mcp-scraper 0.3.44 → 0.3.46

package/dist/bin/api-server.cjs

@@ -4103,6 +4103,12 @@ async function migrate() {
     )
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS oauth_tokens_identity ON oauth_tokens(identity)`);
+  for (const col of ["replaced_by TEXT", "rotated_at TEXT"]) {
+    try {
+      await db.execute(`ALTER TABLE oauth_tokens ADD COLUMN ${col}`);
+    } catch {
+    }
+  }
 }
 async function registerClient(clientId, redirectUris, name) {
   await getDb().execute({
@@ -4168,15 +4174,20 @@ async function getRefresh(refreshToken) {
     scope: String(row.scope),
     resource: row.resource != null ? String(row.resource) : null,
     expires_at: String(row.expires_at),
-    revoked: Number(row.revoked ?? 0)
+    revoked: Number(row.revoked ?? 0),
+    replaced_by: row.replaced_by != null ? String(row.replaced_by) : null,
+    rotated_at: row.rotated_at != null ? String(row.rotated_at) : null
   };
 }
 async function revokeRefresh(refreshToken) {
   await getDb().execute({ sql: "UPDATE oauth_tokens SET revoked = 1 WHERE refresh_token = ?", args: [refreshToken] });
 }
 async function rotateRefresh(oldToken, next) {
-  await revokeRefresh(oldToken);
   await putRefresh(next);
+  await getDb().execute({
+    sql: "UPDATE oauth_tokens SET revoked = 1, replaced_by = ?, rotated_at = ? WHERE refresh_token = ?",
+    args: [next.refresh_token, (/* @__PURE__ */ new Date()).toISOString(), oldToken]
+  });
 }
 async function recordStripeEvent(eventId) {
   const res = await getDb().execute({
@@ -10004,6 +10015,15 @@ var init_blob_store = __esm({
         (0, import_node_fs2.writeFileSync)(path6, data);
         return { key, url: `file://${path6}`, bytes: byteLength(data), contentType };
       }
+      async get(key) {
+        const path6 = (0, import_node_path2.join)(this.baseDir, "blobs", key);
+        try {
+          const { readFileSync: readFileSync4 } = await import("fs");
+          return readFileSync4(path6);
+        } catch {
+          return null;
+        }
+      }
     };
     cached = null;
     VercelBlobStore = class {
@@ -10023,6 +10043,19 @@ var init_blob_store = __esm({
         });
         return { key, url: result.url, bytes: byteLength(data), contentType };
       }
+      async get(key) {
+        try {
+          const { list } = await import("@vercel/blob");
+          const res = await list({ prefix: key, token: this.token, limit: 1 });
+          const match = res.blobs.find((b) => b.pathname === key || b.pathname.startsWith(key));
+          if (!match) return null;
+          const resp = await fetch(match.url);
+          if (!resp.ok) return null;
+          return Buffer.from(await resp.arrayBuffer());
+        } catch {
+          return null;
+        }
+      }
     };
   }
 });
@@ -17828,6 +17861,57 @@ var init_workflow_catalog = __esm({
   }
 });
 
+// src/mcp/report-artifact-offload.ts
+async function offloadReport(toolName, ownerId, report) {
+  const timestamp2 = Date.now();
+  const random = (0, import_node_crypto7.randomBytes)(6).toString("hex");
+  const key = `${REPORT_BLOB_PREFIX}${ownerId}/${toolName}/${timestamp2}-${random}.md`;
+  const stored = await getBlobStore().put(key, report, "text/markdown");
+  return {
+    artifactId: stored.key,
+    bytes: stored.bytes,
+    expiresAt: new Date(timestamp2 + REPORT_BLOB_TTL_MS).toISOString(),
+    preview: report.slice(0, PREVIEW_CHARS)
+  };
+}
+function artifactOwnerId(artifactId) {
+  if (!artifactId.startsWith(REPORT_BLOB_PREFIX)) return null;
+  const rest = artifactId.slice(REPORT_BLOB_PREFIX.length);
+  const segment = rest.split("/")[0];
+  return segment || null;
+}
+async function readArtifactWindow(artifactId, offset, maxBytes) {
+  const buf = await getBlobStore().get(artifactId);
+  if (!buf) return null;
+  const totalBytes = buf.length;
+  const start = Math.max(0, offset);
+  const end = Math.min(totalBytes, start + maxBytes);
+  const slice = buf.subarray(start, end);
+  const nextOffset = end < totalBytes ? end : null;
+  return { text: slice.toString("utf8"), totalBytes, nextOffset };
+}
+function summaryEnvelope(executiveSummary, offloaded) {
+  return [
+    executiveSummary.trim(),
+    "",
+    "--- Full report stored as artifact ---",
+    `artifactId: ${offloaded.artifactId} \xB7 ${offloaded.bytes} bytes \xB7 expires ${offloaded.expiresAt}`,
+    "Read it with report_artifact_read (supports offset/maxBytes windowing)."
+  ].join("\n");
+}
+var import_node_crypto7, REPORT_BLOB_TTL_MS, REPORT_BLOB_PREFIX, PREVIEW_CHARS, ARTIFACT_OFFLOAD_ENABLED;
+var init_report_artifact_offload = __esm({
+  "src/mcp/report-artifact-offload.ts"() {
+    "use strict";
+    import_node_crypto7 = require("crypto");
+    init_blob_store();
+    REPORT_BLOB_TTL_MS = 24 * 60 * 60 * 1e3;
+    REPORT_BLOB_PREFIX = "mcp-reports/";
+    PREVIEW_CHARS = 2e3;
+    ARTIFACT_OFFLOAD_ENABLED = process.env.MCP_SCRAPER_ARTIFACT_OFFLOAD !== "false";
+  }
+});
+
 // src/mcp/mcp-response-formatter.ts
 function configureReportSaving(enabled) {
   reportSavingEnabled = enabled;
@@ -17993,6 +18077,20 @@ function oneBlock(content, diskContent) {
 \u{1F4C4} Saved: \`${filePath}\`` : content;
   return { content: [{ type: "text", text }] };
 }
+async function maybeOffload(toolName, ctx, fullText, summaryText, structuredContent) {
+  if (!ctx?.hosted || !ARTIFACT_OFFLOAD_ENABLED) return null;
+  const bytes = Buffer.byteLength(fullText);
+  if (bytes <= INLINE_BUDGET_BYTES) return null;
+  const offloaded = await offloadReport(toolName, ctx.ownerId, fullText);
+  return {
+    content: [{ type: "text", text: summaryEnvelope(summaryText, offloaded) }],
+    structuredContent: { ...structuredContent, artifact: offloaded }
+  };
+}
+function capArray(items, cap) {
+  if (items.length <= cap) return { items };
+  return { items: items.slice(0, cap), truncatedCount: items.length - cap };
+}
 function workflowRecipeTable(recipes) {
   if (!recipes.length) return "";
   return [
@@ -18344,7 +18442,7 @@ ${headingSection}${kpoSection}${brandingSection}${bodySectionFull}${memSection}$
   }
   return { ...textResult, structuredContent };
 }
-function formatMapSiteUrls(raw, input) {
+async function formatMapSiteUrls(raw, input, ctx) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
@@ -18385,20 +18483,28 @@ ${broken.map((u) => `- ${u.url} (${u.status})`).join("\n")}` : "",
 - Extract content from all pages: use \`extract_site\`
 - Scrape a single page: use \`extract_url\``
   ].filter(Boolean).join("\n");
-  return {
-    ...oneBlock(full),
-    structuredContent: {
-      startUrl: d.startUrl ?? input.url,
-      totalFound: d.totalFound ?? urls.length,
-      truncated: d.truncated === true,
-      okCount: ok.length,
-      redirectCount: redirects.length,
-      brokenCount: broken.length,
-      inventoryFile: inventoryFile ?? null,
-      urls: urls.map((u) => ({ url: u.url, status: u.status ?? null })),
-      durationMs: d.durationMs ?? 0
-    }
+  const structuredContent = {
+    startUrl: d.startUrl ?? input.url,
+    totalFound: d.totalFound ?? urls.length,
+    truncated: d.truncated === true,
+    okCount: ok.length,
+    redirectCount: redirects.length,
+    brokenCount: broken.length,
+    inventoryFile: inventoryFile ?? null,
+    urls: urls.map((u) => ({ url: u.url, status: u.status ?? null })),
+    durationMs: d.durationMs ?? 0
   };
+  const summary = `# URL Map: ${input.url}
+**${d.totalFound} URLs** \xB7 ${(d.durationMs / 1e3).toFixed(1)}s
+
+## Summary
+- 2xx: ${ok.length}
+- 3xx: ${redirects.length}
+- 4xx+: ${broken.length}`;
+  const capped = capArray(structuredContent.urls, STRUCTURED_ARRAY_CAP);
+  const offloaded = await maybeOffload("map_site_urls", ctx, full, summary, { ...structuredContent, urls: capped.items, truncatedCount: capped.truncatedCount });
+  if (offloaded) return offloaded;
+  return { ...oneBlock(full), structuredContent };
 }
 function buildSeoExport(siteUrl, pages, branding) {
   const { edges, metrics } = buildLinkGraph(pages, siteUrl);
@@ -18418,7 +18524,7 @@ function buildSeoExport(siteUrl, pages, branding) {
     branding: branding ?? void 0
   };
 }
-function formatExtractSite(raw, input) {
+async function formatExtractSite(raw, input, ctx) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
@@ -18453,6 +18559,36 @@ function formatExtractSite(raw, input) {
       schemaTypes: schemaTypesOf(p)
     })));
     const preview = pages.slice(0, BULK_PAGE_THRESHOLD).map(pageRow).join("\n");
+    const summaryHeader = [
+      `# Site Extract: ${input.url}`,
+      durationLine,
+      `
+## Pages (first ${Math.min(BULK_PAGE_THRESHOLD, pages.length)} of ${pages.length})
+| # | Title | URL | Schema |
+|---|-------|-----|--------|
+${preview}`
+    ].join("\n");
+    if (!bulk && ctx?.hosted) {
+      const pageDetails2 = pages.map((p, i) => {
+        const body = (p.bodyMarkdown ?? "").trim();
+        return [
+          `
+## ${i + 1}. ${p.title ?? "Untitled"}`,
+          `- **URL:** ${p.url}`,
+          p.metaDescription ? `- **Description:** ${p.metaDescription}` : "",
+          body ? `
+${body}` : "_(no content extracted)_"
+        ].filter(Boolean).join("\n");
+      }).join("\n");
+      const fullForOffload = `${summaryHeader}
+
+---
+# Full Page Content
+${pageDetails2}${tips}`;
+      const capped = capArray(structuredContent.pages, STRUCTURED_ARRAY_CAP);
+      const offloaded = await maybeOffload("extract_site", ctx, fullForOffload, `${summaryHeader}${tips}`, { ...structuredContent, pages: capped.items, truncatedCount: capped.truncatedCount });
+      if (offloaded) return offloaded;
+    }
     const location2 = bulk ? `
 ## \u{1F4C1} Bulk scrape saved
 - **Folder:** \`${bulk.dir}\` \u2190 all scraped page content is here
@@ -18505,7 +18641,7 @@ ${body}` : "_(no content extracted)_"
 ${pageDetails}${tips}`;
   return { ...oneBlock(full, diskReport), structuredContent };
 }
-async function formatAuditSite(raw, input) {
+async function formatAuditSite(raw, input, ctx) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
@@ -18536,6 +18672,24 @@ async function formatAuditSite(raw, input) {
     images: { unique: img.unique, totalBytes: img.totalBytes, over100kb: img.over100kb, legacyFormat: img.legacyFormat },
     links: { internal: lr.internal.totalLinks, external: lr.external.totalLinks, orphans: lr.internal.orphans, brokenInternal: lr.internal.brokenInternal, externalDomains: lr.external.uniqueDomains }
   };
+  const summary = [
+    `# Technical SEO Audit: ${input.url}`,
+    durationLine,
+    `
+## Top issues
+${topIssues || "_none found_"}`,
+    `
+## Links
+${linkLine}`,
+    `
+## Images
+${imgLine}`
+  ].join("\n");
+  if (!bulk && ctx?.hosted) {
+    const fullForOffload = [summary, "\n---\n# Full Audit Report", seo.reportMd, renderImageSection(imageAudit), renderLinkReport(seo.linkReport)].join("\n");
+    const offloaded = await maybeOffload("audit_site", ctx, fullForOffload, summary, structuredContent);
+    if (offloaded) return offloaded;
+  }
   const location2 = bulk ? `
 ## \u{1F4C1} Technical audit saved
 - **Folder:** \`${bulk.dir}\` \u2190 full audit + page content here
@@ -19306,7 +19460,7 @@ ${rows}`,
     }
   };
 }
-function formatDirectoryWorkflow(raw, input) {
+async function formatDirectoryWorkflow(raw, input, ctx) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
   const d = parsed.data;
@@ -19358,26 +19512,29 @@ ${businessRows}` : null,
     durationMs != null ? `
 *Completed in ${(durationMs / 1e3).toFixed(1)}s*` : null
   ].filter(Boolean).join("\n");
-  return {
-    ...oneBlock(full),
-    structuredContent: {
-      query: d.query,
-      state: d.state,
-      minPopulation: d.minPopulation,
-      populationYear: d.populationYear,
-      maxResultsPerCity: d.maxResultsPerCity,
-      concurrency: d.concurrency,
-      censusSourceUrl: d.censusSourceUrl,
-      usZipsSourcePath: d.usZipsSourcePath ?? null,
-      warnings,
-      extractedAt: d.extractedAt,
-      selectedCityCount: d.selectedCityCount,
-      totalResultCount,
-      csvPath,
-      cities,
-      durationMs: durationMs ?? 0
-    }
+  const structuredContent = {
+    query: d.query,
+    state: d.state,
+    minPopulation: d.minPopulation,
+    populationYear: d.populationYear,
+    maxResultsPerCity: d.maxResultsPerCity,
+    concurrency: d.concurrency,
+    censusSourceUrl: d.censusSourceUrl,
+    usZipsSourcePath: d.usZipsSourcePath ?? null,
+    warnings,
+    extractedAt: d.extractedAt,
+    selectedCityCount: d.selectedCityCount,
+    totalResultCount,
+    csvPath,
+    cities,
+    durationMs: durationMs ?? 0
   };
+  const summary = `# Directory Workflow: ${input.query}
+**Markets:** ${cities.length} \xB7 **Maps results:** ${totalResultCount} \xB7 **State:** ${d.state ?? input.state ?? "US"}`;
+  const capped = capArray(cities, STRUCTURED_ARRAY_CAP);
+  const offloaded = await maybeOffload("directory_workflow", ctx, full, summary, { ...structuredContent, cities: capped.items, truncatedCount: capped.truncatedCount });
+  if (offloaded) return offloaded;
+  return { ...oneBlock(full), structuredContent };
 }
 function formatMapsPlaceIntel(raw, input) {
   const parsed = parseData(raw);
@@ -19897,7 +20054,7 @@ ${rows}` : ""
     }
   };
 }
-var import_node_fs5, import_node_os5, import_node_path7, reportSavingEnabled, BULK_PAGE_THRESHOLD, BULK_URL_THRESHOLD;
+var import_node_fs5, import_node_os5, import_node_path7, INLINE_BUDGET_BYTES, STRUCTURED_ARRAY_CAP, reportSavingEnabled, BULK_PAGE_THRESHOLD, BULK_URL_THRESHOLD;
 var init_mcp_response_formatter = __esm({
   "src/mcp/mcp-response-formatter.ts"() {
     "use strict";
@@ -19910,6 +20067,9 @@ var init_mcp_response_formatter = __esm({
     init_seo_link_report();
     init_seo_issues();
     init_image_audit();
+    init_report_artifact_offload();
+    INLINE_BUDGET_BYTES = Number(process.env.MCP_SCRAPER_INLINE_BUDGET ?? 5e4);
+    STRUCTURED_ARRAY_CAP = 25;
     reportSavingEnabled = true;
     BULK_PAGE_THRESHOLD = 25;
     BULK_URL_THRESHOLD = 500;
@@ -22471,7 +22631,7 @@ async function readManifestFromSummary(summary) {
 function webhookSignature(body, timestamp2) {
   const secret2 = process.env.MCP_SCRAPER_WEBHOOK_SECRET?.trim();
   if (!secret2) return null;
-  return (0, import_node_crypto7.createHmac)("sha256", secret2).update(`${timestamp2}.${body}`).digest("hex");
+  return (0, import_node_crypto8.createHmac)("sha256", secret2).update(`${timestamp2}.${body}`).digest("hex");
 }
 async function deliverWorkflowWebhook(input) {
   if (!input.webhookUrl) return;
@@ -22678,11 +22838,11 @@ async function dispatchDueWorkflowSchedules(apiUrl, limit = 3) {
   }
   return { dispatched: results.length, results };
 }
-var import_node_crypto7, import_promises9, import_hono12, import_zod29, workflowApp, WorkflowInputSchema, WorkflowIdSchema, CadenceSchema, ScheduleStatusSchema, RunBodySchema, ScheduleCreateSchema, SchedulePatchSchema, TERMINAL_RUN_STATUSES;
+var import_node_crypto8, import_promises9, import_hono12, import_zod29, workflowApp, WorkflowInputSchema, WorkflowIdSchema, CadenceSchema, ScheduleStatusSchema, RunBodySchema, ScheduleCreateSchema, SchedulePatchSchema, TERMINAL_RUN_STATUSES;
 var init_workflow_routes = __esm({
   "src/api/workflow-routes.ts"() {
     "use strict";
-    import_node_crypto7 = require("crypto");
+    import_node_crypto8 = require("crypto");
     import_promises9 = require("fs/promises");
     import_hono12 = require("hono");
     import_zod29 = require("zod");
@@ -22963,7 +23123,7 @@ var init_workflow_routes = __esm({
 // src/serp-intelligence/page-snapshot-extractor.ts
 function sha256(value) {
   if (!value) return null;
-  return (0, import_node_crypto8.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto9.createHash)("sha256").update(value).digest("hex");
 }
 function countWords(markdown) {
   const matches = markdown.trim().match(/\b[\p{L}\p{N}][\p{L}\p{N}'-]*\b/gu);
@@ -23263,11 +23423,11 @@ async function capturePageSnapshots(targets, options = {}) {
     }
   };
 }
-var import_node_crypto8, import_p_limit3, DEFAULT_TIMEOUT_MS, DEFAULT_MAX_CONCURRENCY, DEFAULT_MAX_CONTENT_CHARS;
+var import_node_crypto9, import_p_limit3, DEFAULT_TIMEOUT_MS, DEFAULT_MAX_CONCURRENCY, DEFAULT_MAX_CONTENT_CHARS;
 var init_page_snapshot_extractor = __esm({
   "src/serp-intelligence/page-snapshot-extractor.ts"() {
     "use strict";
-    import_node_crypto8 = require("crypto");
+    import_node_crypto9 = require("crypto");
     import_p_limit3 = __toESM(require("p-limit"), 1);
     init_kpo_extractor();
     init_url_utils();
@@ -25843,18 +26003,18 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.3.44";
+    PACKAGE_VERSION = "0.3.46";
   }
 });
 
 // src/mcp/server-instructions.ts
-var SERVER_INSTRUCTIONS;
-var init_server_instructions = __esm({
-  "src/mcp/server-instructions.ts"() {
-    "use strict";
-    SERVER_INSTRUCTIONS = `
+function serverInstructions(savesReportsLocally) {
+  const reportLine = savesReportsLocally ? "All report-producing tools also save a full Markdown report to disk." : "On this hosted endpoint, small reports return inline; large reports are stored as artifacts \u2014 read them back with report_artifact_read.";
+  return `
 # MCP Scraper
 
+${reportLine}
+
 Scrapes and analyzes web, search, maps, social, and site data. **Pick a tool by NAME from the map
 below, then load its schema before calling.** Where a tool needs a value another tool produces, the
 seam is noted so you can chain them.
@@ -25919,45 +26079,78 @@ Multi-step orchestrations \u2014 prefer these over hand-chaining primitives when
 - Stand up a rank-tracking blueprint (database + cron + ingestion plan) -> **rank_tracker_workflow**.
 - Find which sources an AI answer cites for a query (AEO) -> **query_fanout_workflow** (open a browser
   session on chatgpt.com or claude.ai FIRST, then run it against that session).
+- Not sure which workflow fits a goal -> **workflow_suggest**; to just see what's available -> **workflow_list**.
+- Hosted/stepwise chain: **workflow_run** starts and returns \`runId\` (+ \`nextStep\` when multi-leg) ->
+  **workflow_step** with that \`runId\` advances one leg at a time until \`done\` -> **workflow_status**
+  re-opens a run to check state or recover artifact ids -> **workflow_artifact_read** pulls one artifact's
+  full content by \`runId\` + \`artifactId\`.
+- Browser replay recording: **browser_replay_start** begins it -> **browser_replay_mark** (while
+  recording) locates a DOM target and returns a ready-to-use timed annotation -> **browser_replay_stop**
+  ends it -> feed collected annotations to **browser_replay_annotate**, or just
+  **browser_replay_download** the plain MP4. **browser_list_replays** recovers replay ids.
+- Video breakdown is async: **video_frame_analysis** takes a DIRECT media file URL (resolve
+  YouTube/Facebook/Instagram page URLs to one first, e.g. via \`facebook_page_intel\`'s \`videoUrl\`) and
+  returns a \`runId\` immediately -> poll **video_frame_analysis_status** with that \`runId\` until \`status\`
+  is \`done\`.
 
 ## Notes
 - Bulk / full-site crawls: call \`extract_site\` with \`rotateProxies:true\` for blocked or rate-limited
   sites. It returns a saved folder/artifact plus a summary, not the full content inline.
 - Browser sessions and media transcription cost credits and take longer \u2014 prefer the cheapest tool that
   answers the question (plain search/extract before browser agents).
-- Large results are saved to disk or an artifact and returned as a summary plus a path; read the path for
-  full detail rather than expecting the whole payload inline.
+- Large results are saved to disk or an artifact and returned as a summary plus a path or artifactId;
+  read it back for full detail rather than expecting the whole payload inline.
 `.trim();
+}
+var SERVER_INSTRUCTIONS;
+var init_server_instructions = __esm({
+  "src/mcp/server-instructions.ts"() {
+    "use strict";
+    SERVER_INSTRUCTIONS = serverInstructions(true);
+  }
+});
+
+// src/mcp/output-schema-registry.ts
+function recordOutputSchema(name, schema) {
+  OUTPUT_SCHEMAS[name] = schema;
+  return ADVERTISE_OUTPUT_SCHEMAS ? schema : void 0;
+}
+var ADVERTISE_OUTPUT_SCHEMAS, OUTPUT_SCHEMAS;
+var init_output_schema_registry = __esm({
+  "src/mcp/output-schema-registry.ts"() {
+    "use strict";
+    ADVERTISE_OUTPUT_SCHEMAS = process.env.MCP_SCRAPER_ADVERTISE_OUTPUT_SCHEMAS === "true";
+    OUTPUT_SCHEMAS = {};
   }
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod31, HarvestPaaInputSchema, ExtractUrlInputSchema, MapSiteUrlsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryWorkflowOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, MapsPlaceIntelOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema;
+var import_zod31, HarvestPaaInputSchema, ExtractUrlInputSchema, MapSiteUrlsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, ArtifactPointerOutputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryWorkflowOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, MapsPlaceIntelOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
     import_zod31 = require("zod");
     init_schemas3();
     HarvestPaaInputSchema = {
-      query: import_zod31.z.string().min(1).describe('The search query. For localized results, KEEP the place in the query text \u2014 if the user says "best hvac company in Denver CO", use query="best hvac company Denver CO" (and also set location="Denver, CO"). City-in-query is what localizes results reliably; do not strip it out.'),
-      location: import_zod31.z.string().optional().describe('City, region, or country for geo signals (uule + location evidence), e.g. "Denver, CO", "Tokyo, Japan". Set it alongside a city-in-query wording; on its own it does NOT reliably localize results.'),
-      maxQuestions: import_zod31.z.number().int().min(1).max(200).default(30).describe("Number of PAA questions to extract. Default 30. Maximum 200. Use 10 for quick probes, 30 for normal research, 100-200 when the user asks for everything/full/deep research. Larger harvests get a longer server time budget (151-200 questions \u2192 up to 280s). Credits are charged by extracted question; unused request hold is refunded."),
-      gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from location or user language. Examples: United States us, United Kingdom gb, Japan jp, Canada ca, Australia au."),
-      hl: import_zod31.z.string().default("en").describe("Google interface/content language inferred from the user request. Use en unless the user asks for another language or locale."),
-      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use desktop by default; use mobile only when the user asks for mobile rankings."),
-      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress \u2014 reliable). Do NOT set "location" just because the user named a city; localized results come from city-in-query wording. "location" forces a residential geo-IP for rank-tracking fidelity only, is frequently CAPTCHA-blocked, and should be used only when the user explicitly demands as-seen-from-the-city results and accepts failures.'),
-      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location" (see its warning); ignored otherwise.'),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/session/location diagnostics in the response. Use true when debugging localization, CAPTCHA, or proxy behavior.")
+      query: import_zod31.z.string().min(1).describe('The search query. KEEP the place in the query text for localized results (e.g. "best hvac company Denver CO") and also set location \u2014 city-in-query is what localizes reliably.'),
+      location: import_zod31.z.string().optional().describe('City, region, or country for geo signals, e.g. "Denver, CO". Set alongside city-in-query wording; alone it does NOT reliably localize.'),
+      maxQuestions: import_zod31.z.number().int().min(1).max(200).default(30).describe("PAA questions to extract. Default 30, maximum 200. Use 10 for quick probes, 100-200 for deep research. Billed per extracted question; unused hold refunded."),
+      gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from location or user language."),
+      hl: import_zod31.z.string().default("en").describe("Google interface/content language inferred from the user request."),
+      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use mobile only for mobile rankings."),
+      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress). Do NOT set "location" just because a city was named \u2014 that comes from city-in-query wording. "location" forces residential geo-IP for rank-tracking fidelity, is frequently CAPTCHA-blocked, and accepts failures.'),
+      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location".'),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized diagnostics for debugging localization, CAPTCHA, or proxy behavior.")
     };
     ExtractUrlInputSchema = {
-      url: import_zod31.z.string().url().describe("Public http/https URL to extract. Use this when the user provides one specific page URL."),
-      screenshot: import_zod31.z.boolean().default(false).describe("Also capture a full-page screenshot of the URL. Saved to ~/Downloads/mcp-scraper/screenshots/ and returned inline. Use when the user asks to see or capture the page visually."),
-      screenshotDevice: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("Viewport for screenshot. desktop = 1440\xD7900. mobile = 390\xD7844. Default desktop."),
-      extractBranding: import_zod31.z.boolean().default(false).describe("Extract brand colors, fonts, logo, and favicon using a rendered browser session. Returns colorScheme (light/dark), colors (primary/accent/background/text/heading as hex), fonts (heading/body family names), and assets (logo URL, favicon URL). Use when the user asks about brand colors, site theme, or brand assets."),
-      downloadMedia: import_zod31.z.boolean().default(false).describe("Extract and download all page media (images, video, audio) to ~/Downloads/mcp-scraper/media/. Ad networks, tracking pixels, and noise URLs are filtered automatically. Use when the user asks to download or harvest assets from a page."),
+      url: import_zod31.z.string().url().describe("Public http/https URL to extract."),
+      screenshot: import_zod31.z.boolean().default(false).describe("Capture a full-page screenshot, saved to ~/Downloads/mcp-scraper/screenshots/ and returned inline."),
+      screenshotDevice: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("Viewport for screenshot. desktop = 1440\xD7900, mobile = 390\xD7844."),
+      extractBranding: import_zod31.z.boolean().default(false).describe("Extract brand colors, fonts, logo, and favicon via a rendered browser session."),
+      downloadMedia: import_zod31.z.boolean().default(false).describe("Extract and download page media (images/video/audio) to ~/Downloads/mcp-scraper/media/. Ad/tracking noise is filtered automatically."),
       mediaTypes: import_zod31.z.array(import_zod31.z.enum(["image", "video", "audio"])).default(["image", "video", "audio"]).describe("Which media types to download. Default all three."),
-      allowLocal: import_zod31.z.boolean().default(false).describe("Allow localhost and private-network URLs. For local development only."),
-      depositToVault: import_zod31.z.boolean().default(false).describe("Also save the full page content into the user's MCP Memory Library vault, server-side. The complete body is stored and embedded for semantic recall WITHOUT passing through this conversation \u2014 the tool result only confirms the saved note. Use when the user asks to save/remember/store a page, or to build a knowledge base from scrapes."),
+      allowLocal: import_zod31.z.boolean().default(false).describe("Allow localhost and private-network URLs. Local development only."),
+      depositToVault: import_zod31.z.boolean().default(false).describe("Save the full page content into the user's MCP Memory vault server-side, embedded for semantic recall \u2014 the full body is NOT returned to chat."),
       vaultName: import_zod31.z.string().trim().min(1).max(120).optional().describe("Optional vault to deposit into. Defaults to the user's personal vault.")
     };
     MapSiteUrlsInputSchema = {
@@ -25965,34 +26158,34 @@ var init_mcp_tool_schemas = __esm({
       maxUrls: import_zod31.z.number().int().min(1).max(1e4).optional().describe("Maximum URLs to discover. Use 100 for normal maps, up to 10000 for a full inventory. Large maps (over 500 URLs) write the complete inventory to a local file and return only a summary plus the file path instead of the full list inline.")
     };
     ExtractSiteInputSchema = {
-      url: import_zod31.z.string().url().describe("Public website URL or domain to crawl for page CONTENT across multiple pages (map + scrape). Use when the user wants the content/text/markdown of a site's pages. For a technical SEO audit (issues, link graph, indexability, headings, image weights) use audit_site instead \u2014 extract_site returns content only, not analysis."),
-      maxPages: import_zod31.z.number().int().min(1).max(1e4).optional().describe("Maximum pages to extract. Use 50 for a normal crawl, up to 10000 for a full-site bulk scrape. Bulk crawls (over 25 pages) switch to folder mode: every page is saved as its own Markdown file in a local folder and the response returns only a summary plus the folder path, so the full content never floods the context window."),
-      rotateProxies: import_zod31.z.boolean().optional().describe("Route page fetches through rotating residential proxies in headful browsers to defeat rate-limiting and bot blocks (403/429). Discovers URLs from the sitemap, fetches in batches with a fresh proxy per batch, retries failures on a new proxy, and automatically parallelizes across the account's concurrency slots. Slower and pricier than the default fetch path, so use only when a site blocks normal crawling."),
-      rotateProxyEvery: import_zod31.z.number().int().min(1).max(100).optional().describe("When rotateProxies is on, how many pages to fetch per browser/proxy before discarding it and minting a fresh one. Default 30. Lower values rotate IPs more aggressively against strict rate limits."),
-      formats: import_zod31.z.array(import_zod31.z.enum(["markdown", "links", "json", "images", "branding"])).optional().describe("Which data formats to include in the per-page output. markdown=page content as Markdown, links=internal/external link graph, json=structured data/schema, images=per-page image URLs (links only, no downloads), branding=site-level logo/colors/fonts captured once from the homepage (requires a browser, adds time). markdown, links, json, and images are always captured cheaply from the HTML; branding is the only opt-in capture. Defaults to markdown+links when omitted.")
+      url: import_zod31.z.string().url().describe("Public website URL or domain to crawl for page CONTENT (map + scrape). For a technical SEO audit use audit_site instead \u2014 this returns content only, not analysis."),
+      maxPages: import_zod31.z.number().int().min(1).max(1e4).optional().describe("Maximum pages to extract. Bulk crawls (over 25 pages) switch to folder mode: each page saved as its own Markdown file, with a summary plus folder path returned instead of inlining content."),
+      rotateProxies: import_zod31.z.boolean().optional().describe("Route page fetches through rotating residential proxies to defeat rate-limiting and bot blocks (403/429). Slower and pricier \u2014 use only when a site blocks normal crawling."),
+      rotateProxyEvery: import_zod31.z.number().int().min(1).max(100).optional().describe("When rotateProxies is on, pages fetched per proxy before rotating. Default 30."),
+      formats: import_zod31.z.array(import_zod31.z.enum(["markdown", "links", "json", "images", "branding"])).optional().describe("Per-page output formats: markdown, links, json, images are captured cheaply from HTML; branding (site-level logo/colors/fonts) requires a browser and adds time. Defaults to markdown+links.")
     };
     AuditSiteInputSchema = {
-      url: import_zod31.z.string().url().describe("Public website URL or domain to run a full technical SEO audit on. Use when the user asks for a technical audit, SEO audit, site health check, or a Screaming-Frog-style crawl \u2014 i.e. they want ANALYSIS (issues, internal link graph, indexability, heading breakdown, image sizes/formats), not just page content. For plain content scraping use extract_site instead."),
-      maxPages: import_zod31.z.number().int().min(1).max(1e4).optional().describe("Maximum pages to crawl and audit. Use 50 for a normal audit, up to 10000 for a full-site audit. The audit always writes a folder of analysis files (report.md, issues.json, pages.jsonl, links.jsonl, link-metrics.jsonl, images.jsonl) plus per-page content, and returns a headline summary plus the folder path."),
-      rotateProxies: import_zod31.z.boolean().optional().describe("Route page fetches through rotating residential proxies to defeat rate-limiting and bot blocks (403/429). Slower and pricier than the default fetch path, so use only when a site blocks normal crawling."),
-      rotateProxyEvery: import_zod31.z.number().int().min(1).max(100).optional().describe("When rotateProxies is on, how many pages to fetch per browser/proxy before discarding it and minting a fresh one. Default 30.")
+      url: import_zod31.z.string().url().describe("Public website URL or domain for a full technical SEO audit (issues, link graph, indexability, headings, images). For plain content use extract_site instead."),
+      maxPages: import_zod31.z.number().int().min(1).max(1e4).optional().describe("Maximum pages to crawl and audit. Always writes a folder of analysis files plus per-page content, returning a summary plus the folder path."),
+      rotateProxies: import_zod31.z.boolean().optional().describe("Route page fetches through rotating residential proxies to defeat rate-limiting and bot blocks. Slower/pricier \u2014 use only when a site blocks normal crawling."),
+      rotateProxyEvery: import_zod31.z.number().int().min(1).max(100).optional().describe("When rotateProxies is on, pages fetched per proxy before rotating. Default 30.")
     };
     YoutubeHarvestInputSchema = {
       mode: import_zod31.z.enum(["search", "channel"]).describe("Use search for topic/keyword requests. Use channel when the user provides @handle, channel ID, or channel URL."),
       query: import_zod31.z.string().optional().describe("Required when mode is search. The YouTube search topic in the user\u2019s words."),
       channelHandle: import_zod31.z.string().optional().describe("YouTube channel handle, channel ID, or URL. Examples: @mkbhd, UC..., https://youtube.com/@mkbhd."),
-      maxVideos: import_zod31.z.number().int().min(1).max(500).default(50).describe("Number of videos to return. Default 50, maximum 500. Use 10-25 for quick topic discovery, 50 for normal channel/search harvests, and larger values only when the user asks for full channel/history because large responses consume more context.")
+      maxVideos: import_zod31.z.number().int().min(1).max(500).default(50).describe("Number of videos to return. Default 50, maximum 500.")
     };
     YoutubeTranscribeInputSchema = {
       videoId: import_zod31.z.string().min(1).optional().describe("YouTube video ID, e.g. dQw4w9WgXcQ. Use only an ID returned by youtube_harvest or visible in a YouTube URL; do not invent one."),
-      url: import_zod31.z.string().url().optional().describe("Full YouTube URL, e.g. https://www.youtube.com/watch?v=dQw4w9WgXcQ or https://youtu.be/dQw4w9WgXcQ. Use this when the user pasted a URL instead of an ID. Provide videoId or url.")
+      url: import_zod31.z.string().url().optional().describe("Full YouTube URL. Use when the user pasted a URL instead of an ID. Provide videoId or url.")
     };
     FacebookPageIntelInputSchema = {
-      pageId: import_zod31.z.string().optional().describe("Facebook advertiser/page ID. Use only a pageId returned by facebook_ad_search/facebook_page_intel or copied from Facebook Ad Library; do not construct one yourself."),
-      libraryId: import_zod31.z.string().optional().describe("Facebook Ad Library archive ID for a known ad or advertiser sample. Use a libraryId returned by facebook_ad_search, or a libraryId/adArchiveId visible in Ad Library."),
+      pageId: import_zod31.z.string().optional().describe("Facebook advertiser/page ID. Use only a value returned by facebook_ad_search or copied from Ad Library."),
+      libraryId: import_zod31.z.string().optional().describe("Facebook Ad Library archive ID. Use a value returned by facebook_ad_search, or a libraryId/adArchiveId visible in Ad Library."),
       query: import_zod31.z.string().optional().describe("Advertiser or brand name when pageId/libraryId is not known. One of pageId, libraryId, or query is required."),
-      maxAds: import_zod31.z.number().int().min(1).max(200).default(50).describe("Maximum ads to inspect. Default 50, maximum 200. Prefer 25-50 for focused advertiser scans; use 100-200 only when the user asks for a broad ad archive sweep."),
-      country: import_zod31.z.string().length(2).default("US").describe("Two-letter Ad Library country code. Default US. Examples: US, CA, GB, AU. Infer from the user request when they name a country.")
+      maxAds: import_zod31.z.number().int().min(1).max(200).default(50).describe("Maximum ads to inspect. Default 50, maximum 200."),
+      country: import_zod31.z.string().length(2).default("US").describe("Two-letter Ad Library country code. Default US.")
     };
     FacebookAdSearchInputSchema = {
       query: import_zod31.z.string().min(1).describe("Advertiser, brand, competitor, niche, or keyword to search in Facebook Ad Library."),
@@ -26000,7 +26193,7 @@ var init_mcp_tool_schemas = __esm({
       maxResults: import_zod31.z.number().int().min(1).max(20).default(10).describe("Maximum advertisers to return. Default 10, maximum 20. Prefer tighter search terms over maxing this out.")
     };
     RedditThreadInputSchema = {
-      url: import_zod31.z.string().min(1).describe("A reddit.com thread/post URL (www, old, or new Reddit, or a redd.it link). The service fetches it via old.reddit through a residential proxy and returns the post plus its comment tree."),
+      url: import_zod31.z.string().min(1).describe("A reddit.com thread/post URL (www, old, new Reddit, or redd.it)."),
       maxComments: import_zod31.z.number().int().min(1).max(2e3).optional().describe("Optional cap on comments returned. Omit to return all captured comments.")
     };
     VideoFrameAnalysisInputSchema = {
@@ -26014,14 +26207,14 @@ var init_mcp_tool_schemas = __esm({
       runId: import_zod31.z.string().min(1).describe("The runId returned by video_frame_analysis.")
     };
     FacebookAdTranscribeInputSchema = {
-      videoUrl: import_zod31.z.string().url().describe("Direct Facebook CDN video URL from a facebook_page_intel ad result. Do not pass a public Facebook reel/post/share URL here; use facebook_video_transcribe for organic Facebook URLs.")
+      videoUrl: import_zod31.z.string().url().describe("Direct Facebook CDN video URL from facebook_page_intel. Do not pass a public post/reel/share URL \u2014 use facebook_video_transcribe for those.")
     };
     FacebookVideoTranscribeInputSchema = {
-      url: import_zod31.z.string().url().describe("Organic Facebook reel, video, watch, post, or share URL from facebook.com, m.facebook.com, or fb.watch. The tool renders the page, extracts the best matching public Facebook CDN MP4 URL, then transcribes it. Use this when the user pastes a normal Facebook video page URL and asks for the transcript or downloadable MP4."),
+      url: import_zod31.z.string().url().describe("Organic Facebook reel/video/watch/post/share URL from facebook.com, m.facebook.com, or fb.watch."),
       quality: import_zod31.z.enum(["best", "hd", "sd"]).default("best").describe("Preferred progressive MP4 quality. Use best by default; hd prefers the highest HD progressive URL; sd forces the SD URL.")
     };
     GoogleAdsSearchInputSchema = {
-      query: import_zod31.z.string().min(1).describe("A domain (e.g. getviktor.com) or advertiser/brand name to look up in the Google Ads Transparency Center. Domains resolve to the advertisers running ads that point to that site."),
+      query: import_zod31.z.string().min(1).describe("A domain (e.g. getviktor.com) or advertiser/brand name to look up in Google Ads Transparency Center."),
       region: import_zod31.z.string().length(2).default("US").describe("Two-letter region code for where the ads are shown. Default US. Examples: US, CA, GB, AU."),
       maxResults: import_zod31.z.number().int().min(1).max(20).default(10).describe("Maximum advertisers to return. Default 10, maximum 20.")
     };
@@ -26032,78 +26225,84 @@ var init_mcp_tool_schemas = __esm({
       maxAds: import_zod31.z.number().int().min(1).max(200).default(50).describe("Maximum creatives to inspect and hydrate. Default 50, maximum 200. Prefer 25-50 for focused scans.")
     };
     GoogleAdsTranscribeInputSchema = {
-      videoUrl: import_zod31.z.string().url().describe("Direct googlevideo.com playback URL from a google_ads_page_intel video ad result (the videoUrl field). For YouTube-hosted ads use youtube_transcribe with the returned youtubeVideoId instead.")
+      videoUrl: import_zod31.z.string().url().describe("Direct googlevideo.com playback URL from google_ads_page_intel. For YouTube-hosted ads use youtube_transcribe instead.")
     };
     InstagramProfileContentInputSchema = {
       handle: import_zod31.z.string().min(1).optional().describe("Instagram handle, with or without @. Provide handle or url."),
-      url: import_zod31.z.string().url().optional().describe("Instagram profile URL, e.g. https://www.instagram.com/nasaartemis/. Provide handle or url."),
-      profile: import_zod31.z.string().min(1).optional().describe("Optional saved hosted browser profile name to load authenticated Instagram access. If omitted, the server uses its configured default profile when present."),
-      saveProfileChanges: import_zod31.z.boolean().optional().describe("Whether to save browser changes back to the hosted profile. Leave unset unless intentionally updating the saved login session."),
-      maxItems: import_zod31.z.number().int().min(1).max(2e3).default(50).describe("Maximum profile grid post/reel/tv URLs to collect. Default 50, maximum 2000. Use higher values only when the user asks for a fuller archive."),
-      maxScrolls: import_zod31.z.number().int().min(0).max(250).default(10).describe("Maximum pagination scroll attempts. Default 10, maximum 250. Increase for long profiles when Instagram continues loading more grid links."),
-      scrollDelayMs: import_zod31.z.number().int().min(250).max(5e3).default(1200).describe("Delay after each pagination scroll before collecting newly loaded links. Default 1200ms. Increase to 2000-3000ms when Instagram loads slowly."),
-      stableScrollLimit: import_zod31.z.number().int().min(1).max(10).default(4).describe("Stop after this many consecutive scrolls with no new links or scroll progress. Default 4.")
+      url: import_zod31.z.string().url().optional().describe("Instagram profile URL. Provide handle or url."),
+      profile: import_zod31.z.string().min(1).optional().describe("Optional saved hosted browser profile name for authenticated Instagram access."),
+      saveProfileChanges: import_zod31.z.boolean().optional().describe("Save browser changes back to the hosted profile. Leave unset unless intentionally updating the saved login."),
+      maxItems: import_zod31.z.number().int().min(1).max(2e3).default(50).describe("Maximum grid URLs to collect. Default 50, maximum 2000."),
+      maxScrolls: import_zod31.z.number().int().min(0).max(250).default(10).describe("Maximum pagination scroll attempts. Default 10, maximum 250."),
+      scrollDelayMs: import_zod31.z.number().int().min(250).max(5e3).default(1200).describe("Delay after each scroll before collecting new links. Default 1200ms."),
+      stableScrollLimit: import_zod31.z.number().int().min(1).max(10).default(4).describe("Stop after this many consecutive scrolls with no new links.")
     };
     InstagramMediaDownloadInputSchema = {
-      url: import_zod31.z.string().url().describe("Instagram post, reel, or tv URL, e.g. https://www.instagram.com/reel/SHORTCODE/. The tool renders the page, extracts text, image metadata, and Instagram CDN media tracks."),
-      profile: import_zod31.z.string().min(1).optional().describe("Optional saved hosted browser profile name to load authenticated Instagram access. If omitted, the server uses its configured default profile when present."),
-      saveProfileChanges: import_zod31.z.boolean().optional().describe("Whether to save browser changes back to the hosted profile. Leave unset unless intentionally updating the saved login session."),
-      mediaTypes: import_zod31.z.array(import_zod31.z.enum(["image", "video", "audio"])).default(["image", "video", "audio"]).describe("Which media types to download when downloadMedia is true. Reels commonly expose separate video-only and audio-only MP4 tracks."),
-      downloadMedia: import_zod31.z.boolean().default(true).describe("Download extracted text/media files to the MCP Scraper output directory when the API server can write files. Always returns extracted media URLs even when false."),
-      downloadAllTracks: import_zod31.z.boolean().default(false).describe("Download every captured Instagram MP4 track instead of only the selected best video and audio tracks. Use false by default to avoid duplicate bitrates."),
-      includeTranscript: import_zod31.z.boolean().default(false).describe("Transcribe the selected audio track when available. This adds transcription cost and may take longer."),
-      mux: import_zod31.z.boolean().default(true).describe("When video and audio tracks are downloaded separately, try to mux them into a single MP4 if ffmpeg is available. Returns separate tracks when muxing is unavailable.")
+      url: import_zod31.z.string().url().describe("Instagram post, reel, or tv URL, e.g. https://www.instagram.com/reel/SHORTCODE/."),
+      profile: import_zod31.z.string().min(1).optional().describe("Optional saved hosted browser profile name for authenticated Instagram access."),
+      saveProfileChanges: import_zod31.z.boolean().optional().describe("Save browser changes back to the hosted profile. Leave unset unless intentionally updating the saved login."),
+      mediaTypes: import_zod31.z.array(import_zod31.z.enum(["image", "video", "audio"])).default(["image", "video", "audio"]).describe("Which media types to download when downloadMedia is true."),
+      downloadMedia: import_zod31.z.boolean().default(true).describe("Download extracted text/media files to the output directory. Media URLs are always returned even when false."),
+      downloadAllTracks: import_zod31.z.boolean().default(false).describe("Download every captured MP4 track instead of only the best video/audio pair."),
+      includeTranscript: import_zod31.z.boolean().default(false).describe("Transcribe the selected audio track. Adds transcription cost and time."),
+      mux: import_zod31.z.boolean().default(true).describe("Mux separately downloaded video/audio tracks into one MP4 if ffmpeg is available.")
     };
     MapsPlaceIntelInputSchema = {
-      businessName: import_zod31.z.string().min(1).describe('Business name only. If user says "Elite Roofing Denver CO", use businessName="Elite Roofing" and location="Denver, CO".'),
-      location: import_zod31.z.string().min(1).describe('City/region/country where the business should be searched, e.g. "Denver, CO". Infer from the user request when possible.'),
+      businessName: import_zod31.z.string().min(1).describe('Business name only, e.g. "Elite Roofing" (not "Elite Roofing Denver CO" \u2014 put the city in location).'),
+      location: import_zod31.z.string().min(1).describe('City/region/country where the business should be searched, e.g. "Denver, CO".'),
       gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from location."),
       hl: import_zod31.z.string().length(2).default("en").describe("Language inferred from user request."),
-      includeReviews: import_zod31.z.boolean().default(false).describe("Whether to fetch individual review cards. Use true when the user asks for reviews, customer pain, complaints, praise, themes, or review evidence."),
-      maxReviews: import_zod31.z.number().int().min(1).max(500).default(50).describe("Max review cards to return when includeReviews is true. Default 50, maximum 500. Use 50 for normal review analysis and larger values only for deep review mining.")
+      includeReviews: import_zod31.z.boolean().default(false).describe("Fetch individual review cards \u2014 for reviews, customer pain, complaints, or praise themes."),
+      maxReviews: import_zod31.z.number().int().min(1).max(500).default(50).describe("Max review cards when includeReviews is true. Default 50, maximum 500.")
     };
     MapsSearchInputSchema = {
-      query: import_zod31.z.string().min(1).describe('Business category, niche, keyword, or search term. If the user says "roofers in Denver CO", use query="roofers" and location="Denver, CO". Do not put the location here when it can be separated.'),
-      location: import_zod31.z.string().optional().describe('City, region, country, or service area for the Maps search, e.g. "Denver, CO". Infer from the user request when present.'),
+      query: import_zod31.z.string().min(1).describe('Business category, niche, or search term, e.g. "roofers". Do not include location here \u2014 use location instead.'),
+      location: import_zod31.z.string().optional().describe('City, region, country, or service area, e.g. "Denver, CO".'),
       gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from location."),
       hl: import_zod31.z.string().length(2).default("en").describe("Language inferred from user request."),
-      maxResults: import_zod31.z.number().int().min(1).max(50).default(10).describe("Number of Google Maps business/profile candidates to return. Default 10. Maximum 50. Use 10 unless the user asks for more."),
-      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_MAPS_PROXY_MODE).describe("Proxy targeting mode. Maps defaults to location so local market searches get city/state residential proxy targeting and rotation. Use configured to force the service proxy without city/ZIP targeting, and none only for local direct-network debugging."),
-      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe("Optional US ZIP override for residential location proxy targeting. Use when the user gives a specific ZIP or city-center ZIP."),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics when debugging Maps localization, CAPTCHA, or proxy behavior.")
+      maxResults: import_zod31.z.number().int().min(1).max(50).default(10).describe("Number of candidates to return. Default 10, maximum 50."),
+      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_MAPS_PROXY_MODE).describe("Defaults to location (city/state residential proxy targeting). configured forces the service proxy without city/ZIP targeting; none is local debugging only."),
+      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe("Optional US ZIP override for residential proxy targeting."),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics.")
     };
     DirectoryWorkflowInputSchema = {
-      query: import_zod31.z.string().min(1).describe("Business category, niche, or keyword to search on Google Maps for every selected market, e.g. roofers, dentists, med spas. Do not include the city here."),
-      state: import_zod31.z.string().min(2).default("TN").describe("US state abbreviation or state name used to select Census places, e.g. TN or Tennessee."),
-      minPopulation: import_zod31.z.number().int().min(0).default(1e5).describe('Minimum Census place population for market selection. Use 100000 for "cities above 100k population".'),
-      populationYear: import_zod31.z.number().int().min(2020).max(2025).default(2025).describe("Census population estimate year from the 2020-2025 Population Estimates Program city/place dataset."),
-      maxCities: import_zod31.z.number().int().min(1).max(100).default(25).describe("Maximum number of markets to process after sorting by population descending."),
-      maxResultsPerCity: import_zod31.z.number().int().min(1).max(50).default(50).describe("Google Maps business/profile candidates to collect for each city. Maximum 50."),
-      concurrency: import_zod31.z.number().int().min(1).max(5).default(5).describe("How many city Maps searches to run in parallel. Use 5 for broad directory batches unless debugging."),
-      includeZipGroups: import_zod31.z.boolean().default(true).describe("Attach ZIP groups from a configured US ZIPS CSV when available. Set MCP_SCRAPER_USZIPS_CSV_PATH on the API server or pass usZipsCsvPath in local/test mode."),
-      usZipsCsvPath: import_zod31.z.string().optional().describe("Local/test-only path to a US ZIPS CSV with state_abbr, zipcode, county, city columns, such as Lead Magician tools/analytics/data/uszips.csv. Deployed APIs should use MCP_SCRAPER_USZIPS_CSV_PATH instead."),
-      saveCsv: import_zod31.z.boolean().default(true).describe("Save a directory-ready CSV to the MCP Scraper output directory and return its path. CSV rows include source_location, result_position, business_name, review_stars, review_count, category, address, phone, hours_status, website_url, directions_url, place_url, CID fields, population, and ZIP groups."),
-      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_MAPS_PROXY_MODE).describe("Proxy targeting mode for every city Maps search. Maps workflows default to location so each city can use city/state or ZIP-group residential proxy targeting. Use configured to force the service proxy without city/ZIP targeting, and none only for local direct-network debugging."),
-      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe("Optional ZIP override for proxy targeting. Normally omit it so each city can use its ZIP group or city/state location."),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics in each Maps browser session when supported.")
+      query: import_zod31.z.string().min(1).describe("Business category, niche, or keyword to search on Google Maps for every market. Do not include the city."),
+      state: import_zod31.z.string().min(2).default("TN").describe("US state abbreviation or name used to select Census places, e.g. TN."),
+      minPopulation: import_zod31.z.number().int().min(0).default(1e5).describe("Minimum Census place population for market selection."),
+      populationYear: import_zod31.z.number().int().min(2020).max(2025).default(2025).describe("Census population estimate year (2020-2025 Population Estimates Program)."),
+      maxCities: import_zod31.z.number().int().min(1).max(100).default(25).describe("Maximum markets to process after sorting by population descending."),
+      maxResultsPerCity: import_zod31.z.number().int().min(1).max(50).default(50).describe("Google Maps candidates to collect per city."),
+      concurrency: import_zod31.z.number().int().min(1).max(5).default(5).describe("City Maps searches to run in parallel."),
+      includeZipGroups: import_zod31.z.boolean().default(true).describe("Attach ZIP groups from a configured US ZIPS CSV when available (MCP_SCRAPER_USZIPS_CSV_PATH or usZipsCsvPath)."),
+      usZipsCsvPath: import_zod31.z.string().optional().describe("Local/test-only path to a US ZIPS CSV (state_abbr, zipcode, county, city columns). Deployed APIs should use MCP_SCRAPER_USZIPS_CSV_PATH instead. For ZIP enrichment, set MCP_SCRAPER_USZIPS_CSV_PATH on the server, or pass this in local/test mode."),
+      saveCsv: import_zod31.z.boolean().default(true).describe("Save a directory-ready CSV of results to the MCP Scraper output directory and return its path."),
+      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_MAPS_PROXY_MODE).describe("Proxy targeting per city search. Defaults to location (city/ZIP-group residential targeting); configured forces the service proxy; none is local debugging only."),
+      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe("Optional ZIP override for proxy targeting; normally omitted."),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics.")
     };
+    ArtifactPointerOutputSchema = import_zod31.z.object({
+      artifactId: import_zod31.z.string(),
+      bytes: import_zod31.z.number().int().min(0),
+      expiresAt: import_zod31.z.string(),
+      preview: import_zod31.z.string()
+    });
     RankTrackerModeSchema = import_zod31.z.enum(["maps", "organic", "ai_overview", "paa"]);
     RankTrackerBlueprintInputSchema = {
       projectName: import_zod31.z.string().min(1).optional().describe("Optional name for the rank tracker project, client, or campaign."),
-      targetDomain: import_zod31.z.string().min(1).optional().describe("Primary domain to track in organic results, AI Overview citations, and PAA sources, e.g. example.com."),
-      targetBusinessName: import_zod31.z.string().min(1).optional().describe("Primary Google Business Profile or brand/business name to match in Maps results. Required for reliable Maps rank tracking."),
-      trackingModes: import_zod31.z.array(RankTrackerModeSchema).min(1).max(4).default(["maps", "organic", "ai_overview", "paa"]).describe("Rank tracker surfaces to build. maps uses directory_workflow/maps_search. organic uses search_serp. ai_overview uses search_serp/harvest_paa. paa uses harvest_paa source presence."),
-      keywords: import_zod31.z.array(import_zod31.z.string().min(1)).max(200).default([]).describe("Seed keywords or service queries to track. Leave empty when the downstream AI should create the keyword table from user input."),
-      locations: import_zod31.z.array(import_zod31.z.string().min(1)).max(100).default([]).describe("Markets, cities, ZIPs, or service areas to track. Use city/state strings like Denver, CO for localized SERP and Maps checks."),
+      targetDomain: import_zod31.z.string().min(1).optional().describe("Primary domain to track in organic results, AI Overview citations, and PAA sources."),
+      targetBusinessName: import_zod31.z.string().min(1).optional().describe("Primary Google Business Profile/brand name to match in Maps results. Required for Maps tracking."),
+      trackingModes: import_zod31.z.array(RankTrackerModeSchema).min(1).max(4).default(["maps", "organic", "ai_overview", "paa"]).describe("Rank tracker surfaces to build: maps, organic, ai_overview, paa."),
+      keywords: import_zod31.z.array(import_zod31.z.string().min(1)).max(200).default([]).describe("Seed keywords or service queries to track. Leave empty to derive from user input downstream."),
+      locations: import_zod31.z.array(import_zod31.z.string().min(1)).max(100).default([]).describe('Markets, cities, ZIPs, or service areas to track, e.g. "Denver, CO".'),
       competitors: import_zod31.z.array(import_zod31.z.string().min(1)).max(100).default([]).describe("Optional competitor domains or business names to persist as comparison targets."),
-      database: import_zod31.z.enum(["postgres", "neon", "supabase", "sqlite", "mysql"]).default("postgres").describe("Database family the downstream AI should target when generating migrations."),
-      scheduleCadence: import_zod31.z.enum(["daily", "weekly", "monthly", "custom"]).default("weekly").describe("Default recurring rank check cadence for the generated cron/heartbeat plan."),
+      database: import_zod31.z.enum(["postgres", "neon", "supabase", "sqlite", "mysql"]).default("postgres").describe("Database family to target when generating migrations."),
+      scheduleCadence: import_zod31.z.enum(["daily", "weekly", "monthly", "custom"]).default("weekly").describe("Default recurring rank check cadence."),
       customCron: import_zod31.z.string().min(1).optional().describe("Cron expression to use when scheduleCadence is custom."),
-      timezone: import_zod31.z.string().min(1).default("UTC").describe("IANA timezone for scheduled rank checks, e.g. America/Denver."),
-      includeCron: import_zod31.z.boolean().default(true).describe("Include a cron or heartbeat worker plan. Keep true for production rank trackers."),
-      includeDashboard: import_zod31.z.boolean().default(true).describe("Include dashboard/reporting requirements in the generated prompt."),
-      includeAlerts: import_zod31.z.boolean().default(true).describe("Include alert rules for rank movement and SERP feature gains/losses."),
-      notes: import_zod31.z.string().max(4e3).optional().describe("Extra product, client, stack, or hosting requirements to include in the implementation prompt.")
+      timezone: import_zod31.z.string().min(1).default("UTC").describe("IANA timezone for scheduled rank checks."),
+      includeCron: import_zod31.z.boolean().default(true).describe("Include a cron/heartbeat worker plan."),
+      includeDashboard: import_zod31.z.boolean().default(true).describe("Include dashboard/reporting requirements."),
+      includeAlerts: import_zod31.z.boolean().default(true).describe("Include alert rules for rank movement and SERP feature changes."),
+      notes: import_zod31.z.string().max(4e3).optional().describe("Extra product, client, stack, or hosting requirements.")
     };
     NullableString = import_zod31.z.string().nullable();
     MapsSearchAttemptOutput = import_zod31.z.object({
@@ -26200,7 +26399,9 @@ var init_mcp_tool_schemas = __esm({
         attempts: import_zod31.z.array(MapsSearchAttemptOutput),
         results: import_zod31.z.array(DirectoryMapsBusinessOutput)
       })),
-      durationMs: import_zod31.z.number().int().min(0)
+      durationMs: import_zod31.z.number().int().min(0),
+      truncatedCount: import_zod31.z.number().int().min(0).optional(),
+      artifact: ArtifactPointerOutputSchema.optional()
     };
     RankTrackerToolPlanOutput = import_zod31.z.object({
       tool: import_zod31.z.string(),
@@ -26253,7 +26454,7 @@ var init_mcp_tool_schemas = __esm({
         kgId: import_zod31.z.string().nullable(),
         cid: import_zod31.z.string().nullable(),
         gcid: import_zod31.z.string().nullable()
-      })).describe("Each entity actually named on the page, with whichever of its kgId/cid/gcid were found \u2014 the linked view. kgIds/cids/gcids below are the same IDs as flat deduplicated lists, without the name link, kept for backward compatibility."),
+      })).describe("Entities named on the page with their kgId/cid/gcid. Flat lists below are the same IDs deduplicated, kept for backward compatibility."),
       kgIds: import_zod31.z.array(import_zod31.z.string()),
       cids: import_zod31.z.array(import_zod31.z.string()),
       gcids: import_zod31.z.array(import_zod31.z.string())
@@ -26320,7 +26521,9 @@ var init_mcp_tool_schemas = __esm({
         title: NullableString,
         schemaTypes: import_zod31.z.array(import_zod31.z.string())
       })),
-      durationMs: import_zod31.z.number().min(0)
+      durationMs: import_zod31.z.number().min(0),
+      truncatedCount: import_zod31.z.number().int().min(0).optional(),
+      artifact: ArtifactPointerOutputSchema.optional()
     };
     AuditSiteOutputSchema = {
       url: import_zod31.z.string(),
@@ -26340,7 +26543,8 @@ var init_mcp_tool_schemas = __esm({
         orphans: import_zod31.z.number().int().min(0),
         brokenInternal: import_zod31.z.number().int().min(0),
         externalDomains: import_zod31.z.number().int().min(0)
-      })
+      }),
+      artifact: ArtifactPointerOutputSchema.optional()
     };
     MapsPlaceIntelOutputSchema = {
       name: import_zod31.z.string(),
@@ -26412,7 +26616,9 @@ var init_mcp_tool_schemas = __esm({
         url: import_zod31.z.string(),
         status: import_zod31.z.number().int().nullable()
       })),
-      durationMs: import_zod31.z.number().min(0)
+      durationMs: import_zod31.z.number().min(0),
+      truncatedCount: import_zod31.z.number().int().min(0).optional(),
+      artifact: ArtifactPointerOutputSchema.optional()
     };
     YoutubeHarvestOutputSchema = {
       mode: import_zod31.z.string(),
@@ -26720,7 +26926,7 @@ var init_mcp_tool_schemas = __esm({
       "ai-overview-language"
     ]);
     WorkflowListInputSchema = {
-      includeRecipes: import_zod31.z.boolean().default(true).describe("Include high-level AI-facing recipes such as market analysis, ICP research, forum/review research, brand design briefings, CRO audits, positioning briefs, content gaps, and AI search visibility audits.")
+      includeRecipes: import_zod31.z.boolean().default(true).describe("Include high-level AI-facing recipes (market analysis, ICP research, CRO audits, content gaps, etc).")
     };
     WorkflowSuggestInputSchema = {
       goal: import_zod31.z.string().min(1).describe('The user goal or job to route, e.g. "market analysis for roofers in Tennessee", "ICP research for med spas", "CRO audit for this URL", or "brand design briefing".'),
@@ -26733,12 +26939,12 @@ var init_mcp_tool_schemas = __esm({
       maxSuggestions: import_zod31.z.number().int().min(1).max(8).default(3).describe("Number of matching workflow recipes to return.")
     };
     WorkflowRunInputSchema = {
-      workflowId: WorkflowIdSchema2.describe("Workflow to run: directory, get-leads, agent-packet, local-competitive-audit, map-comparison, serp-comparison, paa-expansion-brief, ai-overview-language. Use only these values; call workflow_list or workflow_suggest first when unsure."),
-      input: import_zod31.z.record(import_zod31.z.unknown()).default({}).describe("Workflow-specific input object. Examples: get-leads uses {query, location, maxResults?, enrichWebsites?, hydrateReviewCounts?}; agent-packet uses {keyword, domain?, location?, maxQuestions?}; local-competitive-audit uses {query, state, minPopulation?, maxCities?, maxResultsPerCity?, hydrateTop?, maxReviews?}; serp-comparison uses {keyword, domain?, url?, location?, extractTop?}."),
+      workflowId: WorkflowIdSchema2.describe("Workflow to run. Call workflow_list or workflow_suggest first when unsure."),
+      input: import_zod31.z.record(import_zod31.z.unknown()).default({}).describe("Workflow-specific input object; shape depends on workflowId. Call workflow_list or workflow_suggest to see required fields."),
       webhookUrl: import_zod31.z.string().url().optional().describe("Optional HTTPS webhook to receive the completed hosted workflow run event.")
     };
     WorkflowStepInputSchema = {
-      runId: import_zod31.z.string().min(1).describe("Workflow run id returned by workflow_run, workflow_step, or workflow_status. Use only a returned runId; do not construct one yourself. Advances the run by exactly one step (one logical leg, e.g. one live harvest).")
+      runId: import_zod31.z.string().min(1).describe("Workflow run id returned by workflow_run/workflow_step/workflow_status. Advances the run by exactly one step.")
     };
     WorkflowStatusInputSchema = {
       runId: import_zod31.z.string().min(1).describe("Workflow run id returned by workflow_run, workflow_step, or workflow_status. Use only a returned runId; do not construct one yourself.")
@@ -26746,7 +26952,7 @@ var init_mcp_tool_schemas = __esm({
     WorkflowArtifactReadInputSchema = {
       runId: import_zod31.z.string().min(1).describe("Workflow run id returned by workflow_run, workflow_step, or workflow_status. Use only a returned runId; do not construct one yourself."),
       artifactId: import_zod31.z.string().min(1).describe("Artifact id from the run artifact list returned by workflow_run, workflow_step, or workflow_status. Use only a returned artifactId; do not construct one yourself."),
-      maxBytes: import_zod31.z.number().int().min(1e3).max(1e6).default(2e5).describe("Maximum bytes of artifact text to return inline. Use lower values for large CSV/JSON artifacts; call again with the downloadUrl if needed outside MCP.")
+      maxBytes: import_zod31.z.number().int().min(1e3).max(1e6).default(2e5).describe("Maximum bytes of artifact text to return inline.")
     };
     WorkflowRecipeOutput = import_zod31.z.object({
       id: import_zod31.z.string(),
@@ -26805,28 +27011,28 @@ var init_mcp_tool_schemas = __esm({
       text: import_zod31.z.string()
     };
     SearchSerpInputSchema = {
-      query: import_zod31.z.string().min(1).describe('The search query. For localized results, KEEP the place in the query text \u2014 "best dentist in Brooklyn NY" stays query="best dentist Brooklyn NY" (and also set location="Brooklyn, NY"). City-in-query is what localizes results reliably; do not strip it out.'),
-      location: import_zod31.z.string().optional().describe("City, region, or country for geo signals (uule + location evidence). Set it alongside a city-in-query wording; on its own it does NOT reliably localize results."),
+      query: import_zod31.z.string().min(1).describe('The search query. KEEP the place in the query text for localized results (e.g. "best dentist Brooklyn NY") and also set location \u2014 city-in-query is what localizes reliably.'),
+      location: import_zod31.z.string().optional().describe("City, region, or country for geo signals. Set alongside city-in-query wording; alone it does NOT reliably localize."),
       gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from location or user language."),
       hl: import_zod31.z.string().default("en").describe("Google interface/content language inferred from user request."),
-      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use desktop by default; use mobile only when the user asks for mobile rankings."),
-      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress \u2014 reliable). Do NOT set "location" just because the user named a city; localized results come from city-in-query wording. "location" forces a residential geo-IP for rank-tracking fidelity only, is frequently CAPTCHA-blocked, and should be used only when the user explicitly demands as-seen-from-the-city results and accepts failures.'),
-      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location" (see its warning); ignored otherwise.'),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/session/location diagnostics in the response. Use true when debugging localization, CAPTCHA, or proxy behavior."),
-      pages: import_zod31.z.number().int().min(1).max(2).default(1).describe("Number of result pages to fetch (1\u20132)")
+      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use mobile only for mobile rankings."),
+      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress). Do NOT set "location" just because a city was named \u2014 that comes from city-in-query wording. "location" forces residential geo-IP for rank-tracking fidelity, is frequently CAPTCHA-blocked, and accepts failures.'),
+      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location".'),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized diagnostics for debugging localization, CAPTCHA, or proxy behavior."),
+      pages: import_zod31.z.number().int().min(1).max(2).default(1).describe("Number of result pages to fetch (1\u20132).")
     };
     CaptureSerpSnapshotInputSchema = {
-      query: import_zod31.z.string().min(1).describe('Search query to capture as a structured SERP Intelligence snapshot. For localized captures, KEEP the place in the query text (e.g. "botox clinic austin tx") and also set location; city-in-query is what localizes results reliably.'),
-      location: import_zod31.z.string().optional().describe("City, region, country, or service area used for localized Google results. MCP Scraper records location evidence; UULE alone is not proof of localization."),
-      gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from the requested market, e.g. us, gb, ca, au."),
+      query: import_zod31.z.string().min(1).describe('Search query to capture. KEEP the place in the query text for localized captures (e.g. "botox clinic austin tx") and also set location.'),
+      location: import_zod31.z.string().optional().describe("City, region, country, or service area for localized Google results."),
+      gl: import_zod31.z.string().length(2).default("us").describe("Google country code inferred from the requested market."),
       hl: import_zod31.z.string().default("en").describe("Google interface/content language inferred from the user request."),
-      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use mobile only when the user asks for mobile rankings or mobile SERP evidence."),
-      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress \u2014 reliable). Do NOT set "location" just because a city was named; localized captures come from city-in-query wording. "location" forces a residential geo-IP (rank-tracking fidelity only), is frequently CAPTCHA-blocked, and should be used only when the user explicitly needs as-seen-from-the-city evidence and accepts failures.'),
-      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location" (see its warning); ignored otherwise.'),
-      pages: import_zod31.z.number().int().min(1).max(2).default(1).describe("Number of Google result pages to capture. Use 1 normally and 2 only when the user needs deeper ranking evidence."),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser, proxy, and location diagnostics. Use true when debugging localization, CAPTCHA, proxy selection, or capture reliability."),
-      includePageSnapshots: import_zod31.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs through the same product capture path."),
-      pageSnapshotLimit: import_zod31.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots to capture when includePageSnapshots is true. Use 0 when only SERP evidence is needed.")
+      device: import_zod31.z.enum(["desktop", "mobile"]).default("desktop").describe("SERP device context. Use mobile only for mobile rankings/evidence."),
+      proxyMode: import_zod31.z.enum(["location", "configured", "none"]).default(DEFAULT_PROXY_MODE).describe('Leave unset (clean egress). Do NOT set "location" just because a city was named \u2014 that comes from city-in-query wording. "location" forces residential geo-IP, is frequently CAPTCHA-blocked, and accepts failures.'),
+      proxyZip: import_zod31.z.string().regex(/^\d{5}$/).optional().describe('US ZIP for residential geo-IP targeting. Only meaningful with proxyMode "location".'),
+      pages: import_zod31.z.number().int().min(1).max(2).default(1).describe("Google result pages to capture. Use 2 only for deeper ranking evidence."),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy/location diagnostics."),
+      includePageSnapshots: import_zod31.z.boolean().default(false).describe("Also capture ranking-page snapshots for selected SERP URLs."),
+      pageSnapshotLimit: import_zod31.z.number().int().min(0).max(10).default(0).describe("Maximum ranking-page snapshots when includePageSnapshots is true.")
     };
     ScreenshotInputSchema = {
       url: import_zod31.z.string().url().describe("URL to capture as a full-page screenshot. Use http or https. Pass allowLocal: true to capture localhost or private-network URLs during development."),
@@ -26834,15 +27040,26 @@ var init_mcp_tool_schemas = __esm({
       allowLocal: import_zod31.z.boolean().default(false).describe("Allow localhost and private-network URLs (127.x, 192.168.x, 10.x, etc.). For local development only \u2014 not for production use.")
     };
     CaptureSerpPageSnapshotsInputSchema = {
-      urls: import_zod31.z.array(import_zod31.z.string().url()).min(1).max(25).describe("Public HTTP/HTTPS URLs to capture as SERP Intelligence page snapshots. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
+      urls: import_zod31.z.array(import_zod31.z.string().url()).min(1).max(25).describe("Public HTTP/HTTPS URLs to capture. Do not pass localhost, private IPs, file URLs, or internal admin URLs."),
       targets: import_zod31.z.array(import_zod31.z.object({
         url: import_zod31.z.string().url().describe("Public HTTP/HTTPS URL to capture."),
-        sourceKind: import_zod31.z.enum(["organic", "ai_citation", "local_pack_website", "configured_target", "site_subject"]).default("configured_target").describe("Why this page is being captured for SERP Intelligence evidence."),
+        sourceKind: import_zod31.z.enum(["organic", "ai_citation", "local_pack_website", "configured_target", "site_subject"]).default("configured_target").describe("Why this page is being captured."),
         sourcePosition: import_zod31.z.number().int().min(1).optional().describe("Ranking or citation position when the page came from SERP evidence.")
-      }).strict()).min(1).max(25).optional().describe("Structured page snapshot targets. Use this instead of urls when source kind or position should be preserved."),
-      maxConcurrency: import_zod31.z.number().int().min(1).max(5).default(2).describe("Parallel page captures. Use 2 normally; higher values can increase proxy/browser pressure."),
-      timeoutMs: import_zod31.z.number().int().min(1e3).max(6e4).default(15e3).describe("Per-page capture timeout in milliseconds. Increase for slow pages; timeout artifacts are returned as structured capture failures."),
-      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics for page snapshot debugging. Use true for capture, network, or proxy troubleshooting.")
+      }).strict()).min(1).max(25).optional().describe("Structured targets. Use instead of urls when source kind or position should be preserved."),
+      maxConcurrency: import_zod31.z.number().int().min(1).max(5).default(2).describe("Parallel page captures."),
+      timeoutMs: import_zod31.z.number().int().min(1e3).max(6e4).default(15e3).describe("Per-page capture timeout in milliseconds; timeouts return as structured capture failures."),
+      debug: import_zod31.z.boolean().default(false).describe("Include sanitized browser/proxy diagnostics.")
+    };
+    ReportArtifactReadInputSchema = {
+      artifactId: import_zod31.z.string().min(1).describe("Artifact id returned inline by a tool whose result was too large to inline. Use only a returned artifactId; do not construct one yourself."),
+      offset: import_zod31.z.number().int().min(0).default(0).describe("Byte offset to start reading from. Pass the previous call's nextOffset to continue."),
+      maxBytes: import_zod31.z.number().int().min(1e3).max(1e5).default(2e4).describe("Maximum bytes of artifact text to return in this window.")
+    };
+    ReportArtifactReadOutputSchema = {
+      artifactId: import_zod31.z.string(),
+      text: import_zod31.z.string(),
+      totalBytes: import_zod31.z.number().int().min(0),
+      nextOffset: import_zod31.z.number().int().min(0).nullable()
     };
   }
 });
@@ -27177,6 +27394,9 @@ var init_rank_tracker_blueprint = __esm({
 });
 
 // src/mcp/paa-mcp-server.ts
+function hashOwnerId(callerKey) {
+  return (0, import_node_crypto10.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
+}
 function liveWebToolAnnotations(title) {
   return {
     title,
@@ -27189,16 +27409,16 @@ function liveWebToolAnnotations(title) {
 function registerSerpIntelligenceCaptureTools(server, executor) {
   server.registerTool("capture_serp_snapshot", {
     title: "SERP Intelligence Snapshot",
-    description: "Capture a structured SERP Intelligence Google snapshot through POST /serp-intelligence/capture, the same product capture path used by Phoenix. Split query from location and infer gl/hl. Routing is automatic \u2014 leave proxyMode unset. Set debug true when investigating location evidence, proxy behavior, CAPTCHA, or capture reliability.",
+    description: "Capture a structured SERP Intelligence snapshot of a Google query \u2014 the persistent evidence format used by rank-tracking and comparison pipelines. Split query from location; leave proxyMode unset.",
     inputSchema: CaptureSerpSnapshotInputSchema,
-    outputSchema: CaptureSerpSnapshotOutputSchema,
+    outputSchema: recordOutputSchema("capture_serp_snapshot", CaptureSerpSnapshotOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Snapshot")
   }, async (input) => formatCaptureSerpSnapshot(await executor.captureSerpSnapshot(input), input));
   server.registerTool("capture_serp_page_snapshots", {
     title: "SERP Intelligence Page Snapshots",
-    description: "Capture public ranking-page evidence through POST /serp-intelligence/page-snapshots, the same product page snapshot path used by Phoenix. Provide urls for simple captures or targets when preserving organic, AI citation, local-pack, configured target, or site-subject source metadata. Private IPs, localhost, file URLs, and internal URLs are rejected by the service. Use timeoutMs for slow pages and debug true for sanitized proxy/browser diagnostics.",
+    description: "Capture public ranking pages as SERP Intelligence page snapshots \u2014 persistent page evidence linked to a captured SERP. Provide urls, or targets to preserve source metadata. Private IPs, localhost, file, and internal URLs are rejected.",
     inputSchema: CaptureSerpPageSnapshotsInputSchema,
-    outputSchema: CaptureSerpPageSnapshotsOutputSchema,
+    outputSchema: recordOutputSchema("capture_serp_page_snapshots", CaptureSerpPageSnapshotsOutputSchema),
     annotations: liveWebToolAnnotations("SERP Intelligence Page Snapshots")
   }, async (input) => formatCaptureSerpPageSnapshots(await executor.captureSerpPageSnapshots(input), input));
 }
@@ -27246,230 +27466,251 @@ function registerSavedReportResources(server) {
   );
 }
 function buildPaaExtractorMcpServer(executor, options = {}) {
-  const server = new import_mcp.McpServer({ name: "mcp-scraper", version: PACKAGE_VERSION }, { instructions: SERVER_INSTRUCTIONS });
+  const server = new import_mcp.McpServer({ name: "mcp-scraper", version: PACKAGE_VERSION }, { instructions: serverInstructions(options.savesReportsLocally !== false) });
   registerPaaExtractorMcpTools(server, executor, options);
   return server;
 }
 function registerPaaExtractorMcpTools(server, executor, options = {}) {
   const savesReports = options.savesReportsLocally !== false;
-  const reportNote = savesReports ? " Saves a full Markdown report to disk." : " Reports are returned inline; no files are saved on this hosted endpoint.";
-  const withReportNote = (description) => `${description}${reportNote}`;
+  const fileBehavior = (local, hosted) => savesReports ? local : hosted;
+  const ownerId = options.ownerId ?? "local";
+  const ctx = { hosted: !savesReports, ownerId };
   if (savesReports) registerSavedReportResources(server);
   server.registerTool("harvest_paa", {
     title: "Google PAA + SERP Harvest",
-    description: withReportNote('Best default tool for Google search research. Extracts People Also Ask questions plus answers/source URLs, organic SERP, local pack when present, entity IDs (CID/GCID/KG MID), and AI Overview. Infer the user language: split topic from location (e.g. "best hvac company in Denver CO" => query "best hvac company", location "Denver, CO", gl "us", hl "en"). Routing is automatic \u2014 leave proxyMode unset. If a deep harvest exceeds the time budget it returns the questions gathered so far (partial), billed per returned question. Use maxQuestions 30 normally, 100-200 for "full", "deep", "all", or comprehensive research. Deep harvests above 100 questions can run for several minutes with no interim progress \u2014 warn the user before starting one and keep maxQuestions at or below 100 unless they explicitly want a deep harvest. Credits are charged by extracted question; unused request hold is refunded.'),
+    description: "Best default tool for Google search research: People Also Ask questions with answers/sources, organic SERP, local pack, entity IDs, and AI Overview. Split topic from location; leave proxyMode unset. Warn the user before maxQuestions above 100 \u2014 deep harvests can run several minutes with no interim progress, billed per extracted question.",
     inputSchema: HarvestPaaInputSchema,
-    outputSchema: HarvestPaaOutputSchema,
+    outputSchema: recordOutputSchema("harvest_paa", HarvestPaaOutputSchema),
     annotations: liveWebToolAnnotations("Google PAA + SERP Harvest")
   }, async (input) => formatHarvestPaa(await executor.harvestPaa(input), input));
   server.registerTool("search_serp", {
     title: "Google SERP Lookup",
-    description: withReportNote("Fast Google SERP lookup without PAA expansion. Use when the user asks for rankings, organic results, local pack, quick SERP, or positions. Split topic from location and infer gl/hl from the user request. Routing is automatic \u2014 leave proxyMode unset; set location only to force local-pack targeting."),
+    description: "Fast Google SERP lookup without PAA expansion \u2014 rankings, organic results, local pack, positions. Split topic from location; leave proxyMode unset.",
     inputSchema: SearchSerpInputSchema,
-    outputSchema: SearchSerpOutputSchema,
+    outputSchema: recordOutputSchema("search_serp", SearchSerpOutputSchema),
     annotations: liveWebToolAnnotations("Google SERP Lookup")
   }, async (input) => formatSearchSerp(await executor.searchSerp(input), input));
   server.registerTool("extract_url", {
     title: "Single URL Extract",
-    description: withReportNote("Extract structured data from one public URL when the user provides one page, asks to inspect/scrape a page, or needs page content, schema, headings, metadata, screenshots, branding, or media assets. Returns structured page fields plus artifact handles for saved reports/screenshots/media when requested. Set depositToVault:true to also save the full page into the user's MCP Memory vault server-side (the full body is NOT returned to chat). Use map_site_urls before extracting a site inventory; use extract_site for multi-page crawling."),
+    description: "Extract structured data from one public URL: content, schema, headings, metadata, screenshots, branding, or media assets. Set depositToVault:true to save the full page into the user's MCP Memory vault server-side (not returned to chat).",
     inputSchema: ExtractUrlInputSchema,
-    outputSchema: ExtractUrlOutputSchema,
+    outputSchema: recordOutputSchema("extract_url", ExtractUrlOutputSchema),
     annotations: liveWebToolAnnotations("Single URL Extract")
   }, async (input) => formatExtractUrl(await executor.extractUrl(input), input));
   server.registerTool("map_site_urls", {
     title: "Site URL Map",
-    description: withReportNote("Map/crawl a public website when the user asks for a sitemap, URL inventory, broken-link scan, redirect scan, or crawl planning. Returns internal URLs with HTTP status and truncation metadata. Supports up to maxUrls=10000; maps over 500 URLs write the complete inventory to a local CSV file and return a summary plus the file path instead of the full list inline. Use this before extract_site when choosing pages for an audit; use extract_url for one known page."),
+    description: `Map/crawl a public website for a sitemap, URL inventory, or broken-link scan. Returns internal URLs with HTTP status; ${fileBehavior("maps over 500 URLs are written to a local CSV file instead of inlined.", "large results are stored as a retrievable artifact \u2014 you get an inline summary plus an artifactId for report_artifact_read.")}`,
     inputSchema: MapSiteUrlsInputSchema,
-    outputSchema: MapSiteUrlsOutputSchema,
+    outputSchema: recordOutputSchema("map_site_urls", MapSiteUrlsOutputSchema),
     annotations: liveWebToolAnnotations("Site URL Map")
-  }, async (input) => formatMapSiteUrls(await executor.mapSiteUrls(input), input));
+  }, async (input) => formatMapSiteUrls(await executor.mapSiteUrls(input), input, ctx));
   server.registerTool("extract_site", {
     title: "Multi-Page Site Content Crawl",
-    description: withReportNote("Crawl a public website and return the page CONTENT across multiple pages (map + scrape). Returns per-page titles and Markdown content. Supports up to maxPages=10000; bulk crawls over 25 pages switch to folder mode: each page is saved as its own Markdown file in a local folder and the response returns a summary plus the folder path instead of inlining all content. This tool returns content only \u2014 for a technical SEO audit (issues, internal link graph, indexability, heading breakdown, image sizes/formats) use audit_site. Use map_site_urls first when URL selection matters; use extract_url for one page."),
+    description: `Crawl a public website and return page CONTENT (Markdown) across multiple pages. ${fileBehavior("Bulk crawls over 25 pages are saved as per-page Markdown files in a local folder instead of inlined.", "Large results are stored as a retrievable artifact \u2014 you get an inline summary plus an artifactId for report_artifact_read.")} Content only \u2014 for a technical SEO audit use audit_site instead.`,
     inputSchema: ExtractSiteInputSchema,
-    outputSchema: ExtractSiteOutputSchema,
+    outputSchema: recordOutputSchema("extract_site", ExtractSiteOutputSchema),
     annotations: liveWebToolAnnotations("Multi-Page Site Content Crawl")
-  }, async (input) => formatExtractSite(await executor.extractSite(input), input));
+  }, async (input) => formatExtractSite(await executor.extractSite(input), input, ctx));
   server.registerTool("audit_site", {
     title: "Technical SEO Audit",
-    description: withReportNote("Run a full technical SEO audit (Screaming-Frog-style) on a public website. Crawls up to maxPages and produces a complete on-page + crawl analysis: per-page title/meta lengths, heading breakdown, indexability and canonical status, schema, an internal link graph (inlinks/orphans/crawl-depth), a link analysis (top internal pages by inlinks, top external domains by link count, broken/orphan counts), an issues report, and an image audit (byte size, format, over-100KB and legacy-format flags). Writes everything to a local folder (report.md, issues.json, pages.jsonl, links.jsonl, link-metrics.jsonl, link-report.md, links-summary.json, external-domains.json, images.jsonl) plus per-page content, and returns a headline summary plus the folder path. Use this when the user wants an audit or analysis; use extract_site when they just want page content."),
+    description: `Run a full technical SEO audit (Screaming-Frog-style) on a public website: on-page issues, internal link graph, indexability, heading/image analysis. ${fileBehavior("Writes a folder of analysis files plus per-page content, and returns a summary plus the folder path.", "Large results are stored as a retrievable artifact \u2014 you get an inline summary plus an artifactId for report_artifact_read.")} Use extract_site instead for plain page content.`,
     inputSchema: AuditSiteInputSchema,
-    outputSchema: AuditSiteOutputSchema,
+    outputSchema: recordOutputSchema("audit_site", AuditSiteOutputSchema),
     annotations: liveWebToolAnnotations("Technical SEO Audit")
-  }, async (input) => formatAuditSite(await executor.auditSite(input), input));
+  }, async (input) => formatAuditSite(await executor.auditSite(input), input, ctx));
   server.registerTool("youtube_harvest", {
     title: "YouTube Video Harvest",
-    description: withReportNote('Harvest YouTube video metadata when the user wants to find videos by topic, inspect a channel library, compare video angles, or get videoIds for later transcription. Use mode "search" for keyword/topic requests and mode "channel" for @handles, channel IDs, or channel URLs. Returns titles, views, durations, URLs, and videoIds for follow-up transcription. Use youtube_transcribe after selecting one video.'),
+    description: 'Harvest YouTube video metadata by topic search or channel library. Use mode "search" for keyword/topic requests, mode "channel" for @handles/channel IDs/URLs. Returns titles, views, durations, and videoIds.',
     inputSchema: YoutubeHarvestInputSchema,
-    outputSchema: YoutubeHarvestOutputSchema,
+    outputSchema: recordOutputSchema("youtube_harvest", YoutubeHarvestOutputSchema),
     annotations: liveWebToolAnnotations("YouTube Video Harvest")
   }, async (input) => formatYoutubeHarvest(await executor.youtubeHarvest(input), input));
   server.registerTool("youtube_transcribe", {
     title: "YouTube Transcription",
-    description: withReportNote("Fetch and transcribe captions from a YouTube video. Use this when the user asks what was said in a YouTube video, wants claims/offers/lessons extracted from a video, or provides a YouTube URL for transcript work. Returns full transcript, timestamped chunks, word count, and resolvedInputs. Pass videoId from youtube_harvest results, or pass url when the user pasted a YouTube URL. Use youtube_harvest first when you need to discover videos by topic/channel."),
+    description: "Fetch and transcribe captions from a YouTube video. Pass videoId from youtube_harvest, or a url the user pasted. Returns full transcript, timestamped chunks, and word count.",
     inputSchema: YoutubeTranscribeInputSchema,
-    outputSchema: YoutubeTranscribeOutputSchema,
+    outputSchema: recordOutputSchema("youtube_transcribe", YoutubeTranscribeOutputSchema),
     annotations: liveWebToolAnnotations("YouTube Transcription")
   }, async (input) => formatYoutubeTranscribe(await executor.youtubeTranscribe(input), input));
   server.registerTool("facebook_page_intel", {
     title: "Facebook Advertiser Ad Intel",
-    description: withReportNote("Harvest ads from a Facebook advertiser when the user wants current ad copy, creative angles, CTAs, video URLs, or competitive ad intelligence for one brand/page. Returns ad copy, headlines, CTAs, creative type, status, landing URLs, and direct ad video URLs ready for facebook_ad_transcribe. Accepts pageId, libraryId, or a brand/advertiser name as query. Use facebook_ad_search first when the advertiser handle is unknown. For normal public Facebook reels/posts/watch/share URLs, use facebook_video_transcribe instead."),
+    description: "Harvest ads from a Facebook advertiser: copy, creative angles, CTAs, and direct video URLs ready for facebook_ad_transcribe. Accepts pageId, libraryId, or a brand/advertiser name.",
     inputSchema: FacebookPageIntelInputSchema,
-    outputSchema: FacebookPageIntelOutputSchema,
+    outputSchema: recordOutputSchema("facebook_page_intel", FacebookPageIntelOutputSchema),
     annotations: liveWebToolAnnotations("Facebook Advertiser Ad Intel")
   }, async (input) => formatFacebookPageIntel(await executor.facebookPageIntel(input), input));
   server.registerTool("facebook_ad_search", {
     title: "Facebook Ad Library Search",
-    description: withReportNote("Search Facebook Ad Library when the user wants to find advertisers by brand, competitor, niche, or keyword. Returns advertisers with ad counts and library IDs. Use this to discover competitor/page handles, then pass libraryId or pageId to facebook_page_intel for ad details."),
+    description: "Search Facebook Ad Library to find advertisers by brand, competitor, niche, or keyword. Returns advertisers with ad counts and library IDs.",
     inputSchema: FacebookAdSearchInputSchema,
-    outputSchema: FacebookAdSearchOutputSchema,
+    outputSchema: recordOutputSchema("facebook_ad_search", FacebookAdSearchOutputSchema),
     annotations: liveWebToolAnnotations("Facebook Ad Library Search")
   }, async (input) => formatFacebookAdSearch(await executor.facebookAdSearch(input), input));
   server.registerTool("reddit_thread", {
     title: "Reddit Thread + Comments",
-    description: withReportNote("Capture a Reddit post and its comment tree from any reddit.com thread URL. Use this when the user wants Reddit comments, opinions, discussion, or audience voice from a specific thread (find threads first with search_serp, which surfaces reddit.com/comments links). Returns the post title, author, score, body, and a list of comments with author, score, nesting depth, and text. Handles Reddit's bot protection automatically (fetches via old.reddit through a residential proxy with retries); pass maxComments to cap the list."),
+    description: "Capture a Reddit post and its comment tree from a reddit.com thread URL \u2014 comments, opinions, audience voice. Handles Reddit's bot protection automatically; pass maxComments to cap the list.",
     inputSchema: RedditThreadInputSchema,
-    outputSchema: RedditThreadOutputSchema,
+    outputSchema: recordOutputSchema("reddit_thread", RedditThreadOutputSchema),
     annotations: liveWebToolAnnotations("Reddit Thread + Comments")
   }, async (input) => formatRedditThread(await executor.redditThread(input), input));
   server.registerTool("video_frame_analysis", {
     title: "Video Breakdown (frame-by-frame + transcript)",
-    description: `Produce a deep, structured breakdown of a video: what happens on screen, what is said, how it is paced, and how to make one like it. Use this when the user wants to analyze, break down, study, reverse-engineer, or "figure out how they made" a video (an ad, a YouTube video, a reel, a competitor's content). It samples up to 120 frames spread across the whole video (up to 30 minutes), runs vision AI on every frame, transcribes the audio, and returns a report with: Summary, Pacing & Energy, Words-per-Minute & delivery, Topic Outline, Key Points, Hook Analysis, Visual Style, and a step-by-step "How to Replicate This Video" recipe \u2014 all quality-checked. Pass a DIRECT video file URL (.mp4/.webm/.mov); for a YouTube/Facebook/Instagram link, resolve it to a direct media URL first (e.g. facebook_page_intel returns a videoUrl). This runs asynchronously and costs a flat $1 (refunded if it fails): it returns a runId immediately \u2014 then call video_frame_analysis_status with that runId every few seconds until status is "done" to get the finished report.`,
+    description: "Produce a deep frame-by-frame + transcript breakdown of a video \u2014 pacing, hook, visual style, and how to replicate it. Pass a DIRECT video file URL (.mp4/.webm/.mov), not a page URL. Runs asynchronously and costs a flat $1 (refunded on failure): returns a runId immediately; poll video_frame_analysis_status until done.",
     inputSchema: VideoFrameAnalysisInputSchema,
-    outputSchema: VideoFrameAnalysisOutputSchema,
+    outputSchema: recordOutputSchema("video_frame_analysis", VideoFrameAnalysisOutputSchema),
     annotations: { title: "Video Breakdown", readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }
   }, async (input) => executor.videoFrameAnalysis(input));
   server.registerTool("video_frame_analysis_status", {
     title: "Video Breakdown Status",
-    description: 'Check the progress of a video breakdown started with video_frame_analysis, using the runId it returned. Poll this every few seconds. While running it reports the current phase and how many frames have been analyzed; when status is "done" it returns the full breakdown report (Markdown) and the memory vault path where it was saved. Free to call. Stop polling when status is "done" or "failed".',
+    description: 'Check progress of a video breakdown started with video_frame_analysis, using its runId. Free to call. When status is "done" it returns the full report and vault path; stop polling on "done" or "failed".',
     inputSchema: VideoFrameAnalysisStatusInputSchema,
-    outputSchema: VideoFrameAnalysisStatusOutputSchema,
+    outputSchema: recordOutputSchema("video_frame_analysis_status", VideoFrameAnalysisStatusOutputSchema),
     annotations: { title: "Video Breakdown Status", readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   }, async (input) => executor.videoFrameAnalysisStatus(input));
   server.registerTool("facebook_ad_transcribe", {
     title: "Facebook Ad Transcription",
-    description: "Transcribe audio from a Facebook ad video CDN URL. Use this when facebook_page_intel returned a direct videoUrl and the user asks what the ad says, what claims it makes, or wants ad-message extraction. Returns full transcript, timestamped chunks, word count, and resolvedInputs. Use only with the direct videoUrl value from facebook_page_intel results; do not pass public Facebook post/reel/share URLs. Use facebook_video_transcribe for organic Facebook URLs, and facebook_page_intel first when you only have a brand/page/ad library handle.",
+    description: "Transcribe audio from a Facebook ad video CDN URL returned by facebook_page_intel. Use only that direct videoUrl value \u2014 do not pass public Facebook post/reel/share URLs (use facebook_video_transcribe for those).",
     inputSchema: FacebookAdTranscribeInputSchema,
-    outputSchema: FacebookAdTranscribeOutputSchema,
+    outputSchema: recordOutputSchema("facebook_ad_transcribe", FacebookAdTranscribeOutputSchema),
     annotations: liveWebToolAnnotations("Facebook Ad Transcription")
   }, async (input) => formatFacebookAdTranscribe(await executor.facebookAdTranscribe(input), input));
   server.registerTool("google_ads_search", {
     title: "Google Ads Transparency Search",
-    description: withReportNote("Search the Google Ads Transparency Center to find advertisers running Google ads (Search, Display, YouTube) by domain or brand/advertiser name. Pass a domain like getviktor.com to see every advertiser account pointing ads at that site, or an advertiser name. Returns advertisers with their advertiser ID and an approximate ad count. Use this to discover an advertiserId, then pass it (or the domain) to google_ads_page_intel for the actual ad creatives."),
+    description: "Search the Google Ads Transparency Center to find advertisers by domain or brand name. Returns advertisers with advertiser ID and approximate ad count, to pass to google_ads_page_intel.",
     inputSchema: GoogleAdsSearchInputSchema,
-    outputSchema: GoogleAdsSearchOutputSchema,
+    outputSchema: recordOutputSchema("google_ads_search", GoogleAdsSearchOutputSchema),
     annotations: liveWebToolAnnotations("Google Ads Transparency Search")
   }, async (input) => formatGoogleAdsSearch(await executor.googleAdsSearch(input), input));
   server.registerTool("google_ads_page_intel", {
     title: "Google Ads Advertiser Intel",
-    description: withReportNote("Harvest an advertiser's ads from the Google Ads Transparency Center when the user wants a competitor's Google/YouTube ad creatives, copy angles, image URLs, or video ads. Accepts an advertiserId (from google_ads_search) or a domain directly. Returns each creative's format (text/image/video), image URLs, landing info, a detail URL, and \u2014 for video ads \u2014 the YouTube video ID and/or a direct video URL ready for transcription. Use google_ads_search first when you only have a brand name. Transcribe video ads with google_ads_transcribe (video URL) or youtube_transcribe (YouTube ID)."),
+    description: "Harvest an advertiser's ad creatives from the Google Ads Transparency Center: format, image URLs, and \u2014 for video ads \u2014 a YouTube video ID or direct video URL. Accepts advertiserId (from google_ads_search) or a domain.",
     inputSchema: GoogleAdsPageIntelInputSchema,
-    outputSchema: GoogleAdsPageIntelOutputSchema,
+    outputSchema: recordOutputSchema("google_ads_page_intel", GoogleAdsPageIntelOutputSchema),
     annotations: liveWebToolAnnotations("Google Ads Advertiser Intel")
   }, async (input) => formatGoogleAdsPageIntel(await executor.googleAdsPageIntel(input), input));
   server.registerTool("google_ads_transcribe", {
     title: "Google Ad Video Transcription",
-    description: "Transcribe audio from a Google video ad. Use this when google_ads_page_intel returned a direct videoUrl (a googlevideo.com playback URL) for a video creative and the user asks what the ad says or wants its claims/messaging. Returns full transcript, timestamped chunks, and word count. For YouTube-hosted ads, pass the returned youtubeVideoId to youtube_transcribe instead; run google_ads_page_intel first when you only have an advertiser/domain.",
+    description: "Transcribe audio from a Google video ad's direct videoUrl (a googlevideo.com playback URL) returned by google_ads_page_intel. For YouTube-hosted ads, use youtube_transcribe with the returned youtubeVideoId instead.",
     inputSchema: GoogleAdsTranscribeInputSchema,
-    outputSchema: GoogleAdsTranscribeOutputSchema,
+    outputSchema: recordOutputSchema("google_ads_transcribe", GoogleAdsTranscribeOutputSchema),
     annotations: liveWebToolAnnotations("Google Ad Video Transcription")
   }, async (input) => formatGoogleAdsTranscribe(await executor.googleAdsTranscribe(input), input));
   server.registerTool("facebook_video_transcribe", {
     title: "Facebook Organic Video Transcription",
-    description: withReportNote("Transcribe audio from an organic Facebook reel, video, watch, post, or share URL, including fb.watch links. Use this when the user pastes a normal Facebook video page URL and wants the transcript or downloadable MP4. Renders the Facebook page in a browser, selects the best matching public Facebook CDN MP4 URL from page state, then returns sourceUrl, resolved pageUrl, videoId, ownerName, selectedQuality, bitrate, videoDurationSec, extracted MP4 URL, full transcript, and timestamped chunks."),
+    description: "Transcribe audio from an organic Facebook reel/video/post/share URL (including fb.watch). Renders the page, selects the best public CDN MP4, and returns the transcript plus resolved video metadata.",
     inputSchema: FacebookVideoTranscribeInputSchema,
-    outputSchema: FacebookVideoTranscribeOutputSchema,
+    outputSchema: recordOutputSchema("facebook_video_transcribe", FacebookVideoTranscribeOutputSchema),
     annotations: liveWebToolAnnotations("Facebook Organic Video Transcription")
   }, async (input) => formatFacebookVideoTranscribe(await executor.facebookVideoTranscribe(input), input));
   server.registerTool("instagram_profile_content", {
     title: "Instagram Profile Content Discovery",
-    description: withReportNote("Discover Instagram profile grid content links for a handle or profile URL. Use this when the user wants a person or brand account content inventory before selecting posts/reels to download. Returns profile stats, collected post/reel/tv URLs, shortcodes, type counts, browser details, pagination attempts, stop reason, and limitations."),
+    description: "Discover Instagram profile grid content links (posts/reels/tv) for a handle or profile URL, for later selection with instagram_media_download. Returns profile stats and collected URLs.",
     inputSchema: InstagramProfileContentInputSchema,
-    outputSchema: InstagramProfileContentOutputSchema,
+    outputSchema: recordOutputSchema("instagram_profile_content", InstagramProfileContentOutputSchema),
     annotations: liveWebToolAnnotations("Instagram Profile Content Discovery")
   }, async (input) => formatInstagramProfileContent(await executor.instagramProfileContent(input), input));
   server.registerTool("instagram_media_download", {
     title: "Instagram Post/Reel Media Download",
-    description: withReportNote("Extract and download media from one Instagram post, reel, or tv URL. Use after instagram_profile_content or when the user gives a specific Instagram URL and wants the image, caption/text, reel audio/video tracks, optional muxed MP4, or optional transcript. Reels commonly expose separate video-only and audio-only MP4 tracks; this tool selects the best video and audio tracks and attempts muxing when ffmpeg is available."),
+    description: "Extract and download media from one Instagram post, reel, or tv URL \u2014 image, caption, video/audio tracks, optional muxed MP4, or transcript. Selects the best video/audio track pair and muxes when ffmpeg is available.",
     inputSchema: InstagramMediaDownloadInputSchema,
-    outputSchema: InstagramMediaDownloadOutputSchema,
+    outputSchema: recordOutputSchema("instagram_media_download", InstagramMediaDownloadOutputSchema),
     annotations: liveWebToolAnnotations("Instagram Post/Reel Media Download")
   }, async (input) => formatInstagramMediaDownload(await executor.instagramMediaDownload(input), input));
   server.registerTool("maps_place_intel", {
     title: "Google Maps Business Profile Details",
-    description: withReportNote('Extract Google Maps business intelligence for one known/named business: rating, review count, category, address, phone, website, hours, booking URL, review histogram, review topics, about attributes, entity IDs, and optional review cards. Do not use this for category searches, local market prospect lists, or requests for multiple GMB/GBP profiles; use maps_search first for those. Split business name from location (e.g. "Elite Roofing Denver CO" => businessName "Elite Roofing", location "Denver, CO"). Pass includeReviews true when the user asks for reviews/customer pain.'),
+    description: "Extract Google Maps business intelligence for one known/named business: rating, reviews, category, address, phone, hours, entity IDs. Not for category searches or multi-business prospect lists \u2014 use maps_search for those. Split business name from location.",
     inputSchema: MapsPlaceIntelInputSchema,
-    outputSchema: MapsPlaceIntelOutputSchema,
+    outputSchema: recordOutputSchema("maps_place_intel", MapsPlaceIntelOutputSchema),
     annotations: liveWebToolAnnotations("Google Maps Business Profile Details")
   }, async (input) => formatMapsPlaceIntel(await executor.mapsPlaceIntel(input), input));
   server.registerTool("maps_search", {
     title: "Google Maps Business Search",
-    description: withReportNote('Search Google Maps for multiple businesses/profiles by category, niche, keyword, or local market. Use this when the user asks for several Google Business Profiles, GMBs, GBPs, leads, prospects, competitors, or "more than the 3-pack." Routing is automatic and location-aware \u2014 leave proxyMode unset; pass proxyZip only to force a specific ZIP. Returns up to 50 candidates with names, place URLs, CIDs when available, ratings, review counts, profile metadata, and sanitized attempt telemetry. Default maxResults is 10; maximum is 50. Use maps_place_intel afterward only when a selected business needs full details and reviews.'),
+    description: "Search Google Maps for multiple businesses by category, niche, or local market \u2014 leads, prospects, competitors, or beyond the 3-pack. Leave proxyMode unset. Returns up to 50 candidates (default 10) with names, place URLs, CIDs, ratings.",
     inputSchema: MapsSearchInputSchema,
-    outputSchema: MapsSearchOutputSchema,
+    outputSchema: recordOutputSchema("maps_search", MapsSearchOutputSchema),
     annotations: liveWebToolAnnotations("Google Maps Business Search")
   }, async (input) => formatMapsSearch(await executor.mapsSearch(input), input));
   server.registerTool("directory_workflow", {
     title: "Directory Workflow: Markets + Maps",
-    description: withReportNote('Build directory/prospecting datasets by selecting US city markets from the free Census Population Estimates city/place dataset, optionally joining configured US ZIPS/Lead Magician ZIP groups, then running Google Maps business searches for each city in parallel. Use this when the user wants "all cities over 100k population in a state", "build a directory CSV", "find markets then get Maps data", or similar location-database + Maps workflows. Set minPopulation, state, query, maxResultsPerCity, and concurrency. Routing is automatic per city. Saved CSV rows include source_location, result_position, business_name, review_stars, review_count, category, address, phone, hours_status, website_url, directions_url, place_url, cid, cid_decimal, city population, and ZIP groups. Structured city results include sanitized attempt telemetry. Use maps_place_intel only when a selected profile needs deeper review topics, profile review count confirmation, or review cards. For local Lead Magician ZIP enrichment, set MCP_SCRAPER_USZIPS_CSV_PATH on the API server or pass usZipsCsvPath only in local/test mode.'),
+    description: `Build directory/prospecting datasets: selects US city markets from Census population data, optionally joins configured ZIP groups, then runs Google Maps business searches per city in parallel. Use for "all cities over 100k population in a state" or market+Maps workflows. ${fileBehavior("Saves a CSV of results per city.", "Large results are stored as a retrievable artifact \u2014 you get an inline summary plus an artifactId for report_artifact_read.")}`,
     inputSchema: DirectoryWorkflowInputSchema,
-    outputSchema: DirectoryWorkflowOutputSchema,
+    outputSchema: recordOutputSchema("directory_workflow", DirectoryWorkflowOutputSchema),
     annotations: liveWebToolAnnotations("Directory Workflow: Markets + Maps")
-  }, async (input) => formatDirectoryWorkflow(await executor.directoryWorkflow(input), input));
+  }, async (input) => formatDirectoryWorkflow(await executor.directoryWorkflow(input), input, ctx));
   server.registerTool("workflow_list", {
     title: "Workflow Catalog",
-    description: "List MCP Scraper higher-level workflows and AI-facing recipes. Use this when the user asks what MCP Scraper can do beyond single tools, or asks for market analysis, ICP research, forum/review acquisition, full brand design briefings, CRO audits, competitive positioning, content gap briefs, or AI search visibility audits. Returns runnable workflow ids plus recipe guidance for the best tool chain.",
+    description: "List MCP Scraper higher-level workflows and recipes \u2014 market analysis, ICP research, CRO audits, competitive positioning, content gap briefs, AI search visibility, and more. Returns runnable workflow ids plus tool-chain guidance.",
     inputSchema: WorkflowListInputSchema,
-    outputSchema: WorkflowListOutputSchema,
+    outputSchema: recordOutputSchema("workflow_list", WorkflowListOutputSchema),
     annotations: localPlanningToolAnnotations("Workflow Catalog")
   }, async (input) => formatWorkflowList(await executor.workflowList(input), input));
   server.registerTool("workflow_suggest", {
     title: "Workflow Intent Router",
-    description: 'Route a high-level business or research goal to the right MCP Scraper workflow/tool chain. Use before running work when the user says things like "do market analysis", "research my ICP", "acquire forum and review language", "build a brand design brief", "run a CRO audit", "compare competitors", "make a content gap brief", or "audit AI search visibility". This tool does not spend credits; it tells the AI exactly which workflow/tool chain to run next.',
+    description: "Route a high-level business/research goal (market analysis, ICP research, CRO audit, competitor comparison, content gap brief, AI search visibility, etc) to the right MCP Scraper workflow/tool chain. Free; tells you what to run next.",
     inputSchema: WorkflowSuggestInputSchema,
-    outputSchema: WorkflowSuggestOutputSchema,
+    outputSchema: recordOutputSchema("workflow_suggest", WorkflowSuggestOutputSchema),
     annotations: localPlanningToolAnnotations("Workflow Intent Router")
   }, async (input) => formatWorkflowSuggest(input));
   server.registerTool("workflow_run", {
     title: "Run Workflow",
-    description: withReportNote("Start a higher-level MCP Scraper workflow. Use after workflow_suggest or workflow_list. Runnable workflow ids: directory, agent-packet, local-competitive-audit, map-comparison, serp-comparison, paa-expansion-brief, ai-overview-language. This is the main MCP tool for market analysis, ICP evidence packets, local competitive audits, Maps/SERP comparisons, content gap briefs, and AI Overview language guidance. Stepwise workflows (e.g. agent-packet) run ONE leg per call and return runId, the step output, and nextStep \u2014 when nextStep is present, call workflow_step with the runId to run the next leg, and keep calling it until done is true. This keeps each call short instead of one long blocking run, so report each step result to the user as it arrives."),
+    description: "Start a higher-level MCP Scraper workflow (directory, agent-packet, local-competitive-audit, map-comparison, serp-comparison, paa-expansion-brief, ai-overview-language). Use after workflow_suggest or workflow_list. Stepwise workflows return runId + nextStep \u2014 call workflow_step with the runId until done is true.",
     inputSchema: WorkflowRunInputSchema,
-    outputSchema: WorkflowRunOutputSchema,
+    outputSchema: recordOutputSchema("workflow_run", WorkflowRunOutputSchema),
     annotations: liveWebToolAnnotations("Run Workflow")
   }, async (input) => formatWorkflowRun(await executor.workflowRun(input), input));
   server.registerTool("workflow_step", {
     title: "Advance Workflow Step",
-    description: withReportNote("Run the next leg of a stepwise MCP Scraper workflow started with workflow_run. Pass the runId. Each call executes exactly one logical step (typically one live harvest), persists that step's artifacts, and returns the step output plus nextStep. Keep calling workflow_step with the same runId until done is true, reporting each step result to the user as it lands. Use this instead of waiting on one long workflow call \u2014 it avoids client timeouts on long multi-step jobs."),
+    description: "Run the next leg of a stepwise workflow started with workflow_run. Pass the runId; each call executes one step and returns its output plus nextStep. Keep calling with the same runId until done is true.",
     inputSchema: WorkflowStepInputSchema,
-    outputSchema: WorkflowStepOutputSchema,
+    outputSchema: recordOutputSchema("workflow_step", WorkflowStepOutputSchema),
     annotations: liveWebToolAnnotations("Advance Workflow Step")
   }, async (input) => formatWorkflowStep(await executor.workflowStep(input), input));
   server.registerTool("workflow_status", {
     title: "Workflow Status",
-    description: "Fetch a hosted workflow run by id and list its current status and artifacts. Use when a workflow may still be running, when the model needs to re-open a run, inspect artifact ids, recover from a long workflow, or decide whether to call workflow_step or workflow_artifact_read next. Use only a runId returned by workflow_run/workflow_step/workflow_status; do not construct one yourself.",
+    description: "Fetch a hosted workflow run by id and list its current status and artifacts, to re-open a run or recover artifact ids. Use only a runId returned by workflow_run/workflow_step/workflow_status.",
     inputSchema: WorkflowStatusInputSchema,
-    outputSchema: WorkflowStatusOutputSchema,
+    outputSchema: recordOutputSchema("workflow_status", WorkflowStatusOutputSchema),
     annotations: liveWebToolAnnotations("Workflow Status")
   }, async (input) => formatWorkflowStatus(await executor.workflowStatus(input), input));
   server.registerTool("workflow_artifact_read", {
     title: "Read Workflow Artifact",
-    description: "Read a workflow artifact back into MCP context by run id and artifact id. Use this before writing final deliverables so the answer is grounded in generated evidence.json, CSVs, Markdown briefs, reports, and task files instead of memory. Use workflow_status first when artifact ids are unknown. Use only artifactId values returned by workflow_run/workflow_step/workflow_status; do not construct one yourself. Use maxBytes to limit large CSV/JSON artifacts.",
+    description: "Read a workflow artifact back into context by run id and artifact id, so final deliverables are grounded in generated evidence rather than memory. Use workflow_status first when artifact ids are unknown. Use maxBytes to limit large artifacts.",
     inputSchema: WorkflowArtifactReadInputSchema,
-    outputSchema: WorkflowArtifactReadOutputSchema,
+    outputSchema: recordOutputSchema("workflow_artifact_read", WorkflowArtifactReadOutputSchema),
     annotations: liveWebToolAnnotations("Read Workflow Artifact")
   }, async (input) => formatWorkflowArtifactRead(await executor.workflowArtifactRead(input), input));
+  server.registerTool("report_artifact_read", {
+    title: "Read Report Artifact",
+    description: "Read back a stored report artifact by artifactId (returned by any tool whose result was too large to inline). Windowed: pass offset/maxBytes and keep reading until nextOffset is null.",
+    inputSchema: ReportArtifactReadInputSchema,
+    outputSchema: recordOutputSchema("report_artifact_read", ReportArtifactReadOutputSchema),
+    annotations: liveWebToolAnnotations("Read Report Artifact")
+  }, async (input) => {
+    const owner = artifactOwnerId(input.artifactId);
+    if (!owner || owner !== ownerId) {
+      return { content: [{ type: "text", text: "Artifact not found or not owned by this caller." }], isError: true };
+    }
+    const window2 = await readArtifactWindow(input.artifactId, input.offset ?? 0, input.maxBytes ?? 2e4);
+    if (!window2) {
+      return { content: [{ type: "text", text: "Artifact not found or expired." }], isError: true };
+    }
+    return {
+      content: [{ type: "text", text: window2.text }],
+      structuredContent: { artifactId: input.artifactId, text: window2.text, totalBytes: window2.totalBytes, nextOffset: window2.nextOffset }
+    };
+  });
   server.registerTool("rank_tracker_workflow", {
     title: "Rank Tracker Blueprint Builder",
-    description: "Generate a build-ready database, cron/heartbeat, ingestion, metrics, and AI implementation prompt for a rank tracker powered by MCP Scraper. Supports Maps rankings through directory_workflow/maps_search, organic rankings through search_serp, AI Overview citation tracking, and People Also Ask source presence tracking. This tool is local planning only; it does not call the web or spend credits.",
+    description: "Generate a build-ready database schema, cron plan, and implementation prompt for a rank tracker powered by MCP Scraper (Maps, organic, AI Overview, or PAA tracking). Local planning only \u2014 does not call the web or spend credits.",
     inputSchema: RankTrackerBlueprintInputSchema,
-    outputSchema: RankTrackerBlueprintOutputSchema,
+    outputSchema: recordOutputSchema("rank_tracker_workflow", RankTrackerBlueprintOutputSchema),
     annotations: localPlanningToolAnnotations("Rank Tracker Blueprint Builder")
   }, async (input) => buildRankTrackerBlueprint(input));
   server.registerTool("credits_info", {
     title: "MCP Scraper Credits & Costs",
-    description: "Answer questions about MCP Scraper credits, usage limits, and concurrency upgrades: current credit balance, what a specific tool/action costs, the full cost table, current concurrency limit, the extra-slot price, billing URL, and the terminal checkout command. Does not expose payment methods or credit card information.",
+    description: "Answer questions about MCP Scraper credits, usage limits, and concurrency upgrades \u2014 balance, tool costs, concurrency limits, billing URL. Does not expose payment methods or card information.",
     inputSchema: CreditsInfoInputSchema,
-    outputSchema: CreditsInfoOutputSchema,
+    outputSchema: recordOutputSchema("credits_info", CreditsInfoOutputSchema),
     annotations: {
       title: "MCP Scraper Credits & Costs",
       readOnlyHint: true,
@@ -27479,16 +27720,19 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
     }
   }, async (input) => formatCreditsInfo(await executor.creditsInfo(input), input));
 }
-var import_mcp, import_node_fs8, import_node_path11;
+var import_mcp, import_node_fs8, import_node_path11, import_node_crypto10;
 var init_paa_mcp_server = __esm({
   "src/mcp/paa-mcp-server.ts"() {
     "use strict";
     import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
     import_node_fs8 = require("fs");
     import_node_path11 = require("path");
+    import_node_crypto10 = require("crypto");
     init_version();
     init_mcp_response_formatter();
     init_server_instructions();
+    init_output_schema_registry();
+    init_report_artifact_offload();
     init_mcp_tool_schemas();
     init_rank_tracker_blueprint();
     init_mcp_response_formatter();
@@ -27941,18 +28185,18 @@ var init_browser_agent_tool_schemas = __esm({
       label: import_zod32.z.string().optional().describe("Optional human label for this session, shown in the watch console."),
       url: import_zod32.z.string().url().optional().describe("Optional URL to navigate to immediately after opening."),
       profile: import_zod32.z.string().optional().describe("Optional saved hosted profile name to load a logged-in session for a site."),
-      save_profile_changes: import_zod32.z.boolean().optional().describe("Persist cookies and browser storage back to the named profile when the session is closed. Use this for profile setup or intentional auth refreshes; avoid parallel sessions writing to the same profile."),
-      timeout_seconds: import_zod32.z.number().int().min(60).max(259200).optional().describe("How long the direct no-proxy browser session may live before auto-termination. Defaults to 600. The browser idles into a zero-cost standby between actions, so a longer timeout is cheap.")
+      save_profile_changes: import_zod32.z.boolean().optional().describe("Persist cookies/storage back to the named profile on close. Avoid parallel sessions writing to the same profile."),
+      timeout_seconds: import_zod32.z.number().int().min(60).max(259200).optional().describe("Session lifetime before auto-termination. Defaults to 600.")
     };
     BrowserProfileConnectInputSchema = {
-      email: import_zod32.z.string().optional().describe("Account email for the login being saved. Used to derive a stable, reusable profile name AND recorded as a note of who is connected. Does NOT import existing cookies \u2014 the user signs in fresh via the returned watch_url."),
-      profile: import_zod32.z.string().optional().describe("Profile to add this login to. Omit to derive one from email. A single profile holds MANY site logins \u2014 pass the same profile name again with a different domain to stack another account (e.g. add claude.ai to a profile that already has chatgpt.com)."),
-      domain: import_zod32.z.string().optional().describe("Site to log into, e.g. chatgpt.com, claude.ai, reddit.com. Defaults to chatgpt.com. Each domain is a separate login inside the profile."),
-      login_url: import_zod32.z.string().url().optional().describe("Login page for the domain. Defaults to https://<domain>/ (https://chatgpt.com/ when domain is omitted)."),
-      url: import_zod32.z.string().url().optional().describe("Deprecated alias for login_url. Use login_url."),
-      note: import_zod32.z.string().optional().describe('Free-text note describing this login, e.g. "ChatGPT Plus, work account". Surfaced by browser_profile_list so you can see what the profile holds.'),
+      email: import_zod32.z.string().optional().describe("Account email for the login. Derives a stable profile name and is recorded as a note. Does NOT import existing cookies \u2014 the user signs in fresh."),
+      profile: import_zod32.z.string().optional().describe("Profile to add this login to. Omit to derive from email. A single profile holds MANY logins \u2014 pass the same name with a different domain to stack accounts."),
+      domain: import_zod32.z.string().optional().describe("Site to log into, e.g. chatgpt.com, claude.ai, reddit.com. Defaults to chatgpt.com."),
+      login_url: import_zod32.z.string().url().optional().describe("Login page for the domain. Defaults to https://<domain>/."),
+      url: import_zod32.z.string().url().optional().describe("Deprecated alias for login_url."),
+      note: import_zod32.z.string().optional().describe("Free-text note describing this login. Surfaced by browser_profile_list."),
       label: import_zod32.z.string().optional().describe("Optional human label for this sign-in setup session."),
-      timeout_seconds: import_zod32.z.number().int().min(60).max(259200).optional().describe("How long the sign-in setup session may live before auto-termination. Defaults to 600.")
+      timeout_seconds: import_zod32.z.number().int().min(60).max(259200).optional().describe("Sign-in session lifetime before auto-termination. Defaults to 600.")
     };
     BrowserProfileListInputSchema = {
       profile: import_zod32.z.string().optional().describe("Profile whose saved logins to list. Omit to derive from email."),
@@ -27961,7 +28205,7 @@ var init_browser_agent_tool_schemas = __esm({
       connection_id: import_zod32.z.string().optional().describe("A specific login connection id returned by browser_profile_connect, to poll just that one.")
     };
     BrowserSessionInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself.")
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions.")
     };
     BrowserLocateTargetSchema = import_zod32.z.object({
       name: import_zod32.z.string().optional().describe("Optional label for this target, echoed in the result."),
@@ -27973,94 +28217,94 @@ var init_browser_agent_tool_schemas = __esm({
       message: "target requires selector or text"
     });
     BrowserLocateInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       targets: import_zod32.z.array(BrowserLocateTargetSchema).min(1).max(20).describe("DOM targets to locate in the current viewport. Use selectors for exact elements, or text for visible text ranges.")
     };
     BrowserGotoInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       url: import_zod32.z.string().url().describe("URL to navigate the browser to.")
     };
     BrowserClickInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       x: import_zod32.z.number().describe("X coordinate to click, in screenshot pixels. Use only coordinates from the latest browser_screenshot, browser_read, or browser_locate result; do not guess."),
       y: import_zod32.z.number().describe("Y coordinate to click, in screenshot pixels. Use only coordinates from the latest browser_screenshot, browser_read, or browser_locate result; do not guess."),
       button: import_zod32.z.enum(["left", "right", "middle"]).default("left").describe("Mouse button."),
       num_clicks: import_zod32.z.number().int().min(1).max(3).optional().describe("Number of clicks, e.g. 2 for double-click.")
     };
     BrowserTypeInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       text: import_zod32.z.string().describe("Text to type at the current focus. Click a field first to focus it."),
       delay: import_zod32.z.number().int().min(0).max(500).optional().describe("Optional per-keystroke delay in ms for human-like typing.")
     };
     BrowserScrollInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       delta_y: import_zod32.z.number().default(5).describe("Vertical scroll in wheel units. Positive scrolls down, negative up."),
       delta_x: import_zod32.z.number().default(0).describe("Horizontal scroll in wheel units."),
       x: import_zod32.z.number().optional().describe("X position to scroll at. Defaults to screen center."),
       y: import_zod32.z.number().optional().describe("Y position to scroll at. Defaults to screen center.")
     };
     BrowserPressInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
       keys: import_zod32.z.array(import_zod32.z.string()).min(1).describe('Keys or combinations to press, e.g. ["Return"], ["Ctrl+a"], ["Ctrl+Shift+Tab"].')
     };
     BrowserReplayStopInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
-      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays. Use only a returned replay_id; do not construct one yourself.")
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
+      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays.")
     };
     BrowserReplayDownloadInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
-      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays. Use only a returned replay_id; do not construct one yourself."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
+      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays."),
       filename: import_zod32.z.string().optional().describe("Optional local MP4 filename. Defaults to a timestamped replay filename.")
     };
     BrowserReplayAnnotationSchema = import_zod32.z.object({
-      type: import_zod32.z.enum(["box", "circle", "underline", "arrow", "label"]).default("box").describe("Annotation style to draw over the replay."),
-      start_seconds: import_zod32.z.number().min(0).default(0).describe("When the annotation should appear in the replay."),
-      end_seconds: import_zod32.z.number().min(0).optional().describe("When the annotation should disappear. Defaults to two seconds after start_seconds."),
-      left: import_zod32.z.number().optional().describe("Target left edge in browser screenshot pixels. Use element.left from browser_screenshot/browser_read."),
-      top: import_zod32.z.number().optional().describe("Target top edge in browser screenshot pixels. Use element.top from browser_screenshot/browser_read."),
-      width: import_zod32.z.number().positive().optional().describe("Target width in browser screenshot pixels. Use element.width from browser_screenshot/browser_read."),
-      height: import_zod32.z.number().positive().optional().describe("Target height in browser screenshot pixels. Use element.height from browser_screenshot/browser_read."),
-      x: import_zod32.z.number().optional().describe("Point target x coordinate in browser screenshot pixels when no box is available."),
-      y: import_zod32.z.number().optional().describe("Point target y coordinate in browser screenshot pixels when no box is available."),
-      from_x: import_zod32.z.number().optional().describe("Arrow start x coordinate in browser screenshot pixels. Defaults near the target."),
-      from_y: import_zod32.z.number().optional().describe("Arrow start y coordinate in browser screenshot pixels. Defaults near the target."),
-      to_x: import_zod32.z.number().optional().describe("Arrow target x coordinate in browser screenshot pixels. Defaults to the target box center."),
-      to_y: import_zod32.z.number().optional().describe("Arrow target y coordinate in browser screenshot pixels. Defaults to the target box center."),
-      label: import_zod32.z.string().max(120).optional().describe("Optional text callout to render near the annotation."),
-      color: import_zod32.z.string().regex(/^#?[0-9a-fA-F]{6}$/).optional().describe("Annotation color as hex, for example #ff3b30."),
+      type: import_zod32.z.enum(["box", "circle", "underline", "arrow", "label"]).default("box").describe("Annotation style."),
+      start_seconds: import_zod32.z.number().min(0).default(0).describe("When the annotation should appear."),
+      end_seconds: import_zod32.z.number().min(0).optional().describe("When it disappears. Defaults to 2s after start_seconds."),
+      left: import_zod32.z.number().optional().describe("Target left edge in screenshot pixels (element.left)."),
+      top: import_zod32.z.number().optional().describe("Target top edge in screenshot pixels (element.top)."),
+      width: import_zod32.z.number().positive().optional().describe("Target width in screenshot pixels (element.width)."),
+      height: import_zod32.z.number().positive().optional().describe("Target height in screenshot pixels (element.height)."),
+      x: import_zod32.z.number().optional().describe("Point target x coordinate when no box is available."),
+      y: import_zod32.z.number().optional().describe("Point target y coordinate when no box is available."),
+      from_x: import_zod32.z.number().optional().describe("Arrow start x coordinate. Defaults near the target."),
+      from_y: import_zod32.z.number().optional().describe("Arrow start y coordinate. Defaults near the target."),
+      to_x: import_zod32.z.number().optional().describe("Arrow end x coordinate. Defaults to the target box center."),
+      to_y: import_zod32.z.number().optional().describe("Arrow end y coordinate. Defaults to the target box center."),
+      label: import_zod32.z.string().max(120).optional().describe("Optional text callout."),
+      color: import_zod32.z.string().regex(/^#?[0-9a-fA-F]{6}$/).optional().describe("Annotation color as hex, e.g. #ff3b30."),
       thickness: import_zod32.z.number().min(1).max(24).optional().describe("Stroke thickness in pixels. Defaults to 5.")
     });
     BrowserReplayMarkInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself. A replay must already be recording."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. A replay must already be recording."),
       target: BrowserLocateTargetSchema.describe("The exact DOM element or text range to mark in the current viewport."),
-      type: import_zod32.z.enum(["box", "circle", "underline", "arrow"]).default("box").describe("Annotation style to generate. Labels are included on the returned annotation when label is provided."),
+      type: import_zod32.z.enum(["box", "circle", "underline", "arrow"]).default("box").describe("Annotation style to generate."),
       label: import_zod32.z.string().max(120).optional().describe("Optional callout text to render near the target."),
-      color: import_zod32.z.string().regex(/^#?[0-9a-fA-F]{6}$/).optional().describe("Annotation color as hex, for example #ff3b30."),
+      color: import_zod32.z.string().regex(/^#?[0-9a-fA-F]{6}$/).optional().describe("Annotation color as hex, e.g. #ff3b30."),
       thickness: import_zod32.z.number().min(1).max(24).optional().describe("Stroke thickness in pixels. Defaults to 5."),
       padding: import_zod32.z.number().min(0).max(80).default(8).describe("Pixels to expand the DOM bounds so the highlight does not touch the text edge."),
-      start_offset_seconds: import_zod32.z.number().min(-5).max(10).default(-0.25).describe("Offset from the current replay time. Negative values make the callout appear just before the mark action is captured."),
-      duration_seconds: import_zod32.z.number().min(0.5).max(30).default(4).describe("How long the generated annotation should remain visible.")
+      start_offset_seconds: import_zod32.z.number().min(-5).max(10).default(-0.25).describe("Offset from the current replay time; negative appears just before the mark action."),
+      duration_seconds: import_zod32.z.number().min(0.5).max(30).default(4).describe("How long the annotation should remain visible.")
     };
     BrowserReplayAnnotateInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. Use only a returned session_id; do not construct one yourself."),
-      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays. Use only a returned replay_id; do not construct one yourself."),
-      annotations: import_zod32.z.array(BrowserReplayAnnotationSchema).min(1).max(50).describe("Timed overlay annotations to render on the replay. Prefer annotations returned by browser_replay_mark; otherwise use exact DOM bounds from browser_locate/browser_screenshot/browser_read."),
-      filename: import_zod32.z.string().optional().describe("Optional output MP4 filename. Defaults to a timestamped annotated replay filename."),
+      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions."),
+      replay_id: import_zod32.z.string().describe("The replay id returned by browser_replay_start or browser_list_replays."),
+      annotations: import_zod32.z.array(BrowserReplayAnnotationSchema).min(1).max(50).describe("Timed overlay annotations. Prefer ones from browser_replay_mark; otherwise use exact DOM bounds from browser_locate."),
+      filename: import_zod32.z.string().optional().describe("Optional output MP4 filename. Defaults to a timestamped filename."),
       source_width: import_zod32.z.number().positive().optional().describe("Width of the screenshot coordinate space used for annotations. Defaults to the replay video width."),
-      source_height: import_zod32.z.number().positive().optional().describe("Height of the coordinate space used for annotations. When this is a page viewport height smaller than the replay video height, the annotator infers the browser chrome top offset."),
-      source_left_offset: import_zod32.z.number().min(0).optional().describe("Optional explicit X offset from annotation coordinates to replay video coordinates. Usually omitted."),
-      source_top_offset: import_zod32.z.number().min(0).optional().describe("Optional explicit Y offset from annotation coordinates to replay video coordinates. Usually omitted because browser chrome offset is inferred when source_height is a page viewport height.")
+      source_height: import_zod32.z.number().positive().optional().describe("Height of the annotation coordinate space; if smaller than the replay video height, the browser chrome offset is inferred."),
+      source_left_offset: import_zod32.z.number().min(0).optional().describe("Explicit X offset from annotation to replay video coordinates. Usually omitted."),
+      source_top_offset: import_zod32.z.number().min(0).optional().describe("Explicit Y offset from annotation to replay video coordinates. Usually omitted.")
     };
     BrowserListInputSchema = {
       include_closed: import_zod32.z.boolean().default(false).describe("Include closed sessions in the list.")
     };
     BrowserCaptureFanoutInputSchema = {
-      session_id: import_zod32.z.string().describe("The session id returned by browser_open or browser_list_sessions. The session must be on chatgpt.com or claude.ai and logged in through a saved hosted profile. Use only a returned session_id; do not construct one yourself."),
-      prompt: import_zod32.z.string().optional().describe("Optional prompt to type into the chat composer and submit before capturing. Omit to passively capture the fan-out of a prompt the user just ran in the visible browser. The prompt must trigger web search for there to be a fan-out."),
-      wait_ms: import_zod32.z.number().int().min(0).max(18e4).optional().describe("How long to wait for the answer stream to finish before parsing. Defaults to 90000 when a prompt is sent, 8000 for passive capture. Capture ends as soon as the answer stream finishes."),
-      first_party_domain: import_zod32.z.string().optional().describe("The brand/site being researched, for example example.com. Sources on this domain are tagged First-party/vendor. Set this when the prompt is about a specific business."),
-      reset: import_zod32.z.boolean().default(false).describe("Clear any previously buffered stream for this page before capturing. Use when re-running to avoid mixing turns."),
-      export: import_zod32.z.boolean().default(false).describe("When true, write JSON, CSV, TSV exports (queries, citations, all sources, browsed-only sources, snippets, domains) and a self-contained HTML report to MCP_SCRAPER_OUTPUT_DIR/fanout, returning paths relative to MCP_SCRAPER_OUTPUT_DIR.")
+      session_id: import_zod32.z.string().describe("Session id from browser_open. Must be on chatgpt.com or claude.ai, logged in via a saved hosted profile."),
+      prompt: import_zod32.z.string().optional().describe("Optional prompt to type and submit before capturing. Omit to passively capture a prompt the user just ran. Must trigger web search to produce a fan-out."),
+      wait_ms: import_zod32.z.number().int().min(0).max(18e4).optional().describe("How long to wait for the answer stream to finish. Defaults to 90000 when a prompt is sent, 8000 for passive capture."),
+      first_party_domain: import_zod32.z.string().optional().describe("The brand/site being researched, e.g. example.com \u2014 sources on this domain are tagged First-party/vendor."),
+      reset: import_zod32.z.boolean().default(false).describe("Clear any previously buffered stream for this page before capturing."),
+      export: import_zod32.z.boolean().default(false).describe("Write JSON/CSV/TSV/HTML exports to MCP_SCRAPER_OUTPUT_DIR/fanout, returning relative paths.")
     };
     FanoutSourceOutput = import_zod32.z.object({
       url: import_zod32.z.string(),
@@ -28084,10 +28328,10 @@ var init_browser_agent_tool_schemas = __esm({
         title: import_zod32.z.string(),
         rounds: import_zod32.z.number().int().min(0)
       }),
-      queries: import_zod32.z.array(import_zod32.z.string()).describe("Every web-search sub-query the model issued, in capture order. Classify these by funnel stage and type yourself from the text."),
-      browsed_urls: import_zod32.z.array(FanoutSourceOutput).describe("Every researched URL (cited and browsed-only), cited first."),
-      cited_urls: import_zod32.z.array(FanoutSourceOutput).describe("The subset of researched URLs actually cited in the final answer."),
-      browsed_only: import_zod32.z.array(FanoutSourceOutput).describe("Researched URLs the model pulled but did not cite."),
+      queries: import_zod32.z.array(import_zod32.z.string()).describe("Every web-search sub-query issued, in capture order."),
+      browsed_urls: import_zod32.z.array(FanoutSourceOutput).describe("Every researched URL, cited first."),
+      cited_urls: import_zod32.z.array(FanoutSourceOutput).describe("Researched URLs cited in the final answer."),
+      browsed_only: import_zod32.z.array(FanoutSourceOutput).describe("Researched URLs pulled but not cited."),
       snippets: import_zod32.z.array(import_zod32.z.object({ url: import_zod32.z.string(), domain: import_zod32.z.string(), title: import_zod32.z.string(), text: import_zod32.z.string() })),
       counts: import_zod32.z.object({
         subQueries: import_zod32.z.number().int().min(0),
@@ -28698,9 +28942,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_profile_connect",
     {
       title: "Save a Site Login to a Profile",
-      description: `Save a logged-in browser session so this server can reuse a site the user is signed into (ChatGPT, Claude, Reddit, or any account-gated site). Returns an mcpscraper.dev watch_url \u2014 give it to the user, they sign in once, and the cookies are saved to a named profile for later browser_open calls. ONE profile holds MANY logins: call this again with the SAME profile and a DIFFERENT domain to stack another account (e.g. add claude.ai to a profile that already has chatgpt.com). Pass note to record what each login is. Side effects: opens a short-lived sign-in session and persists cookies to the profile; it does NOT import the user's existing browser cookies (they log in fresh). NOT for one-off scraping of public pages (use extract_url) and NOT a way to drive the browser (use browser_open). Sample asks: "save my ChatGPT login", "connect my Reddit account", "add my Claude login to the same profile". After the user signs in, poll browser_profile_list until the login reads AUTHENTICATED, then browser_open with the profile.`,
+      description: "Save a logged-in browser session so this server can reuse a site the user is signed into (ChatGPT, Claude, Reddit, any account-gated site). Returns a watch_url; the user signs in fresh (existing browser cookies are NOT imported) and cookies save to a named profile. ONE profile holds MANY logins \u2014 call again with the same profile and a different domain to stack another account. NOT for one-off scraping (use extract_url) or driving the browser (use browser_open). After sign-in, poll browser_profile_list until AUTHENTICATED, then browser_open with the profile.",
       inputSchema: BrowserProfileConnectInputSchema,
-      outputSchema: BrowserProfileConnectOutputSchema,
+      outputSchema: recordOutputSchema("browser_profile_connect", BrowserProfileConnectOutputSchema),
       annotations: annotations("Save a Site Login to a Profile")
     },
     async (input) => {
@@ -28756,9 +29000,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_profile_list",
     {
       title: "List Saved Logins in a Profile",
-      description: `List every site login saved in a profile, each with its current auth status (NEEDS_AUTH / AUTHENTICATED), account email, and note. Use it to (1) see what a profile is connected to before opening a session, and (2) poll a just-saved login until it flips to AUTHENTICATED. Read-only, no cost. Pass profile (or email to derive it); narrow with domain or connection_id to poll a single login. Sample asks: "what's connected in my profile", "is my ChatGPT login ready yet", "which accounts are saved". Pairs with browser_profile_connect (which adds logins) and browser_open (which uses them).`,
+      description: "List every site login saved in a profile with its auth status (NEEDS_AUTH/AUTHENTICATED), email, and note. Use to check what's connected, or to poll a just-saved login until AUTHENTICATED. Read-only, no cost. Pass profile (or email to derive it); narrow with domain or connection_id.",
       inputSchema: BrowserProfileListInputSchema,
-      outputSchema: BrowserProfileListOutputSchema,
+      outputSchema: recordOutputSchema("browser_profile_list", BrowserProfileListOutputSchema),
       annotations: annotations("List Saved Logins in a Profile", true)
     },
     async (input) => {
@@ -28790,9 +29034,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_open",
     {
       title: "Open Browser Session",
-      description: "Open a direct no-proxy hosted browser session you can drive. Pass a saved profile name to load a session that is already logged into the sites saved in that profile (one profile can hold several logins). To set up or refresh a login first, use browser_profile_connect, then poll browser_profile_list until it reads AUTHENTICATED. Returns a session_id used by all other browser_* tools.",
+      description: "Open a direct no-proxy hosted browser session you can drive. Pass a saved profile name to load a session already logged into that profile's sites (set one up first with browser_profile_connect). Returns a session_id used by all other browser_* tools.",
       inputSchema: BrowserOpenInputSchema,
-      outputSchema: BrowserOpenOutputSchema,
+      outputSchema: recordOutputSchema("browser_open", BrowserOpenOutputSchema),
       annotations: annotations("Open Browser Session")
     },
     async (input) => {
@@ -28824,9 +29068,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_screenshot",
     {
       title: "See Page (Screenshot + Elements)",
-      description: "Capture what the browser currently shows. Returns a screenshot image PLUS a text snapshot listing interactive elements with their center x,y coordinates, the page url and title, and visible text. This is your primary way to perceive the page. Click elements by their listed x,y. If a Cloudflare/CAPTCHA challenge is visible, wait and screenshot again rather than clicking it.",
+      description: "Capture what the browser currently shows: a screenshot plus a text snapshot of interactive elements with x,y coordinates, page url/title, and visible text. Primary way to perceive the page; click elements by their listed x,y. If a Cloudflare/CAPTCHA challenge is visible, wait and screenshot again rather than clicking it.",
       inputSchema: BrowserSessionInputSchema,
-      outputSchema: BrowserScreenshotOutputSchema,
+      outputSchema: recordOutputSchema("browser_screenshot", BrowserScreenshotOutputSchema),
       annotations: annotations("See Page", true)
     },
     async (input) => {
@@ -28856,9 +29100,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_read",
     {
       title: "Read Page Text + Elements",
-      description: "Return the page url, title, visible text, and the list of interactive elements (with x,y) without an image. Cheaper than browser_screenshot when you only need to read content or find a target element to click.",
+      description: "Return the page url, title, visible text, and interactive elements (with x,y) without an image. Cheaper than browser_screenshot when you only need to read content or find a click target.",
       inputSchema: BrowserSessionInputSchema,
-      outputSchema: BrowserReadOutputSchema,
+      outputSchema: recordOutputSchema("browser_read", BrowserReadOutputSchema),
       annotations: annotations("Read Page", true)
     },
     async (input) => {
@@ -28880,9 +29124,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_locate",
     {
       title: "Locate DOM Targets",
-      description: "Locate exact visible DOM elements or text ranges in the current browser viewport and return left/top/width/height bounds in screenshot pixels. Use this before drawing annotations or when a callout must literally circle, box, underline, or point to a real element. Prefer CSS selectors for exact UI elements; use text when selector is unknown. When a replay is actively recording, the result includes replay_elapsed_seconds for timing.",
+      description: "Locate exact visible DOM elements or text ranges and return left/top/width/height bounds in screenshot pixels. Use before drawing annotations that must circle, box, underline, or point to a real element. Prefer CSS selectors; use text when selector is unknown.",
       inputSchema: BrowserLocateInputSchema,
-      outputSchema: BrowserLocateOutputSchema,
+      outputSchema: recordOutputSchema("browser_locate", BrowserLocateOutputSchema),
       annotations: annotations("Locate DOM Targets", true)
     },
     async (input) => {
@@ -28905,9 +29149,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_goto",
     {
       title: "Navigate To URL",
-      description: "Navigate an existing browser session to a URL when the user asks you to go to another page or continue browsing in the same session. Use browser_open first if no session exists. Follow with browser_screenshot to see redirects, login walls, CAPTCHA/Cloudflare state, or the loaded page.",
+      description: "Navigate an existing browser session to a URL. Use browser_open first if no session exists; follow with browser_screenshot to see the loaded page.",
       inputSchema: BrowserGotoInputSchema,
-      outputSchema: BrowserActionOutputSchema,
+      outputSchema: recordOutputSchema("browser_goto", BrowserActionOutputSchema),
       annotations: annotations("Navigate To URL")
     },
     async (input) => {
@@ -28919,9 +29163,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_click",
     {
       title: "Click",
-      description: "Click a visible page target using screenshot pixel coordinates. Use this when the user asks you to press a button, open a menu, choose a result, or activate a visible UI element. Use x/y only from the latest browser_screenshot, browser_read, or browser_locate result; do not guess coordinates. Follow with browser_screenshot when the click may change the page.",
+      description: "Click a visible page target using screenshot pixel coordinates. Use x/y only from the latest browser_screenshot, browser_read, or browser_locate result; do not guess coordinates.",
       inputSchema: BrowserClickInputSchema,
-      outputSchema: BrowserActionOutputSchema,
+      outputSchema: recordOutputSchema("browser_click", BrowserActionOutputSchema),
       annotations: annotations("Click")
     },
     async (input) => {
@@ -28938,9 +29182,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_type",
     {
       title: "Type Text",
-      description: 'Type text into the currently focused browser field. Use this when the user asks you to fill a search box, form field, login field, or editable text area. Click or Tab to the field first if focus is uncertain. Use browser_press with ["Return"] to submit, and browser_screenshot afterward when page state matters.',
+      description: 'Type text into the currently focused browser field. Click or Tab to the field first if focus is uncertain. Use browser_press with ["Return"] to submit.',
       inputSchema: BrowserTypeInputSchema,
-      outputSchema: BrowserActionOutputSchema,
+      outputSchema: recordOutputSchema("browser_type", BrowserActionOutputSchema),
       annotations: annotations("Type Text")
     },
     async (input) => {
@@ -28952,9 +29196,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_scroll",
     {
       title: "Scroll",
-      description: "Scroll the page to reveal more content before reading, clicking, or locating elements. Positive delta_y scrolls down; negative delta_y scrolls up. Follow with browser_screenshot or browser_read to inspect newly revealed content.",
+      description: "Scroll the page to reveal more content. Positive delta_y scrolls down; negative scrolls up.",
       inputSchema: BrowserScrollInputSchema,
-      outputSchema: BrowserActionOutputSchema,
+      outputSchema: recordOutputSchema("browser_scroll", BrowserActionOutputSchema),
       annotations: annotations("Scroll")
     },
     async (input) => {
@@ -28971,9 +29215,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_press",
     {
       title: "Press Keys",
-      description: 'Press keyboard keys or combinations in the active browser session. Use this for submit, Escape, Tab navigation, select-all, or keyboard shortcuts. Examples: ["Return"], ["Escape"], ["Tab"], ["Ctrl+a"], ["Ctrl+Shift+Tab"]. Use browser_type for text entry and browser_screenshot after keypresses that may change the page.',
+      description: "Press keyboard keys or combinations in the active browser session \u2014 submit, Escape, Tab navigation, select-all, or shortcuts. Use browser_type for text entry.",
       inputSchema: BrowserPressInputSchema,
-      outputSchema: BrowserActionOutputSchema,
+      outputSchema: recordOutputSchema("browser_press", BrowserActionOutputSchema),
       annotations: annotations("Press Keys")
     },
     async (input) => {
@@ -28985,9 +29229,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_replay_start",
     {
       title: "Start Recording",
-      description: "Start recording an MP4 replay of the session. Returns replay_id, view_url when available, and a download_url. Use to capture a task for later review; stop with browser_replay_stop.",
+      description: "Start recording an MP4 replay of the session. Returns replay_id and a download_url. Stop with browser_replay_stop.",
       inputSchema: BrowserSessionInputSchema,
-      outputSchema: BrowserReplayStartOutputSchema,
+      outputSchema: recordOutputSchema("browser_replay_start", BrowserReplayStartOutputSchema),
       annotations: annotations("Start Recording")
     },
     async (input) => {
@@ -29008,9 +29252,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_replay_stop",
     {
       title: "Stop Recording",
-      description: "Stop a replay recording and expose the final view_url and download_url. Use browser_replay_download to save the MP4 to the configured output directory.",
+      description: "Stop a replay recording and expose its final view_url/download_url. Use browser_replay_download to save the MP4.",
       inputSchema: BrowserReplayStopInputSchema,
-      outputSchema: BrowserReplayStopOutputSchema,
+      outputSchema: recordOutputSchema("browser_replay_stop", BrowserReplayStopOutputSchema),
       annotations: annotations("Stop Recording")
     },
     async (input) => {
@@ -29031,9 +29275,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_list_replays",
     {
       title: "List Replay Videos",
-      description: "List replay recordings for a browser session, including final view_url and authenticated download_url values when available.",
+      description: "List replay recordings for a browser session, including view_url and download_url when available.",
       inputSchema: BrowserSessionInputSchema,
-      outputSchema: BrowserListReplaysOutputSchema,
+      outputSchema: recordOutputSchema("browser_list_replays", BrowserListReplaysOutputSchema),
       annotations: annotations("List Replay Videos", true)
     },
     async (input) => {
@@ -29053,9 +29297,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_replay_download",
     {
       title: "Download Replay MP4",
-      description: "Download a replay recording through MCP Scraper and save the MP4 under MCP_SCRAPER_OUTPUT_DIR/browser-replays. Use after browser_replay_stop or browser_list_replays.",
+      description: opts.savesReportsLocally === false ? "Download a replay recording. Returns the download_url; fetch it directly (nothing is saved on this hosted endpoint). Use after browser_replay_stop or browser_list_replays." : "Download a replay recording and save the MP4 under MCP_SCRAPER_OUTPUT_DIR/browser-replays. Use after browser_replay_stop or browser_list_replays.",
       inputSchema: BrowserReplayDownloadInputSchema,
-      outputSchema: BrowserReplayDownloadOutputSchema,
+      outputSchema: recordOutputSchema("browser_replay_download", BrowserReplayDownloadOutputSchema),
       annotations: annotations("Download Replay MP4")
     },
     async (input) => {
@@ -29077,9 +29321,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_replay_mark",
     {
       title: "Mark Replay Annotation",
-      description: "While a replay is actively recording, locate one exact DOM target and return a ready-to-use annotation object with DOM bounds and replay-relative timing. Use this instead of guessing start_seconds or drawing rough rectangles. Workflow: start browser_replay_start, navigate until the target is visible and stable, call browser_replay_mark for each callout, then stop the replay and pass the returned annotations to browser_replay_annotate.",
+      description: "While a replay is actively recording, locate one exact DOM target and return a ready-to-use annotation with DOM bounds and replay-relative timing, instead of guessing start_seconds or rectangles. Pass the returned annotations to browser_replay_annotate after stopping the replay.",
       inputSchema: BrowserReplayMarkInputSchema,
-      outputSchema: BrowserReplayMarkOutputSchema,
+      outputSchema: recordOutputSchema("browser_replay_mark", BrowserReplayMarkOutputSchema),
       annotations: annotations("Mark Replay Annotation", true)
     },
     async (input) => {
@@ -29127,9 +29371,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_replay_annotate",
     {
       title: "Annotate Replay MP4",
-      description: "Download a browser replay MP4, render visual annotations over it, and save a new annotated MP4 under MCP_SCRAPER_OUTPUT_DIR/browser-replays. Use this after browser_replay_stop when the user wants proof videos with circles, boxes, arrows, underlines, or labels. For accurate timing and placement, prefer annotations returned by browser_replay_mark while the replay is recording; otherwise use exact left/top/width/height bounds from browser_locate. If the replay video size differs from the screenshot coordinate space, pass source_width and source_height.",
+      description: "Download a browser replay MP4, render visual annotations (circles/boxes/arrows/labels) over it, and save a new annotated MP4. Prefer annotations from browser_replay_mark for accurate timing; otherwise use exact bounds from browser_locate. Pass source_width/source_height if the replay video size differs from the screenshot coordinate space.",
       inputSchema: BrowserReplayAnnotateInputSchema,
-      outputSchema: BrowserReplayAnnotateOutputSchema,
+      outputSchema: recordOutputSchema("browser_replay_annotate", BrowserReplayAnnotateOutputSchema),
       annotations: annotations("Annotate Replay MP4")
     },
     async (input) => {
@@ -29169,9 +29413,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_close",
     {
       title: "Close Browser Session",
-      description: "Close and release a browser session when the task is done, when the user asks to stop the browser, or when active browser billing should end. Use browser_list_sessions first if you need to recover the session_id.",
+      description: "Close and release a browser session when the task is done, to end active browser billing. Use browser_list_sessions first to recover a session_id.",
       inputSchema: BrowserSessionInputSchema,
-      outputSchema: BrowserCloseOutputSchema,
+      outputSchema: recordOutputSchema("browser_close", BrowserCloseOutputSchema),
       annotations: { title: "Close Browser Session", readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
     },
     async (input) => {
@@ -29190,9 +29434,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "browser_list_sessions",
     {
       title: "List Browser Sessions",
-      description: "List browser sessions and their status, with a watch_url for each. Use this to recover a session_id, find an active browser, or decide which session to close. Use browser_open to create a new session.",
+      description: "List browser sessions and their status, with a watch_url for each. Use to recover a session_id or decide which session to close.",
       inputSchema: BrowserListInputSchema,
-      outputSchema: BrowserListSessionsOutputSchema,
+      outputSchema: recordOutputSchema("browser_list_sessions", BrowserListSessionsOutputSchema),
       annotations: annotations("List Browser Sessions", true)
     },
     async (input) => {
@@ -29212,9 +29456,9 @@ function registerBrowserAgentMcpTools(server, opts) {
     "query_fanout_workflow",
     {
       title: "Capture AI Search Fan-Out",
-      description: `Capture the query fan-out behind a ChatGPT or Claude web-search answer for Answer Engine Optimization (AEO): the exact sub-queries the model issued, every researched URL split into cited vs browsed-only (with citation frequency and snippet), each source tagged by category (First-party/vendor, News/media, Reddit, Social/video, Encyclopedia, Review site, Docs, Blog), plus top sourced sites and citation order. Set export=true for durable JSON, CSV, TSV, and HTML artifacts; export paths are returned relative to MCP_SCRAPER_OUTPUT_DIR. This returns the raw structured data; YOU analyze it \u2014 classify each sub-query by funnel stage (Problem-aware, Solution-aware, Decision-aware, Retention) and type (BoFu, Branded, Comparison, How-to, Search operator), name the brands the model researched, and give AEO insights. Sample asks: "capture the fan-out for this ChatGPT answer", "what did Claude search and cite for best CRM", "show the sub-queries and sources behind this AI answer". WRITE NOTE: passing prompt submits a real message in the user's logged-in account (a new conversation turn) \u2014 only send when the user wants that; omit prompt to capture a prompt the user just ran. Setup, if not already connected or if the profile disconnected: call browser_profile_connect, give the user the watch_url, let them complete login, then poll browser_profile_list until status is AUTHENTICATED. After that, browser_open the saved direct no-proxy profile and go to chatgpt.com or claude.ai. Fan-out is captured only as it streams, so the session must be open when the prompt runs. NOT for Google AI Overview citations \u2014 use harvest_paa for those; this tool is ChatGPT and Claude only.`,
+      description: "Capture the query fan-out behind a ChatGPT or Claude web-search answer for AEO: sub-queries issued, every researched URL split into cited vs browsed-only, and top sourced sites. Returns raw structured data for you to classify and analyze. Set export=true for JSON/CSV/TSV/HTML artifacts. WRITE NOTE: passing prompt submits a real message in the user's logged-in account \u2014 only send when the user wants that; omit it to capture a prompt the user just ran. The session must already be open on chatgpt.com or claude.ai (see browser_profile_connect) while the prompt streams. NOT for Google AI Overview \u2014 use harvest_paa for that.",
       inputSchema: BrowserCaptureFanoutInputSchema,
-      outputSchema: BrowserCaptureFanoutOutputSchema,
+      outputSchema: recordOutputSchema("query_fanout_workflow", BrowserCaptureFanoutOutputSchema),
       annotations: annotations("Capture AI Search Fan-Out")
     },
     async (input) => {
@@ -29279,6 +29523,7 @@ var init_browser_agent_mcp_server = __esm({
     init_browser_agent_tool_schemas();
     init_replay_annotator();
     init_outbound_sanitize();
+    init_output_schema_registry();
   }
 });
 
@@ -29394,9 +29639,9 @@ var init_mcp_routes = __esm({
           enableJsonResponse: true
         });
         const consoleBaseUrl = process.env.BROWSER_AGENT_CONSOLE_URL?.trim() || baseUrl;
-        const server = buildPaaExtractorMcpServer(executor, { savesReportsLocally: false });
+        const server = buildPaaExtractorMcpServer(executor, { savesReportsLocally: false, ownerId: hashOwnerId(callerKey) });
         registerSerpIntelligenceCaptureTools(server, executor);
-        registerBrowserAgentMcpTools(server, { baseUrl, apiKey: callerKey, consoleBaseUrl });
+        registerBrowserAgentMcpTools(server, { baseUrl, apiKey: callerKey, consoleBaseUrl, savesReportsLocally: false });
         await server.connect(transport);
         return transport.handleRequest(c.req.raw);
       } catch {
@@ -29517,7 +29762,7 @@ async function listAuthConnectionsByProfile(profile) {
 }
 async function createSessionRow(input) {
   const db = getDb();
-  const id = `bas_${(0, import_node_crypto9.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bas_${(0, import_node_crypto11.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_sessions (id, runtime_session_id, live_view_url, cdp_ws_url, status, label, user_id, concurrency_lock_id, last_action_at)
           VALUES (?, ?, ?, ?, 'open', ?, ?, ?, datetime('now'))`,
@@ -29586,7 +29831,7 @@ async function recordAction(input) {
     sql: `INSERT INTO browser_agent_actions (id, session_id, type, params_json, ok, error)
           VALUES (?, ?, ?, ?, ?, ?)`,
     args: [
-      `baa_${(0, import_node_crypto9.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
+      `baa_${(0, import_node_crypto11.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
       input.sessionId,
       input.type,
       input.params == null ? null : JSON.stringify(input.params),
@@ -29626,11 +29871,11 @@ async function listReplayRows(sessionId) {
   });
   return res.rows;
 }
-var import_node_crypto9, _ready2;
+var import_node_crypto11, _ready2;
 var init_browser_agent_db = __esm({
   "src/api/browser-agent-db.ts"() {
     "use strict";
-    import_node_crypto9 = require("crypto");
+    import_node_crypto11 = require("crypto");
     init_db();
     _ready2 = false;
   }
@@ -31756,7 +32001,7 @@ async function getKeys() {
   const privateKey = await (0, import_jose2.importPKCS8)(pem, "RS256", { extractable: true });
   const full = await (0, import_jose2.exportJWK)(privateKey);
   const publicJwk = { kty: full.kty, n: full.n, e: full.e };
-  const kid = (0, import_node_crypto10.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
+  const kid = (0, import_node_crypto12.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
   publicJwk.kid = kid;
   publicJwk.alg = "RS256";
   publicJwk.use = "sig";
@@ -31935,23 +32180,23 @@ async function validateAuthRequest(p) {
 }
 function pkceMatches(verifier, challenge) {
   if (!verifier) return false;
-  const computed = (0, import_node_crypto10.createHash)("sha256").update(verifier).digest("base64url");
+  const computed = (0, import_node_crypto12.createHash)("sha256").update(verifier).digest("base64url");
   return computed === challenge;
 }
 async function mintAccessToken(identity, scope, plan, audience) {
   const { privateKey, kid } = await getKeys();
-  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto10.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
+  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto12.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
 }
 function tokenErrorResponse(c, error, description, status) {
   return c.json({ error, error_description: description }, status);
 }
-var import_hono17, import_cookie, import_node_crypto10, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
+var import_hono17, import_cookie, import_node_crypto12, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
 var init_oauth_routes = __esm({
   "src/api/oauth-routes.ts"() {
     "use strict";
     import_hono17 = require("hono");
     import_cookie = require("hono/cookie");
-    import_node_crypto10 = require("crypto");
+    import_node_crypto12 = require("crypto");
     import_jose2 = require("jose");
     init_session();
     init_db();
@@ -31966,6 +32211,7 @@ var init_oauth_routes = __esm({
     ACCESS_TTL_SECONDS = 3600;
     REFRESH_TTL_SECONDS = 60 * 60 * 24 * 30;
     CODE_TTL_SECONDS = 60;
+    ROTATION_GRACE_SECONDS = 120;
     secureCookies = process.env.NODE_ENV === "production" || process.env.VERCEL === "1";
     sessionCookieOptions = {
       httpOnly: true,
@@ -32036,7 +32282,7 @@ var init_oauth_routes = __esm({
         }
       }
       const clientName = typeof body.client_name === "string" ? body.client_name : null;
-      const clientId = `client_${(0, import_node_crypto10.randomBytes)(16).toString("hex")}`;
+      const clientId = `client_${(0, import_node_crypto12.randomBytes)(16).toString("hex")}`;
       await registerClient(clientId, redirectUris, clientName);
       console.log("[oauth-dcr] register OK client_id=%s redirect_uris=%s", clientId, JSON.stringify(redirectUris));
       return c.json({
@@ -32089,7 +32335,7 @@ var init_oauth_routes = __esm({
       if (action === "deny") return redirectWithError(p.redirect_uri, p.state, "access_denied");
       if (action !== "approve") return c.text("unsupported action", 400);
       const scope = negotiateScope(p.scope, user, p.resource);
-      const code = `code_${(0, import_node_crypto10.randomBytes)(32).toString("base64url")}`;
+      const code = `code_${(0, import_node_crypto12.randomBytes)(32).toString("base64url")}`;
       const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1e3).toISOString();
       await putCode({
         code,
@@ -32128,7 +32374,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const refreshToken = `rt_${(0, import_node_crypto10.randomBytes)(40).toString("base64url")}`;
+        const refreshToken = `rt_${(0, import_node_crypto12.randomBytes)(40).toString("base64url")}`;
         await putRefresh({
           refresh_token: refreshToken,
           client_id: clientId,
@@ -32144,6 +32390,13 @@ var init_oauth_routes = __esm({
         const refreshToken = get("refresh_token") ?? "";
         const clientId = get("client_id") ?? "";
         const record = await getRefresh(refreshToken);
+        if (record && record.revoked && record.replaced_by && record.rotated_at && Date.now() - new Date(record.rotated_at).getTime() < ROTATION_GRACE_SECONDS * 1e3 && (!clientId || record.client_id === clientId)) {
+          const graceUser = await getUserByEmail(record.identity);
+          const gracePlan = graceUser ? resolvePlan(graceUser) : "free";
+          const graceAudience = record.resource ?? RESOURCE();
+          const graceAccess = await mintAccessToken(record.identity, record.scope, gracePlan, graceAudience);
+          return c.json({ access_token: graceAccess, token_type: "Bearer", expires_in: ACCESS_TTL_SECONDS, refresh_token: record.replaced_by, scope: record.scope });
+        }
         if (!record || record.revoked) return tokenErrorResponse(c, "invalid_grant", "Refresh token is invalid or revoked", 400);
         if (new Date(record.expires_at).getTime() < Date.now()) return tokenErrorResponse(c, "invalid_grant", "Refresh token has expired", 400);
         if (clientId && record.client_id !== clientId) return tokenErrorResponse(c, "invalid_grant", "client_id mismatch", 400);
@@ -32151,7 +32404,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const nextRefresh = `rt_${(0, import_node_crypto10.randomBytes)(40).toString("base64url")}`;
+        const nextRefresh = `rt_${(0, import_node_crypto12.randomBytes)(40).toString("base64url")}`;
         await rotateRefresh(refreshToken, {
           refresh_token: nextRefresh,
           client_id: record.client_id,