mcp-scraper 0.48.0 → 0.50.0

package/dist/bin/api-server.cjs

@@ -41,11 +41,12 @@ function harvestTimeoutBudget(maxQuestions, serpOnly = false) {
   const clientMs = Math.min(serverMs + CLIENT_OVER_SERVER_MARGIN_MS, VERCEL_FUNCTION_MAX_MS - 5e3);
   return { serverMs, clientMs };
 }
-var VERCEL_FUNCTION_MAX_MS, CLIENT_OVER_SERVER_MARGIN_MS;
+var VERCEL_FUNCTION_MAX_MS, DEFAULT_TOOL_CLIENT_TIMEOUT_MS, CLIENT_OVER_SERVER_MARGIN_MS;
 var init_harvest_timeout = __esm({
   "src/harvest-timeout.ts"() {
     "use strict";
     VERCEL_FUNCTION_MAX_MS = 3e5;
+    DEFAULT_TOOL_CLIENT_TIMEOUT_MS = 3e5;
     CLIENT_OVER_SERVER_MARGIN_MS = 15e3;
   }
 });
@@ -4067,6 +4068,7 @@ async function migrate(options = {}) {
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS concurrency_locks_user_status ON concurrency_locks(user_id, status, expires_at)`);
   await db.execute(`CREATE INDEX IF NOT EXISTS concurrency_locks_operation ON concurrency_locks(operation, status, expires_at)`);
+  await db.execute(`CREATE INDEX IF NOT EXISTS concurrency_locks_active_user ON concurrency_locks(user_id, expires_at) WHERE status = 'active'`);
   await db.execute(`
     CREATE TABLE IF NOT EXISTS ledger (
       id          INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -4253,6 +4255,16 @@ async function migrate(options = {}) {
       updated_at                  TEXT NOT NULL DEFAULT (datetime('now'))
     )
   `);
+  await db.execute(`
+    CREATE TABLE IF NOT EXISTS connected_account_charges (
+      user_id       INTEGER NOT NULL,
+      connection_id TEXT NOT NULL,
+      period_start  TEXT NOT NULL,
+      amount_mc     INTEGER NOT NULL,
+      created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+      PRIMARY KEY (user_id, connection_id, period_start)
+    )
+  `);
   await db.execute(`
     CREATE TABLE IF NOT EXISTS billing_credits (
       idempotency_key TEXT PRIMARY KEY,
@@ -4441,6 +4453,7 @@ async function migrate(options = {}) {
     )
   `);
   await db.execute(`CREATE INDEX IF NOT EXISTS request_events_user_created_at ON request_events(user_id, created_at DESC)`);
+  await db.execute(`CREATE INDEX IF NOT EXISTS request_events_created_at ON request_events(created_at)`);
   await db.execute(`
     CREATE TABLE IF NOT EXISTS workflow_schedules (
       id             TEXT PRIMARY KEY,
@@ -6746,6 +6759,7 @@ var init_db = __esm({
       "billing_debits_user_status",
       "billing_events_authorization",
       "billing_events_user_created_at",
+      "concurrency_locks_active_user",
       "concurrency_locks_operation",
       "concurrency_locks_user_status",
       "credit_lots_user_active",
@@ -6765,6 +6779,7 @@ var init_db = __esm({
       "oauth_tokens_identity",
       "page_snapshots_user_checked_at",
       "prt_user_id",
+      "request_events_created_at",
       "request_events_user_created_at",
       "scheduled_run_view_links_expiry",
       "scheduled_run_view_links_owner_run",
@@ -23288,40 +23303,15 @@ function safeMetadata(metadata) {
     return null;
   }
 }
-async function ensureConcurrencyGateSchema() {
-  if (!schemaReady) {
-    schemaReady = (async () => {
-      const db = getDb();
-      await db.execute(`
-        CREATE TABLE IF NOT EXISTS concurrency_locks (
-          id          TEXT PRIMARY KEY,
-          user_id     INTEGER NOT NULL REFERENCES users(id),
-          operation   TEXT NOT NULL,
-          status      TEXT NOT NULL DEFAULT 'active',
-          acquired_at TEXT NOT NULL DEFAULT (datetime('now')),
-          expires_at  TEXT NOT NULL,
-          released_at TEXT,
-          metadata    TEXT
-        )
-      `);
-      await db.execute(`CREATE INDEX IF NOT EXISTS concurrency_locks_user_status ON concurrency_locks(user_id, status, expires_at)`);
-      await db.execute(`CREATE INDEX IF NOT EXISTS concurrency_locks_operation ON concurrency_locks(operation, status, expires_at)`);
-    })();
-  }
-  return schemaReady;
-}
 async function expireConcurrencyLocksForUser(userId) {
-  await ensureConcurrencyGateSchema();
   await getDb().execute({
-    sql: `UPDATE concurrency_locks
-          SET status = 'expired', released_at = datetime('now')
+    sql: `DELETE FROM concurrency_locks
           WHERE user_id = ? AND status = 'active' AND expires_at <= datetime('now')`,
     args: [userId]
   });
 }
-async function countActiveUsageForUser(userId) {
-  await ensureConcurrencyGateSchema();
-  await expireConcurrencyLocksForUser(userId);
+async function countActiveUsageForUser(userId, alreadyExpired = false) {
+  if (!alreadyExpired) await expireConcurrencyLocksForUser(userId);
   const res = await getDb().execute({
     sql: `SELECT
             (
@@ -23341,7 +23331,6 @@ async function countActiveUsageForUser(userId) {
 }
 async function reuseExistingConcurrencyGate(userId, lockId, ttlSeconds) {
   if (!/^cl_[a-f0-9]{24,32}$/.test(lockId)) return false;
-  await ensureConcurrencyGateSchema();
   await expireConcurrencyLocksForUser(userId);
   const res = await getDb().execute({
     sql: `UPDATE concurrency_locks
@@ -23355,13 +23344,12 @@ async function reuseExistingConcurrencyGate(userId, lockId, ttlSeconds) {
   return Number(res.rowsAffected ?? 0) > 0;
 }
 async function acquireConcurrencyGate(user, operation, options = {}) {
-  await ensureConcurrencyGateSchema();
   const limit = concurrencyLimitForUser(user);
   if (isConcurrencyLimitBypassed(user)) {
     return { ok: true, lockId: null, active: 0, limit, operation, bypassed: true };
   }
   if (options.reuseLockId && await reuseExistingConcurrencyGate(user.id, options.reuseLockId, options.ttlSeconds)) {
-    return { ok: true, lockId: null, active: await countActiveUsageForUser(user.id), limit, operation, reused: true };
+    return { ok: true, lockId: null, active: await countActiveUsageForUser(user.id, true), limit, operation, reused: true };
   }
   await expireConcurrencyLocksForUser(user.id);
   const lockId = `cl_${(0, import_node_crypto10.randomUUID)().replace(/-/g, "").slice(0, 24)}`;
@@ -23392,7 +23380,7 @@ async function acquireConcurrencyGate(user, operation, options = {}) {
       limit
     ]
   });
-  const active = await countActiveUsageForUser(user.id);
+  const active = await countActiveUsageForUser(user.id, true);
   if (Number(res.rowsAffected ?? 0) > 0) {
     return { ok: true, lockId, active, limit, operation };
   }
@@ -23400,17 +23388,13 @@ async function acquireConcurrencyGate(user, operation, options = {}) {
 }
 async function releaseConcurrencyGate(lockId) {
   if (!lockId) return;
-  await ensureConcurrencyGateSchema();
   await getDb().execute({
-    sql: `UPDATE concurrency_locks
-          SET status = 'released', released_at = datetime('now')
-          WHERE id = ? AND status = 'active'`,
+    sql: `DELETE FROM concurrency_locks WHERE id = ?`,
     args: [lockId]
   });
 }
 async function extendConcurrencyGate(lockId, ttlSeconds = DEFAULT_LOCK_TTL_SECONDS) {
   if (!lockId) return;
-  await ensureConcurrencyGateSchema();
   await getDb().execute({
     sql: `UPDATE concurrency_locks
           SET expires_at = datetime('now', ?)
@@ -23418,7 +23402,7 @@ async function extendConcurrencyGate(lockId, ttlSeconds = DEFAULT_LOCK_TTL_SECON
     args: [lockTtlModifier(ttlSeconds), lockId]
   });
 }
-var import_node_crypto10, DEFAULT_LOCK_TTL_SECONDS, DEFAULT_RETRY_AFTER_SECONDS, MAX_LOCK_TTL_SECONDS, schemaReady;
+var import_node_crypto10, DEFAULT_LOCK_TTL_SECONDS, DEFAULT_RETRY_AFTER_SECONDS, MAX_LOCK_TTL_SECONDS;
 var init_concurrency_gates = __esm({
   "src/api/concurrency-gates.ts"() {
     "use strict";
@@ -23428,7 +23412,6 @@ var init_concurrency_gates = __esm({
     DEFAULT_LOCK_TTL_SECONDS = 15 * 60;
     DEFAULT_RETRY_AFTER_SECONDS = 30;
     MAX_LOCK_TTL_SECONDS = 24 * 60 * 60;
-    schemaReady = null;
   }
 });
 
@@ -27530,7 +27513,7 @@ async function recoverSettlement(row, user, authorization, duplicate) {
     }
   }
   await getDb().execute({
-    sql: "UPDATE billing_events SET status = 'settled', settled_at = datetime('now') WHERE id = ? AND status = 'settling'",
+    sql: "UPDATE billing_events SET status = 'settled', settled_at = datetime('now') WHERE id = ? AND status IN ('settling', 'cost_pending')",
     args: [row.id]
   });
   await getDb().execute({
@@ -27575,11 +27558,13 @@ async function settleScheduledRun(args) {
   const rawCostNanos = rawCostUsd == null ? null : Math.round(rawCostUsd * USD_NANOS);
   const modelMc = rawCostUsd == null ? 0 : vendorCostUsdToMc(rawCostUsd, SCHEDULED_AGENT_LLM_MARKUP_BPS);
   const maximumModelMc = Math.max(0, Number(authorization.maximum_amount_mc) - SCHEDULED_RUN_BASE_MC);
-  const pendingReason = args.modelCostStatus === "missing" ? "openrouter_cost_missing" : modelMc > maximumModelMc ? "max_credits_per_run_exceeded" : null;
+  const modelCostUnreported = args.modelCostStatus === "missing";
+  const pendingReason = modelMc > maximumModelMc ? "max_credits_per_run_exceeded" : null;
   const metadata = safeMetadata2({
     ...args.metadata,
     billingPhase: "settlement",
     chargeMode: "model_delta",
+    ...modelCostUnreported ? { modelCostUnreported: true } : {},
     ...pendingReason ? { reason: pendingReason } : {}
   });
   const eventId = existing?.id ?? (0, import_node_crypto14.randomUUID)();
@@ -27623,6 +27608,72 @@ async function settleScheduledRun(args) {
   }
   return recoverSettlement(existing, user, authorization, duplicateClaim);
 }
+async function reconcileScheduledRunSettlements(limit = 25, minimumAgeHours = 24) {
+  const stale = await getDb().execute({
+    sql: `SELECT id, authorization_id, status, amount_mc, raw_cost_usd_nanos, multiplier_bps, metadata
+          FROM billing_events
+          WHERE billing_class = ? AND status = 'cost_pending'
+            AND created_at < datetime('now', ?)
+          ORDER BY created_at
+          LIMIT ?`,
+    args: [SCHEDULED_RUN_BILLING_CLASS, `-${Math.max(1, Math.trunc(minimumAgeHours))} hours`, Math.max(1, Math.trunc(limit))]
+  });
+  const result = { checked: stale.rows.length, settled: 0, chargedMc: 0, failed: 0 };
+  for (const raw of stale.rows) {
+    const row = raw;
+    try {
+      const authorization = await authorizationById(row.authorization_id);
+      if (!authorization) {
+        result.failed += 1;
+        continue;
+      }
+      const cap = Math.max(0, Number(authorization.maximum_amount_mc) - SCHEDULED_RUN_BASE_MC);
+      const chargeMc = Math.min(Math.max(0, Math.round(Number(row.amount_mc))), cap);
+      if (chargeMc > 0) {
+        const debit = await debitMcIdempotent(
+          Number(authorization.user_id),
+          chargeMc,
+          LedgerOperation.SCHEDULED_RUN,
+          "scheduled-run:" + authorization.id + ":model:reconciled",
+          authorization.id + ":model"
+        );
+        if (!debit.ok) {
+          result.failed += 1;
+          continue;
+        }
+      }
+      await getDb().execute({
+        sql: `UPDATE billing_events
+              SET status = 'settled', amount_mc = ?, settled_at = datetime('now'), metadata = ?
+              WHERE id = ? AND status = 'cost_pending'`,
+        args: [
+          chargeMc,
+          safeMetadata2({ ...metadataReason(row) ? { reason: metadataReason(row) } : {}, autoReconciled: true, cappedAtAuthorizedMaximum: chargeMc < Number(row.amount_mc) }),
+          row.id
+        ]
+      });
+      await getDb().execute({
+        sql: "UPDATE billing_authorizations SET status = 'settled', settled_at = datetime('now') WHERE id = ? AND status IN ('started', 'cost_pending')",
+        args: [authorization.id]
+      });
+      result.settled += 1;
+      result.chargedMc += chargeMc;
+      console.error(JSON.stringify({
+        event: "scheduled_run_settlement_reconciled",
+        authorization_id: authorization.id,
+        charged_mc: chargeMc,
+        reason: metadataReason(row) ?? "unreported_cost"
+      }));
+    } catch (err) {
+      result.failed += 1;
+      console.error(JSON.stringify({
+        event: "scheduled_run_reconciliation_failed",
+        message: err instanceof Error ? err.message : String(err)
+      }));
+    }
+  }
+  return result;
+}
 async function voidScheduledRunAuthorization(args) {
   const user = await resolveSchedulingUser(args.identity);
   const authorization = await authorizationById(args.authorizationId);
@@ -28609,28 +28660,6 @@ var init_inbox_routes = __esm({
 });
 
 // src/api/connected-account-billing.ts
-async function ensureConnectedAccountBillingSchema() {
-  await getDb().execute(`CREATE TABLE IF NOT EXISTS connected_account_billing (
-    user_id INTEGER PRIMARY KEY,
-    stripe_subscription_id TEXT,
-    stripe_subscription_item_id TEXT,
-    price_id TEXT,
-    quantity INTEGER NOT NULL DEFAULT 0,
-    status TEXT NOT NULL DEFAULT 'pending',
-    last_error_code TEXT,
-    checked_at TEXT NOT NULL DEFAULT (datetime('now')),
-    synced_at TEXT,
-    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
-  )`);
-  await getDb().execute(`CREATE TABLE IF NOT EXISTS connected_account_charges (
-    user_id       INTEGER NOT NULL,
-    connection_id TEXT NOT NULL,
-    period_start  TEXT NOT NULL,
-    amount_mc     INTEGER NOT NULL,
-    created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-    PRIMARY KEY (user_id, connection_id, period_start)
-  )`);
-}
 function connectedBillingPeriodStart(now = /* @__PURE__ */ new Date()) {
   return `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, "0")}`;
 }
@@ -28638,7 +28667,6 @@ function isBillableConnection(connection) {
   return BILLABLE_LIFECYCLE.has(String(connection.lifecycleStatus ?? ""));
 }
 async function chargedConnectionIds(userId, periodStart) {
-  await ensureConnectedAccountBillingSchema();
   const result = await getDb().execute({
     sql: "SELECT connection_id FROM connected_account_charges WHERE user_id = ? AND period_start = ?",
     args: [Number(userId), periodStart]
@@ -28646,7 +28674,6 @@ async function chargedConnectionIds(userId, periodStart) {
   return new Set(result.rows.map((row) => String(row.connection_id)));
 }
 async function getConnectedAccountBillingState2(userId) {
-  await ensureConnectedAccountBillingSchema();
   const result = await getDb().execute({
     sql: "SELECT * FROM connected_account_billing WHERE user_id = ? LIMIT 1",
     args: [Number(userId)]
@@ -28654,7 +28681,6 @@ async function getConnectedAccountBillingState2(userId) {
   return result.rows[0] ? result.rows[0] : null;
 }
 async function setConnectedAccountBillingState2(input) {
-  await ensureConnectedAccountBillingSchema();
   await getDb().execute({
     sql: `INSERT INTO connected_account_billing
       (user_id, stripe_subscription_id, stripe_subscription_item_id, price_id, quantity, status, last_error_code, checked_at, synced_at, updated_at)
@@ -37670,6 +37696,89 @@ var init_paa_harvest_reconciliation = __esm({
   }
 });
 
+// src/api/retention-sweeps.ts
+function cutoffFor(rule) {
+  const cutoff = new Date(Date.now() - rule.retentionDays * 24 * 60 * 60 * 1e3);
+  if (rule.timestampFormat === "iso8601") return cutoff.toISOString();
+  return cutoff.toISOString().replace("T", " ").slice(0, 19);
+}
+async function tableExists(table) {
+  const res = await getDb().execute({
+    sql: "SELECT 1 FROM sqlite_master WHERE type='table' AND name = ? LIMIT 1",
+    args: [table]
+  });
+  return res.rows.length > 0;
+}
+async function sweepRule(rule, maxDeletes) {
+  if (!await tableExists(rule.table)) return 0;
+  const filter = rule.where ? ` AND ${rule.where}` : "";
+  const cutoff = cutoffFor(rule);
+  let deleted = 0;
+  while (deleted < maxDeletes) {
+    const res = await getDb().execute({
+      sql: `DELETE FROM ${rule.table} WHERE rowid IN (
+              SELECT rowid FROM ${rule.table}
+              WHERE ${rule.timestampColumn} < ?${filter}
+              LIMIT ?)`,
+      args: [cutoff, Math.min(DEFAULT_BATCH, maxDeletes - deleted)]
+    });
+    const n = Number(res.rowsAffected ?? 0);
+    deleted += n;
+    if (n === 0) break;
+  }
+  return deleted;
+}
+async function sweepRetention(options = {}) {
+  const maxDeletes = options.maxDeletesPerRule ?? DEFAULT_MAX_DELETES_PER_RULE;
+  const deadline = Date.now() + (options.deadlineMs ?? DEFAULT_SWEEP_DEADLINE_MS);
+  const perTable = {};
+  let deleted = 0;
+  let truncated = false;
+  for (const rule of RETENTION_RULES) {
+    const key = rule.where ? `${rule.table}:${rule.where}` : rule.table;
+    if (Date.now() >= deadline) {
+      truncated = true;
+      break;
+    }
+    try {
+      const n = await sweepRule(rule, maxDeletes);
+      perTable[key] = n;
+      deleted += n;
+      if (n >= maxDeletes) truncated = true;
+    } catch (err) {
+      perTable[key] = -1;
+      console.error(JSON.stringify({
+        event: "retention_sweep_failed",
+        table: rule.table,
+        message: err instanceof Error ? err.message : String(err)
+      }));
+    }
+  }
+  return { deleted, perTable, truncated };
+}
+var REPORTING_WINDOW_DAYS, TELEMETRY_RETENTION_DAYS, FAILURE_RETENTION_DAYS, RETENTION_RULES, DEFAULT_BATCH, DEFAULT_MAX_DELETES_PER_RULE, DEFAULT_SWEEP_DEADLINE_MS;
+var init_retention_sweeps = __esm({
+  "src/api/retention-sweeps.ts"() {
+    "use strict";
+    init_db();
+    REPORTING_WINDOW_DAYS = 30;
+    TELEMETRY_RETENTION_DAYS = 45;
+    FAILURE_RETENTION_DAYS = 90;
+    RETENTION_RULES = [
+      { table: "request_events", timestampColumn: "created_at", retentionDays: TELEMETRY_RETENTION_DAYS },
+      { table: "kernel_session_log", timestampColumn: "created_at", retentionDays: TELEMETRY_RETENTION_DAYS },
+      { table: "vendor_usage_log", timestampColumn: "created_at", retentionDays: TELEMETRY_RETENTION_DAYS },
+      { table: "harvest_attempts", timestampColumn: "created_at", retentionDays: TELEMETRY_RETENTION_DAYS, timestampFormat: "iso8601" },
+      { table: "browser_agent_actions", timestampColumn: "created_at", retentionDays: REPORTING_WINDOW_DAYS },
+      { table: "jobs", timestampColumn: "created_at", retentionDays: TELEMETRY_RETENTION_DAYS, where: "status = 'done'" },
+      { table: "jobs", timestampColumn: "created_at", retentionDays: FAILURE_RETENTION_DAYS, where: "status = 'failed'" }
+    ];
+    DEFAULT_BATCH = 500;
+    DEFAULT_MAX_DELETES_PER_RULE = 1e3;
+    DEFAULT_SWEEP_DEADLINE_MS = 15e3;
+  }
+});
+
 // src/api/directory-workflow-reconciliation.ts
 async function reconcileDirectoryWorkflowSettlements(limit = 25) {
   const expiredStarts = await listExpiredDirectoryWorkflowStarts(limit);
@@ -41371,7 +41480,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.48.0";
+    PACKAGE_VERSION = "0.50.0";
   }
 });
 
@@ -41429,6 +41538,8 @@ seam is noted so you can chain them.
   JSON-LD, media, citations, source metadata, related entities, trails, and saved account filters.
 - Read one published entity -> **commons_get_entity**. It returns the Wikidata-style backend fields,
   JSON-LD, source provenance, media, ledger, and the Wikipedia-style page projection.
+- Read its machine-verifiable governed relationships -> **commons_get_entity_linkset**. It returns the
+  RFC 9264 linkset projection; do not infer claim status from loose See Also labels.
 - List unresolved See Also concepts -> **commons_list_needs_links**. Use it to find concepts that appear
   in public See Also sections but do not yet have a Commons entity ID or /wiki/ slug.
 - Plan a new or edited entity -> **commons_prepare_entity**. This is the Commons equivalent of
@@ -42565,7 +42676,7 @@ var init_contracts = __esm({
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod42, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
+var import_zod42, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
@@ -42870,6 +42981,9 @@ var init_mcp_tool_schemas = __esm({
       idOrSlug: import_zod42.z.string().trim().min(1).max(180).describe("Transparent Public Wiki entity id such as TPW-Q... or a public /wiki/ slug."),
       includeWikiPage: import_zod42.z.boolean().default(true).describe("Include the Wikipedia-style page projection used by transparent-commons.cc/wiki/.")
     };
+    CommonsGetEntityLinksetInputSchema = {
+      idOrSlug: import_zod42.z.string().trim().min(1).max(180).describe("Transparent Commons TPW-Q entity id or /wiki/ slug whose governed RFC 9264 linkset should be read.")
+    };
     CommonsFeaturedImageInputSchema = import_zod42.z.object({
       url: import_zod42.z.string().url().describe("Required public image URL for a publishable entity. Use extract_url includeFeaturedImage or preserved media when available."),
       alt: import_zod42.z.string().trim().max(500).optional(),
@@ -42922,6 +43036,27 @@ var init_mcp_tool_schemas = __esm({
       imageUrl: import_zod42.z.string().trim().max(2e3).optional().describe("Optional preview image for hover cards when available."),
       needsLink: import_zod42.z.boolean().default(false).describe("Set true when the concept belongs in See Also but no existing Commons entity/page exists yet. The backend exposes these records through commons_list_needs_links.")
     }).strict();
+    CommonsClaimInputSchema = import_zod42.z.object({
+      predicate: import_zod42.z.string().trim().min(1).max(500).describe("Registered link relation such as related, describedby, license, or type; alternatively an absolute HTTPS relation URI from a published vocabulary."),
+      predicateLabel: import_zod42.z.string().trim().max(160).optional().describe("Human-readable label for display and review. It does not replace the machine predicate."),
+      objectEntityId: import_zod42.z.string().trim().regex(/^TPW-Q[A-Za-z0-9._-]+$/).max(80).optional().describe("Existing Transparent Commons entity target. Use exactly one of objectEntityId or objectUrl."),
+      objectUrl: import_zod42.z.string().url().refine((value) => value.startsWith("https://"), "objectUrl must use HTTPS.").optional().describe("External or third-party target. Use exactly one of objectUrl or objectEntityId."),
+      title: import_zod42.z.string().trim().max(500).optional(),
+      mediaType: import_zod42.z.string().trim().max(160).optional().describe("Optional RFC link target media type."),
+      hreflang: import_zod42.z.array(import_zod42.z.string().trim().min(1).max(80)).max(20).optional().describe("Optional repeatable RFC link target language hints."),
+      qualifiers: import_zod42.z.record(import_zod42.z.string().max(120), import_zod42.z.union([import_zod42.z.string(), import_zod42.z.number(), import_zod42.z.boolean(), import_zod42.z.null()])).optional(),
+      references: import_zod42.z.array(CommonsCitationInputSchema).max(50).optional().describe("Evidence supporting the relationship assertion."),
+      rank: import_zod42.z.enum(["preferred", "normal", "deprecated"]).default("normal"),
+      confidence: import_zod42.z.number().min(0).max(1).default(1),
+      confidenceReason: import_zod42.z.string().trim().max(1e3).optional(),
+      disputeState: import_zod42.z.enum(["undisputed", "attributed", "disputed", "contested", "needs_review", "deprecated"]).default("undisputed"),
+      validFrom: import_zod42.z.string().trim().max(80).optional(),
+      validTo: import_zod42.z.string().trim().max(80).optional(),
+      asOf: import_zod42.z.string().trim().max(80).optional(),
+      sourceFamily: import_zod42.z.enum(["first_party", "partner", "independent", "community", "unknown"]).default("unknown")
+    }).strict().refine((claim) => Boolean(claim.objectEntityId) !== Boolean(claim.objectUrl), {
+      message: "Provide exactly one of objectEntityId or objectUrl."
+    });
     CommonsPrepareEntityInputSchema = {
       title: import_zod42.z.string().trim().min(1).max(180).describe("Candidate public page title. Used to derive slug, choose a profile, and search duplicate entities."),
       description: import_zod42.z.string().trim().max(600).optional().describe("Optional candidate summary. Include when known so the prepare pass can route and validate the article shape."),
@@ -42961,6 +43096,7 @@ var init_mcp_tool_schemas = __esm({
         url: import_zod42.z.string().url().optional(),
         description: import_zod42.z.string().trim().max(300).optional()
       }).strict()).max(200).optional().describe("Related concepts, including trails. Existing entities should use entityId."),
+      claims: import_zod42.z.array(CommonsClaimInputSchema).max(300).optional().describe("Governed relationship assertions. Supplying claims replaces the accepted claim set for this entity; omitting claims preserves it. Only approved, active, non-disputed claims project into the RFC 9264 linkset."),
       bodyMarkdown: import_zod42.z.string().max(5e5).optional().describe("Structured encyclopedia body in neutral Markdown, not a raw scrape dump or blog essay. Use H2 for entity-profile sections and H3/H4/H5 for subtopics; every heading appears in the public page menu. Call commons_prepare_entity first for the live entity profile and commons_validate_entity before submit. Profile sections are adaptive: include History, Pricing, Reception, Timeline, Classification, or similar sections only when source evidence supports them; omit unsupported sections instead of adding empty/filler headings. Apply NPOV, verifiability, and no-original-research rules; self-published sources can support only uncontroversial source-owned facts."),
       contentSections: import_zod42.z.array(import_zod42.z.object({
         id: import_zod42.z.string().trim().max(180).optional(),
@@ -46230,6 +46366,19 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
       openWorldHint: false
     }
   }, async (input) => executor.commonsGetEntity(input));
+  server.registerTool("commons_get_entity_linkset", {
+    title: "Transparent Commons RFC 9264 Linkset",
+    description: "Read the governed RFC 9264 application/linkset+json projection for one published Transparent Commons entity. The anchor is the canonical /wiki/ page; only approved, active, non-disputed claims are included, while third-party targets remain explicit HTTPS links.",
+    inputSchema: CommonsGetEntityLinksetInputSchema,
+    outputSchema: recordOutputSchema("commons_get_entity_linkset", CommonsGenericOutputSchema),
+    annotations: {
+      title: "Transparent Commons RFC 9264 Linkset",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  }, async (input) => executor.commonsGetEntityLinkset(input));
   server.registerTool("commons_list_needs_links", {
     title: "Transparent Commons Needs-Link Backlog",
     description: "List unresolved See Also concepts from published Transparent Commons pages. Use this after search/lookup when an agent needs to grow the graph: each result names a concept that appears in See Also but does not yet have a resolved Commons entityId or /wiki/ slug. This is platform Commons graph data, not personal Memory storage.",
@@ -46722,6 +46871,29 @@ var init_paa_mcp_server = __esm({
 });
 
 // src/mcp/http-mcp-tool-executor.ts
+function unclassifiedTransportFailure(path6, err) {
+  const name = err instanceof Error ? err.name : typeof err;
+  const detail = err instanceof Error ? err.message : String(err);
+  console.error(JSON.stringify({
+    event: "mcp_executor_transport_failed",
+    path: path6,
+    error_name: name,
+    error_message: sanitizeVendorName(detail).slice(0, 400)
+  }));
+  return {
+    content: [{
+      type: "text",
+      text: JSON.stringify({
+        error: "service_unavailable",
+        error_type: name,
+        retryable: true,
+        path: path6,
+        message: publicErrorMessage("service_unavailable")
+      })
+    }],
+    isError: true
+  };
+}
 function youtubeVideoIdFromUrl(url) {
   if (!url) return null;
   try {
@@ -46831,7 +47003,7 @@ var init_http_mcp_tool_executor = __esm({
         const rawOverride = process.env.MCP_SCRAPER_HTTP_TIMEOUT_MS;
         const parsedOverride = rawOverride === void 0 ? NaN : Number(rawOverride);
         this.httpTimeoutOverrideMs = Number.isFinite(parsedOverride) && parsedOverride > 0 ? parsedOverride : null;
-        this.timeoutMs = this.httpTimeoutOverrideMs ?? 11e4;
+        this.timeoutMs = this.httpTimeoutOverrideMs ?? DEFAULT_TOOL_CLIENT_TIMEOUT_MS;
         const configuredSerpIntelligenceTimeoutMs = Number(process.env.MCP_SCRAPER_SERP_INTELLIGENCE_HTTP_TIMEOUT_MS ?? this.timeoutMs);
         this.serpIntelligenceTimeoutMs = Number.isFinite(configuredSerpIntelligenceTimeoutMs) && configuredSerpIntelligenceTimeoutMs > 0 ? configuredSerpIntelligenceTimeoutMs : this.timeoutMs;
       }
@@ -46870,7 +47042,7 @@ var init_http_mcp_tool_executor = __esm({
               isError: true
             };
           }
-          return { content: [{ type: "text", text: publicErrorMessage("service_unavailable") }], isError: true };
+          return unclassifiedTransportFailure(path6, err);
         }
       }
       async callConnectedMutation(path6, body, idempotencyKey3, timeoutMs = this.timeoutMs) {
@@ -46904,8 +47076,8 @@ var init_http_mcp_tool_executor = __esm({
             return { content: [{ type: "text", text: JSON.stringify(httpErrorPayload(path6, res, data)) }], isError: true };
           }
           return { content: [{ type: "text", text: JSON.stringify(data) }] };
-        } catch {
-          return { content: [{ type: "text", text: publicErrorMessage("service_unavailable") }], isError: true };
+        } catch (err) {
+          return unclassifiedTransportFailure(path6, err);
         }
       }
       async getTextArtifact(path6, maxBytes, timeoutMs = this.timeoutMs) {
@@ -46942,7 +47114,7 @@ var init_http_mcp_tool_executor = __esm({
             }]
           };
         } catch (err) {
-          return { content: [{ type: "text", text: publicErrorMessage("service_unavailable") }], isError: true };
+          return unclassifiedTransportFailure(path6, err);
         }
       }
       harvestPaa(input) {
@@ -47299,6 +47471,9 @@ var init_http_mcp_tool_executor = __esm({
           return result;
         }
       }
+      commonsGetEntityLinkset(input) {
+        return this.getJson(`/commons/entities/${encodeURIComponent(input.idOrSlug)}/linkset?envelope=true`);
+      }
       commonsPrepareEntity(input) {
         return this.call("/commons/entities/prepare", input);
       }
@@ -53262,13 +53437,21 @@ async function setBilledMc(id, billedMc) {
     args: [Math.round(billedMc), id]
   });
 }
-async function markSessionClosed(id) {
+async function markSessionClosed(id, runtimeClosed = true) {
   const db = getDb();
   await db.execute({
-    sql: `UPDATE browser_agent_sessions SET status = 'closed', closed_at = datetime('now') WHERE id = ?`,
-    args: [id]
+    sql: `UPDATE browser_agent_sessions SET status = ?, closed_at = datetime('now') WHERE id = ?`,
+    args: [runtimeClosed ? "closed" : ORPHANED_SESSION_STATUS, id]
   });
 }
+async function listOrphanedSessionRows(limit = 50) {
+  const db = getDb();
+  const res = await db.execute({
+    sql: `SELECT * FROM browser_agent_sessions WHERE status = ? ORDER BY closed_at LIMIT ?`,
+    args: [ORPHANED_SESSION_STATUS, Math.max(1, Math.min(200, Math.round(limit)))]
+  });
+  return res.rows;
+}
 async function recordAction(input) {
   const db = getDb();
   await db.execute({
@@ -53315,7 +53498,7 @@ async function listReplayRows(sessionId) {
   });
   return res.rows;
 }
-var import_node_crypto28, _ready2, _migrationPromise2;
+var import_node_crypto28, _ready2, _migrationPromise2, ORPHANED_SESSION_STATUS;
 var init_browser_agent_db = __esm({
   "src/api/browser-agent-db.ts"() {
     "use strict";
@@ -53323,6 +53506,7 @@ var init_browser_agent_db = __esm({
     init_db();
     _ready2 = false;
     _migrationPromise2 = null;
+    ORPHANED_SESSION_STATUS = "runtime_close_pending";
   }
 });
 
@@ -54479,6 +54663,21 @@ async function charge(sessionId, userId, _startedAtMs) {
     if (res.ok) await setBilledMc(sessionId, owed);
   }
 }
+async function closeRuntimeSession(runtimeSessionId, sessionId) {
+  try {
+    await closeSession(runtimeSessionId);
+    return true;
+  } catch (err) {
+    console.error(JSON.stringify({
+      event: "browser_runtime_close_failed",
+      session_id: sessionId,
+      runtime_session_id: runtimeSessionId,
+      error_name: err instanceof Error ? err.name : typeof err,
+      message: sanitizeVendorName(err instanceof Error ? err.message : String(err)).slice(0, 300)
+    }));
+    return false;
+  }
+}
 async function closeAndSettleSession(row) {
   if (row.user_id != null) {
     try {
@@ -54486,15 +54685,24 @@ async function closeAndSettleSession(row) {
     } catch {
     }
   }
-  try {
-    await closeSession(row.runtime_session_id);
-  } catch {
-  }
-  await markSessionClosed(row.id).catch(() => {
+  const runtimeClosed = await closeRuntimeSession(row.runtime_session_id, row.id);
+  await markSessionClosed(row.id, runtimeClosed).catch(() => {
   });
   await releaseConcurrencyGate(row.concurrency_lock_id).catch(() => {
   });
 }
+async function retryOrphanedBrowserSessions(limit = 50) {
+  const rows = await listOrphanedSessionRows(limit);
+  let recovered = 0;
+  for (const row of rows) {
+    if (await closeRuntimeSession(row.runtime_session_id, row.id)) {
+      await markSessionClosed(row.id, true).catch(() => {
+      });
+      recovered++;
+    }
+  }
+  return { recovered, stillOpen: rows.length - recovered };
+}
 async function completeAuthConnection(connectionId) {
   const connection = await getAuthConnectionRow(connectionId);
   if (!connection) return { ok: false, error: "not found" };
@@ -54519,7 +54727,7 @@ async function reapIdleBrowserSessions(idleSeconds = 120) {
 function publicSession(row) {
   return {
     session_id: row.id,
-    status: row.status,
+    status: row.status === ORPHANED_SESSION_STATUS ? "closed" : row.status,
     label: row.label,
     watch_url: `/console/${row.id}`,
     created_at: row.created_at,
@@ -59404,9 +59612,228 @@ var init_editorial_reading_room_routes = __esm({
   }
 });
 
+// src/api/schema-presence.ts
+async function loadSchemaObjects() {
+  const res = await getDb().execute(
+    "SELECT name FROM sqlite_master WHERE type IN ('table', 'index')"
+  );
+  return new Set(res.rows.map((row) => String(row.name)));
+}
+function invalidateSchemaPresence() {
+  cache = null;
+}
+async function schemaObjectsPresent(names) {
+  if (names.length === 0) return true;
+  try {
+    if (!cache) cache = loadSchemaObjects();
+    const present = await cache;
+    if (names.every((name) => present.has(name))) return true;
+    invalidateSchemaPresence();
+    return false;
+  } catch {
+    invalidateSchemaPresence();
+    return false;
+  }
+}
+var cache;
+var init_schema_presence = __esm({
+  "src/api/schema-presence.ts"() {
+    "use strict";
+    init_db();
+    cache = null;
+  }
+});
+
+// src/api/commons-linksets.ts
+function normalizeCommonsClaims(input) {
+  if (input === void 0) return void 0;
+  if (!Array.isArray(input)) throw new Error("claims must be an array.");
+  if (input.length > 300) throw new Error("claims must contain no more than 300 assertions.");
+  const seen = /* @__PURE__ */ new Set();
+  return input.map((claim, index) => {
+    const predicate = String(claim.predicate ?? "").trim();
+    if (!isSupportedPredicate(predicate)) {
+      throw new Error(`claims[${index}].predicate must be a supported registered relation or an absolute HTTPS relation URI.`);
+    }
+    const objectEntityId = optionalText(claim.objectEntityId, 80);
+    const objectUrl = optionalHttpsUrl(claim.objectUrl, `claims[${index}].objectUrl`);
+    if ((objectEntityId ? 1 : 0) + (objectUrl ? 1 : 0) !== 1) {
+      throw new Error(`claims[${index}] must provide exactly one of objectEntityId or objectUrl.`);
+    }
+    if (objectEntityId && !/^TPW-Q[A-Za-z0-9._-]+$/.test(objectEntityId)) {
+      throw new Error(`claims[${index}].objectEntityId must be a Transparent Commons TPW-Q identifier.`);
+    }
+    const confidence = claim.confidence ?? 1;
+    if (!Number.isFinite(confidence) || confidence < 0 || confidence > 1) {
+      throw new Error(`claims[${index}].confidence must be between 0 and 1.`);
+    }
+    const key = `${predicate}\0${objectEntityId ?? objectUrl}`;
+    if (seen.has(key)) throw new Error(`claims[${index}] duplicates another predicate and object pair.`);
+    seen.add(key);
+    return {
+      predicate,
+      predicateLabel: optionalText(claim.predicateLabel, 160),
+      objectEntityId,
+      objectUrl,
+      title: optionalText(claim.title, 500),
+      mediaType: optionalText(claim.mediaType, 160),
+      hreflang: normalizeHreflang(claim.hreflang),
+      qualifiers: normalizeScalarRecord(claim.qualifiers),
+      references: normalizeReferences(claim.references),
+      rank: claim.rank ?? "normal",
+      confidence,
+      confidenceReason: optionalText(claim.confidenceReason, 1e3),
+      disputeState: claim.disputeState ?? "undisputed",
+      validFrom: optionalDate(claim.validFrom, `claims[${index}].validFrom`),
+      validTo: optionalDate(claim.validTo, `claims[${index}].validTo`),
+      asOf: optionalDate(claim.asOf, `claims[${index}].asOf`),
+      sourceFamily: claim.sourceFamily ?? "unknown"
+    };
+  });
+}
+function claimIsPublic(claim, now = /* @__PURE__ */ new Date()) {
+  if (claim.reviewState !== "approved" || claim.rank === "deprecated") return false;
+  if (!["undisputed", "attributed"].includes(claim.disputeState ?? "undisputed")) return false;
+  const timestamp2 = now.getTime();
+  if (claim.validFrom && Date.parse(claim.validFrom) > timestamp2) return false;
+  if (claim.validTo && Date.parse(claim.validTo) < timestamp2) return false;
+  return true;
+}
+function buildCommonsLinkset(entity, claims) {
+  const publicUrl = `${commonsPublicWikiBaseUrl()}/wiki/${encodeURIComponent(entity.slug)}`;
+  const linksetUrl = commonsLinksetUrl(entity.id);
+  const context = { anchor: publicUrl };
+  const publicClaims = claims.filter((claim) => claimIsPublic(claim)).sort((a, b) => a.predicate.localeCompare(b.predicate) || a.href.localeCompare(b.href) || a.id.localeCompare(b.id));
+  for (const claim of publicClaims) {
+    const targets = context[claim.predicate] ?? [];
+    const target = { href: claim.href };
+    if (claim.mediaType) target.type = claim.mediaType;
+    if (claim.hreflang) target.hreflang = claim.hreflang;
+    if (claim.title) target.title = claim.title;
+    targets.push(target);
+    context[claim.predicate] = targets;
+  }
+  const document2 = { linkset: [context] };
+  const etag = `"${(0, import_node_crypto34.createHash)("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
+  return { document: document2, etag, publicUrl, linksetUrl, profile: COMMONS_RELATIONSHIP_PROFILE };
+}
+function commonsLinksetDiscoveryHeader(idOrSlug) {
+  const url = commonsLinksetUrl(idOrSlug);
+  return `<${url}>; rel="linkset"; type="${COMMONS_LINKSET_MEDIA_TYPE}"; profile="${COMMONS_RELATIONSHIP_PROFILE}"`;
+}
+function commonsLinksetUrl(idOrSlug) {
+  const base = (process.env.APP_URL?.trim() || "https://mcpscraper.dev").replace(/\/+$/, "");
+  return `${base}/commons/entities/${encodeURIComponent(idOrSlug)}/linkset`;
+}
+function commonsClaimIdentityKey(claim) {
+  return `${claim.predicate}\0${claim.objectEntityId ?? claim.objectUrl ?? ""}`;
+}
+function commonsPublicWikiBaseUrl() {
+  return (process.env.TRANSPARENT_COMMONS_PUBLIC_BASE_URL?.trim() || "https://transparent-commons.cc").replace(/\/+$/, "");
+}
+function isSupportedPredicate(value) {
+  if (REGISTERED_RELATIONS.has(value)) return true;
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && Boolean(url.hostname);
+  } catch {
+    return false;
+  }
+}
+function optionalText(value, max) {
+  const text2 = String(value ?? "").trim();
+  return text2 ? text2.slice(0, max) : void 0;
+}
+function optionalHttpsUrl(value, field) {
+  const text2 = optionalText(value, 2e3);
+  if (!text2) return void 0;
+  try {
+    const url = new URL(text2);
+    if (url.protocol !== "https:") throw new Error();
+    url.hash = "";
+    return url.href;
+  } catch {
+    throw new Error(`${field} must be an absolute HTTPS URL.`);
+  }
+}
+function optionalDate(value, field) {
+  const text2 = optionalText(value, 80);
+  if (!text2) return void 0;
+  const timestamp2 = Date.parse(text2);
+  if (!Number.isFinite(timestamp2)) throw new Error(`${field} must be an ISO-compatible date.`);
+  return new Date(timestamp2).toISOString();
+}
+function normalizeScalarRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  return Object.fromEntries(Object.entries(value).slice(0, 50).map(([key, item]) => [key.slice(0, 120), item]));
+}
+function normalizeReferences(value) {
+  if (!Array.isArray(value)) return void 0;
+  return value.slice(0, 50).map((reference) => ({
+    title: String(reference.title ?? "").trim().slice(0, 240),
+    url: optionalHttpsUrl(reference.url, "claim reference URL"),
+    source: optionalText(reference.source, 240),
+    note: optionalText(reference.note, 1e3),
+    accessedAt: optionalDate(reference.accessedAt, "claim reference accessedAt")
+  })).filter((reference) => reference.title);
+}
+function normalizeHreflang(value) {
+  if (!Array.isArray(value)) return void 0;
+  const languages = [...new Set(value.map((item) => optionalText(item, 80)).filter((item) => Boolean(item)))];
+  return languages.length ? languages : void 0;
+}
+var import_node_crypto34, COMMONS_LINKSET_MEDIA_TYPE, COMMONS_RELATIONSHIP_PROFILE, REGISTERED_RELATIONS;
+var init_commons_linksets = __esm({
+  "src/api/commons-linksets.ts"() {
+    "use strict";
+    import_node_crypto34 = require("crypto");
+    COMMONS_LINKSET_MEDIA_TYPE = "application/linkset+json";
+    COMMONS_RELATIONSHIP_PROFILE = "https://mcpscraper.dev/commons/profiles/relationships/v1";
+    REGISTERED_RELATIONS = /* @__PURE__ */ new Set([
+      "about",
+      "alternate",
+      "author",
+      "canonical",
+      "cite-as",
+      "collection",
+      "contents",
+      "copyright",
+      "describedby",
+      "describes",
+      "first",
+      "glossary",
+      "help",
+      "icon",
+      "index",
+      "item",
+      "last",
+      "latest-version",
+      "license",
+      "memento",
+      "next",
+      "original",
+      "predecessor-version",
+      "prev",
+      "related",
+      "replies",
+      "service-desc",
+      "service-doc",
+      "successor-version",
+      "terms-of-service",
+      "type",
+      "via",
+      "version-history"
+    ]);
+  }
+});
+
 // src/api/commons-repository.ts
 async function ensureCommonsSchema() {
-  if (schemaReady2) return;
+  if (schemaReady) return;
+  if (await schemaObjectsPresent(COMMONS_SCHEMA_OBJECTS)) {
+    schemaReady = true;
+    return;
+  }
   const db = getDb();
   await db.batch([
     {
@@ -59453,6 +59880,42 @@ async function ensureCommonsSchema() {
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_status_updated ON commons_entities(status, updated_at DESC)`, args: [] },
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_type_updated ON commons_entities(entity_type, updated_at DESC)`, args: [] },
     { sql: `CREATE INDEX IF NOT EXISTS commons_entities_source_domain ON commons_entities(source_json)`, args: [] },
+    {
+      sql: `
+        CREATE TABLE IF NOT EXISTS commons_claims (
+          id TEXT PRIMARY KEY,
+          subject_entity_id TEXT NOT NULL REFERENCES commons_entities(id),
+          predicate TEXT NOT NULL,
+          predicate_label TEXT,
+          object_entity_id TEXT,
+          object_url TEXT,
+          title TEXT,
+          media_type TEXT,
+          hreflang TEXT,
+          qualifiers_json TEXT NOT NULL DEFAULT '{}',
+          references_json TEXT NOT NULL DEFAULT '[]',
+          rank TEXT NOT NULL DEFAULT 'normal',
+          confidence REAL NOT NULL DEFAULT 1,
+          confidence_reason TEXT,
+          dispute_state TEXT NOT NULL DEFAULT 'undisputed',
+          valid_from TEXT,
+          valid_to TEXT,
+          as_of TEXT,
+          source_family TEXT NOT NULL DEFAULT 'unknown',
+          review_state TEXT NOT NULL DEFAULT 'approved',
+          proposal_id TEXT NOT NULL REFERENCES commons_proposals(id),
+          created_by_user_id INTEGER,
+          updated_by_user_id INTEGER,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          CHECK ((object_entity_id IS NOT NULL) != (object_url IS NOT NULL)),
+          UNIQUE(subject_entity_id, predicate, object_entity_id, object_url)
+        )
+      `,
+      args: []
+    },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_claims_subject_predicate ON commons_claims(subject_entity_id, predicate)`, args: [] },
+    { sql: `CREATE INDEX IF NOT EXISTS commons_claims_object_entity ON commons_claims(object_entity_id)`, args: [] },
     {
       sql: `
         CREATE TABLE IF NOT EXISTS commons_proposals (
@@ -59591,7 +60054,7 @@ async function ensureCommonsSchema() {
       args: [COMMONS_SCHEMA_VERSION]
     }
   ], "write");
-  schemaReady2 = true;
+  schemaReady = true;
 }
 async function searchCommonsEntities(filters = {}, userId) {
   await ensureCommonsSchema();
@@ -59613,8 +60076,15 @@ async function searchCommonsEntities(filters = {}, userId) {
     args.push(jsonLikeValue(keyword));
   }
   if (mergedFilters.relatedEntityId) {
-    clauses.push("related_entities_json LIKE ?");
-    args.push(jsonLikeValue(mergedFilters.relatedEntityId));
+    clauses.push(`(
+      related_entities_json LIKE ?
+      OR EXISTS (
+        SELECT 1 FROM commons_claims
+        WHERE commons_claims.subject_entity_id = commons_entities.id
+          AND commons_claims.object_entity_id = ?
+      )
+    )`);
+    args.push(jsonLikeValue(mergedFilters.relatedEntityId), mergedFilters.relatedEntityId);
   }
   if (mergedFilters.trailId) {
     clauses.push("related_entities_json LIKE ?");
@@ -59636,8 +60106,16 @@ async function searchCommonsEntities(filters = {}, userId) {
   }
   const terms = tokenize(mergedFilters.query);
   for (const term of terms) {
-    clauses.push("search_text LIKE ?");
-    args.push(`%${escapeLike(term)}%`);
+    clauses.push(`(
+      search_text LIKE ?
+      OR EXISTS (
+        SELECT 1 FROM commons_claims
+        WHERE commons_claims.subject_entity_id = commons_entities.id
+          AND (commons_claims.predicate LIKE ? OR commons_claims.predicate_label LIKE ? OR commons_claims.title LIKE ? OR commons_claims.object_url LIKE ?)
+      )
+    )`);
+    const pattern = `%${escapeLike(term)}%`;
+    args.push(pattern, pattern, pattern, pattern, pattern);
   }
   args.push(limit, offset);
   const result = await getDb().execute({
@@ -59659,9 +60137,9 @@ async function searchCommonsEntities(filters = {}, userId) {
 }
 async function prepareCommonsEntity(input, user) {
   await ensureCommonsSchema();
-  const title = optionalText(input.title, 180) ?? "";
+  const title = optionalText2(input.title, 180) ?? "";
   const slug2 = normalizeSlug(input.slug || title);
-  const schemaOrgType = optionalText(input.schemaOrgType, 80);
+  const schemaOrgType = optionalText2(input.schemaOrgType, 80);
   const contract = commonsEntityProfileFor(input.entityType, schemaOrgType);
   const entityType = contract.entityType;
   const bodyMarkdown = safeCandidateBody(input.bodyMarkdown, input.contentSections);
@@ -59719,8 +60197,8 @@ async function validateCommonsEntity(input, user) {
   await ensureCommonsSchema();
   const errors = [];
   const warnings = [];
-  const title = optionalText(input.title, 180);
-  const description = optionalText(input.description, 600);
+  const title = optionalText2(input.title, 180);
+  const description = optionalText2(input.description, 600);
   const slug2 = normalizeSlug(input.slug || title || "");
   const contract = commonsEntityProfileFor(input.entityType, input.seo?.schemaOrgType);
   const source = normalizeSource(input.source);
@@ -59735,6 +60213,11 @@ async function validateCommonsEntity(input, user) {
     maxCandidates: 8
   });
   const existing = slug2 || input.entityId ? await findEntityBySlugOrIdAnyStatus(slug2, input.entityId) : null;
+  try {
+    normalizeCommonsClaims(input.claims);
+  } catch (error) {
+    errors.push(error instanceof Error ? error.message : "Claims are invalid.");
+  }
   if (!title || title.length < 3) errors.push("title must be at least 3 characters.");
   if (!description || description.length < 8) errors.push("description must be at least 8 characters.");
   if (!slug2) errors.push("A Commons entity needs a URL slug.");
@@ -59824,9 +60307,10 @@ async function submitCommonsEntity(input, user) {
     };
   }
   const existing = await findEntityBySlugOrIdAnyStatus(normalized.slug, normalized.entityId);
+  const existingClaims = existing && normalized.claims !== void 0 ? await getCommonsClaimsByEntityId(existing.id) : [];
   const safety = evaluatePublishSafety(normalized, existing);
   const shouldApply = safety.safe && normalized.reviewPolicy !== "always_review";
-  const proposalId = `commons-proposal-${(0, import_node_crypto34.randomUUID)()}`;
+  const proposalId = `commons-proposal-${(0, import_node_crypto35.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const entityId = existing?.id ?? normalized.entityId ?? allocateEntityId();
   const proposalStatus = shouldApply ? "accepted" : "pending_review";
@@ -59868,6 +60352,10 @@ async function submitCommonsEntity(input, user) {
   ];
   if (nextEntity) {
     batch.push(entityUpsertStatement(nextEntity, existing));
+    if (normalized.claims !== void 0) {
+      batch.push({ sql: "DELETE FROM commons_claims WHERE subject_entity_id = ?", args: [nextEntity.id] });
+      batch.push(...claimInsertStatements(normalized.claims, existingClaims, nextEntity.id, proposalId, Number(user.id), now));
+    }
     batch.push(...commonsIndexStatements(nextEntity, now));
     batch.push({
       sql: `
@@ -59877,17 +60365,26 @@ async function submitCommonsEntity(input, user) {
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       `,
       args: [
-        `commons-ledger-${(0, import_node_crypto34.randomUUID)()}`,
+        `commons-ledger-${(0, import_node_crypto35.randomUUID)()}`,
         nextEntity.id,
         proposalId,
         user.id,
         actorLabel(input, user),
         normalized.actorChannel,
         existing ? "entity_updated" : "entity_created",
-        JSON.stringify(changedFieldPaths(existing, nextEntity)),
+        JSON.stringify([
+          ...changedFieldPaths(existing, nextEntity),
+          ...normalized.claims !== void 0 ? ["claims"] : []
+        ]),
         normalized.changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity."),
-        existing ? JSON.stringify(entityLedgerSnapshot(existing)) : null,
-        JSON.stringify(entityLedgerSnapshot(nextEntity)),
+        existing ? JSON.stringify({
+          ...entityLedgerSnapshot(existing),
+          ...normalized.claims !== void 0 ? { claims: existingClaims } : {}
+        }) : null,
+        JSON.stringify({
+          ...entityLedgerSnapshot(nextEntity),
+          ...normalized.claims !== void 0 ? { claims: normalized.claims } : {}
+        }),
         now
       ]
     });
@@ -59938,17 +60435,41 @@ async function getCommonsEntityLedger(idOrSlug) {
     ledger: result.rows.map((row) => rowToLedgerEntry(row))
   };
 }
+async function listCommonsClaims(idOrSlug) {
+  await ensureCommonsSchema();
+  const entity = await getCommonsEntity(idOrSlug);
+  if (!entity) return null;
+  return { entity, claims: await getCommonsClaimsByEntityId(entity.id) };
+}
+async function getCommonsEntityLinkset(idOrSlug) {
+  const result = await listCommonsClaims(idOrSlug);
+  if (!result) return null;
+  const targetIds = [...new Set(result.claims.map((claim) => claim.objectEntityId).filter((id) => Boolean(id)))];
+  const targetSlugs = /* @__PURE__ */ new Map();
+  if (targetIds.length) {
+    const targets = await getDb().execute({
+      sql: `SELECT id, slug FROM commons_entities WHERE status = 'published' AND id IN (${targetIds.map(() => "?").join(", ")})`,
+      args: targetIds
+    });
+    for (const row of targets.rows) targetSlugs.set(String(row.id), String(row.slug));
+  }
+  const resolved = result.claims.map((claim) => {
+    const href = claim.objectUrl ?? (claim.objectEntityId && targetSlugs.has(claim.objectEntityId) ? publicUrlForSlug(targetSlugs.get(claim.objectEntityId)) : null);
+    return href ? { ...claim, href } : null;
+  }).filter((claim) => claim !== null);
+  return { entity: result.entity, claims: result.claims, ...buildCommonsLinkset(result.entity, resolved) };
+}
 async function saveCommonsFilter(input, user) {
   await ensureCommonsSchema();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const name = requiredText(input.name, "name", 2, 80);
-  const description = optionalText(input.description, 500);
+  const description = optionalText2(input.description, 500);
   const filter = sanitizeSearchFilters(input.filter);
   const existing = await getDb().execute({
     sql: "SELECT id FROM commons_saved_filters WHERE user_id = ? AND name = ? LIMIT 1",
     args: [user.id, name]
   });
-  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto34.randomUUID)()}`;
+  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto35.randomUUID)()}`;
   await getDb().execute({
     sql: `
       INSERT INTO commons_saved_filters (id, user_id, name, description, filter_json, created_at, updated_at)
@@ -60075,9 +60596,9 @@ function commonsDatabaseReport() {
       conflictBehavior: "Existing entity edits require baseRevision. Otherwise the proposal is pending_review.",
       billing: { validationCredits: 0, createCredits: LISTING_WRITE_RATE_POLICY.create.credits, editCredits: LISTING_WRITE_RATE_POLICY.edit.credits }
     },
-    searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
+    searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "relationship claims", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
     indexing: commonsIndexingPolicy(),
-    tables: ["commons_entities", "commons_proposals", "commons_ledger", "commons_saved_filters", "commons_index_documents"]
+    tables: ["commons_entities", "commons_claims", "commons_proposals", "commons_ledger", "commons_saved_filters", "commons_index_documents"]
   };
 }
 function entityToWikiPage(entity) {
@@ -60097,6 +60618,13 @@ function entityToWikiPage(entity) {
     media: entity.media,
     sections: entity.articleSections,
     metadata: {
+      linksetUrl: commonsLinksetUrl(entity.id),
+      linksetDiscovery: {
+        rel: "linkset",
+        type: COMMONS_LINKSET_MEDIA_TYPE,
+        profile: COMMONS_RELATIONSHIP_PROFILE,
+        href: commonsLinksetUrl(entity.id)
+      },
       entityType: friendlyEntityType(entity.entityType),
       disambiguationName: entity.disambiguationName,
       keywords: entity.keywords,
@@ -60253,7 +60781,7 @@ async function commonsTagVocabulary() {
       ...parseJson3(record.tags_json, []),
       ...parseJson3(record.keywords_json, [])
     ]) {
-      const cleaned = optionalText(tag, 120);
+      const cleaned = optionalText2(tag, 120);
       if (!cleaned) continue;
       counts.set(cleaned, (counts.get(cleaned) ?? 0) + 1);
     }
@@ -60263,7 +60791,7 @@ async function commonsTagVocabulary() {
 function resolveCommonsTags(candidates, vocabulary) {
   const vocabularyByKey = new Map(vocabulary.map((entry) => [entry.tag.toLowerCase(), entry]));
   return candidates.map((candidate) => {
-    const cleaned = optionalText(candidate, 120) ?? "";
+    const cleaned = optionalText2(candidate, 120) ?? "";
     const key = cleaned.toLowerCase();
     const exact = vocabularyByKey.get(key);
     if (!cleaned || cleaned.length < 2) {
@@ -60360,12 +60888,13 @@ function normalizeSubmitInput(input) {
     slug: slug2,
     entityId: normalizeEntityId(input.entityId),
     entityType: normalizeEntityType(input.entityType),
-    disambiguationName: optionalText(input.disambiguationName, 240) ?? void 0,
+    disambiguationName: optionalText2(input.disambiguationName, 240) ?? void 0,
     featuredImage: normalizeFeaturedImage(input.featuredImage),
     source: normalizeSource(input.source),
     tags: uniqueStrings(input.tags ?? []).slice(0, 24),
     keywords: uniqueStrings(input.keywords ?? []).slice(0, 50),
     relatedEntities: normalizeRelatedEntities(input.relatedEntities),
+    claims: normalizeClaimsForRepository(input.claims),
     bodyMarkdown: normalizeBody(input.bodyMarkdown, input.contentSections),
     contentSections: normalizeContentSections(input.contentSections),
     articleSections: normalizeArticleSections(input.articleSections),
@@ -60374,11 +60903,18 @@ function normalizeSubmitInput(input) {
     seo: normalizeSeo(input.seo),
     actorChannel: input.actorChannel ?? "mcp",
     actorLabel: input.actorLabel ?? "",
-    changeSummary: optionalText(input.changeSummary, 500) ?? "",
+    changeSummary: optionalText2(input.changeSummary, 500) ?? "",
     reviewPolicy: input.reviewPolicy ?? "auto_publish_if_safe",
     baseRevision: input.baseRevision
   };
 }
+function normalizeClaimsForRepository(input) {
+  try {
+    return normalizeCommonsClaims(input);
+  } catch (error) {
+    throw new CommonsRepositoryError("invalid_claims", error instanceof Error ? error.message : "Claims are invalid.");
+  }
+}
 function evaluatePublishSafety(input, existing) {
   if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish." };
   if (!input.bodyMarkdown.trim() && !input.source.originalUrl && !input.source.resolvedUrl) {
@@ -60524,6 +61060,84 @@ function entityStorageValues(entity) {
     entity.revision
   ];
 }
+function claimInsertStatements(claims, existingClaims, subjectEntityId, proposalId, userId, now) {
+  const existingByIdentity = new Map(existingClaims.map((claim) => [commonsClaimIdentityKey(claim), claim]));
+  return claims.map((claim) => {
+    const existing = existingByIdentity.get(commonsClaimIdentityKey(claim));
+    return {
+      sql: `
+        INSERT INTO commons_claims (
+          id, subject_entity_id, predicate, predicate_label, object_entity_id, object_url,
+          title, media_type, hreflang, qualifiers_json, references_json, rank, confidence,
+          confidence_reason, dispute_state, valid_from, valid_to, as_of, source_family,
+          review_state, proposal_id, created_by_user_id, updated_by_user_id, created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved', ?, ?, ?, ?, ?)
+      `,
+      args: [
+        existing?.id ?? allocateClaimId(),
+        subjectEntityId,
+        claim.predicate,
+        claim.predicateLabel ?? null,
+        claim.objectEntityId ?? null,
+        claim.objectUrl ?? null,
+        claim.title ?? null,
+        claim.mediaType ?? null,
+        claim.hreflang ? JSON.stringify(claim.hreflang) : null,
+        JSON.stringify(claim.qualifiers ?? {}),
+        JSON.stringify(claim.references ?? []),
+        claim.rank ?? "normal",
+        claim.confidence ?? 1,
+        claim.confidenceReason ?? null,
+        claim.disputeState ?? "undisputed",
+        claim.validFrom ?? null,
+        claim.validTo ?? null,
+        claim.asOf ?? null,
+        claim.sourceFamily ?? "unknown",
+        proposalId,
+        existing?.createdByUserId ?? userId,
+        userId,
+        existing?.createdAt ?? now,
+        now
+      ]
+    };
+  });
+}
+async function getCommonsClaimsByEntityId(entityId) {
+  const result = await getDb().execute({
+    sql: "SELECT * FROM commons_claims WHERE subject_entity_id = ? ORDER BY predicate ASC, object_url ASC, object_entity_id ASC, id ASC",
+    args: [entityId]
+  });
+  return result.rows.map((row) => rowToClaim(row));
+}
+function rowToClaim(row) {
+  return {
+    id: String(row.id),
+    subjectEntityId: String(row.subject_entity_id),
+    predicate: String(row.predicate),
+    predicateLabel: row.predicate_label == null ? void 0 : String(row.predicate_label),
+    objectEntityId: row.object_entity_id == null ? void 0 : String(row.object_entity_id),
+    objectUrl: row.object_url == null ? void 0 : String(row.object_url),
+    title: row.title == null ? void 0 : String(row.title),
+    mediaType: row.media_type == null ? void 0 : String(row.media_type),
+    hreflang: row.hreflang == null ? void 0 : parseJson3(row.hreflang, []),
+    qualifiers: parseJson3(row.qualifiers_json, {}),
+    references: parseJson3(row.references_json, []),
+    rank: String(row.rank),
+    confidence: Number(row.confidence),
+    confidenceReason: row.confidence_reason == null ? void 0 : String(row.confidence_reason),
+    disputeState: String(row.dispute_state),
+    validFrom: row.valid_from == null ? void 0 : String(row.valid_from),
+    validTo: row.valid_to == null ? void 0 : String(row.valid_to),
+    asOf: row.as_of == null ? void 0 : String(row.as_of),
+    sourceFamily: String(row.source_family),
+    reviewState: String(row.review_state),
+    proposalId: String(row.proposal_id),
+    createdByUserId: row.created_by_user_id == null ? null : Number(row.created_by_user_id),
+    updatedByUserId: row.updated_by_user_id == null ? null : Number(row.updated_by_user_id),
+    createdAt: String(row.created_at),
+    updatedAt: String(row.updated_at)
+  };
+}
 function commonsIndexStatements(entity, now) {
   return commonsIndexDocuments(entity, now).map((document2) => ({
     sql: `
@@ -60628,7 +61242,7 @@ function commonsIndexDocuments(entity, now) {
   return documents;
 }
 function commonsIndexDocumentId(entityId, documentType, documentKey) {
-  return `commons-index-${(0, import_node_crypto34.createHash)("sha256").update(`${entityId}
+  return `commons-index-${(0, import_node_crypto35.createHash)("sha256").update(`${entityId}
 ${documentType}
 ${documentKey}`).digest("hex").slice(0, 32)}`;
 }
@@ -60803,14 +61417,14 @@ function normalizeArticleSections(sections) {
   return {
     relatedLinks: normalizeRelatedLinks(sections?.relatedLinks),
     notes: Array.isArray(sections?.notes) ? sections.notes.map((note) => ({
-      marker: optionalText(note.marker, 20) ?? void 0,
+      marker: optionalText2(note.marker, 20) ?? void 0,
       body: requiredText(note.body, "notes.body", 1, 2e3)
     })).slice(0, 100) : [],
     citations: normalizeCitations(sections?.citations),
     externalLinks: Array.isArray(sections?.externalLinks) ? sections.externalLinks.map((link2) => ({
       title: requiredText(link2.title, "externalLinks.title", 1, 180),
       url: requiredText(link2.url, "externalLinks.url", 1, 2e3),
-      summary: optionalText(link2.summary, 300) ?? void 0
+      summary: optionalText2(link2.summary, 300) ?? void 0
     })).slice(0, 100) : [],
     categories: uniqueStrings(sections?.categories ?? []).slice(0, 50)
   };
@@ -60819,7 +61433,7 @@ function normalizeRelatedLinks(relatedLinks) {
   if (!Array.isArray(relatedLinks)) return [];
   return relatedLinks.map((link2) => {
     const title = requiredText(link2.title, "relatedLinks.title", 1, 180);
-    const url = optionalText(link2.url, 2e3);
+    const url = optionalText2(link2.url, 2e3);
     const slug2 = link2.slug ? normalizeSlug(link2.slug) : void 0;
     const entityId = normalizeEntityId(link2.entityId);
     const needsLink = link2.needsLink === true || !url && !slug2 && !entityId;
@@ -60828,9 +61442,9 @@ function normalizeRelatedLinks(relatedLinks) {
       url,
       slug: slug2,
       entityId,
-      relationship: optionalText(link2.relationship, 120) ?? void 0,
-      summary: optionalText(link2.summary, 300) ?? void 0,
-      imageUrl: optionalText(link2.imageUrl, 2e3) ?? void 0,
+      relationship: optionalText2(link2.relationship, 120) ?? void 0,
+      summary: optionalText2(link2.summary, 300) ?? void 0,
+      imageUrl: optionalText2(link2.imageUrl, 2e3) ?? void 0,
       needsLink
     };
   }).slice(0, 100);
@@ -60839,20 +61453,20 @@ function normalizeCitations(citations) {
   if (!Array.isArray(citations)) return [];
   return citations.map((citation) => ({
     title: requiredText(citation.title, "citation.title", 1, 240),
-    url: optionalText(citation.url, 2e3) ?? void 0,
-    source: optionalText(citation.source, 240) ?? void 0,
-    note: optionalText(citation.note, 1e3) ?? void 0,
-    accessedAt: optionalText(citation.accessedAt, 80) ?? void 0
+    url: optionalText2(citation.url, 2e3) ?? void 0,
+    source: optionalText2(citation.source, 240) ?? void 0,
+    note: optionalText2(citation.note, 1e3) ?? void 0,
+    accessedAt: optionalText2(citation.accessedAt, 80) ?? void 0
   })).slice(0, 300);
 }
 function normalizeFeaturedImage(image) {
   if (!image?.url) return void 0;
   return {
     url: requiredText(image.url, "featuredImage.url", 1, 2e3),
-    alt: optionalText(image.alt, 500) ?? void 0,
-    caption: optionalText(image.caption, 1e3) ?? void 0,
-    sourceUrl: optionalText(image.sourceUrl, 2e3) ?? void 0,
-    license: optionalText(image.license, 240) ?? void 0,
+    alt: optionalText2(image.alt, 500) ?? void 0,
+    caption: optionalText2(image.caption, 1e3) ?? void 0,
+    sourceUrl: optionalText2(image.sourceUrl, 2e3) ?? void 0,
+    license: optionalText2(image.license, 240) ?? void 0,
     width: positiveInt(image.width),
     height: positiveInt(image.height)
   };
@@ -60861,11 +61475,11 @@ function normalizeMedia(media, featuredImage) {
   const normalized = Array.isArray(media) ? media.map((item) => ({
     type: item.type,
     url: requiredText(item.url, "media.url", 1, 2e3),
-    alt: optionalText(item.alt, 500) ?? void 0,
-    caption: optionalText(item.caption, 1e3) ?? void 0,
-    posterUrl: optionalText(item.posterUrl, 2e3) ?? void 0,
-    sourceUrl: optionalText(item.sourceUrl, 2e3) ?? void 0,
-    license: optionalText(item.license, 240) ?? void 0,
+    alt: optionalText2(item.alt, 500) ?? void 0,
+    caption: optionalText2(item.caption, 1e3) ?? void 0,
+    posterUrl: optionalText2(item.posterUrl, 2e3) ?? void 0,
+    sourceUrl: optionalText2(item.sourceUrl, 2e3) ?? void 0,
+    license: optionalText2(item.license, 240) ?? void 0,
     width: positiveInt(item.width),
     height: positiveInt(item.height),
     durationSeconds: positiveInt(item.durationSeconds)
@@ -60895,28 +61509,28 @@ function normalizeMedia(media, featuredImage) {
 }
 function normalizeSource(source) {
   return {
-    originalUrl: optionalText(source?.originalUrl, 2e3) ?? void 0,
-    resolvedUrl: optionalText(source?.resolvedUrl, 2e3) ?? void 0,
-    sourceCanonicalUrl: optionalText(source?.sourceCanonicalUrl, 2e3) ?? void 0,
-    relCanonicalHref: optionalText(source?.relCanonicalHref, 2e3) ?? void 0,
-    sourceByline: optionalText(source?.sourceByline, 240) ?? void 0,
-    publisher: optionalText(source?.publisher, 240) ?? void 0,
+    originalUrl: optionalText2(source?.originalUrl, 2e3) ?? void 0,
+    resolvedUrl: optionalText2(source?.resolvedUrl, 2e3) ?? void 0,
+    sourceCanonicalUrl: optionalText2(source?.sourceCanonicalUrl, 2e3) ?? void 0,
+    relCanonicalHref: optionalText2(source?.relCanonicalHref, 2e3) ?? void 0,
+    sourceByline: optionalText2(source?.sourceByline, 240) ?? void 0,
+    publisher: optionalText2(source?.publisher, 240) ?? void 0,
     authors: uniqueStrings(source?.authors ?? []).slice(0, 20),
-    publishedAt: optionalText(source?.publishedAt, 80) ?? void 0,
-    capturedAt: optionalText(source?.capturedAt, 80) ?? void 0,
-    license: optionalText(source?.license, 240) ?? void 0,
-    rightsSummary: optionalText(source?.rightsSummary, 1e3) ?? void 0,
-    contentHash: optionalText(source?.contentHash, 200) ?? void 0
+    publishedAt: optionalText2(source?.publishedAt, 80) ?? void 0,
+    capturedAt: optionalText2(source?.capturedAt, 80) ?? void 0,
+    license: optionalText2(source?.license, 240) ?? void 0,
+    rightsSummary: optionalText2(source?.rightsSummary, 1e3) ?? void 0,
+    contentHash: optionalText2(source?.contentHash, 200) ?? void 0
   };
 }
 function normalizeSeo(seo) {
   return {
-    canonicalUrl: optionalText(seo?.canonicalUrl, 2e3) ?? void 0,
-    relCanonical: optionalText(seo?.relCanonical, 2e3) ?? void 0,
-    metaTitle: optionalText(seo?.metaTitle, 240) ?? void 0,
-    metaDescription: optionalText(seo?.metaDescription, 500) ?? void 0,
-    ogImage: optionalText(seo?.ogImage, 2e3) ?? void 0,
-    schemaOrgType: optionalText(seo?.schemaOrgType, 80) ?? void 0,
+    canonicalUrl: optionalText2(seo?.canonicalUrl, 2e3) ?? void 0,
+    relCanonical: optionalText2(seo?.relCanonical, 2e3) ?? void 0,
+    metaTitle: optionalText2(seo?.metaTitle, 240) ?? void 0,
+    metaDescription: optionalText2(seo?.metaDescription, 500) ?? void 0,
+    ogImage: optionalText2(seo?.ogImage, 2e3) ?? void 0,
+    schemaOrgType: optionalText2(seo?.schemaOrgType, 80) ?? void 0,
     noIndex: seo?.noIndex === true
   };
 }
@@ -60925,37 +61539,37 @@ function normalizeRelatedEntities(related) {
   return related.map((item) => ({
     entityId: normalizeEntityId(item.entityId),
     title: requiredText(item.title, "relatedEntities.title", 1, 180),
-    relationship: optionalText(item.relationship, 120) ?? void 0,
+    relationship: optionalText2(item.relationship, 120) ?? void 0,
     slug: item.slug ? normalizeSlug(item.slug) : void 0,
-    url: optionalText(item.url, 2e3) ?? void 0,
-    description: optionalText(item.description, 300) ?? void 0
+    url: optionalText2(item.url, 2e3) ?? void 0,
+    description: optionalText2(item.description, 300) ?? void 0
   })).slice(0, 200);
 }
 function sanitizeSearchFilters(filters) {
   return {
-    query: optionalText(filters.query, 300) ?? void 0,
+    query: optionalText2(filters.query, 300) ?? void 0,
     entityType: filters.entityType ? normalizeEntityType(filters.entityType) : void 0,
-    tag: optionalText(filters.tag, 80) ?? void 0,
+    tag: optionalText2(filters.tag, 80) ?? void 0,
     tags: uniqueStrings(filters.tags ?? []).slice(0, 20),
-    keyword: optionalText(filters.keyword, 120) ?? void 0,
+    keyword: optionalText2(filters.keyword, 120) ?? void 0,
     keywords: uniqueStrings(filters.keywords ?? []).slice(0, 20),
     relatedEntityId: normalizeEntityId(filters.relatedEntityId),
     trailId: normalizeEntityId(filters.trailId),
-    sourceDomain: optionalText(filters.sourceDomain, 240) ?? void 0,
+    sourceDomain: optionalText2(filters.sourceDomain, 240) ?? void 0,
     hasMedia: filters.hasMedia === true ? true : void 0,
     hasVideo: filters.hasVideo === true ? true : void 0,
-    publishedAfter: optionalText(filters.publishedAfter, 80) ?? void 0,
-    updatedAfter: optionalText(filters.updatedAfter, 80) ?? void 0,
-    filterId: optionalText(filters.filterId, 200) ?? void 0,
+    publishedAfter: optionalText2(filters.publishedAfter, 80) ?? void 0,
+    updatedAfter: optionalText2(filters.updatedAfter, 80) ?? void 0,
+    filterId: optionalText2(filters.filterId, 200) ?? void 0,
     limit: clampNumber(filters.limit, 1, 100, 20),
     offset: clampNumber(filters.offset, 0, 1e4, 0)
   };
 }
 function sanitizeNeedsLinkFilters(filters) {
   return {
-    query: optionalText(filters.query, 300) ?? void 0,
+    query: optionalText2(filters.query, 300) ?? void 0,
     entityType: filters.entityType ? normalizeEntityType(filters.entityType) : void 0,
-    tag: optionalText(filters.tag, 80) ?? void 0,
+    tag: optionalText2(filters.tag, 80) ?? void 0,
     tags: uniqueStrings(filters.tags ?? []).slice(0, 20),
     sourceEntityId: normalizeEntityId(filters.sourceEntityId),
     sourceSlug: filters.sourceSlug ? normalizeSlug(filters.sourceSlug) : void 0,
@@ -60976,7 +61590,7 @@ function commonsIndexingPolicy() {
     storageScope: "platform_commons_graph",
     countsAgainstUserStorage: false,
     embedsPrivateUserVaults: false,
-    corpus: ["published Commons article body", "tags", "keywords", "JSON-LD metadata", "related entities", "See Also concepts marked needsLink"],
+    corpus: ["published Commons article body", "tags", "keywords", "JSON-LD metadata", "related entities", "governed relationship claims", "See Also concepts marked needsLink"],
     excluded: ["comments", "comment threads", "reader alerts", "private reading-room state"],
     retrievalPattern: {
       lexicalFirst: ["title", "tags", "keywords", "source metadata", "article body", "See Also concepts"],
@@ -61052,7 +61666,7 @@ function searchableText(entity) {
   ].filter(Boolean).join("\n").toLowerCase();
 }
 function actorLabel(input, user) {
-  return optionalText(input.actorLabel, 120) || optionalText(user.name, 120) || `mcp-user-${user.id}`;
+  return optionalText2(input.actorLabel, 120) || optionalText2(user.name, 120) || `mcp-user-${user.id}`;
 }
 function publicBaseUrl() {
   return (process.env.TRANSPARENT_COMMONS_PUBLIC_BASE_URL?.trim() || DEFAULT_COMMONS_BASE_URL).replace(/\/+$/, "");
@@ -61063,13 +61677,16 @@ function publicUrlForSlug(slug2) {
 function allocateEntityId() {
   return `TPW-Q${Date.now()}${Math.floor(Math.random() * 1e3).toString().padStart(3, "0")}`;
 }
+function allocateClaimId() {
+  return `TPW-S${Date.now()}${Math.floor(Math.random() * 1e6).toString().padStart(6, "0")}`;
+}
 function normalizeEntityId(value) {
-  const text2 = optionalText(value, 80);
+  const text2 = optionalText2(value, 80);
   if (!text2) return void 0;
   return text2.replace(/\s+/g, "").toUpperCase();
 }
 function normalizeEntityType(value) {
-  const raw = optionalText(value, 120) || DEFAULT_ENTITY_TYPE;
+  const raw = optionalText2(value, 120) || DEFAULT_ENTITY_TYPE;
   const squashed = raw.replace(/[\s_-]+/g, "").toLowerCase();
   if (squashed === "publicarticle" || squashed === "article" || squashed === "item") return DEFAULT_ENTITY_TYPE;
   if (squashed === "trail" || squashed === "readingtrail") return "Trail";
@@ -61097,7 +61714,7 @@ function requiredText(value, field, min, max) {
   if (text2.length < min) throw new CommonsRepositoryError(`${field.replaceAll(".", "_")}_required`, `${field} must be at least ${min} characters.`);
   return text2.slice(0, max);
 }
-function optionalText(value, max) {
+function optionalText2(value, max) {
   const text2 = String(value ?? "").trim();
   return text2 ? text2.slice(0, max) : void 0;
 }
@@ -61117,7 +61734,7 @@ function uniqueStrings(values) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
   for (const value of values) {
-    const text2 = optionalText(value, 120);
+    const text2 = optionalText2(value, 120);
     if (!text2) continue;
     const key = text2.toLowerCase();
     if (seen.has(key)) continue;
@@ -61152,14 +61769,16 @@ function jsonLikeValue(value) {
 function escapeLike(value) {
   return value.replace(/[%_]/g, "");
 }
-var import_node_crypto34, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady2, CommonsRepositoryError;
+var import_node_crypto35, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady, COMMONS_SCHEMA_OBJECTS, CommonsRepositoryError;
 var init_commons_repository = __esm({
   "src/api/commons-repository.ts"() {
     "use strict";
-    import_node_crypto34 = require("crypto");
+    import_node_crypto35 = require("crypto");
     init_db();
+    init_schema_presence();
     init_rates();
-    COMMONS_SCHEMA_VERSION = "2026-08-04.3";
+    init_commons_linksets();
+    COMMONS_SCHEMA_VERSION = "2026-08-05.1";
     DEFAULT_COMMONS_BASE_URL = "https://transparent-commons.cc";
     DEFAULT_ENTITY_TYPE = "PublicArticle";
     COMMONS_ENTITY_PROFILES = {
@@ -61307,7 +61926,32 @@ var init_commons_repository = __esm({
         ]
       }
     };
-    schemaReady2 = false;
+    schemaReady = false;
+    COMMONS_SCHEMA_OBJECTS = [
+      "schema_migrations",
+      "commons_entities",
+      "commons_claims",
+      "commons_proposals",
+      "commons_ledger",
+      "commons_saved_filters",
+      "commons_index_documents",
+      "commons_publications",
+      "commons_publication_editions",
+      "commons_entities_status_updated",
+      "commons_entities_type_updated",
+      "commons_entities_source_domain",
+      "commons_claims_subject_predicate",
+      "commons_claims_object_entity",
+      "commons_proposals_user_created",
+      "commons_proposals_entity_created",
+      "commons_ledger_entity_created",
+      "commons_ledger_user_created",
+      "commons_saved_filters_user_updated",
+      "commons_index_documents_status_updated",
+      "commons_index_documents_entity_type",
+      "commons_publications_updated",
+      "commons_publication_editions_publication_published"
+    ];
     CommonsRepositoryError = class extends Error {
       constructor(code, message, httpStatus = 400) {
         super(message);
@@ -61410,7 +62054,7 @@ async function claimCommonsPublication(input, user) {
   }
   const existingName = await getCommonsPublicationBySubdomain(subdomain);
   if (existingName) throw new CommonsPublicationError("publication_name_unavailable", "That publication name is already claimed.", 409);
-  const id = `tcpub_${(0, import_node_crypto35.randomUUID)()}`;
+  const id = `tcpub_${(0, import_node_crypto36.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   try {
     await getDb().execute({
@@ -61462,7 +62106,7 @@ async function publishCommonsEditorial(input, user) {
   const canonicalUrl = editionPublicUrl(subdomain, editionSlug);
   const rendered = renderEditorialReadingRoom(editionInput);
   const html = addPublicMetadata(rendered.html, canonicalUrl, publication.title);
-  const editionId = `tced_${(0, import_node_crypto35.randomUUID)()}`;
+  const editionId = `tced_${(0, import_node_crypto36.randomUUID)()}`;
   const revision = (latest?.revision ?? 0) + 1;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await getDb().batch([
@@ -61486,7 +62130,7 @@ async function publishCommonsEditorial(input, user) {
         JSON.stringify(editionInput.articles),
         html,
         rendered.filename,
-        (0, import_node_crypto35.createHash)("sha256").update(html).digest("hex"),
+        (0, import_node_crypto36.createHash)("sha256").update(html).digest("hex"),
         rendered.articleCount,
         rendered.wordCount,
         Buffer.byteLength(html),
@@ -61672,11 +62316,11 @@ function addPublicMetadata(html, canonicalUrl, publicationTitle) {
     "</head>"
   ].join("\n"));
 }
-var import_node_crypto35, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
+var import_node_crypto36, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
 var init_commons_publication_repository = __esm({
   "src/api/commons-publication-repository.ts"() {
     "use strict";
-    import_node_crypto35 = require("crypto");
+    import_node_crypto36 = require("crypto");
     init_db();
     init_commons_repository();
     init_render();
@@ -61785,6 +62429,7 @@ var init_commons_routes = __esm({
     import_zod51 = require("zod");
     init_api_auth();
     init_commons_repository();
+    init_commons_linksets();
     init_listing_write_billing();
     init_commons_publication_repository();
     init_mcp_tool_schemas();
@@ -61879,6 +62524,7 @@ var init_commons_routes = __esm({
         url: import_zod51.z.string().url().optional(),
         description: import_zod51.z.string().max(300).optional()
       }).strict()).max(200).optional(),
+      claims: import_zod51.z.array(CommonsClaimInputSchema).max(300).optional(),
       bodyMarkdown: import_zod51.z.string().max(5e5).optional(),
       contentSections: import_zod51.z.array(import_zod51.z.object({
         id: import_zod51.z.string().max(180).optional(),
@@ -61956,6 +62602,17 @@ var init_commons_routes = __esm({
       await ensureCommonsSchema();
       return c.json({ ok: true, data: commonsDatabaseReport() });
     });
+    commonsApp.get("/profiles/relationships/v1", (c) => c.json({
+      id: COMMONS_RELATIONSHIP_PROFILE,
+      title: "Transparent Commons governed relationship linksets",
+      mediaType: COMMONS_LINKSET_MEDIA_TYPE,
+      claimAuthority: "MCP Scraper authenticated proposal and contribution ledger",
+      anchorPolicy: "Every link context is an absolute canonical Transparent Commons wiki URL.",
+      predicatePolicy: "Predicates are curated registered link relations or absolute HTTPS extension relation URIs.",
+      publicationPolicy: "Only approved, active, non-deprecated claims whose dispute state is undisputed or attributed are projected.",
+      trustPolicy: "A third-party target is an asserted relationship, not an endorsement or proof that the target agrees.",
+      source: "https://www.rfc-editor.org/rfc/rfc9264.html"
+    }));
     commonsApp.post("/publications/prepare", auth2, async (c) => {
       const parsed = PreparePublicationSchema.safeParse(await c.req.json().catch(() => ({})));
       if (!parsed.success) return validationError(c, parsed.error);
@@ -62086,11 +62743,32 @@ var init_commons_routes = __esm({
     commonsApp.get("/entities/:idOrSlug", async (c) => {
       const entity = await getCommonsEntity(c.req.param("idOrSlug"));
       if (!entity) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({ ok: true, data: entity });
     });
+    commonsApp.get("/entities/:idOrSlug/claims", async (c) => {
+      const result = await getCommonsEntityLinkset(c.req.param("idOrSlug"));
+      if (!result) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(result.entity.id));
+      return c.json({ ok: true, data: { entity: result.entity, claims: result.claims, linksetUrl: result.linksetUrl } });
+    });
+    commonsApp.get("/entities/:idOrSlug/linkset", async (c) => {
+      const result = await getCommonsEntityLinkset(c.req.param("idOrSlug"));
+      if (!result) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Content-Type", `${COMMONS_LINKSET_MEDIA_TYPE}; profile="${COMMONS_RELATIONSHIP_PROFILE}"`);
+      c.header("ETag", result.etag);
+      c.header("Link", `<${COMMONS_RELATIONSHIP_PROFILE}>; rel="profile"`);
+      c.header("Cache-Control", "public, max-age=60, s-maxage=300");
+      if (c.req.header("If-None-Match") === result.etag) return c.body(null, 304);
+      if (c.req.query("envelope") === "true") {
+        return c.json({ ok: true, data: { ...result, document: result.document } });
+      }
+      return c.body(JSON.stringify(result.document));
+    });
     commonsApp.get("/entities/:idOrSlug/wiki-page", async (c) => {
       const entity = await getCommonsEntity(c.req.param("idOrSlug"));
       if (!entity) return c.json({ ok: false, error: "entity_not_found", message: "No published Commons entity matched that id or slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({ ok: true, data: entityToWikiPage(entity) });
     });
     commonsApp.get("/entities/:idOrSlug/json-ld", async (c) => {
@@ -62106,6 +62784,7 @@ var init_commons_routes = __esm({
     commonsApp.get("/wiki/:slug", async (c) => {
       const entity = await getCommonsEntity(c.req.param("slug"));
       if (!entity) return c.json({ ok: false, error: "page_not_found", message: "No published Commons wiki page matched that slug." }, 404);
+      c.header("Link", commonsLinksetDiscoveryHeader(entity.id));
       return c.json({
         ok: true,
         data: {
@@ -62229,7 +62908,10 @@ var init_analytics_attribution = __esm({
 // src/api/analytics-repository.ts
 var analytics_repository_exports = {};
 __export(analytics_repository_exports, {
+  ANALYTICS_CONTENT_SORTS: () => ANALYTICS_CONTENT_SORTS,
   AnalyticsRepositoryError: () => AnalyticsRepositoryError,
+  ENGAGED_SESSION_MS: () => ENGAGED_SESSION_MS,
+  MAX_ENGAGED_MS: () => MAX_ENGAGED_MS,
   analyticsAcquisition: () => analyticsAcquisition,
   analyticsBusinessMetrics: () => analyticsBusinessMetrics,
   analyticsChannelBreakdown: () => analyticsChannelBreakdown,
@@ -62273,6 +62955,7 @@ __export(analytics_repository_exports, {
   migrateAnalytics: () => migrateAnalytics,
   normalizeAnalyticsPath: () => normalizeAnalyticsPath,
   normalizeAnalyticsUrl: () => normalizeAnalyticsUrl,
+  normalizeContentOptions: () => normalizeContentOptions,
   normalizeObservedHostname: () => normalizeObservedHostname,
   queueAnalyticsActivation: () => queueAnalyticsActivation,
   queueAnalyticsFormDelivery: () => queueAnalyticsFormDelivery,
@@ -62623,6 +63306,12 @@ async function migrateAnalytics() {
     await client2.query(
       `ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS utm_content text`
     );
+    await client2.query(
+      `ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS engaged_ms integer`
+    );
+    await client2.query(
+      `ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS scroll_depth smallint`
+    );
     await client2.query(
       `ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL`
     );
@@ -62786,7 +63475,7 @@ async function migrateAnalytics() {
 }
 function normalizeSlug2(value) {
   const slug2 = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
-  return slug2 || `site-${(0, import_node_crypto36.randomBytes)(4).toString("hex")}`;
+  return slug2 || `site-${(0, import_node_crypto37.randomBytes)(4).toString("hex")}`;
 }
 function normalizeObservedHostname(origin) {
   if (!origin || origin === "null") return null;
@@ -62799,7 +63488,7 @@ function normalizeObservedHostname(origin) {
   }
 }
 function publicPixelId() {
-  return `px_${(0, import_node_crypto36.randomBytes)(18).toString("base64url")}`;
+  return `px_${(0, import_node_crypto37.randomBytes)(18).toString("base64url")}`;
 }
 function mapRows(rows) {
   return rows;
@@ -62831,7 +63520,7 @@ async function requireEditor(client2, siteId, userId) {
 async function createAnalyticsSite(input) {
   const db = getAnalyticsPool();
   const client2 = await db.connect();
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const baseSlug = normalizeSlug2(input.slug || input.name);
   try {
     await client2.query("BEGIN");
@@ -62847,7 +63536,7 @@ async function createAnalyticsSite(input) {
       } catch (error) {
         const code = error.code;
         if (code !== "23505" || attempt === 2) throw error;
-        slug2 = `${baseSlug}-${(0, import_node_crypto36.randomBytes)(2).toString("hex")}`;
+        slug2 = `${baseSlug}-${(0, import_node_crypto37.randomBytes)(2).toString("hex")}`;
       }
     }
     await client2.query(
@@ -63062,7 +63751,7 @@ async function createAnalyticsPixel(input) {
      VALUES ($1, $2, $3, $4, $5)
      RETURNING id, site_id, public_id, name, environment, status, created_at::text, NULL::text AS last_event_at`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       input.siteId,
       publicPixelId(),
       input.name.trim(),
@@ -63139,7 +63828,7 @@ async function setAnalyticsPixelDomainState(input) {
      SELECT $1, p.id, $4, $5 FROM analytics_pixels p WHERE p.id = $2 AND p.site_id = $3
      ON CONFLICT(pixel_id, hostname) DO UPDATE SET state = EXCLUDED.state, updated_at = now()
      RETURNING id`,
-    [(0, import_node_crypto36.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
+    [(0, import_node_crypto37.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
   );
   if (!result.rowCount)
     throw new AnalyticsRepositoryError(
@@ -63148,6 +63837,12 @@ async function setAnalyticsPixelDomainState(input) {
       404
     );
 }
+function boundedEngagedMs(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.min(Math.trunc(value), MAX_ENGAGED_MS) : null;
+}
+function boundedScrollDepth(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.min(Math.trunc(value), 100) : null;
+}
 function normalizeAnalyticsPath(value) {
   if (!value) return "/";
   try {
@@ -63183,7 +63878,7 @@ function sanitizeAnalyticsProperties(value) {
 }
 async function ingestAnalyticsEvents(input) {
   const db = getAnalyticsPool();
-  const requestId = `air_${(0, import_node_crypto36.randomUUID)()}`;
+  const requestId = `air_${(0, import_node_crypto37.randomUUID)()}`;
   const hostname = normalizeObservedHostname(input.origin);
   const pixelResult = await db.query(
     `SELECT p.id, p.site_id, p.status,
@@ -63204,7 +63899,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel?.site_id ?? null,
         pixel?.id ?? null,
@@ -63229,7 +63924,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63254,7 +63949,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63278,7 +63973,7 @@ async function ingestAnalyticsEvents(input) {
      ON CONFLICT(pixel_id, hostname) DO UPDATE
        SET last_seen_at = now(), updated_at = now()
      RETURNING state`,
-    [(0, import_node_crypto36.randomUUID)(), pixel.id, hostname]
+    [(0, import_node_crypto37.randomUUID)(), pixel.id, hostname]
   );
   if (domainResult.rows[0]?.state !== "approved") {
     await db.query(
@@ -63292,7 +63987,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63335,13 +64030,14 @@ async function ingestAnalyticsEvents(input) {
              id, event_id, site_id, pixel_id, hostname, visitor_id, session_id, event_name,
              occurred_at, path, canonical_url, title, referrer, source, medium, campaign,
              device_class, properties, country_code, region_code, click_ids, person_id,
-             channel_family, platform, campaign_id, ad_set_id, ad_id, creative_id, placement, utm_term, utm_content
+             channel_family, platform, campaign_id, ad_set_id, ad_id, creative_id, placement, utm_term, utm_content,
+             engaged_ms, scroll_depth
            ) VALUES (
              $1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14, $15, $16, $17, $18::jsonb, $19, $20, $21::jsonb, $22,
-             $23, $24, $25, $26, $27, $28, $29, $30, $31
+             $23, $24, $25, $26, $27, $28, $29, $30, $31, $32, $33
            ) ON CONFLICT(site_id, event_id) DO NOTHING`,
           [
-            (0, import_node_crypto36.randomUUID)(),
+            (0, import_node_crypto37.randomUUID)(),
             event2.eventId,
             pixel.site_id,
             pixel.id,
@@ -63371,7 +64067,9 @@ async function ingestAnalyticsEvents(input) {
             attribution.creativeId,
             attribution.placement,
             attribution.term,
-            attribution.content
+            attribution.content,
+            boundedEngagedMs(event2.engagedMs),
+            boundedScrollDepth(event2.scrollDepth)
           ]
         );
         if (inserted.rowCount) accepted += 1;
@@ -63397,7 +64095,7 @@ async function ingestAnalyticsEvents(input) {
          id, request_id, site_id, pixel_id, hostname, accepted_count, rejected_count, reason_codes
        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -63429,7 +64127,7 @@ function normalizeGeographyCode(value, max) {
   return normalized && /^[A-Z0-9-]+$/.test(normalized) ? normalized.slice(0, max) : null;
 }
 function pageFingerprint(scope, siteId, filters) {
-  return (0, import_node_crypto36.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
+  return (0, import_node_crypto37.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
 }
 function decodePageOffset(cursor, fingerprint) {
   if (!cursor) return 0;
@@ -63479,7 +64177,7 @@ async function createAnalyticsConversion(input) {
         404
       );
   }
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const resolvedPerson = input.sessionId ? await db.query(
     `SELECT e.person_id FROM analytics_identity_nodes n JOIN analytics_identity_edges e ON e.identity_node_id = n.id
         WHERE n.site_id = $1 AND n.kind = 'session_id' AND n.value_hmac = $2 ORDER BY e.confidence DESC LIMIT 1`,
@@ -63882,10 +64580,21 @@ async function analyticsChannelBreakdown(siteId, userId, filters) {
     dataFreshThrough: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-async function analyticsContent(siteId, userId, filters, page) {
+function normalizeContentOptions(options) {
+  const sort = ANALYTICS_CONTENT_SORTS.includes(options?.sort) ? options.sort : "pageviews";
+  return {
+    sort,
+    direction: options?.direction === "asc" ? "asc" : "desc",
+    search: options?.search?.trim().slice(0, 300) || null
+  };
+}
+async function analyticsContent(siteId, userId, filters, page, options) {
   const db = getAnalyticsPool();
   await accessFor(db, siteId, userId);
   const query = eventFilterSql(siteId, filters);
+  const table = normalizeContentOptions(options);
+  const searchParam = `$${query.values.length + 1}`;
+  const order = table.sort === "path" ? `metrics.path ${table.direction === "asc" ? "ASC" : "DESC"}` : `${table.sort} ${table.direction === "asc" ? "ASC" : "DESC"} NULLS LAST, metrics.path ASC`;
   const result = await db.query(
     `WITH filtered AS (
        SELECT e.* FROM analytics_events e WHERE ${query.where}
@@ -63893,7 +64602,7 @@ async function analyticsContent(siteId, userId, filters, page) {
        SELECT path, count(DISTINCT visitor_id)::int AS visitors,
               count(DISTINCT session_id)::int AS sessions,
               count(*) FILTER (WHERE event_name = 'page_view')::int AS pageviews,
-              count(*) FILTER (WHERE event_name <> 'page_view')::int AS engagement_events,
+              count(*) FILTER (WHERE event_name NOT IN ('page_view', 'page_engagement'))::int AS engagement_events,
               count(*)::int AS events
          FROM filtered GROUP BY path
      ), session_bounds AS (
@@ -63901,35 +64610,98 @@ async function analyticsContent(siteId, userId, filters, page) {
               (array_agg(path ORDER BY occurred_at ASC, id ASC))[1] AS entrance_path,
               (array_agg(path ORDER BY occurred_at DESC, id DESC))[1] AS exit_path
          FROM filtered WHERE session_id IS NOT NULL GROUP BY session_id
+     ), session_pageviews AS (
+       SELECT session_id, count(*) FILTER (WHERE event_name = 'page_view')::int AS pageviews
+         FROM filtered WHERE session_id IS NOT NULL GROUP BY session_id
+     ), page_dwell AS (
+       SELECT session_id, path,
+              sum(engaged_ms)::bigint AS engaged_ms,
+              max(scroll_depth)::int AS scroll_depth
+         FROM filtered
+        WHERE event_name = 'page_engagement' AND session_id IS NOT NULL
+        GROUP BY session_id, path
+     ), dwell_metrics AS (
+       SELECT path,
+              avg(engaged_ms) FILTER (WHERE engaged_ms IS NOT NULL) AS avg_engaged_ms,
+              avg(scroll_depth) FILTER (WHERE scroll_depth IS NOT NULL) AS avg_scroll,
+              count(*) FILTER (WHERE engaged_ms IS NOT NULL)::int AS measured_pageviews
+         FROM page_dwell GROUP BY path
      ), entrances AS (
        SELECT entrance_path AS path, count(*)::int AS entrances FROM session_bounds GROUP BY entrance_path
      ), exits AS (
        SELECT exit_path AS path, count(*)::int AS exits FROM session_bounds GROUP BY exit_path
+     ), bounces AS (
+       SELECT b.entrance_path AS path, count(*)::int AS bounces
+         FROM session_bounds b JOIN session_pageviews p USING(session_id)
+        WHERE p.pageviews <= 1
+        GROUP BY b.entrance_path
+     ), converted_sessions AS (
+       SELECT DISTINCT c.session_id
+         FROM analytics_conversions c
+        WHERE c.site_id = $1 AND c.occurred_at >= $2::timestamptz AND c.occurred_at < $3::timestamptz
+          AND c.session_id IS NOT NULL
+     ), path_sessions AS (
+       SELECT DISTINCT path, session_id FROM filtered WHERE session_id IS NOT NULL
+     ), engaged AS (
+       SELECT ps.path,
+              count(*) FILTER (
+                WHERE sp.pageviews >= 2
+                   OR COALESCE(pd.engaged_ms, 0) >= ${ENGAGED_SESSION_MS}
+                   OR cs.session_id IS NOT NULL
+              )::int AS engaged_sessions
+         FROM path_sessions ps
+         JOIN session_pageviews sp USING(session_id)
+         LEFT JOIN page_dwell pd ON pd.session_id = ps.session_id AND pd.path = ps.path
+         LEFT JOIN converted_sessions cs ON cs.session_id = ps.session_id
+        GROUP BY ps.path
      ), assisted AS (
        SELECT f.path, count(DISTINCT c.id)::int AS conversions
          FROM analytics_conversions c JOIN filtered f ON f.session_id = c.session_id
         WHERE c.site_id = $1 AND c.occurred_at >= $2::timestamptz AND c.occurred_at < $3::timestamptz
         GROUP BY f.path
      )
-     SELECT metrics.*, COALESCE(entrances.entrances, 0)::int AS entrances,
+     SELECT metrics.*,
+            COALESCE(entrances.entrances, 0)::int AS entrances,
             COALESCE(exits.exits, 0)::int AS exits,
-            COALESCE(assisted.conversions, 0)::int AS conversions
+            COALESCE(assisted.conversions, 0)::int AS conversions,
+            COALESCE(dwell.measured_pageviews, 0)::int AS measured_pageviews,
+            CASE WHEN dwell.avg_engaged_ms IS NULL THEN NULL
+                 ELSE round((dwell.avg_engaged_ms / 1000.0)::numeric, 1) END AS avg_seconds_on_page,
+            CASE WHEN dwell.avg_scroll IS NULL THEN NULL
+                 ELSE round(dwell.avg_scroll::numeric, 1) END AS avg_scroll_depth,
+            CASE WHEN COALESCE(entrances.entrances, 0) = 0 THEN NULL
+                 ELSE round(COALESCE(bounces.bounces, 0)::numeric * 100 / entrances.entrances, 1) END AS bounce_rate,
+            CASE WHEN metrics.pageviews = 0 THEN NULL
+                 ELSE round(COALESCE(exits.exits, 0)::numeric * 100 / metrics.pageviews, 1) END AS exit_rate,
+            CASE WHEN metrics.sessions = 0 THEN NULL
+                 ELSE round(COALESCE(engaged.engaged_sessions, 0)::numeric * 100 / metrics.sessions, 1) END AS engagement_rate,
+            CASE WHEN metrics.sessions = 0 THEN NULL
+                 ELSE round(metrics.pageviews::numeric / metrics.sessions, 2) END AS pageviews_per_session
        FROM page_metrics metrics
        LEFT JOIN entrances USING(path)
        LEFT JOIN exits USING(path)
        LEFT JOIN assisted USING(path)
-      ORDER BY metrics.pageviews DESC, metrics.events DESC, metrics.path ASC
+       LEFT JOIN bounces USING(path)
+       LEFT JOIN engaged USING(path)
+       LEFT JOIN dwell_metrics dwell USING(path)
+      WHERE ${searchParam}::text IS NULL OR metrics.path ILIKE '%' || ${searchParam} || '%'
+      ORDER BY ${order}
       LIMIT 1000`,
-    query.values
+    [...query.values, table.search]
   );
   const paged = paginateRows(
     result.rows,
     page,
-    pageFingerprint("content", siteId, filters)
+    pageFingerprint(
+      `content:${table.sort}:${table.direction}:${table.search ?? ""}`,
+      siteId,
+      filters
+    )
   );
   return {
     content: paged.items,
     pageInfo: paged.pageInfo,
+    table,
     dataFreshThrough: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -64154,7 +64926,7 @@ async function createAnalyticsCampaignLink(input) {
         404
       );
   }
-  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto36.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
+  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto37.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
   try {
     const result = await db.query(
       `INSERT INTO analytics_campaign_links(
@@ -64163,7 +64935,7 @@ async function createAnalyticsCampaignLink(input) {
        ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
        RETURNING *, 0::int AS click_count`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         input.siteId,
         input.pixelId ?? null,
         input.name.trim(),
@@ -64234,7 +65006,7 @@ async function resolveAnalyticsCampaignLink(shortCode, referrer) {
   if (!row) return null;
   await db.query(
     `INSERT INTO analytics_campaign_clicks(id, link_id, referrer) VALUES ($1, $2, $3)`,
-    [(0, import_node_crypto36.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
+    [(0, import_node_crypto37.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
   );
   return buildTaggedCampaignUrl(row);
 }
@@ -64252,14 +65024,14 @@ async function createAnalyticsForm(input) {
       404
     );
   const baseSlug = normalizeSlug2(input.name);
-  const slug2 = `${baseSlug}-${(0, import_node_crypto36.randomBytes)(3).toString("hex")}`;
-  const publicId = `form_${(0, import_node_crypto36.randomBytes)(18).toString("base64url")}`;
+  const slug2 = `${baseSlug}-${(0, import_node_crypto37.randomBytes)(3).toString("hex")}`;
+  const publicId = `form_${(0, import_node_crypto37.randomBytes)(18).toString("base64url")}`;
   const result = await db.query(
     `INSERT INTO analytics_forms(id, public_id, site_id, pixel_id, name, slug, fields, brand, submit_label, success_message, redirect_url, consent_text, status, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,$10,$11,$12,$13,$14)
      RETURNING *, 0::int AS submission_count`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       publicId,
       input.siteId,
       input.pixelId,
@@ -64304,7 +65076,7 @@ async function getPublicAnalyticsForm(publicId) {
   return result.rows[0] ?? null;
 }
 async function recordAnalyticsFormSubmission(input) {
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_submissions(id, form_id, site_id, pixel_id, visitor_id, session_id, crm_person_ref, source, medium, campaign, crm_delivery_status, click_ids)
      VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12::jsonb)`,
@@ -64335,7 +65107,7 @@ function sanitizeClickIds(value) {
   return output;
 }
 function identityHmac(kind, value) {
-  return (0, import_node_crypto36.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
+  return (0, import_node_crypto37.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
 }
 async function linkAnalyticsFormIdentity(input) {
   const client2 = await getAnalyticsPool().connect();
@@ -64344,7 +65116,7 @@ async function linkAnalyticsFormIdentity(input) {
     const person = await client2.query(
       `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
        ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at = now() RETURNING id`,
-      [(0, import_node_crypto36.randomUUID)(), input.siteId, input.crmPersonRef]
+      [(0, import_node_crypto37.randomUUID)(), input.siteId, input.crmPersonRef]
     );
     const personId = person.rows[0].id;
     const signals = [];
@@ -64391,7 +65163,7 @@ async function linkAnalyticsFormIdentity(input) {
         `INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac) VALUES ($1,$2,$3,$4)
          ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now() RETURNING id`,
         [
-          (0, import_node_crypto36.randomUUID)(),
+          (0, import_node_crypto37.randomUUID)(),
           input.siteId,
           signal.kind,
           identityHmac(signal.kind, signal.value)
@@ -64402,7 +65174,7 @@ async function linkAnalyticsFormIdentity(input) {
          VALUES ($1,$2,$3,$4,$5,$6)
          ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence)`,
         [
-          (0, import_node_crypto36.randomUUID)(),
+          (0, import_node_crypto37.randomUUID)(),
           input.siteId,
           personId,
           node.rows[0].id,
@@ -64500,7 +65272,7 @@ async function createAnalyticsCrmImport(input) {
   const db = getAnalyticsPool();
   await requireEditor(db, input.siteId, input.userId);
   const client2 = await db.connect();
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   try {
     await client2.query("BEGIN");
     await client2.query(
@@ -64520,7 +65292,7 @@ async function createAnalyticsCrmImport(input) {
       await client2.query(
         `INSERT INTO analytics_crm_import_rows(id, import_id, crm_person_ref, payload_ciphertext)
          VALUES ($1,$2,$3,$4) ON CONFLICT(import_id, crm_person_ref) DO NOTHING`,
-        [(0, import_node_crypto36.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
+        [(0, import_node_crypto37.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
       );
     }
     await client2.query("COMMIT");
@@ -64559,7 +65331,7 @@ async function createAnalyticsActivationDestination(input) {
     `INSERT INTO analytics_activation_destinations(id, site_id, platform, name, connection_ref, external_dataset_id, event_mapping, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8) RETURNING *`,
     [
-      (0, import_node_crypto36.randomUUID)(),
+      (0, import_node_crypto37.randomUUID)(),
       input.siteId,
       input.platform,
       input.name.trim(),
@@ -64611,7 +65383,7 @@ async function queueAnalyticsActivation(input) {
       `INSERT INTO analytics_activation_jobs(id, destination_id, conversion_id, person_id, payload_ciphertext)
        VALUES ($1,$2,$3,$4,$5) ON CONFLICT(destination_id, conversion_id) DO NOTHING`,
       [
-        (0, import_node_crypto36.randomUUID)(),
+        (0, import_node_crypto37.randomUUID)(),
         destination.id,
         input.conversionId,
         input.personId ?? null,
@@ -64623,7 +65395,7 @@ async function queueAnalyticsActivation(input) {
   return queued;
 }
 async function queueAnalyticsFormDelivery(input) {
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_delivery_jobs(id, submission_id, owner_user_id, payload_ciphertext, last_error_code)
      VALUES ($1,$2,$3,$4,$5)`,
@@ -64750,7 +65522,7 @@ async function analyticsHealth(siteId, userId) {
 }
 async function refreshAnalyticsDailyRollups(input) {
   const db = getAnalyticsPool();
-  const runId = (0, import_node_crypto36.randomUUID)();
+  const runId = (0, import_node_crypto37.randomUUID)();
   await db.query(
     `INSERT INTO analytics_rollup_runs(id, window_start, window_end, status) VALUES ($1, $2, $3, 'running')`,
     [runId, input.start, input.end]
@@ -64759,7 +65531,7 @@ async function refreshAnalyticsDailyRollups(input) {
   try {
     await client2.query("BEGIN");
     await client2.query(
-      `DELETE FROM analytics_rollups_daily WHERE bucket >= $1::date AND bucket < $2::date`,
+      `DELETE FROM analytics_rollups_daily WHERE bucket >= $1::date AND bucket <= $2::date`,
       [input.start, input.end]
     );
     const inserted = await client2.query(
@@ -64776,7 +65548,14 @@ async function refreshAnalyticsDailyRollups(input) {
               now()
          FROM analytics_events
         WHERE occurred_at >= $1::timestamptz AND occurred_at < $2::timestamptz
-        GROUP BY 1, 2, 3, 4, 5, 6, 7`,
+        GROUP BY 1, 2, 3, 4, 5, 6, 7
+       ON CONFLICT (site_id, pixel_id, hostname, bucket, source, medium, campaign)
+       DO UPDATE SET
+         pageviews = EXCLUDED.pageviews,
+         events = EXCLUDED.events,
+         visitors = EXCLUDED.visitors,
+         sessions = EXCLUDED.sessions,
+         refreshed_at = EXCLUDED.refreshed_at`,
       [input.start, input.end]
     );
     await client2.query("COMMIT");
@@ -64788,9 +65567,17 @@ async function refreshAnalyticsDailyRollups(input) {
     return { runId, rows };
   } catch (error) {
     await client2.query("ROLLBACK");
+    const pgCode = error?.code;
+    const detail = error instanceof Error ? error.message : String(error);
+    console.error(JSON.stringify({
+      event: "analytics_rollup_failed",
+      runId,
+      pgCode: pgCode ?? null,
+      message: detail.slice(0, 400)
+    }));
     await db.query(
-      `UPDATE analytics_rollup_runs SET status = 'failed', completed_at = now(), error_code = 'rollup_failed' WHERE id = $1`,
-      [runId]
+      `UPDATE analytics_rollup_runs SET status = 'failed', completed_at = now(), error_code = $2 WHERE id = $1`,
+      [runId, (pgCode ? `pg_${pgCode}` : "rollup_failed").slice(0, 60)]
     );
     throw error;
   } finally {
@@ -64843,6 +65630,24 @@ function rowsToCsv2(rows) {
     )
   ].join("\n");
 }
+function markdownHeading(column) {
+  return column.split("_").map((word, index) => index ? word : word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
+}
+function markdownCell(value) {
+  if (value === null || value === void 0) return "\u2014";
+  return String(value).replaceAll("|", "\\|").replaceAll("\n", " ");
+}
+function rowsToMarkdown(rows) {
+  const columns = [...new Set(rows.flatMap((row) => Object.keys(row)))];
+  if (!columns.length) return ["No rows matched this window and filter set."];
+  return [
+    `| ${columns.map(markdownHeading).join(" | ")} |`,
+    `| ${columns.map(() => "---").join(" | ")} |`,
+    ...rows.map(
+      (row) => `| ${columns.map((column) => markdownCell(row[column])).join(" | ")} |`
+    )
+  ];
+}
 async function createAnalyticsExport(input) {
   const site = (await listAnalyticsSites(input.userId)).find(
     (candidate) => candidate.id === input.siteId
@@ -64910,10 +65715,11 @@ async function createAnalyticsExport(input) {
       `- Verified conversions: ${overview.conversions}`,
       `- Verified revenue: ${(overview.revenueMinor / 100).toFixed(2)}`,
       "",
+      ...input.report === "overview" ? [] : [`## ${markdownHeading(input.report)} rows`, "", ...rowsToMarkdown(rows), ""],
       `Generated ${(/* @__PURE__ */ new Date()).toISOString()} from the governed ${input.report} report contract.`
     ].join("\n");
   }
-  const id = (0, import_node_crypto36.randomUUID)();
+  const id = (0, import_node_crypto37.randomUUID)();
   const inserted = await getAnalyticsPool().query(
     `INSERT INTO analytics_exports(id, site_id, requested_by_user_id, idempotency_key, report, format, filters, content)
      VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8)
@@ -64946,11 +65752,11 @@ async function createAnalyticsExport(input) {
   }
   return describeArtifact(replay.rows[0]);
 }
-var import_node_crypto36, import_pg, AnalyticsRepositoryError, pool2, blockedPropertyName, inferredFamilySql, clickIdKeys;
+var import_node_crypto37, import_pg, AnalyticsRepositoryError, pool2, MAX_ENGAGED_MS, ENGAGED_SESSION_MS, blockedPropertyName, inferredFamilySql, ANALYTICS_CONTENT_SORTS, clickIdKeys;
 var init_analytics_repository = __esm({
   "src/api/analytics-repository.ts"() {
     "use strict";
-    import_node_crypto36 = require("crypto");
+    import_node_crypto37 = require("crypto");
     import_pg = require("pg");
     init_session();
     init_analytics_attribution();
@@ -64965,6 +65771,8 @@ var init_analytics_repository = __esm({
       status;
     };
     pool2 = null;
+    MAX_ENGAGED_MS = 30 * 60 * 1e3;
+    ENGAGED_SESSION_MS = 1e4;
     blockedPropertyName = /(email|phone|password|token|secret|authorization|cookie|name|address|form|body)/i;
     inferredFamilySql = `COALESCE(e.channel_family, CASE
   WHEN lower(COALESCE(e.source,'') || ' ' || COALESCE(e.referrer,'')) ~ '(perplexity|chatgpt|openai|claude|anthropic|grok|xai|ai[_ -]?overview|google[_ -]?ai|gemini)' THEN 'llm'
@@ -64973,6 +65781,22 @@ var init_analytics_repository = __esm({
   WHEN COALESCE(e.source,'') = '' THEN 'direct'
   WHEN lower(COALESCE(e.medium,'')) ~ 'email|newsletter' THEN 'email'
   ELSE 'other' END)`;
+    ANALYTICS_CONTENT_SORTS = [
+      "path",
+      "visitors",
+      "sessions",
+      "pageviews",
+      "entrances",
+      "exits",
+      "engagement_events",
+      "conversions",
+      "avg_seconds_on_page",
+      "avg_scroll_depth",
+      "bounce_rate",
+      "exit_rate",
+      "engagement_rate",
+      "pageviews_per_session"
+    ];
     clickIdKeys = /* @__PURE__ */ new Set([
       "fbclid",
       "gclid",
@@ -65171,8 +65995,8 @@ function dashboardCallbackUrl() {
 }
 async function createThorbitConnectUrl(userId) {
   if (!bridgeConfigured()) throw new Error("Thorbit X-Ray account bridge is not configured");
-  const state = (0, import_node_crypto37.randomBytes)(32).toString("base64url");
-  const stateHash = (0, import_node_crypto37.createHash)("sha256").update(state).digest("hex");
+  const state = (0, import_node_crypto38.randomBytes)(32).toString("base64url");
+  const stateHash = (0, import_node_crypto38.createHash)("sha256").update(state).digest("hex");
   await getAnalyticsPool().query(
     `INSERT INTO analytics_thorbit_connect_states(state_hash,user_id,expires_at)
      VALUES ($1,$2,now()+interval '10 minutes')
@@ -65187,9 +66011,9 @@ async function createThorbitConnectUrl(userId) {
 function verifyThorbitAssertion(token4) {
   const [encoded, signature] = token4.split(".");
   if (!encoded || !signature || !bridgeConfigured()) throw new Error("Invalid Thorbit assertion");
-  const expected = (0, import_node_crypto37.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
+  const expected = (0, import_node_crypto38.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
   const actual = Buffer.from(signature, "base64url");
-  if (actual.length !== expected.length || !(0, import_node_crypto37.timingSafeEqual)(actual, expected)) {
+  if (actual.length !== expected.length || !(0, import_node_crypto38.timingSafeEqual)(actual, expected)) {
     throw new Error("Invalid Thorbit assertion signature");
   }
   const parsed = AssertionSchema.safeParse(
@@ -65201,7 +66025,7 @@ function verifyThorbitAssertion(token4) {
   return parsed.data.entitlement;
 }
 async function consumeThorbitConnectCallback(input) {
-  const stateHash = (0, import_node_crypto37.createHash)("sha256").update(input.state).digest("hex");
+  const stateHash = (0, import_node_crypto38.createHash)("sha256").update(input.state).digest("hex");
   const client2 = await getAnalyticsPool().connect();
   try {
     await client2.query("BEGIN");
@@ -65241,11 +66065,11 @@ async function disconnectAnalyticsEntitlement(userId) {
     [userId]
   );
 }
-var import_node_crypto37, import_zod52, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
+var import_node_crypto38, import_zod52, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
 var init_analytics_entitlement = __esm({
   "src/api/analytics-entitlement.ts"() {
     "use strict";
-    import_node_crypto37 = require("crypto");
+    import_node_crypto38 = require("crypto");
     import_zod52 = require("zod");
     init_analytics_repository();
     THORBIT_PRODUCT_URL = "https://thorbit.ai";
@@ -65292,7 +66116,10 @@ function dashboardOriginAllowed(origin) {
   return (process.env.ALLOWED_ORIGINS ?? process.env.APP_ORIGIN ?? "").split(",").map((value) => value.trim()).includes(origin);
 }
 function analyticsPixelSdk() {
-  return `(()=>{const s=document.currentScript;if(!s)return;const pixel=s.dataset.pixel;if(!pixel)return;const endpoint=new URL('/analytics/v1/events',s.src).toString(),ttl=18e5;const key='mcp_analytics_visitor',sessionKey='mcp_analytics_session',touchKey='mcp_analytics_touch';const id=()=>crypto.randomUUID?crypto.randomUUID():'e_'+Date.now().toString(36)+Math.random().toString(36).slice(2);let consent=s.dataset.consent==='granted'&&!navigator.globalPrivacyControl,visitor=null,session=null;const read=k=>{try{return localStorage.getItem(k)}catch{return null}},write=(k,v)=>{try{localStorage.setItem(k,v)}catch{}};const ensure=()=>{if(!consent)return;visitor=read(key)||id();const now=Date.now();let saved={};try{saved=JSON.parse(read(sessionKey)||'{}')}catch{}session=saved.id&&now-Number(saved.seen||0)<ttl?saved.id:id();write(key,visitor);write(sessionKey,JSON.stringify({id:session,seen:now}))};const attribution=()=>{const q=new URLSearchParams(location.search),clickIds={},properties={},map={utm_term:'utm_term',utm_content:'utm_content',utm_id:'campaign_id',campaign_id:'campaign_id',adset_id:'ad_set_id',ad_set_id:'ad_set_id',adgroup_id:'ad_group_id',ad_group_id:'ad_group_id',ad_id:'ad_id',creative_id:'creative_id',placement:'placement'};for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}for(const [from,to] of Object.entries(map)){const v=q.get(from);if(v)properties[to]=v}const current={source:q.get('utm_source')||undefined,medium:q.get('utm_medium')||undefined,campaign:q.get('utm_campaign')||undefined,clickIds,properties};if(current.source||Object.keys(clickIds).length)write(touchKey,JSON.stringify(current));else{try{return JSON.parse(read(touchKey)||'null')||current}catch{}}return current};const send=(name,properties={})=>{if(!consent||navigator.globalPrivacyControl)return;ensure();const a=attribution();const body=JSON.stringify({pixelId:pixel,events:[{eventId:id(),eventName:name,occurredAt:new Date().toISOString(),visitorId:visitor,sessionId:session,path:location.pathname,canonicalUrl:location.origin+location.pathname,title:document.title,referrer:document.referrer||undefined,...a,deviceClass:innerWidth<640?'mobile':innerWidth<1024?'tablet':'desktop',properties:{...a.properties,...properties}}]});if(navigator.sendBeacon&&navigator.sendBeacon(endpoint,new Blob([body],{type:'application/json'})))return;fetch(endpoint,{method:'POST',headers:{'content-type':'application/json'},body,keepalive:true,credentials:'omit'}).catch(()=>{})};const api={page:()=>send('page_view'),track:send,consent:state=>{consent=(state==='granted'||state===true)&&!navigator.globalPrivacyControl;if(consent){ensure();api.page()}},debug:()=>({pixel,endpoint,consent,gpc:Boolean(navigator.globalPrivacyControl),visitorId:visitor,sessionId:session,hostname:location.hostname,path:location.pathname,...attribution()})};window.mcpAnalytics=api;ensure();if(consent)api.page();let current=location.href;const changed=()=>{if(location.href!==current){current=location.href;api.page()}};for(const method of ['pushState','replaceState']){const original=history[method];history[method]=function(...args){const result=original.apply(this,args);queueMicrotask(changed);return result}}addEventListener('popstate',changed)})();`;
+  return `(()=>{const s=document.currentScript;if(!s)return;const pixel=s.dataset.pixel;if(!pixel)return;const endpoint=new URL('/analytics/v1/events',s.src).toString(),ttl=18e5;const key='mcp_analytics_visitor',sessionKey='mcp_analytics_session',touchKey='mcp_analytics_touch';const id=()=>crypto.randomUUID?crypto.randomUUID():'e_'+Date.now().toString(36)+Math.random().toString(36).slice(2);let consent=s.dataset.consent==='granted'&&!navigator.globalPrivacyControl,visitor=null,session=null;const read=k=>{try{return localStorage.getItem(k)}catch{return null}},write=(k,v)=>{try{localStorage.setItem(k,v)}catch{}};const ensure=()=>{if(!consent)return;visitor=read(key)||id();const now=Date.now();let saved={};try{saved=JSON.parse(read(sessionKey)||'{}')}catch{}session=saved.id&&now-Number(saved.seen||0)<ttl?saved.id:id();write(key,visitor);write(sessionKey,JSON.stringify({id:session,seen:now}))};const attribution=()=>{const q=new URLSearchParams(location.search),clickIds={},properties={},map={utm_term:'utm_term',utm_content:'utm_content',utm_id:'campaign_id',campaign_id:'campaign_id',adset_id:'ad_set_id',ad_set_id:'ad_set_id',adgroup_id:'ad_group_id',ad_group_id:'ad_group_id',ad_id:'ad_id',creative_id:'creative_id',placement:'placement'};for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}for(const [from,to] of Object.entries(map)){const v=q.get(from);if(v)properties[to]=v}const current={source:q.get('utm_source')||undefined,medium:q.get('utm_medium')||undefined,campaign:q.get('utm_campaign')||undefined,clickIds,properties};if(current.source||Object.keys(clickIds).length)write(touchKey,JSON.stringify(current));else{try{return JSON.parse(read(touchKey)||'null')||current}catch{}}return current};const send=(name,properties={},over={})=>{if(!consent||navigator.globalPrivacyControl)return;ensure();const a=attribution();const body=JSON.stringify({pixelId:pixel,events:[{eventId:id(),eventName:name,occurredAt:new Date().toISOString(),visitorId:visitor,sessionId:session,path:location.pathname,canonicalUrl:location.origin+location.pathname,title:document.title,referrer:document.referrer||undefined,...a,deviceClass:innerWidth<640?'mobile':innerWidth<1024?'tablet':'desktop',properties:{...a.properties,...properties},...over}]});if(navigator.sendBeacon&&navigator.sendBeacon(endpoint,new Blob([body],{type:'application/json'})))return;fetch(endpoint,{method:'POST',headers:{'content-type':'application/json'},body,keepalive:true,credentials:'omit'}).catch(()=>{})};let visibleSince=document.visibilityState==='visible'?Date.now():0,dwellMs=0,maxScroll=0,dwellPath=location.pathname;const depth=()=>{const d=document.documentElement,h=d.scrollHeight||1;return Math.max(0,Math.min(100,Math.round(((d.scrollTop||document.body.scrollTop||0)+innerHeight)/h*100)))};const accrue=()=>{if(visibleSince){dwellMs+=Date.now()-visibleSince;visibleSince=0}};const resume=()=>{if(!visibleSince)visibleSince=Date.now()};const flush=()=>{accrue();const ms=Math.min(dwellMs,18e5),sd=Math.max(maxScroll,depth());dwellMs=0;maxScroll=0;if(ms<250)return;send('page_engagement',{},{path:dwellPath,canonicalUrl:location.origin+dwellPath,engagedMs:ms,scrollDepth:sd})};addEventListener('scroll',()=>{const d=depth();if(d>maxScroll)maxScroll=d},{passive:true});document.addEventListener('visibilitychange',()=>{if(document.visibilityState==='hidden')flush();else resume()});addEventListener('pagehide',flush);const api={page:()=>send('page_view'),track:send,consent:state=>{consent=(state==='granted'||state===true)&&!navigator.globalPrivacyControl;if(consent){ensure();resume();api.page()}},debug:()=>({pixel,endpoint,consent,gpc:Boolean(navigator.globalPrivacyControl),visitorId:visitor,sessionId:session,hostname:location.hostname,path:location.pathname,engagedMs:dwellMs+(visibleSince?Date.now()-visibleSince:0),scrollDepth:Math.max(maxScroll,depth()),...attribution()})};window.mcpAnalytics=api;ensure();if(consent)api.page();let current=location.href;const changed=()=>{if(location.href!==current){flush();current=location.href;dwellPath=location.pathname;resume();api.page()}};for(const method of ['pushState','replaceState']){const original=history[method];history[method]=function(...args){const result=original.apply(this,args);queueMicrotask(changed);return result}}addEventListener('popstate',changed)})();`;
+}
+function pagePathFilter(value) {
+  return value && value.startsWith("/") ? value : void 0;
 }
 function reportFilters(url) {
   const end = url.searchParams.get("end") || (/* @__PURE__ */ new Date()).toISOString();
@@ -65314,7 +66141,7 @@ function reportFilters(url) {
     channelFamily: url.searchParams.get("channelFamily") || void 0,
     platform: url.searchParams.get("platform") || void 0,
     referrer: url.searchParams.get("referrer") || void 0,
-    path: url.searchParams.get("path") || void 0,
+    path: pagePathFilter(url.searchParams.get("path")),
     deviceClass: url.searchParams.get("deviceClass") || void 0,
     countryCode: url.searchParams.get("countryCode") || void 0,
     regionCode: url.searchParams.get("regionCode") || void 0,
@@ -65382,14 +66209,14 @@ function renderPublicForm(form, placementUrl) {
   const brand = form.brand;
   return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><style>:root{font-family:ui-sans-serif,system-ui;color:${escapeHtml7(brand.textColor)};background:${escapeHtml7(brand.backgroundColor)}}*{box-sizing:border-box}body{margin:0;padding:18px}form{display:grid;gap:14px}label{display:grid;gap:6px;font-size:13px;font-weight:650}.check{grid-template-columns:auto 1fr;align-items:center}.check span{grid-column:2}.check input{grid-column:1;grid-row:1}input,textarea,select{width:100%;min-height:44px;padding:10px 12px;border:1px solid #ccd3df;border-radius:${brand.radius}px;background:white;color:inherit;font:inherit}textarea{min-height:110px;resize:vertical}button{min-height:46px;border:0;border-radius:${brand.radius}px;color:white;background:${escapeHtml7(brand.primaryColor)};font:inherit;font-weight:750;cursor:pointer}.consent{margin:0;color:#667085;font-size:11px;line-height:1.45}.notice{display:none;padding:12px;border-radius:${brand.radius}px;background:#edf8f2;color:#17613c}.hp{position:absolute!important;left:-9999px!important}</style></head><body><form id="mcp-form">${fields}<label class="hp">Website<input name="website" autocomplete="off" tabindex="-1"></label>${form.consent_text ? `<p class="consent">${escapeHtml7(form.consent_text)}</p>` : ""}<button>${escapeHtml7(form.submit_label)}</button><div class="notice" role="status"></div></form><script>(()=>{const form=document.querySelector('#mcp-form'),notice=form.querySelector('.notice'),q=new URLSearchParams(location.search);form.addEventListener('submit',async event=>{event.preventDefault();const button=form.querySelector('button');button.disabled=true;const raw=Object.fromEntries(new FormData(form).entries()),website=String(raw.website||''),clickIds={};delete raw.website;for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}try{const response=await fetch('/analytics/forms/${escapeHtml7(form.public_id)}/submissions',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({data:raw,website,placementUrl:${JSON.stringify(placementUrl)},visitorId:q.get('visitor')||undefined,sessionId:q.get('session')||undefined,source:q.get('source')||undefined,medium:q.get('medium')||undefined,campaign:q.get('campaign')||undefined,clickIds})});if(!response.ok)throw new Error('submit');notice.textContent=${JSON.stringify(form.success_message)};notice.style.display='block';form.reset();${form.redirect_url ? `setTimeout(()=>{top.location.href=${JSON.stringify(form.redirect_url)}},700);` : ""}}catch{notice.textContent='Your response could not be submitted. Please try again.';notice.style.display='block'}finally{button.disabled=false}})})()</script></body></html>`;
 }
-var import_hono32, import_factory6, import_zod53, import_node_crypto38, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
+var import_hono32, import_factory6, import_zod53, import_node_crypto39, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
 var init_analytics_routes = __esm({
   "src/api/analytics-routes.ts"() {
     "use strict";
     import_hono32 = require("hono");
     import_factory6 = require("hono/factory");
     import_zod53 = require("zod");
-    import_node_crypto38 = require("crypto");
+    import_node_crypto39 = require("crypto");
     import_papaparse4 = __toESM(require("papaparse"), 1);
     init_api_auth();
     init_db();
@@ -65450,7 +66277,9 @@ var init_analytics_routes = __esm({
       campaign: import_zod53.z.string().trim().max(240).optional(),
       clickIds: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.string().trim().max(500)).optional(),
       deviceClass: import_zod53.z.enum(["desktop", "tablet", "mobile", "unknown"]).optional(),
-      properties: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.unknown()).optional()
+      properties: import_zod53.z.record(import_zod53.z.string(), import_zod53.z.unknown()).optional(),
+      engagedMs: import_zod53.z.number().int().min(0).max(MAX_ENGAGED_MS).optional(),
+      scrollDepth: import_zod53.z.number().int().min(0).max(100).optional()
     }).strict();
     IngestionSchema = import_zod53.z.object({
       pixelId: import_zod53.z.string().trim().min(8).max(160),
@@ -65718,7 +66547,7 @@ var init_analytics_routes = __esm({
       const lastName = typeof data.last_name === "string" ? data.last_name.trim() : "";
       const fullName = [firstName, lastName].filter(Boolean).join(" ") || (typeof data.name === "string" ? data.name.trim() : "") || email || "Website lead";
       const identitySeed = email || `${fullName}:${Date.now()}`;
-      const suffix2 = (0, import_node_crypto38.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
+      const suffix2 = (0, import_node_crypto39.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
       const path6 = `Leads/person-${suffix2}`;
       const { key: memoryKey, error: memoryKeyError } = await getOrCreateUserMemoryKey(user);
       const existing = memoryKey ? await memoryCall("getTool", { vault: "People", path: path6 }, memoryKey) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
@@ -65817,9 +66646,9 @@ Submitted the published form.
         occurredAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       const match = {
-        ...email ? { emailSha256: (0, import_node_crypto38.createHash)("sha256").update(email).digest("hex") } : {},
+        ...email ? { emailSha256: (0, import_node_crypto39.createHash)("sha256").update(email).digest("hex") } : {},
         ...phone ? {
-          phoneSha256: (0, import_node_crypto38.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
+          phoneSha256: (0, import_node_crypto39.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
         } : {}
       };
       const activationQueued = await queueAnalyticsActivation({
@@ -66247,7 +67076,7 @@ Submitted the published form.
           rejectedCount += 1;
           continue;
         }
-        const digest2 = (0, import_node_crypto38.createHash)("sha256").update(
+        const digest2 = (0, import_node_crypto39.createHash)("sha256").update(
           `${parsed.data.sourceSystem}:${externalId || email || phone || `${fullName}:${index}`}`
         ).digest("hex").slice(0, 16);
         const path6 = `Leads/person-${digest2}`;
@@ -66450,14 +67279,13 @@ Imported through the Site Analytics CRM workflow.
       ["/sites/:siteId/overview", analyticsOverview],
       ["/sites/:siteId/timeseries", analyticsTimeseries],
       ["/sites/:siteId/acquisition", analyticsAcquisition],
-      ["/sites/:siteId/content", analyticsContent],
       ["/sites/:siteId/events", analyticsEventCounts]
     ]) {
       analyticsApp.get(path6, auth3, async (c) => {
         const url = new URL(c.req.url);
         const filters = reportFilters(url);
         validateReportWindow(filters);
-        const paginated = path6.endsWith("/acquisition") || path6.endsWith("/content") || path6.endsWith("/events");
+        const paginated = path6.endsWith("/acquisition") || path6.endsWith("/events");
         const data = await load(
           c.req.param("siteId"),
           Number(c.get("user").id),
@@ -66467,6 +67295,24 @@ Imported through the Site Analytics CRM workflow.
         return c.json({ ok: true, data, filters });
       });
     }
+    analyticsApp.get("/sites/:siteId/content", auth3, async (c) => {
+      const url = new URL(c.req.url);
+      const filters = reportFilters(url);
+      validateReportWindow(filters);
+      const requestedSort = url.searchParams.get("sort");
+      const data = await analyticsContent(
+        c.req.param("siteId"),
+        Number(c.get("user").id),
+        filters,
+        reportPage(url),
+        {
+          sort: ANALYTICS_CONTENT_SORTS.includes(requestedSort) ? requestedSort : void 0,
+          direction: url.searchParams.get("direction") === "asc" ? "asc" : "desc",
+          search: url.searchParams.get("search") || void 0
+        }
+      );
+      return c.json({ ok: true, data, filters });
+    });
     analyticsApp.get("/sites/:siteId/dashboard", auth3, async (c) => {
       const url = new URL(c.req.url);
       const filters = reportFilters(url);
@@ -66688,19 +67534,19 @@ var init_analytics_delivery = __esm({
 
 // src/api/scheduled-artifact-owner.ts
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return (0, import_node_crypto39.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto40.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
-var import_node_crypto39;
+var import_node_crypto40;
 var init_scheduled_artifact_owner = __esm({
   "src/api/scheduled-artifact-owner.ts"() {
     "use strict";
-    import_node_crypto39 = require("crypto");
+    import_node_crypto40 = require("crypto");
   }
 });
 
 // src/api/scheduled-run-view-links.ts
 async function ensureScheduledRunViewLinksSchema() {
-  if (schemaReady3) return;
+  if (schemaReady2) return;
   const db = getDb();
   await db.execute(`
     CREATE TABLE IF NOT EXISTS scheduled_run_view_links (
@@ -66748,10 +67594,10 @@ async function ensureScheduledRunViewLinksSchema() {
     CREATE INDEX IF NOT EXISTS scheduled_run_view_links_expiry
     ON scheduled_run_view_links(expires_at, revoked_at)
   `);
-  schemaReady3 = true;
+  schemaReady2 = true;
 }
 function tokenHash2(token4) {
-  return (0, import_node_crypto40.createHash)("sha256").update(token4).digest("hex");
+  return (0, import_node_crypto41.createHash)("sha256").update(token4).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -66771,9 +67617,9 @@ function mapRow(row) {
 async function createScheduledRunViewLink(input) {
   await ensureScheduledRunViewLinksSchema();
   const now = input.now ?? /* @__PURE__ */ new Date();
-  const token4 = (0, import_node_crypto40.randomBytes)(32).toString("base64url");
+  const token4 = (0, import_node_crypto41.randomBytes)(32).toString("base64url");
   const record = {
-    shareId: (0, import_node_crypto40.randomUUID)(),
+    shareId: (0, import_node_crypto41.randomUUID)(),
     ownerId: input.ownerId,
     runId: input.runId,
     artifactId: input.artifactId,
@@ -66836,13 +67682,13 @@ async function revokeScheduledRunViewLink(ownerId, runId, shareId, now = /* @__P
   });
   return result.rowsAffected > 0;
 }
-var import_node_crypto40, schemaReady3;
+var import_node_crypto41, schemaReady2;
 var init_scheduled_run_view_links = __esm({
   "src/api/scheduled-run-view-links.ts"() {
     "use strict";
-    import_node_crypto40 = require("crypto");
+    import_node_crypto41 = require("crypto");
     init_db();
-    schemaReady3 = false;
+    schemaReady2 = false;
   }
 });
 
@@ -66906,15 +67752,15 @@ ${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id=
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: (0, import_node_crypto41.createHash)("sha256").update(html).digest("hex"),
+    sha256: (0, import_node_crypto42.createHash)("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
-var import_node_crypto41;
+var import_node_crypto42;
 var init_render2 = __esm({
   "src/personal-authority/render.ts"() {
     "use strict";
-    import_node_crypto41 = require("crypto");
+    import_node_crypto42 = require("crypto");
   }
 });
 
@@ -67024,15 +67870,15 @@ body{overflow-x:hidden}.lead-story__body,.lead-support__item,.story-card__body{m
 @media(max-width:620px){.desk-section__grid--panorama,.desk-section__grid--mosaic,.desk-section__grid--tiles{grid-template-columns:1fr}.story-card--panorama{display:block}.story-card--panorama h3,.story-card--mosaic-lead h3{font-size:34px}.story-card--mosaic-lead{grid-column:auto;grid-row:auto}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:0}}
 </style></head><body data-theme="${escapeHtml9(config.theme)}" id="top" data-scheduled-renderer="newsroom_publisher_v1">${ticker}${masthead}${navigation}<main>${leadGrid}${latest}${sections}${newsletter}${pressRoom}${trustCenter}</main>${trustFooter}</body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = (0, import_node_crypto42.createHash)("sha256").update(html).digest("hex");
+  const sha2563 = (0, import_node_crypto43.createHash)("sha256").update(html).digest("hex");
   const filename = `${brand.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "newsroom"}-news-site.html`;
   return { html, filename, bytes, sha256: sha2563, generatedAt: generatedAtIso };
 }
-var import_node_crypto42;
+var import_node_crypto43;
 var init_render3 = __esm({
   "src/newsroom-publisher/render.ts"() {
     "use strict";
-    import_node_crypto42 = require("crypto");
+    import_node_crypto43 = require("crypto");
   }
 });
 
@@ -67325,7 +68171,7 @@ function policy4() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto43.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto44.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -67366,12 +68212,12 @@ async function readScheduledRunArtifact(args) {
   if (!window2 || window2.nextOffset !== null || window2.totalBytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) return null;
   return window2.text;
 }
-var import_node_crypto43, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
+var import_node_crypto44, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
 var init_scheduled_run_artifact_store = __esm({
   "src/scheduled-artifacts/scheduled-run-artifact-store.ts"() {
     "use strict";
     init_private_artifacts();
-    import_node_crypto43 = require("crypto");
+    import_node_crypto44 = require("crypto");
     SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
     SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
     SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -67452,9 +68298,9 @@ var init_public_scheduled_result_routes = __esm({
 // src/api/service-connections.ts
 function ensureServiceConnectionsSchema() {
   const currentDb = getDb();
-  if (schemaReady4 && schemaDb4 === currentDb) return schemaReady4;
+  if (schemaReady3 && schemaDb4 === currentDb) return schemaReady3;
   schemaDb4 = currentDb;
-  schemaReady4 = (async () => {
+  schemaReady3 = (async () => {
     const db = currentDb;
     await db.execute(`
       CREATE TABLE IF NOT EXISTS service_connections (
@@ -67522,11 +68368,11 @@ function ensureServiceConnectionsSchema() {
     } catch {
     }
   })().catch((error) => {
-    schemaReady4 = null;
+    schemaReady3 = null;
     schemaDb4 = null;
     throw error;
   });
-  return schemaReady4;
+  return schemaReady3;
 }
 function parseTools(value) {
   if (typeof value !== "string") return [];
@@ -67589,7 +68435,7 @@ async function reconcileDiscoveredNangoConnections(identity, discovered) {
           updated_at = excluded.updated_at
       `,
       args: [
-        (0, import_node_crypto44.randomUUID)(),
+        (0, import_node_crypto45.randomUUID)(),
         userId,
         connection.providerConfigKey,
         connection.provider,
@@ -67660,7 +68506,7 @@ async function recordServiceConnectionHealth(args) {
   });
   await getDb().execute({
     sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [(0, import_node_crypto44.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
+    args: [(0, import_node_crypto45.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
   });
 }
 async function setServiceConnectionActions(identity, connectionId, enabled) {
@@ -67700,7 +68546,7 @@ async function claimServiceConnectionAction(args) {
   if (!connection) throw new Error("service_connection_not_found");
   const inserted = await getDb().execute({
     sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status, request_digest) VALUES (?, ?, ?, ?, ?, 'started', ?)`,
-    args: [(0, import_node_crypto44.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
+    args: [(0, import_node_crypto45.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
   });
   if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
   const existing = await getDb().execute({
@@ -67725,13 +68571,13 @@ async function claimServiceConnectionAction(args) {
     ...result !== void 0 ? { result } : {}
   };
 }
-var import_node_crypto44, schemaReady4, schemaDb4;
+var import_node_crypto45, schemaReady3, schemaDb4;
 var init_service_connections = __esm({
   "src/api/service-connections.ts"() {
     "use strict";
-    import_node_crypto44 = require("crypto");
+    import_node_crypto45 = require("crypto");
     init_db();
-    schemaReady4 = null;
+    schemaReady3 = null;
     schemaDb4 = null;
   }
 });
@@ -67743,8 +68589,8 @@ function signingSecret() {
   return secret2;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = (0, import_node_crypto45.createHash)("sha256").update(args.body).digest("hex");
-  return (0, import_node_crypto45.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
+  const bodyHash = (0, import_node_crypto46.createHash)("sha256").update(args.body).digest("hex");
+  return (0, import_node_crypto46.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
 ${args.nonce}
@@ -67791,17 +68637,17 @@ async function verifySchedulerIntegrationRequest(request, rawBody) {
   });
   const suppliedBytes = Buffer.from(signature, "hex");
   const expectedBytes = Buffer.from(expected, "hex");
-  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto45.timingSafeEqual)(suppliedBytes, expectedBytes)) {
+  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto46.timingSafeEqual)(suppliedBytes, expectedBytes)) {
     throw new SchedulerIntegrationAuthError("invalid_signature");
   }
   await claimNonce(nonce, timestampMs);
   return { requestId };
 }
-var import_node_crypto45, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
+var import_node_crypto46, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
 var init_scheduler_integration_auth = __esm({
   "src/api/scheduler-integration-auth.ts"() {
     "use strict";
-    import_node_crypto45 = require("crypto");
+    import_node_crypto46 = require("crypto");
     init_db();
     init_service_connections();
     MAX_CLOCK_SKEW_MS = 5 * 60 * 1e3;
@@ -68049,7 +68895,7 @@ var init_site_extract_reconciliation = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto46.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto47.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -68106,11 +68952,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto46, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto47, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto46 = require("crypto");
+    import_node_crypto47 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -68184,7 +69030,7 @@ var init_scrape_vault_sink = __esm({
 
 // src/api/scrape-image-sink.ts
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${(0, import_node_crypto47.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${(0, import_node_crypto48.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -68226,11 +69072,11 @@ async function persistScrapeImagesToMemory(user, inputs, vault) {
     assets
   };
 }
-var import_node_crypto47, MAX_IMAGES_PER_SCRAPE;
+var import_node_crypto48, MAX_IMAGES_PER_SCRAPE;
 var init_scrape_image_sink = __esm({
   "src/api/scrape-image-sink.ts"() {
     "use strict";
-    import_node_crypto47 = require("crypto");
+    import_node_crypto48 = require("crypto");
     init_memory();
     MAX_IMAGES_PER_SCRAPE = 25;
   }
@@ -68683,7 +69529,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto48.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto49.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -68898,11 +69744,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto48, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto49, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto48 = require("crypto");
+    import_node_crypto49 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -69120,7 +69966,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto49.randomUUID)();
+  const exportId = (0, import_node_crypto50.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -69234,11 +70080,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto49, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto50, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto49 = require("crypto");
+    import_node_crypto50 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -69352,7 +70198,7 @@ async function exportSearchConsoleTableData(args) {
     offset += rows.length;
     if (stoppedForBytes || rows.length < limit || offset >= matchedRows) break;
   }
-  const exportId = (0, import_node_crypto50.randomUUID)();
+  const exportId = (0, import_node_crypto51.randomUUID)();
   const artifact = await args.writeArtifact({
     ownerId: args.ownerId,
     exportId,
@@ -69374,11 +70220,11 @@ async function exportSearchConsoleTableData(args) {
     warnings
   };
 }
-var import_node_crypto50, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
+var import_node_crypto51, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
 var init_search_console_table_export = __esm({
   "src/api/search-console-table-export.ts"() {
     "use strict";
-    import_node_crypto50 = require("crypto");
+    import_node_crypto51 = require("crypto");
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS = 5e4;
     SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE = 2e3;
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES = 50 * 1024 * 1024;
@@ -70557,7 +71403,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy5) => policy5.classification === "read").map((policy5) => policy5.name);
   const actionTools = [...policies.values()].filter((policy5) => policy5.classification === "action").map((policy5) => policy5.name);
-  const revision = (0, import_node_crypto51.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = (0, import_node_crypto52.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -70584,8 +71430,8 @@ async function callNangoToolDirect(args) {
     identity: args.identity,
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
-  const requestId = args.requestId?.trim() || (0, import_node_crypto51.randomUUID)();
-  const idempotencyKey3 = `main-nango:${(0, import_node_crypto51.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const requestId = args.requestId?.trim() || (0, import_node_crypto52.randomUUID)();
+  const idempotencyKey3 = `main-nango:${(0, import_node_crypto52.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -70610,7 +71456,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto51.createHash)("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto52.createHash)("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -70652,15 +71498,15 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: (0, import_node_crypto51.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: (0, import_node_crypto52.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-var import_node_crypto51, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
+var import_node_crypto52, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
 var init_main_nango_transport = __esm({
   "src/api/main-nango-transport.ts"() {
     "use strict";
-    import_node_crypto51 = require("crypto");
+    import_node_crypto52 = require("crypto");
     import_client13 = require("@modelcontextprotocol/client");
     init_service_connections();
     init_connected_usage_billing();
@@ -71284,8 +72130,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${(0, import_node_crypto52.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto52.randomUUID)()).digest("hex")}`;
-  const requestDigest = (0, import_node_crypto52.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${(0, import_node_crypto53.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto53.randomUUID)()).digest("hex")}`;
+  const requestDigest = (0, import_node_crypto53.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -71436,7 +72282,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto52.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto53.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -71713,11 +72559,11 @@ async function callMainOwnedExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto52, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto53, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto52 = require("crypto");
+    import_node_crypto53 = require("crypto");
     init_connected_data_export();
     init_slack_connected_data_export();
     init_main_nango_transport();
@@ -72073,7 +72919,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${(0, import_node_crypto53.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${(0, import_node_crypto54.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -72138,12 +72984,12 @@ async function callResendExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto53, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
+var import_node_crypto54, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
 var init_resend_control = __esm({
   "src/api/resend-control.ts"() {
     "use strict";
     init_connected_data_export();
-    import_node_crypto53 = require("crypto");
+    import_node_crypto54 = require("crypto");
     DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
     RESEND_PROVIDER_CONFIG_KEY = "resend";
     RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -72661,7 +73507,31 @@ async function chargeTierChangeNow(stripeClient, subscriptionId, customerId) {
     return { ok: false, amountDue: 0, error: err instanceof Error ? err.message : "Unable to charge the plan change immediately." };
   }
 }
-var import_resend3, import_node_crypto54, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS;
+function settleWithinTickBudget(label, unfinished, work, onDeadlineOrError) {
+  return new Promise((resolve2) => {
+    const timer = setTimeout(() => {
+      unfinished.push(`${label}:deadline`);
+      resolve2(onDeadlineOrError);
+    }, CRON_TICK_BUDGET_MS);
+    work.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve2(value);
+      },
+      (err) => {
+        clearTimeout(timer);
+        unfinished.push(`${label}:error`);
+        console.error(JSON.stringify({
+          event: "cron_tick_job_failed",
+          job: label,
+          message: err instanceof Error ? err.message : String(err)
+        }));
+        resolve2(onDeadlineOrError);
+      }
+    );
+  });
+}
+var import_resend3, import_node_crypto55, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS, CRON_TICK_BUDGET_MS, CRON_TICK_DRAIN_BUDGET_MS;
 var init_server = __esm({
   "src/api/server.ts"() {
     "use strict";
@@ -72674,7 +73544,7 @@ var init_server = __esm({
     init_og();
     import_resend3 = require("resend");
     init_url_utils();
-    import_node_crypto54 = require("crypto");
+    import_node_crypto55 = require("crypto");
     init_kpo_extractor();
     init_screenshot();
     init_media_extractor();
@@ -72715,6 +73585,8 @@ var init_server = __esm({
     init_directory_workflow_dispatch();
     init_paa_harvest_dispatch();
     init_paa_harvest_reconciliation();
+    init_unified_billing();
+    init_retention_sweeps();
     init_directory_workflow_reconciliation();
     init_directory_artifacts();
     init_workflow_routes();
@@ -74209,7 +75081,7 @@ var init_server = __esm({
         if (!harvestOk) return c.json(insufficientBalanceResponse(harvestBal, harvestCost), 402);
         jobId2 = await createJob(user.id, options.query, { ...options, billingHoldMc: harvestCost }, body.callback_url);
       } else {
-        jobId2 = (0, import_node_crypto54.randomUUID)();
+        jobId2 = (0, import_node_crypto55.randomUUID)();
         const billingDebitKey = `paa-harvest:${jobId2}:hold`;
         const description = `PAA harvest: ${options.query}`.slice(0, 500);
         const hold = await debitMcIdempotent(
@@ -75406,35 +76278,49 @@ var init_server = __esm({
         ledger
       });
     });
+    CRON_TICK_BUDGET_MS = 5e4;
+    CRON_TICK_DRAIN_BUDGET_MS = 4e4;
     app.get("/cron/tick", async (c) => {
       const secret2 = c.req.header("authorization");
       if (!process.env.CRON_SECRET || secret2 !== `Bearer ${process.env.CRON_SECRET}`) {
         return c.json({ error: "Unauthorized" }, 401);
       }
+      const startedAt = Date.now();
       const { drainQueue: drainQueue2 } = await Promise.resolve().then(() => (init_worker(), worker_exports));
-      const budget = { maxJobs: 10, deadlineMs: Date.now() + 28e4 };
-      const workflowDispatchResult = await dispatchDueWorkflowSchedules(`${new URL(c.req.url).protocol}//${new URL(c.req.url).host}`);
-      const [results, sweepResult, reapResult, expiredResult, blobCleanup, connectedDataArtifactCleanup, connectedAccountBilling, directoryWorkflowDispatch, directoryWorkflowReconciliation, directoryArtifactCleanup, siteExtractArtifactCleanup, siteExtractRedispatch, siteExtractReconciliation, paaHarvestRedispatch, paaHarvestReconciliation, localSourcebookRedispatch, analyticsRollup, analyticsFormDelivery] = await Promise.all([
-        drainQueue2(budget),
-        runMonthlyRefreshSweep(),
-        reapIdleBrowserSessions(120).catch(() => ({ reaped: 0 })),
-        expireOldLots().catch(() => ({ expired_lots: 0, expired_mc: 0 })),
-        cleanupExpiredScrapeBlobs().catch(() => ({ deleted: 0, store: "none" })),
-        cleanupExpiredConnectedDataArtifacts().catch(() => ({ deleted: 0, store: "none" })),
-        reconcileConnectedAccountBillingSweep().catch(() => ({ checked: 0, synced: 0, failed: 0 })),
-        dispatchPendingDirectoryWorkflows(25).catch(() => ({ claimed: 0, dispatched: 0, failed: 0 })),
-        reconcileDirectoryWorkflowSettlements(25).catch(() => ({ checked: 0, settled: 0, failed: 0 })),
-        cleanupExpiredDirectoryArtifacts().catch(() => ({ deleted: 0, store: "none" })),
-        cleanupExpiredSiteExtractArtifacts().catch(() => ({ deleted: 0, store: "none" })),
-        redispatchFundedSiteExtractJobs(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 })),
-        reconcileSiteExtractSettlements(25).catch(() => ({ checked: 0, settled: 0, failed: 0 })),
-        redispatchPendingPaaHarvests(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 })),
-        reconcilePaaHarvestSettlements(25).catch(() => ({ checked: 0, staleFailed: 0, settled: 0, failed: 0 })),
-        redispatchQueuedLocalSourcebookAcquisitions(25).catch(() => ({ checked: 0, dispatched: 0, failed: 0 })),
-        refreshAnalyticsDailyRollupsIfDue().catch(() => ({ status: "failed", rows: 0 })),
-        deliverPendingAnalyticsForms(10).catch(() => ({ claimed: 0, delivered: 0, deferred: 0 }))
+      const budget = { maxJobs: 10, deadlineMs: startedAt + CRON_TICK_DRAIN_BUDGET_MS };
+      const origin = `${new URL(c.req.url).protocol}//${new URL(c.req.url).host}`;
+      const unfinished = [];
+      const [results, sweepResult, reapResult, expiredResult, blobCleanup, connectedDataArtifactCleanup, connectedAccountBilling, directoryWorkflowDispatch, directoryWorkflowReconciliation, directoryArtifactCleanup, siteExtractArtifactCleanup, siteExtractRedispatch, siteExtractReconciliation, paaHarvestRedispatch, paaHarvestReconciliation, localSourcebookRedispatch, analyticsRollup, analyticsFormDelivery, workflowDispatchResult, scheduledRunReconciliation, retentionSweep] = await Promise.all([
+        settleWithinTickBudget("drainQueue", unfinished, drainQueue2(budget), []),
+        settleWithinTickBudget("monthlyRefreshSweep", unfinished, runMonthlyRefreshSweep(), { status: "skipped_deadline" }),
+        settleWithinTickBudget("reapBrowserSessions", unfinished, reapIdleBrowserSessions(120), { reaped: 0 }),
+        settleWithinTickBudget("retryOrphanedBrowserSessions", unfinished, retryOrphanedBrowserSessions(50), { recovered: 0, stillOpen: 0 }),
+        settleWithinTickBudget("expireLots", unfinished, expireOldLots(), { expired_lots: 0, expired_mc: 0 }),
+        settleWithinTickBudget("scrapeBlobCleanup", unfinished, cleanupExpiredScrapeBlobs(), { deleted: 0, store: "none" }),
+        settleWithinTickBudget("connectedDataCleanup", unfinished, cleanupExpiredConnectedDataArtifacts(), { deleted: 0, store: "none" }),
+        settleWithinTickBudget("connectedBillingSweep", unfinished, reconcileConnectedAccountBillingSweep(), { checked: 0, synced: 0, failed: 0 }),
+        settleWithinTickBudget("directoryDispatch", unfinished, dispatchPendingDirectoryWorkflows(5), { claimed: 0, dispatched: 0, failed: 0 }),
+        settleWithinTickBudget("directoryReconcile", unfinished, reconcileDirectoryWorkflowSettlements(5), { checked: 0, settled: 0, failed: 0 }),
+        settleWithinTickBudget("directoryArtifactCleanup", unfinished, cleanupExpiredDirectoryArtifacts(), { deleted: 0, store: "none" }),
+        settleWithinTickBudget("siteExtractArtifactCleanup", unfinished, cleanupExpiredSiteExtractArtifacts(), { deleted: 0, store: "none" }),
+        settleWithinTickBudget("siteExtractRedispatch", unfinished, redispatchFundedSiteExtractJobs(10), { checked: 0, dispatched: 0, failed: 0 }),
+        settleWithinTickBudget("siteExtractReconcile", unfinished, reconcileSiteExtractSettlements(10), { checked: 0, settled: 0, failed: 0 }),
+        settleWithinTickBudget("paaRedispatch", unfinished, redispatchPendingPaaHarvests(10), { checked: 0, dispatched: 0, failed: 0 }),
+        settleWithinTickBudget("paaReconcile", unfinished, reconcilePaaHarvestSettlements(10), { checked: 0, staleFailed: 0, settled: 0, failed: 0 }),
+        settleWithinTickBudget("localSourcebookRedispatch", unfinished, redispatchQueuedLocalSourcebookAcquisitions(5), { checked: 0, dispatched: 0, failed: 0 }),
+        settleWithinTickBudget("analyticsRollup", unfinished, refreshAnalyticsDailyRollupsIfDue(), { status: "failed", rows: 0 }),
+        settleWithinTickBudget("analyticsForms", unfinished, deliverPendingAnalyticsForms(10), { claimed: 0, delivered: 0, deferred: 0 }),
+        settleWithinTickBudget("workflowDispatch", unfinished, dispatchDueWorkflowSchedules(origin), { dispatched: 0, status: "skipped_deadline" }),
+        settleWithinTickBudget("scheduledRunReconcile", unfinished, reconcileScheduledRunSettlements(25), { checked: 0, settled: 0, chargedMc: 0, failed: 0 }),
+        settleWithinTickBudget("retentionSweep", unfinished, sweepRetention(), { deleted: 0, perTable: {}, truncated: false })
       ]);
       return c.json({
+        durationMs: Date.now() - startedAt,
+        tickBudgetMs: CRON_TICK_BUDGET_MS,
+        unfinished,
+        complete: unfinished.length === 0,
+        scheduledRunReconciliation,
+        retentionSweep,
         drained: results.length,
         results,
         sweepResult,