mcp-scraper 0.66.7 → 0.67.0

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to MCP Scraper are documented here. The format is based on [
 
 ## [Unreleased]
 
+## [0.67.0] - 2026-08-26
+
+### Added
+
+- `commons_host_image` now accepts pasted or AI-generated bytes, owner-scoped image artifacts, direct image URLs, and webpage URLs through one workflow. Webpage inputs try Open Graph, Twitter, JSON-LD, and meaningful content images, return source-selection provenance, and omit temporary URL query credentials from durable image metadata.
+- `mcpscraper.dev` now publishes its complete generated LLM discovery profile and bounded semantic authority-retrieval endpoints from the site-owned Next.js authority layer.
+
 ## [0.66.7] - 2026-08-26
 
 ### Fixed

package/README.md

@@ -159,7 +159,7 @@ Build the branded one-click bundle:
 npm run build:mcpb
 ```
 
-The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.66.7`, SHA-256 `6afb48b628861b97ac6f28ac21549225a513d34de62892f2c4ac66f1928972c1`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
+The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.67.0`, SHA-256 `03cd764c2ec1741ae0a64373f91324a8f46b523d4bf2ace8d9845f8c45f8d9e4`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
 
 The MCPB install exposes every tool — web-intelligence plus all `browser_*` tools — through the one `mcp-scraper` server.
 

package/dist/bin/api-server.cjs

@@ -174,6 +174,12 @@ function publicErrorType(code) {
     case "image_redirect_limit":
     case "image_base64_invalid":
     case "image_source_missing":
+    case "image_source_ambiguous":
+    case "image_source_type_invalid":
+    case "image_artifact_not_found":
+    case "image_page_too_large":
+    case "page_image_not_found":
+    case "page_image_candidates_unusable":
     case "image_format_unsupported":
     case "image_storage_unconfigured":
     case "featured_image_unhostable":
@@ -270,7 +276,19 @@ function publicErrorMessage(code) {
     case "image_base64_invalid":
       return "The supplied inline image bytes are invalid.";
     case "image_source_missing":
-      return "Provide either a stable public image URL or inline image bytes.";
+      return "Provide exactly one of a public image or webpage URL, inline image bytes, or an owner-scoped image artifact.";
+    case "image_source_ambiguous":
+      return "Provide only one image source: sourceUrl, imageBase64, or artifactId.";
+    case "image_source_type_invalid":
+      return "Use sourceType only with inline image bytes or an owner-scoped image artifact.";
+    case "image_artifact_not_found":
+      return "The image artifact was not found, expired, or does not belong to this account.";
+    case "image_page_too_large":
+      return "The webpage is too large for bounded Commons image discovery.";
+    case "page_image_not_found":
+      return "The webpage did not expose a usable featured or content image.";
+    case "page_image_candidates_unusable":
+      return "The webpage exposed image candidates, but none returned supported public image bytes.";
     case "image_format_unsupported":
       return "Commons accepts JPEG, PNG, GIF, or WebP image bytes.";
     case "image_storage_unconfigured":
@@ -350,6 +368,12 @@ var init_errors = __esm({
       "image_redirect_limit",
       "image_base64_invalid",
       "image_source_missing",
+      "image_source_ambiguous",
+      "image_source_type_invalid",
+      "image_artifact_not_found",
+      "image_page_too_large",
+      "page_image_not_found",
+      "page_image_candidates_unusable",
       "image_format_unsupported",
       "image_storage_unconfigured",
       "featured_image_unhostable"
@@ -11394,7 +11418,8 @@ function firstJsonLdImage(value) {
   }
   return null;
 }
-function firstContentImage(html) {
+function contentImages(html) {
+  const images = [];
   for (const match of html.matchAll(/<img\b[^>]*>/gi)) {
     const tag = match[0];
     const attr = (name) => tag.match(new RegExp(`\\b${name}\\s*=\\s*(?:"([^"]+)"|'([^']+)'|([^\\s>]+))`, "i"))?.slice(1).find(Boolean) ?? null;
@@ -11405,30 +11430,36 @@ function firstContentImage(html) {
     const width = Number(attr("width") ?? 0);
     const height = Number(attr("height") ?? 0);
     if (width > 0 && width < 200 || height > 0 && height < 120) continue;
-    return candidate;
+    images.push(candidate);
   }
-  return null;
+  return images;
 }
-function resolveFeaturedImage(input) {
+function resolveFeaturedImageCandidates(input) {
   const replay = parseWaybackReplayUrl(input.pageUrl);
   const baseUrl = replay?.originalUrl ?? input.pageUrl;
   const candidates = [
     { value: input.meta["og:image"] ?? input.meta["og:image:url"] ?? input.meta["og:image:secure_url"], source: "og:image" },
     { value: input.meta["twitter:image"] ?? input.meta["twitter:image:src"], source: "twitter:image" },
     { value: firstJsonLdImage(input.schema), source: "json-ld" },
-    { value: firstContentImage(input.html), source: "content-image" }
+    ...contentImages(input.html).map((value) => ({ value, source: "content-image" }))
   ];
+  const seen = /* @__PURE__ */ new Set();
+  const resolved = [];
   for (const candidate of candidates) {
     if (!candidate.value) continue;
     const url = safeHttpUrl2(candidate.value, baseUrl);
-    if (!url) continue;
-    return {
+    if (!url || seen.has(url)) continue;
+    seen.add(url);
+    resolved.push({
       url,
       archivedUrl: replay ? buildWaybackReplayUrl(replay.timestamp, url, "im_") : null,
       source: candidate.source
-    };
+    });
   }
-  return null;
+  return resolved;
+}
+function resolveFeaturedImage(input) {
+  return resolveFeaturedImageCandidates(input)[0] ?? null;
 }
 var import_p_limit, WAYBACK_HOSTS, MAX_CDX_RESPONSE_BYTES, MAX_CDX_ROWS, MAX_ARCHIVE_URL_CHARS, MAX_SELECTED_TIMELINE_CELLS, TIMELINE_CDX_CONCURRENCY;
 var init_wayback = __esm({
@@ -50207,7 +50238,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.66.7";
+    PACKAGE_VERSION = "0.67.0";
   }
 });
 
@@ -50278,9 +50309,10 @@ seam is noted so you can chain them.
   guidance, recommended sections, optional sections, and heading guidance before any write occurs.
 - Host a featured image -> **commons_host_image**. The normal write sequence is **commons_prepare_entity ->
   compose the payload -> commons_host_image -> commons_validate_entity -> commons_submit_entity**. Put the
-  permanent returned URL in featuredImage.url. Use imageBase64 for available attachment bytes within the request
-  bound, or a stable direct public HTTPS image URL; never use a caller-local path, opaque chat attachment reference,
-  HTML page, private URL, or temporary/signed URL.
+  permanent returned URL in featuredImage.url. Use imageBase64 for pasted or AI-generated bytes, artifactId for an
+  owner-scoped MCP Scraper image artifact, or sourceUrl for either a public HTTPS image or a webpage containing one.
+  Webpage discovery tries Open Graph, Twitter, JSON-LD, then meaningful content images. Never pass a caller-local
+  path, opaque chat attachment reference, or private/authenticated URL.
 - Validate a composed entity without writing -> **commons_validate_entity**. Use it after image hosting and before
   submit. Validation does not fetch or store image bytes; an external/unregistered featured image is reported in
   imageDiagnostics as not publishable until commons_host_image returns its permanent Commons URL. Validation also
@@ -52031,7 +52063,7 @@ var init_contracts = __esm({
 });
 
 // src/mcp/mcp-tool-schemas.ts
-var import_zod45, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, HarvestPaaHostedInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AnalyzeSiteSimilarityInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, SiteExportReadInputSchema, SiteExportImageInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LeadScalarSchema2, LeadRowSchema, LeadColumnMapSchema2, LeadRowsImportSourceSchema, LeadCsvTextImportSourceSchema, LeadUploadImportSourceSchema, LeadListUploadStartInputSchema, LeadListImportInputSchema, LeadRowsEnrichmentSourceSchema, ImportedLeadListSourceSchema, LeadListEnrichInputSchema, LeadListEnrichStatusInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsHostImageInputSchema, CommonsGetProposalInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, CommonsFeaturedImageDiagnosticsOutputSchema, CommonsValidateEntityOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomImageSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsUpdateEditorialArticleInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LeadSuggestedColumnOutputSchema, LeadColumnMapSuggestionOutputSchema, LeadArtifactOutputSchema, LeadListUploadStartOutputSchema, LeadListImportOutputSchema, LeadCandidateOutputSchema, LeadProgressOutputSchema, LeadBillingOutputSchema, LeadAssociatedPersonSourceOutputSchema, LeadAssociatedPersonOutputSchema, LeadSampleRowOutputSchema, LeadListEnrichmentOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, PageMediaAssetOutput, PageMediaArtifactOutput, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, SiteExportReadOutputSchema, SiteExportImageOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
+var import_zod45, WEBSITE_URL_OR_DOMAIN_ERROR, WebsiteUrlOrDomainSchema, HarvestPaaInputSchema, HarvestPaaHostedInputSchema, ExtractUrlBaseInputSchema, ExtractUrlInputSchema, ExtractUrlLocalInputSchema, DiffPageBaseInputSchema, DiffPageInputSchema, DiffPageLocalInputSchema, MapSiteUrlsInputSchema, MapWaybackSnapshotsInputSchema, ExtractSiteInputSchema, AnalyzeSiteSimilarityInputSchema, AuditSiteInputSchema, CheckSiteExportInputSchema, SiteExportReadInputSchema, SiteExportImageInputSchema, ArchiveReadInputSchema, YoutubeHarvestInputSchema, YoutubeTranscribeInputSchema, FacebookPageIntelInputSchema, FacebookAdSearchInputSchema, RedditThreadInputSchema, RedditTrendingInputSchema, VideoFrameAnalysisInputSchema, VideoFrameAnalysisStatusInputSchema, FacebookAdTranscribeInputSchema, FacebookVideoTranscribeInputSchema, GoogleAdsSearchInputSchema, GoogleAdsPageIntelInputSchema, GoogleAdsTranscribeInputSchema, InstagramProfileContentInputSchema, InstagramMediaDownloadInputSchema, MapsPlaceIntelInputSchema, TrustpilotReviewsInputSchema, G2ReviewsInputSchema, ReviewCardSchema, MapsSearchInputSchema, DirectoryWorkflowInputSchema, LeadScalarSchema2, LeadRowSchema, LeadColumnMapSchema2, LeadRowsImportSourceSchema, LeadCsvTextImportSourceSchema, LeadUploadImportSourceSchema, LeadListUploadStartInputSchema, LeadListImportInputSchema, LeadRowsEnrichmentSourceSchema, ImportedLeadListSourceSchema, LeadListEnrichInputSchema, LeadListEnrichStatusInputSchema, LocationMarketsInputSchema, CommonsSearchEntitiesInputSchema, CommonsGetEntityInputSchema, CommonsGetEntityLinksetInputSchema, CommonsFeaturedImageInputSchema, CommonsMediaInputSchema, CommonsCitationInputSchema, CommonsSourceInputSchema, CommonsRelatedLinkInputSchema, CommonsClaimInputSchema, CommonsPrepareEntityInputSchema, CommonsSubmitEntityInputSchema, CommonsValidateEntityInputSchema, CommonsGetEntityLedgerInputSchema, CommonsHostImageInputSchema, CommonsHostImageOutputSchema, CommonsGetProposalInputSchema, CommonsSaveFilterInputSchema, CommonsListFiltersInputSchema, CommonsListNeedsLinksInputSchema, CommonsGenericOutputSchema, CommonsFeaturedImageDiagnosticsOutputSchema, CommonsValidateEntityOutputSchema, DirectoryWorkflowStatusInputSchema, LocalSourcebookSubmitInputSchema, LocalSourcebookCategorySchema, LocalSourcebookSchemaTypeInputSchema, LocalSourcebookTagCandidateObjectSchema, LocalSourcebookTagDecisionObjectSchema, LocalSourcebookIdentityObjectSchema, GetLocalSourcebookContractInputSchema, ListLocalSourcebookTagsInputSchema, ResolveLocalSourcebookTagsInputSchema, PrepareLocalSourcebookWriteInputSchema, ValidateLocalSourcebookWriteInputSchema, LocalSourcebookCaptureInputSchema, LocalSourcebookSubmissionStatusInputSchema, LocalSourcebookRefreshInputSchema, LocalSourcebookOutputSchema, ArtifactPointerOutputSchema, EditorialReadingRoomSiteSchema, EditorialReadingRoomImageSchema, EditorialReadingRoomArticleSchema, EditorialReadingRoomGuideInputSchema, EditorialReadingRoomGuideOutputSchema, CreateEditorialReadingRoomInputSchema, EditorialReadingRoomArtifactSchema, CreateEditorialReadingRoomOutputSchema, RenewEditorialReadingRoomDownloadInputSchema, RenewEditorialReadingRoomDownloadOutputSchema, CommonsPublicationSubdomainSchema, CommonsPreparePublicationInputSchema, CommonsValidatePublicationInputSchema, CommonsClaimPublicationInputSchema, CommonsPublishEditorialInputSchema, CommonsUpdateEditorialArticleInputSchema, CommonsGetPublicationInputSchema, RankTrackerModeSchema, RankTrackerBlueprintInputSchema, NullableString, MapsSearchAttemptOutput, MapsSearchOutputSchema, DirectoryMapsBusinessOutput, DirectoryCsvArtifactOutput, DirectoryWorkflowOutputSchema, LeadSuggestedColumnOutputSchema, LeadColumnMapSuggestionOutputSchema, LeadArtifactOutputSchema, LeadListUploadStartOutputSchema, LeadListImportOutputSchema, LeadCandidateOutputSchema, LeadProgressOutputSchema, LeadBillingOutputSchema, LeadAssociatedPersonSourceOutputSchema, LeadAssociatedPersonOutputSchema, LeadSampleRowOutputSchema, LeadListEnrichmentOutputSchema, LocationDatasetProvenanceOutput, LocationMarketsOutputSchema, RankTrackerToolPlanOutput, RankTrackerTableOutput, RankTrackerCronJobOutput, RankTrackerBlueprintOutputSchema, OrganicResultOutput, AiOverviewOutput, EntityIdsOutput, HarvestPaaOutputSchema, SearchSerpOutputSchema, PageMediaAssetOutput, PageMediaArtifactOutput, ExtractUrlOutputSchema, DiffPageOutputSchema, ExtractSiteOutputSchema, AuditSiteOutputSchema, CheckSiteExportOutputSchema, SiteExportReadOutputSchema, SiteExportImageOutputSchema, ArchiveEntryOutputSchema, ArchiveReadOutputSchema, MapsPlaceIntelOutputSchema, TrustpilotReviewsOutputSchema, G2ReviewsOutputSchema, CreditsInfoOutputSchema, MapSiteUrlsOutputSchema, WaybackCaptureOutputSchema, MapWaybackSnapshotsOutputSchema, YoutubeHarvestOutputSchema, FacebookAdSearchOutputSchema, VideoFrameAnalysisOutputSchema, VideoFrameAnalysisStatusOutputSchema, RedditThreadOutputSchema, RedditTrendingOutputSchema, FacebookPageIntelOutputSchema, GoogleAdsSearchOutputSchema, GoogleAdsPageIntelOutputSchema, TranscriptSignalOutput, FacebookVideoTranscribeOutputSchema, TranscriptChunkOutput, InstagramBrowserOutput, InstagramPaginationOutput, InstagramProfileContentOutputSchema, InstagramMediaTrackOutput, InstagramDownloadOutput, InstagramMediaDownloadOutputSchema, YoutubeTranscribeOutputSchema, FacebookAdTranscribeOutputSchema, GoogleAdsTranscribeOutputSchema, CaptureSerpSnapshotOutputSchema, CaptureSerpPageSnapshotsOutputSchema, CreditsInfoInputSchema, WorkflowIdSchema2, WorkflowListInputSchema, WorkflowSuggestInputSchema, WorkflowRunInputSchema, WorkflowStepInputSchema, WorkflowStatusInputSchema, WorkflowArtifactReadInputSchema, WorkflowRecipeOutput, WorkflowDefinitionOutput, WorkflowArtifactOutput, WorkflowListOutputSchema, WorkflowSuggestOutputSchema, WorkflowRunOutputSchema, WorkflowStepOutputSchema, WorkflowStatusOutputSchema, WorkflowArtifactReadOutputSchema, SearchSerpInputSchema, CaptureSerpSnapshotInputSchema, ScreenshotInputSchema, CaptureSerpPageSnapshotsInputSchema, ReportArtifactReadInputSchema, ReportArtifactReadOutputSchema, ListServiceConnectionsInputSchema, ListServiceConnectionsOutputSchema, TestServiceConnectionInputSchema, TestServiceConnectionOutputSchema, ReadServiceConnectionInputSchema, ReadServiceConnectionOutputSchema, MetaAdCreativeMediaInputSchema, MetaAdCreativeMediaOutputSchema, ImportServiceConnectionToMemoryInputSchema, ImportServiceConnectionToMemoryOutputSchema, DescribeServiceConnectionToolInputSchema, DescribeServiceConnectionToolOutputSchema, ConnectedDataContinuationSchema, ExportConnectedServiceDataInputSchema, ConnectedDataArtifactSchema, ExportConnectedServiceDataOutputSchema, SearchConsoleTableColumnSchema, SearchConsoleTableFilterSchema, ExportSearchConsoleTableDataInputSchema, ExportSearchConsoleTableDataOutputSchema, RenewConnectedDataExportDownloadInputSchema, RenewConnectedDataExportDownloadOutputSchema, CallServiceConnectionActionInputSchema, CallServiceConnectionActionOutputSchema, SetScheduledActionConnectionsInputSchema, SetScheduledActionConnectionsOutputSchema, SlackSendMessageInputSchema, SlackSendMessageOutputSchema, GmailSendMessageInputSchema, GmailSendMessageOutputSchema, GmailSearchContactsInputSchema, GmailSearchContactsOutputSchema, GoogleCalendarCreateEventInputSchema, GoogleCalendarCreateEventOutputSchema, ZoomCreateMeetingInputSchema, ZoomCreateMeetingOutputSchema;
 var init_mcp_tool_schemas = __esm({
   "src/mcp/mcp-tool-schemas.ts"() {
     "use strict";
@@ -52444,7 +52476,7 @@ var init_mcp_tool_schemas = __esm({
       idOrSlug: import_zod45.z.string().trim().min(1).max(180).describe("Transparent Commons TPW-Q entity id or /wiki/ slug whose governed RFC 9264 linkset should be read.")
     };
     CommonsFeaturedImageInputSchema = import_zod45.z.object({
-      url: import_zod45.z.string().url().describe("For a publish-ready entity, use the permanent URL returned by commons_host_image. Submit can auto-host a stable direct public HTTPS image URL as a compatibility fallback, but validation reports any unregistered external URL as not ready. Do not use a chat attachment reference, caller-local path, temporary or signed URL, private URL, or HTML page URL."),
+      url: import_zod45.z.string().url().describe("For a publish-ready entity, use the permanent URL returned by commons_host_image. Validation reports any unregistered external URL as not ready. Do not use a chat attachment reference, caller-local path, private URL, or HTML page URL here; pass the original image or webpage source to commons_host_image first."),
       alt: import_zod45.z.string().trim().max(500).optional(),
       caption: import_zod45.z.string().trim().max(1e3).optional(),
       sourceUrl: import_zod45.z.string().url().optional(),
@@ -52543,7 +52575,7 @@ var init_mcp_tool_schemas = __esm({
       entityId: import_zod45.z.string().trim().max(80).optional().describe("Existing Transparent Public Wiki entity id when proposing an edit. New entities normally omit this and receive a TPW-Q id."),
       entityType: import_zod45.z.string().trim().max(120).default("PublicArticle").describe("Backend Wikidata-style type. Prefer precise entity classes such as SoftwareApplication, Organization, Person, Event, Place, Taxon, ScienceConcept, MathConcept, TechArticle, or PublicArticle; the public article structure should match the selected type."),
       disambiguationName: import_zod45.z.string().trim().max(240).optional().describe("Clarifying name used when the concept could be confused with another entity."),
-      featuredImage: CommonsFeaturedImageInputSchema.optional().describe("Required for auto-published public entities. First call commons_host_image and place its returned permanent URL here; validation does not fetch external images and reports unregistered URLs as not publishable. Submit retains a compatibility fallback that auto-hosts a stable direct public HTTPS image URL. The image is also added to the media manifest if absent."),
+      featuredImage: CommonsFeaturedImageInputSchema.optional().describe("Required for auto-published public entities. First call commons_host_image with attachment bytes, an image artifact, a direct image URL, or a webpage URL, then place its returned permanent URL here. Validation does not fetch external images and reports unregistered URLs as not publishable. Submit retains a compatibility fallback for public URLs. The image is also added to the media manifest if absent."),
       source: CommonsSourceInputSchema.optional().describe("Source provenance. Store original URL, source byline, and origin canonical here; canonical does not replace rights review."),
       tags: import_zod45.z.array(import_zod45.z.string().trim().min(1).max(80)).max(24).optional().describe("Standardized topic tags. Use existing/searchable concepts when possible."),
       keywords: import_zod45.z.array(import_zod45.z.string().trim().min(1).max(120)).max(50).optional().describe("SEO and retrieval keywords."),
@@ -52605,12 +52637,31 @@ var init_mcp_tool_schemas = __esm({
       idOrSlug: import_zod45.z.string().trim().min(1).max(180).describe("Published entity id or /wiki/ slug whose contribution ledger should be read.")
     };
     CommonsHostImageInputSchema = {
-      sourceUrl: import_zod45.z.string().url().optional().describe("Stable direct public HTTPS URL whose response is the image bytes to host. Do not pass an HTML webpage, chat attachment reference, caller-local path, temporary or signed URL, or private/authenticated URL."),
-      imageBase64: import_zod45.z.string().min(16).optional().describe("Base64 image bytes for an image you already hold, including forwarded chat attachment bytes. Prefer this over a temporary attachment URL when the serialized request remains under about 3 MB; larger files require a stable direct public HTTPS source URL."),
+      sourceUrl: import_zod45.z.string().url().optional().describe("Public HTTPS direct image URL or webpage URL. A direct image is hosted as-is; an HTML page is inspected for Open Graph, Twitter, JSON-LD, and meaningful content images, then the first usable candidate is hosted. Temporary signed URLs are consumed immediately and query credentials are not retained as provenance."),
+      imageBase64: import_zod45.z.string().min(16).optional().describe("Base64 image bytes for an image already available to the caller, including a pasted attachment or AI-generated image. Use sourceType to preserve whether it was uploaded or generated. Keep the complete serialized request within the client transport limit."),
+      artifactId: import_zod45.z.string().trim().min(1).max(500).optional().describe("Owner-scoped image artifact returned by an MCP Scraper media or screenshot workflow. The server reauthorizes ownership and reads the bytes directly; do not construct an artifact ID."),
+      sourceType: import_zod45.z.enum(["uploaded", "ai_generated"]).optional().describe("Provenance for imageBase64 or artifactId. Use ai_generated only when an image model created the supplied bytes; otherwise use uploaded or omit it."),
       alt: import_zod45.z.string().trim().max(500).optional().describe("Alt text describing the image for readers who cannot see it."),
       license: import_zod45.z.string().trim().max(240).optional().describe("License or usage terms of the original image, preserved with the hosted copy."),
       attribution: import_zod45.z.string().trim().max(500).optional().describe("Credit line for the original photographer, publication, or archive.")
     };
+    CommonsHostImageOutputSchema = {
+      ok: import_zod45.z.boolean(),
+      data: import_zod45.z.object({
+        id: import_zod45.z.string().describe("Stable Commons image ID."),
+        url: import_zod45.z.string().url().describe("Permanent Commons URL to use as featuredImage.url."),
+        contentType: import_zod45.z.enum(["image/jpeg", "image/png", "image/gif", "image/webp"]),
+        bytes: import_zod45.z.number().int().positive(),
+        digest: import_zod45.z.string(),
+        sourceUrl: import_zod45.z.string().url().nullable().describe("Sanitized direct asset URL that supplied the hosted bytes, when applicable."),
+        sourcePageUrl: import_zod45.z.string().url().nullable().describe("Sanitized webpage URL from which the image was discovered, when applicable."),
+        sourceKind: import_zod45.z.enum(["uploaded", "ai_generated", "artifact", "direct_url", "webpage", "registered"]),
+        selectionSource: import_zod45.z.enum(["provided_bytes", "artifact", "direct_url", "og:image", "twitter:image", "json-ld", "content-image", "registered"]),
+        reused: import_zod45.z.boolean().describe("True when identical image bytes were already stored.")
+      }).optional(),
+      error: import_zod45.z.string().optional(),
+      message: import_zod45.z.string().optional()
+    };
     CommonsGetProposalInputSchema = {
       proposalId: import_zod45.z.string().trim().min(1).max(120).describe("Proposal id returned by commons_submit_entity, in the form commons-proposal-<uuid>.")
     };
@@ -56597,9 +56648,9 @@ function registerPaaExtractorMcpTools(server, executor, options = {}) {
   }, async (input) => executor.commonsGetEntityLedger(input));
   server.registerTool("commons_host_image", {
     title: "Host a Transparent Commons Image",
-    description: "Normal prerequisite for any featured image whose URL was not already returned by commons_host_image. Host image bytes from imageBase64 when you already have an attachment and the serialized request stays under about 3 MB, or from a stable direct public HTTPS image URL; do not pass a webpage, caller-local path, private URL, or temporary/signed attachment URL. Returns the permanent Commons URL to place in featuredImage.url before commons_validate_entity and commons_submit_entity. Submit can still auto-host a stable public source as a compatibility fallback. JPEG, PNG, GIF, and WebP are accepted up to 10 MB; SVG is rejected. Identical bytes are stored once.",
+    description: "Turn one supplied image source into a permanent Transparent Commons image before validation and submission. Provide exactly one of imageBase64 for a pasted or AI-generated image, artifactId for an owner-scoped MCP Scraper image artifact, or sourceUrl for either a direct public HTTPS image or a webpage containing the desired image. Webpages are inspected in deterministic order for Open Graph, Twitter, JSON-LD, and meaningful content images; unusable candidates fall through to the next candidate. Returns the permanent URL for featuredImage.url plus source and selection provenance. JPEG, PNG, GIF, and WebP are accepted up to 10 MB; SVG is rejected. Identical bytes are stored once. Never pass a caller-local path or private/authenticated URL.",
     inputSchema: CommonsHostImageInputSchema,
-    outputSchema: recordOutputSchema("commons_host_image", CommonsGenericOutputSchema),
+    outputSchema: recordOutputSchema("commons_host_image", CommonsHostImageOutputSchema),
     annotations: {
       title: "Host a Transparent Commons Image",
       readOnlyHint: false,
@@ -72162,6 +72213,9 @@ async function assertPublicHttpsUrl(rawUrl) {
   if (url.protocol !== "https:") {
     throw new CommonsImageError("image_url_not_https", "Commons image sources must be https URLs.");
   }
+  if (url.username || url.password) {
+    throw new CommonsImageError("image_url_invalid", "Commons image source URLs cannot contain embedded credentials.");
+  }
   const hostname = url.hostname.replace(/^\[|\]$/g, "");
   const addresses = (0, import_node_net2.isIP)(hostname) ? [{ address: hostname }] : await (0, import_promises16.lookup)(hostname, { all: true }).catch(() => []);
   if (!addresses.length) {
@@ -72172,7 +72226,28 @@ async function assertPublicHttpsUrl(rawUrl) {
   }
   return url;
 }
-async function downloadImage(sourceUrl) {
+async function readResponseBytes(response, maxBytes) {
+  const declaredLength = Number(response.headers.get("content-length") ?? "0");
+  if (declaredLength > maxBytes) {
+    throw new CommonsImageError("image_too_large", `Source exceeds the ${maxBytes} byte limit.`, 413);
+  }
+  if (!response.body) return Buffer.alloc(0);
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > maxBytes) {
+      await reader.cancel().catch(() => void 0);
+      throw new CommonsImageError("image_too_large", `Source exceeds the ${maxBytes} byte limit.`, 413);
+    }
+    chunks.push(Buffer.from(value));
+  }
+  return Buffer.concat(chunks, total);
+}
+async function downloadPublicSource(sourceUrl) {
   let current = sourceUrl;
   for (let redirect = 0; redirect <= COMMONS_IMAGE_MAX_REDIRECTS; redirect += 1) {
     const url = await assertPublicHttpsUrl(current);
@@ -72207,15 +72282,11 @@ async function downloadImage(sourceUrl) {
         retryable
       );
     }
-    const declaredLength = Number(response.headers.get("content-length") ?? "0");
-    if (declaredLength > COMMONS_IMAGE_MAX_BYTES) {
-      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
-    }
-    const bytes = Buffer.from(await response.arrayBuffer());
-    if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
-      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
-    }
-    return bytes;
+    return {
+      bytes: await readResponseBytes(response, COMMONS_IMAGE_MAX_BYTES),
+      finalUrl: url.toString(),
+      contentType: (response.headers.get("content-type") ?? "").split(";")[0].trim().toLowerCase()
+    };
   }
   throw new CommonsImageError("image_redirect_limit", "Image source exceeded the redirect limit.");
 }
@@ -72228,6 +72299,114 @@ function decodeBase64Image(value) {
   }
   return bytes;
 }
+function safeProvenanceUrl(rawUrl) {
+  try {
+    const url = new URL(rawUrl);
+    url.username = "";
+    url.password = "";
+    url.search = "";
+    url.hash = "";
+    return url.toString();
+  } catch {
+    return null;
+  }
+}
+function looksLikeHtml(bytes, declaredType) {
+  if (declaredType === "text/html" || declaredType === "application/xhtml+xml") return true;
+  const prefix = bytes.subarray(0, 512).toString("utf8").trimStart().toLowerCase();
+  return prefix.startsWith("<!doctype html") || prefix.startsWith("<html") || prefix.startsWith("<head");
+}
+async function resolveCommonsImageSource(input) {
+  const supplied = [input.sourceUrl, input.imageBase64, input.artifactId].filter((value) => Boolean(value)).length;
+  if (supplied === 0) {
+    throw new CommonsImageError("image_source_missing", "Provide exactly one of sourceUrl, imageBase64, or artifactId.");
+  }
+  if (supplied !== 1) {
+    throw new CommonsImageError("image_source_ambiguous", "Provide only one image source: sourceUrl, imageBase64, or artifactId.");
+  }
+  if (input.sourceUrl && input.sourceType) {
+    throw new CommonsImageError("image_source_type_invalid", "sourceType applies only to imageBase64 or artifactId, not sourceUrl.");
+  }
+  if (input.imageBase64) {
+    return {
+      bytes: decodeBase64Image(input.imageBase64),
+      sourceUrl: null,
+      sourcePageUrl: null,
+      sourceKind: input.sourceType ?? "uploaded",
+      selectionSource: "provided_bytes"
+    };
+  }
+  if (input.artifactId) {
+    const bytes = await readOwnedImageSourceArtifact({ artifactId: input.artifactId, ownerId: String(input.userId) });
+    if (!bytes) {
+      throw new CommonsImageError("image_artifact_not_found", "The image artifact was not found, expired, or is not owned by this account.", 422);
+    }
+    if (bytes.length > COMMONS_IMAGE_MAX_BYTES) {
+      throw new CommonsImageError("image_too_large", `Image exceeds the ${COMMONS_IMAGE_MAX_BYTES} byte limit.`, 413);
+    }
+    return {
+      bytes,
+      sourceUrl: null,
+      sourcePageUrl: null,
+      sourceKind: input.sourceType ?? "artifact",
+      selectionSource: "artifact"
+    };
+  }
+  const requestedUrl = String(input.sourceUrl);
+  const downloaded = await downloadPublicSource(requestedUrl);
+  if (sniffImageFormat(downloaded.bytes)) {
+    return {
+      bytes: downloaded.bytes,
+      sourceUrl: safeProvenanceUrl(downloaded.finalUrl),
+      sourcePageUrl: null,
+      sourceKind: "direct_url",
+      selectionSource: "direct_url"
+    };
+  }
+  if (!looksLikeHtml(downloaded.bytes, downloaded.contentType)) {
+    throw new CommonsImageError(
+      "image_format_unsupported",
+      "The supplied URL returned neither a supported image nor an HTML webpage with a discoverable image.",
+      415
+    );
+  }
+  if (downloaded.bytes.length > COMMONS_IMAGE_PAGE_MAX_BYTES) {
+    throw new CommonsImageError("image_page_too_large", `Webpage exceeds the ${COMMONS_IMAGE_PAGE_MAX_BYTES} byte discovery limit.`, 413);
+  }
+  const html = downloaded.bytes.toString("utf8");
+  const document2 = loadHtmlDocument(html);
+  const candidates = resolveFeaturedImageCandidates({
+    html,
+    meta: document2.meta,
+    schema: document2.schema,
+    pageUrl: downloaded.finalUrl
+  }).slice(0, COMMONS_IMAGE_MAX_PAGE_CANDIDATES);
+  if (!candidates.length) {
+    throw new CommonsImageError("page_image_not_found", "The webpage did not expose a usable featured or content image.", 422);
+  }
+  let sawRetryableFailure = false;
+  for (const candidate of candidates) {
+    try {
+      const image = await downloadPublicSource(candidate.url);
+      if (!sniffImageFormat(image.bytes)) continue;
+      return {
+        bytes: image.bytes,
+        sourceUrl: safeProvenanceUrl(image.finalUrl),
+        sourcePageUrl: safeProvenanceUrl(downloaded.finalUrl),
+        sourceKind: "webpage",
+        selectionSource: candidate.source
+      };
+    } catch (error) {
+      if (error instanceof CommonsImageError && error.retryable) sawRetryableFailure = true;
+    }
+  }
+  throw new CommonsImageError(
+    "page_image_candidates_unusable",
+    "The webpage exposed image candidates, but none returned supported public image bytes.",
+    422,
+    sawRetryableFailure
+  );
+}
 function commonsImageBlobStore() {
   const token6 = process.env.COMMONS_IMAGE_READ_WRITE_TOKEN?.trim() || process.env.COMMONS_IMAGE_BLOB_READ_WRITE_TOKEN?.trim() || process.env.BLOB_READ_WRITE_TOKEN?.trim();
   return token6 ? new VercelBlobStore(token6) : getBlobStore();
@@ -72259,16 +72438,21 @@ async function findCommonsHostedImageByUrl(rawUrl) {
     bytes: Number(row.bytes),
     digest: String(row.digest),
     sourceUrl: row.source_url ? String(row.source_url) : null,
+    sourcePageUrl: null,
+    sourceKind: "registered",
+    selectionSource: "registered",
     reused: true
   };
 }
 async function hostCommonsImage(input) {
   if (hostOverride) return hostOverride(input);
   await ensureCommonsImageSchema();
-  if (!input.sourceUrl && !input.imageBase64) {
-    throw new CommonsImageError("image_source_missing", "Provide either sourceUrl or imageBase64.");
+  if (input.sourceUrl && !input.imageBase64 && !input.artifactId && !input.sourceType) {
+    const registered6 = await findCommonsHostedImageByUrl(input.sourceUrl);
+    if (registered6) return registered6;
   }
-  const bytes = input.imageBase64 ? decodeBase64Image(input.imageBase64) : await downloadImage(String(input.sourceUrl));
+  const resolved = await resolveCommonsImageSource(input);
+  const bytes = resolved.bytes;
   const contentType = sniffImageFormat(bytes);
   if (!contentType) {
     throw new CommonsImageError(
@@ -72290,7 +72474,10 @@ async function hostCommonsImage(input) {
       contentType: String(reusable.content_type),
       bytes: Number(reusable.bytes),
       digest: digest2,
-      sourceUrl: reusable.source_url ? String(reusable.source_url) : null,
+      sourceUrl: resolved.sourceUrl,
+      sourcePageUrl: resolved.sourcePageUrl,
+      sourceKind: resolved.sourceKind,
+      selectionSource: resolved.selectionSource,
       reused: true
     };
   }
@@ -72319,14 +72506,25 @@ async function hostCommonsImage(input) {
       stored.url,
       contentType,
       bytes.length,
-      input.sourceUrl ?? null,
+      resolved.sourceUrl,
       input.alt ?? null,
       input.license ?? null,
       input.attribution ?? null,
       (/* @__PURE__ */ new Date()).toISOString()
     ]
   });
-  return { id, url: stored.url, contentType, bytes: bytes.length, digest: digest2, sourceUrl: input.sourceUrl ?? null, reused: false };
+  return {
+    id,
+    url: stored.url,
+    contentType,
+    bytes: bytes.length,
+    digest: digest2,
+    sourceUrl: resolved.sourceUrl,
+    sourcePageUrl: resolved.sourcePageUrl,
+    sourceKind: resolved.sourceKind,
+    selectionSource: resolved.selectionSource,
+    reused: false
+  };
 }
 async function hostEntityImages(input) {
   const rewrite = { mediaUrls: /* @__PURE__ */ new Map(), dropped: [] };
@@ -72368,7 +72566,7 @@ async function hostEntityImages(input) {
   }
   return rewrite;
 }
-var import_node_crypto46, import_promises16, import_node_net2, COMMONS_IMAGE_MAX_BYTES, COMMONS_IMAGE_MAX_REDIRECTS, COMMONS_IMAGE_FETCH_TIMEOUT_MS, COMMONS_IMAGE_RETRY_GUIDANCE, CommonsImageError, imageSchemaReady, imageSchemaDb, hostOverride;
+var import_node_crypto46, import_promises16, import_node_net2, COMMONS_IMAGE_MAX_BYTES, COMMONS_IMAGE_MAX_REDIRECTS, COMMONS_IMAGE_FETCH_TIMEOUT_MS, COMMONS_IMAGE_PAGE_MAX_BYTES, COMMONS_IMAGE_MAX_PAGE_CANDIDATES, COMMONS_IMAGE_RETRY_GUIDANCE, CommonsImageError, imageSchemaReady, imageSchemaDb, hostOverride;
 var init_commons_image_store = __esm({
   "src/api/commons-image-store.ts"() {
     "use strict";
@@ -72377,10 +72575,15 @@ var init_commons_image_store = __esm({
     import_node_net2 = require("net");
     init_blob_store();
     init_db();
+    init_image_source_artifacts();
+    init_html_document();
+    init_wayback();
     COMMONS_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
     COMMONS_IMAGE_MAX_REDIRECTS = 3;
     COMMONS_IMAGE_FETCH_TIMEOUT_MS = 2e4;
-    COMMONS_IMAGE_RETRY_GUIDANCE = "Call commons_host_image with a different stable public HTTPS image URL or imageBase64, replace featuredImage.url with the returned URL, validate again, then retry commons_submit_entity with the same idempotency key.";
+    COMMONS_IMAGE_PAGE_MAX_BYTES = 2 * 1024 * 1024;
+    COMMONS_IMAGE_MAX_PAGE_CANDIDATES = 12;
+    COMMONS_IMAGE_RETRY_GUIDANCE = "Call commons_host_image with imageBase64, an owner-authorized artifactId, a public HTTPS image URL, or a public HTTPS webpage containing a usable featured image. Replace featuredImage.url with the returned permanent URL, validate again, then retry commons_submit_entity with the same idempotency key.";
     CommonsImageError = class extends Error {
       constructor(code, message, httpStatus = 400, retryable = false, retryGuidance = COMMONS_IMAGE_RETRY_GUIDANCE) {
         super(message);
@@ -75926,11 +76129,13 @@ var init_commons_routes = __esm({
     HostImageSchema = import_zod54.z.object({
       sourceUrl: import_zod54.z.string().url().optional(),
       imageBase64: import_zod54.z.string().min(16).optional(),
+      artifactId: import_zod54.z.string().min(1).max(500).optional(),
+      sourceType: import_zod54.z.enum(["uploaded", "ai_generated"]).optional(),
       alt: import_zod54.z.string().max(500).optional(),
       license: import_zod54.z.string().max(240).optional(),
       attribution: import_zod54.z.string().max(500).optional()
-    }).strict().refine((body) => Boolean(body.sourceUrl || body.imageBase64), {
-      message: "Provide either sourceUrl or imageBase64."
+    }).strict().refine((body) => [body.sourceUrl, body.imageBase64, body.artifactId].filter(Boolean).length === 1, {
+      message: "Provide exactly one of sourceUrl, imageBase64, or artifactId."
     });
     commonsApp.post("/images", auth2, async (c) => {
       const parsed = HostImageSchema.safeParse(await c.req.json().catch(() => ({})));

package/dist/bin/api-server.js

@@ -17,9 +17,9 @@ loadDotEnv();
 async function main() {
   const [{ serve }, { app }, { startWorker }, { migrate }] = await Promise.all([
     import("@hono/node-server"),
-    import("../server-KSVJ4X4V.js"),
-    import("../worker-IBLGV272.js"),
-    import("../db-MNNNIWVS.js")
+    import("../server-MFVYRB6I.js"),
+    import("../worker-JGWV2LID.js"),
+    import("../db-ZGZAKYBW.js")
   ]);
   const PORT = parseInt(process.env.PORT ?? "3001");
   try {

package/dist/bin/mcp-scraper-cli.cjs

@@ -30,7 +30,7 @@ var import_promises5 = require("fs/promises");
 var import_node_path3 = require("path");
 
 // src/version.ts
-var PACKAGE_VERSION = "0.66.7";
+var PACKAGE_VERSION = "0.67.0";
 
 // src/cli/agent-config.ts
 function apiKeyValue(options) {

package/dist/bin/mcp-scraper-cli.js

@@ -13,7 +13,7 @@ import "../chunk-VXLU74YZ.js";
 import "../chunk-GGZEC22A.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-7KB5QTHP.js";
+} from "../chunk-GT63KEUB.js";
 
 // src/cli/human-cli.ts
 import { Command } from "commander";

package/dist/bin/mcp-scraper-install.cjs

@@ -3,7 +3,7 @@
 
 // release-message.json
 var release_message_default = {
-  message: "Transparent Commons now verifies featured-image readiness before publishing, and replacement integration connections keep their paid period."
+  message: "Transparent Commons can now turn pasted images, generated image bytes, stored image artifacts, direct image URLs, or ordinary webpage URLs into one permanent Commons-hosted image before validation and publishing."
 };
 
 // src/install-terminal.ts
@@ -112,7 +112,7 @@ function renderInstallTerminal(options) {
 }
 
 // src/version.ts
-var PACKAGE_VERSION = "0.66.7";
+var PACKAGE_VERSION = "0.67.0";
 
 // bin/mcp-scraper-install.ts
 var noColor = process.argv.includes("--no-color") || process.env.NO_COLOR !== void 0 || process.env.FORCE_COLOR === "0" || !process.stdout.isTTY;

package/dist/bin/mcp-scraper-install.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   renderInstallTerminal
-} from "../chunk-O7ZC5Y3Z.js";
+} from "../chunk-IHDTONZV.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-7KB5QTHP.js";
+} from "../chunk-GT63KEUB.js";
 
 // bin/mcp-scraper-install.ts
 var noColor = process.argv.includes("--no-color") || process.env.NO_COLOR !== void 0 || process.env.FORCE_COLOR === "0" || !process.stdout.isTTY;