@ainyc/canonry 4.180.7 → 4.180.8

package/dist/{chunk-XYTSKRO3.js → chunk-G7M2KM7Q.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-CWXPBQR5.js";
+} from "./chunk-IM4HFNGF.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-RXXZ5BU5.js";
+} from "./chunk-GN2G7VFK.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-VZO6CLHY.js → chunk-GFVZOVG3.js}

@@ -11,7 +11,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-CWXPBQR5.js";
+} from "./chunk-IM4HFNGF.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -157,7 +157,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-WJFBNCVD.js";
+} from "./chunk-ZJ2VGTYU.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -266,6 +266,7 @@ import {
   isSelfLink,
   isVertexGroundingRedirect,
   mapWithConcurrency,
+  nextScheduleUpdatedAt,
   normalizeIdTokens,
   normalizeMeasurementExecutionQueryText,
   normalizeServedModel,
@@ -295,7 +296,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-RXXZ5BU5.js";
+} from "./chunk-GN2G7VFK.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -11866,7 +11867,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-MEPYXRBS.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-IURLYRB3.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -12447,6 +12448,21 @@ import cron from "node-cron";
 import { and as and14, eq as eq17, inArray as inArray6, notExists, sql as sql8 } from "drizzle-orm";
 var log14 = createLogger("Scheduler");
 var DEFAULT_HEALTH_CRON = "0 */6 * * *";
+function ensureDefaultHealthSchedule(db, projectId, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  const result = db.insert(schedules).values({
+    id: crypto20.randomUUID(),
+    projectId,
+    kind: SchedulableRunKinds.doctor,
+    cronExpr: DEFAULT_HEALTH_CRON,
+    timezone: "UTC",
+    enabled: true,
+    providers: [],
+    nextRunAt: nextRunFromCron(DEFAULT_HEALTH_CRON, "UTC"),
+    createdAt: now,
+    updatedAt: now
+  }).onConflictDoNothing().run();
+  return result.changes === 1;
+}
 function taskKey(projectId, kind) {
   return `${projectId}::${kind}`;
 }
@@ -12483,21 +12499,13 @@ var Scheduler = class {
     )).all();
     if (projectsWithoutHealth.length === 0) return;
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    let seeded = 0;
     for (const project of projectsWithoutHealth) {
-      this.db.insert(schedules).values({
-        id: crypto20.randomUUID(),
-        projectId: project.id,
-        kind: SchedulableRunKinds.doctor,
-        cronExpr: DEFAULT_HEALTH_CRON,
-        timezone: "UTC",
-        enabled: true,
-        providers: [],
-        nextRunAt: nextRunFromCron(DEFAULT_HEALTH_CRON, "UTC"),
-        createdAt: now,
-        updatedAt: now
-      }).run();
+      if (ensureDefaultHealthSchedule(this.db, project.id, now)) seeded += 1;
+    }
+    if (seeded > 0) {
+      log14.info("health-schedule.seeded", { projectCount: seeded, cron: DEFAULT_HEALTH_CRON });
     }
-    log14.info("health-schedule.seeded", { projectCount: projectsWithoutHealth.length, cron: DEFAULT_HEALTH_CRON });
   }
   /**
    * Record each project's current query set as basket revision 1 if it has
@@ -12584,6 +12592,17 @@ var Scheduler = class {
     void task.destroy();
     log14.info(`task.${verb.toLowerCase()}`, { key });
   }
+  /** Runtime timing writes must not restore a version already issued to a settings caller. */
+  updateScheduleTiming(scheduleId, timing) {
+    this.db.transaction((tx) => {
+      const current = tx.select({ updatedAt: schedules.updatedAt }).from(schedules).where(eq17(schedules.id, scheduleId)).get();
+      if (!current) return;
+      tx.update(schedules).set({
+        ...timing,
+        updatedAt: nextScheduleUpdatedAt(current.updatedAt)
+      }).where(eq17(schedules.id, scheduleId)).run();
+    });
+  }
   registerCronTask(schedule) {
     const { id: scheduleId, projectId, cronExpr, timezone } = schedule;
     const kind = schedule.kind;
@@ -12597,10 +12616,9 @@ var Scheduler = class {
       timezone
     });
     this.tasks.set(taskKey(projectId, kind), task);
-    this.db.update(schedules).set({
-      nextRunAt: nextRunFromCron(cronExpr, timezone),
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq17(schedules.id, scheduleId)).run();
+    this.updateScheduleTiming(scheduleId, {
+      nextRunAt: nextRunFromCron(cronExpr, timezone)
+    });
     const label = schedule.preset ?? cronExpr;
     log14.info("cron.registered", { projectId, kind, schedule: label, timezone });
   }
@@ -12630,11 +12648,10 @@ var Scheduler = class {
           log14.warn("traffic-sync.no-callback", { scheduleId, projectId, msg: "host did not register onTrafficSyncRequested" });
           return;
         }
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("traffic-sync.triggered", { projectName: project.name, sourceId });
         this.callbacks.onTrafficSyncRequested(project.name, sourceId);
         return;
@@ -12653,11 +12670,10 @@ var Scheduler = class {
           trigger: RunTriggers.scheduled,
           createdAt: now
         }).run();
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("gbp-sync.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onGbpSyncRequested(runId2, projectId);
         return;
@@ -12674,7 +12690,7 @@ var Scheduler = class {
         )).get();
         if (activeAdsRun) {
           log14.info("ads-sync.skipped-active", { projectName: project.name, activeRunId: activeAdsRun.id });
-          this.db.update(schedules).set({ nextRunAt, updatedAt: now }).where(eq17(schedules.id, currentSchedule.id)).run();
+          this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
         const runId2 = crypto20.randomUUID();
@@ -12686,11 +12702,10 @@ var Scheduler = class {
           trigger: RunTriggers.scheduled,
           createdAt: now
         }).run();
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("ads-sync.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onAdsSyncRequested(runId2, projectId);
         return;
@@ -12700,11 +12715,10 @@ var Scheduler = class {
           log14.warn("data-refresh.no-callback", { scheduleId, projectId, msg: "host did not register onDataRefreshRequested" });
           return;
         }
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("data-refresh.triggered", { projectName: project.name });
         this.callbacks.onDataRefreshRequested(project.name);
         return;
@@ -12714,11 +12728,10 @@ var Scheduler = class {
           log14.warn("doctor.no-callback", { scheduleId, projectId, msg: "host did not register onDoctorRequested" });
           return;
         }
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("doctor.triggered", { projectName: project.name });
         this.callbacks.onDoctorRequested(project.name);
         return;
@@ -12728,11 +12741,10 @@ var Scheduler = class {
           log14.warn("backlinks-sync.no-callback", { scheduleId, projectId, msg: "host did not register onBacklinksSyncRequested" });
           return;
         }
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("backlinks-sync.triggered", { projectName: project.name });
         this.callbacks.onBacklinksSyncRequested(project.name);
         return;
@@ -12749,7 +12761,7 @@ var Scheduler = class {
         )).get();
         if (active) {
           log14.info("site-audit.skipped-active", { projectName: project.name, activeRunId: active.id });
-          this.db.update(schedules).set({ nextRunAt, updatedAt: now }).where(eq17(schedules.id, currentSchedule.id)).run();
+          this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
         const runId2 = crypto20.randomUUID();
@@ -12771,11 +12783,10 @@ var Scheduler = class {
             createdAt: now
           }).run();
         });
-        this.db.update(schedules).set({
+        this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+          nextRunAt
+        });
         log14.info("site-audit.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onSiteAuditRequested(runId2, projectId);
         return;
@@ -12805,18 +12816,16 @@ var Scheduler = class {
       });
       if (queueResult.conflict) {
         log14.info("run.skipped-active", { projectName: project.name, activeRunId: queueResult.activeRunId });
-        this.db.update(schedules).set({
-          nextRunAt,
-          updatedAt: now
-        }).where(eq17(schedules.id, currentSchedule.id)).run();
+        this.updateScheduleTiming(currentSchedule.id, {
+          nextRunAt
+        });
         return;
       }
       const runId = queueResult.runId;
-      this.db.update(schedules).set({
+      this.updateScheduleTiming(currentSchedule.id, {
         lastRunAt: now,
-        nextRunAt,
-        updatedAt: now
-      }).where(eq17(schedules.id, currentSchedule.id)).run();
+        nextRunAt
+      });
       log14.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
       this.callbacks.onRunCreated(runId, projectId, providers, resolvedLocation);
     } catch (err) {
@@ -16775,6 +16784,11 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
 var _require3 = createRequire4(import.meta.url);
 var { version: PKG_VERSION2 } = _require3("../package.json");
 var log21 = createLogger("Server");
+var runtimeStartupByServer = /* @__PURE__ */ new WeakMap();
+function waitForServerRuntimeStartup(app) {
+  const startup = runtimeStartupByServer.get(app);
+  return startup ?? Promise.reject(new Error("Server runtime startup was not registered"));
+}
 var DEFAULT_QUOTA = {
   maxConcurrency: 2,
   maxRequestsPerMinute: 10,
@@ -18114,7 +18128,7 @@ async function createServer(opts) {
         return reply.status(401).send({
           error: {
             code: "AUTH_INVALID",
-            message: "Server API key not found \u2014 re-run canonry init"
+            message: "Server API key not found \u2014 run canonry bootstrap"
           }
         });
       }
@@ -18679,6 +18693,11 @@ async function createServer(opts) {
       if (action === "upsert") scheduler.upsert(projectId, kind);
       if (action === "delete") scheduler.remove(projectId, kind);
     },
+    onProjectCreated: (projectId) => {
+      if (ensureDefaultHealthSchedule(opts.db, projectId)) {
+        scheduler.upsert(projectId, SchedulableRunKinds.doctor);
+      }
+    },
     onProjectDeleting: prepareGoogleMarketingCredentialDelete,
     onProjectDeleted: (projectId) => {
       scheduler.removeAllForProject(projectId);
@@ -18948,10 +18967,30 @@ async function createServer(opts) {
     app.get(`${basePath}health`, healthHandler);
   }
   checkLatestVersionForServer();
-  scheduler.start();
-  for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq26(researchRuns.status, ResearchRunStatuses.queued)).all()) {
-    dispatchResearchRun(run.id, run.projectId);
-  }
+  let resolveRuntimeStartup;
+  let rejectRuntimeStartup;
+  const runtimeStartup = new Promise((resolve, reject) => {
+    resolveRuntimeStartup = resolve;
+    rejectRuntimeStartup = reject;
+  });
+  void runtimeStartup.catch(() => {
+  });
+  runtimeStartupByServer.set(app, runtimeStartup);
+  let runtimeStartupSettled = false;
+  app.addHook("onListen", () => {
+    if (runtimeStartupSettled) return;
+    try {
+      scheduler.start();
+      for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq26(researchRuns.status, ResearchRunStatuses.queued)).all()) {
+        dispatchResearchRun(run.id, run.projectId);
+      }
+      runtimeStartupSettled = true;
+      resolveRuntimeStartup();
+    } catch (error) {
+      runtimeStartupSettled = true;
+      rejectRuntimeStartup(error);
+    }
+  });
   app.addHook("onClose", async () => {
     scheduler.stop();
   });
@@ -19043,5 +19082,7 @@ export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
+  waitForServerRuntimeStartup,
+  isLoopbackBindHost,
   createServer
 };

package/dist/{chunk-RXXZ5BU5.js → chunk-GN2G7VFK.js}

@@ -78,6 +78,14 @@ function runInProgress(projectName) {
 function operationInProgress(message, details) {
   return new AppError("OPERATION_IN_PROGRESS", message, 409, details);
 }
+function scheduleVersionConflict(expectedUpdatedAt, actualUpdatedAt) {
+  return new AppError(
+    "SCHEDULE_VERSION_CONFLICT",
+    "The schedule changed since it was loaded. Reload it before saving.",
+    409,
+    { expectedUpdatedAt, actualUpdatedAt }
+  );
+}
 function measurementPlanRevisionConflict(expectedActiveRevision, actualActiveRevision) {
   return new AppError(
     "MEASUREMENT_PLAN_REVISION_CONFLICT",
@@ -6818,6 +6826,8 @@ var measurementSetupResponseSchema = z15.object({
   state: measurementSetupStateSchema,
   nextAction: measurementSetupNextActionSchema,
   mode: measurementSetupModeSchema,
+  /** Whether this project's selected provider roster contains an engine the host can execute now. */
+  answerVisibilityProviderReady: z15.boolean(),
   activeRevision: measurementDraftRevisionSchema.nullable(),
   activeSchemaVersion: z15.union([z15.literal(1), z15.literal(2)]).nullable(),
   draft: z15.object({
@@ -10748,6 +10758,11 @@ var scheduleDtoSchema = z31.object({
   createdAt: z31.string(),
   updatedAt: z31.string()
 });
+var scheduleExpectedUpdatedAtSchema = z31.string().datetime();
+function nextScheduleUpdatedAt(previous, nowMs = Date.now()) {
+  const previousMs = previous === void 0 ? Number.NaN : Date.parse(previous);
+  return new Date(Number.isFinite(previousMs) ? Math.max(nowMs, previousMs + 1) : nowMs).toISOString();
+}
 var scheduleUpsertRequestSchema = z31.object({
   /** Run kind. Defaults to 'answer-visibility' so existing callers don't have to change. */
   kind: schedulableRunKindSchema.optional(),
@@ -10757,7 +10772,12 @@ var scheduleUpsertRequestSchema = z31.object({
   enabled: z31.boolean().optional().default(true),
   providers: z31.array(providerNameSchema).optional().default([]),
   /** Required when kind === 'traffic-sync'. Forbidden for other kinds. Validated server-side. */
-  sourceId: z31.string().optional()
+  sourceId: z31.string().optional(),
+  /**
+   * Optimistic concurrency guard. A timestamp updates only that exact version;
+   * null creates only while the schedule is absent. Omit for legacy behavior.
+   */
+  expectedUpdatedAt: scheduleExpectedUpdatedAtSchema.nullable().optional()
 }).refine(
   (data) => data.preset && !data.cron || !data.preset && data.cron,
   { message: 'Exactly one of "preset" or "cron" must be provided' }
@@ -16436,6 +16456,7 @@ export {
   noQueries,
   runInProgress,
   operationInProgress,
+  scheduleVersionConflict,
   measurementPlanRevisionConflict,
   measurementCompiledChecksumConflict,
   measurementRunRevisionMismatch,
@@ -16854,6 +16875,8 @@ export {
   schedulableRunKindSchema,
   SchedulableRunKinds,
   scheduleDtoSchema,
+  scheduleExpectedUpdatedAtSchema,
+  nextScheduleUpdatedAt,
   scheduleUpsertRequestSchema,
   categorizeSource,
   categorizeSourceWithCompetitors,

package/dist/{chunk-CWXPBQR5.js → chunk-IM4HFNGF.js}

@@ -92,7 +92,7 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema
-} from "./chunk-RXXZ5BU5.js";
+} from "./chunk-GN2G7VFK.js";
 
 // src/config.ts
 import fs from "fs";
@@ -160,8 +160,8 @@ function loadConfig() {
   if (!fs.existsSync(configPath)) {
     throw new Error(
       `Config not found at ${configPath}.
-Run "canonry init" to set up interactively, or "canonry init --gemini-key <key>" for non-interactive setup.
-For CI/Docker, use "canonry bootstrap" with env vars (GEMINI_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY, PERPLEXITY_API_KEY, GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET).`
+Run "canonry bootstrap" to create the local Page Health runtime; provider credentials are optional.
+Use "canonry init" instead only when you want interactive provider/OAuth provisioning.`
     );
   }
   const raw = fs.readFileSync(configPath, "utf-8");
@@ -174,8 +174,10 @@ For CI/Docker, use "canonry bootstrap" with env vars (GEMINI_API_KEY, OPENAI_API
     ].filter(Boolean).join(", ");
     throw new Error(
       `Invalid config at ${configPath} \u2014 missing: ${missing}.
-These fields are auto-generated. Run "canonry init" (or "canonry init --gemini-key <key>" for non-interactive setup) to create a valid config.
-Do not write config.yaml by hand; use "canonry init", "canonry settings", or "canonry bootstrap" instead.`
+Back up this config privately before you repair it.
+Restore the missing values from a known-good backup. If none exists, recover the original values before you retry.
+Keep the original API key and database path. Do not share secrets.
+Do not use "canonry init --force" for recovery. It replaces credentials without a backup.`
     );
   }
   if (parsed.geminiApiKey && !parsed.providers?.gemini) {