@ainyc/canonry 4.100.1 → 4.102.0

package/dist/{chunk-JF7EXHGA.js → chunk-EOQXB63S.js}

@@ -589,6 +589,11 @@ var apiKeyDtoSchema = z4.object({
   /** First 9 chars of the raw token (`cnry_` + 4 hex). Safe to display. */
   keyPrefix: z4.string(),
   scopes: z4.array(z4.string()),
+  /**
+   * The project this key is scoped to, or `null` for a full-instance key. A
+   * scoped key may only read/write its own project (enforced server-side).
+   */
+  projectId: z4.string().nullable(),
   /**
    * Server-derived convenience flag: `true` when this key is read-only (carries
    * the `read` scope and no write-granting scope), in which case the API rejects
@@ -610,7 +615,13 @@ var createApiKeyRequestSchema = z4.object({
    * what `canonry init` writes for the root key). When provided it must be a
    * non-empty list — an empty array would mint a key that can do nothing.
    */
-  scopes: z4.array(z4.string()).min(1).optional()
+  scopes: z4.array(z4.string()).min(1).optional(),
+  /**
+   * Bind the new key to a SINGLE project (by project id). Omit for a
+   * full-instance key (the default). A scoped key may only read/write that
+   * project; the server validates the id exists at creation time.
+   */
+  projectId: z4.string().optional()
 });
 var createdApiKeyDtoSchema = apiKeyDtoSchema.extend({
   key: z4.string()
@@ -2531,6 +2542,11 @@ var providerMetricSchema = z19.object({
   mentionRate: z19.number(),
   mentionedCount: z19.number().int()
 });
+var mentionShareBucketMetricSchema = z19.object({
+  rate: z19.number().nullable(),
+  projectMentionSnapshots: z19.number().int().nonnegative(),
+  competitorMentionSnapshots: z19.number().int().nonnegative()
+});
 var timeBucketSchema = z19.object({
   startDate: z19.string(),
   endDate: z19.string(),
@@ -2540,6 +2556,7 @@ var timeBucketSchema = z19.object({
   queryCount: z19.number().int(),
   mentionRate: z19.number(),
   mentionedCount: z19.number().int(),
+  mentionShare: mentionShareBucketMetricSchema,
   byProvider: z19.record(z19.string(), providerMetricSchema)
 });
 var queryChangeEventSchema = z19.object({
@@ -5372,6 +5389,16 @@ function buildEmbedClientConfig(resolved) {
   return client;
 }
 
+// ../contracts/src/telemetry.ts
+var GHOST_TELEMETRY_TEST_LOCATIONS = /* @__PURE__ */ new Set(["nyc", "lax", "chi"]);
+function isGhostTelemetryEvent(eventName, properties) {
+  if (eventName !== "run.completed" && eventName !== "run.aborted") return false;
+  if (!properties) return false;
+  if (properties.providerCount !== 0) return false;
+  const location = typeof properties.location === "string" ? properties.location.trim().toLowerCase() : "";
+  return GHOST_TELEMETRY_TEST_LOCATIONS.has(location);
+}
+
 export {
   __export,
   apiKeyDtoSchema,
@@ -5680,5 +5707,6 @@ export {
   splitList,
   parseOriginList,
   frameAncestorsHeaderValue,
-  buildEmbedClientConfig
+  buildEmbedClientConfig,
+  isGhostTelemetryEvent
 };

package/dist/cli.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node --import tsx
 import {
+  AERO_TOOL_PROFILES,
   backfillAiReferralPaths,
   backfillAiReferralPathsCommand,
   backfillAnswerMentionsCommand,
@@ -18,6 +19,7 @@ import {
   getMissingUserSkillsNudge,
   getOrCreateAnonymousId,
   installSkills,
+  isAeroToolProfile,
   isFirstRun,
   isTelemetryEnabled,
   listAgentProviders,
@@ -27,7 +29,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-ALJSES3X.js";
+} from "./chunk-3PVCILSN.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -44,7 +46,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-IDI6LMYL.js";
+} from "./chunk-2FUODJQR.js";
 import {
   apiKeys,
   createClient,
@@ -52,7 +54,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-YBIT5O62.js";
+} from "./chunk-B2H2RRIT.js";
 import {
   BacklinkSources,
   CcReleaseSyncStatuses,
@@ -78,7 +80,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-JF7EXHGA.js";
+} from "./chunk-EOQXB63S.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -5759,6 +5761,10 @@ async function createApiKey(opts) {
   const body = { name: opts.name };
   const scopes = opts.readOnly ? [READ_ONLY_SCOPE] : explicitScopes;
   if (scopes) body.scopes = scopes;
+  if (opts.project) {
+    const proj = await client.getProject(opts.project);
+    body.projectId = proj.id;
+  }
   const created = await client.createApiKey(body);
   if (isMachineFormat(opts.format)) {
     console.log(JSON.stringify(created, null, 2));
@@ -5770,6 +5776,7 @@ async function createApiKey(opts) {
   console.log(`  Prefix:    ${created.keyPrefix}`);
   console.log(`  Scopes:    ${created.scopes.join(", ")}`);
   console.log(`  Read-only: ${created.readOnly ? "yes" : "no"}`);
+  console.log(`  Project:   ${opts.project ?? "(full instance)"}`);
   console.log("\nSave this now \u2014 it will not be shown again.");
 }
 async function showApiKeySelf(format) {
@@ -5805,16 +5812,17 @@ var KEYS_CLI_COMMANDS = [
   },
   {
     path: ["key", "create"],
-    usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
+    usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--project <name>] [--format json]",
     options: {
       name: stringOption(),
       scope: multiStringOption(),
-      "read-only": { type: "boolean" }
+      "read-only": { type: "boolean" },
+      project: stringOption()
     },
     run: async (input) => {
       const name = requireStringOption(input, "name", {
         command: "key.create",
-        usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
+        usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--project <name>] [--format json]",
         message: "--name is required"
       });
       const raw = getStringArray(input.values, "scope") ?? [];
@@ -5823,6 +5831,7 @@ var KEYS_CLI_COMMANDS = [
         name,
         scopes: scopes.length > 0 ? scopes : void 0,
         readOnly: getBoolean(input.values, "read-only"),
+        project: getString(input.values, "project"),
         format: input.format
       });
     }
@@ -10554,6 +10563,7 @@ var DEFAULT_AGENT_MODELS = {
 };
 async function initCommand(opts) {
   const format = opts?.format ?? "text";
+  const primaryNextStep = "canonry serve";
   if (!isMachineFormat(format)) {
     console.log("Initializing canonry...\n");
   }
@@ -10754,6 +10764,7 @@ async function initCommand(opts) {
       skillsTip,
       mcp: mcpSummary,
       mcpTip,
+      primaryNextStep,
       nextSteps
     }, null, 2));
   } else {
@@ -10802,6 +10813,7 @@ ${mcpTip}`);
   }
   if (!isMachineFormat(format)) {
     showFirstRunNotice();
+    console.log("\nNext: canonry serve to open the dashboard, or canonry settings provider gemini --api-key <key> to configure Gemini.");
     console.log("\nNext steps:");
     for (const line of nextSteps) {
       console.log(`  ${line}`);
@@ -10827,6 +10839,7 @@ function buildNextSteps() {
     "",
     "   The wizard walks through project \u2192 queries \u2192 competitors \u2192 first sweep",
     "   in 5 guided steps and shows your first results inline.",
+    "   For remote/exposed hosts, complete dashboard password setup from loopback first.",
     "",
     "Prefer the terminal? The same flow as CLI commands:",
     "",
@@ -10914,6 +10927,10 @@ Received ${signal}, stopping server...`);
     } else {
       console.log(`
 Canonry server running at ${url}`);
+      console.log(`Open ${url}/setup to finish onboarding and run your first visibility check.`);
+      if (host === "0.0.0.0") {
+        console.log("First-run dashboard password setup is unauthenticated only on loopback; complete setup from this machine first or use a bearer cnry_... key.");
+      }
       console.log("Press Ctrl+C to stop.\n");
       const nudge = getMissingUserSkillsNudge(process.env.HOME);
       if (nudge) process.stderr.write(`${nudge.message}
@@ -12662,7 +12679,8 @@ async function agentAsk(opts) {
         prompt: opts.prompt,
         provider: opts.provider,
         modelId: opts.modelId,
-        scope: opts.scope ?? "all"
+        scope: opts.scope ?? "all",
+        ...opts.profile ? { profile: opts.profile } : {}
       },
       controller.signal
     );
@@ -12928,14 +12946,15 @@ var AGENT_ASK_SCOPES = ["all", "read-only"];
 var AGENT_CLI_COMMANDS = [
   {
     path: ["agent", "ask"],
-    usage: `canonry agent ask <project> "<prompt>" [--provider ${listAgentProviders().join("|")}] [--model <id>] [--scope all|read-only] [--format json]`,
+    usage: `canonry agent ask <project> "<prompt>" [--provider ${listAgentProviders().join("|")}] [--model <id>] [--scope all|read-only] [--profile default|ads-operator] [--format json]`,
     options: {
       provider: stringOption(),
       model: stringOption(),
-      scope: stringOption()
+      scope: stringOption(),
+      profile: stringOption()
     },
     run: async (input) => {
-      const usage = `canonry agent ask <project> "<prompt>" [--provider ${listAgentProviders().join("|")}] [--model <id>] [--scope all|read-only] [--format json]`;
+      const usage = `canonry agent ask <project> "<prompt>" [--provider ${listAgentProviders().join("|")}] [--model <id>] [--scope all|read-only] [--profile default|ads-operator] [--format json]`;
       const project = requireProject(input, "agent.ask", usage);
       const prompt2 = input.positionals.slice(1).join(" ").trim();
       if (!prompt2) {
@@ -12974,12 +12993,26 @@ Usage: ${usage}`, {
           }
         });
       }
+      const profileInput = getString(input.values, "profile");
+      if (profileInput && !isAeroToolProfile(profileInput)) {
+        throw usageError(`Error: --profile must be one of: ${AERO_TOOL_PROFILES.join(", ")}
+Usage: ${usage}`, {
+          message: `--profile must be one of: ${AERO_TOOL_PROFILES.join(", ")}`,
+          details: {
+            command: "agent.ask",
+            usage,
+            profile: profileInput,
+            validProfiles: AERO_TOOL_PROFILES
+          }
+        });
+      }
       await agentAsk({
         project,
         prompt: prompt2,
         provider: coerceAgentProvider(providerInput),
         modelId: getString(input.values, "model"),
         scope: scopeInput,
+        profile: profileInput,
         format: input.format
       });
     }

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-ALJSES3X.js";
+} from "./chunk-3PVCILSN.js";
 import {
   loadConfig
-} from "./chunk-IDI6LMYL.js";
-import "./chunk-YBIT5O62.js";
-import "./chunk-JF7EXHGA.js";
+} from "./chunk-2FUODJQR.js";
+import "./chunk-B2H2RRIT.js";
+import "./chunk-EOQXB63S.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-TWCEKVKZ.js → intelligence-service-RC4BY5HF.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-YBIT5O62.js";
-import "./chunk-JF7EXHGA.js";
+} from "./chunk-B2H2RRIT.js";
+import "./chunk-EOQXB63S.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-IDI6LMYL.js";
+} from "./chunk-2FUODJQR.js";
 import {
   isReadOnlyKey
-} from "./chunk-JF7EXHGA.js";
+} from "./chunk-EOQXB63S.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.100.1",
+  "version": "4.102.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -63,32 +63,32 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
+    "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
-    "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",
     "build:web": "tsx build-web.ts",
     "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "vitest run",
+    "test": "vitest run --config ../../vitest.package.config.ts",
     "lint": "eslint src/ test/"
   }
 }