mcp-scraper 0.72.7 → 0.73.1

package/CHANGELOG.md

@@ -4,6 +4,38 @@ All notable changes to MCP Scraper are documented here. The format is based on [
 
 ## [Unreleased]
 
+## [0.73.1] - 2026-08-28
+
+### Fixed
+
+- Applied additive, idempotent X-Ray schema changes as individually committed statements so production reads cannot deadlock against a release-long DDL transaction and an interrupted migration can resume safely.
+- Reused the earliest confirmed person when a verified email, phone, account ID, or order identity already belongs to the Site graph, preventing a normalized account ID from splitting a legacy email-keyed journey.
+
+## [0.73.0] - 2026-08-27
+
+### Added
+
+- Added a backend-owned, 142-operation analytics REST contract with generated Web validators and exact MCP/SDK projections for enhanced confirmed journeys.
+- Added consent-governed identity promotion for verified forms and authenticated accounts, including same-Site anonymous-history backfill, encrypted masked identity profiles, audited single-person reads, and deletion tombstones that prevent silent recreation.
+- Added date-bounded Journey reporting for summaries, common pages, events, acquisition and referrers, sessions, and chronology, with confirmed and best-guess totals kept separate.
+- Added first-party MCP Scraper subscription revenue outcomes through the ordinary versioned conversion-rule pipeline without copying billing contact data into analytics.
+- Added real PostgreSQL integration coverage for tenant isolation, consent withdrawal, deletion, no-resurrection, migration replay, and provider activation eligibility.
+
+### Changed
+
+- Consolidated Scheduler, Web, and Memory source ownership into this product repository under isolated `apps/` project roots while retaining the public SDK as the only separate client repository.
+- Aligned the main server with `mcpscraper-memory-tools` 1.16.0 so nested Mastra builds cannot inherit the server's former package versions from the shared repository root.
+- Expanded the public MCP catalog to 331 tools, including distinct confirmed/best-guess Journey listing and complete enhanced Journey reads with bounded `from` and `to` windows.
+- Browser and embedded-form conversions now preserve the conversion record while allowing provider activation only for a confirmed person with current advertising-measurement consent.
+
+### Fixed
+
+- Kept nested `apps/` source available to Vercel so each consolidated project can build from its configured monorepo root.
+- Prevented cross-Site identity, privacy, and Journey references; removed subject-specific export/provider payload remnants on withdrawal or deletion; and normalized unknown/deleted references to zero-discovery responses.
+- Normalized PostgreSQL timestamp projections and reconciled consent-withdrawal responses with the strict public REST contract.
+- Made consented login and first-party form resolution self-initialize an approved Site-scoped primary identity graph, so older Sites persist stable person references and masked profiles without manual namespace setup.
+- Retried the authenticated browser identity handoff during the bounded Pixel/consent bootstrap window, preventing a consent-readiness race from leaving a signed-in visitor anonymous for the rest of the page.
+
 ## [0.72.7] - 2026-08-27
 
 ### Fixed
@@ -1284,7 +1316,9 @@ All notable changes to MCP Scraper are documented here. The format is based on [
 - Write actions remain unavailable until the account owner explicitly enables them.
 - Provider-specific connection data is normalized into one agent-facing contract.
 
-[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.72.7...HEAD
+[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.73.1...HEAD
+[0.73.1]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.73.0...v0.73.1
+[0.73.0]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.72.7...v0.73.0
 [0.72.7]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.72.6...v0.72.7
 [0.72.6]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.72.5...v0.72.6
 [0.72.5]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.72.4...v0.72.5

package/README.md

@@ -2,6 +2,20 @@
 
 MCP Scraper is an MCP server for live web intelligence tools backed by `https://mcpscraper.dev`.
 
+## Product repository
+
+This repository owns the complete private product runtime while preserving independent service and
+deployment boundaries:
+
+- `/` — primary MCP/API server and public `mcp-scraper` package;
+- `apps/scheduler` — private scheduled execution and orchestration service;
+- `apps/web` — private Next.js product and marketing application;
+- `apps/memory` — hosted Memory service plus its independently publishable DB, Tools, and stdio packages.
+
+`mcpscraper-sdk` remains the only separate public-client repository. See [`apps/README.md`](apps/README.md)
+and [`product-topology.json`](product-topology.json) for exact ownership, source receipts, release units,
+deployment roots, and verification commands.
+
 ## Install
 
 Use the MCPB Desktop Extension for the branded Claude Desktop install, or use the npm package from any MCP client that can run stdio commands.
@@ -159,7 +173,7 @@ Build the branded one-click bundle:
 npm run build:mcpb
 ```
 
-The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.72.7`, SHA-256 `f33e2aa375a3a9e4a497bd03306db559a7c40282bd741b241c65b688d21e1dc2`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
+The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.73.1`, SHA-256 `6d28c003fa95efba8867529ea8b9546e1213bbbe0575f03342b8bbe054535550`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
 
 The MCPB install exposes every tool — web-intelligence plus all `browser_*` tools — through the one `mcp-scraper` server.
 
@@ -321,7 +335,7 @@ The `mcp-scraper` server (and the MCPB bundle, which runs it) exposes both secti
 
 All MCP tools return `structuredContent` with the IDs, URLs, CSV paths, transcripts, browser session handles, replay paths, artifacts, recipe fields, or blueprint fields needed by the next step, plus readable text content for compatibility. Runtime `tools/list` omits output schemas so strict clients can register the complete catalog; the generated developer manifest retains every canonical output schema for validation and typed SDK generation. All tools carry MCP annotations; file-writing tools such as replay downloads and annotations state their filesystem side effects.
 
-The canonical tool inventory is generated at `docs/mcp-tool-manifest.generated.json`. The unified server exposes 330 tools: 229 scraper, browser, workflow, billing, and connected-service tools plus 101 durable-memory tools. The scraper-side inventory includes complete Gmail selection, message, attachment, export, bulk-action, and Memory-import workflows; durable PAA starts and status; rendered site-content similarity; governed Local Sourcebook and Transparent Commons workflows; direct site-export reads; Editorial Reading Room and News Publisher templates; and production X-Ray analytics, attribution, CRM policy and receipt, campaign, export, and scheduled-report tools. Successful evidence-compiled Local Sourcebook revisions publish automatically to their canonical `localsourcebook.com` category profile and review URLs; administrator controls handle exceptional rejection or unpublishing. Release verification compares the exact local and hosted tool-name sets, not only the count.
+The canonical tool inventory is generated at `docs/mcp-tool-manifest.generated.json`. The unified server exposes 331 tools: 230 scraper, browser, workflow, billing, and connected-service tools plus 101 durable-memory tools. The scraper-side inventory includes complete Gmail selection, message, attachment, export, bulk-action, and Memory-import workflows; durable PAA starts and status; rendered site-content similarity; governed Local Sourcebook and Transparent Commons workflows; direct site-export reads; Editorial Reading Room and News Publisher templates; and production X-Ray analytics, attribution, CRM policy and receipt, campaign, export, and scheduled-report tools. Successful evidence-compiled Local Sourcebook revisions publish automatically to their canonical `localsourcebook.com` category profile and review URLs; administrator controls handle exceptional rejection or unpublishing. Release verification compares the exact local and hosted tool-name sets, not only the count.
 
 For contract parity, stdio and MCPB memory calls invoke the matching public tool on the hosted MCP Scraper `/mcp` endpoint. The hosted aggregate runtime owns MCP Scraper-specific billing, scheduling, credential, and in-process cutover policy; its internal `/memory/mcp-call` bridge is a fallback to the standalone memory service, not the public stdio execution path. Direct `mcp-memory` OAuth and stdio clients continue to use `memory.mcpscraper.dev` and must be verified as a separate dependent release surface.
 

package/dist/{analytics-repository-6YLRSWYO.js → analytics-repository-7XYPQ2YJ.js}

@@ -12,11 +12,14 @@ import {
   analyticsEventCounts,
   analyticsForecast,
   analyticsHealth,
+  analyticsIdentityPromotionAllowed,
+  analyticsIdentityResolutionAllowed,
   analyticsOverview,
   analyticsPaths,
   analyticsTimeseries,
   archiveAnalyticsActivationDestination,
   archiveAnalyticsCampaignLink,
+  backfillAnalyticsConfirmedHistory,
   claimAnalyticsCrmImportRows,
   claimAnalyticsFormDeliveryJobs,
   closeAnalyticsPool,
@@ -33,6 +36,7 @@ import {
   deferAnalyticsCrmImportRow,
   deferAnalyticsFormDelivery,
   deleteAnalyticsSite,
+  enrichAnalyticsExistingCrmIdentity,
   getAnalyticsActivationDestinationConnectionRef,
   getAnalyticsPersonJourney,
   getAnalyticsPool,
@@ -41,6 +45,7 @@ import {
   ingestAnalyticsEvents,
   isAnalyticsFormPlacementApproved,
   linkAnalyticsFormIdentity,
+  linkAnalyticsIdentityInTransaction,
   listAnalyticsActivationDestinations,
   listAnalyticsActivationReceipts,
   listAnalyticsCampaignLinks,
@@ -57,6 +62,7 @@ import {
   normalizeObservedHostname,
   pollAnalyticsActivationDiagnostics,
   prepareAnalyticsLinkerIssue,
+  projectAnalyticsPixelEventConsent,
   queueAnalyticsActivation,
   queueAnalyticsFormDelivery,
   recordAnalyticsFormSubmission,
@@ -66,6 +72,7 @@ import {
   requireAnalyticsAccess,
   requireAnalyticsEditor,
   resolveAnalyticsCampaignLink,
+  resolveAnalyticsConfirmedActivationIdentity,
   retryAnalyticsActivationJob,
   sanitizeAnalyticsProperties,
   sanitizeClickIds,
@@ -77,7 +84,7 @@ import {
   updateAnalyticsPixel,
   upsertAnalyticsAdSpend,
   upsertAnalyticsHostGroup
-} from "./chunk-SR7GSLEA.js";
+} from "./chunk-M6XDENOO.js";
 import "./chunk-PJEEKOUM.js";
 import "./chunk-WEFPBAAG.js";
 export {
@@ -94,11 +101,14 @@ export {
   analyticsEventCounts,
   analyticsForecast,
   analyticsHealth,
+  analyticsIdentityPromotionAllowed,
+  analyticsIdentityResolutionAllowed,
   analyticsOverview,
   analyticsPaths,
   analyticsTimeseries,
   archiveAnalyticsActivationDestination,
   archiveAnalyticsCampaignLink,
+  backfillAnalyticsConfirmedHistory,
   claimAnalyticsCrmImportRows,
   claimAnalyticsFormDeliveryJobs,
   closeAnalyticsPool,
@@ -115,6 +125,7 @@ export {
   deferAnalyticsCrmImportRow,
   deferAnalyticsFormDelivery,
   deleteAnalyticsSite,
+  enrichAnalyticsExistingCrmIdentity,
   getAnalyticsActivationDestinationConnectionRef,
   getAnalyticsPersonJourney,
   getAnalyticsPool,
@@ -123,6 +134,7 @@ export {
   ingestAnalyticsEvents,
   isAnalyticsFormPlacementApproved,
   linkAnalyticsFormIdentity,
+  linkAnalyticsIdentityInTransaction,
   listAnalyticsActivationDestinations,
   listAnalyticsActivationReceipts,
   listAnalyticsCampaignLinks,
@@ -139,6 +151,7 @@ export {
   normalizeObservedHostname,
   pollAnalyticsActivationDiagnostics,
   prepareAnalyticsLinkerIssue,
+  projectAnalyticsPixelEventConsent,
   queueAnalyticsActivation,
   queueAnalyticsFormDelivery,
   recordAnalyticsFormSubmission,
@@ -148,6 +161,7 @@ export {
   requireAnalyticsAccess,
   requireAnalyticsEditor,
   resolveAnalyticsCampaignLink,
+  resolveAnalyticsConfirmedActivationIdentity,
   retryAnalyticsActivationJob,
   sanitizeAnalyticsProperties,
   sanitizeClickIds,

package/dist/bin/api-server.js

@@ -17,15 +17,15 @@ loadDotEnv();
 async function main() {
   const [{ serve }, { app }, { startWorker }, { migrate }] = await Promise.all([
     import("@hono/node-server"),
-    import("../server-M5FLUWYD.js"),
-    import("../worker-JQORPCFQ.js"),
+    import("../server-663CRTGY.js"),
+    import("../worker-CBK5DWEE.js"),
     import("../db-566MOHHD.js")
   ]);
   const PORT = parseInt(process.env.PORT ?? "3001");
   try {
     await migrate();
     if (process.env.ANALYTICS_DATABASE_URL) {
-      const { migrateAnalytics } = await import("../analytics-repository-6YLRSWYO.js");
+      const { migrateAnalytics } = await import("../analytics-repository-7XYPQ2YJ.js");
       await migrateAnalytics();
     }
     startWorker();

package/dist/bin/mcp-scraper-cli.js

@@ -13,7 +13,7 @@ import "../chunk-VXLU74YZ.js";
 import "../chunk-GGZEC22A.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-RRZAYUEX.js";
+} from "../chunk-NLPFY2IF.js";
 
 // src/cli/human-cli.ts
 import { Command } from "commander";

package/dist/bin/mcp-scraper-install.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   renderInstallTerminal
-} from "../chunk-RAFQEPJ4.js";
+} from "../chunk-Q2J23DHY.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-RRZAYUEX.js";
+} from "../chunk-NLPFY2IF.js";
 
 // bin/mcp-scraper-install.ts
 var noColor = process.argv.includes("--no-color") || process.env.NO_COLOR !== void 0 || process.env.FORCE_COLOR === "0" || !process.stdout.isTTY;

package/dist/bin/mcp-stdio-server.js

@@ -13,7 +13,7 @@ import {
   registerScheduledResultsMcpTools,
   registerSerpIntelligenceCaptureTools,
   resolveDeploymentProfile
-} from "../chunk-ZSVXNLLM.js";
+} from "../chunk-G75QXTBE.js";
 import "../chunk-PGJQDMC2.js";
 import "../chunk-T3MZISOF.js";
 import "../chunk-7RQULQF3.js";
@@ -21,14 +21,14 @@ import "../chunk-OM7HVEJ3.js";
 import "../chunk-CXY5WV45.js";
 import {
   renderInstallTerminal
-} from "../chunk-RAFQEPJ4.js";
+} from "../chunk-Q2J23DHY.js";
 import "../chunk-VXLU74YZ.js";
 import "../chunk-GGZEC22A.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-RRZAYUEX.js";
+} from "../chunk-NLPFY2IF.js";
 import "../chunk-DNM65UCK.js";
-import "../chunk-FVL4GUTP.js";
+import "../chunk-EQJRPDUS.js";
 import "../chunk-WEFPBAAG.js";
 
 // bin/mcp-stdio-server.ts

package/dist/{chunk-FVL4GUTP.js → chunk-EQJRPDUS.js}

@@ -213,8 +213,8 @@ var PUBLIC_PRODUCT_CONTRACT = {
     "freeSignupCredits": 0
   },
   "inventory": {
-    "totalTools": 330,
-    "scraperTools": 229,
+    "totalTools": 331,
+    "scraperTools": 230,
     "memoryTools": 101
   },
   "concurrencyPack": {

package/dist/{chunk-ZSVXNLLM.js → chunk-G75QXTBE.js}

@@ -32,7 +32,7 @@ import {
 } from "./chunk-VXLU74YZ.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-RRZAYUEX.js";
+} from "./chunk-NLPFY2IF.js";
 import {
   createPrivateArtifact,
   privateArtifactOwnerId,
@@ -45,7 +45,7 @@ import {
   PAA_QUESTION_CREDITS,
   PAGE_SCRAPE_CREDITS,
   SERP_SEARCH_CREDITS
-} from "./chunk-FVL4GUTP.js";
+} from "./chunk-EQJRPDUS.js";
 import {
   PUBLIC_ERROR_CODES,
   buildPublicErrorEnvelope,
@@ -12326,9 +12326,17 @@ var AnalyticsExplorerInputSchema = {
   maximumDurationMs: z11.number().int().min(0).max(31536e6).optional().describe("Maximum measured session duration in milliseconds."),
   journeyTier: z11.enum(["confirmed", "best_guess", "all"]).default("confirmed").describe("Confirmed is the default. Best-guess totals remain separate and cannot drive CRM or advertising actions.")
 };
+var AnalyticsJourneysInputSchema = {
+  siteId: z11.string().uuid().describe("Analytics Site id returned by analytics_list_sites."),
+  journeyTier: z11.enum(["confirmed", "best_guess", "all"]).default("confirmed").describe("Select confirmed journeys, separately labeled best-guess journeys, or both branches. Confirmed is the default; best-guess evidence can never drive CRM or advertising actions."),
+  limit: z11.number().int().min(1).max(100).default(50).describe("Maximum rows returned in each selected journey branch."),
+  cursor: z11.string().max(1e3).optional().describe("Opaque keyset cursor returned in a selected branch pageInfo.nextCursor.")
+};
 var AnalyticsExplorerDetailInputSchema = {
   siteId: z11.string().uuid().describe("Analytics Site id returned by analytics_list_sites."),
-  reference: AnalyticsOpaqueRef
+  reference: AnalyticsOpaqueRef,
+  from: z11.string().datetime({ offset: true }).optional().describe("Inclusive ISO time. Defaults to 90 days before to; max window 366 days."),
+  to: z11.string().datetime({ offset: true }).optional().describe("Exclusive ISO time. Defaults to now; max window 366 days.")
 };
 var AnalyticsFunnelStage = z11.object({
   key: z11.string().regex(/^[a-z][a-z0-9_]{1,79}$/).describe("Stable stage key."),
@@ -12578,6 +12586,7 @@ var AnalyticsActivationAssetsInputSchema = {
 };
 var AnalyticsActivationMappingInputSchema = {
   siteId: z11.string().uuid().describe("Analytics Site id returned by analytics_list_sites."),
+  journeyTier: z11.literal("confirmed").default("confirmed").describe("External activation is confirmed-only. Best-guess and candidate-assisted journey evidence is schema-invalid."),
   platform: z11.enum(["meta", "google", "tiktok", "reddit"]).describe("Destination provider."),
   externalDatasetId: z11.string().min(1).max(500).describe("Authorized dataset, Pixel, or conversion-action id."),
   eventMapping: z11.record(z11.string().regex(/^[a-z][a-z0-9_]{1,79}$/), z11.string().min(1).max(160)).describe("Confirmed X-Ray event to provider event mapping. Candidate-assisted events are ineligible.")
@@ -12635,6 +12644,154 @@ var AnalyticsSafeOutputRecord = z11.record(z11.string(), z11.unknown());
 var AnalyticsSafeOutputRecords = z11.array(AnalyticsSafeOutputRecord);
 var analyticsRecordOutput = (field) => ({ ok: z11.boolean(), [field]: AnalyticsSafeOutputRecord });
 var analyticsRecordsOutput = (field) => ({ ok: z11.boolean(), [field]: AnalyticsSafeOutputRecords });
+var AnalyticsJourneyRevenueSchema = z11.object({
+  valueMinor: z11.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+  currency: z11.string().length(3).nullable()
+}).strict();
+var AnalyticsJourneyPageInfoSchema = z11.object({
+  nextCursor: z11.string().min(8).max(1e3).nullable(),
+  hasNextPage: z11.boolean()
+}).strict();
+var AnalyticsConfirmedJourneyPageSchema = z11.object({
+  journeyTier: z11.literal("confirmed"),
+  items: z11.array(z11.object({
+    journeyTier: z11.literal("confirmed"),
+    personRef: AnalyticsOpaqueRef,
+    firstSeenAt: z11.string().datetime().nullable(),
+    lastSeenAt: z11.string().datetime().nullable(),
+    sessions: z11.number().int().min(0),
+    events: z11.number().int().min(0),
+    conversions: z11.number().int().min(0),
+    revenue: AnalyticsJourneyRevenueSchema.nullable(),
+    evidenceClass: z11.literal("deterministic")
+  }).strict()).max(100),
+  pageInfo: AnalyticsJourneyPageInfoSchema
+}).strict();
+var AnalyticsBestGuessJourneyPageSchema = z11.object({
+  journeyTier: z11.literal("candidate_assisted"),
+  totalsAreSeparated: z11.literal(true),
+  items: z11.array(z11.object({
+    journeyTier: z11.literal("candidate_assisted"),
+    inferenceRef: AnalyticsOpaqueRef,
+    confirmedTotals: z11.object({
+      sessions: z11.number().int().min(0),
+      events: z11.number().int().min(0),
+      conversions: z11.number().int().min(0),
+      revenue: AnalyticsJourneyRevenueSchema.nullable()
+    }).strict(),
+    inferredIncrementalTotals: z11.object({
+      sessions: z11.number().int().min(0),
+      events: z11.number().int().min(0),
+      conversions: z11.number().int().min(0),
+      revenue: AnalyticsJourneyRevenueSchema.nullable()
+    }).strict(),
+    candidateCount: z11.number().int().min(1),
+    confidenceBand: z11.literal("high"),
+    modelVersion: z11.string().min(1).max(160),
+    featureClasses: z11.array(z11.string().min(1).max(160)).max(100),
+    coverage: z11.enum(["incremental_sessions_available", "no_incremental_sessions"]),
+    expiresAt: z11.string().datetime(),
+    provenance: z11.literal("consented_high_confidence_candidate_association")
+  }).strict()).max(100),
+  pageInfo: AnalyticsJourneyPageInfoSchema
+}).strict();
+var AnalyticsJourneysResultSchema = z11.discriminatedUnion("journeyTier", [
+  z11.object({ ok: z11.boolean(), journeyTier: z11.literal("confirmed"), confirmed: AnalyticsConfirmedJourneyPageSchema, bestGuess: z11.null(), totalsAreSeparated: z11.literal(false) }).strict(),
+  z11.object({ ok: z11.boolean(), journeyTier: z11.literal("best_guess"), confirmed: z11.null(), bestGuess: AnalyticsBestGuessJourneyPageSchema, totalsAreSeparated: z11.literal(false) }).strict(),
+  z11.object({ ok: z11.boolean(), journeyTier: z11.literal("all"), confirmed: AnalyticsConfirmedJourneyPageSchema, bestGuess: AnalyticsBestGuessJourneyPageSchema, totalsAreSeparated: z11.literal(true) }).strict()
+]);
+var AnalyticsJourneysOutputSchema = {
+  ok: z11.boolean(),
+  journeyTier: z11.enum(["confirmed", "best_guess", "all"]),
+  confirmed: AnalyticsConfirmedJourneyPageSchema.nullable(),
+  bestGuess: AnalyticsBestGuessJourneyPageSchema.nullable(),
+  totalsAreSeparated: z11.boolean()
+};
+var AnalyticsEnhancedJourneyMoneySchema = z11.object({
+  valueMinor: z11.number().int().safe(),
+  currency: z11.string().regex(/^[A-Z]{3}$/).nullable()
+}).strict();
+var AnalyticsEnhancedJourneyAcquisitionSchema = z11.object({
+  source: z11.string().nullable(),
+  medium: z11.string().nullable(),
+  campaign: z11.string().nullable(),
+  referrer: z11.string().url().nullable()
+}).strict();
+var AnalyticsEnhancedJourneyDataSchema = z11.object({
+  subject: z11.object({
+    kind: z11.enum(["person", "visitor", "session"]),
+    reference: z11.string().min(8),
+    personRef: z11.string().min(8).nullable()
+  }).strict(),
+  range: z11.object({
+    from: z11.string().datetime({ offset: true }),
+    to: z11.string().datetime({ offset: true }),
+    fromInclusive: z11.literal(true),
+    toExclusive: z11.literal(true)
+  }).strict(),
+  journeyTier: z11.literal("confirmed"),
+  candidateAssisted: z11.null(),
+  summary: z11.object({
+    sessions: z11.number().int().nonnegative(),
+    pageviews: z11.number().int().nonnegative(),
+    events: z11.number().int().nonnegative(),
+    conversions: z11.number().int().nonnegative(),
+    revenue: AnalyticsEnhancedJourneyMoneySchema.nullable(),
+    totalEngagementMs: z11.number().nonnegative().nullable(),
+    averageEngagementMs: z11.number().nonnegative().nullable()
+  }).strict(),
+  commonPages: z11.array(z11.object({
+    path: z11.string(),
+    visits: z11.number().int().nonnegative(),
+    uniqueSessions: z11.number().int().nonnegative(),
+    engagedMs: z11.number().nonnegative().nullable(),
+    conversions: z11.number().int().nonnegative()
+  }).strict()),
+  acquisition: z11.array(AnalyticsEnhancedJourneyAcquisitionSchema.extend({
+    sessions: z11.number().int().nonnegative(),
+    events: z11.number().int().nonnegative(),
+    conversions: z11.number().int().nonnegative()
+  }).strict()),
+  eventBreakdown: z11.array(z11.object({
+    name: z11.string().min(1),
+    count: z11.number().int().nonnegative(),
+    uniqueSessions: z11.number().int().nonnegative(),
+    conversions: z11.number().int().nonnegative()
+  }).strict()),
+  sessions: z11.array(z11.object({
+    sessionRef: z11.string().min(8),
+    startedAt: z11.string().datetime({ offset: true }),
+    endedAt: z11.string().datetime({ offset: true }).nullable(),
+    durationMs: z11.number().nonnegative().nullable(),
+    pageviews: z11.number().int().nonnegative(),
+    events: z11.number().int().nonnegative(),
+    conversions: z11.number().int().nonnegative(),
+    revenue: AnalyticsEnhancedJourneyMoneySchema.nullable(),
+    landingPath: z11.string().nullable(),
+    exitPath: z11.string().nullable(),
+    acquisition: AnalyticsEnhancedJourneyAcquisitionSchema.nullable()
+  }).strict()),
+  items: z11.array(z11.object({
+    occurredAt: z11.string().datetime({ offset: true }),
+    type: z11.string().min(1),
+    name: z11.string().min(1),
+    path: z11.string().nullable(),
+    referrer: z11.string().url().nullable(),
+    acquisition: AnalyticsEnhancedJourneyAcquisitionSchema.omit({ referrer: true }).nullable(),
+    value: AnalyticsEnhancedJourneyMoneySchema.nullable(),
+    evidenceClass: z11.enum(["deterministic", "candidate"]),
+    provenance: z11.string().min(1)
+  }).strict()),
+  pageInfo: z11.object({
+    nextCursor: z11.string().min(1).nullable(),
+    hasNextPage: z11.boolean()
+  }).strict()
+}).strict();
+var AnalyticsEnhancedJourneyResultSchema = z11.object({
+  ok: z11.literal(true),
+  data: AnalyticsEnhancedJourneyDataSchema
+}).strict();
+var AnalyticsEnhancedJourneyOutputSchema = AnalyticsEnhancedJourneyResultSchema.shape;
 var AnalyticsOnboardingOutputSchema = analyticsRecordOutput("onboarding");
 var AnalyticsOnboardingPreferencesOutputSchema = analyticsRecordOutput("presentation");
 var AnalyticsExplorerOutputSchema = analyticsRecordOutput("data");
@@ -12867,8 +13024,9 @@ var productionOutputSchemas = {
   analytics_update_onboarding_preferences: AnalyticsOnboardingPreferencesOutputSchema,
   analytics_list_sessions: AnalyticsExplorerOutputSchema,
   analytics_list_visitors: AnalyticsExplorerOutputSchema,
-  analytics_get_session_timeline: AnalyticsExplorerOutputSchema,
-  analytics_get_visitor_journey: AnalyticsExplorerOutputSchema,
+  analytics_list_journeys: AnalyticsJourneysOutputSchema,
+  analytics_get_session_timeline: AnalyticsEnhancedJourneyOutputSchema,
+  analytics_get_visitor_journey: AnalyticsEnhancedJourneyOutputSchema,
   analytics_list_funnels: AnalyticsFunnelDefinitionsOutputSchema,
   analytics_get_funnel: AnalyticsFunnelReportOutputSchema,
   analytics_create_funnel: AnalyticsFunnelDefinitionOutputSchema,
@@ -12994,7 +13152,7 @@ function registerAnalyticsMcpTools(server, executor) {
     ["analytics_list_conversion_rules", "List Conversion Rules", "List deterministic versioned rules that turn canonical phone, CRM, transaction, and server events into conversions.", AnalyticsSiteResourceInputSchema, "analyticsListConversionRules"],
     ["analytics_list_event_definitions", "List Browser Event Definitions", "List declarative page, click, and form-submit tags applied by the first-party X-Ray Pixel.", AnalyticsSiteResourceInputSchema, "analyticsListEventDefinitions"],
     ["analytics_get_coverage", "Get Attribution Coverage", "Measure click-ID coverage and call/CRM journey join rates. Null rates mean there is not yet a denominator.", AnalyticsSiteResourceInputSchema, "analyticsGetCoverage"],
-    ["analytics_get_person_journey", "Get Person Journey", "Read one identified person timeline across sessions, immutable touches, calls, CRM stages, conversions, and ad-delivery receipts.", AnalyticsJourneyInputSchema, "analyticsGetPersonJourney"]
+    ["analytics_get_person_journey", "Get Person Journey", "Read CRM-oriented identified-person history: touches, calls, CRM stages, conversions, and delivery receipts. For analytics chronology use analytics_get_visitor_journey.", AnalyticsJourneyInputSchema, "analyticsGetPersonJourney"]
   ];
   for (const [name, title, description, inputSchema, handler] of reads) {
     server.registerTool(name, {
@@ -13077,9 +13235,10 @@ function registerAnalyticsMcpTools(server, executor) {
   const productionReads = [
     ["analytics_get_onboarding_state", "Get X-Ray Setup State", "Read evidence-derived setup milestones. Client input cannot mark evidence milestones complete.", AnalyticsSiteResourceInputSchema, "analyticsGetOnboardingState"],
     ["analytics_list_sessions", "List X-Ray Sessions", "Read bounded sessions using opaque references. Raw visitor/session/device identifiers, contact data, IP, and click IDs are omitted.", AnalyticsExplorerInputSchema, "analyticsListSessions"],
-    ["analytics_list_visitors", "List X-Ray Visitors", "Read bounded visitor summaries using opaque references and separately labeled confirmed or candidate-assisted tiers.", AnalyticsExplorerInputSchema, "analyticsListVisitors"],
-    ["analytics_get_session_timeline", "Get Session Timeline", "Read one safe chronological session timeline by opaque Site-scoped reference.", AnalyticsExplorerDetailInputSchema, "analyticsGetSessionTimeline"],
-    ["analytics_get_visitor_journey", "Get Visitor Journey", "Read one safe visitor journey by opaque Site-scoped reference. Candidate evidence is labeled and never treated as confirmed identity.", AnalyticsExplorerDetailInputSchema, "analyticsGetVisitorJourney"],
+    ["analytics_list_visitors", "List X-Ray Visitors", "Read bounded visitor summaries with opaque references, visit counts, returning status, and confirmed conversion status.", AnalyticsExplorerInputSchema, "analyticsListVisitors"],
+    ["analytics_list_journeys", "List X-Ray Journeys", "List confirmed cross-session paths, separately labeled best-guess paths, or both. Candidate-assisted evidence cannot drive CRM or advertising actions.", AnalyticsJourneysInputSchema, "analyticsListJourneys"],
+    ["analytics_get_session_timeline", "Get Session Timeline", "Read confirmed session summary, pages, events, acquisition, session rollups, and chronology. Use visitor journey for cross-session history.", AnalyticsExplorerDetailInputSchema, "analyticsGetSessionTimeline"],
+    ["analytics_get_visitor_journey", "Get Visitor Journey", "Read one confirmed cross-session visitor/person journey: summary, pages, events, acquisition, session rollups, and chronology. Candidate evidence is excluded.", AnalyticsExplorerDetailInputSchema, "analyticsGetVisitorJourney"],
     ["analytics_list_funnels", "List Lead Funnels", "List versioned lead-stage funnel definitions.", AnalyticsSiteResourceInputSchema, "analyticsListFunnels"],
     ["analytics_get_funnel", "Get Lead Funnel Report", "Read a bounded lead-stage funnel report with documented denominators and safe drill-down references.", AnalyticsFunnelReportInputSchema, "analyticsGetFunnel"],
     ["analytics_list_saved_views", "List Saved Analytics Views", "List account-scoped validated report views without unrestricted sharing.", AnalyticsSiteResourceInputSchema, "analyticsListSavedViews"],
@@ -15026,11 +15185,26 @@ var HttpMcpToolExecutor = class {
   analyticsListVisitors(input) {
     return this.getJson(this.analyticsExplorerPath(input, "visitors"));
   }
+  analyticsListJourneys(input) {
+    const query = new URLSearchParams({
+      journeyTier: input.journeyTier ?? "confirmed",
+      limit: String(input.limit ?? 50)
+    });
+    if (input.cursor) query.set("cursor", input.cursor);
+    return this.getJson(`${analyticsSitePath(input.siteId, "journeys")}?${query}`);
+  }
   analyticsGetSessionTimeline(input) {
-    return this.getJson(analyticsSitePath(input.siteId, `journeys/${encodeURIComponent(input.reference)}/timeline`));
+    return this.getJson(this.analyticsJourneyTimelinePath(input));
   }
   analyticsGetVisitorJourney(input) {
-    return this.getJson(analyticsSitePath(input.siteId, `journeys/${encodeURIComponent(input.reference)}/timeline`));
+    return this.getJson(this.analyticsJourneyTimelinePath(input));
+  }
+  analyticsJourneyTimelinePath(input) {
+    const path = analyticsSitePath(input.siteId, `journeys/${encodeURIComponent(input.reference)}/timeline`);
+    const query = new URLSearchParams();
+    if (input.from) query.set("from", input.from);
+    if (input.to) query.set("to", input.to);
+    return query.size ? `${path}?${query}` : path;
   }
   analyticsListFunnels(input) {
     const query = new URLSearchParams({ limit: String(input.limit ?? 50) });
@@ -15170,18 +15344,18 @@ var HttpMcpToolExecutor = class {
   }
   analyticsExportPrivacySubject(input) {
     const { siteId, idempotencyKey, ...body } = input;
-    return this.call(analyticsSitePath(siteId, "privacy/subject/export"), { ...body, idempotencyKey }, this.timeoutMs, "POST", analyticsIdempotencyHeaders("analytics-privacy-export", idempotencyKey));
+    return this.call(analyticsSitePath(siteId, "privacy/subject/export"), body, this.timeoutMs, "POST", analyticsIdempotencyHeaders("analytics-privacy-export", idempotencyKey));
   }
   analyticsDeletePrivacySubject(input) {
     const { siteId, idempotencyKey, ...body } = input;
-    return this.call(analyticsSitePath(siteId, "privacy/subject/delete"), { ...body, idempotencyKey }, this.timeoutMs, "POST", analyticsIdempotencyHeaders("analytics-privacy-delete", idempotencyKey));
+    return this.call(analyticsSitePath(siteId, "privacy/subject/delete"), body, this.timeoutMs, "POST", analyticsIdempotencyHeaders("analytics-privacy-delete", idempotencyKey));
   }
   analyticsDiscoverActivationAssets(input) {
     const query = new URLSearchParams({ platform: input.platform, connectionRef: input.connectionRef });
     return this.getJson(`${analyticsSitePath(input.siteId, "activation-assets")}?${query}`);
   }
   analyticsValidateActivationMapping(input) {
-    const { siteId, ...body } = input;
+    const { siteId, journeyTier: _journeyTier, ...body } = input;
     return this.call(analyticsSitePath(siteId, "activation-mappings/validate"), body, this.timeoutMs, "POST");
   }
   commonsSearchEntities(input) {