@ainyc/canonry 1.40.1 → 1.44.0

package/dist/{chunk-FXHVGU5S.js → chunk-C3LF36DQ.js}

@@ -6,6 +6,7 @@ import {
   competitors,
   createLogger,
   gaAiReferrals,
+  gaSocialReferrals,
   gaTrafficSnapshots,
   gaTrafficSummaries,
   gscCoverageSnapshots,
@@ -21,7 +22,7 @@ import {
   runs,
   schedules,
   usageCounters
-} from "./chunk-FOWWBLXD.js";
+} from "./chunk-AATIMNOX.js";
 
 // src/config.ts
 import fs from "fs";
@@ -978,6 +979,11 @@ var scheduleUpsertRequestSchema = z10.object({
   { message: 'Exactly one of "preset" or "cron" must be provided' }
 );
 
+// ../contracts/src/analytics.ts
+import { z as z11 } from "zod";
+var visibilityMetricModeSchema = z11.enum(["answer", "citation"]);
+var VisibilityMetricModes = visibilityMetricModeSchema.enum;
+
 // ../contracts/src/source-categories.ts
 var SOURCE_CATEGORY_RULES = [
   // Forums
@@ -1071,62 +1077,90 @@ function categoryLabel(category) {
 }
 
 // ../contracts/src/ga.ts
-import { z as z11 } from "zod";
-var ga4ConnectionDtoSchema = z11.object({
-  id: z11.string(),
-  projectId: z11.string(),
-  propertyId: z11.string(),
-  clientEmail: z11.string(),
-  connected: z11.boolean(),
-  createdAt: z11.string(),
-  updatedAt: z11.string()
+import { z as z12 } from "zod";
+var ga4ConnectionDtoSchema = z12.object({
+  id: z12.string(),
+  projectId: z12.string(),
+  propertyId: z12.string(),
+  clientEmail: z12.string(),
+  connected: z12.boolean(),
+  createdAt: z12.string(),
+  updatedAt: z12.string()
 });
-var ga4TrafficSnapshotDtoSchema = z11.object({
-  date: z11.string(),
-  landingPage: z11.string(),
-  sessions: z11.number(),
-  organicSessions: z11.number(),
-  users: z11.number()
+var ga4TrafficSnapshotDtoSchema = z12.object({
+  date: z12.string(),
+  landingPage: z12.string(),
+  sessions: z12.number(),
+  organicSessions: z12.number(),
+  users: z12.number()
 });
-var ga4SourceDimensionSchema = z11.enum(["session", "first_user", "manual_utm"]);
-var ga4AiReferralDtoSchema = z11.object({
-  source: z11.string(),
-  medium: z11.string(),
-  sessions: z11.number(),
-  users: z11.number(),
+var ga4SourceDimensionSchema = z12.enum(["session", "first_user", "manual_utm"]);
+var ga4AiReferralDtoSchema = z12.object({
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
   sourceDimension: ga4SourceDimensionSchema
 });
-var ga4TrafficSummaryDtoSchema = z11.object({
-  totalSessions: z11.number(),
-  totalOrganicSessions: z11.number(),
-  totalUsers: z11.number(),
-  topPages: z11.array(z11.object({
-    landingPage: z11.string(),
-    sessions: z11.number(),
-    organicSessions: z11.number(),
-    users: z11.number()
+var ga4SocialReferralDtoSchema = z12.object({
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
+  /** GA4 default channel group (e.g. 'Organic Social', 'Paid Social') */
+  channelGroup: z12.string()
+});
+var ga4TrafficSummaryDtoSchema = z12.object({
+  totalSessions: z12.number(),
+  totalOrganicSessions: z12.number(),
+  totalUsers: z12.number(),
+  topPages: z12.array(z12.object({
+    landingPage: z12.string(),
+    sessions: z12.number(),
+    organicSessions: z12.number(),
+    users: z12.number()
   })),
-  aiReferrals: z11.array(ga4AiReferralDtoSchema),
+  aiReferrals: z12.array(ga4AiReferralDtoSchema),
   /** Deduped AI session total: MAX(sessions) per date+source+medium across attribution dimensions, then summed. */
-  aiSessionsDeduped: z11.number(),
+  aiSessionsDeduped: z12.number(),
   /** Deduped AI user total: MAX(users) per date+source+medium across attribution dimensions, then summed. */
-  aiUsersDeduped: z11.number(),
-  lastSyncedAt: z11.string().nullable()
+  aiUsersDeduped: z12.number(),
+  socialReferrals: z12.array(ga4SocialReferralDtoSchema),
+  /** Total social sessions (session-scoped, no cross-dimension dedup needed). */
+  socialSessions: z12.number(),
+  /** Total social users (session-scoped, no cross-dimension dedup needed). */
+  socialUsers: z12.number(),
+  /** Organic sessions as a percentage of total sessions (0–100, rounded). */
+  organicSharePct: z12.number(),
+  /** Deduped AI sessions as a percentage of total sessions (0–100, rounded). */
+  aiSharePct: z12.number(),
+  /** Social sessions as a percentage of total sessions (0–100, rounded). */
+  socialSharePct: z12.number(),
+  lastSyncedAt: z12.string().nullable()
 });
-var ga4AiReferralHistoryEntrySchema = z11.object({
-  date: z11.string(),
-  source: z11.string(),
-  medium: z11.string(),
-  sessions: z11.number(),
-  users: z11.number(),
+var ga4AiReferralHistoryEntrySchema = z12.object({
+  date: z12.string(),
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
   /** Which GA4 dimension this row came from: session (sessionSource), first_user (firstUserSource), or manual_utm (utm_source parameter) */
   sourceDimension: ga4SourceDimensionSchema
 });
-var ga4SessionHistoryEntrySchema = z11.object({
-  date: z11.string(),
-  sessions: z11.number(),
-  organicSessions: z11.number(),
-  users: z11.number()
+var ga4SocialReferralHistoryEntrySchema = z12.object({
+  date: z12.string(),
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
+  /** GA4 default channel group (e.g. 'Organic Social', 'Paid Social') */
+  channelGroup: z12.string()
+});
+var ga4SessionHistoryEntrySchema = z12.object({
+  date: z12.string(),
+  sessions: z12.number(),
+  organicSessions: z12.number(),
+  users: z12.number()
 });
 
 // ../contracts/src/answer-visibility.ts
@@ -2877,20 +2911,27 @@ async function analyticsRoutes(app) {
       return reply.send({
         window,
         buckets: [],
-        overall: { citationRate: 0, cited: 0, total: 0 },
+        overall: { citationRate: 0, cited: 0, total: 0, answerRate: 0, answerMentionedCount: 0 },
         byProvider: {},
         trend: "stable",
+        answerTrend: "stable",
         keywordChanges: []
       });
     }
     const runIds = projectRuns.map((r) => r.id);
-    const allSnapshots = app.db.select({
+    const rawSnapshots = app.db.select({
       runId: querySnapshots.runId,
       keywordId: querySnapshots.keywordId,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState,
+      answerMentioned: querySnapshots.answerMentioned,
+      answerText: querySnapshots.answerText,
       createdAt: querySnapshots.createdAt
     }).from(querySnapshots).where(inArray2(querySnapshots.runId, runIds)).all();
+    const allSnapshots = rawSnapshots.map((s) => ({
+      ...s,
+      resolvedMentioned: resolveSnapshotAnswerMentioned(s, project)
+    }));
     const projectKeywords = app.db.select({ id: keywords.id, createdAt: keywords.createdAt }).from(keywords).where(eq10(keywords.projectId, project.id)).all();
     const keywordCreatedAt = new Map(projectKeywords.map((k) => [k.id, k.createdAt]));
     const overall = computeProviderMetric(allSnapshots);
@@ -2904,9 +2945,10 @@ async function analyticsRoutes(app) {
     const spanDays = Math.max(1, Math.ceil((latest.getTime() - earliest.getTime()) / 864e5));
     const bucketSize = bucketSizeForSpan(spanDays);
     const buckets = computeBuckets(allSnapshots, projectRuns, bucketSize, keywordCreatedAt);
-    const trend = computeTrend(buckets);
+    const trend = computeTrend(buckets, "citationRate");
+    const answerTrend = computeTrend(buckets, "answerRate");
     const keywordChanges = computeKeywordChanges(projectKeywords, cutoff);
-    return reply.send({ window, buckets, overall, byProvider, trend, keywordChanges });
+    return reply.send({ window, buckets, overall, byProvider, trend, answerTrend, keywordChanges });
   });
   app.get("/projects/:name/analytics/gaps", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
@@ -2914,7 +2956,7 @@ async function analyticsRoutes(app) {
     const cutoff = windowCutoff(window);
     const latestRun = app.db.select().from(runs).where(eq10(runs.projectId, project.id)).orderBy(desc3(runs.createdAt)).all().find((r) => r.status === "completed" || r.status === "partial");
     if (!latestRun) {
-      return reply.send({ cited: [], gap: [], uncited: [], runId: "", window });
+      return reply.send({ cited: [], gap: [], uncited: [], mentionedKeywords: [], mentionGap: [], notMentioned: [], runId: "", window });
     }
     const windowRuns = app.db.select().from(runs).where(eq10(runs.projectId, project.id)).orderBy(runs.createdAt).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
     const windowRunIds = windowRuns.map((r) => r.id);
@@ -2923,25 +2965,34 @@ async function analyticsRoutes(app) {
       const allWindowSnaps = app.db.select({
         keywordId: querySnapshots.keywordId,
         runId: querySnapshots.runId,
-        citationState: querySnapshots.citationState
+        citationState: querySnapshots.citationState,
+        answerMentioned: querySnapshots.answerMentioned,
+        answerText: querySnapshots.answerText
       }).from(querySnapshots).where(inArray2(querySnapshots.runId, windowRunIds)).all();
       for (const s of allWindowSnaps) {
         let entry = consistencyMap.get(s.keywordId);
         if (!entry) {
-          entry = { citedRuns: /* @__PURE__ */ new Set(), totalRuns: /* @__PURE__ */ new Set() };
+          entry = { citedRuns: /* @__PURE__ */ new Set(), totalRuns: /* @__PURE__ */ new Set(), mentionedRuns: /* @__PURE__ */ new Set() };
           consistencyMap.set(s.keywordId, entry);
         }
         entry.totalRuns.add(s.runId);
         if (s.citationState === "cited") entry.citedRuns.add(s.runId);
+        if (resolveSnapshotAnswerMentioned(s, project)) entry.mentionedRuns.add(s.runId);
       }
     }
-    const snapshots = app.db.select({
+    const rawSnapshots = app.db.select({
       keywordId: querySnapshots.keywordId,
       keyword: keywords.keyword,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState,
+      answerMentioned: querySnapshots.answerMentioned,
+      answerText: querySnapshots.answerText,
       competitorOverlap: querySnapshots.competitorOverlap
     }).from(querySnapshots).leftJoin(keywords, eq10(querySnapshots.keywordId, keywords.id)).where(eq10(querySnapshots.runId, latestRun.id)).all();
+    const snapshots = rawSnapshots.map((s) => ({
+      ...s,
+      resolvedMentioned: resolveSnapshotAnswerMentioned(s, project)
+    }));
     const byKeyword = /* @__PURE__ */ new Map();
     for (const s of snapshots) {
       const key = s.keywordId;
@@ -2952,14 +3003,24 @@ async function analyticsRoutes(app) {
     const cited = [];
     const gap = [];
     const uncited = [];
+    const mentionedKeywords = [];
+    const mentionGap = [];
+    const notMentioned = [];
     for (const [keywordId, kwSnapshots] of byKeyword) {
       const keyword = kwSnapshots[0]?.keyword ?? "";
       const citedProviders = kwSnapshots.filter((s) => s.citationState === "cited").map((s) => s.provider);
+      const mentionedProviders = kwSnapshots.filter((s) => s.resolvedMentioned).map((s) => s.provider);
       const competitorsCiting = /* @__PURE__ */ new Set();
       for (const s of kwSnapshots) {
         const overlap = parseJsonColumn(s.competitorOverlap, []);
         for (const c of overlap) competitorsCiting.add(c);
       }
+      const cons = consistencyMap.get(keywordId);
+      const consistency = {
+        citedRuns: cons?.citedRuns.size ?? 0,
+        totalRuns: cons?.totalRuns.size ?? 0,
+        mentionedRuns: cons?.mentionedRuns.size ?? 0
+      };
       let category;
       if (citedProviders.length > 0) {
         category = "cited";
@@ -2968,26 +3029,44 @@ async function analyticsRoutes(app) {
       } else {
         category = "uncited";
       }
-      const cons = consistencyMap.get(keywordId);
-      const entry = {
+      const citationEntry = {
         keyword,
         keywordId,
         category,
         providers: citedProviders,
         competitorsCiting: [...competitorsCiting],
-        consistency: {
-          citedRuns: cons?.citedRuns.size ?? 0,
-          totalRuns: cons?.totalRuns.size ?? 0
-        }
+        consistency
+      };
+      if (category === "cited") cited.push(citationEntry);
+      else if (category === "gap") gap.push(citationEntry);
+      else uncited.push(citationEntry);
+      let mentionCategory;
+      if (mentionedProviders.length > 0) {
+        mentionCategory = "cited";
+      } else if (competitorsCiting.size > 0) {
+        mentionCategory = "gap";
+      } else {
+        mentionCategory = "uncited";
+      }
+      const mentionEntry = {
+        keyword,
+        keywordId,
+        category: mentionCategory,
+        providers: mentionedProviders,
+        competitorsCiting: [...competitorsCiting],
+        consistency
       };
-      if (category === "cited") cited.push(entry);
-      else if (category === "gap") gap.push(entry);
-      else uncited.push(entry);
+      if (mentionCategory === "cited") mentionedKeywords.push(mentionEntry);
+      else if (mentionCategory === "gap") mentionGap.push(mentionEntry);
+      else notMentioned.push(mentionEntry);
     }
     gap.sort((a, b) => b.competitorsCiting.length - a.competitorsCiting.length);
     cited.sort((a, b) => a.keyword.localeCompare(b.keyword));
     uncited.sort((a, b) => a.keyword.localeCompare(b.keyword));
-    return reply.send({ cited, gap, uncited, runId: latestRun.id, window });
+    mentionGap.sort((a, b) => b.competitorsCiting.length - a.competitorsCiting.length);
+    mentionedKeywords.sort((a, b) => a.keyword.localeCompare(b.keyword));
+    notMentioned.sort((a, b) => a.keyword.localeCompare(b.keyword));
+    return reply.send({ cited, gap, uncited, mentionedKeywords, mentionGap, notMentioned, runId: latestRun.id, window });
   });
   app.get("/projects/:name/analytics/sources", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
@@ -3070,10 +3149,13 @@ function bucketSizeForSpan(spanDays) {
 function computeProviderMetric(snapshots) {
   const total = snapshots.length;
   const cited = snapshots.filter((s) => s.citationState === "cited").length;
+  const answerMentionedCount = snapshots.filter((s) => s.resolvedMentioned).length;
   return {
     citationRate: total > 0 ? Math.round(cited / total * 1e4) / 1e4 : 0,
     cited,
-    total
+    total,
+    answerRate: total > 0 ? Math.round(answerMentionedCount / total * 1e4) / 1e4 : 0,
+    answerMentionedCount
   };
 }
 function computeBuckets(snapshots, projectRuns, bucketDays, keywordCreatedAt) {
@@ -3106,7 +3188,9 @@ function computeBuckets(snapshots, projectRuns, bucketDays, keywordCreatedAt) {
         citationRate: metric.citationRate,
         cited: metric.cited,
         total: metric.total,
-        keywordCount
+        keywordCount,
+        answerRate: metric.answerRate,
+        answerMentionedCount: metric.answerMentionedCount
       });
     }
     start = end;
@@ -3128,14 +3212,14 @@ function computeKeywordChanges(projectKeywords, cutoff) {
     label: `+${count} kp`
   }));
 }
-function computeTrend(buckets) {
+function computeTrend(buckets, rateKey) {
   const nonEmpty = buckets.filter((b) => b.total > 0);
   if (nonEmpty.length < 2) return "stable";
   const mid = Math.floor(nonEmpty.length / 2);
   const firstHalf = nonEmpty.slice(0, mid);
   const secondHalf = nonEmpty.slice(mid);
-  const avgFirst = firstHalf.reduce((s, b) => s + b.citationRate, 0) / firstHalf.length;
-  const avgSecond = secondHalf.reduce((s, b) => s + b.citationRate, 0) / secondHalf.length;
+  const avgFirst = firstHalf.reduce((s, b) => s + b[rateKey], 0) / firstHalf.length;
+  const avgSecond = secondHalf.reduce((s, b) => s + b[rateKey], 0) / secondHalf.length;
   const diff = avgSecond - avgFirst;
   if (diff > 0.05) return "improving";
   if (diff < -0.05) return "declining";
@@ -5241,6 +5325,42 @@ var routeCatalog = [
       404: { description: "Project not found." }
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/social-referral-history",
+    summary: "Get social media referral sessions per day grouped by source",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Social referral history returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/social-referral-trend",
+    summary: "Get social referral trend (7d/30d) with biggest mover",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Social referral trend returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/attribution-trend",
+    summary: "Get per-channel attribution trends (7d/30d) for organic, AI, and social",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Attribution trend returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
   {
     method: "get",
     path: "/api/v1/projects/{name}/ga/session-history",
@@ -5836,6 +5956,7 @@ var GSC_DATA_LAG_DAYS = 3;
 var INDEXING_API_BASE = "https://indexing.googleapis.com/v3";
 var INDEXING_API_DAILY_LIMIT = 200;
 var GOOGLE_REQUEST_TIMEOUT_MS = 3e4;
+var GSC_MAX_PAGES = 40;
 
 // ../integration-google/src/types.ts
 var GoogleAuthError = class extends Error {
@@ -5934,7 +6055,15 @@ async function exchangeCode(clientId, clientSecret, code, redirectUri) {
   });
   if (!res.ok) {
     const body = await res.text();
-    throw new GoogleAuthError(`Token exchange failed (${res.status}): ${body}`);
+    let detail = "";
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.error) detail = parsed.error;
+      if (parsed.error_description) detail += detail ? `: ${parsed.error_description}` : parsed.error_description;
+    } catch {
+      detail = body.length <= 120 ? body : `${body.slice(0, 120)}...`;
+    }
+    throw new GoogleAuthError(`Token exchange failed (${res.status}): ${detail}`);
   }
   return await res.json();
 }
@@ -5955,7 +6084,15 @@ async function refreshAccessToken(clientId, clientSecret, currentRefreshToken) {
   });
   if (!res.ok) {
     const body = await res.text();
-    throw new GoogleAuthError(`Token refresh failed (${res.status}): ${body}`);
+    let detail = "";
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.error) detail = parsed.error;
+      if (parsed.error_description) detail += detail ? `: ${parsed.error_description}` : parsed.error_description;
+    } catch {
+      detail = body.length <= 120 ? body : `${body.slice(0, 120)}...`;
+    }
+    throw new GoogleAuthError(`Token refresh failed (${res.status}): ${detail}`);
   }
   return await res.json();
 }
@@ -6002,6 +6139,18 @@ function validateUrl(urlParam) {
     throw new GoogleApiError("URL must be a valid URL", 400);
   }
 }
+function validateDate(date, label) {
+  if (!date || typeof date !== "string" || date.trim().length === 0) {
+    throw new GoogleApiError(`${label} is required and must be a non-empty string`, 400);
+  }
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
+    throw new GoogleApiError(`${label} must be in YYYY-MM-DD format, got "${date}"`, 400);
+  }
+  const parsed = /* @__PURE__ */ new Date(`${date}T00:00:00Z`);
+  if (Number.isNaN(parsed.getTime())) {
+    throw new GoogleApiError(`${label} is not a valid date, got "${date}"`, 400);
+  }
+}
 function gscClientLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GscClient", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -6020,19 +6169,18 @@ async function gscFetch(accessToken, url, opts) {
     signal: AbortSignal.timeout(GOOGLE_REQUEST_TIMEOUT_MS)
   });
   if (res.status === 401) {
-    const body = await res.text().catch(() => "");
-    gscClientLog("error", "http.auth-expired", { url, method, httpStatus: 401, responseBody: body });
+    gscClientLog("error", "http.auth-expired", { url, method, httpStatus: 401 });
     throw new GoogleApiError("Access token expired or revoked", 401);
   }
   if (res.status === 429) {
-    const body = await res.text().catch(() => "");
-    gscClientLog("error", "http.rate-limited", { url, method, httpStatus: 429, responseBody: body });
+    gscClientLog("error", "http.rate-limited", { url, method, httpStatus: 429 });
     throw new GoogleApiError("Google API rate limit exceeded", 429);
   }
   if (!res.ok) {
     const body = await res.text();
-    gscClientLog("error", "http.error", { url, method, httpStatus: res.status, responseBody: body });
-    throw new GoogleApiError(`GSC API error (${res.status}): ${body}`, res.status);
+    gscClientLog("error", "http.error", { url, method, httpStatus: res.status });
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GoogleApiError(`GSC API error (${res.status}): ${detail}`, res.status);
   }
   return await res.json();
 }
@@ -6057,10 +6205,16 @@ async function listSitemaps(accessToken, siteUrl) {
 async function fetchSearchAnalytics(accessToken, siteUrl, opts) {
   validateAccessToken(accessToken);
   validateSiteUrl(siteUrl);
+  validateDate(opts.startDate, "startDate");
+  validateDate(opts.endDate, "endDate");
   const allRows = [];
   let startRow = 0;
   const dimensions = opts.dimensions ?? ["query", "page", "country", "device", "date"];
   for (; ; ) {
+    if (startRow >= GSC_MAX_ROWS_PER_REQUEST * GSC_MAX_PAGES) {
+      gscClientLog("error", "pagination.safety-limit", { siteUrl, startRow, maxRows: GSC_MAX_ROWS_PER_REQUEST * GSC_MAX_PAGES });
+      break;
+    }
     const requestBody = {
       startDate: opts.startDate,
       endDate: opts.endDate,
@@ -6130,6 +6284,7 @@ var GOOGLE_TOKEN_URL2 = "https://oauth2.googleapis.com/token";
 var GA4_DEFAULT_SYNC_DAYS = 30;
 var GA4_MAX_SYNC_DAYS = 90;
 var GA4_REQUEST_TIMEOUT_MS = 3e4;
+var GA4_MAX_PAGES = 50;
 
 // ../integration-google-analytics/src/types.ts
 var GA4ApiError = class extends Error {
@@ -6214,8 +6369,9 @@ async function getAccessToken(clientEmail, privateKey) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    ga4Log("error", "token.failed", { httpStatus: res.status, responseBody: body });
-    throw new GA4ApiError(`Failed to get access token: ${body}`, res.status);
+    ga4Log("error", "token.failed", { httpStatus: res.status });
+    const detail = body.length <= 200 ? body : `${body.slice(0, 200)}... [truncated]`;
+    throw new GA4ApiError(`Failed to get access token: ${detail}`, res.status);
   }
   const data = await res.json();
   return data.access_token;
@@ -6244,7 +6400,7 @@ async function runReport(accessToken, propertyId, request) {
     } catch {
       if (body.length < 200) detail = ` ${body}`;
     }
-    ga4Log("error", "report.auth-failed", { propertyId, httpStatus: res.status, responseBody: body });
+    ga4Log("error", "report.auth-failed", { propertyId, httpStatus: res.status });
     throw new GA4ApiError(
       `GA4 API authentication failed \u2014 check service account permissions.${detail}`,
       res.status
@@ -6256,8 +6412,9 @@ async function runReport(accessToken, propertyId, request) {
   }
   if (!res.ok) {
     const body = await res.text();
-    ga4Log("error", "report.error", { propertyId, httpStatus: res.status, responseBody: body });
-    throw new GA4ApiError(`GA4 API error (${res.status}): ${body}`, res.status);
+    ga4Log("error", "report.error", { propertyId, httpStatus: res.status });
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GA4ApiError(`GA4 API error (${res.status}): ${detail}`, res.status);
   }
   return await res.json();
 }
@@ -6287,7 +6444,8 @@ async function batchRunReports(accessToken, propertyId, requests) {
   if (!res.ok) {
     const body = await res.text();
     ga4Log("error", "batch-report.error", { propertyId, httpStatus: res.status });
-    throw new GA4ApiError(`GA4 API error (${res.status}): ${body}`, res.status);
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GA4ApiError(`GA4 API error (${res.status}): ${detail}`, res.status);
   }
   const data = await res.json();
   return data.reports;
@@ -6318,7 +6476,9 @@ async function fetchTrafficByLandingPage(accessToken, propertyId, days) {
   const PAGE_SIZE = 1e4;
   const rows = [];
   let offset = 0;
-  while (true) {
+  let pageCount = 0;
+  while (pageCount < GA4_MAX_PAGES) {
+    pageCount++;
     const request = {
       dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
       dimensions: [
@@ -6348,7 +6508,9 @@ async function fetchTrafficByLandingPage(accessToken, propertyId, days) {
   }
   const organicMap = /* @__PURE__ */ new Map();
   let organicOffset = 0;
-  while (true) {
+  let organicPageCount = 0;
+  while (organicPageCount < GA4_MAX_PAGES) {
+    organicPageCount++;
     const organicRequest = {
       dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
       dimensions: [{ name: "date" }, { name: "landingPagePlusQueryString" }],
@@ -6462,7 +6624,9 @@ async function fetchAiReferrals(accessToken, propertyId, days) {
   ];
   for (const [sourceDim, mediumDim, dimLabel] of dimensionPairs) {
     let offset = 0;
-    while (true) {
+    let aiRefPageCount = 0;
+    while (aiRefPageCount < GA4_MAX_PAGES) {
+      aiRefPageCount++;
       const request = {
         dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
         dimensions: [
@@ -6525,6 +6689,66 @@ async function fetchAiReferrals(accessToken, propertyId, days) {
   ga4Log("info", "fetch-ai-referrals.done", { propertyId, rowCount: dedupedRows.length });
   return dedupedRows;
 }
+var SOCIAL_CHANNEL_GROUPS = ["Organic Social", "Paid Social"];
+async function fetchSocialReferrals(accessToken, propertyId, days) {
+  validateAccessToken2(accessToken);
+  validatePropertyId(propertyId);
+  const syncDays = Math.min(Math.max(1, days ?? GA4_DEFAULT_SYNC_DAYS), GA4_MAX_SYNC_DAYS);
+  const endDate = /* @__PURE__ */ new Date();
+  const startDate = /* @__PURE__ */ new Date();
+  startDate.setDate(startDate.getDate() - syncDays);
+  ga4Log("info", "fetch-social-referrals.start", { propertyId, days: syncDays });
+  const PAGE_SIZE = 1e3;
+  const rows = [];
+  let offset = 0;
+  while (true) {
+    const request = {
+      dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
+      dimensions: [
+        { name: "date" },
+        { name: "sessionSource" },
+        { name: "sessionMedium" },
+        { name: "sessionDefaultChannelGroup" }
+      ],
+      metrics: [
+        { name: "sessions" },
+        { name: "totalUsers" }
+      ],
+      dimensionFilter: {
+        orGroup: {
+          expressions: SOCIAL_CHANNEL_GROUPS.map((value) => ({
+            filter: {
+              fieldName: "sessionDefaultChannelGroup",
+              stringFilter: { matchType: "EXACT", value }
+            }
+          }))
+        }
+      },
+      limit: PAGE_SIZE,
+      offset
+    };
+    const response = await runReport(accessToken, propertyId, request);
+    const pageRows = (response.rows ?? []).map((row) => ({
+      date: row.dimensionValues[0].value,
+      source: row.dimensionValues[1].value,
+      medium: row.dimensionValues[2].value,
+      sessions: parseInt(row.metricValues[0].value, 10) || 0,
+      users: parseInt(row.metricValues[1].value, 10) || 0,
+      channelGroup: row.dimensionValues[3].value
+    }));
+    rows.push(...pageRows);
+    const totalRows = response.rowCount ?? 0;
+    offset += pageRows.length;
+    if (pageRows.length < PAGE_SIZE || offset >= totalRows) break;
+  }
+  for (const row of rows) {
+    if (row.date.length === 8 && !row.date.includes("-")) {
+      row.date = `${row.date.slice(0, 4)}-${row.date.slice(4, 6)}-${row.date.slice(6, 8)}`;
+    }
+  }
+  ga4Log("info", "fetch-social-referrals.done", { propertyId, rowCount: rows.length });
+  return rows;
+}
 
 // ../api-routes/src/google.ts
 function signState(payload, secret) {
@@ -7317,19 +7541,18 @@ async function bingFetch(apiKey, endpoint, opts) {
     signal: AbortSignal.timeout(BING_REQUEST_TIMEOUT_MS)
   });
   if (res.status === 401 || res.status === 403) {
-    const body = await res.text().catch(() => "");
-    bingClientLog("error", "http.auth-failed", { endpoint, method, httpStatus: res.status, responseBody: body });
+    bingClientLog("error", "http.auth-failed", { endpoint, method, httpStatus: res.status });
     throw new BingApiError("Bing API key is invalid or unauthorized", res.status);
   }
   if (res.status === 429) {
-    const body = await res.text().catch(() => "");
-    bingClientLog("error", "http.rate-limited", { endpoint, method, httpStatus: 429, responseBody: body });
+    bingClientLog("error", "http.rate-limited", { endpoint, method, httpStatus: 429 });
     throw new BingApiError("Bing API rate limit exceeded", 429);
   }
   if (!res.ok) {
     const body = await res.text();
-    bingClientLog("error", "http.error", { endpoint, method, httpStatus: res.status, responseBody: body });
-    throw new BingApiError(`Bing API error (${res.status}): ${body}`, res.status);
+    bingClientLog("error", "http.error", { endpoint, method, httpStatus: res.status });
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new BingApiError(`Bing API error (${res.status}): ${detail}`, res.status);
   }
   const text = await res.text();
   if (!text || text.trim() === "") {
@@ -7371,6 +7594,12 @@ async function submitUrlBatch(apiKey, siteUrl, urls) {
   validateApiKey(apiKey);
   validateSiteUrl2(siteUrl);
   validateUrls(urls);
+  if (urls.length > BING_SUBMIT_URL_DAILY_LIMIT) {
+    throw new BingApiError(
+      `URL batch exceeds daily limit of ${BING_SUBMIT_URL_DAILY_LIMIT}. Got ${urls.length} URLs.`,
+      400
+    );
+  }
   for (let i = 0; i < urls.length; i += BING_SUBMIT_URL_BATCH_LIMIT) {
     const batch = urls.slice(i, i + BING_SUBMIT_URL_BATCH_LIMIT);
     await bingFetch(apiKey, "SubmitUrlbatch", {
@@ -8112,6 +8341,7 @@ async function ga4Routes(app, opts) {
     app.db.delete(gaTrafficSnapshots).where(eq17(gaTrafficSnapshots.projectId, project.id)).run();
     app.db.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
     app.db.delete(gaAiReferrals).where(eq17(gaAiReferrals.projectId, project.id)).run();
+    app.db.delete(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).run();
     const propertyId = saConn?.propertyId ?? oauthConn?.propertyId ?? null;
     opts.ga4CredentialStore?.deleteConnection(project.name);
     opts.googleConnectionStore?.deleteConnection(project.canonicalDomain, "ga4");
@@ -8146,17 +8376,37 @@ async function ga4Routes(app, opts) {
   app.post("/projects/:name/ga/sync", async (request, _reply) => {
     const project = resolveProject(app.db, request.params.name);
     const days = request.body?.days ?? 30;
+    const only = request.body?.only;
+    const validOnlyValues = ["traffic", "ai", "social"];
+    if (only !== void 0 && !validOnlyValues.includes(only)) {
+      throw validationError(`Invalid "only" value "${only}". Must be one of: ${validOnlyValues.join(", ")}`);
+    }
+    const syncTraffic = !only || only === "traffic";
+    const syncAi = !only || only === "ai";
+    const syncSocial = !only || only === "social";
+    const syncSummary = !only;
     const { accessToken, propertyId } = await resolveGa4AccessToken(opts, project.name, project.canonicalDomain);
-    let rows;
+    let rows = [];
     let summary;
-    let aiReferrals;
+    let aiReferrals = [];
+    let socialReferrals = [];
     try {
-      ;
-      [rows, summary, aiReferrals] = await Promise.all([
-        fetchTrafficByLandingPage(accessToken, propertyId, days),
-        fetchAggregateSummary(accessToken, propertyId, days),
-        fetchAiReferrals(accessToken, propertyId, days)
-      ]);
+      const fetches = [fetchAggregateSummary(accessToken, propertyId, days)];
+      if (syncTraffic) fetches.push(fetchTrafficByLandingPage(accessToken, propertyId, days));
+      if (syncAi) fetches.push(fetchAiReferrals(accessToken, propertyId, days));
+      if (syncSocial) fetches.push(fetchSocialReferrals(accessToken, propertyId, days));
+      const results = await Promise.all(fetches);
+      summary = results[0];
+      let idx = 1;
+      if (syncTraffic) {
+        rows = results[idx++];
+      }
+      if (syncAi) {
+        aiReferrals = results[idx++];
+      }
+      if (syncSocial) {
+        socialReferrals = results[idx++];
+      }
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       gaLog("error", "sync.fetch-failed", { projectId: project.id, error: msg });
@@ -8164,14 +8414,14 @@ async function ga4Routes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
-      tx.delete(gaTrafficSnapshots).where(
-        and6(
-          eq17(gaTrafficSnapshots.projectId, project.id),
-          sql3`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
-          sql3`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
-        )
-      ).run();
-      if (rows.length > 0) {
+      if (syncTraffic) {
+        tx.delete(gaTrafficSnapshots).where(
+          and6(
+            eq17(gaTrafficSnapshots.projectId, project.id),
+            sql3`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
+            sql3`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
+          )
+        ).run();
         for (const row of rows) {
           tx.insert(gaTrafficSnapshots).values({
             id: crypto16.randomUUID(),
@@ -8185,14 +8435,14 @@ async function ga4Routes(app, opts) {
           }).run();
         }
       }
-      tx.delete(gaAiReferrals).where(
-        and6(
-          eq17(gaAiReferrals.projectId, project.id),
-          sql3`${gaAiReferrals.date} >= ${summary.periodStart}`,
-          sql3`${gaAiReferrals.date} <= ${summary.periodEnd}`
-        )
-      ).run();
-      if (aiReferrals.length > 0) {
+      if (syncAi) {
+        tx.delete(gaAiReferrals).where(
+          and6(
+            eq17(gaAiReferrals.projectId, project.id),
+            sql3`${gaAiReferrals.date} >= ${summary.periodStart}`,
+            sql3`${gaAiReferrals.date} <= ${summary.periodEnd}`
+          )
+        ).run();
         for (const row of aiReferrals) {
           tx.insert(gaAiReferrals).values({
             id: crypto16.randomUUID(),
@@ -8207,31 +8457,60 @@ async function ga4Routes(app, opts) {
           }).run();
         }
       }
-      tx.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
-      tx.insert(gaTrafficSummaries).values({
-        id: crypto16.randomUUID(),
-        projectId: project.id,
-        periodStart: summary.periodStart,
-        periodEnd: summary.periodEnd,
-        totalSessions: summary.totalSessions,
-        totalOrganicSessions: summary.totalOrganicSessions,
-        totalUsers: summary.totalUsers,
-        syncedAt: now
-      }).run();
+      if (syncSocial) {
+        tx.delete(gaSocialReferrals).where(
+          and6(
+            eq17(gaSocialReferrals.projectId, project.id),
+            sql3`${gaSocialReferrals.date} >= ${summary.periodStart}`,
+            sql3`${gaSocialReferrals.date} <= ${summary.periodEnd}`
+          )
+        ).run();
+        for (const row of socialReferrals) {
+          tx.insert(gaSocialReferrals).values({
+            id: crypto16.randomUUID(),
+            projectId: project.id,
+            date: row.date,
+            source: row.source,
+            medium: row.medium,
+            channelGroup: row.channelGroup,
+            sessions: row.sessions,
+            users: row.users,
+            syncedAt: now
+          }).run();
+        }
+      }
+      if (syncSummary) {
+        tx.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
+        tx.insert(gaTrafficSummaries).values({
+          id: crypto16.randomUUID(),
+          projectId: project.id,
+          periodStart: summary.periodStart,
+          periodEnd: summary.periodEnd,
+          totalSessions: summary.totalSessions,
+          totalOrganicSessions: summary.totalOrganicSessions,
+          totalUsers: summary.totalUsers,
+          syncedAt: now
+        }).run();
+      }
     });
+    const syncedComponents = only ? [only, ...only !== "social" && only !== "ai" && only !== "traffic" ? [] : []] : void 0;
     gaLog("info", "sync.complete", {
       projectId: project.id,
       rowCount: rows.length,
       aiReferralCount: aiReferrals.length,
+      socialReferralCount: socialReferrals.length,
       days,
-      totalUsers: summary.totalUsers
+      totalUsers: summary.totalUsers,
+      ...only ? { only } : {}
     });
     return {
       synced: true,
       rowCount: rows.length,
       aiReferralCount: aiReferrals.length,
+      socialReferralCount: socialReferrals.length,
       days,
-      syncedAt: now
+      syncedAt: now,
+      ...syncedComponents ? { syncedComponents } : {}
     };
   });
   app.get("/projects/:name/ga/traffic", async (request, _reply) => {
@@ -8269,9 +8548,21 @@ async function ga4Routes(app, opts) {
           GROUP BY date, source, medium
         )`
     ).get();
+    const socialReferrals = app.db.select({
+      source: gaSocialReferrals.source,
+      medium: gaSocialReferrals.medium,
+      channelGroup: gaSocialReferrals.channelGroup,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`,
+      users: sql3`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql3`SUM(${gaSocialReferrals.sessions}) DESC`).all();
+    const socialTotals = app.db.select({
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`,
+      users: sql3`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).get();
     const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).orderBy(desc7(gaTrafficSummaries.syncedAt)).limit(1).get();
+    const total = summary?.totalSessions ?? 0;
     return {
-      totalSessions: summary?.totalSessions ?? 0,
+      totalSessions: total,
       totalOrganicSessions: summary?.totalOrganicSessions ?? 0,
       totalUsers: summary?.totalUsers ?? 0,
       topPages: rows.map((r) => ({
@@ -8289,6 +8580,18 @@ async function ga4Routes(app, opts) {
       })),
       aiSessionsDeduped: aiDeduped?.sessions ?? 0,
       aiUsersDeduped: aiDeduped?.users ?? 0,
+      socialReferrals: socialReferrals.map((r) => ({
+        source: r.source,
+        medium: r.medium,
+        channelGroup: r.channelGroup,
+        sessions: r.sessions ?? 0,
+        users: r.users ?? 0
+      })),
+      socialSessions: socialTotals?.sessions ?? 0,
+      socialUsers: socialTotals?.users ?? 0,
+      organicSharePct: total > 0 ? Math.round((summary?.totalOrganicSessions ?? 0) / total * 100) : 0,
+      aiSharePct: total > 0 ? Math.round((aiDeduped?.sessions ?? 0) / total * 100) : 0,
+      socialSharePct: total > 0 ? Math.round((socialTotals?.sessions ?? 0) / total * 100) : 0,
       lastSyncedAt: latestSync?.syncedAt ?? null
     };
   });
@@ -8305,6 +8608,146 @@ async function ga4Routes(app, opts) {
     }).from(gaAiReferrals).where(eq17(gaAiReferrals.projectId, project.id)).orderBy(gaAiReferrals.date).all();
     return rows;
   });
+  app.get("/projects/:name/ga/social-referral-history", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const rows = app.db.select({
+      date: gaSocialReferrals.date,
+      source: gaSocialReferrals.source,
+      medium: gaSocialReferrals.medium,
+      channelGroup: gaSocialReferrals.channelGroup,
+      sessions: gaSocialReferrals.sessions,
+      users: gaSocialReferrals.users
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).orderBy(gaSocialReferrals.date).all();
+    return rows;
+  });
+  app.get("/projects/:name/ga/social-referral-trend", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const today = /* @__PURE__ */ new Date();
+    const fmt = (d) => d.toISOString().split("T")[0];
+    const daysAgo2 = (n) => {
+      const d = new Date(today);
+      d.setDate(d.getDate() - n);
+      return fmt(d);
+    };
+    const sumSocial = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${from}`,
+      sql3`${gaSocialReferrals.date} < ${to}`
+    )).get();
+    const current7d = sumSocial(daysAgo2(7), fmt(today));
+    const prev7d = sumSocial(daysAgo2(14), daysAgo2(7));
+    const current30d = sumSocial(daysAgo2(30), fmt(today));
+    const prev30d = sumSocial(daysAgo2(60), daysAgo2(30));
+    const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
+    const sourceCurrent = app.db.select({
+      source: gaSocialReferrals.source,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${daysAgo2(7)}`,
+      sql3`${gaSocialReferrals.date} < ${fmt(today)}`
+    )).groupBy(gaSocialReferrals.source).all();
+    const sourcePrev = app.db.select({
+      source: gaSocialReferrals.source,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${daysAgo2(14)}`,
+      sql3`${gaSocialReferrals.date} < ${daysAgo2(7)}`
+    )).groupBy(gaSocialReferrals.source).all();
+    const prevMap = new Map(sourcePrev.map((r) => [r.source, r.sessions]));
+    let biggestMover = null;
+    let maxDelta = 0;
+    for (const row of sourceCurrent) {
+      const prev = prevMap.get(row.source) ?? 0;
+      const delta = Math.abs(row.sessions - prev);
+      if (delta > maxDelta) {
+        maxDelta = delta;
+        biggestMover = {
+          source: row.source,
+          sessions7d: row.sessions,
+          sessionsPrev7d: prev,
+          changePct: pct(row.sessions, prev) ?? (row.sessions > 0 ? 100 : 0)
+        };
+      }
+    }
+    return {
+      socialSessions7d: current7d?.sessions ?? 0,
+      socialSessionsPrev7d: prev7d?.sessions ?? 0,
+      trend7dPct: pct(current7d?.sessions ?? 0, prev7d?.sessions ?? 0),
+      socialSessions30d: current30d?.sessions ?? 0,
+      socialSessionsPrev30d: prev30d?.sessions ?? 0,
+      trend30dPct: pct(current30d?.sessions ?? 0, prev30d?.sessions ?? 0),
+      biggestMover
+    };
+  });
+  app.get("/projects/:name/ga/attribution-trend", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const today = /* @__PURE__ */ new Date();
+    const fmt = (d) => d.toISOString().split("T")[0];
+    const daysAgo2 = (n) => {
+      const d = new Date(today);
+      d.setDate(d.getDate() - n);
+      return fmt(d);
+    };
+    const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
+    const sumTotal = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and6(eq17(gaTrafficSnapshots.projectId, project.id), sql3`${gaTrafficSnapshots.date} >= ${from}`, sql3`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and6(eq17(gaTrafficSnapshots.projectId, project.id), sql3`${gaTrafficSnapshots.date} >= ${from}`, sql3`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumAi = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${from} AND date < ${to}
+        GROUP BY date, source, medium
+      )`).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${from}`, sql3`${gaSocialReferrals.date} < ${to}`)).get();
+    const todayStr = fmt(today);
+    const buildTrend = (sum) => {
+      const c7 = sum(daysAgo2(7), todayStr)?.sessions ?? 0;
+      const p7 = sum(daysAgo2(14), daysAgo2(7))?.sessions ?? 0;
+      const c30 = sum(daysAgo2(30), todayStr)?.sessions ?? 0;
+      const p30 = sum(daysAgo2(60), daysAgo2(30))?.sessions ?? 0;
+      return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
+    };
+    const aiSourceCurrent = app.db.select({ source: sql3`source`, sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${daysAgo2(7)} AND date < ${todayStr}
+        GROUP BY date, source, medium
+      )`).groupBy(sql3`source`).all();
+    const aiSourcePrev = app.db.select({ source: sql3`source`, sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${daysAgo2(14)} AND date < ${daysAgo2(7)}
+        GROUP BY date, source, medium
+      )`).groupBy(sql3`source`).all();
+    const findBiggestMover = (current, prev) => {
+      const prevMap = new Map(prev.map((r) => [r.source, r.sessions]));
+      let mover = null;
+      let maxDelta = 0;
+      for (const row of current) {
+        const p = prevMap.get(row.source) ?? 0;
+        const delta = Math.abs(row.sessions - p);
+        if (delta > maxDelta) {
+          maxDelta = delta;
+          mover = { source: row.source, sessions7d: row.sessions, sessionsPrev7d: p, changePct: pct(row.sessions, p) ?? (row.sessions > 0 ? 100 : 0) };
+        }
+      }
+      return mover;
+    };
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql3`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql3`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql3`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql3`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
+    return {
+      total: buildTrend(sumTotal),
+      organic: buildTrend(sumOrganic),
+      ai: buildTrend(sumAi),
+      social: buildTrend(sumSocial),
+      aiBiggestMover: findBiggestMover(aiSourceCurrent, aiSourcePrev),
+      socialBiggestMover: findBiggestMover(socialSourceCurrent, socialSourcePrev)
+    };
+  });
   app.get("/projects/:name/ga/session-history", async (request, _reply) => {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
@@ -10137,6 +10580,15 @@ async function apiRoutes(app, opts) {
 import { GoogleGenAI } from "@google/genai";
 
 // ../provider-gemini/src/utils.ts
+function isRetryableError(err) {
+  if (err != null && typeof err === "object" && "status" in err) {
+    const status = err.status;
+    if (typeof status === "number") {
+      return status >= 500 || status === 429;
+    }
+  }
+  return true;
+}
 async function withRetry(fn, options = {}) {
   const { maxRetries = 3, initialDelay = 1e3 } = options;
   let lastError;
@@ -10145,10 +10597,12 @@ async function withRetry(fn, options = {}) {
       return await fn();
     } catch (err) {
       lastError = err;
-      if (attempt < maxRetries) {
+      if (attempt < maxRetries && isRetryableError(err)) {
         const delay = initialDelay * Math.pow(2, attempt);
         console.warn(`[provider] Attempt ${attempt + 1} failed, retrying in ${delay}ms...`, err instanceof Error ? err.message : String(err));
         await new Promise((resolve) => setTimeout(resolve, delay));
+      } else {
+        throw err;
       }
     }
   }
@@ -10510,6 +10964,15 @@ var geminiAdapter = {
 import OpenAI from "openai";
 
 // ../provider-openai/src/utils.ts
+function isRetryableError2(err) {
+  if (err != null && typeof err === "object" && "status" in err) {
+    const status = err.status;
+    if (typeof status === "number") {
+      return status >= 500 || status === 429;
+    }
+  }
+  return true;
+}
 async function withRetry2(fn, options = {}) {
   const { maxRetries = 3, initialDelay = 1e3 } = options;
   let lastError;
@@ -10518,10 +10981,12 @@ async function withRetry2(fn, options = {}) {
       return await fn();
     } catch (err) {
       lastError = err;
-      if (attempt < maxRetries) {
+      if (attempt < maxRetries && isRetryableError2(err)) {
         const delay = initialDelay * Math.pow(2, attempt);
         console.warn(`[provider] Attempt ${attempt + 1} failed, retrying in ${delay}ms...`, err instanceof Error ? err.message : String(err));
         await new Promise((resolve) => setTimeout(resolve, delay));
+      } else {
+        throw err;
       }
     }
   }
@@ -10843,6 +11308,15 @@ var openaiAdapter = {
 import Anthropic from "@anthropic-ai/sdk";
 
 // ../provider-claude/src/utils.ts
+function isRetryableError3(err) {
+  if (err != null && typeof err === "object" && "status" in err) {
+    const status = err.status;
+    if (typeof status === "number") {
+      return status >= 500 || status === 429;
+    }
+  }
+  return true;
+}
 async function withRetry3(fn, options = {}) {
   const { maxRetries = 3, initialDelay = 1e3 } = options;
   let lastError;
@@ -10851,10 +11325,12 @@ async function withRetry3(fn, options = {}) {
       return await fn();
     } catch (err) {
       lastError = err;
-      if (attempt < maxRetries) {
+      if (attempt < maxRetries && isRetryableError3(err)) {
         const delay = initialDelay * Math.pow(2, attempt);
         console.warn(`[provider] Attempt ${attempt + 1} failed, retrying in ${delay}ms...`, err instanceof Error ? err.message : String(err));
         await new Promise((resolve) => setTimeout(resolve, delay));
+      } else {
+        throw err;
       }
     }
   }
@@ -11199,6 +11675,15 @@ var claudeAdapter = {
 import OpenAI2 from "openai";
 
 // ../provider-local/src/utils.ts
+function isRetryableError4(err) {
+  if (err != null && typeof err === "object" && "status" in err) {
+    const status = err.status;
+    if (typeof status === "number") {
+      return status >= 500 || status === 429;
+    }
+  }
+  return true;
+}
 async function withRetry4(fn, options = {}) {
   const { maxRetries = 3, initialDelay = 1e3 } = options;
   let lastError;
@@ -11207,10 +11692,12 @@ async function withRetry4(fn, options = {}) {
       return await fn();
     } catch (err) {
       lastError = err;
-      if (attempt < maxRetries) {
+      if (attempt < maxRetries && isRetryableError4(err)) {
         const delay = initialDelay * Math.pow(2, attempt);
         console.warn(`[provider] Attempt ${attempt + 1} failed, retrying in ${delay}ms...`, err instanceof Error ? err.message : String(err));
         await new Promise((resolve) => setTimeout(resolve, delay));
+      } else {
+        throw err;
       }
     }
   }
@@ -11994,6 +12481,15 @@ var cdpChatgptAdapter = {
 import OpenAI3 from "openai";
 
 // ../provider-perplexity/src/utils.ts
+function isRetryableError5(err) {
+  if (err != null && typeof err === "object" && "status" in err) {
+    const status = err.status;
+    if (typeof status === "number") {
+      return status >= 500 || status === 429;
+    }
+  }
+  return true;
+}
 async function withRetry5(fn, options = {}) {
   const { maxRetries = 3, initialDelay = 1e3 } = options;
   let lastError;
@@ -12002,10 +12498,12 @@ async function withRetry5(fn, options = {}) {
       return await fn();
     } catch (err) {
       lastError = err;
-      if (attempt < maxRetries) {
+      if (attempt < maxRetries && isRetryableError5(err)) {
         const delay = initialDelay * Math.pow(2, attempt);
         console.warn(`[provider] Attempt ${attempt + 1} failed, retrying in ${delay}ms...`, err instanceof Error ? err.message : String(err));
         await new Promise((resolve) => setTimeout(resolve, delay));
+      } else {
+        throw err;
       }
     }
   }