mcp-scraper 0.48.0 → 0.49.0

package/dist/bin/api-server.cjs

@@ -41371,7 +41371,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.48.0";
+    PACKAGE_VERSION = "0.49.0";
   }
 });
 
@@ -41429,6 +41429,8 @@ seam is noted so you can chain them.
   JSON-LD, media, citations, source metadata, related entities, trails, and saved account filters.
 - Read one published entity -> **commons_get_entity**. It returns the Wikidata-style backend fields,
   JSON-LD, source provenance, media, ledger, and the Wikipedia-style page projection.
+- Read its machine-verifiable governed relationships -> **commons_get_entity_linkset**. It returns the
+  RFC 9264 linkset projection; do not infer claim status from loose See Also labels.
 - List unresolved See Also concepts -> **commons_list_needs_links**. Use it to find concepts that appear
   in public See Also sections but do not yet have a Commons entity ID or /wiki/ slug.
 - Plan a new or edited entity -> **commons_prepare_entity**. This is the Commons equivalent of
@@ -42565,7 +42567,7 @@ var init_contracts = __esm({
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod42, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
+var import_zod42, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
@@ -42870,6 +42872,9 @@ var init_mcp_tool_schemas = __esm({
       idOrSlug: import_zod42.z.string().trim().min(1).max(180).describe("Transparent Public Wiki entity id such as TPW-Q... or a public /wiki/ slug."),
       includeWikiPage: import_zod42.z.boolean().default(true).describe("Include the Wikipedia-style page projection used by transparent-commons.cc/wiki/.")
     };
+    CommonsGetEntityLinksetInputSchema = {
+      idOrSlug: import_zod42.z.string().trim().min(1).max(180).describe("Transparent Commons TPW-Q entity id or /wiki/ slug whose governed RFC 9264 linkset should be read.")
+    };
     CommonsFeaturedImageInputSchema = import_zod42.z.object({
       url: import_zod42.z.string().url().describe("Required public image URL for a publishable entity. Use extract_url includeFeaturedImage or preserved media when available."),
       alt: import_zod42.z.string().trim().max(500).optional(),
@@ -42922,6 +42927,27 @@ var init_mcp_tool_schemas = __esm({
       imageUrl: import_zod42.z.string().trim().max(2e3).optional().describe("Optional preview image for hover cards when available."),
       needsLink: import_zod42.z.boolean().default(false).describe("Set true when the concept belongs in See Also but no existing Commons entity/page exists yet. The backend exposes these records through commons_list_needs_links.")
     }).strict();
+    CommonsClaimInputSchema = import_zod42.z.object({
+      predicate: import_zod42.z.string().trim().min(1).max(500).describe("Registered link relation such as related, describedby, license, or type; alternatively an absolute HTTPS relation URI from a published vocabulary."),
+      predicateLabel: import_zod42.z.string().trim().max(160).optional().describe("Human-readable label for display and review. It does not replace the machine predicate."),
+      objectEntityId: import_zod42.z.string().trim().regex(/^TPW-Q[A-Za-z0-9._-]+$/).max(80).optional().describe("Existing Transparent Commons entity target. Use exactly one of objectEntityId or objectUrl."),
+      objectUrl: import_zod42.z.string().url().refine((value) => value.startsWith("https://"), "objectUrl must use HTTPS.").optional().describe("External or third-party target. Use exactly one of objectUrl or objectEntityId."),
+      title: import_zod42.z.string().trim().max(500).optional(),
+      mediaType: import_zod42.z.string().trim().max(160).optional().describe("Optional RFC link target media type."),
+      hreflang: import_zod42.z.array(import_zod42.z.string().trim().min(1).max(80)).max(20).optional().describe("Optional repeatable RFC link target language hints."),
+      qualifiers: import_zod42.z.record(import_zod42.z.string().max(120), import_zod42.z.union([import_zod42.z.string(), import_zod42.z.number(), import_zod42.z.boolean(), import_zod42.z.null()])).optional(),
+      references: import_zod42.z.array(CommonsCitationInputSchema).max(50).optional().describe("Evidence supporting the relationship assertion."),
+      rank: import_zod42.z.enum(["preferred", "normal", "deprecated"]).default("normal"),
+      confidence: import_zod42.z.number().min(0).max(1).default(1),
+      confidenceReason: import_zod42.z.string().trim().max(1e3).optional(),
+      disputeState: import_zod42.z.enum(["undisputed", "attributed", "disputed", "contested", "needs_review", "deprecated"]).default("undisputed"),
+      validFrom: import_zod42.z.string().trim().max(80).optional(),
+      validTo: import_zod42.z.string().trim().max(80).optional(),
+      asOf: import_zod42.z.string().trim().max(80).optional(),
+      sourceFamily: import_zod42.z.enum(["first_party", "partner", "independent", "community", "unknown"]).default("unknown")
+    }).strict().refine((claim) => Boolean(claim.objectEntityId) !== Boolean(claim.objectUrl), {
+      message: "Provide exactly one of objectEntityId or objectUrl."
+    });
     CommonsPrepareEntityInputSchema = {
       title: import_zod42.z.string().trim().min(1).max(180).describe("Candidate public page title. Used to derive slug, choose a profile, and search duplicate entities."),
       description: import_zod42.z.string().trim().max(600).optional().describe("Optional candidate summary. Include when known so the prepare pass can route and validate the article shape."),
@@ -42961,6 +42987,7 @@ var init_mcp_tool_schemas = __esm({
         url: import_zod42.z.string().url().optional(),
         description: import_zod42.z.string().trim().max(300).optional()
       }).strict()).max(200).optional().describe("Related concepts, including trails. Existing entities should use entityId."),
+      claims: import_zod42.z.array(CommonsClaimInputSchema).max(300).optional().describe("Governed relationship assertions. Supplying claims replaces the accepted claim set for this entity; omitting claims preserves it. Only approved, active, non-disputed claims project into the RFC 9264 linkset."),
       bodyMarkdown: import_zod42.z.string().max(5e5).optional().describe("Structured encyclopedia body in neutral Markdown, not a raw scrape dump or blog essay. Use H2 for entity-profile sections and H3/H4/H5 for subtopics; every heading appears in the public page menu. Call commons_prepare_entity first for the live entity profile and commons_validate_entity before submit. Profile sections are adaptive: include History, Pricing, Reception, Timeline, Classification, or similar sections only when source evidence supports them; omit unsupported sections instead of adding empty/filler headings. Apply NPOV, verifiability, and no-original-research rules; self-published sources can support only uncontroversial source-owned facts."),
       contentSections: import_zod42.z.array(import_zod42.z.object({
         id: import_zod42.z.string().trim().max(180).optional(),
@@ -46230,6 +46257,19 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
       openWorldHint: false
     }
   }, async (input) => executor.commonsGetEntity(input));
+  server.registerTool("commons_get_entity_linkset", {
+    title: "Transparent Commons RFC 9264 Linkset",
+    description: "Read the governed RFC 9264 application/linkset+json projection for one published Transparent Commons entity. The anchor is the canonical /wiki/ page; only approved, active, non-disputed claims are included, while third-party targets remain explicit HTTPS links.",
+    inputSchema: CommonsGetEntityLinksetInputSchema,
+    outputSchema: recordOutputSchema("commons_get_entity_linkset", CommonsGenericOutputSchema),
+    annotations: {
+      title: "Transparent Commons RFC 9264 Linkset",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  }, async (input) => executor.commonsGetEntityLinkset(input));
   server.registerTool("commons_list_needs_links", {
     title: "Transparent Commons Needs-Link Backlog",
     description: "List unresolved See Also concepts from published Transparent Commons pages. Use this after search/lookup when an agent needs to grow the graph: each result names a concept that appears in See Also but does not yet have a resolved Commons entityId or /wiki/ slug. This is platform Commons graph data, not personal Memory storage.",
@@ -47299,6 +47339,9 @@ var init_http_mcp_tool_executor = __esm({
           return result;
         }
       }
+      commonsGetEntityLinkset(input) {
+        return this.getJson(`/commons/entities/${encodeURIComponent(input.idOrSlug)}/linkset?envelope=true`);
+      }
       commonsPrepareEntity(input) {
         return this.call("/commons/entities/prepare", input);
       }
@@ -59404,6 +59447,189 @@ var init_editorial_reading_room_routes = __esm({
   }
 });
 
+// src/api/commons-linksets.ts
+function normalizeCommonsClaims(input) {
+  if (input === void 0) return void 0;
+  if (!Array.isArray(input)) throw new Error("claims must be an array.");
+  if (input.length > 300) throw new Error("claims must contain no more than 300 assertions.");
+  const seen = /* @__PURE__ */ new Set();
+  return input.map((claim, index) => {
+    const predicate = String(claim.predicate ?? "").trim();
+    if (!isSupportedPredicate(predicate)) {
+      throw new Error(`claims[${index}].predicate must be a supported registered relation or an absolute HTTPS relation URI.`);
+    }
+    const objectEntityId = optionalText(claim.objectEntityId, 80);
+    const objectUrl = optionalHttpsUrl(claim.objectUrl, `claims[${index}].objectUrl`);
+    if ((objectEntityId ? 1 : 0) + (objectUrl ? 1 : 0) !== 1) {
+      throw new Error(`claims[${index}] must provide exactly one of objectEntityId or objectUrl.`);
+    }
+    if (objectEntityId && !/^TPW-Q[A-Za-z0-9._-]+$/.test(objectEntityId)) {
+      throw new Error(`claims[${index}].objectEntityId must be a Transparent Commons TPW-Q identifier.`);
+    }
+    const confidence = claim.confidence ?? 1;
+    if (!Number.isFinite(confidence) || confidence < 0 || confidence > 1) {
+      throw new Error(`claims[${index}].confidence must be between 0 and 1.`);
+    }
+    const key = `${predicate}\0${objectEntityId ?? objectUrl}`;
+    if (seen.has(key)) throw new Error(`claims[${index}] duplicates another predicate and object pair.`);
+    seen.add(key);
+    return {
+      predicate,
+      predicateLabel: optionalText(claim.predicateLabel, 160),
+      objectEntityId,
+      objectUrl,
+      title: optionalText(claim.title, 500),
+      mediaType: optionalText(claim.mediaType, 160),
+      hreflang: normalizeHreflang(claim.hreflang),
+      qualifiers: normalizeScalarRecord(claim.qualifiers),
+      references: normalizeReferences(claim.references),
+      rank: claim.rank ?? "normal",
+      confidence,
+      confidenceReason: optionalText(claim.confidenceReason, 1e3),
+      disputeState: claim.disputeState ?? "undisputed",
+      validFrom: optionalDate(claim.validFrom, `claims[${index}].validFrom`),
+      validTo: optionalDate(claim.validTo, `claims[${index}].validTo`),
+      asOf: optionalDate(claim.asOf, `claims[${index}].asOf`),
+      sourceFamily: claim.sourceFamily ?? "unknown"
+    };
+  });
+}
+function claimIsPublic(claim, now = /* @__PURE__ */ new Date()) {
+  if (claim.reviewState !== "approved" || claim.rank === "deprecated") return false;
+  if (!["undisputed", "attributed"].includes(claim.disputeState ?? "undisputed")) return false;
+  const timestamp2 = now.getTime();
+  if (claim.validFrom && Date.parse(claim.validFrom) > timestamp2) return false;
+  if (claim.validTo && Date.parse(claim.validTo) < timestamp2) return false;
+  return true;
+}
+function buildCommonsLinkset(entity, claims) {
+  const publicUrl = `${commonsPublicWikiBaseUrl()}/wiki/${encodeURIComponent(entity.slug)}`;
+  const linksetUrl = commonsLinksetUrl(entity.id);
+  const context = { anchor: publicUrl };
+  const publicClaims = claims.filter((claim) => claimIsPublic(claim)).sort((a, b) => a.predicate.localeCompare(b.predicate) || a.href.localeCompare(b.href) || a.id.localeCompare(b.id));
+  for (const claim of publicClaims) {
+    const targets = context[claim.predicate] ?? [];
+    const target = { href: claim.href };
+    if (claim.mediaType) target.type = claim.mediaType;
+    if (claim.hreflang) target.hreflang = claim.hreflang;
+    if (claim.title) target.title = claim.title;
+    targets.push(target);
+    context[claim.predicate] = targets;
+  }
+  const document2 = { linkset: [context] };
+  const etag = `"${(0, import_node_crypto34.createHash)("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
+  return { document: document2, etag, publicUrl, linksetUrl, profile: COMMONS_RELATIONSHIP_PROFILE };
+}
+function commonsLinksetDiscoveryHeader(idOrSlug) {
+  const url = commonsLinksetUrl(idOrSlug);
+  return `<${url}>; rel="linkset"; type="${COMMONS_LINKSET_MEDIA_TYPE}"; profile="${COMMONS_RELATIONSHIP_PROFILE}"`;
+}
+function commonsLinksetUrl(idOrSlug) {
+  const base = (process.env.APP_URL?.trim() || "https://mcpscraper.dev").replace(/\/+$/, "");
+  return `${base}/commons/entities/${encodeURIComponent(idOrSlug)}/linkset`;
+}
+function commonsClaimIdentityKey(claim) {
+  return `${claim.predicate}\0${claim.objectEntityId ?? claim.objectUrl ?? ""}`;
+}
+function commonsPublicWikiBaseUrl() {
+  return (process.env.TRANSPARENT_COMMONS_PUBLIC_BASE_URL?.trim() || "https://transparent-commons.cc").replace(/\/+$/, "");
+}
+function isSupportedPredicate(value) {
+  if (REGISTERED_RELATIONS.has(value)) return true;
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && Boolean(url.hostname);
+  } catch {
+    return false;
+  }
+}
+function optionalText(value, max) {
+  const text2 = String(value ?? "").trim();
+  return text2 ? text2.slice(0, max) : void 0;
+}
+function optionalHttpsUrl(value, field) {
+  const text2 = optionalText(value, 2e3);
+  if (!text2) return void 0;
+  try {
+    const url = new URL(text2);
+    if (url.protocol !== "https:") throw new Error();
+    url.hash = "";
+    return url.href;
+  } catch {
+    throw new Error(`${field} must be an absolute HTTPS URL.`);
+  }
+}
+function optionalDate(value, field) {
+  const text2 = optionalText(value, 80);
+  if (!text2) return void 0;
+  const timestamp2 = Date.parse(text2);
+  if (!Number.isFinite(timestamp2)) throw new Error(`${field} must be an ISO-compatible date.`);
+  return new Date(timestamp2).toISOString();
+}
+function normalizeScalarRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  return Object.fromEntries(Object.entries(value).slice(0, 50).map(([key, item]) => [key.slice(0, 120), item]));
+}
+function normalizeReferences(value) {
+  if (!Array.isArray(value)) return void 0;
+  return value.slice(0, 50).map((reference) => ({
+    title: String(reference.title ?? "").trim().slice(0, 240),
+    url: optionalHttpsUrl(reference.url, "claim reference URL"),
+    source: optionalText(reference.source, 240),
+    note: optionalText(reference.note, 1e3),
+    accessedAt: optionalDate(reference.accessedAt, "claim reference accessedAt")
+  })).filter((reference) => reference.title);
+}
+function normalizeHreflang(value) {
+  if (!Array.isArray(value)) return void 0;
+  const languages = [...new Set(value.map((item) => optionalText(item, 80)).filter((item) => Boolean(item)))];
+  return languages.length ? languages : void 0;
+}
+var import_node_crypto34, COMMONS_LINKSET_MEDIA_TYPE, COMMONS_RELATIONSHIP_PROFILE, REGISTERED_RELATIONS;
+var init_commons_linksets = __esm({
+  "src/api/commons-linksets.ts"() {
+    "use strict";
+    import_node_crypto34 = require("crypto");
+    COMMONS_LINKSET_MEDIA_TYPE = "application/linkset+json";
+    COMMONS_RELATIONSHIP_PROFILE = "https://mcpscraper.dev/commons/profiles/relationships/v1";
+    REGISTERED_RELATIONS = /* @__PURE__ */ new Set([
+      "about",
+      "alternate",
+      "author",
+      "canonical",
+      "cite-as",
+      "collection",
+      "contents",
+      "copyright",
+      "describedby",
+      "describes",
+      "first",
+      "glossary",
+      "help",
+      "icon",
+      "index",
+      "item",
+      "last",
+      "latest-version",
+      "license",
+      "memento",
+      "next",
+      "original",
+      "predecessor-version",
+      "prev",
+      "related",
+      "replies",
+      "service-desc",
+      "service-doc",
+      "successor-version",
+      "terms-of-service",
+      "type",
+      "via",
+      "version-history"
+    ]);
+  }
+});
+
 // src/api/commons-repository.ts
 async function ensureCommonsSchema() {
   if (schemaReady2) return;
@@ -59453,6 +59679,42 @@ async function ensureCommonsSchema() {
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_status_updated ON commons_entities(status, updated_at DESC)`, args: [] },
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_type_updated ON commons_entities(entity_type, updated_at DESC)`, args: [] },
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_source_domain ON commons_entities(source_json)`, args: [] },
+    {
+      sql: `
+        CREATE TABLE IF NOT EXISTS commons_claims (
+          id TEXT PRIMARY KEY,
+          subject_entity_id TEXT NOT NULL REFERENCES commons_entities(id),
+          predicate TEXT NOT NULL,
+          predicate_label TEXT,
+          object_entity_id TEXT,
+          object_url TEXT,
+          title TEXT,
+          media_type TEXT,
+          hreflang TEXT,
+          qualifiers_json TEXT NOT NULL DEFAULT '{}',
+          references_json TEXT NOT NULL DEFAULT '[]',
+          rank TEXT NOT NULL DEFAULT 'normal',
+          confidence REAL NOT NULL DEFAULT 1,
+          confidence_reason TEXT,
+          dispute_state TEXT NOT NULL DEFAULT 'undisputed',
+          valid_from TEXT,
+          valid_to TEXT,
+          as_of TEXT,
+          source_family TEXT NOT NULL DEFAULT 'unknown',
+          review_state TEXT NOT NULL DEFAULT 'approved',
+          proposal_id TEXT NOT NULL REFERENCES commons_proposals(id),
+          created_by_user_id INTEGER,
+          updated_by_user_id INTEGER,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          CHECK ((object_entity_id IS NOT NULL) != (object_url IS NOT NULL)),
+          UNIQUE(subject_entity_id, predicate, object_entity_id, object_url)
+        )
+      `,
+      args: []
+    },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_claims_subject_predicate ON commons_claims(subject_entity_id, predicate)`, args: [] },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_claims_object_entity ON commons_claims(object_entity_id)`, args: [] },
     {
       sql: `
         CREATE TABLE IF NOT EXISTS commons_proposals (
@@ -59613,8 +59875,15 @@ async function searchCommonsEntities(filters = {}, userId) {
     args.push(jsonLikeValue(keyword));
   }
   if (mergedFilters.relatedEntityId) {
-    clauses.push("related_entities_json LIKE ?");
-    args.push(jsonLikeValue(mergedFilters.relatedEntityId));
+    clauses.push(`(
+      related_entities_json LIKE ?
+      OR EXISTS (
+        SELECT 1 FROM commons_claims
+        WHERE commons_claims.subject_entity_id = commons_entities.id
+          AND commons_claims.object_entity_id = ?
+      )
+    )`);
+    args.push(jsonLikeValue(mergedFilters.relatedEntityId), mergedFilters.relatedEntityId);
   }
   if (mergedFilters.trailId) {
     clauses.push("related_entities_json LIKE ?");
@@ -59636,8 +59905,16 @@ async function searchCommonsEntities(filters = {}, userId) {
   }
   const terms = tokenize(mergedFilters.query);
   for (const term of terms) {
-    clauses.push("search_text LIKE ?");
-    args.push(`%${escapeLike(term)}%`);
+    clauses.push(`(
+      search_text LIKE ?
+      OR EXISTS (
+        SELECT 1 FROM commons_claims
+        WHERE commons_claims.subject_entity_id = commons_entities.id
+          AND (commons_claims.predicate LIKE ? OR commons_claims.predicate_label LIKE ? OR commons_claims.title LIKE ? OR commons_claims.object_url LIKE ?)
+      )
+    )`);
+    const pattern = `%${escapeLike(term)}%`;
+    args.push(pattern, pattern, pattern, pattern, pattern);
   }
   args.push(limit, offset);
   const result = await getDb().execute({
@@ -59659,9 +59936,9 @@ async function searchCommonsEntities(filters = {}, userId) {
 }
 async function prepareCommonsEntity(input, user) {
   await ensureCommonsSchema();
-  const title = optionalText(input.title, 180) ?? "";
+  const title = optionalText2(input.title, 180) ?? "";
   const slug2 = normalizeSlug(input.slug || title);
-  const schemaOrgType = optionalText(input.schemaOrgType, 80);
+  const schemaOrgType = optionalText2(input.schemaOrgType, 80);
   const contract = commonsEntityProfileFor(input.entityType, schemaOrgType);
   const entityType = contract.entityType;
   const bodyMarkdown = safeCandidateBody(input.bodyMarkdown, input.contentSections);
@@ -59719,8 +59996,8 @@ async function validateCommonsEntity(input, user) {
   await ensureCommonsSchema();
   const errors = [];
   const warnings = [];
-  const title = optionalText(input.title, 180);
-  const description = optionalText(input.description, 600);
+  const title = optionalText2(input.title, 180);
+  const description = optionalText2(input.description, 600);
   const slug2 = normalizeSlug(input.slug || title || "");
   const contract = commonsEntityProfileFor(input.entityType, input.seo?.schemaOrgType);
   const source = normalizeSource(input.source);
@@ -59735,6 +60012,11 @@ async function validateCommonsEntity(input, user) {
     maxCandidates: 8
   });
   const existing = slug2 || input.entityId ? await findEntityBySlugOrIdAnyStatus(slug2, input.entityId) : null;
+  try {
+    normalizeCommonsClaims(input.claims);
+  } catch (error) {
+    errors.push(error instanceof Error ? error.message : "Claims are invalid.");
+  }
   if (!title || title.length < 3) errors.push("title must be at least 3 characters.");
   if (!description || description.length < 8) errors.push("description must be at least 8 characters.");
   if (!slug2) errors.push("A Commons entity needs a URL slug.");
@@ -59824,9 +60106,10 @@ async function submitCommonsEntity(input, user) {
     };
   }
   const existing = await findEntityBySlugOrIdAnyStatus(normalized.slug, normalized.entityId);
+  const existingClaims = existing && normalized.claims !== void 0 ? await getCommonsClaimsByEntityId(existing.id) : [];
   const safety = evaluatePublishSafety(normalized, existing);
   const shouldApply = safety.safe && normalized.reviewPolicy !== "always_review";
-  const proposalId = `commons-proposal-${(0, import_node_crypto34.randomUUID)()}`;
+  const proposalId = `commons-proposal-${(0, import_node_crypto35.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const entityId = existing?.id ?? normalized.entityId ?? allocateEntityId();
   const proposalStatus = shouldApply ? "accepted" : "pending_review";
@@ -59868,6 +60151,10 @@ async function submitCommonsEntity(input, user) {
   ];
   if (nextEntity) {
     batch.push(entityUpsertStatement(nextEntity, existing));
+    if (normalized.claims !== void 0) {
+      batch.push({ sql: "DELETE FROM commons_claims WHERE subject_entity_id = ?", args: [nextEntity.id] });
+      batch.push(...claimInsertStatements(normalized.claims, existingClaims, nextEntity.id, proposalId, Number(user.id), now));
+    }
     batch.push(...commonsIndexStatements(nextEntity, now));
     batch.push({
       sql: `
@@ -59877,17 +60164,26 @@ async function submitCommonsEntity(input, user) {
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       `,
       args: [
-        `commons-ledger-${(0, import_node_crypto34.randomUUID)()}`,
+        `commons-ledger-${(0, import_node_crypto35.randomUUID)()}`,
         nextEntity.id,
         proposalId,
         user.id,
         actorLabel(input, user),
         normalized.actorChannel,
         existing ? "entity_updated" : "entity_created",
-        JSON.stringify(changedFieldPaths(existing, nextEntity)),
+        JSON.stringify([
+          ...changedFieldPaths(existing, nextEntity),
+          ...normalized.claims !== void 0 ? ["claims"] : []
+        ]),
         normalized.changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity."),
-        existing ? JSON.stringify(entityLedgerSnapshot(existing)) : null,
-        JSON.stringify(entityLedgerSnapshot(nextEntity)),
+        existing ? JSON.stringify({
+          ...entityLedgerSnapshot(existing),
+          ...normalized.claims !== void 0 ? { claims: existingClaims } : {}
+        }) : null,
+        JSON.stringify({
+          ...entityLedgerSnapshot(nextEntity),
+          ...normalized.claims !== void 0 ? { claims: normalized.claims } : {}
+        }),
         now
       ]
     });
@@ -59938,17 +60234,41 @@ async function getCommonsEntityLedger(idOrSlug) {
     ledger: result.rows.map((row) => rowToLedgerEntry(row))
   };
 }
+async function listCommonsClaims(idOrSlug) {
+  await ensureCommonsSchema();
+  const entity = await getCommonsEntity(idOrSlug);
+  if (!entity) return null;
+  return { entity, claims: await getCommonsClaimsByEntityId(entity.id) };
+}
+async function getCommonsEntityLinkset(idOrSlug) {
+  const result = await listCommonsClaims(idOrSlug);
+  if (!result) return null;
+  const targetIds = [...new Set(result.claims.map((claim) => claim.objectEntityId).filter((id) => Boolean(id)))];
+  const targetSlugs = /* @__PURE__ */ new Map();
+  if (targetIds.length) {
+    const targets = await getDb().execute({
+      sql: `SELECT id, slug FROM commons_entities WHERE status = 'published' AND id IN (${targetIds.map(() => "?").join(", ")})`,
+      args: targetIds
+    });
+    for (const row of targets.rows) targetSlugs.set(String(row.id), String(row.slug));
+  }
+  const resolved = result.claims.map((claim) => {
+    const href = claim.objectUrl ?? (claim.objectEntityId && targetSlugs.has(claim.objectEntityId) ? publicUrlForSlug(targetSlugs.get(claim.objectEntityId)) : null);
+    return href ? { ...claim, href } : null;
+  }).filter((claim) => claim !== null);
+  return { entity: result.entity, claims: result.claims, ...buildCommonsLinkset(result.entity, resolved) };
+}
 async function saveCommonsFilter(input, user) {
   await ensureCommonsSchema();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const name = requiredText(input.name, "name", 2, 80);
-  const description = optionalText(input.description, 500);
+  const description = optionalText2(input.description, 500);
   const filter = sanitizeSearchFilters(input.filter);
   const existing = await getDb().execute({
     sql: "SELECT id FROM commons_saved_filters WHERE user_id = ? AND name = ? LIMIT 1",
     args: [user.id, name]
   });
-  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto34.randomUUID)()}`;
+  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto35.randomUUID)()}`;
   await getDb().execute({
     sql: `
       INSERT INTO commons_saved_filters (id, user_id, name, description, filter_json, created_at, updated_at)
@@ -60075,9 +60395,9 @@ function commonsDatabaseReport() {
       conflictBehavior: "Existing entity edits require baseRevision. Otherwise the proposal is pending_review.",
       billing: { validationCredits: 0, createCredits: LISTING_WRITE_RATE_POLICY.create.credits, editCredits: LISTING_WRITE_RATE_POLICY.edit.credits }
     },
-    searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
+    searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "relationship claims", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
     indexing: commonsIndexingPolicy(),
-    tables: ["commons_entities", "commons_proposals", "commons_ledger", "commons_saved_filters", "commons_index_documents"]
+    tables: ["commons_entities", "commons_claims", "commons_proposals", "commons_ledger", "commons_saved_filters", "commons_index_documents"]
   };
 }
 function entityToWikiPage(entity) {
@@ -60097,6 +60417,13 @@ function entityToWikiPage(entity) {
     media: entity.media,
     sections: entity.articleSections,
     metadata: {
+      linksetUrl: commonsLinksetUrl(entity.id),
+      linksetDiscovery: {
+        rel: "linkset",
+        type: COMMONS_LINKSET_MEDIA_TYPE,
+        profile: COMMONS_RELATIONSHIP_PROFILE,
+        href: commonsLinksetUrl(entity.id)
+      },
       entityType: friendlyEntityType(entity.entityType),
       disambiguationName: entity.disambiguationName,
       keywords: entity.keywords,
@@ -60253,7 +60580,7 @@ async function commonsTagVocabulary() {
       ...parseJson3(record.tags_json, []),
       ...parseJson3(record.keywords_json, [])
     ]) {
-      const cleaned = optionalText(tag, 120);
+      const cleaned = optionalText2(tag, 120);
       if (!cleaned) continue;
       counts.set(cleaned, (counts.get(cleaned) ?? 0) + 1);
     }
@@ -60263,7 +60590,7 @@ async function commonsTagVocabulary() {
 function resolveCommonsTags(candidates, vocabulary) {
   const vocabularyByKey = new Map(vocabulary.map((entry) => [entry.tag.toLowerCase(), entry]));
   return candidates.map((candidate) => {
-    const cleaned = optionalText(candidate, 120) ?? "";
+    const cleaned = optionalText2(candidate, 120) ?? "";
     const key = cleaned.toLowerCase();
     const exact = vocabularyByKey.get(key);
     if (!cleaned || cleaned.length < 2) {
@@ -60360,12 +60687,13 @@ function normalizeSubmitInput(input) {
     slug: slug2,
     entityId: normalizeEntityId(input.entityId),
     entityType: normalizeEntityType(input.entityType),
-    disambiguationName: optionalText(input.disambiguationName, 240) ?? void 0,
+    disambiguationName: optionalText2(input.disambiguationName, 240) ?? void 0,
     featuredImage: normalizeFeaturedImage(input.featuredImage),
     source: normalizeSource(input.source),
     tags: uniqueStrings(input.tags ?? []).slice(0, 24),
     keywords: uniqueStrings(input.keywords ?? []).slice(0, 50),
     relatedEntities: normalizeRelatedEntities(input.relatedEntities),
+    claims: normalizeClaimsForRepository(input.claims),
     bodyMarkdown: normalizeBody(input.bodyMarkdown, input.contentSections),
     contentSections: normalizeContentSections(input.contentSections),
     articleSections: normalizeArticleSections(input.articleSections),
@@ -60374,11 +60702,18 @@ function normalizeSubmitInput(input) {
     seo: normalizeSeo(input.seo),
     actorChannel: input.actorChannel ?? "mcp",
     actorLabel: input.actorLabel ?? "",
-    changeSummary: optionalText(input.changeSummary, 500) ?? "",
+    changeSummary: optionalText2(input.changeSummary, 500) ?? "",
     reviewPolicy: input.reviewPolicy ?? "auto_publish_if_safe",
     baseRevision: input.baseRevision
   };
 }
+function normalizeClaimsForRepository(input) {
+  try {
+    return normalizeCommonsClaims(input);
+  } catch (error) {
+    throw new CommonsRepositoryError("invalid_claims", error instanceof Error ? error.message : "Claims are invalid.");
+  }
+}
 function evaluatePublishSafety(input, existing) {
   if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish." };
   if (!input.bodyMarkdown.trim() && !input.source.originalUrl && !input.source.resolvedUrl) {
@@ -60524,6 +60859,84 @@ function entityStorageValues(entity) {
     entity.revision
   ];
 }
+function claimInsertStatements(claims, existingClaims, subjectEntityId, proposalId, userId, now) {
+  const existingByIdentity = new Map(existingClaims.map((claim) => [commonsClaimIdentityKey(claim), claim]));
+  return claims.map((claim) => {
+    const existing = existingByIdentity.get(commonsClaimIdentityKey(claim));
+    return {
+      sql: `
+        INSERT INTO commons_claims (
+          id, subject_entity_id, predicate, predicate_label, object_entity_id, object_url,
+          title, media_type, hreflang, qualifiers_json, references_json, rank, confidence,
+          confidence_reason, dispute_state, valid_from, valid_to, as_of, source_family,
+          review_state, proposal_id, created_by_user_id, updated_by_user_id, created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved', ?, ?, ?, ?, ?)
+      `,
+      args: [
+        existing?.id ?? allocateClaimId(),
+        subjectEntityId,
+        claim.predicate,
+        claim.predicateLabel ?? null,
+        claim.objectEntityId ?? null,
+        claim.objectUrl ?? null,
+        claim.title ?? null,
+        claim.mediaType ?? null,
+        claim.hreflang ? JSON.stringify(claim.hreflang) : null,
+        JSON.stringify(claim.qualifiers ?? {}),
+        JSON.stringify(claim.references ?? []),
+        claim.rank ?? "normal",
+        claim.confidence ?? 1,
+        claim.confidenceReason ?? null,
+        claim.disputeState ?? "undisputed",
+        claim.validFrom ?? null,
+        claim.validTo ?? null,
+        claim.asOf ?? null,
+        claim.sourceFamily ?? "unknown",
+        proposalId,
+        existing?.createdByUserId ?? userId,
+        userId,
+        existing?.createdAt ?? now,
+        now
+      ]
+    };
+  });
+}
+async function getCommonsClaimsByEntityId(entityId) {
+  const result = await getDb().execute({
+    sql: "SELECT * FROM commons_claims WHERE subject_entity_id = ? ORDER BY predicate ASC, object_url ASC, object_entity_id ASC, id ASC",
+    args: [entityId]
+  });
+  return result.rows.map((row) => rowToClaim(row));
+}
+function rowToClaim(row) {
+  return {
+    id: String(row.id),
+    subjectEntityId: String(row.subject_entity_id),
+    predicate: String(row.predicate),
+    predicateLabel: row.predicate_label == null ? void 0 : String(row.predicate_label),
+    objectEntityId: row.object_entity_id == null ? void 0 : String(row.object_entity_id),
+    objectUrl: row.object_url == null ? void 0 : String(row.object_url),
+    title: row.title == null ? void 0 : String(row.title),
+    mediaType: row.media_type == null ? void 0 : String(row.media_type),
+    hreflang: row.hreflang == null ? void 0 : parseJson3(row.hreflang, []),
+    qualifiers: parseJson3(row.qualifiers_json, {}),
+    references: parseJson3(row.references_json, []),
+    rank: String(row.rank),
+    confidence: Number(row.confidence),
+    confidenceReason: row.confidence_reason == null ? void 0 : String(row.confidence_reason),
+    disputeState: String(row.dispute_state),
+    validFrom: row.valid_from == null ? void 0 : String(row.valid_from),
+    validTo: row.valid_to == null ? void 0 : String(row.valid_to),
+    asOf: row.as_of == null ? void 0 : String(row.as_of),
+    sourceFamily: String(row.source_family),
+    reviewState: String(row.review_state),
+    proposalId: String(row.proposal_id),
+    createdByUserId: row.created_by_user_id == null ? null : Number(row.created_by_user_id),
+    updatedByUserId: row.updated_by_user_id == null ? null : Number(row.updated_by_user_id),
+    createdAt: String(row.created_at),
+    updatedAt: String(row.updated_at)
+  };
+}
 function commonsIndexStatements(entity, now) {
   return commonsIndexDocuments(entity, now).map((document2) => ({
     sql: `
@@ -60628,7 +61041,7 @@ function commonsIndexDocuments(entity, now) {
   return documents;
 }
 function commonsIndexDocumentId(entityId, documentType, documentKey) {
-  return `commons-index-${(0, import_node_crypto34.createHash)("sha256").update(`${entityId}
+  return `commons-index-${(0, import_node_crypto35.createHash)("sha256").update(`${entityId}
 ${documentType}
 ${documentKey}`).digest("hex").slice(0, 32)}`;
 }
@@ -60803,14 +61216,14 @@ function normalizeArticleSections(sections) {
   return {
     relatedLinks: normalizeRelatedLinks(sections?.relatedLinks),
     notes: Array.isArray(sections?.notes) ? sections.notes.map((note) => ({
-      marker: optionalText(note.marker, 20) ?? void 0,
+      marker: optionalText2(note.marker, 20) ?? void 0,
       body: requiredText(note.body, "notes.body", 1, 2e3)
     })).slice(0, 100) : [],
     citations: normalizeCitations(sections?.citations),
     externalLinks: Array.isArray(sections?.externalLinks) ? sections.externalLinks.map((link2) => ({
       title: requiredText(link2.title, "externalLinks.title", 1, 180),
       url: requiredText(link2.url, "externalLinks.url", 1, 2e3),
-      summary: optionalText(link2.summary, 300) ?? void 0
+      summary: optionalText2(link2.summary, 300) ?? void 0
     })).slice(0, 100) : [],
     categories: uniqueStrings(sections?.categories ?? []).slice(0, 50)
   };
@@ -60819,7 +61232,7 @@ function normalizeRelatedLinks(relatedLinks) {
   if (!Array.isArray(relatedLinks)) return [];
   return relatedLinks.map((link2) => {
     const title = requiredText(link2.title, "relatedLinks.title", 1, 180);
-    const url = optionalText(link2.url, 2e3);
+    const url = optionalText2(link2.url, 2e3);
     const slug2 = link2.slug ? normalizeSlug(link2.slug) : void 0;
     const entityId = normalizeEntityId(link2.entityId);
     const needsLink = link2.needsLink === true || !url && !slug2 && !entityId;
@@ -60828,9 +61241,9 @@ function normalizeRelatedLinks(relatedLinks) {
       url,
       slug: slug2,
       entityId,
-      relationship: optionalText(link2.relationship, 120) ?? void 0,
-      summary: optionalText(link2.summary, 300) ?? void 0,
-      imageUrl: optionalText(link2.imageUrl, 2e3) ?? void 0,
+      relationship: optionalText2(link2.relationship, 120) ?? void 0,
+      summary: optionalText2(link2.summary, 300) ?? void 0,
+      imageUrl: optionalText2(link2.imageUrl, 2e3) ?? void 0,
       needsLink
     };
   }).slice(0, 100);
@@ -60839,20 +61252,20 @@ function normalizeCitations(citations) {
   if (!Array.isArray(citations)) return [];
   return citations.map((citation) => ({
     title: requiredText(citation.title, "citation.title", 1, 240),
-    url: optionalText(citation.url, 2e3) ?? void 0,
-    source: optionalText(citation.source, 240) ?? void 0,
-    note: optionalText(citation.note, 1e3) ?? void 0,
-    accessedAt: optionalText(citation.accessedAt, 80) ?? void 0
+    url: optionalText2(citation.url, 2e3) ?? void 0,
+    source: optionalText2(citation.source, 240) ?? void 0,
+    note: optionalText2(citation.note, 1e3) ?? void 0,
+    accessedAt: optionalText2(citation.accessedAt, 80) ?? void 0
   })).slice(0, 300);
 }
 function normalizeFeaturedImage(image) {
   if (!image?.url) return void 0;
   return {
     url: requiredText(image.url, "featuredImage.url", 1, 2e3),
-    alt: optionalText(image.alt, 500) ?? void 0,
-    caption: optionalText(image.caption, 1e3) ?? void 0,
-    sourceUrl: optionalText(image.sourceUrl, 2e3) ?? void 0,
-    license: optionalText(image.license, 240) ?? void 0,
+    alt: optionalText2(image.alt, 500) ?? void 0,
+    caption: optionalText2(image.caption, 1e3) ?? void 0,
+    sourceUrl: optionalText2(image.sourceUrl, 2e3) ?? void 0,
+    license: optionalText2(image.license, 240) ?? void 0,
     width: positiveInt(image.width),
     height: positiveInt(image.height)
   };
@@ -60861,11 +61274,11 @@ function normalizeMedia(media, featuredImage) {
   const normalized = Array.isArray(media) ? media.map((item) => ({
     type: item.type,
     url: requiredText(item.url, "media.url", 1, 2e3),
-    alt: optionalText(item.alt, 500) ?? void 0,
-    caption: optionalText(item.caption, 1e3) ?? void 0,
-    posterUrl: optionalText(item.posterUrl, 2e3) ?? void 0,
-    sourceUrl: optionalText(item.sourceUrl, 2e3) ?? void 0,
-    license: optionalText(item.license, 240) ?? void 0,
+    alt: optionalText2(item.alt, 500) ?? void 0,
+    caption: optionalText2(item.caption, 1e3) ?? void 0,
+    posterUrl: optionalText2(item.posterUrl, 2e3) ?? void 0,
+    sourceUrl: optionalText2(item.sourceUrl, 2e3) ?? void 0,
+    license: optionalText2(item.license, 240) ?? void 0,
     width: positiveInt(item.width),
     height: positiveInt(item.height),
     durationSeconds: positiveInt(item.durationSeconds)
@@ -60895,28 +61308,28 @@ function normalizeMedia(media, featuredImage) {
 }
 function normalizeSource(source) {
   return {
-    originalUrl: optionalText(source?.originalUrl, 2e3) ?? void 0,
-    resolvedUrl: optionalText(source?.resolvedUrl, 2e3) ?? void 0,
-    sourceCanonicalUrl: optionalText(source?.sourceCanonicalUrl, 2e3) ?? void 0,
-    relCanonicalHref: optionalText(source?.relCanonicalHref, 2e3) ?? void 0,
-    sourceByline: optionalText(source?.sourceByline, 240) ?? void 0,
-    publisher: optionalText(source?.publisher, 240) ?? void 0,
+    originalUrl: optionalText2(source?.originalUrl, 2e3) ?? void 0,
+    resolvedUrl: optionalText2(source?.resolvedUrl, 2e3) ?? void 0,
+    sourceCanonicalUrl: optionalText2(source?.sourceCanonicalUrl, 2e3) ?? void 0,
+    relCanonicalHref: optionalText2(source?.relCanonicalHref, 2e3) ?? void 0,
+    sourceByline: optionalText2(source?.sourceByline, 240) ?? void 0,
+    publisher: optionalText2(source?.publisher, 240) ?? void 0,
     authors: uniqueStrings(source?.authors ?? []).slice(0, 20),
-    publishedAt: optionalText(source?.publishedAt, 80) ?? void 0,
-    capturedAt: optionalText(source?.capturedAt, 80) ?? void 0,
-    license: optionalText(source?.license, 240) ?? void 0,
-    rightsSummary: optionalText(source?.rightsSummary, 1e3) ?? void 0,
-    contentHash: optionalText(source?.contentHash, 200) ?? void 0
+    publishedAt: optionalText2(source?.publishedAt, 80) ?? void 0,
+    capturedAt: optionalText2(source?.capturedAt, 80) ?? void 0,
+    license: optionalText2(source?.license, 240) ?? void 0,
+    rightsSummary: optionalText2(source?.rightsSummary, 1e3) ?? void 0,
+    contentHash: optionalText2(source?.contentHash, 200) ?? void 0
   };
 }
 function normalizeSeo(seo) {
   return {
-    canonicalUrl: optionalText(seo?.canonicalUrl, 2e3) ?? void 0,
-    relCanonical: optionalText(seo?.relCanonical, 2e3) ?? void 0,
-    metaTitle: optionalText(seo?.metaTitle, 240) ?? void 0,
-    metaDescription: optionalText(seo?.metaDescription, 500) ?? void 0,
-    ogImage: optionalText(seo?.ogImage, 2e3) ?? void 0,
-    schemaOrgType: optionalText(seo?.schemaOrgType, 80) ?? void 0,
+    canonicalUrl: optionalText2(seo?.canonicalUrl, 2e3) ?? void 0,
+    relCanonical: optionalText2(seo?.relCanonical, 2e3) ?? void 0,
+    metaTitle: optionalText2(seo?.metaTitle, 240) ?? void 0,
+    metaDescription: optionalText2(seo?.metaDescription, 500) ?? void 0,
+    ogImage: optionalText2(seo?.ogImage, 2e3) ?? void 0,
+    schemaOrgType: optionalText2(seo?.schemaOrgType, 80) ?? void 0,
     noIndex: seo?.noIndex === true
   };
 }
@@ -60925,37 +61338,37 @@ function normalizeRelatedEntities(related) {
   return related.map((item) => ({
     entityId: normalizeEntityId(item.entityId),
     title: requiredText(item.title, "relatedEntities.title", 1, 180),
-    relationship: optionalText(item.relationship, 120) ?? void 0,
+    relationship: optionalText2(item.relationship, 120) ?? void 0,
     slug: item.slug ? normalizeSlug(item.slug) : void 0,
-    url: optionalText(item.url, 2e3) ?? void 0,
-    description: optionalText(item.description, 300) ?? void 0
+    url: optionalText2(item.url, 2e3) ?? void 0,
+    description: optionalText2(item.description, 300) ?? void 0
   })).slice(0, 200);
 }
 function sanitizeSearchFilters(filters) {
   return {
-    query: optionalText(filters.query, 300) ?? void 0,
+    query: optionalText2(filters.query, 300) ?? void 0,
     entityType: filters.entityType ? normalizeEntityType(filters.entityType) : void 0,
-    tag: optionalText(filters.tag, 80) ?? void 0,
+    tag: optionalText2(filters.tag, 80) ?? void 0,
     tags: uniqueStrings(filters.tags ?? []).slice(0, 20),
-    keyword: optionalText(filters.keyword, 120) ?? void 0,
+    keyword: optionalText2(filters.keyword, 120) ?? void 0,
     keywords: uniqueStrings(filters.keywords ?? []).slice(0, 20),
     relatedEntityId: normalizeEntityId(filters.relatedEntityId),
     trailId: normalizeEntityId(filters.trailId),
-    sourceDomain: optionalText(filters.sourceDomain, 240) ?? void 0,
+    sourceDomain: optionalText2(filters.sourceDomain, 240) ?? void 0,
     hasMedia: filters.hasMedia === true ? true : void 0,
     hasVideo: filters.hasVideo === true ? true : void 0,
-    publishedAfter: optionalText(filters.publishedAfter, 80) ?? void 0,
-    updatedAfter: optionalText(filters.updatedAfter, 80) ?? void 0,
-    filterId: optionalText(filters.filterId, 200) ?? void 0,
+    publishedAfter: optionalText2(filters.publishedAfter, 80) ?? void 0,
+    updatedAfter: optionalText2(filters.updatedAfter, 80) ?? void 0,
+    filterId: optionalText2(filters.filterId, 200) ?? void 0,
     limit: clampNumber(filters.limit, 1, 100, 20),
     offset: clampNumber(filters.offset, 0, 1e4, 0)
   };
 }
 function sanitizeNeedsLinkFilters(filters) {
   return {
-    query: optionalText(filters.query, 300) ?? void 0,
+    query: optionalText2(filters.query, 300) ?? void 0,
     entityType: filters.entityType ? normalizeEntityType(filters.entityType) : void 0,
-    tag: optionalText(filters.tag, 80) ?? void 0,
+    tag: optionalText2(filters.tag, 80) ?? void 0,
     tags: uniqueStrings(filters.tags ?? []).slice(0, 20),
     sourceEntityId: normalizeEntityId(filters.sourceEntityId),
     sourceSlug: filters.sourceSlug ? normalizeSlug(filters.sourceSlug) : void 0,
@@ -60976,7 +61389,7 @@ function commonsIndexingPolicy() {
     storageScope: "platform_commons_graph",
     countsAgainstUserStorage: false,
     embedsPrivateUserVaults: false,
-    corpus: ["published Commons article body", "tags", "keywords", "JSON-LD metadata", "related entities", "See Also concepts marked needsLink"],
+    corpus: ["published Commons article body", "tags", "keywords", "JSON-LD metadata", "related entities", "governed relationship claims", "See Also concepts marked needsLink"],
     excluded: ["comments", "comment threads", "reader alerts", "private reading-room state"],
     retrievalPattern: {
       lexicalFirst: ["title", "tags", "keywords", "source metadata", "article body", "See Also concepts"],
@@ -61052,7 +61465,7 @@ function searchableText(entity) {
   ].filter(Boolean).join("\n").toLowerCase();
 }
 function actorLabel(input, user) {
-  return optionalText(input.actorLabel, 120) || optionalText(user.name, 120) || `mcp-user-${user.id}`;
+  return optionalText2(input.actorLabel, 120) || optionalText2(user.name, 120) || `mcp-user-${user.id}`;
 }
 function publicBaseUrl() {
   return (process.env.TRANSPARENT_COMMONS_PUBLIC_BASE_URL?.trim() || DEFAULT_COMMONS_BASE_URL).replace(/\/+$/, "");
@@ -61063,13 +61476,16 @@ function publicUrlForSlug(slug2) {
 function allocateEntityId() {
   return `TPW-Q${Date.now()}${Math.floor(Math.random() * 1e3).toString().padStart(3, "0")}`;
 }
+function allocateClaimId() {
+  return `TPW-S${Date.now()}${Math.floor(Math.random() * 1e6).toString().padStart(6, "0")}`;
+}
 function normalizeEntityId(value) {
-  const text2 = optionalText(value, 80);
+  const text2 = optionalText2(value, 80);
   if (!text2) return void 0;
   return text2.replace(/\s+/g, "").toUpperCase();
 }
 function normalizeEntityType(value) {
-  const raw = optionalText(value, 120) || DEFAULT_ENTITY_TYPE;
+  const raw = optionalText2(value, 120) || DEFAULT_ENTITY_TYPE;
   const squashed = raw.replace(/[\s_-]+/g, "").toLowerCase();
   if (squashed === "publicarticle" || squashed === "article" || squashed === "item") return DEFAULT_ENTITY_TYPE;
   if (squashed === "trail" || squashed === "readingtrail") return "Trail";
@@ -61097,7 +61513,7 @@ function requiredText(value, field, min, max) {
   if (text2.length < min) throw new CommonsRepositoryError(`${field.replaceAll(".", "_")}_required`, `${field} must be at least ${min} characters.`);
   return text2.slice(0, max);
 }
-function optionalText(value, max) {
+function optionalText2(value, max) {
   const text2 = String(value ?? "").trim();
   return text2 ? text2.slice(0, max) : void 0;
 }
@@ -61117,7 +61533,7 @@ function uniqueStrings(values) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
   for (const value of values) {
-    const text2 = optionalText(value, 120);
+    const text2 = optionalText2(value, 120);
     if (!text2) continue;
     const key = text2.toLowerCase();
     if (seen.has(key)) continue;
@@ -61152,14 +61568,15 @@ function jsonLikeValue(value) {
 function escapeLike(value) {
   return value.replace(/[%_]/g, "");
 }
-var import_node_crypto34, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady2, CommonsRepositoryError;
+var import_node_crypto35, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady2, CommonsRepositoryError;
 var init_commons_repository = __esm({
   "src/api/commons-repository.ts"() {
     "use strict";
-    import_node_crypto34 = require("crypto");
+    import_node_crypto35 = require("crypto");
     init_db();
     init_rates();
-    COMMONS_SCHEMA_VERSION = "2026-08-04.3";
+    init_commons_linksets();
+    COMMONS_SCHEMA_VERSION = "2026-08-05.1";
     DEFAULT_COMMONS_BASE_URL = "https://transparent-commons.cc";
     DEFAULT_ENTITY_TYPE = "PublicArticle";
     COMMONS_ENTITY_PROFILES = {
@@ -61410,7 +61827,7 @@ async function claimCommonsPublication(input, user) {
   }
   const existingName = await getCommonsPublicationBySubdomain(subdomain);
   if (existingName) throw new CommonsPublicationError("publication_name_unavailable", "That publication name is already claimed.", 409);
-  const id = `tcpub_${(0, import_node_crypto35.randomUUID)()}`;
+  const id = `tcpub_${(0, import_node_crypto36.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   try {
     await getDb().execute({
@@ -61462,7 +61879,7 @@ async function publishCommonsEditorial(input, user) {
   const canonicalUrl = editionPublicUrl(subdomain, editionSlug);
   const rendered = renderEditorialReadingRoom(editionInput);
   const html = addPublicMetadata(rendered.html, canonicalUrl, publication.title);
-  const editionId = `tced_${(0, import_node_crypto35.randomUUID)()}`;
+  const editionId = `tced_${(0, import_node_crypto36.randomUUID)()}`;
   const revision = (latest?.revision ?? 0) + 1;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await getDb().batch([
@@ -61486,7 +61903,7 @@ async function publishCommonsEditorial(input, user) {
         JSON.stringify(editionInput.articles),
         html,
         rendered.filename,
-        (0, import_node_crypto35.createHash)("sha256").update(html).digest("hex"),
+        (0, import_node_crypto36.createHash)("sha256").update(html).digest("hex"),
         rendered.articleCount,
         rendered.wordCount,
         Buffer.byteLength(html),
@@ -61672,11 +62089,11 @@ function addPublicMetadata(html, canonicalUrl, publicationTitle) {
     "</head>"
   ].join("\n"));
 }
-var import_node_crypto35, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
+var import_node_crypto36, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
 var init_commons_publication_repository = __esm({
   "src/api/commons-publication-repository.ts"() {
     "use strict";
-    import_node_crypto35 = require("crypto");
+    import_node_crypto36 = require("crypto");
     init_db();
     init_commons_repository();
     init_render();
@@ -61785,6 +62202,7 @@ var init_commons_routes = __esm({
     import_zod51 = require("zod");
     init_api_auth();
     init_commons_repository();
+    init_commons_linksets();
     init_listing_write_billing();
     init_commons_publication_repository();
     init_mcp_tool_schemas();
@@ -61879,6 +62297,7 @@ var init_commons_routes = __esm({
         url: import_zod51.z.string().url().optional(),
         description: import_zod51.z.string().max(300).optional()
       }).strict()).max(200).optional(),
+      claims: import_zod51.z.array(CommonsClaimInputSchema).max(300).optional(),
       bodyMarkdown: import_zod51.z.string().max(5e5).optional(),
       contentSections: import_zod51.z.array(import_zod51.z.object({
         id: import_zod51.z.string().max(180).optional(),
@@ -61956,6 +62375,17 @@ var init_commons_routes = __esm({
       await ensureCommonsSchema();
       return c.json({ ok: true, data: commonsDatabaseReport() });
     });
+    commonsApp.get("/profiles/relationships/v1", (c) => c.json({
+      id: COMMONS_RELATIONSHIP_PROFILE,
+      title: "Transparent Commons governed relationship linksets",
+      mediaType: COMMONS_LINKSET_MEDIA_TYPE,
+      claimAuthority: "MCP Scraper authenticated proposal and contribution ledger",
+      anchorPolicy: "Every link context is an absolute canonical Transparent Commons wiki URL.",
+      predicatePolicy: "Predicates are curated registered link relations or absolute HTTPS extension relation URIs.",
+      publicationPolicy: "Only approved, active, non-deprecated claims whose dispute state is undisputed or attributed are projected.",
+      trustPolicy: "A third-party target is an asserted relationship, not an endorsement or proof that the target agrees.",
+      source: "https://www.rfc-editor.org/rfc/rfc9264.html"
+    }));
     commonsApp.post("/publications/prepare", auth2, async (c) => {
       const parsed = PreparePublicationSchema.safeParse(await c.req.json().catch(() => ({})));
       if (!parsed.success) return validationError(c, parsed.error);
@@ -62086,11 +62516,32 @@ var init_commons_routes = __esm({
     commonsApp.get("/entities/:idOrSlug", async (c) => {
       const entity = await getCommonsEntity(c.req.param("idOrSlug"));
       if (!entity) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({ ok: true, data: entity });
     });
+    commonsApp.get("/entities/:idOrSlug/claims", async (c) => {
+      const result = await getCommonsEntityLinkset(c.req.param("idOrSlug"));
+      if (!result) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(result.entity.id));
+      return c.json({ ok: true, data: { entity: result.entity, claims: result.claims, linksetUrl: result.linksetUrl } });
+    });
+    commonsApp.get("/entities/:idOrSlug/linkset", async (c) => {
+      const result = await getCommonsEntityLinkset(c.req.param("idOrSlug"));
+      if (!result) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Content-Type", `${COMMONS_LINKSET_MEDIA_TYPE}; profile="${COMMONS_RELATIONSHIP_PROFILE}"`);
+      c.header("ETag", result.etag);
+      c.header("Link", `<${COMMONS_RELATIONSHIP_PROFILE}>; rel="profile"`);
+      c.header("Cache-Control", "public, max-age=60, s-maxage=300");
+      if (c.req.header("If-None-Match") === result.etag) return c.body(null, 304);
+      if (c.req.query("envelope") === "true") {
+        return c.json({ ok: true, data: { ...result, document: result.document } });
+      }
+      return c.body(JSON.stringify(result.document));
+    });
     commonsApp.get("/entities/:idOrSlug/wiki-page", async (c) => {
       const entity = await getCommonsEntity(c.req.param("idOrSlug"));
       if (!entity) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({ ok: true, data: entityToWikiPage(entity) });
     });
     commonsApp.get("/entities/:idOrSlug/json-ld", async (c) => {
@@ -62106,6 +62557,7 @@ var init_commons_routes = __esm({
     commonsApp.get("/wiki/:slug", async (c) => {
       const entity = await getCommonsEntity(c.req.param("slug"));
       if (!entity) return c.json({ ok: false, error: "page_not_found", message: "No published Commons wiki page matched that slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({
         ok: true,
         data: {
@@ -62786,7 +63238,7 @@ async function migrateAnalytics() {
 }
 function normalizeSlug2(value) {
   const slug2 = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
-  return slug2 || `site-${(0, import_node_crypto36.randomBytes)(4).toString("hex")}`;
+  return slug2 || `site-${(0, import_node_crypto37.randomBytes)(4).toString("hex")}`;
 }
 function normalizeObservedHostname(origin) {
   if (!origin || origin === "null") return null;
@@ -62799,7 +63251,7 @@ function normalizeObservedHostname(origin) {
   }
 }
 function publicPixelId() {
-  return `px_${(0, import_node_crypto36.randomBytes)(18).toString("base64url")}`;
+  return `px_${(0, import_node_crypto37.randomBytes)(18).toString("base64url")}`;
 }
 function mapRows(rows) {
   return rows;
@@ -62831,7 +63283,7 @@ async function requireEditor(client2, siteId, userId) {
 async function createAnalyticsSite(input) {
   const db = getAnalyticsPool();
   const client2 = await db.connect();
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const baseSlug = normalizeSlug2(input.slug || input.name);
   try {
     await client2.query("BEGIN");
@@ -62847,7 +63299,7 @@ async function createAnalyticsSite(input) {
       } catch (error) {
         const code = error.code;
         if (code !== "23505" || attempt === 2) throw error;
-        slug2 = `${baseSlug}-${(0, import_node_crypto36.randomBytes)(2).toString("hex")}`;
+        slug2 = `${baseSlug}-${(0, import_node_crypto37.randomBytes)(2).toString("hex")}`;
       }
     }
     await client2.query(
@@ -63062,7 +63514,7 @@ async function createAnalyticsPixel(input) {
      VALUES ($1, $2, $3, $4, $5)
      RETURNING id, site_id, public_id, name, environment, status, created_at::text, NULL::text AS last_event_at`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       input.siteId,
       publicPixelId(),
       input.name.trim(),
@@ -63139,7 +63591,7 @@ async function setAnalyticsPixelDomainState(input) {
      SELECT $1, p.id, $4, $5 FROM analytics_pixels p WHERE p.id = $2 AND p.site_id = $3
      ON CONFLICT(pixel_id, hostname) DO UPDATE SET state = EXCLUDED.state, updated_at = now()
      RETURNING id`,
-    [(0, import_node_crypto36.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
+    [(0, import_node_crypto37.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
   );
   if (!result.rowCount)
     throw new AnalyticsRepositoryError(
@@ -63183,7 +63635,7 @@ function sanitizeAnalyticsProperties(value) {
 }
 async function ingestAnalyticsEvents(input) {
   const db = getAnalyticsPool();
-  const requestId = `air_${(0, import_node_crypto36.randomUUID)()}`;
+  const requestId = `air_${(0, import_node_crypto37.randomUUID)()}`;
   const hostname = normalizeObservedHostname(input.origin);
   const pixelResult = await db.query(
     `SELECT p.id, p.site_id, p.status,
@@ -63204,7 +63656,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel?.site_id ?? null,
         pixel?.id ?? null,
@@ -63229,7 +63681,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63254,7 +63706,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63278,7 +63730,7 @@ async function ingestAnalyticsEvents(input) {
      ON CONFLICT(pixel_id, hostname) DO UPDATE
        SET last_seen_at = now(), updated_at = now()
      RETURNING state`,
-    [(0, import_node_crypto36.randomUUID)(), pixel.id, hostname]
+    [(0, import_node_crypto37.randomUUID)(), pixel.id, hostname]
   );
   if (domainResult.rows[0]?.state !== "approved") {
     await db.query(
@@ -63292,7 +63744,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63341,7 +63793,7 @@ async function ingestAnalyticsEvents(input) {
              $23, $24, $25, $26, $27, $28, $29, $30, $31
            ) ON CONFLICT(site_id, event_id) DO NOTHING`,
           [
-            (0, import_node_crypto36.randomUUID)(),
+            (0, import_node_crypto37.randomUUID)(),
             event2.eventId,
             pixel.site_id,
             pixel.id,
@@ -63397,7 +63849,7 @@ async function ingestAnalyticsEvents(input) {
          id, request_id, site_id, pixel_id, hostname, accepted_count, rejected_count, reason_codes
        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63429,7 +63881,7 @@ function normalizeGeographyCode(value, max) {
   return normalized && /^[A-Z0-9-]+$/.test(normalized) ? normalized.slice(0, max) : null;
 }
 function pageFingerprint(scope, siteId, filters) {
-  return (0, import_node_crypto36.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
+  return (0, import_node_crypto37.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
 }
 function decodePageOffset(cursor, fingerprint) {
   if (!cursor) return 0;
@@ -63479,7 +63931,7 @@ async function createAnalyticsConversion(input) {
         404
       );
   }
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const resolvedPerson = input.sessionId ? await db.query(
     `SELECT e.person_id FROM analytics_identity_nodes n JOIN analytics_identity_edges e ON e.identity_node_id = n.id
         WHERE n.site_id = $1 AND n.kind = 'session_id' AND n.value_hmac = $2 ORDER BY e.confidence DESC LIMIT 1`,
@@ -64154,7 +64606,7 @@ async function createAnalyticsCampaignLink(input) {
         404
       );
   }
-  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto36.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
+  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto37.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
   try {
     const result = await db.query(
       `INSERT INTO analytics_campaign_links(
@@ -64163,7 +64615,7 @@ async function createAnalyticsCampaignLink(input) {
        ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
        RETURNING *, 0::int AS click_count`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         input.siteId,
         input.pixelId ?? null,
         input.name.trim(),
@@ -64234,7 +64686,7 @@ async function resolveAnalyticsCampaignLink(shortCode, referrer) {
   if (!row) return null;
   await db.query(
     `INSERT INTO analytics_campaign_clicks(id, link_id, referrer) VALUES ($1, $2, $3)`,
-    [(0, import_node_crypto36.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
+    [(0, import_node_crypto37.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
   );
   return buildTaggedCampaignUrl(row);
 }
@@ -64252,14 +64704,14 @@ async function createAnalyticsForm(input) {
       404
     );
   const baseSlug = normalizeSlug2(input.name);
-  const slug2 = `${baseSlug}-${(0, import_node_crypto36.randomBytes)(3).toString("hex")}`;
-  const publicId = `form_${(0, import_node_crypto36.randomBytes)(18).toString("base64url")}`;
+  const slug2 = `${baseSlug}-${(0, import_node_crypto37.randomBytes)(3).toString("hex")}`;
+  const publicId = `form_${(0, import_node_crypto37.randomBytes)(18).toString("base64url")}`;
   const result = await db.query(
     `INSERT INTO analytics_forms(id, public_id, site_id, pixel_id, name, slug, fields, brand, submit_label, success_message, redirect_url, consent_text, status, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,$10,$11,$12,$13,$14)
      RETURNING *, 0::int AS submission_count`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       publicId,
       input.siteId,
       input.pixelId,
@@ -64304,7 +64756,7 @@ async function getPublicAnalyticsForm(publicId) {
   return result.rows[0] ?? null;
 }
 async function recordAnalyticsFormSubmission(input) {
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_submissions(id, form_id, site_id, pixel_id, visitor_id, session_id, crm_person_ref, source, medium, campaign, crm_delivery_status, click_ids)
      VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12::jsonb)`,
@@ -64335,7 +64787,7 @@ function sanitizeClickIds(value) {
   return output;
 }
 function identityHmac(kind, value) {
-  return (0, import_node_crypto36.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
+  return (0, import_node_crypto37.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
 }
 async function linkAnalyticsFormIdentity(input) {
   const client2 = await getAnalyticsPool().connect();
@@ -64344,7 +64796,7 @@ async function linkAnalyticsFormIdentity(input) {
     const person = await client2.query(
       `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
        ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at = now() RETURNING id`,
-      [(0, import_node_crypto36.randomUUID)(), input.siteId, input.crmPersonRef]
+      [(0, import_node_crypto37.randomUUID)(), input.siteId, input.crmPersonRef]
     );
     const personId = person.rows[0].id;
     const signals = [];
@@ -64391,7 +64843,7 @@ async function linkAnalyticsFormIdentity(input) {
         `INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac) VALUES ($1,$2,$3,$4)
          ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now() RETURNING id`,
         [
-          (0, import_node_crypto36.randomUUID)(),
+          (0, import_node_crypto37.randomUUID)(),
           input.siteId,
           signal.kind,
           identityHmac(signal.kind, signal.value)
@@ -64402,7 +64854,7 @@ async function linkAnalyticsFormIdentity(input) {
          VALUES ($1,$2,$3,$4,$5,$6)
          ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence)`,
         [
-          (0, import_node_crypto36.randomUUID)(),
+          (0, import_node_crypto37.randomUUID)(),
           input.siteId,
           personId,
           node.rows[0].id,
@@ -64500,7 +64952,7 @@ async function createAnalyticsCrmImport(input) {
   const db = getAnalyticsPool();
   await requireEditor(db, input.siteId, input.userId);
   const client2 = await db.connect();
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   try {
     await client2.query("BEGIN");
     await client2.query(
@@ -64520,7 +64972,7 @@ async function createAnalyticsCrmImport(input) {
       await client2.query(
         `INSERT INTO analytics_crm_import_rows(id, import_id, crm_person_ref, payload_ciphertext)
          VALUES ($1,$2,$3,$4) ON CONFLICT(import_id, crm_person_ref) DO NOTHING`,
-        [(0, import_node_crypto36.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
+        [(0, import_node_crypto37.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
       );
     }
     await client2.query("COMMIT");
@@ -64559,7 +65011,7 @@ async function createAnalyticsActivationDestination(input) {
     `INSERT INTO analytics_activation_destinations(id, site_id, platform, name, connection_ref, external_dataset_id, event_mapping, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8) RETURNING *`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       input.siteId,
       input.platform,
       input.name.trim(),
@@ -64611,7 +65063,7 @@ async function queueAnalyticsActivation(input) {
       `INSERT INTO analytics_activation_jobs(id, destination_id, conversion_id, person_id, payload_ciphertext)
        VALUES ($1,$2,$3,$4,$5) ON CONFLICT(destination_id, conversion_id) DO NOTHING`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         destination.id,
         input.conversionId,
         input.personId ?? null,
@@ -64623,7 +65075,7 @@ async function queueAnalyticsActivation(input) {
   return queued;
 }
 async function queueAnalyticsFormDelivery(input) {
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_delivery_jobs(id, submission_id, owner_user_id, payload_ciphertext, last_error_code)
      VALUES ($1,$2,$3,$4,$5)`,
@@ -64750,7 +65202,7 @@ async function analyticsHealth(siteId, userId) {
 }
 async function refreshAnalyticsDailyRollups(input) {
   const db = getAnalyticsPool();
-  const runId = (0, import_node_crypto36.randomUUID)();
+  const runId = (0, import_node_crypto37.randomUUID)();
   await db.query(
     `INSERT INTO analytics_rollup_runs(id, window_start, window_end, status) VALUES ($1, $2, $3, 'running')`,
     [runId, input.start, input.end]
@@ -64913,7 +65365,7 @@ async function createAnalyticsExport(input) {
       `Generated ${(/* @__PURE__ */ new Date()).toISOString()} from the governed ${input.report} report contract.`
     ].join("\n");
   }
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const inserted = await getAnalyticsPool().query(
     `INSERT INTO analytics_exports(id, site_id, requested_by_user_id, idempotency_key, report, format, filters, content)
      VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8)
@@ -64946,11 +65398,11 @@ async function createAnalyticsExport(input) {
   }
   return describeArtifact(replay.rows[0]);
 }
-var import_node_crypto36, import_pg, AnalyticsRepositoryError, pool2, blockedPropertyName, inferredFamilySql, clickIdKeys;
+var import_node_crypto37, import_pg, AnalyticsRepositoryError, pool2, blockedPropertyName, inferredFamilySql, clickIdKeys;
 var init_analytics_repository = __esm({
   "src/api/analytics-repository.ts"() {
     "use strict";
-    import_node_crypto36 = require("crypto");
+    import_node_crypto37 = require("crypto");
     import_pg = require("pg");
     init_session();
     init_analytics_attribution();
@@ -65171,8 +65623,8 @@ function dashboardCallbackUrl() {
 }
 async function createThorbitConnectUrl(userId) {
   if (!bridgeConfigured()) throw new Error("Thorbit X-Ray account bridge is not configured");
-  const state = (0, import_node_crypto37.randomBytes)(32).toString("base64url");
-  const stateHash = (0, import_node_crypto37.createHash)("sha256").update(state).digest("hex");
+  const state = (0, import_node_crypto38.randomBytes)(32).toString("base64url");
+  const stateHash = (0, import_node_crypto38.createHash)("sha256").update(state).digest("hex");
   await getAnalyticsPool().query(
     `INSERT INTO analytics_thorbit_connect_states(state_hash,user_id,expires_at)
      VALUES ($1,$2,now()+interval '10 minutes')
@@ -65187,9 +65639,9 @@ async function createThorbitConnectUrl(userId) {
 function verifyThorbitAssertion(token4) {
   const [encoded, signature] = token4.split(".");
   if (!encoded || !signature || !bridgeConfigured()) throw new Error("Invalid Thorbit assertion");
-  const expected = (0, import_node_crypto37.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
+  const expected = (0, import_node_crypto38.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
   const actual = Buffer.from(signature, "base64url");
-  if (actual.length !== expected.length || !(0, import_node_crypto37.timingSafeEqual)(actual, expected)) {
+  if (actual.length !== expected.length || !(0, import_node_crypto38.timingSafeEqual)(actual, expected)) {
     throw new Error("Invalid Thorbit assertion signature");
   }
   const parsed = AssertionSchema.safeParse(
@@ -65201,7 +65653,7 @@ function verifyThorbitAssertion(token4) {
   return parsed.data.entitlement;
 }
 async function consumeThorbitConnectCallback(input) {
-  const stateHash = (0, import_node_crypto37.createHash)("sha256").update(input.state).digest("hex");
+  const stateHash = (0, import_node_crypto38.createHash)("sha256").update(input.state).digest("hex");
   const client2 = await getAnalyticsPool().connect();
   try {
     await client2.query("BEGIN");
@@ -65241,11 +65693,11 @@ async function disconnectAnalyticsEntitlement(userId) {
     [userId]
   );
 }
-var import_node_crypto37, import_zod52, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
+var import_node_crypto38, import_zod52, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
 var init_analytics_entitlement = __esm({
   "src/api/analytics-entitlement.ts"() {
     "use strict";
-    import_node_crypto37 = require("crypto");
+    import_node_crypto38 = require("crypto");
     import_zod52 = require("zod");
     init_analytics_repository();
     THORBIT_PRODUCT_URL = "https://thorbit.ai";
@@ -65382,14 +65834,14 @@ function renderPublicForm(form, placementUrl) {
   const brand = form.brand;
   return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><style>:root{font-family:ui-sans-serif,system-ui;color:${escapeHtml7(brand.textColor)};background:${escapeHtml7(brand.backgroundColor)}}*{box-sizing:border-box}body{margin:0;padding:18px}form{display:grid;gap:14px}label{display:grid;gap:6px;font-size:13px;font-weight:650}.check{grid-template-columns:auto 1fr;align-items:center}.check span{grid-column:2}.check input{grid-column:1;grid-row:1}input,textarea,select{width:100%;min-height:44px;padding:10px 12px;border:1px solid #ccd3df;border-radius:${brand.radius}px;background:white;color:inherit;font:inherit}textarea{min-height:110px;resize:vertical}button{min-height:46px;border:0;border-radius:${brand.radius}px;color:white;background:${escapeHtml7(brand.primaryColor)};font:inherit;font-weight:750;cursor:pointer}.consent{margin:0;color:#667085;font-size:11px;line-height:1.45}.notice{display:none;padding:12px;border-radius:${brand.radius}px;background:#edf8f2;color:#17613c}.hp{position:absolute!important;left:-9999px!important}</style></head><body><form id="mcp-form">${fields}<label class="hp">Website<input name="website" autocomplete="off" tabindex="-1"></label>${form.consent_text ? `<p class="consent">${escapeHtml7(form.consent_text)}</p>` : ""}<button>${escapeHtml7(form.submit_label)}</button><div class="notice" role="status"></div></form><script>(()=>{const form=document.querySelector('#mcp-form'),notice=form.querySelector('.notice'),q=new URLSearchParams(location.search);form.addEventListener('submit',async event=>{event.preventDefault();const button=form.querySelector('button');button.disabled=true;const raw=Object.fromEntries(new FormData(form).entries()),website=String(raw.website||''),clickIds={};delete raw.website;for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}try{const response=await fetch('/analytics/forms/${escapeHtml7(form.public_id)}/submissions',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({data:raw,website,placementUrl:${JSON.stringify(placementUrl)},visitorId:q.get('visitor')||undefined,sessionId:q.get('session')||undefined,source:q.get('source')||undefined,medium:q.get('medium')||undefined,campaign:q.get('campaign')||undefined,clickIds})});if(!response.ok)throw new Error('submit');notice.textContent=${JSON.stringify(form.success_message)};notice.style.display='block';form.reset();${form.redirect_url ? `setTimeout(()=>{top.location.href=${JSON.stringify(form.redirect_url)}},700);` : ""}}catch{notice.textContent='Your response could not be submitted. Please try again.';notice.style.display='block'}finally{button.disabled=false}})})()</script></body></html>`;
 }
-var import_hono32, import_factory6, import_zod53, import_node_crypto38, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
+var import_hono32, import_factory6, import_zod53, import_node_crypto39, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
 var init_analytics_routes = __esm({
   "src/api/analytics-routes.ts"() {
     "use strict";
     import_hono32 = require("hono");
     import_factory6 = require("hono/factory");
     import_zod53 = require("zod");
-    import_node_crypto38 = require("crypto");
+    import_node_crypto39 = require("crypto");
     import_papaparse4 = __toESM(require("papaparse"), 1);
     init_api_auth();
     init_db();
@@ -65718,7 +66170,7 @@ var init_analytics_routes = __esm({
       const lastName = typeof data.last_name === "string" ? data.last_name.trim() : "";
       const fullName = [firstName, lastName].filter(Boolean).join(" ") || (typeof data.name === "string" ? data.name.trim() : "") || email || "Website lead";
       const identitySeed = email || `${fullName}:${Date.now()}`;
-      const suffix2 = (0, import_node_crypto38.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
+      const suffix2 = (0, import_node_crypto39.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
       const path6 = `Leads/person-${suffix2}`;
       const { key: memoryKey, error: memoryKeyError } = await getOrCreateUserMemoryKey(user);
       const existing = memoryKey ? await memoryCall("getTool", { vault: "People", path: path6 }, memoryKey) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
@@ -65817,9 +66269,9 @@ Submitted the published form.
         occurredAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       const match = {
-        ...email ? { emailSha256: (0, import_node_crypto38.createHash)("sha256").update(email).digest("hex") } : {},
+        ...email ? { emailSha256: (0, import_node_crypto39.createHash)("sha256").update(email).digest("hex") } : {},
         ...phone ? {
-          phoneSha256: (0, import_node_crypto38.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
+          phoneSha256: (0, import_node_crypto39.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
         } : {}
       };
       const activationQueued = await queueAnalyticsActivation({
@@ -66247,7 +66699,7 @@ Submitted the published form.
           rejectedCount += 1;
           continue;
         }
-        const digest2 = (0, import_node_crypto38.createHash)("sha256").update(
+        const digest2 = (0, import_node_crypto39.createHash)("sha256").update(
           `${parsed.data.sourceSystem}:${externalId || email || phone || `${fullName}:${index}`}`
         ).digest("hex").slice(0, 16);
         const path6 = `Leads/person-${digest2}`;
@@ -66688,13 +67140,13 @@ var init_analytics_delivery = __esm({
 
 // src/api/scheduled-artifact-owner.ts
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return (0, import_node_crypto39.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto40.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
-var import_node_crypto39;
+var import_node_crypto40;
 var init_scheduled_artifact_owner = __esm({
   "src/api/scheduled-artifact-owner.ts"() {
     "use strict";
-    import_node_crypto39 = require("crypto");
+    import_node_crypto40 = require("crypto");
   }
 });
 
@@ -66751,7 +67203,7 @@ async function ensureScheduledRunViewLinksSchema() {
   schemaReady3 = true;
 }
 function tokenHash2(token4) {
-  return (0, import_node_crypto40.createHash)("sha256").update(token4).digest("hex");
+  return (0, import_node_crypto41.createHash)("sha256").update(token4).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -66771,9 +67223,9 @@ function mapRow(row) {
 async function createScheduledRunViewLink(input) {
   await ensureScheduledRunViewLinksSchema();
   const now = input.now ?? /* @__PURE__ */ new Date();
-  const token4 = (0, import_node_crypto40.randomBytes)(32).toString("base64url");
+  const token4 = (0, import_node_crypto41.randomBytes)(32).toString("base64url");
   const record = {
-    shareId: (0, import_node_crypto40.randomUUID)(),
+    shareId: (0, import_node_crypto41.randomUUID)(),
     ownerId: input.ownerId,
     runId: input.runId,
     artifactId: input.artifactId,
@@ -66836,11 +67288,11 @@ async function revokeScheduledRunViewLink(ownerId, runId, shareId, now = /* @__P
   });
   return result.rowsAffected > 0;
 }
-var import_node_crypto40, schemaReady3;
+var import_node_crypto41, schemaReady3;
 var init_scheduled_run_view_links = __esm({
   "src/api/scheduled-run-view-links.ts"() {
     "use strict";
-    import_node_crypto40 = require("crypto");
+    import_node_crypto41 = require("crypto");
     init_db();
     schemaReady3 = false;
   }
@@ -66906,15 +67358,15 @@ ${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id=
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: (0, import_node_crypto41.createHash)("sha256").update(html).digest("hex"),
+    sha256: (0, import_node_crypto42.createHash)("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
-var import_node_crypto41;
+var import_node_crypto42;
 var init_render2 = __esm({
   "src/personal-authority/render.ts"() {
     "use strict";
-    import_node_crypto41 = require("crypto");
+    import_node_crypto42 = require("crypto");
   }
 });
 
@@ -67024,15 +67476,15 @@ body{overflow-x:hidden}.lead-story__body,.lead-support__item,.story-card__body{m
 @media(max-width:620px){.desk-section__grid--panorama,.desk-section__grid--mosaic,.desk-section__grid--tiles{grid-template-columns:1fr}.story-card--panorama{display:block}.story-card--panorama h3,.story-card--mosaic-lead h3{font-size:34px}.story-card--mosaic-lead{grid-column:auto;grid-row:auto}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:0}}
 </style></head><body data-theme="${escapeHtml9(config.theme)}" id="top" data-scheduled-renderer="newsroom_publisher_v1">${ticker}${masthead}${navigation}<main>${leadGrid}${latest}${sections}${newsletter}${pressRoom}${trustCenter}</main>${trustFooter}</body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = (0, import_node_crypto42.createHash)("sha256").update(html).digest("hex");
+  const sha2563 = (0, import_node_crypto43.createHash)("sha256").update(html).digest("hex");
   const filename = `${brand.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "newsroom"}-news-site.html`;
   return { html, filename, bytes, sha256: sha2563, generatedAt: generatedAtIso };
 }
-var import_node_crypto42;
+var import_node_crypto43;
 var init_render3 = __esm({
   "src/newsroom-publisher/render.ts"() {
     "use strict";
-    import_node_crypto42 = require("crypto");
+    import_node_crypto43 = require("crypto");
   }
 });
 
@@ -67325,7 +67777,7 @@ function policy4() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto43.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto44.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -67366,12 +67818,12 @@ async function readScheduledRunArtifact(args) {
   if (!window2 || window2.nextOffset !== null || window2.totalBytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) return null;
   return window2.text;
 }
-var import_node_crypto43, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
+var import_node_crypto44, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
 var init_scheduled_run_artifact_store = __esm({
   "src/scheduled-artifacts/scheduled-run-artifact-store.ts"() {
     "use strict";
     init_private_artifacts();
-    import_node_crypto43 = require("crypto");
+    import_node_crypto44 = require("crypto");
     SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
     SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
     SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -67589,7 +68041,7 @@ async function reconcileDiscoveredNangoConnections(identity, discovered) {
           updated_at = excluded.updated_at
       `,
       args: [
-        (0, import_node_crypto44.randomUUID)(),
+        (0, import_node_crypto45.randomUUID)(),
         userId,
         connection.providerConfigKey,
         connection.provider,
@@ -67660,7 +68112,7 @@ async function recordServiceConnectionHealth(args) {
   });
   await getDb().execute({
     sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [(0, import_node_crypto44.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
+    args: [(0, import_node_crypto45.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
   });
 }
 async function setServiceConnectionActions(identity, connectionId, enabled) {
@@ -67700,7 +68152,7 @@ async function claimServiceConnectionAction(args) {
   if (!connection) throw new Error("service_connection_not_found");
   const inserted = await getDb().execute({
     sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status, request_digest) VALUES (?, ?, ?, ?, ?, 'started', ?)`,
-    args: [(0, import_node_crypto44.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
+    args: [(0, import_node_crypto45.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
   });
   if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
   const existing = await getDb().execute({
@@ -67725,11 +68177,11 @@ async function claimServiceConnectionAction(args) {
     ...result !== void 0 ? { result } : {}
   };
 }
-var import_node_crypto44, schemaReady4, schemaDb4;
+var import_node_crypto45, schemaReady4, schemaDb4;
 var init_service_connections = __esm({
   "src/api/service-connections.ts"() {
     "use strict";
-    import_node_crypto44 = require("crypto");
+    import_node_crypto45 = require("crypto");
     init_db();
     schemaReady4 = null;
     schemaDb4 = null;
@@ -67743,8 +68195,8 @@ function signingSecret() {
   return secret2;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = (0, import_node_crypto45.createHash)("sha256").update(args.body).digest("hex");
-  return (0, import_node_crypto45.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
+  const bodyHash = (0, import_node_crypto46.createHash)("sha256").update(args.body).digest("hex");
+  return (0, import_node_crypto46.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
 ${args.nonce}
@@ -67791,17 +68243,17 @@ async function verifySchedulerIntegrationRequest(request, rawBody) {
   });
   const suppliedBytes = Buffer.from(signature, "hex");
   const expectedBytes = Buffer.from(expected, "hex");
-  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto45.timingSafeEqual)(suppliedBytes, expectedBytes)) {
+  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto46.timingSafeEqual)(suppliedBytes, expectedBytes)) {
     throw new SchedulerIntegrationAuthError("invalid_signature");
   }
   await claimNonce(nonce, timestampMs);
   return { requestId };
 }
-var import_node_crypto45, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
+var import_node_crypto46, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
 var init_scheduler_integration_auth = __esm({
   "src/api/scheduler-integration-auth.ts"() {
     "use strict";
-    import_node_crypto45 = require("crypto");
+    import_node_crypto46 = require("crypto");
     init_db();
     init_service_connections();
     MAX_CLOCK_SKEW_MS = 5 * 60 * 1e3;
@@ -68049,7 +68501,7 @@ var init_site_extract_reconciliation = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto46.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto47.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -68106,11 +68558,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto46, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto47, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto46 = require("crypto");
+    import_node_crypto47 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -68184,7 +68636,7 @@ var init_scrape_vault_sink = __esm({
 
 // src/api/scrape-image-sink.ts
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${(0, import_node_crypto47.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${(0, import_node_crypto48.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -68226,11 +68678,11 @@ async function persistScrapeImagesToMemory(user, inputs, vault) {
     assets
   };
 }
-var import_node_crypto47, MAX_IMAGES_PER_SCRAPE;
+var import_node_crypto48, MAX_IMAGES_PER_SCRAPE;
 var init_scrape_image_sink = __esm({
   "src/api/scrape-image-sink.ts"() {
     "use strict";
-    import_node_crypto47 = require("crypto");
+    import_node_crypto48 = require("crypto");
     init_memory();
     MAX_IMAGES_PER_SCRAPE = 25;
   }
@@ -68683,7 +69135,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto48.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto49.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -68898,11 +69350,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto48, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto49, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto48 = require("crypto");
+    import_node_crypto49 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -69120,7 +69572,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto49.randomUUID)();
+  const exportId = (0, import_node_crypto50.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -69234,11 +69686,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto49, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto50, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto49 = require("crypto");
+    import_node_crypto50 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -69352,7 +69804,7 @@ async function exportSearchConsoleTableData(args) {
     offset += rows.length;
     if (stoppedForBytes || rows.length < limit || offset >= matchedRows) break;
   }
-  const exportId = (0, import_node_crypto50.randomUUID)();
+  const exportId = (0, import_node_crypto51.randomUUID)();
   const artifact = await args.writeArtifact({
     ownerId: args.ownerId,
     exportId,
@@ -69374,11 +69826,11 @@ async function exportSearchConsoleTableData(args) {
     warnings
   };
 }
-var import_node_crypto50, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
+var import_node_crypto51, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
 var init_search_console_table_export = __esm({
   "src/api/search-console-table-export.ts"() {
     "use strict";
-    import_node_crypto50 = require("crypto");
+    import_node_crypto51 = require("crypto");
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS = 5e4;
     SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE = 2e3;
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES = 50 * 1024 * 1024;
@@ -70557,7 +71009,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy5) => policy5.classification === "read").map((policy5) => policy5.name);
   const actionTools = [...policies.values()].filter((policy5) => policy5.classification === "action").map((policy5) => policy5.name);
-  const revision = (0, import_node_crypto51.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = (0, import_node_crypto52.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -70584,8 +71036,8 @@ async function callNangoToolDirect(args) {
     identity: args.identity,
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
-  const requestId = args.requestId?.trim() || (0, import_node_crypto51.randomUUID)();
-  const idempotencyKey3 = `main-nango:${(0, import_node_crypto51.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const requestId = args.requestId?.trim() || (0, import_node_crypto52.randomUUID)();
+  const idempotencyKey3 = `main-nango:${(0, import_node_crypto52.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -70610,7 +71062,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto51.createHash)("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto52.createHash)("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -70652,15 +71104,15 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: (0, import_node_crypto51.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: (0, import_node_crypto52.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-var import_node_crypto51, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
+var import_node_crypto52, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
 var init_main_nango_transport = __esm({
   "src/api/main-nango-transport.ts"() {
     "use strict";
-    import_node_crypto51 = require("crypto");
+    import_node_crypto52 = require("crypto");
     import_client13 = require("@modelcontextprotocol/client");
     init_service_connections();
     init_connected_usage_billing();
@@ -71284,8 +71736,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${(0, import_node_crypto52.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto52.randomUUID)()).digest("hex")}`;
-  const requestDigest = (0, import_node_crypto52.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${(0, import_node_crypto53.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto53.randomUUID)()).digest("hex")}`;
+  const requestDigest = (0, import_node_crypto53.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -71436,7 +71888,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto52.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto53.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -71713,11 +72165,11 @@ async function callMainOwnedExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto52, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto53, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto52 = require("crypto");
+    import_node_crypto53 = require("crypto");
     init_connected_data_export();
     init_slack_connected_data_export();
     init_main_nango_transport();
@@ -72073,7 +72525,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${(0, import_node_crypto53.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${(0, import_node_crypto54.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -72138,12 +72590,12 @@ async function callResendExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto53, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
+var import_node_crypto54, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
 var init_resend_control = __esm({
   "src/api/resend-control.ts"() {
     "use strict";
     init_connected_data_export();
-    import_node_crypto53 = require("crypto");
+    import_node_crypto54 = require("crypto");
     DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
     RESEND_PROVIDER_CONFIG_KEY = "resend";
     RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -72661,7 +73113,7 @@ async function chargeTierChangeNow(stripeClient, subscriptionId, customerId) {
     return { ok: false, amountDue: 0, error: err instanceof Error ? err.message : "Unable to charge the plan change immediately." };
   }
 }
-var import_resend3, import_node_crypto54, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS;
+var import_resend3, import_node_crypto55, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS;
 var init_server = __esm({
   "src/api/server.ts"() {
     "use strict";
@@ -72674,7 +73126,7 @@ var init_server = __esm({
     init_og();
     import_resend3 = require("resend");
     init_url_utils();
-    import_node_crypto54 = require("crypto");
+    import_node_crypto55 = require("crypto");
     init_kpo_extractor();
     init_screenshot();
     init_media_extractor();
@@ -74209,7 +74661,7 @@ var init_server = __esm({
         if (!harvestOk) return c.json(insufficientBalanceResponse(harvestBal, harvestCost), 402);
         jobId2 = await createJob(user.id, options.query, { ...options, billingHoldMc: harvestCost }, body.callback_url);
       } else {
-        jobId2 = (0, import_node_crypto54.randomUUID)();
+        jobId2 = (0, import_node_crypto55.randomUUID)();
         const billingDebitKey = `paa-harvest:${jobId2}:hold`;
         const description = `PAA harvest: ${options.query}`.slice(0, 500);
         const hold = await debitMcIdempotent(