@elitedcs/ghl-mcp 3.89.0-beta.1 → 3.89.0-beta.2

package/dist/index.js

@@ -2185,6 +2185,128 @@ var init_workflow_publish_gate = __esm({
 });
 
 // src/workflow-builder-client.ts
+function firebaseIdTokenStore() {
+  const g = globalThis;
+  let store2 = g[FIREBASE_ID_TOKEN_STORE_KEY];
+  if (!store2) {
+    store2 = { cache: /* @__PURE__ */ new Map(), inflight: /* @__PURE__ */ new Map() };
+    g[FIREBASE_ID_TOKEN_STORE_KEY] = store2;
+  }
+  return store2;
+}
+function firebaseIdTokenKey(firebaseApiKey, userId, refreshToken) {
+  return `${firebaseApiKey}\0${userId}\0${refreshToken}`;
+}
+function idTokenFilePath() {
+  return path4.join(appDataDir(), ID_TOKEN_FILE_NAME);
+}
+function idTokenFileKey(firebaseApiKey, userId, refreshToken) {
+  return (0, import_crypto2.createHash)("sha256").update(`${firebaseApiKey}|${userId}|${refreshToken}`).digest("hex");
+}
+function validFileEntry(e, now = Date.now()) {
+  const v = e;
+  return !!v && typeof v === "object" && typeof v.idToken === "string" && v.idToken.length > 0 && typeof v.expiresAt === "number" && Number.isFinite(v.expiresAt) && now < v.expiresAt;
+}
+function readIdTokenFile() {
+  try {
+    const parsed2 = JSON.parse(fs4.readFileSync(idTokenFilePath(), "utf8"));
+    if (!parsed2 || typeof parsed2 !== "object" || Array.isArray(parsed2)) return {};
+    const out = {};
+    for (const [k, v] of Object.entries(parsed2)) {
+      if (validFileEntry(v)) out[k] = { idToken: v.idToken, expiresAt: v.expiresAt };
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+function readIdTokenFileEntry(key) {
+  return readIdTokenFile()[key];
+}
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function withIdTokenFileLock(file2, fn) {
+  const lock = `${file2}.lock`;
+  const deadline = Date.now() + ID_TOKEN_LOCK_WAIT_MS;
+  let fd;
+  let ino;
+  while (fd === void 0 && Date.now() <= deadline) {
+    try {
+      fd = fs4.openSync(lock, "wx", 384);
+      try {
+        ino = fs4.fstatSync(fd).ino;
+      } catch {
+        ino = void 0;
+      }
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") break;
+    }
+    try {
+      if (Date.now() - fs4.statSync(lock).mtimeMs > ID_TOKEN_LOCK_STALE_MS) {
+        const moved = `${lock}.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}.stale`;
+        fs4.renameSync(lock, moved);
+        try {
+          fs4.unlinkSync(moved);
+        } catch {
+        }
+        continue;
+      }
+    } catch {
+    }
+    sleepSync(15);
+  }
+  try {
+    fn();
+  } finally {
+    if (fd !== void 0) {
+      let ours = false;
+      try {
+        ours = ino === void 0 || fs4.statSync(lock).ino === ino;
+      } catch {
+        ours = false;
+      }
+      try {
+        fs4.closeSync(fd);
+      } catch {
+      }
+      if (ours) {
+        try {
+          fs4.unlinkSync(lock);
+        } catch {
+        }
+      }
+    }
+  }
+}
+function updateIdTokenFile(change) {
+  let tmp;
+  try {
+    const file2 = idTokenFilePath();
+    fs4.mkdirSync(path4.dirname(file2), { recursive: true, mode: 448 });
+    withIdTokenFileLock(file2, () => {
+      const entries = readIdTokenFile();
+      change(entries);
+      tmp = `${file2}.${process.pid}.${(0, import_crypto2.randomBytes)(6).toString("hex")}.tmp`;
+      fs4.writeFileSync(tmp, JSON.stringify(entries), { mode: 384 });
+      fs4.renameSync(tmp, file2);
+      tmp = void 0;
+      try {
+        fs4.chmodSync(file2, 384);
+      } catch {
+      }
+    });
+  } catch {
+  } finally {
+    if (tmp) {
+      try {
+        fs4.unlinkSync(tmp);
+      } catch {
+      }
+    }
+  }
+}
 function isParkedContactsError(e) {
   return typeof e === "object" && e !== null && e.code === "PARKED_CONTACTS";
 }
@@ -2507,13 +2629,16 @@ function validateActionChain(actions, existingIds) {
 async function builderRequest(client, method, url, opts = {}) {
   assertWriteAllowed(method, url, { body: opts.body, defaultLocationId: client.locationId });
   const headers = { ...await client.buildHeaders(), ...opts.headers ?? {} };
+  const usedIdToken = headers["token-id"];
   const init = { method, headers };
   if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 3e4);
   init.signal = controller.signal;
   try {
-    return await fetch(url, init);
+    const response = await fetch(url, init);
+    if (response.status === 401) client.invalidateIdToken?.(usedIdToken ?? null);
+    return response;
   } catch (error) {
     if (error instanceof Error && error.name === "AbortError") {
       throw new Error(`Request timeout (30s): ${method} ${url}`);
@@ -2523,7 +2648,7 @@ async function builderRequest(client, method, url, opts = {}) {
     clearTimeout(timeout);
   }
 }
-var fs4, path4, dotenv, import_zod4, GATED_PUBLISH, BACKEND_BASE, FIREBASE_TOKEN_URL, MAX_RETRIES2, BASE_DELAY_MS2, FirebaseTokenSchema, WorkflowActionSchema, WorkflowFullSchema, CreateWorkflowResponseSchema, ParkedContactsError, NodeLossError, CARRIED_WORKFLOW_SETTINGS, UUID_V4, StaleWorkflowError, WorkflowStatusChangedError, WorkflowBuilderClient;
+var fs4, path4, dotenv, import_zod4, import_crypto2, GATED_PUBLISH, BACKEND_BASE, FIREBASE_TOKEN_URL, MAX_RETRIES2, BASE_DELAY_MS2, FirebaseTokenSchema, FIREBASE_ID_TOKEN_STORE_KEY, ID_TOKEN_EXPIRY_MARGIN_MS, ID_TOKEN_FALLBACK_TTL_MS, FIREBASE_429_DELAYS_MS, FIREBASE_EXCHANGE_TIMEOUT_MS, ID_TOKEN_FILE_NAME, ID_TOKEN_LOCK_WAIT_MS, ID_TOKEN_LOCK_STALE_MS, WorkflowActionSchema, WorkflowFullSchema, CreateWorkflowResponseSchema, ParkedContactsError, NodeLossError, CARRIED_WORKFLOW_SETTINGS, UUID_V4, StaleWorkflowError, WorkflowStatusChangedError, WorkflowBuilderClient;
 var init_workflow_builder_client = __esm({
   "src/workflow-builder-client.ts"() {
     "use strict";
@@ -2533,6 +2658,7 @@ var init_workflow_builder_client = __esm({
     import_zod4 = require("zod");
     init_account_rules();
     init_credentials_store();
+    import_crypto2 = require("crypto");
     init_account_read_retry();
     init_retry();
     init_firebase_claims();
@@ -2551,6 +2677,14 @@ var init_workflow_builder_client = __esm({
       refresh_token: import_zod4.z.string(),
       expires_in: import_zod4.z.string()
     });
+    FIREBASE_ID_TOKEN_STORE_KEY = /* @__PURE__ */ Symbol.for("ghl-mcp.firebaseIdTokenCache");
+    ID_TOKEN_EXPIRY_MARGIN_MS = 5 * 60 * 1e3;
+    ID_TOKEN_FALLBACK_TTL_MS = 55 * 60 * 1e3;
+    FIREBASE_429_DELAYS_MS = [2e3, 5e3, 1e4];
+    FIREBASE_EXCHANGE_TIMEOUT_MS = 15e3;
+    ID_TOKEN_FILE_NAME = "firebase-id-tokens.json";
+    ID_TOKEN_LOCK_WAIT_MS = 2e3;
+    ID_TOKEN_LOCK_STALE_MS = 1e4;
     WorkflowActionSchema = import_zod4.z.custom(
       (value) => typeof value === "object" && value !== null && "type" in value
     );
@@ -2637,6 +2771,9 @@ var init_workflow_builder_client = __esm({
       cachedIdToken = null;
       tokenExpiry = 0;
       tokenRefreshPromise = null;
+      // Bumped whenever the credentials change (company switch). An exchange that
+      // started under an older generation never lands on this client.
+      tokenGeneration = 0;
       // The company_id claim from the most recently minted ID token. Lets
       // health_check report the company we're ACTUALLY authenticated as (vs. the
       // one we intended), and backs PIT/Firebase mismatch detection.
@@ -2741,11 +2878,34 @@ var init_workflow_builder_client = __esm({
         this.cachedIdToken = null;
         this.tokenExpiry = 0;
         this.tokenRefreshPromise = null;
+        this.tokenGeneration++;
       }
       /**
-       * Probe Firebase auth by refreshing the ID token. Used by the health_check
-       * diagnostic tool. Does not touch GHL backend — just exchanges the refresh
-       * token at securetoken.googleapis.com.
+       * GHL answered 401 to a request sent with `usedToken`: forget THAT token
+       * everywhere (this client, the process-wide cache and the cross-process
+       * file), so no client or process reuses it. Only entries holding exactly
+       * that token go: a late 401 from a request that carried an older token (a
+       * parallel request, or the company before a switch) never wipes the fresh
+       * one that replaced it. Without an argument it means this client's current
+       * token.
+       */
+      invalidateIdToken(usedToken = this.cachedIdToken) {
+        if (!usedToken) return;
+        const store2 = firebaseIdTokenStore();
+        for (const [k, e] of store2.cache) if (e.idToken === usedToken) store2.cache.delete(k);
+        updateIdTokenFile((entries) => {
+          for (const k of Object.keys(entries)) if (entries[k].idToken === usedToken) delete entries[k];
+        });
+        if (this.cachedIdToken === usedToken) {
+          this.cachedIdToken = null;
+          this.tokenExpiry = 0;
+        }
+      }
+      /**
+       * Probe Firebase auth by getting an ID token. Used by the health_check
+       * diagnostic tool. Does not touch GHL backend. A fresh cached ID token (this
+       * process's or another's) answers without an exchange; otherwise it exchanges
+       * the refresh token at securetoken.googleapis.com.
        */
       async checkAuth() {
         try {
@@ -2812,8 +2972,9 @@ var init_workflow_builder_client = __esm({
         return null;
       }
       /**
-       * Get a fresh Firebase ID token using the refresh token.
-       * Uses a promise lock to prevent concurrent refresh races.
+       * Get a Firebase ID token: this client's own copy, then the process-wide
+       * cache, and only then an exchange at securetoken (shared by every client
+       * asking for the same credential at the same moment).
        */
       async getIdToken() {
         if (this.cachedIdToken && Date.now() < this.tokenExpiry) {
@@ -2822,31 +2983,74 @@ var init_workflow_builder_client = __esm({
         if (this.tokenRefreshPromise) {
           return this.tokenRefreshPromise;
         }
-        this.tokenRefreshPromise = this.performTokenRefresh();
+        const refresh = this.obtainIdToken();
+        this.tokenRefreshPromise = refresh;
         try {
-          return await this.tokenRefreshPromise;
+          return await refresh;
         } finally {
-          this.tokenRefreshPromise = null;
+          if (this.tokenRefreshPromise === refresh) this.tokenRefreshPromise = null;
         }
       }
-      async performTokenRefresh() {
-        const url = `${FIREBASE_TOKEN_URL}?key=${encodeURIComponent(this.firebaseApiKey)}`;
-        const body = `grant_type=refresh_token&refresh_token=${encodeURIComponent(this.refreshToken)}`;
-        const response = await fetch(url, {
-          method: "POST",
-          headers: { "Content-Type": "application/x-www-form-urlencoded" },
-          body
-        });
-        if (!response.ok) {
-          this.cachedIdToken = null;
-          this.tokenExpiry = 0;
-          const text2 = await response.text();
-          throw new Error(`Firebase token refresh failed (${response.status}): ${text2}`);
+      async obtainIdToken() {
+        const generation = this.tokenGeneration;
+        const store2 = firebaseIdTokenStore();
+        let key = firebaseIdTokenKey(this.firebaseApiKey, this.userId, this.refreshToken);
+        const known = store2.cache.get(key);
+        if (known && known.refreshToken !== this.refreshToken) {
+          this.followRotation(known.refreshToken);
+          key = firebaseIdTokenKey(this.firebaseApiKey, this.userId, this.refreshToken);
         }
-        const data = FirebaseTokenSchema.parse(await response.json());
-        this.cachedIdToken = data.id_token;
-        this.tokenExpiry = Date.now() + 55 * 60 * 1e3;
-        this.tokenCompanyId = decodeFirebaseClaims(data.id_token).companyId;
+        const hit = store2.cache.get(key);
+        if (hit && Date.now() < hit.expiresAt) {
+          return this.adoptIdToken(hit);
+        }
+        const shared = readIdTokenFileEntry(idTokenFileKey(this.firebaseApiKey, this.userId, this.refreshToken));
+        if (shared) {
+          const entry2 = { idToken: shared.idToken, expiresAt: shared.expiresAt, refreshToken: this.refreshToken };
+          store2.cache.set(key, entry2);
+          return this.adoptIdToken(entry2);
+        }
+        let pending = store2.inflight.get(key);
+        if (!pending) {
+          const started = this.performTokenRefresh();
+          pending = started;
+          store2.inflight.set(key, started);
+          const clear = () => {
+            if (store2.inflight.get(key) === started) store2.inflight.delete(key);
+          };
+          started.then(clear, clear);
+        }
+        let entry;
+        try {
+          entry = await pending;
+        } catch (error) {
+          if (generation === this.tokenGeneration) {
+            this.cachedIdToken = null;
+            this.tokenExpiry = 0;
+          }
+          throw error;
+        }
+        if (generation !== this.tokenGeneration) return this.getIdToken();
+        return this.adoptIdToken(entry);
+      }
+      /** Take on a rotated refresh token another client already persisted. */
+      followRotation(newToken2) {
+        if (this.refreshToken === this.homeRefreshToken && this.currentCompanyId === this.homeCompanyId) {
+          this.homeRefreshToken = newToken2;
+        }
+        this.refreshToken = newToken2;
+      }
+      /**
+       * Make a (fresh or shared) ID token this client's own: cache it on the
+       * instance, follow a rotation, and run the company check below.
+       */
+      adoptIdToken(entry) {
+        this.cachedIdToken = entry.idToken;
+        this.tokenExpiry = entry.expiresAt;
+        if (entry.refreshToken !== this.refreshToken) {
+          this.followRotation(entry.refreshToken);
+        }
+        this.tokenCompanyId = decodeFirebaseClaims(entry.idToken).companyId;
         const expectedCompanyId = this.intendedCompanyId ?? this.currentCompanyId;
         if (expectedCompanyId && this.tokenCompanyId && expectedCompanyId !== this.tokenCompanyId) {
           const warnKey = `${expectedCompanyId}->${this.tokenCompanyId}`;
@@ -2858,11 +3062,65 @@ var init_workflow_builder_client = __esm({
             );
           }
         }
-        if (data.refresh_token && data.refresh_token !== this.refreshToken) {
-          this.refreshToken = data.refresh_token;
-          this.persistRotatedToken(data.refresh_token);
+        return entry.idToken;
+      }
+      /**
+       * Exchange the refresh token at securetoken and store the result in the
+       * process-wide cache. A 429 (Google's per-minute exchange quota) is retried
+       * after 2s, 5s and 10s; any other failure, a bad token included, is not.
+       */
+      async performTokenRefresh() {
+        const firebaseApiKey = this.firebaseApiKey;
+        const userId = this.userId;
+        const oldRefreshToken = this.refreshToken;
+        const company = this.currentCompanyId;
+        const generation = this.tokenGeneration;
+        const url = `${FIREBASE_TOKEN_URL}?key=${encodeURIComponent(firebaseApiKey)}`;
+        const body = `grant_type=refresh_token&refresh_token=${encodeURIComponent(oldRefreshToken)}`;
+        let response;
+        for (let attempt = 0; ; attempt++) {
+          try {
+            response = await fetch(url, {
+              method: "POST",
+              headers: { "Content-Type": "application/x-www-form-urlencoded" },
+              body,
+              signal: AbortSignal.timeout(FIREBASE_EXCHANGE_TIMEOUT_MS)
+            });
+          } catch (error) {
+            const name = error?.name;
+            if (name === "TimeoutError" || name === "AbortError") {
+              throw new Error(`Firebase token refresh timed out after ${FIREBASE_EXCHANGE_TIMEOUT_MS / 1e3}s`);
+            }
+            throw error;
+          }
+          if (response.status !== 429 || attempt >= FIREBASE_429_DELAYS_MS.length) break;
+          const delay5 = FIREBASE_429_DELAYS_MS[attempt];
+          process.stderr.write(`[ghl-mcp] Firebase token exchange rate-limited (429), retry ${attempt + 1}/${FIREBASE_429_DELAYS_MS.length} in ${delay5}ms
+`);
+          await new Promise((r) => setTimeout(r, delay5));
+        }
+        if (!response.ok) {
+          const text2 = await response.text();
+          throw new Error(`Firebase token refresh failed (${response.status}): ${text2}`);
+        }
+        const data = FirebaseTokenSchema.parse(await response.json());
+        const expiresInMs = Number(data.expires_in) * 1e3;
+        const ttl = Number.isFinite(expiresInMs) && expiresInMs > 0 ? Math.max(expiresInMs - ID_TOKEN_EXPIRY_MARGIN_MS, 0) : ID_TOKEN_FALLBACK_TTL_MS;
+        const newRefreshToken = data.refresh_token || oldRefreshToken;
+        const entry = { idToken: data.id_token, expiresAt: Date.now() + ttl, refreshToken: newRefreshToken };
+        const store2 = firebaseIdTokenStore();
+        store2.cache.set(firebaseIdTokenKey(firebaseApiKey, userId, oldRefreshToken), entry);
+        const shared = { idToken: entry.idToken, expiresAt: entry.expiresAt };
+        updateIdTokenFile((entries) => {
+          entries[idTokenFileKey(firebaseApiKey, userId, oldRefreshToken)] = shared;
+          if (newRefreshToken !== oldRefreshToken) entries[idTokenFileKey(firebaseApiKey, userId, newRefreshToken)] = shared;
+        });
+        if (newRefreshToken !== oldRefreshToken) {
+          store2.cache.set(firebaseIdTokenKey(firebaseApiKey, userId, newRefreshToken), entry);
+          if (generation === this.tokenGeneration) this.refreshToken = newRefreshToken;
+          this.persistRotatedToken(newRefreshToken, company);
         }
-        return data.id_token;
+        return entry;
       }
       /**
        * Persist a rotated refresh token to the slot that owns the ACTIVE company.
@@ -2873,8 +3131,7 @@ var init_workflow_builder_client = __esm({
        *   keep the in-memory home token in sync so resetToHomeFirebase() restores
        *   the fresh value rather than a stale one.
        */
-      persistRotatedToken(newToken2) {
-        const company = this.currentCompanyId;
+      persistRotatedToken(newToken2, company = this.currentCompanyId) {
         const hasCompanySlot = company !== void 0 && this.registry?.getCompanyFirebase(company) !== void 0;
         if (hasCompanySlot) {
           this.registry?.updateCompanyFirebaseRefreshToken(company, newToken2);
@@ -2968,8 +3225,10 @@ var init_workflow_builder_client = __esm({
           return retryAccountRead(() => this.parkedContacts(workflowId), "workflow parked contacts");
         }
         const url = `https://backend.leadconnectorhq.com/workflows/status/search/count-per-step?workflowId=${encodeURIComponent(workflowId)}&locationId=${encodeURIComponent(this.locationId)}`;
-        const res = await fetch(url, { headers: await this.buildHeaders() });
+        const headers = await this.buildHeaders();
+        const res = await fetch(url, { headers });
         if (!res.ok) {
+          if (res.status === 401) this.invalidateIdToken(headers["token-id"] ?? null);
           const upstream = inBuildRequestScope() ? ` ${redactText(await res.text())}` : "";
           throw new Error(
             `Could not check whether anyone is part-way through this workflow (HTTP ${res.status}). Nothing was written. This check has to succeed before a step can be changed, because changing a step somebody is waiting on drops them from the sequence permanently.${upstream}`
@@ -3006,6 +3265,7 @@ var init_workflow_builder_client = __esm({
         }
         const url = `${BACKEND_BASE}${urlPath}`;
         const headers = await this.buildHeaders();
+        const usedIdToken = headers["token-id"];
         const options = { method, headers };
         if (body && (method === "POST" || method === "PUT")) {
           options.body = JSON.stringify(body);
@@ -3040,6 +3300,7 @@ var init_workflow_builder_client = __esm({
           return this.request(method, urlPath, body, attempt + 1);
         }
         if (!response.ok) {
+          if (response.status === 401) this.invalidateIdToken(usedIdToken ?? null);
           let errorBody = "";
           try {
             errorBody = await response.text();
@@ -13071,11 +13332,13 @@ __export(page_reads_exports, {
 });
 async function readPageFull(client, pageId, fetcher = fetch) {
   const headers = await client.buildHeaders();
+  const usedIdToken = headers["token-id"];
   headers.Origin = "https://app.gohighlevel.com";
   headers.Referer = "https://app.gohighlevel.com/";
   const path50 = `/page/${pageId}?locationId=${client.locationId}`;
   const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path50}`, { method: "GET", headers });
   if (!response.ok) {
+    if (response.status === 401) client.invalidateIdToken?.(usedIdToken);
     const text3 = await response.text();
     throw new Error(`Funnel API Error ${response.status}: GET ${path50}
 ${text3}`);
@@ -24127,7 +24390,9 @@ var init_client_engagements = __esm({
 function readBoardState() {
   try {
     const raw = JSON.parse(fs15.readFileSync(path14.join(appDataDir(), "cockpit-state.json"), "utf8"));
-    if (raw && typeof raw === "object" && raw.clients && typeof raw.clients === "object") return raw;
+    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+      return { ...raw, clients: raw.clients && typeof raw.clients === "object" ? raw.clients : {} };
+    }
   } catch {
   }
   return { clients: {} };
@@ -27949,6 +28214,77 @@ var init_claude_locate = __esm({
   }
 });
 
+// src/result-text.ts
+function hasParseableResult(text2) {
+  const m = RESULT_RE.exec(text2);
+  if (!m) return false;
+  try {
+    JSON.parse(m[1]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function pickResultText(texts, firstEligible = 0) {
+  for (let i = texts.length - 1; i >= firstEligible; i--) if (hasParseableResult(texts[i])) return texts[i];
+  for (let i = texts.length - 1; i >= firstEligible; i--) if (/RESULT:\s*\{/.test(texts[i])) return texts[i];
+  if (!texts.length) return "";
+  if (texts.length <= firstEligible) return texts[texts.length - 1].replace(/RESULT:\s*\{[\s\S]*\}/, "").trim();
+  return texts[texts.length - 1];
+}
+function resultEventFailure(ev) {
+  if (ev?.type !== "result") return void 0;
+  if (typeof ev.subtype === "string" && ev.subtype !== "success") return ev.subtype;
+  if (ev.is_error === true) return "error";
+  return void 0;
+}
+var NO_MEMBER_HOOKS, RESULT_RE, RunTexts;
+var init_result_text = __esm({
+  "src/result-text.ts"() {
+    "use strict";
+    NO_MEMBER_HOOKS = ["--settings", '{"disableAllHooks":true}'];
+    RESULT_RE = /RESULT:\s*(\{[\s\S]*\})/;
+    RunTexts = class {
+      texts = [];
+      afterLastTool = 0;
+      /** Set when the result event reported the run did not finish (e.g. error_max_turns). */
+      failure;
+      /** Record an assistant text block or the result string (blank ones are ignored). */
+      text(t) {
+        if (typeof t === "string" && t.trim()) this.texts.push(t);
+      }
+      /** Record a tool_use block, in stream order. */
+      tool() {
+        this.afterLastTool = this.texts.length;
+      }
+      /** Record every block of one stream-json event. */
+      event(ev) {
+        if (ev?.type === "assistant") {
+          for (const b of ev.message?.content ?? []) {
+            if (b?.type === "tool_use") this.tool();
+            else if (b?.type === "text") this.text(b.text);
+          }
+        } else if (ev?.type === "result") this.result(ev);
+      }
+      /**
+       * Record the result event: its failure, and its text only when that text was
+       * not already said (it normally repeats the last assistant text, and a repeat
+       * of a RESULT line said before a tool call must not become eligible).
+       */
+      result(ev) {
+        this.failure = resultEventFailure(ev) ?? this.failure;
+        if (typeof ev.result === "string" && !this.texts.includes(ev.result)) this.text(ev.result);
+      }
+      get empty() {
+        return this.texts.length === 0;
+      }
+      pick() {
+        return pickResultText(this.texts, this.afterLastTool);
+      }
+    };
+  }
+});
+
 // src/claude-cli.ts
 function parseVersion(text2) {
   const m = /(\d+)\.(\d+)\.(\d+)/.exec(text2 || "");
@@ -28028,6 +28364,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
     const cmd = claudeCommand(bin, [
       "-p",
       SMOKE_PROMPT,
+      ...NO_MEMBER_HOOKS,
       "--output-format",
       "stream-json",
       "--verbose",
@@ -28045,7 +28382,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
       done({ ok: false, error: "the engine check did not finish in time" });
     }, timeoutMs);
     let buffered = "";
-    let lastText = "";
+    const texts = new RunTexts();
     let version;
     let model;
     let costUsd;
@@ -28062,13 +28399,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
           if (found.version) version = found.version;
           if (found.model) model = found.model;
           if (found.costUsd !== void 0) costUsd = found.costUsd;
-          if (ev.type === "assistant") {
-            for (const b of ev.message?.content ?? []) {
-              if (b.type === "text" && b.text?.trim()) lastText = b.text;
-            }
-          } else if (ev.type === "result" && typeof ev.result === "string" && ev.result.trim()) {
-            lastText = ev.result;
-          }
+          texts.event(ev);
         } catch {
         }
       }
@@ -28083,7 +28414,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
     });
     child.on("close", () => {
       clearTimeout(timer);
-      if (/RESULT:\s*\{/.test(lastText)) done({ ok: true, version, model, costUsd });
+      if (/RESULT:\s*\{/.test(texts.pick())) done({ ok: true, version, model, costUsd });
       else done({
         ok: false,
         version,
@@ -28142,6 +28473,7 @@ var init_claude_cli = __esm({
     path19 = __toESM(require("path"));
     init_credentials_store();
     init_claude_locate();
+    init_result_text();
     MIN_CLAUDE_VERSION = "2.1.0";
     SMOKE_PROMPT = 'Reply with exactly this one line and nothing else: RESULT: {"ok":true,"summary":"engine check"}';
   }
@@ -28168,6 +28500,9 @@ function clientKeysInLocation(keys, locationId2) {
   }
   return [...hasDefault ? [void 0] : [], ...others.sort()];
 }
+function secondClientChooseMessage(clientKey, name) {
+  return `Nobody has chosen what ${name ? name : `the second clinic "${clientKey}"`} bought, so nothing was approved or built. The cockpit has no What they bought screen for a second clinic in a sub-account yet, so the choice is saved for it directly: send the cockpit POST /api/scope with this sub-account's locationId, clientKey "${clientKey}" and the features they bought (features: null for everything in the plan). Then approve and build again.`;
+}
 var import_zod58, CLIENT_RECORD_SEPARATOR, CLIENT_KEY_ENV, clientKeySchema;
 var init_client_record = __esm({
   "src/client-record.ts"() {
@@ -28244,7 +28579,7 @@ function verifyReadbackPrompt(ctx) {
 function buildClaudeArgs(spec, locationId2, locationName, ctx) {
   return [
     "-p",
-    spec.prompt(locationId2, locationName, ctx) + (spec.stage === 4 ? verifyReadbackPrompt(ctx) : "") + (spec.stage === 4 ? "\nCheck EACH carried manual obligation with an account read. Return manualChecks:[{ref,type,ok,evidence}] in RESULT, where evidence names the actual read-back. Set ok:false for any obligation you cannot verify. Carried obligations: " + JSON.stringify(ctx?.manualObligations ?? []) : ""),
+    spec.prompt(locationId2, locationName, ctx) + (spec.stage === 4 ? verifyReadbackPrompt(ctx) : "") + (spec.stage === 4 ? "\nCheck EACH carried manual obligation with an account read. Return manualChecks:[{ref,type,ok,evidence}] in RESULT, where evidence names the actual read-back. Set ok:false for any obligation you cannot verify. Carried obligations: " + JSON.stringify(ctx?.manualObligations ?? []) : "") + RESULT_LAST_RULE,
     "--output-format",
     "stream-json",
     "--verbose",
@@ -28259,7 +28594,10 @@ function buildClaudeArgs(spec, locationId2, locationName, ctx) {
     // tools. The deny list is COMPUTED: every built-in that touches the machine
     // plus every registered GHL tool outside this stage's allowlist.
     "--disallowedTools",
-    denyListFor(verifyTools(spec, ctx)).join(",")
+    denyListFor(verifyTools(spec, ctx)).join(","),
+    // The member's own hooks never run inside a stage: a Stop hook added a turn
+    // after the RESULT line and ended build steps early (2026-09-29).
+    ...NO_MEMBER_HOOKS
   ];
 }
 function parseResultLine(text2) {
@@ -28325,11 +28663,13 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
       };
       const progressPoll = progressDir ? setInterval(pollProgress, 1e3) : void 0;
       progressPoll?.unref?.();
+      let timedOut = false;
       const timeout = setTimeout(() => {
+        timedOut = true;
         onEvent({ kind: "error", line: "Run timed out \u2014 stopping it." });
         child.kill("SIGKILL");
       }, opts.timeoutMs ?? spec.timeoutMs ?? 10 * 60 * 1e3);
-      let lastText = "";
+      const texts = new RunTexts();
       let buffered = "";
       let engineVersion;
       let engineModel;
@@ -28353,14 +28693,17 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
             if (facts.durationMs !== void 0) durationMs = facts.durationMs;
             if (ev.type === "assistant") {
               for (const block of ev.message?.content ?? []) {
-                if (block.type === "tool_use") onEvent({ kind: "tool", line: `\u2192 ${String(block.name).replace(/^mcp__ghl__/, "")}` });
+                if (block.type === "tool_use") {
+                  texts.tool();
+                  onEvent({ kind: "tool", line: `\u2192 ${String(block.name).replace(/^mcp__ghl__/, "")}` });
+                }
                 if (block.type === "text" && block.text?.trim()) {
-                  lastText = block.text;
+                  texts.text(block.text);
                   onEvent({ kind: "text", line: block.text.trim().slice(0, 200) });
                 }
               }
             } else if (ev.type === "result") {
-              if (typeof ev.result === "string" && ev.result.trim()) lastText = ev.result;
+              texts.result(ev);
             }
           } catch {
           }
@@ -28387,13 +28730,13 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
           noteObservedEngine({ version: engineVersion, model: engineModel });
         } catch {
         }
-        if (code !== 0 && !lastText) {
+        if (!timedOut && code !== 0 && texts.empty) {
           const outcome2 = { ok: false, error: `claude exited ${code}: ${stderrTail.trim().slice(-200) || "no output"}`, ...engine };
           onEvent({ kind: "error", line: outcome2.error });
           resolve13(outcome2);
           return;
         }
-        const outcome = { ...parseResultLine(lastText), ...engine };
+        const outcome = timedOut ? { ok: false, error: "the run timed out and was stopped before it finished", ...engine } : texts.failure ? { ok: false, error: `the run did not finish (${texts.failure})`, raw: texts.pick().slice(-400), ...engine } : { ...parseResultLine(texts.pick()), ...engine };
         if (stage === 3) {
           try {
             outcome.runId = findBuildRun(locationId2)?.runId;
@@ -28419,7 +28762,7 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
     });
   });
 }
-var import_child_process3, fs21, STAFF_NOTIFICATION_RULE, STAFF_PAUSE_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES;
+var import_child_process3, fs21, STAFF_NOTIFICATION_RULE, STAFF_PAUSE_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES, RESULT_LAST_RULE;
 var init_stage_runner = __esm({
   "src/stage-runner.ts"() {
     "use strict";
@@ -28434,6 +28777,7 @@ var init_stage_runner = __esm({
     init_build_journal();
     init_claude_cli();
     init_claude_locate();
+    init_result_text();
     init_account_rules();
     init_account_rules();
     init_client_record();
@@ -28513,7 +28857,7 @@ If anything fails, finish with: RESULT: {"ok":false,"error":"<short reason>"}`
 2. Find the answers. They arrive one of TWO ways and you must check BOTH:
    (a) a real form submission \u2014 get_forms then get_form_submissions_full; or
    (b) an intake completed in the cockpit \u2014 search_contacts for the tag "blueprint-intake-received" and read that contact's custom fields (get_contact), which hold the answers under "Intake: <question>" fields.
-3. Turn whichever you found into a Brief with normalize_submission_to_brief (for a form submission), then check it with validate_brief. If the answers came from the tagged contact, build the Brief from those field values directly and call validate_brief on it too. Report validate_brief gaps in issues as warnings and finish ok:true.
+3. Turn whichever you found into a Brief with normalize_submission_to_brief (for a form submission), then check it with validate_brief. If the answers came from the tagged contact, build the Brief from those field values directly and call validate_brief on it too. Booking calendars go at the TOP level of the Brief as calendars:[{"name":"...","type":"one_on_one"|"round_robin"|"class","staffNames":["..."],"durationMinutes":30}], one entry per calendar, never inside goal. Report validate_brief gaps in issues as warnings and finish ok:true.
 Use these authoritative normalized intake answers when provided: ${JSON.stringify(ctx?.normalizedAnswers ?? {})}.
 Do NOT create, update or delete anything \u2014 this step only reads and normalizes.
 Only if BOTH paths come up empty, finish with RESULT: {"ok":false,"error":"Open the real form, submit it, then refresh."}.
@@ -28609,6 +28953,7 @@ RESULT: {"ok":true,"summary":"<what you checked and the headline result>","issue
       5: "Manual tasks only a human can do (A2P, Google auth, staff, phone)",
       6: "Go-live sign-off"
     };
+    RESULT_LAST_RULE = "\nThe RESULT line must be the very last thing you print: make no tool calls after it, and print nothing after it.";
   }
 });
 
@@ -29631,10 +29976,10 @@ function askNoTools(prompt, opts = {}) {
       resolve13("");
       return;
     }
-    const cmd = claudeCommand(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY]);
+    const cmd = claudeCommand(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY, ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process2.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"], env: { ...process.env } });
     const timeout = setTimeout(() => child.kill("SIGKILL"), opts.timeoutMs ?? 3 * 60 * 1e3);
-    let lastText = "";
+    const texts = new RunTexts();
     let buffered = "";
     let costUsd;
     let reported = false;
@@ -29654,11 +29999,7 @@ function askNoTools(prompt, opts = {}) {
         try {
           const ev = JSON.parse(line3);
           if (ev.type === "result" && typeof ev.total_cost_usd === "number") costUsd = ev.total_cost_usd;
-          if (ev.type === "assistant") {
-            for (const b of ev.message?.content ?? []) if (b.type === "text" && b.text?.trim()) lastText = b.text;
-          } else if (ev.type === "result" && typeof ev.result === "string" && ev.result.trim()) {
-            lastText = ev.result;
-          }
+          texts.event(ev);
         } catch {
         }
       }
@@ -29666,12 +30007,12 @@ function askNoTools(prompt, opts = {}) {
     child.on("error", () => {
       clearTimeout(timeout);
       report3();
-      resolve13(lastText);
+      resolve13(texts.pick());
     });
     child.on("close", () => {
       clearTimeout(timeout);
       report3();
-      resolve13(lastText);
+      resolve13(texts.pick());
     });
   });
 }
@@ -29682,6 +30023,7 @@ var init_handoff_run = __esm({
     import_node_child_process2 = require("node:child_process");
     init_stage_runner();
     init_claude_locate();
+    init_result_text();
     init_handoff_pack();
     CLIENT_SENTENCE_RULES = "Write for the business owner, not a developer. Complete sentences that end with a period; never trail off. One or two sentences per item, no more. Everyday words: say 'text messaging registration (A2P)' not 'A2P'; 'the calendar is not connected to Google or Outlook yet' not 'OAuth'; 'nothing was wrong' not 'status ok'. No tool names, no ids, no field names in code style, no JSON, no arrows. Keep the names of workflows, pipelines and forms because the client will recognise them. If a list is long, name the first few and say how many in total. State what is in place, or what is missing and why, plainly. An item marked 'done but not confirmed' has NOT been confirmed: never describe it as having happened or been observed; say what is still to be confirmed and how (for example, 'this is confirmed on the handoff call, when you complete one task in the account without help').";
     NO_TOOLS_DENY = "Bash,Write,Edit,MultiEdit,NotebookEdit,WebFetch,WebSearch,Task,TodoWrite,Read,Glob,Grep";
@@ -32152,7 +32494,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.89.0-beta.1",
+      version: "3.89.0-beta.2",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -33376,10 +33718,12 @@ function judgeSteps(rawRows, contactId, workflowNames) {
     }
   };
 }
-function liveStepLogReader(locationId2, headers, fetchFn = fetch) {
+function liveStepLogReader(locationId2, headers, fetchFn = fetch, onUnauthorized) {
   return async (workflowId, fromMs, toMs) => {
     const q3 = new URLSearchParams({ action: "first", dateType: "custom", fromDate: String(Math.floor(fromMs)), toDate: String(Math.ceil(toMs)), limit: String(STEP_LOG_LIMIT), locationId: locationId2, workflowId });
-    const res = await fetchFn(`https://backend.leadconnectorhq.com/workflows/logs/v2?${q3}`, { headers: await headers() });
+    const used = await headers();
+    const res = await fetchFn(`https://backend.leadconnectorhq.com/workflows/logs/v2?${q3}`, { headers: used });
+    if (res.status === 401) onUnauthorized?.(used);
     if (!res.ok) throw new Error(`HTTP ${res.status}`);
     const body = await res.json();
     if (!Array.isArray(body)) throw new Error("the log came back in a shape this version does not know");
@@ -35892,7 +36236,7 @@ function workflowReadConnection(registry2, client, companyId) {
   const home = companyId && companyId === process.env.GHL_COMPANY_ID ? registry2.getFirebase() : void 0;
   const config3 = fb ?? home ?? (companyId && companyId === process.env.GHL_COMPANY_ID && process.env.GHL_FIREBASE_REFRESH_TOKEN ? { apiKey: process.env.GHL_FIREBASE_API_KEY, refreshToken: process.env.GHL_FIREBASE_REFRESH_TOKEN, userId: process.env.GHL_USER_ID } : void 0);
   if (!config3?.apiKey || !config3.userId) throw new Error(BUILDER_REPAIR_MESSAGE);
-  return new WorkflowBuilderClient({ firebaseApiKey: config3.apiKey, refreshToken: config3.refreshToken, userId: config3.userId, apiKey: client.getApiKey(), locationId: locationId2, companyId });
+  return new WorkflowBuilderClient({ firebaseApiKey: config3.apiKey, refreshToken: config3.refreshToken, userId: config3.userId, apiKey: client.getApiKey(), locationId: locationId2, companyId, registry: registry2 });
 }
 var BUILDER_REPAIR_MESSAGE;
 var init_workflow_read_connection = __esm({
@@ -38873,12 +39217,12 @@ var init_run_cost = __esm({
 function callClaudeRecorded(bin, argv, context, onCost = () => {
 }) {
   return new Promise((resolve13, reject) => {
-    let text2 = "";
+    const run = new RunTexts();
     let buffer = "";
     let stderr = "";
     let facts = {};
     let settled = false;
-    const cmd = claudeCommand(bin, [...argv, "--output-format", "stream-json", "--verbose"]);
+    const cmd = claudeCommand(bin, [...argv, "--output-format", "stream-json", "--verbose", ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process5.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"] });
     const timer = setTimeout(() => child.kill("SIGKILL"), 6 * 60 * 1e3);
     const finish3 = (ok) => {
@@ -38891,17 +39235,14 @@ function callClaudeRecorded(bin, argv, context, onCost = () => {
         onCost("The cost record could not be saved.");
       }
       onCost(`${context.kind}: ${facts.costUsd === void 0 ? "cost not reported" : formatUsd(facts.costUsd)}.`);
-      if (ok) resolve13(text2);
+      if (ok) resolve13(run.pick());
       else reject(new Error("Check your Claude authentication in Your agency before reading this source."));
     };
     const consume = (line3) => {
       try {
         const ev = JSON.parse(line3);
         facts = { ...facts, ...readEngineFacts(ev) };
-        if (ev.type === "assistant") {
-          for (const block of ev.message?.content ?? []) if (block.type === "text") text2 = block.text;
-        }
-        if (ev.type === "result" && typeof ev.result === "string") text2 = ev.result;
+        run.event(ev);
       } catch {
       }
     };
@@ -38919,7 +39260,7 @@ function callClaudeRecorded(bin, argv, context, onCost = () => {
     child.on("error", () => finish3(false));
     child.on("close", (code) => {
       if (buffer.trim()) consume(buffer);
-      finish3(code === 0 && Boolean(text2));
+      finish3(code === 0 && !run.empty);
     });
   });
 }
@@ -38931,6 +39272,7 @@ var init_claude_call = __esm({
     init_run_cost();
     init_claude_cli();
     init_claude_locate();
+    init_result_text();
   }
 });
 
@@ -39151,10 +39493,40 @@ function briefWarnings(brief) {
   }
   return out;
 }
+function liftGoalCalendars(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input)) return { input, notes: [] };
+  const brief = input;
+  const goal = brief.goal;
+  if (!goal || typeof goal !== "object" || Array.isArray(goal)) return { input, notes: [] };
+  const misplaced = goal.calendars;
+  if (!Array.isArray(misplaced)) return { input, notes: [] };
+  const top = brief.calendars;
+  if (Array.isArray(top) && top.length > 0) {
+    if (misplaced.length === 0) return { input, notes: [] };
+    const names = misplaced.map((c, i) => {
+      const n = c?.name;
+      return typeof n === "string" && n.trim() ? `"${n.trim()}"` : `entry ${i + 1}`;
+    });
+    return {
+      input,
+      notes: [`The brief lists calendars at the top level, so the ${misplaced.length === 1 ? "calendar" : "calendars"} under goal.calendars (${names.join(", ")}) ${misplaced.length === 1 ? "was" : "were"} ignored; move any that are needed into the top-level calendars list.`]
+    };
+  }
+  const lifted = [];
+  const notes = [];
+  misplaced.forEach((c, i) => {
+    const r = briefCalendarSchema.safeParse(c);
+    if (r.success) lifted.push(r.data);
+    else notes.push(`Calendar ${i + 1} under goal.calendars could not be read (${r.error.issues.map((x) => `${x.path.join(".") || "entry"}: ${x.message}`).join("; ")}); give it a name, a type (${BRIEF_CALENDAR_TYPES.join(", ")}) and staffNames.`);
+  });
+  const { calendars: _moved, ...restGoal } = goal;
+  return { input: { ...brief, goal: restGoal, ...lifted.length ? { calendars: lifted } : {} }, notes };
+}
 function validateBrief(input) {
-  const parsed2 = briefSchema.safeParse(input);
+  const lifted = liftGoalCalendars(input);
+  const parsed2 = briefSchema.safeParse(lifted.input);
   if (parsed2.success) {
-    return { valid: true, errors: [], warnings: briefWarnings(parsed2.data), brief: parsed2.data };
+    return { valid: true, errors: [], warnings: [...lifted.notes, ...briefWarnings(parsed2.data)], brief: parsed2.data };
   }
   return {
     valid: false,
@@ -40034,18 +40406,33 @@ function keptByCondition(items, ctx) {
 function isFillBlock(v) {
   return !!v && typeof v === "object" && !Array.isArray(v) && ("fillFrom" in v || "transform" in v);
 }
-function composeStages(block, ctx, referencedStageRefs) {
+function slugHasPhrase(slug4, phrase) {
+  return `_${slug4}_`.includes(`_${slugify2(phrase)}_`);
+}
+function isTerminalStage(name) {
+  const s = slugify2(name);
+  return TERMINAL_STAGE_WORDS.some((w) => slugHasPhrase(s, w));
+}
+function stringList(v) {
+  return Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.trim() !== "") : [];
+}
+function composeStages(block, ctx, uses, remaps) {
   const defaults = isFillBlock(block) ? keptByCondition(block.default ?? [], ctx) : keptByCondition(block, ctx);
-  const defaultList = defaults.map((d) => ({ ref: String(d.ref), name: fillString(String(d.name), ctx) }));
+  const defaultList = defaults.map((d) => ({
+    ref: String(d.ref),
+    name: fillString(String(d.name), ctx),
+    aliases: stringList(d.aliases)
+  }));
   const briefStages = (ctx.brief.goal.salesStages ?? []).map((s) => s.trim()).filter(Boolean);
   if (!isFillBlock(block) || briefStages.length === 0) {
-    return defaultList.map((d, i) => ({ ...d, position: i }));
+    return defaultList.map((d, i) => ({ ref: d.ref, name: d.name, position: i }));
   }
   const bySlug = /* @__PURE__ */ new Map();
   for (const d of defaultList) {
     bySlug.set(slugify2(d.name), d);
     bySlug.set(d.ref.replace(/^stage\./, ""), d);
   }
+  const defaultRefs = new Set(defaultList.map((d) => d.ref));
   const out = [];
   const usedRefs = /* @__PURE__ */ new Set();
   for (const name of briefStages) {
@@ -40056,39 +40443,160 @@ function composeStages(block, ctx, referencedStageRefs) {
     } else {
       let ref = `stage.${slugify2(name)}`;
       let n = 2;
-      while (usedRefs.has(ref)) ref = `stage.${slugify2(name)}_${n++}`;
+      while (usedRefs.has(ref) || defaultRefs.has(ref)) ref = `stage.${slugify2(name)}_${n++}`;
       usedRefs.add(ref);
       out.push({ ref, name });
     }
   }
-  for (const d of defaultList) {
-    if (usedRefs.has(d.ref)) continue;
-    if (!referencedStageRefs.has(d.ref)) continue;
+  const findClientStage = (phrases, allowTerminal, skipOwned) => {
+    for (const phrase of phrases) {
+      for (const s of out) {
+        if (!allowTerminal && isTerminalStage(s.name)) continue;
+        if (skipOwned && defaultRefs.has(s.ref)) continue;
+        if (slugHasPhrase(slugify2(s.name), phrase)) return s;
+      }
+    }
+    return void 0;
+  };
+  const defaultName = (ref) => defaultList.find((d) => d.ref === ref)?.name ?? ref.replace(/^stage\./, "");
+  const stillReferenced = /* @__PURE__ */ new Set();
+  const preferred = /* @__PURE__ */ new Set();
+  for (const u of uses) {
+    const key = `${u.workflowRef}\0${u.ref}`;
+    if (preferred.has(key)) continue;
+    const target = u.prefer?.length ? findClientStage(u.prefer, true, false) : void 0;
+    if (!target) {
+      stillReferenced.add(u.ref);
+      continue;
+    }
+    preferred.add(key);
+    if (target.ref === u.ref) continue;
+    let m = remaps.byWorkflow.get(u.workflowRef);
+    if (!m) {
+      m = /* @__PURE__ */ new Map();
+      remaps.byWorkflow.set(u.workflowRef, m);
+    }
+    m.set(u.ref, target.ref);
+    ctx.warnings.push(
+      `Mapped "${defaultName(u.ref)}" automations in ${u.workflowName} onto your "${target.name}" stage.`
+    );
+  }
+  const pending = defaultList.filter((d) => !usedRefs.has(d.ref) && stillReferenced.has(d.ref));
+  const candidates = [];
+  for (const d of pending) {
+    const terminalRef = isTerminalStage(d.name);
+    const phrases = [d.name, ...d.aliases];
+    for (const [sIdx, s] of out.entries()) {
+      if (defaultRefs.has(s.ref)) continue;
+      if (!terminalRef && isTerminalStage(s.name)) continue;
+      const slug4 = slugify2(s.name);
+      const aliasIdx = phrases.findIndex((p) => slugHasPhrase(slug4, p));
+      if (aliasIdx < 0) continue;
+      const best = phrases.filter((p) => slugHasPhrase(slug4, p)).map(slugify2).sort((a, b) => b.split("_").length - a.split("_").length || b.length - a.length)[0];
+      candidates.push({ d, s, words: best.split("_").length, len: best.length, aliasIdx, dIdx: defaultList.indexOf(d), sIdx });
+    }
+  }
+  candidates.sort((a, b) => b.words - a.words || b.len - a.len || a.aliasIdx - b.aliasIdx || a.dIdx - b.dIdx || a.sIdx - b.sIdx);
+  const taken = /* @__PURE__ */ new Set();
+  const mapped = /* @__PURE__ */ new Set();
+  for (const c of candidates) {
+    if (mapped.has(c.d.ref) || taken.has(c.s.ref)) continue;
+    mapped.add(c.d.ref);
+    taken.add(c.s.ref);
+    remaps.global.set(c.d.ref, c.s.ref);
+  }
+  const first2 = defaultList[0];
+  if (first2 && pending.includes(first2) && !mapped.has(first2.ref) && out[0] && !defaultRefs.has(out[0].ref) && !taken.has(out[0].ref) && !isTerminalStage(out[0].name)) {
+    mapped.add(first2.ref);
+    taken.add(out[0].ref);
+    remaps.global.set(first2.ref, out[0].ref);
+  }
+  for (const d of pending) {
+    const to = remaps.global.get(d.ref);
+    const s = to ? out.find((x) => x.ref === to) : void 0;
+    if (s) ctx.warnings.push(`Mapped "${d.name}" automations onto your "${s.name}" stage.`);
+  }
+  const placedAt = (ref) => {
+    const target = remaps.global.get(ref) ?? ref;
+    return out.findIndex((x) => x.ref === target);
+  };
+  for (const d of pending) {
+    if (mapped.has(d.ref)) continue;
+    const i = defaultList.indexOf(d);
+    const firstTerminal = out.findIndex((s) => isTerminalStage(s.name));
+    let at = -1;
+    let where = "";
+    for (let j = i - 1; j >= 0 && at < 0; j--) {
+      const k = placedAt(defaultList[j].ref);
+      if (k >= 0 && !isTerminalStage(out[k].name)) {
+        at = k + 1;
+        where = `just after your "${out[k].name}" stage`;
+      }
+    }
+    for (let j = i + 1; j < defaultList.length && at < 0; j++) {
+      const k = placedAt(defaultList[j].ref);
+      if (k >= 0 && !isTerminalStage(out[k].name)) {
+        at = k;
+        where = `just before your "${out[k].name}" stage`;
+      }
+    }
+    if (at >= 0 && firstTerminal >= 0 && at > firstTerminal) at = -1;
+    if (at < 0 && firstTerminal >= 0) {
+      at = firstTerminal;
+      where = `just before your "${out[firstTerminal].name}" stage`;
+    }
+    if (at < 0) {
+      at = out.length;
+      where = "at the end of your stages";
+    }
+    out.splice(at, 0, { ref: d.ref, name: d.name });
     usedRefs.add(d.ref);
-    out.push(d);
     ctx.warnings.push(
-      `Kept the "${d.name}" pipeline stage even though the intake's stage list did not mention it \u2014 the automations move deals into it.`
+      `Kept the "${d.name}" pipeline stage even though the intake's stage list did not mention it and none of its stages matches it; the automations move deals into it. It sits ${where}.`
     );
   }
   return out.map((s, i) => ({ ...s, position: i }));
 }
-function collectReferencedStageRefs(workflows, ctx) {
-  const refs2 = /* @__PURE__ */ new Set();
-  const scanActions = (actions) => {
-    for (const a of keptByCondition(actions, ctx)) {
-      if (typeof a.stageRef === "string") refs2.add(a.stageRef);
-      if (a.type === "find_opportunity") {
-        scanActions(a.found);
-        scanActions(a.notFound);
-      }
-    }
-  };
+function collectStageUses(workflows, ctx) {
+  const uses = [];
   for (const w of workflows) {
+    const workflowRef = String(w.ref ?? "");
+    const workflowName = typeof w.name === "string" ? fillString(w.name, ctx) : workflowRef;
+    const pref = w.stagePreference && typeof w.stagePreference === "object" ? w.stagePreference : {};
+    const add2 = (ref) => {
+      const prefer = stringList(pref[ref]);
+      uses.push({ workflowRef, workflowName, ref, ...prefer.length ? { prefer } : {} });
+    };
+    const scanActions = (actions) => {
+      for (const a of keptByCondition(actions, ctx)) {
+        if (typeof a.stageRef === "string") add2(a.stageRef);
+        if (a.type === "find_opportunity") {
+          scanActions(a.found);
+          scanActions(a.notFound);
+        }
+      }
+    };
     const trig = w.trigger;
-    if (trig && typeof trig.stageRef === "string") refs2.add(trig.stageRef);
+    if (trig && typeof trig.stageRef === "string") add2(trig.stageRef);
     scanActions(w.actions);
   }
-  return refs2;
+  return uses;
+}
+function remapWorkflowStages(w, remaps) {
+  const own = remaps.byWorkflow.get(String(w.ref));
+  const to = (ref) => own?.get(ref) ?? remaps.global.get(ref) ?? ref;
+  const walk2 = (actions) => {
+    for (const a of actions ?? []) {
+      if (typeof a.stageRef === "string") a.stageRef = to(a.stageRef);
+      if (a.type === "find_opportunity") {
+        walk2(a.found);
+        walk2(a.notFound);
+      }
+    }
+  };
+  const trig = w.trigger;
+  if (trig && typeof trig.stageRef === "string") trig.stageRef = to(trig.stageRef);
+  walk2(w.actions);
 }
 function calendarTypeForBrief(briefType, calName, teamSize) {
   const mapped = BRIEF_CALENDAR_TYPE_MAP[briefType] ?? "event";
@@ -40246,12 +40754,13 @@ function planFromPreset(input) {
       ...omitted.length ? { omitted } : {}
     };
   })() : void 0;
-  const referencedStageRefs = collectReferencedStageRefs(keptWorkflowSkeletons, ctx);
+  const stageUses = collectStageUses(keptWorkflowSkeletons, ctx);
+  const stageRemaps = { global: /* @__PURE__ */ new Map(), byWorkflow: /* @__PURE__ */ new Map() };
   const users = ctx.users;
   const pipelines = keptByCondition(sk.pipelines, ctx).map((pl) => ({
     ref: String(pl.ref),
     name: fillString(String(pl.name), ctx),
-    stages: composeStages(pl.stages, ctx, referencedStageRefs)
+    stages: composeStages(pl.stages, ctx, stageUses, stageRemaps)
   }));
   const customFields = keptByCondition(sk.customFields, ctx).map((f) => fillNode(f, ctx));
   const tags = keptByCondition(sk.tags, ctx).map((t) => fillNode(t, ctx));
@@ -40303,7 +40812,9 @@ function planFromPreset(input) {
   const workflows = keptWorkflowSkeletons.map((raw) => {
     const { actions, ...rest } = raw;
     const w = fillNode(rest, ctx);
+    delete w.stagePreference;
     w.actions = composeActions(actions, ctx, templateRefByAsset);
+    remapWorkflowStages(w, stageRemaps);
     return w;
   });
   if (scope) {
@@ -40362,6 +40873,8 @@ function planFromPreset(input) {
   }
   const handoffs = keptByCondition(sk.handoffs, ctx).map((raw) => {
     const h = fillNode(raw, ctx);
+    if (typeof h.produces === "string") h.produces = stageRemaps.global.get(h.produces) ?? h.produces;
+    if (Array.isArray(h.blocks)) h.blocks = h.blocks.map((b) => stageRemaps.global.get(b) ?? b);
     if (typeof h.produces === "string" && !definedRefs.has(h.produces)) delete h.produces;
     if (Array.isArray(h.blocks)) {
       h.blocks = h.blocks.filter((b) => b.endsWith(".*") || definedRefs.has(b));
@@ -40554,7 +41067,7 @@ function loadPresetChoice(requested, briefPreset) {
   if (generic) return { ok: true, preset: generic, file: "generic-client.preset.json", note: "Using the generic preset." };
   return { ok: false, error: "No usable preset file was found in the library." };
 }
-var fs33, path31, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, BRIEF_CALENDAR_TYPE_MAP;
+var fs33, path31, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, TERMINAL_STAGE_WORDS, BRIEF_CALENDAR_TYPE_MAP;
 var init_plan_from_preset = __esm({
   "src/intake-to-build/plan-from-preset.ts"() {
     "use strict";
@@ -40571,6 +41084,28 @@ var init_plan_from_preset = __esm({
     };
     INLINE_TOKEN_RE = /\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*(?:\.[a-zA-Z0-9_]+|\[\d+\])*)\s*(?:\|\|([^}]*))?\}\}/g;
     ADMIN_ROLE_RE = /\b(owner|founder|admin|administrator|ceo|principal|director)\b/i;
+    TERMINAL_STAGE_WORDS = [
+      "lost",
+      "closed",
+      "won",
+      "no_show",
+      "noshow",
+      "no_sale",
+      "not_interested",
+      "not_a_fit",
+      "no_fit",
+      "disqualified",
+      "unqualified",
+      "dead",
+      "cancelled",
+      "canceled",
+      "declined",
+      "dnd",
+      "do_not_disturb",
+      "churned",
+      "lapsed",
+      "archived"
+    ];
     BRIEF_CALENDAR_TYPE_MAP = {
       one_on_one: "event",
       round_robin: "round_robin",
@@ -41958,8 +42493,8 @@ function savePlanRecord(rec2, base) {
   return file2;
 }
 function savedPlanMatchesScope(saved, current) {
-  if (!saved) return false;
-  if (!current || current.wholePreset) return !saved.scope;
+  if (!saved || !current) return false;
+  if (current.wholePreset) return !saved.scope;
   if (!saved.scope) return false;
   const omitted = (saved.scope.omitted ?? []).map((f) => f.id);
   const offered = /* @__PURE__ */ new Set([...saved.scope.built, ...saved.scope.notBuilt.map((f) => f.id), ...omitted]);
@@ -42764,7 +43299,7 @@ async function assessmentAttachmentAction(args, deps) {
       if (!Array.isArray(chosen) || chosen.some((id2) => !ASSESSMENT_FEATURES.some((f) => f.id === id2))) throw new Error("Choose features from the list.");
       const state2 = deps.read();
       deps.write({ ...state2, assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] } });
-      detail.message = state2.scope?.[id] ? "What they bought is saved for this client document. The build still follows the selection confirmed on the Review screen." : "What they bought is saved. Nothing is built until you confirm what to build on the Review screen, which is ticked from this.";
+      detail.message = state2.scope?.[id] ? "The Assessment record is saved. The build still follows the What they bought list saved on the Blueprint Review." : "The Assessment record is saved. Nothing is built until you save What they bought on the Blueprint Review, which is ticked from this.";
       break;
     }
     default:
@@ -42813,12 +43348,12 @@ function assessmentPanel(id){
  const box=document.createElement('section');box.className='cds-stack';
  const text=(tag,value)=>{const el=document.createElement(tag);if(tag==='h4')el.className='cds-panel-label';el.textContent=value;box.appendChild(el);return el};
  const button=(label,run,disabled=false)=>{const b=text('button',label);b.className='cds-btn ghost';b.disabled=p.busy||disabled;b.onclick=run;return b};
- text('h4','What they bought');
- text('p','Record the features they bought for their Blueprint document.');
+ text('h4','Bought in the Assessment');
+ text('p','Record what they bought in your sales conversation. The What they bought list further down is ticked from this, and only that list decides what gets built.');
  if(p.data){
   for(const feature of p.data.features){const label=text('label','');label.className='cds-check';const cb=document.createElement('input');cb.type='checkbox';cb.checked=p.choices.includes(feature.id);cb.disabled=p.busy;cb.onchange=()=>{p.choices=cb.checked?[...p.choices,feature.id]:p.choices.filter(v=>v!==feature.id)};label.appendChild(cb);const span=document.createElement('span');span.textContent=feature.name;label.appendChild(span)}
-  button('Save what they bought',()=>assessmentRequest(id,'purchases',{purchasedFeatureIds:p.choices}));
-  if(p.data.purchasedFeatureIds===null)text('p','What they bought has not been recorded yet.');
+  button('Save the Assessment record',()=>assessmentRequest(id,'purchases',{purchasedFeatureIds:p.choices}));
+  if(p.data.purchasedFeatureIds===null)text('p','Nothing is recorded from the Assessment yet.');
  }
  text('h4','Assessment');
  text('p','The numbers from your sales conversation follow the client into the intake, the Review and their Blueprint.');
@@ -44713,7 +45248,7 @@ function errLine(msg3) {
 function preflightWritable() {
   try {
     const dir = ensureAppDataDir();
-    const probe = path36.join(dir, `.write-probe.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}`);
+    const probe = path36.join(dir, `.write-probe.${process.pid}.${(0, import_crypto3.randomBytes)(4).toString("hex")}`);
     fs38.writeFileSync(probe, "ok");
     fs38.unlinkSync(probe);
     return true;
@@ -44997,14 +45532,14 @@ async function runCli(subcommand, argv) {
       return EXIT_USAGE2;
   }
 }
-var import_node_util3, fs38, path36, import_crypto2, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
+var import_node_util3, fs38, path36, import_crypto3, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
 var init_cli = __esm({
   "src/cli.ts"() {
     "use strict";
     import_node_util3 = require("node:util");
     fs38 = __toESM(require("fs"));
     path36 = __toESM(require("path"));
-    import_crypto2 = require("crypto");
+    import_crypto3 = require("crypto");
     init_ghl_client();
     init_token_registry();
     init_credentials_store();
@@ -45662,7 +46197,7 @@ function reviewDocumentHtml(review, opts) {
   ${review.gaps?.length ? `<div class="head">What's leaking today (${review.gaps.length})</div>${review.gaps.map(gap).join("")}` : ""}
   ${review.build?.length ? `<div class="head">What we're building</div>${review.build.map((b) => `<div class="build"><b>${esc14(b.item)}</b><span>${esc14(b.because)}</span></div>`).join("")}` : ""}
   ${opts.scope?.awaitingConfirmation ? `<div class="head">What this build includes</div>
-    <p>Not confirmed yet. What you bought is recorded, and the build waits until the features to build are confirmed.</p>
+    <p>Not confirmed yet. The build waits until the features to build are confirmed.</p>
 ` : opts.scope ? `<div class="head">What this build includes</div>
     <p>${opts.scope.package ? `Built to your <b>${esc14(opts.scope.package)}</b> package: ` : ""}${opts.scope.built.length ? esc14(opts.scope.built.map((b) => b.name).join(", ")) : "the foundation only"}. Always included: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing.</p>
 ` : ""}
@@ -47136,7 +47671,7 @@ function prefixReservations(locationId2, base) {
 function refusal(prefix, owner) {
   return `The clinic prefix "${prefix}" already belongs to another client in this sub-account (client key "${owner}"). Two clients sharing a prefix would reuse each other's workflows, tags and fields, so nothing was built. Choose a different prefix for this client.`;
 }
-function sleepSync(ms) {
+function sleepSync2(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function locationLockPath(dir, locationId2) {
@@ -47165,7 +47700,7 @@ function withLocationLock(dir, locationId2, fn, opts = {}) {
           age > STALE_LOCK_MS ? `A clinic prefix could not be reserved because an earlier build left this sub-account's prefix lock behind (it may have crashed), so nothing was built. If no build is running for this sub-account, delete the file ${lock} and run it again.` : "Another build in this sub-account is reserving a clinic prefix right now, so nothing was built. Run it again in a moment."
         );
       }
-      sleepSync(15);
+      sleepSync2(15);
     }
   }
   try {
@@ -47244,13 +47779,19 @@ var init_clinic_prefix_registry = __esm({
 var dashboard_exports = {};
 __export(dashboard_exports, {
   ACCOUNT_TYPES: () => ACCOUNT_TYPES,
+  APPROVAL_WITHDRAWN_FOR_SCOPE: () => APPROVAL_WITHDRAWN_FOR_SCOPE,
+  CHOOSE_BEFORE_BUILD: () => CHOOSE_BEFORE_BUILD,
+  CHOOSE_WHAT_THEY_BOUGHT: () => CHOOSE_WHAT_THEY_BOUGHT,
   CLAUDE_REPAIR_MESSAGES: () => CLAUDE_REPAIR_MESSAGES,
   INTAKE_CONNECT_REQUIRED: () => INTAKE_CONNECT_REQUIRED,
   INTAKE_FORM_REQUIRED: () => INTAKE_FORM_REQUIRED,
   INTAKE_OWN_MESSAGES: () => INTAKE_OWN_MESSAGES,
   INTAKE_UNREADABLE: () => INTAKE_UNREADABLE,
+  NOTHING_TICKED_IN_PLAN: () => NOTHING_TICKED_IN_PLAN,
   NOT_SIGNED_IN_MSG: () => NOT_SIGNED_IN_MSG,
   PARKED_NOT_BUILT: () => PARKED_NOT_BUILT,
+  SCOPE_CHANGED_SINCE_APPROVAL: () => SCOPE_CHANGED_SINCE_APPROVAL,
+  SCOPE_REFUSAL: () => SCOPE_REFUSAL,
   SCREEN_HEADS: () => SCREEN_HEADS,
   SEAT_GUARDED_READS: () => SEAT_GUARDED_READS,
   SEAT_TOKEN_HEADER: () => SEAT_TOKEN_HEADER,
@@ -47278,6 +47819,7 @@ __export(dashboard_exports, {
   ensureEngineReady: () => ensureEngineReady,
   forgetAnthropicKey: () => forgetAnthropicKey,
   guarded: () => guarded,
+  hasChosenScope: () => hasChosenScope,
   insideDir: () => insideDir,
   intakeInput: () => intakeInput,
   intakeRequestError: () => intakeRequestError,
@@ -47289,10 +47831,13 @@ __export(dashboard_exports, {
   loadingMainHtml: () => loadingMainHtml,
   mayServeSeat: () => mayServeSeat,
   memberFacingError: () => memberFacingError,
+  mergeQueueIntakes: () => mergeQueueIntakes,
   newClientFailure: () => newClientFailure,
   normalizedIntake: () => normalizedIntake,
+  offeredFeaturesFor: () => offeredFeaturesFor,
   overlayPath: () => overlayPath,
   prefillTeamAnswers: () => prefillTeamAnswers,
+  queueScanFilter: () => queueScanFilter,
   readBody: () => readBody,
   readClientStages: () => readClientStages,
   readCockpitState: () => readCockpitState,
@@ -47304,9 +47849,11 @@ __export(dashboard_exports, {
   recoverStuckStages: () => recoverStuckStages,
   renderCockpitHtml: () => renderCockpitHtml,
   reportSeatAllowed: () => reportSeatAllowed,
+  rereadQueueIntakes: () => rereadQueueIntakes,
   resolvePlan: () => resolvePlan2,
   runDashboard: () => runDashboard,
   safeDocName: () => safeDocName,
+  scopeHashOf: () => scopeHashOf,
   scopePrefillFor: () => scopePrefillFor,
   secondClientInputHash: () => secondClientInputHash,
   setAccountIndustry: () => setAccountIndustry,
@@ -47388,6 +47935,15 @@ function setAccountIndustry(state, locationId2, industry) {
   if (!next.industry) delete next.industry;
   return { ...state, accounts: { ...state.accounts ?? {}, [locationId2]: next } };
 }
+function scopeHashOf(sel) {
+  if (!sel) return contentHash({ none: true });
+  if (sel.wholePreset) return contentHash({ wholePreset: true });
+  return contentHash({ package: sel.package ?? "", features: [...new Set((sel.features ?? []).filter(isFeatureId))].sort() });
+}
+function hasChosenScope(state, recordKey) {
+  const sel = state.scope?.[recordKey];
+  return Boolean(sel && (sel.wholePreset || Array.isArray(sel.features) && sel.features.some(isFeatureId)));
+}
 function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ new Date()) {
   const all = { ...state.scope ?? {} };
   if (!scope) {
@@ -47403,16 +47959,26 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   if (!Object.keys(all).length) delete next.scope;
   return next;
 }
-function documentScopeFor(state, locationId2) {
-  const sc = state.scope?.[locationId2];
-  if (!sc && Array.isArray(state.assessmentPurchases?.[locationId2])) return { awaitingConfirmation: true, built: [], notBuilt: [] };
-  let offered = FEATURE_IDS;
+function offeredFeaturesFor(state, recordKey) {
+  const locationId2 = recordKey.split("--")[0];
   try {
     const chosen = loadPresetChoice(void 0, presetForIndustry(state.accounts?.[locationId2]?.industry));
-    if (chosen.ok) offered = featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
+    if (chosen.ok) return featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
   } catch {
   }
-  if (!sc || sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
+  return FEATURE_IDS;
+}
+function documentScopeFor(state, locationId2, savedPlan) {
+  const sc = state.scope?.[locationId2];
+  const offered = offeredFeaturesFor(state, locationId2);
+  if (!sc) {
+    const outcome = state.outcomes?.[`${locationId2}:3`];
+    const built = state.clients?.[locationId2]?.stages?.[3] === "done" || outcome?.ok === true;
+    const wholePresetPlan = Boolean(savedPlan && !savedPlan.scope && typeof savedPlan.plan?.preset === "string");
+    if (built && wholePresetPlan) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
+    return { awaitingConfirmation: true, built: [], notBuilt: [] };
+  }
+  if (sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
   return {
     ...sc.package ? { package: sc.package } : {},
     // Built = the confirmed scope, the one record the build follows. The purchase
@@ -47587,6 +48153,12 @@ function startRun(locationId2, stage, onDone, meta2 = {}) {
       run.lines.push(`Could not write this run to the cost record: ${e instanceof Error ? e.message : String(e)}. The step itself is unaffected.`);
     }
     for (const line3 of costLines(outcome)) run.lines.push(line3);
+    const scopeRefusal = stage === 3 && !outcome.ok && typeof outcome.error === "string" && SCOPE_REFUSAL.test(outcome.error);
+    if (scopeRefusal) {
+      outcome.summary = outcome.error;
+      outcome.issues = [];
+      outcome.plain = { summary: outcome.error, issues: [] };
+    }
     if (stage === 3 && !outcome.summary && !outcome.issues?.length) {
       try {
         const st = readCockpitState();
@@ -47600,8 +48172,8 @@ function startRun(locationId2, stage, onDone, meta2 = {}) {
         const st = readCockpitState();
         writeCockpitState({ ...st, outcomes: { ...st.outcomes ?? {}, [`${rk}:${stage}`]: { ok: outcome.ok, error: outcome.error, summary: outcome.summary, issues: outcome.issues, ...plain && { plain }, at, inputHash: runInputHash, ...stage === 4 ? { buildHash: runBuildHash, verification: verifyRaw?.verification } : {}, hash: contentHash({ inputHash: runInputHash, at, ok: outcome.ok, summary: outcome.summary, issues: outcome.issues }) } } });
       };
-      save();
-      if (PLAIN_REPORT_STAGES.has(stage)) {
+      save(scopeRefusal ? outcome.plain : void 0);
+      if (PLAIN_REPORT_STAGES.has(stage) && !scopeRefusal) {
         run.lines.push("Writing the plain-English version of what came back\u2026");
         const plain = await rewriteOutcomePlain(STAGES2[stage], verifyRaw ?? outcome, { onEvent: (l) => run.lines.push(l), onCost: (costUsd) => {
           recordRunCost({ at, locationId: locationId2, stage, kind: "plain rewrite", ok: true, costUsd });
@@ -47808,6 +48380,40 @@ function logQuietly(message) {
   } catch {
   }
 }
+function queueScanFilter(body) {
+  try {
+    const b = body ? JSON.parse(body) : null;
+    if (b && typeof b === "object" && b.only === "pending") {
+      const open2 = b.open;
+      return { only: "pending", ...typeof open2 === "string" && open2 ? { open: open2 } : {} };
+    }
+  } catch {
+  }
+  return void 0;
+}
+async function rereadQueueIntakes(opts) {
+  const reread = {};
+  const failed = [];
+  for (const { locationId: locationId2 } of opts.roster) {
+    if (opts.state.clients[locationId2]?.stages?.[0] !== "done") continue;
+    if (opts.filter?.only === "pending" && locationId2 !== opts.filter.open && opts.state.intakeInputs?.[locationId2]?.status === "received") continue;
+    try {
+      const got = await opts.read(locationId2);
+      if (got === null) continue;
+      if (got === "unavailable") {
+        failed.push(locationId2);
+        continue;
+      }
+      reread[locationId2] = got;
+    } catch {
+      failed.push(locationId2);
+    }
+  }
+  return { reread, failed };
+}
+function mergeQueueIntakes(latest, reread) {
+  return { ...latest, intakeInputs: { ...latest.intakeInputs ?? {}, ...reread } };
+}
 function readBody(req, res, max, onDone, tooLarge = "That request is too large.", sensitive = false) {
   let body = "";
   let tooBig = false;
@@ -48041,7 +48647,7 @@ const LABELS=["Intake","Brief","Approve","Build","Verify","Manual tasks","Go-liv
 // What each step does: [the one line on its row, the fuller sentence in the next-step panel].
 const STEP_ABOUT=[["Creates the intake form, its fields and one notification workflow.","Creates or repairs this client's intake form, its custom fields and one published notification workflow."],
  ["Reads the intake into a brief.","Reads this client's intake, from the submitted form or the one completed here, and turns it into the brief the plan is made from."],
- ["You approve the proposed build.","Review the intake and the brief, then approve the proposed build for this client."],
+ ["You choose what they bought, then approve the build.","Choose what the client bought, review the intake and the brief, then approve the build for this client. Only what they bought gets built."],
  ["Builds the approved plan into this account.","Builds the approved plan into this client's account. Anything it cannot build is listed as an issue."],
  ["Checks the build for broken links.","Checks the account for broken links between workflows, pipelines and fields. It only reads. Anything it cannot check is reported as unchecked."],
  ["Jobs only a person can do. You confirm them.","The jobs only a person can do, such as text-message registration, Google sign-in, staff and phone. Confirm them when they are finished."],
@@ -48095,16 +48701,80 @@ function listRows(rows,key,noun){const frag=document.createDocumentFragment();co
 function unnest(el){if(el&&el.classList){el.classList.remove("cds-panel","cds-card");el.classList.add("cds-stack")}return el}
 function typeOf(state,id){const sandboxes=state.sandboxAccounts||Object.fromEntries(SANDBOX.map(id=>[id,true]));if(sandboxes[id])return "sandbox";const t=(state.accounts&&state.accounts[id]&&state.accounts[id].type);return t==="sandbox"?"client":(t||"client")}
 function activityScore(state,id){const c=state.clients[id];if(!c)return 0;return c.stages.some(s=>s!=="pending")?1:0}
-async function load(){if(SCREEN==="new"&&canCreateSubAccounts){const probe=await(await clientPageRequest("/api/agency-connection")).json();agencyReady=probe.ok===true}const s=await(await fetch("/api/state")).json();const r=await(await fetch("/api/run/status")).json();await loadQueue();if(SCREEN==="new"&&!snapshots){try{const sr=await(await fetch("/api/snapshots")).json();snapshots=sr.ok?sr.snapshots:[];snapshotError=sr.ok?"":clientPageError(sr.error,"Check the agency key in GoHighLevel, then refresh the snapshot list.")}catch(e){snapshots=[];snapshotError="Could not load snapshots; check the connection and refresh this page."}}render(s,r);
- if(r.running&&!polling){polling=true;const t=setInterval(async()=>{if(userIsBusy())return;const rr=await(await fetch("/api/run/status")).json();const ss=await(await fetch("/api/state")).json();await loadQueue();render(ss,rr);if(!rr.running){clearInterval(t);polling=false}},1500)}}
+async function load(quiet,freshQueue){if(SCREEN==="new"&&canCreateSubAccounts){const probe=await(await clientPageRequest("/api/agency-connection")).json();agencyReady=probe.ok===true}/* The queue first: a re-reading POST can take a minute, and state fetched before it would draw stale (review of c4b75c9). */
+ await loadQueue(quiet===true?(freshQueue===true?"pending":"get"):undefined);const s=await(await fetch("/api/state")).json();const r=await(await fetch("/api/run/status")).json();lastStatusOkAt=Date.now();if(SCREEN==="new"&&!snapshots){try{const sr=await(await fetch("/api/snapshots")).json();snapshots=sr.ok?sr.snapshots:[];snapshotError=sr.ok?"":clientPageError(sr.error,"Check the agency key in GoHighLevel, then refresh the snapshot list.")}catch(e){snapshots=[];snapshotError="Could not load snapshots; check the connection and refresh this page."}}/* A background refresh (quiet) draws only when the data changed (2026-09-29: an unchanged redraw closed what Jerry had open). */
+ if(!(quiet===true&&dataSig(s,r)===lastDrawnSig))render(s,r);hideFinishNote();
+ if(r.running&&!polling){polling=true;const t=setInterval(async()=>{let rr;try{rr=await fetchRunStatus()}catch(e){return}
+  if(!rr.running){clearInterval(t);polling=false}
+  if(!shouldRedraw(lastRun,rr))return;
+  try{await loadQueue("get");const ss=await(await fetch("/api/state")).json();if(dataSig(ss,rr)!==lastDrawnSig)render(ss,rr);hideFinishNote()}catch(e){}},1500)}}
 // Heartbeat (2026-08-25): the fast poller above only starts for a run THIS page saw begin. A page that was
 // already open, or opened mid-run, or a run kicked off from another seat/the API, showed "pending" until a
 // manual reload . a client watching would conclude the build died. Every 3s: if a run is live, hand over to
 // the fast poller; every ~15s otherwise, refresh state so stages finished elsewhere flip to done.
-// Never rebuild the page under the operator's hands: while a form field has focus or an intake panel is
-// open, the heartbeat waits. (2026-08-25: the first heartbeat threw Jerry out of the intake field every refresh.)
-function userIsBusy(){if(SCREEN==="new")return true;const a=document.activeElement;if(a&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName))return true;try{if(Object.values(iOpen||{}).some(Boolean))return true}catch(e){}return false}
-let hbTick=0;setInterval(async()=>{if(polling||userIsBusy())return;hbTick++;try{const rr=await(await fetch("/api/run/status")).json();if(rr.running||hbTick%5===0)load()}catch{}},3000);
+// Never rebuild the page under the operator's hands: while a form field has focus the redraw waits,
+// and happens on focusout. (2026-08-25: the first heartbeat threw Jerry out of the intake field every refresh.)
+// Stale "Running" fix (2026-09-29 rehearsal): Brief finished on the server while the page showed
+// "Running now, working 5m" until a manual reload. The old guard also skipped the status FETCH whenever an
+// intake panel was open, and the clock ticks on the page alone, so a frozen page looked alive. Now:
+// the status is ALWAYS fetched; only the full redraw waits, and only while an input has focus; an open intake
+// panel alone never blocks it (its typed answers, pasted material and prepared-form link live in state, so a
+// redraw keeps them). A running-to-finished change always redraws, or, with an input focused, shows a bar
+// that says so. Returning to the tab refreshes. A status older than 15s freezes the clock on "checking\u2026".
+let lastStatusOkAt=0,redrawPending=false,pointerIsDown=false,flushTimer=0;
+/* Intake work in flight for a client (Fill the intake from this, a document upload, send, prepare, save): a redraw
+   then would re-enable its button and drop its message, so it waits like a focused field. */
+let iBusy={};
+function intakeWorkBusy(){try{return Object.values(iBusy).some(n=>n>0)}catch(e){return false}}
+/* A counter, so two requests for one client overlapping never clear each other. */
+async function iWork(id,fn){iBusy[id]=(iBusy[id]||0)+1;try{return await fn()}finally{iBusy[id]=Math.max(0,(iBusy[id]||0)-1);if(redrawPending)scheduleFlush()}}
+function inputFocused(){const a=document.activeElement;return Boolean(a&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName))}
+/* Holds back the full redraw, never the status fetch. */
+function userIsBusy(){if(SCREEN==="new")return true;return inputFocused()||intakeWorkBusy()}
+function intakeIsOpen(){try{return Object.values(iOpen||{}).some(Boolean)}catch(e){return false}}
+async function fetchRunStatus(){const rr=await(await fetch("/api/run/status")).json();lastStatusOkAt=Date.now();return rr}
+function statusIsStale(){return !lastStatusOkAt||Date.now()-lastStatusOkAt>15000}
+function runKey(r){return r?[r.running?1:0,r.locationId||"",r.stage==null?"":r.stage,r.capability||"",r.startedAt||"",r.reviewing?1:0,r.ok==null?"":r.ok?1:0].join("|"):""}
+function runJustFinished(prev,next){return Boolean(prev&&prev.running&&next&&!next.running)}
+function stepName(r){return r&&!r.capability&&LABELS[r.stage]?LABELS[r.stage]:"The step"}
+/* Decides whether a fresh status redraws the page now. A finished run always does, unless an input has focus:
+   then the bar tells the operator and the redraw follows on focusout. With an intake panel open the page
+   redraws only when the run itself changed (started, moved stage, finished), not on every tick. */
+function shouldRedraw(prev,next){const fin=runJustFinished(prev,next);
+ if(userIsBusy()){if(SCREEN==="new")return false;if(fin)showFinishNote(prev);redrawPending=true;return false}
+ if(fin)return true;
+ if(intakeIsOpen())return runKey(prev)!==runKey(next);
+ return true}
+function showFinishNote(prev){let b=document.getElementById("run-finished-note");
+ if(!b){b=document.createElement("button");b.id="run-finished-note";b.type="button";b.className="cds-callout info";b.setAttribute("role","status");
+  b.style.cssText="position:fixed;left:50%;bottom:16px;transform:translateX(-50%);z-index:50;max-width:calc(100% - 32px);cursor:pointer";
+  b.onclick=()=>{redrawPending=false;load(true).catch(()=>{})};document.body.appendChild(b)}
+ b.textContent=stepName(prev)+" finished. Click to see the result."}
+function hideFinishNote(){const b=document.getElementById("run-finished-note");if(b)b.remove()}
+/* One retry timer at a time: focusout, pointer releases and finished intake work all ask, only one waits. */
+function scheduleFlush(){if(flushTimer)return;flushTimer=setTimeout(()=>{flushTimer=0;flushRedraw()},300)}
+function flushRedraw(){if(!redrawPending)return;if(SCREEN==="new"){redrawPending=false;return}if(userIsBusy()||pointerIsDown){scheduleFlush();return}redrawPending=false;load(true).catch(()=>{})}
+document.addEventListener("pointerdown",()=>{pointerIsDown=true},true);
+document.addEventListener("pointerup",()=>{pointerIsDown=false},true);
+/* A touch that is cancelled, or a release outside the window, never sends pointerup. */
+document.addEventListener("pointercancel",()=>{pointerIsDown=false},true);
+window.addEventListener("blur",()=>{pointerIsDown=false});
+/* Focus leaving an input: a held redraw happens now (after the field's change event has saved its value). */
+document.addEventListener("focusout",()=>{if(redrawPending)scheduleFlush()});
+/* Coming back to the tab or the window: fetch at once, rather than trusting what the page last drew. */
+function refreshOnReturn(){if(userIsBusy()){if(SCREEN!=="new")redrawPending=true;fetchRunStatus().then(rr=>{if(runJustFinished(lastRun,rr)&&SCREEN!=="new")showFinishNote(lastRun)}).catch(()=>{});return}load(true,true).catch(()=>{})}
+/* Focus and visibilitychange usually fire together on a return: one refresh, not two. */
+let returnTimer=0;function onReturn(){if(returnTimer)return;returnTimer=setTimeout(()=>{returnTimer=0;refreshOnReturn()},250)}
+document.addEventListener("visibilitychange",()=>{if(document.visibilityState==="visible")onReturn()});
+window.addEventListener("focus",onReturn);
+/* The GET queue shows intake answers as last read; every 4th heartbeat load (about a minute) and a return to the
+   tab use the POST, which re-reads each client's intake, so a submitted or edited intake shows without a reload. */
+let hbTick=0,hbLoads=0;setInterval(async()=>{if(polling)return;hbTick++;let rr;try{rr=await fetchRunStatus()}catch(e){return}
+ const changed=runKey(rr)!==runKey(lastRun);
+ if(!(rr.running||changed||hbTick%5===0))return;
+ if(userIsBusy()){if(changed)shouldRedraw(lastRun,rr);return}
+ if(intakeIsOpen()&&!changed&&!(rr.running&&!polling))return;
+ hbLoads++;load(true,hbLoads%4===0).catch(()=>{})},3000);
 let intakeOpen=false,intakeData=null,intakeIndustry="";
 async function loadIntake(){const r=await(await clientPageRequest("/api/intake?industry="+encodeURIComponent(intakeIndustry))).json();intakeData=r;render(lastState,lastRun)}
 async function saveOverlay(o){const r=await(await clientPageRequest("/api/overlay",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)})).json();if(!r.ok){showClientError(r.error);return}await loadIntake()}
@@ -48145,6 +48815,25 @@ function intakePanel(){const d=document.createElement("div");d.className="cds-pa
  d.appendChild(reset);
  return d}
 let iOpen={},iData={},iMode={},iAnswers={},iDirty={},iIdx={},iPre={},iSub={},oOpen={},iDocs={},iDocsErrors={},iPreSrc={};
+/* What the operator typed into the intake's free boxes (pasted transcript, link, recorder note, the send
+   form) and the prepared-form link live here, not only in the DOM, so a redraw while the intake is open
+   keeps them (2026-09-29: an open intake no longer blocks the page from showing a finished step). */
+let iDraft={},iPrepared={};
+function preparedFormBlock(box,id){const p=iPrepared[id];
+    const openLink=document.createElement("a");openLink.className="cds-link";openLink.href=p.url;openLink.target="_blank";openLink.rel="noopener";openLink.textContent="Open the prepared form";box.appendChild(openLink);
+    const hint=document.createElement("p");hint.className="muted";
+    const left=p.leftovers||[];
+    hint.textContent=left.length
+      ?"Use Open the prepared form above to review your answers, except "+left.length+" listed below. Handle each as noted there, then click Submit and come back and press Refresh:"
+      :"Use Open the prepared form above, submit it, then return and press Refresh.";
+    box.appendChild(hint);
+    if(left.length){const ul=document.createElement("ul");ul.className="muted";
+     const WHY={"several answers":"pick each of these in the form","contains a plus sign":"type this in the form","no field for this question":"the form has no question for this, so it was not carried. Add it as a note on the contact after you submit"};
+     for(const l of left){const li=document.createElement("li");li.textContent=l.label+": "+l.values.join(", ")+". "+(WHY[l.reason]||l.reason)+".";ul.appendChild(li)}
+     box.appendChild(ul)}
+    const rf=document.createElement("button");rf.className="cds-btn ghost";rf.textContent="Refresh status";
+    rf.onclick=()=>iLoad(id);box.appendChild(rf)}
+function keepDraft(el,id,name){const k=id+":"+name;if(iDraft[k]!=null)el.value=iDraft[k];el.addEventListener("input",()=>{iDraft[k]=el.value});return el}
 async function iDocsLoad(id){const r=await(await clientPageRequest("/api/intake-documents?locationId="+encodeURIComponent(id))).json();iDocs[id]=(r&&r.files)||[];iDocsErrors[id]=r.ok?"":clientPageError(r.error,"Refresh the page to load this client\u2019s documents again.");render(lastState,lastRun)}
 // Show the plain outcome here. The separate Step progress panel shows member-facing progress.
 function outcomePanel(id,i,state){const oc=(state.outcomes||{})[id+":"+i];if(!oc)return null;
@@ -48174,7 +48863,7 @@ function iEdit(id,label,value){(iAnswers[id]||(iAnswers[id]={}))[label]=value;(i
 function iApplyProposals(id,proposals){const applied=[];const answers=iAnswers[id]||(iAnswers[id]={});for(const [label,value] of Object.entries(proposals||{})){if(answers[label]&&JSON.stringify(answers[label])!==JSON.stringify(value)){if(!confirm(label+String.fromCharCode(10)+"Current: "+answers[label]+String.fromCharCode(10)+"Proposed: "+value+String.fromCharCode(10)+"Replace this answer?"))continue}iEdit(id,label,value);applied.push(label)}return applied}
 async function iLoad(id){rememberClient(id);const r=await(await clientPageRequest("/api/client-intake?locationId="+id)).json();iData[id]=r;
  // Only unsaved edits override the newest server submission, including edits made before Connect.
- if(r.ok){const edits={};for(const label of iDirty[id]||[])edits[label]=(iAnswers[id]||{})[label];iAnswers[id]={...(r.answers||{}),...edits}}render(lastState,lastRun)}
+ if(r.ok){const edits={};for(const label of iDirty[id]||[])edits[label]=(iAnswers[id]||{})[label];iAnswers[id]={...(r.answers||{}),...edits};if(r.status==="received")delete iPrepared[id]}render(lastState,lastRun)}
 let iFieldN=0;
 function iField(id,q,val,prefilled){const w=document.createElement("div");w.className="cds-field ifield"+(prefilled?" prefilled":"");
  const fid="ifield-"+(++iFieldN);
@@ -48222,14 +48911,14 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
  box.appendChild(ch);
  const mode=iMode[id];
  if(mode==="send"&&hasForm){const w=document.createElement("div");w.className="cds-stack";
-  const em=document.createElement("input");em.placeholder="client@business.com";em.className="cds-input";em.setAttribute("aria-label","Client email");
-  const fn=document.createElement("input");fn.placeholder="Their first name (optional)";fn.className="cds-input";fn.setAttribute("aria-label","Client first name");
-  const ag=document.createElement("input");ag.placeholder="Sign it from\u2026 (your name / agency)";ag.className="cds-input";ag.setAttribute("aria-label","Signed from");
+  const em=document.createElement("input");em.placeholder="client@business.com";em.className="cds-input";em.setAttribute("aria-label","Client email");keepDraft(em,id,"email");
+  const fn=document.createElement("input");fn.placeholder="Their first name (optional)";fn.className="cds-input";fn.setAttribute("aria-label","Client first name");keepDraft(fn,id,"firstName");
+  const ag=document.createElement("input");ag.placeholder="Sign it from\u2026 (your name / agency)";ag.className="cds-input";ag.setAttribute("aria-label","Signed from");keepDraft(ag,id,"signedFrom");
   const b=document.createElement("button");b.className="cds-btn";b.textContent="Send the questionnaire";
   b.onclick=async()=>{if(!em.value.trim())return showClientError("Enter the client\u2019s email.",box);if(!confirm("Creates a contact for "+em.value.trim()+" in "+name+" and sends one email from "+(d.sender||"the sender configured in this client\u2019s GoHighLevel account")+". Sender not verified. Save a manual task to confirm the sender and send in GoHighLevel?"))return;b.disabled=true;b.textContent="Saving the task\u2026";
-   const r=await(await clientPageRequest("/api/intake-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,email:em.value.trim(),firstName:fn.value.trim(),agencyName:ag.value.trim(),confirmed:true})})).json();
+   const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,email:em.value.trim(),firstName:fn.value.trim(),agencyName:ag.value.trim(),confirmed:true})})).json());
    if(r.manual){showClientError(r.error,box);const a=document.createElement("a");a.href="https://app.gohighlevel.com/v2/location/"+encodeURIComponent(id)+"/conversations/conversations";a.target="_blank";a.rel="noopener";a.textContent="Open this client\u2019s conversations to confirm the sender and send the questionnaire";box.appendChild(a);b.disabled=false;b.textContent="Send the questionnaire";return}
-   if(r.ok){iMode[id]=null;await iLoad(id)}else{showClientError(r.error,box);b.disabled=false;b.textContent="Send the questionnaire"}};
+   if(r.ok){for(const n of ["email","firstName","signedFrom"])delete iDraft[id+":"+n];iMode[id]=null;await iLoad(id)}else{showClientError(r.error,box);b.disabled=false;b.textContent="Send the questionnaire"}};
   w.appendChild(em);w.appendChild(fn);w.appendChild(ag);w.appendChild(b);
   const note=document.createElement("p");note.className="muted";
   note.textContent="Command OS cannot verify this account\u2019s sender. This button records a manual task to confirm the sender and send the questionnaire in GoHighLevel.";w.appendChild(note);box.appendChild(w)}
@@ -48241,9 +48930,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    tb.onclick=()=>{iSub[id]=k;render(lastState,lastRun)};tabs.appendChild(tb)}
   w.appendChild(tabs);
   const ta=document.createElement("textarea");ta.rows=6;ta.placeholder="Paste your discovery-call transcript (Plaud, Zoom, Otter, notes), or drop a .txt/.vtt/.srt file here";
-  ta.className="cds-textarea";ta.setAttribute("aria-label","Transcript");
+  ta.className="cds-textarea";ta.setAttribute("aria-label","Transcript");keepDraft(ta,id,"transcript");
   ta.ondragover=(e)=>{e.preventDefault();ta.style.borderColor="var(--focus)"};
-  ta.ondrop=async(e)=>{e.preventDefault();ta.style.borderColor="";const f=e.dataTransfer.files[0];if(f){if(!/[.](txt|md|csv|vtt|srt)$/i.test(f.name))return showClientError("Use plain text, .vtt or .srt.",box);ta.value=await f.text()}};
+  ta.ondrop=async(e)=>{e.preventDefault();ta.style.borderColor="";const f=e.dataTransfer.files[0];if(f){if(!/[.](txt|md|csv|vtt|srt)$/i.test(f.name))return showClientError("Use plain text, .vtt or .srt.",box);ta.value=await f.text();iDraft[id+":transcript"]=ta.value}};
   const b=document.createElement("button");b.className="cds-btn";b.textContent="Fill the intake from this";
   const st=document.createElement("p");st.className="muted";
   b.onclick=async()=>{
@@ -48256,10 +48945,10 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    st.textContent=sub==="paste"?"This text goes to your own Claude account to be read, and nowhere else."
     :sub==="url"?"Your own Claude fetches that link, so that site sees the request; the page text then goes to your Claude account and nowhere else."
     :"Your own Claude asks the recorder you connected (Plaud, Otter, Fireflies\u2026) for that call; the transcript then goes to your Claude account and nowhere else.";
-   const r=await(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(payload)})).json();
+   const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(payload)})).json());
    b.disabled=false;b.textContent="Fill the intake from this";
    if(!r.ok){st.textContent=clientPageError(r.error,"Check the source and try reading it again.");return}
-   if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]=sub==="url"?"the link":"your call";
+   if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]=sub==="url"?"the link":"your call";for(const n of ["transcript","url","recorder"])delete iDraft[id+":"+n];
    /* Codex F2 (2026-09-06): a HELD answer (the words were said, the value was worked out) is a
       suggestion beside the field, never an answer. It reaches iAnswers only when the operator
       clicks "Use it". Unverified answers (read by their Claude, not pasted here) are answers,
@@ -48270,9 +48959,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    iNote[id]=(heldKeys.length?heldKeys.length+" answer"+(heldKeys.length===1?" was":"s were")+" worked out rather than heard and NOT filled in: "+heldKeys.join(", ")+". Each is shown beside its field with a Use it button. ":"")+(unv.length?unv.length+" could not be checked against the material because your Claude read it rather than you pasting it here: "+unv.join(", ")+". Check them.":"");
    iMode[id]="fill";render(lastState,lastRun)};
   const urlIn=document.createElement("input");urlIn.placeholder="https://\u2026 a shared transcript or recording page";
-  urlIn.className="cds-input";urlIn.setAttribute("aria-label","Link to the transcript or recording");
+  urlIn.className="cds-input";urlIn.setAttribute("aria-label","Link to the transcript or recording");keepDraft(urlIn,id,"url");
   const recIn=document.createElement("input");recIn.placeholder='e.g. "grab my Plaud recording from this morning with Radiance Med Spa"';
-  recIn.className="cds-input";recIn.setAttribute("aria-label","Which recording to use");
+  recIn.className="cds-input";recIn.setAttribute("aria-label","Which recording to use");keepDraft(recIn,id,"recorder");
   const hint=document.createElement("p");hint.className="muted";
   if(iSub[id]==="paste"){w.appendChild(ta);hint.textContent="Plain text, .vtt and .srt only. The limit is 60,000 characters.";w.appendChild(hint)}
   else if(iSub[id]==="doc"){
@@ -48287,7 +48976,7 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    const up=async(f)=>{if(!f)return;if(f.size>20*1024*1024){showClientError("That file is over 20 MB.",box,"Split it or export the part that matters.");return}
     drop.textContent="Saving "+f.name+"\u2026";
     const b64=await new Promise((res,rej)=>{const rd=new FileReader();rd.onload=()=>res(String(rd.result).split(",")[1]||"");rd.onerror=rej;rd.readAsDataURL(f)});
-    const r=await(await clientPageRequest("/api/intake-document",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,name:f.name,base64:b64})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-document",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,name:f.name,base64:b64})})).json());
     if(!r.ok){showClientError(r.error||"Could not save that file",box);drop.textContent="Drop plain text, .vtt or .srt here, or choose a file. The limit is 60,000 characters.";return}
     iDocs[id]=r.files||[];render(lastState,lastRun)};
    drop.ondragover=(e)=>{e.preventDefault();drop.style.outline="2px solid var(--focus)"};
@@ -48301,7 +48990,7 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
     const nm=document.createElement("span");nm.className="ttl";nm.textContent=f.name;nm.appendChild(mk("span","sub",Math.max(1,Math.round(f.bytes/1024))+" KB"));row.appendChild(nm);
     const rb=document.createElement("button");rb.className="cds-btn ghost";rb.textContent="Fill the intake from this";
     rb.onclick=async()=>{rb.disabled=true;rb.textContent="Reading it\u2026";st.textContent="The text of "+f.name+" goes to your own Claude account to be read, and nowhere else.";
-     const r=await(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,labels:d.questions.map(q=>q.label),file:f.name})})).json();
+     const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,labels:d.questions.map(q=>q.label),file:f.name})})).json());
      rb.disabled=false;rb.textContent="Fill the intake from this";
      if(!r.ok){st.textContent=clientPageError(r.error,"Check the source and try reading it again.");return}
      if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]="the document";iHeld[id]=r.held||{};iUnv[id]=r.unverified||[];const heldKeys=Object.keys(iHeld[id]),unv=iUnv[id];iNote[id]=(heldKeys.length?heldKeys.length+" answer"+(heldKeys.length===1?" was":"s were")+" worked out rather than heard and NOT filled in: "+heldKeys.join(", ")+". Each is shown beside its field with a Use it button. ":"")+(unv.length?unv.length+" could not be checked against the material because your Claude read it rather than you pasting it here: "+unv.join(", ")+". Check them.":"");iMode[id]="fill";render(lastState,lastRun)};
@@ -48342,60 +49031,67 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    save.textContent="Review and submit the real form";save.disabled=Boolean(d.connectionPending);
    save.title="Opens this client's actual GHL form with your available answers filled in. One click submits it, so it lands as a genuine form submission.";
    save.onclick=async()=>{const missing=d.questions.filter(q=>q.required&&(!(iAnswers[id]||{})[q.label]||(Array.isArray(iAnswers[id][q.label])&&!iAnswers[id][q.label].length)));if(missing.length&&!confirm("Required answers still missing: "+missing.map(q=>q.label).join(", ")+". Continue to the real form?"))return;save.disabled=true;save.textContent="Preparing the form\u2026";
-    const r=await(await clientPageRequest("/api/intake-prefill-url",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:iAnswers[id]||{},contact:iContact(id,d.questions)})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill-url",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:iAnswers[id]||{},contact:iContact(id,d.questions)})})).json());
     save.disabled=false;save.textContent="Review and submit the real form";
     if(!r.ok){showClientError(r.error,box);return}
-    const openLink=document.createElement("a");openLink.className="cds-link";openLink.href=r.url;openLink.target="_blank";openLink.rel="noopener";openLink.textContent="Open the prepared form";box.appendChild(openLink);
-    const hint=document.createElement("p");hint.className="muted";
-    const left=r.leftovers||[];
-    hint.textContent=left.length
-      ?"Use Open the prepared form above to review your answers, except "+left.length+" listed below. Handle each as noted there, then click Submit and come back and press Refresh:"
-      :"Use Open the prepared form above, submit it, then return and press Refresh.";
-    box.appendChild(hint);
-    if(left.length){const ul=document.createElement("ul");ul.className="muted";
-     const WHY={"several answers":"pick each of these in the form","contains a plus sign":"type this in the form","no field for this question":"the form has no question for this, so it was not carried. Add it as a note on the contact after you submit"};
-     for(const l of left){const li=document.createElement("li");li.textContent=l.label+": "+l.values.join(", ")+". "+(WHY[l.reason]||l.reason)+".";ul.appendChild(li)}
-     box.appendChild(ul)}
-    const rf=document.createElement("button");rf.className="cds-btn ghost";rf.textContent="Refresh status";
-    rf.onclick=()=>iLoad(id);box.appendChild(rf)};
+    iPrepared[id]={url:r.url,leftovers:r.leftovers||[]};render(lastState,lastRun)};
    box.appendChild(save)}else if(formNote)box.appendChild(formNote);
    const alt=document.createElement("button");alt.className="cds-btn ghost";
 
    alt.textContent="Save draft on this computer";
    alt.title="Saves your answers for this client on this computer. You can return to them later.";
    alt.onclick=async()=>{alt.disabled=true;alt.textContent="Saving\u2026";const savedAnswers={...(iAnswers[id]||{})};
-    const r=await(await clientPageRequest("/api/intake-submit",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:savedAnswers,contact:iContact(id,d.questions)})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-submit",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:savedAnswers,contact:iContact(id,d.questions)})})).json());
     if(r.ok){for(const label of iDirty[id]||[])if(JSON.stringify(iAnswers[id][label])===JSON.stringify(savedAnswers[label]))iDirty[id].delete(label);iMode[id]=null;iPre[id]=[];await iLoad(id)}else{showClientError(r.error,box);alt.disabled=false;alt.textContent="Save draft on this computer"}};
-   box.appendChild(alt)}}
+   box.appendChild(alt);
+   if(hasForm&&iPrepared[id])preparedFormBlock(box,id)}}
  return box}
 let iNote={},iHeld={},iUnv={};
 ${ASSESSMENT_PANEL_JS}
 let rOpen={},rData={},rBusy={},rSeen={};
 let profCache=null,profLoading=false;
 async function profLoad(){if(profLoading)return;profLoading=true;try{profCache=((await(await fetch("/api/agency-profile")).json()).profile)||{}}catch(e){profCache={}}profLoading=false;render(lastState,lastRun)}
-/* What they bought (2026-09-06). Foundation is always built; the ticks decide the features. Nothing saved = the whole preset. */
+/* What they bought (2026-09-06). Foundation is always built; the ticks decide the features.
+   Jerry, 2026-09-29: nothing saved no longer means the whole preset. Approve and Build wait for a save,
+   and nothing is pre-ticked unless the Assessment recorded purchases. */
+/* The ticks and package chosen but not yet saved, kept outside the block so a redraw keeps them (review of c09e946). */
+let scopeDraft={};
+function scopeChosen(state,id){const s=(state.scope||{})[id];return Boolean(s&&(s.wholePreset||(Array.isArray(s.features)&&s.features.length)))}
+function openWhatTheyBought(id){rOpen[id]=true;rSeen[id]=true;const go=()=>{render(lastState,lastRun);requestAnimationFrame(()=>{const t=document.getElementById("wtb-"+id);if(t){t.scrollIntoView({behavior:"smooth",block:"start"});const f=t.querySelector("button,input,select");if(f)f.focus({preventScroll:true})}})};if(!rData[id])rLoad(id).then(go,go);else go()}
 function scopeBlock(id,state){
- const sc=document.createElement("div");sc.className="cds-stack";
+ const sc=document.createElement("div");sc.className="cds-stack";sc.id="wtb-"+id;
  sc.innerHTML="<h4 class='cds-panel-label'>What they bought</h4>";
+ const lead=document.createElement("p");lead.textContent="Tick what the client bought. Only these get built.";sc.appendChild(lead);
  if(!profCache){profLoad();const p=document.createElement("p");p.className="muted";p.textContent="Loading your packages\u2026";sc.appendChild(p);return sc}
  const saved=(state.scope||{})[id]||null;const pk=(profCache.packages||[]);
  const sel=document.createElement("select");sel.className="cds-select";sel.setAttribute("aria-label","Package they bought");
- const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"Everything the preset has (no package)":"Everything the preset has (no packages saved yet: add them on Your agency)";sel.appendChild(o0);
+ const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"No package: tick the features below":"No packages saved yet (add them on Your agency): tick the features below";sel.appendChild(o0);
  for(const p of pk){const o=document.createElement("option");o.value=p.id;o.textContent=p.name+(p.price?" \xB7 "+moneyText(p.price):"");sel.appendChild(o)}
- const prefill=(state.scopePrefill||{})[id];let ticked=new Set(saved&&!saved.wholePreset?saved.features:(prefill||Object.keys(FEATS)));if(saved&&saved.package)sel.value=saved.package;
+ /* Only the features this client's plan has are offered (review of 89acc7d); a tick saved earlier outside it stays visible so it can be removed. */
+ const offered=((state.scopeOffered||{})[id])||Object.keys(FEATS);
+ const prefill=(state.scopePrefill||{})[id];let ticked=new Set(saved?(saved.wholePreset?offered:saved.features):(prefill||[]));if(saved&&saved.package)sel.value=saved.package;
+ const base=JSON.stringify(saved);if(scopeDraft[id]&&scopeDraft[id].base!==base)delete scopeDraft[id];const dr=scopeDraft[id];if(dr){ticked=new Set(dr.ticked);sel.value=dr.pkg}
+ const keepScope=()=>{scopeDraft[id]={ticked:[...ticked],pkg:sel.value,base:base};unsaved.hidden=false};
+ const everything=document.createElement("button");everything.className="cds-btn"+(saved&&saved.wholePreset?" ghost":"");everything.textContent="Everything in the plan";
+ everything.title="Builds every feature in the plan for this client's industry.";
+ everything.onclick=async()=>{everything.disabled=true;const r=await postJSON("/api/scope",{locationId:id,features:null});if(r){if(r.approvalWithdrawn)alert(r.message);delete scopeDraft[id];delete assessmentCards[id];load()}else everything.disabled=false};
+ sc.appendChild(everything);
  const boxes=document.createElement("div");boxes.className="cds-stack";
- function drawBoxes(){boxes.innerHTML="";for(const k of Object.keys(FEATS)){const l=document.createElement("label");l.className="cds-check";
-  const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(k);c.onchange=()=>{if(c.checked)ticked.add(k);else ticked.delete(k)};l.appendChild(c);
+ function drawBoxes(){boxes.innerHTML="";for(const k of Object.keys(FEATS).filter(k=>offered.includes(k)||ticked.has(k))){const l=document.createElement("label");l.className="cds-check";
+  l.dataset.k=k;const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(k);c.onchange=()=>{if(c.checked)ticked.add(k);else ticked.delete(k);keepScope();drawFigs()};l.appendChild(c);
   const t=document.createElement("span");const tb=document.createElement("b");tb.textContent=FEATS[k].name;t.appendChild(tb);t.appendChild(mk("small","",FEATS[k].what));l.appendChild(t);boxes.appendChild(l)}}
  const figs=((state.assessmentFigures||{})[id])||{};
  function drawFigs(){for(const l of boxes.querySelectorAll("label")){const k=l.dataset.k;const old=l.querySelector("em");if(old)old.remove();if(figs[k]&&!ticked.has(k)){const e=document.createElement("em");e.className="cds-chip warn";e.textContent="Not bought: "+figs[k]+".";l.querySelector("span").appendChild(e)}}}
- sel.onchange=()=>{const p=pk.find(x=>x.id===sel.value);ticked=new Set(p?p.features:Object.keys(FEATS));drawBoxes();drawFigs()};drawBoxes();
- for(const l of boxes.querySelectorAll("label")){const c=l.querySelector("input");const k=Object.keys(FEATS)[[...boxes.querySelectorAll("label")].indexOf(l)];l.dataset.k=k;c.addEventListener("change",drawFigs)}drawFigs();
+ sel.onchange=()=>{const p=pk.find(x=>x.id===sel.value);if(p)ticked=new Set(p.features);keepScope();drawBoxes();drawFigs()};drawBoxes();drawFigs();
  const note=document.createElement("p");note.className="muted";note.textContent="Always built, whatever is ticked: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing. Unticked features go in the client document as available next.";
  const sv=document.createElement("button");sv.className="cds-btn ghost";sv.textContent="Save what they bought";
- sv.onclick=async()=>{const all=Object.keys(FEATS).every(k=>ticked.has(k));const body={locationId:id,features:(all&&!sel.value)?null:[...ticked]};if(sel.value)body.package=sel.value;if(await postJSON("/api/scope",body)){delete assessmentCards[id];load()}};
- const status=document.createElement("p");status.className="muted";status.textContent=saved?(saved.wholePreset?"Saved: the whole preset. The build follows this.":"Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):prefill?"Not confirmed yet: ticked from what they bought. Nothing is built until you save.":"Nothing saved: the whole preset is built.";
- sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(status);
+ const status=document.createElement("p");status.className="muted";status.setAttribute("role","status");
+ sv.onclick=async()=>{if(!ticked.size){status.textContent="Tick at least one feature, or choose Everything in the plan.";return}
+  if(![...ticked].some(k=>offered.includes(k))){status.textContent="None of the ticked features is in this client's plan. Tick features from the list, or choose Everything in the plan.";return}
+  const all=offered.every(k=>ticked.has(k));const body={locationId:id,features:(all&&!sel.value)?null:[...ticked]};if(sel.value)body.package=sel.value;const r=await postJSON("/api/scope",body);if(r){if(r.approvalWithdrawn)alert(r.message);delete scopeDraft[id];delete assessmentCards[id];load()}};
+ status.textContent=saved?(saved.wholePreset?"Saved: everything in the plan. The build follows this.":saved.features.length?"Saved: "+saved.features.filter(k=>offered.includes(k)).length+" of "+offered.length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this.":"Saved with nothing ticked, so nothing can be built. Tick what they bought, or choose Everything in the plan, and save."):prefill?"Not confirmed yet: ticked from what they bought. Nothing is built until you save.":"Nothing saved yet. Choose and save before approving.";
+ const unsaved=mk("span","cds-chip warn","Not saved yet");unsaved.hidden=!scopeDraft[id];
+ sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(unsaved);sc.appendChild(status);
  return sc}
 async function rLoad(id){const r=await(await fetch("/api/review?locationId="+id)).json();rData[id]=r;render(lastState,lastRun)}
 // Finding 20 (2026-08-26): writing the review takes 30\u201390 s and the page re-renders every few seconds meanwhile,
@@ -48426,7 +49122,9 @@ function reviewPanel(id,name,state,run){const r=rData[id];const d=document.creat
  if(!r||!r.ok){if(!busy){const p=document.createElement("p");if(r&&r.error&&r.error!=="not generated yet"){p.className="cds-callout warn";p.setAttribute("role","alert")}else p.className="muted";
    p.textContent=r&&r.error?r.error:"Turn their intake answers into strategy: who they really sell to, whether the offer holds up, what the account is missing, and what to build first.";
    d.appendChild(p)}
-  d.appendChild(gen);return d}
+  d.appendChild(gen);
+  /* What they bought decides the build, so it is here even before the review is written (2026-09-29). */
+  d.appendChild(scopeBlock(id,state));return d}
  if(r.headline){const h=document.createElement("div");h.className="cds-callout info headline";h.textContent=moneyText(r.headline);d.appendChild(h)}
  if(r.ica){const s1=document.createElement("div");s1.className="cds-stack";s1.innerHTML="<h4 class='cds-panel-label'>Who they actually sell to</h4>";
   const p1=document.createElement("p");p1.textContent=moneyText(r.ica.who||"");s1.appendChild(p1);
@@ -48489,7 +49187,7 @@ function clientPageError(raw,next){
  return text+(action?" "+action:"")}
 function showClientError(raw,container,next){const parent=container||document.getElementById("main");let e=parent.querySelector('[role="alert"]');if(!e){e=document.createElement("p");e.setAttribute("role","alert");e.className="cds-callout warn";parent.appendChild(e)}e.textContent=clientPageError(raw,next)}
 async function clientPageRequest(url,options){try{const response=await fetch(url,options);const data=await response.json();if(!response.ok&&data.ok!==false)data.ok=false;return {json:async()=>data}}catch(e){return {json:async()=>({ok:false,error:/^[/]api[/](?:client-)?intake/.test(url)?"GHL Command could not confirm the result. Refresh the intake to check its status.":"GHL Command could not confirm the result; check GoHighLevel before trying again to avoid repeating a change."})}}}
-function pendingCard(c,state,intake=false){const div=document.createElement("section");div.className="cds-panel client";
+function pendingCard(c,state,intake=false){const div=document.createElement("section");div.className="cds-panel client";div.setAttribute("data-key",c.locationId);
  const head=document.createElement("div");head.className="cds-panel-head client-head";
  const txt=mk("div","txt");const h=document.createElement("h2");h.className="cds-panel-title";h.textContent=c.name;txt.appendChild(h);head.appendChild(txt);
  const pill=chip("warn","Needs connecting");head.appendChild(pill);
@@ -48636,7 +49334,7 @@ function card(c,state,run){const st=(state.clients[c.locationId]||{stages:STAGES
  // A template or hidden account opens only so its owner can lock or unlock it and change its
  // type: nothing on its card builds into it (review L-1; a template can be the live snapshot source).
  const parkedType=["template","hidden"].includes(typeOf(state,c.locationId));
- const div=document.createElement("section");div.className="cds-panel client";
+ const div=document.createElement("section");div.className="cds-panel client";div.setAttribute("data-key",c.locationId);
  const head=document.createElement("div");head.className="cds-panel-head client-head";
  const htxt=mk("div","txt");const h=document.createElement("h2");h.className="cds-panel-title";h.textContent=c.name;htxt.appendChild(h);head.appendChild(htxt);
  if(sandbox){const sb=chip("info","");sb.title="Practice accounts skip typing the client name. Review and approve the plan before building.";sb.textContent="Practice account";htxt.appendChild(sb)}
@@ -48679,7 +49377,7 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
  const nextBox=document.createElement("div");nextBox.className="cds-stack snext";div.appendChild(nextBox);
  const row=document.createElement("div");row.className="cds-flow stages";row.setAttribute("role","list");
  let curLive=false;
- STAGES.forEach((name,i)=>{const stale=staleOf(i);const el=document.createElement("div");el.className="cds-node stage "+(stale?"pending":(st[i]||"pending"))+(i===curI?" here hit":"");el.setAttribute("role","listitem");
+ STAGES.forEach((name,i)=>{const stale=staleOf(i);const el=document.createElement("div");el.className="cds-node stage "+(stale?"pending":(st[i]||"pending"))+(i===curI?" here hit":"");el.setAttribute("role","listitem");el.setAttribute("data-key",c.locationId+":"+i);
   const gate=GATES[String(i)];
   const oc0=(state.outcomes||{})[c.locationId+":"+i];const notPassed=(st[i]||"pending")==="pending"&&oc0&&(oc0.issues||[]).length>0;
   if(notPassed)el.className+=" notpassed";
@@ -48713,7 +49411,9 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
    const clock=document.createElement("div");clock.className="cds-num";
 
    const began=run.startedAt?new Date(run.startedAt).getTime():0;
-   const tick=()=>{if(!began)return;const sec=Math.max(0,Math.round((Date.now()-began)/1000));
+   /* The clock counts on the page alone, so it only counts while the status is fresh: a page that has
+      not heard from the server for 15s freezes and says so, rather than looking busy (2026-09-29). */
+   const tick=()=>{if(!began)return;if(statusIsStale()){clock.textContent="checking\u2026";return}const sec=Math.max(0,Math.round((Date.now()-began)/1000));
     clock.textContent="working "+(sec<60?sec+"s":Math.floor(sec/60)+"m "+(sec%60)+"s")};
    tick();if(began){const h=setInterval(()=>{if(!clock.isConnected){clearInterval(h);return}tick()},1000)}
    box.appendChild(clock);
@@ -48752,8 +49452,11 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
   else if(!live){const note=mkNote();what.appendChild(note||about)}
   if(POWERED.includes(i)&&(st[i]||"pending")!=="done"){el.style.cursor="default";
    el.title="Command OS runs and checks this step. Its result comes from a run, never from a click."}
-  const gateLabel=({2:"Approve this plan",5:"Confirm these tasks are finished",6:"Sign this client live"})[i];
-  const mkGate=cls=>{const action=document.createElement("button");action.className=cls;action.textContent=gateLabel;action.onclick=()=>{if(i===2)return approveBuilding();return markStage(c.locationId,i,"done")};return action};
+  /* Jerry, 2026-09-29: Approve waits for What they bought. Until a selection is saved the gate
+     is "Choose what the client bought", which opens the Blueprint Review at that block. */
+  const mustChoose=i===2&&!scopeChosen(state,c.locationId);
+  const gateLabel=mustChoose?"Choose what the client bought":({2:"Approve this plan",5:"Confirm these tasks are finished",6:"Sign this client live"})[i];
+  const mkGate=cls=>{const action=document.createElement("button");action.className=cls;action.textContent=gateLabel;action.onclick=()=>{if(mustChoose)return openWhatTheyBought(c.locationId);if(i===2)return approveBuilding();return markStage(c.locationId,i,"done")};return action};
   const canBuild=!parkedType&&(i<=1||sandbox||Boolean((state.buildApproved||{})[c.locationId]));
   const runIt=async(ev)=>{ev.stopPropagation();if(i===0&&!confirm("In "+c.name+", Intake writes custom fields, one form, and one published notification workflow."+String.fromCharCode(10,10)+INTAKE_NOTIFICATION_REVIEW.join(String.fromCharCode(10))+String.fromCharCode(10,10)+"Create or repair these intake items?"))return;if(i===4&&PAGE_PLANS.includes(c.locationId)&&!confirm("Verify submits one test lead to the pages "+c.name+"\u2019s older build made, watches it arrive, and deletes the test contact afterwards. It may fire this client\u2019s own automations once. Run the check?"))return;const res=await fetch("/api/run",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,stage:i,intakeConfirmed:i===0})});const j=await res.json();if(!j.ok)alert(j.error);load()};
   const mkRun=(cls,label)=>{const b=document.createElement("button");b.className=cls;
@@ -48765,10 +49468,11 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
      A gate the owner has already answered offers nothing. */
   if(gateOpen&&!anyBusy&&!parkedType&&i!==curI)act.appendChild(mkGate("cds-link sactbtn"));
   if(canBuild&&POWERED.includes(i)&&i!==curI)act.appendChild(mkRun("cds-link sactbtn srun",(st[i]||"pending")==="done"?"Run again":"Run this step"));
-  if(i===curI){const main=document.createElement("div");
+  if(i===curI){const main=document.createElement("div");main.setAttribute("data-key",c.locationId+":"+i+":next");
    const k=mk("div","cds-panel-label sk",parkedType?"Building is off":"Next step");main.appendChild(k);
    const h3=document.createElement("h3");h3.className="cds-panel-title";h3.textContent=parkedType?"Nothing is built into this account":(i+1)+". "+LABELS[i];main.appendChild(h3);
    const pa=document.createElement("p");pa.textContent=parkedType?"It opens here so you can lock or unlock it, or change its type to Client to build it.":stepAbout(i,c,true);main.appendChild(pa);
+   if(mustChoose&&!parkedType){const pc=document.createElement("p");pc.className="swarn";pc.textContent="First choose what the client bought. Only those parts get built.";main.appendChild(pc)}
    if(live)main.appendChild(mkLive());
    if(stale&&!live){const w=document.createElement("div");w.className="cds-row";w.appendChild(chip(chipOf[1],chipOf[0]));w.appendChild(mk("span","swarn",stale.reason));main.appendChild(w)}
    const pn=mkNote();if(pn){const w=document.createElement("div");w.className="snoteline";w.appendChild(pn);main.appendChild(w)}
@@ -48804,7 +49508,9 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
  if(view.stale.length){const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));for(const stale of view.stale){const p=document.createElement("p");p.textContent=LABELS[stale.stage]+": stale. "+stale.reason;d.appendChild(p)}div.appendChild(d)}
  if(view.approvedAt){const p=document.createElement("p");p.textContent="Building approved on "+niceDate(view.approvedAt,true)+".";div.appendChild(p)}
  for(const repair of view.repairs){const p=document.createElement("p");p.textContent="Live workflow repair: "+repair.name+". "+repair.changes.join(" ");div.appendChild(p)}
- if(view.planHash&&!parkedType){const approve=document.createElement("button");approve.className="cds-btn ghost";approve.textContent="Approve building\u2026";approve.onclick=async()=>{const typed=sandbox?c.name:prompt("Approve building and the listed live workflow repairs for "+c.name+". Type the client name to confirm.");if(typed===null)return;if(await postJSON("/api/build-approval",{locationId:c.locationId,confirmName:typed,repairHashes:view.repairs.map(r=>r.hash)}))load()};div.appendChild(approve)}
+ /* No "Approve building\u2026" while nothing is chosen (review of 89acc7d): it would ask for a name and then refuse. */
+ if(view.planHash&&!parkedType&&!scopeChosen(state,c.locationId)){const ch=document.createElement("button");ch.className="cds-btn ghost";ch.textContent="Choose what the client bought";ch.onclick=()=>openWhatTheyBought(c.locationId);div.appendChild(ch)}
+ else if(view.planHash&&!parkedType){const approve=document.createElement("button");approve.className="cds-btn ghost";approve.textContent="Approve building\u2026";approve.onclick=async()=>{const typed=sandbox?c.name:prompt("Approve building and the listed live workflow repairs for "+c.name+". Type the client name to confirm.");if(typed===null)return;if(await postJSON("/api/build-approval",{locationId:c.locationId,confirmName:typed,repairHashes:view.repairs.map(r=>r.hash)}))load()};div.appendChild(approve)}
  }else{const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));const p=document.createElement("p");p.textContent="The executable plan is prepared when Build runs.";d.appendChild(p);div.appendChild(d)}
  if(view?.handoff)div.appendChild(unnest(handoffPanel(c,view)));
  const _prot=PROTECTED[c.locationId];
@@ -48823,8 +49529,9 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
    ab.appendChild(s1);ab.appendChild(rv);ab.appendChild(protectBtn(c))}
   else if(parkedType){ab.appendChild(protectBtn(c))}
   else{const w=document.createElement("span");w.className="muted";w.textContent="Automated building is off for this client. ";
-   const btn=document.createElement("button");btn.className="cds-btn ghost";btn.textContent="Approve building\u2026";
-   btn.onclick=approveBuilding;
+   const btn=document.createElement("button");btn.className="cds-btn ghost";
+   if(scopeChosen(lastState,c.locationId)){btn.textContent="Approve building\u2026";btn.onclick=approveBuilding}
+   else{btn.textContent="Choose what the client bought";btn.onclick=()=>openWhatTheyBought(c.locationId)}
    ab.appendChild(w);ab.appendChild(btn);ab.appendChild(protectBtn(c))}
   div.appendChild(ab)}
  // A "live" claim is re-derived from the signature, never trusted from the
@@ -48942,7 +49649,7 @@ async function postJSON(url,body){
  catch(e){alert("Command OS could not confirm the result. Refresh this client to read its saved state before retrying.");return false}
  try{j=await r.json()}catch(e){}
  if(!r.ok||(j&&j.ok===false)){alert((j&&j.error)||"That did not go through, and nothing was changed.");return false}
- return true}
+ return j||true}
 /* Nothing hand-markable that Command OS can check for itself. Steps it runs are marked
    by the run; steps that need a person are marked by that person, on the record. */
 async function markStage(id,i,status){
@@ -48952,7 +49659,24 @@ async function markStage(id,i,status){
  const r=await(await fetch("/api/stage",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,stage:i,status:status,by:who})})).json();
  if(!r.ok){alert(r.error);return}
  await loadQueue();load()}
-async function loadQueue(){try{const r=await fetch("/api/queue",{method:"POST",headers:{"Content-Type":"application/json"},body:"{}"});queueData=await r.json();if(!r.ok)throw new Error(queueData.error||"The work queue could not be read.");if(window.cdsQueueBadge&&queueData.counts)window.cdsQueueBadge(queueData.counts.you||0)}catch(e){queueData={ok:false,error:e.message||"The work queue could not be read."}}}
+/* cheap: a background refresh uses GET /api/queue, which derives the queue from the saved board without re-reading
+   every client's intake from GoHighLevel; the POST (which does) stays for the page's own loads. */
+/* Three ways to read the queue:
+   - undefined: the page's own load and the operator's actions. POST {}: re-reads every started client's intake.
+   - "pending": a background re-read (a return to the tab, every 4th heartbeat load). POST {only:"pending"}: re-reads
+     only clients whose saved intake is not yet "received", plus the one open here. At most one queue POST is in
+     flight, and a background one is skipped (the GET is used) within 30s of the last one finishing.
+   - "get": GET, derived from the saved board with no GoHighLevel reads.
+   A background read that fails keeps the last good queue rather than blanking it. */
+let queuePostBusy=false,queuePostAt=0;
+async function loadQueue(mode){
+ if(mode==="pending"&&(queuePostBusy||Date.now()-queuePostAt<30000))mode="get";
+ const background=mode==="get"||mode==="pending";const post=mode!=="get";
+ const init=mode==="get"?undefined:{method:"POST",headers:{"Content-Type":"application/json"},body:mode==="pending"?JSON.stringify({only:"pending",open:activeId||undefined}):"{}"};
+ if(post)queuePostBusy=true;
+ try{const r=await fetch("/api/queue",init);const q=await r.json();if(!r.ok||!q||q.ok===false)throw new Error((q&&q.error)||"The work queue could not be read.");queueData=q;if(window.cdsQueueBadge&&queueData.counts)window.cdsQueueBadge(queueData.counts.you||0)}
+ catch(e){if(!(background&&queueData&&queueData.ok))queueData={ok:false,error:e.message||"The work queue could not be read."}}
+ finally{if(post){queuePostBusy=false;queuePostAt=Date.now()}}}
 /* A whole first sentence, never a line cut mid-thought. */
 function firstSentence(s){const t=String(s||"").split(String.fromCharCode(10)).map(x=>x.trim()).filter(Boolean)[0]||"";const m=/^(.+?[.!?])(\\s|$)/.exec(t);return m?m[1]:t}
 /* Build text an owner cannot read: quoted names, tag and custom value keys (business_phone), plus signs,
@@ -49036,11 +49760,11 @@ function queueBlock(match){const q=queueData;if(!q||!q.ok)return queueReadError(
  frag.appendChild(now);
  /* The rest fold away (Disclosure: cds-more), each in a Panel of its own that says what is inside. */
  if(later.length){const p=panel("Not started yet",later.length+" "+plural(later.length,"account")+" not started");p.classList.add("q-later");
-  const d=mk("details","cds-more");d.open=showQueueRest;d.ontoggle=()=>{showQueueRest=d.open};
+  const d=mk("details","cds-more");d.setAttribute("data-key","queue-rest");d.open=showQueueRest;d.ontoggle=()=>{showQueueRest=d.open};
   d.appendChild(mk("summary","","Show the "+later.length+" "+plural(later.length,"step")+" not started"));
   d.appendChild(listRows(later.map(queueRow),"queue-later"));p.appendChild(d);frag.appendChild(p)}
  if(fin.length){const p=panel("Finished",fin.length+" "+plural(fin.length,"account")+" finished");p.classList.add("q-finished");
-  const d=mk("details","cds-more");d.open=showLive;d.ontoggle=()=>{showLive=d.open};
+  const d=mk("details","cds-more");d.setAttribute("data-key","queue-live");d.open=showLive;d.ontoggle=()=>{showLive=d.open};
   d.appendChild(mk("summary","","Show the "+fin.length+" finished "+plural(fin.length,"account")));
   for(const signed of [true,false]){const group=fin.filter(f=>Boolean(f.live)===signed);if(!group.length)continue;
    d.appendChild(mk("div","cds-panel-label",signed?"Finished and live ("+group.length+")":"Finished, not signed live ("+group.length+")"));
@@ -49266,7 +49990,7 @@ send.disabled=!published;
  if(!confirm("Send one email from "+c.name+"\u2019s account to "+r.preview.email+" with the handoff at "+r.url+"?"))return;
  const result=await(await fetch("/api/handoff-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,hash:r.preview.hash,confirmed:true})})).json();note.textContent=result.note||result.error;
  }catch(e){note.textContent=e.message||"The result could not be confirmed. Check Conversations before retrying."}finally{send.disabled=false}};box.appendChild(send);return box}
-function pollCap(){if(capPoll)return;capPoll=setInterval(async()=>{try{const r=await(await fetch("/api/run/status")).json();const s=await(await fetch("/api/state")).json();if(!r.running){clearInterval(capPoll);capPoll=null;capRun=null;capReads=null;capReadsFor=""}render(s,r)}catch(e){}},2000)}
+function pollCap(){if(capPoll)return;capPoll=setInterval(async()=>{try{const r=await fetchRunStatus();const s=await(await fetch("/api/state")).json();if(!r.running){clearInterval(capPoll);capPoll=null;capRun=null;capReads=null;capReadsFor=""}if(!shouldRedraw(lastRun,r))return;if(!r.running||dataSig(s,r)!==lastDrawnSig){render(s,r);hideFinishNote()}}catch(e){}},2000)}
 
 /* PageHeader: kicker, the title as a sentence, one muted line, at most one primary action. */
 function screenHead(title,sub,kicker,action){const d=mk("div","cds-page-head");const t=mk("div","txt");
@@ -49313,9 +50037,34 @@ function homeBlock(state,run){const wrap=mk("div","board");
    li.onclick=go;li.onkeydown=(e)=>{if(e.key==="Enter"||e.key===" "){e.preventDefault();go()}};return li}),"board-needs"))}
  two.appendChild(needs);
  const priv=panel("Privacy","What stays on this computer");priv.classList.add("privacy");for(const line of PRIVACY_SHORT)priv.appendChild(mk("p","muted small",line));
- {const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));for(const line of PRIVACY_LINES)d.appendChild(mk("p","muted small",line));priv.appendChild(d)}two.appendChild(priv);
+ {const d=mk("details","cds-details");d.setAttribute("data-key","home-privacy");d.appendChild(mk("summary","","Details"));for(const line of PRIVACY_LINES)d.appendChild(mk("p","muted small",line));priv.appendChild(d)}two.appendChild(priv);
  wrap.appendChild(two);return wrap}
-function render(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...state.roster)}syncReviews(state);lastState=state;lastRun=run;
+/* Every redraw keeps the view (2026-09-29, Jerry: "anything I expand closes itself within 1 to 3 seconds").
+   The page is rebuilt from data, so a disclosure the operator opened, the scroll position and the cursor in
+   a field would all reset. Before drawing: note which <details> are open or closed, keyed by the nearest
+   data-key (client, client:stage) plus the summary words, and where focus and the caret are. After: put
+   them back. Toggles such as See issues already live in state (oOpen), and survive on their own. */
+let lastDrawnSig="";
+/* generatedAt is stamped fresh on every queue read (work-queue.ts), so it is left out: with it, no two reads ever matched
+   and every background refresh redrew (review of c09e946). */
+function dataSig(state,run){try{return JSON.stringify([state,run,typeof queueData==="undefined"?null:queueData],(k,v)=>k==="generatedAt"?undefined:v)}catch(e){return String(Date.now())}}
+function keyOf(el,root){const a=el.closest("[data-key]");return a&&root.contains(a)?a.getAttribute("data-key"):"main"}
+function detailsKeys(root){const out=[];const seen={};for(const d of root.querySelectorAll("details")){const sm=d.querySelector("summary");
+ const base=keyOf(d,root)+"|"+String(d.className||"")+"|"+String(sm?sm.textContent:"").replace(/[0-9]+/g,"#").trim();seen[base]=(seen[base]||0)+1;out.push([d,base+"#"+seen[base]])}return out}
+function fieldKey(el,root){return keyOf(el,root)+"|"+el.tagName+"|"+(el.getAttribute("aria-label")||el.getAttribute("name")||el.getAttribute("placeholder")||el.id||"")}
+function captureView(){const m=document.getElementById("main");if(!m)return null;const open=new Set(),closed=new Set();
+ for(const [d,k] of detailsKeys(m))(d.open?open:closed).add(k);
+ let focus=null;const a=document.activeElement;
+ if(a&&m.contains(a)&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName)){const k=fieldKey(a,m);const same=[...m.querySelectorAll(a.tagName)].filter(x=>fieldKey(x,m)===k);
+  let st=null,en=null;try{st=a.selectionStart;en=a.selectionEnd}catch(e){}focus={key:k,tag:a.tagName,n:same.indexOf(a),st:st,en:en}}
+ return {open:open,closed:closed,focus:focus,x:window.scrollX,y:window.scrollY}}
+function restoreView(v){const m=document.getElementById("main");if(!v||!m)return;
+ for(const [d,k] of detailsKeys(m)){if(v.open.has(k)&&!d.open)d.open=true;else if(v.closed.has(k)&&d.open)d.open=false}
+ if(v.focus){const el=[...m.querySelectorAll(v.focus.tag)].filter(x=>fieldKey(x,m)===v.focus.key)[v.focus.n];
+  if(el&&document.activeElement!==el){try{el.focus({preventScroll:true})}catch(e){}try{if(v.focus.st!=null)el.setSelectionRange(v.focus.st,v.focus.en)}catch(e){}}}
+ if(window.scrollX!==v.x||window.scrollY!==v.y){try{window.scrollTo(v.x,v.y)}catch(e){}}}
+function render(state,run){const v=captureView();try{renderPage(state,run)}finally{lastDrawnSig=dataSig(state,run);restoreView(v)}}
+function renderPage(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...state.roster)}syncReviews(state);lastState=state;lastRun=run;
  if(state&&state.protectedAccounts)PROTECTED=state.protectedAccounts;const m=document.getElementById("main");m.innerHTML="";
  /* Four screens share this page's data and differ only in what they show. */
  if(SCREEN==="new"){m.classList.add("ncflow");const head=screenHead(HEADS.new.title,HEADS.new.sub,HEADS.new.kicker);head.querySelector(".cds-page-sub").classList.add("nc-lead");m.appendChild(head);
@@ -49391,7 +50140,7 @@ function render(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...sta
   const list=panel("Client accounts",actC?"Your other client accounts":"Your client accounts");if(!actC)list.id="clients";
   if(rest.length){list.appendChild(listRows(rest.map(c=>acctRow(c,state,run)),"clients-rest","accounts"));
    list.appendChild(mk("p","switchnote","One account at a time. Opening another puts this one back in the list. Nothing is lost."))}
-  if(parkedRest.length){const d=mk("details","cds-more");d.open=showParked;d.ontoggle=()=>{showParked=d.open};
+  if(parkedRest.length){const d=mk("details","cds-more");d.setAttribute("data-key","parked-rest");d.open=showParked;d.ontoggle=()=>{showParked=d.open};
    d.appendChild(mk("summary","","Show the "+parkedRest.length+" template and hidden "+plural(parkedRest.length,"account")));
    d.appendChild(listRows(parkedRest.map(c=>acctRow(c,state,run)),"clients-parked"));list.appendChild(d)}
   m.appendChild(list)}}
@@ -49794,7 +50543,7 @@ async function runDashboard(argv) {
     let ffAdmin;
     try {
       const b = workflowReadConnection(registry2, c);
-      stepLog = liveStepLogReader(locationId2, () => b.buildHeaders());
+      stepLog = liveStepLogReader(locationId2, () => b.buildHeaders(), fetch, (h) => b.invalidateIdToken(h["token-id"] ?? null));
       ffAdmin = builderAdmin(b);
     } catch {
     }
@@ -50560,6 +51309,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const p = scopePrefillFor(st, loc);
           if (p) scopePrefill[loc] = p;
         }
+        const scopeOffered = Object.fromEntries(currentRoster().map((c) => [c.locationId, offeredFeaturesFor(st, c.locationId)]));
         const buildViews = Object.fromEntries(currentRoster().map((c) => {
           const saved = readSavedPlan(c.locationId);
           const approval = st.planApprovals?.[c.locationId];
@@ -50592,7 +51342,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }
         for (const [id, view2] of Object.entries(buildViews)) if (!view2.planHash || !view2.approvedAt || view2.stale.length || st.outcomes?.[`${id}:4`]?.ok !== true || st.manualTasks?.[id]?.length || st.outcomes?.[`${id}:4`]?.issues?.length) liveClaims[id] = { live: false };
         const outcomes = Object.fromEntries(Object.entries(st.outcomes ?? {}).map(([key, value]) => [key, { ...value, ...key.endsWith(":4") && value.verification ? { plain: verifyPanelOutcome(value) } : { ...plainFallbackOutcome(value), plain: plainFallbackOutcome(value.plain ?? value) }, error: value.error ? "The step did not finish. Check the account before retrying." : void 0 }]));
-        res.end(JSON.stringify({ ...st, assessmentFigures, scopePrefill, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
+        res.end(JSON.stringify({ ...st, assessmentFigures, scopePrefill, scopeOffered, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
           const records = st.outcomes?.[`${id}:4`]?.verification;
           const allowed = records ? verifyReadback(records).allowPublishing : false;
           return [id, tasks2.map((t) => ({ ...t, text: verifyPublishingText(plainFallback(t.text, { nextStep: true }), allowed) })).filter((t) => t.text)];
@@ -50609,24 +51359,23 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       return;
     }
     if (req.method === "POST" && url === "/api/queue") {
-      readBody(req, res, 5e3, async () => {
+      readBody(req, res, 5e3, async (body) => {
         try {
           const roster2 = currentRoster();
           const state = readCockpitState();
-          const inputs = { ...state.intakeInputs };
-          for (const entry of roster2) {
-            if (state.clients[entry.locationId]?.stages?.[0] !== "done") continue;
-            const c = clientFor(entry.locationId);
-            if (!c) continue;
-            const snap = await readIntakeSnapshot(c, entry.locationId);
-            if (snap.status === "unavailable") throw new Error("The work queue could not read intake answers. Retry the queue.");
+          const { reread, failed } = await rereadQueueIntakes({ roster: roster2, state, filter: queueScanFilter(body), read: async (locationId2) => {
+            const c = clientFor(locationId2);
+            if (!c) return null;
+            const snap = await readIntakeSnapshot(c, locationId2);
+            if (snap.status === "unavailable") return "unavailable";
             const answers = normalizedIntake(snap);
-            inputs[entry.locationId] = { answers, status: snap.status, hash: intakeInput(answers, state.accounts?.[entry.locationId]?.industry, composeQuestionSet({ industry: state.accounts?.[entry.locationId]?.industry, agency: readOverlay() })) };
-          }
-          const latest = readCockpitState();
-          writeCockpitState({ ...latest, intakeInputs: inputs });
+            return { answers, status: snap.status, hash: intakeInput(answers, state.accounts?.[locationId2]?.industry, composeQuestionSet({ industry: state.accounts?.[locationId2]?.industry, agency: readOverlay() })) };
+          } });
+          const latest = mergeQueueIntakes(readCockpitState(), reread);
+          if (Object.keys(reread).length) writeCockpitState(latest);
+          const inputs = latest.intakeInputs ?? {};
           res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify(deriveQueue({ roster: roster2, state: { ...latest, intakeInputs: inputs, staleClients: roster2.filter((c) => stageFreshness(inputs[c.locationId]?.hash, readSavedPlan(c.locationId), latest.planApprovals?.[c.locationId], latest.outcomes?.[`${c.locationId}:3`], latest.outcomes?.[`${c.locationId}:4`], latest.outcomes?.[`${c.locationId}:1`]).length).map((c) => c.locationId) }, run: activeRun2 })));
+          res.end(JSON.stringify({ ...deriveQueue({ roster: roster2, state: { ...latest, intakeInputs: inputs, staleClients: roster2.filter((c) => stageFreshness(inputs[c.locationId]?.hash, readSavedPlan(c.locationId), latest.planApprovals?.[c.locationId], latest.outcomes?.[`${c.locationId}:3`], latest.outcomes?.[`${c.locationId}:4`], latest.outcomes?.[`${c.locationId}:1`]).length).map((c) => c.locationId) }, run: activeRun2 }), ...failed.length ? { intakeUnread: failed } : {} }));
         } catch {
           res.writeHead(503, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: false, error: "The work queue could not be read. Retry the queue." }));
@@ -50652,6 +51401,11 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           let st0 = readCockpitState();
           let inputHash;
           let normalizedAnswers;
+          if (stage === 3) {
+            if (!hasChosenScope(st0, rk)) throw new Error(who.clientKey ? secondClientChooseMessage(who.clientKey, who.name) : CHOOSE_BEFORE_BUILD);
+            const ap = st0.planApprovals?.[rk];
+            if (ap && ap.scopeHash !== scopeHashOf(st0.scope?.[rk])) throw new Error(SCOPE_CHANGED_SINCE_APPROVAL);
+          }
           if (who.clientKey && [3, 4].includes(stage)) {
             inputHash = secondClientInputHash(readSavedPlan(rk));
             assertBuildApproval(st0.planApprovals?.[rk], inputHash);
@@ -51212,7 +51966,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       }
       const name = currentRoster().find((r) => r.locationId === locationId2)?.name || locationId2;
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(reviewDocumentHtml(review, { scope: documentScopeFor(st, locationId2), assessment: st.assessmentAttachments?.[locationId2], purchasedFeatureIds: assessmentPurchasesFor(st, locationId2), planLines: readSavedPlan(locationId2) ? executablePlanLines(readSavedPlan(locationId2)) : [], clientName: name, agencyName: q3.get("agency") || st.agencyName, accent: q3.get("accent") || st.agencyAccent }));
+      res.end(reviewDocumentHtml(review, { scope: documentScopeFor(st, locationId2, readSavedPlan(locationId2)), assessment: st.assessmentAttachments?.[locationId2], purchasedFeatureIds: assessmentPurchasesFor(st, locationId2), planLines: readSavedPlan(locationId2) ? executablePlanLines(readSavedPlan(locationId2)) : [], clientName: name, agencyName: q3.get("agency") || st.agencyName, accent: q3.get("accent") || st.agencyAccent }));
       return;
     }
     if (req.method === "GET" && url === "/api/review") {
@@ -51228,15 +51982,16 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const who = cockpitClient(readCockpitState(), currentRoster(), locationId2, clientKey);
           const rk = who.recordKey;
           if (PROTECTED_LOCATIONS[who.locationId]) throw new Error(PROTECTED_LOCATIONS[who.locationId] + " can never be approved for building.");
+          const current = readCockpitState();
+          if (!revoke && !hasChosenScope(current, rk)) throw new Error(who.clientKey ? secondClientChooseMessage(who.clientKey, who.name) : CHOOSE_WHAT_THEY_BOUGHT);
           if (!revoke && !readAccountRulesSafe().sandboxes[who.locationId] && String(confirmName || "").trim().toLowerCase() !== who.name.trim().toLowerCase()) {
             throw new Error(`Type the client's name exactly ("${who.name}") to approve automated building.`);
           }
-          const current = readCockpitState();
           const at = (/* @__PURE__ */ new Date()).toISOString();
           const approvals = { ...current.planApprovals };
           if (revoke) delete approvals[rk];
           else if (who.clientKey) {
-            approvals[rk] = { inputHash: secondClientInputHash(readSavedPlan(rk)), at, repairHashes: [], staffHash: staffListHash(current.staffRoster?.[who.locationId]) };
+            approvals[rk] = { inputHash: secondClientInputHash(readSavedPlan(rk)), at, repairHashes: [], staffHash: staffListHash(current.staffRoster?.[who.locationId]), scopeHash: scopeHashOf(current.scope?.[rk]) };
           } else {
             const c = clientFor(who.locationId);
             if (!c) throw new Error(INTAKE_UNREADABLE);
@@ -51244,7 +51999,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
             const hash = intakeInput(normalizedIntake(snap), current.accounts?.[who.locationId]?.industry, composeQuestionSet({ industry: current.accounts?.[who.locationId]?.industry, agency: readOverlay() }));
             if (current.outcomes?.[`${rk}:1`]?.inputHash && current.outcomes[`${rk}:1`].inputHash !== hash) throw new Error("The intake changed. Run Brief again before approving building.");
-            const approval = { inputHash: hash, at, repairHashes: readWorkflowRepairs(who.locationId).filter((r) => Array.isArray(repairHashes) && repairHashes.includes(r.hash)).map((r) => r.hash), staffHash: staffListHash(current.staffRoster?.[who.locationId]) };
+            const approval = { inputHash: hash, at, repairHashes: readWorkflowRepairs(who.locationId).filter((r) => Array.isArray(repairHashes) && repairHashes.includes(r.hash)).map((r) => r.hash), staffHash: staffListHash(current.staffRoster?.[who.locationId]), scopeHash: scopeHashOf(current.scope?.[rk]) };
             approvals[rk] = approval;
           }
           const latest = readCockpitState();
@@ -51609,9 +52364,23 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const who = cockpitClient(readCockpitState(), currentRoster(), locationId2, clientKey);
           if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to confirm the whole preset");
           const next = features === null ? { wholePreset: true } : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
-          writeCockpitState(setClientScope(readCockpitState(), who.recordKey, next));
+          if (Array.isArray(features)) {
+            const ticked = features.map(String).filter(isFeatureId);
+            const offered = offeredFeaturesFor(readCockpitState(), who.recordKey);
+            if (ticked.length && !ticked.some((f) => offered.includes(f))) throw new Error(NOTHING_TICKED_IN_PLAN);
+          }
+          const rk = who.recordKey;
+          let nextState = setClientScope(readCockpitState(), rk, next);
+          const ap = nextState.planApprovals?.[rk];
+          const withdrawn = Boolean(ap && ap.scopeHash !== scopeHashOf(nextState.scope?.[rk]));
+          if (withdrawn) {
+            const approvals = { ...nextState.planApprovals };
+            delete approvals[rk];
+            nextState = { ...setBuildApproval(nextState, rk, null), planApprovals: approvals };
+          }
+          writeCockpitState(nextState);
           res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[who.recordKey] ?? null }));
+          res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[rk] ?? null, ...withdrawn ? { approvalWithdrawn: true, message: APPROVAL_WITHDRAWN_FOR_SCOPE } : {} }));
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "bad request" }));
@@ -51748,7 +52517,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     process.on("SIGTERM", stop2);
   });
 }
-var import_zod67, import_node_util5, fs42, path40, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, SECOND_CLIENT_NO_INTAKE, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, staffGateRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest, ReportBrandSaveRequest;
+var import_zod67, import_node_util5, fs42, path40, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, SECOND_CLIENT_NO_INTAKE, CHOOSE_WHAT_THEY_BOUGHT, CHOOSE_BEFORE_BUILD, SCOPE_REFUSAL, NOTHING_TICKED_IN_PLAN, SCOPE_CHANGED_SINCE_APPROVAL, APPROVAL_WITHDRAWN_FOR_SCOPE, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, staffGateRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest, ReportBrandSaveRequest;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
@@ -51870,6 +52639,12 @@ var init_dashboard = __esm({
     ];
     ACCOUNT_TYPES = ["client", "sandbox", "template", "hidden"];
     SECOND_CLIENT_NO_INTAKE = "This sub-account's intake form belongs to its default client, so a second client's intake and Brief are not run from here. Prepare this client's plan with its clinic prefix (the build preview), then approve and build it here.";
+    CHOOSE_WHAT_THEY_BOUGHT = "Choose what the client bought before approving: Blueprint Review, then What they bought, then Save.";
+    CHOOSE_BEFORE_BUILD = "Choose what the client bought before building: Blueprint Review, then What they bought, then Save.";
+    SCOPE_REFUSAL = /Nobody has chosen what|what this client bought|features (are )?selected for this client|No features are selected|features nobody ticked/i;
+    NOTHING_TICKED_IN_PLAN = "None of the ticked features is in the plan for this client's industry, so nothing was saved. Tick features from the list, or choose Everything in the plan.";
+    SCOPE_CHANGED_SINCE_APPROVAL = "What they bought changed after the build was approved, so Build did not start. Approve this plan again, then build.";
+    APPROVAL_WITHDRAWN_FOR_SCOPE = "What they bought changed, so the build approval was withdrawn. Approve this plan again before building.";
     activeRun2 = null;
     handoffEmailPreviews = /* @__PURE__ */ new Map();
     UPGRADE_MSG = "\n  The cockpit is not included in this licence, so it did not start.\n  Nothing was changed.\n\n";
@@ -52308,7 +53083,9 @@ WARNING: saved under ${canonicalCompanyId}, but switch_location resolves ${args.
                 locationId: args.test_location_id,
                 userId: foundViaRealPath.userId,
                 companyId: resolvedCompanyId,
-                registry: null
+                // The registry, so a token rotated by this probe is saved to the
+                // company's own slot instead of being lost (review, 2026-09-29).
+                registry: registry2
               });
               try {
                 await probe.listWorkflows(1, 0);
@@ -54927,7 +55704,7 @@ async function collectInstallChecks(installedVersion, client, builderClient, reg
     }
     if (result.ok) {
       const idNote = tokenCompany ? ` Authenticated as company ${tokenCompany}.` : "";
-      return { name: "Firebase auth (workflow builder)", status: "pass", detail: `ID token refresh succeeded. Workflow builder tools are usable.${companyNote}${idNote}` };
+      return { name: "Firebase auth (workflow builder)", status: "pass", detail: `Got a valid ID token. Workflow builder tools are usable.${companyNote}${idNote}` };
     }
     return { name: "Firebase auth (workflow builder)", status: "fail", detail: `Token refresh failed: ${result.error}.${companyNote} If you're in a client's account, register its Firebase with register_company_firebase. Otherwise re-capture your Firebase values from GHL DevTools and re-run enable_workflow_builder.` };
   })();
@@ -58120,7 +58897,7 @@ function extractHtml(text2) {
 function claudeGenerate(model = DEFAULT_MODEL, bin = "claude") {
   return (instruction, { cwd }) => new Promise((resolveP) => {
     const t0 = Date.now();
-    const cmd = claudeCommand(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model]);
+    const cmd = claudeCommand(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model, ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process6.spawn)(cmd.command, cmd.args, {
       cwd,
       env: { ...process.env, CLAUDECODE: "", CLAUDE_CODE_ENTRYPOINT: "" },
@@ -58281,6 +59058,7 @@ var init_run2 = __esm({
     "use strict";
     import_node_child_process6 = require("node:child_process");
     init_claude_locate();
+    init_result_text();
     import_node_fs12 = require("node:fs");
     import_node_path11 = require("node:path");
     init_brief();
@@ -61494,7 +62272,7 @@ function registerSecretShopperTools(server2, client, registry2) {
         if (registry2) {
           try {
             const b = workflowReadConnection(registry2, client);
-            stepLog = liveStepLogReader(locationId2, () => b.buildHeaders());
+            stepLog = liveStepLogReader(locationId2, () => b.buildHeaders(), fetch, (h) => b.invalidateIdToken(h["token-id"] ?? null));
           } catch {
           }
         }
@@ -65893,6 +66671,18 @@ async function readLocationName(client, locationId2) {
     return locationId2;
   }
 }
+function cockpitSelectionRequired(board, locationId2, recordKey, env2 = process.env) {
+  if (env2.GHL_COMMAND_STAGE) return true;
+  const has = (field, key) => {
+    const m = board[field];
+    return Boolean(m && typeof m === "object" && m[key]);
+  };
+  const own = ["clients", "planApprovals", "buildApproved", "assessmentPurchases", "scope", "reviews", "intakeInputs", "assessmentAttachments", "clientProfiles"].some((f) => has(f, recordKey));
+  return own || recordKey === locationId2 && has("accounts", locationId2);
+}
+function noSelectionMessage(clientKey) {
+  return clientKey ? secondClientChooseMessage(clientKey) : NO_SELECTION_SCOPE;
+}
 function resolvePlanSource(input) {
   const { plan, useSavedPlan, replaceSavedPlan, saved } = input;
   if (useSavedPlan) {
@@ -66027,9 +66817,10 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
         if (!briefArg) {
           return jsonResponse({ ok: false, phase: "compose", error: "fromPreset needs the brief \u2014 pass the \xA74 Brief from normalize_submission_to_brief (or assembled from the cockpit intake answers)." });
         }
-        let briefForCompose = briefArg;
-        let scopeSource = briefArg.scope ? "brief" : "none";
-        const briefScope = briefArg.scope;
+        const briefIn = process.env.GHL_COMMAND_STAGE && briefArg.scope ? (({ scope: _ignored, ...rest }) => rest)(briefArg) : briefArg;
+        let briefForCompose = briefIn;
+        let scopeSource = briefIn.scope ? "brief" : "none";
+        const briefScope = briefIn.scope;
         if (briefScope && Array.isArray(briefScope.features) && briefScope.features.length === 0) {
           return jsonResponse({
             ok: false,
@@ -66038,13 +66829,15 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
             error: "The brief's scope names no features, so nothing was built. Choose the features to build (prefilled from what they bought), confirm, and run again."
           });
         }
-        if (!briefArg.scope) {
+        if (!briefIn.scope) {
           const board = readBoardState();
           const saved2 = board.scope?.[recordKey];
           if (saved2?.wholePreset) {
             scopeSource = "cockpit";
           } else if (!saved2 && Array.isArray(board.assessmentPurchases?.[recordKey])) {
             return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(recordKey) });
+          } else if (!saved2 && cockpitSelectionRequired(board, activeLocation, recordKey)) {
+            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: noSelectionMessage(clientKey) });
           } else if (saved2 && Array.isArray(saved2.features)) {
             const features = saved2.features.filter(isFeatureId);
             if (!features.length) {
@@ -66055,7 +66848,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
                 error: "No features are selected for this client, so nothing was built. Open the client's Review screen, tick the features to build (it is prefilled from what they bought), confirm, and run the build again."
               });
             }
-            briefForCompose = { ...briefArg, scope: { ...saved2.package ? { package: saved2.package } : {}, features } };
+            briefForCompose = { ...briefIn, scope: { ...saved2.package ? { package: saved2.package } : {}, features } };
             scopeSource = "cockpit";
           }
         }
@@ -66108,6 +66901,30 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
         if (!current && Array.isArray(board.assessmentPurchases?.[recordKey])) {
           return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(recordKey) });
         }
+        if (!current && cockpitSelectionRequired(board, activeLocation, recordKey)) {
+          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: noSelectionMessage(clientKey) });
+        }
+        if (current && !current.wholePreset && Array.isArray(current.features) && !(saved && planSource !== "argument-replaces-saved")) {
+          const chosen = new Set(current.features.filter(isFeatureId));
+          const outside = [];
+          for (const w of plan.workflows ?? []) {
+            let f = null;
+            try {
+              f = featureOfWorkflow(String(w.ref ?? ""), w.feature);
+            } catch {
+              f = String(w.feature);
+            }
+            if (f !== null && !chosen.has(f)) outside.push(`${String(w.name ?? w.ref)} (${isFeatureId(f) ? FEATURES[f].name : f})`);
+          }
+          if (chosen.size && outside.length) {
+            return jsonResponse({
+              ok: false,
+              phase: "scope",
+              scopeSource: "cockpit",
+              error: `This plan builds workflows for features nobody ticked for this client, so nothing was built: ${outside.join(", ")}. Build from the preset (fromPreset), which follows what they bought, or tick those features and save first.`
+            });
+          }
+        }
         if (current && !current.wholePreset && Array.isArray(current.features) && !current.features.some(isFeatureId)) {
           return jsonResponse({
             ok: false,
@@ -66116,7 +66933,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
             error: "No features are selected for this client, so nothing was built, not even from the saved plan. Open the client's Review screen, tick the features to build, confirm, and run the build again."
           });
         }
-        if (saved && planSource !== "argument-replaces-saved" && !savedPlanMatchesScope(saved, current)) {
+        if (saved && planSource !== "argument-replaces-saved" && (current ? !savedPlanMatchesScope(saved, current) : Boolean(saved.scope))) {
           const planned = saved?.scope ? [...saved.scope.built, ...(saved.scope.omitted ?? []).map((f) => f.id)].join(", ") || "no features" : "everything in the preset";
           const now = current?.wholePreset ? "everything in the preset (confirmed)" : current ? current.features.filter(isFeatureId).join(", ") : "everything in the preset (nothing is saved)";
           return jsonResponse({
@@ -66896,7 +67713,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod93, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, workflowInventorySchema, notConfirmedAsk;
+var import_zod93, customFieldItemSchema, sleep6, NO_SELECTION_SCOPE, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, workflowInventorySchema, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -66948,7 +67765,8 @@ var init_intake_to_build = __esm({
       picklistOptions: import_zod93.z.array(import_zod93.z.string()).optional()
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
-    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. Open the client's Review screen: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
+    NO_SELECTION_SCOPE = "Nobody has chosen what this client bought, so nothing was built. In the cockpit open Blueprint Review, then What they bought: tick what they bought, or choose Everything in the plan, then save and run the build again.";
+    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. In the cockpit open Blueprint Review, then What they bought: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
     WHOLE_PRESET_NOT_KEPT = "Note: an earlier build on this client used everything in the preset, and that choice was not kept, so the Review screen ticks only what they bought. Tick everything again if that is still what you want.";
     workflowInventorySchema = import_zod93.z.object({
       workflows: import_zod93.z.array(import_zod93.z.object({ id: import_zod93.z.string().min(1), name: import_zod93.z.string() }).passthrough())