mcp-scraper 0.4.4 → 0.4.6

package/dist/bin/api-server.cjs

@@ -3617,6 +3617,7 @@ __export(db_exports, {
   getLedger: () => getLedger,
   getMemoryPlan: () => getMemoryPlan,
   getMemoryProvisioned: () => getMemoryProvisioned,
+  getPageSnapshot: () => getPageSnapshot,
   getRefresh: () => getRefresh,
   getUserByApiKey: () => getUserByApiKey,
   getUserByEmail: () => getUserByEmail,
@@ -3672,6 +3673,7 @@ __export(db_exports, {
   startHarvestAttempt: () => startHarvestAttempt,
   stripeEventAlreadyProcessed: () => stripeEventAlreadyProcessed,
   updateKpoJobState: () => updateKpoJobState,
+  upsertPageSnapshot: () => upsertPageSnapshot,
   verifyPassword: () => verifyPassword
 });
 function getDb() {
@@ -4109,6 +4111,20 @@ async function migrate() {
     } catch {
     }
   }
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS page_snapshots (
+      user_id       INTEGER NOT NULL REFERENCES users(id),
+      url           TEXT    NOT NULL,
+      content_hash  TEXT    NOT NULL,
+      content       TEXT    NOT NULL,
+      title         TEXT,
+      content_bytes INTEGER NOT NULL,
+      truncated     INTEGER NOT NULL DEFAULT 0,
+      checked_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+      PRIMARY KEY (user_id, url)
+    )
+  `);
+  await db.execute(`CREATE INDEX IF NOT EXISTS page_snapshots_user_checked_at ON page_snapshots(user_id, checked_at DESC)`);
 }
 async function registerClient(clientId, redirectUris, name) {
   await getDb().execute({
@@ -4539,6 +4555,38 @@ async function listJobs(userId) {
   const res = await getDb().execute({ sql: "SELECT * FROM jobs WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", args: [userId] });
   return res.rows.map((r) => deserialize(rowToRawJob(r)));
 }
+async function getPageSnapshot(userId, url) {
+  const res = await getDb().execute({
+    sql: "SELECT content_hash, content, title, content_bytes, truncated, checked_at FROM page_snapshots WHERE user_id = ? AND url = ?",
+    args: [userId, url]
+  });
+  const row = res.rows[0];
+  if (!row) return null;
+  return {
+    contentHash: String(row.content_hash),
+    content: String(row.content),
+    title: row.title == null ? null : String(row.title),
+    contentBytes: Number(row.content_bytes),
+    truncated: Number(row.truncated) === 1,
+    checkedAt: String(row.checked_at)
+  };
+}
+async function upsertPageSnapshot(userId, url, snapshot) {
+  await getDb().execute({
+    sql: `
+      INSERT INTO page_snapshots (user_id, url, content_hash, content, title, content_bytes, truncated, checked_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'))
+      ON CONFLICT(user_id, url) DO UPDATE SET
+        content_hash  = excluded.content_hash,
+        content       = excluded.content,
+        title         = excluded.title,
+        content_bytes = excluded.content_bytes,
+        truncated     = excluded.truncated,
+        checked_at    = excluded.checked_at
+    `,
+    args: [userId, url, snapshot.contentHash, snapshot.content, snapshot.title, snapshot.contentBytes, snapshot.truncated ? 1 : 0]
+  });
+}
 function rowToRequestEvent(row) {
   const rawResult = row.result != null ? String(row.result) : null;
   return {
@@ -10046,7 +10094,8 @@ var init_rates = __esm({
       trustpilot_reviews: 500,
       trustpilot_review: 100,
       g2_reviews: 500,
-      g2_review: 150
+      g2_review: 150,
+      diff_page: 100
     };
     MC_PER_BROWSER_MS = MC_COSTS.browser_minute / 6e4;
     BROWSER_OPEN_MIN_BALANCE_MC = 1e3;
@@ -10249,6 +10298,14 @@ var init_rates = __esm({
         credits: mcToCredits(MC_COSTS.g2_review),
         unit: "per review card",
         notes: "Charged per review actually extracted (each card carries up to 3 Q&A sections), billed down automatically if the balance runs out mid-page."
+      },
+      {
+        key: "diff_page",
+        label: "Page change check",
+        aliases: ["diff_page", "page diff", "change detection"],
+        credits: mcToCredits(MC_COSTS.diff_page),
+        unit: "per check",
+        notes: "Same cost as a single page extract \u2014 one scrape is performed per check, then compared against your last stored snapshot for that URL."
       }
     ];
     CONCURRENCY_PRICE_ID = "price_1Ta1NRS8aAcsk3TGwsRnYbix";
@@ -10334,7 +10391,9 @@ var init_rates = __esm({
       G2_REVIEWS: "g2_reviews",
       G2_REVIEWS_REFUND: "g2_reviews_refund",
       G2_REVIEW: "g2_review",
-      G2_REVIEW_REFUND: "g2_review_refund"
+      G2_REVIEW_REFUND: "g2_review_refund",
+      DIFF_PAGE: "diff_page",
+      DIFF_PAGE_REFUND: "diff_page_refund"
     };
     MEMORY_AI_MARGIN_MULTIPLE = 3;
     MC_PER_USD = SUBSCRIPTION_TIERS["price_1TmiHRS8aAcsk3TGwmSNfNIa"].credits_mc / SUBSCRIPTION_TIERS["price_1TmiHRS8aAcsk3TGwmSNfNIa"].monthly_usd;
@@ -13113,7 +13172,7 @@ var init_api_auth = __esm({
 });
 
 // src/api/server-schemas.ts
-var import_zod13, HarvestBodySchema, ExtractUrlBodySchema, MapUrlsBodySchema, ExtractSiteBodySchema, YoutubeHarvestBodySchema, YoutubeTranscribeBodySchema;
+var import_zod13, HarvestBodySchema, ExtractUrlBodySchema, DiffPageBodySchema, MapUrlsBodySchema, ExtractSiteBodySchema, YoutubeHarvestBodySchema, YoutubeTranscribeBodySchema;
 var init_server_schemas = __esm({
   "src/api/server-schemas.ts"() {
     "use strict";
@@ -13144,6 +13203,11 @@ var init_server_schemas = __esm({
       depositToVault: import_zod13.z.boolean().optional(),
       vaultName: import_zod13.z.string().trim().min(1).max(120).optional()
     });
+    DiffPageBodySchema = import_zod13.z.object({
+      url: import_zod13.z.string().min(1, "url is required"),
+      allowLocal: import_zod13.z.boolean().optional(),
+      resetBaseline: import_zod13.z.boolean().optional()
+    });
     MapUrlsBodySchema = import_zod13.z.object({
       url: import_zod13.z.string().min(1, "url is required"),
       maxUrls: import_zod13.z.number().int().min(1).max(2e3).optional(),
@@ -16934,22 +16998,8 @@ async function provisionMemoryForUser(user) {
   } catch {
   }
 }
-function memoryPlanForUser(user) {
-  switch (user.subscription_tier) {
-    case "starter":
-      return "pro";
-    case "growth":
-      return "team";
-    case "scale":
-      return "enterprise";
-    default:
-      return "free";
-  }
-}
 function resolveEffectiveMemoryPlan(user) {
-  const tierPlan = memoryPlanForUser(user);
-  const memoryProPlan = user.memory_plan === "pro" || user.memory_plan === "team" ? user.memory_plan : "free";
-  return MEMORY_PLAN_RANK[tierPlan] >= MEMORY_PLAN_RANK[memoryProPlan] ? tierPlan : memoryProPlan;
+  return user.memory_plan === "pro" || user.memory_plan === "team" ? user.memory_plan : "free";
 }
 async function getOrCreateUserMemoryKey(user) {
   const creds = await getUserMemoryCreds(user.id);
@@ -16999,7 +17049,7 @@ async function syncScheduleEntitlement(user, enabled, quotaPerPeriod) {
   }, {});
   return { ok: res.ok, error: res.error };
 }
-var import_node_crypto6, import_provision_defaults, import_set_schedule_entitlement, MEMORY_BASE_URL, ADMIN_KEY, MEMORY_PLAN_RANK;
+var import_node_crypto6, import_provision_defaults, import_set_schedule_entitlement, MEMORY_BASE_URL, ADMIN_KEY;
 var init_memory = __esm({
   "src/api/memory.ts"() {
     "use strict";
@@ -17010,7 +17060,6 @@ var init_memory = __esm({
     import_set_schedule_entitlement = require("mcpscraper-memory-tools/tools/schedule/set-schedule-entitlement");
     MEMORY_BASE_URL = () => (process.env.MCP_MEMORY_BASE_URL ?? "https://memory.mcpscraper.dev").replace(/\/$/, "");
     ADMIN_KEY = () => process.env.MCP_MEMORY_ADMIN_KEY?.trim() ?? "";
-    MEMORY_PLAN_RANK = { free: 0, pro: 1, team: 2, enterprise: 3 };
   }
 });
 
@@ -19345,6 +19394,55 @@ ${headingSection}${kpoSection}${brandingSection}${bodySectionFull}${memSection}$
   }
   return { ...textResult, structuredContent };
 }
+function formatDiffPage(raw, input) {
+  const parsed = parseData(raw);
+  if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
+  const d = parsed.data;
+  const url = d.url ?? input.url;
+  const title = d.title ?? "Untitled";
+  const statusLine = d.status === "baseline" ? d.isReset ? "\u{1F195} **Baseline reset** \u2014 prior history discarded, this check is now the new baseline." : "\u{1F195} **Baseline captured** \u2014 first check for this URL, nothing to compare yet." : d.status === "unchanged" ? `\u2705 **No changes** since ${d.previousCheckedAt ?? "the last check"}.` : `\u{1F504} **Changed** since ${d.previousCheckedAt ?? "the last check"} \u2014 +${d.summary.linesAdded}/-${d.summary.linesRemoved} lines (${d.summary.percentChanged ?? 0}% of content).`;
+  const previewHunks = d.hunks.slice(0, DIFF_PAGE_PREVIEW_HUNKS);
+  const diffBlock = previewHunks.length ? [
+    "\n## Diff",
+    "```diff",
+    ...previewHunks.flatMap((h) => h.lines.map((l) => `${h.type === "added" ? "+" : "-"} ${l}`)),
+    "```",
+    previewHunks.length < d.hunks.length ? `*(showing ${previewHunks.length} of ${d.hunks.length} returned hunks)*` : ""
+  ].filter(Boolean).join("\n") : "";
+  const truncationNotes = [
+    d.contentTruncated ? "\n\u26A0\uFE0F Page content exceeded the storable cap and was truncated before hashing/diffing \u2014 changes past that point are not visible to this comparison." : "",
+    d.hunksTruncatedReason ? `
+\u26A0\uFE0F ${d.hunksTruncatedReason}` : ""
+  ].filter(Boolean).join("\n");
+  const tips = `
+---
+\u{1F4A1} **Tips**
+- Call \`diff_page\` again anytime to re-check \u2014 this tool is on-demand, not automatic.
+- Want the page's current content with nothing to compare? use \`extract_url\`.`;
+  const full = `# Page Diff: ${url}
+**${title}**
+
+${statusLine}${diffBlock}${truncationNotes}${tips}`;
+  return {
+    ...oneBlock(full),
+    structuredContent: {
+      url,
+      title: d.title,
+      status: d.status,
+      isReset: d.isReset,
+      previousCheckedAt: d.previousCheckedAt,
+      currentCheckedAt: d.currentCheckedAt,
+      contentHash: d.contentHash,
+      previousContentHash: d.previousContentHash,
+      summary: d.summary,
+      hunks: d.hunks,
+      contentTruncated: d.contentTruncated,
+      hunksTruncated: d.hunksTruncated,
+      hunksTruncatedReason: d.hunksTruncatedReason,
+      totalChangedLineCount: d.totalChangedLineCount
+    }
+  };
+}
 async function formatMapSiteUrls(raw, input, ctx) {
   const parsed = parseData(raw);
   if ("error" in parsed) return { content: [{ type: "text", text: parsed.error }], isError: true };
@@ -21069,7 +21167,7 @@ ${rows}` : ""
     }
   };
 }
-var import_node_fs6, import_node_os6, import_node_path8, INLINE_BUDGET_BYTES, STRUCTURED_ARRAY_CAP, reportSavingEnabled, BULK_PAGE_THRESHOLD, BULK_URL_THRESHOLD;
+var import_node_fs6, import_node_os6, import_node_path8, INLINE_BUDGET_BYTES, STRUCTURED_ARRAY_CAP, reportSavingEnabled, BULK_PAGE_THRESHOLD, BULK_URL_THRESHOLD, DIFF_PAGE_PREVIEW_HUNKS;
 var init_mcp_response_formatter = __esm({
   "src/mcp/mcp-response-formatter.ts"() {
     "use strict";
@@ -21088,6 +21186,7 @@ var init_mcp_response_formatter = __esm({
     reportSavingEnabled = true;
     BULK_PAGE_THRESHOLD = 25;
     BULK_URL_THRESHOLD = 500;
+    DIFF_PAGE_PREVIEW_HUNKS = 20;
   }
 });
 
@@ -27018,7 +27117,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.4.4";
+    PACKAGE_VERSION = "0.4.6";
   }
 });
 
@@ -27157,7 +27256,7 @@ var init_output_schema_registry = __esm({
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod33, HarvestPaaInputSchema, ExtractUrlInputSchema, MapSiteUrlsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, ArtifactPointerOutputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryWorkflowOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema;
+var import_zod33, HarvestPaaInputSchema, ExtractUrlInputSchema, DiffPageInputSchema, MapSiteUrlsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, ArtifactPointerOutputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryWorkflowOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
@@ -27185,6 +27284,11 @@ var init_mcp_tool_schemas = __esm({
       depositToVault: import_zod33.z.boolean().default(false).describe("Save the full page content into the user's MCP Memory vault server-side, embedded for semantic recall \u2014 the full body is NOT returned to chat."),
       vaultName: import_zod33.z.string().trim().min(1).max(120).optional().describe("Optional vault to deposit into. Defaults to the user's personal vault.")
     };
+    DiffPageInputSchema = {
+      url: import_zod33.z.string().url().describe("Public http/https URL to check for changes since the last diff_page call."),
+      allowLocal: import_zod33.z.boolean().default(false).describe("Allow localhost and private-network URLs. Local development only."),
+      resetBaseline: import_zod33.z.boolean().default(false).describe("Discard any previously stored snapshot for this URL and capture the current content as a fresh baseline instead of diffing against history. Use when you deliberately want to restart change tracking.")
+    };
     MapSiteUrlsInputSchema = {
       url: import_zod33.z.string().url().describe("Public website URL or domain to crawl for internal URLs. Use before extract_site when the user asks to audit/map/crawl a site."),
       maxUrls: import_zod33.z.number().int().min(1).max(1e4).optional().describe("Maximum URLs to discover. Use 100 for normal maps, up to 10000 for a full inventory. Large maps (over 500 URLs) write the complete inventory to a local file and return only a summary plus the file path instead of the full list inline.")
@@ -27578,6 +27682,29 @@ var init_mcp_tool_schemas = __esm({
         error: import_zod33.z.string().optional()
       }).optional()
     };
+    DiffPageOutputSchema = {
+      url: import_zod33.z.string(),
+      title: NullableString,
+      status: import_zod33.z.enum(["baseline", "unchanged", "changed"]).describe('"baseline" = first-ever check for this URL, or resetBaseline was used \u2014 nothing to compare against. "unchanged" = content hash matched the stored snapshot. "changed" = a diff was computed.'),
+      isReset: import_zod33.z.boolean().describe("True only when resetBaseline discarded a real prior snapshot \u2014 distinguishes an explicit reset from a URL's true first-ever check."),
+      previousCheckedAt: NullableString.describe("ISO timestamp of the snapshot this was compared against, or null if there was none."),
+      currentCheckedAt: import_zod33.z.string().describe("ISO timestamp of this check, now stored as the new snapshot."),
+      contentHash: import_zod33.z.string().describe("sha256 of the full (untruncated) page content just captured."),
+      previousContentHash: NullableString,
+      summary: import_zod33.z.object({
+        linesAdded: import_zod33.z.number().int().min(0),
+        linesRemoved: import_zod33.z.number().int().min(0),
+        percentChanged: import_zod33.z.number().min(0).max(100).nullable().describe('Proportion of changed lines relative to the larger of the two versions. Null when status is "baseline".')
+      }),
+      hunks: import_zod33.z.array(import_zod33.z.object({
+        type: import_zod33.z.enum(["added", "removed"]).describe("Unchanged context lines are omitted \u2014 only added/removed lines are returned."),
+        lines: import_zod33.z.array(import_zod33.z.string())
+      })).describe("Ordered added/removed line hunks, capped for response size \u2014 see hunksTruncated."),
+      contentTruncated: import_zod33.z.boolean().describe("True if the scraped page exceeded the 250,000-character storable cap and was truncated before hashing/diffing/storing \u2014 changes past that point are invisible to this comparison."),
+      hunksTruncated: import_zod33.z.boolean().describe("True if the hunks list above was capped for response size \u2014 see hunksTruncatedReason."),
+      hunksTruncatedReason: NullableString,
+      totalChangedLineCount: import_zod33.z.number().int().min(0).describe("Total changed lines found before any hunksTruncated capping was applied.")
+    };
     ExtractSiteOutputSchema = {
       url: import_zod33.z.string(),
       pageCount: import_zod33.z.number().int().min(0),
@@ -28590,6 +28717,13 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
     outputSchema: recordOutputSchema("extract_url", ExtractUrlOutputSchema),
     annotations: liveWebToolAnnotations("Single URL Extract")
   }, async (input) => formatExtractUrl(await executor.extractUrl(input), input));
+  server.registerTool("diff_page", {
+    title: "Page Change Check",
+    description: "Check whether a public URL has changed since you last checked it with this tool: scrapes the current page, diffs it against your last stored snapshot for that URL, and returns what was added or removed (or confirms no change). Stores the new snapshot as the baseline for next time \u2014 on-demand only, no automatic recurring checks. Use extract_url instead when you just want the page's current content with nothing to compare against.",
+    inputSchema: DiffPageInputSchema,
+    outputSchema: recordOutputSchema("diff_page", DiffPageOutputSchema),
+    annotations: liveWebToolAnnotations("Page Change Check")
+  }, async (input) => formatDiffPage(await executor.diffPage(input), input));
   server.registerTool("map_site_urls", {
     title: "Site URL Map",
     description: `Map/crawl a public website for a sitemap, URL inventory, or broken-link scan. Returns internal URLs with HTTP status; ${fileBehavior("maps over 500 URLs are written to a local CSV file instead of inlined.", "large results are stored as a retrievable artifact \u2014 you get an inline summary plus an artifactId for report_artifact_read.")}`,
@@ -29021,6 +29155,9 @@ var init_http_mcp_tool_executor = __esm({
       extractUrl(input) {
         return this.call("/extract-url", input);
       }
+      diffPage(input) {
+        return this.call("/diff-page", input);
+      }
       mapSiteUrls(input) {
         return this.call("/map-urls", input);
       }
@@ -29277,7 +29414,7 @@ var init_export = __esm({
 });
 
 // src/mcp/browser-agent-tool-schemas.ts
-var import_zod34, NullableString2, BrowserRawObject, BrowserElementOutput, BrowserBaseOutput, BrowserReplayBaseOutput, BrowserOpenInputSchema, BrowserProfileConnectInputSchema, BrowserProfileListInputSchema, BrowserSessionInputSchema, BrowserLocateTargetSchema, BrowserLocateInputSchema, BrowserGotoInputSchema, BrowserClickInputSchema, BrowserTypeInputSchema, BrowserScrollInputSchema, BrowserPressInputSchema, BrowserReplayStopInputSchema, BrowserReplayDownloadInputSchema, BrowserReplayAnnotationSchema, BrowserReplayMarkInputSchema, BrowserReplayAnnotateInputSchema, BrowserListInputSchema, BrowserCaptureFanoutInputSchema, FanoutSourceOutput, BrowserCaptureFanoutOutputSchema, BrowserOpenOutputSchema, BrowserProfileLogin, BrowserProfileConnectOutputSchema, BrowserProfileListOutputSchema, BrowserScreenshotOutputSchema, BrowserReadOutputSchema, BrowserLocateOutputSchema, BrowserActionOutputSchema, BrowserReplayStartOutputSchema, BrowserReplayStopOutputSchema, BrowserListReplaysOutputSchema, BrowserReplayDownloadOutputSchema, BrowserReplayMarkOutputSchema, BrowserReplayAnnotateOutputSchema, BrowserCloseOutputSchema, BrowserListSessionsOutputSchema;
+var import_zod34, NullableString2, BrowserRawObject, BrowserElementOutput, BrowserBaseOutput, BrowserReplayBaseOutput, BrowserOpenInputSchema, BrowserProfileConnectInputSchema, BrowserProfileListInputSchema, BrowserSessionInputSchema, BrowserLocateTargetSchema, BrowserLocateInputSchema, BrowserGotoInputSchema, BrowserClickInputSchema, BrowserTypeInputSchema, BrowserScrollInputSchema, BrowserPressInputSchema, BrowserReplayStopInputSchema, BrowserReplayDownloadInputSchema, BrowserReplayAnnotationSchema, BrowserReplayMarkInputSchema, BrowserReplayAnnotateInputSchema, BrowserListInputSchema, BrowserCaptureFanoutInputSchema, FanoutSourceOutput, BrowserCaptureFanoutOutputSchema, BrowserOpenOutputSchema, BrowserProfileLogin, BrowserProfileConnectOutputSchema, BrowserProfileListOutputSchema, BrowserExtensionImportInputSchema, BrowserExtensionImportOutputSchema, BrowserExtensionSummary, BrowserExtensionListInputSchema, BrowserExtensionListOutputSchema, BrowserExtensionDeleteInputSchema, BrowserExtensionDeleteOutputSchema, BrowserScreenshotOutputSchema, BrowserReadOutputSchema, BrowserLocateOutputSchema, BrowserActionOutputSchema, BrowserReplayStartOutputSchema, BrowserReplayStopOutputSchema, BrowserListReplaysOutputSchema, BrowserReplayDownloadOutputSchema, BrowserReplayMarkOutputSchema, BrowserReplayAnnotateOutputSchema, BrowserCloseOutputSchema, BrowserListSessionsOutputSchema;
 var init_browser_agent_tool_schemas = __esm({
   "src/mcp/browser-agent-tool-schemas.ts"() {
     "use strict";
@@ -29299,7 +29436,10 @@ var init_browser_agent_tool_schemas = __esm({
       url: import_zod34.z.string().url().optional().describe("Optional URL to navigate to immediately after opening."),
       profile: import_zod34.z.string().optional().describe("Optional saved hosted profile name to load a logged-in session for a site."),
       save_profile_changes: import_zod34.z.boolean().optional().describe("Persist cookies/storage back to the named profile on close. Avoid parallel sessions writing to the same profile."),
-      timeout_seconds: import_zod34.z.number().int().min(60).max(259200).optional().describe("Session lifetime before auto-termination. Defaults to 600.")
+      timeout_seconds: import_zod34.z.number().int().min(60).max(259200).optional().describe("Session lifetime before auto-termination. Defaults to 600."),
+      extension_names: import_zod34.z.array(import_zod34.z.string()).optional().describe(
+        "Names of extensions previously added with browser_extension_import (see browser_extension_list for what's available) to load into this session. Loading extensions restarts the browser, adding a few seconds to startup."
+      )
     };
     BrowserProfileConnectInputSchema = {
       email: import_zod34.z.string().optional().describe("Account email for the login. Derives a stable profile name and is recorded as a note. Does NOT import existing cookies \u2014 the user signs in fresh."),
@@ -29526,6 +29666,43 @@ var init_browser_agent_tool_schemas = __esm({
       connections: import_zod34.z.array(BrowserProfileLogin).describe("All site logins saved in this profile, each with its current auth status and note."),
       count: import_zod34.z.number().int().min(0)
     };
+    BrowserExtensionImportInputSchema = {
+      store_url: import_zod34.z.string().url().describe("Chrome Web Store URL of the extension to add, e.g. https://chromewebstore.google.com/detail/<slug>/<id>."),
+      name: import_zod34.z.string().min(1).max(64).describe('Short name to save this extension under, e.g. "ani-ai". Reuse it later in extension_names on browser_open.')
+    };
+    BrowserExtensionImportOutputSchema = {
+      ok: import_zod34.z.boolean(),
+      tool: import_zod34.z.literal("browser_extension_import"),
+      session_id: import_zod34.z.null(),
+      name: import_zod34.z.string().describe("The name this extension was saved under."),
+      source_url: import_zod34.z.string().describe("The store URL this extension was imported from."),
+      size_bytes: import_zod34.z.number().nullable().describe("Size of the extension package in bytes.")
+    };
+    BrowserExtensionSummary = import_zod34.z.object({
+      name: import_zod34.z.string(),
+      source: import_zod34.z.string().describe('Always "store" for extensions added via browser_extension_import.'),
+      source_url: NullableString2,
+      size_bytes: import_zod34.z.number().nullable(),
+      created_at: import_zod34.z.string()
+    });
+    BrowserExtensionListInputSchema = {};
+    BrowserExtensionListOutputSchema = {
+      ok: import_zod34.z.boolean(),
+      tool: import_zod34.z.literal("browser_extension_list"),
+      session_id: import_zod34.z.null(),
+      extensions: import_zod34.z.array(BrowserExtensionSummary).describe("Every extension available to load via extension_names on browser_open."),
+      count: import_zod34.z.number().int().min(0)
+    };
+    BrowserExtensionDeleteInputSchema = {
+      name: import_zod34.z.string().min(1).describe("Name of the extension to remove, as returned by browser_extension_list.")
+    };
+    BrowserExtensionDeleteOutputSchema = {
+      ok: import_zod34.z.boolean(),
+      tool: import_zod34.z.literal("browser_extension_delete"),
+      session_id: import_zod34.z.null(),
+      name: import_zod34.z.string(),
+      deleted: import_zod34.z.boolean()
+    };
     BrowserScreenshotOutputSchema = {
       ...BrowserBaseOutput,
       tool: import_zod34.z.literal("browser_screenshot"),
@@ -30149,6 +30326,71 @@ function registerBrowserAgentMcpTools(server, opts) {
       });
     }
   );
+  server.registerTool(
+    "browser_extension_import",
+    {
+      title: "Add Browser Extension",
+      description: "Add a Chrome extension from its Chrome Web Store page so it can be loaded into browser_open sessions via extension_names. One-time setup per extension \u2014 check what's already added with browser_extension_list first. The extension starts logged out in any session; sign into it once inside a session, pairing with a saved profile (browser_open's profile + save_profile_changes) to keep it signed in on future opens.",
+      inputSchema: BrowserExtensionImportInputSchema,
+      outputSchema: recordOutputSchema("browser_extension_import", BrowserExtensionImportOutputSchema),
+      annotations: annotations("Add Browser Extension")
+    },
+    async (input) => {
+      const res = await req("POST", "/agent/extensions/import", { store_url: input.store_url, name: input.name });
+      if (!res.ok) return errorResult("browser_extension_import", res.data);
+      return structuredResult({
+        ok: true,
+        tool: "browser_extension_import",
+        session_id: null,
+        name: res.data.name,
+        source_url: res.data.source_url,
+        size_bytes: res.data.size_bytes ?? null
+      });
+    }
+  );
+  server.registerTool(
+    "browser_extension_list",
+    {
+      title: "List Browser Extensions",
+      description: "List extensions added via browser_extension_import, for use as extension_names on browser_open. Read-only, no cost.",
+      inputSchema: BrowserExtensionListInputSchema,
+      outputSchema: recordOutputSchema("browser_extension_list", BrowserExtensionListOutputSchema),
+      annotations: annotations("List Browser Extensions", true)
+    },
+    async () => {
+      const res = await req("GET", "/agent/extensions");
+      if (!res.ok) return errorResult("browser_extension_list", res.data);
+      const extensions = Array.isArray(res.data?.extensions) ? res.data.extensions : [];
+      return structuredResult({
+        ok: true,
+        tool: "browser_extension_list",
+        session_id: null,
+        extensions,
+        count: extensions.length
+      });
+    }
+  );
+  server.registerTool(
+    "browser_extension_delete",
+    {
+      title: "Remove Browser Extension",
+      description: "Remove a previously added extension by name so it can no longer be loaded via extension_names.",
+      inputSchema: BrowserExtensionDeleteInputSchema,
+      outputSchema: recordOutputSchema("browser_extension_delete", BrowserExtensionDeleteOutputSchema),
+      annotations: { title: "Remove Browser Extension", readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
+    },
+    async (input) => {
+      const res = await req("DELETE", `/agent/extensions/${encodeURIComponent(input.name)}`);
+      if (!res.ok) return errorResult("browser_extension_delete", res.data);
+      return structuredResult({
+        ok: true,
+        tool: "browser_extension_delete",
+        session_id: null,
+        name: input.name,
+        deleted: true
+      });
+    }
+  );
   server.registerTool(
     "browser_open",
     {
@@ -30167,7 +30409,8 @@ function registerBrowserAgentMcpTools(server, opts) {
         ...profile && typeof saveProfileChanges === "boolean" ? { save_profile_changes: saveProfileChanges } : {},
         disable_default_proxy: true,
         timeout_seconds: input.timeout_seconds,
-        ...input.url ? { url: input.url } : {}
+        ...input.url ? { url: input.url } : {},
+        ...input.extension_names?.length ? { extension_names: input.extension_names } : {}
       });
       if (!open.ok) return errorResult("browser_open", open.data);
       const session = open.data;
@@ -33435,8 +33678,58 @@ async function migrateBrowserAgent() {
   } catch {
   }
   await db.execute(`CREATE INDEX IF NOT EXISTS browser_auth_connections_profile ON browser_auth_connections(profile)`);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS browser_agent_extensions (
+      id           TEXT PRIMARY KEY,
+      user_id      INTEGER NOT NULL,
+      name         TEXT NOT NULL,
+      backend_id   TEXT NOT NULL,
+      backend_name TEXT NOT NULL,
+      source       TEXT NOT NULL DEFAULT 'store',
+      source_url   TEXT,
+      size_bytes   INTEGER,
+      created_at   TEXT NOT NULL DEFAULT (datetime('now'))
+    )
+  `);
+  await db.execute(`CREATE UNIQUE INDEX IF NOT EXISTS browser_agent_extensions_user_name ON browser_agent_extensions(user_id, name)`);
+  await db.execute(`CREATE INDEX IF NOT EXISTS browser_agent_extensions_user ON browser_agent_extensions(user_id)`);
   _ready2 = true;
 }
+async function createExtensionRow(input) {
+  const db = getDb();
+  const id = `bext_${(0, import_node_crypto11.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
+  await db.execute({
+    sql: `INSERT INTO browser_agent_extensions (id, user_id, name, backend_id, backend_name, source, source_url, size_bytes)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+    args: [id, input.userId, input.name, input.backendId, input.backendName, input.source, input.sourceUrl, input.sizeBytes]
+  });
+  const row = await getExtensionRow(input.userId, input.name);
+  if (!row) throw new Error("extension insert failed");
+  return row;
+}
+async function getExtensionRow(userId, name) {
+  const db = getDb();
+  const res = await db.execute({
+    sql: `SELECT * FROM browser_agent_extensions WHERE user_id = ? AND name = ?`,
+    args: [userId, name]
+  });
+  return res.rows[0] ?? null;
+}
+async function listExtensionRows(userId) {
+  const db = getDb();
+  const res = await db.execute({
+    sql: `SELECT * FROM browser_agent_extensions WHERE user_id = ? ORDER BY created_at DESC`,
+    args: [userId]
+  });
+  return res.rows;
+}
+async function deleteExtensionRow(userId, name) {
+  const db = getDb();
+  await db.execute({
+    sql: `DELETE FROM browser_agent_extensions WHERE user_id = ? AND name = ?`,
+    args: [userId, name]
+  });
+}
 async function createAuthConnectionRow(input) {
   const db = getDb();
   const connectionId = `authc_${(0, import_node_crypto11.randomUUID)().replace(/-/g, "").slice(0, 20)}`;
@@ -34353,6 +34646,28 @@ function isProfileConflict(err) {
   const message = err instanceof Error ? err.message : String(err);
   return /\b409\b|conflict|already exists/i.test(message);
 }
+function isNotFound(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return /\b404\b|not found/i.test(message);
+}
+async function importExtensionFromStore(storeUrl, backendName) {
+  const k = client();
+  const archive = await k.extensions.downloadFromChromeStore({ url: storeUrl });
+  const uploaded = await k.extensions.upload({ file: archive, name: backendName });
+  return {
+    backendId: uploaded.id,
+    backendName: uploaded.name ?? backendName,
+    sizeBytes: typeof uploaded.size_bytes === "number" ? uploaded.size_bytes : null
+  };
+}
+async function deleteExtensionBackend(backendName) {
+  const k = client();
+  try {
+    await k.extensions.delete(backendName);
+  } catch (err) {
+    if (!isNotFound(err)) throw err;
+  }
+}
 async function ensureProfile(k, name) {
   try {
     await k.profiles.create({ name });
@@ -34371,6 +34686,7 @@ async function createSession(opts = {}) {
   const resolvedSaveProfileChanges = opts.saveProfileChanges ?? browserServiceProfileSaveChanges();
   const disableDefaultProxy = opts.disableDefaultProxy ?? !resolvedProxyId;
   const startUrl = opts.startUrl?.trim();
+  const extensionNames = (opts.extensionNames ?? []).map((name) => name.trim()).filter(Boolean);
   if (resolvedProfileName && resolvedSaveProfileChanges === true) {
     await ensureProfile(k, resolvedProfileName);
   }
@@ -34384,7 +34700,8 @@ async function createSession(opts = {}) {
         name: resolvedProfileName,
         ...typeof resolvedSaveProfileChanges === "boolean" ? { save_changes: resolvedSaveProfileChanges } : {}
       }
-    } : {}
+    } : {},
+    ...extensionNames.length ? { extensions: extensionNames.map((name) => ({ name })) } : {}
   };
   const browser = await k.browsers.create(createPayload);
   const runtimeSessionId = browser.session_id;
@@ -34781,6 +35098,15 @@ function parseAgentDate(value) {
   const legacyParsed = Date.parse(`${value.replace(" ", "T")}Z`);
   return Number.isFinite(legacyParsed) ? legacyParsed : null;
 }
+function publicExtension(row) {
+  return {
+    name: row.name,
+    source: row.source,
+    source_url: row.source_url,
+    size_bytes: row.size_bytes,
+    created_at: row.created_at
+  };
+}
 function replayClock(row) {
   if (!row) return null;
   const startedAtMs = parseAgentDate(row.started_at);
@@ -34927,6 +35253,15 @@ function buildBrowserAgentRoutes() {
     const body = await c.req.json().catch(() => ({}));
     const timeoutSeconds = typeof body.timeout_seconds === "number" ? body.timeout_seconds : void 0;
     const startUrl = typeof body.url === "string" ? body.url : void 0;
+    const extensionNames = Array.isArray(body.extension_names) ? body.extension_names.filter((v) => typeof v === "string") : void 0;
+    let resolvedExtensionBackendNames;
+    if (extensionNames && extensionNames.length) {
+      const names = extensionNames;
+      const rows = await Promise.all(names.map((name) => getExtensionRow(user.id, name)));
+      const missing = names.filter((_, i) => !rows[i]);
+      if (missing.length) return c.json({ error: `extension(s) not found: ${missing.join(", ")}` }, 400);
+      resolvedExtensionBackendNames = rows.map((row) => row.backend_name);
+    }
     const gate = await acquireConcurrencyGate(user, "browser_agent_session", {
       ttlSeconds: browserSessionLockTtlSeconds(timeoutSeconds),
       metadata: { label: typeof body.label === "string" ? body.label : null }
@@ -34941,7 +35276,8 @@ function buildBrowserAgentRoutes() {
         saveProfileChanges: typeof body.save_profile_changes === "boolean" ? body.save_profile_changes : void 0,
         startUrl,
         disableDefaultProxy: typeof body.disable_default_proxy === "boolean" ? body.disable_default_proxy : void 0,
-        viewport: body.viewport && typeof body.viewport === "object" ? body.viewport : void 0
+        viewport: body.viewport && typeof body.viewport === "object" ? body.viewport : void 0,
+        extensionNames: resolvedExtensionBackendNames
       });
       runtimeSessionId = created.runtimeSessionId;
       const row = await createSessionRow({
@@ -35244,6 +35580,52 @@ function buildBrowserAgentRoutes() {
       }))
     });
   });
+  app2.post("/extensions/import", async (c) => {
+    const user = c.get("user");
+    const body = await c.req.json().catch(() => ({}));
+    const storeUrl = typeof body.store_url === "string" ? body.store_url.trim() : "";
+    const name = typeof body.name === "string" ? body.name.trim() : "";
+    if (!storeUrl) return c.json({ error: "store_url is required" }, 400);
+    if (!name || !EXTENSION_NAME_RE.test(name)) {
+      return c.json({ error: "name is required (1-64 characters: letters, numbers, spaces, dots, underscores, hyphens)" }, 400);
+    }
+    const existing = await getExtensionRow(user.id, name);
+    if (existing) return c.json({ error: `an extension named "${name}" already exists \u2014 delete it first or pick another name` }, 409);
+    const backendName = `u${user.id}_${(0, import_node_crypto12.randomUUID)().replace(/-/g, "")}`;
+    try {
+      const imported = await importExtensionFromStore(storeUrl, backendName);
+      const row = await createExtensionRow({
+        userId: user.id,
+        name,
+        backendId: imported.backendId,
+        backendName: imported.backendName,
+        source: "store",
+        sourceUrl: storeUrl,
+        sizeBytes: imported.sizeBytes
+      });
+      return c.json(publicExtension(row));
+    } catch (err) {
+      return c.json(failure(err), 502);
+    }
+  });
+  app2.get("/extensions", async (c) => {
+    const user = c.get("user");
+    const rows = await listExtensionRows(user.id);
+    return c.json({ extensions: rows.map(publicExtension) });
+  });
+  app2.delete("/extensions/:name", async (c) => {
+    const user = c.get("user");
+    const name = c.req.param("name");
+    const row = await getExtensionRow(user.id, name);
+    if (!row) return c.json({ error: "not found" }, 404);
+    try {
+      await deleteExtensionBackend(row.backend_name);
+    } catch (err) {
+      return c.json(failure(err), 502);
+    }
+    await deleteExtensionRow(user.id, name);
+    return c.json({ ok: true });
+  });
   app2.get("/sessions/:id/replays/:replayId/download", async (c) => {
     const user = c.get("user");
     const row = await loadOpenSession(c.req.param("id"), user.id);
@@ -35268,10 +35650,11 @@ function buildBrowserAgentRoutes() {
   });
   return app2;
 }
-var import_hono17, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS;
+var import_node_crypto12, import_hono17, auth, DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS, EXTENSION_NAME_RE;
 var init_browser_agent_routes = __esm({
   "src/api/browser-agent-routes.ts"() {
     "use strict";
+    import_node_crypto12 = require("crypto");
     import_hono17 = require("hono");
     init_api_auth();
     init_errors();
@@ -35282,6 +35665,7 @@ var init_browser_agent_routes = __esm({
     init_concurrency_gates();
     auth = createApiKeyAuth();
     DEFAULT_BROWSER_SESSION_LOCK_TTL_SECONDS = 2 * 60 * 60;
+    EXTENSION_NAME_RE = /^[\w .-]{1,64}$/;
   }
 });
 
@@ -35640,7 +36024,6 @@ var init_stripe_routes = __esm({
           const live = sub.status === "active" || sub.status === "trialing";
           const newTier = live ? tier.tier : null;
           await setSubscriptionTier(user.id, newTier, live ? tier.concurrency : 0, live ? sub.id : null);
-          await syncMemoryKeyPlan(user, resolveEffectiveMemoryPlan({ ...user, subscription_tier: newTier }));
         } else if (priceId === CONCURRENCY_PRICE_ID && event.type === "customer.subscription.created") {
           await setExtraConcurrencySlots(user.id, user.extra_concurrency_slots + 1);
           await setConcurrencySubId(user.id, sub.id);
@@ -35666,7 +36049,6 @@ var init_stripe_routes = __esm({
         if (!user) return c.json({ received: true });
         if (priceId && priceId in SUBSCRIPTION_TIERS) {
           await setSubscriptionTier(user.id, null, 0, null);
-          await syncMemoryKeyPlan(user, resolveEffectiveMemoryPlan({ ...user, subscription_tier: null }));
         } else if (priceId === CONCURRENCY_PRICE_ID) {
           await setExtraConcurrencySlots(user.id, Math.max(0, user.extra_concurrency_slots - 1));
           await setConcurrencySubId(user.id, null);
@@ -35690,7 +36072,7 @@ async function getKeys() {
   const privateKey = await (0, import_jose2.importPKCS8)(pem, "RS256", { extractable: true });
   const full = await (0, import_jose2.exportJWK)(privateKey);
   const publicJwk = { kty: full.kty, n: full.n, e: full.e };
-  const kid = (0, import_node_crypto12.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
+  const kid = (0, import_node_crypto13.createHash)("sha256").update(JSON.stringify({ e: publicJwk.e, kty: publicJwk.kty, n: publicJwk.n })).digest("base64url").slice(0, 16);
   publicJwk.kid = kid;
   publicJwk.alg = "RS256";
   publicJwk.use = "sig";
@@ -35869,23 +36251,23 @@ async function validateAuthRequest(p) {
 }
 function pkceMatches(verifier, challenge) {
   if (!verifier) return false;
-  const computed = (0, import_node_crypto12.createHash)("sha256").update(verifier).digest("base64url");
+  const computed = (0, import_node_crypto13.createHash)("sha256").update(verifier).digest("base64url");
   return computed === challenge;
 }
 async function mintAccessToken(identity, scope, plan, audience) {
   const { privateKey, kid } = await getKeys();
-  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto12.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
+  return new import_jose2.SignJWT({ scope, plan }).setProtectedHeader({ alg: "RS256", kid }).setIssuer(ISSUER).setSubject(identity).setAudience(audience).setIssuedAt().setJti((0, import_node_crypto13.randomUUID)()).setExpirationTime(`${ACCESS_TTL_SECONDS}s`).sign(privateKey);
 }
 function tokenErrorResponse(c, error, description, status) {
   return c.json({ error, error_description: description }, status);
 }
-var import_hono19, import_cookie, import_node_crypto12, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
+var import_hono19, import_cookie, import_node_crypto13, import_jose2, ISSUER, RESOURCE, SCRAPER_RESOURCE, MEMORY_SCOPES, SCRAPER_SCOPES, SUPPORTED_SCOPES, ACCESS_TTL_SECONDS, REFRESH_TTL_SECONDS, CODE_TTL_SECONDS, ROTATION_GRACE_SECONDS, secureCookies, sessionCookieOptions, cachedKeys, oauthApp;
 var init_oauth_routes = __esm({
   "src/api/oauth-routes.ts"() {
     "use strict";
     import_hono19 = require("hono");
     import_cookie = require("hono/cookie");
-    import_node_crypto12 = require("crypto");
+    import_node_crypto13 = require("crypto");
     import_jose2 = require("jose");
     init_session();
     init_db();
@@ -35971,7 +36353,7 @@ var init_oauth_routes = __esm({
         }
       }
       const clientName = typeof body.client_name === "string" ? body.client_name : null;
-      const clientId = `client_${(0, import_node_crypto12.randomBytes)(16).toString("hex")}`;
+      const clientId = `client_${(0, import_node_crypto13.randomBytes)(16).toString("hex")}`;
       await registerClient(clientId, redirectUris, clientName);
       console.log("[oauth-dcr] register OK client_id=%s redirect_uris=%s", clientId, JSON.stringify(redirectUris));
       return c.json({
@@ -36024,7 +36406,7 @@ var init_oauth_routes = __esm({
       if (action === "deny") return redirectWithError(p.redirect_uri, p.state, "access_denied");
       if (action !== "approve") return c.text("unsupported action", 400);
       const scope = negotiateScope(p.scope, user, p.resource);
-      const code = `code_${(0, import_node_crypto12.randomBytes)(32).toString("base64url")}`;
+      const code = `code_${(0, import_node_crypto13.randomBytes)(32).toString("base64url")}`;
       const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1e3).toISOString();
       await putCode({
         code,
@@ -36063,7 +36445,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const refreshToken = `rt_${(0, import_node_crypto12.randomBytes)(40).toString("base64url")}`;
+        const refreshToken = `rt_${(0, import_node_crypto13.randomBytes)(40).toString("base64url")}`;
         await putRefresh({
           refresh_token: refreshToken,
           client_id: clientId,
@@ -36093,7 +36475,7 @@ var init_oauth_routes = __esm({
         const plan = user ? resolvePlan(user) : "free";
         const audience = record.resource ?? RESOURCE();
         const accessToken = await mintAccessToken(record.identity, record.scope, plan, audience);
-        const nextRefresh = `rt_${(0, import_node_crypto12.randomBytes)(40).toString("base64url")}`;
+        const nextRefresh = `rt_${(0, import_node_crypto13.randomBytes)(40).toString("base64url")}`;
         await rotateRefresh(refreshToken, {
           refresh_token: nextRefresh,
           client_id: record.client_id,
@@ -37162,6 +37544,77 @@ var init_site_audit_worker = __esm({
   }
 });
 
+// src/api/page-diff.ts
+function sha256Hex(value) {
+  return (0, import_node_crypto14.createHash)("sha256").update(value).digest("hex");
+}
+function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
+  if (value.length <= maxChars) return { value, truncated: false };
+  return { value: value.slice(0, maxChars), truncated: true };
+}
+function changeLines(change) {
+  const lines = change.value.split("\n");
+  if (lines.length > 0 && lines[lines.length - 1] === "") lines.pop();
+  return lines;
+}
+function diffPageContent(oldContent, newContent) {
+  const changes = (0, import_diff.diffLines)(oldContent, newContent);
+  const rawHunks = [];
+  let linesAdded = 0;
+  let linesRemoved = 0;
+  let totalChangedLineCount = 0;
+  for (const change of changes) {
+    if (!change.added && !change.removed) continue;
+    const lines = changeLines(change);
+    totalChangedLineCount += lines.length;
+    if (change.added) linesAdded += lines.length;
+    if (change.removed) linesRemoved += lines.length;
+    rawHunks.push({ type: change.added ? "added" : "removed", lines });
+  }
+  let hunksTruncated = false;
+  const hunksWithinCount = rawHunks.length > MAX_DIFF_HUNKS ? rawHunks.slice(0, MAX_DIFF_HUNKS) : rawHunks;
+  if (rawHunks.length > MAX_DIFF_HUNKS) hunksTruncated = true;
+  const hunks = [];
+  let emittedLines = 0;
+  for (const hunk of hunksWithinCount) {
+    if (emittedLines >= MAX_DIFF_LINES_PER_RESPONSE) {
+      hunksTruncated = true;
+      break;
+    }
+    const remaining = MAX_DIFF_LINES_PER_RESPONSE - emittedLines;
+    if (hunk.lines.length > remaining) {
+      hunks.push({ type: hunk.type, lines: hunk.lines.slice(0, remaining) });
+      emittedLines += remaining;
+      hunksTruncated = true;
+      break;
+    }
+    hunks.push(hunk);
+    emittedLines += hunk.lines.length;
+  }
+  const denominator = Math.max(oldContent.split("\n").length, newContent.split("\n").length, 1);
+  const percentChanged = totalChangedLineCount > 0 ? Math.min(100, Math.round(totalChangedLineCount / denominator * 1e3) / 10) : 0;
+  return {
+    hunks,
+    linesAdded,
+    linesRemoved,
+    percentChanged,
+    hunksTruncated,
+    hunksTruncatedReason: hunksTruncated ? `Showing ${emittedLines} of ${totalChangedLineCount} changed lines (capped at ${MAX_DIFF_HUNKS} hunks / ${MAX_DIFF_LINES_PER_RESPONSE} lines). Use contentHash/previousContentHash to confirm the full scope of change.` : null,
+    totalChangedLineCount
+  };
+}
+var import_node_crypto14, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var init_page_diff = __esm({
+  "src/api/page-diff.ts"() {
+    "use strict";
+    import_node_crypto14 = require("crypto");
+    import_diff = require("diff");
+    MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
+    MAX_DIFF_HUNKS = 200;
+    MAX_DIFF_LINES_PER_RESPONSE = 2e3;
+  }
+});
+
 // src/api/scrape-vault-sink.ts
 async function depositScrapeToVault(user, opts) {
   try {
@@ -37859,6 +38312,7 @@ var init_server = __esm({
     import_stripe2 = __toESM(require("stripe"), 1);
     init_rates();
     init_server_schemas();
+    init_page_diff();
     init_scrape_vault_sink();
     init_scrape_blob_cleanup();
     init_schemas3();
@@ -38758,6 +39212,91 @@ var init_server = __esm({
         await releaseConcurrencyGate(gate.lockId);
       }
     });
+    app.post("/diff-page", auth2, async (c) => {
+      const raw = await c.req.json().catch(() => ({}));
+      const bodyResult = DiffPageBodySchema.safeParse(raw);
+      if (!bodyResult.success) return c.json({ error: bodyResult.error.issues[0]?.message ?? "Invalid request" }, 400);
+      const { url, allowLocal, resetBaseline } = bodyResult.data;
+      if (!allowLocal) {
+        const checked = await validatePublicHttpUrl(url, { field: "URL" });
+        if (checked.error || !checked.parsed) return c.json({ error: checked.error ?? "Invalid URL" }, 400);
+      } else {
+        try {
+          new URL(url);
+        } catch {
+          return c.json({ error: "Invalid URL" }, 400);
+        }
+      }
+      const canonicalUrl = (() => {
+        try {
+          return new URL(url).href;
+        } catch {
+          return url;
+        }
+      })();
+      const user = c.get("user");
+      const gate = await acquireConcurrencyGate(user, "diff_page", {
+        reuseLockId: c.req.header("x-mcp-scraper-concurrency-lock"),
+        metadata: { url: canonicalUrl }
+      });
+      if (!gate.ok) return c.json(concurrencyLimitExceededResponse(gate), 429, { "Retry-After": String(gate.retryAfterSeconds) });
+      let debited = false;
+      try {
+        const { ok: dpOk, balance_mc: dpBal } = await debitMc(user.id, MC_COSTS.diff_page, LedgerOperation.DIFF_PAGE, new URL(canonicalUrl).hostname);
+        if (!dpOk) return c.json(insufficientBalanceResponse(dpBal, MC_COSTS.diff_page), 402);
+        debited = true;
+        const existingSnapshot = await getPageSnapshot(user.id, canonicalUrl);
+        const previous = resetBaseline ? null : existingSnapshot;
+        const kernelApiKey = browserServiceApiKey();
+        const result = await extractKpo({ url: canonicalUrl, kernelApiKey });
+        const currentContent = result.bodyMarkdown ?? "";
+        const currentHash = sha256Hex(currentContent);
+        const { value: storedContent, truncated: contentTruncated } = truncateForStorage(currentContent);
+        const currentCheckedAt = (/* @__PURE__ */ new Date()).toISOString();
+        await upsertPageSnapshot(user.id, canonicalUrl, {
+          contentHash: currentHash,
+          content: storedContent,
+          title: result.title ?? null,
+          contentBytes: Buffer.byteLength(currentContent, "utf8"),
+          truncated: contentTruncated
+        });
+        let status;
+        let diff = { hunks: [], linesAdded: 0, linesRemoved: 0, percentChanged: 0, hunksTruncated: false, hunksTruncatedReason: null, totalChangedLineCount: 0 };
+        if (!previous) {
+          status = "baseline";
+          diff.percentChanged = null;
+        } else if (previous.contentHash === currentHash) {
+          status = "unchanged";
+        } else {
+          status = "changed";
+          diff = diffPageContent(previous.content, storedContent);
+        }
+        await logRequestEvent({ userId: user.id, source: "diff_page", status: "done", query: canonicalUrl, result: { status } });
+        return c.json({
+          url: canonicalUrl,
+          title: result.title ?? null,
+          status,
+          isReset: !!resetBaseline && !!existingSnapshot,
+          previousCheckedAt: previous?.checkedAt ?? null,
+          currentCheckedAt,
+          contentHash: currentHash,
+          previousContentHash: previous?.contentHash ?? null,
+          summary: { linesAdded: diff.linesAdded, linesRemoved: diff.linesRemoved, percentChanged: diff.percentChanged },
+          hunks: diff.hunks,
+          contentTruncated,
+          hunksTruncated: diff.hunksTruncated,
+          hunksTruncatedReason: diff.hunksTruncatedReason,
+          totalChangedLineCount: diff.totalChangedLineCount
+        });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (debited) await creditMc(user.id, MC_COSTS.diff_page, LedgerOperation.DIFF_PAGE, "failed call");
+        await logRequestEvent({ userId: user.id, source: "diff_page", status: "failed", query: canonicalUrl, error: msg });
+        return c.json({ error: msg }, 500);
+      } finally {
+        await releaseConcurrencyGate(gate.lockId);
+      }
+    });
     app.post("/map-urls", auth2, async (c) => {
       const raw = await c.req.json().catch(() => ({}));
       const bodyResult = MapUrlsBodySchema.safeParse(raw);