sproutkit-code 1.5.2 → 1.6.1

package/dist/index.js

@@ -160,6 +160,43 @@ var require_db = __commonJS({
         db2.exec("ALTER TABLE chat_messages ADD COLUMN tool_calls TEXT");
       } catch {
       }
+      db2.exec(`
+    CREATE TABLE IF NOT EXISTS invoices (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      number TEXT UNIQUE NOT NULL,
+      lead_id INTEGER,
+      client_name TEXT NOT NULL,
+      client_email TEXT,
+      client_address TEXT,
+      line_items TEXT NOT NULL,
+      subtotal_pence INTEGER NOT NULL,
+      vat_pence INTEGER NOT NULL DEFAULT 0,
+      total_pence INTEGER NOT NULL,
+      currency TEXT NOT NULL DEFAULT 'GBP',
+      status TEXT NOT NULL DEFAULT 'draft',
+      issued_at TEXT,
+      due_at TEXT,
+      paid_at TEXT,
+      notes TEXT,
+      pdf_path TEXT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now'))
+    );
+  `);
+      db2.exec(`
+    CREATE TABLE IF NOT EXISTS contact_log (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      lead_id INTEGER NOT NULL,
+      direction TEXT NOT NULL,
+      channel TEXT,
+      outcome TEXT,
+      note TEXT,
+      at TEXT NOT NULL DEFAULT (datetime('now'))
+    );
+  `);
+      try {
+        db2.exec("CREATE INDEX IF NOT EXISTS idx_contact_log_lead ON contact_log(lead_id)");
+      } catch {
+      }
       for (const col of ["score INTEGER", "price_level TEXT", "business_status TEXT"]) {
         try {
           db2.exec(`ALTER TABLE leads ADD COLUMN ${col}`);
@@ -188,6 +225,12 @@ var require_db = __commonJS({
         // redeploys: SESSION_SECRET is regenerated every deploy, so deriving from
         // it would make the client's self-chosen password undecryptable each time.
         "auth_enc_key TEXT",
+        // Reply loop: when we last contacted them, and the latest outcome. Kept on
+        // the lead (as well as contact_log) so `followups` is a single cheap query.
+        "last_contacted_at TEXT",
+        "last_reply_at TEXT",
+        "reply_outcome TEXT",
+        "followed_up_count INTEGER DEFAULT 0",
         "booking_admin_url TEXT",
         "booking_admin_password TEXT",
         "handed_over_at TEXT",
@@ -31180,6 +31223,294 @@ var require_vercel_domains = __commonJS({
   }
 });
 
+// ../desktop/dist/main/lib/agency.js
+var require_agency = __commonJS({
+  "../desktop/dist/main/lib/agency.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.getAgencyProfile = getAgencyProfile2;
+    exports2.setAgencyProfile = setAgencyProfile2;
+    exports2.agencyConfigured = agencyConfigured2;
+    exports2.siteCredit = siteCredit;
+    exports2.formatMoney = formatMoney2;
+    var db_1 = require_db();
+    var KEYS = {
+      name: "agency_name",
+      logoPath: "agency_logo_path",
+      accent: "agency_accent",
+      email: "agency_email",
+      phone: "agency_phone",
+      website: "agency_website",
+      address: "agency_address",
+      companyNumber: "agency_company_number",
+      vatNumber: "agency_vat_number",
+      bankName: "agency_bank_name",
+      bankAccount: "agency_bank_account",
+      bankSortCode: "agency_bank_sort_code",
+      paymentTerms: "agency_payment_terms"
+    };
+    function read(key) {
+      const row = (0, db_1.getDb)().get("SELECT value FROM settings WHERE key = ?", [key]);
+      const v = row?.value?.trim();
+      return v ? v : null;
+    }
+    function write(key, value) {
+      const db2 = (0, db_1.getDb)();
+      if (value === null || value === "") {
+        db2.run("DELETE FROM settings WHERE key = ?", [key]);
+        return;
+      }
+      db2.run("INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value", [key, value]);
+    }
+    function getAgencyProfile2() {
+      const rate = read("agency_vat_rate");
+      return {
+        name: read(KEYS.name),
+        logoPath: read(KEYS.logoPath),
+        accent: read(KEYS.accent),
+        email: read(KEYS.email),
+        phone: read(KEYS.phone),
+        website: read(KEYS.website),
+        address: read(KEYS.address),
+        companyNumber: read(KEYS.companyNumber),
+        vatNumber: read(KEYS.vatNumber),
+        vatRate: rate === null ? null : Number(rate) || null,
+        bankName: read(KEYS.bankName),
+        bankAccount: read(KEYS.bankAccount),
+        bankSortCode: read(KEYS.bankSortCode),
+        paymentTerms: read(KEYS.paymentTerms),
+        currency: read("agency_currency") ?? "GBP"
+      };
+    }
+    function setAgencyProfile2(patch) {
+      for (const [field, key] of Object.entries(KEYS)) {
+        if (field in patch)
+          write(key, patch[field] ?? null);
+      }
+      if ("vatRate" in patch) {
+        write("agency_vat_rate", patch.vatRate == null ? null : String(patch.vatRate));
+      }
+      if ("currency" in patch)
+        write("agency_currency", patch.currency ?? null);
+      return getAgencyProfile2();
+    }
+    function agencyConfigured2() {
+      return !!getAgencyProfile2().name;
+    }
+    function siteCredit() {
+      const p = getAgencyProfile2();
+      if (!p.name)
+        return { label: "Sproutkit", url: "https://sproutkit.app" };
+      return { label: p.name, url: p.website };
+    }
+    function formatMoney2(pence, currency = "GBP") {
+      const symbols = { GBP: "\xA3", USD: "$", EUR: "\u20AC" };
+      const sym = symbols[currency] ?? "";
+      const value = (pence / 100).toFixed(2);
+      return `${sym}${value}`;
+    }
+  }
+});
+
+// ../desktop/dist/main/lib/analytics-runtime.js
+var require_analytics_runtime = __commonJS({
+  "../desktop/dist/main/lib/analytics-runtime.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.TRACK_SNIPPET = exports2.API_STATS_JS = exports2.API_TRACK_JS = void 0;
+    exports2.API_TRACK_JS = `import { list, put } from "@vercel/blob";
+
+export const config = { runtime: "nodejs" };
+
+const PFX = process.env.SITE_ID ? "sites/" + process.env.SITE_ID + "/" : "";
+const STATS_KEY = PFX + "stats.json";
+
+// Fixed whitelist: an open counter would let anyone write arbitrary keys into
+// the store and inflate the numbers the agency reports to their client.
+const EVENTS = ["view", "call", "book", "directions", "email", "menu"];
+
+// Keep 400 days so a year-on-year comparison is possible, then drop the tail \u2014
+// the file has to stay small enough to read on every request.
+const MAX_DAYS = 400;
+
+function today() {
+  return new Date().toISOString().slice(0, 10);
+}
+
+async function readStats() {
+  try {
+    const { blobs } = await list({ prefix: STATS_KEY, limit: 1 });
+    const target = blobs.find((b) => b.pathname === STATS_KEY);
+    if (!target) return { days: {} };
+    const res = await fetch(target.url, { cache: "no-store" });
+    if (!res.ok) return { days: {} };
+    const j = await res.json();
+    return j && typeof j === "object" && j.days ? j : { days: {} };
+  } catch {
+    return { days: {} };
+  }
+}
+
+function readBody(req) {
+  return new Promise((resolve) => {
+    const chunks = [];
+    req.on("data", (c) => chunks.push(c));
+    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+    req.on("error", () => resolve(""));
+  });
+}
+
+export default async function handler(req, res) {
+  // Never let tracking hold up or break a page.
+  res.setHeader("Cache-Control", "no-store");
+  if (req.method !== "POST") {
+    res.status(405).json({ error: "method_not_allowed" });
+    return;
+  }
+  let body = req.body;
+  if (typeof body === "string") {
+    try { body = JSON.parse(body); } catch { body = null; }
+  } else if (!body) {
+    const raw = await readBody(req);
+    try { body = raw ? JSON.parse(raw) : {}; } catch { body = {}; }
+  }
+  const event = String((body && body.event) || "");
+  if (!EVENTS.includes(event)) {
+    res.status(400).json({ error: "unknown_event" });
+    return;
+  }
+
+  const stats = await readStats();
+  const day = today();
+  if (!stats.days[day]) stats.days[day] = {};
+  stats.days[day][event] = (stats.days[day][event] || 0) + 1;
+
+  const days = Object.keys(stats.days).sort();
+  if (days.length > MAX_DAYS) {
+    for (const d of days.slice(0, days.length - MAX_DAYS)) delete stats.days[d];
+  }
+
+  try {
+    await put(STATS_KEY, JSON.stringify(stats), {
+      access: "public",
+      addRandomSuffix: false,
+      allowOverwrite: true,
+      contentType: "application/json",
+    });
+  } catch {
+    // Losing a count is fine; erroring at the visitor is not.
+  }
+  res.status(204).end();
+}
+`;
+    exports2.API_STATS_JS = `import { list } from "@vercel/blob";
+import { createHmac, timingSafeEqual } from "node:crypto";
+
+export const config = { runtime: "nodejs" };
+
+const PFX = process.env.SITE_ID ? "sites/" + process.env.SITE_ID + "/" : "";
+const STATS_KEY = PFX + "stats.json";
+
+function verifySession(req) {
+  const cookie = req.headers.cookie || "";
+  const match = cookie.match(/sk_admin=([^;]+)/);
+  if (!match) return false;
+  const secret = process.env.SESSION_SECRET;
+  if (!secret) return false;
+  const [payload, sig] = match[1].split(".");
+  if (!payload || !sig) return false;
+  try {
+    const expected = createHmac("sha256", secret).update(payload).digest();
+    const provided = Buffer.from(sig.replace(/-/g, "+").replace(/_/g, "/"), "base64");
+    if (expected.length !== provided.length) return false;
+    if (!timingSafeEqual(expected, provided)) return false;
+    const data = JSON.parse(
+      Buffer.from(payload.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8")
+    );
+    return typeof data.exp === "number" && data.exp > Date.now() / 1000;
+  } catch {
+    return false;
+  }
+}
+
+function windowTotals(days, from, to) {
+  const out = { view: 0, call: 0, book: 0, directions: 0, email: 0, menu: 0 };
+  for (const [day, counts] of Object.entries(days || {})) {
+    if (day < from || day > to) continue;
+    for (const [k, v] of Object.entries(counts || {})) {
+      if (k in out) out[k] += Number(v) || 0;
+    }
+  }
+  return out;
+}
+
+function shiftDays(n) {
+  const d = new Date();
+  d.setUTCDate(d.getUTCDate() + n);
+  return d.toISOString().slice(0, 10);
+}
+
+export default async function handler(req, res) {
+  if (!verifySession(req)) {
+    res.status(401).json({ error: "unauthorized" });
+    return;
+  }
+  let stats = { days: {} };
+  try {
+    const { blobs } = await list({ prefix: STATS_KEY, limit: 1 });
+    const target = blobs.find((b) => b.pathname === STATS_KEY);
+    if (target) {
+      const r = await fetch(target.url, { cache: "no-store" });
+      if (r.ok) {
+        const j = await r.json();
+        if (j && j.days) stats = j;
+      }
+    }
+  } catch {
+    // fall through with empty stats
+  }
+
+  const today = shiftDays(0);
+  res.setHeader("Cache-Control", "no-store");
+  res.status(200).json({
+    last30: windowTotals(stats.days, shiftDays(-29), today),
+    // The comparison window is what makes the number mean something.
+    prev30: windowTotals(stats.days, shiftDays(-59), shiftDays(-30)),
+    last7: windowTotals(stats.days, shiftDays(-6), today),
+    allTime: windowTotals(stats.days, "0000-00-00", "9999-99-99"),
+    days: stats.days,
+  });
+}
+`;
+    exports2.TRACK_SNIPPET = `<script>
+(function(){
+  function send(ev){
+    try {
+      var body = JSON.stringify({ event: ev });
+      if (navigator.sendBeacon) {
+        navigator.sendBeacon("/api/track", new Blob([body], { type: "application/json" }));
+      } else {
+        fetch("/api/track", { method:"POST", headers:{"Content-Type":"application/json"}, body: body, keepalive: true });
+      }
+    } catch(e){}
+  }
+  send("view");
+  document.addEventListener("click", function(e){
+    var a = e.target && e.target.closest ? e.target.closest("a,button") : null;
+    if (!a) return;
+    var href = (a.getAttribute("href") || "").toLowerCase();
+    var text = (a.textContent || "").toLowerCase();
+    if (href.indexOf("tel:") === 0) return send("call");
+    if (href.indexOf("mailto:") === 0) return send("email");
+    if (href.indexOf("/book") === 0 || /book|reserve|appointment/.test(text)) return send("book");
+    if (href.indexOf("maps.google") > -1 || href.indexOf("goo.gl/maps") > -1 || /directions/.test(text)) return send("directions");
+    if (/menu/.test(text)) return send("menu");
+  }, true);
+})();
+</script>`;
+  }
+});
+
 // ../../node_modules/bcryptjs/umd/index.js
 var require_umd = __commonJS({
   "../../node_modules/bcryptjs/umd/index.js"(exports2, module2) {
@@ -33688,7 +34019,7 @@ export default async function handler(req, res) {
 <head>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width,initial-scale=1" />
-  <title>Site editor</title>
+  <title>__ADMIN_TITLE__</title>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" />
   <style>
     :root {
@@ -34334,6 +34665,67 @@ export default async function handler(req, res) {
     );
   }
 
+  // What the site actually DID this month. This is the renewal conversation:
+  // "37 calls, up from 21" beats any amount of design talk.
+  function InsightsPanel() {
+    var data = useState(null); var loading = useState(true); var err = useState("");
+    useEffect(function () {
+      fetch("/api/stats", { credentials: "same-origin" })
+        .then(function (r) { if (!r.ok) throw new Error("stats " + r.status); return r.json(); })
+        .then(function (d) { data[1](d); loading[1](false); })
+        .catch(function () { err[1]("Couldn't load your numbers just yet."); loading[1](false); });
+    }, []);
+
+    if (loading[0]) return h("div", null, "Loading your numbers\u2026");
+    if (err[0] || !data[0]) return h("div", { style: { color: "var(--muted)" } }, err[0] || "No data yet.");
+
+    var d = data[0];
+    var LABELS = {
+      view: "Page views", call: "Phone calls", book: "Booking clicks",
+      email: "Email clicks", directions: "Directions", menu: "Menu views"
+    };
+    var order = ["call", "book", "view", "directions", "email", "menu"];
+
+    function delta(now, before) {
+      if (!before) return now > 0 ? { text: "new", good: true } : null;
+      var pct = Math.round(((now - before) / before) * 100);
+      if (pct === 0) return { text: "no change", good: true };
+      return { text: (pct > 0 ? "+" : "") + pct + "%", good: pct >= 0 };
+    }
+
+    var anything = order.some(function (k) { return (d.last30[k] || 0) > 0; });
+
+    return h("div", null,
+      h("div", { className: "bar" },
+        h("div", null,
+          h("div", { style: { fontSize: 15, fontWeight: 600 } }, "Insights"),
+          h("div", { style: { fontSize: 12, color: "var(--muted)" } }, "Last 30 days, compared with the 30 before")
+        )
+      ),
+      !anything
+        ? h("div", { style: { color: "var(--muted)", fontSize: 13 } },
+            "No activity recorded yet. Numbers appear here once people start visiting the site.")
+        : h("div", { style: { display: "grid", gridTemplateColumns: "repeat(auto-fit,minmax(150px,1fr))", gap: 12 } },
+            order.filter(function (k) { return (d.last30[k] || 0) > 0 || k === "call" || k === "view"; }).map(function (k) {
+              var now = d.last30[k] || 0;
+              var chg = delta(now, d.prev30[k] || 0);
+              return h("div", {
+                key: k,
+                style: { border: "1px solid var(--border)", borderRadius: 10, padding: "14px 16px", background: "var(--panel)" }
+              },
+                h("div", { style: { fontSize: 12, color: "var(--muted)", marginBottom: 6 } }, LABELS[k] || k),
+                h("div", { style: { fontSize: 26, fontWeight: 600, lineHeight: 1.1 } }, String(now)),
+                chg ? h("div", {
+                  style: { fontSize: 12, marginTop: 4, color: chg.good ? "var(--accent)" : "#b91c1c" }
+                }, chg.text + " vs previous 30 days") : null
+              );
+            })
+          ),
+      h("div", { style: { fontSize: 12, color: "var(--muted)", marginTop: 18 } },
+        "Counts only \u2014 no cookies, no personal data, nothing shared with anyone.")
+    );
+  }
+
   function TabBar(props) {
     return h("div", { style: { display: "flex", gap: 4, marginBottom: 24, borderBottom: "1px solid var(--border)", paddingBottom: 12 } },
       props.tabs.map(function (t) {
@@ -34440,10 +34832,19 @@ export default async function handler(req, res) {
     // booking page is the site root rather than /book.
     if (!ctl.available || !ctl.content) {
       return h("div", { className: "app" },
-        h(TabBar, { tabs: [{ id: "bookings", label: "Bookings" }, { id: "password", label: "Password" }], section: section }),
+        h(TabBar, {
+          tabs: [
+            { id: "bookings", label: "Bookings" },
+            { id: "insights", label: "Insights" },
+            { id: "password", label: "Password" }
+          ],
+          section: section
+        }),
         section[0] === "password"
           ? h(PasswordPanel, null)
-          : h(BookingsPanel, { bookingPath: "/" })
+          : section[0] === "insights"
+            ? h(InsightsPanel, null)
+            : h(BookingsPanel, { bookingPath: "/" })
       );
     }
 
@@ -34453,6 +34854,7 @@ export default async function handler(req, res) {
         tabs: [
           { id: "content", label: "Site content" },
           { id: "bookings", label: "Bookings" },
+          { id: "insights", label: "Insights" },
           { id: "password", label: "Password" }
         ],
         section: section
@@ -34461,7 +34863,9 @@ export default async function handler(req, res) {
         ? h(Editor, { content: ctl.content, setContent: ctl.setContent })
         : section[0] === "password"
           ? h(PasswordPanel, null)
-          : h(BookingsPanel, null)
+          : section[0] === "insights"
+            ? h(InsightsPanel, null)
+            : h(BookingsPanel, null)
     );
   }
 
@@ -80274,6 +80678,8 @@ var require_builder = __commonJS({
     var models_1 = require_models();
     var cms_template_1 = require_cms_template();
     var vercel_domains_1 = require_vercel_domains();
+    var agency_1 = require_agency();
+    var analytics_runtime_1 = require_analytics_runtime();
     var cms_runtime_1 = require_cms_runtime();
     var booking_runtime_1 = require_booking_runtime();
     function siteUidFor(leadId) {
@@ -80357,6 +80763,11 @@ var require_builder = __commonJS({
       const pattern = new RegExp(`https?:\\/\\/[^\\s"'\`)]*(${STOCK_HOSTS.map((h) => h.replace(/\./g, "\\.")).join("|")})[^\\s"'\`)]*`, "gi");
       return code.replace(pattern, "");
     }
+    function adminHtml() {
+      const p = (0, agency_1.getAgencyProfile)();
+      const title = p.name ? `${p.name} \u2014 site manager` : "Site editor";
+      return cms_runtime_1.ADMIN_INDEX_HTML.replace("__ADMIN_TITLE__", title.replace(/[<>&]/g, ""));
+    }
     function bannerFor(lead) {
       let handedOver = false;
       try {
@@ -80371,8 +80782,10 @@ var require_builder = __commonJS({
         return "";
       const esc = (v) => v.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
       const label = `Preview site for ${esc(businessName)}`;
+      const credit = (0, agency_1.siteCredit)();
+      const creditHtml = credit.url ? `<a href="${esc(credit.url.startsWith("http") ? credit.url : "https://" + credit.url)}" style="all:unset;color:#a7f3d0;text-decoration:underline;cursor:pointer">${esc(credit.label)}</a>` : esc(credit.label);
       return `<div id="sproutkit-demo-banner" role="note" style="all:initial;display:block;box-sizing:border-box;width:100%;background:#1f2937;color:#f9fafb;font-family:ui-sans-serif,system-ui,-apple-system,'Segoe UI',Roboto,sans-serif;font-size:13px;line-height:1.4;padding:10px 16px;text-align:center;letter-spacing:.01em">
-<strong style="all:unset;font-weight:600">DEMO</strong> \xB7 ${label} \u2014 not licensed for live use. Built with <a href="https://sproutkit.app" style="all:unset;color:#a7f3d0;text-decoration:underline;cursor:pointer">Sproutkit</a>. Contact us to go live with your own domain.
+<strong style="all:unset;font-weight:600">DEMO</strong> \xB7 ${label} \u2014 not licensed for live use. Built by ${creditHtml}. Contact us to go live with your own domain.
 </div>`;
     }
     function snapshotDir(leadId) {
@@ -80541,6 +80954,8 @@ var require_builder = __commonJS({
     async function buildAndDeploySite(args) {
       const { lead, anthropicKey, vercelToken, placesKey, customInstructions, onProgress, includeCms, blobToken, reuseAdminPassword, skipContentExtraction, multipage, pages, skipQa } = args;
       const pageList = multipage && (!pages || pages.length === 0) ? ["Home", "Services", "About", "Contact"] : pages ?? [];
+      const credit = (0, agency_1.siteCredit)();
+      const footerCredit = credit.url ? `Built by ${credit.label} \xB7 ${credit.url}` : `Built by ${credit.label}`;
       if (includeCms && !blobToken) {
         throw new Error("CMS is enabled but no Vercel Blob token is set. Add it in Settings \u2192 Vercel Blob token.");
       }
@@ -80743,7 +81158,7 @@ RULES for structure:
   (tel:${lead.phone} for trades, book for appointments, menu/order for food).
 - Non-negotiable floor, however you arrange it: the business name, what they do,
   where they are (${lead.city}), the phone as a tel: link, and a footer ending with
-  "Built with Sproutkit \xB7 sproutkit.app" in muted text.
+  "${footerCredit}" in muted text.
 - Use the real reviews and hours given above where they earn their place \u2014 not in a
   fixed slot. Photos: only from PHOTOS, sized per the archetype (see gallery rule:
   if PHOTOS.length < 2 there is no gallery section at all).
@@ -80948,7 +81363,7 @@ ${prompt}` : prompt;
       onProgress("Deploying to Vercel...");
       const indexHtml = `<!DOCTYPE html>
 <html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head>
-<body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script></body></html>`;
+<body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script>${analytics_runtime_1.TRACK_SNIPPET}</body></html>`;
       const mainJsx = `import { StrictMode } from 'react';
 import { createRoot } from 'react-dom/client';
 import App from './App.jsx';
@@ -80962,7 +81377,9 @@ createRoot(document.getElementById('root')).render(<StrictMode><App /></StrictMo
         version: "0.0.1",
         type: "module",
         scripts: { build: "vite build", dev: "vite" },
-        dependencies: { ...baseDeps },
+        // @vercel/blob even without CMS: /api/track writes the visit counters, and
+        // analytics ships on every site.
+        dependencies: { ...baseDeps, "@vercel/blob": "^0.23.4" },
         devDependencies: { "@vitejs/plugin-react": "^4.3.1", vite: "^5.4.2" }
       });
       const viteConfig = `import { defineConfig } from 'vite';
@@ -81057,20 +81474,33 @@ export default defineConfig({ plugins: [react()] });`;
           { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" },
           { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" },
           { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" },
-          { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" },
+          { file: "public/admin/index.html", data: adminHtml(), encoding: "utf-8" },
           { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" }
         ];
         cmsAdmin = { url: "", password: adminPassword };
       }
+      const analyticsFiles = [
+        { file: "api/track.js", data: analytics_runtime_1.API_TRACK_JS, encoding: "utf-8" },
+        { file: "api/stats.js", data: analytics_runtime_1.API_STATS_JS, encoding: "utf-8" }
+      ];
       const allFiles = [
         { file: "index.html", data: indexHtml, encoding: "utf-8" },
         { file: "src/main.jsx", data: mainJsx, encoding: "utf-8" },
         { file: "src/App.jsx", data: appCode, encoding: "utf-8" },
         { file: "package.json", data: finalPackageJson, encoding: "utf-8" },
         { file: "vite.config.js", data: viteConfig, encoding: "utf-8" },
+        ...analyticsFiles,
         ...cmsExtraFiles,
         ...photoFiles
       ];
+      if (!includeCms && blobToken) {
+        onProgress("Setting analytics env vars\u2026");
+        await setProjectEnv(projectName, vercelToken, {
+          BLOB_READ_WRITE_TOKEN: blobToken,
+          SITE_ID: siteUidFor(lead.id),
+          BUSINESS_NAME: lead.name
+        });
+      }
       const totalMb = allFiles.reduce((s, f) => s + f.data.length, 0) / 1048576;
       onProgress(`Uploading ${allFiles.length} files (${totalMb.toFixed(1)} MB)\u2026`);
       const res = await postVercelDeployment({
@@ -81145,7 +81575,7 @@ export default defineConfig({ plugins: [react()] });`;
           { source: "/book/", destination: "/book/index.html" }
         ]
       });
-      const indexHtmlCms = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script></body></html>`;
+      const indexHtmlCms = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script>${analytics_runtime_1.TRACK_SNIPPET}</body></html>`;
       const mainJsxCms = `import { StrictMode } from 'react';
 import { createRoot } from 'react-dom/client';
 import App from './App.jsx';
@@ -81153,7 +81583,7 @@ createRoot(document.getElementById('root')).render(<StrictMode><App /></StrictMo
       const viteConfigCms = `import { defineConfig } from 'vite';
 import react from '@vitejs/plugin-react';
 export default defineConfig({ plugins: [react()] });`;
-      filesToRedeploy.push({ file: "index.html", data: indexHtmlCms, encoding: "utf-8" }, { file: "src/main.jsx", data: mainJsxCms, encoding: "utf-8" }, { file: "vite.config.js", data: viteConfigCms, encoding: "utf-8" }, { file: "package.json", data: packageJsonCms, encoding: "utf-8" }, { file: "vercel.json", data: vercelJson, encoding: "utf-8" }, { file: "api/content.js", data: cms_runtime_1.API_CONTENT_JS, encoding: "utf-8" }, { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" }, { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" }, { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" }, { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" }, { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" }, { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" });
+      filesToRedeploy.push({ file: "index.html", data: indexHtmlCms, encoding: "utf-8" }, { file: "src/main.jsx", data: mainJsxCms, encoding: "utf-8" }, { file: "vite.config.js", data: viteConfigCms, encoding: "utf-8" }, { file: "package.json", data: packageJsonCms, encoding: "utf-8" }, { file: "vercel.json", data: vercelJson, encoding: "utf-8" }, { file: "api/content.js", data: cms_runtime_1.API_CONTENT_JS, encoding: "utf-8" }, { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" }, { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" }, { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" }, { file: "api/track.js", data: analytics_runtime_1.API_TRACK_JS, encoding: "utf-8" }, { file: "api/stats.js", data: analytics_runtime_1.API_STATS_JS, encoding: "utf-8" }, { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" }, { file: "public/admin/index.html", data: adminHtml(), encoding: "utf-8" }, { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" });
       if (!filesToRedeploy.some((f) => f.file === "src/App.jsx")) {
         throw new Error("Couldn't fetch src/App.jsx from the existing deployment. Try Regenerate website first, then Redeploy CMS.");
       }
@@ -81223,7 +81653,7 @@ export default defineConfig({ plugins: [react()] });`;
       snapshot[appJsxIndex] = { ...snapshot[appJsxIndex], data: modifiedApp };
       saveSnapshot(lead.id, snapshot);
       const files = snapshot.map((f) => ({ file: f.file, data: f.data, encoding: f.encoding }));
-      const indexHtml = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script></body></html>`;
+      const indexHtml = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script>${analytics_runtime_1.TRACK_SNIPPET}</body></html>`;
       const mainJsx = `import { StrictMode } from 'react';
 import { createRoot } from 'react-dom/client';
 import App from './App.jsx';
@@ -81305,12 +81735,14 @@ export default defineConfig({ plugins: [react()] });`;
         },
         { file: "public/book/app.js", data: booking_runtime_1.BOOK_APP_JS, encoding: "utf-8" },
         // Refresh the CMS admin app (contains the Bookings tab now)
-        { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" },
+        { file: "public/admin/index.html", data: adminHtml(), encoding: "utf-8" },
         { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" },
         { file: "api/content.js", data: cms_runtime_1.API_CONTENT_JS, encoding: "utf-8" },
         { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" },
         { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" },
         { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" },
+        { file: "api/track.js", data: analytics_runtime_1.API_TRACK_JS, encoding: "utf-8" },
+        { file: "api/stats.js", data: analytics_runtime_1.API_STATS_JS, encoding: "utf-8" },
         { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" }
       );
       onProgress("Deploying\u2026");
@@ -81366,11 +81798,13 @@ export default defineConfig({ plugins: [react()] });`;
         { file: "api/booking-config.js", data: booking_runtime_1.API_BOOKING_CONFIG_JS, encoding: "utf-8" },
         // The client's own dashboard: view bookings, edit services/hours. Same
         // admin the CMS sites use — it already has a Bookings tab.
-        { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" },
+        { file: "public/admin/index.html", data: adminHtml(), encoding: "utf-8" },
         { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" },
         { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" },
         { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" },
         { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" },
+        { file: "api/track.js", data: analytics_runtime_1.API_TRACK_JS, encoding: "utf-8" },
+        { file: "api/stats.js", data: analytics_runtime_1.API_STATS_JS, encoding: "utf-8" },
         // Serve /admin without a trailing-slash redirect dance.
         {
           file: "vercel.json",
@@ -81512,7 +81946,7 @@ export default defineConfig({ plugins: [react()] });`;
         deps["@vercel/blob"] = "^0.23.4";
         deps.bcryptjs = "^2.4.3";
       }
-      const indexHtml = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script></body></html>`;
+      const indexHtml = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${lead.name}</title></head><body style="margin:0">${bannerFor(lead)}<div id="root"></div><script type="module" src="/src/main.jsx"></script>${analytics_runtime_1.TRACK_SNIPPET}</body></html>`;
       files.push({ file: "index.html", data: indexHtml, encoding: "utf-8" }, {
         file: "src/main.jsx",
         data: `import { StrictMode } from 'react';
@@ -81552,7 +81986,7 @@ export default defineConfig({ plugins: [react()] });`,
             ]
           }),
           encoding: "utf-8"
-        }, { file: "api/content.js", data: cms_runtime_1.API_CONTENT_JS, encoding: "utf-8" }, { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" }, { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" }, { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" }, { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" }, { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" }, { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" });
+        }, { file: "api/content.js", data: cms_runtime_1.API_CONTENT_JS, encoding: "utf-8" }, { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" }, { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" }, { file: "api/admin/password.js", data: cms_runtime_1.API_ADMIN_PASSWORD_JS, encoding: "utf-8" }, { file: "api/track.js", data: analytics_runtime_1.API_TRACK_JS, encoding: "utf-8" }, { file: "api/stats.js", data: analytics_runtime_1.API_STATS_JS, encoding: "utf-8" }, { file: "api/admin/upload.js", data: cms_runtime_1.API_ADMIN_UPLOAD_JS, encoding: "utf-8" }, { file: "public/admin/index.html", data: adminHtml(), encoding: "utf-8" }, { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" });
         const env = {
           BLOB_READ_WRITE_TOKEN: blobToken,
           ADMIN_PASSWORD_HASH: await (0, cms_runtime_1.hashPassword)(adminPassword),
@@ -82235,6 +82669,541 @@ var require_lead_search = __commonJS({
   }
 });
 
+// ../desktop/dist/main/lib/followup.js
+var require_followup = __commonJS({
+  "../desktop/dist/main/lib/followup.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.logContact = logContact;
+    exports2.dueFollowUps = dueFollowUps2;
+    exports2.contactHistory = contactHistory2;
+    exports2.outreachStats = outreachStats2;
+    var db_1 = require_db();
+    var STATUS_FOR = {
+      interested: "replied",
+      callback: "replied",
+      // Not a lost cause forever, but out of the active funnel.
+      not_interested: "dead",
+      wrong_number: "dead",
+      // Silence isn't an outcome that changes the stage — they're still 'contacted'.
+      no_answer: null
+    };
+    function logContact(args) {
+      const db2 = (0, db_1.getDb)();
+      const lead = db2.get("SELECT id FROM leads WHERE id = ?", [args.leadId]);
+      if (!lead)
+        throw new Error(`Lead #${args.leadId} not found`);
+      db2.run("INSERT INTO contact_log (lead_id, direction, channel, outcome, note) VALUES (?, ?, ?, ?, ?)", [args.leadId, args.direction, args.channel ?? null, args.outcome ?? null, args.note ?? null]);
+      if (args.direction === "out") {
+        db2.run(`UPDATE leads
+       SET last_contacted_at = datetime('now'),
+           followed_up_count = COALESCE(followed_up_count, 0) + 1
+       WHERE id = ?`, [args.leadId]);
+        return;
+      }
+      const nextStatus = args.outcome ? STATUS_FOR[args.outcome] : null;
+      db2.run(`UPDATE leads
+     SET last_reply_at = datetime('now'),
+         reply_outcome = ?,
+         status = CASE
+           -- Never drag a client BACKWARDS out of won.
+           WHEN status = 'won' THEN status
+           WHEN ? IS NULL THEN status
+           ELSE ?
+         END,
+         dead_at = CASE WHEN ? = 'dead' THEN datetime('now') ELSE dead_at END
+     WHERE id = ?`, [args.outcome ?? null, nextStatus, nextStatus, nextStatus, args.leadId]);
+    }
+    function dueFollowUps2(afterDays = 3, limit = 50) {
+      return (0, db_1.getDb)().all(`SELECT id, name, city, phone, email, status, site_url, booking_url,
+            last_contacted_at, followed_up_count,
+            CAST(julianday('now') - julianday(last_contacted_at) AS INTEGER) AS days_since
+     FROM leads
+     WHERE last_contacted_at IS NOT NULL
+       AND last_reply_at IS NULL
+       AND status NOT IN ('dead', 'won')
+       AND julianday('now') - julianday(last_contacted_at) >= ?
+     ORDER BY last_contacted_at ASC
+     LIMIT ?`, [afterDays, limit]);
+    }
+    function contactHistory2(leadId) {
+      return (0, db_1.getDb)().all("SELECT * FROM contact_log WHERE lead_id = ? ORDER BY at DESC", [leadId]);
+    }
+    function outreachStats2() {
+      const db2 = (0, db_1.getDb)();
+      const one = (sql, params = []) => Number(db2.get(sql, params)?.n ?? 0);
+      const contacted = one("SELECT COUNT(*) n FROM leads WHERE last_contacted_at IS NOT NULL");
+      const replied = one("SELECT COUNT(*) n FROM leads WHERE last_reply_at IS NOT NULL");
+      const interested = one("SELECT COUNT(*) n FROM leads WHERE reply_outcome IN ('interested','callback')");
+      const won = one("SELECT COUNT(*) n FROM leads WHERE status = 'won'");
+      const awaitingReply = one(`SELECT COUNT(*) n FROM leads
+     WHERE last_contacted_at IS NOT NULL AND last_reply_at IS NULL
+       AND status NOT IN ('dead','won')`);
+      return {
+        contacted,
+        replied,
+        interested,
+        won,
+        awaitingReply,
+        replyRatePct: contacted ? Math.round(replied / contacted * 100) : 0
+      };
+    }
+  }
+});
+
+// ../desktop/dist/main/lib/invoicing.js
+var require_invoicing = __commonJS({
+  "../desktop/dist/main/lib/invoicing.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ (function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    })();
+    var __importDefault = exports2 && exports2.__importDefault || function(mod) {
+      return mod && mod.__esModule ? mod : { "default": mod };
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.parseMoney = parseMoney;
+    exports2.parseLineItems = parseLineItems;
+    exports2.nextInvoiceNumber = nextInvoiceNumber;
+    exports2.invoiceDir = invoiceDir;
+    exports2.createInvoice = createInvoice;
+    exports2.getInvoiceByNumber = getInvoiceByNumber;
+    exports2.listInvoices = listInvoices;
+    exports2.markInvoicePaid = markInvoicePaid;
+    exports2.renderInvoicePdf = renderInvoicePdf;
+    exports2.renderLetterPdf = renderLetterPdf2;
+    var pdfkit_1 = __importDefault(require("pdfkit"));
+    var fs3 = __importStar(require("fs"));
+    var path3 = __importStar(require("path"));
+    var db_1 = require_db();
+    var runtime_1 = require_runtime();
+    var agency_1 = require_agency();
+    function parseMoney(input) {
+      const cleaned = String(input).trim().replace(/[£$€,\s]/g, "");
+      if (!/^\d+(\.\d{1,2})?$/.test(cleaned)) {
+        throw new Error(`"${input}" isn't a valid amount (expected e.g. 600 or 600.50).`);
+      }
+      const [whole, frac = ""] = cleaned.split(".");
+      return Number(whole) * 100 + Number(frac.padEnd(2, "0"));
+    }
+    function parseLineItems(spec) {
+      const items = [];
+      for (const chunk of spec.split(",")) {
+        const part = chunk.trim();
+        if (!part)
+          continue;
+        const idx = part.lastIndexOf(":");
+        if (idx === -1) {
+          throw new Error(`"${part}" needs a price \u2014 use "Description:600".`);
+        }
+        const description = part.slice(0, idx).trim();
+        const amount = part.slice(idx + 1).trim();
+        if (!description)
+          throw new Error(`Missing a description in "${part}".`);
+        const qtyMatch = amount.match(/^(\d+)\s*[x*]\s*(.+)$/i);
+        if (qtyMatch) {
+          items.push({
+            description,
+            quantity: Number(qtyMatch[1]),
+            unitPence: parseMoney(qtyMatch[2])
+          });
+        } else {
+          items.push({ description, quantity: 1, unitPence: parseMoney(amount) });
+        }
+      }
+      if (items.length === 0)
+        throw new Error("No line items given.");
+      return items;
+    }
+    function nextInvoiceNumber() {
+      const year = (/* @__PURE__ */ new Date()).getFullYear();
+      const prefix = `INV-${year}-`;
+      const rows = (0, db_1.getDb)().all("SELECT number FROM invoices WHERE number LIKE ? ORDER BY number DESC LIMIT 1", [prefix + "%"]);
+      const last = rows[0]?.number;
+      const n = last ? Number(last.slice(prefix.length)) + 1 : 1;
+      return prefix + String(n).padStart(3, "0");
+    }
+    function invoiceDir() {
+      const dir = path3.join((0, runtime_1.userDataDir)(), "data", "invoices");
+      fs3.mkdirSync(dir, { recursive: true });
+      return dir;
+    }
+    function addDays(iso, days) {
+      const d = /* @__PURE__ */ new Date(iso + "T00:00:00Z");
+      d.setUTCDate(d.getUTCDate() + days);
+      return d.toISOString().slice(0, 10);
+    }
+    function createInvoice(args) {
+      const profile = (0, agency_1.getAgencyProfile)();
+      const subtotal = args.items.reduce((sum, i) => sum + i.quantity * i.unitPence, 0);
+      const rate = args.vatRate ?? profile.vatRate ?? 0;
+      const vat = rate > 0 ? Math.round(subtotal * rate / 100) : 0;
+      const total = subtotal + vat;
+      const issued = args.issuedAt ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+      const number = nextInvoiceNumber();
+      const db2 = (0, db_1.getDb)();
+      db2.run(`INSERT INTO invoices
+      (number, lead_id, client_name, client_email, client_address, line_items,
+       subtotal_pence, vat_pence, total_pence, currency, status, issued_at, due_at, notes)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'issued', ?, ?, ?)`, [
+        number,
+        args.leadId ?? null,
+        args.clientName,
+        args.clientEmail ?? null,
+        args.clientAddress ?? null,
+        JSON.stringify(args.items),
+        subtotal,
+        vat,
+        total,
+        profile.currency,
+        issued,
+        addDays(issued, args.dueInDays ?? 14),
+        args.notes ?? null
+      ]);
+      return getInvoiceByNumber(number);
+    }
+    function getInvoiceByNumber(number) {
+      return (0, db_1.getDb)().get("SELECT * FROM invoices WHERE number = ?", [number]) ?? null;
+    }
+    function listInvoices(filter) {
+      let sql = "SELECT * FROM invoices";
+      const conds = [];
+      const params = [];
+      if (filter?.status) {
+        conds.push("status = ?");
+        params.push(filter.status);
+      }
+      if (filter?.leadId) {
+        conds.push("lead_id = ?");
+        params.push(filter.leadId);
+      }
+      if (conds.length)
+        sql += " WHERE " + conds.join(" AND ");
+      sql += " ORDER BY id DESC";
+      return (0, db_1.getDb)().all(sql, params);
+    }
+    function markInvoicePaid(number, when) {
+      const inv = getInvoiceByNumber(number);
+      if (!inv)
+        throw new Error(`Invoice ${number} not found.`);
+      (0, db_1.getDb)().run("UPDATE invoices SET status = 'paid', paid_at = ? WHERE number = ?", [
+        when ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
+        number
+      ]);
+      return getInvoiceByNumber(number);
+    }
+    var PAGE_MARGIN = 50;
+    var INK = "#141412";
+    var MUTED = "#6a6a5e";
+    function hexOrDefault(hex, fallback) {
+      return hex && /^#[0-9a-f]{6}$/i.test(hex) ? hex : fallback;
+    }
+    function drawLetterhead(doc, p) {
+      const accent = hexOrDefault(p.accent, "#556B45");
+      const right = doc.page.width - PAGE_MARGIN;
+      let leftBottom = PAGE_MARGIN;
+      if (p.logoPath && fs3.existsSync(p.logoPath)) {
+        try {
+          doc.image(p.logoPath, PAGE_MARGIN, PAGE_MARGIN, { fit: [150, 50] });
+          leftBottom = PAGE_MARGIN + 50;
+        } catch {
+          doc.fillColor(INK).fontSize(20).font("Helvetica-Bold").text(p.name ?? "", PAGE_MARGIN, PAGE_MARGIN);
+          leftBottom = doc.y;
+        }
+      } else {
+        doc.fillColor(INK).fontSize(20).font("Helvetica-Bold").text(p.name ?? "", PAGE_MARGIN, PAGE_MARGIN);
+        leftBottom = doc.y;
+      }
+      const details = [
+        p.address,
+        p.phone,
+        p.email,
+        p.website,
+        p.companyNumber ? `Company no. ${p.companyNumber}` : null,
+        p.vatNumber ? `VAT no. ${p.vatNumber}` : null
+      ].filter(Boolean).join("\n");
+      doc.fontSize(9).font("Helvetica").fillColor(MUTED);
+      const w = 200;
+      doc.text(details, right - w, PAGE_MARGIN, { width: w, align: "right" });
+      const rightBottom = doc.y;
+      const y = Math.max(leftBottom, rightBottom) + 18;
+      doc.moveTo(PAGE_MARGIN, y).lineTo(right, y).strokeColor(accent).lineWidth(2).stroke();
+      return y + 24;
+    }
+    function drawFooter(doc, p) {
+      const y = doc.page.height - PAGE_MARGIN + 10;
+      const bits = [p.name, p.email, p.phone].filter(Boolean).join("  \xB7  ");
+      doc.fontSize(8).fillColor(MUTED).font("Helvetica").text(bits, PAGE_MARGIN, y, { width: doc.page.width - PAGE_MARGIN * 2, align: "center" });
+    }
+    async function renderInvoicePdf(invoice, outPath) {
+      const p = (0, agency_1.getAgencyProfile)();
+      if (!p.name) {
+        throw new Error("No agency details set \u2014 run `sproutkit brand` first so invoices come from you, not from nobody.");
+      }
+      const accent = hexOrDefault(p.accent, "#556B45");
+      const items = JSON.parse(invoice.line_items);
+      const file = outPath ?? path3.join(invoiceDir(), `${invoice.number}.pdf`);
+      const doc = new pdfkit_1.default({ size: "A4", margin: PAGE_MARGIN, info: {
+        Title: `Invoice ${invoice.number}`,
+        Author: p.name
+      } });
+      const stream = fs3.createWriteStream(file);
+      doc.pipe(stream);
+      let y = drawLetterhead(doc, p);
+      const right = doc.page.width - PAGE_MARGIN;
+      doc.fillColor(INK).font("Helvetica-Bold").fontSize(24).text("INVOICE", PAGE_MARGIN, y);
+      doc.font("Helvetica").fontSize(10).fillColor(MUTED);
+      const metaLines = [
+        ["Invoice no.", invoice.number],
+        ["Date", invoice.issued_at ?? ""],
+        ["Due", invoice.due_at ?? ""]
+      ];
+      let metaY = y + 2;
+      for (const [k, v] of metaLines) {
+        doc.fillColor(MUTED).text(k, right - 200, metaY, { width: 100, align: "right" });
+        doc.fillColor(INK).text(v, right - 95, metaY, { width: 95, align: "right" });
+        metaY += 14;
+      }
+      y = Math.max(doc.y, metaY) + 18;
+      doc.fillColor(MUTED).fontSize(9).font("Helvetica-Bold").text("BILL TO", PAGE_MARGIN, y);
+      y = doc.y + 4;
+      doc.fillColor(INK).fontSize(11).font("Helvetica").text(invoice.client_name, PAGE_MARGIN, y);
+      y = doc.y;
+      const clientMeta = [invoice.client_address, invoice.client_email].filter(Boolean).join("\n");
+      if (clientMeta) {
+        doc.fontSize(9).fillColor(MUTED).text(clientMeta, PAGE_MARGIN, y, { width: 250 });
+        y = doc.y;
+      }
+      y += 22;
+      const colDesc = PAGE_MARGIN;
+      const colQty = right - 210;
+      const colUnit = right - 150;
+      const colAmt = right - 70;
+      doc.fontSize(9).font("Helvetica-Bold").fillColor(MUTED);
+      doc.text("DESCRIPTION", colDesc, y);
+      doc.text("QTY", colQty, y, { width: 40, align: "right" });
+      doc.text("UNIT", colUnit, y, { width: 70, align: "right" });
+      doc.text("AMOUNT", colAmt, y, { width: 70, align: "right" });
+      y = doc.y + 6;
+      doc.moveTo(PAGE_MARGIN, y).lineTo(right, y).strokeColor("#e5e5dd").lineWidth(1).stroke();
+      y += 10;
+      doc.font("Helvetica").fontSize(10).fillColor(INK);
+      for (const item of items) {
+        const amount = item.quantity * item.unitPence;
+        const descHeight = doc.heightOfString(item.description, { width: colQty - colDesc - 10 });
+        doc.text(item.description, colDesc, y, { width: colQty - colDesc - 10 });
+        doc.text(String(item.quantity), colQty, y, { width: 40, align: "right" });
+        doc.text((0, agency_1.formatMoney)(item.unitPence, invoice.currency), colUnit, y, { width: 70, align: "right" });
+        doc.text((0, agency_1.formatMoney)(amount, invoice.currency), colAmt, y, { width: 70, align: "right" });
+        y += Math.max(descHeight, 14) + 8;
+        if (y > doc.page.height - 200) {
+          doc.addPage();
+          y = PAGE_MARGIN;
+        }
+      }
+      doc.moveTo(colQty, y).lineTo(right, y).strokeColor("#e5e5dd").stroke();
+      y += 10;
+      const totalRow = (label, value, bold = false) => {
+        doc.font(bold ? "Helvetica-Bold" : "Helvetica").fontSize(bold ? 12 : 10).fillColor(bold ? INK : MUTED).text(label, colUnit - 60, y, { width: 130, align: "right" });
+        doc.fillColor(INK).text(value, colAmt, y, { width: 70, align: "right" });
+        y += bold ? 20 : 16;
+      };
+      totalRow("Subtotal", (0, agency_1.formatMoney)(invoice.subtotal_pence, invoice.currency));
+      if (invoice.vat_pence > 0) {
+        const rate = p.vatRate ?? 0;
+        totalRow(`VAT (${rate}%)`, (0, agency_1.formatMoney)(invoice.vat_pence, invoice.currency));
+      }
+      doc.moveTo(colQty, y).lineTo(right, y).strokeColor(accent).lineWidth(2).stroke();
+      y += 8;
+      totalRow("Total due", (0, agency_1.formatMoney)(invoice.total_pence, invoice.currency), true);
+      if (invoice.status === "paid") {
+        doc.fontSize(11).font("Helvetica-Bold").fillColor(accent).text(`PAID${invoice.paid_at ? " \xB7 " + invoice.paid_at : ""}`, colUnit - 60, y, {
+          width: 200,
+          align: "right"
+        });
+        y = doc.y;
+      }
+      y += 24;
+      const payBits = [
+        p.bankName ? `Bank: ${p.bankName}` : null,
+        p.bankAccount ? `Account: ${p.bankAccount}` : null,
+        p.bankSortCode ? `Sort code: ${p.bankSortCode}` : null
+      ].filter(Boolean);
+      if (payBits.length) {
+        doc.fontSize(9).font("Helvetica-Bold").fillColor(MUTED).text("PAYMENT", PAGE_MARGIN, y);
+        y = doc.y + 4;
+        doc.font("Helvetica").fontSize(10).fillColor(INK).text(payBits.join("\n"), PAGE_MARGIN, y);
+        y = doc.y + 12;
+      }
+      const terms = invoice.notes || p.paymentTerms;
+      if (terms) {
+        doc.fontSize(9).font("Helvetica").fillColor(MUTED).text(terms, PAGE_MARGIN, y, {
+          width: right - PAGE_MARGIN * 2
+        });
+      }
+      drawFooter(doc, p);
+      doc.end();
+      await new Promise((resolve, reject) => {
+        stream.on("finish", () => resolve());
+        stream.on("error", reject);
+      });
+      (0, db_1.getDb)().run("UPDATE invoices SET pdf_path = ? WHERE number = ?", [file, invoice.number]);
+      return file;
+    }
+    async function renderLetterPdf2(args) {
+      const p = (0, agency_1.getAgencyProfile)();
+      if (!p.name) {
+        throw new Error("No agency details set \u2014 run `sproutkit brand` first.");
+      }
+      const dir = path3.join((0, runtime_1.userDataDir)(), "data", "letters");
+      fs3.mkdirSync(dir, { recursive: true });
+      const safe = args.to.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
+      const file = args.outPath ?? path3.join(dir, `letter-${safe}-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.pdf`);
+      const doc = new pdfkit_1.default({ size: "A4", margin: PAGE_MARGIN, info: {
+        Title: args.subject ?? `Letter to ${args.to}`,
+        Author: p.name
+      } });
+      const stream = fs3.createWriteStream(file);
+      doc.pipe(stream);
+      let y = drawLetterhead(doc, p);
+      const width = doc.page.width - PAGE_MARGIN * 2;
+      doc.fontSize(10).fillColor(MUTED).font("Helvetica").text((/* @__PURE__ */ new Date()).toLocaleDateString("en-GB", { day: "numeric", month: "long", year: "numeric" }), PAGE_MARGIN, y);
+      y = doc.y + 16;
+      doc.fillColor(INK).fontSize(11).font("Helvetica").text(args.to, PAGE_MARGIN, y);
+      y = doc.y;
+      if (args.toAddress) {
+        doc.fontSize(10).fillColor(MUTED).text(args.toAddress, PAGE_MARGIN, y, { width: 250 });
+        y = doc.y;
+      }
+      y += 20;
+      if (args.subject) {
+        doc.fontSize(12).font("Helvetica-Bold").fillColor(INK).text(args.subject, PAGE_MARGIN, y, { width });
+        y = doc.y + 14;
+      }
+      doc.fontSize(11).font("Helvetica").fillColor(INK);
+      for (const para of args.body.split(/\n\s*\n/)) {
+        doc.text(para.trim(), PAGE_MARGIN, y, { width, align: "left", lineGap: 3 });
+        y = doc.y + 10;
+        if (y > doc.page.height - 150) {
+          doc.addPage();
+          y = PAGE_MARGIN;
+        }
+      }
+      y += 10;
+      doc.text(args.signOff ?? `Kind regards,
+${p.name}`, PAGE_MARGIN, y, { width });
+      drawFooter(doc, p);
+      doc.end();
+      await new Promise((resolve, reject) => {
+        stream.on("finish", () => resolve());
+        stream.on("error", reject);
+      });
+      return file;
+    }
+  }
+});
+
+// ../desktop/dist/main/lib/site-stats.js
+var require_site_stats = __commonJS({
+  "../desktop/dist/main/lib/site-stats.js"(exports2) {
+    "use strict";
+    var __importDefault = exports2 && exports2.__importDefault || function(mod) {
+      return mod && mod.__esModule ? mod : { "default": mod };
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.fetchSiteStats = fetchSiteStats;
+    exports2.pctChange = pctChange;
+    var axios_1 = __importDefault(require_axios());
+    async function fetchSiteStats(siteUrl, adminPassword) {
+      const base = siteUrl.replace(/\/$/, "");
+      let cookie;
+      try {
+        const login = await axios_1.default.post(`${base}/api/admin/login`, { password: adminPassword }, {
+          timeout: 2e4,
+          headers: { "Content-Type": "application/json" },
+          validateStatus: () => true
+        });
+        if (login.status === 429) {
+          return {
+            ok: false,
+            error: "The site's login is rate limited right now \u2014 try again in a few minutes."
+          };
+        }
+        if (login.status !== 200) {
+          return {
+            ok: false,
+            error: login.status === 401 ? "The stored admin password was rejected \u2014 the client has probably changed it." : `Couldn't sign in to the site (${login.status}).`
+          };
+        }
+        const setCookie = login.headers["set-cookie"];
+        const raw = Array.isArray(setCookie) ? setCookie[0] : setCookie;
+        if (!raw)
+          return { ok: false, error: "The site didn't return a session cookie." };
+        cookie = String(raw).split(";")[0];
+      } catch (e) {
+        return { ok: false, error: `Couldn't reach the site: ${e.message}` };
+      }
+      try {
+        const res = await axios_1.default.get(`${base}/api/stats`, {
+          timeout: 2e4,
+          headers: { Cookie: cookie },
+          validateStatus: () => true
+        });
+        if (res.status === 404) {
+          return {
+            ok: false,
+            error: "This site was built before analytics shipped. Run `sproutkit regenerate` on it to add them."
+          };
+        }
+        if (res.status !== 200)
+          return { ok: false, error: `Stats unavailable (${res.status}).` };
+        return { ok: true, data: res.data };
+      } catch (e) {
+        return { ok: false, error: `Couldn't read stats: ${e.message}` };
+      }
+    }
+    function pctChange(now, before) {
+      if (!before)
+        return now > 0 ? null : 0;
+      return Math.round((now - before) / before * 100);
+    }
+  }
+});
+
 // ../../node_modules/nodemailer/lib/fetch/cookies.js
 var require_cookies2 = __commonJS({
   "../../node_modules/nodemailer/lib/fetch/cookies.js"(exports2, module2) {
@@ -94014,6 +94983,10 @@ var require_chat_tools = __commonJS({
     var lead_search_1 = require_lead_search();
     var places_1 = require_places();
     var booking_detect_1 = require_booking_detect();
+    var followup_1 = require_followup();
+    var invoicing_1 = require_invoicing();
+    var agency_1 = require_agency();
+    var site_stats_1 = require_site_stats();
     var email_1 = require_email();
     var email_harvest_1 = require_email_harvest();
     exports2.TOOLS = [
@@ -94128,6 +95101,79 @@ var require_chat_tools = __commonJS({
         },
         requiresConfirmation: true
       },
+      {
+        name: "log_reply",
+        description: "Record how a business responded to outreach. SMS/WhatsApp replies land on the operator's phone and are invisible to Sproutkit, so this is how a reply enters the pipeline. Outcomes: 'interested' or 'callback' move the lead to Replied; 'not_interested' and 'wrong_number' move it to Dead; 'no_answer' just records the attempt without changing the stage.",
+        input_schema: {
+          type: "object",
+          properties: {
+            id: { type: "number", description: "Lead id that replied." },
+            outcome: {
+              type: "string",
+              enum: ["interested", "not_interested", "no_answer", "wrong_number", "callback"],
+              description: "What happened."
+            },
+            note: { type: "string", description: "Optional free-text note, e.g. 'wants to see menu options first'." }
+          },
+          required: ["id", "outcome"]
+        }
+      },
+      {
+        name: "list_followups",
+        description: "Leads that were contacted a while ago and have never replied \u2014 who to chase. Optionally set afterDays (default 3). Also returns outreach funnel stats (contacted, replied, reply rate).",
+        input_schema: {
+          type: "object",
+          properties: {
+            afterDays: { type: "number", description: "Only include leads contacted at least this many days ago. Default 3." }
+          }
+        }
+      },
+      {
+        name: "create_invoice",
+        description: "Create an invoice for a client and render it as a PDF on the agency's letterhead. Items are given as 'Description:amount' pairs separated by commas, e.g. 'Website build:1200,Booking system:450' \u2014 or with a quantity, 'Monthly hosting:12x25'. Requires the agency profile to be set up (sproutkit brand). Returns the invoice number, totals and PDF path.",
+        input_schema: {
+          type: "object",
+          properties: {
+            id: { type: "number", description: "Lead id to invoice (fills in name/email/address)." },
+            clientName: { type: "string", description: "Client name, if not invoicing an existing lead." },
+            items: { type: "string", description: "'Website build:1200,Booking system:450' or 'Hosting:12x25'." },
+            dueInDays: { type: "number", description: "Payment terms in days. Default 14." },
+            notes: { type: "string", description: "Optional note printed on the invoice." }
+          },
+          required: ["items"]
+        },
+        requiresConfirmation: true
+      },
+      {
+        name: "list_invoices",
+        description: "List invoices, optionally filtered by status ('issued' or 'paid') or lead id. Shows totals and what's outstanding.",
+        input_schema: {
+          type: "object",
+          properties: {
+            status: { type: "string", enum: ["issued", "paid"], description: "Filter by status." },
+            id: { type: "number", description: "Only invoices for this lead." }
+          }
+        }
+      },
+      {
+        name: "mark_invoice_paid",
+        description: "Mark an invoice as paid by its number, e.g. INV-2026-001.",
+        input_schema: {
+          type: "object",
+          properties: { number: { type: "string", description: "Invoice number." } },
+          required: ["number"]
+        },
+        requiresConfirmation: true
+      },
+      {
+        name: "site_report",
+        description: "Read a client site's visitor numbers \u2014 calls, booking clicks, page views for the last 30 days versus the previous 30. This is the renewal/retainer evidence. Requires the site to have been deployed with analytics (rebuild an older site to add them).",
+        input_schema: {
+          type: "object",
+          properties: { id: { type: "number", description: "Lead id." } },
+          required: ["id"]
+        }
+      },
       {
         name: "hand_over_site",
         description: "HAND OVER a finished site to the paying client: removes the DEMO/preview banner, optionally attaches the client's own domain, and returns every credential in one place (site URL, /admin panel + password, booking page + its password, and the DNS records the client must set at their registrar). This is the paid-deliverable step \u2014 the banner exists to stop clients using a free demo as their real site, so only run this when the user says the client has paid / signed off / is going live. Requires the lead to already have a built site or booking page.",
@@ -94607,6 +95653,11 @@ Interested?`;
                 (/* @__PURE__ */ new Date()).toISOString(),
                 r.id
               ]);
+              (0, followup_1.logContact)({
+                leadId: r.id,
+                direction: "out",
+                channel: e164 ? channel : "email"
+              });
             }
           }
           ctx.emitProgress?.({ channel: "leads:changed", payload: { reason: "prepare_outreach" } });
@@ -94803,6 +95854,116 @@ Interested?`;
           });
           return { ok: true, id, ...result };
         }
+        case "log_reply": {
+          const id = Number(input.id);
+          const outcome = String(input.outcome);
+          const lead = db2.get("SELECT id, name, status FROM leads WHERE id = ?", [id]);
+          if (!lead)
+            throw new Error(`Lead #${id} not found`);
+          (0, followup_1.logContact)({
+            leadId: id,
+            direction: "in",
+            outcome,
+            note: input.note ?? null
+          });
+          const after = db2.get("SELECT status FROM leads WHERE id = ?", [id]);
+          ctx.emitProgress?.({ channel: "leads:changed", payload: { reason: "log_reply" } });
+          return { ok: true, id, business: lead.name, outcome, status: after.status };
+        }
+        case "list_followups": {
+          const afterDays = Number(input.afterDays ?? 3);
+          return { ok: true, afterDays, due: (0, followup_1.dueFollowUps)(afterDays), stats: (0, followup_1.outreachStats)() };
+        }
+        case "create_invoice": {
+          const items = (0, invoicing_1.parseLineItems)(String(input.items));
+          let leadId = null;
+          let clientName = input.clientName ?? "";
+          let clientEmail = null;
+          let clientAddress = null;
+          if (input.id != null) {
+            leadId = Number(input.id);
+            const lead = db2.get("SELECT id, name, email, owner_email, address FROM leads WHERE id = ?", [leadId]);
+            if (!lead)
+              throw new Error(`Lead #${leadId} not found`);
+            clientName = clientName || lead.name;
+            clientEmail = lead.owner_email || lead.email;
+            clientAddress = lead.address;
+          }
+          if (!clientName) {
+            return { ok: false, error: "Who is this invoice for? Give a lead id or a clientName." };
+          }
+          const invoice = (0, invoicing_1.createInvoice)({
+            leadId,
+            clientName,
+            clientEmail,
+            clientAddress,
+            items,
+            dueInDays: input.dueInDays != null ? Number(input.dueInDays) : void 0,
+            notes: input.notes ?? null
+          });
+          const pdf = await (0, invoicing_1.renderInvoicePdf)(invoice);
+          return {
+            ok: true,
+            number: invoice.number,
+            client: invoice.client_name,
+            subtotal: (0, agency_1.formatMoney)(invoice.subtotal_pence, invoice.currency),
+            vat: invoice.vat_pence ? (0, agency_1.formatMoney)(invoice.vat_pence, invoice.currency) : null,
+            total: (0, agency_1.formatMoney)(invoice.total_pence, invoice.currency),
+            due: invoice.due_at,
+            pdf
+          };
+        }
+        case "list_invoices": {
+          const rows = (0, invoicing_1.listInvoices)({
+            status: input.status,
+            leadId: input.id != null ? Number(input.id) : void 0
+          });
+          const outstanding = rows.filter((r) => r.status !== "paid").reduce((sum, r) => sum + r.total_pence, 0);
+          return {
+            ok: true,
+            invoices: rows.map((r) => ({
+              number: r.number,
+              client: r.client_name,
+              total: (0, agency_1.formatMoney)(r.total_pence, r.currency),
+              status: r.status,
+              issued: r.issued_at,
+              due: r.due_at,
+              paid: r.paid_at,
+              pdf: r.pdf_path
+            })),
+            outstanding: (0, agency_1.formatMoney)(outstanding)
+          };
+        }
+        case "mark_invoice_paid": {
+          const invoice = (0, invoicing_1.markInvoicePaid)(String(input.number));
+          return {
+            ok: true,
+            number: invoice.number,
+            client: invoice.client_name,
+            total: (0, agency_1.formatMoney)(invoice.total_pence, invoice.currency),
+            paid: invoice.paid_at
+          };
+        }
+        case "site_report": {
+          const id = Number(input.id);
+          const lead = db2.get("SELECT id, name, site_url, booking_url, admin_url, admin_password, booking_admin_password FROM leads WHERE id = ?", [id]);
+          if (!lead)
+            throw new Error(`Lead #${id} not found`);
+          const base = lead.site_url || lead.booking_url;
+          if (!base)
+            return { ok: false, error: `#${id} ${lead.name} has no live site yet.` };
+          const password = lead.admin_password || lead.booking_admin_password;
+          if (!password) {
+            return {
+              ok: false,
+              error: `No admin password stored for #${id}, so I can't read its stats. Rebuild or hand over the site to provision one.`
+            };
+          }
+          const stats = await (0, site_stats_1.fetchSiteStats)(base, password);
+          if (!stats.ok)
+            return { ok: false, error: stats.error, business: lead.name };
+          return { ok: true, id, business: lead.name, url: base, ...stats.data };
+        }
         case "hand_over_site": {
           const id = Number(input.id);
           const lead = db2.get("SELECT id, name, site_url, booking_url FROM leads WHERE id = ?", [id]);
@@ -95836,7 +96997,7 @@ var require_package2 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "sproutkit-code",
-      version: "1.5.2",
+      version: "1.6.1",
       description: "Sproutkit in your terminal \u2014 find leads, build sites, run outreach, all via chat.",
       bin: {
         sproutkit: "./dist/index.js"
@@ -95865,7 +97026,8 @@ var require_package2 = __commonJS({
       dependencies: {
         "@anthropic-ai/sdk": "^0.30.1",
         axios: "^1.7.1",
-        "node-sqlite3-wasm": "^0.8.20"
+        "node-sqlite3-wasm": "^0.8.20",
+        pdfkit: "^0.20.1"
       },
       devDependencies: {
         "@types/node": "^20.14.0",
@@ -95884,6 +97046,9 @@ var cms = require_cms_provision();
 var bookingPreset = require_booking_preset();
 var builder = require_builder();
 var vercelStore = require_vercel_store();
+var agency = require_agency();
+var followup = require_followup();
+var invoicing = require_invoicing();
 var models = require_models();
 var llm = require_llm();
 var initDatabase = db.initDatabase;
@@ -95902,6 +97067,15 @@ var refreshModels = models.refreshModels;
 var refreshIfStale = models.refreshIfStale;
 var listCachedModels = models.listCachedModels;
 var getPreferredModel = models.getPreferredModel;
+var getAgencyProfile = agency.getAgencyProfile;
+var setAgencyProfile = agency.setAgencyProfile;
+var agencyConfigured = agency.agencyConfigured;
+var formatMoney = agency.formatMoney;
+var dueFollowUps = followup.dueFollowUps;
+var outreachStats = followup.outreachStats;
+var contactHistory = followup.contactHistory;
+var renderLetterPdf = invoicing.renderLetterPdf;
+var listInvoicesRaw = invoicing.listInvoices;
 var checkClaudeCodeAuth = llm.checkClaudeCodeAuth;
 var llmBackend = llm.getBackend;
 var claudeBin = llm.claudeBin;
@@ -97331,6 +98505,370 @@ async function cmdHandover(argv) {
     process.exitCode = 1;
   }
 }
+async function cmdBrand(argv) {
+  const { flags } = parseArgs(argv);
+  const json = !!flags.json;
+  const FIELDS = [
+    ["name", "Agency / your trading name"],
+    ["email", "Contact email"],
+    ["phone", "Contact phone"],
+    ["website", "Website"],
+    ["address", "Address (use \\n between lines)"],
+    ["company-number", "Company number"],
+    ["vat-number", "VAT number"],
+    ["vat-rate", "VAT rate % (blank if not registered)"],
+    ["bank-name", "Bank name"],
+    ["bank-account", "Account number"],
+    ["bank-sort-code", "Sort code"],
+    ["payment-terms", "Payment terms line"],
+    ["logo", "Path to a logo image (png/jpg)"],
+    ["accent", "Accent colour hex, e.g. #556B45"]
+  ];
+  const toKey = (flag) => ({
+    "company-number": "companyNumber",
+    "vat-number": "vatNumber",
+    "vat-rate": "vatRate",
+    "bank-name": "bankName",
+    "bank-account": "bankAccount",
+    "bank-sort-code": "bankSortCode",
+    "payment-terms": "paymentTerms",
+    logo: "logoPath"
+  })[flag] ?? flag;
+  const current = getAgencyProfile();
+  if (flags.show || argv.length === 0 || argv.length === 1 && json) {
+    if (json) {
+      emitJson({ ok: true, profile: current });
+      return;
+    }
+    if (!current.name) {
+      say();
+      say(c.amber("  No agency details set yet."));
+      say(c.dim("  These go on your invoices, letters and the sites you deliver."));
+      say(c.dim('  Set them with: sproutkit brand --name "Northgate Web Studio" --email you@x.com'));
+      say(c.dim("  Or run: sproutkit brand --interactive"));
+      say();
+      return;
+    }
+    say();
+    say(c.bold("  Your agency details"));
+    for (const [flag, label] of FIELDS) {
+      const v = current[toKey(flag)];
+      if (v) say(`  ${label.padEnd(34)} ${String(v).replace(/\n/g, ", ")}`);
+    }
+    say();
+    say(c.dim('  Change any of these with: sproutkit brand --<field> "value"'));
+    say();
+    return;
+  }
+  if (flags.interactive) {
+    say();
+    say(c.bold("  Your agency details"));
+    say(c.dim("  These appear on invoices, letters and the sites you hand over."));
+    say(c.dim("  Press enter to keep what's there / skip."));
+    say();
+    const patch2 = {};
+    for (const [flag, label] of FIELDS) {
+      const key = toKey(flag);
+      const existing = current[key];
+      const shown = existing ? c.dim(` [${String(existing).replace(/\n/g, ", ")}]`) : "";
+      const answer = (await ask(`  ${label}${shown}: `)).trim();
+      if (!answer) continue;
+      patch2[key] = key === "vatRate" ? Number(answer) || null : answer.replace(/\\n/g, "\n");
+    }
+    const saved2 = setAgencyProfile(patch2);
+    say();
+    say(c.green(`  \u2713 Saved \u2014 invoices and sites will now say "${String(saved2.name ?? "")}"`));
+    say();
+    return;
+  }
+  const patch = {};
+  for (const [flag] of FIELDS) {
+    if (flags[flag] === void 0) continue;
+    const key = toKey(flag);
+    const raw = String(flags[flag]);
+    patch[key] = key === "vatRate" ? Number(raw) || null : raw.replace(/\\n/g, "\n");
+  }
+  if (Object.keys(patch).length === 0) {
+    const err = 'Nothing to set. Try: sproutkit brand --name "Your Studio" --email you@x.com, or --show';
+    json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+    process.exitCode = 1;
+    return;
+  }
+  const saved = setAgencyProfile(patch);
+  if (json) {
+    emitJson({ ok: true, profile: saved });
+    return;
+  }
+  say();
+  say(c.green(`  \u2713 Updated ${Object.keys(patch).length} field(s).`));
+  if (!saved.name) say(c.amber("  Still missing a name \u2014 invoices need one."));
+  say();
+}
+async function cmdInvoice(argv) {
+  const { flags, rest } = parseArgs(argv);
+  const json = !!flags.json;
+  const sub = rest[0];
+  if (sub === "list") {
+    const r = await runTool(
+      "list_invoices",
+      { status: flags.unpaid ? "issued" : flags.status },
+      makeCtx({ json })
+    );
+    if (json) {
+      emitJson(r);
+      return;
+    }
+    if (!r.invoices.length) {
+      say(c.dim('  No invoices yet. Create one: sproutkit invoice <leadId> --items "Website:1200"'));
+      return;
+    }
+    say();
+    say("  " + c.dim("NUMBER".padEnd(15) + "CLIENT".padEnd(26) + "TOTAL".padEnd(11) + "DUE".padEnd(12) + "STATUS"));
+    say("  " + c.dim("\u2500".repeat(72)));
+    for (const i of r.invoices) {
+      const paid = i.status === "paid";
+      say(
+        "  " + c.bold(i.number.padEnd(15)) + i.client.slice(0, 24).padEnd(26) + i.total.padEnd(11) + c.dim((i.due ?? "").padEnd(12)) + (paid ? c.green("paid") : c.amber("unpaid"))
+      );
+    }
+    say();
+    say("  " + c.dim("Outstanding: ") + c.bold(r.outstanding));
+    say();
+    return;
+  }
+  if (sub === "paid") {
+    const number = rest[1] ?? flags.number;
+    if (!number) {
+      const err = "Usage: sproutkit invoice paid INV-2026-001";
+      json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+      process.exitCode = 1;
+      return;
+    }
+    const r = await runTool("mark_invoice_paid", { number }, makeCtx({ json }));
+    json ? emitJson(r) : say(c.green(`  \u2713 ${r.number} marked paid \u2014 ${r.client}, ${r.total}`));
+    return;
+  }
+  const id = Number(flags.id ?? rest[0]);
+  const items = flags.items ? String(flags.items) : "";
+  if (!items) {
+    const err = 'Usage: sproutkit invoice <leadId> --items "Website build:1200,Booking system:450"\n         quantities: --items "Monthly hosting:12x25"   \xB7   also: invoice list | invoice paid <number>';
+    json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+    process.exitCode = 1;
+    return;
+  }
+  const status = json ? void 0 : new Status();
+  if (status) status.start("Creating invoice");
+  try {
+    const r = await runTool(
+      "create_invoice",
+      {
+        id: Number.isNaN(id) ? void 0 : id,
+        clientName: flags.client ? String(flags.client) : void 0,
+        items,
+        dueInDays: flags.due ? Number(flags.due) : void 0,
+        notes: flags.notes ? String(flags.notes) : void 0
+      },
+      makeCtx({ json, status })
+    );
+    if (r && r.ok === false) {
+      if (status) status.done(false, r.error ?? "Couldn't create the invoice");
+      if (json) emitJson(r);
+      process.exitCode = 1;
+      return;
+    }
+    if (status) status.done(true, `${r.number} \u2014 ${r.total}`);
+    if (json) {
+      emitJson(r);
+      return;
+    }
+    say();
+    say(`  ${c.bold(String(r.number))}  ${r.client}`);
+    say(c.dim(`  Subtotal ${r.subtotal}`) + (r.vat ? c.dim(`  \xB7  VAT ${r.vat}`) : ""));
+    say(`  ${c.bold("Total " + r.total)}` + c.dim(`  \xB7  due ${r.due}`));
+    say(c.dim(`  PDF: ${r.pdf}`));
+    say();
+  } catch (e) {
+    if (status) status.done(false, "Invoice failed");
+    json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));
+    process.exitCode = 1;
+  }
+}
+async function cmdLetter(argv) {
+  const { flags, rest } = parseArgs(argv);
+  const json = !!flags.json;
+  const id = Number(flags.id ?? rest[0]);
+  let body = flags.body ? String(flags.body) : "";
+  if (!body && flags["body-file"]) {
+    try {
+      body = require("fs").readFileSync(String(flags["body-file"]), "utf8");
+    } catch (e) {
+      const err = `Couldn't read ${flags["body-file"]}: ${e.message}`;
+      json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+      process.exitCode = 1;
+      return;
+    }
+  }
+  const to = flags.to ? String(flags.to) : "";
+  if (!body || !to && Number.isNaN(id)) {
+    const err = 'Usage: sproutkit letter <leadId> --subject "Your new website" --body "text"\n         or: sproutkit letter --to "Name" --body-file letter.txt';
+    json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+    process.exitCode = 1;
+    return;
+  }
+  let recipient = to;
+  let address = null;
+  if (!recipient && !Number.isNaN(id)) {
+    const lead = await runTool("get_lead", { id }, makeCtx({ json: true }));
+    if (!lead?.name) {
+      const err = `Lead #${id} not found`;
+      json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+      process.exitCode = 1;
+      return;
+    }
+    recipient = lead.name;
+    address = lead.address ?? null;
+  }
+  try {
+    const file = await renderLetterPdf({
+      to: recipient,
+      toAddress: address,
+      subject: flags.subject ? String(flags.subject) : null,
+      body
+    });
+    json ? emitJson({ ok: true, to: recipient, pdf: file }) : say(c.green(`  \u2713 Letter for ${recipient}
+  ${file}`));
+  } catch (e) {
+    json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));
+    process.exitCode = 1;
+  }
+}
+async function cmdReply(argv) {
+  const { flags, rest } = parseArgs(argv);
+  const json = !!flags.json;
+  const id = Number(flags.id ?? rest[0]);
+  const outcome = flags.interested ? "interested" : flags["not-interested"] ? "not_interested" : flags["no-answer"] ? "no_answer" : flags["wrong-number"] ? "wrong_number" : flags.callback ? "callback" : flags.outcome;
+  if (!id || Number.isNaN(id) || !outcome) {
+    const err = 'Usage: sproutkit reply <leadId> --interested | --not-interested | --no-answer | --wrong-number | --callback\n         optional: --note "wants to see menu options first"';
+    json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+    process.exitCode = 1;
+    return;
+  }
+  try {
+    const r = await runTool(
+      "log_reply",
+      { id, outcome, note: flags.note ? String(flags.note) : void 0 },
+      makeCtx({ json })
+    );
+    autoSync();
+    if (json) {
+      emitJson(r);
+      return;
+    }
+    const nice = {
+      interested: "interested",
+      callback: "wants a callback",
+      not_interested: "not interested",
+      no_answer: "no answer",
+      wrong_number: "wrong number"
+    };
+    say(c.green(`  \u2713 ${r.business} \u2014 ${nice[String(r.outcome)] ?? r.outcome}`) + c.dim(` (now ${r.status})`));
+  } catch (e) {
+    json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));
+    process.exitCode = 1;
+  }
+}
+async function cmdFollowups(argv) {
+  const { flags } = parseArgs(argv);
+  const json = !!flags.json;
+  const afterDays = flags.days ? Number(flags.days) : 3;
+  const r = await runTool("list_followups", { afterDays }, makeCtx({ json }));
+  if (json) {
+    emitJson(r);
+    return;
+  }
+  const s = r.stats;
+  say();
+  if (!r.due.length) {
+    say(c.dim(`  Nobody to chase \u2014 no unanswered outreach older than ${afterDays} day(s).`));
+  } else {
+    say("  " + c.dim("ID".padEnd(6) + "BUSINESS".padEnd(30) + "WAITING".padEnd(10) + "REACH THEM ON"));
+    say("  " + c.dim("\u2500".repeat(74)));
+    for (const l of r.due) {
+      const reach = l.phone || l.email || c.dim("no contact");
+      say(
+        "  " + c.dim(("#" + l.id).padEnd(6)) + c.bold(l.name.slice(0, 28).padEnd(30)) + c.amber((l.days_since + "d").padEnd(10)) + reach
+      );
+    }
+    say();
+    say(c.dim("  Log what happens with: sproutkit reply <id> --interested|--not-interested|--no-answer"));
+  }
+  say();
+  say(
+    "  " + c.dim("Funnel: ") + `${s.contacted} contacted \xB7 ${s.replied} replied ` + c.dim(`(${s.replyRatePct}%)`) + ` \xB7 ${s.interested} interested \xB7 ${s.won} won` + c.dim(` \xB7 ${s.awaitingReply} awaiting reply`)
+  );
+  say();
+}
+async function cmdReport(argv) {
+  const { flags, rest } = parseArgs(argv);
+  const json = !!flags.json;
+  const id = Number(flags.id ?? rest[0]);
+  if (!id || Number.isNaN(id)) {
+    const err = "Usage: sproutkit report <leadId>";
+    json ? emitJson({ ok: false, error: err }) : say(c.red("  " + err));
+    process.exitCode = 1;
+    return;
+  }
+  const status = json ? void 0 : new Status();
+  if (status) status.start(`Reading numbers for #${id}`);
+  try {
+    const r = await runTool("site_report", { id }, makeCtx({ json, status }));
+    if (r && r.ok === false) {
+      if (status) status.done(false, r.error ?? "No stats");
+      if (json) emitJson(r);
+      process.exitCode = 1;
+      return;
+    }
+    if (status) status.done(true, `${r.business}`);
+    if (json) {
+      emitJson(r);
+      return;
+    }
+    const LABEL = {
+      call: "Phone calls",
+      book: "Booking clicks",
+      view: "Page views",
+      directions: "Directions",
+      email: "Email clicks",
+      menu: "Menu views"
+    };
+    say();
+    say(`  ${c.bold(String(r.business))}` + c.dim(`  \xB7  ${r.url}`));
+    say(c.dim("  Last 30 days vs the 30 before"));
+    say();
+    for (const k of ["call", "book", "view", "directions", "email", "menu"]) {
+      const now = r.last30?.[k] ?? 0;
+      const before = r.prev30?.[k] ?? 0;
+      if (!now && !before) continue;
+      let delta = "";
+      if (before) {
+        const pct = Math.round((now - before) / before * 100);
+        delta = pct === 0 ? c.dim("  no change") : (pct > 0 ? c.green : c.amber)(`  ${pct > 0 ? "+" : ""}${pct}%`);
+      } else if (now) {
+        delta = c.green("  new");
+      }
+      say(`  ${LABEL[k].padEnd(16)} ${c.bold(String(now).padStart(5))}${delta}`);
+    }
+    const total = Object.values(r.allTime ?? {}).reduce((a, b) => a + b, 0);
+    if (!total) {
+      say(c.dim("  Nothing recorded yet \u2014 either it's very new, or it was built before analytics shipped."));
+    }
+    say();
+  } catch (e) {
+    if (status) status.done(false, "Report failed");
+    json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));
+    process.exitCode = 1;
+  }
+}
 async function cmdRegenerate(argv) {
   const { flags, rest } = parseArgs(argv);
   const json = !!flags.json;
@@ -97602,6 +99140,13 @@ COMMANDS:
 - sproutkit book "<Business Name, Town>" --json                 \u2014 ONE-SHOT: look up any business (even not a lead), read their site, build them a standalone booking page
 - sproutkit book <id> --json [--standalone] [--instructions "..."] [--archetype slots|reservation|enquiry] [--email x@y.com]  \u2014 booking site (--standalone = its own URL for clients who already have a website)
 - sproutkit outreach --json [--ids 3,5]                         \u2014 prepare outreach links
+- sproutkit reply <id> --interested|--not-interested|--no-answer|--callback --json  \u2014 log a response
+- sproutkit followups [--days 3] --json                        \u2014 who never replied + funnel stats
+- sproutkit report <id> --json                                 \u2014 a live site's calls/bookings/views
+- sproutkit brand --show                                       \u2014 the agency's own details (invoices, credits)
+- sproutkit invoice <id> --items "Website:1200,Booking:450" --json  \u2014 PDF invoice on their letterhead
+- sproutkit invoice list [--unpaid] | invoice paid <number>     \u2014 invoice ledger
+- sproutkit letter <id> --subject "..." --body "..." --json     \u2014 letter/proposal on the letterhead
 - sproutkit pipeline x3 --json [--book] [--limit 10]            \u2014 full pipeline (build\u2192booking\u2192outreach) for many clients concurrently
 
 If no command fits the request, say so in one line and name the closest thing you can do. Never invent results.`;
@@ -97785,7 +99330,7 @@ async function main() {
     closeTty();
     return;
   }
-  if (arg === "find" || arg === "list" || arg === "build" || arg === "build-all" || arg === "regenerate" || arg === "cms" || arg === "book" || arg === "handover" || arg === "outreach" || arg === "pipeline") {
+  if (arg === "find" || arg === "list" || arg === "build" || arg === "build-all" || arg === "regenerate" || arg === "cms" || arg === "book" || arg === "handover" || arg === "brand" || arg === "invoice" || arg === "letter" || arg === "reply" || arg === "followups" || arg === "report" || arg === "outreach" || arg === "pipeline") {
     const subArgs = process.argv.slice(3);
     if (subArgs.includes("--help") || subArgs.includes("-h")) {
       const USAGE = {
@@ -97825,6 +99370,41 @@ async function main() {
           '  --instructions "\u2026"   e.g. "45-min slots, add beard trim \xA312"',
           "  --email <addr>       owner email for booking notifications"
         ],
+        brand: [
+          'sproutkit brand --name "Your Studio" --email you@x.com [--vat-rate 20]',
+          "  your agency identity \u2014 goes on invoices, letters, the site footer",
+          "  credit, the demo banner and the /admin title",
+          "  --interactive        walk through every field",
+          "  --show               print what's currently set"
+        ],
+        invoice: [
+          'sproutkit invoice <leadId> --items "Website build:1200,Booking:450"',
+          "  renders a PDF invoice on your letterhead",
+          '  quantities:          --items "Monthly hosting:12x25"',
+          "  --due <days>         payment terms (default 14)",
+          "  sproutkit invoice list [--unpaid]",
+          "  sproutkit invoice paid INV-2026-001"
+        ],
+        letter: [
+          'sproutkit letter <leadId> --subject "..." --body "..."',
+          "  a letter/proposal on the same letterhead",
+          "  --body-file <path>   read the body from a file",
+          `  --to "Name"          write to someone who isn't a lead`
+        ],
+        reply: [
+          "sproutkit reply <leadId> --interested | --not-interested | --no-answer",
+          "  log how a business responded, so follow-ups know who to chase",
+          "  --wrong-number | --callback",
+          '  --note "wants menu options first"'
+        ],
+        followups: [
+          "sproutkit followups [--days 3]",
+          "  who was contacted and never replied, plus your funnel stats"
+        ],
+        report: [
+          "sproutkit report <leadId>",
+          "  a client site's calls/bookings/views, last 30 days vs the 30 before"
+        ],
         handover: [
           "sproutkit handover <leadId> [--domain thesalon.co.uk]",
           "  the paid-deliverable step: removes the DEMO banner, attaches the",
@@ -97867,6 +99447,12 @@ async function main() {
     else if (arg === "cms") await cmdCms(subArgs);
     else if (arg === "book") await cmdBook(subArgs);
     else if (arg === "handover") await cmdHandover(subArgs);
+    else if (arg === "brand") await cmdBrand(subArgs);
+    else if (arg === "invoice") await cmdInvoice(subArgs);
+    else if (arg === "letter") await cmdLetter(subArgs);
+    else if (arg === "reply") await cmdReply(subArgs);
+    else if (arg === "followups") await cmdFollowups(subArgs);
+    else if (arg === "report") await cmdReport(subArgs);
     else if (arg === "pipeline") await cmdPipeline(subArgs);
     else await cmdOutreach(subArgs);
     closeTty();