mcp-scraper 0.55.0 → 0.57.0

package/dist/bin/api-server.cjs

@@ -12455,8 +12455,8 @@ var init_product_contract_generated = __esm({
         "freeSignupCredits": 0
       },
       "inventory": {
-        "totalTools": 249,
-        "scraperTools": 148,
+        "totalTools": 251,
+        "scraperTools": 150,
         "memoryTools": 101
       },
       "concurrencyPack": {
@@ -44624,7 +44624,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.55.0";
+    PACKAGE_VERSION = "0.57.0";
   }
 });
 
@@ -44690,7 +44690,7 @@ seam is noted so you can chain them.
   prepare-memory-write: it returns the live entity profile contract, duplicate candidates, tag reuse/review/create
   guidance, recommended sections, optional sections, and heading guidance before any write occurs.
 - Validate a composed entity without writing -> **commons_validate_entity**. Use it after composing and before submit
-  to catch missing featured images, missing source/body evidence, duplicate conflicts, revision problems, and
+  to catch missing featured images, missing source/body evidence, duplicate candidates, and
   unsupported placeholder sections.
 - Create or edit a public wiki entity -> **commons_submit_entity**. This is a governed proposal write,
   not direct rendered HTML editing. Normal workflow is prepare -> validate -> submit. Pick the closest entity type
@@ -44698,6 +44698,9 @@ seam is noted so you can chain them.
   Trail, or PublicArticle.
   Creating a new entity costs 10 Credits; editing an existing entity costs 2 Credits. Preparation, validation,
   search, and reads are free. Reusing the same idempotency key for a retry does not charge twice.
+  Commons is an open wiki. Any account may edit any entity, and every edit publishes immediately and is
+  tracked on the public contribution ledger with the actor, the changed fields, and a before/after snapshot.
+  Pass baseRevision on an edit so the ledger records whether it landed on top of a newer revision.
   The body must be a neutral encyclopedia projection, not a blog post or raw scrape dump. Use H2 for the
   entity's main sections and H3/H4/H5 for subtopics; every heading becomes a public page-menu item.
   Entity profiles are adaptive contracts, not empty templates. Use the prepare output as the guide, but omit
@@ -46450,7 +46453,7 @@ var init_contracts = __esm({
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod43, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomImageSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, PageMediaAssetOutput, PageMediaArtifactOutput, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
+var import_zod43, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsHostImageInputSchema, CommonsGetProposalInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomImageSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, PageMediaAssetOutput, PageMediaArtifactOutput, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
@@ -46932,6 +46935,16 @@ var init_mcp_tool_schemas = __esm({
     CommonsGetEntityLedgerInputSchema = {
       idOrSlug: import_zod43.z.string().trim().min(1).max(180).describe("Published entity id or /wiki/ slug whose contribution ledger should be read.")
     };
+    CommonsHostImageInputSchema = {
+      sourceUrl: import_zod43.z.string().url().optional().describe("Public https image URL to download and host. The wiki never serves a third-party URL directly, so pass the original source here rather than putting it on the entity."),
+      imageBase64: import_zod43.z.string().min(16).optional().describe("Base64 image bytes for an image you already hold. Use for images under about 3 MB; larger files should be published from a URL."),
+      alt: import_zod43.z.string().trim().max(500).optional().describe("Alt text describing the image for readers who cannot see it."),
+      license: import_zod43.z.string().trim().max(240).optional().describe("License or usage terms of the original image, preserved with the hosted copy."),
+      attribution: import_zod43.z.string().trim().max(500).optional().describe("Credit line for the original photographer, publication, or archive.")
+    };
+    CommonsGetProposalInputSchema = {
+      proposalId: import_zod43.z.string().trim().min(1).max(120).describe("Proposal id returned by commons_submit_entity, in the form commons-proposal-<uuid>.")
+    };
     CommonsSaveFilterInputSchema = {
       name: import_zod43.z.string().trim().min(2).max(80).describe("User-facing name for this MCP personalization filter. Reusing a name updates the saved filter."),
       description: import_zod43.z.string().trim().max(500).optional().describe("Optional note explaining when this filter should be used."),
@@ -50447,7 +50460,7 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
   }, async (input) => executor.commonsValidateEntity(input));
   server.registerTool("commons_submit_entity", {
     title: "Transparent Commons Governed Entity Write",
-    description: "Create or propose an edit to a Transparent Commons public wiki entity through the governed MCP Scraper write plane. A new entity costs 10 Credits; an edit to an existing entity costs 2 Credits. Preparation and validation are free, and idempotent retries are not charged twice. This never edits rendered HTML directly. Normal workflow is commons_prepare_entity, compose, commons_validate_entity, then submit. Choose a precise entityType and write a neutral encyclopedia projection with the matching entity structure, not a blog article or raw scrape dump. Use H2 sections and H3/H4/H5 subitems; every heading appears in the public page menu. Omit unsupported sections instead of publishing empty/filler headings. It writes a proposal, records a contribution ledger entry when accepted, and auto-publishes only safe non-conflicting changes with a featured image and source/body evidence. Existing entity edits require baseRevision to auto-publish. Requires idempotencyKey.",
+    description: "Create or propose an edit to a Transparent Commons public wiki entity through the governed MCP Scraper write plane. A new entity costs 10 Credits; an edit to an existing entity costs 2 Credits. Preparation and validation are free, and idempotent retries are not charged twice. This never edits rendered HTML directly. Normal workflow is commons_prepare_entity, compose, commons_validate_entity, then submit. Choose a precise entityType and write a neutral encyclopedia projection with the matching entity structure, not a blog article or raw scrape dump. Use H2 sections and H3/H4/H5 subitems; every heading appears in the public page menu. Omit unsupported sections instead of publishing empty/filler headings. Transparent Commons is an open wiki: any account may edit any entity, and every edit publishes and is recorded on the public contribution ledger. Publishing requires a featured image and body/source evidence. Pass baseRevision when editing so the ledger can show whether the edit was written on top of a newer revision. Requires idempotencyKey.",
     inputSchema: CommonsSubmitEntityInputSchema,
     outputSchema: recordOutputSchema("commons_submit_entity", CommonsGenericOutputSchema),
     annotations: {
@@ -50471,6 +50484,32 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
       openWorldHint: false
     }
   }, async (input) => executor.commonsGetEntityLedger(input));
+  server.registerTool("commons_host_image", {
+    title: "Host a Transparent Commons Image",
+    description: "Download an image from a public https URL, or accept base64 bytes, and store it as a permanent Commons-hosted image. Returns the hosted URL to use on an entity. Commons never serves a third-party image URL: submitting an entity with an external image hosts it automatically, and this tool exists for hosting an image before or independently of a write. JPEG, PNG, GIF, and WebP up to 10 MB; SVG is rejected because the wiki serves images to the public web. Identical bytes are stored once and reused.",
+    inputSchema: CommonsHostImageInputSchema,
+    outputSchema: recordOutputSchema("commons_host_image", CommonsGenericOutputSchema),
+    annotations: {
+      title: "Host a Transparent Commons Image",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    }
+  }, async (input) => executor.commonsHostImage(input));
+  server.registerTool("commons_get_proposal", {
+    title: "Transparent Commons Proposal Status",
+    description: "Read one commons_submit_entity proposal owned by the calling account. Use it when submit returned a proposal that was held for review instead of published, to see the review reason and whether it has since been applied.",
+    inputSchema: CommonsGetProposalInputSchema,
+    outputSchema: recordOutputSchema("commons_get_proposal", CommonsGenericOutputSchema),
+    annotations: {
+      title: "Transparent Commons Proposal Status",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  }, async (input) => executor.commonsGetProposal(input));
   server.registerTool("commons_save_filter", {
     title: "Transparent Commons Saved MCP Filter",
     description: "Save or update an account-scoped Commons search filter so one MCP can behave like many personalized reading rooms, trails, source scopes, categories, or tag bundles. Reusing a filter name updates it.",
@@ -51518,6 +51557,12 @@ var init_http_mcp_tool_executor = __esm({
       commonsGetEntityLedger(input) {
         return this.getJson(`/commons/entities/${encodeURIComponent(input.idOrSlug)}/ledger`);
       }
+      commonsGetProposal(input) {
+        return this.getJson(`/commons/proposals/${encodeURIComponent(input.proposalId)}`);
+      }
+      commonsHostImage(input) {
+        return this.call("/commons/images", input);
+      }
       commonsSaveFilter(input) {
         return this.call("/commons/filters", input);
       }
@@ -64254,6 +64299,231 @@ var init_editorial_reading_room_routes = __esm({
   }
 });
 
+// src/api/commons-image-store.ts
+async function ensureCommonsImageSchema() {
+  if (imageSchemaReady) return;
+  await getDb().execute(`
+    CREATE TABLE IF NOT EXISTS commons_images (
+      id           TEXT    PRIMARY KEY,
+      user_id      INTEGER NOT NULL,
+      digest       TEXT    NOT NULL,
+      storage_key  TEXT    NOT NULL,
+      url          TEXT    NOT NULL,
+      content_type TEXT    NOT NULL,
+      bytes        INTEGER NOT NULL,
+      source_url   TEXT,
+      alt          TEXT,
+      license      TEXT,
+      attribution  TEXT,
+      created_at   TEXT    NOT NULL DEFAULT (datetime('now'))
+    )
+  `);
+  await getDb().execute(`CREATE UNIQUE INDEX IF NOT EXISTS commons_images_digest ON commons_images(digest)`);
+  imageSchemaReady = true;
+}
+function sniffImageFormat(bytes) {
+  if (bytes.length < 12) return null;
+  if (bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return "image/jpeg";
+  if (bytes.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))) return "image/png";
+  if (bytes.subarray(0, 6).toString("ascii") === "GIF87a" || bytes.subarray(0, 6).toString("ascii") === "GIF89a") return "image/gif";
+  if (bytes.subarray(0, 4).toString("ascii") === "RIFF" && bytes.subarray(8, 12).toString("ascii") === "WEBP") return "image/webp";
+  return null;
+}
+function isBlockedAddress(address) {
+  if ((0, import_node_net2.isIP)(address) === 6) {
+    const normalized = address.toLowerCase();
+    return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe80");
+  }
+  const parts = address.split(".").map(Number);
+  if (parts.length !== 4 || parts.some((part) => Number.isNaN(part))) return true;
+  const [a, b] = parts;
+  if (a === 10 || a === 127 || a === 0) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  return false;
+}
+async function assertPublicHttpsUrl(rawUrl) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    throw new CommonsImageError("image_url_invalid", `"${rawUrl}" is not a valid URL.`);
+  }
+  if (url.protocol !== "https:") {
+    throw new CommonsImageError("image_url_not_https", "Commons image sources must be https URLs.");
+  }
+  const hostname = url.hostname.replace(/^\[|\]$/g, "");
+  const addresses = (0, import_node_net2.isIP)(hostname) ? [{ address: hostname }] : await (0, import_promises15.lookup)(hostname, { all: true }).catch(() => []);
+  if (!addresses.length) {
+    throw new CommonsImageError("image_host_unresolvable", `Could not resolve ${url.hostname}.`);
+  }
+  if (addresses.some((entry) => isBlockedAddress(entry.address))) {
+    throw new CommonsImageError("image_host_blocked", "Commons image sources cannot resolve to private or loopback addresses.");
+  }
+  return url;
+}
+async function downloadImage(sourceUrl) {
+  let current = sourceUrl;
+  for (let redirect = 0; redirect <= COMMONS_IMAGE_MAX_REDIRECTS; redirect += 1) {
+    const url = await assertPublicHttpsUrl(current);
+    const response = await fetch(url, { redirect: "manual", signal: AbortSignal.timeout(COMMONS_IMAGE_FETCH_TIMEOUT_MS) });
+    if (response.status >= 300 && response.status < 400) {
+      const location2 = response.headers.get("location");
+      if (!location2) throw new CommonsImageError("image_redirect_invalid", "Image source redirected without a destination.");
+      current = new URL(location2, url).toString();
+      continue;
+    }
+    if (!response.ok) {
+      throw new CommonsImageError("image_source_unavailable", `Image source returned HTTP ${response.status}.`, 422);
+    }
+    const declaredLength = Number(response.headers.get("content-length") ?? "0");
+    if (declaredLength > COMMONS_IMAGE_MAX_BYTES) {
+      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+    }
+    const bytes = Buffer.from(await response.arrayBuffer());
+    if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
+      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+    }
+    return bytes;
+  }
+  throw new CommonsImageError("image_redirect_limit", "Image source exceeded the redirect limit.");
+}
+function decodeBase64Image(value) {
+  const payload = value.includes(",") && value.trim().startsWith("data:") ? value.slice(value.indexOf(",") + 1) : value;
+  const bytes = Buffer.from(payload, "base64");
+  if (!bytes.length) throw new CommonsImageError("image_base64_invalid", "imageBase64 did not decode to any bytes.");
+  if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
+    throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+  }
+  return bytes;
+}
+function isCommonsHostedImageUrl(url) {
+  return /^https:\/\/[^/]*(\.public\.blob\.vercel-storage\.com|blob\.vercel-storage\.com)\//i.test(url) || url.startsWith("file://");
+}
+async function hostCommonsImage(input) {
+  if (hostOverride) return hostOverride(input);
+  await ensureCommonsImageSchema();
+  if (!input.sourceUrl && !input.imageBase64) {
+    throw new CommonsImageError("image_source_missing", "Provide either sourceUrl or imageBase64.");
+  }
+  const bytes = input.imageBase64 ? decodeBase64Image(input.imageBase64) : await downloadImage(String(input.sourceUrl));
+  const contentType = sniffImageFormat(bytes);
+  if (!contentType) {
+    throw new CommonsImageError(
+      "image_format_unsupported",
+      "Commons hosts JPEG, PNG, GIF, and WebP. SVG and other formats are rejected because the wiki serves them to the public web.",
+      415
+    );
+  }
+  const digest2 = (0, import_node_crypto37.createHash)("sha256").update(bytes).digest("hex");
+  const existing = await getDb().execute({
+    sql: "SELECT id, url, content_type, bytes, source_url FROM commons_images WHERE digest = ? LIMIT 1",
+    args: [digest2]
+  });
+  const reusable = existing.rows[0];
+  if (reusable) {
+    return {
+      id: String(reusable.id),
+      url: String(reusable.url),
+      contentType: String(reusable.content_type),
+      bytes: Number(reusable.bytes),
+      digest: digest2,
+      sourceUrl: reusable.source_url ? String(reusable.source_url) : null,
+      reused: true
+    };
+  }
+  const extension = contentType.split("/")[1] === "jpeg" ? "jpg" : contentType.split("/")[1];
+  const storageKey = `commons/images/${digest2.slice(0, 2)}/${digest2}.${extension}`;
+  const stored = await getBlobStore().put(storageKey, bytes, contentType);
+  const id = `TPW-IMG-${digest2.slice(0, 16).toUpperCase()}`;
+  await getDb().execute({
+    sql: `
+      INSERT INTO commons_images (id, user_id, digest, storage_key, url, content_type, bytes, source_url, alt, license, attribution, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `,
+    args: [
+      id,
+      input.userId,
+      digest2,
+      storageKey,
+      stored.url,
+      contentType,
+      bytes.length,
+      input.sourceUrl ?? null,
+      input.alt ?? null,
+      input.license ?? null,
+      input.attribution ?? null,
+      (/* @__PURE__ */ new Date()).toISOString()
+    ]
+  });
+  return { id, url: stored.url, contentType, bytes: bytes.length, digest: digest2, sourceUrl: input.sourceUrl ?? null, reused: false };
+}
+async function hostEntityImages(input) {
+  const rewrite = { mediaUrls: /* @__PURE__ */ new Map(), dropped: [] };
+  const featuredUrl = input.featuredImage?.url;
+  if (featuredUrl && !isCommonsHostedImageUrl(featuredUrl)) {
+    const hosted = await hostCommonsImage({
+      userId: input.userId,
+      sourceUrl: featuredUrl,
+      alt: input.featuredImage?.alt,
+      license: input.featuredImage?.license,
+      attribution: input.featuredImage?.sourceUrl
+    }).catch((error) => {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new CommonsImageError(
+        error instanceof CommonsImageError ? error.code : "featured_image_unhostable",
+        `The featured image could not be hosted, so this entity would publish with a link that can break: ${message}`,
+        422
+      );
+    });
+    rewrite.featuredImageUrl = hosted.url;
+  }
+  for (const item of input.media ?? []) {
+    if (!item.url || isCommonsHostedImageUrl(item.url)) continue;
+    try {
+      const hosted = await hostCommonsImage({
+        userId: input.userId,
+        sourceUrl: item.url,
+        alt: item.alt,
+        license: item.license,
+        attribution: item.sourceUrl
+      });
+      rewrite.mediaUrls.set(item.url, hosted.url);
+    } catch (error) {
+      rewrite.dropped.push({ url: item.url, reason: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return rewrite;
+}
+var import_node_crypto37, import_promises15, import_node_net2, COMMONS_IMAGE_MAX_BYTES, COMMONS_IMAGE_MAX_REDIRECTS, COMMONS_IMAGE_FETCH_TIMEOUT_MS, CommonsImageError, imageSchemaReady, hostOverride;
+var init_commons_image_store = __esm({
+  "src/api/commons-image-store.ts"() {
+    "use strict";
+    import_node_crypto37 = require("crypto");
+    import_promises15 = require("dns/promises");
+    import_node_net2 = require("net");
+    init_blob_store();
+    init_db();
+    COMMONS_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
+    COMMONS_IMAGE_MAX_REDIRECTS = 3;
+    COMMONS_IMAGE_FETCH_TIMEOUT_MS = 2e4;
+    CommonsImageError = class extends Error {
+      constructor(code, message, httpStatus = 400) {
+        super(message);
+        this.code = code;
+        this.httpStatus = httpStatus;
+        this.name = "CommonsImageError";
+      }
+      code;
+      httpStatus;
+    };
+    imageSchemaReady = false;
+    hostOverride = null;
+  }
+});
+
 // src/api/schema-presence.ts
 async function loadSchemaObjects() {
   const res = await getDb().execute(
@@ -64356,7 +64626,7 @@ function buildCommonsLinkset(entity, claims) {
     context[claim.predicate] = targets;
   }
   const document2 = { linkset: [context] };
-  const etag = `"${(0, import_node_crypto37.createHash)("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
+  const etag = `"${(0, import_node_crypto38.createHash)("sha256").update(JSON.stringify(document2)).digest("hex")}"`;
   return { document: document2, etag, publicUrl, linksetUrl, profile: COMMONS_RELATIONSHIP_PROFILE };
 }
 function commonsLinksetDiscoveryHeader(idOrSlug) {
@@ -64424,11 +64694,11 @@ function normalizeHreflang(value) {
   const languages = [...new Set(value.map((item) => optionalText(item, 80)).filter((item) => Boolean(item)))];
   return languages.length ? languages : void 0;
 }
-var import_node_crypto37, COMMONS_LINKSET_MEDIA_TYPE, COMMONS_RELATIONSHIP_PROFILE, REGISTERED_RELATIONS;
+var import_node_crypto38, COMMONS_LINKSET_MEDIA_TYPE, COMMONS_RELATIONSHIP_PROFILE, REGISTERED_RELATIONS;
 var init_commons_linksets = __esm({
   "src/api/commons-linksets.ts"() {
     "use strict";
-    import_node_crypto37 = require("crypto");
+    import_node_crypto38 = require("crypto");
     COMMONS_LINKSET_MEDIA_TYPE = "application/linkset+json";
     COMMONS_RELATIONSHIP_PROFILE = "https://mcpscraper.dev/commons/profiles/relationships/v1";
     REGISTERED_RELATIONS = /* @__PURE__ */ new Set([
@@ -64759,23 +65029,99 @@ async function searchCommonsEntities(filters = {}, userId) {
     const pattern = `%${escapeLike(term)}%`;
     args.push(pattern, pattern, pattern, pattern, pattern);
   }
-  args.push(limit, offset);
-  const result = await getDb().execute({
+  if (!terms.length) {
+    args.push(limit, offset);
+    const result = await getDb().execute({
+      sql: `
+        SELECT *
+        FROM commons_entities
+        WHERE ${clauses.join(" AND ")}
+        ORDER BY updated_at DESC, title ASC
+        LIMIT ? OFFSET ?
+      `,
+      args
+    });
+    const results2 = result.rows.map((row) => rowToEntity(row));
+    await resolveRelatedLinksAgainstPublishedEntities(results2);
+    return { results: results2, filters: mergedFilters, limit, offset };
+  }
+  const candidates = await getDb().execute({
     sql: `
-      SELECT *
+      SELECT id, title, tags_json, keywords_json, description, search_text, updated_at,
+        (
+          SELECT group_concat(
+            coalesce(commons_claims.title, '') || ' ' ||
+            coalesce(commons_claims.predicate, '') || ' ' ||
+            coalesce(commons_claims.predicate_label, '') || ' ' ||
+            coalesce(commons_claims.object_url, ''), ' ')
+          FROM commons_claims
+          WHERE commons_claims.subject_entity_id = commons_entities.id
+        ) AS claim_text
       FROM commons_entities
       WHERE ${clauses.join(" AND ")}
       ORDER BY updated_at DESC, title ASC
-      LIMIT ? OFFSET ?
+      LIMIT ${SEARCH_CANDIDATE_LIMIT}
     `,
     args
   });
-  return {
-    results: result.rows.map((row) => rowToEntity(row)),
-    filters: mergedFilters,
-    limit,
-    offset
-  };
+  const ranked = candidates.rows.map((row) => {
+    const record = row;
+    const score = relevanceScore(terms, {
+      title: String(record.title ?? ""),
+      description: String(record.description ?? ""),
+      tags: parseJsonArray(record.tags_json),
+      keywords: parseJsonArray(record.keywords_json),
+      searchText: String(record.search_text ?? ""),
+      claimText: String(record.claim_text ?? "")
+    });
+    return { id: String(record.id), updatedAt: String(record.updated_at ?? ""), title: String(record.title ?? ""), score };
+  }).filter((candidate) => candidate.score > 0).sort((left, right) => right.score - left.score || right.updatedAt.localeCompare(left.updatedAt) || left.title.localeCompare(right.title));
+  const pageIds = ranked.slice(offset, offset + limit).map((candidate) => candidate.id);
+  if (!pageIds.length) return { results: [], filters: mergedFilters, limit, offset };
+  const page = await getDb().execute({
+    sql: `SELECT * FROM commons_entities WHERE id IN (${pageIds.map(() => "?").join(", ")})`,
+    args: pageIds
+  });
+  const byId = new Map(page.rows.map((row) => {
+    const entity = rowToEntity(row);
+    return [entity.id, entity];
+  }));
+  const results = pageIds.map((id) => byId.get(id)).filter((entity) => Boolean(entity));
+  await resolveRelatedLinksAgainstPublishedEntities(results);
+  return { results, filters: mergedFilters, limit, offset };
+}
+function parseJsonArray(value) {
+  try {
+    const parsed = JSON.parse(String(value ?? "[]"));
+    return Array.isArray(parsed) ? parsed.map((item) => String(item)) : [];
+  } catch {
+    return [];
+  }
+}
+function containsWord(haystack, term) {
+  if (!haystack || !term) return false;
+  const pattern = new RegExp(`(^|[^a-z0-9])${term.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}([^a-z0-9]|$)`, "i");
+  return pattern.test(haystack);
+}
+function relevanceScore(terms, fields) {
+  let score = 0;
+  const tagText = fields.tags.join(" ");
+  const keywordText = fields.keywords.join(" ");
+  for (const term of terms) {
+    const inTitle = containsWord(fields.title, term);
+    const inTags = containsWord(tagText, term) || containsWord(keywordText, term);
+    const inDescription = containsWord(fields.description, term);
+    const inBody = containsWord(fields.searchText, term);
+    const inClaims = containsWord(fields.claimText, term);
+    if (!inTitle && !inTags && !inDescription && !inBody && !inClaims) return 0;
+    if (inTitle) score += 100;
+    if (inTags) score += 40;
+    if (inDescription) score += 20;
+    if (inClaims) score += 10;
+    if (inBody) score += 5;
+  }
+  if (terms.every((term) => containsWord(fields.title, term))) score += 50;
+  return score;
 }
 async function prepareCommonsEntity(input, user) {
   await ensureCommonsSchema();
@@ -64874,18 +65220,17 @@ async function validateCommonsEntity(input, user) {
     errors.push(`Unsupported placeholder sections must be omitted instead of published: ${placeholderSections.join(", ")}.`);
   }
   if (existing && input.baseRevision === void 0) {
-    warnings.push("An existing entity matches this slug or entityId. Submit will create a pending_review proposal unless the current baseRevision is supplied.");
+    warnings.push(`An existing entity matches this slug or entityId. Submit will edit it on top of revision ${existing.revision} and record the edit on the contribution ledger.`);
   }
   if (existing && input.baseRevision !== void 0 && input.baseRevision !== existing.revision) {
-    warnings.push(`The matching entity is revision ${existing.revision}; this payload targets revision ${input.baseRevision}. Submit will be held for review.`);
+    warnings.push(`The matching entity is revision ${existing.revision}; this payload targets revision ${input.baseRevision}. Submit will apply on top of revision ${existing.revision} and note the divergence on the ledger.`);
   }
   if (input.reviewPolicy === "always_review") {
     warnings.push("reviewPolicy is always_review, so the proposal will not auto-publish even if the payload is otherwise valid.");
   }
   if (user?.id == null) warnings.push("No authenticated user was supplied to validation; submit still requires API-key authenticated user context.");
   const valid = errors.length === 0;
-  const revisionAllowsAutoPublish = !existing || input.baseRevision === existing.revision;
-  const autoPublishEligible = valid && revisionAllowsAutoPublish && input.reviewPolicy !== "always_review";
+  const autoPublishEligible = valid && input.reviewPolicy !== "always_review";
   const tagVocabulary = await commonsTagVocabulary();
   return {
     ok: true,
@@ -64923,7 +65268,10 @@ async function getCommonsEntity(idOrSlug) {
     `,
     args: [lookup2, normalizeSlug(lookup2)]
   });
-  return result.rows[0] ? rowToEntity(result.rows[0]) : null;
+  if (!result.rows[0]) return null;
+  const entity = rowToEntity(result.rows[0]);
+  await resolveRelatedLinksAgainstPublishedEntities([entity]);
+  return entity;
 }
 async function classifyCommonsWrite(input, user) {
   await ensureCommonsSchema();
@@ -64945,14 +65293,31 @@ async function submitCommonsEntity(input, user) {
       entity: entity2,
       applied: existingProposal.status === "accepted",
       reviewReason: existingProposal.reviewReason,
+      conflictNote: null,
+      droppedImages: [],
       publicUrl: entity2?.status === "published" ? publicUrlForSlug(entity2.slug) : null
     };
   }
+  const hostedImages = await hostEntityImages({
+    userId: Number(user.id),
+    featuredImage: normalized.featuredImage,
+    media: normalized.media
+  });
+  if (hostedImages.featuredImageUrl && normalized.featuredImage) {
+    normalized.featuredImage = { ...normalized.featuredImage, url: hostedImages.featuredImageUrl };
+  }
+  if (hostedImages.mediaUrls.size || hostedImages.dropped.length) {
+    const droppedUrls = new Set(hostedImages.dropped.map((item) => item.url));
+    normalized.media = normalized.media.filter((item) => !droppedUrls.has(item.url)).map((item) => {
+      const hostedUrl = hostedImages.mediaUrls.get(item.url);
+      return hostedUrl ? { ...item, url: hostedUrl } : item;
+    });
+  }
   const existing = await findEntityBySlugOrIdAnyStatus(normalized.slug, normalized.entityId);
   const existingClaims = existing && normalized.claims !== void 0 ? await getCommonsClaimsByEntityId(existing.id) : [];
   const safety = evaluatePublishSafety(normalized, existing);
   const shouldApply = safety.safe && normalized.reviewPolicy !== "always_review";
-  const proposalId = `commons-proposal-${(0, import_node_crypto38.randomUUID)()}`;
+  const proposalId = `commons-proposal-${(0, import_node_crypto39.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const entityId = existing?.id ?? normalized.entityId ?? allocateEntityId();
   const proposalStatus = shouldApply ? "accepted" : "pending_review";
@@ -65007,7 +65372,7 @@ async function submitCommonsEntity(input, user) {
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       `,
       args: [
-        `commons-ledger-${(0, import_node_crypto38.randomUUID)()}`,
+        `commons-ledger-${(0, import_node_crypto39.randomUUID)()}`,
         nextEntity.id,
         proposalId,
         user.id,
@@ -65018,7 +65383,7 @@ async function submitCommonsEntity(input, user) {
           ...changedFieldPaths(existing, nextEntity),
           ...normalized.claims !== void 0 ? ["claims"] : []
         ]),
-        normalized.changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity."),
+        ledgerSummary(normalized.changeSummary, existing, safety.conflictNote),
         existing ? JSON.stringify({
           ...entityLedgerSnapshot(existing),
           ...normalized.claims !== void 0 ? { claims: existingClaims } : {}
@@ -65041,6 +65406,8 @@ async function submitCommonsEntity(input, user) {
     entity,
     applied: shouldApply,
     reviewReason: safety.reason,
+    conflictNote: safety.conflictNote,
+    droppedImages: hostedImages.dropped,
     publicUrl: entity?.status === "published" && shouldApply ? publicUrlForSlug(entity.slug) : null
   };
 }
@@ -65111,7 +65478,7 @@ async function saveCommonsFilter(input, user) {
     sql: "SELECT id FROM commons_saved_filters WHERE user_id = ? AND name = ? LIMIT 1",
     args: [user.id, name]
   });
-  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto38.randomUUID)()}`;
+  const id = existing.rows[0]?.id != null ? String(existing.rows[0].id) : `commons-filter-${(0, import_node_crypto39.randomUUID)()}`;
   await getDb().execute({
     sql: `
       INSERT INTO commons_saved_filters (id, user_id, name, description, filter_json, created_at, updated_at)
@@ -65179,8 +65546,9 @@ async function listCommonsNeedsLinks(filters = {}) {
   });
   const concepts = /* @__PURE__ */ new Map();
   const queryTerms = tokenize(cleanFilters.query);
-  for (const row of result.rows) {
-    const entity = rowToEntity(row);
+  const scanned = result.rows.map((row) => rowToEntity(row));
+  await resolveRelatedLinksAgainstPublishedEntities(scanned);
+  for (const entity of scanned) {
     for (const link2 of entity.articleSections.relatedLinks) {
       if (!relatedLinkNeedsPage(link2)) continue;
       const haystack = [link2.title, link2.summary, link2.relationship, entity.title, entity.description, entity.tags.join(" ")].filter(Boolean).join(" ").toLowerCase();
@@ -65234,8 +65602,8 @@ function commonsDatabaseReport() {
       directPublicHtmlWrites: false,
       normalWorkflow: ["commons_prepare_entity", "commons_validate_entity", "commons_submit_entity"],
       writesCreate: ["commons_proposals", "commons_ledger", "commons_entities when accepted"],
-      safeAutoPublish: "New non-conflicting entities with title, description, featured image, and body/source evidence.",
-      conflictBehavior: "Existing entity edits require baseRevision. Otherwise the proposal is pending_review.",
+      safeAutoPublish: "Any entity with title, description, featured image, and body/source evidence. Creates and edits both publish.",
+      conflictBehavior: "Anyone may edit any entity. A missing or stale baseRevision still applies on top of the current revision; the divergence is recorded on the contribution ledger.",
       billing: { validationCredits: 0, createCredits: LISTING_WRITE_RATE_POLICY.create.credits, editCredits: LISTING_WRITE_RATE_POLICY.edit.credits }
     },
     searchCorpus: ["title", "disambiguationName", "description", "tags", "keywords", "relatedEntities", "relationship claims", "bodyMarkdown", "sections", "media", "source metadata", "jsonLd"],
@@ -65557,19 +65925,23 @@ function normalizeClaimsForRepository(input) {
     throw new CommonsRepositoryError("invalid_claims", error instanceof Error ? error.message : "Claims are invalid.");
   }
 }
+function ledgerSummary(changeSummary, existing, conflictNote) {
+  const base = changeSummary || (existing ? "Updated Commons entity." : "Created Commons entity.");
+  return conflictNote ? `${base} ${conflictNote}` : base;
+}
 function evaluatePublishSafety(input, existing) {
-  if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish." };
+  if (!input.featuredImage?.url) return { safe: false, reason: "A featured image is required before a Commons entity can publish.", conflictNote: null };
   if (!input.bodyMarkdown.trim() && !input.source.originalUrl && !input.source.resolvedUrl) {
-    return { safe: false, reason: "A public entity needs article body text or source evidence before publishing." };
+    return { safe: false, reason: "A public entity needs article body text or source evidence before publishing.", conflictNote: null };
   }
-  if (!existing) return { safe: true, reason: null };
+  if (!existing) return { safe: true, reason: null, conflictNote: null };
   if (input.baseRevision === void 0) {
-    return { safe: false, reason: "Existing entity edits require baseRevision so agents do not overwrite someone else silently." };
+    return { safe: true, reason: null, conflictNote: `Applied without baseRevision on top of revision ${existing.revision}.` };
   }
   if (input.baseRevision !== existing.revision) {
-    return { safe: false, reason: `Existing entity revision is ${existing.revision}; proposal targeted ${input.baseRevision}.` };
+    return { safe: true, reason: null, conflictNote: `Applied on top of revision ${existing.revision}; this edit targeted revision ${input.baseRevision}.` };
   }
-  return { safe: true, reason: null };
+  return { safe: true, reason: null, conflictNote: null };
 }
 function buildNextEntity(input) {
   const current = input.existing;
@@ -65884,7 +66256,7 @@ function commonsIndexDocuments(entity, now) {
   return documents;
 }
 function commonsIndexDocumentId(entityId, documentType, documentKey) {
-  return `commons-index-${(0, import_node_crypto38.createHash)("sha256").update(`${entityId}
+  return `commons-index-${(0, import_node_crypto39.createHash)("sha256").update(`${entityId}
 ${documentType}
 ${documentKey}`).digest("hex").slice(0, 32)}`;
 }
@@ -66219,6 +66591,44 @@ function sanitizeNeedsLinkFilters(filters) {
     offset: clampNumber(filters.offset, 0, 1e4, 0)
   };
 }
+async function publishedEntityIndexFor(titles) {
+  const index = /* @__PURE__ */ new Map();
+  const slugKeys = uniqueStrings(titles.map((title) => normalizeNeedsLinkTitle(title))).filter(Boolean);
+  const titleKeys = uniqueStrings(titles.map((title) => String(title || "").trim().toLowerCase())).filter(Boolean);
+  if (!slugKeys.length && !titleKeys.length) return index;
+  const result = await getDb().execute({
+    sql: `
+      SELECT id, slug, title
+      FROM commons_entities
+      WHERE status = 'published'
+        AND (slug IN (${slugKeys.map(() => "?").join(", ") || "NULL"})
+          OR lower(title) IN (${titleKeys.map(() => "?").join(", ") || "NULL"}))
+    `,
+    args: [...slugKeys, ...titleKeys]
+  });
+  for (const row of result.rows) {
+    const record = row;
+    const entry = { id: String(record.id), slug: String(record.slug), title: String(record.title) };
+    index.set(entry.slug, entry);
+    index.set(normalizeNeedsLinkTitle(entry.title), entry);
+  }
+  return index;
+}
+function unresolvedRelatedLinkTitles(entities) {
+  return entities.flatMap((entity) => entity.articleSections.relatedLinks.filter((link2) => relatedLinkNeedsPage(link2)).map((link2) => link2.title));
+}
+async function resolveRelatedLinksAgainstPublishedEntities(entities) {
+  const index = await publishedEntityIndexFor(unresolvedRelatedLinkTitles(entities));
+  if (!index.size) return;
+  for (const entity of entities) {
+    entity.articleSections.relatedLinks = entity.articleSections.relatedLinks.map((link2) => {
+      if (!relatedLinkNeedsPage(link2)) return link2;
+      const match = index.get(normalizeNeedsLinkTitle(link2.title));
+      if (!match || match.id === entity.id) return link2;
+      return { ...link2, slug: match.slug, entityId: match.id, needsLink: false };
+    });
+  }
+}
 function relatedLinkNeedsPage(link2) {
   if (link2.needsLink === true) return true;
   if (link2.entityId || link2.slug) return false;
@@ -66411,12 +66821,13 @@ function jsonLikeValue(value) {
 function escapeLike(value) {
   return value.replace(/[%_]/g, "");
 }
-var import_node_crypto38, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady, COMMONS_SCHEMA_OBJECTS, CommonsRepositoryError;
+var import_node_crypto39, COMMONS_SCHEMA_VERSION, DEFAULT_COMMONS_BASE_URL, DEFAULT_ENTITY_TYPE, COMMONS_ENTITY_PROFILES, schemaReady, COMMONS_SCHEMA_OBJECTS, SEARCH_CANDIDATE_LIMIT, CommonsRepositoryError;
 var init_commons_repository = __esm({
   "src/api/commons-repository.ts"() {
     "use strict";
-    import_node_crypto38 = require("crypto");
+    import_node_crypto39 = require("crypto");
     init_db();
+    init_commons_image_store();
     init_schema_presence();
     init_rates();
     init_commons_linksets();
@@ -66594,6 +67005,7 @@ var init_commons_repository = __esm({
       "commons_publications_updated",
       "commons_publication_editions_publication_published"
     ];
+    SEARCH_CANDIDATE_LIMIT = 500;
     CommonsRepositoryError = class extends Error {
       constructor(code, message, httpStatus = 400) {
         super(message);
@@ -66696,7 +67108,7 @@ async function claimCommonsPublication(input, user) {
   }
   const existingName = await getCommonsPublicationBySubdomain(subdomain);
   if (existingName) throw new CommonsPublicationError("publication_name_unavailable", "That publication name is already claimed.", 409);
-  const id = `tcpub_${(0, import_node_crypto39.randomUUID)()}`;
+  const id = `tcpub_${(0, import_node_crypto40.randomUUID)()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   try {
     await getDb().execute({
@@ -66748,7 +67160,7 @@ async function publishCommonsEditorial(input, user) {
   const canonicalUrl = editionPublicUrl(subdomain, editionSlug);
   const rendered = renderEditorialReadingRoom(editionInput);
   const html = addPublicMetadata(rendered.html, canonicalUrl, publication.title);
-  const editionId = `tced_${(0, import_node_crypto39.randomUUID)()}`;
+  const editionId = `tced_${(0, import_node_crypto40.randomUUID)()}`;
   const revision = (latest?.revision ?? 0) + 1;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await getDb().batch([
@@ -66772,7 +67184,7 @@ async function publishCommonsEditorial(input, user) {
         JSON.stringify(editionInput.articles),
         html,
         rendered.filename,
-        (0, import_node_crypto39.createHash)("sha256").update(html).digest("hex"),
+        (0, import_node_crypto40.createHash)("sha256").update(html).digest("hex"),
         rendered.articleCount,
         rendered.wordCount,
         Buffer.byteLength(html),
@@ -66958,11 +67370,11 @@ function addPublicMetadata(html, canonicalUrl, publicationTitle) {
     "</head>"
   ].join("\n"));
 }
-var import_node_crypto39, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
+var import_node_crypto40, PUBLICATION_ROOT_DOMAIN, RESERVED_SUBDOMAINS, CommonsPublicationError;
 var init_commons_publication_repository = __esm({
   "src/api/commons-publication-repository.ts"() {
     "use strict";
-    import_node_crypto39 = require("crypto");
+    import_node_crypto40 = require("crypto");
     init_db();
     init_commons_repository();
     init_render();
@@ -67063,7 +67475,7 @@ function publicationError(c, error) {
 function xmlEscape(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
-var import_hono31, import_zod52, commonsApp, auth2, SearchBodySchema, FeaturedImageSchema, MediaSchema, CitationSchema, RelatedLinkSchema, SubmitEntitySchema, PrepareEntitySchema, ValidateEntitySchema, SaveFilterSchema, NeedsLinkBodySchema, PreparePublicationSchema, ValidatePublicationSchema, ClaimPublicationSchema, PublishEditorialSchema;
+var import_hono31, import_zod52, commonsApp, auth2, SearchBodySchema, FeaturedImageSchema, MediaSchema, CitationSchema, RelatedLinkSchema, SubmitEntitySchema, PrepareEntitySchema, ValidateEntitySchema, SaveFilterSchema, NeedsLinkBodySchema, PreparePublicationSchema, ValidatePublicationSchema, ClaimPublicationSchema, PublishEditorialSchema, HostImageSchema;
 var init_commons_routes = __esm({
   "src/api/commons-routes.ts"() {
     "use strict";
@@ -67071,6 +67483,7 @@ var init_commons_routes = __esm({
     import_zod52 = require("zod");
     init_api_auth();
     init_commons_repository();
+    init_commons_image_store();
     init_commons_linksets();
     init_listing_write_billing();
     init_commons_publication_repository();
@@ -67324,6 +67737,28 @@ var init_commons_routes = __esm({
         return publicationError(c, error);
       }
     });
+    HostImageSchema = import_zod52.z.object({
+      sourceUrl: import_zod52.z.string().url().optional(),
+      imageBase64: import_zod52.z.string().min(16).optional(),
+      alt: import_zod52.z.string().max(500).optional(),
+      license: import_zod52.z.string().max(240).optional(),
+      attribution: import_zod52.z.string().max(500).optional()
+    }).strict().refine((body) => Boolean(body.sourceUrl || body.imageBase64), {
+      message: "Provide either sourceUrl or imageBase64."
+    });
+    commonsApp.post("/images", auth2, async (c) => {
+      const parsed = HostImageSchema.safeParse(await c.req.json().catch(() => ({})));
+      if (!parsed.success) return validationError(c, parsed.error);
+      try {
+        const hosted = await hostCommonsImage({ ...parsed.data, userId: Number(c.get("user").id) });
+        return c.json({ ok: true, data: hosted }, hosted.reused ? 200 : 201);
+      } catch (error) {
+        if (error instanceof CommonsImageError) {
+          return c.json({ ok: false, error: error.code, message: error.message }, error.httpStatus);
+        }
+        throw error;
+      }
+    });
     commonsApp.get("/entities", async (c) => {
       const result = await searchCommonsEntities(filtersFromQuery(c.req.query()));
       return c.json({ ok: true, data: result });
@@ -67373,7 +67808,15 @@ var init_commons_routes = __esm({
         if ("insufficient" in charged) return c.json(charged.insufficient, 402);
         billing = charged;
         const result = await submitCommonsEntity(parsed.data, c.get("user"));
-        return c.json({ ok: true, data: result, billing: publicListingWriteBilling(billing) }, result.applied ? 201 : 202);
+        if (!result.applied) {
+          await refundListingWrite(billing, "Transparent Commons proposal was held for review instead of published.").catch(() => null);
+          return c.json({
+            ok: true,
+            data: result,
+            billing: { ...publicListingWriteBilling(billing), charged: false, refunded: !billing.duplicate }
+          }, 202);
+        }
+        return c.json({ ok: true, data: result, billing: publicListingWriteBilling(billing) }, 201);
       } catch (error) {
         if (billing) await refundListingWrite(billing, "Transparent Commons write failed before persistence.").catch(() => null);
         if (error instanceof CommonsRepositoryError) {
@@ -68117,7 +68560,7 @@ async function migrateAnalytics() {
 }
 function normalizeSlug2(value) {
   const slug4 = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
-  return slug4 || `site-${(0, import_node_crypto40.randomBytes)(4).toString("hex")}`;
+  return slug4 || `site-${(0, import_node_crypto41.randomBytes)(4).toString("hex")}`;
 }
 function normalizeObservedHostname(origin) {
   if (!origin || origin === "null") return null;
@@ -68130,7 +68573,7 @@ function normalizeObservedHostname(origin) {
   }
 }
 function publicPixelId() {
-  return `px_${(0, import_node_crypto40.randomBytes)(18).toString("base64url")}`;
+  return `px_${(0, import_node_crypto41.randomBytes)(18).toString("base64url")}`;
 }
 function mapRows(rows) {
   return rows;
@@ -68162,7 +68605,7 @@ async function requireEditor(client2, siteId, userId) {
 async function createAnalyticsSite(input) {
   const db = getAnalyticsPool();
   const client2 = await db.connect();
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   const baseSlug = normalizeSlug2(input.slug || input.name);
   try {
     await client2.query("BEGIN");
@@ -68178,7 +68621,7 @@ async function createAnalyticsSite(input) {
       } catch (error) {
         const code = error.code;
         if (code !== "23505" || attempt === 2) throw error;
-        slug4 = `${baseSlug}-${(0, import_node_crypto40.randomBytes)(2).toString("hex")}`;
+        slug4 = `${baseSlug}-${(0, import_node_crypto41.randomBytes)(2).toString("hex")}`;
       }
     }
     await client2.query(
@@ -68393,7 +68836,7 @@ async function createAnalyticsPixel(input) {
      VALUES ($1, $2, $3, $4, $5)
      RETURNING id, site_id, public_id, name, environment, status, created_at::text, NULL::text AS last_event_at`,
     [
-      (0, import_node_crypto40.randomUUID)(),
+      (0, import_node_crypto41.randomUUID)(),
       input.siteId,
       publicPixelId(),
       input.name.trim(),
@@ -68470,7 +68913,7 @@ async function setAnalyticsPixelDomainState(input) {
      SELECT $1, p.id, $4, $5 FROM analytics_pixels p WHERE p.id = $2 AND p.site_id = $3
      ON CONFLICT(pixel_id, hostname) DO UPDATE SET state = EXCLUDED.state, updated_at = now()
      RETURNING id`,
-    [(0, import_node_crypto40.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
+    [(0, import_node_crypto41.randomUUID)(), input.pixelId, input.siteId, hostname, input.state]
   );
   if (!result.rowCount)
     throw new AnalyticsRepositoryError(
@@ -68520,7 +68963,7 @@ function sanitizeAnalyticsProperties(value) {
 }
 async function ingestAnalyticsEvents(input) {
   const db = getAnalyticsPool();
-  const requestId = `air_${(0, import_node_crypto40.randomUUID)()}`;
+  const requestId = `air_${(0, import_node_crypto41.randomUUID)()}`;
   const hostname = normalizeObservedHostname(input.origin);
   const pixelResult = await db.query(
     `SELECT p.id, p.site_id, p.status,
@@ -68541,7 +68984,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         requestId,
         pixel?.site_id ?? null,
         pixel?.id ?? null,
@@ -68566,7 +69009,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -68591,7 +69034,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6::jsonb)`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -68615,7 +69058,7 @@ async function ingestAnalyticsEvents(input) {
      ON CONFLICT(pixel_id, hostname) DO UPDATE
        SET last_seen_at = now(), updated_at = now()
      RETURNING state`,
-    [(0, import_node_crypto40.randomUUID)(), pixel.id, hostname]
+    [(0, import_node_crypto41.randomUUID)(), pixel.id, hostname]
   );
   if (domainResult.rows[0]?.state !== "approved") {
     await db.query(
@@ -68629,7 +69072,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -68679,7 +69122,7 @@ async function ingestAnalyticsEvents(input) {
              $23, $24, $25, $26, $27, $28, $29, $30, $31, $32, $33
            ) ON CONFLICT(site_id, event_id) DO NOTHING`,
           [
-            (0, import_node_crypto40.randomUUID)(),
+            (0, import_node_crypto41.randomUUID)(),
             event2.eventId,
             pixel.site_id,
             pixel.id,
@@ -68737,7 +69180,7 @@ async function ingestAnalyticsEvents(input) {
          id, request_id, site_id, pixel_id, hostname, accepted_count, rejected_count, reason_codes
        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -68769,7 +69212,7 @@ function normalizeGeographyCode(value, max) {
   return normalized && /^[A-Z0-9-]+$/.test(normalized) ? normalized.slice(0, max) : null;
 }
 function pageFingerprint(scope, siteId, filters) {
-  return (0, import_node_crypto40.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
+  return (0, import_node_crypto41.createHash)("sha256").update(JSON.stringify({ scope, siteId, filters })).digest("base64url").slice(0, 18);
 }
 function decodePageOffset(cursor, fingerprint) {
   if (!cursor) return 0;
@@ -68819,7 +69262,7 @@ async function createAnalyticsConversion(input) {
         404
       );
   }
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   const resolvedPerson = input.sessionId ? await db.query(
     `SELECT e.person_id FROM analytics_identity_nodes n JOIN analytics_identity_edges e ON e.identity_node_id = n.id
         WHERE n.site_id = $1 AND n.kind = 'session_id' AND n.value_hmac = $2 ORDER BY e.confidence DESC LIMIT 1`,
@@ -69568,7 +70011,7 @@ async function createAnalyticsCampaignLink(input) {
         404
       );
   }
-  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto40.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
+  const shortCode = (input.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "-") || (0, import_node_crypto41.randomBytes)(5).toString("base64url").toLowerCase()).slice(0, 48);
   try {
     const result = await db.query(
       `INSERT INTO analytics_campaign_links(
@@ -69577,7 +70020,7 @@ async function createAnalyticsCampaignLink(input) {
        ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
        RETURNING *, 0::int AS click_count`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         input.siteId,
         input.pixelId ?? null,
         input.name.trim(),
@@ -69648,7 +70091,7 @@ async function resolveAnalyticsCampaignLink(shortCode, referrer) {
   if (!row) return null;
   await db.query(
     `INSERT INTO analytics_campaign_clicks(id, link_id, referrer) VALUES ($1, $2, $3)`,
-    [(0, import_node_crypto40.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
+    [(0, import_node_crypto41.randomUUID)(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
   );
   return buildTaggedCampaignUrl(row);
 }
@@ -69666,14 +70109,14 @@ async function createAnalyticsForm(input) {
       404
     );
   const baseSlug = normalizeSlug2(input.name);
-  const slug4 = `${baseSlug}-${(0, import_node_crypto40.randomBytes)(3).toString("hex")}`;
-  const publicId = `form_${(0, import_node_crypto40.randomBytes)(18).toString("base64url")}`;
+  const slug4 = `${baseSlug}-${(0, import_node_crypto41.randomBytes)(3).toString("hex")}`;
+  const publicId = `form_${(0, import_node_crypto41.randomBytes)(18).toString("base64url")}`;
   const result = await db.query(
     `INSERT INTO analytics_forms(id, public_id, site_id, pixel_id, name, slug, fields, brand, submit_label, success_message, redirect_url, consent_text, status, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,$10,$11,$12,$13,$14)
      RETURNING *, 0::int AS submission_count`,
     [
-      (0, import_node_crypto40.randomUUID)(),
+      (0, import_node_crypto41.randomUUID)(),
       publicId,
       input.siteId,
       input.pixelId,
@@ -69718,7 +70161,7 @@ async function getPublicAnalyticsForm(publicId) {
   return result.rows[0] ?? null;
 }
 async function recordAnalyticsFormSubmission(input) {
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_submissions(id, form_id, site_id, pixel_id, visitor_id, session_id, crm_person_ref, source, medium, campaign, crm_delivery_status, click_ids)
      VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12::jsonb)`,
@@ -69749,7 +70192,7 @@ function sanitizeClickIds(value) {
   return output;
 }
 function identityHmac(kind, value) {
-  return (0, import_node_crypto40.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
+  return (0, import_node_crypto41.createHmac)("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
 }
 async function linkAnalyticsFormIdentity(input) {
   const client2 = await getAnalyticsPool().connect();
@@ -69758,7 +70201,7 @@ async function linkAnalyticsFormIdentity(input) {
     const person = await client2.query(
       `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
        ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at = now() RETURNING id`,
-      [(0, import_node_crypto40.randomUUID)(), input.siteId, input.crmPersonRef]
+      [(0, import_node_crypto41.randomUUID)(), input.siteId, input.crmPersonRef]
     );
     const personId = person.rows[0].id;
     const signals = [];
@@ -69805,7 +70248,7 @@ async function linkAnalyticsFormIdentity(input) {
         `INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac) VALUES ($1,$2,$3,$4)
          ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now() RETURNING id`,
         [
-          (0, import_node_crypto40.randomUUID)(),
+          (0, import_node_crypto41.randomUUID)(),
           input.siteId,
           signal.kind,
           identityHmac(signal.kind, signal.value)
@@ -69816,7 +70259,7 @@ async function linkAnalyticsFormIdentity(input) {
          VALUES ($1,$2,$3,$4,$5,$6)
          ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence)`,
         [
-          (0, import_node_crypto40.randomUUID)(),
+          (0, import_node_crypto41.randomUUID)(),
           input.siteId,
           personId,
           node.rows[0].id,
@@ -69914,7 +70357,7 @@ async function createAnalyticsCrmImport(input) {
   const db = getAnalyticsPool();
   await requireEditor(db, input.siteId, input.userId);
   const client2 = await db.connect();
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   try {
     await client2.query("BEGIN");
     await client2.query(
@@ -69934,7 +70377,7 @@ async function createAnalyticsCrmImport(input) {
       await client2.query(
         `INSERT INTO analytics_crm_import_rows(id, import_id, crm_person_ref, payload_ciphertext)
          VALUES ($1,$2,$3,$4) ON CONFLICT(import_id, crm_person_ref) DO NOTHING`,
-        [(0, import_node_crypto40.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
+        [(0, import_node_crypto41.randomUUID)(), id, row.crmPersonRef, row.payloadCiphertext]
       );
     }
     await client2.query("COMMIT");
@@ -69973,7 +70416,7 @@ async function createAnalyticsActivationDestination(input) {
     `INSERT INTO analytics_activation_destinations(id, site_id, platform, name, connection_ref, external_dataset_id, event_mapping, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8) RETURNING *`,
     [
-      (0, import_node_crypto40.randomUUID)(),
+      (0, import_node_crypto41.randomUUID)(),
       input.siteId,
       input.platform,
       input.name.trim(),
@@ -70025,7 +70468,7 @@ async function queueAnalyticsActivation(input) {
       `INSERT INTO analytics_activation_jobs(id, destination_id, conversion_id, person_id, payload_ciphertext)
        VALUES ($1,$2,$3,$4,$5) ON CONFLICT(destination_id, conversion_id) DO NOTHING`,
       [
-        (0, import_node_crypto40.randomUUID)(),
+        (0, import_node_crypto41.randomUUID)(),
         destination.id,
         input.conversionId,
         input.personId ?? null,
@@ -70037,7 +70480,7 @@ async function queueAnalyticsActivation(input) {
   return queued;
 }
 async function queueAnalyticsFormDelivery(input) {
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_delivery_jobs(id, submission_id, owner_user_id, payload_ciphertext, last_error_code)
      VALUES ($1,$2,$3,$4,$5)`,
@@ -70164,7 +70607,7 @@ async function analyticsHealth(siteId, userId) {
 }
 async function refreshAnalyticsDailyRollups(input) {
   const db = getAnalyticsPool();
-  const runId = (0, import_node_crypto40.randomUUID)();
+  const runId = (0, import_node_crypto41.randomUUID)();
   await db.query(
     `INSERT INTO analytics_rollup_runs(id, window_start, window_end, status) VALUES ($1, $2, $3, 'running')`,
     [runId, input.start, input.end]
@@ -70361,7 +70804,7 @@ async function createAnalyticsExport(input) {
       `Generated ${(/* @__PURE__ */ new Date()).toISOString()} from the governed ${input.report} report contract.`
     ].join("\n");
   }
-  const id = (0, import_node_crypto40.randomUUID)();
+  const id = (0, import_node_crypto41.randomUUID)();
   const inserted = await getAnalyticsPool().query(
     `INSERT INTO analytics_exports(id, site_id, requested_by_user_id, idempotency_key, report, format, filters, content)
      VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8)
@@ -70394,11 +70837,11 @@ async function createAnalyticsExport(input) {
   }
   return describeArtifact(replay.rows[0]);
 }
-var import_node_crypto40, import_pg, AnalyticsRepositoryError, pool2, MAX_ENGAGED_MS, ENGAGED_SESSION_MS, blockedPropertyName, inferredFamilySql, ANALYTICS_CONTENT_SORTS, clickIdKeys;
+var import_node_crypto41, import_pg, AnalyticsRepositoryError, pool2, MAX_ENGAGED_MS, ENGAGED_SESSION_MS, blockedPropertyName, inferredFamilySql, ANALYTICS_CONTENT_SORTS, clickIdKeys;
 var init_analytics_repository = __esm({
   "src/api/analytics-repository.ts"() {
     "use strict";
-    import_node_crypto40 = require("crypto");
+    import_node_crypto41 = require("crypto");
     import_pg = require("pg");
     init_session();
     init_analytics_attribution();
@@ -70637,8 +71080,8 @@ function dashboardCallbackUrl() {
 }
 async function createThorbitConnectUrl(userId) {
   if (!bridgeConfigured()) throw new Error("Thorbit X-Ray account bridge is not configured");
-  const state = (0, import_node_crypto41.randomBytes)(32).toString("base64url");
-  const stateHash = (0, import_node_crypto41.createHash)("sha256").update(state).digest("hex");
+  const state = (0, import_node_crypto42.randomBytes)(32).toString("base64url");
+  const stateHash = (0, import_node_crypto42.createHash)("sha256").update(state).digest("hex");
   await getAnalyticsPool().query(
     `INSERT INTO analytics_thorbit_connect_states(state_hash,user_id,expires_at)
      VALUES ($1,$2,now()+interval '10 minutes')
@@ -70653,9 +71096,9 @@ async function createThorbitConnectUrl(userId) {
 function verifyThorbitAssertion(token6) {
   const [encoded, signature] = token6.split(".");
   if (!encoded || !signature || !bridgeConfigured()) throw new Error("Invalid Thorbit assertion");
-  const expected = (0, import_node_crypto41.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
+  const expected = (0, import_node_crypto42.createHmac)("sha256", bridgeSecret()).update(encoded).digest();
   const actual = Buffer.from(signature, "base64url");
-  if (actual.length !== expected.length || !(0, import_node_crypto41.timingSafeEqual)(actual, expected)) {
+  if (actual.length !== expected.length || !(0, import_node_crypto42.timingSafeEqual)(actual, expected)) {
     throw new Error("Invalid Thorbit assertion signature");
   }
   const parsed = AssertionSchema.safeParse(
@@ -70667,7 +71110,7 @@ function verifyThorbitAssertion(token6) {
   return parsed.data.entitlement;
 }
 async function consumeThorbitConnectCallback(input) {
-  const stateHash = (0, import_node_crypto41.createHash)("sha256").update(input.state).digest("hex");
+  const stateHash = (0, import_node_crypto42.createHash)("sha256").update(input.state).digest("hex");
   const client2 = await getAnalyticsPool().connect();
   try {
     await client2.query("BEGIN");
@@ -70707,11 +71150,11 @@ async function disconnectAnalyticsEntitlement(userId) {
     [userId]
   );
 }
-var import_node_crypto41, import_zod53, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
+var import_node_crypto42, import_zod53, THORBIT_PRODUCT_URL, REFRESH_INTERVAL_MS, ELIGIBLE_GRACE_MS, TRIAL_LENGTH_MS, ThorbitEntitlementSchema, AssertionSchema;
 var init_analytics_entitlement = __esm({
   "src/api/analytics-entitlement.ts"() {
     "use strict";
-    import_node_crypto41 = require("crypto");
+    import_node_crypto42 = require("crypto");
     import_zod53 = require("zod");
     init_analytics_repository();
     THORBIT_PRODUCT_URL = "https://thorbit.ai";
@@ -70851,14 +71294,14 @@ function renderPublicForm(form, placementUrl) {
   const brand = form.brand;
   return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><style>:root{font-family:ui-sans-serif,system-ui;color:${escapeHtml7(brand.textColor)};background:${escapeHtml7(brand.backgroundColor)}}*{box-sizing:border-box}body{margin:0;padding:18px}form{display:grid;gap:14px}label{display:grid;gap:6px;font-size:13px;font-weight:650}.check{grid-template-columns:auto 1fr;align-items:center}.check span{grid-column:2}.check input{grid-column:1;grid-row:1}input,textarea,select{width:100%;min-height:44px;padding:10px 12px;border:1px solid #ccd3df;border-radius:${brand.radius}px;background:white;color:inherit;font:inherit}textarea{min-height:110px;resize:vertical}button{min-height:46px;border:0;border-radius:${brand.radius}px;color:white;background:${escapeHtml7(brand.primaryColor)};font:inherit;font-weight:750;cursor:pointer}.consent{margin:0;color:#667085;font-size:11px;line-height:1.45}.notice{display:none;padding:12px;border-radius:${brand.radius}px;background:#edf8f2;color:#17613c}.hp{position:absolute!important;left:-9999px!important}</style></head><body><form id="mcp-form">${fields}<label class="hp">Website<input name="website" autocomplete="off" tabindex="-1"></label>${form.consent_text ? `<p class="consent">${escapeHtml7(form.consent_text)}</p>` : ""}<button>${escapeHtml7(form.submit_label)}</button><div class="notice" role="status"></div></form><script>(()=>{const form=document.querySelector('#mcp-form'),notice=form.querySelector('.notice'),q=new URLSearchParams(location.search);form.addEventListener('submit',async event=>{event.preventDefault();const button=form.querySelector('button');button.disabled=true;const raw=Object.fromEntries(new FormData(form).entries()),website=String(raw.website||''),clickIds={};delete raw.website;for(const k of ['fbclid','gclid','gbraid','wbraid','ttclid','rdt_cid','msclkid']){const v=q.get(k);if(v)clickIds[k]=v}try{const response=await fetch('/analytics/forms/${escapeHtml7(form.public_id)}/submissions',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({data:raw,website,placementUrl:${JSON.stringify(placementUrl)},visitorId:q.get('visitor')||undefined,sessionId:q.get('session')||undefined,source:q.get('source')||undefined,medium:q.get('medium')||undefined,campaign:q.get('campaign')||undefined,clickIds})});if(!response.ok)throw new Error('submit');notice.textContent=${JSON.stringify(form.success_message)};notice.style.display='block';form.reset();${form.redirect_url ? `setTimeout(()=>{top.location.href=${JSON.stringify(form.redirect_url)}},700);` : ""}}catch{notice.textContent='Your response could not be submitted. Please try again.';notice.style.display='block'}finally{button.disabled=false}})})()</script></body></html>`;
 }
-var import_hono32, import_factory6, import_zod54, import_node_crypto42, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
+var import_hono32, import_factory6, import_zod54, import_node_crypto43, import_papaparse4, analyticsApp, auth3, entitlementGuard, ThorbitApiKeySchema, ThorbitCallbackSchema, SiteInputSchema, PixelInputSchema, PixelUpdateSchema, EventSchema, IngestionSchema, ConversionSchema, ExportSchema2, CampaignLinkSchema, FormFieldSchema, FormInputSchema, FormSubmissionSchema, CrmImportSchema, ActivationDestinationSchema, BusinessModelSchema, AdSpendSchema;
 var init_analytics_routes = __esm({
   "src/api/analytics-routes.ts"() {
     "use strict";
     import_hono32 = require("hono");
     import_factory6 = require("hono/factory");
     import_zod54 = require("zod");
-    import_node_crypto42 = require("crypto");
+    import_node_crypto43 = require("crypto");
     import_papaparse4 = __toESM(require("papaparse"), 1);
     init_api_auth();
     init_db();
@@ -71189,7 +71632,7 @@ var init_analytics_routes = __esm({
       const lastName = typeof data.last_name === "string" ? data.last_name.trim() : "";
       const fullName = [firstName, lastName].filter(Boolean).join(" ") || (typeof data.name === "string" ? data.name.trim() : "") || email || "Website lead";
       const identitySeed = email || `${fullName}:${Date.now()}`;
-      const suffix2 = (0, import_node_crypto42.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
+      const suffix2 = (0, import_node_crypto43.createHash)("sha256").update(identitySeed).digest("hex").slice(0, 12);
       const path6 = `Leads/person-${suffix2}`;
       const { key: memoryKey, error: memoryKeyError } = await getOrCreateUserMemoryKey(user);
       const existing = memoryKey ? await memoryCall("getTool", { vault: "People", path: path6 }, memoryKey) : { ok: false, error: memoryKeyError || "memory_credential_unavailable" };
@@ -71288,9 +71731,9 @@ Submitted the published form.
         occurredAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       const match = {
-        ...email ? { emailSha256: (0, import_node_crypto42.createHash)("sha256").update(email).digest("hex") } : {},
+        ...email ? { emailSha256: (0, import_node_crypto43.createHash)("sha256").update(email).digest("hex") } : {},
         ...phone ? {
-          phoneSha256: (0, import_node_crypto42.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
+          phoneSha256: (0, import_node_crypto43.createHash)("sha256").update(phone.replace(/\D/g, "")).digest("hex")
         } : {}
       };
       const activationQueued = await queueAnalyticsActivation({
@@ -71718,7 +72161,7 @@ Submitted the published form.
           rejectedCount += 1;
           continue;
         }
-        const digest2 = (0, import_node_crypto42.createHash)("sha256").update(
+        const digest2 = (0, import_node_crypto43.createHash)("sha256").update(
           `${parsed.data.sourceSystem}:${externalId || email || phone || `${fullName}:${index}`}`
         ).digest("hex").slice(0, 16);
         const path6 = `Leads/person-${digest2}`;
@@ -72176,13 +72619,13 @@ var init_analytics_delivery = __esm({
 
 // src/api/scheduled-artifact-owner.ts
 function scheduledArtifactOwnerIdForApiKey(apiKey) {
-  return (0, import_node_crypto43.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
+  return (0, import_node_crypto44.createHash)("sha256").update(apiKey).digest("hex").slice(0, 24);
 }
-var import_node_crypto43;
+var import_node_crypto44;
 var init_scheduled_artifact_owner = __esm({
   "src/api/scheduled-artifact-owner.ts"() {
     "use strict";
-    import_node_crypto43 = require("crypto");
+    import_node_crypto44 = require("crypto");
   }
 });
 
@@ -72239,7 +72682,7 @@ async function ensureScheduledRunViewLinksSchema() {
   schemaReady2 = true;
 }
 function tokenHash2(token6) {
-  return (0, import_node_crypto44.createHash)("sha256").update(token6).digest("hex");
+  return (0, import_node_crypto45.createHash)("sha256").update(token6).digest("hex");
 }
 function mapRow(row) {
   return {
@@ -72259,9 +72702,9 @@ function mapRow(row) {
 async function createScheduledRunViewLink(input) {
   await ensureScheduledRunViewLinksSchema();
   const now = input.now ?? /* @__PURE__ */ new Date();
-  const token6 = (0, import_node_crypto44.randomBytes)(32).toString("base64url");
+  const token6 = (0, import_node_crypto45.randomBytes)(32).toString("base64url");
   const record = {
-    shareId: (0, import_node_crypto44.randomUUID)(),
+    shareId: (0, import_node_crypto45.randomUUID)(),
     ownerId: input.ownerId,
     runId: input.runId,
     artifactId: input.artifactId,
@@ -72324,11 +72767,11 @@ async function revokeScheduledRunViewLink(ownerId, runId, shareId, now = /* @__P
   });
   return result.rowsAffected > 0;
 }
-var import_node_crypto44, schemaReady2;
+var import_node_crypto45, schemaReady2;
 var init_scheduled_run_view_links = __esm({
   "src/api/scheduled-run-view-links.ts"() {
     "use strict";
-    import_node_crypto44 = require("crypto");
+    import_node_crypto45 = require("crypto");
     init_db();
     schemaReady2 = false;
   }
@@ -72394,15 +72837,15 @@ ${section(flags.finalCta && Boolean(finalCta), `<section class="section cta" id=
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: (0, import_node_crypto45.createHash)("sha256").update(html).digest("hex"),
+    sha256: (0, import_node_crypto46.createHash)("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
-var import_node_crypto45;
+var import_node_crypto46;
 var init_render2 = __esm({
   "src/personal-authority/render.ts"() {
     "use strict";
-    import_node_crypto45 = require("crypto");
+    import_node_crypto46 = require("crypto");
   }
 });
 
@@ -72505,15 +72948,15 @@ ${section2(flags.finalCta && Boolean(finalCta), `<section class="section cta" id
     html,
     filename: `${input.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "personal-authority"}.html`,
     bytes,
-    sha256: (0, import_node_crypto46.createHash)("sha256").update(html).digest("hex"),
+    sha256: (0, import_node_crypto47.createHash)("sha256").update(html).digest("hex"),
     generatedAt: generatedAtIso
   };
 }
-var import_node_crypto46, FONT_STACKS;
+var import_node_crypto47, FONT_STACKS;
 var init_render_v2 = __esm({
   "src/personal-authority/render-v2.ts"() {
     "use strict";
-    import_node_crypto46 = require("crypto");
+    import_node_crypto47 = require("crypto");
     init_contracts();
     FONT_STACKS = Object.freeze({
       "editorial-serif": "Iowan Old Style, Baskerville, Times New Roman, serif",
@@ -72629,15 +73072,15 @@ body{overflow-x:hidden}.lead-story__body,.lead-support__item,.story-card__body{m
 @media(max-width:620px){.desk-section__grid--panorama,.desk-section__grid--mosaic,.desk-section__grid--tiles{grid-template-columns:1fr}.story-card--panorama{display:block}.story-card--panorama h3,.story-card--mosaic-lead h3{font-size:34px}.story-card--mosaic-lead{grid-column:auto;grid-row:auto}.desk-section__grid--tiles>.story-card:nth-child(3n+2){margin-top:0}}
 </style></head><body data-theme="${escapeHtml10(config.theme)}" id="top" data-scheduled-renderer="newsroom_publisher_v1">${ticker}${masthead}${navigation}<main>${leadGrid}${latest}${sections}${newsletter}${pressRoom}${trustCenter}</main>${trustFooter}</body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = (0, import_node_crypto47.createHash)("sha256").update(html).digest("hex");
+  const sha2563 = (0, import_node_crypto48.createHash)("sha256").update(html).digest("hex");
   const filename = `${brand.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "newsroom"}-news-site.html`;
   return { html, filename, bytes, sha256: sha2563, generatedAt: generatedAtIso };
 }
-var import_node_crypto47;
+var import_node_crypto48;
 var init_render3 = __esm({
   "src/newsroom-publisher/render.ts"() {
     "use strict";
-    import_node_crypto47 = require("crypto");
+    import_node_crypto48 = require("crypto");
   }
 });
 
@@ -72729,7 +73172,7 @@ function renderBlogArticleV1(input, config, generatedAt) {
 :root{--ink:#10213d;--ink2:#1c355a;--blue:#2563eb;--blue2:#1749b6;--mint:#45d5aa;--paper:#f7f5f0;--line:#dce4ef;--card:#fff;--body:#475569;--serif:Iowan Old Style,Palatino Linotype,Palatino,Georgia,serif;--sans:Inter,Avenir Next,ui-sans-serif,system-ui,sans-serif}body[data-theme="slate"]{--ink:#1e293b;--ink2:#334155;--blue:#475569;--blue2:#1e293b;--mint:#94a3b8;--paper:#f8fafc}body[data-theme="forest"]{--ink:#12352e;--ink2:#23584c;--blue:#147d64;--blue2:#0c5b48;--mint:#79d8bd;--paper:#f4f8f3}*{box-sizing:border-box}html{scroll-behavior:smooth;background:var(--paper)}body{margin:0;color:#252a33;background:var(--paper);font-family:var(--sans);line-height:1.6}a{color:inherit}button{font:inherit}button:focus-visible,a:focus-visible{outline:3px solid var(--mint);outline-offset:3px}.progress{position:fixed;z-index:50;top:0;left:0;height:4px;width:0;background:var(--mint)}.hero{position:relative;overflow:hidden;color:#fff;background:var(--ink)}.hero:after{position:absolute;right:-110px;top:-150px;width:420px;height:420px;border:1px solid #ffffff1a;border-radius:50%;content:""}.hero-inner{position:relative;z-index:1;max-width:1240px;margin:auto;padding:58px 42px 126px}.breadcrumb{display:flex;gap:8px;margin-bottom:34px;color:#dbeafecc;font-size:14px}.eyebrow{display:block;color:var(--blue);font-size:12px;font-weight:800;letter-spacing:.16em;text-transform:uppercase}.hero .eyebrow{color:var(--mint)}h1,h2,h3,p{margin-top:0}.hero h1{max-width:1000px;margin:14px 0 24px;font:700 clamp(44px,6vw,78px)/.98 var(--serif);letter-spacing:-.035em}.hero .dek{max-width:780px;color:#dbeafe;font-size:20px}.contributors{margin-top:30px;color:#eff6ff;font-size:14px}.contributors a{font-weight:800}.meta{display:flex;flex-wrap:wrap;gap:12px;margin-top:6px;color:#dbeafecc}.layout{position:relative;z-index:2;display:grid;grid-template-columns:minmax(0,760px) 290px;gap:64px;max-width:1240px;margin:-78px auto 0;padding:0 42px 80px}.main{min-width:0}.takeaways{padding:38px 44px;border-radius:24px;background:#fff;box-shadow:0 24px 70px #10213d24}.takeaways h2{margin:5px 0 20px;font:700 32px/1.1 var(--serif);color:var(--ink)}.takeaways ul{display:grid;gap:16px;margin:0;padding:0;list-style:none}.takeaways li{position:relative;padding-left:26px;color:var(--body);font-size:17px}.takeaways li:before{position:absolute;left:2px;top:.7em;width:8px;height:8px;border-radius:50%;background:var(--blue);content:""}.intro{padding:40px 0 4px}.intro p,.article-section>p{margin-bottom:22px;color:var(--body);font:400 18px/1.75 var(--sans)}.article-section{scroll-margin-top:28px;padding-top:45px}.article-section h2,.faq h2{margin:6px 0 20px;color:var(--ink);font:700 38px/1.08 var(--serif);letter-spacing:-.02em}.article-section ul{display:grid;gap:10px;margin:22px 0;padding-left:24px;color:var(--body);font-size:17px}.article-section li::marker{color:var(--blue)}.callout{margin:34px 0;padding:24px 28px;border-left:4px solid var(--blue);border-radius:0 16px 16px 0;background:#fff}.callout span{color:var(--blue);font-size:11px;font-weight:800;letter-spacing:.13em;text-transform:uppercase}.callout h3{margin:5px 0 8px;color:var(--ink);font:700 24px/1.15 var(--serif)}.callout p{margin:0;color:var(--body)}.rail{padding-top:0}.sidebar-media{overflow:hidden;margin:0 0 18px;border:1px solid #dbeafe;border-radius:16px;background:#fff}.sidebar-media img,.sidebar-media svg{display:block;width:100%;aspect-ratio:16/9;object-fit:cover}.sidebar-media figcaption{padding:10px 13px;color:#64748b;font-size:11px}.disclosure{margin-bottom:28px;border-top:1px solid #dbeafe;border-bottom:1px solid #dbeafe}.disclosure button{display:flex;width:100%;align-items:center;justify-content:space-between;gap:14px;padding:15px 0;border:0;color:#64748b;background:transparent;text-align:left;font-size:12px;cursor:pointer}.disclosure button b{color:var(--blue);font-size:18px;transition:transform .2s}.disclosure button[aria-expanded="true"] b{transform:rotate(180deg)}.disclosure p{padding:0 0 16px;margin:0;color:#64748b;font-size:12px}.toc{position:sticky;top:30px;padding:22px;border:1px solid var(--line);border-radius:16px;background:#fff;box-shadow:0 2px 5px #10213d12}.toc header{display:flex;align-items:center;justify-content:space-between}.toc header strong{color:var(--ink);font:700 21px/1 var(--serif)}.toc header button{width:34px;height:34px;border:0;border-radius:50%;color:var(--blue);background:transparent;cursor:pointer}.toc nav{display:grid;margin-top:14px}.toc nav a{display:flex;align-items:flex-start;gap:11px;padding:8px 0;color:#64748b;text-decoration:none;font-size:13px;line-height:1.35}.toc nav i{width:8px;height:8px;margin-top:5px;border:2px solid #bfdbfe;border-radius:50%}.toc nav a[aria-current="location"]{color:var(--ink);font-weight:800}.toc nav a[aria-current="location"] i{border-color:var(--blue);background:var(--blue)}.back-top{width:100%;margin-top:18px;padding:16px 0 0;border:0;border-top:1px solid var(--line);color:var(--blue);background:transparent;text-align:right;font-size:13px;font-weight:800;cursor:pointer}.faq{scroll-margin-top:28px;padding-top:64px}.faq>div{border-top:1px solid var(--line);border-bottom:1px solid var(--line)}.faq article+article{border-top:1px solid var(--line)}.faq h3{margin:0}.faq h3 button{display:flex;width:100%;align-items:center;justify-content:space-between;gap:18px;padding:19px 0;border:0;color:var(--ink);background:transparent;text-align:left;font-weight:800;cursor:pointer}.faq h3 b{color:var(--blue);font-size:22px}.faq article>p{padding:0 0 20px;margin:0;color:var(--body);font-size:16px}.author-card{margin-top:64px;padding:32px 36px;border-radius:18px;background:#fff}.article-actions{display:flex;flex-wrap:wrap;justify-content:space-between;gap:14px}.article-actions button{display:inline-flex;min-height:46px;align-items:center;justify-content:center;gap:8px;padding:8px 18px;border:2px solid var(--blue);border-radius:999px;color:var(--ink);background:#fff;font-weight:800;cursor:pointer}.article-actions button:hover{color:#fff;background:var(--blue)}.action-status{min-height:20px;margin:8px 0 0;color:var(--blue);text-align:right;font-size:13px;font-weight:700}.author-grid{display:grid;grid-template-columns:auto 1fr auto;gap:22px;align-items:center;margin-top:24px}.author-portrait{width:88px;height:88px;border-radius:50%;object-fit:cover}.author-initials{display:grid;place-items:center;color:var(--ink);background:#fecdd3;font-size:22px;font-weight:900}.author-grid span{color:#64748b;font-size:13px}.author-grid h2{margin:2px 0;color:var(--ink);font:700 27px/1 var(--serif)}.author-grid h2 a{text-decoration:none}.author-grid p{margin:8px 0;color:#64748b;font-size:14px}.author-grid nav{display:flex;flex-wrap:wrap;gap:14px}.author-grid nav a{color:#64748b;font-size:12px}.author-more{display:inline-flex;min-height:48px;align-items:center;justify-content:center;padding:10px 24px;border:2px solid var(--blue);color:var(--blue);text-align:center;text-decoration:none;font-size:13px;font-weight:800}.author-bio{margin:24px 0 0!important;padding-top:20px;border-top:1px solid var(--line);color:var(--body);font-size:16px}dialog{width:min(720px,calc(100% - 30px));max-height:calc(100dvh - 30px);padding:0;border:0;border-radius:18px;color:var(--ink);background:#fff;box-shadow:0 24px 70px #10213d38}dialog::backdrop{background:#0f172a7a;backdrop-filter:blur(2px)}dialog>div{position:relative;padding:30px}dialog h2{margin:0 50px 2px 0;font:700 30px/1.1 var(--serif)}dialog>div>p{color:#64748b}.dialog-close{position:absolute;top:13px;right:13px;width:44px;height:44px;border:0;border-radius:50%;color:var(--blue);background:transparent;font-size:29px;cursor:pointer}dialog section{border-top:1px solid var(--line)}dialog section button{display:block;width:100%;padding:17px 5px;border:0;border-bottom:1px solid var(--line);color:var(--body);background:#fff;text-align:left;line-height:1.65;cursor:pointer}.citation-status{min-height:22px;margin:14px 0 0!important;color:var(--blue)!important;font-size:13px;font-weight:800}.generated{max-width:1156px;margin:-52px auto 50px;padding:0 42px;color:#94a3b8;font-size:11px}@media(max-width:900px){.layout{display:block}.rail{display:none}.hero-inner{padding-bottom:116px}}@media(max-width:620px){.hero-inner{padding:36px 20px 104px}.hero h1{font-size:46px}.hero .dek{font-size:17px}.layout{margin-top:-70px;padding:0 16px 54px}.takeaways{padding:28px 24px}.article-section h2,.faq h2{font-size:32px}.author-card{padding:24px}.article-actions{display:grid;justify-content:start}.author-grid{grid-template-columns:1fr;gap:12px}.author-more{width:100%}dialog>div{padding:24px}.generated{padding:0 20px}}
 </style></head><body data-theme="${escapeHtml11(config.theme)}" data-scheduled-renderer="blog_article_v1"><div class="progress" aria-hidden="true"></div><header class="hero"><div class="hero-inner"><nav class="breadcrumb" aria-label="Breadcrumb"><a href="${safeHref4(input.canonicalUrl)}">${escapeHtml11(input.category)}</a><span>/</span><span>Article</span></nav><span class="eyebrow">${escapeHtml11(input.eyebrow)}</span><h1>${escapeHtml11(input.title)}</h1>${input.dek ? `<p class="dek">${escapeHtml11(input.dek)}</p>` : ""}<div class="contributors">${contributorText}<div class="meta"><time datetime="${escapeHtml11(articleDate)}">Updated ${formatDate2(articleDate)}</time><span>\u2022</span><span>${input.readTimeMinutes} min read</span>${input.reviewer ? "<span>\u2022</span><strong>Expert reviewed</strong>" : ""}</div></div></div></header><main class="layout"><article class="main"><section class="takeaways"><span class="eyebrow">The short answer</span><h2>Key takeaways</h2><ul>${input.keyTakeaways.map((item) => `<li>${escapeHtml11(item)}</li>`).join("")}</ul></section><section class="intro">${input.introduction.map((paragraph) => `<p>${escapeHtml11(paragraph)}</p>`).join("")}</section>${sections}${faq}${author}</article><div class="rail">${media}${disclosure}${toc}</div></main>${config.showGeneratedAt ? `<p class="generated">Rendered ${formatDate2(generatedAtIso)} by MCP Scraper.</p>` : ""}${citationDialog}<script>(()=>{const citations=${jsonForScript(citationValues)};const canonical=${jsonForScript(input.canonicalUrl)};const title=${jsonForScript(input.title)};const progress=document.querySelector('.progress');const tocLinks=[...document.querySelectorAll('.toc nav a')];const targets=tocLinks.map(link=>document.querySelector(link.hash)).filter(Boolean);const update=()=>{const max=document.documentElement.scrollHeight-innerHeight;if(progress)progress.style.width=(max>0?scrollY/max*100:0)+'%';let active=targets[0]?.id;for(const target of targets){if(target.getBoundingClientRect().top<=innerHeight*.55)active=target.id}tocLinks.forEach(link=>link.toggleAttribute('aria-current',link.hash==='#'+active));tocLinks.forEach(link=>{if(link.hash==='#'+active)link.setAttribute('aria-current','location');else link.removeAttribute('aria-current')})};addEventListener('scroll',update,{passive:true});addEventListener('resize',update);update();document.querySelectorAll('.faq h3 button').forEach(button=>button.addEventListener('click',()=>{const panel=document.getElementById(button.getAttribute('aria-controls'));const open=button.getAttribute('aria-expanded')==='true';button.setAttribute('aria-expanded',String(!open));panel.hidden=open;button.querySelector('b').textContent=open?'+':'\u2212'}));const disclosure=document.querySelector('.disclosure button');disclosure?.addEventListener('click',()=>{const panel=document.getElementById(disclosure.getAttribute('aria-controls'));const open=disclosure.getAttribute('aria-expanded')==='true';disclosure.setAttribute('aria-expanded',String(!open));panel.hidden=open});const tocToggle=document.querySelector('.toc header button');tocToggle?.addEventListener('click',()=>{const nav=document.getElementById('toc-links');const open=tocToggle.getAttribute('aria-expanded')==='true';tocToggle.setAttribute('aria-expanded',String(!open));nav.hidden=open;tocToggle.textContent=open?'\u2304':'\u2303'});document.querySelector('.back-top')?.addEventListener('click',()=>scrollTo({top:0,behavior:'smooth'}));const copy=async text=>{try{await navigator.clipboard.writeText(text)}catch{const area=document.createElement('textarea');area.value=text;area.style.position='fixed';area.style.opacity='0';document.body.append(area);area.select();document.execCommand('copy');area.remove()}};const dialog=document.getElementById('citation-dialog');document.querySelector('[data-cite]')?.addEventListener('click',()=>dialog.showModal());document.querySelector('.dialog-close')?.addEventListener('click',()=>dialog.close());dialog?.addEventListener('click',event=>{if(event.target===dialog)dialog.close()});document.querySelectorAll('[data-citation]').forEach(button=>button.addEventListener('click',async()=>{const style=button.dataset.citation;await copy(citations[style]);document.querySelector('.citation-status').textContent=style+' citation copied to clipboard.'}));document.querySelector('[data-share]')?.addEventListener('click',async()=>{const status=document.querySelector('.action-status');if(navigator.share){try{await navigator.share({title,url:canonical});status.textContent='Sharing options opened.';return}catch(error){if(error.name==='AbortError')return}}await copy(canonical);status.textContent='Article link copied to clipboard.'})})()</script></body></html>`;
   const bytes = Buffer.byteLength(html);
-  const sha2563 = (0, import_node_crypto48.createHash)("sha256").update(html).digest("hex");
+  const sha2563 = (0, import_node_crypto49.createHash)("sha256").update(html).digest("hex");
   return {
     html,
     filename: "blog-article.html",
@@ -72739,11 +73182,11 @@ function renderBlogArticleV1(input, config, generatedAt) {
     generatedAt: generatedAtIso
   };
 }
-var import_node_crypto48;
+var import_node_crypto49;
 var init_render4 = __esm({
   "src/blog-article/render.ts"() {
     "use strict";
-    import_node_crypto48 = require("crypto");
+    import_node_crypto49 = require("crypto");
   }
 });
 
@@ -73074,7 +73517,7 @@ function policy5() {
   };
 }
 function runStorageSegment(runId) {
-  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto49.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
+  return /^[a-zA-Z0-9_-]{1,160}$/.test(runId) ? runId : `run-${(0, import_node_crypto50.createHash)("sha256").update(runId).digest("hex").slice(0, 32)}`;
 }
 async function createScheduledRunArtifact(args) {
   if (args.rendered.bytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) {
@@ -73115,12 +73558,12 @@ async function readScheduledRunArtifact(args) {
   if (!window2 || window2.nextOffset !== null || window2.totalBytes > SCHEDULED_RUN_ARTIFACT_MAX_BYTES) return null;
   return window2.text;
 }
-var import_node_crypto49, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
+var import_node_crypto50, SCHEDULED_RUN_ARTIFACT_PREFIX, SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS, SCHEDULED_RUN_ARTIFACT_MAX_BYTES;
 var init_scheduled_run_artifact_store = __esm({
   "src/scheduled-artifacts/scheduled-run-artifact-store.ts"() {
     "use strict";
     init_private_artifacts();
-    import_node_crypto49 = require("crypto");
+    import_node_crypto50 = require("crypto");
     SCHEDULED_RUN_ARTIFACT_PREFIX = "scheduled-run-artifacts/";
     SCHEDULED_RUN_ARTIFACT_DOWNLOAD_TTL_MS = 15 * 60 * 1e3;
     SCHEDULED_RUN_ARTIFACT_MAX_BYTES = 2e6;
@@ -73338,7 +73781,7 @@ async function reconcileDiscoveredNangoConnections(identity, discovered) {
           updated_at = excluded.updated_at
       `,
       args: [
-        (0, import_node_crypto50.randomUUID)(),
+        (0, import_node_crypto51.randomUUID)(),
         userId,
         connection.providerConfigKey,
         connection.provider,
@@ -73409,7 +73852,7 @@ async function recordServiceConnectionHealth(args) {
   });
   await getDb().execute({
     sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [(0, import_node_crypto50.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
+    args: [(0, import_node_crypto51.randomUUID)(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
   });
 }
 async function setServiceConnectionActions(identity, connectionId, enabled) {
@@ -73449,7 +73892,7 @@ async function claimServiceConnectionAction(args) {
   if (!connection) throw new Error("service_connection_not_found");
   const inserted = await getDb().execute({
     sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status, request_digest) VALUES (?, ?, ?, ?, ?, 'started', ?)`,
-    args: [(0, import_node_crypto50.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
+    args: [(0, import_node_crypto51.randomUUID)(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
   });
   if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
   const existing = await getDb().execute({
@@ -73474,11 +73917,11 @@ async function claimServiceConnectionAction(args) {
     ...result !== void 0 ? { result } : {}
   };
 }
-var import_node_crypto50, schemaReady3, schemaDb4;
+var import_node_crypto51, schemaReady3, schemaDb4;
 var init_service_connections = __esm({
   "src/api/service-connections.ts"() {
     "use strict";
-    import_node_crypto50 = require("crypto");
+    import_node_crypto51 = require("crypto");
     init_db();
     schemaReady3 = null;
     schemaDb4 = null;
@@ -73492,8 +73935,8 @@ function signingSecret() {
   return secret2;
 }
 function schedulerIntegrationSignature(args) {
-  const bodyHash = (0, import_node_crypto51.createHash)("sha256").update(args.body).digest("hex");
-  return (0, import_node_crypto51.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
+  const bodyHash = (0, import_node_crypto52.createHash)("sha256").update(args.body).digest("hex");
+  return (0, import_node_crypto52.createHmac)("sha256", args.secret).update(`${args.method.toUpperCase()}
 ${args.path}
 ${args.timestamp}
 ${args.nonce}
@@ -73540,17 +73983,17 @@ async function verifySchedulerIntegrationRequest(request, rawBody) {
   });
   const suppliedBytes = Buffer.from(signature, "hex");
   const expectedBytes = Buffer.from(expected, "hex");
-  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto51.timingSafeEqual)(suppliedBytes, expectedBytes)) {
+  if (suppliedBytes.length !== expectedBytes.length || !(0, import_node_crypto52.timingSafeEqual)(suppliedBytes, expectedBytes)) {
     throw new SchedulerIntegrationAuthError("invalid_signature");
   }
   await claimNonce(nonce, timestampMs);
   return { requestId };
 }
-var import_node_crypto51, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
+var import_node_crypto52, MAX_CLOCK_SKEW_MS, SchedulerIntegrationAuthError;
 var init_scheduler_integration_auth = __esm({
   "src/api/scheduler-integration-auth.ts"() {
     "use strict";
-    import_node_crypto51 = require("crypto");
+    import_node_crypto52 = require("crypto");
     init_db();
     init_service_connections();
     MAX_CLOCK_SKEW_MS = 5 * 60 * 1e3;
@@ -73858,7 +74301,7 @@ async function fetchMedia(rawUrl, expectedType) {
       finalUrl: checked.parsed.href,
       width: dimensions?.width ?? null,
       height: dimensions?.height ?? null,
-      sha256: (0, import_node_crypto52.createHash)("sha256").update(bytes).digest("hex")
+      sha256: (0, import_node_crypto53.createHash)("sha256").update(bytes).digest("hex")
     };
   }
   throw new Error("media_redirect_rejected");
@@ -73972,7 +74415,7 @@ async function packagePageMedia(args) {
   files.push({ path: "summary.json", content: Buffer.from(JSON.stringify(summary, null, 2)) });
   files.push({ path: "media.jsonl", content: Buffer.from(cleanAssets.map((asset) => JSON.stringify(asset)).join("\n") + "\n") });
   const archive = await zipBuffer2(files);
-  const id = (0, import_node_crypto52.randomBytes)(6).toString("hex");
+  const id = (0, import_node_crypto53.randomBytes)(6).toString("hex");
   const pointer = await createPrivateArtifact({
     policy: policy6(),
     ownerId: args.ownerId,
@@ -73985,11 +74428,11 @@ async function packagePageMedia(args) {
   const localPath = token5() ? null : (0, import_node_path21.join)(process.env.MCP_SCRAPER_OUTPUT_DIR?.trim() || (0, import_node_path21.join)((0, import_node_os14.homedir)(), "Downloads", "mcp-scraper"), "blobs", pointer.artifactId);
   return { media: args.media, artifact: { ...pointer, localPath } };
 }
-var import_node_crypto52, import_node_os14, import_node_path21, import_p_limit7, import_yazl3, PAGE_MEDIA_ARTIFACT_PREFIX, PAGE_MEDIA_ARTIFACT_TTL_MS, PAGE_MEDIA_DOWNLOAD_TTL_MS, MAX_FILE_BYTES, MAX_ARCHIVE_MEDIA_BYTES, MAX_INLINE_IMAGE_BYTES2, MAX_INLINE_TOTAL_BYTES2, DOWNLOAD_CONCURRENCY2, MAX_REDIRECTS3;
+var import_node_crypto53, import_node_os14, import_node_path21, import_p_limit7, import_yazl3, PAGE_MEDIA_ARTIFACT_PREFIX, PAGE_MEDIA_ARTIFACT_TTL_MS, PAGE_MEDIA_DOWNLOAD_TTL_MS, MAX_FILE_BYTES, MAX_ARCHIVE_MEDIA_BYTES, MAX_INLINE_IMAGE_BYTES2, MAX_INLINE_TOTAL_BYTES2, DOWNLOAD_CONCURRENCY2, MAX_REDIRECTS3;
 var init_page_media_artifacts = __esm({
   "src/api/page-media-artifacts.ts"() {
     "use strict";
-    import_node_crypto52 = require("crypto");
+    import_node_crypto53 = require("crypto");
     import_node_os14 = require("os");
     import_node_path21 = require("path");
     import_p_limit7 = __toESM(require("p-limit"), 1);
@@ -74083,7 +74526,7 @@ var init_site_extract_reconciliation = __esm({
 
 // src/api/page-diff.ts
 function sha256Hex(value) {
-  return (0, import_node_crypto53.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto54.createHash)("sha256").update(value).digest("hex");
 }
 function truncateForStorage(value, maxChars = MAX_SNAPSHOT_CONTENT_CHARS) {
   if (value.length <= maxChars) return { value, truncated: false };
@@ -74140,11 +74583,11 @@ function diffPageContent(oldContent, newContent) {
     totalChangedLineCount
   };
 }
-var import_node_crypto53, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
+var import_node_crypto54, import_diff, MAX_SNAPSHOT_CONTENT_CHARS, MAX_DIFF_HUNKS, MAX_DIFF_LINES_PER_RESPONSE;
 var init_page_diff = __esm({
   "src/api/page-diff.ts"() {
     "use strict";
-    import_node_crypto53 = require("crypto");
+    import_node_crypto54 = require("crypto");
     import_diff = require("diff");
     MAX_SNAPSHOT_CONTENT_CHARS = 25e4;
     MAX_DIFF_HUNKS = 200;
@@ -74218,7 +74661,7 @@ var init_scrape_vault_sink = __esm({
 
 // src/api/scrape-image-sink.ts
 function idempotencyKey2(userId, vault, input) {
-  return `scrape-image-${(0, import_node_crypto54.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
+  return `scrape-image-${(0, import_node_crypto55.createHash)("sha256").update(`${userId}\0${vault}\0${input.sourceKind}\0${input.sourceUrl}\0${input.imageUrl ?? ""}\0${input.imageBase64 ?? ""}`).digest("hex")}`;
 }
 async function persistScrapeImagesToMemory(user, inputs, vault) {
   const selected = inputs.slice(0, MAX_IMAGES_PER_SCRAPE);
@@ -74260,11 +74703,11 @@ async function persistScrapeImagesToMemory(user, inputs, vault) {
     assets
   };
 }
-var import_node_crypto54, MAX_IMAGES_PER_SCRAPE;
+var import_node_crypto55, MAX_IMAGES_PER_SCRAPE;
 var init_scrape_image_sink = __esm({
   "src/api/scrape-image-sink.ts"() {
     "use strict";
-    import_node_crypto54 = require("crypto");
+    import_node_crypto55 = require("crypto");
     init_memory();
     MAX_IMAGES_PER_SCRAPE = 25;
   }
@@ -74717,7 +75160,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha2562(value) {
-  return (0, import_node_crypto55.createHash)("sha256").update(value).digest("hex");
+  return (0, import_node_crypto56.createHash)("sha256").update(value).digest("hex");
 }
 function sensitiveKey(key) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -74932,11 +75375,11 @@ async function importServiceConnectionToMemory(identity, input, dependencies) {
     ...!searchReady ? { warning: "The snapshot was stored, but no search chunks were indexed yet." } : {}
   };
 }
-var import_node_crypto55, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
+var import_node_crypto56, CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES, CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES, CONNECTION_MEMORY_IMPORT_MAX_STRING_CHARS, CONNECTION_MEMORY_IMPORT_MAX_DEPTH, ConnectionMemoryImportError;
 var init_connection_memory_import = __esm({
   "src/api/connection-memory-import.ts"() {
     "use strict";
-    import_node_crypto55 = require("crypto");
+    import_node_crypto56 = require("crypto");
     init_slugify();
     CONNECTION_MEMORY_IMPORT_MAX_ARGS_BYTES = 64 * 1024;
     CONNECTION_MEMORY_IMPORT_MAX_RESULT_BYTES = 1e6;
@@ -74981,16 +75424,16 @@ async function cleanupLocal(cutoff) {
   let deleted = 0;
   let entries;
   try {
-    entries = await (0, import_promises15.readdir)(dir);
+    entries = await (0, import_promises16.readdir)(dir);
   } catch {
     return { deleted: 0, store: "local" };
   }
   for (const name of entries) {
     const path6 = (0, import_node_path23.join)(dir, name);
     try {
-      const s = await (0, import_promises15.stat)(path6);
+      const s = await (0, import_promises16.stat)(path6);
       if (s.isFile() && s.mtimeMs < cutoff) {
-        await (0, import_promises15.unlink)(path6);
+        await (0, import_promises16.unlink)(path6);
         deleted++;
       }
     } catch {
@@ -75007,11 +75450,11 @@ async function cleanupExpiredScrapeBlobs(maxAgeMs = SCRAPE_BLOB_TTL_MS) {
     return { deleted: 0, store: "none" };
   }
 }
-var import_promises15, import_node_os15, import_node_path23;
+var import_promises16, import_node_os15, import_node_path23;
 var init_scrape_blob_cleanup = __esm({
   "src/api/scrape-blob-cleanup.ts"() {
     "use strict";
-    import_promises15 = require("fs/promises");
+    import_promises16 = require("fs/promises");
     import_node_os15 = require("os");
     import_node_path23 = require("path");
     init_scrape_vault_sink();
@@ -75154,7 +75597,7 @@ function finitePositive(value, fallback) {
   return Number.isFinite(value) && value > 0 ? value : fallback;
 }
 async function collectConnectedDataExport(args) {
-  const exportId = (0, import_node_crypto56.randomUUID)();
+  const exportId = (0, import_node_crypto57.randomUUID)();
   const now = args.now ?? Date.now;
   const startedAt = now();
   const budgetMs = finitePositive(CONNECTED_DATA_EXPORT_BUDGET_MS, 24e4);
@@ -75268,11 +75711,11 @@ ${lines.length ? `${lines.join("\n")}
     untrustedContent: true
   };
 }
-var import_node_crypto56, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
+var import_node_crypto57, CONNECTED_DATA_INLINE_BUDGET_BYTES, CONNECTED_DATA_MAX_EXPORT_BYTES, CONNECTED_DATA_EXPORT_BUDGET_MS, CONNECTED_DATA_PAGE_START_HEADROOM_MS, CONNECTED_DATA_DATASETS, ConnectedDataExportValidationError;
 var init_connected_data_export = __esm({
   "src/api/connected-data-export.ts"() {
     "use strict";
-    import_node_crypto56 = require("crypto");
+    import_node_crypto57 = require("crypto");
     CONNECTED_DATA_INLINE_BUDGET_BYTES = Number(
       process.env.MCP_SCRAPER_CONNECTED_DATA_INLINE_BUDGET_BYTES ?? 5e4
     );
@@ -75386,7 +75829,7 @@ async function exportSearchConsoleTableData(args) {
     offset += rows.length;
     if (stoppedForBytes || rows.length < limit || offset >= matchedRows) break;
   }
-  const exportId = (0, import_node_crypto57.randomUUID)();
+  const exportId = (0, import_node_crypto58.randomUUID)();
   const artifact = await args.writeArtifact({
     ownerId: args.ownerId,
     exportId,
@@ -75408,11 +75851,11 @@ async function exportSearchConsoleTableData(args) {
     warnings
   };
 }
-var import_node_crypto57, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
+var import_node_crypto58, SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS, SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE, SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES, SEARCH_CONSOLE_TABLE_COLUMNS, SearchConsoleTableExportValidationError;
 var init_search_console_table_export = __esm({
   "src/api/search-console-table-export.ts"() {
     "use strict";
-    import_node_crypto57 = require("crypto");
+    import_node_crypto58 = require("crypto");
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_ROWS = 5e4;
     SEARCH_CONSOLE_TABLE_EXPORT_PAGE_SIZE = 2e3;
     SEARCH_CONSOLE_TABLE_EXPORT_MAX_BYTES = 50 * 1024 * 1024;
@@ -76591,7 +77034,7 @@ async function listNangoToolsDirect(identity, connectionId) {
   });
   const readTools = [...policies.values()].filter((policy7) => policy7.classification === "read").map((policy7) => policy7.name);
   const actionTools = [...policies.values()].filter((policy7) => policy7.classification === "action").map((policy7) => policy7.name);
-  const revision = (0, import_node_crypto58.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
+  const revision = (0, import_node_crypto59.createHash)("sha256").update(JSON.stringify(tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema })))).digest("hex");
   await updateServiceConnectionTools(connection.id, readTools, actionTools, revision);
   const refreshed = await getOwnedServiceConnection(identity, connection.id);
   return { connection: refreshed ?? { ...connection, readTools, actionTools, toolRevision: revision }, tools };
@@ -76618,8 +77061,8 @@ async function callNangoToolDirect(args) {
     identity: args.identity,
     ratePolicyVersion: CONNECTED_USAGE_RATE_POLICY_VERSION
   });
-  const requestId = args.requestId?.trim() || (0, import_node_crypto58.randomUUID)();
-  const idempotencyKey3 = `main-nango:${(0, import_node_crypto58.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
+  const requestId = args.requestId?.trim() || (0, import_node_crypto59.randomUUID)();
+  const idempotencyKey3 = `main-nango:${(0, import_node_crypto59.createHash)("sha256").update(args.identity.toLowerCase()).update("\0").update(connection.id).update("\0").update(args.tool).update("\0").update(requestId).digest("hex")}`;
   const startedAt = /* @__PURE__ */ new Date();
   const started = performance.now();
   let result;
@@ -76644,7 +77087,7 @@ async function callNangoToolDirect(args) {
       toolName: args.tool,
       operationKind: args.operationKind ?? args.classification,
       outcome: providerError ? "error" : "partial",
-      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto58.createHash)("sha256").update(requestId).digest("hex"),
+      requestId: requestId.length <= 200 ? requestId : (0, import_node_crypto59.createHash)("sha256").update(requestId).digest("hex"),
       startedAt: startedAt.toISOString(),
       completedAt: completedAt.toISOString()
     }
@@ -76686,15 +77129,15 @@ async function describeNangoToolDirect(identity, connectionId, toolName) {
     providerContractHash: MAIN_INTEGRATION_CONTRACT_HASH,
     protocolVersion: null,
     schemaSource: "live_tools_list",
-    schemaHash: (0, import_node_crypto58.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
+    schemaHash: (0, import_node_crypto59.createHash)("sha256").update(JSON.stringify(projected)).digest("hex"),
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-var import_node_crypto58, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
+var import_node_crypto59, import_client13, DEFAULT_NANGO_MCP_URL, NANGO_TIMEOUT_MS, NANGO_CONNECTION_PAGE_SIZE, NANGO_CONNECTION_MAX_PAGES, MAIN_INTEGRATION_CONTRACT_VERSION, MAIN_INTEGRATION_CONTRACT_HASH, MainNangoTransportError;
 var init_main_nango_transport = __esm({
   "src/api/main-nango-transport.ts"() {
     "use strict";
-    import_node_crypto58 = require("crypto");
+    import_node_crypto59 = require("crypto");
     import_client13 = require("@modelcontextprotocol/client");
     init_service_connections();
     init_connected_usage_billing();
@@ -77318,8 +77761,8 @@ async function setScheduleConnectionActionsEnabled(identity, connectionId, enabl
   return data.connection.actionsEnabled === true;
 }
 async function callScheduleConnectionAction(identity, connectionId, input, tool, idempotencyKey3) {
-  const requestId = `main-connected-action:${(0, import_node_crypto59.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto59.randomUUID)()).digest("hex")}`;
-  const requestDigest = (0, import_node_crypto59.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
+  const requestId = `main-connected-action:${(0, import_node_crypto60.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3?.trim() || (0, import_node_crypto60.randomUUID)()).digest("hex")}`;
+  const requestDigest = (0, import_node_crypto60.createHash)("sha256").update(connectionId).update("\0").update(tool?.trim() ?? "").update("\0").update(canonicalJson2(input)).digest("hex");
   if (mainOwnsIntegrations()) {
     const selectedTool = tool?.trim();
     if (!selectedTool) throw new NangoControlError("An action tool is required.", 400, "invalid_request", false);
@@ -77470,7 +77913,7 @@ function canonicalJson2(value) {
   return JSON.stringify(value);
 }
 function projectedToolSchemaHash(tool) {
-  return (0, import_node_crypto59.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
+  return (0, import_node_crypto60.createHash)("sha256").update(canonicalJson2(tool)).digest("hex");
 }
 async function describeNangoTool(identity, connectionId, tool, fresh) {
   if (mainOwnsIntegrations()) {
@@ -77747,11 +78190,11 @@ async function callMainOwnedExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto59, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
+var import_node_crypto60, DEFAULT_NANGO_CONTROL_URL, DISABLED_NANGO_TOOLS, CONNECTION_SYNC_REQUIRED_TOOLS, CONNECTION_SYNC_OPTIONAL_TOOLS, NangoControlError, ScheduleConnectionValidationError, SAFE_CONTROL_ERROR_CODES, FIXED_CONTROL_ERROR_MESSAGES, CONTROL_ERROR_CODE_ALIASES;
 var init_nango_control = __esm({
   "src/api/nango-control.ts"() {
     "use strict";
-    import_node_crypto59 = require("crypto");
+    import_node_crypto60 = require("crypto");
     init_connected_data_export();
     init_slack_connected_data_export();
     init_main_nango_transport();
@@ -78107,7 +78550,7 @@ async function callResendRead(identity, connectionId, tool, args) {
   return isRecord5(data) ? data.result ?? data : data;
 }
 async function callResendAction(identity, connectionId, tool, input, idempotencyKey3) {
-  const requestId = `main-resend-action:${(0, import_node_crypto60.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
+  const requestId = `main-resend-action:${(0, import_node_crypto61.createHash)("sha256").update(identity).update("\0").update(idempotencyKey3.trim()).digest("hex")}`;
   const body = await controlRequest2("/api/internal/resend/actions/call", {
     method: "POST",
     headers: { "x-request-id": requestId },
@@ -78172,12 +78615,12 @@ async function callResendExportPage(identity, input) {
     untrustedContent: true
   };
 }
-var import_node_crypto60, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
+var import_node_crypto61, DEFAULT_CONNECTION_CONTROL_URL, RESEND_PROVIDER_CONFIG_KEY, RESEND_LOGO_URL, RESEND_DOCS_URL, RESEND_ADMIN_BLOCKED_TOOLS, RESEND_CONNECTION_SYNC_REQUIRED_TOOLS, ResendControlError;
 var init_resend_control = __esm({
   "src/api/resend-control.ts"() {
     "use strict";
     init_connected_data_export();
-    import_node_crypto60 = require("crypto");
+    import_node_crypto61 = require("crypto");
     DEFAULT_CONNECTION_CONTROL_URL = "https://mcp-scraper-scheduler.vercel.app";
     RESEND_PROVIDER_CONFIG_KEY = "resend";
     RESEND_LOGO_URL = "https://cdn.resend.com/brand/resend-icon-black.svg";
@@ -78762,7 +79205,7 @@ function settleWithinTickBudget(label, unfinished, work, onDeadlineOrError) {
     );
   });
 }
-var import_resend3, import_node_crypto61, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS, CRON_TICK_BUDGET_MS, CRON_TICK_DRAIN_BUDGET_MS;
+var import_resend3, import_node_crypto62, import_hono36, import_hono37, import_factory8, import_cookie2, import_stripe2, secureCookies2, isProduction2, sessionCookieOptions2, requireAllowedOrigin, auth4, sessionAuth, requireIntegrationsTier, requirePaidSchedulingTier, app, deploymentProfile, STRIPE_API_VERSION, SYNC_HARVEST_TIMEOUT_OVERRIDE_MS, CRON_TICK_BUDGET_MS, CRON_TICK_DRAIN_BUDGET_MS;
 var init_server = __esm({
   "src/api/server.ts"() {
     "use strict";
@@ -78775,7 +79218,7 @@ var init_server = __esm({
     init_og();
     import_resend3 = require("resend");
     init_url_utils();
-    import_node_crypto61 = require("crypto");
+    import_node_crypto62 = require("crypto");
     init_kpo_extractor();
     init_screenshot();
     init_media_extractor();
@@ -80325,7 +80768,7 @@ var init_server = __esm({
         if (!harvestOk) return c.json(insufficientBalanceResponse(harvestBal, harvestCost), 402);
         jobId2 = await createJob(user.id, options.query, { ...options, billingHoldMc: harvestCost }, body.callback_url);
       } else {
-        jobId2 = (0, import_node_crypto61.randomUUID)();
+        jobId2 = (0, import_node_crypto62.randomUUID)();
         const billingDebitKey = `paa-harvest:${jobId2}:hold`;
         const description = `PAA harvest: ${options.query}`.slice(0, 500);
         const hold = await debitMcIdempotent(