@ainyc/canonry 4.112.7 → 4.114.0

package/dist/{chunk-D5PEINWZ.js → chunk-3VSTTH4M.js}

@@ -179,6 +179,7 @@ import {
   mapWithConcurrency,
   mentionStateFromAnswerMentioned,
   missingDependency,
+  normalizeIdTokens,
   normalizeProjectAliases,
   normalizeProjectDomain,
   normalizeQueryText,
@@ -237,6 +238,7 @@ import {
   snapshotReportSchema,
   snapshotRequestSchema,
   sourceBreakdownDtoSchema,
+  splitList,
   sumInfraHits,
   summarizeCheckResults,
   surfaceClassFromCompetitorType,
@@ -271,10 +273,10 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-DBZLOLYT.js";
+} from "./chunk-VEUBAZRG.js";
 
 // src/intelligence-service.ts
-import { eq as eq38, desc as desc18, asc as asc6, and as and28, ne as ne5, or as or6, inArray as inArray14, gte as gte7, lte as lte4 } from "drizzle-orm";
+import { eq as eq38, desc as desc18, asc as asc6, and as and29, ne as ne5, or as or6, inArray as inArray14, gte as gte7, lte as lte4 } from "drizzle-orm";
 
 // ../db/src/client.ts
 import { mkdirSync } from "fs";
@@ -5847,6 +5849,82 @@ function parseCookies(header) {
     return cookies;
   }, {});
 }
+function queryValue(request, key) {
+  const raw = request.query?.[key];
+  if (typeof raw === "string") return raw;
+  if (Array.isArray(raw) && typeof raw[0] === "string") return raw[0];
+  return void 0;
+}
+function requestEmbedProjectTabs(request, fallback) {
+  const headerTabs = normalizeIdTokens(splitList(request.headers["x-canonry-embed-tabs"]));
+  if (headerTabs) return headerTabs;
+  return fallback && fallback.length > 0 ? [...fallback] : void 0;
+}
+function projectRouteRest(url) {
+  const match = url.match(/\/projects\/[^/]+(?:\/([^?#]*))?$/);
+  if (!match) return null;
+  return match[1] ?? "";
+}
+function isGlobalAnswerVisibilityRunsList(request, url) {
+  if (!url.endsWith("/runs")) return false;
+  const kind = queryValue(request, "kind");
+  return kind === RunKinds["answer-visibility"];
+}
+function isAnswerVisibilityRunsList(request, rest) {
+  if (rest !== "runs") return false;
+  const kind = queryValue(request, "kind");
+  return kind === RunKinds["answer-visibility"];
+}
+function isAnswerVisibilityRunDetail(request, url) {
+  const runMatch = url.match(/\/runs\/([^/?#]+)$/);
+  if (!runMatch) return false;
+  const run = request.server.db.select({ kind: runs.kind }).from(runs).where(eq(runs.id, decodeURIComponent(runMatch[1]))).get();
+  return !run || run.kind === RunKinds["answer-visibility"];
+}
+function isProjectShellRead(request, url) {
+  if (url.endsWith("/projects")) return true;
+  if (isGlobalAnswerVisibilityRunsList(request, url)) return true;
+  const rest = projectRouteRest(url);
+  if (rest === null) return isAnswerVisibilityRunDetail(request, url);
+  return rest === "" || isAnswerVisibilityRunsList(request, rest);
+}
+function isOverviewRead(url) {
+  const rest = projectRouteRest(url);
+  if (rest === null) return false;
+  return (/* @__PURE__ */ new Set([
+    "queries",
+    "competitors",
+    "timeline",
+    "overview",
+    "analytics/metrics",
+    "google/gsc/coverage",
+    "bing/coverage",
+    "insights",
+    "citations/visibility"
+  ])).has(rest);
+}
+function isTechnicalAeoRead(url) {
+  const rest = projectRouteRest(url);
+  return rest === "technical-aeo" || rest === "technical-aeo/pages" || rest === "technical-aeo/trend";
+}
+function isReportRead(url) {
+  const rest = projectRouteRest(url);
+  return rest === "report" || rest === "report.html";
+}
+function enforceEmbedProjectTabs(request, configuredTabs) {
+  const tabs = requestEmbedProjectTabs(request, configuredTabs);
+  if (!tabs || tabs.length === 0) return;
+  if (request.method === "OPTIONS") return;
+  if (WRITE_METHODS.has(request.method)) {
+    throw forbidden("This endpoint is not available in embed mode.");
+  }
+  const url = request.url.split("?")[0];
+  if (isProjectShellRead(request, url)) return;
+  if (tabs.includes("overview") && isOverviewRead(url)) return;
+  if (tabs.includes("technical-aeo") && isTechnicalAeoRead(url)) return;
+  if (tabs.includes("report") && isReportRead(url)) return;
+  throw forbidden("This endpoint is not available for the configured embed tabs.");
+}
 async function authPlugin(app, opts = {}) {
   app.addHook("onRequest", async (request) => {
     const url = request.url.split("?")[0];
@@ -5884,6 +5962,7 @@ async function authPlugin(app, opts = {}) {
     if (isReadOnlyKey(scopes) && WRITE_METHODS.has(request.method)) {
       throw forbidden("This API key is read-only and cannot perform write operations.");
     }
+    enforceEmbedProjectTabs(request, opts.embedProjectTabs);
     if (key.projectId) {
       const match = url.match(/\/projects\/([^/?#]+)/);
       if (match) {
@@ -6291,7 +6370,7 @@ function aliasArraysEqual(a, b) {
 
 // ../api-routes/src/queries.ts
 import crypto5 from "crypto";
-import { eq as eq4, inArray, sql as sql4 } from "drizzle-orm";
+import { and, eq as eq4, inArray, sql as sql4 } from "drizzle-orm";
 function preserveSnapshotQueryText(tx, projectId, queryIds) {
   const candidates = queryIds && queryIds.length > 0 ? tx.select({ id: queries.id, text: queries.query }).from(queries).where(inArray(queries.id, queryIds)).all() : tx.select({ id: queries.id, text: queries.query }).from(queries).where(eq4(queries.projectId, projectId)).all();
   for (const q of candidates) {
@@ -6391,6 +6470,26 @@ async function queryRoutes(app, opts) {
     const rows = app.db.select().from(queries).where(eq4(queries.projectId, project.id)).all();
     return reply.send(rows.map((r) => ({ id: r.id, query: r.query, createdAt: r.createdAt })));
   });
+  app.delete("/projects/:name/queries/:id", async (request, reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    const query = app.db.select().from(queries).where(and(eq4(queries.projectId, project.id), eq4(queries.id, request.params.id))).get();
+    if (!query) {
+      throw notFound("Query", request.params.id);
+    }
+    app.db.transaction((tx) => {
+      preserveSnapshotQueryText(tx, project.id, [query.id]);
+      tx.delete(queries).where(eq4(queries.id, query.id)).run();
+      writeAuditLog(tx, auditFromRequest(request, {
+        projectId: project.id,
+        actor: "api",
+        action: "queries.deleted",
+        entityType: "query",
+        entityId: query.id,
+        diff: { deleted: [query.query] }
+      }));
+    });
+    return reply.status(204).send();
+  });
   app.post("/projects/:name/queries", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const body = request.body;
@@ -6730,12 +6829,12 @@ function parseCompetitorBatch(value) {
 
 // ../api-routes/src/runs.ts
 import crypto8 from "crypto";
-import { and as and2, eq as eq7, asc, desc, or as or2, sql as sql5 } from "drizzle-orm";
+import { and as and3, eq as eq7, asc, desc, or as or2, sql as sql5 } from "drizzle-orm";
 import { gte } from "drizzle-orm";
 
 // ../api-routes/src/run-queue.ts
 import crypto7 from "crypto";
-import { and, eq as eq6, or } from "drizzle-orm";
+import { and as and2, eq as eq6, or } from "drizzle-orm";
 function queueRunIfProjectIdle(db, params) {
   const createdAt = params.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
   const kind = params.kind ?? "answer-visibility";
@@ -6743,7 +6842,7 @@ function queueRunIfProjectIdle(db, params) {
   const runId = crypto7.randomUUID();
   return db.transaction((tx) => {
     const activeRun = tx.select().from(runs).where(
-      and(
+      and2(
         eq6(runs.projectId, params.projectId),
         or(eq6(runs.status, "queued"), eq6(runs.status, "running"))
       )
@@ -6826,7 +6925,7 @@ async function runRoutes(app, opts) {
         throw validationError("No locations configured for this project");
       }
       const result = app.db.transaction((tx) => {
-        const activeRun = tx.select({ id: runs.id }).from(runs).where(and2(
+        const activeRun = tx.select({ id: runs.id }).from(runs).where(and3(
           eq7(runs.projectId, project.id),
           or2(eq7(runs.status, "queued"), eq7(runs.status, "running"))
         )).get();
@@ -6899,15 +6998,15 @@ async function runRoutes(app, opts) {
     const parsedLimit = parseInt(request.query.limit ?? "", 10);
     const limit = Number.isNaN(parsedLimit) || parsedLimit <= 0 ? void 0 : parsedLimit;
     const kind = parseListKind(request.query.kind);
-    const where = kind ? and2(eq7(runs.projectId, project.id), eq7(runs.kind, kind)) : eq7(runs.projectId, project.id);
+    const where = kind ? and3(eq7(runs.projectId, project.id), eq7(runs.kind, kind)) : eq7(runs.projectId, project.id);
     const rows = limit == null ? app.db.select().from(runs).where(where).orderBy(asc(runs.createdAt)).all() : app.db.select().from(runs).where(where).orderBy(desc(runs.createdAt)).limit(limit).all().reverse();
     return reply.send(rows.map(formatRun));
   });
   app.get("/projects/:name/runs/latest", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const countRow = app.db.select({ count: sql5`count(*)` }).from(runs).where(and2(eq7(runs.projectId, project.id), notProbeRun())).get();
+    const countRow = app.db.select({ count: sql5`count(*)` }).from(runs).where(and3(eq7(runs.projectId, project.id), notProbeRun())).get();
     const totalRuns = countRow?.count ?? 0;
-    const latestRun = app.db.select().from(runs).where(and2(eq7(runs.projectId, project.id), notProbeRun())).orderBy(desc(runs.createdAt), desc(runs.id)).limit(1).get();
+    const latestRun = app.db.select().from(runs).where(and3(eq7(runs.projectId, project.id), notProbeRun())).orderBy(desc(runs.createdAt), desc(runs.id)).limit(1).get();
     if (!latestRun) {
       return reply.send({ totalRuns: 0, run: null });
     }
@@ -6926,7 +7025,7 @@ async function runRoutes(app, opts) {
     if (kind) filters.push(eq7(runs.kind, kind));
     const scopedProjectId = request.apiKey?.projectId;
     if (scopedProjectId) filters.push(eq7(runs.projectId, scopedProjectId));
-    const rows = app.db.select().from(runs).where(and2(...filters)).orderBy(desc(runs.createdAt), desc(runs.id)).limit(limit).all();
+    const rows = app.db.select().from(runs).where(and3(...filters)).orderBy(desc(runs.createdAt), desc(runs.id)).limit(limit).all();
     return reply.send(rows.map(formatRun));
   });
   app.post("/runs", async (request, reply) => {
@@ -7137,7 +7236,7 @@ function loadRunDetail(app, run) {
 
 // ../api-routes/src/apply.ts
 import crypto10 from "crypto";
-import { and as and3, eq as eq8 } from "drizzle-orm";
+import { and as and4, eq as eq8 } from "drizzle-orm";
 
 // ../api-routes/src/schedule-utils.ts
 import { CronExpressionParser } from "cron-parser";
@@ -7580,7 +7679,7 @@ async function applyRoutes(app, opts) {
       });
       const AV_KIND = SchedulableRunKinds["answer-visibility"];
       if (resolvedSchedule) {
-        const existingSched = tx.select().from(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
+        const existingSched = tx.select().from(schedules).where(and4(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
         if (existingSched) {
           tx.update(schedules).set({
             cronExpr: resolvedSchedule.cronExpr,
@@ -7606,9 +7705,9 @@ async function applyRoutes(app, opts) {
         }
         scheduleAction = "upsert";
       } else if (deleteSchedule) {
-        const existingSched = tx.select().from(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
+        const existingSched = tx.select().from(schedules).where(and4(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
         if (existingSched) {
-          tx.delete(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).run();
+          tx.delete(schedules).where(and4(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).run();
           scheduleAction = "delete";
         }
       }
@@ -7692,7 +7791,7 @@ function normalizeCompetitorList2(domains) {
 }
 
 // ../api-routes/src/history.ts
-import { and as and4, eq as eq9, desc as desc2, inArray as inArray2 } from "drizzle-orm";
+import { and as and5, eq as eq9, desc as desc2, inArray as inArray2 } from "drizzle-orm";
 
 // ../api-routes/src/notification-redaction.ts
 var REDACTED_URL = {
@@ -7750,7 +7849,7 @@ async function historyRoutes(app) {
     const project = resolveProject(app.db, request.params.name);
     const limit = parseInt(request.query.limit ?? "50", 10);
     const offset = parseInt(request.query.offset ?? "0", 10);
-    const projectRuns = app.db.select({ id: runs.id }).from(runs).where(and4(eq9(runs.projectId, project.id), notProbeRun())).all();
+    const projectRuns = app.db.select({ id: runs.id }).from(runs).where(and5(eq9(runs.projectId, project.id), notProbeRun())).all();
     if (projectRuns.length === 0) {
       return reply.send({ snapshots: [], total: 0 });
     }
@@ -7799,7 +7898,7 @@ async function historyRoutes(app) {
   app.get("/projects/:name/timeline", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const projectQueries = app.db.select().from(queries).where(eq9(queries.projectId, project.id)).all();
-    const projectRuns = app.db.select().from(runs).where(and4(eq9(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all();
+    const projectRuns = app.db.select().from(runs).where(and5(eq9(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all();
     if (projectRuns.length === 0 || projectQueries.length === 0) {
       return reply.send([]);
     }
@@ -8010,13 +8109,13 @@ function formatAuditEntry(row) {
 }
 
 // ../api-routes/src/analytics.ts
-import { and as and5, eq as eq10, desc as desc3, inArray as inArray3 } from "drizzle-orm";
+import { and as and6, eq as eq10, desc as desc3, inArray as inArray3 } from "drizzle-orm";
 async function analyticsRoutes(app) {
   app.get("/projects/:name/analytics/metrics", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const window = parseWindow(request.query.window);
     const cutoff = windowCutoff(window);
-    const projectRuns = app.db.select().from(runs).where(and5(eq10(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
+    const projectRuns = app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
     if (projectRuns.length === 0) {
       return reply.send({
         window,
@@ -8068,14 +8167,14 @@ async function analyticsRoutes(app) {
     const project = resolveProject(app.db, request.params.name);
     const window = parseWindow(request.query.window);
     const cutoff = windowCutoff(window);
-    const completedRuns = app.db.select().from(runs).where(and5(eq10(runs.projectId, project.id), notProbeRun())).orderBy(desc3(runs.createdAt), desc3(runs.id)).all().filter((r) => r.status === "completed" || r.status === "partial");
+    const completedRuns = app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(desc3(runs.createdAt), desc3(runs.id)).all().filter((r) => r.status === "completed" || r.status === "partial");
     const latestGroup = groupRunsByCreatedAt(completedRuns)[0] ?? [];
     const latestGroupRunIds = latestGroup.map((r) => r.id);
     const latestRun = pickGroupRepresentative(latestGroup);
     if (!latestRun) {
       return reply.send({ cited: [], gap: [], uncited: [], mentionedQueries: [], mentionGap: [], notMentioned: [], runId: "", window });
     }
-    const windowRuns = app.db.select().from(runs).where(and5(eq10(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
+    const windowRuns = app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
     const windowRunIds = windowRuns.map((r) => r.id);
     const runIdToCreatedAt = new Map(windowRuns.map((r) => [r.id, r.createdAt]));
     const consistencyMap = /* @__PURE__ */ new Map();
@@ -8206,7 +8305,7 @@ async function analyticsRoutes(app) {
       const mapped = surfaceClassFromCompetitorType(row.competitorType);
       if (mapped) storedSurfaceClasses.set(normalizeProjectDomain(row.domain), mapped);
     }
-    const windowRuns = app.db.select().from(runs).where(and5(eq10(runs.projectId, project.id), notProbeRun())).orderBy(desc3(runs.createdAt), desc3(runs.id)).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
+    const windowRuns = app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(desc3(runs.createdAt), desc3(runs.id)).all().filter((r) => r.status === "completed" || r.status === "partial").filter((r) => !cutoff || r.createdAt >= cutoff);
     if (windowRuns.length === 0) {
       return reply.send({
         overall: [],
@@ -8471,7 +8570,7 @@ function buildCategoryCounts(counts2) {
 }
 
 // ../api-routes/src/intelligence.ts
-import { eq as eq11, desc as desc4, and as and6, inArray as inArray4, like } from "drizzle-orm";
+import { eq as eq11, desc as desc4, and as and7, inArray as inArray4, like } from "drizzle-orm";
 var SEVERITY_RANK = { low: 0, medium: 1, high: 2, critical: 3 };
 function severitiesAtOrAbove(min) {
   const floor = SEVERITY_RANK[min];
@@ -8611,7 +8710,7 @@ async function intelligenceRoutes(app) {
       }
       limit = parsed;
     }
-    const rows = app.db.select().from(insights).where(conditions.length === 1 ? conditions[0] : and6(...conditions)).orderBy(desc4(insights.createdAt)).all();
+    const rows = app.db.select().from(insights).where(conditions.length === 1 ? conditions[0] : and7(...conditions)).orderBy(desc4(insights.createdAt)).all();
     const showDismissed = request.query.dismissed === "true";
     let result = rows.filter((r) => showDismissed || !r.dismissed).map(mapInsightRow);
     if (limit !== void 0) result = result.slice(0, limit);
@@ -8636,7 +8735,7 @@ async function intelligenceRoutes(app) {
   });
   app.get("/projects/:name/health/latest", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const projectVisRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and6(
+    const projectVisRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and7(
       eq11(runs.projectId, project.id),
       eq11(runs.kind, RunKinds["answer-visibility"]),
       inArray4(runs.status, [RunStatuses.completed, RunStatuses.partial]),
@@ -8647,7 +8746,7 @@ async function intelligenceRoutes(app) {
     const latestGroup = groupRunsByCreatedAt(projectVisRuns)[0] ?? [];
     const latestGroupRunIds = latestGroup.map((r) => r.id);
     if (latestGroupRunIds.length > 0) {
-      const groupRows = app.db.select().from(healthSnapshots).where(and6(
+      const groupRows = app.db.select().from(healthSnapshots).where(and7(
         eq11(healthSnapshots.projectId, project.id),
         inArray4(healthSnapshots.runId, latestGroupRunIds)
       )).all();
@@ -8671,14 +8770,14 @@ async function intelligenceRoutes(app) {
 }
 
 // ../api-routes/src/report.ts
-import { and as and10, desc as desc7, eq as eq15, gte as gte2, inArray as inArray6, lt, lte, ne as ne2, or as or3, sql as sql7 } from "drizzle-orm";
+import { and as and11, desc as desc7, eq as eq15, gte as gte2, inArray as inArray6, lt, lte, ne as ne2, or as or3, sql as sql7 } from "drizzle-orm";
 
 // ../api-routes/src/content.ts
 import crypto11 from "crypto";
-import { and as and8, desc as desc6, eq as eq13 } from "drizzle-orm";
+import { and as and9, desc as desc6, eq as eq13 } from "drizzle-orm";
 
 // ../api-routes/src/content-data.ts
-import { and as and7, eq as eq12, desc as desc5, inArray as inArray5 } from "drizzle-orm";
+import { and as and8, eq as eq12, desc as desc5, inArray as inArray5 } from "drizzle-orm";
 var RECENT_RUNS_WINDOW = 5;
 function loadOrchestratorInput(db, project, locationFilter = void 0) {
   const projectId = project.id;
@@ -8808,7 +8907,7 @@ function listCompetitorDomains(db, projectId) {
 }
 function listRecentAnswerVisibilityRunIds(db, projectId, limit, locationFilter) {
   const rows = db.select({ id: runs.id, location: runs.location }).from(runs).where(
-    and7(
+    and8(
       eq12(runs.projectId, projectId),
       eq12(runs.kind, RunKinds["answer-visibility"]),
       // Queued/running/failed/cancelled runs may have partial or no
@@ -9179,7 +9278,7 @@ async function contentRoutes(app, opts = {}) {
         dismissedAt: now
       }
     }).run();
-    const row = app.db.select().from(contentTargetDismissals).where(and8(
+    const row = app.db.select().from(contentTargetDismissals).where(and9(
       eq13(contentTargetDismissals.projectId, project.id),
       eq13(contentTargetDismissals.targetRef, targetRef)
     )).get();
@@ -9189,7 +9288,7 @@ async function contentRoutes(app, opts = {}) {
   app.delete("/projects/:name/content/dismissals/:targetRef", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const { targetRef } = request.params;
-    const result = app.db.delete(contentTargetDismissals).where(and8(
+    const result = app.db.delete(contentTargetDismissals).where(and9(
       eq13(contentTargetDismissals.projectId, project.id),
       eq13(contentTargetDismissals.targetRef, targetRef)
     )).run();
@@ -9200,7 +9299,7 @@ async function contentRoutes(app, opts = {}) {
   });
   app.get("/projects/:name/content/recommendations/:targetRef/analysis", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const row = app.db.select().from(recommendationExplanations).where(and8(
+    const row = app.db.select().from(recommendationExplanations).where(and9(
       eq13(recommendationExplanations.projectId, project.id),
       eq13(recommendationExplanations.targetRef, request.params.targetRef)
     )).orderBy(desc6(recommendationExplanations.generatedAt)).limit(1).get();
@@ -9228,7 +9327,7 @@ async function contentRoutes(app, opts = {}) {
       throw notFound("contentRecommendation", targetRef);
     }
     if (!body.forceRefresh) {
-      const cached = app.db.select().from(recommendationExplanations).where(and8(
+      const cached = app.db.select().from(recommendationExplanations).where(and9(
         eq13(recommendationExplanations.projectId, project.id),
         eq13(recommendationExplanations.targetRef, targetRef)
       )).orderBy(desc6(recommendationExplanations.generatedAt)).limit(1).get();
@@ -9267,7 +9366,7 @@ async function contentRoutes(app, opts = {}) {
         generatedAt: now
       }
     }).run();
-    const row = app.db.select().from(recommendationExplanations).where(and8(
+    const row = app.db.select().from(recommendationExplanations).where(and9(
       eq13(recommendationExplanations.projectId, project.id),
       eq13(recommendationExplanations.targetRef, targetRef),
       eq13(recommendationExplanations.promptVersion, result.promptVersion)
@@ -9351,7 +9450,7 @@ async function contentRoutes(app, opts = {}) {
         generatedAt: now
       }
     }).run();
-    const row = app.db.select().from(recommendationBriefs).where(and8(
+    const row = app.db.select().from(recommendationBriefs).where(and9(
       eq13(recommendationBriefs.projectId, project.id),
       eq13(recommendationBriefs.targetRef, targetRef),
       eq13(recommendationBriefs.promptVersion, result.promptVersion)
@@ -9381,7 +9480,7 @@ function lookupCachedBrief(db, projectId, targetRef, promptVersion) {
   if (promptVersion !== void 0) {
     conditions.push(eq13(recommendationBriefs.promptVersion, promptVersion));
   }
-  return db.select().from(recommendationBriefs).where(and8(...conditions)).orderBy(desc6(recommendationBriefs.generatedAt)).limit(1).get();
+  return db.select().from(recommendationBriefs).where(and9(...conditions)).orderBy(desc6(recommendationBriefs.generatedAt)).limit(1).get();
 }
 function parseLimitParam(raw) {
   if (raw === void 0) return void 0;
@@ -9407,7 +9506,7 @@ function winnabilityClassRank(winnabilityClass) {
 }
 
 // ../api-routes/src/gsc-totals.ts
-import { and as and9, asc as asc2, eq as eq14, sql as sql6 } from "drizzle-orm";
+import { and as and10, asc as asc2, eq as eq14, sql as sql6 } from "drizzle-orm";
 function readGscDailyTotals(db, projectId, startDate, endDate) {
   const rows = db.select({
     date: gscDailyTotals.date,
@@ -9415,7 +9514,7 @@ function readGscDailyTotals(db, projectId, startDate, endDate) {
     impressions: gscDailyTotals.impressions,
     position: gscDailyTotals.position
   }).from(gscDailyTotals).where(
-    and9(
+    and10(
       eq14(gscDailyTotals.projectId, projectId),
       sql6`${gscDailyTotals.date} >= ${startDate}`,
       sql6`${gscDailyTotals.date} <= ${endDate}`
@@ -11846,7 +11945,7 @@ function buildGscSection(db, projectId, projectBrandNames, canonicalDomain, trac
 function buildGaSection(db, projectId, windowDays) {
   const gaWindowKey = GA_WINDOW_SUMMARY_KEYS[windowDays];
   const windowSummary = gaWindowKey ? db.select().from(gaTrafficWindowSummaries).where(
-    and10(
+    and11(
       eq15(gaTrafficWindowSummaries.projectId, projectId),
       eq15(gaTrafficWindowSummaries.windowKey, gaWindowKey)
     )
@@ -12024,7 +12123,7 @@ function nonSubresourceReferralPathCondition() {
 }
 function buildServerActivity(db, projectId, windowDays) {
   const sourceRows = db.select({ id: trafficSources.id }).from(trafficSources).where(
-    and10(
+    and11(
       eq15(trafficSources.projectId, projectId),
       ne2(trafficSources.status, TrafficSourceStatuses.archived)
     )
@@ -12040,7 +12139,7 @@ function buildServerActivity(db, projectId, windowDays) {
   const trendStart = new Date(trendStartMs).toISOString();
   const sumVerifiedCrawlers = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
     db.select({ total: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-      and10(
+      and11(
         eq15(crawlerEventsHourly.projectId, projectId),
         eq15(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
         gte2(crawlerEventsHourly.tsHour, windowStartIso),
@@ -12050,7 +12149,7 @@ function buildServerActivity(db, projectId, windowDays) {
   );
   const sumUnverifiedCrawlers = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
     db.select({ total: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-      and10(
+      and11(
         eq15(crawlerEventsHourly.projectId, projectId),
         ne2(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
         gte2(crawlerEventsHourly.tsHour, windowStartIso),
@@ -12060,7 +12159,7 @@ function buildServerActivity(db, projectId, windowDays) {
   );
   const sumReferrals = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
     db.select({ total: sql7`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-      and10(
+      and11(
         eq15(aiReferralEventsHourly.projectId, projectId),
         nonSubresourceReferralPathCondition(),
         gte2(aiReferralEventsHourly.tsHour, windowStartIso),
@@ -12070,7 +12169,7 @@ function buildServerActivity(db, projectId, windowDays) {
   );
   const sumUserFetches = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
     db.select({ total: sql7`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
-      and10(
+      and11(
         eq15(aiUserFetchEventsHourly.projectId, projectId),
         gte2(aiUserFetchEventsHourly.tsHour, windowStartIso),
         exclusiveEnd ? lt(aiUserFetchEventsHourly.tsHour, windowEndIso) : lte(aiUserFetchEventsHourly.tsHour, windowEndIso)
@@ -12090,7 +12189,7 @@ function buildServerActivity(db, projectId, windowDays) {
     verificationStatus: crawlerEventsHourly.verificationStatus,
     hits: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and10(
+    and11(
       eq15(crawlerEventsHourly.projectId, projectId),
       gte2(crawlerEventsHourly.tsHour, headlineStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
@@ -12100,7 +12199,7 @@ function buildServerActivity(db, projectId, windowDays) {
     operator: crawlerEventsHourly.operator,
     hits: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and10(
+    and11(
       eq15(crawlerEventsHourly.projectId, projectId),
       eq15(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte2(crawlerEventsHourly.tsHour, priorStart),
@@ -12111,7 +12210,7 @@ function buildServerActivity(db, projectId, windowDays) {
     operator: aiReferralEventsHourly.operator,
     hits: sql7`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
   }).from(aiReferralEventsHourly).where(
-    and10(
+    and11(
       eq15(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte2(aiReferralEventsHourly.tsHour, headlineStart),
@@ -12122,7 +12221,7 @@ function buildServerActivity(db, projectId, windowDays) {
     operator: aiUserFetchEventsHourly.operator,
     hits: sql7`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)`
   }).from(aiUserFetchEventsHourly).where(
-    and10(
+    and11(
       eq15(aiUserFetchEventsHourly.projectId, projectId),
       gte2(aiUserFetchEventsHourly.tsHour, headlineStart),
       lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
@@ -12166,7 +12265,7 @@ function buildServerActivity(db, projectId, windowDays) {
     hits: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`,
     operators: sql7`COUNT(DISTINCT ${crawlerEventsHourly.operator})`
   }).from(crawlerEventsHourly).where(
-    and10(
+    and11(
       eq15(crawlerEventsHourly.projectId, projectId),
       eq15(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte2(crawlerEventsHourly.tsHour, headlineStart),
@@ -12183,7 +12282,7 @@ function buildServerActivity(db, projectId, windowDays) {
     arrivals: sql7`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
     landingPaths: sql7`COUNT(DISTINCT ${aiReferralEventsHourly.landingPathNormalized})`
   }).from(aiReferralEventsHourly).where(
-    and10(
+    and11(
       eq15(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte2(aiReferralEventsHourly.tsHour, headlineStart),
@@ -12200,7 +12299,7 @@ function buildServerActivity(db, projectId, windowDays) {
     arrivals: sql7`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
     products: sql7`COUNT(DISTINCT ${aiReferralEventsHourly.product})`
   }).from(aiReferralEventsHourly).where(
-    and10(
+    and11(
       eq15(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte2(aiReferralEventsHourly.tsHour, headlineStart),
@@ -12216,7 +12315,7 @@ function buildServerActivity(db, projectId, windowDays) {
     date: sql7`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`,
     hits: sql7`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and10(
+    and11(
       eq15(crawlerEventsHourly.projectId, projectId),
       eq15(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte2(crawlerEventsHourly.tsHour, trendStart),
@@ -12227,7 +12326,7 @@ function buildServerActivity(db, projectId, windowDays) {
     date: sql7`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`,
     hits: sql7`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
   }).from(aiReferralEventsHourly).where(
-    and10(
+    and11(
       eq15(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte2(aiReferralEventsHourly.tsHour, trendStart),
@@ -12238,7 +12337,7 @@ function buildServerActivity(db, projectId, windowDays) {
     date: sql7`SUBSTR(${aiUserFetchEventsHourly.tsHour}, 1, 10)`,
     hits: sql7`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)`
   }).from(aiUserFetchEventsHourly).where(
-    and10(
+    and11(
       eq15(aiUserFetchEventsHourly.projectId, projectId),
       gte2(aiUserFetchEventsHourly.tsHour, trendStart),
       lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
@@ -12323,7 +12422,7 @@ function buildIndexingHealth(db, projectId) {
   return null;
 }
 function buildCitationsTrend(db, projectId, queryLookup, locationFilter) {
-  const visibilityRuns = db.select().from(runs).where(and10(eq15(runs.projectId, projectId), eq15(runs.kind, RunKinds["answer-visibility"]), notProbeRun())).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter);
+  const visibilityRuns = db.select().from(runs).where(and11(eq15(runs.projectId, projectId), eq15(runs.kind, RunKinds["answer-visibility"]), notProbeRun())).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter);
   const totalQueries = queryLookup.byId.size;
   const points = [];
   for (const run of visibilityRuns) {
@@ -12371,7 +12470,7 @@ function buildCitationsTrend(db, projectId, queryLookup, locationFilter) {
 }
 function buildInsightList(db, projectId, locationFilter) {
   const recentRunIds = db.select({ id: runs.id, location: runs.location }).from(runs).where(
-    and10(
+    and11(
       eq15(runs.projectId, projectId),
       eq15(runs.kind, RunKinds["answer-visibility"]),
       or3(eq15(runs.status, RunStatuses.completed), eq15(runs.status, RunStatuses.partial)),
@@ -12379,7 +12478,7 @@ function buildInsightList(db, projectId, locationFilter) {
     )
   ).orderBy(desc7(runs.createdAt)).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter).slice(0, INSIGHT_LOOKBACK_RUNS).map((r) => r.id);
   if (recentRunIds.length === 0) return [];
-  const rows = db.select().from(insights).where(and10(eq15(insights.projectId, projectId), inArray6(insights.runId, recentRunIds))).orderBy(desc7(insights.createdAt)).all();
+  const rows = db.select().from(insights).where(and11(eq15(insights.projectId, projectId), inArray6(insights.runId, recentRunIds))).orderBy(desc7(insights.createdAt)).all();
   const severityRank = { critical: 0, high: 1, medium: 2, low: 3 };
   const flat = rows.filter((r) => !r.dismissed).map((r) => {
     const recommendation = r.recommendation;
@@ -12931,7 +13030,7 @@ function buildProjectReport(db, projectName, periodDays) {
   const project = resolveProject(db, projectName);
   const queryLookup = loadQueryLookup(db, project.id);
   const comparisonWindowDays = reportComparisonWindowDays(periodDays);
-  const allRuns = db.select().from(runs).where(and10(eq15(runs.projectId, project.id), notProbeRun())).orderBy(desc7(runs.createdAt), desc7(runs.id)).all();
+  const allRuns = db.select().from(runs).where(and11(eq15(runs.projectId, project.id), notProbeRun())).orderBy(desc7(runs.createdAt), desc7(runs.id)).all();
   const visibilityRuns = allRuns.filter((r) => r.kind === RunKinds["answer-visibility"]);
   const completedVisRunGroups = groupRunsByCreatedAt(
     visibilityRuns.filter((r) => r.status === RunStatuses.completed || r.status === RunStatuses.partial)
@@ -13167,7 +13266,7 @@ async function reportRoutes(app) {
 }
 
 // ../api-routes/src/citations.ts
-import { and as and11, eq as eq16, inArray as inArray7 } from "drizzle-orm";
+import { and as and12, eq as eq16, inArray as inArray7 } from "drizzle-orm";
 async function citationRoutes(app) {
   app.get("/projects/:name/citations/visibility", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
@@ -13176,7 +13275,7 @@ async function citationRoutes(app) {
     if (projectQueries.length === 0) {
       return reply.send(emptyCitationVisibility("no-queries"));
     }
-    const projectRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and11(eq16(runs.projectId, project.id), notProbeRun())).all();
+    const projectRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and12(eq16(runs.projectId, project.id), notProbeRun())).all();
     if (projectRuns.length === 0) {
       return reply.send(emptyCitationVisibility("no-runs-yet"));
     }
@@ -13332,7 +13431,7 @@ function normalizeDomain2(domain) {
 }
 
 // ../api-routes/src/visibility-stats.ts
-import { and as and12, desc as desc8, eq as eq17, inArray as inArray8 } from "drizzle-orm";
+import { and as and13, desc as desc8, eq as eq17, inArray as inArray8 } from "drizzle-orm";
 function round42(value) {
   return Math.round(value * 1e4) / 1e4;
 }
@@ -13484,7 +13583,7 @@ async function visibilityStatsRoutes(app) {
       lastRuns = n;
     }
     const projectQueries = app.db.select({ id: queries.id, query: queries.query }).from(queries).where(eq17(queries.projectId, project.id)).all();
-    let projectRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt, status: runs.status }).from(runs).where(and12(eq17(runs.projectId, project.id), eq17(runs.kind, RunKinds["answer-visibility"]), notProbeRun())).orderBy(desc8(runs.createdAt)).all().filter((r) => r.status === RunStatuses.completed || r.status === RunStatuses.partial);
+    let projectRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt, status: runs.status }).from(runs).where(and13(eq17(runs.projectId, project.id), eq17(runs.kind, RunKinds["answer-visibility"]), notProbeRun())).orderBy(desc8(runs.createdAt)).all().filter((r) => r.status === RunStatuses.completed || r.status === RunStatuses.partial);
     if (sinceMs !== null) projectRuns = projectRuns.filter((r) => Date.parse(r.createdAt) >= sinceMs);
     if (untilMs !== null) projectRuns = projectRuns.filter((r) => Date.parse(r.createdAt) <= untilMs);
     if (lastRuns !== null) projectRuns = projectRuns.slice(0, lastRuns);
@@ -13554,7 +13653,7 @@ async function visibilityStatsRoutes(app) {
 }
 
 // ../api-routes/src/composites.ts
-import { eq as eq18, and as and13, desc as desc9, sql as sql8, like as like2, or as or4, inArray as inArray9 } from "drizzle-orm";
+import { eq as eq18, and as and14, desc as desc9, sql as sql8, like as like2, or as or4, inArray as inArray9 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
@@ -13572,7 +13671,7 @@ async function compositeRoutes(app) {
     const project = resolveProject(app.db, request.params.name);
     const filterLocation = (request.query.location ?? "").trim() || null;
     const sinceIso = parseSinceFilter(request.query.since);
-    const allRunsRaw = app.db.select().from(runs).where(and13(eq18(runs.projectId, project.id), notProbeRun())).orderBy(desc9(runs.createdAt), desc9(runs.id)).all();
+    const allRunsRaw = app.db.select().from(runs).where(and14(eq18(runs.projectId, project.id), notProbeRun())).orderBy(desc9(runs.createdAt), desc9(runs.id)).all();
     const allRuns = allRunsRaw.filter((r) => runMatchesFilters(r, filterLocation, sinceIso));
     const totalRuns = allRuns.length;
     const visibilityRuns = allRuns.filter((r) => r.kind === RunKinds["answer-visibility"]);
@@ -13728,7 +13827,7 @@ async function compositeRoutes(app) {
       rawResponse: querySnapshots.rawResponse,
       createdAt: querySnapshots.createdAt
     }).from(querySnapshots).innerJoin(queries, eq18(querySnapshots.queryId, queries.id)).where(
-      and13(
+      and14(
         eq18(queries.projectId, project.id),
         or4(
           sql8`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
@@ -13739,7 +13838,7 @@ async function compositeRoutes(app) {
       )
     ).orderBy(desc9(querySnapshots.createdAt)).limit(limit + 1).all());
     const insightMatches = app.db.select().from(insights).where(
-      and13(
+      and14(
         eq18(insights.projectId, project.id),
         or4(
           like2(insights.title, pattern),
@@ -13956,7 +14055,7 @@ function buildSuggestedQueriesFromGsc(app, projectId, trackedQueries) {
     // NULLIF guards the degenerate impressions=0 case (SQLite returns NULL,
     // which the JS coerces to 0 — caught by the impression floor anyway).
     avgPosition: sql8`COALESCE(SUM(${gscSearchData.position} * ${gscSearchData.impressions}) * 1.0 / NULLIF(SUM(${gscSearchData.impressions}), 0), 0)`
-  }).from(gscSearchData).where(and13(
+  }).from(gscSearchData).where(and14(
     eq18(gscSearchData.projectId, projectId),
     sql8`${gscSearchData.date} >= ${cutoff}`,
     sql8`${gscSearchData.impressions} > 0`
@@ -14464,6 +14563,13 @@ var runIdParameter = {
   description: "Run ID.",
   schema: stringSchema
 };
+var queryIdParameter = {
+  name: "id",
+  in: "path",
+  required: true,
+  description: "Query ID.",
+  schema: stringSchema
+};
 var notificationIdParameter = {
   name: "id",
   in: "path",
@@ -14870,6 +14976,17 @@ var routeCatalog = [
       400: errorResponse("Invalid query delete request.")
     }
   },
+  {
+    method: "delete",
+    path: "/api/v1/projects/{name}/queries/{id}",
+    summary: "Delete one query by ID",
+    tags: ["queries"],
+    parameters: [nameParameter, queryIdParameter],
+    responses: {
+      204: { description: "Query deleted." },
+      404: errorResponse("Project or query not found.")
+    }
+  },
   {
     method: "post",
     path: "/api/v1/projects/{name}/queries",
@@ -18862,7 +18979,7 @@ async function telemetryRoutes(app, opts) {
 
 // ../api-routes/src/schedules.ts
 import crypto13 from "crypto";
-import { and as and14, eq as eq20 } from "drizzle-orm";
+import { and as and15, eq as eq20 } from "drizzle-orm";
 function parseKindParam(raw) {
   if (raw === void 0 || raw === null || raw === "") return SchedulableRunKinds["answer-visibility"];
   const parsed = schedulableRunKindSchema.safeParse(raw);
@@ -18934,7 +19051,7 @@ async function scheduleRoutes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const enabledBool = enabled !== false;
-    const existing = app.db.select().from(schedules).where(and14(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
+    const existing = app.db.select().from(schedules).where(and15(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
     if (existing) {
       app.db.update(schedules).set({
         cronExpr,
@@ -18968,13 +19085,13 @@ async function scheduleRoutes(app, opts) {
       diff: { kind, cronExpr, preset, timezone, providers, sourceId }
     });
     opts.onScheduleUpdated?.("upsert", project.id, kind);
-    const schedule = app.db.select().from(schedules).where(and14(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and15(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
     return reply.status(existing ? 200 : 201).send(formatSchedule(schedule));
   });
   app.get("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and14(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and15(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
@@ -18983,7 +19100,7 @@ async function scheduleRoutes(app, opts) {
   app.delete("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and14(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and15(eq20(schedules.projectId, project.id), eq20(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
@@ -19140,7 +19257,7 @@ function formatNotification(row) {
 
 // ../api-routes/src/google.ts
 import crypto18 from "crypto";
-import { eq as eq22, and as and15, desc as desc11, sql as sql9, inArray as inArray10 } from "drizzle-orm";
+import { eq as eq22, and as and16, desc as desc11, sql as sql9, inArray as inArray10 } from "drizzle-orm";
 
 // ../api-routes/src/gbp-summary.ts
 function computeMetricTotals(rows) {
@@ -21120,7 +21237,7 @@ async function googleRoutes(app, opts) {
     if (page) conditions.push(sql9`${gscSearchData.page} LIKE ${"%" + escapeLikePattern(page) + "%"} ESCAPE '\\'`);
     const limitVal = Math.max(parseInt(limit ?? "500", 10) || 0, 1);
     const offsetVal = Math.max(parseInt(offset ?? "0", 10) || 0, 0);
-    const rows = app.db.select().from(gscSearchData).where(and15(...conditions)).orderBy(desc11(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
+    const rows = app.db.select().from(gscSearchData).where(and16(...conditions)).orderBy(desc11(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
     return rows.map((r) => ({
       date: r.date,
       query: r.query,
@@ -21148,7 +21265,7 @@ async function googleRoutes(app, opts) {
       date: gscSearchData.date,
       clicks: sql9`COALESCE(SUM(${gscSearchData.clicks}), 0)`,
       impressions: sql9`COALESCE(SUM(${gscSearchData.impressions}), 0)`
-    }).from(gscSearchData).where(and15(...conditions)).groupBy(gscSearchData.date).orderBy(gscSearchData.date).all();
+    }).from(gscSearchData).where(and16(...conditions)).groupBy(gscSearchData.date).orderBy(gscSearchData.date).all();
     const daily = mergeGscDailyTotalsWithFallback(
       dailyTotals,
       dimensionedRows.map((r) => ({
@@ -21241,7 +21358,7 @@ async function googleRoutes(app, opts) {
     const { url, limit } = request.query;
     const conditions = [eq22(gscUrlInspections.projectId, project.id)];
     if (url) conditions.push(eq22(gscUrlInspections.url, url));
-    const rows = app.db.select().from(gscUrlInspections).where(and15(...conditions)).orderBy(desc11(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
+    const rows = app.db.select().from(gscUrlInspections).where(and16(...conditions)).orderBy(desc11(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
     return rows.map((r) => ({
       id: r.id,
       url: r.url,
@@ -21736,7 +21853,7 @@ async function googleRoutes(app, opts) {
     app.db.transaction((tx) => {
       if (switching) clearGbpProjectData(tx, project.id);
       for (const remote of remoteLocations) {
-        const existing = tx.select().from(gbpLocations).where(and15(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.locationName, remote.name))).get();
+        const existing = tx.select().from(gbpLocations).where(and16(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.locationName, remote.name))).get();
         const profile = buildLocationProfileFields(remote);
         if (existing) {
           tx.update(gbpLocations).set({
@@ -21833,7 +21950,7 @@ async function googleRoutes(app, opts) {
       throw validationError(parsed.error.issues[0]?.message ?? "Invalid selection request");
     }
     const { selected } = parsed.data;
-    const existing = app.db.select().from(gbpLocations).where(and15(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.locationName, locationName))).get();
+    const existing = app.db.select().from(gbpLocations).where(and16(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.locationName, locationName))).get();
     if (!existing) throw notFound("GBP location", locationName);
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
@@ -21893,7 +22010,7 @@ async function googleRoutes(app, opts) {
     const conditions = [eq22(gbpDailyMetrics.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpDailyMetrics.locationName, request.query.locationName));
     if (request.query.metric) conditions.push(eq22(gbpDailyMetrics.metric, request.query.metric));
-    const rows = app.db.select().from(gbpDailyMetrics).where(and15(...conditions)).orderBy(desc11(gbpDailyMetrics.date)).all();
+    const rows = app.db.select().from(gbpDailyMetrics).where(and16(...conditions)).orderBy(desc11(gbpDailyMetrics.date)).all();
     return {
       metrics: rows.map((r) => ({ locationName: r.locationName, date: r.date, metric: r.metric, value: r.value })),
       total: rows.length
@@ -21903,7 +22020,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const conditions = [eq22(gbpKeywordImpressions.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpKeywordImpressions.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpKeywordImpressions).where(and15(...conditions)).all();
+    const rows = app.db.select().from(gbpKeywordImpressions).where(and16(...conditions)).all();
     rows.sort((a, b) => (b.valueCount ?? -1) - (a.valueCount ?? -1));
     const thresholded = rows.filter((r) => r.valueThreshold !== null).length;
     return {
@@ -21923,7 +22040,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const conditions = [eq22(gbpPlaceActions.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpPlaceActions.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpPlaceActions).where(and15(...conditions)).all();
+    const rows = app.db.select().from(gbpPlaceActions).where(and16(...conditions)).all();
     return {
       placeActions: rows.map((r) => ({
         locationName: r.locationName,
@@ -21940,7 +22057,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const conditions = [eq22(gbpLodgingSnapshots.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpLodgingSnapshots.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpLodgingSnapshots).where(and15(...conditions)).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
+    const rows = app.db.select().from(gbpLodgingSnapshots).where(and16(...conditions)).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -21957,7 +22074,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const conditions = [eq22(gbpAttributesSnapshots.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpAttributesSnapshots.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpAttributesSnapshots).where(and15(...conditions)).orderBy(desc11(gbpAttributesSnapshots.syncedAt)).all();
+    const rows = app.db.select().from(gbpAttributesSnapshots).where(and16(...conditions)).orderBy(desc11(gbpAttributesSnapshots.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -21977,7 +22094,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const conditions = [eq22(gbpPlaceDetails.projectId, project.id)];
     if (request.query.locationName) conditions.push(eq22(gbpPlaceDetails.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpPlaceDetails).where(and15(...conditions)).orderBy(desc11(gbpPlaceDetails.syncedAt)).all();
+    const rows = app.db.select().from(gbpPlaceDetails).where(and16(...conditions)).orderBy(desc11(gbpPlaceDetails.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -21996,7 +22113,7 @@ async function googleRoutes(app, opts) {
   app.get("/projects/:name/gbp/summary", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const locationName = request.query.locationName ?? null;
-    const locationNames = locationName ? [locationName] : app.db.select({ n: gbpLocations.locationName }).from(gbpLocations).where(and15(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.selected, true))).all().map((r) => r.n);
+    const locationNames = locationName ? [locationName] : app.db.select({ n: gbpLocations.locationName }).from(gbpLocations).where(and16(eq22(gbpLocations.projectId, project.id), eq22(gbpLocations.selected, true))).all().map((r) => r.n);
     const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
     if (locationNames.length === 0) {
       return buildGbpSummary({
@@ -22010,10 +22127,10 @@ async function googleRoutes(app, opts) {
         locationProfiles: []
       });
     }
-    const metricRows = app.db.select().from(gbpDailyMetrics).where(and15(eq22(gbpDailyMetrics.projectId, project.id), inArray10(gbpDailyMetrics.locationName, locationNames))).all();
-    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and15(eq22(gbpKeywordImpressions.projectId, project.id), inArray10(gbpKeywordImpressions.locationName, locationNames))).all();
-    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and15(eq22(gbpPlaceActions.projectId, project.id), inArray10(gbpPlaceActions.locationName, locationNames))).all();
-    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and15(eq22(gbpLodgingSnapshots.projectId, project.id), inArray10(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
+    const metricRows = app.db.select().from(gbpDailyMetrics).where(and16(eq22(gbpDailyMetrics.projectId, project.id), inArray10(gbpDailyMetrics.locationName, locationNames))).all();
+    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and16(eq22(gbpKeywordImpressions.projectId, project.id), inArray10(gbpKeywordImpressions.locationName, locationNames))).all();
+    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and16(eq22(gbpPlaceActions.projectId, project.id), inArray10(gbpPlaceActions.locationName, locationNames))).all();
+    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and16(eq22(gbpLodgingSnapshots.projectId, project.id), inArray10(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
     const latestLodgingByLocation = /* @__PURE__ */ new Map();
     for (const row of lodgingRows) {
       if (!latestLodgingByLocation.has(row.locationName)) {
@@ -22027,7 +22144,7 @@ async function googleRoutes(app, opts) {
       regularHours: gbpLocations.regularHours,
       primaryPhone: gbpLocations.primaryPhone,
       openStatus: gbpLocations.openStatus
-    }).from(gbpLocations).where(and15(eq22(gbpLocations.projectId, project.id), inArray10(gbpLocations.locationName, locationNames))).all();
+    }).from(gbpLocations).where(and16(eq22(gbpLocations.projectId, project.id), inArray10(gbpLocations.locationName, locationNames))).all();
     return buildGbpSummary({
       locationName,
       locationCount: locationNames.length,
@@ -22043,7 +22160,7 @@ async function googleRoutes(app, opts) {
 
 // ../api-routes/src/ads.ts
 import crypto19 from "crypto";
-import { eq as eq23, and as and16, asc as asc3, gte as gte3, lte as lte2, inArray as inArray11 } from "drizzle-orm";
+import { eq as eq23, and as and17, asc as asc3, gte as gte3, lte as lte2, inArray as inArray11 } from "drizzle-orm";
 function statusDto(row) {
   if (!row) return { connected: false };
   return {
@@ -22159,7 +22276,7 @@ async function adsRoutes(app, opts) {
     if (!row) {
       throw validationError('No ads connection for this project. Run "canonry ads connect" first.');
     }
-    const inFlight = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and16(
+    const inFlight = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and17(
       eq23(runs.projectId, project.id),
       eq23(runs.kind, RunKinds["ads-sync"]),
       inArray11(runs.status, [RunStatuses.queued, RunStatuses.running])
@@ -22244,7 +22361,7 @@ async function adsRoutes(app, opts) {
     if (entityId) conditions.push(eq23(adsInsightsDaily.entityId, entityId));
     if (from) conditions.push(gte3(adsInsightsDaily.date, from));
     if (to) conditions.push(lte2(adsInsightsDaily.date, to));
-    const rows = app.db.select().from(adsInsightsDaily).where(and16(...conditions)).orderBy(asc3(adsInsightsDaily.date)).all();
+    const rows = app.db.select().from(adsInsightsDaily).where(and17(...conditions)).orderBy(asc3(adsInsightsDaily.date)).all();
     const dtoRows = rows.map((row) => ({
       level: row.level,
       entityId: row.entityId,
@@ -22266,7 +22383,7 @@ async function adsRoutes(app, opts) {
     const campaignCount = app.db.select().from(adsCampaigns).where(eq23(adsCampaigns.projectId, project.id)).all().length;
     const adGroupCount = app.db.select().from(adsAdGroups).where(eq23(adsAdGroups.projectId, project.id)).all().length;
     const adCount = app.db.select().from(adsAds).where(eq23(adsAds.projectId, project.id)).all().length;
-    const campaignInsights = app.db.select().from(adsInsightsDaily).where(and16(
+    const campaignInsights = app.db.select().from(adsInsightsDaily).where(and17(
       eq23(adsInsightsDaily.projectId, project.id),
       eq23(adsInsightsDaily.level, "campaign")
     )).all();
@@ -22308,7 +22425,7 @@ async function adsRoutes(app, opts) {
 
 // ../api-routes/src/bing.ts
 import crypto20 from "crypto";
-import { eq as eq24, and as and17, desc as desc12 } from "drizzle-orm";
+import { eq as eq24, and as and18, desc as desc12 } from "drizzle-orm";
 
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
@@ -22783,7 +22900,7 @@ async function bingRoutes(app, opts) {
     requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const whereClause = url ? and17(eq24(bingUrlInspections.projectId, project.id), eq24(bingUrlInspections.url, url)) : eq24(bingUrlInspections.projectId, project.id);
+    const whereClause = url ? and18(eq24(bingUrlInspections.projectId, project.id), eq24(bingUrlInspections.url, url)) : eq24(bingUrlInspections.projectId, project.id);
     const filtered = app.db.select().from(bingUrlInspections).where(whereClause).orderBy(desc12(bingUrlInspections.inspectedAt)).limit(Math.max(1, Math.min(parseInt(limit ?? "100", 10) || 100, 1e3))).all();
     return filtered.map((r) => ({
       id: r.id,
@@ -23015,7 +23132,7 @@ async function bingRoutes(app, opts) {
 import fs from "fs";
 import path from "path";
 import os from "os";
-import { eq as eq25, and as and18 } from "drizzle-orm";
+import { eq as eq25, and as and19 } from "drizzle-orm";
 function getScreenshotDir() {
   return path.join(os.homedir(), ".canonry", "screenshots");
 }
@@ -23090,7 +23207,7 @@ async function cdpRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const { runId } = request.params;
-      const run = app.db.select().from(runs).where(and18(eq25(runs.id, runId), eq25(runs.projectId, project.id))).get();
+      const run = app.db.select().from(runs).where(and19(eq25(runs.id, runId), eq25(runs.projectId, project.id))).get();
       if (!run) {
         const err = notFound("Run", runId);
         return reply.code(err.statusCode).send(err.toJSON());
@@ -23187,7 +23304,7 @@ async function cdpRoutes(app, opts) {
 
 // ../api-routes/src/ga.ts
 import crypto21 from "crypto";
-import { eq as eq26, desc as desc13, and as and19, sql as sql10 } from "drizzle-orm";
+import { eq as eq26, desc as desc13, and as and20, sql as sql10 } from "drizzle-orm";
 function gaLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GA4Routes", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -23482,7 +23599,7 @@ async function ga4Routes(app, opts) {
       app.db.transaction((tx) => {
         if (syncTraffic) {
           tx.delete(gaTrafficSnapshots).where(
-            and19(
+            and20(
               eq26(gaTrafficSnapshots.projectId, project.id),
               sql10`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
               sql10`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
@@ -23506,7 +23623,7 @@ async function ga4Routes(app, opts) {
         }
         if (syncAi) {
           tx.delete(gaAiReferrals).where(
-            and19(
+            and20(
               eq26(gaAiReferrals.projectId, project.id),
               sql10`${gaAiReferrals.date} >= ${summary.periodStart}`,
               sql10`${gaAiReferrals.date} <= ${summary.periodEnd}`
@@ -23532,7 +23649,7 @@ async function ga4Routes(app, opts) {
         }
         if (syncSocial) {
           tx.delete(gaSocialReferrals).where(
-            and19(
+            and20(
               eq26(gaSocialReferrals.projectId, project.id),
               sql10`${gaSocialReferrals.date} >= ${summary.periodStart}`,
               sql10`${gaSocialReferrals.date} <= ${summary.periodEnd}`
@@ -23636,7 +23753,7 @@ async function ga4Routes(app, opts) {
       totalDirectSessions: gaTrafficWindowSummaries.totalDirectSessions,
       totalUsers: gaTrafficWindowSummaries.totalUsers
     }).from(gaTrafficWindowSummaries).where(
-      and19(
+      and20(
         eq26(gaTrafficWindowSummaries.projectId, project.id),
         eq26(gaTrafficWindowSummaries.windowKey, window)
       )
@@ -23645,7 +23762,7 @@ async function ga4Routes(app, opts) {
       totalSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)`,
       totalOrganicSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)`,
       totalUsers: sql10`COALESCE(SUM(${gaTrafficSnapshots.users}), 0)`
-    }).from(gaTrafficSnapshots).where(and19(...snapshotConditions)).get() : null;
+    }).from(gaTrafficSnapshots).where(and20(...snapshotConditions)).get() : null;
     const summaryRow = cutoffDate ? windowSummaryRow ?? snapshotTotalsRow : app.db.select({
       totalSessions: gaTrafficSummaries.totalSessions,
       totalOrganicSessions: gaTrafficSummaries.totalOrganicSessions,
@@ -23653,7 +23770,7 @@ async function ga4Routes(app, opts) {
     }).from(gaTrafficSummaries).where(eq26(gaTrafficSummaries.projectId, project.id)).get();
     const directTotalRow = windowSummaryRow ? { totalDirectSessions: windowSummaryRow.totalDirectSessions } : app.db.select({
       totalDirectSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`
-    }).from(gaTrafficSnapshots).where(and19(...snapshotConditions)).get();
+    }).from(gaTrafficSnapshots).where(and20(...snapshotConditions)).get();
     const summaryMeta = app.db.select({
       periodStart: gaTrafficSummaries.periodStart,
       periodEnd: gaTrafficSummaries.periodEnd
@@ -23664,14 +23781,14 @@ async function ga4Routes(app, opts) {
       organicSessions: sql10`SUM(${gaTrafficSnapshots.organicSessions})`,
       directSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`,
       users: sql10`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and19(...snapshotConditions)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
+    }).from(gaTrafficSnapshots).where(and20(...snapshotConditions)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
     const aiReferralRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
       sourceDimension: gaAiReferrals.sourceDimension,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and19(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.sourceDimension).all();
+    }).from(gaAiReferrals).where(and20(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.sourceDimension).all();
     const aiReferralLandingPageRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
@@ -23679,7 +23796,7 @@ async function ga4Routes(app, opts) {
       landingPage: sql10`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and19(...aiConditions)).groupBy(
+    }).from(gaAiReferrals).where(and20(...aiConditions)).groupBy(
       gaAiReferrals.source,
       gaAiReferrals.medium,
       gaAiReferrals.sourceDimension,
@@ -23716,7 +23833,7 @@ async function ga4Routes(app, opts) {
       channelGroup: gaAiReferrals.channelGroup,
       sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)`,
       users: sql10`COALESCE(SUM(${gaAiReferrals.users}), 0)`
-    }).from(gaAiReferrals).where(and19(...aiConditions, eq26(gaAiReferrals.sourceDimension, "session"))).groupBy(gaAiReferrals.channelGroup).all();
+    }).from(gaAiReferrals).where(and20(...aiConditions, eq26(gaAiReferrals.sourceDimension, "session"))).groupBy(gaAiReferrals.channelGroup).all();
     const aiSessionsByChannelGroup = /* @__PURE__ */ new Map();
     let aiBySessionUsers = 0;
     for (const row of aiBySessionRows) {
@@ -23730,11 +23847,11 @@ async function ga4Routes(app, opts) {
       channelGroup: gaSocialReferrals.channelGroup,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`,
       users: sql10`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and19(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql10`SUM(${gaSocialReferrals.sessions}) DESC`).all();
+    }).from(gaSocialReferrals).where(and20(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql10`SUM(${gaSocialReferrals.sessions}) DESC`).all();
     const socialTotals = app.db.select({
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`,
       users: sql10`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and19(...socialConditions)).get();
+    }).from(gaSocialReferrals).where(and20(...socialConditions)).get();
     const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq26(gaTrafficSummaries.projectId, project.id)).orderBy(desc13(gaTrafficSummaries.syncedAt)).limit(1).get();
     const total = summaryRow?.totalSessions ?? 0;
     const totalDirectSessions = directTotalRow?.totalDirectSessions ?? 0;
@@ -23825,7 +23942,7 @@ async function ga4Routes(app, opts) {
       sourceDimension: gaAiReferrals.sourceDimension,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and19(...conditions)).groupBy(
+    }).from(gaAiReferrals).where(and20(...conditions)).groupBy(
       gaAiReferrals.date,
       gaAiReferrals.source,
       gaAiReferrals.medium,
@@ -23847,7 +23964,7 @@ async function ga4Routes(app, opts) {
       channelGroup: gaSocialReferrals.channelGroup,
       sessions: gaSocialReferrals.sessions,
       users: gaSocialReferrals.users
-    }).from(gaSocialReferrals).where(and19(...conditions)).orderBy(gaSocialReferrals.date).all();
+    }).from(gaSocialReferrals).where(and20(...conditions)).orderBy(gaSocialReferrals.date).all();
     return rows;
   });
   app.get("/projects/:name/ga/social-referral-trend", async (request, _reply) => {
@@ -23860,7 +23977,7 @@ async function ga4Routes(app, opts) {
       d.setDate(d.getDate() - n);
       return fmt(d);
     };
-    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and19(
+    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and20(
       eq26(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${from}`,
       sql10`${gaSocialReferrals.date} < ${to}`
@@ -23873,7 +23990,7 @@ async function ga4Routes(app, opts) {
     const sourceCurrent = app.db.select({
       source: gaSocialReferrals.source,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and19(
+    }).from(gaSocialReferrals).where(and20(
       eq26(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`,
       sql10`${gaSocialReferrals.date} < ${fmt(today)}`
@@ -23881,7 +23998,7 @@ async function ga4Routes(app, opts) {
     const sourcePrev = app.db.select({
       source: gaSocialReferrals.source,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and19(
+    }).from(gaSocialReferrals).where(and20(
       eq26(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`,
       sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`
@@ -23923,16 +24040,16 @@ async function ga4Routes(app, opts) {
       return fmt(d);
     };
     const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
-    const sumTotal = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and19(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumOrganic = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and19(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumDirect = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and19(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumAi = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and19(
+    const sumTotal = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and20(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and20(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumDirect = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and20(eq26(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumAi = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and20(
       eq26(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${from}`,
       sql10`${gaAiReferrals.date} < ${to}`,
       eq26(gaAiReferrals.sourceDimension, "session")
     )).get();
-    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and19(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${from}`, sql10`${gaSocialReferrals.date} < ${to}`)).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and20(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${from}`, sql10`${gaSocialReferrals.date} < ${to}`)).get();
     const todayStr = fmt(today);
     const buildTrend = (sum) => {
       const c7 = sum(daysAgo(7), todayStr)?.sessions ?? 0;
@@ -23941,13 +24058,13 @@ async function ga4Routes(app, opts) {
       const p30 = sum(daysAgo(60), daysAgo(30))?.sessions ?? 0;
       return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
     };
-    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and19(
+    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and20(
       eq26(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${daysAgo(7)}`,
       sql10`${gaAiReferrals.date} < ${todayStr}`,
       eq26(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
-    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and19(
+    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and20(
       eq26(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${daysAgo(14)}`,
       sql10`${gaAiReferrals.date} < ${daysAgo(7)}`,
@@ -23967,8 +24084,8 @@ async function ga4Routes(app, opts) {
       }
       return mover;
     };
-    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and19(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`, sql10`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
-    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and19(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`, sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and20(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`, sql10`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and20(eq26(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`, sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`)).groupBy(gaSocialReferrals.source).all();
     return {
       total: buildTrend(sumTotal),
       organic: buildTrend(sumOrganic),
@@ -23990,7 +24107,7 @@ async function ga4Routes(app, opts) {
       sessions: sql10`SUM(${gaTrafficSnapshots.sessions})`,
       organicSessions: sql10`SUM(${gaTrafficSnapshots.organicSessions})`,
       users: sql10`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and19(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
+    }).from(gaTrafficSnapshots).where(and20(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
     return rows.map((r) => ({
       date: r.date,
       sessions: r.sessions ?? 0,
@@ -25654,7 +25771,7 @@ async function wordpressRoutes(app, opts) {
 
 // ../api-routes/src/backlinks.ts
 import crypto23 from "crypto";
-import { and as and21, asc as asc4, desc as desc14, eq as eq27, sql as sql11 } from "drizzle-orm";
+import { and as and22, asc as asc4, desc as desc14, eq as eq27, sql as sql11 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
 import os2 from "os";
@@ -26057,7 +26174,7 @@ function pruneCachedRelease(release, opts = {}) {
 }
 
 // ../api-routes/src/backlinks-filter.ts
-import { and as and20, ne as ne3, notLike } from "drizzle-orm";
+import { and as and21, ne as ne3, notLike } from "drizzle-orm";
 var BACKLINK_FILTER_PATTERNS = [
   "*.google.com",
   "*.googleusercontent.com",
@@ -26080,7 +26197,7 @@ function backlinkCrawlerExclusionClause() {
       conditions.push(ne3(backlinkDomains.linkingDomain, pattern));
     }
   }
-  const combined = and20(...conditions);
+  const combined = and21(...conditions);
   if (!combined) throw new Error("BACKLINK_FILTER_PATTERNS is unexpectedly empty");
   return combined;
 }
@@ -26155,7 +26272,7 @@ function latestSummaryForProject(db, projectId, source, release) {
     eq27(backlinkSummaries.source, source)
   ];
   if (release) conditions.push(eq27(backlinkSummaries.release, release));
-  return db.select().from(backlinkSummaries).where(and21(...conditions)).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
+  return db.select().from(backlinkSummaries).where(and22(...conditions)).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
 }
 function parseExcludeCrawlers(value) {
   if (!value) return false;
@@ -26163,12 +26280,12 @@ function parseExcludeCrawlers(value) {
   return lower === "1" || lower === "true" || lower === "yes";
 }
 function computeFilteredSummary(db, base) {
-  const baseDomainCondition = and21(
+  const baseDomainCondition = and22(
     eq27(backlinkDomains.projectId, base.projectId),
     eq27(backlinkDomains.source, base.source),
     eq27(backlinkDomains.release, base.release)
   );
-  const filteredCondition = and21(baseDomainCondition, backlinkCrawlerExclusionClause());
+  const filteredCondition = and22(baseDomainCondition, backlinkCrawlerExclusionClause());
   const unfilteredAgg = db.select({
     count: sql11`count(*)`,
     total: sql11`coalesce(sum(${backlinkDomains.numHosts}), 0)`
@@ -26198,10 +26315,10 @@ function computeFilteredSummary(db, base) {
   };
 }
 function buildSourceAvailability(db, projectId, source, connected, excludeCrawlers) {
-  const summary = db.select().from(backlinkSummaries).where(and21(eq27(backlinkSummaries.projectId, projectId), eq27(backlinkSummaries.source, source))).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
+  const summary = db.select().from(backlinkSummaries).where(and22(eq27(backlinkSummaries.projectId, projectId), eq27(backlinkSummaries.source, source))).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
   let totalLinkingDomains = summary?.totalLinkingDomains ?? 0;
   if (summary && excludeCrawlers) {
-    const filtered = db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(and21(
+    const filtered = db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(and22(
       eq27(backlinkDomains.projectId, projectId),
       eq27(backlinkDomains.source, source),
       eq27(backlinkDomains.release, summary.release),
@@ -26384,12 +26501,12 @@ async function backlinksRoutes(app, opts) {
     const limit = Math.min(Math.max(parseInt(request.query.limit ?? "50", 10) || 50, 1), 500);
     const offset = Math.max(parseInt(request.query.offset ?? "0", 10) || 0, 0);
     const excludeCrawlers = parseExcludeCrawlers(request.query.excludeCrawlers);
-    const baseDomainCondition = and21(
+    const baseDomainCondition = and22(
       eq27(backlinkDomains.projectId, project.id),
       eq27(backlinkDomains.source, source),
       eq27(backlinkDomains.release, targetRelease)
     );
-    const domainCondition = excludeCrawlers ? and21(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
+    const domainCondition = excludeCrawlers ? and22(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
     const totalRow = app.db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(domainCondition).get();
     const rows = app.db.select({
       linkingDomain: backlinkDomains.linkingDomain,
@@ -26413,7 +26530,7 @@ async function backlinksRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const source = parseSourceParam(request.query.source);
-      const rows = app.db.select().from(backlinkSummaries).where(and21(eq27(backlinkSummaries.projectId, project.id), eq27(backlinkSummaries.source, source))).orderBy(asc4(backlinkSummaries.queriedAt)).all();
+      const rows = app.db.select().from(backlinkSummaries).where(and22(eq27(backlinkSummaries.projectId, project.id), eq27(backlinkSummaries.source, source))).orderBy(asc4(backlinkSummaries.queriedAt)).all();
       const response = rows.map((r) => ({
         release: r.release,
         totalLinkingDomains: r.totalLinkingDomains,
@@ -26469,7 +26586,7 @@ async function backlinksRoutes(app, opts) {
 // ../api-routes/src/traffic.ts
 import crypto25 from "crypto";
 import { Agent as UndiciAgent } from "undici";
-import { and as and22, desc as desc15, eq as eq28, gte as gte4, lte as lte3, sql as sql12 } from "drizzle-orm";
+import { and as and23, desc as desc15, eq as eq28, gte as gte4, lte as lte3, sql as sql12 } from "drizzle-orm";
 
 // ../integration-cloud-run/src/auth.ts
 import crypto24 from "crypto";
@@ -30328,28 +30445,28 @@ async function runBackfillTask(options) {
   try {
     app.db.transaction((tx) => {
       tx.delete(crawlerEventsHourly).where(
-        and22(
+        and23(
           eq28(crawlerEventsHourly.sourceId, sourceRow.id),
           gte4(crawlerEventsHourly.tsHour, windowStartIso),
           lte3(crawlerEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(aiUserFetchEventsHourly).where(
-        and22(
+        and23(
           eq28(aiUserFetchEventsHourly.sourceId, sourceRow.id),
           gte4(aiUserFetchEventsHourly.tsHour, windowStartIso),
           lte3(aiUserFetchEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(aiReferralEventsHourly).where(
-        and22(
+        and23(
           eq28(aiReferralEventsHourly.sourceId, sourceRow.id),
           gte4(aiReferralEventsHourly.tsHour, windowStartIso),
           lte3(aiReferralEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(rawEventSamples).where(
-        and22(
+        and23(
           eq28(rawEventSamples.sourceId, sourceRow.id),
           gte4(rawEventSamples.ts, windowStartIso),
           lte3(rawEventSamples.ts, windowEndIso)
@@ -30732,7 +30849,7 @@ async function trafficRoutes(app, opts) {
         row = tx.select().from(trafficSources).where(eq28(trafficSources.id, newId)).get();
       }
       const existingSchedule = tx.select().from(schedules).where(
-        and22(
+        and23(
           eq28(schedules.projectId, project.id),
           eq28(schedules.kind, SchedulableRunKinds["traffic-sync"])
         )
@@ -31454,7 +31571,7 @@ async function trafficRoutes(app, opts) {
       pathNormalized: crawlerEventsHourly.pathNormalized,
       hits: sql12`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
     }).from(crawlerEventsHourly).where(
-      and22(
+      and23(
         eq28(crawlerEventsHourly.sourceId, row.id),
         gte4(crawlerEventsHourly.tsHour, since)
       )
@@ -31464,25 +31581,25 @@ async function trafficRoutes(app, opts) {
     );
     const crawlerTotal = crawlerSegments.content + crawlerSegments.sitemap + crawlerSegments.robots + crawlerSegments.asset + crawlerSegments.other;
     const aiUserFetchTotals = app.db.select({ total: sql12`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
-      and22(
+      and23(
         eq28(aiUserFetchEventsHourly.sourceId, row.id),
         gte4(aiUserFetchEventsHourly.tsHour, since)
       )
     ).get();
     const aiTotals = app.db.select({ total: sql12`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-      and22(
+      and23(
         eq28(aiReferralEventsHourly.sourceId, row.id),
         gte4(aiReferralEventsHourly.tsHour, since)
       )
     ).get();
     const sampleTotals = app.db.select({ total: sql12`COUNT(*)` }).from(rawEventSamples).where(
-      and22(
+      and23(
         eq28(rawEventSamples.sourceId, row.id),
         gte4(rawEventSamples.ts, since)
       )
     ).get();
     const latestRun = app.db.select().from(runs).where(
-      and22(
+      and23(
         eq28(runs.projectId, projectId),
         eq28(runs.kind, RunKinds["traffic-sync"]),
         eq28(runs.sourceId, row.id)
@@ -31516,7 +31633,7 @@ async function trafficRoutes(app, opts) {
         "`advanceToNow` must be `true`. There is no implicit reset."
       );
     }
-    const sourceRow = app.db.select().from(trafficSources).where(and22(eq28(trafficSources.projectId, project.id), eq28(trafficSources.id, request.params.id))).get();
+    const sourceRow = app.db.select().from(trafficSources).where(and23(eq28(trafficSources.projectId, project.id), eq28(trafficSources.id, request.params.id))).get();
     if (!sourceRow) {
       throw notFound("traffic source", request.params.id);
     }
@@ -31621,7 +31738,7 @@ async function trafficRoutes(app, opts) {
         lte3(crawlerEventsHourly.tsHour, untilIso)
       ];
       if (sourceIdParam) crawlerFilters.push(eq28(crawlerEventsHourly.sourceId, sourceIdParam));
-      const crawlerWhere = and22(...crawlerFilters);
+      const crawlerWhere = and23(...crawlerFilters);
       const pathTotals = app.db.select({
         pathNormalized: crawlerEventsHourly.pathNormalized,
         hits: sql12`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
@@ -31653,7 +31770,7 @@ async function trafficRoutes(app, opts) {
         lte3(aiUserFetchEventsHourly.tsHour, untilIso)
       ];
       if (sourceIdParam) userFetchFilters.push(eq28(aiUserFetchEventsHourly.sourceId, sourceIdParam));
-      const userFetchWhere = and22(...userFetchFilters);
+      const userFetchWhere = and23(...userFetchFilters);
       const total = app.db.select({ total: sql12`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(userFetchWhere).get();
       aiUserFetchTotal = Number(total?.total ?? 0);
       const rows = app.db.select().from(aiUserFetchEventsHourly).where(userFetchWhere).orderBy(desc15(aiUserFetchEventsHourly.tsHour)).limit(limit).all();
@@ -31678,7 +31795,7 @@ async function trafficRoutes(app, opts) {
         lte3(aiReferralEventsHourly.tsHour, untilIso)
       ];
       if (sourceIdParam) aiFilters.push(eq28(aiReferralEventsHourly.sourceId, sourceIdParam));
-      const aiWhere = and22(...aiFilters);
+      const aiWhere = and23(...aiFilters);
       const total = app.db.select({ total: sql12`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(aiWhere).get();
       aiReferralTotal = Number(total?.total ?? 0);
       const rows = app.db.select().from(aiReferralEventsHourly).where(aiWhere).orderBy(desc15(aiReferralEventsHourly.tsHour)).limit(limit).all();
@@ -31885,7 +32002,7 @@ function readInstalledManifest(skillDir) {
 var AGENT_CHECKS = [skillsInstalledCheck, skillsCurrentCheck];
 
 // ../api-routes/src/doctor/checks/backlinks.ts
-import { and as and23, eq as eq29 } from "drizzle-orm";
+import { and as and24, eq as eq29 } from "drizzle-orm";
 function skippedNoProject() {
   return {
     status: CheckStatuses.skipped,
@@ -31917,7 +32034,7 @@ var BACKLINKS_CHECKS = [
           details: { commoncrawl: ccConnected, bingWebmaster: bingConnected }
         };
       }
-      const ccHasData = ccConnected ? !!ctx.db.select({ id: backlinkSummaries.id }).from(backlinkSummaries).where(and23(
+      const ccHasData = ccConnected ? !!ctx.db.select({ id: backlinkSummaries.id }).from(backlinkSummaries).where(and24(
         eq29(backlinkSummaries.projectId, ctx.project.id),
         eq29(backlinkSummaries.source, BacklinkSources.commoncrawl)
       )).limit(1).get() : false;
@@ -32442,7 +32559,7 @@ var ga4ConnectionCheck = {
 var GA_AUTH_CHECKS = [ga4ConnectionCheck];
 
 // ../api-routes/src/doctor/checks/gbp-auth.ts
-import { and as and24, eq as eq32 } from "drizzle-orm";
+import { and as and25, eq as eq32 } from "drizzle-orm";
 var RECENT_SYNC_WARN_DAYS2 = 7;
 var RECENT_SYNC_FAIL_DAYS2 = 30;
 function skippedNoProject3() {
@@ -32675,7 +32792,7 @@ var recentSyncCheck = {
   title: "GBP recent sync",
   run: (ctx) => {
     if (!ctx.project) return skippedNoProject3();
-    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and24(eq32(gbpLocations.projectId, ctx.project.id), eq32(gbpLocations.selected, true))).all();
+    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and25(eq32(gbpLocations.projectId, ctx.project.id), eq32(gbpLocations.selected, true))).all();
     if (selected.length === 0) {
       return {
         status: CheckStatuses.skipped,
@@ -33277,7 +33394,7 @@ var RUNTIME_STATE_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/traffic-source.ts
-import { and as and25, eq as eq34, gte as gte5, ne as ne4, sql as sql13 } from "drizzle-orm";
+import { and as and26, eq as eq34, gte as gte5, ne as ne4, sql as sql13 } from "drizzle-orm";
 var RECENT_DATA_WARN_DAYS = 7;
 var RECENT_DATA_FAIL_DAYS = 30;
 function skippedNoProject5() {
@@ -33291,7 +33408,7 @@ function skippedNoProject5() {
 function loadProbes(ctx) {
   if (!ctx.project) return [];
   const rows = ctx.db.select().from(trafficSources).where(
-    and25(
+    and26(
       eq34(trafficSources.projectId, ctx.project.id),
       ne4(trafficSources.status, TrafficSourceStatuses.archived)
     )
@@ -33372,7 +33489,7 @@ var recentDataCheck = {
     const failCutoff = new Date(now.getTime() - RECENT_DATA_FAIL_DAYS * 24 * 60 * 6e4).toISOString();
     const recentCrawlers = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and25(
+        and26(
           eq34(crawlerEventsHourly.projectId, ctx.project.id),
           gte5(crawlerEventsHourly.tsHour, warnCutoff)
         )
@@ -33380,7 +33497,7 @@ var recentDataCheck = {
     );
     const recentReferrals = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and25(
+        and26(
           eq34(aiReferralEventsHourly.projectId, ctx.project.id),
           gte5(aiReferralEventsHourly.tsHour, warnCutoff)
         )
@@ -33396,7 +33513,7 @@ var recentDataCheck = {
     }
     const olderCrawlers = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and25(
+        and26(
           eq34(crawlerEventsHourly.projectId, ctx.project.id),
           gte5(crawlerEventsHourly.tsHour, failCutoff)
         )
@@ -33404,7 +33521,7 @@ var recentDataCheck = {
     );
     const olderReferrals = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and25(
+        and26(
           eq34(aiReferralEventsHourly.projectId, ctx.project.id),
           gte5(aiReferralEventsHourly.tsHour, failCutoff)
         )
@@ -33821,7 +33938,7 @@ async function doctorRoutes(app, opts) {
 
 // ../api-routes/src/discovery/routes.ts
 import crypto27 from "crypto";
-import { and as and26, desc as desc16, eq as eq35, gte as gte6, inArray as inArray12, isNull, or as or5 } from "drizzle-orm";
+import { and as and27, desc as desc16, eq as eq35, gte as gte6, inArray as inArray12, isNull, or as or5 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
   app.post("/projects/:name/discover/run", async (request, reply) => {
@@ -33855,7 +33972,7 @@ async function discoveryRoutes(app, opts) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const ageFloorIso = new Date(Date.now() - MAX_INFLIGHT_DISCOVERY_AGE_MS).toISOString();
     const decision = app.db.transaction((tx) => {
-      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and26(
+      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and27(
         eq35(discoverySessions.projectId, project.id),
         eq35(discoverySessions.icpDescription, icpDescription),
         // Buyer is part of session identity: it changes the seed prompt's
@@ -34501,7 +34618,7 @@ function dedupeStrings(input) {
 
 // ../api-routes/src/technical-aeo.ts
 import crypto29 from "crypto";
-import { and as and27, asc as asc5, count, desc as desc17, eq as eq37, inArray as inArray13 } from "drizzle-orm";
+import { and as and28, asc as asc5, count, desc as desc17, eq as eq37, inArray as inArray13 } from "drizzle-orm";
 var SURFACEABLE_STATUSES = [RunStatuses.completed, RunStatuses.partial];
 function emptyScore(projectName) {
   return {
@@ -34533,7 +34650,7 @@ function parsePositiveInt(value, fallback, max) {
 async function technicalAeoRoutes(app, opts) {
   app.get("/projects/:name/technical-aeo", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and27(
+    const rows = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and28(
       eq37(siteAuditSnapshots.projectId, project.id),
       eq37(runs.kind, RunKinds["site-audit"]),
       inArray13(runs.status, SURFACEABLE_STATUSES),
@@ -34568,7 +34685,7 @@ async function technicalAeoRoutes(app, opts) {
   });
   app.get("/projects/:name/technical-aeo/pages", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and27(
+    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and28(
       eq37(siteAuditSnapshots.projectId, project.id),
       eq37(runs.kind, RunKinds["site-audit"]),
       inArray13(runs.status, SURFACEABLE_STATUSES),
@@ -34580,7 +34697,7 @@ async function technicalAeoRoutes(app, opts) {
     const statusFilter = request.query.status === "success" || request.query.status === "error" ? request.query.status : null;
     const conds = [eq37(siteAuditPages.runId, latest.runId)];
     if (statusFilter) conds.push(eq37(siteAuditPages.status, statusFilter));
-    const where = and27(...conds);
+    const where = and28(...conds);
     const totalRow = app.db.select({ value: count() }).from(siteAuditPages).where(where).get();
     const total = totalRow?.value ?? 0;
     const limit = parsePositiveInt(request.query.limit, 100, 500);
@@ -34604,7 +34721,7 @@ async function technicalAeoRoutes(app, opts) {
       auditedAt: siteAuditSnapshots.auditedAt,
       aggregateScore: siteAuditSnapshots.aggregateScore,
       pagesAudited: siteAuditSnapshots.pagesAudited
-    }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and27(
+    }).from(siteAuditSnapshots).innerJoin(runs, eq37(siteAuditSnapshots.runId, runs.id)).where(and28(
       eq37(siteAuditSnapshots.projectId, project.id),
       eq37(runs.kind, RunKinds["site-audit"]),
       inArray13(runs.status, SURFACEABLE_STATUSES),
@@ -34618,7 +34735,7 @@ async function technicalAeoRoutes(app, opts) {
     if (!parsed.success) {
       throw validationError(parsed.error.issues[0]?.message ?? "Invalid site-audit request");
     }
-    const existing = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and27(
+    const existing = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and28(
       eq37(runs.projectId, project.id),
       eq37(runs.kind, RunKinds["site-audit"]),
       inArray13(runs.status, [RunStatuses.queued, RunStatuses.running])
@@ -34687,7 +34804,8 @@ async function apiRoutes(app, opts) {
     if (!opts.skipAuth) {
       await authPlugin(api, {
         sessionCookieName: opts.sessionCookieName,
-        resolveSessionApiKeyId: opts.resolveSessionApiKeyId
+        resolveSessionApiKeyId: opts.resolveSessionApiKeyId,
+        embedProjectTabs: opts.embedProjectTabs
       });
     }
     await api.register(openApiRoutes, { ...opts.openApiInfo, routePrefix: opts.routePrefix });
@@ -35211,7 +35329,7 @@ var IntelligenceService = class {
    */
   analyzeAndPersist(runId, projectId) {
     const recentRuns = this.db.select().from(runs).where(
-      and28(
+      and29(
         eq38(runs.projectId, projectId),
         or6(eq38(runs.status, "completed"), eq38(runs.status, "partial")),
         // Defensive: RunCoordinator already skips probes before this is
@@ -35303,7 +35421,7 @@ var IntelligenceService = class {
     }
     const windowStart = runRow.startedAt ?? runRow.createdAt;
     const windowEnd = runRow.finishedAt ?? (/* @__PURE__ */ new Date()).toISOString();
-    const selected = this.db.select().from(gbpLocations).where(and28(
+    const selected = this.db.select().from(gbpLocations).where(and29(
       eq38(gbpLocations.projectId, projectId),
       eq38(gbpLocations.selected, true),
       gte7(gbpLocations.syncedAt, windowStart),
@@ -35340,12 +35458,12 @@ var IntelligenceService = class {
   }
   /** Build the per-location signal bundle the GBP analyzer consumes. */
   buildGbpLocationSignals(projectId, locationName, displayName, fallbackDate) {
-    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and28(eq38(gbpDailyMetrics.projectId, projectId), eq38(gbpDailyMetrics.locationName, locationName))).all();
-    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and28(eq38(gbpPlaceActions.projectId, projectId), eq38(gbpPlaceActions.locationName, locationName))).all();
-    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and28(eq38(gbpLodgingSnapshots.projectId, projectId), eq38(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc18(gbpLodgingSnapshots.syncedAt)).limit(1).get();
-    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and28(eq38(gbpLocations.projectId, projectId), eq38(gbpLocations.locationName, locationName))).get();
+    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and29(eq38(gbpDailyMetrics.projectId, projectId), eq38(gbpDailyMetrics.locationName, locationName))).all();
+    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and29(eq38(gbpPlaceActions.projectId, projectId), eq38(gbpPlaceActions.locationName, locationName))).all();
+    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and29(eq38(gbpLodgingSnapshots.projectId, projectId), eq38(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc18(gbpLodgingSnapshots.syncedAt)).limit(1).get();
+    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and29(eq38(gbpLocations.projectId, projectId), eq38(gbpLocations.locationName, locationName))).get();
     const descriptionMissing = !(ownerRow?.description ?? "").trim();
-    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and28(eq38(gbpPlaceDetails.projectId, projectId), eq38(gbpPlaceDetails.locationName, locationName))).orderBy(desc18(gbpPlaceDetails.syncedAt)).limit(1).get();
+    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and29(eq38(gbpPlaceDetails.projectId, projectId), eq38(gbpPlaceDetails.locationName, locationName))).orderBy(desc18(gbpPlaceDetails.syncedAt)).limit(1).get();
     const placesAmenities = placeRow ? extractPlaceAmenities(placeRow.attributes) : [];
     const summary = buildGbpSummary({
       locationName,
@@ -35381,7 +35499,7 @@ var IntelligenceService = class {
   /** Build the month-over-month keyword series for a location from the
    *  accumulating gbp_keyword_monthly table (latest complete month vs prior). */
   buildGbpKeywordTrend(projectId, locationName) {
-    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and28(eq38(gbpKeywordMonthly.projectId, projectId), eq38(gbpKeywordMonthly.locationName, locationName))).all();
+    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and29(eq38(gbpKeywordMonthly.projectId, projectId), eq38(gbpKeywordMonthly.locationName, locationName))).all();
     if (rows.length === 0) return { recentMonth: null, priorMonth: null, points: [] };
     const months = [...new Set(rows.map((r) => r.month))].sort().reverse();
     const recentMonth = months[0] ?? null;
@@ -35412,7 +35530,7 @@ var IntelligenceService = class {
    */
   persistGbpInsights(runId, projectId, gbpInsights, coveredLocationNames) {
     const covered = new Set(coveredLocationNames);
-    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and28(eq38(insights.projectId, projectId), eq38(insights.provider, GBP_INSIGHT_PROVIDER))).all();
+    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and29(eq38(insights.projectId, projectId), eq38(insights.provider, GBP_INSIGHT_PROVIDER))).all();
     const staleIds = [];
     const dismissedSlots = /* @__PURE__ */ new Set();
     for (const row of existing) {
@@ -35514,7 +35632,7 @@ var IntelligenceService = class {
       sinceTimestamp = parsed;
     }
     const allRuns = this.db.select().from(runs).where(
-      and28(
+      and29(
         eq38(runs.projectId, project.id),
         or6(eq38(runs.status, "completed"), eq38(runs.status, "partial")),
         // Backfill must not replay probe runs as if they were real sweeps.
@@ -35691,7 +35809,7 @@ var IntelligenceService = class {
     );
     const ROWS_PER_GROUP_BUDGET = Math.max(2, locationCount);
     const recentRunRows = this.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(
-      and28(
+      and29(
         eq38(runs.projectId, projectId),
         eq38(runs.kind, RunKinds["answer-visibility"]),
         or6(eq38(runs.status, "completed"), eq38(runs.status, "partial")),
@@ -35714,7 +35832,7 @@ var IntelligenceService = class {
     const haveHistory = recentRunIds.length > 0;
     const priorRegressionsByPair = /* @__PURE__ */ new Map();
     if (haveHistory) {
-      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and28(eq38(insights.type, "regression"), inArray14(insights.runId, recentRunIds))).all();
+      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and29(eq38(insights.type, "regression"), inArray14(insights.runId, recentRunIds))).all();
       const regressionGroups = /* @__PURE__ */ new Map();
       for (const row of priorRows) {
         if (!row.runId) continue;