@elitedcs/ghl-mcp 3.84.1 → 3.84.3

package/dist/index.js

@@ -948,20 +948,33 @@ var init_token_registry = __esm({
         const token2 = this.data.tokens[locationId2];
         if (!token2) return false;
         if (token2.companyId === companyId) return true;
+        const previous = token2.companyId;
         token2.companyId = companyId;
         this.save();
+        if (this.lastSaveError) {
+          if (previous === void 0) delete token2.companyId;
+          else token2.companyId = previous;
+          return false;
+        }
         return true;
       }
       /**
-       * Remove a location from the registry
+       * Remove a location from the registry. Returns true only when the removal
+       * reached the key file on disk: save() swallows a write failure into
+       * lastSaveError, and a key still sitting in .ghl-tokens.json comes back in
+       * full at the next start. A caller that reports "Removed" must not be told
+       * that by a delete from an in-memory map alone.
        */
       removeLocation(locationId2) {
-        if (this.data.tokens[locationId2]) {
-          delete this.data.tokens[locationId2];
-          this.save();
-          return true;
+        const existing = this.data.tokens[locationId2];
+        if (!existing) return false;
+        delete this.data.tokens[locationId2];
+        this.save();
+        if (this.lastSaveError) {
+          this.data.tokens[locationId2] = existing;
+          return false;
         }
-        return false;
+        return true;
       }
       /**
        * List all registered locations
@@ -2610,19 +2623,27 @@ ${errorBody}`
         const result = await this.updateWorkflow(workflowId, { status: "published", triggers });
         let returned = null;
         let readBackFailed = null;
+        let savedSteps = null;
+        let savedTriggers = null;
         try {
           const after = await this.getWorkflow(workflowId);
           returned = typeof after.status === "string" ? after.status : null;
+          savedSteps = (after.workflowData?.templates ?? []).length;
+          savedTriggers = after.triggers ?? [];
         } catch (e) {
           readBackFailed = e instanceof Error ? e.message : String(e);
           returned = isRecord2(result) && typeof result.status === "string" ? result.status : null;
         }
+        const activeTriggers = savedTriggers ? savedTriggers.filter((t) => t.active === true).length : null;
+        const inactiveTriggers = savedTriggers ? savedTriggers.filter((t) => t.active === false).length : 0;
         const publish_check = {
           published: returned === "published",
           status_returned: returned ?? "(GHL returned no status)",
           status_source: readBackFailed ? "the publish response (re-read failed)" : "the saved workflow, read back",
-          steps: steps.length,
-          triggers: triggers.length
+          counts_source: savedTriggers ? "the saved workflow, read back" : "the read taken BEFORE the write (the re-read failed, so these counts do not prove what is saved)",
+          steps: savedSteps ?? steps.length,
+          triggers: savedTriggers ? savedTriggers.length : triggers.length,
+          triggers_active: activeTriggers
         };
         if (readBackFailed) {
           publish_check.warning = `NOT VERIFIED. The publish was accepted but reading the workflow back failed (${readBackFailed}), so this status is only what the publish call echoed, not the saved state. Confirm with get_workflow_full.`;
@@ -2630,7 +2651,10 @@ ${errorBody}`
         if (returned !== "published") {
           publish_check.warning = `NOT LIVE. GHL returned status ${returned === null ? "nothing" : `"${returned}"`} rather than "published", so do not report this workflow as running.`;
         }
-        if (triggers.length === 0) {
+        if (returned === "published" && inactiveTriggers > 0) {
+          publish_check.warning = `TRIGGER NOT ACTIVE. The workflow saved as "published", but ${inactiveTriggers} of ${savedTriggers.length} trigger(s) still read active:false, so ${inactiveTriggers === savedTriggers.length ? "nothing enrols contacts into it on its own" : "those triggers enrol nobody"}. Check the trigger in GHL before reporting this workflow as running.`;
+        }
+        if ((savedTriggers ? savedTriggers.length : triggers.length) === 0) {
           publish_check.note = "This workflow has NO TRIGGER, so nothing starts it on its own. That is only correct if another workflow adds contacts to it; otherwise its trigger did not save.";
         }
         return isRecord2(result) ? { ...result, publish_check } : { result, publish_check };
@@ -3053,7 +3077,7 @@ function commandOsUpgradeMessage(toolName) {
     "Everything else works exactly as it does now: audits, builds, fixes, Blueprint and multi-location are all part of what you have."
   ].join("\n");
 }
-var COMMAND_OS_ONLY_TOOLS, COMMAND_OS_ONLY_MODULES, COMMAND_OS_CATALOGUE, CATALOGUED_TOOLS, COMMAND_OS_DESC_SUFFIX;
+var COMMAND_OS_ONLY_TOOLS, COMMAND_OS_ONLY_MODULES, COMMAND_OS_DESC_SUFFIX;
 var init_product_manifest = __esm({
   "src/product-manifest.ts"() {
     "use strict";
@@ -3084,489 +3108,6 @@ var init_product_manifest = __esm({
       // ruling, same lane; none of its 12 tools has ever shipped.
       "voice-ai"
     ]);
-    COMMAND_OS_CATALOGUE = [
-      {
-        name: "connect_google_calendar",
-        does: "Connects your own Google Calendar with read-only access. The first run opens Google sign-in and saves nothing. The second run saves the connection only after reading your calendars and tells you which ones it found. You can check the connection using only the last four characters or disconnect and revoke access.",
-        why: "Command OS connects your own systems to help you run your business. The $97 GHL Command product manages client accounts in GoHighLevel and does not connect your personal Google Calendar.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "read_my_calendar",
-        does: "Reads today or the week ahead from your own Google Calendar. Each entry shows its time in your timezone and the other people attending. All-day entries say all day. An empty window says so. An unknown calendar name returns the calendars you can read.",
-        why: "Command OS helps you plan your own day across your business using your personal calendar. The $97 GHL Command product reads appointments inside a client's GoHighLevel account.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "extract_brand",
-        does: "Reads a website and writes down its brand: the six colours, the two typefaces, the corner radius, the logo and the tone of the headlines, each with where it came from and a confidence score. The client's own site by default; a rendered pass in the automation browser when the page is built by scripts.",
-        why: "It reads a website the agency does not own and stores the brand on the agency's machine for every deck, page and report that follows. Nothing in the $97 product reads a brand or keeps one.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "import_reference_look",
-        does: "Fetches one of the reference looks (Apple, Notion, Stripe and about seventy more) onto this machine as a starting palette: colours, type and shape only, never a logo, never the reference brand's name in the output. The client's own logo and accent then override it.",
-        why: "A starting look for a client with no website yet is agency design work, not GoHighLevel account work; the $97 product has nowhere to keep one.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_brands",
-        does: "Lists every brand on this machine \u2014 extracted from client sites, imported reference looks and the house looks \u2014 with scheme, accent, faces and confidence, plus the reference looks that can be imported.",
-        why: "The brand shelf is the agency's, across every client. Nothing in the $97 product has one.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_brand",
-        does: "Reads one brand in full: colours with their OKLCH twins and contrast-corrected text shades, faces with what actually renders when a face is licensed, logo, voice, provenance for every value.",
-        why: "It is the record every design job reads from; it lives with the agency, not in any client's GoHighLevel.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "set_brand",
-        does: "Changes one or more values on a stored brand \u2014 a new accent, a font swap, a corrected name \u2014 and records who changed it and when in the brand's provenance. Never invents a value; a field left out is left alone.",
-        why: "Editing the agency's own brand shelf is agency work; the $97 product keeps no brand to edit.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "compose_design_brief",
-        does: "Turns a brand plus a short brief (headline, points, audience, the one job) into the pack your own Claude writes a deck, a landing page or a report from: the brand tokens ready to paste, the rules it will be graded on with their thresholds, the output contract, and the sameness tells as banned. Calls no model itself.",
-        why: "The brief is the whole point of Design Studio: brand times rules, written once so every design job starts from the same place. Nothing in the $97 product composes one.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "lint_design_contract",
-        does: "Checks a written HTML file honours the output contract before it is graded: the section and role markers are present and consistent, no outside scripts, one h1 on a page, every image described. Returns the fix list in plain words; a file that fails is not graded on design rules.",
-        why: "It is the gate between your Claude's draft and the verifier; it exists only because the verifier does.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "verify_design",
-        does: "Opens a finished deck or page in the automation browser and measures it against the design rules: type sizes, contrast, line length, spacing, safe zones, whitespace and accent share from real pixels, landmarks, forms, the meta layer, and the sameness tells. Every rule comes back on its own line as measured, a proxy or a judgment call, with the value and the evidence; nothing is hidden. Writes a report you can open.",
-        why: "This is the piece the free skill it was modelled on never had: proof instead of a checklist the model ticks itself. Nothing in the $97 product renders or measures a design.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "grade_copy",
-        does: "Grades whether a page would actually persuade the reader it is for, scoring the four jobs copy must do in reading order \u2014 stop the right prospect, make them feel understood, earn belief, make the next step obvious \u2014 and naming the FIRST place they fall off, with a rewrite of that one thing.",
-        why: "Every design rule in the module measures craft and none of them asks whether anyone would care; a page can pass all of them and be unsellable. This is the other half, and it runs on the operator's own Claude subscription.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "check_page_theme",
-        does: "Reads a GoHighLevel page back after Page Studio saved it and measures whether the brand actually landed: each of the six slots must be present in the saved data and the donor template's own colour or face must be gone. Confirms the page's public preview address by fetching it, so the design rules can be graded on the real draft.",
-        why: "A snapshot image cannot show a half-finished swap, and a 200 from a save is not evidence. This is the read-back that turns \u201Cthe draft wears the brand\u201D from a claim into a measurement.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "brand_to_theme",
-        does: "Hands Page Studio the six-slot theme a stored brand maps to \u2014 accent, soft tint, surface, text, heading face, body face \u2014 with the warnings about what the donor template cannot carry (a dark scheme, a licensed face). Page Studio's own tools then write the draft.",
-        why: "It joins the agency's brand shelf to the page writer the $97 product already has; the shelf is the Command OS half.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_agency_profile",
-        does: "Reads your agency's own details \u2014 the brand clients see, the offers you sell and the price below which you do not take the work, who your messages come from, your delivery SOPs, and your staff.",
-        why: "The agency's own facts are the thing Command OS adds. GHL Command works on a client's account; this describes the business doing the work.",
-        layer: "Layer 1 \u2014 Context"
-      },
-      {
-        name: "set_agency_profile",
-        does: "Saves or updates those details. Send only what is changing; anything you leave out stays as it was, and passing nothing for a field clears just that field.",
-        why: "Same store as the read. Writing the agency's own facts is not part of managing a client's GoHighLevel account.",
-        layer: "Layer 1 \u2014 Context"
-      },
-      {
-        name: "get_income_sources",
-        does: "Reads every source of income you have recorded \u2014 clients whose GoHighLevel accounts you run, software subscribers, event fees \u2014 the offer they are on, what they pay, monthly or one-time, when it started and renews, who runs the account \u2014 plus your recurring revenue stated as a floor, with the number of income sources that have no price recorded.",
-        why: "A roster of who pays you and for what is agency data, not GoHighLevel data. Nothing in the $97 product has ever had it.",
-        layer: "Layer 1 \u2014 Context"
-      },
-      {
-        name: "set_income_source",
-        does: "Records or updates ONE source of income \u2014 a client whose GoHighLevel account you run, a software subscriber, an event fee. Safe to call repeatedly \u2014 it never overwrites a field you did not mention.",
-        why: "As above; it is the write half of the same agency-side record.",
-        layer: "Layer 1 \u2014 Context"
-      },
-      {
-        name: "client_this_week",
-        does: "Answers \u201Cwhat should I be doing for this client this week?\u201D from what you already have: the agreement, where their build has stopped, what is waiting on you rather than on Command OS, a renewal that is close, whether the price is under your own floor, and the SOP that applies. Anything it cannot know, it says plainly instead of guessing.",
-        why: "It only works because the agency profile and the client roster exist, and both are Command OS. It is the win the PRD names for this layer.",
-        layer: "Layer 1 \u2014 Context"
-      },
-      {
-        name: "build_audit_report",
-        does: "Turns an audit you have already run into a document you can put in front of a client: what is broken in plain English, what it is costing, ranked so the quick wins come first. Every number carries the assumption behind it, and no figure exists without your own close rate and client value.",
-        why: "Finding the problem is GHL Command and stays free-tier. Packaging it as a deliverable an agency charges for, priced from the agency's own numbers, is the agency product.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "daily_brief",
-        does: "Answers \u201Cwhat needs me today?\u201D across every client at once: today\u2019s appointments first, then what is waiting on you, what Command OS is running, renewals inside thirty days, clients paying under your own floor, and new leads. Any account it could not read is named with the reason, so \u201Cnothing needs you\u201D only ever covers the accounts it actually got into. It ends by naming each client\u2019s email addresses and website and asking your own Gmail, Google Calendar and Slack, through the connectors your assistant already has, which client mail is waiting on you and what your own day holds.",
-        why: "GHL Command answers questions about the ONE sub-account you are already looking at. Nothing in the $97 product reads every client together, and nothing in it knows your price floor or your renewal dates to have an opinion about what matters this morning.",
-        layer: "Layer 3 \u2014 Intelligence"
-      },
-      {
-        name: "build_site_audit_report",
-        does: "Turns a read-through of a PROSPECT\u2019s website into the assessment document you put in front of them: what contradicts itself, what a customer cannot find, each one carrying the quote and the page it came from, ranked. It never invents money, and it returns what the crawl refused so you can see what was thrown out rather than wonder what was missed.",
-        why: "This is the paid deliverable, and it is about a business whose GoHighLevel account you do not have \u2014 there is nothing in the $97 product that reads a stranger\u2019s website or knows the rule that your own price floor must never price their findings.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "save_assessment",
-        does: "Saves an assessment into your own GoHighLevel: the prospect as a contact, the whole answer sheet as a note you can read in plain English, and the deal as an opportunity on your Assessments pipeline. If the record is too long for one note it is split and reassembled on load, never truncated.",
-        why: "It is your business's filing cabinet, not ours \u2014 we hold nothing. That is also what lets a remote employee run the assessment on Tuesday and the owner read it on Wednesday, using the GoHighLevel logins and permissions they already have.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "load_assessment",
-        does: "Loads a saved assessment back off a contact so somebody else can pick it up, returning the most recent COMPLETE answer sheet. If a note was edited or a piece is missing it returns nothing at all rather than a partial record.",
-        why: "A half-loaded assessment overwriting a real one is the worst thing this could do to an agency, so refusing is the feature. Nothing in the $97 product stores an interview or knows what a complete one looks like.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "attach_assessment",
-        does: "Joins a saved assessment to a client, so the numbers from the sales conversation follow them into the intake, the Review and their Blueprint. It fills only the answers the assessment actually holds, never puts a free-text answer into a fixed-choice question, and prices a feature in \u201CAvailable next\u201D only where the assessment priced it. A snapshot, taken when you attach; nothing is written to the client's account.",
-        why: "It is the join between the agency's own sales conversation and the account it then builds, and both halves are Command OS. The $97 product has no assessment, no Review and no Blueprint to carry a number into.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_assessments",
-        does: "Lists the assessments on your Assessments pipeline: who each is for, what stage it is at, and what the deal is worth.",
-        why: "This is the agency owner's board and the list a remote employee picks their next job from. It reads across your own prospects, which is the agency's business rather than any one client's account.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "read_assessment_transcript",
-        does: "Turns a recording of the meeting into assessment answers. Every answer has to carry the owner's own words, and it checks those words actually appear in the transcript \u2014 anything citing a sentence that is not there is thrown out. Anything worked out rather than heard, like two or three calls a week becoming eleven a month, is held back for you to confirm.",
-        why: "It is the guard between a recording and a document you hand a prospect. Nothing in the $97 product reads a conversation, and nothing in it has a reason to refuse a number that sounds right.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "write_assessment_report",
-        does: "Writes the finished assessment as a complete page on your own machine, in your branding, ready to hand to the prospect. It loads nothing from anywhere, so it opens on any host in any browser; it is marked not-to-be-indexed and given a random filename, because it carries another business's revenue and customer numbers.",
-        why: "We never publish it. It is your prospect's data on your letterhead, so where it goes is yours to decide \u2014 and nothing in the $97 product produces a client-facing document at all.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "audit_my_delivery",
-        does: "Audits the operator\u2019s OWN agency rather than a client: how many hours a month each recurring job costs them, ranked worst first, with the ones Command OS can already take off them named and the ones nothing handles said plainly. A job nobody can put minutes against is named as needing measuring and never estimated, and the answers save between sittings.",
-        why: "It is a diagnosis of the agency\u2019s own week. The $97 product manages one GoHighLevel account and has no concept of an agency\u2019s delivery, no list of what the agency itself does, and nothing to weigh it against \u2014 and the \u201Chandled by\u201D column only means anything to somebody who has the modules it names.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "plan_automation",
-        does: "Plans one of the agency\u2019s OWN automations out of the tools they already have. It refuses a plan that targets an id nobody looked at, a plan whose steps cannot run in any order, a step naming a tool that does not exist, and a step with no reason on it \u2014 all before the operator is asked to approve anything. It writes nothing itself.",
-        why: "The $97 product runs tools one at a time against the account in front of it. It has no concept of a multi-step build belonging to an AGENCY, no record of what was explored, and nothing that could refuse a plan on the operator\u2019s behalf.",
-        layer: "Layer 5 \u2014 Build"
-      },
-      {
-        name: "approve_automation",
-        does: "Records that the operator has read this exact plan and approved it. The approval carries the plan\u2019s fingerprint, so changing a single argument afterwards voids it \u2014 the plan they read and the plan that runs have to be the same document. Nothing may be recorded as applied before this.",
-        why: "This is the agency\u2019s own approval gate over its own build, not an action inside one client\u2019s account. Nothing in the $97 product has a plan to approve.",
-        layer: "Layer 5 \u2014 Build"
-      },
-      {
-        name: "record_automation_step",
-        does: "Records what happened when a step ran: applied, with how to undo it, or failed, with what the account actually said. A step cannot be recorded as done without its undo, and cannot be recorded before the thing it depends on has run.",
-        why: "It maintains the agency\u2019s own rollback record across a build that runs over days. The $97 product has no build that spans days and nothing that would hold the undo list.",
-        layer: "Layer 5 \u2014 Build"
-      },
-      {
-        name: "abandon_automation",
-        does: "Stops one of the agency\u2019s own builds for good. It does not undo anything and does not pretend to \u2014 it hands back every step still applied to the account, so abandoning a plan and cleaning up after it stay two separate acts. A reason is required.",
-        why: "It closes out the agency\u2019s own build record. The $97 product has no build to abandon and nothing that would know what was left behind.",
-        layer: "Layer 5 \u2014 Build"
-      },
-      {
-        name: "automation_status",
-        does: "Where the agency\u2019s own builds actually are. A build that stopped is reported as STALLED, naming the step and what came back, never as a percentage \u2014 and it hands back the undo list newest first.",
-        why: "It reports across the agency\u2019s builds rather than inside one client\u2019s account, and the $97 product has nothing whose progress it could report.",
-        layer: "Layer 5 \u2014 Build"
-      },
-      {
-        name: "connect_system",
-        does: "Stores a connector's credentials on YOUR machine so Command OS can read that system: Stripe for who pays you what and when, Slack for delivering the brief and reading what is waiting. Written beside your GoHighLevel credentials, readable only by you, never sent anywhere and never returned by any tool.",
-        why: "The $97 product manages one GoHighLevel account. Reading your Stripe or your Slack is about the agency's own business, not a client's account.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "post_to_slack",
-        does: "Posts a message to one of your Slack channels, so the morning brief or a build that stopped lands where you already look instead of waiting to be asked for. Public channels need no invite; a private one needs the bot invited first, and the reply says so.",
-        why: "It delivers the agency-wide brief into the agency's own Slack. The $97 product has no brief to deliver and no idea of a system outside the one GoHighLevel account it is pointed at.",
-        layer: "Layer 3 \u2014 Intelligence"
-      },
-      {
-        name: "read_slack",
-        does: "Shows what is waiting unanswered in Slack: messages from people in the channels the bot has been invited to that nobody replied to, newest first, naming which channels it read and which it could not.",
-        why: "It reads the agency's own team channels to feed the morning brief. Nothing in the $97 product reads Slack or has a brief to feed.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "list_connected_systems",
-        does: "Which systems Command OS can read on this machine, and when each was connected. Never shows a key.",
-        why: "It reports on the agency's own stack rather than a client's account, and the $97 product has no concept of a system beyond the one GoHighLevel account it is pointed at.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "disconnect_system",
-        does: "Removes a connector's credentials from this machine. Anything already written into your income records stays.",
-        why: "It removes access to the agency's own billing system, which is a thing the $97 product never had access to in the first place.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "sync_stripe",
-        does: "Reads your Stripe and fills in what your records do not know: what each person or company pays you, when they renew, and who owes you money. Handles clients whose GoHighLevel accounts you run and people who simply pay you, like software subscribers and event fees. Shows you every change before making any, and reports a customer it cannot match to one of your clients rather than guessing.",
-        why: "This is the record your daily brief already reads and finds empty. Nothing in the $97 product reads your billing, and nothing in it knows which of your clients a payment belongs to.",
-        layer: "Layer 2 \u2014 Data"
-      },
-      {
-        name: "list_knowledge_bases",
-        does: "Lists the knowledge bases on the sub-account you are pointed at, with the count against GoHighLevel's limit of fifteen per sub-account, so you know there is room before you make one.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_knowledge_base",
-        does: "Reads one knowledge base by id: its name, description and dates.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_knowledge_base",
-        does: "Creates an empty knowledge base with a name and a description of what it will hold. Nothing a client sees changes until a bot reads from it.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_knowledge_base",
-        does: "Renames or re-describes an existing knowledge base. What it has learned is untouched.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_knowledge_base",
-        does: "Deletes a knowledge base and everything in it. GoHighLevel has no undo, so the literal word DELETE is required, and any bot still listing the id keeps listing it and simply knows less.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "crawl_kb_website",
-        does: "Reads a website for a knowledge base. Exact mode trains that one page at once. Path and Domain discover the pages under a path or the whole site and train nothing until you name them. It waits for discovery and returns the page list, saying plainly when a large site may still be listing.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "train_kb_urls",
-        does: "Trains the pages you named from a discovery and waits until GoHighLevel reports them learned, so the next step never runs against a page that is still pending.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_kb_crawl_status",
-        does: "Reports where a crawl stands: pages discovered, trained and pending, and whether it has settled or is still working.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_kb_urls",
-        does: "Lists every trained page in a knowledge base, each with a link to the exact text the bot extracted from it. That link is the answer to what does it know, read before anything is promised.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_kb_url",
-        does: "Removes trained pages from a knowledge base so the bot stops answering from them. The literal word DELETE is required.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_kb_faqs",
-        does: "Lists the written question-and-answer pairs in a knowledge base.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_kb_faq",
-        does: "Adds one question and its answer to a knowledge base, word for word as the bot should give it.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_kb_faq",
-        does: "Replaces one written answer in a knowledge base with new wording; every other answer and every trained page stays as it was.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_kb_faq",
-        does: "Removes one written answer from a knowledge base. The literal word DELETE is required.",
-        why: "A knowledge base is what an AI employee is allowed to know. Nothing in the $97 product reads, makes or trains one; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_conversation_agents",
-        does: "Lists the Conversation AI agents on the sub-account: name, mode, channels and which bot is primary on each channel.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_conversation_agent",
-        does: "Reads one agent in full: personality, goal, instructions, knowledge bases, channels, mode, wait and sleep settings.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_conversation_agent",
-        does: "Builds an agent from your words: its name, who it is, what every conversation is for, the rules, the channels it may work on and the knowledge bases it may read. It is created in suggestive mode, drafting for a human, or switched off; auto-pilot is never offered at creation.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_conversation_agent",
-        does: "Changes an agent in place. It reads the agent first and sends the whole prompt back with your change, because GoHighLevel requires personality, goal and instructions on every update. Auto-pilot is switched on here; nothing checks that anyone watched the bot first, so that discipline is yours.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_conversation_agent",
-        does: "Deletes an agent and its actions. Irreversible; the literal word DELETE is required. If it was primary on a channel, that channel has no bot afterwards.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_conversation_actions",
-        does: "Lists an agent's actions: what it may do beyond replying, such as booking, handing to a person, firing a workflow, following up, or stopping.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_conversation_action",
-        does: "Adds one action to an agent: book into a calendar, hand to a named person, fire a workflow, update a contact field, follow up later, transfer to another bot, or stop for good. It refuses the shapes GoHighLevel's server fails on, such as a handover with nobody to hand to, before anything is written.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_conversation_action",
-        does: "Changes one of an agent's actions in place, with the same refusals as creating one.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_conversation_action",
-        does: "Removes an action from an agent. The literal word DELETE is required. A goodbye that stops the bot cannot be removed; GoHighLevel refuses, and it leaves with the agent.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_conversation_followup",
-        does: "Sets how an agent's follow-ups behave: whether a follow-up may move to another channel, whether it respects working hours and which hours, and whether the contact's or the business's timezone applies. It applies to follow-up actions the bot already has.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_agent_generations",
-        does: "Shows why the bot said what it said, for one message: the exact prompt it ran, the intent it read, its reply, which written answers and website chunks it used, the actions it took and the history it saw. This is the proof that it answered correctly.",
-        why: "The bot itself. Nothing in the $97 product builds, changes or reads a Conversation AI agent; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02, so it never moves the $97 price.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "install_ai_employee_demo",
-        does: "Sets up the agency's demo sub-account once: creates the demo contact fields the demo bot's prompt reads, creates the demo bot or adopts one you already have, records which number prospects will text, and tells you the one click left, making that bot primary on SMS in GoHighLevel's screen. It asks for the words DEMO ACCOUNT in writing, your statement that this is not a client's account, refuses a key that can list sub-accounts (an agency-level key) and refuses to guess when that check cannot be made, so the designation is made with the account's own key, and records a fingerprint of that key; that designation and that key are what every other demo tool checks: a sub-account that was never installed is refused before anything is read or written, even when it is the active one.",
-        why: "The sales demo of the AI employee, run on the agency's own demo sub-account. Nothing in the $97 product prepares a demo for a prospect or puts a bot back afterwards; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "prepare_ai_employee_demo",
-        does: "Prepares a demo for one prospect from their website, their business name and the phone they will text from. It crawls their site into a knowledge base made for this run, writes the demo fields onto their contact and reads them back, saves the demo bot's before-state, points the bot at the knowledge base, and returns the number to text. Say arm it and the bot answers on its own; otherwise the bot's mode is left exactly as it was, and the tool reports what that is: silent, drafting, or already on auto-pilot and answering, with a warning in that last case.",
-        why: "The sales demo of the AI employee, run on the agency's own demo sub-account. Nothing in the $97 product prepares a demo for a prospect or puts a bot back afterwards; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "show_ai_employee_demo",
-        does: "Shows the demo conversation as it happens, after proving the key in hand reads the demo sub-account and is the very key the account was designated with (any other key, another sub-account's or an agency-level one swapped in for a moment, is refused by comparison): the most recent messages of this run (ten unless you ask for more, up to forty), the prospect's texts and the bot's replies, oldest first, bound to the one contact the demo was prepared for; anything dated before the run began or after it ended is left out, with a fifteen-second allowance for clock differences, and it says how many were left out on each side, so end the demo after the last reply has arrived; a message with no date is listed separately as unplaced, never inside the run.",
-        why: "The sales demo of the AI employee, run on the agency's own demo sub-account. Nothing in the $97 product prepares a demo for a prospect or puts a bot back afterwards; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "end_ai_employee_demo",
-        does: "Ends a demo: puts the demo bot back to its saved before-state, reads it back independently and compares every field that changes behaviour, deletes the knowledge base made for the run, and closes the run. The prospect's contact and the transcript stay. The literal word END is required.",
-        why: "The sales demo of the AI employee, run on the agency's own demo sub-account. Nothing in the $97 product prepares a demo for a prospect or puts a bot back afterwards; the AI employee is Command OS work from the first step, on Jerry's ruling of 2026-09-02.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "check_voice_ai_readiness",
-        does: "Answers one question before any phone agent is built: can a call land on this sub-account? It reads the numbers it owns, which agent answers each, the number pools and the agents, and when nothing can ring it hands back the exact step to take in GoHighLevel.",
-        why: "A phone agent with no number is a prompt nobody can call, and GoHighLevel will let you build one all day. Nothing in the $97 product reads a Voice AI agent; the AI employee is Command OS work on Jerry's ruling of 2026-09-02.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "list_voice_agents",
-        does: "Lists the phone agents on a sub-account: name, the business each speaks for, the number each answers on, its language, its call cap and how many things it may do mid-call.",
-        why: "The survey before a build: which agent already answers which number. The $97 product has no view of Voice AI at all.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_voice_agent",
-        does: "Reads one phone agent in full: its greeting, its prompt, its voice and language, how quickly it speaks, the call cap, the number it answers on, what happens after a call, its working hours and every action with its settings.",
-        why: "The stored truth of a phone agent, including the generic prompt GoHighLevel writes when nobody gave one. Command OS only, with the rest of the AI employee.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_voice_agent",
-        does: "Builds a phone agent from your words: its name, the business, the greeting it speaks, its prompt, voice, language, patience, call cap, working hours and what runs when a call ends. It is born without a number, so it cannot take a call until you bind one, and it is kept out of the fallback rota while you are still building it.",
-        why: "The phone half of the AI employee. Every default here is chosen so a half-built agent cannot pick up a real call; the $97 product builds no agent of any kind.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_voice_agent",
-        does: "Changes any part of a phone agent, including binding it to a number this sub-account owns that no other agent answers on, or unbinding it. Sends only what changes, reads the agent back and reports the fields that actually differ.",
-        why: "Binding a number is the moment an agent goes live to callers, and GoHighLevel will silently let a second agent take a number away from the first. This refuses that. Command OS only.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_voice_agent",
-        does: "Removes a phone agent and everything it could do, after saying which number it was answering. Irreversible; the literal DELETE is required.",
-        why: "Disposal of a Command OS asset; the $97 product never created one.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_voice_action",
-        does: "Reads one thing a phone agent may do mid-call, with its settings: the transfer number, the text it sends, the field it fills, the calendar it books, the workflow it starts, the knowledge base it asks or the API it calls.",
-        why: "Part of the phone agent's build surface, which exists only in Command OS.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "create_voice_action",
-        does: "Gives a phone agent something it may do mid-call: transfer to a person, text the caller, fill a contact field from what was said, book on a calendar, start a workflow, answer from a knowledge base, or call an outside API. Checks the name and the shape first, refuses a draft workflow and a second extraction into a field the agent already fills, and refuses the two settings that crash GoHighLevel's server; an unknown calendar, knowledge base or field id is refused by GoHighLevel itself, which names it.",
-        why: "Wiring an agent to a calendar, a workflow or a person is the part that books, fires or hands off for real. GoHighLevel refuses an unknown id but accepts a draft workflow that will never run, and saves a crashed custom action anyway; this catches both. Command OS only.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "update_voice_action",
-        does: "Replaces what one mid-call action does, with the same checks as creating one. GoHighLevel takes the whole action on update, so the complete settings travel with every change.",
-        why: "Re-pointing what an agent does on a live line; Command OS only.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "delete_voice_action",
-        does: "Removes one thing a phone agent may do. The agent keeps answering without it. The literal DELETE is required.",
-        why: "Part of the phone agent's build surface; Command OS only.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_voice_call_logs",
-        does: "Lists the calls an agent took, each with its transcript, summary, length, the caller's number, the actions it ran and the data it pulled out. Filter by agent, caller, live or test calls, a date window or action type.",
-        why: "The proof. Not that the agent exists, but the words it said to a real caller, read back. Nothing in the $97 product reads a call log.",
-        layer: "Layer 4 \u2014 Delivery"
-      },
-      {
-        name: "get_voice_call_log",
-        does: "One call in full: the transcript line by line, the summary, the length, who called, each action with the moment it fired, and the data extracted.",
-        why: "What you show a client instead of saying it works. Command OS only.",
-        layer: "Layer 4 \u2014 Delivery"
-      }
-    ];
-    CATALOGUED_TOOLS = new Set(COMMAND_OS_CATALOGUE.map((t) => t.name));
     COMMAND_OS_DESC_SUFFIX = " [NOT INCLUDED IN THIS LICENCE \u2014 calling this returns a notice, it will NOT perform the action.]";
   }
 });
@@ -5197,8 +4738,40 @@ function registerCalendarTools(server2, client) {
           `update_calendar: could not read calendar ${args.calendarId} before updating it (${e instanceof Error ? e.message : String(e)}). Refusing to write: GHL's calendar update does not merge, so a partial write here would silently reset this calendar's slot length, buffer and availability hours.`
         );
       }
+      if (existing && existing.calendarType === "event") existing = { ...existing, teamMembers: void 0 };
+      if (existing && args.teamMembers === void 0 && Array.isArray(existing.teamMembers)) {
+        const stripped = existing.teamMembers.map((m) => {
+          const r = m ?? {};
+          const configs = Array.isArray(r.locationConfigurations) ? r.locationConfigurations.map((c) => {
+            const x = c ?? {};
+            return { kind: x.kind, position: x.position, ...typeof x.location === "string" ? { location: x.location } : {} };
+          }) : r.locationConfigurations;
+          return { userId: r.userId, priority: r.priority, isPrimary: r.isPrimary, selected: r.selected, locationConfigurations: configs };
+        });
+        const parsed2 = import_zod12.z.array(CalendarTeamMemberSchema).safeParse(stripped);
+        if (!parsed2.success) {
+          const issue = parsed2.error.issues[0];
+          throw new Error(
+            `update_calendar: this calendar's stored team members cannot be carried over in the shape GoHighLevel's update validates (${issue ? `${issue.path.join(".")}: ${issue.message}` : "unknown"}). Nothing was changed, because a partial write here would unassign the staff. Pass teamMembers explicitly (userId, priority 0/0.5/1, isPrimary, selected, locationConfigurations with at least one entry) and run the update again.`
+          );
+        }
+        existing = { ...existing, teamMembers: parsed2.data };
+      }
       const body = buildUpdateCalendarBody(mergeCalendarUpdate(existing, args));
-      return await client.put(`/calendars/${args.calendarId}`, { body });
+      const updated = await client.put(`/calendars/${args.calendarId}`, { body });
+      let storedTeamMembers;
+      try {
+        const after = await client.get(`/calendars/${args.calendarId}`);
+        const cal = after?.calendar ?? after;
+        storedTeamMembers = Array.isArray(cal?.teamMembers) ? cal.teamMembers.length : 0;
+      } catch (e) {
+        storedTeamMembers = `NOT VERIFIED \u2014 the calendar could not be read back after the update (${e instanceof Error ? e.message : String(e)}), so its team-member assignment is unconfirmed. Run get_calendar to check.`;
+      }
+      return {
+        updated,
+        stored_team_members: storedTeamMembers,
+        stored_team_members_source: "GET /calendars/{id} taken AFTER the update \u2014 a read of what GoHighLevel now holds, not the update's own response."
+      };
     }
   );
   safeTool(
@@ -5401,7 +4974,13 @@ var init_calendars = __esm({
       "appointmentPerDay",
       "allowBookingAfter",
       "allowBookingAfterUnit",
-      "availabilityType"
+      "availabilityType",
+      "teamMembers",
+      "description",
+      "slug",
+      "widgetSlug",
+      "eventTitle",
+      "eventColor"
     ];
   }
 });
@@ -5454,11 +5033,11 @@ function registerLocationTools(server2, client) {
       if (email !== void 0) body.email = email;
       if (settings !== void 0) body.settings = settings;
       const BRAND_FIELDS = ["name", "address", "city", "state", "postalCode", "country", "phone", "website", "email"];
-      const isRec = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+      const isRec2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
       let current = null;
       try {
         const raw = await client.get(`/locations/${locationId2}`);
-        current = isRec(raw) && isRec(raw.location) ? raw.location : isRec(raw) ? raw : null;
+        current = isRec2(raw) && isRec2(raw.location) ? raw.location : isRec2(raw) ? raw : null;
       } catch {
         current = null;
       }
@@ -5484,13 +5063,13 @@ Nothing was changed. Pass overwriteBusinessInfo: true if you intend to change th
       const result = await client.put(`/locations/${locationId2}`, { body });
       if (!current) {
         return {
-          ...isRec(result) ? result : { result },
+          ...isRec2(result) ? result : { result },
           business_record_note: `Could not read ${locationId2} before writing, so the A2P brand check did not run. If this account has a registered brand, verify its details in GHL.`
         };
       }
       if (changes.length > 0) {
         return {
-          ...isRec(result) ? result : { result },
+          ...isRec2(result) ? result : { result },
           business_record_change: {
             changed: changes,
             brandId: brandId || "(no registered A2P brand on this sub-account)",
@@ -8255,6 +7834,16 @@ function normalizeCrawlStatus(raw) {
     urls
   };
 }
+function trainedOfRequested(s, urlIds) {
+  const bucketOf = new Map(s.urls.map((u) => [u.id, u.bucket]));
+  const isTrained = (id) => TRAINED_BUCKET.test(bucketOf.get(id) ?? "");
+  const pending = urlIds.filter((id) => !isTrained(id));
+  return {
+    trained: urlIds.filter(isTrained),
+    pending,
+    buckets: [...new Set(pending.map((id) => bucketOf.get(id) ?? "not listed"))]
+  };
+}
 async function readCrawlStatus(client, locationId2, knowledgeBaseId, operationId) {
   return normalizeCrawlStatus(await client.get("/knowledge-bases/crawler/status", { version: AI_API_VERSION, params: { locationId: locationId2, operationId, knowledgeBaseId } }));
 }
@@ -8306,7 +7895,7 @@ async function crawlAndTrain(client, opts) {
   const d = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitDiscover ?? 90, (x) => isSettled(x.status), { operationId, status: typeof rec.status === "string" ? rec.status : "Processing", mode, url: opts.url });
   if (d.pollError) notes.push(`a status poll failed (${d.pollError})`);
   if (!d.settled && d.s.urls.length > 0) notes.push(`${d.s.urls.length} page(s) listed while the operation still read "${d.s.status}" \u2014 the list may be incomplete; the pages below are what was trained`);
-  let trained = 0, trainStatus = "not started", trainSettled = false;
+  let trained = 0, trainedPages = 0, trainStatus = "not started", trainSettled = false;
   const chosen = mode === "Exact" ? [] : pickPages(d.s.urls, opts.maxPages ?? 8);
   if (mode === "Exact") {
     notes.push("Exact mode: the single page trains itself.");
@@ -8314,17 +7903,23 @@ async function crawlAndTrain(client, opts) {
     notes.push("no pages were listed to train");
   } else {
     await client.post("/knowledge-bases/crawler/train", { ...v, body: { locationId: opts.locationId, urlIds: chosen.map((c) => c.id), knowledgeBaseId: opts.knowledgeBaseId, operationId }, noRetry: true });
-    const t = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitTrain ?? 120, (x) => isSettled(x.status) || x.trainedUrlsCount >= chosen.length, { operationId, status: "Training" });
+    const chosenIds = chosen.map((c) => c.id);
+    const t = await settleCrawl(client, sleep7, opts.locationId, opts.knowledgeBaseId, operationId, opts.waitTrain ?? 120, (x) => trainSettledOn(x, chosenIds), { operationId, status: "Training" });
     trained = t.s.trainedUrlsCount;
     trainStatus = t.s.status;
     trainSettled = t.settled;
+    trainedPages = trainedOfRequested(t.s, chosenIds).trained.length;
     if (t.pollError) notes.push(`a training poll failed (${t.pollError})`);
-    if (!t.settled) notes.push(`training still read "${t.s.status}" after ${opts.waitTrain ?? 120}s`);
+    else if (wasStopped(t.s.status)) notes.push(`GoHighLevel stopped this operation ("${t.s.status}"), so nothing here confirms these pages trained`);
+    else if (!t.settled) {
+      const { pending, buckets } = trainedOfRequested(t.s, chosenIds);
+      notes.push(`${pending.length} of ${chosenIds.length} page(s) are still not in a "Trained" bucket after ${opts.waitTrain ?? 120}s (operation reads "${t.s.status}"; those pages read ${buckets.join(", ")})`);
+    }
   }
   const listed = unwrapEnvelope(await client.get("/knowledge-bases/crawler", { ...v, params: { knowledgeBaseId: opts.knowledgeBaseId, locationId: opts.locationId, page: 1, pageLength: 50 } }));
   const rows2 = isRecord4(listed) && Array.isArray(listed.urls) ? listed.urls : [];
   const pages = rows2.filter(isRecord4).map((r) => ({ id: String(r.id ?? r._id ?? ""), url: String(r.url ?? ""), title: typeof r.title === "string" ? r.title : void 0, content: typeof r.content === "string" ? r.content : void 0 }));
-  return { operationId, discovered: d.s.urls.length, discoverStatus: d.s.status, discoverSettled: d.settled, trained, trainStatus, trainSettled, pages, notes };
+  return { operationId, discovered: d.s.urls.length, discoverStatus: d.s.status, discoverSettled: d.settled, trained, trainedPages, trainStatus, trainSettled, pages, notes };
 }
 function registerKnowledgeBaseTools(server2, client, deps = {}) {
   const sleep7 = deps.sleep ?? realSleep;
@@ -8431,13 +8026,19 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
       const startStatus = typeof rec.status === "string" ? rec.status : "Processing";
       const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => isSettled(x.status), { operationId, status: startStatus, mode: option, url });
       const listed = s.urls.length;
+      const outcome = crawlOutcome(s.status, settled);
       return {
         operationId,
         ...s,
         polls,
         settled,
+        outcome,
         ...pollError ? { pollError } : {},
-        next: option === "Exact" ? "This page trains itself \u2014 do NOT call train_kb_urls on it (GoHighLevel answers 500). Check list_kb_urls in a moment." : pollError ? `A status poll failed (${pollError}); discovery may still be running \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Discovery finished with ${listed} page(s). Pick the ones the agent should know and pass their ids to train_kb_urls with operationId "${operationId}".` : listed > 0 ? `${listed} page(s) listed so far, but the operation still reads "${s.status}" after ${wait}s, so the list may be incomplete. Train these now with train_kb_urls (operationId "${operationId}"), or poll get_kb_crawl_status for more first.` : `Discovery is still running after ${wait}s with nothing listed yet \u2014 poll get_kb_crawl_status with operationId "${operationId}".`
+        next: (
+          // The refusal goes first, Exact included: a page that "trains itself"
+          // trains nothing when GoHighLevel stopped the operation.
+          outcome === "stopped" ? `GoHighLevel stopped this crawl (${s.status}) \u2014 it did not finish reading ${url}${listed ? `, and the ${listed} page(s) listed below are whatever it had before it stopped` : ", and nothing was listed"}. Nothing here says the site was read, so do not train from this run: fix what stopped it and crawl again.` : option === "Exact" ? "This page trains itself \u2014 do NOT call train_kb_urls on it (GoHighLevel answers 500). Check list_kb_urls in a moment." : pollError ? `A status poll failed (${pollError}); discovery may still be running \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Discovery finished with ${listed} page(s). Pick the ones the agent should know and pass their ids to train_kb_urls with operationId "${operationId}".` : listed > 0 ? `${listed} page(s) listed so far, but the operation still reads "${s.status}" after ${wait}s, so the list may be incomplete. Train these now with train_kb_urls (operationId "${operationId}"), or poll get_kb_crawl_status for more first.` : `Discovery is still running after ${wait}s with nothing listed yet \u2014 poll get_kb_crawl_status with operationId "${operationId}".`
+        )
       };
     }
   );
@@ -8457,16 +8058,24 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
       const queued = await client.post("/knowledge-bases/crawler/train", { ...v, body: { locationId: loc, urlIds, knowledgeBaseId, operationId }, noRetry: true });
       const wait = waitSeconds ?? 60;
       if (wait === 0) return { queued, note: "Queued. Poll get_kb_crawl_status for trainedUrlsCount." };
-      const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => isSettled(x.status) || x.trainedUrlsCount >= urlIds.length, { operationId, status: "Training" });
+      const { s, polls, settled, pollError } = await settle2(loc, knowledgeBaseId, operationId, wait, (x) => trainSettledOn(x, urlIds), { operationId, status: "Training" });
+      const { trained, pending, buckets } = trainedOfRequested(s, urlIds);
+      const outcome = crawlOutcome(s.status, settled);
       return {
         queued,
         status: s.status,
+        outcome,
+        trained,
+        pending,
+        // The operation's own counter, kept because it is what GoHighLevel
+        // reports — it counts every page trained against this operationId,
+        // including earlier train calls, so it is not a result for THIS one.
         trainedUrlsCount: s.trainedUrlsCount,
         requested: urlIds.length,
         polls,
         settled,
         ...pollError ? { pollError } : {},
-        note: pollError ? `Training was queued, then a status poll failed (${pollError}) \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : settled ? `Trained. list_kb_urls shows each page with a link to the text the agent learned.` : `Still training after ${wait}s \u2014 poll get_kb_crawl_status.`
+        note: pollError ? `Training was queued, then a status poll failed (${pollError}) \u2014 poll get_kb_crawl_status with operationId "${operationId}".` : outcome === "stopped" ? `GoHighLevel stopped this operation (${s.status}). ${trained.length} of ${urlIds.length} requested page(s) are in a "Trained" bucket; the other ${pending.length} are not, so the agent has not learned them.` : settled ? `Trained. list_kb_urls shows each page with a link to the text the agent learned.` : `Still training after ${wait}s \u2014 ${pending.length} of ${urlIds.length} requested page(s) are not in a "Trained" bucket yet (they read ${buckets.join(", ")}; the operation reads "${s.status}"). Poll get_kb_crawl_status with operationId "${operationId}".`
       };
     }
   );
@@ -8573,7 +8182,7 @@ function registerKnowledgeBaseTools(server2, client, deps = {}) {
     }
   );
 }
-var import_zod34, AI_API_VERSION, KB_CAP_PER_LOCATION, realSleep, FINISHED_STATUS, isSettled, PAGE_PRIORITY, HOME_PATH, SKIP;
+var import_zod34, AI_API_VERSION, KB_CAP_PER_LOCATION, realSleep, FINISHED_STATUS, isSettled, STOPPED_STATUS, wasStopped, crawlOutcome, TRAINED_BUCKET, trainSettledOn, PAGE_PRIORITY, HOME_PATH, SKIP;
 var init_knowledge_base = __esm({
   "src/tools/knowledge-base.ts"() {
     "use strict";
@@ -8584,6 +8193,11 @@ var init_knowledge_base = __esm({
     realSleep = (ms) => new Promise((r) => setTimeout(r, ms));
     FINISHED_STATUS = /^(successful|success|failed|failure|existing|restricted|cancelled|canceled|aborted|completed?)$/i;
     isSettled = (status) => FINISHED_STATUS.test(status.trim());
+    STOPPED_STATUS = /^(failed|failure|restricted|cancelled|canceled|aborted)$/i;
+    wasStopped = (status) => STOPPED_STATUS.test(status.trim());
+    crawlOutcome = (status, settled) => !settled ? "running" : wasStopped(status) ? "stopped" : "finished";
+    TRAINED_BUCKET = /^trained$/i;
+    trainSettledOn = (s, urlIds) => wasStopped(s.status) || trainedOfRequested(s, urlIds).pending.length === 0;
     PAGE_PRIORITY = /about|service|treatment|program|plan|product|menu|special|offer|pricing|price|cost|fee|insurance|contact|location|direction|faq|question|help|hour|book|schedule|appointment|new[- ]?patient|patient|client|team|staff|doctor|provider|review|testimonial/i;
     HOME_PATH = /^\/(index(\.html?)?|home(\.html?)?)?\/?$/i;
     SKIP = /privacy|terms|cookie|legal|login|sign[- ]?in|cart|checkout|account|unsubscribe|\.(pdf|jpe?g|png|gif|svg|xml|json|css|js)(\?|$)|\/blog\/|\/news\/|\/tag\/|\/category\/|\/author\/|\/page\/\d/i;
@@ -9260,13 +8874,17 @@ function registerAiEmployeeDemoTools(server2, shared, deps = {}) {
         return {
           runId: run.runId,
           bot: { id: botId, name: upd.after.name, mode: upd.after.mode, knowledgeBaseIds: upd.after.knowledgeBaseIds, businessName: upd.after.businessName },
-          knowledgeBase: { id: kbId, discovered: crawl.discovered, trained: crawl.trained, learned, notes: crawl.notes },
+          // trainedPages = pages GoHighLevel holds in a Trained bucket; the
+          // operation counter climbs across every train call and is named for
+          // what it is (delta review 3).
+          knowledgeBase: { id: kbId, discovered: crawl.discovered, trainedPages: crawl.trainedPages ?? 0, operationTrainedCount: crawl.trained, learned, notes: crawl.notes },
           prospect: { contactId, phone: prospectPhone, fieldsVerified: Object.keys(values).length },
           numberToText,
           primaryOnSms: primary,
           armed: run.armed,
           readiness: [
-            crawl.trained > 0 ? `the bot has learned ${crawl.trained} page(s)` : "the bot has learned NO pages yet",
+            // Per-page buckets, not the operation counter (sweep review 7).
+            (crawl.trainedPages ?? 0) > 0 ? `the bot has learned ${crawl.trainedPages} page(s)` : "the bot has learned NO pages yet",
             armedNow && wasAutoPilot ? "WARNING: the bot was ALREADY on auto-pilot before this demo and answers on its own; end_ai_employee_demo puts it back to auto-pilot, because that is its before-state" : armedNow ? "the bot is on auto-pilot (armed here)" : armAutoPilot ? `WARNING: arming was requested but the bot reads back as "${String(upd.after.mode)}" \u2014 it is NOT answering on its own` : "the bot is NOT armed \u2014 pass armAutoPilot: true to let it answer",
             primary === true ? "the bot is primary on SMS" : primary === false ? "the bot is NOT primary on SMS \u2014 it will not answer texts until it is" : "could not read whether the bot is primary on SMS",
             numberToText ? `text ${numberToText}` : "this sub-account has no phone number",
@@ -9803,13 +9421,16 @@ function registerVoiceAiTools(server2, shared) {
         for (const n of held) if (!holders.has(n)) holders.set(n, { agentId: String(a.id), agentName: String(a.agentName), via: `pool ${pool}` });
         return { agentId: String(a.id), agentName: String(a.agentName), poolId: pool, poolNumbers: held.length ? held : "unknown \u2014 this API does not list the pool's numbers" };
       });
-      const unresolvedPool = poolBound.some((p) => typeof p.poolNumbers === "string");
+      const poolRouting = poolBound.filter((p) => Array.isArray(p.poolNumbers) && p.poolNumbers.length > 0);
+      const poolUnproven = poolBound.filter((p) => typeof p.poolNumbers === "string");
+      const unresolvedPool = poolUnproven.length > 0;
       const numberRows = numbers.map((n) => ({ number: n, answeredBy: holders.get(n) ?? null }));
       const free = unresolvedPool ? [] : numberRows.filter((r) => !r.answeredBy && !heldUnproven.has(r.number)).map((r) => r.number);
       const rota = agents.filter(inBackupRota).map((a) => ({ agentId: String(a.id), agentName: String(a.agentName) }));
-      const ready = numberRows.some((r) => r.answeredBy) || poolBound.length > 0;
+      const ready = numberRows.some((r) => r.answeredBy) || poolRouting.length > 0;
       const unprovenLine = unproven.length ? ` ${unproven.length} agent(s) carry a number binding NOT proven to route (${unproven.map((u) => `"${u.agentName}" on ${u.numbers.join(", ")}`).join("; ")}): see unprovenBindings for the fix.` : "";
-      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolBound.length ? `, and ${poolBound.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.${unprovenLine}` : unproven.length ? `NOT PROVEN TO ROUTE: no number is bound in the shape GoHighLevel routes to an agent.${unprovenLine}${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""}` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried in inboundNumbers or as numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
+      const poolUnprovenLine = poolUnproven.length ? ` ${poolUnproven.length} agent(s) answer through a number pool this API does not list that pool's numbers for (${poolUnproven.map((p) => `"${p.agentName}" on pool ${p.poolId}`).join("; ")}), so nothing here proves a call lands: open the pool in GoHighLevel and check it holds a number.` : "";
+      const verdict = numbers.length === 0 ? "NOT READY: no phone number on this sub-account." : ready ? `READY: ${numberRows.filter((r) => r.answeredBy).length} number(s) bound to a voice agent${poolRouting.length ? `, and ${poolRouting.length} agent(s) answering through a number pool` : ""}${rota.length ? `; ${rota.length} agent(s) also sit in the backup rota` : ""}.${unprovenLine}${poolUnprovenLine}` : unproven.length || poolUnproven.length ? `NOT PROVEN TO ROUTE: no number is bound in the shape GoHighLevel routes to an agent.${unprovenLine}${poolUnprovenLine}${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""}` : `NUMBER PRESENT, NO AGENT BOUND BY API: ${numbers.length} number(s), none carried in inboundNumbers or as numberPoolId by any voice agent.${rota.length ? ` ${rota.length} agent(s) sit in the backup rota (${rota.map((r) => r.agentName).join(", ")}) and may be handed unanswered calls.` : ""} Calls may still reach an agent through the number's own routing, which this API cannot read.`;
       return {
         locationId: loc,
         verdict,
@@ -9939,6 +9560,7 @@ function registerVoiceAiTools(server2, shared) {
       if (numberPoolId !== void 0) change.numberPoolId = numberPoolId;
       if (Object.keys(change).length === 0 && inboundNumber === void 0) throw new Error("Nothing to update \u2014 pass at least one field to change.");
       const before = await readVoiceAgent(client, loc, agentId);
+      const bindNotes = [];
       if (typeof inboundNumber === "string") {
         const current = Array.isArray(before.inboundNumbers) ? before.inboundNumbers.filter((n) => typeof n === "string" && n.length > 0) : [];
         change.inboundNumbers = [.../* @__PURE__ */ new Set([...current, inboundNumber])];
@@ -9965,8 +9587,26 @@ function registerVoiceAiTools(server2, shared) {
         const { numbers, pools, poolObjects } = await readNumbers(client, loc);
         if (typeof inboundNumber === "string") {
           if (!numbers.includes(inboundNumber)) throw new Error(numbers.length ? `${inboundNumber} is not a number on this sub-account. Its numbers: ${numbers.join(", ")}.` : NO_NUMBER_TASK);
-          const clash = bindingClash(inboundNumber, await listAllVoiceAgents(client, loc), agentId, poolObjects);
+          const agents = await listAllVoiceAgents(client, loc);
+          const clash = bindingClash(inboundNumber, agents, agentId, poolObjects);
           if (clash) throw new Error(clash);
+          const dormant = unprovenNumbers(before).filter((n) => n !== inboundNumber);
+          const kept = [];
+          for (const n of change.inboundNumbers) {
+            if (n === inboundNumber) {
+              kept.push(n);
+              continue;
+            }
+            const holder = agents.find((a) => a.id !== agentId && boundNumbers(a).includes(n));
+            if (holder && dormant.includes(n)) {
+              bindNotes.push(`${n} was held by this agent in the shape not proven to route and now answers for agent "${String(holder.agentName)}" (${String(holder.id)}), so it was left off this agent rather than written onto two.`);
+              continue;
+            }
+            if (holder) bindNotes.push(`${n} also answers for agent "${String(holder.agentName)}" (${String(holder.id)}) in GoHighLevel. It stays on this agent, which was routing it; GoHighLevel decides which of the two takes a call, so unbind it on one of them.`);
+            kept.push(n);
+            if (dormant.includes(n)) bindNotes.push(`${n} was held by this agent in the shape not proven to route (BUG-2026-09-15-02) and starts routing to it with this write.`);
+          }
+          change.inboundNumbers = kept;
         }
         if (typeof numberPoolId === "string") {
           if (!pools.includes(numberPoolId)) throw new Error(pools.length ? `Number pool ${numberPoolId} is not on this sub-account. Its pools: ${pools.join(", ")}.` : "This sub-account has no number pools (list_number_pools).");
@@ -9991,7 +9631,7 @@ function registerVoiceAiTools(server2, shared) {
       if (!rb.agent) return { sent: Object.keys(change), changed: [], before: {}, agent: void 0, answersOn: [], pool: null, inBackupRota: void 0, readBack: "ASSERTED", differs: void 0, notes: [READBACK_FAILED("update", agentId, rb.error ?? "unknown error")] };
       const after = rb.agent;
       const changed = diffVoiceAgentSnapshots(before, after);
-      const notes = [];
+      const notes = [...bindNotes];
       const differs = agentWriteDifferences(change, after);
       for (const k of differs) notes.push(`${k}: sent ${JSON.stringify(change[k])}, reads back ${JSON.stringify(after[k])}.`);
       let asserted2 = differs.length > 0;
@@ -11619,8 +11259,10 @@ ${await response.text()}`);
     async ({ pageId, content, funnelId, isPublished }) => {
       try {
         let meta = {};
+        let preReadOk = false;
         try {
           meta = await funnelRequest("GET", `/page/${pageId}?locationId=${client.locationId}`);
+          preReadOk = true;
         } catch (metaErr) {
           if (!funnelId) throw metaErr;
         }
@@ -11656,14 +11298,24 @@ ${await response.text()}`);
           }
           const afterVersion = typeof after.pageVersion === "number" ? after.pageVersion : null;
           const becameVisible = afterUrl !== "" && afterUrl !== beforeUrl;
-          save_check = {
-            visible: becameVisible,
-            pageVersion_sent: pageVersion,
-            pageVersion_now: afterVersion,
-            ...becameVisible ? {} : {
-              warning: "SAVED BUT NOT VISIBLE. GHL accepted the write and stored the content, but the page's live pointer did not move, so visitors still see the previous version. This is GHL's behaviour on a page that already has content, not a transport error. Rebuild on a fresh step with create_funnel_page and save onto that instead \u2014 do NOT report this page as updated."
-            }
-          };
+          if (!preReadOk) {
+            const versionMismatch = afterVersion !== null && afterVersion !== pageVersion;
+            save_check = {
+              visible: null,
+              pageVersion_sent: pageVersion,
+              pageVersion_now: afterVersion,
+              warning: "SAVE NOT VERIFIED. The page could not be read before the save, so whether the new version is the one visitors see is not verified \u2014 with no baseline pointer, a page that never moved off its old content is indistinguishable from one that took the save. Read it with get_page_full and compare before reporting it as updated." + (versionMismatch ? ` GoHighLevel now reports this page at pageVersion ${afterVersion} while the save was sent as pageVersion ${pageVersion}: the page already held content this save did not build on, which is exactly the case where GHL stores the write and keeps serving the previous version.` : "")
+            };
+          } else {
+            save_check = {
+              visible: becameVisible,
+              pageVersion_sent: pageVersion,
+              pageVersion_now: afterVersion,
+              ...becameVisible ? {} : {
+                warning: "SAVED BUT NOT VISIBLE. GHL accepted the write and stored the content, but the page's live pointer did not move, so visitors still see the previous version. This is GHL's behaviour on a page that already has content, not a transport error. Rebuild on a fresh step with create_funnel_page and save onto that instead \u2014 do NOT report this page as updated."
+              }
+            };
+          }
         } catch (verifyErr) {
           save_check = {
             visible: null,
@@ -12468,6 +12120,10 @@ function pageFaces(envelope) {
 function derivePalette(envelope) {
   return derivePaletteFromUsage(usageOrHexes(envelope), pageFaces(envelope));
 }
+function paintsAs(literal, from) {
+  if (/^#[0-9a-f]{8}$/i.test(literal)) return { hit: literal.slice(0, 7).toLowerCase() === from, keep: literal.slice(7) };
+  return { hit: normaliseColour(literal)?.toLowerCase() === from, keep: "" };
+}
 function sectionPairs(envelope) {
   const groups = /* @__PURE__ */ new Map();
   for (const p of renderedPalette(envelope).paints) {
@@ -12517,28 +12173,47 @@ function rethemeEnvelope(envelope, brand, derived = derivePalette(envelope)) {
     return out;
   };
   const sayLoss = (l) => `${l.where}: ${target(l.t).toUpperCase()} type on ${target(l.bg).toUpperCase()} would be ${l.after.toFixed(2)}:1 (it was ${l.before.toFixed(2)}:1); WCAG AA wants 4.5.`;
-  for (let pass = 0; pass <= plan.length; pass++) {
-    const hit = losses().find((l) => l.involved.some((x) => x.guarded));
-    if (!hit) break;
-    for (const step of hit.involved.filter((x) => x.guarded)) {
-      skipped.push(`${step.role} ${step.from}: left as it was, because ${sayLoss(hit)}`);
-      plan.splice(plan.indexOf(step), 1);
+  const guardedAtStart = plan.filter((x) => x.guarded).length;
+  for (let pass = 0; pass < guardedAtStart; pass++) {
+    let removed = false;
+    for (const hit of losses()) {
+      for (const step of hit.involved.filter((x) => x.guarded)) {
+        const without = (hex) => hex === step.from ? hex : target(hex);
+        if (contrastHex(without(hit.t), without(hit.bg)) < 4.5) continue;
+        skipped.push(`${step.role} ${step.from}: left as it was, because ${sayLoss(hit)}`);
+        plan.splice(plan.indexOf(step), 1);
+        removed = true;
+        break;
+      }
+      if (removed) break;
     }
+    if (!removed) break;
   }
   const seen = /* @__PURE__ */ new Set();
   for (const l of losses()) {
-    const line3 = `${sayLoss(l)} Kept, because ${l.involved.map((x) => `the ${x.role}`).join(" and ")} ${l.involved.length > 1 ? "are" : "is"} the brand's own colour: check this section before a client sees it.`;
+    const brandRoles = l.involved.filter((x) => !x.guarded).map((x) => `the ${x.role}`);
+    const guardedRoles = l.involved.filter((x) => x.guarded).map((x) => `the ${x.role}`);
+    const because = [
+      brandRoles.length ? `${brandRoles.join(" and ")} ${brandRoles.length > 1 ? "are" : "is"} the brand's own colour` : "",
+      guardedRoles.length ? `leaving ${guardedRoles.join(" and ")} as it was would not make it readable` : ""
+    ].filter(Boolean).join(", and ");
+    const line3 = `${sayLoss(l)} Kept, because ${because}: check this section before a client sees it.`;
     if (!seen.has(`${target(l.t)} ${target(l.bg)}`)) warnings.push(line3);
     seen.add(`${target(l.t)} ${target(l.bg)}`);
   }
   let text2 = JSON.stringify(envelope);
   const colourTokens = [];
   plan.forEach((step, i) => {
-    const re = new RegExp(escapeRe(step.from), "gi");
-    const occurrences = (text2.match(re) ?? []).length;
-    if (occurrences === 0) return;
     const token2 = `\0COLOUR${i}\0`;
-    text2 = text2.replace(re, token2);
+    let occurrences = 0;
+    const swapped = text2.replace(COLOUR_LITERAL_RE, (lit) => {
+      const { hit, keep } = paintsAs(lit, step.from);
+      if (!hit) return lit;
+      occurrences++;
+      return token2 + keep;
+    });
+    if (occurrences === 0) return;
+    text2 = swapped;
     colourTokens.push({ token: token2, to: step.to });
     swaps.push({ role: step.role, from: step.from, to: step.to, occurrences });
   });
@@ -12581,7 +12256,7 @@ function derivePaletteAcross(envelopes) {
   for (const env2 of envelopes) for (const f of pageFaces(env2)) if (!fonts.includes(f)) fonts.push(f);
   return derivePaletteFromUsage(pooled2, fonts.slice(0, 2));
 }
-var ICON_FONTS, BRAND_CHROMA, TONE_CHROMA, escapeRe;
+var ICON_FONTS, BRAND_CHROMA, TONE_CHROMA, escapeRe, COLOUR_LITERAL_RE;
 var init_retheme = __esm({
   "src/command-os/design/retheme.ts"() {
     "use strict";
@@ -12593,6 +12268,135 @@ var init_retheme = __esm({
     BRAND_CHROMA = 0.06;
     TONE_CHROMA = 0.02;
     escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    COLOUR_LITERAL_RE = /#[0-9a-f]{3,8}(?![0-9a-f])|rgba?\([^()]*\)|hsla?\([^()]*\)/gi;
+  }
+});
+
+// src/command-os/design/global-sections.ts
+function sameColour(a, b) {
+  if (a === void 0 || b === void 0) return false;
+  const na = normaliseColour(a) ?? a.trim();
+  const nb = normaliseColour(b) ?? b.trim();
+  return na.toLowerCase() === nb.toLowerCase();
+}
+function nextGlobalSectionVersion(current) {
+  const v = typeof current === "number" && Number.isFinite(current) ? current : 0;
+  return !v || v >= MAX_VERSION ? INITIAL_VERSION : v + 1;
+}
+function siteColourNames(sources) {
+  const names = /* @__PURE__ */ new Set();
+  const take = (colours) => {
+    if (!Array.isArray(colours)) return;
+    for (const c of colours) {
+      const label = isRec(c) && typeof c.label === "string" ? c.label.trim().toLowerCase() : "";
+      if (/^[a-z0-9_-]+$/.test(label)) names.add(`--${label}`);
+    }
+  };
+  for (const source of sources) {
+    if (isRec(source) && isRec(source.general) && isRec(source.general.general)) take(source.general.general.colors);
+    for (const section2 of sectionsOf(source)) if (isRec(section2) && isRec(section2.general)) take(section2.general.colors);
+  }
+  return names;
+}
+function colourDefs(source, names) {
+  const out = /* @__PURE__ */ new Map();
+  const scan = (styles) => {
+    if (typeof styles !== "string") return;
+    for (const block of styles.matchAll(ROOT_BLOCK)) {
+      for (const decl of block[1].matchAll(DECLARATION)) {
+        if (names ? names.has(decl[1]) : decl[1].startsWith("--color-")) out.set(decl[1], decl[2].trim());
+      }
+    }
+  };
+  if (isRec(source) && !Array.isArray(source)) scan(source.pageStyles);
+  for (const section2 of sectionsOf(source)) {
+    if (!isRec(section2)) continue;
+    scan(isRec(section2.general) ? section2.general.sectionStyles : void 0);
+  }
+  return out;
+}
+function repaintGlobalSections(sections, brand, palette) {
+  const painted = rethemeEnvelope({ sections: structuredClone(sections) }, brand, palette);
+  return { sections: painted.envelope.sections, swaps: painted.swaps, warnings: painted.warnings };
+}
+var INITIAL_VERSION, MAX_VERSION, ROOT_BLOCK, DECLARATION, isRec, sectionsOf;
+var init_global_sections = __esm({
+  "src/command-os/design/global-sections.ts"() {
+    "use strict";
+    init_retheme();
+    init_rendered_palette();
+    INITIAL_VERSION = 1;
+    MAX_VERSION = 4;
+    ROOT_BLOCK = /:root\s*\{([^}]*)\}/g;
+    DECLARATION = /(--[a-zA-Z0-9_-]+)\s*:\s*([^;}]+)/g;
+    isRec = (v) => Boolean(v) && typeof v === "object";
+    sectionsOf = (source) => Array.isArray(source) ? source : isRec(source) && Array.isArray(source.sections) ? source.sections : [];
+  }
+});
+
+// src/command-os/design/served-palette.ts
+function rootBlocks(html2) {
+  return [...html2.matchAll(ROOT_BLOCK2)].map((m) => m[0]);
+}
+function effectiveRootVars(html2) {
+  const out = /* @__PURE__ */ new Map();
+  for (const block of html2.matchAll(ROOT_BLOCK2)) {
+    for (const decl of block[1].matchAll(DECLARATION2)) out.set(decl[1], decl[2].trim());
+  }
+  return out;
+}
+function varReferences(html2) {
+  const out = /* @__PURE__ */ new Map();
+  for (const m of html2.matchAll(REFERENCE)) out.set(m[1], (out.get(m[1]) ?? 0) + 1);
+  return out;
+}
+function servedVerdict(input) {
+  const blocks = rootBlocks(input.html);
+  const effective = effectiveRootVars(input.html);
+  const refs = varReferences(input.html);
+  const stillTemplate = [];
+  const unexplained = [];
+  const undeclared = [];
+  const asBrand = [];
+  for (const [name, templateHex] of input.templateVars) {
+    const references = refs.get(name) ?? 0;
+    if (references === 0) continue;
+    const value = effective.get(name) ?? null;
+    const row = { name, effective: value, template: templateHex, references };
+    const expected = input.expectedVars.get(name);
+    if (value === null) undeclared.push(row);
+    else if (sameColour(value, expected)) asBrand.push(row);
+    else if (sameColour(value, templateHex)) stillTemplate.push(row);
+    else unexplained.push(row);
+  }
+  const judged = stillTemplate.length + unexplained.length + undeclared.length + asBrand.length;
+  const verdict = blocks.length === 0 ? "unreadable" : stillTemplate.length ? "template" : unexplained.length || undeclared.length ? "mixed" : judged === 0 ? "none" : "brand";
+  const places = (n) => `at least ${n} place${n === 1 ? "" : "s"}`;
+  const lines = [];
+  if (stillTemplate.length) {
+    lines.push(
+      "The served page still paints the template's colours: " + stillTemplate.map((s) => `${s.template.toUpperCase()} in ${places(s.references)}`).join(", ") + (input.sharedRepainted === true ? "." : ". A shared section's own colour definition comes after the page's, so it wins for the whole page.")
+    );
+  }
+  if (unexplained.length) {
+    lines.push("One of the design's site colours resolves to neither the template's nor the saved colour: " + unexplained.map((s) => `${s.effective ?? "(undefined)"} where ${s.template.toUpperCase()} was expected to become the brand's`).join(", ") + ".");
+  }
+  if (undeclared.length) {
+    lines.push("Painted through a site colour nothing on the served page defines: " + undeclared.map((s) => `${places(s.references)} through ${s.name}`).join(", ") + ".");
+  }
+  if (verdict === "unreadable") lines.push("The served page carried no colour definitions at all, so it is not a rendered page and what a visitor will see could not be checked.");
+  if (verdict === "none") lines.push("The served page paints through no site colour the template defined, so there was nothing to judge here; the checks on the stored page stand on their own.");
+  if (verdict === "brand") lines.push(`Every site colour judged on the served page resolves to what this install saved: ${asBrand.length} colour${asBrand.length === 1 ? "" : "s"}, ${places(asBrand.reduce((n, s) => n + s.references, 0))}.`);
+  return { verdict, stillTemplate, unexplained, undeclared, brand: asBrand, summary: lines.join(" ") };
+}
+var ROOT_BLOCK2, DECLARATION2, REFERENCE;
+var init_served_palette = __esm({
+  "src/command-os/design/served-palette.ts"() {
+    "use strict";
+    init_global_sections();
+    ROOT_BLOCK2 = /:root\s*\{([^}]*)\}/g;
+    DECLARATION2 = /(--[a-zA-Z0-9_-]+)\s*:\s*([^;]+)/g;
+    REFERENCE = /var\(\s*(--[a-zA-Z0-9_-]+)\s*(?:,[^)]*)?\)/g;
   }
 });
 
@@ -16804,6 +16608,94 @@ function removalHoldBack(opts) {
   if (opts.multiPageStepNames.length > 0) return `${opts.multiPageStepNames.length} step(s) carry more than one page (${opts.multiPageStepNames.join(", ")}) and only the first of each was rebuilt`;
   return null;
 }
+function brandedPath(path40, name, taken) {
+  const normalize = (s) => s.replace(/^\/+|\/+$/g, "").toLowerCase();
+  const base = normalize(path40 ?? "") || name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "page";
+  const used = new Set([...taken].map(normalize));
+  let candidate = `${base}-branded`;
+  for (let n = 2; used.has(candidate); n++) candidate = `${base}-branded-${n}`;
+  taken.add(`/${candidate}`);
+  return `/${candidate}`;
+}
+function rewriteTemplateLinks(envelope, destinations) {
+  const links = [];
+  const unmapped = [];
+  const normalize = (s) => s.replace(/^\/+|\/+$/g, "");
+  function rewrite(from, kind) {
+    if (!from) return from;
+    let matches = [];
+    let representation = "path";
+    let suffix = "";
+    let previewPrefix = "";
+    if (kind === "id") {
+      matches = destinations.filter((d2) => d2.stepId === from);
+      representation = "step";
+    } else {
+      const preview = from.match(/^(https:\/\/(?:app\.leadconnectorhq\.com\/v2|sites\.leadconnectorhq\.com)\/preview\/)([^/?#]+)(.*)$/);
+      if (preview) {
+        previewPrefix = preview[1];
+        suffix = preview[3];
+        representation = "page";
+        matches = destinations.filter((d2) => d2.pageId === preview[2]);
+      } else if (!/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i.test(from) && !from.startsWith("#")) {
+        const [path40] = from.split(/[?#]/);
+        suffix = from.slice(path40.length);
+        matches = destinations.filter((d2) => d2.path && normalize(d2.path) === normalize(path40));
+      }
+    }
+    if (matches.length !== 1) {
+      unmapped.push({ from, reason: matches.length > 1 ? "ambiguous original path" : "external or unknown destination" });
+      return from;
+    }
+    const d = matches[0];
+    if (!d.newStepId || !d.newPageId || !d.newPath) {
+      unmapped.push({ from, reason: "the target step was not rebuilt" });
+      return from;
+    }
+    const to = representation === "step" ? d.newStepId : representation === "page" ? `${previewPrefix}${d.newPageId}${suffix}` : `${from.startsWith("/") ? d.newPath : normalize(d.newPath)}${suffix}`;
+    links.push({ from, to });
+    return to;
+  }
+  function walk(value) {
+    if (!value || typeof value !== "object") return;
+    const extra = value.extra;
+    if (extra) {
+      if (typeof extra.stepPath?.value === "string") extra.stepPath.value = rewrite(extra.stepPath.value, "id");
+      if (typeof extra.visitWebsite?.value?.url === "string") extra.visitWebsite.value.url = rewrite(extra.visitWebsite.value.url, "url");
+      if (typeof extra.imageProperties?.value?.linkUrl === "string") extra.imageProperties.value.linkUrl = rewrite(extra.imageProperties.value.linkUrl, "url");
+      const menu = (items) => {
+        for (const item of items) {
+          if (typeof item.goToId === "string") item.goToId = rewrite(item.goToId, "id");
+          if (typeof item.url === "string") item.url = rewrite(item.url, "url");
+          if (Array.isArray(item.childs)) menu(item.childs);
+        }
+      };
+      if (Array.isArray(extra.menuItems?.value)) menu(extra.menuItems.value);
+      for (const social of Array.isArray(extra.socials?.value) ? extra.socials.value : []) {
+        if (typeof social.link === "string") social.link = rewrite(social.link, "url");
+      }
+      if (typeof extra.text?.value === "string") {
+        extra.text.value = extra.text.value.replace(
+          /(\bhref\s*=\s*)(["'])(.*?)\2/gi,
+          (_, prefix, quote, href) => `${prefix}${quote}${rewrite(href, "url")}${quote}`
+        );
+      }
+    }
+    for (const child of Object.values(value)) walk(child);
+  }
+  walk(envelope);
+  return { links, unmapped };
+}
+function templateForms(envelope) {
+  const forms = [];
+  function walk(value) {
+    if (!value || typeof value !== "object") return;
+    if (value.meta === "form") forms.push({ id: value.id, selector: value.extra?.formId });
+    for (const child of Object.values(value)) walk(child);
+  }
+  walk(envelope);
+  return forms;
+}
 function registerPageStudioTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
@@ -16866,6 +16758,21 @@ ${await response.text()}`);
       }
     });
     if (!response.ok) throw new Error(`Funnel API Error ${response.status}: POST /builder/autosave/${pageId}
+${await response.text()}`);
+    const text2 = await response.text();
+    return text2 ? JSON.parse(text2) : {};
+  }
+  async function sharedSectionsUpload(funnelId, body) {
+    const url = `https://backend.leadconnectorhq.com/funnels/builder/global-sections/${funnelId}`;
+    const response = await builderRequest(client, "POST", url, {
+      body,
+      headers: {
+        Origin: "https://page-builder.leadconnectorhq.com",
+        Referer: "https://page-builder.leadconnectorhq.com/",
+        "x-source-app": "page-builder"
+      }
+    });
+    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: POST /builder/global-sections/${funnelId}
 ${await response.text()}`);
     const text2 = await response.text();
     return text2 ? JSON.parse(text2) : {};
@@ -16988,11 +16895,15 @@ ${await response.text()}`);
     {
       templateId: import_zod43.z.string().describe("From find_ghl_template."),
       brandSlug: import_zod43.z.string().optional().describe("A stored brand to repaint the template in. Omit to install it in the designer's own colours."),
+      formId: import_zod43.z.string().min(1).optional().describe("An existing form in this sub-account. Substitutes into the design's existing form widgets on fresh pages; does not create a widget."),
       confirm: import_zod43.z.literal("INSTALL").describe("Type INSTALL. This writes into the live sub-account you are switched to."),
-      keepOriginals: import_zod43.z.boolean().optional().describe("With brandSlug: leave the template's original unbranded steps beside the branded ones. Normally they are removed once every branded page has been read back and measured. They are KEPT automatically, whatever you pass, if GoHighLevel did not name the funnel it created in its install response and the identification had to fall back to comparing the account before and after.")
+      removeOriginals: import_zod43.z.boolean().optional().describe("Only true requests deletion of the original steps, after every replacement is verified. Safety guards can still veto removal."),
+      keepOriginals: import_zod43.z.boolean().optional().describe("Compatibility option. Originals are kept by default, even when this is false or absent. Only removeOriginals:true requests deletion; it takes precedence.")
     },
-    async ({ templateId, brandSlug, keepOriginals }) => {
+    async ({ templateId, brandSlug, formId, removeOriginals }) => {
       const brand = brandSlug ? houseLooks().find((x) => x.slug === brandSlug) ?? readBrand(slugify(brandSlug)) : null;
+      if (brandSlug && !brand) return { ok: false, error: "Choose a stored brand before installing a branded template. Nothing was installed." };
+      if (formId && !brand) return { ok: false, error: "Choose a stored brand when binding a form on a branded template. Nothing was installed." };
       const inventory = await funnelSummary();
       const before = inventory.map;
       const named = installedFunnelId(await installTemplate(templateApi(), templateId));
@@ -17035,138 +16946,354 @@ ${await response.text()}`);
         return {
           ok: true,
           installed: true,
+          originalsRemoved: 0,
+          contrast: [],
+          kept: "Nothing was deleted. No replacement pages were requested.",
           funnel: { id: funnel._id, name: funnel.name, pages: (funnel.steps ?? []).length },
           note: "Installed in the designer's own colours. Pass brandSlug to have it repainted in a client's brand on the way in.",
           next: `Grade a page before the client sees it: get_funnels for its page ids, then verify_design on https://sites.leadconnectorhq.com/preview/<pageId> with medium "site" and placement "ghl".`,
           undo: `delete_funnel with funnelId "${funnel._id}" and confirm "DELETE" removes it and its pages, and nothing else.`
         };
       }
-      const originals = (funnel.steps ?? []).map((st) => ({ stepId: st.id, name: st.name, pageId: (st.pages ?? [])[0], pageCount: (st.pages ?? []).length })).filter((x) => x.pageId);
+      const originals = (funnel.steps ?? []).map((st) => ({
+        stepId: st.id,
+        name: st.name,
+        path: st.url,
+        pageId: st.pages?.[0],
+        pageCount: st.pages?.length ?? 0
+      }));
       const multiPage = originals.filter((x) => x.pageCount > 1);
-      const done = [];
       const problems = [];
+      const warnings = [];
       const loaded = [];
       for (const step of originals) {
-        const meta = await funnelRequest("GET", `/page/${step.pageId}?locationId=${client.locationId}`);
-        const dataUrl = typeof meta.pageDataDownloadUrl === "string" ? meta.pageDataDownloadUrl : "";
-        if (!dataUrl) {
-          problems.push(`${step.name}: GoHighLevel has no saved content for this page yet`);
-          continue;
+        try {
+          if (!step.pageId) throw new Error("this step has no page to rebuild");
+          const meta = await funnelRequest("GET", `/page/${step.pageId}?locationId=${client.locationId}`);
+          if (typeof meta.pageDataDownloadUrl !== "string" || !meta.pageDataDownloadUrl) throw new Error("GoHighLevel has no saved content for this page yet");
+          const response = await fetch(meta.pageDataDownloadUrl);
+          if (!response.ok) throw new Error(`page content read failed (${response.status})`);
+          loaded.push({ ...step, envelope: await response.json() });
+        } catch (e) {
+          throw new Error(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
         }
-        loaded.push({ stepId: step.stepId, name: step.name, envelope: await (await fetch(dataUrl)).json() });
       }
-      const palette = derivePaletteAcross(loaded.map((l) => l.envelope));
+      const publicRead = async (url) => {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 3e4);
+        try {
+          return await fetch(url, { signal: controller.signal, headers: { "Cache-Control": "no-cache" } });
+        } finally {
+          clearTimeout(timer);
+        }
+      };
+      let sharedOriginal = [];
+      let sharedReadError = null;
+      if (typeof funnel.globalSectionsUrl === "string" && funnel.globalSectionsUrl) {
+        try {
+          const res = await publicRead(funnel.globalSectionsUrl);
+          if (!res.ok) throw new Error(`shared sections read failed (${res.status})`);
+          const gs = await res.json();
+          if (!Array.isArray(gs)) throw new Error("the shared sections file is not a list of sections; the shared sections were left alone");
+          sharedOriginal = gs;
+        } catch (e) {
+          sharedReadError = e instanceof Error ? e.message : String(e);
+        }
+      }
+      const idOf2 = (x) => x && typeof x === "object" ? x.id : void 0;
+      const pageSectionIds = new Set(loaded.flatMap((l) => Array.isArray(l.envelope.sections) ? l.envelope.sections.map(idOf2) : []));
+      const sharedNotInPages = sharedOriginal.filter((sec) => !pageSectionIds.has(idOf2(sec)));
+      const siteColours = siteColourNames([...loaded.map((l) => l.envelope), ...sharedOriginal.length ? [{ sections: sharedOriginal }] : []]);
+      const palette = derivePaletteAcross([...loaded.map((l) => l.envelope), ...sharedNotInPages.length ? [{ sections: sharedNotInPages }] : []]);
+      const destinations = originals.map((s) => ({ stepId: s.stepId, pageId: s.pageId, path: s.path }));
+      for (const st of funnel.steps ?? []) for (const pageId of (st.pages ?? []).slice(1)) {
+        destinations.push({ stepId: `${st.id}:variant:${pageId}`, pageId });
+      }
+      const taken = new Set((funnel.steps ?? []).map((st) => st.url ?? ""));
+      const createdSteps = [];
       for (const step of loaded) {
         try {
-          const envelope = step.envelope;
-          const painted = rethemeEnvelope(envelope, brand, palette);
-          const created = await funnelRequest("POST", `/funnel/create-step`, {
+          const newStepId = crypto4.randomUUID();
+          const newPath = brandedPath(step.path, step.name, taken);
+          const created = await funnelRequest("POST", "/funnel/create-step", {
             funnelId: funnel._id,
-            step: { id: crypto4.randomUUID(), name: step.name, url: "", pages: [], control_traffic: 100, split: false, type: "optin_funnel_page" }
+            step: { id: newStepId, name: step.name, url: newPath, pages: [], control_traffic: 100, split: false, type: "optin_funnel_page" }
           });
-          const newPageId = created.page?._id;
-          if (!newPageId) {
-            problems.push(`${step.name}: GoHighLevel did not return a page for the new step`);
-            continue;
+          if (!created.page?._id) throw new Error("GoHighLevel did not return a page for the new step");
+          const replacement = { newStepId, newPageId: created.page._id, newPath };
+          Object.assign(destinations.find((d) => d.stepId === step.stepId), replacement);
+          createdSteps.push({ ...step, ...replacement });
+        } catch (e) {
+          problems.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      }
+      const pages = [];
+      const storedByPage = /* @__PURE__ */ new Map();
+      for (const step of createdSteps) {
+        const page = {
+          page: step.name,
+          newStepId: step.newStepId,
+          newPageId: step.newPageId,
+          url: step.newPath,
+          oldStepId: step.stepId,
+          links: [],
+          unmapped: [],
+          readBackOk: false,
+          preview: ghlPreviewUrl(step.newPageId),
+          ...formId ? { formBound: false } : {}
+        };
+        pages.push(page);
+        try {
+          const painted = brand ? rethemeEnvelope(step.envelope, brand, palette) : null;
+          const envelope = painted?.envelope ?? structuredClone(step.envelope);
+          warnings.push(...painted?.warnings ?? []);
+          page.skipped = painted?.skipped ?? [];
+          Object.assign(page, rewriteTemplateLinks(envelope, destinations));
+          const forms = templateForms(envelope);
+          if (formId) {
+            if (!forms.length) {
+              page.formBound = "none";
+              page.formNote = "This design carries no form. Choose a design with one, or add the form in the editor.";
+            }
+            for (const form of forms) {
+              if (typeof form.selector?.value !== "string") throw new Error(`form ${form.id} has no captured formId selector; binding was not attempted`);
+              form.selector.value = formId;
+              if (typeof form.selector.text === "string") form.selector.text = formId;
+            }
           }
-          await autosaveRetrying(newPageId, {
+          envelope.id = step.newPageId;
+          for (const section2 of Array.isArray(envelope.sections) ? envelope.sections : []) {
+            section2.pageId = step.newPageId;
+            section2.funnelId = funnel._id;
+            section2.locationId = client.locationId;
+          }
+          await autosaveRetrying(step.newPageId, {
             funnelId: funnel._id,
             pageVersion: 1,
-            pageData: {
-              ...painted.envelope,
-              pageVersion: 1,
-              pageType: "draft",
-              manualSave: true,
-              integrations: computeIntegrations(painted.envelope)
-            }
+            pageData: { ...envelope, pageVersion: 1, pageType: "draft", manualSave: true, integrations: computeIntegrations(envelope) }
           });
           let after = {};
           for (let i = 0; i < 6; i++) {
-            after = await funnelRequest("GET", `/page/${newPageId}?locationId=${client.locationId}`);
+            after = await funnelRequest("GET", `/page/${step.newPageId}?locationId=${client.locationId}`);
             if (typeof after.pageDataDownloadUrl === "string" && after.pageDataDownloadUrl) break;
             await new Promise((r) => setTimeout(r, 1200));
           }
-          const savedUrl = typeof after.pageDataDownloadUrl === "string" ? after.pageDataDownloadUrl : "";
-          if (!savedUrl) {
-            problems.push(`${step.name}: the branded page saved but GoHighLevel is not serving it`);
-            continue;
+          if (typeof after.pageDataDownloadUrl !== "string" || !after.pageDataDownloadUrl) throw new Error("the fresh page saved but GoHighLevel is not serving it");
+          const response = await fetch(after.pageDataDownloadUrl);
+          if (!response.ok) throw new Error(`saved content read failed (${response.status})`);
+          const saved = await response.json();
+          storedByPage.set(step.newPageId, saved);
+          const savedText = JSON.stringify(saved).toLowerCase();
+          if (formId && forms.length) {
+            const readForms2 = templateForms(saved);
+            page.formBound = readForms2.length === forms.length && forms.every((f) => readForms2.some((r) => r.id === f.id && r.selector?.value === formId));
+            if (!page.formBound) throw new Error("the requested form id was not present in every saved form widget");
           }
-          const savedPage = await (await fetch(savedUrl)).json();
-          const savedText = JSON.stringify(savedPage).toLowerCase();
-          const stillThere = palette.accent && savedText.includes(palette.accent.toLowerCase());
-          if (stillThere) {
-            problems.push(`${step.name}: the template's own ${palette.accent} is still in the saved page \u2014 a partial swap, so the original was kept`);
-            continue;
+          if (brand && palette.accent) {
+            if (palette.accent.toLowerCase() !== brand.colors.accent.hex.toLowerCase() && savedText.includes(palette.accent.toLowerCase())) throw new Error(`the template's own ${palette.accent} is still in the saved page`);
+            if (!savedText.includes(brand.colors.accent.hex.toLowerCase())) throw new Error(`the brand's ${brand.colors.accent.hex} is not in the saved page`);
           }
-          const brandLanded = savedText.includes(brand.colors.accent.hex.toLowerCase());
-          if (!brandLanded && palette.accent) {
-            problems.push(`${step.name}: the brand's ${brand.colors.accent.hex} is not in the saved page \u2014 the paint did not land, so the original was kept`);
-            continue;
+          const expectedNavigation = rewriteTemplateLinks(structuredClone(envelope), []);
+          const savedNavigation = rewriteTemplateLinks(structuredClone(saved), []);
+          if (JSON.stringify(expectedNavigation) !== JSON.stringify(savedNavigation)) throw new Error("the saved navigation does not match the replacement destinations");
+          const repaint = repaintReport(step.envelope, saved);
+          page.repaint = {
+            verdict: repaint.verdict,
+            summary: repaint.summary,
+            backgrounds: repaint.backgrounds,
+            neutralBackgrounds: repaint.neutralBackgrounds,
+            text: repaint.text,
+            changes: repaint.changes.filter((c) => c.kind === "background" || c.kind === "text"),
+            fonts: repaint.fonts,
+            contrast: repaint.contrast
+          };
+          const pageWarnings = (painted?.warnings ?? []).filter((w) => !palette.undecided.includes(w));
+          if (pageWarnings.length) page.warnings = pageWarnings;
+          page.readBackOk = true;
+          page.readBack = "Saved navigation and the requested form binding match the saved page.";
+        } catch (e) {
+          problems.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      }
+      for (const page of pages) {
+        page.links = page.links.filter((link) => {
+          const target = createdSteps.find((s) => link.to === s.newStepId || link.to.includes(`/preview/${s.newPageId}`) || link.to.split(/[?#]/)[0].replace(/^\//, "") === s.newPath.slice(1));
+          if (target && !pages.find((p) => p.newPageId === target.newPageId)?.readBackOk) {
+            page.unmapped.push({ from: link.from, reason: `replacement ${target.name} did not read back; saved link points to ${link.to}` });
+            return false;
           }
-          const repaint = repaintReport(envelope, savedPage);
-          const pageWarnings = painted.warnings.filter((w) => !palette.undecided.includes(w));
-          done.push({
-            page: step.name,
-            newPageId,
-            oldStepId: step.stepId,
-            repaint: {
-              verdict: repaint.verdict,
-              summary: repaint.summary,
-              backgrounds: repaint.backgrounds,
-              neutralBackgrounds: repaint.neutralBackgrounds,
-              text: repaint.text,
-              changes: repaint.changes.filter((c) => c.kind === "background" || c.kind === "text"),
-              fonts: repaint.fonts,
-              contrast: repaint.contrast
-            },
-            skipped: painted.skipped,
-            ...pageWarnings.length ? { warnings: pageWarnings } : {},
-            preview: ghlPreviewUrl(newPageId)
+          return true;
+        });
+      }
+      let sharedStored = [];
+      const sharedSections = { found: sharedReadError ? "unknown" : sharedOriginal.length, repainted: false };
+      if (sharedReadError) problems.push(`shared sections: ${sharedReadError}`);
+      if (sharedOriginal.length && !namedFunnelId) {
+        sharedSections.note = "Shared sections were left alone: this funnel was identified by comparing the account before and after, not by GoHighLevel naming it, and repainting shared sections on the wrong funnel would change every page of it.";
+      } else if (sharedOriginal.length) {
+        const previousVersion = funnel.globalSectionVersion;
+        const previousUrl = funnel.globalSectionsUrl;
+        try {
+          const gs = sharedOriginal;
+          const painted = repaintGlobalSections(gs, brand, palette);
+          warnings.push(...painted.warnings);
+          const fresh = (await funnelRequest("GET", `/funnel/list?locationId=${client.locationId}&limit=${FUNNEL_PAGE}`)).funnels?.find((f) => f._id === funnel._id);
+          const version = nextGlobalSectionVersion(fresh?.globalSectionVersion ?? funnel.globalSectionVersion);
+          const uploaded = await sharedSectionsUpload(funnel._id, { version, sectionData: painted.sections });
+          const wanted = colourDefs(painted.sections, siteColours);
+          const swappedAway = painted.swaps.map((sw) => sw.from).filter((from) => /^#[0-9a-f]{6}$/i.test(from));
+          const compare = async (url, what) => {
+            const back = await publicRead(url);
+            if (!back.ok) throw new Error(`${what} read-back failed (${back.status})`);
+            const stored = await back.json();
+            const got = colourDefs(Array.isArray(stored) ? stored : [], siteColours);
+            const notAsSaved = [...wanted].filter(([name, value]) => !sameColour(got.get(name), value)).map(([name]) => name);
+            if (notAsSaved.length) throw new Error(`${what} read back with ${notAsSaved.length} site colour(s) not as saved: ${notAsSaved.join(", ")}`);
+            const storedText = JSON.stringify(stored).toLowerCase();
+            const survivors = swappedAway.filter((from) => storedText.includes(from.toLowerCase()));
+            if (survivors.length) throw new Error(`${what} read back still carrying the template's ${survivors.join(", ")}, which the repaint replaced`);
+            return Array.isArray(stored) ? stored : [];
+          };
+          if (typeof uploaded.globalSectionsDownloadUrl === "string" && uploaded.globalSectionsDownloadUrl) sharedStored = await compare(uploaded.globalSectionsDownloadUrl, "the shared sections the write stored");
+          let row;
+          for (let i = 0; i < 5; i++) {
+            const listed = await funnelRequest("GET", `/funnel/list?locationId=${client.locationId}&limit=${FUNNEL_PAGE}`);
+            row = listed.funnels?.find((f) => f._id === funnel._id);
+            if (row && row.globalSectionVersion === version && typeof row.globalSectionsUrl === "string" && row.globalSectionsUrl) break;
+            row = void 0;
+            await new Promise((r) => setTimeout(r, 1500));
+          }
+          if (!row || typeof row.globalSectionsUrl !== "string") {
+            throw new Error(`the write was accepted (version ${version}) but the funnel record has not caught up; pages render the shared sections the record points at, so what a visitor sees is unknown`);
+          }
+          sharedStored = await compare(row.globalSectionsUrl, "the shared sections the funnel record points at");
+          Object.assign(sharedSections, {
+            repainted: true,
+            version,
+            previousVersion: previousVersion ?? null,
+            previousUrl: previousUrl ?? null,
+            readBack: `${gs.length} shared section(s) repainted at the funnel level and read back at version ${version}.`,
+            note: "Shared sections are funnel-wide, and their colour definitions win for every page of the funnel, so the original pages now render in the brand's colours too, not only their header and footer.",
+            undo: `Re-upload the previous shared sections${typeof previousUrl === "string" ? ` (still stored at ${previousUrl})` : ""} as version ${nextGlobalSectionVersion(version)}, or delete the funnel.`
           });
         } catch (e) {
-          problems.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
+          problems.push(`shared sections: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      }
+      await new Promise((r) => setTimeout(r, 2e3));
+      const templateVars = /* @__PURE__ */ new Map();
+      for (const l of loaded) for (const [name, hex] of colourDefs(l.envelope, siteColours)) templateVars.set(name, hex);
+      for (const [name, hex] of colourDefs(sharedOriginal, siteColours)) templateVars.set(name, hex);
+      const readServed = async (url) => {
+        let lastError = "";
+        for (let i = 0; i < 4; i++) {
+          try {
+            const res = await publicRead(`${url}${url.includes("?") ? "&" : "?"}v=${Date.now()}`);
+            if (res.ok) return await res.text();
+            lastError = `HTTP ${res.status}`;
+          } catch (e) {
+            lastError = e instanceof Error ? e.message : String(e);
+          }
+          if (i < 3) await new Promise((r) => setTimeout(r, 1500));
+        }
+        throw new Error(`the served page could not be read (${lastError})`);
+      };
+      for (const page of pages) {
+        if (!page.readBackOk) continue;
+        try {
+          const expectedVars = /* @__PURE__ */ new Map();
+          for (const [name, hex] of colourDefs(storedByPage.get(page.newPageId), siteColours)) expectedVars.set(name, hex);
+          for (const [name, hex] of colourDefs(sharedStored, siteColours)) expectedVars.set(name, hex);
+          const sharedRepainted = sharedSections.repainted === true;
+          let verdict = servedVerdict({ html: await readServed(page.preview), templateVars, expectedVars, sharedRepainted });
+          if (verdict.verdict !== "brand" && verdict.verdict !== "none") {
+            await new Promise((r) => setTimeout(r, 3e3));
+            verdict = servedVerdict({ html: await readServed(page.preview), templateVars, expectedVars, sharedRepainted });
+          }
+          page.served = { verdict: verdict.verdict, summary: verdict.summary, brand: verdict.brand, stillTemplate: verdict.stillTemplate, unexplained: verdict.unexplained, undeclared: verdict.undeclared };
+          page.paintedOk = verdict.verdict === "brand" || verdict.verdict === "none";
+          if (!page.paintedOk) {
+            const said = verdict.verdict === "template" ? "served page still paints the template" : verdict.verdict === "mixed" ? "served page paints colours this install did not save" : "served page could not be judged";
+            if (page.repaint) page.repaint = { ...page.repaint, storedVerdict: page.repaint.verdict, verdict: said };
+            problems.push(`${page.page}: ${verdict.summary}`);
+          }
+        } catch (e) {
+          page.paintedOk = false;
+          problems.push(`${page.page}: ${e instanceof Error ? e.message : String(e)}`);
         }
       }
+      const rebuilt = problems.length === 0 && pages.length === originals.length && pages.length > 0 && pages.every((p) => p.readBackOk && p.paintedOk === true);
+      const unjudged = pages.filter((p) => p.served?.verdict === "none").map((p) => p.page);
+      const holdBack = removalHoldBack({ truncated: inventory.truncated, multiPageStepNames: multiPage.map((m) => m.name), identifiedFromResponse: Boolean(namedFunnelId) && !inventory.truncated }) ?? (unjudged.length ? `the served page had no site colour to judge on ${unjudged.join(", ")}, so the repaint was not proven there; the originals are kept for you to compare` : null);
       let removed = 0;
-      const certain = Boolean(namedFunnelId) && !inventory.truncated;
-      const removeOriginals = certain ? keepOriginals !== true : keepOriginals === false;
-      const complete = problems.length === 0 && done.length === originals.length && done.length > 0;
-      const holdBack = removalHoldBack({ truncated: inventory.truncated, funnelPageSize: FUNNEL_PAGE, multiPageStepNames: multiPage.map((m) => m.name), identifiedFromResponse: certain });
-      if (complete && removeOriginals && holdBack === null) {
-        for (const d of done) {
+      const accepted = [];
+      const removalFailures = [];
+      if (removeOriginals === true && rebuilt && holdBack === null) {
+        for (const step of originals) {
           try {
-            await funnelRequest("DELETE", `/funnel/step/${funnel._id}/${d.oldStepId}`);
-            removed++;
+            await funnelRequest("DELETE", `/funnel/step/${funnel._id}/${step.stepId}`);
+            accepted.push(step);
           } catch (e) {
-            problems.push(`could not remove the original step for ${String(d.page)}: ${e instanceof Error ? e.message : String(e)}`);
+            removalFailures.push(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
           }
         }
       }
+      const confirmed = /* @__PURE__ */ new Set();
+      for (let attempt = 0; accepted.length && attempt < 5; attempt++) {
+        if (attempt) await new Promise((resolve12) => setTimeout(resolve12, attempt * 1e3));
+        try {
+          const listed = await funnelRequest("GET", `/funnel/list?locationId=${client.locationId}&limit=${FUNNEL_PAGE}`);
+          const current = listed.funnels?.find((item) => item._id === funnel._id);
+          if (current && Array.isArray(current.steps)) {
+            for (const step of accepted) if (!current.steps.some((item) => item.id === step.stepId)) confirmed.add(step.stepId);
+          }
+          if (confirmed.size === accepted.length) break;
+        } catch {
+        }
+      }
+      removed = confirmed.size;
+      const unconfirmed = accepted.filter((step) => !confirmed.has(step.stepId));
+      problems.push(...unconfirmed.map((step) => `${step.name}: removal accepted, not yet confirmed gone. Read the funnel again before taking further action.`));
+      problems.push(...removalFailures.map((line3) => `Could not remove original step ${line3}`));
+      const complete = rebuilt && problems.length === 0;
       return {
         ok: complete,
         funnel: { id: funnel._id, name: funnel.name },
-        brand: { slug: brand.slug, accent: brand.colors.accent.hex, display: brand.pageStudioTheme.headingFont, body: brand.pageStudioTheme.bodyFont },
+        ...brand && { brand: { slug: brand.slug, accent: brand.colors.accent.hex, display: brand.pageStudioTheme.headingFont, body: brand.pageStudioTheme.bodyFont } },
         templatePalette: { accent: palette.accent, surface: palette.surface, text: palette.text, secondary: palette.secondary, faces: palette.fonts, undecided: palette.undecided },
-        pages: done,
+        pages,
+        sharedSections,
         ...(() => {
-          const faint = done.filter((d) => d.repaint.verdict !== "repainted").map((d) => String(d.page));
-          const hard = done.filter((d) => d.repaint.contrast.length > 0);
+          const servedWith = (v) => pages.filter((d) => d.served?.verdict === v).map((d) => d.page);
+          const servedTemplate = servedWith("template");
+          const servedMixed = servedWith("mixed");
+          const servedUnreadable = servedWith("unreadable");
+          const gateNote = typeof sharedSections.note === "string" && sharedSections.repainted === false && sharedSections.found !== 0 ? " The shared sections were left alone (see sharedSections), which is why the served pages still show the template's colours." : "";
+          const withRepaint = pages.filter((d) => d.repaint);
+          const faint = withRepaint.filter((d) => (d.repaint.storedVerdict ?? d.repaint.verdict) !== "repainted").map((d) => d.page);
+          const hard = withRepaint.filter((d) => (d.repaint.contrast ?? []).length > 0);
           const lines = [
+            ...servedTemplate.length ? [`On ${servedTemplate.join(", ")} the SERVED page still paints the template's colours, whatever the stored page says; each page's served summary names them. Nothing was removed.${gateNote}`] : [],
+            ...servedMixed.length ? [`On ${servedMixed.join(", ")} the SERVED page paints colours this install did not save; each page's served summary names them. Nothing was removed.`] : [],
+            ...servedUnreadable.length ? [`On ${servedUnreadable.join(", ")} the served page could not be judged (GoHighLevel served no rendered page), so nothing was removed.`] : [],
+            ...servedWith("none").length ? [`On ${servedWith("none").join(", ")} the served page paints through no site colour the template defined, so the served check had nothing to judge; the stored-page checks stand, and the originals were kept for you to compare.`] : [],
             ...faint.length ? [`On ${faint.join(", ")} the visible palette barely changed. Each page's repaint says what still paints in the template's own colours.`] : [],
-            ...hard.length ? [`On ${hard.map((d) => String(d.page)).join(", ")} some type is now harder to read than WCAG AA allows; each page's repaint.contrast names the colours.`] : []
+            ...hard.length ? [`On ${hard.map((d) => d.page).join(", ")} some type is now harder to read than WCAG AA allows; each page's repaint.contrast names the colours.`] : []
           ];
-          const contrast = hard.flatMap((d) => d.repaint.contrast.map((c) => `${String(d.page)}: ${c.text} type on ${c.background} is ${c.after}:1 (was ${c.before}:1).`));
+          const contrast = hard.flatMap((d) => d.repaint.contrast.map((c) => `${d.page}: ${c.text} type on ${c.background} is ${c.after}:1 (was ${c.before}:1).`));
           return {
             ...lines.length ? { repaintNote: `${lines.join(" ")} Look at the preview before calling it branded.` } : {},
             ...contrast.length ? { contrast } : {}
           };
         })(),
-        originalsRemoved: complete && removeOriginals ? removed : 0,
-        ...problems.length > 0 && { problems, kept: "Every original step was LEFT IN PLACE because something failed. Nothing was deleted." },
+        originalsRemoved: removed,
+        ...unconfirmed.length && { originalsUnconfirmed: unconfirmed.map((step) => step.stepId) },
+        ...removeOriginals === true && { removal: rebuilt && holdBack === null ? `${removed} original steps removed, ${unconfirmed.length} accepted but not yet confirmed gone, ${removalFailures.length} could not be removed${removalFailures.length ? `: ${removalFailures.join("; ")}` : ""}` : `0 original steps removed; removal was not attempted: ${holdBack ?? "not every replacement was verified"}` },
+        ...accepted.length === 0 && removed === 0 && { kept: `Nothing was deleted. ${removeOriginals !== true ? "Original removal was not requested." : holdBack ?? (!rebuilt ? "Not every replacement was verified." : "No originals were removed.")}` },
+        ...problems.length > 0 && { problems },
         ...namedButNotNew && { identification: "GoHighLevel named a funnel that this account ALREADY had before the install. That name was discarded and the account was compared instead, so the funnel above was identified the cautious way and originals are only removed if you asked for it explicitly. Worth reporting: it means the install response no longer means what it did." },
-        ...holdBack !== null && { kept: `Every original step was LEFT IN PLACE on purpose: ${holdBack}. The branded pages are there beside them \u2014 remove the originals by hand once you have looked.` },
-        warnings: rethemeEnvelope({}, brand, palette).warnings,
-        next: done.length ? `Grade one before the client sees it: verify_design on ${String(done[0].preview)} with medium "site" and placement "ghl". GoHighLevel's own templates are designed but frequently fail contrast and tap-target rules.` : "Nothing was branded.",
+        warnings: [.../* @__PURE__ */ new Set([...warnings, ...brand ? rethemeEnvelope({}, brand, palette).warnings : []])],
+        next: pages.some((page) => page.readBackOk) ? `Grade one before the client sees it: verify_design on ${pages.find((page) => page.readBackOk)?.preview ?? ""} with medium "site" and placement "ghl". GoHighLevel's own templates are designed but frequently fail contrast and tap-target rules.` : "Nothing was branded.",
         undo: `delete_funnel with funnelId "${funnel._id}" and confirm "DELETE" removes the whole thing.`
       };
     }
@@ -17229,21 +17356,24 @@ ${await response.text()}`);
       integrations: computeIntegrations({ sections })
     };
     const saved = await autosaveRequest(pre.pageId, { funnelId, pageVersion: savePageVersion, pageData });
-    const savedDataUrl = typeof saved.pageDataUrl === "string" ? saved.pageDataUrl : null;
+    const savedDataUrl = typeof saved.pageDataUrl === "string" && saved.pageDataUrl.length > 0 ? saved.pageDataUrl : null;
     let verified = false;
+    let servedUrl = "";
     for (let attempt = 1; attempt <= 8 && !verified; attempt++) {
       await new Promise((r) => setTimeout(r, 4e3));
       try {
         const now = await funnelRequest("GET", `/page/${pre.pageId}?locationId=${client.locationId}`);
-        const nowUrl = typeof now.pageDataUrl === "string" ? now.pageDataUrl : "";
-        if (savedDataUrl !== null && nowUrl === savedDataUrl) verified = true;
+        servedUrl = typeof now.pageDataDownloadUrl === "string" ? now.pageDataDownloadUrl : "";
+        if (savedDataUrl !== null && servedUrl !== "" && servedUrl !== pre.priorDataUrl) verified = true;
       } catch {
       }
     }
     return {
       saved,
       verified,
-      ...verified ? {} : { verifyNote: "The save was accepted but the page has not yet reported the new content (eventual consistency). Re-check get_page_full in a minute before publishing; if it never advances, the save did not take." }
+      ...verified ? {} : {
+        verifyNote: savedDataUrl === null ? "NOT VERIFIED: GoHighLevel's autosave answered without a pageDataUrl, so this save produced no pointer to confirm against" + (servedUrl === "" ? ", and the page still reports no stored content." : ", though the page does now report stored content.") + " Re-check get_page_full in a minute before publishing; if it never advances, the save did not take." : "The save was accepted but the page has not yet reported the new content (eventual consistency). Re-check get_page_full in a minute before publishing; if it never advances, the save did not take."
+      }
     };
   }
   async function savePageGuarded(input) {
@@ -17377,6 +17507,8 @@ var init_page_studio = __esm({
     init_workflow_builder_client();
     init_ghl_templates();
     init_retheme();
+    init_served_palette();
+    init_global_sections();
     init_ghl_page();
     init_looks();
     init_store();
@@ -20541,6 +20673,10 @@ function registerValidatorTools(server2, client, builderClient) {
               merge_field_warnings_total: 0,
               workflows_with_shape_warnings: 0,
               shape_warnings_total: 0,
+              workflows_with_save_blocker_warnings: 0,
+              save_blocker_warnings_total: 0,
+              workflows_with_integration_warnings: 0,
+              integration_warnings_total: 0,
               workflows_unscannable: 0,
               workflows_zero_references: 0,
               // Nothing was scanned, so no reference category was loaded or needed.
@@ -20551,6 +20687,8 @@ function registerValidatorTools(server2, client, builderClient) {
             workflows_with_issues: [],
             merge_field_warnings: [],
             shape_warnings: [],
+            save_blocker_warnings: [],
+            integration_warnings: [],
             unscannable: [],
             notes: catalog2.complete ? [] : [incompleteCatalogNote(catalog2.stopReason, 0, catalog2.reportedTotal)]
           });
@@ -20587,6 +20725,12 @@ function registerValidatorTools(server2, client, builderClient) {
         const warningsTotal = withWarnings.reduce((n, w) => n + w.warnings.length, 0);
         const withShapeWarnings = results.filter((r) => r.findings.some((f) => f.severity === "warning" && f.category === "action_shape")).map((r) => ({ workflowId: r.id, workflowName: r.name, status: r.status, warnings: r.findings.filter((f) => f.severity === "warning" && f.category === "action_shape") })).sort((a, b) => (a.status === "published" ? -1 : 1) - (b.status === "published" ? -1 : 1));
         const shapeWarningsTotal = withShapeWarnings.reduce((n, w) => n + w.warnings.length, 0);
+        const SAVE_BLOCKER_CATEGORIES = /* @__PURE__ */ new Set(["legacy_step_id", "legacy_wait_unit", "missing_required_attribute"]);
+        const bucket = (match) => results.filter((r) => r.findings.some(match)).map((r) => ({ workflowId: r.id, workflowName: r.name, status: r.status, warnings: r.findings.filter(match) })).sort((a, b) => (a.status === "published" ? -1 : 1) - (b.status === "published" ? -1 : 1));
+        const withSaveBlockerWarnings = bucket((f) => f.severity === "warning" && SAVE_BLOCKER_CATEGORIES.has(f.category));
+        const saveBlockerWarningsTotal = withSaveBlockerWarnings.reduce((n, w) => n + w.warnings.length, 0);
+        const withIntegrationWarnings = bucket((f) => f.severity === "warning" && f.category === "missing_integration");
+        const integrationWarningsTotal = withIntegrationWarnings.reduce((n, w) => n + w.warnings.length, 0);
         const unverifiedCats = ALL_CATEGORIES.filter((c) => lookups.status[c] !== "loaded");
         const unverifiedRefs = results.reduce((n, r) => n + r.findings.filter((f) => f.severity === "unverified").length, 0);
         return jsonResponse({
@@ -20606,14 +20750,24 @@ function registerValidatorTools(server2, client, builderClient) {
             merge_field_warnings_total: warningsTotal,
             workflows_with_shape_warnings: withShapeWarnings.length,
             shape_warnings_total: shapeWarningsTotal,
+            workflows_with_save_blocker_warnings: withSaveBlockerWarnings.length,
+            save_blocker_warnings_total: saveBlockerWarningsTotal,
+            workflows_with_integration_warnings: withIntegrationWarnings.length,
+            integration_warnings_total: integrationWarningsTotal,
             workflows_unscannable: unscannable.length,
             workflows_zero_references: zeroRefCount,
             unverified: { categories_unloaded: unverifiedCats, references_unverified: unverifiedRefs },
+            // Unchanged on purpose: `status` has meant "are there ERRORS" since it
+            // was written, and these four categories are warnings by ruling — the
+            // workflows genuinely still run. What was broken is that they were
+            // invisible, not that they were ranked too low.
             status: errorsTotal > 0 ? "issues_found" : "ok"
           },
           workflows_with_issues: withErrors,
           merge_field_warnings: withWarnings,
           shape_warnings: withShapeWarnings,
+          save_blocker_warnings: withSaveBlockerWarnings,
+          integration_warnings: withIntegrationWarnings,
           unscannable,
           notes: [
             // NEVER advise re-running for "the next batch": GHL's list endpoint ignores
@@ -20624,6 +20778,8 @@ function registerValidatorTools(server2, client, builderClient) {
             ...unverifiedCats.length ? [`Could not fully load: ${unverifiedCats.join(", ")} \u2014 references to those are 'unverified', not 'broken'. Re-run.`] : [],
             ...warningsTotal ? [`${warningsTotal} {{contact.X}} merge tag(s) reference a field that no longer exists \u2014 these render BLANK in the message but do NOT stop the workflow (warning, not a break). See merge_field_warnings.`] : [],
             ...shapeWarningsTotal ? [`${shapeWarningsTotal} Create/Update Opportunity step(s) have only pipeline + stage \u2014 they cannot create a card for a new contact (see shape_warnings).`] : [],
+            ...saveBlockerWarningsTotal ? [`${saveBlockerWarningsTotal} step(s) across ${withSaveBlockerWarnings.length} workflow(s) either stop the workflow being SAVED (a legacy step id, or the singular wait unit GoHighLevel no longer accepts \u2014 it still runs, it just cannot be edited) or save and run while doing nothing (a notification step with nobody selected). See save_blocker_warnings.`] : [],
+            ...integrationWarningsTotal ? [`${integrationWarningsTotal} step(s) across ${withIntegrationWarnings.length} workflow(s) need a social account this location has not connected \u2014 they save, publish and run, and do nothing when reached. See integration_warnings.`] : [],
             "workflow_goal, goto, and unrecognized condition types are not deeply checked in this version."
           ]
         });
@@ -27524,6 +27680,7 @@ Use these authoritative normalized intake answers when provided: ${JSON.stringif
 8. ${STAFF_NOTIFICATION_RULE} In a hand-authored fallback plan, a notification's "to" is that user id, or "" when the account has no users.
 9. ${MISSING_STEP_RULE}
 10. ${NO_INVENTED_CAUSE_RULE}
+If apply_build_plan answers phase:"scope" (nothing is confirmed or selected for this client, or the selection changed), STOP: build nothing else and finish with RESULT: {"ok":false,"error":"<its error, word for word>"}.
 Finish with EXACTLY one final line:
 RESULT: {"ok":true,"summary":"<what was created: counts of pipelines/fields/tags/workflows, and whether the plan came from the preset or the fallback>","issues":["<anything skipped or needing a human, including every notification step waiting for a staff member>"]}` + loadPlanGuide(ctx?.industry)
       },
@@ -31568,7 +31725,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.84.1",
+      version: "3.84.3",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -35255,8 +35412,8 @@ var init_capability_runs = __esm({
       staff: ["get_users", "get_user", "get_calendars"],
       phone: ["list_phone_numbers", "list_number_pools", "get_location"],
       workflows: ["get_workflows", "get_workflow_full", "get_trigger_registry", "get_users", "get_calendars", "get_pipelines", "get_pipeline_full", "get_custom_fields", "get_custom_values", "get_location_tags", "list_email_templates", "list_message_templates", "validate_workflow", "create_workflow", "update_workflow_actions", "audit_workflows"],
-      reactivation: ["get_contact_count", "search_contacts", "get_location_tags", "create_location_tag", "get_workflows", "get_workflow_full", "validate_workflow", "create_workflow", "update_workflow_actions", "create_smart_list", "list_smart_lists"],
-      // no bulk tagging: that is a mass write the operator does by hand
+      reactivation: ["get_contact_count", "search_contacts", "get_location_tags", "create_location_tag", "get_workflows", "get_workflow_full", "validate_workflow", "create_workflow", "update_workflow_actions", "create_smart_list", "list_smart_lists", "create_contact_smart_list", "get_contact_smart_list"],
+      // contact segments live on the contacts service (3.84.2); no bulk tagging: that is a mass write the operator does by hand
       templates: ["list_email_templates", "create_email_template", "update_email_template", "list_message_templates", "create_sms_template", "get_custom_values"],
       broadcasts: ["list_email_templates", "create_email_template", "update_email_template", "list_smart_lists", "get_email_campaigns"],
       // drafts the email as a template; sending or scheduling is the operator's click
@@ -39987,12 +40144,12 @@ function routeFirebaseForCompany(builderClient, registry2, companyId) {
       companyId
     });
     return `
-Firebase: using ${cfg.name || `company ${companyId}`} credentials \u2014 workflow builder enabled here.`;
+Firebase: found stored ${cfg.name || `company ${companyId}`} credentials and pointed the workflow builder at them \u2014 not tested this session. To confirm they still work, run register_company_firebase for this company with test_location_id, which makes a real workflow-builder call.`;
   }
   builderClient.resetToHomeFirebase();
   const homeCompanyId = builderClient.getCurrentCompanyId();
   if (homeCompanyId === companyId) {
-    return "\nFirebase: home company \u2014 workflow builder enabled.";
+    return "\nFirebase: this location's company is your home company, so the home credentials apply \u2014 not tested this session. To confirm the workflow builder really works here, run register_company_firebase for this company with test_location_id, which makes a real workflow-builder call.";
   }
   const registeredCompanies = registry2?.listCompanyFirebases?.() ?? [];
   if (registeredCompanies.length > 0) {
@@ -40223,7 +40380,17 @@ Agency-wide tools now available: list_snapshots, create_snapshot_share_link, and
           isError: true
         };
       }
-      registry2.removeLocation(locationId2);
+      const removed = registry2.removeLocation(locationId2);
+      const saveError = registry2.getLastSaveError();
+      if (!removed || saveError) {
+        return {
+          content: [{
+            type: "text",
+            text: `${token2.name} (${locationId2}) could NOT be removed: this computer's key file could not be written${saveError ? ` (${saveError})` : ""}, so that sub-account's API key is still in it and will be back at the next start. Check storage permissions on the GHL Command app-data folder and run unregister_location again.`
+          }],
+          isError: true
+        };
+      }
       return {
         content: [{ type: "text", text: `Removed: ${token2.name} (${locationId2}) from token registry.` }]
       };
@@ -40513,11 +40680,13 @@ ${lines.join("\n")}
       try {
         const agencyClient = new GHLClient({ apiKey: agencyKey });
         await agencyClient.delete(`/locations/${location_id}`, { params: { deleteTwilioAccount: delete_twilio ?? false } });
+        const hadKey = Boolean(registry2?.getToken(location_id));
         const wasRegistered = registry2?.removeLocation(location_id) ?? false;
+        const keyLine = wasRegistered ? " Removed from the token registry." : hadKey ? ` Its API key could NOT be removed from this computer's key file${registry2?.getLastSaveError() ? ` (${registry2.getLastSaveError()})` : ""}; the key is dead with the sub-account, but run unregister_location once the app-data folder is writable so it does not linger.` : "";
         return {
           content: [{
             type: "text",
-            text: `Sub-account ${location_id} permanently deleted.${wasRegistered ? " Removed from the token registry." : ""}`
+            text: `Sub-account ${location_id} permanently deleted.${keyLine}`
           }]
         };
       } catch (error) {
@@ -41781,6 +41950,28 @@ function buildContactSmartListBody(args) {
     locationId: args.locationId
   };
 }
+function findSmartListRecord(payload) {
+  const looksLikeRecord = (v) => {
+    if (!v || typeof v !== "object" || Array.isArray(v)) return false;
+    const o = v;
+    return "objectKey" in o || "filters" in o || "id" in o || "_id" in o || "name" in o;
+  };
+  if (looksLikeRecord(payload)) return payload;
+  if (payload && typeof payload === "object") {
+    for (const key of ["list", "smartList", "smartlist", "data", "record"]) {
+      const nested = payload[key];
+      if (looksLikeRecord(nested)) return nested;
+    }
+  }
+  return void 0;
+}
+function contactServiceNote(payload) {
+  const rec = findSmartListRecord(payload);
+  if (!rec) return void 0;
+  const reason2 = rec.objectKey === "contacts" ? 'this record carries objectKey "contacts"' : rec.objectKey === "opportunity" ? void 0 : !("filters" in rec) ? "this record came back with no `filters` key at all" : void 0;
+  if (!reason2) return void 0;
+  return `This id was read from GoHighLevel's OPPORTUNITY smart-list service (/lists/dynamic) and ${reason2}. Contact smart lists do not live here and the Contacts screen never shows a record created here \u2014 create one with create_contact_smart_list, read it with get_contact_smart_list, and delete it with delete_contact_smart_list.`;
+}
 function registerSmartListTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
@@ -41909,7 +42100,8 @@ ${await res.text()}`);
       try {
         const loc = locationId2 ?? client.locationId;
         const result = await smartListRequest("GET", `/${loc}/${listId}`);
-        return jsonResponse(result);
+        const note = contactServiceNote(result);
+        return note ? jsonResponse({ smart_list: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -41917,10 +42109,10 @@ ${await res.text()}`);
   );
   server2.tool(
     "create_smart_list",
-    "Create a new smart list (dynamic filter list). Required: name + objectKey. Filters define the saved-search criteria \u2014 pass an empty array to create an empty list and add filters later via update_smart_list. The shape of filters/columns is opaque here; query an existing smart list with get_smart_list to see the format GHL expects.",
+    'Create a new OPPORTUNITY smart list (dynamic filter list). objectKey "contacts" is refused here \u2014 this service cannot hold a contact segment; use create_contact_smart_list for that. Required: name + objectKey. Filters define the saved-search criteria \u2014 pass an empty array to create an empty list and add filters later via update_smart_list. The shape of filters/columns is opaque here; query an existing smart list with get_smart_list to see the format GHL expects.',
     {
       name: import_zod59.z.string().describe("Display name for the smart list."),
-      objectKey: import_zod59.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'contacts' or 'opportunity'."),
+      objectKey: import_zod59.z.enum(OBJECT_KEYS).describe("Object type the list segments over. 'opportunity' \u2014 'contacts' is refused here and is created with create_contact_smart_list instead."),
       filters: import_zod59.z.array(import_zod59.z.record(import_zod59.z.string(), import_zod59.z.unknown())).optional().describe("Array of filter objects. Each object has fields like {field, operator, value} \u2014 exact shape varies by filter type. See get_smart_list on an existing list to learn the format."),
       columns: import_zod59.z.array(import_zod59.z.record(import_zod59.z.string(), import_zod59.z.unknown())).optional().describe("Array of column definitions for the smart list view in GHL UI. Each defines which contact/opportunity field shows as a column. Defaults to GHL's standard columns if omitted."),
       pipelineIds: import_zod59.z.array(import_zod59.z.string()).optional().describe("(opportunity objectKey only) Pipeline IDs to restrict this smart list to. Empty array = all pipelines."),
@@ -41929,6 +42121,11 @@ ${await res.text()}`);
     },
     async ({ name, objectKey, filters, columns, pipelineIds, defaultInPipelines, locationId: locationId2 }) => {
       try {
+        if (objectKey === "contacts") {
+          throw new Error(
+            "create_smart_list writes to GoHighLevel's opportunity smart-list service, which cannot hold a contact segment \u2014 create a contact smart list with create_contact_smart_list instead."
+          );
+        }
         const loc = locationId2 ?? client.locationId;
         const body = { name, objectKey };
         if (filters !== void 0) body.filters = filters;
@@ -41966,8 +42163,13 @@ ${await res.text()}`);
         if (Object.keys(body).length === 0) {
           throw new Error("Pass at least one of: name, filters, columns, pipelineIds, defaultInPipelines. Nothing to update.");
         }
+        let note;
+        try {
+          note = contactServiceNote(await smartListRequest("GET", `/${loc}/${listId}`));
+        } catch {
+        }
         const result = await smartListRequest("PUT", `/${loc}/${listId}`, body);
-        return jsonResponse(result);
+        return note ? jsonResponse({ updated: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -41984,8 +42186,13 @@ ${await res.text()}`);
     async ({ listId, locationId: locationId2 }) => {
       try {
         const loc = locationId2 ?? client.locationId;
+        let note;
+        try {
+          note = contactServiceNote(await smartListRequest("GET", `/${loc}/${listId}`));
+        } catch {
+        }
         const result = await smartListRequest("DELETE", `/${loc}/${listId}`);
-        return jsonResponse(result);
+        return note ? jsonResponse({ deleted: result, note }) : jsonResponse(result);
       } catch (error) {
         return errorResponse(error);
       }
@@ -42551,11 +42758,11 @@ function registerTemplateDeployerTools(server2, client) {
         if (template.location) {
           const locationData = resolveObj(template.location);
           const BRAND_FIELDS = /* @__PURE__ */ new Set(["name", "address", "city", "state", "postalCode", "country", "phone", "website", "email"]);
-          const isRec = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+          const isRec2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
           let currentLoc = null;
           try {
             const raw = await client.get(`/locations/${locId}`);
-            currentLoc = isRec(raw) && isRec(raw.location) ? raw.location : isRec(raw) ? raw : null;
+            currentLoc = isRec2(raw) && isRec2(raw.location) ? raw.location : isRec2(raw) ? raw : null;
           } catch {
             currentLoc = null;
           }
@@ -43377,6 +43584,9 @@ function registerCheckupTools(server2, installedVersion, client, builderClient,
       format: import_zod64.z.enum(["report", "json"]).optional().describe("'report' (default) is the plain-English checkup. 'json' returns the same data for scripts and support tickets.")
     },
     async ({ locationId: locationId2, format }) => {
+      if (locationId2 && locationId2 !== client.defaultLocationId) {
+        return { content: [{ type: "text", text: "Switch to that sub-account first, then run its checkup. No account was read." }], isError: true };
+      }
       let loc;
       try {
         loc = client.resolveLocationId(locationId2);
@@ -48965,7 +49175,10 @@ var init_verify_findings = __esm({
       tag: { path: (loc) => `/locations/${loc}/tags`, ids: (raw) => idsOf(raw, "tags"), paged: true },
       calendar: { path: () => "/calendars/", params: byLocation, ids: (raw) => idsOf(raw, "calendars") },
       form: { path: () => "/forms/", params: byLocation, ids: (raw) => idsOf(raw, "forms"), paged: true },
-      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") }
+      user: { path: () => "/users/", params: byLocation, ids: (raw) => idsOf(raw, "users") },
+      // The list get_surveys reads; it takes limit/skip, so it is read the way
+      // forms are, page by page and never assumed complete (3.84.2).
+      survey: { path: () => "/surveys/", params: byLocation, ids: (raw) => idsOf(raw, "surveys"), paged: true }
     };
     CHECKABLE_KIND_NAMES = Object.keys(CHECKABLE_KINDS).join(", ");
     neverLookedAt = (id) => `"${id}" was never looked at. A step aimed at an unverified id silently kills every action after it, so this is refused rather than attempted.`;
@@ -49332,12 +49545,13 @@ function scanArgs(args, maxNodes = MAX_ARG_NODES) {
       continue;
     }
     if (!isRecord10(v)) continue;
-    const nodeType = typeof v.type === "string" && v.type ? v.type : parentType;
+    const isNode = typeof v.type === "string" && v.type && (isRecord10(v.attributes) || Array.isArray(v.conditions));
+    const nodeType = isNode ? v.type : parentType;
     const refs = [];
     if (typeof v.type === "string" && isRecord10(v.attributes)) extractFromAction(v, refs);
     if (Array.isArray(v.conditions)) extractFromTrigger(v, refs);
     for (const r of refs) {
-      if (r.byKey) continue;
+      if (r.byKey || !r.id.trim()) continue;
       const kind = AUDIT_KIND[r.kind];
       if (kind) out.ids.push({ kind, id: r.id, key: r.where });
       else out.uncheckable.push({ kind: r.kind, id: r.id, key: r.where });
@@ -49410,6 +49624,8 @@ var init_arg_ids = __esm({
       formId: "form",
       formIds: "form",
       // a form_submission goal's extras (build_goal_event)
+      surveyId: "survey",
+      // get_surveys reads /surveys/, so a survey is read back like a form (3.84.2)
       userId: "user",
       userIds: "user",
       assignedUserId: "user",
@@ -49424,6 +49640,12 @@ var init_arg_ids = __esm({
       ...ID_ARG_KINDS,
       "form.id": "form",
       "calendar.id": "calendar",
+      // The payment and task triggers name their form, calendar and assignee under
+      // their own prefixes (src/trigger-schemas.ts); unread until 3.84.2.
+      "payment.form.id": "form",
+      "payment.calendar.id": "calendar",
+      "task.assignedTo": "user",
+      "survey.id": "survey",
       "opportunity.pipelineId": "pipeline",
       "opportunity.pipelineStageId": "pipeline_stage",
       "opportunity.assignedTo": "user",
@@ -49438,7 +49660,7 @@ var init_arg_ids = __esm({
       workflow: "workflow",
       form: "form",
       calendar: "calendar",
-      survey: null
+      survey: "survey"
     });
     NOT_CHECKABLE_ID_ARGS = Object.freeze({
       // The account itself, not an object inside it. One account per plan is
@@ -49499,7 +49721,6 @@ var init_arg_ids = __esm({
       linkId: "trigger links have no read-back list here",
       blogId: "blogs have no read-back list here",
       categoryId: "categories have no read-back list here",
-      surveyId: "surveys have no read-back list here",
       submissionId: "form submissions have no read-back list here",
       mediaId: "media files have no read-back list here",
       photoAssetId: "media files have no read-back list here",
@@ -49556,6 +49777,10 @@ var init_arg_ids = __esm({
 // src/tools/agency-build.ts
 function accountMismatch(a, active) {
   if (!a.locationId) {
+    const applied = a.applied.filter((s) => s.state === "applied").length;
+    if (applied > 0) {
+      return `This build was saved before builds recorded the sub-account their ids were checked against, and ${applied} of its ${a.steps.length} steps ${applied === 1 ? "is" : "are"} already applied, so nothing can say which account they belong to and re-planning it whole would run those steps twice. Keep the undo notes you have, run abandon_automation to list what is live, then plan only the remaining step${a.steps.length - applied === 1 ? "" : "s"} with plan_automation and approve that plan.`;
+    }
     return "This build was saved before builds recorded the sub-account their ids were checked against, so nothing can say which account they belong to: plan it again (plan_automation) and approve the new plan.";
   }
   if (active === a.locationId) return null;
@@ -50235,7 +50460,7 @@ function dailyBrief(input) {
       );
     }
   }
-  const quiet = !unread.length && !halfRead.length && !today2.length && !waitingOnYou.length && !runningNow.length && !neverStarted.length && !renewals.length && !underFloor.length && !newLeads.length && !payingButQuiet.length && !floorUncheckable.length && !renewalUnknown.length && !yourDay.length;
+  const quiet = !unread.length && !halfRead.length && !today2.length && !waitingOnYou.length && !runningNow.length && !neverStarted.length && !renewals.length && !underFloor.length && !newLeads.length && !payingButQuiet.length && !floorUncheckable.length && !renewalUnknown.length && !yourDay.length && !yourDayNote;
   let headline3;
   if (today2.length === 1) {
     headline3 = `You have one call today \u2014 ${today2[0].who ?? today2[0].client} at ${today2[0].at}.`;
@@ -50266,6 +50491,8 @@ function dailyBrief(input) {
     headline3 = `Nothing needs you in what I could read \u2014 but ${unread[0].client} could not be read this morning.`;
   } else if (unread.length > 1) {
     headline3 = `Nothing needs you in what I could read \u2014 but ${unread.length} accounts could not be read this morning.`;
+  } else if (yourDayNote) {
+    headline3 = "Nothing needs you in what I could read \u2014 but your own calendar could not be read this morning.";
   } else if (floorUncheckable.length) {
     const c = floorUncheckable[0].client;
     headline3 = floorUncheckable.length === 1 ? `Nothing needs you \u2014 but ${c}'s price cannot be checked against any floor, so nothing here can tell you whether they are under it.` : `Nothing needs you \u2014 but ${floorUncheckable.length} clients' prices cannot be checked against any floor, ${c} among them.`;
@@ -50916,6 +51143,45 @@ function translateWorkflowAudit(audit, inputs = {}) {
       evidence: [{ tool: "audit_workflows", detail: `${s.shape_warnings_total ?? shapeCount} steps` }]
     });
   }
+  const blockerCount = s.workflows_with_save_blocker_warnings ?? 0;
+  if (blockerCount > 0) {
+    const rows2 = audit.save_blocker_warnings ?? [];
+    const names = rows2.map((r) => r.workflowName ?? "").filter(Boolean);
+    const cats = new Set(rows2.flatMap((r) => (r.warnings ?? []).map((w) => w.category ?? "")).filter(Boolean));
+    const editBlocked = cats.has("legacy_step_id") || cats.has("legacy_wait_unit");
+    const alertsNobody = cats.has("missing_required_attribute");
+    const unknownKind = !editBlocked && !alertsNobody;
+    const editSentence = ` Some of their steps were built before GoHighLevel tightened what it accepts. The automation runs exactly as it always has; what breaks is CHANGING it \u2014 the save is refused, and the refusal names steps nobody touched, so it reads as unrelated to the edit that triggered it.`;
+    const alertSentence = ` One or more alert steps are set to notify a specific person with nobody chosen. That step saves, publishes and runs, and simply never reaches anyone \u2014 so the automation looks healthy while the person waiting on the alert hears nothing.`;
+    out.push({
+      id: "steps-that-block-saving",
+      title: alertsNobody && !editBlocked ? `${blockerCount} automation${blockerCount === 1 ? " sends" : "s send"} an alert that reaches nobody` : editBlocked && !alertsNobody ? `${blockerCount} automation${blockerCount === 1 ? " cannot" : "s cannot"} be changed without the save being refused` : `${blockerCount} automation${blockerCount === 1 ? " carries a step" : "s carry steps"} that block changes, or alert nobody`,
+      what: `${nameList(names, blockerCount)} ${blockerCount === 1 ? "has" : "have"} at least one step of this kind.` + (editBlocked || unknownKind ? editSentence : "") + (alertsNobody || unknownKind ? alertSentence : ""),
+      severity: "high",
+      impact: alertsNobody && !editBlocked ? "leads" : "efficiency",
+      money: { confidence: "unknown", assumptions: ["Not costed: what this costs depends on which automation and who was waiting on the alert, and we would rather say so than guess."] },
+      remedy: alertsNobody && !editBlocked ? "Pick the person each alert should go to, or set it to notify everyone. Then re-run this check." : editBlocked && !alertsNobody ? "Rebuild those steps so GoHighLevel will accept a save again \u2014 nobody part-way through an automation can be moved while that is done. Then re-run this check." : "Rebuild those steps so GoHighLevel will accept a save again \u2014 nobody part-way through an automation can be moved while that is done \u2014 and pick a person for any alert with nobody selected. Then re-run this check.",
+      fix: "guided",
+      minutes: Math.max(10, blockerCount * 8),
+      evidence: [{ tool: "audit_workflows", detail: `${s.save_blocker_warnings_total ?? blockerCount} steps across ${blockerCount} workflows` }]
+    });
+  }
+  const integrationCount = s.workflows_with_integration_warnings ?? 0;
+  if (integrationCount > 0) {
+    const names = (audit.integration_warnings ?? []).map((r) => r.workflowName ?? "").filter(Boolean);
+    out.push({
+      id: "steps-without-their-account",
+      title: `${integrationCount} automation${integrationCount === 1 ? " has a step" : "s have steps"} waiting on a social account that is not connected`,
+      what: `${nameList(names, integrationCount)} include a step that messages or replies through a social account this location has not connected. The automation saves, publishes and runs; that step simply does nothing when it is reached, and nothing in the history says so.`,
+      severity: "high",
+      impact: "leads",
+      money: { confidence: "unknown", assumptions: ["Not costed: it depends how many people reach that step, which we cannot read."] },
+      remedy: "Connect the account in Settings, then re-run this check. (A connected account with no messaging permission fails the same way and this check cannot see it, so send one test message through the step as well.)",
+      fix: "manual",
+      minutes: Math.max(10, integrationCount * 5),
+      evidence: [{ tool: "audit_workflows", detail: `${s.integration_warnings_total ?? integrationCount} steps` }]
+    });
+  }
   return out;
 }
 function notCheckedFrom(audit) {
@@ -51655,6 +51921,15 @@ function publishNote(r) {
   if (r.publishFailed.length) {
     const lead = r.published.length ? `Auto-published ${r.published.length} workflow(s) live, but ` : "";
     const detail = r.publishFailed.map((p) => `${p.name} (${p.error})`).join("; ");
+    const inert = r.publishFailed.filter((p) => p.kind === "inert"), unverified = r.publishFailed.filter((p) => p.kind === "not_verified");
+    const drafts = r.publishFailed.filter((p) => p.kind !== "inert" && p.kind !== "not_verified");
+    if (!drafts.length) {
+      const parts = [
+        inert.length ? `${inert.length} workflow(s) PUBLISHED but with every trigger still inactive, so nothing enrols contacts into them: ${inert.map((p) => `${p.name} (${p.error})`).join("; ")}. Open each in GHL and check its trigger.` : "",
+        unverified.length ? `${unverified.length} workflow(s) had the publish accepted but it could not be confirmed: ${unverified.map((p) => `${p.name} (${p.error})`).join("; ")}. Open each in GHL and check it shows Published before reporting it as running.` : ""
+      ].filter(Boolean).join(" ");
+      return `${lead}${parts}${r.published.length ? " Any gated workflow stays DRAFT until its handoff is met." : ""}`;
+    }
     return `${lead}${r.publishFailed.length} workflow(s) were BUILT BUT COULD NOT BE PUBLISHED. They exist in GHL as DRAFT and are NOT running: ${detail}. You already opted in, so re-running with publishWorkflows will not help. If GHL rejected the workflow's contents, publishing by hand will hit the SAME error until the cause is fixed. Read the error above, fix it, then publish (see nextManualSteps).${r.published.length ? " Any gated workflow stays DRAFT until its handoff is met." : ""}`;
   }
   if (r.published.length) {
@@ -51668,6 +51943,8 @@ function publishNote(r) {
 function publishSummaryClause(r) {
   if (r.publishFailed.length) {
     const also = r.published.length ? ` (${r.published.length} did publish)` : "";
+    const drafts = r.publishFailed.filter((p) => p.kind !== "inert" && p.kind !== "not_verified").length;
+    if (!drafts) return ` ${r.publishFailed.length} workflow(s) published but NOT confirmed running${also} (inactive trigger or unconfirmed publish), see publishNote.`;
     return ` ${r.publishFailed.length} workflow(s) BUILT BUT NOT PUBLISHED${also}. They are DRAFT and not running, see publishNote.`;
   }
   if (r.published.length) return ` Published ${r.published.length} workflow(s) live.`;
@@ -52864,8 +53141,14 @@ async function executeBackbone(plan, deps, opts = {}) {
     }
     if (opts.publishWorkflows && !opts.gatedWorkflowRefs?.has(wf.ref)) {
       try {
-        await deps.publishWorkflow(wfId);
-        published.push(wf.ref);
+        const verdict = publishVerdict(await deps.publishWorkflow(wfId));
+        if (!verdict.live) {
+          publishFailed.push({ ref: wf.ref, name: wf.name, error: verdict.reason, kind: verdict.kind });
+          manual.push({ ref: wf.ref, type: "workflow-publish", name: wf.name, reason: `[${wf.name}] ${verdict.kind === "inert" ? `published, but every trigger on it still reads inactive, so nothing enrols contacts into it \u2014 open the workflow in GHL and check its trigger (${verdict.reason})` : verdict.kind === "not_verified" ? `the publish was accepted but could not be confirmed (${verdict.reason}) \u2014 open the workflow in GHL and check it shows Published` : `built successfully but not live (${verdict.reason}) \u2014 publish it manually in GHL`}.` });
+        } else {
+          published.push(wf.ref);
+          if (verdict.note) manual.push({ ref: wf.ref, type: "workflow-trigger", name: wf.name, reason: `[${wf.name}] published, but ${verdict.note}` });
+        }
       } catch (e) {
         publishFailed.push({ ref: wf.ref, name: wf.name, error: msg2(e) });
         manual.push({ ref: wf.ref, type: "workflow-publish", name: wf.name, reason: `[${wf.name}] built successfully but auto-publish failed (${msg2(e)}) \u2014 publish it manually in GHL.` });
@@ -52985,6 +53268,21 @@ async function createWithReadback(create, read2, name, beforeIds, poll, wait) {
 function msg2(e) {
   return accountErrorText(e);
 }
+function publishVerdict(outcome) {
+  if (typeof outcome !== "object" || outcome === null) return { live: true };
+  const check = outcome.publish_check;
+  if (typeof check !== "object" || check === null) return { live: true };
+  const c = check;
+  const warning = typeof c.warning === "string" && c.warning ? c.warning : "";
+  if (warning.startsWith("NOT VERIFIED")) return { live: false, kind: "not_verified", reason: warning };
+  if (warning.startsWith("TRIGGER NOT ACTIVE")) {
+    const active = typeof c.triggers_active === "number" ? c.triggers_active : 0;
+    return active > 0 ? { live: true, note: warning } : { live: false, kind: "inert", reason: warning };
+  }
+  if (c.published === true) return { live: true };
+  const status = typeof c.status_returned === "string" ? c.status_returned : "(GHL returned no status)";
+  return { live: false, kind: "not_live", reason: warning || `NOT LIVE. The workflow read back as ${status} rather than "published", so it is not running.` };
+}
 var norm5, sleep5, PREVIEW_SNIPPET_LENGTH, JournalHookError;
 var init_execute = __esm({
   "src/intake-to-build/execute.ts"() {
@@ -53549,9 +53847,12 @@ function makeExecuteDeps(client, builderClient, locationId2, registry2) {
     deleteWorkflow: async (workflowId) => {
       await builderClient.deleteWorkflow(workflowId);
     },
-    publishWorkflow: async (workflowId) => {
-      await builderClient.publishWorkflow(workflowId);
-    }
+    // The result is RETURNED, not awaited-and-dropped. It carries the client's
+    // own `publish_check` — the status read back from the SAVED workflow after
+    // the write, with a NOT LIVE / NOT VERIFIED sentence when the publish did
+    // not land. Discarding it is what let a workflow left in Draft be counted
+    // into "Published N workflow(s) live"; the executor now reads it.
+    publishWorkflow: (workflowId) => builderClient.publishWorkflow(workflowId)
   };
 }
 function makeRevertDeps(client, builderClient, locationId2) {
@@ -53759,7 +54060,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
           if (saved2?.wholePreset) {
             scopeSource = "cockpit";
           } else if (!saved2 && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
-            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: NOT_CONFIRMED_SCOPE });
+            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(activeLocation) });
           } else if (saved2 && Array.isArray(saved2.features)) {
             const features = saved2.features.filter(isFeatureId);
             if (!features.length) {
@@ -53817,11 +54118,11 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
       if (!gate2.ok) return jsonResponse({ ok: false, phase: "plan", error: gate2.error, savedPlan: saved ? { planId: saved.planId, savedAt: saved.savedAt } : void 0 });
       const plan = gate2.plan;
       const planSource = gate2.source;
-      if (planSource === "saved") {
+      if (!fromPreset) {
         const board = readBoardState();
         const current = board.scope?.[activeLocation];
         if (!current && Array.isArray(board.assessmentPurchases?.[activeLocation])) {
-          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: NOT_CONFIRMED_SCOPE });
+          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(activeLocation) });
         }
         if (current && !current.wholePreset && Array.isArray(current.features) && !current.features.some(isFeatureId)) {
           return jsonResponse({
@@ -53831,7 +54132,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
             error: "No features are selected for this client, so nothing was built, not even from the saved plan. Open the client's Review screen, tick the features to build, confirm, and run the build again."
           });
         }
-        if (!savedPlanMatchesScope(saved, current)) {
+        if (saved && planSource !== "argument-replaces-saved" && !savedPlanMatchesScope(saved, current)) {
           const planned = saved?.scope ? [...saved.scope.built, ...(saved.scope.omitted ?? []).map((f) => f.id)].join(", ") || "no features" : "everything in the preset";
           const now = current?.wholePreset ? "everything in the preset (confirmed)" : current ? current.features.filter(isFeatureId).join(", ") : "everything in the preset (nothing is saved)";
           return jsonResponse({
@@ -54523,7 +54824,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod81, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE;
+var import_zod81, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -54570,6 +54871,12 @@ var init_intake_to_build = __esm({
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
     NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. Open the client's Review screen: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
+    WHOLE_PRESET_NOT_KEPT = "Note: an earlier build on this client used everything in the preset, and that choice was not kept, so the Review screen ticks only what they bought. Tick everything again if that is still what you want.";
+    notConfirmedAsk = (locationId2) => {
+      const sp = readSavedPlan(locationId2);
+      const fromPreset = typeof sp?.plan?.preset === "string";
+      return sp && !sp.scope && fromPreset ? `${NOT_CONFIRMED_SCOPE} ${WHOLE_PRESET_NOT_KEPT}` : NOT_CONFIRMED_SCOPE;
+    };
   }
 });