@ainyc/canonry 4.186.8 → 4.186.9

package/dist/{chunk-YYNL73BT.js → chunk-O26JKJXV.js}

@@ -11,7 +11,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-42P3CXIH.js";
+} from "./chunk-U3M2VALC.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -158,7 +158,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-7CG3QE4N.js";
+} from "./chunk-EMSDPSQM.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -170,6 +170,7 @@ import {
   BacklinkSources,
   CITED_URL_CAPTURE_VERSION,
   CcReleaseSyncStatuses,
+  DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DiscoveryCompetitorTypes,
   GOOGLE_ADS_CAMPAIGN_METRICS_MAX_CAMPAIGNS,
   GOOGLE_ADS_CAMPAIGN_METRICS_MAX_DAYS,
@@ -299,7 +300,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -11921,7 +11922,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-KBHLNDGO.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-UZGA24EF.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -16929,6 +16930,12 @@ function parseBooleanEnv(value) {
   if (normalized === "0" || normalized === "false" || normalized === "no") return false;
   return void 0;
 }
+function parsePositiveIntegerEnv(value) {
+  const normalized = value?.trim();
+  if (!normalized || !/^\d+$/.test(normalized)) return void 0;
+  const parsed = Number(normalized);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
 function resolveDashboardRequirePassword(env, config) {
   return parseBooleanEnv(env.CANONRY_DASHBOARD_REQUIRE_PASSWORD) ?? config.dashboard?.requirePassword ?? true;
 }
@@ -16938,6 +16945,12 @@ function resolveDashboardShowResourceLinks(env, config) {
 function resolveDashboardManagedSweeps(env, config) {
   return parseBooleanEnv(env.CANONRY_DASHBOARD_MANAGED_SWEEPS) ?? config.dashboard?.managedSweeps ?? false;
 }
+function resolveResearchAllowViewers(env, config) {
+  return parseBooleanEnv(env.CANONRY_RESEARCH_ALLOW_VIEWERS) ?? config.research?.allowViewers ?? false;
+}
+function resolveResearchViewerDailyRunLimit(env, config) {
+  return parsePositiveIntegerEnv(env.CANONRY_RESEARCH_VIEWER_DAILY_RUN_LIMIT) ?? config.research?.viewerDailyRunLimit ?? DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT;
+}
 function resolveDashboardShowUpdateNotification(env, config) {
   return parseBooleanEnv(env.CANONRY_DASHBOARD_SHOW_UPDATE_NOTIFICATION) ?? config.dashboard?.showUpdateNotification ?? true;
 }
@@ -18071,6 +18084,8 @@ async function createServer(opts) {
   const dashboardShowUpdateNotification = resolveDashboardShowUpdateNotification(process.env, opts.config);
   const dashboardManagedSweeps = resolveDashboardManagedSweeps(process.env, opts.config);
   const dashboardOnboardingMode = resolveDashboardOnboardingMode(process.env, opts.config);
+  const researchAllowViewers = resolveResearchAllowViewers(process.env, opts.config);
+  const researchViewerDailyRunLimit = resolveResearchViewerDailyRunLimit(process.env, opts.config);
   app.log.info(
     { dashboardRequirePassword },
     "Dashboard password gate resolved"
@@ -18393,6 +18408,8 @@ async function createServer(opts) {
     // was previously reachable only from tests, so a source losing ground could
     // not be rescued without shipping code. Unset keeps the built-in default.
     vercelSyncDeadlineMs: resolveVercelSyncDeadlineMs(process.env),
+    researchAllowViewers,
+    researchViewerDailyRunLimit,
     // Local-only Aero agent routes. Registered here so they inherit api-routes'
     // auth plugin — bare `registerAgentRoutes(app, ...)` would skip auth.
     credentials: credentialChecker,
@@ -18969,6 +18986,12 @@ async function createServer(opts) {
       if (Object.keys(dashboardConfig).length > 0) {
         clientConfig.dashboard = dashboardConfig;
       }
+      if (researchAllowViewers) {
+        clientConfig.research = {
+          allowViewers: true,
+          viewerDailyRunLimit: researchViewerDailyRunLimit
+        };
+      }
       if (embed.enabled) {
         const embedClient = embedClientConfigForRequest(embed, projectTabsOverride, themeOverride, renderTokenOverride);
         if (embedClient) clientConfig.embed = embedClient;

package/dist/{chunk-42P3CXIH.js → chunk-U3M2VALC.js}

@@ -2,6 +2,7 @@ import {
   AGENT_MEMORY_KEY_MAX_LENGTH,
   AGENT_MEMORY_VALUE_MAX_BYTES,
   CodingAgents,
+  DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DISCOVERY_MAX_PROBES_CAP,
   DISCOVERY_PROBE_CONCURRENCY_CAP,
   GOOGLE_MARKETING_STORED_SNAPSHOT_PAGE_MAX,
@@ -97,7 +98,7 @@ import {
   trafficEventKindSchema,
   trafficSeriesGranularitySchema,
   visibilityReportRequestSchema
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/cli-error.ts
 function isMachineFormat(format) {
@@ -169,6 +170,8 @@ import { parse, stringify } from "yaml";
 // ../config/src/index.ts
 import { z } from "zod";
 var dashboardManagedSweepsSchema = z.boolean().nullish();
+var researchAllowViewersSchema = z.boolean().nullish();
+var researchViewerDailyRunLimitSchema = z.number().int().positive().nullish();
 var envSchema = z.object({
   DATABASE_URL: z.string().default("postgresql://aeo:aeo@postgres:5432/aeo_platform"),
   API_PORT: z.coerce.number().int().positive().default(3e3),
@@ -209,7 +212,9 @@ var envSchema = z.object({
   // Secret for HMAC-signing Google OAuth state parameters. Required for
   // cloud deployments that mount googleRoutes; the plugin refuses to register
   // without it (see packages/api-routes/src/google.ts).
-  GOOGLE_STATE_SECRET: z.string().optional()
+  GOOGLE_STATE_SECRET: z.string().optional(),
+  CANONRY_RESEARCH_ALLOW_VIEWERS: z.string().optional(),
+  CANONRY_RESEARCH_VIEWER_DAILY_RUN_LIMIT: z.coerce.number().int().positive().default(DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT)
 });
 var bootstrapEnvSchema = z.object({
   CANONRY_API_KEY: z.string().optional(),
@@ -396,6 +401,18 @@ Do not use "canonry init --force" for recovery. It replaces credentials without
       message: `Invalid config at ${configPath}: dashboard.managedSweeps must be true, false, or left blank.`
     });
   }
+  if (!researchAllowViewersSchema.safeParse(parsed.research?.allowViewers).success) {
+    throw new CliError({
+      code: "CONFIG_INVALID",
+      message: `Invalid config at ${configPath}: research.allowViewers must be true, false, or left blank.`
+    });
+  }
+  if (!researchViewerDailyRunLimitSchema.safeParse(parsed.research?.viewerDailyRunLimit).success) {
+    throw new CliError({
+      code: "CONFIG_INVALID",
+      message: `Invalid config at ${configPath}: research.viewerDailyRunLimit must be a positive integer or left blank.`
+    });
+  }
   if (parsed.geminiApiKey && !parsed.providers?.gemini) {
     parsed.providers = {
       ...parsed.providers,
@@ -12544,7 +12561,7 @@ Two signals, never interchangeable:
 - cited = the domain appears in the SOURCE links behind the answer.
 A model can do either, both or neither. Never compute one from the other, and never report a number for one under the other's name.
 
-Sweeps and probes spend provider quota and write rows. Get explicit approval before any run, apply, or other mutation.
+Sweeps, probes, and research runs spend provider quota and write rows. Get explicit approval before any run, apply, or other mutation.
 
 Most reads are free. Five ads reads are NOT: canonry_ads_account, canonry_ads_geo_search, canonry_ads_live_delivery, canonry_ads_conversion_pixels and canonry_ads_conversion_event_settings call the provider live and spend against the advertiser account. They are marked read, so nothing in the tool list warns you. Get approval for those exactly as for a mutation.
 

package/dist/{chunk-7TYSFZEG.js → chunk-XD2ZD2BP.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-42P3CXIH.js";
+} from "./chunk-U3M2VALC.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/cli.js

@@ -28,11 +28,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-YYNL73BT.js";
+} from "./chunk-O26JKJXV.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-7TYSFZEG.js";
+} from "./chunk-XD2ZD2BP.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -58,7 +58,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-42P3CXIH.js";
+} from "./chunk-U3M2VALC.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -72,7 +72,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-7CG3QE4N.js";
+} from "./chunk-EMSDPSQM.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -145,7 +145,7 @@ import {
   shareOfVoiceReason,
   visibilityReportRequestSchema,
   winnabilityClassSchema
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";

package/dist/index.d.ts

@@ -309,6 +309,12 @@ interface DashboardConfigEntry {
     /** Hide dashboard sweep controls; operators can still use `canonry run`. Defaults to false. */
     managedSweeps?: boolean | null;
 }
+interface ResearchConfigEntry {
+    /** Allow signed-in viewers to run paid research queries. Defaults to false. */
+    allowViewers?: boolean | null;
+    /** Viewer-created research runs allowed per project and UTC day. Defaults to 20. */
+    viewerDailyRunLimit?: number | null;
+}
 /**
  * Google Places API config — supplemental rendered-listing data for GBP
  * lodging locations (#648). The API key authenticates Place Details calls
@@ -350,6 +356,8 @@ interface CanonryConfig {
     gtm?: GtmConfigEntry;
     dashboardPasswordHash?: string;
     dashboard?: DashboardConfigEntry;
+    /** Paid research access and budget controls. */
+    research?: ResearchConfigEntry;
     telemetry?: boolean;
     anonymousId?: string;
     lastSeenVersion?: string;

package/dist/index.js

@@ -3,12 +3,12 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-YYNL73BT.js";
+} from "./chunk-O26JKJXV.js";
 import {
   loadConfig
-} from "./chunk-42P3CXIH.js";
-import "./chunk-7CG3QE4N.js";
-import "./chunk-CFJHRXZ3.js";
+} from "./chunk-U3M2VALC.js";
+import "./chunk-EMSDPSQM.js";
+import "./chunk-LNBX7RTN.js";
 export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,

package/dist/{intelligence-service-KBHLNDGO.js → intelligence-service-UZGA24EF.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-7CG3QE4N.js";
-import "./chunk-CFJHRXZ3.js";
+} from "./chunk-EMSDPSQM.js";
+import "./chunk-LNBX7RTN.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -1,13 +1,13 @@
 import {
   autoSyncSkills
-} from "./chunk-7TYSFZEG.js";
+} from "./chunk-XD2ZD2BP.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-42P3CXIH.js";
+} from "./chunk-U3M2VALC.js";
 import {
   isReadOnlyKey
-} from "./chunk-CFJHRXZ3.js";
+} from "./chunk-LNBX7RTN.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.186.8",
+  "version": "4.186.9",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "license": "FSL-1.1-ALv2",
@@ -70,32 +70,32 @@
     "@types/node-cron": "^3.0.11",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
-    "@ainyc/canonry-web": "0.0.0",
     "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
+    "@ainyc/canonry-web": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google-ads": "0.0.0",
-    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0"
   },
   "scripts": {
     "build": "pnpm run build:cli && pnpm run build:web",