => x.colour ? `${x.colour} on ${x.uses}` : `${x.from} to ${x.to} on ${x.uses}`).join(", ");
+  const bgChanges = changeList.filter((c) => c.kind === "background" && coloured(c.from));
+  const bgKept = unchangedList.filter((u) => u.kind === "background" && coloured(u.colour));
+  const faceLine = (role, f) => f.from === f.to ? `${role} still ${f.from ?? "no set face"}` : `${role} ${f.from ?? "no set face"} to ${f.to ?? "no set face"}`;
+  const colourLine = verdict === "unchanged" ? "Nothing the page paints changed: every background, text colour and face is the template's own." : bg.uses === 0 ? "The visible palette barely changed: the template paints no background in a colour, only white, black and greys, so there was little colour to repaint." : verdict === "barely" ? `The visible palette barely changed: ${bg.changed} of ${bg.uses} coloured backgrounds now look different${bgChanges.length ? ` (${list2(bgChanges)})` : ""}.${bgKept.length ? ` Still in the template's own colours: ${list2(bgKept)}.` : ""}` : `Repainted: ${bg.changed} of ${bg.uses} coloured backgrounds now look different (${list2(bgChanges)}).${bgKept.length ? ` Left looking as they were: ${list2(bgKept)}.` : ""}`;
+  const contrast = contrastLosses(a, b);
+  const summary = [
+    ...contrast.length ? [`Harder to read: ${contrast.length} text and background pair(s) that met WCAG AA no longer do (${contrast.slice(0, 4).map((c) => `${c.text} type on ${c.background} is ${c.after}:1, was ${c.before}:1`).join("; ")}).`] : [],
+    colourLine,
+    `White, black and grey backgrounds: ${tally.neutral.changed} of ${tally.neutral.uses} look different.`,
+    `Text colour changed on ${tally.text.changed} of ${tally.text.uses} uses.`,
+    `Faces: ${faceLine("headlines", fonts.headline)}, ${faceLine("body text", fonts.body)}.`
+  ].join(" ");
+  return { verdict, summary, backgrounds: bg, neutralBackgrounds: tally.neutral, text: tally.text, changes: changeList, unchanged: unchangedList, fonts, contrast };
+}
+var DEFINITION_KEYS, WRAPPER_KEYS, isRecord8, COLOUR_LITERAL, VISIBLE_CHANGE, BARELY_SHARE, CARRIES_COLOUR, paintGroup, looksDifferent;
+var init_rendered_palette = __esm({
+  "src/command-os/design/rendered-palette.ts"() {
+    "use strict";
+    init_color();
+    DEFINITION_KEYS = /* @__PURE__ */ new Set(["pageStyles", "general", "rootVars", "sectionStyles", "typography", "fontsToLoad", "fontsToLoadForPreview"]);
+    WRAPPER_KEYS = /* @__PURE__ */ new Set(["value", "styles", "extra", "metaData"]);
+    isRecord8 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    COLOUR_LITERAL = /^(#[0-9a-fA-F]{3,8}|rgba?\([^)]*\)|hsla?\([^)]*\)|transparent)$/i;
+    VISIBLE_CHANGE = 0.05;
+    BARELY_SHARE = 0.5;
+    CARRIES_COLOUR = 0.02;
+    paintGroup = (path40) => /^\.(sections|popups)\[\d+\]/.exec(path40)?.[0]?.slice(1) ?? "page";
+    looksDifferent = (a, b) => {
+      if (a === b) return false;
+      if (a === "transparent" || b === "transparent" || a.startsWith("rgba") || b.startsWith("rgba")) return a !== b;
+      return deltaEHex(a, b) >= VISIBLE_CHANGE;
+    };
+  }
+});
+
 // src/command-os/design/retheme.ts
 function hexHistogram(envelope) {
   const counts = /* @__PURE__ */ new Map();
@@ -12194,49 +12537,170 @@ function hexHistogram(envelope) {
 function isIconFont(family) {
   return ICON_FONTS.test(family);
 }
-function derivePalette(envelope) {
-  const hist = [...hexHistogram(envelope).entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
+function usageOf(paints) {
+  const u = { background: /* @__PURE__ */ new Map(), text: /* @__PURE__ */ new Map(), all: /* @__PURE__ */ new Map() };
+  const bump = (m, hex) => m.set(hex, (m.get(hex) ?? 0) + 1);
+  for (const p of paints) {
+    if (!p.colour || !p.colour.startsWith("#")) continue;
+    const hex = p.colour.toLowerCase();
+    bump(u.all, hex);
+    if (p.kind === "background") bump(u.background, hex);
+    if (p.kind === "text") bump(u.text, hex);
+  }
+  return u;
+}
+function usageOrHexes(envelope) {
+  const u = usageOf(renderedPalette(envelope).paints);
+  if (u.all.size === 0) for (const [hex, n] of hexHistogram(envelope)) u.all.set(hex, n);
+  return u;
+}
+function derivePaletteFromUsage(u, fonts) {
+  const sorted = (m) => [...m.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
+  const painted = u.background.size + u.text.size > 0;
+  const merged = new Map(u.background);
+  for (const [hex, n] of u.text) merged.set(hex, (merged.get(hex) ?? 0) + n);
+  const primary = painted ? merged : u.all;
+  const hist = sorted(primary);
   const undecided = [];
-  const coloured = hist.filter(([hex]) => !isNeutralHex(hex) && hexToOklch(hex).c >= BRAND_CHROMA);
-  const neutrals = hist.filter(([hex]) => isNeutralHex(hex) || hexToOklch(hex).c < BRAND_CHROMA);
-  const accent = coloured[0]?.[0] ?? null;
+  const isColoured = (hex) => !isNeutralHex(hex) && hexToOklch(hex).c >= BRAND_CHROMA;
+  const isGreyish = (hex) => isNeutralHex(hex) || hexToOklch(hex).c < BRAND_CHROMA;
+  const firstOf = (pred, ...maps) => {
+    for (const m of maps) {
+      const hit = sorted(m).find(([hex]) => pred(hex));
+      if (hit) return hit[0];
+    }
+    return null;
+  };
+  const accent = painted ? firstOf(isColoured, u.background, u.text) : firstOf(isColoured, primary);
   if (!accent) undecided.push("no strongly-coloured hex appears in this page, so it has no accent to swap \u2014 it is already a greyscale design");
   const SECOND_COLOUR_DISTANCE = 0.12;
-  const secondary = accent ? coloured.find(([hex]) => deltaEHex(hex, accent) > SECOND_COLOUR_DISTANCE)?.[0] ?? null : null;
-  const lights = neutrals.filter(([hex]) => hexToOklch(hex).l > 0.85);
-  const darks = neutrals.filter(([hex]) => hexToOklch(hex).l < 0.4);
-  const surface = lights[0]?.[0] ?? null;
-  const text2 = darks[0]?.[0] ?? null;
+  const secondary = accent ? hist.find(([hex]) => isColoured(hex) && deltaEHex(hex, accent) > SECOND_COLOUR_DISTANCE)?.[0] ?? null : null;
+  const light = (hex) => isGreyish(hex) && hexToOklch(hex).l > 0.85;
+  const dark = (hex) => isGreyish(hex) && hexToOklch(hex).l < 0.4;
+  const surface = painted ? firstOf(light, u.background, primary) : firstOf(light, primary);
+  const text2 = painted ? firstOf(dark, u.text, primary) : firstOf(dark, primary);
   if (!surface) undecided.push("no light neutral is used often enough to be the page background");
   if (!text2) undecided.push("no dark neutral is used often enough to be the body text colour");
-  const varSlug = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
-  const serialized = JSON.stringify(envelope);
-  const fonts = declaredFonts(envelope).filter((f) => !isIconFont(f)).map((f) => ({ family: f, uses: (serialized.match(new RegExp(`--${varSlug(f)}\\b`, "g")) ?? []).length })).filter((f) => f.uses > 0).sort((a, b) => b.uses - a.uses || a.family.localeCompare(b.family)).map((f) => f.family).slice(0, 2);
-  const tint = hist.find(([hex]) => {
+  const isTint = (hex) => {
     if (hex === surface || hex === accent) return false;
     const { l } = hexToOklch(hex);
     return l > 0.7 && l < 0.97;
-  })?.[0] ?? null;
-  return { accent, surface, text: text2, secondary, tint, fonts, undecided };
+  };
+  const tint = painted ? firstOf(isTint, u.background, primary) : firstOf(isTint, primary);
+  const taken = new Set([accent, surface, text2, secondary, tint].filter((x) => !!x));
+  const tones = painted ? hist.map(([hex]) => hex).filter((hex) => !taken.has(hex) && isGreyish(hex) && hexToOklch(hex).c >= TONE_CHROMA) : [];
+  return { accent, surface, text: text2, secondary, tint, tones, fonts, undecided };
+}
+function pageFaces(envelope) {
+  const named = renderedPalette(envelope).fonts;
+  const real = (f) => !!f && !isIconFont(f) && !/^var\(/.test(f);
+  const varSlug = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
+  const serialized = JSON.stringify(envelope);
+  const byUse = declaredFonts(envelope).filter((f) => !isIconFont(f)).map((f) => ({ family: f, uses: (serialized.match(new RegExp(`--${varSlug(f)}\\b`, "g")) ?? []).length })).filter((f) => f.uses > 0).sort((a, b) => b.uses - a.uses || a.family.localeCompare(b.family)).map((f) => f.family);
+  const ordered = [.../* @__PURE__ */ new Set([...real(named.headline) ? [named.headline] : [], ...real(named.body) ? [named.body] : [], ...byUse])];
+  return ordered.slice(0, 2);
+}
+function derivePalette(envelope) {
+  return derivePaletteFromUsage(usageOrHexes(envelope), pageFaces(envelope));
+}
+function paintsAs(literal, from) {
+  if (/^#[0-9a-f]{8}$/i.test(literal)) return { hit: literal.slice(0, 7).toLowerCase() === from, keep: literal.slice(7) };
+  return { hit: normaliseColour(literal)?.toLowerCase() === from, keep: "" };
+}
+function sectionPairs(envelope) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const p of renderedPalette(envelope).paints) {
+    if (!p.colour?.startsWith("#") || p.kind !== "background" && p.kind !== "text") continue;
+    const key = /^\.(sections|popups)\[\d+\]/.exec(p.path)?.[0] ?? "page";
+    const g = groups.get(key) ?? { where: key.replace(/^\./, ""), backgrounds: /* @__PURE__ */ new Set(), texts: /* @__PURE__ */ new Set() };
+    (p.kind === "background" ? g.backgrounds : g.texts).add(p.colour.toLowerCase());
+    groups.set(key, g);
+  }
+  return [...groups.values()];
 }
 function rethemeEnvelope(envelope, brand, derived = derivePalette(envelope)) {
   const swaps = [];
   const skipped = [];
   const warnings = [...derived.undecided];
-  let text2 = JSON.stringify(envelope);
-  const swap = (role, from, to) => {
+  const plan = [];
+  const want = (role, from, to, guarded2 = false) => {
     if (!from) return void skipped.push(`${role}: the template has none to replace`);
     if (from.toLowerCase() === to.toLowerCase()) return void skipped.push(`${role}: the template already uses ${to}`);
-    const re = new RegExp(escapeRe(from), "gi");
-    const occurrences = (text2.match(re) ?? []).length;
-    text2 = text2.replace(re, to);
-    swaps.push({ role, from, to, occurrences });
-  };
-  swap("accent", derived.accent, brand.colors.accent.hex);
-  swap("surface", derived.surface, brand.colors.surface.hex);
-  swap("body text", derived.text, brand.colors.fg.hex);
-  if (derived.secondary) swap("second colour", derived.secondary, brand.colors.muted.hex);
-  if (derived.tint) swap("section tint", derived.tint, brand.pageStudioTheme.primarySoft);
+    plan.push({ role, from: from.toLowerCase(), to, guarded: guarded2 });
+  };
+  want("accent", derived.accent, brand.colors.accent.hex);
+  want("surface", derived.surface, brand.colors.surface.hex);
+  want("body text", derived.text, brand.colors.fg.hex);
+  if (derived.secondary) want("second colour", derived.secondary, brand.colors.muted.hex);
+  if (derived.tint) want("section tint", derived.tint, brand.pageStudioTheme.primarySoft, true);
+  const brandHue = hexToOklch(brand.colors.accent.hex);
+  for (const tone of derived.tones ?? []) {
+    if (brandHue.c < NEUTRAL_CHROMA) {
+      skipped.push(`tone ${tone}: the brand's accent is a grey, so it has no hue to carry`);
+      continue;
+    }
+    const o = hexToOklch(tone);
+    want("design tone", tone, oklchToHex({ l: o.l, c: o.c, h: brandHue.h }), true);
+  }
+  const target = (hex) => plan.find((x) => x.from === hex)?.to ?? hex;
+  const pairs = sectionPairs(envelope);
+  const losses = () => {
+    const out = [];
+    for (const g of pairs) for (const bg of g.backgrounds) for (const t of g.texts) {
+      const before = contrastHex(t, bg);
+      if (before < 4.5) continue;
+      const after = contrastHex(target(t), target(bg));
+      if (after >= 4.5) continue;
+      out.push({ where: g.where, t, bg, before, after, involved: plan.filter((x) => x.from === t || x.from === bg) });
+    }
+    return out;
+  };
+  const sayLoss = (l) => `${l.where}: ${target(l.t).toUpperCase()} type on ${target(l.bg).toUpperCase()} would be ${l.after.toFixed(2)}:1 (it was ${l.before.toFixed(2)}:1); WCAG AA wants 4.5.`;
+  const guardedAtStart = plan.filter((x) => x.guarded).length;
+  for (let pass = 0; pass < guardedAtStart; pass++) {
+    let removed = false;
+    for (const hit of losses()) {
+      for (const step of hit.involved.filter((x) => x.guarded)) {
+        const without = (hex) => hex === step.from ? hex : target(hex);
+        if (contrastHex(without(hit.t), without(hit.bg)) < 4.5) continue;
+        skipped.push(`${step.role} ${step.from}: left as it was, because ${sayLoss(hit)}`);
+        plan.splice(plan.indexOf(step), 1);
+        removed = true;
+        break;
+      }
+      if (removed) break;
+    }
+    if (!removed) break;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const l of losses()) {
+    const brandRoles = l.involved.filter((x) => !x.guarded).map((x) => `the ${x.role}`);
+    const guardedRoles = l.involved.filter((x) => x.guarded).map((x) => `the ${x.role}`);
+    const because = [
+      brandRoles.length ? `${brandRoles.join(" and ")} ${brandRoles.length > 1 ? "are" : "is"} the brand's own colour` : "",
+      guardedRoles.length ? `leaving ${guardedRoles.join(" and ")} as it was would not make it readable` : ""
+    ].filter(Boolean).join(", and ");
+    const line3 = `${sayLoss(l)} Kept, because ${because}: check this section before a client sees it.`;
+    if (!seen.has(`${target(l.t)} ${target(l.bg)}`)) warnings.push(line3);
+    seen.add(`${target(l.t)} ${target(l.bg)}`);
+  }
+  let text2 = JSON.stringify(envelope);
+  const colourTokens = [];
+  plan.forEach((step, i) => {
+    const token2 = `\0COLOUR${i}\0`;
+    let occurrences = 0;
+    const swapped = text2.replace(COLOUR_LITERAL_RE, (lit) => {
+      const { hit, keep } = paintsAs(lit, step.from);
+      if (!hit) return lit;
+      occurrences++;
+      return token2 + keep;
+    });
+    if (occurrences === 0) return;
+    text2 = swapped;
+    colourTokens.push({ token: token2, to: step.to });
+    swaps.push({ role: step.role, from: step.from, to: step.to, occurrences });
+  });
+  for (const { token: token2, to } of colourTokens) text2 = text2.split(token2).join(to);
   const display = brand.pageStudioTheme.headingFont;
   const body = brand.pageStudioTheme.bodyFont;
   const slug3 = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
@@ -12262,28 +12726,32 @@ function rethemeEnvelope(envelope, brand, derived = derivePalette(envelope)) {
       `White text on this brand's accent ${brand.colors.accent.hex} is ${onAccent.toFixed(2)}:1 \u2014 WCAG AA wants 4.5. If the template puts white on its buttons they will fail; ${brand.colors.fg.hex} on that accent is ${contrastHex(brand.colors.fg.hex, brand.colors.accent.hex).toFixed(2)}:1.`
     );
   }
-  return { envelope: JSON.parse(text2), swaps, skipped, warnings };
+  const painted = JSON.parse(text2);
+  return { envelope: painted, swaps, skipped, warnings, report: repaintReport(envelope, painted) };
 }
 function derivePaletteAcross(envelopes) {
-  const pooled2 = /* @__PURE__ */ new Map();
+  const pooled2 = { background: /* @__PURE__ */ new Map(), text: /* @__PURE__ */ new Map(), all: /* @__PURE__ */ new Map() };
   for (const env2 of envelopes) {
-    for (const [hex, n] of hexHistogram(env2)) pooled2.set(hex, (pooled2.get(hex) ?? 0) + n);
+    const u = usageOrHexes(env2);
+    for (const k of ["background", "text", "all"]) for (const [hex, n] of u[k]) pooled2[k].set(hex, (pooled2[k].get(hex) ?? 0) + n);
   }
-  const synthetic = [...pooled2.entries()].flatMap(([hex, n]) => Array.from({ length: n }, () => hex));
-  const base = derivePalette({ pooled: synthetic });
   const fonts = [];
-  for (const env2 of envelopes) for (const f of derivePalette(env2).fonts) if (!fonts.includes(f)) fonts.push(f);
-  return { ...base, fonts };
+  for (const env2 of envelopes) for (const f of pageFaces(env2)) if (!fonts.includes(f)) fonts.push(f);
+  return derivePaletteFromUsage(pooled2, fonts.slice(0, 2));
 }
-var ICON_FONTS, BRAND_CHROMA, escapeRe;
+var ICON_FONTS, BRAND_CHROMA, TONE_CHROMA, escapeRe, COLOUR_LITERAL_RE;
 var init_retheme = __esm({
   "src/command-os/design/retheme.ts"() {
     "use strict";
     init_color();
     init_ghl_page();
+    init_rendered_palette();
+    init_rendered_palette();
     ICON_FONTS = /font\s*awesome|material\s*(icons|symbols)|glyphicons|ionicons|feather|bootstrap-icons|fontello|typicons|dashicons/i;
     BRAND_CHROMA = 0.06;
+    TONE_CHROMA = 0.02;
     escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    COLOUR_LITERAL_RE = /#[0-9a-f]{3,8}(?![0-9a-f])|rgba?\([^()]*\)|hsla?\([^()]*\)/gi;
   }
 });
 
@@ -16782,7 +17250,8 @@ ${await response.text()}`);
             problems.push(`${step.name}: the branded page saved but GoHighLevel is not serving it`);
             continue;
           }
-          const savedText = JSON.stringify(await (await fetch(savedUrl)).json()).toLowerCase();
+          const savedPage = await (await fetch(savedUrl)).json();
+          const savedText = JSON.stringify(savedPage).toLowerCase();
           const stillThere = palette.accent && savedText.includes(palette.accent.toLowerCase());
           if (stillThere) {
             problems.push(`${step.name}: the template's own ${palette.accent} is still in the saved page \u2014 a partial swap, so the original was kept`);
@@ -16793,14 +17262,25 @@ ${await response.text()}`);
             problems.push(`${step.name}: the brand's ${brand.colors.accent.hex} is not in the saved page \u2014 the paint did not land, so the original was kept`);
             continue;
           }
+          const repaint = repaintReport(envelope, savedPage);
+          const pageWarnings = painted.warnings.filter((w) => !palette.undecided.includes(w));
           done.push({
             page: step.name,
             newPageId,
             oldStepId: step.stepId,
-            swaps: painted.swaps.map((sw) => `${sw.role} ${sw.from} \u2192 ${sw.to} (${sw.occurrences}\xD7)`),
+            repaint: {
+              verdict: repaint.verdict,
+              summary: repaint.summary,
+              backgrounds: repaint.backgrounds,
+              neutralBackgrounds: repaint.neutralBackgrounds,
+              text: repaint.text,
+              changes: repaint.changes.filter((c) => c.kind === "background" || c.kind === "text"),
+              fonts: repaint.fonts,
+              contrast: repaint.contrast
+            },
             skipped: painted.skipped,
-            preview: ghlPreviewUrl(newPageId),
-            readBack: `template ${palette.accent ?? "(no accent)"} gone; brand ${brand.colors.accent.hex} present`
+            ...pageWarnings.length ? { warnings: pageWarnings } : {},
+            preview: ghlPreviewUrl(newPageId)
           });
         } catch (e) {
           problems.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
@@ -16827,6 +17307,19 @@ ${await response.text()}`);
         brand: { slug: brand.slug, accent: brand.colors.accent.hex, display: brand.pageStudioTheme.headingFont, body: brand.pageStudioTheme.bodyFont },
         templatePalette: { accent: palette.accent, surface: palette.surface, text: palette.text, secondary: palette.secondary, faces: palette.fonts, undecided: palette.undecided },
         pages: done,
+        ...(() => {
+          const faint = done.filter((d) => d.repaint.verdict !== "repainted").map((d) => String(d.page));
+          const hard = done.filter((d) => d.repaint.contrast.length > 0);
+          const lines = [
+            ...faint.length ? [`On ${faint.join(", ")} the visible palette barely changed. Each page's repaint says what still paints in the template's own colours.`] : [],
+            ...hard.length ? [`On ${hard.map((d) => String(d.page)).join(", ")} some type is now harder to read than WCAG AA allows; each page's repaint.contrast names the colours.`] : []
+          ];
+          const contrast = hard.flatMap((d) => d.repaint.contrast.map((c) => `${String(d.page)}: ${c.text} type on ${c.background} is ${c.after}:1 (was ${c.before}:1).`));
+          return {
+            ...lines.length ? { repaintNote: `${lines.join(" ")} Look at the preview before calling it branded.` } : {},
+            ...contrast.length ? { contrast } : {}
+          };
+        })(),
         originalsRemoved: complete && removeOriginals ? removed : 0,
         ...problems.length > 0 && { problems, kept: "Every original step was LEFT IN PLACE because something failed. Nothing was deleted." },
         ...namedButNotNew && { identification: "GoHighLevel named a funnel that this account ALREADY had before the install. That name was discarded and the account was compared instead, so the funnel above was identified the cautious way and originals are only removed if you asked for it explicitly. Worth reporting: it means the install response no longer means what it did." },
@@ -16895,21 +17388,24 @@ ${await response.text()}`);
       integrations: computeIntegrations({ sections })
     };
     const saved = await autosaveRequest(pre.pageId, { funnelId, pageVersion: savePageVersion, pageData });
-    const savedDataUrl = typeof saved.pageDataUrl === "string" ? saved.pageDataUrl : null;
+    const savedDataUrl = typeof saved.pageDataUrl === "string" && saved.pageDataUrl.length > 0 ? saved.pageDataUrl : null;
     let verified = false;
+    let servedUrl = "";
     for (let attempt = 1; attempt <= 8 && !verified; attempt++) {
       await new Promise((r) => setTimeout(r, 4e3));
       try {
         const now = await funnelRequest("GET", `/page/${pre.pageId}?locationId=${client.locationId}`);
-        const nowUrl = typeof now.pageDataUrl === "string" ? now.pageDataUrl : "";
-        if (savedDataUrl !== null && nowUrl === savedDataUrl) verified = true;
+        servedUrl = typeof now.pageDataDownloadUrl === "string" ? now.pageDataDownloadUrl : "";
+        if (savedDataUrl !== null && servedUrl !== "" && servedUrl !== pre.priorDataUrl) verified = true;
       } catch {
       }
     }
     return {
       saved,
       verified,
-      ...verified ? {} : { verifyNote: "The save was accepted but the page has not yet reported the new content (eventual consistency). Re-check get_page_full in a minute before publishing; if it never advances, the save did not take." }
+      ...verified ? {} : {
+        verifyNote: savedDataUrl === null ? "NOT VERIFIED: GoHighLevel's autosave answered without a pageDataUrl, so this save produced no pointer to confirm against" + (servedUrl === "" ? ", and the page still reports no stored content." : ", though the page does now report stored content.") + " Re-check get_page_full in a minute before publishing; if it never advances, the save did not take." : "The save was accepted but the page has not yet reported the new content (eventual consistency). Re-check get_page_full in a minute before publishing; if it never advances, the save did not take."
+      }
     };
   }
   async function savePageGuarded(input) {
@@ -19516,7 +20012,7 @@ function traceOpportunityContext(node, byId2) {
   }
   return "dangling";
 }
-function isRecord8(v) {
+function isRecord9(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isUuidV4(id) {
@@ -19612,8 +20108,8 @@ function checkSaveBlockers(workflow) {
       });
     }
     {
-      const attrs = isRecord8(a.attributes) ? a.attributes : void 0;
-      const startAfter = attrs && isRecord8(attrs.startAfter) ? attrs.startAfter : void 0;
+      const attrs = isRecord9(a.attributes) ? a.attributes : void 0;
+      const startAfter = attrs && isRecord9(attrs.startAfter) ? attrs.startAfter : void 0;
       if (startAfter && (startAfter.type === "day" || startAfter.type === "minute")) {
         findings.push({
           severity: "warning",
@@ -19625,8 +20121,8 @@ function checkSaveBlockers(workflow) {
       }
     }
     if (type === "internal_notification") {
-      const attrs = isRecord8(a.attributes) ? a.attributes : void 0;
-      const notif = attrs && isRecord8(attrs.notification) ? attrs.notification : void 0;
+      const attrs = isRecord9(a.attributes) ? a.attributes : void 0;
+      const notif = attrs && isRecord9(attrs.notification) ? attrs.notification : void 0;
       const selected = notif?.selectedUser;
       const blank = selected === void 0 || selected === null || typeof selected === "string" && selected.trim() === "";
       if (notif?.userType === "user" && blank) {
@@ -20207,6 +20703,10 @@ function registerValidatorTools(server2, client, builderClient) {
               merge_field_warnings_total: 0,
               workflows_with_shape_warnings: 0,
               shape_warnings_total: 0,
+              workflows_with_save_blocker_warnings: 0,
+              save_blocker_warnings_total: 0,
+              workflows_with_integration_warnings: 0,
+              integration_warnings_total: 0,
               workflows_unscannable: 0,
               workflows_zero_references: 0,
               // Nothing was scanned, so no reference category was loaded or needed.
@@ -20217,6 +20717,8 @@ function registerValidatorTools(server2, client, builderClient) {
             workflows_with_issues: [],
             merge_field_warnings: [],
             shape_warnings: [],
+            save_blocker_warnings: [],
+            integration_warnings: [],
             unscannable: [],
             notes: catalog2.complete ? [] : [incompleteCatalogNote(catalog2.stopReason, 0, catalog2.reportedTotal)]
           });
@@ -20253,6 +20755,12 @@ function registerValidatorTools(server2, client, builderClient) {
         const warningsTotal = withWarnings.reduce((n, w) => n + w.warnings.length, 0);
         const withShapeWarnings = results.filter((r) => r.findings.some((f) => f.severity === "warning" && f.category === "action_shape")).map((r) => ({ workflowId: r.id, workflowName: r.name, status: r.status, warnings: r.findings.filter((f) => f.severity === "warning" && f.category === "action_shape") })).sort((a, b) => (a.status === "published" ? -1 : 1) - (b.status === "published" ? -1 : 1));
         const shapeWarningsTotal = withShapeWarnings.reduce((n, w) => n + w.warnings.length, 0);
+        const SAVE_BLOCKER_CATEGORIES = /* @__PURE__ */ new Set(["legacy_step_id", "legacy_wait_unit", "missing_required_attribute"]);
+        const bucket = (match) => results.filter((r) => r.findings.some(match)).map((r) => ({ workflowId: r.id, workflowName: r.name, status: r.status, warnings: r.findings.filter(match) })).sort((a, b) => (a.status === "published" ? -1 : 1) - (b.status === "published" ? -1 : 1));
+        const withSaveBlockerWarnings = bucket((f) => f.severity === "warning" && SAVE_BLOCKER_CATEGORIES.has(f.category));
+        const saveBlockerWarningsTotal = withSaveBlockerWarnings.reduce((n, w) => n + w.warnings.length, 0);
+        const withIntegrationWarnings = bucket((f) => f.severity === "warning" && f.category === "missing_integration");
+        const integrationWarningsTotal = withIntegrationWarnings.reduce((n, w) => n + w.warnings.length, 0);
         const unverifiedCats = ALL_CATEGORIES.filter((c) => lookups.status[c] !== "loaded");
         const unverifiedRefs = results.reduce((n, r) => n + r.findings.filter((f) => f.severity === "unverified").length, 0);
         return jsonResponse({
@@ -20272,14 +20780,24 @@ function registerValidatorTools(server2, client, builderClient) {
             merge_field_warnings_total: warningsTotal,
             workflows_with_shape_warnings: withShapeWarnings.length,
             shape_warnings_total: shapeWarningsTotal,
+            workflows_with_save_blocker_warnings: withSaveBlockerWarnings.length,
+            save_blocker_warnings_total: saveBlockerWarningsTotal,
+            workflows_with_integration_warnings: withIntegrationWarnings.length,
+            integration_warnings_total: integrationWarningsTotal,
             workflows_unscannable: unscannable.length,
             workflows_zero_references: zeroRefCount,
             unverified: { categories_unloaded: unverifiedCats, references_unverified: unverifiedRefs },
+            // Unchanged on purpose: `status` has meant "are there ERRORS" since it
+            // was written, and these four categories are warnings by ruling — the
+            // workflows genuinely still run. What was broken is that they were
+            // invisible, not that they were ranked too low.
             status: errorsTotal > 0 ? "issues_found" : "ok"
           },
           workflows_with_issues: withErrors,
           merge_field_warnings: withWarnings,
           shape_warnings: withShapeWarnings,
+          save_blocker_warnings: withSaveBlockerWarnings,
+          integration_warnings: withIntegrationWarnings,
           unscannable,
           notes: [
             // NEVER advise re-running for "the next batch": GHL's list endpoint ignores
@@ -20290,6 +20808,8 @@ function registerValidatorTools(server2, client, builderClient) {
             ...unverifiedCats.length ? [`Could not fully load: ${unverifiedCats.join(", ")} \u2014 references to those are 'unverified', not 'broken'. Re-run.`] : [],
             ...warningsTotal ? [`${warningsTotal} {{contact.X}} merge tag(s) reference a field that no longer exists \u2014 these render BLANK in the message but do NOT stop the workflow (warning, not a break). See merge_field_warnings.`] : [],
             ...shapeWarningsTotal ? [`${shapeWarningsTotal} Create/Update Opportunity step(s) have only pipeline + stage \u2014 they cannot create a card for a new contact (see shape_warnings).`] : [],
+            ...saveBlockerWarningsTotal ? [`${saveBlockerWarningsTotal} step(s) across ${withSaveBlockerWarnings.length} workflow(s) either stop the workflow being SAVED (a legacy step id, or the singular wait unit GoHighLevel no longer accepts \u2014 it still runs, it just cannot be edited) or save and run while doing nothing (a notification step with nobody selected). See save_blocker_warnings.`] : [],
+            ...integrationWarningsTotal ? [`${integrationWarningsTotal} step(s) across ${withIntegrationWarnings.length} workflow(s) need a social account this location has not connected \u2014 they save, publish and run, and do nothing when reached. See integration_warnings.`] : [],
             "workflow_goal, goto, and unrecognized condition types are not deeply checked in this version."
           ]
         });
@@ -22362,7 +22882,7 @@ function executablePlanLines(saved) {
     funnel: "funnel"
   };
   const words = (s) => s.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[_.-]+/g, " ").trim();
-  const kindOf = (s) => kinds[s] || words(s).replace(/s$/, "") || "plan object";
+  const kindOf2 = (s) => kinds[s] || words(s).replace(/s$/, "") || "plan object";
   const names = /* @__PURE__ */ new Map();
   const objects = /* @__PURE__ */ new Map();
   const label = (x, kind) => x.name?.trim() || x.title?.trim() || [x.firstName, x.lastName].filter(Boolean).join(" ") || `Unnamed ${kind}`;
@@ -22384,7 +22904,7 @@ function executablePlanLines(saved) {
   const refs = [...names.keys()].sort((a, b) => b.length - a.length);
   const refPattern = refs.length ? new RegExp(`(?<![\\w./:@])(?:${refs.map(escapeRE).join("|")})(?![\\w]|\\.[\\w])`, "g") : void 0;
   const missingRefPattern = /(?<![\w./:@])(user|pipeline|stage|field|tag|workflow|form|calendar|email_template|sms_template|email|sms|cv|handoff|funnel)\.[a-z0-9_]+(?![\w]|\.[\w])/g;
-  const resolve12 = (s) => s.replace(missingRefPattern, (ref) => names.get(ref) || `Unnamed ${kindOf(ref.split(".")[0])}`);
+  const resolve12 = (s) => s.replace(missingRefPattern, (ref) => names.get(ref) || `Unnamed ${kindOf2(ref.split(".")[0])}`);
   const renderRefs = (s) => resolve12(refPattern ? s.replace(refPattern, (ref) => names.get(ref)) : s);
   const mergeLabel = (field) => {
     const [group, ...parts] = field.trim().split(".");
@@ -22403,7 +22923,7 @@ function executablePlanLines(saved) {
     const code = entity[2].toLowerCase() === "x" ? parseInt(entity.slice(3), 16) : parseInt(entity.slice(2), 10);
     return code <= 1114111 ? String.fromCodePoint(code) : entity;
   }).replace(/{{\s*([^{}]+?)\s*}}/g, (_all, field) => `[${mergeLabel(field)}]`)).replace(/\bMCP\b/g, "GHL Command").replace(/Agency OS/g, "Command OS").replace(/\s*—\s*/g, " ").replace(/\s+/g, " ").replace(/\s+([.,;!?])/g, "$1").trim();
-  const show = (v, key = "") => typeof v === "string" ? names.get(v) || (/Refs?$/.test(key) ? `Unnamed ${kindOf(key.replace(/Refs?$/, "").replace(/^teamMember$/, "user").replace(/^template$/, "message template"))}` : plain(key === "mergeTags" ? `{{${v}}}` : key === "type" ? words(v) : v)) : Array.isArray(v) ? v.map((value) => show(value, key)).join(", ") : v && typeof v === "object" ? Object.entries(v).filter(([k]) => k !== "ref").map(([k, value]) => `${words(k.replace(/Refs?$/, ""))}: ${show(value, k)}`).join("; ") : String(v ?? "");
+  const show = (v, key = "") => typeof v === "string" ? names.get(v) || (/Refs?$/.test(key) ? `Unnamed ${kindOf2(key.replace(/Refs?$/, "").replace(/^teamMember$/, "user").replace(/^template$/, "message template"))}` : plain(key === "mergeTags" ? `{{${v}}}` : key === "type" ? words(v) : v)) : Array.isArray(v) ? v.map((value) => show(value, key)).join(", ") : v && typeof v === "object" ? Object.entries(v).filter(([k]) => k !== "ref").map(([k, value]) => `${words(k.replace(/Refs?$/, ""))}: ${show(value, k)}`).join("; ") : String(v ?? "");
   const sentence = (s) => {
     const text2 = plain(s);
     return text2 && !/[.!?…]$/.test(text2) ? `${text2}.` : text2;
@@ -22411,7 +22931,7 @@ function executablePlanLines(saved) {
   const messageCopy = (t) => [t.subject ? `Subject: ${sentence(t.subject)}` : "", t.body || t.html ? `Message: ${sentence(t.body || t.html)}` : t.bodyOutline ? `Message outline: ${sentence(t.bodyOutline)}` : ""].filter(Boolean).join(" ");
   for (const section2 of ["users", "pipelines", "customFields", "fields", "tags", "customValues", "calendars", "forms", "funnels"]) for (const x of p?.[section2] ?? []) {
     const existing = preview?.items?.find((i) => i.ref === x.ref)?.status === "existing";
-    lines.push(`${existing ? "Reuse" : "Create"} ${kindOf(section2)}: ${label(x, kindOf(section2))}. ${show(Object.fromEntries(Object.entries(x).filter(([k]) => !["ref", "name"].includes(k))))}`);
+    lines.push(`${existing ? "Reuse" : "Create"} ${kindOf2(section2)}: ${label(x, kindOf2(section2))}. ${show(Object.fromEntries(Object.entries(x).filter(([k]) => !["ref", "name"].includes(k))))}`);
   }
   for (const w of p?.workflows ?? []) {
     lines.push(`Workflow: ${label(w, "workflow")}. ${show(w.trigger || w.triggers || "")}`);
@@ -26851,6 +27371,7 @@ ${saved.summary}
 5. ${STAFF_NOTIFICATION_RULE} A notification step whose recipient is empty is listed in issues as waiting for a staff member, never left unmentioned.
 6. ${MISSING_STEP_RULE}
 If the tool reports that no saved plan exists, STOP and finish with RESULT: {"ok":false,"error":"no saved plan on this machine \u2014 run the build stage fresh"}.
+If apply_build_plan answers phase:"scope" (nothing is selected for this client, or the selection changed after the plan was saved), STOP: build nothing else and finish with RESULT: {"ok":false,"error":"<its error, word for word>"}.
 ${NO_INVENTED_CAUSE_RULE}
 Finish with EXACTLY one final line:
 RESULT: {"ok":true,"summary":"<what was created vs already in place: counts of pipelines/fields/tags/workflows>","issues":["<anything skipped or needing a human>"]}`;
@@ -27189,6 +27710,7 @@ Use these authoritative normalized intake answers when provided: ${JSON.stringif
 8. ${STAFF_NOTIFICATION_RULE} In a hand-authored fallback plan, a notification's "to" is that user id, or "" when the account has no users.
 9. ${MISSING_STEP_RULE}
 10. ${NO_INVENTED_CAUSE_RULE}
+If apply_build_plan answers phase:"scope" (nothing is confirmed or selected for this client, or the selection changed), STOP: build nothing else and finish with RESULT: {"ok":false,"error":"<its error, word for word>"}.
 Finish with EXACTLY one final line:
 RESULT: {"ok":true,"summary":"<what was created: counts of pipelines/fields/tags/workflows, and whether the plan came from the preset or the fallback>","issues":["<anything skipped or needing a human, including every notification step waiting for a staff member>"]}` + loadPlanGuide(ctx?.industry)
       },
@@ -30060,14 +30582,7 @@ function assessmentFeatureLines(snapshot, purchased = [], availableOnly = true)
   });
 }
 function assessmentPurchasesFor(state, id) {
-  const saved = state.assessmentPurchases?.[id], scope = state.scope?.[id];
-  if (!scope) return saved;
-  return [...new Set([
-    ...saved ?? [],
-    ...scope.features.map((f) => BUILD_ASSESSMENT_FEATURE[f]),
-    "pipeline"
-    // Every scoped build includes the pipeline foundation.
-  ].filter(Boolean))];
+  return state.assessmentPurchases?.[id];
 }
 function upsellFigure(snapshot, feature) {
   const id = BUILD_ASSESSMENT_FEATURE[feature];
@@ -30707,6 +31222,16 @@ function savePlanRecord(rec, base) {
   fs22.writeFileSync(file2, JSON.stringify({ ...rec, contentHash: contentHash(rec.plan), inputHash: rec.inputHash ?? process.env.GHL_COMMAND_INTAKE_HASH, dependencies: rec.dependencies ?? planDependencies(rec.plan) }, null, 2), { mode: 384 });
   return file2;
 }
+function savedPlanMatchesScope(saved, current) {
+  if (!saved) return false;
+  if (!current || current.wholePreset) return !saved.scope;
+  if (!saved.scope) return false;
+  const omitted = (saved.scope.omitted ?? []).map((f) => f.id);
+  const offered = /* @__PURE__ */ new Set([...saved.scope.built, ...saved.scope.notBuilt.map((f) => f.id), ...omitted]);
+  const selected = new Set(current.features.filter((f) => offered.has(f)));
+  const planned = /* @__PURE__ */ new Set([...saved.scope.built, ...omitted]);
+  return selected.size === planned.size && [...planned].every((f) => selected.has(f));
+}
 function readSavedPlan(locationId2, base) {
   try {
     return JSON.parse(fs22.readFileSync(path20.join(plansDir(base), `${locationId2}.json`), "utf8"));
@@ -31230,7 +31755,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.84.0",
+      version: "3.84.2",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -32240,16 +32765,8 @@ async function assessmentAttachmentAction(args, deps) {
       const chosen = args.purchasedFeatureIds;
       if (!Array.isArray(chosen) || chosen.some((id2) => !ASSESSMENT_FEATURES.some((f) => f.id === id2))) throw new Error("Choose features from the list.");
       const state2 = deps.read();
-      const scope = state2.scope?.[id];
-      const features = FEATURE_IDS.filter((f) => chosen.includes(BUILD_ASSESSMENT_FEATURE[f]));
-      const next = {
-        ...state2,
-        scope: { ...state2.scope, [id]: { ...scope ?? {}, features, setAt: (/* @__PURE__ */ new Date()).toISOString() } },
-        assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] }
-      };
-      next.assessmentPurchases[id] = assessmentPurchasesFor(next, id);
-      deps.write(next);
-      detail.message = "What they bought is saved for this client document.";
+      deps.write({ ...state2, assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] } });
+      detail.message = state2.scope?.[id] ? "What they bought is saved for this client document. The build still follows the selection confirmed on the Review screen." : "What they bought is saved. Nothing is built until you confirm what to build on the Review screen, which is ticked from this.";
       break;
     }
     default:
@@ -32271,7 +32788,6 @@ var init_attachment_actions = __esm({
   "src/command-os/assessment/attachment-actions.ts"() {
     "use strict";
     init_attachment();
-    init_features();
   }
 });
 
@@ -34745,14 +35261,15 @@ function reviewDocumentHtml(review, opts) {
   const date = (/* @__PURE__ */ new Date()).toLocaleDateString(void 0, { year: "numeric", month: "long", day: "numeric" });
   const gap = (g) => `<div class="gap ${g.priority}"><div class="gt">${esc8(g.title)}<span class="pri">${g.priority === "now" ? "Fix first" : g.priority === "soon" ? "Next" : "Later"}</span></div>${g.cost ? `<div class="gc">${esc8(g.cost)}</div>` : ""}${g.fix ? `<div class="gf">What we do: ${esc8(g.fix)}</div>` : ""}</div>`;
   const o = review.offer;
-  const purchased = opts.scope || opts.purchasedFeatureIds ? [.../* @__PURE__ */ new Set([
+  const confirmed = opts.scope && !opts.scope.wholePreset && !opts.scope.awaitingConfirmation ? opts.scope : void 0;
+  const purchased = confirmed || opts.purchasedFeatureIds ? [.../* @__PURE__ */ new Set([
     ...opts.purchasedFeatureIds ?? [],
-    ...opts.scope ? [...opts.scope.built.map((f) => BUILD_ASSESSMENT_FEATURE[f.id]), "pipeline"] : []
+    ...confirmed ? [...confirmed.built.map((f) => BUILD_ASSESSMENT_FEATURE[f.id]), "pipeline"] : []
   ])] : void 0;
-  const unbought = opts.scope?.notBuilt.filter((f) => !purchased?.includes(BUILD_ASSESSMENT_FEATURE[f.id])) ?? [];
-  const represented = [...opts.scope?.built ?? [], ...unbought].map((f) => BUILD_ASSESSMENT_FEATURE[f.id]);
+  const unbuilt = opts.scope?.notBuilt ?? [];
+  const represented = [...opts.scope?.built ?? [], ...unbuilt].map((f) => BUILD_ASSESSMENT_FEATURE[f.id]).concat(opts.scope && !opts.scope.awaitingConfirmation ? ["pipeline"] : []);
   const assessmentNext = opts.assessment && purchased ? assessmentFeatureLines(opts.assessment, [...purchased, ...represented]) : [];
-  const available = unbought.map((f) => `<div class="build"><b>${esc8(f.name)}</b><span>${esc8(f.what)}${f.figure ? ` <b>${esc8(f.figure)}</b>` : ""}</span></div>`).join("") + assessmentNext.map((line3) => `<p>${esc8(line3)}</p>`).join("");
+  const available = unbuilt.map((f) => `<div class="build"><b>${esc8(f.name)}</b><span>${esc8(f.what)}${f.figure ? ` <b>${esc8(f.figure)}</b>` : ""}</span></div>`).join("") + assessmentNext.map((line3) => `<p>${esc8(line3)}</p>`).join("");
   return `<!doctype html><html><head><meta charset="utf-8"><title>${esc8(opts.clientName)} \u2014 Growth Blueprint</title><style>
   @page{margin:0.6in}
   *{box-sizing:border-box}
@@ -34809,7 +35326,9 @@ function reviewDocumentHtml(review, opts) {
     ${o.recommendedOffer ? `<div class="lead"><b>Run this instead:</b> ${esc8(o.recommendedOffer)}</div>` : ""}` : ""}
   ${review.gaps?.length ? `<div class="head">What's leaking today (${review.gaps.length})</div>${review.gaps.map(gap).join("")}` : ""}
   ${review.build?.length ? `<div class="head">What we're building</div>${review.build.map((b) => `<div class="build"><b>${esc8(b.item)}</b><span>${esc8(b.because)}</span></div>`).join("")}` : ""}
-  ${opts.scope ? `<div class="head">What this build includes</div>
+  ${opts.scope?.awaitingConfirmation ? `<div class="head">What this build includes</div>
+    <p>Not confirmed yet. What you bought is recorded, and the build waits until the features to build are confirmed.</p>
+` : opts.scope ? `<div class="head">What this build includes</div>
     <p>${opts.scope.package ? `Built to your <b>${esc8(opts.scope.package)}</b> package: ` : ""}${opts.scope.built.length ? esc8(opts.scope.built.map((b) => b.name).join(", ")) : "the foundation only"}. Always included: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing.</p>
 ` : ""}
   ${review.unknowns?.length ? `<div class="head">What we still need from you</div><div class="ask"><ul>${review.unknowns.map((u) => `<li>${esc8(u)}</li>`).join("")}</ul></div>` : ""}
@@ -34923,8 +35442,8 @@ var init_capability_runs = __esm({
       staff: ["get_users", "get_user", "get_calendars"],
       phone: ["list_phone_numbers", "list_number_pools", "get_location"],
       workflows: ["get_workflows", "get_workflow_full", "get_trigger_registry", "get_users", "get_calendars", "get_pipelines", "get_pipeline_full", "get_custom_fields", "get_custom_values", "get_location_tags", "list_email_templates", "list_message_templates", "validate_workflow", "create_workflow", "update_workflow_actions", "audit_workflows"],
-      reactivation: ["get_contact_count", "search_contacts", "get_location_tags", "create_location_tag", "get_workflows", "get_workflow_full", "validate_workflow", "create_workflow", "update_workflow_actions", "create_smart_list", "list_smart_lists"],
-      // no bulk tagging: that is a mass write the operator does by hand
+      reactivation: ["get_contact_count", "search_contacts", "get_location_tags", "create_location_tag", "get_workflows", "get_workflow_full", "validate_workflow", "create_workflow", "update_workflow_actions", "create_smart_list", "list_smart_lists", "create_contact_smart_list", "get_contact_smart_list"],
+      // contact segments live on the contacts service (3.84.2); no bulk tagging: that is a mass write the operator does by hand
       templates: ["list_email_templates", "create_email_template", "update_email_template", "list_message_templates", "create_sms_template", "get_custom_values"],
       broadcasts: ["list_email_templates", "create_email_template", "update_email_template", "list_smart_lists", "get_email_campaigns"],
       // drafts the email as a template; sending or scheduling is the operator's click
@@ -35985,6 +36504,7 @@ __export(dashboard_exports, {
   resolvePlan: () => resolvePlan2,
   runDashboard: () => runDashboard,
   safeDocName: () => safeDocName,
+  scopePrefillFor: () => scopePrefillFor,
   setAccountIndustry: () => setAccountIndustry,
   setAccountType: () => setAccountType,
   setBuildApproval: () => setBuildApproval,
@@ -36046,6 +36566,8 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   const all = { ...state.scope ?? {} };
   if (!scope) {
     delete all[locationId2];
+  } else if ("wholePreset" in scope) {
+    all[locationId2] = { wholePreset: true, features: [...FEATURE_IDS], setAt: now().toISOString() };
   } else {
     const features = [...new Set(scope.features.filter(isFeatureId))];
     const pkg2 = typeof scope.package === "string" ? scope.package.trim().slice(0, 80) : "";
@@ -36053,19 +36575,18 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   }
   const next = { ...state, scope: all };
   if (!Object.keys(all).length) delete next.scope;
-  const purchases = { ...state.assessmentPurchases };
-  if (scope) purchases[locationId2] = assessmentPurchasesFor(next, locationId2);
-  return { ...next, assessmentPurchases: purchases };
+  return next;
 }
 function documentScopeFor(state, locationId2) {
   const sc = state.scope?.[locationId2];
-  if (!sc) return void 0;
+  if (!sc && Array.isArray(state.assessmentPurchases?.[locationId2])) return { awaitingConfirmation: true, built: [], notBuilt: [] };
   let offered = FEATURE_IDS;
   try {
     const chosen = loadPresetChoice(void 0, presetForIndustry(state.accounts?.[locationId2]?.industry));
     if (chosen.ok) offered = featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
   } catch {
   }
+  if (!sc || sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
   return {
     ...sc.package ? { package: sc.package } : {},
     // Built = the confirmed scope, the one record the build follows. The purchase
@@ -36078,6 +36599,11 @@ function documentScopeFor(state, locationId2) {
     })
   };
 }
+function scopePrefillFor(state, locationId2) {
+  const bought = state.assessmentPurchases?.[locationId2];
+  if (state.scope?.[locationId2] || !Array.isArray(bought)) return void 0;
+  return FEATURE_IDS.filter((f) => bought.includes(BUILD_ASSESSMENT_FEATURE[f]));
+}
 function assessmentFiguresFor(state, locationId2) {
   const snap = state.assessmentAttachments?.[locationId2];
   if (!snap) return {};
@@ -36164,9 +36690,11 @@ function startRun(locationId2, stage, onDone, meta = {}) {
     }).map((q2) => ({ key: q2.key, label: q2.label, from: INTAKE_QUESTIONS.find((b) => b.key === q2.key)?.label })),
     removedKeys: INTAKE_QUESTIONS.filter((b) => !composed.some((q2) => q2.key === b.key)).map((b) => b.key),
     // A build re-run reuses the approved plan already saved for this account (finding 10).
+    // ...and only while it still builds the scope the member has confirmed now: a
+    // changed selection composes the plan fresh from the preset (delta round 3, T-M4).
     savedPlan: (() => {
       const sp = stage === 3 ? readSavedPlan(locationId2) : null;
-      return sp && sp.inputHash === meta.inputHash ? { planId: sp.planId, savedAt: sp.savedAt, summary: planSummary(sp) } : void 0;
+      return sp && sp.inputHash === meta.inputHash && savedPlanMatchesScope(sp, state.scope?.[locationId2]) ? { planId: sp.planId, savedAt: sp.savedAt, summary: planSummary(sp) } : void 0;
     })()
   };
   if (context.savedPlan) run.lines.push(`Using the build plan saved on ${context.savedPlan.savedAt}.`);
@@ -37090,7 +37618,7 @@ function scopeBlock(id,state){
  const sel=document.createElement("select");sel.style.cssText="padding:.35rem .5rem;border:1px solid var(--line);border-radius:6px;font-size:var(--fs-sm);background:var(--surface);max-width:100%";
  const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"Everything the preset has (no package)":"Everything the preset has (no packages saved yet: add them on Your agency)";sel.appendChild(o0);
  for(const p of pk){const o=document.createElement("option");o.value=p.id;o.textContent=p.name+(p.price?" \xB7 "+p.price:"");sel.appendChild(o)}
- let ticked=new Set(saved?saved.features:Object.keys(FEATS));if(saved&&saved.package)sel.value=saved.package;
+ const prefill=(state.scopePrefill||{})[id];let ticked=new Set(saved&&!saved.wholePreset?saved.features:(prefill||Object.keys(FEATS)));if(saved&&saved.package)sel.value=saved.package;
  const boxes=document.createElement("div");boxes.style.cssText="margin:.5rem 0";
  function drawBoxes(){boxes.innerHTML="";for(const k of Object.keys(FEATS)){const l=document.createElement("label");l.style.cssText="display:flex;gap:.5rem;align-items:flex-start;margin:.3rem 0;font-size:var(--fs-sm);cursor:pointer";
   const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(k);c.style.marginTop=".25rem";c.onchange=()=>{if(c.checked)ticked.add(k);else ticked.delete(k)};l.appendChild(c);
@@ -37102,7 +37630,7 @@ function scopeBlock(id,state){
  const note=document.createElement("p");note.className="muted";note.textContent="Always built, whatever is ticked: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing. Unticked features go in the client document as available next.";
  const sv=document.createElement("button");sv.className="runbtn";sv.textContent="Save what they bought";
  sv.onclick=async()=>{const all=Object.keys(FEATS).every(k=>ticked.has(k));const body={locationId:id,features:(all&&!sel.value)?null:[...ticked]};if(sel.value)body.package=sel.value;if(await postJSON("/api/scope",body)){delete assessmentCards[id];load()}};
- const status=document.createElement("p");status.className="muted";status.textContent=saved?("Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):"Nothing saved: the whole preset is built.";
+ const status=document.createElement("p");status.className="muted";status.textContent=saved?(saved.wholePreset?"Saved: the whole preset. The build follows this.":"Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):prefill?"Not confirmed yet: ticked from what they bought. Nothing is built until you save.":"Nothing saved: the whole preset is built.";
  sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(status);
  return sc}
 async function rLoad(id){const r=await(await fetch("/api/review?locationId="+id)).json();rData[id]=r;render(lastState,lastRun)}
@@ -38351,6 +38879,11 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }
         const assessmentFigures = {};
         for (const loc of Object.keys(st.assessmentAttachments ?? {})) assessmentFigures[loc] = assessmentFiguresFor(st, loc);
+        const scopePrefill = {};
+        for (const loc of Object.keys(st.assessmentPurchases ?? {})) {
+          const p = scopePrefillFor(st, loc);
+          if (p) scopePrefill[loc] = p;
+        }
         const buildViews = Object.fromEntries(currentRoster().map((c) => {
           const saved = readSavedPlan(c.locationId);
           const approval = st.planApprovals?.[c.locationId];
@@ -38368,7 +38901,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }));
         for (const [id, view] of Object.entries(buildViews)) if (!view.planHash || !view.approvedAt || view.stale.length || st.outcomes?.[`${id}:4`]?.ok !== true || st.manualTasks?.[id]?.length || st.outcomes?.[`${id}:4`]?.issues?.length) liveClaims[id] = { live: false };
         const outcomes = Object.fromEntries(Object.entries(st.outcomes ?? {}).map(([key, value]) => [key, { ...value, ...key.endsWith(":4") && value.verification ? { plain: verifyPanelOutcome(value) } : { ...plainFallbackOutcome(value), plain: plainFallbackOutcome(value.plain ?? value) }, error: value.error ? "The step did not finish. Check the account before retrying." : void 0 }]));
-        res.end(JSON.stringify({ ...st, assessmentFigures, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
+        res.end(JSON.stringify({ ...st, assessmentFigures, scopePrefill, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
           const records = st.outcomes?.[`${id}:4`]?.verification;
           const allowed = records ? verifyReadback(records).allowPublishing : false;
           return [id, tasks2.map((t) => ({ ...t, text: verifyPublishingText(plainFallback(t.text, { nextStep: true }), allowed) })).filter((t) => t.text)];
@@ -39325,8 +39858,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         try {
           const { locationId: locationId2, package: pkg2, features } = JSON.parse(body);
           if (!locationId2 || !currentRoster().some((r) => r.locationId === locationId2)) throw new Error("unknown client");
-          if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to build everything");
-          const next = features === null ? null : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
+          if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to confirm the whole preset");
+          const next = features === null ? { wholePreset: true } : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
           writeCockpitState(setClientScope(readCockpitState(), locationId2, next));
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[locationId2] ?? null }));
@@ -39641,12 +40174,12 @@ function routeFirebaseForCompany(builderClient, registry2, companyId) {
       companyId
     });
     return `
-Firebase: using ${cfg.name || `company ${companyId}`} credentials \u2014 workflow builder enabled here.`;
+Firebase: found stored ${cfg.name || `company ${companyId}`} credentials and pointed the workflow builder at them \u2014 not tested this session. To confirm they still work, run register_company_firebase for this company with test_location_id, which makes a real workflow-builder call.`;
   }
   builderClient.resetToHomeFirebase();
   const homeCompanyId = builderClient.getCurrentCompanyId();
   if (homeCompanyId === companyId) {
-    return "\nFirebase: home company \u2014 workflow builder enabled.";
+    return "\nFirebase: this location's company is your home company, so the home credentials apply \u2014 not tested this session. To confirm the workflow builder really works here, run register_company_firebase for this company with test_location_id, which makes a real workflow-builder call.";
   }
   const registeredCompanies = registry2?.listCompanyFirebases?.() ?? [];
   if (registeredCompanies.length > 0) {
@@ -39877,7 +40410,17 @@ Agency-wide tools now available: list_snapshots, create_snapshot_share_link, and
           isError: true
         };
       }
-      registry2.removeLocation(locationId2);
+      const removed = registry2.removeLocation(locationId2);
+      const saveError = registry2.getLastSaveError();
+      if (!removed || saveError) {
+        return {
+          content: [{
+            type: "text",
+            text: `${token2.name} (${locationId2}) could NOT be removed: this computer's key file could not be written${saveError ? ` (${saveError})` : ""}, so that sub-account's API key is still in it and will be back at the next start. Check storage permissions on the GHL Command app-data folder and run unregister_location again.`
+          }],
+          isError: true
+        };
+      }
       return {
         content: [{ type: "text", text: `Removed: ${token2.name} (${locationId2}) from token registry.` }]
       };
@@ -40167,11 +40710,13 @@ ${lines.join("\n")}
       try {
         const agencyClient = new GHLClient({ apiKey: agencyKey });
         await agencyClient.delete(`/locations/${location_id}`, { params: { deleteTwilioAccount: delete_twilio ?? false } });
+        const hadKey = Boolean(registry2?.getToken(location_id));
         const wasRegistered = registry2?.removeLocation(location_id) ?? false;
+        const keyLine = wasRegistered ? " Removed from the token registry." : hadKey ? ` Its API key could NOT be removed from this computer's key file${registry2?.getLastSaveError() ? ` (${registry2.getLastSaveError()})` : ""}; the key is dead with the sub-account, but run unregister_location once the app-data folder is writable so it does not linger.` : "";
         return {
           content: [{
             type: "text",
-            text: `Sub-account ${location_id} permanently deleted.${wasRegistered ? " Removed from the token registry." : ""}`
+            text: `Sub-account ${location_id} permanently deleted.${keyLine}`
           }]
         };
       } catch (error) {
@@ -41435,6 +41980,28 @@ function buildContactSmartListBody(args) {
     locationId: args.locationId
   };
 }
+function findSmartListRecord(payload) {
+  const looksLikeRecord = (v) => {
+    if (!v || typeof v !== "object" || Array.isArray(v)) return false;
+    const o = v;
+    return "objectKey" in o || "filters" in o || "id" in o || "_id" in o || "name" in o;
+  };
+  if (looksLikeRecord(payload)) return payload;
+  if (payload && typeof payload === "object") {
+    for (const key of ["list", "smartList", "smartlist", "data", "record"]) {
+      const nested = payload[key];
+      if (looksLikeRecord(nested)) return nested;
+    }
+  }
+  return void 0;
+}
+function contactServiceNote(payload) {
+  const rec = findSmartListRecord(payload);
+  if (!rec) return void 0;
+  const reason2 = rec.objectKey === "contacts" ? 'this record carries objectKey "contacts"' : rec.objectKey === "opportunity" ? void 0 : !("filters" in rec) ? "this record came back with no `filters` key at all" : void 0;
+  if (!reason2) return void 0;
+  return `This id was read from GoHighLevel's OPPORTUNITY smart-list service (/lists/dynamic) and ${reason2}. Contact smart lists do not live here and the Contacts screen never shows a record created here \u2014 create one with create_contact_smart_list, read it with get_contact_smart_list, and delete it with delete_contact_smart_list.`;
+}
 function registerSmartListTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
@@ -41563,7 +42130,8 @@ ${await res.text()}`);
       try {
         const loc = locationId2 ?? client.locationId;
         const result = await smartListRequest("GET", `/${loc}/${listId}`);
-        return jsonResponse(result);
+        const note = contactServiceNote(result);
+        return note ? jsonResponse({ smart_list: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -41571,10 +42139,10 @@ ${await res.text()}`);
   );
   server2.tool(
     "create_smart_list",
-    "Create a new smart list (dynamic filter list). Required: name + objectKey. Filters define the saved-search criteria \u2014 pass an empty array to create an empty list and add filters later via update_smart_list. The shape of filters/columns is opaque here; query an existing smart list with get_smart_list to see the format GHL expects.",
+    'Create a new OPPORTUNITY smart list (dynamic filter list). objectKey "contacts" is refused here \u2014 this service cannot hold a contact segment; use create_contact_smart_list for that. Required: name + objectKey. Filters define the saved-search criteria \u2014 pass an empty array to create an empty list and add filters later via update_smart_list. The shape of filters/columns is opaque here; query an existing smart list with get_smart_list to see the format GHL expects.',
     {
       name: import_zod59.z.string().describe("Display name for the smart list."),
-      objectKey: import_zod59.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
+      objectKey: import_zod59.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'opportunity' \u2014 'contacts' is refused here and is created with create_contact_smart_list instead."),
       filters: import_zod59.z.array(import_zod59.z.record(import_zod59.z.string(), import_zod59.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
       columns: import_zod59.z.array(import_zod59.z.record(import_zod59.z.string(), import_zod59.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
       pipelineIds: import_zod59.z.array(import_zod59.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
@@ -41583,6 +42151,11 @@ ${await res.text()}`);
     },
     async ({ name, objectKey, filters, columns, pipelineIds, defaultInPipelines, locationId: locationId2 }) => {
       try {
+        if (objectKey === "contacts") {
+          throw new Error(
+            "create_smart_list writes to GoHighLevel's opportunity smart-list service, which cannot hold a contact segment \u2014 create a contact smart list with create_contact_smart_list instead."
+          );
+        }
         const loc = locationId2 ?? client.locationId;
         const body = { name, objectKey };
         if (filters !== void 0) body.filters = filters;
@@ -41620,8 +42193,13 @@ ${await res.text()}`);
         if (Object.keys(body).length === 0) {
           throw new Error("Pass at least one of: name, filters, columns, pipelineIds, defaultInPipelines. Nothing to update.");
         }
+        let note;
+        try {
+          note = contactServiceNote(await smartListRequest("GET", `/${loc}/${listId}`));
+        } catch {
+        }
         const result = await smartListRequest("PUT", `/${loc}/${listId}`, body);
-        return jsonResponse(result);
+        return note ? jsonResponse({ updated: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -41638,8 +42216,13 @@ ${await res.text()}`);
     async ({ listId, locationId: locationId2 }) => {
       try {
         const loc = locationId2 ?? client.locationId;
+        let note;
+        try {
+          note = contactServiceNote(await smartListRequest("GET", `/${loc}/${listId}`));
+        } catch {
+        }
         const result = await smartListRequest("DELETE", `/${loc}/${listId}`);
-        return jsonResponse(result);
+        return note ? jsonResponse({ deleted: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -48495,6 +49078,140 @@ var init_delivery_audit = __esm({
   }
 });
 
+// src/command-os/build/verify-findings.ts
+var verify_findings_exports = {};
+__export(verify_findings_exports, {
+  CHECKABLE_KINDS: () => CHECKABLE_KINDS,
+  CHECKABLE_KIND_NAMES: () => CHECKABLE_KIND_NAMES,
+  isCheckableKind: () => isCheckableKind,
+  neverLookedAt: () => neverLookedAt,
+  normaliseKind: () => normaliseKind,
+  refuseUnseenFindings: () => refuseUnseenFindings
+});
+async function readPaged(read2, spec, locationId2, wanted) {
+  const base = spec.params?.(locationId2) ?? {};
+  const seen = /* @__PURE__ */ new Set();
+  let skip = 0;
+  for (let reads = 0; reads < MAX_READS; reads++) {
+    const raw = await read2(spec.path(locationId2), { ...base, limit: String(PAGE), skip: String(skip) });
+    const ids = spec.ids(raw);
+    const total = totalOf(raw);
+    let added = 0;
+    for (const id of ids) if (!seen.has(id)) {
+      seen.add(id);
+      added++;
+    }
+    if ([...wanted].every((id) => seen.has(id))) return { seen };
+    if (total !== void 0 && seen.size >= total) return { seen };
+    if (ids.length === 0) {
+      return total !== void 0 && seen.size < total ? { seen, incomplete: `the account says it has ${total} but returned ${seen.size}` } : { seen };
+    }
+    if (added === 0) return { seen, incomplete: "the account returned the same entries again when asked for the next page" };
+    skip += ids.length;
+  }
+  return { seen, incomplete: `it was still returning new entries after ${MAX_READS} pages` };
+}
+function isCheckableKind(kind) {
+  return Object.hasOwn(CHECKABLE_KINDS, normaliseKind(kind));
+}
+function normaliseKind(kind) {
+  const snake = kind.trim().replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[\s-]+/g, "_").toLowerCase();
+  const singular = snake.endsWith("s") && !snake.endsWith("ss") ? snake.slice(0, -1) : snake;
+  return singular === "stage" ? "pipeline_stage" : singular;
+}
+async function refuseUnseenFindings(read2, locationId2, findings) {
+  const refusals = [];
+  const rawByRead = /* @__PURE__ */ new Map();
+  const readByKind = /* @__PURE__ */ new Map();
+  const wantedByKind = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    const kind = normaliseKind(f.kind);
+    wantedByKind.set(kind, (wantedByKind.get(kind) ?? /* @__PURE__ */ new Set()).add(f.id));
+  }
+  for (const f of findings) {
+    const kind = normaliseKind(f.kind);
+    const spec = Object.hasOwn(CHECKABLE_KINDS, kind) ? CHECKABLE_KINDS[kind] : void 0;
+    if (!spec) {
+      refusals.push({ finding: f, because: `"${f.id}" is a "${f.kind}", which the planner cannot check against the account. Findings it can check: ${CHECKABLE_KIND_NAMES}.` });
+      continue;
+    }
+    let got = readByKind.get(kind);
+    if (got === void 0) {
+      if (spec.paged) {
+        try {
+          got = await readPaged(read2, spec, locationId2, wantedByKind.get(kind) ?? /* @__PURE__ */ new Set());
+        } catch (e) {
+          got = e instanceof Error ? e : new Error(String(e));
+        }
+      } else {
+        const readKey = `${spec.path(locationId2)}?${JSON.stringify(spec.params?.(locationId2) ?? {})}`;
+        let raw = rawByRead.get(readKey);
+        if (raw === void 0) {
+          try {
+            raw = await read2(spec.path(locationId2), spec.params?.(locationId2));
+          } catch (e) {
+            raw = e instanceof Error ? e : new Error(String(e));
+          }
+          rawByRead.set(readKey, raw);
+        }
+        got = raw instanceof Error ? raw : { seen: new Set(spec.ids(raw)) };
+      }
+      readByKind.set(kind, got);
+    }
+    if (got instanceof Error) {
+      const why = got.message.split("\n")[0].slice(0, 160);
+      refusals.push({ finding: f, because: `The account's ${kind.replace(/_/g, " ")} list could not be read (${why}), so "${f.id}" cannot be verified. Nothing is planned against an id that could not be checked.` });
+      continue;
+    }
+    if (got.seen.has(f.id)) continue;
+    refusals.push({
+      finding: f,
+      because: got.incomplete ? `The account's ${kind.replace(/_/g, " ")} list could not be read in full (${got.incomplete}). "${f.id}" was not among the entries it did return, but the list was not read to the end, so it is neither verified nor called missing. Nothing is planned against an id that could not be checked.` : neverLookedAt(f.id)
+    });
+  }
+  return refusals;
+}
+var PAGE, MAX_READS, totalOf, rows, idsOf, byLocation, CHECKABLE_KINDS, CHECKABLE_KIND_NAMES, neverLookedAt;
+var init_verify_findings = __esm({
+  "src/command-os/build/verify-findings.ts"() {
+    "use strict";
+    PAGE = 100;
+    MAX_READS = 50;
+    totalOf = (raw) => {
+      const body = raw;
+      const t = body?.total ?? body?.meta?.total;
+      return typeof t === "number" && Number.isFinite(t) && t >= 0 ? t : void 0;
+    };
+    rows = (raw, key) => {
+      const body = raw;
+      const list2 = Array.isArray(body?.[key]) ? body?.[key] : Array.isArray(raw) ? raw : [];
+      return list2.filter((x) => !!x && typeof x === "object");
+    };
+    idsOf = (raw, key) => rows(raw, key).map((r) => r.id).filter((id) => typeof id === "string" && id.length > 0);
+    byLocation = (locationId2) => ({ locationId: locationId2 });
+    CHECKABLE_KINDS = {
+      pipeline: { path: () => "/opportunities/pipelines", params: byLocation, ids: (raw) => idsOf(raw, "pipelines") },
+      pipeline_stage: {
+        path: () => "/opportunities/pipelines",
+        params: byLocation,
+        ids: (raw) => rows(raw, "pipelines").flatMap((p) => idsOf({ stages: p.stages }, "stages"))
+      },
+      workflow: { path: () => "/workflows/", params: byLocation, ids: (raw) => idsOf(raw, "workflows") },
+      custom_field: { path: (loc) => `/locations/${loc}/customFields`, ids: (raw) => idsOf(raw, "customFields") },
+      custom_value: { path: (loc) => `/locations/${loc}/customValues`, ids: (raw) => idsOf(raw, "customValues") },
+      tag: { path: (loc) => `/locations/${loc}/tags`, ids: (raw) => idsOf(raw, "tags"), paged: true },
+      calendar: { path: () => "/calendars/", params: byLocation, ids: (raw) => idsOf(raw, "calendars") },
+      form: { path: () => "/forms/", params: byLocation, ids: (raw) => idsOf(raw, "forms"), paged: true },
+      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") },
+      // The list get_surveys reads; it takes limit/skip, so it is read the way
+      // forms are, page by page and never assumed complete (3.84.2).
+      survey: { path: () => "/surveys/", params: byLocation, ids: (raw) => idsOf(raw, "surveys"), paged: true }
+    };
+    CHECKABLE_KIND_NAMES = Object.keys(CHECKABLE_KINDS).join(", ");
+    neverLookedAt = (id) => `"${id}" was never looked at. A step aimed at an unverified id silently kills every action after it, so this is refused rather than attempted.`;
+  }
+});
+
 // src/command-os/build/automation.ts
 function canonical(v) {
   if (Array.isArray(v)) return v.map(canonical);
@@ -48535,7 +49252,7 @@ function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), know
     const at = new Date(f.observedAt).getTime();
     if (!Number.isFinite(at)) continue;
     if (at < cutoff) continue;
-    explored.set(f.id, f);
+    explored.set(f.id, (explored.get(f.id) ?? /* @__PURE__ */ new Set()).add(normaliseKind(f.kind)));
   }
   const staleIds = new Set(
     findings.filter((f) => {
@@ -48555,7 +49272,13 @@ function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), know
     const deps = [];
     for (const t of s.targets) {
       if (isExisting(t)) {
-        if (explored.has(t.existing)) continue;
+        const kinds = explored.get(t.existing);
+        if (kinds) {
+          if (!kinds.has(normaliseKind(t.kind))) {
+            refusals.push({ step: s.id, because: `"${t.existing}" was looked at as a ${[...kinds].join(" or ").replace(/_/g, " ")}, and this step aims at it as a ${t.kind}. The wrong kind of id silently kills every action after it, so this is refused rather than attempted.` });
+          }
+          continue;
+        }
         if (staleIds.has(t.existing)) {
           refusals.push({ step: s.id, because: `"${t.existing}" was last looked at more than an hour ago. Ids move; look again before planning against it.` });
         } else {
@@ -48727,6 +49450,7 @@ var init_automation = __esm({
   "src/command-os/build/automation.ts"() {
     "use strict";
     import_node_crypto11 = require("node:crypto");
+    init_verify_findings();
     isExisting = (t) => "existing" in t;
     FINDINGS_STALE_AFTER_MINUTES = 60;
   }
@@ -48821,113 +49545,275 @@ var init_store5 = __esm({
   }
 });
 
-// src/command-os/build/verify-findings.ts
-var verify_findings_exports = {};
-__export(verify_findings_exports, {
-  CHECKABLE_KINDS: () => CHECKABLE_KINDS,
-  CHECKABLE_KIND_NAMES: () => CHECKABLE_KIND_NAMES,
-  isCheckableKind: () => isCheckableKind,
-  neverLookedAt: () => neverLookedAt,
-  normaliseKind: () => normaliseKind,
-  refuseUnseenFindings: () => refuseUnseenFindings
-});
-async function readAll(read2, spec, locationId2) {
-  const base = spec.params?.(locationId2);
-  if (!spec.paged) return new Set(spec.ids(await read2(spec.path(locationId2), base)));
-  const seen = /* @__PURE__ */ new Set();
-  for (let page = 0; page < MAX_PAGES2; page++) {
-    const ids = spec.ids(await read2(spec.path(locationId2), { ...base ?? {}, limit: String(PAGE), skip: String(page * PAGE) }));
-    for (const id of ids) seen.add(id);
-    if (ids.length < PAGE) return seen;
-  }
-  throw new Error(`more than ${PAGE * MAX_PAGES2} entries; the list was not read to the end`);
-}
-function isCheckableKind(kind) {
-  return Object.hasOwn(CHECKABLE_KINDS, normaliseKind(kind));
-}
-function normaliseKind(kind) {
-  const snake = kind.trim().replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[\s-]+/g, "_").toLowerCase();
-  const singular = snake.endsWith("s") && !snake.endsWith("ss") ? snake.slice(0, -1) : snake;
-  return singular === "stage" ? "pipeline_stage" : singular;
+// src/command-os/build/arg-ids.ts
+function isIdShapedKey(key) {
+  return /(?:Id|ID)s?$|_ids?$/.test(key);
 }
-async function refuseUnseenFindings(read2, locationId2, findings) {
-  const refusals = [];
-  const rawByRead = /* @__PURE__ */ new Map();
-  const seenByKind = /* @__PURE__ */ new Map();
-  for (const f of findings) {
-    const kind = normaliseKind(f.kind);
-    const spec = Object.hasOwn(CHECKABLE_KINDS, kind) ? CHECKABLE_KINDS[kind] : void 0;
-    if (!spec) {
-      refusals.push({ finding: f, because: `"${f.id}" is a "${f.kind}", which the planner cannot check against the account. Findings it can check: ${CHECKABLE_KIND_NAMES}.` });
-      continue;
+function scanArgs(args, maxNodes = MAX_ARG_NODES) {
+  const out = { ids: [], locations: [], unknown: [], uncheckable: [] };
+  const add = (kind, v, key) => {
+    const list2 = Array.isArray(v) ? v : [v];
+    for (const x of list2) {
+      const id = typeof x === "number" ? String(x) : x;
+      if (typeof id === "string" && id.trim()) out.ids.push({ kind, id, key });
     }
-    let seen = seenByKind.get(kind);
-    if (seen === void 0) {
-      if (spec.paged) {
-        try {
-          seen = await readAll(read2, spec, locationId2);
-        } catch (e) {
-          seen = e instanceof Error ? e : new Error(String(e));
-        }
-      } else {
-        const readKey = `${spec.path(locationId2)}?${JSON.stringify(spec.params?.(locationId2) ?? {})}`;
-        let raw = rawByRead.get(readKey);
-        if (raw === void 0) {
-          try {
-            raw = await read2(spec.path(locationId2), spec.params?.(locationId2));
-          } catch (e) {
-            raw = e instanceof Error ? e : new Error(String(e));
-          }
-          rawByRead.set(readKey, raw);
-        }
-        seen = raw instanceof Error ? raw : new Set(spec.ids(raw));
-      }
-      seenByKind.set(kind, seen);
+  };
+  const hasValue = (v) => typeof v === "string" && v.trim().length > 0 || typeof v === "number" || Array.isArray(v) && v.some(hasValue);
+  const stack = [{ v: args, inFields: false }];
+  let visited = 0;
+  while (stack.length) {
+    const { v, inFields, nodeType: parentType } = stack.pop();
+    if (++visited > maxNodes) {
+      out.incomplete = `The step's arguments are too large to check in full (more than ${maxNodes} values), so the ids in them could not all be verified.`;
+      break;
     }
-    if (seen instanceof Error) {
-      const why = seen.message.split("\n")[0].slice(0, 160);
-      refusals.push({ finding: f, because: `The account's ${kind.replace(/_/g, " ")} list could not be read (${why}), so "${f.id}" cannot be verified. Nothing is planned against an id that could not be checked.` });
+    if (Array.isArray(v)) {
+      for (const x of v) stack.push({ v: x, inFields, nodeType: parentType });
       continue;
     }
-    if (!seen.has(f.id)) refusals.push({ finding: f, because: neverLookedAt(f.id) });
+    if (!isRecord10(v)) continue;
+    const isNode = typeof v.type === "string" && v.type && (isRecord10(v.attributes) || Array.isArray(v.conditions));
+    const nodeType = isNode ? v.type : parentType;
+    const refs = [];
+    if (typeof v.type === "string" && isRecord10(v.attributes)) extractFromAction(v, refs);
+    if (Array.isArray(v.conditions)) extractFromTrigger(v, refs);
+    for (const r of refs) {
+      if (r.byKey || !r.id.trim()) continue;
+      const kind = AUDIT_KIND[r.kind];
+      if (kind) out.ids.push({ kind, id: r.id, key: r.where });
+      else out.uncheckable.push({ kind: r.kind, id: r.id, key: r.where });
+    }
+    for (const [k, x] of Object.entries(v)) {
+      if (k === "locationId") {
+        if (typeof x === "string" && x.length > 0) out.locations.push(x);
+      } else if (k === "traffic_weightage" && isRecord10(x)) {
+        add("user", Object.keys(x), k);
+        continue;
+      } else if (k === "traffic_index" && Array.isArray(x)) {
+        add("user", x.map((e) => isRecord10(e) ? e.id : void 0), k);
+      } else if (k === "selectedUser") {
+        if (v.userType !== "all") add("user", x, k);
+      } else if (k === "field" && inFields) {
+        if (typeof x === "string") {
+          const standardKey = STANDARD_CONTACT_FIELDS.has(x.toLowerCase());
+          if (!standardKey || isIdShaped(x)) add("custom_field", x, "fields[].field");
+        }
+      } else if (k === "customFields" && Array.isArray(x)) {
+        add("custom_field", x.map((e) => isRecord10(e) ? e.id : void 0), "customFields[].id");
+      } else if (k === "customField" && isRecord10(x)) {
+        add("custom_field", x.id, "customField.id");
+      } else if (Object.hasOwn(ID_ARG_KINDS, k)) {
+        add(ID_ARG_KINDS[k], x, k);
+      } else if (isIdShapedKey(k) && !Object.hasOwn(NOT_CHECKABLE_ID_ARGS, k) && hasValue(x)) {
+        out.unknown.push({ key: k, value: JSON.stringify(x).slice(0, 80), ...nodeType ? { nodeType } : {} });
+      }
+      if ((k === "filterField" || k === "field" && !inFields) && typeof x === "string" && Object.hasOwn(CONDITION_FIELD_KINDS, x)) {
+        add(CONDITION_FIELD_KINDS[x], Object.hasOwn(v, "secondValue") ? v.secondValue : v.value, `${k} ${x}`);
+      }
+      if (x && typeof x === "object") stack.push({ v: x, inFields: k === "fields" && Array.isArray(x), nodeType });
+    }
   }
-  return refusals;
+  return out;
 }
-var PAGE, MAX_PAGES2, rows, idsOf, byLocation, CHECKABLE_KINDS, CHECKABLE_KIND_NAMES, neverLookedAt;
-var init_verify_findings = __esm({
-  "src/command-os/build/verify-findings.ts"() {
+var ID_ARG_KINDS, CONDITION_FIELD_KINDS, AUDIT_KIND, NOT_CHECKABLE_ID_ARGS, MAX_ARG_NODES, isRecord10;
+var init_arg_ids = __esm({
+  "src/command-os/build/arg-ids.ts"() {
     "use strict";
-    PAGE = 100;
-    MAX_PAGES2 = 20;
-    rows = (raw, key) => {
-      const body = raw;
-      const list2 = Array.isArray(body?.[key]) ? body?.[key] : Array.isArray(raw) ? raw : [];
-      return list2.filter((x) => !!x && typeof x === "object");
-    };
-    idsOf = (raw, key) => rows(raw, key).map((r) => r.id).filter((id) => typeof id === "string" && id.length > 0);
-    byLocation = (locationId2) => ({ locationId: locationId2 });
-    CHECKABLE_KINDS = {
-      pipeline: { path: () => "/opportunities/pipelines", params: byLocation, ids: (raw) => idsOf(raw, "pipelines") },
-      pipeline_stage: {
-        path: () => "/opportunities/pipelines",
-        params: byLocation,
-        ids: (raw) => rows(raw, "pipelines").flatMap((p) => idsOf({ stages: p.stages }, "stages"))
-      },
-      workflow: { path: () => "/workflows/", params: byLocation, ids: (raw) => idsOf(raw, "workflows") },
-      custom_field: { path: (loc) => `/locations/${loc}/customFields`, ids: (raw) => idsOf(raw, "customFields") },
-      custom_value: { path: (loc) => `/locations/${loc}/customValues`, ids: (raw) => idsOf(raw, "customValues") },
-      tag: { path: (loc) => `/locations/${loc}/tags`, ids: (raw) => idsOf(raw, "tags"), paged: true },
-      calendar: { path: () => "/calendars/", params: byLocation, ids: (raw) => idsOf(raw, "calendars") },
-      form: { path: () => "/forms/", params: byLocation, ids: (raw) => idsOf(raw, "forms"), paged: true },
-      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") }
-    };
-    CHECKABLE_KIND_NAMES = Object.keys(CHECKABLE_KINDS).join(", ");
-    neverLookedAt = (id) => `"${id}" was never looked at. A step aimed at an unverified id silently kills every action after it, so this is refused rather than attempted.`;
+    init_validators();
+    init_id_shape();
+    ID_ARG_KINDS = Object.freeze({
+      pipelineId: "pipeline",
+      pipelineIds: "pipeline",
+      pipeline_id: "pipeline",
+      defaultInPipelines: "pipeline",
+      pipelineStageId: "pipeline_stage",
+      pipeline_stage_id: "pipeline_stage",
+      // the workflow create_opportunity node (validators.ts)
+      stageId: "pipeline_stage",
+      workflowId: "workflow",
+      workflowIds: "workflow",
+      workflow_id: "workflow",
+      sourceWorkflowId: "workflow",
+      callEndWorkflowIds: "workflow",
+      fieldId: "custom_field",
+      customFieldId: "custom_field",
+      consentFieldId: "custom_field",
+      customDateFieldId: "custom_field",
+      valueId: "custom_value",
+      customValueId: "custom_value",
+      // The live DBR workflows: update_custom_value and math_operation
+      // (round-4 delta review, 2026-09-15).
+      custom_value_id: "custom_value",
+      sourceCustomValueId: "custom_value",
+      targetCustomValueId: "custom_value",
+      tagId: "tag",
+      calendarId: "calendar",
+      formId: "form",
+      formIds: "form",
+      // a form_submission goal's extras (build_goal_event)
+      surveyId: "survey",
+      // get_surveys reads /surveys/, so a survey is read back like a form (3.84.2)
+      userId: "user",
+      userIds: "user",
+      assignedUserId: "user",
+      sentBy: "user",
+      // send_document's sender (release review F2)
+      // Workflow action payloads (CLAUDE.md action schemas). These do not end in
+      // "Id", which is exactly why the guess never saw them.
+      assignedTo: "user",
+      user_list: "user"
+    });
+    CONDITION_FIELD_KINDS = Object.freeze({
+      ...ID_ARG_KINDS,
+      "form.id": "form",
+      "calendar.id": "calendar",
+      // The payment and task triggers name their form, calendar and assignee under
+      // their own prefixes (src/trigger-schemas.ts); unread until 3.84.2.
+      "payment.form.id": "form",
+      "payment.calendar.id": "calendar",
+      "task.assignedTo": "user",
+      "survey.id": "survey",
+      "opportunity.pipelineId": "pipeline",
+      "opportunity.pipelineStageId": "pipeline_stage",
+      "opportunity.assignedTo": "user",
+      "contact.assignedTo": "user",
+      "workflow.id": "workflow"
+    });
+    AUDIT_KIND = Object.freeze({
+      pipeline: "pipeline",
+      stage: "pipeline_stage",
+      custom_field: "custom_field",
+      user: "user",
+      workflow: "workflow",
+      form: "form",
+      calendar: "calendar",
+      survey: "survey"
+    });
+    NOT_CHECKABLE_ID_ARGS = Object.freeze({
+      // The account itself, not an object inside it. One account per plan is
+      // enforced separately, and the build is bound to it (agency-build.ts).
+      locationId: "the sub-account itself",
+      location_id: "the sub-account itself",
+      altId: "the sub-account itself",
+      companyId: "the agency itself",
+      company_id: "the agency itself",
+      ghl_location_id: "the sub-account itself",
+      ghl_company_id: "the agency itself",
+      test_location_id: "the sub-account itself",
+      demoLocationId: "a sub-account, not an object inside one",
+      clientLocationId: "a sub-account, not an object inside one",
+      sourceLocationId: "a sub-account, not an object inside one",
+      // Objects that live in the account but have no list the planner reads back.
+      contactId: "contacts are not listed in full by the planner",
+      contactIds: "contacts are not listed in full by the planner",
+      opportunityId: "opportunities are not listed in full by the planner",
+      templateId: "templates have no read-back list here",
+      agentId: "AI agents have no read-back list here",
+      assignedEmployeeId: "a Conversation AI employee; no read-back list here",
+      knowledgeBaseId: "knowledge bases have no read-back list here",
+      knowledgeBaseIds: "knowledge bases have no read-back list here",
+      lastKnowledgeBaseId: "knowledge bases have no read-back list here",
+      faqId: "knowledge base entries have no read-back list here",
+      lastFaqId: "knowledge base entries have no read-back list here",
+      urlIds: "knowledge base entries have no read-back list here",
+      funnelId: "funnels have no read-back list here",
+      pageId: "funnel pages have no read-back list here",
+      stepId: "funnel steps (and this plan's own steps) have no read-back list here",
+      recordId: "custom object records have no read-back list here",
+      targetRecordId: "custom object records have no read-back list here",
+      relationId: "associations have no read-back list here",
+      associationId: "associations have no read-back list here",
+      productId: "products have no read-back list here",
+      productIds: "products have no read-back list here",
+      invoiceId: "invoices have no read-back list here",
+      estimateId: "estimates have no read-back list here",
+      orderId: "orders have no read-back list here",
+      subscriptionId: "subscriptions have no read-back list here",
+      couponId: "coupons have no read-back list here",
+      entityId: "payment records have no read-back list here",
+      actionId: "AI agent actions have no read-back list here",
+      actionIds: "AI agent actions have no read-back list here",
+      listId: "smart lists have no read-back list here",
+      webhookId: "webhooks have no read-back list here",
+      taskId: "contact tasks have no read-back list here",
+      eventId: "appointments have no read-back list here",
+      postId: "social posts have no read-back list here",
+      accountIds: "social accounts have no read-back list here",
+      messageId: "messages have no read-back list here",
+      conversationId: "conversations have no read-back list here",
+      conversationProviderId: "conversation providers have no read-back list here",
+      documentId: "documents have no read-back list here",
+      businessId: "businesses have no read-back list here",
+      numberPoolId: "number pools have no read-back list here",
+      linkId: "trigger links have no read-back list here",
+      blogId: "blogs have no read-back list here",
+      categoryId: "categories have no read-back list here",
+      submissionId: "form submissions have no read-back list here",
+      mediaId: "media files have no read-back list here",
+      photoAssetId: "media files have no read-back list here",
+      beforeAssetId: "media files have no read-back list here",
+      afterAssetId: "media files have no read-back list here",
+      domainId: "domains have no read-back list here",
+      chatWidgetId: "chat widgets have no read-back list here",
+      callId: "calls have no read-back list here",
+      voiceId: "voices have no read-back list here",
+      placeId: "a Google Business place, outside the account",
+      reviewLinkId: "review links have no read-back list here",
+      linkIds: "a link_click goal's trigger links, which have no read-back list here",
+      globalProductIds: "a payment_received goal's products, which have no read-back list here",
+      global_product_ids: "products have no read-back list here",
+      snapshot_id: "snapshots belong to the agency, not the sub-account",
+      parentId: "a folder or parent record with no read-back list here",
+      // Outside GoHighLevel altogether.
+      stripeCustomerId: "a Stripe record, not a GoHighLevel one",
+      google_oauth_client_id: "a Google OAuth client, not a GoHighLevel record",
+      ghl_user_id: "the Firebase login's uid, not an object in the sub-account",
+      device_id: "this machine's id",
+      // This product's own records.
+      buildId: "a Layer 5 build on this machine",
+      runId: "a build run on this machine",
+      planId: "a saved plan on this machine",
+      briefId: "a brief on this machine",
+      operationId: "an operation on this machine",
+      questionId: "an intake question",
+      ruleId: "a design rule",
+      startAfterId: "a paging cursor",
+      purchasedFeatureIds: "feature names, not account objects",
+      // Ids inside a workflow's or a page's own document: the node, branch or
+      // element they belong to, never an object in the account.
+      _id: "an element's own id inside a document",
+      nodeId: "an element's own id inside a page",
+      appId: "an element's own id inside a page",
+      goToId: "an element's own id inside a page",
+      __conditionId: "a condition's own id inside a workflow",
+      __id: "an operator's own id inside a math step",
+      __segmentId: "a segment's own id inside a workflow",
+      ifElseNodeId: "a node's own id inside a workflow",
+      target_node_id: "a node's own id inside a workflow",
+      targetNodeId: "the step a goto jumps to, inside the same workflow",
+      stepIds: "the steps an email_event goal waits on, inside the same workflow",
+      invoiceStepId: "the step an invoice_paid goal waits on, inside the same workflow",
+      sourceId: `GoHighLevel's attribution key on an email edited in its UI, "<workflowId>:<stepId>"; not checked on save (workflow-builder-client.ts)`,
+      origin_id: "a trigger's own id inside a workflow"
+    });
+    MAX_ARG_NODES = 2e5;
+    isRecord10 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
   }
 });
 
 // src/tools/agency-build.ts
-function registerAgencyBuildTools(server2, knownTools, verify) {
+function accountMismatch(a, active) {
+  if (!a.locationId) {
+    const applied = a.applied.filter((s) => s.state === "applied").length;
+    if (applied > 0) {
+      return `This build was saved before builds recorded the sub-account their ids were checked against, and ${applied} of its ${a.steps.length} steps ${applied === 1 ? "is" : "are"} already applied, so nothing can say which account they belong to and re-planning it whole would run those steps twice. Keep the undo notes you have, run abandon_automation to list what is live, then plan only the remaining step${a.steps.length - applied === 1 ? "" : "s"} with plan_automation and approve that plan.`;
+    }
+    return "This build was saved before builds recorded the sub-account their ids were checked against, so nothing can say which account they belong to: plan it again (plan_automation) and approve the new plan.";
+  }
+  if (active === a.locationId) return null;
+  return active ? `This build's ids were checked against sub-account ${a.locationId}, and the server is now pointed at ${active}. An id checked on one account means nothing on another, so nothing is approved or recorded here. switch_location back to ${a.locationId}, confirm it with get_current_location, then try again.` : `This build's ids were checked against sub-account ${a.locationId}, and the server is not pointed at any sub-account. switch_location to ${a.locationId}, confirm it with get_current_location, then try again.`;
+}
+function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
   safeTool(
     server2,
     "plan_automation",
@@ -48955,43 +49841,67 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const found = findings.map((f) => ({ ...f, observedAt: f.observedAt ?? now.toISOString() }));
       const plan = steps;
       const check = checkPlan(goal, found, plan, now, knownTools?.());
+      let boundAccount;
       if (check.ok) {
-        const named = /* @__PURE__ */ new Set();
-        const collectLocations = (v, depth) => {
-          if (!v || typeof v !== "object" || depth > 4) return;
-          for (const [k, x] of Object.entries(v)) {
-            if (k === "locationId" && typeof x === "string" && x.length > 0) named.add(x);
-            collectLocations(x, depth + 1);
-          }
-        };
-        for (const s of plan) collectLocations(s.args, 0);
+        const scans = plan.map((s) => ({ step: s, scan: scanArgs(s.args) }));
+        const named = new Set(scans.flatMap(({ scan }) => scan.locations));
         if (locationId2) named.add(locationId2);
         if (named.size > 1) {
           return { planned: false, refusals: [{ because: `The steps name ${named.size} different sub-accounts (${[...named].join(", ")}). A plan runs against one account; split it.` }], note: "Nothing was saved." };
         }
-        const account2 = [...named][0];
-        const declaredRefs = new Set(plan.flatMap((s) => (s.creates ?? []).map((c) => c.ref)));
-        const knownIds = new Set(found.map((f) => f.id));
+        const account2 = [...named][0] ?? activeLocation?.();
+        if (!account2) {
+          return { planned: false, refusals: [{ because: "The plan names no sub-account and the server is pointed at none, so there is no sub-account to check its ids against or to run it on. switch_location to the client's account first." }], note: "Nothing was saved." };
+        }
+        const refKinds = new Map(plan.flatMap((s) => (s.creates ?? []).map((c) => [c.ref, normaliseKind(c.kind)])));
+        const seenKeys = new Set(found.map((f) => `${normaliseKind(f.kind)}:${f.id}`));
         const hidden = [];
-        const hiddenIds = /* @__PURE__ */ new Set();
-        const scan = (v, depth) => {
-          if (!v || typeof v !== "object" || depth > 4) return;
-          for (const [k, x] of Object.entries(v)) {
-            if (/Id$/.test(k) && k !== "locationId" && k !== "companyId" && typeof x === "string" && x.length > 0 && !knownIds.has(x) && !declaredRefs.has(x) && !hiddenIds.has(x) && isCheckableKind(k.replace(/Id$/, ""))) {
-              hiddenIds.add(x);
-              hidden.push({ kind: k.replace(/Id$/, ""), id: x, observedAt: now.toISOString() });
+        const argRefusals = [];
+        for (const { step: s, scan } of scans) {
+          if (scan.incomplete) argRefusals.push({ because: `Step "${s.id}": ${scan.incomplete}`, finding: { kind: "arguments", id: s.id } });
+          for (const u of scan.unknown) {
+            const inNode = u.nodeType ? ` inside a "${u.nodeType}" node` : "";
+            argRefusals.push({
+              because: `Step "${s.id}" passes "${u.key}"${inNode}: ${u.value}. The planner has no way to check that id against the account, so the plan is refused rather than trusted: a step aimed at an unverified id silently kills every action after it. Two ways on: leave that step out of the plan and do it by hand, or report the node type and key (${u.nodeType ? `"${u.nodeType}" / ` : ""}"${u.key}") so it can be added to the ids this checks.`,
+              finding: { kind: u.key, id: u.value }
+            });
+          }
+          for (const { kind, id } of scan.uncheckable) {
+            const key = `${kind}:${id}`;
+            if (seenKeys.has(key)) continue;
+            seenKeys.add(key);
+            hidden.push({ kind, id, observedAt: now.toISOString() });
+          }
+          for (const { kind, id } of scan.ids) {
+            const refKind = refKinds.get(id);
+            if (refKind !== void 0) {
+              if (refKind !== kind) {
+                argRefusals.push({
+                  because: `Step "${s.id}" passes "${id}" where a ${kind.replace(/_/g, " ")} goes, but "${id}" is what an earlier step creates as a ${refKind.replace(/_/g, " ")}. The wrong kind of id silently kills every action after it, so this is refused.`,
+                  finding: { kind, id }
+                });
+              }
+              continue;
             }
-            scan(x, depth + 1);
+            const key = `${kind}:${id}`;
+            if (seenKeys.has(key)) continue;
+            seenKeys.add(key);
+            hidden.push({ kind, id, observedAt: now.toISOString() });
           }
-        };
-        for (const s of plan) scan(s.args, 0);
+        }
+        if (argRefusals.length) {
+          return { planned: false, refusals: argRefusals, note: "Nothing was saved. These arguments carry ids that cannot be checked as they stand." };
+        }
         const toVerify = [...found, ...hidden];
+        boundAccount = account2;
         const refusals = toVerify.length === 0 ? [] : verify ? await verify(account2, toVerify) : toVerify.map((f) => ({ finding: f, because: `"${f.id}" could not be checked against any account, so it is refused rather than trusted.` }));
         if (refusals.length) {
           return {
             planned: false,
             refusals: refusals.map((r) => ({ because: r.because, finding: { kind: r.finding.kind, id: r.finding.id } })),
-            note: "Nothing was saved. Every finding is read back from the account before a plan is kept, and these were not there."
+            // Not "these were not there": a list that could not be read in full
+            // proves nothing is missing, and each refusal says which it was (G-M2).
+            note: "Nothing was saved. Every finding is read back from the account before a plan is kept, and these could not be verified there. Each reason above says whether the id is missing or the list could not be read."
           };
         }
       }
@@ -49005,6 +49915,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const a = {
         id: newAutomationId(),
         goal,
+        // check.ok is true here, so the block above set it.
+        locationId: boundAccount,
         createdAt: now.toISOString(),
         planId: planFingerprint(goal, plan),
         findings: found,
@@ -49021,7 +49933,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
           const s = plan.find((x) => x.id === id);
           return { step: s.id, does: s.why, tool: s.tool };
         }),
-        nextStep: `Read the steps above. Nothing runs until you approve this exact plan: approve_automation with buildId ${a.id} and planId ${a.planId}.`,
+        account: a.locationId,
+        nextStep: `Read the steps above. Nothing runs until you approve this exact plan: approve_automation with buildId ${a.id} and planId ${a.planId}. Its ids were checked against sub-account ${a.locationId}, so it is approved and run only while the server is pointed at that account.`,
         note: "Change any step after this and the plan gets a new fingerprint, which voids the approval. That is on purpose: the plan you read and the plan that runs have to be the same document."
       };
     }
@@ -49038,6 +49951,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
     async ({ buildId, planId, approvedBy }) => {
       const a = readAutomation(buildId);
       if (!a) return { approved: false, error: `There is no build "${buildId}" on this machine.` };
+      const wrong = accountMismatch(a, activeLocation?.());
+      if (wrong) return { approved: false, error: wrong };
       const now = /* @__PURE__ */ new Date();
       const r = approve(a, approvedBy, planId, now.toISOString(), now);
       if (!r.ok) return { approved: false, error: r.because };
@@ -49063,6 +49978,8 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
     async ({ buildId, stepId, state, undo, because, result, resolved: resolved2, retry }) => {
       const a = readAutomation(buildId);
       if (!a) return { recorded: false, error: `There is no build "${buildId}" on this machine.` };
+      const wrong = state === "applied" ? accountMismatch(a, activeLocation?.()) : null;
+      if (wrong) return { recorded: false, error: wrong };
       const r = recordStep(a, { stepId, state, at: (/* @__PURE__ */ new Date()).toISOString(), undo, because, result, resolved: resolved2, retryOf: retry });
       if (!r.ok) return { recorded: false, error: r.because };
       saveAutomation(r.automation);
@@ -49111,13 +50028,16 @@ function registerAgencyBuildTools(server2, knownTools, verify) {
       const rows2 = ids.map((id) => {
         const a = all[id];
         const p = position(a);
+        const wrongAccount = p.nextStep ? accountMismatch(a, activeLocation?.()) : null;
         return {
           buildId: id,
           goal: a.goal,
+          account: a.locationId ?? null,
           where: p.line,
           phase: p.phase,
           stepsDone: `${p.done} of ${p.total}`,
-          nextStep: p.nextStep ? { step: p.nextStep.id, does: p.nextStep.why, tool: p.nextStep.tool } : null,
+          nextStep: p.nextStep && !wrongAccount ? { step: p.nextStep.id, does: p.nextStep.why, tool: p.nextStep.tool } : null,
+          ...wrongAccount ? { wrongAccount } : {},
           stalledOn: p.stalledOn,
           blocked: p.blocked,
           approvedBy: a.approval?.by ?? null,
@@ -49142,6 +50062,7 @@ var init_agency_build = __esm({
     init_automation();
     init_store5();
     init_verify_findings();
+    init_arg_ids();
     targetSchema = import_zod74.z.union([
       import_zod74.z.object({ existing: import_zod74.z.string().describe("A real id, which must appear in `findings`."), kind: import_zod74.z.string() }),
       import_zod74.z.object({ ref: import_zod74.z.string().describe("Something an earlier step in this plan creates."), kind: import_zod74.z.string() })
@@ -49566,7 +50487,7 @@ function dailyBrief(input) {
       );
     }
   }
-  const quiet = !unread.length && !halfRead.length && !today2.length && !waitingOnYou.length && !runningNow.length && !neverStarted.length && !renewals.length && !underFloor.length && !newLeads.length && !payingButQuiet.length && !floorUncheckable.length && !renewalUnknown.length && !yourDay.length;
+  const quiet = !unread.length && !halfRead.length && !today2.length && !waitingOnYou.length && !runningNow.length && !neverStarted.length && !renewals.length && !underFloor.length && !newLeads.length && !payingButQuiet.length && !floorUncheckable.length && !renewalUnknown.length && !yourDay.length && !yourDayNote;
   let headline3;
   if (today2.length === 1) {
     headline3 = `You have one call today \u2014 ${today2[0].who ?? today2[0].client} at ${today2[0].at}.`;
@@ -49597,6 +50518,8 @@ function dailyBrief(input) {
     headline3 = `Nothing needs you in what I could read \u2014 but ${unread[0].client} could not be read this morning.`;
   } else if (unread.length > 1) {
     headline3 = `Nothing needs you in what I could read \u2014 but ${unread.length} accounts could not be read this morning.`;
+  } else if (yourDayNote) {
+    headline3 = "Nothing needs you in what I could read \u2014 but your own calendar could not be read this morning.";
   } else if (floorUncheckable.length) {
     const c = floorUncheckable[0].client;
     headline3 = floorUncheckable.length === 1 ? `Nothing needs you \u2014 but ${c}'s price cannot be checked against any floor, so nothing here can tell you whether they are under it.` : `Nothing needs you \u2014 but ${floorUncheckable.length} clients' prices cannot be checked against any floor, ${c} among them.`;
@@ -50247,6 +51170,45 @@ function translateWorkflowAudit(audit, inputs = {}) {
       evidence: [{ tool: "audit_workflows", detail: `${s.shape_warnings_total ?? shapeCount} steps` }]
     });
   }
+  const blockerCount = s.workflows_with_save_blocker_warnings ?? 0;
+  if (blockerCount > 0) {
+    const rows2 = audit.save_blocker_warnings ?? [];
+    const names = rows2.map((r) => r.workflowName ?? "").filter(Boolean);
+    const cats = new Set(rows2.flatMap((r) => (r.warnings ?? []).map((w) => w.category ?? "")).filter(Boolean));
+    const editBlocked = cats.has("legacy_step_id") || cats.has("legacy_wait_unit");
+    const alertsNobody = cats.has("missing_required_attribute");
+    const unknownKind = !editBlocked && !alertsNobody;
+    const editSentence = ` Some of their steps were built before GoHighLevel tightened what it accepts. The automation runs exactly as it always has; what breaks is CHANGING it \u2014 the save is refused, and the refusal names steps nobody touched, so it reads as unrelated to the edit that triggered it.`;
+    const alertSentence = ` One or more alert steps are set to notify a specific person with nobody chosen. That step saves, publishes and runs, and simply never reaches anyone \u2014 so the automation looks healthy while the person waiting on the alert hears nothing.`;
+    out.push({
+      id: "steps-that-block-saving",
+      title: alertsNobody && !editBlocked ? `${blockerCount} automation${blockerCount === 1 ? " sends" : "s send"} an alert that reaches nobody` : editBlocked && !alertsNobody ? `${blockerCount} automation${blockerCount === 1 ? " cannot" : "s cannot"} be changed without the save being refused` : `${blockerCount} automation${blockerCount === 1 ? " carries a step" : "s carry steps"} that block changes, or alert nobody`,
+      what: `${nameList(names, blockerCount)} ${blockerCount === 1 ? "has" : "have"} at least one step of this kind.` + (editBlocked || unknownKind ? editSentence : "") + (alertsNobody || unknownKind ? alertSentence : ""),
+      severity: "high",
+      impact: alertsNobody && !editBlocked ? "leads" : "efficiency",
+      money: { confidence: "unknown", assumptions: ["Not costed: what this costs depends on which automation and who was waiting on the alert, and we would rather say so than guess."] },
+      remedy: alertsNobody && !editBlocked ? "Pick the person each alert should go to, or set it to notify everyone. Then re-run this check." : editBlocked && !alertsNobody ? "Rebuild those steps so GoHighLevel will accept a save again \u2014 nobody part-way through an automation can be moved while that is done. Then re-run this check." : "Rebuild those steps so GoHighLevel will accept a save again \u2014 nobody part-way through an automation can be moved while that is done \u2014 and pick a person for any alert with nobody selected. Then re-run this check.",
+      fix: "guided",
+      minutes: Math.max(10, blockerCount * 8),
+      evidence: [{ tool: "audit_workflows", detail: `${s.save_blocker_warnings_total ?? blockerCount} steps across ${blockerCount} workflows` }]
+    });
+  }
+  const integrationCount = s.workflows_with_integration_warnings ?? 0;
+  if (integrationCount > 0) {
+    const names = (audit.integration_warnings ?? []).map((r) => r.workflowName ?? "").filter(Boolean);
+    out.push({
+      id: "steps-without-their-account",
+      title: `${integrationCount} automation${integrationCount === 1 ? " has a step" : "s have steps"} waiting on a social account that is not connected`,
+      what: `${nameList(names, integrationCount)} include a step that messages or replies through a social account this location has not connected. The automation saves, publishes and runs; that step simply does nothing when it is reached, and nothing in the history says so.`,
+      severity: "high",
+      impact: "leads",
+      money: { confidence: "unknown", assumptions: ["Not costed: it depends how many people reach that step, which we cannot read."] },
+      remedy: "Connect the account in Settings, then re-run this check. (A connected account with no messaging permission fails the same way and this check cannot see it, so send one test message through the step as well.)",
+      fix: "manual",
+      minutes: Math.max(10, integrationCount * 5),
+      evidence: [{ tool: "audit_workflows", detail: `${s.integration_warnings_total ?? integrationCount} steps` }]
+    });
+  }
   return out;
 }
 function notCheckedFrom(audit) {
@@ -50986,6 +51948,15 @@ function publishNote(r) {
   if (r.publishFailed.length) {
     const lead = r.published.length ? `Auto-published ${r.published.length} workflow(s) live, but ` : "";
     const detail = r.publishFailed.map((p) => `${p.name} (${p.error})`).join("; ");
+    const inert = r.publishFailed.filter((p) => p.kind === "inert"), unverified = r.publishFailed.filter((p) => p.kind === "not_verified");
+    const drafts = r.publishFailed.filter((p) => p.kind !== "inert" && p.kind !== "not_verified");
+    if (!drafts.length) {
+      const parts = [
+        inert.length ? `${inert.length} workflow(s) PUBLISHED but with every trigger still inactive, so nothing enrols contacts into them: ${inert.map((p) => `${p.name} (${p.error})`).join("; ")}. Open each in GHL and check its trigger.` : "",
+        unverified.length ? `${unverified.length} workflow(s) had the publish accepted but it could not be confirmed: ${unverified.map((p) => `${p.name} (${p.error})`).join("; ")}. Open each in GHL and check it shows Published before reporting it as running.` : ""
+      ].filter(Boolean).join(" ");
+      return `${lead}${parts}${r.published.length ? " Any gated workflow stays DRAFT until its handoff is met." : ""}`;
+    }
     return `${lead}${r.publishFailed.length} workflow(s) were BUILT BUT COULD NOT BE PUBLISHED. They exist in GHL as DRAFT and are NOT running: ${detail}. You already opted in, so re-running with publishWorkflows will not help. If GHL rejected the workflow's contents, publishing by hand will hit the SAME error until the cause is fixed. Read the error above, fix it, then publish (see nextManualSteps).${r.published.length ? " Any gated workflow stays DRAFT until its handoff is met." : ""}`;
   }
   if (r.published.length) {
@@ -50999,6 +51970,8 @@ function publishNote(r) {
 function publishSummaryClause(r) {
   if (r.publishFailed.length) {
     const also = r.published.length ? ` (${r.published.length} did publish)` : "";
+    const drafts = r.publishFailed.filter((p) => p.kind !== "inert" && p.kind !== "not_verified").length;
+    if (!drafts) return ` ${r.publishFailed.length} workflow(s) published but NOT confirmed running${also} (inactive trigger or unconfirmed publish), see publishNote.`;
     return ` ${r.publishFailed.length} workflow(s) BUILT BUT NOT PUBLISHED${also}. They are DRAFT and not running, see publishNote.`;
   }
   if (r.published.length) return ` Published ${r.published.length} workflow(s) live.`;
@@ -52195,8 +53168,14 @@ async function executeBackbone(plan, deps, opts = {}) {
     }
     if (opts.publishWorkflows && !opts.gatedWorkflowRefs?.has(wf.ref)) {
       try {
-        await deps.publishWorkflow(wfId);
-        published.push(wf.ref);
+        const verdict = publishVerdict(await deps.publishWorkflow(wfId));
+        if (!verdict.live) {
+          publishFailed.push({ ref: wf.ref, name: wf.name, error: verdict.reason, kind: verdict.kind });
+          manual.push({ ref: wf.ref, type: "workflow-publish", name: wf.name, reason: `[${wf.name}] ${verdict.kind === "inert" ? `published, but every trigger on it still reads inactive, so nothing enrols contacts into it \u2014 open the workflow in GHL and check its trigger (${verdict.reason})` : verdict.kind === "not_verified" ? `the publish was accepted but could not be confirmed (${verdict.reason}) \u2014 open the workflow in GHL and check it shows Published` : `built successfully but not live (${verdict.reason}) \u2014 publish it manually in GHL`}.` });
+        } else {
+          published.push(wf.ref);
+          if (verdict.note) manual.push({ ref: wf.ref, type: "workflow-trigger", name: wf.name, reason: `[${wf.name}] published, but ${verdict.note}` });
+        }
       } catch (e) {
         publishFailed.push({ ref: wf.ref, name: wf.name, error: msg2(e) });
         manual.push({ ref: wf.ref, type: "workflow-publish", name: wf.name, reason: `[${wf.name}] built successfully but auto-publish failed (${msg2(e)}) \u2014 publish it manually in GHL.` });
@@ -52316,6 +53295,21 @@ async function createWithReadback(create, read2, name, beforeIds, poll, wait) {
 function msg2(e) {
   return accountErrorText(e);
 }
+function publishVerdict(outcome) {
+  if (typeof outcome !== "object" || outcome === null) return { live: true };
+  const check = outcome.publish_check;
+  if (typeof check !== "object" || check === null) return { live: true };
+  const c = check;
+  const warning = typeof c.warning === "string" && c.warning ? c.warning : "";
+  if (warning.startsWith("NOT VERIFIED")) return { live: false, kind: "not_verified", reason: warning };
+  if (warning.startsWith("TRIGGER NOT ACTIVE")) {
+    const active = typeof c.triggers_active === "number" ? c.triggers_active : 0;
+    return active > 0 ? { live: true, note: warning } : { live: false, kind: "inert", reason: warning };
+  }
+  if (c.published === true) return { live: true };
+  const status = typeof c.status_returned === "string" ? c.status_returned : "(GHL returned no status)";
+  return { live: false, kind: "not_live", reason: warning || `NOT LIVE. The workflow read back as ${status} rather than "published", so it is not running.` };
+}
 var norm5, sleep5, PREVIEW_SNIPPET_LENGTH, JournalHookError;
 var init_execute = __esm({
   "src/intake-to-build/execute.ts"() {
@@ -52880,9 +53874,12 @@ function makeExecuteDeps(client, builderClient, locationId2, registry2) {
     deleteWorkflow: async (workflowId) => {
       await builderClient.deleteWorkflow(workflowId);
     },
-    publishWorkflow: async (workflowId) => {
-      await builderClient.publishWorkflow(workflowId);
-    }
+    // The result is RETURNED, not awaited-and-dropped. It carries the client's
+    // own `publish_check` — the status read back from the SAVED workflow after
+    // the write, with a NOT LIVE / NOT VERIFIED sentence when the publish did
+    // not land. Discarding it is what let a workflow left in Draft be counted
+    // into "Published N workflow(s) live"; the executor now reads it.
+    publishWorkflow: (workflowId) => builderClient.publishWorkflow(workflowId)
   };
 }
 function makeRevertDeps(client, builderClient, locationId2) {
@@ -53085,8 +54082,13 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           });
         }
         if (!briefArg.scope) {
-          const saved2 = readBoardState().scope?.[activeLocation];
-          if (saved2 && Array.isArray(saved2.features)) {
+          const board = readBoardState();
+          const saved2 = board.scope?.[activeLocation];
+          if (saved2?.wholePreset) {
+            scopeSource = "cockpit";
+          } else if (!saved2 && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
+            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(activeLocation) });
+          } else if (saved2 && Array.isArray(saved2.features)) {
             const features = saved2.features.filter(isFeatureId);
             if (!features.length) {
               return jsonResponse({
@@ -53143,6 +54145,31 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
       if (!gate2.ok) return jsonResponse({ ok: false, phase: "plan", error: gate2.error, savedPlan: saved ? { planId: saved.planId, savedAt: saved.savedAt } : void 0 });
       const plan = gate2.plan;
       const planSource = gate2.source;
+      if (!fromPreset) {
+        const board = readBoardState();
+        const current = board.scope?.[activeLocation];
+        if (!current && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
+          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(activeLocation) });
+        }
+        if (current && !current.wholePreset && Array.isArray(current.features) && !current.features.some(isFeatureId)) {
+          return jsonResponse({
+            ok: false,
+            phase: "scope",
+            scopeSource: "cockpit",
+            error: "No features are selected for this client, so nothing was built, not even from the saved plan. Open the client's Review screen, tick the features to build, confirm, and run the build again."
+          });
+        }
+        if (saved && planSource !== "argument-replaces-saved" && !savedPlanMatchesScope(saved, current)) {
+          const planned = saved?.scope ? [...saved.scope.built, ...(saved.scope.omitted ?? []).map((f) => f.id)].join(", ") || "no features" : "everything in the preset";
+          const now = current?.wholePreset ? "everything in the preset (confirmed)" : current ? current.features.filter(isFeatureId).join(", ") : "everything in the preset (nothing is saved)";
+          return jsonResponse({
+            ok: false,
+            phase: "scope",
+            scopeSource: "cockpit",
+            error: `The features selected for this client changed after this plan was saved (the saved plan builds: ${planned}; the Review screen now says: ${now}), so the saved plan is not what was confirmed and nothing was built. Run the build again without useSavedPlan, composing the plan fresh from the preset (fromPreset), so it follows the current selection.`
+          });
+        }
+      }
       const scopeForValidation = composed?.scope ?? (planSource === "saved" ? saved?.scope : void 0);
       const validation = validateBuildPlan(plan, { nurtureNotBought: Boolean(scopeForValidation && !scopeForValidation.built.includes("nurture")) });
       if (!validation.valid || !validation.plan) {
@@ -53211,7 +54238,8 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           contentHash: contentHash(typedPlan),
           inputHash: process.env.GHL_COMMAND_INTAKE_HASH || saved?.inputHash,
           dependencies: planDependencies(typedPlan),
-          preview: result
+          preview: result,
+          scope: scopeForValidation
         });
         const deps = makeExecuteDeps(client, builderClient, activeLocation, registry2);
         const gatedWorkflowRefs = new Set(result.workflows.filter((w) => w.gatedBy.length > 0).map((w) => w.ref));
@@ -53823,7 +54851,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod81, customFieldItemSchema, sleep6;
+var import_zod81, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -53869,6 +54897,13 @@ var init_intake_to_build = __esm({
       picklistOptions: import_zod81.z.array(import_zod81.z.string()).optional()
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
+    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. Open the client's Review screen: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
+    WHOLE_PRESET_NOT_KEPT = "Note: an earlier build on this client used everything in the preset, and that choice was not kept, so the Review screen ticks only what they bought. Tick everything again if that is still what you want.";
+    notConfirmedAsk = (locationId2) => {
+      const sp = readSavedPlan(locationId2);
+      const fromPreset = typeof sp?.plan?.preset === "string";
+      return sp && !sp.scope && fromPreset ? `${NOT_CONFIRMED_SCOPE} ${WHOLE_PRESET_NOT_KEPT}` : NOT_CONFIRMED_SCOPE;
+    };
   }
 });
 
@@ -53915,7 +54950,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env2 = process
     }
     const reader = token2 ? new GHLClient({ apiKey: token2.apiKey, locationId: loc }) : client;
     return refuseUnseenFindings2((path40, params) => reader.get(path40, params ? { params } : void 0), loc, findings);
-  });
+  }, () => client.defaultLocationId);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
   registerDailyBriefTools(wrap(DAILY_BRIEF_MODULE), registry2);