@ainyc/canonry 4.186.7 → 4.186.9

package/assets/assets/{react-sigma_core.esm.min-BBOzBU_n.js → react-sigma_core.esm.min-LmiGNvR6.js}

@@ -1,4 +1,4 @@
-import{g as Bt,t as S,r as C}from"./vendor-tanstack-CYBjbqVr.js";import{e as Ht,G as Wt}from"./SiteHealthSection-DjmPK0Tg.js";import"./index-DVa1lkiE.js";import"./vendor-radix-BpmvLvpp.js";import"./vendor-recharts-FA0uySU7.js";import"./vendor-lucide-BovNTc41.js";import"./vendor-markdown-9tTeP8v7.js";import"./vendor-yaml-GWJz5H2G.js";import"./ChartPrimitives-DLEICrrL.js";function Vt(r,n){if(typeof r!="object"||!r)return r;var i=r[Symbol.toPrimitive];if(i!==void 0){var e=i.call(r,n);if(typeof e!="object")return e;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}function ae(r){var n=Vt(r,"string");return typeof n=="symbol"?n:n+""}function A(r,n){if(!(r instanceof n))throw new TypeError("Cannot call a class as a function")}function He(r,n){for(var i=0;i<n.length;i++){var e=n[i];e.enumerable=e.enumerable||!1,e.configurable=!0,"value"in e&&(e.writable=!0),Object.defineProperty(r,ae(e.key),e)}}function L(r,n,i){return n&&He(r.prototype,n),i&&He(r,i),Object.defineProperty(r,"prototype",{writable:!1}),r}function Q(r){return Q=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(n){return n.__proto__||Object.getPrototypeOf(n)},Q(r)}function yt(){try{var r=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){}))}catch{}return(yt=function(){return!!r})()}function jt(r){if(r===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return r}function Zt(r,n){if(n&&(typeof n=="object"||typeof n=="function"))return n;if(n!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return jt(r)}function I(r,n,i){return n=Q(n),Zt(r,yt()?Reflect.construct(n,i||[],Q(r).constructor):n.apply(r,i))}function xe(r,n){return xe=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(i,e){return i.__proto__=e,i},xe(r,n)}function G(r,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");r.prototype=Object.create(n&&n.prototype,{constructor:{value:r,writable:!0,configurable:!0}}),Object.defineProperty(r,"prototype",{writable:!1}),n&&xe(r,n)}function qt(r){if(Array.isArray(r))return r}function Yt(r,n){var i=r==null?null:typeof Symbol<"u"&&r[Symbol.iterator]||r["@@iterator"];if(i!=null){var e,t,a,o,s=[],l=!0,h=!1;try{if(a=(i=i.call(r)).next,n===0){if(Object(i)!==i)return;l=!1}else for(;!(l=(e=a.call(i)).done)&&(s.push(e.value),s.length!==n);l=!0);}catch(u){h=!0,t=u}finally{try{if(!l&&i.return!=null&&(o=i.return(),Object(o)!==o))return}finally{if(h)throw t}}return s}}function Se(r,n){(n==null||n>r.length)&&(n=r.length);for(var i=0,e=Array(n);i<n;i++)e[i]=r[i];return e}function Tt(r,n){if(r){if(typeof r=="string")return Se(r,n);var i={}.toString.call(r).slice(8,-1);return i==="Object"&&r.constructor&&(i=r.constructor.name),i==="Map"||i==="Set"?Array.from(r):i==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?Se(r,n):void 0}}function Xt(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
+import{g as Bt,t as S,r as C}from"./vendor-tanstack-CYBjbqVr.js";import{e as Ht,G as Wt}from"./SiteHealthSection-Ys8sVumO.js";import"./index-Dr_-IUJz.js";import"./vendor-radix-BpmvLvpp.js";import"./vendor-recharts-FA0uySU7.js";import"./vendor-lucide-BovNTc41.js";import"./vendor-markdown-9tTeP8v7.js";import"./vendor-yaml-GWJz5H2G.js";import"./ChartPrimitives-DLEICrrL.js";function Vt(r,n){if(typeof r!="object"||!r)return r;var i=r[Symbol.toPrimitive];if(i!==void 0){var e=i.call(r,n);if(typeof e!="object")return e;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}function ae(r){var n=Vt(r,"string");return typeof n=="symbol"?n:n+""}function A(r,n){if(!(r instanceof n))throw new TypeError("Cannot call a class as a function")}function He(r,n){for(var i=0;i<n.length;i++){var e=n[i];e.enumerable=e.enumerable||!1,e.configurable=!0,"value"in e&&(e.writable=!0),Object.defineProperty(r,ae(e.key),e)}}function L(r,n,i){return n&&He(r.prototype,n),i&&He(r,i),Object.defineProperty(r,"prototype",{writable:!1}),r}function Q(r){return Q=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(n){return n.__proto__||Object.getPrototypeOf(n)},Q(r)}function yt(){try{var r=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){}))}catch{}return(yt=function(){return!!r})()}function jt(r){if(r===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return r}function Zt(r,n){if(n&&(typeof n=="object"||typeof n=="function"))return n;if(n!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return jt(r)}function I(r,n,i){return n=Q(n),Zt(r,yt()?Reflect.construct(n,i||[],Q(r).constructor):n.apply(r,i))}function xe(r,n){return xe=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(i,e){return i.__proto__=e,i},xe(r,n)}function G(r,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");r.prototype=Object.create(n&&n.prototype,{constructor:{value:r,writable:!0,configurable:!0}}),Object.defineProperty(r,"prototype",{writable:!1}),n&&xe(r,n)}function qt(r){if(Array.isArray(r))return r}function Yt(r,n){var i=r==null?null:typeof Symbol<"u"&&r[Symbol.iterator]||r["@@iterator"];if(i!=null){var e,t,a,o,s=[],l=!0,h=!1;try{if(a=(i=i.call(r)).next,n===0){if(Object(i)!==i)return;l=!1}else for(;!(l=(e=a.call(i)).done)&&(s.push(e.value),s.length!==n);l=!0);}catch(u){h=!0,t=u}finally{try{if(!l&&i.return!=null&&(o=i.return(),Object(o)!==o))return}finally{if(h)throw t}}return s}}function Se(r,n){(n==null||n>r.length)&&(n=r.length);for(var i=0,e=Array(n);i<n;i++)e[i]=r[i];return e}function Tt(r,n){if(r){if(typeof r=="string")return Se(r,n);var i={}.toString.call(r).slice(8,-1);return i==="Object"&&r.constructor&&(i=r.constructor.name),i==="Map"||i==="Set"?Array.from(r):i==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?Se(r,n):void 0}}function Xt(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
 In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function ee(r,n){return qt(r)||Yt(r,n)||Tt(r,n)||Xt()}var pe={black:"#000000",silver:"#C0C0C0",gray:"#808080",grey:"#808080",white:"#FFFFFF",maroon:"#800000",red:"#FF0000",purple:"#800080",fuchsia:"#FF00FF",green:"#008000",lime:"#00FF00",olive:"#808000",yellow:"#FFFF00",navy:"#000080",blue:"#0000FF",teal:"#008080",aqua:"#00FFFF",darkblue:"#00008B",mediumblue:"#0000CD",darkgreen:"#006400",darkcyan:"#008B8B",deepskyblue:"#00BFFF",darkturquoise:"#00CED1",mediumspringgreen:"#00FA9A",springgreen:"#00FF7F",cyan:"#00FFFF",midnightblue:"#191970",dodgerblue:"#1E90FF",lightseagreen:"#20B2AA",forestgreen:"#228B22",seagreen:"#2E8B57",darkslategray:"#2F4F4F",darkslategrey:"#2F4F4F",limegreen:"#32CD32",mediumseagreen:"#3CB371",turquoise:"#40E0D0",royalblue:"#4169E1",steelblue:"#4682B4",darkslateblue:"#483D8B",mediumturquoise:"#48D1CC",indigo:"#4B0082",darkolivegreen:"#556B2F",cadetblue:"#5F9EA0",cornflowerblue:"#6495ED",rebeccapurple:"#663399",mediumaquamarine:"#66CDAA",dimgray:"#696969",dimgrey:"#696969",slateblue:"#6A5ACD",olivedrab:"#6B8E23",slategray:"#708090",slategrey:"#708090",lightslategray:"#778899",lightslategrey:"#778899",mediumslateblue:"#7B68EE",lawngreen:"#7CFC00",chartreuse:"#7FFF00",aquamarine:"#7FFFD4",skyblue:"#87CEEB",lightskyblue:"#87CEFA",blueviolet:"#8A2BE2",darkred:"#8B0000",darkmagenta:"#8B008B",saddlebrown:"#8B4513",darkseagreen:"#8FBC8F",lightgreen:"#90EE90",mediumpurple:"#9370DB",darkviolet:"#9400D3",palegreen:"#98FB98",darkorchid:"#9932CC",yellowgreen:"#9ACD32",sienna:"#A0522D",brown:"#A52A2A",darkgray:"#A9A9A9",darkgrey:"#A9A9A9",lightblue:"#ADD8E6",greenyellow:"#ADFF2F",paleturquoise:"#AFEEEE",lightsteelblue:"#B0C4DE",powderblue:"#B0E0E6",firebrick:"#B22222",darkgoldenrod:"#B8860B",mediumorchid:"#BA55D3",rosybrown:"#BC8F8F",darkkhaki:"#BDB76B",mediumvioletred:"#C71585",indianred:"#CD5C5C",peru:"#CD853F",chocolate:"#D2691E",tan:"#D2B48C",lightgray:"#D3D3D3",lightgrey:"#D3D3D3",thistle:"#D8BFD8",orchid:"#DA70D6",goldenrod:"#DAA520",palevioletred:"#DB7093",crimson:"#DC143C",gainsboro:"#DCDCDC",plum:"#DDA0DD",burlywood:"#DEB887",lightcyan:"#E0FFFF",lavender:"#E6E6FA",darksalmon:"#E9967A",violet:"#EE82EE",palegoldenrod:"#EEE8AA",lightcoral:"#F08080",khaki:"#F0E68C",aliceblue:"#F0F8FF",honeydew:"#F0FFF0",azure:"#F0FFFF",sandybrown:"#F4A460",wheat:"#F5DEB3",beige:"#F5F5DC",whitesmoke:"#F5F5F5",mintcream:"#F5FFFA",ghostwhite:"#F8F8FF",salmon:"#FA8072",antiquewhite:"#FAEBD7",linen:"#FAF0E6",lightgoldenrodyellow:"#FAFAD2",oldlace:"#FDF5E6",magenta:"#FF00FF",deeppink:"#FF1493",orangered:"#FF4500",tomato:"#FF6347",hotpink:"#FF69B4",coral:"#FF7F50",darkorange:"#FF8C00",lightsalmon:"#FFA07A",orange:"#FFA500",lightpink:"#FFB6C1",pink:"#FFC0CB",gold:"#FFD700",peachpuff:"#FFDAB9",navajowhite:"#FFDEAD",moccasin:"#FFE4B5",bisque:"#FFE4C4",mistyrose:"#FFE4E1",blanchedalmond:"#FFEBCD",papayawhip:"#FFEFD5",lavenderblush:"#FFF0F5",seashell:"#FFF5EE",cornsilk:"#FFF8DC",lemonchiffon:"#FFFACD",floralwhite:"#FFFAF0",snow:"#FFFAFA",lightyellow:"#FFFFE0",ivory:"#FFFFF0"},Ct=new Int8Array(4),be=new Int32Array(Ct.buffer,0,1),$t=new Float32Array(Ct.buffer,0,1),Kt=/^\s*rgba?\s*\(/,Jt=/^\s*rgba?\s*\(\s*([0-9]*)\s*,\s*([0-9]*)\s*,\s*([0-9]*)(?:\s*,\s*(.*)?)?\)\s*$/;function Qt(r){var n=0,i=0,e=0,t=1;if(r[0]==="#")r.length===4?(n=parseInt(r.charAt(1)+r.charAt(1),16),i=parseInt(r.charAt(2)+r.charAt(2),16),e=parseInt(r.charAt(3)+r.charAt(3),16)):(n=parseInt(r.charAt(1)+r.charAt(2),16),i=parseInt(r.charAt(3)+r.charAt(4),16),e=parseInt(r.charAt(5)+r.charAt(6),16)),r.length===9&&(t=parseInt(r.charAt(7)+r.charAt(8),16)/255);else if(Kt.test(r)){var a=r.match(Jt);a&&(n=+a[1],i=+a[2],e=+a[3],a[4]&&(t=+a[4]))}return{r:n,g:i,b:e,a:t}}var J={};for(var le in pe)J[le]=oe(pe[le]),J[pe[le]]=J[le];function Rt(r,n,i,e,t){return be[0]=e<<24|i<<16|n<<8|r,be[0]=be[0]&4278190079,$t[0]}function oe(r){if(r=r.toLowerCase(),typeof J[r]<"u")return J[r];var n=Qt(r),i=n.r,e=n.g,t=n.b,a=n.a;a=a*255|0;var o=Rt(i,e,t,a);return J[r]=o,o}var Ee={};function _t(r){if(typeof Ee[r]<"u")return Ee[r];var n=(r&16711680)>>>16,i=(r&65280)>>>8,e=r&255,t=255,a=Rt(n,i,e,t);return Ee[r]=a,a}function We(r,n,i,e){return i+(n<<8)+(r<<16)}function Ve(r,n,i,e,t,a){var o=Math.floor(i/a*t),s=Math.floor(r.drawingBufferHeight/a-e/a*t),l=new Uint8Array(4);r.bindFramebuffer(r.FRAMEBUFFER,n),r.readPixels(o,s,1,1,r.RGBA,r.UNSIGNED_BYTE,l);var h=ee(l,4),u=h[0],d=h[1],f=h[2],g=h[3];return[u,d,f,g]}function c(r,n,i){return(n=ae(n))in r?Object.defineProperty(r,n,{value:i,enumerable:!0,configurable:!0,writable:!0}):r[n]=i,r}function je(r,n){var i=Object.keys(r);if(Object.getOwnPropertySymbols){var e=Object.getOwnPropertySymbols(r);n&&(e=e.filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})),i.push.apply(i,e)}return i}function b(r){for(var n=1;n<arguments.length;n++){var i=arguments[n]!=null?arguments[n]:{};n%2?je(Object(i),!0).forEach(function(e){c(r,e,i[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(r,Object.getOwnPropertyDescriptors(i)):je(Object(i)).forEach(function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))})}return r}function ei(r,n){for(;!{}.hasOwnProperty.call(r,n)&&(r=Q(r))!==null;);return r}function Ae(){return Ae=typeof Reflect<"u"&&Reflect.get?Reflect.get.bind():function(r,n,i){var e=ei(r,n);if(e){var t=Object.getOwnPropertyDescriptor(e,n);return t.get?t.get.call(arguments.length<3?r:i):t.value}},Ae.apply(null,arguments)}function wt(r,n,i,e){var t=Ae(Q(r.prototype),n,i);return typeof t=="function"?function(a){return t.apply(i,a)}:t}function ti(r){return r.normalized?1:r.size}function ye(r){var n=0;return r.forEach(function(i){return n+=ti(i)}),n}function xt(r,n,i){var e=r==="VERTEX"?n.VERTEX_SHADER:n.FRAGMENT_SHADER,t=n.createShader(e);if(t===null)throw new Error("loadShader: error while creating the shader");n.shaderSource(t,i),n.compileShader(t);var a=n.getShaderParameter(t,n.COMPILE_STATUS);if(!a){var o=n.getShaderInfoLog(t);throw n.deleteShader(t),new Error(`loadShader: error while compiling the shader:
 `.concat(o,`
 `).concat(i))}return t}function ii(r,n){return xt("VERTEX",r,n)}function ri(r,n){return xt("FRAGMENT",r,n)}function ni(r,n){var i=r.createProgram();if(i===null)throw new Error("loadProgram: error while creating the program.");var e,t;for(e=0,t=n.length;e<t;e++)r.attachShader(i,n[e]);r.linkProgram(i);var a=r.getProgramParameter(i,r.LINK_STATUS);if(!a){var o=r.getProgramInfoLog(i);throw r.deleteProgram(i),new Error("loadProgram: error while linking the program: ".concat(o))}return i}function Ze(r){var n=r.gl,i=r.buffer,e=r.program,t=r.vertexShader,a=r.fragmentShader;n.deleteShader(t),n.deleteShader(a),n.deleteProgram(e),n.deleteBuffer(i)}var qe=`#define PICKING_MODE

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-DVa1lkiE.js"></script>
+    <script type="module" crossorigin src="./assets/index-Dr_-IUJz.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-CYBjbqVr.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-BpmvLvpp.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-FA0uySU7.js">

package/dist/{chunk-7CG3QE4N.js → chunk-EMSDPSQM.js}

@@ -47,6 +47,7 @@ import {
   DEFAULT_DISCOVERY_PROMOTE_BUCKETS,
   DEFAULT_DISCOVERY_PROMOTE_COMPETITOR_TYPES,
   DEFAULT_MEASUREMENT_CONFIG,
+  DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DISCOVERY_DEFAULT_DEDUP_THRESHOLD,
   DISCOVERY_DEFAULT_PROBE_CONCURRENCY,
   DISCOVERY_PROBE_CONCURRENCY_CAP,
@@ -553,6 +554,7 @@ import {
   reportConfidenceLabel,
   reportHorizonLabel,
   reportSeverityLabel,
+  researchDailyLimitExceeded,
   researchRunCreateSchema,
   researchRunDetailSchema,
   researchRunListSchema,
@@ -666,10 +668,10 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/intelligence-service.ts
-import { eq as eq67, desc as desc29, asc as asc12, and as and56, ne as ne10, or as or14, inArray as inArray25, gte as gte17, lte as lte15, isNull as isNull12, sql as sql25, exists } from "drizzle-orm";
+import { eq as eq67, desc as desc29, asc as asc12, and as and56, ne as ne10, or as or14, inArray as inArray25, gte as gte18, lte as lte15, isNull as isNull12, sql as sql26, exists } from "drizzle-orm";
 
 // ../db/src/client.ts
 import { mkdirSync } from "fs";
@@ -2722,6 +2724,7 @@ var researchRuns = sqliteTable("research_runs", {
   idempotencyKey: text("idempotency_key"),
   requestHash: text("request_hash"),
   error: text("error"),
+  initiatedBy: text("initiated_by", { mode: "json" }).$type(),
   startedAt: text("started_at"),
   finishedAt: text("finished_at"),
   createdAt: text("created_at").notNull()
@@ -7139,6 +7142,13 @@ var MIGRATION_VERSIONS = [
           SELECT RAISE(ABORT, 'simple measurement definition is immutable');
         END`
     ]
+  },
+  {
+    version: 151,
+    name: "research-run-principal-attribution",
+    statements: [
+      `ALTER TABLE research_runs ADD COLUMN initiated_by TEXT`
+    ]
   }
 ];
 function addRunsMeasurementPlanVersionForeignKey(tx) {
@@ -9169,15 +9179,15 @@ function buildAiSourceOrigin(snapshots, projectDomains, competitorDomains, topDo
       totalCitations++;
     }
   }
-  const categories = [...categoryCounts.entries()].map(([category, { label, count: count2 }]) => ({
+  const categories = [...categoryCounts.entries()].map(([category, { label, count: count3 }]) => ({
     category,
     label,
-    count: count2,
-    sharePct: totalCitations > 0 ? Math.round(count2 / totalCitations * 100) : 0
+    count: count3,
+    sharePct: totalCitations > 0 ? Math.round(count3 / totalCitations * 100) : 0
   })).sort((a, b) => b.count - a.count);
-  const topDomains = [...domainCounts.entries()].map(([domain, count2]) => ({
+  const topDomains = [...domainCounts.entries()].map(([domain, count3]) => ({
     domain,
-    count: count2,
+    count: count3,
     isCompetitor: citedDomainBelongsToProject(domain, competitorDomains)
   })).sort((a, b) => b.count - a.count).slice(0, topDomainsLimit);
   return { categories, topDomains };
@@ -10771,6 +10781,9 @@ function principalScopes(request) {
 function isReadSemanticRoute(request) {
   return request.routeOptions.config.readSemantic === true;
 }
+function isPaidReadRoute(request) {
+  return request.routeOptions.config.paidRead === true;
+}
 function isTransportEnvelopeRoute(request) {
   return request.routeOptions.config.transportEnvelope === true;
 }
@@ -10800,6 +10813,17 @@ function requirePaidReadScope(request) {
     throw forbidden("This API key was not granted access to OpenAI Ads paid reads.");
   }
 }
+function requireResearchGrant(request, allowViewers) {
+  const principal = request.principal;
+  if (!principal) return;
+  if (principal.kind === "api-key") {
+    if (principal.scopes.includes(WILDCARD_SCOPE)) return;
+    throw forbidden("This API key was not granted access to paid research queries.");
+  }
+  if (principal.role === UserRoles.admin) return;
+  if (principal.role === UserRoles.viewer && allowViewers) return;
+  throw forbidden("Research queries are not enabled for viewer accounts on this deployment.");
+}
 function requireBroadInstanceKey(request) {
   const principal = request.principal;
   if (!principal || principal.kind !== "api-key") return;
@@ -10959,7 +10983,7 @@ function applyRoleGates(request) {
   const principal = request.principal;
   if (!principal || principal.kind !== "user") return;
   request.readSemanticGrant = principal.role === UserRoles.viewer && isReadSemanticRoute(request);
-  if (isReadOnlyKey(principal.scopes) && WRITE_METHODS2.has(request.method) && !request.readSemanticGrant && !isTransportEnvelopeRoute(request)) {
+  if (isReadOnlyKey(principal.scopes) && WRITE_METHODS2.has(request.method) && !request.readSemanticGrant && !isPaidReadRoute(request) && !isTransportEnvelopeRoute(request)) {
     throw forbidden(VIEWER_DENIED_MESSAGE);
   }
 }
@@ -11995,7 +12019,7 @@ async function projectRoutes(app, opts) {
   app.get("/projects/:name/delete-preview", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const pid = project.id;
-    const count2 = (n) => n ?? 0;
+    const count3 = (n) => n ?? 0;
     const queryCount = app.db.select({ n: sql4`count(*)` }).from(queries).where(eq5(queries.projectId, pid)).get();
     const competitorCount = app.db.select({ n: sql4`count(*)` }).from(competitors).where(eq5(competitors.projectId, pid)).get();
     const runCount = app.db.select({ n: sql4`count(*)` }).from(runs).where(eq5(runs.projectId, pid)).get();
@@ -12005,14 +12029,14 @@ async function projectRoutes(app, opts) {
     return reply.send({
       project: { id: project.id, name: project.name },
       cascadeRows: {
-        queries: count2(queryCount?.n),
-        competitors: count2(competitorCount?.n),
-        runs: count2(runCount?.n),
-        snapshots: count2(snapshotCount?.n),
-        insights: count2(insightCount?.n)
+        queries: count3(queryCount?.n),
+        competitors: count3(competitorCount?.n),
+        runs: count3(runCount?.n),
+        snapshots: count3(snapshotCount?.n),
+        insights: count3(insightCount?.n)
       },
       detachedRows: {
-        auditLog: count2(auditLogCount?.n)
+        auditLog: count3(auditLogCount?.n)
       }
     });
   });
@@ -12698,14 +12722,14 @@ async function queryRoutes(app, opts) {
         validProviders: validNames
       });
     }
-    const count2 = body.count ?? 5;
+    const count3 = body.count ?? 5;
     if (!opts.onGenerateQueries) {
       throw notImplemented("Query generation is not supported in this deployment");
     }
     const existingRows = app.db.select().from(queries).where(eq8(queries.projectId, project.id)).all();
     const existingQueries = existingRows.map((r) => r.query);
     try {
-      const generated = await opts.onGenerateQueries(provider, count2, {
+      const generated = await opts.onGenerateQueries(provider, count3, {
         domain: project.canonicalDomain,
         displayName: project.displayName,
         country: project.country,
@@ -12831,14 +12855,14 @@ async function queryRoutes(app, opts) {
         validProviders: validNames
       });
     }
-    const count2 = body.count ?? 5;
+    const count3 = body.count ?? 5;
     if (!opts.onGenerateQueries) {
       throw notImplemented("Keyword generation is not supported in this deployment");
     }
     const existingRows = app.db.select().from(queries).where(eq8(queries.projectId, project.id)).all();
     const existingQueries = existingRows.map((r) => r.query);
     try {
-      const generated = await opts.onGenerateQueries(provider, count2, {
+      const generated = await opts.onGenerateQueries(provider, count3, {
         domain: project.canonicalDomain,
         displayName: project.displayName,
         country: project.country,
@@ -18682,19 +18706,19 @@ function groupChangesFromRows(rows, identities) {
   });
 }
 function countsFromRows(rows, groupChanges) {
-  const count2 = (status) => rows.filter((row) => row.status === status).length;
-  const ambiguousRows = count2("ambiguous");
-  const unmatchedRows = count2("unmatched");
-  const invalidRows = count2("invalid");
-  const proposedRows = count2("proposed");
-  const excludedRows = count2("excluded");
+  const count3 = (status) => rows.filter((row) => row.status === status).length;
+  const ambiguousRows = count3("ambiguous");
+  const unmatchedRows = count3("unmatched");
+  const invalidRows = count3("invalid");
+  const proposedRows = count3("proposed");
+  const excludedRows = count3("excluded");
   return {
     dataRows: rows.length,
-    matchedRows: count2("matched"),
+    matchedRows: count3("matched"),
     ambiguousRows,
     unmatchedRows,
     invalidRows,
-    duplicateRows: count2("duplicate"),
+    duplicateRows: count3("duplicate"),
     proposedRows,
     excludedRows,
     needsAttention: ambiguousRows + unmatchedRows + invalidRows + proposedRows + excludedRows,
@@ -24056,9 +24080,9 @@ function workloadDiff(before, after) {
     nextSweepNodes: after.size,
     nextSweepProviderCalls: sum(after.values()),
     addedNodes: added.length,
-    addedProviderCalls: sum(added.map(([, count2]) => count2)),
+    addedProviderCalls: sum(added.map(([, count3]) => count3)),
     removedNodes: removed.length,
-    removedProviderCalls: sum(removed.map(([, count2]) => count2))
+    removedProviderCalls: sum(removed.map(([, count3]) => count3))
   };
 }
 function candidateDiff(state, nextRows, plan, reusedQueryIds, mutatedQueryIds, scopedRemovalQueryIds) {
@@ -26201,10 +26225,10 @@ function computeQueryChanges(projectQueries, cutoff) {
   }
   const days = [...byDay.entries()].sort((a, b) => a[0].localeCompare(b[0]));
   if (days.length <= 1) return [];
-  return days.slice(1).map(([date, count2]) => ({
+  return days.slice(1).map(([date, count3]) => ({
     date: (/* @__PURE__ */ new Date(date + "T00:00:00.000Z")).toISOString(),
-    delta: count2,
-    label: `+${count2} kp`
+    delta: count3,
+    label: `+${count3} kp`
   }));
 }
 function pooledRate(buckets, rateKey) {
@@ -26279,15 +26303,15 @@ function buildRankedList(domains, limit) {
 function buildCategoryCounts(counts2) {
   let grandTotal = 0;
   for (const domains of counts2.values()) {
-    for (const count2 of domains.values()) grandTotal += count2;
+    for (const count3 of domains.values()) grandTotal += count3;
   }
   const result = [];
   for (const [category, domains] of counts2) {
     let categoryTotal = 0;
     const domainEntries = [];
-    for (const [domain, count2] of domains) {
-      categoryTotal += count2;
-      domainEntries.push({ domain, count: count2 });
+    for (const [domain, count3] of domains) {
+      categoryTotal += count3;
+      domainEntries.push({ domain, count: count3 });
     }
     domainEntries.sort((a, b) => b.count - a.count);
     result.push({
@@ -27563,8 +27587,8 @@ function gscDateRange(report) {
   const end = summary2?.periodEnd || gsc?.periodEnd || gsc?.trend.at(-1)?.date || "";
   return formatDateRange(start, end);
 }
-function pluralize(count2, singular, plural = `${singular}s`) {
-  return count2 === 1 ? singular : plural;
+function pluralize(count3, singular, plural = `${singular}s`) {
+  return count3 === 1 ? singular : plural;
 }
 var PROVIDER_DISPLAY_NAMES = {
   gemini: "Gemini",
@@ -29398,9 +29422,9 @@ function renderInsights(report) {
     );
   }
   const haveDeduped = list.every((i) => typeof i.instanceCount === "number");
-  const rows = (haveDeduped ? list.map((i) => ({ rep: i, count: i.instanceCount })) : groupInsights(list).map((g) => ({ rep: g.representative, count: g.count }))).map(({ rep: i, count: count2 }) => {
+  const rows = (haveDeduped ? list.map((i) => ({ rep: i, count: i.instanceCount })) : groupInsights(list).map((g) => ({ rep: g.representative, count: g.count }))).map(({ rep: i, count: count3 }) => {
     const tone = severityTone(i.severity);
-    const countChip = count2 > 1 ? ` <span class="badge tone-neutral">\xD7 ${count2}</span>` : "";
+    const countChip = count3 > 1 ? ` <span class="badge tone-neutral">\xD7 ${count3}</span>` : "";
     return `<tr>
         <td class="col-severity"><span class="badge tone-${tone}">${escapeHtml2(reportSeverityLabel(i.severity))}</span></td>
         <td class="col-title">${escapeHtml2(i.title)}${countChip}</td>
@@ -30857,9 +30881,9 @@ function contentActionVerb(action) {
       return "Add schema to";
   }
 }
-function confidenceFromEvidence(count2) {
-  if (count2 >= 3) return "high";
-  if (count2 >= 1) return "medium";
+function confidenceFromEvidence(count3) {
+  if (count3 >= 3) return "high";
+  if (count3 >= 1) return "medium";
   return "low";
 }
 function actionAudienceMatches2(action, audience) {
@@ -32033,9 +32057,9 @@ function summarizeVerificationHits(rows) {
   return { counts: counts2, unsupportedRows, unsupportedHits };
 }
 function summarizeServer(crawlers, fetches, referrals) {
-  const total = referrals.reduce((count2, row) => count2 + row.sessionsOrHits, 0);
-  const paid = referrals.reduce((count2, row) => count2 + row.paidSessionsOrHits, 0);
-  const organic = referrals.reduce((count2, row) => count2 + row.organicSessionsOrHits, 0);
+  const total = referrals.reduce((count3, row) => count3 + row.sessionsOrHits, 0);
+  const paid = referrals.reduce((count3, row) => count3 + row.paidSessionsOrHits, 0);
+  const organic = referrals.reduce((count3, row) => count3 + row.organicSessionsOrHits, 0);
   const crawlerHits = summarizeVerificationHits(crawlers);
   const userFetchHits = summarizeVerificationHits(fetches);
   return {
@@ -32184,10 +32208,10 @@ function buildOrganicEvidence(db, projectName, periodDays) {
   const gaWindow = gaStartDate && gaEndDate ? gaRows.filter((row) => inRange(row.date, gaStartDate, gaEndDate)) : [];
   const legacyGaCohorts = gaCohorts.map((cohort) => ({
     ...cohort,
-    organicSessions: gaRows.filter((row) => inRange(row.date, cohort.startDate, cohort.endDate)).reduce((count2, row) => count2 + row.organicSessions, 0)
+    organicSessions: gaRows.filter((row) => inRange(row.date, cohort.startDate, cohort.endDate)).reduce((count3, row) => count3 + row.organicSessions, 0)
   }));
   let ga4 = gaRows.length ? {
-    organicSessions: gaWindow.reduce((count2, row) => count2 + row.organicSessions, 0),
+    organicSessions: gaWindow.reduce((count3, row) => count3 + row.organicSessions, 0),
     cohorts: legacyGaCohorts
   } : null;
   if (nativeAcquisitionActive && nativeAcquisition.periods.length === 0) {
@@ -32210,8 +32234,8 @@ function buildOrganicEvidence(db, projectName, periodDays) {
   const allGaAiRows = db.select().from(gaAiReferrals).where(and30(eq35(gaAiReferrals.projectId, project.id), gte10(gaAiReferrals.date, gaStartDate ?? startDate), lte8(gaAiReferrals.date, gaEndDate ?? endDate))).all().filter((row) => row.sourceDimension === "session");
   const aiRows = gaStartDate && gaEndDate ? allGaAiRows.filter((row) => inRange(row.date, gaStartDate, gaEndDate)) : [];
   const gaAiReferralSummary = allGaAiRows.length ? {
-    paidSessions: aiRows.filter((row) => row.trafficClass === AiReferralTrafficClasses.paid).reduce((count2, row) => count2 + row.sessions, 0),
-    organicSessions: aiRows.filter((row) => row.trafficClass === AiReferralTrafficClasses.organic).reduce((count2, row) => count2 + row.sessions, 0)
+    paidSessions: aiRows.filter((row) => row.trafficClass === AiReferralTrafficClasses.paid).reduce((count3, row) => count3 + row.sessions, 0),
+    organicSessions: aiRows.filter((row) => row.trafficClass === AiReferralTrafficClasses.organic).reduce((count3, row) => count3 + row.sessions, 0)
   } : null;
   const serverSources = db.select().from(trafficSources).where(eq35(trafficSources.projectId, project.id)).all();
   const serverStart = `${startDate}T00:00:00`;
@@ -35937,11 +35961,11 @@ var routeCatalog = [
     method: "post",
     path: "/api/v1/projects/{name}/research/runs",
     summary: "Start an isolated research query batch",
-    description: "Runs one to fifty ad-hoc queries through one API provider and saves the answer evidence. Research never creates tracked queries, shared runs, snapshots, insights, or notifications.",
+    description: "Runs one to fifty ad-hoc queries through one API provider and saves the answer evidence. Research never creates tracked queries, shared runs, snapshots, insights, or notifications. Administrators are always allowed; signed-in viewers require the deployment opt-in and a per-project daily allowance. Read-only and narrowly scoped API keys are refused.",
     tags: ["research"],
     parameters: [nameParameter],
     requestBody: { required: true, content: { "application/json": { schema: { $ref: "#/components/schemas/ResearchRunCreate" } } } },
-    responses: { 200: jsonResponse("Idempotent request returned its existing research run.", "ResearchRunDetailDto"), 202: jsonResponse("Research batch queued.", "ResearchRunDetailDto"), 400: errorResponse("Invalid provider, model, location, or request."), 404: errorResponse("Project not found."), 409: errorResponse("Idempotency key was reused with a different payload."), 422: errorResponse("Research executor is unavailable on this deployment.") }
+    responses: { 200: jsonResponse("Idempotent request returned its existing research run.", "ResearchRunDetailDto"), 202: jsonResponse("Research batch queued.", "ResearchRunDetailDto"), 400: errorResponse("Invalid provider, model, location, or request."), 403: errorResponse("Paid research was not granted to this principal."), 404: errorResponse("Project not found."), 409: errorResponse("Idempotency key was reused with a different payload."), 422: errorResponse("Research executor is unavailable on this deployment."), 429: errorResponse("The viewer reached the per-project UTC-day research limit.") }
   },
   {
     method: "get",
@@ -44402,12 +44426,12 @@ async function getLodging(accessToken, locationName, opts = {}) {
   }
 }
 function countPopulatedGroups(lodging) {
-  let count2 = 0;
+  let count3 = 0;
   for (const [key, value] of Object.entries(lodging)) {
     if (key === "name" || key === "metadata") continue;
-    if (isPopulated(value)) count2++;
+    if (isPopulated(value)) count3++;
   }
-  return count2;
+  return count3;
 }
 function isPopulated(value) {
   if (value === null || value === void 0) return false;
@@ -49451,7 +49475,7 @@ function createActivationStore(app, request) {
 function countManifest(manifest) {
   return {
     adGroupCount: manifest.campaign.adGroups.length,
-    adCount: manifest.campaign.adGroups.reduce((count2, group) => count2 + group.ads.length, 0)
+    adCount: manifest.campaign.adGroups.reduce((count3, group) => count3 + group.ads.length, 0)
   };
 }
 function resolveAdsActivationMaxEntities(env = process.env) {
@@ -56734,7 +56758,7 @@ async function queryBacklinks(opts) {
   const reversed = opts.targets.map(reverseDomain);
   const targetList = reversed.map(quote).join(", ");
   const limitClause = opts.limitPerTarget ? `QUALIFY row_number() OVER (PARTITION BY t.target_rev_domain ORDER BY v.num_hosts DESC) <= ${Math.floor(opts.limitPerTarget)}` : "";
-  const sql26 = `
+  const sql27 = `
     WITH vertices AS (
       SELECT * FROM read_csv(
         ${quote(opts.vertexPath)},
@@ -56770,7 +56794,7 @@ async function queryBacklinks(opts) {
   const conn = await instance.connect();
   let rows;
   try {
-    const reader = await conn.runAndReadAll(sql26);
+    const reader = await conn.runAndReadAll(sql27);
     rows = reader.getRowObjects();
   } finally {
     conn.disconnectSync?.();
@@ -82860,10 +82884,17 @@ async function technicalAeoRoutes(app, opts) {
 
 // ../api-routes/src/research.ts
 import crypto49 from "crypto";
-import { and as and54, desc as desc28, eq as eq65 } from "drizzle-orm";
+import { and as and54, count as count2, desc as desc28, eq as eq65, gte as gte17, lt as lt11, sql as sql25 } from "drizzle-orm";
 var sameLocation = (a, b) => a.label === b.label && a.city === b.city && a.region === b.region && a.country === b.country && a.timezone === b.timezone;
 async function researchRoutes(app, opts) {
-  app.post("/projects/:name/research/runs", async (request, reply) => {
+  const viewerDailyRunLimit = opts.viewerDailyRunLimit ?? DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT;
+  if (!Number.isInteger(viewerDailyRunLimit) || viewerDailyRunLimit <= 0) {
+    throw new Error("viewerDailyRunLimit must be a positive integer");
+  }
+  app.post("/projects/:name/research/runs", {
+    config: { paidRead: true }
+  }, async (request, reply) => {
+    requireResearchGrant(request, opts.allowViewers ?? false);
     const project = resolveProject(app.db, request.params.name);
     if (!opts.onResearchRunRequested) throw missingDependency("Research execution is not available on this deployment.", { reason: "no-research-handler" });
     const parsed = researchRunCreateSchema.safeParse(request.body ?? {});
@@ -82888,6 +82919,7 @@ async function researchRoutes(app, opts) {
     const normalized = { queries: input.queries, provider: providerName, model: requestedModel2, location: location ?? null };
     const requestHash2 = crypto49.createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    const initiatedBy = researchPrincipal(request);
     const decision = app.db.transaction((tx) => {
       if (input.idempotencyKey) {
         const existing = tx.select().from(researchRuns).where(and54(eq65(researchRuns.projectId, project.id), eq65(researchRuns.idempotencyKey, input.idempotencyKey))).get();
@@ -82896,10 +82928,22 @@ async function researchRoutes(app, opts) {
           return { reused: true, id: existing.id, shouldDispatch: existing.status === ResearchRunStatuses.queued };
         }
       }
+      if (initiatedBy?.kind === "user" && initiatedBy.role === UserRoles.viewer) {
+        const { start, end, date } = utcDayBounds(now);
+        const used = tx.select({ value: count2() }).from(researchRuns).where(and54(
+          eq65(researchRuns.projectId, project.id),
+          gte17(researchRuns.createdAt, start),
+          lt11(researchRuns.createdAt, end),
+          sql25`json_extract(${researchRuns.initiatedBy}, '$.role') = ${UserRoles.viewer}`
+        )).get()?.value ?? 0;
+        if (used >= viewerDailyRunLimit) {
+          throw researchDailyLimitExceeded(project.name, viewerDailyRunLimit, date);
+        }
+      }
       const id = crypto49.randomUUID();
-      tx.insert(researchRuns).values({ id, projectId: project.id, status: ResearchRunStatuses.queued, provider: providerName, requestedModel: requestedModel2, resolvedModel, location: location ?? null, totalQueries: input.queries.length, idempotencyKey: input.idempotencyKey ?? null, requestHash: input.idempotencyKey ? requestHash2 : null, createdAt: now }).run();
+      tx.insert(researchRuns).values({ id, projectId: project.id, status: ResearchRunStatuses.queued, provider: providerName, requestedModel: requestedModel2, resolvedModel, location: location ?? null, totalQueries: input.queries.length, idempotencyKey: input.idempotencyKey ?? null, requestHash: input.idempotencyKey ? requestHash2 : null, initiatedBy, createdAt: now }).run();
       for (const [position, query] of input.queries.entries()) tx.insert(researchRunQueries).values({ id: crypto49.randomUUID(), researchRunId: id, position, queryText: query, status: ResearchQueryStatuses.queued, requestedModel: requestedModel2, resolvedModel, groundingSources: [], citedDomains: [], searchQueries: [], createdAt: now }).run();
-      writeAuditLog(tx, { projectId: project.id, actor: "api", action: "research.created", entityType: "research_run", entityId: id });
+      writeAuditLog(tx, { projectId: project.id, actor: initiatedBy ? `${initiatedBy.kind}:${initiatedBy.id}` : "api", action: "research.created", entityType: "research_run", entityId: id });
       return { reused: false, id, shouldDispatch: true };
     });
     const result = getDetail(app, project.id, decision.id);
@@ -82926,11 +82970,27 @@ function getDetail(app, projectId, id) {
   return { ...serializeRun(row), queries: queries2 };
 }
 function serializeRun(row) {
-  return { id: row.id, projectId: row.projectId, status: row.status, provider: row.provider, requestedModel: row.requestedModel, resolvedModel: row.resolvedModel, location: row.location ?? null, totalQueries: row.totalQueries, completedQueries: row.completedQueries, failedQueries: row.failedQueries, error: row.error, startedAt: row.startedAt, finishedAt: row.finishedAt, createdAt: row.createdAt };
+  return { id: row.id, projectId: row.projectId, status: row.status, provider: row.provider, requestedModel: row.requestedModel, resolvedModel: row.resolvedModel, location: row.location ?? null, totalQueries: row.totalQueries, completedQueries: row.completedQueries, failedQueries: row.failedQueries, error: row.error, initiatedBy: row.initiatedBy ?? null, startedAt: row.startedAt, finishedAt: row.finishedAt, createdAt: row.createdAt };
 }
 function serializeQuery(row) {
   return { id: row.id, position: row.position, query: row.queryText, status: row.status, requestedModel: row.requestedModel, resolvedModel: row.resolvedModel, servedModel: row.servedModel, answerText: row.answerText, groundingSources: row.groundingSources, citedDomains: row.citedDomains, searchQueries: row.searchQueries, namedCompetitors: row.namedCompetitors, citedCompetitorDomains: row.citedCompetitorDomains, answerMentioned: row.answerMentioned, citationState: row.citationState, error: row.error, startedAt: row.startedAt, finishedAt: row.finishedAt, createdAt: row.createdAt };
 }
+function researchPrincipal(request) {
+  const principal = request.principal;
+  if (!principal) return null;
+  return {
+    kind: principal.kind,
+    id: principal.id,
+    name: principal.name,
+    role: principal.kind === "user" ? principal.role ?? null : null
+  };
+}
+function utcDayBounds(now) {
+  const date = now.slice(0, 10);
+  const start = `${date}T00:00:00.000Z`;
+  const end = new Date(Date.parse(start) + 24 * 60 * 60 * 1e3).toISOString();
+  return { start, end, date };
+}
 
 // ../api-routes/src/simple-measurement-definitions.ts
 import crypto50 from "crypto";
@@ -83263,7 +83323,9 @@ async function apiRoutes(app, opts) {
     await api.register(researchRoutes, {
       providerAdapters: opts.providerAdapters,
       configuredProviderNames: opts.providerSummary?.filter((provider) => provider.configured).map((provider) => provider.name),
-      onResearchRunRequested: opts.onResearchRunRequested
+      onResearchRunRequested: opts.onResearchRunRequested,
+      allowViewers: opts.researchAllowViewers,
+      viewerDailyRunLimit: opts.researchViewerDailyRunLimit
     });
     await api.register(technicalAeoRoutes, {
       onSiteAuditRequested: opts.onSiteAuditRequested
@@ -83694,7 +83756,7 @@ function matchesBrandAlias(candidate, aliases) {
 var RECURRENCE_LOOKBACK_RUNS = 5;
 var HISTORY_WINDOW_RUNS = Math.max(PERSISTENT_GAP_THRESHOLD, 5);
 var log = createLogger("IntelligenceService");
-var runChronologyKey = sql25`coalesce(${runs.finishedAt}, ${runs.createdAt})`;
+var runChronologyKey = sql26`coalesce(${runs.finishedAt}, ${runs.createdAt})`;
 function analyzableRunPredicates(projectId) {
   return [
     eq67(runs.projectId, projectId),
@@ -83762,7 +83824,7 @@ var IntelligenceService = class {
         // MEASUREMENT: only runs that actually wrote snapshots — see above.
         // Index seek on idx_snapshots_run, short-circuited on the first row.
         exists(
-          this.db.select({ one: sql25`1` }).from(querySnapshots).where(eq67(querySnapshots.runId, runs.id))
+          this.db.select({ one: sql26`1` }).from(querySnapshots).where(eq67(querySnapshots.runId, runs.id))
         )
       )
     ).orderBy(desc29(runs.finishedAt), desc29(runs.createdAt)).limit(HISTORY_WINDOW_RUNS).all();
@@ -83848,7 +83910,7 @@ var IntelligenceService = class {
     const selected = this.db.select().from(gbpLocations).where(and56(
       eq67(gbpLocations.projectId, projectId),
       eq67(gbpLocations.selected, true),
-      gte17(gbpLocations.syncedAt, windowStart),
+      gte18(gbpLocations.syncedAt, windowStart),
       lte15(gbpLocations.syncedAt, windowEnd)
     )).all();
     if (selected.length === 0) {
@@ -84228,7 +84290,7 @@ var IntelligenceService = class {
       position: gscSearchData.position
     }).from(gscSearchData).where(and56(
       eq67(gscSearchData.projectId, projectId),
-      gte17(gscSearchData.date, window.startDate),
+      gte18(gscSearchData.date, window.startDate),
       lte15(gscSearchData.date, window.endDate)
     )).all();
     const byDay = /* @__PURE__ */ new Map();