@elitedcs/ghl-mcp 3.88.3 → 3.88.4

package/dist/index.js

@@ -3470,8 +3470,8 @@ function textResponse(text2) {
     content: [{ type: "text", text: text2 }]
   };
 }
-function escapeRegex(str8) {
-  return str8.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str9) {
+  return str9.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -9273,27 +9273,27 @@ function actionNameProblem(name) {
 function voiceActionBodyProblem(type, p) {
   const gap = undefinedPath2(p);
   if (gap) return `${gap} is undefined. JSON would drop that key silently and GoHighLevel would see a different body than you wrote \u2014 leave the key out or give it a value.`;
-  const str8 = (k) => typeof p[k] === "string" && p[k].trim().length > 0;
+  const str9 = (k) => typeof p[k] === "string" && p[k].trim().length > 0;
   const num3 = (k) => typeof p[k] === "number" && Number.isFinite(p[k]);
-  const needTrigger = () => !str8("triggerPrompt") ? `${type} needs triggerPrompt: when, in plain words, the agent should do this ("When the caller asks for a person").` : !str8("triggerMessage") ? `${type} needs triggerMessage: what the agent says as it does it ("Let me get someone for you").` : null;
+  const needTrigger = () => !str9("triggerPrompt") ? `${type} needs triggerPrompt: when, in plain words, the agent should do this ("When the caller asks for a person").` : !str9("triggerMessage") ? `${type} needs triggerMessage: what the agent says as it does it ("Let me get someone for you").` : null;
   switch (type) {
     case "CALL_TRANSFER": {
       const t = needTrigger();
       if (t) return t;
       if (p.transferToType !== "number") return 'CALL_TRANSFER needs transferToType: "number" (the only type GoHighLevel supports today).';
-      if (!str8("transferToValue") || !TRANSFER_NUMBER.test(p.transferToValue)) return "CALL_TRANSFER needs transferToValue as a full number with country code and no punctuation, e.g. +16025550100 (GoHighLevel refuses anything else with a 422).";
+      if (!str9("transferToValue") || !TRANSFER_NUMBER.test(p.transferToValue)) return "CALL_TRANSFER needs transferToValue as a full number with country code and no punctuation, e.g. +16025550100 (GoHighLevel refuses anything else with a 422).";
       return null;
     }
     case "SMS": {
       const t = needTrigger();
       if (t) return t;
-      if (!str8("messageBody")) return "SMS needs messageBody: the text the caller receives.";
+      if (!str9("messageBody")) return "SMS needs messageBody: the text the caller receives.";
       return null;
     }
     case "DATA_EXTRACTION":
     case "IN_CALL_DATA_EXTRACTION": {
-      if (!str8("contactFieldId")) return `${type} needs contactFieldId: the id of the contact field to fill (get_custom_fields). GoHighLevel refuses an unknown id with a 400 naming it.`;
-      if (!str8("description")) return `${type} needs description: what to listen for, in plain words.`;
+      if (!str9("contactFieldId")) return `${type} needs contactFieldId: the id of the contact field to fill (get_custom_fields). GoHighLevel refuses an unknown id with a 400 naming it.`;
+      if (!str9("description")) return `${type} needs description: what to listen for, in plain words.`;
       const ex = p.examples;
       if (!Array.isArray(ex) || ex.length < 1 || ex.length > 5 || ex.some((x) => typeof x !== "string" || !x.trim())) return `${type} needs examples: 1 to 5 example values (GoHighLevel refuses an empty list with a 422).`;
       return null;
@@ -9301,19 +9301,19 @@ function voiceActionBodyProblem(type, p) {
     case "WORKFLOW_TRIGGER": {
       const t = needTrigger();
       if (t) return t;
-      if (!str8("workflowId")) return "WORKFLOW_TRIGGER needs workflowId. It must be PUBLISHED \u2014 GoHighLevel refuses a draft or unknown id with a 400.";
+      if (!str9("workflowId")) return "WORKFLOW_TRIGGER needs workflowId. It must be PUBLISHED \u2014 GoHighLevel refuses a draft or unknown id with a 400.";
       return null;
     }
     case "APPOINTMENT_BOOKING": {
-      if (!str8("calendarId")) return "APPOINTMENT_BOOKING needs calendarId (get_calendars). GoHighLevel refuses an unknown id with a 400 naming it.";
+      if (!str9("calendarId")) return "APPOINTMENT_BOOKING needs calendarId (get_calendars). GoHighLevel refuses an unknown id with a 400 naming it.";
       for (const k of ["daysOfOfferingDates", "slotsPerDay", "hoursBetweenSlots"]) {
         if (!num3(k) || p[k] < 1) return `APPOINTMENT_BOOKING needs ${k} as a positive number (how many days ahead to offer, how many slots a day, hours between slots).`;
       }
       return null;
     }
     case "KNOWLEDGE_BASE": {
-      if (!str8("triggerPrompt")) return 'KNOWLEDGE_BASE needs triggerPrompt: when the agent should look something up ("When the caller asks about services, hours or pricing").';
-      if (!str8("knowledgeBaseId")) return "KNOWLEDGE_BASE needs knowledgeBaseId from THIS sub-account (list_knowledge_bases). GoHighLevel refuses an unknown id with a 400.";
+      if (!str9("triggerPrompt")) return 'KNOWLEDGE_BASE needs triggerPrompt: when the agent should look something up ("When the caller asks about services, hours or pricing").';
+      if (!str9("knowledgeBaseId")) return "KNOWLEDGE_BASE needs knowledgeBaseId from THIS sub-account (list_knowledge_bases). GoHighLevel refuses an unknown id with a 400.";
       return null;
     }
     case "CUSTOM_ACTION": {
@@ -18294,6 +18294,51 @@ var init_form_builder = __esm({
   }
 });
 
+// src/test-contacts.ts
+function carrierOf(raw) {
+  const c = asObj(raw);
+  const id = str(c.id) ?? str(c._id);
+  if (!id) return void 0;
+  const name = str(c.contactName) ?? [str(c.firstName), str(c.lastName)].filter(Boolean).join(" ");
+  return { id, name: name ?? "", phone: str(c.phone) ?? "", email: (str(c.email) ?? "").toLowerCase(), created: str(c.dateAdded) ?? "" };
+}
+function carrierText(contacts, partial, former = []) {
+  const head4 = partial ? `${CARRIER_PARTIAL} ` : "";
+  const was = former.map((f) => ` ${f.id}: carried the test address during the run; now shows ${f.now || "no email"}.`).join("");
+  if (!contacts.length) return `${head4}No contact carrying this run's test address was found.${was}`;
+  const one = (c) => `${c.id} (name: ${c.name || "none"}; phone: ${c.phone || "none"}; email: ${c.email || "none"}; created: ${c.created || "unknown"})`;
+  return `${head4}${CARRIER_HEADING}: ${contacts.map(one).join(", ")}. ${CARRIER_WARNING}${was}`;
+}
+async function readContactPages(get, params, cap = CONTACT_PAGE_CAP) {
+  const limit = typeof params.limit === "number" ? params.limit : 20;
+  const rows2 = [];
+  let paging = {};
+  for (let page = 0; page < cap; page++) {
+    const raw = asObj(await get("/contacts/", { params: { ...params, ...paging } }));
+    if (!Array.isArray(raw.contacts)) return void 0;
+    rows2.push(...raw.contacts);
+    const meta = asObj(raw.meta);
+    const total = typeof meta.total === "number" ? meta.total : void 0;
+    if (total !== void 0 && rows2.length >= total) return { rows: rows2, complete: true };
+    const next = meta.startAfterId !== void 0 && meta.startAfterId !== null && meta.startAfter !== void 0 && meta.startAfter !== null ? { startAfterId: meta.startAfterId, startAfter: meta.startAfter } : typeof meta.nextPage === "number" ? { page: meta.nextPage } : void 0;
+    if (!next || raw.contacts.length === 0) return { rows: rows2, complete: total === void 0 ? raw.contacts.length < limit : rows2.length >= total };
+    paging = next;
+  }
+  return { rows: rows2, complete: false };
+}
+var CARRIER_HEADING, CARRIER_WARNING, CARRIER_PARTIAL, asObj, str, CONTACT_PAGE_CAP;
+var init_test_contacts = __esm({
+  "src/test-contacts.ts"() {
+    "use strict";
+    CARRIER_HEADING = "Contacts that now carry this run's test address";
+    CARRIER_WARNING = "If your form matches leads by phone, some of these may be existing customers whose email was replaced. Check each before deleting; to delete, ask Claude to delete specific contacts by id.";
+    CARRIER_PARTIAL = "Partial, a search could not be read.";
+    asObj = (v) => v && typeof v === "object" ? v : {};
+    str = (v) => typeof v === "string" && v.trim() ? v : void 0;
+    CONTACT_PAGE_CAP = 5;
+  }
+});
+
 // src/tools/funnel-qa.ts
 function rollupVerdict(checks) {
   const fail = checks.filter((c) => c.status === "fail");
@@ -18304,52 +18349,66 @@ function rollupVerdict(checks) {
   return { ok: fail.length === 0, verdict, summary };
 }
 function parseContact(raw) {
-  const c = asObj(asObj(raw).contact);
-  const id = str(c.id) ?? str(c._id);
+  const c = asObj2(asObj2(raw).contact);
+  const id = str2(c.id) ?? str2(c._id);
   if (!id) return void 0;
   const custom = /* @__PURE__ */ new Map();
   for (const f of asArr(c.customFields)) {
-    const fo = asObj(f);
-    const fid = str(fo.id) ?? str(fo.customFieldId) ?? str(fo.field_id);
+    const fo = asObj2(f);
+    const fid = str2(fo.id) ?? str2(fo.customFieldId) ?? str2(fo.field_id);
     if (!fid) continue;
     const val = fo.value ?? fo.field_value ?? fo.fieldValue ?? "";
     custom.set(fid, Array.isArray(val) ? val.join(",") : String(val));
   }
   return {
     id,
-    email: str(c.email)?.toLowerCase(),
-    phone: str(c.phone),
-    firstName: str(c.firstName),
-    lastName: str(c.lastName),
-    name: str(c.name),
+    email: str2(c.email)?.toLowerCase(),
+    phone: str2(c.phone),
+    firstName: str2(c.firstName),
+    lastName: str2(c.lastName),
+    name: str2(c.name),
     tags: asArr(c.tags).map((t) => String(t).toLowerCase()),
-    source: str(c.source),
-    assignedTo: str(c.assignedTo),
+    source: str2(c.source),
+    assignedTo: str2(c.assignedTo),
     custom
   };
 }
-async function findContactsByEmail(client, locationId2, email) {
-  const raw = await client.get("/contacts/", { params: { locationId: locationId2, query: email, limit: 20 } });
+async function searchByEmail(client, locationId2, email) {
+  const paged = await readContactPages((path45, o) => client.get(path45, o), { locationId: locationId2, query: email, limit: 20 });
+  if (!paged) throw new SearchUnreadable("the contact search answered in a shape that could not be read");
   const want = email.toLowerCase();
   const ids = [];
-  for (const c of asArr(asObj(raw).contacts)) {
-    const co = asObj(c);
-    if (str(co.email)?.toLowerCase() === want) {
-      const id = str(co.id) ?? str(co._id);
-      if (id) ids.push(id);
+  const matches = [];
+  const rows2 = [];
+  for (const c of paged.rows) {
+    const co = asObj2(c);
+    const id = str2(co.id) ?? str2(co._id);
+    if (!id) continue;
+    ids.push(id);
+    const row = carrierOf(co);
+    if (row) rows2.push(row);
+    if (str2(co.email)?.toLowerCase() === want) {
+      const t = Date.parse(str2(co.dateAdded) ?? "");
+      const name = str2(co.contactName) ?? ([str2(co.firstName), str2(co.lastName)].filter(Boolean).join(" ") || void 0);
+      matches.push({ id, email: want, added: Number.isFinite(t) ? t : void 0, name, carrier: carrierOf(co) });
     }
   }
-  return ids;
+  return { ids, matches, rows: rows2, complete: paged.complete };
+}
+async function findContactsByEmail(client, locationId2, email, onRead) {
+  const read2 = await searchByEmail(client, locationId2, email);
+  onRead?.(read2);
+  return read2.matches.map((m) => m.id);
 }
 async function getContact(client, contactId) {
   return parseContact(await client.get(`/contacts/${contactId}`));
 }
-async function settledEmailIds(client, locationId2, email, opts = {}) {
+async function settledEmailIds(client, locationId2, email, opts = {}, onRead) {
   const tries = opts.tries ?? 6;
   const delayMs = opts.delayMs ?? 3500;
   const seen = /* @__PURE__ */ new Set();
   for (let i = 1; i <= tries; i++) {
-    for (const id of await findContactsByEmail(client, locationId2, email)) seen.add(id);
+    for (const id of await findContactsByEmail(client, locationId2, email, onRead)) seen.add(id);
     if (seen.size >= 2) break;
     if (i < tries) await sleep3(delayMs);
   }
@@ -18359,21 +18418,21 @@ async function hasSmsCapability(client, locationId2) {
   let numbers = 0;
   let pools = 0;
   try {
-    numbers = asArr(asObj(await client.get("/phone-system/numbers/", { params: { locationId: locationId2 } })).phoneNumbers).length;
+    numbers = asArr(asObj2(await client.get("/phone-system/numbers/", { params: { locationId: locationId2 } })).phoneNumbers).length;
   } catch {
   }
   try {
-    pools = asArr(asObj(await client.get("/phone-system/number-pools/", { params: { locationId: locationId2 } })).pools).length;
+    pools = asArr(asObj2(await client.get("/phone-system/number-pools/", { params: { locationId: locationId2 } })).pools).length;
   } catch {
   }
   return { numbers, pools };
 }
 async function latestOutboundMs(client, locationId2, contactId) {
   const convRaw = await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } });
-  const conversations = asArr(asObj(convRaw).conversations);
+  const conversations = asArr(asObj2(convRaw).conversations);
   let best;
   for (const c of conversations) {
-    const convId = str(asObj(c).id) ?? str(asObj(c)._id);
+    const convId = str2(asObj2(c).id) ?? str2(asObj2(c)._id);
     if (!convId) continue;
     let msgsRaw;
     try {
@@ -18381,25 +18440,25 @@ async function latestOutboundMs(client, locationId2, contactId) {
     } catch {
       continue;
     }
-    const mo = asObj(msgsRaw);
-    const list3 = asArr(mo.messages).length ? asArr(mo.messages) : asArr(asObj(mo.messages).messages);
+    const mo = asObj2(msgsRaw);
+    const list3 = asArr(mo.messages).length ? asArr(mo.messages) : asArr(asObj2(mo.messages).messages);
     for (const m of list3) {
-      const msg3 = asObj(m);
-      const dir = str(msg3.direction)?.toLowerCase();
+      const msg3 = asObj2(m);
+      const dir = str2(msg3.direction)?.toLowerCase();
       if (dir !== "outbound") continue;
-      const at = Date.parse(str(msg3.dateAdded) ?? str(msg3.dateUpdated) ?? "");
+      const at = Date.parse(str2(msg3.dateAdded) ?? str2(msg3.dateUpdated) ?? "");
       const atMs = Number.isNaN(at) ? void 0 : at;
-      if (!best || atMs && (!best.atMs || atMs > best.atMs)) best = { type: str(msg3.type), atMs };
+      if (!best || atMs && (!best.atMs || atMs > best.atMs)) best = { type: str2(msg3.type), atMs };
     }
   }
   return best ? { found: true, ...best } : { found: false };
 }
 async function readWorkflow(bc, workflowId) {
   try {
-    const full = asObj(await bc.getWorkflow(workflowId));
-    const status = str(full.status);
-    const templates = asArr(asObj(full.workflowData).templates);
-    const sendsSms = templates.some((t) => str(asObj(t).type) === "sms");
+    const full = asObj2(await bc.getWorkflow(workflowId));
+    const status = str2(full.status);
+    const templates = asArr(asObj2(full.workflowData).templates);
+    const sendsSms = templates.some((t) => str2(asObj2(t).type) === "sms");
     return { status, sendsSms };
   } catch {
     return void 0;
@@ -18413,9 +18472,9 @@ async function submit(url, body) {
 function registerFunnelQaTools(server2, client, builderClient) {
   server2.tool(
     "verify_funnel",
-    "Prove a live public funnel actually captures a lead AND the automation acts on it \u2014 the runtime companion to audit_workflows. Submits a sentinel lead to funnelUrl, then reads GHL back to verify what REALLY happened (the UI/thank-you page is never proof): (1) backend contact truth \u2014 the contact is actually created (search_contacts), with submit\u2192appear latency; (2) field-value fidelity \u2014 each expectCustom value actually PERSISTED on the contact (a wrong field id makes upsert succeed while silently dropping the value); (3) the triggerTag landed (else the workflow can't fire); (4) SMS/A2P pre-check \u2014 flags if the account has no SMS-capable number so any SMS step would silently fail; (5) workflow status \u2014 flags a DRAFT workflow (never fires on real leads); (6) outreach fired \u2014 an OUTBOUND message was actually logged for the contact (proves enrollment + send, not just a green log), with latency; (7) consent recorded when messaging fires (TCPA/CAN-SPAM); (8) duplicate-contact retest \u2014 a second identical submit dedups to ONE contact, not a duplicate/false-failure; (9) opportunity/routing (expectOpportunity/expectAssigned/expectSource); (10) multi-surface (extraUrls) + concurrent double-submit race. Booking can't be faked server-side, so a real burner appointment is surfaced as a manual step. WARNING: this creates a real (clearly-marked 'blueprint-qa') contact and MAY fire real automation + internal notifications; it deletes the sentinel afterward by default (cleanup). Run it on the REAL production URL.",
+    "Prove a live public funnel actually captures a lead AND the automation acts on it \u2014 the runtime companion to audit_workflows. Submits a sentinel lead to funnelUrl, then reads GHL back to verify what REALLY happened (the UI/thank-you page is never proof): (1) backend contact truth \u2014 a contact carrying the test address actually appears (search_contacts), with submit\u2192appear latency; (2) field-value fidelity \u2014 each expectCustom value actually PERSISTED on the contact (a wrong field id makes upsert succeed while silently dropping the value); (3) the triggerTag landed (else the workflow can't fire); (4) SMS/A2P pre-check \u2014 flags if the account has no SMS-capable number so any SMS step would silently fail; (5) workflow status \u2014 flags a DRAFT workflow (never fires on real leads); (6) outreach fired \u2014 an OUTBOUND message was actually logged for the contact (proves enrollment + send, not just a green log), with latency; (7) consent recorded when messaging fires (TCPA/CAN-SPAM); (8) duplicate-contact retest \u2014 a second identical submit dedups to ONE contact, not a duplicate/false-failure; (9) opportunity/routing (expectOpportunity/expectAssigned/expectSource); (10) multi-surface (extraUrls) + concurrent double-submit race. Booking can't be faked server-side, so a real burner appointment is surfaced as a manual step. WARNING: this submits a real (clearly-marked 'blueprint-qa') test lead, which GoHighLevel may turn into a contact, and MAY fire real automation + internal notifications; it never deletes anything: the result lists every contact that now carries the run's test address (id, name, phone, email, created date), for you to check before asking Claude to delete any. Run it on the REAL production URL.",
     {
-      funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that creates the GHL contact). POSTed as JSON."),
+      funnelUrl: import_zod45.z.string().describe("The live URL the test submission POSTs to (your external lead-bridge Worker URL, or any endpoint that sends the lead into GHL). POSTed as JSON."),
       sentinelEmail: import_zod45.z.string().optional().describe("Override the minted sentinel email. Default: a unique blueprint-qa.<id>@example.com (won't deliver; used only to find the contact)."),
       testPhone: import_zod45.z.string().optional().describe("Include a phone on the submission (enables SMS-path checks). Must be a test-safe number you control \u2014 real SMS may send + bill."),
       submitBody: import_zod45.z.record(import_zod45.z.string(), import_zod45.z.unknown()).optional().describe("Full JSON body to POST (advanced; for non-bridge endpoints). The sentinel email is injected if absent. Default body is the lead-bridge contract {first_name,last_name,email,phone,custom,_hp}."),
@@ -18431,7 +18490,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
       expectSource: import_zod45.z.boolean().optional().describe("Assert a lead source/attribution was captured (reporting works)."),
       extraUrls: import_zod45.z.array(import_zod45.z.string()).optional().describe("Additional capture surfaces to test the same way (each gets its own sentinel) \u2014 popup/inline/exit-intent forms."),
       testConcurrentDuplicate: import_zod45.z.boolean().optional().describe("Fire two simultaneous submits with a fresh email \u2192 assert exactly ONE contact (concurrent dedup race)."),
-      cleanup: import_zod45.z.boolean().optional().describe("Delete the sentinel contact(s) after verifying. Default true."),
+      cleanup: import_zod45.z.boolean().optional().describe("No longer used: verify_funnel never deletes anything. The contacts that now carry the run's test address are listed in the result for you to check."),
       locationId: import_zod45.z.string().optional().describe("Target sub-account. Must match the active location.")
     },
     async (args) => {
@@ -18441,8 +18500,6 @@ function registerFunnelQaTools(server2, client, builderClient) {
           return jsonResponse({ ok: false, error: `Location mismatch: active is ${locationId2}, you passed ${args.locationId}. switch_location + confirm first.` });
         }
         const checks = [];
-        const cleanup = args.cleanup !== false;
-        const sentinels = [];
         const token2 = crypto.randomUUID().slice(0, 8);
         const sentinelEmail = (args.sentinelEmail ?? `blueprint-qa.${token2}@example.com`).toLowerCase();
         const custom = {};
@@ -18451,11 +18508,58 @@ function registerFunnelQaTools(server2, client, builderClient) {
         if (typeof body.email !== "string" || !body.email) body.email = sentinelEmail;
         const searchEmail = String(body.email).toLowerCase();
         if (args.testPhone && !body.phone) body.phone = args.testPhone;
-        const submitMs = Date.now();
+        const addressProblem = await publicAddressProblem(args.funnelUrl);
+        if (addressProblem && /local or private/i.test(addressProblem)) {
+          const sentence = "Not checked: the address is private, so no test lead was sent.";
+          return jsonResponse({ ok: false, verdict: "NOT_CHECKED", summary: sentence, checks: [{ id: "submit", label: "Submit reached the endpoint", status: "skip", detail: sentence }] });
+        }
+        const raceEmail = `blueprint-qa.${crypto.randomUUID().slice(0, 8)}@example.com`;
+        const surfaceEmails = (args.extraUrls ?? []).map(() => `blueprint-qa.${crypto.randomUUID().slice(0, 8)}@example.com`);
+        const runEmails = [searchEmail, ...args.testConcurrentDuplicate ? [raceEmail] : [], ...surfaceEmails];
+        const notRun = (sentence) => jsonResponse({ ok: false, verdict: "NOT_RUN", summary: sentence, checks: [{ id: "preflight", label: "Test address is new", status: "fail", detail: sentence }] });
+        const runStart = Date.now();
+        const everSeen = /* @__PURE__ */ new Set();
+        const found = /* @__PURE__ */ new Map();
+        const latest = /* @__PURE__ */ new Map();
+        let partial = false;
+        const onRead = (r) => {
+          if (!r.complete) partial = true;
+          for (const id of r.ids) everSeen.add(id);
+          for (const row of r.rows) latest.set(row.id, row);
+          for (const m of r.matches) found.set(m.id, m);
+        };
+        for (const email of runEmails) {
+          let read2;
+          try {
+            read2 = await searchByEmail(client, locationId2, email);
+          } catch (e) {
+            return notRun(`Not run: the contact search could not be read (${e instanceof Error ? e.message : String(e)}), so no test lead was sent.`);
+          }
+          onRead(read2);
+          if (read2.matches.length) return notRun(`Not run: ${email} already belongs to a contact in this account; use a test address.`);
+          if (!read2.complete) return notRun(`Not run: the contact search for ${email} could not be read in full, so whether the address is free was not checked and no test lead was sent.`);
+        }
+        const memberChosen = Boolean(args.sentinelEmail) || typeof args.submitBody?.email === "string" && args.submitBody.email !== "";
+        const ownEmails = /* @__PURE__ */ new Set([...memberChosen ? [] : [searchEmail], raceEmail, ...surfaceEmails]);
+        const beginSubmit = (email) => ({ email, start: Date.now(), before: new Set(everSeen) });
+        const landed = (f, sub) => ownEmails.has(sub.email) && f.email === sub.email && f.added !== void 0 && f.added >= sub.start - 6e4 && !sub.before.has(f.id);
+        const searchFailed = (e) => {
+          partial = true;
+          return `Not checked: a contact search could not be read (${e instanceof Error ? e.message.split("\n")[0] : String(e)}), so whether this submit's lead arrived was not checked.`;
+        };
+        const notLanded = (f, sub) => !ownEmails.has(sub.email) ? `A contact with the address you chose now exists (id ${f.id}); because that address is not the run's own, whether this run created it was not checked.` : f.added === void 0 ? `Not checked: when contact ${f.id} was added could not be read, so whether this run's lead landed was not checked.` : `Not checked: the contact found for ${sub.email} (id ${f.id}) is dated before this submit by the server clock, so whether this run's lead landed was not checked.`;
+        const main2 = beginSubmit(searchEmail);
+        const submitMs = main2.start;
         let httpInfo = "";
+        const REDIRECTED = "Not checked: the form's endpoint answered with a redirect, which is not followed, so whether a lead landed was not checked.";
+        let redirected = false;
         try {
           const r = await submit(args.funnelUrl, body);
           httpInfo = `HTTP ${r.httpStatus}`;
+          if (r.httpStatus >= 300 && r.httpStatus < 400) {
+            redirected = true;
+            checks.push({ id: "submit", label: "Submit reached the endpoint", status: "skip", detail: `The endpoint answered ${httpInfo}, a redirect, which is not followed.` });
+          }
           if (r.blockedByCaptcha) {
             checks.push({ id: "spam_gate", label: "Spam gate (Turnstile)", status: "warn", detail: `The funnel's Turnstile gate blocked this automated submit (${httpInfo}). That's correct protection \u2014 but it means verify_funnel can't drive this path. Test it manually, or temporarily allow a QA bypass.` });
           }
@@ -18463,27 +18567,39 @@ function registerFunnelQaTools(server2, client, builderClient) {
           checks.push({ id: "submit", label: "Submit reached the endpoint", status: "fail", detail: `POST to funnelUrl failed: ${e instanceof Error ? e.message : String(e)}` });
         }
         let contactId;
-        let cleanedUp = false;
         try {
           let appearMs;
+          let seenForMain = [];
+          let mainReadFailed;
           const backendTries = 12;
-          for (let i = 1; i <= backendTries; i++) {
-            const ids = await findContactsByEmail(client, locationId2, searchEmail);
-            if (ids.length) {
-              contactId = ids[0];
-              appearMs = Date.now();
-              break;
+          try {
+            for (let i = 1; i <= backendTries; i++) {
+              const ids = await findContactsByEmail(client, locationId2, searchEmail, onRead);
+              if (ids.length) {
+                seenForMain = ids.map((id) => found.get(id)).filter((f) => !!f);
+                appearMs = Date.now();
+                break;
+              }
+              if (i < backendTries) await sleep3(2e3 + i * 500);
             }
-            if (i < backendTries) await sleep3(2e3 + i * 500);
+          } catch (e) {
+            mainReadFailed = searchFailed(e);
           }
+          const mainLanded = new Set(seenForMain.filter((f) => landed(f, main2)).map((f) => f.id));
+          if (mainLanded.size) contactId = [...mainLanded][0];
           const sms = await hasSmsCapability(client, locationId2);
           const wf = args.workflowId && builderClient ? await readWorkflow(builderClient, args.workflowId) : void 0;
-          if (!contactId) {
+          if (mainReadFailed) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: mainReadFailed });
+          } else if (!contactId && seenForMain.length) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: notLanded(seenForMain[0], main2) });
+          } else if (!contactId && redirected) {
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "skip", detail: REDIRECTED });
+          } else if (!contactId) {
             checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "fail", detail: `No contact with ${searchEmail} appeared in GHL after ~${Math.round(backendTries * 2.5)}s (${httpInfo || "submit failed"}). The funnel is a paper shredder \u2014 leads evaporate even if the page says thanks.` });
           } else {
-            sentinels.push(contactId);
             const latencySec = appearMs ? Math.round((appearMs - submitMs) / 1e3) : void 0;
-            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "pass", detail: `Contact ${contactId} created (${httpInfo}). Submit\u2192appear ~${latencySec}s.` });
+            checks.push({ id: "backend_truth", label: "Lead actually landed (backend)", status: "pass", detail: `A contact carrying this run's test address (id ${contactId}) appeared after the submit (${httpInfo}). Submit\u2192appear ~${latencySec}s.` });
             checks.push(latencySec !== void 0 && latencySec > 60 ? { id: "latency", label: "Speed-to-lead latency", status: "warn", detail: `Lead took ~${latencySec}s to land \u2014 slow capture loses leads. Investigate the bridge/retry path.` } : { id: "latency", label: "Speed-to-lead latency", status: "pass", detail: `~${latencySec ?? "<1"}s submit\u2192contact.` });
             const contact = await getContact(client, contactId);
             if (!contact) {
@@ -18501,11 +18617,11 @@ function registerFunnelQaTools(server2, client, builderClient) {
                   else if (got2.trim() !== f.value.trim()) probs.push(`custom ${f.label ?? f.fieldId}: saved "${got2}" \u2260 sent "${f.value}"`);
                 }
                 const submitted = {
-                  email: str(body.email)?.toLowerCase(),
-                  phone: str(body.phone),
-                  first_name: str(body.first_name),
-                  last_name: str(body.last_name),
-                  name: str(body.name)
+                  email: str2(body.email)?.toLowerCase(),
+                  phone: str2(body.phone),
+                  first_name: str2(body.first_name),
+                  last_name: str2(body.last_name),
+                  name: str2(body.name)
                 };
                 const got = {
                   email: contact.email,
@@ -18549,7 +18665,7 @@ function registerFunnelQaTools(server2, client, builderClient) {
             if (args.workflowId) {
               if (!builderClient) checks.push({ id: "workflow_status", label: "Workflow is published", status: "skip", detail: "Workflow status needs the workflow-builder (Firebase) client, which isn't configured on this install." });
               else if (!wf) checks.push({ id: "workflow_status", label: "Workflow is published", status: "warn", detail: `Could not read workflow ${args.workflowId} (id wrong, or not readable).` });
-              else if (str(wf.status)?.toLowerCase() === "draft") checks.push({ id: "workflow_status", label: "Workflow is published", status: "fail", detail: `Workflow ${args.workflowId} is DRAFT \u2014 it will NOT fire on real leads. Publish it.` });
+              else if (str2(wf.status)?.toLowerCase() === "draft") checks.push({ id: "workflow_status", label: "Workflow is published", status: "fail", detail: `Workflow ${args.workflowId} is DRAFT \u2014 it will NOT fire on real leads. Publish it.` });
               else checks.push({ id: "workflow_status", label: "Workflow is published", status: "pass", detail: `Workflow status: ${wf.status}.` });
             }
             const wantOutreach = args.expectOutreach ?? !!(args.triggerTag || args.workflowId);
@@ -18574,13 +18690,13 @@ function registerFunnelQaTools(server2, client, builderClient) {
             if (args.expectOpportunity) {
               try {
                 const oppRaw = await client.get("/opportunities/search", { params: { location_id: locationId2, contact_id: contactId } });
-                const opps = asArr(asObj(oppRaw).opportunities).map(asObj);
+                const opps = asArr(asObj2(oppRaw).opportunities).map(asObj2);
                 if (opps.length === 0) {
                   checks.push({ id: "opportunity", label: "Opportunity created", status: "fail", detail: "No opportunity exists for the contact \u2014 the create-opportunity step didn't run (often a dead pipeline/stage id silently kills it)." });
                 } else {
                   const want = args.expectOpportunity;
-                  const match = opps.find((o) => (!want.pipelineId || str(o.pipelineId) === want.pipelineId) && (!want.stageId || str(o.pipelineStageId) === want.stageId));
-                  checks.push(match ? { id: "opportunity", label: "Opportunity created", status: "pass", detail: `Opportunity in the expected pipeline/stage.` } : { id: "opportunity", label: "Opportunity created", status: "fail", detail: `An opportunity exists but not in the expected pipeline/stage (got pipeline ${str(opps[0].pipelineId)}, stage ${str(opps[0].pipelineStageId)}).` });
+                  const match = opps.find((o) => (!want.pipelineId || str2(o.pipelineId) === want.pipelineId) && (!want.stageId || str2(o.pipelineStageId) === want.stageId));
+                  checks.push(match ? { id: "opportunity", label: "Opportunity created", status: "pass", detail: `Opportunity in the expected pipeline/stage.` } : { id: "opportunity", label: "Opportunity created", status: "fail", detail: `An opportunity exists but not in the expected pipeline/stage (got pipeline ${str2(opps[0].pipelineId)}, stage ${str2(opps[0].pipelineStageId)}).` });
                 }
               } catch (e) {
                 checks.push({ id: "opportunity", label: "Opportunity created", status: "warn", detail: `Could not read opportunities: ${e instanceof Error ? e.message : String(e)}` });
@@ -18594,79 +18710,135 @@ function registerFunnelQaTools(server2, client, builderClient) {
               if (!contact) checks.push({ id: "attribution", label: "Lead source captured", status: "fail", detail: "Could not read the contact to verify source." });
               else checks.push(contact.source ? { id: "attribution", label: "Lead source captured", status: "pass", detail: `source = "${contact.source}".` } : { id: "attribution", label: "Lead source captured", status: "warn", detail: "No source/attribution on the contact \u2014 reporting can't tell which funnel/ad produced it." });
             }
+            const dup = beginSubmit(searchEmail);
             await submit(args.funnelUrl, body).catch(() => void 0);
-            const dupIds = await settledEmailIds(client, locationId2, searchEmail, { tries: 6, delayMs: 3e3 });
-            for (const id of dupIds) if (!sentinels.includes(id)) sentinels.push(id);
-            checks.push(dupIds.length === 1 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "pass", detail: "A second identical submit deduped to ONE contact (upsert by email)." } : dupIds.length === 0 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "warn", detail: `Could not observe the contact for ${searchEmail} on re-read (search lag) \u2014 dedup not conclusively verified.` } : { id: "duplicate", label: "Duplicate-contact dedup", status: "fail", detail: `A second submit produced ${dupIds.length} contacts for ${searchEmail} \u2014 dedup is broken (real returning visitors will duplicate or false-fail).` });
+            let dupMatches = [];
+            let dupFailed;
+            try {
+              dupMatches = (await settledEmailIds(client, locationId2, searchEmail, { tries: 6, delayMs: 3e3 }, onRead)).map((id) => found.get(id)).filter((f) => !!f);
+            } catch (e) {
+              dupFailed = searchFailed(e);
+            }
+            const dupKnown = dupMatches.filter((f) => mainLanded.has(f.id) || landed(f, dup));
+            const dupOther = dupMatches.filter((f) => !mainLanded.has(f.id) && !landed(f, dup));
+            checks.push(dupFailed ? { id: "duplicate", label: "Duplicate-contact dedup", status: "skip", detail: dupFailed } : dupOther.length ? { id: "duplicate", label: "Duplicate-contact dedup", status: "skip", detail: `Not checked: a contact listed before the second submit now carries the address (id ${dupOther[0].id}), so whether the second submit made a duplicate was not checked.` } : dupKnown.length === 1 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "pass", detail: "After a second identical submit, still ONE contact carries the address (upsert by email)." } : dupKnown.length === 0 ? { id: "duplicate", label: "Duplicate-contact dedup", status: "warn", detail: `Could not observe the contact for ${searchEmail} on re-read (search lag) \u2014 dedup not conclusively verified.` } : { id: "duplicate", label: "Duplicate-contact dedup", status: "fail", detail: `After a second submit, ${dupKnown.length} contacts carry ${searchEmail} \u2014 dedup is broken (real returning visitors will duplicate or false-fail).` });
             if (args.testConcurrentDuplicate) {
-              const raceToken = crypto.randomUUID().slice(0, 8);
-              const raceEmail = `blueprint-qa.${raceToken}@example.com`;
-              const raceBody = { ...body, email: raceEmail, last_name: `QA race ${raceToken}` };
-              await Promise.allSettled([submit(args.funnelUrl, raceBody), submit(args.funnelUrl, raceBody)]);
-              const raceIds = await settledEmailIds(client, locationId2, raceEmail, { tries: 6, delayMs: 3e3 });
-              for (const id of raceIds) if (!sentinels.includes(id)) sentinels.push(id);
-              checks.push(raceIds.length === 1 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "pass", detail: `Two simultaneous submits \u2192 1 contact (no race duplicate).` } : raceIds.length === 0 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "warn", detail: "Could not observe the race result (search lag, or neither submit landed)." } : { id: "concurrent_race", label: "Concurrent double-submit", status: "fail", detail: `Two simultaneous submits created ${raceIds.length} contacts \u2014 a concurrency race duplicates leads under real traffic.` });
+              let raceBefore;
+              try {
+                await findContactsByEmail(client, locationId2, raceEmail, onRead);
+              } catch (e) {
+                raceBefore = searchFailed(e);
+              }
+              if (raceBefore) checks.push({ id: "concurrent_race", label: "Concurrent double-submit", status: "skip", detail: `${raceBefore} The concurrent pair was not sent.` });
+              else {
+                const race = beginSubmit(raceEmail);
+                const raceBody = { ...body, email: raceEmail, last_name: `QA race ${raceEmail.slice(13, 21)}` };
+                await Promise.allSettled([submit(args.funnelUrl, raceBody), submit(args.funnelUrl, raceBody)]);
+                let raceMine = [];
+                let raceFailed;
+                try {
+                  raceMine = (await settledEmailIds(client, locationId2, raceEmail, { tries: 6, delayMs: 3e3 }, onRead)).map((id) => found.get(id)).filter((f) => !!f && landed(f, race));
+                } catch (e) {
+                  raceFailed = searchFailed(e);
+                }
+                checks.push(raceFailed ? { id: "concurrent_race", label: "Concurrent double-submit", status: "skip", detail: raceFailed } : raceMine.length === 1 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "pass", detail: `Two simultaneous submits \u2192 1 contact carrying the race address appeared (no race duplicate).` } : raceMine.length === 0 ? { id: "concurrent_race", label: "Concurrent double-submit", status: "warn", detail: "Could not observe the race result (search lag, or neither submit landed)." } : { id: "concurrent_race", label: "Concurrent double-submit", status: "fail", detail: `Two simultaneous submits \u2192 ${raceMine.length} contacts carrying the race address appeared \u2014 a concurrency race duplicates leads under real traffic.` });
+              }
             }
-            for (const url of args.extraUrls ?? []) {
-              const sToken = crypto.randomUUID().slice(0, 8);
-              const sEmail = `blueprint-qa.${sToken}@example.com`;
-              const sBody = { ...body, email: sEmail, last_name: `QA ${sToken}` };
+            for (const [k, url] of (args.extraUrls ?? []).entries()) {
+              const sEmail = surfaceEmails[k];
+              const sBody = { ...body, email: sEmail, last_name: `QA ${sEmail.slice(13, 21)}` };
+              let sBefore;
+              try {
+                await findContactsByEmail(client, locationId2, sEmail, onRead);
+              } catch (e) {
+                sBefore = searchFailed(e);
+              }
+              if (sBefore) {
+                checks.push({ id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: `${sBefore} This surface's test lead was not sent.` });
+                continue;
+              }
+              const surf = beginSubmit(sEmail);
               let ids = [];
+              let sRedirected = false;
+              let sFailed;
               try {
-                await submit(url, sBody);
-                ids = await settledEmailIds(client, locationId2, sEmail, { tries: 8, delayMs: 2500 });
+                const r = await submit(url, sBody);
+                sRedirected = r.httpStatus >= 300 && r.httpStatus < 400;
+                try {
+                  ids = await settledEmailIds(client, locationId2, sEmail, { tries: 8, delayMs: 2500 }, onRead);
+                } catch (e) {
+                  sFailed = searchFailed(e);
+                }
               } catch {
               }
-              for (const id of ids) if (!sentinels.includes(id)) sentinels.push(id);
-              checks.push(ids.length >= 1 ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "pass", detail: `Submission landed ${ids.length} contact(s).` } : { id: `surface:${url}`, label: `Capture surface ${url}`, status: "fail", detail: "Submission did NOT land a contact \u2014 this surface is a paper shredder." });
+              const seenHere = ids.map((id) => found.get(id)).filter((f) => !!f);
+              const sMine = seenHere.filter((f) => landed(f, surf));
+              checks.push(sFailed ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: sFailed } : sMine.length >= 1 ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "pass", detail: `${sMine.length} contact(s) carrying this surface's test address appeared after the submit.` } : seenHere.length ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: notLanded(seenHere[0], surf) } : sRedirected ? { id: `surface:${url}`, label: `Capture surface ${url}`, status: "skip", detail: REDIRECTED } : { id: `surface:${url}`, label: `Capture surface ${url}`, status: "fail", detail: "Submission did NOT land a contact \u2014 this surface is a paper shredder." });
             }
           }
           checks.push({ id: "booking", label: "Booking (manual)", status: "skip", detail: "A reachable calendar URL is not proof. Book ONE real test ('burner') appointment through the live booking widget and confirm it lands in GHL (Carlos #6). This step can't be verified server-side." });
         } catch (e) {
-          checks.push({ id: "error", label: "verify_funnel run error", status: "fail", detail: e instanceof Error ? e.message : String(e) });
-        } finally {
-          const uniq = [...new Set(sentinels)];
-          if (!cleanup) {
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: "skip", detail: `cleanup:false \u2014 ${uniq.length} "blueprint-qa" sentinel contact(s) left in the account. Delete them so QA doesn't pollute reporting.` });
-          } else if (uniq.length === 0) {
-            cleanedUp = true;
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: "skip", detail: "No sentinel contacts were created." });
-          } else {
-            let deleted = 0;
-            for (const id of uniq) {
-              try {
-                await client.delete(`/contacts/${id}`);
-                deleted++;
-              } catch {
-              }
-            }
-            cleanedUp = deleted === uniq.length;
-            checks.push({ id: "cleanup", label: "Sentinel cleanup", status: cleanedUp ? "pass" : "warn", detail: cleanedUp ? `Deleted ${deleted} sentinel contact(s).` : `Deleted ${deleted}/${uniq.length} sentinel contact(s) \u2014 remove any leftover "blueprint-qa" contacts manually.` });
+          partial = true;
+          const msg3 = e instanceof Error ? e.message.split("\n")[0] : String(e);
+          const bt2 = checks.find((c) => c.id === "backend_truth");
+          if (bt2?.status === "pass") {
+            bt2.status = "skip";
+            bt2.detail = `Not checked: a read after the lead appeared could not be completed (${msg3}), so this submit was not fully checked.`;
+            for (let i = checks.length - 1; i >= 0; i--) if (checks[i].id === "latency") checks.splice(i, 1);
+            checks.push({ id: "error", label: "verify_funnel read error", status: "skip", detail: msg3 });
+          } else checks.push({ id: "error", label: "verify_funnel run error", status: "fail", detail: e instanceof Error ? e.message : String(e) });
+        }
+        for (const f of found.values()) {
+          if (f.added !== void 0 && f.added < runStart - 6e4) checks.push({ id: `upsert:${f.id}`, label: "Test email on an existing contact", status: "warn", detail: `Contact ${f.id} carrying the test address is dated before this submit by the server clock; it may be an existing contact the endpoint re-used. Check that contact's email.` });
+        }
+        const runAddresses = /* @__PURE__ */ new Set([searchEmail, ...ownEmails]);
+        for (const id of [...found.keys()].slice(0, 25)) {
+          try {
+            const now = carrierOf(asObj2(await client.get(`/contacts/${id}`)).contact);
+            if (now) latest.set(id, now);
+          } catch (e) {
+            if (/\b404\b|not found/i.test(e instanceof Error ? e.message : String(e))) latest.set(id, { id, name: "", phone: "", email: "", created: "" });
+            else partial = true;
           }
         }
-        return finish2(checks, { contactId, sentinelEmail: searchEmail, cleanedUp });
+        if (found.size > 25) partial = true;
+        const carriers = [];
+        const former = [];
+        for (const f of found.values()) {
+          const now = latest.get(f.id);
+          if (now && !runAddresses.has(now.email)) former.push({ id: f.id, now: now.email || "no contact by that id" });
+          else carriers.push(now ?? f.carrier ?? { id: f.id, name: f.name ?? "", phone: "", email: f.email, created: "" });
+        }
+        checks.push({ id: "test_contacts", label: CARRIER_HEADING, status: "skip", detail: carrierText(carriers, partial, former) });
+        const bt = checks.find((c) => c.id === "backend_truth");
+        const notChecked = bt?.status === "skip" && !checks.some((c) => c.status === "fail") ? bt.detail : void 0;
+        return finish2(checks, { contactId, sentinelEmail: searchEmail, contactsCarryingTestAddress: carriers, formerCarriers: former, contactsListPartial: partial }, carriers.length > 0, notChecked);
       } catch (error) {
         return errorResponse(error);
       }
     }
   );
 }
-function finish2(checks, extra) {
-  const { ok, verdict, summary } = rollupVerdict(checks);
-  const note = "WARNING: verify_funnel created a real (clearly-marked 'blueprint-qa') contact and may have fired real automation + internal notifications. Run on the real production URL; the form/thank-you page is never proof \u2014 only the backend is.";
+function finish2(checks, extra, createdAny, notChecked) {
+  const rolled = rollupVerdict(checks);
+  const { ok, verdict, summary } = notChecked ? { ok: false, verdict: "NOT_CHECKED", summary: notChecked } : rolled;
+  const note = createdAny ? "WARNING: verify_funnel submitted a real (clearly-marked 'blueprint-qa') test lead and may have fired real automation + internal notifications. It never deletes anything: the contacts that now carry this run's test address are listed, for you to check before deleting any. Run on the real production URL; the form/thank-you page is never proof \u2014 only the backend is." : "No contact carrying this run's test address was found.";
   return jsonResponse({ ok, verdict, summary, checks, note, ...extra });
 }
-var import_zod45, asObj, asArr, str, sleep3, customFieldInput;
+var import_zod45, asObj2, asArr, str2, sleep3, SearchUnreadable, customFieldInput;
 var init_funnel_qa = __esm({
   "src/tools/funnel-qa.ts"() {
     "use strict";
     import_zod45 = require("zod");
     init_tool_helpers();
+    init_test_contacts();
     init_net_guard();
-    asObj = (v) => v && typeof v === "object" ? v : {};
+    asObj2 = (v) => v && typeof v === "object" ? v : {};
     asArr = (v) => Array.isArray(v) ? v : [];
-    str = (v) => typeof v === "string" ? v : void 0;
+    str2 = (v) => typeof v === "string" ? v : void 0;
     sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+    SearchUnreadable = class extends Error {
+    };
     customFieldInput = import_zod45.z.object({
       fieldId: import_zod45.z.string().describe("The VERIFIED GHL custom-field id the form sends (from apply_build_plan's wiring bundle)."),
       value: import_zod45.z.string().describe("The value the form sends for this field \u2014 asserted to PERSIST on the contact."),
@@ -18886,13 +19058,13 @@ var init_sub_account_errors = __esm({
 });
 
 // src/field-sanitize.ts
-var MAX_STR, MAX_LIST, str2, num, list, drop, isoDate;
+var MAX_STR, MAX_LIST, str3, num, list, drop, isoDate;
 var init_field_sanitize = __esm({
   "src/field-sanitize.ts"() {
     "use strict";
     MAX_STR = 200;
     MAX_LIST = 50;
-    str2 = (x, max = MAX_STR) => {
+    str3 = (x, max = MAX_STR) => {
       if (typeof x !== "string") return void 0;
       const t = x.trim();
       return t ? t.slice(0, max) : void 0;
@@ -18905,7 +19077,7 @@ var init_field_sanitize = __esm({
     };
     drop = (o) => Object.values(o).some((v) => v !== void 0) ? o : void 0;
     isoDate = (x) => {
-      const s = str2(x, 40);
+      const s = str3(x, 40);
       if (!s) return void 0;
       const m = /^(\d{4})-(\d{2})-(\d{2})(?:[T ].*)?$/.exec(s);
       if (!m) return void 0;
@@ -19017,7 +19189,7 @@ function safeParse(raw) {
   }
 }
 function safeUrl2(x, max = MAX_URL) {
-  const raw = str2(x, max);
+  const raw = str3(x, max);
   if (!raw) return void 0;
   let u;
   try {
@@ -19048,68 +19220,68 @@ function sanitizeProfile(raw) {
     v: 1,
     canCreateSubAccounts: typeof r.canCreateSubAccounts === "boolean" ? r.canCreateSubAccounts : void 0,
     ghlPlanEvidence: sanitizePlanEvidence(r.ghlPlanEvidence),
-    agencyName: str2(r.agencyName, 80),
-    legalName: str2(r.legalName),
+    agencyName: str3(r.agencyName, 80),
+    legalName: str3(r.legalName),
     accent: normalizeAccent(r.accent),
     logoUrl: safeUrl2(r.logoUrl),
     website: safeUrl2(r.website),
     sender: drop({
-      fromName: str2(sender?.fromName, 80),
-      replyTo: str2(sender?.replyTo),
-      phone: str2(sender?.phone, 32)
+      fromName: str3(sender?.fromName, 80),
+      replyTo: str3(sender?.replyTo),
+      phone: str3(sender?.phone, 32)
     }),
     offers: list(r.offers, (o) => {
       const v = o ?? {};
-      const name = str2(v.name, 120);
+      const name = str3(v.name, 120);
       if (!name) return void 0;
       return {
         name,
         priceFloor: num(v.priceFloor),
         cadence: v.cadence === "monthly" || v.cadence === "one-time" ? v.cadence : void 0,
-        notes: str2(v.notes, 500)
+        notes: str3(v.notes, 500)
       };
     }),
     packages: (() => {
       const seen = /* @__PURE__ */ new Set();
       return list(r.packages, (pk) => {
         const v = pk ?? {};
-        const name = str2(v.name, 80);
+        const name = str3(v.name, 80);
         if (!name) return void 0;
-        const idRaw = str2(v.id, 60) || name;
+        const idRaw = str3(v.id, 60) || name;
         const id = idRaw.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "package";
         if (seen.has(id)) return void 0;
         seen.add(id);
         const features = Array.isArray(v.features) ? [...new Set(v.features.filter(isFeatureId))] : [];
-        return { id, name, price: str2(v.price, 60), features };
+        return { id, name, price: str3(v.price, 60), features };
       });
     })(),
     pricing: drop({
       minMonthly: num(pricing?.minMonthly),
       minSetup: num(pricing?.minSetup),
-      currency: str2(pricing?.currency, 8)
+      currency: str3(pricing?.currency, 8)
     }),
     delivery: drop({
-      sops: list(delivery?.sops, (s) => str2(s, MAX_SOP)),
+      sops: list(delivery?.sops, (s) => str3(s, MAX_SOP)),
       hoursToDeliverTarget: num(delivery?.hoursToDeliverTarget)
     }),
     staff: list(r.staff, (s) => {
       const v = s ?? {};
-      const name = str2(v.name, 80);
+      const name = str3(v.name, 80);
       if (!name) return void 0;
       return {
         name,
-        role: str2(v.role),
-        email: str2(v.email),
-        mayApprove: list(v.mayApprove, (a) => str2(a, 40))
+        role: str3(v.role),
+        email: str3(v.email),
+        mayApprove: list(v.mayApprove, (a) => str3(a, 40))
       };
     }),
     defaults: drop({
-      timezone: str2(defaults?.timezone, 64),
-      industry: str2(defaults?.industry, 64)
+      timezone: str3(defaults?.timezone, 64),
+      industry: str3(defaults?.industry, 64)
     }),
     agencyOs: sanitizeAgencyOs(r.agencyOs),
     clientFilesDir: safeDir(r.clientFilesDir),
-    updated_at: str2(r.updated_at, 40)
+    updated_at: str3(r.updated_at, 40)
   };
 }
 function sanitizeAgencyOs(raw) {
@@ -19117,16 +19289,16 @@ function sanitizeAgencyOs(raw) {
   const r = raw;
   const ica = r.ica ?? {};
   const offer = r.offer ?? {};
-  const lines = (x) => list(x, (s) => str2(s, MAX_STR * 2));
+  const lines = (x) => list(x, (s) => str3(s, MAX_STR * 2));
   const out = drop({
-    story: str2(r.story, MAX_PARA),
-    method: str2(r.method, MAX_PARA),
-    voice: str2(r.voice, 400),
+    story: str3(r.story, MAX_PARA),
+    method: str3(r.method, MAX_PARA),
+    voice: str3(r.voice, 400),
     values: lines(r.values),
-    goals: str2(r.goals, 400),
+    goals: str3(r.goals, 400),
     proof: lines(r.proof),
     ica: drop({
-      who: str2(ica.who, 400),
+      who: str3(ica.who, 400),
       pains: lines(ica.pains),
       desires: lines(ica.desires),
       objections: lines(ica.objections),
@@ -19136,11 +19308,11 @@ function sanitizeAgencyOs(raw) {
       villains: lines(ica.villains)
     }),
     offer: drop({
-      name: str2(offer.name, 120),
-      promise: str2(offer.promise, 400),
+      name: str3(offer.name, 120),
+      promise: str3(offer.promise, 400),
       valueStack: lines(offer.valueStack),
-      price: str2(offer.price, 120),
-      guarantee: str2(offer.guarantee, 600),
+      price: str3(offer.price, 120),
+      guarantee: str3(offer.guarantee, 600),
       accelerators: lines(offer.accelerators)
     })
   });
@@ -19149,7 +19321,7 @@ function sanitizeAgencyOs(raw) {
 function legacyBranding(profileFile) {
   try {
     const raw = JSON.parse(fs9.readFileSync(path8.join(path8.dirname(profileFile), "cockpit-state.json"), "utf8"));
-    return { agencyName: str2(raw?.agencyName, 80), accent: normalizeAccent(raw?.agencyAccent) };
+    return { agencyName: str3(raw?.agencyName, 80), accent: normalizeAccent(raw?.agencyAccent) };
   } catch {
     return {};
   }
@@ -19259,7 +19431,7 @@ function demoRailProfile(p = readAgencyProfile(), ghl, demoDays = 7) {
   if (p.accent) rec.accent = p.accent;
   if (p.logoUrl) rec.logoUrl = p.logoUrl;
   if (p.sender) rec.senderIdentity = p.sender;
-  const g = drop({ locationId: str2(ghl?.locationId), triggerTag: str2(ghl?.triggerTag, 60) });
+  const g = drop({ locationId: str3(ghl?.locationId), triggerTag: str3(ghl?.triggerTag, 60) });
   if (g) rec.ghl = g;
   rec.demoDays = num(demoDays) ?? 7;
   return rec;
@@ -21840,25 +22012,25 @@ function sanitizeEngagement(raw) {
     // "client" downstream. Coercing a typo to `software` would silently take a
     // real client off the build board — the failure that costs work.
     kind: ENGAGEMENT_KINDS.includes(r.kind) ? r.kind : void 0,
-    clientName: str2(r.clientName, 120),
-    offer: str2(r.offer, 120),
+    clientName: str3(r.clientName, 120),
+    offer: str3(r.offer, 120),
     price: num(r.price),
     cadence: r.cadence === "monthly" || r.cadence === "one-time" ? r.cadence : void 0,
-    currency: str2(r.currency, 8),
+    currency: str3(r.currency, 8),
     startedOn: isoDate(r.startedOn),
     renewsOn: isoDate(r.renewsOn),
     status: ENGAGEMENT_STATUSES.includes(r.status) ? r.status : void 0,
-    owner: str2(r.owner, 80),
-    sops: list(r.sops, (s) => str2(s, MAX_SOP2)),
+    owner: str3(r.owner, 80),
+    sops: list(r.sops, (s) => str3(s, MAX_SOP2)),
     emails: list(r.emails, (s) => {
-      const v = str2(s, 254)?.trim().toLowerCase();
+      const v = str3(s, 254)?.trim().toLowerCase();
       return isEmailAddress(v) ? v : void 0;
     }),
-    notes: str2(r.notes, MAX_NOTES)
+    notes: str3(r.notes, MAX_NOTES)
   };
   const { kind: _classification, ...content } = rec;
   if (!drop(content)) return void 0;
-  const stamped = str2(r.updated_at, 40);
+  const stamped = str3(r.updated_at, 40);
   return stamped ? { ...rec, updated_at: stamped } : rec;
 }
 function sanitizeEngagements(raw) {
@@ -21867,13 +22039,13 @@ function sanitizeEngagements(raw) {
   const clients = /* @__PURE__ */ Object.create(null);
   if (src && typeof src === "object" && !Array.isArray(src)) {
     for (const [id, rec] of Object.entries(src).slice(0, MAX_CLIENTS)) {
-      const key = str2(id, 64);
+      const key = str3(id, 64);
       if (!key || FORBIDDEN_KEY.has(key)) continue;
       const clean2 = sanitizeEngagement(rec);
       if (clean2) clients[key] = clean2;
     }
   }
-  return { v: 1, clients: { ...clients }, updated_at: str2(r.updated_at, 40) };
+  return { v: 1, clients: { ...clients }, updated_at: str3(r.updated_at, 40) };
 }
 function readClientEngagements(file2 = clientEngagementsPath()) {
   try {
@@ -21900,7 +22072,7 @@ function mergeEngagement(existing, patch) {
   return sanitizeEngagement({ ...merged });
 }
 function writeClientEngagement(locationId2, patch, file2 = clientEngagementsPath()) {
-  const id = str2(locationId2, 64);
+  const id = str3(locationId2, 64);
   if (!id || FORBIDDEN_KEY.has(id)) throw new Error("An id is required.");
   const stamp = () => {
     try {
@@ -25682,7 +25854,9 @@ function stageBlockedBy(stages, stage) {
   return null;
 }
 function verifyReadbackPrompt(ctx) {
-  return "\nAccount read-back has already run in code. These records decide existence, regardless of RESULT ok or dependencyChecks: " + JSON.stringify(ctx?.readback ?? []) + "\nDo not contradict any record. Keep dependencyChecks for evidence you establish yourself. The final report replaces the standing Checked and Not checked headings with the deterministic roll-call. Use the live URL on the funnel or page record, and the triggerTags and id on the speed-to-lead workflow record, for the existing fake-client check. Do not invent a URL or a trigger tag. Before calling verify_funnel, disclose that it submits a marked test lead and may fire this client's automations once. Preserve the existing verify_funnel submission and cleanup. If the funnel has no working page, report the reason that live proof could not run. Add liveProof:{ok,evidence} to RESULT. Set liveProof.ok true only when verify_funnel reports that the marked lead arrived and the test contact was deleted. Quote that result's evidence, including its contact id and cleanup result. Otherwise set liveProof.ok false with the check's own failure or the reason it could not run.\n";
+  return "\nAccount read-back has already run in code. These records decide existence, regardless of RESULT ok or dependencyChecks: " + JSON.stringify(ctx?.readback ?? []) + `
+Do not contradict any record. Keep dependencyChecks for evidence you establish yourself. The final report replaces the standing Checked and Not checked headings with the deterministic roll-call. Use the live URL on the funnel or page record, and the triggerTags and id on the speed-to-lead workflow record, for the existing fake-client check. Do not invent a URL or a trigger tag. Before calling verify_funnel, disclose that it submits a marked test lead and may fire this client's automations once. Preserve the existing verify_funnel submission. verify_funnel never deletes anything: report the contacts it lists as carrying the test address, for the member to check before deleting any. If the funnel has no working page, report the reason that live proof could not run. Add liveProof:{ok,evidence} to RESULT. Set liveProof.ok true only when verify_funnel's "Lead actually landed" check passed (a contact carrying the run's test address appeared after the submit). Quote that result's evidence, including its contact id and the contacts it lists as carrying the test address. Otherwise set liveProof.ok false with the check's own failure or the reason it could not run.
+`;
 }
 function buildClaudeArgs(spec, locationId2, locationName, ctx) {
   return [
@@ -29564,7 +29738,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.88.3",
+      version: "3.88.4",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -30092,7 +30266,7 @@ function resultHtml(run, now, clientName, action) {
   if (run.status === "failed") {
     return {
       head: pageHead("The Workflow Audit Pro could not run", esc2(run.error ?? "Unknown error"), action),
-      rest: callout("warn", "", esc2(run.cleanup?.detail ?? "Nothing was created in the account."))
+      rest: callout("warn", "", esc2(run.cleanup?.detail ?? "No test lead was sent."))
     };
   }
   const f = run.findings;
@@ -30198,7 +30372,7 @@ function startForm(d, inlineSubmit) {
 <div class="cds-field"><label for="owner-email">Your email</label><div class="hint" id="owner-email-hint">The test lead uses it, so every message comes to you.</div><input class="cds-input" id="owner-email" name="ownerEmail" type="email" required value="${esc2(d.ownerEmail ?? "")}" autocomplete="email" aria-describedby="owner-email-hint"></div>
 <div class="cds-field"><label for="test-phone">Test phone, optional</label><div class="hint" id="test-phone-hint">A phone you own; texts will really send to it.</div><input class="cds-input" id="test-phone" name="testPhone" type="tel" autocomplete="tel" placeholder="+1 555 010 0100" aria-describedby="test-phone-hint"></div>
 <div class="cds-field"><label for="watch">Watch for</label><select class="cds-select" id="watch" name="watchMinutes"><option value="auto" selected>Automatic: until the last planned message, plus 2 minutes</option><option value="10">10 minutes</option><option value="30">30 minutes</option><option value="60">1 hour</option><option value="240">4 hours</option><option value="1440">24 hours</option></select></div>
-<label class="cds-check"><input type="checkbox" id="keep" name="keepLead"><span>Keep the test lead afterwards so I can look at it in GoHighLevel</span></label>
+
 <label class="cds-check"><input type="checkbox" id="ff" name="fastForward"><span>Fast-forward: test long workflows in minutes.<small>A temporary copy with every step kept and every wait cut to 1 minute; staff alerts, tasks and lead assignments go to one person you choose, marked TEST; the copy is deleted afterwards.</small></span></label>
 <div class="cds-field" id="alert-to-wrap" hidden><label for="alert-to">Staff alerts, tasks and assignments go to</label><div class="hint" id="alert-to-hint">Instead of your staff, marked TEST.</div><select class="cds-select" id="alert-to" name="alertUserId" aria-describedby="alert-to-hint"></select></div>
 <fieldset class="cds-field" id="hooks" hidden><legend class="lbl">Outside services these workflows send the lead to</legend><div class="wf" id="hooks-list"></div></fieldset>
@@ -30206,7 +30380,7 @@ ${callout("warn", "", "The test lead has no first name, on purpose. The workflow
 ${inlineSubmit ? `<div class="cds-row"><button class="cds-btn ghost" type="submit" id="start-btn" disabled>Start the check</button></div>` : ""}
 <p class="cds-callout result" id="start-result" role="status" aria-live="polite"></p>
 </form>`;
-  return panel("New check", `${d.run?.status === "done" ? "Run another check" : "Run the Workflow Audit Pro"} on ${esc2(d.client.name)}`, "Writes one test contact, then removes it", form, ` id="start"`, "cds-no-print");
+  return panel("New check", `${d.run?.status === "done" ? "Run another check" : "Run the Workflow Audit Pro"} on ${esc2(d.client.name)}`, "Sends one test lead, then lists the contacts that carry its address", form, ` id="start"`, "cds-no-print");
 }
 function shopperPageHtml(d, seatToken, seatHeader) {
   const picker = `<form class="picker cds-no-print" method="get" action="/shopper"><div class="cds-field"><label for="client">Client account</label><select class="cds-select" id="client" name="client" onchange="this.form.submit()"><option value="">Choose a client\u2026</option>${d.accounts.map((a) => `<option value="${esc2(a.locationId)}"${d.client?.locationId === a.locationId ? " selected" : ""}>${esc2(a.name)}</option>`).join("")}</select></div><noscript><button class="cds-btn ghost" type="submit">Open</button></noscript></form>`;
@@ -30252,7 +30426,7 @@ ${COCKPIT_TYPE_JS}
   if(document.getElementById("ff").checked&&form.querySelector('[data-hook-blocked]')){say("One of these workflows sends the lead to an address built from a merge field, so fast-forward cannot test it yet. Untick that workflow, or run without fast-forward.");return}
   var btn=document.getElementById("start-btn");btn.disabled=true;say("Starting\u2026");
   var hosts=[].slice.call(form.querySelectorAll('input[name="hook"]:checked')).map(function(i){return i.value});
-  post("/api/shopper/start",{client:client,workflowIds:ids,ownerEmail:document.getElementById("owner-email").value,testPhone:document.getElementById("test-phone").value||undefined,watchMinutes:(document.getElementById("watch").value==="auto"?undefined:Number(document.getElementById("watch").value)),keepLead:document.getElementById("keep").checked,fastForward:document.getElementById("ff").checked,allowedHosts:hosts,alertUserId:(document.getElementById("alert-to").value||undefined)})
+  post("/api/shopper/start",{client:client,workflowIds:ids,ownerEmail:document.getElementById("owner-email").value,testPhone:document.getElementById("test-phone").value||undefined,watchMinutes:(document.getElementById("watch").value==="auto"?undefined:Number(document.getElementById("watch").value)),fastForward:document.getElementById("ff").checked,allowedHosts:hosts,alertUserId:(document.getElementById("alert-to").value||undefined)})
    .then(function(r){if(r.ok){location.reload()}else{btn.disabled=false;say(r.error||"That did not start.")}})
    .catch(function(){btn.disabled=false;say("That did not start. Check that Command OS is still running.")});
  })}
@@ -30666,9 +30840,9 @@ var init_mask = __esm({
 
 // src/command-os/shopper/steps.ts
 function reasonOf(meta) {
-  const resp = asObj2(asObj2(meta.actionFrom).response);
-  const data = asObj2(meta.data);
-  const cands = [str3(resp.msg), str3(meta.error), str3(meta.message), str3(data.message), str3(data.msg), str3(meta.reason)];
+  const resp = asObj3(asObj3(meta.actionFrom).response);
+  const data = asObj3(meta.data);
+  const cands = [str4(resp.msg), str4(meta.error), str4(meta.message), str4(data.message), str4(data.msg), str4(meta.reason)];
   return maskSecrets((cands.find((c) => c && c.trim()) ?? "").replace(/(Webhook Action error: )+/g, "Webhook error: ").trim());
 }
 function translate(type, outcome, reason3, retryAt) {
@@ -30694,22 +30868,22 @@ function translate(type, outcome, reason3, retryAt) {
   };
 }
 function judgeSteps(rawRows, contactId, workflowNames) {
-  const mine = rawRows.map(asObj2).filter((r) => str3(r.contactId) === contactId).sort((a, b) => (Date.parse(str3(a.timestamp) ?? str3(a.createdAt) ?? "") || 0) - (Date.parse(str3(b.timestamp) ?? str3(b.createdAt) ?? "") || 0) || (str3(b.status) === "added_to_workflow" ? 1 : 0) - (str3(a.status) === "added_to_workflow" ? 1 : 0));
+  const mine = rawRows.map(asObj3).filter((r) => str4(r.contactId) === contactId).sort((a, b) => (Date.parse(str4(a.timestamp) ?? str4(a.createdAt) ?? "") || 0) - (Date.parse(str4(b.timestamp) ?? str4(b.createdAt) ?? "") || 0) || (str4(b.status) === "added_to_workflow" ? 1 : 0) - (str4(a.status) === "added_to_workflow" ? 1 : 0));
   const rows2 = [];
   const passOf = /* @__PURE__ */ new Map();
   for (const r of mine) {
-    const status = (str3(r.status) ?? "").toLowerCase();
-    const type = str3(r.type) ?? "";
+    const status = (str4(r.status) ?? "").toLowerCase();
+    const type = str4(r.type) ?? "";
     if (status === "retry") continue;
-    const wfId = str3(r.workflowId) ?? "";
+    const wfId = str4(r.workflowId) ?? "";
     if (status === "added_to_workflow") passOf.set(wfId, (passOf.get(wfId) ?? 0) + 1);
     const known = STATUS_OUTCOME[status];
     const outcome = type === "condition" && status === "success" ? "branch" : known ?? "unclear";
-    const at = Date.parse(str3(r.timestamp) ?? str3(r.createdAt) ?? "") || 0;
-    const retryAt = Date.parse(str3(r.nextExecutionAt) ?? "") || void 0;
-    const reason3 = reasonOf(asObj2(r.meta));
+    const at = Date.parse(str4(r.timestamp) ?? str4(r.createdAt) ?? "") || 0;
+    const retryAt = Date.parse(str4(r.nextExecutionAt) ?? "") || void 0;
+    const reason3 = reasonOf(asObj3(r.meta));
     const gaveUp = status === "failed_retry_limit_reached";
-    const base = { workflowId: wfId, workflowName: workflowNames[wfId] ?? "Workflow", stepId: str3(r.stepId), stepName: str3(r.stepName) ?? type, type, outcome, at, pass: passOf.get(wfId) ?? 1 };
+    const base = { workflowId: wfId, workflowName: workflowNames[wfId] ?? "Workflow", stepId: str4(r.stepId), stepName: str4(r.stepName) ?? type, type, outcome, at, pass: passOf.get(wfId) ?? 1 };
     let detail = "";
     if (outcome === "branch") detail = `Took the "${base.stepName}" path.`;
     else if (outcome === "entered") detail = "The test lead entered this workflow.";
@@ -30814,13 +30988,13 @@ async function auditSteps(reader, workflowIds, workflowNames, contactId, fromMs,
   const judged = judgeSteps(all, contactId, workflowNames);
   return { ...judged, ...unread.length ? { unreadWorkflows: unread } : {}, ...partial.length ? { partialWorkflows: partial } : {} };
 }
-var asObj2, str3, STATUS_OUTCOME, localTime, STEP_LOG_LIMIT;
+var asObj3, str4, STATUS_OUTCOME, localTime, STEP_LOG_LIMIT;
 var init_steps = __esm({
   "src/command-os/shopper/steps.ts"() {
     "use strict";
     init_mask();
-    asObj2 = (v) => v && typeof v === "object" ? v : {};
-    str3 = (v) => typeof v === "string" ? v : void 0;
+    asObj3 = (v) => v && typeof v === "object" ? v : {};
+    str4 = (v) => typeof v === "string" ? v : void 0;
     STATUS_OUTCOME = {
       success: "ran",
       executed: "ran",
@@ -30862,24 +31036,24 @@ __export(fastforward_exports, {
   webhookDestinations: () => webhookDestinations
 });
 function windowText(raw) {
-  const w = asObj3(raw);
+  const w = asObj4(raw);
   if (!w.start || !w.end) return void 0;
   const days = asArr2(w.days).map((d) => typeof d === "number" ? DAY_NAMES[d] ?? String(d) : String(d));
-  const cond = str4(w.condition);
-  return `runs only ${str4(w.start)}\u2013${str4(w.end)}${days.length ? ` on ${days.join(", ")}` : ""}${cond ? ` (${cond})` : ""}`;
+  const cond = str5(w.condition);
+  return `runs only ${str5(w.start)}\u2013${str5(w.end)}${days.length ? ` on ${days.join(", ")}` : ""}${cond ? ` (${cond})` : ""}`;
 }
 function rerouteAlert(attrs, owner) {
-  const channel = str4(attrs.type) ?? "notification";
+  const channel = str5(attrs.type) ?? "notification";
   if (channel === "notification") {
-    const n = asObj3(attrs.notification);
-    attrs.notification = { body: n.body ?? "", title: `TEST: ${str4(n.title) ?? ""}`.trim(), userType: "user", redirectPage: n.redirectPage ?? "contact", type: n.type ?? "send_notification", selectedUser: owner };
+    const n = asObj4(attrs.notification);
+    attrs.notification = { body: n.body ?? "", title: `TEST: ${str5(n.title) ?? ""}`.trim(), userType: "user", redirectPage: n.redirectPage ?? "contact", type: n.type ?? "send_notification", selectedUser: owner };
     delete attrs.email;
     delete attrs.sms;
     return void 0;
   }
   if (channel === "email") {
-    const e = asObj3(attrs.email);
-    attrs.email = { isCloned: false, html: e.html ?? "", subject: `TEST: ${str4(e.subject) ?? ""}`.trim(), selectedUser: [owner], userType: "user", attachments: [] };
+    const e = asObj4(attrs.email);
+    attrs.email = { isCloned: false, html: e.html ?? "", subject: `TEST: ${str5(e.subject) ?? ""}`.trim(), selectedUser: [owner], userType: "user", attachments: [] };
     delete attrs.notification;
     delete attrs.sms;
     return void 0;
@@ -30887,55 +31061,55 @@ function rerouteAlert(attrs, owner) {
   return channel;
 }
 function staffRecipients(step) {
-  const type = str4(step.type) ?? "";
-  const a = asObj3(step.attributes);
+  const type = str5(step.type) ?? "";
+  const a = asObj4(step.attributes);
   if (type === "internal_notification") {
     const out = [];
     for (const k of ["notification", "email", "sms"]) {
-      const ch = asObj3(a[k]);
+      const ch = asObj4(a[k]);
       if (!Object.keys(ch).length) continue;
-      if (str4(ch.userType) !== "user") out.push(`everyone (${k})`);
+      if (str5(ch.userType) !== "user") out.push(`everyone (${k})`);
       for (const u of Array.isArray(ch.selectedUser) ? ch.selectedUser : [ch.selectedUser]) if (typeof u === "string") out.push(u);
     }
     return out;
   }
-  if (type === "task-notification") return [str4(a.assignedTo) ?? "nobody"];
+  if (type === "task-notification") return [str5(a.assignedTo) ?? "nobody"];
   if (type === "assign_user") return [...asArr2(a.user_list), ...asArr2(a.customUserList)].map((u) => typeof u === "string" ? u : JSON.stringify(u));
   if (type === "internal_create_opportunity" || type === "internal_update_opportunity") {
-    return [...a.assignedTo !== void 0 ? [String(a.assignedTo)] : [], ...asArr2(a.__customInputFields__).map(asObj3).filter((f) => /assign/i.test(str4(f.filterField) ?? "")).map((f) => String(f.value))];
+    return [...a.assignedTo !== void 0 ? [String(a.assignedTo)] : [], ...asArr2(a.__customInputFields__).map(asObj4).filter((f) => /assign/i.test(str5(f.filterField) ?? "")).map((f) => String(f.value))];
   }
   return [];
 }
 function waitLength(a) {
-  const s = asObj3(a.startAfter);
+  const s = asObj4(a.startAfter);
   const v = Number(s.value);
-  const unit = (str4(s.type) ?? "").toLowerCase();
+  const unit = (str5(s.type) ?? "").toLowerCase();
   const word = unit.startsWith("min") ? "minute" : unit.startsWith("hour") ? "hour" : unit.startsWith("day") ? "day" : unit;
   return `${v} ${word}${v === 1 ? "" : "s"}`;
 }
 function webhookDestinations(sources) {
   const out = [];
   for (const s of sources) {
-    for (const n of s.templates.map(asObj3)) {
-      if (str4(n.type) !== "webhook") continue;
-      const url = str4(asObj3(n.attributes).url) ?? "";
+    for (const n of s.templates.map(asObj4)) {
+      if (str5(n.type) !== "webhook") continue;
+      const url = str5(asObj4(n.attributes).url) ?? "";
       const h = hostOf(url);
       const merged = /\{\{|%7b/i.test(url.split(/[/?#]/).slice(0, 3).join("/")) || h !== void 0 && /[{}]|%7b|%7d/i.test(h);
       const problem = merged ? "merge_field" : !h ? "no_address" : void 0;
-      out.push({ ...problem ? { problem } : { host: h }, stepName: str4(n.name) ?? "Webhook", workflowName: s.name });
+      out.push({ ...problem ? { problem } : { host: h }, stepName: str5(n.name) ?? "Webhook", workflowName: s.name });
     }
   }
   return out;
 }
 function planCopy(src, opts) {
   const allowed = opts.allowedHosts.map(normalizeHost).filter(Boolean);
-  const nodes = src.templates.map(asObj3);
+  const nodes = src.templates.map(asObj4);
   if (nodes.length === 0) return { ok: false, refusal: `"${src.name}" has no steps to test.` };
   if (nodes.length > 40) return { ok: false, refusal: `"${src.name}" has ${nodes.length} steps; fast-forward copies at most 40.` };
-  if (str4(src.status)?.toLowerCase() === "draft") return { ok: false, refusal: `"${src.name}" is still a draft, so real leads never go through it. Publish it first, or test it as it is.` };
+  if (str5(src.status)?.toLowerCase() === "draft") return { ok: false, refusal: `"${src.name}" is still a draft, so real leads never go through it. Publish it first, or test it as it is.` };
   const idMap = /* @__PURE__ */ new Map();
   for (const n of nodes) {
-    const id = str4(n.id);
+    const id = str5(n.id);
     if (id) idMap.set(id, import_node_crypto8.default.randomUUID());
   }
   const remap = (id) => typeof id === "string" ? idMap.get(id) ?? id : id;
@@ -30943,9 +31117,9 @@ function planCopy(src, opts) {
   const hosts = /* @__PURE__ */ new Set();
   const actions = [];
   for (const n of nodes) {
-    const type = str4(n.type) ?? "";
-    const name = str4(n.name) ?? type;
-    if (type === "if_else" || str4(n.nodeType)?.startsWith("branch") || str4(n.cat) === "conditions") {
+    const type = str5(n.type) ?? "";
+    const name = str5(n.name) ?? type;
+    if (type === "if_else" || str5(n.nodeType)?.startsWith("branch") || str5(n.cat) === "conditions") {
       return { ok: false, refusal: `"${src.name}" has an if/else branch ("${name}"). Fast-forward handles straight-line workflows for now; branches come next, with test leads that book, reply or stay silent.` };
     }
     if (type === "add_to_workflow" || type === "goto") {
@@ -30954,9 +31128,9 @@ function planCopy(src, opts) {
     if (!ALLOWED.has(type)) {
       return { ok: false, refusal: `"${src.name}" has a "${type}" step ("${name}") that fast-forward does not know how to copy safely yet, so nothing was copied.` };
     }
-    const attrs = { ...asObj3(n.attributes) };
+    const attrs = { ...asObj4(n.attributes) };
     if (type === "wait") {
-      if (str4(attrs.type) !== "time" || !asObj3(attrs.startAfter).type) {
+      if (str5(attrs.type) !== "time" || !asObj4(attrs.startAfter).type) {
         return { ok: false, refusal: `"${src.name}" has a wait that is not a plain time wait ("${name}"). Fast-forward handles time waits only for now.` };
       }
       waits.push(`${name}: ${waitLength(attrs)} in real life`);
@@ -30974,20 +31148,20 @@ function planCopy(src, opts) {
       Object.assign(attrs, { user_list: [o], traffic_split: "equally", traffic_weightage: { [o]: 1 }, traffic_index: [{ id: o, indexes: [1] }], total_index: 1 });
     }
     if (type === "internal_create_opportunity" || type === "internal_update_opportunity") {
-      const assigns = attrs.assignedTo !== void 0 || asArr2(attrs.__customInputFields__).map(asObj3).some((f) => /assign/i.test(str4(f.filterField) ?? ""));
+      const assigns = attrs.assignedTo !== void 0 || asArr2(attrs.__customInputFields__).map(asObj4).some((f) => /assign/i.test(str5(f.filterField) ?? ""));
       if (assigns) {
         if (!opts.ownerUserId) return { ok: false, refusal: 'During a fast-forward check, cards are assigned to one person instead of your staff, but nobody was chosen and your email is not a user in this account. Choose who should get them (on the Workflow Audit Pro screen, "Staff alerts, tasks and assignments go to"; in chat, name the person).' };
         if (attrs.assignedTo !== void 0) attrs.assignedTo = opts.ownerUserId;
-        attrs.__customInputFields__ = asArr2(attrs.__customInputFields__).map(asObj3).map((f) => /assign/i.test(str4(f.filterField) ?? "") ? { ...f, value: opts.ownerUserId } : f);
+        attrs.__customInputFields__ = asArr2(attrs.__customInputFields__).map(asObj4).map((f) => /assign/i.test(str5(f.filterField) ?? "") ? { ...f, value: opts.ownerUserId } : f);
       }
     }
     if (type === "task-notification") {
       if (!opts.ownerUserId) return { ok: false, refusal: 'During a fast-forward check, tasks go to one person instead of your staff, but nobody was chosen and your email is not a user in this account. Choose who should get them (on the Workflow Audit Pro screen, "Staff alerts, tasks and assignments go to"; in chat, name the person).' };
       attrs.assignedTo = opts.ownerUserId;
-      attrs.title = `TEST: ${str4(attrs.title) ?? ""}`.trim();
+      attrs.title = `TEST: ${str5(attrs.title) ?? ""}`.trim();
     }
     if (type === "webhook") {
-      const url = str4(attrs.url) ?? "";
+      const url = str5(attrs.url) ?? "";
       if (/^[^/]*\/\/[^/?#]*\{\{/.test(url) || /^\{\{/.test(url)) return { ok: false, refusal: `"${src.name}" has a webhook ("${name}") whose address is filled in from a merge field, so where the test lead would go cannot be checked. Nothing was copied.` };
       const h = hostOf(url);
       if (h && /[{}]|%7b|%7d/i.test(h)) return { ok: false, refusal: `"${src.name}" has a webhook ("${name}") whose address is filled in from a merge field, so where the test lead would go cannot be checked. Nothing was copied.` };
@@ -31004,7 +31178,7 @@ function planCopy(src, opts) {
     if (Array.isArray(n.sibling)) copy.sibling = n.sibling.map(remap);
     actions.push(copy);
   }
-  const w = asObj3(src.window);
+  const w = asObj4(src.window);
   return {
     ok: true,
     plan: {
@@ -31058,12 +31232,12 @@ function openCopies(locationId2, base) {
   return [...byName.values()].filter((x) => !x.deleted).map(({ deleted: _d, ...x }) => x);
 }
 function toSource(id, raw) {
-  const wf = asObj3(raw);
+  const wf = asObj4(raw);
   return {
     id,
-    name: str4(wf.name) ?? id,
-    status: str4(wf.status),
-    templates: asArr2(asObj3(wf.workflowData).templates),
+    name: str5(wf.name) ?? id,
+    status: str5(wf.status),
+    templates: asArr2(asObj4(wf.workflowData).templates),
     triggers: asArr2(wf.triggers),
     stopOnResponse: typeof wf.stopOnResponse === "boolean" ? wf.stopOnResponse : void 0,
     allowMultiple: typeof wf.allowMultiple === "boolean" ? wf.allowMultiple : void 0,
@@ -31100,13 +31274,13 @@ async function makeCopies(admin, locationId2, sourceIds, opts) {
     const { copyId, copyName } = copies[i];
     try {
       await admin.save(copyId, { actions: remapWorkflows(p.actions, sourceToCopy), triggers: [], status: "draft", window: null, ...p.settings });
-      const back = asObj3(await admin.get(copyId));
-      const steps = asArr2(asObj3(back.workflowData).templates).map(asObj3);
-      const longWait = steps.find((s) => str4(s.type) === "wait" && Number(asObj3(asObj3(s.attributes).startAfter).value) !== 1);
+      const back = asObj4(await admin.get(copyId));
+      const steps = asArr2(asObj4(back.workflowData).templates).map(asObj4);
+      const longWait = steps.find((s) => str5(s.type) === "wait" && Number(asObj4(asObj4(s.attributes).startAfter).value) !== 1);
       if (asArr2(back.triggers).length !== 0) throw new Error(`the copy of "${p.sourceName}" came back with a trigger, so it was not switched on.`);
       if (steps.length !== p.actions.length) throw new Error(`the copy of "${p.sourceName}" came back with ${steps.length} steps instead of ${p.actions.length}.`);
       if (longWait) throw new Error(`a wait in the copy of "${p.sourceName}" did not shorten.`);
-      if (!(str4(back.name) ?? "").startsWith(tokenPrefix(copyName))) throw new Error("the copy's name did not save.");
+      if (!(str5(back.name) ?? "").startsWith(tokenPrefix(copyName))) throw new Error("the copy's name did not save.");
       const stray = steps.flatMap(staffRecipients).find((u) => u !== opts.ownerUserId);
       if (stray) throw new Error(`a staff step in the copy of "${p.sourceName}" still reaches ${stray} instead of the person chosen, so it was not switched on.`);
       if (steps.some((s) => sourceIds.some((id) => JSON.stringify(s).includes(`"${id}"`)))) throw new Error(`a step in the copy of "${p.sourceName}" still points at an original workflow, so it was not switched on.`);
@@ -31122,8 +31296,8 @@ async function removeCopies(admin, locationId2, copies, base, now = Date.now) {
   for (const c of copies) {
     if (!c.copyId) continue;
     try {
-      const wf = asObj3(await admin.get(c.copyId));
-      const name = str4(wf.name) ?? "";
+      const wf = asObj4(await admin.get(c.copyId));
+      const name = str5(wf.name) ?? "";
       const ours = TOKEN_NAME.test(c.name) && (c.matchedByName ? name === c.name : name.startsWith(tokenPrefix(c.name)));
       if (!ours) {
         problems.push(`Left alone: workflow ${c.copyId} is not a fast-forward copy this check made (named "${name}").`);
@@ -31170,18 +31344,18 @@ function builderAdmin(b) {
     list: async () => {
       const out = [];
       for (let skip = 0; skip < 1e3; skip += 100) {
-        const rows2 = asArr2(asObj3(await b.listWorkflows(100, skip)).rows).map(asObj3);
+        const rows2 = asArr2(asObj4(await b.listWorkflows(100, skip)).rows).map(asObj4);
         for (const r of rows2) {
-          const id = str4(r._id) ?? str4(r.id);
-          if (id) out.push({ id, name: str4(r.name) ?? "", createdAt: str4(r.createdAt) });
+          const id = str5(r._id) ?? str5(r.id);
+          if (id) out.push({ id, name: str5(r.name) ?? "", createdAt: str5(r.createdAt) });
         }
         if (rows2.length < 100) break;
       }
       return out;
     },
     create: async (name) => {
-      const w = asObj3(await b.createWorkflow(name));
-      return { id: str4(w._id) ?? str4(w.id) ?? "" };
+      const w = asObj4(await b.createWorkflow(name));
+      return { id: str5(w._id) ?? str5(w.id) ?? "" };
     },
     save: (id, body) => b.updateWorkflow(id, body),
     publish: (id) => b.publishWorkflow(id),
@@ -31189,7 +31363,7 @@ function builderAdmin(b) {
     remove: (id, ack) => b.deleteWorkflow(id, ack ? { acknowledgeContacts: ack } : void 0)
   };
 }
-var import_node_fs2, import_node_path2, import_node_crypto8, asObj3, asArr2, str4, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
+var import_node_fs2, import_node_path2, import_node_crypto8, asObj4, asArr2, str5, FF_PREFIX, ALLOWED, hostOf, normalizeHost, newToken, TOKEN_NAME, tokenPrefix, DAY_NAMES, remapSelf, journalFile, SWEEP_MIN_AGE_MS;
 var init_fastforward = __esm({
   "src/command-os/shopper/fastforward.ts"() {
     "use strict";
@@ -31197,9 +31371,9 @@ var init_fastforward = __esm({
     import_node_path2 = __toESM(require("node:path"));
     import_node_crypto8 = __toESM(require("node:crypto"));
     init_run();
-    asObj3 = (v) => v && typeof v === "object" ? v : {};
+    asObj4 = (v) => v && typeof v === "object" ? v : {};
     asArr2 = (v) => Array.isArray(v) ? v : [];
-    str4 = (v) => typeof v === "string" ? v : void 0;
+    str5 = (v) => typeof v === "string" ? v : void 0;
     FF_PREFIX = "ZZ TEST FF";
     ALLOWED = /* @__PURE__ */ new Set([
       "email",
@@ -31316,7 +31490,7 @@ function clampMinutes(n) {
   return Math.min(1440, Math.max(1, Math.round(n)));
 }
 function channelOf(msg3) {
-  const mt = (str5(msg3.messageType) ?? "").toUpperCase();
+  const mt = (str6(msg3.messageType) ?? "").toUpperCase();
   if (mt === "TYPE_SMS") return "sms";
   if (mt === "TYPE_EMAIL") return "email";
   if (!mt) {
@@ -31327,30 +31501,30 @@ function channelOf(msg3) {
   return null;
 }
 async function readSentMessages(client, locationId2, contactId, since) {
-  const convs = asArr3(asObj4(await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } })).conversations);
+  const convs = asArr3(asObj5(await client.get("/conversations/search", { params: { locationId: locationId2, contactId, limit: 20 } })).conversations);
   const out = [];
   for (const c of convs) {
-    const convId = str5(asObj4(c).id);
+    const convId = str6(asObj5(c).id);
     if (!convId) continue;
-    const raw = asObj4(await client.get(`/conversations/${convId}/messages`, { params: { limit: 100 } }));
-    const list3 = asArr3(raw.messages).length ? asArr3(raw.messages) : asArr3(asObj4(raw.messages).messages);
+    const raw = asObj5(await client.get(`/conversations/${convId}/messages`, { params: { limit: 100 } }));
+    const list3 = asArr3(raw.messages).length ? asArr3(raw.messages) : asArr3(asObj5(raw.messages).messages);
     for (const item of list3) {
-      const m = asObj4(item);
-      if (str5(m.direction)?.toLowerCase() !== "outbound") continue;
+      const m = asObj5(item);
+      if (str6(m.direction)?.toLowerCase() !== "outbound") continue;
       const channel = channelOf(m);
       if (!channel) continue;
-      const at = Date.parse(str5(m.dateAdded) ?? "");
+      const at = Date.parse(str6(m.dateAdded) ?? "");
       if (Number.isNaN(at) || at < since - 5e3) continue;
-      const id = str5(m.id);
+      const id = str6(m.id);
       if (!id) continue;
       out.push({
         id,
         channel,
         at,
-        subject: str5(asObj4(asObj4(m.meta).email).subject),
-        body: htmlToText(str5(m.body) ?? ""),
-        raw: str5(m.body) ?? "",
-        source: str5(m.source)
+        subject: str6(asObj5(asObj5(m.meta).email).subject),
+        body: htmlToText(str6(m.body) ?? ""),
+        raw: str6(m.body) ?? "",
+        source: str6(m.source)
       });
     }
   }
@@ -31358,9 +31532,9 @@ async function readSentMessages(client, locationId2, contactId, since) {
 }
 async function findContactIdByEmail(client, locationId2, email) {
   const raw = await client.get("/contacts/", { params: { locationId: locationId2, query: email, limit: 10 } });
-  for (const c of asArr3(asObj4(raw).contacts)) {
-    const co = asObj4(c);
-    if (str5(co.email)?.toLowerCase() === email) return str5(co.id);
+  for (const c of asArr3(asObj5(raw).contacts)) {
+    const co = asObj5(c);
+    if (str6(co.email)?.toLowerCase() === email) return str6(co.id);
   }
   return void 0;
 }
@@ -31381,9 +31555,9 @@ async function startShopper(input, deps) {
     const refused = protectedRefusalFor(input.locationId);
     if (refused) throw new Error(refused);
   }
-  const loc = asObj4(asObj4(await deps.client.get(`/locations/${input.locationId}`)).location);
-  const businessName = str5(loc.name) ?? "";
-  const websiteHost = siteHost(str5(loc.website));
+  const loc = asObj5(asObj5(await deps.client.get(`/locations/${input.locationId}`)).location);
+  const businessName = str6(loc.name) ?? "";
+  const websiteHost = siteHost(str6(loc.website));
   const testPhone = input.testPhone?.trim() || void 0;
   let expect = input.expect ?? [];
   const planNote = { ...input.planNote ?? { source: expect.length ? "given" : "none" } };
@@ -31398,7 +31572,7 @@ async function startShopper(input, deps) {
   const watchMinutes = auto ? auto.minutes : clampMinutes(input.watchMinutes);
   const watchReason = auto ? auto.reason : `You chose ${watchMinutes} minute${watchMinutes === 1 ? "" : "s"}.`;
   const firstName = (input.firstName ?? "").trim();
-  const entryNote = input.fastForward?.length ? `Fast-forward: added to temporary copies of ${input.fastForward.length} workflow${input.fastForward.length === 1 ? "" : "s"} with every wait cut to 1 minute and every step kept; the originals were only read. Staff alerts, tasks and lead assignments came to you, marked TEST. The sign-up form itself was not submitted.` : input.entry.kind === "workflows" ? `Added straight to ${input.entry.workflowIds.length} workflow${input.entry.workflowIds.length === 1 ? "" : "s"}. The sign-up form itself was not submitted.` : input.entry.kind === "tag" ? `Created with the tag "${input.entry.tag}", which starts the workflows that listen for it. The sign-up form itself was not submitted.` : "Sent in through the lead-capture address, the way a form sends it.";
+  const entryNote = input.fastForward?.length ? `Fast-forward: added to temporary copies of ${input.fastForward.length} workflow${input.fastForward.length === 1 ? "" : "s"} with every wait cut to 1 minute and every step kept; the originals were only read. Staff alerts, tasks and lead assignments came to you, marked TEST. The sign-up form itself was not submitted.` : input.entry.kind === "workflows" ? `Added straight to ${input.entry.workflowIds.length} workflow${input.entry.workflowIds.length === 1 ? "" : "s"}. The sign-up form itself was not submitted.` : input.entry.kind === "tag" ? `Sent with the tag "${input.entry.tag}", which starts the workflows that listen for it. The sign-up form itself was not submitted.` : "Sent in through the lead-capture address, the way a form sends it.";
   const run = {
     v: 1,
     runId: `${new Date(now()).toISOString().replace(/[-:T]/g, "").slice(0, 14)}-${token2}`,
@@ -31449,9 +31623,9 @@ async function startShopper(input, deps) {
       };
       if (firstName) body.firstName = firstName;
       if (testPhone) body.phone = testPhone;
-      const created = asObj4(await deps.client.post("/contacts/", { body, noRetry: true }));
-      run.contactId = str5(asObj4(created.contact).id) ?? str5(created.id);
-      if (!run.contactId) throw new Error("GoHighLevel did not return the new test lead's id.");
+      const created = asObj5(await deps.client.post("/contacts/", { body, noRetry: true }));
+      run.contactId = str6(asObj5(created.contact).id) ?? str6(created.id);
+      if (!run.contactId) throw new Error("GoHighLevel did not return the test lead's id.");
       if (input.entry.kind === "workflows") {
         for (const wid of input.entry.workflowIds) {
           await deps.client.post(`/contacts/${run.contactId}/workflow/${wid}`, { body: {}, noRetry: true });
@@ -31464,11 +31638,7 @@ async function startShopper(input, deps) {
     run.status = "failed";
     run.error = e instanceof Error ? e.message : String(e);
     run.finishedAt = now();
-    if (run.contactId && !run.keepLead) {
-      run.cleanup = await removeOwnLead(deps.client, run);
-    } else if (!run.contactId) {
-      run.cleanup = { removed: false, detail: `If the test contact named "Secret Shopper" with the address ${leadEmail} appears in the account, delete it. It is the test lead from this check.` };
-    }
+    run.cleanup = await listLeadCarriers(deps.client, run);
     saveRun(run, deps.base);
     return run;
   }
@@ -31477,28 +31647,29 @@ async function postJson(url, body) {
   const r = await guardedPost(url, JSON.stringify(body), { "Content-Type": "application/json", Accept: "application/json" });
   return r.status;
 }
-async function removeOwnLead(client, run) {
-  const id = run.contactId;
-  if (!id) return { removed: false, detail: "No test lead was recorded for this check." };
-  let contact;
+async function listLeadCarriers(client, run) {
+  const carriers = /* @__PURE__ */ new Map();
+  let partial = false;
   try {
-    contact = asObj4(asObj4(await client.get(`/contacts/${id}`)).contact);
-  } catch (e) {
-    if (notFound(e)) return { removed: true, detail: "The test lead is already gone from the account." };
-    return { removed: false, detail: `The test lead ${run.leadEmail} could not be checked before removal (${e instanceof Error ? e.message.split("\n")[0] : String(e)}). Delete it in GoHighLevel.` };
-  }
-  const email = str5(contact.email)?.toLowerCase();
-  const added = Date.parse(str5(contact.dateAdded) ?? "");
-  if (email !== run.leadEmail || !Number.isNaN(added) && added < run.startedAt - 10 * 6e4) {
-    return { removed: false, detail: `Left alone on purpose: the contact this check ended up with is not the test lead it created (its address or creation time does not match ${run.leadEmail}). Look for the test contact named "Secret Shopper" in GoHighLevel.` };
+    const paged = await readContactPages((path45, o) => client.get(path45, o), { locationId: run.locationId, query: run.leadEmail, limit: 20 });
+    if (!paged || !paged.complete) partial = true;
+    for (const c of paged?.rows ?? []) {
+      const k = carrierOf(c);
+      if (k && k.email === run.leadEmail) carriers.set(k.id, k);
+    }
+  } catch {
+    partial = true;
   }
-  try {
-    await client.delete(`/contacts/${id}`);
-  } catch (e) {
-    if (notFound(e)) return { removed: true, detail: "The test lead is already gone from the account." };
-    return { removed: false, detail: `The test lead ${run.leadEmail} could not be removed (${e instanceof Error ? e.message.split("\n")[0] : String(e)}). Delete it in GoHighLevel.` };
+  if (run.contactId && !carriers.has(run.contactId)) {
+    try {
+      const k = carrierOf(asObj5(await client.get(`/contacts/${run.contactId}`)).contact);
+      if (k && k.email === run.leadEmail) carriers.set(k.id, k);
+    } catch (e) {
+      if (!notFound(e)) partial = true;
+    }
   }
-  return { removed: true, detail: "The test lead was removed from the account after the check." };
+  const contacts = [...carriers.values()];
+  return { removed: false, detail: carrierText(contacts, partial), contacts, partial };
 }
 function pidAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -31604,7 +31775,7 @@ async function finishShopper(locationId2, runId, deps) {
     if (closed) {
       run.status = "done";
       run.finishedAt = t;
-      run.cleanup = run.keepLead ? { removed: false, detail: `Kept on request: the test lead ${run.leadEmail} is still in the account for you to look at. Delete it when you're done.` } : await removeOwnLead(deps.client, run);
+      run.cleanup = await listLeadCarriers(deps.client, run);
       if (run.fastForward && deps.ffAdmin) {
         const { removeCopies: removeCopies2 } = await Promise.resolve().then(() => (init_fastforward(), fastforward_exports));
         const problems = await removeCopies2(deps.ffAdmin, run.locationId, run.fastForward.copies.map((c) => ({ copyId: c.copyId, name: c.copyName })), deps.base, now);
@@ -31642,7 +31813,7 @@ function summarizeRun(run) {
   if (run.status === "watching") return `So far: ${head4}${stepNote} Still watching until ${new Date(run.closesAt).toISOString()}.`;
   return gradeLine + head4 + stepNote;
 }
-var import_node_fs3, import_node_path3, import_node_crypto9, MAX_EXTEND_MINUTES, asObj4, asArr3, str5, SAFE_ID, notFound;
+var import_node_fs3, import_node_path3, import_node_crypto9, MAX_EXTEND_MINUTES, asObj5, asArr3, str6, SAFE_ID, notFound;
 var init_run = __esm({
   "src/command-os/shopper/run.ts"() {
     "use strict";
@@ -31657,10 +31828,11 @@ var init_run = __esm({
     init_score();
     init_steps();
     init_net_guard();
+    init_test_contacts();
     MAX_EXTEND_MINUTES = 10;
-    asObj4 = (v) => v && typeof v === "object" ? v : {};
+    asObj5 = (v) => v && typeof v === "object" ? v : {};
     asArr3 = (v) => Array.isArray(v) ? v : [];
-    str5 = (v) => typeof v === "string" ? v : void 0;
+    str6 = (v) => typeof v === "string" ? v : void 0;
     SAFE_ID = /^[A-Za-z0-9_-]{1,64}$/;
     notFound = (e) => {
       const m = e instanceof Error ? e.message : String(e);
@@ -31897,12 +32069,12 @@ mark{background:var(--surface-sunk);color:var(--bad);font-weight:700;border-radi
 
 // src/command-os/shopper/plan.ts
 function waitMinutes(node) {
-  const a = asObj5(node.attributes);
-  if (str6(a.type) && str6(a.type) !== "time") return null;
-  const s = asObj5(a.startAfter);
+  const a = asObj6(node.attributes);
+  if (str7(a.type) && str7(a.type) !== "time") return null;
+  const s = asObj6(a.startAfter);
   const v = Number(s.value);
   if (!Number.isFinite(v) || v < 0) return null;
-  const unit = (str6(s.type) ?? "").toLowerCase();
+  const unit = (str7(s.type) ?? "").toLowerCase();
   if (unit.startsWith("min")) return v;
   if (unit.startsWith("hour")) return v * 60;
   if (unit.startsWith("day")) return v * 1440;
@@ -31920,27 +32092,27 @@ function plannedMessages(workflows) {
   for (const wf of workflows) {
     const nodes = /* @__PURE__ */ new Map();
     for (const t of wf.templates) {
-      const n = asObj5(t);
-      const id = str6(n.id);
+      const n = asObj6(t);
+      const id = str7(n.id);
       if (id) nodes.set(id, n);
     }
     for (const node of nodes.values()) {
-      const type = str6(node.type);
+      const type = str7(node.type);
       if (type !== "sms" && type !== "email") continue;
       let minutes = 0;
-      let conditional = Boolean(str6(node.parent) && nodes.get(str6(node.parent) ?? "") && isBranch(nodes.get(str6(node.parent) ?? "")));
+      let conditional = Boolean(str7(node.parent) && nodes.get(str7(node.parent) ?? "") && isBranch(nodes.get(str7(node.parent) ?? "")));
       const seen = /* @__PURE__ */ new Set();
       const afterWaits = [];
-      let cur = str6(node.parentKey);
+      let cur = str7(node.parentKey);
       while (cur && !conditional && !seen.has(cur)) {
         seen.add(cur);
         const p = nodes.get(cur);
         if (!p) break;
-        if (isBranch(p) || str6(p.parent) && isBranch(nodes.get(str6(p.parent) ?? "") ?? {})) {
+        if (isBranch(p) || str7(p.parent) && isBranch(nodes.get(str7(p.parent) ?? "") ?? {})) {
           conditional = true;
           break;
         }
-        if (str6(p.type) === "wait") {
+        if (str7(p.type) === "wait") {
           const m = waitMinutes(p);
           if (m === null) {
             conditional = true;
@@ -31949,20 +32121,20 @@ function plannedMessages(workflows) {
           minutes += m;
           afterWaits.push(cur);
         }
-        cur = str6(p.parentKey);
+        cur = str7(p.parentKey);
       }
       if (conditional) {
         leftOut.conditional++;
         continue;
       }
-      const a = asObj5(node.attributes);
-      const key = type === "email" ? wordingKey(str6(a.subject) ?? "") || wordingKey(str6(a.html) ?? "") : wordingKey(str6(a.body) ?? "");
+      const a = asObj6(node.attributes);
+      const key = type === "email" ? wordingKey(str7(a.subject) ?? "") || wordingKey(str7(a.html) ?? "") : wordingKey(str7(a.body) ?? "");
       if (!key) {
         leftOut.noWording++;
         continue;
       }
-      const stepName = str6(node.name) || (type === "sms" ? "text" : "email");
-      expect.push({ label: `${wf.name}: ${stepName}`, channel: type, match: key, byMinute: minutes + 1, stepName, ...wf.id ? { workflowId: wf.id } : {}, ...str6(node.id) ? { stepId: str6(node.id) } : {}, afterWaits });
+      const stepName = str7(node.name) || (type === "sms" ? "text" : "email");
+      expect.push({ label: `${wf.name}: ${stepName}`, channel: type, match: key, byMinute: minutes + 1, stepName, ...wf.id ? { workflowId: wf.id } : {}, ...str7(node.id) ? { stepId: str7(node.id) } : {}, afterWaits });
     }
   }
   return { expect, leftOut };
@@ -31975,45 +32147,45 @@ async function planFromWorkflowIds(reader, ids) {
   const draftIds = [];
   for (const id of ids) {
     try {
-      const wf = asObj5(await reader.getWorkflow(id));
-      const name = str6(wf.name) ?? id;
+      const wf = asObj6(await reader.getWorkflow(id));
+      const name = str7(wf.name) ?? id;
       names[id] = name;
-      if (str6(wf.status)?.toLowerCase() === "draft") {
+      if (str7(wf.status)?.toLowerCase() === "draft") {
         drafts.push(name);
         draftIds.push(id);
       }
-      workflows.push({ id, name, templates: asArr4(asObj5(wf.workflowData).templates) });
+      workflows.push({ id, name, templates: asArr4(asObj6(wf.workflowData).templates) });
     } catch {
       unread.push(id);
     }
   }
   return { ...plannedMessages(workflows), unread, names, drafts, draftIds };
 }
-var asObj5, asArr4, str6, isBranch;
+var asObj6, asArr4, str7, isBranch;
 var init_plan2 = __esm({
   "src/command-os/shopper/plan.ts"() {
     "use strict";
     init_links();
-    asObj5 = (v) => v && typeof v === "object" ? v : {};
+    asObj6 = (v) => v && typeof v === "object" ? v : {};
     asArr4 = (v) => Array.isArray(v) ? v : [];
-    str6 = (v) => typeof v === "string" ? v : void 0;
-    isBranch = (n) => /^branch-/.test(str6(n.nodeType) ?? "") || str6(n.type) === "if_else";
+    str7 = (v) => typeof v === "string" ? v : void 0;
+    isBranch = (n) => /^branch-/.test(str7(n.nodeType) ?? "") || str7(n.type) === "if_else";
   }
 });
 
 // src/command-os/shopper/ff-start.ts
 async function ownerUserId(client, locationId2, ownerEmail) {
-  const raw = asObj6(await client.get("/users/", { params: { locationId: locationId2 } }));
+  const raw = asObj7(await client.get("/users/", { params: { locationId: locationId2 } }));
   const want = baseEmail(ownerEmail);
-  for (const u of asArr5(raw.users).map(asObj6)) if (str7(u.email) && baseEmail(str7(u.email)) === want) return str7(u.id);
+  for (const u of asArr5(raw.users).map(asObj7)) if (str8(u.email) && baseEmail(str8(u.email)) === want) return str8(u.id);
   return void 0;
 }
 async function accountUsers(client, locationId2) {
-  const raw = asObj6(await client.get("/users/", { params: { locationId: locationId2 } }));
-  return asArr5(raw.users).map(asObj6).filter((u) => str7(u.id) && !u.deleted).map((u) => ({
-    id: str7(u.id),
-    name: str7(u.name) ?? ([str7(u.firstName), str7(u.lastName)].filter(Boolean).join(" ") || str7(u.email) || str7(u.id)),
-    email: str7(u.email)
+  const raw = asObj7(await client.get("/users/", { params: { locationId: locationId2 } }));
+  return asArr5(raw.users).map(asObj7).filter((u) => str8(u.id) && !u.deleted).map((u) => ({
+    id: str8(u.id),
+    name: str8(u.name) ?? ([str8(u.firstName), str8(u.lastName)].filter(Boolean).join(" ") || str8(u.email) || str8(u.id)),
+    email: str8(u.email)
   }));
 }
 async function sweepLeftovers(admin, locationId2, base, now) {
@@ -32063,16 +32235,16 @@ async function startFastForward(s) {
     return { ok: false, error: e instanceof Error ? e.message.split("\n")[0] : String(e) };
   }
 }
-var asObj6, asArr5, str7, baseEmail;
+var asObj7, asArr5, str8, baseEmail;
 var init_ff_start = __esm({
   "src/command-os/shopper/ff-start.ts"() {
     "use strict";
     init_run();
     init_fastforward();
     init_plan2();
-    asObj6 = (v) => v && typeof v === "object" ? v : {};
+    asObj7 = (v) => v && typeof v === "object" ? v : {};
     asArr5 = (v) => Array.isArray(v) ? v : [];
-    str7 = (v) => typeof v === "string" ? v : void 0;
+    str8 = (v) => typeof v === "string" ? v : void 0;
     baseEmail = (e) => {
       const [l, d] = e.trim().toLowerCase().split("@");
       return `${(l ?? "").split("+")[0]}@${d ?? ""}`;
@@ -35475,25 +35647,25 @@ var init_brief_validation = __esm({
 // src/command-os/design/run-jobs.ts
 function validateRunRequest(input) {
   const a = input ?? {};
-  const str8 = (k) => typeof a[k] === "string" ? a[k].trim() : "";
-  const brand = str8("brand");
+  const str9 = (k) => typeof a[k] === "string" ? a[k].trim() : "";
+  const brand = str9("brand");
   if (!SLUG2.test(brand)) return { ok: false, error: "brand must be a stored brand's slug (lowercase letters, digits and dashes)." };
-  const medium = str8("medium");
+  const medium = str9("medium");
   if (!MEDIA.includes(medium)) return { ok: false, error: `medium must be one of ${MEDIA.join(", ")}.` };
-  const headline3 = str8("headline");
+  const headline3 = str9("headline");
   if (headline3.length < 3 || headline3.length > 300) return { ok: false, error: "headline must be between 3 and 300 characters." };
   const points = Array.isArray(a.points) ? a.points.filter((p) => typeof p === "string" && p.trim().length > 0).map((p) => p.trim()) : [];
   if (points.length === 0) return { ok: false, error: "points must be a non-empty list." };
   if (points.length > DESIGN_FORM_LIMITS.pointsMax) return { ok: false, error: POINTS_MESSAGE };
   if (points.some((p) => p.includes("|"))) return { ok: false, error: "a point may not contain the | character; it separates them on the command line." };
   if (points.some((p) => p.length > 400)) return { ok: false, error: "a point may be 400 characters at most." };
-  const model = str8("model");
+  const model = str9("model");
   if (model && !MODEL.test(model)) return { ok: false, error: "model must be a plain engine name." };
   const slides = a.slides;
   if (slides !== void 0 && (typeof slides !== "number" || !Number.isInteger(slides) || slides < DESIGN_FORM_LIMITS.slidesMin || slides > DESIGN_FORM_LIMITS.slidesMax)) return { ok: false, error: SLIDES_MESSAGE };
   let refusal = null;
   const optional2 = (k, max = 400) => {
-    const v = str8(k);
+    const v = str9(k);
     if (!v) return void 0;
     if (v.length > max) {
       if (refusal === null) refusal = `${k} must be ${max} characters at most.`;
@@ -57415,7 +57587,7 @@ function registerSecretShopperTools(server2, client, registry2) {
   safeTool(
     server2,
     "run_secret_shopper",
-    `Workflow Audit Pro: an audit of a client account you manage. Signs up as a clearly marked TEST lead on the ACTIVE sub-account, waits, then reads every text and email the account actually sent that lead, word for word, and reports what a real customer would have seen wrong: a blank name ("Hi , "), template code left showing ({{\u2026}}), another business's name left over from a template, a link that doesn't open, a message sent twice, and a planned message that never came. Two halves: action "start" creates the lead and returns a runId and the time the watch window closes (default 10 minutes); action "finish" reads, judges and removes the test lead (finishing early gives a partial look and keeps watching); action "status" shows the latest run. WRITES: start creates one contact (the owner's own email, plus-addressed, never a customer's) and enters it into the chosen workflows, which will really send to that address and may notify staff; finish deletes that contact unless keepLead is true. The client's sign-up form itself is not submitted: entry is by adding the lead to named workflows, by a tag, or through a lead-capture https address. Tell the owner all of this before starting. Call it Workflow Audit Pro to the owner; an owner who says "secret shopper" (its old name) means this tool.`,
+    `Workflow Audit Pro: an audit of a client account you manage. Signs up as a clearly marked TEST lead on the ACTIVE sub-account, waits, then reads every text and email the account actually sent that lead, word for word, and reports what a real customer would have seen wrong: a blank name ("Hi , "), template code left showing ({{\u2026}}), another business's name left over from a template, a link that doesn't open, a message sent twice, and a planned message that never came. Two halves: action "start" sends the test lead and returns a runId and the time the watch window closes (default 10 minutes); action "finish" reads, judges and lists every contact that now carries the test address (it never deletes one; you check them before deleting any) (finishing early gives a partial look and keeps watching); action "status" shows the latest run. WRITES: start sends one test lead (the owner's own email, plus-addressed, never a customer's) and enters it into the chosen workflows, which will really send to that address and may notify staff; nothing is ever deleted. The client's sign-up form itself is not submitted: entry is by adding the lead to named workflows, by a tag, or through a lead-capture https address. Tell the owner all of this before starting. Call it Workflow Audit Pro to the owner; an owner who says "secret shopper" (its old name) means this tool.`,
     {
       action: import_zod83.z.enum(["start", "finish", "status"]),
       workflowIds: import_zod83.z.array(import_zod83.z.string()).optional().describe("start: the workflows the test lead enters directly (usually the speed-to-lead and welcome workflows). Use list_workflows_full to find ids."),
@@ -57426,7 +57598,7 @@ function registerSecretShopperTools(server2, client, registry2) {
       firstName: import_zod83.z.string().optional().describe("start: leave empty (the default) to test what happens when a lead gives no first name."),
       watchMinutes: import_zod83.z.number().optional().describe("start: how long to watch, 1 to 1440 minutes. Leave it out to watch until the last planned message is due plus 2 minutes (10 when no plan is known)."),
       expect: import_zod83.z.array(expectation).optional().describe("start: messages the build plan says the lead should get, so a missing one is reported."),
-      keepLead: import_zod83.z.boolean().optional().describe("Keep the test lead in the account after finishing, so the owner can look at it. Default false."),
+      keepLead: import_zod83.z.boolean().optional().describe("No longer used: the test lead is never removed. The result lists every contact that now carries the test address, for you to check before deleting any."),
       fastForward: import_zod83.z.boolean().optional().describe("start with workflowIds: test long workflows in minutes. Makes a temporary 'ZZ TEST FF' copy of each (every step kept, every time wait cut to 1 minute, no trigger), runs the test lead through the copies, then deletes them; the originals are only read. Staff alerts, tasks and lead assignments go to one chosen user (alertUserId) marked TEST. Straight-line workflows with time waits only for now (if/else, hand-offs to other workflows and other waits are refused with the reason). Tell the owner before starting."),
       alertUserId: import_zod83.z.string().optional().describe("fastForward: the GoHighLevel user (get_users) who receives the staff alerts, tasks and lead assignments instead of the staff. Defaults to the user whose email matches ownerEmail; if none matches, ask the owner who should get them."),
       allowWebhookHosts: import_zod83.z.array(import_zod83.z.string()).optional().describe("fastForward: website hosts (e.g. hooks.zapier.com) the owner allows the test lead to be sent to by webhook steps. Any other webhook host makes the check refuse and name it."),
@@ -61207,8 +61379,8 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     io.out(USAGE2);
     return argv.length === 0 ? 2 : 0;
   }
-  const str8 = (k) => typeof a[k] === "string" ? a[k] : void 0;
-  const brand = str8("brand"), medium = str8("medium"), headline3 = str8("headline"), points = str8("points");
+  const str9 = (k) => typeof a[k] === "string" ? a[k] : void 0;
+  const brand = str9("brand"), medium = str9("medium"), headline3 = str9("headline"), points = str9("points");
   if (!brand || !medium || !headline3 || !points) {
     io.err("design-run: --brand, --medium, --headline and --points are required\n" + USAGE2);
     return 2;
@@ -61222,7 +61394,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     return 2;
   }
   let conversion;
-  const convFile = str8("conversion");
+  const convFile = str9("conversion");
   if (convFile) {
     try {
       conversion = JSON.parse(require("node:fs").readFileSync(convFile, "utf8"));
@@ -61235,7 +61407,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       return 2;
     }
   }
-  const gate2 = str8("gate");
+  const gate2 = str9("gate");
   if (gate2 && gate2 !== "draft" && gate2 !== "ship") {
     io.err("design-run: --gate must be draft or ship");
     return 2;
@@ -61245,8 +61417,8 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
     io.err("design-run: --passes must be 1, 2 or 3");
     return 2;
   }
-  const outDir = str8("out") ?? (0, import_node_path10.join)((0, import_node_os2.tmpdir)(), `design-run-${brand}-${medium}-${Date.now()}`);
-  const model = str8("model") ?? DEFAULT_MODEL;
+  const outDir = str9("out") ?? (0, import_node_path10.join)((0, import_node_os2.tmpdir)(), `design-run-${brand}-${medium}-${Date.now()}`);
+  const model = str9("model") ?? DEFAULT_MODEL;
   io.out(`design-run: ${medium} for ${brand} on your Claude (${model}), up to ${passes} pass(es) \u2192 ${outDir}`);
   let r;
   try {
@@ -61254,11 +61426,11 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       brand,
       brief: {
         medium,
-        content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str8("audience"), job: str8("job"), ctaLabel: str8("cta"), proof: str8("proof") },
+        content: { headline: headline3, points: points.split("|").map((s) => s.trim()).filter(Boolean), audience: str9("audience"), job: str9("job"), ctaLabel: str9("cta"), proof: str9("proof") },
         options: {
-          ...str8("mode") && { mode: str8("mode") },
+          ...str9("mode") && { mode: str9("mode") },
           ...a.slides && { slides: Number(a.slides) },
-          theme: str8("theme") ?? "both",
+          theme: str9("theme") ?? "both",
           ...conversion ? { pageMode: "conversion" } : {}
         },
         ...conversion ? { conversion } : {}
@@ -61270,7 +61442,7 @@ async function runDesignCli(argv, io = { out: (s) => process.stdout.write(s + "\
       headless: !a.headed,
       onPass: (p) => io.out(`  pass ${p.pass}: ${p.lint ? p.verdict === "PASS" ? "PASS" : `${p.verdict}${p.failed.length ? " \u2014 " + p.failed.join(" | ") : ""}` : `contract: ${p.lintProblems.join("; ")}`}  ($${p.costUsd.toFixed(3)}, ${Math.round(p.ms / 1e3)}s)`),
       // Two verdicts, never one: craft is measured, copy is judged.
-      ...str8("grade-copy") ? { gradeCopyFor: str8("grade-copy") } : {}
+      ...str9("grade-copy") ? { gradeCopyFor: str9("grade-copy") } : {}
     });
   } catch (error) {
     io.err(error instanceof import_zod89.z.ZodError ? designValidationMessage(error) : error instanceof Error ? error.message : "The design run could not finish. Check the design details before trying again.");