@ainyc/canonry 2.15.1 → 2.16.2

package/dist/{chunk-KANIG6ES.js → chunk-75EV36V6.js}

@@ -1,5 +1,4 @@
 import {
-  AGENT_MEMORY_KEY_MAX_LENGTH,
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
   AgentProviderIds,
@@ -21,13 +20,16 @@ import {
   authRequired,
   brandKeyFromText,
   buildRunErrorFromMessages,
+  canonryMcpTools,
   categorizeSource,
   categoryLabel,
+  citationStateToCited,
   competitorBatchRequestSchema,
   configExists,
   deliveryFailed,
   determineAnswerMentioned,
   effectiveDomains,
+  emptyCitationVisibility,
   extractAnswerMentions,
   findDuplicateLocationLabels,
   hasLocationLabel,
@@ -60,7 +62,7 @@ import {
   visibilityStateFromAnswerMentioned,
   windowCutoff,
   wordpressEnvSchema
-} from "./chunk-OX24LLIH.js";
+} from "./chunk-7DVIJC6L.js";
 import {
   IntelligenceService,
   agentMemory,
@@ -178,7 +180,7 @@ import crypto28 from "crypto";
 import fs12 from "fs";
 import path14 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { eq as eq32 } from "drizzle-orm";
+import { eq as eq33 } from "drizzle-orm";
 import Fastify from "fastify";
 
 // ../api-routes/src/auth.ts
@@ -2358,22 +2360,168 @@ async function intelligenceRoutes(app) {
   });
 }
 
+// ../api-routes/src/citations.ts
+import { eq as eq12, inArray as inArray3 } from "drizzle-orm";
+async function citationRoutes(app) {
+  app.get("/projects/:name/citations/visibility", async (request, reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    const configuredProviders = parseJsonColumn(project.providers, []);
+    const projectKeywords = app.db.select().from(keywords).where(eq12(keywords.projectId, project.id)).all();
+    if (projectKeywords.length === 0) {
+      return reply.send(emptyCitationVisibility("no-keywords"));
+    }
+    const projectRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(eq12(runs.projectId, project.id)).all();
+    if (projectRuns.length === 0) {
+      return reply.send(emptyCitationVisibility("no-runs-yet"));
+    }
+    const runCreatedAt = new Map(projectRuns.map((r) => [r.id, r.createdAt]));
+    const rawSnapshots = app.db.select({
+      id: querySnapshots.id,
+      runId: querySnapshots.runId,
+      keywordId: querySnapshots.keywordId,
+      provider: querySnapshots.provider,
+      citationState: querySnapshots.citationState,
+      citedDomains: querySnapshots.citedDomains,
+      competitorOverlap: querySnapshots.competitorOverlap,
+      createdAt: querySnapshots.createdAt
+    }).from(querySnapshots).where(inArray3(querySnapshots.runId, projectRuns.map((r) => r.id))).all();
+    if (rawSnapshots.length === 0) {
+      return reply.send(emptyCitationVisibility("no-runs-yet"));
+    }
+    const snapshots = rawSnapshots.map((s) => ({
+      ...s,
+      runCreatedAt: runCreatedAt.get(s.runId) ?? s.createdAt
+    }));
+    const projectCompetitors = app.db.select({ domain: competitors.domain }).from(competitors).where(eq12(competitors.projectId, project.id)).all().map((c) => normalizeDomain(c.domain)).filter((d) => d.length > 0);
+    const response = computeCitationVisibility({
+      keywords: projectKeywords.map((k) => ({ id: k.id, keyword: k.keyword })),
+      snapshots,
+      configuredProviders,
+      competitorDomains: projectCompetitors
+    });
+    return reply.send(response);
+  });
+}
+function computeCitationVisibility(input) {
+  const { keywords: kws, snapshots, configuredProviders, competitorDomains } = input;
+  const latestByPair = /* @__PURE__ */ new Map();
+  for (const snap of snapshots) {
+    const key = `${snap.keywordId}::${snap.provider}`;
+    const existing = latestByPair.get(key);
+    if (!existing || snap.createdAt > existing.createdAt) {
+      latestByPair.set(key, snap);
+    }
+  }
+  const observedProviders = /* @__PURE__ */ new Set();
+  for (const pair of latestByPair.values()) observedProviders.add(pair.provider);
+  const providerUniverse = configuredProviders.length > 0 ? Array.from(new Set(configuredProviders)) : Array.from(observedProviders).sort();
+  const byKeyword = [];
+  const providersCitingTracker = /* @__PURE__ */ new Set();
+  let keywordsCited = 0;
+  let keywordsFullyCovered = 0;
+  let keywordsUncovered = 0;
+  for (const kw of kws) {
+    const providers = [];
+    let citedCount = 0;
+    for (const provider of providerUniverse) {
+      const snap = latestByPair.get(`${kw.id}::${provider}`);
+      if (!snap) continue;
+      const state = snap.citationState;
+      const cited = citationStateToCited(state);
+      if (cited) {
+        citedCount++;
+        providersCitingTracker.add(provider);
+      }
+      providers.push({
+        provider,
+        citationState: state,
+        cited,
+        runId: snap.runId,
+        runCreatedAt: snap.runCreatedAt
+      });
+    }
+    if (citedCount > 0) keywordsCited++;
+    if (providerUniverse.length > 0 && citedCount === providerUniverse.length) keywordsFullyCovered++;
+    if (providers.length > 0 && citedCount === 0) keywordsUncovered++;
+    byKeyword.push({
+      keywordId: kw.id,
+      keyword: kw.keyword,
+      providers,
+      citedCount,
+      totalProviders: providers.length
+    });
+  }
+  const competitorSet = new Set(competitorDomains);
+  const competitorGaps = [];
+  const keywordById = new Map(kws.map((k) => [k.id, k.keyword]));
+  for (const snap of latestByPair.values()) {
+    if (citationStateToCited(snap.citationState)) continue;
+    if (competitorSet.size === 0) continue;
+    const cited = parseJsonColumn(snap.citedDomains, []);
+    const overlap = parseJsonColumn(snap.competitorOverlap, []);
+    const candidates = new Set(
+      [...cited, ...overlap].map((d) => normalizeDomain(d)).filter((d) => d.length > 0)
+    );
+    const citingCompetitors = Array.from(candidates).filter((d) => competitorSet.has(d));
+    if (citingCompetitors.length === 0) continue;
+    competitorGaps.push({
+      keywordId: snap.keywordId,
+      keyword: keywordById.get(snap.keywordId) ?? "",
+      provider: snap.provider,
+      citingCompetitors: citingCompetitors.sort(),
+      runId: snap.runId,
+      runCreatedAt: snap.runCreatedAt
+    });
+  }
+  competitorGaps.sort((a, b) => {
+    if (a.keyword !== b.keyword) return a.keyword.localeCompare(b.keyword);
+    return a.provider.localeCompare(b.provider);
+  });
+  let latestRunId = null;
+  let latestRunAt = null;
+  for (const snap of latestByPair.values()) {
+    if (latestRunAt === null || snap.runCreatedAt > latestRunAt) {
+      latestRunAt = snap.runCreatedAt;
+      latestRunId = snap.runId;
+    }
+  }
+  const summary = {
+    providersConfigured: providerUniverse.length,
+    providersCiting: providersCitingTracker.size,
+    totalKeywords: kws.length,
+    keywordsCited,
+    keywordsFullyCovered,
+    keywordsUncovered,
+    latestRunId,
+    latestRunAt
+  };
+  return {
+    summary,
+    byKeyword,
+    competitorGaps,
+    status: "ready"
+  };
+}
+function normalizeDomain(domain) {
+  return domain.toLowerCase().trim().replace(/^https?:\/\//, "").replace(/^www\./, "").replace(/\/$/, "");
+}
+
 // ../api-routes/src/composites.ts
-import { eq as eq12, and as and3, desc as desc5, sql as sql3, like, or as or2 } from "drizzle-orm";
+import { eq as eq13, and as and3, desc as desc5, sql as sql3, like, or as or2 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
 async function compositeRoutes(app) {
   app.get("/projects/:name/overview", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const totalRunsRow = app.db.select({ count: sql3`count(*)` }).from(runs).where(eq12(runs.projectId, project.id)).get();
+    const totalRunsRow = app.db.select({ count: sql3`count(*)` }).from(runs).where(eq13(runs.projectId, project.id)).get();
     const totalRuns = totalRunsRow?.count ?? 0;
-    const recentRuns = app.db.select().from(runs).where(eq12(runs.projectId, project.id)).orderBy(desc5(runs.createdAt)).limit(2).all();
+    const recentRuns = app.db.select().from(runs).where(eq13(runs.projectId, project.id)).orderBy(desc5(runs.createdAt)).limit(2).all();
     const [latestRunRow, previousRunRow] = recentRuns;
     const latestRun = latestRunRow ? { totalRuns, run: summarizeRun(latestRunRow) } : { totalRuns: 0, run: null };
-    const healthRow = app.db.select().from(healthSnapshots).where(eq12(healthSnapshots.projectId, project.id)).orderBy(desc5(healthSnapshots.createdAt)).limit(1).get();
+    const healthRow = app.db.select().from(healthSnapshots).where(eq13(healthSnapshots.projectId, project.id)).orderBy(desc5(healthSnapshots.createdAt)).limit(1).get();
     const health = healthRow ? mapHealthRow2(healthRow) : null;
-    const insightRows = app.db.select().from(insights).where(eq12(insights.projectId, project.id)).orderBy(desc5(insights.createdAt)).all();
+    const insightRows = app.db.select().from(insights).where(eq13(insights.projectId, project.id)).orderBy(desc5(insights.createdAt)).all();
     const topInsights = insightRows.filter((row) => !row.dismissed).slice(0, TOP_INSIGHT_LIMIT).map(mapInsightRow2);
     const { keywordCounts, providers } = summarizeLatestRun(app, latestRunRow ?? null);
     const transitions = summarizeTransitions(app, latestRunRow ?? null, previousRunRow ?? null);
@@ -2409,9 +2557,9 @@ async function compositeRoutes(app) {
       citedDomains: querySnapshots.citedDomains,
       rawResponse: querySnapshots.rawResponse,
       createdAt: querySnapshots.createdAt
-    }).from(querySnapshots).innerJoin(keywords, eq12(querySnapshots.keywordId, keywords.id)).where(
+    }).from(querySnapshots).innerJoin(keywords, eq13(querySnapshots.keywordId, keywords.id)).where(
       and3(
-        eq12(keywords.projectId, project.id),
+        eq13(keywords.projectId, project.id),
         or2(
           sql3`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
           sql3`${querySnapshots.citedDomains} LIKE ${pattern} ESCAPE '\\'`,
@@ -2422,7 +2570,7 @@ async function compositeRoutes(app) {
     ).orderBy(desc5(querySnapshots.createdAt)).limit(limit + 1).all();
     const insightMatches = app.db.select().from(insights).where(
       and3(
-        eq12(insights.projectId, project.id),
+        eq13(insights.projectId, project.id),
         or2(
           like(insights.title, pattern),
           like(insights.keyword, pattern),
@@ -2485,7 +2633,7 @@ function summarizeLatestRun(app, run) {
     keywordId: querySnapshots.keywordId,
     provider: querySnapshots.provider,
     citationState: querySnapshots.citationState
-  }).from(querySnapshots).where(eq12(querySnapshots.runId, run.id)).all();
+  }).from(querySnapshots).where(eq13(querySnapshots.runId, run.id)).all();
   if (rows.length === 0) return empty;
   const perKeyword = /* @__PURE__ */ new Map();
   const perProvider = /* @__PURE__ */ new Map();
@@ -2524,7 +2672,7 @@ function summarizeTransitions(app, latest, previous) {
     const rows = app.db.select({
       keywordId: querySnapshots.keywordId,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).where(eq12(querySnapshots.runId, runId)).all();
+    }).from(querySnapshots).where(eq13(querySnapshots.runId, runId)).all();
     const map = /* @__PURE__ */ new Map();
     for (const row of rows) {
       const cited = row.citationState === "cited";
@@ -2681,16 +2829,16 @@ function makeSnippet(text, query) {
 }
 
 // ../api-routes/src/content-data.ts
-import { and as and4, eq as eq13, desc as desc6, inArray as inArray3 } from "drizzle-orm";
+import { and as and4, eq as eq14, desc as desc6, inArray as inArray4 } from "drizzle-orm";
 var RECENT_RUNS_WINDOW = 5;
 function loadOrchestratorInput(db, project) {
   const projectId = project.id;
-  const ownDomain = normalizeDomain(project.canonicalDomain);
+  const ownDomain = normalizeDomain2(project.canonicalDomain);
   const ownedDomains = parseJsonColumn(project.ownedDomains, []);
-  const ourDomains = /* @__PURE__ */ new Set([ownDomain, ...ownedDomains.map(normalizeDomain)]);
+  const ourDomains = /* @__PURE__ */ new Set([ownDomain, ...ownedDomains.map(normalizeDomain2)]);
   const trackedKeywords = listKeywords(db, projectId);
   const candidateQueryStrings = trackedKeywords.filter(isBlogShapedQuery);
-  const trackedCompetitors = listCompetitorDomains(db, projectId).map(normalizeDomain);
+  const trackedCompetitors = listCompetitorDomains(db, projectId).map(normalizeDomain2);
   const competitorSet = new Set(trackedCompetitors);
   const recentRunIds = listRecentAnswerVisibilityRunIds(db, projectId, RECENT_RUNS_WINDOW);
   const latestRunId = recentRunIds[0] ?? "";
@@ -2727,43 +2875,43 @@ function loadOrchestratorInput(db, project) {
   };
 }
 function listKeywords(db, projectId) {
-  const rows = db.select({ text: keywords.keyword }).from(keywords).where(eq13(keywords.projectId, projectId)).all();
+  const rows = db.select({ text: keywords.keyword }).from(keywords).where(eq14(keywords.projectId, projectId)).all();
   return rows.map((r) => r.text);
 }
 function listCompetitorDomains(db, projectId) {
-  const rows = db.select({ domain: competitors.domain }).from(competitors).where(eq13(competitors.projectId, projectId)).all();
+  const rows = db.select({ domain: competitors.domain }).from(competitors).where(eq14(competitors.projectId, projectId)).all();
   return rows.map((r) => r.domain);
 }
 function listRecentAnswerVisibilityRunIds(db, projectId, limit) {
   const rows = db.select({ id: runs.id }).from(runs).where(
     and4(
-      eq13(runs.projectId, projectId),
-      eq13(runs.kind, RunKinds["answer-visibility"]),
+      eq14(runs.projectId, projectId),
+      eq14(runs.kind, RunKinds["answer-visibility"]),
       // Queued/running/failed/cancelled runs may have partial or no
       // snapshots; including them risks pointing latestRunId at a run with
       // no usable evidence.
-      inArray3(runs.status, [RunStatuses.completed, RunStatuses.partial])
+      inArray4(runs.status, [RunStatuses.completed, RunStatuses.partial])
     )
   ).orderBy(desc6(runs.createdAt)).limit(limit).all();
   return rows.map((r) => r.id);
 }
 function lookupRunTimestamp(db, runId) {
-  const row = db.select({ createdAt: runs.createdAt }).from(runs).where(eq13(runs.id, runId)).get();
+  const row = db.select({ createdAt: runs.createdAt }).from(runs).where(eq14(runs.id, runId)).get();
   return row?.createdAt ?? "";
 }
 function listGscPagesForProject(db, projectId) {
-  const rows = db.selectDistinct({ page: gscSearchData.page }).from(gscSearchData).where(eq13(gscSearchData.projectId, projectId)).all();
+  const rows = db.selectDistinct({ page: gscSearchData.page }).from(gscSearchData).where(eq14(gscSearchData.projectId, projectId)).all();
   return rows.map((r) => r.page);
 }
 function listGa4LandingPagesForProject(db, projectId) {
-  const rows = db.selectDistinct({ landingPage: gaTrafficSnapshots.landingPage }).from(gaTrafficSnapshots).where(eq13(gaTrafficSnapshots.projectId, projectId)).all();
+  const rows = db.selectDistinct({ landingPage: gaTrafficSnapshots.landingPage }).from(gaTrafficSnapshots).where(eq14(gaTrafficSnapshots.projectId, projectId)).all();
   return rows.map((r) => r.landingPage);
 }
 function buildGaTrafficByPage(db, projectId) {
   const rows = db.select({
     landingPage: gaTrafficSnapshots.landingPage,
     sessions: gaTrafficSnapshots.sessions
-  }).from(gaTrafficSnapshots).where(eq13(gaTrafficSnapshots.projectId, projectId)).all();
+  }).from(gaTrafficSnapshots).where(eq14(gaTrafficSnapshots.projectId, projectId)).all();
   const map = /* @__PURE__ */ new Map();
   for (const row of rows) {
     const path15 = extractPath(row.landingPage);
@@ -2773,24 +2921,24 @@ function buildGaTrafficByPage(db, projectId) {
   return map;
 }
 function sumAiReferralSessions(db, projectId) {
-  const rows = db.select({ sessions: gaAiReferrals.sessions }).from(gaAiReferrals).where(eq13(gaAiReferrals.projectId, projectId)).all();
+  const rows = db.select({ sessions: gaAiReferrals.sessions }).from(gaAiReferrals).where(eq14(gaAiReferrals.projectId, projectId)).all();
   return rows.reduce((acc, r) => acc + (r.sessions ?? 0), 0);
 }
 function buildCandidateQueries(opts) {
   if (opts.candidateQueryStrings.length === 0 || opts.recentRunIds.length === 0) {
     return opts.candidateQueryStrings.map((query) => emptyCandidate(query));
   }
-  const keywordRows = opts.db.select({ id: keywords.id, text: keywords.keyword }).from(keywords).where(eq13(keywords.projectId, opts.projectId)).all();
+  const keywordRows = opts.db.select({ id: keywords.id, text: keywords.keyword }).from(keywords).where(eq14(keywords.projectId, opts.projectId)).all();
   const keywordIdByText = new Map(keywordRows.map((r) => [r.text, r.id]));
   const candidateKeywordIds = opts.candidateQueryStrings.map((q) => keywordIdByText.get(q)).filter((id) => Boolean(id));
-  const snapshotRows = opts.db.select().from(querySnapshots).where(inArray3(querySnapshots.runId, opts.recentRunIds)).all().filter((r) => candidateKeywordIds.includes(r.keywordId));
+  const snapshotRows = opts.db.select().from(querySnapshots).where(inArray4(querySnapshots.runId, opts.recentRunIds)).all().filter((r) => candidateKeywordIds.includes(r.keywordId));
   const snapshotsByKeyword = /* @__PURE__ */ new Map();
   for (const row of snapshotRows) {
     const list = snapshotsByKeyword.get(row.keywordId) ?? [];
     list.push(row);
     snapshotsByKeyword.set(row.keywordId, list);
   }
-  const gscRows = opts.db.select().from(gscSearchData).where(eq13(gscSearchData.projectId, opts.projectId)).all();
+  const gscRows = opts.db.select().from(gscSearchData).where(eq14(gscSearchData.projectId, opts.projectId)).all();
   const gscByQuery = aggregateGscByQuery(gscRows);
   return opts.candidateQueryStrings.map((query) => {
     const keywordId = keywordIdByText.get(query);
@@ -2854,13 +3002,13 @@ function aggregateCandidate(opts) {
     const isLatestRun = snap.runId === opts.latestRunId;
     const competitorOverlap = parseJsonColumn(snap.competitorOverlap, []);
     for (const domain of competitorOverlap) {
-      const normalized = normalizeDomain(domain);
+      const normalized = normalizeDomain2(domain);
       if (!opts.competitorSet.has(normalized)) continue;
       competitorTally.set(normalized, (competitorTally.get(normalized) ?? 0) + 1);
     }
     const grounding = extractGroundingSources(snap.rawResponse);
     for (const g of grounding) {
-      const domain = normalizeDomain(extractHostFromUri(g.uri));
+      const domain = normalizeDomain2(extractHostFromUri(g.uri));
       if (!domain) continue;
       if (opts.ourDomains.has(domain)) {
         if (isLatestRun) ourCitedInLatestRun = true;
@@ -2946,7 +3094,7 @@ function extractHostFromUri(uri) {
     return "";
   }
 }
-function normalizeDomain(domain) {
+function normalizeDomain2(domain) {
   return domain.toLowerCase().replace(/^https?:\/\//, "").replace(/^www\./, "").replace(/\/$/, "");
 }
 function extractPath(url) {
@@ -5237,6 +5385,18 @@ var routeCatalog = [
       404: { description: "Project not found." }
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/citations/visibility",
+    summary: "Citation visibility headline (cited by N of M engines)",
+    description: 'Single-call read for the AI citation surface. Returns project headline (`providersConfigured`/`providersCiting`/keyword coverage counts), per-keyword engine coverage rows from the latest snapshot per (keyword \xD7 provider), and a competitor-gap list (keywords where the project is not cited but a configured competitor is). Status `no-data` with `reason: "no-runs-yet"` or `"no-keywords"` when the project lacks the inputs.',
+    tags: ["intelligence"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Citation visibility report or no-data sentinel returned." },
+      404: { description: "Project not found." }
+    }
+  },
   // Content opportunity engine
   {
     method: "get",
@@ -5547,6 +5707,73 @@ var canonryLocalRouteCatalog = [
       404: { description: "Project not found." }
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/agent/memory",
+    summary: "List durable Aero memory entries for a project",
+    description: "Returns the project-scoped agent_memory rows newest-first. Includes both operator-authored notes (source `user`/`aero`) and LLM-authored compaction summaries (source `compaction`, key prefix `compaction:`). The N most-recent rows are also injected into the system prompt at every new session start.",
+    tags: ["agent"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Memory entries returned." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "put",
+    path: "/api/v1/projects/{name}/agent/memory",
+    summary: "Upsert a durable Aero memory entry",
+    description: "Creates or replaces a project-scoped note (max 2 KB, max 128-char key). Same key replaces the prior value. Keys with the reserved `compaction:` prefix are rejected \u2014 that namespace is owned by transcript compaction.",
+    tags: ["agent"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: {
+        "application/json": {
+          schema: {
+            type: "object",
+            required: ["key", "value"],
+            properties: {
+              key: { type: "string", description: "Stable identifier for this note (max 128 chars)." },
+              value: { type: "string", description: "Plain-text note body (max 2 KB)." }
+            }
+          }
+        }
+      }
+    },
+    responses: {
+      200: { description: "Entry upserted." },
+      400: { description: "Validation failed (key length, value size, reserved prefix)." },
+      404: { description: "Project not found." }
+    }
+  },
+  {
+    method: "delete",
+    path: "/api/v1/projects/{name}/agent/memory",
+    summary: "Delete a durable Aero memory entry",
+    description: "Removes a single project-scoped note by key. Returns `status: missing` (non-error) when the key never existed. Keys with the reserved `compaction:` prefix are rejected \u2014 those notes are pruned automatically.",
+    tags: ["agent"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: {
+        "application/json": {
+          schema: {
+            type: "object",
+            required: ["key"],
+            properties: {
+              key: { type: "string", description: "Exact key of the note to remove." }
+            }
+          }
+        }
+      }
+    },
+    responses: {
+      200: { description: "Entry removed or already absent." },
+      400: { description: "Validation failed (reserved prefix)." },
+      404: { description: "Project not found." }
+    }
+  },
   {
     method: "get",
     path: "/api/v1/projects/{name}/agent/providers",
@@ -5814,7 +6041,7 @@ async function telemetryRoutes(app, opts) {
 
 // ../api-routes/src/schedules.ts
 import crypto11 from "crypto";
-import { eq as eq14 } from "drizzle-orm";
+import { eq as eq15 } from "drizzle-orm";
 async function scheduleRoutes(app, opts) {
   app.put("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
@@ -5857,7 +6084,7 @@ async function scheduleRoutes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const enabledInt = enabled === false ? 0 : 1;
-    const existing = app.db.select().from(schedules).where(eq14(schedules.projectId, project.id)).get();
+    const existing = app.db.select().from(schedules).where(eq15(schedules.projectId, project.id)).get();
     if (existing) {
       app.db.update(schedules).set({
         cronExpr,
@@ -5866,7 +6093,7 @@ async function scheduleRoutes(app, opts) {
         providers: JSON.stringify(providers),
         enabled: enabledInt,
         updatedAt: now
-      }).where(eq14(schedules.id, existing.id)).run();
+      }).where(eq15(schedules.id, existing.id)).run();
     } else {
       app.db.insert(schedules).values({
         id: crypto11.randomUUID(),
@@ -5888,12 +6115,12 @@ async function scheduleRoutes(app, opts) {
       diff: { cronExpr, preset, timezone, providers }
     });
     opts.onScheduleUpdated?.("upsert", project.id);
-    const schedule = app.db.select().from(schedules).where(eq14(schedules.projectId, project.id)).get();
+    const schedule = app.db.select().from(schedules).where(eq15(schedules.projectId, project.id)).get();
     return reply.status(existing ? 200 : 201).send(formatSchedule(schedule));
   });
   app.get("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const schedule = app.db.select().from(schedules).where(eq14(schedules.projectId, project.id)).get();
+    const schedule = app.db.select().from(schedules).where(eq15(schedules.projectId, project.id)).get();
     if (!schedule) {
       throw notFound("Schedule", request.params.name);
     }
@@ -5901,11 +6128,11 @@ async function scheduleRoutes(app, opts) {
   });
   app.delete("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const schedule = app.db.select().from(schedules).where(eq14(schedules.projectId, project.id)).get();
+    const schedule = app.db.select().from(schedules).where(eq15(schedules.projectId, project.id)).get();
     if (!schedule) {
       throw notFound("Schedule", request.params.name);
     }
-    app.db.delete(schedules).where(eq14(schedules.id, schedule.id)).run();
+    app.db.delete(schedules).where(eq15(schedules.id, schedule.id)).run();
     writeAuditLog(app.db, {
       projectId: project.id,
       actor: "api",
@@ -5935,7 +6162,7 @@ function formatSchedule(row) {
 
 // ../api-routes/src/notifications.ts
 import crypto12 from "crypto";
-import { eq as eq15 } from "drizzle-orm";
+import { eq as eq16 } from "drizzle-orm";
 var VALID_EVENTS = ["citation.lost", "citation.gained", "run.completed", "run.failed", "insight.critical", "insight.high"];
 async function notificationRoutes(app) {
   app.get("/notifications/events", async (_request, reply) => {
@@ -5974,22 +6201,22 @@ async function notificationRoutes(app) {
       diff: { channel, ...redactNotificationUrl(url), events }
     });
     return reply.status(201).send({
-      ...formatNotification(app.db.select().from(notifications).where(eq15(notifications.id, id)).get()),
+      ...formatNotification(app.db.select().from(notifications).where(eq16(notifications.id, id)).get()),
       webhookSecret
     });
   });
   app.get("/projects/:name/notifications", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select().from(notifications).where(eq15(notifications.projectId, project.id)).all();
+    const rows = app.db.select().from(notifications).where(eq16(notifications.projectId, project.id)).all();
     return reply.send(rows.map(formatNotification));
   });
   app.delete("/projects/:name/notifications/:id", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const notification = app.db.select().from(notifications).where(eq15(notifications.id, request.params.id)).get();
+    const notification = app.db.select().from(notifications).where(eq16(notifications.id, request.params.id)).get();
     if (!notification || notification.projectId !== project.id) {
       throw notFound("Notification", request.params.id);
     }
-    app.db.delete(notifications).where(eq15(notifications.id, notification.id)).run();
+    app.db.delete(notifications).where(eq16(notifications.id, notification.id)).run();
     writeAuditLog(app.db, {
       projectId: project.id,
       actor: "api",
@@ -6001,7 +6228,7 @@ async function notificationRoutes(app) {
   });
   app.post("/projects/:name/notifications/:id/test", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const notification = app.db.select().from(notifications).where(eq15(notifications.id, request.params.id)).get();
+    const notification = app.db.select().from(notifications).where(eq16(notifications.id, request.params.id)).get();
     if (!notification || notification.projectId !== project.id) {
       throw notFound("Notification", request.params.id);
     }
@@ -6054,7 +6281,7 @@ function formatNotification(row) {
 
 // ../api-routes/src/google.ts
 import crypto14 from "crypto";
-import { eq as eq16, and as and5, desc as desc7, sql as sql4 } from "drizzle-orm";
+import { eq as eq17, and as and5, desc as desc7, sql as sql4 } from "drizzle-orm";
 
 // ../integration-google/src/constants.ts
 var GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
@@ -7189,14 +7416,14 @@ async function googleRoutes(app, opts) {
     if (opts.onGscSyncRequested) {
       opts.onGscSyncRequested(runId, project.id, { days, full });
     }
-    const run = app.db.select().from(runs).where(eq16(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq17(runs.id, runId)).get();
     return run;
   });
   app.get("/projects/:name/google/gsc/performance", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const { startDate, endDate, query, page, limit } = request.query;
     const cutoffDate = !startDate ? windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null : null;
-    const conditions = [eq16(gscSearchData.projectId, project.id)];
+    const conditions = [eq17(gscSearchData.projectId, project.id)];
     if (startDate) conditions.push(sql4`${gscSearchData.date} >= ${startDate}`);
     else if (cutoffDate) conditions.push(sql4`${gscSearchData.date} >= ${cutoffDate}`);
     if (endDate) conditions.push(sql4`${gscSearchData.date} <= ${endDate}`);
@@ -7274,8 +7501,8 @@ async function googleRoutes(app, opts) {
   app.get("/projects/:name/google/gsc/inspections", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const conditions = [eq16(gscUrlInspections.projectId, project.id)];
-    if (url) conditions.push(eq16(gscUrlInspections.url, url));
+    const conditions = [eq17(gscUrlInspections.projectId, project.id)];
+    if (url) conditions.push(eq17(gscUrlInspections.url, url));
     const rows = app.db.select().from(gscUrlInspections).where(and5(...conditions)).orderBy(desc7(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
     return rows.map((r) => ({
       id: r.id,
@@ -7295,7 +7522,7 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/google/gsc/deindexed", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const allInspections = app.db.select().from(gscUrlInspections).where(eq16(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(gscUrlInspections).where(eq17(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
     const byUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
       const existing = byUrl.get(row.url);
@@ -7323,7 +7550,7 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/google/gsc/coverage", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const allInspections = app.db.select().from(gscUrlInspections).where(eq16(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(gscUrlInspections).where(eq17(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
     const canonicalUrl = (url) => url.replace(/^http:\/\//, "https://");
     const latestByUrl = /* @__PURE__ */ new Map();
     const historyByUrl = /* @__PURE__ */ new Map();
@@ -7420,7 +7647,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const parsed = parseInt(request.query.limit ?? "90", 10);
     const limit = Number.isNaN(parsed) || parsed <= 0 ? 90 : parsed;
-    const rows = app.db.select().from(gscCoverageSnapshots).where(eq16(gscCoverageSnapshots.projectId, project.id)).orderBy(desc7(gscCoverageSnapshots.date)).limit(limit).all();
+    const rows = app.db.select().from(gscCoverageSnapshots).where(eq17(gscCoverageSnapshots.projectId, project.id)).orderBy(desc7(gscCoverageSnapshots.date)).limit(limit).all();
     return rows.map((r) => ({
       date: r.date,
       indexed: r.indexed,
@@ -7480,7 +7707,7 @@ async function googleRoutes(app, opts) {
     if (opts.onInspectSitemapRequested) {
       opts.onInspectSitemapRequested(runId, project.id, { sitemapUrl });
     }
-    const run = app.db.select().from(runs).where(eq16(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq17(runs.id, runId)).get();
     return { sitemaps, primarySitemapUrl: sitemapUrl, run };
   });
   app.post("/projects/:name/google/gsc/inspect-sitemap", async (request) => {
@@ -7507,7 +7734,7 @@ async function googleRoutes(app, opts) {
     if (opts.onInspectSitemapRequested) {
       opts.onInspectSitemapRequested(runId, project.id, { sitemapUrl: sitemapUrl ?? void 0 });
     }
-    const run = app.db.select().from(runs).where(eq16(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq17(runs.id, runId)).get();
     return run;
   });
   app.put("/projects/:name/google/connections/:type/sitemap", async (request) => {
@@ -7554,7 +7781,7 @@ async function googleRoutes(app, opts) {
     const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
     let urlsToNotify = request.body?.urls ?? [];
     if (request.body?.allUnindexed) {
-      const allInspections = app.db.select().from(gscUrlInspections).where(eq16(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
+      const allInspections = app.db.select().from(gscUrlInspections).where(eq17(gscUrlInspections.projectId, project.id)).orderBy(desc7(gscUrlInspections.inspectedAt)).all();
       const latestByUrl = /* @__PURE__ */ new Map();
       for (const row of allInspections) {
         if (!latestByUrl.has(row.url)) {
@@ -7625,7 +7852,7 @@ async function googleRoutes(app, opts) {
 
 // ../api-routes/src/bing.ts
 import crypto15 from "crypto";
-import { eq as eq17, and as and6, desc as desc8 } from "drizzle-orm";
+import { eq as eq18, and as and6, desc as desc8 } from "drizzle-orm";
 
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
@@ -7938,7 +8165,7 @@ async function bingRoutes(app, opts) {
     const store = requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     requireConnection(store, project.canonicalDomain);
-    const allInspections = app.db.select().from(bingUrlInspections).where(eq17(bingUrlInspections.projectId, project.id)).orderBy(desc8(bingUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(bingUrlInspections).where(eq18(bingUrlInspections.projectId, project.id)).orderBy(desc8(bingUrlInspections.inspectedAt)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     const definitiveByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
@@ -8027,7 +8254,7 @@ async function bingRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const parsed = parseInt(request.query.limit ?? "90", 10);
     const limit = Number.isNaN(parsed) || parsed <= 0 ? 90 : parsed;
-    const rows = app.db.select().from(bingCoverageSnapshots).where(eq17(bingCoverageSnapshots.projectId, project.id)).orderBy(desc8(bingCoverageSnapshots.date)).limit(limit).all();
+    const rows = app.db.select().from(bingCoverageSnapshots).where(eq18(bingCoverageSnapshots.projectId, project.id)).orderBy(desc8(bingCoverageSnapshots.date)).limit(limit).all();
     return rows.map((r) => ({
       date: r.date,
       indexed: r.indexed,
@@ -8039,7 +8266,7 @@ async function bingRoutes(app, opts) {
     requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const whereClause = url ? and6(eq17(bingUrlInspections.projectId, project.id), eq17(bingUrlInspections.url, url)) : eq17(bingUrlInspections.projectId, project.id);
+    const whereClause = url ? and6(eq18(bingUrlInspections.projectId, project.id), eq18(bingUrlInspections.url, url)) : eq18(bingUrlInspections.projectId, project.id);
     const filtered = app.db.select().from(bingUrlInspections).where(whereClause).orderBy(desc8(bingUrlInspections.inspectedAt)).limit(Math.max(1, Math.min(parseInt(limit ?? "100", 10) || 100, 1e3))).all();
     return filtered.map((r) => ({
       id: r.id,
@@ -8129,7 +8356,7 @@ async function bingRoutes(app, opts) {
         anchorCount: result.AnchorCount ?? null,
         discoveryDate
       }).run();
-      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq17(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq18(runs.id, runId)).run();
       return {
         id,
         url,
@@ -8145,7 +8372,7 @@ async function bingRoutes(app, opts) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       bingLog("error", "inspect-url.failed", { domain: project.canonicalDomain, url, error: msg });
-      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq17(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq18(runs.id, runId)).run();
       throw e;
     }
   });
@@ -8172,7 +8399,7 @@ async function bingRoutes(app, opts) {
     } else {
       bingLog("warn", "inspect-sitemap.no-callback", { domain: project.canonicalDomain, runId });
     }
-    const run = app.db.select().from(runs).where(eq17(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq18(runs.id, runId)).get();
     return run;
   });
   app.post("/projects/:name/bing/request-indexing", async (request) => {
@@ -8184,7 +8411,7 @@ async function bingRoutes(app, opts) {
     }
     let urlsToSubmit = request.body?.urls ?? [];
     if (request.body?.allUnindexed) {
-      const allInspections = app.db.select().from(bingUrlInspections).where(eq17(bingUrlInspections.projectId, project.id)).orderBy(desc8(bingUrlInspections.inspectedAt)).all();
+      const allInspections = app.db.select().from(bingUrlInspections).where(eq18(bingUrlInspections.projectId, project.id)).orderBy(desc8(bingUrlInspections.inspectedAt)).all();
       const latestByUrl = /* @__PURE__ */ new Map();
       for (const row of allInspections) {
         if (!latestByUrl.has(row.url)) {
@@ -8271,14 +8498,14 @@ async function bingRoutes(app, opts) {
 import fs from "fs";
 import path from "path";
 import os from "os";
-import { eq as eq18, and as and7 } from "drizzle-orm";
+import { eq as eq19, and as and7 } from "drizzle-orm";
 function getScreenshotDir() {
   return path.join(os.homedir(), ".canonry", "screenshots");
 }
 async function cdpRoutes(app, opts) {
   app.get("/screenshots/:snapshotId", async (request, reply) => {
     const { snapshotId } = request.params;
-    const snapshot = app.db.select({ screenshotPath: querySnapshots.screenshotPath }).from(querySnapshots).where(eq18(querySnapshots.id, snapshotId)).get();
+    const snapshot = app.db.select({ screenshotPath: querySnapshots.screenshotPath }).from(querySnapshots).where(eq19(querySnapshots.id, snapshotId)).get();
     if (!snapshot?.screenshotPath) {
       const err = notFound("Screenshot", snapshotId);
       return reply.code(err.statusCode).send(err.toJSON());
@@ -8344,7 +8571,7 @@ async function cdpRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const { runId } = request.params;
-      const run = app.db.select().from(runs).where(and7(eq18(runs.id, runId), eq18(runs.projectId, project.id))).get();
+      const run = app.db.select().from(runs).where(and7(eq19(runs.id, runId), eq19(runs.projectId, project.id))).get();
       if (!run) {
         const err = notFound("Run", runId);
         return reply.code(err.statusCode).send(err.toJSON());
@@ -8357,8 +8584,8 @@ async function cdpRoutes(app, opts) {
         citedDomains: querySnapshots.citedDomains,
         screenshotPath: querySnapshots.screenshotPath,
         rawResponse: querySnapshots.rawResponse
-      }).from(querySnapshots).where(eq18(querySnapshots.runId, runId)).all();
-      const keywordRows = app.db.select({ id: keywords.id, keyword: keywords.keyword }).from(keywords).where(eq18(keywords.projectId, project.id)).all();
+      }).from(querySnapshots).where(eq19(querySnapshots.runId, runId)).all();
+      const keywordRows = app.db.select({ id: keywords.id, keyword: keywords.keyword }).from(keywords).where(eq19(keywords.projectId, project.id)).all();
       const keywordMap = new Map(keywordRows.map((k) => [k.id, k.keyword]));
       const byKeyword = /* @__PURE__ */ new Map();
       for (const snap of snapshots) {
@@ -8441,7 +8668,7 @@ async function cdpRoutes(app, opts) {
 
 // ../api-routes/src/ga.ts
 import crypto16 from "crypto";
-import { eq as eq19, desc as desc9, and as and8, sql as sql5 } from "drizzle-orm";
+import { eq as eq20, desc as desc9, and as and8, sql as sql5 } from "drizzle-orm";
 function gaLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GA4Routes", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -8598,10 +8825,10 @@ async function ga4Routes(app, opts) {
     if (!saConn && !oauthConn) {
       throw notFound("GA4 connection", project.name);
     }
-    app.db.delete(gaTrafficSnapshots).where(eq19(gaTrafficSnapshots.projectId, project.id)).run();
-    app.db.delete(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).run();
-    app.db.delete(gaAiReferrals).where(eq19(gaAiReferrals.projectId, project.id)).run();
-    app.db.delete(gaSocialReferrals).where(eq19(gaSocialReferrals.projectId, project.id)).run();
+    app.db.delete(gaTrafficSnapshots).where(eq20(gaTrafficSnapshots.projectId, project.id)).run();
+    app.db.delete(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).run();
+    app.db.delete(gaAiReferrals).where(eq20(gaAiReferrals.projectId, project.id)).run();
+    app.db.delete(gaSocialReferrals).where(eq20(gaSocialReferrals.projectId, project.id)).run();
     const propertyId = saConn?.propertyId ?? oauthConn?.propertyId ?? null;
     opts.ga4CredentialStore?.deleteConnection(project.name);
     opts.googleConnectionStore?.deleteConnection(project.canonicalDomain, "ga4");
@@ -8622,7 +8849,7 @@ async function ga4Routes(app, opts) {
     if (!connected) {
       return { connected: false, propertyId: null, clientEmail: null, authMethod: null, lastSyncedAt: null };
     }
-    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).orderBy(desc9(gaTrafficSummaries.syncedAt)).limit(1).get();
+    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).orderBy(desc9(gaTrafficSummaries.syncedAt)).limit(1).get();
     return {
       connected: true,
       propertyId: saConn?.propertyId ?? oauthConn?.propertyId ?? null,
@@ -8682,7 +8909,7 @@ async function ga4Routes(app, opts) {
         if (syncTraffic) {
           tx.delete(gaTrafficSnapshots).where(
             and8(
-              eq19(gaTrafficSnapshots.projectId, project.id),
+              eq20(gaTrafficSnapshots.projectId, project.id),
               sql5`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
               sql5`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
             )
@@ -8706,7 +8933,7 @@ async function ga4Routes(app, opts) {
         if (syncAi) {
           tx.delete(gaAiReferrals).where(
             and8(
-              eq19(gaAiReferrals.projectId, project.id),
+              eq20(gaAiReferrals.projectId, project.id),
               sql5`${gaAiReferrals.date} >= ${summary.periodStart}`,
               sql5`${gaAiReferrals.date} <= ${summary.periodEnd}`
             )
@@ -8729,7 +8956,7 @@ async function ga4Routes(app, opts) {
         if (syncSocial) {
           tx.delete(gaSocialReferrals).where(
             and8(
-              eq19(gaSocialReferrals.projectId, project.id),
+              eq20(gaSocialReferrals.projectId, project.id),
               sql5`${gaSocialReferrals.date} >= ${summary.periodStart}`,
               sql5`${gaSocialReferrals.date} <= ${summary.periodEnd}`
             )
@@ -8750,7 +8977,7 @@ async function ga4Routes(app, opts) {
           }
         }
         if (syncSummary) {
-          tx.delete(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).run();
+          tx.delete(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).run();
           tx.insert(gaTrafficSummaries).values({
             id: crypto16.randomUUID(),
             projectId: project.id,
@@ -8764,7 +8991,7 @@ async function ga4Routes(app, opts) {
           }).run();
         }
       });
-      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq19(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq20(runs.id, runId)).run();
       const syncedComponents = only ? [only, ...only !== "social" && only !== "ai" && only !== "traffic" ? [] : []] : void 0;
       gaLog("info", "sync.complete", {
         projectId: project.id,
@@ -8788,7 +9015,7 @@ async function ga4Routes(app, opts) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       gaLog("error", "sync.fetch-failed", { projectId: project.id, runId, error: msg });
-      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq19(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq20(runs.id, runId)).run();
       throw e;
     }
   });
@@ -8799,11 +9026,11 @@ async function ga4Routes(app, opts) {
     const window = parseWindow(request.query.window);
     const cutoff = windowCutoff(window);
     const cutoffDate = cutoff?.slice(0, 10) ?? null;
-    const snapshotConditions = [eq19(gaTrafficSnapshots.projectId, project.id)];
+    const snapshotConditions = [eq20(gaTrafficSnapshots.projectId, project.id)];
     if (cutoffDate) snapshotConditions.push(sql5`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
-    const aiConditions = [eq19(gaAiReferrals.projectId, project.id)];
+    const aiConditions = [eq20(gaAiReferrals.projectId, project.id)];
     if (cutoffDate) aiConditions.push(sql5`${gaAiReferrals.date} >= ${cutoffDate}`);
-    const socialConditions = [eq19(gaSocialReferrals.projectId, project.id)];
+    const socialConditions = [eq20(gaSocialReferrals.projectId, project.id)];
     if (cutoffDate) socialConditions.push(sql5`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const summaryRow = cutoffDate ? app.db.select({
       totalSessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)`,
@@ -8813,14 +9040,14 @@ async function ga4Routes(app, opts) {
       totalSessions: gaTrafficSummaries.totalSessions,
       totalOrganicSessions: gaTrafficSummaries.totalOrganicSessions,
       totalUsers: gaTrafficSummaries.totalUsers
-    }).from(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).get();
+    }).from(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).get();
     const directTotalRow = app.db.select({
       totalDirectSessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`
     }).from(gaTrafficSnapshots).where(and8(...snapshotConditions)).get();
     const summaryMeta = app.db.select({
       periodStart: gaTrafficSummaries.periodStart,
       periodEnd: gaTrafficSummaries.periodEnd
-    }).from(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).get();
+    }).from(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).get();
     const rows = app.db.select({
       landingPage: sql5`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
       sessions: sql5`SUM(${gaTrafficSnapshots.sessions})`,
@@ -8851,7 +9078,7 @@ async function ga4Routes(app, opts) {
     const aiBySession = app.db.select({
       sessions: sql5`COALESCE(SUM(${gaAiReferrals.sessions}), 0)`,
       users: sql5`COALESCE(SUM(${gaAiReferrals.users}), 0)`
-    }).from(gaAiReferrals).where(and8(...aiConditions, eq19(gaAiReferrals.sourceDimension, "session"))).get();
+    }).from(gaAiReferrals).where(and8(...aiConditions, eq20(gaAiReferrals.sourceDimension, "session"))).get();
     const socialReferrals = app.db.select({
       source: gaSocialReferrals.source,
       medium: gaSocialReferrals.medium,
@@ -8863,7 +9090,7 @@ async function ga4Routes(app, opts) {
       sessions: sql5`SUM(${gaSocialReferrals.sessions})`,
       users: sql5`SUM(${gaSocialReferrals.users})`
     }).from(gaSocialReferrals).where(and8(...socialConditions)).get();
-    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq19(gaTrafficSummaries.projectId, project.id)).orderBy(desc9(gaTrafficSummaries.syncedAt)).limit(1).get();
+    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq20(gaTrafficSummaries.projectId, project.id)).orderBy(desc9(gaTrafficSummaries.syncedAt)).limit(1).get();
     const total = summaryRow?.totalSessions ?? 0;
     const totalDirectSessions = directTotalRow?.totalDirectSessions ?? 0;
     return {
@@ -8917,7 +9144,7 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq19(gaAiReferrals.projectId, project.id)];
+    const conditions = [eq20(gaAiReferrals.projectId, project.id)];
     if (cutoffDate) conditions.push(sql5`${gaAiReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaAiReferrals.date,
@@ -8933,7 +9160,7 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq19(gaSocialReferrals.projectId, project.id)];
+    const conditions = [eq20(gaSocialReferrals.projectId, project.id)];
     if (cutoffDate) conditions.push(sql5`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaSocialReferrals.date,
@@ -8956,7 +9183,7 @@ async function ga4Routes(app, opts) {
       return fmt(d);
     };
     const sumSocial = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and8(
-      eq19(gaSocialReferrals.projectId, project.id),
+      eq20(gaSocialReferrals.projectId, project.id),
       sql5`${gaSocialReferrals.date} >= ${from}`,
       sql5`${gaSocialReferrals.date} < ${to}`
     )).get();
@@ -8969,7 +9196,7 @@ async function ga4Routes(app, opts) {
       source: gaSocialReferrals.source,
       sessions: sql5`SUM(${gaSocialReferrals.sessions})`
     }).from(gaSocialReferrals).where(and8(
-      eq19(gaSocialReferrals.projectId, project.id),
+      eq20(gaSocialReferrals.projectId, project.id),
       sql5`${gaSocialReferrals.date} >= ${daysAgo2(7)}`,
       sql5`${gaSocialReferrals.date} < ${fmt(today)}`
     )).groupBy(gaSocialReferrals.source).all();
@@ -8977,7 +9204,7 @@ async function ga4Routes(app, opts) {
       source: gaSocialReferrals.source,
       sessions: sql5`SUM(${gaSocialReferrals.sessions})`
     }).from(gaSocialReferrals).where(and8(
-      eq19(gaSocialReferrals.projectId, project.id),
+      eq20(gaSocialReferrals.projectId, project.id),
       sql5`${gaSocialReferrals.date} >= ${daysAgo2(14)}`,
       sql5`${gaSocialReferrals.date} < ${daysAgo2(7)}`
     )).groupBy(gaSocialReferrals.source).all();
@@ -9018,16 +9245,16 @@ async function ga4Routes(app, opts) {
       return fmt(d);
     };
     const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
-    const sumTotal = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq19(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumOrganic = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq19(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumDirect = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq19(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumTotal = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq20(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq20(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumDirect = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and8(eq20(gaTrafficSnapshots.projectId, project.id), sql5`${gaTrafficSnapshots.date} >= ${from}`, sql5`${gaTrafficSnapshots.date} < ${to}`)).get();
     const sumAi = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and8(
-      eq19(gaAiReferrals.projectId, project.id),
+      eq20(gaAiReferrals.projectId, project.id),
       sql5`${gaAiReferrals.date} >= ${from}`,
       sql5`${gaAiReferrals.date} < ${to}`,
-      eq19(gaAiReferrals.sourceDimension, "session")
+      eq20(gaAiReferrals.sourceDimension, "session")
     )).get();
-    const sumSocial = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and8(eq19(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${from}`, sql5`${gaSocialReferrals.date} < ${to}`)).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql5`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and8(eq20(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${from}`, sql5`${gaSocialReferrals.date} < ${to}`)).get();
     const todayStr = fmt(today);
     const buildTrend = (sum) => {
       const c7 = sum(daysAgo2(7), todayStr)?.sessions ?? 0;
@@ -9037,16 +9264,16 @@ async function ga4Routes(app, opts) {
       return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
     };
     const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql5`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and8(
-      eq19(gaAiReferrals.projectId, project.id),
+      eq20(gaAiReferrals.projectId, project.id),
       sql5`${gaAiReferrals.date} >= ${daysAgo2(7)}`,
       sql5`${gaAiReferrals.date} < ${todayStr}`,
-      eq19(gaAiReferrals.sourceDimension, "session")
+      eq20(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
     const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql5`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and8(
-      eq19(gaAiReferrals.projectId, project.id),
+      eq20(gaAiReferrals.projectId, project.id),
       sql5`${gaAiReferrals.date} >= ${daysAgo2(14)}`,
       sql5`${gaAiReferrals.date} < ${daysAgo2(7)}`,
-      eq19(gaAiReferrals.sourceDimension, "session")
+      eq20(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
     const findBiggestMover = (current, prev) => {
       const prevMap = new Map(prev.map((r) => [r.source, r.sessions]));
@@ -9062,8 +9289,8 @@ async function ga4Routes(app, opts) {
       }
       return mover;
     };
-    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql5`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and8(eq19(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql5`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
-    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql5`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and8(eq19(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql5`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql5`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and8(eq20(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql5`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql5`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and8(eq20(gaSocialReferrals.projectId, project.id), sql5`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql5`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
     return {
       total: buildTrend(sumTotal),
       organic: buildTrend(sumOrganic),
@@ -9078,7 +9305,7 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq19(gaTrafficSnapshots.projectId, project.id)];
+    const conditions = [eq20(gaTrafficSnapshots.projectId, project.id)];
     if (cutoffDate) conditions.push(sql5`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaTrafficSnapshots.date,
@@ -9101,7 +9328,7 @@ async function ga4Routes(app, opts) {
       sessions: sql5`SUM(${gaTrafficSnapshots.sessions})`,
       organicSessions: sql5`SUM(${gaTrafficSnapshots.organicSessions})`,
       users: sql5`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(eq19(gaTrafficSnapshots.projectId, project.id)).groupBy(sql5`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql5`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
+    }).from(gaTrafficSnapshots).where(eq20(gaTrafficSnapshots.projectId, project.id)).groupBy(sql5`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql5`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
     return {
       pages: trafficPages.map((r) => ({
         landingPage: r.landingPage,
@@ -10738,7 +10965,7 @@ async function wordpressRoutes(app, opts) {
 
 // ../api-routes/src/backlinks.ts
 import crypto18 from "crypto";
-import { and as and9, asc as asc2, desc as desc10, eq as eq20, sql as sql6 } from "drizzle-orm";
+import { and as and9, asc as asc2, desc as desc10, eq as eq21, sql as sql6 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
 import os2 from "os";
@@ -11190,7 +11417,7 @@ function mapRunRow(row) {
   };
 }
 function latestSummaryForProject(db, projectId, release) {
-  const condition = release ? and9(eq20(backlinkSummaries.projectId, projectId), eq20(backlinkSummaries.release, release)) : eq20(backlinkSummaries.projectId, projectId);
+  const condition = release ? and9(eq21(backlinkSummaries.projectId, projectId), eq21(backlinkSummaries.release, release)) : eq21(backlinkSummaries.projectId, projectId);
   return db.select().from(backlinkSummaries).where(condition).orderBy(desc10(backlinkSummaries.queriedAt)).limit(1).get();
 }
 async function backlinksRoutes(app, opts) {
@@ -11234,7 +11461,7 @@ async function backlinksRoutes(app, opts) {
         "@duckdb/node-api is not installed. Run `canonry backlinks install` to enable the backlinks feature."
       );
     }
-    const existing = app.db.select().from(ccReleaseSyncs).where(eq20(ccReleaseSyncs.release, release)).get();
+    const existing = app.db.select().from(ccReleaseSyncs).where(eq21(ccReleaseSyncs.release, release)).get();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     if (existing) {
       if (NON_TERMINAL_SYNC_STATUSES.has(existing.status)) {
@@ -11245,9 +11472,9 @@ async function backlinksRoutes(app, opts) {
         phaseDetail: null,
         error: null,
         updatedAt: now
-      }).where(eq20(ccReleaseSyncs.id, existing.id)).run();
+      }).where(eq21(ccReleaseSyncs.id, existing.id)).run();
       opts.onReleaseSyncRequested(existing.id, release);
-      const refreshed = app.db.select().from(ccReleaseSyncs).where(eq20(ccReleaseSyncs.id, existing.id)).get();
+      const refreshed = app.db.select().from(ccReleaseSyncs).where(eq21(ccReleaseSyncs.id, existing.id)).get();
       return reply.status(200).send(mapSyncRow(refreshed));
     }
     const id = crypto18.randomUUID();
@@ -11259,7 +11486,7 @@ async function backlinksRoutes(app, opts) {
       updatedAt: now
     }).run();
     opts.onReleaseSyncRequested(id, release);
-    const inserted = app.db.select().from(ccReleaseSyncs).where(eq20(ccReleaseSyncs.id, id)).get();
+    const inserted = app.db.select().from(ccReleaseSyncs).where(eq21(ccReleaseSyncs.id, id)).get();
     return reply.status(201).send(mapSyncRow(inserted));
   });
   app.get("/backlinks/syncs/latest", async (_request, reply) => {
@@ -11317,7 +11544,7 @@ async function backlinksRoutes(app, opts) {
       createdAt: now
     }).run();
     opts.onBacklinkExtractRequested(runId, project.id, release);
-    const run = app.db.select().from(runs).where(eq20(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq21(runs.id, runId)).get();
     return reply.status(201).send(mapRunRow(run));
   });
   app.get(
@@ -11339,8 +11566,8 @@ async function backlinksRoutes(app, opts) {
     const limit = Math.min(Math.max(parseInt(request.query.limit ?? "50", 10) || 50, 1), 500);
     const offset = Math.max(parseInt(request.query.offset ?? "0", 10) || 0, 0);
     const domainCondition = and9(
-      eq20(backlinkDomains.projectId, project.id),
-      eq20(backlinkDomains.release, targetRelease)
+      eq21(backlinkDomains.projectId, project.id),
+      eq21(backlinkDomains.release, targetRelease)
     );
     const totalRow = app.db.select({ count: sql6`count(*)` }).from(backlinkDomains).where(domainCondition).get();
     const rows = app.db.select({
@@ -11358,7 +11585,7 @@ async function backlinksRoutes(app, opts) {
     "/projects/:name/backlinks/history",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const rows = app.db.select().from(backlinkSummaries).where(eq20(backlinkSummaries.projectId, project.id)).orderBy(asc2(backlinkSummaries.queriedAt)).all();
+      const rows = app.db.select().from(backlinkSummaries).where(eq21(backlinkSummaries.projectId, project.id)).orderBy(asc2(backlinkSummaries.queriedAt)).all();
       const response = rows.map((r) => ({
         release: r.release,
         totalLinkingDomains: r.totalLinkingDomains,
@@ -11371,6 +11598,152 @@ async function backlinksRoutes(app, opts) {
   );
 }
 
+// ../api-routes/src/doctor/checks/bing-auth.ts
+var BING_AUTH_CHECKS = [
+  {
+    id: "bing.auth.connection",
+    category: CheckCategories.auth,
+    scope: CheckScopes.project,
+    title: "Bing WMT connection",
+    run: async (ctx) => {
+      if (!ctx.project) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "bing.auth.no-project",
+          summary: "Project context required.",
+          remediation: null
+        };
+      }
+      const store = ctx.bingConnectionStore;
+      if (!store) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "bing.auth.store-unavailable",
+          summary: "Bing connection store is not configured for this deployment.",
+          remediation: null
+        };
+      }
+      const conn = store.getConnection(ctx.project.canonicalDomain);
+      if (!conn) {
+        return {
+          status: CheckStatuses.fail,
+          code: "bing.auth.no-connection",
+          summary: `No Bing connection for ${ctx.project.canonicalDomain}.`,
+          remediation: `Run \`canonry bing connect ${ctx.project.name} --api-key <key>\` to authorize.`
+        };
+      }
+      if (!conn.apiKey) {
+        return {
+          status: CheckStatuses.fail,
+          code: "bing.auth.no-api-key",
+          summary: "Bing connection exists but has no API key stored.",
+          remediation: `Run \`canonry bing connect ${ctx.project.name} --api-key <key>\` to re-authorize.`
+        };
+      }
+      try {
+        await getSites(conn.apiKey);
+        return {
+          status: CheckStatuses.ok,
+          code: "bing.auth.connected",
+          summary: "Bing API key is valid and can list sites.",
+          remediation: null
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          status: CheckStatuses.fail,
+          code: "bing.auth.verification-failed",
+          summary: "Bing API key verification failed.",
+          remediation: "Verify your Bing API key is correct and active in Bing Webmaster Tools.",
+          details: { error: message }
+        };
+      }
+    }
+  },
+  {
+    id: "bing.auth.site-access",
+    category: CheckCategories.auth,
+    scope: CheckScopes.project,
+    title: "Bing site access",
+    run: async (ctx) => {
+      if (!ctx.project) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "bing.auth.no-project",
+          summary: "Project context required.",
+          remediation: null
+        };
+      }
+      const store = ctx.bingConnectionStore;
+      if (!store) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "bing.auth.store-unavailable",
+          summary: "Bing connection store is not configured.",
+          remediation: null
+        };
+      }
+      const conn = store.getConnection(ctx.project.canonicalDomain);
+      if (!conn || !conn.apiKey) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "bing.auth.no-connection",
+          summary: "Skipped \u2014 no Bing connection (see bing.auth.connection).",
+          remediation: null
+        };
+      }
+      if (!conn.siteUrl) {
+        return {
+          status: CheckStatuses.fail,
+          code: "bing.auth.no-site-selected",
+          summary: "Bing connection has no site URL selected.",
+          remediation: `Run \`canonry bing sites ${ctx.project.name}\` to see available sites, then \`canonry bing set-site ${ctx.project.name} <url>\`.`
+        };
+      }
+      try {
+        const sites = await getSites(conn.apiKey);
+        const match = sites.find((s) => s.Url === conn.siteUrl);
+        if (!match) {
+          return {
+            status: CheckStatuses.fail,
+            code: "bing.auth.site-not-found",
+            summary: `Configured site "${conn.siteUrl}" is not in the authorized account's site list.`,
+            remediation: `Add and verify "${conn.siteUrl}" in Bing Webmaster Tools, or pick an existing site using \`canonry bing set-site ${ctx.project.name}\`.`,
+            details: {
+              configuredSite: conn.siteUrl,
+              availableSites: sites.map((s) => s.Url)
+            }
+          };
+        }
+        if (!match.Verified) {
+          return {
+            status: CheckStatuses.fail,
+            code: "bing.auth.site-not-verified",
+            summary: `Site "${conn.siteUrl}" is registered but not verified in Bing.`,
+            remediation: "Complete site verification in Bing Webmaster Tools (DNS, HTML file, or Meta tag).",
+            details: { siteUrl: conn.siteUrl }
+          };
+        }
+        return {
+          status: CheckStatuses.ok,
+          code: "bing.auth.site-verified",
+          summary: `Site "${conn.siteUrl}" is verified and accessible.`,
+          remediation: null
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          status: CheckStatuses.fail,
+          code: "bing.auth.site-check-failed",
+          summary: "Failed to verify Bing site access.",
+          remediation: "Check Bing Webmaster Tools availability.",
+          details: { error: message }
+        };
+      }
+    }
+  }
+];
+
 // ../api-routes/src/doctor/checks/ga-auth.ts
 async function checkServiceAccount(conn) {
   if (!conn.propertyId) {
@@ -11848,6 +12221,7 @@ var PROVIDERS_CHECKS = [providersConfiguredCheck];
 // ../api-routes/src/doctor/registry.ts
 var ALL_CHECKS = [
   ...GOOGLE_AUTH_CHECKS,
+  ...BING_AUTH_CHECKS,
   ...GA_AUTH_CHECKS,
   ...PROVIDERS_CHECKS
 ];
@@ -11932,6 +12306,7 @@ async function doctorRoutes(app, opts) {
       db: app.db,
       project: null,
       googleConnectionStore: opts.googleConnectionStore,
+      bingConnectionStore: opts.bingConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       redirectUri,
@@ -11951,6 +12326,7 @@ async function doctorRoutes(app, opts) {
         displayName: project.displayName
       },
       googleConnectionStore: opts.googleConnectionStore,
+      bingConnectionStore: opts.bingConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       redirectUri,
@@ -12020,6 +12396,7 @@ async function apiRoutes(app, opts) {
     await api.register(historyRoutes);
     await api.register(analyticsRoutes);
     await api.register(intelligenceRoutes);
+    await api.register(citationRoutes);
     await api.register(compositeRoutes);
     await api.register(contentRoutes);
     await api.register(settingsRoutes, {
@@ -12082,6 +12459,7 @@ async function apiRoutes(app, opts) {
     });
     await api.register(doctorRoutes, {
       googleConnectionStore: opts.googleConnectionStore,
+      bingConnectionStore: opts.bingConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       publicUrl: opts.publicUrl,
@@ -14551,7 +14929,7 @@ import crypto19 from "crypto";
 import fs7 from "fs";
 import path9 from "path";
 import os4 from "os";
-import { and as and10, eq as eq21, inArray as inArray4, sql as sql7 } from "drizzle-orm";
+import { and as and10, eq as eq22, inArray as inArray5, sql as sql7 } from "drizzle-orm";
 
 // src/citation-utils.ts
 function domainMatches(domain, canonicalDomain) {
@@ -14803,11 +15181,11 @@ var JobRunner = class {
     this.registry = registry;
   }
   recoverStaleRuns() {
-    const stale = this.db.select({ id: runs.id, status: runs.status }).from(runs).where(inArray4(runs.status, ["running", "queued"])).all();
+    const stale = this.db.select({ id: runs.id, status: runs.status }).from(runs).where(inArray5(runs.status, ["running", "queued"])).all();
     if (stale.length === 0) return;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     for (const run of stale) {
-      this.db.update(runs).set({ status: "failed", finishedAt: now, error: "Server restarted while run was in progress" }).where(eq21(runs.id, run.id)).run();
+      this.db.update(runs).set({ status: "failed", finishedAt: now, error: "Server restarted while run was in progress" }).where(eq22(runs.id, run.id)).run();
       log.warn("run.recovered-stale", { runId: run.id, previousStatus: run.status });
     }
   }
@@ -14835,10 +15213,10 @@ var JobRunner = class {
         throw new Error(`Run ${runId} is not executable from status '${existingRun.status}'`);
       }
       if (existingRun.status === "queued") {
-        this.db.update(runs).set({ status: "running", startedAt: now }).where(and10(eq21(runs.id, runId), eq21(runs.status, "queued"))).run();
+        this.db.update(runs).set({ status: "running", startedAt: now }).where(and10(eq22(runs.id, runId), eq22(runs.status, "queued"))).run();
       }
       this.throwIfRunCancelled(runId);
-      const project = this.db.select().from(projects).where(eq21(projects.id, projectId)).get();
+      const project = this.db.select().from(projects).where(eq22(projects.id, projectId)).get();
       if (!project) {
         throw new Error(`Project ${projectId} not found`);
       }
@@ -14858,8 +15236,8 @@ var JobRunner = class {
         throw new Error("No providers configured. Add at least one provider API key.");
       }
       log.info("run.dispatch", { runId, providerCount: activeProviders.length, providers: activeProviders.map((p) => p.adapter.name) });
-      projectKeywords = this.db.select().from(keywords).where(eq21(keywords.projectId, projectId)).all();
-      const projectCompetitors = this.db.select().from(competitors).where(eq21(competitors.projectId, projectId)).all();
+      projectKeywords = this.db.select().from(keywords).where(eq22(keywords.projectId, projectId)).all();
+      const projectCompetitors = this.db.select().from(competitors).where(eq22(competitors.projectId, projectId)).all();
       const competitorDomains = projectCompetitors.map((c) => c.domain);
       const allDomains = effectiveDomains({
         canonicalDomain: project.canonicalDomain,
@@ -14875,7 +15253,7 @@ var JobRunner = class {
       const todayPeriod = getCurrentUsageDay();
       for (const p of activeProviders) {
         const providerScope = `${projectId}:${p.adapter.name}`;
-        const providerUsage = this.db.select().from(usageCounters).where(eq21(usageCounters.scope, providerScope)).all().filter((r) => r.period === todayPeriod && r.metric === "queries").reduce((sum, r) => sum + r.count, 0);
+        const providerUsage = this.db.select().from(usageCounters).where(eq22(usageCounters.scope, providerScope)).all().filter((r) => r.period === todayPeriod && r.metric === "queries").reduce((sum, r) => sum + r.count, 0);
         const limit = p.config.quotaPolicy.maxRequestsPerDay;
         if (providerUsage + queriesPerProvider > limit) {
           throw new Error(
@@ -15016,12 +15394,12 @@ var JobRunner = class {
       const someFailed = providerErrors.size > 0;
       if (allFailed) {
         const errorDetail = serializeRunError(buildRunErrorFromMessages(providerErrors));
-        this.db.update(runs).set({ status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), error: errorDetail }).where(eq21(runs.id, runId)).run();
+        this.db.update(runs).set({ status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), error: errorDetail }).where(eq22(runs.id, runId)).run();
       } else if (someFailed) {
         const errorDetail = serializeRunError(buildRunErrorFromMessages(providerErrors));
-        this.db.update(runs).set({ status: "partial", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), error: errorDetail }).where(eq21(runs.id, runId)).run();
+        this.db.update(runs).set({ status: "partial", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), error: errorDetail }).where(eq22(runs.id, runId)).run();
       } else {
-        this.db.update(runs).set({ status: "completed", finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq21(runs.id, runId)).run();
+        this.db.update(runs).set({ status: "completed", finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(runs.id, runId)).run();
       }
       this.flushProviderUsage(projectId, providerDispatchCounts);
       const finalStatus = allFailed ? "failed" : someFailed ? "partial" : "completed";
@@ -15056,7 +15434,7 @@ var JobRunner = class {
         status: "failed",
         finishedAt: (/* @__PURE__ */ new Date()).toISOString(),
         error: errorMessage
-      }).where(eq21(runs.id, runId)).run();
+      }).where(eq22(runs.id, runId)).run();
       this.flushProviderUsage(projectId, providerDispatchCounts);
       trackEvent("run.completed", {
         status: "failed",
@@ -15099,7 +15477,7 @@ var JobRunner = class {
       status: runs.status,
       finishedAt: runs.finishedAt,
       error: runs.error
-    }).from(runs).where(eq21(runs.id, runId)).get();
+    }).from(runs).where(eq22(runs.id, runId)).get();
   }
   isRunCancelled(runId) {
     return this.getRunState(runId)?.status === "cancelled";
@@ -15115,7 +15493,7 @@ var JobRunner = class {
       this.db.update(runs).set({
         finishedAt: (/* @__PURE__ */ new Date()).toISOString(),
         error: currentRun.error ?? "Cancelled by user"
-      }).where(eq21(runs.id, runId)).run();
+      }).where(eq22(runs.id, runId)).run();
     }
     trackEvent("run.completed", {
       status: "cancelled",
@@ -15138,7 +15516,7 @@ function getCurrentUsageDay() {
 
 // src/gsc-sync.ts
 import crypto20 from "crypto";
-import { eq as eq22, and as and11, sql as sql8 } from "drizzle-orm";
+import { eq as eq23, and as and11, sql as sql8 } from "drizzle-orm";
 var log2 = createLogger("GscSync");
 function formatDate2(d) {
   return d.toISOString().split("T")[0];
@@ -15150,13 +15528,13 @@ function daysAgo(n) {
 }
 async function executeGscSync(db, runId, projectId, opts) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  db.update(runs).set({ status: "running", startedAt: now }).where(eq22(runs.id, runId)).run();
+  db.update(runs).set({ status: "running", startedAt: now }).where(eq23(runs.id, runId)).run();
   try {
     const { clientId: googleClientId, clientSecret: googleClientSecret } = getGoogleAuthConfig(opts.config);
     if (!googleClientId || !googleClientSecret) {
       throw new Error("Google OAuth is not configured in the local Canonry config");
     }
-    const project = db.select().from(projects).where(eq22(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq23(projects.id, projectId)).get();
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
@@ -15191,7 +15569,7 @@ async function executeGscSync(db, runId, projectId, opts) {
     log2.info("fetch.complete", { runId, projectId, rowCount: rows.length });
     db.delete(gscSearchData).where(
       and11(
-        eq22(gscSearchData.projectId, projectId),
+        eq23(gscSearchData.projectId, projectId),
         sql8`${gscSearchData.date} >= ${startDate}`,
         sql8`${gscSearchData.date} <= ${endDate}`
       )
@@ -15258,7 +15636,7 @@ async function executeGscSync(db, runId, projectId, opts) {
         log2.error("inspect.url-failed", { runId, projectId, url: pageUrl, error: err instanceof Error ? err.message : String(err) });
       }
     }
-    const allInspections = db.select().from(gscUrlInspections).where(eq22(gscUrlInspections.projectId, projectId)).all();
+    const allInspections = db.select().from(gscUrlInspections).where(eq23(gscUrlInspections.projectId, projectId)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
       const existing = latestByUrl.get(row.url);
@@ -15279,7 +15657,7 @@ async function executeGscSync(db, runId, projectId, opts) {
       }
     }
     const snapshotDate = formatDate2(/* @__PURE__ */ new Date());
-    db.delete(gscCoverageSnapshots).where(and11(eq22(gscCoverageSnapshots.projectId, projectId), eq22(gscCoverageSnapshots.date, snapshotDate))).run();
+    db.delete(gscCoverageSnapshots).where(and11(eq23(gscCoverageSnapshots.projectId, projectId), eq23(gscCoverageSnapshots.date, snapshotDate))).run();
     db.insert(gscCoverageSnapshots).values({
       id: crypto20.randomUUID(),
       projectId,
@@ -15290,11 +15668,11 @@ async function executeGscSync(db, runId, projectId, opts) {
       reasonBreakdown: JSON.stringify(reasonCounts),
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     }).run();
-    db.update(runs).set({ status: "completed", finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(runs.id, runId)).run();
+    db.update(runs).set({ status: "completed", finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq23(runs.id, runId)).run();
     log2.info("sync.completed", { runId, projectId, searchDataRows: rows.length, urlInspections: topPages.length, indexed: snapIndexed, notIndexed: snapNotIndexed });
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
-    db.update(runs).set({ status: "failed", error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(runs.id, runId)).run();
+    db.update(runs).set({ status: "failed", error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq23(runs.id, runId)).run();
     log2.error("sync.failed", { runId, projectId, error: errorMsg });
     throw err;
   }
@@ -15302,7 +15680,7 @@ async function executeGscSync(db, runId, projectId, opts) {
 
 // src/gsc-inspect-sitemap.ts
 import crypto21 from "crypto";
-import { eq as eq23, and as and12 } from "drizzle-orm";
+import { eq as eq24, and as and12 } from "drizzle-orm";
 
 // src/sitemap-parser.ts
 var log3 = createLogger("SitemapParser");
@@ -15423,13 +15801,13 @@ async function parseSitemapRecursive(url, urls, visited, depth, isChild) {
 var log4 = createLogger("InspectSitemap");
 async function executeInspectSitemap(db, runId, projectId, opts) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  db.update(runs).set({ status: "running", startedAt: now }).where(eq23(runs.id, runId)).run();
+  db.update(runs).set({ status: "running", startedAt: now }).where(eq24(runs.id, runId)).run();
   try {
     const { clientId: googleClientId, clientSecret: googleClientSecret } = getGoogleAuthConfig(opts.config);
     if (!googleClientId || !googleClientSecret) {
       throw new Error("Google OAuth is not configured in the local Canonry config");
     }
-    const project = db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
@@ -15497,7 +15875,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
         await new Promise((r) => setTimeout(r, 1e3));
       }
     }
-    const allInspections = db.select().from(gscUrlInspections).where(eq23(gscUrlInspections.projectId, projectId)).all();
+    const allInspections = db.select().from(gscUrlInspections).where(eq24(gscUrlInspections.projectId, projectId)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
       const existing = latestByUrl.get(row.url);
@@ -15518,7 +15896,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
       }
     }
     const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-    db.delete(gscCoverageSnapshots).where(and12(eq23(gscCoverageSnapshots.projectId, projectId), eq23(gscCoverageSnapshots.date, snapshotDate))).run();
+    db.delete(gscCoverageSnapshots).where(and12(eq24(gscCoverageSnapshots.projectId, projectId), eq24(gscCoverageSnapshots.date, snapshotDate))).run();
     db.insert(gscCoverageSnapshots).values({
       id: crypto21.randomUUID(),
       projectId,
@@ -15530,11 +15908,11 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     }).run();
     const status = errors > 0 && inspected > 0 ? "partial" : errors === urls.length ? "failed" : "completed";
-    db.update(runs).set({ status, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq23(runs.id, runId)).run();
+    db.update(runs).set({ status, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq24(runs.id, runId)).run();
     log4.info("inspect.completed", { runId, projectId, inspected, errors, total: urls.length, indexed: snapIndexed, notIndexed: snapNotIndexed });
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
-    db.update(runs).set({ status: "failed", error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq23(runs.id, runId)).run();
+    db.update(runs).set({ status: "failed", error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq24(runs.id, runId)).run();
     log4.error("inspect.failed", { runId, projectId, error: errorMsg });
     throw err;
   }
@@ -15542,7 +15920,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
 
 // src/bing-inspect-sitemap.ts
 import crypto22 from "crypto";
-import { eq as eq24, desc as desc11 } from "drizzle-orm";
+import { eq as eq25, desc as desc11 } from "drizzle-orm";
 var log5 = createLogger("BingInspectSitemap");
 function parseBingDate2(value) {
   if (!value) return null;
@@ -15560,9 +15938,9 @@ function isBlockingIssueType2(issueType) {
 }
 async function executeBingInspectSitemap(db, runId, projectId, opts) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq24(runs.id, runId)).run();
+  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq25(runs.id, runId)).run();
   try {
-    const project = db.select().from(projects).where(eq24(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq25(projects.id, projectId)).get();
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
@@ -15580,7 +15958,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
     if (sitemapUrls.length === 0) {
       throw new Error("No URLs found in sitemap");
     }
-    const trackedRows = db.select({ url: bingUrlInspections.url }).from(bingUrlInspections).where(eq24(bingUrlInspections.projectId, projectId)).all();
+    const trackedRows = db.select({ url: bingUrlInspections.url }).from(bingUrlInspections).where(eq25(bingUrlInspections.projectId, projectId)).all();
     const trackedUrls = new Set(trackedRows.map((r) => r.url));
     const discovered = sitemapUrls.filter((u) => !trackedUrls.has(u));
     log5.info("sitemap.diff", {
@@ -15663,7 +16041,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
         await new Promise((r) => setTimeout(r, 1e3));
       }
     }
-    const allInspections = db.select().from(bingUrlInspections).where(eq24(bingUrlInspections.projectId, projectId)).orderBy(desc11(bingUrlInspections.inspectedAt)).all();
+    const allInspections = db.select().from(bingUrlInspections).where(eq25(bingUrlInspections.projectId, projectId)).orderBy(desc11(bingUrlInspections.inspectedAt)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     const definitiveByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
@@ -15706,7 +16084,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
       }
     }).run();
     const status = errors === sitemapUrls.length ? RunStatuses.failed : errors > 0 ? RunStatuses.partial : RunStatuses.completed;
-    db.update(runs).set({ status, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq24(runs.id, runId)).run();
+    db.update(runs).set({ status, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq25(runs.id, runId)).run();
     log5.info("inspect.completed", {
       runId,
       projectId,
@@ -15720,7 +16098,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
     });
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
-    db.update(runs).set({ status: RunStatuses.failed, error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq24(runs.id, runId)).run();
+    db.update(runs).set({ status: RunStatuses.failed, error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq25(runs.id, runId)).run();
     log5.error("inspect.failed", { runId, projectId, error: errorMsg });
     throw err;
   }
@@ -15729,7 +16107,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
 // src/commoncrawl-sync.ts
 import crypto23 from "crypto";
 import path10 from "path";
-import { and as and13, eq as eq25, sql as sql9 } from "drizzle-orm";
+import { and as and13, eq as eq26, sql as sql9 } from "drizzle-orm";
 var log6 = createLogger("CommonCrawlSync");
 var INSERT_CHUNK_SIZE = 1e4;
 function defaultDeps() {
@@ -15755,7 +16133,7 @@ async function executeReleaseSync(db, syncId, opts) {
       phaseDetail: "downloading vertices + edges",
       updatedAt: downloadStartedAt,
       error: null
-    }).where(eq25(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq26(ccReleaseSyncs.id, syncId)).run();
     const paths = ccReleasePaths(release);
     const releaseCacheDir = path10.join(deps.cacheDir, release);
     const vertexPath = path10.join(releaseCacheDir, paths.vertexFilename);
@@ -15778,7 +16156,7 @@ async function executeReleaseSync(db, syncId, opts) {
       vertexSha256: vertex.sha256,
       edgesSha256: edges.sha256,
       updatedAt: downloadFinishedAt
-    }).where(eq25(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq26(ccReleaseSyncs.id, syncId)).run();
     const allProjects = db.select().from(projects).all();
     const targets = Array.from(new Set(allProjects.map((p) => p.canonicalDomain)));
     let rows = [];
@@ -15794,8 +16172,8 @@ async function executeReleaseSync(db, syncId, opts) {
     }
     const queriedAt = deps.now().toISOString();
     db.transaction((tx) => {
-      tx.delete(backlinkDomains).where(eq25(backlinkDomains.releaseSyncId, syncId)).run();
-      tx.delete(backlinkSummaries).where(eq25(backlinkSummaries.releaseSyncId, syncId)).run();
+      tx.delete(backlinkDomains).where(eq26(backlinkDomains.releaseSyncId, syncId)).run();
+      tx.delete(backlinkSummaries).where(eq26(backlinkSummaries.releaseSyncId, syncId)).run();
       const expanded = [];
       for (const r of rows) {
         const projectIds = projectsByDomain.get(r.targetDomain);
@@ -15854,7 +16232,7 @@ async function executeReleaseSync(db, syncId, opts) {
       domainsDiscovered: rows.length,
       updatedAt: finishedAt,
       error: null
-    }).where(eq25(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq26(ccReleaseSyncs.id, syncId)).run();
     log6.info("sync.completed", {
       syncId,
       release,
@@ -15884,7 +16262,7 @@ async function executeReleaseSync(db, syncId, opts) {
       error: errorMsg,
       phaseDetail: null,
       updatedAt: finishedAt
-    }).where(eq25(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq26(ccReleaseSyncs.id, syncId)).run();
     log6.error("sync.failed", { syncId, release, error: errorMsg });
     throw err;
   }
@@ -15920,7 +16298,7 @@ function computeSummary(rows) {
 // src/backlink-extract.ts
 import crypto24 from "crypto";
 import fs8 from "fs";
-import { and as and14, desc as desc12, eq as eq26 } from "drizzle-orm";
+import { and as and14, desc as desc12, eq as eq27 } from "drizzle-orm";
 var log7 = createLogger("BacklinkExtract");
 function defaultDeps2() {
   return {
@@ -15932,13 +16310,13 @@ function defaultDeps2() {
 async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
   const deps = { ...defaultDeps2(), ...opts.deps };
   const startedAt = deps.now().toISOString();
-  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq26(runs.id, runId)).run();
+  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq27(runs.id, runId)).run();
   try {
-    const project = db.select().from(projects).where(eq26(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
-    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq26(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq26(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc12(ccReleaseSyncs.createdAt)).limit(1).get();
+    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq27(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq27(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc12(ccReleaseSyncs.createdAt)).limit(1).get();
     if (!sync) {
       throw new Error("No ready release sync available \u2014 run `canonry backlinks sync` first");
     }
@@ -15966,7 +16344,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     const targetDomain = project.canonicalDomain;
     db.transaction((tx) => {
       tx.delete(backlinkDomains).where(
-        and14(eq26(backlinkDomains.projectId, projectId), eq26(backlinkDomains.release, release))
+        and14(eq27(backlinkDomains.projectId, projectId), eq27(backlinkDomains.release, release))
       ).run();
       if (rows.length > 0) {
         const values = rows.map((r) => ({
@@ -16006,7 +16384,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       }).run();
     });
     const finishedAt = deps.now().toISOString();
-    db.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq26(runs.id, runId)).run();
+    db.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq27(runs.id, runId)).run();
     log7.info("extract.completed", { runId, projectId, release, rows: rows.length });
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
@@ -16015,7 +16393,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       status: RunStatuses.failed,
       error: errorMsg,
       finishedAt
-    }).where(eq26(runs.id, runId)).run();
+    }).where(eq27(runs.id, runId)).run();
     log7.error("extract.failed", { runId, projectId, error: errorMsg });
     throw err;
   }
@@ -16088,7 +16466,7 @@ var ProviderRegistry = class {
 
 // src/scheduler.ts
 import cron from "node-cron";
-import { eq as eq27 } from "drizzle-orm";
+import { eq as eq28 } from "drizzle-orm";
 var log8 = createLogger("Scheduler");
 var Scheduler = class {
   db;
@@ -16100,7 +16478,7 @@ var Scheduler = class {
   }
   /** Load all enabled schedules from DB and register cron jobs. */
   start() {
-    const allSchedules = this.db.select().from(schedules).where(eq27(schedules.enabled, 1)).all();
+    const allSchedules = this.db.select().from(schedules).where(eq28(schedules.enabled, 1)).all();
     for (const schedule of allSchedules) {
       const missedRunAt = schedule.nextRunAt;
       this.registerCronTask(schedule);
@@ -16125,7 +16503,7 @@ var Scheduler = class {
       this.stopTask(projectId, existing, "Stopped");
       this.tasks.delete(projectId);
     }
-    const schedule = this.db.select().from(schedules).where(eq27(schedules.projectId, projectId)).get();
+    const schedule = this.db.select().from(schedules).where(eq28(schedules.projectId, projectId)).get();
     if (schedule && schedule.enabled === 1) {
       this.registerCronTask(schedule);
     }
@@ -16158,14 +16536,14 @@ var Scheduler = class {
     this.db.update(schedules).set({
       nextRunAt: task.getNextRun()?.toISOString() ?? null,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq27(schedules.id, scheduleId)).run();
+    }).where(eq28(schedules.id, scheduleId)).run();
     const label = schedule.preset ?? cronExpr;
     log8.info("cron.registered", { projectId, schedule: label, timezone });
   }
   triggerRun(scheduleId, projectId) {
     try {
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const currentSchedule = this.db.select().from(schedules).where(eq27(schedules.id, scheduleId)).get();
+      const currentSchedule = this.db.select().from(schedules).where(eq28(schedules.id, scheduleId)).get();
       if (!currentSchedule || currentSchedule.enabled !== 1) {
         log8.warn("schedule.stale", { scheduleId, projectId, msg: "schedule no longer exists or is disabled" });
         this.remove(projectId);
@@ -16173,7 +16551,7 @@ var Scheduler = class {
       }
       const task = this.tasks.get(projectId);
       const nextRunAt = task?.getNextRun()?.toISOString() ?? null;
-      const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
+      const project = this.db.select().from(projects).where(eq28(projects.id, projectId)).get();
       if (!project) {
         log8.error("project.not-found", { projectId, msg: "skipping scheduled run" });
         this.remove(projectId);
@@ -16202,7 +16580,7 @@ var Scheduler = class {
         this.db.update(schedules).set({
           nextRunAt,
           updatedAt: now
-        }).where(eq27(schedules.id, currentSchedule.id)).run();
+        }).where(eq28(schedules.id, currentSchedule.id)).run();
         return;
       }
       const runId = queueResult.runId;
@@ -16210,7 +16588,7 @@ var Scheduler = class {
         lastRunAt: now,
         nextRunAt,
         updatedAt: now
-      }).where(eq27(schedules.id, currentSchedule.id)).run();
+      }).where(eq28(schedules.id, currentSchedule.id)).run();
       const scheduleProviders = parseJsonColumn(currentSchedule.providers, []);
       const providers = scheduleProviders.length > 0 ? scheduleProviders : void 0;
       log8.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
@@ -16222,7 +16600,7 @@ var Scheduler = class {
 };
 
 // src/notifier.ts
-import { eq as eq28, desc as desc13, and as and15, or as or3 } from "drizzle-orm";
+import { eq as eq29, desc as desc13, and as and15, or as or3 } from "drizzle-orm";
 import crypto25 from "crypto";
 var log9 = createLogger("Notifier");
 var Notifier = class {
@@ -16235,18 +16613,18 @@ var Notifier = class {
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId) {
     log9.info("run.completed", { runId, projectId });
-    const notifs = this.db.select().from(notifications).where(eq28(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    const notifs = this.db.select().from(notifications).where(eq29(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) {
       log9.info("notifications.none-enabled", { projectId });
       return;
     }
     log9.info("notifications.found", { projectId, count: notifs.length });
-    const run = this.db.select().from(runs).where(eq28(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq29(runs.id, runId)).get();
     if (!run) {
       log9.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
-    const project = this.db.select().from(projects).where(eq28(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq29(projects.id, projectId)).get();
     if (!project) {
       log9.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
@@ -16293,11 +16671,11 @@ var Notifier = class {
     if (criticalInsights.length > 0) insightEvents.push("insight.critical");
     if (highInsights.length > 0) insightEvents.push("insight.high");
     if (insightEvents.length === 0) return;
-    const notifs = this.db.select().from(notifications).where(eq28(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    const notifs = this.db.select().from(notifications).where(eq29(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) return;
-    const run = this.db.select().from(runs).where(eq28(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq29(runs.id, runId)).get();
     if (!run) return;
-    const project = this.db.select().from(projects).where(eq28(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq29(projects.id, projectId)).get();
     if (!project) return;
     for (const notif of notifs) {
       const config = parseJsonColumn(notif.config, { url: "", events: [] });
@@ -16329,8 +16707,8 @@ var Notifier = class {
   computeTransitions(runId, projectId) {
     const recentRuns = this.db.select().from(runs).where(
       and15(
-        eq28(runs.projectId, projectId),
-        or3(eq28(runs.status, "completed"), eq28(runs.status, "partial"))
+        eq29(runs.projectId, projectId),
+        or3(eq29(runs.status, "completed"), eq29(runs.status, "partial"))
       )
     ).orderBy(desc13(runs.createdAt)).limit(2).all();
     if (recentRuns.length < 2) return [];
@@ -16342,12 +16720,12 @@ var Notifier = class {
       keyword: keywords.keyword,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(keywords, eq28(querySnapshots.keywordId, keywords.id)).where(eq28(querySnapshots.runId, currentRunId)).all();
+    }).from(querySnapshots).leftJoin(keywords, eq29(querySnapshots.keywordId, keywords.id)).where(eq29(querySnapshots.runId, currentRunId)).all();
     const previousSnapshots = this.db.select({
       keywordId: querySnapshots.keywordId,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).where(eq28(querySnapshots.runId, previousRunId)).all();
+    }).from(querySnapshots).where(eq29(querySnapshots.runId, previousRunId)).all();
     const prevMap = /* @__PURE__ */ new Map();
     for (const s of previousSnapshots) {
       prevMap.set(`${s.keywordId}:${s.provider}`, s.citationState);
@@ -16464,7 +16842,7 @@ var RunCoordinator = class {
 
 // src/agent/session-registry.ts
 import crypto27 from "crypto";
-import { eq as eq30 } from "drizzle-orm";
+import { eq as eq31 } from "drizzle-orm";
 
 // src/agent/session.ts
 import fs11 from "fs";
@@ -16679,582 +17057,67 @@ function buildSkillDocTools() {
   ];
 }
 
-// src/agent/tools.ts
+// src/agent/mcp-to-agent-tool.ts
 import { Type as Type2 } from "@sinclair/typebox";
-
-// src/agent/memory-store.ts
-import crypto26 from "crypto";
-import { and as and16, desc as desc14, eq as eq29, like as like2, sql as sql10 } from "drizzle-orm";
-var COMPACTION_KEY_PREFIX = "compaction:";
-var COMPACTION_NOTES_PER_SESSION = 3;
-function rowToDto(row) {
+var MAX_TOOL_RESULT_CHARS = 2e4;
+function truncate(json) {
+  if (json.length <= MAX_TOOL_RESULT_CHARS) return json;
+  return json.slice(0, MAX_TOOL_RESULT_CHARS) + "\n... (truncated \u2014 result too large)";
+}
+function textResult2(details) {
   return {
-    id: row.id,
-    key: row.key,
-    value: row.value,
-    source: row.source,
-    createdAt: row.createdAt,
-    updatedAt: row.updatedAt
+    content: [{ type: "text", text: truncate(JSON.stringify(details, null, 2)) }],
+    details
   };
 }
-function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq29(agentMemory.projectId, projectId)).orderBy(desc14(agentMemory.updatedAt));
-  const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
-  return rows.map(rowToDto);
-}
-function upsertMemoryEntry(db, args) {
-  if (Buffer.byteLength(args.value, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
-    throw new Error(
-      `memory value exceeds ${AGENT_MEMORY_VALUE_MAX_BYTES} bytes (got ${Buffer.byteLength(args.value, "utf8")})`
-    );
+function stripProjectFromJsonSchema(jsonSchema) {
+  if (!jsonSchema || typeof jsonSchema !== "object") {
+    return { schema: jsonSchema, hadProject: false };
   }
-  if (args.source !== MemorySources.compaction && args.key.startsWith(COMPACTION_KEY_PREFIX)) {
-    throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
+  const obj = jsonSchema;
+  const properties = obj.properties;
+  if (!properties || typeof properties !== "object" || !("project" in properties)) {
+    return { schema: jsonSchema, hadProject: false };
   }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto26.randomUUID();
-  db.insert(agentMemory).values({
-    id,
-    projectId: args.projectId,
-    key: args.key,
-    value: args.value,
-    source: args.source,
-    createdAt: now,
-    updatedAt: now
-  }).onConflictDoUpdate({
-    target: [agentMemory.projectId, agentMemory.key],
-    set: {
-      value: args.value,
-      source: args.source,
-      updatedAt: now
-    }
-  }).run();
-  const row = db.select().from(agentMemory).where(and16(eq29(agentMemory.projectId, args.projectId), eq29(agentMemory.key, args.key))).get();
-  if (!row) throw new Error("memory upsert produced no row");
-  return rowToDto(row);
+  const { project: _project, ...remainingProps } = properties;
+  const required = Array.isArray(obj.required) ? obj.required.filter((name) => name !== "project") : obj.required;
+  const stripped = { ...obj, properties: remainingProps };
+  if (required === void 0) {
+    delete stripped.required;
+  } else {
+    stripped.required = required;
+  }
+  return { schema: stripped, hadProject: true };
 }
-function deleteMemoryEntry(db, projectId, key) {
-  const result = db.delete(agentMemory).where(and16(eq29(agentMemory.projectId, projectId), eq29(agentMemory.key, key))).run();
-  const changes = result.changes ?? 0;
-  return changes > 0;
+function mcpToAgentTool(tool, ctx) {
+  const { schema: visibleSchema, hadProject } = stripProjectFromJsonSchema(tool.inputJsonSchema);
+  const parameters = Type2.Unsafe(visibleSchema);
+  const execute = async (_toolCallId, params) => {
+    const handlerInput = hadProject ? { ...params, project: ctx.projectName } : params;
+    const result = await tool.handler(ctx.client, handlerInput);
+    return textResult2(result);
+  };
+  return {
+    name: tool.name,
+    label: tool.title,
+    description: tool.description,
+    parameters,
+    execute
+  };
 }
-function loadRecentForHydrate(db, projectId, limit) {
-  return listMemoryEntries(db, projectId, { limit });
-}
-function writeCompactionNote(db, args) {
-  if (Buffer.byteLength(args.summary, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
-    throw new Error(
-      `compaction summary exceeds ${AGENT_MEMORY_VALUE_MAX_BYTES} bytes; summarizer produced too much text`
-    );
-  }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
-  const id = crypto26.randomUUID();
-  let inserted;
-  db.transaction((tx) => {
-    tx.insert(agentMemory).values({
-      id,
-      projectId: args.projectId,
-      key,
-      value: args.summary,
-      source: MemorySources.compaction,
-      createdAt: now,
-      updatedAt: now
-    }).run();
-    const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
-    const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
-      and16(
-        eq29(agentMemory.projectId, args.projectId),
-        like2(agentMemory.key, `${sessionPrefix}%`)
-      )
-    ).orderBy(desc14(agentMemory.updatedAt)).all();
-    const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
-    if (stale.length > 0) {
-      tx.delete(agentMemory).where(sql10`${agentMemory.id} IN (${sql10.join(stale.map((s) => sql10`${s}`), sql10`, `)})`).run();
-    }
-    const row = tx.select().from(agentMemory).where(and16(eq29(agentMemory.projectId, args.projectId), eq29(agentMemory.key, key))).get();
-    if (row) inserted = rowToDto(row);
-  });
-  if (!inserted) throw new Error("compaction note write produced no row");
-  return inserted;
+var AERO_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
+  "canonry_agent_clear"
+]);
+function buildMcpAgentTools(registry, ctx, opts = {}) {
+  return registry.filter((tool) => !AERO_EXCLUDED_MCP_TOOLS.has(tool.name)).filter((tool) => opts.readOnly ? tool.access === "read" : true).map((tool) => mcpToAgentTool(tool, ctx));
 }
 
 // src/agent/tools.ts
-var MAX_TOOL_RESULT_CHARS = 2e4;
-function truncate(json) {
-  if (json.length <= MAX_TOOL_RESULT_CHARS) return json;
-  return json.slice(0, MAX_TOOL_RESULT_CHARS) + "\n... (truncated \u2014 result too large)";
-}
-function textResult2(details) {
-  return {
-    content: [{ type: "text", text: truncate(JSON.stringify(details, null, 2)) }],
-    details
-  };
-}
-var StatusSchema = Type2.Object({
-  runLimit: Type2.Optional(
-    Type2.Number({
-      description: "Max recent runs to include. Default 5.",
-      minimum: 1,
-      maximum: 50
-    })
-  )
-});
-function buildGetStatusTool(ctx) {
-  return {
-    name: "get_status",
-    label: "Get status",
-    description: "Current project overview with its most recent runs.",
-    parameters: StatusSchema,
-    execute: async (_toolCallId, params) => {
-      const runLimit = params.runLimit ?? 5;
-      const [project, runs2] = await Promise.all([
-        ctx.client.getProject(ctx.projectName),
-        ctx.client.listRuns(ctx.projectName, runLimit)
-      ]);
-      return textResult2({ project, runs: runs2 });
-    }
-  };
-}
-var HealthSchema = Type2.Object({});
-function buildGetHealthTool(ctx) {
-  return {
-    name: "get_health",
-    label: "Get health",
-    description: 'Latest visibility health snapshot including overall cited rate, pair counts, and per-provider breakdown. Returns `status: "no-data"` with `reason: "no-runs-yet"` and zeroed metrics for projects with no successful runs yet.',
-    parameters: HealthSchema,
-    execute: async () => {
-      const health = await ctx.client.getHealth(ctx.projectName);
-      return textResult2(health);
-    }
-  };
-}
-var TimelineSchema = Type2.Object({
-  keyword: Type2.Optional(
-    Type2.String({
-      description: "Restrict the timeline to a single keyword. Omit to return all keywords."
-    })
-  )
-});
-function buildGetTimelineTool(ctx) {
-  return {
-    name: "get_timeline",
-    label: "Get timeline",
-    description: "Per-keyword citation timeline showing how visibility evolved across runs. Use to identify regressions, emerging citations, or competitor movement.",
-    parameters: TimelineSchema,
-    execute: async (_toolCallId, params) => {
-      const timeline = await ctx.client.getTimeline(ctx.projectName);
-      const filtered = params.keyword ? timeline.filter((row) => row.keyword === params.keyword) : timeline;
-      return textResult2(filtered);
-    }
-  };
-}
-var InsightsSchema = Type2.Object({
-  includeDismissed: Type2.Optional(
-    Type2.Boolean({
-      description: "Include dismissed insights. Default false (only active insights)."
-    })
-  ),
-  runId: Type2.Optional(
-    Type2.String({
-      description: "Restrict insights to a specific run id. Omit for all runs."
-    })
-  )
-});
-function buildGetInsightsTool(ctx) {
-  return {
-    name: "get_insights",
-    label: "Get insights",
-    description: "Insights produced by the canonry intelligence engine \u2014 regressions, gains, and opportunities with cause/recommendation metadata. Query this before re-deriving conclusions from raw timeline data.",
-    parameters: InsightsSchema,
-    execute: async (_toolCallId, params) => {
-      const insights2 = await ctx.client.getInsights(ctx.projectName, {
-        dismissed: params.includeDismissed,
-        runId: params.runId
-      });
-      return textResult2(insights2);
-    }
-  };
-}
-var KeywordsSchema = Type2.Object({});
-function buildListKeywordsTool(ctx) {
-  return {
-    name: "list_keywords",
-    label: "List keywords",
-    description: "All keywords currently tracked for this project.",
-    parameters: KeywordsSchema,
-    execute: async () => {
-      const keywords2 = await ctx.client.listKeywords(ctx.projectName);
-      return textResult2(keywords2);
-    }
-  };
-}
-var CompetitorsSchema = Type2.Object({});
-function buildListCompetitorsTool(ctx) {
-  return {
-    name: "list_competitors",
-    label: "List competitors",
-    description: "Competitor domains tracked alongside this project for side-by-side comparison.",
-    parameters: CompetitorsSchema,
-    execute: async () => {
-      const competitors2 = await ctx.client.listCompetitors(ctx.projectName);
-      return textResult2(competitors2);
-    }
-  };
-}
-var ContentTargetsSchema = Type2.Object({
-  limit: Type2.Optional(
-    Type2.Number({
-      description: "Max rows. Defaults to all. Use a small number (3\u201310) when summarizing for the user."
-    })
-  ),
-  includeInProgress: Type2.Optional(
-    Type2.Boolean({
-      description: "Include rows that already have an in-flight tracked action. Default false."
-    })
-  )
-});
-function buildGetContentTargetsTool(ctx) {
-  return {
-    name: "get_content_targets",
-    label: "Get content targets",
-    description: "Ranked, action-typed content opportunities. Each row is `{query, action \u2208 create|expand|refresh|add-schema, ourBestPage?, winningCompetitor?, score, scoreBreakdown, drivers[], demandSource, actionConfidence}`. Use this to recommend which post the user should write/refresh next.",
-    parameters: ContentTargetsSchema,
-    execute: async (_toolCallId, params) => {
-      const response = await ctx.client.getContentTargets(ctx.projectName, {
-        limit: params.limit,
-        includeInProgress: params.includeInProgress === true
-      });
-      return textResult2(response);
-    }
-  };
-}
-var ContentSourcesSchema = Type2.Object({});
-function buildGetContentSourcesTool(ctx) {
-  return {
-    name: "get_grounding_sources",
-    label: "Get grounding sources",
-    description: "URL-level competitive grounding-source map. Per query, lists every URL the LLM cited (our domain vs competitors), with citation count and providers. Read this to understand what specific competitor URL is winning a query.",
-    parameters: ContentSourcesSchema,
-    execute: async () => {
-      const response = await ctx.client.getContentSources(ctx.projectName);
-      return textResult2(response);
-    }
-  };
-}
-var ContentGapsSchema = Type2.Object({});
-function buildGetContentGapsTool(ctx) {
-  return {
-    name: "get_content_gaps",
-    label: "Get content gaps",
-    description: 'Queries where competitors are cited but our domain is not. Ranked by miss rate. The blunt-instrument view of "what competitors are winning that we are not." Use `get_content_targets` for action-typed recommendations on the same data.',
-    parameters: ContentGapsSchema,
-    execute: async () => {
-      const response = await ctx.client.getContentGaps(ctx.projectName);
-      return textResult2(response);
-    }
-  };
-}
-var RunDetailSchema = Type2.Object({
-  runId: Type2.String({
-    description: "Run id (UUID) to fetch. Typically obtained from get_status runs[].id."
-  })
-});
-function buildGetRunTool(ctx) {
-  return {
-    name: "get_run",
-    label: "Get run detail",
-    description: "Full detail for a specific run including per-keyword snapshots, error messages, and provider breakdown. Use to investigate failed runs or drill into a particular sweep.",
-    parameters: RunDetailSchema,
-    execute: async (_toolCallId, params) => {
-      const run = await ctx.client.getRun(params.runId);
-      return textResult2(run);
-    }
-  };
-}
-var BacklinksSchema = Type2.Object({
-  limit: Type2.Optional(
-    Type2.Number({
-      description: "Max linking-domain rows to include. Default 50, max 200.",
-      minimum: 1,
-      maximum: 200
-    })
-  ),
-  release: Type2.Optional(
-    Type2.String({
-      description: "Common Crawl release id (e.g., cc-main-2026-jan-feb-mar). Omit for the most recent release with data."
-    })
-  )
-});
-function buildListBacklinksTool(ctx) {
-  return {
-    name: "list_backlinks",
-    label: "List backlinks",
-    description: "Backlink summary and top linking domains from the most recent ready Common Crawl release. Off-site authority signal that correlates with citation likelihood. Returns null summary when no release sync has completed for this workspace.",
-    parameters: BacklinksSchema,
-    execute: async (_toolCallId, params) => {
-      const response = await ctx.client.backlinksDomains(ctx.projectName, {
-        limit: params.limit ?? 50,
-        release: params.release
-      });
-      return textResult2(response);
-    }
-  };
-}
-var RecallSchema = Type2.Object({
-  limit: Type2.Optional(
-    Type2.Number({
-      description: "Max notes to return, ordered newest-first. Default 50. Max 100.",
-      minimum: 1,
-      maximum: 100
-    })
-  )
-});
-function buildRecallTool(ctx) {
-  return {
-    name: "recall",
-    label: "Recall memory",
-    description: "Read project-scoped durable notes Aero has stored via `remember` (plus compaction summaries). Returns entries newest-first. The N most-recent entries are also injected into the system prompt at session start, so you usually do not need to call this \u2014 reach for it when you need older context or the full note value.",
-    parameters: RecallSchema,
-    execute: async (_toolCallId, params) => {
-      const entries = listMemoryEntries(ctx.db, ctx.projectId, { limit: params.limit ?? 50 });
-      return textResult2({ entries });
-    }
-  };
-}
 function buildReadTools(ctx) {
-  return [
-    buildGetStatusTool(ctx),
-    buildGetHealthTool(ctx),
-    buildGetTimelineTool(ctx),
-    buildGetInsightsTool(ctx),
-    buildListKeywordsTool(ctx),
-    buildListCompetitorsTool(ctx),
-    buildGetRunTool(ctx),
-    buildRecallTool(ctx),
-    buildListBacklinksTool(ctx),
-    buildGetContentTargetsTool(ctx),
-    buildGetContentSourcesTool(ctx),
-    buildGetContentGapsTool(ctx)
-  ];
-}
-var RunSweepSchema = Type2.Object({
-  providers: Type2.Optional(
-    Type2.Array(Type2.String(), {
-      description: "Subset of providers to run. Omit to use every configured provider on the project."
-    })
-  ),
-  noLocation: Type2.Optional(
-    Type2.Boolean({
-      description: "Run without a location context. Default: use the project default location."
-    })
-  )
-});
-function buildRunSweepTool(ctx) {
-  return {
-    name: "run_sweep",
-    label: "Trigger sweep",
-    description: "Trigger a new answer-visibility sweep for this project across configured AI providers. Returns the run id(s). Use when fresh citation data is needed.",
-    parameters: RunSweepSchema,
-    execute: async (_toolCallId, params) => {
-      const body = {};
-      if (params.providers?.length) body.providers = params.providers;
-      if (params.noLocation) body.noLocation = true;
-      const result = await ctx.client.triggerRun(ctx.projectName, body);
-      return textResult2(result);
-    }
-  };
-}
-var DismissInsightSchema = Type2.Object({
-  insightId: Type2.String({
-    description: "Insight id to dismiss. Obtain from get_insights details[].id."
-  })
-});
-function buildDismissInsightTool(ctx) {
-  return {
-    name: "dismiss_insight",
-    label: "Dismiss insight",
-    description: "Mark an insight as dismissed so it no longer surfaces in active insight lists. Reversible via the dashboard.",
-    parameters: DismissInsightSchema,
-    execute: async (_toolCallId, params) => {
-      const result = await ctx.client.dismissInsight(ctx.projectName, params.insightId);
-      return textResult2(result);
-    }
-  };
-}
-var AddKeywordsSchema = Type2.Object({
-  keywords: Type2.Array(Type2.String(), {
-    minItems: 1,
-    description: "Keywords to add to the tracking list. Duplicates against existing keywords are ignored server-side."
-  })
-});
-function buildAddKeywordsTool(ctx) {
-  return {
-    name: "add_keywords",
-    label: "Add keywords",
-    description: "Append keywords to the project tracking list. Additive only \u2014 existing keywords are preserved. Use exact phrasing you want tracked.",
-    parameters: AddKeywordsSchema,
-    execute: async (_toolCallId, params) => {
-      await ctx.client.appendKeywords(ctx.projectName, params.keywords);
-      return textResult2({ added: params.keywords });
-    }
-  };
-}
-var AddCompetitorsSchema = Type2.Object({
-  domains: Type2.Array(Type2.String(), {
-    minItems: 1,
-    description: 'Competitor domains to track. Provide bare domains (e.g. "example.com"), not URLs.'
-  })
-});
-function buildAddCompetitorsTool(ctx) {
-  return {
-    name: "add_competitors",
-    label: "Add competitors",
-    description: "Append competitor domains to the project. Existing competitors are skipped by the API.",
-    parameters: AddCompetitorsSchema,
-    execute: async (_toolCallId, params) => {
-      const existing = await ctx.client.listCompetitors(ctx.projectName);
-      const existingDomains = new Set(existing.map((c) => c.domain));
-      const newDomains = params.domains.filter((d) => !existingDomains.has(d));
-      if (newDomains.length === 0) {
-        return textResult2({ added: [], alreadyTracked: params.domains });
-      }
-      await ctx.client.appendCompetitors(ctx.projectName, newDomains);
-      return textResult2({ added: newDomains, alreadyTracked: params.domains.filter((d) => existingDomains.has(d)) });
-    }
-  };
-}
-var UpdateScheduleSchema = Type2.Object({
-  cron: Type2.Optional(
-    Type2.String({ description: 'Cron expression (e.g. "0 */6 * * *"). Provide cron OR preset, not both.' })
-  ),
-  preset: Type2.Optional(
-    Type2.String({ description: 'Preset keyword (e.g. "daily", "hourly"). Provide cron OR preset, not both.' })
-  ),
-  timezone: Type2.Optional(Type2.String({ description: 'IANA timezone. Default: "UTC".' })),
-  enabled: Type2.Optional(
-    Type2.Boolean({ description: "Whether the schedule is active. Default: true." })
-  ),
-  providers: Type2.Optional(
-    Type2.Array(Type2.String(), {
-      description: "Providers to run on each scheduled sweep. Omit to use all configured providers."
-    })
-  )
-});
-function buildUpdateScheduleTool(ctx) {
-  return {
-    name: "update_schedule",
-    label: "Update schedule",
-    description: "Create or update the recurring sweep schedule for this project. Provide exactly one of `cron` (expression) or `preset` (keyword). Fully replaces any existing schedule.",
-    parameters: UpdateScheduleSchema,
-    execute: async (_toolCallId, params) => {
-      if (params.cron && params.preset || !params.cron && !params.preset) {
-        throw new Error("update_schedule: provide exactly one of `cron` or `preset`");
-      }
-      const body = {};
-      if (params.cron) body.cron = params.cron;
-      if (params.preset) body.preset = params.preset;
-      if (params.timezone) body.timezone = params.timezone;
-      if (params.enabled !== void 0) body.enabled = params.enabled;
-      if (params.providers?.length) body.providers = params.providers;
-      const result = await ctx.client.putSchedule(ctx.projectName, body);
-      return textResult2(result);
-    }
-  };
-}
-var AttachAgentWebhookSchema = Type2.Object({
-  url: Type2.String({
-    description: "External agent webhook URL. Canonry will POST run.completed, insight.critical, insight.high, and citation.gained events to it."
-  })
-});
-function buildAttachAgentWebhookTool(ctx) {
-  return {
-    name: "attach_agent_webhook",
-    label: "Attach agent webhook",
-    description: "Register an external agent webhook for this project. Use when wiring a Claude Code / Codex / custom agent to receive canonry run and insight events. Idempotent \u2014 skips if one already exists.",
-    parameters: AttachAgentWebhookSchema,
-    execute: async (_toolCallId, params) => {
-      const existing = await ctx.client.listNotifications(ctx.projectName);
-      const hasAgent = existing.some((n) => n.source === "agent");
-      if (hasAgent) {
-        return textResult2({ status: "already-attached" });
-      }
-      const result = await ctx.client.createNotification(ctx.projectName, {
-        channel: "webhook",
-        url: params.url,
-        events: ["run.completed", "insight.critical", "insight.high", "citation.gained"],
-        source: "agent"
-      });
-      return textResult2({ status: "attached", notificationId: result.id, url: params.url });
-    }
-  };
-}
-var RememberSchema = Type2.Object({
-  key: Type2.String({
-    description: `Stable identifier for this note (max ${AGENT_MEMORY_KEY_MAX_LENGTH} chars). Writing the same key overwrites the prior value. Do NOT use the "${COMPACTION_KEY_PREFIX}" prefix \u2014 that namespace is reserved for transcript compaction summaries.`,
-    minLength: 1,
-    maxLength: AGENT_MEMORY_KEY_MAX_LENGTH
-  }),
-  value: Type2.String({
-    description: `Plain-text note to persist (max ${AGENT_MEMORY_VALUE_MAX_BYTES} bytes). Use for durable operator preferences, migration context, or non-obvious reasoning you'll want on a future turn. Do NOT duplicate data canonry already tracks (runs, insights, timelines) \u2014 query those instead.`,
-    minLength: 1
-  })
-});
-function buildRememberTool(ctx) {
-  return {
-    name: "remember",
-    label: "Remember",
-    description: "Persist a project-scoped durable note visible to every future Aero session for this project. Upsert \u2014 writing the same key replaces the prior value. Capped at 2 KB per note.",
-    parameters: RememberSchema,
-    execute: async (_toolCallId, params) => {
-      const entry = upsertMemoryEntry(ctx.db, {
-        projectId: ctx.projectId,
-        key: params.key,
-        value: params.value,
-        source: MemorySources.aero
-      });
-      return textResult2({ status: "remembered", entry });
-    }
-  };
-}
-var ForgetSchema = Type2.Object({
-  key: Type2.String({
-    description: "Exact key of the note to remove. No-op (status=missing) when no note exists for that key.",
-    minLength: 1,
-    maxLength: AGENT_MEMORY_KEY_MAX_LENGTH
-  })
-});
-function buildForgetTool(ctx) {
-  return {
-    name: "forget",
-    label: "Forget",
-    description: "Delete a durable note by key. Use when a previously-remembered fact is wrong or no longer relevant.",
-    parameters: ForgetSchema,
-    execute: async (_toolCallId, params) => {
-      if (params.key.startsWith(COMPACTION_KEY_PREFIX)) {
-        throw new Error(
-          `cannot forget compaction notes directly \u2014 they are pruned automatically (key prefix "${COMPACTION_KEY_PREFIX}" is reserved)`
-        );
-      }
-      const removed = deleteMemoryEntry(ctx.db, ctx.projectId, params.key);
-      return textResult2({ status: removed ? "forgotten" : "missing", key: params.key });
-    }
-  };
-}
-function buildWriteTools(ctx) {
-  return [
-    buildRunSweepTool(ctx),
-    buildDismissInsightTool(ctx),
-    buildAddKeywordsTool(ctx),
-    buildAddCompetitorsTool(ctx),
-    buildUpdateScheduleTool(ctx),
-    buildAttachAgentWebhookTool(ctx),
-    buildRememberTool(ctx),
-    buildForgetTool(ctx)
-  ];
+  return buildMcpAgentTools(canonryMcpTools, ctx, { readOnly: true });
 }
 function buildAllTools(ctx) {
-  return [...buildReadTools(ctx), ...buildWriteTools(ctx)];
+  return buildMcpAgentTools(canonryMcpTools, ctx);
 }
 
 // src/agent/session.ts
@@ -17304,9 +17167,7 @@ function createAeroSession(opts) {
   const toolScope = opts.toolScope ?? "all";
   const toolCtx = {
     client: opts.client,
-    projectName: opts.projectName,
-    db: opts.db,
-    projectId: opts.projectId
+    projectName: opts.projectName
   };
   const stateTools = toolScope === "read-only" ? buildReadTools(toolCtx) : buildAllTools(toolCtx);
   const defaultTools = [...stateTools, ...buildSkillDocTools()];
@@ -17329,6 +17190,103 @@ function resolveSessionProviderAndModel(config, opts) {
   return { provider, modelId };
 }
 
+// src/agent/memory-store.ts
+import crypto26 from "crypto";
+import { and as and16, desc as desc14, eq as eq30, like as like2, sql as sql10 } from "drizzle-orm";
+var COMPACTION_KEY_PREFIX = "compaction:";
+var COMPACTION_NOTES_PER_SESSION = 3;
+function rowToDto(row) {
+  return {
+    id: row.id,
+    key: row.key,
+    value: row.value,
+    source: row.source,
+    createdAt: row.createdAt,
+    updatedAt: row.updatedAt
+  };
+}
+function listMemoryEntries(db, projectId, opts = {}) {
+  const query = db.select().from(agentMemory).where(eq30(agentMemory.projectId, projectId)).orderBy(desc14(agentMemory.updatedAt));
+  const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
+  return rows.map(rowToDto);
+}
+function upsertMemoryEntry(db, args) {
+  if (Buffer.byteLength(args.value, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
+    throw new Error(
+      `memory value exceeds ${AGENT_MEMORY_VALUE_MAX_BYTES} bytes (got ${Buffer.byteLength(args.value, "utf8")})`
+    );
+  }
+  if (args.source !== MemorySources.compaction && args.key.startsWith(COMPACTION_KEY_PREFIX)) {
+    throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
+  }
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const id = crypto26.randomUUID();
+  db.insert(agentMemory).values({
+    id,
+    projectId: args.projectId,
+    key: args.key,
+    value: args.value,
+    source: args.source,
+    createdAt: now,
+    updatedAt: now
+  }).onConflictDoUpdate({
+    target: [agentMemory.projectId, agentMemory.key],
+    set: {
+      value: args.value,
+      source: args.source,
+      updatedAt: now
+    }
+  }).run();
+  const row = db.select().from(agentMemory).where(and16(eq30(agentMemory.projectId, args.projectId), eq30(agentMemory.key, args.key))).get();
+  if (!row) throw new Error("memory upsert produced no row");
+  return rowToDto(row);
+}
+function deleteMemoryEntry(db, projectId, key) {
+  const result = db.delete(agentMemory).where(and16(eq30(agentMemory.projectId, projectId), eq30(agentMemory.key, key))).run();
+  const changes = result.changes ?? 0;
+  return changes > 0;
+}
+function loadRecentForHydrate(db, projectId, limit) {
+  return listMemoryEntries(db, projectId, { limit });
+}
+function writeCompactionNote(db, args) {
+  if (Buffer.byteLength(args.summary, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
+    throw new Error(
+      `compaction summary exceeds ${AGENT_MEMORY_VALUE_MAX_BYTES} bytes; summarizer produced too much text`
+    );
+  }
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
+  const id = crypto26.randomUUID();
+  let inserted;
+  db.transaction((tx) => {
+    tx.insert(agentMemory).values({
+      id,
+      projectId: args.projectId,
+      key,
+      value: args.summary,
+      source: MemorySources.compaction,
+      createdAt: now,
+      updatedAt: now
+    }).run();
+    const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
+    const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
+      and16(
+        eq30(agentMemory.projectId, args.projectId),
+        like2(agentMemory.key, `${sessionPrefix}%`)
+      )
+    ).orderBy(desc14(agentMemory.updatedAt)).all();
+    const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
+    if (stale.length > 0) {
+      tx.delete(agentMemory).where(sql10`${agentMemory.id} IN (${sql10.join(stale.map((s) => sql10`${s}`), sql10`, `)})`).run();
+    }
+    const row = tx.select().from(agentMemory).where(and16(eq30(agentMemory.projectId, args.projectId), eq30(agentMemory.key, key))).get();
+    if (row) inserted = rowToDto(row);
+  });
+  if (!inserted) throw new Error("compaction note write produced no row");
+  return inserted;
+}
+
 // src/agent/compaction.ts
 import { complete } from "@mariozechner/pi-ai";
 
@@ -17504,14 +17462,12 @@ var SessionRegistry = class {
           modelProvider: effectiveProvider,
           modelId: effectiveModelId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(eq30(agentSessions.projectId, projectId)).run();
+        }).where(eq31(agentSessions.projectId, projectId)).run();
       }
       const agent2 = createAeroSession({
         projectName,
         client: this.opts.client,
         config: this.opts.config,
-        db: this.opts.db,
-        projectId,
         provider: effectiveProvider,
         modelId: effectiveModelId,
         systemPromptOverride: this.buildHydratedSystemPrompt(projectId, row.systemPrompt),
@@ -17534,8 +17490,6 @@ var SessionRegistry = class {
       projectName,
       client: this.opts.client,
       config: this.opts.config,
-      db: this.opts.db,
-      projectId,
       provider,
       modelId,
       // Hydrate on the fresh path too — a brand-new session may still see
@@ -17595,7 +17549,7 @@ var SessionRegistry = class {
 ---
 
 <memory>
-Project-scoped durable notes (newest first). Use remember/forget/recall to manage. Entries tagged [compaction] are LLM-summarized transcript slices.
+Project-scoped durable notes (newest first). Use canonry_memory_set/canonry_memory_forget/canonry_memory_list to manage. Entries tagged [compaction] are LLM-summarized transcript slices.
 
 ${lines.join("\n")}
 </memory>`;
@@ -17702,7 +17656,7 @@ ${lines.join("\n")}
     if (this.scopes.get(projectName) === wantScope) return;
     const projectId = this.projectIds.get(projectName) ?? this.resolveProjectId(projectName);
     this.projectIds.set(projectName, projectId);
-    const toolCtx = { client: this.opts.client, projectName, db: this.opts.db, projectId };
+    const toolCtx = { client: this.opts.client, projectName };
     const stateTools = wantScope === "read-only" ? buildReadTools(toolCtx) : buildAllTools(toolCtx);
     agent.state.tools = [...stateTools, ...buildSkillDocTools()];
     this.scopes.set(projectName, wantScope);
@@ -17722,7 +17676,7 @@ ${lines.join("\n")}
       modelProvider: nextProvider,
       modelId: nextModelId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq30(agentSessions.projectId, projectId)).run();
+    }).where(eq31(agentSessions.projectId, projectId)).run();
   }
   /** Persist a session's transcript back to the DB. Call after any run settles. */
   save(projectName) {
@@ -17884,11 +17838,11 @@ ${lines.join("\n")}
     return id;
   }
   tryResolveProjectId(projectName) {
-    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq30(projects.name, projectName)).get();
+    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq31(projects.name, projectName)).get();
     return row?.id;
   }
   loadRow(projectId) {
-    const row = this.opts.db.select().from(agentSessions).where(eq30(agentSessions.projectId, projectId)).get();
+    const row = this.opts.db.select().from(agentSessions).where(eq31(agentSessions.projectId, projectId)).get();
     return row ?? null;
   }
   insertRow(params) {
@@ -17907,14 +17861,14 @@ ${lines.join("\n")}
   }
   updateRow(projectId, patch) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq30(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq31(agentSessions.projectId, projectId)).run();
   }
 };
 
 // src/agent/agent-routes.ts
-import { eq as eq31 } from "drizzle-orm";
+import { eq as eq32 } from "drizzle-orm";
 function resolveProject2(db, name) {
-  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq31(projects.name, name)).get();
+  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq32(projects.name, name)).get();
   if (!row) throw notFound("project", name);
   return row;
 }
@@ -17923,7 +17877,7 @@ function registerAgentRoutes(app, opts) {
     "/projects/:name/agent/transcript",
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
-      const row = opts.db.select().from(agentSessions).where(eq31(agentSessions.projectId, project.id)).get();
+      const row = opts.db.select().from(agentSessions).where(eq32(agentSessions.projectId, project.id)).get();
       if (!row) {
         return { messages: [], modelProvider: null, modelId: null, updatedAt: null };
       }
@@ -17947,7 +17901,7 @@ function registerAgentRoutes(app, opts) {
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
       opts.sessionRegistry.reset(project.name);
-      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq31(agentSessions.projectId, project.id)).run();
+      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq32(agentSessions.projectId, project.id)).run();
       return { status: "reset" };
     }
   );
@@ -18251,7 +18205,7 @@ var SnapshotService = class {
   }
   async createReport(input) {
     const companyName = input.companyName.trim();
-    const domain = normalizeDomain2(input.domain);
+    const domain = normalizeDomain3(input.domain);
     const manualPhrases = normalizeStringList(input.phrases ?? []);
     const manualCompetitors = normalizeStringList(input.competitors ?? []);
     const providers = this.registry.getAll();
@@ -18691,7 +18645,7 @@ function extractCompetitorsFromResponse(ctx) {
   const targetDomain = extractHostname2(ctx.targetDomain);
   for (const hint of ctx.manualCompetitors) {
     if (isDomainLike(hint)) {
-      const normalizedHint = normalizeDomain2(hint);
+      const normalizedHint = normalizeDomain3(hint);
       if (domainMatches2(normalizedHint, targetDomain)) continue;
       if (ctx.citedDomains.some((domain) => domainMatches2(domain, normalizedHint)) || lowerAnswer.includes(normalizedHint.toLowerCase())) {
         competitors2.add(normalizedHint);
@@ -18750,7 +18704,7 @@ function uniqueStrings2(values) {
     values.filter((value) => typeof value === "string").map((value) => value.trim()).filter(Boolean)
   )];
 }
-function normalizeDomain2(value) {
+function normalizeDomain3(value) {
   const trimmed = value.trim();
   if (!trimmed) return trimmed;
   try {
@@ -18761,15 +18715,15 @@ function normalizeDomain2(value) {
   }
 }
 function extractHostname2(value) {
-  return normalizeDomain2(value);
+  return normalizeDomain3(value);
 }
 function domainMatches2(candidate, target) {
-  const normalizedCandidate = normalizeDomain2(candidate);
-  const normalizedTarget = normalizeDomain2(target);
+  const normalizedCandidate = normalizeDomain3(candidate);
+  const normalizedTarget = normalizeDomain3(target);
   return normalizedCandidate === normalizedTarget || normalizedCandidate.endsWith(`.${normalizedTarget}`);
 }
 function isDomainLike(value) {
-  const normalized = normalizeDomain2(value);
+  const normalized = normalizeDomain3(value);
   return normalized.includes(".") && !normalized.includes(" ");
 }
 function clipText(value, length) {
@@ -18969,11 +18923,11 @@ async function createServer(opts) {
     intelligenceService,
     (runId, projectId, result) => notifier.dispatchInsightWebhooks(runId, projectId, result),
     async ({ runId, projectId, insightCount, criticalOrHigh }) => {
-      const project = opts.db.select({ name: projects.name }).from(projects).where(eq32(projects.id, projectId)).get();
+      const project = opts.db.select({ name: projects.name }).from(projects).where(eq33(projects.id, projectId)).get();
       if (!project) return;
       sessionRegistry.queueFollowUp(project.name, {
         role: "user",
-        content: `[system] Run ${runId} completed for project ${project.name}. ${insightCount} insights generated (${criticalOrHigh} critical/high). Use get_run to inspect the run and get_insights to review new findings. Surface anything notable briefly \u2014 skip chit-chat.`,
+        content: `[system] Run ${runId} completed for project ${project.name}. ${insightCount} insights generated (${criticalOrHigh} critical/high). Use canonry_run_get to inspect the run and canonry_insights_list to review new findings. Surface anything notable briefly \u2014 skip chit-chat.`,
         timestamp: Date.now()
       });
       void sessionRegistry.drainNow(project.name);
@@ -19109,7 +19063,7 @@ async function createServer(opts) {
   const apiPrefix = basePath ? `${basePath}api/v1` : "/api/v1";
   if (opts.config.apiKey) {
     const keyHash = hashApiKey(opts.config.apiKey);
-    const existing = opts.db.select().from(apiKeys).where(eq32(apiKeys.keyHash, keyHash)).get();
+    const existing = opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, keyHash)).get();
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
@@ -19161,7 +19115,7 @@ async function createServer(opts) {
   };
   const getDefaultApiKey = () => {
     if (!opts.config.apiKey) return void 0;
-    return opts.db.select().from(apiKeys).where(eq32(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
+    return opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
   };
   const createPasswordSession = (reply) => {
     const key = getDefaultApiKey();
@@ -19218,12 +19172,12 @@ async function createServer(opts) {
       return reply.send({ authenticated: true });
     }
     if (apiKey) {
-      const key = opts.db.select().from(apiKeys).where(eq32(apiKeys.keyHash, hashApiKey(apiKey))).get();
+      const key = opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, hashApiKey(apiKey))).get();
       if (!key || key.revokedAt) {
         const err2 = authInvalid();
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
-      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq32(apiKeys.id, key.id)).run();
+      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq33(apiKeys.id, key.id)).run();
       const sessionId = createSession(key.id);
       reply.header("set-cookie", serializeSessionCookie({
         name: SESSION_COOKIE_NAME,