mcp-scraper 0.36.0 → 0.37.0

package/dist/bin/api-server.cjs

@@ -3601,6 +3601,7 @@ var init_url_utils = __esm({
 // src/api/db.ts
 var db_exports = {};
 __export(db_exports, {
+  CORE_SCHEMA_VERSION: () => CORE_SCHEMA_VERSION,
   CREDIT_LOT_TTL: () => CREDIT_LOT_TTL,
   SiteAuditJobRowSchema: () => SiteAuditJobRowSchema,
   SiteAuditPhaseLogRowSchema: () => SiteAuditPhaseLogRowSchema,
@@ -3626,6 +3627,7 @@ __export(db_exports, {
   createWorkflowRun: () => createWorkflowRun,
   createWorkflowSchedule: () => createWorkflowSchedule,
   creditMc: () => creditMc,
+  creditMcIdempotent: () => creditMcIdempotent,
   deactivateUser: () => deactivateUser,
   debitMc: () => debitMc,
   debitMcIdempotent: () => debitMcIdempotent,
@@ -4081,6 +4083,50 @@ async function migrate() {
       updated_at                  TEXT NOT NULL DEFAULT (datetime('now'))
     )
   `);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS billing_credits (
+      idempotency_key TEXT PRIMARY KEY,
+      user_id         INTEGER NOT NULL REFERENCES users(id),
+      amount_mc       INTEGER NOT NULL,
+      operation       TEXT NOT NULL,
+      description     TEXT,
+      status          TEXT NOT NULL DEFAULT 'claimed',
+      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+      applied_at      TEXT
+    )
+  `);
+  await db.execute(`CREATE INDEX IF NOT EXISTS billing_credits_user_status ON billing_credits(user_id, status)`);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS admin_credit_adjustments (
+      reference   TEXT PRIMARY KEY,
+      user_id     INTEGER NOT NULL REFERENCES users(id),
+      direction   TEXT NOT NULL,
+      amount_mc   INTEGER NOT NULL,
+      reason      TEXT NOT NULL,
+      actor       TEXT NOT NULL,
+      status      TEXT NOT NULL DEFAULT 'applied',
+      created_at  TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at  TEXT
+    )
+  `);
+  await db.execute(`CREATE INDEX IF NOT EXISTS admin_credit_adjustments_user_created ON admin_credit_adjustments(user_id, created_at)`);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS admin_credit_adjustment_events (
+      id             INTEGER PRIMARY KEY AUTOINCREMENT,
+      reference      TEXT NOT NULL REFERENCES admin_credit_adjustments(reference),
+      seq            INTEGER NOT NULL,
+      kind           TEXT NOT NULL,
+      from_amount_mc INTEGER,
+      to_amount_mc   INTEGER,
+      from_reason    TEXT,
+      to_reason      TEXT,
+      moved_mc       INTEGER NOT NULL DEFAULT 0,
+      actor          TEXT NOT NULL,
+      created_at     TEXT NOT NULL DEFAULT (datetime('now')),
+      UNIQUE (reference, seq)
+    )
+  `);
+  await db.execute(`CREATE INDEX IF NOT EXISTS admin_credit_adjustment_events_reference ON admin_credit_adjustment_events(reference)`);
   await db.execute(`
     CREATE TABLE IF NOT EXISTS site_audit_jobs (
       id            TEXT    PRIMARY KEY,
@@ -5592,6 +5638,84 @@ async function creditMc(userId, mc, operation, description, stripePaymentIntent,
   const res = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
   return Number(res.rows[0]?.balance_mc ?? 0);
 }
+async function creditMcIdempotent(userId, mc, operation, description, idempotencyKey2, options) {
+  if (!Number.isSafeInteger(mc) || mc <= 0) throw new Error("idempotent credit amount must be a positive integer");
+  if (!idempotencyKey2 || idempotencyKey2.length > 500) throw new Error("idempotent credit key is required and must be bounded");
+  const db = getDb();
+  await ensureMigrated(userId);
+  let neverExpires = options?.neverExpires;
+  if (neverExpires === void 0) {
+    const tier = await db.execute({ sql: "SELECT subscription_tier FROM users WHERE id = ? LIMIT 1", args: [userId] });
+    neverExpires = String(tier.rows[0]?.subscription_tier ?? "").startsWith("sonic");
+  }
+  const expiry = neverExpires ? "9999-12-31 23:59:59" : null;
+  const readBalance = async () => {
+    const res = await db.execute({ sql: "SELECT balance_mc FROM users WHERE id = ?", args: [userId] });
+    return Number(res.rows[0]?.balance_mc ?? 0);
+  };
+  let results;
+  try {
+    results = await db.batch([
+      {
+        sql: "INSERT OR IGNORE INTO billing_credits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",
+        args: [idempotencyKey2, userId, mc, operation, description]
+      },
+      {
+        sql: "UPDATE billing_credits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed'",
+        args: [idempotencyKey2, userId, mc, operation, description]
+      },
+      {
+        sql: `INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, stripe_pi, expires_at, never_expires)
+              SELECT user_id, amount_mc, amount_mc, operation, NULL, COALESCE(?, datetime('now', ?)), ?
+              FROM billing_credits
+              WHERE idempotency_key = ? AND status = 'applying'`,
+        args: [expiry, CREDIT_LOT_TTL, neverExpires ? 1 : 0, idempotencyKey2]
+      },
+      {
+        sql: `UPDATE users
+              SET balance_mc = balance_mc + COALESCE((
+                SELECT amount_mc FROM billing_credits WHERE idempotency_key = ? AND status = 'applying'
+              ), 0)
+              WHERE id = ?`,
+        args: [idempotencyKey2, userId]
+      },
+      {
+        sql: "INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, amount_mc, operation, description FROM billing_credits WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey2]
+      },
+      {
+        sql: "UPDATE billing_credits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",
+        args: [idempotencyKey2]
+      }
+    ], "write");
+  } catch (error) {
+    try {
+      const recovered = await db.execute({
+        sql: "SELECT user_id, amount_mc, operation, description FROM billing_credits WHERE idempotency_key = ? AND status = 'applied' LIMIT 1",
+        args: [idempotencyKey2]
+      });
+      const row2 = recovered.rows[0];
+      if (row2 && Number(row2.user_id) === userId && Number(row2.amount_mc) === mc && String(row2.operation) === operation && String(row2.description) === description) {
+        return { ok: true, balance_mc: await readBalance(), duplicate: true };
+      }
+    } catch {
+    }
+    throw error;
+  }
+  const claim = await db.execute({
+    sql: "SELECT user_id, amount_mc, operation, description, status FROM billing_credits WHERE idempotency_key = ? LIMIT 1",
+    args: [idempotencyKey2]
+  });
+  const row = claim.rows[0];
+  if (!row || Number(row.user_id) !== userId || Number(row.amount_mc) !== mc || String(row.operation) !== operation || String(row.description) !== description) {
+    throw new Error("idempotent credit key conflicts with another credit");
+  }
+  return {
+    ok: String(row.status) === "applied",
+    balance_mc: await readBalance(),
+    duplicate: results[1]?.rowsAffected === 0 && String(row.status) === "applied"
+  };
+}
 async function ledgerExistsForOperation(userId, operation) {
   const res = await getDb().execute({
     sql: "SELECT 1 FROM ledger WHERE user_id = ? AND operation = ? LIMIT 1",
@@ -6138,9 +6262,12 @@ var init_db = __esm({
     DB_TOKEN = process.env.TURSO_AUTH_TOKEN;
     _db = null;
     _rateLimitSchemaReady = false;
-    CORE_SCHEMA_VERSION = "2026-07-24.2";
+    CORE_SCHEMA_VERSION = "2026-07-28.1";
     CORE_SCHEMA_TABLES = [
+      "admin_credit_adjustment_events",
+      "admin_credit_adjustments",
       "billing_authorizations",
+      "billing_credits",
       "billing_debits",
       "billing_debit_allocations",
       "billing_events",
@@ -6174,7 +6301,10 @@ var init_db = __esm({
       "workflow_webhook_deliveries"
     ];
     CORE_SCHEMA_INDEXES = [
+      "admin_credit_adjustment_events_reference",
+      "admin_credit_adjustments_user_created",
       "billing_authorizations_user_status",
+      "billing_credits_user_status",
       "billing_debits_user_status",
       "billing_events_authorization",
       "billing_events_user_created_at",
@@ -11196,7 +11326,9 @@ var init_rates = __esm({
       SITE_AUDIT_LLM: "site_audit_llm",
       SCHEDULED_RUN: "scheduled_run",
       CONNECTED_USAGE: "connected_usage",
-      CONNECTED_ACCOUNT_FEE: "connected_account_fee"
+      CONNECTED_ACCOUNT_FEE: "connected_account_fee",
+      ADMIN_GRANT: "admin_grant",
+      ADMIN_REVOKE: "admin_revoke"
     };
     MEMORY_AI_MARGIN_MULTIPLE = 3;
     SITE_AUDIT_LLM_MARGIN_MULTIPLE = 1.5;
@@ -28017,6 +28149,427 @@ var init_google_ads_routes = __esm({
   }
 });
 
+// src/api/admin-auth.ts
+var import_factory5, adminAuth;
+var init_admin_auth = __esm({
+  "src/api/admin-auth.ts"() {
+    "use strict";
+    import_factory5 = require("hono/factory");
+    adminAuth = (0, import_factory5.createMiddleware)(async (c, next) => {
+      const configured = process.env.ADMIN_KEY?.trim();
+      const key = c.req.header("x-admin-key")?.trim();
+      if (!configured) return c.json({ error: "Admin access disabled" }, 503);
+      if (!key || key !== configured) return c.json({ error: "Unauthorized" }, 401);
+      return next();
+    });
+  }
+});
+
+// src/api/admin-credits.ts
+function toCredits(mc) {
+  return mc / MC_PER_CREDIT;
+}
+function creditsToMc(credits) {
+  return Math.round(credits * MC_PER_CREDIT);
+}
+function validateCredits(credits, confirmLarge) {
+  if (typeof credits !== "number" || !Number.isFinite(credits) || !Number.isInteger(credits)) {
+    throw new AdminCreditError(400, "credits must be a whole number");
+  }
+  if (credits < MIN_ADJUSTMENT_CREDITS) {
+    throw new AdminCreditError(400, `credits must be at least ${MIN_ADJUSTMENT_CREDITS}`);
+  }
+  if (credits > MAX_ADJUSTMENT_CREDITS) {
+    throw new AdminCreditError(400, `credits exceeds the hard ceiling of ${MAX_ADJUSTMENT_CREDITS.toLocaleString()}`);
+  }
+  if (credits > LARGE_ADJUSTMENT_CREDITS && !confirmLarge) {
+    throw new AdminCreditError(422, `adjustments over ${LARGE_ADJUSTMENT_CREDITS.toLocaleString()} credits require confirmLarge: true`, {
+      credits,
+      threshold: LARGE_ADJUSTMENT_CREDITS
+    });
+  }
+  return credits;
+}
+function validateReason(reason) {
+  const trimmed = typeof reason === "string" ? reason.trim() : "";
+  if (trimmed.length < MIN_REASON_LENGTH) {
+    throw new AdminCreditError(400, `reason must be at least ${MIN_REASON_LENGTH} characters`);
+  }
+  if (trimmed.length > MAX_REASON_LENGTH) {
+    throw new AdminCreditError(400, `reason must be at most ${MAX_REASON_LENGTH} characters`);
+  }
+  return trimmed;
+}
+function validateActor(actor) {
+  const trimmed = typeof actor === "string" ? actor.trim() : "";
+  if (!trimmed) throw new AdminCreditError(400, "actor is required so the adjustment records who made it");
+  if (trimmed.length > MAX_ACTOR_LENGTH) {
+    throw new AdminCreditError(400, `actor must be at most ${MAX_ACTOR_LENGTH} characters`);
+  }
+  return trimmed;
+}
+function validateDirection(direction) {
+  if (direction !== "grant" && direction !== "revoke") {
+    throw new AdminCreditError(400, "direction must be either 'grant' or 'revoke'");
+  }
+  return direction;
+}
+async function resolveUser2(target) {
+  const email = target.email?.trim().toLowerCase();
+  if (!email && target.userId == null) {
+    throw new AdminCreditError(400, "Provide either email or userId");
+  }
+  const user = email ? await getUserByEmail(email) : await getUserById(target.userId);
+  if (user) return user;
+  const probe = await getDb().execute(
+    email ? { sql: "SELECT active FROM users WHERE email = ? LIMIT 1", args: [email] } : { sql: "SELECT active FROM users WHERE id = ? LIMIT 1", args: [target.userId] }
+  );
+  if (probe.rows.length > 0) {
+    throw new AdminCreditError(409, "Account is deactivated; reactivate it before adjusting credits");
+  }
+  throw new AdminCreditError(404, "No account found for that email or id");
+}
+async function moveCredits(userId, direction, mc, reason, key) {
+  if (direction === "grant") {
+    const res2 = await creditMcIdempotent(userId, mc, LedgerOperation.ADMIN_GRANT, reason, key);
+    if (!res2.ok) throw new AdminCreditError(409, "Grant could not be applied");
+    return;
+  }
+  const res = await debitMcIdempotent(userId, mc, LedgerOperation.ADMIN_REVOKE, reason, key);
+  if (!res.ok) {
+    const balance = await reconcileBalanceMc(userId);
+    throw new AdminCreditError(409, "Account does not have enough credits for this revoke", {
+      requested_credits: toCredits(mc),
+      available_credits: toCredits(balance)
+    });
+  }
+}
+function flip(direction) {
+  return direction === "grant" ? "revoke" : "grant";
+}
+async function loadAdjustment(reference) {
+  const db = getDb();
+  const res = await db.execute({
+    sql: `SELECT a.reference, a.user_id, a.direction, a.amount_mc, a.reason, a.actor, a.status, a.created_at, a.updated_at, u.email
+          FROM admin_credit_adjustments a JOIN users u ON u.id = a.user_id
+          WHERE a.reference = ? LIMIT 1`,
+    args: [reference]
+  });
+  const row = res.rows[0];
+  if (!row) throw new AdminCreditError(404, `No adjustment found with reference ${reference}`);
+  const events = await db.execute({
+    sql: `SELECT seq, kind, from_amount_mc, to_amount_mc, from_reason, to_reason, moved_mc, actor, created_at
+          FROM admin_credit_adjustment_events WHERE reference = ? ORDER BY seq ASC`,
+    args: [reference]
+  });
+  return {
+    reference: String(row.reference),
+    user_id: Number(row.user_id),
+    user_email: String(row.email),
+    direction: String(row.direction),
+    credits: toCredits(Number(row.amount_mc)),
+    amount_mc: Number(row.amount_mc),
+    reason: String(row.reason),
+    actor: String(row.actor),
+    status: String(row.status),
+    created_at: String(row.created_at),
+    updated_at: row.updated_at == null ? null : String(row.updated_at),
+    history: events.rows.map((e) => ({
+      seq: Number(e.seq),
+      kind: String(e.kind),
+      from_credits: e.from_amount_mc == null ? null : toCredits(Number(e.from_amount_mc)),
+      to_credits: e.to_amount_mc == null ? null : toCredits(Number(e.to_amount_mc)),
+      from_reason: e.from_reason == null ? null : String(e.from_reason),
+      to_reason: e.to_reason == null ? null : String(e.to_reason),
+      moved_credits: toCredits(Number(e.moved_mc ?? 0)),
+      actor: String(e.actor),
+      created_at: String(e.created_at)
+    }))
+  };
+}
+async function nextSeq(reference) {
+  const res = await getDb().execute({
+    sql: "SELECT COALESCE(MAX(seq), 0) AS max_seq FROM admin_credit_adjustment_events WHERE reference = ?",
+    args: [reference]
+  });
+  return Number(res.rows[0]?.max_seq ?? 0) + 1;
+}
+async function applyAdjustment(input) {
+  const direction = validateDirection(input.direction);
+  const credits = validateCredits(input.credits, input.confirmLarge === true);
+  const reason = validateReason(input.reason);
+  const actor = validateActor(input.actor);
+  const reference = input.reference?.trim() || `adj_${(0, import_node_crypto15.randomUUID)()}`;
+  if (reference.length > 120) throw new AdminCreditError(400, "reference must be at most 120 characters");
+  const db = getDb();
+  const existing = await db.execute({
+    sql: "SELECT reference, user_id, direction, amount_mc FROM admin_credit_adjustments WHERE reference = ? LIMIT 1",
+    args: [reference]
+  });
+  if (existing.rows.length > 0) {
+    const prior = existing.rows[0];
+    if (String(prior.direction) !== direction || Number(prior.amount_mc) !== creditsToMc(credits)) {
+      throw new AdminCreditError(409, "reference already exists with different values; use the edit endpoint to change it");
+    }
+    return loadAdjustment(reference);
+  }
+  const user = await resolveUser2({ email: input.email, userId: input.userId });
+  const mc = creditsToMc(credits);
+  await moveCredits(user.id, direction, mc, reason, `${reference}:1`);
+  await db.batch([
+    {
+      sql: `INSERT OR IGNORE INTO admin_credit_adjustments (reference, user_id, direction, amount_mc, reason, actor, status)
+            VALUES (?, ?, ?, ?, ?, ?, 'applied')`,
+      args: [reference, user.id, direction, mc, reason, actor]
+    },
+    {
+      sql: `INSERT OR IGNORE INTO admin_credit_adjustment_events (reference, seq, kind, from_amount_mc, to_amount_mc, from_reason, to_reason, moved_mc, actor)
+            VALUES (?, 1, 'created', NULL, ?, NULL, ?, ?, ?)`,
+      args: [reference, mc, reason, mc, actor]
+    }
+  ], "write");
+  return loadAdjustment(reference);
+}
+async function editAdjustment(input) {
+  const actor = validateActor(input.actor);
+  const current = await loadAdjustment(input.reference);
+  if (current.status === "reversed") {
+    throw new AdminCreditError(409, "This adjustment was reversed and can no longer be edited");
+  }
+  if (input.credits === void 0 && input.reason === void 0) {
+    throw new AdminCreditError(400, "Provide credits, reason, or both");
+  }
+  const db = getDb();
+  if (input.reason !== void 0) {
+    const reason = validateReason(input.reason);
+    if (reason !== current.reason) {
+      const seq = await nextSeq(current.reference);
+      await db.batch([
+        {
+          sql: "UPDATE admin_credit_adjustments SET reason = ?, updated_at = datetime('now') WHERE reference = ?",
+          args: [reason, current.reference]
+        },
+        {
+          sql: `INSERT INTO admin_credit_adjustment_events (reference, seq, kind, from_reason, to_reason, moved_mc, actor)
+                VALUES (?, ?, 'reason_edited', ?, ?, 0, ?)`,
+          args: [current.reference, seq, current.reason, reason, actor]
+        }
+      ], "write");
+    }
+  }
+  if (input.credits !== void 0) {
+    const credits = validateCredits(input.credits, input.confirmLarge === true);
+    const targetMc = creditsToMc(credits);
+    if (targetMc !== current.amount_mc) {
+      const deltaMc = targetMc - current.amount_mc;
+      const moveDirection = deltaMc > 0 ? current.direction : flip(current.direction);
+      const moveMc = Math.abs(deltaMc);
+      const seq = await nextSeq(current.reference);
+      const reason = input.reason !== void 0 ? validateReason(input.reason) : current.reason;
+      await moveCredits(current.user_id, moveDirection, moveMc, `edit ${current.reference}: ${reason}`, `${current.reference}:${seq}`);
+      await db.batch([
+        {
+          sql: "UPDATE admin_credit_adjustments SET amount_mc = ?, updated_at = datetime('now') WHERE reference = ?",
+          args: [targetMc, current.reference]
+        },
+        {
+          sql: `INSERT INTO admin_credit_adjustment_events (reference, seq, kind, from_amount_mc, to_amount_mc, moved_mc, actor)
+                VALUES (?, ?, 'amount_edited', ?, ?, ?, ?)`,
+          args: [current.reference, seq, current.amount_mc, targetMc, moveMc, actor]
+        }
+      ], "write");
+    }
+  }
+  return loadAdjustment(input.reference);
+}
+async function reverseAdjustment(reference, actor) {
+  const validActor = validateActor(actor);
+  const current = await loadAdjustment(reference);
+  if (current.status === "reversed") return current;
+  const seq = await nextSeq(reference);
+  if (current.amount_mc > 0) {
+    await moveCredits(current.user_id, flip(current.direction), current.amount_mc, `reverse ${reference}: ${current.reason}`, `${reference}:${seq}`);
+  }
+  await getDb().batch([
+    {
+      sql: "UPDATE admin_credit_adjustments SET status = 'reversed', updated_at = datetime('now') WHERE reference = ?",
+      args: [reference]
+    },
+    {
+      sql: `INSERT INTO admin_credit_adjustment_events (reference, seq, kind, from_amount_mc, to_amount_mc, moved_mc, actor)
+            VALUES (?, ?, 'reversed', ?, 0, ?, ?)`,
+      args: [reference, seq, current.amount_mc, current.amount_mc, validActor]
+    }
+  ], "write");
+  return loadAdjustment(reference);
+}
+async function lookupAccount(target, limit = 20) {
+  const user = await resolveUser2(target);
+  const db = getDb();
+  const balanceMc = await reconcileBalanceMc(user.id, user.balance_mc);
+  const lots = await db.execute({
+    sql: `SELECT COUNT(*) AS n, COALESCE(SUM(remaining_mc), 0) AS mc, MIN(expires_at) AS next_expiry
+          FROM credit_lots
+          WHERE user_id = ? AND remaining_mc > 0 AND (never_expires = 1 OR expires_at > datetime('now'))`,
+    args: [user.id]
+  });
+  const refs = await db.execute({
+    sql: "SELECT reference FROM admin_credit_adjustments WHERE user_id = ? ORDER BY created_at DESC, rowid DESC LIMIT ?",
+    args: [user.id, limit]
+  });
+  const adjustments = await Promise.all(refs.rows.map((r) => loadAdjustment(String(r.reference))));
+  const ledger = await db.execute({
+    sql: "SELECT created_at, operation, amount_mc, description FROM ledger WHERE user_id = ? ORDER BY id DESC LIMIT ?",
+    args: [user.id, limit]
+  });
+  return {
+    user: {
+      id: user.id,
+      email: user.email,
+      active: Boolean(user.active),
+      balance_credits: toCredits(balanceMc),
+      balance_mc: balanceMc
+    },
+    lots: {
+      active_lots: Number(lots.rows[0]?.n ?? 0),
+      active_credits: toCredits(Number(lots.rows[0]?.mc ?? 0)),
+      next_expiry: lots.rows[0]?.next_expiry == null ? null : String(lots.rows[0].next_expiry)
+    },
+    adjustments,
+    recent_ledger: ledger.rows.map((r) => ({
+      created_at: String(r.created_at),
+      operation: String(r.operation),
+      credits: toCredits(Number(r.amount_mc)),
+      description: r.description == null ? null : String(r.description)
+    }))
+  };
+}
+var import_node_crypto15, MIN_ADJUSTMENT_CREDITS, LARGE_ADJUSTMENT_CREDITS, MAX_ADJUSTMENT_CREDITS, MIN_REASON_LENGTH, MAX_REASON_LENGTH, MAX_ACTOR_LENGTH, AdminCreditError;
+var init_admin_credits = __esm({
+  "src/api/admin-credits.ts"() {
+    "use strict";
+    import_node_crypto15 = require("crypto");
+    init_db();
+    init_rates();
+    MIN_ADJUSTMENT_CREDITS = 1;
+    LARGE_ADJUSTMENT_CREDITS = 1e5;
+    MAX_ADJUSTMENT_CREDITS = 1e7;
+    MIN_REASON_LENGTH = 3;
+    MAX_REASON_LENGTH = 500;
+    MAX_ACTOR_LENGTH = 120;
+    AdminCreditError = class extends Error {
+      constructor(status, message, detail) {
+        super(message);
+        this.status = status;
+        this.detail = detail;
+        this.name = "AdminCreditError";
+      }
+      status;
+      detail;
+    };
+  }
+});
+
+// src/api/admin-credit-routes.ts
+function fail(c, err) {
+  if (err instanceof AdminCreditError) {
+    return c.json({ error: err.message, ...err.detail ?? {} }, err.status);
+  }
+  const message = err instanceof Error ? err.message : String(err);
+  if (message.includes("conflicts with another")) {
+    return c.json({ error: "A concurrent adjustment used the same key; re-read the account and retry" }, 409);
+  }
+  console.error("[admin/credits] unexpected failure:", message);
+  return c.json({ error: "Adjustment failed" }, 500);
+}
+async function readBody(c) {
+  try {
+    const parsed = await c.req.json();
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function targetFrom(query) {
+  const email = query.email?.trim();
+  const idRaw = query.userId?.trim();
+  const userId = idRaw ? Number(idRaw) : void 0;
+  if (userId !== void 0 && !Number.isInteger(userId)) {
+    throw new AdminCreditError(400, "userId must be an integer");
+  }
+  return { email: email || void 0, userId };
+}
+var import_hono9, adminCreditsApp;
+var init_admin_credit_routes = __esm({
+  "src/api/admin-credit-routes.ts"() {
+    "use strict";
+    import_hono9 = require("hono");
+    init_admin_auth();
+    init_admin_credits();
+    adminCreditsApp = new import_hono9.Hono();
+    adminCreditsApp.use("*", adminAuth);
+    adminCreditsApp.post("/adjust", async (c) => {
+      try {
+        const body = await readBody(c);
+        const record = await applyAdjustment({
+          email: typeof body.email === "string" ? body.email : void 0,
+          userId: typeof body.userId === "number" ? body.userId : void 0,
+          direction: body.direction,
+          credits: body.credits,
+          reason: body.reason,
+          actor: body.actor,
+          reference: typeof body.reference === "string" ? body.reference : void 0,
+          confirmLarge: body.confirmLarge === true
+        });
+        return c.json({ ok: true, adjustment: record });
+      } catch (err) {
+        return fail(c, err);
+      }
+    });
+    adminCreditsApp.post("/adjustments/:reference/edit", async (c) => {
+      try {
+        const body = await readBody(c);
+        const record = await editAdjustment({
+          reference: c.req.param("reference"),
+          credits: typeof body.credits === "number" ? body.credits : void 0,
+          reason: typeof body.reason === "string" ? body.reason : void 0,
+          actor: body.actor,
+          confirmLarge: body.confirmLarge === true
+        });
+        return c.json({ ok: true, adjustment: record });
+      } catch (err) {
+        return fail(c, err);
+      }
+    });
+    adminCreditsApp.post("/adjustments/:reference/reverse", async (c) => {
+      try {
+        const body = await readBody(c);
+        const record = await reverseAdjustment(c.req.param("reference"), body.actor);
+        return c.json({ ok: true, adjustment: record });
+      } catch (err) {
+        return fail(c, err);
+      }
+    });
+    adminCreditsApp.get("/adjustments/:reference", async (c) => {
+      try {
+        return c.json({ ok: true, adjustment: await loadAdjustment(c.req.param("reference")) });
+      } catch (err) {
+        return fail(c, err);
+      }
+    });
+    adminCreditsApp.get("/lookup", async (c) => {
+      try {
+        const target = targetFrom(c.req.query());
+        const limitRaw = c.req.query("limit");
+        const limit = limitRaw ? Math.min(Math.max(Number(limitRaw), 1), 100) : 20;
+        return c.json({ ok: true, ...await lookupAccount(target, limit) });
+      } catch (err) {
+        return fail(c, err);
+      }
+    });
+  }
+});
+
 // src/extractor/InstagramContentExtractor.ts
 function htmlDecode2(value) {
   return value.replace(/&amp;/g, "&").replace(/&quot;/g, '"').replace(/&#039;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
@@ -28470,11 +29023,11 @@ function trackFilename(track, index, shortcode) {
   const bitrate = track.bitrate ? `-${track.bitrate}` : "";
   return `${label}-${type}-${index}${bitrate}.mp4`;
 }
-var import_hono9, import_zod23, import_node_fs7, import_node_os8, import_node_path11, import_node_child_process2, InstagramProfileContentBodySchema, InstagramMediaTypeSchema, InstagramMediaDownloadBodySchema, instagramApp;
+var import_hono10, import_zod23, import_node_fs7, import_node_os8, import_node_path11, import_node_child_process2, InstagramProfileContentBodySchema, InstagramMediaTypeSchema, InstagramMediaDownloadBodySchema, instagramApp;
 var init_instagram_routes = __esm({
   "src/api/instagram-routes.ts"() {
     "use strict";
-    import_hono9 = require("hono");
+    import_hono10 = require("hono");
     import_zod23 = require("zod");
     import_node_fs7 = require("fs");
     import_node_os8 = require("os");
@@ -28515,7 +29068,7 @@ var init_instagram_routes = __esm({
       includeTranscript: import_zod23.z.boolean().default(false),
       mux: import_zod23.z.boolean().default(true)
     });
-    instagramApp = new import_hono9.Hono();
+    instagramApp = new import_hono10.Hono();
     instagramApp.post("/profile-content", createApiKeyAuth(), async (c) => {
       const raw = await c.req.json().catch(() => ({}));
       const parsed = InstagramProfileContentBodySchema.safeParse(raw);
@@ -30971,11 +31524,11 @@ async function scrapeOldRedditWithRetries(url, script, accept) {
   }
   return null;
 }
-var import_hono10, import_zod24, RedditThreadBodySchema, RedditTrendingBodySchema, PARSE_REDDIT, redditApp, TRENDING_SOFT_DEADLINE_MS, TRENDING_SCRAPE_CONCURRENCY;
+var import_hono11, import_zod24, RedditThreadBodySchema, RedditTrendingBodySchema, PARSE_REDDIT, redditApp, TRENDING_SOFT_DEADLINE_MS, TRENDING_SCRAPE_CONCURRENCY;
 var init_reddit_routes = __esm({
   "src/api/reddit-routes.ts"() {
     "use strict";
-    import_hono10 = require("hono");
+    import_hono11 = require("hono");
     import_zod24 = require("zod");
     init_backup_proxy();
     init_BrowserDriver();
@@ -31024,7 +31577,7 @@ var init_reddit_routes = __esm({
   });
   return { title: title, author: author, score: score, postBody: postBody, blocked: blocked, numComments: comments.length, comments: comments };
 })()`;
-    redditApp = new import_hono10.Hono();
+    redditApp = new import_hono11.Hono();
     redditApp.post("/thread", createApiKeyAuth(), async (c) => {
       const raw = await c.req.json().catch(() => ({}));
       const parsed = RedditThreadBodySchema.safeParse(raw);
@@ -31233,11 +31786,11 @@ function invalidRequest5(message) {
 function tiersFor(frames) {
   return Math.ceil(Math.min(Math.max(frames, 1), 480) / 120);
 }
-var import_hono11, import_zod25, videoApp, AnalyzeBodySchema;
+var import_hono12, import_zod25, videoApp, AnalyzeBodySchema;
 var init_video_routes = __esm({
   "src/api/video-routes.ts"() {
     "use strict";
-    import_hono11 = require("hono");
+    import_hono12 = require("hono");
     import_zod25 = require("zod");
     init_db();
     init_rates();
@@ -31245,7 +31798,7 @@ var init_video_routes = __esm({
     init_memory();
     init_cost_telemetry();
     init_cost_context();
-    videoApp = new import_hono11.Hono();
+    videoApp = new import_hono12.Hono();
     AnalyzeBodySchema = import_zod25.z.object({
       sourceUrl: import_zod25.z.string().trim().url("sourceUrl must be a direct video file URL"),
       intervalS: import_zod25.z.number().min(1).max(30).optional(),
@@ -32002,11 +32555,11 @@ function mapsErrorResponse(c, err, errorCode) {
     retryable
   }, retryable ? 503 : 500);
 }
-var import_hono12, mapsApp;
+var import_hono13, mapsApp;
 var init_maps_routes = __esm({
   "src/api/maps-routes.ts"() {
     "use strict";
-    import_hono12 = require("hono");
+    import_hono13 = require("hono");
     init_db();
     init_rates();
     init_MapsExtractor();
@@ -32017,7 +32570,7 @@ var init_maps_routes = __esm({
     init_browser_service_env();
     init_maps_search_rotation();
     init_concurrency_gates();
-    mapsApp = new import_hono12.Hono();
+    mapsApp = new import_hono13.Hono();
     mapsApp.post("/search", createApiKeyAuth(), async (c) => {
       const user = c.get("user");
       const body = await c.req.json().catch(() => ({}));
@@ -32221,11 +32774,11 @@ async function extractReviewCards(page) {
     });
   });
 }
-var import_hono13, import_zod27, TrustpilotReviewsBodySchema, trustpilotApp;
+var import_hono14, import_zod27, TrustpilotReviewsBodySchema, trustpilotApp;
 var init_trustpilot_routes = __esm({
   "src/api/trustpilot-routes.ts"() {
     "use strict";
-    import_hono13 = require("hono");
+    import_hono14 = require("hono");
     import_zod27 = require("zod");
     init_BrowserDriver();
     init_browser_service_env();
@@ -32237,7 +32790,7 @@ var init_trustpilot_routes = __esm({
       domain: import_zod27.z.string().trim().min(1, "domain is required"),
       maxPages: import_zod27.z.number().int().min(1).max(50).default(5)
     });
-    trustpilotApp = new import_hono13.Hono();
+    trustpilotApp = new import_hono14.Hono();
     trustpilotApp.post("/reviews", createApiKeyAuth(), async (c) => {
       const raw = await c.req.json().catch(() => ({}));
       const parsed = TrustpilotReviewsBodySchema.safeParse(raw);
@@ -32423,11 +32976,11 @@ async function extractG2ReviewCards(page) {
     });
   });
 }
-var import_hono14, import_zod28, G2ReviewsBodySchema, g2App;
+var import_hono15, import_zod28, G2ReviewsBodySchema, g2App;
 var init_g2_routes = __esm({
   "src/api/g2-routes.ts"() {
     "use strict";
-    import_hono14 = require("hono");
+    import_hono15 = require("hono");
     import_zod28 = require("zod");
     init_backup_proxy();
     init_BrowserDriver();
@@ -32441,7 +32994,7 @@ var init_g2_routes = __esm({
       product: import_zod28.z.string().trim().min(1, "product is required"),
       maxPages: import_zod28.z.number().int().min(1).max(50).default(5)
     });
-    g2App = new import_hono14.Hono();
+    g2App = new import_hono15.Hono();
     g2App.post("/reviews", createApiKeyAuth(), async (c) => {
       const raw = await c.req.json().catch(() => ({}));
       const parsed = G2ReviewsBodySchema.safeParse(raw);
@@ -32549,7 +33102,7 @@ function retryDelaySeconds(attempts) {
 }
 async function dispatchPendingDirectoryWorkflows(limit = 25) {
   const rows = await claimDirectoryWorkflowOutbox({
-    workerId: `directory-dispatch-${process.pid}-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`,
+    workerId: `directory-dispatch-${process.pid}-${(0, import_node_crypto16.randomUUID)().slice(0, 8)}`,
     limit
   });
   const result = { claimed: rows.length, dispatched: 0, failed: 0 };
@@ -32571,11 +33124,11 @@ async function dispatchPendingDirectoryWorkflows(limit = 25) {
   }
   return result;
 }
-var import_node_crypto15;
+var import_node_crypto16;
 var init_directory_workflow_dispatch = __esm({
   "src/api/directory-workflow-dispatch.ts"() {
     "use strict";
-    import_node_crypto15 = require("crypto");
+    import_node_crypto16 = require("crypto");
     init_client();
     init_directory_workflow_repository();
   }
@@ -32587,7 +33140,7 @@ function safeOptions(options) {
   return safe2;
 }
 function requestFingerprint(options) {
-  return (0, import_node_crypto16.createHash)("sha256").update(JSON.stringify(safeOptions(options))).digest("hex");
+  return (0, import_node_crypto17.createHash)("sha256").update(JSON.stringify(safeOptions(options))).digest("hex");
 }
 function idempotencyKey(raw) {
   if (raw !== void 0) {
@@ -32596,14 +33149,14 @@ function idempotencyKey(raw) {
     if (trimmed.length > 500) return { ok: false, message: "Idempotency-Key must be 500 characters or fewer." };
     return { ok: true, key: trimmed };
   }
-  return { ok: true, key: `directory-${(0, import_node_crypto16.randomUUID)()}` };
+  return { ok: true, key: `directory-${(0, import_node_crypto17.randomUUID)()}` };
 }
 function debitKeyFor(userId, responseKey) {
-  const digest = (0, import_node_crypto16.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
+  const digest = (0, import_node_crypto17.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
   return `directory-workflow:${userId}:${digest}`;
 }
 function jobId() {
-  return `dir_${(0, import_node_crypto16.randomUUID)().replace(/-/g, "")}`;
+  return `dir_${(0, import_node_crypto17.randomUUID)().replace(/-/g, "")}`;
 }
 function publicStatus(job, result) {
   if (job.status === "failed") return "failed";
@@ -32712,7 +33265,7 @@ async function runSynchronously(c, user, options, plan, responseKey) {
         const csv = renderDirectoryWorkflowCsv(result);
         const artifact = await createDirectoryCsvArtifact({
           ownerId: String(user.id),
-          jobId: (0, import_node_crypto16.createHash)("sha256").update(debitKey2).digest("hex").slice(0, 32),
+          jobId: (0, import_node_crypto17.createHash)("sha256").update(debitKey2).digest("hex").slice(0, 32),
           createdAt: result.extractedAt,
           filename: `${options.state}-${options.query}-directory.csv`,
           csv,
@@ -32768,12 +33321,12 @@ async function runSynchronously(c, user, options, plan, responseKey) {
     await releaseConcurrencyGate(gate.lockId);
   }
 }
-var import_node_crypto16, import_hono15, directoryApp;
+var import_node_crypto17, import_hono16, directoryApp;
 var init_directory_routes = __esm({
   "src/api/directory-routes.ts"() {
     "use strict";
-    import_node_crypto16 = require("crypto");
-    import_hono15 = require("hono");
+    import_node_crypto17 = require("crypto");
+    import_hono16 = require("hono");
     init_api_auth();
     init_db();
     init_rates();
@@ -32785,7 +33338,7 @@ var init_directory_routes = __esm({
     init_directory_workflow_repository();
     init_directory_artifacts();
     init_directory_workflow_dispatch();
-    directoryApp = new import_hono15.Hono();
+    directoryApp = new import_hono16.Hono();
     directoryApp.post("/run", createApiKeyAuth(), async (c) => {
       const user = c.get("user");
       const body = await c.req.json().catch(() => ({}));
@@ -32993,11 +33546,11 @@ async function readHostedLocationCsv(sourceUrl) {
   const bytes = await readResponseBodyWithLimit(response, LOCATION_IMPORT_MAX_BYTES);
   return bytes.toString("utf8");
 }
-var import_hono16, import_zod29, LOCATION_IMPORT_MAX_BYTES, LOCATION_IMPORT_TIMEOUT_MS, marketQuerySchema, importSchema, censusSyncSchema, locationDataApp;
+var import_hono17, import_zod29, LOCATION_IMPORT_MAX_BYTES, LOCATION_IMPORT_TIMEOUT_MS, marketQuerySchema, importSchema, censusSyncSchema, locationDataApp;
 var init_location_data_routes = __esm({
   "src/api/location-data-routes.ts"() {
     "use strict";
-    import_hono16 = require("hono");
+    import_hono17 = require("hono");
     import_zod29 = require("zod");
     init_api_auth();
     init_url_utils();
@@ -33022,7 +33575,7 @@ var init_location_data_routes = __esm({
       sourceUrl: import_zod29.z.string().url().max(2e3).optional()
     });
     censusSyncSchema = import_zod29.z.object({ state: import_zod29.z.string().trim().min(2).max(40) });
-    locationDataApp = new import_hono16.Hono();
+    locationDataApp = new import_hono17.Hono();
     locationDataApp.get("/markets", createApiKeyAuth(), async (c) => {
       const parsed = marketQuerySchema.safeParse(c.req.query());
       if (!parsed.success) {
@@ -35193,7 +35746,7 @@ async function readManifestFromSummary(summary) {
 function webhookSignature(body, timestamp2) {
   const secret2 = process.env.MCP_SCRAPER_WEBHOOK_SECRET?.trim();
   if (!secret2) return null;
-  return (0, import_node_crypto17.createHmac)("sha256", secret2).update(`${timestamp2}.${body}`).digest("hex");
+  return (0, import_node_crypto18.createHmac)("sha256", secret2).update(`${timestamp2}.${body}`).digest("hex");
 }
 async function deliverWorkflowWebhook(input) {
   if (!input.webhookUrl) return;
@@ -35400,13 +35953,13 @@ async function dispatchDueWorkflowSchedules(apiUrl, limit = 3) {
   }
   return { dispatched: results.length, results };
 }
-var import_node_crypto17, import_promises12, import_hono17, import_zod36, workflowApp, WorkflowInputSchema, WorkflowIdSchema, CadenceSchema, ScheduleStatusSchema, RunBodySchema, ScheduleCreateSchema, SchedulePatchSchema, TERMINAL_RUN_STATUSES;
+var import_node_crypto18, import_promises12, import_hono18, import_zod36, workflowApp, WorkflowInputSchema, WorkflowIdSchema, CadenceSchema, ScheduleStatusSchema, RunBodySchema, ScheduleCreateSchema, SchedulePatchSchema, TERMINAL_RUN_STATUSES;
 var init_workflow_routes = __esm({
   "src/api/workflow-routes.ts"() {
     "use strict";
-    import_node_crypto17 = require("crypto");
+    import_node_crypto18 = require("crypto");
     import_promises12 = require("fs/promises");
-    import_hono17 = require("hono");
+    import_hono18 = require("hono");
     import_zod36 = require("zod");
     init_artifact_writer();
     init_registry2();
@@ -35414,7 +35967,7 @@ var init_workflow_routes = __esm({
     init_db();
     init_url_utils();
     init_concurrency_gates();
-    workflowApp = new import_hono17.Hono();
+    workflowApp = new import_hono18.Hono();
     WorkflowInputSchema = import_zod36.z.record(import_zod36.z.unknown()).default({});
     WorkflowIdSchema = import_zod36.z.string().min(1);
     CadenceSchema = import_zod36.z.enum(["daily", "weekly", "monthly"]);
@@ -35685,7 +36238,7 @@ var init_workflow_routes = __esm({
 // src/serp-intelligence/page-snapshot-extractor.ts
 function sha256(value) {
   if (!value) return null;
-  return (0, import_node_crypto18.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto19.createHash)("sha256").update(value).digest("hex");
 }
 function countWords(markdown) {
   const matches = markdown.trim().match(/\b[\p{L}\p{N}][\p{L}\p{N}'-]*\b/gu);
@@ -35985,11 +36538,11 @@ async function capturePageSnapshots(targets, options = {}) {
     }
   };
 }
-var import_node_crypto18, import_p_limit5, DEFAULT_TIMEOUT_MS, DEFAULT_MAX_CONCURRENCY, DEFAULT_MAX_CONTENT_CHARS;
+var import_node_crypto19, import_p_limit5, DEFAULT_TIMEOUT_MS, DEFAULT_MAX_CONCURRENCY, DEFAULT_MAX_CONTENT_CHARS;
 var init_page_snapshot_extractor = __esm({
   "src/serp-intelligence/page-snapshot-extractor.ts"() {
     "use strict";
-    import_node_crypto18 = require("crypto");
+    import_node_crypto19 = require("crypto");
     import_p_limit5 = __toESM(require("p-limit"), 1);
     init_kpo_extractor();
     init_url_utils();
@@ -36596,21 +37149,21 @@ async function logRequestEventBestEffort(input) {
   }
 }
 function captureBillingKeys(userId, suppliedKey, body) {
-  const responseKey = suppliedKey?.trim() || (0, import_node_crypto19.randomUUID)();
-  const requestFingerprint2 = (0, import_node_crypto19.createHash)("sha256").update(JSON.stringify(body)).digest("hex");
-  const keyDigest = (0, import_node_crypto19.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
+  const responseKey = suppliedKey?.trim() || (0, import_node_crypto20.randomUUID)();
+  const requestFingerprint2 = (0, import_node_crypto20.createHash)("sha256").update(JSON.stringify(body)).digest("hex");
+  const keyDigest = (0, import_node_crypto20.createHash)("sha256").update(String(userId)).update("\0").update(responseKey).digest("hex");
   return {
     responseKey,
     debitKey: `serp-capture:${userId}:${keyDigest}`,
     debitDescription: `${body.query} [request:${requestFingerprint2}]`
   };
 }
-var import_hono18, import_node_crypto19, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, SERP_CAPTURE_BILLING_SOURCE, serpIntelligenceApp;
+var import_hono19, import_node_crypto20, SERP_INTELLIGENCE_RATE_LIMIT, SERP_INTELLIGENCE_RATE_WINDOW_SECONDS, POST_CAPTURE_ROUTE_LABEL, POST_PAGE_SNAPSHOTS_ROUTE_LABEL, SERP_CAPTURE_BILLING_SOURCE, serpIntelligenceApp;
 var init_serp_intelligence_routes = __esm({
   "src/api/serp-intelligence-routes.ts"() {
     "use strict";
-    import_hono18 = require("hono");
-    import_node_crypto19 = require("crypto");
+    import_hono19 = require("hono");
+    import_node_crypto20 = require("crypto");
     init_browser_service_env();
     init_page_snapshot_extractor();
     init_serp_capture_service();
@@ -36625,7 +37178,7 @@ var init_serp_intelligence_routes = __esm({
     POST_CAPTURE_ROUTE_LABEL = "POST /capture";
     POST_PAGE_SNAPSHOTS_ROUTE_LABEL = "POST /page-snapshots";
     SERP_CAPTURE_BILLING_SOURCE = "serp_intelligence_capture";
-    serpIntelligenceApp = new import_hono18.Hono();
+    serpIntelligenceApp = new import_hono19.Hono();
     serpIntelligenceApp.use("*", createApiKeyAuth());
     serpIntelligenceApp.post("/capture", async (c) => {
       void POST_CAPTURE_ROUTE_LABEL;
@@ -36847,7 +37400,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.36.0";
+    PACKAGE_VERSION = "0.37.0";
   }
 });
 
@@ -39372,7 +39925,7 @@ var init_rank_tracker_blueprint = __esm({
 
 // src/mcp/paa-mcp-server.ts
 function hashOwnerId(callerKey) {
-  return (0, import_node_crypto20.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto21.createHash)("sha256").update(callerKey).digest("hex").slice(0, 24);
 }
 function liveWebToolAnnotations(title) {
   return {
@@ -39865,14 +40418,14 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
     annotations: { title: "Set Scheduled Action Connections", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   }, async (input) => executor.setScheduledActionConnections(input));
 }
-var import_mcp, import_node_fs10, import_node_path14, import_node_crypto20;
+var import_mcp, import_node_fs10, import_node_path14, import_node_crypto21;
 var init_paa_mcp_server = __esm({
   "src/mcp/paa-mcp-server.ts"() {
     "use strict";
     import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
     import_node_fs10 = require("fs");
     import_node_path14 = require("path");
-    import_node_crypto20 = require("crypto");
+    import_node_crypto21 = require("crypto");
     init_version();
     init_mcp_response_formatter();
     init_server_instructions();
@@ -39942,11 +40495,11 @@ function withDefaultHostedProfile(input) {
     ...typeof saveProfileChanges === "boolean" ? { saveProfileChanges } : {}
   };
 }
-var import_node_crypto21, HttpMcpToolExecutor;
+var import_node_crypto22, HttpMcpToolExecutor;
 var init_http_mcp_tool_executor = __esm({
   "src/mcp/http-mcp-tool-executor.ts"() {
     "use strict";
-    import_node_crypto21 = require("crypto");
+    import_node_crypto22 = require("crypto");
     init_harvest_timeout();
     init_browser_service_env();
     HttpMcpToolExecutor = class {
@@ -40006,13 +40559,13 @@ var init_http_mcp_tool_executor = __esm({
         }
       }
       async callConnectedMutation(path6, body, timeoutMs = this.timeoutMs) {
-        const fingerprint = (0, import_node_crypto21.createHash)("sha256").update("POST").update("\0").update(path6).update("\0").update(JSON.stringify(body)).digest("hex");
+        const fingerprint = (0, import_node_crypto22.createHash)("sha256").update("POST").update("\0").update(path6).update("\0").update(JSON.stringify(body)).digest("hex");
         const now = Date.now();
         for (const [pendingFingerprint, pendingEntry] of this.pendingConnectedMutationKeys) {
           if (pendingEntry.expiresAt <= now) this.pendingConnectedMutationKeys.delete(pendingFingerprint);
         }
         const pending = this.pendingConnectedMutationKeys.get(fingerprint);
-        const idempotencyKey2 = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto21.randomUUID)();
+        const idempotencyKey2 = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto22.randomUUID)();
         this.pendingConnectedMutationKeys.set(fingerprint, {
           key: idempotencyKey2,
           expiresAt: now + 15 * 6e4
@@ -40026,13 +40579,13 @@ var init_http_mcp_tool_executor = __esm({
         return result;
       }
       async callDirectoryWorkflowStart(body, explicitIdempotencyKey) {
-        const idempotencyKey2 = `mcp-directory-${(0, import_node_crypto21.createHash)("sha256").update(explicitIdempotencyKey).digest("hex")}`;
+        const idempotencyKey2 = `mcp-directory-${(0, import_node_crypto22.createHash)("sha256").update(explicitIdempotencyKey).digest("hex")}`;
         return this.call("/directory/run", body, this.timeoutMs, "POST", {
           "Idempotency-Key": idempotencyKey2
         });
       }
       async callSiteExtractStart(toolName, body, explicitIdempotencyKey) {
-        const idempotencyKey2 = `mcp-site-${(0, import_node_crypto21.createHash)("sha256").update(toolName).update("\0").update(explicitIdempotencyKey).digest("hex")}`;
+        const idempotencyKey2 = `mcp-site-${(0, import_node_crypto22.createHash)("sha256").update(toolName).update("\0").update(explicitIdempotencyKey).digest("hex")}`;
         return this.call("/extract-site", body, this.timeoutMs, "POST", {
           "Idempotency-Key": idempotencyKey2
         });
@@ -40293,13 +40846,13 @@ var init_http_mcp_tool_executor = __esm({
         }, void 0, "PUT");
       }
       async captureSerpSnapshot(input) {
-        const fingerprint = (0, import_node_crypto21.createHash)("sha256").update(JSON.stringify(input)).digest("hex");
+        const fingerprint = (0, import_node_crypto22.createHash)("sha256").update(JSON.stringify(input)).digest("hex");
         const now = Date.now();
         for (const [pendingFingerprint, pendingEntry] of this.pendingSerpCaptureBillingKeys) {
           if (pendingEntry.expiresAt <= now) this.pendingSerpCaptureBillingKeys.delete(pendingFingerprint);
         }
         const pending = this.pendingSerpCaptureBillingKeys.get(fingerprint);
-        const idempotencyKey2 = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto21.randomUUID)();
+        const idempotencyKey2 = pending && pending.expiresAt > now ? pending.key : (0, import_node_crypto22.randomUUID)();
         this.pendingSerpCaptureBillingKeys.set(fingerprint, {
           key: idempotencyKey2,
           expiresAt: now + 15 * 6e4
@@ -41930,7 +42483,7 @@ var init_browser_agent_mcp_server = __esm({
 });
 
 // src/mcp/memory-tool-schemas.ts
-var import_zod40, AcceptShareSchema, ApproveSenderSchema, DeclineShareSchema, GetChatLinkSchema, GetVaultAppLinkSchema, InboxSettingsSchema, InviteAccountSchema, issueKeyTool_scopeShape, IssueKeySchema, ListApprovedSendersSchema, ListKeysSchema, NoteInboxSchema, RemoveApprovedSenderSchema, RevokeChatLinkSchema, RevokeKeySchema, RevokeShareSchema, RevokeVaultAppLinkSchema, SetAgentIdentitySchema, SetScopeSchema, ShareNoteSchema, ShareVaultSchema, SwapVaultSchema, SwitchAccountSchema, UnlinkShareSchema, memoryCaptureTool_notePropsSchema, MemoryCaptureSchema, MemoryQuestionsSchema, PrepareMemoryWriteSchema, validateMemoryWriteTool_notePropsSchema, ValidateMemoryWriteSchema, CreateChannelSchema, GetMessageNoteSchema, ListChannelMembersSchema, ListChannelMessagesSchema, MyMentionsSchema, PollChannelSchema, PostMessageSchema, ReactMessageSchema, RemoveChannelMemberSchema, ReplyMessageSchema, factHistoryTool_entryShape, FactHistorySchema, recordFactTool_factShape, RecordFactSchema, NoteBacklinksSchema, GraphPathSchema, GraphUniverseSchema, LibraryIngestSchema, bulkDeleteNotesTool_FilterSchema, BulkDeleteNotesSchema, DeleteNoteSchema, ExportSchema, getTool_notePropsSchema, GetSchema, ListSchema, putTool_notePropsSchema, PutSchema, searchTool_primitiveValue, SearchSchema, SuggestSchema, UploadSchema, TemporalRecallSchema, CreateScheduledActionSchema, DeleteScheduledActionSchema, GetScheduleLinkSchema, GetScheduleStatusSchema, ListScheduledActionsSchema, PauseScheduledActionSchema, ProposeScheduledActionSchema, ResumeScheduledActionSchema, RevokeScheduleLinkSchema, SetScheduleDefaultsSchema, SetScheduleEntitlementSchema, CostUsageSchema, StorageUsageSchema, CreateTableSchema, deleteTableRowsTool_FilterSchema, DeleteTableRowsSchema, DescribeTableSchema, DropTableSchema, InsertTableRowsSchema, ListTablesSchema, queryTableTool_FilterSchema, QueryTableSchema, ListTagsSchema, ResolveTagsSchema, UpsertTagSchema, AddVaultSchema, CreateSecureVaultSchema, DeleteVaultSchema, GetVaultContractSchema, ListSharedWithMeSchema, ListVaultsSchema, ProvisionDefaultsSchema, RouteMemorySchema, VideoAnalyzeStartSchema, VideoAnalyzeStatusSchema, CreateWebhookSchema, ListWebhooksSchema, RevokeWebhookSchema, MEMORY_TOOL_SCHEMAS;
+var import_zod40, AcceptShareSchema, ApproveSenderSchema, DeclineShareSchema, GetChatLinkSchema, GetVaultAppLinkSchema, InboxSettingsSchema, InviteAccountSchema, issueKeyTool_scopeShape, IssueKeySchema, ListApprovedSendersSchema, ListKeysSchema, NoteInboxSchema, RemoveApprovedSenderSchema, RevokeChatLinkSchema, RevokeKeySchema, RevokeShareSchema, RevokeVaultAppLinkSchema, SetAgentIdentitySchema, SetScopeSchema, ShareNoteSchema, ShareVaultSchema, SwapVaultSchema, SwitchAccountSchema, UnlinkShareSchema, memoryCaptureTool_notePropsSchema, MemoryCaptureSchema, MemoryQuestionsSchema, PrepareMemoryWriteSchema, validateMemoryWriteTool_notePropsSchema, ValidateMemoryWriteSchema, CreateChannelSchema, GetMessageNoteSchema, ListChannelMembersSchema, ListChannelMessagesSchema, MyMentionsSchema, PollChannelSchema, PostMessageSchema, ReactMessageSchema, RemoveChannelMemberSchema, ReplyMessageSchema, factHistoryTool_entryShape, FactHistorySchema, recordFactTool_factShape, RecordFactSchema, NoteBacklinksSchema, GraphPathSchema, GraphUniverseSchema, LibraryIngestSchema, bulkDeleteNotesTool_FilterSchema, BulkDeleteNotesSchema, DeleteNoteSchema, ExportSchema, getTool_notePropsSchema, GetSchema, ListSchema, putTool_notePropsSchema, PutSchema, searchTool_primitiveValue, SearchSchema, SuggestSchema, UploadSchema, TemporalRecallSchema, CreateScheduledActionSchema, DeleteScheduledActionSchema, GetScheduleLinkSchema, GetScheduleStatusSchema, ListScheduledActionsSchema, PauseScheduledActionSchema, ProposeScheduledActionSchema, ResumeScheduledActionSchema, RevokeScheduleLinkSchema, SetScheduleDefaultsSchema, SetScheduleEntitlementSchema, CostUsageSchema, StorageUsageSchema, CreateTableSchema, deleteTableRowsTool_FilterSchema, DeleteTableRowsSchema, DescribeTableSchema, DropTableSchema, InsertTableRowsSchema, ListTablesSchema, queryTableTool_FilterSchema, QueryTableSchema, ListTagsSchema, MergeTagsSchema, ResolveTagsSchema, UpsertTagSchema, AddVaultSchema, CreateSecureVaultSchema, DeleteVaultSchema, GetVaultContractSchema, ListSharedWithMeSchema, ListVaultsSchema, ProvisionDefaultsSchema, RouteMemorySchema, VideoAnalyzeStartSchema, VideoAnalyzeStatusSchema, CreateWebhookSchema, ListWebhooksSchema, RevokeWebhookSchema, MEMORY_TOOL_SCHEMAS;
 var init_memory_tool_schemas = __esm({
   "src/mcp/memory-tool-schemas.ts"() {
     "use strict";
@@ -42508,14 +43061,20 @@ var init_memory_tool_schemas = __esm({
         content: import_zod40.z.string().min(1),
         props: memoryCaptureTool_notePropsSchema,
         baseRevision: import_zod40.z.number().optional(),
-        tagDecisions: import_zod40.z.array(import_zod40.z.object({ tag: import_zod40.z.string().min(1), central: import_zod40.z.boolean(), reusable: import_zod40.z.boolean(), description: import_zod40.z.string().optional() })).max(8).optional().describe("Required justification for any tag that does not already exist. Existing exact/alias/near tags are canonicalized automatically; a new tag is accepted only when its matching decision has central=true and reusable=true.")
+        tagDecisions: import_zod40.z.array(import_zod40.z.object({ tag: import_zod40.z.string().min(1), central: import_zod40.z.boolean(), reusable: import_zod40.z.boolean(), description: import_zod40.z.string().optional(), acceptCanonical: import_zod40.z.string().optional().describe("Reuse this existing tag instead of the proposed one, confirming a candidate returned by an earlier review. The proposed spelling is recorded as its alias.") })).max(8).optional().describe("Required justification for any tag that does not already exist. Tags resolve against the account's existing vocabulary; new tags require a one-line description.")
       },
       output: {
         ok: import_zod40.z.boolean(),
         valid: import_zod40.z.boolean().optional(),
         errors: import_zod40.z.array(import_zod40.z.string()).optional(),
         warnings: import_zod40.z.array(import_zod40.z.string()).optional(),
-        tagResolutions: import_zod40.z.array(import_zod40.z.object({ candidate: import_zod40.z.string(), action: import_zod40.z.enum(["reuse", "create", "omit"]), tag: import_zod40.z.string().optional(), reason: import_zod40.z.string() })).optional(),
+        tagResolutions: import_zod40.z.array(import_zod40.z.object({
+          candidate: import_zod40.z.string(),
+          action: import_zod40.z.enum(["reuse", "review", "create", "omit"]),
+          tag: import_zod40.z.string().optional(),
+          candidates: import_zod40.z.array(import_zod40.z.object({ tag: import_zod40.z.string(), matchedVia: import_zod40.z.string(), score: import_zod40.z.number(), description: import_zod40.z.string().nullable() })).optional(),
+          reason: import_zod40.z.string()
+        })).optional(),
         note: import_zod40.z.object({ path: import_zod40.z.string(), title: import_zod40.z.string(), updatedAt: import_zod40.z.string(), revision: import_zod40.z.number() }).optional(),
         indexed: import_zod40.z.number().optional(),
         verified: import_zod40.z.object({ contentBytes: import_zod40.z.number(), propsPersisted: import_zod40.z.boolean(), revision: import_zod40.z.number() }).optional(),
@@ -43027,7 +43586,8 @@ var init_memory_tool_schemas = __esm({
         source: import_zod40.z.string().min(1).describe("Provenance of the content, e.g. a URL or tool name. Must be non-empty."),
         capturedAt: import_zod40.z.string().optional().describe("ISO-8601 capture timestamp. Optional; defaults to now. Also seeds the deterministic storage path."),
         summary: import_zod40.z.string().optional().describe("Retrieval-ready source summary. Optional; a provenance summary is generated when omitted."),
-        tags: import_zod40.z.array(import_zod40.z.string()).max(8).optional().describe("Reviewed canonical tags. Existing tags should be resolved first; when omitted, deterministic source/topic tags are generated."),
+        tags: import_zod40.z.array(import_zod40.z.string()).max(8).optional().describe("Reviewed canonical tags. Tags resolve against the account's existing vocabulary; new tags require a one-line description. When omitted, only deterministic source-provenance tags are recorded."),
+        tagDescriptions: import_zod40.z.record(import_zod40.z.string()).optional().describe("One-line meaning for any supplied tag that is new to the account, keyed by tag."),
         related: import_zod40.z.array(import_zod40.z.string()).optional().describe("Reviewed same-vault Library note paths."),
         relatedVaultNotes: import_zod40.z.array(import_zod40.z.string()).optional().describe("Reviewed cross-vault references in Vault::path.md form."),
         localVaultPath: import_zod40.z.string().optional().describe("Filesystem root to also mirror the item to. Optional; falls back to MEMORY_LOCAL_VAULT_ROOT env when set.")
@@ -43274,7 +43834,8 @@ var init_memory_tool_schemas = __esm({
         title: import_zod40.z.string().optional().describe("Optional human-readable title; defaults are derived from the path when omitted."),
         content: import_zod40.z.string().min(1).describe("The full note body to store and index for semantic search. Must be non-empty."),
         props: putTool_notePropsSchema.optional().describe("Obsidian note primitives plus vault-specific template fields. On edits, supplied fields patch the stored props instead of replacing the whole object; pass an empty array to deliberately clear a link list. Type/domain/folder also steer routing when no vault is given."),
-        baseRevision: import_zod40.z.number().optional().describe("Revision the edit is based on (from a prior get/put). When provided, the write only applies if the note is still at this revision; otherwise it is rejected as a conflict instead of silently overwriting a concurrent edit. Omit for last-write-wins (fine for solo notes).")
+        baseRevision: import_zod40.z.number().optional().describe("Revision the edit is based on (from a prior get/put). When provided, the write only applies if the note is still at this revision; otherwise it is rejected as a conflict instead of silently overwriting a concurrent edit. Omit for last-write-wins (fine for solo notes)."),
+        tagDescriptions: import_zod40.z.record(import_zod40.z.string()).optional().describe("One-line meaning for any tag in props.tags that is new to the account, keyed by tag. Tags resolve against the account's existing vocabulary; new tags require a one-line description.")
       },
       output: {
         ok: import_zod40.z.boolean().describe("True when the note was stored; false on auth/scope error, empty content, or a revision conflict."),
@@ -43953,16 +44514,51 @@ var init_memory_tool_schemas = __esm({
       },
       annotations: { title: "List Memory Tags", readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
     };
+    MergeTagsSchema = {
+      id: "merge-memory-tags",
+      upstreamName: "mergeTagsTool",
+      description: 'Collapse a duplicate tag into the canonical one across the whole account: every note using "from" is retagged to "into", "from" is recorded as an alias of "into", and the duplicate is removed from the vocabulary. Use when list-memory-tags shows two spellings of one concept. Irreversible; requires write scope.',
+      input: {
+        from: import_zod40.z.string().min(1).describe("The duplicate tag to retire."),
+        into: import_zod40.z.string().min(1).describe('The canonical tag to keep. Every note using "from" is retagged to this.')
+      },
+      output: {
+        ok: import_zod40.z.boolean(),
+        from: import_zod40.z.string().optional(),
+        into: import_zod40.z.string().optional(),
+        notesRetagged: import_zod40.z.number().optional(),
+        aliases: import_zod40.z.array(import_zod40.z.string()).optional(),
+        descriptionCopied: import_zod40.z.boolean().optional(),
+        error: import_zod40.z.string().optional()
+      },
+      annotations: { title: "Merge Memory Tags", readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
+    };
     ResolveTagsSchema = {
       id: "resolve-memory-tags",
       upstreamName: "resolveTagsTool",
-      description: "Resolve proposed concepts against the live tag vocabulary. Always inspect the complete vocabulary with list-memory-tags first. Returns reuse, create, or omit; a new tag is appropriate only when no equivalent exists and the concept is central and reusable.",
+      description: "Resolve proposed concepts against the live tag vocabulary. Always inspect the complete vocabulary with list-memory-tags first. Returns reuse, review, create, or omit: spelling and singular/plural variants resolve to the canonical tag silently, while close and semantically related tags come back as ranked candidates for you to choose from. A new tag is appropriate only when no equivalent exists and the concept is central and reusable.",
       input: {
-        candidates: import_zod40.z.array(import_zod40.z.object({ tag: import_zod40.z.string().min(1), central: import_zod40.z.boolean().optional(), reusable: import_zod40.z.boolean().optional(), description: import_zod40.z.string().optional() })).min(1).max(20)
+        candidates: import_zod40.z.array(import_zod40.z.object({ tag: import_zod40.z.string().min(1), central: import_zod40.z.boolean().optional(), reusable: import_zod40.z.boolean().optional(), description: import_zod40.z.string().optional() })).min(1).max(20),
+        accept: import_zod40.z.record(import_zod40.z.string()).optional().describe("Confirm a candidate returned by an earlier review, as {proposedTag: canonicalTag}. The proposed spelling is recorded as an alias of the canonical tag so the same judgement is never re-litigated.")
       },
       output: {
         ok: import_zod40.z.boolean(),
-        resolutions: import_zod40.z.array(import_zod40.z.object({ candidate: import_zod40.z.string(), normalized: import_zod40.z.string(), action: import_zod40.z.enum(["reuse", "create", "omit"]), tag: import_zod40.z.string().optional(), matchedBy: import_zod40.z.enum(["exact", "alias", "near"]).optional(), score: import_zod40.z.number().optional(), reason: import_zod40.z.string() })).optional(),
+        resolutions: import_zod40.z.array(import_zod40.z.object({
+          candidate: import_zod40.z.string(),
+          normalized: import_zod40.z.string(),
+          action: import_zod40.z.enum(["reuse", "review", "create", "omit"]),
+          tag: import_zod40.z.string().optional(),
+          matchedBy: import_zod40.z.enum(["exact", "alias", "near"]).optional(),
+          matchedVia: import_zod40.z.enum(["key", "alias", "stem", "trigram", "embedding"]).optional(),
+          score: import_zod40.z.number().optional(),
+          candidates: import_zod40.z.array(import_zod40.z.object({
+            tag: import_zod40.z.string(),
+            matchedVia: import_zod40.z.enum(["key", "alias", "stem", "trigram", "embedding"]),
+            score: import_zod40.z.number(),
+            description: import_zod40.z.string().nullable()
+          })).optional().describe("Ranked existing tags to choose from when action is review. Nothing is merged automatically."),
+          reason: import_zod40.z.string()
+        })).optional(),
         error: import_zod40.z.string().optional()
       },
       annotations: { title: "Resolve Memory Tags", readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
@@ -44345,6 +44941,7 @@ var init_memory_tool_schemas = __esm({
       ListTablesSchema,
       QueryTableSchema,
       ListTagsSchema,
+      MergeTagsSchema,
       ResolveTagsSchema,
       UpsertTagSchema,
       AddVaultSchema,
@@ -44811,8 +45408,12 @@ function registerWriteCutovers() {
     const result = await import_upsert_tag.upsertTagTool.execute({ ...input, apiKey }, {});
     return { content: [{ type: "text", text: JSON.stringify(result ?? {}) }], structuredContent: result ?? {}, isError: false };
   });
+  registerCutover("mergeTagsTool", async (input, apiKey) => {
+    const result = await import_merge_tags.mergeTagsTool.execute({ ...input, apiKey }, {});
+    return { content: [{ type: "text", text: JSON.stringify(result ?? {}) }], structuredContent: result ?? {}, isError: false };
+  });
 }
-var import_accept_share, import_approve_sender, import_decline_share, import_inbox_settings, import_remove_approved_sender, import_revoke_share, import_set_agent_identity, import_share_note, import_share_vault, import_swap_vault, import_switch_account, import_unlink_share, import_memory_questions, import_create_channel, import_list_channel_messages, import_poll_channel, import_post_message, import_react_message, import_remove_channel_member, import_reply_message, import_record_fact, import_library_ingest, import_delete_note, import_put, import_upload, import_delete_scheduled_action, import_pause_scheduled_action, import_resume_scheduled_action, import_table_create, import_table_delete_rows, import_table_drop, import_table_insert_rows, import_add_vault, import_delete_vault, import_memory_capture, import_upsert_tag, registered2;
+var import_accept_share, import_approve_sender, import_decline_share, import_inbox_settings, import_remove_approved_sender, import_revoke_share, import_set_agent_identity, import_share_note, import_share_vault, import_swap_vault, import_switch_account, import_unlink_share, import_memory_questions, import_create_channel, import_list_channel_messages, import_poll_channel, import_post_message, import_react_message, import_remove_channel_member, import_reply_message, import_record_fact, import_library_ingest, import_delete_note, import_put, import_upload, import_delete_scheduled_action, import_pause_scheduled_action, import_resume_scheduled_action, import_table_create, import_table_delete_rows, import_table_drop, import_table_insert_rows, import_add_vault, import_delete_vault, import_memory_capture, import_upsert_tag, import_merge_tags, registered2;
 var init_writes = __esm({
   "src/mcp/memory-cutover/writes.ts"() {
     "use strict";
@@ -44853,6 +45454,7 @@ var init_writes = __esm({
     import_delete_vault = require("mcpscraper-memory-tools/tools/vaults/delete-vault");
     import_memory_capture = require("mcpscraper-memory-tools/tools/capture/memory-capture");
     import_upsert_tag = require("mcpscraper-memory-tools/tools/tags/upsert-tag");
+    import_merge_tags = require("mcpscraper-memory-tools/tools/tags/merge-tags");
     registered2 = false;
   }
 });
@@ -45085,11 +45687,11 @@ async function requireMcpCallerKey(c) {
   if (!user) return mcpAuthError();
   return { key: callerKey, user };
 }
-var import_hono19, import_webStandardStreamableHttp, mcpApp;
+var import_hono20, import_webStandardStreamableHttp, mcpApp;
 var init_mcp_routes = __esm({
   "src/mcp/mcp-routes.ts"() {
     "use strict";
-    import_hono19 = require("hono");
+    import_hono20 = require("hono");
     import_webStandardStreamableHttp = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
     init_paa_mcp_server();
     init_http_mcp_tool_executor();
@@ -45111,7 +45713,7 @@ var init_mcp_routes = __esm({
     registerCrossServiceCutovers();
     registerVideoCutovers();
     configureReportSaving(false);
-    mcpApp = new import_hono19.Hono();
+    mcpApp = new import_hono20.Hono();
     mcpApp.all("/", async (c) => {
       try {
         const keyOrError = await requireMcpCallerKey(c);
@@ -45267,7 +45869,7 @@ async function runBrowserAgentMigration() {
 }
 async function createExtensionRow(input) {
   const db = getDb();
-  const id = `bext_${(0, import_node_crypto22.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bext_${(0, import_node_crypto23.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_extensions (id, user_id, name, backend_id, backend_name, source, source_url, size_bytes)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
@@ -45302,7 +45904,7 @@ async function deleteExtensionRow(userId, name) {
 }
 async function createAuthConnectionRow(input) {
   const db = getDb();
-  const connectionId = `authc_${(0, import_node_crypto22.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const connectionId = `authc_${(0, import_node_crypto23.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_auth_connections (connection_id, domain, profile, account_email, note, status, browser_agent_session_id)
           VALUES (?, ?, ?, ?, ?, 'NEEDS_AUTH', ?)`,
@@ -45387,7 +45989,7 @@ async function deleteProfileLabel(userId, profile) {
 }
 async function createSessionRow(input) {
   const db = getDb();
-  const id = `bas_${(0, import_node_crypto22.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  const id = `bas_${(0, import_node_crypto23.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
   await db.execute({
     sql: `INSERT INTO browser_agent_sessions (id, runtime_session_id, live_view_url, cdp_ws_url, status, label, user_id, concurrency_lock_id, last_action_at)
           VALUES (?, ?, ?, ?, 'open', ?, ?, ?, datetime('now'))`,
@@ -45456,7 +46058,7 @@ async function recordAction(input) {
     sql: `INSERT INTO browser_agent_actions (id, session_id, type, params_json, ok, error)
           VALUES (?, ?, ?, ?, ?, ?)`,
     args: [
-      `baa_${(0, import_node_crypto22.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
+      `baa_${(0, import_node_crypto23.randomUUID)().replace(/-/g, "").slice(0, 20)}`,
       input.sessionId,
       input.type,
       input.params == null ? null : JSON.stringify(input.params),
@@ -45496,11 +46098,11 @@ async function listReplayRows(sessionId) {
   });
   return res.rows;
 }
-var import_node_crypto22, _ready2, _migrationPromise2;
+var import_node_crypto23, _ready2, _migrationPromise2;
 var init_browser_agent_db = __esm({
   "src/api/browser-agent-db.ts"() {
     "use strict";
-    import_node_crypto22 = require("crypto");
+    import_node_crypto23 = require("crypto");
     init_db();
     _ready2 = false;
     _migrationPromise2 = null;
@@ -46755,7 +47357,7 @@ async function loadOpenSession(id, userId) {
   return row;
 }
 function buildBrowserAgentRoutes() {
-  const app2 = new import_hono20.Hono();
+  const app2 = new import_hono21.Hono();
   app2.use("*", async (c, next) => {
     await migrateBrowserAgent();
     return next();
@@ -47256,7 +47858,7 @@ function buildBrowserAgentRoutes() {
     }
     const existing = await getExtensionRow(user.id, name);
     if (existing) return c.json({ error: `an extension named "${name}" already exists \u2014 delete it first or pick another name` }, 409);
-    const backendName = `u${user.id}_${(0, import_node_crypto23.randomUUID)().replace(/-/g, "")}`;
+    const backendName = `u${user.id}_${(0, import_node_crypto24.randomUUID)().replace(/-/g, "")}`;
     try {
       const imported = await importExtensionFromStore(storeUrl, backendName);
       const row = await createExtensionRow({
@@ -47315,12 +47917,12 @@ function buildBrowserAgentRoutes() {
   });
   return app2;
 }
-var import_node_crypto23, import_hono20, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
+var import_node_crypto24, import_hono21, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
 var init_browser_agent_routes = __esm({
   "src/api/browser-agent-routes.ts"() {
     "use strict";
-    import_node_crypto23 = require("crypto");
-    import_hono20 = require("hono");
+    import_node_crypto24 = require("crypto");
+    import_hono21 = require("hono");
     init_api_auth();
     init_errors();
     init_db();
@@ -47628,7 +48230,7 @@ function linePriceId(line) {
   const l = line;
   return l?.price?.id ?? l?.pricing?.price_details?.price ?? l?.plan?.id;
 }
-async function resolveUser2(customerId, emailFallback) {
+async function resolveUser3(customerId, emailFallback) {
   let user = await getUserByStripeCustomerId(customerId);
   if (user) return user;
   if (!emailFallback) return void 0;
@@ -47636,18 +48238,18 @@ async function resolveUser2(customerId, emailFallback) {
   if (user) await setStripeCustomerId(user.id, customerId);
   return user;
 }
-var import_stripe, import_hono21, stripe, stripeApp;
+var import_stripe, import_hono22, stripe, stripeApp;
 var init_stripe_routes = __esm({
   "src/api/stripe-routes.ts"() {
     "use strict";
     import_stripe = __toESM(require("stripe"), 1);
-    import_hono21 = require("hono");
+    import_hono22 = require("hono");
     init_db();
     init_rates();
     init_memory();
     init_connected_account_billing();
     stripe = new import_stripe.default(process.env.STRIPE_SECRET_KEY, { apiVersion: "2026-02-25.clover" });
-    stripeApp = new import_hono21.Hono();
+    stripeApp = new import_hono22.Hono();
     stripeApp.post("/webhooks", async (c) => {
       const sig = c.req.header("stripe-signature");
       const body = await c.req.text();
@@ -47673,7 +48275,7 @@ var init_stripe_routes = __esm({
           const tierPriceId = liveBasePlanPriceId ?? invoice.lines.data.map(linePriceId).find((id) => id && id in SUBSCRIPTION_TIERS);
           const tier = tierPriceId ? SUBSCRIPTION_TIERS[tierPriceId] : void 0;
           if (tier) {
-            const user = await resolveUser2(invoice.customer, invoice.customer_email ?? void 0);
+            const user = await resolveUser3(invoice.customer, invoice.customer_email ?? void 0);
             if (user && invoice.id && !await ledgerExistsForStripePI(invoice.id)) {
               await creditMc(user.id, tier.credits_mc, LedgerOperation.SUBSCRIPTION, `${tier.label} subscription credits`, invoice.id, { neverExpires: tier.credits_never_expire });
               await setSubscriptionTier(user.id, tier.tier, tier.concurrency, subId ?? user.subscription_id);
@@ -47693,7 +48295,7 @@ var init_stripe_routes = __esm({
         const priceId = findBasePlanItem(sub)?.price?.id ?? sub.items.data[0]?.price?.id;
         if (priceId && priceId in MEMORY_PLANS) {
           const mem = MEMORY_PLANS[priceId];
-          const user2 = await resolveUser2(sub.customer, sub.customer_email);
+          const user2 = await resolveUser3(sub.customer, sub.customer_email);
           if (user2) {
             const live = sub.status === "active" || sub.status === "trialing";
             const newMemoryPlan = live ? mem.plan : "free";
@@ -47775,7 +48377,7 @@ async function getKeys() {
   const privateKey = await (0, import_jose2.importPKCS8)(pem, "RS256", { extractable: true });
   const full = await (0, import_jose2.exportJWK)(privateKey);
   const publicJwk = { kty: full.kty, n: full.n, e: full.e };
-  const kid = (0, import_node_crypto24.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
+  const kid = (0, import_node_crypto25.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
   publicJwk.kid = kid;
   publicJwk.alg = "RS256";
   publicJwk.use = "sig";
@@ -47954,23 +48556,23 @@ async function validateAuthRequest(p) {
 }
 function pkceMatches(verifier, challenge) {
   if (!verifier) return false;
-  const computed = (0, import_node_crypto24.createHash)("sha256").update(verifier).digest("base64url");
+  const computed = (0, import_node_crypto25.createHash)("sha256").update(verifier).digest("base64url");
   return computed === challenge;
 }
 async function mintAccessToken(identity, scope, plan, audience) {
   const { privateKey, kid } = await getKeys();
-  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto24.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
+  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto25.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
 }
 function tokenErrorResponse(c, error, description, status) {
   return c.json({ error, error_description: description }, status);
 }
-var import_hono22, import_cookie, import_node_crypto24, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
+var import_hono23, import_cookie, import_node_crypto25, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
 var init_oauth_routes = __esm({
   "src/api/oauth-routes.ts"() {
     "use strict";
-    import_hono22 = require("hono");
+    import_hono23 = require("hono");
     import_cookie = require("hono/cookie");
-    import_node_crypto24 = require("crypto");
+    import_node_crypto25 = require("crypto");
     import_jose2 = require("jose");
     init_session();
     init_db();
@@ -47995,7 +48597,7 @@ var init_oauth_routes = __esm({
       sameSite: "Lax"
     };
     cachedKeys = null;
-    oauthApp = new import_hono22.Hono();
+    oauthApp = new import_hono23.Hono();
     oauthApp.use("*", async (c, next) => {
       c.header("Access-Control-Allow-Origin", "*");
       c.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
@@ -48056,7 +48658,7 @@ var init_oauth_routes = __esm({
         }
       }
       const clientName = typeof body.client_name === "string" ? body.client_name : null;
-      const clientId = `client_${(0, import_node_crypto24.randomBytes)(16).toString("hex")}`;
+      const clientId = `client_${(0, import_node_crypto25.randomBytes)(16).toString("hex")}`;
       await registerClient(clientId, redirectUris, clientName);
       console.log("[oauth-dcr] register OK client_id=%s redirect_uris=%s", clientId, JSON.stringify(redirectUris));
       return c.json({
@@ -48109,7 +48711,7 @@ var init_oauth_routes = __esm({
       if (action === "deny") return redirectWithError(p.redirect_uri, p.state, "access_denied");
       if (action !== "approve") return c.text("unsupported action", 400);
       const scope = negotiateScope(p.scope, user, p.resource);
-      const code = `code_${(0, import_node_crypto24.randomBytes)(32).toString("base64url")}`;
+      const code = `code_${(0, import_node_crypto25.randomBytes)(32).toString("base64url")}`;
       const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1e3).toISOString();
       await putCode({
         code,
@@ -48148,7 +48750,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const refreshToken = `rt_${(0, import_node_crypto24.randomBytes)(40).toString("base64url")}`;
+        const refreshToken = `rt_${(0, import_node_crypto25.randomBytes)(40).toString("base64url")}`;
         await putRefresh({
           refresh_token: refreshToken,
           client_id: clientId,
@@ -48178,7 +48780,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const nextRefresh = `rt_${(0, import_node_crypto24.randomBytes)(40).toString("base64url")}`;
+        const nextRefresh = `rt_${(0, import_node_crypto25.randomBytes)(40).toString("base64url")}`;
         await rotateRefresh(refreshToken, {
           refresh_token: nextRefresh,
           client_id: record.client_id,
@@ -48740,13 +49342,13 @@ loadChannels();
 </body>
 </html>`;
 }
-var import_hono23, chatApp;
+var import_hono24, chatApp;
 var init_chat_routes = __esm({
   "src/api/chat-routes.ts"() {
     "use strict";
-    import_hono23 = require("hono");
+    import_hono24 = require("hono");
     init_memory();
-    chatApp = new import_hono23.Hono();
+    chatApp = new import_hono24.Hono();
     chatApp.get("/api/channels", async (c) => {
       const token = c.req.query("token");
       if (!tokenOk(token)) return jsonError("missing or malformed token", 401);
@@ -49030,11 +49632,11 @@ async function readVault(vault, token) {
   if (failed && !failed.ok) throw new Error(failed.error ?? `unable to read ${vault} record`);
   return notes.filter((result) => result.ok && !!result.note).map((result) => workspaceRecord(vault, result.note));
 }
-var import_hono24, VAULTS, PROJECT_TYPES, PROJECT_KIND_BY_TYPE, PROJECT_TYPE_BY_KIND, MAX_VAULT_RECORDS, MAX_MEMORY_READ_CONCURRENCY, MAX_MEMORY_READ_ATTEMPTS, vaultApp;
+var import_hono25, VAULTS, PROJECT_TYPES, PROJECT_KIND_BY_TYPE, PROJECT_TYPE_BY_KIND, MAX_VAULT_RECORDS, MAX_MEMORY_READ_CONCURRENCY, MAX_MEMORY_READ_ATTEMPTS, vaultApp;
 var init_vault_routes = __esm({
   "src/api/vault-routes.ts"() {
     "use strict";
-    import_hono24 = require("hono");
+    import_hono25 = require("hono");
     init_memory();
     VAULTS = ["People", "Organizations", "Deals", "Projects", "Tasks", "Communications", "Calendar"];
     PROJECT_TYPES = ["codebase", "personal", "work", "client"];
@@ -49054,7 +49656,7 @@ var init_vault_routes = __esm({
     MAX_VAULT_RECORDS = 200;
     MAX_MEMORY_READ_CONCURRENCY = 4;
     MAX_MEMORY_READ_ATTEMPTS = 3;
-    vaultApp = new import_hono24.Hono();
+    vaultApp = new import_hono25.Hono();
     vaultApp.use("/api/*", async (c, next) => {
       cors(c);
       if (c.req.method === "OPTIONS") return c.body(null, 204);
@@ -49518,13 +50120,13 @@ loadActions();
 </body>
 </html>`;
 }
-var import_hono25, scheduleApp;
+var import_hono26, scheduleApp;
 var init_schedule_routes = __esm({
   "src/api/schedule-routes.ts"() {
     "use strict";
-    import_hono25 = require("hono");
+    import_hono26 = require("hono");
     init_memory();
-    scheduleApp = new import_hono25.Hono();
+    scheduleApp = new import_hono26.Hono();
     scheduleApp.get("/api/status", async (c) => {
       const token = c.req.query("token");
       if (!tokenOk2(token)) return jsonError2("missing or malformed token", 401);
@@ -49598,7 +50200,7 @@ function quoteUntrusted(value) {
   return clean2.split("\n").map((line) => `> ${line}`).join("\n");
 }
 function shortHash(value, length = 24) {
-  return (0, import_node_crypto25.createHash)("sha256").update(value).digest("hex").slice(0, length);
+  return (0, import_node_crypto26.createHash)("sha256").update(value).digest("hex").slice(0, length);
 }
 function safePathPart(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "contact";
@@ -50086,11 +50688,11 @@ async function captureSupportMessage(memoryKey, email, options) {
     direction: options.direction
   };
 }
-var import_node_crypto25, SUPPORT_TAGS, ISSUE_TAGS;
+var import_node_crypto26, SUPPORT_TAGS, ISSUE_TAGS;
 var init_resend_support_thread = __esm({
   "src/api/resend-support-thread.ts"() {
     "use strict";
-    import_node_crypto25 = require("crypto");
+    import_node_crypto26 = require("crypto");
     init_memory();
     SUPPORT_TAGS = [
       {
@@ -50219,17 +50821,17 @@ async function relayOperatorReply(resend, email, customerEmail, threadAddress, n
   if (sent.error) throw new Error(`support reply relay failed: ${sent.error.message}`);
   return sent.data.id;
 }
-var import_hono26, import_resend, SUPPORT_ADDRESS, DMARC_ADDRESS, FORWARD_FROM, resendInboundApp;
+var import_hono27, import_resend, SUPPORT_ADDRESS, DMARC_ADDRESS, FORWARD_FROM, resendInboundApp;
 var init_resend_inbound_routes = __esm({
   "src/api/resend-inbound-routes.ts"() {
     "use strict";
-    import_hono26 = require("hono");
+    import_hono27 = require("hono");
     import_resend = require("resend");
     init_resend_support_thread();
     SUPPORT_ADDRESS = "support@mcpscraper.dev";
     DMARC_ADDRESS = "dmarc@mcpscraper.dev";
     FORWARD_FROM = "MCP Scraper Support <support@updates.mcpscraper.dev>";
-    resendInboundApp = new import_hono26.Hono();
+    resendInboundApp = new import_hono27.Hono();
     resendInboundApp.post("/webhooks", async (c) => {
       const apiKey = process.env.RESEND_API_KEY?.trim();
       const webhookSecret = process.env.RESEND_WEBHOOK_SECRET?.trim();
@@ -50486,7 +51088,7 @@ var init_site_extract_reconciliation = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto26.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto27.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -50543,11 +51145,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto26, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto27, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto26 = require("crypto");
+    import_node_crypto27 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -50624,7 +51226,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto27.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto28.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -50839,11 +51441,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto27, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto28, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto27 = require("crypto");
+    import_node_crypto28 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -51017,7 +51619,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto28.randomUUID)();
+  const exportId = (0, import_node_crypto29.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -51127,11 +51729,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto28, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto29, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto28 = require("crypto");
+    import_node_crypto29 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -51244,7 +51846,7 @@ async function exportSearchConsoleTableData(args) {
     offset += rows.length;
     if (stoppedForBytes || rows.length < limit || offset >= matchedRows) break;
   }
-  const exportId = (0, import_node_crypto29.randomUUID)();
+  const exportId = (0, import_node_crypto30.randomUUID)();
   const artifact = await args.writeArtifact({
     ownerId: args.ownerId,
     exportId,
@@ -51266,11 +51868,11 @@ async function exportSearchConsoleTableData(args) {
     warnings
   };
 }
-var import_node_crypto29, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
+var import_node_crypto30, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
 var init_search_console_table_export = __esm({
   "src/api/search-console-table-export.ts"() {
     "use strict";
-    import_node_crypto29 = require("crypto");
+    import_node_crypto30 = require("crypto");
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS = 5e4;
     SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE = 2e3;
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES = 50 * 1024 * 1024;
@@ -51698,7 +52300,7 @@ async function reconcileDiscoveredNangoConnections(identity, discovered) {
           updated_at = excluded.updated_at
       `,
       args: [
-        (0, import_node_crypto30.randomUUID)(),
+        (0, import_node_crypto31.randomUUID)(),
         userId,
         connection.providerConfigKey,
         connection.provider,
@@ -51769,7 +52371,7 @@ async function recordServiceConnectionHealth(args) {
   });
   await getDb().execute({
     sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [(0, import_node_crypto30.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
+    args: [(0, import_node_crypto31.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
   });
 }
 async function setServiceConnectionActions(identity, connectionId, enabled) {
@@ -51809,7 +52411,7 @@ async function claimServiceConnectionAction(args) {
   if (!connection) throw new Error("service_connection_not_found");
   const inserted = await getDb().execute({
     sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status) VALUES (?, ?, ?, ?, ?, 'started')`,
-    args: [(0, import_node_crypto30.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId]
+    args: [(0, import_node_crypto31.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId]
   });
   if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
   const existing = await getDb().execute({
@@ -51822,11 +52424,11 @@ async function claimServiceConnectionAction(args) {
     errorCode: typeof existing.rows[0]?.error_code === "string" ? existing.rows[0].error_code : null
   };
 }
-var import_node_crypto30, schemaReady2, schemaDb3;
+var import_node_crypto31, schemaReady2, schemaDb3;
 var init_service_connections = __esm({
   "src/api/service-connections.ts"() {
     "use strict";
-    import_node_crypto30 = require("crypto");
+    import_node_crypto31 = require("crypto");
     init_db();
     schemaReady2 = null;
     schemaDb3 = null;
@@ -52143,7 +52745,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = tools.filter((tool) => classifyTool(tool) === "read").map((tool) => tool.name);
   const actionTools = tools.filter((tool) => classifyTool(tool) === "action").map((tool) => tool.name);
-  const revision = (0, import_node_crypto31.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = (0, import_node_crypto32.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -52163,8 +52765,8 @@ async function callNangoToolDirect(args) {
     identity: args.identity,
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
-  const requestId = args.requestId?.trim() || (0, import_node_crypto31.randomUUID)();
-  const idempotencyKey2 = `main-nango:${(0, import_node_crypto31.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const requestId = args.requestId?.trim() || (0, import_node_crypto32.randomUUID)();
+  const idempotencyKey2 = `main-nango:${(0, import_node_crypto32.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -52189,7 +52791,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto31.createHash)("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto32.createHash)("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -52226,15 +52828,15 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: (0, import_node_crypto31.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: (0, import_node_crypto32.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-var import_node_crypto31, import_client9, import_streamableHttp, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
+var import_node_crypto32, import_client9, import_streamableHttp, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
 var init_main_nango_transport = __esm({
   "src/api/main-nango-transport.ts"() {
     "use strict";
-    import_node_crypto31 = require("crypto");
+    import_node_crypto32 = require("crypto");
     import_client9 = require("@modelcontextprotocol/sdk/client/index.js");
     import_streamableHttp = require("@modelcontextprotocol/sdk/client/streamableHttp.js");
     init_service_connections();
@@ -52856,7 +53458,7 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey2) {
-  const requestId = `main-connected-action:${(0, import_node_crypto32.createHash)("sha256").update(identity).update("\0").update(idempotencyKey2?.trim() || (0, import_node_crypto32.randomUUID)()).digest("hex")}`;
+  const requestId = `main-connected-action:${(0, import_node_crypto33.createHash)("sha256").update(identity).update("\0").update(idempotencyKey2?.trim() || (0, import_node_crypto33.randomUUID)()).digest("hex")}`;
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -52998,7 +53600,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto32.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto33.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -53259,11 +53861,11 @@ async function callMainOwnedExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto32, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto33, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto32 = require("crypto");
+    import_node_crypto33 = require("crypto");
     init_connected_data_export();
     init_main_nango_transport();
     init_service_connections();
@@ -53731,8 +54333,8 @@ function signingSecret() {
   return secret2;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = (0, import_node_crypto33.createHash)("sha256").update(args.body).digest("hex");
-  return (0, import_node_crypto33.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
+  const bodyHash = (0, import_node_crypto34.createHash)("sha256").update(args.body).digest("hex");
+  return (0, import_node_crypto34.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
 ${args.nonce}
@@ -53779,17 +54381,17 @@ async function verifySchedulerIntegrationRequest(request, rawBody) {
   });
   const suppliedBytes = Buffer.from(signature, "hex");
   const expectedBytes = Buffer.from(expected, "hex");
-  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto33.timingSafeEqual)(suppliedBytes, expectedBytes)) {
+  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto34.timingSafeEqual)(suppliedBytes, expectedBytes)) {
     throw new SchedulerIntegrationAuthError("invalid_signature");
   }
   await claimNonce(nonce, timestampMs);
   return { requestId };
 }
-var import_node_crypto33, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
+var import_node_crypto34, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
 var init_scheduler_integration_auth = __esm({
   "src/api/scheduler-integration-auth.ts"() {
     "use strict";
-    import_node_crypto33 = require("crypto");
+    import_node_crypto34 = require("crypto");
     init_db();
     init_service_connections();
     MAX_CLOCK_SKEW_MS = 5 * 60 * 1e3;
@@ -54284,7 +54886,7 @@ async function chargeTierChangeNow(stripeClient, subscriptionId, customerId) {
     return { ok: false, amountDue: 0, error: err instanceof Error ? err.message : "Unable to charge the plan change immediately." };
   }
 }
-var import_resend2, import_hono27, import_hono28, import_factory6, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth2, adminAuth, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS;
+var import_resend2, import_hono28, import_hono29, import_factory7, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth2, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS;
 var init_server = __esm({
   "src/api/server.ts"() {
     "use strict";
@@ -54302,8 +54904,8 @@ var init_server = __esm({
     init_media_extractor();
     init_site_mapper();
     init_site_extractor();
-    import_hono27 = require("hono");
-    import_hono28 = require("inngest/hono");
+    import_hono28 = require("hono");
+    import_hono29 = require("inngest/hono");
     init_client();
     init_site_audit();
     init_site_extract();
@@ -54321,6 +54923,8 @@ var init_server = __esm({
     init_screenshot_routes();
     init_facebook_ad_routes();
     init_google_ads_routes();
+    init_admin_auth();
+    init_admin_credit_routes();
     init_instagram_routes();
     init_reddit_routes();
     init_video_routes();
@@ -54346,7 +54950,7 @@ var init_server = __esm({
     init_schedule_routes();
     init_resend_inbound_routes();
     init_site_audit_worker();
-    import_factory6 = require("hono/factory");
+    import_factory7 = require("hono/factory");
     import_cookie2 = require("hono/cookie");
     init_db();
     import_stripe2 = __toESM(require("stripe"), 1);
@@ -54386,13 +54990,13 @@ var init_server = __esm({
       maxAge: 60 * 60 * 24 * 30,
       sameSite: "Strict"
     };
-    requireAllowedOrigin = (0, import_factory6.createMiddleware)(async (c, next) => {
+    requireAllowedOrigin = (0, import_factory7.createMiddleware)(async (c, next) => {
       const origin = c.req.header("origin");
       if (!origin) return next();
       if (!configuredOrigins().has(origin)) return c.json({ error: "Origin not allowed" }, 403);
       return next();
     });
-    auth2 = (0, import_factory6.createMiddleware)(async (c, next) => {
+    auth2 = (0, import_factory7.createMiddleware)(async (c, next) => {
       const key = c.req.header("x-api-key");
       if (!key) return c.json({ error: "Missing API key" }, 401);
       const user = await getUserByApiKey(key);
@@ -54402,14 +55006,7 @@ var init_server = __esm({
       c.set("user", { ...refreshed, balance_mc: balanceMc });
       return next();
     });
-    adminAuth = (0, import_factory6.createMiddleware)(async (c, next) => {
-      const configured = process.env.ADMIN_KEY?.trim();
-      const key = c.req.header("x-admin-key")?.trim();
-      if (!configured) return c.json({ error: "Admin access disabled" }, 503);
-      if (!key || key !== configured) return c.json({ error: "Unauthorized" }, 401);
-      return next();
-    });
-    sessionAuth = (0, import_factory6.createMiddleware)(async (c, next) => {
+    sessionAuth = (0, import_factory7.createMiddleware)(async (c, next) => {
       const token = (0, import_cookie2.getCookie)(c, "session");
       if (!token) return c.json({ error: "Not authenticated" }, 401);
       const userId = verifySession(token);
@@ -54421,7 +55018,7 @@ var init_server = __esm({
       c.set("sessionUser", { ...refreshed, balance_mc: balanceMc });
       return next();
     });
-    requireIntegrationsTier = (0, import_factory6.createMiddleware)(async (c, next) => {
+    requireIntegrationsTier = (0, import_factory7.createMiddleware)(async (c, next) => {
       const user = c.get("user");
       if (!user.subscription_tier) {
         return c.json({
@@ -54432,12 +55029,12 @@ var init_server = __esm({
       }
       return next();
     });
-    requirePaidSchedulingTier = (0, import_factory6.createMiddleware)(async (c, next) => {
+    requirePaidSchedulingTier = (0, import_factory7.createMiddleware)(async (c, next) => {
       const user = c.get("user");
       if (!hasPaidSchedulingAccess(user)) return c.json(paidPlanRequiredPayload(), 403);
       return next();
     });
-    app = new import_hono27.Hono();
+    app = new import_hono28.Hono();
     STRIPE_API_VERSION = "2026-02-25.clover";
     app.use("*", async (c, next) => {
       await next();
@@ -56864,7 +57461,8 @@ var init_server = __esm({
       const bundle = stored.find((a) => a.contentType === "application/zip" || a.filename?.endsWith(".zip"));
       return c.json({ ok: true, jobId: jobId2, artifacts: stored.length, settlement, bundleUrl: bundle?.url ?? null, bundleBytes: bundle?.bytes ?? null });
     });
-    app.on(["GET", "POST", "PUT"], "/api/inngest", (0, import_hono28.serve)({ client: inngest, functions: [siteAuditFn, siteExtractFn, directoryWorkflowFn] }));
+    app.on(["GET", "POST", "PUT"], "/api/inngest", (0, import_hono29.serve)({ client: inngest, functions: [siteAuditFn, siteExtractFn, directoryWorkflowFn] }));
+    app.route("/admin/credits", adminCreditsApp);
     app.route("/api/internal/site-architecture-auditor", siteAuditApp);
     app.route("/api/internal/memory", internalMemoryApp);
     app.route("/api/internal/billing", internalBillingApp);