mcp-scraper 0.84.0 → 0.86.0

package/CHANGELOG.md

@@ -4,6 +4,42 @@ All notable changes to MCP Scraper are documented here. The format is based on [
 
 ## [Unreleased]
 
+## [0.86.0] - 2026-09-01
+
+### Added
+
+- Added separate authenticated Research and native CRM workspaces with owner-scoped people, organizations, activities, tasks, deals, pipelines, imports, duplicate review, and quality queues.
+- Added 27 governed Memory tools, including native CRM work search and pipeline list/upsert, plus X-Ray handoffs that create or update canonical relationship records without making the analytics store a second CRM.
+- Added operator and agent documentation for choosing Research versus CRM, stable ID handoffs, migration gates, preview/apply authority, first-party tracking limits, and provider readiness.
+
+### Changed
+
+- Expanded the unified MCP contract to 377 tools and the direct Memory contract to 148 tools, with generated Node, Python, CLI, cURL, and public product projections kept in parity.
+- Redirected legacy Analytics CRM bookmarks into native CRM Settings while preserving recognized X-Ray context, and made Vault creation choose an explicit Research or CRM domain.
+
+### Removed
+
+- Withdrew all public Salesforce, Pipedrive, Stripe, and other external CRM setup, discovery, synchronization, and write operations that lack the complete provider release evidence contract.
+
+### Security
+
+- Kept Research evidence and managed CRM relationships in separate schemas and authority domains; counterpart links copy no fields, governed mutations use owner-scoped IDs and idempotency, and real-customer migration remains blocked pending explicit approval.
+
+## [0.85.0] - 2026-09-01
+
+### Changed
+
+- Corrected X-Ray's public contract to a provider-neutral measurement foundation: the Pixel, seven observed attribution models, structured post-purchase surveys, explicit Observed + Reported impact, privacy lifecycle, and truthful unavailable view-evidence states remain supported.
+- Advanced the X-Ray install protocol to 3.0.0 and removed provider authorization and revenue-source continuations from generated install guidance.
+
+### Removed
+
+- Removed the four revenue-source setup MCP tools, five REST operations, revenue-setup ResourceTemplate, Stripe dashboard workflow, and deployable Stripe, Salesforce, and Pipedrive Nango registrations until each provider has complete production receipts.
+
+### Fixed
+
+- Routed the public X-Ray product page and nested attribution and SaaS guides through the canonical `mcpscraper.dev` host instead of leaving the successfully deployed web routes unreachable behind the API project.
+
 ## [0.84.0] - 2026-09-01
 
 ### Added
@@ -1636,7 +1672,8 @@ All notable changes to MCP Scraper are documented here. The format is based on [
 - Write actions remain unavailable until the account owner explicitly enables them.
 - Provider-specific connection data is normalized into one agent-facing contract.
 
-[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.84.0...HEAD
+[Unreleased]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.86.0...HEAD
+[0.86.0]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.85.0...v0.86.0
 [0.84.0]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.83.5...v0.84.0
 [0.83.5]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.83.4...v0.83.5
 [0.83.4]: https://github.com/VilovietaSEO/mcp-scraper/compare/v0.83.3...v0.83.4

package/README.md

@@ -175,7 +175,7 @@ Build the branded one-click bundle:
 npm run build:mcpb
 ```
 
-The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.84.0`, SHA-256 `488d73bb3e41439c6b3676a25850ab4e9b883c29986b59732474ac3bfd48f79b`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
+The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.86.0`, SHA-256 `f8de9e415f4215c7d244ed18222640aabea0743c063c95ce5ad7f3d44303700e`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, API-key configuration field, and manually curated current-release message from the bundle manifest.
 
 The MCPB install exposes every tool — web-intelligence plus all `browser_*` tools — through the one `mcp-scraper` server.
 
@@ -337,7 +337,7 @@ The `mcp-scraper` server (and the MCPB bundle, which runs it) exposes both secti
 
 All MCP tools return `structuredContent` with the IDs, URLs, CSV paths, transcripts, browser session handles, replay paths, artifacts, recipe fields, or blueprint fields needed by the next step, plus readable text content for compatibility. Runtime `tools/list` omits output schemas so strict clients can register the complete catalog; the generated developer manifest retains every canonical output schema for validation and typed SDK generation. All tools carry MCP annotations; file-writing tools such as replay downloads and annotations state their filesystem side effects.
 
-The canonical tool inventory is generated at `docs/mcp-tool-manifest.generated.json`. The unified server exposes 373 tools: 272 scraper, browser, workflow, billing, connected-service, and personal-assistant tools plus 101 durable-memory tools. The scraper-side inventory includes complete Gmail selection, message, attachment, export, bulk-action, and Memory-import workflows; governed personal-assistant commands, messaging, approvals, grants, number setup, and execution readback; durable PAA starts and status; rendered site-content similarity; governed Local Sourcebook and Transparent Commons workflows; direct site-export reads; Editorial Reading Room and News Publisher templates; and production X-Ray setup, analytics, attribution, authoritative SaaS revenue, post-purchase surveys, reported impact, view-evidence status, CRM policy and receipt, campaign, export, and scheduled-report tools. Successful evidence-compiled Local Sourcebook revisions publish automatically to their canonical `localsourcebook.com` category profile and review URLs; administrator controls handle exceptional rejection or unpublishing. Release verification compares the exact local and hosted tool-name sets, not only the count.
+The canonical tool inventory is generated at `docs/mcp-tool-manifest.generated.json`. The unified server exposes 377 tools: 249 scraper, browser, workflow, billing, connected-service, and personal-assistant tools plus 128 durable-memory tools. The scraper-side inventory includes complete Gmail selection, message, attachment, export, bulk-action, and Memory-import workflows; governed personal-assistant commands, messaging, approvals, grants, number setup, and execution readback; durable PAA starts and status; rendered site-content similarity; governed Local Sourcebook and Transparent Commons workflows; direct site-export reads; Editorial Reading Room and News Publisher templates; and production X-Ray setup, analytics, seven-model attribution, structured post-purchase surveys, reported impact, truthful view-evidence status, CRM policy and receipt, campaign, export, and scheduled-report tools. Provider setup remains absent until its authorization, ingestion, reconciliation, privacy, canary, cleanup, and deployment receipts are complete. Successful evidence-compiled Local Sourcebook revisions publish automatically to their canonical `localsourcebook.com` category profile and review URLs; administrator controls handle exceptional rejection or unpublishing. Release verification compares the exact local and hosted tool-name sets, not only the count.
 
 For contract parity, stdio and MCPB memory calls invoke the matching public tool on the hosted MCP Scraper `/mcp` endpoint. The hosted aggregate runtime owns MCP Scraper-specific billing, scheduling, credential, and in-process cutover policy; its internal `/memory/mcp-call` bridge is a fallback to the standalone memory service, not the public stdio execution path. Direct `mcp-memory` OAuth and stdio clients continue to use `memory.mcpscraper.dev` and must be verified as a separate dependent release surface.
 

package/dist/{analytics-repository-4VZQ4TKW.js → analytics-repository-GGJJCVVP.js}

@@ -21,11 +21,13 @@ import {
   appendAnalyticsAuthoritativeOutcomeVersion,
   archiveAnalyticsActivationDestination,
   archiveAnalyticsCampaignLink,
+  assignAnalyticsIdentityNode,
   backfillAnalyticsConfirmedHistory,
   claimAnalyticsCrmImportRows,
   claimAnalyticsFormDeliveryJobs,
   closeAnalyticsPool,
   completeAnalyticsCrmImportRow,
+  completeAnalyticsFormBridgeDelivery,
   completeAnalyticsFormDelivery,
   consumeAnalyticsSurveyInvite,
   createAnalyticsActivationDestination,
@@ -39,6 +41,7 @@ import {
   deferAnalyticsCrmImportRow,
   deferAnalyticsFormDelivery,
   deleteAnalyticsSite,
+  deterministicAnalyticsCrmEntityId,
   enrichAnalyticsExistingCrmIdentity,
   getAnalyticsActivationDestinationConnectionRef,
   getAnalyticsPersonJourney,
@@ -69,6 +72,7 @@ import {
   projectAnalyticsAuthoritativeConversion,
   projectAnalyticsPixelEventConsent,
   queueAnalyticsActivation,
+  queueAnalyticsFormBridgeTransaction,
   queueAnalyticsFormDelivery,
   recordAnalyticsFormSubmission,
   redeemAnalyticsLinkerRecord,
@@ -89,7 +93,7 @@ import {
   updateAnalyticsPixel,
   upsertAnalyticsAdSpend,
   upsertAnalyticsHostGroup
-} from "./chunk-TLRJV4SL.js";
+} from "./chunk-X623GTBV.js";
 import "./chunk-C5Z4OFKW.js";
 import "./chunk-YXNDOQXN.js";
 export {
@@ -115,11 +119,13 @@ export {
   appendAnalyticsAuthoritativeOutcomeVersion,
   archiveAnalyticsActivationDestination,
   archiveAnalyticsCampaignLink,
+  assignAnalyticsIdentityNode,
   backfillAnalyticsConfirmedHistory,
   claimAnalyticsCrmImportRows,
   claimAnalyticsFormDeliveryJobs,
   closeAnalyticsPool,
   completeAnalyticsCrmImportRow,
+  completeAnalyticsFormBridgeDelivery,
   completeAnalyticsFormDelivery,
   consumeAnalyticsSurveyInvite,
   createAnalyticsActivationDestination,
@@ -133,6 +139,7 @@ export {
   deferAnalyticsCrmImportRow,
   deferAnalyticsFormDelivery,
   deleteAnalyticsSite,
+  deterministicAnalyticsCrmEntityId,
   enrichAnalyticsExistingCrmIdentity,
   getAnalyticsActivationDestinationConnectionRef,
   getAnalyticsPersonJourney,
@@ -163,6 +170,7 @@ export {
   projectAnalyticsAuthoritativeConversion,
   projectAnalyticsPixelEventConsent,
   queueAnalyticsActivation,
+  queueAnalyticsFormBridgeTransaction,
   queueAnalyticsFormDelivery,
   recordAnalyticsFormSubmission,
   redeemAnalyticsLinkerRecord,

package/dist/bin/api-server.js

@@ -17,8 +17,8 @@ loadDotEnv();
 async function main() {
   const [{ serve }, { app, personalAssistantProductionStartup }, { startWorker }, { migrate }] = await Promise.all([
     import("@hono/node-server"),
-    import("../server-3F3JMHBF.js"),
-    import("../worker-VTFGHWZL.js"),
+    import("../server-OZBTZIDZ.js"),
+    import("../worker-OQSFSLNG.js"),
     import("../db-Z34LPZNR.js")
   ]);
   const PORT = parseInt(process.env.PORT ?? "3001");
@@ -26,7 +26,7 @@ async function main() {
     await personalAssistantProductionStartup;
     await migrate();
     if (process.env.ANALYTICS_DATABASE_URL) {
-      const { migrateAnalytics } = await import("../analytics-repository-4VZQ4TKW.js");
+      const { migrateAnalytics } = await import("../analytics-repository-GGJJCVVP.js");
       await migrateAnalytics();
     }
     startWorker();

package/dist/bin/mcp-scraper-cli.js

@@ -6,7 +6,7 @@ import {
   openWorkflowReport,
   runWorkflow,
   workflowOutputBaseDir
-} from "../chunk-LHIWX7RM.js";
+} from "../chunk-6IOGTFNS.js";
 import "../chunk-RJ7JVYKU.js";
 import "../chunk-OWF2JJKN.js";
 import {
@@ -15,11 +15,11 @@ import {
   XRAY_INSTALL_PROTOCOL_VERSION,
   renderXraySetupPrompt,
   xrayHostRecipe
-} from "../chunk-4S6HPHPB.js";
+} from "../chunk-P7FWOMU7.js";
 import "../chunk-GGZEC22A.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-OUTE3755.js";
+} from "../chunk-36EAKRR6.js";
 
 // src/cli/human-cli.ts
 import { Command } from "commander";

package/dist/bin/mcp-scraper-core.js

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   runMcpScraperStdio
-} from "../chunk-WDWWCNMW.js";
-import "../chunk-U77X4NIR.js";
+} from "../chunk-QKWNEMGH.js";
+import "../chunk-FBB6DEUV.js";
 import "../chunk-PGJQDMC2.js";
 import "../chunk-DNM65UCK.js";
 import "../chunk-T3MZISOF.js";
 import "../chunk-6HAV7LCE.js";
-import "../chunk-UM7DCY6W.js";
+import "../chunk-NKRO2SUO.js";
 import "../chunk-OM7HVEJ3.js";
 import "../chunk-OPQIGAFB.js";
-import "../chunk-NLWBM55O.js";
-import "../chunk-4S6HPHPB.js";
+import "../chunk-7523VOQT.js";
+import "../chunk-P7FWOMU7.js";
 import "../chunk-GGZEC22A.js";
-import "../chunk-OUTE3755.js";
+import "../chunk-36EAKRR6.js";
 import "../chunk-YXNDOQXN.js";
 
 // src/mcp/thorbit-restricted-tool-surface.ts

package/dist/bin/mcp-scraper-install.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   renderInstallTerminal
-} from "../chunk-NLWBM55O.js";
+} from "../chunk-7523VOQT.js";
 import {
   PACKAGE_VERSION
-} from "../chunk-OUTE3755.js";
+} from "../chunk-36EAKRR6.js";
 
 // bin/mcp-scraper-install.ts
 var noColor = process.argv.includes("--no-color") || process.env.NO_COLOR !== void 0 || process.env.FORCE_COLOR === "0" || !process.stdout.isTTY;

package/dist/bin/mcp-stdio-server.js

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   runMcpScraperStdio
-} from "../chunk-WDWWCNMW.js";
-import "../chunk-U77X4NIR.js";
+} from "../chunk-QKWNEMGH.js";
+import "../chunk-FBB6DEUV.js";
 import "../chunk-PGJQDMC2.js";
 import "../chunk-DNM65UCK.js";
 import "../chunk-T3MZISOF.js";
 import "../chunk-6HAV7LCE.js";
-import "../chunk-UM7DCY6W.js";
+import "../chunk-NKRO2SUO.js";
 import "../chunk-OM7HVEJ3.js";
 import "../chunk-OPQIGAFB.js";
-import "../chunk-NLWBM55O.js";
-import "../chunk-4S6HPHPB.js";
+import "../chunk-7523VOQT.js";
+import "../chunk-P7FWOMU7.js";
 import "../chunk-GGZEC22A.js";
-import "../chunk-OUTE3755.js";
+import "../chunk-36EAKRR6.js";
 import "../chunk-YXNDOQXN.js";
 
 // bin/mcp-stdio-server.ts

package/dist/{chunk-OUTE3755.js → chunk-36EAKRR6.js}

@@ -1,5 +1,5 @@
 // src/version.ts
-var PACKAGE_VERSION = "0.84.0";
+var PACKAGE_VERSION = "0.86.0";
 
 export {
   PACKAGE_VERSION

package/dist/{chunk-LHIWX7RM.js → chunk-6IOGTFNS.js}

@@ -11,7 +11,7 @@ import {
   extractContactEvidence,
   extractSerpEmailEvidence,
   selectPrimaryEmail
-} from "./chunk-4S6HPHPB.js";
+} from "./chunk-P7FWOMU7.js";
 
 // src/lib/slugify.ts
 function slugify(s) {

package/dist/{chunk-NLWBM55O.js → chunk-7523VOQT.js}

@@ -1,6 +1,6 @@
 // release-message.json
 var release_message_default = {
-  message: "Connect authoritative subscription outcomes, keep customer-reported influence separate from observed attribution, and complete the evidence-governed SaaS setup through dashboard or MCP."
+  message: "Keep X-Ray measurement, seven-model attribution, structured surveys, privacy controls, and truthful evidence states while withdrawing provider setup that is not yet production-proven."
 };
 
 // src/install-terminal.ts
@@ -55,7 +55,7 @@ function renderInstallTerminal(options) {
     "1/1 install surfaces ready",
     colorize(`Newest in v${options.version}: ${release_message_default.message}`, "lime", color),
     "",
-    `${colorize("Tools", "cyan", color)}  ${colorize("(373 MCP tools)", "muted", color)}`,
+    `${colorize("Tools", "cyan", color)}  ${colorize("(377 MCP tools)", "muted", color)}`,
     toolRow("search", ["harvest_paa", "search_serp", "maps_search", "maps_place_intel"], color),
     toolRow("extract", ["extract_url", "map_site_urls", "extract_site", "audit_site", "directory_workflow"], color),
     toolRow("build", ["create_editorial_reading_room", "rank_tracker_workflow", "portable HTML"], color),