@elitedcs/ghl-mcp 3.89.0-beta.1 → 3.89.0-beta.3

package/dist/index.js

@@ -2185,6 +2185,128 @@ var init_workflow_publish_gate = __esm({
 });
 
 // src/workflow-builder-client.ts
+function firebaseIdTokenStore() {
+  const g = globalThis;
+  let store2 = g[FIREBASE_ID_TOKEN_STORE_KEY];
+  if (!store2) {
+    store2 = { cache: /* @__PURE__ */ new Map(), inflight: /* @__PURE__ */ new Map() };
+    g[FIREBASE_ID_TOKEN_STORE_KEY] = store2;
+  }
+  return store2;
+}
+function firebaseIdTokenKey(firebaseApiKey, userId, refreshToken) {
+  return `${firebaseApiKey}\0${userId}\0${refreshToken}`;
+}
+function idTokenFilePath() {
+  return path4.join(appDataDir(), ID_TOKEN_FILE_NAME);
+}
+function idTokenFileKey(firebaseApiKey, userId, refreshToken) {
+  return (0, import_crypto2.createHash)("sha256").update(`${firebaseApiKey}|${userId}|${refreshToken}`).digest("hex");
+}
+function validFileEntry(e, now = Date.now()) {
+  const v = e;
+  return !!v && typeof v === "object" && typeof v.idToken === "string" && v.idToken.length > 0 && typeof v.expiresAt === "number" && Number.isFinite(v.expiresAt) && now < v.expiresAt;
+}
+function readIdTokenFile() {
+  try {
+    const parsed2 = JSON.parse(fs4.readFileSync(idTokenFilePath(), "utf8"));
+    if (!parsed2 || typeof parsed2 !== "object" || Array.isArray(parsed2)) return {};
+    const out = {};
+    for (const [k, v] of Object.entries(parsed2)) {
+      if (validFileEntry(v)) out[k] = { idToken: v.idToken, expiresAt: v.expiresAt };
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+function readIdTokenFileEntry(key) {
+  return readIdTokenFile()[key];
+}
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function withIdTokenFileLock(file2, fn) {
+  const lock = `${file2}.lock`;
+  const deadline = Date.now() + ID_TOKEN_LOCK_WAIT_MS;
+  let fd;
+  let ino;
+  while (fd === void 0 && Date.now() <= deadline) {
+    try {
+      fd = fs4.openSync(lock, "wx", 384);
+      try {
+        ino = fs4.fstatSync(fd).ino;
+      } catch {
+        ino = void 0;
+      }
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") break;
+    }
+    try {
+      if (Date.now() - fs4.statSync(lock).mtimeMs > ID_TOKEN_LOCK_STALE_MS) {
+        const moved = `${lock}.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}.stale`;
+        fs4.renameSync(lock, moved);
+        try {
+          fs4.unlinkSync(moved);
+        } catch {
+        }
+        continue;
+      }
+    } catch {
+    }
+    sleepSync(15);
+  }
+  try {
+    fn();
+  } finally {
+    if (fd !== void 0) {
+      let ours = false;
+      try {
+        ours = ino === void 0 || fs4.statSync(lock).ino === ino;
+      } catch {
+        ours = false;
+      }
+      try {
+        fs4.closeSync(fd);
+      } catch {
+      }
+      if (ours) {
+        try {
+          fs4.unlinkSync(lock);
+        } catch {
+        }
+      }
+    }
+  }
+}
+function updateIdTokenFile(change) {
+  let tmp;
+  try {
+    const file2 = idTokenFilePath();
+    fs4.mkdirSync(path4.dirname(file2), { recursive: true, mode: 448 });
+    withIdTokenFileLock(file2, () => {
+      const entries = readIdTokenFile();
+      change(entries);
+      tmp = `${file2}.${process.pid}.${(0, import_crypto2.randomBytes)(6).toString("hex")}.tmp`;
+      fs4.writeFileSync(tmp, JSON.stringify(entries), { mode: 384 });
+      fs4.renameSync(tmp, file2);
+      tmp = void 0;
+      try {
+        fs4.chmodSync(file2, 384);
+      } catch {
+      }
+    });
+  } catch {
+  } finally {
+    if (tmp) {
+      try {
+        fs4.unlinkSync(tmp);
+      } catch {
+      }
+    }
+  }
+}
 function isParkedContactsError(e) {
   return typeof e === "object" && e !== null && e.code === "PARKED_CONTACTS";
 }
@@ -2507,13 +2629,16 @@ function validateActionChain(actions, existingIds) {
 async function builderRequest(client, method, url, opts = {}) {
   assertWriteAllowed(method, url, { body: opts.body, defaultLocationId: client.locationId });
   const headers = { ...await client.buildHeaders(), ...opts.headers ?? {} };
+  const usedIdToken = headers["token-id"];
   const init = { method, headers };
   if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 3e4);
   init.signal = controller.signal;
   try {
-    return await fetch(url, init);
+    const response = await fetch(url, init);
+    if (response.status === 401) client.invalidateIdToken?.(usedIdToken ?? null);
+    return response;
   } catch (error) {
     if (error instanceof Error && error.name === "AbortError") {
       throw new Error(`Request timeout (30s): ${method} ${url}`);
@@ -2523,7 +2648,7 @@ async function builderRequest(client, method, url, opts = {}) {
     clearTimeout(timeout);
   }
 }
-var fs4, path4, dotenv, import_zod4, GATED_PUBLISH, BACKEND_BASE, FIREBASE_TOKEN_URL, MAX_RETRIES2, BASE_DELAY_MS2, FirebaseTokenSchema, WorkflowActionSchema, WorkflowFullSchema, CreateWorkflowResponseSchema, ParkedContactsError, NodeLossError, CARRIED_WORKFLOW_SETTINGS, UUID_V4, StaleWorkflowError, WorkflowStatusChangedError, WorkflowBuilderClient;
+var fs4, path4, dotenv, import_zod4, import_crypto2, GATED_PUBLISH, BACKEND_BASE, FIREBASE_TOKEN_URL, MAX_RETRIES2, BASE_DELAY_MS2, FirebaseTokenSchema, FIREBASE_ID_TOKEN_STORE_KEY, ID_TOKEN_EXPIRY_MARGIN_MS, ID_TOKEN_FALLBACK_TTL_MS, FIREBASE_429_DELAYS_MS, FIREBASE_EXCHANGE_TIMEOUT_MS, ID_TOKEN_FILE_NAME, ID_TOKEN_LOCK_WAIT_MS, ID_TOKEN_LOCK_STALE_MS, WorkflowActionSchema, WorkflowFullSchema, CreateWorkflowResponseSchema, ParkedContactsError, NodeLossError, CARRIED_WORKFLOW_SETTINGS, UUID_V4, StaleWorkflowError, WorkflowStatusChangedError, WorkflowBuilderClient;
 var init_workflow_builder_client = __esm({
   "src/workflow-builder-client.ts"() {
     "use strict";
@@ -2533,6 +2658,7 @@ var init_workflow_builder_client = __esm({
     import_zod4 = require("zod");
     init_account_rules();
     init_credentials_store();
+    import_crypto2 = require("crypto");
     init_account_read_retry();
     init_retry();
     init_firebase_claims();
@@ -2551,6 +2677,14 @@ var init_workflow_builder_client = __esm({
       refresh_token: import_zod4.z.string(),
       expires_in: import_zod4.z.string()
     });
+    FIREBASE_ID_TOKEN_STORE_KEY = /* @__PURE__ */ Symbol.for("ghl-mcp.firebaseIdTokenCache");
+    ID_TOKEN_EXPIRY_MARGIN_MS = 5 * 60 * 1e3;
+    ID_TOKEN_FALLBACK_TTL_MS = 55 * 60 * 1e3;
+    FIREBASE_429_DELAYS_MS = [2e3, 5e3, 1e4];
+    FIREBASE_EXCHANGE_TIMEOUT_MS = 15e3;
+    ID_TOKEN_FILE_NAME = "firebase-id-tokens.json";
+    ID_TOKEN_LOCK_WAIT_MS = 2e3;
+    ID_TOKEN_LOCK_STALE_MS = 1e4;
     WorkflowActionSchema = import_zod4.z.custom(
       (value) => typeof value === "object" && value !== null && "type" in value
     );
@@ -2637,6 +2771,9 @@ var init_workflow_builder_client = __esm({
       cachedIdToken = null;
       tokenExpiry = 0;
       tokenRefreshPromise = null;
+      // Bumped whenever the credentials change (company switch). An exchange that
+      // started under an older generation never lands on this client.
+      tokenGeneration = 0;
       // The company_id claim from the most recently minted ID token. Lets
       // health_check report the company we're ACTUALLY authenticated as (vs. the
       // one we intended), and backs PIT/Firebase mismatch detection.
@@ -2741,11 +2878,34 @@ var init_workflow_builder_client = __esm({
         this.cachedIdToken = null;
         this.tokenExpiry = 0;
         this.tokenRefreshPromise = null;
+        this.tokenGeneration++;
       }
       /**
-       * Probe Firebase auth by refreshing the ID token. Used by the health_check
-       * diagnostic tool. Does not touch GHL backend — just exchanges the refresh
-       * token at securetoken.googleapis.com.
+       * GHL answered 401 to a request sent with `usedToken`: forget THAT token
+       * everywhere (this client, the process-wide cache and the cross-process
+       * file), so no client or process reuses it. Only entries holding exactly
+       * that token go: a late 401 from a request that carried an older token (a
+       * parallel request, or the company before a switch) never wipes the fresh
+       * one that replaced it. Without an argument it means this client's current
+       * token.
+       */
+      invalidateIdToken(usedToken = this.cachedIdToken) {
+        if (!usedToken) return;
+        const store2 = firebaseIdTokenStore();
+        for (const [k, e] of store2.cache) if (e.idToken === usedToken) store2.cache.delete(k);
+        updateIdTokenFile((entries) => {
+          for (const k of Object.keys(entries)) if (entries[k].idToken === usedToken) delete entries[k];
+        });
+        if (this.cachedIdToken === usedToken) {
+          this.cachedIdToken = null;
+          this.tokenExpiry = 0;
+        }
+      }
+      /**
+       * Probe Firebase auth by getting an ID token. Used by the health_check
+       * diagnostic tool. Does not touch GHL backend. A fresh cached ID token (this
+       * process's or another's) answers without an exchange; otherwise it exchanges
+       * the refresh token at securetoken.googleapis.com.
        */
       async checkAuth() {
         try {
@@ -2812,8 +2972,9 @@ var init_workflow_builder_client = __esm({
         return null;
       }
       /**
-       * Get a fresh Firebase ID token using the refresh token.
-       * Uses a promise lock to prevent concurrent refresh races.
+       * Get a Firebase ID token: this client's own copy, then the process-wide
+       * cache, and only then an exchange at securetoken (shared by every client
+       * asking for the same credential at the same moment).
        */
       async getIdToken() {
         if (this.cachedIdToken && Date.now() < this.tokenExpiry) {
@@ -2822,31 +2983,74 @@ var init_workflow_builder_client = __esm({
         if (this.tokenRefreshPromise) {
           return this.tokenRefreshPromise;
         }
-        this.tokenRefreshPromise = this.performTokenRefresh();
+        const refresh = this.obtainIdToken();
+        this.tokenRefreshPromise = refresh;
         try {
-          return await this.tokenRefreshPromise;
+          return await refresh;
         } finally {
-          this.tokenRefreshPromise = null;
+          if (this.tokenRefreshPromise === refresh) this.tokenRefreshPromise = null;
         }
       }
-      async performTokenRefresh() {
-        const url = `${FIREBASE_TOKEN_URL}?key=${encodeURIComponent(this.firebaseApiKey)}`;
-        const body = `grant_type=refresh_token&refresh_token=${encodeURIComponent(this.refreshToken)}`;
-        const response = await fetch(url, {
-          method: "POST",
-          headers: { "Content-Type": "application/x-www-form-urlencoded" },
-          body
-        });
-        if (!response.ok) {
-          this.cachedIdToken = null;
-          this.tokenExpiry = 0;
-          const text2 = await response.text();
-          throw new Error(`Firebase token refresh failed (${response.status}): ${text2}`);
+      async obtainIdToken() {
+        const generation = this.tokenGeneration;
+        const store2 = firebaseIdTokenStore();
+        let key = firebaseIdTokenKey(this.firebaseApiKey, this.userId, this.refreshToken);
+        const known = store2.cache.get(key);
+        if (known && known.refreshToken !== this.refreshToken) {
+          this.followRotation(known.refreshToken);
+          key = firebaseIdTokenKey(this.firebaseApiKey, this.userId, this.refreshToken);
         }
-        const data = FirebaseTokenSchema.parse(await response.json());
-        this.cachedIdToken = data.id_token;
-        this.tokenExpiry = Date.now() + 55 * 60 * 1e3;
-        this.tokenCompanyId = decodeFirebaseClaims(data.id_token).companyId;
+        const hit = store2.cache.get(key);
+        if (hit && Date.now() < hit.expiresAt) {
+          return this.adoptIdToken(hit);
+        }
+        const shared = readIdTokenFileEntry(idTokenFileKey(this.firebaseApiKey, this.userId, this.refreshToken));
+        if (shared) {
+          const entry2 = { idToken: shared.idToken, expiresAt: shared.expiresAt, refreshToken: this.refreshToken };
+          store2.cache.set(key, entry2);
+          return this.adoptIdToken(entry2);
+        }
+        let pending = store2.inflight.get(key);
+        if (!pending) {
+          const started = this.performTokenRefresh();
+          pending = started;
+          store2.inflight.set(key, started);
+          const clear = () => {
+            if (store2.inflight.get(key) === started) store2.inflight.delete(key);
+          };
+          started.then(clear, clear);
+        }
+        let entry;
+        try {
+          entry = await pending;
+        } catch (error) {
+          if (generation === this.tokenGeneration) {
+            this.cachedIdToken = null;
+            this.tokenExpiry = 0;
+          }
+          throw error;
+        }
+        if (generation !== this.tokenGeneration) return this.getIdToken();
+        return this.adoptIdToken(entry);
+      }
+      /** Take on a rotated refresh token another client already persisted. */
+      followRotation(newToken2) {
+        if (this.refreshToken === this.homeRefreshToken && this.currentCompanyId === this.homeCompanyId) {
+          this.homeRefreshToken = newToken2;
+        }
+        this.refreshToken = newToken2;
+      }
+      /**
+       * Make a (fresh or shared) ID token this client's own: cache it on the
+       * instance, follow a rotation, and run the company check below.
+       */
+      adoptIdToken(entry) {
+        this.cachedIdToken = entry.idToken;
+        this.tokenExpiry = entry.expiresAt;
+        if (entry.refreshToken !== this.refreshToken) {
+          this.followRotation(entry.refreshToken);
+        }
+        this.tokenCompanyId = decodeFirebaseClaims(entry.idToken).companyId;
         const expectedCompanyId = this.intendedCompanyId ?? this.currentCompanyId;
         if (expectedCompanyId && this.tokenCompanyId && expectedCompanyId !== this.tokenCompanyId) {
           const warnKey = `${expectedCompanyId}->${this.tokenCompanyId}`;
@@ -2858,11 +3062,65 @@ var init_workflow_builder_client = __esm({
             );
           }
         }
-        if (data.refresh_token && data.refresh_token !== this.refreshToken) {
-          this.refreshToken = data.refresh_token;
-          this.persistRotatedToken(data.refresh_token);
+        return entry.idToken;
+      }
+      /**
+       * Exchange the refresh token at securetoken and store the result in the
+       * process-wide cache. A 429 (Google's per-minute exchange quota) is retried
+       * after 2s, 5s and 10s; any other failure, a bad token included, is not.
+       */
+      async performTokenRefresh() {
+        const firebaseApiKey = this.firebaseApiKey;
+        const userId = this.userId;
+        const oldRefreshToken = this.refreshToken;
+        const company = this.currentCompanyId;
+        const generation = this.tokenGeneration;
+        const url = `${FIREBASE_TOKEN_URL}?key=${encodeURIComponent(firebaseApiKey)}`;
+        const body = `grant_type=refresh_token&refresh_token=${encodeURIComponent(oldRefreshToken)}`;
+        let response;
+        for (let attempt = 0; ; attempt++) {
+          try {
+            response = await fetch(url, {
+              method: "POST",
+              headers: { "Content-Type": "application/x-www-form-urlencoded" },
+              body,
+              signal: AbortSignal.timeout(FIREBASE_EXCHANGE_TIMEOUT_MS)
+            });
+          } catch (error) {
+            const name = error?.name;
+            if (name === "TimeoutError" || name === "AbortError") {
+              throw new Error(`Firebase token refresh timed out after ${FIREBASE_EXCHANGE_TIMEOUT_MS / 1e3}s`);
+            }
+            throw error;
+          }
+          if (response.status !== 429 || attempt >= FIREBASE_429_DELAYS_MS.length) break;
+          const delay5 = FIREBASE_429_DELAYS_MS[attempt];
+          process.stderr.write(`[ghl-mcp] Firebase token exchange rate-limited (429), retry ${attempt + 1}/${FIREBASE_429_DELAYS_MS.length} in ${delay5}ms
+`);
+          await new Promise((r) => setTimeout(r, delay5));
+        }
+        if (!response.ok) {
+          const text2 = await response.text();
+          throw new Error(`Firebase token refresh failed (${response.status}): ${text2}`);
+        }
+        const data = FirebaseTokenSchema.parse(await response.json());
+        const expiresInMs = Number(data.expires_in) * 1e3;
+        const ttl = Number.isFinite(expiresInMs) && expiresInMs > 0 ? Math.max(expiresInMs - ID_TOKEN_EXPIRY_MARGIN_MS, 0) : ID_TOKEN_FALLBACK_TTL_MS;
+        const newRefreshToken = data.refresh_token || oldRefreshToken;
+        const entry = { idToken: data.id_token, expiresAt: Date.now() + ttl, refreshToken: newRefreshToken };
+        const store2 = firebaseIdTokenStore();
+        store2.cache.set(firebaseIdTokenKey(firebaseApiKey, userId, oldRefreshToken), entry);
+        const shared = { idToken: entry.idToken, expiresAt: entry.expiresAt };
+        updateIdTokenFile((entries) => {
+          entries[idTokenFileKey(firebaseApiKey, userId, oldRefreshToken)] = shared;
+          if (newRefreshToken !== oldRefreshToken) entries[idTokenFileKey(firebaseApiKey, userId, newRefreshToken)] = shared;
+        });
+        if (newRefreshToken !== oldRefreshToken) {
+          store2.cache.set(firebaseIdTokenKey(firebaseApiKey, userId, newRefreshToken), entry);
+          if (generation === this.tokenGeneration) this.refreshToken = newRefreshToken;
+          this.persistRotatedToken(newRefreshToken, company);
         }
-        return data.id_token;
+        return entry;
       }
       /**
        * Persist a rotated refresh token to the slot that owns the ACTIVE company.
@@ -2873,8 +3131,7 @@ var init_workflow_builder_client = __esm({
        *   keep the in-memory home token in sync so resetToHomeFirebase() restores
        *   the fresh value rather than a stale one.
        */
-      persistRotatedToken(newToken2) {
-        const company = this.currentCompanyId;
+      persistRotatedToken(newToken2, company = this.currentCompanyId) {
         const hasCompanySlot = company !== void 0 && this.registry?.getCompanyFirebase(company) !== void 0;
         if (hasCompanySlot) {
           this.registry?.updateCompanyFirebaseRefreshToken(company, newToken2);
@@ -2968,8 +3225,10 @@ var init_workflow_builder_client = __esm({
           return retryAccountRead(() => this.parkedContacts(workflowId), "workflow parked contacts");
         }
         const url = `https://backend.leadconnectorhq.com/workflows/status/search/count-per-step?workflowId=${encodeURIComponent(workflowId)}&locationId=${encodeURIComponent(this.locationId)}`;
-        const res = await fetch(url, { headers: await this.buildHeaders() });
+        const headers = await this.buildHeaders();
+        const res = await fetch(url, { headers });
         if (!res.ok) {
+          if (res.status === 401) this.invalidateIdToken(headers["token-id"] ?? null);
           const upstream = inBuildRequestScope() ? ` ${redactText(await res.text())}` : "";
           throw new Error(
             `Could not check whether anyone is part-way through this workflow (HTTP ${res.status}). Nothing was written. This check has to succeed before a step can be changed, because changing a step somebody is waiting on drops them from the sequence permanently.${upstream}`
@@ -3006,6 +3265,7 @@ var init_workflow_builder_client = __esm({
         }
         const url = `${BACKEND_BASE}${urlPath}`;
         const headers = await this.buildHeaders();
+        const usedIdToken = headers["token-id"];
         const options = { method, headers };
         if (body && (method === "POST" || method === "PUT")) {
           options.body = JSON.stringify(body);
@@ -3040,6 +3300,7 @@ var init_workflow_builder_client = __esm({
           return this.request(method, urlPath, body, attempt + 1);
         }
         if (!response.ok) {
+          if (response.status === 401) this.invalidateIdToken(usedIdToken ?? null);
           let errorBody = "";
           try {
             errorBody = await response.text();
@@ -13071,11 +13332,13 @@ __export(page_reads_exports, {
 });
 async function readPageFull(client, pageId, fetcher = fetch) {
   const headers = await client.buildHeaders();
+  const usedIdToken = headers["token-id"];
   headers.Origin = "https://app.gohighlevel.com";
   headers.Referer = "https://app.gohighlevel.com/";
   const path50 = `/page/${pageId}?locationId=${client.locationId}`;
   const response = await fetcher(`https://backend.leadconnectorhq.com/funnels${path50}`, { method: "GET", headers });
   if (!response.ok) {
+    if (response.status === 401) client.invalidateIdToken?.(usedIdToken);
     const text3 = await response.text();
     throw new Error(`Funnel API Error ${response.status}: GET ${path50}
 ${text3}`);
@@ -24127,7 +24390,9 @@ var init_client_engagements = __esm({
 function readBoardState() {
   try {
     const raw = JSON.parse(fs15.readFileSync(path14.join(appDataDir(), "cockpit-state.json"), "utf8"));
-    if (raw && typeof raw === "object" && raw.clients && typeof raw.clients === "object") return raw;
+    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+      return { ...raw, clients: raw.clients && typeof raw.clients === "object" ? raw.clients : {} };
+    }
   } catch {
   }
   return { clients: {} };
@@ -24741,7 +25006,7 @@ var init_question_set = __esm({
         field: { kind: "custom", dataType: "LARGE_TEXT" },
         placeholder: "The problems they come to you with (one per line)",
         briefPath: "audience.painPoints",
-        briefKind: "list"
+        briefKind: "textList"
       },
       {
         key: "objections",
@@ -24752,7 +25017,7 @@ var init_question_set = __esm({
         field: { kind: "custom", dataType: "LARGE_TEXT" },
         placeholder: "Why prospects hesitate (one per line)",
         briefPath: "audience.objections",
-        briefKind: "list"
+        briefKind: "textList"
       },
       // ── Section D: Goal and sales process ──
       {
@@ -27949,6 +28214,77 @@ var init_claude_locate = __esm({
   }
 });
 
+// src/result-text.ts
+function hasParseableResult(text2) {
+  const m = RESULT_RE.exec(text2);
+  if (!m) return false;
+  try {
+    JSON.parse(m[1]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function pickResultText(texts, firstEligible = 0) {
+  for (let i = texts.length - 1; i >= firstEligible; i--) if (hasParseableResult(texts[i])) return texts[i];
+  for (let i = texts.length - 1; i >= firstEligible; i--) if (/RESULT:\s*\{/.test(texts[i])) return texts[i];
+  if (!texts.length) return "";
+  if (texts.length <= firstEligible) return texts[texts.length - 1].replace(/RESULT:\s*\{[\s\S]*\}/, "").trim();
+  return texts[texts.length - 1];
+}
+function resultEventFailure(ev) {
+  if (ev?.type !== "result") return void 0;
+  if (typeof ev.subtype === "string" && ev.subtype !== "success") return ev.subtype;
+  if (ev.is_error === true) return "error";
+  return void 0;
+}
+var NO_MEMBER_HOOKS, RESULT_RE, RunTexts;
+var init_result_text = __esm({
+  "src/result-text.ts"() {
+    "use strict";
+    NO_MEMBER_HOOKS = ["--settings", '{"disableAllHooks":true}'];
+    RESULT_RE = /RESULT:\s*(\{[\s\S]*\})/;
+    RunTexts = class {
+      texts = [];
+      afterLastTool = 0;
+      /** Set when the result event reported the run did not finish (e.g. error_max_turns). */
+      failure;
+      /** Record an assistant text block or the result string (blank ones are ignored). */
+      text(t) {
+        if (typeof t === "string" && t.trim()) this.texts.push(t);
+      }
+      /** Record a tool_use block, in stream order. */
+      tool() {
+        this.afterLastTool = this.texts.length;
+      }
+      /** Record every block of one stream-json event. */
+      event(ev) {
+        if (ev?.type === "assistant") {
+          for (const b of ev.message?.content ?? []) {
+            if (b?.type === "tool_use") this.tool();
+            else if (b?.type === "text") this.text(b.text);
+          }
+        } else if (ev?.type === "result") this.result(ev);
+      }
+      /**
+       * Record the result event: its failure, and its text only when that text was
+       * not already said (it normally repeats the last assistant text, and a repeat
+       * of a RESULT line said before a tool call must not become eligible).
+       */
+      result(ev) {
+        this.failure = resultEventFailure(ev) ?? this.failure;
+        if (typeof ev.result === "string" && !this.texts.includes(ev.result)) this.text(ev.result);
+      }
+      get empty() {
+        return this.texts.length === 0;
+      }
+      pick() {
+        return pickResultText(this.texts, this.afterLastTool);
+      }
+    };
+  }
+});
+
 // src/claude-cli.ts
 function parseVersion(text2) {
   const m = /(\d+)\.(\d+)\.(\d+)/.exec(text2 || "");
@@ -28028,6 +28364,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
     const cmd = claudeCommand(bin, [
       "-p",
       SMOKE_PROMPT,
+      ...NO_MEMBER_HOOKS,
       "--output-format",
       "stream-json",
       "--verbose",
@@ -28045,7 +28382,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
       done({ ok: false, error: "the engine check did not finish in time" });
     }, timeoutMs);
     let buffered = "";
-    let lastText = "";
+    const texts = new RunTexts();
     let version;
     let model;
     let costUsd;
@@ -28062,13 +28399,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
           if (found.version) version = found.version;
           if (found.model) model = found.model;
           if (found.costUsd !== void 0) costUsd = found.costUsd;
-          if (ev.type === "assistant") {
-            for (const b of ev.message?.content ?? []) {
-              if (b.type === "text" && b.text?.trim()) lastText = b.text;
-            }
-          } else if (ev.type === "result" && typeof ev.result === "string" && ev.result.trim()) {
-            lastText = ev.result;
-          }
+          texts.event(ev);
         } catch {
         }
       }
@@ -28083,7 +28414,7 @@ function runSmoke(bin, timeoutMs = 9e4) {
     });
     child.on("close", () => {
       clearTimeout(timer);
-      if (/RESULT:\s*\{/.test(lastText)) done({ ok: true, version, model, costUsd });
+      if (/RESULT:\s*\{/.test(texts.pick())) done({ ok: true, version, model, costUsd });
       else done({
         ok: false,
         version,
@@ -28142,6 +28473,7 @@ var init_claude_cli = __esm({
     path19 = __toESM(require("path"));
     init_credentials_store();
     init_claude_locate();
+    init_result_text();
     MIN_CLAUDE_VERSION = "2.1.0";
     SMOKE_PROMPT = 'Reply with exactly this one line and nothing else: RESULT: {"ok":true,"summary":"engine check"}';
   }
@@ -28168,6 +28500,9 @@ function clientKeysInLocation(keys, locationId2) {
   }
   return [...hasDefault ? [void 0] : [], ...others.sort()];
 }
+function secondClientChooseMessage(clientKey, name) {
+  return `Nobody has chosen what ${name ? name : `the second clinic "${clientKey}"`} bought, so nothing was approved or built. The cockpit has no What they bought screen for a second clinic in a sub-account yet, so the choice is saved for it directly: send the cockpit POST /api/scope with this sub-account's locationId, clientKey "${clientKey}" and the features they bought (features: null for everything in the plan). Then approve and build again.`;
+}
 var import_zod58, CLIENT_RECORD_SEPARATOR, CLIENT_KEY_ENV, clientKeySchema;
 var init_client_record = __esm({
   "src/client-record.ts"() {
@@ -28244,7 +28579,7 @@ function verifyReadbackPrompt(ctx) {
 function buildClaudeArgs(spec, locationId2, locationName, ctx) {
   return [
     "-p",
-    spec.prompt(locationId2, locationName, ctx) + (spec.stage === 4 ? verifyReadbackPrompt(ctx) : "") + (spec.stage === 4 ? "\nCheck EACH carried manual obligation with an account read. Return manualChecks:[{ref,type,ok,evidence}] in RESULT, where evidence names the actual read-back. Set ok:false for any obligation you cannot verify. Carried obligations: " + JSON.stringify(ctx?.manualObligations ?? []) : ""),
+    spec.prompt(locationId2, locationName, ctx) + (spec.stage === 4 ? verifyReadbackPrompt(ctx) : "") + (spec.stage === 4 ? "\nCheck EACH carried manual obligation with an account read. Return manualChecks:[{ref,type,ok,evidence}] in RESULT, where evidence names the actual read-back. Set ok:false for any obligation you cannot verify. Carried obligations: " + JSON.stringify(ctx?.manualObligations ?? []) : "") + RESULT_LAST_RULE,
     "--output-format",
     "stream-json",
     "--verbose",
@@ -28259,7 +28594,10 @@ function buildClaudeArgs(spec, locationId2, locationName, ctx) {
     // tools. The deny list is COMPUTED: every built-in that touches the machine
     // plus every registered GHL tool outside this stage's allowlist.
     "--disallowedTools",
-    denyListFor(verifyTools(spec, ctx)).join(",")
+    denyListFor(verifyTools(spec, ctx)).join(","),
+    // The member's own hooks never run inside a stage: a Stop hook added a turn
+    // after the RESULT line and ended build steps early (2026-09-29).
+    ...NO_MEMBER_HOOKS
   ];
 }
 function parseResultLine(text2) {
@@ -28325,11 +28663,13 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
       };
       const progressPoll = progressDir ? setInterval(pollProgress, 1e3) : void 0;
       progressPoll?.unref?.();
+      let timedOut = false;
       const timeout = setTimeout(() => {
+        timedOut = true;
         onEvent({ kind: "error", line: "Run timed out \u2014 stopping it." });
         child.kill("SIGKILL");
       }, opts.timeoutMs ?? spec.timeoutMs ?? 10 * 60 * 1e3);
-      let lastText = "";
+      const texts = new RunTexts();
       let buffered = "";
       let engineVersion;
       let engineModel;
@@ -28353,14 +28693,17 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
             if (facts.durationMs !== void 0) durationMs = facts.durationMs;
             if (ev.type === "assistant") {
               for (const block of ev.message?.content ?? []) {
-                if (block.type === "tool_use") onEvent({ kind: "tool", line: `\u2192 ${String(block.name).replace(/^mcp__ghl__/, "")}` });
+                if (block.type === "tool_use") {
+                  texts.tool();
+                  onEvent({ kind: "tool", line: `\u2192 ${String(block.name).replace(/^mcp__ghl__/, "")}` });
+                }
                 if (block.type === "text" && block.text?.trim()) {
-                  lastText = block.text;
+                  texts.text(block.text);
                   onEvent({ kind: "text", line: block.text.trim().slice(0, 200) });
                 }
               }
             } else if (ev.type === "result") {
-              if (typeof ev.result === "string" && ev.result.trim()) lastText = ev.result;
+              texts.result(ev);
             }
           } catch {
           }
@@ -28387,13 +28730,13 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
           noteObservedEngine({ version: engineVersion, model: engineModel });
         } catch {
         }
-        if (code !== 0 && !lastText) {
+        if (!timedOut && code !== 0 && texts.empty) {
           const outcome2 = { ok: false, error: `claude exited ${code}: ${stderrTail.trim().slice(-200) || "no output"}`, ...engine };
           onEvent({ kind: "error", line: outcome2.error });
           resolve13(outcome2);
           return;
         }
-        const outcome = { ...parseResultLine(lastText), ...engine };
+        const outcome = timedOut ? { ok: false, error: "the run timed out and was stopped before it finished", ...engine } : texts.failure ? { ok: false, error: `the run did not finish (${texts.failure})`, raw: texts.pick().slice(-400), ...engine } : { ...parseResultLine(texts.pick()), ...engine };
         if (stage === 3) {
           try {
             outcome.runId = findBuildRun(locationId2)?.runId;
@@ -28419,7 +28762,7 @@ function runStage(locationId2, stage, onEvent, opts = {}) {
     });
   });
 }
-var import_child_process3, fs21, STAFF_NOTIFICATION_RULE, STAFF_PAUSE_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES;
+var import_child_process3, fs21, STAFF_NOTIFICATION_RULE, STAFF_PAUSE_RULE, MISSING_STEP_RULE, NO_INVENTED_CAUSE_RULE, STAGE_SPECS, HUMAN_GATE_STAGES, RESULT_LAST_RULE;
 var init_stage_runner = __esm({
   "src/stage-runner.ts"() {
     "use strict";
@@ -28434,6 +28777,7 @@ var init_stage_runner = __esm({
     init_build_journal();
     init_claude_cli();
     init_claude_locate();
+    init_result_text();
     init_account_rules();
     init_account_rules();
     init_client_record();
@@ -28513,7 +28857,7 @@ If anything fails, finish with: RESULT: {"ok":false,"error":"<short reason>"}`
 2. Find the answers. They arrive one of TWO ways and you must check BOTH:
    (a) a real form submission \u2014 get_forms then get_form_submissions_full; or
    (b) an intake completed in the cockpit \u2014 search_contacts for the tag "blueprint-intake-received" and read that contact's custom fields (get_contact), which hold the answers under "Intake: <question>" fields.
-3. Turn whichever you found into a Brief with normalize_submission_to_brief (for a form submission), then check it with validate_brief. If the answers came from the tagged contact, build the Brief from those field values directly and call validate_brief on it too. Report validate_brief gaps in issues as warnings and finish ok:true.
+3. Turn whichever you found into a Brief with normalize_submission_to_brief (for a form submission), then check it with validate_brief. If the answers came from the tagged contact, build the Brief from those field values directly and call validate_brief on it too. Booking calendars go at the TOP level of the Brief as calendars:[{"name":"...","type":"one_on_one"|"round_robin"|"class","staffNames":["..."],"durationMinutes":30}], one entry per calendar, never inside goal. Report validate_brief gaps in issues as warnings and finish ok:true.
 Use these authoritative normalized intake answers when provided: ${JSON.stringify(ctx?.normalizedAnswers ?? {})}.
 Do NOT create, update or delete anything \u2014 this step only reads and normalizes.
 Only if BOTH paths come up empty, finish with RESULT: {"ok":false,"error":"Open the real form, submit it, then refresh."}.
@@ -28609,6 +28953,7 @@ RESULT: {"ok":true,"summary":"<what you checked and the headline result>","issue
       5: "Manual tasks only a human can do (A2P, Google auth, staff, phone)",
       6: "Go-live sign-off"
     };
+    RESULT_LAST_RULE = "\nThe RESULT line must be the very last thing you print: make no tool calls after it, and print nothing after it.";
   }
 });
 
@@ -29631,10 +29976,10 @@ function askNoTools(prompt, opts = {}) {
       resolve13("");
       return;
     }
-    const cmd = claudeCommand(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY]);
+    const cmd = claudeCommand(bin, ["-p", prompt, "--output-format", "stream-json", "--verbose", "--max-turns", String(opts.maxTurns ?? 3), "--allowedTools", "", "--disallowedTools", NO_TOOLS_DENY, ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process2.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"], env: { ...process.env } });
     const timeout = setTimeout(() => child.kill("SIGKILL"), opts.timeoutMs ?? 3 * 60 * 1e3);
-    let lastText = "";
+    const texts = new RunTexts();
     let buffered = "";
     let costUsd;
     let reported = false;
@@ -29654,11 +29999,7 @@ function askNoTools(prompt, opts = {}) {
         try {
           const ev = JSON.parse(line3);
           if (ev.type === "result" && typeof ev.total_cost_usd === "number") costUsd = ev.total_cost_usd;
-          if (ev.type === "assistant") {
-            for (const b of ev.message?.content ?? []) if (b.type === "text" && b.text?.trim()) lastText = b.text;
-          } else if (ev.type === "result" && typeof ev.result === "string" && ev.result.trim()) {
-            lastText = ev.result;
-          }
+          texts.event(ev);
         } catch {
         }
       }
@@ -29666,12 +30007,12 @@ function askNoTools(prompt, opts = {}) {
     child.on("error", () => {
       clearTimeout(timeout);
       report3();
-      resolve13(lastText);
+      resolve13(texts.pick());
     });
     child.on("close", () => {
       clearTimeout(timeout);
       report3();
-      resolve13(lastText);
+      resolve13(texts.pick());
     });
   });
 }
@@ -29682,6 +30023,7 @@ var init_handoff_run = __esm({
     import_node_child_process2 = require("node:child_process");
     init_stage_runner();
     init_claude_locate();
+    init_result_text();
     init_handoff_pack();
     CLIENT_SENTENCE_RULES = "Write for the business owner, not a developer. Complete sentences that end with a period; never trail off. One or two sentences per item, no more. Everyday words: say 'text messaging registration (A2P)' not 'A2P'; 'the calendar is not connected to Google or Outlook yet' not 'OAuth'; 'nothing was wrong' not 'status ok'. No tool names, no ids, no field names in code style, no JSON, no arrows. Keep the names of workflows, pipelines and forms because the client will recognise them. If a list is long, name the first few and say how many in total. State what is in place, or what is missing and why, plainly. An item marked 'done but not confirmed' has NOT been confirmed: never describe it as having happened or been observed; say what is still to be confirmed and how (for example, 'this is confirmed on the handoff call, when you complete one task in the account without help').";
     NO_TOOLS_DENY = "Bash,Write,Edit,MultiEdit,NotebookEdit,WebFetch,WebSearch,Task,TodoWrite,Read,Glob,Grep";
@@ -30078,6 +30420,9 @@ function findingsFor(outcome) {
   const list4 = outcome.plain?.issues?.length ? outcome.plain.issues : outcome.issues;
   return (list4 ?? []).map((s) => String(s).trim()).filter(Boolean);
 }
+function openTasks(tasks2) {
+  return tasks2.filter((t) => !(t.claimed === true && typeof t.text === "string" && SELF_REPORTED.test(t.text)));
+}
 function mergeTasks(previous, findings, now = (/* @__PURE__ */ new Date()).toISOString()) {
   const before = new Map(previous.map((t) => [t.id, t]));
   const seen = /* @__PURE__ */ new Set();
@@ -30087,7 +30432,9 @@ function mergeTasks(previous, findings, now = (/* @__PURE__ */ new Date()).toISO
     if (seen.has(id)) continue;
     seen.add(id);
     const prior = before.get(id);
-    if (prior?.claimed) {
+    if (prior?.claimed && SELF_REPORTED.test(text2)) {
+      out.push(prior);
+    } else if (prior?.claimed) {
       out.push({ id, text: text2, reappeared: true });
     } else {
       out.push({ id, text: text2, ...prior?.reappeared ? { reappeared: true } : {} });
@@ -30105,7 +30452,7 @@ function manualProgress(tasks2, verifyHasRun) {
   const total = tasks2.length;
   const claimed = tasks2.filter((t) => t.claimed).length;
   const reappeared = tasks2.filter((t) => t.reappeared).length;
-  const clear = verifyHasRun && total === 0;
+  const clear = verifyHasRun && openTasks(tasks2).length === 0;
   let line3;
   if (!verifyHasRun) {
     line3 = "Run the check first. It writes this list for you.";
@@ -30139,9 +30486,11 @@ function manualSignOffRefusal(tasks2, verifyHasRun) {
   }
   return "Everything is ticked, but the check has not confirmed it yet. Run the check again and this will clear on its own.";
 }
+var SELF_REPORTED;
 var init_manual_tasks = __esm({
   "src/manual-tasks.ts"() {
     "use strict";
+    SELF_REPORTED = /^[^:]+: Bought, but not built automatically yet\./;
   }
 });
 
@@ -30323,7 +30672,7 @@ function deriveQueue(input) {
     if (stages.every((s) => s === "done")) {
       const proof2 = lastProof(state, locationId2, QUEUE_STEPS.length);
       const claim = liveClaim(true, state.goLive?.[locationId2], state.outcomes?.[`${locationId2}:3`]?.at);
-      const signedLive = claim.live && state.outcomes?.[`${locationId2}:4`]?.ok === true && !state.outcomes?.[`${locationId2}:4`]?.issues?.length && !state.manualTasks?.[locationId2]?.length && !state.staleClients?.includes(locationId2);
+      const signedLive = claim.live && state.outcomes?.[`${locationId2}:4`]?.ok === true && !state.outcomes?.[`${locationId2}:4`]?.issues?.length && !openTasks(state.manualTasks?.[locationId2] ?? []).length && !state.staleClients?.includes(locationId2);
       finished.push({
         locationId: locationId2,
         clientName: name,
@@ -30457,6 +30806,7 @@ var init_work_queue = __esm({
     "use strict";
     init_stage_runner();
     init_plain_outcome();
+    init_manual_tasks();
     init_go_live();
     QUEUE_STEPS = [
       { label: "Intake", todo: "Set up the intake questions for {client}", why: "Command OS puts the questionnaire into their account." },
@@ -32152,7 +32502,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.89.0-beta.1",
+      version: "3.89.0-beta.3",
       mcpName: "io.github.drjerryrelth/ghl-command",
       description: "GoHighLevel MCP Server for Claude. 250 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
@@ -33376,10 +33726,12 @@ function judgeSteps(rawRows, contactId, workflowNames) {
     }
   };
 }
-function liveStepLogReader(locationId2, headers, fetchFn = fetch) {
+function liveStepLogReader(locationId2, headers, fetchFn = fetch, onUnauthorized) {
   return async (workflowId, fromMs, toMs) => {
     const q3 = new URLSearchParams({ action: "first", dateType: "custom", fromDate: String(Math.floor(fromMs)), toDate: String(Math.ceil(toMs)), limit: String(STEP_LOG_LIMIT), locationId: locationId2, workflowId });
-    const res = await fetchFn(`https://backend.leadconnectorhq.com/workflows/logs/v2?${q3}`, { headers: await headers() });
+    const used = await headers();
+    const res = await fetchFn(`https://backend.leadconnectorhq.com/workflows/logs/v2?${q3}`, { headers: used });
+    if (res.status === 401) onUnauthorized?.(used);
     if (!res.ok) throw new Error(`HTTP ${res.status}`);
     const body = await res.json();
     if (!Array.isArray(body)) throw new Error("the log came back in a shape this version does not know");
@@ -35892,7 +36244,7 @@ function workflowReadConnection(registry2, client, companyId) {
   const home = companyId && companyId === process.env.GHL_COMPANY_ID ? registry2.getFirebase() : void 0;
   const config3 = fb ?? home ?? (companyId && companyId === process.env.GHL_COMPANY_ID && process.env.GHL_FIREBASE_REFRESH_TOKEN ? { apiKey: process.env.GHL_FIREBASE_API_KEY, refreshToken: process.env.GHL_FIREBASE_REFRESH_TOKEN, userId: process.env.GHL_USER_ID } : void 0);
   if (!config3?.apiKey || !config3.userId) throw new Error(BUILDER_REPAIR_MESSAGE);
-  return new WorkflowBuilderClient({ firebaseApiKey: config3.apiKey, refreshToken: config3.refreshToken, userId: config3.userId, apiKey: client.getApiKey(), locationId: locationId2, companyId });
+  return new WorkflowBuilderClient({ firebaseApiKey: config3.apiKey, refreshToken: config3.refreshToken, userId: config3.userId, apiKey: client.getApiKey(), locationId: locationId2, companyId, registry: registry2 });
 }
 var BUILDER_REPAIR_MESSAGE;
 var init_workflow_read_connection = __esm({
@@ -38194,6 +38546,13 @@ function saveBuildObligations(id, items) {
   fs30.writeFileSync(file2 + ".tmp", JSON.stringify([...merged.values()], null, 2), { mode: 384 });
   fs30.renameSync(file2 + ".tmp", file2);
 }
+function replaceBuildObligationsOfType(id, type, items) {
+  const kept = readBuildObligations(id).filter((m) => m.type !== type);
+  const file2 = fileFor(id);
+  fs30.mkdirSync(path28.dirname(file2), { recursive: true });
+  fs30.writeFileSync(file2 + ".tmp", JSON.stringify([...kept, ...items.map((i) => ({ ...i, type }))], null, 2), { mode: 384 });
+  fs30.renameSync(file2 + ".tmp", file2);
+}
 function planObjectRefs(plan) {
   const refs2 = /* @__PURE__ */ new Set();
   const visit = (value) => {
@@ -38212,7 +38571,7 @@ function planObjectRefs(plan) {
 function reconcileBuildObligations(id, checks, currentPlan) {
   const refs2 = currentPlan && typeof currentPlan === "object" ? planObjectRefs(currentPlan) : void 0;
   const workflows = currentPlan?.workflows;
-  const stillPlanned = (item) => !refs2 || refs2.has(item.ref) || // The producer keys each manual job by workflow name and local job index.
+  const stillPlanned = (item) => !refs2 || refs2.has(item.ref) || NOT_FROM_PLAN.has(item.type) || // The producer keys each manual job by workflow name and local job index.
   // Its index can change or disappear from a later preview without completion.
   item.type === "workflow-manual" && Array.isArray(workflows) && workflows.some((workflow) => item.ref.startsWith(`${workflow.name}:`) && /^\d+$/.test(item.ref.slice(workflow.name.length + 1)));
   const remaining = readBuildObligations(id).filter((item) => stillPlanned(item) && !checks.some((c) => c.ref === item.ref && c.type === item.type && c.ok === true && typeof c.evidence === "string" && c.evidence.trim()));
@@ -38221,13 +38580,14 @@ function reconcileBuildObligations(id, checks, currentPlan) {
   fs30.writeFileSync(file2 + ".tmp", JSON.stringify(remaining, null, 2), { mode: 384 });
   fs30.renameSync(file2 + ".tmp", file2);
 }
-var fs30, path28;
+var fs30, path28, NOT_FROM_PLAN;
 var init_build_obligations = __esm({
   "src/build-obligations.ts"() {
     "use strict";
     fs30 = __toESM(require("node:fs"));
     path28 = __toESM(require("node:path"));
     init_credentials_store();
+    NOT_FROM_PLAN = /* @__PURE__ */ new Set(["bought-not-built"]);
   }
 });
 
@@ -38873,12 +39233,12 @@ var init_run_cost = __esm({
 function callClaudeRecorded(bin, argv, context, onCost = () => {
 }) {
   return new Promise((resolve13, reject) => {
-    let text2 = "";
+    const run = new RunTexts();
     let buffer = "";
     let stderr = "";
     let facts = {};
     let settled = false;
-    const cmd = claudeCommand(bin, [...argv, "--output-format", "stream-json", "--verbose"]);
+    const cmd = claudeCommand(bin, [...argv, "--output-format", "stream-json", "--verbose", ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process5.spawn)(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"] });
     const timer = setTimeout(() => child.kill("SIGKILL"), 6 * 60 * 1e3);
     const finish3 = (ok) => {
@@ -38891,17 +39251,14 @@ function callClaudeRecorded(bin, argv, context, onCost = () => {
         onCost("The cost record could not be saved.");
       }
       onCost(`${context.kind}: ${facts.costUsd === void 0 ? "cost not reported" : formatUsd(facts.costUsd)}.`);
-      if (ok) resolve13(text2);
+      if (ok) resolve13(run.pick());
       else reject(new Error("Check your Claude authentication in Your agency before reading this source."));
     };
     const consume = (line3) => {
       try {
         const ev = JSON.parse(line3);
         facts = { ...facts, ...readEngineFacts(ev) };
-        if (ev.type === "assistant") {
-          for (const block of ev.message?.content ?? []) if (block.type === "text") text2 = block.text;
-        }
-        if (ev.type === "result" && typeof ev.result === "string") text2 = ev.result;
+        run.event(ev);
       } catch {
       }
     };
@@ -38919,7 +39276,7 @@ function callClaudeRecorded(bin, argv, context, onCost = () => {
     child.on("error", () => finish3(false));
     child.on("close", (code) => {
       if (buffer.trim()) consume(buffer);
-      finish3(code === 0 && Boolean(text2));
+      finish3(code === 0 && !run.empty);
     });
   });
 }
@@ -38931,6 +39288,7 @@ var init_claude_call = __esm({
     init_run_cost();
     init_claude_cli();
     init_claude_locate();
+    init_result_text();
   }
 });
 
@@ -39151,10 +39509,40 @@ function briefWarnings(brief) {
   }
   return out;
 }
+function liftGoalCalendars(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input)) return { input, notes: [] };
+  const brief = input;
+  const goal = brief.goal;
+  if (!goal || typeof goal !== "object" || Array.isArray(goal)) return { input, notes: [] };
+  const misplaced = goal.calendars;
+  if (!Array.isArray(misplaced)) return { input, notes: [] };
+  const top = brief.calendars;
+  if (Array.isArray(top) && top.length > 0) {
+    if (misplaced.length === 0) return { input, notes: [] };
+    const names = misplaced.map((c, i) => {
+      const n = c?.name;
+      return typeof n === "string" && n.trim() ? `"${n.trim()}"` : `entry ${i + 1}`;
+    });
+    return {
+      input,
+      notes: [`The brief lists calendars at the top level, so the ${misplaced.length === 1 ? "calendar" : "calendars"} under goal.calendars (${names.join(", ")}) ${misplaced.length === 1 ? "was" : "were"} ignored; move any that are needed into the top-level calendars list.`]
+    };
+  }
+  const lifted = [];
+  const notes = [];
+  misplaced.forEach((c, i) => {
+    const r = briefCalendarSchema.safeParse(c);
+    if (r.success) lifted.push(r.data);
+    else notes.push(`Calendar ${i + 1} under goal.calendars could not be read (${r.error.issues.map((x) => `${x.path.join(".") || "entry"}: ${x.message}`).join("; ")}); give it a name, a type (${BRIEF_CALENDAR_TYPES.join(", ")}) and staffNames.`);
+  });
+  const { calendars: _moved, ...restGoal } = goal;
+  return { input: { ...brief, goal: restGoal, ...lifted.length ? { calendars: lifted } : {} }, notes };
+}
 function validateBrief(input) {
-  const parsed2 = briefSchema.safeParse(input);
+  const lifted = liftGoalCalendars(input);
+  const parsed2 = briefSchema.safeParse(lifted.input);
   if (parsed2.success) {
-    return { valid: true, errors: [], warnings: briefWarnings(parsed2.data), brief: parsed2.data };
+    return { valid: true, errors: [], warnings: [...lifted.notes, ...briefWarnings(parsed2.data)], brief: parsed2.data };
   }
   return {
     valid: false,
@@ -39302,8 +39690,12 @@ function firstString(v) {
   }
   return void 0;
 }
-function splitList(text2) {
-  return text2.split(/\r?\n|;|•/).flatMap((line3) => line3.includes(",") && !/\d,\d/.test(line3) ? line3.split(",") : [line3]).map((s) => s.replace(/^[\s\-*\d.)]+/, "").trim()).filter(Boolean);
+function splitList(text2, opts = {}) {
+  let lines = text2.split(/\r?\n/).filter((l) => l.trim());
+  if (lines.length > 1 && /:\s*$/.test(lines[0])) lines = lines.slice(1);
+  const oneLine = (line3) => line3.split(/;|•/).flatMap((part) => opts.commas !== false && part.includes(",") && !/\d,\d/.test(part) ? part.split(",") : [part]);
+  const items = lines.length > 1 ? lines : lines.flatMap(oneLine);
+  return items.map((s) => s.replace(/^[\s\-*•\d.)]+/, "").replace(/[\s,;]+$/, "").trim()).filter(Boolean);
 }
 function parsePricePoints(text2) {
   const out = [];
@@ -39316,10 +39708,13 @@ function parsePricePoints(text2) {
     const t = segment.trim().replace(/\.$/, "");
     if (!t) continue;
     const m = t.match(ENTRY);
+    const withTerms = m ? null : t.match(/^(.*?)\s*[-–—:|]?\s*\$\s*([\d,]+(?:\.\d+)?)\s*(.+)$/);
     if (m && m[2]) {
       const name = clean3(m[1]);
       const price = (m[3] ? `${num3(m[2])}-${num3(m[3])}` : num3(m[2])) + recur(m[4]);
       out.push({ name: name || t, price });
+    } else if (withTerms && clean3(withTerms[1])) {
+      out.push({ name: clean3(withTerms[1]), price: num3(withTerms[2]) + (withTerms[3].trim().startsWith("/") ? "" : " ") + withTerms[3].trim() });
     } else {
       out.push({ name: t, price: "" });
     }
@@ -39335,7 +39730,16 @@ function cleanLines(text2) {
 function parseStaffLines(text2) {
   const staff = [];
   const warnings = [];
-  cleanLines(text2).forEach((line3, i) => {
+  const emailsIn = (t) => splitFields(t).filter((f) => EMAIL_RE2.test(f.replace(/^e-?mail\s*[:=]\s*/i, ""))).length;
+  const lines = cleanLines(text2).flatMap((line3) => {
+    if (!line3.includes(";") || emailsIn(line3) < 2) return [line3];
+    const pieces = line3.split(";").map((p) => p.trim()).filter(Boolean);
+    return pieces.every((p) => emailsIn(p) === 1) ? pieces : [line3];
+  });
+  lines.forEach((line3, i) => {
+    if (emailsIn(line3) > 1) {
+      warnings.push(`Staff line ${i + 1} ("${line3}") lists more than one email address, so only the first person was read. Put one person per line.`);
+    }
     const fields = splitFields(line3);
     let email;
     let mobile;
@@ -39473,12 +39877,29 @@ function cleanPersonCandidate(s) {
   if (durationMinutesFromWords(t) !== void 0) return void 0;
   return t;
 }
-function parseCalendarEntry(entry, index, calendars, warnings, knownStaffNames) {
-  const fields = splitFields(entry);
+function parseCalendarEntry(entry, index, calendars, warnings, knownStaffNames, sharedPeople = []) {
+  let bracketMinutes;
+  const bracketNotes = [];
+  const bracketPeople = [];
+  const staffIn = (part) => knownStaffNames.length ? matchesStaffName(part.replace(/^(?:with|by)\s+/i, ""), knownStaffNames) : void 0;
+  const unbracketed = entry.replace(/\s*\(([^()]*)\)/g, (whole, inner) => {
+    const hasLength = countDurations(inner) > 0;
+    if (!hasLength && !/[,$;]/.test(inner) && !staffIn(inner)) return whole;
+    const parts = inner.split(/[,;]/).map((x) => x.trim()).filter(Boolean);
+    for (const part of parts) {
+      const d = durationInProse(part);
+      const person = staffIn(part);
+      if (d && bracketMinutes === void 0 && !d.rest.replace(/[\s.,;:-]+/g, "")) bracketMinutes = d.minutes;
+      else if (person) bracketPeople.push(person);
+      else bracketNotes.push(part);
+    }
+    return " ";
+  }).replace(/\s{2,}/g, " ").trim();
+  const fields = splitFields(unbracketed);
   let nameField = fields.shift() ?? "";
   let type;
-  let durationMinutes;
-  const candidates = [];
+  let durationMinutes = bracketMinutes;
+  const candidates = [...sharedPeople, ...bracketPeople];
   let proseName = false;
   const inName = durationInProse(nameField);
   if (inName) {
@@ -39539,6 +39960,9 @@ function parseCalendarEntry(entry, index, calendars, warnings, knownStaffNames)
     warnings.push(`Calendar line ${index + 1} ("${entry}") was skipped: no calendar name found.`);
     return;
   }
+  if (bracketNotes.length) {
+    warnings.push(`Calendar "${name}": Review the details "${bracketNotes.join(", ")}". They were kept as a note, not as calendar settings.`);
+  }
   const people = [];
   for (const c of candidates) {
     const cleaned = cleanPersonCandidate(c);
@@ -39581,10 +40005,18 @@ function parseCalendarLines(text2, knownStaffNames = []) {
   const calendars = [];
   const warnings = [];
   const entries = [];
+  const sharedPeople = [];
+  const SHARED = /(?:^|[.;]\s*)(?:both|all|each)(?:\s+(?:of\s+them|calendars?|are|is))*\s+(?:with|by|for)\s+([^.;\n]+)[.;]?\s*$/i;
   for (const rawLine of text2.split(/\r?\n/)) {
     let line3 = rawLine.replace(/^[\s\-*•]+/, "").trim();
     if (!line3) continue;
-    line3 = line3.replace(LEADING_COUNT_WITH_NOUN, "").replace(LEADING_COUNT_BEFORE_MARKER, "");
+    const shared = SHARED.exec(line3);
+    if (shared) {
+      sharedPeople.push(...splitNames(shared[1]));
+      line3 = line3.slice(0, shared.index).trim();
+      if (!line3) continue;
+    }
+    line3 = line3.replace(LEADING_COUNT_WITH_NOUN, "").replace(LEADING_COUNT_BEFORE_MARKER, "").replace(LEADING_BARE_COUNT, "");
     for (const marked3 of splitOnMarkers(line3)) {
       for (const clause of splitOnAnd(marked3)) {
         const cleaned = clause.replace(/^\(?\d{1,2}[).]\s+/, "").replace(/^[\s\-*•]+/, "").trim();
@@ -39592,7 +40024,7 @@ function parseCalendarLines(text2, knownStaffNames = []) {
       }
     }
   }
-  entries.forEach((entry, i) => parseCalendarEntry(entry, i, calendars, warnings, knownStaffNames));
+  entries.forEach((entry, i) => parseCalendarEntry(entry, i, calendars, warnings, knownStaffNames, sharedPeople));
   return { calendars, warnings };
 }
 function coerceTriState(v) {
@@ -39620,6 +40052,10 @@ function coerceValue(raw, kind, warnings) {
       const s = firstString(raw);
       return s ? splitList(s) : void 0;
     }
+    case "textList": {
+      const s = firstString(raw);
+      return s ? splitList(s, { commas: false }) : void 0;
+    }
     case "pricePoints": {
       const s = firstString(raw);
       return s ? parsePricePoints(s) : void 0;
@@ -39807,7 +40243,7 @@ function normalizeSubmissionToBrief(opts) {
   brief.flags = deriveFlags(brief);
   return brief;
 }
-var EMAIL_RE2, PHONE_RE, CALENDAR_TYPE_WORDS, DURATION_IN_PROSE, COUNT_WORD, LEADING_COUNT_BEFORE_MARKER, LEADING_COUNT_WITH_NOUN, ASSIGNMENT_SLOTS;
+var EMAIL_RE2, PHONE_RE, CALENDAR_TYPE_WORDS, DURATION_IN_PROSE, COUNT_WORD, LEADING_COUNT_BEFORE_MARKER, LEADING_COUNT_WITH_NOUN, LEADING_BARE_COUNT, ASSIGNMENT_SLOTS;
 var init_normalizer = __esm({
   "src/intake-to-build/normalizer.ts"() {
     "use strict";
@@ -39826,6 +40262,7 @@ var init_normalizer = __esm({
       `^\\s*(?:(?:we|i)(?:'d| would| will)?\\s*(?:need|want|like|use)\\s+)?${COUNT_WORD}\\s+(?:booking\\s+)?calendars?\\s*[.:;,\u2013\u2014-]+\\s*`,
       "i"
     );
+    LEADING_BARE_COUNT = new RegExp(`^\\s*${COUNT_WORD}\\s*:\\s+`, "i");
     ASSIGNMENT_SLOTS = [
       { key: "notifyName", label: "who should be notified about new leads" },
       { key: "callsName", label: "who takes booking and follow-up calls" }
@@ -40034,18 +40471,33 @@ function keptByCondition(items, ctx) {
 function isFillBlock(v) {
   return !!v && typeof v === "object" && !Array.isArray(v) && ("fillFrom" in v || "transform" in v);
 }
-function composeStages(block, ctx, referencedStageRefs) {
+function slugHasPhrase(slug4, phrase) {
+  return `_${slug4}_`.includes(`_${slugify2(phrase)}_`);
+}
+function isTerminalStage(name) {
+  const s = slugify2(name);
+  return TERMINAL_STAGE_WORDS.some((w) => slugHasPhrase(s, w));
+}
+function stringList(v) {
+  return Array.isArray(v) ? v.filter((x) => typeof x === "string" && x.trim() !== "") : [];
+}
+function composeStages(block, ctx, uses, remaps) {
   const defaults = isFillBlock(block) ? keptByCondition(block.default ?? [], ctx) : keptByCondition(block, ctx);
-  const defaultList = defaults.map((d) => ({ ref: String(d.ref), name: fillString(String(d.name), ctx) }));
+  const defaultList = defaults.map((d) => ({
+    ref: String(d.ref),
+    name: fillString(String(d.name), ctx),
+    aliases: stringList(d.aliases)
+  }));
   const briefStages = (ctx.brief.goal.salesStages ?? []).map((s) => s.trim()).filter(Boolean);
   if (!isFillBlock(block) || briefStages.length === 0) {
-    return defaultList.map((d, i) => ({ ...d, position: i }));
+    return defaultList.map((d, i) => ({ ref: d.ref, name: d.name, position: i }));
   }
   const bySlug = /* @__PURE__ */ new Map();
   for (const d of defaultList) {
     bySlug.set(slugify2(d.name), d);
     bySlug.set(d.ref.replace(/^stage\./, ""), d);
   }
+  const defaultRefs = new Set(defaultList.map((d) => d.ref));
   const out = [];
   const usedRefs = /* @__PURE__ */ new Set();
   for (const name of briefStages) {
@@ -40056,39 +40508,160 @@ function composeStages(block, ctx, referencedStageRefs) {
     } else {
       let ref = `stage.${slugify2(name)}`;
       let n = 2;
-      while (usedRefs.has(ref)) ref = `stage.${slugify2(name)}_${n++}`;
+      while (usedRefs.has(ref) || defaultRefs.has(ref)) ref = `stage.${slugify2(name)}_${n++}`;
       usedRefs.add(ref);
       out.push({ ref, name });
     }
   }
-  for (const d of defaultList) {
-    if (usedRefs.has(d.ref)) continue;
-    if (!referencedStageRefs.has(d.ref)) continue;
+  const findClientStage = (phrases, allowTerminal, skipOwned) => {
+    for (const phrase of phrases) {
+      for (const s of out) {
+        if (!allowTerminal && isTerminalStage(s.name)) continue;
+        if (skipOwned && defaultRefs.has(s.ref)) continue;
+        if (slugHasPhrase(slugify2(s.name), phrase)) return s;
+      }
+    }
+    return void 0;
+  };
+  const defaultName = (ref) => defaultList.find((d) => d.ref === ref)?.name ?? ref.replace(/^stage\./, "");
+  const stillReferenced = /* @__PURE__ */ new Set();
+  const preferred = /* @__PURE__ */ new Set();
+  for (const u of uses) {
+    const key = `${u.workflowRef}\0${u.ref}`;
+    if (preferred.has(key)) continue;
+    const target = u.prefer?.length ? findClientStage(u.prefer, true, false) : void 0;
+    if (!target) {
+      stillReferenced.add(u.ref);
+      continue;
+    }
+    preferred.add(key);
+    if (target.ref === u.ref) continue;
+    let m = remaps.byWorkflow.get(u.workflowRef);
+    if (!m) {
+      m = /* @__PURE__ */ new Map();
+      remaps.byWorkflow.set(u.workflowRef, m);
+    }
+    m.set(u.ref, target.ref);
+    ctx.warnings.push(
+      `Mapped "${defaultName(u.ref)}" automations in ${u.workflowName} onto your "${target.name}" stage.`
+    );
+  }
+  const pending = defaultList.filter((d) => !usedRefs.has(d.ref) && stillReferenced.has(d.ref));
+  const candidates = [];
+  for (const d of pending) {
+    const terminalRef = isTerminalStage(d.name);
+    const phrases = [d.name, ...d.aliases];
+    for (const [sIdx, s] of out.entries()) {
+      if (defaultRefs.has(s.ref)) continue;
+      if (!terminalRef && isTerminalStage(s.name)) continue;
+      const slug4 = slugify2(s.name);
+      const aliasIdx = phrases.findIndex((p) => slugHasPhrase(slug4, p));
+      if (aliasIdx < 0) continue;
+      const best = phrases.filter((p) => slugHasPhrase(slug4, p)).map(slugify2).sort((a, b) => b.split("_").length - a.split("_").length || b.length - a.length)[0];
+      candidates.push({ d, s, words: best.split("_").length, len: best.length, aliasIdx, dIdx: defaultList.indexOf(d), sIdx });
+    }
+  }
+  candidates.sort((a, b) => b.words - a.words || b.len - a.len || a.aliasIdx - b.aliasIdx || a.dIdx - b.dIdx || a.sIdx - b.sIdx);
+  const taken = /* @__PURE__ */ new Set();
+  const mapped = /* @__PURE__ */ new Set();
+  for (const c of candidates) {
+    if (mapped.has(c.d.ref) || taken.has(c.s.ref)) continue;
+    mapped.add(c.d.ref);
+    taken.add(c.s.ref);
+    remaps.global.set(c.d.ref, c.s.ref);
+  }
+  const first2 = defaultList[0];
+  if (first2 && pending.includes(first2) && !mapped.has(first2.ref) && out[0] && !defaultRefs.has(out[0].ref) && !taken.has(out[0].ref) && !isTerminalStage(out[0].name)) {
+    mapped.add(first2.ref);
+    taken.add(out[0].ref);
+    remaps.global.set(first2.ref, out[0].ref);
+  }
+  for (const d of pending) {
+    const to = remaps.global.get(d.ref);
+    const s = to ? out.find((x) => x.ref === to) : void 0;
+    if (s) ctx.warnings.push(`Mapped "${d.name}" automations onto your "${s.name}" stage.`);
+  }
+  const placedAt = (ref) => {
+    const target = remaps.global.get(ref) ?? ref;
+    return out.findIndex((x) => x.ref === target);
+  };
+  for (const d of pending) {
+    if (mapped.has(d.ref)) continue;
+    const i = defaultList.indexOf(d);
+    const firstTerminal = out.findIndex((s) => isTerminalStage(s.name));
+    let at = -1;
+    let where = "";
+    for (let j = i - 1; j >= 0 && at < 0; j--) {
+      const k = placedAt(defaultList[j].ref);
+      if (k >= 0 && !isTerminalStage(out[k].name)) {
+        at = k + 1;
+        where = `just after your "${out[k].name}" stage`;
+      }
+    }
+    for (let j = i + 1; j < defaultList.length && at < 0; j++) {
+      const k = placedAt(defaultList[j].ref);
+      if (k >= 0 && !isTerminalStage(out[k].name)) {
+        at = k;
+        where = `just before your "${out[k].name}" stage`;
+      }
+    }
+    if (at >= 0 && firstTerminal >= 0 && at > firstTerminal) at = -1;
+    if (at < 0 && firstTerminal >= 0) {
+      at = firstTerminal;
+      where = `just before your "${out[firstTerminal].name}" stage`;
+    }
+    if (at < 0) {
+      at = out.length;
+      where = "at the end of your stages";
+    }
+    out.splice(at, 0, { ref: d.ref, name: d.name });
     usedRefs.add(d.ref);
-    out.push(d);
     ctx.warnings.push(
-      `Kept the "${d.name}" pipeline stage even though the intake's stage list did not mention it \u2014 the automations move deals into it.`
+      `Kept the "${d.name}" pipeline stage even though the intake's stage list did not mention it and none of its stages matches it; the automations move deals into it. It sits ${where}.`
     );
   }
   return out.map((s, i) => ({ ...s, position: i }));
 }
-function collectReferencedStageRefs(workflows, ctx) {
-  const refs2 = /* @__PURE__ */ new Set();
-  const scanActions = (actions) => {
-    for (const a of keptByCondition(actions, ctx)) {
-      if (typeof a.stageRef === "string") refs2.add(a.stageRef);
-      if (a.type === "find_opportunity") {
-        scanActions(a.found);
-        scanActions(a.notFound);
-      }
-    }
-  };
+function collectStageUses(workflows, ctx) {
+  const uses = [];
   for (const w of workflows) {
+    const workflowRef = String(w.ref ?? "");
+    const workflowName = typeof w.name === "string" ? fillString(w.name, ctx) : workflowRef;
+    const pref = w.stagePreference && typeof w.stagePreference === "object" ? w.stagePreference : {};
+    const add2 = (ref) => {
+      const prefer = stringList(pref[ref]);
+      uses.push({ workflowRef, workflowName, ref, ...prefer.length ? { prefer } : {} });
+    };
+    const scanActions = (actions) => {
+      for (const a of keptByCondition(actions, ctx)) {
+        if (typeof a.stageRef === "string") add2(a.stageRef);
+        if (a.type === "find_opportunity") {
+          scanActions(a.found);
+          scanActions(a.notFound);
+        }
+      }
+    };
     const trig = w.trigger;
-    if (trig && typeof trig.stageRef === "string") refs2.add(trig.stageRef);
+    if (trig && typeof trig.stageRef === "string") add2(trig.stageRef);
     scanActions(w.actions);
   }
-  return refs2;
+  return uses;
+}
+function remapWorkflowStages(w, remaps) {
+  const own = remaps.byWorkflow.get(String(w.ref));
+  const to = (ref) => own?.get(ref) ?? remaps.global.get(ref) ?? ref;
+  const walk2 = (actions) => {
+    for (const a of actions ?? []) {
+      if (typeof a.stageRef === "string") a.stageRef = to(a.stageRef);
+      if (a.type === "find_opportunity") {
+        walk2(a.found);
+        walk2(a.notFound);
+      }
+    }
+  };
+  const trig = w.trigger;
+  if (trig && typeof trig.stageRef === "string") trig.stageRef = to(trig.stageRef);
+  walk2(w.actions);
 }
 function calendarTypeForBrief(briefType, calName, teamSize) {
   const mapped = BRIEF_CALENDAR_TYPE_MAP[briefType] ?? "event";
@@ -40246,12 +40819,13 @@ function planFromPreset(input) {
       ...omitted.length ? { omitted } : {}
     };
   })() : void 0;
-  const referencedStageRefs = collectReferencedStageRefs(keptWorkflowSkeletons, ctx);
+  const stageUses = collectStageUses(keptWorkflowSkeletons, ctx);
+  const stageRemaps = { global: /* @__PURE__ */ new Map(), byWorkflow: /* @__PURE__ */ new Map() };
   const users = ctx.users;
   const pipelines = keptByCondition(sk.pipelines, ctx).map((pl) => ({
     ref: String(pl.ref),
     name: fillString(String(pl.name), ctx),
-    stages: composeStages(pl.stages, ctx, referencedStageRefs)
+    stages: composeStages(pl.stages, ctx, stageUses, stageRemaps)
   }));
   const customFields = keptByCondition(sk.customFields, ctx).map((f) => fillNode(f, ctx));
   const tags = keptByCondition(sk.tags, ctx).map((t) => fillNode(t, ctx));
@@ -40303,7 +40877,9 @@ function planFromPreset(input) {
   const workflows = keptWorkflowSkeletons.map((raw) => {
     const { actions, ...rest } = raw;
     const w = fillNode(rest, ctx);
+    delete w.stagePreference;
     w.actions = composeActions(actions, ctx, templateRefByAsset);
+    remapWorkflowStages(w, stageRemaps);
     return w;
   });
   if (scope) {
@@ -40362,6 +40938,8 @@ function planFromPreset(input) {
   }
   const handoffs = keptByCondition(sk.handoffs, ctx).map((raw) => {
     const h = fillNode(raw, ctx);
+    if (typeof h.produces === "string") h.produces = stageRemaps.global.get(h.produces) ?? h.produces;
+    if (Array.isArray(h.blocks)) h.blocks = h.blocks.map((b) => stageRemaps.global.get(b) ?? b);
     if (typeof h.produces === "string" && !definedRefs.has(h.produces)) delete h.produces;
     if (Array.isArray(h.blocks)) {
       h.blocks = h.blocks.filter((b) => b.endsWith(".*") || definedRefs.has(b));
@@ -40554,7 +41132,7 @@ function loadPresetChoice(requested, briefPreset) {
   if (generic) return { ok: true, preset: generic, file: "generic-client.preset.json", note: "Using the generic preset." };
   return { ok: false, error: "No usable preset file was found in the library." };
 }
-var fs33, path31, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, BRIEF_CALENDAR_TYPE_MAP;
+var fs33, path31, PRESET_TOKEN_ROOTS, FLAG_ALIASES, INLINE_TOKEN_RE, ADMIN_ROLE_RE, TERMINAL_STAGE_WORDS, BRIEF_CALENDAR_TYPE_MAP;
 var init_plan_from_preset = __esm({
   "src/intake-to-build/plan-from-preset.ts"() {
     "use strict";
@@ -40571,6 +41149,28 @@ var init_plan_from_preset = __esm({
     };
     INLINE_TOKEN_RE = /\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*(?:\.[a-zA-Z0-9_]+|\[\d+\])*)\s*(?:\|\|([^}]*))?\}\}/g;
     ADMIN_ROLE_RE = /\b(owner|founder|admin|administrator|ceo|principal|director)\b/i;
+    TERMINAL_STAGE_WORDS = [
+      "lost",
+      "closed",
+      "won",
+      "no_show",
+      "noshow",
+      "no_sale",
+      "not_interested",
+      "not_a_fit",
+      "no_fit",
+      "disqualified",
+      "unqualified",
+      "dead",
+      "cancelled",
+      "canceled",
+      "declined",
+      "dnd",
+      "do_not_disturb",
+      "churned",
+      "lapsed",
+      "archived"
+    ];
     BRIEF_CALENDAR_TYPE_MAP = {
       one_on_one: "event",
       round_robin: "round_robin",
@@ -41349,6 +41949,193 @@ var init_attachment = __esm({
   }
 });
 
+// src/bought-list.ts
+function isBoughtId(x) {
+  return typeof x === "string" && BOUGHT_IDS.includes(x);
+}
+function boughtItemsFor(offered) {
+  return ASSESSMENT_FEATURES.map((f) => {
+    const id = f.id;
+    const base = { id, name: f.name, means: BOUGHT_MEANS[id] };
+    const feature = FEATURE_FOR_BOUGHT[id];
+    if (feature) {
+      const next = id === "missed" ? { next: CALL_ANSWERING_NEXT } : {};
+      if (!offered.includes(feature)) {
+        return { ...base, kind: "not-in-plan", feature, ...next, delivery: `Not built for this client: ${FEATURES[feature].name.toLowerCase()} is not in the plan for this industry.` };
+      }
+      return { ...base, kind: "built", feature, ...next, delivery: BUILT_LABEL[id] };
+    }
+    const other = OTHER_DELIVERY[id];
+    return { ...base, kind: other.kind, delivery: other.text };
+  });
+}
+function featuresFromBought(ticks, offered) {
+  return FEATURE_IDS.filter((f) => ticks.includes(BUILD_ASSESSMENT_FEATURE[f]) && offered.includes(f));
+}
+function scopeFromBought(ticks, offered, pkg2) {
+  const features = featuresFromBought(ticks, offered);
+  if (!pkg2 && offered.length && offered.every((f) => features.includes(f))) return { wholePreset: true };
+  return { ...pkg2 ? { package: pkg2 } : {}, features };
+}
+function isAssessmentChoice(x) {
+  return typeof x === "string" && ASSESSMENT_CHOICES.includes(x);
+}
+function ticksFor(state, rk) {
+  const saved = state.bought?.[rk];
+  if (Array.isArray(saved)) return { ticks: BOUGHT_IDS.filter((id) => saved.includes(id)), source: "saved" };
+  const sc = state.scope?.[rk];
+  if (sc && !sc.wholePreset && Array.isArray(sc.features)) {
+    const chosen = sc.features.filter(isFeatureId).map((f) => BUILD_ASSESSMENT_FEATURE[f]);
+    return { ticks: BOUGHT_IDS.filter((id) => !FEATURE_FOR_BOUGHT[id] || chosen.includes(id)), source: "scope" };
+  }
+  if (sc) return { ticks: [...BOUGHT_IDS], source: "scope" };
+  const purchases = state.assessmentPurchases?.[rk];
+  if (Array.isArray(purchases)) return { ticks: BOUGHT_IDS.filter((id) => purchases.includes(id)), source: "assessment" };
+  return { ticks: [...BOUGHT_IDS], source: "all" };
+}
+function assessmentAnswerOf(state, rk) {
+  if (state.assessmentAttachments?.[rk]) return "attached";
+  const c = state.assessmentChoice?.[rk]?.choice;
+  return isAssessmentChoice(c) ? c : null;
+}
+function secondClinicAssessmentMessage(clientKey, name) {
+  return `Nobody has answered the Assessment question for ${name ? name : `the second clinic "${clientKey}"`}, so nothing was approved or built. For a second clinic in a sub-account the only answer available for now is Build without an Assessment. Send the cockpit POST /api/assessment-choice with this sub-account's locationId, clientKey "${clientKey}" and choice "without". Then approve and build again.`;
+}
+function assessmentGateRefusal(state, rk, clientKey, name) {
+  const answer2 = assessmentAnswerOf(state, rk);
+  if (state.assessmentAttachments?.[rk] || answer2 === "without") return null;
+  if (clientKey) return secondClinicAssessmentMessage(clientKey, name);
+  if (answer2 === "attached") return ATTACH_THE_ASSESSMENT;
+  if (answer2 === "run-first") return RUN_THE_ASSESSMENT_FIRST;
+  return ANSWER_THE_ASSESSMENT_QUESTION;
+}
+function approvalBindingHash(scopeHash, state, rk) {
+  const saved = state.bought?.[rk];
+  const answer2 = assessmentAnswerOf(state, rk);
+  if (!Array.isArray(saved) && !answer2) return scopeHash;
+  const snapshot = state.assessmentAttachments?.[rk];
+  return contentHash({ scope: scopeHash, bought: Array.isArray(saved) ? [...new Set(saved)].sort() : null, assessment: answer2, attached: snapshot ? contentHash(snapshot) : null });
+}
+function boughtBindingHash(scopeHash, state, rk) {
+  const saved = state.bought?.[rk];
+  return contentHash({ scope: scopeHash, bought: Array.isArray(saved) ? [...new Set(saved)].sort() : null });
+}
+function boughtJobs(ticks, offered) {
+  return boughtItemsFor(offered).filter((item) => ticks.includes(item.id) && (item.kind === "go-live" || item.kind === "separate" || item.kind === "not-in-plan")).map((item) => ({
+    ref: `bought:${item.id}`,
+    type: BOUGHT_JOB_TYPE,
+    name: item.name,
+    reason: item.kind === "not-in-plan" ? "Bought, but not built automatically yet. It is not in the plan for this client's industry." : `Bought, but not built automatically yet. ${OTHER_DELIVERY[item.id].job}`
+  }));
+}
+function boughtJobLines(ticks, offered) {
+  return boughtJobs(ticks, offered).map((j) => `${j.name}: ${j.reason}`);
+}
+function claudeSuggestions(ticks) {
+  const out = [];
+  if (ticks.includes("missed")) out.push("Call answering: next step with Claude, an AI voice agent to answer live.");
+  if (ticks.includes("reporting")) out.push("Reporting: from Claude, a weekly client report. No account setup.");
+  return out;
+}
+function assessmentChoiceLine(answer2, attached = answer2 === "attached") {
+  if (attached) return "The Assessment was run and is attached.";
+  if (answer2 === "attached") return "The Assessment was run. It is not attached yet.";
+  if (answer2 === "without") return "No Assessment was run for this client.";
+  if (answer2 === "run-first") return "The Assessment will be run first.";
+  return "Not answered yet: has the Assessment been run for this client?";
+}
+function boughtViewFor(state, rk, offered) {
+  const { ticks, source } = ticksFor(state, rk);
+  return {
+    items: boughtItemsFor(offered),
+    ticks,
+    source,
+    answer: assessmentAnswerOf(state, rk),
+    attached: Boolean(state.assessmentAttachments?.[rk]),
+    ready: assessmentGateRefusal(state, rk) === null,
+    suggestions: source === "saved" ? claudeSuggestions(ticks) : []
+  };
+}
+function boughtDocumentFor(state, rk, offered) {
+  const { ticks, source } = ticksFor(state, rk);
+  const items = boughtItemsFor(offered);
+  const confirmed = source === "saved" || source === "scope";
+  const ticked = items.filter((i) => ticks.includes(i.id));
+  return {
+    confirmed,
+    assessment: assessmentChoiceLine(assessmentAnswerOf(state, rk), Boolean(state.assessmentAttachments?.[rk])),
+    bought: ticked.map((i) => ({ name: i.name, means: i.means, delivery: clientDelivery(i) })),
+    // The client reads this: never the agency's job text, and never "with Claude" (review of ea3526f).
+    stillToDo: ticked.flatMap((i) => {
+      if (i.kind === "go-live") return [`${i.name}: being set up in your account.`];
+      if (i.kind === "separate") return [`${i.name}: the form is ready. The pages are a separate piece of work.`];
+      if (i.kind === "not-in-plan") return [`${i.name}: being set up separately from this build.`];
+      if (i.kind === "claude") return [`${i.name}: a weekly report on what is working, sent to you.`];
+      return [];
+    }).concat(ticks.includes("missed") ? ["Call answering: live call answering by an AI voice agent is a possible next step."] : [])
+  };
+}
+function clientDelivery(i) {
+  if (i.kind === "go-live") return "Being set up in your account";
+  if (i.kind === "separate") return "The form is built; the pages are separate work";
+  if (i.kind === "not-in-plan") return "Not part of this build";
+  if (i.kind === "claude") return "A weekly report on what is working";
+  return i.delivery;
+}
+var BOUGHT_IDS, BOUGHT_MEANS, FEATURE_FOR_BOUGHT, BUILT_LABEL, OTHER_DELIVERY, CALL_ANSWERING_NEXT, ASSESSMENT_CHOICES, ANSWER_THE_ASSESSMENT_QUESTION, ATTACH_THE_ASSESSMENT, RUN_THE_ASSESSMENT_FIRST, BOUGHT_JOB_TYPE;
+var init_bought_list = __esm({
+  "src/bought-list.ts"() {
+    "use strict";
+    init_attachment();
+    init_features();
+    init_build_contract();
+    BOUGHT_IDS = ASSESSMENT_FEATURES.map((f) => f.id);
+    BOUGHT_MEANS = {
+      missed: "No call goes unanswered",
+      waited: "Every new lead hears back in seconds",
+      quotes: "No quote goes cold",
+      noshow: "Bookings confirmed, reminded and rescued",
+      reactivation: "Old leads and past clients brought back",
+      nurture: "Leads kept warm until they are ready",
+      recall: "Clients come back on schedule",
+      deposits: "Fewer no-shows, cash up front",
+      reviews: "More five-star reviews",
+      referrals: "Happy clients send friends",
+      lead_magnet: "A reason to give you their details",
+      sms: "Texts that actually get delivered",
+      pipeline: "Every lead tracked to a sale",
+      reporting: "The owner sees what is working"
+    };
+    FEATURE_FOR_BOUGHT = Object.fromEntries(
+      FEATURE_IDS.map((f) => [BUILD_ASSESSMENT_FEATURE[f], f])
+    );
+    BUILT_LABEL = {
+      missed: "Built: missed-call text-back",
+      waited: "Built: Speed to Lead",
+      quotes: "Built: Quote follow-up",
+      noshow: "Built: booking, reminders and no-show rescue",
+      reactivation: "Built: Win-back",
+      nurture: "Built: 30-day lead nurture",
+      reviews: "Built: Review requests"
+    };
+    OTHER_DELIVERY = {
+      pipeline: { kind: "always", text: "Always built: Sales pipeline" },
+      recall: { kind: "go-live", text: "Go-live job for now: Rebooking and recall", job: "Set up rebooking and recall in the account." },
+      referrals: { kind: "go-live", text: "Go-live job for now: Referral requests", job: "Set up referral requests in the account." },
+      deposits: { kind: "go-live", text: "Go-live job: Deposits and prepayment (payment setup is done in the account)", job: "Payment setup is done in the account." },
+      sms: { kind: "go-live", text: "Go-live job: SMS capability (phone number and text registration)", job: "Get the phone number and finish text registration." },
+      lead_magnet: { kind: "separate", text: "Separate job: Lead magnet (the form is built; pages are separate work)", job: "The form is built. The pages are separate work." },
+      reporting: { kind: "claude", text: "From Claude: Reporting (weekly client report, no account setup)" }
+    };
+    CALL_ANSWERING_NEXT = "Next step with Claude: an AI voice agent to answer live";
+    ASSESSMENT_CHOICES = ["attached", "run-first", "without"];
+    ANSWER_THE_ASSESSMENT_QUESTION = "Answer the Assessment question before approving: Blueprint Review, then Have you run the Assessment for this client.";
+    ATTACH_THE_ASSESSMENT = "Attach the Assessment before approving, or choose Build without an Assessment.";
+    RUN_THE_ASSESSMENT_FIRST = "You chose to run the Assessment first. Attach it when it is done, or choose Build without an Assessment.";
+    BOUGHT_JOB_TYPE = "bought-not-built";
+  }
+});
+
 // src/intake-contact.ts
 async function pickIntakeContact(client, locationId2, fieldIdToLabel, knownContactId, formName) {
   const ids = /* @__PURE__ */ new Set();
@@ -41747,6 +42534,21 @@ function prefillFormUrl(formUrl, queryKeys, answers, contact = {}, altQueryKeys
   const qs = p.toString();
   return { url: qs ? `${formUrl}?${qs}` : formUrl, leftovers };
 }
+function isAuthFailure(error) {
+  const text2 = error instanceof Error ? error.message : String(error ?? "");
+  return /GHL API Error (?:401|403)\b/.test(text2);
+}
+function isRequestFailure(error) {
+  if (isGHLRequestError(error)) return true;
+  const text2 = error instanceof Error ? error.message : String(error ?? "");
+  return /GHL API Error \d{3}|Request timeout|timed? ?out|fetch failed|ECONN|ETIMEDOUT|socket hang up|network/i.test(text2);
+}
+function unavailable(empty, reason3) {
+  return { ...empty, status: "unavailable", unavailableReason: reason3 };
+}
+function unavailableFrom(empty, error) {
+  return unavailable(empty, isAuthFailure(error) ? "auth" : isRequestFailure(error) ? "transient" : "error");
+}
 async function readIntakeSnapshot(client, locationId2, sentMarker) {
   const empty = { status: "not_installed", fields: {}, queryKeys: {}, submissions: 0 };
   try {
@@ -41798,16 +42600,16 @@ async function readIntakeSnapshot(client, locationId2, sentMarker) {
           contactId = hit2.id;
           channel = isFormSubmission(hit2) ? "form" : "cockpit";
         }
-      } catch {
-        return { ...empty, status: "unavailable" };
+      } catch (e) {
+        return unavailableFrom(empty, e);
       }
     }
     const hit = await pickIntakeContact(client, locationId2, Object.fromEntries(Object.entries(fields).map(([label2, id]) => [id, label2])), contactId, INTAKE_FORM_NAME2);
-    if (submissions && !hit) return { ...empty, status: "unavailable" };
+    if (submissions && !hit) return unavailable(empty, "missing");
     const status = submissions > 0 ? "received" : sentMarker ? "sent" : "installed";
     return { status, answers: hit?.answers ?? {}, formId: form.id, formUrl: publicFormUrl(form.id), fields, queryKeys, altQueryKeys, multiFields, submissions, answeredAt, channel, contactId };
-  } catch {
-    return { ...empty, status: "unavailable" };
+  } catch (e) {
+    return unavailableFrom(empty, e);
   }
 }
 function recorderAllowPatterns(mcpListOutput) {
@@ -41937,6 +42739,7 @@ var init_client_intake = __esm({
   "src/client-intake.ts"() {
     "use strict";
     init_intake_contact();
+    init_ghl_client();
     init_question_set();
     init_form_template();
     init_transcript();
@@ -41958,8 +42761,8 @@ function savePlanRecord(rec2, base) {
   return file2;
 }
 function savedPlanMatchesScope(saved, current) {
-  if (!saved) return false;
-  if (!current || current.wholePreset) return !saved.scope;
+  if (!saved || !current) return false;
+  if (current.wholePreset) return !saved.scope;
   if (!saved.scope) return false;
   const omitted = (saved.scope.omitted ?? []).map((f) => f.id);
   const offered = /* @__PURE__ */ new Set([...saved.scope.built, ...saved.scope.notBuilt.map((f) => f.id), ...omitted]);
@@ -42764,7 +43567,7 @@ async function assessmentAttachmentAction(args, deps) {
       if (!Array.isArray(chosen) || chosen.some((id2) => !ASSESSMENT_FEATURES.some((f) => f.id === id2))) throw new Error("Choose features from the list.");
       const state2 = deps.read();
       deps.write({ ...state2, assessmentPurchases: { ...state2.assessmentPurchases, [id]: [...new Set(chosen)] } });
-      detail.message = state2.scope?.[id] ? "What they bought is saved for this client document. The build still follows the selection confirmed on the Review screen." : "What they bought is saved. Nothing is built until you confirm what to build on the Review screen, which is ticked from this.";
+      detail.message = state2.scope?.[id] ? "The Assessment record is saved. The build still follows the What they bought list saved on the Blueprint Review." : "The Assessment record is saved. Nothing is built until you save What they bought on the Blueprint Review, which is ticked from this.";
       break;
     }
     default:
@@ -42803,23 +43606,17 @@ async function assessmentRequest(id,action,extra={}){
   const response=await fetch('/api/client-assessment',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({clientLocationId:id,action,...extra})});
   const result=await response.json();if(!response.ok||!result.ok)throw new Error(result.error||'The assessment action did not finish.');
   if(action==='list'){p.list=result.assessments;p.listed=true;p.selected='';if(!p.list.length)p.notice='There are no assessments in this account’s Assessments pipeline.'}
-  else{p.data=result;p.choices=result.purchasedFeatureIds||[];p.notice=result.message||'';if(action==='fill'){p.fill=result;delete iData[id];if(typeof iOpen!=='undefined'&&iOpen[id])await iLoad(id)}}
-  if(action==='purchases')await load();
+  else{p.data=result;p.notice=result.message||'';if(action==='fill'){p.fill=result;delete iData[id];if(typeof iOpen!=='undefined'&&iOpen[id])await iLoad(id)}}
+  if(action==='purchases'||action==='attach'||action==='detach')await load();
  }catch(e){p.notice=e.message||'The assessment could not be read. Try again.'}
  p.busy=false;render(lastState,lastRun);
 }
 function assessmentPanel(id){
- const fresh=!assessmentCards[id];const p=assessmentCards[id]||(assessmentCards[id]={busy:false,data:null,list:[],source:'',selected:'',choices:[]});
+ const fresh=!assessmentCards[id];const p=assessmentCards[id]||(assessmentCards[id]={busy:false,data:null,list:[],source:'',selected:''});
  const box=document.createElement('section');box.className='cds-stack';
  const text=(tag,value)=>{const el=document.createElement(tag);if(tag==='h4')el.className='cds-panel-label';el.textContent=value;box.appendChild(el);return el};
  const button=(label,run,disabled=false)=>{const b=text('button',label);b.className='cds-btn ghost';b.disabled=p.busy||disabled;b.onclick=run;return b};
- text('h4','What they bought');
- text('p','Record the features they bought for their Blueprint document.');
- if(p.data){
-  for(const feature of p.data.features){const label=text('label','');label.className='cds-check';const cb=document.createElement('input');cb.type='checkbox';cb.checked=p.choices.includes(feature.id);cb.disabled=p.busy;cb.onchange=()=>{p.choices=cb.checked?[...p.choices,feature.id]:p.choices.filter(v=>v!==feature.id)};label.appendChild(cb);const span=document.createElement('span');span.textContent=feature.name;label.appendChild(span)}
-  button('Save what they bought',()=>assessmentRequest(id,'purchases',{purchasedFeatureIds:p.choices}));
-  if(p.data.purchasedFeatureIds===null)text('p','What they bought has not been recorded yet.');
- }
+ /* What they bought is ticked on the one list below this panel (2026-09-29); this panel attaches the Assessment. */
  text('h4','Assessment');
  text('p','The numbers from your sales conversation follow the client into the intake, the Review and their Blueprint.');
  const select=text('select','');select.className='cds-select';select.setAttribute('aria-label','Your account where the assessment was saved');select.disabled=p.busy;
@@ -44713,7 +45510,7 @@ function errLine(msg3) {
 function preflightWritable() {
   try {
     const dir = ensureAppDataDir();
-    const probe = path36.join(dir, `.write-probe.${process.pid}.${(0, import_crypto2.randomBytes)(4).toString("hex")}`);
+    const probe = path36.join(dir, `.write-probe.${process.pid}.${(0, import_crypto3.randomBytes)(4).toString("hex")}`);
     fs38.writeFileSync(probe, "ok");
     fs38.unlinkSync(probe);
     return true;
@@ -44997,14 +45794,14 @@ async function runCli(subcommand, argv) {
       return EXIT_USAGE2;
   }
 }
-var import_node_util3, fs38, path36, import_crypto2, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
+var import_node_util3, fs38, path36, import_crypto3, EXIT_OK2, EXIT_USAGE2, EXIT_VALIDATION, EXIT_FS, USAGE;
 var init_cli = __esm({
   "src/cli.ts"() {
     "use strict";
     import_node_util3 = require("node:util");
     fs38 = __toESM(require("fs"));
     path36 = __toESM(require("path"));
-    import_crypto2 = require("crypto");
+    import_crypto3 = require("crypto");
     init_ghl_client();
     init_token_registry();
     init_credentials_store();
@@ -45662,10 +46459,14 @@ function reviewDocumentHtml(review, opts) {
   ${review.gaps?.length ? `<div class="head">What's leaking today (${review.gaps.length})</div>${review.gaps.map(gap).join("")}` : ""}
   ${review.build?.length ? `<div class="head">What we're building</div>${review.build.map((b) => `<div class="build"><b>${esc14(b.item)}</b><span>${esc14(b.because)}</span></div>`).join("")}` : ""}
   ${opts.scope?.awaitingConfirmation ? `<div class="head">What this build includes</div>
-    <p>Not confirmed yet. What you bought is recorded, and the build waits until the features to build are confirmed.</p>
+    <p>Not confirmed yet. The build waits until the features to build are confirmed.</p>
 ` : opts.scope ? `<div class="head">What this build includes</div>
     <p>${opts.scope.package ? `Built to your <b>${esc14(opts.scope.package)}</b> package: ` : ""}${opts.scope.built.length ? esc14(opts.scope.built.map((b) => b.name).join(", ")) : "the foundation only"}. Always included: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing.</p>
 ` : ""}
+  ${opts.bought ? `<div class="head">What you bought</div>
+    <p>${esc14(opts.bought.assessment)}</p>
+    ${opts.bought.confirmed ? opts.bought.bought.map((b) => `<div class="build"><b>${esc14(b.name)}</b><span>${esc14(b.means)}. ${esc14(b.delivery)}.</span></div>`).join("") : "<p>Not confirmed yet. The build waits until what you bought is saved.</p>"}
+    ${opts.bought.confirmed && opts.bought.stillToDo.length ? `<div class="head">Still to do</div><div class="ask"><ul>${opts.bought.stillToDo.map((line3) => `<li>${esc14(line3)}</li>`).join("")}</ul></div>` : ""}` : ""}
   ${review.unknowns?.length ? `<div class="head">What we still need from you</div><div class="ask"><ul>${review.unknowns.map((u) => `<li>${esc14(u)}</li>`).join("")}</ul></div>` : ""}
   ${opts.assessment ? `<div class="head">Assessment</div><p>Snapshot attached on ${esc14(opts.assessment.attachedAt.slice(0, 10))}.</p>${assessmentFeatureLines(opts.assessment, [], false).filter((line3) => line3.includes("by your own numbers")).map((line3) => `<p>${esc14(line3)}</p>`).join("")}` : ""}
   ${available ? `<div class="head">Available next</div>${available}` : opts.assessment ? `<div class="head">Available next</div><p>${purchased ? "Every listed feature is included in what you bought." : "What you bought has not been recorded yet."}</p>` : ""}
@@ -47136,7 +47937,7 @@ function prefixReservations(locationId2, base) {
 function refusal(prefix, owner) {
   return `The clinic prefix "${prefix}" already belongs to another client in this sub-account (client key "${owner}"). Two clients sharing a prefix would reuse each other's workflows, tags and fields, so nothing was built. Choose a different prefix for this client.`;
 }
-function sleepSync(ms) {
+function sleepSync2(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function locationLockPath(dir, locationId2) {
@@ -47165,7 +47966,7 @@ function withLocationLock(dir, locationId2, fn, opts = {}) {
           age > STALE_LOCK_MS ? `A clinic prefix could not be reserved because an earlier build left this sub-account's prefix lock behind (it may have crashed), so nothing was built. If no build is running for this sub-account, delete the file ${lock} and run it again.` : "Another build in this sub-account is reserving a clinic prefix right now, so nothing was built. Run it again in a moment."
         );
       }
-      sleepSync(15);
+      sleepSync2(15);
     }
   }
   try {
@@ -47244,13 +48045,27 @@ var init_clinic_prefix_registry = __esm({
 var dashboard_exports = {};
 __export(dashboard_exports, {
   ACCOUNT_TYPES: () => ACCOUNT_TYPES,
+  APPROVAL_WITHDRAWN_FOR_ASSESSMENT: () => APPROVAL_WITHDRAWN_FOR_ASSESSMENT,
+  APPROVAL_WITHDRAWN_FOR_SCOPE: () => APPROVAL_WITHDRAWN_FOR_SCOPE,
+  ASSESSMENT_CHANGED_SINCE_APPROVAL: () => ASSESSMENT_CHANGED_SINCE_APPROVAL,
+  CHOOSE_BEFORE_BUILD: () => CHOOSE_BEFORE_BUILD,
+  CHOOSE_WHAT_THEY_BOUGHT: () => CHOOSE_WHAT_THEY_BOUGHT,
   CLAUDE_REPAIR_MESSAGES: () => CLAUDE_REPAIR_MESSAGES,
+  INTAKE_ANSWERS_MISSING: () => INTAKE_ANSWERS_MISSING,
   INTAKE_CONNECT_REQUIRED: () => INTAKE_CONNECT_REQUIRED,
   INTAKE_FORM_REQUIRED: () => INTAKE_FORM_REQUIRED,
   INTAKE_OWN_MESSAGES: () => INTAKE_OWN_MESSAGES,
+  INTAKE_READ_FAILED: () => INTAKE_READ_FAILED,
+  INTAKE_READ_TRANSIENT: () => INTAKE_READ_TRANSIENT,
+  INTAKE_REFRESH_RETRYING: () => INTAKE_REFRESH_RETRYING,
   INTAKE_UNREADABLE: () => INTAKE_UNREADABLE,
+  NOTHING_BOUGHT: () => NOTHING_BOUGHT,
+  NOTHING_BUILT_FROM_TICKS: () => NOTHING_BUILT_FROM_TICKS,
+  NOTHING_TICKED_IN_PLAN: () => NOTHING_TICKED_IN_PLAN,
   NOT_SIGNED_IN_MSG: () => NOT_SIGNED_IN_MSG,
   PARKED_NOT_BUILT: () => PARKED_NOT_BUILT,
+  SCOPE_CHANGED_SINCE_APPROVAL: () => SCOPE_CHANGED_SINCE_APPROVAL,
+  SCOPE_REFUSAL: () => SCOPE_REFUSAL,
   SCREEN_HEADS: () => SCREEN_HEADS,
   SEAT_GUARDED_READS: () => SEAT_GUARDED_READS,
   SEAT_TOKEN_HEADER: () => SEAT_TOKEN_HEADER,
@@ -47259,8 +48074,11 @@ __export(dashboard_exports, {
   STAGES: () => STAGES2,
   accountTypeOf: () => accountTypeOf,
   agencyConnectionReady: () => agencyConnectionReady,
+  approvalBoughtHash: () => approvalBoughtHash,
+  approvalScopeHash: () => approvalScopeHash,
   assessmentAgencyTag: () => assessmentAgencyTag,
   assessmentFiguresFor: () => assessmentFiguresFor,
+  boughtUnchangedSinceApproval: () => boughtUnchangedSinceApproval,
   callClaudeRecorded: () => callClaudeRecorded,
   canonicalIndustry: () => canonicalIndustry,
   checkMutationGuard: () => checkMutationGuard,
@@ -47278,9 +48096,11 @@ __export(dashboard_exports, {
   ensureEngineReady: () => ensureEngineReady,
   forgetAnthropicKey: () => forgetAnthropicKey,
   guarded: () => guarded,
+  hasChosenScope: () => hasChosenScope,
   insideDir: () => insideDir,
   intakeInput: () => intakeInput,
   intakeRequestError: () => intakeRequestError,
+  intakeUnavailableError: () => intakeUnavailableError,
   isAllowedCockpitHost: () => isAllowedCockpitHost,
   isLoopback: () => isLoopback,
   isUpstreamFailure: () => isUpstreamFailure,
@@ -47289,10 +48109,13 @@ __export(dashboard_exports, {
   loadingMainHtml: () => loadingMainHtml,
   mayServeSeat: () => mayServeSeat,
   memberFacingError: () => memberFacingError,
+  mergeQueueIntakes: () => mergeQueueIntakes,
   newClientFailure: () => newClientFailure,
   normalizedIntake: () => normalizedIntake,
+  offeredFeaturesFor: () => offeredFeaturesFor,
   overlayPath: () => overlayPath,
   prefillTeamAnswers: () => prefillTeamAnswers,
+  queueScanFilter: () => queueScanFilter,
   readBody: () => readBody,
   readClientStages: () => readClientStages,
   readCockpitState: () => readCockpitState,
@@ -47304,9 +48127,11 @@ __export(dashboard_exports, {
   recoverStuckStages: () => recoverStuckStages,
   renderCockpitHtml: () => renderCockpitHtml,
   reportSeatAllowed: () => reportSeatAllowed,
+  rereadQueueIntakes: () => rereadQueueIntakes,
   resolvePlan: () => resolvePlan2,
   runDashboard: () => runDashboard,
   safeDocName: () => safeDocName,
+  scopeHashOf: () => scopeHashOf,
   scopePrefillFor: () => scopePrefillFor,
   secondClientInputHash: () => secondClientInputHash,
   setAccountIndustry: () => setAccountIndustry,
@@ -47318,7 +48143,9 @@ __export(dashboard_exports, {
   uniqueDocName: () => uniqueDocName,
   unknownCapabilityHtml: () => unknownCapabilityHtml,
   verifyPanelOutcome: () => verifyPanelOutcome,
+  withBoughtJobs: () => withBoughtJobs,
   withCockpitShell: () => withCockpitShell,
+  withdrawIfBindingChanged: () => withdrawIfBindingChanged,
   writeCockpitState: () => writeCockpitState,
   writeDocAtomically: () => writeDocAtomically,
   writeOverlay: () => writeOverlay
@@ -47388,6 +48215,37 @@ function setAccountIndustry(state, locationId2, industry) {
   if (!next.industry) delete next.industry;
   return { ...state, accounts: { ...state.accounts ?? {}, [locationId2]: next } };
 }
+function scopeHashOf(sel) {
+  if (!sel) return contentHash({ none: true });
+  if (sel.wholePreset) return contentHash({ wholePreset: true });
+  return contentHash({ package: sel.package ?? "", features: [...new Set((sel.features ?? []).filter(isFeatureId))].sort() });
+}
+function approvalScopeHash(state, recordKey) {
+  return approvalBindingHash(scopeHashOf(state.scope?.[recordKey]), state, recordKey);
+}
+function withdrawIfBindingChanged(state, recordKey) {
+  const ap = state.planApprovals?.[recordKey];
+  if (!ap || ap.scopeHash === approvalScopeHash(state, recordKey)) return { state, withdrawn: false };
+  const approvals = { ...state.planApprovals };
+  delete approvals[recordKey];
+  return { state: { ...setBuildApproval(state, recordKey, null), planApprovals: approvals }, withdrawn: true };
+}
+function withBoughtJobs(tasks2, lines) {
+  const kept = tasks2.filter((t) => !SELF_REPORTED.test(t.text));
+  const prior = new Map(tasks2.map((t) => [t.id, t]));
+  return [...kept, ...lines.map((text2) => prior.get(taskId(text2)) ?? { id: taskId(text2), text: text2 })];
+}
+function approvalBoughtHash(state, recordKey) {
+  return boughtBindingHash(scopeHashOf(state.scope?.[recordKey]), state, recordKey);
+}
+function boughtUnchangedSinceApproval(ap, state, recordKey) {
+  if (ap.boughtHash) return ap.boughtHash === approvalBoughtHash(state, recordKey);
+  return ap.scopeHash === scopeHashOf(state.scope?.[recordKey]) && !Array.isArray(state.bought?.[recordKey]);
+}
+function hasChosenScope(state, recordKey) {
+  const sel = state.scope?.[recordKey];
+  return Boolean(sel && (sel.wholePreset || Array.isArray(sel.features) && sel.features.some(isFeatureId)));
+}
 function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ new Date()) {
   const all = { ...state.scope ?? {} };
   if (!scope) {
@@ -47403,16 +48261,26 @@ function setClientScope(state, locationId2, scope, now = () => /* @__PURE__ */ n
   if (!Object.keys(all).length) delete next.scope;
   return next;
 }
-function documentScopeFor(state, locationId2) {
-  const sc = state.scope?.[locationId2];
-  if (!sc && Array.isArray(state.assessmentPurchases?.[locationId2])) return { awaitingConfirmation: true, built: [], notBuilt: [] };
-  let offered = FEATURE_IDS;
+function offeredFeaturesFor(state, recordKey) {
+  const locationId2 = recordKey.split("--")[0];
   try {
     const chosen = loadPresetChoice(void 0, presetForIndustry(state.accounts?.[locationId2]?.industry));
-    if (chosen.ok) offered = featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
+    if (chosen.ok) return featuresInPreset(chosen.preset.skeleton?.workflows ?? []);
   } catch {
   }
-  if (!sc || sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
+  return FEATURE_IDS;
+}
+function documentScopeFor(state, locationId2, savedPlan) {
+  const sc = state.scope?.[locationId2];
+  const offered = offeredFeaturesFor(state, locationId2);
+  if (!sc) {
+    const outcome = state.outcomes?.[`${locationId2}:3`];
+    const built = state.clients?.[locationId2]?.stages?.[3] === "done" || outcome?.ok === true;
+    const wholePresetPlan = Boolean(savedPlan && !savedPlan.scope && typeof savedPlan.plan?.preset === "string");
+    if (built && wholePresetPlan) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
+    return { awaitingConfirmation: true, built: [], notBuilt: [] };
+  }
+  if (sc.wholePreset) return { wholePreset: true, built: offered.map((id) => ({ id, name: FEATURES[id].name })), notBuilt: [] };
   return {
     ...sc.package ? { package: sc.package } : {},
     // Built = the confirmed scope, the one record the build follows. The purchase
@@ -47510,7 +48378,10 @@ function startRun(locationId2, stage, onDone, meta2 = {}) {
     normalizedAnswers: meta2.normalizedAnswers,
     dependencies: verificationPlan ? verificationPlan.dependencies ?? planDependencies(verificationPlan.plan) : readSavedPlan(rk)?.dependencies,
     industry,
-    manualObligations: stage === 4 ? readBuildObligations(rk) : void 0,
+    // Bought-but-not-built jobs are the member's to confirm: no check can read them, so
+    // Verify never reports them as findings (review of ea3526f). They reach the card's
+    // jobs from the obligations file directly.
+    manualObligations: stage === 4 ? readBuildObligations(rk).filter((o) => o.type !== BOUGHT_JOB_TYPE) : void 0,
     intakeSummary: describeComposition({ industry, agency }),
     customLabels: composed.filter((q3) => {
       const base = INTAKE_QUESTIONS.find((b) => b.key === q3.key);
@@ -47587,6 +48458,12 @@ function startRun(locationId2, stage, onDone, meta2 = {}) {
       run.lines.push(`Could not write this run to the cost record: ${e instanceof Error ? e.message : String(e)}. The step itself is unaffected.`);
     }
     for (const line3 of costLines(outcome)) run.lines.push(line3);
+    const scopeRefusal = stage === 3 && !outcome.ok && typeof outcome.error === "string" && SCOPE_REFUSAL.test(outcome.error);
+    if (scopeRefusal) {
+      outcome.summary = outcome.error;
+      outcome.issues = [];
+      outcome.plain = { summary: outcome.error, issues: [] };
+    }
     if (stage === 3 && !outcome.summary && !outcome.issues?.length) {
       try {
         const st = readCockpitState();
@@ -47600,8 +48477,8 @@ function startRun(locationId2, stage, onDone, meta2 = {}) {
         const st = readCockpitState();
         writeCockpitState({ ...st, outcomes: { ...st.outcomes ?? {}, [`${rk}:${stage}`]: { ok: outcome.ok, error: outcome.error, summary: outcome.summary, issues: outcome.issues, ...plain && { plain }, at, inputHash: runInputHash, ...stage === 4 ? { buildHash: runBuildHash, verification: verifyRaw?.verification } : {}, hash: contentHash({ inputHash: runInputHash, at, ok: outcome.ok, summary: outcome.summary, issues: outcome.issues }) } } });
       };
-      save();
-      if (PLAIN_REPORT_STAGES.has(stage)) {
+      save(scopeRefusal ? outcome.plain : void 0);
+      if (PLAIN_REPORT_STAGES.has(stage) && !scopeRefusal) {
         run.lines.push("Writing the plain-English version of what came back\u2026");
         const plain = await rewriteOutcomePlain(STAGES2[stage], verifyRaw ?? outcome, { onEvent: (l) => run.lines.push(l), onCost: (costUsd) => {
           recordRunCost({ at, locationId: locationId2, stage, kind: "plain rewrite", ok: true, costUsd });
@@ -47808,6 +48685,40 @@ function logQuietly(message) {
   } catch {
   }
 }
+function queueScanFilter(body) {
+  try {
+    const b = body ? JSON.parse(body) : null;
+    if (b && typeof b === "object" && b.only === "pending") {
+      const open2 = b.open;
+      return { only: "pending", ...typeof open2 === "string" && open2 ? { open: open2 } : {} };
+    }
+  } catch {
+  }
+  return void 0;
+}
+async function rereadQueueIntakes(opts) {
+  const reread = {};
+  const failed = [];
+  for (const { locationId: locationId2 } of opts.roster) {
+    if (opts.state.clients[locationId2]?.stages?.[0] !== "done") continue;
+    if (opts.filter?.only === "pending" && locationId2 !== opts.filter.open && opts.state.intakeInputs?.[locationId2]?.status === "received") continue;
+    try {
+      const got = await opts.read(locationId2);
+      if (got === null) continue;
+      if (got === "unavailable") {
+        failed.push(locationId2);
+        continue;
+      }
+      reread[locationId2] = got;
+    } catch {
+      failed.push(locationId2);
+    }
+  }
+  return { reread, failed };
+}
+function mergeQueueIntakes(latest, reread) {
+  return { ...latest, intakeInputs: { ...latest.intakeInputs ?? {}, ...reread } };
+}
 function readBody(req, res, max, onDone, tooLarge = "That request is too large.", sensitive = false) {
   let body = "";
   let tooBig = false;
@@ -47917,6 +48828,10 @@ function readableAccount(locationId2, roster = currentRosterRef(), state = readC
   const t = state.accounts?.[locationId2]?.type;
   return t !== "hidden" && t !== "template";
 }
+function intakeUnavailableError(snap) {
+  const reason3 = snap.unavailableReason;
+  return new Error(reason3 === "auth" ? INTAKE_UNREADABLE : reason3 === "missing" ? INTAKE_ANSWERS_MISSING : reason3 === "error" ? INTAKE_READ_FAILED : INTAKE_READ_TRANSIENT);
+}
 function intakeRequestError(e) {
   const text2 = e instanceof Error ? e.message : "";
   return INTAKE_OWN_MESSAGES.includes(text2) ? text2 : "The intake request did not finish. Retry this step.";
@@ -47957,6 +48872,9 @@ function html(roster, seatToken, screen = "board", cap) {
   /* Board: four doors in one row (DoorTile), then the two-column grid */
   .board{display:grid;gap:var(--space-6)}
   .txt > .cds-chip{justify-self:start}
+  /* A class that sets display (.cds-chip is inline-flex) beats the browser's own [hidden] rule, so
+     "Not saved yet" stayed on screen after a save (rehearsal 2, finding 12). Hidden means hidden. */
+  [hidden]{display:none!important}
   .cds-door > .cds-callout{display:grid;gap:var(--space-2)}
 
   /* Toolbars and rows of controls */
@@ -48041,7 +48959,7 @@ const LABELS=["Intake","Brief","Approve","Build","Verify","Manual tasks","Go-liv
 // What each step does: [the one line on its row, the fuller sentence in the next-step panel].
 const STEP_ABOUT=[["Creates the intake form, its fields and one notification workflow.","Creates or repairs this client's intake form, its custom fields and one published notification workflow."],
  ["Reads the intake into a brief.","Reads this client's intake, from the submitted form or the one completed here, and turns it into the brief the plan is made from."],
- ["You approve the proposed build.","Review the intake and the brief, then approve the proposed build for this client."],
+ ["You choose what they bought, then approve the build.","Choose what the client bought, review the intake and the brief, then approve the build for this client. Only what they bought gets built."],
  ["Builds the approved plan into this account.","Builds the approved plan into this client's account. Anything it cannot build is listed as an issue."],
  ["Checks the build for broken links.","Checks the account for broken links between workflows, pipelines and fields. It only reads. Anything it cannot check is reported as unchecked."],
  ["Jobs only a person can do. You confirm them.","The jobs only a person can do, such as text-message registration, Google sign-in, staff and phone. Confirm them when they are finished."],
@@ -48057,7 +48975,6 @@ const SCREEN=document.body.getAttribute("data-screen")||"board";
 const CAP=${scriptJson(capForPage)};const HUB=${scriptJson(HUB_URL)};const HEADS=${scriptJson(SCREEN_HEADS)};
 const INDUSTRIES=${scriptJson([...INDUSTRY_PACKS.map((p) => ({ slug: p.slug, label: p.label })), { slug: "other", label: "Other" }])};
 const INDUSTRIES2=${scriptJson(INDUSTRY_PACKS.map((p) => ({ slug: p.slug, label: p.label })))};
-const FEATS=${scriptJson(FEATURES)};
 /* One account at a time (Jerry, 2026-08-26: "way too busy\u2026 tempting to work on multiple
    accounts at once"). One card is ever expanded; every other account is a one-line row. */
 let newClientId=new URLSearchParams(location.hash.slice(1)).get("client"),existingClientsOpen=false;
@@ -48066,7 +48983,7 @@ let registerNotice="",registerFailed=false,registerBusy=false;
 let activeId=null;try{activeId=localStorage.getItem("cmdos-active")||null}catch(e){}
 {const linkedClient=new URLSearchParams(location.hash.slice(1)).get("client");if(linkedClient)rememberClient(linkedClient)}
 function rememberClient(id){activeId=id;try{localStorage.setItem("cmdos-active",id)}catch(e){};document.querySelectorAll(".cds-side a[href]").forEach(a=>{const href=a.getAttribute("href");if(href&&href.startsWith("/")&&!href.startsWith("/api/")&&!href.includes("?")){a.href=href.split("#")[0]+"#client="+encodeURIComponent(id)}})}
-function setActive(id){rememberClient(id);render(lastState,lastRun)}
+function setActive(id){if(typeof iRetryStopExcept==="function")iRetryStopExcept(id);rememberClient(id);render(lastState,lastRun)}
 function initials(name){const p=String(name||"").trim().split(/\\s+/);return ((p[0]||"?")[0]+(p[1]?p[1][0]:"")).toUpperCase()}
 /* Command Design System pieces, built as text (never markup from data). */
 function mk(tag,cls,text){const e=document.createElement(tag);if(cls)e.className=cls;if(text!=null)e.textContent=text;return e}
@@ -48095,16 +49012,83 @@ function listRows(rows,key,noun){const frag=document.createDocumentFragment();co
 function unnest(el){if(el&&el.classList){el.classList.remove("cds-panel","cds-card");el.classList.add("cds-stack")}return el}
 function typeOf(state,id){const sandboxes=state.sandboxAccounts||Object.fromEntries(SANDBOX.map(id=>[id,true]));if(sandboxes[id])return "sandbox";const t=(state.accounts&&state.accounts[id]&&state.accounts[id].type);return t==="sandbox"?"client":(t||"client")}
 function activityScore(state,id){const c=state.clients[id];if(!c)return 0;return c.stages.some(s=>s!=="pending")?1:0}
-async function load(){if(SCREEN==="new"&&canCreateSubAccounts){const probe=await(await clientPageRequest("/api/agency-connection")).json();agencyReady=probe.ok===true}const s=await(await fetch("/api/state")).json();const r=await(await fetch("/api/run/status")).json();await loadQueue();if(SCREEN==="new"&&!snapshots){try{const sr=await(await fetch("/api/snapshots")).json();snapshots=sr.ok?sr.snapshots:[];snapshotError=sr.ok?"":clientPageError(sr.error,"Check the agency key in GoHighLevel, then refresh the snapshot list.")}catch(e){snapshots=[];snapshotError="Could not load snapshots; check the connection and refresh this page."}}render(s,r);
- if(r.running&&!polling){polling=true;const t=setInterval(async()=>{if(userIsBusy())return;const rr=await(await fetch("/api/run/status")).json();const ss=await(await fetch("/api/state")).json();await loadQueue();render(ss,rr);if(!rr.running){clearInterval(t);polling=false}},1500)}}
+async function load(quiet,freshQueue){if(SCREEN==="new"&&canCreateSubAccounts){const probe=await(await clientPageRequest("/api/agency-connection")).json();agencyReady=probe.ok===true}/* The queue first: a re-reading POST can take a minute, and state fetched before it would draw stale (review of c4b75c9). */
+ await loadQueue(quiet===true?(freshQueue===true?"pending":"get"):undefined);const s=await(await fetch("/api/state")).json();const r=await(await fetch("/api/run/status")).json();lastStatusOkAt=Date.now();if(SCREEN==="new"&&!snapshots){try{const sr=await(await fetch("/api/snapshots")).json();snapshots=sr.ok?sr.snapshots:[];snapshotError=sr.ok?"":clientPageError(sr.error,"Check the agency key in GoHighLevel, then refresh the snapshot list.")}catch(e){snapshots=[];snapshotError="Could not load snapshots; check the connection and refresh this page."}}/* A background refresh (quiet) draws only when the data changed (2026-09-29: an unchanged redraw closed what Jerry had open). */
+ if(!(quiet===true&&dataSig(s,r)===lastDrawnSig))render(s,r);hideFinishNote();
+ if(r.running&&!polling){polling=true;const t=setInterval(async()=>{let rr;try{rr=await fetchRunStatus()}catch(e){return}
+  if(!rr.running){clearInterval(t);polling=false}
+  if(!shouldRedraw(lastRun,rr))return;
+  try{await loadQueue("get");const ss=await(await fetch("/api/state")).json();if(dataSig(ss,rr)!==lastDrawnSig)render(ss,rr);hideFinishNote()}catch(e){}},1500)}}
 // Heartbeat (2026-08-25): the fast poller above only starts for a run THIS page saw begin. A page that was
 // already open, or opened mid-run, or a run kicked off from another seat/the API, showed "pending" until a
 // manual reload . a client watching would conclude the build died. Every 3s: if a run is live, hand over to
 // the fast poller; every ~15s otherwise, refresh state so stages finished elsewhere flip to done.
-// Never rebuild the page under the operator's hands: while a form field has focus or an intake panel is
-// open, the heartbeat waits. (2026-08-25: the first heartbeat threw Jerry out of the intake field every refresh.)
-function userIsBusy(){if(SCREEN==="new")return true;const a=document.activeElement;if(a&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName))return true;try{if(Object.values(iOpen||{}).some(Boolean))return true}catch(e){}return false}
-let hbTick=0;setInterval(async()=>{if(polling||userIsBusy())return;hbTick++;try{const rr=await(await fetch("/api/run/status")).json();if(rr.running||hbTick%5===0)load()}catch{}},3000);
+// Never rebuild the page under the operator's hands: while a form field has focus the redraw waits,
+// and happens on focusout. (2026-08-25: the first heartbeat threw Jerry out of the intake field every refresh.)
+// Stale "Running" fix (2026-09-29 rehearsal): Brief finished on the server while the page showed
+// "Running now, working 5m" until a manual reload. The old guard also skipped the status FETCH whenever an
+// intake panel was open, and the clock ticks on the page alone, so a frozen page looked alive. Now:
+// the status is ALWAYS fetched; only the full redraw waits, and only while an input has focus; an open intake
+// panel alone never blocks it (its typed answers, pasted material and prepared-form link live in state, so a
+// redraw keeps them). A running-to-finished change always redraws, or, with an input focused, shows a bar
+// that says so. Returning to the tab refreshes. A status older than 15s freezes the clock on "checking\u2026".
+let lastStatusOkAt=0,redrawPending=false,pointerIsDown=false,flushTimer=0;
+/* Intake work in flight for a client (Fill the intake from this, a document upload, send, prepare, save): a redraw
+   then would re-enable its button and drop its message, so it waits like a focused field. */
+let iBusy={};
+function intakeWorkBusy(){try{return Object.values(iBusy).some(n=>n>0)}catch(e){return false}}
+/* Inline confirm panels (see icPanel): one waiting on the server holds the redraw like intake work. */
+let icOpen={};
+function icBusy(){try{return Object.values(icOpen).some(x=>x&&x.busy)}catch(e){return false}}
+/* A counter, so two requests for one client overlapping never clear each other. */
+async function iWork(id,fn){iBusy[id]=(iBusy[id]||0)+1;try{return await fn()}finally{iBusy[id]=Math.max(0,(iBusy[id]||0)-1);if(redrawPending)scheduleFlush()}}
+function inputFocused(){const a=document.activeElement;return Boolean(a&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName))}
+/* Holds back the full redraw, never the status fetch. */
+function userIsBusy(){if(SCREEN==="new")return true;return inputFocused()||intakeWorkBusy()||icBusy()}
+function intakeIsOpen(){try{return Object.values(iOpen||{}).some(Boolean)}catch(e){return false}}
+async function fetchRunStatus(){const rr=await(await fetch("/api/run/status")).json();lastStatusOkAt=Date.now();return rr}
+function statusIsStale(){return !lastStatusOkAt||Date.now()-lastStatusOkAt>15000}
+function runKey(r){return r?[r.running?1:0,r.locationId||"",r.stage==null?"":r.stage,r.capability||"",r.startedAt||"",r.reviewing?1:0,r.ok==null?"":r.ok?1:0].join("|"):""}
+function runJustFinished(prev,next){return Boolean(prev&&prev.running&&next&&!next.running)}
+function stepName(r){return r&&!r.capability&&LABELS[r.stage]?LABELS[r.stage]:"The step"}
+/* Decides whether a fresh status redraws the page now. A finished run always does, unless an input has focus:
+   then the bar tells the operator and the redraw follows on focusout. With an intake panel open the page
+   redraws only when the run itself changed (started, moved stage, finished), not on every tick. */
+function shouldRedraw(prev,next){const fin=runJustFinished(prev,next);
+ if(userIsBusy()){if(SCREEN==="new")return false;if(fin)showFinishNote(prev);redrawPending=true;return false}
+ if(fin)return true;
+ if(intakeIsOpen())return runKey(prev)!==runKey(next);
+ return true}
+function showFinishNote(prev){let b=document.getElementById("run-finished-note");
+ if(!b){b=document.createElement("button");b.id="run-finished-note";b.type="button";b.className="cds-callout info";b.setAttribute("role","status");
+  b.style.cssText="position:fixed;left:50%;bottom:16px;transform:translateX(-50%);z-index:50;max-width:calc(100% - 32px);cursor:pointer";
+  b.onclick=()=>{redrawPending=false;load(true).catch(()=>{})};document.body.appendChild(b)}
+ b.textContent=stepName(prev)+" finished. Click to see the result."}
+function hideFinishNote(){const b=document.getElementById("run-finished-note");if(b)b.remove()}
+/* One retry timer at a time: focusout, pointer releases and finished intake work all ask, only one waits. */
+function scheduleFlush(){if(flushTimer)return;flushTimer=setTimeout(()=>{flushTimer=0;flushRedraw()},300)}
+function flushRedraw(){if(!redrawPending)return;if(SCREEN==="new"){redrawPending=false;return}if(userIsBusy()||pointerIsDown){scheduleFlush();return}redrawPending=false;load(true).catch(()=>{})}
+document.addEventListener("pointerdown",()=>{pointerIsDown=true},true);
+document.addEventListener("pointerup",()=>{pointerIsDown=false},true);
+/* A touch that is cancelled, or a release outside the window, never sends pointerup. */
+document.addEventListener("pointercancel",()=>{pointerIsDown=false},true);
+window.addEventListener("blur",()=>{pointerIsDown=false});
+/* Focus leaving an input: a held redraw happens now (after the field's change event has saved its value). */
+document.addEventListener("focusout",()=>{if(redrawPending)scheduleFlush()});
+/* Coming back to the tab or the window: fetch at once, rather than trusting what the page last drew. */
+function refreshOnReturn(){if(userIsBusy()){if(SCREEN!=="new")redrawPending=true;fetchRunStatus().then(rr=>{if(runJustFinished(lastRun,rr)&&SCREEN!=="new")showFinishNote(lastRun)}).catch(()=>{});return}load(true,true).catch(()=>{})}
+/* Focus and visibilitychange usually fire together on a return: one refresh, not two. */
+let returnTimer=0;function onReturn(){if(returnTimer)return;returnTimer=setTimeout(()=>{returnTimer=0;refreshOnReturn()},250)}
+document.addEventListener("visibilitychange",()=>{if(document.visibilityState==="visible")onReturn()});
+window.addEventListener("focus",onReturn);
+/* The GET queue shows intake answers as last read; every 4th heartbeat load (about a minute) and a return to the
+   tab use the POST, which re-reads each client's intake, so a submitted or edited intake shows without a reload. */
+let hbTick=0,hbLoads=0;setInterval(async()=>{if(polling)return;hbTick++;let rr;try{rr=await fetchRunStatus()}catch(e){return}
+ const changed=runKey(rr)!==runKey(lastRun);
+ if(!(rr.running||changed||hbTick%5===0))return;
+ if(userIsBusy()){if(changed)shouldRedraw(lastRun,rr);return}
+ if(intakeIsOpen()&&!changed&&!(rr.running&&!polling))return;
+ hbLoads++;load(true,hbLoads%4===0).catch(()=>{})},3000);
 let intakeOpen=false,intakeData=null,intakeIndustry="";
 async function loadIntake(){const r=await(await clientPageRequest("/api/intake?industry="+encodeURIComponent(intakeIndustry))).json();intakeData=r;render(lastState,lastRun)}
 async function saveOverlay(o){const r=await(await clientPageRequest("/api/overlay",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)})).json();if(!r.ok){showClientError(r.error);return}await loadIntake()}
@@ -48145,6 +49129,25 @@ function intakePanel(){const d=document.createElement("div");d.className="cds-pa
  d.appendChild(reset);
  return d}
 let iOpen={},iData={},iMode={},iAnswers={},iDirty={},iIdx={},iPre={},iSub={},oOpen={},iDocs={},iDocsErrors={},iPreSrc={};
+/* What the operator typed into the intake's free boxes (pasted transcript, link, recorder note, the send
+   form) and the prepared-form link live here, not only in the DOM, so a redraw while the intake is open
+   keeps them (2026-09-29: an open intake no longer blocks the page from showing a finished step). */
+let iDraft={},iPrepared={};
+function preparedFormBlock(box,id){const p=iPrepared[id];
+    const openLink=document.createElement("a");openLink.className="cds-link";openLink.href=p.url;openLink.target="_blank";openLink.rel="noopener";openLink.textContent="Open the prepared form";box.appendChild(openLink);
+    const hint=document.createElement("p");hint.className="muted";
+    const left=p.leftovers||[];
+    hint.textContent=left.length
+      ?"Use Open the prepared form above to review your answers, except "+left.length+" listed below. Handle each as noted there, then click Submit and come back and press Refresh:"
+      :"Use Open the prepared form above, submit it, then return and press Refresh.";
+    box.appendChild(hint);
+    if(left.length){const ul=document.createElement("ul");ul.className="muted";
+     const WHY={"several answers":"pick each of these in the form","contains a plus sign":"type this in the form","no field for this question":"the form has no question for this, so it was not carried. Add it as a note on the contact after you submit"};
+     for(const l of left){const li=document.createElement("li");li.textContent=l.label+": "+l.values.join(", ")+". "+(WHY[l.reason]||l.reason)+".";ul.appendChild(li)}
+     box.appendChild(ul)}
+    const rf=document.createElement("button");rf.className="cds-btn ghost";rf.textContent="Refresh status";
+    rf.onclick=()=>iLoad(id);box.appendChild(rf)}
+function keepDraft(el,id,name){const k=id+":"+name;if(iDraft[k]!=null)el.value=iDraft[k];el.addEventListener("input",()=>{iDraft[k]=el.value});return el}
 async function iDocsLoad(id){const r=await(await clientPageRequest("/api/intake-documents?locationId="+encodeURIComponent(id))).json();iDocs[id]=(r&&r.files)||[];iDocsErrors[id]=r.ok?"":clientPageError(r.error,"Refresh the page to load this client\u2019s documents again.");render(lastState,lastRun)}
 // Show the plain outcome here. The separate Step progress panel shows member-facing progress.
 function outcomePanel(id,i,state){const oc=(state.outcomes||{})[id+":"+i];if(!oc)return null;
@@ -48172,9 +49175,35 @@ function costLabel(kind){return ({stage:"Stage",review:"Client review","plain re
 function iContact(id,questions){const out={};const keys={first_name:"firstName",last_name:"lastName",email:"email",phone:"phone"};for(const q of questions){if(keys[q.contactTag])out[keys[q.contactTag]]=String((iAnswers[id]||{})[q.label]||"")}return out}
 function iEdit(id,label,value){(iAnswers[id]||(iAnswers[id]={}))[label]=value;(iDirty[id]||(iDirty[id]=new Set())).add(label)}
 function iApplyProposals(id,proposals){const applied=[];const answers=iAnswers[id]||(iAnswers[id]={});for(const [label,value] of Object.entries(proposals||{})){if(answers[label]&&JSON.stringify(answers[label])!==JSON.stringify(value)){if(!confirm(label+String.fromCharCode(10)+"Current: "+answers[label]+String.fromCharCode(10)+"Proposed: "+value+String.fromCharCode(10)+"Replace this answer?"))continue}iEdit(id,label,value);applied.push(label)}return applied}
-async function iLoad(id){rememberClient(id);const r=await(await clientPageRequest("/api/client-intake?locationId="+id)).json();iData[id]=r;
+/* Rehearsal 2 (2026-09-29): a read that failed for a passing reason (a timeout, a rate limit) is not a broken
+   key. The panel keeps what it last read, says so quietly, and retries; the next good read clears the note.
+   Only a real refusal of the key (401/403) still says to paste it again. */
+/* Review of d407f04: the retry is a refresh only. It never changes the client on screen (iLoad does, for a
+   click), it stops when the member moves to another client or closes the intake, a throw schedules the next
+   try instead of ending them, and after I_RETRY_MAX tries it stops and says so. */
+let iRetry={};const I_RETRY_MAX=10;
+const I_RETRY_NOTE="Could not refresh just now; retrying.",I_RETRY_GAVE_UP="Could not refresh. Refresh status to try again.";
+function iRetryNote(id){const n=iRetry[id];if(!n)return null;const p=mk("p","muted iretry",n.gaveUp?I_RETRY_GAVE_UP:(n.note||I_RETRY_NOTE));p.setAttribute("role","status");
+ if(n.gaveUp){const b=mk("button","cds-link","Refresh status");b.type="button";b.onclick=()=>iLoad(id);p.appendChild(document.createTextNode(" "));p.appendChild(b)}return p}
+function iRetryStop(id){const n=iRetry[id];if(n){if(n.t)clearTimeout(n.t);delete iRetry[id]}}
+function iRetryStopExcept(id){for(const k of Object.keys(iRetry))if(k!==id)iRetryStop(k)}
+/* Still worth refreshing: the client is the one on screen. */
+function iShown(id){return activeId===id}
+function iScheduleRetry(id,note){const n=((iRetry[id]&&iRetry[id].n)||0)+1;if(iRetry[id]&&iRetry[id].t)clearTimeout(iRetry[id].t);
+ if(n>I_RETRY_MAX){iRetry[id]={n:n,gaveUp:true,t:0};return}
+ iRetry[id]={n:n,note:note||I_RETRY_NOTE,t:setTimeout(()=>{const cur=iRetry[id];if(!cur||cur.gaveUp)return;cur.t=0;if(!iShown(id)){iRetryStop(id);return}iRefresh(id)},Math.min(30000,3000*n))}}
+/* The background read: no rememberClient, no change of client. */
+async function iRefresh(id){try{const res=await fetch("/api/client-intake?locationId="+encodeURIComponent(id));const r=await res.json();if(!res.ok&&r&&r.ok!==false)r.ok=false;iApply(id,r)}
+ catch(e){if(!iShown(id)){iRetryStop(id);return}iScheduleRetry(id,I_RETRY_NOTE);try{render(lastState,lastRun)}catch(_){}}}
+async function iLoad(id){rememberClient(id);iRetryStop(id);const r=await(await clientPageRequest("/api/client-intake?locationId="+id)).json();iApply(id,r)}
+function iApply(id,r){
+ if(r&&r.ok===false&&r.transient){iScheduleRetry(id,r.error);
+  if(!iData[id]||!iData[id].ok)iData[id]={ok:false,transient:true,error:r.error};
+  render(lastState,lastRun);return}
+ iRetryStop(id);
+ iData[id]=r;
  // Only unsaved edits override the newest server submission, including edits made before Connect.
- if(r.ok){const edits={};for(const label of iDirty[id]||[])edits[label]=(iAnswers[id]||{})[label];iAnswers[id]={...(r.answers||{}),...edits}}render(lastState,lastRun)}
+ if(r.ok){const edits={};for(const label of iDirty[id]||[])edits[label]=(iAnswers[id]||{})[label];iAnswers[id]={...(r.answers||{}),...edits};if(r.status==="received")delete iPrepared[id]}render(lastState,lastRun)}
 let iFieldN=0;
 function iField(id,q,val,prefilled){const w=document.createElement("div");w.className="cds-field ifield"+(prefilled?" prefilled":"");
  const fid="ifield-"+(++iFieldN);
@@ -48199,8 +49228,10 @@ function iField(id,q,val,prefilled){const w=document.createElement("div");w.clas
  w.appendChild(inp);return w}
 function intakeWorkspace(id,name){const d=iData[id];const box=document.createElement("div");box.className="cds-panel ipanel";
  if(!d){box.textContent="Loading intake\u2026";return box}
+ if(!d.ok&&d.transient){box.innerHTML="<h3 class='cds-panel-title'>Intake</h3>";box.appendChild(iRetryNote(id)||mk("p","muted",d.error||"Could not refresh just now; retrying."));return box}
  if(!d.ok){box.innerHTML="<h3 class='cds-panel-title'>Intake</h3><p role='alert'>"+escT(clientPageError(d.error))+"</p>";const a=document.createElement("a");a.className="cds-link";a.href="/new";a.textContent="Reconnect this client";box.appendChild(a);return box}
  box.innerHTML="<h3 class='cds-panel-title'>Intake for "+escT(name)+"</h3>";
+ {const rn=iRetryNote(id);if(rn)box.appendChild(rn)}
  if(!d.industry){const label=document.createElement("p");label.textContent="Choose this client\u2019s industry before preparing the intake.";box.appendChild(label);const select=document.createElement("select");select.className="cds-select";select.setAttribute("aria-label","Client industry");for(const item of [{slug:"",label:"Choose the client industry"},...INDUSTRIES]){const o=document.createElement("option");o.value=item.slug;o.textContent=item.label;select.appendChild(o)}box.appendChild(select);const save=document.createElement("button");save.className="cds-btn";save.textContent="Confirm industry";save.onclick=async()=>{if(!select.value)return;if(await postJSON("/api/industry",{locationId:id,industry:select.value}))await iLoad(id)};box.appendChild(save);return box}
  if(d.status==="received"&&d.savedAt){const note=document.createElement("p");note.textContent="Submitted answers are loaded. A newer saved draft may include changes that have not been submitted.";box.appendChild(note)}
  const sub=document.createElement("p");sub.className="muted";
@@ -48222,14 +49253,14 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
  box.appendChild(ch);
  const mode=iMode[id];
  if(mode==="send"&&hasForm){const w=document.createElement("div");w.className="cds-stack";
-  const em=document.createElement("input");em.placeholder="client@business.com";em.className="cds-input";em.setAttribute("aria-label","Client email");
-  const fn=document.createElement("input");fn.placeholder="Their first name (optional)";fn.className="cds-input";fn.setAttribute("aria-label","Client first name");
-  const ag=document.createElement("input");ag.placeholder="Sign it from\u2026 (your name / agency)";ag.className="cds-input";ag.setAttribute("aria-label","Signed from");
+  const em=document.createElement("input");em.placeholder="client@business.com";em.className="cds-input";em.setAttribute("aria-label","Client email");keepDraft(em,id,"email");
+  const fn=document.createElement("input");fn.placeholder="Their first name (optional)";fn.className="cds-input";fn.setAttribute("aria-label","Client first name");keepDraft(fn,id,"firstName");
+  const ag=document.createElement("input");ag.placeholder="Sign it from\u2026 (your name / agency)";ag.className="cds-input";ag.setAttribute("aria-label","Signed from");keepDraft(ag,id,"signedFrom");
   const b=document.createElement("button");b.className="cds-btn";b.textContent="Send the questionnaire";
   b.onclick=async()=>{if(!em.value.trim())return showClientError("Enter the client\u2019s email.",box);if(!confirm("Creates a contact for "+em.value.trim()+" in "+name+" and sends one email from "+(d.sender||"the sender configured in this client\u2019s GoHighLevel account")+". Sender not verified. Save a manual task to confirm the sender and send in GoHighLevel?"))return;b.disabled=true;b.textContent="Saving the task\u2026";
-   const r=await(await clientPageRequest("/api/intake-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,email:em.value.trim(),firstName:fn.value.trim(),agencyName:ag.value.trim(),confirmed:true})})).json();
+   const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,email:em.value.trim(),firstName:fn.value.trim(),agencyName:ag.value.trim(),confirmed:true})})).json());
    if(r.manual){showClientError(r.error,box);const a=document.createElement("a");a.href="https://app.gohighlevel.com/v2/location/"+encodeURIComponent(id)+"/conversations/conversations";a.target="_blank";a.rel="noopener";a.textContent="Open this client\u2019s conversations to confirm the sender and send the questionnaire";box.appendChild(a);b.disabled=false;b.textContent="Send the questionnaire";return}
-   if(r.ok){iMode[id]=null;await iLoad(id)}else{showClientError(r.error,box);b.disabled=false;b.textContent="Send the questionnaire"}};
+   if(r.ok){for(const n of ["email","firstName","signedFrom"])delete iDraft[id+":"+n];iMode[id]=null;await iLoad(id)}else{showClientError(r.error,box);b.disabled=false;b.textContent="Send the questionnaire"}};
   w.appendChild(em);w.appendChild(fn);w.appendChild(ag);w.appendChild(b);
   const note=document.createElement("p");note.className="muted";
   note.textContent="Command OS cannot verify this account\u2019s sender. This button records a manual task to confirm the sender and send the questionnaire in GoHighLevel.";w.appendChild(note);box.appendChild(w)}
@@ -48241,9 +49272,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    tb.onclick=()=>{iSub[id]=k;render(lastState,lastRun)};tabs.appendChild(tb)}
   w.appendChild(tabs);
   const ta=document.createElement("textarea");ta.rows=6;ta.placeholder="Paste your discovery-call transcript (Plaud, Zoom, Otter, notes), or drop a .txt/.vtt/.srt file here";
-  ta.className="cds-textarea";ta.setAttribute("aria-label","Transcript");
+  ta.className="cds-textarea";ta.setAttribute("aria-label","Transcript");keepDraft(ta,id,"transcript");
   ta.ondragover=(e)=>{e.preventDefault();ta.style.borderColor="var(--focus)"};
-  ta.ondrop=async(e)=>{e.preventDefault();ta.style.borderColor="";const f=e.dataTransfer.files[0];if(f){if(!/[.](txt|md|csv|vtt|srt)$/i.test(f.name))return showClientError("Use plain text, .vtt or .srt.",box);ta.value=await f.text()}};
+  ta.ondrop=async(e)=>{e.preventDefault();ta.style.borderColor="";const f=e.dataTransfer.files[0];if(f){if(!/[.](txt|md|csv|vtt|srt)$/i.test(f.name))return showClientError("Use plain text, .vtt or .srt.",box);ta.value=await f.text();iDraft[id+":transcript"]=ta.value}};
   const b=document.createElement("button");b.className="cds-btn";b.textContent="Fill the intake from this";
   const st=document.createElement("p");st.className="muted";
   b.onclick=async()=>{
@@ -48256,10 +49287,10 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    st.textContent=sub==="paste"?"This text goes to your own Claude account to be read, and nowhere else."
     :sub==="url"?"Your own Claude fetches that link, so that site sees the request; the page text then goes to your Claude account and nowhere else."
     :"Your own Claude asks the recorder you connected (Plaud, Otter, Fireflies\u2026) for that call; the transcript then goes to your Claude account and nowhere else.";
-   const r=await(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(payload)})).json();
+   const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(payload)})).json());
    b.disabled=false;b.textContent="Fill the intake from this";
    if(!r.ok){st.textContent=clientPageError(r.error,"Check the source and try reading it again.");return}
-   if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]=sub==="url"?"the link":"your call";
+   if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]=sub==="url"?"the link":"your call";for(const n of ["transcript","url","recorder"])delete iDraft[id+":"+n];
    /* Codex F2 (2026-09-06): a HELD answer (the words were said, the value was worked out) is a
       suggestion beside the field, never an answer. It reaches iAnswers only when the operator
       clicks "Use it". Unverified answers (read by their Claude, not pasted here) are answers,
@@ -48270,9 +49301,9 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    iNote[id]=(heldKeys.length?heldKeys.length+" answer"+(heldKeys.length===1?" was":"s were")+" worked out rather than heard and NOT filled in: "+heldKeys.join(", ")+". Each is shown beside its field with a Use it button. ":"")+(unv.length?unv.length+" could not be checked against the material because your Claude read it rather than you pasting it here: "+unv.join(", ")+". Check them.":"");
    iMode[id]="fill";render(lastState,lastRun)};
   const urlIn=document.createElement("input");urlIn.placeholder="https://\u2026 a shared transcript or recording page";
-  urlIn.className="cds-input";urlIn.setAttribute("aria-label","Link to the transcript or recording");
+  urlIn.className="cds-input";urlIn.setAttribute("aria-label","Link to the transcript or recording");keepDraft(urlIn,id,"url");
   const recIn=document.createElement("input");recIn.placeholder='e.g. "grab my Plaud recording from this morning with Radiance Med Spa"';
-  recIn.className="cds-input";recIn.setAttribute("aria-label","Which recording to use");
+  recIn.className="cds-input";recIn.setAttribute("aria-label","Which recording to use");keepDraft(recIn,id,"recorder");
   const hint=document.createElement("p");hint.className="muted";
   if(iSub[id]==="paste"){w.appendChild(ta);hint.textContent="Plain text, .vtt and .srt only. The limit is 60,000 characters.";w.appendChild(hint)}
   else if(iSub[id]==="doc"){
@@ -48287,7 +49318,7 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    const up=async(f)=>{if(!f)return;if(f.size>20*1024*1024){showClientError("That file is over 20 MB.",box,"Split it or export the part that matters.");return}
     drop.textContent="Saving "+f.name+"\u2026";
     const b64=await new Promise((res,rej)=>{const rd=new FileReader();rd.onload=()=>res(String(rd.result).split(",")[1]||"");rd.onerror=rej;rd.readAsDataURL(f)});
-    const r=await(await clientPageRequest("/api/intake-document",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,name:f.name,base64:b64})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-document",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,name:f.name,base64:b64})})).json());
     if(!r.ok){showClientError(r.error||"Could not save that file",box);drop.textContent="Drop plain text, .vtt or .srt here, or choose a file. The limit is 60,000 characters.";return}
     iDocs[id]=r.files||[];render(lastState,lastRun)};
    drop.ondragover=(e)=>{e.preventDefault();drop.style.outline="2px solid var(--focus)"};
@@ -48301,7 +49332,7 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
     const nm=document.createElement("span");nm.className="ttl";nm.textContent=f.name;nm.appendChild(mk("span","sub",Math.max(1,Math.round(f.bytes/1024))+" KB"));row.appendChild(nm);
     const rb=document.createElement("button");rb.className="cds-btn ghost";rb.textContent="Fill the intake from this";
     rb.onclick=async()=>{rb.disabled=true;rb.textContent="Reading it\u2026";st.textContent="The text of "+f.name+" goes to your own Claude account to be read, and nowhere else.";
-     const r=await(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,labels:d.questions.map(q=>q.label),file:f.name})})).json();
+     const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,labels:d.questions.map(q=>q.label),file:f.name})})).json());
      rb.disabled=false;rb.textContent="Fill the intake from this";
      if(!r.ok){st.textContent=clientPageError(r.error,"Check the source and try reading it again.");return}
      if(r.costs)iData[id].costs=r.costs;iPre[id]=iApplyProposals(id,r.answers);iPreSrc[id]="the document";iHeld[id]=r.held||{};iUnv[id]=r.unverified||[];const heldKeys=Object.keys(iHeld[id]),unv=iUnv[id];iNote[id]=(heldKeys.length?heldKeys.length+" answer"+(heldKeys.length===1?" was":"s were")+" worked out rather than heard and NOT filled in: "+heldKeys.join(", ")+". Each is shown beside its field with a Use it button. ":"")+(unv.length?unv.length+" could not be checked against the material because your Claude read it rather than you pasting it here: "+unv.join(", ")+". Check them.":"");iMode[id]="fill";render(lastState,lastRun)};
@@ -48342,60 +49373,88 @@ function intakeWorkspace(id,name){const d=iData[id];const box=document.createEle
    save.textContent="Review and submit the real form";save.disabled=Boolean(d.connectionPending);
    save.title="Opens this client's actual GHL form with your available answers filled in. One click submits it, so it lands as a genuine form submission.";
    save.onclick=async()=>{const missing=d.questions.filter(q=>q.required&&(!(iAnswers[id]||{})[q.label]||(Array.isArray(iAnswers[id][q.label])&&!iAnswers[id][q.label].length)));if(missing.length&&!confirm("Required answers still missing: "+missing.map(q=>q.label).join(", ")+". Continue to the real form?"))return;save.disabled=true;save.textContent="Preparing the form\u2026";
-    const r=await(await clientPageRequest("/api/intake-prefill-url",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:iAnswers[id]||{},contact:iContact(id,d.questions)})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-prefill-url",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:iAnswers[id]||{},contact:iContact(id,d.questions)})})).json());
     save.disabled=false;save.textContent="Review and submit the real form";
     if(!r.ok){showClientError(r.error,box);return}
-    const openLink=document.createElement("a");openLink.className="cds-link";openLink.href=r.url;openLink.target="_blank";openLink.rel="noopener";openLink.textContent="Open the prepared form";box.appendChild(openLink);
-    const hint=document.createElement("p");hint.className="muted";
-    const left=r.leftovers||[];
-    hint.textContent=left.length
-      ?"Use Open the prepared form above to review your answers, except "+left.length+" listed below. Handle each as noted there, then click Submit and come back and press Refresh:"
-      :"Use Open the prepared form above, submit it, then return and press Refresh.";
-    box.appendChild(hint);
-    if(left.length){const ul=document.createElement("ul");ul.className="muted";
-     const WHY={"several answers":"pick each of these in the form","contains a plus sign":"type this in the form","no field for this question":"the form has no question for this, so it was not carried. Add it as a note on the contact after you submit"};
-     for(const l of left){const li=document.createElement("li");li.textContent=l.label+": "+l.values.join(", ")+". "+(WHY[l.reason]||l.reason)+".";ul.appendChild(li)}
-     box.appendChild(ul)}
-    const rf=document.createElement("button");rf.className="cds-btn ghost";rf.textContent="Refresh status";
-    rf.onclick=()=>iLoad(id);box.appendChild(rf)};
+    iPrepared[id]={url:r.url,leftovers:r.leftovers||[]};render(lastState,lastRun)};
    box.appendChild(save)}else if(formNote)box.appendChild(formNote);
    const alt=document.createElement("button");alt.className="cds-btn ghost";
 
    alt.textContent="Save draft on this computer";
    alt.title="Saves your answers for this client on this computer. You can return to them later.";
    alt.onclick=async()=>{alt.disabled=true;alt.textContent="Saving\u2026";const savedAnswers={...(iAnswers[id]||{})};
-    const r=await(await clientPageRequest("/api/intake-submit",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:savedAnswers,contact:iContact(id,d.questions)})})).json();
+    const r=await iWork(id,async()=>(await clientPageRequest("/api/intake-submit",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,answers:savedAnswers,contact:iContact(id,d.questions)})})).json());
     if(r.ok){for(const label of iDirty[id]||[])if(JSON.stringify(iAnswers[id][label])===JSON.stringify(savedAnswers[label]))iDirty[id].delete(label);iMode[id]=null;iPre[id]=[];await iLoad(id)}else{showClientError(r.error,box);alt.disabled=false;alt.textContent="Save draft on this computer"}};
-   box.appendChild(alt)}}
+   box.appendChild(alt);
+   if(hasForm&&iPrepared[id])preparedFormBlock(box,id)}}
  return box}
 let iNote={},iHeld={},iUnv={};
 ${ASSESSMENT_PANEL_JS}
 let rOpen={},rData={},rBusy={},rSeen={};
 let profCache=null,profLoading=false;
 async function profLoad(){if(profLoading)return;profLoading=true;try{profCache=((await(await fetch("/api/agency-profile")).json()).profile)||{}}catch(e){profCache={}}profLoading=false;render(lastState,lastRun)}
-/* What they bought (2026-09-06). Foundation is always built; the ticks decide the features. Nothing saved = the whole preset. */
+/* What they bought (2026-09-06). Foundation is always built; the ticks decide the features.
+   One list since 2026-09-29 (Jerry's approved design): the fourteen Assessment items, each with
+   what it means for the client and what ticking it does for this client's preset. The server
+   derives the build scope from the ticks, so the build reads what it always read. Approve also
+   waits for the Assessment question above the list. */
+/* The ticks and package chosen but not yet saved, kept outside the block so a redraw keeps them (review of c09e946). */
+let scopeDraft={},boughtNotice={};
+const BOUGHT_ITEMS=${scriptJson(boughtItemsFor(FEATURE_IDS))};
+function scopeChosen(state,id){const s=(state.scope||{})[id];const v=(state.boughtViews||{})[id];return Boolean(s&&(s.wholePreset||(Array.isArray(s.features)&&s.features.length)))&&!(v&&v.ready===false)}
+function openWhatTheyBought(id){rOpen[id]=true;rSeen[id]=true;const go=()=>{render(lastState,lastRun);requestAnimationFrame(()=>{const t=document.getElementById("wtb-"+id);if(t){t.scrollIntoView({behavior:"smooth",block:"start"});const f=t.querySelector("button,input,select");if(f)f.focus({preventScroll:true})}})};if(!rData[id])rLoad(id).then(go,go);else go()}
+function boughtView(state,id){return (state.boughtViews||{})[id]||{items:BOUGHT_ITEMS,ticks:BOUGHT_ITEMS.map(i=>i.id),source:"all",answer:null,attached:false,ready:false,suggestions:[]}}
+/* "Have you run the Assessment for <client>?" One click records the answer; Yes opens the attach flow. */
+function assessmentQuestion(id,v){
+ const q=mk("div","cds-stack");const who=((typeof ROSTER!=="undefined"&&ROSTER.find(r=>r.locationId===id))||{}).name||"this client";
+ q.appendChild(mk("h4","cds-panel-label","Have you run the Assessment for "+who+"?"));
+ const row=mk("div","cds-row");
+ const opt=(choice,label)=>{const on=v.answer===choice;const b=mk("button","cds-btn"+(on?"":" ghost"),label);b.setAttribute("aria-pressed",String(on));
+  b.onclick=async()=>{b.disabled=true;const r=await postJSON("/api/assessment-choice",{locationId:id,choice});if(r){if(r.approvalWithdrawn)boughtNotice[id]=r.message;load()}else b.disabled=false};row.appendChild(b)};
+ opt("attached","Yes, attach it");opt("run-first","Run it first (recommended)");opt("without","Build without an Assessment");q.appendChild(row);
+ if(v.attached||v.answer==="attached")q.appendChild(assessmentPanel(id));
+ else if(v.answer==="run-first"){const p=mk("p","");const a=document.createElement("a");a.className="cds-link";a.href="/assessment";a.target="_blank";a.rel="noopener";a.textContent="Run the Assessment";p.appendChild(a);p.appendChild(document.createTextNode(". When it is saved, come back and attach it here."));q.appendChild(p)}
+ else if(v.answer==="without")q.appendChild(mk("p","muted","Recorded: no Assessment for this client. The client document says so."));
+ else q.appendChild(mk("p","muted","Approve waits for an answer."));
+ return q}
 function scopeBlock(id,state){
- const sc=document.createElement("div");sc.className="cds-stack";
- sc.innerHTML="<h4 class='cds-panel-label'>What they bought</h4>";
+ const sc=document.createElement("div");sc.className="cds-stack";sc.id="wtb-"+id;
+ const v=boughtView(state,id);
+ sc.appendChild(assessmentQuestion(id,v));
+ sc.appendChild(mk("h4","cds-panel-label","What they bought"));
+ sc.appendChild(mk("p","",v.source==="all"?"Everything starts ticked. Untick what this client did not buy.":v.source==="assessment"?"Ticked from what the Assessment recorded as bought. Untick anything they did not buy.":"Tick what the client bought. Only the items marked Built get built."));
  if(!profCache){profLoad();const p=document.createElement("p");p.className="muted";p.textContent="Loading your packages\u2026";sc.appendChild(p);return sc}
  const saved=(state.scope||{})[id]||null;const pk=(profCache.packages||[]);
  const sel=document.createElement("select");sel.className="cds-select";sel.setAttribute("aria-label","Package they bought");
- const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"Everything the preset has (no package)":"Everything the preset has (no packages saved yet: add them on Your agency)";sel.appendChild(o0);
+ const o0=document.createElement("option");o0.value="";o0.textContent=pk.length?"No package: tick the items below":"No packages saved yet (add them on Your agency): tick the items below";sel.appendChild(o0);
  for(const p of pk){const o=document.createElement("option");o.value=p.id;o.textContent=p.name+(p.price?" \xB7 "+moneyText(p.price):"");sel.appendChild(o)}
- const prefill=(state.scopePrefill||{})[id];let ticked=new Set(saved&&!saved.wholePreset?saved.features:(prefill||Object.keys(FEATS)));if(saved&&saved.package)sel.value=saved.package;
+ let ticked=new Set(v.ticks);if(saved&&saved.package)sel.value=saved.package;
+ const base=JSON.stringify([saved,v.ticks]);if(scopeDraft[id]&&scopeDraft[id].base!==base)delete scopeDraft[id];const dr=scopeDraft[id];if(dr){ticked=new Set(dr.ticked);sel.value=dr.pkg}
+ const keepScope=()=>{scopeDraft[id]={ticked:[...ticked],pkg:sel.value,base:base};unsaved.hidden=false};
+ const everything=document.createElement("button");everything.className="cds-btn ghost";everything.textContent="Tick everything";
+ everything.title="Ticks all fourteen. Nothing is saved until you press Save what they bought.";
+ everything.onclick=()=>{ticked=new Set(v.items.map(i=>i.id));keepScope();drawBoxes();drawFigs()};
+ sc.appendChild(everything);
  const boxes=document.createElement("div");boxes.className="cds-stack";
- function drawBoxes(){boxes.innerHTML="";for(const k of Object.keys(FEATS)){const l=document.createElement("label");l.className="cds-check";
-  const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(k);c.onchange=()=>{if(c.checked)ticked.add(k);else ticked.delete(k)};l.appendChild(c);
-  const t=document.createElement("span");const tb=document.createElement("b");tb.textContent=FEATS[k].name;t.appendChild(tb);t.appendChild(mk("small","",FEATS[k].what));l.appendChild(t);boxes.appendChild(l)}}
+ function drawBoxes(){boxes.innerHTML="";for(const it of v.items){const l=document.createElement("label");l.className="cds-check";
+  l.dataset.k=it.id;const c=document.createElement("input");c.type="checkbox";c.checked=ticked.has(it.id);c.onchange=()=>{if(c.checked)ticked.add(it.id);else ticked.delete(it.id);keepScope();drawFigs()};l.appendChild(c);
+  const t=document.createElement("span");const tb=document.createElement("b");tb.textContent=it.name;t.appendChild(tb);t.appendChild(mk("small","",it.means));
+  t.appendChild(mk("small","bought-delivery",it.delivery));if(it.next)t.appendChild(mk("small","bought-next",it.next));l.appendChild(t);boxes.appendChild(l)}}
  const figs=((state.assessmentFigures||{})[id])||{};
- function drawFigs(){for(const l of boxes.querySelectorAll("label")){const k=l.dataset.k;const old=l.querySelector("em");if(old)old.remove();if(figs[k]&&!ticked.has(k)){const e=document.createElement("em");e.className="cds-chip warn";e.textContent="Not bought: "+figs[k]+".";l.querySelector("span").appendChild(e)}}}
- sel.onchange=()=>{const p=pk.find(x=>x.id===sel.value);ticked=new Set(p?p.features:Object.keys(FEATS));drawBoxes();drawFigs()};drawBoxes();
- for(const l of boxes.querySelectorAll("label")){const c=l.querySelector("input");const k=Object.keys(FEATS)[[...boxes.querySelectorAll("label")].indexOf(l)];l.dataset.k=k;c.addEventListener("change",drawFigs)}drawFigs();
- const note=document.createElement("p");note.className="muted";note.textContent="Always built, whatever is ticked: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing. Unticked features go in the client document as available next.";
+ function drawFigs(){for(const l of boxes.querySelectorAll("label")){const it=v.items.find(i=>i.id===l.dataset.k);const old=l.querySelector("em");if(old)old.remove();if(it&&it.feature&&figs[it.feature]){const e=document.createElement("em");e.className="cds-chip"+(ticked.has(it.id)?"":" warn");e.textContent="Assessment: "+figs[it.feature]+(ticked.has(it.id)?".":". Not ticked.");l.querySelector("span").appendChild(e)}}}
+ /* A package names build features: it ticks their items and unticks the other built ones; the rest stay as they are. */
+ sel.onchange=()=>{const p=pk.find(x=>x.id===sel.value);if(p)for(const it of v.items){if(!it.feature)continue;if((p.features||[]).includes(it.feature))ticked.add(it.id);else ticked.delete(it.id)}keepScope();drawBoxes();drawFigs()};drawBoxes();drawFigs();
+ const note=document.createElement("p");note.className="muted";note.textContent="Always built, whatever is ticked: the pipeline and its stages, the fields, tags and custom values, the intake form, the calendar, and the reply routing. A ticked item that is not built automatically becomes one of your jobs in the account.";
  const sv=document.createElement("button");sv.className="cds-btn ghost";sv.textContent="Save what they bought";
- sv.onclick=async()=>{const all=Object.keys(FEATS).every(k=>ticked.has(k));const body={locationId:id,features:(all&&!sel.value)?null:[...ticked]};if(sel.value)body.package=sel.value;if(await postJSON("/api/scope",body)){delete assessmentCards[id];load()}};
- const status=document.createElement("p");status.className="muted";status.textContent=saved?(saved.wholePreset?"Saved: the whole preset. The build follows this.":"Saved: "+saved.features.length+" of "+Object.keys(FEATS).length+" features"+(saved.package?" from the "+saved.package+" package":"")+". The build follows this."):prefill?"Not confirmed yet: ticked from what they bought. Nothing is built until you save.":"Nothing saved: the whole preset is built.";
- sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(status);
+ const status=document.createElement("p");status.className="muted";status.setAttribute("role","status");
+ sv.onclick=async()=>{if(!ticked.size){status.textContent="Tick at least one item they bought, then save.";return}
+  if(!v.items.some(it=>it.kind==="built"&&ticked.has(it.id))){status.textContent="None of the ticked items is built for this client's industry. Tick at least one item marked Built.";return}
+  const body={locationId:id,bought:[...ticked]};if(sel.value)body.package=sel.value;const r=await postJSON("/api/scope",body);if(r){unsaved.hidden=true;if(r.approvalWithdrawn)boughtNotice[id]=r.message;else delete boughtNotice[id];delete scopeDraft[id];delete assessmentCards[id];load()}};
+ const nBought=v.ticks.length,nBuilt=v.items.filter(it=>it.kind==="built"&&v.ticks.includes(it.id)).length;
+ status.textContent=saved&&v.source==="saved"?"Saved: "+nBought+" of "+v.items.length+" bought, "+nBuilt+" of them built automatically"+(saved.package?", from the "+saved.package+" package":"")+". The build follows this.":saved?(saved.wholePreset?"Saved: everything in the plan. The build follows this.":"Saved before this list: "+saved.features.length+" features. Save again to record what they bought."):"Not saved yet. Save what they bought before approving.";
+ const unsaved=mk("span","cds-chip warn","Not saved yet");unsaved.hidden=!scopeDraft[id];
+ sc.appendChild(sel);sc.appendChild(boxes);sc.appendChild(note);sc.appendChild(sv);sc.appendChild(unsaved);sc.appendChild(status);
+ if(boughtNotice[id]){const n=mk("p","cds-callout warn",boughtNotice[id]);n.setAttribute("role","alert");sc.appendChild(n)}
  return sc}
 async function rLoad(id){const r=await(await fetch("/api/review?locationId="+id)).json();rData[id]=r;render(lastState,lastRun)}
 // Finding 20 (2026-08-26): writing the review takes 30\u201390 s and the page re-renders every few seconds meanwhile,
@@ -48413,7 +49472,6 @@ function reviewPanel(id,name,state,run){const r=rData[id];const d=document.creat
  {const sc=(state.staffChecks||{})[id];if(!sc||sc.status!=="ready"){const w=document.createElement("p");w.className="cds-callout warn";w.setAttribute("role","alert");w.textContent=sc?STAFF_REVIEW_WARNING:STAFF_REVIEW_UNCHECKED;d.appendChild(w)}}
  /* Codex F1 (2026-09-06): the review is the model's output and the names are other businesses' records; both are TEXT. */
  const bt=(el,label,text)=>{const b=document.createElement("b");b.textContent=label;el.appendChild(b);el.appendChild(document.createTextNode(moneyText(text)))};
- d.appendChild(assessmentPanel(id));
  const busy=reviewBusy(id,run);
  const gen=document.createElement("button");gen.className="cds-btn ghost";
  gen.textContent=busy?"Thinking it through\u2026":(r&&r.ok)?"Regenerate":"Generate the review";gen.disabled=busy;
@@ -48426,7 +49484,9 @@ function reviewPanel(id,name,state,run){const r=rData[id];const d=document.creat
  if(!r||!r.ok){if(!busy){const p=document.createElement("p");if(r&&r.error&&r.error!=="not generated yet"){p.className="cds-callout warn";p.setAttribute("role","alert")}else p.className="muted";
    p.textContent=r&&r.error?r.error:"Turn their intake answers into strategy: who they really sell to, whether the offer holds up, what the account is missing, and what to build first.";
    d.appendChild(p)}
-  d.appendChild(gen);return d}
+  d.appendChild(gen);
+  /* What they bought decides the build, so it is here even before the review is written (2026-09-29). */
+  d.appendChild(scopeBlock(id,state));return d}
  if(r.headline){const h=document.createElement("div");h.className="cds-callout info headline";h.textContent=moneyText(r.headline);d.appendChild(h)}
  if(r.ica){const s1=document.createElement("div");s1.className="cds-stack";s1.innerHTML="<h4 class='cds-panel-label'>Who they actually sell to</h4>";
   const p1=document.createElement("p");p1.textContent=moneyText(r.ica.who||"");s1.appendChild(p1);
@@ -48466,17 +49526,13 @@ function reviewPanel(id,name,state,run){const r=rData[id];const d=document.creat
   const a=document.createElement("a");a.className="cds-link";a.href="/blueprint?locationId="+encodeURIComponent(id);a.target="_blank";a.rel="noopener";a.textContent="Open the prepared client document";brand.appendChild(a)};
  brand.appendChild(an);brand.appendChild(ac);brand.appendChild(dl);d.appendChild(brand);
  const row=document.createElement("div");row.className="cds-row";
- const ap=document.createElement("button");ap.className="cds-btn ghost";ap.textContent="Approve: unlock the build";
-
- const stg=(state.clients[id]||{stages:[]}).stages||[];
- if(stg[2]==="done"){ap.disabled=true;ap.textContent="Approved"}
- /* Finding 35: this button used to POST to /api/stage on its own, with no operator name and
-    without reading the reply. When the work queue made a hand mark record WHO made it, this
-    button started failing the check and saying nothing at all . it just looked dead. Every
-    hand mark goes through markStage(), which asks for the name once, keeps it, and shows any
-    refusal instead of swallowing it. */
- ap.onclick=async()=>{await markStage(id,2,"done")};
- row.appendChild(ap);row.appendChild(gen);d.appendChild(row);
+ /* Rehearsal 2, finding 15: this was a third approve button (labelled unlock the build) that only
+    ticked the step, so Build then refused with "Approve building before running Build." It is now the
+    same "Approve this plan" as the next step, and it appears only when approving can go through:
+    once what they bought is saved, and not after approval. */
+ if((state.buildApproved||{})[id]){const ap=document.createElement("button");ap.className="cds-btn ghost";ap.textContent="Approved";ap.disabled=true;row.appendChild(ap)}
+ else if(scopeChosen(state,id)&&!["template","hidden"].includes(typeOf(state,id))&&!PROTECTED[id])row.appendChild(approveButton(id,name,state,"review","cds-btn"));
+ row.appendChild(gen);d.appendChild(row);
  return d}
 function clientPageError(raw,next){
  const sentence=value=>{const t=String(value||"").trim().replace(/\\s*\\u2014\\s*/g,". ").replace(/[.!?;:]+$/,"");return t?t.charAt(0).toUpperCase()+t.slice(1)+".":""};
@@ -48489,7 +49545,7 @@ function clientPageError(raw,next){
  return text+(action?" "+action:"")}
 function showClientError(raw,container,next){const parent=container||document.getElementById("main");let e=parent.querySelector('[role="alert"]');if(!e){e=document.createElement("p");e.setAttribute("role","alert");e.className="cds-callout warn";parent.appendChild(e)}e.textContent=clientPageError(raw,next)}
 async function clientPageRequest(url,options){try{const response=await fetch(url,options);const data=await response.json();if(!response.ok&&data.ok!==false)data.ok=false;return {json:async()=>data}}catch(e){return {json:async()=>({ok:false,error:/^[/]api[/](?:client-)?intake/.test(url)?"GHL Command could not confirm the result. Refresh the intake to check its status.":"GHL Command could not confirm the result; check GoHighLevel before trying again to avoid repeating a change."})}}}
-function pendingCard(c,state,intake=false){const div=document.createElement("section");div.className="cds-panel client";
+function pendingCard(c,state,intake=false){const div=document.createElement("section");div.className="cds-panel client";div.setAttribute("data-key",c.locationId);
  const head=document.createElement("div");head.className="cds-panel-head client-head";
  const txt=mk("div","txt");const h=document.createElement("h2");h.className="cds-panel-title";h.textContent=c.name;txt.appendChild(h);head.appendChild(txt);
  const pill=chip("warn","Needs connecting");head.appendChild(pill);
@@ -48636,7 +49692,7 @@ function card(c,state,run){const st=(state.clients[c.locationId]||{stages:STAGES
  // A template or hidden account opens only so its owner can lock or unlock it and change its
  // type: nothing on its card builds into it (review L-1; a template can be the live snapshot source).
  const parkedType=["template","hidden"].includes(typeOf(state,c.locationId));
- const div=document.createElement("section");div.className="cds-panel client";
+ const div=document.createElement("section");div.className="cds-panel client";div.setAttribute("data-key",c.locationId);
  const head=document.createElement("div");head.className="cds-panel-head client-head";
  const htxt=mk("div","txt");const h=document.createElement("h2");h.className="cds-panel-title";h.textContent=c.name;htxt.appendChild(h);head.appendChild(htxt);
  if(sandbox){const sb=chip("info","");sb.title="Practice accounts skip typing the client name. Review and approve the plan before building.";sb.textContent="Practice account";htxt.appendChild(sb)}
@@ -48657,11 +49713,6 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
  else if(!st.some(s=>s==="done"))div.appendChild(unnest(preflightCard(c)));
  /* Kept reachable after a finished Build while a re-run is held for staff (the gate saves its check). */
  {const sc=(state.staffChecks||{})[c.locationId];if(!parkedType&&((st[3]||"pending")!=="done"||(sc&&sc.status!=="ready")))div.appendChild(unnest(staffCard(c,state)))}
- const approveBuilding=async()=>{const typed=prompt('Approve the Blueprint Review for "'+c.name+'" and let Command OS build in this account.'+String.fromCharCode(10,10)+'Type the client name exactly to confirm:');if(typed===null)return;
-  try{const response=await fetch("/api/build-approval",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,confirmName:typed})});const r=await response.json();
-   if(!response.ok||r.ok!==true){r.ok=false;r.error=r.error||"Command OS could not confirm the result. Refresh this client to read its saved state before retrying."}
-   if(!r.ok)alert(r.error);else load()
-  }catch(e){alert("Command OS could not confirm the result. Refresh this client to read its saved state before retrying.")}};
  // The steps, laid out as the owner approved on 2026-09-25: a progress bar, the next step in
  // full, then one row per step. Only the layout changed. Every button below keeps the condition
  // and the handler it had in the seven-column layout; the next-step panel draws the SAME
@@ -48679,7 +49730,7 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
  const nextBox=document.createElement("div");nextBox.className="cds-stack snext";div.appendChild(nextBox);
  const row=document.createElement("div");row.className="cds-flow stages";row.setAttribute("role","list");
  let curLive=false;
- STAGES.forEach((name,i)=>{const stale=staleOf(i);const el=document.createElement("div");el.className="cds-node stage "+(stale?"pending":(st[i]||"pending"))+(i===curI?" here hit":"");el.setAttribute("role","listitem");
+ STAGES.forEach((name,i)=>{const stale=staleOf(i);const el=document.createElement("div");el.className="cds-node stage "+(stale?"pending":(st[i]||"pending"))+(i===curI?" here hit":"");el.setAttribute("role","listitem");el.setAttribute("data-key",c.locationId+":"+i);
   const gate=GATES[String(i)];
   const oc0=(state.outcomes||{})[c.locationId+":"+i];const notPassed=(st[i]||"pending")==="pending"&&oc0&&(oc0.issues||[]).length>0;
   if(notPassed)el.className+=" notpassed";
@@ -48713,7 +49764,9 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
    const clock=document.createElement("div");clock.className="cds-num";
 
    const began=run.startedAt?new Date(run.startedAt).getTime():0;
-   const tick=()=>{if(!began)return;const sec=Math.max(0,Math.round((Date.now()-began)/1000));
+   /* The clock counts on the page alone, so it only counts while the status is fresh: a page that has
+      not heard from the server for 15s freezes and says so, rather than looking busy (2026-09-29). */
+   const tick=()=>{if(!began)return;if(statusIsStale()){clock.textContent="checking\u2026";return}const sec=Math.max(0,Math.round((Date.now()-began)/1000));
     clock.textContent="working "+(sec<60?sec+"s":Math.floor(sec/60)+"m "+(sec%60)+"s")};
    tick();if(began){const h=setInterval(()=>{if(!clock.isConnected){clearInterval(h);return}tick()},1000)}
    box.appendChild(clock);
@@ -48752,23 +49805,37 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
   else if(!live){const note=mkNote();what.appendChild(note||about)}
   if(POWERED.includes(i)&&(st[i]||"pending")!=="done"){el.style.cursor="default";
    el.title="Command OS runs and checks this step. Its result comes from a run, never from a click."}
-  const gateLabel=({2:"Approve this plan",5:"Confirm these tasks are finished",6:"Sign this client live"})[i];
-  const mkGate=cls=>{const action=document.createElement("button");action.className=cls;action.textContent=gateLabel;action.onclick=()=>{if(i===2)return approveBuilding();return markStage(c.locationId,i,"done")};return action};
+  /* Jerry, 2026-09-29: Approve waits for What they bought. Until a selection is saved the gate
+     is "Choose what the client bought", which opens the Blueprint Review at that block. */
+  const mustChoose=i===2&&!scopeChosen(state,c.locationId);
+  const gateLabel=mustChoose?"Choose what the client bought":({2:"Approve this plan",5:"Confirm these tasks are finished",6:"Sign this client live"})[i];
+  /* Approve opens the one approval panel; the other gates open a hand-mark panel with the name on it (rehearsal 2). */
+  const mkGate=cls=>{if(i===2&&!mustChoose)return approveButton(c.locationId,c.name,state,"gate",cls);
+   const action=document.createElement("button");action.className=cls;action.textContent=gateLabel;const key="mark:"+c.locationId+":"+i;
+   action.onclick=()=>{if(mustChoose)return openWhatTheyBought(c.locationId);icShow(action,key,markSpec(c.locationId,i,gateLabel))};return icAfter(action,key)};
   const canBuild=!parkedType&&(i<=1||sandbox||Boolean((state.buildApproved||{})[c.locationId]));
-  const runIt=async(ev)=>{ev.stopPropagation();if(i===0&&!confirm("In "+c.name+", Intake writes custom fields, one form, and one published notification workflow."+String.fromCharCode(10,10)+INTAKE_NOTIFICATION_REVIEW.join(String.fromCharCode(10))+String.fromCharCode(10,10)+"Create or repair these intake items?"))return;if(i===4&&PAGE_PLANS.includes(c.locationId)&&!confirm("Verify submits one test lead to the pages "+c.name+"\u2019s older build made, watches it arrive, and deletes the test contact afterwards. It may fire this client\u2019s own automations once. Run the check?"))return;const res=await fetch("/api/run",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,stage:i,intakeConfirmed:i===0})});const j=await res.json();if(!j.ok)alert(j.error);load()};
+  /* Starts the run; the answer is an error sentence, or "" when it started. */
+  const startIt=async()=>{let j=null;try{const res=await fetch("/api/run",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,stage:i,intakeConfirmed:i===0})});j=await res.json()}catch(e){}
+   return (j&&j.ok)?"":((j&&j.error)||"Command OS could not confirm the result. Refresh this client to read its saved state before retrying.")};
+  /* Intake, and Verify on an older page build, ask first: in a panel under the button, not a confirm() (rehearsal 2). */
+  const runAsk=i===0?{title:"Create or repair the intake in "+c.name,text:["Intake writes custom fields, one form, and one published notification workflow."].concat(INTAKE_NOTIFICATION_REVIEW),ok:"Create or repair these intake items",busyLabel:"Starting\u2026",run:startIt}
+   :(i===4&&PAGE_PLANS.includes(c.locationId))?{title:"Run the check on "+c.name,text:["Verify submits one test lead to the pages "+c.name+"\u2019s older build made, watches it arrive, and deletes the test contact afterwards. It may fire this client\u2019s own automations once."],ok:"Run the check",busyLabel:"Starting\u2026",run:startIt}:null;
+  const runKeyOf="run:"+c.locationId+":"+i;
+  const runIt=async(ev,btn)=>{ev.stopPropagation();if(runAsk)return icShow(btn,runKeyOf,runAsk);const err=await startIt();if(err)alert(err);load()};
   const mkRun=(cls,label)=>{const b=document.createElement("button");b.className=cls;
    const busy=run&&run.running;b.textContent=busy&&run.locationId===c.locationId&&run.stage===i?"Running\u2026":label;
    b.disabled=Boolean(busy)||(!st.some(s=>s==="done")&&!preflights[c.locationId]?.ok);
-   b.onclick=runIt;return b};
+   b.onclick=ev=>runIt(ev,b);return runAsk?icAfter(b,runKeyOf):b};
   if(!live&&nIss){const si=document.createElement("button");si.className="cds-link sactbtn";si.textContent=nIss>1?"See issues":"See issue";si.onclick=toggleIssues;act.appendChild(si)}
   /* One way to act on a step: the current step's buttons live in the next-step block only; other rows keep their links.
      A gate the owner has already answered offers nothing. */
   if(gateOpen&&!anyBusy&&!parkedType&&i!==curI)act.appendChild(mkGate("cds-link sactbtn"));
   if(canBuild&&POWERED.includes(i)&&i!==curI)act.appendChild(mkRun("cds-link sactbtn srun",(st[i]||"pending")==="done"?"Run again":"Run this step"));
-  if(i===curI){const main=document.createElement("div");
+  if(i===curI){const main=document.createElement("div");main.setAttribute("data-key",c.locationId+":"+i+":next");
    const k=mk("div","cds-panel-label sk",parkedType?"Building is off":"Next step");main.appendChild(k);
    const h3=document.createElement("h3");h3.className="cds-panel-title";h3.textContent=parkedType?"Nothing is built into this account":(i+1)+". "+LABELS[i];main.appendChild(h3);
    const pa=document.createElement("p");pa.textContent=parkedType?"It opens here so you can lock or unlock it, or change its type to Client to build it.":stepAbout(i,c,true);main.appendChild(pa);
+   if(mustChoose&&!parkedType){const pc=document.createElement("p");pc.className="swarn";pc.textContent="First choose what the client bought. Only those parts get built.";main.appendChild(pc)}
    if(live)main.appendChild(mkLive());
    if(stale&&!live){const w=document.createElement("div");w.className="cds-row";w.appendChild(chip(chipOf[1],chipOf[0]));w.appendChild(mk("span","swarn",stale.reason));main.appendChild(w)}
    const pn=mkNote();if(pn){const w=document.createElement("div");w.className="snoteline";w.appendChild(pn);main.appendChild(w)}
@@ -48777,7 +49844,7 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
    if(canBuild&&POWERED.includes(i))btns.appendChild(mkRun("cds-btn runbtn sbig","Run "+LABELS[i]));
    if(!parkedType&&canBuild&&POWERED.includes(i)&&run&&run.running&&run.locationId!==c.locationId){const why=document.createElement("p");why.className="muted swhy";why.textContent="A step is running for another client. This one can start when it finishes.";btns.appendChild(why)}
    if(!btns.children.length&&!live&&!parkedType){const why=document.createElement("p");why.className="muted swhy";
-    why.textContent=anyBusy?"Another step is running for this client. This one opens when it finishes.":POWERED.includes(i)?"Approve building for this client below, and this step can run.":"";
+    why.textContent=anyBusy?"Another step is running for this client. This one opens when it finishes.":POWERED.includes(i)?"Approve this plan in step 3, and this step can run.":"";
     if(why.textContent)btns.appendChild(why)}
    nextBox.title=el.title||"";nextBox.appendChild(main);nextBox.appendChild(btns)}
   row.appendChild(el)});
@@ -48804,7 +49871,9 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
  if(view.stale.length){const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));for(const stale of view.stale){const p=document.createElement("p");p.textContent=LABELS[stale.stage]+": stale. "+stale.reason;d.appendChild(p)}div.appendChild(d)}
  if(view.approvedAt){const p=document.createElement("p");p.textContent="Building approved on "+niceDate(view.approvedAt,true)+".";div.appendChild(p)}
  for(const repair of view.repairs){const p=document.createElement("p");p.textContent="Live workflow repair: "+repair.name+". "+repair.changes.join(" ");div.appendChild(p)}
- if(view.planHash&&!parkedType){const approve=document.createElement("button");approve.className="cds-btn ghost";approve.textContent="Approve building\u2026";approve.onclick=async()=>{const typed=sandbox?c.name:prompt("Approve building and the listed live workflow repairs for "+c.name+". Type the client name to confirm.");if(typed===null)return;if(await postJSON("/api/build-approval",{locationId:c.locationId,confirmName:typed,repairHashes:view.repairs.map(r=>r.hash)}))load()};div.appendChild(approve)}
+ /* Rehearsal 2, finding 15: the second building-approval button that was here is gone. The one "Approve this plan"
+    (step 3) approves the listed live workflow repairs too, and says so in its panel. */
+ if(view.planHash&&!parkedType&&!scopeChosen(state,c.locationId)){const ch=document.createElement("button");ch.className="cds-btn ghost";ch.textContent="Choose what the client bought";ch.onclick=()=>openWhatTheyBought(c.locationId);div.appendChild(ch)}
  }else{const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));const p=document.createElement("p");p.textContent="The executable plan is prepared when Build runs.";d.appendChild(p);div.appendChild(d)}
  if(view?.handoff)div.appendChild(unnest(handoffPanel(c,view)));
  const _prot=PROTECTED[c.locationId];
@@ -48822,10 +49891,11 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
    rv.onclick=async()=>{await postJSON("/api/build-approval",{locationId:c.locationId,revoke:true});load()};
    ab.appendChild(s1);ab.appendChild(rv);ab.appendChild(protectBtn(c))}
   else if(parkedType){ab.appendChild(protectBtn(c))}
-  else{const w=document.createElement("span");w.className="muted";w.textContent="Automated building is off for this client. ";
-   const btn=document.createElement("button");btn.className="cds-btn ghost";btn.textContent="Approve building\u2026";
-   btn.onclick=approveBuilding;
-   ab.appendChild(w);ab.appendChild(btn);ab.appendChild(protectBtn(c))}
+  else{/* No second approve button here (rehearsal 2, finding 15): step 3's "Approve this plan" is the one. */
+   const w=document.createElement("span");w.className="muted";w.textContent="Automated building is off for this client until you approve this plan in step 3. ";
+   ab.appendChild(w);
+   if(!scopeChosen(lastState,c.locationId)){const btn=document.createElement("button");btn.className="cds-btn ghost";btn.textContent="Choose what the client bought";btn.onclick=()=>openWhatTheyBought(c.locationId);ab.appendChild(btn)}
+   ab.appendChild(protectBtn(c))}
   div.appendChild(ab)}
  // A "live" claim is re-derived from the signature, never trusted from the
  // stage array: the gate runs on the write path, and this file can be restored
@@ -48867,6 +49937,13 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
     txt.textContent=t.text;if(t.reappeared){txt.textContent="";txt.appendChild(chip("warn","Came back after you ticked it"));txt.appendChild(document.createTextNode(" "+t.text))}
     row.appendChild(cb);row.appendChild(txt);box.appendChild(row)});
    div.appendChild(box)}}
+ // Suggested next steps with Claude (2026-09-29): from what they bought, shown beside the
+ // jobs once Verify has run, never a job to tick and never something go-live waits on.
+ {const sg=((lastState.boughtViews||{})[c.locationId]||{}).suggestions||[];
+  if(sg.length&&(Boolean((lastState.outcomes||{})[c.locationId+":4"])||((lastState.manualTasks||{})[c.locationId]||[]).length)){
+   const box=mk("div","cds-stack");box.appendChild(mk("h3","cds-panel-title","Suggested next steps with Claude"));
+   box.appendChild(mk("p","muted","From what they bought. These are not jobs in the account, and nothing waits on them."));
+   const ul=mk("ul","cds-list");for(const s of sg)ul.appendChild(mk("li","",s));box.appendChild(ul);div.appendChild(box)}}
  const _intakeIn=(iData[c.locationId]&&iData[c.locationId].status==="received");
  const _writing=reviewBusy(c.locationId,run);
  { // Review is accessible before intake so an assessment can fill it.
@@ -48878,7 +49955,7 @@ title.textContent="Claude usage for this client";details.appendChild(title);for(
   if(rOpen[c.locationId])div.appendChild(unnest(reviewPanel(c.locationId,c.name,state,run)))}
  if(st[0]==="done"){const ir=document.createElement("div");ir.className="cds-row";
   const ib2=document.createElement("button");ib2.className="cds-btn ghost";ib2.textContent=iOpen[c.locationId]?"Close the intake":"Complete the intake";ib2.setAttribute("aria-expanded",String(Boolean(iOpen[c.locationId])));
-  ib2.onclick=async()=>{iOpen[c.locationId]=!iOpen[c.locationId];if(iOpen[c.locationId]&&!iData[c.locationId])await iLoad(c.locationId);else render(lastState,lastRun)};
+  ib2.onclick=async()=>{iOpen[c.locationId]=!iOpen[c.locationId];if(!iOpen[c.locationId])iRetryStop(c.locationId);if(iOpen[c.locationId]&&!iData[c.locationId])await iLoad(c.locationId);else render(lastState,lastRun)};
   ir.appendChild(ib2);
   const dd=iData[c.locationId];
   if(dd&&dd.ok){const ic=document.createElement("span");ic.className="cds-chip istatus "+(dd.status==="received"?"ok":dd.status==="sent"?"warn":"");
@@ -48929,10 +50006,77 @@ function acctRow(c,state,run){const row=document.createElement("li");row.classNa
    Derived server-side from the same board the cards show (/api/queue): no second
    list to fall out of step with. Clicking a row opens that account's card. \u2500\u2500 */
 let queueData=null,showQueueRest=false,showLive=false;
-function opName(force){let n="";try{n=localStorage.getItem("cmdos-operator")||""}catch(e){}
- if(!n||force){const t=prompt("Your name. Command OS records who marked a step done by hand, so nobody has to take it on trust:",n||"");
-  if(t===null)return n||null;n=t.trim();if(!n)return null;try{localStorage.setItem("cmdos-operator",n)}catch(e){}}
- return n}
+/* \u2500\u2500 Inline confirm (rehearsal 2, 2026-09-29) \u2500\u2500
+   A panel under the button instead of prompt(), confirm() or alert(): one stray keystroke dismissed a
+   prompt, and an alert sent the member off the page to read why. The panel keeps its fields, says what
+   went wrong in place, and is drawn again after a redraw with what was typed (its state lives here). */
+function icPanel(key){const st=icOpen[key],sp=st.spec;const p=document.createElement("div");p.className="cds-callout info cds-stack ic-panel";p.dataset.icp=key;p.setAttribute("role","group");
+ if(sp.title)p.setAttribute("aria-label",sp.title);
+ /* Clicks and keys stay in the panel: a queue row behind it opens a client on click. */
+ p.onclick=e=>e.stopPropagation();
+ p.onkeydown=e=>{e.stopPropagation();if(e.key==="Escape"&&!st.busy){delete icOpen[key];p.remove()}};
+ if(sp.title)p.appendChild(mk("b","",sp.title));
+ for(const line of [].concat(sp.text||[]))p.appendChild(mk("p","",line));
+ const inputs={};let ok;
+ for(const f of sp.fields||[]){const l=document.createElement("label");l.className="cds-field";l.appendChild(mk("span","",f.label));
+  const inp=document.createElement("input");inp.className="cds-input";inp.autocomplete="off";inp.name="ic:"+key+":"+f.id;inp.value=st.values[f.id]!=null?st.values[f.id]:(f.value||"");
+  inp.oninput=()=>{st.values[f.id]=inp.value};inp.onkeydown=e=>{if(e.key==="Enter"){e.preventDefault();ok.click()}};
+  l.appendChild(inp);p.appendChild(l);inputs[f.id]=inp}
+ const err=mk("p","cds-callout warn",st.error||"");err.setAttribute("role","alert");err.hidden=!st.error;p.appendChild(err);
+ const row=document.createElement("div");row.className="cds-row";
+ ok=document.createElement("button");ok.type="button";ok.className="cds-btn";ok.textContent=st.busy?(sp.busyLabel||"Working\u2026"):sp.ok;ok.disabled=Boolean(st.busy);
+ const no=document.createElement("button");no.type="button";no.className="cds-btn ghost";no.textContent="Cancel";no.disabled=Boolean(st.busy);
+ no.onclick=()=>{delete icOpen[key];p.remove()};
+ ok.onclick=async()=>{if(st.busy)return;const vals={};for(const f of sp.fields||[])vals[f.id]=String(inputs[f.id].value||"").trim();
+  st.busy=true;st.error="";err.hidden=true;ok.disabled=true;no.disabled=true;ok.textContent=sp.busyLabel||"Working\u2026";
+  let msg="";try{msg=(await sp.run(vals))||""}catch(e){msg="Command OS could not confirm the result. Refresh this client to read its saved state before retrying."}
+  st.busy=false;
+  /* A redraw during the request drew a new panel from the state (showing "Approving\u2026"); this one may
+     be detached. Every copy of the panel is replaced with a fresh one, or removed on success (review of d407f04). */
+  const copies=new Set([p,...icLive(key)]);
+  if(msg){st.error=msg;for(const x of copies)if(x.parentNode)x.replaceWith(icPanel(key));if(redrawPending)scheduleFlush();return}
+  delete icOpen[key];for(const x of copies)x.remove();if(sp.after)await sp.after();else load()};
+ row.appendChild(ok);row.appendChild(no);p.appendChild(row);return p}
+/* Opens the panel under the button (or focuses it when it is already open). */
+function icShow(btn,key,spec){const nx=btn.nextElementSibling;if(icOpen[key]&&nx&&nx.dataset&&nx.dataset.icp===key){const f=nx.querySelector("input")||nx.querySelector("button");if(f)f.focus();return}
+ icOpen[key]={spec:spec,values:{},error:"",busy:false};const p=icPanel(key);btn.insertAdjacentElement("afterend",p);
+ const f=p.querySelector("input")||p.querySelector("button");if(f)f.focus()}
+/* Marks a button as the owner of a panel, so a redraw puts an open panel back under it. */
+/* Put back synchronously by render() before it restores focus, so a field typed in keeps the cursor;
+   the microtask covers a card drawn outside render(). */
+let icQueue=[];
+function icAfter(btn,key){if(icOpen[key]){icQueue.push([btn,key]);queueMicrotask(icFlush)}return btn}
+function icFlush(){const q=icQueue;icQueue=[];for(const [btn,key] of q){const nx=btn.nextElementSibling;if(btn.parentNode&&icOpen[key]&&!(nx&&nx.dataset&&nx.dataset.icp===key))btn.insertAdjacentElement("afterend",icPanel(key))}}
+/* Every panel for this key on the page now. */
+function icLive(key){return [...document.querySelectorAll(".ic-panel")].filter(x=>x.dataset.icp===key)}
+/* A panel whose question the state has answered elsewhere is dropped, so a later revoke or reset never
+   reopens it with old typing (review of d407f04). */
+function icPrune(state){for(const k of Object.keys(icOpen)){const st=icOpen[k];if(!st||st.busy)continue;const [kind,id,step]=k.split(":");
+ const stages=((state.clients||{})[id]||{}).stages||[];
+ if(kind==="approve"&&(state.buildApproved||{})[id])delete icOpen[k];
+ else if((kind==="mark"||kind==="qmark")&&stages[Number(step)]==="done")delete icOpen[k]}}
+/* The name Command OS records on a hand mark, as last saved on this computer. */
+function opName(){let n="";try{n=localStorage.getItem("cmdos-operator")||""}catch(e){}return n}
+function saveOpName(n){try{localStorage.setItem("cmdos-operator",n)}catch(e){}}
+const NAME_FIELD=()=>({id:"who",label:"Your name",value:opName()});
+function needName(v){if(!v.who)return "Type your name. Command OS records who did this, so nobody has to take it on trust.";saveOpName(v.who);return ""}
+/* The ONE approval (rehearsal 2, finding 15). The next-step button and the Blueprint Review both open this,
+   with the same label and the same request; nothing else approves, and nothing refuses and points elsewhere. */
+function approveSpec(id,name,state){const sandbox=typeOf(state,id)==="sandbox";
+ const view=(state.buildViews||{})[id];const repairs=(view&&view.planHash&&view.repairs)||[];
+ return {title:"Approve this plan for "+name,
+  text:["Command OS then builds in this account what the Blueprint Review lists"+(repairs.length?", and makes the "+repairs.length+" live workflow "+plural(repairs.length,"repair")+" listed with the plan":"")+"."],
+  fields:[NAME_FIELD()].concat(sandbox?[]:[{id:"client",label:"Type the client name to confirm: "+name,value:""}]),
+  ok:"Approve",busyLabel:"Approving\u2026",
+  run:async v=>{const bad=needName(v);if(bad)return bad;
+   if(!sandbox&&v.client.toLowerCase()!==String(name).trim().toLowerCase())return 'Type the client name exactly as shown: "'+name+'".';
+   let res,j=null;try{res=await fetch("/api/build-approval",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,confirmName:sandbox?name:v.client,by:v.who,repairHashes:repairs.map(r=>r.hash)})})}
+   catch(e){return "Command OS could not confirm the result. Refresh this client to read its saved state before retrying."}
+   try{j=await res.json()}catch(e){}
+   if(!res.ok||!j||j.ok!==true)return (j&&j.error)||"Command OS could not confirm the result. Refresh this client to read its saved state before retrying.";
+   return ""}}}
+function approveButton(id,name,state,place,cls){const b=document.createElement("button");b.className=cls;b.textContent="Approve this plan";
+ const key="approve:"+id+":"+place;b.onclick=()=>icShow(b,key,approveSpec(id,name,lastState||state));return icAfter(b,key)}
 /* Finding 35: a write whose reply nobody reads is a button that can start failing in
    silence. Every cockpit write goes through here, so a refusal is shown rather than
    swallowed. */
@@ -48942,17 +50086,35 @@ async function postJSON(url,body){
  catch(e){alert("Command OS could not confirm the result. Refresh this client to read its saved state before retrying.");return false}
  try{j=await r.json()}catch(e){}
  if(!r.ok||(j&&j.ok===false)){alert((j&&j.error)||"That did not go through, and nothing was changed.");return false}
- return true}
+ return j||true}
 /* Nothing hand-markable that Command OS can check for itself. Steps it runs are marked
    by the run; steps that need a person are marked by that person, on the record. */
-async function markStage(id,i,status){
- if(POWERED.includes(i)&&status!=="pending"){
-  alert(LABELS[i]+" is a step Command OS runs and checks for you, so it cannot be ticked off by hand. Use the Run this step button on the card. If it went wrong, set it back to not started and run it again.");return}
- const who=opName(false);if(!who)return;
- const r=await(await fetch("/api/stage",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,stage:i,status:status,by:who})})).json();
- if(!r.ok){alert(r.error);return}
- await loadQueue();load()}
-async function loadQueue(){try{const r=await fetch("/api/queue",{method:"POST",headers:{"Content-Type":"application/json"},body:"{}"});queueData=await r.json();if(!r.ok)throw new Error(queueData.error||"The work queue could not be read.");if(window.cdsQueueBadge&&queueData.counts)window.cdsQueueBadge(queueData.counts.you||0)}catch(e){queueData={ok:false,error:e.message||"The work queue could not be read."}}}
+async function markStage(id,i,status,who){
+ if(POWERED.includes(i)&&status!=="pending")return LABELS[i]+" is a step Command OS runs and checks for you, so it cannot be ticked off by hand. Use the Run this step button on the card. If it went wrong, set it back to not started and run it again.";
+ let r=null;try{r=await(await fetch("/api/stage",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:id,stage:i,status:status,by:who})})).json()}catch(e){}
+ if(!r||!r.ok)return (r&&r.error)||"Command OS could not confirm the result. Refresh this client to read its saved state before retrying.";
+ return ""}
+/* A hand mark opens a panel with the name that goes on it (prefilled from last time) instead of a prompt. */
+function markSpec(id,i,label,text){return {title:label,text:[].concat(text||[],"Marking this done puts your name and the time on it."),fields:[NAME_FIELD()],ok:label,busyLabel:"Saving\u2026",
+ run:async v=>{const bad=needName(v);if(bad)return bad;return markStage(id,i,"done",v.who)},after:async()=>{await loadQueue();load()}}}
+/* cheap: a background refresh uses GET /api/queue, which derives the queue from the saved board without re-reading
+   every client's intake from GoHighLevel; the POST (which does) stays for the page's own loads. */
+/* Three ways to read the queue:
+   - undefined: the page's own load and the operator's actions. POST {}: re-reads every started client's intake.
+   - "pending": a background re-read (a return to the tab, every 4th heartbeat load). POST {only:"pending"}: re-reads
+     only clients whose saved intake is not yet "received", plus the one open here. At most one queue POST is in
+     flight, and a background one is skipped (the GET is used) within 30s of the last one finishing.
+   - "get": GET, derived from the saved board with no GoHighLevel reads.
+   A background read that fails keeps the last good queue rather than blanking it. */
+let queuePostBusy=false,queuePostAt=0;
+async function loadQueue(mode){
+ if(mode==="pending"&&(queuePostBusy||Date.now()-queuePostAt<30000))mode="get";
+ const background=mode==="get"||mode==="pending";const post=mode!=="get";
+ const init=mode==="get"?undefined:{method:"POST",headers:{"Content-Type":"application/json"},body:mode==="pending"?JSON.stringify({only:"pending",open:activeId||undefined}):"{}"};
+ if(post)queuePostBusy=true;
+ try{const r=await fetch("/api/queue",init);const q=await r.json();if(!r.ok||!q||q.ok===false)throw new Error((q&&q.error)||"The work queue could not be read.");queueData=q;if(window.cdsQueueBadge&&queueData.counts)window.cdsQueueBadge(queueData.counts.you||0)}
+ catch(e){if(!(background&&queueData&&queueData.ok))queueData={ok:false,error:e.message||"The work queue could not be read."}}
+ finally{if(post){queuePostBusy=false;queuePostAt=Date.now()}}}
 /* A whole first sentence, never a line cut mid-thought. */
 function firstSentence(s){const t=String(s||"").split(String.fromCharCode(10)).map(x=>x.trim()).filter(Boolean)[0]||"";const m=/^(.+?[.!?])(\\s|$)/.exec(t);return m?m[1]:t}
 /* Build text an owner cannot read: quoted names, tag and custom value keys (business_phone), plus signs,
@@ -48994,10 +50156,9 @@ function queueRow(it){const row=document.createElement("li");row.className="q-ro
  /* State in words: running is info; anything unfinished is warn. */
  side.appendChild(it.running?chip("info","Running now"):it.needs==="you"?chip("warn","Your call"):(it.proof&&it.proof.issues&&it.proof.issues.length)?chip("warn","To sort out"):chip("warn","Not run yet"));
  if(it.action==="mark"){const mb=document.createElement("button");mb.className="cds-btn ghost";mb.textContent="Mark done";
-  mb.onclick=async(e)=>{e.stopPropagation();
-   if(!confirm(it.title+String.fromCharCode(10,10)+"Marking this done puts your name and the time on it."))return;
-   await markStage(it.locationId,it.stageIndex,"done")};
-  side.appendChild(mb)}
+  const mkey="qmark:"+it.locationId+":"+it.stageIndex;
+  mb.onclick=(e)=>{e.stopPropagation();icShow(mb,mkey,markSpec(it.locationId,it.stageIndex,"Mark done",it.title))};
+  side.appendChild(icAfter(mb,mkey))}
  else side.appendChild(mk("span","cds-link acct-open","Open"));
  row.appendChild(side);
  row.onclick=()=>{if(it.href){rememberClient(it.locationId);location.href=it.href}else queueOpen(it.locationId)};
@@ -49021,7 +50182,9 @@ function operatorLine(){const who=document.createElement("span");who.className="
  let nm="";try{nm=localStorage.getItem("cmdos-operator")||""}catch(e){}
  who.appendChild(document.createTextNode(nm?("Marking as "+nm):"Nobody set to mark steps"));
  const ch=document.createElement("button");ch.className="cds-link";ch.textContent=nm?"Change":"Set your name";
- ch.onclick=()=>{opName(true);render(lastState,lastRun)};who.appendChild(ch);return who}
+ /* A panel with the name field, not a prompt (rehearsal 2). */
+ ch.onclick=()=>icShow(ch,"opname",{title:"Who marks steps done",fields:[NAME_FIELD()],ok:"Save",busyLabel:"Saving\u2026",run:async v=>needName(v),after:async()=>render(lastState,lastRun)});
+ who.appendChild(icAfter(ch,"opname"));return who}
 function queueBlock(match){const q=queueData;if(!q||!q.ok)return queueReadError();
  const frag=document.createDocumentFragment();
  const items=(q.items||[]).filter(i=>match({name:i.clientName,locationId:i.locationId}));
@@ -49036,11 +50199,11 @@ function queueBlock(match){const q=queueData;if(!q||!q.ok)return queueReadError(
  frag.appendChild(now);
  /* The rest fold away (Disclosure: cds-more), each in a Panel of its own that says what is inside. */
  if(later.length){const p=panel("Not started yet",later.length+" "+plural(later.length,"account")+" not started");p.classList.add("q-later");
-  const d=mk("details","cds-more");d.open=showQueueRest;d.ontoggle=()=>{showQueueRest=d.open};
+  const d=mk("details","cds-more");d.setAttribute("data-key","queue-rest");d.open=showQueueRest;d.ontoggle=()=>{showQueueRest=d.open};
   d.appendChild(mk("summary","","Show the "+later.length+" "+plural(later.length,"step")+" not started"));
   d.appendChild(listRows(later.map(queueRow),"queue-later"));p.appendChild(d);frag.appendChild(p)}
  if(fin.length){const p=panel("Finished",fin.length+" "+plural(fin.length,"account")+" finished");p.classList.add("q-finished");
-  const d=mk("details","cds-more");d.open=showLive;d.ontoggle=()=>{showLive=d.open};
+  const d=mk("details","cds-more");d.setAttribute("data-key","queue-live");d.open=showLive;d.ontoggle=()=>{showLive=d.open};
   d.appendChild(mk("summary","","Show the "+fin.length+" finished "+plural(fin.length,"account")));
   for(const signed of [true,false]){const group=fin.filter(f=>Boolean(f.live)===signed);if(!group.length)continue;
    d.appendChild(mk("div","cds-panel-label",signed?"Finished and live ("+group.length+")":"Finished, not signed live ("+group.length+")"));
@@ -49215,7 +50378,8 @@ const KEY_FACTS=[/website/i,/primary goal/i,/primary services|services you sell/
 function capAnswer(v){return Array.isArray(v)?v.join(", "):String(v==null?"":v).trim()}
 function renderIntakeCapability(m,c){const id=c.locationId;const data=iData[id];
  if(!data){iLoad(id);const p=panel("Intake","The client\u2019s answers");p.appendChild(mk("p","muted","Reading the intake\u2026"));m.appendChild(p);return}
- if(data.ok===false){const w=mk("div","cds-callout warn");w.setAttribute("role","alert");w.appendChild(mk("span","ttl","Could not read the intake"));w.appendChild(mk("span","",data.error||"Refresh the page to try again."));m.appendChild(w)}
+ if(data.ok===false&&data.transient){const p=mk("p","muted",data.error||"Could not refresh just now; retrying.");p.setAttribute("role","status");m.appendChild(p)}
+ else if(data.ok===false){const w=mk("div","cds-callout warn");w.setAttribute("role","alert");w.appendChild(mk("span","ttl","Could not read the intake"));w.appendChild(mk("span","",data.error||"Refresh the page to try again."));m.appendChild(w)}
  const answers=data.answers||{};const questions=data.questions||[];
  const answerOf=q=>capAnswer(answers[q.label]!=null?answers[q.label]:answers[q.key]);
  const answered=questions.length?questions.filter(q=>answerOf(q)).map(q=>[q.label,answerOf(q)]):Object.entries(answers).map(([k,v])=>[k,capAnswer(v)]).filter(x=>x[1]);
@@ -49266,7 +50430,7 @@ send.disabled=!published;
  if(!confirm("Send one email from "+c.name+"\u2019s account to "+r.preview.email+" with the handoff at "+r.url+"?"))return;
  const result=await(await fetch("/api/handoff-send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({locationId:c.locationId,hash:r.preview.hash,confirmed:true})})).json();note.textContent=result.note||result.error;
  }catch(e){note.textContent=e.message||"The result could not be confirmed. Check Conversations before retrying."}finally{send.disabled=false}};box.appendChild(send);return box}
-function pollCap(){if(capPoll)return;capPoll=setInterval(async()=>{try{const r=await(await fetch("/api/run/status")).json();const s=await(await fetch("/api/state")).json();if(!r.running){clearInterval(capPoll);capPoll=null;capRun=null;capReads=null;capReadsFor=""}render(s,r)}catch(e){}},2000)}
+function pollCap(){if(capPoll)return;capPoll=setInterval(async()=>{try{const r=await fetchRunStatus();const s=await(await fetch("/api/state")).json();if(!r.running){clearInterval(capPoll);capPoll=null;capRun=null;capReads=null;capReadsFor=""}if(!shouldRedraw(lastRun,r))return;if(!r.running||dataSig(s,r)!==lastDrawnSig){render(s,r);hideFinishNote()}}catch(e){}},2000)}
 
 /* PageHeader: kicker, the title as a sentence, one muted line, at most one primary action. */
 function screenHead(title,sub,kicker,action){const d=mk("div","cds-page-head");const t=mk("div","txt");
@@ -49313,9 +50477,34 @@ function homeBlock(state,run){const wrap=mk("div","board");
    li.onclick=go;li.onkeydown=(e)=>{if(e.key==="Enter"||e.key===" "){e.preventDefault();go()}};return li}),"board-needs"))}
  two.appendChild(needs);
  const priv=panel("Privacy","What stays on this computer");priv.classList.add("privacy");for(const line of PRIVACY_SHORT)priv.appendChild(mk("p","muted small",line));
- {const d=mk("details","cds-details");d.appendChild(mk("summary","","Details"));for(const line of PRIVACY_LINES)d.appendChild(mk("p","muted small",line));priv.appendChild(d)}two.appendChild(priv);
+ {const d=mk("details","cds-details");d.setAttribute("data-key","home-privacy");d.appendChild(mk("summary","","Details"));for(const line of PRIVACY_LINES)d.appendChild(mk("p","muted small",line));priv.appendChild(d)}two.appendChild(priv);
  wrap.appendChild(two);return wrap}
-function render(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...state.roster)}syncReviews(state);lastState=state;lastRun=run;
+/* Every redraw keeps the view (2026-09-29, Jerry: "anything I expand closes itself within 1 to 3 seconds").
+   The page is rebuilt from data, so a disclosure the operator opened, the scroll position and the cursor in
+   a field would all reset. Before drawing: note which <details> are open or closed, keyed by the nearest
+   data-key (client, client:stage) plus the summary words, and where focus and the caret are. After: put
+   them back. Toggles such as See issues already live in state (oOpen), and survive on their own. */
+let lastDrawnSig="";
+/* generatedAt is stamped fresh on every queue read (work-queue.ts), so it is left out: with it, no two reads ever matched
+   and every background refresh redrew (review of c09e946). */
+function dataSig(state,run){try{return JSON.stringify([state,run,typeof queueData==="undefined"?null:queueData],(k,v)=>k==="generatedAt"?undefined:v)}catch(e){return String(Date.now())}}
+function keyOf(el,root){const a=el.closest("[data-key]");return a&&root.contains(a)?a.getAttribute("data-key"):"main"}
+function detailsKeys(root){const out=[];const seen={};for(const d of root.querySelectorAll("details")){const sm=d.querySelector("summary");
+ const base=keyOf(d,root)+"|"+String(d.className||"")+"|"+String(sm?sm.textContent:"").replace(/[0-9]+/g,"#").trim();seen[base]=(seen[base]||0)+1;out.push([d,base+"#"+seen[base]])}return out}
+function fieldKey(el,root){return keyOf(el,root)+"|"+el.tagName+"|"+(el.getAttribute("aria-label")||el.getAttribute("name")||el.getAttribute("placeholder")||el.id||"")}
+function captureView(){const m=document.getElementById("main");if(!m)return null;const open=new Set(),closed=new Set();
+ for(const [d,k] of detailsKeys(m))(d.open?open:closed).add(k);
+ let focus=null;const a=document.activeElement;
+ if(a&&m.contains(a)&&/^(INPUT|TEXTAREA|SELECT)$/.test(a.tagName)){const k=fieldKey(a,m);const same=[...m.querySelectorAll(a.tagName)].filter(x=>fieldKey(x,m)===k);
+  let st=null,en=null;try{st=a.selectionStart;en=a.selectionEnd}catch(e){}focus={key:k,tag:a.tagName,n:same.indexOf(a),st:st,en:en}}
+ return {open:open,closed:closed,focus:focus,x:window.scrollX,y:window.scrollY}}
+function restoreView(v){const m=document.getElementById("main");if(!v||!m)return;
+ for(const [d,k] of detailsKeys(m)){if(v.open.has(k)&&!d.open)d.open=true;else if(v.closed.has(k)&&d.open)d.open=false}
+ if(v.focus){const el=[...m.querySelectorAll(v.focus.tag)].filter(x=>fieldKey(x,m)===v.focus.key)[v.focus.n];
+  if(el&&document.activeElement!==el){try{el.focus({preventScroll:true})}catch(e){}try{if(v.focus.st!=null)el.setSelectionRange(v.focus.st,v.focus.en)}catch(e){}}}
+ if(window.scrollX!==v.x||window.scrollY!==v.y){try{window.scrollTo(v.x,v.y)}catch(e){}}}
+function render(state,run){const v=captureView();try{if(state)icPrune(state);renderPage(state,run);icFlush()}finally{lastDrawnSig=dataSig(state,run);restoreView(v)}}
+function renderPage(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...state.roster)}syncReviews(state);lastState=state;lastRun=run;
  if(state&&state.protectedAccounts)PROTECTED=state.protectedAccounts;const m=document.getElementById("main");m.innerHTML="";
  /* Four screens share this page's data and differ only in what they show. */
  if(SCREEN==="new"){m.classList.add("ncflow");const head=screenHead(HEADS.new.title,HEADS.new.sub,HEADS.new.kicker);head.querySelector(".cds-page-sub").classList.add("nc-lead");m.appendChild(head);
@@ -49391,7 +50580,7 @@ function render(state,run){if(state.roster){ROSTER.splice(0,ROSTER.length,...sta
   const list=panel("Client accounts",actC?"Your other client accounts":"Your client accounts");if(!actC)list.id="clients";
   if(rest.length){list.appendChild(listRows(rest.map(c=>acctRow(c,state,run)),"clients-rest","accounts"));
    list.appendChild(mk("p","switchnote","One account at a time. Opening another puts this one back in the list. Nothing is lost."))}
-  if(parkedRest.length){const d=mk("details","cds-more");d.open=showParked;d.ontoggle=()=>{showParked=d.open};
+  if(parkedRest.length){const d=mk("details","cds-more");d.setAttribute("data-key","parked-rest");d.open=showParked;d.ontoggle=()=>{showParked=d.open};
    d.appendChild(mk("summary","","Show the "+parkedRest.length+" template and hidden "+plural(parkedRest.length,"account")));
    d.appendChild(listRows(parkedRest.map(c=>acctRow(c,state,run)),"clients-parked"));list.appendChild(d)}
   m.appendChild(list)}}
@@ -49794,7 +50983,7 @@ async function runDashboard(argv) {
     let ffAdmin;
     try {
       const b = workflowReadConnection(registry2, c);
-      stepLog = liveStepLogReader(locationId2, () => b.buildHeaders());
+      stepLog = liveStepLogReader(locationId2, () => b.buildHeaders(), fetch, (h) => b.invalidateIdToken(h["token-id"] ?? null));
       ffAdmin = builderAdmin(b);
     } catch {
     }
@@ -50168,9 +51357,18 @@ async function runDashboard(argv) {
     if (req.method === "POST" && url === "/api/client-assessment") {
       readBody(req, res, 2e4, async (body) => {
         try {
-          const result = await assessmentAttachmentAction(JSON.parse(body), attachmentDeps);
+          const request2 = JSON.parse(body);
+          const result = await assessmentAttachmentAction(request2, attachmentDeps);
+          let withdrawn = false;
+          if (typeof request2?.clientLocationId === "string") {
+            const after = withdrawIfBindingChanged(readCockpitState(), request2.clientLocationId);
+            if (after.withdrawn) {
+              writeCockpitState(after.state);
+              withdrawn = true;
+            }
+          }
           res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify(result));
+          res.end(JSON.stringify({ ...result, ...withdrawn ? { approvalWithdrawn: true, message: APPROVAL_WITHDRAWN_FOR_ASSESSMENT } : {} }));
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
           logQuietly(`client assessment: ${(0, import_node_util5.inspect)(e)}`);
@@ -50555,11 +51753,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         }
         const assessmentFigures = {};
         for (const loc of Object.keys(st.assessmentAttachments ?? {})) assessmentFigures[loc] = assessmentFiguresFor(st, loc);
-        const scopePrefill = {};
-        for (const loc of Object.keys(st.assessmentPurchases ?? {})) {
-          const p = scopePrefillFor(st, loc);
-          if (p) scopePrefill[loc] = p;
-        }
+        const scopeOffered = Object.fromEntries(currentRoster().map((c) => [c.locationId, offeredFeaturesFor(st, c.locationId)]));
+        const boughtViews = Object.fromEntries(currentRoster().map((c) => [c.locationId, boughtViewFor(st, c.locationId, scopeOffered[c.locationId])]));
         const buildViews = Object.fromEntries(currentRoster().map((c) => {
           const saved = readSavedPlan(c.locationId);
           const approval = st.planApprovals?.[c.locationId];
@@ -50590,9 +51785,9 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             delivery: void 0
           };
         }
-        for (const [id, view2] of Object.entries(buildViews)) if (!view2.planHash || !view2.approvedAt || view2.stale.length || st.outcomes?.[`${id}:4`]?.ok !== true || st.manualTasks?.[id]?.length || st.outcomes?.[`${id}:4`]?.issues?.length) liveClaims[id] = { live: false };
+        for (const [id, view2] of Object.entries(buildViews)) if (!view2.planHash || !view2.approvedAt || view2.stale.length || st.outcomes?.[`${id}:4`]?.ok !== true || openTasks(st.manualTasks?.[id] ?? []).length || st.outcomes?.[`${id}:4`]?.issues?.length) liveClaims[id] = { live: false };
         const outcomes = Object.fromEntries(Object.entries(st.outcomes ?? {}).map(([key, value]) => [key, { ...value, ...key.endsWith(":4") && value.verification ? { plain: verifyPanelOutcome(value) } : { ...plainFallbackOutcome(value), plain: plainFallbackOutcome(value.plain ?? value) }, error: value.error ? "The step did not finish. Check the account before retrying." : void 0 }]));
-        res.end(JSON.stringify({ ...st, assessmentFigures, scopePrefill, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
+        res.end(JSON.stringify({ ...st, assessmentFigures, boughtViews, outcomes, manualTasks: Object.fromEntries(Object.entries(st.manualTasks ?? {}).map(([id, tasks2]) => {
           const records = st.outcomes?.[`${id}:4`]?.verification;
           const allowed = records ? verifyReadback(records).allowPublishing : false;
           return [id, tasks2.map((t) => ({ ...t, text: verifyPublishingText(plainFallback(t.text, { nextStep: true }), allowed) })).filter((t) => t.text)];
@@ -50609,24 +51804,23 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       return;
     }
     if (req.method === "POST" && url === "/api/queue") {
-      readBody(req, res, 5e3, async () => {
+      readBody(req, res, 5e3, async (body) => {
         try {
           const roster2 = currentRoster();
           const state = readCockpitState();
-          const inputs = { ...state.intakeInputs };
-          for (const entry of roster2) {
-            if (state.clients[entry.locationId]?.stages?.[0] !== "done") continue;
-            const c = clientFor(entry.locationId);
-            if (!c) continue;
-            const snap = await readIntakeSnapshot(c, entry.locationId);
-            if (snap.status === "unavailable") throw new Error("The work queue could not read intake answers. Retry the queue.");
+          const { reread, failed } = await rereadQueueIntakes({ roster: roster2, state, filter: queueScanFilter(body), read: async (locationId2) => {
+            const c = clientFor(locationId2);
+            if (!c) return null;
+            const snap = await readIntakeSnapshot(c, locationId2);
+            if (snap.status === "unavailable") return "unavailable";
             const answers = normalizedIntake(snap);
-            inputs[entry.locationId] = { answers, status: snap.status, hash: intakeInput(answers, state.accounts?.[entry.locationId]?.industry, composeQuestionSet({ industry: state.accounts?.[entry.locationId]?.industry, agency: readOverlay() })) };
-          }
-          const latest = readCockpitState();
-          writeCockpitState({ ...latest, intakeInputs: inputs });
+            return { answers, status: snap.status, hash: intakeInput(answers, state.accounts?.[locationId2]?.industry, composeQuestionSet({ industry: state.accounts?.[locationId2]?.industry, agency: readOverlay() })) };
+          } });
+          const latest = mergeQueueIntakes(readCockpitState(), reread);
+          if (Object.keys(reread).length) writeCockpitState(latest);
+          const inputs = latest.intakeInputs ?? {};
           res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify(deriveQueue({ roster: roster2, state: { ...latest, intakeInputs: inputs, staleClients: roster2.filter((c) => stageFreshness(inputs[c.locationId]?.hash, readSavedPlan(c.locationId), latest.planApprovals?.[c.locationId], latest.outcomes?.[`${c.locationId}:3`], latest.outcomes?.[`${c.locationId}:4`], latest.outcomes?.[`${c.locationId}:1`]).length).map((c) => c.locationId) }, run: activeRun2 })));
+          res.end(JSON.stringify({ ...deriveQueue({ roster: roster2, state: { ...latest, intakeInputs: inputs, staleClients: roster2.filter((c) => stageFreshness(inputs[c.locationId]?.hash, readSavedPlan(c.locationId), latest.planApprovals?.[c.locationId], latest.outcomes?.[`${c.locationId}:3`], latest.outcomes?.[`${c.locationId}:4`], latest.outcomes?.[`${c.locationId}:1`]).length).map((c) => c.locationId) }, run: activeRun2 }), ...failed.length ? { intakeUnread: failed } : {} }));
         } catch {
           res.writeHead(503, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: false, error: "The work queue could not be read. Retry the queue." }));
@@ -50652,6 +51846,13 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           let st0 = readCockpitState();
           let inputHash;
           let normalizedAnswers;
+          if (stage === 3) {
+            if (!hasChosenScope(st0, rk)) throw new Error(who.clientKey ? secondClientChooseMessage(who.clientKey, who.name) : CHOOSE_BEFORE_BUILD);
+            const ap = st0.planApprovals?.[rk];
+            const assessmentWait = assessmentGateRefusal(st0, rk, who.clientKey, who.name);
+            if (assessmentWait) throw new Error(assessmentWait);
+            if (ap && ap.scopeHash !== approvalScopeHash(st0, rk)) throw new Error(boughtUnchangedSinceApproval(ap, st0, rk) ? ASSESSMENT_CHANGED_SINCE_APPROVAL : SCOPE_CHANGED_SINCE_APPROVAL);
+          }
           if (who.clientKey && [3, 4].includes(stage)) {
             inputHash = secondClientInputHash(readSavedPlan(rk));
             assertBuildApproval(st0.planApprovals?.[rk], inputHash);
@@ -50669,7 +51870,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             const client = clientFor(locationId2);
             if (!client) throw new Error(INTAKE_UNREADABLE);
             const snap = await readIntakeSnapshot(client, locationId2);
-            if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
+            if (snap.status === "unavailable") throw intakeUnavailableError(snap);
             normalizedAnswers = normalizedIntake(snap);
             inputHash = intakeInput(normalizedAnswers, st0.accounts?.[locationId2]?.industry, composeQuestionSet({ industry: st0.accounts?.[locationId2]?.industry, agency: readOverlay() }));
             st0 = { ...st0, intakeInputs: { ...st0.intakeInputs, [locationId2]: { hash: inputHash, answers: normalizedAnswers, status: snap.status } } };
@@ -50690,7 +51891,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
             const c = clientFor(locationId2);
             if (!c) throw new Error(INTAKE_UNREADABLE);
             const snap = await readIntakeSnapshot(c, locationId2);
-            if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
+            if (snap.status === "unavailable") throw intakeUnavailableError(snap);
             if (snap.status !== "received") throw new Error("Open the real form, submit it, then refresh.");
             const required = composeQuestionSet({ industry: st0.accounts?.[locationId2]?.industry, agency: readOverlay() }).filter((q3) => q3.required && !String(normalizedAnswers?.[q3.label] ?? normalizedAnswers?.[q3.key] ?? "").trim());
             if (required.length) throw new Error("Complete these required intake answers: " + required.map((q3) => q3.label).join(", ") + ".");
@@ -50776,7 +51977,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
           const st = readCockpitState();
           if (!c && !st.pending?.[locationId2]) throw new Error(INTAKE_CONNECT_REQUIRED);
           const snap = c ? await readIntakeSnapshot(c, locationId2, Boolean(st.intakeSent?.[locationId2])) : { status: "not_installed", fields: {}, queryKeys: {}, submissions: 0 };
-          if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
+          if (snap.status === "unavailable") throw intakeUnavailableError(snap);
           const industry = st.accounts?.[locationId2]?.industry;
           const questions = composeQuestionSet({ industry, agency: readOverlay() }).map((q3) => ({ key: q3.key, contactTag: q3.field.kind === "standard" ? q3.field.tag : void 0, label: q3.label, sectionLabel: q3.sectionLabel, required: q3.required, options: q3.options ?? null, placeholder: q3.placeholder ?? "", multi: q3.field.kind === "custom" && q3.field.dataType === "MULTIPLE_OPTIONS" }));
           const answers = prefillTeamAnswers(normalizedIntake(snap, st.intakeDrafts?.[locationId2]), st.staffRoster?.[locationId2], questions);
@@ -50789,7 +51990,8 @@ ${opportunityNoteFailure?.detail ?? ""}`);
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
           logQuietly(`client-intake ${new URL(req.url || "/", "http://x").searchParams.get("locationId") || ""}: ${e instanceof Error ? e.message : String(e)}`);
-          res.end(JSON.stringify({ ok: false, error: intakeRequestError(e) }));
+          if (e instanceof Error && e.message === INTAKE_READ_TRANSIENT) res.end(JSON.stringify({ ok: false, transient: true, error: INTAKE_REFRESH_RETRYING }));
+          else res.end(JSON.stringify({ ok: false, error: intakeRequestError(e) }));
         }
       })();
       return;
@@ -51212,7 +52414,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       }
       const name = currentRoster().find((r) => r.locationId === locationId2)?.name || locationId2;
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(reviewDocumentHtml(review, { scope: documentScopeFor(st, locationId2), assessment: st.assessmentAttachments?.[locationId2], purchasedFeatureIds: assessmentPurchasesFor(st, locationId2), planLines: readSavedPlan(locationId2) ? executablePlanLines(readSavedPlan(locationId2)) : [], clientName: name, agencyName: q3.get("agency") || st.agencyName, accent: q3.get("accent") || st.agencyAccent }));
+      res.end(reviewDocumentHtml(review, { scope: documentScopeFor(st, locationId2, readSavedPlan(locationId2)), assessment: st.assessmentAttachments?.[locationId2], purchasedFeatureIds: assessmentPurchasesFor(st, locationId2), bought: boughtDocumentFor(st, locationId2, offeredFeaturesFor(st, locationId2)), planLines: readSavedPlan(locationId2) ? executablePlanLines(readSavedPlan(locationId2)) : [], clientName: name, agencyName: q3.get("agency") || st.agencyName, accent: q3.get("accent") || st.agencyAccent }));
       return;
     }
     if (req.method === "GET" && url === "/api/review") {
@@ -51224,27 +52426,31 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     if (req.method === "POST" && url === "/api/build-approval") {
       readBody(req, res, 5e3, async (body) => {
         try {
-          const { locationId: locationId2, clientKey, confirmName, revoke, repairHashes } = JSON.parse(body);
+          const { locationId: locationId2, clientKey, confirmName, revoke, repairHashes, by } = JSON.parse(body);
+          const approvedBy = typeof by === "string" && by.trim() ? { by: by.trim().slice(0, 80) } : {};
           const who = cockpitClient(readCockpitState(), currentRoster(), locationId2, clientKey);
           const rk = who.recordKey;
           if (PROTECTED_LOCATIONS[who.locationId]) throw new Error(PROTECTED_LOCATIONS[who.locationId] + " can never be approved for building.");
+          const current = readCockpitState();
+          if (!revoke && !hasChosenScope(current, rk)) throw new Error(who.clientKey ? secondClientChooseMessage(who.clientKey, who.name) : CHOOSE_WHAT_THEY_BOUGHT);
+          const assessmentWait = revoke ? null : assessmentGateRefusal(current, rk, who.clientKey, who.name);
+          if (assessmentWait) throw new Error(assessmentWait);
           if (!revoke && !readAccountRulesSafe().sandboxes[who.locationId] && String(confirmName || "").trim().toLowerCase() !== who.name.trim().toLowerCase()) {
             throw new Error(`Type the client's name exactly ("${who.name}") to approve automated building.`);
           }
-          const current = readCockpitState();
           const at = (/* @__PURE__ */ new Date()).toISOString();
           const approvals = { ...current.planApprovals };
           if (revoke) delete approvals[rk];
           else if (who.clientKey) {
-            approvals[rk] = { inputHash: secondClientInputHash(readSavedPlan(rk)), at, repairHashes: [], staffHash: staffListHash(current.staffRoster?.[who.locationId]) };
+            approvals[rk] = { inputHash: secondClientInputHash(readSavedPlan(rk)), at, repairHashes: [], staffHash: staffListHash(current.staffRoster?.[who.locationId]), scopeHash: approvalScopeHash(current, rk), boughtHash: approvalBoughtHash(current, rk), ...approvedBy };
           } else {
             const c = clientFor(who.locationId);
             if (!c) throw new Error(INTAKE_UNREADABLE);
             const snap = await readIntakeSnapshot(c, who.locationId);
-            if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
+            if (snap.status === "unavailable") throw intakeUnavailableError(snap);
             const hash = intakeInput(normalizedIntake(snap), current.accounts?.[who.locationId]?.industry, composeQuestionSet({ industry: current.accounts?.[who.locationId]?.industry, agency: readOverlay() }));
             if (current.outcomes?.[`${rk}:1`]?.inputHash && current.outcomes[`${rk}:1`].inputHash !== hash) throw new Error("The intake changed. Run Brief again before approving building.");
-            const approval = { inputHash: hash, at, repairHashes: readWorkflowRepairs(who.locationId).filter((r) => Array.isArray(repairHashes) && repairHashes.includes(r.hash)).map((r) => r.hash), staffHash: staffListHash(current.staffRoster?.[who.locationId]) };
+            const approval = { inputHash: hash, at, repairHashes: readWorkflowRepairs(who.locationId).filter((r) => Array.isArray(repairHashes) && repairHashes.includes(r.hash)).map((r) => r.hash), staffHash: staffListHash(current.staffRoster?.[who.locationId]), scopeHash: approvalScopeHash(current, rk), boughtHash: approvalBoughtHash(current, rk), ...approvedBy };
             approvals[rk] = approval;
           }
           const latest = readCockpitState();
@@ -51602,16 +52808,63 @@ ${opportunityNoteFailure?.detail ?? ""}`);
       });
       return;
     }
+    if (req.method === "POST" && url === "/api/assessment-choice") {
+      readBody(req, res, 5e3, (body) => {
+        try {
+          const { locationId: locationId2, clientKey, choice } = JSON.parse(body);
+          const who = cockpitClient(readCockpitState(), currentRoster(), locationId2, clientKey);
+          if (!isAssessmentChoice(choice)) throw new Error("Choose one of the three answers.");
+          const rk = who.recordKey;
+          const current = readCockpitState();
+          const { state: nextState, withdrawn } = withdrawIfBindingChanged({ ...current, assessmentChoice: { ...current.assessmentChoice, [rk]: { choice, at: (/* @__PURE__ */ new Date()).toISOString() } } }, rk);
+          writeCockpitState(nextState);
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ ok: true, choice, ...withdrawn ? { approvalWithdrawn: true, message: APPROVAL_WITHDRAWN_FOR_ASSESSMENT } : {} }));
+        } catch (e) {
+          res.writeHead(400, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "bad request" }));
+        }
+      });
+      return;
+    }
     if (req.method === "POST" && url === "/api/scope") {
       readBody(req, res, 1e4, (body) => {
         try {
-          const { locationId: locationId2, clientKey, package: pkg2, features } = JSON.parse(body);
+          const { locationId: locationId2, clientKey, package: pkg2, features, bought } = JSON.parse(body);
           const who = cockpitClient(readCockpitState(), currentRoster(), locationId2, clientKey);
-          if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to confirm the whole preset");
-          const next = features === null ? { wholePreset: true } : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) };
-          writeCockpitState(setClientScope(readCockpitState(), who.recordKey, next));
+          let ticks;
+          let derived;
+          if (bought !== void 0) {
+            if (!Array.isArray(bought) || bought.some((b) => !isBoughtId(b))) throw new Error("Tick items from the list.");
+            ticks = [...new Set(bought.map(String))];
+            if (!ticks.length) throw new Error(NOTHING_BOUGHT);
+            derived = scopeFromBought(ticks, offeredFeaturesFor(readCockpitState(), who.recordKey), typeof pkg2 === "string" && pkg2.trim() ? pkg2 : void 0);
+            if (!("wholePreset" in derived) && !derived.features.length) throw new Error(NOTHING_BUILT_FROM_TICKS);
+          } else if (features !== null && !Array.isArray(features)) throw new Error("features must be a list of feature ids, or null to confirm the whole preset");
+          const next = derived ?? (features === null ? { wholePreset: true } : { ...typeof pkg2 === "string" ? { package: pkg2 } : {}, features: features.map(String) });
+          if (!derived && Array.isArray(features)) {
+            const ticked = features.map(String).filter(isFeatureId);
+            const offered = offeredFeaturesFor(readCockpitState(), who.recordKey);
+            if (ticked.length && !ticked.some((f) => offered.includes(f))) throw new Error(NOTHING_TICKED_IN_PLAN);
+          }
+          const rk = who.recordKey;
+          let nextState = setClientScope(readCockpitState(), rk, next);
+          const savedTicks = { ...nextState.bought ?? {} };
+          if (ticks) savedTicks[rk] = ticks;
+          else delete savedTicks[rk];
+          nextState = { ...nextState, bought: savedTicks };
+          if (!Object.keys(savedTicks).length) delete nextState.bought;
+          const { state: bound, withdrawn } = withdrawIfBindingChanged(nextState, rk);
+          nextState = bound;
+          {
+            const offered = offeredFeaturesFor(nextState, rk);
+            replaceBuildObligationsOfType(rk, BOUGHT_JOB_TYPE, ticks ? boughtJobs(ticks, offered) : []);
+            const tasks2 = withBoughtJobs(nextState.manualTasks?.[rk] ?? [], ticks ? boughtJobLines(ticks, offered) : []);
+            if (tasks2.length || nextState.manualTasks?.[rk]) nextState = { ...nextState, manualTasks: { ...nextState.manualTasks, [rk]: tasks2 } };
+          }
+          writeCockpitState(nextState);
           res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[who.recordKey] ?? null }));
+          res.end(JSON.stringify({ ok: true, scope: readCockpitState().scope?.[rk] ?? null, ...withdrawn ? { approvalWithdrawn: true, message: APPROVAL_WITHDRAWN_FOR_SCOPE } : {} }));
         } catch (e) {
           res.writeHead(400, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "bad request" }));
@@ -51666,7 +52919,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
               const client = clientFor(locationId2);
               if (!client) throw new Error(INTAKE_UNREADABLE);
               const snap = await readIntakeSnapshot(client, locationId2);
-              if (snap.status === "unavailable") throw new Error(INTAKE_UNREADABLE);
+              if (snap.status === "unavailable") throw intakeUnavailableError(snap);
               const answers = normalizedIntake(snap);
               hash = intakeInput(answers, state.accounts?.[locationId2]?.industry, composeQuestionSet({ industry: state.accounts?.[locationId2]?.industry, agency: readOverlay() }));
               state = { ...state, intakeInputs: { ...state.intakeInputs, [locationId2]: { answers, hash, status: snap.status } } };
@@ -51748,7 +53001,7 @@ ${opportunityNoteFailure?.detail ?? ""}`);
     process.on("SIGTERM", stop2);
   });
 }
-var import_zod67, import_node_util5, fs42, path40, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, SECOND_CLIENT_NO_INTAKE, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, staffGateRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest, ReportBrandSaveRequest;
+var import_zod67, import_node_util5, fs42, path40, http, import_child_process4, import_child_process5, osmod, STAGES2, ACCOUNT_TYPES, SECOND_CLIENT_NO_INTAKE, CHOOSE_WHAT_THEY_BOUGHT, CHOOSE_BEFORE_BUILD, SCOPE_REFUSAL, NOTHING_BOUGHT, NOTHING_BUILT_FROM_TICKS, ASSESSMENT_CHANGED_SINCE_APPROVAL, APPROVAL_WITHDRAWN_FOR_ASSESSMENT, NOTHING_TICKED_IN_PLAN, SCOPE_CHANGED_SINCE_APPROVAL, APPROVAL_WITHDRAWN_FOR_SCOPE, activeRun2, handoffEmailPreviews, UPGRADE_MSG, DOC_EXTS, DOC_MAX_BYTES, PARKED_NOT_BUILT, NEEDS_AGENCY_KEY, INTAKE_UNREADABLE, INTAKE_READ_TRANSIENT, INTAKE_REFRESH_RETRYING, INTAKE_ANSWERS_MISSING, INTAKE_READ_FAILED, INTAKE_FORM_REQUIRED, INTAKE_CONNECT_REQUIRED, INTAKE_OWN_MESSAGES, currentRosterRef, staffGateRef, BOARD_ROUTES, BOARD_TITLES, SCREEN_HEADS, anthropicKeyWrites, SEAT_TOKEN_HEADER, NOT_SIGNED_IN_MSG, SEAT_GUARDED_READS, ConnectionRequest, DisconnectRequest, ReportBrandSaveRequest;
 var init_dashboard = __esm({
   "src/dashboard.ts"() {
     "use strict";
@@ -51816,6 +53069,7 @@ var init_dashboard = __esm({
     init_plan_from_preset();
     init_plan_guide();
     init_attachment();
+    init_bought_list();
     init_intake_contact();
     init_client_intake();
     init_client_intake();
@@ -51870,6 +53124,16 @@ var init_dashboard = __esm({
     ];
     ACCOUNT_TYPES = ["client", "sandbox", "template", "hidden"];
     SECOND_CLIENT_NO_INTAKE = "This sub-account's intake form belongs to its default client, so a second client's intake and Brief are not run from here. Prepare this client's plan with its clinic prefix (the build preview), then approve and build it here.";
+    CHOOSE_WHAT_THEY_BOUGHT = "Choose what the client bought before approving: Blueprint Review, then What they bought, then Save.";
+    CHOOSE_BEFORE_BUILD = "Choose what the client bought before building: Blueprint Review, then What they bought, then Save.";
+    SCOPE_REFUSAL = /Nobody has chosen what|what this client bought|features (are )?selected for this client|No features are selected|features nobody ticked/i;
+    NOTHING_BOUGHT = "Tick at least one item they bought, then save.";
+    NOTHING_BUILT_FROM_TICKS = "None of the ticked items is built for this client's industry, so nothing was saved. Tick at least one item marked Built.";
+    ASSESSMENT_CHANGED_SINCE_APPROVAL = "The Assessment answer or the attached Assessment changed after the build was approved, so Build did not start. Approve this plan again, then build.";
+    APPROVAL_WITHDRAWN_FOR_ASSESSMENT = "The Assessment answer changed, so the build approval was withdrawn. Approve this plan again before building.";
+    NOTHING_TICKED_IN_PLAN = "None of the ticked features is in the plan for this client's industry, so nothing was saved. Tick features from the list, or choose Everything in the plan.";
+    SCOPE_CHANGED_SINCE_APPROVAL = "What they bought changed after the build was approved, so Build did not start. Approve this plan again, then build.";
+    APPROVAL_WITHDRAWN_FOR_SCOPE = "What they bought changed, so the build approval was withdrawn. Approve this plan again before building.";
     activeRun2 = null;
     handoffEmailPreviews = /* @__PURE__ */ new Map();
     UPGRADE_MSG = "\n  The cockpit is not included in this licence, so it did not start.\n  Nothing was changed.\n\n";
@@ -51878,10 +53142,17 @@ var init_dashboard = __esm({
     PARKED_NOT_BUILT = "Template and hidden accounts are not built from Command OS. Change the account's type to Client first.";
     NEEDS_AGENCY_KEY = "No agency key on file. Run register_agency_key in GHL Command first.";
     INTAKE_UNREADABLE = "Command OS could not read this client's account. Paste its key again in Build a client account.";
+    INTAKE_READ_TRANSIENT = "Command OS could not reach this client's account just now. Try again in a moment.";
+    INTAKE_REFRESH_RETRYING = "Could not refresh just now; retrying.";
+    INTAKE_ANSWERS_MISSING = "The intake form shows a submission, but no contact in this client's account has the answers yet. If the client has not submitted the form, send it again. If they have, press Refresh status in a minute.";
+    INTAKE_READ_FAILED = "The intake could not be read. Press Refresh status to try again.";
     INTAKE_FORM_REQUIRED = "Run the intake step in Client builds to create the form, then come back and submit.";
     INTAKE_CONNECT_REQUIRED = "Connect this sub-account by pasting its Private Integration key in Command OS.";
     INTAKE_OWN_MESSAGES = [
       INTAKE_UNREADABLE,
+      INTAKE_READ_TRANSIENT,
+      INTAKE_ANSWERS_MISSING,
+      INTAKE_READ_FAILED,
       ...CLAUDE_REPAIR_MESSAGES,
       "The limit is 60,000 characters. Paste an excerpt or shorten this text file.",
       "That account is not on the board.",
@@ -52308,7 +53579,9 @@ WARNING: saved under ${canonicalCompanyId}, but switch_location resolves ${args.
                 locationId: args.test_location_id,
                 userId: foundViaRealPath.userId,
                 companyId: resolvedCompanyId,
-                registry: null
+                // The registry, so a token rotated by this probe is saved to the
+                // company's own slot instead of being lost (review, 2026-09-29).
+                registry: registry2
               });
               try {
                 await probe.listWorkflows(1, 0);
@@ -53162,11 +54435,11 @@ function registerAccountExportTools(server2, client, registry2, builderClient) {
         };
         const dataA = await fetchWithOwnKey(locationA);
         const dataB = await fetchWithOwnKey(locationB);
-        const { comparison, unavailable } = buildLocationComparison(dataA, dataB, SECTIONS);
+        const { comparison, unavailable: unavailable2 } = buildLocationComparison(dataA, dataB, SECTIONS);
         diff.comparison = comparison;
         if (usedRegisteredKey.length) diff.usedRegisteredKeyFor = usedRegisteredKey;
-        if (unavailable.length) {
-          diff.unavailable = unavailable;
+        if (unavailable2.length) {
+          diff.unavailable = unavailable2;
           diff.warning = "Some sections could not be read. Those sections are marked unavailable \u2014 do NOT read them as empty. A Private Integration key only works on the sub-account it was created in, so register each account's own key (register_location) before comparing them.";
         }
         return jsonResponse(diff);
@@ -53435,13 +54708,13 @@ function discoverAssets(input) {
   return assets;
 }
 function buildLocationComparison(dataA, dataB, sections) {
-  const unavailable = [];
+  const unavailable2 = [];
   const comparison = {};
   for (const key of sections) {
     const a = dataA[key] ?? { error: "not read" };
     const b = dataB[key] ?? { error: "not read" };
-    if ("error" in a) unavailable.push(`locationA.${key}: ${a.error}`);
-    if ("error" in b) unavailable.push(`locationB.${key}: ${b.error}`);
+    if ("error" in a) unavailable2.push(`locationA.${key}: ${a.error}`);
+    if ("error" in b) unavailable2.push(`locationB.${key}: ${b.error}`);
     if ("error" in a || "error" in b) {
       comparison[key] = {
         A: "error" in a ? "unavailable" : a.names.length,
@@ -53461,7 +54734,7 @@ function buildLocationComparison(dataA, dataB, sections) {
       onlyInB: b.names.filter((n) => !setA.has(n))
     };
   }
-  return { comparison, unavailable };
+  return { comparison, unavailable: unavailable2 };
 }
 var import_zod70, OFF_PLATFORM_ASSETS;
 var init_account_export = __esm({
@@ -54927,7 +56200,7 @@ async function collectInstallChecks(installedVersion, client, builderClient, reg
     }
     if (result.ok) {
       const idNote = tokenCompany ? ` Authenticated as company ${tokenCompany}.` : "";
-      return { name: "Firebase auth (workflow builder)", status: "pass", detail: `ID token refresh succeeded. Workflow builder tools are usable.${companyNote}${idNote}` };
+      return { name: "Firebase auth (workflow builder)", status: "pass", detail: `Got a valid ID token. Workflow builder tools are usable.${companyNote}${idNote}` };
     }
     return { name: "Firebase auth (workflow builder)", status: "fail", detail: `Token refresh failed: ${result.error}.${companyNote} If you're in a client's account, register its Firebase with register_company_firebase. Otherwise re-capture your Firebase values from GHL DevTools and re-run enable_workflow_builder.` };
   })();
@@ -58120,7 +59393,7 @@ function extractHtml(text2) {
 function claudeGenerate(model = DEFAULT_MODEL, bin = "claude") {
   return (instruction, { cwd }) => new Promise((resolveP) => {
     const t0 = Date.now();
-    const cmd = claudeCommand(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model]);
+    const cmd = claudeCommand(bin, ["-p", "--output-format", "json", "--max-turns", "1", "--tools", "", "--strict-mcp-config", "--model", model, ...NO_MEMBER_HOOKS]);
     const child = (0, import_node_child_process6.spawn)(cmd.command, cmd.args, {
       cwd,
       env: { ...process.env, CLAUDECODE: "", CLAUDE_CODE_ENTRYPOINT: "" },
@@ -58281,6 +59554,7 @@ var init_run2 = __esm({
     "use strict";
     import_node_child_process6 = require("node:child_process");
     init_claude_locate();
+    init_result_text();
     import_node_fs12 = require("node:fs");
     import_node_path11 = require("node:path");
     init_brief();
@@ -61494,7 +62768,7 @@ function registerSecretShopperTools(server2, client, registry2) {
         if (registry2) {
           try {
             const b = workflowReadConnection(registry2, client);
-            stepLog = liveStepLogReader(locationId2, () => b.buildHeaders());
+            stepLog = liveStepLogReader(locationId2, () => b.buildHeaders(), fetch, (h) => b.invalidateIdToken(h["token-id"] ?? null));
           } catch {
           }
         }
@@ -63639,8 +64913,8 @@ function registerAccountHealthTools(server2, client) {
         conversations,
         phoneNumbers
       };
-      const unavailable = Object.entries(sections).filter(([, v]) => v.status === "unavailable").map(([k]) => k);
-      return { locationId: loc, requestedWindow: { days, start: startISO, end: endISO }, sections, unavailable };
+      const unavailable2 = Object.entries(sections).filter(([, v]) => v.status === "unavailable").map(([k]) => k);
+      return { locationId: loc, requestedWindow: { days, start: startISO, end: endISO }, sections, unavailable: unavailable2 };
     }
   );
 }
@@ -65893,6 +67167,18 @@ async function readLocationName(client, locationId2) {
     return locationId2;
   }
 }
+function cockpitSelectionRequired(board, locationId2, recordKey, env2 = process.env) {
+  if (env2.GHL_COMMAND_STAGE) return true;
+  const has = (field, key) => {
+    const m = board[field];
+    return Boolean(m && typeof m === "object" && m[key]);
+  };
+  const own = ["clients", "planApprovals", "buildApproved", "assessmentPurchases", "scope", "reviews", "intakeInputs", "assessmentAttachments", "clientProfiles"].some((f) => has(f, recordKey));
+  return own || recordKey === locationId2 && has("accounts", locationId2);
+}
+function noSelectionMessage(clientKey) {
+  return clientKey ? secondClientChooseMessage(clientKey) : NO_SELECTION_SCOPE;
+}
 function resolvePlanSource(input) {
   const { plan, useSavedPlan, replaceSavedPlan, saved } = input;
   if (useSavedPlan) {
@@ -66027,9 +67313,10 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
         if (!briefArg) {
           return jsonResponse({ ok: false, phase: "compose", error: "fromPreset needs the brief \u2014 pass the \xA74 Brief from normalize_submission_to_brief (or assembled from the cockpit intake answers)." });
         }
-        let briefForCompose = briefArg;
-        let scopeSource = briefArg.scope ? "brief" : "none";
-        const briefScope = briefArg.scope;
+        const briefIn = process.env.GHL_COMMAND_STAGE && briefArg.scope ? (({ scope: _ignored, ...rest }) => rest)(briefArg) : briefArg;
+        let briefForCompose = briefIn;
+        let scopeSource = briefIn.scope ? "brief" : "none";
+        const briefScope = briefIn.scope;
         if (briefScope && Array.isArray(briefScope.features) && briefScope.features.length === 0) {
           return jsonResponse({
             ok: false,
@@ -66038,13 +67325,15 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
             error: "The brief's scope names no features, so nothing was built. Choose the features to build (prefilled from what they bought), confirm, and run again."
           });
         }
-        if (!briefArg.scope) {
+        if (!briefIn.scope) {
           const board = readBoardState();
           const saved2 = board.scope?.[recordKey];
           if (saved2?.wholePreset) {
             scopeSource = "cockpit";
           } else if (!saved2 && Array.isArray(board.assessmentPurchases?.[recordKey])) {
             return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(recordKey) });
+          } else if (!saved2 && cockpitSelectionRequired(board, activeLocation, recordKey)) {
+            return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: noSelectionMessage(clientKey) });
           } else if (saved2 && Array.isArray(saved2.features)) {
             const features = saved2.features.filter(isFeatureId);
             if (!features.length) {
@@ -66055,7 +67344,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
                 error: "No features are selected for this client, so nothing was built. Open the client's Review screen, tick the features to build (it is prefilled from what they bought), confirm, and run the build again."
               });
             }
-            briefForCompose = { ...briefArg, scope: { ...saved2.package ? { package: saved2.package } : {}, features } };
+            briefForCompose = { ...briefIn, scope: { ...saved2.package ? { package: saved2.package } : {}, features } };
             scopeSource = "cockpit";
           }
         }
@@ -66108,6 +67397,30 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
         if (!current && Array.isArray(board.assessmentPurchases?.[recordKey])) {
           return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: notConfirmedAsk(recordKey) });
         }
+        if (!current && cockpitSelectionRequired(board, activeLocation, recordKey)) {
+          return jsonResponse({ ok: false, phase: "scope", scopeSource: "cockpit", error: noSelectionMessage(clientKey) });
+        }
+        if (current && !current.wholePreset && Array.isArray(current.features) && !(saved && planSource !== "argument-replaces-saved")) {
+          const chosen = new Set(current.features.filter(isFeatureId));
+          const outside = [];
+          for (const w of plan.workflows ?? []) {
+            let f = null;
+            try {
+              f = featureOfWorkflow(String(w.ref ?? ""), w.feature);
+            } catch {
+              f = String(w.feature);
+            }
+            if (f !== null && !chosen.has(f)) outside.push(`${String(w.name ?? w.ref)} (${isFeatureId(f) ? FEATURES[f].name : f})`);
+          }
+          if (chosen.size && outside.length) {
+            return jsonResponse({
+              ok: false,
+              phase: "scope",
+              scopeSource: "cockpit",
+              error: `This plan builds workflows for features nobody ticked for this client, so nothing was built: ${outside.join(", ")}. Build from the preset (fromPreset), which follows what they bought, or tick those features and save first.`
+            });
+          }
+        }
         if (current && !current.wholePreset && Array.isArray(current.features) && !current.features.some(isFeatureId)) {
           return jsonResponse({
             ok: false,
@@ -66116,7 +67429,7 @@ function registerIntakeToBuildTools(server2, client, builderClient, registry2) {
             error: "No features are selected for this client, so nothing was built, not even from the saved plan. Open the client's Review screen, tick the features to build, confirm, and run the build again."
           });
         }
-        if (saved && planSource !== "argument-replaces-saved" && !savedPlanMatchesScope(saved, current)) {
+        if (saved && planSource !== "argument-replaces-saved" && (current ? !savedPlanMatchesScope(saved, current) : Boolean(saved.scope))) {
           const planned = saved?.scope ? [...saved.scope.built, ...(saved.scope.omitted ?? []).map((f) => f.id)].join(", ") || "no features" : "everything in the preset";
           const now = current?.wholePreset ? "everything in the preset (confirmed)" : current ? current.features.filter(isFeatureId).join(", ") : "everything in the preset (nothing is saved)";
           return jsonResponse({
@@ -66896,7 +68209,7 @@ function intakeFormMatches(expected, actual) {
   const keys = ["id", "tag", "type", "hiddenFieldQueryKey", "required", "label", "options", "picklistOptions"];
   return expected.every((field, i) => keys.every((key) => field[key] === void 0 || JSON.stringify(field[key]) === JSON.stringify(actual[i]?.[key])));
 }
-var import_zod93, customFieldItemSchema, sleep6, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, workflowInventorySchema, notConfirmedAsk;
+var import_zod93, customFieldItemSchema, sleep6, NO_SELECTION_SCOPE, NOT_CONFIRMED_SCOPE, WHOLE_PRESET_NOT_KEPT, workflowInventorySchema, notConfirmedAsk;
 var init_intake_to_build = __esm({
   "src/tools/intake-to-build.ts"() {
     "use strict";
@@ -66948,7 +68261,8 @@ var init_intake_to_build = __esm({
       picklistOptions: import_zod93.z.array(import_zod93.z.string()).optional()
     }).passthrough();
     sleep6 = (ms) => new Promise((r) => setTimeout(r, ms));
-    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. Open the client's Review screen: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
+    NO_SELECTION_SCOPE = "Nobody has chosen what this client bought, so nothing was built. In the cockpit open Blueprint Review, then What they bought: tick what they bought, or choose Everything in the plan, then save and run the build again.";
+    NOT_CONFIRMED_SCOPE = "What this client bought is recorded, but nobody has confirmed what to build, so nothing was built. In the cockpit open Blueprint Review, then What they bought: the features are ticked from what they bought. Change them if you need to, save to confirm, and run the build again.";
     WHOLE_PRESET_NOT_KEPT = "Note: an earlier build on this client used everything in the preset, and that choice was not kept, so the Review screen ticks only what they bought. Tick everything again if that is still what you want.";
     workflowInventorySchema = import_zod93.z.object({
       workflows: import_zod93.z.array(import_zod93.z.object({ id: import_zod93.z.string().min(1), name: import_zod93.z.string() }).passthrough())