@ainyc/canonry 1.45.0 → 1.45.1

package/dist/{chunk-B4EP44AR.js → chunk-6HJVQBQM.js}

@@ -23,7 +23,7 @@ import {
   runs,
   schedules,
   usageCounters
-} from "./chunk-SVPQUYTG.js";
+} from "./chunk-WBV2D7FB.js";
 
 // src/config.ts
 import fs from "fs";
@@ -268,7 +268,7 @@ import crypto22 from "crypto";
 import fs5 from "fs";
 import path6 from "path";
 import { fileURLToPath } from "url";
-import { eq as eq23 } from "drizzle-orm";
+import { eq as eq23, sql as sql6 } from "drizzle-orm";
 import Fastify from "fastify";
 
 // ../contracts/src/config-schema.ts
@@ -15085,6 +15085,70 @@ function serializeSessionCookie(opts) {
   }
   return parts.join("; ");
 }
+function migrateDbCredentialsToConfig(db, config) {
+  try {
+    const googleColCheck = db.all(sql6.raw(
+      `SELECT COUNT(*) as c FROM pragma_table_info('google_connections') WHERE name = 'access_token'`
+    ));
+    if (googleColCheck[0]?.c) {
+      const rows = db.all(sql6.raw(
+        `SELECT domain, connection_type, property_id, sitemap_url, access_token, refresh_token, token_expires_at, scopes, created_at, updated_at FROM google_connections WHERE refresh_token IS NOT NULL AND refresh_token != ''`
+      ));
+      let migrated = 0;
+      for (const row of rows) {
+        const connType = row.connection_type;
+        const existing = getGoogleConnection(config, row.domain, connType);
+        if (existing?.refreshToken) continue;
+        upsertGoogleConnection(config, {
+          domain: row.domain,
+          connectionType: connType,
+          propertyId: row.property_id ?? null,
+          sitemapUrl: row.sitemap_url ?? null,
+          accessToken: row.access_token ?? void 0,
+          refreshToken: row.refresh_token ?? null,
+          tokenExpiresAt: row.token_expires_at ?? null,
+          scopes: parseJsonColumn(row.scopes, []),
+          createdAt: row.created_at,
+          updatedAt: row.updated_at
+        });
+        migrated++;
+      }
+      if (migrated > 0) {
+        saveConfigPatch({ google: config.google });
+        log8.info("credentials.migrated", { type: "google", count: migrated });
+      }
+    }
+    const gaColCheck = db.all(sql6.raw(
+      `SELECT COUNT(*) as c FROM pragma_table_info('ga_connections') WHERE name = 'private_key'`
+    ));
+    if (gaColCheck[0]?.c) {
+      const rows = db.all(sql6.raw(
+        `SELECT id, project_id, property_id, client_email, private_key, created_at, updated_at FROM ga_connections WHERE private_key IS NOT NULL AND private_key != ''`
+      ));
+      let migrated = 0;
+      for (const row of rows) {
+        const project = db.select({ name: projects.name }).from(projects).where(eq23(projects.id, row.project_id)).get();
+        if (!project) continue;
+        const existing = getGa4Connection(config, project.name);
+        if (existing?.privateKey) continue;
+        upsertGa4Connection(config, {
+          projectName: project.name,
+          propertyId: row.property_id,
+          clientEmail: row.client_email,
+          privateKey: row.private_key,
+          createdAt: row.created_at,
+          updatedAt: row.updated_at
+        });
+        migrated++;
+      }
+      if (migrated > 0) {
+        saveConfigPatch({ ga4: config.ga4 });
+        log8.info("credentials.migrated", { type: "ga4", count: migrated });
+      }
+    }
+  } catch {
+  }
+}
 async function createServer(opts) {
   const logger = opts.logger === false ? false : process.stdout.isTTY ? {
     transport: {
@@ -15109,6 +15173,7 @@ async function createServer(opts) {
       quota: opts.config.geminiQuota
     };
   }
+  migrateDbCredentialsToConfig(opts.db, opts.config);
   log8.info("providers.configured", { providers: Object.keys(providers).filter((k) => {
     const p = providers[k];
     return p?.apiKey || p?.baseUrl || p?.vertexProject;

package/dist/{chunk-SVPQUYTG.js → chunk-WBV2D7FB.js}

@@ -175,10 +175,6 @@ var googleConnections = sqliteTable("google_connections", {
   connectionType: text("connection_type").notNull(),
   propertyId: text("property_id"),
   sitemapUrl: text("sitemap_url"),
-  // WARNING: Authentication material should be stored in config.yaml per CLAUDE.md
-  accessToken: text("access_token"),
-  refreshToken: text("refresh_token"),
-  tokenExpiresAt: text("token_expires_at"),
   scopes: text("scopes").notNull().default("[]"),
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
@@ -295,8 +291,6 @@ var gaConnections = sqliteTable("ga_connections", {
   projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
   propertyId: text("property_id").notNull(),
   clientEmail: text("client_email").notNull(),
-  // WARNING: Authentication material should be stored in config.yaml per CLAUDE.md
-  privateKey: text("private_key").notNull(),
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
 }, (table) => [
@@ -819,6 +813,10 @@ var MIGRATIONS = [
     created_at      TEXT NOT NULL
   )`,
   `CREATE UNIQUE INDEX IF NOT EXISTS idx_bing_coverage_snap_project_date ON bing_coverage_snapshots(project_id, date)`
+  // v27: Credential columns removed from Drizzle schema — credentials now live in config.yaml.
+  // Physical columns (access_token, refresh_token, token_expires_at on google_connections;
+  // private_key on ga_connections) intentionally retained in DB for one-time migration in server.ts.
+  // SQLite does not support DROP COLUMN; no SQL to execute.
 ];
 function isDuplicateColumnError(err) {
   if (!(err instanceof Error)) return false;

package/dist/cli.js

@@ -28,7 +28,7 @@ import {
   setGoogleAuthConfig,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-B4EP44AR.js";
+} from "./chunk-6HJVQBQM.js";
 import {
   apiKeys,
   competitors,
@@ -38,7 +38,7 @@ import {
   projects,
   querySnapshots,
   runs
-} from "./chunk-SVPQUYTG.js";
+} from "./chunk-WBV2D7FB.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -355,7 +355,7 @@ async function backfillAnswerVisibilityCommand(opts) {
   console.log(`  Errors:   ${providerErrors}`);
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-TXWOESFH.js");
+  const { IntelligenceService } = await import("./intelligence-service-QF6E4HBV.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/index.js

@@ -1,8 +1,8 @@
 import {
   createServer,
   loadConfig
-} from "./chunk-B4EP44AR.js";
-import "./chunk-SVPQUYTG.js";
+} from "./chunk-6HJVQBQM.js";
+import "./chunk-WBV2D7FB.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-TXWOESFH.js → intelligence-service-QF6E4HBV.js}

@@ -1,6 +1,6 @@
 import {
   IntelligenceService
-} from "./chunk-SVPQUYTG.js";
+} from "./chunk-WBV2D7FB.js";
 export {
   IntelligenceService
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "1.45.0",
+  "version": "1.45.1",
   "type": "module",
   "description": "The ultimate open-source AEO monitoring tool - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -56,18 +56,18 @@
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0"
   },
   "scripts": {
     "build": "tsup && tsx build-web.ts",