mcp-scraper 0.47.0 → 0.48.0

package/dist/{server-OHMZJRSB.js → server-EVTCL3KB.js}

@@ -10,14 +10,68 @@ import {
   importHostedCensusPlacesCsv,
   importHostedZipGroupsCsv,
   listActiveHostedLocationDatasets
-} from "./chunk-TV6KPZ6J.js";
+} from "./chunk-R66PJOZW.js";
+import {
+  AnalyticsRepositoryError,
+  analyticsAcquisition,
+  analyticsBusinessMetrics,
+  analyticsChannelBreakdown,
+  analyticsContent,
+  analyticsConversions,
+  analyticsDimensions,
+  analyticsEventCounts,
+  analyticsForecast,
+  analyticsHealth,
+  analyticsOverview,
+  analyticsPaths,
+  analyticsTimeseries,
+  archiveAnalyticsActivationDestination,
+  archiveAnalyticsCampaignLink,
+  claimAnalyticsFormDeliveryJobs,
+  completeAnalyticsFormDelivery,
+  createAnalyticsActivationDestination,
+  createAnalyticsCampaignLink,
+  createAnalyticsConversion,
+  createAnalyticsCrmImport,
+  createAnalyticsExport,
+  createAnalyticsForm,
+  createAnalyticsPixel,
+  createAnalyticsSite,
+  deferAnalyticsFormDelivery,
+  deleteAnalyticsSite,
+  getAnalyticsPersonJourney,
+  getAnalyticsPool,
+  getPublicAnalyticsForm,
+  getSessionSecret,
+  ingestAnalyticsEvents,
+  isAnalyticsFormPlacementApproved,
+  linkAnalyticsFormIdentity,
+  listAnalyticsActivationDestinations,
+  listAnalyticsCampaignLinks,
+  listAnalyticsCrmImports,
+  listAnalyticsForms,
+  listAnalyticsPeople,
+  listAnalyticsPixels,
+  listAnalyticsSites,
+  queueAnalyticsActivation,
+  queueAnalyticsFormDelivery,
+  recordAnalyticsFormSubmission,
+  refreshAnalyticsDailyRollupsIfDue,
+  resolveAnalyticsCampaignLink,
+  setAnalyticsPixelDomainState,
+  signSession,
+  updateAnalyticsBusinessModel,
+  updateAnalyticsPixel,
+  upsertAnalyticsAdSpend,
+  verifySession
+} from "./chunk-YW2LXLDU.js";
 import {
   classifyHarvestProblem,
   createHarvestAttemptRecorder,
   deliverWebhook,
   harvestProblemResponse,
   serializeHarvestProblem
-} from "./chunk-GV5EGE5M.js";
+} from "./chunk-ZEMHL36J.js";
 import {
   AIModeSelectors,
   AIOverviewSelectors,
@@ -44,9 +98,10 @@ import {
   resolveKernelProxyId,
   serpArrivalUrl,
   withRuntimeUserAgent
-} from "./chunk-JH7A4HA7.js";
+} from "./chunk-MFE6RMIA.js";
 import {
   ApiErrorResponseSchema,
+  ArtifactTemplatePresetKeySchema,
   CommonsClaimPublicationInputSchema,
   CommonsPreparePublicationInputSchema,
   CommonsPublishEditorialInputSchema,
@@ -62,6 +117,9 @@ import {
   InternalScheduledArtifactRenderRequestSchema,
   ListScheduledRunsQuerySchema,
   LocalSourcebookSchemaTypeSchema,
+  NEWSROOM_PUBLISHER_TEMPLATE_PRESET,
+  NewsroomPublisherTemplateConfigSchema,
+  NewsroomPublisherV1InputSchema,
   PERSONAL_AUTHORITY_TEMPLATE_PRESET,
   PersonalAuthorityTemplateConfigSchema,
   PersonalAuthorityV1InputSchema,
@@ -97,7 +155,7 @@ import {
   resolveDeploymentProfile,
   resolveLocalSourcebookSchemaType,
   transcribeMediaUrl
-} from "./chunk-XCGQBGDA.js";
+} from "./chunk-PTABZABJ.js";
 import {
   auditImageUrls,
   auditImages,
@@ -125,7 +183,7 @@ import {
   recordKernelSession,
   recordVendorUsage,
   runWithCostContext
-} from "./chunk-IWYYZXBR.js";
+} from "./chunk-PODASLGT.js";
 import {
   listWorkflowDefinitions,
   runWorkflow,
@@ -153,7 +211,7 @@ import {
 } from "./chunk-3ZUBQQPQ.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-H4NWAF5B.js";
+} from "./chunk-IAXQIHNS.js";
 import {
   abandonExtractSettlement,
   countSuccessfulPages,
@@ -176,7 +234,7 @@ import {
   setExtractJobTotal,
   settleExtractJob,
   terminalExtractJobStatus
-} from "./chunk-MW3ET532.js";
+} from "./chunk-6DPIE262.js";
 import {
   BROWSER_OPEN_MIN_BALANCE_MC,
   CONCURRENCY_PRICE_ID,
@@ -333,7 +391,7 @@ import {
   startHarvestAttempt,
   upsertPageSnapshot,
   verifyPassword
-} from "./chunk-5S6LYQQO.js";
+} from "./chunk-MFNGUM4L.js";
 
 // src/blog/registry.ts
 var posts = [
@@ -6271,7 +6329,7 @@ async function extractSite(opts) {
 }
 
 // src/api/server.ts
-import { Hono as Hono35 } from "hono";
+import { Hono as Hono36 } from "hono";
 import { serve as serveInngest } from "inngest/hono";
 
 // src/inngest/client.ts
@@ -8679,7 +8737,7 @@ var siteExtractFn = inngest.createFunction(
       });
     }) : null;
     const finalized = await step.run("finalize", async () => {
-      const { assembleExtractArtifacts } = await import("./extract-bundle-DXWWQER6.js");
+      const { assembleExtractArtifacts } = await import("./extract-bundle-2HONVC5T.js");
       const current = await getExtractJob(jobId2);
       if (!current) throw new Error("extract job disappeared before finalization");
       const stored = await assembleExtractArtifacts(current, { branding, imageAudit });
@@ -9621,7 +9679,7 @@ async function resolveUsZipsPath(requestedPath) {
 async function loadZipGroups(stateAbbr, requestedPath, warnings, sourceMode) {
   const mode = resolvedLocationDataMode({ zipSource: sourceMode });
   if (mode === "hosted") {
-    const { getHostedZipGroups } = await import("./location-data-repository-2FJVMTZ2.js");
+    const { getHostedZipGroups } = await import("./location-data-repository-YWFJGNIP.js");
     const hosted = await getHostedZipGroups(stateAbbr);
     if (!hosted.dataset) {
       throw new DirectoryLocationError(
@@ -9684,7 +9742,7 @@ async function resolveDirectoryMarkets(options, config = {}) {
   const sourceUrl = censusStateUrl(state.fips);
   const warnings = [];
   if (resolvedLocationDataMode(config) === "hosted") {
-    const { queryHostedLocationMarkets } = await import("./location-data-repository-2FJVMTZ2.js");
+    const { queryHostedLocationMarkets } = await import("./location-data-repository-YWFJGNIP.js");
     const hosted = await queryHostedLocationMarkets({
       state: state.abbr,
       minPopulation: options.minPopulation,
@@ -14250,8 +14308,8 @@ siteAuditApp.get("/jobs", async (c) => {
 import { Hono as Hono2 } from "hono";
 var internalMemoryApp = new Hono2();
 internalMemoryApp.post("/ai-debit", async (c) => {
-  const secret2 = c.req.header("x-internal-secret");
-  if (!secret2 || secret2 !== process.env.INTERNAL_MEMORY_DEBIT_SECRET) {
+  const secret = c.req.header("x-internal-secret");
+  if (!secret || secret !== process.env.INTERNAL_MEMORY_DEBIT_SECRET) {
     return c.json({ error: "unauthorized" }, 401);
   }
   const body = await c.req.json().catch(() => ({}));
@@ -14342,9 +14400,9 @@ var UnifiedBillingError = class extends Error {
   details;
 };
 function billingSecret() {
-  const secret2 = process.env.INTERNAL_BILLING_SECRET?.trim() || process.env.INTERNAL_MEMORY_DEBIT_SECRET?.trim();
-  if (!secret2) throw new UnifiedBillingError("unauthorized", "internal billing secret is not configured", 503);
-  return secret2;
+  const secret = process.env.INTERNAL_BILLING_SECRET?.trim() || process.env.INTERNAL_MEMORY_DEBIT_SECRET?.trim();
+  if (!secret) throw new UnifiedBillingError("unauthorized", "internal billing secret is not configured", 503);
+  return secret;
 }
 function normalizeIdentity(identity) {
   const normalized = identity.trim().toLowerCase();
@@ -14764,42 +14822,6 @@ async function voidScheduledRunAuthorization(args) {
 
 // src/api/memory.ts
 import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto";
-
-// src/api/session.ts
-import { createHmac as createHmac2, timingSafeEqual as timingSafeEqual2 } from "crypto";
-var isProduction = () => process.env.NODE_ENV === "production" || process.env.VERCEL === "1";
-function getSessionSecret() {
-  const configured = process.env.SESSION_SECRET?.trim();
-  if (configured) return configured;
-  if (isProduction()) throw new Error("SESSION_SECRET is not set \u2014 add it to your Vercel env vars (see src/api/env.ts)");
-  return "dev-secret-change-me";
-}
-var secret = () => getSessionSecret();
-function safeEqualHex(a, b) {
-  if (a.length !== b.length) return false;
-  try {
-    return timingSafeEqual2(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
-  } catch {
-    return false;
-  }
-}
-function signSession(userId) {
-  const payload = String(userId);
-  const sig = createHmac2("sha256", secret()).update(payload).digest("hex");
-  return `${payload}.${sig}`;
-}
-function verifySession(token4) {
-  const dot = token4.lastIndexOf(".");
-  if (dot === -1) return null;
-  const payload = token4.slice(0, dot);
-  const sig = token4.slice(dot + 1);
-  const expected = createHmac2("sha256", secret()).update(payload).digest("hex");
-  if (!safeEqualHex(sig, expected)) return null;
-  const id = parseInt(payload);
-  return isNaN(id) ? null : id;
-}
-
-// src/api/memory.ts
 import { provisionDefaultsTool } from "mcpscraper-memory-tools/tools/vaults/provision-defaults";
 import { setScheduleEntitlementTool } from "mcpscraper-memory-tools/tools/schedule/set-schedule-entitlement";
 var MEMORY_BASE_URL = () => (process.env.MCP_MEMORY_BASE_URL ?? "https://memory.mcpscraper.dev").replace(/\/$/, "");
@@ -14817,10 +14839,10 @@ function isMemoryOperator(email) {
 function encKey() {
   return scryptSync(getSessionSecret(), "mcp-memory-key-v1", 32);
 }
-function encryptMemoryKey(secret2) {
+function encryptMemoryKey(secret) {
   const iv = randomBytes(12);
   const cipher = createCipheriv("aes-256-gcm", encKey(), iv);
-  const enc = Buffer.concat([cipher.update(secret2, "utf8"), cipher.final()]);
+  const enc = Buffer.concat([cipher.update(secret, "utf8"), cipher.final()]);
   const tag = cipher.getAuthTag();
   return `${iv.toString("base64")}:${tag.toString("base64")}:${enc.toString("base64")}`;
 }
@@ -16437,15 +16459,15 @@ function mediaResolverConfigured() {
 var RESOLVE_TIMEOUT_MS = 24e4;
 async function resolveYouTubeAudio(videoId) {
   const base = mediaResolverUrl();
-  const secret2 = mediaResolverSecret();
-  if (!base || !secret2) return null;
+  const secret = mediaResolverSecret();
+  if (!base || !secret) return null;
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), RESOLVE_TIMEOUT_MS);
   const startedMs = Date.now();
   try {
     const resp = await fetch(`${base.replace(/\/+$/, "")}/resolve-audio`, {
       method: "POST",
-      headers: { "content-type": "application/json", "x-frames-secret": secret2 },
+      headers: { "content-type": "application/json", "x-frames-secret": secret },
       body: JSON.stringify({ videoUrl: `https://www.youtube.com/watch?v=${videoId}` }),
       signal: controller.signal
     });
@@ -22227,7 +22249,7 @@ async function reconcileDirectoryWorkflowSettlements(limit = 25) {
 }
 
 // src/api/workflow-routes.ts
-import { createHmac as createHmac3 } from "crypto";
+import { createHmac as createHmac2 } from "crypto";
 import { readFile as readFile2 } from "fs/promises";
 import { Hono as Hono19 } from "hono";
 import { z as z28 } from "zod";
@@ -22313,9 +22335,9 @@ async function readManifestFromSummary(summary) {
   }
 }
 function webhookSignature(body, timestamp) {
-  const secret2 = process.env.MCP_SCRAPER_WEBHOOK_SECRET?.trim();
-  if (!secret2) return null;
-  return createHmac3("sha256", secret2).update(`${timestamp}.${body}`).digest("hex");
+  const secret = process.env.MCP_SCRAPER_WEBHOOK_SECRET?.trim();
+  if (!secret) return null;
+  return createHmac2("sha256", secret).update(`${timestamp}.${body}`).digest("hex");
 }
 async function deliverWorkflowWebhook(input) {
   if (!input.webhookUrl) return;
@@ -22753,8 +22775,8 @@ async function dispatchDueWorkflowSchedules(apiUrl, limit = 3) {
   return { dispatched: results.length, results };
 }
 workflowApp.post("/cron/dispatch", async (c) => {
-  const secret2 = c.req.header("authorization");
-  if (!process.env.CRON_SECRET || secret2 !== `Bearer ${process.env.CRON_SECRET}`) {
+  const secret = c.req.header("authorization");
+  if (!process.env.CRON_SECRET || secret !== `Bearer ${process.env.CRON_SECRET}`) {
     return c.json({ error: "Unauthorized" }, 401);
   }
   return c.json(await dispatchDueWorkflowSchedules(originFromUrl(c.req.url)));
@@ -33561,18 +33583,1700 @@ function xmlEscape(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
 
-// src/api/scheduled-result-routes.ts
+// src/api/analytics-routes.ts
 import { Hono as Hono32 } from "hono";
+import { createMiddleware as createMiddleware4 } from "hono/factory";
+import { z as z34 } from "zod";
+import { createHash as createHash15 } from "crypto";
+import Papa2 from "papaparse";
+
+// src/api/analytics-entitlement.ts
+import {
+  createHash as createHash14,
+  createHmac as createHmac3,
+  randomBytes as randomBytes3,
+  timingSafeEqual as timingSafeEqual2
+} from "crypto";
 import { z as z33 } from "zod";
+var THORBIT_PRODUCT_URL = "https://thorbit.ai";
+var REFRESH_INTERVAL_MS = 15 * 60 * 1e3;
+var ELIGIBLE_GRACE_MS = 24 * 60 * 60 * 1e3;
+var TRIAL_LENGTH_MS = 30 * 24 * 60 * 60 * 1e3;
+var ThorbitEntitlementSchema = z33.object({
+  product: z33.literal("x_ray_pixel"),
+  eligible: z33.boolean(),
+  reason: z33.string().min(1).max(120),
+  organizationId: z33.string().min(1).max(64),
+  planId: z33.string().max(32).nullable(),
+  subscriptionStatus: z33.string().max(20).nullable(),
+  monthlyRecurringRevenueCents: z33.number().int().min(0),
+  minimumMonthlyRecurringRevenueCents: z33.number().int().min(5e3),
+  checkedAt: z33.string().datetime()
+}).strict();
+var AssertionSchema = z33.object({
+  version: z33.literal(1),
+  issuer: z33.literal("thorbit"),
+  audience: z33.literal("mcp-scraper:x-ray"),
+  issuedAt: z33.number().int().positive(),
+  expiresAt: z33.number().int().positive(),
+  entitlement: ThorbitEntitlementSchema
+}).strict();
+function thorbitBaseUrl() {
+  return (process.env.THORBIT_X_RAY_BASE_URL?.trim() || THORBIT_PRODUCT_URL).replace(/\/$/, "");
+}
+function bridgeSecret() {
+  return process.env.THORBIT_X_RAY_BRIDGE_SECRET?.trim() ?? "";
+}
+function bridgeConfigured() {
+  return bridgeSecret().length >= 32;
+}
+function hint(value) {
+  return value.length <= 8 ? value : `${value.slice(0, 4)}\u2026${value.slice(-4)}`;
+}
+function viewFromRow(row, options = {}) {
+  const now = Date.now();
+  const withinGrace = row ? Date.parse(row.access_expires_at) > now : false;
+  const trialActive = Boolean(row && Date.parse(row.trial_ends_at) > now);
+  const paidAccess = Boolean(row?.eligible && withinGrace);
+  const access2 = paidAccess || trialActive;
+  const status = paidAccess ? options.stale ? "stale" : "eligible" : trialActive ? "trial" : !row || row.connection_source === "trial" ? "trial_expired" : options.bridgeError ? "bridge_unavailable" : "ineligible";
+  const trialStartedAt = row?.trial_started_at ?? new Date(now).toISOString();
+  const trialEndsAt = row?.trial_ends_at ?? new Date(now).toISOString();
+  return {
+    product: "x_ray_pixel",
+    productName: "Thorbit X-Ray Pixel",
+    access: access2,
+    status,
+    reason: trialActive ? "trial_active" : row?.reason ?? "trial_expired",
+    planId: row?.plan_id ?? null,
+    subscriptionStatus: row?.subscription_status ?? null,
+    monthlyRecurringRevenueCents: Number(row?.monthly_recurring_revenue_cents ?? 0),
+    minimumMonthlyRecurringRevenueCents: Number(row?.minimum_monthly_recurring_revenue_cents ?? 5e3),
+    verifiedAt: row?.verified_at ?? null,
+    connectionSource: row?.connection_source === "trial" ? null : row?.connection_source ?? null,
+    thorbitOrganizationHint: row?.thorbit_org_id ? hint(row.thorbit_org_id) : null,
+    trialStartedAt,
+    trialEndsAt,
+    trialDaysRemaining: Math.max(0, Math.ceil((Date.parse(trialEndsAt) - now) / (24 * 60 * 60 * 1e3))),
+    bridgeConfigured: bridgeConfigured(),
+    billing: {
+      standalonePriceUsdMonthly: 50,
+      includedWithThorbitSubscriptionAtOrAboveUsdMonthly: 50,
+      consumesMcpScraperCredits: false
+    },
+    owner: {
+      name: "Thorbit",
+      productUrl: THORBIT_PRODUCT_URL,
+      host: "MCP Scraper"
+    }
+  };
+}
+async function storedEntitlement(userId) {
+  const result = await getAnalyticsPool().query(
+    "SELECT * FROM analytics_thorbit_entitlements WHERE user_id = $1",
+    [userId]
+  );
+  return result.rows[0] ?? null;
+}
+async function ensureTrial(userId) {
+  const startedAt = /* @__PURE__ */ new Date();
+  const endsAt = new Date(startedAt.getTime() + TRIAL_LENGTH_MS);
+  const result = await getAnalyticsPool().query(
+    `INSERT INTO analytics_thorbit_entitlements(
+       user_id, thorbit_org_id, connection_source, eligible, reason, plan_id,
+       subscription_status, monthly_recurring_revenue_cents,
+       minimum_monthly_recurring_revenue_cents, verified_at, refresh_after,
+       access_expires_at, trial_started_at, trial_ends_at, last_refresh_error, updated_at
+     ) VALUES ($1,NULL,'trial',false,'trial_active',NULL,NULL,0,5000,$2,$3,$3,$2,$3,NULL,now())
+     ON CONFLICT(user_id) DO UPDATE SET user_id=excluded.user_id
+     RETURNING *`,
+    [userId, startedAt.toISOString(), endsAt.toISOString()]
+  );
+  return result.rows[0];
+}
+async function persistEntitlement(userId, source, entitlement) {
+  const checked = new Date(entitlement.checkedAt);
+  const refreshAfter = new Date(checked.getTime() + REFRESH_INTERVAL_MS);
+  const accessExpiresAt = new Date(
+    checked.getTime() + (entitlement.eligible ? ELIGIBLE_GRACE_MS : REFRESH_INTERVAL_MS)
+  );
+  const result = await getAnalyticsPool().query(
+    `INSERT INTO analytics_thorbit_entitlements(
+       user_id, thorbit_org_id, connection_source, eligible, reason, plan_id,
+       subscription_status, monthly_recurring_revenue_cents,
+       minimum_monthly_recurring_revenue_cents, verified_at, refresh_after,
+       access_expires_at, last_refresh_error, updated_at
+     ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,NULL,now())
+     ON CONFLICT(user_id) DO UPDATE SET
+       thorbit_org_id=excluded.thorbit_org_id,
+       connection_source=excluded.connection_source,
+       eligible=excluded.eligible,
+       reason=excluded.reason,
+       plan_id=excluded.plan_id,
+       subscription_status=excluded.subscription_status,
+       monthly_recurring_revenue_cents=excluded.monthly_recurring_revenue_cents,
+       minimum_monthly_recurring_revenue_cents=excluded.minimum_monthly_recurring_revenue_cents,
+       verified_at=excluded.verified_at,
+       refresh_after=excluded.refresh_after,
+       access_expires_at=excluded.access_expires_at,
+       last_refresh_error=NULL,
+       updated_at=now()
+     RETURNING *`,
+    [
+      userId,
+      entitlement.organizationId,
+      source,
+      entitlement.eligible,
+      entitlement.reason,
+      entitlement.planId,
+      entitlement.subscriptionStatus,
+      entitlement.monthlyRecurringRevenueCents,
+      entitlement.minimumMonthlyRecurringRevenueCents,
+      checked.toISOString(),
+      refreshAfter.toISOString(),
+      accessExpiresAt.toISOString()
+    ]
+  );
+  return result.rows[0];
+}
+async function requestEntitlement(method, options) {
+  const headers = { accept: "application/json" };
+  let body;
+  if (method === "POST") {
+    headers.authorization = `Bearer ${options.apiKey ?? ""}`;
+  } else {
+    headers.authorization = `Bearer ${bridgeSecret()}`;
+    headers["content-type"] = "application/json";
+    body = JSON.stringify({ organizationId: options.organizationId });
+  }
+  const response = await fetch(`${thorbitBaseUrl()}/api/v1/x-ray/entitlement`, {
+    method,
+    headers,
+    body,
+    signal: AbortSignal.timeout(8e3)
+  });
+  const payload = await response.json().catch(() => null);
+  if (!response.ok) {
+    const message = payload && typeof payload === "object" && "error" in payload ? String(payload.error) : `Thorbit entitlement check failed (${response.status})`;
+    throw new Error(message);
+  }
+  const parsed = z33.object({ entitlement: ThorbitEntitlementSchema }).safeParse(payload);
+  if (!parsed.success) throw new Error("Thorbit returned an invalid entitlement assertion");
+  return parsed.data.entitlement;
+}
+async function resolveAnalyticsEntitlement(userId) {
+  const row = await storedEntitlement(userId) ?? await ensureTrial(userId);
+  if (row.connection_source === "trial" || !row.thorbit_org_id) return viewFromRow(row);
+  if (Date.parse(row.refresh_after) > Date.now()) return viewFromRow(row);
+  if (!bridgeConfigured()) return viewFromRow(row, { stale: true, bridgeError: true });
+  try {
+    const entitlement = await requestEntitlement("PUT", {
+      organizationId: row.thorbit_org_id
+    });
+    return viewFromRow(
+      await persistEntitlement(userId, row.connection_source, entitlement)
+    );
+  } catch (error) {
+    await getAnalyticsPool().query(
+      "UPDATE analytics_thorbit_entitlements SET last_refresh_error=$2, updated_at=now() WHERE user_id=$1",
+      [userId, error instanceof Error ? error.message.slice(0, 240) : "refresh_failed"]
+    );
+    return viewFromRow(row, { stale: true, bridgeError: true });
+  }
+}
+async function analyticsOwnerHasCurrentEntitlement(userId) {
+  const result = await getAnalyticsPool().query(
+    `SELECT EXISTS(
+       SELECT 1 FROM analytics_thorbit_entitlements
+        WHERE user_id=$1 AND (
+          (eligible=true AND access_expires_at > now()) OR trial_ends_at > now()
+        )
+     ) AS entitled`,
+    [userId]
+  );
+  return Boolean(result.rows[0]?.entitled);
+}
+async function connectAnalyticsWithThorbitApiKey(userId, apiKey) {
+  const entitlement = await requestEntitlement("POST", { apiKey });
+  return viewFromRow(await persistEntitlement(userId, "api_key", entitlement));
+}
+function dashboardCallbackUrl() {
+  const value = process.env.ANALYTICS_DASHBOARD_URL?.trim() || (process.env.NODE_ENV === "production" ? "https://mcpscraper.dev/dashboard/analytics" : "http://localhost:3000/dashboard/analytics");
+  return new URL(value).toString();
+}
+async function createThorbitConnectUrl(userId) {
+  if (!bridgeConfigured()) throw new Error("Thorbit X-Ray account bridge is not configured");
+  const state = randomBytes3(32).toString("base64url");
+  const stateHash = createHash14("sha256").update(state).digest("hex");
+  await getAnalyticsPool().query(
+    `INSERT INTO analytics_thorbit_connect_states(state_hash,user_id,expires_at)
+     VALUES ($1,$2,now()+interval '10 minutes')
+     ON CONFLICT(state_hash) DO NOTHING`,
+    [stateHash, userId]
+  );
+  const url = new URL(`${thorbitBaseUrl()}/api/v1/x-ray/entitlement`);
+  url.searchParams.set("redirect_uri", dashboardCallbackUrl());
+  url.searchParams.set("state", state);
+  return url.toString();
+}
+function verifyThorbitAssertion(token4) {
+  const [encoded, signature] = token4.split(".");
+  if (!encoded || !signature || !bridgeConfigured()) throw new Error("Invalid Thorbit assertion");
+  const expected = createHmac3("sha256", bridgeSecret()).update(encoded).digest();
+  const actual = Buffer.from(signature, "base64url");
+  if (actual.length !== expected.length || !timingSafeEqual2(actual, expected)) {
+    throw new Error("Invalid Thorbit assertion signature");
+  }
+  const parsed = AssertionSchema.safeParse(
+    JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"))
+  );
+  if (!parsed.success || parsed.data.expiresAt <= Math.floor(Date.now() / 1e3)) {
+    throw new Error("Expired or invalid Thorbit assertion");
+  }
+  return parsed.data.entitlement;
+}
+async function consumeThorbitConnectCallback(input) {
+  const stateHash = createHash14("sha256").update(input.state).digest("hex");
+  const client2 = await getAnalyticsPool().connect();
+  try {
+    await client2.query("BEGIN");
+    const state = await client2.query(
+      `UPDATE analytics_thorbit_connect_states
+          SET consumed_at=now()
+        WHERE state_hash=$1 AND user_id=$2 AND consumed_at IS NULL AND expires_at > now()
+        RETURNING user_id`,
+      [stateHash, input.userId]
+    );
+    if (!state.rowCount) throw new Error("Thorbit connection state is invalid or expired");
+    const entitlement = verifyThorbitAssertion(input.assertion);
+    await client2.query("COMMIT");
+    return viewFromRow(
+      await persistEntitlement(input.userId, "thorbit_session", entitlement)
+    );
+  } catch (error) {
+    await client2.query("ROLLBACK");
+    throw error;
+  } finally {
+    client2.release();
+  }
+}
+async function disconnectAnalyticsEntitlement(userId) {
+  await getAnalyticsPool().query(
+    `UPDATE analytics_thorbit_entitlements
+        SET thorbit_org_id=NULL,
+            connection_source='trial',
+            eligible=false,
+            reason=CASE WHEN trial_ends_at > now() THEN 'trial_active' ELSE 'trial_expired' END,
+            plan_id=NULL,
+            subscription_status=NULL,
+            monthly_recurring_revenue_cents=0,
+            last_refresh_error=NULL,
+            updated_at=now()
+      WHERE user_id=$1`,
+    [userId]
+  );
+}
+
+// src/api/analytics-routes.ts
+var analyticsApp = new Hono32();
+var auth3 = createApiKeyAuth();
+var entitlementGuard = createMiddleware4(async (c, next) => {
+  const entitlement = await resolveAnalyticsEntitlement(Number(c.get("user").id));
+  if (!entitlement.access) {
+    return c.json(
+      {
+        ok: false,
+        code: "thorbit_entitlement_required",
+        error: "Thorbit X-Ray Pixel requires an active $50+ Thorbit subscription.",
+        entitlement
+      },
+      402
+    );
+  }
+  await next();
+});
+var ThorbitApiKeySchema = z34.object({ apiKey: z34.string().trim().min(20).max(512) }).strict();
+var ThorbitCallbackSchema = z34.object({
+  state: z34.string().min(20).max(300),
+  assertion: z34.string().min(40).max(8e3)
+}).strict();
+var SiteInputSchema = z34.object({
+  name: z34.string().trim().min(1).max(120),
+  slug: z34.string().trim().min(1).max(80).optional(),
+  timezone: z34.string().trim().min(1).max(80).optional()
+}).strict();
+var PixelInputSchema = z34.object({
+  name: z34.string().trim().min(1).max(120),
+  environment: z34.string().trim().min(1).max(60).optional()
+}).strict();
+var PixelUpdateSchema = z34.object({
+  name: z34.string().trim().min(1).max(120).optional(),
+  environment: z34.string().trim().min(1).max(60).optional(),
+  status: z34.enum(["active", "disabled"]).optional()
+}).strict().refine(
+  (value) => Object.keys(value).length > 0,
+  "Provide at least one change."
+);
+var EventSchema = z34.object({
+  eventId: z34.string().trim().min(8).max(160),
+  eventName: z34.string().trim().regex(/^[a-z][a-z0-9_]{1,79}$/),
+  occurredAt: z34.string().datetime(),
+  visitorId: z34.string().trim().max(160).optional(),
+  sessionId: z34.string().trim().max(160).optional(),
+  path: z34.string().trim().max(2e3).optional(),
+  canonicalUrl: z34.string().url().max(3e3).optional(),
+  title: z34.string().trim().max(500).optional(),
+  referrer: z34.string().trim().max(3e3).optional(),
+  source: z34.string().trim().max(180).optional(),
+  medium: z34.string().trim().max(180).optional(),
+  campaign: z34.string().trim().max(240).optional(),
+  clickIds: z34.record(z34.string(), z34.string().trim().max(500)).optional(),
+  deviceClass: z34.enum(["desktop", "tablet", "mobile", "unknown"]).optional(),
+  properties: z34.record(z34.string(), z34.unknown()).optional()
+}).strict();
+var IngestionSchema = z34.object({
+  pixelId: z34.string().trim().min(8).max(160),
+  events: z34.array(EventSchema).min(1).max(20)
+}).strict();
+var ConversionSchema = z34.object({
+  siteId: z34.string().uuid(),
+  pixelId: z34.string().uuid().optional(),
+  sessionId: z34.string().trim().max(160).optional(),
+  sourceEventId: z34.string().trim().min(8).max(200),
+  conversionKind: z34.string().trim().regex(/^[a-z][a-z0-9_]{1,79}$/),
+  valueMinor: z34.number().int().min(0).max(2147483647).optional(),
+  currency: z34.string().trim().regex(/^[A-Za-z]{3}$/).optional(),
+  occurredAt: z34.string().datetime()
+}).strict();
+var ExportSchema = z34.object({
+  report: z34.enum(["overview", "acquisition", "content", "conversions"]).default("overview"),
+  format: z34.enum(["csv", "json", "markdown"]).default("csv"),
+  idempotencyKey: z34.string().trim().min(8).max(160).optional()
+}).strict();
+var CampaignLinkSchema = z34.object({
+  pixelId: z34.string().uuid().optional(),
+  name: z34.string().trim().min(1).max(120),
+  destinationUrl: z34.string().url().max(3e3),
+  shortCode: z34.string().trim().min(3).max(48).optional(),
+  source: z34.string().trim().min(1).max(180),
+  medium: z34.string().trim().min(1).max(180),
+  campaign: z34.string().trim().min(1).max(240),
+  term: z34.string().trim().max(240).optional(),
+  content: z34.string().trim().max(240).optional(),
+  adGroup: z34.string().trim().max(240).optional(),
+  adName: z34.string().trim().max(240).optional(),
+  creativeId: z34.string().trim().max(240).optional()
+}).strict();
+var FormFieldSchema = z34.object({
+  id: z34.string().trim().regex(/^[a-z][a-z0-9_]{0,47}$/),
+  type: z34.enum([
+    "text",
+    "email",
+    "tel",
+    "textarea",
+    "select",
+    "checkbox",
+    "radio",
+    "number"
+  ]),
+  label: z34.string().trim().min(1).max(120),
+  required: z34.boolean().default(false),
+  options: z34.array(z34.string().trim().min(1).max(120)).max(30).optional()
+}).strict();
+var FormInputSchema = z34.object({
+  pixelId: z34.string().uuid(),
+  name: z34.string().trim().min(1).max(120),
+  fields: z34.array(FormFieldSchema).min(1).max(30).refine(
+    (fields) => new Set(fields.map((field) => field.id)).size === fields.length,
+    "Field IDs must be unique."
+  ),
+  brand: z34.object({
+    primaryColor: z34.string().regex(/^#[0-9a-f]{6}$/i),
+    backgroundColor: z34.string().regex(/^#[0-9a-f]{6}$/i),
+    textColor: z34.string().regex(/^#[0-9a-f]{6}$/i),
+    radius: z34.number().int().min(0).max(32)
+  }).strict(),
+  submitLabel: z34.string().trim().min(1).max(80).optional(),
+  successMessage: z34.string().trim().min(1).max(500).optional(),
+  redirectUrl: z34.string().url().max(3e3).optional(),
+  consentText: z34.string().trim().max(1e3).optional(),
+  publish: z34.boolean().optional()
+}).strict();
+var FormSubmissionSchema = z34.object({
+  data: z34.record(
+    z34.string(),
+    z34.union([z34.string().max(5e3), z34.number(), z34.boolean()])
+  ).refine((value) => Object.keys(value).length <= 30),
+  visitorId: z34.string().trim().max(160).optional(),
+  sessionId: z34.string().trim().max(160).optional(),
+  source: z34.string().trim().max(180).optional(),
+  medium: z34.string().trim().max(180).optional(),
+  campaign: z34.string().trim().max(240).optional(),
+  clickIds: z34.record(z34.string(), z34.string().trim().max(500)).optional(),
+  placementUrl: z34.string().url().max(3e3),
+  website: z34.string().max(0).optional()
+}).strict();
+var CrmImportSchema = z34.object({
+  sourceSystem: z34.enum([
+    "hubspot",
+    "salesforce",
+    "gohighlevel",
+    "zoho",
+    "pipedrive",
+    "keap",
+    "other"
+  ]),
+  filename: z34.string().trim().min(1).max(240),
+  csv: z34.string().min(1).max(8e6),
+  mapping: z34.object({
+    email: z34.string().trim().min(1).max(240).optional(),
+    firstName: z34.string().trim().min(1).max(240).optional(),
+    lastName: z34.string().trim().min(1).max(240).optional(),
+    name: z34.string().trim().min(1).max(240).optional(),
+    phone: z34.string().trim().min(1).max(240).optional(),
+    company: z34.string().trim().min(1).max(240).optional(),
+    externalId: z34.string().trim().min(1).max(240).optional()
+  }).strict()
+}).strict();
+var ActivationDestinationSchema = z34.object({
+  platform: z34.enum(["meta", "google", "tiktok", "reddit"]),
+  name: z34.string().trim().min(1).max(120),
+  connectionRef: z34.string().trim().max(240).optional(),
+  externalDatasetId: z34.string().trim().max(240).optional(),
+  eventMapping: z34.record(z34.string(), z34.string().trim().max(120)).optional()
+}).strict();
+var BusinessModelSchema = z34.object({ businessModel: z34.enum(["leadgen", "saas", "ecommerce"]) }).strict();
+var AdSpendSchema = z34.object({
+  rows: z34.array(
+    z34.object({
+      date: z34.string().date(),
+      platform: z34.string().trim().min(1).max(80),
+      campaign: z34.string().trim().max(240).optional(),
+      spendMinor: z34.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+      currency: z34.string().regex(/^[A-Za-z]{3}$/).optional(),
+      sourceRef: z34.string().max(500).optional()
+    }).strict()
+  ).min(1).max(5e3)
+}).strict();
+function safeOrigin(origin) {
+  if (!origin || origin === "null") return null;
+  try {
+    const url = new URL(origin);
+    return url.protocol === "http:" || url.protocol === "https:" ? url.origin : null;
+  } catch {
+    return null;
+  }
+}
+function dashboardOriginAllowed(origin) {
+  if (origin === "https://mcpscraper.dev" || origin === "https://www.mcpscraper.dev")
+    return true;
+  if (process.env.NODE_ENV !== "production" && /^http:\/\/(localhost|127\.0\.0\.1):\d+$/.test(origin))
+    return true;
+  return (process.env.ALLOWED_ORIGINS ?? process.env.APP_ORIGIN ?? "").split(",").map((value) => value.trim()).includes(origin);
+}
+analyticsApp.use("*", async (c, next) => {
+  const origin = safeOrigin(c.req.header("origin"));
+  const publicIngestion = c.req.path === "/v1/events";
+  if (origin && (publicIngestion || dashboardOriginAllowed(origin))) {
+    c.header("Access-Control-Allow-Origin", origin);
+    c.header("Vary", "Origin");
+    c.header(
+      "Access-Control-Allow-Methods",
+      "GET, POST, PATCH, DELETE, OPTIONS"
+    );
+    c.header("Access-Control-Allow-Headers", "content-type, x-api-key");
+    c.header("Access-Control-Max-Age", "600");
+  }
+  if (c.req.method === "OPTIONS") return c.body(null, 204);
+  await next();
+});
+function analyticsPixelSdk() {
+  return `(()=>{const s=document.currentScript;if(!s)return;const pixel=s.dataset.pixel;if(!pixel)return;const endpoint=new URL('/analytics/v1/events',s.src).toString(),ttl=18e5;const key='mcp_analytics_visitor',sessionKey='mcp_analytics_session',touchKey='mcp_analytics_touch';const id=()=>crypto.randomUUID?crypto.randomUUID():'e_'+Date.now().toString(36)+Math.random().toString(36).slice(2);let consent=s.dataset.consent==='granted'&&!navigator.globalPrivacyControl,visitor=null,session=null;const read=k=>{try{return localStorage.getItem(k)}catch{return null}},write=(k,v)=>{try{localStorage.setItem(k,v)}catch{}};const ensure=()=>{if(!consent)return;visitor=read(key)||id();const now=Date.now();let saved={};try{saved=JSON.parse(read(sessionKey)||'{}')}catch{}session=saved.id&&now-Number(saved.seen||0)<ttl?saved.id:id();write(key,visitor);write(sessionKey,JSON.stringify({id:session,seen:now}))};const attribution=()=>{const q=new URLSearchParams(location.search),clickIds={},properties={},map={utm_term:'utm_term',utm_content:'utm_content',utm_id:'campaign_id',campaign_id:'campaign_id',adset_id:'ad_set_id',ad_set_id:'ad_set_id',adgroup_id:'ad_group_id',ad_group_id:'ad_group_id',ad_id:'ad_id',creative_id:'creative_id',placement:'placement'};for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}for(const [from,to] of Object.entries(map)){const v=q.get(from);if(v)properties[to]=v}const current={source:q.get('utm_source')||undefined,medium:q.get('utm_medium')||undefined,campaign:q.get('utm_campaign')||undefined,clickIds,properties};if(current.source||Object.keys(clickIds).length)write(touchKey,JSON.stringify(current));else{try{return JSON.parse(read(touchKey)||'null')||current}catch{}}return current};const send=(name,properties={})=>{if(!consent||navigator.globalPrivacyControl)return;ensure();const a=attribution();const body=JSON.stringify({pixelId:pixel,events:[{eventId:id(),eventName:name,occurredAt:new Date().toISOString(),visitorId:visitor,sessionId:session,path:location.pathname,canonicalUrl:location.origin+location.pathname,title:document.title,referrer:document.referrer||undefined,...a,deviceClass:innerWidth<640?'mobile':innerWidth<1024?'tablet':'desktop',properties:{...a.properties,...properties}}]});if(navigator.sendBeacon&&navigator.sendBeacon(endpoint,new Blob([body],{type:'application/json'})))return;fetch(endpoint,{method:'POST',headers:{'content-type':'application/json'},body,keepalive:true,credentials:'omit'}).catch(()=>{})};const api={page:()=>send('page_view'),track:send,consent:state=>{consent=(state==='granted'||state===true)&&!navigator.globalPrivacyControl;if(consent){ensure();api.page()}},debug:()=>({pixel,endpoint,consent,gpc:Boolean(navigator.globalPrivacyControl),visitorId:visitor,sessionId:session,hostname:location.hostname,path:location.pathname,...attribution()})};window.mcpAnalytics=api;ensure();if(consent)api.page();let current=location.href;const changed=()=>{if(location.href!==current){current=location.href;api.page()}};for(const method of ['pushState','replaceState']){const original=history[method];history[method]=function(...args){const result=original.apply(this,args);queueMicrotask(changed);return result}}addEventListener('popstate',changed)})();`;
+}
+function reportFilters(url) {
+  const end = url.searchParams.get("end") || (/* @__PURE__ */ new Date()).toISOString();
+  const defaultStart = new Date(
+    Date.parse(end) - 30 * 24 * 60 * 60 * 1e3
+  ).toISOString();
+  const list = (name) => url.searchParams.getAll(name).flatMap((value) => value.split(",")).map((value) => value.trim()).filter(Boolean);
+  return {
+    start: url.searchParams.get("start") || defaultStart,
+    end,
+    timezone: validTimezone(url.searchParams.get("timezone")),
+    pixelIds: list("pixelId"),
+    hostnames: list("hostname"),
+    source: url.searchParams.get("source") || void 0,
+    medium: url.searchParams.get("medium") || void 0,
+    campaign: url.searchParams.get("campaign") || void 0,
+    eventName: url.searchParams.get("eventName") || void 0,
+    attributionModel: url.searchParams.get("attributionModel") === "last_touch" ? "last_touch" : "first_touch",
+    channelFamily: url.searchParams.get("channelFamily") || void 0,
+    platform: url.searchParams.get("platform") || void 0,
+    referrer: url.searchParams.get("referrer") || void 0,
+    path: url.searchParams.get("path") || void 0,
+    deviceClass: url.searchParams.get("deviceClass") || void 0,
+    countryCode: url.searchParams.get("countryCode") || void 0,
+    regionCode: url.searchParams.get("regionCode") || void 0,
+    conversionKind: url.searchParams.get("conversionKind") || void 0
+  };
+}
+function validTimezone(value) {
+  if (!value) return "UTC";
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: value }).format(/* @__PURE__ */ new Date());
+    return value;
+  } catch {
+    throw new AnalyticsRepositoryError(
+      "invalid_timezone",
+      "Choose a valid IANA timezone."
+    );
+  }
+}
+function validateReportWindow(filters) {
+  const start = Date.parse(filters.start);
+  const end = Date.parse(filters.end);
+  if (!Number.isFinite(start) || !Number.isFinite(end) || start >= end) {
+    throw new AnalyticsRepositoryError(
+      "invalid_date_range",
+      "Choose a valid date range."
+    );
+  }
+  if (end - start > 366 * 24 * 60 * 60 * 1e3) {
+    throw new AnalyticsRepositoryError(
+      "date_range_too_large",
+      "Date ranges are limited to 366 days."
+    );
+  }
+}
+function reportPage(url) {
+  const rawLimit = Number(url.searchParams.get("limit") || 25);
+  return {
+    limit: Number.isFinite(rawLimit) ? Math.min(100, Math.max(1, Math.trunc(rawLimit))) : 25,
+    cursor: url.searchParams.get("cursor") || void 0
+  };
+}
+function pixelSnippet(publicId) {
+  return `<script async src="https://mcpscraper.dev/analytics/v1/pixel.js" data-pixel="${publicId}" data-consent="required"></script>`;
+}
+function formSnippet(publicId) {
+  return `<div data-mcp-form="${publicId}"></div><script async src="https://mcpscraper.dev/analytics/v1/form.js?form=${publicId}"></script>`;
+}
+function escapeHtml6(value) {
+  return String(value ?? "").replace(
+    /[&<>"']/g,
+    (character) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[character]
+  );
+}
+function renderPublicForm(form, placementUrl) {
+  if (!form)
+    return "<!doctype html><title>Form unavailable</title><p>Form unavailable.</p>";
+  const fields = form.fields.map((field) => {
+    const required = field.required ? " required" : "";
+    const options = (field.options ?? []).map(
+      (option) => `<option value="${escapeHtml6(option)}">${escapeHtml6(option)}</option>`
+    ).join("");
+    const control = field.type === "textarea" ? `<textarea id="${escapeHtml6(field.id)}" name="${escapeHtml6(field.id)}"${required}></textarea>` : field.type === "select" ? `<select id="${escapeHtml6(field.id)}" name="${escapeHtml6(field.id)}"${required}><option value="">Choose\u2026</option>${options}</select>` : field.type === "checkbox" ? `<input id="${escapeHtml6(field.id)}" name="${escapeHtml6(field.id)}" type="checkbox" value="true"${required}>` : `<input id="${escapeHtml6(field.id)}" name="${escapeHtml6(field.id)}" type="${escapeHtml6(field.type)}"${required}>`;
+    return `<label${field.type === "checkbox" ? ' class="check"' : ""}><span>${escapeHtml6(field.label)}${field.required ? " *" : ""}</span>${control}</label>`;
+  }).join("");
+  const brand = form.brand;
+  return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><style>:root{font-family:ui-sans-serif,system-ui;color:${escapeHtml6(brand.textColor)};background:${escapeHtml6(brand.backgroundColor)}}*{box-sizing:border-box}body{margin:0;padding:18px}form{display:grid;gap:14px}label{display:grid;gap:6px;font-size:13px;font-weight:650}.check{grid-template-columns:auto 1fr;align-items:center}.check span{grid-column:2}.check input{grid-column:1;grid-row:1}input,textarea,select{width:100%;min-height:44px;padding:10px 12px;border:1px solid #ccd3df;border-radius:${brand.radius}px;background:white;color:inherit;font:inherit}textarea{min-height:110px;resize:vertical}button{min-height:46px;border:0;border-radius:${brand.radius}px;color:white;background:${escapeHtml6(brand.primaryColor)};font:inherit;font-weight:750;cursor:pointer}.consent{margin:0;color:#667085;font-size:11px;line-height:1.45}.notice{display:none;padding:12px;border-radius:${brand.radius}px;background:#edf8f2;color:#17613c}.hp{position:absolute!important;left:-9999px!important}</style></head><body><form id="mcp-form">${fields}<label class="hp">Website<input name="website" autocomplete="off" tabindex="-1"></label>${form.consent_text ? `<p class="consent">${escapeHtml6(form.consent_text)}</p>` : ""}<button>${escapeHtml6(form.submit_label)}</button><div class="notice" role="status"></div></form><script>(()=>{const form=document.querySelector('#mcp-form'),notice=form.querySelector('.notice'),q=new URLSearchParams(location.search);form.addEventListener('submit',async event=>{event.preventDefault();const button=form.querySelector('button');button.disabled=true;const raw=Object.fromEntries(new FormData(form).entries()),website=String(raw.website||''),clickIds={};delete raw.website;for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}try{const response=await fetch('/analytics/forms/${escapeHtml6(form.public_id)}/submissions',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({data:raw,website,placementUrl:${JSON.stringify(placementUrl)},visitorId:q.get('visitor')||undefined,sessionId:q.get('session')||undefined,source:q.get('source')||undefined,medium:q.get('medium')||undefined,campaign:q.get('campaign')||undefined,clickIds})});if(!response.ok)throw new Error('submit');notice.textContent=${JSON.stringify(form.success_message)};notice.style.display='block';form.reset();${form.redirect_url ? `setTimeout(()=>{top.location.href=${JSON.stringify(form.redirect_url)}},700);` : ""}}catch{notice.textContent='Your response could not be submitted. Please try again.';notice.style.display='block'}finally{button.disabled=false}})})()</script></body></html>`;
+}
+analyticsApp.get(
+  "/health/live",
+  (c) => c.json({ status: "live", checkedAt: (/* @__PURE__ */ new Date()).toISOString() }, 200, {
+    "Cache-Control": "no-store"
+  })
+);
+analyticsApp.get("/health/ready", async (c) => {
+  const startedAt = Date.now();
+  try {
+    await getAnalyticsPool().query("SELECT 1");
+    return c.json(
+      {
+        status: "ready",
+        database: true,
+        latencyMs: Date.now() - startedAt,
+        checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+      },
+      200,
+      { "Cache-Control": "no-store" }
+    );
+  } catch (error) {
+    return c.json(
+      {
+        status: "not_ready",
+        database: false,
+        error: error instanceof Error ? error.message : String(error),
+        checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+      },
+      503,
+      { "Cache-Control": "no-store" }
+    );
+  }
+});
+analyticsApp.get("/v1/pixel.js", (c) => {
+  c.header("Content-Type", "application/javascript; charset=utf-8");
+  c.header("Cache-Control", "public, max-age=300");
+  return c.body(analyticsPixelSdk());
+});
+analyticsApp.get("/v1/form.js", async (c) => {
+  const form = await getPublicAnalyticsForm(c.req.query("form") || "");
+  if (!form)
+    return c.body("/* Form unavailable. */", 404, {
+      "Content-Type": "application/javascript; charset=utf-8"
+    });
+  if (!await analyticsOwnerHasCurrentEntitlement(Number(form.owner_user_id)))
+    return c.body("/* Thorbit X-Ray Pixel subscription required. */", 402, {
+      "Content-Type": "application/javascript; charset=utf-8",
+      "Cache-Control": "no-store"
+    });
+  const script = `(()=>{const s=document.currentScript,form=${JSON.stringify(form.public_id)},pixel=${JSON.stringify(form.pixel_public_id)};if(!document.querySelector('script[data-pixel="'+pixel+'"]')){const p=document.createElement('script');p.async=true;p.src=new URL('/analytics/v1/pixel.js',s.src);p.dataset.pixel=pixel;p.dataset.consent='required';document.head.appendChild(p)}const target=document.querySelector('[data-mcp-form="'+form+'"]');if(!target)return;const frame=document.createElement('iframe'),params=new URLSearchParams({placement:location.href}),q=new URLSearchParams(location.search);try{const visitor=localStorage.getItem('mcp_analytics_visitor'),session=JSON.parse(localStorage.getItem('mcp_analytics_session')||'{}').id;if(visitor)params.set('visitor',visitor);if(session)params.set('session',session)}catch{}for(const [from,to] of [['utm_source','source'],['utm_medium','medium'],['utm_campaign','campaign'],['fbclid','fbclid'],['gclid','gclid'],['gbraid','gbraid'],['wbraid','wbraid'],['ttclid','ttclid'],['rdt_cid','rdt_cid'],['msclkid','msclkid']]){const value=q.get(from);if(value)params.set(to,value)}frame.title=${JSON.stringify(form.name)};frame.src=new URL('/analytics/forms/'+form+'/embed?'+params,s.src);frame.style.cssText='width:100%;min-height:520px;border:0;display:block';frame.loading='lazy';target.replaceChildren(frame)})();`;
+  return c.body(script, 200, {
+    "Content-Type": "application/javascript; charset=utf-8",
+    "Cache-Control": "public, max-age=300"
+  });
+});
+analyticsApp.get("/forms/:publicId/embed", async (c) => {
+  const form = await getPublicAnalyticsForm(c.req.param("publicId"));
+  if (!form)
+    return c.html(
+      "<!doctype html><title>Form unavailable</title><p>Form unavailable.</p>",
+      404
+    );
+  if (!await analyticsOwnerHasCurrentEntitlement(Number(form.owner_user_id)))
+    return c.html(
+      '<!doctype html><meta name=viewport content="width=device-width"><style>body{font:15px system-ui;padding:24px;color:#475467}strong{display:block;color:#101828;margin-bottom:6px}</style><strong>Form unavailable</strong>This Thorbit X-Ray Pixel account needs an active subscription.',
+      402
+    );
+  const placementUrl = c.req.query("placement") || "";
+  if (!await isAnalyticsFormPlacementApproved(form.pixel_id, placementUrl))
+    return c.html(
+      "<!doctype html><title>Form unavailable</title><p>This form is not approved for this hostname.</p>",
+      403
+    );
+  c.header(
+    "Content-Security-Policy",
+    "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'; form-action 'none'; base-uri 'none'"
+  );
+  c.header("Cache-Control", "no-store");
+  return c.html(renderPublicForm(form, placementUrl));
+});
+analyticsApp.post("/forms/:publicId/submissions", async (c) => {
+  const parsed = FormSubmissionSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      {
+        ok: false,
+        error: "Invalid form submission.",
+        issues: parsed.error.issues
+      },
+      400
+    );
+  const form = await getPublicAnalyticsForm(c.req.param("publicId"));
+  if (!form) return c.json({ ok: false, error: "Form unavailable." }, 404);
+  if (!await analyticsOwnerHasCurrentEntitlement(Number(form.owner_user_id)))
+    return c.json(
+      { ok: false, error: "This Thorbit X-Ray Pixel form is not currently active." },
+      402
+    );
+  if (!await isAnalyticsFormPlacementApproved(
+    form.pixel_id,
+    parsed.data.placementUrl
+  ))
+    return c.json({ ok: false, error: "Form hostname is not approved." }, 403);
+  const allowed = new Map(
+    form.fields.map((field) => [field.id, field])
+  );
+  for (const key of Object.keys(parsed.data.data))
+    if (!allowed.has(key))
+      return c.json(
+        { ok: false, error: "Submission contains an unknown field." },
+        400
+      );
+  for (const field of allowed.values())
+    if (field.required && (parsed.data.data[field.id] === void 0 || parsed.data.data[field.id] === ""))
+      return c.json({ ok: false, error: `${field.label} is required.` }, 400);
+  const user = await getUserById(form.owner_user_id);
+  if (!user)
+    return c.json({ ok: false, error: "Form owner unavailable." }, 503);
+  const data = parsed.data.data;
+  const email = typeof data.email === "string" ? data.email.trim().toLowerCase() : "";
+  const firstName = typeof data.first_name === "string" ? data.first_name.trim() : "";
+  const lastName = typeof data.last_name === "string" ? data.last_name.trim() : "";
+  const fullName = [firstName, lastName].filter(Boolean).join(" ") || (typeof data.name === "string" ? data.name.trim() : "") || email || "Website lead";
+  const identitySeed = email || `${fullName}:${Date.now()}`;
+  const suffix2 = createHash15("sha256").update(identitySeed).digest("hex").slice(0, 12);
+  const path5 = `Leads/person-${suffix2}`;
+  const { key: memoryKey, error: memoryKeyError } = await getOrCreateUserMemoryKey(user);
+  const existing = memoryKey ? await memoryCall("getTool", { vault: "People", path: path5 }, memoryKey) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
+  const props = {
+    ...existing.note?.props ?? {},
+    type: "person",
+    status: "active",
+    person_name: fullName,
+    ...firstName ? { first_name: firstName } : {},
+    ...lastName ? { last_name: lastName } : {},
+    ...email ? { email } : {},
+    ...typeof data.phone === "string" && data.phone.trim() ? { phone: data.phone.trim(), text_phone: data.phone.trim() } : {},
+    ...typeof data.company === "string" && data.company.trim() ? { company: data.company.trim() } : {},
+    attribution_site_id: form.site_id,
+    attribution_form_id: form.id,
+    attribution_form_name: form.name,
+    attributed_source: parsed.data.source || "(direct)",
+    attributed_medium: parsed.data.medium || "(none)",
+    attributed_campaign: parsed.data.campaign || "(none)",
+    form_fields: data,
+    source_type: "analytics_form",
+    source_ref: `form:${form.public_id}`,
+    summary: `Website lead from ${form.name}`,
+    embedding_summary: `${fullName} submitted ${form.name}`,
+    related: [],
+    related_vault_notes: [],
+    embed: true,
+    embed_priority: "normal"
+  };
+  const crmPayload = {
+    vault: "People",
+    path: path5,
+    title: fullName,
+    content: existing.note?.content || `# ${fullName}
+
+## Identity
+Website lead captured through ${form.name}.
+
+## Relationship
+Attribution is linked to Site Analytics.
+
+## Known Context
+Submitted the published form.
+
+## Interaction History
+- ${(/* @__PURE__ */ new Date()).toISOString()}: Form submitted.
+
+## Open Loops
+- Review and follow up.`,
+    props,
+    ...existing.note ? { baseRevision: existing.note.revision } : {}
+  };
+  const saved = memoryKey ? await memoryCall(
+    "putTool",
+    crmPayload,
+    memoryKey
+  ) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
+  const crmDeliveryStatus = saved.ok ? "delivered" : "pending";
+  const receipt = await recordAnalyticsFormSubmission({
+    form,
+    visitorId: parsed.data.visitorId,
+    sessionId: parsed.data.sessionId,
+    crmPersonRef: `People::${path5}`,
+    crmDeliveryStatus,
+    source: parsed.data.source,
+    medium: parsed.data.medium,
+    campaign: parsed.data.campaign,
+    clickIds: parsed.data.clickIds
+  });
+  const phone = typeof data.phone === "string" ? data.phone.trim() : "";
+  const identityGraph = await linkAnalyticsFormIdentity({
+    submissionId: receipt.submissionId,
+    siteId: form.site_id,
+    crmPersonRef: `People::${path5}`,
+    visitorId: parsed.data.visitorId,
+    sessionId: parsed.data.sessionId,
+    email: email || void 0,
+    phone: phone || void 0,
+    clickIds: parsed.data.clickIds
+  });
+  if (!saved.ok) {
+    await queueAnalyticsFormDelivery({
+      submissionId: receipt.submissionId,
+      ownerUserId: form.owner_user_id,
+      payloadCiphertext: encryptMemoryKey(JSON.stringify(crmPayload)),
+      errorCode: memoryKey ? "memory_write_failed" : "memory_credential_unavailable"
+    });
+  }
+  const conversion = await createAnalyticsConversion({
+    userId: form.owner_user_id,
+    siteId: form.site_id,
+    pixelId: form.pixel_id,
+    sessionId: parsed.data.sessionId,
+    sourceEventId: `form:${receipt.submissionId}`,
+    conversionKind: "form_submitted",
+    occurredAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  const match = {
+    ...email ? { emailSha256: createHash15("sha256").update(email).digest("hex") } : {},
+    ...phone ? {
+      phoneSha256: createHash15("sha256").update(phone.replace(/\D/g, "")).digest("hex")
+    } : {}
+  };
+  const activationQueued = await queueAnalyticsActivation({
+    siteId: form.site_id,
+    conversionId: conversion.id,
+    personId: identityGraph.personId,
+    payloadCiphertext: encryptMemoryKey(
+      JSON.stringify({
+        eventId: conversion.id,
+        eventName: "form_submitted",
+        eventTime: (/* @__PURE__ */ new Date()).toISOString(),
+        actionSource: "website",
+        sourceUrl: parsed.data.placementUrl,
+        match,
+        clickIds: parsed.data.clickIds ?? {},
+        attribution: {
+          source: parsed.data.source,
+          medium: parsed.data.medium,
+          campaign: parsed.data.campaign
+        }
+      })
+    )
+  });
+  return c.json(
+    {
+      ok: true,
+      submissionId: receipt.submissionId,
+      crmDeliveryStatus,
+      attribution: {
+        personId: identityGraph.personId,
+        linkedSignals: identityGraph.linkedSignals
+      },
+      activation: { queuedDestinations: activationQueued },
+      message: form.success_message,
+      redirectUrl: form.redirect_url
+    },
+    saved.ok ? 201 : 202
+  );
+});
+analyticsApp.get("/l/:shortCode", async (c) => {
+  const destination = await resolveAnalyticsCampaignLink(
+    c.req.param("shortCode"),
+    c.req.header("referer")
+  );
+  if (!destination)
+    return c.json(
+      {
+        ok: false,
+        code: "campaign_link_not_found",
+        error: "Campaign link not found."
+      },
+      404
+    );
+  c.header("Cache-Control", "no-store");
+  return c.redirect(destination, 302);
+});
+analyticsApp.post("/v1/events", async (c) => {
+  const contentLength = Number(c.req.header("content-length") || 0);
+  if (contentLength > 32 * 1024)
+    return c.json(
+      { accepted: 0, rejected: 1, reasonCodes: ["payload_too_large"] },
+      413
+    );
+  const parsed = IngestionSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success) {
+    return c.json(
+      {
+        accepted: 0,
+        rejected: 1,
+        reasonCodes: ["invalid_payload"],
+        issues: parsed.error.issues
+      },
+      400
+    );
+  }
+  const result = await ingestAnalyticsEvents({
+    publicPixelId: parsed.data.pixelId,
+    origin: c.req.header("origin") ?? null,
+    events: parsed.data.events,
+    geography: {
+      countryCode: c.req.header("x-vercel-ip-country") || c.req.header("cf-ipcountry") || null,
+      regionCode: c.req.header("x-vercel-ip-country-region") || null
+    }
+  });
+  return c.json(result, 202);
+});
+analyticsApp.get("/entitlement", auth3, async (c) => {
+  c.header("Cache-Control", "private, no-store");
+  return c.json({
+    entitlement: await resolveAnalyticsEntitlement(Number(c.get("user").id))
+  });
+});
+analyticsApp.post("/entitlement/connect", auth3, async (c) => {
+  c.header("Cache-Control", "private, no-store");
+  try {
+    return c.json({
+      connectUrl: await createThorbitConnectUrl(Number(c.get("user").id))
+    });
+  } catch (error) {
+    return c.json(
+      {
+        error: error instanceof Error ? error.message : "Could not start Thorbit sign-in."
+      },
+      503
+    );
+  }
+});
+analyticsApp.post("/entitlement/api-key", auth3, async (c) => {
+  c.header("Cache-Control", "private, no-store");
+  const parsed = ThorbitApiKeySchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json({ error: "Enter a valid Thorbit API key." }, 400);
+  try {
+    return c.json({
+      entitlement: await connectAnalyticsWithThorbitApiKey(
+        Number(c.get("user").id),
+        parsed.data.apiKey
+      )
+    });
+  } catch (error) {
+    return c.json(
+      {
+        error: error instanceof Error ? error.message : "Thorbit could not verify this API key."
+      },
+      401
+    );
+  }
+});
+analyticsApp.post("/entitlement/callback", auth3, async (c) => {
+  c.header("Cache-Control", "private, no-store");
+  const parsed = ThorbitCallbackSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json({ error: "Invalid Thorbit connection response." }, 400);
+  try {
+    return c.json({
+      entitlement: await consumeThorbitConnectCallback({
+        userId: Number(c.get("user").id),
+        state: parsed.data.state,
+        assertion: parsed.data.assertion
+      })
+    });
+  } catch (error) {
+    return c.json(
+      {
+        error: error instanceof Error ? error.message : "Could not connect the Thorbit account."
+      },
+      400
+    );
+  }
+});
+analyticsApp.delete("/entitlement", auth3, async (c) => {
+  await disconnectAnalyticsEntitlement(Number(c.get("user").id));
+  return c.json({ ok: true });
+});
+analyticsApp.use("/v1/conversions", auth3, entitlementGuard);
+analyticsApp.use("/sites", auth3, entitlementGuard);
+analyticsApp.use("/sites/*", auth3, entitlementGuard);
+analyticsApp.post("/v1/conversions", auth3, async (c) => {
+  const parsed = ConversionSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { error: "Invalid conversion.", issues: parsed.error.issues },
+      400
+    );
+  const conversion = await createAnalyticsConversion({
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true, conversion }, conversion.created ? 201 : 200);
+});
+analyticsApp.get("/sites", auth3, async (c) => {
+  const sites = await listAnalyticsSites(Number(c.get("user").id));
+  return c.json({ ok: true, sites });
+});
+analyticsApp.post("/sites", auth3, async (c) => {
+  const parsed = SiteInputSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { error: "Invalid Site details.", issues: parsed.error.issues },
+      400
+    );
+  const site = await createAnalyticsSite({
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true, site }, 201);
+});
+analyticsApp.delete("/sites/:siteId", auth3, async (c) => {
+  await deleteAnalyticsSite({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id)
+  });
+  return c.json({ ok: true });
+});
+analyticsApp.patch("/sites/:siteId/business-model", auth3, async (c) => {
+  const parsed = BusinessModelSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { ok: false, error: "Choose a supported business model." },
+      400
+    );
+  await updateAnalyticsBusinessModel({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true, businessModel: parsed.data.businessModel });
+});
+analyticsApp.post("/sites/:siteId/ad-spend", auth3, async (c) => {
+  const parsed = AdSpendSchema.safeParse(await c.req.json().catch(() => null));
+  if (!parsed.success)
+    return c.json(
+      {
+        ok: false,
+        error: "Invalid ad-spend rows.",
+        issues: parsed.error.issues
+      },
+      400
+    );
+  const result = await upsertAnalyticsAdSpend({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true, result }, 202);
+});
+analyticsApp.get("/sites/:siteId/business-metrics", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const filters = reportFilters(url);
+  validateReportWindow(filters);
+  const data = await analyticsBusinessMetrics(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    filters.start,
+    filters.end
+  );
+  return c.json({ ok: true, data, filters });
+});
+analyticsApp.get("/sites/:siteId/forecast", auth3, async (c) => {
+  const horizon = Math.min(
+    Math.max(Number(c.req.query("horizonMonths") || 12), 1),
+    36
+  );
+  const data = await analyticsForecast(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    horizon
+  );
+  return c.json({ ok: true, data });
+});
+analyticsApp.get("/sites/:siteId/pixels", auth3, async (c) => {
+  const pixels = await listAnalyticsPixels(
+    c.req.param("siteId"),
+    Number(c.get("user").id)
+  );
+  return c.json({
+    ok: true,
+    pixels: pixels.map((pixel) => ({
+      ...pixel,
+      snippet: pixelSnippet(pixel.public_id)
+    }))
+  });
+});
+analyticsApp.post("/sites/:siteId/pixels", auth3, async (c) => {
+  const parsed = PixelInputSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { error: "Invalid Pixel details.", issues: parsed.error.issues },
+      400
+    );
+  const pixel = await createAnalyticsPixel({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json(
+    { ok: true, pixel: { ...pixel, snippet: pixelSnippet(pixel.public_id) } },
+    201
+  );
+});
+analyticsApp.get("/sites/:siteId/campaign-links", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const data = await listAnalyticsCampaignLinks(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    reportPage(url)
+  );
+  return c.json({
+    ok: true,
+    data: {
+      ...data,
+      links: data.links.map((link) => ({
+        ...link,
+        short_url: `${url.origin}/analytics/l/${link.short_code}`
+      }))
+    }
+  });
+});
+analyticsApp.get("/sites/:siteId/forms", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const data = await listAnalyticsForms(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    reportPage(url)
+  );
+  return c.json({
+    ok: true,
+    data: {
+      ...data,
+      forms: data.forms.map((form) => ({
+        ...form,
+        snippet: formSnippet(form.public_id),
+        embed_url: `${url.origin}/analytics/forms/${form.public_id}/embed`
+      }))
+    }
+  });
+});
+analyticsApp.post("/sites/:siteId/forms", auth3, async (c) => {
+  const parsed = FormInputSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { ok: false, error: "Invalid form.", issues: parsed.error.issues },
+      400
+    );
+  const form = await createAnalyticsForm({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json(
+    {
+      ok: true,
+      form: {
+        ...form,
+        snippet: formSnippet(form.public_id),
+        embed_url: `${new URL(c.req.url).origin}/analytics/forms/${form.public_id}/embed`
+      }
+    },
+    201
+  );
+});
+analyticsApp.get("/sites/:siteId/crm-imports", auth3, async (c) => {
+  const data = await listAnalyticsCrmImports(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    reportPage(new URL(c.req.url))
+  );
+  return c.json({ ok: true, data });
+});
+analyticsApp.get("/sites/:siteId/people", auth3, async (c) => {
+  const data = await listAnalyticsPeople(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    reportPage(new URL(c.req.url))
+  );
+  return c.json({ ok: true, data });
+});
+analyticsApp.get("/sites/:siteId/people/:personId/journey", auth3, async (c) => {
+  const data = await getAnalyticsPersonJourney(
+    c.req.param("siteId"),
+    c.req.param("personId"),
+    Number(c.get("user").id),
+    reportPage(new URL(c.req.url))
+  );
+  return c.json({ ok: true, data });
+});
+analyticsApp.post("/sites/:siteId/crm-imports", auth3, async (c) => {
+  const parsed = CrmImportSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { ok: false, error: "Invalid CRM import.", issues: parsed.error.issues },
+      400
+    );
+  const csv = Papa2.parse(parsed.data.csv, {
+    header: true,
+    skipEmptyLines: "greedy",
+    transformHeader: (header) => header.trim()
+  });
+  if (csv.errors.length)
+    return c.json(
+      {
+        ok: false,
+        error: "CSV could not be parsed.",
+        issues: csv.errors.slice(0, 10)
+      },
+      400
+    );
+  if (csv.data.length > 2500)
+    return c.json(
+      { ok: false, error: "Import files are limited to 2,500 rows per batch." },
+      400
+    );
+  const pick = (row, header) => header ? String(row[header] ?? "").trim() : "";
+  const queued = [];
+  const identities = [];
+  let rejectedCount = 0;
+  for (const [index, row] of csv.data.entries()) {
+    const email = pick(row, parsed.data.mapping.email).toLowerCase();
+    const firstName = pick(row, parsed.data.mapping.firstName);
+    const lastName = pick(row, parsed.data.mapping.lastName);
+    const explicitName = pick(row, parsed.data.mapping.name);
+    const fullName = explicitName || [firstName, lastName].filter(Boolean).join(" ");
+    const phone = pick(row, parsed.data.mapping.phone);
+    const company = pick(row, parsed.data.mapping.company);
+    const externalId = pick(row, parsed.data.mapping.externalId);
+    if (!email && !phone && !externalId && !fullName) {
+      rejectedCount += 1;
+      continue;
+    }
+    const digest2 = createHash15("sha256").update(
+      `${parsed.data.sourceSystem}:${externalId || email || phone || `${fullName}:${index}`}`
+    ).digest("hex").slice(0, 16);
+    const path5 = `Leads/person-${digest2}`;
+    const crmPersonRef = `People::${path5}`;
+    const props = {
+      type: "person",
+      status: "active",
+      person_name: fullName || email || phone || "Imported contact",
+      ...firstName ? { first_name: firstName } : {},
+      ...lastName ? { last_name: lastName } : {},
+      ...email ? { email } : {},
+      ...phone ? { phone, text_phone: phone } : {},
+      ...company ? { company } : {},
+      ...externalId ? { external_id: externalId } : {},
+      import_fields: row,
+      source_type: "crm_csv_import",
+      source_ref: `${parsed.data.sourceSystem}:${digest2}`,
+      summary: `Imported from ${parsed.data.sourceSystem}`,
+      embedding_summary: `${fullName || "Contact"} imported from ${parsed.data.sourceSystem}`,
+      related: [],
+      related_vault_notes: [],
+      embed: true,
+      embed_priority: "normal"
+    };
+    const title = fullName || email || phone || "Imported contact";
+    const payload = {
+      vault: "People",
+      path: path5,
+      title,
+      content: `# ${title}
+
+## Identity
+Imported from ${parsed.data.sourceSystem}.
+
+## Relationship
+Review and qualify this contact.
+
+## Known Context
+Imported through the Site Analytics CRM workflow.
+
+## Interaction History
+- ${(/* @__PURE__ */ new Date()).toISOString()}: Imported from ${parsed.data.filename}.
+
+## Open Loops
+- Verify attribution and follow-up status.`,
+      props
+    };
+    queued.push({
+      crmPersonRef,
+      payloadCiphertext: encryptMemoryKey(JSON.stringify(payload))
+    });
+    identities.push({
+      crmPersonRef,
+      email: email || void 0,
+      phone: phone || void 0
+    });
+  }
+  const imported = await createAnalyticsCrmImport({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    sourceSystem: parsed.data.sourceSystem,
+    filename: parsed.data.filename,
+    rows: queued,
+    rejectedCount
+  });
+  for (const identity of identities) {
+    await linkAnalyticsFormIdentity({
+      siteId: c.req.param("siteId"),
+      ...identity
+    });
+  }
+  return c.json({ ok: true, import: imported }, 202);
+});
+analyticsApp.get("/sites/:siteId/activation-destinations", auth3, async (c) => {
+  const destinations = await listAnalyticsActivationDestinations(
+    c.req.param("siteId"),
+    Number(c.get("user").id)
+  );
+  return c.json({ ok: true, destinations });
+});
+analyticsApp.post("/sites/:siteId/activation-destinations", auth3, async (c) => {
+  const parsed = ActivationDestinationSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      {
+        ok: false,
+        error: "Invalid activation destination.",
+        issues: parsed.error.issues
+      },
+      400
+    );
+  const destination = await createAnalyticsActivationDestination({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true, destination }, 201);
+});
+analyticsApp.delete(
+  "/sites/:siteId/activation-destinations/:destinationId",
+  auth3,
+  async (c) => {
+    await archiveAnalyticsActivationDestination({
+      siteId: c.req.param("siteId"),
+      destinationId: c.req.param("destinationId"),
+      userId: Number(c.get("user").id)
+    });
+    return c.json({ ok: true });
+  }
+);
+analyticsApp.post("/sites/:siteId/campaign-links", auth3, async (c) => {
+  const parsed = CampaignLinkSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      {
+        ok: false,
+        error: "Invalid campaign link.",
+        issues: parsed.error.issues
+      },
+      400
+    );
+  const link = await createAnalyticsCampaignLink({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json(
+    {
+      ok: true,
+      link: {
+        ...link,
+        short_url: `${new URL(c.req.url).origin}/analytics/l/${link.short_code}`
+      }
+    },
+    201
+  );
+});
+analyticsApp.delete(
+  "/sites/:siteId/campaign-links/:linkId",
+  auth3,
+  async (c) => {
+    await archiveAnalyticsCampaignLink({
+      siteId: c.req.param("siteId"),
+      linkId: c.req.param("linkId"),
+      userId: Number(c.get("user").id)
+    });
+    return c.json({ ok: true });
+  }
+);
+analyticsApp.patch("/sites/:siteId/pixels/:pixelId", auth3, async (c) => {
+  const parsed = PixelUpdateSchema.safeParse(
+    await c.req.json().catch(() => null)
+  );
+  if (!parsed.success)
+    return c.json(
+      { error: "Invalid Pixel changes.", issues: parsed.error.issues },
+      400
+    );
+  await updateAnalyticsPixel({
+    siteId: c.req.param("siteId"),
+    pixelId: c.req.param("pixelId"),
+    userId: Number(c.get("user").id),
+    ...parsed.data
+  });
+  return c.json({ ok: true });
+});
+analyticsApp.post(
+  "/sites/:siteId/pixels/:pixelId/domains/:hostname/approve",
+  auth3,
+  async (c) => {
+    await setAnalyticsPixelDomainState({
+      siteId: c.req.param("siteId"),
+      pixelId: c.req.param("pixelId"),
+      userId: Number(c.get("user").id),
+      hostname: c.req.param("hostname"),
+      state: "approved"
+    });
+    return c.json({ ok: true });
+  }
+);
+analyticsApp.post(
+  "/sites/:siteId/pixels/:pixelId/domains/:hostname/reject",
+  auth3,
+  async (c) => {
+    await setAnalyticsPixelDomainState({
+      siteId: c.req.param("siteId"),
+      pixelId: c.req.param("pixelId"),
+      userId: Number(c.get("user").id),
+      hostname: c.req.param("hostname"),
+      state: "rejected"
+    });
+    return c.json({ ok: true });
+  }
+);
+for (const [path5, load] of [
+  ["/sites/:siteId/overview", analyticsOverview],
+  ["/sites/:siteId/timeseries", analyticsTimeseries],
+  ["/sites/:siteId/acquisition", analyticsAcquisition],
+  ["/sites/:siteId/content", analyticsContent],
+  ["/sites/:siteId/events", analyticsEventCounts]
+]) {
+  analyticsApp.get(path5, auth3, async (c) => {
+    const url = new URL(c.req.url);
+    const filters = reportFilters(url);
+    validateReportWindow(filters);
+    const paginated = path5.endsWith("/acquisition") || path5.endsWith("/content") || path5.endsWith("/events");
+    const data = await load(
+      c.req.param("siteId"),
+      Number(c.get("user").id),
+      filters,
+      paginated ? reportPage(url) : void 0
+    );
+    return c.json({ ok: true, data, filters });
+  });
+}
+analyticsApp.get("/sites/:siteId/dashboard", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const filters = reportFilters(url);
+  validateReportWindow(filters);
+  const siteId = c.req.param("siteId");
+  const userId = Number(c.get("user").id);
+  const [
+    overview,
+    timeseries,
+    acquisition,
+    devices,
+    activity,
+    geography,
+    content,
+    conversions
+  ] = await Promise.all([
+    analyticsOverview(siteId, userId, filters),
+    analyticsTimeseries(siteId, userId, filters),
+    analyticsAcquisition(siteId, userId, filters, { limit: 25 }),
+    analyticsDimensions(siteId, userId, filters, "device", { limit: 10 }),
+    analyticsDimensions(siteId, userId, filters, "weekday_hour", {
+      limit: 100
+    }),
+    analyticsDimensions(siteId, userId, filters, "region", { limit: 60 }),
+    analyticsContent(siteId, userId, filters, { limit: 8 }),
+    analyticsConversions(siteId, userId, filters, { limit: 8 })
+  ]);
+  let comparison = null;
+  if (url.searchParams.get("compare") === "1") {
+    const start = Date.parse(filters.start);
+    const end = Date.parse(filters.end);
+    const duration = end - start;
+    const previousFilters = {
+      ...filters,
+      start: new Date(start - duration).toISOString(),
+      end: new Date(start).toISOString()
+    };
+    const [previousOverview, previousTimeseries] = await Promise.all([
+      analyticsOverview(siteId, userId, previousFilters),
+      analyticsTimeseries(siteId, userId, previousFilters)
+    ]);
+    comparison = { overview: previousOverview, timeseries: previousTimeseries };
+  }
+  return c.json({
+    ok: true,
+    data: {
+      overview,
+      timeseries,
+      acquisition,
+      devices,
+      activity,
+      geography,
+      content,
+      conversions,
+      comparison
+    },
+    filters
+  });
+});
+analyticsApp.get("/sites/:siteId/dimensions", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const filters = reportFilters(url);
+  validateReportWindow(filters);
+  const dimension = url.searchParams.get("dimension") || "device";
+  if (!["device", "source", "country", "region", "weekday_hour"].includes(
+    dimension
+  )) {
+    return c.json(
+      {
+        ok: false,
+        code: "invalid_dimension",
+        error: "Choose a supported dimension."
+      },
+      400
+    );
+  }
+  const data = await analyticsDimensions(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    filters,
+    dimension,
+    reportPage(url)
+  );
+  return c.json({ ok: true, data, filters });
+});
+analyticsApp.get("/sites/:siteId/conversions", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const filters = reportFilters(url);
+  validateReportWindow(filters);
+  const data = await analyticsConversions(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    filters,
+    reportPage(url)
+  );
+  return c.json({ ok: true, data, filters });
+});
+analyticsApp.get("/sites/:siteId/paths", auth3, async (c) => {
+  const url = new URL(c.req.url);
+  const filters = reportFilters(url);
+  validateReportWindow(filters);
+  const data = await analyticsPaths(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    filters,
+    reportPage(url)
+  );
+  return c.json({ ok: true, data, filters });
+});
+analyticsApp.get("/sites/:siteId/channel-breakdown", auth3, async (c) => {
+  const filters = reportFilters(new URL(c.req.url));
+  const data = await analyticsChannelBreakdown(
+    c.req.param("siteId"),
+    Number(c.get("user").id),
+    filters
+  );
+  return c.json({ ok: true, data });
+});
+analyticsApp.get("/sites/:siteId/health", auth3, async (c) => {
+  const health = await analyticsHealth(
+    c.req.param("siteId"),
+    Number(c.get("user").id)
+  );
+  return c.json({ ok: true, health }, 200, { "Cache-Control": "no-store" });
+});
+analyticsApp.post("/sites/:siteId/exports", auth3, async (c) => {
+  const parsed = ExportSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success)
+    return c.json(
+      {
+        ok: false,
+        error: "Invalid export request.",
+        issues: parsed.error.issues
+      },
+      400
+    );
+  const filters = reportFilters(new URL(c.req.url));
+  validateReportWindow(filters);
+  const artifact = await createAnalyticsExport({
+    siteId: c.req.param("siteId"),
+    userId: Number(c.get("user").id),
+    filters,
+    ...parsed.data,
+    idempotencyKey: c.req.header("idempotency-key") || parsed.data.idempotencyKey
+  });
+  return c.json({ ok: true, artifact }, 201);
+});
+analyticsApp.onError((error, c) => {
+  if (error instanceof AnalyticsRepositoryError) {
+    return c.json(
+      { ok: false, code: error.code, error: error.message },
+      error.status
+    );
+  }
+  console.error(
+    "[analytics]",
+    error instanceof Error ? error.message : String(error)
+  );
+  return c.json(
+    {
+      ok: false,
+      code: "analytics_internal_error",
+      error: "Site Analytics could not complete the request."
+    },
+    500
+  );
+});
+
+// src/api/analytics-delivery.ts
+function safeDeliveryError(error) {
+  if (!error) return "memory_write_failed";
+  if (error.includes("configured") || error.includes("credential")) return "memory_credential_unavailable";
+  if (error.includes("401") || error.includes("403")) return "memory_authorization_failed";
+  if (error.includes("429")) return "memory_rate_limited";
+  return "memory_write_failed";
+}
+async function deliverPendingAnalyticsForms(limit = 10) {
+  const jobs = await claimAnalyticsFormDeliveryJobs(limit);
+  let delivered = 0;
+  let deferred = 0;
+  for (const job of jobs) {
+    const payloadText = decryptMemoryKey(job.payloadCiphertext);
+    const user = await getUserById(job.ownerUserId);
+    if (!payloadText || !user) {
+      await deferAnalyticsFormDelivery(job.id, job.attempts, payloadText ? "owner_not_found" : "payload_unreadable");
+      deferred += 1;
+      continue;
+    }
+    let payload;
+    try {
+      payload = JSON.parse(payloadText);
+    } catch {
+      await deferAnalyticsFormDelivery(job.id, job.attempts, "payload_invalid");
+      deferred += 1;
+      continue;
+    }
+    const { key, error } = await getOrCreateUserMemoryKey(user);
+    const result = key ? await memoryCall("putTool", payload, key) : { ok: false, error };
+    if (result.ok) {
+      await completeAnalyticsFormDelivery(job.id, job.submissionId);
+      delivered += 1;
+    } else {
+      await deferAnalyticsFormDelivery(job.id, job.attempts, safeDeliveryError(result.error));
+      deferred += 1;
+    }
+  }
+  return { claimed: jobs.length, delivered, deferred };
+}
+
+// src/api/scheduled-result-routes.ts
+import { Hono as Hono33 } from "hono";
+import { z as z35 } from "zod";
 
 // src/api/scheduled-artifact-owner.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return createHash14("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return createHash16("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
 
 // src/api/scheduled-run-view-links.ts
-import { createHash as createHash15, randomBytes as randomBytes3, randomUUID as randomUUID17 } from "crypto";
+import { createHash as createHash17, randomBytes as randomBytes4, randomUUID as randomUUID17 } from "crypto";
 var schemaReady3 = false;
 async function ensureScheduledRunViewLinksSchema() {
   if (schemaReady3) return;
@@ -33585,7 +35289,7 @@ async function ensureScheduledRunViewLinksSchema() {
       artifact_id   TEXT NOT NULL,
       title         TEXT NOT NULL,
       summary       TEXT NOT NULL,
-      renderer_key  TEXT NOT NULL CHECK (renderer_key IN ('editorial_reading_room_v1','personal_authority_v1')),
+      renderer_key  TEXT NOT NULL CHECK (renderer_key IN ('editorial_reading_room_v1','personal_authority_v1','newsroom_publisher_v1')),
       token_hash    TEXT NOT NULL UNIQUE,
       expires_at    TEXT NOT NULL,
       revoked_at    TEXT,
@@ -33597,22 +35301,22 @@ async function ensureScheduledRunViewLinksSchema() {
     args: []
   });
   const createSql = String(schema.rows[0]?.sql ?? "");
-  if (createSql.includes("renderer_key = 'editorial_reading_room_v1'")) {
+  if (!createSql.includes("newsroom_publisher_v1")) {
     await db.batch([
-      `DROP TABLE IF EXISTS scheduled_run_view_links_v2`,
-      `CREATE TABLE scheduled_run_view_links_v2 (
+      `DROP TABLE IF EXISTS scheduled_run_view_links_v3`,
+      `CREATE TABLE scheduled_run_view_links_v3 (
         share_id TEXT PRIMARY KEY, owner_id TEXT NOT NULL, run_id TEXT NOT NULL,
         artifact_id TEXT NOT NULL, title TEXT NOT NULL, summary TEXT NOT NULL,
-        renderer_key TEXT NOT NULL CHECK (renderer_key IN ('editorial_reading_room_v1','personal_authority_v1')),
+        renderer_key TEXT NOT NULL CHECK (renderer_key IN ('editorial_reading_room_v1','personal_authority_v1','newsroom_publisher_v1')),
         token_hash TEXT NOT NULL UNIQUE, expires_at TEXT NOT NULL, revoked_at TEXT,
         created_at TEXT NOT NULL
       )`,
-      `INSERT INTO scheduled_run_view_links_v2
+      `INSERT INTO scheduled_run_view_links_v3
         SELECT share_id, owner_id, run_id, artifact_id, title, summary, renderer_key,
                token_hash, expires_at, revoked_at, created_at
           FROM scheduled_run_view_links`,
       `DROP TABLE scheduled_run_view_links`,
-      `ALTER TABLE scheduled_run_view_links_v2 RENAME TO scheduled_run_view_links`
+      `ALTER TABLE scheduled_run_view_links_v3 RENAME TO scheduled_run_view_links`
     ], "write");
   }
   await db.execute(`
@@ -33626,7 +35330,7 @@ async function ensureScheduledRunViewLinksSchema() {
   schemaReady3 = true;
 }
 function tokenHash2(token4) {
-  return createHash15("sha256").update(token4).digest("hex");
+  return createHash17("sha256").update(token4).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -33636,7 +35340,7 @@ function mapRow(row) {
     artifactId: String(row.artifact_id),
     title: String(row.title),
     summary: String(row.summary),
-    rendererKey: row.renderer_key === "personal_authority_v1" ? "personal_authority_v1" : "editorial_reading_room_v1",
+    rendererKey: row.renderer_key === "newsroom_publisher_v1" ? "newsroom_publisher_v1" : row.renderer_key === "personal_authority_v1" ? "personal_authority_v1" : "editorial_reading_room_v1",
     tokenHash: String(row.token_hash),
     expiresAt: String(row.expires_at),
     revokedAt: row.revoked_at == null ? null : String(row.revoked_at),
@@ -33646,7 +35350,7 @@ function mapRow(row) {
 async function createScheduledRunViewLink(input) {
   await ensureScheduledRunViewLinksSchema();
   const now = input.now ?? /* @__PURE__ */ new Date();
-  const token4 = randomBytes3(32).toString("base64url");
+  const token4 = randomBytes4(32).toString("base64url");
   const record = {
     shareId: randomUUID17(),
     ownerId: input.ownerId,
@@ -33713,8 +35417,8 @@ async function revokeScheduledRunViewLink(ownerId, runId, shareId, now = /* @__P
 }
 
 // src/personal-authority/render.ts
-import { createHash as createHash16 } from "crypto";
-function escapeHtml6(value) {
+import { createHash as createHash18 } from "crypto";
+function escapeHtml7(value) {
   return value.replace(/[&<>"']/g, (character) => ({
     "&": "&amp;",
     "<": "&lt;",
@@ -33725,13 +35429,13 @@ function escapeHtml6(value) {
 }
 function safeHref(value) {
   const trimmed = value.trim();
-  return /^(?:https?:|mailto:|tel:|#|\/)/i.test(trimmed) ? escapeHtml6(trimmed) : "#";
+  return /^(?:https?:|mailto:|tel:|#|\/)/i.test(trimmed) ? escapeHtml7(trimmed) : "#";
 }
 function initials(name) {
   return name.split(/\s+/).filter(Boolean).slice(0, 2).map((part) => part[0]?.toUpperCase()).join("") || "PA";
 }
 function action(action2, secondary = false) {
-  return `<a class="button${secondary ? " button--secondary" : ""}" href="${safeHref(action2.href)}">${escapeHtml6(action2.label)} <span aria-hidden="true">\u2197</span></a>`;
+  return `<a class="button${secondary ? " button--secondary" : ""}" href="${safeHref(action2.href)}">${escapeHtml7(action2.label)} <span aria-hidden="true">\u2197</span></a>`;
 }
 function section(enabled, html) {
   return enabled ? html : "";
@@ -33740,7 +35444,7 @@ function renderPersonalAuthorityV1(input, config, generatedAt) {
   const flags = config.featureFlags;
   const brand = config.brandName || input.name;
   const generatedAtIso = generatedAt.toISOString();
-  const social = flags.socialLinks && input.socialLinks.length > 0 ? `<nav class="social" aria-label="Professional profiles">${input.socialLinks.map((link) => `<a href="${safeHref(link.href)}">${escapeHtml6(link.label)}</a>`).join("")}</nav>` : "";
+  const social = flags.socialLinks && input.socialLinks.length > 0 ? `<nav class="social" aria-label="Professional profiles">${input.socialLinks.map((link) => `<a href="${safeHref(link.href)}">${escapeHtml7(link.label)}</a>`).join("")}</nav>` : "";
   const navigation = flags.navigation ? `<button class="menu" type="button" aria-expanded="false" aria-controls="nav">Menu</button><nav id="nav" class="nav" aria-label="Primary navigation"><a href="#about">About</a><a href="#services">Work</a><a href="#proof">Proof</a><a href="#contact">Contact</a></nav>` : "";
   const authority = input.authority;
   const consultation = input.consultation;
@@ -33752,32 +35456,144 @@ function renderPersonalAuthorityV1(input, config, generatedAt) {
 <html lang="en" data-theme="${config.theme}">
 <head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<meta name="description" content="${escapeHtml6(input.summary)}"><title>${escapeHtml6(input.name)} \u2014 ${escapeHtml6(input.professionalTitle)}</title>
+<meta name="description" content="${escapeHtml7(input.summary)}"><title>${escapeHtml7(input.name)} \u2014 ${escapeHtml7(input.professionalTitle)}</title>
 <style>
 :root{--blue:#2f66eb;--blue-soft:#dbe6ff;--ink:#050708;--paper:#f7f8fb;--white:#fff;--gray:#9ca5b5;--line:#27303b;--serif:Georgia,'Times New Roman',serif;--sans:Arial,Helvetica,sans-serif}*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:var(--ink);color:var(--white);font-family:var(--sans);line-height:1.55}a{color:inherit}.skip{position:absolute;left:-9999px}.skip:focus{left:16px;top:16px;z-index:9;background:#fff;color:#000;padding:10px}.header{height:88px;display:flex;align-items:center;justify-content:space-between;padding:0 clamp(20px,4vw,72px);border-bottom:1px solid var(--line);position:relative;z-index:3;background:rgba(5,7,8,.96)}.brand{display:flex;align-items:center;gap:12px;text-decoration:none;font-family:var(--serif);font-size:24px}.mark{width:40px;height:40px;border-radius:50%;display:grid;place-items:center;background:var(--blue);font-family:var(--sans);font-weight:700}.nav{display:flex;align-items:center;gap:28px}.nav a{text-decoration:none;color:#c8ced8;font-size:14px}.nav a:hover{color:#fff}.menu{display:none;background:transparent;color:#fff;border:1px solid #5b6471;padding:10px 14px}.hero{display:grid;grid-template-columns:minmax(0,.9fr) minmax(0,1.25fr);min-height:760px;border-bottom:3px solid var(--blue)}.portrait{display:grid;place-items:end center;background:radial-gradient(circle at 50% 38%,#273243 0,#11161d 38%,#060708 70%);overflow:hidden}.portrait-card{width:min(82%,560px);aspect-ratio:4/5;display:grid;place-items:center;align-self:end;border:1px solid #263142;border-bottom:0;background:linear-gradient(145deg,#252d38,#0b0d10 58%);font-family:var(--serif);font-size:clamp(80px,13vw,180px);color:#d9e4ff;text-shadow:0 0 42px rgba(47,102,235,.5)}.hero-copy{padding:clamp(44px,7vw,110px) clamp(24px,6vw,100px);display:flex;flex-direction:column;justify-content:center;background:linear-gradient(135deg,#080a0d,#101318)}h1,h2,h3,p{margin-top:0}.hero h1{font-family:var(--serif);font-size:clamp(58px,8vw,116px);line-height:.92;font-weight:400;color:var(--blue);margin-bottom:24px}.role{font-family:var(--serif);font-size:clamp(28px,3.8vw,52px);line-height:1.05;border-left:5px solid var(--blue);padding-left:22px;max-width:820px}.summary{color:#c6cbd3;font-size:clamp(17px,1.5vw,22px);max-width:760px}.actions{display:flex;gap:12px;flex-wrap:wrap;margin:24px 0}.button{display:inline-flex;align-items:center;justify-content:space-between;gap:28px;min-height:58px;padding:0 26px;background:var(--blue);border:1px solid var(--blue);text-decoration:none;font-weight:700}.button--secondary{background:transparent;border-color:#5c6572}.social{display:flex;gap:10px;flex-wrap:wrap}.social a{border:1px solid #39414d;border-radius:999px;padding:8px 13px;text-decoration:none;color:#d8dce4;font-size:13px}.light{background:var(--paper);color:#111722;padding:clamp(70px,10vw,150px) clamp(20px,6vw,90px)}.light h2,.section h2{font-family:var(--serif);font-size:clamp(42px,6vw,82px);line-height:1.02;font-weight:400;max-width:1080px}.light p{max-width:920px;color:#4e596a;font-size:18px}.section{padding:clamp(70px,9vw,130px) clamp(20px,6vw,90px);border-bottom:1px solid var(--line)}.section-head{max-width:920px;margin-bottom:46px}.eyebrow{text-transform:uppercase;letter-spacing:.18em;font-size:12px;color:#aab2bf}.consult{display:grid;grid-template-columns:1.3fr .7fr;gap:50px;background:linear-gradient(130deg,#060708,#111721)}.accent-card{min-height:360px;border:1px solid #2a3545;background:linear-gradient(145deg,rgba(47,102,235,.22),transparent 55%);display:grid;place-items:center;font-family:var(--serif);font-size:96px;color:var(--blue)}.grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px}.card{border:1px solid #323a46;padding:26px;min-height:220px;background:#0b0e12}.card h3{font-family:var(--serif);font-size:30px}.card p{color:#b9c0ca}.learning{background:#020303}.topic-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1px;background:#29313c;border:1px solid #29313c}.topic{background:#050708;padding:30px}.topic strong{display:block;color:var(--blue);text-transform:uppercase;font-size:11px;letter-spacing:.15em}.topic h3{font-family:var(--serif);font-size:30px;margin:8px 0}.topic p{color:#aeb6c1}.proof{background:linear-gradient(180deg,#0a0d11,#050607)}.quotes{display:flex;gap:14px;overflow:auto;scroll-snap-type:x mandatory;padding-bottom:12px}.quote{min-width:min(420px,86vw);scroll-snap-align:start;border:1px solid #343d49;padding:30px;background:#0c1015}.quote q{font-family:var(--serif);font-size:30px;line-height:1.25}.quote span{display:block;margin-top:24px;color:#aeb5c0;font-size:12px;text-transform:uppercase;letter-spacing:.12em}.cta{text-align:center;border-top:3px solid var(--blue);background:radial-gradient(circle at 50% 0,rgba(47,102,235,.25),transparent 50%)}.cta h2{margin-left:auto;margin-right:auto}.footer{display:grid;grid-template-columns:1fr auto;gap:40px;padding:46px clamp(20px,6vw,90px);color:#abb3bf}.footer strong{color:#fff;font-family:var(--serif);font-size:26px}.generated{font-size:11px;color:#737d8b;margin-top:10px}html[data-theme='slate']{--blue:#7f95b8;--blue-soft:#dfe6ef}html[data-theme='monochrome']{--blue:#fff;--blue-soft:#e7e7e7}.sr-only{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0,0,0,0)}
 @media(max-width:760px){.header{height:78px}.menu{display:block}.nav{display:none;position:absolute;left:0;right:0;top:77px;padding:18px 20px;background:#090b0e;border-bottom:1px solid #303844;flex-direction:column;align-items:stretch}.nav.open{display:flex}.hero{grid-template-columns:1fr;min-height:0}.portrait{min-height:390px}.portrait-card{width:72%;max-height:360px}.hero-copy{padding:48px 20px 66px}.hero h1{font-size:64px}.role{font-size:34px}.actions{display:grid}.button{width:100%}.consult{grid-template-columns:1fr}.accent-card{min-height:220px}.grid,.topic-grid{grid-template-columns:1fr}.light,.section{padding:64px 20px}.light h2,.section h2{font-size:46px}.footer{grid-template-columns:1fr}}
 </style></head>
 <body><a class="skip" href="#main">Skip to main content</a>
-<header class="header"><a class="brand" href="#top"><span class="mark">${escapeHtml6(initials(input.name).slice(0, 1))}</span><strong>${escapeHtml6(brand)}</strong></a>${navigation}</header>
-<main id="main"><section class="hero" id="top"><div class="portrait" aria-label="Portrait placeholder"><div class="portrait-card" aria-hidden="true">${escapeHtml6(initials(input.name))}</div></div><div class="hero-copy"><h1>${escapeHtml6(input.name)}</h1><p class="role">${escapeHtml6(input.professionalTitle)}</p><p class="summary">${escapeHtml6(input.summary)}</p><div class="actions">${action(input.primaryAction)}${input.secondaryAction ? action(input.secondaryAction, true) : ""}</div>${social}</div></section>
-${section(flags.authority && Boolean(authority), `<section class="light" id="about"><h2>${escapeHtml6(authority?.heading ?? "")}</h2>${authority?.paragraphs.map((paragraph) => `<p>${escapeHtml6(paragraph)}</p>`).join("") ?? ""}</section>`)}
-${section(flags.consultation && Boolean(consultation), `<section class="section consult"><div><p class="eyebrow">${escapeHtml6(consultation?.eyebrow ?? "Start a conversation")}</p><h2>${escapeHtml6(consultation?.heading ?? "")}</h2><p class="summary">${escapeHtml6(consultation?.summary ?? "")}</p>${consultation ? action(consultation.action) : ""}</div><div class="accent-card" aria-label="Image placeholder">${escapeHtml6(initials(input.name))}</div></section>`)}
-${section(flags.learning && Boolean(learning), `<section class="section learning"><div class="section-head"><h2>${escapeHtml6(learning?.heading ?? "")}</h2><p class="summary">${escapeHtml6(learning?.summary ?? "")}</p></div><div class="topic-grid">${learning?.topics.map((topic) => `<article class="topic"><strong>${escapeHtml6(topic.title)}</strong><h3>${escapeHtml6(topic.headline)}</h3><p>${escapeHtml6(topic.summary)}</p>${topic.href ? `<a href="${safeHref(topic.href)}">Explore \u2192</a>` : ""}</article>`).join("") ?? ""}</div></section>`)}
-${section(flags.services && Boolean(services), `<section class="section" id="services"><div class="section-head"><h2>${escapeHtml6(services?.heading ?? "")}</h2><p class="summary">${escapeHtml6(services?.summary ?? "")}</p></div><div class="grid">${services?.offers.map((offer) => `<article class="card"><h3>${escapeHtml6(offer.title)}</h3><p>${escapeHtml6(offer.description)}</p>${offer.action ? action(offer.action, true) : ""}</article>`).join("") ?? ""}</div></section>`)}
-${section(flags.proof && Boolean(proof), `<section class="section proof" id="proof"><div class="section-head"><h2>${escapeHtml6(proof?.heading ?? "")}</h2><p class="summary">${escapeHtml6(proof?.summary ?? "")}</p></div><div class="quotes">${proof?.testimonials.map((item) => `<article class="quote"><q>${escapeHtml6(item.quote)}</q><span>${escapeHtml6(item.person)}${item.role ? ` / ${escapeHtml6(item.role)}` : ""}</span></article>`).join("") ?? ""}</div></section>`)}
-${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id="contact"><p class="eyebrow">${escapeHtml6(finalCta?.eyebrow ?? "Ready when you are")}</p><h2>${escapeHtml6(finalCta?.heading ?? "")}</h2><p class="summary">${escapeHtml6(finalCta?.summary ?? "")}</p>${finalCta ? action(finalCta.action) : ""}</section>`)}
-</main><footer class="footer"><div><strong>${escapeHtml6(input.name)}</strong><div>${escapeHtml6(input.professionalTitle)}</div>${config.showGeneratedAt ? `<div class="generated">Generated ${escapeHtml6(generatedAtIso)}</div>` : ""}</div><div>${input.location ? `<div>${escapeHtml6(input.location)}</div>` : ""}${input.email ? `<a href="mailto:${escapeHtml6(input.email)}">${escapeHtml6(input.email)}</a>` : ""}${input.phone ? `<div>${escapeHtml6(input.phone)}</div>` : ""}</div></footer>
+<header class="header"><a class="brand" href="#top"><span class="mark">${escapeHtml7(initials(input.name).slice(0, 1))}</span><strong>${escapeHtml7(brand)}</strong></a>${navigation}</header>
+<main id="main"><section class="hero" id="top"><div class="portrait" aria-label="Portrait placeholder"><div class="portrait-card" aria-hidden="true">${escapeHtml7(initials(input.name))}</div></div><div class="hero-copy"><h1>${escapeHtml7(input.name)}</h1><p class="role">${escapeHtml7(input.professionalTitle)}</p><p class="summary">${escapeHtml7(input.summary)}</p><div class="actions">${action(input.primaryAction)}${input.secondaryAction ? action(input.secondaryAction, true) : ""}</div>${social}</div></section>
+${section(flags.authority && Boolean(authority), `<section class="light" id="about"><h2>${escapeHtml7(authority?.heading ?? "")}</h2>${authority?.paragraphs.map((paragraph) => `<p>${escapeHtml7(paragraph)}</p>`).join("") ?? ""}</section>`)}
+${section(flags.consultation && Boolean(consultation), `<section class="section consult"><div><p class="eyebrow">${escapeHtml7(consultation?.eyebrow ?? "Start a conversation")}</p><h2>${escapeHtml7(consultation?.heading ?? "")}</h2><p class="summary">${escapeHtml7(consultation?.summary ?? "")}</p>${consultation ? action(consultation.action) : ""}</div><div class="accent-card" aria-label="Image placeholder">${escapeHtml7(initials(input.name))}</div></section>`)}
+${section(flags.learning && Boolean(learning), `<section class="section learning"><div class="section-head"><h2>${escapeHtml7(learning?.heading ?? "")}</h2><p class="summary">${escapeHtml7(learning?.summary ?? "")}</p></div><div class="topic-grid">${learning?.topics.map((topic) => `<article class="topic"><strong>${escapeHtml7(topic.title)}</strong><h3>${escapeHtml7(topic.headline)}</h3><p>${escapeHtml7(topic.summary)}</p>${topic.href ? `<a href="${safeHref(topic.href)}">Explore \u2192</a>` : ""}</article>`).join("") ?? ""}</div></section>`)}
+${section(flags.services && Boolean(services), `<section class="section" id="services"><div class="section-head"><h2>${escapeHtml7(services?.heading ?? "")}</h2><p class="summary">${escapeHtml7(services?.summary ?? "")}</p></div><div class="grid">${services?.offers.map((offer) => `<article class="card"><h3>${escapeHtml7(offer.title)}</h3><p>${escapeHtml7(offer.description)}</p>${offer.action ? action(offer.action, true) : ""}</article>`).join("") ?? ""}</div></section>`)}
+${section(flags.proof && Boolean(proof), `<section class="section proof" id="proof"><div class="section-head"><h2>${escapeHtml7(proof?.heading ?? "")}</h2><p class="summary">${escapeHtml7(proof?.summary ?? "")}</p></div><div class="quotes">${proof?.testimonials.map((item) => `<article class="quote"><q>${escapeHtml7(item.quote)}</q><span>${escapeHtml7(item.person)}${item.role ? ` / ${escapeHtml7(item.role)}` : ""}</span></article>`).join("") ?? ""}</div></section>`)}
+${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id="contact"><p class="eyebrow">${escapeHtml7(finalCta?.eyebrow ?? "Ready when you are")}</p><h2>${escapeHtml7(finalCta?.heading ?? "")}</h2><p class="summary">${escapeHtml7(finalCta?.summary ?? "")}</p>${finalCta ? action(finalCta.action) : ""}</section>`)}
+</main><footer class="footer"><div><strong>${escapeHtml7(input.name)}</strong><div>${escapeHtml7(input.professionalTitle)}</div>${config.showGeneratedAt ? `<div class="generated">Generated ${escapeHtml7(generatedAtIso)}</div>` : ""}</div><div>${input.location ? `<div>${escapeHtml7(input.location)}</div>` : ""}${input.email ? `<a href="mailto:${escapeHtml7(input.email)}">${escapeHtml7(input.email)}</a>` : ""}${input.phone ? `<div>${escapeHtml7(input.phone)}</div>` : ""}</div></footer>
 <script>document.querySelector('.menu')?.addEventListener('click',function(){var nav=document.querySelector('.nav');var open=this.getAttribute('aria-expanded')!=='true';this.setAttribute('aria-expanded',String(open));nav?.classList.toggle('open',open)});document.querySelectorAll('.nav a').forEach(function(link){link.addEventListener('click',function(){document.querySelector('.nav')?.classList.remove('open');document.querySelector('.menu')?.setAttribute('aria-expanded','false')})});</script></body></html>`;
   const bytes = Buffer.byteLength(html, "utf8");
   return {
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: createHash16("sha256").update(html).digest("hex"),
+    sha256: createHash18("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
 
+// src/newsroom-publisher/render.ts
+import { createHash as createHash19 } from "crypto";
+function escapeHtml8(value) {
+  return value.replace(/[&<>"']/g, (character) => ({
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;"
+  })[character] ?? character);
+}
+function safeHref2(value) {
+  const trimmed = value.trim();
+  return /^(?:https?:|mailto:|tel:|#|\/)/i.test(trimmed) ? escapeHtml8(trimmed) : "#";
+}
+function formatDate(value) {
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? escapeHtml8(value) : new Intl.DateTimeFormat("en", { month: "short", day: "numeric", year: "numeric" }).format(date);
+}
+function initials2(value) {
+  return value.split(/\s+/).filter(Boolean).slice(0, 2).map((part) => part[0]).join("").toUpperCase();
+}
+function storyMedia(story, className = "") {
+  if (story.imageUrl) {
+    return `<div class="story-media ${className}"><img src="${safeHref2(story.imageUrl)}" alt="${escapeHtml8(story.imageAlt || story.title)}" loading="lazy"></div>`;
+  }
+  const tone = [...story.title].reduce((total, character) => total + character.charCodeAt(0), 0) % 5;
+  return `<div class="story-media story-media--placeholder story-media--tone-${tone} ${className}" role="img" aria-label="Editorial image placeholder for ${escapeHtml8(story.title)}"><i></i><b></b><span>${escapeHtml8(story.category)}</span></div>`;
+}
+function byline(story, showBylines) {
+  const author = story.author.href ? `<a href="${safeHref2(story.author.href)}">${escapeHtml8(story.author.name)}</a>` : escapeHtml8(story.author.name);
+  return `<div class="byline">${showBylines ? `<span>By ${author}</span>` : ""}<time datetime="${escapeHtml8(story.publishedAt)}">${formatDate(story.publishedAt)}</time>${story.sponsored ? "<b>Sponsored</b>" : ""}</div>`;
+}
+function storyCard(story, showBylines, variant = "") {
+  return `<article class="story-card ${variant}">
+    <a class="story-card__media" href="${safeHref2(story.href)}">${storyMedia(story)}</a>
+    <div class="story-card__body"><a class="kicker" href="${safeHref2(story.href)}">${escapeHtml8(story.category)}</a><h3><a href="${safeHref2(story.href)}">${escapeHtml8(story.title)}</a></h3>${story.dek ? `<p>${escapeHtml8(story.dek)}</p>` : ""}${byline(story, showBylines)}</div>
+  </article>`;
+}
+function renderNewsroomPublisherV1(input, config, generatedAt) {
+  const flags = config.featureFlags;
+  const generatedAtIso = generatedAt.toISOString();
+  const brand = config.brandName || input.publication.name;
+  const [lead, ...supporting] = input.featured;
+  const primaryPages = [
+    { label: "Home", href: input.publication.url },
+    input.primaryPages.about,
+    input.primaryPages.editor,
+    input.primaryPages.press,
+    input.primaryPages.news,
+    input.primaryPages.contact
+  ];
+  const trustPages = Object.values(input.trustPages);
+  const ticker = flags.breakingTicker && input.ticker ? `<div class="ticker"><div><b>${escapeHtml8(input.ticker.label)}</b><a href="${safeHref2(input.ticker.href || "#latest")}">${escapeHtml8(input.ticker.headline)}</a><span>${formatDate(generatedAtIso)}</span></div></div>` : "";
+  const masthead = `<nav class="utility-nav" aria-label="Publication pages"><div><span>${escapeHtml8(input.publication.location || "Independent newsroom")}</span>${primaryPages.slice(1).map((link) => `<a href="${safeHref2(link.href)}">${escapeHtml8(link.label)}</a>`).join("")}</div></nav><header class="masthead">
+    <a class="wordmark" href="${safeHref2(input.publication.url)}"><span>${escapeHtml8(brand)}</span><small>${escapeHtml8(input.publication.tagline)}</small></a>
+    <div class="masthead__date"><span>Independent journalism</span><time datetime="${generatedAtIso}">${formatDate(generatedAtIso)}</time></div>
+    <div class="masthead__tools"><button type="button" aria-label="Search">Search</button><button type="button" aria-label="Open menu">Menu</button></div>
+  </header>`;
+  const navigation = flags.navigation ? `<nav class="desk-nav" aria-label="Publication categories"><div><a class="desk-nav__home" href="#top">Home</a>${input.categories.map((category) => `<a href="${safeHref2(category.href)}">${escapeHtml8(category.label)}</a>`).join("")}<a class="desk-nav__latest" href="#latest">Latest</a></div></nav>` : "";
+  const leadGrid = flags.leadGrid ? `<section class="lead-grid" aria-label="Top stories">
+    <div class="lead-grid__label"><span>Today\u2019s edition</span><b>Top stories</b></div>
+    <article class="lead-story"><a class="lead-story__media" href="${safeHref2(lead.href)}">${storyMedia(lead, "story-media--lead")}</a><div class="lead-story__body"><a class="kicker" href="${safeHref2(lead.href)}">${escapeHtml8(lead.category)}</a><h1><a href="${safeHref2(lead.href)}">${escapeHtml8(lead.title)}</a></h1>${lead.dek ? `<p>${escapeHtml8(lead.dek)}</p>` : ""}${byline(lead, config.showBylines)}<a class="read-story" href="${safeHref2(lead.href)}">Read the full report <span>\u2197</span></a></div></article>
+    <div class="lead-support">${supporting.slice(0, 4).map((story, index) => `<div class="lead-support__item"><span>${String(index + 1).padStart(2, "0")}</span>${storyCard(story, config.showBylines, "story-card--support")}</div>`).join("")}</div>
+  </section>` : "";
+  const latest = flags.latestNews && input.latest.length > 0 ? `<section class="latest" id="latest">
+    <div class="section-title"><div><span>Live desk</span><h2>Latest news</h2></div><a href="#top">Back to top \u2191</a></div>
+    <div class="latest__layout"><div class="latest__feed">${input.latest.map((story, index) => `<article class="feed-story"><span>${String(index + 1).padStart(2, "0")}</span><div><a class="kicker" href="${safeHref2(story.href)}">${escapeHtml8(story.category)}</a><h3><a href="${safeHref2(story.href)}">${escapeHtml8(story.title)}</a></h3>${story.dek ? `<p>${escapeHtml8(story.dek)}</p>` : ""}${byline(story, config.showBylines)}</div>${storyMedia(story, "story-media--feed")}</article>`).join("")}</div>
+    <aside class="editor-note"><span>From the newsroom</span><h3>Reporting with context, sources, and accountable bylines.</h3><p>${escapeHtml8(input.editorial.disclosure)}</p>${trustPages.slice(0, 4).map((link) => `<a href="${safeHref2(link.href)}">${escapeHtml8(link.label)} \u2197</a>`).join("")}</aside></div>
+  </section>` : "";
+  const sectionLayouts = ["panorama", "mosaic", "tiles"];
+  const sections = flags.categorySections ? input.sections.map((section2, sectionIndex) => {
+    const layout = sectionLayouts[sectionIndex % sectionLayouts.length];
+    const cards = section2.stories.map((story, index) => storyCard(
+      story,
+      config.showBylines,
+      layout === "panorama" && index === 0 ? "story-card--panorama" : layout === "mosaic" && index === 0 ? "story-card--mosaic-lead" : ""
+    )).join("");
+    return `<section class="desk-section desk-section--${sectionIndex % 2 ? "tint" : "plain"} desk-section--layout-${layout}">
+      <div class="section-title"><div><span>Coverage desk \xB7 ${String(sectionIndex + 1).padStart(2, "0")}</span><h2>${escapeHtml8(section2.name)}</h2></div>${section2.href ? `<a href="${safeHref2(section2.href)}">View all ${escapeHtml8(section2.name)} \u2192</a>` : ""}</div>
+      <div class="desk-section__grid desk-section__grid--${layout}">${cards}</div>
+    </section>`;
+  }).join("") : "";
+  const newsletter = flags.newsletter && input.newsletter ? `<section class="newsletter"><div><span>${escapeHtml8(input.newsletter.eyebrow || "Reader briefing")}</span><h2>${escapeHtml8(input.newsletter.heading)}</h2><p>${escapeHtml8(input.newsletter.summary)}</p></div><a href="${safeHref2(input.newsletter.action.href)}">${escapeHtml8(input.newsletter.action.label)} \u2192</a></section>` : "";
+  const pressRoom = flags.pressRoom && input.pressRoom ? `<section class="press-room" id="press-room"><div class="press-room__intro"><span>Separate from editorial coverage</span><h2>${escapeHtml8(input.pressRoom.heading)}</h2><p>${escapeHtml8(input.pressRoom.summary)}</p><a href="${safeHref2(input.pressRoom.action.href)}">${escapeHtml8(input.pressRoom.action.label)} \u2192</a></div><div class="release-list">${input.pressRoom.releases.map((release) => `<article><time datetime="${escapeHtml8(release.publishedAt)}">${formatDate(release.publishedAt)}</time><span>${escapeHtml8(release.originatingCity)}</span><h3><a href="${safeHref2(release.href)}">${escapeHtml8(release.headline)}</a></h3></article>`).join("") || "<p>No releases are currently published.</p>"}</div></section>` : "";
+  const trustCenter = `<section class="trust-center" id="trust"><div class="trust-center__intro"><span>Public record</span><h2>How this newsroom works.</h2><p>Ownership, editorial practice, technology use, commercial relationships, and reader rights should be easy to find\u2014and written to be understood.</p></div><div class="trust-center__grid">${trustPages.map((link, index) => `<a href="${safeHref2(link.href)}"><span>${String(index + 1).padStart(2, "0")}</span><strong>${escapeHtml8(link.label)}</strong><small>Read \u2192</small></a>`).join("")}</div></section>`;
+  const trustFooter = flags.trustFooter ? `<footer class="site-footer"><div class="editor"><span class="editor__avatar">${escapeHtml8(initials2(input.editorial.managingEditor.name))}</span><div><small>${escapeHtml8(input.editorial.managingEditor.role)}</small><h2>${input.editorial.managingEditor.href ? `<a href="${safeHref2(input.editorial.managingEditor.href)}">${escapeHtml8(input.editorial.managingEditor.name)}</a>` : escapeHtml8(input.editorial.managingEditor.name)}</h2><p>${escapeHtml8(input.editorial.managingEditor.bio)}</p></div></div><div class="footer-links"><h3>${escapeHtml8(brand)}</h3><p>${escapeHtml8(input.publication.tagline)}</p><nav>${primaryPages.map((link) => `<a href="${safeHref2(link.href)}">${escapeHtml8(link.label)}</a>`).join("")}</nav>${config.showGeneratedAt ? `<time datetime="${generatedAtIso}">Updated ${formatDate(generatedAtIso)}</time>` : ""}</div></footer>` : "";
+  const html = `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex,nofollow"><title>${escapeHtml8(brand)} \xB7 News Publisher</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Archivo:wdth,wght@75..125,300..900&family=Instrument+Serif:ital@0;1&family=JetBrains+Mono:wght@400;600&display=swap" rel="stylesheet">
+<style>
+:root{--ink:#0b0b0c;--soft-ink:#222326;--muted:#696b70;--paper:#fff;--cream:#f4f0e8;--wash:#f5f5f3;--line:#d8d8d4;--signal:#275cf3;--acid:#d9ff43;--dark:#0b0b0c;--serif:"Instrument Serif",Georgia,serif;--sans:"Archivo",Arial,sans-serif;--mono:"JetBrains Mono",monospace;font-family:var(--sans);color:var(--ink);background:var(--paper)}*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:var(--paper);line-height:1.45}body[data-theme=journal]{--cream:#eee7da;--signal:#9d2d25;--acid:#f0c84f}body[data-theme=midnight]{--paper:#e8e9ec;--cream:#dfe1e6;--wash:#d8dae0;--line:#b9bdc6;--signal:#224bcc}a{color:inherit;text-decoration:none}a,button{transition:color .18s ease,background .18s ease,opacity .18s ease,transform .18s ease}button{font:inherit}.utility-nav{color:#d2d2d2;background:var(--dark);border-bottom:1px solid #292929}.utility-nav>div{max-width:1180px;height:35px;margin:auto;display:flex;align-items:center;justify-content:flex-end;gap:20px;padding:0 18px;overflow:auto}.utility-nav span{margin-right:auto;color:#8d8d8d}.utility-nav a,.utility-nav span{font:600 8px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase;white-space:nowrap}.utility-nav a:hover{color:#fff}.ticker{color:var(--ink);background:var(--acid);padding:0 18px}.ticker>div{max-width:1180px;height:36px;margin:auto;display:flex;align-items:center;gap:16px;font:600 10px/1 var(--mono)}.ticker b{padding:5px 7px;color:#fff;background:var(--ink);font-size:8px;letter-spacing:.1em;text-transform:uppercase}.ticker a{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.ticker a:hover{text-decoration:underline}.ticker span{margin-left:auto;opacity:.58;font-size:8px;text-transform:uppercase}.masthead{max-width:1180px;height:126px;margin:auto;display:grid;grid-template-columns:minmax(0,1fr) auto auto;align-items:center;gap:42px;padding:0 18px}.wordmark{display:grid;justify-self:start}.wordmark span{font:400 clamp(40px,5vw,68px)/.82 var(--serif);letter-spacing:-.055em}.wordmark small{max-width:430px;margin-top:11px;color:var(--muted);font:600 8px/1 var(--mono);letter-spacing:.1em;text-transform:uppercase}.masthead__date{display:grid;gap:3px;text-align:right}.masthead__date span,.masthead__date time{font:600 8px/1.4 var(--mono);letter-spacing:.08em;text-transform:uppercase}.masthead__date span{color:var(--signal)}.masthead__date time{color:var(--muted)}.masthead__tools{display:flex;border:1px solid var(--ink)}.masthead__tools button{height:38px;padding:0 13px;border:0;background:transparent;font:700 9px/1 var(--mono);text-transform:uppercase;cursor:pointer}.masthead__tools button+button{border-left:1px solid var(--ink)}.masthead__tools button:hover{color:#fff;background:var(--ink)}.desk-nav{position:sticky;top:0;z-index:20;color:var(--ink);background:rgba(255,255,255,.96);border-top:1px solid var(--ink);border-bottom:1px solid var(--ink);backdrop-filter:blur(10px)}.desk-nav>div{max-width:1180px;height:43px;margin:auto;display:flex;align-items:center;overflow-x:auto;padding:0 18px}.desk-nav a{height:42px;display:grid;place-items:center;padding:0 17px;border-right:1px solid var(--line);font:650 9px/1 var(--mono);letter-spacing:.04em;text-transform:uppercase;white-space:nowrap}.desk-nav a:first-child{border-left:1px solid var(--line)}.desk-nav a:hover,.desk-nav__home{color:#fff!important;background:var(--ink)}.desk-nav__latest{margin-left:auto;color:var(--signal);border-left:1px solid var(--line)}main{max-width:1180px;margin:auto;padding:30px 18px 90px}.lead-grid{margin:0 -18px;padding:0 18px 42px;color:#fff;background:var(--dark);border-bottom:1px solid var(--ink)}.lead-grid__label{height:50px;display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid #303030}.lead-grid__label span,.lead-grid__label b{font:600 8px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase}.lead-grid__label span{color:var(--acid)}.lead-grid__label b{color:#8f8f8f}.lead-story{display:grid;grid-template-columns:minmax(0,1.28fr) minmax(340px,.72fr);min-height:500px;border-bottom:1px solid #303030}.lead-story__media{display:block;margin-left:calc((1180px - 100vw)/2);min-width:0}.story-media{position:relative;aspect-ratio:16/10;overflow:hidden;background:#e2e2df}.story-media img{width:100%;height:100%;display:block;object-fit:cover;filter:saturate(.88) contrast(1.03);transition:transform .55s cubic-bezier(.2,.7,.2,1)}a:hover .story-media img{transform:scale(1.025)}.story-media--lead{height:100%;min-height:500px;aspect-ratio:auto}.story-media--placeholder{isolation:isolate;display:block;background:#d9d7d1}.story-media--placeholder:after{position:absolute;z-index:1;inset:0;background:linear-gradient(145deg,transparent 35%,rgba(0,0,0,.14));content:""}.story-media--placeholder i,.story-media--placeholder b{position:absolute;display:block}.story-media--placeholder i{width:72%;aspect-ratio:1;right:-20%;top:-32%;border:clamp(22px,5vw,72px) solid currentColor;border-radius:50%;opacity:.78}.story-media--placeholder b{width:42%;height:115%;left:15%;bottom:-45%;background:currentColor;transform:rotate(32deg);opacity:.88}.story-media--placeholder span{position:absolute;z-index:2;left:18px;bottom:15px;padding:6px 8px;color:#fff;background:var(--ink);font:600 8px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase}.story-media--tone-0{color:#123fce;background:#a5c8ff}.story-media--tone-1{color:#ef4d25;background:#ffd9bd}.story-media--tone-2{color:#907000;background:#f3df36}.story-media--tone-3{color:#1a7857;background:#b8e8cc}.story-media--tone-4{color:#7d3de0;background:#dfc5ff}.lead-story__body{display:flex;flex-direction:column;justify-content:center;padding:45px 0 45px 40px}.kicker{display:inline-flex;width:max-content;color:var(--signal);font:700 8px/1 var(--mono);letter-spacing:.11em;text-transform:uppercase}.lead-grid .kicker{color:var(--acid)}.lead-story h1{max-width:540px;margin:13px 0 18px;font:400 clamp(48px,5vw,76px)/.92 var(--serif);letter-spacing:-.052em}.lead-story p{max-width:490px;margin:0;color:#bdbdbd;font-size:15px;line-height:1.55}.byline{display:flex;align-items:center;gap:10px;flex-wrap:wrap;margin-top:16px;color:var(--muted);font:600 8px/1.4 var(--mono);letter-spacing:.05em;text-transform:uppercase}.byline span{color:var(--ink);font-weight:700}.lead-grid .byline{color:#848484}.lead-grid .byline span{color:#e7e7e7}.byline b{padding:4px 6px;color:var(--ink);background:var(--acid)}.read-story{width:max-content;margin-top:34px;padding-bottom:6px;border-bottom:1px solid #777;font:650 10px/1 var(--mono);text-transform:uppercase}.read-story span{color:var(--acid)}.read-story:hover{border-color:#fff}.lead-support{display:grid;grid-template-columns:repeat(4,1fr);gap:0}.lead-support__item{display:grid;grid-template-columns:25px minmax(0,1fr);gap:12px;padding:22px 18px 0 0;border-right:1px solid #303030}.lead-support__item+.lead-support__item{padding-left:18px}.lead-support__item:last-child{border-right:0}.lead-support__item>span{color:#666;font:600 9px/1 var(--mono)}.story-card{min-width:0}.story-card h3{margin:7px 0;font:400 26px/1.02 var(--serif);letter-spacing:-.025em}.story-card p{margin:9px 0;color:var(--muted);font-size:12px}.story-card__body{padding-top:11px}.story-card--support .story-card__media{display:none}.story-card--support .story-card__body{padding:0}.story-card--support h3{margin-top:8px;color:#fff;font-size:21px}.story-card--support p,.story-card--support .byline span{display:none}.story-card--support .byline{color:#777}.section-title{display:flex;align-items:end;justify-content:space-between;gap:30px;margin-bottom:24px;padding-bottom:11px;border-bottom:2px solid var(--ink)}.section-title span,.newsletter span,.press-room__intro>span,.trust-center__intro>span{display:block;color:var(--signal);font:700 8px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase}.section-title h2,.newsletter h2,.press-room h2,.trust-center h2,.site-footer h2{margin:7px 0 0;font:400 clamp(38px,5vw,58px)/.95 var(--serif);letter-spacing:-.04em}.section-title>a{padding-bottom:4px;border-bottom:1px solid var(--ink);font:650 9px/1 var(--mono);text-transform:uppercase}.latest{padding:64px 0}.latest__layout{display:grid;grid-template-columns:minmax(0,1fr) 300px;gap:55px}.latest__feed{border-top:1px solid var(--ink)}.feed-story{display:grid;grid-template-columns:34px minmax(0,1fr) 180px;gap:18px;align-items:start;padding:19px 0;border-bottom:1px solid var(--line)}.feed-story>span{color:#a0a0a0;font:600 9px/1 var(--mono)}.feed-story h3{margin:7px 0;font:400 29px/1.02 var(--serif);letter-spacing:-.025em}.feed-story p{margin:8px 0;color:var(--muted);font-size:12px}.story-media--feed{aspect-ratio:4/3}.editor-note{position:sticky;top:68px;align-self:start;padding:25px;color:#fff;background:var(--dark);border-top:5px solid var(--acid)}.editor-note>span{color:var(--acid);font:600 8px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase}.editor-note h3{margin:13px 0;font:400 31px/.98 var(--serif)}.editor-note p{color:#aaa;font-size:12px}.editor-note a{display:block;padding:11px 0;border-top:1px solid #333;font:600 9px/1 var(--mono);text-transform:uppercase}.editor-note a:hover{color:var(--acid)}.desk-section{margin:0 -18px;padding:58px 18px;border-top:1px solid var(--ink)}.desk-section--tint{background:var(--cream)}.desk-section__grid{display:grid;grid-template-columns:repeat(4,1fr);gap:26px 14px}.story-card--wide{grid-column:span 2;grid-row:span 2}.story-card--wide h3{max-width:530px;font-size:40px}.story-card--wide p{max-width:540px;font-size:13px}.desk-section__grid>.story-card:not(.story-card--wide) .story-media{aspect-ratio:1}.newsletter{position:relative;margin:64px 0;display:grid;grid-template-columns:1fr auto;align-items:end;gap:50px;overflow:hidden;padding:clamp(38px,6vw,72px);color:var(--ink);background:var(--acid)}.newsletter:after{position:absolute;width:260px;height:260px;right:18%;top:-160px;border:55px solid var(--ink);border-radius:50%;content:"";opacity:.08}.newsletter span{color:var(--ink)}.newsletter h2{max-width:760px;font-size:clamp(44px,6vw,72px)}.newsletter p{max-width:680px;margin-bottom:0;color:#303030}.newsletter>a,.press-room__intro>a{position:relative;z-index:1;display:inline-flex;padding:14px 18px;color:#fff;background:var(--ink);border:1px solid var(--ink);font:700 9px/1 var(--mono);text-transform:uppercase}.newsletter>a:hover,.press-room__intro>a:hover{color:var(--ink);background:transparent}.press-room{display:grid;grid-template-columns:.7fr 1.3fr;gap:56px;padding:62px 0;border-top:6px solid var(--ink)}.press-room__intro p{max-width:390px;color:var(--muted)}.release-list{border-top:1px solid var(--ink)}.release-list article{display:grid;grid-template-columns:105px 105px 1fr;gap:15px;align-items:start;padding:20px 0;border-bottom:1px solid var(--line)}.release-list time,.release-list span{color:var(--muted);font:500 8px/1.4 var(--mono);text-transform:uppercase}.release-list h3{margin:0;font:400 22px/1.04 var(--serif)}.trust-center{margin:20px -18px -90px;padding:70px max(18px,calc((100vw - 1144px)/2)) 82px;color:#fff;background:var(--dark)}.trust-center__intro{max-width:810px;margin-bottom:38px}.trust-center__intro>span{color:var(--acid)}.trust-center__intro p{max-width:670px;color:#aaa}.trust-center__grid{display:grid;grid-template-columns:repeat(2,1fr);border-top:1px solid #444}.trust-center__grid a{display:grid;grid-template-columns:32px minmax(0,1fr) auto;align-items:center;gap:15px;min-height:70px;padding:0 18px 0 0;border-bottom:1px solid #333}.trust-center__grid a:nth-child(odd){margin-right:28px}.trust-center__grid a:hover{color:var(--acid)}.trust-center__grid span,.trust-center__grid small{color:#696969;font:600 8px/1 var(--mono)}.trust-center__grid strong{font:400 20px/1 var(--serif)}.site-footer{display:grid;grid-template-columns:1.15fr .85fr;gap:80px;padding:70px max(24px,calc((100vw - 1144px)/2));color:var(--ink);background:var(--cream);border-top:1px solid var(--ink)}.editor{display:grid;grid-template-columns:78px 1fr;gap:22px}.editor__avatar{width:78px;height:78px;display:grid;place-items:center;color:#fff;background:var(--signal);font:400 27px/1 var(--serif)}.editor small{color:var(--signal);font:700 8px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase}.editor h2{font-size:38px}.editor p,.footer-links p{max-width:620px;color:var(--muted)}.footer-links h3{margin-top:0;font:400 29px/1 var(--serif)}.footer-links nav{display:grid;grid-template-columns:1fr 1fr;border-top:1px solid var(--ink)}.footer-links nav a{padding:9px 0;border-bottom:1px solid var(--line);font:600 8px/1 var(--mono);text-transform:uppercase}.footer-links time{display:block;margin-top:24px;color:var(--muted);font:500 8px/1 var(--mono)}@media(max-width:900px){.masthead{grid-template-columns:1fr auto;height:110px}.masthead__date{display:none}.lead-story{grid-template-columns:1fr}.lead-story__media{margin:0}.lead-story__body{padding:35px 0}.lead-support{grid-template-columns:1fr 1fr}.lead-support__item:nth-child(2){border-right:0}.lead-support__item:nth-child(n+3){border-top:1px solid #303030}.latest__layout,.press-room,.site-footer{grid-template-columns:1fr}.editor-note{position:static}.desk-section__grid{grid-template-columns:1fr 1fr}.story-card--wide{grid-column:1/-1}.site-footer{gap:40px}.feed-story{grid-template-columns:30px 1fr 150px}}@media(max-width:620px){.utility-nav span,.utility-nav a:nth-of-type(-n+2),.ticker span{display:none}.ticker>div{height:34px}.masthead{height:92px;gap:14px}.wordmark span{font-size:38px}.wordmark small{max-width:220px;font-size:6px}.masthead__tools button:first-child{display:none}.desk-nav>div{padding:0}.desk-nav a{padding:0 13px}.lead-grid{padding-bottom:20px}.lead-grid__label{height:40px}.story-media--lead{min-height:320px}.lead-story{min-height:0}.lead-story h1{font-size:48px}.lead-story__body{padding:27px 0 34px}.lead-support{grid-template-columns:1fr}.lead-support__item,.lead-support__item+.lead-support__item{padding:17px 0;border-right:0;border-top:1px solid #303030}.story-card--support h3{font-size:24px}.section-title{align-items:start}.section-title>a{display:none}.latest{padding:48px 0}.feed-story{grid-template-columns:25px 1fr}.story-media--feed{grid-column:2}.feed-story h3{font-size:26px}.desk-section__grid{grid-template-columns:1fr}.story-card--wide{grid-column:auto;grid-row:auto}.story-card--wide h3{font-size:34px}.newsletter{grid-template-columns:1fr}.newsletter h2{font-size:48px}.release-list article{grid-template-columns:1fr}.trust-center__grid{grid-template-columns:1fr}.trust-center__grid a:nth-child(odd){margin-right:0}.site-footer{padding:50px 20px}.editor{grid-template-columns:1fr}.footer-links nav{grid-template-columns:1fr}}
+/* Tampa-inspired publication palette */
+:root{--ink:#12312f;--soft-ink:#294744;--muted:#697b77;--paper:#fffdf8;--cream:#f8f2e8;--wash:#f3eee5;--line:#d8d3c8;--signal:#ee7057;--acid:#f0b45d;--dark:#082f2c}
+body[data-theme=journal]{--dark:#102d2a;--ink:#172f2d;--cream:#eee7da;--signal:#bd5b47;--acid:#e4aa52}
+body[data-theme=midnight]{--paper:#e8e9e4;--cream:#dfe3dc;--wash:#d8ddd6;--line:#b9c2bb;--dark:#072a28;--signal:#df6c56}
+.utility-nav{color:#d7e0dc;border-bottom-color:rgba(255,255,255,.14)}
+.lead-grid__label,.lead-story{border-bottom-color:rgba(255,255,255,.17)}
+.lead-grid__label b{color:#90aaa4}
+.lead-story__media .story-media:not(.story-media--placeholder):after{position:absolute;inset:0;background:linear-gradient(90deg,rgba(8,47,44,.38),transparent 64%),linear-gradient(0deg,rgba(8,47,44,.26),transparent 58%);content:""}
+.story-media--tone-0{color:#0b514b;background:#8fb8ac}.story-media--tone-1{color:#d65f49;background:#f5c2a9}.story-media--tone-2{color:#a97022;background:#f1d59b}.story-media--tone-3{color:#255f52;background:#b8d9c9}.story-media--tone-4{color:#9a5f48;background:#dfc2ad}
+body{overflow-x:hidden}.lead-story__body,.lead-support__item,.story-card__body{min-width:0}.lead-story h1,.story-card h3,.feed-story h3{overflow-wrap:anywhere}
+.desk-section__grid--panorama{grid-template-columns:repeat(4,1fr)}.story-card--panorama{grid-column:1/-1;display:grid;grid-template-columns:minmax(0,1.65fr) minmax(250px,.65fr);gap:28px;margin-bottom:12px;padding-bottom:28px;border-bottom:1px solid var(--line)}.story-card--panorama .story-media{aspect-ratio:2.2/1}.story-card--panorama .story-card__body{display:flex;flex-direction:column;justify-content:center;padding:0}.story-card--panorama h3{font-size:48px}.story-card--panorama p{font-size:14px}.desk-section__grid--mosaic{grid-template-columns:repeat(4,1fr);grid-auto-flow:dense}.story-card--mosaic-lead{grid-column:span 2;grid-row:span 2}.story-card--mosaic-lead .story-media{aspect-ratio:1}.story-card--mosaic-lead h3{font-size:42px}.desk-section__grid--mosaic>.story-card:not(.story-card--mosaic-lead) .story-media{aspect-ratio:1.35}.desk-section__grid--tiles{grid-template-columns:repeat(4,1fr)}.desk-section__grid--tiles .story-media{aspect-ratio:1.15}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:38px}
+@media(max-width:620px){main{width:100%}.story-media--lead{height:360px;min-height:0}.lead-story__body,.lead-support,.latest,.feed-story{width:100%;max-width:calc(100vw - 36px)}.feed-story>div{min-width:0}.lead-story h1,.story-card h3,.feed-story h3,.story-card h3 a,.feed-story h3 a{white-space:normal;word-break:break-word;overflow-wrap:anywhere}.lead-story h1{max-width:100%;font-size:40px;line-height:.94}.lead-support__item{width:100%;max-width:100%;grid-template-columns:24px minmax(0,1fr);overflow:hidden}.story-card--support,.story-card--support .story-card__body,.story-card--support h3{width:100%;max-width:calc(100vw - 92px)}.feed-story>div,.feed-story h3,.feed-story p{max-width:calc(100vw - 100px)}}
+@media(max-width:900px){.story-card--panorama{grid-template-columns:1fr}.desk-section__grid--mosaic{grid-template-columns:repeat(2,1fr)}.desk-section__grid--tiles{grid-template-columns:repeat(2,1fr)}}
+@media(max-width:620px){.desk-section__grid--panorama,.desk-section__grid--mosaic,.desk-section__grid--tiles{grid-template-columns:1fr}.story-card--panorama{display:block}.story-card--panorama h3,.story-card--mosaic-lead h3{font-size:34px}.story-card--mosaic-lead{grid-column:auto;grid-row:auto}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:0}}
+</style></head><body data-theme="${escapeHtml8(config.theme)}" id="top" data-scheduled-renderer="newsroom_publisher_v1">${ticker}${masthead}${navigation}<main>${leadGrid}${latest}${sections}${newsletter}${pressRoom}${trustCenter}</main>${trustFooter}</body></html>`;
+  const bytes = Buffer.byteLength(html);
+  const sha2563 = createHash19("sha256").update(html).digest("hex");
+  const filename = `${brand.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "newsroom"}-news-site.html`;
+  return { html, filename, bytes, sha256: sha2563, generatedAt: generatedAtIso };
+}
+
 // src/scheduled-artifacts/scheduled-artifact-renderer-registry.ts
 var editorialReadingRoomV1 = {
   rendererKey: "editorial_reading_room_v1",
@@ -33815,24 +35631,47 @@ var personalAuthorityV1 = {
     };
   }
 };
+var newsroomPublisherV1 = {
+  rendererKey: "newsroom_publisher_v1",
+  rendererVersion: 1,
+  async render(rawInput, rawConfig, generatedAt) {
+    const input = NewsroomPublisherV1InputSchema.parse(rawInput);
+    const config = NewsroomPublisherTemplateConfigSchema.parse(rawConfig);
+    const rendered = renderNewsroomPublisherV1(input, config, generatedAt);
+    if (rendered.bytes > 2e6) {
+      throw new Error("Scheduled artifact HTML must be 2,000,000 bytes or fewer.");
+    }
+    return {
+      ...rendered,
+      title: `${input.publication.name} News Publisher`
+    };
+  }
+};
 var scheduledArtifactRendererRegistry = Object.freeze({
   "editorial_reading_room_v1:1": editorialReadingRoomV1,
-  "personal_authority_v1:1": personalAuthorityV1
+  "personal_authority_v1:1": personalAuthorityV1,
+  "newsroom_publisher_v1:1": newsroomPublisherV1
 });
 function getScheduledArtifactRenderer(rendererKey, rendererVersion) {
   return scheduledArtifactRendererRegistry[`${rendererKey}:${rendererVersion}`] ?? null;
 }
 var scheduledArtifactTemplatePresets = [
   EDITORIAL_READING_ROOM_TEMPLATE_PRESET,
-  PERSONAL_AUTHORITY_TEMPLATE_PRESET
+  PERSONAL_AUTHORITY_TEMPLATE_PRESET,
+  NEWSROOM_PUBLISHER_TEMPLATE_PRESET
 ];
 
 // src/api/scheduled-result-routes.ts
-var TemplateParamsSchema = z33.object({ templateId: z33.string().uuid() }).strict();
-var RunParamsSchema = z33.object({ runId: z33.string().min(1).max(200) }).strict();
-var ViewLinkParamsSchema = z33.object({
-  runId: z33.string().min(1).max(200),
-  shareId: z33.string().uuid()
+var TemplateParamsSchema = z35.object({ templateId: z35.string().uuid() }).strict();
+var RunParamsSchema = z35.object({ runId: z35.string().min(1).max(200) }).strict();
+var ViewLinkParamsSchema = z35.object({
+  runId: z35.string().min(1).max(200),
+  shareId: z35.string().uuid()
+}).strict();
+var ArtifactTemplateListQuerySchema = z35.object({
+  status: z35.enum(["active", "archived", "all"]).default("active"),
+  query: z35.string().trim().min(1).max(120).optional(),
+  presetKey: ArtifactTemplatePresetKeySchema.optional()
 }).strict();
 function apiError(error, errorCode = "invalid_request") {
   return { ok: false, error, errorCode };
@@ -33861,25 +35700,36 @@ function safeMemoryFailure(result) {
     errorCode in messages ? errorCode : "internal_error"
   );
 }
-var scheduledResultApp = new Hono32();
+var scheduledResultApp = new Hono33();
 scheduledResultApp.use("/artifact-templates", createApiKeyAuth());
 scheduledResultApp.use("/artifact-templates/*", createApiKeyAuth());
 scheduledResultApp.use("/schedule-runs", createApiKeyAuth());
 scheduledResultApp.use("/schedule-runs/*", createApiKeyAuth());
 scheduledResultApp.get("/artifact-templates", async (c) => {
-  const status = c.req.query("status") ?? "active";
-  if (!["active", "archived", "all"].includes(status)) {
-    return c.json(apiError("status must be active, archived, or all."), 400);
-  }
+  const parsed = ArtifactTemplateListQuerySchema.safeParse(c.req.query());
+  if (!parsed.success) return c.json(apiError("The template search filters are invalid."), 400);
+  const { status, query: searchText, presetKey } = parsed.data;
   const { key, error } = await memoryContext(c);
   if (!key) return c.json(apiError(error ?? "Memory is unavailable.", "internal_error"), 503);
   const result = await memoryCall("list_artifact_templates", { status }, key);
   if (!result.ok) return c.json(safeMemoryFailure(result), memoryStatus(result));
   c.header("Cache-Control", "private, no-store");
-  return c.json({
-    ...result,
-    presets: Array.isArray(result.presets) ? result.presets : scheduledArtifactTemplatePresets
-  });
+  const normalizedQuery = searchText?.toLocaleLowerCase();
+  const presets = scheduledArtifactTemplatePresets.filter((preset) => {
+    if (presetKey && preset.presetKey !== presetKey) return false;
+    if (!normalizedQuery) return true;
+    return [preset.name, preset.description, preset.presetKey].some((value) => value.toLocaleLowerCase().includes(normalizedQuery));
+  });
+  const templates = (Array.isArray(result.templates) ? result.templates : []).filter((template) => {
+    if (!template || typeof template !== "object") return false;
+    const record = template;
+    const currentVersion = record.currentVersion && typeof record.currentVersion === "object" ? record.currentVersion : null;
+    const rendererKey = typeof currentVersion?.rendererKey === "string" ? currentVersion.rendererKey : "";
+    if (presetKey && rendererKey !== presetKey) return false;
+    if (!normalizedQuery) return true;
+    return [record.name, record.description, rendererKey, currentVersion?.authoringInstructions].filter((value) => typeof value === "string").some((value) => value.toLocaleLowerCase().includes(normalizedQuery));
+  });
+  return c.json({ ok: true, presets, templates });
 });
 scheduledResultApp.post("/artifact-templates", async (c) => {
   const parsed = CreateArtifactTemplateInputSchema.safeParse(await c.req.json().catch(() => null));
@@ -33997,10 +35847,10 @@ scheduledResultApp.delete("/schedule-runs/:runId/view-links/:shareId", async (c)
 });
 
 // src/api/public-scheduled-result-routes.ts
-import { Hono as Hono33 } from "hono";
+import { Hono as Hono34 } from "hono";
 
 // src/scheduled-artifacts/scheduled-run-artifact-store.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 var SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
 var SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
 var SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -34016,7 +35866,7 @@ function policy3() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash17("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash20("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -34059,7 +35909,7 @@ async function readScheduledRunArtifact(args) {
 }
 
 // src/api/public-scheduled-result-routes.ts
-var publicScheduledResultApp = new Hono33();
+var publicScheduledResultApp = new Hono34();
 function allowedFrameAncestors() {
   const configured = (process.env.SCHEDULED_ARTIFACT_FRAME_ANCESTORS ?? "").split(",").map((value) => value.trim()).filter((value) => /^https?:\/\/[^/\s]+$/.test(value));
   const origins = configured.length ? configured : ["https://mcpscraper.dev", "https://www.mcpscraper.dev"];
@@ -34120,10 +35970,10 @@ publicScheduledResultApp.get("/scheduled-run-view-links/:token/content", async (
 });
 
 // src/api/scheduled-artifact-internal-routes.ts
-import { Hono as Hono34 } from "hono";
+import { Hono as Hono35 } from "hono";
 
 // src/api/scheduler-integration-auth.ts
-import { createHash as createHash18, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { createHash as createHash21, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
 
 // src/api/service-connections.ts
 import { randomUUID as randomUUID18 } from "crypto";
@@ -34416,12 +36266,12 @@ var SchedulerIntegrationAuthError = class extends Error {
   }
 };
 function signingSecret() {
-  const secret2 = process.env.SCHEDULER_INTEGRATION_SIGNING_SECRET?.trim();
-  if (!secret2) throw new SchedulerIntegrationAuthError("not_configured");
-  return secret2;
+  const secret = process.env.SCHEDULER_INTEGRATION_SIGNING_SECRET?.trim();
+  if (!secret) throw new SchedulerIntegrationAuthError("not_configured");
+  return secret;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = createHash18("sha256").update(args.body).digest("hex");
+  const bodyHash = createHash21("sha256").update(args.body).digest("hex");
   return createHmac4("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
@@ -34477,7 +36327,7 @@ async function verifySchedulerIntegrationRequest(request, rawBody) {
 }
 
 // src/api/scheduled-artifact-internal-routes.ts
-var scheduledArtifactInternalApp = new Hono34();
+var scheduledArtifactInternalApp = new Hono35();
 function errorPayload(errorCode, error, requestId) {
   return ApiErrorResponseSchema.parse({
     ok: false,
@@ -34597,7 +36447,7 @@ function startSiteAuditWorker() {
 }
 
 // src/api/server.ts
-import { createMiddleware as createMiddleware4 } from "hono/factory";
+import { createMiddleware as createMiddleware5 } from "hono/factory";
 import { getCookie as getCookie2, setCookie as setCookie2, deleteCookie } from "hono/cookie";
 import Stripe2 from "stripe";
 
@@ -34677,13 +36527,13 @@ async function reconcileSiteExtractSettlements(limit = 25) {
 }
 
 // src/api/page-diff.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 import { diffLines } from "diff";
 var MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
 var MAX_DIFF_HUNKS = 200;
 var MAX_DIFF_LINES_PER_RESPONSE = 2e3;
 function sha256Hex(value) {
-  return createHash19("sha256").update(value).digest("hex");
+  return createHash22("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -34797,10 +36647,10 @@ async function persistScrapeBody(user, opts) {
 }
 
 // src/api/scrape-image-sink.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 var MAX_IMAGES_PER_SCRAPE = 25;
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${createHash20("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${createHash23("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -35272,7 +37122,7 @@ function inferredWaybackCapturedAt(content) {
 }
 
 // src/api/connection-memory-import.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 var CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
 var CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
 var CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS = 256e3;
@@ -35302,7 +37152,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return createHash21("sha256").update(value).digest("hex");
+  return createHash24("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -36313,7 +38163,7 @@ async function dbUsage(identity, plan) {
 }
 
 // src/api/nango-control.ts
-import { createHash as createHash23, randomUUID as randomUUID22 } from "crypto";
+import { createHash as createHash26, randomUUID as randomUUID22 } from "crypto";
 
 // src/api/slack-archive-analysis.ts
 function isRecord2(value) {
@@ -36687,7 +38537,7 @@ async function exportSlackChannelPage(input, dependencies) {
 }
 
 // src/api/main-nango-transport.ts
-import { createHash as createHash22, randomUUID as randomUUID21 } from "crypto";
+import { createHash as createHash25, randomUUID as randomUUID21 } from "crypto";
 import { Client, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
 
 // src/api/connected-tool-policy.ts
@@ -36820,9 +38670,9 @@ function arrayAt(payload, key) {
   return Array.isArray(data?.[key]) ? data[key] : [];
 }
 function nangoSecret() {
-  const secret2 = process.env.NANGO_SECRET_KEY?.trim();
-  if (!secret2) throw new MainNangoTransportError("Nango is not configured.", 503, "nango_not_configured");
-  return secret2;
+  const secret = process.env.NANGO_SECRET_KEY?.trim();
+  if (!secret) throw new MainNangoTransportError("Nango is not configured.", 503, "nango_not_configured");
+  return secret;
 }
 function nangoMcpUrl() {
   try {
@@ -37080,7 +38930,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy4) => policy4.classification === "read").map((policy4) => policy4.name);
   const actionTools = [...policies.values()].filter((policy4) => policy4.classification === "action").map((policy4) => policy4.name);
-  const revision = createHash22("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = createHash25("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -37108,7 +38958,7 @@ async function callNangoToolDirect(args) {
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
   const requestId = args.requestId?.trim() || randomUUID21();
-  const idempotencyKey3 = `main-nango:${createHash22("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const idempotencyKey3 = `main-nango:${createHash25("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -37133,7 +38983,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : createHash22("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : createHash25("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -37175,7 +39025,7 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: createHash22("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: createHash25("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -37321,9 +39171,9 @@ function controlBaseUrl() {
   return (process.env.NANGO_CONTROL_URL?.trim() || DEFAULT_NANGO_CONTROL_URL).replace(/\/$/, "");
 }
 function controlSecret() {
-  const secret2 = process.env.SCHEDULE_INTEGRATIONS_SECRET?.trim();
-  if (!secret2) throw new NangoControlError("Scheduled service connections are not configured.", 503);
-  return secret2;
+  const secret = process.env.SCHEDULE_INTEGRATIONS_SECRET?.trim();
+  if (!secret) throw new NangoControlError("Scheduled service connections are not configured.", 503);
+  return secret;
 }
 function isRecord4(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
@@ -37899,8 +39749,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${createHash23("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID22()).digest("hex")}`;
-  const requestDigest = createHash23("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${createHash26("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID22()).digest("hex")}`;
+  const requestDigest = createHash26("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -38051,7 +39901,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return createHash23("sha256").update(canonicalJson2(tool)).digest("hex");
+  return createHash26("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -38330,7 +40180,7 @@ async function callMainOwnedExportPage(identity, input) {
 }
 
 // src/api/resend-control.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 var DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
 var RESEND_PROVIDER_CONFIG_KEY = "resend";
 var RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -38370,9 +40220,9 @@ function controlBaseUrl2() {
   return (process.env.SCHEDULE_INTEGRATIONS_CONTROL_URL?.trim() || process.env.NANGO_CONTROL_URL?.trim() || DEFAULT_CONNECTION_CONTROL_URL).replace(/\/$/, "");
 }
 function controlSecret2() {
-  const secret2 = process.env.SCHEDULE_INTEGRATIONS_SECRET?.trim();
-  if (!secret2) throw new ResendControlError("Resend connections are not configured.", 503);
-  return secret2;
+  const secret = process.env.SCHEDULE_INTEGRATIONS_SECRET?.trim();
+  if (!secret) throw new ResendControlError("Resend connections are not configured.", 503);
+  return secret;
 }
 function isRecord5(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
@@ -38589,7 +40439,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${createHash24("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${createHash27("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -38657,7 +40507,7 @@ async function callResendExportPage(identity, input) {
 
 // src/api/server.ts
 var secureCookies2 = process.env.NODE_ENV === "production" || process.env.VERCEL === "1";
-var isProduction2 = secureCookies2;
+var isProduction = secureCookies2;
 var sessionCookieOptions2 = {
   httpOnly: true,
   secure: secureCookies2,
@@ -38671,7 +40521,7 @@ function configuredOrigins() {
     const trimmed = raw.trim();
     if (trimmed) origins.add(trimmed);
   }
-  if (!isProduction2) {
+  if (!isProduction) {
     origins.add("http://localhost:5173");
     origins.add("http://localhost:3000");
     origins.add("http://localhost:63316");
@@ -38697,13 +40547,13 @@ async function enforceRateLimit(c, scope, key, limit, windowSeconds) {
     { "Retry-After": String(result.resetSeconds) }
   );
 }
-var requireAllowedOrigin = createMiddleware4(async (c, next) => {
+var requireAllowedOrigin = createMiddleware5(async (c, next) => {
   const origin = c.req.header("origin");
   if (!origin) return next();
   if (!configuredOrigins().has(origin)) return c.json({ error: "Origin not allowed" }, 403);
   return next();
 });
-var auth3 = createMiddleware4(async (c, next) => {
+var auth4 = createMiddleware5(async (c, next) => {
   const key = c.req.header("x-api-key");
   if (!key) return c.json({ error: "Missing API key" }, 401);
   const user = await getUserByApiKey(key);
@@ -38715,7 +40565,7 @@ var auth3 = createMiddleware4(async (c, next) => {
   if (cost && cost.userId == null) cost.userId = Number(refreshed.id);
   return next();
 });
-var sessionAuth = createMiddleware4(async (c, next) => {
+var sessionAuth = createMiddleware5(async (c, next) => {
   const token4 = getCookie2(c, "session");
   if (!token4) return c.json({ error: "Not authenticated" }, 401);
   const userId = verifySession(token4);
@@ -38727,7 +40577,7 @@ var sessionAuth = createMiddleware4(async (c, next) => {
   c.set("sessionUser", { ...refreshed, balance_mc: balanceMc });
   return next();
 });
-var requireIntegrationsTier = createMiddleware4(async (c, next) => {
+var requireIntegrationsTier = createMiddleware5(async (c, next) => {
   const user = c.get("user");
   if (!user.subscription_tier) {
     return c.json({
@@ -38738,27 +40588,27 @@ var requireIntegrationsTier = createMiddleware4(async (c, next) => {
   }
   return next();
 });
-var requirePaidSchedulingTier = createMiddleware4(async (c, next) => {
+var requirePaidSchedulingTier = createMiddleware5(async (c, next) => {
   const user = c.get("user");
   if (!hasPaidSchedulingAccess(user)) return c.json(paidPlanRequiredPayload(), 403);
   return next();
 });
-var app = new Hono35();
+var app = new Hono36();
 var deploymentProfile = resolveDeploymentProfile();
 var STRIPE_API_VERSION = "2026-02-25.clover";
 function permitsLocalApiRequest(request) {
   return (deploymentProfile === "development" || deploymentProfile === "test" || process.env.MCP_SCRAPER_ALLOW_PRIVATE_NETWORK === "1") && request.headers.get("x-mcp-scraper-local-network") === "1" && isLoopbackBaseUrl(request.url);
 }
 function requireStripeSecret() {
-  const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-  if (secret2) return secret2;
+  const secret = process.env.STRIPE_SECRET_KEY?.trim();
+  if (secret) return secret;
   if (process.env.NODE_ENV === "production" || process.env.VERCEL === "1") return null;
   return null;
 }
 async function createSignupStripeCustomer(email) {
-  const secret2 = requireStripeSecret();
-  if (!secret2) return null;
-  const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+  const secret = requireStripeSecret();
+  if (!secret) return null;
+  const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
   const customer = await stripeClient.customers.create({
     email,
     description: "MCP Scraper free account",
@@ -38909,9 +40759,9 @@ app.post("/account/delete", requireAllowedOrigin, sessionAuth, async (c) => {
       return c.json({ error: "Could not remove every connected account \u2014 please retry before deleting the account." }, 502);
     }
   }
-  const secret2 = requireStripeSecret();
-  if (secret2 && user.stripe_customer_id) {
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+  const secret = requireStripeSecret();
+  if (secret && user.stripe_customer_id) {
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     const subs = await stripeClient.subscriptions.list({ customer: user.stripe_customer_id, status: "all", limit: 100 });
     for (const sub of subs.data) {
       if (sub.status === "active" || sub.status === "trialing" || sub.status === "past_due") {
@@ -39048,7 +40898,7 @@ function maybeProvisionInBackground(user, vaultCount) {
     }
   })();
 }
-app.get("/memory/overview", auth3, async (c) => {
+app.get("/memory/overview", auth4, async (c) => {
   const user = c.get("user");
   const identity = resolveMemoryIdentity(user);
   const plan = memoryPlanForReads(user);
@@ -39076,7 +40926,7 @@ app.get("/memory/overview", auth3, async (c) => {
     return c.json({ ok: false, error: message }, 502);
   }
 });
-app.get("/memory/vaults", auth3, async (c) => {
+app.get("/memory/vaults", auth4, async (c) => {
   const user = c.get("user");
   try {
     const vaults = await dbListVaults(resolveMemoryIdentity(user));
@@ -39086,7 +40936,7 @@ app.get("/memory/vaults", auth3, async (c) => {
     return c.json({ ok: false, error: err instanceof Error ? err.message : "could not load vaults" }, 502);
   }
 });
-app.post("/memory/mcp-call", auth3, async (c) => {
+app.post("/memory/mcp-call", auth4, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   if (!body.toolName) return c.json({ ok: false, error: "toolName is required" }, 400);
@@ -39107,13 +40957,13 @@ app.post("/memory/mcp-call", auth3, async (c) => {
   const result = await memoryCall(body.toolName, body.args ?? {}, key);
   return c.json(result);
 });
-app.get("/memory/approved-senders", auth3, async (c) => {
+app.get("/memory/approved-senders", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 502);
   const r = await memoryCall("listApprovedSendersTool", {}, key);
   return c.json(r);
 });
-app.post("/memory/approved-senders", auth3, async (c) => {
+app.post("/memory/approved-senders", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 502);
   const body = await c.req.json().catch(() => ({}));
@@ -39122,14 +40972,14 @@ app.post("/memory/approved-senders", auth3, async (c) => {
   const r = await memoryCall("approveSenderTool", { senderIdentity }, key);
   return c.json(r);
 });
-app.delete("/memory/approved-senders/:identity", auth3, async (c) => {
+app.delete("/memory/approved-senders/:identity", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 502);
   const senderIdentity = c.req.param("identity");
   const r = await memoryCall("removeApprovedSenderTool", { senderIdentity }, key);
   return c.json(r);
 });
-app.get("/memory/connect", auth3, async (c) => {
+app.get("/memory/connect", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ error: error ?? "memory unavailable" }, 502);
   const url = "https://memory.mcpscraper.dev/mcp";
@@ -39144,7 +40994,7 @@ app.get("/memory/connect", auth3, async (c) => {
   const codeCommand = `claude mcp add --transport http memory ${url} --header "Authorization: Bearer ${key}"`;
   return c.json({ ok: true, url, key, config, codeCommand });
 });
-app.post("/memory/vault", auth3, async (c) => {
+app.post("/memory/vault", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ error: error ?? "memory unavailable" }, 502);
   const body = await c.req.json().catch(() => ({}));
@@ -39153,7 +41003,7 @@ app.post("/memory/vault", auth3, async (c) => {
   const result = await memoryCall("addVaultTool", { vault }, key);
   return c.json(result, result.ok ? 200 : 502);
 });
-app.get("/memory/notes", auth3, async (c) => {
+app.get("/memory/notes", auth4, async (c) => {
   const user = c.get("user");
   const identity = resolveMemoryIdentity(user);
   try {
@@ -39169,7 +41019,7 @@ app.get("/memory/notes", auth3, async (c) => {
     return c.json({ ok: false, error: err instanceof Error ? err.message : "could not load notes" }, 502);
   }
 });
-app.get("/memory/note", auth3, async (c) => {
+app.get("/memory/note", auth4, async (c) => {
   const user = c.get("user");
   const vault = c.req.query("vault")?.trim();
   const path5 = c.req.query("path");
@@ -39183,7 +41033,7 @@ app.get("/memory/note", auth3, async (c) => {
     return c.json({ ok: false, error: err instanceof Error ? err.message : "could not load note" }, 502);
   }
 });
-app.get("/memory/universe", auth3, async (c) => {
+app.get("/memory/universe", auth4, async (c) => {
   const user = c.get("user");
   const includeConnections = c.req.query("includeConnections") === "1";
   try {
@@ -39193,7 +41043,7 @@ app.get("/memory/universe", auth3, async (c) => {
     return c.json({ ok: false, error: err instanceof Error ? err.message : "could not build universe" }, 502);
   }
 });
-app.put("/memory/note", auth3, async (c) => {
+app.put("/memory/note", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ error: error ?? "memory unavailable" }, 502);
   const body = await c.req.json().catch(() => ({}));
@@ -39201,7 +41051,7 @@ app.put("/memory/note", auth3, async (c) => {
   const result = await memoryCall("putTool", { vault: body.vault, path: body.path, title: body.title, content: body.content }, key);
   return c.json(result, result.ok ? 200 : 502);
 });
-app.delete("/memory/note", auth3, async (c) => {
+app.delete("/memory/note", auth4, async (c) => {
   const { key, error } = await getOrCreateUserMemoryKey(c.get("user"));
   if (!key) return c.json({ error: error ?? "memory unavailable" }, 502);
   const vault = c.req.query("vault");
@@ -39210,7 +41060,7 @@ app.delete("/memory/note", auth3, async (c) => {
   const result = await memoryCall("deleteNoteTool", { vault, path: path5 }, key);
   return c.json(result, result.ok ? 200 : 502);
 });
-app.get("/memory/note/download", auth3, async (c) => {
+app.get("/memory/note/download", auth4, async (c) => {
   const user = c.get("user");
   const vault = c.req.query("vault")?.trim();
   const path5 = c.req.query("path");
@@ -39227,7 +41077,7 @@ app.get("/memory/note/download", auth3, async (c) => {
     }
   });
 });
-app.get("/memory/storage", auth3, async (c) => {
+app.get("/memory/storage", auth4, async (c) => {
   const user = c.get("user");
   try {
     const result = await dbStorage(resolveMemoryIdentity(user), memoryPlanForReads(user));
@@ -39236,7 +41086,7 @@ app.get("/memory/storage", auth3, async (c) => {
     return c.json({ ok: false, error: err instanceof Error ? err.message : "could not load storage" }, 502);
   }
 });
-app.get("/memory/billing", auth3, async (c) => {
+app.get("/memory/billing", auth4, async (c) => {
   const user = c.get("user");
   const plans = Object.values(MEMORY_PLANS).map((p) => ({ plan: p.plan, label: p.label, price_id: p.price_id, interval: p.interval, monthly_usd: p.monthly_usd, quota_gb: p.quota_bytes / 1e9 }));
   return c.json({
@@ -39247,7 +41097,7 @@ app.get("/memory/billing", auth3, async (c) => {
     plans
   });
 });
-app.post("/memory/checkout", auth3, async (c) => {
+app.post("/memory/checkout", auth4, async (c) => {
   try {
     const user = c.get("user");
     const body = await c.req.json().catch(() => ({}));
@@ -39259,9 +41109,9 @@ app.post("/memory/checkout", auth3, async (c) => {
         error_code: "memory_already_included"
       }, 409);
     }
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     let customerId = user.stripe_customer_id;
     if (!customerId) {
       const customer = await stripeClient.customers.create({ email: user.email });
@@ -39290,13 +41140,13 @@ app.post("/memory/checkout", auth3, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.post("/memory/portal", auth3, async (c) => {
+app.post("/memory/portal", auth4, async (c) => {
   try {
     const user = c.get("user");
     if (!user.stripe_customer_id) return c.json({ error: "No billing account yet \u2014 subscribe first." }, 409);
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     const session = await stripeClient.billingPortal.sessions.create({
       customer: user.stripe_customer_id,
       return_url: `${appOrigin()}/memory`
@@ -39308,7 +41158,7 @@ app.post("/memory/portal", auth3, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.post("/schedule-checkout", auth3, async (c) => {
+app.post("/schedule-checkout", auth4, async (c) => {
   return c.json({
     error_code: "scheduled_actions_now_credit_metered",
     error: "Scheduled Actions is included and no longer requires a separate subscription.",
@@ -39468,7 +41318,7 @@ function renderResendOAuthResult(ok) {
   const message = ok ? "Your Resend account is connected privately to MCP Scraper. You can close this tab." : "The connection could not be completed. Close this tab and try again from Integrations.";
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="no-referrer"><title>${title}</title><style>:root{color-scheme:light dark}*{box-sizing:border-box}body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;background:#f5f2ee;color:#26211d;font-family:ui-sans-serif,system-ui,-apple-system,sans-serif}.card{width:min(100%,440px);padding:32px;border:1px solid #d8d0c8;border-radius:16px;background:#fff;box-shadow:0 18px 55px rgba(31,24,18,.1)}.mark{width:38px;height:38px;display:grid;place-items:center;border-radius:10px;background:#26211d;color:#fff;font-size:20px;font-weight:700}h1{margin:18px 0 8px;font-size:24px;line-height:1.15}p{margin:0;color:#71675f;line-height:1.55}a{display:inline-flex;margin-top:20px;color:#b44d36;font-weight:650;text-underline-offset:3px}@media(prefers-color-scheme:dark){body{background:#171411;color:#f4eee8}.card{background:#211d19;border-color:#3b342d}.mark{background:#f4eee8;color:#211d19}p{color:#b9aea5}}</style></head><body><main class="card"><div class="mark" aria-hidden="true">R</div><h1>${title}</h1><p>${message}</p><a href="/dashboard/integrations">Return to Integrations</a></main><script>if(window.opener){try{window.opener.postMessage({type:'mcp-scraper:resend-oauth',ok:${ok}},window.location.origin)}catch(e){}}setTimeout(function(){window.close()},1200)</script></body></html>`;
 }
-app.get("/schedule-status", auth3, requirePaidSchedulingTier, async (c) => {
+app.get("/schedule-status", auth4, requirePaidSchedulingTier, async (c) => {
   try {
     const user = c.get("user");
     const { key, error } = await getOrCreateUserMemoryKey(user);
@@ -39488,14 +41338,14 @@ app.get("/schedule-status", auth3, requirePaidSchedulingTier, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.get("/schedule-connection-catalog", auth3, async (c) => {
+app.get("/schedule-connection-catalog", auth4, async (c) => {
   try {
     return c.json({ ok: true, catalog: await combinedConnectionCatalog() });
   } catch (err) {
     return scheduleConnectionError(c, err, "Unable to load the service connection catalog.");
   }
 });
-app.get("/schedule-connections", auth3, async (c) => {
+app.get("/schedule-connections", auth4, async (c) => {
   try {
     const user = c.get("user");
     const connections = await combinedConnections(user.email);
@@ -39511,7 +41361,7 @@ app.get("/schedule-connections", auth3, async (c) => {
     return scheduleConnectionError(c, err, "Unable to load service connections.");
   }
 });
-app.post("/schedule-connections/billing/reconcile", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/billing/reconcile", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   try {
     return c.json({
@@ -39522,7 +41372,7 @@ app.post("/schedule-connections/billing/reconcile", auth3, requireIntegrationsTi
     return scheduleConnectionError(c, err, "Unable to synchronize connected-account billing.");
   }
 });
-app.post("/schedule-connections/session", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/session", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -39537,7 +41387,7 @@ app.post("/schedule-connections/session", auth3, requireIntegrationsTier, async
     return scheduleConnectionError(c, err, "Unable to start the service connection flow.");
   }
 });
-app.post("/schedule-connections/:id/reconnect-session", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/:id/reconnect-session", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -39548,7 +41398,7 @@ app.post("/schedule-connections/:id/reconnect-session", auth3, requireIntegratio
     return scheduleConnectionError(c, err, "Unable to start the service reconnection flow.");
   }
 });
-app.delete("/schedule-connections/:id", auth3, async (c) => {
+app.delete("/schedule-connections/:id", auth4, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -39574,7 +41424,7 @@ app.delete("/schedule-connections/:id", auth3, async (c) => {
     return scheduleConnectionError(c, err, "Unable to disconnect this service connection.");
   }
 });
-app.post("/schedule-connections/:id/enable-actions", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/:id/enable-actions", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   if (typeof body.enabled !== "boolean") return c.json({ ok: false, error: "enabled must be a boolean." }, 400);
@@ -39586,7 +41436,7 @@ app.post("/schedule-connections/:id/enable-actions", auth3, requireIntegrationsT
     return scheduleConnectionError(c, err, "Unable to update this connection's action setting.");
   }
 });
-app.post("/schedule-connections/:id/test", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/:id/test", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -39676,7 +41526,7 @@ app.get("/oauth/resend/callback", async (c) => {
     return c.html(renderResendOAuthResult(false), 502);
   }
 });
-app.post("/schedule-connections/actions/slack/send-message", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/slack/send-message", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39696,7 +41546,7 @@ app.post("/schedule-connections/actions/slack/send-message", auth3, requireInteg
     return scheduleConnectionError(c, err, "Unable to send the Slack message.");
   }
 });
-app.post("/schedule-connections/actions/gmail/send-message", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/gmail/send-message", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39732,7 +41582,7 @@ function parseEmailAddress(headerValue) {
   const bare = value.match(/^([^\s<>]+@[^\s<>]+)$/);
   return bare ? { email: bare[1].trim().toLowerCase(), name: null } : null;
 }
-app.post("/schedule-connections/actions/gmail/search-contacts", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/gmail/search-contacts", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39786,7 +41636,7 @@ app.post("/schedule-connections/actions/gmail/search-contacts", auth3, requireIn
     return scheduleConnectionError(c, err, "Unable to search Gmail contacts.");
   }
 });
-app.post("/schedule-connections/actions/google-calendar/create-event", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/google-calendar/create-event", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39816,7 +41666,7 @@ app.post("/schedule-connections/actions/google-calendar/create-event", auth3, re
     return scheduleConnectionError(c, err, "Unable to create the calendar event.");
   }
 });
-app.post("/schedule-connections/actions/zoom/create-meeting", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/zoom/create-meeting", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39842,7 +41692,7 @@ app.post("/schedule-connections/actions/zoom/create-meeting", auth3, requireInte
     return scheduleConnectionError(c, err, "Unable to create the Zoom meeting.");
   }
 });
-app.post("/schedule-connections/actions/read", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/read", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39859,7 +41709,7 @@ app.post("/schedule-connections/actions/read", auth3, requireIntegrationsTier, a
     return scheduleConnectionError(c, err, "Unable to read from this connection.");
   }
 });
-app.post("/schedule-connections/actions/import-memory", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/import-memory", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39916,7 +41766,7 @@ app.post("/schedule-connections/actions/import-memory", auth3, requireIntegratio
     return scheduleConnectionError(c, err, "Unable to import this connected-service snapshot into Memory.");
   }
 });
-app.post("/schedule-connections/actions/describe", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/describe", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -39933,7 +41783,7 @@ app.post("/schedule-connections/actions/describe", auth3, requireIntegrationsTie
     return scheduleConnectionError(c, err, "Unable to describe this connection tool.");
   }
 });
-app.post("/schedule-connections/actions/export", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/export", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -40020,7 +41870,7 @@ app.post("/schedule-connections/actions/export", auth3, requireIntegrationsTier,
     return scheduleConnectionError(c, err, "Unable to export this connected service.");
   }
 });
-app.post("/schedule-connections/actions/export-search-console-table", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/export-search-console-table", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   try {
@@ -40045,7 +41895,7 @@ app.post("/schedule-connections/actions/export-search-console-table", auth3, req
     return c.json({ ok: false, error: "Unable to export the persisted Search Console table." }, 502);
   }
 });
-app.post("/schedule-connections/actions/export-download", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/export-download", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const artifactId = typeof body.artifactId === "string" ? body.artifactId.trim() : "";
@@ -40062,7 +41912,7 @@ app.post("/schedule-connections/actions/export-download", auth3, requireIntegrat
     return c.json({ ok: false, error: "Unable to renew this artifact download." }, 502);
   }
 });
-app.post("/schedule-connections/actions/call", auth3, requireIntegrationsTier, async (c) => {
+app.post("/schedule-connections/actions/call", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -40102,7 +41952,7 @@ app.post("/integrations/actions/read", (c) => forwardIntegrationAlias(c, "/sched
 app.post("/integrations/actions/describe", (c) => forwardIntegrationAlias(c, "/schedule-connections/actions/describe"));
 app.post("/integrations/actions/call", (c) => forwardIntegrationAlias(c, "/schedule-connections/actions/call"));
 app.post("/integrations/actions/export", (c) => forwardIntegrationAlias(c, "/schedule-connections/actions/export"));
-app.post("/schedule-link", auth3, requirePaidSchedulingTier, async (c) => {
+app.post("/schedule-link", auth4, requirePaidSchedulingTier, async (c) => {
   try {
     const user = c.get("user");
     const credentials = await syncScheduledActionCredentials(user);
@@ -40119,7 +41969,7 @@ app.post("/schedule-link", auth3, requirePaidSchedulingTier, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.get("/schedule-actions", auth3, async (c) => {
+app.get("/schedule-actions", auth4, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
@@ -40146,7 +41996,7 @@ app.get("/schedule-actions", auth3, async (c) => {
     });
   }
 });
-app.post("/schedule-actions", auth3, requirePaidSchedulingTier, async (c) => {
+app.post("/schedule-actions", auth4, requirePaidSchedulingTier, async (c) => {
   const user = c.get("user");
   const credentials = await syncScheduledActionCredentials(user);
   if (!credentials.ok) {
@@ -40191,7 +42041,7 @@ app.post("/schedule-actions", auth3, requirePaidSchedulingTier, async (c) => {
     return response;
   }
 });
-app.post("/schedule-actions/propose", auth3, async (c) => {
+app.post("/schedule-actions/propose", auth4, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
@@ -40199,7 +42049,7 @@ app.post("/schedule-actions/propose", auth3, async (c) => {
   const r = await memoryCall("proposeScheduledActionTool", body, key);
   return c.json(r);
 });
-app.get("/schedule-actions/:id/connections", auth3, async (c) => {
+app.get("/schedule-actions/:id/connections", auth4, async (c) => {
   try {
     const user = c.get("user");
     const scheduleActionId = c.req.param("id");
@@ -40209,7 +42059,7 @@ app.get("/schedule-actions/:id/connections", auth3, async (c) => {
     return scheduleConnectionError(c, err, "Unable to load scheduled action service connections.");
   }
 });
-app.put("/schedule-actions/:id/connections", auth3, requireIntegrationsTier, async (c) => {
+app.put("/schedule-actions/:id/connections", auth4, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   let connections;
@@ -40236,7 +42086,7 @@ app.put("/schedule-actions/:id/connections", auth3, requireIntegrationsTier, asy
     return scheduleConnectionError(c, err, "Unable to update scheduled action service connections.");
   }
 });
-app.get("/schedule-actions/:id/runs", auth3, async (c) => {
+app.get("/schedule-actions/:id/runs", auth4, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
@@ -40245,7 +42095,7 @@ app.get("/schedule-actions/:id/runs", auth3, async (c) => {
   const r = await memoryCall("listScheduledActionRunsTool", { id: c.req.param("id"), limit }, key);
   return c.json(r);
 });
-app.put("/schedule-actions/:id", auth3, requirePaidSchedulingTier, async (c) => {
+app.put("/schedule-actions/:id", auth4, requirePaidSchedulingTier, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
@@ -40260,21 +42110,21 @@ app.put("/schedule-actions/:id", auth3, requirePaidSchedulingTier, async (c) =>
   const r = await memoryCall("updateScheduledActionTool", { id: c.req.param("id"), ...updates }, key);
   return c.json(r);
 });
-app.post("/schedule-actions/:id/pause", auth3, async (c) => {
+app.post("/schedule-actions/:id/pause", auth4, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
   const r = await memoryCall("pauseScheduledActionTool", { id: c.req.param("id") }, key);
   return c.json(r);
 });
-app.post("/schedule-actions/:id/resume", auth3, requirePaidSchedulingTier, async (c) => {
+app.post("/schedule-actions/:id/resume", auth4, requirePaidSchedulingTier, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
   const r = await memoryCall("resumeScheduledActionTool", { id: c.req.param("id") }, key);
   return c.json(r);
 });
-app.delete("/schedule-actions/:id", auth3, async (c) => {
+app.delete("/schedule-actions/:id", auth4, async (c) => {
   const user = c.get("user");
   const { key, error } = await getOrCreateUserMemoryKey(user);
   if (!key) return c.json({ ok: false, error: error ?? "memory unavailable" }, 503);
@@ -40289,7 +42139,7 @@ app.delete("/schedule-actions/:id", auth3, async (c) => {
     return c.json({ ...r, connectionBindingCleanupPending: true });
   }
 });
-app.post("/schedule-link/revoke", auth3, async (c) => {
+app.post("/schedule-link/revoke", auth4, async (c) => {
   try {
     const user = c.get("user");
     const { key, error } = await getOrCreateUserMemoryKey(user);
@@ -40302,7 +42152,7 @@ app.post("/schedule-link/revoke", auth3, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.post("/support/submit", auth3, async (c) => {
+app.post("/support/submit", auth4, async (c) => {
   try {
     const user = c.get("user");
     const body = await c.req.json().catch(() => ({}));
@@ -40330,7 +42180,7 @@ app.post("/support/submit", auth3, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.get("/memory/usage", auth3, async (c) => {
+app.get("/memory/usage", auth4, async (c) => {
   const user = c.get("user");
   try {
     const result = await dbUsage(resolveMemoryIdentity(user), memoryPlanForReads(user));
@@ -40383,7 +42233,7 @@ async function checkHarvestLimits(user, reuseLockId) {
   }
   return null;
 }
-app.post("/harvest", auth3, async (c) => {
+app.post("/harvest", auth4, async (c) => {
   const user = c.get("user");
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = HarvestBodySchema.safeParse(raw);
@@ -40466,7 +42316,7 @@ app.post("/harvest", auth3, async (c) => {
   }
   return c.json({ job_id: jobId2, status: "pending" }, 202);
 });
-app.post("/harvest/sync", auth3, async (c) => {
+app.post("/harvest/sync", auth4, async (c) => {
   const user = c.get("user");
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = HarvestBodySchema.safeParse(raw);
@@ -40547,17 +42397,17 @@ app.post("/harvest/sync", auth3, async (c) => {
     return c.json({ job_id: jobId2, status: "failed", ...response, attempts: sanitizeAttempts(attempts) }, problem.httpStatus);
   }
 });
-app.get("/jobs/:id", auth3, async (c) => {
+app.get("/jobs/:id", auth4, async (c) => {
   const job = await getJob(c.req.param("id"), c.get("user").id);
   if (!job) return c.json({ error: "Job not found" }, 404);
   const attempts = await listHarvestAttempts(job.id, c.get("user").id);
   const safeResult = job.result && typeof job.result === "object" ? sanitizeHarvestResult(job.result) : job.result;
   return c.json({ ...job, result: safeResult, attempts: sanitizeAttempts(attempts) });
 });
-app.get("/jobs", auth3, async (c) => {
+app.get("/jobs", auth4, async (c) => {
   return c.json(await listJobs(c.get("user").id));
 });
-app.get("/history", auth3, async (c) => {
+app.get("/history", auth4, async (c) => {
   const userId = c.get("user").id;
   const [jobs, events] = await Promise.all([
     listJobs(userId),
@@ -40585,7 +42435,7 @@ app.get("/history", auth3, async (c) => {
   const rows = [...jobRows, ...eventRows].sort((a, b) => String(b.ts).localeCompare(String(a.ts)));
   return c.json(rows.slice(0, 100));
 });
-app.get("/ledger", auth3, async (c) => {
+app.get("/ledger", auth4, async (c) => {
   return c.json(await getLedger(c.get("user").id, 100));
 });
 app.post("/admin/users", adminAuth, async (c) => {
@@ -40614,7 +42464,7 @@ app.post("/admin/backfill-signup-credits", adminAuth, async (c) => {
     retired: true
   });
 });
-app.post("/extract-url", auth3, async (c) => {
+app.post("/extract-url", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const allowLocalRequest = permitsLocalApiRequest(c.req.raw);
   const bodyResult = (allowLocalRequest ? ExtractUrlLocalBodySchema : ExtractUrlBodySchema).safeParse(raw);
@@ -40750,7 +42600,7 @@ app.post("/extract-url", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.post("/diff-page", auth3, async (c) => {
+app.post("/diff-page", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const allowLocalRequest = permitsLocalApiRequest(c.req.raw);
   const bodyResult = (allowLocalRequest ? DiffPageLocalBodySchema : DiffPageBodySchema).safeParse(raw);
@@ -40837,7 +42687,7 @@ app.post("/diff-page", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.post("/archive/read", auth3, async (c) => {
+app.post("/archive/read", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = ArchiveReadBodySchema.safeParse(raw);
   if (!bodyResult.success) {
@@ -40912,7 +42762,7 @@ app.post("/archive/read", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.post("/map-urls", auth3, async (c) => {
+app.post("/map-urls", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = MapUrlsBodySchema.safeParse(raw);
   if (!bodyResult.success) return c.json({ error: bodyResult.error.issues[0]?.message ?? "Invalid request" }, 400);
@@ -40961,7 +42811,7 @@ app.post("/map-urls", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.post("/wayback/snapshots", auth3, async (c) => {
+app.post("/wayback/snapshots", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = WaybackInventoryBodySchema.safeParse(raw);
   if (!bodyResult.success) return c.json({ error: bodyResult.error.issues[0]?.message ?? "Invalid request" }, 400);
@@ -41031,7 +42881,7 @@ app.post("/wayback/snapshots", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.post("/extract-site", auth3, async (c) => {
+app.post("/extract-site", auth4, async (c) => {
   const raw = await c.req.json().catch(() => ({}));
   const bodyResult = ExtractSiteBodySchema.safeParse(raw);
   if (!bodyResult.success) return c.json({ error: bodyResult.error.issues[0]?.message ?? "Invalid request" }, 400);
@@ -41254,7 +43104,7 @@ app.post("/extract-site", auth3, async (c) => {
     await releaseConcurrencyGate(gate.lockId);
   }
 });
-app.get("/extract-site/status/:id", auth3, async (c) => {
+app.get("/extract-site/status/:id", auth4, async (c) => {
   const user = c.get("user");
   const job = await getExtractJob(c.req.param("id"));
   if (!job || job.userId !== user.id) return c.json({ error: "Job not found" }, 404);
@@ -41288,9 +43138,9 @@ app.post("/billing/concurrency/checkout", requireAllowedOrigin, sessionAuth, asy
   try {
     const user = c.get("sessionUser");
     if (user.concurrency_stripe_sub_id) return c.json({ error: "Already subscribed \u2014 cancel existing slot first to change." }, 409);
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     let customerId = user.stripe_customer_id;
     if (!customerId) {
       const customer = await stripeClient.customers.create({ email: user.email });
@@ -41352,9 +43202,9 @@ app.post("/billing/subscribe", requireAllowedOrigin, sessionAuth, async (c) => {
         requested_plan: getSubscriptionPlanView(tier.tier)
       }, 409);
     }
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     let customerId = user.stripe_customer_id;
     if (!customerId) {
       const customer = await stripeClient.customers.create({ email: user.email });
@@ -41415,9 +43265,9 @@ app.post("/billing/portal", requireAllowedOrigin, sessionAuth, async (c) => {
   try {
     const user = c.get("sessionUser");
     if (!user.stripe_customer_id) return c.json({ error: "No billing account yet \u2014 subscribe first." }, 409);
-    const secret2 = requireStripeSecret();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = requireStripeSecret();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     const session = await stripeClient.billingPortal.sessions.create({
       customer: user.stripe_customer_id,
       return_url: `${appOrigin()}/billing`
@@ -41429,7 +43279,7 @@ app.post("/billing/portal", requireAllowedOrigin, sessionAuth, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.post("/billing/concurrency/terminal-checkout", auth3, async (c) => {
+app.post("/billing/concurrency/terminal-checkout", auth4, async (c) => {
   try {
     const user = c.get("user");
     const upgrade = concurrencySlotBillingInfo();
@@ -41445,9 +43295,9 @@ app.post("/billing/concurrency/terminal-checkout", auth3, async (c) => {
         }
       }, 409);
     }
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     let customerId = user.stripe_customer_id;
     if (!customerId) {
       const customer = await stripeClient.customers.create({ email: user.email });
@@ -41483,7 +43333,7 @@ app.post("/billing/concurrency/terminal-checkout", auth3, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app.post("/billing/subscribe/terminal-checkout", auth3, async (c) => {
+app.post("/billing/subscribe/terminal-checkout", auth4, async (c) => {
   try {
     const user = c.get("user");
     const raw = await c.req.json().catch(() => ({}));
@@ -41499,9 +43349,9 @@ app.post("/billing/subscribe/terminal-checkout", auth3, async (c) => {
         requested_plan: getSubscriptionPlanView(tier.tier)
       }, 409);
     }
-    const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
-    if (!secret2) return c.json({ error: "Stripe is not configured." }, 503);
-    const stripeClient = new Stripe2(secret2, { apiVersion: STRIPE_API_VERSION });
+    const secret = process.env.STRIPE_SECRET_KEY?.trim();
+    if (!secret) return c.json({ error: "Stripe is not configured." }, 503);
+    const stripeClient = new Stripe2(secret, { apiVersion: STRIPE_API_VERSION });
     let customerId = user.stripe_customer_id;
     if (!customerId) {
       const customer = await stripeClient.customers.create({ email: user.email });
@@ -41585,7 +43435,7 @@ app.post("/billing/concurrency/cancel", requireAllowedOrigin, sessionAuth, async
   await setConcurrencySubId(user.id, null);
   return c.json({ ok: true, extra_concurrency_slots: nextSlots, concurrency_limit: 1 + nextSlots });
 });
-app.get("/billing/balance", auth3, async (c) => {
+app.get("/billing/balance", auth4, async (c) => {
   const user = c.get("user");
   const balanceMc = user.balance_mc;
   const ledger = await getLedger(user.id, 20);
@@ -41597,15 +43447,15 @@ app.get("/billing/balance", auth3, async (c) => {
     ledger
   });
 });
-app.get("/billing/summary", auth3, billingSummaryHandler);
-app.get("/billing/connected-usage/history", auth3, async (c) => {
+app.get("/billing/summary", auth4, billingSummaryHandler);
+app.get("/billing/connected-usage/history", auth4, async (c) => {
   return c.json({
     ok: true,
     ratePolicy: CONNECTED_USAGE_RATE_POLICY,
     receipts: await listConnectedUsageHistory(c.get("user").id, 100)
   });
 });
-app.post("/billing/credits", auth3, async (c) => {
+app.post("/billing/credits", auth4, async (c) => {
   const user = c.get("user");
   const balanceMc = user.balance_mc;
   const body = await c.req.json().catch(() => ({}));
@@ -41637,14 +43487,14 @@ app.post("/billing/credits", auth3, async (c) => {
   });
 });
 app.get("/cron/tick", async (c) => {
-  const secret2 = c.req.header("authorization");
-  if (!process.env.CRON_SECRET || secret2 !== `Bearer ${process.env.CRON_SECRET}`) {
+  const secret = c.req.header("authorization");
+  if (!process.env.CRON_SECRET || secret !== `Bearer ${process.env.CRON_SECRET}`) {
     return c.json({ error: "Unauthorized" }, 401);
   }
-  const { drainQueue } = await import("./worker-3QX7LG62.js");
+  const { drainQueue } = await import("./worker-4MHZS3OB.js");
   const budget = { maxJobs: 10, deadlineMs: Date.now() + 28e4 };
   const workflowDispatchResult = await dispatchDueWorkflowSchedules(`${new URL(c.req.url).protocol}//${new URL(c.req.url).host}`);
-  const [results, sweepResult, reapResult, expiredResult, blobCleanup, connectedDataArtifactCleanup, connectedAccountBilling, directoryWorkflowDispatch, directoryWorkflowReconciliation, directoryArtifactCleanup, siteExtractArtifactCleanup, siteExtractRedispatch, siteExtractReconciliation, paaHarvestRedispatch, paaHarvestReconciliation, localSourcebookRedispatch] = await Promise.all([
+  const [results, sweepResult, reapResult, expiredResult, blobCleanup, connectedDataArtifactCleanup, connectedAccountBilling, directoryWorkflowDispatch, directoryWorkflowReconciliation, directoryArtifactCleanup, siteExtractArtifactCleanup, siteExtractRedispatch, siteExtractReconciliation, paaHarvestRedispatch, paaHarvestReconciliation, localSourcebookRedispatch, analyticsRollup, analyticsFormDelivery] = await Promise.all([
     drainQueue(budget),
     runMonthlyRefreshSweep(),
     reapIdleBrowserSessions(120).catch(() => ({ reaped: 0 })),
@@ -41660,7 +43510,9 @@ app.get("/cron/tick", async (c) => {
     reconcileSiteExtractSettlements(25).catch(() => ({ checked: 0, settled: 0, failed: 0 })),
     redispatchPendingPaaHarvests(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 })),
     reconcilePaaHarvestSettlements(25).catch(() => ({ checked: 0, staleFailed: 0, settled: 0, failed: 0 })),
-    redispatchQueuedLocalSourcebookAcquisitions(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 }))
+    redispatchQueuedLocalSourcebookAcquisitions(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 })),
+    refreshAnalyticsDailyRollupsIfDue().catch(() => ({ status: "failed", rows: 0 })),
+    deliverPendingAnalyticsForms(10).catch(() => ({ claimed: 0, delivered: 0, deferred: 0 }))
   ]);
   return c.json({
     drained: results.length,
@@ -41680,12 +43532,14 @@ app.get("/cron/tick", async (c) => {
     paaHarvestRedispatch,
     paaHarvestReconciliation,
     localSourcebookRedispatch,
+    analyticsRollup,
+    analyticsFormDelivery,
     workflowDispatch: workflowDispatchResult
   });
 });
 app.post("/api/internal/extract-refinalize/:id", async (c) => {
-  const secret2 = c.req.header("authorization");
-  if (!process.env.CRON_SECRET || secret2 !== `Bearer ${process.env.CRON_SECRET}`) {
+  const secret = c.req.header("authorization");
+  if (!process.env.CRON_SECRET || secret !== `Bearer ${process.env.CRON_SECRET}`) {
     return c.json({ error: "Unauthorized" }, 401);
   }
   const jobId2 = c.req.param("id");
@@ -41696,8 +43550,8 @@ app.post("/api/internal/extract-refinalize/:id", async (c) => {
     finishExtractJob: finishExtractJob2,
     terminalExtractJobStatus: terminalExtractJobStatus2,
     extractJobLimitInfo: extractJobLimitInfo2
-  } = await import("./site-extract-repository-UULQAGO4.js");
-  const { assembleExtractArtifacts } = await import("./extract-bundle-DXWWQER6.js");
+  } = await import("./site-extract-repository-STNOI5OH.js");
+  const { assembleExtractArtifacts } = await import("./extract-bundle-2HONVC5T.js");
   const existing = await getExtractJob2(jobId2);
   if (!existing) return c.json({ error: "job not found" }, 404);
   if (existing.status !== "failed") {
@@ -41724,7 +43578,7 @@ app.post("/api/internal/extract-refinalize/:id", async (c) => {
   if (!updated) return c.json({ error: "job state changed during re-finalization" }, 409);
   let settlement = "already_settled_or_refunded";
   if (job.billedMc == null && job.userId != null) {
-    const { settleExtractJob: settleExtractJob3, countSuccessfulPages: countSuccessfulPages2 } = await import("./site-extract-repository-UULQAGO4.js");
+    const { settleExtractJob: settleExtractJob3, countSuccessfulPages: countSuccessfulPages2 } = await import("./site-extract-repository-STNOI5OH.js");
     const heldMc = Number(job.options.heldMc ?? 0);
     const successful = await countSuccessfulPages2(jobId2);
     const usedMc = Math.min(successful * MC_COSTS.page_scrape, heldMc);
@@ -41775,6 +43629,7 @@ app.route("/resend", resendInboundApp);
 app.route("/workshops", workshopRegistrationApp);
 app.route("/editorial-reading-room", editorialReadingRoomApp);
 app.route("/commons", commonsApp);
+app.route("/analytics", analyticsApp);
 app.route("/", scheduledResultApp);
 app.route("/public", publicScheduledResultApp);
 app.route("/api/internal/scheduled-artifacts", scheduledArtifactInternalApp);
@@ -41908,4 +43763,4 @@ app.get("/blog/:slug/", (c) => {
 export {
   app
 };
-//# sourceMappingURL=server-OHMZJRSB.js.map
+//# sourceMappingURL=server-EVTCL3KB.js.map