@ainyc/canonry 4.101.0 → 4.102.0

package/dist/{chunk-HUL5FUBD.js → chunk-EOQXB63S.js}

@@ -589,6 +589,11 @@ var apiKeyDtoSchema = z4.object({
   /** First 9 chars of the raw token (`cnry_` + 4 hex). Safe to display. */
   keyPrefix: z4.string(),
   scopes: z4.array(z4.string()),
+  /**
+   * The project this key is scoped to, or `null` for a full-instance key. A
+   * scoped key may only read/write its own project (enforced server-side).
+   */
+  projectId: z4.string().nullable(),
   /**
    * Server-derived convenience flag: `true` when this key is read-only (carries
    * the `read` scope and no write-granting scope), in which case the API rejects
@@ -610,7 +615,13 @@ var createApiKeyRequestSchema = z4.object({
    * what `canonry init` writes for the root key). When provided it must be a
    * non-empty list — an empty array would mint a key that can do nothing.
    */
-  scopes: z4.array(z4.string()).min(1).optional()
+  scopes: z4.array(z4.string()).min(1).optional(),
+  /**
+   * Bind the new key to a SINGLE project (by project id). Omit for a
+   * full-instance key (the default). A scoped key may only read/write that
+   * project; the server validates the id exists at creation time.
+   */
+  projectId: z4.string().optional()
 });
 var createdApiKeyDtoSchema = apiKeyDtoSchema.extend({
   key: z4.string()
@@ -5378,6 +5389,16 @@ function buildEmbedClientConfig(resolved) {
   return client;
 }
 
+// ../contracts/src/telemetry.ts
+var GHOST_TELEMETRY_TEST_LOCATIONS = /* @__PURE__ */ new Set(["nyc", "lax", "chi"]);
+function isGhostTelemetryEvent(eventName, properties) {
+  if (eventName !== "run.completed" && eventName !== "run.aborted") return false;
+  if (!properties) return false;
+  if (properties.providerCount !== 0) return false;
+  const location = typeof properties.location === "string" ? properties.location.trim().toLowerCase() : "";
+  return GHOST_TELEMETRY_TEST_LOCATIONS.has(location);
+}
+
 export {
   __export,
   apiKeyDtoSchema,
@@ -5686,5 +5707,6 @@ export {
   splitList,
   parseOriginList,
   frameAncestorsHeaderValue,
-  buildEmbedClientConfig
+  buildEmbedClientConfig,
+  isGhostTelemetryEvent
 };

package/dist/cli.js

@@ -29,7 +29,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-O3SFVGDF.js";
+} from "./chunk-3PVCILSN.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -46,7 +46,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-2YPVK75M.js";
+} from "./chunk-2FUODJQR.js";
 import {
   apiKeys,
   createClient,
@@ -54,7 +54,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-AV3DHH6B.js";
+} from "./chunk-B2H2RRIT.js";
 import {
   BacklinkSources,
   CcReleaseSyncStatuses,
@@ -80,7 +80,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-HUL5FUBD.js";
+} from "./chunk-EOQXB63S.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -5761,6 +5761,10 @@ async function createApiKey(opts) {
   const body = { name: opts.name };
   const scopes = opts.readOnly ? [READ_ONLY_SCOPE] : explicitScopes;
   if (scopes) body.scopes = scopes;
+  if (opts.project) {
+    const proj = await client.getProject(opts.project);
+    body.projectId = proj.id;
+  }
   const created = await client.createApiKey(body);
   if (isMachineFormat(opts.format)) {
     console.log(JSON.stringify(created, null, 2));
@@ -5772,6 +5776,7 @@ async function createApiKey(opts) {
   console.log(`  Prefix:    ${created.keyPrefix}`);
   console.log(`  Scopes:    ${created.scopes.join(", ")}`);
   console.log(`  Read-only: ${created.readOnly ? "yes" : "no"}`);
+  console.log(`  Project:   ${opts.project ?? "(full instance)"}`);
   console.log("\nSave this now \u2014 it will not be shown again.");
 }
 async function showApiKeySelf(format) {
@@ -5807,16 +5812,17 @@ var KEYS_CLI_COMMANDS = [
   },
   {
     path: ["key", "create"],
-    usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
+    usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--project <name>] [--format json]",
     options: {
       name: stringOption(),
       scope: multiStringOption(),
-      "read-only": { type: "boolean" }
+      "read-only": { type: "boolean" },
+      project: stringOption()
     },
     run: async (input) => {
       const name = requireStringOption(input, "name", {
         command: "key.create",
-        usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
+        usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--project <name>] [--format json]",
         message: "--name is required"
       });
       const raw = getStringArray(input.values, "scope") ?? [];
@@ -5825,6 +5831,7 @@ var KEYS_CLI_COMMANDS = [
         name,
         scopes: scopes.length > 0 ? scopes : void 0,
         readOnly: getBoolean(input.values, "read-only"),
+        project: getString(input.values, "project"),
         format: input.format
       });
     }
@@ -10556,6 +10563,7 @@ var DEFAULT_AGENT_MODELS = {
 };
 async function initCommand(opts) {
   const format = opts?.format ?? "text";
+  const primaryNextStep = "canonry serve";
   if (!isMachineFormat(format)) {
     console.log("Initializing canonry...\n");
   }
@@ -10756,6 +10764,7 @@ async function initCommand(opts) {
       skillsTip,
       mcp: mcpSummary,
       mcpTip,
+      primaryNextStep,
       nextSteps
     }, null, 2));
   } else {
@@ -10804,6 +10813,7 @@ ${mcpTip}`);
   }
   if (!isMachineFormat(format)) {
     showFirstRunNotice();
+    console.log("\nNext: canonry serve to open the dashboard, or canonry settings provider gemini --api-key <key> to configure Gemini.");
     console.log("\nNext steps:");
     for (const line of nextSteps) {
       console.log(`  ${line}`);
@@ -10829,6 +10839,7 @@ function buildNextSteps() {
     "",
     "   The wizard walks through project \u2192 queries \u2192 competitors \u2192 first sweep",
     "   in 5 guided steps and shows your first results inline.",
+    "   For remote/exposed hosts, complete dashboard password setup from loopback first.",
     "",
     "Prefer the terminal? The same flow as CLI commands:",
     "",
@@ -10916,6 +10927,10 @@ Received ${signal}, stopping server...`);
     } else {
       console.log(`
 Canonry server running at ${url}`);
+      console.log(`Open ${url}/setup to finish onboarding and run your first visibility check.`);
+      if (host === "0.0.0.0") {
+        console.log("First-run dashboard password setup is unauthenticated only on loopback; complete setup from this machine first or use a bearer cnry_... key.");
+      }
       console.log("Press Ctrl+C to stop.\n");
       const nudge = getMissingUserSkillsNudge(process.env.HOME);
       if (nudge) process.stderr.write(`${nudge.message}

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-O3SFVGDF.js";
+} from "./chunk-3PVCILSN.js";
 import {
   loadConfig
-} from "./chunk-2YPVK75M.js";
-import "./chunk-AV3DHH6B.js";
-import "./chunk-HUL5FUBD.js";
+} from "./chunk-2FUODJQR.js";
+import "./chunk-B2H2RRIT.js";
+import "./chunk-EOQXB63S.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-R6QJ3KC2.js → intelligence-service-RC4BY5HF.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-AV3DHH6B.js";
-import "./chunk-HUL5FUBD.js";
+} from "./chunk-B2H2RRIT.js";
+import "./chunk-EOQXB63S.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-2YPVK75M.js";
+} from "./chunk-2FUODJQR.js";
 import {
   isReadOnlyKey
-} from "./chunk-HUL5FUBD.js";
+} from "./chunk-EOQXB63S.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.101.0",
+  "version": "4.102.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -63,32 +63,32 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",
     "build:web": "tsx build-web.ts",
     "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "vitest run",
+    "test": "vitest run --config ../../vitest.package.config.ts",
     "lint": "eslint src/ test/"
   }
 }