@elitedcs/ghl-mcp 3.88.2 → 3.88.4

package/dist/index.js

@@ -446,13 +446,13 @@ function setProtectedAccount(locationId2, name, file2 = accountRulesPath()) {
 function isWriteMethod(method) {
   return WRITE_METHODS.has(method.toUpperCase());
 }
-function locationIdsInRequest(path44, opts = {}) {
+function locationIdsInRequest(path45, opts = {}) {
   const found = /* @__PURE__ */ new Set();
   const add2 = (v) => {
     if (typeof v === "string" && v.trim()) found.add(v.trim());
     else if (Array.isArray(v)) v.forEach(add2);
   };
-  const seg = /\/locations\/([^/?#]+)/i.exec(path44);
+  const seg = /\/locations\/([^/?#]+)/i.exec(path45);
   if (seg) add2(decodeURIComponent(seg[1]));
   for (const src of [opts.params, opts.body]) {
     if (!src || typeof src !== "object") continue;
@@ -479,7 +479,7 @@ function protectedRefusalFor(locationId2, rulesFile) {
   const name = rules.protected[id];
   return name ? protectedRefusalMessage(name, false) : null;
 }
-function assertWriteAllowed(method, path44, opts = {}) {
+function assertWriteAllowed(method, path45, opts = {}) {
   if (!isWriteMethod(method)) return;
   let rules;
   try {
@@ -488,7 +488,7 @@ function assertWriteAllowed(method, path44, opts = {}) {
     throw new Error(UNREADABLE_RULES_MSG);
   }
   if (Object.keys(rules.protected).length === 0) return;
-  for (const id of locationIdsInRequest(path44, opts)) {
+  for (const id of locationIdsInRequest(path45, opts)) {
     const name = rules.protected[id];
     if (name) throw new Error(protectedRefusalMessage(name, false));
   }
@@ -646,8 +646,8 @@ var init_ghl_client = __esm({
           Version: version || GHL_API_VERSION
         };
       }
-      buildUrl(path44, params) {
-        const url = new URL(path44, GHL_BASE_URL);
+      buildUrl(path45, params) {
+        const url = new URL(path45, GHL_BASE_URL);
         if (params) {
           for (const [key, value] of Object.entries(params)) {
             if (value !== void 0 && value !== null) {
@@ -657,19 +657,19 @@ var init_ghl_client = __esm({
         }
         return url.toString();
       }
-      async request(method, path44, options = {}, attempt = 0) {
+      async request(method, path45, options = {}, attempt = 0) {
         this.signal?.throwIfAborted();
         if (inBuildRequestScope() && method === "GET" && !inAccountReadAttempt()) {
-          return retryAccountRead(() => this.request(method, path44, options, attempt), `${method} ${path44}`);
+          return retryAccountRead(() => this.request(method, path45, options, attempt), `${method} ${path45}`);
         }
         if (attempt === 0) {
-          assertWriteAllowed(method, path44, {
+          assertWriteAllowed(method, path45, {
             params: options.params,
             body: options.body,
             defaultLocationId: this.defaultLocationId
           });
         }
-        const url = this.buildUrl(path44, options.params);
+        const url = this.buildUrl(path45, options.params);
         const headers = this.buildHeaders(options.version);
         const fetchOptions = {
           method,
@@ -690,14 +690,14 @@ var init_ghl_client = __esm({
             clearTimeout(timeout);
             this.signal?.throwIfAborted();
             if (error instanceof Error && error.name === "AbortError") {
-              throw requestError(new Error(`Request timeout (30s): ${method} ${path44}`));
+              throw requestError(new Error(`Request timeout (30s): ${method} ${path45}`));
             }
             if (!inBuildRequestScope() && !options.noRetry && attempt < MAX_RETRIES) {
               const delay5 = computeRetryDelay(null, attempt, BASE_DELAY_MS);
-              process.stderr.write(`[ghl-mcp] Network error on ${method} ${path44}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+              process.stderr.write(`[ghl-mcp] Network error on ${method} ${path45}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
               await new Promise((r) => setTimeout(r, delay5));
-              return this.request(method, path44, options, attempt + 1);
+              return this.request(method, path45, options, attempt + 1);
             }
             throw requestError(error);
           } finally {
@@ -705,10 +705,10 @@ var init_ghl_client = __esm({
           }
           if (!inBuildRequestScope() && !options.noRetry && (response.status === 429 || response.status >= 500) && attempt < MAX_RETRIES) {
             const delay5 = computeRetryDelay(response.headers.get("Retry-After"), attempt, BASE_DELAY_MS);
-            process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path44}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
+            process.stderr.write(`[ghl-mcp] ${response.status} on ${method} ${path45}, retry ${attempt + 1}/${MAX_RETRIES} in ${delay5}ms
 `);
             await new Promise((r) => setTimeout(r, delay5));
-            return this.request(method, path44, options, attempt + 1);
+            return this.request(method, path45, options, attempt + 1);
           }
           if (!response.ok) {
             let errorBody = "";
@@ -717,7 +717,7 @@ var init_ghl_client = __esm({
             } catch {
             }
             throw requestError(new Error(
-              `GHL API Error ${response.status} ${response.statusText}: ${method} ${path44}
+              `GHL API Error ${response.status} ${response.statusText}: ${method} ${path45}
 ${errorBody}`
             ));
           }
@@ -738,20 +738,20 @@ ${errorBody}`
           combined?.dispose();
         }
       }
-      async get(path44, options) {
-        return this.request("GET", path44, options);
+      async get(path45, options) {
+        return this.request("GET", path45, options);
       }
-      async post(path44, options) {
-        return this.request("POST", path44, options);
+      async post(path45, options) {
+        return this.request("POST", path45, options);
       }
-      async put(path44, options) {
-        return this.request("PUT", path44, options);
+      async put(path45, options) {
+        return this.request("PUT", path45, options);
       }
-      async patch(path44, options) {
-        return this.request("PATCH", path44, options);
+      async patch(path45, options) {
+        return this.request("PATCH", path45, options);
       }
-      async delete(path44, options) {
-        return this.request("DELETE", path44, options);
+      async delete(path45, options) {
+        return this.request("DELETE", path45, options);
       }
       /**
        * Helper: resolves locationId from args or falls back to default
@@ -3470,8 +3470,8 @@ function textResponse(text2) {
     content: [{ type: "text", text: text2 }]
   };
 }
-function escapeRegex(str8) {
-  return str8.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str9) {
+  return str9.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -7109,11 +7109,11 @@ function registerEmailTools(server2, client) {
 function registerEmailBuilderInternalTools(server2, builderClient, publicClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function builderRequest2(method, path44, body) {
-    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path44}`, body ? { body } : {});
+  async function builderRequest2(method, path45, body) {
+    const response = await builderRequest(client, method, `${EMAIL_BUILDER_BASE}${path45}`, body ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path44}
+      throw new Error(`Email Builder API Error ${response.status}: ${method} /emails/builder${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -9273,27 +9273,27 @@ function actionNameProblem(name) {
 function voiceActionBodyProblem(type, p) {
   const gap = undefinedPath2(p);
   if (gap) return `${gap} is undefined. JSON would drop that key silently and GoHighLevel would see a different body than you wrote \u2014 leave the key out or give it a value.`;
-  const str8 = (k) => typeof p[k] === "string" && p[k].trim().length > 0;
+  const str9 = (k) => typeof p[k] === "string" && p[k].trim().length > 0;
   const num3 = (k) => typeof p[k] === "number" && Number.isFinite(p[k]);
-  const needTrigger = () => !str8("triggerPrompt") ? `${type} needs triggerPrompt: when, in plain words, the agent should do this ("When the caller asks for a person").` : !str8("triggerMessage") ? `${type} needs triggerMessage: what the agent says as it does it ("Let me get someone for you").` : null;
+  const needTrigger = () => !str9("triggerPrompt") ? `${type} needs triggerPrompt: when, in plain words, the agent should do this ("When the caller asks for a person").` : !str9("triggerMessage") ? `${type} needs triggerMessage: what the agent says as it does it ("Let me get someone for you").` : null;
   switch (type) {
     case "CALL_TRANSFER": {
       const t = needTrigger();
       if (t) return t;
       if (p.transferToType !== "number") return 'CALL_TRANSFER needs transferToType: "number" (the only type GoHighLevel supports today).';
-      if (!str8("transferToValue") || !TRANSFER_NUMBER.test(p.transferToValue)) return "CALL_TRANSFER needs transferToValue as a full number with country code and no punctuation, e.g. +16025550100 (GoHighLevel refuses anything else with a 422).";
+      if (!str9("transferToValue") || !TRANSFER_NUMBER.test(p.transferToValue)) return "CALL_TRANSFER needs transferToValue as a full number with country code and no punctuation, e.g. +16025550100 (GoHighLevel refuses anything else with a 422).";
       return null;
     }
     case "SMS": {
       const t = needTrigger();
       if (t) return t;
-      if (!str8("messageBody")) return "SMS needs messageBody: the text the caller receives.";
+      if (!str9("messageBody")) return "SMS needs messageBody: the text the caller receives.";
       return null;
     }
     case "DATA_EXTRACTION":
     case "IN_CALL_DATA_EXTRACTION": {
-      if (!str8("contactFieldId")) return `${type} needs contactFieldId: the id of the contact field to fill (get_custom_fields). GoHighLevel refuses an unknown id with a 400 naming it.`;
-      if (!str8("description")) return `${type} needs description: what to listen for, in plain words.`;
+      if (!str9("contactFieldId")) return `${type} needs contactFieldId: the id of the contact field to fill (get_custom_fields). GoHighLevel refuses an unknown id with a 400 naming it.`;
+      if (!str9("description")) return `${type} needs description: what to listen for, in plain words.`;
       const ex = p.examples;
       if (!Array.isArray(ex) || ex.length < 1 || ex.length > 5 || ex.some((x) => typeof x !== "string" || !x.trim())) return `${type} needs examples: 1 to 5 example values (GoHighLevel refuses an empty list with a 422).`;
       return null;
@@ -9301,19 +9301,19 @@ function voiceActionBodyProblem(type, p) {
     case "WORKFLOW_TRIGGER": {
       const t = needTrigger();
       if (t) return t;
-      if (!str8("workflowId")) return "WORKFLOW_TRIGGER needs workflowId. It must be PUBLISHED \u2014 GoHighLevel refuses a draft or unknown id with a 400.";
+      if (!str9("workflowId")) return "WORKFLOW_TRIGGER needs workflowId. It must be PUBLISHED \u2014 GoHighLevel refuses a draft or unknown id with a 400.";
       return null;
     }
     case "APPOINTMENT_BOOKING": {
-      if (!str8("calendarId")) return "APPOINTMENT_BOOKING needs calendarId (get_calendars). GoHighLevel refuses an unknown id with a 400 naming it.";
+      if (!str9("calendarId")) return "APPOINTMENT_BOOKING needs calendarId (get_calendars). GoHighLevel refuses an unknown id with a 400 naming it.";
       for (const k of ["daysOfOfferingDates", "slotsPerDay", "hoursBetweenSlots"]) {
         if (!num3(k) || p[k] < 1) return `APPOINTMENT_BOOKING needs ${k} as a positive number (how many days ahead to offer, how many slots a day, hours between slots).`;
       }
       return null;
     }
     case "KNOWLEDGE_BASE": {
-      if (!str8("triggerPrompt")) return 'KNOWLEDGE_BASE needs triggerPrompt: when the agent should look something up ("When the caller asks about services, hours or pricing").';
-      if (!str8("knowledgeBaseId")) return "KNOWLEDGE_BASE needs knowledgeBaseId from THIS sub-account (list_knowledge_bases). GoHighLevel refuses an unknown id with a 400.";
+      if (!str9("triggerPrompt")) return 'KNOWLEDGE_BASE needs triggerPrompt: when the agent should look something up ("When the caller asks about services, hours or pricing").';
+      if (!str9("knowledgeBaseId")) return "KNOWLEDGE_BASE needs knowledgeBaseId from THIS sub-account (list_knowledge_bases). GoHighLevel refuses an unknown id with a 400.";
       return null;
     }
     case "CUSTOM_ACTION": {
@@ -10913,9 +10913,440 @@ var init_workflow_builder = __esm({
   }
 });
 
+// src/command-os/prospect/net-guard.ts
+function ipv6Bytes(raw) {
+  let s = raw.toLowerCase().replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const tail = [];
+  const v4 = s.match(/:(\d{1,3}(?:\.\d{1,3}){3})$/);
+  if (v4) {
+    const parts = v4[1].split(".").map(Number);
+    if (parts.some((n) => n > 255)) return void 0;
+    tail.push(...parts);
+    s = s.slice(0, s.length - v4[1].length) + "0:0";
+  }
+  const halves = s.split("::");
+  if (halves.length > 2) return void 0;
+  const groups = (h) => h === "" ? [] : h.split(":");
+  const head4 = groups(halves[0]);
+  const rest = halves.length === 2 ? groups(halves[1]) : [];
+  const fill = halves.length === 2 ? 8 - head4.length - rest.length : 0;
+  if (fill < 0 || halves.length === 1 && head4.length !== 8) return void 0;
+  const all = [...head4, ...Array(fill).fill("0"), ...rest];
+  if (all.length !== 8 || all.some((g) => !/^[0-9a-f]{1,4}$/.test(g))) return void 0;
+  const bytes = all.flatMap((g) => {
+    const n = parseInt(g, 16);
+    return [n >> 8, n & 255];
+  });
+  if (tail.length) bytes.splice(12, 4, ...tail);
+  return bytes;
+}
+function privateV4(b) {
+  const [a, c, d] = b;
+  return a === 0 || a === 10 || a === 100 && c >= 64 && c <= 127 || a === 127 || a === 169 && c === 254 || a === 172 && c >= 16 && c <= 31 || a === 192 && c === 0 && d === 0 || a === 192 && c === 0 && d === 2 || a === 192 && c === 88 && d === 99 || a === 192 && c === 168 || a === 198 && (c === 18 || c === 19) || a === 198 && c === 51 && d === 100 || a === 203 && c === 0 && d === 113 || a >= 224;
+}
+function isPrivateAddress(ip) {
+  const bare = ip.replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const v = import_node_net.default.isIP(bare);
+  if (v === 4) return privateV4(bare.split(".").map(Number));
+  if (v !== 6) return true;
+  const b = ipv6Bytes(bare);
+  if (!b) return true;
+  const zeroTo = (n) => b.slice(0, n).every((x) => x === 0);
+  if (zeroTo(16)) return true;
+  if (zeroTo(15) && b[15] === 1) return true;
+  if (zeroTo(10) && b[10] === 255 && b[11] === 255) return privateV4(b.slice(12));
+  if (zeroTo(12)) return true;
+  if (zeroTo(8) && b[8] === 255 && b[9] === 255 && b[10] === 0 && b[11] === 0) return true;
+  if (b[0] === 32 && b[1] === 2) return privateV4(b.slice(2, 6));
+  if ((b[0] & 224) !== 32) return true;
+  if (b[0] === 32 && b[1] === 1 && (b[2] & 254) === 0) return true;
+  if (b[0] === 32 && b[1] === 1 && b[2] === 13 && b[3] === 184) return true;
+  if (b[0] === 63 && b[1] === 255 && (b[2] & 240) === 0) return true;
+  return false;
+}
+function withDeadline(p, ms, why, signal) {
+  return new Promise((resolve13, reject) => {
+    if (signal?.aborted) {
+      p.catch(() => void 0);
+      reject(new Error("aborted"));
+      return;
+    }
+    const t = setTimeout(() => reject(new Error(why)), ms);
+    const onAbort = () => {
+      clearTimeout(t);
+      reject(new Error("aborted"));
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+    p.then((v) => {
+      clearTimeout(t);
+      signal?.removeEventListener("abort", onAbort);
+      resolve13(v);
+    }, (e) => {
+      clearTimeout(t);
+      signal?.removeEventListener("abort", onAbort);
+      reject(e);
+    });
+  });
+}
+async function publicAddressProblem(raw, lookup = import_node_dns.default.promises.lookup) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return "not a web address";
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") return `only web addresses are opened (this one is ${u.protocol})`;
+  if (u.username || u.password) return "an address carrying a login is not opened";
+  const host = u.hostname.replace(/^\[|\]$/g, "");
+  if (LOCAL_NAME.test(host)) return "a local or private address is never opened";
+  if (import_node_net.default.isIP(host)) return isPrivateAddress(host) ? "a local or private address is never opened" : void 0;
+  try {
+    const all = await withDeadline(lookup(host, { all: true, verbatim: true }), 8e3, "the address lookup took too long");
+    if (!all.length) return "the address does not resolve";
+    if (all.some((a) => isPrivateAddress(a.address))) return "the address resolves to a local or private network, so it is never opened";
+  } catch {
+    return "the address does not resolve";
+  }
+  return void 0;
+}
+function publicOnlyLookup(hostname2, options, callback) {
+  import_node_dns.default.lookup(hostname2, { ...options, all: true, verbatim: true }, (err, addresses) => {
+    if (err) return callback(err, "", 0);
+    const list3 = addresses;
+    const bad = list3.find((a) => isPrivateAddress(a.address));
+    if (!list3.length || bad) {
+      const e = new Error("the address resolves to a local or private network, so it is never opened");
+      e.code = "EPRIVATE";
+      return callback(e, "", 0);
+    }
+    if (options.all) return callback(null, list3);
+    return callback(null, list3[0].address, list3[0].family);
+  });
+}
+function transferBudget(totalBytes = 25e7) {
+  const opts = { keepAlive: true, maxSockets: 8, lookup: publicOnlyLookup };
+  return { bytesLeft: totalBytes, agents: { http: new import_node_http.default.Agent(opts), https: new import_node_https.default.Agent(opts) } };
+}
+function closeTransferBudget(b) {
+  b.agents.http.destroy();
+  b.agents.https.destroy();
+}
+function guardedTransfer(url, init) {
+  return new Promise((resolve13, reject) => {
+    let u;
+    try {
+      u = new URL(url);
+    } catch {
+      reject(new Error("not a web address"));
+      return;
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+      reject(new Error("only web addresses are opened"));
+      return;
+    }
+    if (u.username || u.password) {
+      reject(new Error("an address carrying a login is not opened"));
+      return;
+    }
+    if (refusedHost(u.hostname)) {
+      reject(new Error("a local or private address is never opened"));
+      return;
+    }
+    let settled = false;
+    let cleanup = () => void 0;
+    const settle2 = (f) => {
+      if (settled) return;
+      settled = true;
+      init.signal.removeEventListener("abort", onAbort);
+      cleanup();
+      f();
+    };
+    const onAbort = () => settle2(() => {
+      req.destroy();
+      reject(new Error("aborted"));
+    });
+    if (init.signal.aborted) {
+      reject(new Error("aborted"));
+      return;
+    }
+    init.signal.addEventListener("abort", onAbort, { once: true });
+    const isHttps = u.protocol === "https:";
+    const headers = {};
+    for (const [k, v] of Object.entries(init.headers)) if (!/^(?:host|connection|keep-alive|proxy-.*|transfer-encoding|upgrade|te|trailer|content-length|:.*)$/i.test(k)) headers[k] = v;
+    headers["accept-encoding"] = "gzip, deflate, br";
+    const req = (isHttps ? import_node_https.default : import_node_http.default).request(u, { method: init.method, headers, agent: isHttps ? init.budget.agents.https : init.budget.agents.http, lookup: publicOnlyLookup }, (res) => {
+      const out = [];
+      for (let i = 0; i < res.rawHeaders.length; i += 2) out.push([res.rawHeaders[i], res.rawHeaders[i + 1]]);
+      const enc = (res.headers["content-encoding"] ?? "").toString().toLowerCase();
+      const unzip = enc.includes("br") ? import_node_zlib.default.createBrotliDecompress() : enc.includes("gzip") ? import_node_zlib.default.createGunzip() : enc.includes("deflate") ? import_node_zlib.default.createInflate() : void 0;
+      const stream = unzip ? res.pipe(unzip) : res;
+      cleanup = () => {
+        unzip?.destroy();
+        res.destroy();
+      };
+      const kept = unzip ? out.filter(([k]) => !/^(?:content-encoding|content-length)$/i.test(k)) : out;
+      const chunks = [];
+      let size = 0;
+      const finish3 = (incomplete) => settle2(() => resolve13({ status: res.statusCode ?? 0, headers: kept, body: Buffer.concat(chunks), incomplete }));
+      stream.on("data", (c) => {
+        size += c.length;
+        init.budget.bytesLeft -= c.length;
+        if (size > init.maxBytes) finish3(`the file is larger than ${Math.round(init.maxBytes / 1e6)} MB, so it was not loaded`);
+        else if (init.budget.bytesLeft < 0) finish3("the run's limit on how much it downloads was reached");
+        else chunks.push(c);
+      });
+      stream.on("end", () => finish3(res.complete ? void 0 : "the file did not arrive whole"));
+      stream.on("error", () => finish3("the file did not arrive whole"));
+      res.on("aborted", () => finish3("the file did not arrive whole"));
+      res.on("error", () => finish3("the file did not arrive whole"));
+      res.on("close", () => {
+        if (!res.complete) finish3("the file did not arrive whole");
+        else if (!unzip) finish3();
+      });
+      if (unzip) unzip.on("close", () => finish3(res.complete ? void 0 : "the file did not arrive whole"));
+    });
+    req.setTimeout(3e4, () => req.destroy(new Error("no answer within 30 seconds")));
+    req.on("error", (e) => settle2(() => reject(e)));
+    req.end();
+  });
+}
+async function guardedFetchLike(url, init = {}) {
+  const budget = transferBudget(6e7);
+  try {
+    let cur = url;
+    const signal = init.signal ?? AbortSignal.timeout(2e4);
+    for (let hop = 0; hop <= 5; hop++) {
+      if (signal.aborted) throw new Error("aborted");
+      const problem = await withDeadline(publicAddressProblem(cur), 9e3, "the address lookup took too long", signal);
+      if (problem && problem !== "the address does not resolve") throw new Error(problem);
+      const r = await guardedTransfer(cur, { method: "GET", headers: init.headers ?? {}, signal, maxBytes: init.statusOnly ? 65536 : Math.min(init.maxBytes ?? 15e6, 6e7), budget });
+      const cutBySize = init.statusOnly && r.incomplete?.startsWith("the file is larger than");
+      if (r.incomplete && !cutBySize) throw new Error(r.incomplete);
+      const loc = r.headers.find(([k]) => k.toLowerCase() === "location")?.[1];
+      if (r.status >= 300 && r.status < 400 && loc && init.redirect !== "manual") {
+        cur = new URL(loc, cur).toString();
+        continue;
+      }
+      const body = r.body;
+      const get = (n) => r.headers.find(([k]) => k.toLowerCase() === n.toLowerCase())?.[1] ?? null;
+      return { ok: r.status >= 200 && r.status < 300, status: r.status, url: cur, text: async () => body.toString("utf8"), arrayBuffer: async () => body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength), headers: { get } };
+    }
+    throw new Error("more than 5 redirects");
+  } finally {
+    closeTransferBudget(budget);
+  }
+}
+async function guardedPost(url, body, headers, timeoutMs = 2e4) {
+  const started = Date.now();
+  const problem = await withDeadline(publicAddressProblem(url), timeoutMs, `no answer within ${Math.round(timeoutMs / 1e3)} seconds`);
+  if (problem && problem !== "the address does not resolve") throw new Error(problem);
+  const left = Math.max(1, timeoutMs - (Date.now() - started));
+  const u = new URL(url);
+  const mod = u.protocol === "https:" ? import_node_https.default : import_node_http.default;
+  return new Promise((resolve13, reject) => {
+    let settled = false;
+    const chunks = [];
+    let size = 0;
+    const settle2 = (f) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      f();
+    };
+    const req = mod.request(u, { method: "POST", headers: { ...headers, "content-length": String(Buffer.byteLength(body)) }, lookup: publicOnlyLookup }, (res) => {
+      const done = () => settle2(() => resolve13({ status: res.statusCode ?? 0, text: Buffer.concat(chunks).toString("utf8") }));
+      res.on("data", (c) => {
+        size += c.length;
+        if (size <= 1e6) chunks.push(c);
+        else {
+          res.destroy();
+          done();
+        }
+      });
+      res.on("end", done);
+      res.on("error", done);
+      res.on("close", done);
+    });
+    const timer = setTimeout(() => settle2(() => {
+      req.destroy();
+      reject(new Error(`no answer within ${Math.round(timeoutMs / 1e3)} seconds`));
+    }), left);
+    req.on("error", (e) => settle2(() => reject(e)));
+    req.end(body);
+  });
+}
+function refusedHost(host) {
+  const bare = host.replace(/^\[|\]$/g, "");
+  if (!bare || LOCAL_NAME.test(bare)) return true;
+  if (import_node_net.default.isIP(bare.replace(/%.*$/, ""))) return isPrivateAddress(bare);
+  return /^(?:0x[0-9a-f]*|\d+)(?:\.(?:0x[0-9a-f]*|\d+)){0,3}\.?$/i.test(bare) || bare.includes(":");
+}
+async function startGuardProxy(opts = {}) {
+  const max = opts.maxConnections ?? 8e3;
+  const maxOpen = opts.maxOpen ?? 256;
+  const idleMs = opts.idleMs ?? 3e4;
+  const username = "shopper";
+  const password = (0, import_node_crypto3.randomBytes)(18).toString("hex");
+  const expected = "Basic " + Buffer.from(`${username}:${password}`).toString("base64");
+  const stats = { connections: 0, refused: 0, open: 0 };
+  const sockets = /* @__PURE__ */ new Set();
+  const track = (s) => {
+    sockets.add(s);
+    s.once("close", () => sockets.delete(s));
+  };
+  const authorised = (h) => {
+    const got = Buffer.from(String(h ?? ""));
+    const want = Buffer.from(expected);
+    return got.length === want.length && (0, import_node_crypto3.timingSafeEqual)(got, want);
+  };
+  const server2 = import_node_http.default.createServer((req, res) => {
+    if (!authorised(req.headers["proxy-authorization"])) {
+      stats.refused++;
+      res.writeHead(407, { "proxy-authenticate": 'Basic realm="shopper"' }).end();
+      return;
+    }
+    let u;
+    try {
+      u = new URL(req.url ?? "");
+    } catch {
+      res.writeHead(400).end();
+      return;
+    }
+    if (u.protocol !== "http:" || !["GET", "HEAD"].includes(req.method ?? "") || req.headers.upgrade) {
+      stats.refused++;
+      res.writeHead(405).end();
+      return;
+    }
+    if (++stats.connections > max) {
+      stats.refused++;
+      res.writeHead(429).end();
+      return;
+    }
+    const port2 = Number(u.port || 80);
+    if (!WEB_PORTS.has(port2) || refusedHost(u.hostname)) {
+      stats.refused++;
+      res.writeHead(403).end();
+      return;
+    }
+    const headers = { ...req.headers };
+    delete headers["proxy-connection"];
+    delete headers["proxy-authorization"];
+    const out = import_node_http.default.request({ host: u.hostname.replace(/^\[|\]$/g, ""), port: port2, path: u.pathname + u.search, method: req.method, headers, lookup: publicOnlyLookup, timeout: idleMs }, (up) => {
+      res.writeHead(up.statusCode ?? 502, up.headers);
+      up.pipe(res);
+    });
+    out.on("socket", (s) => track(s));
+    out.on("error", () => {
+      stats.refused++;
+      if (!res.headersSent) res.writeHead(502);
+      res.end();
+    });
+    out.on("timeout", () => out.destroy());
+    out.end();
+  });
+  server2.on("connection", (s) => {
+    s.on("error", () => void 0);
+    if (sockets.size >= maxOpen) {
+      stats.refused++;
+      s.destroy();
+      return;
+    }
+    track(s);
+    stats.open = Math.max(stats.open, sockets.size);
+    s.setTimeout(idleMs, () => s.destroy());
+  });
+  server2.headersTimeout = Math.min(idleMs, 1e4);
+  server2.requestTimeout = idleMs;
+  server2.on("connect", (req, client, head4) => {
+    client.on("error", () => void 0);
+    if (!authorised(req.headers["proxy-authorization"])) {
+      stats.refused++;
+      client.end('HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm="shopper"\r\nContent-Length: 0\r\n\r\n');
+      return;
+    }
+    const [host, portStr] = (req.url ?? "").split(/:(?=\d+$)/);
+    const port2 = Number(portStr || 443);
+    if (++stats.connections > max || !WEB_PORTS.has(port2) || refusedHost(host ?? "")) {
+      stats.refused++;
+      client.end("HTTP/1.1 403 Forbidden\r\n\r\n");
+      return;
+    }
+    const up = import_node_net.default.connect({ host: (host ?? "").replace(/^\[|\]$/g, ""), port: port2, lookup: publicOnlyLookup, timeout: idleMs }, () => {
+      client.write("HTTP/1.1 200 Connection Established\r\n\r\n");
+      if (head4.length) up.write(head4);
+      up.pipe(client);
+      client.pipe(up);
+    });
+    track(up);
+    up.on("error", () => {
+      stats.refused++;
+      client.end("HTTP/1.1 502 Bad Gateway\r\n\r\n");
+    });
+    up.on("timeout", () => {
+      up.destroy();
+      client.destroy();
+    });
+    client.on("error", () => up.destroy());
+    client.on("close", () => up.destroy());
+  });
+  server2.on("clientError", (_e, s) => s.destroy());
+  await new Promise((resolve13, reject) => {
+    const fail = (e) => {
+      server2.removeListener("listening", ok);
+      reject(e);
+    };
+    const ok = () => {
+      server2.removeListener("error", fail);
+      resolve13();
+    };
+    server2.once("error", fail);
+    server2.once("listening", ok);
+    try {
+      server2.listen(0, "127.0.0.1");
+    } catch (e) {
+      server2.removeListener("error", fail);
+      server2.removeListener("listening", ok);
+      reject(e);
+    }
+  });
+  server2.on("error", () => void 0);
+  const port = server2.address().port;
+  return {
+    url: `http://127.0.0.1:${port}`,
+    username,
+    password,
+    stats,
+    // Every socket is destroyed and the close never waits more than two seconds.
+    close: () => new Promise((r) => {
+      const t = setTimeout(r, 2e3);
+      server2.close(() => {
+        clearTimeout(t);
+        r();
+      });
+      for (const s of sockets) s.destroy();
+      server2.closeAllConnections?.();
+    })
+  };
+}
+var import_node_dns, import_node_http, import_node_https, import_node_net, import_node_zlib, import_node_crypto3, LOCAL_NAME, WEB_PORTS;
+var init_net_guard = __esm({
+  "src/command-os/prospect/net-guard.ts"() {
+    "use strict";
+    import_node_dns = __toESM(require("node:dns"));
+    import_node_http = __toESM(require("node:http"));
+    import_node_https = __toESM(require("node:https"));
+    import_node_net = __toESM(require("node:net"));
+    import_node_zlib = __toESM(require("node:zlib"));
+    import_node_crypto3 = require("node:crypto");
+    LOCAL_NAME = /^(?:localhost|localhost\.localdomain|ip6-localhost|ip6-loopback)\.?$|\.(?:localhost|local|internal|lan|home|corp|intranet|localdomain|home\.arpa)\.?$/i;
+    WEB_PORTS = /* @__PURE__ */ new Set([80, 443, 8080, 8443]);
+  }
+});
+
 // src/page-reads.ts
 var page_reads_exports = {};
 __export(page_reads_exports, {
+  pageReadsNet: () => pageReadsNet,
   readPageContent: () => readPageContent,
   readPageFull: () => readPageFull
 });
@@ -10923,11 +11354,11 @@ async function readPageFull(client, pageId, fetcher = fetch) {
   const headers = await client.buildHeaders();
   headers.Origin = "https://app.gohighlevel.com";
   headers.Referer = "https://app.gohighlevel.com/";
-  const path44 = `/page/${pageId}?locationId=${client.locationId}`;
-  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path44}`, { method: "GET", headers });
+  const path45 = `/page/${pageId}?locationId=${client.locationId}`;
+  const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path45}`, { method: "GET", headers });
   if (!response.ok) {
     const text3 = await response.text();
-    throw new Error(`Funnel API Error ${response.status}: GET ${path44}
+    throw new Error(`Funnel API Error ${response.status}: GET ${path45}
 ${text3}`);
   }
   const text2 = await response.text();
@@ -10938,20 +11369,24 @@ ${text3}`);
     return JSON.parse(text2.replace(/[\x00-\x1F\x7F]/g, ""));
   }
 }
-async function readPageContent(pageDataDownloadUrl, fetcher = fetch) {
+async function readPageContent(pageDataDownloadUrl, fetcher = (url) => pageReadsNet.read(url)) {
   const parsedUrl = new URL(pageDataDownloadUrl);
   const allowedHosts = ["firebasestorage.googleapis.com", "storage.googleapis.com", "backend.leadconnectorhq.com"];
-  if (!allowedHosts.some((h) => parsedUrl.hostname === h || parsedUrl.hostname.endsWith("." + h))) {
-    throw new Error("URL must be from GHL storage (firebasestorage.googleapis.com). Got: " + parsedUrl.hostname);
+  if (parsedUrl.protocol !== "https:" || !allowedHosts.some((h) => parsedUrl.hostname === h || parsedUrl.hostname.endsWith("." + h))) {
+    throw new Error("URL must be an https address from GHL storage (firebasestorage.googleapis.com). Got: " + parsedUrl.protocol + "//" + parsedUrl.hostname);
   }
   const response = await fetcher(pageDataDownloadUrl);
   if (!response.ok) throw new Error(`Failed to download page data: ${response.status}`);
-  const data = await response.json();
-  return data;
+  return JSON.parse(await response.text());
 }
+var pageReadsNet;
 var init_page_reads = __esm({
   "src/page-reads.ts"() {
     "use strict";
+    init_net_guard();
+    pageReadsNet = {
+      read: (url) => guardedFetchLike(url, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 })
+    };
   }
 });
 
@@ -10986,20 +11421,20 @@ function registerFunnelBuilderTools(server2, builderClient) {
     return;
   }
   const client = builderClient;
-  async function internalGet(path44) {
-    return client.request("GET", path44);
+  async function internalGet(path45) {
+    return client.request("GET", path45);
   }
-  async function internalPost(path44, body) {
-    return client.request("POST", path44, body);
+  async function internalPost(path45, body) {
+    return client.request("POST", path45, body);
   }
-  async function internalPut(path44, body) {
-    return client.request("PUT", path44, body);
+  async function internalPut(path45, body) {
+    return client.request("PUT", path45, body);
   }
-  async function internalDelete(path44) {
-    return client.request("DELETE", path44);
+  async function internalDelete(path45) {
+    return client.request("DELETE", path45);
   }
-  async function funnelRequest(method, path44, body) {
-    const url = `https://backend.leadconnectorhq.com/funnels${path44}`;
+  async function funnelRequest(method, path45, body) {
+    const url = `https://backend.leadconnectorhq.com/funnels${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, {
       ...sendsBody ? { body } : {},
@@ -11012,7 +11447,7 @@ function registerFunnelBuilderTools(server2, builderClient) {
     });
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Funnel API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Funnel API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -11603,17 +12038,17 @@ function requireCompany(api) {
   }
   return company;
 }
-async function call(api, path44, init) {
+async function call(api, path45, init) {
   const headers = { ...await api.headers(), Origin: "https://app.gohighlevel.com", Referer: "https://app.gohighlevel.com/" };
-  if (MUTATING_PATHS.some((mutating) => path44.startsWith(mutating))) {
-    assertWriteAllowed("POST", SVC + path44, { defaultLocationId: api.locationId() });
+  if (MUTATING_PATHS.some((mutating) => path45.startsWith(mutating))) {
+    assertWriteAllowed("POST", SVC + path45, { defaultLocationId: api.locationId() });
   }
   const doFetch = api.fetch ?? fetch;
-  const response = await doFetch(SVC + path44, { ...init, headers });
+  const response = await doFetch(SVC + path45, { ...init, headers });
   const text2 = await response.text();
   if (!response.ok) {
     const hint = response.status === 401 && /not authorized to access this company/i.test(text2) ? " \u2014 the Firebase session is authenticated as a DIFFERENT company than the one that owns this sub-account. Run switch_location for this sub-account and try again." : response.status === 401 ? " \u2014 the template library needs the workflow-builder Firebase session, not the API key alone. Run enable_workflow_builder for this sub-account." : "";
-    throw new Error(`GoHighLevel template library ${response.status} on ${path44}${hint}
+    throw new Error(`GoHighLevel template library ${response.status} on ${path45}${hint}
 ${text2.slice(0, 300)}`);
   }
   return text2 ? JSON.parse(text2) : {};
@@ -11792,7 +12227,7 @@ async function confirmPreviewUrl(pageId, timeoutMs = 2e4) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    const response = await fetch(url, { redirect: "follow", signal: controller.signal, headers: { Accept: "text/html,*/*" } });
+    const response = await guardedFetchLike(url, { signal: controller.signal, headers: { Accept: "text/html,*/*" } });
     const body = await response.text();
     const bytes = body.length;
     const reachable = response.ok && bytes > 0;
@@ -11896,6 +12331,7 @@ var init_ghl_page = __esm({
   "src/command-os/design/ghl-page.ts"() {
     "use strict";
     init_theme();
+    init_net_guard();
     GHL_PREVIEW_HOST = "https://sites.leadconnectorhq.com";
     SLOT_LABEL = {
       primary: { id: "E1", label: "brand colour" },
@@ -11970,12 +12406,12 @@ function normaliseColour(value) {
 function renderedPalette(envelope) {
   const defs = pageVariables(envelope);
   const paints = [];
-  const walk = (node, path44, prop) => {
-    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path44}[${i}]`, prop));
+  const walk = (node, path45, prop) => {
+    if (Array.isArray(node)) return void node.forEach((x, i) => walk(x, `${path45}[${i}]`, prop));
     if (isRecord8(node)) {
       for (const [k, x] of Object.entries(node)) {
         if (DEFINITION_KEYS.has(k) || k.startsWith("--")) continue;
-        walk(x, `${path44}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
+        walk(x, `${path45}.${k}`, WRAPPER_KEYS.has(k) ? prop : k);
       }
       return;
     }
@@ -11985,7 +12421,7 @@ function renderedPalette(envelope) {
     const resolved2 = resolveValue(raw, defs);
     const colour = normaliseColour(resolved2);
     if (colour === null && resolved2 !== null) return;
-    paints.push({ path: path44, prop, kind: kindOf(prop), colour });
+    paints.push({ path: path45, prop, kind: kindOf(prop), colour });
   };
   walk(envelope, "", "");
   const face = (name, settingsKey) => {
@@ -12080,7 +12516,7 @@ var init_rendered_palette = __esm({
     VISIBLE_CHANGE = 0.05;
     BARELY_SHARE = 0.5;
     CARRIES_COLOUR = 0.02;
-    paintGroup = (path44) => /^\.(sections|popups)\[\d+\]/.exec(path44)?.[0]?.slice(1) ?? "page";
+    paintGroup = (path45) => /^\.(sections|popups)\[\d+\]/.exec(path45)?.[0]?.slice(1) ?? "page";
     looksDifferent = (a, b) => {
       if (a === b) return false;
       if (a === "transparent" || b === "transparent" || a.startsWith("rgba") || b.startsWith("rgba")) return a !== b;
@@ -15348,7 +15784,7 @@ function colorsIn(src) {
   return [...hex, ...rgb, ...hsl];
 }
 async function extractStatic(url, opts = {}) {
-  const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+  const fetchImpl = opts.fetchImpl ?? guardedFetchLike;
   const warnings = [];
   const page = await fetchText(url, fetchImpl);
   if (!page.ok || !page.text) throw new Error(`Could not fetch ${url} (status ${page.status}). Nothing was extracted.`);
@@ -15777,6 +16213,7 @@ var init_extract = __esm({
     init_schema();
     init_store();
     init_svg_sanitize();
+    init_net_guard();
     UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36 GHLCommand-DesignStudio/0.1";
     rank2 = (arr) => {
       const m = /* @__PURE__ */ new Map();
@@ -16655,9 +17092,9 @@ function removalHoldBack(opts) {
   if (opts.multiPageStepNames.length > 0) return `${opts.multiPageStepNames.length} step(s) carry more than one page (${opts.multiPageStepNames.join(", ")}) and only the first of each was rebuilt`;
   return null;
 }
-function brandedPath(path44, name, taken) {
+function brandedPath(path45, name, taken) {
   const normalize2 = (s) => s.replace(/^\/+|\/+$/g, "").toLowerCase();
-  const base = normalize2(path44 ?? "") || name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "page";
+  const base = normalize2(path45 ?? "") || name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "page";
   const used = new Set([...taken].map(normalize2));
   let candidate = `${base}-branded`;
   for (let n = 2; used.has(candidate); n++) candidate = `${base}-branded-${n}`;
@@ -16685,9 +17122,9 @@ function rewriteTemplateLinks(envelope, destinations) {
         representation = "page";
         matches = destinations.filter((d2) => d2.pageId === preview[2]);
       } else if (!/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i.test(from) && !from.startsWith("#")) {
-        const [path44] = from.split(/[?#]/);
-        suffix = from.slice(path44.length);
-        matches = destinations.filter((d2) => d2.path && normalize2(d2.path) === normalize2(path44));
+        const [path45] = from.split(/[?#]/);
+        suffix = from.slice(path45.length);
+        matches = destinations.filter((d2) => d2.path && normalize2(d2.path) === normalize2(path45));
       }
     }
     if (matches.length !== 1) {
@@ -16770,8 +17207,8 @@ function registerPageStudioTools(server2, builderClient) {
     }
     return { map: out, truncated };
   }
-  async function funnelRequest(method, path44, body) {
-    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path44}`, {
+  async function funnelRequest(method, path45, body) {
+    const response = await builderRequest(client, method, `https://backend.leadconnectorhq.com/funnels${path45}`, {
       ...body ? { body } : {},
       headers: {
         // Internal-API calls require the app origin (autosave needs the
@@ -16780,7 +17217,7 @@ function registerPageStudioTools(server2, builderClient) {
         Referer: "https://app.gohighlevel.com/"
       }
     });
-    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path44}
+    if (!response.ok) throw new Error(`Funnel API Error ${response.status}: ${method} ${path45}
 ${await response.text()}`);
     const text2 = await response.text();
     return text2 ? JSON.parse(text2) : {};
@@ -17018,9 +17455,9 @@ ${await response.text()}`);
           if (!step.pageId) throw new Error("this step has no page to rebuild");
           const meta = await funnelRequest("GET", `/page/${step.pageId}?locationId=${client.locationId}`);
           if (typeof meta.pageDataDownloadUrl !== "string" || !meta.pageDataDownloadUrl) throw new Error("GoHighLevel has no saved content for this page yet");
-          const response = await fetch(meta.pageDataDownloadUrl);
+          const response = await pageStudioNet.read(meta.pageDataDownloadUrl, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
           if (!response.ok) throw new Error(`page content read failed (${response.status})`);
-          loaded.push({ ...step, envelope: await response.json() });
+          loaded.push({ ...step, envelope: JSON.parse(await response.text()) });
         } catch (e) {
           throw new Error(`${step.name}: ${e instanceof Error ? e.message : String(e)}`);
         }
@@ -17029,7 +17466,8 @@ ${await response.text()}`);
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), 3e4);
         try {
-          return await fetch(url, { signal: controller.signal, headers: { "Cache-Control": "no-cache" } });
+          const r = await pageStudioNet.read(url, { signal: controller.signal, headers: { "Cache-Control": "no-cache" }, maxBytes: 5e7 });
+          return { ok: r.ok, status: r.status, text: () => r.text(), json: async () => JSON.parse(await r.text()) };
         } finally {
           clearTimeout(timer);
         }
@@ -17126,9 +17564,9 @@ ${await response.text()}`);
             await new Promise((r) => setTimeout(r, 1200));
           }
           if (typeof after.pageDataDownloadUrl !== "string" || !after.pageDataDownloadUrl) throw new Error("the fresh page saved but GoHighLevel is not serving it");
-          const response = await fetch(after.pageDataDownloadUrl);
+          const response = await pageStudioNet.read(after.pageDataDownloadUrl, { signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
           if (!response.ok) throw new Error(`saved content read failed (${response.status})`);
-          const saved = await response.json();
+          const saved = JSON.parse(await response.text());
           storedByPage.set(step.newPageId, saved);
           const savedText = JSON.stringify(saved).toLowerCase();
           if (formId && forms.length) {
@@ -17545,7 +17983,7 @@ ${await response.text()}`);
     }
   );
 }
-var import_zod43, crypto4, valueCardSchema;
+var import_zod43, crypto4, pageStudioNet, valueCardSchema;
 var init_page_studio = __esm({
   "src/tools/page-studio.ts"() {
     "use strict";
@@ -17562,6 +18000,8 @@ var init_page_studio = __esm({
     init_tool_helpers();
     init_compose();
     init_website();
+    init_net_guard();
+    pageStudioNet = { read: guardedFetchLike };
     valueCardSchema = import_zod43.z.object({
       title: import_zod43.z.string().describe("Card title (short, uppercase reads best)."),
       bodyHtml: import_zod43.z.string().describe("Card body as HTML (<p>\u2026</p>). May use {{location.*}} merge fields."),
@@ -17649,13 +18089,13 @@ function cleanFormDataForSave(formData) {
   const cleaned = dropRedundantCaseCollidingKeys(formData);
   return isJsonObject(cleaned) ? cleaned : formData;
 }
-async function formApiRequest(client, method, path44, body) {
-  const url = `https://backend.leadconnectorhq.com/forms${path44}`;
+async function formApiRequest(client, method, path45, body) {
+  const url = `https://backend.leadconnectorhq.com/forms${path45}`;
   const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
   const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
   if (!response.ok) {
     const text3 = await response.text();
-    throw new Error(`Form API Error ${response.status}: ${method} ${path44}
+    throw new Error(`Form API Error ${response.status}: ${method} ${path45}
 ${text3}`);
   }
   const text2 = await response.text();
@@ -17697,7 +18137,7 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     );
     return;
   }
-  const formRequest = (method, path44, body) => formApiRequest(client, method, path44, body);
+  const formRequest = (method, path45, body) => formApiRequest(client, method, path45, body);
   server2.tool(
     "get_form_full",
     "Get a form with full builder data: all fields (labels, types, IDs, validation), conditional logic, auto-responder config, email notification settings, styling, and version history. This is the internal API \u2014 it returns what the form builder UI shows, with one exception: where GoHighLevel stores the same value under two spellings of one key that differ only in case (it writes custom fields with both `Id` and `id`), only the lowercase one is returned. No value is lost, and the result can be edited and passed straight back to update_form.",
@@ -17831,10 +18271,10 @@ function registerFormBuilderTools(server2, builderClient, publicClient) {
     },
     async ({ formId, limit, skip }) => {
       try {
-        let path44 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
-        if (formId) path44 += `&formId=${formId}`;
-        if (skip) path44 += `&skip=${skip}`;
-        const result = await formRequest("GET", path44);
+        let path45 = `/submissions?locationId=${client.locationId}&limit=${limit ?? 20}`;
+        if (formId) path45 += `&formId=${formId}`;
+        if (skip) path45 += `&skip=${skip}`;
+        const result = await formRequest("GET", path45);
         return {
           content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
         };
@@ -17854,6 +18294,51 @@ var init_form_builder = __esm({
   }
 });
 
+// src/test-contacts.ts
+function carrierOf(raw) {
+  const c = asObj(raw);
+  const id = str(c.id) ?? str(c._id);
+  if (!id) return void 0;
+  const name = str(c.contactName) ?? [str(c.firstName), str(c.lastName)].filter(Boolean).join(" ");
+  return { id, name: name ?? "", phone: str(c.phone) ?? "", email: (str(c.email) ?? "").toLowerCase(), created: str(c.dateAdded) ?? "" };
+}
+function carrierText(contacts, partial, former = []) {
+  const head4 = partial ? `${CARRIER_PARTIAL} ` : "";
+  const was = former.map((f) => ` ${f.id}: carried the test address during the run; now shows ${f.now || "no email"}.`).join("");
+  if (!contacts.length) return `${head4}No contact carrying this run's test address was found.${was}`;
+  const one = (c) => `${c.id} (name: ${c.name || "none"}; phone: ${c.phone || "none"}; email: ${c.email || "none"}; created: ${c.created || "unknown"})`;
+  return `${head4}${CARRIER_HEADING}: ${contacts.map(one).join(", ")}. ${CARRIER_WARNING}${was}`;
+}
+async function readContactPages(get, params, cap = CONTACT_PAGE_CAP) {
+  const limit = typeof params.limit === "number" ? params.limit : 20;
+  const rows2 = [];
+  let paging = {};
+  for (let page = 0; page < cap; page++) {
+    const raw = asObj(await get("/contacts/", { params: { ...params, ...paging } }));
+    if (!Array.isArray(raw.contacts)) return void 0;
+    rows2.push(...raw.contacts);
+    const meta = asObj(raw.meta);
+    const total = typeof meta.total === "number" ? meta.total : void 0;
+    if (total !== void 0 && rows2.length >= total) return { rows: rows2, complete: true };
+    const next = meta.startAfterId !== void 0 && meta.startAfterId !== null && meta.startAfter !== void 0 && meta.startAfter !== null ? { startAfterId: meta.startAfterId, startAfter: meta.startAfter } : typeof meta.nextPage === "number" ? { page: meta.nextPage } : void 0;
+    if (!next || raw.contacts.length === 0) return { rows: rows2, complete: total === void 0 ? raw.contacts.length < limit : rows2.length >= total };
+    paging = next;
+  }
+  return { rows: rows2, complete: false };
+}
+var CARRIER_HEADING, CARRIER_WARNING, CARRIER_PARTIAL, asObj, str, CONTACT_PAGE_CAP;
+var init_test_contacts = __esm({
+  "src/test-contacts.ts"() {
+    "use strict";
+    CARRIER_HEADING = "Contacts that now carry this run's test address";
+    CARRIER_WARNING = "If your form matches leads by phone, some of these may be existing customers whose email was replaced. Check each before deleting; to delete, ask Claude to delete specific contacts by id.";
+    CARRIER_PARTIAL = "Partial, a search could not be read.";
+    asObj = (v) => v && typeof v === "object" ? v : {};
+    str = (v) => typeof v === "string" && v.trim() ? v : void 0;
+    CONTACT_PAGE_CAP = 5;
+  }
+});
+
 // src/tools/funnel-qa.ts
 function rollupVerdict(checks) {
   const fail = checks.filter((c) => c.status === "fail");
@@ -17864,52 +18349,66 @@ function rollupVerdict(checks) {
   return { ok: fail.length === 0, verdict, summary };
 }
 function parseContact(raw) {
-  const c = asObj(asObj(raw).contact);
-  const id = str(c.id) ?? str(c._id);
+  const c = asObj2(asObj2(raw).contact);
+  const id = str2(c.id) ?? str2(c._id);
   if (!id) return void 0;
   const custom = /* @__PURE__ */ new Map();
   for (const f of asArr(c.customFields)) {
-    const fo = asObj(f);
-    const fid = str(fo.id) ?? str(fo.customFieldId) ?? str(fo.field_id);
+    const fo = asObj2(f);
+    const fid = str2(fo.id) ?? str2(fo.customFieldId) ?? str2(fo.field_id);
     if (!fid) continue;
     const val = fo.value ?? fo.field_value ?? fo.fieldValue ?? "";
     custom.set(fid, Array.isArray(val) ? val.join(",") : String(val));
   }
   return {
     id,
-    email: str(c.email)?.toLowerCase(),
-    phone: str(c.phone),
-    firstName: str(c.firstName),
-    lastName: str(c.lastName),
-    name: str(c.name),
+    email: str2(c.email)?.toLowerCase(),
+    phone: str2(c.phone),
+    firstName: str2(c.firstName),
+    lastName: str2(c.lastName),
+    name: str2(c.name),
     tags: asArr(c.tags).map((t) => String(t).toLowerCase()),
-    source: str(c.source),
-    assignedTo: str(c.assignedTo),
+    source: str2(c.source),
+    assignedTo: str2(c.assignedTo),
     custom
   };
 }
-async function findContactsByEmail(client, locationId2, email) {
-  const raw = await client.get("/contacts/", { params: { locationId: locationId2, query: email, limit: 20 } });
+async function searchByEmail(client, locationId2, email) {
+  const paged = await readContactPages((path45, o) => client.get(path45, o), { locationId: locationId2, query: email, limit: 20 });
+  if (!paged) throw new SearchUnreadable("the contact search answered in a shape that could not be read");
   const want = email.toLowerCase();
   const ids = [];
-  for (const c of asArr(asObj(raw).contacts)) {
-    const co = asObj(c);
-    if (str(co.email)?.toLowerCase() === want) {
-      const id = str(co.id) ?? str(co._id);
-      if (id) ids.push(id);
+  const matches = [];
+  const rows2 = [];
+  for (const c of paged.rows) {
+    const co = asObj2(c);
+    const id = str2(co.id) ?? str2(co._id);
+    if (!id) continue;
+    ids.push(id);
+    const row = carrierOf(co);
+    if (row) rows2.push(row);
+    if (str2(co.email)?.toLowerCase() === want) {
+      const t = Date.parse(str2(co.dateAdded) ?? "");
+      const name = str2(co.contactName) ?? ([str2(co.firstName), str2(co.lastName)].filter(Boolean).join(" ") || void 0);
+      matches.push({ id, email: want, added: Number.isFinite(t) ? t : void 0, name, carrier: carrierOf(co) });
     }
   }
-  return ids;
+  return { ids, matches, rows: rows2, complete: paged.complete };
+}
+async function findContactsByEmail(client, locationId2, email, onRead) {
+  const read2 = await searchByEmail(client, locationId2, email);
+  onRead?.(read2);
+  return read2.matches.map((m) => m.id);
 }
 async function getContact(client, contactId) {
   return parseContact(await client.get(`/contacts/${contactId}`));
 }
-async function settledEmailIds(client, locationId2, email, opts = {}) {
+async function settledEmailIds(client, locationId2, email, opts = {}, onRead) {
   const tries = opts.tries ?? 6;
   const delayMs = opts.delayMs ?? 3500;
   const seen = /* @__PURE__ */ new Set();
   for (let i = 1; i <= tries; i++) {
-    for (const id of await findContactsByEmail(client, locationId2, email)) seen.add(id);
+    for (const id of await findContactsByEmail(client, locationId2, email, onRead)) seen.add(id);
     if (seen.size >= 2) break;
     if (i < tries) await sleep3(delayMs);
   }
@@ -17919,21 +18418,21 @@ async function hasSmsCapability(client, locationId2) {
   let numbers = 0;
   let pools = 0;
   try {
-    numbers = asArr(asObj(await client.get("/phone-system/numbers/", { params: { locationId: locationId2 } })).phoneNumbers).length;
+    numbers = asArr(asObj2(await client.get("/phone-system/numbers/", { params: { locationId: locationId2 } })).phoneNumbers).length;
   } catch {
   }
   try {
-    pools = asArr(asObj(await client.get("/phone-system/number-pools/", { params: { locationId: locationId2 } })).pools).length;
+    pools = asArr(asObj2(await client.get("/phone-system/number-pools/", { params: { locationId: locationId2 } })).pools).length;
   } catch {
   }
   return { numbers, pools };
 }
 async function latestOutboundMs(client, locationId2, contactId) {
   const convRaw = await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } });
-  const conversations = asArr(asObj(convRaw).conversations);
+  const conversations = asArr(asObj2(convRaw).conversations);
   let best;
   for (const c of conversations) {
-    const convId = str(asObj(c).id) ?? str(asObj(c)._id);
+    const convId = str2(asObj2(c).id) ?? str2(asObj2(c)._id);
     if (!convId) continue;
     let msgsRaw;
     try {
@@ -17941,45 +18440,41 @@ async function latestOutboundMs(client, locationId2, contactId) {
     } catch {
       continue;
     }
-    const mo = asObj(msgsRaw);
-    const list3 = asArr(mo.messages).length ? asArr(mo.messages) : asArr(asObj(mo.messages).messages);
+    const mo = asObj2(msgsRaw);
+    const list3 = asArr(mo.messages).length ? asArr(mo.messages) : asArr(asObj2(mo.messages).messages);
     for (const m of list3) {
-      const msg3 = asObj(m);
-      const dir = str(msg3.direction)?.toLowerCase();
+      const msg3 = asObj2(m);
+      const dir = str2(msg3.direction)?.toLowerCase();
       if (dir !== "outbound") continue;
-      const at = Date.parse(str(msg3.dateAdded) ?? str(msg3.dateUpdated) ?? "");
+      const at = Date.parse(str2(msg3.dateAdded) ?? str2(msg3.dateUpdated) ?? "");
       const atMs = Number.isNaN(at) ? void 0 : at;
-      if (!best || atMs && (!best.atMs || atMs > best.atMs)) best = { type: str(msg3.type), atMs };
+      if (!best || atMs && (!best.atMs || atMs > best.atMs)) best = { type: str2(msg3.type), atMs };
     }
   }
   return best ? { found: true, ...best } : { found: false };
 }
 async function readWorkflow(bc, workflowId) {
   try {
-    const full = asObj(await bc.getWorkflow(workflowId));
-    const status = str(full.status);
-    const templates = asArr(asObj(full.workflowData).templates);
-    const sendsSms = templates.some((t) => str(asObj(t).type) === "sms");
+    const full = asObj2(await bc.getWorkflow(workflowId));
+    const status = str2(full.status);
+    const templates = asArr(asObj2(full.workflowData).templates);
+    const sendsSms = templates.some((t) => str2(asObj2(t).type) === "sms");
     return { status, sendsSms };
   } catch {
     return void 0;
   }
 }
 async function submit(url, body) {
-  const res = await fetch(url, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", Accept: "application/json" },
-    body: JSON.stringify(body)
-  });
-  const text2 = (await res.text().catch(() => "")).slice(0, 300);
+  const res = await guardedPost(url, JSON.stringify(body), { "Content-Type": "application/json", Accept: "application/json" });
+  const text2 = res.text.slice(0, 300);
   return { httpStatus: res.status, blockedByCaptcha: res.status === 403 && /captcha|turnstile/i.test(text2), text: text2 };
 }
 function registerFunnelQaTools(server2, client, builderClient) {
   server2.tool(
     "verify_funnel",
-    "Prove a live public funnel actually captures a lead AND the automation acts on it \u2014 the runtime companion to audit_workflows. Submits a sentinel lead to funnelUrl, then reads GHL back to verify what REALLY happened (the UI/thank-you page is never proof): (1) backend contact truth \u2014 the contact is actually created (search_contacts), with submit\u2192appear latency; (2) field-value fidelity \u2014 each expectCustom value actually PERSISTED on the contact (a wrong field id makes upsert succeed while silently dropping the value); (3) the triggerTag landed (else the workflow can't fire); (4) SMS/A2P pre-check \u2014 flags if the account has no SMS-capable number so any SMS step would silently fail; (5) workflow status \u2014 flags a DRAFT workflow (never fires on real leads); (6) outreach fired \u2014 an OUTBOUND message was actually logged for the contact (proves enrollment + send, not just a green log), with latency; (7) consent recorded when messaging fires (TCPA/CAN-SPAM); (8) duplicate-contact retest \u2014 a second identical submit dedups to ONE contact, not a duplicate/false-failure; (9) opportunity/routing (expectOpportunity/expectAssigned/expectSource); (10) multi-surface (extraUrls) + concurrent double-submit race. Booking can't be faked server-side, so a real burner appointment is surfaced as a manual step. WARNING: this creates a real (clearly-marked 'blueprint-qa') contact and MAY fire real automation + internal notifications; it deletes the sentinel afterward by default (cleanup). Run it on the REAL production URL.",
+    "Prove a live public funnel actually captures a lead AND the automation acts on it \u2014 the runtime companion to audit_workflows. Submits a sentinel lead to funnelUrl, then reads GHL back to verify what REALLY happened (the UI/thank-you page is never proof): (1) backend contact truth \u2014 a contact carrying the test address actually appears (search_contacts), with submit\u2192appear latency; (2) field-value fidelity \u2014 each expectCustom value actually PERSISTED on the contact (a wrong field id makes upsert succeed while silently dropping the value); (3) the triggerTag landed (else the workflow can't fire); (4) SMS/A2P pre-check \u2014 flags if the account has no SMS-capable number so any SMS step would silently fail; (5) workflow status \u2014 flags a DRAFT workflow (never fires on real leads); (6) outreach fired \u2014 an OUTBOUND message was actually logged for the contact (proves enrollment + send, not just a green log), with latency; (7) consent recorded when messaging fires (TCPA/CAN-SPAM); (8) duplicate-contact retest \u2014 a second identical submit dedups to ONE contact, not a duplicate/false-failure; (9) opportunity/routing (expectOpportunity/expectAssigned/expectSource); (10) multi-surface (extraUrls) + concurrent double-submit race. Booking can't be faked server-side, so a real burner appointment is surfaced as a manual step. WARNING: this submits a real (clearly-marked 'blueprint-qa') test lead, which GoHighLevel may turn into a contact, and MAY fire real automation + internal notifications; it never deletes anything: the result lists every contact that now carries the run's test address (id, name, phone, email, created date), for you to check before asking Claude to delete any. Run it on the REAL production URL.",
     {
-      funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that creates the GHL contact). POSTed as JSON."),
+      funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that sends the lead into GHL). POSTed as JSON."),
       sentinelEmail: import_zod45.z.string().optional().describe("Override the minted sentinel email. Default: a unique blueprint-qa.<id>@example.com (won't deliver; used only to find the contact)."),
       testPhone: import_zod45.z.string().optional().describe("Include a phone on the submission (enables SMS-path checks). Must be a test-safe number you control \u2014 real SMS may send + bill."),
       submitBody: import_zod45.z.record(import_zod45.z.string(), import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
@@ -17995,7 +18490,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
       expectSource: import_zod45.z.boolean().optional().describe("Assert a lead source/attribution was captured (reporting works)."),
       extraUrls: import_zod45.z.array(import_zod45.z.string()).optional().describe("Additional capture surfaces to test the same way (each gets its own sentinel) \u2014 popup/inline/exit-intent forms."),
       testConcurrentDuplicate: import_zod45.z.boolean().optional().describe("Fire two simultaneous submits with a fresh email \u2192 assert exactly ONE contact (concurrent dedup race)."),
-      cleanup: import_zod45.z.boolean().optional().describe("Delete the sentinel contact(s) after verifying. Default true."),
+      cleanup: import_zod45.z.boolean().optional().describe("No longer used: verify_funnel never deletes anything. The contacts that now carry the run's test address are listed in the result for you to check."),
       locationId: import_zod45.z.string().optional().describe("Target sub-account. Must match the active location.")
     },
     async (args) => {
@@ -18005,8 +18500,6 @@ function registerFunnelQaTools(server2, client, builderClient) {
           return jsonResponse({ ok: false, error: `Location mismatch: active is ${locationId2}, you passed ${args.locationId}. switch_location + confirm first.` });
         }
         const checks = [];
-        const cleanup = args.cleanup !== false;
-        const sentinels = [];
         const token2 = crypto.randomUUID().slice(0, 8);
         const sentinelEmail = (args.sentinelEmail ?? `blueprint-qa.${token2}@example.com`).toLowerCase();
         const custom = {};
@@ -18015,11 +18508,58 @@ function registerFunnelQaTools(server2, client, builderClient) {
         if (typeof body.email !== "string" || !body.email) body.email = sentinelEmail;
         const searchEmail = String(body.email).toLowerCase();
         if (args.testPhone && !body.phone) body.phone = args.testPhone;
-        const submitMs = Date.now();
+        const addressProblem = await publicAddressProblem(args.funnelUrl);
+        if (addressProblem && /local or private/i.test(addressProblem)) {
+          const sentence = "Not checked: the address is private, so no test lead was sent.";
+          return jsonResponse({ ok: false, verdict: "NOT_CHECKED", summary: sentence, checks: [{ id: "submit", label: "Submit reached the endpoint", status: "skip", detail: sentence }] });
+        }
+        const raceEmail = `blueprint-qa.${crypto.randomUUID().slice(0, 8)}@example.com`;
+        const surfaceEmails = (args.extraUrls ?? []).map(() => `blueprint-qa.${crypto.randomUUID().slice(0, 8)}@example.com`);
+        const runEmails = [searchEmail, ...args.testConcurrentDuplicate ? [raceEmail] : [], ...surfaceEmails];
+        const notRun = (sentence) => jsonResponse({ ok: false, verdict: "NOT_RUN", summary: sentence, checks: [{ id: "preflight", label: "Test address is new", status: "fail", detail: sentence }] });
+        const runStart = Date.now();
+        const everSeen = /* @__PURE__ */ new Set();
+        const found = /* @__PURE__ */ new Map();
+        const latest = /* @__PURE__ */ new Map();
+        let partial = false;
+        const onRead = (r) => {
+          if (!r.complete) partial = true;
+          for (const id of r.ids) everSeen.add(id);
+          for (const row of r.rows) latest.set(row.id, row);
+          for (const m of r.matches) found.set(m.id, m);
+        };
+        for (const email of runEmails) {
+          let read2;
+          try {
+            read2 = await searchByEmail(client, locationId2, email);
+          } catch (e) {
+            return notRun(`Not run: the contact search could not be read (${e instanceof Error ? e.message : String(e)}), so no test lead was sent.`);
+          }
+          onRead(read2);
+          if (read2.matches.length) return notRun(`Not run: ${email} already belongs to a contact in this account; use a test address.`);
+          if (!read2.complete) return notRun(`Not run: the contact search for ${email} could not be read in full, so whether the address is free was not checked and no test lead was sent.`);
+        }
+        const memberChosen = Boolean(args.sentinelEmail) || typeof args.submitBody?.email === "string" && args.submitBody.email !== "";
+        const ownEmails = /* @__PURE__ */ new Set([...memberChosen ? [] : [searchEmail], raceEmail, ...surfaceEmails]);
+        const beginSubmit = (email) => ({ email, start: Date.now(), before: new Set(everSeen) });
+        const landed = (f, sub) => ownEmails.has(sub.email) && f.email === sub.email && f.added !== void 0 && f.added >= sub.start - 6e4 && !sub.before.has(f.id);
+        const searchFailed = (e) => {
+          partial = true;
+          return `Not checked: a contact search could not be read (${e instanceof Error ? e.message.split("\n")[0] : String(e)}), so whether this submit's lead arrived was not checked.`;
+        };
+        const notLanded = (f, sub) => !ownEmails.has(sub.email) ? `A contact with the address you chose now exists (id ${f.id}); because that address is not the run's own, whether this run created it was not checked.` : f.added === void 0 ? `Not checked: when contact ${f.id} was added could not be read, so whether this run's lead landed was not checked.` : `Not checked: the contact found for ${sub.email} (id ${f.id}) is dated before this submit by the server clock, so whether this run's lead landed was not checked.`;
+        const main2 = beginSubmit(searchEmail);
+        const submitMs = main2.start;
         let httpInfo = "";
+        const REDIRECTED = "Not checked: the form's endpoint answered with a redirect, which is not followed, so whether a lead landed was not checked.";
+        let redirected = false;
         try {
           const r = await submit(args.funnelUrl, body);
           httpInfo = `HTTP ${r.httpStatus}`;
+          if (r.httpStatus >= 300 && r.httpStatus < 400) {
+            redirected = true;
+            checks.push({ id: "submit", label: "Submit reached the endpoint", status: "skip", detail: `The endpoint answered ${httpInfo}, a redirect, which is not followed.` });
+          }
           if (r.blockedByCaptcha) {
             checks.push({ id: "spam_gate", label: "Spam gate (Turnstile)", status: "warn", detail: `The funnel's Turnstile gate blocked this automated submit (${httpInfo}). That's correct protection \u2014 but it means verify_funnel can't drive this path. Test it manually, or temporarily allow a QA bypass.` });
           }
@@ -18027,27 +18567,39 @@ function registerFunnelQaTools(server2, client, builderClient) {
           checks.push({ id: "submit", label: "Submit reached the endpoint", status: "fail", detail: `POST to funnelUrl failed: ${e instanceof Error ? e.message : String(e)}` });
         }
         let contactId;
-        let cleanedUp = false;
         try {
           let appearMs;
+          let seenForMain = [];
+          let mainReadFailed;
           const backendTries = 12;
-          for (let i = 1; i <= backendTries; i++) {
-            const ids = await findContactsByEmail(client, locationId2, searchEmail);
-            if (ids.length) {
-              contactId = ids[0];
-              appearMs = Date.now();
-              break;
+          try {
+            for (let i = 1; i <= backendTries; i++) {
+              const ids = await findContactsByEmail(client, locationId2, searchEmail, onRead);
+              if (ids.length) {
+                seenForMain = ids.map((id) => found.get(id)).filter((f) => !!f);
+                appearMs = Date.now();
+                break;
+              }
+              if (i < backendTries) await sleep3(2e3 + i * 500);
             }
-            if (i < backendTries) await sleep3(2e3 + i * 500);
+          } catch (e) {
+            mainReadFailed = searchFailed(e);
           }
+          const mainLanded = new Set(seenForMain.filter((f) => landed(f, main2)).map((f) => f.id));
+          if (mainLanded.size) contactId = [...mainLanded][0];
           const sms = await hasSmsCapability(client, locationId2);
           const wf = args.workflowId && builderClient ? await readWorkflow(builderClient, args.workflowId) : void 0;
-          if (!contactId) {
+          if (mainReadFailed) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: mainReadFailed });
+          } else if (!contactId && seenForMain.length) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: notLanded(seenForMain[0], main2) });
+          } else if (!contactId && redirected) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: REDIRECTED });
+          } else if (!contactId) {
             checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "fail", detail: `No contact with ${searchEmail} appeared in GHL after ~${Math.round(backendTries * 2.5)}s (${httpInfo || "submit failed"}). The funnel is a paper shredder \u2014 leads evaporate even if the page says thanks.` });
           } else {
-            sentinels.push(contactId);
             const latencySec = appearMs ? Math.round((appearMs - submitMs) / 1e3) : void 0;
-            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "pass", detail: `Contact ${contactId} created (${httpInfo}). Submit\u2192appear ~${latencySec}s.` });
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "pass", detail: `A contact carrying this run's test address (id ${contactId}) appeared after the submit (${httpInfo}). Submit\u2192appear ~${latencySec}s.` });
             checks.push(latencySec !== void 0 && latencySec > 60 ? { id: "latency", label: "Speed-to-lead latency", status: "warn", detail: `Lead took ~${latencySec}s to land \u2014 slow capture loses leads. Investigate the bridge/retry path.` } : { id: "latency", label: "Speed-to-lead latency", status: "pass", detail: `~${latencySec ?? "<1"}s submit\u2192contact.` });
             const contact = await getContact(client, contactId);
             if (!contact) {
@@ -18065,11 +18617,11 @@ function registerFunnelQaTools(server2, client, builderClient) {
                   else if (got2.trim() !== f.value.trim()) probs.push(`custom ${f.label ?? f.fieldId}: saved "${got2}" \u2260 sent "${f.value}"`);
                 }
                 const submitted = {
-                  email: str(body.email)?.toLowerCase(),
-                  phone: str(body.phone),
-                  first_name: str(body.first_name),
-                  last_name: str(body.last_name),
-                  name: str(body.name)
+                  email: str2(body.email)?.toLowerCase(),
+                  phone: str2(body.phone),
+                  first_name: str2(body.first_name),
+                  last_name: str2(body.last_name),
+                  name: str2(body.name)
                 };
                 const got = {
                   email: contact.email,
@@ -18113,7 +18665,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
             if (args.workflowId) {
               if (!builderClient) checks.push({ id: "workflow_status", label: "Workflow is published", status: "skip", detail: "Workflow status needs the workflow-builder (Firebase) client, which isn't configured on this install." });
               else if (!wf) checks.push({ id: "workflow_status", label: "Workflow is published", status: "warn", detail: `Could not read workflow ${args.workflowId} (id wrong, or not readable).` });
-              else if (str(wf.status)?.toLowerCase() === "draft") checks.push({ id: "workflow_status", label: "Workflow is published", status: "fail", detail: `Workflow ${args.workflowId} is DRAFT \u2014 it will NOT fire on real leads. Publish it.` });
+              else if (str2(wf.status)?.toLowerCase() === "draft") checks.push({ id: "workflow_status", label: "Workflow is published", status: "fail", detail: `Workflow ${args.workflowId} is DRAFT \u2014 it will NOT fire on real leads. Publish it.` });
               else checks.push({ id: "workflow_status", label: "Workflow is published", status: "pass", detail: `Workflow status: ${wf.status}.` });
             }
             const wantOutreach = args.expectOutreach ?? !!(args.triggerTag || args.workflowId);
@@ -18138,13 +18690,13 @@ function registerFunnelQaTools(server2, client, builderClient) {
             if (args.expectOpportunity) {
               try {
                 const oppRaw = await client.get("/opportunities/search", { params: { location_id: locationId2, contact_id: contactId } });
-                const opps = asArr(asObj(oppRaw).opportunities).map(asObj);
+                const opps = asArr(asObj2(oppRaw).opportunities).map(asObj2);
                 if (opps.length === 0) {
                   checks.push({ id: "opportunity", label: "Opportunity created", status: "fail", detail: "No opportunity exists for the contact \u2014 the create-opportunity step didn't run (often a dead pipeline/stage id silently kills it)." });
                 } else {
                   const want = args.expectOpportunity;
-                  const match = opps.find((o) => (!want.pipelineId || str(o.pipelineId) === want.pipelineId) && (!want.stageId || str(o.pipelineStageId) === want.stageId));
-                  checks.push(match ? { id: "opportunity", label: "Opportunity created", status: "pass", detail: `Opportunity in the expected pipeline/stage.` } : { id: "opportunity", label: "Opportunity created", status: "fail", detail: `An opportunity exists but not in the expected pipeline/stage (got pipeline ${str(opps[0].pipelineId)}, stage ${str(opps[0].pipelineStageId)}).` });
+                  const match = opps.find((o) => (!want.pipelineId || str2(o.pipelineId) === want.pipelineId) && (!want.stageId || str2(o.pipelineStageId) === want.stageId));
+                  checks.push(match ? { id: "opportunity", label: "Opportunity created", status: "pass", detail: `Opportunity in the expected pipeline/stage.` } : { id: "opportunity", label: "Opportunity created", status: "fail", detail: `An opportunity exists but not in the expected pipeline/stage (got pipeline ${str2(opps[0].pipelineId)}, stage ${str2(opps[0].pipelineStageId)}).` });
                 }
               } catch (e) {
                 checks.push({ id: "opportunity", label: "Opportunity created", status: "warn", detail: `Could not read opportunities: ${e instanceof Error ? e.message : String(e)}` });
@@ -18158,78 +18710,135 @@ function registerFunnelQaTools(server2, client, builderClient) {
               if (!contact) checks.push({ id: "attribution", label: "Lead source captured", status: "fail", detail: "Could not read the contact to verify source." });
               else checks.push(contact.source ? { id: "attribution", label: "Lead source captured", status: "pass", detail: `source = "${contact.source}".` } : { id: "attribution", label: "Lead source captured", status: "warn", detail: "No source/attribution on the contact \u2014 reporting can't tell which funnel/ad produced it." });
             }
+            const dup = beginSubmit(searchEmail);
             await submit(args.funnelUrl, body).catch(() => void 0);
-            const dupIds = await settledEmailIds(client, locationId2, searchEmail, { tries: 6, delayMs: 3e3 });
-            for (const id of dupIds) if (!sentinels.includes(id)) sentinels.push(id);
-            checks.push(dupIds.length === 1 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "pass", detail: "A second identical submit deduped to ONE contact (upsert by email)." } : dupIds.length === 0 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "warn", detail: `Could not observe the contact for ${searchEmail} on re-read (search lag) \u2014 dedup not conclusively verified.` } : { id: "duplicate", label: "Duplicate-contact dedup", status: "fail", detail: `A second submit produced ${dupIds.length} contacts for ${searchEmail} \u2014 dedup is broken (real returning visitors will duplicate or false-fail).` });
+            let dupMatches = [];
+            let dupFailed;
+            try {
+              dupMatches = (await settledEmailIds(client, locationId2, searchEmail, { tries: 6, delayMs: 3e3 }, onRead)).map((id) => found.get(id)).filter((f) => !!f);
+            } catch (e) {
+              dupFailed = searchFailed(e);
+            }
+            const dupKnown = dupMatches.filter((f) => mainLanded.has(f.id) || landed(f, dup));
+            const dupOther = dupMatches.filter((f) => !mainLanded.has(f.id) && !landed(f, dup));
+            checks.push(dupFailed ? { id: "duplicate", label: "Duplicate-contact dedup", status: "skip", detail: dupFailed } : dupOther.length ? { id: "duplicate", label: "Duplicate-contact dedup", status: "skip", detail: `Not checked: a contact listed before the second submit now carries the address (id ${dupOther[0].id}), so whether the second submit made a duplicate was not checked.` } : dupKnown.length === 1 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "pass", detail: "After a second identical submit, still ONE contact carries the address (upsert by email)." } : dupKnown.length === 0 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "warn", detail: `Could not observe the contact for ${searchEmail} on re-read (search lag) \u2014 dedup not conclusively verified.` } : { id: "duplicate", label: "Duplicate-contact dedup", status: "fail", detail: `After a second submit, ${dupKnown.length} contacts carry ${searchEmail} \u2014 dedup is broken (real returning visitors will duplicate or false-fail).` });
             if (args.testConcurrentDuplicate) {
-              const raceToken = crypto.randomUUID().slice(0, 8);
-              const raceEmail = `blueprint-qa.${raceToken}@example.com`;
-              const raceBody = { ...body, email: raceEmail, last_name: `QA race ${raceToken}` };
-              await Promise.allSettled([submit(args.funnelUrl, raceBody), submit(args.funnelUrl, raceBody)]);
-              const raceIds = await settledEmailIds(client, locationId2, raceEmail, { tries: 6, delayMs: 3e3 });
-              for (const id of raceIds) if (!sentinels.includes(id)) sentinels.push(id);
-              checks.push(raceIds.length === 1 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "pass", detail: `Two simultaneous submits \u2192 1 contact (no race duplicate).` } : raceIds.length === 0 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "warn", detail: "Could not observe the race result (search lag, or neither submit landed)." } : { id: "concurrent_race", label: "Concurrent double-submit", status: "fail", detail: `Two simultaneous submits created ${raceIds.length} contacts \u2014 a concurrency race duplicates leads under real traffic.` });
+              let raceBefore;
+              try {
+                await findContactsByEmail(client, locationId2, raceEmail, onRead);
+              } catch (e) {
+                raceBefore = searchFailed(e);
+              }
+              if (raceBefore) checks.push({ id: "concurrent_race", label: "Concurrent double-submit", status: "skip", detail: `${raceBefore} The concurrent pair was not sent.` });
+              else {
+                const race = beginSubmit(raceEmail);
+                const raceBody = { ...body, email: raceEmail, last_name: `QA race ${raceEmail.slice(13, 21)}` };
+                await Promise.allSettled([submit(args.funnelUrl, raceBody), submit(args.funnelUrl, raceBody)]);
+                let raceMine = [];
+                let raceFailed;
+                try {
+                  raceMine = (await settledEmailIds(client, locationId2, raceEmail, { tries: 6, delayMs: 3e3 }, onRead)).map((id) => found.get(id)).filter((f) => !!f && landed(f, race));
+                } catch (e) {
+                  raceFailed = searchFailed(e);
+                }
+                checks.push(raceFailed ? { id: "concurrent_race", label: "Concurrent double-submit", status: "skip", detail: raceFailed } : raceMine.length === 1 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "pass", detail: `Two simultaneous submits \u2192 1 contact carrying the race address appeared (no race duplicate).` } : raceMine.length === 0 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "warn", detail: "Could not observe the race result (search lag, or neither submit landed)." } : { id: "concurrent_race", label: "Concurrent double-submit", status: "fail", detail: `Two simultaneous submits \u2192 ${raceMine.length} contacts carrying the race address appeared \u2014 a concurrency race duplicates leads under real traffic.` });
+              }
             }
-            for (const url of args.extraUrls ?? []) {
-              const sToken = crypto.randomUUID().slice(0, 8);
-              const sEmail = `blueprint-qa.${sToken}@example.com`;
-              const sBody = { ...body, email: sEmail, last_name: `QA ${sToken}` };
+            for (const [k, url] of (args.extraUrls ?? []).entries()) {
+              const sEmail = surfaceEmails[k];
+              const sBody = { ...body, email: sEmail, last_name: `QA ${sEmail.slice(13, 21)}` };
+              let sBefore;
+              try {
+                await findContactsByEmail(client, locationId2, sEmail, onRead);
+              } catch (e) {
+                sBefore = searchFailed(e);
+              }
+              if (sBefore) {
+                checks.push({ id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: `${sBefore} This surface's test lead was not sent.` });
+                continue;
+              }
+              const surf = beginSubmit(sEmail);
               let ids = [];
+              let sRedirected = false;
+              let sFailed;
               try {
-                await submit(url, sBody);
-                ids = await settledEmailIds(client, locationId2, sEmail, { tries: 8, delayMs: 2500 });
+                const r = await submit(url, sBody);
+                sRedirected = r.httpStatus >= 300 && r.httpStatus < 400;
+                try {
+                  ids = await settledEmailIds(client, locationId2, sEmail, { tries: 8, delayMs: 2500 }, onRead);
+                } catch (e) {
+                  sFailed = searchFailed(e);
+                }
               } catch {
               }
-              for (const id of ids) if (!sentinels.includes(id)) sentinels.push(id);
-              checks.push(ids.length >= 1 ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "pass", detail: `Submission landed ${ids.length} contact(s).` } : { id: `surface:${url}`, label: `Capture surface ${url}`, status: "fail", detail: "Submission did NOT land a contact \u2014 this surface is a paper shredder." });
+              const seenHere = ids.map((id) => found.get(id)).filter((f) => !!f);
+              const sMine = seenHere.filter((f) => landed(f, surf));
+              checks.push(sFailed ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: sFailed } : sMine.length >= 1 ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "pass", detail: `${sMine.length} contact(s) carrying this surface's test address appeared after the submit.` } : seenHere.length ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: notLanded(seenHere[0], surf) } : sRedirected ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: REDIRECTED } : { id: `surface:${url}`, label: `Capture surface ${url}`, status: "fail", detail: "Submission did NOT land a contact \u2014 this surface is a paper shredder." });
             }
           }
           checks.push({ id: "booking", label: "Booking (manual)", status: "skip", detail: "A reachable calendar URL is not proof. Book ONE real test ('burner') appointment through the live booking widget and confirm it lands in GHL (Carlos #6). This step can't be verified server-side." });
         } catch (e) {
-          checks.push({ id: "error", label: "verify_funnel run error", status: "fail", detail: e instanceof Error ? e.message : String(e) });
-        } finally {
-          const uniq = [...new Set(sentinels)];
-          if (!cleanup) {
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: "skip", detail: `cleanup:false \u2014 ${uniq.length} "blueprint-qa" sentinel contact(s) left in the account. Delete them so QA doesn't pollute reporting.` });
-          } else if (uniq.length === 0) {
-            cleanedUp = true;
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: "skip", detail: "No sentinel contacts were created." });
-          } else {
-            let deleted = 0;
-            for (const id of uniq) {
-              try {
-                await client.delete(`/contacts/${id}`);
-                deleted++;
-              } catch {
-              }
-            }
-            cleanedUp = deleted === uniq.length;
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: cleanedUp ? "pass" : "warn", detail: cleanedUp ? `Deleted ${deleted} sentinel contact(s).` : `Deleted ${deleted}/${uniq.length} sentinel contact(s) \u2014 remove any leftover "blueprint-qa" contacts manually.` });
+          partial = true;
+          const msg3 = e instanceof Error ? e.message.split("\n")[0] : String(e);
+          const bt2 = checks.find((c) => c.id === "backend_truth");
+          if (bt2?.status === "pass") {
+            bt2.status = "skip";
+            bt2.detail = `Not checked: a read after the lead appeared could not be completed (${msg3}), so this submit was not fully checked.`;
+            for (let i = checks.length - 1; i >= 0; i--) if (checks[i].id === "latency") checks.splice(i, 1);
+            checks.push({ id: "error", label: "verify_funnel read error", status: "skip", detail: msg3 });
+          } else checks.push({ id: "error", label: "verify_funnel run error", status: "fail", detail: e instanceof Error ? e.message : String(e) });
+        }
+        for (const f of found.values()) {
+          if (f.added !== void 0 && f.added < runStart - 6e4) checks.push({ id: `upsert:${f.id}`, label: "Test email on an existing contact", status: "warn", detail: `Contact ${f.id} carrying the test address is dated before this submit by the server clock; it may be an existing contact the endpoint re-used. Check that contact's email.` });
+        }
+        const runAddresses = /* @__PURE__ */ new Set([searchEmail, ...ownEmails]);
+        for (const id of [...found.keys()].slice(0, 25)) {
+          try {
+            const now = carrierOf(asObj2(await client.get(`/contacts/${id}`)).contact);
+            if (now) latest.set(id, now);
+          } catch (e) {
+            if (/\b404\b|not found/i.test(e instanceof Error ? e.message : String(e))) latest.set(id, { id, name: "", phone: "", email: "", created: "" });
+            else partial = true;
           }
         }
-        return finish2(checks, { contactId, sentinelEmail: searchEmail, cleanedUp });
+        if (found.size > 25) partial = true;
+        const carriers = [];
+        const former = [];
+        for (const f of found.values()) {
+          const now = latest.get(f.id);
+          if (now && !runAddresses.has(now.email)) former.push({ id: f.id, now: now.email || "no contact by that id" });
+          else carriers.push(now ?? f.carrier ?? { id: f.id, name: f.name ?? "", phone: "", email: f.email, created: "" });
+        }
+        checks.push({ id: "test_contacts", label: CARRIER_HEADING, status: "skip", detail: carrierText(carriers, partial, former) });
+        const bt = checks.find((c) => c.id === "backend_truth");
+        const notChecked = bt?.status === "skip" && !checks.some((c) => c.status === "fail") ? bt.detail : void 0;
+        return finish2(checks, { contactId, sentinelEmail: searchEmail, contactsCarryingTestAddress: carriers, formerCarriers: former, contactsListPartial: partial }, carriers.length > 0, notChecked);
       } catch (error) {
         return errorResponse(error);
       }
     }
   );
 }
-function finish2(checks, extra) {
-  const { ok, verdict, summary } = rollupVerdict(checks);
-  const note = "WARNING: verify_funnel created a real (clearly-marked 'blueprint-qa') contact and may have fired real automation + internal notifications. Run on the real production URL; the form/thank-you page is never proof \u2014 only the backend is.";
+function finish2(checks, extra, createdAny, notChecked) {
+  const rolled = rollupVerdict(checks);
+  const { ok, verdict, summary } = notChecked ? { ok: false, verdict: "NOT_CHECKED", summary: notChecked } : rolled;
+  const note = createdAny ? "WARNING: verify_funnel submitted a real (clearly-marked 'blueprint-qa') test lead and may have fired real automation + internal notifications. It never deletes anything: the contacts that now carry this run's test address are listed, for you to check before deleting any. Run on the real production URL; the form/thank-you page is never proof \u2014 only the backend is." : "No contact carrying this run's test address was found.";
   return jsonResponse({ ok, verdict, summary, checks, note, ...extra });
 }
-var import_zod45, asObj, asArr, str, sleep3, customFieldInput;
+var import_zod45, asObj2, asArr, str2, sleep3, SearchUnreadable, customFieldInput;
 var init_funnel_qa = __esm({
   "src/tools/funnel-qa.ts"() {
     "use strict";
     import_zod45 = require("zod");
     init_tool_helpers();
-    asObj = (v) => v && typeof v === "object" ? v : {};
+    init_test_contacts();
+    init_net_guard();
+    asObj2 = (v) => v && typeof v === "object" ? v : {};
     asArr = (v) => Array.isArray(v) ? v : [];
-    str = (v) => typeof v === "string" ? v : void 0;
+    str2 = (v) => typeof v === "string" ? v : void 0;
     sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+    SearchUnreadable = class extends Error {
+    };
     customFieldInput = import_zod45.z.object({
       fieldId: import_zod45.z.string().describe("The VERIFIED GHL custom-field id the form sends (from apply_build_plan's wiring bundle)."),
       value: import_zod45.z.string().describe("The value the form sends for this field \u2014 asserted to PERSIST on the contact."),
@@ -18242,13 +18851,13 @@ var init_funnel_qa = __esm({
 function registerPipelineBuilderTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function pipelineRequest(method, path44, body) {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path44}`;
+  async function pipelineRequest(method, path45, body) {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT" || method === "PATCH");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Pipeline API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -18449,13 +19058,13 @@ var init_sub_account_errors = __esm({
 });
 
 // src/field-sanitize.ts
-var MAX_STR, MAX_LIST, str2, num, list, drop, isoDate;
+var MAX_STR, MAX_LIST, str3, num, list, drop, isoDate;
 var init_field_sanitize = __esm({
   "src/field-sanitize.ts"() {
     "use strict";
     MAX_STR = 200;
     MAX_LIST = 50;
-    str2 = (x, max = MAX_STR) => {
+    str3 = (x, max = MAX_STR) => {
       if (typeof x !== "string") return void 0;
       const t = x.trim();
       return t ? t.slice(0, max) : void 0;
@@ -18468,7 +19077,7 @@ var init_field_sanitize = __esm({
     };
     drop = (o) => Object.values(o).some((v) => v !== void 0) ? o : void 0;
     isoDate = (x) => {
-      const s = str2(x, 40);
+      const s = str3(x, 40);
       if (!s) return void 0;
       const m = /^(\d{4})-(\d{2})-(\d{2})(?:[T ].*)?$/.exec(s);
       if (!m) return void 0;
@@ -18580,7 +19189,7 @@ function safeParse(raw) {
   }
 }
 function safeUrl2(x, max = MAX_URL) {
-  const raw = str2(x, max);
+  const raw = str3(x, max);
   if (!raw) return void 0;
   let u;
   try {
@@ -18611,68 +19220,68 @@ function sanitizeProfile(raw) {
     v: 1,
     canCreateSubAccounts: typeof r.canCreateSubAccounts === "boolean" ? r.canCreateSubAccounts : void 0,
     ghlPlanEvidence: sanitizePlanEvidence(r.ghlPlanEvidence),
-    agencyName: str2(r.agencyName, 80),
-    legalName: str2(r.legalName),
+    agencyName: str3(r.agencyName, 80),
+    legalName: str3(r.legalName),
     accent: normalizeAccent(r.accent),
     logoUrl: safeUrl2(r.logoUrl),
     website: safeUrl2(r.website),
     sender: drop({
-      fromName: str2(sender?.fromName, 80),
-      replyTo: str2(sender?.replyTo),
-      phone: str2(sender?.phone, 32)
+      fromName: str3(sender?.fromName, 80),
+      replyTo: str3(sender?.replyTo),
+      phone: str3(sender?.phone, 32)
     }),
     offers: list(r.offers, (o) => {
       const v = o ?? {};
-      const name = str2(v.name, 120);
+      const name = str3(v.name, 120);
       if (!name) return void 0;
       return {
         name,
         priceFloor: num(v.priceFloor),
         cadence: v.cadence === "monthly" || v.cadence === "one-time" ? v.cadence : void 0,
-        notes: str2(v.notes, 500)
+        notes: str3(v.notes, 500)
       };
     }),
     packages: (() => {
       const seen = /* @__PURE__ */ new Set();
       return list(r.packages, (pk) => {
         const v = pk ?? {};
-        const name = str2(v.name, 80);
+        const name = str3(v.name, 80);
         if (!name) return void 0;
-        const idRaw = str2(v.id, 60) || name;
+        const idRaw = str3(v.id, 60) || name;
         const id = idRaw.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "package";
         if (seen.has(id)) return void 0;
         seen.add(id);
         const features = Array.isArray(v.features) ? [...new Set(v.features.filter(isFeatureId))] : [];
-        return { id, name, price: str2(v.price, 60), features };
+        return { id, name, price: str3(v.price, 60), features };
       });
     })(),
     pricing: drop({
       minMonthly: num(pricing?.minMonthly),
       minSetup: num(pricing?.minSetup),
-      currency: str2(pricing?.currency, 8)
+      currency: str3(pricing?.currency, 8)
     }),
     delivery: drop({
-      sops: list(delivery?.sops, (s) => str2(s, MAX_SOP)),
+      sops: list(delivery?.sops, (s) => str3(s, MAX_SOP)),
       hoursToDeliverTarget: num(delivery?.hoursToDeliverTarget)
     }),
     staff: list(r.staff, (s) => {
       const v = s ?? {};
-      const name = str2(v.name, 80);
+      const name = str3(v.name, 80);
       if (!name) return void 0;
       return {
         name,
-        role: str2(v.role),
-        email: str2(v.email),
-        mayApprove: list(v.mayApprove, (a) => str2(a, 40))
+        role: str3(v.role),
+        email: str3(v.email),
+        mayApprove: list(v.mayApprove, (a) => str3(a, 40))
       };
     }),
     defaults: drop({
-      timezone: str2(defaults?.timezone, 64),
-      industry: str2(defaults?.industry, 64)
+      timezone: str3(defaults?.timezone, 64),
+      industry: str3(defaults?.industry, 64)
     }),
     agencyOs: sanitizeAgencyOs(r.agencyOs),
     clientFilesDir: safeDir(r.clientFilesDir),
-    updated_at: str2(r.updated_at, 40)
+    updated_at: str3(r.updated_at, 40)
   };
 }
 function sanitizeAgencyOs(raw) {
@@ -18680,16 +19289,16 @@ function sanitizeAgencyOs(raw) {
   const r = raw;
   const ica = r.ica ?? {};
   const offer = r.offer ?? {};
-  const lines = (x) => list(x, (s) => str2(s, MAX_STR * 2));
+  const lines = (x) => list(x, (s) => str3(s, MAX_STR * 2));
   const out = drop({
-    story: str2(r.story, MAX_PARA),
-    method: str2(r.method, MAX_PARA),
-    voice: str2(r.voice, 400),
+    story: str3(r.story, MAX_PARA),
+    method: str3(r.method, MAX_PARA),
+    voice: str3(r.voice, 400),
     values: lines(r.values),
-    goals: str2(r.goals, 400),
+    goals: str3(r.goals, 400),
     proof: lines(r.proof),
     ica: drop({
-      who: str2(ica.who, 400),
+      who: str3(ica.who, 400),
       pains: lines(ica.pains),
       desires: lines(ica.desires),
       objections: lines(ica.objections),
@@ -18699,11 +19308,11 @@ function sanitizeAgencyOs(raw) {
       villains: lines(ica.villains)
     }),
     offer: drop({
-      name: str2(offer.name, 120),
-      promise: str2(offer.promise, 400),
+      name: str3(offer.name, 120),
+      promise: str3(offer.promise, 400),
       valueStack: lines(offer.valueStack),
-      price: str2(offer.price, 120),
-      guarantee: str2(offer.guarantee, 600),
+      price: str3(offer.price, 120),
+      guarantee: str3(offer.guarantee, 600),
       accelerators: lines(offer.accelerators)
     })
   });
@@ -18712,7 +19321,7 @@ function sanitizeAgencyOs(raw) {
 function legacyBranding(profileFile) {
   try {
     const raw = JSON.parse(fs9.readFileSync(path8.join(path8.dirname(profileFile), "cockpit-state.json"), "utf8"));
-    return { agencyName: str2(raw?.agencyName, 80), accent: normalizeAccent(raw?.agencyAccent) };
+    return { agencyName: str3(raw?.agencyName, 80), accent: normalizeAccent(raw?.agencyAccent) };
   } catch {
     return {};
   }
@@ -18822,7 +19431,7 @@ function demoRailProfile(p = readAgencyProfile(), ghl, demoDays = 7) {
   if (p.accent) rec.accent = p.accent;
   if (p.logoUrl) rec.logoUrl = p.logoUrl;
   if (p.sender) rec.senderIdentity = p.sender;
-  const g = drop({ locationId: str2(ghl?.locationId), triggerTag: str2(ghl?.triggerTag, 60) });
+  const g = drop({ locationId: str3(ghl?.locationId), triggerTag: str3(ghl?.triggerTag, 60) });
   if (g) rec.ghl = g;
   rec.demoDays = num(demoDays) ?? 7;
   return rec;
@@ -19064,9 +19673,6 @@ var init_telemetry_transport = __esm({
 });
 
 // src/interactive-capture.ts
-function chromeProfileDir() {
-  return path9.join(appDataDir(), "chrome-profile");
-}
 function captureStatePath() {
   return path9.join(appDataDir(), "interactive-capture.json");
 }
@@ -19235,9 +19841,9 @@ function planFromPayload(payload) {
   return payload?.plan === "command-os" ? "command-os" : "mcp";
 }
 function legacyDeviceFingerprint() {
-  const os8 = require("node:os");
+  const os9 = require("node:os");
   const crypto9 = require("node:crypto");
-  const raw = `${os8.hostname()}:${os8.userInfo().username}:${os8.platform()}:${os8.arch()}`;
+  const raw = `${os9.hostname()}:${os9.userInfo().username}:${os9.platform()}:${os9.arch()}`;
   return crypto9.createHash("sha256").update(raw).digest("hex").slice(0, 16);
 }
 function deviceFingerprint(opts) {
@@ -19277,7 +19883,7 @@ function base64urlDecode(s) {
 async function getPublicKey() {
   if (cachedPublicKey) return cachedPublicKey;
   const raw = Buffer.from(ATTESTATION_PUBLIC_KEY_B64, "base64");
-  const key = await import_node_crypto3.webcrypto.subtle.importKey(
+  const key = await import_node_crypto4.webcrypto.subtle.importKey(
     "raw",
     raw,
     { name: "Ed25519" },
@@ -19325,7 +19931,7 @@ async function verifyAttestation(token2, bindings, now = /* @__PURE__ */ new Dat
   let signatureValid;
   try {
     const key = await getPublicKey();
-    signatureValid = await import_node_crypto3.webcrypto.subtle.verify({ name: "Ed25519" }, key, signatureBytes, payloadBytes);
+    signatureValid = await import_node_crypto4.webcrypto.subtle.verify({ name: "Ed25519" }, key, signatureBytes, payloadBytes);
   } catch {
     return { ok: false, reason: "bad-signature" };
   }
@@ -19357,11 +19963,11 @@ function shouldRenew(payload, now = /* @__PURE__ */ new Date()) {
   const remainingMs = expiry - now.getTime();
   return remainingMs < 7 * 24 * 60 * 60 * 1e3;
 }
-var import_node_crypto3, ATTESTATION_PUBLIC_KEY_B64, ATTESTATION_VERSION, ATTESTATION_TTL_DAYS, ATTESTATION_GRACE_DAYS, cachedPublicKey;
+var import_node_crypto4, ATTESTATION_PUBLIC_KEY_B64, ATTESTATION_VERSION, ATTESTATION_TTL_DAYS, ATTESTATION_GRACE_DAYS, cachedPublicKey;
 var init_attestation = __esm({
   "src/attestation.ts"() {
     "use strict";
-    import_node_crypto3 = require("node:crypto");
+    import_node_crypto4 = require("node:crypto");
     ATTESTATION_PUBLIC_KEY_B64 = "8KJo8V3Z7ngeToIQfOXpKdlr/EA34hXJVEIpW0A7wqs=";
     ATTESTATION_VERSION = 1;
     ATTESTATION_TTL_DAYS = 30;
@@ -20694,23 +21300,23 @@ function moneySummary(subs, invoices, charges, products, now = /* @__PURE__ */ n
     }
   }
   const nowS = now.getTime() / 1e3;
-  const within = (t, days) => t <= nowS && nowS - t <= days * 86400;
+  const within2 = (t, days) => t <= nowS && nowS - t <= days * 86400;
   const r7 = /* @__PURE__ */ new Map(), r30 = /* @__PURE__ */ new Map();
   let c7 = 0, c30 = 0, failed30 = 0;
   for (const c of charges) {
-    if (!within(c.created, 30)) continue;
+    if (!within2(c.created, 30)) continue;
     if (c.status === "failed") {
       failed30++;
       continue;
     }
     if (c.status !== "succeeded") continue;
     const currency = upper(c.currency);
-    const net = fromMinor(c.amount - (c.amount_refunded ?? 0), currency) ?? 0;
-    if (net <= 0) continue;
-    add(r30, currency, net);
+    const net2 = fromMinor(c.amount - (c.amount_refunded ?? 0), currency) ?? 0;
+    if (net2 <= 0) continue;
+    add(r30, currency, net2);
     c30++;
-    if (within(c.created, 7)) {
-      add(r7, currency, net);
+    if (within2(c.created, 7)) {
+      add(r7, currency, net2);
       c7++;
     }
   }
@@ -20718,7 +21324,7 @@ function moneySummary(subs, invoices, charges, products, now = /* @__PURE__ */ n
   for (const i of invoices) {
     const paidAt = i.status_transitions?.paid_at;
     const subId = i.parent?.subscription_details?.subscription ?? i.subscription;
-    if (i.status !== "paid" || !paidAt || !within(paidAt, 30) || !subId) continue;
+    if (i.status !== "paid" || !paidAt || !within2(paidAt, 30) || !subId) continue;
     const currency = upper(i.currency);
     const paid = fromMinor(i.amount_paid, currency);
     if (currency && paid) add(recurring, currency, paid);
@@ -20789,7 +21395,7 @@ function saveCalendarSecret(secret) {
     const validated = SecretSchema.parse(secret);
     const dir = ensureAppDataDir();
     if (process.platform !== "win32") fs12.chmodSync(dir, 448);
-    tmp = `${googleCalendarPath()}.${(0, import_node_crypto4.randomUUID)()}.tmp`;
+    tmp = `${googleCalendarPath()}.${(0, import_node_crypto5.randomUUID)()}.tmp`;
     fs12.writeFileSync(tmp, JSON.stringify(validated) + "\n", { mode: 384, flag: "wx" });
     fs12.renameSync(tmp, googleCalendarPath());
   } catch {
@@ -20812,13 +21418,13 @@ function removeCalendarSecret() {
     throw new Error("The Google Calendar sign-in could not be removed from this machine.");
   }
 }
-var fs12, path11, import_node_crypto4, import_zod51, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
+var fs12, path11, import_node_crypto5, import_zod51, CALENDAR_SCOPE, SecretSchema, googleCalendarPath;
 var init_google_calendar_store = __esm({
   "src/command-os/connectors/google-calendar-store.ts"() {
     "use strict";
     fs12 = __toESM(require("node:fs"));
     path11 = __toESM(require("node:path"));
-    import_node_crypto4 = require("node:crypto");
+    import_node_crypto5 = require("node:crypto");
     import_zod51 = require("zod");
     init_credentials_store();
     CALENDAR_SCOPE = "https://www.googleapis.com/auth/calendar.readonly";
@@ -20951,16 +21557,16 @@ function createGoogleCalendar(deps = {}) {
     requireOnlyCalendar(result.scope);
     return result.access_token;
   }
-  async function pages(path44, access, item, query = {}) {
+  async function pages(path45, access, item, query = {}) {
     const result = [];
     const seen = /* @__PURE__ */ new Set();
     let pageToken;
     for (let page = 0; page < 100; page++) {
-      const url = new URL(`${API}${path44}`);
+      const url = new URL(`${API}${path45}`);
       for (const [k, v] of Object.entries(query)) url.searchParams.set(k, v);
       if (pageToken) url.searchParams.set("pageToken", pageToken);
       const data = parsed(
-        import_zod52.z.object({ items: import_zod52.z.array(item).optional(), nextPageToken: import_zod52.z.string().optional(), kind: import_zod52.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path44.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
+        import_zod52.z.object({ items: import_zod52.z.array(item).optional(), nextPageToken: import_zod52.z.string().optional(), kind: import_zod52.z.string().optional() }).refine((p) => p.items !== void 0 || p.kind === (path45.endsWith("/events") ? "calendar#events" : "calendar#calendarList")),
         await request(url.href, { headers: { Authorization: `Bearer ${access}` } })
       );
       result.push(...data.items ?? []);
@@ -20978,9 +21584,9 @@ function createGoogleCalendar(deps = {}) {
   async function start() {
     const app = appConfig();
     clearPending2();
-    const state = (0, import_node_crypto5.randomBytes)(32).toString("base64url");
-    const verifier = (0, import_node_crypto5.randomBytes)(32).toString("base64url");
-    const server2 = (deps.createServer ?? import_node_http.createServer)((req, res) => {
+    const state = (0, import_node_crypto6.randomBytes)(32).toString("base64url");
+    const verifier = (0, import_node_crypto6.randomBytes)(32).toString("base64url");
+    const server2 = (deps.createServer ?? import_node_http2.createServer)((req, res) => {
       res.setHeader("Content-Type", "text/plain; charset=utf-8");
       res.setHeader("Cache-Control", "no-store");
       res.setHeader("Referrer-Policy", "no-referrer");
@@ -21033,7 +21639,7 @@ function createGoogleCalendar(deps = {}) {
       response_type: "code",
       scope: CALENDAR_SCOPE,
       state,
-      code_challenge: (0, import_node_crypto5.createHash)("sha256").update(verifier).digest("base64url"),
+      code_challenge: (0, import_node_crypto6.createHash)("sha256").update(verifier).digest("base64url"),
       code_challenge_method: "S256",
       access_type: "offline",
       prompt: "consent"
@@ -21163,13 +21769,13 @@ function createGoogleCalendar(deps = {}) {
     close: clearPending2
   };
 }
-var import_node_http, import_node_crypto5, import_node_child_process, import_zod52, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema, eventSchema;
+var import_node_http2, import_node_crypto6, import_node_child_process, import_zod52, TOKEN_URL, REVOKE_URL, API, tokenSchema, calendarSchema, eventSchema;
 var init_google_calendar = __esm({
   "src/command-os/connectors/google-calendar.ts"() {
     "use strict";
     init_any_signal();
-    import_node_http = require("node:http");
-    import_node_crypto5 = require("node:crypto");
+    import_node_http2 = require("node:http");
+    import_node_crypto6 = require("node:crypto");
     import_node_child_process = require("node:child_process");
     import_zod52 = require("zod");
     init_credentials_store();
@@ -21211,8 +21817,8 @@ function redactConnectionKey(value, key) {
   return value;
 }
 function stripeFetcher(key, signal) {
-  return async (path44, query) => {
-    const url = new URL(`https://api.stripe.com${path44}`);
+  return async (path45, query) => {
+    const url = new URL(`https://api.stripe.com${path45}`);
     for (const [k, v] of Object.entries(query ?? {})) url.searchParams.set(k, v);
     const res = await fetch(url, { headers: { Authorization: `Bearer ${key}` }, signal });
     if (!res.ok) {
@@ -21301,11 +21907,11 @@ var init_handlers = __esm({
 });
 
 // src/command-os/connectors/stripe-read.ts
-async function listAll(f, path44, schema, extra = {}) {
+async function listAll(f, path45, schema, extra = {}) {
   const out = [];
   let after;
   for (let page = 0; page < 20; page++) {
-    const result = import_zod53.z.object({ data: import_zod53.z.array(schema), has_more: import_zod53.z.boolean().optional() }).parse(await f(path44, { limit: "100", ...extra, ...after ? { starting_after: after } : {} }));
+    const result = import_zod53.z.object({ data: import_zod53.z.array(schema), has_more: import_zod53.z.boolean().optional() }).parse(await f(path45, { limit: "100", ...extra, ...after ? { starting_after: after } : {} }));
     out.push(...result.data);
     if (!result.has_more) return out;
     const last = import_zod53.z.object({ id: import_zod53.z.string().min(1) }).parse(result.data.at(-1));
@@ -21406,25 +22012,25 @@ function sanitizeEngagement(raw) {
     // "client" downstream. Coercing a typo to `software` would silently take a
     // real client off the build board — the failure that costs work.
     kind: ENGAGEMENT_KINDS.includes(r.kind) ? r.kind : void 0,
-    clientName: str2(r.clientName, 120),
-    offer: str2(r.offer, 120),
+    clientName: str3(r.clientName, 120),
+    offer: str3(r.offer, 120),
     price: num(r.price),
     cadence: r.cadence === "monthly" || r.cadence === "one-time" ? r.cadence : void 0,
-    currency: str2(r.currency, 8),
+    currency: str3(r.currency, 8),
     startedOn: isoDate(r.startedOn),
     renewsOn: isoDate(r.renewsOn),
     status: ENGAGEMENT_STATUSES.includes(r.status) ? r.status : void 0,
-    owner: str2(r.owner, 80),
-    sops: list(r.sops, (s) => str2(s, MAX_SOP2)),
+    owner: str3(r.owner, 80),
+    sops: list(r.sops, (s) => str3(s, MAX_SOP2)),
     emails: list(r.emails, (s) => {
-      const v = str2(s, 254)?.trim().toLowerCase();
+      const v = str3(s, 254)?.trim().toLowerCase();
       return isEmailAddress(v) ? v : void 0;
     }),
-    notes: str2(r.notes, MAX_NOTES)
+    notes: str3(r.notes, MAX_NOTES)
   };
   const { kind: _classification, ...content } = rec;
   if (!drop(content)) return void 0;
-  const stamped = str2(r.updated_at, 40);
+  const stamped = str3(r.updated_at, 40);
   return stamped ? { ...rec, updated_at: stamped } : rec;
 }
 function sanitizeEngagements(raw) {
@@ -21433,13 +22039,13 @@ function sanitizeEngagements(raw) {
   const clients = /* @__PURE__ */ Object.create(null);
   if (src && typeof src === "object" && !Array.isArray(src)) {
     for (const [id, rec] of Object.entries(src).slice(0, MAX_CLIENTS)) {
-      const key = str2(id, 64);
+      const key = str3(id, 64);
       if (!key || FORBIDDEN_KEY.has(key)) continue;
       const clean2 = sanitizeEngagement(rec);
       if (clean2) clients[key] = clean2;
     }
   }
-  return { v: 1, clients: { ...clients }, updated_at: str2(r.updated_at, 40) };
+  return { v: 1, clients: { ...clients }, updated_at: str3(r.updated_at, 40) };
 }
 function readClientEngagements(file2 = clientEngagementsPath()) {
   try {
@@ -21466,7 +22072,7 @@ function mergeEngagement(existing, patch) {
   return sanitizeEngagement({ ...merged });
 }
 function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath()) {
-  const id = str2(locationId2, 64);
+  const id = str3(locationId2, 64);
   if (!id || FORBIDDEN_KEY.has(id)) throw new Error("An id is required.");
   const stamp = () => {
     try {
@@ -25248,7 +25854,9 @@ function stageBlockedBy(stages, stage) {
   return null;
 }
 function verifyReadbackPrompt(ctx) {
-  return "\nAccount read-back has already run in code. These records decide existence, regardless of RESULT ok or dependencyChecks: " + JSON.stringify(ctx?.readback ?? []) + "\nDo not contradict any record. Keep dependencyChecks for evidence you establish yourself. The final report replaces the standing Checked and Not checked headings with the deterministic roll-call. Use the live URL on the funnel or page record, and the triggerTags and id on the speed-to-lead workflow record, for the existing fake-client check. Do not invent a URL or a trigger tag. Before calling verify_funnel, disclose that it submits a marked test lead and may fire this client's automations once. Preserve the existing verify_funnel submission and cleanup. If the funnel has no working page, report the reason that live proof could not run. Add liveProof:{ok,evidence} to RESULT. Set liveProof.ok true only when verify_funnel reports that the marked lead arrived and the test contact was deleted. Quote that result's evidence, including its contact id and cleanup result. Otherwise set liveProof.ok false with the check's own failure or the reason it could not run.\n";
+  return "\nAccount read-back has already run in code. These records decide existence, regardless of RESULT ok or dependencyChecks: " + JSON.stringify(ctx?.readback ?? []) + `
+Do not contradict any record. Keep dependencyChecks for evidence you establish yourself. The final report replaces the standing Checked and Not checked headings with the deterministic roll-call. Use the live URL on the funnel or page record, and the triggerTags and id on the speed-to-lead workflow record, for the existing fake-client check. Do not invent a URL or a trigger tag. Before calling verify_funnel, disclose that it submits a marked test lead and may fire this client's automations once. Preserve the existing verify_funnel submission. verify_funnel never deletes anything: report the contacts it lists as carrying the test address, for the member to check before deleting any. If the funnel has no working page, report the reason that live proof could not run. Add liveProof:{ok,evidence} to RESULT. Set liveProof.ok true only when verify_funnel's "Lead actually landed" check passed (a contact carrying the run's test address appeared after the submit). Quote that result's evidence, including its contact id and the contacts it lists as carrying the test address. Otherwise set liveProof.ok false with the check's own failure or the reason it could not run.
+`;
 }
 function buildClaudeArgs(spec, locationId2, locationName, ctx) {
   return [
@@ -28562,7 +29170,7 @@ function remember(id, readAt) {
   const times = readTimes();
   times[id] = readAt;
   ensureAppDataDir();
-  const tmp = `${timesPath()}.${(0, import_node_crypto6.randomUUID)()}.tmp`;
+  const tmp = `${timesPath()}.${(0, import_node_crypto7.randomUUID)()}.tmp`;
   try {
     fs21.writeFileSync(tmp, JSON.stringify(times) + "\n", { mode: 384, flag: "wx" });
     fs21.renameSync(tmp, timesPath());
@@ -28615,14 +29223,14 @@ function money2(rows2) {
 async function readBriefPanels(deps) {
   return Promise.all(CONNECTOR_REGISTRY.flatMap((entry) => entry.panel ? [entry.panel(briefPanelDeps(deps))] : []));
 }
-var fs21, path19, import_node_crypto6, import_zod57, MoneySchema, TotalsSchema, SummarySchema, BriefPanelSchema, TimesSchema, timesPath, NotConnected, safeLink, amountText, stripePanel, slackPanel, calendarPanel;
+var fs21, path19, import_node_crypto7, import_zod57, MoneySchema, TotalsSchema, SummarySchema, BriefPanelSchema, TimesSchema, timesPath, NotConnected, safeLink, amountText, stripePanel, slackPanel, calendarPanel;
 var init_brief_panels = __esm({
   "src/command-os/connectors/brief-panels.ts"() {
     "use strict";
     init_brief_deadline();
     fs21 = __toESM(require("node:fs"));
     path19 = __toESM(require("node:path"));
-    import_node_crypto6 = require("node:crypto");
+    import_node_crypto7 = require("node:crypto");
     import_zod57 = require("zod");
     init_credentials_store();
     init_brief_row();
@@ -28840,7 +29448,7 @@ var init_client_capabilities = __esm({
       { key: "reputation", label: "Reputation and content", blurb: "Reviews, social posts and the blog." },
       { key: "health", label: "Health and handoff", blurb: "Proving it works, keeping it clean, and handing it over." }
     ];
-    N = (label, path44, params, key, nameField, version) => ({ label, path: path44, params, key, nameField, version });
+    N = (label, path45, params, key, nameField, version) => ({ label, path: path45, params, key, nameField, version });
     W = (read2, extra) => ({ ...read2, ...extra });
     AI2 = "2021-04-15";
     CAPABILITIES = [
@@ -29130,7 +29738,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.88.2",
+      version: "3.88.4",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -29658,7 +30266,7 @@ function resultHtml(run, now, clientName, action) {
   if (run.status === "failed") {
     return {
       head: pageHead("The Workflow Audit Pro could not run", esc2(run.error ?? "Unknown error"), action),
-      rest: callout("warn", "", esc2(run.cleanup?.detail ?? "Nothing was created in the account."))
+      rest: callout("warn", "", esc2(run.cleanup?.detail ?? "No test lead was sent."))
     };
   }
   const f = run.findings;
@@ -29764,7 +30372,7 @@ function startForm(d, inlineSubmit) {
 <div class="cds-field"><label for="owner-email">Your email</label><div class="hint" id="owner-email-hint">The test lead uses it, so every message comes to you.</div><input class="cds-input" id="owner-email" name="ownerEmail" type="email" required value="${esc2(d.ownerEmail ?? "")}" autocomplete="email" aria-describedby="owner-email-hint"></div>
 <div class="cds-field"><label for="test-phone">Test phone, optional</label><div class="hint" id="test-phone-hint">A phone you own; texts will really send to it.</div><input class="cds-input" id="test-phone" name="testPhone" type="tel" autocomplete="tel" placeholder="+1 555 010 0100" aria-describedby="test-phone-hint"></div>
 <div class="cds-field"><label for="watch">Watch for</label><select class="cds-select" id="watch" name="watchMinutes"><option value="auto" selected>Automatic: until the last planned message, plus 2 minutes</option><option value="10">10 minutes</option><option value="30">30 minutes</option><option value="60">1 hour</option><option value="240">4 hours</option><option value="1440">24 hours</option></select></div>
-<label class="cds-check"><input type="checkbox" id="keep" name="keepLead"><span>Keep the test lead afterwards so I can look at it in GoHighLevel</span></label>
+
 <label class="cds-check"><input type="checkbox" id="ff" name="fastForward"><span>Fast-forward: test long workflows in minutes.<small>A temporary copy with every step kept and every wait cut to 1 minute; staff alerts, tasks and lead assignments go to one person you choose, marked TEST; the copy is deleted afterwards.</small></span></label>
 <div class="cds-field" id="alert-to-wrap" hidden><label for="alert-to">Staff alerts, tasks and assignments go to</label><div class="hint" id="alert-to-hint">Instead of your staff, marked TEST.</div><select class="cds-select" id="alert-to" name="alertUserId" aria-describedby="alert-to-hint"></select></div>
 <fieldset class="cds-field" id="hooks" hidden><legend class="lbl">Outside services these workflows send the lead to</legend><div class="wf" id="hooks-list"></div></fieldset>
@@ -29772,7 +30380,7 @@ ${callout("warn", "", "The test lead has no first name, on purpose. The workflow
 ${inlineSubmit ? `<div class="cds-row"><button class="cds-btn ghost" type="submit" id="start-btn" disabled>Start the check</button></div>` : ""}
 <p class="cds-callout result" id="start-result" role="status" aria-live="polite"></p>
 </form>`;
-  return panel("New check", `${d.run?.status === "done" ? "Run another check" : "Run the Workflow Audit Pro"} on ${esc2(d.client.name)}`, "Writes one test contact, then removes it", form, ` id="start"`, "cds-no-print");
+  return panel("New check", `${d.run?.status === "done" ? "Run another check" : "Run the Workflow Audit Pro"} on ${esc2(d.client.name)}`, "Sends one test lead, then lists the contacts that carry its address", form, ` id="start"`, "cds-no-print");
 }
 function shopperPageHtml(d, seatToken, seatHeader) {
   const picker = `<form class="picker cds-no-print" method="get" action="/shopper"><div class="cds-field"><label for="client">Client account</label><select class="cds-select" id="client" name="client" onchange="this.form.submit()"><option value="">Choose a client\u2026</option>${d.accounts.map((a) => `<option value="${esc2(a.locationId)}"${d.client?.locationId === a.locationId ? " selected" : ""}>${esc2(a.name)}</option>`).join("")}</select></div><noscript><button class="cds-btn ghost" type="submit">Open</button></noscript></form>`;
@@ -29818,7 +30426,7 @@ ${COCKPIT_TYPE_JS}
   if(document.getElementById("ff").checked&&form.querySelector('[data-hook-blocked]')){say("One of these workflows sends the lead to an address built from a merge field, so fast-forward cannot test it yet. Untick that workflow, or run without fast-forward.");return}
   var btn=document.getElementById("start-btn");btn.disabled=true;say("Starting\u2026");
   var hosts=[].slice.call(form.querySelectorAll('input[name="hook"]:checked')).map(function(i){return i.value});
-  post("/api/shopper/start",{client:client,workflowIds:ids,ownerEmail:document.getElementById("owner-email").value,testPhone:document.getElementById("test-phone").value||undefined,watchMinutes:(document.getElementById("watch").value==="auto"?undefined:Number(document.getElementById("watch").value)),keepLead:document.getElementById("keep").checked,fastForward:document.getElementById("ff").checked,allowedHosts:hosts,alertUserId:(document.getElementById("alert-to").value||undefined)})
+  post("/api/shopper/start",{client:client,workflowIds:ids,ownerEmail:document.getElementById("owner-email").value,testPhone:document.getElementById("test-phone").value||undefined,watchMinutes:(document.getElementById("watch").value==="auto"?undefined:Number(document.getElementById("watch").value)),fastForward:document.getElementById("ff").checked,allowedHosts:hosts,alertUserId:(document.getElementById("alert-to").value||undefined)})
    .then(function(r){if(r.ok){location.reload()}else{btn.disabled=false;say(r.error||"That did not start.")}})
    .catch(function(){btn.disabled=false;say("That did not start. Check that Command OS is still running.")});
  })}
@@ -30158,8 +30766,26 @@ async function checkLinks(urls, ownHosts, fetcher, timeoutMs = 1e4) {
     const ctrl = new AbortController();
     const timer = setTimeout(() => ctrl.abort(), timeoutMs);
     try {
-      const r = await fetcher(url, { method: "GET", redirect: "follow", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
-      results.push(r.status < 400 ? { url, state: "ok", detail: `Opened (HTTP ${r.status}).` } : { url, state: "broken", detail: `The page answered HTTP ${r.status}.` });
+      let cur = url;
+      let r = await fetcher(cur, { method: "GET", redirect: "manual", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
+      let stopped = null;
+      for (let hop = 0; r.status >= 300 && r.status < 400 && r.location; hop++) {
+        let next;
+        try {
+          next = new URL(r.location, cur).toString();
+        } catch {
+          stopped = "It redirects to an address that is not readable, so it was not followed.";
+          break;
+        }
+        const why = hop >= MAX_LINK_HOPS ? "it redirects more than 5 times" : skipReason(next, ownHosts)?.replace(/^Not opened: /, "") ?? null;
+        if (why) {
+          stopped = `It redirects to ${next}, which was not opened: ${why}`;
+          break;
+        }
+        cur = next;
+        r = await fetcher(cur, { method: "GET", redirect: "manual", signal: ctrl.signal, headers: { "User-Agent": "Mozilla/5.0 (Command OS secret shopper)" } });
+      }
+      results.push(stopped ? { url, state: "skipped", detail: stopped } : r.status < 400 ? { url, state: "ok", detail: `Opened (HTTP ${r.status}).` } : { url, state: "broken", detail: `The page answered HTTP ${r.status}.` });
     } catch (e) {
       const why = ctrl.signal.aborted ? `It did not answer within ${Math.round(timeoutMs / 1e3)} seconds.` : `It could not be reached (${e instanceof Error ? e.message : String(e)}).`;
       results.push({ url, state: "broken", detail: why });
@@ -30173,7 +30799,7 @@ function htmlToText(body) {
   if (!/<(?:p|div|br|table|td|span|a|html|body|h\d|li|style|strong|em|b|i)(?:\s+[a-z][a-z0-9:-]*(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s"'<>=]+))?)*\s*\/?>/i.test(body)) return body;
   return body.replace(/<(style|script|head)\b[\s\S]*?<\/\1>/gi, " ").replace(/<br\s*\/?>/gi, "\n").replace(/<\/(?:p|div|tr|li|h\d|table)>/gi, "\n").replace(/<\/(?:td|th)>/gi, "\n").replace(/<[^>]+>/g, "").replace(/&nbsp;/gi, "\xA0").replace(/&amp;/gi, "&").replace(/&lt;/gi, "<").replace(/&gt;/gi, ">").replace(/&quot;/gi, '"').replace(/&#39;|&apos;/gi, "'").replace(/&#x([0-9a-f]+);/gi, (_m, h) => String.fromCodePoint(parseInt(h, 16))).replace(/&#(\d+);/g, (_m, d) => String.fromCodePoint(Number(d))).replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
 }
-var URL_RE, HREF_RE, TRACKING_PATH, UNSUB;
+var URL_RE, HREF_RE, TRACKING_PATH, UNSUB, MAX_LINK_HOPS;
 var init_links = __esm({
   "src/command-os/shopper/links.ts"() {
     "use strict";
@@ -30181,6 +30807,7 @@ var init_links = __esm({
     HREF_RE = /\bhref\s*=\s*["']([^"']+)["']/gi;
     TRACKING_PATH = /\/(?:c|o|l|ls|tl|t|r|e|wf|track|click|open)\/|\/ls\/click|[?&](?:upn|trigger_link|utm_id|mc_cid|_hs(?:enc|mi))=/i;
     UNSUB = /unsubscribe|opt-?out|\/preferences|email-preferences|unsubscribe-view|\/emails\/builder\//i;
+    MAX_LINK_HOPS = 5;
   }
 });
 
@@ -30213,9 +30840,9 @@ var init_mask = __esm({
 
 // src/command-os/shopper/steps.ts
 function reasonOf(meta) {
-  const resp = asObj2(asObj2(meta.actionFrom).response);
-  const data = asObj2(meta.data);
-  const cands = [str3(resp.msg), str3(meta.error), str3(meta.message), str3(data.message), str3(data.msg), str3(meta.reason)];
+  const resp = asObj3(asObj3(meta.actionFrom).response);
+  const data = asObj3(meta.data);
+  const cands = [str4(resp.msg), str4(meta.error), str4(meta.message), str4(data.message), str4(data.msg), str4(meta.reason)];
   return maskSecrets((cands.find((c) => c && c.trim()) ?? "").replace(/(Webhook Action error: )+/g, "Webhook error: ").trim());
 }
 function translate(type, outcome, reason3, retryAt) {
@@ -30241,22 +30868,22 @@ function translate(type, outcome, reason3, retryAt) {
   };
 }
 function judgeSteps(rawRows, contactId, workflowNames) {
-  const mine = rawRows.map(asObj2).filter((r) => str3(r.contactId) === contactId).sort((a, b) => (Date.parse(str3(a.timestamp) ?? str3(a.createdAt) ?? "") || 0) - (Date.parse(str3(b.timestamp) ?? str3(b.createdAt) ?? "") || 0) || (str3(b.status) === "added_to_workflow" ? 1 : 0) - (str3(a.status) === "added_to_workflow" ? 1 : 0));
+  const mine = rawRows.map(asObj3).filter((r) => str4(r.contactId) === contactId).sort((a, b) => (Date.parse(str4(a.timestamp) ?? str4(a.createdAt) ?? "") || 0) - (Date.parse(str4(b.timestamp) ?? str4(b.createdAt) ?? "") || 0) || (str4(b.status) === "added_to_workflow" ? 1 : 0) - (str4(a.status) === "added_to_workflow" ? 1 : 0));
   const rows2 = [];
   const passOf = /* @__PURE__ */ new Map();
   for (const r of mine) {
-    const status = (str3(r.status) ?? "").toLowerCase();
-    const type = str3(r.type) ?? "";
+    const status = (str4(r.status) ?? "").toLowerCase();
+    const type = str4(r.type) ?? "";
     if (status === "retry") continue;
-    const wfId = str3(r.workflowId) ?? "";
+    const wfId = str4(r.workflowId) ?? "";
     if (status === "added_to_workflow") passOf.set(wfId, (passOf.get(wfId) ?? 0) + 1);
     const known = STATUS_OUTCOME[status];
     const outcome = type === "condition" && status === "success" ? "branch" : known ?? "unclear";
-    const at = Date.parse(str3(r.timestamp) ?? str3(r.createdAt) ?? "") || 0;
-    const retryAt = Date.parse(str3(r.nextExecutionAt) ?? "") || void 0;
-    const reason3 = reasonOf(asObj2(r.meta));
+    const at = Date.parse(str4(r.timestamp) ?? str4(r.createdAt) ?? "") || 0;
+    const retryAt = Date.parse(str4(r.nextExecutionAt) ?? "") || void 0;
+    const reason3 = reasonOf(asObj3(r.meta));
     const gaveUp = status === "failed_retry_limit_reached";
-    const base = { workflowId: wfId, workflowName: workflowNames[wfId] ?? "Workflow", stepId: str3(r.stepId), stepName: str3(r.stepName) ?? type, type, outcome, at, pass: passOf.get(wfId) ?? 1 };
+    const base = { workflowId: wfId, workflowName: workflowNames[wfId] ?? "Workflow", stepId: str4(r.stepId), stepName: str4(r.stepName) ?? type, type, outcome, at, pass: passOf.get(wfId) ?? 1 };
     let detail = "";
     if (outcome === "branch") detail = `Took the "${base.stepName}" path.`;
     else if (outcome === "entered") detail = "The test lead entered this workflow.";
@@ -30361,13 +30988,13 @@ async function auditSteps(reader, workflowIds, workflowNames, contactId, fromMs,
   const judged = judgeSteps(all, contactId, workflowNames);
   return { ...judged, ...unread.length ? { unreadWorkflows: unread } : {}, ...partial.length ? { partialWorkflows: partial } : {} };
 }
-var asObj2, str3, STATUS_OUTCOME, localTime, STEP_LOG_LIMIT;
+var asObj3, str4, STATUS_OUTCOME, localTime, STEP_LOG_LIMIT;
 var init_steps = __esm({
   "src/command-os/shopper/steps.ts"() {
     "use strict";
     init_mask();
-    asObj2 = (v) => v && typeof v === "object" ? v : {};
-    str3 = (v) => typeof v === "string" ? v : void 0;
+    asObj3 = (v) => v && typeof v === "object" ? v : {};
+    str4 = (v) => typeof v === "string" ? v : void 0;
     STATUS_OUTCOME = {
       success: "ran",
       executed: "ran",
@@ -30409,24 +31036,24 @@ __export(fastforward_exports, {
   webhookDestinations: () => webhookDestinations
 });
 function windowText(raw) {
-  const w = asObj3(raw);
+  const w = asObj4(raw);
   if (!w.start || !w.end) return void 0;
   const days = asArr2(w.days).map((d) => typeof d === "number" ? DAY_NAMES[d] ?? String(d) : String(d));
-  const cond = str4(w.condition);
-  return `runs only ${str4(w.start)}\u2013${str4(w.end)}${days.length ? ` on ${days.join(", ")}` : ""}${cond ? ` (${cond})` : ""}`;
+  const cond = str5(w.condition);
+  return `runs only ${str5(w.start)}\u2013${str5(w.end)}${days.length ? ` on ${days.join(", ")}` : ""}${cond ? ` (${cond})` : ""}`;
 }
 function rerouteAlert(attrs, owner) {
-  const channel = str4(attrs.type) ?? "notification";
+  const channel = str5(attrs.type) ?? "notification";
   if (channel === "notification") {
-    const n = asObj3(attrs.notification);
-    attrs.notification = { body: n.body ?? "", title: `TEST: ${str4(n.title) ?? ""}`.trim(), userType: "user", redirectPage: n.redirectPage ?? "contact", type: n.type ?? "send_notification", selectedUser: owner };
+    const n = asObj4(attrs.notification);
+    attrs.notification = { body: n.body ?? "", title: `TEST: ${str5(n.title) ?? ""}`.trim(), userType: "user", redirectPage: n.redirectPage ?? "contact", type: n.type ?? "send_notification", selectedUser: owner };
     delete attrs.email;
     delete attrs.sms;
     return void 0;
   }
   if (channel === "email") {
-    const e = asObj3(attrs.email);
-    attrs.email = { isCloned: false, html: e.html ?? "", subject: `TEST: ${str4(e.subject) ?? ""}`.trim(), selectedUser: [owner], userType: "user", attachments: [] };
+    const e = asObj4(attrs.email);
+    attrs.email = { isCloned: false, html: e.html ?? "", subject: `TEST: ${str5(e.subject) ?? ""}`.trim(), selectedUser: [owner], userType: "user", attachments: [] };
     delete attrs.notification;
     delete attrs.sms;
     return void 0;
@@ -30434,65 +31061,65 @@ function rerouteAlert(attrs, owner) {
   return channel;
 }
 function staffRecipients(step) {
-  const type = str4(step.type) ?? "";
-  const a = asObj3(step.attributes);
+  const type = str5(step.type) ?? "";
+  const a = asObj4(step.attributes);
   if (type === "internal_notification") {
     const out = [];
     for (const k of ["notification", "email", "sms"]) {
-      const ch = asObj3(a[k]);
+      const ch = asObj4(a[k]);
       if (!Object.keys(ch).length) continue;
-      if (str4(ch.userType) !== "user") out.push(`everyone (${k})`);
+      if (str5(ch.userType) !== "user") out.push(`everyone (${k})`);
       for (const u of Array.isArray(ch.selectedUser) ? ch.selectedUser : [ch.selectedUser]) if (typeof u === "string") out.push(u);
     }
     return out;
   }
-  if (type === "task-notification") return [str4(a.assignedTo) ?? "nobody"];
+  if (type === "task-notification") return [str5(a.assignedTo) ?? "nobody"];
   if (type === "assign_user") return [...asArr2(a.user_list), ...asArr2(a.customUserList)].map((u) => typeof u === "string" ? u : JSON.stringify(u));
   if (type === "internal_create_opportunity" || type === "internal_update_opportunity") {
-    return [...a.assignedTo !== void 0 ? [String(a.assignedTo)] : [], ...asArr2(a.__customInputFields__).map(asObj3).filter((f) => /assign/i.test(str4(f.filterField) ?? "")).map((f) => String(f.value))];
+    return [...a.assignedTo !== void 0 ? [String(a.assignedTo)] : [], ...asArr2(a.__customInputFields__).map(asObj4).filter((f) => /assign/i.test(str5(f.filterField) ?? "")).map((f) => String(f.value))];
   }
   return [];
 }
 function waitLength(a) {
-  const s = asObj3(a.startAfter);
+  const s = asObj4(a.startAfter);
   const v = Number(s.value);
-  const unit = (str4(s.type) ?? "").toLowerCase();
+  const unit = (str5(s.type) ?? "").toLowerCase();
   const word = unit.startsWith("min") ? "minute" : unit.startsWith("hour") ? "hour" : unit.startsWith("day") ? "day" : unit;
   return `${v} ${word}${v === 1 ? "" : "s"}`;
 }
 function webhookDestinations(sources) {
   const out = [];
   for (const s of sources) {
-    for (const n of s.templates.map(asObj3)) {
-      if (str4(n.type) !== "webhook") continue;
-      const url = str4(asObj3(n.attributes).url) ?? "";
+    for (const n of s.templates.map(asObj4)) {
+      if (str5(n.type) !== "webhook") continue;
+      const url = str5(asObj4(n.attributes).url) ?? "";
       const h = hostOf(url);
       const merged = /\{\{|%7b/i.test(url.split(/[/?#]/).slice(0, 3).join("/")) || h !== void 0 && /[{}]|%7b|%7d/i.test(h);
       const problem = merged ? "merge_field" : !h ? "no_address" : void 0;
-      out.push({ ...problem ? { problem } : { host: h }, stepName: str4(n.name) ?? "Webhook", workflowName: s.name });
+      out.push({ ...problem ? { problem } : { host: h }, stepName: str5(n.name) ?? "Webhook", workflowName: s.name });
     }
   }
   return out;
 }
 function planCopy(src, opts) {
   const allowed = opts.allowedHosts.map(normalizeHost).filter(Boolean);
-  const nodes = src.templates.map(asObj3);
+  const nodes = src.templates.map(asObj4);
   if (nodes.length === 0) return { ok: false, refusal: `"${src.name}" has no steps to test.` };
   if (nodes.length > 40) return { ok: false, refusal: `"${src.name}" has ${nodes.length} steps; fast-forward copies at most 40.` };
-  if (str4(src.status)?.toLowerCase() === "draft") return { ok: false, refusal: `"${src.name}" is still a draft, so real leads never go through it. Publish it first, or test it as it is.` };
+  if (str5(src.status)?.toLowerCase() === "draft") return { ok: false, refusal: `"${src.name}" is still a draft, so real leads never go through it. Publish it first, or test it as it is.` };
   const idMap = /* @__PURE__ */ new Map();
   for (const n of nodes) {
-    const id = str4(n.id);
-    if (id) idMap.set(id, import_node_crypto7.default.randomUUID());
+    const id = str5(n.id);
+    if (id) idMap.set(id, import_node_crypto8.default.randomUUID());
   }
   const remap = (id) => typeof id === "string" ? idMap.get(id) ?? id : id;
   const waits = [];
   const hosts = /* @__PURE__ */ new Set();
   const actions = [];
   for (const n of nodes) {
-    const type = str4(n.type) ?? "";
-    const name = str4(n.name) ?? type;
-    if (type === "if_else" || str4(n.nodeType)?.startsWith("branch") || str4(n.cat) === "conditions") {
+    const type = str5(n.type) ?? "";
+    const name = str5(n.name) ?? type;
+    if (type === "if_else" || str5(n.nodeType)?.startsWith("branch") || str5(n.cat) === "conditions") {
       return { ok: false, refusal: `"${src.name}" has an if/else branch ("${name}"). Fast-forward handles straight-line workflows for now; branches come next, with test leads that book, reply or stay silent.` };
     }
     if (type === "add_to_workflow" || type === "goto") {
@@ -30501,9 +31128,9 @@ function planCopy(src, opts) {
     if (!ALLOWED.has(type)) {
       return { ok: false, refusal: `"${src.name}" has a "${type}" step ("${name}") that fast-forward does not know how to copy safely yet, so nothing was copied.` };
     }
-    const attrs = { ...asObj3(n.attributes) };
+    const attrs = { ...asObj4(n.attributes) };
     if (type === "wait") {
-      if (str4(attrs.type) !== "time" || !asObj3(attrs.startAfter).type) {
+      if (str5(attrs.type) !== "time" || !asObj4(attrs.startAfter).type) {
         return { ok: false, refusal: `"${src.name}" has a wait that is not a plain time wait ("${name}"). Fast-forward handles time waits only for now.` };
       }
       waits.push(`${name}: ${waitLength(attrs)} in real life`);
@@ -30521,20 +31148,20 @@ function planCopy(src, opts) {
       Object.assign(attrs, { user_list: [o], traffic_split: "equally", traffic_weightage: { [o]: 1 }, traffic_index: [{ id: o, indexes: [1] }], total_index: 1 });
     }
     if (type === "internal_create_opportunity" || type === "internal_update_opportunity") {
-      const assigns = attrs.assignedTo !== void 0 || asArr2(attrs.__customInputFields__).map(asObj3).some((f) => /assign/i.test(str4(f.filterField) ?? ""));
+      const assigns = attrs.assignedTo !== void 0 || asArr2(attrs.__customInputFields__).map(asObj4).some((f) => /assign/i.test(str5(f.filterField) ?? ""));
       if (assigns) {
         if (!opts.ownerUserId) return { ok: false, refusal: 'During a fast-forward check, cards are assigned to one person instead of your staff, but nobody was chosen and your email is not a user in this account. Choose who should get them (on the Workflow Audit Pro screen, "Staff alerts, tasks and assignments go to"; in chat, name the person).' };
         if (attrs.assignedTo !== void 0) attrs.assignedTo = opts.ownerUserId;
-        attrs.__customInputFields__ = asArr2(attrs.__customInputFields__).map(asObj3).map((f) => /assign/i.test(str4(f.filterField) ?? "") ? { ...f, value: opts.ownerUserId } : f);
+        attrs.__customInputFields__ = asArr2(attrs.__customInputFields__).map(asObj4).map((f) => /assign/i.test(str5(f.filterField) ?? "") ? { ...f, value: opts.ownerUserId } : f);
       }
     }
     if (type === "task-notification") {
       if (!opts.ownerUserId) return { ok: false, refusal: 'During a fast-forward check, tasks go to one person instead of your staff, but nobody was chosen and your email is not a user in this account. Choose who should get them (on the Workflow Audit Pro screen, "Staff alerts, tasks and assignments go to"; in chat, name the person).' };
       attrs.assignedTo = opts.ownerUserId;
-      attrs.title = `TEST: ${str4(attrs.title) ?? ""}`.trim();
+      attrs.title = `TEST: ${str5(attrs.title) ?? ""}`.trim();
     }
     if (type === "webhook") {
-      const url = str4(attrs.url) ?? "";
+      const url = str5(attrs.url) ?? "";
       if (/^[^/]*\/\/[^/?#]*\{\{/.test(url) || /^\{\{/.test(url)) return { ok: false, refusal: `"${src.name}" has a webhook ("${name}") whose address is filled in from a merge field, so where the test lead would go cannot be checked. Nothing was copied.` };
       const h = hostOf(url);
       if (h && /[{}]|%7b|%7d/i.test(h)) return { ok: false, refusal: `"${src.name}" has a webhook ("${name}") whose address is filled in from a merge field, so where the test lead would go cannot be checked. Nothing was copied.` };
@@ -30551,7 +31178,7 @@ function planCopy(src, opts) {
     if (Array.isArray(n.sibling)) copy.sibling = n.sibling.map(remap);
     actions.push(copy);
   }
-  const w = asObj3(src.window);
+  const w = asObj4(src.window);
   return {
     ok: true,
     plan: {
@@ -30605,12 +31232,12 @@ function openCopies(locationId2, base) {
   return [...byName.values()].filter((x) => !x.deleted).map(({ deleted: _d, ...x }) => x);
 }
 function toSource(id, raw) {
-  const wf = asObj3(raw);
+  const wf = asObj4(raw);
   return {
     id,
-    name: str4(wf.name) ?? id,
-    status: str4(wf.status),
-    templates: asArr2(asObj3(wf.workflowData).templates),
+    name: str5(wf.name) ?? id,
+    status: str5(wf.status),
+    templates: asArr2(asObj4(wf.workflowData).templates),
     triggers: asArr2(wf.triggers),
     stopOnResponse: typeof wf.stopOnResponse === "boolean" ? wf.stopOnResponse : void 0,
     allowMultiple: typeof wf.allowMultiple === "boolean" ? wf.allowMultiple : void 0,
@@ -30647,13 +31274,13 @@ async function makeCopies(admin, locationId2, sourceIds, opts) {
     const { copyId, copyName } = copies[i];
     try {
       await admin.save(copyId, { actions: remapWorkflows(p.actions, sourceToCopy), triggers: [], status: "draft", window: null, ...p.settings });
-      const back = asObj3(await admin.get(copyId));
-      const steps = asArr2(asObj3(back.workflowData).templates).map(asObj3);
-      const longWait = steps.find((s) => str4(s.type) === "wait" && Number(asObj3(asObj3(s.attributes).startAfter).value) !== 1);
+      const back = asObj4(await admin.get(copyId));
+      const steps = asArr2(asObj4(back.workflowData).templates).map(asObj4);
+      const longWait = steps.find((s) => str5(s.type) === "wait" && Number(asObj4(asObj4(s.attributes).startAfter).value) !== 1);
       if (asArr2(back.triggers).length !== 0) throw new Error(`the copy of "${p.sourceName}" came back with a trigger, so it was not switched on.`);
       if (steps.length !== p.actions.length) throw new Error(`the copy of "${p.sourceName}" came back with ${steps.length} steps instead of ${p.actions.length}.`);
       if (longWait) throw new Error(`a wait in the copy of "${p.sourceName}" did not shorten.`);
-      if (!(str4(back.name) ?? "").startsWith(tokenPrefix(copyName))) throw new Error("the copy's name did not save.");
+      if (!(str5(back.name) ?? "").startsWith(tokenPrefix(copyName))) throw new Error("the copy's name did not save.");
       const stray = steps.flatMap(staffRecipients).find((u) => u !== opts.ownerUserId);
       if (stray) throw new Error(`a staff step in the copy of "${p.sourceName}" still reaches ${stray} instead of the person chosen, so it was not switched on.`);
       if (steps.some((s) => sourceIds.some((id) => JSON.stringify(s).includes(`"${id}"`)))) throw new Error(`a step in the copy of "${p.sourceName}" still points at an original workflow, so it was not switched on.`);
@@ -30669,8 +31296,8 @@ async function removeCopies(admin, locationId2, copies, base, now = Date.now) {
   for (const c of copies) {
     if (!c.copyId) continue;
     try {
-      const wf = asObj3(await admin.get(c.copyId));
-      const name = str4(wf.name) ?? "";
+      const wf = asObj4(await admin.get(c.copyId));
+      const name = str5(wf.name) ?? "";
       const ours = TOKEN_NAME.test(c.name) && (c.matchedByName ? name === c.name : name.startsWith(tokenPrefix(c.name)));
       if (!ours) {
         problems.push(`Left alone: workflow ${c.copyId} is not a fast-forward copy this check made (named "${name}").`);
@@ -30717,18 +31344,18 @@ function builderAdmin(b) {
     list: async () => {
       const out = [];
       for (let skip = 0; skip < 1e3; skip += 100) {
-        const rows2 = asArr2(asObj3(await b.listWorkflows(100, skip)).rows).map(asObj3);
+        const rows2 = asArr2(asObj4(await b.listWorkflows(100, skip)).rows).map(asObj4);
         for (const r of rows2) {
-          const id = str4(r._id) ?? str4(r.id);
-          if (id) out.push({ id, name: str4(r.name) ?? "", createdAt: str4(r.createdAt) });
+          const id = str5(r._id) ?? str5(r.id);
+          if (id) out.push({ id, name: str5(r.name) ?? "", createdAt: str5(r.createdAt) });
         }
         if (rows2.length < 100) break;
       }
       return out;
     },
     create: async (name) => {
-      const w = asObj3(await b.createWorkflow(name));
-      return { id: str4(w._id) ?? str4(w.id) ?? "" };
+      const w = asObj4(await b.createWorkflow(name));
+      return { id: str5(w._id) ?? str5(w.id) ?? "" };
     },
     save: (id, body) => b.updateWorkflow(id, body),
     publish: (id) => b.publishWorkflow(id),
@@ -30736,17 +31363,17 @@ function builderAdmin(b) {
     remove: (id, ack) => b.deleteWorkflow(id, ack ? { acknowledgeContacts: ack } : void 0)
   };
 }
-var import_node_fs2, import_node_path2, import_node_crypto7, asObj3, asArr2, str4, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
+var import_node_fs2, import_node_path2, import_node_crypto8, asObj4, asArr2, str5, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
 var init_fastforward = __esm({
   "src/command-os/shopper/fastforward.ts"() {
     "use strict";
     import_node_fs2 = __toESM(require("node:fs"));
     import_node_path2 = __toESM(require("node:path"));
-    import_node_crypto7 = __toESM(require("node:crypto"));
+    import_node_crypto8 = __toESM(require("node:crypto"));
     init_run();
-    asObj3 = (v) => v && typeof v === "object" ? v : {};
+    asObj4 = (v) => v && typeof v === "object" ? v : {};
     asArr2 = (v) => Array.isArray(v) ? v : [];
-    str4 = (v) => typeof v === "string" ? v : void 0;
+    str5 = (v) => typeof v === "string" ? v : void 0;
     FF_PREFIX = "ZZ TEST FF";
     ALLOWED = /* @__PURE__ */ new Set([
       "email",
@@ -30778,7 +31405,7 @@ var init_fastforward = __esm({
     };
     newToken = () => {
       let t = "";
-      while (t.length < 6) t += (import_node_crypto7.default.randomBytes(1)[0] % 36).toString(36);
+      while (t.length < 6) t += (import_node_crypto8.default.randomBytes(1)[0] % 36).toString(36);
       return t;
     };
     TOKEN_NAME = new RegExp(`^${FF_PREFIX} [0-9a-z]{6} `);
@@ -30863,7 +31490,7 @@ function clampMinutes(n) {
   return Math.min(1440, Math.max(1, Math.round(n)));
 }
 function channelOf(msg3) {
-  const mt = (str5(msg3.messageType) ?? "").toUpperCase();
+  const mt = (str6(msg3.messageType) ?? "").toUpperCase();
   if (mt === "TYPE_SMS") return "sms";
   if (mt === "TYPE_EMAIL") return "email";
   if (!mt) {
@@ -30874,30 +31501,30 @@ function channelOf(msg3) {
   return null;
 }
 async function readSentMessages(client, locationId2, contactId, since) {
-  const convs = asArr3(asObj4(await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } })).conversations);
+  const convs = asArr3(asObj5(await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } })).conversations);
   const out = [];
   for (const c of convs) {
-    const convId = str5(asObj4(c).id);
+    const convId = str6(asObj5(c).id);
     if (!convId) continue;
-    const raw = asObj4(await client.get(`/conversations/${convId}/messages`, { params: { limit: 100 } }));
-    const list3 = asArr3(raw.messages).length ? asArr3(raw.messages) : asArr3(asObj4(raw.messages).messages);
+    const raw = asObj5(await client.get(`/conversations/${convId}/messages`, { params: { limit: 100 } }));
+    const list3 = asArr3(raw.messages).length ? asArr3(raw.messages) : asArr3(asObj5(raw.messages).messages);
     for (const item of list3) {
-      const m = asObj4(item);
-      if (str5(m.direction)?.toLowerCase() !== "outbound") continue;
+      const m = asObj5(item);
+      if (str6(m.direction)?.toLowerCase() !== "outbound") continue;
       const channel = channelOf(m);
       if (!channel) continue;
-      const at = Date.parse(str5(m.dateAdded) ?? "");
+      const at = Date.parse(str6(m.dateAdded) ?? "");
       if (Number.isNaN(at) || at < since - 5e3) continue;
-      const id = str5(m.id);
+      const id = str6(m.id);
       if (!id) continue;
       out.push({
         id,
         channel,
         at,
-        subject: str5(asObj4(asObj4(m.meta).email).subject),
-        body: htmlToText(str5(m.body) ?? ""),
-        raw: str5(m.body) ?? "",
-        source: str5(m.source)
+        subject: str6(asObj5(asObj5(m.meta).email).subject),
+        body: htmlToText(str6(m.body) ?? ""),
+        raw: str6(m.body) ?? "",
+        source: str6(m.source)
       });
     }
   }
@@ -30905,16 +31532,16 @@ async function readSentMessages(client, locationId2, contactId, since) {
 }
 async function findContactIdByEmail(client, locationId2, email) {
   const raw = await client.get("/contacts/", { params: { locationId: locationId2, query: email, limit: 10 } });
-  for (const c of asArr3(asObj4(raw).contacts)) {
-    const co = asObj4(c);
-    if (str5(co.email)?.toLowerCase() === email) return str5(co.id);
+  for (const c of asArr3(asObj5(raw).contacts)) {
+    const co = asObj5(c);
+    if (str6(co.email)?.toLowerCase() === email) return str6(co.id);
   }
   return void 0;
 }
 async function startShopper(input, deps) {
   const now = deps.now ?? Date.now;
   const sleep7 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const token2 = import_node_crypto8.default.randomUUID().replace(/-/g, "").slice(0, 8);
+  const token2 = import_node_crypto9.default.randomUUID().replace(/-/g, "").slice(0, 8);
   const leadEmail = plusAddress(input.ownerEmail, token2);
   if (!SAFE_ID.test(input.locationId)) throw new Error("That client id is not valid.");
   if (input.entry.kind === "workflows" && input.entry.workflowIds.length === 0) throw new Error("Choose at least one workflow for the test lead to enter.");
@@ -30928,9 +31555,9 @@ async function startShopper(input, deps) {
     const refused = protectedRefusalFor(input.locationId);
     if (refused) throw new Error(refused);
   }
-  const loc = asObj4(asObj4(await deps.client.get(`/locations/${input.locationId}`)).location);
-  const businessName = str5(loc.name) ?? "";
-  const websiteHost = siteHost(str5(loc.website));
+  const loc = asObj5(asObj5(await deps.client.get(`/locations/${input.locationId}`)).location);
+  const businessName = str6(loc.name) ?? "";
+  const websiteHost = siteHost(str6(loc.website));
   const testPhone = input.testPhone?.trim() || void 0;
   let expect = input.expect ?? [];
   const planNote = { ...input.planNote ?? { source: expect.length ? "given" : "none" } };
@@ -30945,7 +31572,7 @@ async function startShopper(input, deps) {
   const watchMinutes = auto ? auto.minutes : clampMinutes(input.watchMinutes);
   const watchReason = auto ? auto.reason : `You chose ${watchMinutes} minute${watchMinutes === 1 ? "" : "s"}.`;
   const firstName = (input.firstName ?? "").trim();
-  const entryNote = input.fastForward?.length ? `Fast-forward: added to temporary copies of ${input.fastForward.length} workflow${input.fastForward.length === 1 ? "" : "s"} with every wait cut to 1 minute and every step kept; the originals were only read. Staff alerts, tasks and lead assignments came to you, marked TEST. The sign-up form itself was not submitted.` : input.entry.kind === "workflows" ? `Added straight to ${input.entry.workflowIds.length} workflow${input.entry.workflowIds.length === 1 ? "" : "s"}. The sign-up form itself was not submitted.` : input.entry.kind === "tag" ? `Created with the tag "${input.entry.tag}", which starts the workflows that listen for it. The sign-up form itself was not submitted.` : "Sent in through the lead-capture address, the way a form sends it.";
+  const entryNote = input.fastForward?.length ? `Fast-forward: added to temporary copies of ${input.fastForward.length} workflow${input.fastForward.length === 1 ? "" : "s"} with every wait cut to 1 minute and every step kept; the originals were only read. Staff alerts, tasks and lead assignments came to you, marked TEST. The sign-up form itself was not submitted.` : input.entry.kind === "workflows" ? `Added straight to ${input.entry.workflowIds.length} workflow${input.entry.workflowIds.length === 1 ? "" : "s"}. The sign-up form itself was not submitted.` : input.entry.kind === "tag" ? `Sent with the tag "${input.entry.tag}", which starts the workflows that listen for it. The sign-up form itself was not submitted.` : "Sent in through the lead-capture address, the way a form sends it.";
   const run = {
     v: 1,
     runId: `${new Date(now()).toISOString().replace(/[-:T]/g, "").slice(0, 14)}-${token2}`,
@@ -30996,9 +31623,9 @@ async function startShopper(input, deps) {
       };
       if (firstName) body.firstName = firstName;
       if (testPhone) body.phone = testPhone;
-      const created = asObj4(await deps.client.post("/contacts/", { body, noRetry: true }));
-      run.contactId = str5(asObj4(created.contact).id) ?? str5(created.id);
-      if (!run.contactId) throw new Error("GoHighLevel did not return the new test lead's id.");
+      const created = asObj5(await deps.client.post("/contacts/", { body, noRetry: true }));
+      run.contactId = str6(asObj5(created.contact).id) ?? str6(created.id);
+      if (!run.contactId) throw new Error("GoHighLevel did not return the test lead's id.");
       if (input.entry.kind === "workflows") {
         for (const wid of input.entry.workflowIds) {
           await deps.client.post(`/contacts/${run.contactId}/workflow/${wid}`, { body: {}, noRetry: true });
@@ -31011,41 +31638,38 @@ async function startShopper(input, deps) {
     run.status = "failed";
     run.error = e instanceof Error ? e.message : String(e);
     run.finishedAt = now();
-    if (run.contactId && !run.keepLead) {
-      run.cleanup = await removeOwnLead(deps.client, run);
-    } else if (!run.contactId) {
-      run.cleanup = { removed: false, detail: `If the test contact named "Secret Shopper" with the address ${leadEmail} appears in the account, delete it. It is the test lead from this check.` };
-    }
+    run.cleanup = await listLeadCarriers(deps.client, run);
     saveRun(run, deps.base);
     return run;
   }
 }
 async function postJson(url, body) {
-  const r = await fetch(url, { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body) });
+  const r = await guardedPost(url, JSON.stringify(body), { "Content-Type": "application/json", Accept: "application/json" });
   return r.status;
 }
-async function removeOwnLead(client, run) {
-  const id = run.contactId;
-  if (!id) return { removed: false, detail: "No test lead was recorded for this check." };
-  let contact;
+async function listLeadCarriers(client, run) {
+  const carriers = /* @__PURE__ */ new Map();
+  let partial = false;
   try {
-    contact = asObj4(asObj4(await client.get(`/contacts/${id}`)).contact);
-  } catch (e) {
-    if (notFound(e)) return { removed: true, detail: "The test lead is already gone from the account." };
-    return { removed: false, detail: `The test lead ${run.leadEmail} could not be checked before removal (${e instanceof Error ? e.message.split("\n")[0] : String(e)}). Delete it in GoHighLevel.` };
-  }
-  const email = str5(contact.email)?.toLowerCase();
-  const added = Date.parse(str5(contact.dateAdded) ?? "");
-  if (email !== run.leadEmail || !Number.isNaN(added) && added < run.startedAt - 10 * 6e4) {
-    return { removed: false, detail: `Left alone on purpose: the contact this check ended up with is not the test lead it created (its address or creation time does not match ${run.leadEmail}). Look for the test contact named "Secret Shopper" in GoHighLevel.` };
+    const paged = await readContactPages((path45, o) => client.get(path45, o), { locationId: run.locationId, query: run.leadEmail, limit: 20 });
+    if (!paged || !paged.complete) partial = true;
+    for (const c of paged?.rows ?? []) {
+      const k = carrierOf(c);
+      if (k && k.email === run.leadEmail) carriers.set(k.id, k);
+    }
+  } catch {
+    partial = true;
   }
-  try {
-    await client.delete(`/contacts/${id}`);
-  } catch (e) {
-    if (notFound(e)) return { removed: true, detail: "The test lead is already gone from the account." };
-    return { removed: false, detail: `The test lead ${run.leadEmail} could not be removed (${e instanceof Error ? e.message.split("\n")[0] : String(e)}). Delete it in GoHighLevel.` };
+  if (run.contactId && !carriers.has(run.contactId)) {
+    try {
+      const k = carrierOf(asObj5(await client.get(`/contacts/${run.contactId}`)).contact);
+      if (k && k.email === run.leadEmail) carriers.set(k.id, k);
+    } catch (e) {
+      if (!notFound(e)) partial = true;
+    }
   }
-  return { removed: true, detail: "The test lead was removed from the account after the check." };
+  const contacts = [...carriers.values()];
+  return { removed: false, detail: carrierText(contacts, partial), contacts, partial };
 }
 function pidAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -31059,7 +31683,7 @@ function pidAlive(pid) {
 function claimRun(locationId2, runId, base) {
   const lock = `${runPath(locationId2, runId, base)}.lock`;
   import_node_fs3.default.mkdirSync(import_node_path3.default.dirname(lock), { recursive: true, mode: 448 });
-  const token2 = import_node_crypto8.default.randomUUID();
+  const token2 = import_node_crypto9.default.randomUUID();
   const mine = JSON.stringify({ pid: process.pid, token: token2 });
   for (let attempt = 0; attempt < 3; attempt++) {
     try {
@@ -31113,7 +31737,7 @@ async function finishShopper(locationId2, runId, deps) {
     const t = now();
     const closed = t >= run.closesAt;
     const raw = await readSentMessages(deps.client, run.locationId, run.contactId, run.startedAt);
-    const fetcher = deps.fetcher ?? ((url, init) => fetch(url, init).then((r) => ({ status: r.status })));
+    const fetcher = deps.fetcher ?? ((url, init) => guardedFetchLike(url, { headers: init.headers, signal: init.signal, redirect: "manual", statusOnly: true }).then((r) => ({ status: r.status, location: r.headers.get("location") })));
     const urls = [...new Set(raw.flatMap((m) => extractUrls(m.body, m.raw !== m.body ? m.raw : void 0)))];
     const linkResults = (await checkLinks(urls, run.websiteHost ? [run.websiteHost] : [], fetcher)).map((l) => ({ ...l, url: maskSecrets(l.url) }));
     const messages = raw.map((m) => ({ id: m.id, channel: m.channel, at: m.at, source: m.source, body: maskSecrets(m.body), subject: m.subject ? maskSecrets(m.subject) : void 0 }));
@@ -31151,7 +31775,7 @@ async function finishShopper(locationId2, runId, deps) {
     if (closed) {
       run.status = "done";
       run.finishedAt = t;
-      run.cleanup = run.keepLead ? { removed: false, detail: `Kept on request: the test lead ${run.leadEmail} is still in the account for you to look at. Delete it when you're done.` } : await removeOwnLead(deps.client, run);
+      run.cleanup = await listLeadCarriers(deps.client, run);
       if (run.fastForward && deps.ffAdmin) {
         const { removeCopies: removeCopies2 } = await Promise.resolve().then(() => (init_fastforward(), fastforward_exports));
         const problems = await removeCopies2(deps.ffAdmin, run.locationId, run.fastForward.copies.map((c) => ({ copyId: c.copyId, name: c.copyName })), deps.base, now);
@@ -31189,13 +31813,13 @@ function summarizeRun(run) {
   if (run.status === "watching") return `So far: ${head4}${stepNote} Still watching until ${new Date(run.closesAt).toISOString()}.`;
   return gradeLine + head4 + stepNote;
 }
-var import_node_fs3, import_node_path3, import_node_crypto8, MAX_EXTEND_MINUTES, asObj4, asArr3, str5, SAFE_ID, notFound;
+var import_node_fs3, import_node_path3, import_node_crypto9, MAX_EXTEND_MINUTES, asObj5, asArr3, str6, SAFE_ID, notFound;
 var init_run = __esm({
   "src/command-os/shopper/run.ts"() {
     "use strict";
     import_node_fs3 = __toESM(require("node:fs"));
     import_node_path3 = __toESM(require("node:path"));
-    import_node_crypto8 = __toESM(require("node:crypto"));
+    import_node_crypto9 = __toESM(require("node:crypto"));
     init_credentials_store();
     init_analyze();
     init_links();
@@ -31203,10 +31827,12 @@ var init_run = __esm({
     init_account_rules();
     init_score();
     init_steps();
+    init_net_guard();
+    init_test_contacts();
     MAX_EXTEND_MINUTES = 10;
-    asObj4 = (v) => v && typeof v === "object" ? v : {};
+    asObj5 = (v) => v && typeof v === "object" ? v : {};
     asArr3 = (v) => Array.isArray(v) ? v : [];
-    str5 = (v) => typeof v === "string" ? v : void 0;
+    str6 = (v) => typeof v === "string" ? v : void 0;
     SAFE_ID = /^[A-Za-z0-9_-]{1,64}$/;
     notFound = (e) => {
       const m = e instanceof Error ? e.message : String(e);
@@ -31443,12 +32069,12 @@ mark{background:var(--surface-sunk);color:var(--bad);font-weight:700;border-radi
 
 // src/command-os/shopper/plan.ts
 function waitMinutes(node) {
-  const a = asObj5(node.attributes);
-  if (str6(a.type) && str6(a.type) !== "time") return null;
-  const s = asObj5(a.startAfter);
+  const a = asObj6(node.attributes);
+  if (str7(a.type) && str7(a.type) !== "time") return null;
+  const s = asObj6(a.startAfter);
   const v = Number(s.value);
   if (!Number.isFinite(v) || v < 0) return null;
-  const unit = (str6(s.type) ?? "").toLowerCase();
+  const unit = (str7(s.type) ?? "").toLowerCase();
   if (unit.startsWith("min")) return v;
   if (unit.startsWith("hour")) return v * 60;
   if (unit.startsWith("day")) return v * 1440;
@@ -31466,27 +32092,27 @@ function plannedMessages(workflows) {
   for (const wf of workflows) {
     const nodes = /* @__PURE__ */ new Map();
     for (const t of wf.templates) {
-      const n = asObj5(t);
-      const id = str6(n.id);
+      const n = asObj6(t);
+      const id = str7(n.id);
       if (id) nodes.set(id, n);
     }
     for (const node of nodes.values()) {
-      const type = str6(node.type);
+      const type = str7(node.type);
       if (type !== "sms" && type !== "email") continue;
       let minutes = 0;
-      let conditional = Boolean(str6(node.parent) && nodes.get(str6(node.parent) ?? "") && isBranch(nodes.get(str6(node.parent) ?? "")));
+      let conditional = Boolean(str7(node.parent) && nodes.get(str7(node.parent) ?? "") && isBranch(nodes.get(str7(node.parent) ?? "")));
       const seen = /* @__PURE__ */ new Set();
       const afterWaits = [];
-      let cur = str6(node.parentKey);
+      let cur = str7(node.parentKey);
       while (cur && !conditional && !seen.has(cur)) {
         seen.add(cur);
         const p = nodes.get(cur);
         if (!p) break;
-        if (isBranch(p) || str6(p.parent) && isBranch(nodes.get(str6(p.parent) ?? "") ?? {})) {
+        if (isBranch(p) || str7(p.parent) && isBranch(nodes.get(str7(p.parent) ?? "") ?? {})) {
           conditional = true;
           break;
         }
-        if (str6(p.type) === "wait") {
+        if (str7(p.type) === "wait") {
           const m = waitMinutes(p);
           if (m === null) {
             conditional = true;
@@ -31495,20 +32121,20 @@ function plannedMessages(workflows) {
           minutes += m;
           afterWaits.push(cur);
         }
-        cur = str6(p.parentKey);
+        cur = str7(p.parentKey);
       }
       if (conditional) {
         leftOut.conditional++;
         continue;
       }
-      const a = asObj5(node.attributes);
-      const key = type === "email" ? wordingKey(str6(a.subject) ?? "") || wordingKey(str6(a.html) ?? "") : wordingKey(str6(a.body) ?? "");
+      const a = asObj6(node.attributes);
+      const key = type === "email" ? wordingKey(str7(a.subject) ?? "") || wordingKey(str7(a.html) ?? "") : wordingKey(str7(a.body) ?? "");
       if (!key) {
         leftOut.noWording++;
         continue;
       }
-      const stepName = str6(node.name) || (type === "sms" ? "text" : "email");
-      expect.push({ label: `${wf.name}: ${stepName}`, channel: type, match: key, byMinute: minutes + 1, stepName, ...wf.id ? { workflowId: wf.id } : {}, ...str6(node.id) ? { stepId: str6(node.id) } : {}, afterWaits });
+      const stepName = str7(node.name) || (type === "sms" ? "text" : "email");
+      expect.push({ label: `${wf.name}: ${stepName}`, channel: type, match: key, byMinute: minutes + 1, stepName, ...wf.id ? { workflowId: wf.id } : {}, ...str7(node.id) ? { stepId: str7(node.id) } : {}, afterWaits });
     }
   }
   return { expect, leftOut };
@@ -31521,45 +32147,45 @@ async function planFromWorkflowIds(reader, ids) {
   const draftIds = [];
   for (const id of ids) {
     try {
-      const wf = asObj5(await reader.getWorkflow(id));
-      const name = str6(wf.name) ?? id;
+      const wf = asObj6(await reader.getWorkflow(id));
+      const name = str7(wf.name) ?? id;
       names[id] = name;
-      if (str6(wf.status)?.toLowerCase() === "draft") {
+      if (str7(wf.status)?.toLowerCase() === "draft") {
         drafts.push(name);
         draftIds.push(id);
       }
-      workflows.push({ id, name, templates: asArr4(asObj5(wf.workflowData).templates) });
+      workflows.push({ id, name, templates: asArr4(asObj6(wf.workflowData).templates) });
     } catch {
       unread.push(id);
     }
   }
   return { ...plannedMessages(workflows), unread, names, drafts, draftIds };
 }
-var asObj5, asArr4, str6, isBranch;
+var asObj6, asArr4, str7, isBranch;
 var init_plan2 = __esm({
   "src/command-os/shopper/plan.ts"() {
     "use strict";
     init_links();
-    asObj5 = (v) => v && typeof v === "object" ? v : {};
+    asObj6 = (v) => v && typeof v === "object" ? v : {};
     asArr4 = (v) => Array.isArray(v) ? v : [];
-    str6 = (v) => typeof v === "string" ? v : void 0;
-    isBranch = (n) => /^branch-/.test(str6(n.nodeType) ?? "") || str6(n.type) === "if_else";
+    str7 = (v) => typeof v === "string" ? v : void 0;
+    isBranch = (n) => /^branch-/.test(str7(n.nodeType) ?? "") || str7(n.type) === "if_else";
   }
 });
 
 // src/command-os/shopper/ff-start.ts
 async function ownerUserId(client, locationId2, ownerEmail) {
-  const raw = asObj6(await client.get("/users/", { params: { locationId: locationId2 } }));
+  const raw = asObj7(await client.get("/users/", { params: { locationId: locationId2 } }));
   const want = baseEmail(ownerEmail);
-  for (const u of asArr5(raw.users).map(asObj6)) if (str7(u.email) && baseEmail(str7(u.email)) === want) return str7(u.id);
+  for (const u of asArr5(raw.users).map(asObj7)) if (str8(u.email) && baseEmail(str8(u.email)) === want) return str8(u.id);
   return void 0;
 }
 async function accountUsers(client, locationId2) {
-  const raw = asObj6(await client.get("/users/", { params: { locationId: locationId2 } }));
-  return asArr5(raw.users).map(asObj6).filter((u) => str7(u.id) && !u.deleted).map((u) => ({
-    id: str7(u.id),
-    name: str7(u.name) ?? ([str7(u.firstName), str7(u.lastName)].filter(Boolean).join(" ") || str7(u.email) || str7(u.id)),
-    email: str7(u.email)
+  const raw = asObj7(await client.get("/users/", { params: { locationId: locationId2 } }));
+  return asArr5(raw.users).map(asObj7).filter((u) => str8(u.id) && !u.deleted).map((u) => ({
+    id: str8(u.id),
+    name: str8(u.name) ?? ([str8(u.firstName), str8(u.lastName)].filter(Boolean).join(" ") || str8(u.email) || str8(u.id)),
+    email: str8(u.email)
   }));
 }
 async function sweepLeftovers(admin, locationId2, base, now) {
@@ -31609,16 +32235,16 @@ async function startFastForward(s) {
     return { ok: false, error: e instanceof Error ? e.message.split("\n")[0] : String(e) };
   }
 }
-var asObj6, asArr5, str7, baseEmail;
+var asObj7, asArr5, str8, baseEmail;
 var init_ff_start = __esm({
   "src/command-os/shopper/ff-start.ts"() {
     "use strict";
     init_run();
     init_fastforward();
     init_plan2();
-    asObj6 = (v) => v && typeof v === "object" ? v : {};
+    asObj7 = (v) => v && typeof v === "object" ? v : {};
     asArr5 = (v) => Array.isArray(v) ? v : [];
-    str7 = (v) => typeof v === "string" ? v : void 0;
+    str8 = (v) => typeof v === "string" ? v : void 0;
     baseEmail = (e) => {
       const [l, d] = e.trim().toLowerCase().split("@");
       return `${(l ?? "").split("+")[0]}@${d ?? ""}`;
@@ -32402,7 +33028,7 @@ var init_page2 = __esm({
     nextStep = (c) => c.state === "proven" || c.id === "google-calendar" && c.setup === "needs-setup" ? "" : c.id === "google-calendar" ? "Next: press Connect and sign in with Google." : c.state === "saved-unproven" ? `Next: paste the ${keyWord(c.id)} again and press Connect, so we can check it works.` : `Next: paste your ${keyWord(c.id)} below and press Connect.`;
     chip3 = (c, needs) => c.readError ? { tone: "warn", word: "Could not read" } : c.state === "saved-unproven" ? { tone: "warn", word: "Not proven" } : c.state === "not-connected" ? { tone: "", word: "Not connected" } : needs ? { tone: "warn", word: "Needs you today" } : c.state === "proven" ? { tone: "ok", word: "Connected" } : { tone: "", word: "Not connected" };
     head = (c, chips) => `<div class="cds-panel-head"><div class="txt"><h2 class="cds-panel-title">${esc4(c.name)}</h2></div><div class="cds-row">${chips}</div></div>`;
-    how = (inner, id, hidden) => `<details class="how-it-works cds-details" id="instructions-${id}"${hidden ? " hidden" : ""}><summary>How this connection works</summary><div class="connector-instructions">${inner}</div></details>`;
+    how = (inner, id, hidden2) => `<details class="how-it-works cds-details" id="instructions-${id}"${hidden2 ? " hidden" : ""}><summary>How this connection works</summary><div class="connector-instructions">${inner}</div></details>`;
     needsRow = (c, ask) => `<li><a class="ttl" href="#${c.id}">${esc4(c.name)}<span class="sub">${esc4(ask)}</span></a></li>`;
   }
 });
@@ -34142,7 +34768,7 @@ var init_client_status_placement = __esm({
 // src/build-contract.ts
 function contentHash(value) {
   const canonical2 = (v) => Array.isArray(v) ? v.map(canonical2) : v && typeof v === "object" ? Object.fromEntries(Object.keys(v).sort().filter((k) => v[k] !== void 0).map((k) => [k, canonical2(v[k])])) : v;
-  return (0, import_node_crypto9.createHash)("sha256").update(JSON.stringify(canonical2(value)) ?? "null").digest("hex");
+  return (0, import_node_crypto10.createHash)("sha256").update(JSON.stringify(canonical2(value)) ?? "null").digest("hex");
 }
 function assertBuildApproval(approval, inputHash) {
   if (!approval?.at) throw new Error("Approve building before running Build.");
@@ -34317,11 +34943,11 @@ function executablePlanLines(saved) {
   for (const w of preview?.workflows ?? []) for (const m of [...w.manual ?? [], ...w.needsContent ?? []]) lines.push(`Unresolved: ${w.name || names.get(w.ref) || "Unnamed workflow"}. ${m.reason}`);
   return lines.map(sentence);
 }
-var import_node_crypto9, import_node_fs5, import_node_path5, INTAKE_CHANGED;
+var import_node_crypto10, import_node_fs5, import_node_path5, INTAKE_CHANGED;
 var init_build_contract = __esm({
   "src/build-contract.ts"() {
     "use strict";
-    import_node_crypto9 = require("node:crypto");
+    import_node_crypto10 = require("node:crypto");
     import_node_fs5 = require("node:fs");
     import_node_path5 = require("node:path");
     init_credentials_store();
@@ -34400,7 +35026,7 @@ async function approvedStatusWriter(registry2, locationId2) {
       return saved;
     },
     async readPublishedPage(url) {
-      const result = await fetch(url, { signal: AbortSignal.timeout(15e3) });
+      const result = await guardedFetchLike(url, { signal: AbortSignal.timeout(15e3) });
       if (!result.ok) throw new Error("The published handoff address could not be reached.");
       return result.text();
     }
@@ -34416,6 +35042,7 @@ var init_approved_status_writer = __esm({
     init_funnel_builder();
     init_client_status_placement();
     init_build_contract();
+    init_net_guard();
   }
 });
 
@@ -34900,7 +35527,7 @@ function engineRepair(version) {
   return !version ? CLAUDE_REPAIR_MESSAGES[0] : !meetsFloor(version) ? CLAUDE_REPAIR_MESSAGES[1] : CLAUDE_REPAIR_MESSAGES[2];
 }
 function keyFingerprint(key) {
-  return (0, import_node_crypto10.createHash)("sha256").update(key).digest("hex");
+  return (0, import_node_crypto11.createHash)("sha256").update(key).digest("hex");
 }
 async function clientPreflight(registry2, locationId2) {
   const lines = [];
@@ -34967,7 +35594,7 @@ async function agencyConnectionReady(registry2, companyId) {
     return false;
   }
 }
-var import_node_crypto10, CLAUDE_REPAIR_MESSAGES;
+var import_node_crypto11, CLAUDE_REPAIR_MESSAGES;
 var init_client_preflight = __esm({
   "src/client-preflight.ts"() {
     "use strict";
@@ -34977,7 +35604,7 @@ var init_client_preflight = __esm({
     init_stage_runner();
     init_tool_filter();
     init_credentials_store();
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     CLAUDE_REPAIR_MESSAGES = [
       "Install Claude Code from Your agency before reading this source.",
       "Update Claude Code to version 2.1.0 or newer from Your agency.",
@@ -35020,25 +35647,25 @@ var init_brief_validation = __esm({
 // src/command-os/design/run-jobs.ts
 function validateRunRequest(input) {
   const a = input ?? {};
-  const str8 = (k) => typeof a[k] === "string" ? a[k].trim() : "";
-  const brand = str8("brand");
+  const str9 = (k) => typeof a[k] === "string" ? a[k].trim() : "";
+  const brand = str9("brand");
   if (!SLUG2.test(brand)) return { ok: false, error: "brand must be a stored brand's slug (lowercase letters, digits and dashes)." };
-  const medium = str8("medium");
+  const medium = str9("medium");
   if (!MEDIA.includes(medium)) return { ok: false, error: `medium must be one of ${MEDIA.join(", ")}.` };
-  const headline3 = str8("headline");
+  const headline3 = str9("headline");
   if (headline3.length < 3 || headline3.length > 300) return { ok: false, error: "headline must be between 3 and 300 characters." };
   const points = Array.isArray(a.points) ? a.points.filter((p) => typeof p === "string" && p.trim().length > 0).map((p) => p.trim()) : [];
   if (points.length === 0) return { ok: false, error: "points must be a non-empty list." };
   if (points.length > DESIGN_FORM_LIMITS.pointsMax) return { ok: false, error: POINTS_MESSAGE };
   if (points.some((p) => p.includes("|"))) return { ok: false, error: "a point may not contain the | character; it separates them on the command line." };
   if (points.some((p) => p.length > 400)) return { ok: false, error: "a point may be 400 characters at most." };
-  const model = str8("model");
+  const model = str9("model");
   if (model && !MODEL.test(model)) return { ok: false, error: "model must be a plain engine name." };
   const slides = a.slides;
   if (slides !== void 0 && (typeof slides !== "number" || !Number.isInteger(slides) || slides < DESIGN_FORM_LIMITS.slidesMin || slides > DESIGN_FORM_LIMITS.slidesMax)) return { ok: false, error: SLIDES_MESSAGE };
   let refusal = null;
   const optional2 = (k, max = 400) => {
-    const v = str8(k);
+    const v = str9(k);
     if (!v) return void 0;
     if (v.length > max) {
       if (refusal === null) refusal = `${k} must be ${max} characters at most.`;
@@ -35084,7 +35711,7 @@ function startDesignRun(request, opts = {}) {
   const checked = validateRunRequest(request);
   if (!checked.ok) throw new Error(checked.error);
   request = checked.value;
-  const id = (0, import_node_crypto11.randomUUID)();
+  const id = (0, import_node_crypto12.randomUUID)();
   const outDir = (0, import_node_path7.join)(designRunsDir(), id);
   (0, import_node_fs7.mkdirSync)(outDir, { recursive: true });
   const job = { id, status: "running", startedAt: (/* @__PURE__ */ new Date()).toISOString(), outDir, request, tail: [] };
@@ -35151,14 +35778,14 @@ function cancelDesignRun(id) {
   }
   return true;
 }
-var import_node_child_process3, import_node_fs7, import_node_path7, import_node_crypto11, SLUG2, MODEL, JOINED_FLAG, jobs, children;
+var import_node_child_process3, import_node_fs7, import_node_path7, import_node_crypto12, SLUG2, MODEL, JOINED_FLAG, jobs, children;
 var init_run_jobs = __esm({
   "src/command-os/design/run-jobs.ts"() {
     "use strict";
     import_node_child_process3 = require("node:child_process");
     import_node_fs7 = require("node:fs");
     import_node_path7 = require("node:path");
-    import_node_crypto11 = require("node:crypto");
+    import_node_crypto12 = require("node:crypto");
     init_credentials_store();
     init_schema();
     init_brief_validation();
@@ -36037,9 +36664,9 @@ function presetForBusinessType(type) {
       return "generic";
   }
 }
-function setPath(target, path44, value) {
+function setPath(target, path45, value) {
   if (value === void 0) return;
-  const parts = path44.split(".");
+  const parts = path45.split(".");
   let node = target;
   for (let i = 0; i < parts.length - 1; i++) {
     const k = parts[i];
@@ -38162,9 +38789,9 @@ function recorderAllowPatterns(mcpListOutput) {
 function prefillTools(source, recorderPatterns = []) {
   const deny = "Bash,Write,Edit,MultiEdit,NotebookEdit,Task";
   if (source.kind === "text") return { allow: "", deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
-  if (source.kind === "url") return { allow: "WebFetch", deny: deny + ",WebSearch,Read,Glob,Grep" };
+  if (source.kind === "url") return { allow: "", deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
   if (source.kind === "file") return { allow: "Read", deny: deny + ",WebFetch,WebSearch,Glob,Grep" };
-  return { allow: recorderPatterns.join(","), deny: deny + ",Read,Glob,Grep" };
+  return { allow: recorderPatterns.join(","), deny: deny + ",WebFetch,WebSearch,Read,Glob,Grep" };
 }
 function sourcePreamble(source) {
   if (source.kind === "file") {
@@ -38211,6 +38838,7 @@ async function prefillFromSource(spawnClaude, labels, source, recorderPatterns =
   if (source.kind === "file" && !/[.](txt|md|csv|vtt|srt)$/i.test(source.name)) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "Use plain text, .vtt or .srt." };
   const empty = source.kind === "text" && !source.text.trim() || source.kind === "url" && !source.url.trim() || source.kind === "recorder" && !source.instruction.trim() || source.kind === "file" && !source.path.trim();
   if (empty) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "nothing to read" };
+  if (source.kind === "url") return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: LINK_READING_OFF_MESSAGE };
   if (source.kind === "text" && source.text.length > 6e4) return { ok: false, answers: {}, unknown: labels, held: {}, unverified: [], error: "The limit is 60,000 characters. Paste an excerpt or shorten this text file." };
   const result = await runPrefill(() => spawnClaude(prefillPromptForSource(labels, source) + "\nQuestion schema (use only these choices; multiple choices use an array in the cited answer object\u2019s value):\n" + JSON.stringify(questions), prefillTools(source, recorderPatterns)), labels, source.kind === "text" ? source.text : void 0);
   result.answers = validatePrefillAnswers(questions, result.answers);
@@ -38269,7 +38897,7 @@ function validatePrefillAnswers(questions, proposed) {
   }
   return result;
 }
-var INTAKE_FORM_NAME2, INTAKE_CONTACT_TAG, RECORDER_HINTS;
+var INTAKE_FORM_NAME2, INTAKE_CONTACT_TAG, RECORDER_HINTS, LINK_READING_OFF_MESSAGE;
 var init_client_intake = __esm({
   "src/client-intake.ts"() {
     "use strict";
@@ -38280,6 +38908,7 @@ var init_client_intake = __esm({
     INTAKE_FORM_NAME2 = "GHL Command Blueprint \u2014 Client Intake";
     INTAKE_CONTACT_TAG = "blueprint-intake";
     RECORDER_HINTS = ["plaud", "otter", "fireflies", "grain", "fathom", "tldv", "granola", "zoom", "read.ai", "readai", "supernormal", "avoma"];
+    LINK_READING_OFF_MESSAGE = "Reading a link isn't available in this version. Open the page, copy its text, and paste it into Paste a transcript.";
   }
 });
 
@@ -38343,7 +38972,7 @@ var init_plan_store = __esm({
 // src/agency-profile-page.ts
 function agencyProfilePageHtml(p, clients = [], seatToken = "") {
   const offers = (p.offers ?? []).map((o) => `${o.name}${o.priceFloor ? ` - ${o.priceFloor}${o.cadence === "monthly" ? "/mo" : ""}` : ""}`).join("\n");
-  const os8 = p.agencyOs ?? {};
+  const os9 = p.agencyOs ?? {};
   const lines = (xs) => (xs ?? []).join("\n");
   const sops = (p.delivery?.sops ?? []).join("\n");
   const chatOn = readAccountAdminSettings().chatCreation;
@@ -38481,36 +39110,36 @@ ${p.agencyName ? "" : ` <div class="cds-callout warn"><span class="ttl">Add an a
    <div class="cds-panel-head"><div class="txt"><div class="cds-panel-label">Your offer and method</div><h2 class="cds-panel-title">Who you are, who you serve, what you promise, how you deliver</h2></div></div>
    <p>Filled in once, in your own words. Used on the assessment report, in proposals, in every Claude session's opening brief, and by every Command OS build.</p>
    <ul class="cds-list">
-    ${section2("Your brand: who you are", progress([os8.story, os8.method, os8.voice, os8.goals, os8.values, os8.proof]), `
-     ${area("story", "Your story: why this agency exists, in two or three sentences", os8.story, { placeholder: "I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026" })}
-     ${area("method", "Your method: how you get results, and what you call it", os8.method, { placeholder: "The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave" })}
+    ${section2("Your brand: who you are", progress([os9.story, os9.method, os9.voice, os9.goals, os9.values, os9.proof]), `
+     ${area("story", "Your story: why this agency exists, in two or three sentences", os9.story, { placeholder: "I ran a clinic for twelve years and watched good practices lose patients to voicemail\u2026" })}
+     ${area("method", "Your method: how you get results, and what you call it", os9.method, { placeholder: "The Full Room method: one weekend, a full calendar, a system that keeps booking after we leave" })}
      <div class="cds-grid">
-      ${area("voice", "How you sound: three words, then a sentence", os8.voice, { placeholder: "Direct, warm, clinical. Specifics over hype." })}
-      ${area("goals", "Your goal for the next twelve months", os8.goals, { placeholder: "$50k a month from 51 subscribers" })}
+      ${area("voice", "How you sound: three words, then a sentence", os9.voice, { placeholder: "Direct, warm, clinical. Specifics over hype." })}
+      ${area("goals", "Your goal for the next twelve months", os9.goals, { placeholder: "$50k a month from 51 subscribers" })}
      </div>
-     ${area("values", "What you stand for and what you refuse to do: one per line", lines(os8.values), { placeholder: "Never a false all-clear&#10;No cold texting anyone who did not opt in" })}
-     ${area("proof", "Proof you may state, with permission: one per line", lines(os8.proof), { placeholder: "Radiance Med Spa: 34 consults booked in one weekend (permission on file)" })}`)}
-    ${section2("Ideal client: who you serve", progress([os8.ica?.who, os8.ica?.pains, os8.ica?.desires, os8.ica?.objections, os8.ica?.triggers, os8.ica?.vocabulary, os8.ica?.hangouts, os8.ica?.villains]), `
-     ${area("icaWho", "Who they are: role, business, size, where", os8.ica?.who, { placeholder: "The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself" })}
+     ${area("values", "What you stand for and what you refuse to do: one per line", lines(os9.values), { placeholder: "Never a false all-clear&#10;No cold texting anyone who did not opt in" })}
+     ${area("proof", "Proof you may state, with permission: one per line", lines(os9.proof), { placeholder: "Radiance Med Spa: 34 consults booked in one weekend (permission on file)" })}`)}
+    ${section2("Ideal client: who you serve", progress([os9.ica?.who, os9.ica?.pains, os9.ica?.desires, os9.ica?.objections, os9.ica?.triggers, os9.ica?.vocabulary, os9.ica?.hangouts, os9.ica?.villains]), `
+     ${area("icaWho", "Who they are: role, business, size, where", os9.ica?.who, { placeholder: "The owner of a two-provider med spa in a mid-size US city, doing $40k a month and answering the phone herself" })}
      <div class="cds-grid">
-      ${area("icaPains", "Their pains, worst first: one per line", lines(os8.ica?.pains))}
-      ${area("icaDesires", "What they want, most first: one per line", lines(os8.ica?.desires))}
-      ${area("icaObjections", "Why they say no: one per line", lines(os8.ica?.objections))}
-      ${area("icaTriggers", "What makes them buy now: one per line", lines(os8.ica?.triggers))}
-      ${area("icaVocabulary", "Their own words for the problem: one per line", lines(os8.ica?.vocabulary))}
-      ${area("icaHangouts", "Where they read, listen and gather: one per line", lines(os8.ica?.hangouts))}
+      ${area("icaPains", "Their pains, worst first: one per line", lines(os9.ica?.pains))}
+      ${area("icaDesires", "What they want, most first: one per line", lines(os9.ica?.desires))}
+      ${area("icaObjections", "Why they say no: one per line", lines(os9.ica?.objections))}
+      ${area("icaTriggers", "What makes them buy now: one per line", lines(os9.ica?.triggers))}
+      ${area("icaVocabulary", "Their own words for the problem: one per line", lines(os9.ica?.vocabulary))}
+      ${area("icaHangouts", "Where they read, listen and gather: one per line", lines(os9.ica?.hangouts))}
      </div>
-     ${area("icaVillains", "What they have tried and blame: one per line", lines(os8.ica?.villains), { placeholder: "The last agency that charged $3,000 a month for two posts a week" })}`)}
-    ${section2("The offer: what you promise", progress([os8.offer?.name, os8.offer?.price, os8.offer?.promise, os8.offer?.valueStack, os8.offer?.guarantee, os8.offer?.accelerators]), `
+     ${area("icaVillains", "What they have tried and blame: one per line", lines(os9.ica?.villains), { placeholder: "The last agency that charged $3,000 a month for two posts a week" })}`)}
+    ${section2("The offer: what you promise", progress([os9.offer?.name, os9.offer?.price, os9.offer?.promise, os9.offer?.valueStack, os9.offer?.guarantee, os9.offer?.accelerators]), `
      <div class="cds-grid">
-      ${input("offerName", "The offer's name", os8.offer?.name, { placeholder: "The Full Room" })}
-      ${input("offerPrice", "Price, and what it is per", os8.offer?.price, { placeholder: "$5,000 per event plus 30% of revenue" })}
+      ${input("offerName", "The offer's name", os9.offer?.name, { placeholder: "The Full Room" })}
+      ${input("offerPrice", "Price, and what it is per", os9.offer?.price, { placeholder: "$5,000 per event plus 30% of revenue" })}
      </div>
-     ${area("offerPromise", "The promise: one sentence a prospect could repeat", os8.offer?.promise, { placeholder: "A full room in one weekend, and a system that keeps booking after we leave" })}
-     ${area("offerStack", "What is in it: one per line", lines(os8.offer?.valueStack), { placeholder: "The campaign page&#10;The AI receptionist&#10;The 30-day nurture" })}
+     ${area("offerPromise", "The promise: one sentence a prospect could repeat", os9.offer?.promise, { placeholder: "A full room in one weekend, and a system that keeps booking after we leave" })}
+     ${area("offerStack", "What is in it: one per line", lines(os9.offer?.valueStack), { placeholder: "The campaign page&#10;The AI receptionist&#10;The 30-day nurture" })}
      <div class="cds-grid">
-      ${area("offerGuarantee", "The guarantee, exactly as you would say it", os8.offer?.guarantee)}
-      ${area("offerAccelerators", "Why now: bonuses, deadlines, scarcity, one per line", lines(os8.offer?.accelerators))}
+      ${area("offerGuarantee", "The guarantee, exactly as you would say it", os9.offer?.guarantee)}
+      ${area("offerAccelerators", "Why now: bonuses, deadlines, scarcity, one per line", lines(os9.offer?.accelerators))}
      </div>`)}
     ${section2("How you deliver", progress([p.delivery?.sops, p.staff]), `
      ${area("sops", "Delivery SOPs: one per line", sops, { placeholder: "Every build gets a rollback journal before go-live" })}
@@ -40417,7 +41046,7 @@ function writeVerifiedBackup(configPath, originalBytes) {
   return backupPath;
 }
 function sha256(bytes) {
-  return (0, import_node_crypto12.createHash)("sha256").update(bytes).digest("hex");
+  return (0, import_node_crypto13.createHash)("sha256").update(bytes).digest("hex");
 }
 function baselineOf(bytes, stat) {
   return { size: stat.size, mtimeMs: stat.mtimeMs, hash: sha256(bytes) };
@@ -40443,7 +41072,7 @@ function assertNotStale(configPath, baseline) {
 }
 async function atomicReplace(opts) {
   const dir = path31.dirname(opts.configPath);
-  const tempPath = path31.join(dir, `.${path31.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto12.randomBytes)(4).toString("hex")}`);
+  const tempPath = path31.join(dir, `.${path31.basename(opts.configPath)}.tmp-${process.pid}-${(0, import_node_crypto13.randomBytes)(4).toString("hex")}`);
   const fd = fs33.openSync(tempPath, "w");
   try {
     fs33.writeFileSync(fd, opts.newBytes);
@@ -40593,14 +41222,14 @@ async function runInstall(argv, ioOverride) {
     return EXIT_ABORTED;
   }
 }
-var fs33, os6, path31, import_node_crypto12, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
+var fs33, os6, path31, import_node_crypto13, import_node_util, import_json5, SERVER_KEY, DESIRED_ENTRY, EXIT_OK, EXIT_USAGE, EXIT_REFUSED, EXIT_ABORTED, RENAME_RETRY_DELAYS_MS, LOCK_ERROR_CODES, BOM_UTF8, InstallStop;
 var init_config_installer = __esm({
   "src/config-installer.ts"() {
     "use strict";
     fs33 = __toESM(require("node:fs"));
     os6 = __toESM(require("node:os"));
     path31 = __toESM(require("node:path"));
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     import_node_util = require("node:util");
     import_json5 = __toESM(require("json5"));
     init_npx_cache_check();
@@ -41295,71 +41924,122 @@ for(const s of document.querySelectorAll("[data-ink]")){const v=s.dataset.ink;if
   }
 });
 
-// src/command-os/design/browser.ts
-async function launchBrowser(opts = {}) {
+// src/command-os/prospect/guarded-browser.ts
+async function openBrowser2() {
   let chromium;
   try {
     ({ chromium } = await import("playwright-core"));
   } catch (e) {
-    return { ok: false, reason: `playwright-core could not be loaded: ${e.message}` };
+    return { reason: `the browser library could not be loaded (${e.message.split("\n")[0]})` };
   }
-  const profile = opts.profileDir ?? chromeProfileDir();
-  const channels = ["chrome", "msedge"];
+  let proxy;
+  try {
+    proxy = await startGuardProxy();
+  } catch (e) {
+    return { reason: `the browser's network gatekeeper could not start (${e.message.split("\n")[0]})` };
+  }
+  const args = ["--disable-quic", "--force-webrtc-ip-handling-policy=disable_non_proxied_udp", "--webrtc-ip-handling-policy=disable_non_proxied_udp", "--disable-features=IsolateOrigins,site-per-process", "--disable-site-isolation-trials", "--proxy-bypass-list=<-loopback>", "--no-pings", "--disable-background-networking"];
   let last = "";
-  for (const channel of channels) {
+  for (const channel of ["chrome", "msedge"]) {
     try {
-      const context = await chromium.launchPersistentContext(profile, {
-        channel,
-        headless: opts.headless ?? true,
-        viewport: { width: 1440, height: 900 },
-        deviceScaleFactor: 1,
-        args: ["--hide-scrollbars"]
-      });
-      return { ok: true, browser: { context, close: () => context.close().catch(() => void 0) } };
+      return { browser: await chromium.launch({ channel, headless: true, chromiumSandbox: true, args, proxy: { server: proxy.url, bypass: "<-loopback>", username: proxy.username, password: proxy.password } }), proxy };
     } catch (e) {
-      last = e.message;
+      last = e.message.split("\n")[0];
     }
   }
-  return { ok: false, reason: `No Chrome or Edge could be launched on the automation profile (${last.split("\n")[0]}). If the cockpit's capture is running it holds the profile; close it and retry.` };
+  await proxy.close();
+  return { reason: `Chrome or Edge could not be opened on this computer (${last})` };
 }
-async function evaluateSource(page, source, arg) {
-  const fn = new Function("arg", `return (${source})(arg);`);
-  return await page.evaluate(fn, arg);
+async function openGuardedBrowser(viewport = { width: 1440, height: 900 }) {
+  const opened = await openBrowser2().catch((e) => ({ reason: e.message }));
+  if ("reason" in opened) return { ok: false, reason: opened.reason };
+  const { browser, proxy } = opened;
+  try {
+    const context = await browser.newContext({ viewport, serviceWorkers: "block", acceptDownloads: false, proxy: { server: proxy.url, username: proxy.username, password: proxy.password } });
+    await context.route("**/*", async (route) => {
+      const m = route.request().method();
+      if (m !== "GET" && m !== "HEAD") {
+        await route.abort("blockedbyclient").catch(() => void 0);
+        return;
+      }
+      await route.continue().catch(() => void 0);
+    });
+    await context.routeWebSocket(/.*/, (ws) => ws.close({ code: 1008, reason: "read-only" }));
+    context.on("page", (p) => {
+      if (context.pages().length > 1) void p.close().catch(() => void 0);
+    });
+    return { ok: true, context, close: () => closeQuietly(browser, proxy) };
+  } catch (e) {
+    await closeQuietly(browser, proxy);
+    return { ok: false, reason: e.message.split("\n")[0] };
+  }
 }
-var init_browser = __esm({
-  "src/command-os/design/browser.ts"() {
+async function closeQuietly(browser, proxy) {
+  await Promise.race([
+    (async () => {
+      await browser.close().catch(() => void 0);
+      await proxy.close().catch(() => void 0);
+    })(),
+    new Promise((r) => setTimeout(r, 1e4))
+  ]);
+  void proxy.close().catch(() => void 0);
+}
+var init_guarded_browser = __esm({
+  "src/command-os/prospect/guarded-browser.ts"() {
     "use strict";
-    init_interactive_capture();
+    init_net_guard();
   }
 });
 
 // src/command-os/design/extract-browser.ts
 async function browserPass(url, opts = {}) {
-  const launched = await launchBrowser({ headless: true });
-  if (!launched.ok) return launched;
-  const { context, close } = launched.browser;
-  try {
-    const page = context.pages()[0] ?? await context.newPage();
+  const navMs = opts.timeoutMs ?? 3e4;
+  const deadlineMs = navMs * 2 + 2e4;
+  let timer;
+  let expiredAt = false;
+  let closeOnce;
+  const expired = new Promise((resolve13) => {
+    timer = setTimeout(() => {
+      expiredAt = true;
+      resolve13({ ok: false, reason: `The rendered pass took longer than ${Math.round(deadlineMs / 1e3)} seconds and was stopped.` });
+    }, deadlineMs);
+  });
+  const work = (async () => {
+    const problem = await publicAddressProblem(url);
+    if (problem && problem !== "the address does not resolve") return { ok: false, reason: `The rendered pass did not open ${url}: ${problem}.` };
+    const launched = await openGuardedBrowser({ width: 1440, height: 900 });
+    if (!launched.ok) return { ok: false, reason: `The rendered pass could not start a guarded browser: ${launched.reason}` };
+    let closing;
+    closeOnce = () => closing ??= launched.close();
+    if (expiredAt) {
+      await closeOnce();
+      return { ok: false, reason: "The rendered pass was stopped at its deadline." };
+    }
+    const page = await launched.context.newPage();
     await page.setViewportSize({ width: 1440, height: 900 });
-    await page.goto(url, { waitUntil: "networkidle", timeout: opts.timeoutMs ?? 3e4 }).catch(async () => {
-      await page.goto(url, { waitUntil: "domcontentloaded", timeout: opts.timeoutMs ?? 3e4 });
+    await page.goto(url, { waitUntil: "networkidle", timeout: navMs }).catch(async () => {
+      await page.goto(url, { waitUntil: "domcontentloaded", timeout: navMs });
     });
     await page.waitForTimeout(800);
     const facts = await page.evaluate(BROWSER_FACTS_JS);
     const out = { ...facts, logoSvg: facts.logoSvg ?? void 0, logoSrc: facts.logoSrc ?? void 0 };
     if (opts.screenshot !== false) out.screenshotPng = await page.screenshot({ type: "png", fullPage: false });
     return { ok: true, facts: out };
-  } catch (e) {
-    return { ok: false, reason: `The rendered pass failed: ${e.message.split("\n")[0]}` };
+  })().catch((e) => ({ ok: false, reason: `The rendered pass failed: ${e.message.split("\n")[0]}` }));
+  try {
+    return await Promise.race([work, expired]);
   } finally {
-    await close();
+    clearTimeout(timer);
+    expiredAt = true;
+    if (closeOnce) await closeOnce();
   }
 }
 var BROWSER_FACTS_JS;
 var init_extract_browser = __esm({
   "src/command-os/design/extract-browser.ts"() {
     "use strict";
-    init_browser();
+    init_guarded_browser();
+    init_net_guard();
     BROWSER_FACTS_JS = `(() => {
   const cs = (el) => el ? getComputedStyle(el) : null;
   const rgbOf = (v) => (v && v !== "rgba(0, 0, 0, 0)" && v !== "transparent") ? v : null;
@@ -42855,7 +43535,7 @@ function registerAssessmentTools(server2, client) {
       const dir = args.outDir ?? (0, import_node_path8.join)((0, import_node_os.homedir)(), "Documents", "assessments");
       (0, import_node_fs8.mkdirSync)(dir, { recursive: true });
       const slug3 = (state.biz || "assessment").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
-      const file2 = (0, import_node_path8.join)(dir, `${slug3}-${(0, import_node_crypto13.randomBytes)(4).toString("hex")}.html`);
+      const file2 = (0, import_node_path8.join)(dir, `${slug3}-${(0, import_node_crypto14.randomBytes)(4).toString("hex")}.html`);
       (0, import_node_fs8.writeFileSync)(file2, html2, "utf8");
       return {
         written: file2,
@@ -42878,7 +43558,7 @@ function registerAssessmentTools(server2, client) {
     }
   );
 }
-var import_node_util3, import_zod61, import_node_crypto13, import_node_fs8, import_node_os, import_node_path8, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
+var import_node_util3, import_zod61, import_node_crypto14, import_node_fs8, import_node_os, import_node_path8, QUESTION_UNITS, AREA_TITLE, ASK, AREA_OF, ASSUMPTION_LABEL, LOOKUP, StateSchema;
 var init_assessment = __esm({
   "src/tools/assessment.ts"() {
     "use strict";
@@ -42891,7 +43571,7 @@ var init_assessment = __esm({
     init_store3();
     init_engine();
     init_report();
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     import_node_fs8 = require("node:fs");
     import_node_os = require("node:os");
     import_node_path8 = require("node:path");
@@ -43439,7 +44119,7 @@ function notify(message) {
     }
   }
 }
-function openBrowser2(port) {
+function openBrowser3(port) {
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const openArgs = process.platform === "win32" ? ["/c", "start", "", `http://localhost:${port}`] : [`http://localhost:${port}`];
   try {
@@ -43952,8 +44632,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
   note.textContent="Command OS cannot verify this account\u2019s sender. This button records a manual task to confirm the sender and send the questionnaire in GoHighLevel.";w.appendChild(note);box.appendChild(w)}
  if(mode==="transcript"){const w=document.createElement("div");w.className="cds-stack";
   const tabs=document.createElement("div");tabs.className="cds-tabs ichoice";tabs.setAttribute("role","group");tabs.setAttribute("aria-label","Where the material comes from");
-  iSub[id]=iSub[id]||"paste";
-  for(const [k,lab] of [["paste","Paste a transcript"],["doc","A text document"],["url","From a link"],["recorder","From my recorder"]]){
+  /* "From a link" is off in 3.88.3 (the browser/fetch inventory, 2026-10-09): the tab is gone and a remembered choice falls back to Paste. */
+  if(!iSub[id]||iSub[id]==="url")iSub[id]="paste";
+  for(const [k,lab] of [["paste","Paste a transcript"],["doc","A text document"],["recorder","From my recorder"]]){
    const tb=document.createElement("button");tb.className="cds-tab";tb.textContent=lab;if(iSub[id]===k){tb.className="cds-tab on";tb.setAttribute("aria-current","page")}
    tb.onclick=()=>{iSub[id]=k;render(lastState,lastRun)};tabs.appendChild(tb)}
   w.appendChild(tabs);
@@ -45111,7 +45792,7 @@ function cockpitHeader(req, name) {
   return Array.isArray(value) ? value.join(",") : value ?? "";
 }
 function headerFields(req, name) {
-  if (req instanceof http.IncomingMessage || "rawHeaders" in req) {
+  if (req instanceof http2.IncomingMessage || "rawHeaders" in req) {
     const raw = req.rawHeaders;
     if (!Array.isArray(raw)) return [];
     const values = [];
@@ -45308,7 +45989,7 @@ async function runDashboard(argv) {
     return 0;
   }
   if (await cockpitAlreadyRunning(port)) {
-    openBrowser2(port);
+    openBrowser3(port);
     process.stderr.write(`
   Command OS is already running. Opening localhost:${port}
 
@@ -45652,7 +46333,7 @@ async function runDashboard(argv) {
   };
   const connectionsRoutes = createConnectionsRoutes(seatToken, port, gate2.plan);
   const briefRoutes = createBriefRoutes(seatToken, port, gate2.plan, registry2);
-  const server2 = http.createServer(guarded(seatToken, port, (req, res) => {
+  const server2 = http2.createServer(guarded(seatToken, port, (req, res) => {
     const url = cockpitPath(req);
     if (connectionsRoutes(req, res)) return;
     if (briefRoutes(req, res)) return;
@@ -46224,6 +46905,11 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             return;
           }
           if (url === "/api/intake-prefill") {
+            if (args.url && !args.file) {
+              res.writeHead(200, { "Content-Type": "application/json" });
+              res.end(JSON.stringify({ ok: false, answers: {}, unknown: args.labels ?? [], error: LINK_READING_OFF_MESSAGE }));
+              return;
+            }
             let bin;
             try {
               bin = claudeBin();
@@ -46529,7 +47215,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const address = new URL(String(args.url || ""));
           if (!["http:", "https:"].includes(address.protocol)) throw new Error("Enter the public website address.");
           const before = readStatusRecord(locationId2);
-          const response = await fetch(address.href, { signal: AbortSignal.timeout(15e3) });
+          const response = await guardedFetchLike(address.href, { signal: AbortSignal.timeout(15e3) });
           const html2 = await response.text();
           const now = readStatusRecord(locationId2);
           if (now.preparedStamp !== before.preparedStamp || !response.ok || !verifyPublicationContent(html2, before.preparedStamp || "", before.preparedSentences || [])) throw new Error("Prepared, not yet published. This address does not show the latest handoff. Publish the prepared page, then verify it again.");
@@ -46561,7 +47247,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           if (stale.length) throw new Error(stale[0].reason);
           const publication = readStatusRecord(locationId2);
           if (!publication.lastPublishedAt || publication.lastError || !publication.lastUrl) throw new Error("The handoff is not yet published. Publish it and verify the public address before sending.");
-          const response = await fetch(publication.lastUrl, { signal: AbortSignal.timeout(15e3) });
+          const response = await guardedFetchLike(publication.lastUrl, { signal: AbortSignal.timeout(15e3) });
           const html2 = await response.text();
           const snapshot = readHandoffSnapshot(locationId2);
           if (!response.ok || !snapshot?.lines.length || !verifyPublicationContent(html2, publication.preparedStamp || "", publication.preparedSentences || [])) throw new Error("The public address does not show the current handoff. Publish the latest page before sending.");
@@ -47080,7 +47766,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
   ${roster.length} client${roster.length === 1 ? "" : "s"} on the board. Ctrl-C to stop.
 
 `);
-  if (!argv.includes("--no-open")) openBrowser2(port);
+  if (!argv.includes("--no-open")) openBrowser3(port);
   {
     const { state: fixed, recovered } = recoverStuckStages(readCockpitState());
     if (recovered) {
@@ -47099,7 +47785,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     process.on("SIGTERM", stop2);
   });
 }
-var import_zod62, import_node_util4, fs37, path35, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest;
+var import_zod62, import_node_util4, fs37, path35, http2, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
@@ -47138,7 +47824,7 @@ var init_dashboard = __esm({
     init_build_obligations();
     fs37 = __toESM(require("fs"));
     path35 = __toESM(require("path"));
-    http = __toESM(require("http"));
+    http2 = __toESM(require("http"));
     import_child_process4 = require("child_process");
     init_credentials_store();
     init_attestation();
@@ -47200,6 +47886,7 @@ var init_dashboard = __esm({
     osmod = __toESM(require("os"));
     init_script_json();
     init_svg_sanitize();
+    init_net_guard();
     STAGES2 = [
       "Intake",
       "Brief",
@@ -49006,13 +49693,13 @@ function contactServiceNote(payload) {
 function registerSmartListTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function smartListRequest(method, path44, body) {
-    const url = `${SMARTLIST_BASE}${path44}`;
+  async function smartListRequest(method, path45, body) {
+    const url = `${SMARTLIST_BASE}${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(client, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Smart Lists API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -49257,11 +49944,11 @@ var init_smart_lists = __esm({
 function registerReputationTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function reputationRequest(method, path44) {
-    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path44}`);
+  async function reputationRequest(method, path45) {
+    const response = await builderRequest(client, method, `${REPUTATION_BASE}${path45}`);
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Reputation API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Reputation API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -49399,11 +50086,11 @@ var init_email_campaigns = __esm({
 function registerMembershipTools(server2, builderClient) {
   if (!builderClient) return;
   const client = builderClient;
-  async function membershipRequest(path44, method = "GET", body) {
-    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path44}`, body ? { body } : {});
+  async function membershipRequest(path45, method = "GET", body) {
+    const response = await builderRequest(client, method, `${MEMBERSHIP_BASE2}${path45}`, body ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Membership API Error ${response.status}: ${method} ${path44}
+      throw new Error(`Membership API Error ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -50422,10 +51109,10 @@ async function confirm(run) {
 async function runProbes(client, loc) {
   return Promise.all(
     PROBES.map((probe) => confirm(async () => {
-      const path44 = probe.path.replace("{loc}", loc);
+      const path45 = probe.path.replace("{loc}", loc);
       const params = probe.params ? Object.fromEntries(Object.entries(probe.params).map(([k, v]) => [k, substitute(v, loc)])) : void 0;
       try {
-        const raw = await client.get(path44, { params, noRetry: true });
+        const raw = await client.get(path45, { params, noRetry: true });
         const count2 = countRows(raw, probe.listKeys);
         return {
           key: probe.key,
@@ -51243,6 +51930,161 @@ var init_probe = __esm({
   }
 });
 
+// src/command-os/design/browser.ts
+async function evaluateSource(page, source, arg) {
+  const fn = new Function("arg", `return (${source})(arg);`);
+  return await page.evaluate(fn, arg);
+}
+var init_browser = __esm({
+  "src/command-os/design/browser.ts"() {
+    "use strict";
+    init_interactive_capture();
+  }
+});
+
+// src/command-os/design/local-target.ts
+function realDir(p) {
+  if (!p || !p.trim()) return null;
+  try {
+    const r = fs40.realpathSync(path38.resolve(p));
+    return fs40.statSync(r).isDirectory() ? r : null;
+  } catch {
+    return null;
+  }
+}
+function within(root, p) {
+  return p === root || p.startsWith(root.endsWith(path38.sep) ? root : root + path38.sep);
+}
+function safeDesignRoot(cwd) {
+  const r = realDir(cwd);
+  if (!r) return null;
+  const home = realDir(os7.homedir());
+  if (r === path38.parse(r).root) return null;
+  if (home && (r === home || within(r, home))) return null;
+  const depth = (p) => path38.relative(path38.parse(p).root, p).split(path38.sep).filter(Boolean).length;
+  if ([path38.resolve(cwd), r].some((p) => depth(p) < 2)) return null;
+  if (SYSTEM_DIRS.some((d) => within(d, r))) return null;
+  if (windowsSystemDirs().some((d) => within(d, r))) return null;
+  const own = home ? ["Documents", "Downloads", "Desktop", "Movies", "Music", "Pictures", "Public", "OneDrive"].map((n) => path38.join(home, n)) : [];
+  const shared = ["/Users/Shared", "/tmp", "/private/tmp", "/var/tmp", "/private/var/tmp", "/var/folders", "/private/var/folders", realDir(os7.tmpdir()) ?? os7.tmpdir()];
+  if ([...own, ...shared].some((d) => r === d || r === realDir(d))) return null;
+  const appData = home ? [path38.join(home, "Library"), path38.join(home, "AppData"), process.env.APPDATA, process.env.LOCALAPPDATA] : [];
+  for (const d of appData) if (d && (within(realDir(d) ?? path38.resolve(d), r) || within(path38.resolve(d), r))) return null;
+  if (home && within(home, r) && path38.relative(home, r).split(path38.sep)[0].startsWith(".")) return null;
+  return r;
+}
+function windowsSystemDirs() {
+  if (process.platform !== "win32") return [];
+  return [process.env.SystemRoot, process.env.ProgramFiles, process.env["ProgramFiles(x86)"], process.env.ProgramData].filter((d) => !!d).map((d) => realDir(d) ?? path38.resolve(d));
+}
+function designRoots(env2 = process.env, cwd = process.cwd()) {
+  const out = [];
+  const named = env2[DESIGN_DIR_ENV]?.trim() ? safeDesignRoot(env2[DESIGN_DIR_ENV]) : null;
+  const moved = env2[BRANDS_ENV]?.trim();
+  const brands = moved ? safeDesignRoot(moved) : realDir(brandsDir());
+  for (const r of [named, safeDesignRoot(cwd), brands]) if (r && !out.includes(r)) out.push(r);
+  return out;
+}
+function urlFor(root, file2) {
+  return LOCAL_ORIGIN + "/" + path38.relative(root, file2).split(path38.sep).map(encodeURIComponent).join("/");
+}
+function hidden(rel) {
+  return rel.split(path38.sep).some((s) => s.startsWith("."));
+}
+function checkLocalTarget(target, roots = designRoots()) {
+  const abs = path38.resolve(target);
+  let file2;
+  try {
+    file2 = fs40.realpathSync(abs);
+  } catch {
+    throw new Error(`No file at ${abs}.`);
+  }
+  const ext = path38.extname(file2).toLowerCase();
+  if (ext !== ".html" && ext !== ".htm") throw new Error(`verify_design renders .html files only; ${abs} is not one.`);
+  const st = fs40.statSync(file2);
+  if (!st.isFile()) throw new Error(`${abs} is not a file.`);
+  if (st.size > MAX_PAGE_BYTES) throw new Error(`${abs} is larger than 10 MB, so it is not rendered.`);
+  const root = roots.find((r) => within(r, file2) && !hidden(path38.relative(r, file2)));
+  if (!root) {
+    const where = roots.length ? roots.join(", ") : "none is set up on this computer";
+    throw new Error(`verify_design only renders pages inside the design folders (${where}); ${abs} is outside them. Move the page into your project or brand folder, or set ${DESIGN_DIR_ENV} to the folder that holds it.`);
+  }
+  return { file: file2, root, url: urlFor(root, file2), html: fs40.readFileSync(file2, "utf8") };
+}
+function localFileFor(root, raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (u.origin !== LOCAL_ORIGIN || u.username || u.password) return null;
+  const segs = [];
+  for (const part of u.pathname.split("/").slice(1)) {
+    let s;
+    try {
+      s = decodeURIComponent(part);
+    } catch {
+      return null;
+    }
+    if (!s || s.startsWith(".") || /[\\/\0]/.test(s) || s.includes(":")) return null;
+    segs.push(s);
+  }
+  if (!segs.length) return null;
+  let file2;
+  try {
+    file2 = fs40.realpathSync(path38.join(root, ...segs));
+  } catch {
+    return null;
+  }
+  if (!within(root, file2) || file2 === root || hidden(path38.relative(root, file2))) return null;
+  const contentType = SERVED[path38.extname(file2).toLowerCase()];
+  if (!contentType) return null;
+  try {
+    const st = fs40.statSync(file2);
+    if (!st.isFile() || st.size > MAX_FILE_BYTES) return null;
+  } catch {
+    return null;
+  }
+  return { file: file2, contentType };
+}
+var fs40, os7, path38, DESIGN_DIR_ENV, LOCAL_ORIGIN, MAX_PAGE_BYTES, MAX_FILE_BYTES, SERVED, SYSTEM_DIRS;
+var init_local_target = __esm({
+  "src/command-os/design/local-target.ts"() {
+    "use strict";
+    fs40 = __toESM(require("node:fs"));
+    os7 = __toESM(require("node:os"));
+    path38 = __toESM(require("node:path"));
+    init_store();
+    DESIGN_DIR_ENV = "GHL_MCP_DESIGN_DIR";
+    LOCAL_ORIGIN = "http://verify.invalid";
+    MAX_PAGE_BYTES = 10 * 1024 * 1024;
+    MAX_FILE_BYTES = 25 * 1024 * 1024;
+    SERVED = {
+      ".html": "text/html; charset=utf-8",
+      ".htm": "text/html; charset=utf-8",
+      ".css": "text/css; charset=utf-8",
+      ".js": "text/javascript; charset=utf-8",
+      ".mjs": "text/javascript; charset=utf-8",
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".jpeg": "image/jpeg",
+      ".gif": "image/gif",
+      ".webp": "image/webp",
+      ".avif": "image/avif",
+      ".svg": "image/svg+xml",
+      ".ico": "image/x-icon",
+      ".woff": "font/woff",
+      ".woff2": "font/woff2",
+      ".ttf": "font/ttf",
+      ".otf": "font/otf",
+      ".mp4": "video/mp4",
+      ".webm": "video/webm"
+    };
+    SYSTEM_DIRS = ["/etc", "/private/etc", "/usr", "/bin", "/sbin", "/System", "/Library", "/opt", "/dev", "/proc", "/sys"];
+  }
+});
+
 // src/command-os/design/png.ts
 function decodePng(buf) {
   const b = Buffer.isBuffer(buf) ? buf : Buffer.from(buf);
@@ -51272,7 +52114,7 @@ function decodePng(buf) {
   if (interlace !== 0) throw new Error("interlaced PNG is not supported");
   const channels = colorType === 0 ? 1 : colorType === 2 ? 3 : colorType === 3 ? 1 : colorType === 4 ? 2 : colorType === 6 ? 4 : 0;
   if (!channels) throw new Error(`PNG colour type ${colorType} is not supported`);
-  const raw = (0, import_node_zlib.inflateSync)(Buffer.concat(idat));
+  const raw = (0, import_node_zlib2.inflateSync)(Buffer.concat(idat));
   const bpp = channels;
   const stride = width * bpp;
   const out = new Uint8Array(width * height * 4);
@@ -51357,11 +52199,11 @@ function pixelAt(png, x, y) {
   const o = (yi * png.width + xi) * 4;
   return { r: png.rgba[o], g: png.rgba[o + 1], b: png.rgba[o + 2] };
 }
-var import_node_zlib, SIG;
+var import_node_zlib2, SIG;
 var init_png = __esm({
   "src/command-os/design/png.ts"() {
     "use strict";
-    import_node_zlib = require("node:zlib");
+    import_node_zlib2 = require("node:zlib");
     SIG = [137, 80, 78, 71, 13, 10, 26, 10];
   }
 });
@@ -52990,11 +53832,14 @@ async function settle(page) {
   await page.evaluate(() => document.fonts?.ready).catch(() => void 0);
   await page.waitForTimeout(250);
 }
-async function readTarget(target) {
-  if (isUrl(target)) return { html: null, url: target };
-  const abs = path38.resolve(target);
-  if (!fs40.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-  return { html: fs40.readFileSync(abs, "utf8"), url: (0, import_node_url.pathToFileURL)(abs).toString() };
+async function readTarget(target, roots) {
+  if (isUrl(target)) {
+    const problem = await publicAddressProblem(target);
+    if (problem) throw new Error(`verify_design did not open ${target}: ${problem}.`);
+    return { html: null, url: target, root: null };
+  }
+  const t = checkLocalTarget(target, roots);
+  return { html: t.html, url: t.url, root: t.root };
 }
 function slidePixels(index, png, file2, sec, brand) {
   let img;
@@ -53038,11 +53883,35 @@ function slidePixels(index, png, file2, sec, brand) {
   });
   return { index, screenshot: file2, bgShare, accentShare, hueBuckets, overImage };
 }
+async function serveLocalPage(context, root, url, html2) {
+  const notServed = { status: 404, contentType: "text/plain", body: "not served" };
+  await context.route(`${LOCAL_ORIGIN}/**`, async (route) => {
+    const req = route.request();
+    if (req.method() !== "GET" && req.method() !== "HEAD") {
+      await route.abort("blockedbyclient").catch(() => void 0);
+      return;
+    }
+    if (req.url() === url) {
+      await route.fulfill({ status: 200, contentType: "text/html; charset=utf-8", body: html2 }).catch(() => void 0);
+      return;
+    }
+    const hit = localFileFor(root, req.url());
+    let body = null;
+    if (hit) {
+      try {
+        body = fs41.readFileSync(hit.file);
+      } catch {
+        body = null;
+      }
+    }
+    await route.fulfill(hit && body ? { status: 200, contentType: hit.contentType, body } : notServed).catch(() => void 0);
+  });
+}
 async function verifyDesign(opts) {
-  const { html: html2, url } = await readTarget(opts.target);
+  const { html: html2, url, root } = await readTarget(opts.target, opts.roots);
   const placement = opts.placement ?? "html";
   const medium = opts.medium;
-  fs40.mkdirSync(opts.outDir, { recursive: true });
+  fs41.mkdirSync(opts.outDir, { recursive: true });
   const files = [];
   const screenshots = [];
   const at = (/* @__PURE__ */ new Date()).toISOString();
@@ -53064,10 +53933,16 @@ async function verifyDesign(opts) {
   if (!conformance.ok) {
     rules = [];
   } else {
-    const launched = opts.noBrowser ? { ok: false, reason: "browser disabled for this run" } : await launchBrowser({ headless: opts.headless ?? true, profileDir: opts.profileDir });
+    const launched = opts.noBrowser ? { ok: false, reason: "browser disabled for this run" } : await openGuardedBrowser();
     if (launched.ok) {
-      const { context, close } = launched.browser;
-      try {
+      const { context, close } = launched;
+      let timer;
+      const expired = new Promise((_, reject) => {
+        const limit = opts.deadlineMs ?? VERIFY_DEADLINE_MS;
+        timer = setTimeout(() => reject(new Error(`verify_design stopped: the page did not finish rendering within ${Math.round(limit / 1e3)} seconds, so nothing was graded.`)), limit);
+      });
+      const work = (async () => {
+        if (root !== null && html2 !== null) await serveLocalPage(context, root, url, html2);
         const page = context.pages()[0] ?? await context.newPage();
         if (medium === "deck") {
           await page.setViewportSize({ width: 1920, height: 1080 });
@@ -53087,8 +53962,8 @@ async function verifyDesign(opts) {
             try {
               await loc.scrollIntoViewIfNeeded({ timeout: 5e3 });
               const png = await loc.screenshot({ type: "png", timeout: 15e3 });
-              fs40.writeFileSync(path38.join(opts.outDir, file2), png);
-              files.push(path38.join(opts.outDir, file2));
+              fs41.writeFileSync(path39.join(opts.outDir, file2), png);
+              files.push(path39.join(opts.outDir, file2));
               screenshots.push(file2);
               pixels.push(slidePixels(sec.index, png, file2, sec, opts.brand));
             } catch {
@@ -53120,8 +53995,8 @@ async function verifyDesign(opts) {
           const shot = "page-1440.png";
           try {
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs40.writeFileSync(path38.join(opts.outDir, shot), png);
-            files.push(path38.join(opts.outDir, shot));
+            fs41.writeFileSync(path39.join(opts.outDir, shot), png);
+            files.push(path39.join(opts.outDir, shot));
             screenshots.push(shot);
           } catch {
           }
@@ -53129,8 +54004,8 @@ async function verifyDesign(opts) {
             await page.setViewportSize({ width: 390, height: 844 });
             await page.evaluate(SETTLE_SCROLL_JS).catch(() => void 0);
             const png = await page.screenshot({ type: "png", fullPage: true, timeout: 2e4 });
-            fs40.writeFileSync(path38.join(opts.outDir, "page-390.png"), png);
-            files.push(path38.join(opts.outDir, "page-390.png"));
+            fs41.writeFileSync(path39.join(opts.outDir, "page-390.png"), png);
+            files.push(path39.join(opts.outDir, "page-390.png"));
             screenshots.push("page-390.png");
           } catch {
           }
@@ -53149,7 +54024,12 @@ async function verifyDesign(opts) {
             rules.push(...checkConversion(conv, { brief: opts.conversion, gate: opts.gate ?? "ship", copyAxes: opts.copyAxes ?? null }, Boolean(conv)));
           }
         }
+      })();
+      work.catch(() => void 0);
+      try {
+        await Promise.race([work, expired]);
       } finally {
+        clearTimeout(timer);
         await close();
       }
     } else {
@@ -53203,25 +54083,27 @@ async function verifyDesign(opts) {
     screenshots
   };
   const checked = VerificationSchema.parse(report3);
-  const jsonPath = path38.join(opts.outDir, "verification.json");
-  fs40.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
+  const jsonPath = path39.join(opts.outDir, "verification.json");
+  fs41.writeFileSync(jsonPath, JSON.stringify(checked, null, 2) + "\n");
   files.push(jsonPath);
   const reportHtml = renderVerificationHtml(checked, opts.branding);
-  const htmlPath = path38.join(opts.outDir, "verification.html");
-  fs40.writeFileSync(htmlPath, reportHtml);
+  const htmlPath = path39.join(opts.outDir, "verification.html");
+  fs41.writeFileSync(htmlPath, reportHtml);
   files.push(htmlPath);
   return { report: checked, files, reportHtml };
 }
-var fs40, path38, import_node_url, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS;
+var fs41, path39, WEB_WIDTHS, SETTLE_SCROLL_JS, FOCUS_JS, VERIFY_DEADLINE_MS;
 var init_verify = __esm({
   "src/command-os/design/verify.ts"() {
     "use strict";
-    fs40 = __toESM(require("node:fs"));
-    path38 = __toESM(require("node:path"));
-    import_node_url = require("node:url");
+    fs41 = __toESM(require("node:fs"));
+    path39 = __toESM(require("node:path"));
     init_lint();
     init_probe();
     init_browser();
+    init_guarded_browser();
+    init_net_guard();
+    init_local_target();
     init_png();
     init_slides2();
     init_web2();
@@ -53259,6 +54141,7 @@ var init_verify = __esm({
   }
   return out;
 }`;
+    VERIFY_DEADLINE_MS = 3e5;
   }
 });
 
@@ -53470,17 +54353,15 @@ Fix exactly those and reply with ONLY the complete corrected HTML in one \`\`\`h
 ${html2}
 \`\`\``;
 }
-async function defaultVerify(file2, medium, brand, outDir, mode, headless = true, conversion) {
-  const { mkdtempSync } = await import("node:fs");
-  const { tmpdir: tmpdir2 } = await import("node:os");
+async function defaultVerify(file2, medium, brand, outDir, mode, conversion) {
+  const own = safeDesignRoot((0, import_node_path9.dirname)(file2));
   const r = await verifyDesign({
     target: file2,
     medium,
     brand,
     outDir,
     mode,
-    headless,
-    profileDir: mkdtempSync((0, import_node_path9.join)(tmpdir2(), "ds-run-profile-")),
+    roots: own ? [own, ...designRoots()] : designRoots(),
     ...conversion ? { pageMode: "conversion", conversion: conversion.brief, gate: conversion.gate } : {}
   });
   if (r.report.renderedWith !== "browser") {
@@ -53504,7 +54385,7 @@ async function runDesign(opts) {
   const maxPasses = Math.max(1, Math.min(3, opts.maxPasses ?? 3));
   const generate = opts.generate ?? claudeGenerate(opts.model ?? DEFAULT_MODEL);
   const conversionRun = brief.options.pageMode === "conversion" && brief.conversion ? { brief: brief.conversion, gate: opts.gate ?? "ship" } : void 0;
-  const verify = opts.verify ?? ((f, m, b, o, mode2) => defaultVerify(f, m, b, o, mode2, opts.headless ?? true, conversionRun));
+  const verify = opts.verify ?? ((f, m, b, o, mode2) => defaultVerify(f, m, b, o, mode2, conversionRun));
   const mode = medium === "deck" ? brief.options.mode : void 0;
   const result = { ok: false, greenAt: null, passes: [], costUsd: 0, ms: 0, model: null, outDir, brandSlug: dna.slug, medium, stoppedBecause: "" };
   let instruction = `${pack.markdown}
@@ -53589,6 +54470,7 @@ var init_run2 = __esm({
     init_copy_grade();
     init_lint();
     init_verify();
+    init_local_target();
     init_looks();
     init_store();
     init_brief_validation();
@@ -53636,7 +54518,7 @@ function registerDesignStudioTools(server2) {
       const { dna, logoSvg, logoPng } = deriveBrandDna(raw, { name, slug: slug3, rights: { declaration: a.rights, at: (/* @__PURE__ */ new Date()).toISOString() }, browser, firecrawl: fc });
       if (a.rights === "none" && dna.logo) notes.push("Rights declared as none: the logo is stored for reference only; do not place it on a client-facing page.");
       const written = writeBrand(dna, { logoSvg, logoPng, screenshotPng: browser?.screenshotPng });
-      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path39.basename(f)), notes };
+      return { ok: true, brand: summarise2(dna), passes: { static: true, browser: Boolean(browser), firecrawl: Boolean(fc) }, spaShell: raw.spaShell, dir: written.dir, files: written.files.map((f) => path40.basename(f)), notes };
     }
   );
   safeTool(
@@ -53803,18 +54685,18 @@ function registerDesignStudioTools(server2) {
     "Check a written HTML file honours the output contract before grading: section and role markers present and consistent, no outside scripts, one h1 on a page, every image described. Deterministic; no browser. A file that fails this is not graded by verify_design.",
     { file: import_zod76.z.string().describe("Path to the .html file."), medium: import_zod76.z.enum(MEDIA) },
     async ({ file: file2, medium }) => {
-      const abs = path39.resolve(file2);
-      if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-      const r = lintDesignContract(fs41.readFileSync(abs, "utf8"), medium);
+      const abs = path40.resolve(file2);
+      if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+      const r = lintDesignContract(fs42.readFileSync(abs, "utf8"), medium);
       return { ok: r.ok, problems: r.problems, warnings: r.warnings, facts: r.facts };
     }
   );
   safeTool(
     server2,
     "verify_design",
-    "Render a deck or page (a local .html or a published URL) in the automation browser and measure it against the design rules and the sameness tells. Every rule on its own line: measured, proxy or judgment call, with the value and the evidence. Writes verification.json, verification.html and screenshots to outDir. PASS means zero failed measured rules and NOTHING MORE: every rule measures craft \u2014 type, spacing, colour, contrast, structure, performance and the machine-made tells \u2014 and none of them measures whether the page persuades anyone. A page can pass every rule and still be boring and unsellable. Never report a pass as a quality claim; judge the writing separately. GoHighLevel pages: pass placement:'ghl' to grade on the builder subset.",
+    "Render a deck or page (a local .html inside your project or brand folder, or a public web address) in a fresh, guarded browser (no saved logins, public addresses only) and measure it against the design rules and the sameness tells. Every rule on its own line: measured, proxy or judgment call, with the value and the evidence. Writes verification.json, verification.html and screenshots to outDir. PASS means zero failed measured rules and NOTHING MORE: every rule measures craft \u2014 type, spacing, colour, contrast, structure, performance and the machine-made tells \u2014 and none of them measures whether the page persuades anyone. A page can pass every rule and still be boring and unsellable. Never report a pass as a quality claim; judge the writing separately. GoHighLevel pages: pass placement:'ghl' to grade on the builder subset.",
     {
-      target: import_zod76.z.string().describe("A local .html path or an http(s) URL."),
+      target: import_zod76.z.string().describe("A local .html path inside the project folder, the brand folder or GHL_MCP_DESIGN_DIR, or a public http(s) URL."),
       medium: import_zod76.z.enum(MEDIA),
       brandSlug: import_zod76.z.string().optional().describe("The brand to measure against (accent share, logo, faces)."),
       outDir: import_zod76.z.string().optional().describe("Where to write the report. Default: <file dir>/verify-<name>/ or ./verify-<host>/ for URLs."),
@@ -53826,7 +54708,7 @@ function registerDesignStudioTools(server2) {
     async (a) => {
       const brand = a.brandSlug ? houseLooks().find((d) => d.slug === a.brandSlug) ?? readBrand(slugify(a.brandSlug)) : void 0;
       const isUrl2 = /^https?:\/\//i.test(a.target);
-      const outDir = a.outDir ?? (isUrl2 ? path39.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path39.join(path39.dirname(path39.resolve(a.target)), `verify-${path39.basename(a.target, ".html")}`));
+      const outDir = a.outDir ?? (isUrl2 ? path40.resolve(`verify-${new URL(a.target).hostname.replace(/[^a-z0-9.-]/gi, "_")}`) : path40.join(path40.dirname(path40.resolve(a.target)), `verify-${path40.basename(a.target, ".html")}`));
       const r = await verifyDesign({ target: a.target, medium: a.medium, brand, outDir, placement: a.placement, mode: a.mode, ratio: a.ratio, logo: a.logo, branding: readAgencyBranding() });
       const v = r.report;
       const failed = v.rules.filter((x) => x.state === "MEASURED-FAIL").map((x) => `${x.ruleId} ${x.name}: ${x.measured ?? ""}`);
@@ -53841,7 +54723,7 @@ function registerDesignStudioTools(server2) {
         judgments: v.rules.filter((x) => x.state === "ASSERTED").map((x) => `${x.ruleId} ${x.name}: ${x.detail ?? ""}`),
         notApplicable: v.rules.filter((x) => x.state === "N-A").map((x) => `${x.ruleId}: ${x.detail ?? ""}`),
         brandMatch: v.brandMatch,
-        report: path39.join(outDir, "verification.html"),
+        report: path40.join(outDir, "verification.html"),
         files: r.files,
         ...a.placement === "ghl" && { builderOwned: builderOwnedRules().map((b) => `${b.rule.id} ${b.rule.name}: ${b.why}`) }
       };
@@ -53869,11 +54751,20 @@ function registerDesignStudioTools(server2) {
       if (!a.pageDataDownloadUrl && !a.file) throw new Error("Pass pageDataDownloadUrl (from get_page_full) or file.");
       let page;
       if (a.file) {
-        const abs = path39.resolve(a.file);
-        if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        page = JSON.parse(fs41.readFileSync(abs, "utf8"));
+        const abs = path40.resolve(a.file);
+        if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        page = JSON.parse(fs42.readFileSync(abs, "utf8"));
       } else {
-        const response = await fetch(a.pageDataDownloadUrl, { headers: { Accept: "application/json,*/*" } });
+        const host = (() => {
+          try {
+            const u = new URL(a.pageDataDownloadUrl);
+            return u.protocol === "https:" ? u.hostname : "";
+          } catch {
+            return "";
+          }
+        })();
+        if (!GHL_PAGE_DATA_HOSTS.some((h) => host === h || host.endsWith("." + h))) throw new Error("pageDataDownloadUrl must be the https address get_page_full returned (GoHighLevel's storage).");
+        const response = await guardedFetchLike(a.pageDataDownloadUrl, { headers: { Accept: "application/json,*/*" }, signal: AbortSignal.timeout(3e4), maxBytes: 5e7 });
         if (!response.ok) throw new Error(`Could not download the page data: HTTP ${response.status}. Re-read get_page_full \u2014 the download URL expires.`);
         page = JSON.parse(await response.text());
       }
@@ -53912,9 +54803,9 @@ function registerDesignStudioTools(server2) {
       if (!a.file && !a.text) throw new Error("Pass file or text.");
       let html2 = a.text ?? "";
       if (a.file) {
-        const abs = path39.resolve(a.file);
-        if (!fs41.existsSync(abs)) throw new Error(`No file at ${abs}.`);
-        html2 = fs41.readFileSync(abs, "utf8");
+        const abs = path40.resolve(a.file);
+        if (!fs42.existsSync(abs)) throw new Error(`No file at ${abs}.`);
+        html2 = fs42.readFileSync(abs, "utf8");
       }
       const r = await gradeCopy(html2, claudeGenerate(a.model), { icp: a.icp });
       if (!r.grade) {
@@ -53949,13 +54840,13 @@ function registerDesignStudioTools(server2) {
     }
   );
 }
-var import_zod76, fs41, path39, summarise2;
+var import_zod76, fs42, path40, GHL_PAGE_DATA_HOSTS, summarise2;
 var init_design_studio = __esm({
   "src/tools/design-studio.ts"() {
     "use strict";
     import_zod76 = require("zod");
-    fs41 = __toESM(require("node:fs"));
-    path39 = __toESM(require("node:path"));
+    fs42 = __toESM(require("node:fs"));
+    path40 = __toESM(require("node:path"));
     init_tool_helpers();
     init_extract();
     init_extract_browser();
@@ -53974,6 +54865,8 @@ var init_design_studio = __esm({
     init_color();
     init_branding();
     init_svg_sanitize();
+    init_net_guard();
+    GHL_PAGE_DATA_HOSTS = ["firebasestorage.googleapis.com", "storage.googleapis.com", "backend.leadconnectorhq.com"];
     summarise2 = (d) => ({
       slug: d.slug,
       name: d.name,
@@ -54679,11 +55572,11 @@ var init_audit = __esm({
 // src/command-os/delivery-audit/store.ts
 function deliveryAuditPath() {
   const override = process.env[DELIVERY_AUDIT_ENV];
-  return override && override.trim() ? override : path40.join(appDataDir(), "delivery-audit.json");
+  return override && override.trim() ? override : path41.join(appDataDir(), "delivery-audit.json");
 }
 function readDeliveryAudit() {
   try {
-    const parsed2 = JSON.parse(fs42.readFileSync(deliveryAuditPath(), "utf-8"));
+    const parsed2 = JSON.parse(fs43.readFileSync(deliveryAuditPath(), "utf-8"));
     if (!parsed2 || typeof parsed2 !== "object" || !parsed2.answers || typeof parsed2.answers !== "object") return { ...EMPTY3 };
     return { v: 1, answers: parsed2.answers, updated_at: parsed2.updated_at };
   } catch {
@@ -54694,7 +55587,7 @@ function readForWrite2() {
   const target = deliveryAuditPath();
   let raw;
   try {
-    raw = fs42.readFileSync(target, "utf-8");
+    raw = fs43.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { ...EMPTY3 };
     throw new Error("Your saved audit could not be read, so nothing was changed. Nothing was lost.");
@@ -54706,7 +55599,7 @@ function readForWrite2() {
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs42.copyFileSync(target, kept);
+      fs43.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(`Your saved audit is damaged, so nothing was written over it. A copy is at ${kept}. Start again with reset:true when you are ready.`);
@@ -54718,13 +55611,13 @@ function writeFile2(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs42.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs42.renameSync(tmp, target);
+    fs43.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs43.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs42.unlinkSync(tmp);
+        fs43.unlinkSync(tmp);
       } catch {
       }
     }
@@ -54745,12 +55638,12 @@ function resetDeliveryAudit(now = () => /* @__PURE__ */ new Date()) {
   writeFile2(next);
   return next;
 }
-var fs42, path40, EMPTY3, DELIVERY_AUDIT_ENV;
+var fs43, path41, EMPTY3, DELIVERY_AUDIT_ENV;
 var init_store4 = __esm({
   "src/command-os/delivery-audit/store.ts"() {
     "use strict";
-    fs42 = __toESM(require("node:fs"));
-    path40 = __toESM(require("node:path"));
+    fs43 = __toESM(require("node:fs"));
+    path41 = __toESM(require("node:path"));
     init_credentials_store();
     EMPTY3 = { v: 1, answers: {} };
     DELIVERY_AUDIT_ENV = "GHL_MCP_DELIVERY_AUDIT";
@@ -54975,7 +55868,7 @@ function planFingerprint(goal, steps) {
     goal,
     steps: steps.map((s) => ({ id: s.id, tool: s.tool, targets: s.targets, creates: s.creates ?? [], args: s.args ?? {} }))
   });
-  return (0, import_node_crypto14.createHash)("sha256").update(JSON.stringify(shape)).digest("hex").slice(0, 16);
+  return (0, import_node_crypto15.createHash)("sha256").update(JSON.stringify(shape)).digest("hex").slice(0, 16);
 }
 function checkPlan(goal, findings, steps, now = /* @__PURE__ */ new Date(), knownTools) {
   const refusals = [];
@@ -55192,11 +56085,11 @@ function abandon(a, why) {
   const stillApplied = position(a).undo;
   return { ok: true, automation: { ...a, phase: "abandoned", goal: a.goal, abandonedBecause: why }, stillApplied };
 }
-var import_node_crypto14, isExisting, FINDINGS_STALE_AFTER_MINUTES;
+var import_node_crypto15, isExisting, FINDINGS_STALE_AFTER_MINUTES;
 var init_automation = __esm({
   "src/command-os/build/automation.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     init_verify_findings();
     isExisting = (t) => "existing" in t;
     FINDINGS_STALE_AFTER_MINUTES = 60;
@@ -55206,16 +56099,16 @@ var init_automation = __esm({
 // src/command-os/build/store.ts
 function automationsPath() {
   const override = process.env[AUTOMATIONS_ENV];
-  return override && override.trim() ? override : path41.join(appDataDir(), "automations.json");
+  return override && override.trim() ? override : path42.join(appDataDir(), "automations.json");
 }
-function parse4(raw) {
+function parse5(raw) {
   const p = JSON.parse(raw);
   if (!p || typeof p !== "object" || !p.builds || typeof p.builds !== "object") throw new Error("shape");
   return { v: 1, builds: p.builds };
 }
 function readAutomations() {
   try {
-    return parse4(fs43.readFileSync(automationsPath(), "utf-8")).builds;
+    return parse5(fs44.readFileSync(automationsPath(), "utf-8")).builds;
   } catch {
     return { ...EMPTY4.builds };
   }
@@ -55224,17 +56117,17 @@ function readForWrite3() {
   const target = automationsPath();
   let raw;
   try {
-    raw = fs43.readFileSync(target, "utf-8");
+    raw = fs44.readFileSync(target, "utf-8");
   } catch (e) {
     if (e?.code === "ENOENT") return { v: 1, builds: {} };
     throw new Error("Your builds file could not be read, so nothing was changed. Nothing was lost.");
   }
   try {
-    return parse4(raw);
+    return parse5(raw);
   } catch {
     const kept = `${target}.unreadable-${Date.now()}`;
     try {
-      fs43.copyFileSync(target, kept);
+      fs44.copyFileSync(target, kept);
     } catch {
     }
     throw new Error(
@@ -55248,13 +56141,13 @@ function writeFile3(f) {
   const tmp = `${target}.${process.pid}.tmp`;
   let renamed = false;
   try {
-    fs43.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-    fs43.renameSync(tmp, target);
+    fs44.writeFileSync(tmp, JSON.stringify(f, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+    fs44.renameSync(tmp, target);
     renamed = true;
   } finally {
     if (!renamed) {
       try {
-        fs43.unlinkSync(tmp);
+        fs44.unlinkSync(tmp);
       } catch {
       }
     }
@@ -55280,12 +56173,12 @@ function newAutomationId(now = () => /* @__PURE__ */ new Date()) {
   }
   return id;
 }
-var fs43, path41, AUTOMATIONS_ENV, EMPTY4;
+var fs44, path42, AUTOMATIONS_ENV, EMPTY4;
 var init_store5 = __esm({
   "src/command-os/build/store.ts"() {
     "use strict";
-    fs43 = __toESM(require("node:fs"));
-    path41 = __toESM(require("node:path"));
+    fs44 = __toESM(require("node:fs"));
+    path42 = __toESM(require("node:path"));
     init_credentials_store();
     AUTOMATIONS_ENV = "GHL_MCP_AUTOMATIONS";
     EMPTY4 = { v: 1, builds: {} };
@@ -55604,7 +56497,7 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
         }
         const refKinds = new Map(plan.flatMap((s) => (s.creates ?? []).map((c) => [c.ref, normaliseKind(c.kind)])));
         const seenKeys = new Set(found.map((f) => `${normaliseKind(f.kind)}:${f.id}`));
-        const hidden = [];
+        const hidden2 = [];
         const argRefusals = [];
         for (const { step: s, scan } of scans) {
           if (scan.incomplete) argRefusals.push({ because: `Step "${s.id}": ${scan.incomplete}`, finding: { kind: "arguments", id: s.id } });
@@ -55619,7 +56512,7 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
             const key = `${kind}:${id}`;
             if (seenKeys.has(key)) continue;
             seenKeys.add(key);
-            hidden.push({ kind, id, observedAt: now.toISOString() });
+            hidden2.push({ kind, id, observedAt: now.toISOString() });
           }
           for (const { kind, id } of scan.ids) {
             const refKind = refKinds.get(id);
@@ -55635,13 +56528,13 @@ function registerAgencyBuildTools(server2, knownTools, verify, activeLocation) {
             const key = `${kind}:${id}`;
             if (seenKeys.has(key)) continue;
             seenKeys.add(key);
-            hidden.push({ kind, id, observedAt: now.toISOString() });
+            hidden2.push({ kind, id, observedAt: now.toISOString() });
           }
         }
         if (argRefusals.length) {
           return { planned: false, refusals: argRefusals, note: "Nothing was saved. These arguments carry ids that cannot be checked as they stand." };
         }
-        const toVerify = [...found, ...hidden];
+        const toVerify = [...found, ...hidden2];
         boundAccount = account2;
         const refusals = toVerify.length === 0 ? [] : verify ? await verify(account2, toVerify) : toVerify.map((f) => ({ finding: f, because: `"${f.id}" could not be checked against any account, so it is refused rather than trusted.` }));
         if (refusals.length) {
@@ -56694,7 +57587,7 @@ function registerSecretShopperTools(server2, client, registry2) {
   safeTool(
     server2,
     "run_secret_shopper",
-    `Workflow Audit Pro: an audit of a client account you manage. Signs up as a clearly marked TEST lead on the ACTIVE sub-account, waits, then reads every text and email the account actually sent that lead, word for word, and reports what a real customer would have seen wrong: a blank name ("Hi , "), template code left showing ({{\u2026}}), another business's name left over from a template, a link that doesn't open, a message sent twice, and a planned message that never came. Two halves: action "start" creates the lead and returns a runId and the time the watch window closes (default 10 minutes); action "finish" reads, judges and removes the test lead (finishing early gives a partial look and keeps watching); action "status" shows the latest run. WRITES: start creates one contact (the owner's own email, plus-addressed, never a customer's) and enters it into the chosen workflows, which will really send to that address and may notify staff; finish deletes that contact unless keepLead is true. The client's sign-up form itself is not submitted: entry is by adding the lead to named workflows, by a tag, or through a lead-capture https address. Tell the owner all of this before starting. Call it Workflow Audit Pro to the owner; an owner who says "secret shopper" (its old name) means this tool.`,
+    `Workflow Audit Pro: an audit of a client account you manage. Signs up as a clearly marked TEST lead on the ACTIVE sub-account, waits, then reads every text and email the account actually sent that lead, word for word, and reports what a real customer would have seen wrong: a blank name ("Hi , "), template code left showing ({{\u2026}}), another business's name left over from a template, a link that doesn't open, a message sent twice, and a planned message that never came. Two halves: action "start" sends the test lead and returns a runId and the time the watch window closes (default 10 minutes); action "finish" reads, judges and lists every contact that now carries the test address (it never deletes one; you check them before deleting any) (finishing early gives a partial look and keeps watching); action "status" shows the latest run. WRITES: start sends one test lead (the owner's own email, plus-addressed, never a customer's) and enters it into the chosen workflows, which will really send to that address and may notify staff; nothing is ever deleted. The client's sign-up form itself is not submitted: entry is by adding the lead to named workflows, by a tag, or through a lead-capture https address. Tell the owner all of this before starting. Call it Workflow Audit Pro to the owner; an owner who says "secret shopper" (its old name) means this tool.`,
     {
       action: import_zod83.z.enum(["start", "finish", "status"]),
       workflowIds: import_zod83.z.array(import_zod83.z.string()).optional().describe("start: the workflows the test lead enters directly (usually the speed-to-lead and welcome workflows). Use list_workflows_full to find ids."),
@@ -56705,7 +57598,7 @@ function registerSecretShopperTools(server2, client, registry2) {
       firstName: import_zod83.z.string().optional().describe("start: leave empty (the default) to test what happens when a lead gives no first name."),
       watchMinutes: import_zod83.z.number().optional().describe("start: how long to watch, 1 to 1440 minutes. Leave it out to watch until the last planned message is due plus 2 minutes (10 when no plan is known)."),
       expect: import_zod83.z.array(expectation).optional().describe("start: messages the build plan says the lead should get, so a missing one is reported."),
-      keepLead: import_zod83.z.boolean().optional().describe("Keep the test lead in the account after finishing, so the owner can look at it. Default false."),
+      keepLead: import_zod83.z.boolean().optional().describe("No longer used: the test lead is never removed. The result lists every contact that now carries the test address, for you to check before deleting any."),
       fastForward: import_zod83.z.boolean().optional().describe("start with workflowIds: test long workflows in minutes. Makes a temporary 'ZZ TEST FF' copy of each (every step kept, every time wait cut to 1 minute, no trigger), runs the test lead through the copies, then deletes them; the originals are only read. Staff alerts, tasks and lead assignments go to one chosen user (alertUserId) marked TEST. Straight-line workflows with time waits only for now (if/else, hand-offs to other workflows and other waits are refused with the reason). Tell the owner before starting."),
       alertUserId: import_zod83.z.string().optional().describe("fastForward: the GoHighLevel user (get_users) who receives the staff alerts, tasks and lead assignments instead of the staff. Defaults to the user whose email matches ownerEmail; if none matches, ask the owner who should get them."),
       allowWebhookHosts: import_zod83.z.array(import_zod83.z.string()).optional().describe("fastForward: website hosts (e.g. hooks.zapier.com) the owner allows the test lead to be sent to by webhook steps. Any other webhook host makes the check refuse and name it."),
@@ -58821,13 +59714,13 @@ ${text3}`);
   };
 }
 function makePipelineApi(builderClient) {
-  return async (method, path44, body) => {
-    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path44}`;
+  return async (method, path45, body) => {
+    const url = `https://backend.leadconnectorhq.com/opportunities/pipelines${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, sendsBody ? { body } : {});
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Pipeline API ${response.status}: ${method} ${path44}
+      throw new Error(`Pipeline API ${response.status}: ${method} ${path45}
 ${text3}`);
     }
     const text2 = await response.text();
@@ -58840,8 +59733,8 @@ ${text3}`);
   };
 }
 function makeFunnelApi(builderClient) {
-  return async (method, path44, body) => {
-    const url = `https://backend.leadconnectorhq.com/funnels${path44}`;
+  return async (method, path45, body) => {
+    const url = `https://backend.leadconnectorhq.com/funnels${path45}`;
     const sendsBody = body !== void 0 && (method === "POST" || method === "PUT");
     const response = await builderRequest(builderClient, method, url, {
       ...sendsBody ? { body } : {},
@@ -58854,7 +59747,7 @@ function makeFunnelApi(builderClient) {
     });
     if (!response.ok) {
       const text3 = await response.text();
-      throw new Error(`Funnel API ${response.status}: ${method} ${path44}
+      throw new Error(`Funnel API ${response.status}: ${method} ${path45}
 ${text3.slice(0, 300)}`);
     }
     const text2 = await response.text();
@@ -59019,8 +59912,8 @@ function makeExecuteDeps(client, builderClient, locationId2, registry2) {
     },
     fetchEmailTemplatePreview: async (previewUrl) => {
       if (!/^https:\/\//i.test(previewUrl)) throw new Error(`preview URL is not https (${previewUrl.slice(0, 60)})`);
-      const response = await fetch(previewUrl, { headers: { Accept: "text/html,*/*" } });
-      if (!response.ok) throw new Error(`preview fetch HTTP ${response.status}: ${await response.text()}`);
+      const response = await buildNet.read(previewUrl, { headers: { Accept: "text/html,*/*" }, signal: AbortSignal.timeout(3e4) });
+      if (!response.ok) throw new Error(`preview fetch HTTP ${response.status}`);
       return response.text();
     },
     deleteEmailTemplate: async (templateId) => {
@@ -60071,7 +60964,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod87, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
+var import_zod87, buildNet, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -60105,6 +60998,8 @@ var init_intake_to_build = __esm({
     init_features();
     init_executor();
     init_execute();
+    init_net_guard();
+    buildNet = { read: guardedFetchLike };
     customFieldItemSchema = import_zod87.z.object({
       id: import_zod87.z.string(),
       name: import_zod87.z.string(),
@@ -60169,7 +61064,7 @@ function registerAllTools(server2, client, registry2, mcpVersion, env2 = process
       return findings.map((finding) => ({ finding, because: `"${finding.id}" cannot be checked: no saved key for sub-account ${loc}. Register it (register_location) or point the server at it first.` }));
     }
     const reader = token2 ? new GHLClient({ apiKey: token2.apiKey, locationId: loc }) : client;
-    return refuseUnseenFindings2((path44, params) => reader.get(path44, params ? { params } : void 0), loc, findings);
+    return refuseUnseenFindings2((path45, params) => reader.get(path45, params ? { params } : void 0), loc, findings);
   }, () => client.defaultLocationId);
   registerClientEngagementTools(wrap(CLIENT_ENGAGEMENTS_MODULE), registry2);
   registerAuditReportTools(wrap(AUDIT_REPORT_MODULE));
@@ -60484,8 +61379,8 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     io.out(USAGE2);
     return argv.length === 0 ? 2 : 0;
   }
-  const str8 = (k) => typeof a[k] === "string" ? a[k] : void 0;
-  const brand = str8("brand"), medium = str8("medium"), headline3 = str8("headline"), points = str8("points");
+  const str9 = (k) => typeof a[k] === "string" ? a[k] : void 0;
+  const brand = str9("brand"), medium = str9("medium"), headline3 = str9("headline"), points = str9("points");
   if (!brand || !medium || !headline3 || !points) {
     io.err("design-run: --brand, --medium, --headline and --points are required\n" + USAGE2);
     return 2;
@@ -60499,7 +61394,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     return 2;
   }
   let conversion;
-  const convFile = str8("conversion");
+  const convFile = str9("conversion");
   if (convFile) {
     try {
       conversion = JSON.parse(require("node:fs").readFileSync(convFile, "utf8"));
@@ -60512,7 +61407,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       return 2;
     }
   }
-  const gate2 = str8("gate");
+  const gate2 = str9("gate");
   if (gate2 && gate2 !== "draft" && gate2 !== "ship") {
     io.err("design-run: --gate must be draft or ship");
     return 2;
@@ -60522,8 +61417,8 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     io.err("design-run: --passes must be 1, 2 or 3");
     return 2;
   }
-  const outDir = str8("out") ?? (0, import_node_path10.join)((0, import_node_os2.tmpdir)(), `design-run-${brand}-${medium}-${Date.now()}`);
-  const model = str8("model") ?? DEFAULT_MODEL;
+  const outDir = str9("out") ?? (0, import_node_path10.join)((0, import_node_os2.tmpdir)(), `design-run-${brand}-${medium}-${Date.now()}`);
+  const model = str9("model") ?? DEFAULT_MODEL;
   io.out(`design-run: ${medium} for ${brand} on your Claude (${model}), up to ${passes} pass(es) \u2192 ${outDir}`);
   let r;
   try {
@@ -60531,11 +61426,11 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       brand,
       brief: {
         medium,
-        content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str8("audience"), job: str8("job"), ctaLabel: str8("cta"), proof: str8("proof") },
+        content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str9("audience"), job: str9("job"), ctaLabel: str9("cta"), proof: str9("proof") },
         options: {
-          ...str8("mode") && { mode: str8("mode") },
+          ...str9("mode") && { mode: str9("mode") },
           ...a.slides && { slides: Number(a.slides) },
-          theme: str8("theme") ?? "both",
+          theme: str9("theme") ?? "both",
           ...conversion ? { pageMode: "conversion" } : {}
         },
         ...conversion ? { conversion } : {}
@@ -60547,7 +61442,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       headless: !a.headed,
       onPass: (p) => io.out(`  pass ${p.pass}: ${p.lint ? p.verdict === "PASS" ? "PASS" : `${p.verdict}${p.failed.length ? " \u2014 " + p.failed.join(" | ") : ""}` : `contract: ${p.lintProblems.join("; ")}`}  ($${p.costUsd.toFixed(3)}, ${Math.round(p.ms / 1e3)}s)`),
       // Two verdicts, never one: craft is measured, copy is judged.
-      ...str8("grade-copy") ? { gradeCopyFor: str8("grade-copy") } : {}
+      ...str9("grade-copy") ? { gradeCopyFor: str9("grade-copy") } : {}
     });
   } catch (error) {
     io.err(error instanceof import_zod89.z.ZodError ? designValidationMessage(error) : error instanceof Error ? error.message : "The design run could not finish. Check the design details before trying again.");
@@ -60595,8 +61490,8 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var dotenv2 = __toESM(require("dotenv"));
-var path43 = __toESM(require("path"));
-var fs45 = __toESM(require("fs"));
+var path44 = __toESM(require("path"));
+var fs46 = __toESM(require("fs"));
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 
 // src/version-compare.ts
@@ -60667,12 +61562,12 @@ init_setup_tool();
 var import_zod88 = require("zod");
 
 // src/skill-installer.ts
-var import_node_crypto15 = require("node:crypto");
-var fs44 = __toESM(require("node:fs"));
-var path42 = __toESM(require("node:path"));
-var os7 = __toESM(require("node:os"));
+var import_node_crypto16 = require("node:crypto");
+var fs45 = __toESM(require("node:fs"));
+var path43 = __toESM(require("node:path"));
+var os8 = __toESM(require("node:os"));
 function sha2562(buf) {
-  return (0, import_node_crypto15.createHash)("sha256").update(buf).digest("hex");
+  return (0, import_node_crypto16.createHash)("sha256").update(buf).digest("hex");
 }
 function isOlderRelease(candidate, installed) {
   const parts = (v) => v.trim().split(".").map((n) => Number.parseInt(n, 10));
@@ -60684,9 +61579,9 @@ function isOlderRelease(candidate, installed) {
   return false;
 }
 function bundledSkillsDir(baseDir) {
-  const candidate = path42.resolve(baseDir, "..", "skills");
+  const candidate = path43.resolve(baseDir, "..", "skills");
   try {
-    return fs44.statSync(candidate).isDirectory() ? candidate : null;
+    return fs45.statSync(candidate).isDirectory() ? candidate : null;
   } catch {
     return null;
   }
@@ -60694,10 +61589,10 @@ function bundledSkillsDir(baseDir) {
 function listFiles(root) {
   const out = [];
   const walk = (dir) => {
-    for (const entry of fs44.readdirSync(dir, { withFileTypes: true })) {
-      const full = path42.join(dir, entry.name);
+    for (const entry of fs45.readdirSync(dir, { withFileTypes: true })) {
+      const full = path43.join(dir, entry.name);
       if (entry.isDirectory()) walk(full);
-      else if (entry.isFile()) out.push(path42.relative(root, full));
+      else if (entry.isFile()) out.push(path43.relative(root, full));
     }
   };
   walk(root);
@@ -60705,7 +61600,7 @@ function listFiles(root) {
 }
 function readMarker(markerPath) {
   try {
-    const parsed2 = JSON.parse(fs44.readFileSync(markerPath, "utf8"));
+    const parsed2 = JSON.parse(fs45.readFileSync(markerPath, "utf8"));
     return parsed2 && typeof parsed2 === "object" && parsed2.files ? parsed2 : null;
   } catch {
     return null;
@@ -60719,35 +61614,35 @@ function installBundledSkills(opts) {
     skippedOlderPackage: [],
     unchanged: [],
     errors: [],
-    targetDir: opts.targetDir ?? path42.join(os7.homedir(), ".claude", "skills"),
+    targetDir: opts.targetDir ?? path43.join(os8.homedir(), ".claude", "skills"),
     bundledDir: null
   };
   const bundled = bundledSkillsDir(opts.baseDir);
   result.bundledDir = bundled;
   if (!bundled) return result;
   try {
-    fs44.mkdirSync(result.targetDir, { recursive: true });
+    fs45.mkdirSync(result.targetDir, { recursive: true });
   } catch (e) {
     result.errors.push(`cannot create ${result.targetDir}: ${String(e)}`);
     return result;
   }
-  const markerPath = path42.join(result.targetDir, ".ghl-command-skills.json");
+  const markerPath = path43.join(result.targetDir, ".ghl-command-skills.json");
   const marker = readMarker(markerPath) ?? { packageVersion: "", files: {} };
   const newMarker = { packageVersion: opts.packageVersion, files: { ...marker.files } };
   for (const rel of listFiles(bundled)) {
     try {
-      const src = fs44.readFileSync(path42.join(bundled, rel));
-      const dest = path42.join(result.targetDir, rel);
+      const src = fs45.readFileSync(path43.join(bundled, rel));
+      const dest = path43.join(result.targetDir, rel);
       const srcHash = sha2562(src);
       let destBuf = null;
       try {
-        destBuf = fs44.readFileSync(dest);
+        destBuf = fs45.readFileSync(dest);
       } catch {
         destBuf = null;
       }
       if (destBuf === null) {
-        fs44.mkdirSync(path42.dirname(dest), { recursive: true });
-        fs44.writeFileSync(dest, src);
+        fs45.mkdirSync(path43.dirname(dest), { recursive: true });
+        fs45.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.installed.push(rel);
         continue;
@@ -60764,7 +61659,7 @@ function installBundledSkills(opts) {
         newMarker.packageVersion = marker.packageVersion;
         result.skippedOlderPackage.push(rel);
       } else if (lastWritten && destHash === lastWritten) {
-        fs44.writeFileSync(dest, src);
+        fs45.writeFileSync(dest, src);
         newMarker.files[rel] = srcHash;
         result.updated.push(rel);
       } else {
@@ -60775,7 +61670,7 @@ function installBundledSkills(opts) {
     }
   }
   try {
-    fs44.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
+    fs45.writeFileSync(markerPath, JSON.stringify(newMarker, null, 2));
   } catch (e) {
     result.errors.push(`marker write failed: ${String(e)}`);
   }
@@ -60870,11 +61765,11 @@ function agencyPrimer(p) {
   if (staff.length) lines.push(`Their team: ${staff.join("; ")}.`);
   const sops = (p.delivery?.sops ?? []).filter(Boolean);
   if (sops.length) lines.push(`How they deliver, in their words: ${sops.map((s) => `"${s}"`).join(" ")}`);
-  const os8 = p.agencyOs;
-  if (os8?.method) lines.push(`Their method: ${os8.method}`);
-  if (os8?.voice) lines.push(`How they sound, and how you should sound for them: ${os8.voice}`);
-  if (os8?.ica?.who) lines.push(`Who they serve: ${os8.ica.who}`);
-  if (os8?.offer?.name || os8?.offer?.promise) lines.push(`Their core offer: ${[os8.offer?.name, os8.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
+  const os9 = p.agencyOs;
+  if (os9?.method) lines.push(`Their method: ${os9.method}`);
+  if (os9?.voice) lines.push(`How they sound, and how you should sound for them: ${os9.voice}`);
+  if (os9?.ica?.who) lines.push(`Who they serve: ${os9.ica.who}`);
+  if (os9?.offer?.name || os9?.offer?.promise) lines.push(`Their core offer: ${[os9.offer?.name, os9.offer?.promise].filter(Boolean).join(" \u2014 ")}`);
   if (!lines.length) return void 0;
   lines.push("These are the agency's own details, not any client's. Client-by-client records are a tool call away, not in here.");
   const text2 = lines.join("\n");
@@ -60931,7 +61826,7 @@ dotenv2.config();
 setPkgVersion(pkg.version);
 {
   const configDirOverride = process.env.GHL_MCP_CONFIG_DIR?.trim();
-  if (configDirOverride && !path43.isAbsolute(configDirOverride)) {
+  if (configDirOverride && !path44.isAbsolute(configDirOverride)) {
     process.stderr.write(
       `[ghl-mcp] GHL_MCP_CONFIG_DIR must be an absolute path (got "${configDirOverride}"). Use e.g. /data/ghl-mcp in a container, with a volume mounted at /data.
 `
@@ -60944,20 +61839,20 @@ process.on("unhandledRejection", (reason3) => {
 `);
 });
 function hardenSecretFilePerms() {
-  const repoDir = path43.resolve(__dirname, "..");
+  const repoDir = path44.resolve(__dirname, "..");
   const candidates = [
-    { file: path43.join(repoDir, "start-mcp.sh"), mode: 448 },
+    { file: path44.join(repoDir, "start-mcp.sh"), mode: 448 },
     // Legacy registry location (pre-migration); new location lives in app-data.
-    { file: path43.join(repoDir, ".ghl-tokens.json"), mode: 384 },
+    { file: path44.join(repoDir, ".ghl-tokens.json"), mode: 384 },
     { file: tokenRegistryPath(), mode: 384 }
   ];
   for (const { file: file2, mode } of candidates) {
     let current;
     try {
-      if (!fs45.existsSync(file2)) continue;
-      current = fs45.statSync(file2).mode & 511;
+      if (!fs46.existsSync(file2)) continue;
+      current = fs46.statSync(file2).mode & 511;
       if (current !== mode) {
-        fs45.chmodSync(file2, mode);
+        fs46.chmodSync(file2, mode);
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);