mcp-scraper 0.21.2 → 0.21.4

package/dist/bin/api-server.cjs

@@ -3602,6 +3602,7 @@ __export(db_exports, {
   creditMc: () => creditMc,
   deactivateUser: () => deactivateUser,
   debitMc: () => debitMc,
+  debitMcIdempotent: () => debitMcIdempotent,
   deleteWorkflowSchedule: () => deleteWorkflowSchedule,
   expireOldLots: () => expireOldLots,
   failJob: () => failJob,
@@ -3670,12 +3671,27 @@ __export(db_exports, {
   setStripeCustomerId: () => setStripeCustomerId,
   setSubscriptionTier: () => setSubscriptionTier,
   setUserMemoryCreds: () => setUserMemoryCreds,
+  settleDebitMcIdempotent: () => settleDebitMcIdempotent,
   startHarvestAttempt: () => startHarvestAttempt,
   stripeEventAlreadyProcessed: () => stripeEventAlreadyProcessed,
   updateKpoJobState: () => updateKpoJobState,
   upsertPageSnapshot: () => upsertPageSnapshot,
   verifyPassword: () => verifyPassword
 });
+function sqlStringList(values) {
+  return values.map((value) => `'${value.replaceAll("'", "''")}'`).join(", ");
+}
+async function hasCurrentCoreSchema(db) {
+  const checks = [
+    `(SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN (${sqlStringList(CORE_SCHEMA_TABLES)})) = ${CORE_SCHEMA_TABLES.length}`,
+    `(SELECT COUNT(*) FROM sqlite_master WHERE type = 'index' AND name IN (${sqlStringList(CORE_SCHEMA_INDEXES)})) = ${CORE_SCHEMA_INDEXES.length}`,
+    ...Object.entries(CORE_SCHEMA_COLUMNS).map(
+      ([table, columns]) => `(SELECT COUNT(*) FROM pragma_table_info('${table}') WHERE name IN (${sqlStringList(columns)})) = ${columns.length}`
+    )
+  ];
+  const result = await db.execute(`SELECT ${checks.join(" AND ")} AS ready`);
+  return Number(result.rows[0]?.ready ?? 0) === 1;
+}
 function getDb() {
   if (!_db) _db = (0, import_http.createClient)({ url: DB_URL, authToken: DB_TOKEN });
   return _db;
@@ -3685,6 +3701,31 @@ function setDbForTesting(client2) {
 }
 async function migrate() {
   const db = getDb();
+  let applied;
+  try {
+    applied = await db.execute({
+      sql: "SELECT 1 AS applied FROM schema_migrations WHERE version = ? LIMIT 1",
+      args: [CORE_SCHEMA_VERSION]
+    });
+  } catch (error) {
+    const message = error instanceof Error ? error.message.toLowerCase() : String(error).toLowerCase();
+    if (!message.includes("no such table") || !message.includes("schema_migrations")) throw error;
+    await db.execute(`
+      CREATE TABLE IF NOT EXISTS schema_migrations (
+        version    TEXT PRIMARY KEY,
+        applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+    applied = { rows: [] };
+  }
+  if (applied.rows.length > 0) return;
+  if (await hasCurrentCoreSchema(db)) {
+    await db.execute({
+      sql: "INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",
+      args: [CORE_SCHEMA_VERSION]
+    });
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS users (
       id            INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -3918,6 +3959,19 @@ async function migrate() {
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS billing_events_user_created_at ON billing_events(user_id, created_at DESC)`);
   await db.execute(`CREATE INDEX IF NOT EXISTS billing_events_authorization ON billing_events(authorization_id)`);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS billing_debits (
+      idempotency_key TEXT PRIMARY KEY,
+      user_id         INTEGER NOT NULL REFERENCES users(id),
+      amount_mc       INTEGER NOT NULL,
+      operation       TEXT NOT NULL,
+      description     TEXT,
+      status          TEXT NOT NULL DEFAULT 'claimed',
+      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+      applied_at      TEXT
+    )
+  `);
+  await db.execute(`CREATE INDEX IF NOT EXISTS billing_debits_user_status ON billing_debits(user_id, status)`);
   await db.execute(`
     CREATE TABLE IF NOT EXISTS site_audit_jobs (
       id            TEXT    PRIMARY KEY,
@@ -4165,6 +4219,13 @@ async function migrate() {
     )
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS page_snapshots_user_checked_at ON page_snapshots(user_id, checked_at DESC)`);
+  if (!await hasCurrentCoreSchema(db)) {
+    throw new Error("core schema migration finished without all required tables, indexes, and columns");
+  }
+  await db.execute({
+    sql: "INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",
+    args: [CORE_SCHEMA_VERSION]
+  });
 }
 async function registerClient(clientId, redirectUris, name) {
   await getDb().execute({
@@ -4627,6 +4688,17 @@ async function upsertPageSnapshot(userId, url, snapshot) {
     args: [userId, url, snapshot.contentHash, snapshot.content, snapshot.title, snapshot.contentBytes, snapshot.truncated ? 1 : 0]
   });
 }
+function serializeRequestEventResult(result) {
+  if (result == null) return null;
+  const serialized = JSON.stringify(result);
+  const bytes = Buffer.byteLength(serialized, "utf8");
+  if (bytes <= REQUEST_EVENT_RESULT_MAX_BYTES) return serialized;
+  return JSON.stringify({
+    truncated: true,
+    originalBytes: bytes,
+    sha256: (0, import_node_crypto.createHash)("sha256").update(serialized).digest("hex")
+  });
+}
 function rowToRequestEvent(row) {
   const rawResult = row.result != null ? String(row.result) : null;
   return {
@@ -4657,7 +4729,7 @@ async function logRequestEvent(input) {
       input.query,
       input.location ?? null,
       input.resultCount ?? null,
-      input.result != null ? JSON.stringify(input.result) : null,
+      serializeRequestEventResult(input.result),
       input.error ?? null
     ]
   });
@@ -4666,7 +4738,7 @@ async function logRequestEvent(input) {
 async function listRequestEvents(userId, limit = 100) {
   const res = await getDb().execute({
     sql: `
-      SELECT id, user_id, source, status, query, location, result_count, result, error, created_at
+      SELECT id, user_id, source, status, query, location, result_count, NULL AS result, error, created_at
       FROM request_events
       WHERE user_id = ?
       ORDER BY created_at DESC
@@ -5289,6 +5361,241 @@ async function debitMc(userId, mc, operation, description) {
   const res = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
   return { ok: true, balance_mc: Number(res.rows[0]?.balance_mc ?? 0) };
 }
+async function debitMcIdempotent(userId, mc, operation, description, idempotencyKey) {
+  if (!Number.isSafeInteger(mc) || mc <= 0) throw new Error("idempotent debit amount must be a positive integer");
+  if (!idempotencyKey || idempotencyKey.length > 500) throw new Error("idempotent debit key is required and must be bounded");
+  const db = getDb();
+  await ensureMigrated(userId);
+  let results;
+  try {
+    results = await db.batch([
+      {
+        sql: "UPDATE billing_debits SET amount_mc = ? WHERE idempotency_key = ? AND user_id = ? AND operation = ? AND description = ? AND status = 'claimed'",
+        args: [mc, idempotencyKey, userId, operation, description]
+      },
+      {
+        sql: "INSERT OR IGNORE INTO billing_debits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",
+        args: [idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: "UPDATE users SET balance_mc = balance_mc - ? WHERE id = ? AND balance_mc >= ? AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed')",
+        args: [mc, userId, mc, idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: "UPDATE billing_debits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed' AND changes() = 1",
+        args: [idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: `WITH ordered AS MATERIALIZED (
+                SELECT id,
+                       remaining_mc,
+                       COALESCE(SUM(remaining_mc) OVER (
+                         ORDER BY expires_at ASC, granted_at ASC, id ASC
+                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
+                       ), 0) AS prior_mc
+                FROM credit_lots
+                WHERE user_id = ? AND remaining_mc > 0 AND expires_at > datetime('now')
+              ), allocation AS (
+                SELECT id, MIN(remaining_mc, MAX(0, ? - prior_mc)) AS take_mc
+                FROM ordered
+              )
+              UPDATE credit_lots
+              SET remaining_mc = remaining_mc - COALESCE((SELECT take_mc FROM allocation WHERE allocation.id = credit_lots.id), 0)
+              WHERE id IN (SELECT id FROM allocation WHERE take_mc > 0)
+                AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND status = 'applying')`,
+        args: [userId, mc, idempotencyKey]
+      },
+      {
+        sql: "INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, -amount_mc, operation, description FROM billing_debits WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey]
+      },
+      {
+        sql: "UPDATE billing_debits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey]
+      }
+    ], "write");
+  } catch (error) {
+    try {
+      const recovered = await db.execute({
+        sql: "SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? AND status = 'applied' LIMIT 1",
+        args: [idempotencyKey]
+      });
+      const row2 = recovered.rows[0];
+      if (row2 && Number(row2.user_id) === userId && Number(row2.amount_mc) === mc && String(row2.operation) === operation && String(row2.description) === description) {
+        const balance2 = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+        return { ok: true, balance_mc: Number(balance2.rows[0]?.balance_mc ?? 0), duplicate: true };
+      }
+    } catch {
+    }
+    throw error;
+  }
+  const claim = await db.execute({
+    sql: "SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? LIMIT 1",
+    args: [idempotencyKey]
+  });
+  const row = claim.rows[0];
+  if (!row || Number(row.user_id) !== userId || Number(row.amount_mc) !== mc || String(row.operation) !== operation || String(row.description) !== description) {
+    throw new Error("idempotent debit key conflicts with another debit");
+  }
+  const balance = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+  return {
+    ok: String(row.status) === "applied",
+    balance_mc: Number(balance.rows[0]?.balance_mc ?? 0),
+    duplicate: results[2]?.rowsAffected === 0 && String(row.status) === "applied"
+  };
+}
+async function settleDebitMcIdempotent(userId, debitIdempotencyKey, finalAmountMc, refundOperation, description, sourceSurface) {
+  if (!Number.isSafeInteger(finalAmountMc) || finalAmountMc < 0) {
+    throw new Error("idempotent debit settlement amount must be a non-negative integer");
+  }
+  if (!debitIdempotencyKey || debitIdempotencyKey.length > 500) {
+    throw new Error("idempotent debit settlement key is required and must be bounded");
+  }
+  if (!refundOperation || !sourceSurface) {
+    throw new Error("idempotent debit settlement operation and source are required");
+  }
+  const db = getDb();
+  await ensureMigrated(userId);
+  const settlementKey = `debit-settlement:${(0, import_node_crypto.createHash)("sha256").update(debitIdempotencyKey).digest("hex")}`;
+  const billingClass = "wallet_hold_settlement";
+  const eventId = (0, import_node_crypto.randomUUID)();
+  const metadata = JSON.stringify({ debitIdempotencyKey, refundOperation, description });
+  const readReceipt = async () => {
+    const receipt2 = await db.execute({
+      sql: `SELECT e.user_id,
+                   e.status,
+                   e.amount_mc AS final_amount_mc,
+                   e.billing_class,
+                   e.source_surface,
+                   d.amount_mc AS held_amount_mc
+            FROM billing_events e
+            JOIN billing_debits d ON d.idempotency_key = ?
+            WHERE e.idempotency_key = ?
+              AND d.user_id = e.user_id
+              AND d.status = 'applied'
+            LIMIT 1`,
+      args: [debitIdempotencyKey, settlementKey]
+    });
+    const row = receipt2.rows[0];
+    if (!row) return null;
+    if (Number(row.user_id) !== userId || String(row.billing_class) !== billingClass || String(row.source_surface) !== sourceSurface) {
+      throw new Error("idempotent debit settlement key conflicts with another settlement");
+    }
+    if (String(row.status) !== "settled") return null;
+    const heldAmountMc = Number(row.held_amount_mc);
+    const durableFinalAmountMc = Number(row.final_amount_mc);
+    if (!Number.isSafeInteger(heldAmountMc) || !Number.isSafeInteger(durableFinalAmountMc) || durableFinalAmountMc < 0 || durableFinalAmountMc > heldAmountMc) {
+      throw new Error("idempotent debit settlement receipt is invalid");
+    }
+    const balance = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+    return {
+      balance_mc: Number(balance.rows[0]?.balance_mc ?? 0),
+      final_amount_mc: durableFinalAmountMc,
+      refund_mc: heldAmountMc - durableFinalAmountMc,
+      duplicate: true
+    };
+  };
+  let results;
+  try {
+    results = await db.batch([
+      {
+        sql: `INSERT OR IGNORE INTO billing_events
+                (id, user_id, idempotency_key, billing_class, source_surface, status, amount_mc, metadata)
+              VALUES (?, ?, ?, ?, ?, 'settling', ?, ?)`,
+        args: [eventId, userId, settlementKey, billingClass, sourceSurface, finalAmountMc, metadata]
+      },
+      {
+        sql: `UPDATE users
+              SET balance_mc = balance_mc + (
+                SELECT d.amount_mc - e.amount_mc
+                FROM billing_events e
+                JOIN billing_debits d ON d.idempotency_key = ?
+                WHERE e.idempotency_key = ?
+              )
+              WHERE id = ?
+                AND EXISTS (
+                  SELECT 1
+                  FROM billing_events e
+                  JOIN billing_debits d ON d.idempotency_key = ?
+                  WHERE e.idempotency_key = ?
+                    AND e.user_id = ?
+                    AND e.billing_class = ?
+                    AND e.source_surface = ?
+                    AND e.status = 'settling'
+                    AND d.user_id = e.user_id
+                    AND d.status = 'applied'
+                    AND e.amount_mc BETWEEN 0 AND d.amount_mc
+                )`,
+        args: [
+          debitIdempotencyKey,
+          settlementKey,
+          userId,
+          debitIdempotencyKey,
+          settlementKey,
+          userId,
+          billingClass,
+          sourceSurface
+        ]
+      },
+      {
+        sql: `UPDATE billing_events
+              SET status = 'applying'
+              WHERE idempotency_key = ?
+                AND user_id = ?
+                AND billing_class = ?
+                AND source_surface = ?
+                AND status = 'settling'
+                AND changes() = 1`,
+        args: [settlementKey, userId, billingClass, sourceSurface]
+      },
+      {
+        sql: `INSERT INTO credit_lots
+                (user_id, amount_mc, remaining_mc, source, expires_at)
+              SELECT e.user_id,
+                     d.amount_mc - e.amount_mc,
+                     d.amount_mc - e.amount_mc,
+                     ?,
+                     datetime('now', ?)
+              FROM billing_events e
+              JOIN billing_debits d ON d.idempotency_key = ?
+              WHERE e.idempotency_key = ?
+                AND e.status = 'applying'
+                AND d.amount_mc > e.amount_mc`,
+        args: [refundOperation, CREDIT_LOT_TTL, debitIdempotencyKey, settlementKey]
+      },
+      {
+        sql: `INSERT INTO ledger (user_id, amount_mc, operation, description)
+              SELECT e.user_id,
+                     d.amount_mc - e.amount_mc,
+                     ?,
+                     ?
+              FROM billing_events e
+              JOIN billing_debits d ON d.idempotency_key = ?
+              WHERE e.idempotency_key = ?
+                AND e.status = 'applying'
+                AND d.amount_mc > e.amount_mc`,
+        args: [refundOperation, description, debitIdempotencyKey, settlementKey]
+      },
+      {
+        sql: `UPDATE billing_events
+              SET status = 'settled', settled_at = datetime('now')
+              WHERE idempotency_key = ?
+                AND status = 'applying'`,
+        args: [settlementKey]
+      }
+    ], "write");
+  } catch (error) {
+    try {
+      const recovered = await readReceipt();
+      if (recovered) return recovered;
+    } catch {
+    }
+    throw error;
+  }
+  const receipt = await readReceipt();
+  if (!receipt) throw new Error("idempotent debit settlement did not reach a durable settled state");
+  return { ...receipt, duplicate: results[0]?.rowsAffected === 0 };
+}
 async function getLedger(userId, limit = 50) {
   const res = await getDb().execute({
     sql: "SELECT * FROM ledger WHERE user_id = ? ORDER BY created_at DESC LIMIT ?",
@@ -5337,7 +5644,7 @@ async function reconcileBalanceMc(userId, knownBalanceMc) {
   }
   return balanceMc;
 }
-var import_http, import_node_crypto, import_zod, DB_URL, DB_TOKEN, _db, _rateLimitSchemaReady, CREDIT_LOT_TTL, SiteAuditJobRowSchema, SiteAuditPhaseLogRowSchema;
+var import_http, import_node_crypto, import_zod, DB_URL, DB_TOKEN, _db, _rateLimitSchemaReady, CORE_SCHEMA_VERSION, CORE_SCHEMA_TABLES, CORE_SCHEMA_INDEXES, CORE_SCHEMA_COLUMNS, REQUEST_EVENT_RESULT_MAX_BYTES, CREDIT_LOT_TTL, SiteAuditJobRowSchema, SiteAuditPhaseLogRowSchema;
 var init_db = __esm({
   "src/api/db.ts"() {
     "use strict";
@@ -5348,6 +5655,95 @@ var init_db = __esm({
     DB_TOKEN = process.env.TURSO_AUTH_TOKEN;
     _db = null;
     _rateLimitSchemaReady = false;
+    CORE_SCHEMA_VERSION = "2026-07-14.1";
+    CORE_SCHEMA_TABLES = [
+      "billing_authorizations",
+      "billing_debits",
+      "billing_events",
+      "concurrency_locks",
+      "credit_lots",
+      "free_credit_refreshes",
+      "harvest_attempts",
+      "jobs",
+      "kpo_jobs",
+      "kpo_phase_log",
+      "ledger",
+      "oauth_clients",
+      "oauth_codes",
+      "oauth_tokens",
+      "page_snapshots",
+      "password_reset_tokens",
+      "rate_limits",
+      "request_events",
+      "site_audit_jobs",
+      "site_audit_phase_log",
+      "site_extract_jobs",
+      "site_extract_pages",
+      "stripe_events",
+      "users",
+      "workflow_artifacts",
+      "workflow_runs",
+      "workflow_schedules",
+      "workflow_webhook_deliveries"
+    ];
+    CORE_SCHEMA_INDEXES = [
+      "billing_authorizations_user_status",
+      "billing_debits_user_status",
+      "billing_events_authorization",
+      "billing_events_user_created_at",
+      "concurrency_locks_operation",
+      "concurrency_locks_user_status",
+      "credit_lots_user_active",
+      "harvest_attempts_job_id",
+      "harvest_attempts_user_created_at",
+      "jobs_status",
+      "jobs_user_id",
+      "kpo_jobs_status",
+      "kpo_jobs_user_id",
+      "kpo_phase_log_job_id",
+      "ledger_stripe_pi_unique",
+      "ledger_user_id",
+      "oauth_tokens_identity",
+      "page_snapshots_user_checked_at",
+      "prt_user_id",
+      "request_events_user_created_at",
+      "site_audit_jobs_status",
+      "site_audit_jobs_user_id",
+      "site_audit_phase_log_job_id",
+      "site_extract_jobs_status",
+      "site_extract_jobs_user_id",
+      "site_extract_pages_job_id",
+      "workflow_artifacts_run",
+      "workflow_runs_idempotency",
+      "workflow_runs_schedule",
+      "workflow_runs_user_created",
+      "workflow_schedules_due",
+      "workflow_schedules_user_status",
+      "workflow_webhook_deliveries_run"
+    ];
+    CORE_SCHEMA_COLUMNS = {
+      harvest_attempts: ["debug_json"],
+      oauth_tokens: ["replaced_by", "rotated_at"],
+      users: [
+        "balance_mc",
+        "concurrency_stripe_sub_id",
+        "extra_concurrency_slots",
+        "key_active",
+        "memory_identity",
+        "memory_key",
+        "memory_plan",
+        "memory_provisioned",
+        "memory_subscription_id",
+        "password_hash",
+        "stripe_customer_id",
+        "subscription_concurrency",
+        "subscription_id",
+        "subscription_tier"
+      ],
+      workflow_artifacts: ["content"],
+      workflow_runs: ["step_index", "step_log_json", "step_state_json", "total_steps", "webhook_url"]
+    };
+    REQUEST_EVENT_RESULT_MAX_BYTES = 32 * 1024;
     CREDIT_LOT_TTL = "+3 months";
     SiteAuditJobRowSchema = import_zod.z.object({
       id: import_zod.z.string(),
@@ -5419,7 +5815,26 @@ var init_cost_rates = __esm({
 // src/api/cost-telemetry.ts
 async function migrateCostTelemetry() {
   if (_ready) return;
+  if (_migrationPromise) return _migrationPromise;
+  _migrationPromise = runCostTelemetryMigration().finally(() => {
+    _migrationPromise = null;
+  });
+  return _migrationPromise;
+}
+async function runCostTelemetryMigration() {
   const db = getDb();
+  const existing = await db.execute(`
+    SELECT
+      (SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN ('kernel_session_log', 'vendor_usage_log', 'cost_probe_runs')) = 3
+      AND (SELECT COUNT(*) FROM pragma_table_info('kernel_session_log') WHERE name IN ('proxy_source', 'proxy_type', 'method')) = 3
+      AND (SELECT COUNT(*) FROM pragma_table_info('vendor_usage_log') WHERE name = 'method') = 1
+      AND (SELECT COUNT(*) FROM pragma_table_info('cost_probe_runs') WHERE name IN ('units', 'unit_type', 'mode')) = 3
+      AS ready
+  `);
+  if (Number(existing.rows[0]?.ready ?? 0) === 1) {
+    _ready = true;
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS kernel_session_log (
       id                    TEXT PRIMARY KEY,
@@ -5583,7 +5998,7 @@ function boolToInt(v) {
   if (v === null || v === void 0) return null;
   return v ? 1 : 0;
 }
-var import_node_crypto2, _ready;
+var import_node_crypto2, _ready, _migrationPromise;
 var init_cost_telemetry = __esm({
   "src/api/cost-telemetry.ts"() {
     "use strict";
@@ -5592,6 +6007,7 @@ var init_cost_telemetry = __esm({
     init_cost_context();
     init_cost_rates();
     _ready = false;
+    _migrationPromise = null;
   }
 });
 
@@ -8483,6 +8899,9 @@ var init_schemas = __esm({
 });
 
 // src/api/rates.ts
+function serpActualCostMc(headlessSent) {
+  return headlessSent === true ? MC_COSTS.serp_headless : MC_COSTS.serp_headful;
+}
 function browserActiveCostMc(activeMs) {
   return Math.round(activeMs * MC_PER_BROWSER_MS);
 }
@@ -8496,6 +8915,18 @@ function vendorCostUsdToMc(costUsd, markupBps) {
   if (mc > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error("calculated mc exceeds the safe integer range");
   return Number(mc);
 }
+function getPublicRatesPayload() {
+  const starter = SUBSCRIPTION_TIER_BY_KEY.starter;
+  const costs = CREDIT_COST_CATALOG.map(({ aliases, ...cost }) => ({
+    ...cost,
+    ...cost.notes ? { notes: cost.notes.replace(/ via fal\.ai/g, "") } : {}
+  }));
+  return {
+    creditsPerDollarStarter: Math.round(mcToCredits(starter.credits_mc) / starter.monthly_usd),
+    costs,
+    scheduling: SCHEDULED_ACTIONS_RATE_POLICY
+  };
+}
 function concurrencySlotBillingInfo() {
   const billingUrl = process.env.CONCURRENCY_BILLING_URL ?? "https://mcpscraper.dev/billing";
   return {
@@ -8525,12 +8956,14 @@ function insufficientBalanceResponse(balanceMc, requiredMc) {
     topup_url: topupUrl
   };
 }
-var MC_COSTS, MC_PER_BROWSER_MS, BROWSER_OPEN_MIN_BALANCE_MC, MC_PER_CREDIT, BILLING_MC_PER_USD_NUMERATOR, BILLING_MC_PER_USD_DENOMINATOR, BILLING_BASIS_POINTS, USD_NANOS, SCHEDULED_RUN_BASE_CREDITS, SCHEDULED_RUN_BASE_MC, SCHEDULED_AGENT_LLM_MARKUP_BPS, SCHEDULED_AGENT_LLM_MARKUP, SCHEDULED_RUN_DEFAULT_MAX_CREDITS, CREDIT_COST_CATALOG, CONCURRENCY_PRICE_ID, SUBSCRIPTION_TIERS, SUBSCRIPTION_TIER_BY_KEY, CONCURRENCY_SLOT_PRICE_USD, CONCURRENCY_SLOT_PRICE_CURRENCY, CONCURRENCY_SLOT_PRICE_INTERVAL, CONCURRENCY_SLOT_PRICE_LABEL, CONCURRENCY_SLOT_TERMINAL_COMMAND, FREE_SIGNUP_MC, MEMORY_FREE_QUOTA_BYTES, MEMORY_PLANS, MEMORY_PLAN_QUOTA, MEMORY_MARGIN_MULTIPLE, MEMORY_PRO_COST_BUDGET_USD, LedgerOperation, MEMORY_AI_MARGIN_MULTIPLE, SITE_AUDIT_LLM_MARGIN_MULTIPLE, VIDEO_ANALYSIS_LLM_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_HOLD_MC, MC_PER_USD;
+var MC_COSTS, MC_PER_BROWSER_MS, BROWSER_OPEN_MIN_BALANCE_MC, MC_PER_CREDIT, BILLING_MC_PER_USD_NUMERATOR, BILLING_MC_PER_USD_DENOMINATOR, BILLING_BASIS_POINTS, USD_NANOS, SCHEDULED_RUN_BASE_CREDITS, SCHEDULED_RUN_BASE_MC, SCHEDULED_AGENT_LLM_MARKUP_BPS, SCHEDULED_AGENT_LLM_MARKUP, SCHEDULED_RUN_DEFAULT_MAX_CREDITS, SCHEDULED_ACTIONS_RATE_POLICY, CREDIT_COST_CATALOG, CONCURRENCY_PRICE_ID, SUBSCRIPTION_TIERS, SUBSCRIPTION_TIER_BY_KEY, CONCURRENCY_SLOT_PRICE_USD, CONCURRENCY_SLOT_PRICE_CURRENCY, CONCURRENCY_SLOT_PRICE_INTERVAL, CONCURRENCY_SLOT_PRICE_LABEL, CONCURRENCY_SLOT_TERMINAL_COMMAND, MEMORY_FREE_QUOTA_BYTES, MEMORY_PLANS, MEMORY_PLAN_QUOTA, MEMORY_MARGIN_MULTIPLE, MEMORY_PRO_COST_BUDGET_USD, LedgerOperation, MEMORY_AI_MARGIN_MULTIPLE, SITE_AUDIT_LLM_MARGIN_MULTIPLE, VIDEO_ANALYSIS_LLM_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_HOLD_MC, MC_PER_USD;
 var init_rates = __esm({
   "src/api/rates.ts"() {
     "use strict";
     MC_COSTS = {
-      serp: 100,
+      serp: 400,
+      serp_headless: 400,
+      serp_headful: 1400,
       paa: 300,
       paa_base: 5500,
       page_scrape: 100,
@@ -8571,14 +9004,38 @@ var init_rates = __esm({
     SCHEDULED_AGENT_LLM_MARKUP_BPS = 15e3;
     SCHEDULED_AGENT_LLM_MARKUP = SCHEDULED_AGENT_LLM_MARKUP_BPS / BILLING_BASIS_POINTS;
     SCHEDULED_RUN_DEFAULT_MAX_CREDITS = 5e3;
+    SCHEDULED_ACTIONS_RATE_POLICY = {
+      billingMode: "credits",
+      entitlement: "paid_plan_included",
+      separateSubscriptionRequired: false,
+      chargeEvent: "started_occurrence",
+      runBaseCredits: SCHEDULED_RUN_BASE_CREDITS,
+      runBaseMc: SCHEDULED_RUN_BASE_MC,
+      llmCostMultiplier: SCHEDULED_AGENT_LLM_MARKUP,
+      llmCostMultiplierBps: SCHEDULED_AGENT_LLM_MARKUP_BPS,
+      modes: {
+        connection_sync: {
+          runBaseCredits: SCHEDULED_RUN_BASE_CREDITS,
+          modelCostBilling: "none",
+          modelCostMultiplier: 0
+        },
+        agent: {
+          runBaseCredits: SCHEDULED_RUN_BASE_CREDITS,
+          modelCostBilling: "actual_reported_cost",
+          modelCostProvider: "openrouter",
+          modelCostMultiplier: SCHEDULED_AGENT_LLM_MARKUP,
+          modelCostMultiplierBps: SCHEDULED_AGENT_LLM_MARKUP_BPS
+        }
+      }
+    };
     CREDIT_COST_CATALOG = [
       {
         key: "serp",
         label: "SERP search",
         aliases: ["search_serp", "serp", "google search", "organic results"],
-        credits: mcToCredits(MC_COSTS.serp),
-        unit: "per search",
-        notes: "Returns AI Overview, PAA snippet, videos, forums, and local pack."
+        credits: mcToCredits(MC_COSTS.serp_headless),
+        unit: "per search (headless); escalates to headful only when needed",
+        notes: `Returns AI Overview, PAA snippet, videos, forums, and local pack. Billed ${mcToCredits(MC_COSTS.serp_headless)} credits when served headless (the common case), ${mcToCredits(MC_COSTS.serp_headful)} credits if an anti-bot escalation forces headful mode (overestimate refunded). Optional SERP Intelligence page snapshots add ${mcToCredits(MC_COSTS.page_scrape)} credit per attempted URL.`
       },
       {
         key: "paa",
@@ -8801,7 +9258,6 @@ var init_rates = __esm({
     CONCURRENCY_SLOT_PRICE_INTERVAL = "month";
     CONCURRENCY_SLOT_PRICE_LABEL = "$5/month";
     CONCURRENCY_SLOT_TERMINAL_COMMAND = "npx -y -p mcp-scraper@latest mcp-scraper-cli billing concurrency checkout";
-    FREE_SIGNUP_MC = 1e5;
     MEMORY_FREE_QUOTA_BYTES = 1e7 * 1;
     MEMORY_PLANS = {
       "price_1TnMSTS8aAcsk3TGBgiwuvqL": { plan: "pro", label: "Pro", price_id: "price_1TnMSTS8aAcsk3TGBgiwuvqL", interval: "month", monthly_usd: 19, quota_bytes: 5e9 },
@@ -8818,6 +9274,7 @@ var init_rates = __esm({
       PAA: "paa",
       PAA_REFUND: "paa_refund",
       SERP: "serp",
+      SERP_REFUND: "serp_refund",
       REFUND: "refund",
       TRANSCRIPTION: "transcription",
       TRANSCRIPTION_HOLD: "transcription_hold",
@@ -11901,8 +12358,17 @@ var init_internal_memory_routes = __esm({
 });
 
 // src/api/scheduling-access.ts
+function schedulingAccessOverrides() {
+  return new Set(
+    (process.env.SCHEDULING_ACCESS_OVERRIDE_IDENTITIES ?? "").split(",").map((identity) => identity.trim().toLowerCase()).filter(Boolean)
+  );
+}
 function hasPaidSchedulingAccess(user) {
-  return typeof user.subscription_tier === "string" && user.subscription_tier.trim().length > 0;
+  const tier = typeof user.subscription_tier === "string" ? user.subscription_tier.trim() : "";
+  const subscriptionId = typeof user.subscription_id === "string" ? user.subscription_id.trim() : "";
+  if (tier && subscriptionId) return true;
+  const identity = typeof user.email === "string" ? user.email.trim().toLowerCase() : "";
+  return identity.length > 0 && schedulingAccessOverrides().has(identity);
 }
 function paidPlanRequiredPayload() {
   return {
@@ -11995,6 +12461,15 @@ function safeMetadata(value) {
   if (!value) return "{}";
   return JSON.stringify(value).slice(0, 4e3);
 }
+function metadataReason(row) {
+  if (!row.metadata) return void 0;
+  try {
+    const metadata = JSON.parse(row.metadata);
+    return typeof metadata.reason === "string" ? metadata.reason : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function mapAuthorization(row, balanceMc) {
   return {
     id: row.id,
@@ -12023,23 +12498,28 @@ async function eventByKey(idempotencyKey) {
   });
   return result.rows[0] ? result.rows[0] : null;
 }
-function mapEvent(row, balanceMc, duplicate) {
-  let reason;
-  if (row.metadata) {
-    try {
-      const metadata = JSON.parse(row.metadata);
-      if (typeof metadata.reason === "string") reason = metadata.reason;
-    } catch {
-    }
-  }
+function mapStartEvent(row, balanceMc, duplicate) {
+  return {
+    id: row.id,
+    authorizationId: row.authorization_id,
+    status: "started",
+    amountMc: SCHEDULED_RUN_BASE_MC,
+    credits: SCHEDULED_RUN_BASE_MC / MC_PER_CREDIT,
+    balanceMc,
+    duplicate
+  };
+}
+function mapSettlementEvent(row, balanceMc, duplicate) {
   const rawNanos = row.raw_cost_usd_nanos == null ? null : Number(row.raw_cost_usd_nanos);
-  const modelMc = Math.max(0, Number(row.amount_mc) - SCHEDULED_RUN_BASE_MC);
+  const modelMc = Math.max(0, Number(row.amount_mc));
+  const amountMc = SCHEDULED_RUN_BASE_MC + modelMc;
+  const reason = metadataReason(row);
   return {
     id: row.id,
     authorizationId: row.authorization_id,
     status: row.status === "settled" ? "settled" : "cost_pending",
-    amountMc: Number(row.amount_mc),
-    credits: Number(row.amount_mc) / MC_PER_CREDIT,
+    amountMc,
+    credits: amountMc / MC_PER_CREDIT,
     baseMc: SCHEDULED_RUN_BASE_MC,
     modelMc,
     rawCostUsd: rawNanos == null ? null : rawNanos / USD_NANOS,
@@ -12061,7 +12541,7 @@ async function authorizeScheduledRun(args) {
     args: [user.id, SCHEDULED_RUN_BILLING_CLASS]
   });
   if (pending.rows.length > 0) {
-    throw new UnifiedBillingError("pending_cost", "a previous scheduled run has an unresolved cost", 409);
+    throw new UnifiedBillingError("pending_cost", "a previous scheduled run has an unresolved model cost", 409);
   }
   const existing = await getDb().execute({
     sql: "SELECT id, user_id, idempotency_key, status, minimum_amount_mc, maximum_amount_mc, token_hash, expires_at FROM billing_authorizations WHERE idempotency_key = ? LIMIT 1",
@@ -12070,14 +12550,9 @@ async function authorizeScheduledRun(args) {
   if (existing.rows[0]) {
     const row = existing.rows[0];
     if (Number(row.user_id) !== user.id) {
-      throw new UnifiedBillingError(
-        "invalid_request",
-        "the idempotency key is already in use by another billing identity",
-        409
-      );
+      throw new UnifiedBillingError("invalid_request", "the idempotency key is already in use by another billing identity", 409);
     }
-    const balanceMc2 = await reconcileBalanceMc(user.id, user.balance_mc);
-    return mapAuthorization(row, balanceMc2);
+    return mapAuthorization(row, await reconcileBalanceMc(user.id, user.balance_mc));
   }
   const maximumCredits = args.maximumCredits ?? SCHEDULED_RUN_DEFAULT_MAX_CREDITS;
   if (!Number.isFinite(maximumCredits) || maximumCredits < SCHEDULED_RUN_BASE_MC / MC_PER_CREDIT) {
@@ -12098,17 +12573,7 @@ async function authorizeScheduledRun(args) {
   const expiresAt = new Date(Date.now() + AUTHORIZATION_TTL_MS).toISOString();
   const inserted = await getDb().execute({
     sql: "INSERT OR IGNORE INTO billing_authorizations (id, user_id, idempotency_key, billing_class, status, minimum_amount_mc, maximum_amount_mc, token_hash, metadata, expires_at) VALUES (?, ?, ?, ?, 'authorized', ?, ?, ?, ?, ?)",
-    args: [
-      id,
-      user.id,
-      idempotencyKey,
-      SCHEDULED_RUN_BILLING_CLASS,
-      SCHEDULED_RUN_BASE_MC,
-      maximumMc,
-      tokenHash(token),
-      safeMetadata(args.metadata),
-      expiresAt
-    ]
+    args: [id, user.id, idempotencyKey, SCHEDULED_RUN_BILLING_CLASS, SCHEDULED_RUN_BASE_MC, maximumMc, tokenHash(token), safeMetadata(args.metadata), expiresAt]
   });
   if (inserted.rowsAffected === 0) {
     const raced = await getDb().execute({
@@ -12118,11 +12583,7 @@ async function authorizeScheduledRun(args) {
     if (!raced.rows[0]) throw new Error("billing authorization insert raced without a readable winner");
     const row = raced.rows[0];
     if (Number(row.user_id) !== user.id) {
-      throw new UnifiedBillingError(
-        "invalid_request",
-        "the idempotency key is already in use by another billing identity",
-        409
-      );
+      throw new UnifiedBillingError("invalid_request", "the idempotency key is already in use by another billing identity", 409);
     }
     return mapAuthorization(row, balanceMc);
   }
@@ -12139,180 +12600,235 @@ async function authorizeScheduledRun(args) {
     reservationMode: "balance_check"
   };
 }
-async function settleScheduledRun(args) {
-  const identity = normalizeIdentity(args.identity);
-  const user = await getUserByEmail(identity);
-  if (!user) throw new UnifiedBillingError("user_not_found", "billing identity was not found", 404);
-  const authorization = await authorizationById(args.authorizationId);
+async function startScheduledRun(args) {
+  const user = await resolveSchedulingUser(args.identity);
+  let authorization = await authorizationById(args.authorizationId);
   if (!authorization || Number(authorization.user_id) !== user.id) {
     throw new UnifiedBillingError("authorization_not_found", "billing authorization was not found", 404);
   }
   verifyToken(authorization, args.authorizationToken);
-  const settlementKey = authorization.id + ":settlement";
-  const existing = await eventByKey(settlementKey);
-  if (existing) {
-    const balanceMc = await reconcileBalanceMc(user.id, user.balance_mc);
-    if (existing.status === "settling") {
-      throw new UnifiedBillingError("settlement_in_progress", "scheduled-run settlement is already in progress", 409);
-    }
-    return mapEvent(existing, balanceMc, true);
+  const startKey = authorization.id + ":start";
+  const existing = await eventByKey(startKey);
+  if (existing?.status === "settled") {
+    await getDb().execute({
+      sql: "UPDATE billing_authorizations SET status = 'started' WHERE id = ? AND status IN ('authorized', 'starting')",
+      args: [authorization.id]
+    });
+    return mapStartEvent(existing, await reconcileBalanceMc(user.id, user.balance_mc), true);
   }
-  if (authorization.status !== "authorized") {
-    throw new UnifiedBillingError("authorization_closed", "billing authorization is no longer open", 409);
+  if (!hasPaidSchedulingAccess(user)) {
+    throw new UnifiedBillingError(PAID_PLAN_REQUIRED_CODE, PAID_PLAN_REQUIRED_MESSAGE, 403);
   }
-  if (Date.parse(authorization.expires_at) <= Date.now()) {
+  if (authorization.status === "authorized") {
+    if (Date.parse(authorization.expires_at) <= Date.now()) {
+      await getDb().execute({
+        sql: "UPDATE billing_authorizations SET status = 'expired' WHERE id = ? AND status = 'authorized'",
+        args: [authorization.id]
+      });
+      throw new UnifiedBillingError("authorization_expired", "billing authorization expired before execution started", 409);
+    }
     await getDb().execute({
-      sql: "UPDATE billing_authorizations SET status = 'expired' WHERE id = ? AND status = 'authorized'",
+      sql: "UPDATE billing_authorizations SET status = 'starting' WHERE id = ? AND status = 'authorized'",
       args: [authorization.id]
     });
-    throw new UnifiedBillingError("authorization_expired", "billing authorization expired before settlement", 409);
-  }
-  const rawCostUsd = args.rawCostUsd ?? null;
-  if (args.modelCostStatus === "reported" && (rawCostUsd == null || !Number.isFinite(rawCostUsd) || rawCostUsd < 0)) {
-    throw new UnifiedBillingError("invalid_request", "reported model cost must be a finite non-negative number", 400);
+    authorization = await authorizationById(authorization.id);
   }
-  if (args.modelCostStatus === "not_applicable" && rawCostUsd != null && rawCostUsd !== 0) {
-    throw new UnifiedBillingError("invalid_request", "not_applicable model cost cannot include a non-zero cost", 400);
+  if (!authorization || !["starting", "started"].includes(authorization.status)) {
+    throw new UnifiedBillingError("authorization_closed", "billing authorization is no longer startable", 409);
   }
-  const eventId = (0, import_node_crypto4.randomUUID)();
-  const rawCostNanos = rawCostUsd == null ? null : Math.round(rawCostUsd * USD_NANOS);
-  const modelMc = rawCostUsd == null ? 0 : vendorCostUsdToMc(rawCostUsd, SCHEDULED_AGENT_LLM_MARKUP_BPS);
-  const totalMc = SCHEDULED_RUN_BASE_MC + modelMc;
-  const pendingReason = args.modelCostStatus === "missing" ? "openrouter_cost_missing" : totalMc > Number(authorization.maximum_amount_mc) ? "max_credits_per_run_exceeded" : null;
-  if (pendingReason) {
+  const eventId = existing?.id ?? (0, import_node_crypto4.randomUUID)();
+  if (!existing) {
     await getDb().execute({
-      sql: "INSERT INTO billing_events (id, user_id, authorization_id, idempotency_key, billing_class, source_surface, status, amount_mc, raw_cost_usd_nanos, multiplier_bps, input_tokens, output_tokens, cached_tokens, model_steps, metadata) VALUES (?, ?, ?, ?, ?, ?, 'cost_pending', ?, ?, ?, ?, ?, ?, ?, ?)",
+      sql: "INSERT OR IGNORE INTO billing_events (id, user_id, authorization_id, idempotency_key, billing_class, source_surface, status, amount_mc, multiplier_bps, metadata) VALUES (?, ?, ?, ?, ?, ?, 'capturing', ?, ?, ?)",
       args: [
         eventId,
         user.id,
         authorization.id,
-        settlementKey,
+        startKey,
         SCHEDULED_RUN_BILLING_CLASS,
         SCHEDULED_RUN_SOURCE_SURFACE,
-        totalMc,
-        rawCostNanos,
+        SCHEDULED_RUN_BASE_MC,
         SCHEDULED_AGENT_LLM_MARKUP_BPS,
-        Math.max(0, Math.round(args.inputTokens ?? 0)),
-        Math.max(0, Math.round(args.outputTokens ?? 0)),
-        Math.max(0, Math.round(args.cachedTokens ?? 0)),
-        Math.max(0, Math.round(args.modelSteps ?? 0)),
-        safeMetadata({ ...args.metadata, reason: pendingReason })
+        safeMetadata({ ...args.metadata, billingPhase: "start", chargeMode: "base_capture" })
       ]
     });
-    await getDb().execute({
-      sql: "UPDATE billing_authorizations SET status = 'cost_pending', settled_at = datetime('now') WHERE id = ?",
-      args: [authorization.id]
-    });
-    return {
-      id: eventId,
-      authorizationId: authorization.id,
-      status: "cost_pending",
-      amountMc: totalMc,
-      credits: totalMc / MC_PER_CREDIT,
-      baseMc: SCHEDULED_RUN_BASE_MC,
-      modelMc,
-      rawCostUsd,
-      multiplierBps: SCHEDULED_AGENT_LLM_MARKUP_BPS,
-      balanceMc: await reconcileBalanceMc(user.id, user.balance_mc),
-      reason: pendingReason,
-      duplicate: false
-    };
-  }
-  const claimed = await getDb().execute({
-    sql: "INSERT OR IGNORE INTO billing_events (id, user_id, authorization_id, idempotency_key, billing_class, source_surface, status, amount_mc, raw_cost_usd_nanos, multiplier_bps, input_tokens, output_tokens, cached_tokens, model_steps, metadata) VALUES (?, ?, ?, ?, ?, ?, 'settling', ?, ?, ?, ?, ?, ?, ?, ?)",
-    args: [
-      eventId,
-      user.id,
-      authorization.id,
-      settlementKey,
-      SCHEDULED_RUN_BILLING_CLASS,
-      SCHEDULED_RUN_SOURCE_SURFACE,
-      totalMc,
-      rawCostNanos,
-      SCHEDULED_AGENT_LLM_MARKUP_BPS,
-      Math.max(0, Math.round(args.inputTokens ?? 0)),
-      Math.max(0, Math.round(args.outputTokens ?? 0)),
-      Math.max(0, Math.round(args.cachedTokens ?? 0)),
-      Math.max(0, Math.round(args.modelSteps ?? 0)),
-      safeMetadata(args.metadata)
-    ]
-  });
-  if (claimed.rowsAffected === 0) {
-    const raced = await eventByKey(settlementKey);
-    if (!raced) throw new Error("billing settlement raced without a readable winner");
-    if (raced.status === "settling") {
-      throw new UnifiedBillingError("settlement_in_progress", "scheduled-run settlement is already in progress", 409);
-    }
-    return mapEvent(raced, await reconcileBalanceMc(user.id, user.balance_mc), true);
   }
-  const debit = await debitMc(
+  const debit = await debitMcIdempotent(
     user.id,
-    totalMc,
+    SCHEDULED_RUN_BASE_MC,
     LedgerOperation.SCHEDULED_RUN,
-    "scheduled-run:" + authorization.id
+    "scheduled-run:" + authorization.id + ":base",
+    startKey
   );
   if (!debit.ok) {
-    const metadata = safeMetadata({ ...args.metadata, reason: "insufficient_credits_at_settlement" });
-    await getDb().execute({
-      sql: "UPDATE billing_events SET status = 'cost_pending', metadata = ? WHERE id = ?",
-      args: [metadata, eventId]
-    });
     await getDb().execute({
-      sql: "UPDATE billing_authorizations SET status = 'cost_pending', settled_at = datetime('now') WHERE id = ?",
+      sql: "UPDATE billing_authorizations SET status = 'authorized' WHERE id = ? AND status = 'starting'",
       args: [authorization.id]
     });
-    return {
-      id: eventId,
-      authorizationId: authorization.id,
-      status: "cost_pending",
-      amountMc: totalMc,
-      credits: totalMc / MC_PER_CREDIT,
-      baseMc: SCHEDULED_RUN_BASE_MC,
+    throw new UnifiedBillingError(
+      "insufficient_credits",
+      "the wallet could not capture the scheduled-run base charge",
+      402,
+      { balanceMc: debit.balance_mc, requiredMc: SCHEDULED_RUN_BASE_MC }
+    );
+  }
+  await getDb().execute({
+    sql: "UPDATE billing_events SET status = 'settled', settled_at = datetime('now') WHERE idempotency_key = ? AND status = 'capturing'",
+    args: [startKey]
+  });
+  await getDb().execute({
+    sql: "UPDATE billing_authorizations SET status = 'started' WHERE id = ? AND status IN ('authorized', 'starting', 'started')",
+    args: [authorization.id]
+  });
+  const started = await eventByKey(startKey);
+  if (!started) throw new Error("scheduled-run base capture completed without an event receipt");
+  return mapStartEvent(started, debit.balance_mc, debit.duplicate);
+}
+function validateModelCost(args) {
+  const rawCostUsd = args.rawCostUsd ?? null;
+  if (args.modelCostStatus === "reported" && (rawCostUsd == null || !Number.isFinite(rawCostUsd) || rawCostUsd < 0)) {
+    throw new UnifiedBillingError("invalid_request", "reported model cost must be a finite non-negative number", 400);
+  }
+  if (args.modelCostStatus === "not_applicable" && rawCostUsd != null && rawCostUsd !== 0) {
+    throw new UnifiedBillingError("invalid_request", "not_applicable model cost cannot include a non-zero cost", 400);
+  }
+  return rawCostUsd;
+}
+async function recoverSettlement(row, user, authorization, duplicate) {
+  const modelMc = Math.max(0, Number(row.amount_mc));
+  let balanceMc = await reconcileBalanceMc(user.id, user.balance_mc);
+  if (modelMc > 0) {
+    const debit = await debitMcIdempotent(
+      user.id,
       modelMc,
-      rawCostUsd,
-      multiplierBps: SCHEDULED_AGENT_LLM_MARKUP_BPS,
-      balanceMc: debit.balance_mc,
-      reason: "insufficient_credits_at_settlement",
-      duplicate: false
-    };
+      LedgerOperation.SCHEDULED_RUN,
+      "scheduled-run:" + authorization.id + ":model",
+      authorization.id + ":model"
+    );
+    balanceMc = debit.balance_mc;
+    if (!debit.ok) {
+      await getDb().execute({
+        sql: "UPDATE billing_events SET status = 'cost_pending', metadata = ? WHERE id = ? AND status = 'settling'",
+        args: [safeMetadata({ reason: "insufficient_credits_for_model_delta", billingPhase: "settlement", chargeMode: "model_delta" }), row.id]
+      });
+      await getDb().execute({
+        sql: "UPDATE billing_authorizations SET status = 'cost_pending' WHERE id = ? AND status IN ('started', 'cost_pending')",
+        args: [authorization.id]
+      });
+      const pending = await eventByKey(authorization.id + ":settlement");
+      if (!pending) throw new Error("scheduled-run pending settlement lost its event");
+      return mapSettlementEvent(pending, balanceMc, duplicate);
+    }
   }
   await getDb().execute({
-    sql: "UPDATE billing_events SET status = 'settled', settled_at = datetime('now') WHERE id = ?",
-    args: [eventId]
+    sql: "UPDATE billing_events SET status = 'settled', settled_at = datetime('now') WHERE id = ? AND status = 'settling'",
+    args: [row.id]
   });
   await getDb().execute({
-    sql: "UPDATE billing_authorizations SET status = 'settled', settled_at = datetime('now') WHERE id = ?",
+    sql: "UPDATE billing_authorizations SET status = 'settled', settled_at = datetime('now') WHERE id = ? AND status IN ('started', 'cost_pending', 'settled')",
     args: [authorization.id]
   });
-  return {
-    id: eventId,
-    authorizationId: authorization.id,
-    status: "settled",
-    amountMc: totalMc,
-    credits: totalMc / MC_PER_CREDIT,
-    baseMc: SCHEDULED_RUN_BASE_MC,
+  const settled = await eventByKey(authorization.id + ":settlement");
+  if (!settled) throw new Error("scheduled-run settlement completed without an event receipt");
+  return mapSettlementEvent(settled, balanceMc, duplicate);
+}
+async function settleScheduledRun(args) {
+  const user = await resolveSchedulingUser(args.identity);
+  let authorization = await authorizationById(args.authorizationId);
+  if (!authorization || Number(authorization.user_id) !== user.id) {
+    throw new UnifiedBillingError("authorization_not_found", "billing authorization was not found", 404);
+  }
+  verifyToken(authorization, args.authorizationToken);
+  const rawCostUsd = validateModelCost(args);
+  const startEvent = await eventByKey(authorization.id + ":start");
+  if (!startEvent || startEvent.status !== "settled") {
+    throw new UnifiedBillingError("authorization_closed", "scheduled-run settlement requires a captured start", 409);
+  }
+  if (authorization.status === "starting") {
+    await getDb().execute({
+      sql: "UPDATE billing_authorizations SET status = 'started' WHERE id = ? AND status = 'starting'",
+      args: [authorization.id]
+    });
+    authorization = await authorizationById(authorization.id);
+  }
+  if (!authorization || !["started", "cost_pending", "settled"].includes(authorization.status)) {
+    throw new UnifiedBillingError("authorization_closed", "billing authorization is not open for settlement", 409);
+  }
+  const settlementKey = authorization.id + ":settlement";
+  let existing = await eventByKey(settlementKey);
+  if (existing?.status === "settled") {
+    return mapSettlementEvent(existing, await reconcileBalanceMc(user.id, user.balance_mc), true);
+  }
+  if (existing?.status === "settling") {
+    return recoverSettlement(existing, user, authorization, true);
+  }
+  const hadExistingClaim = Boolean(existing);
+  const rawCostNanos = rawCostUsd == null ? null : Math.round(rawCostUsd * USD_NANOS);
+  const modelMc = rawCostUsd == null ? 0 : vendorCostUsdToMc(rawCostUsd, SCHEDULED_AGENT_LLM_MARKUP_BPS);
+  const maximumModelMc = Math.max(0, Number(authorization.maximum_amount_mc) - SCHEDULED_RUN_BASE_MC);
+  const pendingReason = args.modelCostStatus === "missing" ? "openrouter_cost_missing" : modelMc > maximumModelMc ? "max_credits_per_run_exceeded" : null;
+  const metadata = safeMetadata({
+    ...args.metadata,
+    billingPhase: "settlement",
+    chargeMode: "model_delta",
+    ...pendingReason ? { reason: pendingReason } : {}
+  });
+  const eventId = existing?.id ?? (0, import_node_crypto4.randomUUID)();
+  const status = pendingReason ? "cost_pending" : "settling";
+  const eventValues = [
     modelMc,
-    rawCostUsd,
-    multiplierBps: SCHEDULED_AGENT_LLM_MARKUP_BPS,
-    balanceMc: debit.balance_mc,
-    duplicate: false
-  };
+    rawCostNanos,
+    SCHEDULED_AGENT_LLM_MARKUP_BPS,
+    Math.max(0, Math.round(args.inputTokens ?? 0)),
+    Math.max(0, Math.round(args.outputTokens ?? 0)),
+    Math.max(0, Math.round(args.cachedTokens ?? 0)),
+    Math.max(0, Math.round(args.modelSteps ?? 0)),
+    metadata
+  ];
+  if (existing) {
+    await getDb().execute({
+      sql: "UPDATE billing_events SET status = ?, amount_mc = ?, raw_cost_usd_nanos = ?, multiplier_bps = ?, input_tokens = ?, output_tokens = ?, cached_tokens = ?, model_steps = ?, metadata = ?, settled_at = NULL WHERE id = ? AND status = 'cost_pending'",
+      args: [status, ...eventValues, existing.id]
+    });
+  } else {
+    await getDb().execute({
+      sql: "INSERT OR IGNORE INTO billing_events (id, user_id, authorization_id, idempotency_key, billing_class, source_surface, status, amount_mc, raw_cost_usd_nanos, multiplier_bps, input_tokens, output_tokens, cached_tokens, model_steps, metadata) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+      args: [eventId, user.id, authorization.id, settlementKey, SCHEDULED_RUN_BILLING_CLASS, SCHEDULED_RUN_SOURCE_SURFACE, status, ...eventValues]
+    });
+  }
+  existing = await eventByKey(settlementKey);
+  if (!existing) throw new Error("scheduled-run settlement claim was not readable");
+  const duplicateClaim = hadExistingClaim || eventId !== existing.id;
+  if (existing.status === "settled") {
+    return mapSettlementEvent(existing, await reconcileBalanceMc(user.id, user.balance_mc), true);
+  }
+  if (existing.status === "cost_pending") {
+    await getDb().execute({
+      sql: "UPDATE billing_authorizations SET status = 'cost_pending' WHERE id = ? AND status IN ('started', 'cost_pending')",
+      args: [authorization.id]
+    });
+    return mapSettlementEvent(existing, await reconcileBalanceMc(user.id, user.balance_mc), duplicateClaim);
+  }
+  if (existing.status !== "settling") {
+    throw new UnifiedBillingError("settlement_in_progress", "scheduled-run settlement could not be claimed", 409);
+  }
+  return recoverSettlement(existing, user, authorization, duplicateClaim);
 }
 async function voidScheduledRunAuthorization(args) {
-  const identity = normalizeIdentity(args.identity);
-  const user = await getUserByEmail(identity);
-  if (!user) throw new UnifiedBillingError("user_not_found", "billing identity was not found", 404);
+  const user = await resolveSchedulingUser(args.identity);
   const authorization = await authorizationById(args.authorizationId);
   if (!authorization || Number(authorization.user_id) !== user.id) {
     throw new UnifiedBillingError("authorization_not_found", "billing authorization was not found", 404);
   }
   verifyToken(authorization, args.authorizationToken);
   if (authorization.status === "authorized") {
-    await getDb().execute({
+    const result = await getDb().execute({
       sql: "UPDATE billing_authorizations SET status = 'void', metadata = ?, settled_at = datetime('now') WHERE id = ? AND status = 'authorized'",
       args: [safeMetadata({ reason: args.reason ?? "voided_before_execution" }), authorization.id]
     });
-    return { ok: true, status: "void" };
+    if (result.rowsAffected > 0) return { ok: true, status: "void" };
+    const raced = await authorizationById(authorization.id);
+    return { ok: true, status: raced?.status ?? "closed" };
   }
   return { ok: true, status: authorization.status };
 }
@@ -12326,7 +12842,7 @@ var init_unified_billing = __esm({
     init_scheduling_access();
     SCHEDULED_RUN_BILLING_CLASS = "scheduled_agent_run";
     SCHEDULED_RUN_SOURCE_SURFACE = "mastra_scheduler";
-    AUTHORIZATION_TTL_MS = 30 * 60 * 1e3;
+    AUTHORIZATION_TTL_MS = 24 * 60 * 60 * 1e3;
     UnifiedBillingError = class extends Error {
       constructor(code, message, httpStatus, details = {}) {
         super(message);
@@ -12551,7 +13067,7 @@ function billingError(error) {
     status: 500
   };
 }
-var import_hono3, import_zod12, internalBillingApp, metadataSchema, schedulingAccessSchema, authorizeSchema, settleSchema, voidSchema;
+var import_hono3, import_zod12, internalBillingApp, metadataSchema, schedulingAccessSchema, authorizeSchema, settleSchema, startSchema, voidSchema;
 var init_internal_billing_routes = __esm({
   "src/api/internal-billing-routes.ts"() {
     "use strict";
@@ -12585,6 +13101,12 @@ var init_internal_billing_routes = __esm({
       modelSteps: import_zod12.z.number().finite().nonnegative().optional(),
       metadata: metadataSchema
     });
+    startSchema = import_zod12.z.object({
+      identity: import_zod12.z.string().min(1).max(320),
+      authorizationId: import_zod12.z.string().uuid(),
+      authorizationToken: import_zod12.z.string().min(20).max(500),
+      metadata: metadataSchema
+    });
     voidSchema = import_zod12.z.object({
       identity: import_zod12.z.string().min(1).max(320),
       authorizationId: import_zod12.z.string().uuid(),
@@ -12658,6 +13180,19 @@ var init_internal_billing_routes = __esm({
         return c.json(response.body, response.status);
       }
     });
+    internalBillingApp.post("/scheduled-run/start", async (c) => {
+      const parsed = startSchema.safeParse(await c.req.json().catch(() => null));
+      if (!parsed.success) {
+        return c.json({ ok: false, error_code: "invalid_request", error: "invalid scheduled-run start request" }, 400);
+      }
+      try {
+        const start = await startScheduledRun(parsed.data);
+        return c.json({ ok: true, start });
+      } catch (error) {
+        const response = billingError(error);
+        return c.json(response.body, response.status);
+      }
+    });
     internalBillingApp.post("/scheduled-run/void", async (c) => {
       const parsed = voidSchema.safeParse(await c.req.json().catch(() => null));
       if (!parsed.success) {
@@ -12944,6 +13479,7 @@ var init_BrowserDriver = __esm({
           else if (config.headlessMode === "headless") useHeadless = true;
           else useHeadless = costCtx?.forceHeadless === true || process.env.KERNEL_HEADLESS_DISABLED !== "true" && !!costCtx?.op && HEADLESS_OPS.has(costCtx.op);
           this.kernelHeadlessSent = useHeadless ? true : null;
+          if (costCtx?.headlessSentOut) costCtx.headlessSentOut.value = this.kernelHeadlessSent;
           const kernelBrowser = await this.kernelClient.browsers.create({
             stealth: true,
             timeout_seconds: timeoutSeconds,
@@ -16426,6 +16962,15 @@ function buildPageIntelUrl(body, country) {
   if (body.pageId?.trim()) return `https://www.facebook.com/ads/library/?active_status=all&ad_type=all&country=${country}&is_targeted_country=false&media_type=all&search_type=page&view_all_page_id=${body.pageId.trim()}`;
   return `https://www.facebook.com/ads/library/?active_status=all&ad_type=all&country=${country}&q=${encodeURIComponent(body.query.trim())}&search_type=keyword_unordered`;
 }
+function pageIntelRequestContext(body) {
+  const country = body.country?.trim().toUpperCase() ?? "US";
+  return {
+    country,
+    maxAds: Math.min(200, Math.max(1, body.maxAds ?? 50)),
+    listingUrl: buildPageIntelUrl(body, country),
+    subject: body.pageId ?? body.query ?? body.libraryId ?? ""
+  };
+}
 function normalizeAdvertiserName(value) {
   return value.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, " ").trim().replace(/\s+/g, " ");
 }
@@ -16590,16 +17135,14 @@ var init_facebook_ad_routes = __esm({
       const parsed = FacebookPageIntelBodySchema.safeParse(raw);
       if (!parsed.success) return c.json(invalidRequest(parsed.error.issues[0]?.message ?? "Invalid request"), 400);
       const body = parsed.data;
-      const maxAds = Math.min(200, Math.max(1, body.maxAds ?? 50));
-      const country = body.country?.trim().toUpperCase() ?? "US";
-      const listingUrl = buildPageIntelUrl(body, country);
+      const { country, maxAds, listingUrl, subject } = pageIntelRequestContext(body);
       const fbUser = c.get("user");
       const gate = await acquireConcurrencyGate(fbUser, "facebook_page_intel", { reuseLockId: c.req.header("x-mcp-scraper-concurrency-lock"), metadata: { pageId: body.pageId, query: body.query, libraryId: body.libraryId, country } });
       if (!gate.ok) return c.json(concurrencyLimitExceededResponse(gate), 429, { "Retry-After": String(gate.retryAfterSeconds) });
       const driver = new BrowserDriver();
       let refunded = false, debited = false;
       try {
-        const { ok: fbOk, balance_mc: fbBal } = await debitMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD, body.pageId ?? body.query ?? body.libraryId ?? "");
+        const { ok: fbOk, balance_mc: fbBal } = await debitMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD, subject);
         if (!fbOk) return c.json(insufficientBalanceResponse(fbBal, MC_COSTS.fb_ad), 402);
         debited = true;
         await driver.launch(await kernelLaunchOptsResidential());
@@ -16609,17 +17152,17 @@ var init_facebook_ad_routes = __esm({
         if (result.ads.length === 0 && await detectSoftBlock(driver)) {
           await creditMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD_REFUND, "soft-block empty result");
           refunded = true;
-          await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: body.pageId ?? body.query ?? body.libraryId ?? "", error: "soft-block: empty result refunded" });
+          await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: subject, error: "soft-block: empty result refunded" });
           return c.json({ error: "soft-block: no ads returned (refunded)" }, 503);
         }
         const match = assessPageIntelMatch(body, result);
         const output = { ...result, ...match };
-        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "done", query: body.pageId ?? body.query ?? body.libraryId ?? "", resultCount: result.ads.length, result: output });
+        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "done", query: subject, resultCount: result.ads.length, result: output });
         return c.json(output);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         if (debited && !refunded) await creditMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD_REFUND, "failed call");
-        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: body.pageId ?? body.query ?? body.libraryId ?? "", error: msg });
+        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: subject, error: msg });
         if (msg.toLowerCase().includes("blocked") || msg.toLowerCase().includes("captcha")) {
           return c.json({ error: msg }, 503);
         }
@@ -22369,21 +22912,33 @@ function formatCaptureSerpSnapshot(raw, input) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
+  const harvestResult = d.harvestResult && typeof d.harvestResult === "object" ? d.harvestResult : d;
   const providerPayload = d;
-  const organic = Array.isArray(d.organicResults) ? d.organicResults : Array.isArray(d.organic) ? d.organic : [];
-  const localPack = Array.isArray(d.localPack) ? d.localPack : [];
-  const artifacts = Array.isArray(d.artifacts) ? d.artifacts : [];
-  const status = String(d.status ?? d.captureStatus ?? "captured");
-  const query = typeof d.query === "string" ? d.query : typeof input.query === "string" ? input.query : null;
-  const location2 = typeof d.location === "string" ? d.location : typeof input.location === "string" ? input.location : null;
-  const capturedAt = typeof d.capturedAt === "string" ? d.capturedAt : typeof d.extractedAt === "string" ? d.extractedAt : null;
+  const organic = Array.isArray(harvestResult.organicResults) ? harvestResult.organicResults : Array.isArray(harvestResult.organic) ? harvestResult.organic : [];
+  const localPack = Array.isArray(harvestResult.localPack) ? harvestResult.localPack : [];
+  const artifacts = Array.isArray(d.pageSnapshotArtifacts) ? d.pageSnapshotArtifacts : Array.isArray(d.artifacts) ? d.artifacts : [];
+  const attempts = Array.isArray(d.attempts) ? d.attempts : [];
+  const diagnostics = harvestResult.diagnostics && typeof harvestResult.diagnostics === "object" ? harvestResult.diagnostics : d.diagnostics && typeof d.diagnostics === "object" ? d.diagnostics : null;
+  const completionStatus = diagnostics && typeof diagnostics.completionStatus === "string" ? diagnostics.completionStatus : null;
+  const status = String(d.status ?? d.captureStatus ?? completionStatus ?? "captured");
+  const query = typeof harvestResult.seed === "string" ? harvestResult.seed : typeof harvestResult.query === "string" ? harvestResult.query : typeof input.query === "string" ? input.query : null;
+  const location2 = typeof harvestResult.location === "string" ? harvestResult.location : typeof input.location === "string" ? input.location : null;
+  const capturedAt = typeof harvestResult.extractedAt === "string" ? harvestResult.extractedAt : typeof harvestResult.capturedAt === "string" ? harvestResult.capturedAt : null;
   const resultCount = organic.length + localPack.length;
+  const pageSnapshotFailedCount = artifacts.filter((artifact) => artifact.status === "failed" || Boolean(artifact.error)).length;
+  const rawBilling = d.billing && typeof d.billing === "object" ? d.billing : null;
+  const billing = rawBilling ? {
+    creditsUsed: typeof rawBilling.creditsUsed === "number" ? rawBilling.creditsUsed : null,
+    requestId: typeof rawBilling.requestId === "string" ? rawBilling.requestId : null,
+    jobId: typeof rawBilling.jobId === "string" ? rawBilling.jobId : null
+  } : null;
   const full = [
     `# SERP Intelligence Snapshot: ${query ?? "query"}`,
     `**Status:** ${status}`,
     location2 ? `**Location:** ${location2}` : "",
-    `**Result count:** ${resultCount}`,
-    artifacts.length ? `**Artifacts:** ${artifacts.length}` : "",
+    `**SERP results:** ${resultCount} (${organic.length} organic, ${localPack.length} local pack)`,
+    `**Page snapshots:** ${artifacts.length} (${pageSnapshotFailedCount} failed)`,
+    billing?.creditsUsed !== null && billing?.creditsUsed !== void 0 ? `**Credits used:** ${billing.creditsUsed}` : "",
     "",
     "Use `capture_serp_page_snapshots` when you need page-level evidence for ranking URLs."
   ].filter(Boolean).join("\n");
@@ -22396,6 +22951,10 @@ function formatCaptureSerpSnapshot(raw, input) {
       location: location2,
       capturedAt,
       resultCount,
+      organicResultCount: organic.length,
+      localPackResultCount: localPack.length,
+      pageSnapshotCount: artifacts.length,
+      pageSnapshotFailedCount,
       snapshotId: typeof d.snapshotId === "string" ? d.snapshotId : typeof d.snapshot_id === "string" ? d.snapshot_id : typeof d.id === "string" ? d.id : null,
       resolvedInputs: {
         query: input.query ?? null,
@@ -22408,7 +22967,9 @@ function formatCaptureSerpSnapshot(raw, input) {
         pages: input.pages ?? null
       },
       artifacts,
-      diagnostics: d.diagnostics && typeof d.diagnostics === "object" ? d.diagnostics : null,
+      attempts,
+      billing,
+      diagnostics,
       providerPayload
     }
   };
@@ -22417,9 +22978,13 @@ function formatCaptureSerpPageSnapshots(raw, input) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
-  const captures = Array.isArray(d.captures) ? d.captures : Array.isArray(d.results) ? d.results : [];
+  const captures = Array.isArray(d.pageSnapshotArtifacts) ? d.pageSnapshotArtifacts : Array.isArray(d.captures) ? d.captures : Array.isArray(d.results) ? d.results : [];
   const failedCount = captures.filter((c) => c.status === "failed" || c.error).length;
-  const status = String(d.status ?? (failedCount ? "partial" : "captured"));
+  const capturedCount = captures.filter((c) => c.status === "captured" || c.status === "ok").length;
+  const skippedCount = captures.filter((c) => c.status === "skipped").length;
+  const attempts = Array.isArray(d.attempts) ? d.attempts : [];
+  const inferredStatus = captures.length === 0 ? "empty" : failedCount === captures.length ? "failed" : failedCount > 0 || skippedCount > 0 ? "partial" : "captured";
+  const status = String(d.status ?? inferredStatus);
   const rows = captures.slice(0, 25).map((capture, i) => {
     const url = typeof capture.url === "string" ? capture.url : "";
     const sourceKind = typeof capture.sourceKind === "string" ? capture.sourceKind : typeof capture.source_kind === "string" ? capture.source_kind : "configured_target";
@@ -22428,8 +22993,10 @@ function formatCaptureSerpPageSnapshots(raw, input) {
   const full = [
     "# SERP Intelligence Page Snapshots",
     `**Status:** ${status}`,
-    `**Captured:** ${captures.length}`,
+    `**Attempted:** ${captures.length}`,
+    `**Captured:** ${capturedCount}`,
     `**Failed:** ${failedCount}`,
+    skippedCount ? `**Skipped:** ${skippedCount}` : "",
     captures.length ? `
 | # | URL | Source | Status |
 |---|-----|--------|--------|
@@ -22441,8 +23008,11 @@ ${rows}` : ""
       schemaVersion: "serp-intelligence.page-snapshots.v1",
       status,
       count: captures.length,
+      capturedCount,
       failedCount,
+      skippedCount,
       captures,
+      attempts,
       resolvedInputs: {
         urls: input.urls ?? null,
         targets: input.targets ?? null,
@@ -27982,12 +28552,22 @@ var init_schemas4 = __esm({
       sourcePosition: import_zod33.z.number().int().min(1).optional()
     }).strict();
     SerpIntelligencePageSnapshotsBodySchema = import_zod33.z.object({
-      urls: import_zod33.z.array(SerpIntelligencePublicHttpUrlSchema).min(1).max(25),
+      urls: import_zod33.z.array(SerpIntelligencePublicHttpUrlSchema).min(1).max(25).optional(),
       targets: import_zod33.z.array(SerpIntelligencePageSnapshotRequestSchema).min(1).max(25).optional(),
       maxConcurrency: import_zod33.z.number().int().min(1).max(5).default(2),
       timeoutMs: import_zod33.z.number().int().min(1e3).max(6e4).default(15e3),
       debug: import_zod33.z.boolean().default(false)
-    }).strict();
+    }).strict().superRefine((body, ctx) => {
+      const hasUrls = Boolean(body.urls?.length);
+      const hasTargets = Boolean(body.targets?.length);
+      if (hasUrls === hasTargets) {
+        ctx.addIssue({
+          code: import_zod33.z.ZodIssueCode.custom,
+          message: "provide exactly one of urls or targets",
+          path: hasUrls ? ["targets"] : ["urls"]
+        });
+      }
+    });
     SerpIntelligenceAICitationSchema = import_zod33.z.object({
       text: import_zod33.z.string(),
       href: import_zod33.z.string()
@@ -28247,14 +28827,24 @@ async function captureSerpIntelligenceSnapshot(rawInput, runtimeOptions = {}) {
     });
     const pageSnapshotLimit = normalizePageSnapshotLimit(parsedInput);
     const pageSnapshotTargets = collectPageSnapshotTargets(harvestResult, pageSnapshotLimit);
-    const pageSnapshotArtifacts = pageSnapshotTargets.length > 0 ? (await capturePageSnapshotsFn(pageSnapshotTargets, {
-      kernelApiKey: runtimeOptions.kernelApiKey ?? browserServiceApiKey(),
-      timeoutMs: runtimeOptions.pageSnapshotTimeoutMs,
-      maxConcurrency: runtimeOptions.pageSnapshotMaxConcurrency,
-      debug,
-      includeContent: runtimeOptions.includePageSnapshotContent,
-      maxContentChars: runtimeOptions.maxPageSnapshotContentChars
-    })).pageSnapshotArtifacts.map(stripPageSnapshotArtifact) : [];
+    const pageSnapshotArtifacts = pageSnapshotTargets.length > 0 ? (await runWithCostContext(
+      {
+        ...currentCostContext() ?? { op: "serp" },
+        subOp: "page_snapshot",
+        // Page snapshot launches have their own fixed product rate. They
+        // must not overwrite the headless/headful mode used to settle the
+        // preceding SERP harvest.
+        headlessSentOut: void 0
+      },
+      () => capturePageSnapshotsFn(pageSnapshotTargets, {
+        kernelApiKey: runtimeOptions.kernelApiKey ?? browserServiceApiKey(),
+        timeoutMs: runtimeOptions.pageSnapshotTimeoutMs,
+        maxConcurrency: runtimeOptions.pageSnapshotMaxConcurrency,
+        debug,
+        includeContent: runtimeOptions.includePageSnapshotContent,
+        maxContentChars: runtimeOptions.maxPageSnapshotContentChars
+      })
+    )).pageSnapshotArtifacts.map(stripPageSnapshotArtifact) : [];
     return normalizeHarvestResultForSerpIntelligence({
       harvestResult,
       attempts,
@@ -28271,6 +28861,7 @@ var init_serp_capture_service = __esm({
     "use strict";
     init_harvest();
     init_browser_service_env();
+    init_cost_context();
     init_harvest_problems();
     init_page_snapshot_extractor();
     init_schemas4();
@@ -28344,17 +28935,35 @@ async function enforceSerpIntelligenceRateLimit(c, userId) {
   );
 }
 function pageSnapshotTargetsFromBody(body) {
-  return body.targets?.length ? body.targets : body.urls.map((url) => ({
+  return body.targets?.length ? body.targets : (body.urls ?? []).map((url) => ({
     url,
     sourceKind: "configured_target",
     sourcePosition: null
   }));
 }
-var import_hono16, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, serpIntelligenceApp;
+async function logRequestEventBestEffort(input) {
+  try {
+    await logRequestEvent(input);
+  } catch (error) {
+    console.warn("[serp-intelligence] request audit log failed:", error instanceof Error ? error.message : String(error));
+  }
+}
+function captureBillingKeys(userId, suppliedKey, body) {
+  const responseKey = suppliedKey?.trim() || (0, import_node_crypto12.randomUUID)();
+  const requestFingerprint = (0, import_node_crypto12.createHash)("sha256").update(JSON.stringify(body)).digest("hex");
+  const keyDigest = (0, import_node_crypto12.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
+  return {
+    responseKey,
+    debitKey: `serp-capture:${userId}:${keyDigest}`,
+    debitDescription: `${body.query} [request:${requestFingerprint}]`
+  };
+}
+var import_hono16, import_node_crypto12, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, SERP_CAPTURE_BILLING_SOURCE, serpIntelligenceApp;
 var init_serp_intelligence_routes = __esm({
   "src/api/serp-intelligence-routes.ts"() {
     "use strict";
     import_hono16 = require("hono");
+    import_node_crypto12 = require("crypto");
     init_browser_service_env();
     init_page_snapshot_extractor();
     init_serp_capture_service();
@@ -28362,11 +28971,13 @@ var init_serp_intelligence_routes = __esm({
     init_api_auth();
     init_db();
     init_rates();
+    init_cost_context();
     init_concurrency_gates();
     SERP_INTELLIGENCE_RATE_LIMIT = 60;
     SERP_INTELLIGENCE_RATE_WINDOW_SECONDS = 60;
     POST_CAPTURE_ROUTE_LABEL = "POST /capture";
     POST_PAGE_SNAPSHOTS_ROUTE_LABEL = "POST /page-snapshots";
+    SERP_CAPTURE_BILLING_SOURCE = "serp_intelligence_capture";
     serpIntelligenceApp = new import_hono16.Hono();
     serpIntelligenceApp.use("*", createApiKeyAuth());
     serpIntelligenceApp.post("/capture", async (c) => {
@@ -28375,6 +28986,17 @@ var init_serp_intelligence_routes = __esm({
       const raw = await c.req.json().catch(() => ({}));
       const parsed = SerpIntelligenceCaptureBodySchema.safeParse(raw);
       if (!parsed.success) return c.json(formatZodError(parsed.error), 400);
+      const suppliedIdempotencyKey = c.req.header("idempotency-key") ?? c.req.header("x-idempotency-key");
+      if (suppliedIdempotencyKey && suppliedIdempotencyKey.trim().length > 500) {
+        return c.json(structuredError({
+          error_code: "invalid_request",
+          error_type: "validation_error",
+          message: "Idempotency-Key must be 500 characters or fewer.",
+          retryable: false
+        }), 400);
+      }
+      const billingKeys = captureBillingKeys(user.id, suppliedIdempotencyKey, parsed.data);
+      c.header("Idempotency-Key", billingKeys.responseKey);
       const limited = await enforceSerpIntelligenceRateLimit(c, user.id);
       if (limited) return limited;
       const gate = await acquireConcurrencyGate(user, "serp_intelligence_capture", {
@@ -28382,51 +29004,130 @@ var init_serp_intelligence_routes = __esm({
         metadata: { query: parsed.data.query, location: parsed.data.location }
       });
       if (!gate.ok) return c.json(concurrencyLimitExceededResponse(gate), 429, { "Retry-After": String(gate.retryAfterSeconds) });
-      const cost = MC_COSTS.serp;
-      let debited = false;
+      const pageSnapshotHold = parsed.data.includePageSnapshots ? parsed.data.pageSnapshotLimit * MC_COSTS.page_scrape : 0;
+      const cost = MC_COSTS.serp_headful + pageSnapshotHold;
+      const headlessSentOut = { value: null };
       try {
-        const { ok, balance_mc } = await debitMc(
+        const { ok, balance_mc } = await debitMcIdempotent(
           user.id,
           cost,
           LedgerOperation.SERP,
-          parsed.data.query
+          billingKeys.debitDescription,
+          billingKeys.debitKey
         );
-        if (!ok) return c.json(insufficientBalanceResponse(balance_mc, cost), 402);
-        debited = true;
-        const result = await captureSerpIntelligenceSnapshot(parsed.data, {
-          kernelApiKey: browserServiceApiKey(),
-          kernelProxyId: browserServiceProxyId(),
-          signal: c.req.raw.signal,
-          billing: { creditsUsed: cost / MC_PER_CREDIT }
+        if (!ok) {
+          await releaseConcurrencyGate(gate.lockId);
+          return c.json(insufficientBalanceResponse(balance_mc, cost), 402);
+        }
+      } catch (error) {
+        const idempotencyConflict = error instanceof Error && error.message === "idempotent debit key conflicts with another debit";
+        const body = structuredError({
+          error_code: idempotencyConflict ? "idempotency_conflict" : "capture_failed",
+          error_type: idempotencyConflict ? "validation_error" : "capture_error",
+          message: error instanceof Error ? error.message : String(error),
+          retryable: !idempotencyConflict
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
-          source: "serp_intelligence_capture",
-          status: "done",
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "failed",
           query: parsed.data.query,
           location: parsed.data.location,
-          resultCount: result.harvestResult.organicResults.length,
-          result
+          error: body.message
         });
-        return c.json(result);
+        await releaseConcurrencyGate(gate.lockId);
+        return c.json(body, idempotencyConflict ? 409 : 500);
+      }
+      let result;
+      try {
+        const parentCostContext = currentCostContext();
+        result = await runWithCostContext(
+          {
+            ...parentCostContext ?? {},
+            op: "serp",
+            userId: Number(user.id),
+            headlessSentOut
+          },
+          () => captureSerpIntelligenceSnapshot(parsed.data, {
+            kernelApiKey: browserServiceApiKey(),
+            kernelProxyId: browserServiceProxyId(),
+            signal: c.req.raw.signal
+          })
+        );
       } catch (error) {
-        if (debited) await creditMc(user.id, cost, LedgerOperation.REFUND, "failed serp intelligence capture");
+        try {
+          await settleDebitMcIdempotent(
+            user.id,
+            billingKeys.debitKey,
+            0,
+            LedgerOperation.SERP_REFUND,
+            "failed serp intelligence capture",
+            SERP_CAPTURE_BILLING_SOURCE
+          );
+        } catch (settlementError) {
+          console.warn(
+            "[serp-intelligence] failed capture refund remains recoverable:",
+            settlementError instanceof Error ? settlementError.message : String(settlementError)
+          );
+        }
         const body = error instanceof SerpIntelligenceCaptureError ? error.toJSON() : structuredError({
           error_code: "capture_failed",
           error_type: "capture_error",
           message: error instanceof Error ? error.message : String(error),
           retryable: true
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
-          source: "serp_intelligence_capture",
+          source: SERP_CAPTURE_BILLING_SOURCE,
           status: "failed",
           query: parsed.data.query,
           location: parsed.data.location,
           error: "message" in body && typeof body.message === "string" ? body.message : "SERP Intelligence capture failed"
         });
         const status = error instanceof SerpIntelligenceCaptureError ? error.httpStatus : 500;
+        await releaseConcurrencyGate(gate.lockId);
         return c.json(body, status);
+      }
+      try {
+        const requestedActualCost = serpActualCostMc(headlessSentOut.value) + result.pageSnapshotArtifacts.length * MC_COSTS.page_scrape;
+        const settlement = await settleDebitMcIdempotent(
+          user.id,
+          billingKeys.debitKey,
+          requestedActualCost,
+          LedgerOperation.SERP_REFUND,
+          "SERP capture pricing settle",
+          SERP_CAPTURE_BILLING_SOURCE
+        );
+        const settledResult = {
+          ...result,
+          billing: { creditsUsed: settlement.final_amount_mc / MC_PER_CREDIT }
+        };
+        await logRequestEventBestEffort({
+          userId: user.id,
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "done",
+          query: parsed.data.query,
+          location: parsed.data.location,
+          resultCount: settledResult.harvestResult.organicResults.length,
+          result: settledResult
+        });
+        return c.json(settledResult);
+      } catch (error) {
+        const body = structuredError({
+          error_code: "capture_failed",
+          error_type: "capture_error",
+          message: error instanceof Error ? error.message : String(error),
+          retryable: true
+        });
+        await logRequestEventBestEffort({
+          userId: user.id,
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "failed",
+          query: parsed.data.query,
+          location: parsed.data.location,
+          error: body.message
+        });
+        return c.json(body, 500);
       } finally {
         await releaseConcurrencyGate(gate.lockId);
       }
@@ -28462,7 +29163,7 @@ var init_serp_intelligence_routes = __esm({
           maxConcurrency: parsed.data.maxConcurrency,
           debug: parsed.data.debug
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
           source: "serp_intelligence_page_snapshots",
           status: "done",
@@ -28479,7 +29180,7 @@ var init_serp_intelligence_routes = __esm({
           message: error instanceof Error ? error.message : String(error),
           retryable: true
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
           source: "serp_intelligence_page_snapshots",
           status: "failed",
@@ -28499,7 +29200,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.21.2";
+    PACKAGE_VERSION = "0.21.4";
   }
 });
 
@@ -29785,9 +30486,19 @@ var init_mcp_tool_schemas = __esm({
       location: NullableString,
       capturedAt: NullableString,
       resultCount: import_zod34.z.number().int().min(0).nullable(),
+      organicResultCount: import_zod34.z.number().int().min(0),
+      localPackResultCount: import_zod34.z.number().int().min(0),
+      pageSnapshotCount: import_zod34.z.number().int().min(0),
+      pageSnapshotFailedCount: import_zod34.z.number().int().min(0),
       snapshotId: NullableString,
       resolvedInputs: import_zod34.z.record(import_zod34.z.unknown()),
       artifacts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      attempts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      billing: import_zod34.z.object({
+        creditsUsed: import_zod34.z.number().min(0).nullable(),
+        requestId: NullableString,
+        jobId: NullableString
+      }).nullable(),
       diagnostics: import_zod34.z.record(import_zod34.z.unknown()).nullable(),
       providerPayload: import_zod34.z.record(import_zod34.z.unknown())
     };
@@ -29795,8 +30506,11 @@ var init_mcp_tool_schemas = __esm({
       schemaVersion: import_zod34.z.literal("serp-intelligence.page-snapshots.v1"),
       status: import_zod34.z.string(),
       count: import_zod34.z.number().int().min(0),
+      capturedCount: import_zod34.z.number().int().min(0),
       failedCount: import_zod34.z.number().int().min(0),
+      skippedCount: import_zod34.z.number().int().min(0),
       captures: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      attempts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
       resolvedInputs: import_zod34.z.record(import_zod34.z.unknown()),
       diagnostics: import_zod34.z.record(import_zod34.z.unknown()).nullable(),
       providerPayload: import_zod34.z.record(import_zod34.z.unknown())
@@ -29921,8 +30635,8 @@ var init_mcp_tool_schemas = __esm({
       proxyZip: import_zod34.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location".'),
       pages: import_zod34.z.number().int().min(1).max(2).default(1).describe("Google result pages to capture. Use 2 only for deeper ranking evidence."),
       debug: import_zod34.z.boolean().default(false).describe("Include sanitized browser/proxy/location diagnostics."),
-      includePageSnapshots: import_zod34.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs."),
-      pageSnapshotLimit: import_zod34.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots when includePageSnapshots is true.")
+      includePageSnapshots: import_zod34.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs. Each attempted snapshot adds 1 Credit."),
+      pageSnapshotLimit: import_zod34.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots when includePageSnapshots is true. This capacity is held up front and unused capacity is refunded.")
     };
     ScreenshotInputSchema = {
       url: import_zod34.z.string().url().describe("URL to capture as a full-page screenshot. Use http or https. Pass allowLocal: true to capture localhost or private-network URLs during development."),
@@ -29930,12 +30644,12 @@ var init_mcp_tool_schemas = __esm({
       allowLocal: import_zod34.z.boolean().default(false).describe("Allow localhost and private-network URLs (127.x, 192.168.x, 10.x, etc.). For local development only \u2014 not for production use.")
     };
     CaptureSerpPageSnapshotsInputSchema = {
-      urls: import_zod34.z.array(import_zod34.z.string().url()).min(1).max(25).describe("Public HTTP/HTTPS URLs to capture. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
+      urls: import_zod34.z.array(import_zod34.z.string().url()).min(1).max(25).optional().describe("Public HTTP/HTTPS URLs to capture. Provide exactly one of urls or targets. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
       targets: import_zod34.z.array(import_zod34.z.object({
         url: import_zod34.z.string().url().describe("Public HTTP/HTTPS URL to capture."),
         sourceKind: import_zod34.z.enum(["organic", "ai_citation", "local_pack_website", "configured_target", "site_subject"]).default("configured_target").describe("Why this page is being captured."),
         sourcePosition: import_zod34.z.number().int().min(1).optional().describe("Ranking or citation position when the page came from SERP evidence.")
-      }).strict()).min(1).max(25).optional().describe("Structured targets. Use instead of urls when source kind or position should be preserved."),
+      }).strict()).min(1).max(25).optional().describe("Structured targets. Provide exactly one of targets or urls; use targets when source kind or position should be preserved."),
       maxConcurrency: import_zod34.z.number().int().min(1).max(5).default(2).describe("Parallel page captures."),
       timeoutMs: import_zod34.z.number().int().min(1e3).max(6e4).default(15e3).describe("Per-page capture timeout in milliseconds; timeouts return as structured capture failures."),
       debug: import_zod34.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics.")
@@ -30571,7 +31285,7 @@ var init_rank_tracker_blueprint = __esm({
 
 // src/mcp/paa-mcp-server.ts
 function hashOwnerId(callerKey) {
-  return (0, import_node_crypto12.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto13.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
 }
 function liveWebToolAnnotations(title) {
   return {
@@ -30585,14 +31299,14 @@ function liveWebToolAnnotations(title) {
 function registerSerpIntelligenceCaptureTools(server, executor) {
   server.registerTool("capture_serp_snapshot", {
     title: "SERP Intelligence Snapshot",
-    description: "Capture a structured SERP Intelligence snapshot of a Google query \u2014 the persistent evidence format used by rank-tracking and comparison pipelines. Split query from location; leave proxyMode unset.",
+    description: "Capture a structured SERP Intelligence snapshot of a Google query \u2014 the persistent evidence format used by rank-tracking and comparison pipelines. Split query from location; leave proxyMode unset. Costs 4 Credits when headless or 14 if anti-bot escalation requires headful mode; the 14-Credit hold is settled to the mode used. Optional page snapshots add 1 Credit per attempted URL.",
     inputSchema: CaptureSerpSnapshotInputSchema,
     outputSchema: recordOutputSchema("capture_serp_snapshot", CaptureSerpSnapshotOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Snapshot")
   }, async (input) => formatCaptureSerpSnapshot(await executor.captureSerpSnapshot(input), input));
   server.registerTool("capture_serp_page_snapshots", {
     title: "SERP Intelligence Page Snapshots",
-    description: "Capture public ranking pages as SERP Intelligence page snapshots \u2014 persistent page evidence linked to a captured SERP. Provide urls, or targets to preserve source metadata. Private IPs, localhost, file, and internal URLs are rejected.",
+    description: "Capture public ranking pages as SERP Intelligence page snapshots \u2014 persistent page evidence linked to a captured SERP. Provide exactly one of urls or targets; use targets to preserve source metadata. Private IPs, localhost, file, and internal URLs are rejected. Costs 1 Credit per attempted URL.",
     inputSchema: CaptureSerpPageSnapshotsInputSchema,
     outputSchema: recordOutputSchema("capture_serp_page_snapshots", CaptureSerpPageSnapshotsOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Page Snapshots")
@@ -31015,14 +31729,14 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
     annotations: { title: "Set Scheduled Action Connections", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   }, async (input) => executor.setScheduledActionConnections(input));
 }
-var import_mcp, import_node_fs9, import_node_path13, import_node_crypto12;
+var import_mcp, import_node_fs9, import_node_path13, import_node_crypto13;
 var init_paa_mcp_server = __esm({
   "src/mcp/paa-mcp-server.ts"() {
     "use strict";
     import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
     import_node_fs9 = require("fs");
     import_node_path13 = require("path");
-    import_node_crypto12 = require("crypto");
+    import_node_crypto13 = require("crypto");
     init_version();
     init_mcp_response_formatter();
     init_server_instructions();
@@ -31092,10 +31806,11 @@ function withDefaultHostedProfile(input) {
     ...typeof saveProfileChanges === "boolean" ? { saveProfileChanges } : {}
   };
 }
-var HttpMcpToolExecutor;
+var import_node_crypto14, HttpMcpToolExecutor;
 var init_http_mcp_tool_executor = __esm({
   "src/mcp/http-mcp-tool-executor.ts"() {
     "use strict";
+    import_node_crypto14 = require("crypto");
     init_harvest_timeout();
     init_browser_service_env();
     HttpMcpToolExecutor = class {
@@ -31104,6 +31819,7 @@ var init_http_mcp_tool_executor = __esm({
       timeoutMs;
       httpTimeoutOverrideMs;
       serpIntelligenceTimeoutMs;
+      pendingSerpCaptureBillingKeys = /* @__PURE__ */ new Map();
       constructor(baseUrl, apiKey) {
         this.baseUrl = baseUrl.replace(/\/$/, "");
         this.apiKey = apiKey;
@@ -31114,13 +31830,14 @@ var init_http_mcp_tool_executor = __esm({
         const configuredSerpIntelligenceTimeoutMs = Number(process.env.MCP_SCRAPER_SERP_INTELLIGENCE_HTTP_TIMEOUT_MS ?? this.timeoutMs);
         this.serpIntelligenceTimeoutMs = Number.isFinite(configuredSerpIntelligenceTimeoutMs) && configuredSerpIntelligenceTimeoutMs > 0 ? configuredSerpIntelligenceTimeoutMs : this.timeoutMs;
       }
-      async call(path6, body, timeoutMs = this.timeoutMs, method = "POST") {
+      async call(path6, body, timeoutMs = this.timeoutMs, method = "POST", requestHeaders = {}) {
         try {
           const res = await fetch(`${this.baseUrl}${path6}`, {
             method,
             headers: {
               "Content-Type": "application/json",
-              "x-api-key": this.apiKey
+              "x-api-key": this.apiKey,
+              ...requestHeaders
             },
             body: JSON.stringify(body),
             signal: AbortSignal.timeout(timeoutMs)
@@ -31368,8 +32085,27 @@ var init_http_mcp_tool_executor = __esm({
           connections: input.connections
         }, void 0, "PUT");
       }
-      captureSerpSnapshot(input) {
-        return this.call("/serp-intelligence/capture", input, this.serpIntelligenceTimeoutMs);
+      async captureSerpSnapshot(input) {
+        const fingerprint = (0, import_node_crypto14.createHash)("sha256").update(JSON.stringify(input)).digest("hex");
+        const now = Date.now();
+        for (const [pendingFingerprint, pendingEntry] of this.pendingSerpCaptureBillingKeys) {
+          if (pendingEntry.expiresAt <= now) this.pendingSerpCaptureBillingKeys.delete(pendingFingerprint);
+        }
+        const pending = this.pendingSerpCaptureBillingKeys.get(fingerprint);
+        const idempotencyKey = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto14.randomUUID)();
+        this.pendingSerpCaptureBillingKeys.set(fingerprint, {
+          key: idempotencyKey,
+          expiresAt: now + 15 * 6e4
+        });
+        const result = await this.call(
+          "/serp-intelligence/capture",
+          input,
+          this.serpIntelligenceTimeoutMs,
+          "POST",
+          { "Idempotency-Key": idempotencyKey }
+        );
+        if (!result.isError) this.pendingSerpCaptureBillingKeys.delete(fingerprint);
+        return result;
       }
       captureSerpPageSnapshots(input) {
         return this.call("/serp-intelligence/page-snapshots", input, this.serpIntelligenceTimeoutMs);
@@ -36063,7 +36799,33 @@ var init_mcp_routes = __esm({
 // src/api/browser-agent-db.ts
 async function migrateBrowserAgent() {
   if (_ready2) return;
+  if (_migrationPromise2) return _migrationPromise2;
+  _migrationPromise2 = runBrowserAgentMigration().finally(() => {
+    _migrationPromise2 = null;
+  });
+  return _migrationPromise2;
+}
+async function runBrowserAgentMigration() {
   const db = getDb();
+  const existing = await db.execute(`
+    SELECT
+      (SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN (
+        'browser_agent_sessions',
+        'browser_agent_actions',
+        'browser_agent_replays',
+        'browser_auth_connections',
+        'browser_agent_extensions'
+      )) = 5
+      AND (SELECT COUNT(*) FROM pragma_table_info('browser_agent_sessions') WHERE name = 'concurrency_lock_id') = 1
+      AND (SELECT COUNT(*) FROM pragma_table_info('browser_auth_connections') WHERE name IN (
+        'account_email', 'note', 'updated_at', 'status', 'browser_agent_session_id'
+      )) = 5
+      AS ready
+  `);
+  if (Number(existing.rows[0]?.ready ?? 0) === 1) {
+    _ready2 = true;
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS browser_agent_sessions (
       id                  TEXT PRIMARY KEY,
@@ -36163,7 +36925,7 @@ async function migrateBrowserAgent() {
 }
 async function createExtensionRow(input) {
   const db = getDb();
-  const id = `bext_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bext_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_extensions (id, user_id, name, backend_id, backend_name, source, source_url, size_bytes)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
@@ -36198,7 +36960,7 @@ async function deleteExtensionRow(userId, name) {
 }
 async function createAuthConnectionRow(input) {
   const db = getDb();
-  const connectionId = `authc_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const connectionId = `authc_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_auth_connections (connection_id, domain, profile, account_email, note, status, browser_agent_session_id)
           VALUES (?, ?, ?, ?, ?, 'NEEDS_AUTH', ?)`,
@@ -36232,7 +36994,7 @@ async function listAuthConnectionsByProfile(profile) {
 }
 async function createSessionRow(input) {
   const db = getDb();
-  const id = `bas_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bas_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_sessions (id, runtime_session_id, live_view_url, cdp_ws_url, status, label, user_id, concurrency_lock_id, last_action_at)
           VALUES (?, ?, ?, ?, 'open', ?, ?, ?, datetime('now'))`,
@@ -36301,7 +37063,7 @@ async function recordAction(input) {
     sql: `INSERT INTO browser_agent_actions (id, session_id, type, params_json, ok, error)
           VALUES (?, ?, ?, ?, ?, ?)`,
     args: [
-      `baa_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
+      `baa_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
       input.sessionId,
       input.type,
       input.params == null ? null : JSON.stringify(input.params),
@@ -36341,13 +37103,14 @@ async function listReplayRows(sessionId) {
   });
   return res.rows;
 }
-var import_node_crypto13, _ready2;
+var import_node_crypto15, _ready2, _migrationPromise2;
 var init_browser_agent_db = __esm({
   "src/api/browser-agent-db.ts"() {
     "use strict";
-    import_node_crypto13 = require("crypto");
+    import_node_crypto15 = require("crypto");
     init_db();
     _ready2 = false;
+    _migrationPromise2 = null;
   }
 });
 
@@ -38057,7 +38820,7 @@ function buildBrowserAgentRoutes() {
     }
     const existing = await getExtensionRow(user.id, name);
     if (existing) return c.json({ error: `an extension named "${name}" already exists \u2014 delete it first or pick another name` }, 409);
-    const backendName = `u${user.id}_${(0, import_node_crypto14.randomUUID)().replace(/-/g, "")}`;
+    const backendName = `u${user.id}_${(0, import_node_crypto16.randomUUID)().replace(/-/g, "")}`;
     try {
       const imported = await importExtensionFromStore(storeUrl, backendName);
       const row = await createExtensionRow({
@@ -38116,11 +38879,11 @@ function buildBrowserAgentRoutes() {
   });
   return app2;
 }
-var import_node_crypto14, import_hono18, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
+var import_node_crypto16, import_hono18, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
 var init_browser_agent_routes = __esm({
   "src/api/browser-agent-routes.ts"() {
     "use strict";
-    import_node_crypto14 = require("crypto");
+    import_node_crypto16 = require("crypto");
     import_hono18 = require("hono");
     init_api_auth();
     init_errors();
@@ -38530,7 +39293,7 @@ async function getKeys() {
   const privateKey = await (0, import_jose2.importPKCS8)(pem, "RS256", { extractable: true });
   const full = await (0, import_jose2.exportJWK)(privateKey);
   const publicJwk = { kty: full.kty, n: full.n, e: full.e };
-  const kid = (0, import_node_crypto15.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
+  const kid = (0, import_node_crypto17.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
   publicJwk.kid = kid;
   publicJwk.alg = "RS256";
   publicJwk.use = "sig";
@@ -38709,23 +39472,23 @@ async function validateAuthRequest(p) {
 }
 function pkceMatches(verifier, challenge) {
   if (!verifier) return false;
-  const computed = (0, import_node_crypto15.createHash)("sha256").update(verifier).digest("base64url");
+  const computed = (0, import_node_crypto17.createHash)("sha256").update(verifier).digest("base64url");
   return computed === challenge;
 }
 async function mintAccessToken(identity, scope, plan, audience) {
   const { privateKey, kid } = await getKeys();
-  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto15.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
+  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto17.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
 }
 function tokenErrorResponse(c, error, description, status) {
   return c.json({ error, error_description: description }, status);
 }
-var import_hono20, import_cookie, import_node_crypto15, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
+var import_hono20, import_cookie, import_node_crypto17, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
 var init_oauth_routes = __esm({
   "src/api/oauth-routes.ts"() {
     "use strict";
     import_hono20 = require("hono");
     import_cookie = require("hono/cookie");
-    import_node_crypto15 = require("crypto");
+    import_node_crypto17 = require("crypto");
     import_jose2 = require("jose");
     init_session();
     init_db();
@@ -38811,7 +39574,7 @@ var init_oauth_routes = __esm({
         }
       }
       const clientName = typeof body.client_name === "string" ? body.client_name : null;
-      const clientId = `client_${(0, import_node_crypto15.randomBytes)(16).toString("hex")}`;
+      const clientId = `client_${(0, import_node_crypto17.randomBytes)(16).toString("hex")}`;
       await registerClient(clientId, redirectUris, clientName);
       console.log("[oauth-dcr] register OK client_id=%s redirect_uris=%s", clientId, JSON.stringify(redirectUris));
       return c.json({
@@ -38864,7 +39627,7 @@ var init_oauth_routes = __esm({
       if (action === "deny") return redirectWithError(p.redirect_uri, p.state, "access_denied");
       if (action !== "approve") return c.text("unsupported action", 400);
       const scope = negotiateScope(p.scope, user, p.resource);
-      const code = `code_${(0, import_node_crypto15.randomBytes)(32).toString("base64url")}`;
+      const code = `code_${(0, import_node_crypto17.randomBytes)(32).toString("base64url")}`;
       const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1e3).toISOString();
       await putCode({
         code,
@@ -38903,7 +39666,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const refreshToken = `rt_${(0, import_node_crypto15.randomBytes)(40).toString("base64url")}`;
+        const refreshToken = `rt_${(0, import_node_crypto17.randomBytes)(40).toString("base64url")}`;
         await putRefresh({
           refresh_token: refreshToken,
           client_id: clientId,
@@ -38933,7 +39696,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const nextRefresh = `rt_${(0, import_node_crypto15.randomBytes)(40).toString("base64url")}`;
+        const nextRefresh = `rt_${(0, import_node_crypto17.randomBytes)(40).toString("base64url")}`;
         await rotateRefresh(refreshToken, {
           refresh_token: nextRefresh,
           client_id: record.client_id,
@@ -40250,7 +41013,7 @@ var init_site_audit_worker = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto16.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto18.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -40307,11 +41070,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto16, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto18, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto16 = require("crypto");
+    import_node_crypto18 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -40388,7 +41151,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto17.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto19.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -40603,11 +41366,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto17, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto19, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto17 = require("crypto");
+    import_node_crypto19 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -40781,7 +41544,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto18.randomUUID)();
+  const exportId = (0, import_node_crypto20.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -40891,11 +41654,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto18, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto20, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto18 = require("crypto");
+    import_node_crypto20 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -40933,12 +41696,6 @@ var init_connected_data_export = __esm({
 });
 
 // src/api/credit-operations.ts
-async function grantSignupCredit(userId) {
-  if (!FREE_SIGNUP_MC || FREE_SIGNUP_MC <= 0) return;
-  const already = await ledgerExistsForOperation(userId, LedgerOperation.SIGNUP_GRANT);
-  if (already) return;
-  await creditMc(userId, FREE_SIGNUP_MC, LedgerOperation.SIGNUP_GRANT, "Welcome credits");
-}
 async function applyMonthlyFreeRefresh(user) {
   return user;
 }
@@ -41705,7 +42462,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto19.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto21.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   const body = await controlRequest("/api/internal/nango/connections/actions/describe", {
@@ -41835,11 +42592,11 @@ async function callScheduleConnectionExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto19, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto21, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto19 = require("crypto");
+    import_node_crypto21 = require("crypto");
     init_connected_data_export();
     DEFAULT_NANGO_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
     DISABLED_NANGO_TOOLS = {
@@ -42307,8 +43064,9 @@ async function processJob(job) {
   running++;
   try {
     const opts = typeof job.options === "string" ? JSON.parse(job.options) : job.options;
+    const headlessSentOut = { value: null };
     const result = await runWithCostContext(
-      { op: opts.serpOnly ? "serp" : "paa", userId: Number(job.user_id) },
+      { op: opts.serpOnly ? "serp" : "paa", userId: Number(job.user_id), headlessSentOut },
       () => harvest({
         ...opts,
         kernelApiKey: browserServiceApiKey(),
@@ -42325,6 +43083,11 @@ async function processJob(job) {
       const diff = opts.billingHoldMc - actualCost;
       if (diff > 0) await creditMc(job.user_id, diff, "paa_refund", "overestimate refund");
       else if (diff < 0) await debitMc(job.user_id, -diff, "paa", opts.query ?? job.query);
+    } else if (opts.serpOnly && typeof opts.billingHoldMc === "number") {
+      const actualCost = serpActualCostMc(headlessSentOut.value);
+      const diff = opts.billingHoldMc - actualCost;
+      if (diff > 0) await creditMc(job.user_id, diff, "serp_refund", "headless-mode pricing settle");
+      else if (diff < 0) await debitMc(job.user_id, -diff, "serp", opts.query ?? job.query);
     }
     if (job.callback_url) {
       await deliverWebhook(job.callback_url, { job_id: job.id, status: "done", result, attempts });
@@ -42678,7 +43441,6 @@ var init_server = __esm({
     init_browser_agent_console();
     init_browser_agent_db();
     init_cost_context();
-    init_cost_telemetry();
     init_stripe_routes();
     init_oauth_routes();
     init_chat_routes();
@@ -42784,7 +43546,6 @@ var init_server = __esm({
       const forceHeadless = c.req.header("x-kernel-headless") === "true";
       return runWithCostContext({ op, probeRunId, forceHeadless }, () => next());
     });
-    void migrateCostTelemetry();
     app.post("/auth/register", requireAllowedOrigin, async (c) => {
       const { email, password } = await c.req.json();
       const normalizedEmail = email?.trim().toLowerCase();
@@ -42815,7 +43576,6 @@ var init_server = __esm({
           }
         }
         const newKey = await rotateApiKey(user.id);
-        await grantSignupCredit(user.id);
         void (async () => {
           try {
             const full = await getUserById(user.id);
@@ -42923,11 +43683,7 @@ var init_server = __esm({
       return c.json(CATALOG);
     });
     app.get("/rates", (c) => {
-      const costs = CREDIT_COST_CATALOG.map(({ aliases, ...cost }) => ({
-        ...cost,
-        ...cost.notes ? { notes: cost.notes.replace(/ via fal\.ai/g, "") } : {}
-      }));
-      return c.json({ creditsPerDollarStarter: Math.round(1 / 15e-5), costs });
+      return c.json(getPublicRatesPayload());
     });
     app.get("/me", async (c) => {
       const token = (0, import_cookie2.getCookie)(c, "session");
@@ -43842,7 +44598,7 @@ var init_server = __esm({
         serpOnly: body.serpOnly ?? false,
         pages: Math.min(2, Math.max(1, body.pages ?? 1))
       };
-      const harvestCost = options.serpOnly ? MC_COSTS.serp : paaCostForQuestionCount2(options.maxQuestions);
+      const harvestCost = options.serpOnly ? MC_COSTS.serp_headful : paaCostForQuestionCount2(options.maxQuestions);
       const { ok: harvestOk, balance_mc: harvestBal } = await debitMc(user.id, harvestCost, options.serpOnly ? LedgerOperation.SERP : LedgerOperation.PAA, options.query);
       if (!harvestOk) return c.json(insufficientBalanceResponse(harvestBal, harvestCost), 402);
       const jobId = await createJob(user.id, options.query, { ...options, billingHoldMc: harvestCost }, body.callback_url);
@@ -43878,7 +44634,7 @@ var init_server = __esm({
         serpOnly: body.serpOnly ?? false,
         pages: Math.min(2, Math.max(1, body.pages ?? 1))
       };
-      const syncCost = options.serpOnly ? MC_COSTS.serp : paaCostForQuestionCount2(options.maxQuestions);
+      const syncCost = options.serpOnly ? MC_COSTS.serp_headful : paaCostForQuestionCount2(options.maxQuestions);
       const { ok: syncOk, balance_mc: syncBal } = await debitMc(user.id, syncCost, options.serpOnly ? LedgerOperation.SERP : LedgerOperation.PAA, options.query);
       if (!syncOk) return c.json(insufficientBalanceResponse(syncBal, syncCost), 402);
       const jobId = await createRunningJob(user.id, options.query, options);
@@ -43888,10 +44644,11 @@ var init_server = __esm({
         c.req.raw.signal,
         AbortSignal.timeout(syncTimeoutMs)
       ]);
+      const headlessSentOut = { value: null };
       try {
         const harvestCtx = currentCostContext();
         const result = await runWithCostContext(
-          { ...harvestCtx, op: options.serpOnly ? "serp" : "paa", userId: user.id },
+          { ...harvestCtx, op: options.serpOnly ? "serp" : "paa", userId: user.id, headlessSentOut },
           () => harvest({
             ...options,
             kernelApiKey: browserServiceApiKey(),
@@ -43910,6 +44667,11 @@ var init_server = __esm({
           const diff = syncCost - actualCost;
           if (diff > 0) await creditMc(user.id, diff, LedgerOperation.PAA_REFUND, "overestimate refund");
           else if (diff < 0) await debitMc(user.id, -diff, LedgerOperation.PAA, options.query);
+        } else {
+          const actualCost = serpActualCostMc(headlessSentOut.value);
+          const diff = syncCost - actualCost;
+          if (diff > 0) await creditMc(user.id, diff, LedgerOperation.SERP_REFUND, "headless-mode pricing settle");
+          else if (diff < 0) await debitMc(user.id, -diff, LedgerOperation.SERP, options.query);
         }
         return c.json({ job_id: jobId, status: "done", result: sanitizeHarvestResult(result), attempts: sanitizeAttempts(attempts) });
       } catch (err) {
@@ -43985,22 +44747,13 @@ var init_server = __esm({
     });
     app.post("/admin/backfill-signup-credits", adminAuth, async (c) => {
       const users = await listUsers();
-      let processed = 0;
-      let credited = 0;
-      let skipped = 0;
-      const users_credited = [];
-      for (const user of users) {
-        processed++;
-        const alreadyHasGrant = await ledgerExistsForOperation(user.id, LedgerOperation.SIGNUP_GRANT);
-        if (alreadyHasGrant) {
-          skipped++;
-        } else {
-          await grantSignupCredit(user.id);
-          credited++;
-          users_credited.push({ id: user.id, email: user.email });
-        }
-      }
-      return c.json({ processed, credited, skipped, users_credited });
+      return c.json({
+        processed: users.length,
+        credited: 0,
+        skipped: users.length,
+        users_credited: [],
+        retired: true
+      });
     });
     app.post("/extract-url", auth2, async (c) => {
       const raw = await c.req.json().catch(() => ({}));