mcp-scraper 0.45.0 → 0.46.0

package/dist/{server-7B75SDNG.js → server-SMEHT3OU.js}

@@ -48,6 +48,10 @@ import {
 import {
   ApiErrorResponseSchema,
   ArtifactTemplateConfigSchema,
+  CommonsClaimPublicationInputSchema,
+  CommonsPreparePublicationInputSchema,
+  CommonsPublishEditorialInputSchema,
+  CommonsValidatePublicationInputSchema,
   CreateArtifactTemplateInputSchema,
   CreateEditorialReadingRoomInputSchema,
   CreateScheduledRunViewLinkInputSchema,
@@ -90,7 +94,7 @@ import {
   resolveDeploymentProfile,
   resolveLocalSourcebookSchemaType,
   transcribeMediaUrl
-} from "./chunk-FQIICRR4.js";
+} from "./chunk-BP2IUIAH.js";
 import {
   auditImageUrls,
   auditImages,
@@ -146,7 +150,7 @@ import {
 } from "./chunk-3ZUBQQPQ.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-CEZ3NFBP.js";
+} from "./chunk-TQKQK7OV.js";
 import {
   abandonExtractSettlement,
   countSuccessfulPages,
@@ -3643,7 +3647,7 @@ async function generateOgImage(post) {
 
 // src/api/server.ts
 import { Resend as Resend3 } from "resend";
-import { randomUUID as randomUUID22 } from "crypto";
+import { randomUUID as randomUUID23 } from "crypto";
 
 // src/api/kpo-extractor.ts
 import TurndownService from "turndown";
@@ -30845,7 +30849,7 @@ import { z as z32 } from "zod";
 
 // src/api/commons-repository.ts
 import { createHash as createHash12, randomUUID as randomUUID15 } from "crypto";
-var COMMONS_SCHEMA_VERSION = "2026-08-04.2";
+var COMMONS_SCHEMA_VERSION = "2026-08-04.3";
 var DEFAULT_COMMONS_BASE_URL = "https://transparent-commons.cc";
 var DEFAULT_ENTITY_TYPE = "PublicArticle";
 var COMMONS_ENTITY_PROFILES = {
@@ -31127,6 +31131,54 @@ async function ensureCommonsSchema() {
     },
     { sql: `CREATE INDEX IF NOT EXISTS commons_index_documents_status_updated ON commons_index_documents(embedding_status, updated_at DESC)`, args: [] },
     { sql: `CREATE INDEX IF NOT EXISTS commons_index_documents_entity_type ON commons_index_documents(entity_id, document_type)`, args: [] },
+    {
+      sql: `
+        CREATE TABLE IF NOT EXISTS commons_publications (
+          id TEXT PRIMARY KEY,
+          owner_user_id INTEGER NOT NULL REFERENCES users(id),
+          subdomain TEXT NOT NULL UNIQUE,
+          title TEXT NOT NULL,
+          description TEXT NOT NULL DEFAULT '',
+          claim_idempotency_key TEXT NOT NULL,
+          latest_edition_id TEXT,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          UNIQUE(owner_user_id),
+          UNIQUE(owner_user_id, claim_idempotency_key)
+        )
+      `,
+      args: []
+    },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_publications_updated ON commons_publications(updated_at DESC)`, args: [] },
+    {
+      sql: `
+        CREATE TABLE IF NOT EXISTS commons_publication_editions (
+          id TEXT PRIMARY KEY,
+          publication_id TEXT NOT NULL REFERENCES commons_publications(id),
+          owner_user_id INTEGER NOT NULL REFERENCES users(id),
+          edition_slug TEXT NOT NULL,
+          revision INTEGER NOT NULL,
+          title TEXT NOT NULL,
+          site_json TEXT NOT NULL,
+          deck TEXT NOT NULL,
+          articles_json TEXT NOT NULL,
+          html TEXT NOT NULL,
+          filename TEXT NOT NULL,
+          sha256 TEXT NOT NULL,
+          article_count INTEGER NOT NULL,
+          word_count INTEGER NOT NULL,
+          bytes INTEGER NOT NULL,
+          warnings_json TEXT NOT NULL DEFAULT '[]',
+          idempotency_key TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          published_at TEXT NOT NULL,
+          UNIQUE(publication_id, edition_slug, revision),
+          UNIQUE(owner_user_id, idempotency_key)
+        )
+      `,
+      args: []
+    },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_publication_editions_publication_published ON commons_publication_editions(publication_id, published_at DESC)`, args: [] },
     {
       sql: "INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",
       args: [COMMONS_SCHEMA_VERSION]
@@ -32704,6 +32756,392 @@ var CommonsRepositoryError = class extends Error {
   httpStatus;
 };
 
+// src/api/commons-publication-repository.ts
+import { createHash as createHash13, randomUUID as randomUUID16 } from "crypto";
+var PUBLICATION_ROOT_DOMAIN = process.env.COMMONS_PUBLICATION_ROOT_DOMAIN || "transparent-commons.cc";
+var RESERVED_SUBDOMAINS = /* @__PURE__ */ new Set([
+  "admin",
+  "api",
+  "app",
+  "assets",
+  "auth",
+  "blog",
+  "cdn",
+  "docs",
+  "help",
+  "login",
+  "mail",
+  "mcp",
+  "signup",
+  "sitemap",
+  "static",
+  "support",
+  "transparent-commons",
+  "transparentcommons",
+  "www",
+  "wiki"
+]);
+var CommonsPublicationError = class extends Error {
+  constructor(code, message, httpStatus = 400) {
+    super(message);
+    this.code = code;
+    this.httpStatus = httpStatus;
+    this.name = "CommonsPublicationError";
+  }
+  code;
+  httpStatus;
+};
+async function prepareCommonsPublication(input, user) {
+  await ensureCommonsSchema();
+  const subdomain = normalizePublicationSubdomain(input.requestedSubdomain);
+  const [owned, claimed] = await Promise.all([
+    getCommonsPublicationForOwner(Number(user.id)),
+    getCommonsPublicationBySubdomain(subdomain)
+  ]);
+  const availability = claimed ? claimed.ownerUserId === Number(user.id) ? "owned_by_caller" : "unavailable" : "available";
+  return {
+    requestedSubdomain: input.requestedSubdomain,
+    normalizedSubdomain: subdomain,
+    availability,
+    requestedPublicUrl: publicationPublicUrl(subdomain),
+    currentPublication: owned,
+    contract: {
+      ownership: "One publication per authenticated MCP Scraper account.",
+      permanence: "Claimed names are stable and globally unique.",
+      renderer: "Published editions use the MCP Scraper editorial reading-room renderer.",
+      revisionRule: "Editing an existing edition requires its current baseRevision.",
+      publicRoutes: ["/", "/archive", "/editions/{editionSlug}"],
+      workflow: [
+        "commons_prepare_publication",
+        "commons_validate_publication",
+        "commons_claim_publication",
+        "commons_publish_editorial"
+      ]
+    },
+    proposed: {
+      title: cleanText(input.title, 140) || publicationTitleFromSubdomain(subdomain),
+      description: cleanText(input.description, 500)
+    }
+  };
+}
+async function validateCommonsPublication(input, user) {
+  await ensureCommonsSchema();
+  const errors = [];
+  const warnings = [];
+  let subdomain = "";
+  try {
+    subdomain = normalizePublicationSubdomain(input.requestedSubdomain || input.publicationSubdomain || "");
+  } catch (error) {
+    errors.push(error instanceof Error ? error.message : String(error));
+  }
+  const publication = subdomain ? await getCommonsPublicationBySubdomain(subdomain) : null;
+  if (input.operation === "claim") {
+    const owned = await getCommonsPublicationForOwner(Number(user.id));
+    if (publication && publication.ownerUserId !== Number(user.id)) errors.push("That publication name is already claimed by another account.");
+    if (owned && owned.subdomain !== subdomain) errors.push(`This account already owns ${owned.publicUrl}.`);
+    if (!cleanText(input.title, 140)) warnings.push("No display title was supplied; the publication name will be title-cased.");
+  } else {
+    if (!publication) errors.push("Claim this publication name before publishing an edition.");
+    else if (publication.ownerUserId !== Number(user.id)) errors.push("Only the account that claimed this publication can publish to it.");
+    if (!input.edition) errors.push("A complete editorial reading-room edition is required for publish validation.");
+    if (input.edition) {
+      try {
+        renderEditorialReadingRoom(input.edition);
+      } catch (error) {
+        errors.push(error instanceof Error ? error.message : String(error));
+      }
+      const slug2 = normalizeEditionSlug(input.editionSlug || input.edition.site.slug);
+      const latest = publication ? await getLatestEdition(publication.id, slug2) : null;
+      if (latest && input.baseRevision === void 0) errors.push(`Edition ${slug2} already exists at revision ${latest.revision}; supply baseRevision to edit it.`);
+      if (latest && input.baseRevision !== void 0 && latest.revision !== input.baseRevision) {
+        errors.push(`Edition ${slug2} is revision ${latest.revision}; the proposed edit targeted ${input.baseRevision}.`);
+      }
+    }
+  }
+  return {
+    valid: errors.length === 0,
+    operation: input.operation,
+    normalizedSubdomain: subdomain || null,
+    publicUrl: subdomain ? publicationPublicUrl(subdomain) : null,
+    errors,
+    warnings,
+    publication
+  };
+}
+async function claimCommonsPublication(input, user) {
+  await ensureCommonsSchema();
+  const subdomain = normalizePublicationSubdomain(input.requestedSubdomain);
+  const userId = Number(user.id);
+  const existingOwned = await getCommonsPublicationForOwner(userId);
+  if (existingOwned) {
+    if (existingOwned.subdomain === subdomain) return { publication: existingOwned, idempotentReplay: true };
+    throw new CommonsPublicationError("publication_already_claimed", `This account already owns ${existingOwned.publicUrl}.`, 409);
+  }
+  const existingName = await getCommonsPublicationBySubdomain(subdomain);
+  if (existingName) throw new CommonsPublicationError("publication_name_unavailable", "That publication name is already claimed.", 409);
+  const id = `tcpub_${randomUUID16()}`;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    await getDb().execute({
+      sql: `
+        INSERT INTO commons_publications (
+          id, owner_user_id, subdomain, title, description, claim_idempotency_key, created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+      `,
+      args: [
+        id,
+        userId,
+        subdomain,
+        cleanText(input.title, 140) || publicationTitleFromSubdomain(subdomain),
+        cleanText(input.description, 500),
+        requiredIdempotencyKey(input.idempotencyKey),
+        now,
+        now
+      ]
+    });
+  } catch (error) {
+    const replay = await getCommonsPublicationForOwner(userId);
+    if (replay?.subdomain === subdomain) return { publication: replay, idempotentReplay: true };
+    throw error;
+  }
+  const publication = await getCommonsPublicationBySubdomain(subdomain);
+  if (!publication) throw new CommonsPublicationError("publication_claim_failed", "The publication claim was not persisted.");
+  return { publication, idempotentReplay: false };
+}
+async function publishCommonsEditorial(input, user) {
+  await ensureCommonsSchema();
+  const subdomain = normalizePublicationSubdomain(input.publicationSubdomain);
+  const publication = await getCommonsPublicationBySubdomain(subdomain);
+  if (!publication) throw new CommonsPublicationError("publication_not_found", "Claim this publication name before publishing an edition.", 404);
+  if (publication.ownerUserId !== Number(user.id)) {
+    throw new CommonsPublicationError("publication_not_owned", "Only the account that claimed this publication can publish to it.", 404);
+  }
+  const idempotencyKey3 = requiredIdempotencyKey(input.idempotencyKey);
+  const replay = await getEditionByIdempotency(Number(user.id), idempotencyKey3);
+  if (replay) return publicationResult(publication, replay, true);
+  const editionSlug = normalizeEditionSlug(input.editionSlug || input.site.slug);
+  const latest = await getLatestEdition(publication.id, editionSlug);
+  if (latest && input.baseRevision === void 0) {
+    throw new CommonsPublicationError("publication_base_revision_required", `Edition ${editionSlug} already exists at revision ${latest.revision}; supply baseRevision to edit it.`, 409);
+  }
+  if (latest && input.baseRevision !== latest.revision) {
+    throw new CommonsPublicationError("publication_revision_conflict", `Edition ${editionSlug} is revision ${latest.revision}; refresh it before publishing an edit.`, 409);
+  }
+  const { publicationSubdomain: _publicationSubdomain, editionSlug: _editionSlug, idempotencyKey: _idempotencyKey, baseRevision: _baseRevision, ...editionInput } = input;
+  const canonicalUrl = editionPublicUrl(subdomain, editionSlug);
+  const rendered = renderEditorialReadingRoom(editionInput);
+  const html = addPublicMetadata(rendered.html, canonicalUrl, publication.title);
+  const editionId = `tced_${randomUUID16()}`;
+  const revision = (latest?.revision ?? 0) + 1;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  await getDb().batch([
+    {
+      sql: `
+        INSERT INTO commons_publication_editions (
+          id, publication_id, owner_user_id, edition_slug, revision, title, site_json, deck,
+          articles_json, html, filename, sha256, article_count, word_count, bytes, warnings_json,
+          idempotency_key, created_at, published_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `,
+      args: [
+        editionId,
+        publication.id,
+        Number(user.id),
+        editionSlug,
+        revision,
+        editionInput.site.title,
+        JSON.stringify(editionInput.site),
+        editionInput.deck,
+        JSON.stringify(editionInput.articles),
+        html,
+        rendered.filename,
+        createHash13("sha256").update(html).digest("hex"),
+        rendered.articleCount,
+        rendered.wordCount,
+        Buffer.byteLength(html),
+        JSON.stringify(rendered.warnings),
+        idempotencyKey3,
+        now,
+        now
+      ]
+    },
+    {
+      sql: "UPDATE commons_publications SET latest_edition_id = ?, updated_at = ? WHERE id = ? AND owner_user_id = ?",
+      args: [editionId, now, publication.id, Number(user.id)]
+    }
+  ], "write");
+  const edition = await getPublicationEditionById(editionId);
+  if (!edition) throw new CommonsPublicationError("publication_publish_failed", "The published edition was not persisted.");
+  return publicationResult({ ...publication, latestEditionId: editionId, updatedAt: now }, edition, false);
+}
+async function getCommonsPublicationBySubdomain(subdomainInput) {
+  await ensureCommonsSchema();
+  const subdomain = normalizePublicationSubdomain(subdomainInput);
+  const result = await getDb().execute({ sql: "SELECT * FROM commons_publications WHERE subdomain = ? LIMIT 1", args: [subdomain] });
+  return result.rows[0] ? rowToPublication(result.rows[0]) : null;
+}
+async function getCommonsPublicationForOwner(userId) {
+  await ensureCommonsSchema();
+  const result = await getDb().execute({ sql: "SELECT * FROM commons_publications WHERE owner_user_id = ? LIMIT 1", args: [userId] });
+  return result.rows[0] ? rowToPublication(result.rows[0]) : null;
+}
+async function listCommonsPublicationEditions(publicationId) {
+  await ensureCommonsSchema();
+  const result = await getDb().execute({
+    sql: `
+      SELECT edition.* FROM commons_publication_editions edition
+      JOIN (
+        SELECT edition_slug, MAX(revision) AS revision
+        FROM commons_publication_editions WHERE publication_id = ? GROUP BY edition_slug
+      ) latest ON latest.edition_slug = edition.edition_slug AND latest.revision = edition.revision
+      WHERE edition.publication_id = ? ORDER BY edition.published_at DESC
+    `,
+    args: [publicationId, publicationId]
+  });
+  const publication = await getPublicationById(publicationId);
+  if (!publication) return [];
+  return result.rows.map((row) => rowToEdition(row, publication.subdomain));
+}
+async function getCommonsPublicationEditionHtml(subdomainInput, editionSlugInput) {
+  const publication = await getCommonsPublicationBySubdomain(subdomainInput);
+  if (!publication) return null;
+  const result = editionSlugInput ? await getDb().execute({
+    sql: "SELECT * FROM commons_publication_editions WHERE publication_id = ? AND edition_slug = ? ORDER BY revision DESC LIMIT 1",
+    args: [publication.id, normalizeEditionSlug(editionSlugInput)]
+  }) : await getDb().execute({
+    sql: "SELECT * FROM commons_publication_editions WHERE id = ? AND publication_id = ? LIMIT 1",
+    args: [publication.latestEditionId || "", publication.id]
+  });
+  if (!result.rows[0]) return null;
+  const record = result.rows[0];
+  return { publication, edition: rowToEdition(record, publication.subdomain), html: String(record.html || "") };
+}
+async function getPublicationById(id) {
+  const result = await getDb().execute({ sql: "SELECT * FROM commons_publications WHERE id = ? LIMIT 1", args: [id] });
+  return result.rows[0] ? rowToPublication(result.rows[0]) : null;
+}
+async function getLatestEdition(publicationId, editionSlug) {
+  const publication = await getPublicationById(publicationId);
+  if (!publication) return null;
+  const result = await getDb().execute({
+    sql: "SELECT * FROM commons_publication_editions WHERE publication_id = ? AND edition_slug = ? ORDER BY revision DESC LIMIT 1",
+    args: [publicationId, editionSlug]
+  });
+  return result.rows[0] ? rowToEdition(result.rows[0], publication.subdomain) : null;
+}
+async function getEditionByIdempotency(userId, idempotencyKey3) {
+  const result = await getDb().execute({
+    sql: `SELECT edition.*, publication.subdomain FROM commons_publication_editions edition JOIN commons_publications publication ON publication.id = edition.publication_id WHERE edition.owner_user_id = ? AND edition.idempotency_key = ? LIMIT 1`,
+    args: [userId, idempotencyKey3]
+  });
+  if (!result.rows[0]) return null;
+  const record = result.rows[0];
+  return rowToEdition(record, String(record.subdomain));
+}
+async function getPublicationEditionById(id) {
+  const result = await getDb().execute({
+    sql: `SELECT edition.*, publication.subdomain FROM commons_publication_editions edition JOIN commons_publications publication ON publication.id = edition.publication_id WHERE edition.id = ? LIMIT 1`,
+    args: [id]
+  });
+  if (!result.rows[0]) return null;
+  const record = result.rows[0];
+  return rowToEdition(record, String(record.subdomain));
+}
+function rowToPublication(row) {
+  const subdomain = String(row.subdomain);
+  return {
+    id: String(row.id),
+    ownerUserId: Number(row.owner_user_id),
+    subdomain,
+    title: String(row.title),
+    description: String(row.description || ""),
+    latestEditionId: row.latest_edition_id ? String(row.latest_edition_id) : null,
+    createdAt: String(row.created_at),
+    updatedAt: String(row.updated_at),
+    publicUrl: publicationPublicUrl(subdomain),
+    archiveUrl: `${publicationPublicUrl(subdomain)}/archive`
+  };
+}
+function rowToEdition(row, subdomain) {
+  const editionSlug = String(row.edition_slug);
+  return {
+    id: String(row.id),
+    publicationId: String(row.publication_id),
+    editionSlug,
+    revision: Number(row.revision),
+    title: String(row.title),
+    site: parseJson4(row.site_json, {}),
+    deck: String(row.deck),
+    filename: String(row.filename),
+    sha256: String(row.sha256),
+    articleCount: Number(row.article_count),
+    wordCount: Number(row.word_count),
+    bytes: Number(row.bytes),
+    warnings: parseJson4(row.warnings_json, []),
+    createdAt: String(row.created_at),
+    publishedAt: String(row.published_at),
+    publicUrl: editionPublicUrl(subdomain, editionSlug)
+  };
+}
+function publicationResult(publication, edition, idempotentReplay) {
+  return {
+    publication,
+    edition,
+    publicUrl: publication.publicUrl,
+    archiveUrl: publication.archiveUrl,
+    editionUrl: edition.publicUrl,
+    idempotentReplay
+  };
+}
+function normalizePublicationSubdomain(value) {
+  const normalized = String(value || "").trim().toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9-]/g, "").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  if (!/^[a-z0-9](?:[a-z0-9-]{1,48}[a-z0-9])$/.test(normalized)) {
+    throw new CommonsPublicationError("publication_name_invalid", "Choose a publication name between 3 and 50 characters using letters, numbers, and interior hyphens.");
+  }
+  if (RESERVED_SUBDOMAINS.has(normalized)) throw new CommonsPublicationError("publication_name_reserved", "That publication name is reserved; choose a more specific name.", 409);
+  return normalized;
+}
+function normalizeEditionSlug(value) {
+  const normalized = String(value || "").trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 80);
+  if (!normalized) throw new CommonsPublicationError("edition_slug_invalid", "A published edition needs a stable slug.");
+  return normalized;
+}
+function requiredIdempotencyKey(value) {
+  const normalized = cleanText(value, 200);
+  if (normalized.length < 8) throw new CommonsPublicationError("idempotency_key_invalid", "Use an idempotency key of at least 8 characters and reuse it only when retrying the same write.");
+  return normalized;
+}
+function publicationPublicUrl(subdomain) {
+  return `https://${subdomain}.${PUBLICATION_ROOT_DOMAIN}`;
+}
+function editionPublicUrl(subdomain, editionSlug) {
+  return `${publicationPublicUrl(subdomain)}/editions/${encodeURIComponent(editionSlug)}`;
+}
+function publicationTitleFromSubdomain(subdomain) {
+  return subdomain.split("-").map((part) => part ? `${part[0]?.toUpperCase()}${part.slice(1)}` : "").join(" ");
+}
+function cleanText(value, max) {
+  return String(value || "").replace(/\s+/g, " ").trim().slice(0, max);
+}
+function parseJson4(value, fallback) {
+  try {
+    return JSON.parse(String(value || ""));
+  } catch {
+    return fallback;
+  }
+}
+function addPublicMetadata(html, canonicalUrl, publicationTitle) {
+  const escapedUrl = canonicalUrl.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
+  const escapedTitle = publicationTitle.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
+  return html.replace("</head>", [
+    `  <link rel="canonical" href="${escapedUrl}">`,
+    `  <meta property="og:url" content="${escapedUrl}">`,
+    `  <meta property="og:site_name" content="${escapedTitle}">`,
+    '  <meta name="robots" content="index,follow">',
+    "</head>"
+  ].join("\n"));
+}
+
 // src/api/commons-routes.ts
 var commonsApp = new Hono31();
 var auth2 = createApiKeyAuth();
@@ -32865,10 +33303,83 @@ var NeedsLinkBodySchema = z32.object({
   limit: z32.number().int().min(1).max(100).optional(),
   offset: z32.number().int().min(0).max(1e4).optional()
 }).strict();
+var PreparePublicationSchema = z32.object(CommonsPreparePublicationInputSchema).strict();
+var ValidatePublicationSchema = z32.object(CommonsValidatePublicationInputSchema).strict();
+var ClaimPublicationSchema = z32.object(CommonsClaimPublicationInputSchema).strict();
+var PublishEditorialSchema = z32.object(CommonsPublishEditorialInputSchema).strict();
 commonsApp.get("/health", async (c) => {
   await ensureCommonsSchema();
   return c.json({ ok: true, data: commonsDatabaseReport() });
 });
+commonsApp.post("/publications/prepare", auth2, async (c) => {
+  const parsed = PreparePublicationSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success) return validationError(c, parsed.error);
+  return publicationOperation(c, () => prepareCommonsPublication(parsed.data, c.get("user")));
+});
+commonsApp.post("/publications/validate", auth2, async (c) => {
+  const parsed = ValidatePublicationSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success) return validationError(c, parsed.error);
+  return publicationOperation(c, () => validateCommonsPublication(parsed.data, c.get("user")));
+});
+commonsApp.post("/publications/claim", auth2, async (c) => {
+  const parsed = ClaimPublicationSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success) return validationError(c, parsed.error);
+  return publicationOperation(c, () => claimCommonsPublication(parsed.data, c.get("user")), 201);
+});
+commonsApp.post("/publications/publish", auth2, async (c) => {
+  const parsed = PublishEditorialSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success) return validationError(c, parsed.error);
+  return publicationOperation(c, () => publishCommonsEditorial(parsed.data, c.get("user")), 201);
+});
+commonsApp.get("/publications/me", auth2, async (c) => {
+  const publication = await getCommonsPublicationForOwner(Number(c.get("user").id));
+  if (!publication) return c.json({ ok: false, error: "publication_not_found", message: "This account has not claimed a Commons publication yet." }, 404);
+  const editions = c.req.query("includeEditions") === "false" ? [] : await listCommonsPublicationEditions(publication.id);
+  return c.json({ ok: true, data: { publication, editions } });
+});
+commonsApp.get("/publications/:subdomain/site", async (c) => {
+  try {
+    const result = await getCommonsPublicationEditionHtml(c.req.param("subdomain"));
+    if (!result) return c.json({ ok: false, error: "publication_not_published", message: "No published edition exists for this publication." }, 404);
+    return c.html(result.html, 200, {
+      "cache-control": "public, max-age=60, s-maxage=300",
+      "x-robots-tag": "index, follow"
+    });
+  } catch (error) {
+    return publicationError(c, error);
+  }
+});
+commonsApp.get("/publications/:subdomain/editions/:editionSlug/site", async (c) => {
+  try {
+    const result = await getCommonsPublicationEditionHtml(c.req.param("subdomain"), c.req.param("editionSlug"));
+    if (!result) return c.json({ ok: false, error: "edition_not_found", message: "No published edition matched that publication and slug." }, 404);
+    return c.html(result.html, 200, {
+      "cache-control": "public, max-age=60, s-maxage=300",
+      "x-robots-tag": "index, follow"
+    });
+  } catch (error) {
+    return publicationError(c, error);
+  }
+});
+commonsApp.get("/publications/:subdomain/editions", async (c) => {
+  try {
+    const publication = await getCommonsPublicationBySubdomain(c.req.param("subdomain"));
+    if (!publication) return c.json({ ok: false, error: "publication_not_found", message: "No Commons publication matched that name." }, 404);
+    return c.json({ ok: true, data: { publication, editions: await listCommonsPublicationEditions(publication.id) } });
+  } catch (error) {
+    return publicationError(c, error);
+  }
+});
+commonsApp.get("/publications/:subdomain", async (c) => {
+  try {
+    const publication = await getCommonsPublicationBySubdomain(c.req.param("subdomain"));
+    if (!publication) return c.json({ ok: false, error: "publication_not_found", message: "No Commons publication matched that name." }, 404);
+    const editions = c.req.query("includeEditions") === "false" ? [] : await listCommonsPublicationEditions(publication.id);
+    return c.json({ ok: true, data: { publication, editions } });
+  } catch (error) {
+    return publicationError(c, error);
+  }
+});
 commonsApp.get("/entities", async (c) => {
   const result = await searchCommonsEntities(filtersFromQuery(c.req.query()));
   return c.json({ ok: true, data: result });
@@ -33030,6 +33541,19 @@ function repositoryStatus(error) {
   if (error.httpStatus === 409) return 409;
   return 400;
 }
+async function publicationOperation(c, operation, successStatus = 200) {
+  try {
+    return c.json({ ok: true, data: await operation() }, successStatus);
+  } catch (error) {
+    return publicationError(c, error);
+  }
+}
+function publicationError(c, error) {
+  if (error instanceof CommonsPublicationError) {
+    return c.json({ ok: false, error: error.code, message: error.message }, error.httpStatus);
+  }
+  throw error;
+}
 function xmlEscape(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
@@ -33039,13 +33563,13 @@ import { Hono as Hono32 } from "hono";
 import { z as z33 } from "zod";
 
 // src/api/scheduled-artifact-owner.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return createHash13("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return createHash14("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
 
 // src/api/scheduled-run-view-links.ts
-import { createHash as createHash14, randomBytes as randomBytes3, randomUUID as randomUUID16 } from "crypto";
+import { createHash as createHash15, randomBytes as randomBytes3, randomUUID as randomUUID17 } from "crypto";
 var schemaReady3 = false;
 async function ensureScheduledRunViewLinksSchema() {
   if (schemaReady3) return;
@@ -33076,7 +33600,7 @@ async function ensureScheduledRunViewLinksSchema() {
   schemaReady3 = true;
 }
 function tokenHash2(token4) {
-  return createHash14("sha256").update(token4).digest("hex");
+  return createHash15("sha256").update(token4).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -33098,7 +33622,7 @@ async function createScheduledRunViewLink(input) {
   const now = input.now ?? /* @__PURE__ */ new Date();
   const token4 = randomBytes3(32).toString("base64url");
   const record = {
-    shareId: randomUUID16(),
+    shareId: randomUUID17(),
     ownerId: input.ownerId,
     runId: input.runId,
     artifactId: input.artifactId,
@@ -33335,7 +33859,7 @@ scheduledResultApp.delete("/schedule-runs/:runId/view-links/:shareId", async (c)
 import { Hono as Hono33 } from "hono";
 
 // src/scheduled-artifacts/scheduled-run-artifact-store.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 var SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
 var SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
 var SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -33351,7 +33875,7 @@ function policy3() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash15("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash16("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -33458,10 +33982,10 @@ publicScheduledResultApp.get("/scheduled-run-view-links/:token/content", async (
 import { Hono as Hono34 } from "hono";
 
 // src/api/scheduler-integration-auth.ts
-import { createHash as createHash16, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { createHash as createHash17, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
 
 // src/api/service-connections.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 var schemaReady4 = null;
 var schemaDb3 = null;
 function ensureServiceConnectionsSchema() {
@@ -33603,7 +34127,7 @@ async function reconcileDiscoveredNangoConnections(identity, discovered) {
           updated_at = excluded.updated_at
       `,
       args: [
-        randomUUID17(),
+        randomUUID18(),
         userId,
         connection.providerConfigKey,
         connection.provider,
@@ -33674,7 +34198,7 @@ async function recordServiceConnectionHealth(args) {
   });
   await getDb().execute({
     sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [randomUUID17(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
+    args: [randomUUID18(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
   });
 }
 async function setServiceConnectionActions(identity, connectionId, enabled) {
@@ -33714,7 +34238,7 @@ async function claimServiceConnectionAction(args) {
   if (!connection) throw new Error("service_connection_not_found");
   const inserted = await getDb().execute({
     sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status, request_digest) VALUES (?, ?, ?, ?, ?, 'started', ?)`,
-    args: [randomUUID17(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
+    args: [randomUUID18(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
   });
   if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
   const existing = await getDb().execute({
@@ -33756,7 +34280,7 @@ function signingSecret() {
   return secret2;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = createHash16("sha256").update(args.body).digest("hex");
+  const bodyHash = createHash17("sha256").update(args.body).digest("hex");
   return createHmac4("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
@@ -34040,13 +34564,13 @@ async function reconcileSiteExtractSettlements(limit = 25) {
 }
 
 // src/api/page-diff.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 import { diffLines } from "diff";
 var MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
 var MAX_DIFF_HUNKS = 200;
 var MAX_DIFF_LINES_PER_RESPONSE = 2e3;
 function sha256Hex(value) {
-  return createHash17("sha256").update(value).digest("hex");
+  return createHash18("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -34160,10 +34684,10 @@ async function persistScrapeBody(user, opts) {
 }
 
 // src/api/scrape-image-sink.ts
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 var MAX_IMAGES_PER_SCRAPE = 25;
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${createHash18("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${createHash19("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -34635,7 +35159,7 @@ function inferredWaybackCapturedAt(content) {
 }
 
 // src/api/connection-memory-import.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 var CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
 var CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
 var CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS = 256e3;
@@ -34665,7 +35189,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return createHash19("sha256").update(value).digest("hex");
+  return createHash20("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -34934,7 +35458,7 @@ async function cleanupExpiredScrapeBlobs(maxAgeMs = SCRAPE_BLOB_TTL_MS) {
 }
 
 // src/api/connected-data-export.ts
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 var CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
   process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
 );
@@ -35105,7 +35629,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = randomUUID18();
+  const exportId = randomUUID19();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -35221,7 +35745,7 @@ ${lines.length ? `${lines.join("\n")}
 }
 
 // src/api/search-console-table-export.ts
-import { randomUUID as randomUUID19 } from "crypto";
+import { randomUUID as randomUUID20 } from "crypto";
 var SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS = 5e4;
 var SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE = 2e3;
 var SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES = 50 * 1024 * 1024;
@@ -35321,7 +35845,7 @@ async function exportSearchConsoleTableData(args) {
     offset += rows.length;
     if (stoppedForBytes || rows.length < limit || offset >= matchedRows) break;
   }
-  const exportId = randomUUID19();
+  const exportId = randomUUID20();
   const artifact = await args.writeArtifact({
     ownerId: args.ownerId,
     exportId,
@@ -35676,7 +36200,7 @@ async function dbUsage(identity, plan) {
 }
 
 // src/api/nango-control.ts
-import { createHash as createHash21, randomUUID as randomUUID21 } from "crypto";
+import { createHash as createHash22, randomUUID as randomUUID22 } from "crypto";
 
 // src/api/slack-archive-analysis.ts
 function isRecord2(value) {
@@ -36050,7 +36574,7 @@ async function exportSlackChannelPage(input, dependencies) {
 }
 
 // src/api/main-nango-transport.ts
-import { createHash as createHash20, randomUUID as randomUUID20 } from "crypto";
+import { createHash as createHash21, randomUUID as randomUUID21 } from "crypto";
 import { Client, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
 
 // src/api/connected-tool-policy.ts
@@ -36443,7 +36967,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy4) => policy4.classification === "read").map((policy4) => policy4.name);
   const actionTools = [...policies.values()].filter((policy4) => policy4.classification === "action").map((policy4) => policy4.name);
-  const revision = createHash20("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = createHash21("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -36470,8 +36994,8 @@ async function callNangoToolDirect(args) {
     identity: args.identity,
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
-  const requestId = args.requestId?.trim() || randomUUID20();
-  const idempotencyKey3 = `main-nango:${createHash20("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const requestId = args.requestId?.trim() || randomUUID21();
+  const idempotencyKey3 = `main-nango:${createHash21("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -36496,7 +37020,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : createHash20("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : createHash21("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -36538,7 +37062,7 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: createHash20("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: createHash21("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -37262,8 +37786,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${createHash21("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID21()).digest("hex")}`;
-  const requestDigest = createHash21("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${createHash22("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID22()).digest("hex")}`;
+  const requestDigest = createHash22("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -37414,7 +37938,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return createHash21("sha256").update(canonicalJson2(tool)).digest("hex");
+  return createHash22("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -37693,7 +38217,7 @@ async function callMainOwnedExportPage(identity, input) {
 }
 
 // src/api/resend-control.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 var DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
 var RESEND_PROVIDER_CONFIG_KEY = "resend";
 var RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -37952,7 +38476,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${createHash22("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${createHash23("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -39786,7 +40310,7 @@ app.post("/harvest", auth3, async (c) => {
     if (!harvestOk) return c.json(insufficientBalanceResponse(harvestBal, harvestCost), 402);
     jobId2 = await createJob(user.id, options.query, { ...options, billingHoldMc: harvestCost }, body.callback_url);
   } else {
-    jobId2 = randomUUID22();
+    jobId2 = randomUUID23();
     const billingDebitKey = `paa-harvest:${jobId2}:hold`;
     const description = `PAA harvest: ${options.query}`.slice(0, 500);
     const hold = await debitMcIdempotent(
@@ -41271,4 +41795,4 @@ app.get("/blog/:slug/", (c) => {
 export {
   app
 };
-//# sourceMappingURL=server-7B75SDNG.js.map
+//# sourceMappingURL=server-SMEHT3OU.js.map