mcp-scraper 0.83.5 → 0.84.0

package/dist/{chunk-CNAJWRJT.js → chunk-TLRJV4SL.js}

@@ -3393,9 +3393,247 @@ async function migrateAnalytics() {
     await client.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_owner_updated ON analytics_site_setups(owner_user_id, updated_at DESC)");
     await client.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_site_updated ON analytics_site_setups(site_id, updated_at DESC)");
     await client.query("CREATE INDEX IF NOT EXISTS analytics_site_setup_receipts_setup_revision ON analytics_site_setup_receipts(setup_id, revision, occurred_at)");
+    await client.query(`ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_key text`);
+    await client.query(`ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_id uuid`);
+    await client.query(`ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_version_id uuid`);
+    await client.query(`ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS restated_at timestamptz`);
+    await client.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_conversions_site_authority_key
+      ON analytics_conversions(site_id, authority_key) WHERE authority_key IS NOT NULL`);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_authorities (
+        authority_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        outcome_family text NOT NULL,
+        authority_role text NOT NULL CHECK (authority_role IN ('primary','observation')),
+        state text NOT NULL CHECK (state IN ('configured_unverified','verified','live','degraded','disabled','blocked')),
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        disabled_at timestamptz,
+        UNIQUE(site_id, provider, source_account_ref, outcome_family)
+      )
+    `);
+    await client.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_revenue_authorities_one_primary
+      ON analytics_revenue_authorities(site_id, outcome_family)
+      WHERE authority_role='primary' AND state <> 'disabled'`);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_provider_customer_bindings (
+        binding_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE CASCADE,
+        provider_customer_ref_hmac text NOT NULL CHECK (provider_customer_ref_hmac ~ '^[a-f0-9]{64}$'),
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        verification_status text NOT NULL CHECK (verification_status IN ('verified','revoked')),
+        evidence_ref text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        UNIQUE(authority_id, provider_customer_ref_hmac),
+        UNIQUE(authority_id, person_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcomes (
+        outcome_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE RESTRICT,
+        authority_key text NOT NULL,
+        provider_object_kind text NOT NULL,
+        provider_object_ref_hmac text NOT NULL,
+        provider_customer_ref_hmac text,
+        outcome_kind text NOT NULL,
+        current_version integer NOT NULL DEFAULT 0 CHECK (current_version >= 0),
+        conversion_id uuid REFERENCES analytics_conversions(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, authority_key)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcome_versions (
+        version_id uuid NOT NULL UNIQUE,
+        outcome_id uuid NOT NULL REFERENCES analytics_authoritative_outcomes(outcome_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        transport_event_id text NOT NULL,
+        status text NOT NULL,
+        value_minor bigint NOT NULL,
+        currency text NOT NULL CHECK (currency ~ '^[A-Z]{3}$'),
+        occurred_at timestamptz NOT NULL,
+        observed_at timestamptz NOT NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        receipt_ref text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(outcome_id, version),
+        UNIQUE(site_id, transport_event_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_revisions (
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        authority_id uuid REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL,
+        state text NOT NULL,
+        plan jsonb NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(setup_id, revision)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_receipts (
+        receipt_id uuid PRIMARY KEY,
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        status text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(setup_id, revision) REFERENCES analytics_revenue_setup_revisions(setup_id, revision) ON DELETE CASCADE,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_surveys (
+        survey_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        state text NOT NULL CHECK (state IN ('draft','published','paused','archived')),
+        name text NOT NULL,
+        question text NOT NULL,
+        selection_mode text NOT NULL CHECK (selection_mode IN ('single','multiple')),
+        eligible_outcome_families text[] NOT NULL,
+        exchange_ttl_seconds integer NOT NULL CHECK (exchange_ttl_seconds BETWEEN 60 AND 86400),
+        session_ttl_seconds integer NOT NULL CHECK (session_ttl_seconds BETWEEN 60 AND 86400),
+        approved_copy_id text,
+        create_idempotency_key text,
+        create_request_fingerprint text,
+        state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb CHECK (jsonb_typeof(state_transition_receipts)='object'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        archived_at timestamptz,
+        UNIQUE(site_id, create_idempotency_key)
+      )
+    `);
+    await client.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD COLUMN IF NOT EXISTS state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb`);
+    await client.query(`ALTER TABLE analytics_post_purchase_surveys
+      DROP CONSTRAINT IF EXISTS analytics_post_purchase_surveys_state_transition_receipts_check`);
+    await client.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD CONSTRAINT analytics_post_purchase_surveys_state_transition_receipts_check
+      CHECK (jsonb_typeof(state_transition_receipts)='object')`);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_options (
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        option_id text NOT NULL,
+        label text NOT NULL,
+        position integer NOT NULL CHECK (position >= 0),
+        active boolean NOT NULL DEFAULT true,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(survey_id, revision, option_id),
+        UNIQUE(survey_id, revision, position)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_invites (
+        invite_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invitation_token_digest text NOT NULL CHECK (invitation_token_digest ~ '^[a-f0-9]{64}$'),
+        purpose text NOT NULL DEFAULT 'customer_reported_measurement' CHECK (purpose='customer_reported_measurement'),
+        approved_copy_id text NOT NULL,
+        exchange_expires_at timestamptz NOT NULL,
+        exchanged_at timestamptz,
+        session_token_digest text CHECK (session_token_digest IS NULL OR session_token_digest ~ '^[a-f0-9]{64}$'),
+        session_expires_at timestamptz,
+        response_id uuid,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, invitation_token_digest),
+        UNIQUE(site_id, session_token_digest),
+        UNIQUE(survey_id, conversion_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_responses (
+        response_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invite_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_invites(invite_id) ON DELETE RESTRICT,
+        body_fingerprint text NOT NULL CHECK (body_fingerprint ~ '^[a-f0-9]{64}$'),
+        submitted_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(survey_id, conversion_id),
+        UNIQUE(invite_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reported_influences (
+        evidence_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        response_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_responses(response_id) ON DELETE CASCADE,
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        option_id text NOT NULL,
+        option_label text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(response_id, option_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_view_evidence_receipts (
+        receipt_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        provider_event_id text NOT NULL,
+        evidence_granularity text NOT NULL CHECK (evidence_granularity='event_level'),
+        verification_status text NOT NULL CHECK (verification_status='verified'),
+        subject_kind text NOT NULL CHECK (subject_kind IN ('person','session','visitor')),
+        subject_ref_hmac text NOT NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        session_id uuid REFERENCES analytics_sessions(id) ON DELETE SET NULL,
+        provider_receipt_ref text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        retention_expires_at timestamptz NOT NULL,
+        touch_id uuid REFERENCES analytics_attribution_touches(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, provider, source_account_ref, provider_event_id)
+      )
+    `);
+    await client.query(`ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_id_fkey`);
+    await client.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_id_fkey
+      FOREIGN KEY(authority_id) REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL`);
+    await client.query(`ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_version_id_fkey`);
+    await client.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_version_id_fkey
+      FOREIGN KEY(authority_version_id) REFERENCES analytics_authoritative_outcome_versions(version_id) ON DELETE SET NULL`);
+    await client.query(`CREATE INDEX IF NOT EXISTS analytics_authoritative_outcomes_person
+      ON analytics_authoritative_outcomes(site_id, person_id, last_observed_at DESC)`);
+    await client.query(`CREATE INDEX IF NOT EXISTS analytics_reported_influences_conversion
+      ON analytics_reported_influences(site_id, conversion_id, created_at)`);
+    await client.query(`CREATE INDEX IF NOT EXISTS analytics_view_evidence_subject
+      ON analytics_view_evidence_receipts(site_id, subject_ref_hmac, occurred_at DESC)`);
     await client.query(`
       INSERT INTO analytics_schema_migrations(version)
-      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4'), ('2026-08-27.1'), ('2026-08-28.1'), ('2026-08-28.2'), ('2026-08-28.3'), ('2026-08-28.4'), ('2026-08-31.1'), ('2026-09-01.1')
+      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4'), ('2026-08-27.1'), ('2026-08-28.1'), ('2026-08-28.2'), ('2026-08-28.3'), ('2026-08-28.4'), ('2026-08-31.1'), ('2026-09-01.1'), ('2026-09-01.2')
       ON CONFLICT (version) DO NOTHING
     `);
   } catch (error) {
@@ -4594,6 +4832,271 @@ function paginateRows(rows, input, fingerprint) {
     }
   };
 }
+async function insertAnalyticsRevenueSetupRevision(input) {
+  const current = await input.db.query(
+    `SELECT revision FROM analytics_revenue_setup_revisions
+      WHERE setup_id=$1 ORDER BY revision DESC LIMIT 1 FOR UPDATE`,
+    [input.setupId]
+  );
+  const currentRevision = current.rows[0]?.revision ?? 0;
+  if (currentRevision !== input.expectedRevision) {
+    throw new AnalyticsRepositoryError(
+      "analytics_revenue_setup_stale_revision",
+      `Revenue setup revision ${input.expectedRevision} is stale; current revision is ${currentRevision}.`,
+      409
+    );
+  }
+  const nextRevision = currentRevision + 1;
+  await input.db.query(
+    `INSERT INTO analytics_revenue_setup_revisions(
+       setup_id,site_id,revision,authority_id,state,plan,request_fingerprint,created_by_user_id
+     ) VALUES($1,$2,$3,$4,$5,$6::jsonb,$7,$8)`,
+    [
+      input.setupId,
+      input.siteId,
+      nextRevision,
+      input.authorityId ?? null,
+      input.state,
+      JSON.stringify(input.plan),
+      input.requestFingerprint,
+      input.createdByUserId
+    ]
+  );
+  return nextRevision;
+}
+async function appendAnalyticsAuthoritativeOutcomeVersion(input) {
+  const replay = await input.db.query(
+    `SELECT version_id,version,request_fingerprint FROM analytics_authoritative_outcome_versions
+      WHERE site_id=$1 AND transport_event_id=$2`,
+    [input.siteId, input.transportEventId]
+  );
+  if (replay.rows[0]) {
+    if (replay.rows[0].request_fingerprint !== input.requestFingerprint) {
+      throw new AnalyticsRepositoryError(
+        "analytics_authoritative_outcome_replay_conflict",
+        "The provider event was replayed with a different normalized body.",
+        409
+      );
+    }
+    return { versionId: replay.rows[0].version_id, version: replay.rows[0].version, replay: true };
+  }
+  const locked = await input.db.query(
+    `SELECT current_version FROM analytics_authoritative_outcomes
+      WHERE outcome_id=$1 AND site_id=$2 FOR UPDATE`,
+    [input.outcomeId, input.siteId]
+  );
+  if (!locked.rows[0]) throw new AnalyticsRepositoryError("analytics_authoritative_outcome_not_found", "Authoritative outcome not found.", 404);
+  const version = locked.rows[0].current_version + 1;
+  const versionId = randomUUID2();
+  await input.db.query(
+    `INSERT INTO analytics_authoritative_outcome_versions(
+       version_id,outcome_id,site_id,version,transport_event_id,status,value_minor,currency,
+       occurred_at,observed_at,provenance,receipt_ref,request_fingerprint
+     ) VALUES($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13)`,
+    [
+      versionId,
+      input.outcomeId,
+      input.siteId,
+      version,
+      input.transportEventId,
+      input.status,
+      input.valueMinor.toString(),
+      input.currency.toUpperCase(),
+      input.occurredAt,
+      input.observedAt,
+      JSON.stringify(input.provenance),
+      input.receiptRef,
+      input.requestFingerprint
+    ]
+  );
+  await input.db.query(
+    `UPDATE analytics_authoritative_outcomes
+      SET current_version=$2,last_observed_at=$3 WHERE outcome_id=$1`,
+    [input.outcomeId, version, input.observedAt]
+  );
+  return { versionId, version, replay: false };
+}
+async function projectAnalyticsAuthoritativeConversion(input) {
+  const verified = await input.db.query(
+    `SELECT outcome.conversion_id,authority.authority_role,
+            authority.state AS authority_state
+       FROM analytics_authoritative_outcomes outcome
+       JOIN analytics_revenue_authorities authority
+         ON authority.authority_id=outcome.authority_id
+        AND authority.site_id=outcome.site_id
+       JOIN analytics_authoritative_outcome_versions version
+         ON version.outcome_id=outcome.outcome_id
+        AND version.site_id=outcome.site_id
+       JOIN analytics_provider_customer_bindings binding
+         ON binding.authority_id=authority.authority_id
+        AND binding.site_id=authority.site_id
+        AND binding.person_id=outcome.person_id
+        AND binding.verification_status='verified'
+      WHERE outcome.site_id=$1 AND outcome.outcome_id=$2
+        AND outcome.authority_id=$3 AND outcome.authority_key=$4
+        AND version.version_id=$5 AND outcome.person_id=$6
+      FOR UPDATE OF outcome`,
+    [
+      input.siteId,
+      input.outcomeId,
+      input.authorityId,
+      input.authorityKey,
+      input.authorityVersionId,
+      input.personId
+    ]
+  );
+  const evidence = verified.rows[0];
+  if (!evidence) {
+    throw new AnalyticsRepositoryError(
+      "analytics_revenue_projection_evidence_invalid",
+      "The authoritative outcome, version, and customer binding could not be verified.",
+      409
+    );
+  }
+  if (evidence.authority_role !== "primary" || !["verified", "live", "degraded"].includes(evidence.authority_state)) {
+    throw new AnalyticsRepositoryError(
+      "analytics_revenue_projection_authority_ineligible",
+      "Only an active primary revenue authority may project conversions.",
+      409
+    );
+  }
+  const existing = await input.db.query(
+    `SELECT conversion.id
+       FROM analytics_conversions conversion
+       JOIN analytics_authoritative_outcomes outcome
+         ON outcome.conversion_id=conversion.id
+        AND outcome.site_id=conversion.site_id
+      WHERE conversion.site_id=$1 AND conversion.authority_key=$2
+        AND outcome.outcome_id=$3 AND outcome.authority_id=$4
+      FOR UPDATE OF conversion`,
+    [input.siteId, input.authorityKey, input.outcomeId, input.authorityId]
+  );
+  let conversionId = existing.rows[0]?.id;
+  let created = false;
+  let restated = false;
+  if (conversionId) {
+    await input.db.query(
+      `UPDATE analytics_conversions
+          SET value_minor=$2,currency=$3,occurred_at=$4,person_id=$5,
+              authority_version_id=$6,value_source='restatement',
+              value_provenance=$7::jsonb,restated_at=now()
+        WHERE id=$1 AND site_id=$8 AND authority_id=$9 AND authority_key=$10`,
+      [
+        conversionId,
+        input.valueMinor.toString(),
+        input.currency.toUpperCase(),
+        input.occurredAt,
+        input.personId,
+        input.authorityVersionId,
+        JSON.stringify(input.valueProvenance),
+        input.siteId,
+        input.authorityId,
+        input.authorityKey
+      ]
+    );
+    restated = true;
+  } else {
+    const id = randomUUID2();
+    const inserted = await input.db.query(
+      `INSERT INTO analytics_conversions(
+         id,source_event_id,site_id,conversion_kind,value_minor,currency,
+         occurred_at,person_id,authority_id,authority_key,authority_version_id,
+         value_source,value_provenance
+       ) VALUES($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,'verified_revenue',$12::jsonb)
+       ON CONFLICT(site_id,authority_key) WHERE authority_key IS NOT NULL
+       DO NOTHING RETURNING id`,
+      [
+        id,
+        input.sourceEventId,
+        input.siteId,
+        input.conversionKind,
+        input.valueMinor.toString(),
+        input.currency.toUpperCase(),
+        input.occurredAt,
+        input.personId,
+        input.authorityId,
+        input.authorityKey,
+        input.authorityVersionId,
+        JSON.stringify(input.valueProvenance)
+      ]
+    );
+    conversionId = inserted.rows[0]?.id;
+    created = Boolean(conversionId);
+    if (!conversionId) {
+      const winner = await input.db.query(
+        `SELECT conversion.id
+           FROM analytics_conversions conversion
+           JOIN analytics_authoritative_outcomes outcome
+             ON outcome.conversion_id=conversion.id
+          WHERE conversion.site_id=$1 AND conversion.authority_key=$2
+            AND outcome.outcome_id=$3 AND outcome.authority_id=$4
+          FOR UPDATE OF conversion`,
+        [input.siteId, input.authorityKey, input.outcomeId, input.authorityId]
+      );
+      if (!winner.rows[0]) {
+        throw new AnalyticsRepositoryError(
+          "analytics_conversion_authority_conflict",
+          "The authority key is already projected from a different authoritative outcome.",
+          409
+        );
+      }
+      conversionId = winner.rows[0].id;
+    }
+    await input.db.query(
+      `UPDATE analytics_authoritative_outcomes SET conversion_id=$2
+        WHERE outcome_id=$1 AND site_id=$3
+          AND (conversion_id IS NULL OR conversion_id=$2)`,
+      [input.outcomeId, conversionId, input.siteId]
+    );
+  }
+  let queuedDestinations = 0;
+  if (created && input.activationPayloadCiphertext) {
+    const destinations = await input.db.query(
+      `SELECT id,event_mapping FROM analytics_activation_destinations
+        WHERE site_id=$1 AND status='active'
+          AND automatic_delivery_enabled=true AND readiness IN ('verified','live')`,
+      [input.siteId]
+    );
+    for (const destination of destinations.rows.filter((row) => activationMappingAllows(row.event_mapping, input.conversionKind))) {
+      const queued = await input.db.query(
+        `INSERT INTO analytics_activation_jobs(
+           id,destination_id,conversion_id,person_id,payload_ciphertext
+         ) VALUES($1,$2,$3,$4,$5)
+         ON CONFLICT(destination_id,conversion_id) DO NOTHING`,
+        [
+          randomUUID2(),
+          destination.id,
+          conversionId,
+          input.personId,
+          input.activationPayloadCiphertext
+        ]
+      );
+      queuedDestinations += queued.rowCount ?? 0;
+    }
+  }
+  return { id: conversionId, created, restated, queuedDestinations };
+}
+async function consumeAnalyticsSurveyInvite(input) {
+  const invite = await input.db.query(
+    `SELECT invite_id,survey_id,survey_revision,conversion_id,exchange_expires_at,exchanged_at
+       FROM analytics_post_purchase_survey_invites
+      WHERE site_id=$1 AND invitation_token_digest=$2 FOR UPDATE`,
+    [input.siteId, input.invitationTokenDigest]
+  );
+  const row = invite.rows[0];
+  if (!row) throw new AnalyticsRepositoryError("analytics_survey_invite_not_found", "Survey invitation not found.", 404);
+  if (row.exchanged_at) throw new AnalyticsRepositoryError("analytics_survey_invite_consumed", "Survey invitation has already been exchanged.", 409);
+  if (Date.parse(new Date(row.exchange_expires_at).toISOString()) <= Date.parse(input.now)) {
+    throw new AnalyticsRepositoryError("analytics_survey_exchange_expired", "Survey exchange code has expired.", 410);
+  }
+  await input.db.query(
+    `UPDATE analytics_post_purchase_survey_invites
+        SET exchanged_at=$2,session_token_digest=$3,session_expires_at=$4
+      WHERE invite_id=$1`,
+    [row.invite_id, input.now, input.sessionTokenDigest, input.sessionExpiresAt]
+  );
+  return { inviteId: row.invite_id, surveyId: row.survey_id, surveyRevision: row.survey_revision, conversionId: row.conversion_id };
+}
 async function createAnalyticsConversion(input) {
   const db = getAnalyticsPool();
   const client = await db.connect();
@@ -4618,33 +5121,77 @@ async function createAnalyticsConversion(input) {
              ORDER BY e.confidence DESC LIMIT 1`,
       [input.siteId, identityHmac("session_id", input.sessionId)]
     ) : { rows: [] };
-    const proposedId = randomUUID2();
-    const inserted = await client.query(
-      `INSERT INTO analytics_conversions(
-         id, source_event_id, site_id, pixel_id, session_id, conversion_kind,
-         value_minor, currency, occurred_at, person_id, order_id, session_hmac
-       ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12)
-       ON CONFLICT(site_id, source_event_id) DO NOTHING RETURNING id`,
-      [
-        proposedId,
-        input.sourceEventId,
-        input.siteId,
-        input.pixelId ?? null,
-        input.sessionId ?? null,
-        input.conversionKind,
-        input.valueMinor ?? 0,
-        (input.currency || "USD").toUpperCase(),
-        input.occurredAt,
-        resolvedPerson.rows[0]?.person_id ?? null,
-        input.orderId ?? null,
-        input.sessionId ? identityHmac("session_id", input.sessionId) : null
-      ]
-    );
-    const created = Boolean(inserted.rowCount);
-    const conversionId = created ? inserted.rows[0].id : (await client.query(
-      `SELECT id FROM analytics_conversions WHERE site_id = $1 AND source_event_id = $2`,
-      [input.siteId, input.sourceEventId]
-    )).rows[0].id;
+    const authorityExisting = input.authority ? await client.query(
+      `SELECT id FROM analytics_conversions
+            WHERE site_id=$1 AND authority_key=$2 FOR UPDATE`,
+      [input.siteId, input.authority.authorityKey]
+    ) : { rows: [], rowCount: 0 };
+    let created = false;
+    let restated = false;
+    let conversionId;
+    if (authorityExisting.rows[0]) {
+      conversionId = authorityExisting.rows[0].id;
+      await client.query(
+        `UPDATE analytics_conversions
+            SET value_minor=$2, currency=$3, occurred_at=$4,
+                value_source='restatement', value_provenance=$5::jsonb,
+                authority_id=$6, authority_version_id=$7, restated_at=now()
+          WHERE id=$1`,
+        [
+          conversionId,
+          input.valueMinor ?? 0,
+          (input.currency || "USD").toUpperCase(),
+          input.occurredAt,
+          JSON.stringify(input.authority?.valueProvenance ?? {}),
+          input.authority?.authorityId,
+          input.authority?.authorityVersionId ?? null
+        ]
+      );
+      restated = true;
+    } else {
+      const proposedId = randomUUID2();
+      const inserted = await client.query(
+        `INSERT INTO analytics_conversions(
+           id, source_event_id, site_id, pixel_id, session_id, conversion_kind,
+           value_minor, currency, occurred_at, person_id, order_id, session_hmac,
+           authority_id, authority_key, authority_version_id, value_source, value_provenance
+         ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17::jsonb)
+         ON CONFLICT(site_id, source_event_id) DO NOTHING RETURNING id`,
+        [
+          proposedId,
+          input.sourceEventId,
+          input.siteId,
+          input.pixelId ?? null,
+          input.sessionId ?? null,
+          input.conversionKind,
+          input.valueMinor ?? 0,
+          (input.currency || "USD").toUpperCase(),
+          input.occurredAt,
+          resolvedPerson.rows[0]?.person_id ?? null,
+          input.orderId ?? null,
+          input.sessionId ? identityHmac("session_id", input.sessionId) : null,
+          input.authority?.authorityId ?? null,
+          input.authority?.authorityKey ?? null,
+          input.authority?.authorityVersionId ?? null,
+          input.authority ? "verified_revenue" : "default_zero",
+          JSON.stringify(input.authority?.valueProvenance ?? {})
+        ]
+      );
+      created = Boolean(inserted.rowCount);
+      if (created) {
+        conversionId = inserted.rows[0].id;
+      } else {
+        const existing = await client.query(
+          `SELECT id,authority_key FROM analytics_conversions WHERE site_id=$1 AND source_event_id=$2 FOR UPDATE`,
+          [input.siteId, input.sourceEventId]
+        );
+        if (!existing.rows[0]) throw new AnalyticsRepositoryError("analytics_conversion_conflict", "Conversion conflict could not be resolved.", 409);
+        if (input.authority && existing.rows[0].authority_key !== input.authority.authorityKey) {
+          throw new AnalyticsRepositoryError("analytics_conversion_authority_conflict", "The source event is already bound to a different revenue authority.", 409);
+        }
+        conversionId = existing.rows[0].id;
+      }
+    }
     let queuedDestinations = 0;
     if (created && input.activationPayloadCiphertext) {
       const destinations = await client.query(
@@ -4671,7 +5218,7 @@ async function createAnalyticsConversion(input) {
       }
     }
     await client.query("COMMIT");
-    return { id: conversionId, created, queuedDestinations };
+    return { id: conversionId, created, restated, queuedDestinations };
   } catch (error) {
     await client.query("ROLLBACK");
     throw error;
@@ -7375,6 +7922,9 @@ export {
   assertConnectionSupportsProvider,
   buildProviderDeliveryRequest,
   normalizeProviderReceipt,
+  ANALYTICS_ATTRIBUTION_MODELS,
+  buildAnalyticsAttributionReport,
+  readImmutableConfirmedAttributionEvidence,
   AnalyticsRepositoryError,
   getAnalyticsPool,
   closeAnalyticsPool,
@@ -7407,6 +7957,10 @@ export {
   normalizeAnalyticsUrl,
   sanitizeAnalyticsProperties,
   ingestAnalyticsEvents,
+  insertAnalyticsRevenueSetupRevision,
+  appendAnalyticsAuthoritativeOutcomeVersion,
+  projectAnalyticsAuthoritativeConversion,
+  consumeAnalyticsSurveyInvite,
   createAnalyticsConversion,
   analyticsOverview,
   analyticsTimeseries,