@ainyc/canonry 1.41.0 → 1.44.0

package/dist/{chunk-TKMBOLZB.js → chunk-C3LF36DQ.js}

@@ -6,6 +6,7 @@ import {
   competitors,
   createLogger,
   gaAiReferrals,
+  gaSocialReferrals,
   gaTrafficSnapshots,
   gaTrafficSummaries,
   gscCoverageSnapshots,
@@ -21,7 +22,7 @@ import {
   runs,
   schedules,
   usageCounters
-} from "./chunk-EUBC5EGC.js";
+} from "./chunk-AATIMNOX.js";
 
 // src/config.ts
 import fs from "fs";
@@ -1101,6 +1102,14 @@ var ga4AiReferralDtoSchema = z12.object({
   users: z12.number(),
   sourceDimension: ga4SourceDimensionSchema
 });
+var ga4SocialReferralDtoSchema = z12.object({
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
+  /** GA4 default channel group (e.g. 'Organic Social', 'Paid Social') */
+  channelGroup: z12.string()
+});
 var ga4TrafficSummaryDtoSchema = z12.object({
   totalSessions: z12.number(),
   totalOrganicSessions: z12.number(),
@@ -1116,6 +1125,17 @@ var ga4TrafficSummaryDtoSchema = z12.object({
   aiSessionsDeduped: z12.number(),
   /** Deduped AI user total: MAX(users) per date+source+medium across attribution dimensions, then summed. */
   aiUsersDeduped: z12.number(),
+  socialReferrals: z12.array(ga4SocialReferralDtoSchema),
+  /** Total social sessions (session-scoped, no cross-dimension dedup needed). */
+  socialSessions: z12.number(),
+  /** Total social users (session-scoped, no cross-dimension dedup needed). */
+  socialUsers: z12.number(),
+  /** Organic sessions as a percentage of total sessions (0–100, rounded). */
+  organicSharePct: z12.number(),
+  /** Deduped AI sessions as a percentage of total sessions (0–100, rounded). */
+  aiSharePct: z12.number(),
+  /** Social sessions as a percentage of total sessions (0–100, rounded). */
+  socialSharePct: z12.number(),
   lastSyncedAt: z12.string().nullable()
 });
 var ga4AiReferralHistoryEntrySchema = z12.object({
@@ -1127,6 +1147,15 @@ var ga4AiReferralHistoryEntrySchema = z12.object({
   /** Which GA4 dimension this row came from: session (sessionSource), first_user (firstUserSource), or manual_utm (utm_source parameter) */
   sourceDimension: ga4SourceDimensionSchema
 });
+var ga4SocialReferralHistoryEntrySchema = z12.object({
+  date: z12.string(),
+  source: z12.string(),
+  medium: z12.string(),
+  sessions: z12.number(),
+  users: z12.number(),
+  /** GA4 default channel group (e.g. 'Organic Social', 'Paid Social') */
+  channelGroup: z12.string()
+});
 var ga4SessionHistoryEntrySchema = z12.object({
   date: z12.string(),
   sessions: z12.number(),
@@ -5296,6 +5325,42 @@ var routeCatalog = [
       404: { description: "Project not found." }
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/social-referral-history",
+    summary: "Get social media referral sessions per day grouped by source",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Social referral history returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/social-referral-trend",
+    summary: "Get social referral trend (7d/30d) with biggest mover",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Social referral trend returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ga/attribution-trend",
+    summary: "Get per-channel attribution trends (7d/30d) for organic, AI, and social",
+    tags: ["ga4"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Attribution trend returned." },
+      400: { description: "GA4 is not connected." },
+      404: { description: "Project not found." }
+    }
+  },
   {
     method: "get",
     path: "/api/v1/projects/{name}/ga/session-history",
@@ -5891,6 +5956,7 @@ var GSC_DATA_LAG_DAYS = 3;
 var INDEXING_API_BASE = "https://indexing.googleapis.com/v3";
 var INDEXING_API_DAILY_LIMIT = 200;
 var GOOGLE_REQUEST_TIMEOUT_MS = 3e4;
+var GSC_MAX_PAGES = 40;
 
 // ../integration-google/src/types.ts
 var GoogleAuthError = class extends Error {
@@ -5989,7 +6055,15 @@ async function exchangeCode(clientId, clientSecret, code, redirectUri) {
   });
   if (!res.ok) {
     const body = await res.text();
-    throw new GoogleAuthError(`Token exchange failed (${res.status}): ${body}`);
+    let detail = "";
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.error) detail = parsed.error;
+      if (parsed.error_description) detail += detail ? `: ${parsed.error_description}` : parsed.error_description;
+    } catch {
+      detail = body.length <= 120 ? body : `${body.slice(0, 120)}...`;
+    }
+    throw new GoogleAuthError(`Token exchange failed (${res.status}): ${detail}`);
   }
   return await res.json();
 }
@@ -6010,7 +6084,15 @@ async function refreshAccessToken(clientId, clientSecret, currentRefreshToken) {
   });
   if (!res.ok) {
     const body = await res.text();
-    throw new GoogleAuthError(`Token refresh failed (${res.status}): ${body}`);
+    let detail = "";
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.error) detail = parsed.error;
+      if (parsed.error_description) detail += detail ? `: ${parsed.error_description}` : parsed.error_description;
+    } catch {
+      detail = body.length <= 120 ? body : `${body.slice(0, 120)}...`;
+    }
+    throw new GoogleAuthError(`Token refresh failed (${res.status}): ${detail}`);
   }
   return await res.json();
 }
@@ -6057,6 +6139,18 @@ function validateUrl(urlParam) {
     throw new GoogleApiError("URL must be a valid URL", 400);
   }
 }
+function validateDate(date, label) {
+  if (!date || typeof date !== "string" || date.trim().length === 0) {
+    throw new GoogleApiError(`${label} is required and must be a non-empty string`, 400);
+  }
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
+    throw new GoogleApiError(`${label} must be in YYYY-MM-DD format, got "${date}"`, 400);
+  }
+  const parsed = /* @__PURE__ */ new Date(`${date}T00:00:00Z`);
+  if (Number.isNaN(parsed.getTime())) {
+    throw new GoogleApiError(`${label} is not a valid date, got "${date}"`, 400);
+  }
+}
 function gscClientLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GscClient", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -6085,7 +6179,8 @@ async function gscFetch(accessToken, url, opts) {
   if (!res.ok) {
     const body = await res.text();
     gscClientLog("error", "http.error", { url, method, httpStatus: res.status });
-    throw new GoogleApiError(`GSC API error (${res.status}): ${body}`, res.status);
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GoogleApiError(`GSC API error (${res.status}): ${detail}`, res.status);
   }
   return await res.json();
 }
@@ -6110,10 +6205,16 @@ async function listSitemaps(accessToken, siteUrl) {
 async function fetchSearchAnalytics(accessToken, siteUrl, opts) {
   validateAccessToken(accessToken);
   validateSiteUrl(siteUrl);
+  validateDate(opts.startDate, "startDate");
+  validateDate(opts.endDate, "endDate");
   const allRows = [];
   let startRow = 0;
   const dimensions = opts.dimensions ?? ["query", "page", "country", "device", "date"];
   for (; ; ) {
+    if (startRow >= GSC_MAX_ROWS_PER_REQUEST * GSC_MAX_PAGES) {
+      gscClientLog("error", "pagination.safety-limit", { siteUrl, startRow, maxRows: GSC_MAX_ROWS_PER_REQUEST * GSC_MAX_PAGES });
+      break;
+    }
     const requestBody = {
       startDate: opts.startDate,
       endDate: opts.endDate,
@@ -6183,6 +6284,7 @@ var GOOGLE_TOKEN_URL2 = "https://oauth2.googleapis.com/token";
 var GA4_DEFAULT_SYNC_DAYS = 30;
 var GA4_MAX_SYNC_DAYS = 90;
 var GA4_REQUEST_TIMEOUT_MS = 3e4;
+var GA4_MAX_PAGES = 50;
 
 // ../integration-google-analytics/src/types.ts
 var GA4ApiError = class extends Error {
@@ -6268,7 +6370,8 @@ async function getAccessToken(clientEmail, privateKey) {
   if (!res.ok) {
     const body = await res.text().catch(() => "");
     ga4Log("error", "token.failed", { httpStatus: res.status });
-    throw new GA4ApiError(`Failed to get access token: ${body}`, res.status);
+    const detail = body.length <= 200 ? body : `${body.slice(0, 200)}... [truncated]`;
+    throw new GA4ApiError(`Failed to get access token: ${detail}`, res.status);
   }
   const data = await res.json();
   return data.access_token;
@@ -6310,7 +6413,8 @@ async function runReport(accessToken, propertyId, request) {
   if (!res.ok) {
     const body = await res.text();
     ga4Log("error", "report.error", { propertyId, httpStatus: res.status });
-    throw new GA4ApiError(`GA4 API error (${res.status}): ${body}`, res.status);
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GA4ApiError(`GA4 API error (${res.status}): ${detail}`, res.status);
   }
   return await res.json();
 }
@@ -6340,7 +6444,8 @@ async function batchRunReports(accessToken, propertyId, requests) {
   if (!res.ok) {
     const body = await res.text();
     ga4Log("error", "batch-report.error", { propertyId, httpStatus: res.status });
-    throw new GA4ApiError(`GA4 API error (${res.status}): ${body}`, res.status);
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new GA4ApiError(`GA4 API error (${res.status}): ${detail}`, res.status);
   }
   const data = await res.json();
   return data.reports;
@@ -6371,7 +6476,9 @@ async function fetchTrafficByLandingPage(accessToken, propertyId, days) {
   const PAGE_SIZE = 1e4;
   const rows = [];
   let offset = 0;
-  while (true) {
+  let pageCount = 0;
+  while (pageCount < GA4_MAX_PAGES) {
+    pageCount++;
     const request = {
       dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
       dimensions: [
@@ -6401,7 +6508,9 @@ async function fetchTrafficByLandingPage(accessToken, propertyId, days) {
   }
   const organicMap = /* @__PURE__ */ new Map();
   let organicOffset = 0;
-  while (true) {
+  let organicPageCount = 0;
+  while (organicPageCount < GA4_MAX_PAGES) {
+    organicPageCount++;
     const organicRequest = {
       dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
       dimensions: [{ name: "date" }, { name: "landingPagePlusQueryString" }],
@@ -6515,7 +6624,9 @@ async function fetchAiReferrals(accessToken, propertyId, days) {
   ];
   for (const [sourceDim, mediumDim, dimLabel] of dimensionPairs) {
     let offset = 0;
-    while (true) {
+    let aiRefPageCount = 0;
+    while (aiRefPageCount < GA4_MAX_PAGES) {
+      aiRefPageCount++;
       const request = {
         dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
         dimensions: [
@@ -6578,6 +6689,66 @@ async function fetchAiReferrals(accessToken, propertyId, days) {
   ga4Log("info", "fetch-ai-referrals.done", { propertyId, rowCount: dedupedRows.length });
   return dedupedRows;
 }
+var SOCIAL_CHANNEL_GROUPS = ["Organic Social", "Paid Social"];
+async function fetchSocialReferrals(accessToken, propertyId, days) {
+  validateAccessToken2(accessToken);
+  validatePropertyId(propertyId);
+  const syncDays = Math.min(Math.max(1, days ?? GA4_DEFAULT_SYNC_DAYS), GA4_MAX_SYNC_DAYS);
+  const endDate = /* @__PURE__ */ new Date();
+  const startDate = /* @__PURE__ */ new Date();
+  startDate.setDate(startDate.getDate() - syncDays);
+  ga4Log("info", "fetch-social-referrals.start", { propertyId, days: syncDays });
+  const PAGE_SIZE = 1e3;
+  const rows = [];
+  let offset = 0;
+  while (true) {
+    const request = {
+      dateRanges: [{ startDate: formatDate(startDate), endDate: formatDate(endDate) }],
+      dimensions: [
+        { name: "date" },
+        { name: "sessionSource" },
+        { name: "sessionMedium" },
+        { name: "sessionDefaultChannelGroup" }
+      ],
+      metrics: [
+        { name: "sessions" },
+        { name: "totalUsers" }
+      ],
+      dimensionFilter: {
+        orGroup: {
+          expressions: SOCIAL_CHANNEL_GROUPS.map((value) => ({
+            filter: {
+              fieldName: "sessionDefaultChannelGroup",
+              stringFilter: { matchType: "EXACT", value }
+            }
+          }))
+        }
+      },
+      limit: PAGE_SIZE,
+      offset
+    };
+    const response = await runReport(accessToken, propertyId, request);
+    const pageRows = (response.rows ?? []).map((row) => ({
+      date: row.dimensionValues[0].value,
+      source: row.dimensionValues[1].value,
+      medium: row.dimensionValues[2].value,
+      sessions: parseInt(row.metricValues[0].value, 10) || 0,
+      users: parseInt(row.metricValues[1].value, 10) || 0,
+      channelGroup: row.dimensionValues[3].value
+    }));
+    rows.push(...pageRows);
+    const totalRows = response.rowCount ?? 0;
+    offset += pageRows.length;
+    if (pageRows.length < PAGE_SIZE || offset >= totalRows) break;
+  }
+  for (const row of rows) {
+    if (row.date.length === 8 && !row.date.includes("-")) {
+      row.date = `${row.date.slice(0, 4)}-${row.date.slice(4, 6)}-${row.date.slice(6, 8)}`;
+    }
+  }
+  ga4Log("info", "fetch-social-referrals.done", { propertyId, rowCount: rows.length });
+  return rows;
+}
 
 // ../api-routes/src/google.ts
 function signState(payload, secret) {
@@ -7380,7 +7551,8 @@ async function bingFetch(apiKey, endpoint, opts) {
   if (!res.ok) {
     const body = await res.text();
     bingClientLog("error", "http.error", { endpoint, method, httpStatus: res.status });
-    throw new BingApiError(`Bing API error (${res.status}): ${body}`, res.status);
+    const detail = body.length <= 500 ? body : `${body.slice(0, 500)}... [truncated]`;
+    throw new BingApiError(`Bing API error (${res.status}): ${detail}`, res.status);
   }
   const text = await res.text();
   if (!text || text.trim() === "") {
@@ -7422,6 +7594,12 @@ async function submitUrlBatch(apiKey, siteUrl, urls) {
   validateApiKey(apiKey);
   validateSiteUrl2(siteUrl);
   validateUrls(urls);
+  if (urls.length > BING_SUBMIT_URL_DAILY_LIMIT) {
+    throw new BingApiError(
+      `URL batch exceeds daily limit of ${BING_SUBMIT_URL_DAILY_LIMIT}. Got ${urls.length} URLs.`,
+      400
+    );
+  }
   for (let i = 0; i < urls.length; i += BING_SUBMIT_URL_BATCH_LIMIT) {
     const batch = urls.slice(i, i + BING_SUBMIT_URL_BATCH_LIMIT);
     await bingFetch(apiKey, "SubmitUrlbatch", {
@@ -8163,6 +8341,7 @@ async function ga4Routes(app, opts) {
     app.db.delete(gaTrafficSnapshots).where(eq17(gaTrafficSnapshots.projectId, project.id)).run();
     app.db.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
     app.db.delete(gaAiReferrals).where(eq17(gaAiReferrals.projectId, project.id)).run();
+    app.db.delete(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).run();
     const propertyId = saConn?.propertyId ?? oauthConn?.propertyId ?? null;
     opts.ga4CredentialStore?.deleteConnection(project.name);
     opts.googleConnectionStore?.deleteConnection(project.canonicalDomain, "ga4");
@@ -8197,17 +8376,37 @@ async function ga4Routes(app, opts) {
   app.post("/projects/:name/ga/sync", async (request, _reply) => {
     const project = resolveProject(app.db, request.params.name);
     const days = request.body?.days ?? 30;
+    const only = request.body?.only;
+    const validOnlyValues = ["traffic", "ai", "social"];
+    if (only !== void 0 && !validOnlyValues.includes(only)) {
+      throw validationError(`Invalid "only" value "${only}". Must be one of: ${validOnlyValues.join(", ")}`);
+    }
+    const syncTraffic = !only || only === "traffic";
+    const syncAi = !only || only === "ai";
+    const syncSocial = !only || only === "social";
+    const syncSummary = !only;
     const { accessToken, propertyId } = await resolveGa4AccessToken(opts, project.name, project.canonicalDomain);
-    let rows;
+    let rows = [];
     let summary;
-    let aiReferrals;
+    let aiReferrals = [];
+    let socialReferrals = [];
     try {
-      ;
-      [rows, summary, aiReferrals] = await Promise.all([
-        fetchTrafficByLandingPage(accessToken, propertyId, days),
-        fetchAggregateSummary(accessToken, propertyId, days),
-        fetchAiReferrals(accessToken, propertyId, days)
-      ]);
+      const fetches = [fetchAggregateSummary(accessToken, propertyId, days)];
+      if (syncTraffic) fetches.push(fetchTrafficByLandingPage(accessToken, propertyId, days));
+      if (syncAi) fetches.push(fetchAiReferrals(accessToken, propertyId, days));
+      if (syncSocial) fetches.push(fetchSocialReferrals(accessToken, propertyId, days));
+      const results = await Promise.all(fetches);
+      summary = results[0];
+      let idx = 1;
+      if (syncTraffic) {
+        rows = results[idx++];
+      }
+      if (syncAi) {
+        aiReferrals = results[idx++];
+      }
+      if (syncSocial) {
+        socialReferrals = results[idx++];
+      }
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       gaLog("error", "sync.fetch-failed", { projectId: project.id, error: msg });
@@ -8215,14 +8414,14 @@ async function ga4Routes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
-      tx.delete(gaTrafficSnapshots).where(
-        and6(
-          eq17(gaTrafficSnapshots.projectId, project.id),
-          sql3`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
-          sql3`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
-        )
-      ).run();
-      if (rows.length > 0) {
+      if (syncTraffic) {
+        tx.delete(gaTrafficSnapshots).where(
+          and6(
+            eq17(gaTrafficSnapshots.projectId, project.id),
+            sql3`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
+            sql3`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
+          )
+        ).run();
         for (const row of rows) {
           tx.insert(gaTrafficSnapshots).values({
             id: crypto16.randomUUID(),
@@ -8236,14 +8435,14 @@ async function ga4Routes(app, opts) {
           }).run();
         }
       }
-      tx.delete(gaAiReferrals).where(
-        and6(
-          eq17(gaAiReferrals.projectId, project.id),
-          sql3`${gaAiReferrals.date} >= ${summary.periodStart}`,
-          sql3`${gaAiReferrals.date} <= ${summary.periodEnd}`
-        )
-      ).run();
-      if (aiReferrals.length > 0) {
+      if (syncAi) {
+        tx.delete(gaAiReferrals).where(
+          and6(
+            eq17(gaAiReferrals.projectId, project.id),
+            sql3`${gaAiReferrals.date} >= ${summary.periodStart}`,
+            sql3`${gaAiReferrals.date} <= ${summary.periodEnd}`
+          )
+        ).run();
         for (const row of aiReferrals) {
           tx.insert(gaAiReferrals).values({
             id: crypto16.randomUUID(),
@@ -8258,31 +8457,60 @@ async function ga4Routes(app, opts) {
           }).run();
         }
       }
-      tx.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
-      tx.insert(gaTrafficSummaries).values({
-        id: crypto16.randomUUID(),
-        projectId: project.id,
-        periodStart: summary.periodStart,
-        periodEnd: summary.periodEnd,
-        totalSessions: summary.totalSessions,
-        totalOrganicSessions: summary.totalOrganicSessions,
-        totalUsers: summary.totalUsers,
-        syncedAt: now
-      }).run();
+      if (syncSocial) {
+        tx.delete(gaSocialReferrals).where(
+          and6(
+            eq17(gaSocialReferrals.projectId, project.id),
+            sql3`${gaSocialReferrals.date} >= ${summary.periodStart}`,
+            sql3`${gaSocialReferrals.date} <= ${summary.periodEnd}`
+          )
+        ).run();
+        for (const row of socialReferrals) {
+          tx.insert(gaSocialReferrals).values({
+            id: crypto16.randomUUID(),
+            projectId: project.id,
+            date: row.date,
+            source: row.source,
+            medium: row.medium,
+            channelGroup: row.channelGroup,
+            sessions: row.sessions,
+            users: row.users,
+            syncedAt: now
+          }).run();
+        }
+      }
+      if (syncSummary) {
+        tx.delete(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).run();
+        tx.insert(gaTrafficSummaries).values({
+          id: crypto16.randomUUID(),
+          projectId: project.id,
+          periodStart: summary.periodStart,
+          periodEnd: summary.periodEnd,
+          totalSessions: summary.totalSessions,
+          totalOrganicSessions: summary.totalOrganicSessions,
+          totalUsers: summary.totalUsers,
+          syncedAt: now
+        }).run();
+      }
     });
+    const syncedComponents = only ? [only, ...only !== "social" && only !== "ai" && only !== "traffic" ? [] : []] : void 0;
     gaLog("info", "sync.complete", {
       projectId: project.id,
       rowCount: rows.length,
       aiReferralCount: aiReferrals.length,
+      socialReferralCount: socialReferrals.length,
       days,
-      totalUsers: summary.totalUsers
+      totalUsers: summary.totalUsers,
+      ...only ? { only } : {}
     });
     return {
       synced: true,
       rowCount: rows.length,
       aiReferralCount: aiReferrals.length,
+      socialReferralCount: socialReferrals.length,
       days,
-      syncedAt: now
+      syncedAt: now,
+      ...syncedComponents ? { syncedComponents } : {}
     };
   });
   app.get("/projects/:name/ga/traffic", async (request, _reply) => {
@@ -8320,9 +8548,21 @@ async function ga4Routes(app, opts) {
           GROUP BY date, source, medium
         )`
     ).get();
+    const socialReferrals = app.db.select({
+      source: gaSocialReferrals.source,
+      medium: gaSocialReferrals.medium,
+      channelGroup: gaSocialReferrals.channelGroup,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`,
+      users: sql3`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql3`SUM(${gaSocialReferrals.sessions}) DESC`).all();
+    const socialTotals = app.db.select({
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`,
+      users: sql3`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).get();
     const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq17(gaTrafficSummaries.projectId, project.id)).orderBy(desc7(gaTrafficSummaries.syncedAt)).limit(1).get();
+    const total = summary?.totalSessions ?? 0;
     return {
-      totalSessions: summary?.totalSessions ?? 0,
+      totalSessions: total,
       totalOrganicSessions: summary?.totalOrganicSessions ?? 0,
       totalUsers: summary?.totalUsers ?? 0,
       topPages: rows.map((r) => ({
@@ -8340,6 +8580,18 @@ async function ga4Routes(app, opts) {
       })),
       aiSessionsDeduped: aiDeduped?.sessions ?? 0,
       aiUsersDeduped: aiDeduped?.users ?? 0,
+      socialReferrals: socialReferrals.map((r) => ({
+        source: r.source,
+        medium: r.medium,
+        channelGroup: r.channelGroup,
+        sessions: r.sessions ?? 0,
+        users: r.users ?? 0
+      })),
+      socialSessions: socialTotals?.sessions ?? 0,
+      socialUsers: socialTotals?.users ?? 0,
+      organicSharePct: total > 0 ? Math.round((summary?.totalOrganicSessions ?? 0) / total * 100) : 0,
+      aiSharePct: total > 0 ? Math.round((aiDeduped?.sessions ?? 0) / total * 100) : 0,
+      socialSharePct: total > 0 ? Math.round((socialTotals?.sessions ?? 0) / total * 100) : 0,
       lastSyncedAt: latestSync?.syncedAt ?? null
     };
   });
@@ -8356,6 +8608,146 @@ async function ga4Routes(app, opts) {
     }).from(gaAiReferrals).where(eq17(gaAiReferrals.projectId, project.id)).orderBy(gaAiReferrals.date).all();
     return rows;
   });
+  app.get("/projects/:name/ga/social-referral-history", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const rows = app.db.select({
+      date: gaSocialReferrals.date,
+      source: gaSocialReferrals.source,
+      medium: gaSocialReferrals.medium,
+      channelGroup: gaSocialReferrals.channelGroup,
+      sessions: gaSocialReferrals.sessions,
+      users: gaSocialReferrals.users
+    }).from(gaSocialReferrals).where(eq17(gaSocialReferrals.projectId, project.id)).orderBy(gaSocialReferrals.date).all();
+    return rows;
+  });
+  app.get("/projects/:name/ga/social-referral-trend", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const today = /* @__PURE__ */ new Date();
+    const fmt = (d) => d.toISOString().split("T")[0];
+    const daysAgo2 = (n) => {
+      const d = new Date(today);
+      d.setDate(d.getDate() - n);
+      return fmt(d);
+    };
+    const sumSocial = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${from}`,
+      sql3`${gaSocialReferrals.date} < ${to}`
+    )).get();
+    const current7d = sumSocial(daysAgo2(7), fmt(today));
+    const prev7d = sumSocial(daysAgo2(14), daysAgo2(7));
+    const current30d = sumSocial(daysAgo2(30), fmt(today));
+    const prev30d = sumSocial(daysAgo2(60), daysAgo2(30));
+    const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
+    const sourceCurrent = app.db.select({
+      source: gaSocialReferrals.source,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${daysAgo2(7)}`,
+      sql3`${gaSocialReferrals.date} < ${fmt(today)}`
+    )).groupBy(gaSocialReferrals.source).all();
+    const sourcePrev = app.db.select({
+      source: gaSocialReferrals.source,
+      sessions: sql3`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and6(
+      eq17(gaSocialReferrals.projectId, project.id),
+      sql3`${gaSocialReferrals.date} >= ${daysAgo2(14)}`,
+      sql3`${gaSocialReferrals.date} < ${daysAgo2(7)}`
+    )).groupBy(gaSocialReferrals.source).all();
+    const prevMap = new Map(sourcePrev.map((r) => [r.source, r.sessions]));
+    let biggestMover = null;
+    let maxDelta = 0;
+    for (const row of sourceCurrent) {
+      const prev = prevMap.get(row.source) ?? 0;
+      const delta = Math.abs(row.sessions - prev);
+      if (delta > maxDelta) {
+        maxDelta = delta;
+        biggestMover = {
+          source: row.source,
+          sessions7d: row.sessions,
+          sessionsPrev7d: prev,
+          changePct: pct(row.sessions, prev) ?? (row.sessions > 0 ? 100 : 0)
+        };
+      }
+    }
+    return {
+      socialSessions7d: current7d?.sessions ?? 0,
+      socialSessionsPrev7d: prev7d?.sessions ?? 0,
+      trend7dPct: pct(current7d?.sessions ?? 0, prev7d?.sessions ?? 0),
+      socialSessions30d: current30d?.sessions ?? 0,
+      socialSessionsPrev30d: prev30d?.sessions ?? 0,
+      trend30dPct: pct(current30d?.sessions ?? 0, prev30d?.sessions ?? 0),
+      biggestMover
+    };
+  });
+  app.get("/projects/:name/ga/attribution-trend", async (request, _reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    requireGa4Connection(opts, project.name, project.canonicalDomain);
+    const today = /* @__PURE__ */ new Date();
+    const fmt = (d) => d.toISOString().split("T")[0];
+    const daysAgo2 = (n) => {
+      const d = new Date(today);
+      d.setDate(d.getDate() - n);
+      return fmt(d);
+    };
+    const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
+    const sumTotal = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and6(eq17(gaTrafficSnapshots.projectId, project.id), sql3`${gaTrafficSnapshots.date} >= ${from}`, sql3`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and6(eq17(gaTrafficSnapshots.projectId, project.id), sql3`${gaTrafficSnapshots.date} >= ${from}`, sql3`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumAi = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${from} AND date < ${to}
+        GROUP BY date, source, medium
+      )`).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql3`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${from}`, sql3`${gaSocialReferrals.date} < ${to}`)).get();
+    const todayStr = fmt(today);
+    const buildTrend = (sum) => {
+      const c7 = sum(daysAgo2(7), todayStr)?.sessions ?? 0;
+      const p7 = sum(daysAgo2(14), daysAgo2(7))?.sessions ?? 0;
+      const c30 = sum(daysAgo2(30), todayStr)?.sessions ?? 0;
+      const p30 = sum(daysAgo2(60), daysAgo2(30))?.sessions ?? 0;
+      return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
+    };
+    const aiSourceCurrent = app.db.select({ source: sql3`source`, sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${daysAgo2(7)} AND date < ${todayStr}
+        GROUP BY date, source, medium
+      )`).groupBy(sql3`source`).all();
+    const aiSourcePrev = app.db.select({ source: sql3`source`, sessions: sql3`COALESCE(SUM(max_sessions), 0)` }).from(sql3`(
+        SELECT date, source, medium, MAX(sessions) AS max_sessions
+        FROM ga_ai_referrals
+        WHERE project_id = ${project.id} AND date >= ${daysAgo2(14)} AND date < ${daysAgo2(7)}
+        GROUP BY date, source, medium
+      )`).groupBy(sql3`source`).all();
+    const findBiggestMover = (current, prev) => {
+      const prevMap = new Map(prev.map((r) => [r.source, r.sessions]));
+      let mover = null;
+      let maxDelta = 0;
+      for (const row of current) {
+        const p = prevMap.get(row.source) ?? 0;
+        const delta = Math.abs(row.sessions - p);
+        if (delta > maxDelta) {
+          maxDelta = delta;
+          mover = { source: row.source, sessions7d: row.sessions, sessionsPrev7d: p, changePct: pct(row.sessions, p) ?? (row.sessions > 0 ? 100 : 0) };
+        }
+      }
+      return mover;
+    };
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql3`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql3`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql3`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and6(eq17(gaSocialReferrals.projectId, project.id), sql3`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql3`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
+    return {
+      total: buildTrend(sumTotal),
+      organic: buildTrend(sumOrganic),
+      ai: buildTrend(sumAi),
+      social: buildTrend(sumSocial),
+      aiBiggestMover: findBiggestMover(aiSourceCurrent, aiSourcePrev),
+      socialBiggestMover: findBiggestMover(socialSourceCurrent, socialSourcePrev)
+    };
+  });
   app.get("/projects/:name/ga/session-history", async (request, _reply) => {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);