scrape-authenticated

Last-resort capture path. Drives the user's real Chrome, so requests carry the user's cookies, login state, and Israeli IP.

When to use

Only when one of the following is true:

scrape-article reported that headless rungs 1–3 hit a paywall/login wall.
sites.yaml marks the domain as strategy: authenticated (known paywalled site).
User explicitly asks to capture from a logged-in session.

Otherwise reject and redirect to scrape-article. A GUI browser run is heavier, slower, and reveals the user's identity to the site.

bb-browser (epiral/bb-browser) — CLI + MCP that drives the user's logged-in Chrome.

If bb-browser isn't installed, tell the user and recommend capture-setup rather than silently falling back.