crawlforge-mcp-server 5.6.0 → 5.6.2

package/CLAUDE.md

@@ -60,9 +60,9 @@ These guidelines are working if: fewer unnecessary changes in diffs, fewer rewri
 
 ## Project Overview
 
-CrawlForge MCP Server - A professional MCP (Model Context Protocol) server providing 28 web scraping, crawling, and content processing tools (5 inline + 23 advanced).
+CrawlForge MCP Server - A professional MCP (Model Context Protocol) server providing 29 web scraping, crawling, and content processing tools (6 inline + 23 advanced).
 
-**Current Version:** 5.3.0
+**Current Version:** 5.6.0
 
 ## Development Commands
 
@@ -75,11 +75,6 @@ npm run setup
 # Or provide API key via environment:
 export CRAWLFORGE_API_KEY="your_api_key_here"
 
-# Creator Mode (for package maintainer only)
-# Set your creator secret in .env file:
-# CRAWLFORGE_CREATOR_SECRET=your-secret-uuid
-# This enables unlimited access for development/testing
-
 # Run the server (production)
 npm start
 
@@ -172,13 +167,13 @@ Tools are organized in subdirectories by category:
 - `tracking/` - trackChanges
 - `llmstxt/` - generateLLMsTxt
 
-### Available MCP Tools (28 total)
+### Available MCP Tools (29 total)
 
-**Basic Tools (server.js inline, 5):**
-fetch_url, extract_text, extract_links, extract_metadata, scrape_structured
+**Basic Tools (server.js inline, 6):**
+fetch_url, extract_text, extract_links, extract_metadata, extract_embedded_state, scrape_structured
 
 **Advanced Tools (23):**
-search_web, serp_rank, reddit_search, crawl_deep, map_site, extract_content, process_document, summarize_content, analyze_content, extract_structured, extract_with_llm, list_ollama_models, batch_scrape, scrape_with_actions, deep_research, track_changes, generate_llms_txt, stealth_mode, localization, scrape_template, scrape, agent
+search_web, serp_rank, reddit_search, crawl_deep, map_site, extract_content, process_document, summarize_content, analyze_content, extract_structured, extract_with_llm, list_ollama_models, batch_scrape, get_batch_results, scrape_with_actions, deep_research, track_changes, generate_llms_txt, stealth_mode, localization, scrape_template, scrape, agent
 
 **serp_rank (DataForSEO):**
 - `serp_rank` — reports where a target domain ranks in Google's REAL organic results for a keyword (the SERP position Google Custom Search / `search_web` cannot give). Backed by the DataForSEO Google Organic SERP API (Live Advanced, `POST /v3/serp/google/organic/live/advanced`, HTTP Basic auth). Credentials via `DATAFORSEO_LOGIN` / `DATAFORSEO_PASSWORD`, billed to the user's own DataForSEO account (~US$0.002 per 10 results of `depth`, so $0.004 at the default `depth:20` and $0.02 at `depth:100`), separate from CrawlForge credits. When unconfigured it returns `{ configured:false }` and charges **0** credits; when configured, **Cost: 5**. Never fabricates a rank.

package/README.md

@@ -192,7 +192,7 @@ CrawlForge requires a CrawlForge API key — **every tool is metered and consume
 | `summarize_content` | 4 | Generate intelligent summaries |
 | `crawl_deep` | 4 | Deep crawl entire websites |
 | `search_web` | 5 | Search the web using Google Search API |
-| `reddit_search` | 5 | Search Reddit posts/comments or read a full thread — reddit.com blocks direct scraping, so this queries the Arctic Shift + PullPush community archives (free, no Reddit credentials). A Reddit-wide search spends a web search to discover posts, so it is priced with `search_web` |
+| `reddit_search` | 5 | Search Reddit posts/comments or read a full thread — reddit.com blocks direct scraping, so this reads the Arctic Shift community archive (free, no Reddit credentials). A Reddit-wide search spends a web search to discover posts, so it is priced with `search_web` |
 | `serp_rank` | 5 | Check where a domain ranks in Google's **real organic SERP** for a keyword (the position `search_web` can't give). Powered by DataForSEO (`DATAFORSEO_LOGIN`/`DATAFORSEO_PASSWORD`, billed to your own DataForSEO account). Returns `{ configured:false }` and charges **0** credits until configured |
 | `batch_scrape` | 5 | Process multiple URLs simultaneously |
 | `scrape_with_actions` | 5 | Browser automation chains |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crawlforge-mcp-server",
-  "version": "5.6.0",
+  "version": "5.6.2",
   "mcpName": "io.github.mysleekdesigns/crawlforge-mcp-server",
   "description": "CrawlForge MCP Server - Professional Model Context Protocol server with 29 web scraping, crawling, deep-research, and autonomous-extraction tools. Returns clean Markdown and structured JSON for Claude, Cursor, and any MCP client. Defaults to local Ollama for LLM extraction (no API key needed); OpenAI/Anthropic available as opt-in. Includes a unified multi-format scrape tool, an autonomous agent, pre-built site templates, and Camoufox stealth browsing.",
   "main": "server.js",
@@ -114,7 +114,7 @@
     "cheerio": "^1.1.2",
     "commander": "^14.0.3",
     "compromise": "^14.14.4",
-    "crawlforge-extractors": "^1.6.0",
+    "crawlforge-extractors": "^1.6.2",
     "diff": "^9.0.0",
     "dotenv": "^17.2.1",
     "franc": "^6.2.0",

package/server.js

@@ -33,6 +33,7 @@ import { LocalizationManager } from "./src/core/LocalizationManager.js";
 // Stealth scrape: format conversion + the pre-fetch compliance gate (G5/G6/G7)
 import * as cheerio from "cheerio";
 import { htmlToMarkdown } from "./src/utils/htmlToMarkdown.js";
+import { detectChallengePage } from "./src/utils/challengeDetection.js";
 import { browserPreflight } from "./src/utils/robotsGate.js";
 import { memoryMonitor } from "./src/utils/MemoryMonitor.js";
 import { config, validateConfig, getToolConfig } from "./src/constants/config.js";
@@ -105,7 +106,7 @@ const taskStore = createTaskStore({ logger });
 // Create the server
 const server = new McpServer({
   name: "crawlforge",
-  version: "5.6.0",
+  version: "5.6.2",
   description: "Production-ready MCP server with 29 web scraping, crawling, and content processing tools. Features MCP Resources (crawlforge://), Prompts, Sampling fallback, Elicitation, stealth browsing, deep research, structured extraction, embedded JavaScript state extraction, real Google SERP rank tracking, Reddit search via community archives, change tracking, local-LLM extraction via Ollama, unified multi-format scrape, and autonomous agent tool.",
   homepage: "https://www.crawlforge.dev",
   icon: "https://www.crawlforge.dev/icon.png",
@@ -1377,12 +1378,21 @@ registerToolIfEnabled("stealth_mode", {
           stealthConfig
         });
 
+        // A bot-wall interstitial arrives as HTTP 200 with a title and prose
+        // of its own; reported as a successful scrape it hid the block for
+        // three rounds (R10 Q1 → R15). Name it — the content is still returned
+        // so the caller can see what the site served.
+        const challenge = detectChallengePage(scraped);
         result = {
-          success: true,
+          success: !challenge,
           url: scraped.url,
           title: scraped.title,
           content: stealthScrapeFormats(formats, scraped)
         };
+        if (challenge) {
+          result.blocked = challenge;
+          result.error = `${challenge.vendor} served a challenge page instead of the content (${challenge.evidence}); the stealth browser did not pass it.`;
+        }
 
         // Screenshots follow the same crawlforge://screenshot/{id} pattern as
         // scrape and scrape_with_actions, so the base64 never bloats the result.
@@ -1452,6 +1462,12 @@ registerToolIfEnabled("stealth_mode", {
               ok: response ? response.ok() : null,
               title: await page.title().catch(() => null)
             };
+            const challenge = detectChallengePage({
+              title: navigation.title || '',
+              html: await page.content().catch(() => ''),
+              text: await page.innerText('body').catch(() => '')
+            });
+            if (challenge) navigation.blocked = challenge;
           }
         } finally {
           // No operation can ever reference this page again — keeping it open
@@ -1574,7 +1590,7 @@ registerToolIfEnabled("localization", {
         break;
       case 'generate_timezone_spoof':
         result = {
-          timezoneScript: await localizationManager.generateTimezoneSpoof(params.countryCode),
+          timezoneScript: await localizationManager.generateTimezoneSpoof(params.countryCode, params.timezone),
           countryCode: params.countryCode || localizationManager.getCurrentSettings().countryCode
         };
         break;

package/src/core/AgentOrchestrator.js

@@ -203,7 +203,13 @@ export class AgentOrchestrator {
       const { text } = await this._getSamplingClient().complete(planPrompt, { maxTokens: 200 });
       const lines = text.split('\n')
         .map(l => l.replace(/^[-*\d.)\s]+/, '').trim())
+        // A model that fences its list ("```\nq1\nq2\n```") or quotes each
+        // query leaks the fence and quote characters into the queries; the
+        // R14 Julia run spent two of its three searches on the literal "```".
+        .map(l => l.replace(/^```\w*\s*|\s*```$/g, '').replace(/^[`"']+|[`"']+$/g, '').trim())
         .filter(Boolean)
+        // A line with no letter or digit left is punctuation, not a query.
+        .filter(l => /[\p{L}\p{N}]/u.test(l))
         // Drop preamble/garbage lines ("Here are 3 concise web search queries:", …)
         // so they never become search query #1 and poison the URL queue.
         .filter(l =>

package/src/core/LocalizationManager.js

@@ -428,9 +428,13 @@ export class LocalizationManager extends EventEmitter {
    * @param {string} countryCode - Target country code
    * @returns {string} - JavaScript injection code
    */
-  async generateTimezoneSpoof(countryCode = null) {
+  async generateTimezoneSpoof(countryCode = null, timezone = null) {
     const targetCountry = countryCode || this.currentSettings.countryCode;
-    const config = await this.getLocalizationConfig(targetCountry);
+    let config = await this.getLocalizationConfig(targetCountry);
+    // An explicit IANA timezone wins over the country default: the tool
+    // accepted `timezone` and silently answered with the configured country's
+    // zone (Asia/Tokyo asked, Europe/Berlin returned — R14).
+    if (timezone) config = { ...config, timezone };
     
     const timezoneOffset = this.getTimezoneOffset(config.timezone);
     

package/src/core/StealthBrowserManager.js

@@ -140,47 +140,50 @@ export class StealthBrowserManager {
       }
     };
 
-    // Enhanced User agent pools with realistic patterns
+    // User agent pools. Chrome majors track the bundled Chromium (151 at
+    // playwright-core 1.62) and Firefox tracks the Camoufox build (135): a
+    // UA thirty majors behind the engine — the pool sat at 119–121 while
+    // Chrome 152 shipped — is a staleness tell for anything that reads
+    // sec-ch-ua (R15, 2026-09-04).
     this.userAgentPools = {
       chrome: {
         windows: [
-          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36'
+          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36'
         ],
         macos: [
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36'
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36'
         ],
         linux: [
-          'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
-          'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
+          'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36',
+          'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36'
         ]
       },
       firefox: {
         windows: [
-          'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0',
-          'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0'
+          'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0'
         ],
         macos: [
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0',
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0'
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0'
         ],
         linux: [
-          'Mozilla/5.0 (X11; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0',
-          'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0'
+          'Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0',
+          'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0'
         ]
       },
       safari: {
         macos: [
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15',
-          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15'
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15',
+          'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15'
         ]
       }
     };
-    
+
     // Operating system distributions for realistic user agent selection
     this.osDistribution = {
       windows: 0.75,
@@ -467,8 +470,10 @@ export class StealthBrowserManager {
         height: fingerprint.screen.height
       },
       
-      // Bypass various detections
-      bypassCSP: true,
+      // bypassCSP is deliberately NOT set: ignoring a page's Content Security
+      // Policy is "invalid behavior for a normal browser" and rebrowser's
+      // bot detector flags it red (R15, 2026-09-04). Every init script here
+      // goes through addInitScript/evaluate, which need no CSP bypass.
       javaScriptEnabled: true
     };
 
@@ -616,6 +621,14 @@ export class StealthBrowserManager {
 
     // Select browser based on distribution and OS compatibility
     let availableBrowsers = { ...this.browserDistribution };
+    // The engine decides the pool. Chromium exposes navigator.vendor
+    // "Google Inc.", window.chrome and Chrome's PDF viewer plugins, so a
+    // Firefox or Safari User-Agent on it contradicts what the page can see —
+    // sannysoft printed a Firefox UA beside "Chrome: present" (R14). Camoufox
+    // presents its own Firefox identity and never draws from this pool.
+    if (config.engine !== 'camoufox') {
+      availableBrowsers = { chrome: 1 };
+    }
     if (selectedOS === 'linux' && availableBrowsers.safari) {
       delete availableBrowsers.safari;
       // Redistribute safari's weight
@@ -696,10 +709,10 @@ export class StealthBrowserManager {
    * @param {string} [userAgent] — the selected user agent string
    */
   generateSecChUaHeader(userAgent = '') {
-    // Extract Chrome major version from the UA (e.g. "Chrome/121.0.0.0" → "121").
-    // Fall back to 121 if the UA is not a Chrome UA.
+    // Extract Chrome major version from the UA (e.g. "Chrome/151.0.0.0" → "151").
+    // Fall back to the bundled Chromium major if the UA is not a Chrome UA.
     const match = userAgent.match(/Chrome\/(\d+)/i);
-    const version = match ? match[1] : '121';
+    const version = match ? match[1] : '151';
 
     const brands = [
       { brand: 'Not_A Brand', version: '8' },
@@ -1005,7 +1018,9 @@ export class StealthBrowserManager {
       processor: selectedProcessor.name,
       architecture: 'x86_64',
       memory: Math.floor(Math.random() * 24) + 8, // 8-32 GB
-      deviceMemory: Math.pow(2, Math.floor(Math.random() * 3) + 3), // 8, 16, or 32 GB
+      // navigator.deviceMemory is capped at 8 in every Chromium build, so 16
+      // or 32 is a value no real browser reports (sannysoft CHR_MEMORY: FAIL).
+      deviceMemory: Math.random() < 0.7 ? 8 : 4,
       platform: this.selectRealisticPlatform(selectedOS)
     };
   }
@@ -1215,29 +1230,84 @@ export class StealthBrowserManager {
         })
       });
 
-      // Override plugin array
-      Object.defineProperty(navigator, 'plugins', {
-        get: function() {
-          const plugins = [
-            {
-              0: {
-                type: "application/x-google-chrome-pdf",
-                suffixes: "pdf",
-                description: "Portable Document Format"
-              },
-              description: "Portable Document Format",
-              filename: "internal-pdf-viewer",
-              length: 1,
-              name: "Chrome PDF Plugin"
-            }
-          ];
-          plugins.item = function(index) { return this[index] || null; };
-          plugins.namedItem = function(name) { 
-            return this.find(plugin => plugin.name === name) || null; 
-          };
-          return plugins;
+      // Plugin list. New headless Chromium already reports the same five PDF
+      // viewer entries as a real PluginArray, and replacing them with a plain
+      // Array fails the "plugins is of type PluginArray" check every scanner
+      // runs. Only an empty list — the legacy headless tell — is replaced.
+      if (navigator.plugins.length === 0 && typeof PluginArray !== 'undefined') {
+        // Built on the real prototypes so `instanceof PluginArray`, the
+        // toStringTag and the DOM-style accessors all hold — a plain Array here
+        // failed bot.sannysoft.com's "plugins is of type PluginArray" check.
+        // The five entries are what every desktop Chrome reports.
+        const mimeSpecs = [
+          { type: 'application/pdf', suffixes: 'pdf', description: 'Portable Document Format' },
+          { type: 'text/pdf', suffixes: 'pdf', description: 'Portable Document Format' }
+        ];
+        const makePlugin = (name) => {
+          const plugin = Object.create(Plugin.prototype);
+          const mimeTypes = mimeSpecs.map((spec) => {
+            const mimeType = Object.create(MimeType.prototype);
+            Object.defineProperties(mimeType, {
+              type: { value: spec.type },
+              suffixes: { value: spec.suffixes },
+              description: { value: spec.description },
+              enabledPlugin: { get: () => plugin }
+            });
+            return mimeType;
+          });
+          Object.defineProperties(plugin, {
+            name: { value: name },
+            filename: { value: 'internal-pdf-viewer' },
+            description: { value: 'Portable Document Format' },
+            length: { value: mimeTypes.length },
+            item: { value: (index) => mimeTypes[index] || null },
+            namedItem: { value: (type) => mimeTypes.find((m) => m.type === type) || null },
+            [Symbol.iterator]: { value: function* () { yield* mimeTypes; } }
+          });
+          mimeTypes.forEach((mimeType, index) => {
+            Object.defineProperty(plugin, index, { value: mimeType, enumerable: true });
+            Object.defineProperty(plugin, mimeType.type, { value: mimeType });
+          });
+          return plugin;
+        };
+        const plugins = [
+          'PDF Viewer', 'Chrome PDF Viewer', 'Chromium PDF Viewer',
+          'Microsoft Edge PDF Viewer', 'WebKit built-in PDF'
+        ].map(makePlugin);
+        const pluginArray = Object.create(PluginArray.prototype);
+        Object.defineProperties(pluginArray, {
+          length: { value: plugins.length },
+          item: { value: (index) => plugins[index] || null },
+          namedItem: { value: (name) => plugins.find((p) => p.name === name) || null },
+          refresh: { value: () => {} },
+          [Symbol.iterator]: { value: function* () { yield* plugins; } }
+        });
+        plugins.forEach((plugin, index) => {
+          Object.defineProperty(pluginArray, index, { value: plugin, enumerable: true });
+          Object.defineProperty(pluginArray, plugin.name, { value: plugin });
+        });
+        Object.defineProperty(navigator, 'plugins', { get: () => pluginArray });
+
+        // Real Chrome pairs those plugins with two navigator.mimeTypes entries
+        // (application/pdf, text/pdf). Five plugins beside an empty mimeTypes
+        // is its own tell — infosimples' detect-headless read "5 plugins /
+        // 0 mime types" (R15, 2026-09-04).
+        if (typeof MimeTypeArray !== 'undefined') {
+          const mimeTypeArray = Object.create(MimeTypeArray.prototype);
+          const mimeTypes = Array.from(plugins[0]);
+          Object.defineProperties(mimeTypeArray, {
+            length: { value: mimeTypes.length },
+            item: { value: (index) => mimeTypes[index] || null },
+            namedItem: { value: (type) => mimeTypes.find((m) => m.type === type) || null },
+            [Symbol.iterator]: { value: function* () { yield* mimeTypes; } }
+          });
+          mimeTypes.forEach((mimeType, index) => {
+            Object.defineProperty(mimeTypeArray, index, { value: mimeType, enumerable: true });
+            Object.defineProperty(mimeTypeArray, mimeType.type, { value: mimeType });
+          });
+          Object.defineProperty(navigator, 'mimeTypes', { get: () => mimeTypeArray });
         }
-      });
+      }
 
       // Override languages with the fingerprint's own locale — a hardcoded
       // en-US here contradicts navigator.language and Accept-Language whenever
@@ -1367,14 +1437,23 @@ export class StealthBrowserManager {
         HTMLCanvasElement.prototype.getContext = function(contextType, contextAttributes) {
           const ctx = getContext.call(this, contextType, contextAttributes);
           
-          if (contextType === 'webgl' || contextType === 'experimental-webgl') {
+          // Headless Chromium without a GPU path answers getContext('webgl')
+          // with null; wrapping it threw a TypeError where a real browser
+          // returns null, which is itself a tell.
+          if (ctx && (contextType === 'webgl' || contextType === 'experimental-webgl')) {
             const originalGetParameter = ctx.getParameter;
+            // Real Chrome answers VENDOR/RENDERER with "WebKit"/"WebKit WebGL";
+            // the GPU identity lives behind WEBGL_debug_renderer_info as the
+            // UNMASKED_VENDOR_WEBGL (37445) / UNMASKED_RENDERER_WEBGL (37446)
+            // parameters. Those are what a scanner reads, so those are spoofed.
+            const UNMASKED_VENDOR_WEBGL = 37445;
+            const UNMASKED_RENDERER_WEBGL = 37446;
             ctx.getParameter = function(parameter) {
               // Spoof specific WebGL parameters
-              if (parameter === ctx.RENDERER) {
+              if (parameter === UNMASKED_RENDERER_WEBGL) {
                 return webglConfig.renderer;
               }
-              if (parameter === ctx.VENDOR) {
+              if (parameter === UNMASKED_VENDOR_WEBGL) {
                 return webglConfig.vendor;
               }
               if (parameter === ctx.VERSION) {
@@ -1387,13 +1466,10 @@ export class StealthBrowserManager {
               return originalGetParameter.call(this, parameter);
             };
             
-            const originalGetExtension = ctx.getExtension;
-            ctx.getExtension = function(name) {
-              if (webglConfig.extensions.includes(name)) {
-                return originalGetExtension.call(this, name) || {};
-              }
-              return null;
-            };
+            // getExtension is left alone: returning null for an extension the
+            // fingerprint's list did not name made WEBGL_debug_renderer_info
+            // vanish, and a page that reads it threw a TypeError where a real
+            // browser reports a GPU (sannysoft "WebGL Vendor: Error", R14).
           }
           
           return ctx;
@@ -1797,47 +1873,34 @@ export class StealthBrowserManager {
     }
   }
 
+  /**
+   * Whether a request is dropped before it leaves the browser. Only the
+   * advanced level sheds assets, never by URL and never the document itself.
+   * @param {string} resourceType - Playwright's request.resourceType()
+   * @param {string} level - stealth level
+   * @returns {boolean}
+   */
+  static shouldAbortRequest(resourceType, level) {
+    if (level !== 'advanced') return false;
+    if (!['image', 'font', 'stylesheet'].includes(resourceType)) return false;
+    // Allow some images/fonts to maintain realism
+    return Math.random() >= 0.3;
+  }
+
   /**
    * Apply page-level stealth measures
    */
   async applyPageStealthMeasures(page, config, fingerprint) {
-    // Enhanced resource blocking with stealth considerations
+    // Resource routing. Nothing is aborted by URL any more: the old list
+    // blocked challenges.cloudflare.com and every URL containing "selenium",
+    // "webdriver" or "puppeteer" — the first meant a Cloudflare challenge
+    // could never complete (the interstitial named the blocked host), the
+    // second killed the top-level navigation to www.selenium.dev on every
+    // stealth path (R15, 2026-09-04). A vendor script that never loads is a
+    // louder tell than one that runs.
     await page.route('**/*', route => {
-      const resourceType = route.request().resourceType();
-      const url = route.request().url();
-      
-      // Block known bot detection resources
-      const blockedDomains = [
-        'botd.fpjs.io',
-        'challenges.cloudflare.com',
-        'datadome.co',
-        'perimeterx.net',
-        'distilnetworks.com'
-      ];
-      
-      if (blockedDomains.some(domain => url.includes(domain))) {
-        route.abort();
-        return;
-      }
-
-      // Don't block detection-related resources that might be expected
-      if (url.includes('webdriver') || url.includes('selenium') || url.includes('puppeteer')) {
+      if (StealthBrowserManager.shouldAbortRequest(route.request().resourceType(), config.level)) {
         route.abort();
-        return;
-      }
-
-      // Selective resource blocking based on level
-      if (config.level === 'advanced') {
-        if (['image', 'font', 'stylesheet'].includes(resourceType)) {
-          // Allow some images/fonts to maintain realism
-          if (Math.random() < 0.3) {
-            route.continue();
-          } else {
-            route.abort();
-          }
-        } else {
-          route.continue();
-        }
       } else {
         route.continue();
       }

package/src/core/analysis/ContentAnalyzer.js

@@ -6,7 +6,8 @@
 import {
   LANGUAGE_NAMES,
   cjkScriptCounts as sharedCjkScriptCounts,
-  detectLanguage as sharedDetectLanguage
+  detectLanguage as sharedDetectLanguage,
+  needsWordSegmentation
 } from '../../utils/languageDetection.js';
 import nlp from 'compromise';
 import { z } from 'zod';
@@ -168,7 +169,9 @@ export class ContentAnalyzer {
    * @returns {string[]} - Word tokens
    */
   tokenizeWords(text) {
-    return this.isCjkText(text)
+    // CJK and the unspaced South-East Asian scripts (Thai, Lao, Khmer,
+    // Burmese) have no word spaces to split on.
+    return needsWordSegmentation(text)
       ? this.segmentWords(text)
       : text.split(/\s+/).filter(w => w.length > 0);
   }

package/src/core/llm/LLMManager.js

@@ -1,4 +1,5 @@
 import { OpenAIProvider } from './OpenAIProvider.js';
+import { extractionFormat } from '../../utils/extractionFormat.js';
 import { AnthropicProvider } from './AnthropicProvider.js';
 import { OllamaProvider } from './OllamaProvider.js';
 import { Logger } from '../../utils/Logger.js';
@@ -919,7 +920,7 @@ Return the list and nothing else.`;
     const schemaFields = Object.keys(schema.properties || {}).length;
     const scaledTokens = Math.min(2000, Math.max(maxTokens, schemaFields * 100 + 500));
 
-    const systemPrompt = `You are a structured data extraction expert. Extract data from the provided content and return ONLY valid JSON that conforms to the given JSON Schema. Do not include any explanation or markdown — only the raw JSON object.`;
+    const systemPrompt = `You are a structured data extraction expert. Extract data from the provided content and return ONLY valid JSON that conforms to the given JSON Schema. Use null for any field the content does not state — never guess, infer, or fill a value from memory. Do not include any explanation or markdown — only the raw JSON object.`;
 
     const schemaStr = JSON.stringify(schema, null, 2);
     const guidance = userPrompt ? `\n\nExtraction guidance: ${userPrompt}` : '';
@@ -937,9 +938,11 @@ Extract the data and return valid JSON:`;
         systemPrompt,
         maxTokens: scaledTokens,
         temperature: 0.1,
-        // Constrain the output to a parseable object. Small local models
-        // otherwise wrap the JSON in prose and the parse below throws.
-        format: 'json'
+        // Constrain the output to the caller's shape with every field
+        // nullable, so a model shown content that does not state a field can
+        // answer null instead of being decoded into an invented string. Small
+        // local models otherwise wrap the JSON in prose and the parse throws.
+        format: extractionFormat(schema)
       });
 
       // Strip markdown code fences if present
@@ -972,7 +975,9 @@ Extract the data and return valid JSON:`;
     const required = schema.required || [];
 
     for (const field of required) {
-      if (!(field in data)) {
+      // The decoder is told to answer null for a field the content never
+      // states, so a null here is "not filled in", the same as absent.
+      if (!(field in data) || data[field] === null) {
         errors.push(`Missing required field: ${field}`);
       }
     }
@@ -980,6 +985,10 @@ Extract the data and return valid JSON:`;
     for (const [key, fieldSchema] of Object.entries(properties)) {
       if (key in data) {
         const value = data[key];
+        // A null in a field the schema does not require is the honest answer
+        // for content that never states it, not a type error (typeof null is
+        // 'object', which used to read as "expected number, got object").
+        if (value === null) continue;
         const expectedType = fieldSchema.type;
         if (expectedType) {
           const actualType = Array.isArray(value) ? 'array' : typeof value;

package/src/skills/agent-skills/crawlforge-deep-research/SKILL.md

@@ -53,8 +53,8 @@ Returns titles, URLs, snippets. Supports `lang`, `site` (domain filter),
 
 ## reddit_search (cost: 5)
 
-reddit.com 403-blocks direct scraping, so this queries the Arctic Shift and
-PullPush community archives instead (free, no Reddit credentials).
+reddit.com 403-blocks direct scraping, so this reads the Arctic Shift community
+archive instead (free, no Reddit credentials).
 
 ```json
 {
@@ -65,8 +65,10 @@ PullPush community archives instead (free, no Reddit credentials).
 
 Modes: `posts` (default), `comments`, and `thread` (a post plus its nested
 comment tree via `link_id`). Scope with `subreddit`/`author` for near-real-time
-results (Arctic Shift); an unscoped `query` searches all of Reddit via PullPush
-(best-effort — it rate-limits aggressively). `after`/`before` accept ISO dates,
+results (Arctic Shift); an unscoped `query` searches all of Reddit via web
+discovery — a site-restricted web search finds posts, then they are read from the
+archive by ID (max 10 per call, ordered by relevance, and `after`/`before` do not
+apply on that path). `after`/`before` accept ISO dates,
 epoch seconds, or offsets like `"7d"`. Scores of posts under ~36h old read 0/1
 until the archive backfills. Space calls out rather than firing them in
 parallel — the archives shed load under concurrent bursts.

package/src/tools/advanced/ScrapeWithActionsTool.js

@@ -618,6 +618,8 @@ export class ScrapeWithActionsTool extends EventEmitter {
     for (const stateData of capturedStates) {
       try {
         const $ = load(stateData.html);
+        // Never rendered as text — the same strip the batch worker does (R15).
+        $('script, style, noscript, template').remove();
 
         const state = {
           capturePoint: stateData.afterActionIndex + 1,
@@ -688,6 +690,8 @@ export class ScrapeWithActionsTool extends EventEmitter {
       // over the post-action DOM here, the one place every caller reads.
       if (chainResult?.finalHtml && (params.extractionOptions?.selectors || params.formats?.includes('text'))) {
         const $ = load(chainResult.finalHtml);
+        // Never rendered as text — the same strip the batch worker does (R15).
+        $('script, style, noscript, template').remove();
         extractResult.content = extractResult.content || {};
         if (params.extractionOptions?.selectors) {
           extractResult.content.extracted = this.extractWithSelectors($, params.extractionOptions.selectors);

package/src/tools/advanced/batchScrape/worker.js

@@ -120,7 +120,12 @@ function extractStructuredData($, selectors) {
   return extracted;
 }
 
-function generateFormats($, html, formats) {
+export function generateFormats($, html, formats) {
+  // Script, style, noscript and template bodies are never rendered text.
+  // Left in, the text format carried an entire theme-toggle script
+  // (erlang.org/downloads) and CSS rules (opennet.ru) — R15, 2026-09-04.
+  // `html` below is the raw document and stays untouched.
+  $('script, style, noscript, template').remove();
   const content = {};
   if (formats.includes('html')) content.html = html;
   if (formats.includes('text')) content.text = $('body').text().replace(/\s+/g, ' ').trim();

package/src/tools/extract/extractStructured.js

@@ -54,6 +54,37 @@ function mainContentText($, html, url) {
   return [title, flattenBodyText(load(mainHtml))].filter(Boolean).join('\n');
 }
 
+/** Characters of page text the model is shown; about 6k tokens. */
+const SHOWN_TEXT_BUDGET = 24000;
+
+/**
+ * The text the model reads: main content first, then the whole page when both
+ * fit the budget.
+ *
+ * Main content alone is what keeps the Cloudflare blog's headline from being
+ * "Skip to content", but Readability also drops the page chrome, and that is
+ * where racket-lang.org announces "Racket version 9.3 is available". A model
+ * that never sees the answer fills a required field with the nearest heading,
+ * which the provenance guard cannot fault because it carries no digits, and
+ * the full-text retry below never fires because nothing was nulled. Showing
+ * the page text after the main content puts the banner in view while the
+ * article still leads. A page too long for both gets main content alone, up
+ * to the budget — the old 6000-character cap cut a 20k-character article to
+ * its first third.
+ *
+ * @param {import('cheerio').CheerioAPI} $
+ * @param {string} html
+ * @param {string} url
+ * @param {string} textContent - whole-page text from fetchAndParse
+ * @returns {string}
+ */
+function shownText($, html, url, textContent) {
+  const main = mainContentText($, html, url);
+  if (!main) return textContent;
+  if (main.length + textContent.length > SHOWN_TEXT_BUDGET) return main;
+  return `${main}\n\n${textContent}`;
+}
+
 /**
  * Missing, null, blank string or empty array — what "the extraction did not
  * fill this field in" looks like across every extraction method.
@@ -147,6 +178,9 @@ export class ExtractStructuredTool {
         tool: 'extract_structured'
       });
 
+      // What the model reads — see shownText().
+      const shown = shownText($, html, url, textContent);
+
       // Step 3: Try LLM extraction first
       let extractionResult = null;
       let extractionMethod = 'llm';
@@ -160,9 +194,9 @@ export class ExtractStructuredTool {
         // local Ollama was never used.
         llmAvailable = await llm.ready();
         if (llmAvailable) {
-          const result = await llm.extractStructured(mainContentText($, html, url) || textContent, schema, {
+          const result = await llm.extractStructured(shown, schema, {
             prompt: prompt || '',
-            maxContentLength: 6000
+            maxContentLength: SHOWN_TEXT_BUDGET
           });
           // extractStructured swallows LLM failures and returns its keyword
           // fallback. Only accept the result as an LLM extraction when it
@@ -246,13 +280,12 @@ export class ExtractStructuredTool {
         // So when a REQUIRED field is nulled, retry once on the full page text,
         // which is exactly what the guard will accept. Only a strictly better
         // result is kept, so a retry can never make the answer worse.
-        const shownText = mainContentText($, html, url) || textContent;
-        if (guarded.missingRequired.length > 0 && shownText !== textContent && textContent) {
+        if (guarded.missingRequired.length > 0 && shown !== textContent && textContent) {
           try {
             const llm = this._ensureLLMManager(llmConfig || {});
             const retry = await llm.extractStructured(textContent, schema, {
               prompt: prompt || '',
-              maxContentLength: 6000
+              maxContentLength: SHOWN_TEXT_BUDGET
             });
             if (retry?.method === 'llm') {
               const retryGuarded = applyGuard(retry);

package/src/tools/extract/extractWithLlm.js

@@ -11,6 +11,7 @@ import { z } from 'zod';
 import { fetchAndParse } from './_fetchAndParse.js';
 import { ollamaBaseUrl, ollamaHeaders, selectOllamaModel } from '../../utils/ollamaConfig.js';
 import { verifyNumericProvenance } from '../../utils/provenance.js';
+import { extractionFormat } from '../../utils/extractionFormat.js';
 import { fenceUntrusted } from '../../utils/untrustedContent.js';
 // D1.3: SamplingClient for MCP sampling fallback (lazy — only imported if needed)
 let _SamplingClient = null;
@@ -164,16 +165,12 @@ function extractBalancedJson(str) {
  * as an object schema.
  */
 function buildInputSchema(schema) {
-  if (schema && (schema.type === 'object' || schema.properties)) {
-    return { additionalProperties: true, ...schema, type: 'object' };
-  }
-  // Flat hint map → object schema with string-typed properties for any
-  // non-object hint values (Anthropic requires a valid JSON Schema).
-  const properties = {};
-  for (const [key, val] of Object.entries(schema || {})) {
-    properties[key] = (val && typeof val === 'object') ? val : { type: 'string' };
-  }
-  return { type: 'object', properties, additionalProperties: true };
+  // Every field nullable, no `required`: the decoder must be allowed to say
+  // "not stated" — a required string it cannot leave null becomes an
+  // invention (R14: `scrape` json on racket-lang.org answered "Racket 5.1.0"
+  // for a page that says 9.3). The caller's schema still drives validation.
+  const format = extractionFormat(schema);
+  return format === 'json' ? { type: 'object', properties: {}, additionalProperties: true } : format;
 }
 
 /**
@@ -189,7 +186,7 @@ function jsonSchemaToZod(schema) {
   if (!isJsonSchema) {
     const shape = {};
     for (const [key, val] of Object.entries(schema)) {
-      shape[key] = jsonSchemaToZod(typeof val === 'string' ? { type: val } : val).optional();
+      shape[key] = jsonSchemaToZod(typeof val === 'string' ? { type: val } : val).nullable().optional();
     }
     return z.object(shape).passthrough();
   }
@@ -206,7 +203,11 @@ function jsonSchemaToZod(schema) {
       const required = Array.isArray(schema.required) ? schema.required : [];
       for (const [key, val] of Object.entries(schema.properties || {})) {
         const field = jsonSchemaToZod(val);
-        shape[key] = required.includes(key) ? field : field.optional();
+        // The model is told to answer null for a field the content never
+        // states, so null is the honest answer for a field the schema does
+        // not require — not a type violation. A required field stays strict:
+        // null there is exactly what the caller needs to hear about.
+        shape[key] = required.includes(key) ? field : field.nullable().optional();
       }
       return z.object(shape).passthrough();
     }
@@ -561,7 +562,8 @@ export class ExtractWithLlm {
     }
 
     const systemMessage =
-      'You extract structured data from web content per the user\'s instructions. Return JSON only.';
+      'You extract structured data from web content per the user\'s instructions. Return JSON only. ' +
+      'Use null for any field the content does not state — never guess, infer, or fill a value from memory.';
 
     const { userMessage, truncated: inputTruncated, original_length } = buildUserMessage(prompt, text, schema);
 

package/src/tools/scrape/unifiedScrape.js

@@ -281,19 +281,21 @@ export class UnifiedScrapeTool {
       if (fmt && typeof fmt === 'object' && fmt.type === 'json') {
         try {
           const extractWithLlm = await this._getExtractWithLlm();
-          let text;
-          if (onlyMainContent) {
-            text = htmlToMarkdown(getMainHtml());
-          } else {
-            // Script and template bodies are never rendered, but $('body').text()
-            // includes them — on a Shopify storefront that was 179KB of
-            // JavaScript, more than the page's real text, and it carried the
-            // very "Sold out" strings the strip had just removed from the DOM.
-            const { load } = await import('cheerio');
-            const $visible = load(html);
-            $visible('script, style, noscript, template').remove();
-            text = $visible('body').text().replace(/\s+/g, ' ').trim();
-          }
+          // Script and template bodies are never rendered, but $('body').text()
+          // includes them — on a Shopify storefront that was 179KB of
+          // JavaScript, more than the page's real text, and it carried the
+          // very "Sold out" strings the strip had just removed from the DOM.
+          const { load } = await import('cheerio');
+          const $visible = load(html);
+          $visible('script, style, noscript, template').remove();
+          const pageText = $visible('body').text().replace(/\s+/g, ' ').trim();
+          // Main content first, then the whole page: Readability drops the page
+          // chrome, and racket-lang.org states its version there — shown the
+          // main content alone, the model answered "Racket" for a version the
+          // page gives as 9.3 (R14). The article still leads.
+          const text = onlyMainContent
+            ? `${htmlToMarkdown(getMainHtml())}\n\n${pageText}`
+            : pageText;
           const result = await extractWithLlm.execute({
             content: text,
             prompt: fmt.prompt || 'Extract structured data from this page content.',

package/src/tools/search/adapters/redditOfficialApi.js

@@ -133,7 +133,7 @@ export class RedditOfficialApiAdapter {
     // The official API cannot honor an arbitrary date range (only coarse `t`
     // buckets). Reject so `auto` mode falls back to the archives, which can.
     if (v.after || v.before) {
-      throw new Error('official Reddit API cannot filter by date range — unset after/before, or use source:"arctic_shift"/"pullpush"');
+      throw new Error('official Reddit API cannot filter by date range — unset after/before, or use source:"arctic_shift" (scoped searches only — date filters need an archive)');
     }
     const sr = stripNamePrefix(subreddit);
     const au = stripNamePrefix(author);

package/src/tools/search/redditSearch.js

@@ -166,12 +166,12 @@ export class RedditSearchTool {
         throw new Error('source:"reddit_api" needs Reddit app credentials — set REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET (create a "script" app at https://www.reddit.com/prefs/apps)');
       }
       if (v.mode === 'comments') {
-        throw new Error('the official Reddit API has no comment full-text search — use comments mode with source:"arctic_shift"/"pullpush", or read a whole thread with mode:"thread"');
+        throw new Error('the official Reddit API has no comment full-text search — use comments mode with source:"arctic_shift" (scoped) or "web_discovery" (unscoped), or read a whole thread with mode:"thread"');
       }
       order = ['reddit_api'];
     } else if (v.source === 'arctic_shift') {
       if (!arcticPossible) {
-        throw new Error('Arctic Shift cannot keyword-search across all of Reddit — add a subreddit or author scope, or use source:"pullpush"');
+        throw new Error('Arctic Shift cannot keyword-search across all of Reddit — add a subreddit or author scope, or drop source so auto routes the query to web_discovery');
       }
       order = ['arctic_shift'];
     } else if (v.source === 'pullpush') {

package/src/utils/challengeDetection.js

@@ -0,0 +1,68 @@
+/**
+ * challengeDetection.js — recognise a bot-wall interstitial served as a page.
+ *
+ * Cloudflare, Amazon, DataDome, PerimeterX and Akamai all answer a blocked
+ * request with HTTP 200 and a page of their own: a title, some prose and a
+ * challenge script. Reported as a successful scrape, that page hides the
+ * block — producthunt.com came back "success:true, title: Just a moment..."
+ * for three regression rounds (R10 Q1 → R15, 2026-09-04). A title match is
+ * definitive; a script or form marker is definitive only on a short page,
+ * because a real page can legitimately embed a Turnstile widget.
+ */
+
+const SHORT_PAGE_CHARS = 4000;
+
+const CHALLENGES = [
+  {
+    vendor: 'cloudflare',
+    title: /^just a moment/i,
+    markers: /challenges\.cloudflare\.com|cf-chl-|_cf_chl_opt|cf_chl_rc_|window\._cf_chl/i,
+    evidence: 'a Cloudflare challenge script'
+  },
+  {
+    vendor: 'amazon',
+    // The robot check is the only Amazon page whose form posts to validateCaptcha.
+    definitive: /action="[^"]*validateCaptcha/i,
+    evidence: 'the validateCaptcha form'
+  },
+  {
+    vendor: 'datadome',
+    markers: /captcha-delivery\.com\/captcha|geo\.captcha-delivery\.com|dd\.captcha/i,
+    evidence: 'a DataDome captcha frame'
+  },
+  {
+    vendor: 'perimeterx',
+    markers: /px-captcha|_pxCaptcha|human-challenge/i,
+    evidence: 'a PerimeterX / HUMAN challenge element'
+  },
+  {
+    vendor: 'akamai',
+    title: /^access denied/i,
+    markers: /errors\.edgesuite\.net/i,
+    evidence: 'an Akamai access-denied page'
+  }
+];
+
+/**
+ * @param {{ title?: string, html?: string, text?: string }} page
+ * @returns {{ vendor: string, evidence: string } | null}
+ */
+export function detectChallengePage({ title = '', html = '', text = '' } = {}) {
+  const cleanTitle = (title || '').trim();
+  const visible = (text || '').replace(/\s+/g, ' ').trim();
+  const shortPage = visible.length < SHORT_PAGE_CHARS;
+  for (const challenge of CHALLENGES) {
+    if (challenge.title && challenge.title.test(cleanTitle)) {
+      return { vendor: challenge.vendor, evidence: `title "${cleanTitle}"` };
+    }
+    if (challenge.definitive && challenge.definitive.test(html)) {
+      return { vendor: challenge.vendor, evidence: challenge.evidence };
+    }
+    if (shortPage && challenge.markers && challenge.markers.test(html)) {
+      return { vendor: challenge.vendor, evidence: `${challenge.evidence} on a ${visible.length}-character page` };
+    }
+  }
+  return null;
+}
+
+export default detectChallengePage;

package/src/utils/extractionFormat.js

@@ -0,0 +1,52 @@
+/**
+ * The constrained-decoding shape for an LLM extraction.
+ *
+ * A caller's JSON Schema says which fields are REQUIRED of the result. Handed
+ * to the model verbatim as the output format, that word means something else:
+ * the decoder cannot emit null for a required string, so a model shown content
+ * that never states the field is forced to invent one. R14 caught it twice on
+ * the same day — racket-lang.org's version came back as the page title,
+ * rust-lang.org's as the word "stable" — while the same model on the same
+ * pages answered correctly the moment the fact was in front of it.
+ *
+ * So the format the model decodes against makes every property nullable and
+ * drops `required`. The caller's schema still drives validation and the
+ * provenance retry: a required field the model answered null is what those
+ * exist to catch, and a null is honest where a guess is not.
+ *
+ * @param {object} schema - caller's JSON Schema (or a flat hint map)
+ * @returns {object|'json'} an object schema for the decoder, or 'json' when the
+ *   input carries no properties to constrain
+ */
+export function extractionFormat(schema) {
+  if (!schema || typeof schema !== 'object') return 'json';
+  const source = schema.properties && typeof schema.properties === 'object'
+    ? schema
+    : { type: 'object', properties: flatHintProperties(schema) };
+  if (!source.properties || Object.keys(source.properties).length === 0) return 'json';
+
+  const properties = {};
+  for (const [key, prop] of Object.entries(source.properties)) {
+    properties[key] = nullable(prop);
+  }
+  const { required: _required, ...rest } = source;
+  return { additionalProperties: true, ...rest, type: 'object', properties };
+}
+
+/** A flat `{ field: 'string' }` hint map as JSON-Schema properties. */
+function flatHintProperties(hints) {
+  const properties = {};
+  for (const [key, val] of Object.entries(hints)) {
+    properties[key] = (val && typeof val === 'object') ? val : { type: 'string' };
+  }
+  return properties;
+}
+
+/** The property with `null` admitted to its type, when it names a single type. */
+function nullable(prop) {
+  if (!prop || typeof prop !== 'object' || Array.isArray(prop)) return prop;
+  if (typeof prop.type !== 'string' || prop.type === 'null' || prop.type === 'object') return prop;
+  return { ...prop, type: [prop.type, 'null'] };
+}
+
+export default extractionFormat;

package/src/utils/languageDetection.js

@@ -158,6 +158,26 @@ export function isCjkText(text) {
   return cjkScriptCounts(text).share >= CJK_SCRIPT_THRESHOLD;
 }
 
+// Scripts written without spaces between words. Thai, Lao, Khmer and Burmese
+// need the same dictionary segmentation CJK gets; on the whitespace split a
+// 290-character Thai paragraph counted as 4 words (R15, 2026-09-04).
+const UNSPACED_SCRIPT_RE = /[\p{Script=Thai}\p{Script=Lao}\p{Script=Khmer}\p{Script=Myanmar}]/gu;
+
+/**
+ * True when the text needs Intl.Segmenter to find word boundaries — a CJK
+ * script, or one of the South-East Asian scripts that write no word spaces.
+ *
+ * @param {string} text
+ * @returns {boolean}
+ */
+export function needsWordSegmentation(text) {
+  if (isCjkText(text)) return true;
+  const letters = (text.match(/\p{L}/gu) || []).length;
+  if (letters === 0) return false;
+  const unspaced = (text.match(UNSPACED_SCRIPT_RE) || []).length;
+  return unspaced / letters >= CJK_SCRIPT_THRESHOLD;
+}
+
 /**
  * Detect the language of a piece of text.
  *

package/src/utils/provenance.js

@@ -228,6 +228,28 @@ function literalReadings(value) {
   return [...spellings];
 }
 
+/** A version with two or more dot-separated numeric segments, inside prose. */
+const EMBEDDED_VERSION = /(?<![\w.])v?\d+(?:\.\d+){2,}(?![\w.])/gi;
+
+/**
+ * The spellings of every version-shaped token inside a prose string, or null
+ * when the value is not prose or carries none. "Racket 5.1.0" on a page that
+ * says 9.3 is the case that found this: the whole value is prose, so
+ * `literalReadings` left it alone, and the fabricated version rode through.
+ *
+ * @param {*} value
+ * @returns {string[][]|null} one spelling list per token
+ */
+function embeddedVersionReadings(value) {
+  if (typeof value !== 'string' || !/\s/.test(value.trim())) return null;
+  const tokens = value.match(EMBEDDED_VERSION);
+  if (!tokens) return null;
+  return tokens.map((token) => {
+    const lower = token.toLowerCase();
+    return [...new Set([lower, lower.replace(VERSION_PREFIX, '')])];
+  });
+}
+
 /**
  * Replace every numeric value that is not present in the source with null.
  *
@@ -286,8 +308,22 @@ export function verifyNumericProvenance(data, source) {
     // Not a number, but possibly a version/date/SKU-shaped literal, which is
     // the other thing a model invents when the page does not say.
     const literals = literalReadings(node);
-    if (literals === null) return node;
-    if (inSource(literals)) {
+    if (literals !== null) {
+      if (inSource(literals)) {
+        verified++;
+        return node;
+      }
+      unverified.push({ path: path || '(root)', value: node, reason: 'not_found_in_source' });
+      return null;
+    }
+
+    // Prose that carries a version-shaped token ("Racket 5.1.0"): the words
+    // may be the model's own re-wording, but the token has exactly one
+    // spelling and is checked like a bare one. Decimals ("1.5 million") and
+    // bare integers stay prose — a model may legitimately re-word those.
+    const embedded = embeddedVersionReadings(node);
+    if (embedded === null) return node;
+    if (embedded.every((spellings) => inSource(spellings))) {
       verified++;
       return node;
     }

package/src/utils/robotsGate.js

@@ -135,6 +135,29 @@ export async function robotsPreflight(url, options = {}) {
  *   warnings: string[], overridden: boolean }>}
  * @throws {BlockedHostError|RobotsDisallowedError}
  */
+/**
+ * The headers an HTTP page fetch carries: identity, the Web Bot Auth signature
+ * when one is configured, and an EMPTY Accept-Language.
+ *
+ * Node's fetch adds `Accept-Language: *` whenever the caller sets none. Amazon
+ * answers this identity with a captcha interstitial when ANY Accept-Language
+ * rides along — `*`, en-US, de-DE, a full browser list — and serves the page
+ * when the header is absent (R14, bisected header by header with curl, then
+ * reproduced with Node's fetch). fetch offers no way to leave the header out,
+ * but an empty value is sent as-is instead of `*`, and Amazon treats empty as
+ * absent. The identity stays honest; no language preference is claimed.
+ * @param {string} [userAgent]
+ * @param {Record<string,string>} [signature]
+ * @returns {Record<string,string>}
+ */
+export function outboundHeaders(userAgent, signature = {}) {
+  return {
+    ...identityHeaders({ userAgent }),
+    'Accept-Language': '',
+    ...signature
+  };
+}
+
 export async function preflightFetch(url, options = {}) {
   const decision = await robotsPreflight(url, options);
   if (!decision.allowed) {
@@ -153,7 +176,7 @@ export async function preflightFetch(url, options = {}) {
   const signature = signRequestHeaders(url) || {};
 
   return {
-    headers: { ...identityHeaders({ userAgent: decision.userAgent }), ...signature },
+    headers: outboundHeaders(decision.userAgent, signature),
     userAgent: decision.userAgent,
     warnings: decision.warnings,
     overridden: decision.overridden