mcp-scraper 0.69.0 → 0.72.0

package/dist/{chunk-KO5CK5ZT.js → chunk-SR7GSLEA.js}

@@ -1,46 +1,12 @@
 import {
-  getDb,
-  getUserByEmail
-} from "./chunk-65FTMB7G.js";
+  getSessionSecret,
+  serviceConnectionAdvertisesAction
+} from "./chunk-PJEEKOUM.js";
 
 // src/api/analytics-repository.ts
-import { createHash, createHmac as createHmac2, randomBytes, randomUUID as randomUUID2 } from "crypto";
+import { createHash, createHmac, randomBytes, randomUUID } from "crypto";
 import { Pool } from "pg";
 
-// src/api/session.ts
-import { createHmac, timingSafeEqual } from "crypto";
-var isProduction = () => process.env.NODE_ENV === "production" || process.env.VERCEL === "1";
-function getSessionSecret() {
-  const configured = process.env.SESSION_SECRET?.trim();
-  if (configured) return configured;
-  if (isProduction()) throw new Error("SESSION_SECRET is not set \u2014 add it to your Vercel env vars (see src/api/env.ts)");
-  return "dev-secret-change-me";
-}
-var secret = () => getSessionSecret();
-function safeEqualHex(a, b) {
-  if (a.length !== b.length) return false;
-  try {
-    return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
-  } catch {
-    return false;
-  }
-}
-function signSession(userId) {
-  const payload = String(userId);
-  const sig = createHmac("sha256", secret()).update(payload).digest("hex");
-  return `${payload}.${sig}`;
-}
-function verifySession(token) {
-  const dot = token.lastIndexOf(".");
-  if (dot === -1) return null;
-  const payload = token.slice(0, dot);
-  const sig = token.slice(dot + 1);
-  const expected = createHmac("sha256", secret()).update(payload).digest("hex");
-  if (!safeEqualHex(sig, expected)) return null;
-  const id = parseInt(payload);
-  return isNaN(id) ? null : id;
-}
-
 // src/api/analytics-attribution.ts
 var aliases = [
   [/perplexity/i, "llm", "Perplexity"],
@@ -116,353 +82,6 @@ function resolveAnalyticsAttribution(input) {
   };
 }
 
-// src/api/service-connections.ts
-import { randomUUID } from "crypto";
-function serviceConnectionAdvertisesAction(connection, providerConfigKeys, actionName) {
-  return connection.lifecycleStatus === "connected" && connection.actionsEnabled && providerConfigKeys.includes(connection.providerConfigKey) && connection.actionTools.includes(actionName);
-}
-var schemaReady = null;
-var schemaDb = null;
-function ensureServiceConnectionsSchema() {
-  const currentDb = getDb();
-  if (schemaReady && schemaDb === currentDb) return schemaReady;
-  schemaDb = currentDb;
-  schemaReady = (async () => {
-    const db = currentDb;
-    await db.execute(`
-      CREATE TABLE IF NOT EXISTS service_connections (
-        id                         TEXT PRIMARY KEY,
-        user_id                    INTEGER NOT NULL REFERENCES users(id),
-        provider_config_key        TEXT NOT NULL,
-        provider                   TEXT,
-        transport                  TEXT NOT NULL,
-        upstream_connection_id     TEXT,
-        label                      TEXT,
-        user_label                 TEXT,
-        provider_account_id        TEXT,
-        provider_account_email     TEXT,
-        provider_account_name      TEXT,
-        provider_identity_checked_at TEXT,
-        provider_identity_source_updated_at TEXT,
-        lifecycle_status           TEXT NOT NULL DEFAULT 'pending',
-        operational_status         TEXT NOT NULL DEFAULT 'unknown',
-        reconnect_required         INTEGER NOT NULL DEFAULT 0,
-        actions_enabled            INTEGER NOT NULL DEFAULT 0,
-        read_tools_json            TEXT NOT NULL DEFAULT '[]',
-        action_tools_json          TEXT NOT NULL DEFAULT '[]',
-        tool_revision              TEXT,
-        last_checked_at            TEXT,
-        last_successful_call_at    TEXT,
-        last_failure_at            TEXT,
-        last_failure_code          TEXT,
-        last_failure_retryable     INTEGER,
-        consecutive_failures       INTEGER NOT NULL DEFAULT 0,
-        vault_name                 TEXT,
-        table_name                 TEXT,
-        legacy_owner_identity      TEXT,
-        created_at                 TEXT NOT NULL DEFAULT (datetime('now')),
-        updated_at                 TEXT NOT NULL DEFAULT (datetime('now')),
-        UNIQUE(user_id, provider_config_key, upstream_connection_id)
-      )
-    `);
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN user_label TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN provider_account_id TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN provider_account_email TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN provider_account_name TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN provider_identity_checked_at TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connections ADD COLUMN provider_identity_source_updated_at TEXT`);
-    } catch {
-    }
-    await db.execute(`CREATE INDEX IF NOT EXISTS service_connections_user_updated ON service_connections(user_id, updated_at DESC)`);
-    await db.execute(`CREATE INDEX IF NOT EXISTS service_connections_upstream ON service_connections(provider_config_key, upstream_connection_id)`);
-    await db.execute(`
-      CREATE TABLE IF NOT EXISTS service_connection_health_events (
-        id                    TEXT PRIMARY KEY,
-        connection_id         TEXT NOT NULL REFERENCES service_connections(id) ON DELETE CASCADE,
-        operational_status    TEXT NOT NULL,
-        failure_code          TEXT,
-        retryable             INTEGER,
-        evidence_source       TEXT NOT NULL,
-        created_at            TEXT NOT NULL DEFAULT (datetime('now'))
-      )
-    `);
-    await db.execute(`CREATE INDEX IF NOT EXISTS service_connection_health_events_connection ON service_connection_health_events(connection_id, created_at DESC)`);
-    await db.execute(`
-      CREATE TABLE IF NOT EXISTS service_connection_action_audit (
-        id                    TEXT PRIMARY KEY,
-        connection_id         TEXT NOT NULL REFERENCES service_connections(id) ON DELETE CASCADE,
-        user_id               INTEGER NOT NULL REFERENCES users(id),
-        tool                  TEXT NOT NULL,
-        request_id            TEXT NOT NULL,
-        status                TEXT NOT NULL,
-        error_code            TEXT,
-        created_at            TEXT NOT NULL DEFAULT (datetime('now')),
-        UNIQUE(user_id, request_id)
-      )
-    `);
-    try {
-      await db.execute(`ALTER TABLE service_connection_action_audit ADD COLUMN request_digest TEXT`);
-    } catch {
-    }
-    try {
-      await db.execute(`ALTER TABLE service_connection_action_audit ADD COLUMN result_json TEXT`);
-    } catch {
-    }
-  })().catch((error) => {
-    schemaReady = null;
-    schemaDb = null;
-    throw error;
-  });
-  return schemaReady;
-}
-function parseTools(value) {
-  if (typeof value !== "string") return [];
-  try {
-    const parsed = JSON.parse(value);
-    return Array.isArray(parsed) ? parsed.filter((item) => typeof item === "string") : [];
-  } catch {
-    return [];
-  }
-}
-function rowToRecord(row) {
-  return {
-    id: String(row.id),
-    userId: Number(row.user_id),
-    providerConfigKey: String(row.provider_config_key),
-    provider: typeof row.provider === "string" ? row.provider : null,
-    transport: row.transport === "remote_mcp" ? "remote_mcp" : "nango",
-    upstreamConnectionId: typeof row.upstream_connection_id === "string" ? row.upstream_connection_id : null,
-    label: typeof row.label === "string" ? row.label : null,
-    userLabel: typeof row.user_label === "string" ? row.user_label : null,
-    providerAccountId: typeof row.provider_account_id === "string" ? row.provider_account_id : null,
-    providerAccountEmail: typeof row.provider_account_email === "string" ? row.provider_account_email : null,
-    providerAccountName: typeof row.provider_account_name === "string" ? row.provider_account_name : null,
-    providerIdentityCheckedAt: typeof row.provider_identity_checked_at === "string" ? row.provider_identity_checked_at : null,
-    providerIdentitySourceUpdatedAt: typeof row.provider_identity_source_updated_at === "string" ? row.provider_identity_source_updated_at : null,
-    lifecycleStatus: String(row.lifecycle_status),
-    operationalStatus: String(row.operational_status),
-    reconnectRequired: Number(row.reconnect_required) === 1,
-    actionsEnabled: Number(row.actions_enabled) === 1,
-    readTools: parseTools(row.read_tools_json),
-    actionTools: parseTools(row.action_tools_json),
-    toolRevision: typeof row.tool_revision === "string" ? row.tool_revision : null,
-    lastCheckedAt: typeof row.last_checked_at === "string" ? row.last_checked_at : null,
-    lastSuccessfulCallAt: typeof row.last_successful_call_at === "string" ? row.last_successful_call_at : null,
-    lastFailureAt: typeof row.last_failure_at === "string" ? row.last_failure_at : null,
-    lastFailureCode: typeof row.last_failure_code === "string" ? row.last_failure_code : null,
-    lastFailureRetryable: row.last_failure_retryable === null || row.last_failure_retryable === void 0 ? null : Number(row.last_failure_retryable) === 1,
-    consecutiveFailures: Number(row.consecutive_failures ?? 0),
-    vaultName: typeof row.vault_name === "string" ? row.vault_name : null,
-    tableName: typeof row.table_name === "string" ? row.table_name : null,
-    createdAt: String(row.created_at),
-    updatedAt: String(row.updated_at)
-  };
-}
-async function userIdForIdentity(identity) {
-  const user = await getUserByEmail(identity.normalize("NFKC").trim().toLowerCase());
-  if (!user) throw new Error("service_connection_user_not_found");
-  return Number(user.id);
-}
-async function reconcileDiscoveredNangoConnections(identity, discovered) {
-  await ensureServiceConnectionsSchema();
-  const db = getDb();
-  const userId = await userIdForIdentity(identity);
-  for (const connection of discovered) {
-    await db.execute({
-      sql: `
-        INSERT INTO service_connections (
-          id, user_id, provider_config_key, provider, transport, upstream_connection_id,
-          label, lifecycle_status, reconnect_required, actions_enabled, legacy_owner_identity, created_at, updated_at
-        ) VALUES (?, ?, ?, ?, 'nango', ?, ?, ?, ?, 1, ?, COALESCE(?, datetime('now')), COALESCE(?, datetime('now')))
-        ON CONFLICT(user_id, provider_config_key, upstream_connection_id) DO UPDATE SET
-          provider = excluded.provider,
-          label = COALESCE(excluded.label, service_connections.label),
-          lifecycle_status = excluded.lifecycle_status,
-          reconnect_required = excluded.reconnect_required,
-          updated_at = excluded.updated_at
-      `,
-      args: [
-        randomUUID(),
-        userId,
-        connection.providerConfigKey,
-        connection.provider,
-        connection.upstreamConnectionId,
-        connection.label,
-        connection.lifecycleStatus,
-        connection.reconnectRequired ? 1 : 0,
-        identity,
-        connection.createdAt,
-        connection.updatedAt
-      ]
-    });
-  }
-  return listServiceConnections(identity, "nango");
-}
-async function listServiceConnections(identity, transport) {
-  await ensureServiceConnectionsSchema();
-  const userId = await userIdForIdentity(identity);
-  const result = await getDb().execute({
-    sql: `SELECT * FROM service_connections WHERE user_id = ?${transport ? " AND transport = ?" : ""} AND lifecycle_status <> 'disconnected' ORDER BY updated_at DESC`,
-    args: transport ? [userId, transport] : [userId]
-  });
-  return result.rows.map((row) => rowToRecord(row));
-}
-async function getOwnedServiceConnection(identity, connectionId) {
-  await ensureServiceConnectionsSchema();
-  const userId = await userIdForIdentity(identity);
-  const result = await getDb().execute({
-    sql: "SELECT * FROM service_connections WHERE id = ? AND user_id = ? LIMIT 1",
-    args: [connectionId, userId]
-  });
-  const row = result.rows[0];
-  return row ? rowToRecord(row) : null;
-}
-async function updateServiceConnectionTools(connectionId, readTools, actionTools, toolRevision) {
-  await ensureServiceConnectionsSchema();
-  await getDb().execute({
-    sql: `UPDATE service_connections SET read_tools_json = ?, action_tools_json = ?, tool_revision = ?, updated_at = datetime('now') WHERE id = ?`,
-    args: [JSON.stringify(readTools), JSON.stringify(actionTools), toolRevision, connectionId]
-  });
-}
-async function setServiceConnectionProviderIdentity(args) {
-  await ensureServiceConnectionsSchema();
-  await getDb().execute({
-    sql: `
-      UPDATE service_connections SET
-        provider_account_id = ?, provider_account_email = ?, provider_account_name = ?,
-        provider_identity_checked_at = datetime('now'), provider_identity_source_updated_at = ?,
-        updated_at = datetime('now')
-      WHERE id = ?
-    `,
-    args: [
-      args.providerAccountId ?? null,
-      args.providerAccountEmail?.toLowerCase() ?? null,
-      args.providerAccountName ?? null,
-      args.sourceUpdatedAt,
-      args.connectionId
-    ]
-  });
-}
-async function setServiceConnectionUserLabel(identity, connectionId, userLabel) {
-  const connection = await getOwnedServiceConnection(identity, connectionId);
-  if (!connection || connection.lifecycleStatus === "disconnected") throw new Error("service_connection_not_found");
-  await getDb().execute({
-    sql: `UPDATE service_connections SET user_label = ?, updated_at = datetime('now') WHERE id = ? AND user_id = ?`,
-    args: [userLabel, connectionId, connection.userId]
-  });
-  return userLabel;
-}
-async function recordServiceConnectionHealth(args) {
-  await ensureServiceConnectionsSchema();
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  await getDb().execute({
-    sql: `
-      UPDATE service_connections SET
-        operational_status = ?, last_checked_at = ?,
-        last_successful_call_at = CASE WHEN ? = 'available' THEN ? ELSE last_successful_call_at END,
-        last_failure_at = CASE WHEN ? IN ('degraded', 'unavailable') THEN ? ELSE NULL END,
-        last_failure_code = ?, last_failure_retryable = ?,
-        consecutive_failures = CASE WHEN ? = 'available' THEN 0 ELSE consecutive_failures + 1 END,
-        updated_at = datetime('now')
-      WHERE id = ?
-    `,
-    args: [
-      args.operationalStatus,
-      now,
-      args.operationalStatus,
-      now,
-      args.operationalStatus,
-      now,
-      args.failureCode ?? null,
-      args.retryable == null ? null : args.retryable ? 1 : 0,
-      args.operationalStatus,
-      args.connectionId
-    ]
-  });
-  await getDb().execute({
-    sql: `INSERT INTO service_connection_health_events (id, connection_id, operational_status, failure_code, retryable, evidence_source) VALUES (?, ?, ?, ?, ?, ?)`,
-    args: [randomUUID(), args.connectionId, args.operationalStatus, args.failureCode ?? null, args.retryable == null ? null : args.retryable ? 1 : 0, args.evidenceSource]
-  });
-}
-async function setServiceConnectionActions(identity, connectionId, enabled) {
-  const connection = await getOwnedServiceConnection(identity, connectionId);
-  if (!connection || connection.lifecycleStatus === "disconnected") throw new Error("service_connection_not_found");
-  await getDb().execute({
-    sql: `UPDATE service_connections SET actions_enabled = ?, updated_at = datetime('now') WHERE id = ? AND user_id = ?`,
-    args: [enabled ? 1 : 0, connectionId, connection.userId]
-  });
-  return enabled;
-}
-async function markServiceConnectionDisconnected(identity, connectionId) {
-  const connection = await getOwnedServiceConnection(identity, connectionId);
-  if (!connection) throw new Error("service_connection_not_found");
-  await getDb().execute({
-    sql: `UPDATE service_connections SET lifecycle_status = 'disconnected', operational_status = 'unknown', reconnect_required = 0, updated_at = datetime('now') WHERE id = ? AND user_id = ?`,
-    args: [connectionId, connection.userId]
-  });
-  const remaining = await getDb().execute({
-    sql: `SELECT COUNT(*) AS count FROM service_connections WHERE user_id = ? AND transport = 'nango' AND lifecycle_status = 'connected'`,
-    args: [connection.userId]
-  });
-  return Number(remaining.rows[0]?.count ?? 0);
-}
-async function recordServiceConnectionAction(args) {
-  await ensureServiceConnectionsSchema();
-  const connection = await getOwnedServiceConnection(args.identity, args.connectionId);
-  if (!connection) throw new Error("service_connection_not_found");
-  await getDb().execute({
-    sql: `UPDATE service_connection_action_audit SET status = ?, error_code = ?, result_json = ? WHERE user_id = ? AND request_id = ? AND connection_id = ?`,
-    args: [args.status, args.errorCode ?? null, args.result === void 0 ? null : JSON.stringify(args.result), connection.userId, args.requestId, connection.id]
-  });
-}
-async function claimServiceConnectionAction(args) {
-  await ensureServiceConnectionsSchema();
-  const connection = await getOwnedServiceConnection(args.identity, args.connectionId);
-  if (!connection) throw new Error("service_connection_not_found");
-  const inserted = await getDb().execute({
-    sql: `INSERT OR IGNORE INTO service_connection_action_audit (id, connection_id, user_id, tool, request_id, status, request_digest) VALUES (?, ?, ?, ?, ?, 'started', ?)`,
-    args: [randomUUID(), connection.id, connection.userId, args.tool, args.requestId, args.requestDigest]
-  });
-  if (Number(inserted.rowsAffected ?? 0) === 1) return { claimed: true };
-  const existing = await getDb().execute({
-    sql: `SELECT connection_id, tool, status, error_code, request_digest, result_json FROM service_connection_action_audit WHERE user_id = ? AND request_id = ? LIMIT 1`,
-    args: [connection.userId, args.requestId]
-  });
-  const row = existing.rows[0];
-  const conflict = String(row?.connection_id ?? "") !== connection.id || String(row?.tool ?? "") !== args.tool || String(row?.request_digest ?? "") !== args.requestDigest;
-  let result = void 0;
-  if (!conflict && typeof row?.result_json === "string") {
-    try {
-      result = JSON.parse(row.result_json);
-    } catch {
-      result = void 0;
-    }
-  }
-  return {
-    claimed: false,
-    status: String(row?.status ?? "unknown"),
-    errorCode: typeof row?.error_code === "string" ? row.error_code : null,
-    conflict,
-    ...result !== void 0 ? { result } : {}
-  };
-}
-
 // src/api/analytics-provider-registry.ts
 var META_ACTION_SOURCES = /* @__PURE__ */ new Set([
   "email",
@@ -2237,6 +1856,144 @@ async function migrateAnalytics() {
         occurred_at timestamptz NOT NULL DEFAULT now()
       )
     `);
+    await client.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS public_plan_id text");
+    await client.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS schema_fingerprint text");
+    await client.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS request_fingerprint text");
+    await client.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS approved_field_ids jsonb NOT NULL DEFAULT '[]'::jsonb");
+    await client.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS public_receipt_id text");
+    await client.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS receipt jsonb NOT NULL DEFAULT '{}'::jsonb");
+    await client.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_plan_public_scope ON analytics_crm_provisioning_plans(site_id, public_plan_id) WHERE public_plan_id IS NOT NULL");
+    await client.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_receipt_public_id ON analytics_crm_provisioning_receipts(public_receipt_id) WHERE public_receipt_id IS NOT NULL");
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_connection_capabilities (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL DEFAULT 1 CHECK (contract_version > 0),
+        mode text NOT NULL CHECK (mode IN ('incremental_and_webhook','incremental_only','webhook_only','manual_backfill','unavailable')),
+        schema_fingerprint text,
+        allowed_operations jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evidence jsonb NOT NULL,
+        verified_at timestamptz NOT NULL,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(connection_id, contract_version),
+        UNIQUE(site_id, connection_id, provider, contract_version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_runs (
+        sync_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        mode text NOT NULL CHECK (mode IN ('initial','incremental','webhook')),
+        state text NOT NULL DEFAULT 'queued' CHECK (state IN ('queued','running','completed','degraded','cancelled','webhook_only')),
+        mapping jsonb NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        capability_evidence jsonb NOT NULL DEFAULT '{}'::jsonb,
+        cursor jsonb,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        last_started_at timestamptz,
+        last_success_at timestamptz,
+        next_run_at timestamptz,
+        imported integer NOT NULL DEFAULT 0 CHECK (imported >= 0),
+        deduplicated integer NOT NULL DEFAULT 0 CHECK (deduplicated >= 0),
+        rejected integer NOT NULL DEFAULT 0 CHECK (rejected >= 0),
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, idempotency_key)
+      )
+    `);
+    await client.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_runs_due ON analytics_crm_sync_runs(state, next_run_at) WHERE next_run_at IS NOT NULL");
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_policies (
+        policy_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        enabled boolean NOT NULL DEFAULT false,
+        version integer NOT NULL CHECK (version > 0),
+        provisioning_receipt_id text NOT NULL,
+        schema_fingerprint text NOT NULL,
+        mapping_version integer CHECK (mapping_version > 0),
+        mapping jsonb,
+        allowed_fields jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(allowed_fields) = 'array'),
+        selected_events jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(selected_events) = 'array'),
+        purpose text NOT NULL CHECK (purpose IN ('necessary_form_fulfillment','site_analytics','advertising_measurement')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, connection_id, kind, version),
+        CHECK ((kind='person_summary' AND mapping_version IS NULL AND mapping IS NULL) OR
+               (kind='pipeline_event' AND mapping_version IS NOT NULL AND mapping IS NOT NULL))
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_jobs (
+        job_id text PRIMARY KEY,
+        policy_id text NOT NULL REFERENCES analytics_crm_outbound_policies(policy_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        state text NOT NULL DEFAULT 'pending' CHECK (state IN ('pending','running','retrying','delivered','dead_letter','cancelled')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        mapping_version integer CHECK (mapping_version > 0),
+        source_event_id text,
+        payload_ciphertext text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+        max_attempts integer NOT NULL DEFAULT 5 CHECK (max_attempts BETWEEN 1 AND 20),
+        next_attempt_at timestamptz,
+        lease_expires_at timestamptz,
+        safe_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        cancelled_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_attempts (
+        id uuid PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        attempt integer NOT NULL CHECK (attempt > 0),
+        status text NOT NULL CHECK (status IN ('started','accepted','retrying','failed','cancelled')),
+        safe_error_code text,
+        started_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(job_id, attempt)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_receipts (
+        receipt_id text PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        external_receipt_id text,
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_worker_state (
+        worker_key text PRIMARY KEY,
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        last_claimed integer NOT NULL DEFAULT 0,
+        last_remaining_due integer NOT NULL DEFAULT 0,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_due ON analytics_crm_outbound_jobs(state,next_attempt_at) WHERE state IN ('pending','retrying')");
+    await client.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_person ON analytics_crm_outbound_jobs(site_id,person_id,created_at DESC)");
+    await client.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_receipts_job ON analytics_crm_outbound_receipts(job_id,occurred_at DESC)");
     await client.query(`
       CREATE TABLE IF NOT EXISTS analytics_score_definitions (
         id uuid PRIMARY KEY,
@@ -2559,7 +2316,7 @@ async function requireAnalyticsEditor(client, siteId, userId) {
 async function createAnalyticsSite(input) {
   const db = getAnalyticsPool();
   const client = await db.connect();
-  const id = randomUUID2();
+  const id = randomUUID();
   const baseSlug = normalizeSlug(input.slug || input.name);
   try {
     await client.query("BEGIN");
@@ -2790,7 +2547,7 @@ async function createAnalyticsPixel(input) {
      VALUES ($1, $2, $3, $4, $5)
      RETURNING id, site_id, public_id, name, environment, status, created_at::text, NULL::text AS last_event_at`,
     [
-      randomUUID2(),
+      randomUUID(),
       input.siteId,
       publicPixelId(),
       input.name.trim(),
@@ -2867,7 +2624,7 @@ async function setAnalyticsPixelDomainState(input) {
      SELECT $1, p.id, $4, $5 FROM analytics_pixels p WHERE p.id = $2 AND p.site_id = $3
      ON CONFLICT(pixel_id, hostname) DO UPDATE SET state = EXCLUDED.state, updated_at = now()
      RETURNING id`,
-    [randomUUID2(), input.pixelId, input.siteId, hostname, input.state]
+    [randomUUID(), input.pixelId, input.siteId, hostname, input.state]
   );
   if (!result.rowCount)
     throw new AnalyticsRepositoryError(
@@ -2909,7 +2666,7 @@ async function upsertAnalyticsHostGroup(input) {
        ON CONFLICT(pixel_id, name) DO UPDATE SET
          auto_decorate=EXCLUDED.auto_decorate, updated_at=now()
        RETURNING id`,
-      [randomUUID2(), input.siteId, input.pixelId, input.name.trim().slice(0, 120), Boolean(input.autoDecorate)]
+      [randomUUID(), input.siteId, input.pixelId, input.name.trim().slice(0, 120), Boolean(input.autoDecorate)]
     );
     await client.query("DELETE FROM analytics_host_group_members WHERE group_id=$1", [group.rows[0].id]);
     for (const hostname of hostnames)
@@ -2992,7 +2749,7 @@ async function prepareAnalyticsLinkerIssue(input) {
        VALUES ($1,$2,'visitor_id',$3)
        ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at=now()
        RETURNING id`,
-      [randomUUID2(), siteId, identityHmac("visitor_id", input.visitorId)]
+      [randomUUID(), siteId, identityHmac("visitor_id", input.visitorId)]
     );
     const existingPerson = await client.query(
       `SELECT person_id FROM analytics_identity_edges
@@ -3005,17 +2762,17 @@ async function prepareAnalyticsLinkerIssue(input) {
       const person = await client.query(
         `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
          ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at=now() RETURNING id`,
-        [randomUUID2(), siteId, `XRay::anonymous::${identityHmac("visitor_id", input.visitorId).slice(0, 24)}`]
+        [randomUUID(), siteId, `XRay::anonymous::${identityHmac("visitor_id", input.visitorId).slice(0, 24)}`]
       );
       personId = person.rows[0].id;
       await client.query(
         `INSERT INTO analytics_identity_edges(id, site_id, person_id, identity_node_id, evidence_kind, confidence)
          VALUES ($1,$2,$3,$4,'first_party_linker',0.980)
          ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at=now()`,
-        [randomUUID2(), siteId, personId, node.rows[0].id]
+        [randomUUID(), siteId, personId, node.rows[0].id]
       );
     }
-    const tokenId = randomUUID2();
+    const tokenId = randomUUID();
     await client.query(
       `INSERT INTO analytics_linker_tokens(
          id, site_id, pixel_id, host_group_id, identity_node_id,
@@ -3071,13 +2828,13 @@ async function redeemAnalyticsLinkerRecord(input) {
        VALUES ($1,$2,'visitor_id',$3)
        ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at=now()
        RETURNING id`,
-      [randomUUID2(), input.siteId, identityHmac("visitor_id", input.visitorId)]
+      [randomUUID(), input.siteId, identityHmac("visitor_id", input.visitorId)]
     );
     await client.query(
       `INSERT INTO analytics_identity_edges(id, site_id, person_id, identity_node_id, evidence_kind, confidence)
        VALUES ($1,$2,$3,$4,'cross_domain_linker',0.980)
        ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at=now()`,
-      [randomUUID2(), input.siteId, personId, targetNode.rows[0].id]
+      [randomUUID(), input.siteId, personId, targetNode.rows[0].id]
     );
     await client.query(
       "UPDATE analytics_events SET person_id=$1 WHERE site_id=$2 AND visitor_id=$3 AND person_id IS NULL",
@@ -3169,7 +2926,7 @@ async function materializeAnalyticsSessionAndTouch(input) {
        updated_at = now()
      RETURNING id`,
     [
-      randomUUID2(),
+      randomUUID(),
       input.siteId,
       input.pixelId,
       visitorHmac,
@@ -3206,7 +2963,7 @@ async function materializeAnalyticsSessionAndTouch(input) {
        person_id = COALESCE(analytics_attribution_touches.person_id, EXCLUDED.person_id)
      RETURNING id`,
     [
-      randomUUID2(),
+      randomUUID(),
       input.siteId,
       session.rows[0].id,
       input.personId ?? null,
@@ -3230,7 +2987,7 @@ async function materializeAnalyticsSessionAndTouch(input) {
 }
 async function ingestAnalyticsEvents(input) {
   const db = getAnalyticsPool();
-  const requestId = `air_${randomUUID2()}`;
+  const requestId = `air_${randomUUID()}`;
   const hostname = normalizeObservedHostname(input.origin);
   const pixelResult = await db.query(
     `SELECT p.id, p.site_id, p.status,
@@ -3251,7 +3008,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        randomUUID2(),
+        randomUUID(),
         requestId,
         pixel?.site_id ?? null,
         pixel?.id ?? null,
@@ -3276,7 +3033,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        randomUUID2(),
+        randomUUID(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -3301,7 +3058,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6::jsonb)`,
       [
-        randomUUID2(),
+        randomUUID(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -3325,7 +3082,7 @@ async function ingestAnalyticsEvents(input) {
      ON CONFLICT(pixel_id, hostname) DO UPDATE
        SET last_seen_at = now(), updated_at = now()
      RETURNING state`,
-    [randomUUID2(), pixel.id, hostname]
+    [randomUUID(), pixel.id, hostname]
   );
   if (domainResult.rows[0]?.state !== "approved") {
     await db.query(
@@ -3339,7 +3096,7 @@ async function ingestAnalyticsEvents(input) {
       `INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
        VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,
       [
-        randomUUID2(),
+        randomUUID(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -3399,7 +3156,7 @@ async function ingestAnalyticsEvents(input) {
              $23, $24, $25, $26, $27, $28, $29, $30, $31, $32, $33
            ) ON CONFLICT(site_id, event_id) DO NOTHING`,
           [
-            randomUUID2(),
+            randomUUID(),
             event.eventId,
             pixel.site_id,
             pixel.id,
@@ -3465,7 +3222,7 @@ async function ingestAnalyticsEvents(input) {
          id, request_id, site_id, pixel_id, hostname, accepted_count, rejected_count, reason_codes
        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`,
       [
-        randomUUID2(),
+        randomUUID(),
         requestId,
         pixel.site_id,
         pixel.id,
@@ -3556,7 +3313,7 @@ async function createAnalyticsConversion(input) {
              ORDER BY e.confidence DESC LIMIT 1`,
       [input.siteId, identityHmac("session_id", input.sessionId)]
     ) : { rows: [] };
-    const proposedId = randomUUID2();
+    const proposedId = randomUUID();
     const inserted = await client.query(
       `INSERT INTO analytics_conversions(
          id, source_event_id, site_id, pixel_id, session_id, conversion_kind,
@@ -3596,7 +3353,7 @@ async function createAnalyticsConversion(input) {
            ) VALUES ($1,$2,$3,$4,$5)
            ON CONFLICT(destination_id, conversion_id) DO NOTHING`,
           [
-            randomUUID2(),
+            randomUUID(),
             destination.id,
             conversionId,
             resolvedPerson.rows[0]?.person_id ?? null,
@@ -4369,7 +4126,7 @@ async function createAnalyticsCampaignLink(input) {
        ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
        RETURNING *, 0::int AS click_count`,
       [
-        randomUUID2(),
+        randomUUID(),
         input.siteId,
         input.pixelId ?? null,
         input.name.trim(),
@@ -4440,7 +4197,7 @@ async function resolveAnalyticsCampaignLink(shortCode, referrer) {
   if (!row) return null;
   await db.query(
     `INSERT INTO analytics_campaign_clicks(id, link_id, referrer) VALUES ($1, $2, $3)`,
-    [randomUUID2(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
+    [randomUUID(), row.id, normalizeAnalyticsUrl(referrer || void 0)]
   );
   return buildTaggedCampaignUrl(row);
 }
@@ -4465,7 +4222,7 @@ async function createAnalyticsForm(input) {
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,$10,$11,$12,$13,$14)
      RETURNING *, 0::int AS submission_count`,
     [
-      randomUUID2(),
+      randomUUID(),
       publicId,
       input.siteId,
       input.pixelId,
@@ -4510,7 +4267,7 @@ async function getPublicAnalyticsForm(publicId) {
   return result.rows[0] ?? null;
 }
 async function recordAnalyticsFormSubmission(input) {
-  const id = randomUUID2();
+  const id = randomUUID();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_submissions(id, form_id, site_id, pixel_id, visitor_id, session_id, crm_person_ref, source, medium, campaign, crm_delivery_status, click_ids)
      VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12::jsonb)`,
@@ -4554,7 +4311,7 @@ function sanitizeClickIds(value) {
   return output;
 }
 function identityHmac(kind, value) {
-  return createHmac2("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
+  return createHmac("sha256", getSessionSecret()).update(`${kind}:${value.trim().toLowerCase()}`).digest("hex");
 }
 async function linkAnalyticsIdentityInTransaction(client, input) {
   const stable = input.customerId || input.orderId || input.email || input.phone;
@@ -4563,7 +4320,7 @@ async function linkAnalyticsIdentityInTransaction(client, input) {
   const person = await client.query(
     `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
      ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at = now() RETURNING id`,
-    [randomUUID2(), input.siteId, crmPersonRef]
+    [randomUUID(), input.siteId, crmPersonRef]
   );
   const personId = person.rows[0].id;
   const signals = [];
@@ -4585,14 +4342,14 @@ async function linkAnalyticsIdentityInTransaction(client, input) {
     const node = await client.query(
       `INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac) VALUES ($1,$2,$3,$4)
        ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now() RETURNING id`,
-      [randomUUID2(), input.siteId, signal.kind, identityHmac(signal.kind, signal.value)]
+      [randomUUID(), input.siteId, signal.kind, identityHmac(signal.kind, signal.value)]
     );
     await client.query(
       `INSERT INTO analytics_identity_edges(id, site_id, person_id, identity_node_id, evidence_kind, confidence)
        VALUES ($1,$2,$3,$4,$5,$6)
        ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE
        SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence)`,
-      [randomUUID2(), input.siteId, personId, node.rows[0].id, signal.evidence, signal.confidence]
+      [randomUUID(), input.siteId, personId, node.rows[0].id, signal.evidence, signal.confidence]
     );
   }
   return personId;
@@ -4604,7 +4361,7 @@ async function linkAnalyticsFormIdentity(input) {
     const person = await client.query(
       `INSERT INTO analytics_people(id, site_id, crm_person_ref) VALUES ($1,$2,$3)
        ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at = now() RETURNING id`,
-      [randomUUID2(), input.siteId, input.crmPersonRef]
+      [randomUUID(), input.siteId, input.crmPersonRef]
     );
     const personId = person.rows[0].id;
     const signals = [];
@@ -4651,7 +4408,7 @@ async function linkAnalyticsFormIdentity(input) {
         `INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac) VALUES ($1,$2,$3,$4)
          ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now() RETURNING id`,
         [
-          randomUUID2(),
+          randomUUID(),
           input.siteId,
           signal.kind,
           identityHmac(signal.kind, signal.value)
@@ -4662,7 +4419,7 @@ async function linkAnalyticsFormIdentity(input) {
          VALUES ($1,$2,$3,$4,$5,$6)
          ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence)`,
         [
-          randomUUID2(),
+          randomUUID(),
           input.siteId,
           personId,
           node.rows[0].id,
@@ -4677,6 +4434,8 @@ async function linkAnalyticsFormIdentity(input) {
         [personId, input.submissionId, input.siteId]
       );
     if (input.visitorId || input.sessionId) {
+      const visitorHmac = input.visitorId ? identityHmac("visitor_id", input.visitorId) : null;
+      const sessionHmac = input.sessionId ? identityHmac("session_id", input.sessionId) : null;
       await client.query(
         `UPDATE analytics_events SET person_id = $1 WHERE site_id = $2 AND person_id IS NULL
           AND (($3::text IS NOT NULL AND visitor_id = $3) OR ($4::text IS NOT NULL AND session_id = $4))`,
@@ -4691,6 +4450,23 @@ async function linkAnalyticsFormIdentity(input) {
         `UPDATE analytics_conversions SET person_id = $1 WHERE site_id = $2 AND person_id IS NULL AND $3::text IS NOT NULL AND session_id = $3`,
         [personId, input.siteId, input.sessionId ?? null]
       );
+      await client.query(
+        `UPDATE analytics_sessions SET person_id = $1
+          WHERE site_id = $2 AND person_id IS NULL
+            AND (($3::text IS NOT NULL AND visitor_hmac = $3)
+              OR ($4::text IS NOT NULL AND session_hmac = $4))`,
+        [personId, input.siteId, visitorHmac, sessionHmac]
+      );
+      await client.query(
+        `UPDATE analytics_attribution_touches SET person_id = $1
+          WHERE site_id = $2 AND person_id IS NULL
+            AND (($3::text IS NOT NULL AND visitor_hmac = $3)
+              OR ($4::text IS NOT NULL AND session_id IN (
+                SELECT id FROM analytics_sessions
+                 WHERE site_id = $2 AND session_hmac = $4
+              )))`,
+        [personId, input.siteId, visitorHmac, sessionHmac]
+      );
     }
     await client.query("COMMIT");
     return { personId, linkedSignals: signals.length };
@@ -4760,7 +4536,7 @@ async function createAnalyticsCrmImport(input) {
   const db = getAnalyticsPool();
   await requireEditor(db, input.siteId, input.userId);
   const client = await db.connect();
-  const id = randomUUID2();
+  const id = randomUUID();
   try {
     await client.query("BEGIN");
     await client.query(
@@ -4780,7 +4556,7 @@ async function createAnalyticsCrmImport(input) {
       await client.query(
         `INSERT INTO analytics_crm_import_rows(id, import_id, crm_person_ref, payload_ciphertext)
          VALUES ($1,$2,$3,$4) ON CONFLICT(import_id, crm_person_ref) DO NOTHING`,
-        [randomUUID2(), id, row.crmPersonRef, row.payloadCiphertext]
+        [randomUUID(), id, row.crmPersonRef, row.payloadCiphertext]
       );
     }
     await client.query("COMMIT");
@@ -4903,7 +4679,7 @@ async function createAnalyticsActivationDestination(input) {
     `INSERT INTO analytics_activation_destinations(id, site_id, platform, name, connection_ref, external_dataset_id, event_mapping, provider_config, created_by_user_id)
      VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9) RETURNING *`,
     [
-      randomUUID2(),
+      randomUUID(),
       input.siteId,
       input.platform,
       input.name.trim(),
@@ -5050,7 +4826,7 @@ async function testAnalyticsActivationDestination(input) {
       400
     );
   }
-  const testId = randomUUID2();
+  const testId = randomUUID();
   const syntheticHash = createHash("sha256").update(`xray-provider-test:${testId}`).digest("hex");
   const providerConfig = destination.provider_config ?? {};
   const payload = {
@@ -5288,7 +5064,7 @@ async function queueAnalyticsActivation(input) {
       `INSERT INTO analytics_activation_jobs(id, destination_id, conversion_id, person_id, payload_ciphertext)
        VALUES ($1,$2,$3,$4,$5) ON CONFLICT(destination_id, conversion_id) DO NOTHING`,
       [
-        randomUUID2(),
+        randomUUID(),
         destination.id,
         input.conversionId,
         input.personId ?? null,
@@ -5300,7 +5076,7 @@ async function queueAnalyticsActivation(input) {
   return queued;
 }
 async function queueAnalyticsFormDelivery(input) {
-  const id = randomUUID2();
+  const id = randomUUID();
   await getAnalyticsPool().query(
     `INSERT INTO analytics_form_delivery_jobs(id, submission_id, owner_user_id, payload_ciphertext, last_error_code)
      VALUES ($1,$2,$3,$4,$5)`,
@@ -5457,7 +5233,7 @@ async function analyticsHealth(siteId, userId) {
 }
 async function refreshAnalyticsDailyRollups(input) {
   const db = getAnalyticsPool();
-  const runId = randomUUID2();
+  const runId = randomUUID();
   await db.query(
     `INSERT INTO analytics_rollup_runs(id, window_start, window_end, status) VALUES ($1, $2, $3, 'running')`,
     [runId, input.start, input.end]
@@ -5654,7 +5430,7 @@ async function createAnalyticsExport(input) {
       `Generated ${(/* @__PURE__ */ new Date()).toISOString()} from the governed ${input.report} report contract.`
     ].join("\n");
   }
-  const id = randomUUID2();
+  const id = randomUUID();
   const inserted = await getAnalyticsPool().query(
     `INSERT INTO analytics_exports(id, site_id, requested_by_user_id, idempotency_key, report, format, filters, content)
      VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8)
@@ -5689,21 +5465,6 @@ async function createAnalyticsExport(input) {
 }
 
 export {
-  getSessionSecret,
-  signSession,
-  verifySession,
-  ensureServiceConnectionsSchema,
-  reconcileDiscoveredNangoConnections,
-  listServiceConnections,
-  getOwnedServiceConnection,
-  updateServiceConnectionTools,
-  setServiceConnectionProviderIdentity,
-  setServiceConnectionUserLabel,
-  recordServiceConnectionHealth,
-  setServiceConnectionActions,
-  markServiceConnectionDisconnected,
-  recordServiceConnectionAction,
-  claimServiceConnectionAction,
   AnalyticsProviderRegistryError,
   getAnalyticsProviderDefinition,
   assertConnectionSupportsProvider,