@elitedcs/ghl-mcp 3.88.2 → 3.88.3

package/dist/index.js

@@ -446,13 +446,13 @@ function setProtectedAccount(locationId2, name, file2 = accountRulesPath()) {
 function isWriteMethod(method) {
   return WRITE_METHODS.has(method.toUpperCase());
 }
-function locationIdsInRequest(path44, opts = {}) {
+function locationIdsInRequest(path45, opts = {}) {
   const found = /* @__PURE__ */ new Set();
   const add2 = (v) => {
     if (typeof v === "string" && v.trim()) found.add(v.trim());
     else if (Array.isArray(v)) v.forEach(add2);
   };
-  const seg = /\/locations\/([^/?#]+)/i.exec(path44);
+  const seg = /\/locations\/([^/?#]+)/i.exec(path45);
   if (seg) add2(decodeURIComponent(seg[1]));
   for (const src of [opts.params, opts.body]) {
     if (!src || typeof src !== "object") continue;
@@ -479,7 +479,7 @@ function protectedRefusalFor(locationId2, rulesFile) {
   const name = rules.protected[id];
   return name ? protectedRefusalMessage(name, false) : null;
 }
-function assertWriteAllowed(method, path44, opts = {}) {
+function assertWriteAllowed(method, path45, opts = {}) {
   if (!isWriteMethod(method)) return;
   let rules;
   try {
@@ -488,7 +488,7 @@ function assertWriteAllowed(method, path44, opts = {}) {
     throw new Error(UNREADABLE_RULES_MSG);
   }
   if (Object.keys(rules.protected).length === 0) return;
-  for (const id of locationIdsInRequest(path44, opts)) {
+  for (const id of locationIdsInRequest(path45, opts)) {
     const name = rules.protected[id];
     if (name) throw new Error(protectedRefusalMessage(name, false));
   }
@@ -646,8 +646,8 @@ var init_ghl_client = __esm({
           Version: version || GHL_API_VERSION
         };
       }
-      buildUrl(path44, params) {
-        const url = new URL(path44, GHL_BASE_URL);
+      buildUrl(path45, params) {
+        const url = new URL(path45, GHL_BASE_URL);
         if (params) {
           for (const [key, value] of Object.entries(params)) {
             if (value !== void 0 && value !== null) {
@@ -657,19 +657,19 @@ var init_ghl_client = __esm({
         }
         return url.toString();
       }
-      async request(method, path44, options = {}, attempt = 0) {
+      async request(method, path45, options = {}, attempt = 0) {
         this.signal?.throwIfAborted();
         if (inBuildRequestScope() && method === "GET" && !inAccountReadAttempt()) {
-          return retryAccountRead(() => this.request(method, path44, options, attempt), `${method} ${path44}`);
+          return retryAccountRead(() => this.request(method, path45, options, attempt), `${method} ${path45}`);
         }
         if (attempt === 0) {
-          assertWriteAllowed(method, path44, {
+          assertWriteAllowed(method, path45, {
             params: options.params,
             body: options.body,
             defaultLocationId: this.defaultLocationId
           });
         }
-        const url = this.buildUrl(path44, options.params);
+        const url = this.buildUrl(path45, options.params);
         const headers = this.buildHeaders(options.version);
         const fetchOptions = {
           method,
@@ -690,14 +690,14 @@ var init_ghl_client = __esm({
             clearTimeout(timeout);
             this.signal?.throwIfAborted();
             if (error instanceof Error && error.name === "AbortError") {
-              throw requestError(new Error(`Request timeout (30s): ${method} ${path44}`));
+              throw requestError(new Error(`Request timeout (30s): ${method} ${path45}`));
             }
             if (!inBuildRequestScope() && !options.noRetry && attempt < MAX_RETRIES) {
               const delay5 = computeRetryDelay(null, attempt, BASE_DELAY_MS);
-              process.stderr.write(`[ghl-mcp] Network error on ${method} ${path44}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+              process.stderr.write(`[ghl-mcp] Network error on ${method} ${path45}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
               await new Promise((r) => setTimeout(r, delay5));
-              return this.request(method, path44, options, attempt + 1);
+              return this.request(method, path45, options, attempt + 1);
             }
             throw requestError(error);
           } finally {
@@ -705,10 +705,10 @@ var init_ghl_client = __esm({
           }
           if (!inBuildRequestScope() && !options.noRetry && (response.status === 429 || response.status >= 500) && attempt < MAX_RETRIES) {
             const delay5 = computeRetryDelay(response.headers.get("Retry-After"), attempt, BASE_DELAY_MS);
-            process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path44}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+            process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path45}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
             await new Promise((r) => setTimeout(r, delay5));
-            return this.request(method, path44, options, attempt + 1);
+            return this.request(method, path45, options, attempt + 1);
           }
           if (!response.ok) {
             let errorBody = "";
@@ -717,7 +717,7 @@ var init_ghl_client = __esm({
             } catch {
             }
             throw requestError(new Error(
-              `GHL API Error ${response.status} ${response.statusText}: ${method} ${path44}
+              `GHL API Error ${response.status} ${response.statusText}: ${method} ${path45}
 ${errorBody}`
             ));
           }
@@ -738,20 +738,20 @@ ${errorBody}`
           combined?.dispose();
         }
       }
-      async get(path44, options) {
-        return this.request("GET", path44, options);
+      async get(path45, options) {
+        return this.request("GET", path45, options);
       }
-      async post(path44, options) {
-        return this.request("POST", path44, options);
+      async post(path45, options) {
+        return this.request("POST", path45, options);
       }
-      async put(path44, options) {
-        return this.request("PUT", path44, options);
+      async put(path45, options) {
+        return this.request("PUT", path45, options);
       }
-      async patch(path44, options) {
-        return this.request("PATCH", path44, options);
+      async patch(path45, options) {
+        return this.request("PATCH", path45, options);
       }
-      async delete(path44, options) {
-        return this.request("DELETE", path44, options);
+      async delete(path45, options) {
+        return this.request("DELETE", path45, options);
       }
       /**
        * Helper: resolves locationId from args or falls back to default
@@ -7109,11 +7109,11 @@ function registerEmailTools(server2, client) {
 function registerEmailBuilderInternalTools(server2, builderClient, publicClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function builderRequest2(method, path44, body) {
-    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path44}`, body ? { body } : {});
+  async function builderRequest2(method, path45, body) {
+    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path45}`, body ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path44}
+      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -10913,9 +10913,440 @@ var init_workflow_builder = __esm({
   }
 });
 
+// src/command-os/prospect/net-guard.ts
+function ipv6Bytes(raw) {
+  let s = raw.toLowerCase().replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const tail = [];
+  const v4 = s.match(/:(\d{1,3}(?:\.\d{1,3}){3})$/);
+  if (v4) {
+    const parts = v4[1].split(".").map(Number);
+    if (parts.some((n) => n > 255)) return void 0;
+    tail.push(...parts);
+    s = s.slice(0, s.length - v4[1].length) + "0:0";
+  }
+  const halves = s.split("::");
+  if (halves.length > 2) return void 0;
+  const groups = (h) => h === "" ? [] : h.split(":");
+  const head4 = groups(halves[0]);
+  const rest = halves.length === 2 ? groups(halves[1]) : [];
+  const fill = halves.length === 2 ? 8 - head4.length - rest.length : 0;
+  if (fill < 0 || halves.length === 1 && head4.length !== 8) return void 0;
+  const all = [...head4, ...Array(fill).fill("0"), ...rest];
+  if (all.length !== 8 || all.some((g) => !/^[0-9a-f]{1,4}$/.test(g))) return void 0;
+  const bytes = all.flatMap((g) => {
+    const n = parseInt(g, 16);
+    return [n >> 8, n & 255];
+  });
+  if (tail.length) bytes.splice(12, 4, ...tail);
+  return bytes;
+}
+function privateV4(b) {
+  const [a, c, d] = b;
+  return a === 0 || a === 10 || a === 100 && c >= 64 && c <= 127 || a === 127 || a === 169 && c === 254 || a === 172 && c >= 16 && c <= 31 || a === 192 && c === 0 && d === 0 || a === 192 && c === 0 && d === 2 || a === 192 && c === 88 && d === 99 || a === 192 && c === 168 || a === 198 && (c === 18 || c === 19) || a === 198 && c === 51 && d === 100 || a === 203 && c === 0 && d === 113 || a >= 224;
+}
+function isPrivateAddress(ip) {
+  const bare = ip.replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const v = import_node_net.default.isIP(bare);
+  if (v === 4) return privateV4(bare.split(".").map(Number));
+  if (v !== 6) return true;
+  const b = ipv6Bytes(bare);
+  if (!b) return true;
+  const zeroTo = (n) => b.slice(0, n).every((x) => x === 0);
+  if (zeroTo(16)) return true;
+  if (zeroTo(15) && b[15] === 1) return true;
+  if (zeroTo(10) && b[10] === 255 && b[11] === 255) return privateV4(b.slice(12));
+  if (zeroTo(12)) return true;
+  if (zeroTo(8) && b[8] === 255 && b[9] === 255 && b[10] === 0 && b[11] === 0) return true;
+  if (b[0] === 32 && b[1] === 2) return privateV4(b.slice(2, 6));
+  if ((b[0] & 224) !== 32) return true;
+  if (b[0] === 32 && b[1] === 1 && (b[2] & 254) === 0) return true;
+  if (b[0] === 32 && b[1] === 1 && b[2] === 13 && b[3] === 184) return true;
+  if (b[0] === 63 && b[1] === 255 && (b[2] & 240) === 0) return true;
+  return false;
+}
+function withDeadline(p, ms, why, signal) {
+  return new Promise((resolve13, reject) => {
+    if (signal?.aborted) {
+      p.catch(() => void 0);
+      reject(new Error("aborted"));
+      return;
+    }
+    const t = setTimeout(() => reject(new Error(why)), ms);
+    const onAbort = () => {
+      clearTimeout(t);
+      reject(new Error("aborted"));
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+    p.then((v) => {
+      clearTimeout(t);
+      signal?.removeEventListener("abort", onAbort);
+      resolve13(v);
+    }, (e) => {
+      clearTimeout(t);
+      signal?.removeEventListener("abort", onAbort);
+      reject(e);
+    });
+  });
+}
+async function publicAddressProblem(raw, lookup = import_node_dns.default.promises.lookup) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return "not a web address";
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") return `only web addresses are opened (this one is ${u.protocol})`;
+  if (u.username || u.password) return "an address carrying a login is not opened";
+  const host = u.hostname.replace(/^\[|\]$/g, "");
+  if (LOCAL_NAME.test(host)) return "a local or private address is never opened";
+  if (import_node_net.default.isIP(host)) return isPrivateAddress(host) ? "a local or private address is never opened" : void 0;
+  try {
+    const all = await withDeadline(lookup(host, { all: true, verbatim: true }), 8e3, "the address lookup took too long");
+    if (!all.length) return "the address does not resolve";
+    if (all.some((a) => isPrivateAddress(a.address))) return "the address resolves to a local or private network, so it is never opened";
+  } catch {
+    return "the address does not resolve";
+  }
+  return void 0;
+}
+function publicOnlyLookup(hostname2, options, callback) {
+  import_node_dns.default.lookup(hostname2, { ...options, all: true, verbatim: true }, (err, addresses) => {
+    if (err) return callback(err, "", 0);
+    const list3 = addresses;
+    const bad = list3.find((a) => isPrivateAddress(a.address));
+    if (!list3.length || bad) {
+      const e = new Error("the address resolves to a local or private network, so it is never opened");
+      e.code = "EPRIVATE";
+      return callback(e, "", 0);
+    }
+    if (options.all) return callback(null, list3);
+    return callback(null, list3[0].address, list3[0].family);
+  });
+}
+function transferBudget(totalBytes = 25e7) {
+  const opts = { keepAlive: true, maxSockets: 8, lookup: publicOnlyLookup };
+  return { bytesLeft: totalBytes, agents: { http: new import_node_http.default.Agent(opts), https: new import_node_https.default.Agent(opts) } };
+}
+function closeTransferBudget(b) {
+  b.agents.http.destroy();
+  b.agents.https.destroy();
+}
+function guardedTransfer(url, init) {
+  return new Promise((resolve13, reject) => {
+    let u;
+    try {
+      u = new URL(url);
+    } catch {
+      reject(new Error("not a web address"));
+      return;
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+      reject(new Error("only web addresses are opened"));
+      return;
+    }
+    if (u.username || u.password) {
+      reject(new Error("an address carrying a login is not opened"));
+      return;
+    }
+    if (refusedHost(u.hostname)) {
+      reject(new Error("a local or private address is never opened"));
+      return;
+    }
+    let settled = false;
+    let cleanup = () => void 0;
+    const settle2 = (f) => {
+      if (settled) return;
+      settled = true;
+      init.signal.removeEventListener("abort", onAbort);
+      cleanup();
+      f();
+    };
+    const onAbort = () => settle2(() => {
+      req.destroy();
+      reject(new Error("aborted"));
+    });
+    if (init.signal.aborted) {
+      reject(new Error("aborted"));
+      return;
+    }
+    init.signal.addEventListener("abort", onAbort, { once: true });
+    const isHttps = u.protocol === "https:";
+    const headers = {};
+    for (const [k, v] of Object.entries(init.headers)) if (!/^(?:host|connection|keep-alive|proxy-.*|transfer-encoding|upgrade|te|trailer|content-length|:.*)$/i.test(k)) headers[k] = v;
+    headers["accept-encoding"] = "gzip, deflate, br";
+    const req = (isHttps ? import_node_https.default : import_node_http.default).request(u, { method: init.method, headers, agent: isHttps ? init.budget.agents.https : init.budget.agents.http, lookup: publicOnlyLookup }, (res) => {
+      const out = [];
+      for (let i = 0; i < res.rawHeaders.length; i += 2) out.push([res.rawHeaders[i], res.rawHeaders[i + 1]]);
+      const enc = (res.headers["content-encoding"] ?? "").toString().toLowerCase();
+      const unzip = enc.includes("br") ? import_node_zlib.default.createBrotliDecompress() : enc.includes("gzip") ? import_node_zlib.default.createGunzip() : enc.includes("deflate") ? import_node_zlib.default.createInflate() : void 0;
+      const stream = unzip ? res.pipe(unzip) : res;
+      cleanup = () => {
+        unzip?.destroy();
+        res.destroy();
+      };
+      const kept = unzip ? out.filter(([k]) => !/^(?:content-encoding|content-length)$/i.test(k)) : out;
+      const chunks = [];
+      let size = 0;
+      const finish3 = (incomplete) => settle2(() => resolve13({ status: res.statusCode ?? 0, headers: kept, body: Buffer.concat(chunks), incomplete }));
+      stream.on("data", (c) => {
+        size += c.length;
+        init.budget.bytesLeft -= c.length;
+        if (size > init.maxBytes) finish3(`the file is larger than ${Math.round(init.maxBytes / 1e6)} MB, so it was not loaded`);
+        else if (init.budget.bytesLeft < 0) finish3("the run's limit on how much it downloads was reached");
+        else chunks.push(c);
+      });
+      stream.on("end", () => finish3(res.complete ? void 0 : "the file did not arrive whole"));
+      stream.on("error", () => finish3("the file did not arrive whole"));
+      res.on("aborted", () => finish3("the file did not arrive whole"));
+      res.on("error", () => finish3("the file did not arrive whole"));
+      res.on("close", () => {
+        if (!res.complete) finish3("the file did not arrive whole");
+        else if (!unzip) finish3();
+      });
+      if (unzip) unzip.on("close", () => finish3(res.complete ? void 0 : "the file did not arrive whole"));
+    });
+    req.setTimeout(3e4, () => req.destroy(new Error("no answer within 30 seconds")));
+    req.on("error", (e) => settle2(() => reject(e)));
+    req.end();
+  });
+}
+async function guardedFetchLike(url, init = {}) {
+  const budget = transferBudget(6e7);
+  try {
+    let cur = url;
+    const signal = init.signal ?? AbortSignal.timeout(2e4);
+    for (let hop = 0; hop <= 5; hop++) {
+      if (signal.aborted) throw new Error("aborted");
+      const problem = await withDeadline(publicAddressProblem(cur), 9e3, "the address lookup took too long", signal);
+      if (problem && problem !== "the address does not resolve") throw new Error(problem);
+      const r = await guardedTransfer(cur, { method: "GET", headers: init.headers ?? {}, signal, maxBytes: init.statusOnly ? 65536 : Math.min(init.maxBytes ?? 15e6, 6e7), budget });
+      const cutBySize = init.statusOnly && r.incomplete?.startsWith("the file is larger than");
+      if (r.incomplete && !cutBySize) throw new Error(r.incomplete);
+      const loc = r.headers.find(([k]) => k.toLowerCase() === "location")?.[1];
+      if (r.status >= 300 && r.status < 400 && loc && init.redirect !== "manual") {
+        cur = new URL(loc, cur).toString();
+        continue;
+      }
+      const body = r.body;
+      const get = (n) => r.headers.find(([k]) => k.toLowerCase() === n.toLowerCase())?.[1] ?? null;
+      return { ok: r.status >= 200 && r.status < 300, status: r.status, url: cur, text: async () => body.toString("utf8"), arrayBuffer: async () => body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength), headers: { get } };
+    }
+    throw new Error("more than 5 redirects");
+  } finally {
+    closeTransferBudget(budget);
+  }
+}
+async function guardedPost(url, body, headers, timeoutMs = 2e4) {
+  const started = Date.now();
+  const problem = await withDeadline(publicAddressProblem(url), timeoutMs, `no answer within ${Math.round(timeoutMs / 1e3)} seconds`);
+  if (problem && problem !== "the address does not resolve") throw new Error(problem);
+  const left = Math.max(1, timeoutMs - (Date.now() - started));
+  const u = new URL(url);
+  const mod = u.protocol === "https:" ? import_node_https.default : import_node_http.default;
+  return new Promise((resolve13, reject) => {
+    let settled = false;
+    const chunks = [];
+    let size = 0;
+    const settle2 = (f) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      f();
+    };
+    const req = mod.request(u, { method: "POST", headers: { ...headers, "content-length": String(Buffer.byteLength(body)) }, lookup: publicOnlyLookup }, (res) => {
+      const done = () => settle2(() => resolve13({ status: res.statusCode ?? 0, text: Buffer.concat(chunks).toString("utf8") }));
+      res.on("data", (c) => {
+        size += c.length;
+        if (size <= 1e6) chunks.push(c);
+        else {
+          res.destroy();
+          done();
+        }
+      });
+      res.on("end", done);
+      res.on("error", done);
+      res.on("close", done);
+    });
+    const timer = setTimeout(() => settle2(() => {
+      req.destroy();
+      reject(new Error(`no answer within ${Math.round(timeoutMs / 1e3)} seconds`));
+    }), left);
+    req.on("error", (e) => settle2(() => reject(e)));
+    req.end(body);
+  });
+}
+function refusedHost(host) {
+  const bare = host.replace(/^\[|\]$/g, "");
+  if (!bare || LOCAL_NAME.test(bare)) return true;
+  if (import_node_net.default.isIP(bare.replace(/%.*$/, ""))) return isPrivateAddress(bare);
+  return /^(?:0x[0-9a-f]*|\d+)(?:\.(?:0x[0-9a-f]*|\d+)){0,3}\.?$/i.test(bare) || bare.includes(":");
+}
+async function startGuardProxy(opts = {}) {
+  const max = opts.maxConnections ?? 8e3;
+  const maxOpen = opts.maxOpen ?? 256;
+  const idleMs = opts.idleMs ?? 3e4;
+  const username = "shopper";
+  const password = (0, import_node_crypto3.randomBytes)(18).toString("hex");
+  const expected = "Basic " + Buffer.from(`${username}:${password}`).toString("base64");
+  const stats = { connections: 0, refused: 0, open: 0 };
+  const sockets = /* @__PURE__ */ new Set();
+  const track = (s) => {
+    sockets.add(s);
+    s.once("close", () => sockets.delete(s));
+  };
+  const authorised = (h) => {
+    const got = Buffer.from(String(h ?? ""));
+    const want = Buffer.from(expected);
+    return got.length === want.length && (0, import_node_crypto3.timingSafeEqual)(got, want);
+  };
+  const server2 = import_node_http.default.createServer((req, res) => {
+    if (!authorised(req.headers["proxy-authorization"])) {
+      stats.refused++;
+      res.writeHead(407, { "proxy-authenticate": 'Basic realm="shopper"' }).end();
+      return;
+    }
+    let u;
+    try {
+      u = new URL(req.url ?? "");
+    } catch {
+      res.writeHead(400).end();
+      return;
+    }
+    if (u.protocol !== "http:" || !["GET", "HEAD"].includes(req.method ?? "") || req.headers.upgrade) {
+      stats.refused++;
+      res.writeHead(405).end();
+      return;
+    }
+    if (++stats.connections > max) {
+      stats.refused++;
+      res.writeHead(429).end();
+      return;
+    }
+    const port2 = Number(u.port || 80);
+    if (!WEB_PORTS.has(port2) || refusedHost(u.hostname)) {
+      stats.refused++;
+      res.writeHead(403).end();
+      return;
+    }
+    const headers = { ...req.headers };
+    delete headers["proxy-connection"];
+    delete headers["proxy-authorization"];
+    const out = import_node_http.default.request({ host: u.hostname.replace(/^\[|\]$/g, ""), port: port2, path: u.pathname + u.search, method: req.method, headers, lookup: publicOnlyLookup, timeout: idleMs }, (up) => {
+      res.writeHead(up.statusCode ?? 502, up.headers);
+      up.pipe(res);
+    });
+    out.on("socket", (s) => track(s));
+    out.on("error", () => {
+      stats.refused++;
+      if (!res.headersSent) res.writeHead(502);
+      res.end();
+    });
+    out.on("timeout", () => out.destroy());
+    out.end();
+  });
+  server2.on("connection", (s) => {
+    s.on("error", () => void 0);
+    if (sockets.size >= maxOpen) {
+      stats.refused++;
+      s.destroy();
+      return;
+    }
+    track(s);
+    stats.open = Math.max(stats.open, sockets.size);
+    s.setTimeout(idleMs, () => s.destroy());
+  });
+  server2.headersTimeout = Math.min(idleMs, 1e4);
+  server2.requestTimeout = idleMs;
+  server2.on("connect", (req, client, head4) => {
+    client.on("error", () => void 0);
+    if (!authorised(req.headers["proxy-authorization"])) {
+      stats.refused++;
+      client.end('HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm="shopper"\r\nContent-Length: 0\r\n\r\n');
+      return;
+    }
+    const [host, portStr] = (req.url ?? "").split(/:(?=\d+$)/);
+    const port2 = Number(portStr || 443);
+    if (++stats.connections > max || !WEB_PORTS.has(port2) || refusedHost(host ?? "")) {
+      stats.refused++;
+      client.end("HTTP/1.1 403 Forbidden\r\n\r\n");
+      return;
+    }
+    const up = import_node_net.default.connect({ host: (host ?? "").replace(/^\[|\]$/g, ""), port: port2, lookup: publicOnlyLookup, timeout: idleMs }, () => {
+      client.write("HTTP/1.1 200 Connection Established\r\n\r\n");
+      if (head4.length) up.write(head4);
+      up.pipe(client);
+      client.pipe(up);
+    });
+    track(up);
+    up.on("error", () => {
+      stats.refused++;
+      client.end("HTTP/1.1 502 Bad Gateway\r\n\r\n");
+    });
+    up.on("timeout", () => {
+      up.destroy();
+      client.destroy();
+    });
+    client.on("error", () => up.destroy());
+    client.on("close", () => up.destroy());
+  });
+  server2.on("clientError", (_e, s) => s.destroy());
+  await new Promise((resolve13, reject) => {
+    const fail = (e) => {
+      server2.removeListener("listening", ok);
+      reject(e);
+    };
+    const ok = () => {
+      server2.removeListener("error", fail);
+      resolve13();
+    };
+    server2.once("error", fail);
+    server2.once("listening", ok);
+    try {
+      server2.listen(0, "127.0.0.1");
+    } catch (e) {
+      server2.removeListener("error", fail);
+      server2.removeListener("listening", ok);
+      reject(e);
+    }
+  });
+  server2.on("error", () => void 0);
+  const port = server2.address().port;
+  return {
+    url: `http://127.0.0.1:${port}`,
+    username,
+    password,
+    stats,
+    // Every socket is destroyed and the close never waits more than two seconds.
+    close: () => new Promise((r) => {
+      const t = setTimeout(r, 2e3);
+      server2.close(() => {
+        clearTimeout(t);
+        r();
+      });
+      for (const s of sockets) s.destroy();
+      server2.closeAllConnections?.();
+    })
+  };
+}
+var import_node_dns, import_node_http, import_node_https, import_node_net, import_node_zlib, import_node_crypto3, LOCAL_NAME, WEB_PORTS;
+var init_net_guard = __esm({
+  "src/command-os/prospect/net-guard.ts"() {
+    "use strict";
+    import_node_dns = __toESM(require("node:dns"));
+    import_node_http = __toESM(require("node:http"));
+    import_node_https = __toESM(require("node:https"));
+    import_node_net = __toESM(require("node:net"));
+    import_node_zlib = __toESM(require("node:zlib"));
+    import_node_crypto3 = require("node:crypto");
+    LOCAL_NAME = /^(?:localhost|localhost\.localdomain|ip6-localhost|ip6-loopback)\.?$|\.(?:localhost|local|internal|lan|home|corp|intranet|localdomain|home\.arpa)\.?$/i;
+    WEB_PORTS = /* @__PURE__ */ new Set([80, 443, 8080, 8443]);
+  }
+});
+
 // src/page-reads.ts
 var page_reads_exports = {};
 __export(page_reads_exports, {
+  pageReadsNet: () => pageReadsNet,
   readPageContent: () => readPageContent,
   readPageFull: () => readPageFull
 });
@@ -10923,11 +11354,11 @@ async function readPageFull(client, pageId, fetcher = fetch) {
   const headers = await client.buildHeaders();
   headers.Origin = "https://app.gohighlevel.com";
   headers.Referer = "https://app.gohighlevel.com/";
-  const path44 = `/page/${pageId}?locationId=${client.locationId}`;
-  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path44}`, { method: "GET", headers });
+  const path45 = `/page/${pageId}?locationId=${client.locationId}`;
+  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path45}`, { method: "GET", headers });
   if (!response.ok) {
     const text3 = await response.text();
-    throw new Error(`Funnel API Error ${response.status}: GET ${path44}
+    throw new Error(`Funnel API Error ${response.status}: GET ${path45}
 ${text3}`);
   }
   const text2 = await response.text();
@@ -10938,20 +11369,24 @@ ${text3}`);
     return JSON.parse(text2.replace(/[\x00-\x1F\x7F]/g, ""));
   }
 }
-async function readPageContent(pageDataDownloadUrl, fetcher = fetch) {
+async function readPageContent(pageDataDownloadUrl, fetcher = (url) => pageReadsNet.read(url)) {
   const parsedUrl = new URL(pageDataDownloadUrl);
   const allowedHosts = ["firebasestorage.googleapis.com", "storage.googleapis.com", "backend.leadconnectorhq.com"];
-  if (!allowedHosts.some((h) => parsedUrl.hostname === h || parsedUrl.hostname.endsWith("." + h))) {
-    throw new Error("URL must be from GHL storage (firebasestorage.googleapis.com). Got: " + parsedUrl.hostname);
+  if (parsedUrl.protocol !== "https:" || !allowedHosts.some((h) => parsedUrl.hostname === h || parsedUrl.hostname.endsWith("." + h))) {
+    throw new Error("URL must be an https address from GHL storage (firebasestorage.googleapis.com). Got: " + parsedUrl.protocol + "//" + parsedUrl.hostname);
   }
   const response = await fetcher(pageDataDownloadUrl);
   if (!response.ok) throw new Error(`Failed to download page data: ${response.status}`);
-  const data = await response.json();
-  return data;
+  return JSON.parse(await response.text());
 }
+var pageReadsNet;
 var init_page_reads = __esm({
   "src/page-reads.ts"() {
     "use strict";
+    init_net_guard();
+    pageReadsNet = {
+      read: (url) => guardedFetchLike(url, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 })
+    };
   }
 });
 
@@ -10986,20 +11421,20 @@ function registerFunnelBuilderTools(server2, builderClient) {
     return;
   }
   const client = builderClient;
-  async function internalGet(path44) {
-    return client.request("GET", path44);
+  async function internalGet(path45) {
+    return client.request("GET", path45);
   }
-  async function internalPost(path44, body) {
-    return client.request("POST", path44, body);
+  async function internalPost(path45, body) {
+    return client.request("POST", path45, body);
   }
-  async function internalPut(path44, body) {
-    return client.request("PUT", path44, body);
+  async function internalPut(path45, body) {
+    return client.request("PUT", path45, body);
   }
-  async function internalDelete(path44) {
-    return client.request("DELETE", path44);
+  async function internalDelete(path45) {
+    return client.request("DELETE", path45);
   }
-  async function funnelRequest(method, path44, body) {
-    const url = `https://backend.leadconnectorhq.com/funnels${path44}`;
+  async function funnelRequest(method, path45, body) {
+    const url = `https://backend.leadconnectorhq.com/funnels${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, {
       ...sendsBody ? { body } : {},
@@ -11012,7 +11447,7 @@ function registerFunnelBuilderTools(server2, builderClient) {
     });
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Funnel API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Funnel API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -11603,17 +12038,17 @@ function requireCompany(api) {
   }
   return company;
 }
-async function call(api, path44, init) {
+async function call(api, path45, init) {
   const headers = { ...await api.headers(), Origin: "https://app.gohighlevel.com", Referer: "https://app.gohighlevel.com/" };
-  if (MUTATING_PATHS.some((mutating) => path44.startsWith(mutating))) {
-    assertWriteAllowed("POST", SVC + path44, { defaultLocationId: api.locationId() });
+  if (MUTATING_PATHS.some((mutating) => path45.startsWith(mutating))) {
+    assertWriteAllowed("POST", SVC + path45, { defaultLocationId: api.locationId() });
   }
   const doFetch = api.fetch ?? fetch;
-  const response = await doFetch(SVC + path44, { ...init, headers });
+  const response = await doFetch(SVC + path45, { ...init, headers });
   const text2 = await response.text();
   if (!response.ok) {
     const hint = response.status === 401 && /not authorized to access this company/i.test(text2) ? " \u2014 the Firebase session is authenticated as a DIFFERENT company than the one that owns this sub-account. Run switch_location for this sub-account and try again." : response.status === 401 ? " \u2014 the template library needs the workflow-builder Firebase session, not the API key alone. Run enable_workflow_builder for this sub-account." : "";
-    throw new Error(`GoHighLevel template library ${response.status} on ${path44}${hint}
+    throw new Error(`GoHighLevel template library ${response.status} on ${path45}${hint}
 ${text2.slice(0, 300)}`);
   }
   return text2 ? JSON.parse(text2) : {};
@@ -11792,7 +12227,7 @@ async function confirmPreviewUrl(pageId, timeoutMs = 2e4) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    const response = await fetch(url, { redirect: "follow", signal: controller.signal, headers: { Accept: "text/html,*/*" } });
+    const response = await guardedFetchLike(url, { signal: controller.signal, headers: { Accept: "text/html,*/*" } });
     const body = await response.text();
     const bytes = body.length;
     const reachable = response.ok && bytes > 0;
@@ -11896,6 +12331,7 @@ var init_ghl_page = __esm({
   "src/command-os/design/ghl-page.ts"() {
     "use strict";
     init_theme();
+    init_net_guard();
     GHL_PREVIEW_HOST = "https://sites.leadconnectorhq.com";
     SLOT_LABEL = {
       primary: { id: "E1", label: "brand colour" },
@@ -11970,12 +12406,12 @@ function normaliseColour(value) {
 function renderedPalette(envelope) {
   const defs = pageVariables(envelope);
   const paints = [];
-  const walk = (node, path44, prop) => {
-    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path44}[${i}]`, prop));
+  const walk = (node, path45, prop) => {
+    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path45}[${i}]`, prop));
     if (isRecord8(node)) {
       for (const [k, x] of Object.entries(node)) {
         if (DEFINITION_KEYS.has(k) || k.startsWith("--")) continue;
-        walk(x, `${path44}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
+        walk(x, `${path45}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
       }
       return;
     }
@@ -11985,7 +12421,7 @@ function renderedPalette(envelope) {
     const resolved2 = resolveValue(raw, defs);
     const colour = normaliseColour(resolved2);
     if (colour === null && resolved2 !== null) return;
-    paints.push({ path: path44, prop, kind: kindOf(prop), colour });
+    paints.push({ path: path45, prop, kind: kindOf(prop), colour });
   };
   walk(envelope, "", "");
   const face = (name, settingsKey) => {
@@ -12080,7 +12516,7 @@ var init_rendered_palette = __esm({
     VISIBLE_CHANGE = 0.05;
     BARELY_SHARE = 0.5;
     CARRIES_COLOUR = 0.02;
-    paintGroup = (path44) => /^\.(sections|popups)\[\d+\]/.exec(path44)?.[0]?.slice(1) ?? "page";
+    paintGroup = (path45) => /^\.(sections|popups)\[\d+\]/.exec(path45)?.[0]?.slice(1) ?? "page";
     looksDifferent = (a, b) => {
       if (a === b) return false;
       if (a === "transparent" || b === "transparent" || a.startsWith("rgba") || b.startsWith("rgba")) return a !== b;
@@ -15348,7 +15784,7 @@ function colorsIn(src) {
   return [...hex, ...rgb, ...hsl];
 }
 async function extractStatic(url, opts = {}) {
-  const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+  const fetchImpl = opts.fetchImpl ?? guardedFetchLike;
   const warnings = [];
   const page = await fetchText(url, fetchImpl);
   if (!page.ok || !page.text) throw new Error(`Could not fetch ${url} (status ${page.status}). Nothing was extracted.`);
@@ -15777,6 +16213,7 @@ var init_extract = __esm({
     init_schema();
     init_store();
     init_svg_sanitize();
+    init_net_guard();
     UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36 GHLCommand-DesignStudio/0.1";
     rank2 = (arr) => {
       const m = /* @__PURE__ */ new Map();
@@ -16655,9 +17092,9 @@ function removalHoldBack(opts) {
   if (opts.multiPageStepNames.length > 0) return `${opts.multiPageStepNames.length} step(s) carry more than one page (${opts.multiPageStepNames.join(", ")}) and only the first of each was rebuilt`;
   return null;
 }
-function brandedPath(path44, name, taken) {
+function brandedPath(path45, name, taken) {
   const normalize2 = (s) => s.replace(/^\/+|\/+$/g, "").toLowerCase();
-  const base = normalize2(path44 ?? "") || name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "page";
+  const base = normalize2(path45 ?? "") || name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "page";
   const used = new Set([...taken].map(normalize2));
   let candidate = `${base}-branded`;
   for (let n = 2; used.has(candidate); n++) candidate = `${base}-branded-${n}`;
@@ -16685,9 +17122,9 @@ function rewriteTemplateLinks(envelope, destinations) {
         representation = "page";
         matches = destinations.filter((d2) => d2.pageId === preview[2]);
       } else if (!/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i.test(from) && !from.startsWith("#")) {
-        const [path44] = from.split(/[?#]/);
-        suffix = from.slice(path44.length);
-        matches = destinations.filter((d2) => d2.path && normalize2(d2.path) === normalize2(path44));
+        const [path45] = from.split(/[?#]/);
+        suffix = from.slice(path45.length);
+        matches = destinations.filter((d2) => d2.path && normalize2(d2.path) === normalize2(path45));
       }
     }
     if (matches.length !== 1) {
@@ -16770,8 +17207,8 @@ function registerPageStudioTools(server2, builderClient) {
     }
     return { map: out, truncated };
   }
-  async function funnelRequest(method, path44, body) {
-    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path44}`, {
+  async function funnelRequest(method, path45, body) {
+    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path45}`, {
       ...body ? { body } : {},
       headers: {
         // Internal-API calls require the app origin (autosave needs the
@@ -16780,7 +17217,7 @@ function registerPageStudioTools(server2, builderClient) {
         Referer: "https://app.gohighlevel.com/"
       }
     });
-    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path44}
+    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path45}
 ${await response.text()}`);
     const text2 = await response.text();
     return text2 ? JSON.parse(text2) : {};
@@ -17018,9 +17455,9 @@ ${await response.text()}`);
           if (!step.pageId) throw new Error("this step has no page to rebuild");
           const meta = await funnelRequest("GET", `/page/${step.pageId}?locationId=${client.locationId}`);
           if (typeof meta.pageDataDownloadUrl !== "string" || !meta.pageDataDownloadUrl) throw new Error("GoHighLevel has no saved content for this page yet");
-          const response = await fetch(meta.pageDataDownloadUrl);
+          const response = await pageStudioNet.read(meta.pageDataDownloadUrl, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
           if (!response.ok) throw new Error(`page content read failed (${response.status})`);
-          loaded.push({ ...step, envelope: await response.json() });
+          loaded.push({ ...step, envelope: JSON.parse(await response.text()) });
         } catch (e) {
           throw new Error(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
         }
@@ -17029,7 +17466,8 @@ ${await response.text()}`);
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), 3e4);
         try {
-          return await fetch(url, { signal: controller.signal, headers: { "Cache-Control": "no-cache" } });
+          const r = await pageStudioNet.read(url, { signal: controller.signal, headers: { "Cache-Control": "no-cache" }, maxBytes: 5e7 });
+          return { ok: r.ok, status: r.status, text: () => r.text(), json: async () => JSON.parse(await r.text()) };
         } finally {
           clearTimeout(timer);
         }
@@ -17126,9 +17564,9 @@ ${await response.text()}`);
             await new Promise((r) => setTimeout(r, 1200));
           }
           if (typeof after.pageDataDownloadUrl !== "string" || !after.pageDataDownloadUrl) throw new Error("the fresh page saved but GoHighLevel is not serving it");
-          const response = await fetch(after.pageDataDownloadUrl);
+          const response = await pageStudioNet.read(after.pageDataDownloadUrl, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
           if (!response.ok) throw new Error(`saved content read failed (${response.status})`);
-          const saved = await response.json();
+          const saved = JSON.parse(await response.text());
           storedByPage.set(step.newPageId, saved);
           const savedText = JSON.stringify(saved).toLowerCase();
           if (formId && forms.length) {
@@ -17545,7 +17983,7 @@ ${await response.text()}`);
     }
   );
 }
-var import_zod43, crypto4, valueCardSchema;
+var import_zod43, crypto4, pageStudioNet, valueCardSchema;
 var init_page_studio = __esm({
   "src/tools/page-studio.ts"() {
     "use strict";
@@ -17562,6 +18000,8 @@ var init_page_studio = __esm({
     init_tool_helpers();
     init_compose();
     init_website();
+    init_net_guard();
+    pageStudioNet = { read: guardedFetchLike };
     valueCardSchema = import_zod43.z.object({
       title: import_zod43.z.string().describe("Card title (short, uppercase reads best)."),
       bodyHtml: import_zod43.z.string().describe("Card body as HTML (<p>\u2026</p>). May use {{location.*}} merge fields."),
@@ -17649,13 +18089,13 @@ function cleanFormDataForSave(formData) {
   const cleaned = dropRedundantCaseCollidingKeys(formData);
   return isJsonObject(cleaned) ? cleaned : formData;
 }
-async function formApiRequest(client, method, path44, body) {
-  const url = `https://backend.leadconnectorhq.com/forms${path44}`;
+async function formApiRequest(client, method, path45, body) {
+  const url = `https://backend.leadconnectorhq.com/forms${path45}`;
   const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
   const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
   if (!response.ok) {
     const text3 = await response.text();
-    throw new Error(`Form API Error ${response.status}: ${method} ${path44}
+    throw new Error(`Form API Error ${response.status}: ${method} ${path45}
 ${text3}`);
   }
   const text2 = await response.text();
@@ -17697,7 +18137,7 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     );
     return;
   }
-  const formRequest = (method, path44, body) => formApiRequest(client, method, path44, body);
+  const formRequest = (method, path45, body) => formApiRequest(client, method, path45, body);
   server2.tool(
     "get_form_full",
     "Get a form with full builder data: all fields (labels, types, IDs, validation), conditional logic, auto-responder config, email notification settings, styling, and version history. This is the internal API \u2014 it returns what the form builder UI shows, with one exception: where GoHighLevel stores the same value under two spellings of one key that differ only in case (it writes custom fields with both `Id` and `id`), only the lowercase one is returned. No value is lost, and the result can be edited and passed straight back to update_form.",
@@ -17831,10 +18271,10 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     },
     async ({ formId, limit, skip }) => {
       try {
-        let path44 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
-        if (formId) path44 += `&formId=${formId}`;
-        if (skip) path44 += `&skip=${skip}`;
-        const result = await formRequest("GET", path44);
+        let path45 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
+        if (formId) path45 += `&formId=${formId}`;
+        if (skip) path45 += `&skip=${skip}`;
+        const result = await formRequest("GET", path45);
         return {
           content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
         };
@@ -17966,12 +18406,8 @@ async function readWorkflow(bc, workflowId) {
   }
 }
 async function submit(url, body) {
-  const res = await fetch(url, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", Accept: "application/json" },
-    body: JSON.stringify(body)
-  });
-  const text2 = (await res.text().catch(() => "")).slice(0, 300);
+  const res = await guardedPost(url, JSON.stringify(body), { "Content-Type": "application/json", Accept: "application/json" });
+  const text2 = res.text.slice(0, 300);
   return { httpStatus: res.status, blockedByCaptcha: res.status === 403 && /captcha|turnstile/i.test(text2), text: text2 };
 }
 function registerFunnelQaTools(server2, client, builderClient) {
@@ -18226,6 +18662,7 @@ var init_funnel_qa = __esm({
     "use strict";
     import_zod45 = require("zod");
     init_tool_helpers();
+    init_net_guard();
     asObj = (v) => v && typeof v === "object" ? v : {};
     asArr = (v) => Array.isArray(v) ? v : [];
     str = (v) => typeof v === "string" ? v : void 0;
@@ -18242,13 +18679,13 @@ var init_funnel_qa = __esm({
 function registerPipelineBuilderTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function pipelineRequest(method, path44, body) {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path44}`;
+  async function pipelineRequest(method, path45, body) {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT" || method === "PATCH");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -19064,9 +19501,6 @@ var init_telemetry_transport = __esm({
 });
 
 // src/interactive-capture.ts
-function chromeProfileDir() {
-  return path9.join(appDataDir(), "chrome-profile");
-}
 function captureStatePath() {
   return path9.join(appDataDir(), "interactive-capture.json");
 }
@@ -19235,9 +19669,9 @@ function planFromPayload(payload) {
   return payload?.plan === "command-os" ? "command-os" : "mcp";
 }
 function legacyDeviceFingerprint() {
-  const os8 = require("node:os");
+  const os9 = require("node:os");
   const crypto9 = require("node:crypto");
-  const raw = `${os8.hostname()}:${os8.userInfo().username}:${os8.platform()}:${os8.arch()}`;
+  const raw = `${os9.hostname()}:${os9.userInfo().username}:${os9.platform()}:${os9.arch()}`;
   return crypto9.createHash("sha256").update(raw).digest("hex").slice(0, 16);
 }
 function deviceFingerprint(opts) {
@@ -19277,7 +19711,7 @@ function base64urlDecode(s) {
 async function getPublicKey() {
   if (cachedPublicKey) return cachedPublicKey;
   const raw = Buffer.from(ATTESTATION_PUBLIC_KEY_B64, "base64");
-  const key = await import_node_crypto3.webcrypto.subtle.importKey(
+  const key = await import_node_crypto4.webcrypto.subtle.importKey(
     "raw",
     raw,
     { name: "Ed25519" },
@@ -19325,7 +19759,7 @@ async function verifyAttestation(token2, bindings, now = /* @__PURE__ */ new Dat
   let signatureValid;
   try {
     const key = await getPublicKey();
-    signatureValid = await import_node_crypto3.webcrypto.subtle.verify({ name: "Ed25519" }, key, signatureBytes, payloadBytes);
+    signatureValid = await import_node_crypto4.webcrypto.subtle.verify({ name: "Ed25519" }, key, signatureBytes, payloadBytes);
   } catch {
     return { ok: false, reason: "bad-signature" };
   }
@@ -19357,11 +19791,11 @@ function shouldRenew(payload, now = /* @__PURE__ */ new Date()) {
   const remainingMs = expiry - now.getTime();
   return remainingMs < 7 * 24 * 60 * 60 * 1e3;
 }
-var import_node_crypto3, ATTESTATION_PUBLIC_KEY_B64, ATTESTATION_VERSION, ATTESTATION_TTL_DAYS, ATTESTATION_GRACE_DAYS, cachedPublicKey;
+var import_node_crypto4, ATTESTATION_PUBLIC_KEY_B64, ATTESTATION_VERSION, ATTESTATION_TTL_DAYS, ATTESTATION_GRACE_DAYS, cachedPublicKey;
 var init_attestation = __esm({
   "src/attestation.ts"() {
     "use strict";
-    import_node_crypto3 = require("node:crypto");
+    import_node_crypto4 = require("node:crypto");
     ATTESTATION_PUBLIC_KEY_B64 = "8KJo8V3Z7ngeToIQfOXpKdlr/EA34hXJVEIpW0A7wqs=";
     ATTESTATION_VERSION = 1;
     ATTESTATION_TTL_DAYS = 30;
@@ -20694,23 +21128,23 @@ function moneySummary(subs, invoices, charges, products, now = /* @__PURE__ */ n
     }
   }
   const nowS = now.getTime() / 1e3;
-  const within = (t, days) => t <= nowS && nowS - t <= days * 86400;
+  const within2 = (t, days) => t <= nowS && nowS - t <= days * 86400;
   const r7 = /* @__PURE__ */ new Map(), r30 = /* @__PURE__ */ new Map();
   let c7 = 0, c30 = 0, failed30 = 0;
   for (const c of charges) {
-    if (!within(c.created, 30)) continue;
+    if (!within2(c.created, 30)) continue;
     if (c.status === "failed") {
       failed30++;
       continue;
     }
     if (c.status !== "succeeded") continue;
     const currency = upper(c.currency);
-    const net = fromMinor(c.amount - (c.amount_refunded ?? 0), currency) ?? 0;
-    if (net <= 0) continue;
-    add(r30, currency, net);
+    const net2 = fromMinor(c.amount - (c.amount_refunded ?? 0), currency) ?? 0;
+    if (net2 <= 0) continue;
+    add(r30, currency, net2);
     c30++;
-    if (within(c.created, 7)) {
-      add(r7, currency, net);
+    if (within2(c.created, 7)) {
+      add(r7, currency, net2);
       c7++;
     }
   }
@@ -20718,7 +21152,7 @@ function moneySummary(subs, invoices, charges, products, now = /* @__PURE__ */ n
   for (const i of invoices) {
     const paidAt = i.status_transitions?.paid_at;
     const subId = i.parent?.subscription_details?.subscription ?? i.subscription;
-    if (i.status !== "paid" || !paidAt || !within(paidAt, 30) || !subId) continue;
+    if (i.status !== "paid" || !paidAt || !within2(paidAt, 30) || !subId) continue;
     const currency = upper(i.currency);
     const paid = fromMinor(i.amount_paid, currency);
     if (currency && paid) add(recurring, currency, paid);
@@ -20789,7 +21223,7 @@ function saveCalendarSecret(secret) {
     const validated = SecretSchema.parse(secret);
     const dir = ensureAppDataDir();
     if (process.platform !== "win32") fs12.chmodSync(dir, 448);
-    tmp = `${googleCalendarPath()}.${(0, import_node_crypto4.randomUUID)()}.tmp`;
+    tmp = `${googleCalendarPath()}.${(0, import_node_crypto5.randomUUID)()}.tmp`;
     fs12.writeFileSync(tmp, JSON.stringify(validated) + "\n", { mode: 384, flag: "wx" });
     fs12.renameSync(tmp, googleCalendarPath());
   } catch {
@@ -20812,13 +21246,13 @@ function removeCalendarSecret() {
     throw new Error("The Google Calendar sign-in could not be removed from this machine.");
   }
 }
-var fs12, path11, import_node_crypto4, import_zod51, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
+var fs12, path11, import_node_crypto5, import_zod51, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
 var init_google_calendar_store = __esm({
   "src/command-os/connectors/google-calendar-store.ts"() {
     "use strict";
     fs12 = __toESM(require("node:fs"));
     path11 = __toESM(require("node:path"));
-    import_node_crypto4 = require("node:crypto");
+    import_node_crypto5 = require("node:crypto");
     import_zod51 = require("zod");
     init_credentials_store();
     CALENDAR_SCOPE = "https://www.googleapis.com/auth/calendar.readonly";
@@ -20951,16 +21385,16 @@ function createGoogleCalendar(deps = {}) {
     requireOnlyCalendar(result.scope);
     return result.access_token;
   }
-  async function pages(path44, access, item, query = {}) {
+  async function pages(path45, access, item, query = {}) {
     const result = [];
     const seen = /* @__PURE__ */ new Set();
     let pageToken;
     for (let page = 0; page < 100; page++) {
-      const url = new URL(`${API}${path44}`);
+      const url = new URL(`${API}${path45}`);
       for (const [k, v] of Object.entries(query)) url.searchParams.set(k, v);
       if (pageToken) url.searchParams.set("pageToken", pageToken);
       const data = parsed(
-        import_zod52.z.object({ items: import_zod52.z.array(item).optional(), nextPageToken: import_zod52.z.string().optional(), kind: import_zod52.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path44.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
+        import_zod52.z.object({ items: import_zod52.z.array(item).optional(), nextPageToken: import_zod52.z.string().optional(), kind: import_zod52.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path45.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
         await request(url.href, { headers: { Authorization: `Bearer ${access}` } })
       );
       result.push(...data.items ?? []);
@@ -20978,9 +21412,9 @@ function createGoogleCalendar(deps = {}) {
   async function start() {
     const app = appConfig();
     clearPending2();
-    const state = (0, import_node_crypto5.randomBytes)(32).toString("base64url");
-    const verifier = (0, import_node_crypto5.randomBytes)(32).toString("base64url");
-    const server2 = (deps.createServer ?? import_node_http.createServer)((req, res) => {
+    const state = (0, import_node_crypto6.randomBytes)(32).toString("base64url");
+    const verifier = (0, import_node_crypto6.randomBytes)(32).toString("base64url");
+    const server2 = (deps.createServer ?? import_node_http2.createServer)((req, res) => {
       res.setHeader("Content-Type", "text/plain; charset=utf-8");
       res.setHeader("Cache-Control", "no-store");
       res.setHeader("Referrer-Policy", "no-referrer");
@@ -21033,7 +21467,7 @@ function createGoogleCalendar(deps = {}) {
       response_type: "code",
       scope: CALENDAR_SCOPE,
       state,
-      code_challenge: (0, import_node_crypto5.createHash)("sha256").update(verifier).digest("base64url"),
+      code_challenge: (0, import_node_crypto6.createHash)("sha256").update(verifier).digest("base64url"),
       code_challenge_method: "S256",
       access_type: "offline",
       prompt: "consent"
@@ -21163,13 +21597,13 @@ function createGoogleCalendar(deps = {}) {
     close: clearPending2
   };
 }
-var import_node_http, import_node_crypto5, import_node_child_process, import_zod52, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema, eventSchema;
+var import_node_http2, import_node_crypto6, import_node_child_process, import_zod52, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema, eventSchema;
 var init_google_calendar = __esm({
   "src/command-os/connectors/google-calendar.ts"() {
     "use strict";
     init_any_signal();
-    import_node_http = require("node:http");
-    import_node_crypto5 = require("node:crypto");
+    import_node_http2 = require("node:http");
+    import_node_crypto6 = require("node:crypto");
     import_node_child_process = require("node:child_process");
     import_zod52 = require("zod");
     init_credentials_store();
@@ -21211,8 +21645,8 @@ function redactConnectionKey(value, key) {
   return value;
 }
 function stripeFetcher(key, signal) {
-  return async (path44, query) => {
-    const url = new URL(`https://api.stripe.com${path44}`);
+  return async (path45, query) => {
+    const url = new URL(`https://api.stripe.com${path45}`);
     for (const [k, v] of Object.entries(query ?? {})) url.searchParams.set(k, v);
     const res = await fetch(url, { headers: { Authorization: `Bearer ${key}` }, signal });
     if (!res.ok) {
@@ -21301,11 +21735,11 @@ var init_handlers = __esm({
 });
 
 // src/command-os/connectors/stripe-read.ts
-async function listAll(f, path44, schema, extra = {}) {
+async function listAll(f, path45, schema, extra = {}) {
   const out = [];
   let after;
   for (let page = 0; page < 20; page++) {
-    const result = import_zod53.z.object({ data: import_zod53.z.array(schema), has_more: import_zod53.z.boolean().optional() }).parse(await f(path44, { limit: "100", ...extra, ...after ? { starting_after: after } : {} }));
+    const result = import_zod53.z.object({ data: import_zod53.z.array(schema), has_more: import_zod53.z.boolean().optional() }).parse(await f(path45, { limit: "100", ...extra, ...after ? { starting_after: after } : {} }));
     out.push(...result.data);
     if (!result.has_more) return out;
     const last = import_zod53.z.object({ id: import_zod53.z.string().min(1) }).parse(result.data.at(-1));
@@ -28562,7 +28996,7 @@ function remember(id, readAt) {
   const times = readTimes();
   times[id] = readAt;
   ensureAppDataDir();
-  const tmp = `${timesPath()}.${(0, import_node_crypto6.randomUUID)()}.tmp`;
+  const tmp = `${timesPath()}.${(0, import_node_crypto7.randomUUID)()}.tmp`;
   try {
     fs21.writeFileSync(tmp, JSON.stringify(times) + "\n", { mode: 384, flag: "wx" });
     fs21.renameSync(tmp, timesPath());
@@ -28615,14 +29049,14 @@ function money2(rows2) {
 async function readBriefPanels(deps) {
   return Promise.all(CONNECTOR_REGISTRY.flatMap((entry) => entry.panel ? [entry.panel(briefPanelDeps(deps))] : []));
 }
-var fs21, path19, import_node_crypto6, import_zod57, MoneySchema, TotalsSchema, SummarySchema, BriefPanelSchema, TimesSchema, timesPath, NotConnected, safeLink, amountText, stripePanel, slackPanel, calendarPanel;
+var fs21, path19, import_node_crypto7, import_zod57, MoneySchema, TotalsSchema, SummarySchema, BriefPanelSchema, TimesSchema, timesPath, NotConnected, safeLink, amountText, stripePanel, slackPanel, calendarPanel;
 var init_brief_panels = __esm({
   "src/command-os/connectors/brief-panels.ts"() {
     "use strict";
     init_brief_deadline();
     fs21 = __toESM(require("node:fs"));
     path19 = __toESM(require("node:path"));
-    import_node_crypto6 = require("node:crypto");
+    import_node_crypto7 = require("node:crypto");
     import_zod57 = require("zod");
     init_credentials_store();
     init_brief_row();
@@ -28840,7 +29274,7 @@ var init_client_capabilities = __esm({
       { key: "reputation", label: "Reputation and content", blurb: "Reviews, social posts and the blog." },
       { key: "health", label: "Health and handoff", blurb: "Proving it works, keeping it clean, and handing it over." }
     ];
-    N = (label, path44, params, key, nameField, version) => ({ label, path: path44, params, key, nameField, version });
+    N = (label, path45, params, key, nameField, version) => ({ label, path: path45, params, key, nameField, version });
     W = (read2, extra) => ({ ...read2, ...extra });
     AI2 = "2021-04-15";
     CAPABILITIES = [
@@ -29130,7 +29564,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.88.2",
+      version: "3.88.3",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -30158,8 +30592,26 @@ async function checkLinks(urls, ownHosts, fetcher, timeoutMs = 1e4) {
     const ctrl = new AbortController();
     const timer = setTimeout(() => ctrl.abort(), timeoutMs);
     try {
-      const r = await fetcher(url, { method: "GET", redirect: "follow", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
-      results.push(r.status < 400 ? { url, state: "ok", detail: `Opened (HTTP ${r.status}).` } : { url, state: "broken", detail: `The page answered HTTP ${r.status}.` });
+      let cur = url;
+      let r = await fetcher(cur, { method: "GET", redirect: "manual", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
+      let stopped = null;
+      for (let hop = 0; r.status >= 300 && r.status < 400 && r.location; hop++) {
+        let next;
+        try {
+          next = new URL(r.location, cur).toString();
+        } catch {
+          stopped = "It redirects to an address that is not readable, so it was not followed.";
+          break;
+        }
+        const why = hop >= MAX_LINK_HOPS ? "it redirects more than 5 times" : skipReason(next, ownHosts)?.replace(/^Not opened: /, "") ?? null;
+        if (why) {
+          stopped = `It redirects to ${next}, which was not opened: ${why}`;
+          break;
+        }
+        cur = next;
+        r = await fetcher(cur, { method: "GET", redirect: "manual", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
+      }
+      results.push(stopped ? { url, state: "skipped", detail: stopped } : r.status < 400 ? { url, state: "ok", detail: `Opened (HTTP ${r.status}).` } : { url, state: "broken", detail: `The page answered HTTP ${r.status}.` });
     } catch (e) {
       const why = ctrl.signal.aborted ? `It did not answer within ${Math.round(timeoutMs / 1e3)} seconds.` : `It could not be reached (${e instanceof Error ? e.message : String(e)}).`;
       results.push({ url, state: "broken", detail: why });
@@ -30173,7 +30625,7 @@ function htmlToText(body) {
   if (!/<(?:p|div|br|table|td|span|a|html|body|h\d|li|style|strong|em|b|i)(?:\s+[a-z][a-z0-9:-]*(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s"'<>=]+))?)*\s*\/?>/i.test(body)) return body;
   return body.replace(/<(style|script|head)\b[\s\S]*?<\/\1>/gi, " ").replace(/<br\s*\/?>/gi, "\n").replace(/<\/(?:p|div|tr|li|h\d|table)>/gi, "\n").replace(/<\/(?:td|th)>/gi, "\n").replace(/<[^>]+>/g, "").replace(/&nbsp;/gi, "\xA0").replace(/&amp;/gi, "&").replace(/&lt;/gi, "<").replace(/&gt;/gi, ">").replace(/&quot;/gi, '"').replace(/&#39;|&apos;/gi, "'").replace(/&#x([0-9a-f]+);/gi, (_m, h) => String.fromCodePoint(parseInt(h, 16))).replace(/&#(\d+);/g, (_m, d) => String.fromCodePoint(Number(d))).replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
 }
-var URL_RE, HREF_RE, TRACKING_PATH, UNSUB;
+var URL_RE, HREF_RE, TRACKING_PATH, UNSUB, MAX_LINK_HOPS;
 var init_links = __esm({
   "src/command-os/shopper/links.ts"() {
     "use strict";
@@ -30181,6 +30633,7 @@ var init_links = __esm({
     HREF_RE = /\bhref\s*=\s*["']([^"']+)["']/gi;
     TRACKING_PATH = /\/(?:c|o|l|ls|tl|t|r|e|wf|track|click|open)\/|\/ls\/click|[?&](?:upn|trigger_link|utm_id|mc_cid|_hs(?:enc|mi))=/i;
     UNSUB = /unsubscribe|opt-?out|\/preferences|email-preferences|unsubscribe-view|\/emails\/builder\//i;
+    MAX_LINK_HOPS = 5;
   }
 });
 
@@ -30483,7 +30936,7 @@ function planCopy(src, opts) {
   const idMap = /* @__PURE__ */ new Map();
   for (const n of nodes) {
     const id = str4(n.id);
-    if (id) idMap.set(id, import_node_crypto7.default.randomUUID());
+    if (id) idMap.set(id, import_node_crypto8.default.randomUUID());
   }
   const remap = (id) => typeof id === "string" ? idMap.get(id) ?? id : id;
   const waits = [];
@@ -30736,13 +31189,13 @@ function builderAdmin(b) {
     remove: (id, ack) => b.deleteWorkflow(id, ack ? { acknowledgeContacts: ack } : void 0)
   };
 }
-var import_node_fs2, import_node_path2, import_node_crypto7, asObj3, asArr2, str4, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
+var import_node_fs2, import_node_path2, import_node_crypto8, asObj3, asArr2, str4, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
 var init_fastforward = __esm({
   "src/command-os/shopper/fastforward.ts"() {
     "use strict";
     import_node_fs2 = __toESM(require("node:fs"));
     import_node_path2 = __toESM(require("node:path"));
-    import_node_crypto7 = __toESM(require("node:crypto"));
+    import_node_crypto8 = __toESM(require("node:crypto"));
     init_run();
     asObj3 = (v) => v && typeof v === "object" ? v : {};
     asArr2 = (v) => Array.isArray(v) ? v : [];
@@ -30778,7 +31231,7 @@ var init_fastforward = __esm({
     };
     newToken = () => {
       let t = "";
-      while (t.length < 6) t += (import_node_crypto7.default.randomBytes(1)[0] % 36).toString(36);
+      while (t.length < 6) t += (import_node_crypto8.default.randomBytes(1)[0] % 36).toString(36);
       return t;
     };
     TOKEN_NAME = new RegExp(`^${FF_PREFIX} [0-9a-z]{6} `);
@@ -30914,7 +31367,7 @@ async function findContactIdByEmail(client, locationId2, email) {
 async function startShopper(input, deps) {
   const now = deps.now ?? Date.now;
   const sleep7 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const token2 = import_node_crypto8.default.randomUUID().replace(/-/g, "").slice(0, 8);
+  const token2 = import_node_crypto9.default.randomUUID().replace(/-/g, "").slice(0, 8);
   const leadEmail = plusAddress(input.ownerEmail, token2);
   if (!SAFE_ID.test(input.locationId)) throw new Error("That client id is not valid.");
   if (input.entry.kind === "workflows" && input.entry.workflowIds.length === 0) throw new Error("Choose at least one workflow for the test lead to enter.");
@@ -31021,7 +31474,7 @@ async function startShopper(input, deps) {
   }
 }
 async function postJson(url, body) {
-  const r = await fetch(url, { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body) });
+  const r = await guardedPost(url, JSON.stringify(body), { "Content-Type": "application/json", Accept: "application/json" });
   return r.status;
 }
 async function removeOwnLead(client, run) {
@@ -31059,7 +31512,7 @@ function pidAlive(pid) {
 function claimRun(locationId2, runId, base) {
   const lock = `${runPath(locationId2, runId, base)}.lock`;
   import_node_fs3.default.mkdirSync(import_node_path3.default.dirname(lock), { recursive: true, mode: 448 });
-  const token2 = import_node_crypto8.default.randomUUID();
+  const token2 = import_node_crypto9.default.randomUUID();
   const mine = JSON.stringify({ pid: process.pid, token: token2 });
   for (let attempt = 0; attempt < 3; attempt++) {
     try {
@@ -31113,7 +31566,7 @@ async function finishShopper(locationId2, runId, deps) {
     const t = now();
     const closed = t >= run.closesAt;
     const raw = await readSentMessages(deps.client, run.locationId, run.contactId, run.startedAt);
-    const fetcher = deps.fetcher ?? ((url, init) => fetch(url, init).then((r) => ({ status: r.status })));
+    const fetcher = deps.fetcher ?? ((url, init) => guardedFetchLike(url, { headers: init.headers, signal: init.signal, redirect: "manual", statusOnly: true }).then((r) => ({ status: r.status, location: r.headers.get("location") })));
     const urls = [...new Set(raw.flatMap((m) => extractUrls(m.body, m.raw !== m.body ? m.raw : void 0)))];
     const linkResults = (await checkLinks(urls, run.websiteHost ? [run.websiteHost] : [], fetcher)).map((l) => ({ ...l, url: maskSecrets(l.url) }));
     const messages = raw.map((m) => ({ id: m.id, channel: m.channel, at: m.at, source: m.source, body: maskSecrets(m.body), subject: m.subject ? maskSecrets(m.subject) : void 0 }));
@@ -31189,13 +31642,13 @@ function summarizeRun(run) {
   if (run.status === "watching") return `So far: ${head4}${stepNote} Still watching until ${new Date(run.closesAt).toISOString()}.`;
   return gradeLine + head4 + stepNote;
 }
-var import_node_fs3, import_node_path3, import_node_crypto8, MAX_EXTEND_MINUTES, asObj4, asArr3, str5, SAFE_ID, notFound;
+var import_node_fs3, import_node_path3, import_node_crypto9, MAX_EXTEND_MINUTES, asObj4, asArr3, str5, SAFE_ID, notFound;
 var init_run = __esm({
   "src/command-os/shopper/run.ts"() {
     "use strict";
     import_node_fs3 = __toESM(require("node:fs"));
     import_node_path3 = __toESM(require("node:path"));
-    import_node_crypto8 = __toESM(require("node:crypto"));
+    import_node_crypto9 = __toESM(require("node:crypto"));
     init_credentials_store();
     init_analyze();
     init_links();
@@ -31203,6 +31656,7 @@ var init_run = __esm({
     init_account_rules();
     init_score();
     init_steps();
+    init_net_guard();
     MAX_EXTEND_MINUTES = 10;
     asObj4 = (v) => v && typeof v === "object" ? v : {};
     asArr3 = (v) => Array.isArray(v) ? v : [];
@@ -32402,7 +32856,7 @@ var init_page2 = __esm({
     nextStep = (c) => c.state === "proven" || c.id === "google-calendar" && c.setup === "needs-setup" ? "" : c.id === "google-calendar" ? "Next: press Connect and sign in with Google." : c.state === "saved-unproven" ? `Next: paste the ${keyWord(c.id)} again and press Connect, so we can check it works.` : `Next: paste your ${keyWord(c.id)} below and press Connect.`;
     chip3 = (c, needs) => c.readError ? { tone: "warn", word: "Could not read" } : c.state === "saved-unproven" ? { tone: "warn", word: "Not proven" } : c.state === "not-connected" ? { tone: "", word: "Not connected" } : needs ? { tone: "warn", word: "Needs you today" } : c.state === "proven" ? { tone: "ok", word: "Connected" } : { tone: "", word: "Not connected" };
     head = (c, chips) => `<div class="cds-panel-head"><div class="txt"><h2 class="cds-panel-title">${esc4(c.name)}</h2></div><div class="cds-row">${chips}</div></div>`;
-    how = (inner, id, hidden) => `<details class="how-it-works cds-details" id="instructions-${id}"${hidden ? " hidden" : ""}><summary>How this connection works</summary><div class="connector-instructions">${inner}</div></details>`;
+    how = (inner, id, hidden2) => `<details class="how-it-works cds-details" id="instructions-${id}"${hidden2 ? " hidden" : ""}><summary>How this connection works</summary><div class="connector-instructions">${inner}</div></details>`;
     needsRow = (c, ask) => `<li><a class="ttl" href="#${c.id}">${esc4(c.name)}<span class="sub">${esc4(ask)}</span></a></li>`;
   }
 });
@@ -34142,7 +34596,7 @@ var init_client_status_placement = __esm({
 // src/build-contract.ts
 function contentHash(value) {
   const canonical2 = (v) => Array.isArray(v) ? v.map(canonical2) : v && typeof v === "object" ? Object.fromEntries(Object.keys(v).sort().filter((k) => v[k] !== void 0).map((k) => [k, canonical2(v[k])])) : v;
-  return (0, import_node_crypto9.createHash)("sha256").update(JSON.stringify(canonical2(value)) ?? "null").digest("hex");
+  return (0, import_node_crypto10.createHash)("sha256").update(JSON.stringify(canonical2(value)) ?? "null").digest("hex");
 }
 function assertBuildApproval(approval, inputHash) {
   if (!approval?.at) throw new Error("Approve building before running Build.");
@@ -34317,11 +34771,11 @@ function executablePlanLines(saved) {
   for (const w of preview?.workflows ?? []) for (const m of [...w.manual ?? [], ...w.needsContent ?? []]) lines.push(`Unresolved: ${w.name || names.get(w.ref) || "Unnamed workflow"}. ${m.reason}`);
   return lines.map(sentence);
 }
-var import_node_crypto9, import_node_fs5, import_node_path5, INTAKE_CHANGED;
+var import_node_crypto10, import_node_fs5, import_node_path5, INTAKE_CHANGED;
 var init_build_contract = __esm({
   "src/build-contract.ts"() {
     "use strict";
-    import_node_crypto9 = require("node:crypto");
+    import_node_crypto10 = require("node:crypto");
     import_node_fs5 = require("node:fs");
     import_node_path5 = require("node:path");
     init_credentials_store();
@@ -34400,7 +34854,7 @@ async function approvedStatusWriter(registry2, locationId2) {
       return saved;
     },
     async readPublishedPage(url) {
-      const result = await fetch(url, { signal: AbortSignal.timeout(15e3) });
+      const result = await guardedFetchLike(url, { signal: AbortSignal.timeout(15e3) });
       if (!result.ok) throw new Error("The published handoff address could not be reached.");
       return result.text();
     }
@@ -34416,6 +34870,7 @@ var init_approved_status_writer = __esm({
     init_funnel_builder();
     init_client_status_placement();
     init_build_contract();
+    init_net_guard();
   }
 });
 
@@ -34900,7 +35355,7 @@ function engineRepair(version) {
   return !version ? CLAUDE_REPAIR_MESSAGES[0] : !meetsFloor(version) ? CLAUDE_REPAIR_MESSAGES[1] : CLAUDE_REPAIR_MESSAGES[2];
 }
 function keyFingerprint(key) {
-  return (0, import_node_crypto10.createHash)("sha256").update(key).digest("hex");
+  return (0, import_node_crypto11.createHash)("sha256").update(key).digest("hex");
 }
 async function clientPreflight(registry2, locationId2) {
   const lines = [];
@@ -34967,7 +35422,7 @@ async function agencyConnectionReady(registry2, companyId) {
     return false;
   }
 }
-var import_node_crypto10, CLAUDE_REPAIR_MESSAGES;
+var import_node_crypto11, CLAUDE_REPAIR_MESSAGES;
 var init_client_preflight = __esm({
   "src/client-preflight.ts"() {
     "use strict";
@@ -34977,7 +35432,7 @@ var init_client_preflight = __esm({
     init_stage_runner();
     init_tool_filter();
     init_credentials_store();
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     CLAUDE_REPAIR_MESSAGES = [
       "Install Claude Code from Your agency before reading this source.",
       "Update Claude Code to version 2.1.0 or newer from Your agency.",
@@ -35084,7 +35539,7 @@ function startDesignRun(request, opts = {}) {
   const checked = validateRunRequest(request);
   if (!checked.ok) throw new Error(checked.error);
   request = checked.value;
-  const id = (0, import_node_crypto11.randomUUID)();
+  const id = (0, import_node_crypto12.randomUUID)();
   const outDir = (0, import_node_path7.join)(designRunsDir(), id);
   (0, import_node_fs7.mkdirSync)(outDir, { recursive: true });
   const job = { id, status: "running", startedAt: (/* @__PURE__ */ new Date()).toISOString(), outDir, request, tail: [] };
@@ -35151,14 +35606,14 @@ function cancelDesignRun(id) {
   }
   return true;
 }
-var import_node_child_process3, import_node_fs7, import_node_path7, import_node_crypto11, SLUG2, MODEL, JOINED_FLAG, jobs, children;
+var import_node_child_process3, import_node_fs7, import_node_path7, import_node_crypto12, SLUG2, MODEL, JOINED_FLAG, jobs, children;
 var init_run_jobs = __esm({
   "src/command-os/design/run-jobs.ts"() {
     "use strict";
     import_node_child_process3 = require("node:child_process");
     import_node_fs7 = require("node:fs");
     import_node_path7 = require("node:path");
-    import_node_crypto11 = require("node:crypto");
+    import_node_crypto12 = require("node:crypto");
     init_credentials_store();
     init_schema();
     init_brief_validation();
@@ -36037,9 +36492,9 @@ function presetForBusinessType(type) {
       return "generic";
   }
 }
-function setPath(target, path44, value) {
+function setPath(target, path45, value) {
   if (value === void 0) return;
-  const parts = path44.split(".");
+  const parts = path45.split(".");
   let node = target;
   for (let i = 0; i < parts.length - 1; i++) {
     const k = parts[i];
@@ -38162,9 +38617,9 @@ function recorderAllowPatterns(mcpListOutput) {
 function prefillTools(source, recorderPatterns = []) {
   const deny = "Bash,Write,Edit,MultiEdit,NotebookEdit,Task";
   if (source.kind === "text") return { allow: "", deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
-  if (source.kind === "url") return { allow: "WebFetch", deny: deny + ",WebSearch,Read,Glob,Grep" };
+  if (source.kind === "url") return { allow: "", deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
   if (source.kind === "file") return { allow: "Read", deny: deny + ",WebFetch,WebSearch,Glob,Grep" };
-  return { allow: recorderPatterns.join(","), deny: deny + ",Read,Glob,Grep" };
+  return { allow: recorderPatterns.join(","), deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
 }
 function sourcePreamble(source) {
   if (source.kind === "file") {
@@ -38211,6 +38666,7 @@ async function prefillFromSource(spawnClaude, labels, source, recorderPatterns =
   if (source.kind === "file" && !/[.](txt|md|csv|vtt|srt)$/i.test(source.name)) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "Use plain text, .vtt or .srt." };
   const empty = source.kind === "text" && !source.text.trim() || source.kind === "url" && !source.url.trim() || source.kind === "recorder" && !source.instruction.trim() || source.kind === "file" && !source.path.trim();
   if (empty) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "nothing to read" };
+  if (source.kind === "url") return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: LINK_READING_OFF_MESSAGE };
   if (source.kind === "text" && source.text.length > 6e4) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "The limit is 60,000 characters. Paste an excerpt or shorten this text file." };
   const result = await runPrefill(() => spawnClaude(prefillPromptForSource(labels, source) + "\nQuestion schema (use only these choices; multiple choices use an array in the cited answer object\u2019s value):\n" + JSON.stringify(questions), prefillTools(source, recorderPatterns)), labels, source.kind === "text" ? source.text : void 0);
   result.answers = validatePrefillAnswers(questions, result.answers);
@@ -38269,7 +38725,7 @@ function validatePrefillAnswers(questions, proposed) {
   }
   return result;
 }
-var INTAKE_FORM_NAME2, INTAKE_CONTACT_TAG, RECORDER_HINTS;
+var INTAKE_FORM_NAME2, INTAKE_CONTACT_TAG, RECORDER_HINTS, LINK_READING_OFF_MESSAGE;
 var init_client_intake = __esm({
   "src/client-intake.ts"() {
     "use strict";
@@ -38280,6 +38736,7 @@ var init_client_intake = __esm({
     INTAKE_FORM_NAME2 = "GHL Command Blueprint \u2014 Client Intake";
     INTAKE_CONTACT_TAG = "blueprint-intake";
     RECORDER_HINTS = ["plaud", "otter", "fireflies", "grain", "fathom", "tldv", "granola", "zoom", "read.ai", "readai", "supernormal", "avoma"];
+    LINK_READING_OFF_MESSAGE = "Reading a link isn't available in this version. Open the page, copy its text, and paste it into Paste a transcript.";
   }
 });
 
@@ -38343,7 +38800,7 @@ var init_plan_store = __esm({
 // src/agency-profile-page.ts
 function agencyProfilePageHtml(p, clients = [], seatToken = "") {
   const offers = (p.offers ?? []).map((o) => `${o.name}${o.priceFloor ? ` - ${o.priceFloor}${o.cadence === "monthly" ? "/mo" : ""}` : ""}`).join("\n");
-  const os8 = p.agencyOs ?? {};
+  const os9 = p.agencyOs ?? {};
   const lines = (xs) => (xs ?? []).join("\n");
   const sops = (p.delivery?.sops ?? []).join("\n");
   const chatOn = readAccountAdminSettings().chatCreation;
@@ -38481,36 +38938,36 @@ ${p.agencyName ? "" : ` <div class="cds-callout warn"><span class="ttl">Add an a
    <div class="cds-panel-head"><div class="txt"><div class="cds-panel-label">Your offer and method</div><h2 class="cds-panel-title">Who you are, who you serve, what you promise, how you deliver</h2></div></div>
    <p>Filled in once, in your own words. Used on the assessment report, in proposals, in every Claude session's opening brief, and by every Command OS build.</p>
    <ul class="cds-list">
-    ${section2("Your brand: who you are", progress([os8.story, os8.method, os8.voice, os8.goals, os8.values, os8.proof]), `
-     ${area("story", "Your story: why this agency exists, in two or three sentences", os8.story, { placeholder: "I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026" })}
-     ${area("method", "Your method: how you get results, and what you call it", os8.method, { placeholder: "The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave" })}
+    ${section2("Your brand: who you are", progress([os9.story, os9.method, os9.voice, os9.goals, os9.values, os9.proof]), `
+     ${area("story", "Your story: why this agency exists, in two or three sentences", os9.story, { placeholder: "I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026" })}
+     ${area("method", "Your method: how you get results, and what you call it", os9.method, { placeholder: "The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave" })}
      <div class="cds-grid">
-      ${area("voice", "How you sound: three words, then a sentence", os8.voice, { placeholder: "Direct, warm, clinical. Specifics over hype." })}
-      ${area("goals", "Your goal for the next twelve months", os8.goals, { placeholder: "$50k a month from 51 subscribers" })}
+      ${area("voice", "How you sound: three words, then a sentence", os9.voice, { placeholder: "Direct, warm, clinical. Specifics over hype." })}
+      ${area("goals", "Your goal for the next twelve months", os9.goals, { placeholder: "$50k a month from 51 subscribers" })}
      </div>
-     ${area("values", "What you stand for and what you refuse to do: one per line", lines(os8.values), { placeholder: "Never a false all-clear&#10;No cold texting anyone who did not opt in" })}
-     ${area("proof", "Proof you may state, with permission: one per line", lines(os8.proof), { placeholder: "Radiance Med Spa: 34 consults booked in one weekend (permission on file)" })}`)}
-    ${section2("Ideal client: who you serve", progress([os8.ica?.who, os8.ica?.pains, os8.ica?.desires, os8.ica?.objections, os8.ica?.triggers, os8.ica?.vocabulary, os8.ica?.hangouts, os8.ica?.villains]), `
-     ${area("icaWho", "Who they are: role, business, size, where", os8.ica?.who, { placeholder: "The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself" })}
+     ${area("values", "What you stand for and what you refuse to do: one per line", lines(os9.values), { placeholder: "Never a false all-clear&#10;No cold texting anyone who did not opt in" })}
+     ${area("proof", "Proof you may state, with permission: one per line", lines(os9.proof), { placeholder: "Radiance Med Spa: 34 consults booked in one weekend (permission on file)" })}`)}
+    ${section2("Ideal client: who you serve", progress([os9.ica?.who, os9.ica?.pains, os9.ica?.desires, os9.ica?.objections, os9.ica?.triggers, os9.ica?.vocabulary, os9.ica?.hangouts, os9.ica?.villains]), `
+     ${area("icaWho", "Who they are: role, business, size, where", os9.ica?.who, { placeholder: "The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself" })}
      <div class="cds-grid">
-      ${area("icaPains", "Their pains, worst first: one per line", lines(os8.ica?.pains))}
-      ${area("icaDesires", "What they want, most first: one per line", lines(os8.ica?.desires))}
-      ${area("icaObjections", "Why they say no: one per line", lines(os8.ica?.objections))}
-      ${area("icaTriggers", "What makes them buy now: one per line", lines(os8.ica?.triggers))}
-      ${area("icaVocabulary", "Their own words for the problem: one per line", lines(os8.ica?.vocabulary))}
-      ${area("icaHangouts", "Where they read, listen and gather: one per line", lines(os8.ica?.hangouts))}
+      ${area("icaPains", "Their pains, worst first: one per line", lines(os9.ica?.pains))}
+      ${area("icaDesires", "What they want, most first: one per line", lines(os9.ica?.desires))}
+      ${area("icaObjections", "Why they say no: one per line", lines(os9.ica?.objections))}
+      ${area("icaTriggers", "What makes them buy now: one per line", lines(os9.ica?.triggers))}
+      ${area("icaVocabulary", "Their own words for the problem: one per line", lines(os9.ica?.vocabulary))}
+      ${area("icaHangouts", "Where they read, listen and gather: one per line", lines(os9.ica?.hangouts))}
      </div>
-     ${area("icaVillains", "What they have tried and blame: one per line", lines(os8.ica?.villains), { placeholder: "The last agency that charged $3,000 a month for two posts a week" })}`)}
-    ${section2("The offer: what you promise", progress([os8.offer?.name, os8.offer?.price, os8.offer?.promise, os8.offer?.valueStack, os8.offer?.guarantee, os8.offer?.accelerators]), `
+     ${area("icaVillains", "What they have tried and blame: one per line", lines(os9.ica?.villains), { placeholder: "The last agency that charged $3,000 a month for two posts a week" })}`)}
+    ${section2("The offer: what you promise", progress([os9.offer?.name, os9.offer?.price, os9.offer?.promise, os9.offer?.valueStack, os9.offer?.guarantee, os9.offer?.accelerators]), `
      <div class="cds-grid">
-      ${input("offerName", "The offer's name", os8.offer?.name, { placeholder: "The Full Room" })}
-      ${input("offerPrice", "Price, and what it is per", os8.offer?.price, { placeholder: "$5,000 per event plus 30% of revenue" })}
+      ${input("offerName", "The offer's name", os9.offer?.name, { placeholder: "The Full Room" })}
+      ${input("offerPrice", "Price, and what it is per", os9.offer?.price, { placeholder: "$5,000 per event plus 30% of revenue" })}
      </div>
-     ${area("offerPromise", "The promise: one sentence a prospect could repeat", os8.offer?.promise, { placeholder: "A full room in one weekend, and a system that keeps booking after we leave" })}
-     ${area("offerStack", "What is in it: one per line", lines(os8.offer?.valueStack), { placeholder: "The campaign page&#10;The AI receptionist&#10;The 30-day nurture" })}
+     ${area("offerPromise", "The promise: one sentence a prospect could repeat", os9.offer?.promise, { placeholder: "A full room in one weekend, and a system that keeps booking after we leave" })}
+     ${area("offerStack", "What is in it: one per line", lines(os9.offer?.valueStack), { placeholder: "The campaign page&#10;The AI receptionist&#10;The 30-day nurture" })}
      <div class="cds-grid">
-      ${area("offerGuarantee", "The guarantee, exactly as you would say it", os8.offer?.guarantee)}
-      ${area("offerAccelerators", "Why now: bonuses, deadlines, scarcity, one per line", lines(os8.offer?.accelerators))}
+      ${area("offerGuarantee", "The guarantee, exactly as you would say it", os9.offer?.guarantee)}
+      ${area("offerAccelerators", "Why now: bonuses, deadlines, scarcity, one per line", lines(os9.offer?.accelerators))}
      </div>`)}
     ${section2("How you deliver", progress([p.delivery?.sops, p.staff]), `
      ${area("sops", "Delivery SOPs: one per line", sops, { placeholder: "Every build gets a rollback journal before go-live" })}
@@ -40417,7 +40874,7 @@ function writeVerifiedBackup(configPath, originalBytes) {
   return backupPath;
 }
 function sha256(bytes) {
-  return (0, import_node_crypto12.createHash)("sha256").update(bytes).digest("hex");
+  return (0, import_node_crypto13.createHash)("sha256").update(bytes).digest("hex");
 }
 function baselineOf(bytes, stat) {
   return { size: stat.size, mtimeMs: stat.mtimeMs, hash: sha256(bytes) };
@@ -40443,7 +40900,7 @@ function assertNotStale(configPath, baseline) {
 }
 async function atomicReplace(opts) {
   const dir = path31.dirname(opts.configPath);
-  const tempPath = path31.join(dir, `.${path31.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto12.randomBytes)(4).toString("hex")}`);
+  const tempPath = path31.join(dir, `.${path31.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto13.randomBytes)(4).toString("hex")}`);
   const fd = fs33.openSync(tempPath, "w");
   try {
     fs33.writeFileSync(fd, opts.newBytes);
@@ -40593,14 +41050,14 @@ async function runInstall(argv, ioOverride) {
     return EXIT_ABORTED;
   }
 }
-var fs33, os6, path31, import_node_crypto12, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
+var fs33, os6, path31, import_node_crypto13, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
 var init_config_installer = __esm({
   "src/config-installer.ts"() {
     "use strict";
     fs33 = __toESM(require("node:fs"));
     os6 = __toESM(require("node:os"));
     path31 = __toESM(require("node:path"));
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     import_node_util = require("node:util");
     import_json5 = __toESM(require("json5"));
     init_npx_cache_check();
@@ -41295,71 +41752,122 @@ for(const s of document.querySelectorAll("[data-ink]")){const v=s.dataset.ink;if
   }
 });
 
-// src/command-os/design/browser.ts
-async function launchBrowser(opts = {}) {
+// src/command-os/prospect/guarded-browser.ts
+async function openBrowser2() {
   let chromium;
   try {
     ({ chromium } = await import("playwright-core"));
   } catch (e) {
-    return { ok: false, reason: `playwright-core could not be loaded: ${e.message}` };
+    return { reason: `the browser library could not be loaded (${e.message.split("\n")[0]})` };
+  }
+  let proxy;
+  try {
+    proxy = await startGuardProxy();
+  } catch (e) {
+    return { reason: `the browser's network gatekeeper could not start (${e.message.split("\n")[0]})` };
   }
-  const profile = opts.profileDir ?? chromeProfileDir();
-  const channels = ["chrome", "msedge"];
+  const args = ["--disable-quic", "--force-webrtc-ip-handling-policy=disable_non_proxied_udp", "--webrtc-ip-handling-policy=disable_non_proxied_udp", "--disable-features=IsolateOrigins,site-per-process", "--disable-site-isolation-trials", "--proxy-bypass-list=<-loopback>", "--no-pings", "--disable-background-networking"];
   let last = "";
-  for (const channel of channels) {
+  for (const channel of ["chrome", "msedge"]) {
     try {
-      const context = await chromium.launchPersistentContext(profile, {
-        channel,
-        headless: opts.headless ?? true,
-        viewport: { width: 1440, height: 900 },
-        deviceScaleFactor: 1,
-        args: ["--hide-scrollbars"]
-      });
-      return { ok: true, browser: { context, close: () => context.close().catch(() => void 0) } };
+      return { browser: await chromium.launch({ channel, headless: true, chromiumSandbox: true, args, proxy: { server: proxy.url, bypass: "<-loopback>", username: proxy.username, password: proxy.password } }), proxy };
     } catch (e) {
-      last = e.message;
+      last = e.message.split("\n")[0];
     }
   }
-  return { ok: false, reason: `No Chrome or Edge could be launched on the automation profile (${last.split("\n")[0]}). If the cockpit's capture is running it holds the profile; close it and retry.` };
+  await proxy.close();
+  return { reason: `Chrome or Edge could not be opened on this computer (${last})` };
 }
-async function evaluateSource(page, source, arg) {
-  const fn = new Function("arg", `return (${source})(arg);`);
-  return await page.evaluate(fn, arg);
+async function openGuardedBrowser(viewport = { width: 1440, height: 900 }) {
+  const opened = await openBrowser2().catch((e) => ({ reason: e.message }));
+  if ("reason" in opened) return { ok: false, reason: opened.reason };
+  const { browser, proxy } = opened;
+  try {
+    const context = await browser.newContext({ viewport, serviceWorkers: "block", acceptDownloads: false, proxy: { server: proxy.url, username: proxy.username, password: proxy.password } });
+    await context.route("**/*", async (route) => {
+      const m = route.request().method();
+      if (m !== "GET" && m !== "HEAD") {
+        await route.abort("blockedbyclient").catch(() => void 0);
+        return;
+      }
+      await route.continue().catch(() => void 0);
+    });
+    await context.routeWebSocket(/.*/, (ws) => ws.close({ code: 1008, reason: "read-only" }));
+    context.on("page", (p) => {
+      if (context.pages().length > 1) void p.close().catch(() => void 0);
+    });
+    return { ok: true, context, close: () => closeQuietly(browser, proxy) };
+  } catch (e) {
+    await closeQuietly(browser, proxy);
+    return { ok: false, reason: e.message.split("\n")[0] };
+  }
 }
-var init_browser = __esm({
-  "src/command-os/design/browser.ts"() {
+async function closeQuietly(browser, proxy) {
+  await Promise.race([
+    (async () => {
+      await browser.close().catch(() => void 0);
+      await proxy.close().catch(() => void 0);
+    })(),
+    new Promise((r) => setTimeout(r, 1e4))
+  ]);
+  void proxy.close().catch(() => void 0);
+}
+var init_guarded_browser = __esm({
+  "src/command-os/prospect/guarded-browser.ts"() {
     "use strict";
-    init_interactive_capture();
+    init_net_guard();
   }
 });
 
 // src/command-os/design/extract-browser.ts
 async function browserPass(url, opts = {}) {
-  const launched = await launchBrowser({ headless: true });
-  if (!launched.ok) return launched;
-  const { context, close } = launched.browser;
-  try {
-    const page = context.pages()[0] ?? await context.newPage();
+  const navMs = opts.timeoutMs ?? 3e4;
+  const deadlineMs = navMs * 2 + 2e4;
+  let timer;
+  let expiredAt = false;
+  let closeOnce;
+  const expired = new Promise((resolve13) => {
+    timer = setTimeout(() => {
+      expiredAt = true;
+      resolve13({ ok: false, reason: `The rendered pass took longer than ${Math.round(deadlineMs / 1e3)} seconds and was stopped.` });
+    }, deadlineMs);
+  });
+  const work = (async () => {
+    const problem = await publicAddressProblem(url);
+    if (problem && problem !== "the address does not resolve") return { ok: false, reason: `The rendered pass did not open ${url}: ${problem}.` };
+    const launched = await openGuardedBrowser({ width: 1440, height: 900 });
+    if (!launched.ok) return { ok: false, reason: `The rendered pass could not start a guarded browser: ${launched.reason}` };
+    let closing;
+    closeOnce = () => closing ??= launched.close();
+    if (expiredAt) {
+      await closeOnce();
+      return { ok: false, reason: "The rendered pass was stopped at its deadline." };
+    }
+    const page = await launched.context.newPage();
     await page.setViewportSize({ width: 1440, height: 900 });
-    await page.goto(url, { waitUntil: "networkidle", timeout: opts.timeoutMs ?? 3e4 }).catch(async () => {
-      await page.goto(url, { waitUntil: "domcontentloaded", timeout: opts.timeoutMs ?? 3e4 });
+    await page.goto(url, { waitUntil: "networkidle", timeout: navMs }).catch(async () => {
+      await page.goto(url, { waitUntil: "domcontentloaded", timeout: navMs });
     });
     await page.waitForTimeout(800);
     const facts = await page.evaluate(BROWSER_FACTS_JS);
     const out = { ...facts, logoSvg: facts.logoSvg ?? void 0, logoSrc: facts.logoSrc ?? void 0 };
     if (opts.screenshot !== false) out.screenshotPng = await page.screenshot({ type: "png", fullPage: false });
     return { ok: true, facts: out };
-  } catch (e) {
-    return { ok: false, reason: `The rendered pass failed: ${e.message.split("\n")[0]}` };
+  })().catch((e) => ({ ok: false, reason: `The rendered pass failed: ${e.message.split("\n")[0]}` }));
+  try {
+    return await Promise.race([work, expired]);
   } finally {
-    await close();
+    clearTimeout(timer);
+    expiredAt = true;
+    if (closeOnce) await closeOnce();
   }
 }
 var BROWSER_FACTS_JS;
 var init_extract_browser = __esm({
   "src/command-os/design/extract-browser.ts"() {
     "use strict";
-    init_browser();
+    init_guarded_browser();
+    init_net_guard();
     BROWSER_FACTS_JS = `(() => {
   const cs = (el) => el ? getComputedStyle(el) : null;
   const rgbOf = (v) => (v && v !== "rgba(0, 0, 0, 0)" && v !== "transparent") ? v : null;
@@ -42855,7 +43363,7 @@ function registerAssessmentTools(server2, client) {
       const dir = args.outDir ?? (0, import_node_path8.join)((0, import_node_os.homedir)(), "Documents", "assessments");
       (0, import_node_fs8.mkdirSync)(dir, { recursive: true });
       const slug3 = (state.biz || "assessment").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
-      const file2 = (0, import_node_path8.join)(dir, `${slug3}-${(0, import_node_crypto13.randomBytes)(4).toString("hex")}.html`);
+      const file2 = (0, import_node_path8.join)(dir, `${slug3}-${(0, import_node_crypto14.randomBytes)(4).toString("hex")}.html`);
       (0, import_node_fs8.writeFileSync)(file2, html2, "utf8");
       return {
         written: file2,
@@ -42878,7 +43386,7 @@ function registerAssessmentTools(server2, client) {
     }
   );
 }
-var import_node_util3, import_zod61, import_node_crypto13, import_node_fs8, import_node_os, import_node_path8, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
+var import_node_util3, import_zod61, import_node_crypto14, import_node_fs8, import_node_os, import_node_path8, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
 var init_assessment = __esm({
   "src/tools/assessment.ts"() {
     "use strict";
@@ -42891,7 +43399,7 @@ var init_assessment = __esm({
     init_store3();
     init_engine();
     init_report();
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     import_node_fs8 = require("node:fs");
     import_node_os = require("node:os");
     import_node_path8 = require("node:path");
@@ -43439,7 +43947,7 @@ function notify(message) {
     }
   }
 }
-function openBrowser2(port) {
+function openBrowser3(port) {
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const openArgs = process.platform === "win32" ? ["/c", "start", "", `http://localhost:${port}`] : [`http://localhost:${port}`];
   try {
@@ -43952,8 +44460,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
   note.textContent="Command OS cannot verify this account\u2019s sender. This button records a manual task to confirm the sender and send the questionnaire in GoHighLevel.";w.appendChild(note);box.appendChild(w)}
  if(mode==="transcript"){const w=document.createElement("div");w.className="cds-stack";
   const tabs=document.createElement("div");tabs.className="cds-tabs ichoice";tabs.setAttribute("role","group");tabs.setAttribute("aria-label","Where the material comes from");
-  iSub[id]=iSub[id]||"paste";
-  for(const [k,lab] of [["paste","Paste a transcript"],["doc","A text document"],["url","From a link"],["recorder","From my recorder"]]){
+  /* "From a link" is off in 3.88.3 (the browser/fetch inventory, 2026-10-09): the tab is gone and a remembered choice falls back to Paste. */
+  if(!iSub[id]||iSub[id]==="url")iSub[id]="paste";
+  for(const [k,lab] of [["paste","Paste a transcript"],["doc","A text document"],["recorder","From my recorder"]]){
    const tb=document.createElement("button");tb.className="cds-tab";tb.textContent=lab;if(iSub[id]===k){tb.className="cds-tab on";tb.setAttribute("aria-current","page")}
    tb.onclick=()=>{iSub[id]=k;render(lastState,lastRun)};tabs.appendChild(tb)}
   w.appendChild(tabs);
@@ -45111,7 +45620,7 @@ function cockpitHeader(req, name) {
   return Array.isArray(value) ? value.join(",") : value ?? "";
 }
 function headerFields(req, name) {
-  if (req instanceof http.IncomingMessage || "rawHeaders" in req) {
+  if (req instanceof http2.IncomingMessage || "rawHeaders" in req) {
     const raw = req.rawHeaders;
     if (!Array.isArray(raw)) return [];
     const values = [];
@@ -45308,7 +45817,7 @@ async function runDashboard(argv) {
     return 0;
   }
   if (await cockpitAlreadyRunning(port)) {
-    openBrowser2(port);
+    openBrowser3(port);
     process.stderr.write(`
   Command OS is already running. Opening localhost:${port}
 
@@ -45652,7 +46161,7 @@ async function runDashboard(argv) {
   };
   const connectionsRoutes = createConnectionsRoutes(seatToken, port, gate2.plan);
   const briefRoutes = createBriefRoutes(seatToken, port, gate2.plan, registry2);
-  const server2 = http.createServer(guarded(seatToken, port, (req, res) => {
+  const server2 = http2.createServer(guarded(seatToken, port, (req, res) => {
     const url = cockpitPath(req);
     if (connectionsRoutes(req, res)) return;
     if (briefRoutes(req, res)) return;
@@ -46224,6 +46733,11 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             return;
           }
           if (url === "/api/intake-prefill") {
+            if (args.url && !args.file) {
+              res.writeHead(200, { "Content-Type": "application/json" });
+              res.end(JSON.stringify({ ok: false, answers: {}, unknown: args.labels ?? [], error: LINK_READING_OFF_MESSAGE }));
+              return;
+            }
             let bin;
             try {
               bin = claudeBin();
@@ -46529,7 +47043,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const address = new URL(String(args.url || ""));
           if (!["http:", "https:"].includes(address.protocol)) throw new Error("Enter the public website address.");
           const before = readStatusRecord(locationId2);
-          const response = await fetch(address.href, { signal: AbortSignal.timeout(15e3) });
+          const response = await guardedFetchLike(address.href, { signal: AbortSignal.timeout(15e3) });
           const html2 = await response.text();
           const now = readStatusRecord(locationId2);
           if (now.preparedStamp !== before.preparedStamp || !response.ok || !verifyPublicationContent(html2, before.preparedStamp || "", before.preparedSentences || [])) throw new Error("Prepared, not yet published. This address does not show the latest handoff. Publish the prepared page, then verify it again.");
@@ -46561,7 +47075,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           if (stale.length) throw new Error(stale[0].reason);
           const publication = readStatusRecord(locationId2);
           if (!publication.lastPublishedAt || publication.lastError || !publication.lastUrl) throw new Error("The handoff is not yet published. Publish it and verify the public address before sending.");
-          const response = await fetch(publication.lastUrl, { signal: AbortSignal.timeout(15e3) });
+          const response = await guardedFetchLike(publication.lastUrl, { signal: AbortSignal.timeout(15e3) });
           const html2 = await response.text();
           const snapshot = readHandoffSnapshot(locationId2);
           if (!response.ok || !snapshot?.lines.length || !verifyPublicationContent(html2, publication.preparedStamp || "", publication.preparedSentences || [])) throw new Error("The public address does not show the current handoff. Publish the latest page before sending.");
@@ -47080,7 +47594,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
   ${roster.length} client${roster.length === 1 ? "" : "s"} on the board. Ctrl-C to stop.
 
 `);
-  if (!argv.includes("--no-open")) openBrowser2(port);
+  if (!argv.includes("--no-open")) openBrowser3(port);
   {
     const { state: fixed, recovered } = recoverStuckStages(readCockpitState());
     if (recovered) {
@@ -47099,7 +47613,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     process.on("SIGTERM", stop2);
   });
 }
-var import_zod62, import_node_util4, fs37, path35, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest;
+var import_zod62, import_node_util4, fs37, path35, http2, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
@@ -47138,7 +47652,7 @@ var init_dashboard = __esm({
     init_build_obligations();
     fs37 = __toESM(require("fs"));
     path35 = __toESM(require("path"));
-    http = __toESM(require("http"));
+    http2 = __toESM(require("http"));
     import_child_process4 = require("child_process");
     init_credentials_store();
     init_attestation();
@@ -47200,6 +47714,7 @@ var init_dashboard = __esm({
     osmod = __toESM(require("os"));
     init_script_json();
     init_svg_sanitize();
+    init_net_guard();
     STAGES2 = [
       "Intake",
       "Brief",
@@ -49006,13 +49521,13 @@ function contactServiceNote(payload) {
 function registerSmartListTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function smartListRequest(method, path44, body) {
-    const url = `${SMARTLIST_BASE}${path44}`;
+  async function smartListRequest(method, path45, body) {
+    const url = `${SMARTLIST_BASE}${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -49257,11 +49772,11 @@ var init_smart_lists = __esm({
 function registerReputationTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function reputationRequest(method, path44) {
-    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path44}`);
+  async function reputationRequest(method, path45) {
+    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path45}`);
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Reputation API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Reputation API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -49399,11 +49914,11 @@ var init_email_campaigns = __esm({
 function registerMembershipTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function membershipRequest(path44, method = "GET", body) {
-    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path44}`, body ? { body } : {});
+  async function membershipRequest(path45, method = "GET", body) {
+    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path45}`, body ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Membership API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Membership API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -50422,10 +50937,10 @@ async function confirm(run) {
 async function runProbes(client, loc) {
   return Promise.all(
     PROBES.map((probe) => confirm(async () => {
-      const path44 = probe.path.replace("{loc}", loc);
+      const path45 = probe.path.replace("{loc}", loc);
       const params = probe.params ? Object.fromEntries(Object.entries(probe.params).map(([k, v]) => [k, substitute(v, loc)])) : void 0;
       try {
-        const raw = await client.get(path44, { params, noRetry: true });
+        const raw = await client.get(path45, { params, noRetry: true });
         const count2 = countRows(raw, probe.listKeys);
         return {
           key: probe.key,
@@ -51243,6 +51758,161 @@ var init_probe = __esm({
   }
 });
 
+// src/command-os/design/browser.ts
+async function evaluateSource(page, source, arg) {
+  const fn = new Function("arg", `return (${source})(arg);`);
+  return await page.evaluate(fn, arg);
+}
+var init_browser = __esm({
+  "src/command-os/design/browser.ts"() {
+    "use strict";
+    init_interactive_capture();
+  }
+});
+
+// src/command-os/design/local-target.ts
+function realDir(p) {
+  if (!p || !p.trim()) return null;
+  try {
+    const r = fs40.realpathSync(path38.resolve(p));
+    return fs40.statSync(r).isDirectory() ? r : null;
+  } catch {
+    return null;
+  }
+}
+function within(root, p) {
+  return p === root || p.startsWith(root.endsWith(path38.sep) ? root : root + path38.sep);
+}
+function safeDesignRoot(cwd) {
+  const r = realDir(cwd);
+  if (!r) return null;
+  const home = realDir(os7.homedir());
+  if (r === path38.parse(r).root) return null;
+  if (home && (r === home || within(r, home))) return null;
+  const depth = (p) => path38.relative(path38.parse(p).root, p).split(path38.sep).filter(Boolean).length;
+  if ([path38.resolve(cwd), r].some((p) => depth(p) < 2)) return null;
+  if (SYSTEM_DIRS.some((d) => within(d, r))) return null;
+  if (windowsSystemDirs().some((d) => within(d, r))) return null;
+  const own = home ? ["Documents", "Downloads", "Desktop", "Movies", "Music", "Pictures", "Public", "OneDrive"].map((n) => path38.join(home, n)) : [];
+  const shared = ["/Users/Shared", "/tmp", "/private/tmp", "/var/tmp", "/private/var/tmp", "/var/folders", "/private/var/folders", realDir(os7.tmpdir()) ?? os7.tmpdir()];
+  if ([...own, ...shared].some((d) => r === d || r === realDir(d))) return null;
+  const appData = home ? [path38.join(home, "Library"), path38.join(home, "AppData"), process.env.APPDATA, process.env.LOCALAPPDATA] : [];
+  for (const d of appData) if (d && (within(realDir(d) ?? path38.resolve(d), r) || within(path38.resolve(d), r))) return null;
+  if (home && within(home, r) && path38.relative(home, r).split(path38.sep)[0].startsWith(".")) return null;
+  return r;
+}
+function windowsSystemDirs() {
+  if (process.platform !== "win32") return [];
+  return [process.env.SystemRoot, process.env.ProgramFiles, process.env["ProgramFiles(x86)"], process.env.ProgramData].filter((d) => !!d).map((d) => realDir(d) ?? path38.resolve(d));
+}
+function designRoots(env2 = process.env, cwd = process.cwd()) {
+  const out = [];
+  const named = env2[DESIGN_DIR_ENV]?.trim() ? safeDesignRoot(env2[DESIGN_DIR_ENV]) : null;
+  const moved = env2[BRANDS_ENV]?.trim();
+  const brands = moved ? safeDesignRoot(moved) : realDir(brandsDir());
+  for (const r of [named, safeDesignRoot(cwd), brands]) if (r && !out.includes(r)) out.push(r);
+  return out;
+}
+function urlFor(root, file2) {
+  return LOCAL_ORIGIN + "/" + path38.relative(root, file2).split(path38.sep).map(encodeURIComponent).join("/");
+}
+function hidden(rel) {
+  return rel.split(path38.sep).some((s) => s.startsWith("."));
+}
+function checkLocalTarget(target, roots = designRoots()) {
+  const abs = path38.resolve(target);
+  let file2;
+  try {
+    file2 = fs40.realpathSync(abs);
+  } catch {
+    throw new Error(`No file at ${abs}.`);
+  }
+  const ext = path38.extname(file2).toLowerCase();
+  if (ext !== ".html" && ext !== ".htm") throw new Error(`verify_design renders .html files only; ${abs} is not one.`);
+  const st = fs40.statSync(file2);
+  if (!st.isFile()) throw new Error(`${abs} is not a file.`);
+  if (st.size > MAX_PAGE_BYTES) throw new Error(`${abs} is larger than 10 MB, so it is not rendered.`);
+  const root = roots.find((r) => within(r, file2) && !hidden(path38.relative(r, file2)));
+  if (!root) {
+    const where = roots.length ? roots.join(", ") : "none is set up on this computer";
+    throw new Error(`verify_design only renders pages inside the design folders (${where}); ${abs} is outside them. Move the page into your project or brand folder, or set ${DESIGN_DIR_ENV} to the folder that holds it.`);
+  }
+  return { file: file2, root, url: urlFor(root, file2), html: fs40.readFileSync(file2, "utf8") };
+}
+function localFileFor(root, raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (u.origin !== LOCAL_ORIGIN || u.username || u.password) return null;
+  const segs = [];
+  for (const part of u.pathname.split("/").slice(1)) {
+    let s;
+    try {
+      s = decodeURIComponent(part);
+    } catch {
+      return null;
+    }
+    if (!s || s.startsWith(".") || /[\\/\0]/.test(s) || s.includes(":")) return null;
+    segs.push(s);
+  }
+  if (!segs.length) return null;
+  let file2;
+  try {
+    file2 = fs40.realpathSync(path38.join(root, ...segs));
+  } catch {
+    return null;
+  }
+  if (!within(root, file2) || file2 === root || hidden(path38.relative(root, file2))) return null;
+  const contentType = SERVED[path38.extname(file2).toLowerCase()];
+  if (!contentType) return null;
+  try {
+    const st = fs40.statSync(file2);
+    if (!st.isFile() || st.size > MAX_FILE_BYTES) return null;
+  } catch {
+    return null;
+  }
+  return { file: file2, contentType };
+}
+var fs40, os7, path38, DESIGN_DIR_ENV, LOCAL_ORIGIN, MAX_PAGE_BYTES, MAX_FILE_BYTES, SERVED, SYSTEM_DIRS;
+var init_local_target = __esm({
+  "src/command-os/design/local-target.ts"() {
+    "use strict";
+    fs40 = __toESM(require("node:fs"));
+    os7 = __toESM(require("node:os"));
+    path38 = __toESM(require("node:path"));
+    init_store();
+    DESIGN_DIR_ENV = "GHL_MCP_DESIGN_DIR";
+    LOCAL_ORIGIN = "http://verify.invalid";
+    MAX_PAGE_BYTES = 10 * 1024 * 1024;
+    MAX_FILE_BYTES = 25 * 1024 * 1024;
+    SERVED = {
+      ".html": "text/html; charset=utf-8",
+      ".htm": "text/html; charset=utf-8",
+      ".css": "text/css; charset=utf-8",
+      ".js": "text/javascript; charset=utf-8",
+      ".mjs": "text/javascript; charset=utf-8",
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".jpeg": "image/jpeg",
+      ".gif": "image/gif",
+      ".webp": "image/webp",
+      ".avif": "image/avif",
+      ".svg": "image/svg+xml",
+      ".ico": "image/x-icon",
+      ".woff": "font/woff",
+      ".woff2": "font/woff2",
+      ".ttf": "font/ttf",
+      ".otf": "font/otf",
+      ".mp4": "video/mp4",
+      ".webm": "video/webm"
+    };
+    SYSTEM_DIRS = ["/etc", "/private/etc", "/usr", "/bin", "/sbin", "/System", "/Library", "/opt", "/dev", "/proc", "/sys"];
+  }
+});
+
 // src/command-os/design/png.ts
 function decodePng(buf) {
   const b = Buffer.isBuffer(buf) ? buf : Buffer.from(buf);
@@ -51272,7 +51942,7 @@ function decodePng(buf) {
   if (interlace !== 0) throw new Error("interlaced PNG is not supported");
   const channels = colorType === 0 ? 1 : colorType === 2 ? 3 : colorType === 3 ? 1 : colorType === 4 ? 2 : colorType === 6 ? 4 : 0;
   if (!channels) throw new Error(`PNG colour type ${colorType} is not supported`);
-  const raw = (0, import_node_zlib.inflateSync)(Buffer.concat(idat));
+  const raw = (0, import_node_zlib2.inflateSync)(Buffer.concat(idat));
   const bpp = channels;
   const stride = width * bpp;
   const out = new Uint8Array(width * height * 4);
@@ -51357,11 +52027,11 @@ function pixelAt(png, x, y) {
   const o = (yi * png.width + xi) * 4;
   return { r: png.rgba[o], g: png.rgba[o + 1], b: png.rgba[o + 2] };
 }
-var import_node_zlib, SIG;
+var import_node_zlib2, SIG;
 var init_png = __esm({
   "src/command-os/design/png.ts"() {
     "use strict";
-    import_node_zlib = require("node:zlib");
+    import_node_zlib2 = require("node:zlib");
     SIG = [137, 80, 78, 71, 13, 10, 26, 10];
   }
 });
@@ -52990,11 +53660,14 @@ async function settle(page) {
   await page.evaluate(() => document.fonts?.ready).catch(() => void 0);
   await page.waitForTimeout(250);
 }
-async function readTarget(target) {
-  if (isUrl(target)) return { html: null, url: target };
-  const abs = path38.resolve(target);
-  if (!fs40.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-  return { html: fs40.readFileSync(abs, "utf8"), url: (0, import_node_url.pathToFileURL)(abs).toString() };
+async function readTarget(target, roots) {
+  if (isUrl(target)) {
+    const problem = await publicAddressProblem(target);
+    if (problem) throw new Error(`verify_design did not open ${target}: ${problem}.`);
+    return { html: null, url: target, root: null };
+  }
+  const t = checkLocalTarget(target, roots);
+  return { html: t.html, url: t.url, root: t.root };
 }
 function slidePixels(index, png, file2, sec, brand) {
   let img;
@@ -53038,11 +53711,35 @@ function slidePixels(index, png, file2, sec, brand) {
   });
   return { index, screenshot: file2, bgShare, accentShare, hueBuckets, overImage };
 }
+async function serveLocalPage(context, root, url, html2) {
+  const notServed = { status: 404, contentType: "text/plain", body: "not served" };
+  await context.route(`${LOCAL_ORIGIN}/**`, async (route) => {
+    const req = route.request();
+    if (req.method() !== "GET" && req.method() !== "HEAD") {
+      await route.abort("blockedbyclient").catch(() => void 0);
+      return;
+    }
+    if (req.url() === url) {
+      await route.fulfill({ status: 200, contentType: "text/html; charset=utf-8", body: html2 }).catch(() => void 0);
+      return;
+    }
+    const hit = localFileFor(root, req.url());
+    let body = null;
+    if (hit) {
+      try {
+        body = fs41.readFileSync(hit.file);
+      } catch {
+        body = null;
+      }
+    }
+    await route.fulfill(hit && body ? { status: 200, contentType: hit.contentType, body } : notServed).catch(() => void 0);
+  });
+}
 async function verifyDesign(opts) {
-  const { html: html2, url } = await readTarget(opts.target);
+  const { html: html2, url, root } = await readTarget(opts.target, opts.roots);
   const placement = opts.placement ?? "html";
   const medium = opts.medium;
-  fs40.mkdirSync(opts.outDir, { recursive: true });
+  fs41.mkdirSync(opts.outDir, { recursive: true });
   const files = [];
   const screenshots = [];
   const at = (/* @__PURE__ */ new Date()).toISOString();
@@ -53064,10 +53761,16 @@ async function verifyDesign(opts) {
   if (!conformance.ok) {
     rules = [];
   } else {
-    const launched = opts.noBrowser ? { ok: false, reason: "browser disabled for this run" } : await launchBrowser({ headless: opts.headless ?? true, profileDir: opts.profileDir });
+    const launched = opts.noBrowser ? { ok: false, reason: "browser disabled for this run" } : await openGuardedBrowser();
     if (launched.ok) {
-      const { context, close } = launched.browser;
-      try {
+      const { context, close } = launched;
+      let timer;
+      const expired = new Promise((_, reject) => {
+        const limit = opts.deadlineMs ?? VERIFY_DEADLINE_MS;
+        timer = setTimeout(() => reject(new Error(`verify_design stopped: the page did not finish rendering within ${Math.round(limit / 1e3)} seconds, so nothing was graded.`)), limit);
+      });
+      const work = (async () => {
+        if (root !== null && html2 !== null) await serveLocalPage(context, root, url, html2);
         const page = context.pages()[0] ?? await context.newPage();
         if (medium === "deck") {
           await page.setViewportSize({ width: 1920, height: 1080 });
@@ -53087,8 +53790,8 @@ async function verifyDesign(opts) {
             try {
               await loc.scrollIntoViewIfNeeded({ timeout: 5e3 });
               const png = await loc.screenshot({ type: "png", timeout: 15e3 });
-              fs40.writeFileSync(path38.join(opts.outDir, file2), png);
-              files.push(path38.join(opts.outDir, file2));
+              fs41.writeFileSync(path39.join(opts.outDir, file2), png);
+              files.push(path39.join(opts.outDir, file2));
               screenshots.push(file2);
               pixels.push(slidePixels(sec.index, png, file2, sec, opts.brand));
             } catch {
@@ -53120,8 +53823,8 @@ async function verifyDesign(opts) {
           const shot = "page-1440.png";
           try {
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs40.writeFileSync(path38.join(opts.outDir, shot), png);
-            files.push(path38.join(opts.outDir, shot));
+            fs41.writeFileSync(path39.join(opts.outDir, shot), png);
+            files.push(path39.join(opts.outDir, shot));
             screenshots.push(shot);
           } catch {
           }
@@ -53129,8 +53832,8 @@ async function verifyDesign(opts) {
             await page.setViewportSize({ width: 390, height: 844 });
             await page.evaluate(SETTLE_SCROLL_JS).catch(() => void 0);
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs40.writeFileSync(path38.join(opts.outDir, "page-390.png"), png);
-            files.push(path38.join(opts.outDir, "page-390.png"));
+            fs41.writeFileSync(path39.join(opts.outDir, "page-390.png"), png);
+            files.push(path39.join(opts.outDir, "page-390.png"));
             screenshots.push("page-390.png");
           } catch {
           }
@@ -53149,7 +53852,12 @@ async function verifyDesign(opts) {
             rules.push(...checkConversion(conv, { brief: opts.conversion, gate: opts.gate ?? "ship", copyAxes: opts.copyAxes ?? null }, Boolean(conv)));
           }
         }
+      })();
+      work.catch(() => void 0);
+      try {
+        await Promise.race([work, expired]);
       } finally {
+        clearTimeout(timer);
         await close();
       }
     } else {
@@ -53203,25 +53911,27 @@ async function verifyDesign(opts) {
     screenshots
   };
   const checked = VerificationSchema.parse(report3);
-  const jsonPath = path38.join(opts.outDir, "verification.json");
-  fs40.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
+  const jsonPath = path39.join(opts.outDir, "verification.json");
+  fs41.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
   files.push(jsonPath);
   const reportHtml = renderVerificationHtml(checked, opts.branding);
-  const htmlPath = path38.join(opts.outDir, "verification.html");
-  fs40.writeFileSync(htmlPath, reportHtml);
+  const htmlPath = path39.join(opts.outDir, "verification.html");
+  fs41.writeFileSync(htmlPath, reportHtml);
   files.push(htmlPath);
   return { report: checked, files, reportHtml };
 }
-var fs40, path38, import_node_url, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS;
+var fs41, path39, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS, VERIFY_DEADLINE_MS;
 var init_verify = __esm({
   "src/command-os/design/verify.ts"() {
     "use strict";
-    fs40 = __toESM(require("node:fs"));
-    path38 = __toESM(require("node:path"));
-    import_node_url = require("node:url");
+    fs41 = __toESM(require("node:fs"));
+    path39 = __toESM(require("node:path"));
     init_lint();
     init_probe();
     init_browser();
+    init_guarded_browser();
+    init_net_guard();
+    init_local_target();
     init_png();
     init_slides2();
     init_web2();
@@ -53259,6 +53969,7 @@ var init_verify = __esm({
   }
   return out;
 }`;
+    VERIFY_DEADLINE_MS = 3e5;
   }
 });
 
@@ -53470,17 +54181,15 @@ Fix exactly those and reply with ONLY the complete corrected HTML in one \`\`\`h
 ${html2}
 \`\`\``;
 }
-async function defaultVerify(file2, medium, brand, outDir, mode, headless = true, conversion) {
-  const { mkdtempSync } = await import("node:fs");
-  const { tmpdir: tmpdir2 } = await import("node:os");
+async function defaultVerify(file2, medium, brand, outDir, mode, conversion) {
+  const own = safeDesignRoot((0, import_node_path9.dirname)(file2));
   const r = await verifyDesign({
     target: file2,
     medium,
     brand,
     outDir,
     mode,
-    headless,
-    profileDir: mkdtempSync((0, import_node_path9.join)(tmpdir2(), "ds-run-profile-")),
+    roots: own ? [own, ...designRoots()] : designRoots(),
     ...conversion ? { pageMode: "conversion", conversion: conversion.brief, gate: conversion.gate } : {}
   });
   if (r.report.renderedWith !== "browser") {
@@ -53504,7 +54213,7 @@ async function runDesign(opts) {
   const maxPasses = Math.max(1, Math.min(3, opts.maxPasses ?? 3));
   const generate = opts.generate ?? claudeGenerate(opts.model ?? DEFAULT_MODEL);
   const conversionRun = brief.options.pageMode === "conversion" && brief.conversion ? { brief: brief.conversion, gate: opts.gate ?? "ship" } : void 0;
-  const verify = opts.verify ?? ((f, m, b, o, mode2) => defaultVerify(f, m, b, o, mode2, opts.headless ?? true, conversionRun));
+  const verify = opts.verify ?? ((f, m, b, o, mode2) => defaultVerify(f, m, b, o, mode2, conversionRun));
   const mode = medium === "deck" ? brief.options.mode : void 0;
   const result = { ok: false, greenAt: null, passes: [], costUsd: 0, ms: 0, model: null, outDir, brandSlug: dna.slug, medium, stoppedBecause: "" };
   let instruction = `${pack.markdown}
@@ -53589,6 +54298,7 @@ var init_run2 = __esm({
     init_copy_grade();
     init_lint();
     init_verify();
+    init_local_target();
     init_looks();
     init_store();
     init_brief_validation();
@@ -53636,7 +54346,7 @@ function registerDesignStudioTools(server2) {
       const { dna, logoSvg, logoPng } = deriveBrandDna(raw, { name, slug: slug3, rights: { declaration: a.rights, at: (/* @__PURE__ */ new Date()).toISOString() }, browser, firecrawl: fc });
       if (a.rights === "none" && dna.logo) notes.push("Rights declared as none: the logo is stored for reference only; do not place it on a client-facing page.");
       const written = writeBrand(dna, { logoSvg, logoPng, screenshotPng: browser?.screenshotPng });
-      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path39.basename(f)), notes };
+      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path40.basename(f)), notes };
     }
   );
   safeTool(
@@ -53803,18 +54513,18 @@ function registerDesignStudioTools(server2) {
     "Check a written HTML file honours the output contract before grading: section and role markers present and consistent, no outside scripts, one h1 on a page, every image described. Deterministic; no browser. A file that fails this is not graded by verify_design.",
     { file: import_zod76.z.string().describe("Path to the .html file."), medium: import_zod76.z.enum(MEDIA) },
     async ({ file: file2, medium }) => {
-      const abs = path39.resolve(file2);
-      if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-      const r = lintDesignContract(fs41.readFileSync(abs, "utf8"), medium);
+      const abs = path40.resolve(file2);
+      if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+      const r = lintDesignContract(fs42.readFileSync(abs, "utf8"), medium);
       return { ok: r.ok, problems: r.problems, warnings: r.warnings, facts: r.facts };
     }
   );
   safeTool(
     server2,
     "verify_design",
-    "Render a deck or page (a local .html or a published URL) in the automation browser and measure it against the design rules and the sameness tells. Every rule on its own line: measured, proxy or judgment call, with the value and the evidence. Writes verification.json, verification.html and screenshots to outDir. PASS means zero failed measured rules and NOTHING MORE: every rule measures craft \u2014 type, spacing, colour, contrast, structure, performance and the machine-made tells \u2014 and none of them measures whether the page persuades anyone. A page can pass every rule and still be boring and unsellable. Never report a pass as a quality claim; judge the writing separately. GoHighLevel pages: pass placement:'ghl' to grade on the builder subset.",
+    "Render a deck or page (a local .html inside your project or brand folder, or a public web address) in a fresh, guarded browser (no saved logins, public addresses only) and measure it against the design rules and the sameness tells. Every rule on its own line: measured, proxy or judgment call, with the value and the evidence. Writes verification.json, verification.html and screenshots to outDir. PASS means zero failed measured rules and NOTHING MORE: every rule measures craft \u2014 type, spacing, colour, contrast, structure, performance and the machine-made tells \u2014 and none of them measures whether the page persuades anyone. A page can pass every rule and still be boring and unsellable. Never report a pass as a quality claim; judge the writing separately. GoHighLevel pages: pass placement:'ghl' to grade on the builder subset.",
     {
-      target: import_zod76.z.string().describe("A local .html path or an http(s) URL."),
+      target: import_zod76.z.string().describe("A local .html path inside the project folder, the brand folder or GHL_MCP_DESIGN_DIR, or a public http(s) URL."),
       medium: import_zod76.z.enum(MEDIA),
       brandSlug: import_zod76.z.string().optional().describe("The brand to measure against (accent share, logo, faces)."),
       outDir: import_zod76.z.string().optional().describe("Where to write the report. Default: <file dir>/verify-<name>/ or ./verify-<host>/ for URLs."),
@@ -53826,7 +54536,7 @@ function registerDesignStudioTools(server2) {
     async (a) => {
       const brand = a.brandSlug ? houseLooks().find((d) => d.slug === a.brandSlug) ?? readBrand(slugify(a.brandSlug)) : void 0;
       const isUrl2 = /^https?:\/\//i.test(a.target);
-      const outDir = a.outDir ?? (isUrl2 ? path39.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path39.join(path39.dirname(path39.resolve(a.target)), `verify-${path39.basename(a.target, ".html")}`));
+      const outDir = a.outDir ?? (isUrl2 ? path40.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path40.join(path40.dirname(path40.resolve(a.target)), `verify-${path40.basename(a.target, ".html")}`));
       const r = await verifyDesign({ target: a.target, medium: a.medium, brand, outDir, placement: a.placement, mode: a.mode, ratio: a.ratio, logo: a.logo, branding: readAgencyBranding() });
       const v = r.report;
       const failed = v.rules.filter((x) => x.state === "MEASURED-FAIL").map((x) => `${x.ruleId} ${x.name}: ${x.measured ?? ""}`);
@@ -53841,7 +54551,7 @@ function registerDesignStudioTools(server2) {
         judgments: v.rules.filter((x) => x.state === "ASSERTED").map((x) => `${x.ruleId} ${x.name}: ${x.detail ?? ""}`),
         notApplicable: v.rules.filter((x) => x.state === "N-A").map((x) => `${x.ruleId}: ${x.detail ?? ""}`),
         brandMatch: v.brandMatch,
-        report: path39.join(outDir, "verification.html"),
+        report: path40.join(outDir, "verification.html"),
         files: r.files,
         ...a.placement === "ghl" && { builderOwned: builderOwnedRules().map((b) => `${b.rule.id} ${b.rule.name}: ${b.why}`) }
       };
@@ -53869,11 +54579,20 @@ function registerDesignStudioTools(server2) {
       if (!a.pageDataDownloadUrl && !a.file) throw new Error("Pass pageDataDownloadUrl (from get_page_full) or file.");
       let page;
       if (a.file) {
-        const abs = path39.resolve(a.file);
-        if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        page = JSON.parse(fs41.readFileSync(abs, "utf8"));
+        const abs = path40.resolve(a.file);
+        if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        page = JSON.parse(fs42.readFileSync(abs, "utf8"));
       } else {
-        const response = await fetch(a.pageDataDownloadUrl, { headers: { Accept: "application/json,*/*" } });
+        const host = (() => {
+          try {
+            const u = new URL(a.pageDataDownloadUrl);
+            return u.protocol === "https:" ? u.hostname : "";
+          } catch {
+            return "";
+          }
+        })();
+        if (!GHL_PAGE_DATA_HOSTS.some((h) => host === h || host.endsWith("." + h))) throw new Error("pageDataDownloadUrl must be the https address get_page_full returned (GoHighLevel's storage).");
+        const response = await guardedFetchLike(a.pageDataDownloadUrl, { headers: { Accept: "application/json,*/*" }, signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
         if (!response.ok) throw new Error(`Could not download the page data: HTTP ${response.status}. Re-read get_page_full \u2014 the download URL expires.`);
         page = JSON.parse(await response.text());
       }
@@ -53912,9 +54631,9 @@ function registerDesignStudioTools(server2) {
       if (!a.file && !a.text) throw new Error("Pass file or text.");
       let html2 = a.text ?? "";
       if (a.file) {
-        const abs = path39.resolve(a.file);
-        if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        html2 = fs41.readFileSync(abs, "utf8");
+        const abs = path40.resolve(a.file);
+        if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        html2 = fs42.readFileSync(abs, "utf8");
       }
       const r = await gradeCopy(html2, claudeGenerate(a.model), { icp: a.icp });
       if (!r.grade) {
@@ -53949,13 +54668,13 @@ function registerDesignStudioTools(server2) {
     }
   );
 }
-var import_zod76, fs41, path39, summarise2;
+var import_zod76, fs42, path40, GHL_PAGE_DATA_HOSTS, summarise2;
 var init_design_studio = __esm({
   "src/tools/design-studio.ts"() {
     "use strict";
     import_zod76 = require("zod");
-    fs41 = __toESM(require("node:fs"));
-    path39 = __toESM(require("node:path"));
+    fs42 = __toESM(require("node:fs"));
+    path40 = __toESM(require("node:path"));
     init_tool_helpers();
     init_extract();
     init_extract_browser();
@@ -53974,6 +54693,8 @@ var init_design_studio = __esm({
     init_color();
     init_branding();
     init_svg_sanitize();
+    init_net_guard();
+    GHL_PAGE_DATA_HOSTS = ["firebasestorage.googleapis.com", "storage.googleapis.com", "backend.leadconnectorhq.com"];
     summarise2 = (d) => ({
       slug: d.slug,
       name: d.name,
@@ -54679,11 +55400,11 @@ var init_audit = __esm({
 // src/command-os/delivery-audit/store.ts
 function deliveryAuditPath() {
   const override = process.env[DELIVERY_AUDIT_ENV];
-  return override && override.trim() ? override : path40.join(appDataDir(), "delivery-audit.json");
+  return override && override.trim() ? override : path41.join(appDataDir(), "delivery-audit.json");
 }
 function readDeliveryAudit() {
   try {
-    const parsed2 = JSON.parse(fs42.readFileSync(deliveryAuditPath(), "utf-8"));
+    const parsed2 = JSON.parse(fs43.readFileSync(deliveryAuditPath(), "utf-8"));
     if (!parsed2 || typeof parsed2 !== "object" || !parsed2.answers || typeof parsed2.answers !== "object") return { ...EMPTY3 };
     return { v: 1, answers: parsed2.answers, updated_at: parsed2.updated_at };
   } catch {
@@ -54694,7 +55415,7 @@ function readForWrite2() {
   const target = deliveryAuditPath();
   let raw;
   try {
-    raw = fs42.readFileSync(target, "utf-8");
+    raw = fs43.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { ...EMPTY3 };
     throw new Error("Your saved audit could not be read, so nothing was changed. Nothing was lost.");
@@ -54706,7 +55427,7 @@ function readForWrite2() {
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs42.copyFileSync(target, kept);
+      fs43.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(`Your saved audit is damaged, so nothing was written over it. A copy is at ${kept}. Start again with reset:true when you are ready.`);
@@ -54718,13 +55439,13 @@ function writeFile2(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs42.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs42.renameSync(tmp, target);
+    fs43.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs43.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs42.unlinkSync(tmp);
+        fs43.unlinkSync(tmp);
       } catch {
       }
     }
@@ -54745,12 +55466,12 @@ function resetDeliveryAudit(now = () => /* @__PURE__ */ new Date()) {
   writeFile2(next);
   return next;
 }
-var fs42, path40, EMPTY3, DELIVERY_AUDIT_ENV;
+var fs43, path41, EMPTY3, DELIVERY_AUDIT_ENV;
 var init_store4 = __esm({
   "src/command-os/delivery-audit/store.ts"() {
     "use strict";
-    fs42 = __toESM(require("node:fs"));
-    path40 = __toESM(require("node:path"));
+    fs43 = __toESM(require("node:fs"));
+    path41 = __toESM(require("node:path"));
     init_credentials_store();
     EMPTY3 = { v: 1, answers: {} };
     DELIVERY_AUDIT_ENV = "GHL_MCP_DELIVERY_AUDIT";
@@ -54975,7 +55696,7 @@ function planFingerprint(goal, steps) {
     goal,
     steps: steps.map((s) => ({ id: s.id, tool: s.tool, targets: s.targets, creates: s.creates ?? [], args: s.args ?? {} }))
   });
-  return (0, import_node_crypto14.createHash)("sha256").update(JSON.stringify(shape)).digest("hex").slice(0, 16);
+  return (0, import_node_crypto15.createHash)("sha256").update(JSON.stringify(shape)).digest("hex").slice(0, 16);
 }
 function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), knownTools) {
   const refusals = [];
@@ -55192,11 +55913,11 @@ function abandon(a, why) {
   const stillApplied = position(a).undo;
   return { ok: true, automation: { ...a, phase: "abandoned", goal: a.goal, abandonedBecause: why }, stillApplied };
 }
-var import_node_crypto14, isExisting, FINDINGS_STALE_AFTER_MINUTES;
+var import_node_crypto15, isExisting, FINDINGS_STALE_AFTER_MINUTES;
 var init_automation = __esm({
   "src/command-os/build/automation.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     init_verify_findings();
     isExisting = (t) => "existing" in t;
     FINDINGS_STALE_AFTER_MINUTES = 60;
@@ -55206,16 +55927,16 @@ var init_automation = __esm({
 // src/command-os/build/store.ts
 function automationsPath() {
   const override = process.env[AUTOMATIONS_ENV];
-  return override && override.trim() ? override : path41.join(appDataDir(), "automations.json");
+  return override && override.trim() ? override : path42.join(appDataDir(), "automations.json");
 }
-function parse4(raw) {
+function parse5(raw) {
   const p = JSON.parse(raw);
   if (!p || typeof p !== "object" || !p.builds || typeof p.builds !== "object") throw new Error("shape");
   return { v: 1, builds: p.builds };
 }
 function readAutomations() {
   try {
-    return parse4(fs43.readFileSync(automationsPath(), "utf-8")).builds;
+    return parse5(fs44.readFileSync(automationsPath(), "utf-8")).builds;
   } catch {
     return { ...EMPTY4.builds };
   }
@@ -55224,17 +55945,17 @@ function readForWrite3() {
   const target = automationsPath();
   let raw;
   try {
-    raw = fs43.readFileSync(target, "utf-8");
+    raw = fs44.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { v: 1, builds: {} };
     throw new Error("Your builds file could not be read, so nothing was changed. Nothing was lost.");
   }
   try {
-    return parse4(raw);
+    return parse5(raw);
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs43.copyFileSync(target, kept);
+      fs44.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(
@@ -55248,13 +55969,13 @@ function writeFile3(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs43.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs43.renameSync(tmp, target);
+    fs44.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs44.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs43.unlinkSync(tmp);
+        fs44.unlinkSync(tmp);
       } catch {
       }
     }
@@ -55280,12 +56001,12 @@ function newAutomationId(now = () => /* @__PURE__ */ new Date()) {
   }
   return id;
 }
-var fs43, path41, AUTOMATIONS_ENV, EMPTY4;
+var fs44, path42, AUTOMATIONS_ENV, EMPTY4;
 var init_store5 = __esm({
   "src/command-os/build/store.ts"() {
     "use strict";
-    fs43 = __toESM(require("node:fs"));
-    path41 = __toESM(require("node:path"));
+    fs44 = __toESM(require("node:fs"));
+    path42 = __toESM(require("node:path"));
     init_credentials_store();
     AUTOMATIONS_ENV = "GHL_MCP_AUTOMATIONS";
     EMPTY4 = { v: 1, builds: {} };
@@ -55604,7 +56325,7 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
         }
         const refKinds = new Map(plan.flatMap((s) => (s.creates ?? []).map((c) => [c.ref, normaliseKind(c.kind)])));
         const seenKeys = new Set(found.map((f) => `${normaliseKind(f.kind)}:${f.id}`));
-        const hidden = [];
+        const hidden2 = [];
         const argRefusals = [];
         for (const { step: s, scan } of scans) {
           if (scan.incomplete) argRefusals.push({ because: `Step "${s.id}": ${scan.incomplete}`, finding: { kind: "arguments", id: s.id } });
@@ -55619,7 +56340,7 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
             const key = `${kind}:${id}`;
             if (seenKeys.has(key)) continue;
             seenKeys.add(key);
-            hidden.push({ kind, id, observedAt: now.toISOString() });
+            hidden2.push({ kind, id, observedAt: now.toISOString() });
           }
           for (const { kind, id } of scan.ids) {
             const refKind = refKinds.get(id);
@@ -55635,13 +56356,13 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
             const key = `${kind}:${id}`;
             if (seenKeys.has(key)) continue;
             seenKeys.add(key);
-            hidden.push({ kind, id, observedAt: now.toISOString() });
+            hidden2.push({ kind, id, observedAt: now.toISOString() });
           }
         }
         if (argRefusals.length) {
           return { planned: false, refusals: argRefusals, note: "Nothing was saved. These arguments carry ids that cannot be checked as they stand." };
         }
-        const toVerify = [...found, ...hidden];
+        const toVerify = [...found, ...hidden2];
         boundAccount = account2;
         const refusals = toVerify.length === 0 ? [] : verify ? await verify(account2, toVerify) : toVerify.map((f) => ({ finding: f, because: `"${f.id}" could not be checked against any account, so it is refused rather than trusted.` }));
         if (refusals.length) {
@@ -58821,13 +59542,13 @@ ${text3}`);
   };
 }
 function makePipelineApi(builderClient) {
-  return async (method, path44, body) => {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path44}`;
+  return async (method, path45, body) => {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Pipeline API ${response.status}: ${method} ${path44}
+      throw new Error(`Pipeline API ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -58840,8 +59561,8 @@ ${text3}`);
   };
 }
 function makeFunnelApi(builderClient) {
-  return async (method, path44, body) => {
-    const url = `https://backend.leadconnectorhq.com/funnels${path44}`;
+  return async (method, path45, body) => {
+    const url = `https://backend.leadconnectorhq.com/funnels${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, {
       ...sendsBody ? { body } : {},
@@ -58854,7 +59575,7 @@ function makeFunnelApi(builderClient) {
     });
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Funnel API ${response.status}: ${method} ${path44}
+      throw new Error(`Funnel API ${response.status}: ${method} ${path45}
 ${text3.slice(0, 300)}`);
     }
     const text2 = await response.text();
@@ -59019,8 +59740,8 @@ function makeExecuteDeps(client, builderClient, locationId2, registry2) {
     },
     fetchEmailTemplatePreview: async (previewUrl) => {
       if (!/^https:\/\//i.test(previewUrl)) throw new Error(`preview URL is not https (${previewUrl.slice(0, 60)})`);
-      const response = await fetch(previewUrl, { headers: { Accept: "text/html,*/*" } });
-      if (!response.ok) throw new Error(`preview fetch HTTP ${response.status}: ${await response.text()}`);
+      const response = await buildNet.read(previewUrl, { headers: { Accept: "text/html,*/*" }, signal: AbortSignal.timeout(3e4) });
+      if (!response.ok) throw new Error(`preview fetch HTTP ${response.status}`);
       return response.text();
     },
     deleteEmailTemplate: async (templateId) => {
@@ -60071,7 +60792,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod87, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
+var import_zod87, buildNet, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -60105,6 +60826,8 @@ var init_intake_to_build = __esm({
     init_features();
     init_executor();
     init_execute();
+    init_net_guard();
+    buildNet = { read: guardedFetchLike };
     customFieldItemSchema = import_zod87.z.object({
       id: import_zod87.z.string(),
       name: import_zod87.z.string(),
@@ -60169,7 +60892,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env2 = process
       return findings.map((finding) => ({ finding, because: `"${finding.id}" cannot be checked: no saved key for sub-account ${loc}. Register it (register_location) or point the server at it first.` }));
     }
     const reader = token2 ? new GHLClient({ apiKey: token2.apiKey, locationId: loc }) : client;
-    return refuseUnseenFindings2((path44, params) => reader.get(path44, params ? { params } : void 0), loc, findings);
+    return refuseUnseenFindings2((path45, params) => reader.get(path45, params ? { params } : void 0), loc, findings);
   }, () => client.defaultLocationId);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
@@ -60595,8 +61318,8 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var dotenv2 = __toESM(require("dotenv"));
-var path43 = __toESM(require("path"));
-var fs45 = __toESM(require("fs"));
+var path44 = __toESM(require("path"));
+var fs46 = __toESM(require("fs"));
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 
 // src/version-compare.ts
@@ -60667,12 +61390,12 @@ init_setup_tool();
 var import_zod88 = require("zod");
 
 // src/skill-installer.ts
-var import_node_crypto15 = require("node:crypto");
-var fs44 = __toESM(require("node:fs"));
-var path42 = __toESM(require("node:path"));
-var os7 = __toESM(require("node:os"));
+var import_node_crypto16 = require("node:crypto");
+var fs45 = __toESM(require("node:fs"));
+var path43 = __toESM(require("node:path"));
+var os8 = __toESM(require("node:os"));
 function sha2562(buf) {
-  return (0, import_node_crypto15.createHash)("sha256").update(buf).digest("hex");
+  return (0, import_node_crypto16.createHash)("sha256").update(buf).digest("hex");
 }
 function isOlderRelease(candidate, installed) {
   const parts = (v) => v.trim().split(".").map((n) => Number.parseInt(n, 10));
@@ -60684,9 +61407,9 @@ function isOlderRelease(candidate, installed) {
   return false;
 }
 function bundledSkillsDir(baseDir) {
-  const candidate = path42.resolve(baseDir, "..", "skills");
+  const candidate = path43.resolve(baseDir, "..", "skills");
   try {
-    return fs44.statSync(candidate).isDirectory() ? candidate : null;
+    return fs45.statSync(candidate).isDirectory() ? candidate : null;
   } catch {
     return null;
   }
@@ -60694,10 +61417,10 @@ function bundledSkillsDir(baseDir) {
 function listFiles(root) {
   const out = [];
   const walk = (dir) => {
-    for (const entry of fs44.readdirSync(dir, { withFileTypes: true })) {
-      const full = path42.join(dir, entry.name);
+    for (const entry of fs45.readdirSync(dir, { withFileTypes: true })) {
+      const full = path43.join(dir, entry.name);
       if (entry.isDirectory()) walk(full);
-      else if (entry.isFile()) out.push(path42.relative(root, full));
+      else if (entry.isFile()) out.push(path43.relative(root, full));
     }
   };
   walk(root);
@@ -60705,7 +61428,7 @@ function listFiles(root) {
 }
 function readMarker(markerPath) {
   try {
-    const parsed2 = JSON.parse(fs44.readFileSync(markerPath, "utf8"));
+    const parsed2 = JSON.parse(fs45.readFileSync(markerPath, "utf8"));
     return parsed2 && typeof parsed2 === "object" && parsed2.files ? parsed2 : null;
   } catch {
     return null;
@@ -60719,35 +61442,35 @@ function installBundledSkills(opts) {
     skippedOlderPackage: [],
     unchanged: [],
     errors: [],
-    targetDir: opts.targetDir ?? path42.join(os7.homedir(), ".claude", "skills"),
+    targetDir: opts.targetDir ?? path43.join(os8.homedir(), ".claude", "skills"),
     bundledDir: null
   };
   const bundled = bundledSkillsDir(opts.baseDir);
   result.bundledDir = bundled;
   if (!bundled) return result;
   try {
-    fs44.mkdirSync(result.targetDir, { recursive: true });
+    fs45.mkdirSync(result.targetDir, { recursive: true });
   } catch (e) {
     result.errors.push(`cannot create ${result.targetDir}: ${String(e)}`);
     return result;
   }
-  const markerPath = path42.join(result.targetDir, ".ghl-command-skills.json");
+  const markerPath = path43.join(result.targetDir, ".ghl-command-skills.json");
   const marker = readMarker(markerPath) ?? { packageVersion: "", files: {} };
   const newMarker = { packageVersion: opts.packageVersion, files: { ...marker.files } };
   for (const rel of listFiles(bundled)) {
     try {
-      const src = fs44.readFileSync(path42.join(bundled, rel));
-      const dest = path42.join(result.targetDir, rel);
+      const src = fs45.readFileSync(path43.join(bundled, rel));
+      const dest = path43.join(result.targetDir, rel);
       const srcHash = sha2562(src);
       let destBuf = null;
       try {
-        destBuf = fs44.readFileSync(dest);
+        destBuf = fs45.readFileSync(dest);
       } catch {
         destBuf = null;
       }
       if (destBuf === null) {
-        fs44.mkdirSync(path42.dirname(dest), { recursive: true });
-        fs44.writeFileSync(dest, src);
+        fs45.mkdirSync(path43.dirname(dest), { recursive: true });
+        fs45.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.installed.push(rel);
         continue;
@@ -60764,7 +61487,7 @@ function installBundledSkills(opts) {
         newMarker.packageVersion = marker.packageVersion;
         result.skippedOlderPackage.push(rel);
       } else if (lastWritten && destHash === lastWritten) {
-        fs44.writeFileSync(dest, src);
+        fs45.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.updated.push(rel);
       } else {
@@ -60775,7 +61498,7 @@ function installBundledSkills(opts) {
     }
   }
   try {
-    fs44.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
+    fs45.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
   } catch (e) {
     result.errors.push(`marker write failed: ${String(e)}`);
   }
@@ -60870,11 +61593,11 @@ function agencyPrimer(p) {
   if (staff.length) lines.push(`Their team: ${staff.join("; ")}.`);
   const sops = (p.delivery?.sops ?? []).filter(Boolean);
   if (sops.length) lines.push(`How they deliver, in their words: ${sops.map((s) => `"${s}"`).join(" ")}`);
-  const os8 = p.agencyOs;
-  if (os8?.method) lines.push(`Their method: ${os8.method}`);
-  if (os8?.voice) lines.push(`How they sound, and how you should sound for them: ${os8.voice}`);
-  if (os8?.ica?.who) lines.push(`Who they serve: ${os8.ica.who}`);
-  if (os8?.offer?.name || os8?.offer?.promise) lines.push(`Their core offer: ${[os8.offer?.name, os8.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
+  const os9 = p.agencyOs;
+  if (os9?.method) lines.push(`Their method: ${os9.method}`);
+  if (os9?.voice) lines.push(`How they sound, and how you should sound for them: ${os9.voice}`);
+  if (os9?.ica?.who) lines.push(`Who they serve: ${os9.ica.who}`);
+  if (os9?.offer?.name || os9?.offer?.promise) lines.push(`Their core offer: ${[os9.offer?.name, os9.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
   if (!lines.length) return void 0;
   lines.push("These are the agency's own details, not any client's. Client-by-client records are a tool call away, not in here.");
   const text2 = lines.join("\n");
@@ -60931,7 +61654,7 @@ dotenv2.config();
 setPkgVersion(pkg.version);
 {
   const configDirOverride = process.env.GHL_MCP_CONFIG_DIR?.trim();
-  if (configDirOverride && !path43.isAbsolute(configDirOverride)) {
+  if (configDirOverride && !path44.isAbsolute(configDirOverride)) {
     process.stderr.write(
       `[ghl-mcp] GHL_MCP_CONFIG_DIR must be an absolute path (got "${configDirOverride}"). Use e.g. /data/ghl-mcp in a container, with a volume mounted at /data.
 `
@@ -60944,20 +61667,20 @@ process.on("unhandledRejection", (reason3) => {
 `);
 });
 function hardenSecretFilePerms() {
-  const repoDir = path43.resolve(__dirname, "..");
+  const repoDir = path44.resolve(__dirname, "..");
   const candidates = [
-    { file: path43.join(repoDir, "start-mcp.sh"), mode: 448 },
+    { file: path44.join(repoDir, "start-mcp.sh"), mode: 448 },
     // Legacy registry location (pre-migration); new location lives in app-data.
-    { file: path43.join(repoDir, ".ghl-tokens.json"), mode: 384 },
+    { file: path44.join(repoDir, ".ghl-tokens.json"), mode: 384 },
     { file: tokenRegistryPath(), mode: 384 }
   ];
   for (const { file: file2, mode } of candidates) {
     let current;
     try {
-      if (!fs45.existsSync(file2)) continue;
-      current = fs45.statSync(file2).mode & 511;
+      if (!fs46.existsSync(file2)) continue;
+      current = fs46.statSync(file2).mode & 511;
       if (current !== mode) {
-        fs45.chmodSync(file2, mode);
+        fs46.chmodSync(file2, mode);
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);