mcp-scraper 0.21.3 → 0.21.4

package/dist/bin/api-server.cjs

@@ -3671,12 +3671,27 @@ __export(db_exports, {
   setStripeCustomerId: () => setStripeCustomerId,
   setSubscriptionTier: () => setSubscriptionTier,
   setUserMemoryCreds: () => setUserMemoryCreds,
+  settleDebitMcIdempotent: () => settleDebitMcIdempotent,
   startHarvestAttempt: () => startHarvestAttempt,
   stripeEventAlreadyProcessed: () => stripeEventAlreadyProcessed,
   updateKpoJobState: () => updateKpoJobState,
   upsertPageSnapshot: () => upsertPageSnapshot,
   verifyPassword: () => verifyPassword
 });
+function sqlStringList(values) {
+  return values.map((value) => `'${value.replaceAll("'", "''")}'`).join(", ");
+}
+async function hasCurrentCoreSchema(db) {
+  const checks = [
+    `(SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN (${sqlStringList(CORE_SCHEMA_TABLES)})) = ${CORE_SCHEMA_TABLES.length}`,
+    `(SELECT COUNT(*) FROM sqlite_master WHERE type = 'index' AND name IN (${sqlStringList(CORE_SCHEMA_INDEXES)})) = ${CORE_SCHEMA_INDEXES.length}`,
+    ...Object.entries(CORE_SCHEMA_COLUMNS).map(
+      ([table, columns]) => `(SELECT COUNT(*) FROM pragma_table_info('${table}') WHERE name IN (${sqlStringList(columns)})) = ${columns.length}`
+    )
+  ];
+  const result = await db.execute(`SELECT ${checks.join(" AND ")} AS ready`);
+  return Number(result.rows[0]?.ready ?? 0) === 1;
+}
 function getDb() {
   if (!_db) _db = (0, import_http.createClient)({ url: DB_URL, authToken: DB_TOKEN });
   return _db;
@@ -3686,6 +3701,31 @@ function setDbForTesting(client2) {
 }
 async function migrate() {
   const db = getDb();
+  let applied;
+  try {
+    applied = await db.execute({
+      sql: "SELECT 1 AS applied FROM schema_migrations WHERE version = ? LIMIT 1",
+      args: [CORE_SCHEMA_VERSION]
+    });
+  } catch (error) {
+    const message = error instanceof Error ? error.message.toLowerCase() : String(error).toLowerCase();
+    if (!message.includes("no such table") || !message.includes("schema_migrations")) throw error;
+    await db.execute(`
+      CREATE TABLE IF NOT EXISTS schema_migrations (
+        version    TEXT PRIMARY KEY,
+        applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+    applied = { rows: [] };
+  }
+  if (applied.rows.length > 0) return;
+  if (await hasCurrentCoreSchema(db)) {
+    await db.execute({
+      sql: "INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",
+      args: [CORE_SCHEMA_VERSION]
+    });
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS users (
       id            INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -4179,6 +4219,13 @@ async function migrate() {
     )
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS page_snapshots_user_checked_at ON page_snapshots(user_id, checked_at DESC)`);
+  if (!await hasCurrentCoreSchema(db)) {
+    throw new Error("core schema migration finished without all required tables, indexes, and columns");
+  }
+  await db.execute({
+    sql: "INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",
+    args: [CORE_SCHEMA_VERSION]
+  });
 }
 async function registerClient(clientId, redirectUris, name) {
   await getDb().execute({
@@ -4641,6 +4688,17 @@ async function upsertPageSnapshot(userId, url, snapshot) {
     args: [userId, url, snapshot.contentHash, snapshot.content, snapshot.title, snapshot.contentBytes, snapshot.truncated ? 1 : 0]
   });
 }
+function serializeRequestEventResult(result) {
+  if (result == null) return null;
+  const serialized = JSON.stringify(result);
+  const bytes = Buffer.byteLength(serialized, "utf8");
+  if (bytes <= REQUEST_EVENT_RESULT_MAX_BYTES) return serialized;
+  return JSON.stringify({
+    truncated: true,
+    originalBytes: bytes,
+    sha256: (0, import_node_crypto.createHash)("sha256").update(serialized).digest("hex")
+  });
+}
 function rowToRequestEvent(row) {
   const rawResult = row.result != null ? String(row.result) : null;
   return {
@@ -4671,7 +4729,7 @@ async function logRequestEvent(input) {
       input.query,
       input.location ?? null,
       input.resultCount ?? null,
-      input.result != null ? JSON.stringify(input.result) : null,
+      serializeRequestEventResult(input.result),
       input.error ?? null
     ]
   });
@@ -4680,7 +4738,7 @@ async function logRequestEvent(input) {
 async function listRequestEvents(userId, limit = 100) {
   const res = await getDb().execute({
     sql: `
-      SELECT id, user_id, source, status, query, location, result_count, result, error, created_at
+      SELECT id, user_id, source, status, query, location, result_count, NULL AS result, error, created_at
       FROM request_events
       WHERE user_id = ?
       ORDER BY created_at DESC
@@ -5308,58 +5366,75 @@ async function debitMcIdempotent(userId, mc, operation, description, idempotency
   if (!idempotencyKey || idempotencyKey.length > 500) throw new Error("idempotent debit key is required and must be bounded");
   const db = getDb();
   await ensureMigrated(userId);
-  const results = await db.batch([
-    {
-      sql: "UPDATE billing_debits SET amount_mc = ?, description = ? WHERE idempotency_key = ? AND user_id = ? AND operation = ? AND status = 'claimed'",
-      args: [mc, description, idempotencyKey, userId, operation]
-    },
-    {
-      sql: "INSERT OR IGNORE INTO billing_debits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",
-      args: [idempotencyKey, userId, mc, operation, description]
-    },
-    {
-      sql: "UPDATE users SET balance_mc = balance_mc - ? WHERE id = ? AND balance_mc >= ? AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND status = 'claimed')",
-      args: [mc, userId, mc, idempotencyKey, userId, mc, operation]
-    },
-    {
-      sql: "UPDATE billing_debits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND status = 'claimed' AND changes() = 1",
-      args: [idempotencyKey, userId, mc, operation]
-    },
-    {
-      sql: `WITH ordered AS MATERIALIZED (
-              SELECT id,
-                     remaining_mc,
-                     COALESCE(SUM(remaining_mc) OVER (
-                       ORDER BY expires_at ASC, granted_at ASC, id ASC
-                       ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                     ), 0) AS prior_mc
-              FROM credit_lots
-              WHERE user_id = ? AND remaining_mc > 0 AND expires_at > datetime('now')
-            ), allocation AS (
-              SELECT id, MIN(remaining_mc, MAX(0, ? - prior_mc)) AS take_mc
-              FROM ordered
-            )
-            UPDATE credit_lots
-            SET remaining_mc = remaining_mc - COALESCE((SELECT take_mc FROM allocation WHERE allocation.id = credit_lots.id), 0)
-            WHERE id IN (SELECT id FROM allocation WHERE take_mc > 0)
-              AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND status = 'applying')`,
-      args: [userId, mc, idempotencyKey]
-    },
-    {
-      sql: "INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, -amount_mc, operation, description FROM billing_debits WHERE idempotency_key = ? AND status = 'applying'",
-      args: [idempotencyKey]
-    },
-    {
-      sql: "UPDATE billing_debits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",
-      args: [idempotencyKey]
+  let results;
+  try {
+    results = await db.batch([
+      {
+        sql: "UPDATE billing_debits SET amount_mc = ? WHERE idempotency_key = ? AND user_id = ? AND operation = ? AND description = ? AND status = 'claimed'",
+        args: [mc, idempotencyKey, userId, operation, description]
+      },
+      {
+        sql: "INSERT OR IGNORE INTO billing_debits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",
+        args: [idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: "UPDATE users SET balance_mc = balance_mc - ? WHERE id = ? AND balance_mc >= ? AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed')",
+        args: [mc, userId, mc, idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: "UPDATE billing_debits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed' AND changes() = 1",
+        args: [idempotencyKey, userId, mc, operation, description]
+      },
+      {
+        sql: `WITH ordered AS MATERIALIZED (
+                SELECT id,
+                       remaining_mc,
+                       COALESCE(SUM(remaining_mc) OVER (
+                         ORDER BY expires_at ASC, granted_at ASC, id ASC
+                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
+                       ), 0) AS prior_mc
+                FROM credit_lots
+                WHERE user_id = ? AND remaining_mc > 0 AND expires_at > datetime('now')
+              ), allocation AS (
+                SELECT id, MIN(remaining_mc, MAX(0, ? - prior_mc)) AS take_mc
+                FROM ordered
+              )
+              UPDATE credit_lots
+              SET remaining_mc = remaining_mc - COALESCE((SELECT take_mc FROM allocation WHERE allocation.id = credit_lots.id), 0)
+              WHERE id IN (SELECT id FROM allocation WHERE take_mc > 0)
+                AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND status = 'applying')`,
+        args: [userId, mc, idempotencyKey]
+      },
+      {
+        sql: "INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, -amount_mc, operation, description FROM billing_debits WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey]
+      },
+      {
+        sql: "UPDATE billing_debits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey]
+      }
+    ], "write");
+  } catch (error) {
+    try {
+      const recovered = await db.execute({
+        sql: "SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? AND status = 'applied' LIMIT 1",
+        args: [idempotencyKey]
+      });
+      const row2 = recovered.rows[0];
+      if (row2 && Number(row2.user_id) === userId && Number(row2.amount_mc) === mc && String(row2.operation) === operation && String(row2.description) === description) {
+        const balance2 = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+        return { ok: true, balance_mc: Number(balance2.rows[0]?.balance_mc ?? 0), duplicate: true };
+      }
+    } catch {
     }
-  ], "write");
+    throw error;
+  }
   const claim = await db.execute({
-    sql: "SELECT user_id, amount_mc, operation, status FROM billing_debits WHERE idempotency_key = ? LIMIT 1",
+    sql: "SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? LIMIT 1",
     args: [idempotencyKey]
   });
   const row = claim.rows[0];
-  if (!row || Number(row.user_id) !== userId || Number(row.amount_mc) !== mc || String(row.operation) !== operation) {
+  if (!row || Number(row.user_id) !== userId || Number(row.amount_mc) !== mc || String(row.operation) !== operation || String(row.description) !== description) {
     throw new Error("idempotent debit key conflicts with another debit");
   }
   const balance = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
@@ -5369,6 +5444,158 @@ async function debitMcIdempotent(userId, mc, operation, description, idempotency
     duplicate: results[2]?.rowsAffected === 0 && String(row.status) === "applied"
   };
 }
+async function settleDebitMcIdempotent(userId, debitIdempotencyKey, finalAmountMc, refundOperation, description, sourceSurface) {
+  if (!Number.isSafeInteger(finalAmountMc) || finalAmountMc < 0) {
+    throw new Error("idempotent debit settlement amount must be a non-negative integer");
+  }
+  if (!debitIdempotencyKey || debitIdempotencyKey.length > 500) {
+    throw new Error("idempotent debit settlement key is required and must be bounded");
+  }
+  if (!refundOperation || !sourceSurface) {
+    throw new Error("idempotent debit settlement operation and source are required");
+  }
+  const db = getDb();
+  await ensureMigrated(userId);
+  const settlementKey = `debit-settlement:${(0, import_node_crypto.createHash)("sha256").update(debitIdempotencyKey).digest("hex")}`;
+  const billingClass = "wallet_hold_settlement";
+  const eventId = (0, import_node_crypto.randomUUID)();
+  const metadata = JSON.stringify({ debitIdempotencyKey, refundOperation, description });
+  const readReceipt = async () => {
+    const receipt2 = await db.execute({
+      sql: `SELECT e.user_id,
+                   e.status,
+                   e.amount_mc AS final_amount_mc,
+                   e.billing_class,
+                   e.source_surface,
+                   d.amount_mc AS held_amount_mc
+            FROM billing_events e
+            JOIN billing_debits d ON d.idempotency_key = ?
+            WHERE e.idempotency_key = ?
+              AND d.user_id = e.user_id
+              AND d.status = 'applied'
+            LIMIT 1`,
+      args: [debitIdempotencyKey, settlementKey]
+    });
+    const row = receipt2.rows[0];
+    if (!row) return null;
+    if (Number(row.user_id) !== userId || String(row.billing_class) !== billingClass || String(row.source_surface) !== sourceSurface) {
+      throw new Error("idempotent debit settlement key conflicts with another settlement");
+    }
+    if (String(row.status) !== "settled") return null;
+    const heldAmountMc = Number(row.held_amount_mc);
+    const durableFinalAmountMc = Number(row.final_amount_mc);
+    if (!Number.isSafeInteger(heldAmountMc) || !Number.isSafeInteger(durableFinalAmountMc) || durableFinalAmountMc < 0 || durableFinalAmountMc > heldAmountMc) {
+      throw new Error("idempotent debit settlement receipt is invalid");
+    }
+    const balance = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+    return {
+      balance_mc: Number(balance.rows[0]?.balance_mc ?? 0),
+      final_amount_mc: durableFinalAmountMc,
+      refund_mc: heldAmountMc - durableFinalAmountMc,
+      duplicate: true
+    };
+  };
+  let results;
+  try {
+    results = await db.batch([
+      {
+        sql: `INSERT OR IGNORE INTO billing_events
+                (id, user_id, idempotency_key, billing_class, source_surface, status, amount_mc, metadata)
+              VALUES (?, ?, ?, ?, ?, 'settling', ?, ?)`,
+        args: [eventId, userId, settlementKey, billingClass, sourceSurface, finalAmountMc, metadata]
+      },
+      {
+        sql: `UPDATE users
+              SET balance_mc = balance_mc + (
+                SELECT d.amount_mc - e.amount_mc
+                FROM billing_events e
+                JOIN billing_debits d ON d.idempotency_key = ?
+                WHERE e.idempotency_key = ?
+              )
+              WHERE id = ?
+                AND EXISTS (
+                  SELECT 1
+                  FROM billing_events e
+                  JOIN billing_debits d ON d.idempotency_key = ?
+                  WHERE e.idempotency_key = ?
+                    AND e.user_id = ?
+                    AND e.billing_class = ?
+                    AND e.source_surface = ?
+                    AND e.status = 'settling'
+                    AND d.user_id = e.user_id
+                    AND d.status = 'applied'
+                    AND e.amount_mc BETWEEN 0 AND d.amount_mc
+                )`,
+        args: [
+          debitIdempotencyKey,
+          settlementKey,
+          userId,
+          debitIdempotencyKey,
+          settlementKey,
+          userId,
+          billingClass,
+          sourceSurface
+        ]
+      },
+      {
+        sql: `UPDATE billing_events
+              SET status = 'applying'
+              WHERE idempotency_key = ?
+                AND user_id = ?
+                AND billing_class = ?
+                AND source_surface = ?
+                AND status = 'settling'
+                AND changes() = 1`,
+        args: [settlementKey, userId, billingClass, sourceSurface]
+      },
+      {
+        sql: `INSERT INTO credit_lots
+                (user_id, amount_mc, remaining_mc, source, expires_at)
+              SELECT e.user_id,
+                     d.amount_mc - e.amount_mc,
+                     d.amount_mc - e.amount_mc,
+                     ?,
+                     datetime('now', ?)
+              FROM billing_events e
+              JOIN billing_debits d ON d.idempotency_key = ?
+              WHERE e.idempotency_key = ?
+                AND e.status = 'applying'
+                AND d.amount_mc > e.amount_mc`,
+        args: [refundOperation, CREDIT_LOT_TTL, debitIdempotencyKey, settlementKey]
+      },
+      {
+        sql: `INSERT INTO ledger (user_id, amount_mc, operation, description)
+              SELECT e.user_id,
+                     d.amount_mc - e.amount_mc,
+                     ?,
+                     ?
+              FROM billing_events e
+              JOIN billing_debits d ON d.idempotency_key = ?
+              WHERE e.idempotency_key = ?
+                AND e.status = 'applying'
+                AND d.amount_mc > e.amount_mc`,
+        args: [refundOperation, description, debitIdempotencyKey, settlementKey]
+      },
+      {
+        sql: `UPDATE billing_events
+              SET status = 'settled', settled_at = datetime('now')
+              WHERE idempotency_key = ?
+                AND status = 'applying'`,
+        args: [settlementKey]
+      }
+    ], "write");
+  } catch (error) {
+    try {
+      const recovered = await readReceipt();
+      if (recovered) return recovered;
+    } catch {
+    }
+    throw error;
+  }
+  const receipt = await readReceipt();
+  if (!receipt) throw new Error("idempotent debit settlement did not reach a durable settled state");
+  return { ...receipt, duplicate: results[0]?.rowsAffected === 0 };
+}
 async function getLedger(userId, limit = 50) {
   const res = await getDb().execute({
     sql: "SELECT * FROM ledger WHERE user_id = ? ORDER BY created_at DESC LIMIT ?",
@@ -5417,7 +5644,7 @@ async function reconcileBalanceMc(userId, knownBalanceMc) {
   }
   return balanceMc;
 }
-var import_http, import_node_crypto, import_zod, DB_URL, DB_TOKEN, _db, _rateLimitSchemaReady, CREDIT_LOT_TTL, SiteAuditJobRowSchema, SiteAuditPhaseLogRowSchema;
+var import_http, import_node_crypto, import_zod, DB_URL, DB_TOKEN, _db, _rateLimitSchemaReady, CORE_SCHEMA_VERSION, CORE_SCHEMA_TABLES, CORE_SCHEMA_INDEXES, CORE_SCHEMA_COLUMNS, REQUEST_EVENT_RESULT_MAX_BYTES, CREDIT_LOT_TTL, SiteAuditJobRowSchema, SiteAuditPhaseLogRowSchema;
 var init_db = __esm({
   "src/api/db.ts"() {
     "use strict";
@@ -5428,6 +5655,95 @@ var init_db = __esm({
     DB_TOKEN = process.env.TURSO_AUTH_TOKEN;
     _db = null;
     _rateLimitSchemaReady = false;
+    CORE_SCHEMA_VERSION = "2026-07-14.1";
+    CORE_SCHEMA_TABLES = [
+      "billing_authorizations",
+      "billing_debits",
+      "billing_events",
+      "concurrency_locks",
+      "credit_lots",
+      "free_credit_refreshes",
+      "harvest_attempts",
+      "jobs",
+      "kpo_jobs",
+      "kpo_phase_log",
+      "ledger",
+      "oauth_clients",
+      "oauth_codes",
+      "oauth_tokens",
+      "page_snapshots",
+      "password_reset_tokens",
+      "rate_limits",
+      "request_events",
+      "site_audit_jobs",
+      "site_audit_phase_log",
+      "site_extract_jobs",
+      "site_extract_pages",
+      "stripe_events",
+      "users",
+      "workflow_artifacts",
+      "workflow_runs",
+      "workflow_schedules",
+      "workflow_webhook_deliveries"
+    ];
+    CORE_SCHEMA_INDEXES = [
+      "billing_authorizations_user_status",
+      "billing_debits_user_status",
+      "billing_events_authorization",
+      "billing_events_user_created_at",
+      "concurrency_locks_operation",
+      "concurrency_locks_user_status",
+      "credit_lots_user_active",
+      "harvest_attempts_job_id",
+      "harvest_attempts_user_created_at",
+      "jobs_status",
+      "jobs_user_id",
+      "kpo_jobs_status",
+      "kpo_jobs_user_id",
+      "kpo_phase_log_job_id",
+      "ledger_stripe_pi_unique",
+      "ledger_user_id",
+      "oauth_tokens_identity",
+      "page_snapshots_user_checked_at",
+      "prt_user_id",
+      "request_events_user_created_at",
+      "site_audit_jobs_status",
+      "site_audit_jobs_user_id",
+      "site_audit_phase_log_job_id",
+      "site_extract_jobs_status",
+      "site_extract_jobs_user_id",
+      "site_extract_pages_job_id",
+      "workflow_artifacts_run",
+      "workflow_runs_idempotency",
+      "workflow_runs_schedule",
+      "workflow_runs_user_created",
+      "workflow_schedules_due",
+      "workflow_schedules_user_status",
+      "workflow_webhook_deliveries_run"
+    ];
+    CORE_SCHEMA_COLUMNS = {
+      harvest_attempts: ["debug_json"],
+      oauth_tokens: ["replaced_by", "rotated_at"],
+      users: [
+        "balance_mc",
+        "concurrency_stripe_sub_id",
+        "extra_concurrency_slots",
+        "key_active",
+        "memory_identity",
+        "memory_key",
+        "memory_plan",
+        "memory_provisioned",
+        "memory_subscription_id",
+        "password_hash",
+        "stripe_customer_id",
+        "subscription_concurrency",
+        "subscription_id",
+        "subscription_tier"
+      ],
+      workflow_artifacts: ["content"],
+      workflow_runs: ["step_index", "step_log_json", "step_state_json", "total_steps", "webhook_url"]
+    };
+    REQUEST_EVENT_RESULT_MAX_BYTES = 32 * 1024;
     CREDIT_LOT_TTL = "+3 months";
     SiteAuditJobRowSchema = import_zod.z.object({
       id: import_zod.z.string(),
@@ -5499,7 +5815,26 @@ var init_cost_rates = __esm({
 // src/api/cost-telemetry.ts
 async function migrateCostTelemetry() {
   if (_ready) return;
+  if (_migrationPromise) return _migrationPromise;
+  _migrationPromise = runCostTelemetryMigration().finally(() => {
+    _migrationPromise = null;
+  });
+  return _migrationPromise;
+}
+async function runCostTelemetryMigration() {
   const db = getDb();
+  const existing = await db.execute(`
+    SELECT
+      (SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN ('kernel_session_log', 'vendor_usage_log', 'cost_probe_runs')) = 3
+      AND (SELECT COUNT(*) FROM pragma_table_info('kernel_session_log') WHERE name IN ('proxy_source', 'proxy_type', 'method')) = 3
+      AND (SELECT COUNT(*) FROM pragma_table_info('vendor_usage_log') WHERE name = 'method') = 1
+      AND (SELECT COUNT(*) FROM pragma_table_info('cost_probe_runs') WHERE name IN ('units', 'unit_type', 'mode')) = 3
+      AS ready
+  `);
+  if (Number(existing.rows[0]?.ready ?? 0) === 1) {
+    _ready = true;
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS kernel_session_log (
       id                    TEXT PRIMARY KEY,
@@ -5663,7 +5998,7 @@ function boolToInt(v) {
   if (v === null || v === void 0) return null;
   return v ? 1 : 0;
 }
-var import_node_crypto2, _ready;
+var import_node_crypto2, _ready, _migrationPromise;
 var init_cost_telemetry = __esm({
   "src/api/cost-telemetry.ts"() {
     "use strict";
@@ -5672,6 +6007,7 @@ var init_cost_telemetry = __esm({
     init_cost_context();
     init_cost_rates();
     _ready = false;
+    _migrationPromise = null;
   }
 });
 
@@ -8563,6 +8899,9 @@ var init_schemas = __esm({
 });
 
 // src/api/rates.ts
+function serpActualCostMc(headlessSent) {
+  return headlessSent === true ? MC_COSTS.serp_headless : MC_COSTS.serp_headful;
+}
 function browserActiveCostMc(activeMs) {
   return Math.round(activeMs * MC_PER_BROWSER_MS);
 }
@@ -8617,12 +8956,12 @@ function insufficientBalanceResponse(balanceMc, requiredMc) {
     topup_url: topupUrl
   };
 }
-var MC_COSTS, MC_PER_BROWSER_MS, BROWSER_OPEN_MIN_BALANCE_MC, MC_PER_CREDIT, BILLING_MC_PER_USD_NUMERATOR, BILLING_MC_PER_USD_DENOMINATOR, BILLING_BASIS_POINTS, USD_NANOS, SCHEDULED_RUN_BASE_CREDITS, SCHEDULED_RUN_BASE_MC, SCHEDULED_AGENT_LLM_MARKUP_BPS, SCHEDULED_AGENT_LLM_MARKUP, SCHEDULED_RUN_DEFAULT_MAX_CREDITS, SCHEDULED_ACTIONS_RATE_POLICY, CREDIT_COST_CATALOG, CONCURRENCY_PRICE_ID, SUBSCRIPTION_TIERS, SUBSCRIPTION_TIER_BY_KEY, CONCURRENCY_SLOT_PRICE_USD, CONCURRENCY_SLOT_PRICE_CURRENCY, CONCURRENCY_SLOT_PRICE_INTERVAL, CONCURRENCY_SLOT_PRICE_LABEL, CONCURRENCY_SLOT_TERMINAL_COMMAND, FREE_SIGNUP_MC, MEMORY_FREE_QUOTA_BYTES, MEMORY_PLANS, MEMORY_PLAN_QUOTA, MEMORY_MARGIN_MULTIPLE, MEMORY_PRO_COST_BUDGET_USD, LedgerOperation, MEMORY_AI_MARGIN_MULTIPLE, SITE_AUDIT_LLM_MARGIN_MULTIPLE, VIDEO_ANALYSIS_LLM_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_HOLD_MC, MC_PER_USD;
+var MC_COSTS, MC_PER_BROWSER_MS, BROWSER_OPEN_MIN_BALANCE_MC, MC_PER_CREDIT, BILLING_MC_PER_USD_NUMERATOR, BILLING_MC_PER_USD_DENOMINATOR, BILLING_BASIS_POINTS, USD_NANOS, SCHEDULED_RUN_BASE_CREDITS, SCHEDULED_RUN_BASE_MC, SCHEDULED_AGENT_LLM_MARKUP_BPS, SCHEDULED_AGENT_LLM_MARKUP, SCHEDULED_RUN_DEFAULT_MAX_CREDITS, SCHEDULED_ACTIONS_RATE_POLICY, CREDIT_COST_CATALOG, CONCURRENCY_PRICE_ID, SUBSCRIPTION_TIERS, SUBSCRIPTION_TIER_BY_KEY, CONCURRENCY_SLOT_PRICE_USD, CONCURRENCY_SLOT_PRICE_CURRENCY, CONCURRENCY_SLOT_PRICE_INTERVAL, CONCURRENCY_SLOT_PRICE_LABEL, CONCURRENCY_SLOT_TERMINAL_COMMAND, MEMORY_FREE_QUOTA_BYTES, MEMORY_PLANS, MEMORY_PLAN_QUOTA, MEMORY_MARGIN_MULTIPLE, MEMORY_PRO_COST_BUDGET_USD, LedgerOperation, MEMORY_AI_MARGIN_MULTIPLE, SITE_AUDIT_LLM_MARGIN_MULTIPLE, VIDEO_ANALYSIS_LLM_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_MARGIN_MULTIPLE, MEDIA_TRANSCRIBE_HOLD_MC, MC_PER_USD;
 var init_rates = __esm({
   "src/api/rates.ts"() {
     "use strict";
     MC_COSTS = {
-      serp: 100,
+      serp: 400,
       serp_headless: 400,
       serp_headful: 1400,
       paa: 300,
@@ -8696,7 +9035,7 @@ var init_rates = __esm({
         aliases: ["search_serp", "serp", "google search", "organic results"],
         credits: mcToCredits(MC_COSTS.serp_headless),
         unit: "per search (headless); escalates to headful only when needed",
-        notes: `Returns AI Overview, PAA snippet, videos, forums, and local pack. Billed ${mcToCredits(MC_COSTS.serp_headless)} credits when served headless (the common case), ${mcToCredits(MC_COSTS.serp_headful)} credits if an anti-bot escalation forces headful mode (overestimate refunded).`
+        notes: `Returns AI Overview, PAA snippet, videos, forums, and local pack. Billed ${mcToCredits(MC_COSTS.serp_headless)} credits when served headless (the common case), ${mcToCredits(MC_COSTS.serp_headful)} credits if an anti-bot escalation forces headful mode (overestimate refunded). Optional SERP Intelligence page snapshots add ${mcToCredits(MC_COSTS.page_scrape)} credit per attempted URL.`
       },
       {
         key: "paa",
@@ -8919,7 +9258,6 @@ var init_rates = __esm({
     CONCURRENCY_SLOT_PRICE_INTERVAL = "month";
     CONCURRENCY_SLOT_PRICE_LABEL = "$5/month";
     CONCURRENCY_SLOT_TERMINAL_COMMAND = "npx -y -p mcp-scraper@latest mcp-scraper-cli billing concurrency checkout";
-    FREE_SIGNUP_MC = 1e5;
     MEMORY_FREE_QUOTA_BYTES = 1e7 * 1;
     MEMORY_PLANS = {
       "price_1TnMSTS8aAcsk3TGBgiwuvqL": { plan: "pro", label: "Pro", price_id: "price_1TnMSTS8aAcsk3TGBgiwuvqL", interval: "month", monthly_usd: 19, quota_bytes: 5e9 },
@@ -16624,6 +16962,15 @@ function buildPageIntelUrl(body, country) {
   if (body.pageId?.trim()) return `https://www.facebook.com/ads/library/?active_status=all&ad_type=all&country=${country}&is_targeted_country=false&media_type=all&search_type=page&view_all_page_id=${body.pageId.trim()}`;
   return `https://www.facebook.com/ads/library/?active_status=all&ad_type=all&country=${country}&q=${encodeURIComponent(body.query.trim())}&search_type=keyword_unordered`;
 }
+function pageIntelRequestContext(body) {
+  const country = body.country?.trim().toUpperCase() ?? "US";
+  return {
+    country,
+    maxAds: Math.min(200, Math.max(1, body.maxAds ?? 50)),
+    listingUrl: buildPageIntelUrl(body, country),
+    subject: body.pageId ?? body.query ?? body.libraryId ?? ""
+  };
+}
 function normalizeAdvertiserName(value) {
   return value.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, " ").trim().replace(/\s+/g, " ");
 }
@@ -16788,16 +17135,14 @@ var init_facebook_ad_routes = __esm({
       const parsed = FacebookPageIntelBodySchema.safeParse(raw);
       if (!parsed.success) return c.json(invalidRequest(parsed.error.issues[0]?.message ?? "Invalid request"), 400);
       const body = parsed.data;
-      const maxAds = Math.min(200, Math.max(1, body.maxAds ?? 50));
-      const country = body.country?.trim().toUpperCase() ?? "US";
-      const listingUrl = buildPageIntelUrl(body, country);
+      const { country, maxAds, listingUrl, subject } = pageIntelRequestContext(body);
       const fbUser = c.get("user");
       const gate = await acquireConcurrencyGate(fbUser, "facebook_page_intel", { reuseLockId: c.req.header("x-mcp-scraper-concurrency-lock"), metadata: { pageId: body.pageId, query: body.query, libraryId: body.libraryId, country } });
       if (!gate.ok) return c.json(concurrencyLimitExceededResponse(gate), 429, { "Retry-After": String(gate.retryAfterSeconds) });
       const driver = new BrowserDriver();
       let refunded = false, debited = false;
       try {
-        const { ok: fbOk, balance_mc: fbBal } = await debitMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD, body.pageId ?? body.query ?? body.libraryId ?? "");
+        const { ok: fbOk, balance_mc: fbBal } = await debitMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD, subject);
         if (!fbOk) return c.json(insufficientBalanceResponse(fbBal, MC_COSTS.fb_ad), 402);
         debited = true;
         await driver.launch(await kernelLaunchOptsResidential());
@@ -16807,17 +17152,17 @@ var init_facebook_ad_routes = __esm({
         if (result.ads.length === 0 && await detectSoftBlock(driver)) {
           await creditMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD_REFUND, "soft-block empty result");
           refunded = true;
-          await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: body.pageId ?? body.query ?? body.libraryId ?? "", error: "soft-block: empty result refunded" });
+          await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: subject, error: "soft-block: empty result refunded" });
           return c.json({ error: "soft-block: no ads returned (refunded)" }, 503);
         }
         const match = assessPageIntelMatch(body, result);
         const output = { ...result, ...match };
-        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "done", query: body.pageId ?? body.query ?? body.libraryId ?? "", resultCount: result.ads.length, result: output });
+        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "done", query: subject, resultCount: result.ads.length, result: output });
         return c.json(output);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         if (debited && !refunded) await creditMc(fbUser.id, MC_COSTS.fb_ad, LedgerOperation.FB_AD_REFUND, "failed call");
-        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: body.pageId ?? body.query ?? body.libraryId ?? "", error: msg });
+        await logRequestEvent({ userId: fbUser.id, source: "facebook_page_intel", status: "failed", query: subject, error: msg });
         if (msg.toLowerCase().includes("blocked") || msg.toLowerCase().includes("captcha")) {
           return c.json({ error: msg }, 503);
         }
@@ -22567,21 +22912,33 @@ function formatCaptureSerpSnapshot(raw, input) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
+  const harvestResult = d.harvestResult && typeof d.harvestResult === "object" ? d.harvestResult : d;
   const providerPayload = d;
-  const organic = Array.isArray(d.organicResults) ? d.organicResults : Array.isArray(d.organic) ? d.organic : [];
-  const localPack = Array.isArray(d.localPack) ? d.localPack : [];
-  const artifacts = Array.isArray(d.artifacts) ? d.artifacts : [];
-  const status = String(d.status ?? d.captureStatus ?? "captured");
-  const query = typeof d.query === "string" ? d.query : typeof input.query === "string" ? input.query : null;
-  const location2 = typeof d.location === "string" ? d.location : typeof input.location === "string" ? input.location : null;
-  const capturedAt = typeof d.capturedAt === "string" ? d.capturedAt : typeof d.extractedAt === "string" ? d.extractedAt : null;
+  const organic = Array.isArray(harvestResult.organicResults) ? harvestResult.organicResults : Array.isArray(harvestResult.organic) ? harvestResult.organic : [];
+  const localPack = Array.isArray(harvestResult.localPack) ? harvestResult.localPack : [];
+  const artifacts = Array.isArray(d.pageSnapshotArtifacts) ? d.pageSnapshotArtifacts : Array.isArray(d.artifacts) ? d.artifacts : [];
+  const attempts = Array.isArray(d.attempts) ? d.attempts : [];
+  const diagnostics = harvestResult.diagnostics && typeof harvestResult.diagnostics === "object" ? harvestResult.diagnostics : d.diagnostics && typeof d.diagnostics === "object" ? d.diagnostics : null;
+  const completionStatus = diagnostics && typeof diagnostics.completionStatus === "string" ? diagnostics.completionStatus : null;
+  const status = String(d.status ?? d.captureStatus ?? completionStatus ?? "captured");
+  const query = typeof harvestResult.seed === "string" ? harvestResult.seed : typeof harvestResult.query === "string" ? harvestResult.query : typeof input.query === "string" ? input.query : null;
+  const location2 = typeof harvestResult.location === "string" ? harvestResult.location : typeof input.location === "string" ? input.location : null;
+  const capturedAt = typeof harvestResult.extractedAt === "string" ? harvestResult.extractedAt : typeof harvestResult.capturedAt === "string" ? harvestResult.capturedAt : null;
   const resultCount = organic.length + localPack.length;
+  const pageSnapshotFailedCount = artifacts.filter((artifact) => artifact.status === "failed" || Boolean(artifact.error)).length;
+  const rawBilling = d.billing && typeof d.billing === "object" ? d.billing : null;
+  const billing = rawBilling ? {
+    creditsUsed: typeof rawBilling.creditsUsed === "number" ? rawBilling.creditsUsed : null,
+    requestId: typeof rawBilling.requestId === "string" ? rawBilling.requestId : null,
+    jobId: typeof rawBilling.jobId === "string" ? rawBilling.jobId : null
+  } : null;
   const full = [
     `# SERP Intelligence Snapshot: ${query ?? "query"}`,
     `**Status:** ${status}`,
     location2 ? `**Location:** ${location2}` : "",
-    `**Result count:** ${resultCount}`,
-    artifacts.length ? `**Artifacts:** ${artifacts.length}` : "",
+    `**SERP results:** ${resultCount} (${organic.length} organic, ${localPack.length} local pack)`,
+    `**Page snapshots:** ${artifacts.length} (${pageSnapshotFailedCount} failed)`,
+    billing?.creditsUsed !== null && billing?.creditsUsed !== void 0 ? `**Credits used:** ${billing.creditsUsed}` : "",
     "",
     "Use `capture_serp_page_snapshots` when you need page-level evidence for ranking URLs."
   ].filter(Boolean).join("\n");
@@ -22594,6 +22951,10 @@ function formatCaptureSerpSnapshot(raw, input) {
       location: location2,
       capturedAt,
       resultCount,
+      organicResultCount: organic.length,
+      localPackResultCount: localPack.length,
+      pageSnapshotCount: artifacts.length,
+      pageSnapshotFailedCount,
       snapshotId: typeof d.snapshotId === "string" ? d.snapshotId : typeof d.snapshot_id === "string" ? d.snapshot_id : typeof d.id === "string" ? d.id : null,
       resolvedInputs: {
         query: input.query ?? null,
@@ -22606,7 +22967,9 @@ function formatCaptureSerpSnapshot(raw, input) {
         pages: input.pages ?? null
       },
       artifacts,
-      diagnostics: d.diagnostics && typeof d.diagnostics === "object" ? d.diagnostics : null,
+      attempts,
+      billing,
+      diagnostics,
       providerPayload
     }
   };
@@ -22615,9 +22978,13 @@ function formatCaptureSerpPageSnapshots(raw, input) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
-  const captures = Array.isArray(d.captures) ? d.captures : Array.isArray(d.results) ? d.results : [];
+  const captures = Array.isArray(d.pageSnapshotArtifacts) ? d.pageSnapshotArtifacts : Array.isArray(d.captures) ? d.captures : Array.isArray(d.results) ? d.results : [];
   const failedCount = captures.filter((c) => c.status === "failed" || c.error).length;
-  const status = String(d.status ?? (failedCount ? "partial" : "captured"));
+  const capturedCount = captures.filter((c) => c.status === "captured" || c.status === "ok").length;
+  const skippedCount = captures.filter((c) => c.status === "skipped").length;
+  const attempts = Array.isArray(d.attempts) ? d.attempts : [];
+  const inferredStatus = captures.length === 0 ? "empty" : failedCount === captures.length ? "failed" : failedCount > 0 || skippedCount > 0 ? "partial" : "captured";
+  const status = String(d.status ?? inferredStatus);
   const rows = captures.slice(0, 25).map((capture, i) => {
     const url = typeof capture.url === "string" ? capture.url : "";
     const sourceKind = typeof capture.sourceKind === "string" ? capture.sourceKind : typeof capture.source_kind === "string" ? capture.source_kind : "configured_target";
@@ -22626,8 +22993,10 @@ function formatCaptureSerpPageSnapshots(raw, input) {
   const full = [
     "# SERP Intelligence Page Snapshots",
     `**Status:** ${status}`,
-    `**Captured:** ${captures.length}`,
+    `**Attempted:** ${captures.length}`,
+    `**Captured:** ${capturedCount}`,
     `**Failed:** ${failedCount}`,
+    skippedCount ? `**Skipped:** ${skippedCount}` : "",
     captures.length ? `
 | # | URL | Source | Status |
 |---|-----|--------|--------|
@@ -22639,8 +23008,11 @@ ${rows}` : ""
       schemaVersion: "serp-intelligence.page-snapshots.v1",
       status,
       count: captures.length,
+      capturedCount,
       failedCount,
+      skippedCount,
       captures,
+      attempts,
       resolvedInputs: {
         urls: input.urls ?? null,
         targets: input.targets ?? null,
@@ -28180,12 +28552,22 @@ var init_schemas4 = __esm({
       sourcePosition: import_zod33.z.number().int().min(1).optional()
     }).strict();
     SerpIntelligencePageSnapshotsBodySchema = import_zod33.z.object({
-      urls: import_zod33.z.array(SerpIntelligencePublicHttpUrlSchema).min(1).max(25),
+      urls: import_zod33.z.array(SerpIntelligencePublicHttpUrlSchema).min(1).max(25).optional(),
       targets: import_zod33.z.array(SerpIntelligencePageSnapshotRequestSchema).min(1).max(25).optional(),
       maxConcurrency: import_zod33.z.number().int().min(1).max(5).default(2),
       timeoutMs: import_zod33.z.number().int().min(1e3).max(6e4).default(15e3),
       debug: import_zod33.z.boolean().default(false)
-    }).strict();
+    }).strict().superRefine((body, ctx) => {
+      const hasUrls = Boolean(body.urls?.length);
+      const hasTargets = Boolean(body.targets?.length);
+      if (hasUrls === hasTargets) {
+        ctx.addIssue({
+          code: import_zod33.z.ZodIssueCode.custom,
+          message: "provide exactly one of urls or targets",
+          path: hasUrls ? ["targets"] : ["urls"]
+        });
+      }
+    });
     SerpIntelligenceAICitationSchema = import_zod33.z.object({
       text: import_zod33.z.string(),
       href: import_zod33.z.string()
@@ -28445,14 +28827,24 @@ async function captureSerpIntelligenceSnapshot(rawInput, runtimeOptions = {}) {
     });
     const pageSnapshotLimit = normalizePageSnapshotLimit(parsedInput);
     const pageSnapshotTargets = collectPageSnapshotTargets(harvestResult, pageSnapshotLimit);
-    const pageSnapshotArtifacts = pageSnapshotTargets.length > 0 ? (await capturePageSnapshotsFn(pageSnapshotTargets, {
-      kernelApiKey: runtimeOptions.kernelApiKey ?? browserServiceApiKey(),
-      timeoutMs: runtimeOptions.pageSnapshotTimeoutMs,
-      maxConcurrency: runtimeOptions.pageSnapshotMaxConcurrency,
-      debug,
-      includeContent: runtimeOptions.includePageSnapshotContent,
-      maxContentChars: runtimeOptions.maxPageSnapshotContentChars
-    })).pageSnapshotArtifacts.map(stripPageSnapshotArtifact) : [];
+    const pageSnapshotArtifacts = pageSnapshotTargets.length > 0 ? (await runWithCostContext(
+      {
+        ...currentCostContext() ?? { op: "serp" },
+        subOp: "page_snapshot",
+        // Page snapshot launches have their own fixed product rate. They
+        // must not overwrite the headless/headful mode used to settle the
+        // preceding SERP harvest.
+        headlessSentOut: void 0
+      },
+      () => capturePageSnapshotsFn(pageSnapshotTargets, {
+        kernelApiKey: runtimeOptions.kernelApiKey ?? browserServiceApiKey(),
+        timeoutMs: runtimeOptions.pageSnapshotTimeoutMs,
+        maxConcurrency: runtimeOptions.pageSnapshotMaxConcurrency,
+        debug,
+        includeContent: runtimeOptions.includePageSnapshotContent,
+        maxContentChars: runtimeOptions.maxPageSnapshotContentChars
+      })
+    )).pageSnapshotArtifacts.map(stripPageSnapshotArtifact) : [];
     return normalizeHarvestResultForSerpIntelligence({
       harvestResult,
       attempts,
@@ -28469,6 +28861,7 @@ var init_serp_capture_service = __esm({
     "use strict";
     init_harvest();
     init_browser_service_env();
+    init_cost_context();
     init_harvest_problems();
     init_page_snapshot_extractor();
     init_schemas4();
@@ -28542,17 +28935,35 @@ async function enforceSerpIntelligenceRateLimit(c, userId) {
   );
 }
 function pageSnapshotTargetsFromBody(body) {
-  return body.targets?.length ? body.targets : body.urls.map((url) => ({
+  return body.targets?.length ? body.targets : (body.urls ?? []).map((url) => ({
     url,
     sourceKind: "configured_target",
     sourcePosition: null
   }));
 }
-var import_hono16, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, serpIntelligenceApp;
+async function logRequestEventBestEffort(input) {
+  try {
+    await logRequestEvent(input);
+  } catch (error) {
+    console.warn("[serp-intelligence] request audit log failed:", error instanceof Error ? error.message : String(error));
+  }
+}
+function captureBillingKeys(userId, suppliedKey, body) {
+  const responseKey = suppliedKey?.trim() || (0, import_node_crypto12.randomUUID)();
+  const requestFingerprint = (0, import_node_crypto12.createHash)("sha256").update(JSON.stringify(body)).digest("hex");
+  const keyDigest = (0, import_node_crypto12.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
+  return {
+    responseKey,
+    debitKey: `serp-capture:${userId}:${keyDigest}`,
+    debitDescription: `${body.query} [request:${requestFingerprint}]`
+  };
+}
+var import_hono16, import_node_crypto12, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, SERP_CAPTURE_BILLING_SOURCE, serpIntelligenceApp;
 var init_serp_intelligence_routes = __esm({
   "src/api/serp-intelligence-routes.ts"() {
     "use strict";
     import_hono16 = require("hono");
+    import_node_crypto12 = require("crypto");
     init_browser_service_env();
     init_page_snapshot_extractor();
     init_serp_capture_service();
@@ -28560,11 +28971,13 @@ var init_serp_intelligence_routes = __esm({
     init_api_auth();
     init_db();
     init_rates();
+    init_cost_context();
     init_concurrency_gates();
     SERP_INTELLIGENCE_RATE_LIMIT = 60;
     SERP_INTELLIGENCE_RATE_WINDOW_SECONDS = 60;
     POST_CAPTURE_ROUTE_LABEL = "POST /capture";
     POST_PAGE_SNAPSHOTS_ROUTE_LABEL = "POST /page-snapshots";
+    SERP_CAPTURE_BILLING_SOURCE = "serp_intelligence_capture";
     serpIntelligenceApp = new import_hono16.Hono();
     serpIntelligenceApp.use("*", createApiKeyAuth());
     serpIntelligenceApp.post("/capture", async (c) => {
@@ -28573,6 +28986,17 @@ var init_serp_intelligence_routes = __esm({
       const raw = await c.req.json().catch(() => ({}));
       const parsed = SerpIntelligenceCaptureBodySchema.safeParse(raw);
       if (!parsed.success) return c.json(formatZodError(parsed.error), 400);
+      const suppliedIdempotencyKey = c.req.header("idempotency-key") ?? c.req.header("x-idempotency-key");
+      if (suppliedIdempotencyKey && suppliedIdempotencyKey.trim().length > 500) {
+        return c.json(structuredError({
+          error_code: "invalid_request",
+          error_type: "validation_error",
+          message: "Idempotency-Key must be 500 characters or fewer.",
+          retryable: false
+        }), 400);
+      }
+      const billingKeys = captureBillingKeys(user.id, suppliedIdempotencyKey, parsed.data);
+      c.header("Idempotency-Key", billingKeys.responseKey);
       const limited = await enforceSerpIntelligenceRateLimit(c, user.id);
       if (limited) return limited;
       const gate = await acquireConcurrencyGate(user, "serp_intelligence_capture", {
@@ -28580,51 +29004,130 @@ var init_serp_intelligence_routes = __esm({
         metadata: { query: parsed.data.query, location: parsed.data.location }
       });
       if (!gate.ok) return c.json(concurrencyLimitExceededResponse(gate), 429, { "Retry-After": String(gate.retryAfterSeconds) });
-      const cost = MC_COSTS.serp;
-      let debited = false;
+      const pageSnapshotHold = parsed.data.includePageSnapshots ? parsed.data.pageSnapshotLimit * MC_COSTS.page_scrape : 0;
+      const cost = MC_COSTS.serp_headful + pageSnapshotHold;
+      const headlessSentOut = { value: null };
       try {
-        const { ok, balance_mc } = await debitMc(
+        const { ok, balance_mc } = await debitMcIdempotent(
           user.id,
           cost,
           LedgerOperation.SERP,
-          parsed.data.query
+          billingKeys.debitDescription,
+          billingKeys.debitKey
         );
-        if (!ok) return c.json(insufficientBalanceResponse(balance_mc, cost), 402);
-        debited = true;
-        const result = await captureSerpIntelligenceSnapshot(parsed.data, {
-          kernelApiKey: browserServiceApiKey(),
-          kernelProxyId: browserServiceProxyId(),
-          signal: c.req.raw.signal,
-          billing: { creditsUsed: cost / MC_PER_CREDIT }
+        if (!ok) {
+          await releaseConcurrencyGate(gate.lockId);
+          return c.json(insufficientBalanceResponse(balance_mc, cost), 402);
+        }
+      } catch (error) {
+        const idempotencyConflict = error instanceof Error && error.message === "idempotent debit key conflicts with another debit";
+        const body = structuredError({
+          error_code: idempotencyConflict ? "idempotency_conflict" : "capture_failed",
+          error_type: idempotencyConflict ? "validation_error" : "capture_error",
+          message: error instanceof Error ? error.message : String(error),
+          retryable: !idempotencyConflict
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
-          source: "serp_intelligence_capture",
-          status: "done",
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "failed",
           query: parsed.data.query,
           location: parsed.data.location,
-          resultCount: result.harvestResult.organicResults.length,
-          result
+          error: body.message
         });
-        return c.json(result);
+        await releaseConcurrencyGate(gate.lockId);
+        return c.json(body, idempotencyConflict ? 409 : 500);
+      }
+      let result;
+      try {
+        const parentCostContext = currentCostContext();
+        result = await runWithCostContext(
+          {
+            ...parentCostContext ?? {},
+            op: "serp",
+            userId: Number(user.id),
+            headlessSentOut
+          },
+          () => captureSerpIntelligenceSnapshot(parsed.data, {
+            kernelApiKey: browserServiceApiKey(),
+            kernelProxyId: browserServiceProxyId(),
+            signal: c.req.raw.signal
+          })
+        );
       } catch (error) {
-        if (debited) await creditMc(user.id, cost, LedgerOperation.REFUND, "failed serp intelligence capture");
+        try {
+          await settleDebitMcIdempotent(
+            user.id,
+            billingKeys.debitKey,
+            0,
+            LedgerOperation.SERP_REFUND,
+            "failed serp intelligence capture",
+            SERP_CAPTURE_BILLING_SOURCE
+          );
+        } catch (settlementError) {
+          console.warn(
+            "[serp-intelligence] failed capture refund remains recoverable:",
+            settlementError instanceof Error ? settlementError.message : String(settlementError)
+          );
+        }
         const body = error instanceof SerpIntelligenceCaptureError ? error.toJSON() : structuredError({
           error_code: "capture_failed",
           error_type: "capture_error",
           message: error instanceof Error ? error.message : String(error),
           retryable: true
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
-          source: "serp_intelligence_capture",
+          source: SERP_CAPTURE_BILLING_SOURCE,
           status: "failed",
           query: parsed.data.query,
           location: parsed.data.location,
           error: "message" in body && typeof body.message === "string" ? body.message : "SERP Intelligence capture failed"
         });
         const status = error instanceof SerpIntelligenceCaptureError ? error.httpStatus : 500;
+        await releaseConcurrencyGate(gate.lockId);
         return c.json(body, status);
+      }
+      try {
+        const requestedActualCost = serpActualCostMc(headlessSentOut.value) + result.pageSnapshotArtifacts.length * MC_COSTS.page_scrape;
+        const settlement = await settleDebitMcIdempotent(
+          user.id,
+          billingKeys.debitKey,
+          requestedActualCost,
+          LedgerOperation.SERP_REFUND,
+          "SERP capture pricing settle",
+          SERP_CAPTURE_BILLING_SOURCE
+        );
+        const settledResult = {
+          ...result,
+          billing: { creditsUsed: settlement.final_amount_mc / MC_PER_CREDIT }
+        };
+        await logRequestEventBestEffort({
+          userId: user.id,
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "done",
+          query: parsed.data.query,
+          location: parsed.data.location,
+          resultCount: settledResult.harvestResult.organicResults.length,
+          result: settledResult
+        });
+        return c.json(settledResult);
+      } catch (error) {
+        const body = structuredError({
+          error_code: "capture_failed",
+          error_type: "capture_error",
+          message: error instanceof Error ? error.message : String(error),
+          retryable: true
+        });
+        await logRequestEventBestEffort({
+          userId: user.id,
+          source: SERP_CAPTURE_BILLING_SOURCE,
+          status: "failed",
+          query: parsed.data.query,
+          location: parsed.data.location,
+          error: body.message
+        });
+        return c.json(body, 500);
       } finally {
         await releaseConcurrencyGate(gate.lockId);
       }
@@ -28660,7 +29163,7 @@ var init_serp_intelligence_routes = __esm({
           maxConcurrency: parsed.data.maxConcurrency,
           debug: parsed.data.debug
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
           source: "serp_intelligence_page_snapshots",
           status: "done",
@@ -28677,7 +29180,7 @@ var init_serp_intelligence_routes = __esm({
           message: error instanceof Error ? error.message : String(error),
           retryable: true
         });
-        await logRequestEvent({
+        await logRequestEventBestEffort({
           userId: user.id,
           source: "serp_intelligence_page_snapshots",
           status: "failed",
@@ -28697,7 +29200,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.21.3";
+    PACKAGE_VERSION = "0.21.4";
   }
 });
 
@@ -29983,9 +30486,19 @@ var init_mcp_tool_schemas = __esm({
       location: NullableString,
       capturedAt: NullableString,
       resultCount: import_zod34.z.number().int().min(0).nullable(),
+      organicResultCount: import_zod34.z.number().int().min(0),
+      localPackResultCount: import_zod34.z.number().int().min(0),
+      pageSnapshotCount: import_zod34.z.number().int().min(0),
+      pageSnapshotFailedCount: import_zod34.z.number().int().min(0),
       snapshotId: NullableString,
       resolvedInputs: import_zod34.z.record(import_zod34.z.unknown()),
       artifacts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      attempts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      billing: import_zod34.z.object({
+        creditsUsed: import_zod34.z.number().min(0).nullable(),
+        requestId: NullableString,
+        jobId: NullableString
+      }).nullable(),
       diagnostics: import_zod34.z.record(import_zod34.z.unknown()).nullable(),
       providerPayload: import_zod34.z.record(import_zod34.z.unknown())
     };
@@ -29993,8 +30506,11 @@ var init_mcp_tool_schemas = __esm({
       schemaVersion: import_zod34.z.literal("serp-intelligence.page-snapshots.v1"),
       status: import_zod34.z.string(),
       count: import_zod34.z.number().int().min(0),
+      capturedCount: import_zod34.z.number().int().min(0),
       failedCount: import_zod34.z.number().int().min(0),
+      skippedCount: import_zod34.z.number().int().min(0),
       captures: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
+      attempts: import_zod34.z.array(import_zod34.z.record(import_zod34.z.unknown())),
       resolvedInputs: import_zod34.z.record(import_zod34.z.unknown()),
       diagnostics: import_zod34.z.record(import_zod34.z.unknown()).nullable(),
       providerPayload: import_zod34.z.record(import_zod34.z.unknown())
@@ -30119,8 +30635,8 @@ var init_mcp_tool_schemas = __esm({
       proxyZip: import_zod34.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location".'),
       pages: import_zod34.z.number().int().min(1).max(2).default(1).describe("Google result pages to capture. Use 2 only for deeper ranking evidence."),
       debug: import_zod34.z.boolean().default(false).describe("Include sanitized browser/proxy/location diagnostics."),
-      includePageSnapshots: import_zod34.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs."),
-      pageSnapshotLimit: import_zod34.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots when includePageSnapshots is true.")
+      includePageSnapshots: import_zod34.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs. Each attempted snapshot adds 1 Credit."),
+      pageSnapshotLimit: import_zod34.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots when includePageSnapshots is true. This capacity is held up front and unused capacity is refunded.")
     };
     ScreenshotInputSchema = {
       url: import_zod34.z.string().url().describe("URL to capture as a full-page screenshot. Use http or https. Pass allowLocal: true to capture localhost or private-network URLs during development."),
@@ -30128,12 +30644,12 @@ var init_mcp_tool_schemas = __esm({
       allowLocal: import_zod34.z.boolean().default(false).describe("Allow localhost and private-network URLs (127.x, 192.168.x, 10.x, etc.). For local development only \u2014 not for production use.")
     };
     CaptureSerpPageSnapshotsInputSchema = {
-      urls: import_zod34.z.array(import_zod34.z.string().url()).min(1).max(25).describe("Public HTTP/HTTPS URLs to capture. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
+      urls: import_zod34.z.array(import_zod34.z.string().url()).min(1).max(25).optional().describe("Public HTTP/HTTPS URLs to capture. Provide exactly one of urls or targets. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
       targets: import_zod34.z.array(import_zod34.z.object({
         url: import_zod34.z.string().url().describe("Public HTTP/HTTPS URL to capture."),
         sourceKind: import_zod34.z.enum(["organic", "ai_citation", "local_pack_website", "configured_target", "site_subject"]).default("configured_target").describe("Why this page is being captured."),
         sourcePosition: import_zod34.z.number().int().min(1).optional().describe("Ranking or citation position when the page came from SERP evidence.")
-      }).strict()).min(1).max(25).optional().describe("Structured targets. Use instead of urls when source kind or position should be preserved."),
+      }).strict()).min(1).max(25).optional().describe("Structured targets. Provide exactly one of targets or urls; use targets when source kind or position should be preserved."),
       maxConcurrency: import_zod34.z.number().int().min(1).max(5).default(2).describe("Parallel page captures."),
       timeoutMs: import_zod34.z.number().int().min(1e3).max(6e4).default(15e3).describe("Per-page capture timeout in milliseconds; timeouts return as structured capture failures."),
       debug: import_zod34.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics.")
@@ -30769,7 +31285,7 @@ var init_rank_tracker_blueprint = __esm({
 
 // src/mcp/paa-mcp-server.ts
 function hashOwnerId(callerKey) {
-  return (0, import_node_crypto12.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto13.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
 }
 function liveWebToolAnnotations(title) {
   return {
@@ -30783,14 +31299,14 @@ function liveWebToolAnnotations(title) {
 function registerSerpIntelligenceCaptureTools(server, executor) {
   server.registerTool("capture_serp_snapshot", {
     title: "SERP Intelligence Snapshot",
-    description: "Capture a structured SERP Intelligence snapshot of a Google query \u2014 the persistent evidence format used by rank-tracking and comparison pipelines. Split query from location; leave proxyMode unset.",
+    description: "Capture a structured SERP Intelligence snapshot of a Google query \u2014 the persistent evidence format used by rank-tracking and comparison pipelines. Split query from location; leave proxyMode unset. Costs 4 Credits when headless or 14 if anti-bot escalation requires headful mode; the 14-Credit hold is settled to the mode used. Optional page snapshots add 1 Credit per attempted URL.",
     inputSchema: CaptureSerpSnapshotInputSchema,
     outputSchema: recordOutputSchema("capture_serp_snapshot", CaptureSerpSnapshotOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Snapshot")
   }, async (input) => formatCaptureSerpSnapshot(await executor.captureSerpSnapshot(input), input));
   server.registerTool("capture_serp_page_snapshots", {
     title: "SERP Intelligence Page Snapshots",
-    description: "Capture public ranking pages as SERP Intelligence page snapshots \u2014 persistent page evidence linked to a captured SERP. Provide urls, or targets to preserve source metadata. Private IPs, localhost, file, and internal URLs are rejected.",
+    description: "Capture public ranking pages as SERP Intelligence page snapshots \u2014 persistent page evidence linked to a captured SERP. Provide exactly one of urls or targets; use targets to preserve source metadata. Private IPs, localhost, file, and internal URLs are rejected. Costs 1 Credit per attempted URL.",
     inputSchema: CaptureSerpPageSnapshotsInputSchema,
     outputSchema: recordOutputSchema("capture_serp_page_snapshots", CaptureSerpPageSnapshotsOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Page Snapshots")
@@ -31213,14 +31729,14 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
     annotations: { title: "Set Scheduled Action Connections", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   }, async (input) => executor.setScheduledActionConnections(input));
 }
-var import_mcp, import_node_fs9, import_node_path13, import_node_crypto12;
+var import_mcp, import_node_fs9, import_node_path13, import_node_crypto13;
 var init_paa_mcp_server = __esm({
   "src/mcp/paa-mcp-server.ts"() {
     "use strict";
     import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
     import_node_fs9 = require("fs");
     import_node_path13 = require("path");
-    import_node_crypto12 = require("crypto");
+    import_node_crypto13 = require("crypto");
     init_version();
     init_mcp_response_formatter();
     init_server_instructions();
@@ -31290,10 +31806,11 @@ function withDefaultHostedProfile(input) {
     ...typeof saveProfileChanges === "boolean" ? { saveProfileChanges } : {}
   };
 }
-var HttpMcpToolExecutor;
+var import_node_crypto14, HttpMcpToolExecutor;
 var init_http_mcp_tool_executor = __esm({
   "src/mcp/http-mcp-tool-executor.ts"() {
     "use strict";
+    import_node_crypto14 = require("crypto");
     init_harvest_timeout();
     init_browser_service_env();
     HttpMcpToolExecutor = class {
@@ -31302,6 +31819,7 @@ var init_http_mcp_tool_executor = __esm({
       timeoutMs;
       httpTimeoutOverrideMs;
       serpIntelligenceTimeoutMs;
+      pendingSerpCaptureBillingKeys = /* @__PURE__ */ new Map();
       constructor(baseUrl, apiKey) {
         this.baseUrl = baseUrl.replace(/\/$/, "");
         this.apiKey = apiKey;
@@ -31312,13 +31830,14 @@ var init_http_mcp_tool_executor = __esm({
         const configuredSerpIntelligenceTimeoutMs = Number(process.env.MCP_SCRAPER_SERP_INTELLIGENCE_HTTP_TIMEOUT_MS ?? this.timeoutMs);
         this.serpIntelligenceTimeoutMs = Number.isFinite(configuredSerpIntelligenceTimeoutMs) && configuredSerpIntelligenceTimeoutMs > 0 ? configuredSerpIntelligenceTimeoutMs : this.timeoutMs;
       }
-      async call(path6, body, timeoutMs = this.timeoutMs, method = "POST") {
+      async call(path6, body, timeoutMs = this.timeoutMs, method = "POST", requestHeaders = {}) {
         try {
           const res = await fetch(`${this.baseUrl}${path6}`, {
             method,
             headers: {
               "Content-Type": "application/json",
-              "x-api-key": this.apiKey
+              "x-api-key": this.apiKey,
+              ...requestHeaders
             },
             body: JSON.stringify(body),
             signal: AbortSignal.timeout(timeoutMs)
@@ -31566,8 +32085,27 @@ var init_http_mcp_tool_executor = __esm({
           connections: input.connections
         }, void 0, "PUT");
       }
-      captureSerpSnapshot(input) {
-        return this.call("/serp-intelligence/capture", input, this.serpIntelligenceTimeoutMs);
+      async captureSerpSnapshot(input) {
+        const fingerprint = (0, import_node_crypto14.createHash)("sha256").update(JSON.stringify(input)).digest("hex");
+        const now = Date.now();
+        for (const [pendingFingerprint, pendingEntry] of this.pendingSerpCaptureBillingKeys) {
+          if (pendingEntry.expiresAt <= now) this.pendingSerpCaptureBillingKeys.delete(pendingFingerprint);
+        }
+        const pending = this.pendingSerpCaptureBillingKeys.get(fingerprint);
+        const idempotencyKey = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto14.randomUUID)();
+        this.pendingSerpCaptureBillingKeys.set(fingerprint, {
+          key: idempotencyKey,
+          expiresAt: now + 15 * 6e4
+        });
+        const result = await this.call(
+          "/serp-intelligence/capture",
+          input,
+          this.serpIntelligenceTimeoutMs,
+          "POST",
+          { "Idempotency-Key": idempotencyKey }
+        );
+        if (!result.isError) this.pendingSerpCaptureBillingKeys.delete(fingerprint);
+        return result;
       }
       captureSerpPageSnapshots(input) {
         return this.call("/serp-intelligence/page-snapshots", input, this.serpIntelligenceTimeoutMs);
@@ -36261,7 +36799,33 @@ var init_mcp_routes = __esm({
 // src/api/browser-agent-db.ts
 async function migrateBrowserAgent() {
   if (_ready2) return;
+  if (_migrationPromise2) return _migrationPromise2;
+  _migrationPromise2 = runBrowserAgentMigration().finally(() => {
+    _migrationPromise2 = null;
+  });
+  return _migrationPromise2;
+}
+async function runBrowserAgentMigration() {
   const db = getDb();
+  const existing = await db.execute(`
+    SELECT
+      (SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN (
+        'browser_agent_sessions',
+        'browser_agent_actions',
+        'browser_agent_replays',
+        'browser_auth_connections',
+        'browser_agent_extensions'
+      )) = 5
+      AND (SELECT COUNT(*) FROM pragma_table_info('browser_agent_sessions') WHERE name = 'concurrency_lock_id') = 1
+      AND (SELECT COUNT(*) FROM pragma_table_info('browser_auth_connections') WHERE name IN (
+        'account_email', 'note', 'updated_at', 'status', 'browser_agent_session_id'
+      )) = 5
+      AS ready
+  `);
+  if (Number(existing.rows[0]?.ready ?? 0) === 1) {
+    _ready2 = true;
+    return;
+  }
   await db.execute(`
     CREATE TABLE IF NOT EXISTS browser_agent_sessions (
       id                  TEXT PRIMARY KEY,
@@ -36361,7 +36925,7 @@ async function migrateBrowserAgent() {
 }
 async function createExtensionRow(input) {
   const db = getDb();
-  const id = `bext_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bext_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_extensions (id, user_id, name, backend_id, backend_name, source, source_url, size_bytes)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
@@ -36396,7 +36960,7 @@ async function deleteExtensionRow(userId, name) {
 }
 async function createAuthConnectionRow(input) {
   const db = getDb();
-  const connectionId = `authc_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const connectionId = `authc_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_auth_connections (connection_id, domain, profile, account_email, note, status, browser_agent_session_id)
           VALUES (?, ?, ?, ?, ?, 'NEEDS_AUTH', ?)`,
@@ -36430,7 +36994,7 @@ async function listAuthConnectionsByProfile(profile) {
 }
 async function createSessionRow(input) {
   const db = getDb();
-  const id = `bas_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bas_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_sessions (id, runtime_session_id, live_view_url, cdp_ws_url, status, label, user_id, concurrency_lock_id, last_action_at)
           VALUES (?, ?, ?, ?, 'open', ?, ?, ?, datetime('now'))`,
@@ -36499,7 +37063,7 @@ async function recordAction(input) {
     sql: `INSERT INTO browser_agent_actions (id, session_id, type, params_json, ok, error)
           VALUES (?, ?, ?, ?, ?, ?)`,
     args: [
-      `baa_${(0, import_node_crypto13.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
+      `baa_${(0, import_node_crypto15.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
       input.sessionId,
       input.type,
       input.params == null ? null : JSON.stringify(input.params),
@@ -36539,13 +37103,14 @@ async function listReplayRows(sessionId) {
   });
   return res.rows;
 }
-var import_node_crypto13, _ready2;
+var import_node_crypto15, _ready2, _migrationPromise2;
 var init_browser_agent_db = __esm({
   "src/api/browser-agent-db.ts"() {
     "use strict";
-    import_node_crypto13 = require("crypto");
+    import_node_crypto15 = require("crypto");
     init_db();
     _ready2 = false;
+    _migrationPromise2 = null;
   }
 });
 
@@ -38255,7 +38820,7 @@ function buildBrowserAgentRoutes() {
     }
     const existing = await getExtensionRow(user.id, name);
     if (existing) return c.json({ error: `an extension named "${name}" already exists \u2014 delete it first or pick another name` }, 409);
-    const backendName = `u${user.id}_${(0, import_node_crypto14.randomUUID)().replace(/-/g, "")}`;
+    const backendName = `u${user.id}_${(0, import_node_crypto16.randomUUID)().replace(/-/g, "")}`;
     try {
       const imported = await importExtensionFromStore(storeUrl, backendName);
       const row = await createExtensionRow({
@@ -38314,11 +38879,11 @@ function buildBrowserAgentRoutes() {
   });
   return app2;
 }
-var import_node_crypto14, import_hono18, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
+var import_node_crypto16, import_hono18, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
 var init_browser_agent_routes = __esm({
   "src/api/browser-agent-routes.ts"() {
     "use strict";
-    import_node_crypto14 = require("crypto");
+    import_node_crypto16 = require("crypto");
     import_hono18 = require("hono");
     init_api_auth();
     init_errors();
@@ -38728,7 +39293,7 @@ async function getKeys() {
   const privateKey = await (0, import_jose2.importPKCS8)(pem, "RS256", { extractable: true });
   const full = await (0, import_jose2.exportJWK)(privateKey);
   const publicJwk = { kty: full.kty, n: full.n, e: full.e };
-  const kid = (0, import_node_crypto15.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
+  const kid = (0, import_node_crypto17.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
   publicJwk.kid = kid;
   publicJwk.alg = "RS256";
   publicJwk.use = "sig";
@@ -38907,23 +39472,23 @@ async function validateAuthRequest(p) {
 }
 function pkceMatches(verifier, challenge) {
   if (!verifier) return false;
-  const computed = (0, import_node_crypto15.createHash)("sha256").update(verifier).digest("base64url");
+  const computed = (0, import_node_crypto17.createHash)("sha256").update(verifier).digest("base64url");
   return computed === challenge;
 }
 async function mintAccessToken(identity, scope, plan, audience) {
   const { privateKey, kid } = await getKeys();
-  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto15.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
+  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto17.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
 }
 function tokenErrorResponse(c, error, description, status) {
   return c.json({ error, error_description: description }, status);
 }
-var import_hono20, import_cookie, import_node_crypto15, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
+var import_hono20, import_cookie, import_node_crypto17, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
 var init_oauth_routes = __esm({
   "src/api/oauth-routes.ts"() {
     "use strict";
     import_hono20 = require("hono");
     import_cookie = require("hono/cookie");
-    import_node_crypto15 = require("crypto");
+    import_node_crypto17 = require("crypto");
     import_jose2 = require("jose");
     init_session();
     init_db();
@@ -39009,7 +39574,7 @@ var init_oauth_routes = __esm({
         }
       }
       const clientName = typeof body.client_name === "string" ? body.client_name : null;
-      const clientId = `client_${(0, import_node_crypto15.randomBytes)(16).toString("hex")}`;
+      const clientId = `client_${(0, import_node_crypto17.randomBytes)(16).toString("hex")}`;
       await registerClient(clientId, redirectUris, clientName);
       console.log("[oauth-dcr] register OK client_id=%s redirect_uris=%s", clientId, JSON.stringify(redirectUris));
       return c.json({
@@ -39062,7 +39627,7 @@ var init_oauth_routes = __esm({
       if (action === "deny") return redirectWithError(p.redirect_uri, p.state, "access_denied");
       if (action !== "approve") return c.text("unsupported action", 400);
       const scope = negotiateScope(p.scope, user, p.resource);
-      const code = `code_${(0, import_node_crypto15.randomBytes)(32).toString("base64url")}`;
+      const code = `code_${(0, import_node_crypto17.randomBytes)(32).toString("base64url")}`;
       const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1e3).toISOString();
       await putCode({
         code,
@@ -39101,7 +39666,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const refreshToken = `rt_${(0, import_node_crypto15.randomBytes)(40).toString("base64url")}`;
+        const refreshToken = `rt_${(0, import_node_crypto17.randomBytes)(40).toString("base64url")}`;
         await putRefresh({
           refresh_token: refreshToken,
           client_id: clientId,
@@ -39131,7 +39696,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const nextRefresh = `rt_${(0, import_node_crypto15.randomBytes)(40).toString("base64url")}`;
+        const nextRefresh = `rt_${(0, import_node_crypto17.randomBytes)(40).toString("base64url")}`;
         await rotateRefresh(refreshToken, {
           refresh_token: nextRefresh,
           client_id: record.client_id,
@@ -40448,7 +41013,7 @@ var init_site_audit_worker = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto16.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto18.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -40505,11 +41070,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto16, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto18, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto16 = require("crypto");
+    import_node_crypto18 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -40586,7 +41151,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto17.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto19.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -40801,11 +41366,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto17, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto19, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto17 = require("crypto");
+    import_node_crypto19 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -40979,7 +41544,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto18.randomUUID)();
+  const exportId = (0, import_node_crypto20.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -41089,11 +41654,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto18, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto20, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto18 = require("crypto");
+    import_node_crypto20 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -41131,12 +41696,6 @@ var init_connected_data_export = __esm({
 });
 
 // src/api/credit-operations.ts
-async function grantSignupCredit(userId) {
-  if (!FREE_SIGNUP_MC || FREE_SIGNUP_MC <= 0) return;
-  const already = await ledgerExistsForOperation(userId, LedgerOperation.SIGNUP_GRANT);
-  if (already) return;
-  await creditMc(userId, FREE_SIGNUP_MC, LedgerOperation.SIGNUP_GRANT, "Welcome credits");
-}
 async function applyMonthlyFreeRefresh(user) {
   return user;
 }
@@ -41903,7 +42462,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto19.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto21.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   const body = await controlRequest("/api/internal/nango/connections/actions/describe", {
@@ -42033,11 +42592,11 @@ async function callScheduleConnectionExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto19, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto21, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto19 = require("crypto");
+    import_node_crypto21 = require("crypto");
     init_connected_data_export();
     DEFAULT_NANGO_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
     DISABLED_NANGO_TOOLS = {
@@ -42525,7 +43084,7 @@ async function processJob(job) {
       if (diff > 0) await creditMc(job.user_id, diff, "paa_refund", "overestimate refund");
       else if (diff < 0) await debitMc(job.user_id, -diff, "paa", opts.query ?? job.query);
     } else if (opts.serpOnly && typeof opts.billingHoldMc === "number") {
-      const actualCost = headlessSentOut.value === true ? MC_COSTS.serp_headless : MC_COSTS.serp_headful;
+      const actualCost = serpActualCostMc(headlessSentOut.value);
       const diff = opts.billingHoldMc - actualCost;
       if (diff > 0) await creditMc(job.user_id, diff, "serp_refund", "headless-mode pricing settle");
       else if (diff < 0) await debitMc(job.user_id, -diff, "serp", opts.query ?? job.query);
@@ -42882,7 +43441,6 @@ var init_server = __esm({
     init_browser_agent_console();
     init_browser_agent_db();
     init_cost_context();
-    init_cost_telemetry();
     init_stripe_routes();
     init_oauth_routes();
     init_chat_routes();
@@ -42988,7 +43546,6 @@ var init_server = __esm({
       const forceHeadless = c.req.header("x-kernel-headless") === "true";
       return runWithCostContext({ op, probeRunId, forceHeadless }, () => next());
     });
-    void migrateCostTelemetry();
     app.post("/auth/register", requireAllowedOrigin, async (c) => {
       const { email, password } = await c.req.json();
       const normalizedEmail = email?.trim().toLowerCase();
@@ -43019,7 +43576,6 @@ var init_server = __esm({
           }
         }
         const newKey = await rotateApiKey(user.id);
-        await grantSignupCredit(user.id);
         void (async () => {
           try {
             const full = await getUserById(user.id);
@@ -44112,7 +44668,7 @@ var init_server = __esm({
           if (diff > 0) await creditMc(user.id, diff, LedgerOperation.PAA_REFUND, "overestimate refund");
           else if (diff < 0) await debitMc(user.id, -diff, LedgerOperation.PAA, options.query);
         } else {
-          const actualCost = headlessSentOut.value === true ? MC_COSTS.serp_headless : MC_COSTS.serp_headful;
+          const actualCost = serpActualCostMc(headlessSentOut.value);
           const diff = syncCost - actualCost;
           if (diff > 0) await creditMc(user.id, diff, LedgerOperation.SERP_REFUND, "headless-mode pricing settle");
           else if (diff < 0) await debitMc(user.id, -diff, LedgerOperation.SERP, options.query);
@@ -44191,22 +44747,13 @@ var init_server = __esm({
     });
     app.post("/admin/backfill-signup-credits", adminAuth, async (c) => {
       const users = await listUsers();
-      let processed = 0;
-      let credited = 0;
-      let skipped = 0;
-      const users_credited = [];
-      for (const user of users) {
-        processed++;
-        const alreadyHasGrant = await ledgerExistsForOperation(user.id, LedgerOperation.SIGNUP_GRANT);
-        if (alreadyHasGrant) {
-          skipped++;
-        } else {
-          await grantSignupCredit(user.id);
-          credited++;
-          users_credited.push({ id: user.id, email: user.email });
-        }
-      }
-      return c.json({ processed, credited, skipped, users_credited });
+      return c.json({
+        processed: users.length,
+        credited: 0,
+        skipped: users.length,
+        users_credited: [],
+        retired: true
+      });
     });
     app.post("/extract-url", auth2, async (c) => {
       const raw = await c.req.json().catch(() => ({}));