mcp-scraper 0.55.0 → 0.57.0

package/dist/{server-WKBCZ2TH.js → server-NBGZJX4P.js}

@@ -169,7 +169,7 @@ import {
   resolveDeploymentProfile,
   resolveLocalSourcebookSchemaType,
   transcribeMediaUrl
-} from "./chunk-WYLIDW4S.js";
+} from "./chunk-ULAJAZQF.js";
 import {
   auditImageUrls,
   auditImages,
@@ -225,7 +225,7 @@ import {
 } from "./chunk-FG6LJGJ7.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-V2QWNGEK.js";
+} from "./chunk-QQ6ZBYZZ.js";
 import {
   abandonExtractSettlement,
   countSuccessfulPages,
@@ -248,7 +248,7 @@ import {
   setExtractJobTotal,
   settleExtractJob,
   terminalExtractJobStatus
-} from "./chunk-2FL5FXMV.js";
+} from "./chunk-5XYBKE3X.js";
 import {
   BROWSER_OPEN_MIN_BALANCE_MC,
   CONCURRENCY_PACK_INVOICE_DESCRIPTION,
@@ -301,7 +301,7 @@ import {
   tierChangeLeavesPrivateOffer,
   tierCreditsPerInterval,
   vendorCostUsdToMc
-} from "./chunk-N4LT53JX.js";
+} from "./chunk-R6CO77BN.js";
 import {
   CaptchaError,
   MapsSearchIncompletePageError,
@@ -9393,7 +9393,7 @@ var siteExtractFn = inngest.createFunction(
       });
     }) : null;
     const finalized = await step.run("finalize", async () => {
-      const { assembleExtractArtifacts } = await import("./extract-bundle-3CRG7FAN.js");
+      const { assembleExtractArtifacts } = await import("./extract-bundle-H7JEELY7.js");
       const current = await getExtractJob(jobId2);
       if (!current) throw new Error("extract job disappeared before finalization");
       const stored = await assembleExtractArtifacts(current, { branding, imageAudit });
@@ -32972,7 +32972,224 @@ import { Hono as Hono31 } from "hono";
 import { z as z32 } from "zod";
 
 // src/api/commons-repository.ts
-import { createHash as createHash14, randomUUID as randomUUID17 } from "crypto";
+import { createHash as createHash15, randomUUID as randomUUID17 } from "crypto";
+
+// src/api/commons-image-store.ts
+import { createHash as createHash13 } from "crypto";
+import { lookup as dnsLookup } from "dns/promises";
+import { isIP } from "net";
+var COMMONS_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
+var COMMONS_IMAGE_MAX_REDIRECTS = 3;
+var COMMONS_IMAGE_FETCH_TIMEOUT_MS = 2e4;
+var CommonsImageError = class extends Error {
+  constructor(code, message, httpStatus = 400) {
+    super(message);
+    this.code = code;
+    this.httpStatus = httpStatus;
+    this.name = "CommonsImageError";
+  }
+  code;
+  httpStatus;
+};
+var imageSchemaReady = false;
+async function ensureCommonsImageSchema() {
+  if (imageSchemaReady) return;
+  await getDb().execute(`
+    CREATE TABLE IF NOT EXISTS commons_images (
+      id           TEXT    PRIMARY KEY,
+      user_id      INTEGER NOT NULL,
+      digest       TEXT    NOT NULL,
+      storage_key  TEXT    NOT NULL,
+      url          TEXT    NOT NULL,
+      content_type TEXT    NOT NULL,
+      bytes        INTEGER NOT NULL,
+      source_url   TEXT,
+      alt          TEXT,
+      license      TEXT,
+      attribution  TEXT,
+      created_at   TEXT    NOT NULL DEFAULT (datetime('now'))
+    )
+  `);
+  await getDb().execute(`CREATE UNIQUE INDEX IF NOT EXISTS commons_images_digest ON commons_images(digest)`);
+  imageSchemaReady = true;
+}
+function sniffImageFormat(bytes) {
+  if (bytes.length < 12) return null;
+  if (bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return "image/jpeg";
+  if (bytes.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))) return "image/png";
+  if (bytes.subarray(0, 6).toString("ascii") === "GIF87a" || bytes.subarray(0, 6).toString("ascii") === "GIF89a") return "image/gif";
+  if (bytes.subarray(0, 4).toString("ascii") === "RIFF" && bytes.subarray(8, 12).toString("ascii") === "WEBP") return "image/webp";
+  return null;
+}
+function isBlockedAddress(address) {
+  if (isIP(address) === 6) {
+    const normalized = address.toLowerCase();
+    return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe80");
+  }
+  const parts = address.split(".").map(Number);
+  if (parts.length !== 4 || parts.some((part) => Number.isNaN(part))) return true;
+  const [a, b] = parts;
+  if (a === 10 || a === 127 || a === 0) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  return false;
+}
+async function assertPublicHttpsUrl(rawUrl) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    throw new CommonsImageError("image_url_invalid", `"${rawUrl}" is not a valid URL.`);
+  }
+  if (url.protocol !== "https:") {
+    throw new CommonsImageError("image_url_not_https", "Commons image sources must be https URLs.");
+  }
+  const hostname = url.hostname.replace(/^\[|\]$/g, "");
+  const addresses = isIP(hostname) ? [{ address: hostname }] : await dnsLookup(hostname, { all: true }).catch(() => []);
+  if (!addresses.length) {
+    throw new CommonsImageError("image_host_unresolvable", `Could not resolve ${url.hostname}.`);
+  }
+  if (addresses.some((entry) => isBlockedAddress(entry.address))) {
+    throw new CommonsImageError("image_host_blocked", "Commons image sources cannot resolve to private or loopback addresses.");
+  }
+  return url;
+}
+async function downloadImage(sourceUrl) {
+  let current = sourceUrl;
+  for (let redirect = 0; redirect <= COMMONS_IMAGE_MAX_REDIRECTS; redirect += 1) {
+    const url = await assertPublicHttpsUrl(current);
+    const response = await fetch(url, { redirect: "manual", signal: AbortSignal.timeout(COMMONS_IMAGE_FETCH_TIMEOUT_MS) });
+    if (response.status >= 300 && response.status < 400) {
+      const location2 = response.headers.get("location");
+      if (!location2) throw new CommonsImageError("image_redirect_invalid", "Image source redirected without a destination.");
+      current = new URL(location2, url).toString();
+      continue;
+    }
+    if (!response.ok) {
+      throw new CommonsImageError("image_source_unavailable", `Image source returned HTTP ${response.status}.`, 422);
+    }
+    const declaredLength = Number(response.headers.get("content-length") ?? "0");
+    if (declaredLength > COMMONS_IMAGE_MAX_BYTES) {
+      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+    }
+    const bytes = Buffer.from(await response.arrayBuffer());
+    if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
+      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+    }
+    return bytes;
+  }
+  throw new CommonsImageError("image_redirect_limit", "Image source exceeded the redirect limit.");
+}
+function decodeBase64Image(value) {
+  const payload = value.includes(",") && value.trim().startsWith("data:") ? value.slice(value.indexOf(",") + 1) : value;
+  const bytes = Buffer.from(payload, "base64");
+  if (!bytes.length) throw new CommonsImageError("image_base64_invalid", "imageBase64 did not decode to any bytes.");
+  if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
+    throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+  }
+  return bytes;
+}
+function isCommonsHostedImageUrl(url) {
+  return /^https:\/\/[^/]*(\.public\.blob\.vercel-storage\.com|blob\.vercel-storage\.com)\//i.test(url) || url.startsWith("file://");
+}
+var hostOverride = null;
+async function hostCommonsImage(input) {
+  if (hostOverride) return hostOverride(input);
+  await ensureCommonsImageSchema();
+  if (!input.sourceUrl && !input.imageBase64) {
+    throw new CommonsImageError("image_source_missing", "Provide either sourceUrl or imageBase64.");
+  }
+  const bytes = input.imageBase64 ? decodeBase64Image(input.imageBase64) : await downloadImage(String(input.sourceUrl));
+  const contentType = sniffImageFormat(bytes);
+  if (!contentType) {
+    throw new CommonsImageError(
+      "image_format_unsupported",
+      "Commons hosts JPEG, PNG, GIF, and WebP. SVG and other formats are rejected because the wiki serves them to the public web.",
+      415
+    );
+  }
+  const digest2 = createHash13("sha256").update(bytes).digest("hex");
+  const existing = await getDb().execute({
+    sql: "SELECT id, url, content_type, bytes, source_url FROM commons_images WHERE digest = ? LIMIT 1",
+    args: [digest2]
+  });
+  const reusable = existing.rows[0];
+  if (reusable) {
+    return {
+      id: String(reusable.id),
+      url: String(reusable.url),
+      contentType: String(reusable.content_type),
+      bytes: Number(reusable.bytes),
+      digest: digest2,
+      sourceUrl: reusable.source_url ? String(reusable.source_url) : null,
+      reused: true
+    };
+  }
+  const extension = contentType.split("/")[1] === "jpeg" ? "jpg" : contentType.split("/")[1];
+  const storageKey = `commons/images/${digest2.slice(0, 2)}/${digest2}.${extension}`;
+  const stored = await getBlobStore().put(storageKey, bytes, contentType);
+  const id = `TPW-IMG-${digest2.slice(0, 16).toUpperCase()}`;
+  await getDb().execute({
+    sql: `
+      INSERT INTO commons_images (id, user_id, digest, storage_key, url, content_type, bytes, source_url, alt, license, attribution, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `,
+    args: [
+      id,
+      input.userId,
+      digest2,
+      storageKey,
+      stored.url,
+      contentType,
+      bytes.length,
+      input.sourceUrl ?? null,
+      input.alt ?? null,
+      input.license ?? null,
+      input.attribution ?? null,
+      (/* @__PURE__ */ new Date()).toISOString()
+    ]
+  });
+  return { id, url: stored.url, contentType, bytes: bytes.length, digest: digest2, sourceUrl: input.sourceUrl ?? null, reused: false };
+}
+async function hostEntityImages(input) {
+  const rewrite = { mediaUrls: /* @__PURE__ */ new Map(), dropped: [] };
+  const featuredUrl = input.featuredImage?.url;
+  if (featuredUrl && !isCommonsHostedImageUrl(featuredUrl)) {
+    const hosted = await hostCommonsImage({
+      userId: input.userId,
+      sourceUrl: featuredUrl,
+      alt: input.featuredImage?.alt,
+      license: input.featuredImage?.license,
+      attribution: input.featuredImage?.sourceUrl
+    }).catch((error) => {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new CommonsImageError(
+        error instanceof CommonsImageError ? error.code : "featured_image_unhostable",
+        `The featured image could not be hosted, so this entity would publish with a link that can break: ${message}`,
+        422
+      );
+    });
+    rewrite.featuredImageUrl = hosted.url;
+  }
+  for (const item of input.media ?? []) {
+    if (!item.url || isCommonsHostedImageUrl(item.url)) continue;
+    try {
+      const hosted = await hostCommonsImage({
+        userId: input.userId,
+        sourceUrl: item.url,
+        alt: item.alt,
+        license: item.license,
+        attribution: item.sourceUrl
+      });
+      rewrite.mediaUrls.set(item.url, hosted.url);
+    } catch (error) {
+      rewrite.dropped.push({ url: item.url, reason: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return rewrite;
+}
 
 // src/api/schema-presence.ts
 var cache = null;
@@ -33000,7 +33217,7 @@ async function schemaObjectsPresent(names) {
 }
 
 // src/api/commons-linksets.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 var COMMONS_LINKSET_MEDIA_TYPE = "application/linkset+json";
 var COMMONS_RELATIONSHIP_PROFILE = "https://mcpscraper.dev/commons/profiles/relationships/v1";
 var REGISTERED_RELATIONS = /* @__PURE__ */ new Set([
@@ -33107,7 +33324,7 @@ function buildCommonsLinkset(entity, claims) {
     context[claim.predicate] = targets;
   }
   const document2 = { linkset: [context] };
-  const etag = `"${createHash13("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
+  const etag = `"${createHash14("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
   return { document: document2, etag, publicUrl, linksetUrl, profile: COMMONS_RELATIONSHIP_PROFILE };
 }
 function commonsLinksetDiscoveryHeader(idOrSlug) {
@@ -33640,23 +33857,100 @@ async function searchCommonsEntities(filters = {}, userId) {
     const pattern = `%${escapeLike(term)}%`;
     args.push(pattern, pattern, pattern, pattern, pattern);
   }
-  args.push(limit, offset);
-  const result = await getDb().execute({
+  if (!terms.length) {
+    args.push(limit, offset);
+    const result = await getDb().execute({
+      sql: `
+        SELECT *
+        FROM commons_entities
+        WHERE ${clauses.join(" AND ")}
+        ORDER BY updated_at DESC, title ASC
+        LIMIT ? OFFSET ?
+      `,
+      args
+    });
+    const results2 = result.rows.map((row) => rowToEntity(row));
+    await resolveRelatedLinksAgainstPublishedEntities(results2);
+    return { results: results2, filters: mergedFilters, limit, offset };
+  }
+  const candidates = await getDb().execute({
     sql: `
-      SELECT *
+      SELECT id, title, tags_json, keywords_json, description, search_text, updated_at,
+        (
+          SELECT group_concat(
+            coalesce(commons_claims.title, '') || ' ' ||
+            coalesce(commons_claims.predicate, '') || ' ' ||
+            coalesce(commons_claims.predicate_label, '') || ' ' ||
+            coalesce(commons_claims.object_url, ''), ' ')
+          FROM commons_claims
+          WHERE commons_claims.subject_entity_id = commons_entities.id
+        ) AS claim_text
       FROM commons_entities
       WHERE ${clauses.join(" AND ")}
       ORDER BY updated_at DESC, title ASC
-      LIMIT ? OFFSET ?
+      LIMIT ${SEARCH_CANDIDATE_LIMIT}
     `,
     args
   });
-  return {
-    results: result.rows.map((row) => rowToEntity(row)),
-    filters: mergedFilters,
-    limit,
-    offset
-  };
+  const ranked = candidates.rows.map((row) => {
+    const record = row;
+    const score = relevanceScore(terms, {
+      title: String(record.title ?? ""),
+      description: String(record.description ?? ""),
+      tags: parseJsonArray(record.tags_json),
+      keywords: parseJsonArray(record.keywords_json),
+      searchText: String(record.search_text ?? ""),
+      claimText: String(record.claim_text ?? "")
+    });
+    return { id: String(record.id), updatedAt: String(record.updated_at ?? ""), title: String(record.title ?? ""), score };
+  }).filter((candidate) => candidate.score > 0).sort((left, right) => right.score - left.score || right.updatedAt.localeCompare(left.updatedAt) || left.title.localeCompare(right.title));
+  const pageIds = ranked.slice(offset, offset + limit).map((candidate) => candidate.id);
+  if (!pageIds.length) return { results: [], filters: mergedFilters, limit, offset };
+  const page = await getDb().execute({
+    sql: `SELECT * FROM commons_entities WHERE id IN (${pageIds.map(() => "?").join(", ")})`,
+    args: pageIds
+  });
+  const byId = new Map(page.rows.map((row) => {
+    const entity = rowToEntity(row);
+    return [entity.id, entity];
+  }));
+  const results = pageIds.map((id) => byId.get(id)).filter((entity) => Boolean(entity));
+  await resolveRelatedLinksAgainstPublishedEntities(results);
+  return { results, filters: mergedFilters, limit, offset };
+}
+var SEARCH_CANDIDATE_LIMIT = 500;
+function parseJsonArray(value) {
+  try {
+    const parsed = JSON.parse(String(value ?? "[]"));
+    return Array.isArray(parsed) ? parsed.map((item) => String(item)) : [];
+  } catch {
+    return [];
+  }
+}
+function containsWord(haystack, term) {
+  if (!haystack || !term) return false;
+  const pattern = new RegExp(`(^|[^a-z0-9])${term.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}([^a-z0-9]|$)`, "i");
+  return pattern.test(haystack);
+}
+function relevanceScore(terms, fields) {
+  let score = 0;
+  const tagText = fields.tags.join(" ");
+  const keywordText = fields.keywords.join(" ");
+  for (const term of terms) {
+    const inTitle = containsWord(fields.title, term);
+    const inTags = containsWord(tagText, term) || containsWord(keywordText, term);
+    const inDescription = containsWord(fields.description, term);
+    const inBody = containsWord(fields.searchText, term);
+    const inClaims = containsWord(fields.claimText, term);
+    if (!inTitle && !inTags && !inDescription && !inBody && !inClaims) return 0;
+    if (inTitle) score += 100;
+    if (inTags) score += 40;
+    if (inDescription) score += 20;
+    if (inClaims) score += 10;
+    if (inBody) score += 5;
+  }
+  if (terms.every((term) => containsWord(fields.title, term))) score += 50;
+  return score;
 }
 async function prepareCommonsEntity(input, user) {
   await ensureCommonsSchema();
@@ -33755,18 +34049,17 @@ async function validateCommonsEntity(input, user) {
     errors.push(`Unsupported placeholder sections must be omitted instead of published: ${placeholderSections.join(", ")}.`);
   }
   if (existing && input.baseRevision === void 0) {
-    warnings.push("An existing entity matches this slug or entityId. Submit will create a pending_review proposal unless the current baseRevision is supplied.");
+    warnings.push(`An existing entity matches this slug or entityId. Submit will edit it on top of revision ${existing.revision} and record the edit on the contribution ledger.`);
   }
   if (existing && input.baseRevision !== void 0 && input.baseRevision !== existing.revision) {
-    warnings.push(`The matching entity is revision ${existing.revision}; this payload targets revision ${input.baseRevision}. Submit will be held for review.`);
+    warnings.push(`The matching entity is revision ${existing.revision}; this payload targets revision ${input.baseRevision}. Submit will apply on top of revision ${existing.revision} and note the divergence on the ledger.`);
   }
   if (input.reviewPolicy === "always_review") {
     warnings.push("reviewPolicy is always_review, so the proposal will not auto-publish even if the payload is otherwise valid.");
   }
   if (user?.id == null) warnings.push("No authenticated user was supplied to validation; submit still requires API-key authenticated user context.");
   const valid = errors.length === 0;
-  const revisionAllowsAutoPublish = !existing || input.baseRevision === existing.revision;
-  const autoPublishEligible = valid && revisionAllowsAutoPublish && input.reviewPolicy !== "always_review";
+  const autoPublishEligible = valid && input.reviewPolicy !== "always_review";
   const tagVocabulary = await commonsTagVocabulary();
   return {
     ok: true,
@@ -33804,7 +34097,10 @@ async function getCommonsEntity(idOrSlug) {
     `,
     args: [lookup, normalizeSlug(lookup)]
   });
-  return result.rows[0] ? rowToEntity(result.rows[0]) : null;
+  if (!result.rows[0]) return null;
+  const entity = rowToEntity(result.rows[0]);
+  await resolveRelatedLinksAgainstPublishedEntities([entity]);
+  return entity;
 }
 async function classifyCommonsWrite(input, user) {
   await ensureCommonsSchema();
@@ -33826,9 +34122,26 @@ async function submitCommonsEntity(input, user) {
       entity: entity2,
       applied: existingProposal.status === "accepted",
       reviewReason: existingProposal.reviewReason,
+      conflictNote: null,
+      droppedImages: [],
       publicUrl: entity2?.status === "published" ? publicUrlForSlug(entity2.slug) : null
     };
   }
+  const hostedImages = await hostEntityImages({
+    userId: Number(user.id),
+    featuredImage: normalized.featuredImage,
+    media: normalized.media
+  });
+  if (hostedImages.featuredImageUrl && normalized.featuredImage) {
+    normalized.featuredImage = { ...normalized.featuredImage, url: hostedImages.featuredImageUrl };
+  }
+  if (hostedImages.mediaUrls.size || hostedImages.dropped.length) {
+    const droppedUrls = new Set(hostedImages.dropped.map((item) => item.url));
+    normalized.media = normalized.media.filter((item) => !droppedUrls.has(item.url)).map((item) => {
+      const hostedUrl = hostedImages.mediaUrls.get(item.url);
+      return hostedUrl ? { ...item, url: hostedUrl } : item;
+    });
+  }
   const existing = await findEntityBySlugOrIdAnyStatus(normalized.slug, normalized.entityId);
   const existingClaims = existing && normalized.claims !== void 0 ? await getCommonsClaimsByEntityId(existing.id) : [];
   const safety = evaluatePublishSafety(normalized, existing);
@@ -33899,7 +34212,7 @@ async function submitCommonsEntity(input, user) {
           ...changedFieldPaths(existing, nextEntity),
           ...normalized.claims !== void 0 ? ["claims"] : []
         ]),
-        normalized.changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity."),
+        ledgerSummary(normalized.changeSummary, existing, safety.conflictNote),
         existing ? JSON.stringify({
           ...entityLedgerSnapshot(existing),
           ...normalized.claims !== void 0 ? { claims: existingClaims } : {}
@@ -33922,6 +34235,8 @@ async function submitCommonsEntity(input, user) {
     entity,
     applied: shouldApply,
     reviewReason: safety.reason,
+    conflictNote: safety.conflictNote,
+    droppedImages: hostedImages.dropped,
     publicUrl: entity?.status === "published" && shouldApply ? publicUrlForSlug(entity.slug) : null
   };
 }
@@ -34060,8 +34375,9 @@ async function listCommonsNeedsLinks(filters = {}) {
   });
   const concepts = /* @__PURE__ */ new Map();
   const queryTerms = tokenize(cleanFilters.query);
-  for (const row of result.rows) {
-    const entity = rowToEntity(row);
+  const scanned = result.rows.map((row) => rowToEntity(row));
+  await resolveRelatedLinksAgainstPublishedEntities(scanned);
+  for (const entity of scanned) {
     for (const link of entity.articleSections.relatedLinks) {
       if (!relatedLinkNeedsPage(link)) continue;
       const haystack = [link.title, link.summary, link.relationship, entity.title, entity.description, entity.tags.join(" ")].filter(Boolean).join(" ").toLowerCase();
@@ -34115,8 +34431,8 @@ function commonsDatabaseReport() {
       directPublicHtmlWrites: false,
       normalWorkflow: ["commons_prepare_entity", "commons_validate_entity", "commons_submit_entity"],
       writesCreate: ["commons_proposals", "commons_ledger", "commons_entities when accepted"],
-      safeAutoPublish: "New non-conflicting entities with title, description, featured image, and body/source evidence.",
-      conflictBehavior: "Existing entity edits require baseRevision. Otherwise the proposal is pending_review.",
+      safeAutoPublish: "Any entity with title, description, featured image, and body/source evidence. Creates and edits both publish.",
+      conflictBehavior: "Anyone may edit any entity. A missing or stale baseRevision still applies on top of the current revision; the divergence is recorded on the contribution ledger.",
       billing: { validationCredits: 0, createCredits: LISTING_WRITE_RATE_POLICY.create.credits, editCredits: LISTING_WRITE_RATE_POLICY.edit.credits }
     },
     searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "relationship claims", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
@@ -34438,19 +34754,23 @@ function normalizeClaimsForRepository(input) {
     throw new CommonsRepositoryError("invalid_claims", error instanceof Error ? error.message : "Claims are invalid.");
   }
 }
+function ledgerSummary(changeSummary, existing, conflictNote) {
+  const base = changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity.");
+  return conflictNote ? `${base} ${conflictNote}` : base;
+}
 function evaluatePublishSafety(input, existing) {
-  if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish." };
+  if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish.", conflictNote: null };
   if (!input.bodyMarkdown.trim() && !input.source.originalUrl && !input.source.resolvedUrl) {
-    return { safe: false, reason: "A public entity needs article body text or source evidence before publishing." };
+    return { safe: false, reason: "A public entity needs article body text or source evidence before publishing.", conflictNote: null };
   }
-  if (!existing) return { safe: true, reason: null };
+  if (!existing) return { safe: true, reason: null, conflictNote: null };
   if (input.baseRevision === void 0) {
-    return { safe: false, reason: "Existing entity edits require baseRevision so agents do not overwrite someone else silently." };
+    return { safe: true, reason: null, conflictNote: `Applied without baseRevision on top of revision ${existing.revision}.` };
   }
   if (input.baseRevision !== existing.revision) {
-    return { safe: false, reason: `Existing entity revision is ${existing.revision}; proposal targeted ${input.baseRevision}.` };
+    return { safe: true, reason: null, conflictNote: `Applied on top of revision ${existing.revision}; this edit targeted revision ${input.baseRevision}.` };
   }
-  return { safe: true, reason: null };
+  return { safe: true, reason: null, conflictNote: null };
 }
 function buildNextEntity(input) {
   const current = input.existing;
@@ -34765,7 +35085,7 @@ function commonsIndexDocuments(entity, now) {
   return documents;
 }
 function commonsIndexDocumentId(entityId, documentType, documentKey) {
-  return `commons-index-${createHash14("sha256").update(`${entityId}
+  return `commons-index-${createHash15("sha256").update(`${entityId}
 ${documentType}
 ${documentKey}`).digest("hex").slice(0, 32)}`;
 }
@@ -35100,6 +35420,44 @@ function sanitizeNeedsLinkFilters(filters) {
     offset: clampNumber(filters.offset, 0, 1e4, 0)
   };
 }
+async function publishedEntityIndexFor(titles) {
+  const index = /* @__PURE__ */ new Map();
+  const slugKeys = uniqueStrings(titles.map((title) => normalizeNeedsLinkTitle(title))).filter(Boolean);
+  const titleKeys = uniqueStrings(titles.map((title) => String(title || "").trim().toLowerCase())).filter(Boolean);
+  if (!slugKeys.length && !titleKeys.length) return index;
+  const result = await getDb().execute({
+    sql: `
+      SELECT id, slug, title
+      FROM commons_entities
+      WHERE status = 'published'
+        AND (slug IN (${slugKeys.map(() => "?").join(", ") || "NULL"})
+          OR lower(title) IN (${titleKeys.map(() => "?").join(", ") || "NULL"}))
+    `,
+    args: [...slugKeys, ...titleKeys]
+  });
+  for (const row of result.rows) {
+    const record = row;
+    const entry = { id: String(record.id), slug: String(record.slug), title: String(record.title) };
+    index.set(entry.slug, entry);
+    index.set(normalizeNeedsLinkTitle(entry.title), entry);
+  }
+  return index;
+}
+function unresolvedRelatedLinkTitles(entities) {
+  return entities.flatMap((entity) => entity.articleSections.relatedLinks.filter((link) => relatedLinkNeedsPage(link)).map((link) => link.title));
+}
+async function resolveRelatedLinksAgainstPublishedEntities(entities) {
+  const index = await publishedEntityIndexFor(unresolvedRelatedLinkTitles(entities));
+  if (!index.size) return;
+  for (const entity of entities) {
+    entity.articleSections.relatedLinks = entity.articleSections.relatedLinks.map((link) => {
+      if (!relatedLinkNeedsPage(link)) return link;
+      const match = index.get(normalizeNeedsLinkTitle(link.title));
+      if (!match || match.id === entity.id) return link;
+      return { ...link, slug: match.slug, entityId: match.id, needsLink: false };
+    });
+  }
+}
 function relatedLinkNeedsPage(link) {
   if (link.needsLink === true) return true;
   if (link.entityId || link.slug) return false;
@@ -35304,7 +35662,7 @@ var CommonsRepositoryError = class extends Error {
 };
 
 // src/api/commons-publication-repository.ts
-import { createHash as createHash15, randomUUID as randomUUID18 } from "crypto";
+import { createHash as createHash16, randomUUID as randomUUID18 } from "crypto";
 var PUBLICATION_ROOT_DOMAIN = process.env.COMMONS_PUBLICATION_ROOT_DOMAIN || "transparent-commons.cc";
 var RESERVED_SUBDOMAINS = /* @__PURE__ */ new Set([
   "admin",
@@ -35502,7 +35860,7 @@ async function publishCommonsEditorial(input, user) {
         JSON.stringify(editionInput.articles),
         html,
         rendered.filename,
-        createHash15("sha256").update(html).digest("hex"),
+        createHash16("sha256").update(html).digest("hex"),
         rendered.articleCount,
         rendered.wordCount,
         Buffer.byteLength(html),
@@ -35939,6 +36297,28 @@ commonsApp.get("/publications/:subdomain", async (c) => {
     return publicationError(c, error);
   }
 });
+var HostImageSchema = z32.object({
+  sourceUrl: z32.string().url().optional(),
+  imageBase64: z32.string().min(16).optional(),
+  alt: z32.string().max(500).optional(),
+  license: z32.string().max(240).optional(),
+  attribution: z32.string().max(500).optional()
+}).strict().refine((body) => Boolean(body.sourceUrl || body.imageBase64), {
+  message: "Provide either sourceUrl or imageBase64."
+});
+commonsApp.post("/images", auth2, async (c) => {
+  const parsed = HostImageSchema.safeParse(await c.req.json().catch(() => ({})));
+  if (!parsed.success) return validationError(c, parsed.error);
+  try {
+    const hosted = await hostCommonsImage({ ...parsed.data, userId: Number(c.get("user").id) });
+    return c.json({ ok: true, data: hosted }, hosted.reused ? 200 : 201);
+  } catch (error) {
+    if (error instanceof CommonsImageError) {
+      return c.json({ ok: false, error: error.code, message: error.message }, error.httpStatus);
+    }
+    throw error;
+  }
+});
 commonsApp.get("/entities", async (c) => {
   const result = await searchCommonsEntities(filtersFromQuery(c.req.query()));
   return c.json({ ok: true, data: result });
@@ -35988,7 +36368,15 @@ commonsApp.post("/entities/propose", auth2, async (c) => {
     if ("insufficient" in charged) return c.json(charged.insufficient, 402);
     billing = charged;
     const result = await submitCommonsEntity(parsed.data, c.get("user"));
-    return c.json({ ok: true, data: result, billing: publicListingWriteBilling(billing) }, result.applied ? 201 : 202);
+    if (!result.applied) {
+      await refundListingWrite(billing, "Transparent Commons proposal was held for review instead of published.").catch(() => null);
+      return c.json({
+        ok: true,
+        data: result,
+        billing: { ...publicListingWriteBilling(billing), charged: false, refunded: !billing.duplicate }
+      }, 202);
+    }
+    return c.json({ ok: true, data: result, billing: publicListingWriteBilling(billing) }, 201);
   } catch (error) {
     if (billing) await refundListingWrite(billing, "Transparent Commons write failed before persistence.").catch(() => null);
     if (error instanceof CommonsRepositoryError) {
@@ -36143,12 +36531,12 @@ function xmlEscape(value) {
 import { Hono as Hono32 } from "hono";
 import { createMiddleware as createMiddleware4 } from "hono/factory";
 import { z as z34 } from "zod";
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 import Papa2 from "papaparse";
 
 // src/api/analytics-entitlement.ts
 import {
-  createHash as createHash16,
+  createHash as createHash17,
   createHmac as createHmac3,
   randomBytes as randomBytes4,
   timingSafeEqual as timingSafeEqual2
@@ -36363,7 +36751,7 @@ function dashboardCallbackUrl() {
 async function createThorbitConnectUrl(userId) {
   if (!bridgeConfigured()) throw new Error("Thorbit X-Ray account bridge is not configured");
   const state = randomBytes4(32).toString("base64url");
-  const stateHash = createHash16("sha256").update(state).digest("hex");
+  const stateHash = createHash17("sha256").update(state).digest("hex");
   await getAnalyticsPool().query(
     `INSERT INTO analytics_thorbit_connect_states(state_hash,user_id,expires_at)
      VALUES ($1,$2,now()+interval '10 minutes')
@@ -36392,7 +36780,7 @@ function verifyThorbitAssertion(token6) {
   return parsed.data.entitlement;
 }
 async function consumeThorbitConnectCallback(input) {
-  const stateHash = createHash16("sha256").update(input.state).digest("hex");
+  const stateHash = createHash17("sha256").update(input.state).digest("hex");
   const client2 = await getAnalyticsPool().connect();
   try {
     await client2.query("BEGIN");
@@ -36868,7 +37256,7 @@ analyticsApp.post("/forms/:publicId/submissions", async (c) => {
   const lastName = typeof data.last_name === "string" ? data.last_name.trim() : "";
   const fullName = [firstName, lastName].filter(Boolean).join(" ") || (typeof data.name === "string" ? data.name.trim() : "") || email || "Website lead";
   const identitySeed = email || `${fullName}:${Date.now()}`;
-  const suffix2 = createHash17("sha256").update(identitySeed).digest("hex").slice(0, 12);
+  const suffix2 = createHash18("sha256").update(identitySeed).digest("hex").slice(0, 12);
   const path5 = `Leads/person-${suffix2}`;
   const { key: memoryKey, error: memoryKeyError } = await getOrCreateUserMemoryKey(user);
   const existing = memoryKey ? await memoryCall("getTool", { vault: "People", path: path5 }, memoryKey) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
@@ -36967,9 +37355,9 @@ Submitted the published form.
     occurredAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   const match = {
-    ...email ? { emailSha256: createHash17("sha256").update(email).digest("hex") } : {},
+    ...email ? { emailSha256: createHash18("sha256").update(email).digest("hex") } : {},
     ...phone ? {
-      phoneSha256: createHash17("sha256").update(phone.replace(/\D/g, "")).digest("hex")
+      phoneSha256: createHash18("sha256").update(phone.replace(/\D/g, "")).digest("hex")
     } : {}
   };
   const activationQueued = await queueAnalyticsActivation({
@@ -37397,7 +37785,7 @@ analyticsApp.post("/sites/:siteId/crm-imports", auth3, async (c) => {
       rejectedCount += 1;
       continue;
     }
-    const digest2 = createHash17("sha256").update(
+    const digest2 = createHash18("sha256").update(
       `${parsed.data.sourceSystem}:${externalId || email || phone || `${fullName}:${index}`}`
     ).digest("hex").slice(0, 16);
     const path5 = `Leads/person-${digest2}`;
@@ -37848,13 +38236,13 @@ import { Hono as Hono33 } from "hono";
 import { z as z35 } from "zod";
 
 // src/api/scheduled-artifact-owner.ts
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return createHash18("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return createHash19("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
 
 // src/api/scheduled-run-view-links.ts
-import { createHash as createHash19, randomBytes as randomBytes5, randomUUID as randomUUID19 } from "crypto";
+import { createHash as createHash20, randomBytes as randomBytes5, randomUUID as randomUUID19 } from "crypto";
 var schemaReady2 = false;
 async function ensureScheduledRunViewLinksSchema() {
   if (schemaReady2) return;
@@ -37908,7 +38296,7 @@ async function ensureScheduledRunViewLinksSchema() {
   schemaReady2 = true;
 }
 function tokenHash2(token6) {
-  return createHash19("sha256").update(token6).digest("hex");
+  return createHash20("sha256").update(token6).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -37995,7 +38383,7 @@ async function revokeScheduledRunViewLink(ownerId, runId, shareId, now = /* @__P
 }
 
 // src/personal-authority/render.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 function escapeHtml7(value) {
   return value.replace(/[&<>"']/g, (character) => ({
     "&": "&amp;",
@@ -38055,13 +38443,13 @@ ${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id=
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: createHash20("sha256").update(html).digest("hex"),
+    sha256: createHash21("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
 
 // src/personal-authority/render-v2.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 var FONT_STACKS = Object.freeze({
   "editorial-serif": "Iowan Old Style, Baskerville, Times New Roman, serif",
   "modern-sans": "Avenir Next, Avenir, Helvetica Neue, Arial, sans-serif",
@@ -38165,13 +38553,13 @@ ${section2(flags.finalCta && Boolean(finalCta), `<section class="section cta" id
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: createHash21("sha256").update(html).digest("hex"),
+    sha256: createHash22("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
 
 // src/newsroom-publisher/render.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 function escapeHtml9(value) {
   return value.replace(/[&<>"']/g, (character) => ({
     "&": "&amp;",
@@ -38277,13 +38665,13 @@ body{overflow-x:hidden}.lead-story__body,.lead-support__item,.story-card__body{m
 @media(max-width:620px){.desk-section__grid--panorama,.desk-section__grid--mosaic,.desk-section__grid--tiles{grid-template-columns:1fr}.story-card--panorama{display:block}.story-card--panorama h3,.story-card--mosaic-lead h3{font-size:34px}.story-card--mosaic-lead{grid-column:auto;grid-row:auto}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:0}}
 </style></head><body data-theme="${escapeHtml9(config.theme)}" id="top" data-scheduled-renderer="newsroom_publisher_v1">${ticker}${masthead}${navigation}<main>${leadGrid}${latest}${sections}${newsletter}${pressRoom}${trustCenter}</main>${trustFooter}</body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = createHash22("sha256").update(html).digest("hex");
+  const sha2563 = createHash23("sha256").update(html).digest("hex");
   const filename = `${brand.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "newsroom"}-news-site.html`;
   return { html, filename, bytes, sha256: sha2563, generatedAt: generatedAtIso };
 }
 
 // src/blog-article/render.ts
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 function escapeHtml10(value) {
   return value.replace(
     /[&<>"']/g,
@@ -38371,7 +38759,7 @@ function renderBlogArticleV1(input, config, generatedAt) {
 :root{--ink:#10213d;--ink2:#1c355a;--blue:#2563eb;--blue2:#1749b6;--mint:#45d5aa;--paper:#f7f5f0;--line:#dce4ef;--card:#fff;--body:#475569;--serif:Iowan Old Style,Palatino Linotype,Palatino,Georgia,serif;--sans:Inter,Avenir Next,ui-sans-serif,system-ui,sans-serif}body[data-theme="slate"]{--ink:#1e293b;--ink2:#334155;--blue:#475569;--blue2:#1e293b;--mint:#94a3b8;--paper:#f8fafc}body[data-theme="forest"]{--ink:#12352e;--ink2:#23584c;--blue:#147d64;--blue2:#0c5b48;--mint:#79d8bd;--paper:#f4f8f3}*{box-sizing:border-box}html{scroll-behavior:smooth;background:var(--paper)}body{margin:0;color:#252a33;background:var(--paper);font-family:var(--sans);line-height:1.6}a{color:inherit}button{font:inherit}button:focus-visible,a:focus-visible{outline:3px solid var(--mint);outline-offset:3px}.progress{position:fixed;z-index:50;top:0;left:0;height:4px;width:0;background:var(--mint)}.hero{position:relative;overflow:hidden;color:#fff;background:var(--ink)}.hero:after{position:absolute;right:-110px;top:-150px;width:420px;height:420px;border:1px solid #ffffff1a;border-radius:50%;content:""}.hero-inner{position:relative;z-index:1;max-width:1240px;margin:auto;padding:58px 42px 126px}.breadcrumb{display:flex;gap:8px;margin-bottom:34px;color:#dbeafecc;font-size:14px}.eyebrow{display:block;color:var(--blue);font-size:12px;font-weight:800;letter-spacing:.16em;text-transform:uppercase}.hero .eyebrow{color:var(--mint)}h1,h2,h3,p{margin-top:0}.hero h1{max-width:1000px;margin:14px 0 24px;font:700 clamp(44px,6vw,78px)/.98 var(--serif);letter-spacing:-.035em}.hero .dek{max-width:780px;color:#dbeafe;font-size:20px}.contributors{margin-top:30px;color:#eff6ff;font-size:14px}.contributors a{font-weight:800}.meta{display:flex;flex-wrap:wrap;gap:12px;margin-top:6px;color:#dbeafecc}.layout{position:relative;z-index:2;display:grid;grid-template-columns:minmax(0,760px) 290px;gap:64px;max-width:1240px;margin:-78px auto 0;padding:0 42px 80px}.main{min-width:0}.takeaways{padding:38px 44px;border-radius:24px;background:#fff;box-shadow:0 24px 70px #10213d24}.takeaways h2{margin:5px 0 20px;font:700 32px/1.1 var(--serif);color:var(--ink)}.takeaways ul{display:grid;gap:16px;margin:0;padding:0;list-style:none}.takeaways li{position:relative;padding-left:26px;color:var(--body);font-size:17px}.takeaways li:before{position:absolute;left:2px;top:.7em;width:8px;height:8px;border-radius:50%;background:var(--blue);content:""}.intro{padding:40px 0 4px}.intro p,.article-section>p{margin-bottom:22px;color:var(--body);font:400 18px/1.75 var(--sans)}.article-section{scroll-margin-top:28px;padding-top:45px}.article-section h2,.faq h2{margin:6px 0 20px;color:var(--ink);font:700 38px/1.08 var(--serif);letter-spacing:-.02em}.article-section ul{display:grid;gap:10px;margin:22px 0;padding-left:24px;color:var(--body);font-size:17px}.article-section li::marker{color:var(--blue)}.callout{margin:34px 0;padding:24px 28px;border-left:4px solid var(--blue);border-radius:0 16px 16px 0;background:#fff}.callout span{color:var(--blue);font-size:11px;font-weight:800;letter-spacing:.13em;text-transform:uppercase}.callout h3{margin:5px 0 8px;color:var(--ink);font:700 24px/1.15 var(--serif)}.callout p{margin:0;color:var(--body)}.rail{padding-top:0}.sidebar-media{overflow:hidden;margin:0 0 18px;border:1px solid #dbeafe;border-radius:16px;background:#fff}.sidebar-media img,.sidebar-media svg{display:block;width:100%;aspect-ratio:16/9;object-fit:cover}.sidebar-media figcaption{padding:10px 13px;color:#64748b;font-size:11px}.disclosure{margin-bottom:28px;border-top:1px solid #dbeafe;border-bottom:1px solid #dbeafe}.disclosure button{display:flex;width:100%;align-items:center;justify-content:space-between;gap:14px;padding:15px 0;border:0;color:#64748b;background:transparent;text-align:left;font-size:12px;cursor:pointer}.disclosure button b{color:var(--blue);font-size:18px;transition:transform .2s}.disclosure button[aria-expanded="true"] b{transform:rotate(180deg)}.disclosure p{padding:0 0 16px;margin:0;color:#64748b;font-size:12px}.toc{position:sticky;top:30px;padding:22px;border:1px solid var(--line);border-radius:16px;background:#fff;box-shadow:0 2px 5px #10213d12}.toc header{display:flex;align-items:center;justify-content:space-between}.toc header strong{color:var(--ink);font:700 21px/1 var(--serif)}.toc header button{width:34px;height:34px;border:0;border-radius:50%;color:var(--blue);background:transparent;cursor:pointer}.toc nav{display:grid;margin-top:14px}.toc nav a{display:flex;align-items:flex-start;gap:11px;padding:8px 0;color:#64748b;text-decoration:none;font-size:13px;line-height:1.35}.toc nav i{width:8px;height:8px;margin-top:5px;border:2px solid #bfdbfe;border-radius:50%}.toc nav a[aria-current="location"]{color:var(--ink);font-weight:800}.toc nav a[aria-current="location"] i{border-color:var(--blue);background:var(--blue)}.back-top{width:100%;margin-top:18px;padding:16px 0 0;border:0;border-top:1px solid var(--line);color:var(--blue);background:transparent;text-align:right;font-size:13px;font-weight:800;cursor:pointer}.faq{scroll-margin-top:28px;padding-top:64px}.faq>div{border-top:1px solid var(--line);border-bottom:1px solid var(--line)}.faq article+article{border-top:1px solid var(--line)}.faq h3{margin:0}.faq h3 button{display:flex;width:100%;align-items:center;justify-content:space-between;gap:18px;padding:19px 0;border:0;color:var(--ink);background:transparent;text-align:left;font-weight:800;cursor:pointer}.faq h3 b{color:var(--blue);font-size:22px}.faq article>p{padding:0 0 20px;margin:0;color:var(--body);font-size:16px}.author-card{margin-top:64px;padding:32px 36px;border-radius:18px;background:#fff}.article-actions{display:flex;flex-wrap:wrap;justify-content:space-between;gap:14px}.article-actions button{display:inline-flex;min-height:46px;align-items:center;justify-content:center;gap:8px;padding:8px 18px;border:2px solid var(--blue);border-radius:999px;color:var(--ink);background:#fff;font-weight:800;cursor:pointer}.article-actions button:hover{color:#fff;background:var(--blue)}.action-status{min-height:20px;margin:8px 0 0;color:var(--blue);text-align:right;font-size:13px;font-weight:700}.author-grid{display:grid;grid-template-columns:auto 1fr auto;gap:22px;align-items:center;margin-top:24px}.author-portrait{width:88px;height:88px;border-radius:50%;object-fit:cover}.author-initials{display:grid;place-items:center;color:var(--ink);background:#fecdd3;font-size:22px;font-weight:900}.author-grid span{color:#64748b;font-size:13px}.author-grid h2{margin:2px 0;color:var(--ink);font:700 27px/1 var(--serif)}.author-grid h2 a{text-decoration:none}.author-grid p{margin:8px 0;color:#64748b;font-size:14px}.author-grid nav{display:flex;flex-wrap:wrap;gap:14px}.author-grid nav a{color:#64748b;font-size:12px}.author-more{display:inline-flex;min-height:48px;align-items:center;justify-content:center;padding:10px 24px;border:2px solid var(--blue);color:var(--blue);text-align:center;text-decoration:none;font-size:13px;font-weight:800}.author-bio{margin:24px 0 0!important;padding-top:20px;border-top:1px solid var(--line);color:var(--body);font-size:16px}dialog{width:min(720px,calc(100% - 30px));max-height:calc(100dvh - 30px);padding:0;border:0;border-radius:18px;color:var(--ink);background:#fff;box-shadow:0 24px 70px #10213d38}dialog::backdrop{background:#0f172a7a;backdrop-filter:blur(2px)}dialog>div{position:relative;padding:30px}dialog h2{margin:0 50px 2px 0;font:700 30px/1.1 var(--serif)}dialog>div>p{color:#64748b}.dialog-close{position:absolute;top:13px;right:13px;width:44px;height:44px;border:0;border-radius:50%;color:var(--blue);background:transparent;font-size:29px;cursor:pointer}dialog section{border-top:1px solid var(--line)}dialog section button{display:block;width:100%;padding:17px 5px;border:0;border-bottom:1px solid var(--line);color:var(--body);background:#fff;text-align:left;line-height:1.65;cursor:pointer}.citation-status{min-height:22px;margin:14px 0 0!important;color:var(--blue)!important;font-size:13px;font-weight:800}.generated{max-width:1156px;margin:-52px auto 50px;padding:0 42px;color:#94a3b8;font-size:11px}@media(max-width:900px){.layout{display:block}.rail{display:none}.hero-inner{padding-bottom:116px}}@media(max-width:620px){.hero-inner{padding:36px 20px 104px}.hero h1{font-size:46px}.hero .dek{font-size:17px}.layout{margin-top:-70px;padding:0 16px 54px}.takeaways{padding:28px 24px}.article-section h2,.faq h2{font-size:32px}.author-card{padding:24px}.article-actions{display:grid;justify-content:start}.author-grid{grid-template-columns:1fr;gap:12px}.author-more{width:100%}dialog>div{padding:24px}.generated{padding:0 20px}}
 </style></head><body data-theme="${escapeHtml10(config.theme)}" data-scheduled-renderer="blog_article_v1"><div class="progress" aria-hidden="true"></div><header class="hero"><div class="hero-inner"><nav class="breadcrumb" aria-label="Breadcrumb"><a href="${safeHref4(input.canonicalUrl)}">${escapeHtml10(input.category)}</a><span>/</span><span>Article</span></nav><span class="eyebrow">${escapeHtml10(input.eyebrow)}</span><h1>${escapeHtml10(input.title)}</h1>${input.dek ? `<p class="dek">${escapeHtml10(input.dek)}</p>` : ""}<div class="contributors">${contributorText}<div class="meta"><time datetime="${escapeHtml10(articleDate)}">Updated ${formatDate2(articleDate)}</time><span>\u2022</span><span>${input.readTimeMinutes} min read</span>${input.reviewer ? "<span>\u2022</span><strong>Expert reviewed</strong>" : ""}</div></div></div></header><main class="layout"><article class="main"><section class="takeaways"><span class="eyebrow">The short answer</span><h2>Key takeaways</h2><ul>${input.keyTakeaways.map((item) => `<li>${escapeHtml10(item)}</li>`).join("")}</ul></section><section class="intro">${input.introduction.map((paragraph) => `<p>${escapeHtml10(paragraph)}</p>`).join("")}</section>${sections}${faq}${author}</article><div class="rail">${media}${disclosure}${toc}</div></main>${config.showGeneratedAt ? `<p class="generated">Rendered ${formatDate2(generatedAtIso)} by MCP Scraper.</p>` : ""}${citationDialog}<script>(()=>{const citations=${jsonForScript(citationValues)};const canonical=${jsonForScript(input.canonicalUrl)};const title=${jsonForScript(input.title)};const progress=document.querySelector('.progress');const tocLinks=[...document.querySelectorAll('.toc nav a')];const targets=tocLinks.map(link=>document.querySelector(link.hash)).filter(Boolean);const update=()=>{const max=document.documentElement.scrollHeight-innerHeight;if(progress)progress.style.width=(max>0?scrollY/max*100:0)+'%';let active=targets[0]?.id;for(const target of targets){if(target.getBoundingClientRect().top<=innerHeight*.55)active=target.id}tocLinks.forEach(link=>link.toggleAttribute('aria-current',link.hash==='#'+active));tocLinks.forEach(link=>{if(link.hash==='#'+active)link.setAttribute('aria-current','location');else link.removeAttribute('aria-current')})};addEventListener('scroll',update,{passive:true});addEventListener('resize',update);update();document.querySelectorAll('.faq h3 button').forEach(button=>button.addEventListener('click',()=>{const panel=document.getElementById(button.getAttribute('aria-controls'));const open=button.getAttribute('aria-expanded')==='true';button.setAttribute('aria-expanded',String(!open));panel.hidden=open;button.querySelector('b').textContent=open?'+':'\u2212'}));const disclosure=document.querySelector('.disclosure button');disclosure?.addEventListener('click',()=>{const panel=document.getElementById(disclosure.getAttribute('aria-controls'));const open=disclosure.getAttribute('aria-expanded')==='true';disclosure.setAttribute('aria-expanded',String(!open));panel.hidden=open});const tocToggle=document.querySelector('.toc header button');tocToggle?.addEventListener('click',()=>{const nav=document.getElementById('toc-links');const open=tocToggle.getAttribute('aria-expanded')==='true';tocToggle.setAttribute('aria-expanded',String(!open));nav.hidden=open;tocToggle.textContent=open?'\u2304':'\u2303'});document.querySelector('.back-top')?.addEventListener('click',()=>scrollTo({top:0,behavior:'smooth'}));const copy=async text=>{try{await navigator.clipboard.writeText(text)}catch{const area=document.createElement('textarea');area.value=text;area.style.position='fixed';area.style.opacity='0';document.body.append(area);area.select();document.execCommand('copy');area.remove()}};const dialog=document.getElementById('citation-dialog');document.querySelector('[data-cite]')?.addEventListener('click',()=>dialog.showModal());document.querySelector('.dialog-close')?.addEventListener('click',()=>dialog.close());dialog?.addEventListener('click',event=>{if(event.target===dialog)dialog.close()});document.querySelectorAll('[data-citation]').forEach(button=>button.addEventListener('click',async()=>{const style=button.dataset.citation;await copy(citations[style]);document.querySelector('.citation-status').textContent=style+' citation copied to clipboard.'}));document.querySelector('[data-share]')?.addEventListener('click',async()=>{const status=document.querySelector('.action-status');if(navigator.share){try{await navigator.share({title,url:canonical});status.textContent='Sharing options opened.';return}catch(error){if(error.name==='AbortError')return}}await copy(canonical);status.textContent='Article link copied to clipboard.'})})()</script></body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = createHash23("sha256").update(html).digest("hex");
+  const sha2563 = createHash24("sha256").update(html).digest("hex");
   return {
     html,
     filename: "blog-article.html",
@@ -38674,7 +39062,7 @@ scheduledResultApp.delete("/schedule-runs/:runId/view-links/:shareId", async (c)
 import { Hono as Hono34 } from "hono";
 
 // src/scheduled-artifacts/scheduled-run-artifact-store.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash25 } from "crypto";
 var SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
 var SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
 var SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -38690,7 +39078,7 @@ function policy4() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash24("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${createHash25("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -38797,7 +39185,7 @@ publicScheduledResultApp.get("/scheduled-run-view-links/:token/content", async (
 import { Hono as Hono35 } from "hono";
 
 // src/api/scheduler-integration-auth.ts
-import { createHash as createHash25, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { createHash as createHash26, createHmac as createHmac4, timingSafeEqual as timingSafeEqual3 } from "crypto";
 
 // src/api/service-connections.ts
 import { randomUUID as randomUUID20 } from "crypto";
@@ -39095,7 +39483,7 @@ function signingSecret() {
   return secret;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = createHash25("sha256").update(args.body).digest("hex");
+  const bodyHash = createHash26("sha256").update(args.body).digest("hex");
   return createHmac4("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
@@ -39287,7 +39675,7 @@ function shouldRunSiteExtractInBackground(input) {
 }
 
 // src/api/page-media-artifacts.ts
-import { createHash as createHash26, randomBytes as randomBytes6 } from "crypto";
+import { createHash as createHash27, randomBytes as randomBytes6 } from "crypto";
 import { homedir as homedir3 } from "os";
 import { basename, extname, join as join8 } from "path";
 import pLimit6 from "p-limit";
@@ -39434,7 +39822,7 @@ async function fetchMedia(rawUrl, expectedType) {
       finalUrl: checked.parsed.href,
       width: dimensions?.width ?? null,
       height: dimensions?.height ?? null,
-      sha256: createHash26("sha256").update(bytes).digest("hex")
+      sha256: createHash27("sha256").update(bytes).digest("hex")
     };
   }
   throw new Error("media_redirect_rejected");
@@ -39627,13 +40015,13 @@ async function reconcileSiteExtractSettlements(limit = 25) {
 }
 
 // src/api/page-diff.ts
-import { createHash as createHash27 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 import { diffLines } from "diff";
 var MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
 var MAX_DIFF_HUNKS = 200;
 var MAX_DIFF_LINES_PER_RESPONSE = 2e3;
 function sha256Hex(value) {
-  return createHash27("sha256").update(value).digest("hex");
+  return createHash28("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -39747,10 +40135,10 @@ async function persistScrapeBody(user, opts) {
 }
 
 // src/api/scrape-image-sink.ts
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 var MAX_IMAGES_PER_SCRAPE = 25;
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${createHash28("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${createHash29("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -40222,7 +40610,7 @@ function inferredWaybackCapturedAt(content) {
 }
 
 // src/api/connection-memory-import.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 var CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
 var CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
 var CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS = 256e3;
@@ -40252,7 +40640,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return createHash29("sha256").update(value).digest("hex");
+  return createHash30("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -41263,7 +41651,7 @@ async function dbUsage(identity, plan) {
 }
 
 // src/api/nango-control.ts
-import { createHash as createHash31, randomUUID as randomUUID24 } from "crypto";
+import { createHash as createHash32, randomUUID as randomUUID24 } from "crypto";
 
 // src/api/slack-archive-analysis.ts
 function isRecord2(value) {
@@ -41637,7 +42025,7 @@ async function exportSlackChannelPage(input, dependencies) {
 }
 
 // src/api/main-nango-transport.ts
-import { createHash as createHash30, randomUUID as randomUUID23 } from "crypto";
+import { createHash as createHash31, randomUUID as randomUUID23 } from "crypto";
 import { Client, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
 
 // src/api/connected-tool-policy.ts
@@ -42030,7 +42418,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy6) => policy6.classification === "read").map((policy6) => policy6.name);
   const actionTools = [...policies.values()].filter((policy6) => policy6.classification === "action").map((policy6) => policy6.name);
-  const revision = createHash30("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = createHash31("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -42058,7 +42446,7 @@ async function callNangoToolDirect(args) {
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
   const requestId = args.requestId?.trim() || randomUUID23();
-  const idempotencyKey3 = `main-nango:${createHash30("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const idempotencyKey3 = `main-nango:${createHash31("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -42083,7 +42471,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : createHash30("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : createHash31("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -42125,7 +42513,7 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: createHash30("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: createHash31("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -42849,8 +43237,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${createHash31("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID24()).digest("hex")}`;
-  const requestDigest = createHash31("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${createHash32("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || randomUUID24()).digest("hex")}`;
+  const requestDigest = createHash32("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -43001,7 +43389,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return createHash31("sha256").update(canonicalJson2(tool)).digest("hex");
+  return createHash32("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -43280,7 +43668,7 @@ async function callMainOwnedExportPage(identity, input) {
 }
 
 // src/api/resend-control.ts
-import { createHash as createHash32 } from "crypto";
+import { createHash as createHash33 } from "crypto";
 var DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
 var RESEND_PROVIDER_CONFIG_KEY = "resend";
 var RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -43539,7 +43927,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${createHash32("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${createHash33("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -46765,7 +47153,7 @@ app.get("/cron/tick", async (c) => {
     return c.json({ error: "Unauthorized" }, 401);
   }
   const startedAt = Date.now();
-  const { drainQueue } = await import("./worker-W5C6SKZT.js");
+  const { drainQueue } = await import("./worker-S2WXELUC.js");
   const budget = { maxJobs: 10, deadlineMs: startedAt + CRON_TICK_DRAIN_BUDGET_MS };
   const origin = `${new URL(c.req.url).protocol}//${new URL(c.req.url).host}`;
   const unfinished = [];
@@ -46835,8 +47223,8 @@ app.post("/api/internal/extract-refinalize/:id", async (c) => {
     finishExtractJob: finishExtractJob2,
     terminalExtractJobStatus: terminalExtractJobStatus2,
     extractJobLimitInfo: extractJobLimitInfo2
-  } = await import("./site-extract-repository-QSRPXNMI.js");
-  const { assembleExtractArtifacts } = await import("./extract-bundle-3CRG7FAN.js");
+  } = await import("./site-extract-repository-CFMSWAVL.js");
+  const { assembleExtractArtifacts } = await import("./extract-bundle-H7JEELY7.js");
   const existing = await getExtractJob2(jobId2);
   if (!existing) return c.json({ error: "job not found" }, 404);
   if (existing.status !== "failed") {
@@ -46863,7 +47251,7 @@ app.post("/api/internal/extract-refinalize/:id", async (c) => {
   if (!updated) return c.json({ error: "job state changed during re-finalization" }, 409);
   let settlement = "already_settled_or_refunded";
   if (job.billedMc == null && job.userId != null) {
-    const { settleExtractJob: settleExtractJob3, countSuccessfulPages: countSuccessfulPages2 } = await import("./site-extract-repository-QSRPXNMI.js");
+    const { settleExtractJob: settleExtractJob3, countSuccessfulPages: countSuccessfulPages2 } = await import("./site-extract-repository-CFMSWAVL.js");
     const heldMc = Number(job.options.heldMc ?? 0);
     const successful = await countSuccessfulPages2(jobId2);
     const usedMc = Math.min(successful * MC_COSTS.page_scrape, heldMc);
@@ -47048,4 +47436,4 @@ app.get("/blog/:slug/", (c) => {
 export {
   app
 };
-//# sourceMappingURL=server-WKBCZ2TH.js.map
+//# sourceMappingURL=server-NBGZJX4P.js.map