@ainyc/canonry 2.4.6 → 2.5.0

package/dist/{chunk-6UY2PETG.js → chunk-TIHU2YXW.js}

@@ -346,11 +346,11 @@ function printCliError(err, format) {
 
 // src/server.ts
 import { createRequire as createRequire3 } from "module";
-import crypto27 from "crypto";
+import crypto28 from "crypto";
 import fs13 from "fs";
 import path15 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { eq as eq29 } from "drizzle-orm";
+import { eq as eq30 } from "drizzle-orm";
 import Fastify from "fastify";
 
 // ../contracts/src/config-schema.ts
@@ -957,6 +957,7 @@ var runKindSchema = z8.enum([
   "inspect-sitemap",
   "ga-sync",
   "bing-inspect",
+  "bing-inspect-sitemap",
   "backlink-extract"
 ]);
 var RunKinds = runKindSchema.enum;
@@ -5072,6 +5073,31 @@ var routeCatalog = [
       404: { description: "Project or connection not found." }
     }
   },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/bing/inspect-sitemap",
+    summary: "Inspect every URL in a sitemap through Bing Webmaster Tools",
+    tags: ["bing"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: false,
+      content: {
+        "application/json": {
+          schema: {
+            type: "object",
+            properties: {
+              sitemapUrl: stringSchema
+            }
+          }
+        }
+      }
+    },
+    responses: {
+      200: { description: "Sitemap inspection run queued." },
+      400: { description: "Bing is not configured for this project." },
+      404: { description: "Project not found." }
+    }
+  },
   {
     method: "post",
     path: "/api/v1/projects/{name}/bing/request-indexing",
@@ -8509,6 +8535,32 @@ async function bingRoutes(app, opts) {
       throw e;
     }
   });
+  app.post("/projects/:name/bing/inspect-sitemap", async (request) => {
+    const store = requireConnectionStore();
+    const project = resolveProject(app.db, request.params.name);
+    const conn = requireConnection(store, project.canonicalDomain);
+    if (!conn.siteUrl) {
+      throw validationError('No Bing site configured. Run "canonry bing set-site <project> <url>" first.');
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const runId = crypto15.randomUUID();
+    app.db.insert(runs).values({
+      id: runId,
+      projectId: project.id,
+      kind: RunKinds["bing-inspect-sitemap"],
+      status: RunStatuses.queued,
+      trigger: RunTriggers.manual,
+      createdAt: now
+    }).run();
+    const { sitemapUrl } = request.body ?? {};
+    if (opts.onInspectSitemapRequested) {
+      opts.onInspectSitemapRequested(runId, project.id, { sitemapUrl: sitemapUrl ?? void 0 });
+    } else {
+      bingLog("warn", "inspect-sitemap.no-callback", { domain: project.canonicalDomain, runId });
+    }
+    const run = app.db.select().from(runs).where(eq15(runs.id, runId)).get();
+    return run;
+  });
   app.post("/projects/:name/bing/request-indexing", async (request) => {
     const store = requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
@@ -11693,7 +11745,8 @@ async function apiRoutes(app, opts) {
       setTelemetryEnabled: opts.setTelemetryEnabled
     });
     await api.register(bingRoutes, {
-      bingConnectionStore: opts.bingConnectionStore
+      bingConnectionStore: opts.bingConnectionStore,
+      onInspectSitemapRequested: opts.onBingInspectSitemapRequested
     });
     await api.register(googleRoutes, {
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
@@ -15128,11 +15181,197 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
   }
 }
 
-// src/commoncrawl-sync.ts
+// src/bing-inspect-sitemap.ts
 import crypto22 from "crypto";
+import { eq as eq22, desc as desc9 } from "drizzle-orm";
+var log4 = createLogger("BingInspectSitemap");
+function parseBingDate2(value) {
+  if (!value) return null;
+  const match = /\/Date\((-?\d+)[^)]*\)\//.exec(value);
+  if (!match) return null;
+  const ms = parseInt(match[1], 10);
+  if (ms <= 0) return null;
+  return new Date(ms).toISOString();
+}
+function isBlockingIssueType2(issueType) {
+  if (!issueType) return true;
+  const trimmed = issueType.trim();
+  if (!trimmed) return true;
+  return trimmed.split(/\s+/).some((flag) => !/^(None|Seo(Issues|Concerns))$/i.test(flag));
+}
+async function executeBingInspectSitemap(db, runId, projectId, opts) {
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq22(runs.id, runId)).run();
+  try {
+    const project = db.select().from(projects).where(eq22(projects.id, projectId)).get();
+    if (!project) {
+      throw new Error(`Project not found: ${projectId}`);
+    }
+    const conn = opts.config.bing?.connections?.find((c) => c.domain === project.canonicalDomain);
+    if (!conn) {
+      throw new Error('No Bing connection found for this project. Run "canonry bing connect <project>" first.');
+    }
+    if (!conn.siteUrl) {
+      throw new Error('No Bing site configured. Run "canonry bing set-site <project> <url>" first.');
+    }
+    const sitemapUrl = opts.sitemapUrl ?? `https://${project.canonicalDomain}/sitemap.xml`;
+    log4.info("sitemap.fetch", { runId, projectId, sitemapUrl });
+    const sitemapUrls = await fetchAndParseSitemap(sitemapUrl);
+    log4.info("sitemap.parsed", { runId, projectId, urlCount: sitemapUrls.length, sitemapUrl });
+    if (sitemapUrls.length === 0) {
+      throw new Error("No URLs found in sitemap");
+    }
+    const trackedRows = db.select({ url: bingUrlInspections.url }).from(bingUrlInspections).where(eq22(bingUrlInspections.projectId, projectId)).all();
+    const trackedUrls = new Set(trackedRows.map((r) => r.url));
+    const discovered = sitemapUrls.filter((u) => !trackedUrls.has(u));
+    log4.info("sitemap.diff", {
+      runId,
+      projectId,
+      sitemapTotal: sitemapUrls.length,
+      alreadyTracked: sitemapUrls.length - discovered.length,
+      newlyDiscovered: discovered.length
+    });
+    let blockedUrls = /* @__PURE__ */ new Set();
+    try {
+      const issues = await getCrawlIssues(conn.apiKey, conn.siteUrl);
+      for (const issue of issues) {
+        if (issue.Url && isBlockingIssueType2(issue.IssueType ?? null)) {
+          blockedUrls.add(issue.Url);
+        }
+      }
+      log4.info("crawl-issues.loaded", { runId, projectId, blockedCount: blockedUrls.size });
+    } catch (err) {
+      log4.warn("crawl-issues.lookup-failed", {
+        runId,
+        projectId,
+        error: err instanceof Error ? err.message : String(err)
+      });
+      blockedUrls = /* @__PURE__ */ new Set();
+    }
+    let inspected = 0;
+    let errors = 0;
+    for (const pageUrl of sitemapUrls) {
+      try {
+        const result = await getUrlInfo(conn.apiKey, conn.siteUrl, pageUrl);
+        const inspectedAt = (/* @__PURE__ */ new Date()).toISOString();
+        const httpCode = result.HttpStatus ?? result.HttpCode ?? null;
+        const lastCrawledDate = parseBingDate2(result.LastCrawledDate);
+        const inIndexDate = parseBingDate2(result.InIndexDate);
+        const discoveryDate = parseBingDate2(result.DiscoveryDate);
+        let derivedInIndex = null;
+        if (result.DocumentSize != null && result.DocumentSize > 0) {
+          derivedInIndex = true;
+        } else if (lastCrawledDate != null) {
+          derivedInIndex = httpCode != null && httpCode >= 400 ? false : true;
+        } else if (discoveryDate != null) {
+          derivedInIndex = false;
+        }
+        if (derivedInIndex === true && blockedUrls.has(pageUrl)) {
+          derivedInIndex = false;
+        }
+        db.insert(bingUrlInspections).values({
+          id: crypto22.randomUUID(),
+          projectId,
+          url: pageUrl,
+          httpCode,
+          inIndex: derivedInIndex === true ? 1 : derivedInIndex === false ? 0 : null,
+          lastCrawledDate,
+          inIndexDate,
+          inspectedAt,
+          syncRunId: runId,
+          createdAt: inspectedAt,
+          documentSize: result.DocumentSize ?? null,
+          anchorCount: result.AnchorCount ?? null,
+          discoveryDate
+        }).run();
+        inspected++;
+        log4.info("inspect.url-done", {
+          runId,
+          projectId,
+          url: pageUrl,
+          progress: `${inspected}/${sitemapUrls.length}`
+        });
+      } catch (err) {
+        errors++;
+        log4.error("inspect.url-failed", {
+          runId,
+          projectId,
+          url: pageUrl,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+      if (inspected + errors < sitemapUrls.length) {
+        await new Promise((r) => setTimeout(r, 1e3));
+      }
+    }
+    const allInspections = db.select().from(bingUrlInspections).where(eq22(bingUrlInspections.projectId, projectId)).orderBy(desc9(bingUrlInspections.inspectedAt)).all();
+    const latestByUrl = /* @__PURE__ */ new Map();
+    const definitiveByUrl = /* @__PURE__ */ new Map();
+    for (const row of allInspections) {
+      if (!latestByUrl.has(row.url)) latestByUrl.set(row.url, row);
+      if (!definitiveByUrl.has(row.url) && row.inIndex != null) definitiveByUrl.set(row.url, row);
+    }
+    for (const [url, latest] of latestByUrl) {
+      if (latest.inIndex == null) {
+        const def = definitiveByUrl.get(url);
+        if (def) latestByUrl.set(url, def);
+      }
+    }
+    let snapIndexed = 0;
+    let snapNotIndexed = 0;
+    let snapUnknown = 0;
+    for (const [, row] of latestByUrl) {
+      if (row.inIndex === 1) snapIndexed++;
+      else if (row.inIndex === 0) snapNotIndexed++;
+      else snapUnknown++;
+    }
+    const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+    const snapNow = (/* @__PURE__ */ new Date()).toISOString();
+    db.insert(bingCoverageSnapshots).values({
+      id: crypto22.randomUUID(),
+      projectId,
+      syncRunId: runId,
+      date: snapshotDate,
+      indexed: snapIndexed,
+      notIndexed: snapNotIndexed,
+      unknown: snapUnknown,
+      createdAt: snapNow
+    }).onConflictDoUpdate({
+      target: [bingCoverageSnapshots.projectId, bingCoverageSnapshots.date],
+      set: {
+        indexed: snapIndexed,
+        notIndexed: snapNotIndexed,
+        unknown: snapUnknown,
+        createdAt: snapNow,
+        syncRunId: runId
+      }
+    }).run();
+    const status = errors === sitemapUrls.length ? RunStatuses.failed : errors > 0 ? RunStatuses.partial : RunStatuses.completed;
+    db.update(runs).set({ status, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(runs.id, runId)).run();
+    log4.info("inspect.completed", {
+      runId,
+      projectId,
+      inspected,
+      errors,
+      total: sitemapUrls.length,
+      newlyDiscovered: discovered.length,
+      indexed: snapIndexed,
+      notIndexed: snapNotIndexed,
+      unknown: snapUnknown
+    });
+  } catch (err) {
+    const errorMsg = err instanceof Error ? err.message : String(err);
+    db.update(runs).set({ status: RunStatuses.failed, error: errorMsg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(runs.id, runId)).run();
+    log4.error("inspect.failed", { runId, projectId, error: errorMsg });
+    throw err;
+  }
+}
+
+// src/commoncrawl-sync.ts
+import crypto23 from "crypto";
 import path11 from "path";
-import { and as and11, eq as eq22, sql as sql8 } from "drizzle-orm";
-var log4 = createLogger("CommonCrawlSync");
+import { and as and11, eq as eq23, sql as sql8 } from "drizzle-orm";
+var log5 = createLogger("CommonCrawlSync");
 var INSERT_CHUNK_SIZE = 1e4;
 function defaultDeps() {
   return {
@@ -15157,7 +15396,7 @@ async function executeReleaseSync(db, syncId, opts) {
       phaseDetail: "downloading vertices + edges",
       updatedAt: downloadStartedAt,
       error: null
-    }).where(eq22(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq23(ccReleaseSyncs.id, syncId)).run();
     const paths = ccReleasePaths(release);
     const releaseCacheDir = path11.join(deps.cacheDir, release);
     const vertexPath = path11.join(releaseCacheDir, paths.vertexFilename);
@@ -15180,7 +15419,7 @@ async function executeReleaseSync(db, syncId, opts) {
       vertexSha256: vertex.sha256,
       edgesSha256: edges.sha256,
       updatedAt: downloadFinishedAt
-    }).where(eq22(ccReleaseSyncs.id, syncId)).run();
+    }).where(eq23(ccReleaseSyncs.id, syncId)).run();
     const allProjects = db.select().from(projects).all();
     const targets = Array.from(new Set(allProjects.map((p) => p.canonicalDomain)));
     let rows = [];
@@ -15196,15 +15435,15 @@ async function executeReleaseSync(db, syncId, opts) {
     }
     const queriedAt = deps.now().toISOString();
     db.transaction((tx) => {
-      tx.delete(backlinkDomains).where(eq22(backlinkDomains.releaseSyncId, syncId)).run();
-      tx.delete(backlinkSummaries).where(eq22(backlinkSummaries.releaseSyncId, syncId)).run();
+      tx.delete(backlinkDomains).where(eq23(backlinkDomains.releaseSyncId, syncId)).run();
+      tx.delete(backlinkSummaries).where(eq23(backlinkSummaries.releaseSyncId, syncId)).run();
       const expanded = [];
       for (const r of rows) {
         const projectIds = projectsByDomain.get(r.targetDomain);
         if (!projectIds) continue;
         for (const projectId of projectIds) {
           expanded.push({
-            id: crypto22.randomUUID(),
+            id: crypto23.randomUUID(),
             projectId,
             releaseSyncId: syncId,
             release,
@@ -15224,7 +15463,7 @@ async function executeReleaseSync(db, syncId, opts) {
         const projectRows = rowsByProject.get(p.id) ?? [];
         const summary = computeSummary(projectRows);
         tx.insert(backlinkSummaries).values({
-          id: crypto22.randomUUID(),
+          id: crypto23.randomUUID(),
           projectId: p.id,
           releaseSyncId: syncId,
           release,
@@ -15256,8 +15495,8 @@ async function executeReleaseSync(db, syncId, opts) {
       domainsDiscovered: rows.length,
       updatedAt: finishedAt,
       error: null
-    }).where(eq22(ccReleaseSyncs.id, syncId)).run();
-    log4.info("sync.completed", {
+    }).where(eq23(ccReleaseSyncs.id, syncId)).run();
+    log5.info("sync.completed", {
       syncId,
       release,
       projectsProcessed: allProjects.length,
@@ -15269,7 +15508,7 @@ async function executeReleaseSync(db, syncId, opts) {
         try {
           deps.enqueueAutoExtract({ projectId: p.id, release });
         } catch (err) {
-          log4.error("auto-extract.enqueue-failed", {
+          log5.error("auto-extract.enqueue-failed", {
             syncId,
             release,
             projectId: p.id,
@@ -15286,8 +15525,8 @@ async function executeReleaseSync(db, syncId, opts) {
       error: errorMsg,
       phaseDetail: null,
       updatedAt: finishedAt
-    }).where(eq22(ccReleaseSyncs.id, syncId)).run();
-    log4.error("sync.failed", { syncId, release, error: errorMsg });
+    }).where(eq23(ccReleaseSyncs.id, syncId)).run();
+    log5.error("sync.failed", { syncId, release, error: errorMsg });
     throw err;
   }
 }
@@ -15320,10 +15559,10 @@ function computeSummary(rows) {
 }
 
 // src/backlink-extract.ts
-import crypto23 from "crypto";
+import crypto24 from "crypto";
 import fs9 from "fs";
-import { and as and12, desc as desc9, eq as eq23 } from "drizzle-orm";
-var log5 = createLogger("BacklinkExtract");
+import { and as and12, desc as desc10, eq as eq24 } from "drizzle-orm";
+var log6 = createLogger("BacklinkExtract");
 function defaultDeps2() {
   return {
     queryBacklinks,
@@ -15334,13 +15573,13 @@ function defaultDeps2() {
 async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
   const deps = { ...defaultDeps2(), ...opts.deps };
   const startedAt = deps.now().toISOString();
-  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq23(runs.id, runId)).run();
+  db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq24(runs.id, runId)).run();
   try {
-    const project = db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
-    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq23(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq23(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc9(ccReleaseSyncs.createdAt)).limit(1).get();
+    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq24(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq24(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc10(ccReleaseSyncs.createdAt)).limit(1).get();
     if (!sync) {
       throw new Error("No ready release sync available \u2014 run `canonry backlinks sync` first");
     }
@@ -15368,11 +15607,11 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     const targetDomain = project.canonicalDomain;
     db.transaction((tx) => {
       tx.delete(backlinkDomains).where(
-        and12(eq23(backlinkDomains.projectId, projectId), eq23(backlinkDomains.release, release))
+        and12(eq24(backlinkDomains.projectId, projectId), eq24(backlinkDomains.release, release))
       ).run();
       if (rows.length > 0) {
         const values = rows.map((r) => ({
-          id: crypto23.randomUUID(),
+          id: crypto24.randomUUID(),
           projectId,
           releaseSyncId: syncId,
           release,
@@ -15385,7 +15624,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       }
       const summary = computeSummary2(rows);
       tx.insert(backlinkSummaries).values({
-        id: crypto23.randomUUID(),
+        id: crypto24.randomUUID(),
         projectId,
         releaseSyncId: syncId,
         release,
@@ -15408,8 +15647,8 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       }).run();
     });
     const finishedAt = deps.now().toISOString();
-    db.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq23(runs.id, runId)).run();
-    log5.info("extract.completed", { runId, projectId, release, rows: rows.length });
+    db.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq24(runs.id, runId)).run();
+    log6.info("extract.completed", { runId, projectId, release, rows: rows.length });
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
     const finishedAt = deps.now().toISOString();
@@ -15417,8 +15656,8 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       status: RunStatuses.failed,
       error: errorMsg,
       finishedAt
-    }).where(eq23(runs.id, runId)).run();
-    log5.error("extract.failed", { runId, projectId, error: errorMsg });
+    }).where(eq24(runs.id, runId)).run();
+    log6.error("extract.failed", { runId, projectId, error: errorMsg });
     throw err;
   }
 }
@@ -15490,8 +15729,8 @@ var ProviderRegistry = class {
 
 // src/scheduler.ts
 import cron from "node-cron";
-import { eq as eq24 } from "drizzle-orm";
-var log6 = createLogger("Scheduler");
+import { eq as eq25 } from "drizzle-orm";
+var log7 = createLogger("Scheduler");
 var Scheduler = class {
   db;
   callbacks;
@@ -15502,16 +15741,16 @@ var Scheduler = class {
   }
   /** Load all enabled schedules from DB and register cron jobs. */
   start() {
-    const allSchedules = this.db.select().from(schedules).where(eq24(schedules.enabled, 1)).all();
+    const allSchedules = this.db.select().from(schedules).where(eq25(schedules.enabled, 1)).all();
     for (const schedule of allSchedules) {
       const missedRunAt = schedule.nextRunAt;
       this.registerCronTask(schedule);
       if (missedRunAt && new Date(missedRunAt) < /* @__PURE__ */ new Date()) {
-        log6.info("run.catch-up", { projectId: schedule.projectId, missedRunAt });
+        log7.info("run.catch-up", { projectId: schedule.projectId, missedRunAt });
         this.triggerRun(schedule.id, schedule.projectId);
       }
     }
-    log6.info("started", { scheduleCount: allSchedules.length });
+    log7.info("started", { scheduleCount: allSchedules.length });
   }
   /** Stop all cron tasks for graceful shutdown. */
   stop() {
@@ -15527,7 +15766,7 @@ var Scheduler = class {
       this.stopTask(projectId, existing, "Stopped");
       this.tasks.delete(projectId);
     }
-    const schedule = this.db.select().from(schedules).where(eq24(schedules.projectId, projectId)).get();
+    const schedule = this.db.select().from(schedules).where(eq25(schedules.projectId, projectId)).get();
     if (schedule && schedule.enabled === 1) {
       this.registerCronTask(schedule);
     }
@@ -15543,12 +15782,12 @@ var Scheduler = class {
   stopTask(projectId, task, verb) {
     task.stop();
     task.destroy();
-    log6.info(`task.${verb.toLowerCase()}`, { projectId });
+    log7.info(`task.${verb.toLowerCase()}`, { projectId });
   }
   registerCronTask(schedule) {
     const { id: scheduleId, projectId, cronExpr, timezone } = schedule;
     if (!cron.validate(cronExpr)) {
-      log6.error("cron.invalid", { projectId, cronExpr });
+      log7.error("cron.invalid", { projectId, cronExpr });
       return;
     }
     const task = cron.schedule(cronExpr, () => {
@@ -15560,24 +15799,24 @@ var Scheduler = class {
     this.db.update(schedules).set({
       nextRunAt: task.getNextRun()?.toISOString() ?? null,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq24(schedules.id, scheduleId)).run();
+    }).where(eq25(schedules.id, scheduleId)).run();
     const label = schedule.preset ?? cronExpr;
-    log6.info("cron.registered", { projectId, schedule: label, timezone });
+    log7.info("cron.registered", { projectId, schedule: label, timezone });
   }
   triggerRun(scheduleId, projectId) {
     try {
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const currentSchedule = this.db.select().from(schedules).where(eq24(schedules.id, scheduleId)).get();
+      const currentSchedule = this.db.select().from(schedules).where(eq25(schedules.id, scheduleId)).get();
       if (!currentSchedule || currentSchedule.enabled !== 1) {
-        log6.warn("schedule.stale", { scheduleId, projectId, msg: "schedule no longer exists or is disabled" });
+        log7.warn("schedule.stale", { scheduleId, projectId, msg: "schedule no longer exists or is disabled" });
         this.remove(projectId);
         return;
       }
       const task = this.tasks.get(projectId);
       const nextRunAt = task?.getNextRun()?.toISOString() ?? null;
-      const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
+      const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
       if (!project) {
-        log6.error("project.not-found", { projectId, msg: "skipping scheduled run" });
+        log7.error("project.not-found", { projectId, msg: "skipping scheduled run" });
         this.remove(projectId);
         return;
       }
@@ -15586,7 +15825,7 @@ var Scheduler = class {
       if (project.defaultLocation) {
         const loc = projectLocations.find((l) => l.label === project.defaultLocation);
         if (!loc) {
-          log6.warn("default-location.stale", { scheduleId, projectId, label: project.defaultLocation });
+          log7.warn("default-location.stale", { scheduleId, projectId, label: project.defaultLocation });
           return;
         }
         resolvedLocation = loc;
@@ -15600,11 +15839,11 @@ var Scheduler = class {
         location: locationLabel
       });
       if (queueResult.conflict) {
-        log6.info("run.skipped-active", { projectName: project.name, activeRunId: queueResult.activeRunId });
+        log7.info("run.skipped-active", { projectName: project.name, activeRunId: queueResult.activeRunId });
         this.db.update(schedules).set({
           nextRunAt,
           updatedAt: now
-        }).where(eq24(schedules.id, currentSchedule.id)).run();
+        }).where(eq25(schedules.id, currentSchedule.id)).run();
         return;
       }
       const runId = queueResult.runId;
@@ -15612,21 +15851,21 @@ var Scheduler = class {
         lastRunAt: now,
         nextRunAt,
         updatedAt: now
-      }).where(eq24(schedules.id, currentSchedule.id)).run();
+      }).where(eq25(schedules.id, currentSchedule.id)).run();
       const scheduleProviders = parseJsonColumn(currentSchedule.providers, []);
       const providers = scheduleProviders.length > 0 ? scheduleProviders : void 0;
-      log6.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
+      log7.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
       this.callbacks.onRunCreated(runId, projectId, providers, resolvedLocation);
     } catch (err) {
-      log6.error("trigger.error", { scheduleId, projectId, error: err instanceof Error ? err.message : String(err) });
+      log7.error("trigger.error", { scheduleId, projectId, error: err instanceof Error ? err.message : String(err) });
     }
   }
 };
 
 // src/notifier.ts
-import { eq as eq25, desc as desc10, and as and13, or as or2 } from "drizzle-orm";
-import crypto24 from "crypto";
-var log7 = createLogger("Notifier");
+import { eq as eq26, desc as desc11, and as and13, or as or2 } from "drizzle-orm";
+import crypto25 from "crypto";
+var log8 = createLogger("Notifier");
 var Notifier = class {
   db;
   serverUrl;
@@ -15636,26 +15875,26 @@ var Notifier = class {
   }
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId) {
-    log7.info("run.completed", { runId, projectId });
-    const notifs = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    log8.info("run.completed", { runId, projectId });
+    const notifs = this.db.select().from(notifications).where(eq26(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) {
-      log7.info("notifications.none-enabled", { projectId });
+      log8.info("notifications.none-enabled", { projectId });
       return;
     }
-    log7.info("notifications.found", { projectId, count: notifs.length });
-    const run = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    log8.info("notifications.found", { projectId, count: notifs.length });
+    const run = this.db.select().from(runs).where(eq26(runs.id, runId)).get();
     if (!run) {
-      log7.error("run.not-found", { runId, msg: "skipping notification dispatch" });
+      log8.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq26(projects.id, projectId)).get();
     if (!project) {
-      log7.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
+      log8.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
     }
     const transitions = this.computeTransitions(runId, projectId);
     const events = [];
-    log7.info("run.status", { runId: run.id, status: run.status, projectId });
+    log8.info("run.status", { runId: run.id, status: run.status, projectId });
     if (run.status === "completed" || run.status === "partial") {
       events.push("run.completed");
     }
@@ -15671,7 +15910,7 @@ var Notifier = class {
       if (!config.url) continue;
       const subscribedEvents = config.events;
       const matchingEvents = events.filter((e) => subscribedEvents.includes(e));
-      log7.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
+      log8.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
       if (matchingEvents.length === 0) continue;
       for (const event of matchingEvents) {
         const relevantTransitions = event === "citation.lost" ? lostTransitions : event === "citation.gained" ? gainedTransitions : transitions;
@@ -15695,11 +15934,11 @@ var Notifier = class {
     if (criticalInsights.length > 0) insightEvents.push("insight.critical");
     if (highInsights.length > 0) insightEvents.push("insight.high");
     if (insightEvents.length === 0) return;
-    const notifs = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    const notifs = this.db.select().from(notifications).where(eq26(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) return;
-    const run = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq26(runs.id, runId)).get();
     if (!run) return;
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq26(projects.id, projectId)).get();
     if (!project) return;
     for (const notif of notifs) {
       const config = parseJsonColumn(notif.config, { url: "", events: [] });
@@ -15731,10 +15970,10 @@ var Notifier = class {
   computeTransitions(runId, projectId) {
     const recentRuns = this.db.select().from(runs).where(
       and13(
-        eq25(runs.projectId, projectId),
-        or2(eq25(runs.status, "completed"), eq25(runs.status, "partial"))
+        eq26(runs.projectId, projectId),
+        or2(eq26(runs.status, "completed"), eq26(runs.status, "partial"))
       )
-    ).orderBy(desc10(runs.createdAt)).limit(2).all();
+    ).orderBy(desc11(runs.createdAt)).limit(2).all();
     if (recentRuns.length < 2) return [];
     const currentRunId = recentRuns[0].id;
     const previousRunId = recentRuns[1].id;
@@ -15744,12 +15983,12 @@ var Notifier = class {
       keyword: keywords.keyword,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(keywords, eq25(querySnapshots.keywordId, keywords.id)).where(eq25(querySnapshots.runId, currentRunId)).all();
+    }).from(querySnapshots).leftJoin(keywords, eq26(querySnapshots.keywordId, keywords.id)).where(eq26(querySnapshots.runId, currentRunId)).all();
     const previousSnapshots = this.db.select({
       keywordId: querySnapshots.keywordId,
       provider: querySnapshots.provider,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).where(eq25(querySnapshots.runId, previousRunId)).all();
+    }).from(querySnapshots).where(eq26(querySnapshots.runId, previousRunId)).all();
     const prevMap = /* @__PURE__ */ new Map();
     for (const s of previousSnapshots) {
       prevMap.set(`${s.keywordId}:${s.provider}`, s.citationState);
@@ -15773,23 +16012,23 @@ var Notifier = class {
     const targetLabel = redactNotificationUrl(url).urlDisplay;
     const targetCheck = await resolveWebhookTarget(url);
     if (!targetCheck.ok) {
-      log7.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
+      log8.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
       this.logDelivery(projectId, notificationId, payload.event, "failed", `SSRF: ${targetCheck.message}`);
       return;
     }
-    log7.info("webhook.send", { event: payload.event, url: targetLabel });
+    log8.info("webhook.send", { event: payload.event, url: targetLabel });
     const maxRetries = 3;
     const delays = [1e3, 4e3, 16e3];
     for (let attempt = 0; attempt < maxRetries; attempt++) {
       try {
         const response = await deliverWebhook(targetCheck.target, payload, webhookSecret);
         if (response.status >= 200 && response.status < 300) {
-          log7.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
+          log8.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
           this.logDelivery(projectId, notificationId, payload.event, "sent", null);
           return;
         }
         const errorDetail = response.error ?? `HTTP ${response.status}`;
-        log7.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
+        log8.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
         if (attempt === maxRetries - 1) {
           this.logDelivery(projectId, notificationId, payload.event, "failed", errorDetail);
         }
@@ -15797,7 +16036,7 @@ var Notifier = class {
         const errorDetail = err instanceof Error ? err.message : String(err);
         if (attempt === maxRetries - 1) {
           this.logDelivery(projectId, notificationId, payload.event, "failed", errorDetail);
-          log7.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
+          log8.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
         }
       }
       if (attempt < maxRetries - 1) {
@@ -15807,7 +16046,7 @@ var Notifier = class {
   }
   logDelivery(projectId, notificationId, event, status, error) {
     this.db.insert(auditLog).values({
-      id: crypto24.randomUUID(),
+      id: crypto25.randomUUID(),
       projectId,
       actor: "scheduler",
       action: `notification.${status}`,
@@ -15820,7 +16059,7 @@ var Notifier = class {
 };
 
 // src/run-coordinator.ts
-var log8 = createLogger("RunCoordinator");
+var log9 = createLogger("RunCoordinator");
 var RunCoordinator = class {
   constructor(notifier, intelligenceService, onInsightsGenerated, onAeroEvent) {
     this.notifier = notifier;
@@ -15842,31 +16081,31 @@ var RunCoordinator = class {
           try {
             await this.onInsightsGenerated(runId, projectId, result);
           } catch (err) {
-            log8.error("insight-webhook.failed", { runId, error: err instanceof Error ? err.message : String(err) });
+            log9.error("insight-webhook.failed", { runId, error: err instanceof Error ? err.message : String(err) });
           }
         }
       }
     } catch (err) {
-      log8.error("intelligence.failed", { runId, error: err instanceof Error ? err.message : String(err) });
+      log9.error("intelligence.failed", { runId, error: err instanceof Error ? err.message : String(err) });
     }
     try {
       await this.notifier.onRunCompleted(runId, projectId);
     } catch (err) {
-      log8.error("notifier.failed", { runId, error: err instanceof Error ? err.message : String(err) });
+      log9.error("notifier.failed", { runId, error: err instanceof Error ? err.message : String(err) });
     }
     if (this.onAeroEvent) {
       try {
         await this.onAeroEvent({ runId, projectId, insightCount, criticalOrHigh });
       } catch (err) {
-        log8.error("aero.failed", { runId, error: err instanceof Error ? err.message : String(err) });
+        log9.error("aero.failed", { runId, error: err instanceof Error ? err.message : String(err) });
       }
     }
   }
 };
 
 // src/agent/session-registry.ts
-import crypto26 from "crypto";
-import { eq as eq27 } from "drizzle-orm";
+import crypto27 from "crypto";
+import { eq as eq28 } from "drizzle-orm";
 
 // src/agent/session.ts
 import fs12 from "fs";
@@ -16085,8 +16324,8 @@ function buildSkillDocTools() {
 import { Type as Type2 } from "@sinclair/typebox";
 
 // src/agent/memory-store.ts
-import crypto25 from "crypto";
-import { and as and14, desc as desc11, eq as eq26, like, sql as sql9 } from "drizzle-orm";
+import crypto26 from "crypto";
+import { and as and14, desc as desc12, eq as eq27, like, sql as sql9 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto(row) {
@@ -16100,7 +16339,7 @@ function rowToDto(row) {
   };
 }
 function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq26(agentMemory.projectId, projectId)).orderBy(desc11(agentMemory.updatedAt));
+  const query = db.select().from(agentMemory).where(eq27(agentMemory.projectId, projectId)).orderBy(desc12(agentMemory.updatedAt));
   const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
   return rows.map(rowToDto);
 }
@@ -16114,7 +16353,7 @@ function upsertMemoryEntry(db, args) {
     throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto25.randomUUID();
+  const id = crypto26.randomUUID();
   db.insert(agentMemory).values({
     id,
     projectId: args.projectId,
@@ -16131,12 +16370,12 @@ function upsertMemoryEntry(db, args) {
       updatedAt: now
     }
   }).run();
-  const row = db.select().from(agentMemory).where(and14(eq26(agentMemory.projectId, args.projectId), eq26(agentMemory.key, args.key))).get();
+  const row = db.select().from(agentMemory).where(and14(eq27(agentMemory.projectId, args.projectId), eq27(agentMemory.key, args.key))).get();
   if (!row) throw new Error("memory upsert produced no row");
   return rowToDto(row);
 }
 function deleteMemoryEntry(db, projectId, key) {
-  const result = db.delete(agentMemory).where(and14(eq26(agentMemory.projectId, projectId), eq26(agentMemory.key, key))).run();
+  const result = db.delete(agentMemory).where(and14(eq27(agentMemory.projectId, projectId), eq27(agentMemory.key, key))).run();
   const changes = result.changes ?? 0;
   return changes > 0;
 }
@@ -16151,7 +16390,7 @@ function writeCompactionNote(db, args) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
-  const id = crypto25.randomUUID();
+  const id = crypto26.randomUUID();
   let inserted;
   db.transaction((tx) => {
     tx.insert(agentMemory).values({
@@ -16166,15 +16405,15 @@ function writeCompactionNote(db, args) {
     const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
     const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
       and14(
-        eq26(agentMemory.projectId, args.projectId),
+        eq27(agentMemory.projectId, args.projectId),
         like(agentMemory.key, `${sessionPrefix}%`)
       )
-    ).orderBy(desc11(agentMemory.updatedAt)).all();
+    ).orderBy(desc12(agentMemory.updatedAt)).all();
     const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
     if (stale.length > 0) {
       tx.delete(agentMemory).where(sql9`${agentMemory.id} IN (${sql9.join(stale.map((s) => sql9`${s}`), sql9`, `)})`).run();
     }
-    const row = tx.select().from(agentMemory).where(and14(eq26(agentMemory.projectId, args.projectId), eq26(agentMemory.key, key))).get();
+    const row = tx.select().from(agentMemory).where(and14(eq27(agentMemory.projectId, args.projectId), eq27(agentMemory.key, key))).get();
     if (row) inserted = rowToDto(row);
   });
   if (!inserted) throw new Error("compaction note write produced no row");
@@ -16802,7 +17041,7 @@ async function compactMessages(args) {
 }
 
 // src/agent/session-registry.ts
-var log9 = createLogger("SessionRegistry");
+var log10 = createLogger("SessionRegistry");
 var MAX_HYDRATE_NOTES = 20;
 var MAX_HYDRATE_BYTES = 32 * 1024;
 function escapeMemoryFragment(value) {
@@ -16851,7 +17090,7 @@ var SessionRegistry = class {
           modelProvider: effectiveProvider,
           modelId: effectiveModelId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(eq27(agentSessions.projectId, projectId)).run();
+        }).where(eq28(agentSessions.projectId, projectId)).run();
       }
       const agent2 = createAeroSession({
         projectName,
@@ -17033,13 +17272,13 @@ ${lines.join("\n")}
       agent.state.messages = result.messages;
       agent.state.systemPrompt = this.buildHydratedSystemPrompt(projectId, row.systemPrompt);
       this.save(projectName);
-      log9.info("compaction.completed", {
+      log10.info("compaction.completed", {
         projectName,
         removedCount: result.removedCount,
         summaryBytes: Buffer.byteLength(result.summary, "utf8")
       });
     } catch (err) {
-      log9.error("compaction.failed", {
+      log10.error("compaction.failed", {
         projectName,
         error: err instanceof Error ? err.message : String(err)
       });
@@ -17069,7 +17308,7 @@ ${lines.join("\n")}
       modelProvider: nextProvider,
       modelId: nextModelId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq27(agentSessions.projectId, projectId)).run();
+    }).where(eq28(agentSessions.projectId, projectId)).run();
   }
   /** Persist a session's transcript back to the DB. Call after any run settles. */
   save(projectName) {
@@ -17136,7 +17375,7 @@ ${lines.join("\n")}
       await agent.prompt(msgs);
       this.save(projectName);
     } catch (err) {
-      log9.error("drain.failed", {
+      log10.error("drain.failed", {
         projectName,
         error: err instanceof Error ? err.message : String(err)
       });
@@ -17231,17 +17470,17 @@ ${lines.join("\n")}
     return id;
   }
   tryResolveProjectId(projectName) {
-    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq27(projects.name, projectName)).get();
+    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq28(projects.name, projectName)).get();
     return row?.id;
   }
   loadRow(projectId) {
-    const row = this.opts.db.select().from(agentSessions).where(eq27(agentSessions.projectId, projectId)).get();
+    const row = this.opts.db.select().from(agentSessions).where(eq28(agentSessions.projectId, projectId)).get();
     return row ?? null;
   }
   insertRow(params) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     this.opts.db.insert(agentSessions).values({
-      id: crypto26.randomUUID(),
+      id: crypto27.randomUUID(),
       projectId: params.projectId,
       systemPrompt: params.systemPrompt,
       modelProvider: params.provider ?? params.modelProvider ?? AgentProviderIds.claude,
@@ -17254,14 +17493,14 @@ ${lines.join("\n")}
   }
   updateRow(projectId, patch) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq27(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq28(agentSessions.projectId, projectId)).run();
   }
 };
 
 // src/agent/agent-routes.ts
-import { eq as eq28 } from "drizzle-orm";
+import { eq as eq29 } from "drizzle-orm";
 function resolveProject2(db, name) {
-  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq28(projects.name, name)).get();
+  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq29(projects.name, name)).get();
   if (!row) throw notFound("project", name);
   return row;
 }
@@ -17270,7 +17509,7 @@ function registerAgentRoutes(app, opts) {
     "/projects/:name/agent/transcript",
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
-      const row = opts.db.select().from(agentSessions).where(eq28(agentSessions.projectId, project.id)).get();
+      const row = opts.db.select().from(agentSessions).where(eq29(agentSessions.projectId, project.id)).get();
       if (!row) {
         return { messages: [], modelProvider: null, modelId: null, updatedAt: null };
       }
@@ -17294,7 +17533,7 @@ function registerAgentRoutes(app, opts) {
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
       opts.sessionRegistry.reset(project.name);
-      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq28(agentSessions.projectId, project.id)).run();
+      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq29(agentSessions.projectId, project.id)).run();
       return { status: "reset" };
     }
   );
@@ -17805,6 +18044,9 @@ var ApiClient = class {
   async bingInspectUrl(project, url) {
     return this.request("POST", `/projects/${encodeURIComponent(project)}/bing/inspect-url`, { url });
   }
+  async bingInspectSitemap(project, body) {
+    return this.request("POST", `/projects/${encodeURIComponent(project)}/bing/inspect-sitemap`, body ?? {});
+  }
   async bingRequestIndexing(project, body) {
     return this.request("POST", `/projects/${encodeURIComponent(project)}/bing/request-indexing`, body);
   }
@@ -18111,7 +18353,7 @@ function formatAuditFactorScore(factor) {
 }
 
 // src/snapshot-service.ts
-var log10 = createLogger("Snapshot");
+var log11 = createLogger("Snapshot");
 var ANALYSIS_PROVIDER_PRIORITY = ["openai", "claude", "gemini", "perplexity", "local"];
 var SNAPSHOT_QUERY_COUNT = 6;
 var ProviderExecutionGate2 = class {
@@ -18254,7 +18496,7 @@ var SnapshotService = class {
       return mapAuditReport(report);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      log10.warn("audit.failed", { homepageUrl, error: message });
+      log11.warn("audit.failed", { homepageUrl, error: message });
       return {
         url: homepageUrl,
         finalUrl: homepageUrl,
@@ -18284,7 +18526,7 @@ var SnapshotService = class {
           phrases: parsedPhrases
         };
       } catch (err) {
-        log10.warn("profile.generation-failed", {
+        log11.warn("profile.generation-failed", {
           domain: ctx.domain,
           provider: ctx.analysisProvider.adapter.name,
           error: err instanceof Error ? err.message : String(err)
@@ -18426,7 +18668,7 @@ var SnapshotService = class {
         recommendedActions: uniqueStrings(parsed.recommendedActions ?? []).slice(0, 4)
       };
     } catch (err) {
-      log10.warn("response.analysis-failed", {
+      log11.warn("response.analysis-failed", {
         provider: ctx.analysisProvider.adapter.name,
         error: err instanceof Error ? err.message : String(err)
       });
@@ -18711,7 +18953,7 @@ function clipText(value, length) {
 // src/server.ts
 var _require2 = createRequire3(import.meta.url);
 var { version: PKG_VERSION } = _require2("../package.json");
-var log11 = createLogger("Server");
+var log12 = createLogger("Server");
 var DEFAULT_QUOTA = {
   maxConcurrency: 2,
   maxRequestsPerMinute: 10,
@@ -18742,7 +18984,7 @@ function summarizeProviderConfig(provider, config) {
   };
 }
 function hashApiKey(key) {
-  return crypto27.createHash("sha256").update(key).digest("hex");
+  return crypto28.createHash("sha256").update(key).digest("hex");
 }
 function parseCookies2(header) {
   if (!header) return {};
@@ -18798,7 +19040,7 @@ function applyLegacyCredentials(rows, config) {
   }
   if (migratedGoogle > 0) {
     saveConfigPatch({ google: config.google });
-    log11.info("credentials.migrated", { type: "google", count: migratedGoogle });
+    log12.info("credentials.migrated", { type: "google", count: migratedGoogle });
   }
   let migratedGa4 = 0;
   for (const row of rows.ga4) {
@@ -18816,7 +19058,7 @@ function applyLegacyCredentials(rows, config) {
   }
   if (migratedGa4 > 0) {
     saveConfigPatch({ ga4: config.ga4 });
-    log11.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
+    log12.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
   }
 }
 async function createServer(opts) {
@@ -18848,11 +19090,11 @@ async function createServer(opts) {
     applyLegacyCredentials(legacyRows, opts.config);
     dropLegacyCredentialColumns(opts.db);
   } catch (err) {
-    log11.warn("credentials.migration.failed", {
+    log12.warn("credentials.migration.failed", {
       error: err instanceof Error ? err.message : String(err)
     });
   }
-  log11.info("providers.configured", { providers: Object.keys(providers).filter((k) => {
+  log12.info("providers.configured", { providers: Object.keys(providers).filter((k) => {
     const p = providers[k];
     return p?.apiKey || p?.baseUrl || p?.vertexProject;
   }) });
@@ -18900,7 +19142,7 @@ async function createServer(opts) {
     intelligenceService,
     (runId, projectId, result) => notifier.dispatchInsightWebhooks(runId, projectId, result),
     async ({ runId, projectId, insightCount, criticalOrHigh }) => {
-      const project = opts.db.select({ name: projects.name }).from(projects).where(eq29(projects.id, projectId)).get();
+      const project = opts.db.select({ name: projects.name }).from(projects).where(eq30(projects.id, projectId)).get();
       if (!project) return;
       sessionRegistry.queueFollowUp(project.name, {
         role: "user",
@@ -18994,7 +19236,7 @@ async function createServer(opts) {
       return removed;
     }
   };
-  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto27.randomBytes(32).toString("hex");
+  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto28.randomBytes(32).toString("hex");
   const googleConnectionStore = {
     listConnections: (domain) => listGoogleConnections(opts.config, domain),
     getConnection: (domain, connectionType) => getGoogleConnection(opts.config, domain, connectionType),
@@ -19040,11 +19282,11 @@ async function createServer(opts) {
   const apiPrefix = basePath ? `${basePath}api/v1` : "/api/v1";
   if (opts.config.apiKey) {
     const keyHash = hashApiKey(opts.config.apiKey);
-    const existing = opts.db.select().from(apiKeys).where(eq29(apiKeys.keyHash, keyHash)).get();
+    const existing = opts.db.select().from(apiKeys).where(eq30(apiKeys.keyHash, keyHash)).get();
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
-        id: `key_${crypto27.randomBytes(8).toString("hex")}`,
+        id: `key_${crypto28.randomBytes(8).toString("hex")}`,
         name: "default",
         keyHash,
         keyPrefix: prefix,
@@ -19068,7 +19310,7 @@ async function createServer(opts) {
   };
   const createSession = (apiKeyId) => {
     pruneExpiredSessions();
-    const sessionId = crypto27.randomBytes(32).toString("hex");
+    const sessionId = crypto28.randomBytes(32).toString("hex");
     sessions.set(sessionId, {
       apiKeyId,
       expiresAt: Date.now() + SESSION_TTL_MS
@@ -19092,7 +19334,7 @@ async function createServer(opts) {
   };
   const getDefaultApiKey = () => {
     if (!opts.config.apiKey) return void 0;
-    return opts.db.select().from(apiKeys).where(eq29(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
+    return opts.db.select().from(apiKeys).where(eq30(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
   };
   const createPasswordSession = (reply) => {
     const key = getDefaultApiKey();
@@ -19149,12 +19391,12 @@ async function createServer(opts) {
       return reply.send({ authenticated: true });
     }
     if (apiKey) {
-      const key = opts.db.select().from(apiKeys).where(eq29(apiKeys.keyHash, hashApiKey(apiKey))).get();
+      const key = opts.db.select().from(apiKeys).where(eq30(apiKeys.keyHash, hashApiKey(apiKey))).get();
       if (!key || key.revokedAt) {
         const err2 = authInvalid();
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
-      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq29(apiKeys.id, key.id)).run();
+      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq30(apiKeys.id, key.id)).run();
       const sessionId = createSession(key.id);
       reply.header("set-cookie", serializeSessionCookie({
         name: SESSION_COOKIE_NAME,
@@ -19242,7 +19484,7 @@ async function createServer(opts) {
         deps: {
           enqueueAutoExtract: ({ projectId, release: r }) => {
             const now = (/* @__PURE__ */ new Date()).toISOString();
-            const runId = crypto27.randomUUID();
+            const runId = crypto28.randomUUID();
             opts.db.insert(runs).values({
               id: runId,
               projectId,
@@ -19304,6 +19546,14 @@ async function createServer(opts) {
     googleSettingsSummary,
     bingSettingsSummary,
     bingConnectionStore,
+    onBingInspectSitemapRequested: (runId, projectId, inspectOpts) => {
+      executeBingInspectSitemap(opts.db, runId, projectId, {
+        ...inspectOpts,
+        config: opts.config
+      }).catch((err) => {
+        app.log.error({ runId, err }, "Bing inspect sitemap failed");
+      });
+    },
     wordpressConnectionStore,
     ga4CredentialStore,
     onRunCreated: (runId, projectId, providers2, location) => {
@@ -19368,7 +19618,7 @@ async function createServer(opts) {
         const targetProjectIds = affectedProjectIds.length > 0 ? affectedProjectIds : [null];
         const createdAt = (/* @__PURE__ */ new Date()).toISOString();
         opts.db.insert(auditLog).values(targetProjectIds.map((projectId) => ({
-          id: crypto27.randomUUID(),
+          id: crypto28.randomUUID(),
           projectId,
           actor: "api",
           action: existing ? "provider.updated" : "provider.created",