@ainyc/canonry 4.104.0 → 4.106.0

package/assets/assets/{trash-2-CA_L6uGC.js → trash-2-CgxrJFpf.js}

@@ -1 +1 @@
-import{c}from"./index-avJiga1P.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};
+import{c}from"./index-wC-7udKS.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-avJiga1P.js"></script>
+    <script type="module" crossorigin src="./assets/index-wC-7udKS.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Be8JdV5M.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-CQ77EO2y.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-C9EZkgbP.js">

package/dist/{chunk-GIKNEXFE.js → chunk-2AWATO4I.js}

@@ -10,7 +10,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-23DCY7DL.js";
+} from "./chunk-VGMTLUUM.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -115,7 +115,7 @@ import {
   siteAuditPages,
   siteAuditSnapshots,
   usageCounters
-} from "./chunk-GNMZTR6Y.js";
+} from "./chunk-F3MKVMS5.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -147,7 +147,6 @@ import {
   agentMemoryUpsertRequestSchema,
   authInvalid,
   authRequired,
-  buildEmbedClientConfig,
   buildRunErrorFromMessages,
   classifySkillFile,
   coerceSkillManifest,
@@ -158,6 +157,7 @@ import {
   dollarsToMicros,
   effectiveBrandNames,
   effectiveDomains,
+  embedClientConfigForRequest,
   factorStatusFromScore,
   frameAncestorsHeaderValue,
   hostOf,
@@ -165,18 +165,20 @@ import {
   isBrowserProvider,
   isGhostTelemetryEvent,
   isRetryableHttpError,
+  normalizeIdTokens,
   normalizeUrlPath,
   notFound,
   parseOriginList,
   providerError,
   resolveSnapshotRequestQueries,
+  serializeForInlineScript,
   serializeRunError,
   skillsClientSchema,
   splitList,
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-Q7FFDQU4.js";
+} from "./chunk-VOR5ZTUU.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -2756,26 +2758,17 @@ function resolveEmbedConfig(env, config) {
   const enabled = rawEnabled ? rawEnabled === "1" || rawEnabled.toLowerCase() === "true" : embed?.enabled === true;
   const allowedOrigins = env.CANONRY_EMBED_ORIGINS !== void 0 ? parseOriginList(env.CANONRY_EMBED_ORIGINS) : parseOriginList(embed?.allowOrigins);
   const rawViews = env.CANONRY_EMBED_VIEWS !== void 0 ? splitList(env.CANONRY_EMBED_VIEWS) : splitList(embed?.views);
-  const views = normalizeViews(rawViews);
+  const views = normalizeIdTokens(rawViews);
+  const rawProjectTabs = env.CANONRY_EMBED_PROJECT_TABS !== void 0 ? splitList(env.CANONRY_EMBED_PROJECT_TABS) : splitList(embed?.projectTabs);
+  const projectTabs = normalizeIdTokens(rawProjectTabs);
   return {
     enabled,
     allowedOrigins,
     ...views ? { views } : {},
+    ...projectTabs ? { projectTabs } : {},
     ...embed?.theme ? { theme: embed.theme } : {}
   };
 }
-function normalizeViews(raw) {
-  if (raw.length === 0) return void 0;
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const view of raw) {
-    const id = view.toLowerCase();
-    if (seen.has(id)) continue;
-    seen.add(id);
-    out.push(id);
-  }
-  return out.length > 0 ? out : void 0;
-}
 
 // src/agent-config.ts
 function resolveAgentEnabled(env, config) {
@@ -5513,6 +5506,42 @@ import crypto13 from "crypto";
 import { and as and9, eq as eq11 } from "drizzle-orm";
 var log12 = createLogger("DiscoveryRun");
 var DEFAULT_SEED_COUNT = 30;
+var EMBED_RETRY_MAX_RETRIES = 3;
+var EMBED_RETRY_MAX_DELAY_MS = 1e4;
+var EMBED_ATTEMPT_TIMEOUT_MS = 6e4;
+function withAttemptTimeout(promise, timeoutMs, label) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(
+      () => reject(new Error(`${label} timed out after ${timeoutMs}ms`)),
+      timeoutMs
+    );
+    promise.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve(value);
+      },
+      (err) => {
+        clearTimeout(timer);
+        reject(err instanceof Error ? err : new Error(String(err)));
+      }
+    );
+  });
+}
+async function embedWithRetry(fn, opts = {}) {
+  const attemptTimeoutMs = opts.attemptTimeoutMs ?? EMBED_ATTEMPT_TIMEOUT_MS;
+  return withRetry(
+    () => withAttemptTimeout(fn(), attemptTimeoutMs, "Discovery embedding call"),
+    {
+      maxRetries: opts.maxRetries ?? EMBED_RETRY_MAX_RETRIES,
+      isRetryable: isRetryableHttpError,
+      maxDelayMs: EMBED_RETRY_MAX_DELAY_MS,
+      sleep: opts.sleep,
+      onRetry: opts.onRetry ?? (({ attempt, delayMs }) => {
+        log12.warn("discovery.embed.retry", { attempt, delayMs });
+      })
+    }
+  );
+}
 var QUERIES_PER_INTENT_BUCKET = 6;
 async function executeDiscoveryRun(opts) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -5545,6 +5574,7 @@ async function executeDiscoveryRun(opts) {
       icpDescription: opts.icpDescription,
       dedupThreshold: opts.dedupThreshold,
       maxProbes: opts.maxProbes,
+      probeConcurrency: opts.probeConcurrency,
       locations: opts.locations,
       deps
     });
@@ -5599,12 +5629,17 @@ function buildDefaultDeps(registry) {
       const fromGrounding = normalized.searchQueries ?? [];
       return {
         candidates: [...fromAnswer, ...fromGrounding],
-        provider: "gemini"
+        provider: "gemini",
+        // Session diagnostics: the raw-candidate split by source, persisted on
+        // discovery_sessions so seed-quality calibration is measurable.
+        fromAnswerCount: fromAnswer.length,
+        fromGroundingCount: fromGrounding.length
       };
     },
     async embed(queries2) {
-      if (cfg.apiKey) {
-        return embedQueries(queries2, { apiKey: cfg.apiKey, baseUrl: cfg.baseUrl });
+      const apiKey = cfg.apiKey;
+      if (apiKey) {
+        return embedWithRetry(() => embedQueries(queries2, { apiKey, baseUrl: cfg.baseUrl }));
       }
       throw new Error("Discovery currently requires a Gemini API key. Vertex-mode embeddings are not yet implemented.");
     },
@@ -6438,7 +6473,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-GM3RXE2F.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-JGZU27U3.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -11905,6 +11940,7 @@ async function createServer(opts) {
         icpDescription: input.icpDescription,
         dedupThreshold: input.dedupThreshold,
         maxProbes: input.maxProbes,
+        probeConcurrency: input.probeConcurrency,
         locations: input.locations
       }).then(() => runCoordinator.onRunCompleted(input.runId, input.projectId)).catch((err) => {
         app.log.error({ runId: input.runId, err }, "Discovery run failed");
@@ -12235,21 +12271,21 @@ async function createServer(opts) {
   const assetsDir = opts.assetsDir ?? path9.join(dirname, "..", "assets");
   if (fs8.existsSync(assetsDir)) {
     const indexPath = path9.join(assetsDir, "index.html");
-    const injectConfig = (html) => {
+    const injectConfig = (html, projectTabsOverride) => {
       const clientConfig = {};
       if (basePath) clientConfig.basePath = basePath;
       if (embed.enabled) {
-        const embedClient = buildEmbedClientConfig(embed);
+        const embedClient = embedClientConfigForRequest(embed, projectTabsOverride);
         if (embedClient) clientConfig.embed = embedClient;
       }
-      const configScript = `<script>window.__CANONRY_CONFIG__=${JSON.stringify(clientConfig)}</script>`;
+      const configScript = `<script>window.__CANONRY_CONFIG__=${serializeForInlineScript(clientConfig)}</script>`;
       const baseTag = `<base href="${basePath ?? "/"}">`;
       return html.replace("<head>", `<head>${baseTag}`).replace("</head>", `${configScript}</head>`);
     };
     const sendSpaDocument = (reply, html) => {
       reply.header("Cache-Control", "no-cache, must-revalidate");
       if (embedCsp) reply.header("Content-Security-Policy", embedCsp);
-      return reply.type("text/html").send(injectConfig(html));
+      return reply.type("text/html").send(injectConfig(html, reply.request.headers["x-canonry-embed-tabs"]));
     };
     const fastifyStatic = await import("@fastify/static");
     await app.register(fastifyStatic.default, {

package/dist/{chunk-GNMZTR6Y.js → chunk-F3MKVMS5.js}

@@ -13,6 +13,8 @@ import {
   DEFAULT_DISCOVERY_PROMOTE_BUCKETS,
   DEFAULT_DISCOVERY_PROMOTE_COMPETITOR_TYPES,
   DISCOVERY_DEFAULT_DEDUP_THRESHOLD,
+  DISCOVERY_DEFAULT_PROBE_CONCURRENCY,
+  DISCOVERY_PROBE_CONCURRENCY_CAP,
   DISCOVERY_PROMOTE_COMPETITOR_CAP,
   DISCOVERY_PROMOTE_COMPETITOR_MIN_HITS,
   DiscoveryBuckets,
@@ -171,6 +173,7 @@ import {
   keywordGenerateRequestSchema,
   latestProjectRunDtoSchema,
   locationContextSchema,
+  mapWithConcurrency,
   mentionStateFromAnswerMentioned,
   missingDependency,
   normalizeProjectAliases,
@@ -264,7 +267,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-Q7FFDQU4.js";
+} from "./chunk-VOR5ZTUU.js";
 
 // src/intelligence-service.ts
 import { eq as eq38, desc as desc18, asc as asc6, and as and28, ne as ne5, or as or5, inArray as inArray14, gte as gte7, lte as lte4 } from "drizzle-orm";
@@ -1133,6 +1136,11 @@ var discoverySessions = sqliteTable("discovery_sessions", {
   seedProvider: text("seed_provider"),
   seedCountRaw: integer("seed_count_raw"),
   seedCount: integer("seed_count"),
+  // Diagnostics: split of the raw seed candidates by source — the model's
+  // answer text vs. the grounding fan-out (issued search queries). Recorded at
+  // seed time; nullable for legacy sessions. No gate/warning math reads these.
+  seedFromAnswerCount: integer("seed_from_answer_count"),
+  seedFromGroundingCount: integer("seed_from_grounding_count"),
   dedupThreshold: real("dedup_threshold"),
   probeCount: integer("probe_count"),
   citedCount: integer("cited_count"),
@@ -3370,6 +3378,18 @@ var MIGRATION_VERSIONS = [
       `ALTER TABLE api_keys ADD COLUMN project_id TEXT REFERENCES projects(id) ON DELETE CASCADE`,
       `CREATE INDEX IF NOT EXISTS idx_api_keys_project ON api_keys(project_id)`
     ]
+  },
+  {
+    version: 88,
+    name: "discovery-session-seed-source-counts",
+    statements: [
+      // Diagnostics: split of raw seed candidates by source (answer text vs.
+      // grounding fan-out), recorded at seed time. Nullable — legacy sessions
+      // stay null. ALTER ADD COLUMN is idempotent (the runner swallows the
+      // duplicate-column error on retry).
+      `ALTER TABLE discovery_sessions ADD COLUMN seed_from_answer_count INTEGER`,
+      `ALTER TABLE discovery_sessions ADD COLUMN seed_from_grounding_count INTEGER`
+    ]
   }
 ];
 function rebuildBacklinkTableWithSource(tx, table) {
@@ -18025,7 +18045,7 @@ var routeCatalog = [
     method: "post",
     path: "/api/v1/projects/{name}/discover/run",
     summary: "Start a tracked-basket discovery session",
-    description: 'Kicks off a discovery session for the project. The pipeline: ICP description \u2192 Gemini grounded seed prompt \u2192 embed + cluster (cosine \u2265 0.95 by default) \u2192 pick canonical representatives \u2192 probe each canonical via Gemini grounding \u2192 classify into cited / aspirational / wasted-surface \u2192 aggregate competitor map. Returns immediately with `{ runId, sessionId, status: "running", consolidated }`; the actual work runs in the background. Poll `GET /projects/{name}/discover/sessions/{id}` until `status` is `completed` or `failed`. Concurrent/duplicate requests for the same (project, ICP) are consolidated onto a single in-flight session: the response carries `consolidated: true` and `200 OK` instead of `201`, and the request\'s `dedupThreshold` / `maxProbes` are ignored (the in-flight session keeps its original config).',
+    description: 'Kicks off a discovery session for the project. The pipeline: ICP description \u2192 Gemini grounded seed prompt \u2192 embed + cluster (cosine \u2265 0.95 by default) \u2192 pick canonical representatives \u2192 probe each canonical via Gemini grounding \u2192 classify into cited / aspirational / wasted-surface \u2192 aggregate competitor map. Returns immediately with `{ runId, sessionId, status: "running", consolidated }`; the actual work runs in the background. Poll `GET /projects/{name}/discover/sessions/{id}` until `status` is `completed` or `failed`. Concurrent/duplicate requests for the same (project, ICP) are consolidated onto a single in-flight session: the response carries `consolidated: true` and `200 OK` instead of `201`, and the request\'s `dedupThreshold` / `maxProbes` / `probeConcurrency` are ignored (the in-flight session keeps its original config).',
     tags: ["discovery"],
     parameters: [nameParameter],
     requestBody: {
@@ -18038,6 +18058,12 @@ var routeCatalog = [
               icpDescription: { type: "string", description: "Free-text ICP. Required if the project does not have spec.icpDescription stored." },
               dedupThreshold: { type: "number", description: "Cosine similarity threshold for clustering. Defaults to 0.95." },
               maxProbes: { type: "integer", description: "Max canonical queries to probe in this session. Default 100, hard cap 500." },
+              probeConcurrency: {
+                type: "integer",
+                minimum: 1,
+                maximum: 8,
+                description: "How many probes may run in parallel. Default 1 (strictly serial \u2014 the historical behaviour), hard cap 8. Probe rows are persisted in canonical order regardless of concurrency, so this only shortens wall-clock time."
+              },
               locations: {
                 type: "array",
                 items: { type: "string" },
@@ -24244,7 +24270,7 @@ function buildAmbiguousSlugMessage(slug, pages) {
   }).join(", ");
   return `Multiple pages matched slug "${slug}". Candidates: ${candidates}.`;
 }
-async function mapWithConcurrency(items, limit, iteratee) {
+async function mapWithConcurrency2(items, limit, iteratee) {
   const results = new Array(items.length);
   let nextIndex = 0;
   async function worker() {
@@ -24541,7 +24567,7 @@ function buildManualMetaAssist(siteUrl, slug, link, meta) {
 async function bulkSetSeoMeta(connection, entries, env) {
   const site = resolveEnvironment(connection, env);
   const { strategy, plugins } = await detectSeoWriteStrategy(connection, site.env);
-  const results = await mapWithConcurrency(
+  const results = await mapWithConcurrency2(
     entries,
     3,
     async (entry) => {
@@ -24699,7 +24725,7 @@ async function deploySchema(connection, slug, schemas, env) {
 async function deploySchemaFromProfile(connection, profile, env) {
   const site = resolveEnvironment(connection, env);
   const slugEntries = Object.entries(profile.pages);
-  const results = await mapWithConcurrency(
+  const results = await mapWithConcurrency2(
     slugEntries,
     3,
     async ([slug, entries]) => {
@@ -24721,7 +24747,7 @@ async function deploySchemaFromProfile(connection, profile, env) {
 async function getSchemaStatus(connection, env) {
   const site = resolveEnvironment(connection, env);
   const pages = await listPages(connection, site.env);
-  const details = await mapWithConcurrency(
+  const details = await mapWithConcurrency2(
     pages,
     5,
     async (page) => getPageDetail(connection, page.slug, site.env)
@@ -24822,7 +24848,7 @@ async function runAudit(connection, env) {
   const site = resolveEnvironment(connection, env);
   const pages = await listPages(connection, site.env);
   const plugins = await listActivePlugins(connection, site.env);
-  const details = await mapWithConcurrency(
+  const details = await mapWithConcurrency2(
     pages,
     5,
     async (page) => getPageDetail(connection, page.slug, site.env, plugins)
@@ -33792,6 +33818,7 @@ async function discoveryRoutes(app, opts) {
       icpDescription,
       dedupThreshold: parsed.data.dedupThreshold,
       maxProbes: parsed.data.maxProbes,
+      probeConcurrency: parsed.data.probeConcurrency,
       locations
     });
     return reply.status(201).send({
@@ -34041,6 +34068,8 @@ function serializeSession(row) {
     seedProvider: row.seedProvider ?? null,
     seedCountRaw: row.seedCountRaw ?? null,
     seedCount: row.seedCount ?? null,
+    seedFromAnswerCount: row.seedFromAnswerCount ?? null,
+    seedFromGroundingCount: row.seedFromGroundingCount ?? null,
     dedupThreshold: row.dedupThreshold ?? null,
     probeCount: row.probeCount ?? null,
     citedCount: row.citedCount ?? null,
@@ -34134,6 +34163,10 @@ async function executeDiscovery(opts) {
   const dedupThreshold = opts.dedupThreshold ?? DISCOVERY_DEFAULT_DEDUP_THRESHOLD;
   const requestedMax = opts.maxProbes ?? DEFAULT_MAX_PROBES;
   const maxProbes = Math.min(Math.max(1, requestedMax), ABSOLUTE_MAX_PROBES);
+  const probeConcurrency = Math.min(
+    Math.max(1, Math.floor(opts.probeConcurrency ?? DISCOVERY_DEFAULT_PROBE_CONCURRENCY)),
+    DISCOVERY_PROBE_CONCURRENCY_CAP
+  );
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   opts.db.update(discoverySessions).set({
     status: DiscoverySessionStatuses.seeding,
@@ -34164,12 +34197,21 @@ async function executeDiscovery(opts) {
     seedProvider: seedResult.provider,
     seedCountRaw,
     seedCount,
+    // Seed-source diagnostics (answer text vs. grounding fan-out). Null when
+    // the seed dep does not report the split. Not consumed by any gate.
+    seedFromAnswerCount: seedResult.fromAnswerCount ?? null,
+    seedFromGroundingCount: seedResult.fromGroundingCount ?? null,
     warning
   }).where(eq36(discoverySessions.id, opts.sessionId)).run();
+  const probeResults = await mapWithConcurrency(
+    probedCanonicals,
+    probeConcurrency,
+    (query) => opts.deps.probe({ project: opts.project, query })
+  );
   const probeRows = [];
   const buckets = { cited: 0, aspirational: 0, "wasted-surface": 0 };
-  for (const query of probedCanonicals) {
-    const probe = await opts.deps.probe({ project: opts.project, query });
+  const insertBaseMs = Date.now();
+  const rowsToInsert = probeResults.map((probe, index2) => {
     const bucket = classifyProbeBucket({
       citationState: probe.citationState,
       citedDomains: probe.citedDomains,
@@ -34177,18 +34219,25 @@ async function executeDiscovery(opts) {
     });
     probeRows.push({ citedDomains: probe.citedDomains, bucket });
     buckets[bucket]++;
-    opts.db.insert(discoveryProbes).values({
+    return {
       id: crypto28.randomUUID(),
       sessionId: opts.sessionId,
       projectId: opts.project.id,
-      query,
+      query: probedCanonicals[index2],
       bucket,
       citationState: probe.citationState,
       answerMentioned: probe.answerMentioned,
       citedDomains: probe.citedDomains,
       rawResponse: JSON.stringify(probe.rawResponse),
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).run();
+      createdAt: new Date(insertBaseMs + index2).toISOString()
+    };
+  });
+  if (rowsToInsert.length > 0) {
+    opts.db.transaction((tx) => {
+      for (const values of rowsToInsert) {
+        tx.insert(discoveryProbes).values(values).run();
+      }
+    });
   }
   const domains = buildCompetitorMap(probeRows, opts.project).map((entry) => entry.domain);
   const classification = await classifyCompetitorDomains(

package/dist/{chunk-23DCY7DL.js → chunk-VGMTLUUM.js}

@@ -2,6 +2,7 @@ import {
   AGENT_MEMORY_KEY_MAX_LENGTH,
   AGENT_MEMORY_VALUE_MAX_BYTES,
   DISCOVERY_MAX_PROBES_CAP,
+  DISCOVERY_PROBE_CONCURRENCY_CAP,
   backlinkSourceSchema,
   competitorBatchRequestSchema,
   discoveryBucketSchema,
@@ -24,7 +25,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-Q7FFDQU4.js";
+} from "./chunk-VOR5ZTUU.js";
 
 // src/config.ts
 import fs from "fs";
@@ -5565,7 +5566,8 @@ var discoveryRunInputSchema = z2.object({
     // upper bound; this just clarifies the meaning of each knob.
     icpDescription: z2.string().min(1).optional().describe("Free-text ICP description. If omitted, the project must already have spec.icpDescription stored."),
     dedupThreshold: z2.number().min(0).max(1).optional().describe("Cosine similarity threshold for clustering seed candidates. Defaults to 0.85. Lower values dedupe more aggressively."),
-    maxProbes: z2.number().int().positive().max(DISCOVERY_MAX_PROBES_CAP).optional().describe(`Max canonical queries to probe in this session. Default 100, hard cap ${DISCOVERY_MAX_PROBES_CAP}.`)
+    maxProbes: z2.number().int().positive().max(DISCOVERY_MAX_PROBES_CAP).optional().describe(`Max canonical queries to probe in this session. Default 100, hard cap ${DISCOVERY_MAX_PROBES_CAP}.`),
+    probeConcurrency: z2.number().int().min(1).max(DISCOVERY_PROBE_CONCURRENCY_CAP).optional().describe(`How many probes may run in parallel. Default 1 (strictly serial), hard cap ${DISCOVERY_PROBE_CONCURRENCY_CAP}. Probe rows are persisted in canonical order regardless of concurrency, so this only shortens wall-clock time.`)
   }).optional()
 });
 var discoverySessionsListInputSchema = z2.object({

package/dist/{chunk-Q7FFDQU4.js → chunk-VOR5ZTUU.js}

@@ -1188,6 +1188,33 @@ function isRetryableHttpError(err) {
   return true;
 }
 
+// ../contracts/src/concurrency.ts
+async function mapWithConcurrency(items, concurrency, fn) {
+  if (items.length === 0) return [];
+  const limit = Math.min(Math.max(1, Math.floor(concurrency)), items.length);
+  const results = new Array(items.length);
+  const state = {
+    nextIndex: 0,
+    firstFailure: null
+  };
+  async function worker() {
+    for (; ; ) {
+      if (state.firstFailure) return;
+      const index = state.nextIndex++;
+      if (index >= items.length) return;
+      try {
+        results[index] = await fn(items[index], index);
+      } catch (err) {
+        state.firstFailure ??= { err };
+        return;
+      }
+    }
+  }
+  await Promise.all(Array.from({ length: limit }, () => worker()));
+  if (state.firstFailure) throw state.firstFailure.err;
+  return results;
+}
+
 // ../contracts/src/bing.ts
 import { z as z9 } from "zod";
 var bingConnectionDtoSchema = z9.object({
@@ -2150,6 +2177,15 @@ var discoverySessionDtoSchema = z17.object({
   seedProvider: z17.string().nullable().optional(),
   seedCountRaw: z17.number().int().nullable().optional(),
   seedCount: z17.number().int().nullable().optional(),
+  /**
+   * Diagnostics: how many raw seed candidates came from the model's answer
+   * text vs. from the grounding fan-out (the search queries the engine
+   * actually issued). Recorded at seed time so seed-quality calibration is
+   * measurable per session. Null on legacy sessions (or when a seed dep does
+   * not report the split). Purely additive — no gate or warning reads these.
+   */
+  seedFromAnswerCount: z17.number().int().nullable().optional(),
+  seedFromGroundingCount: z17.number().int().nullable().optional(),
   dedupThreshold: z17.number().nullable().optional(),
   probeCount: z17.number().int().nullable().optional(),
   citedCount: z17.number().int().nullable().default(null),
@@ -2171,13 +2207,15 @@ var discoverySessionDetailDtoSchema = discoverySessionDtoSchema.extend({
   probes: z17.array(discoveryProbeDtoSchema).default([])
 });
 var DISCOVERY_MAX_PROBES_CAP = 500;
+var DISCOVERY_PROBE_CONCURRENCY_CAP = 8;
+var DISCOVERY_DEFAULT_PROBE_CONCURRENCY = 1;
 var DISCOVERY_DEFAULT_DEDUP_THRESHOLD = 0.95;
 var DISCOVERY_SEED_COLLAPSE_RATIO = 0.2;
 var DISCOVERY_SEED_COLLAPSE_MIN_RAW = 10;
 function seedCollapseWarning(input) {
   const { seedCountRaw, canonicalCount, dedupThreshold } = input;
   if (seedCountRaw < DISCOVERY_SEED_COLLAPSE_MIN_RAW) return null;
-  if (canonicalCount / seedCountRaw >= DISCOVERY_SEED_COLLAPSE_RATIO) return null;
+  if (canonicalCount / seedCountRaw > DISCOVERY_SEED_COLLAPSE_RATIO) return null;
   const noun = canonicalCount === 1 ? "query" : "queries";
   return `Seed dedup collapsed ${seedCountRaw} raw candidates into ${canonicalCount} canonical ${noun} at threshold ${dedupThreshold}. Distinct intents were likely merged into one cluster; re-run with a higher --dedup-threshold.`;
 }
@@ -2185,6 +2223,14 @@ var discoveryRunRequestSchema = z17.object({
   icpDescription: z17.string().min(1).optional(),
   dedupThreshold: z17.number().min(0).max(1).optional(),
   maxProbes: z17.number().int().positive().max(DISCOVERY_MAX_PROBES_CAP).optional(),
+  /**
+   * How many probes may run in parallel for this session. Defaults to
+   * `DISCOVERY_DEFAULT_PROBE_CONCURRENCY` (1 — strictly serial, the historical
+   * behaviour) when omitted; capped at `DISCOVERY_PROBE_CONCURRENCY_CAP`.
+   * Probe results are persisted in canonical order regardless of concurrency,
+   * so this only changes wall-clock time, never output order.
+   */
+  probeConcurrency: z17.number().int().min(1).max(DISCOVERY_PROBE_CONCURRENCY_CAP).optional(),
   /**
    * Optional override of the project's location labels, constraining seed
    * generation to a subset of the configured service areas. Each label must
@@ -5415,9 +5461,31 @@ function buildEmbedClientConfig(resolved) {
   if (!resolved.enabled) return void 0;
   const client = { enabled: true };
   if (resolved.views && resolved.views.length > 0) client.views = resolved.views;
+  if (resolved.projectTabs && resolved.projectTabs.length > 0) client.projectTabs = resolved.projectTabs;
   if (resolved.theme && Object.keys(resolved.theme).length > 0) client.theme = resolved.theme;
   return client;
 }
+function normalizeIdTokens(raw) {
+  if (raw.length === 0) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const token of raw) {
+    const id = token.toLowerCase();
+    if (seen.has(id)) continue;
+    seen.add(id);
+    out.push(id);
+  }
+  return out.length > 0 ? out : void 0;
+}
+function embedClientConfigForRequest(resolved, projectTabsOverride) {
+  const base = buildEmbedClientConfig(resolved);
+  if (!base) return void 0;
+  const override = normalizeIdTokens(splitList(projectTabsOverride));
+  return override ? { ...base, projectTabs: override } : base;
+}
+function serializeForInlineScript(value) {
+  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
 
 // ../contracts/src/telemetry.ts
 var GHOST_TELEMETRY_TEST_LOCATIONS = /* @__PURE__ */ new Set(["nyc", "lax", "chi"]);
@@ -5509,6 +5577,7 @@ export {
   formatGbpMetricLabel,
   withRetry,
   isRetryableHttpError,
+  mapWithConcurrency,
   bingUrlInspectionDtoSchema,
   bingCoverageSummaryDtoSchema,
   bingKeywordStatsDtoSchema,
@@ -5587,6 +5656,8 @@ export {
   discoverySessionDtoSchema,
   discoverySessionDetailDtoSchema,
   DISCOVERY_MAX_PROBES_CAP,
+  DISCOVERY_PROBE_CONCURRENCY_CAP,
+  DISCOVERY_DEFAULT_PROBE_CONCURRENCY,
   DISCOVERY_DEFAULT_DEDUP_THRESHOLD,
   seedCollapseWarning,
   discoveryRunRequestSchema,
@@ -5738,6 +5809,8 @@ export {
   splitList,
   parseOriginList,
   frameAncestorsHeaderValue,
-  buildEmbedClientConfig,
+  normalizeIdTokens,
+  embedClientConfigForRequest,
+  serializeForInlineScript,
   isGhostTelemetryEvent
 };