@ainyc/canonry 4.194.0 → 4.195.0

package/dist/{chunk-ZA2QVBQO.js → chunk-H3RVNMOO.js}

@@ -4,6 +4,7 @@ import {
   CANONRY_MCP_TOOLKIT_NAMES,
   CanonryMcpToolNames,
   CliError,
+  PACKAGE_VERSION,
   canonryMcpTools,
   configExists,
   createCanonryMcpServer,
@@ -14,7 +15,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-7XXXNNE2.js";
+} from "./chunk-B2XM6AQ6.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -22,8 +23,10 @@ import {
   GSC_DATA_LAG_DAYS,
   GSC_REPORTING_TIME_ZONE,
   IntelligenceService,
+  OperationalLogStore,
   PLUGIN_DIR,
   USER_SESSION_COOKIE_NAME,
+  addLogListener,
   adsAdGroups,
   adsAds,
   adsCampaigns,
@@ -56,6 +59,7 @@ import {
   crawlerEventsHourly,
   createClient,
   createCredentialChecker,
+  createFastifyLogger,
   createLogger,
   createUserSession,
   deliverWebhook,
@@ -162,7 +166,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-QVYGI6CL.js";
+} from "./chunk-UMU3IBXM.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -276,6 +280,7 @@ import {
   isSelfLink,
   isVertexGroundingRedirect,
   mapWithConcurrency,
+  maskTelemetryAnonymousId,
   nextScheduleUpdatedAt,
   normalizeIdTokens,
   normalizeMeasurementExecutionQueryText,
@@ -306,7 +311,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-X5AE3GNC.js";
+} from "./chunk-3WODA4JF.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -360,18 +365,51 @@ function envSourceOverride() {
 function setTelemetrySource(source) {
   CURRENT_SOURCE = source;
 }
-function isTelemetryEnabled() {
-  if (process.env.CANONRY_TELEMETRY_DISABLED === "1") return false;
-  if (process.env.DO_NOT_TRACK === "1") return false;
-  if (process.env.CI) return false;
-  if (!configExists()) return true;
+function resolveTelemetryStatus(input) {
+  const base = {
+    configuredEnabled: input.configuredEnabled,
+    ...input.anonymousId ? { anonymousId: maskAnonymousId(input.anonymousId) } : {},
+    target: "local"
+  };
+  if (input.canonryTelemetryDisabled === "1") {
+    return { ...base, enabled: false, reason: "CANONRY_TELEMETRY_DISABLED" };
+  }
+  if (input.doNotTrack === "1") {
+    return { ...base, enabled: false, reason: "DO_NOT_TRACK" };
+  }
+  if (input.ci) return { ...base, enabled: false, reason: "CI" };
+  if (!input.configuredEnabled) return { ...base, enabled: false, reason: "configured_disabled" };
+  if (input.configState === "absent") return { ...base, enabled: true, reason: "NO_CONFIG" };
+  if (input.configState === "unavailable") return { ...base, enabled: true, reason: "CONFIG_UNAVAILABLE" };
+  return { ...base, enabled: true, reason: "enabled" };
+}
+function maskAnonymousId(value) {
+  return maskTelemetryAnonymousId(value);
+}
+function getTelemetryStatus() {
+  const env = {
+    canonryTelemetryDisabled: process.env.CANONRY_TELEMETRY_DISABLED,
+    doNotTrack: process.env.DO_NOT_TRACK,
+    ci: process.env.CI
+  };
+  if (!configExists()) {
+    return resolveTelemetryStatus({ ...env, configuredEnabled: true, configState: "absent" });
+  }
   try {
     const config = loadConfig();
-    return config.telemetry !== false;
+    return resolveTelemetryStatus({
+      ...env,
+      configuredEnabled: config.telemetry !== false,
+      configState: "present",
+      anonymousId: config.anonymousId
+    });
   } catch {
-    return true;
+    return resolveTelemetryStatus({ ...env, configuredEnabled: true, configState: "unavailable" });
   }
 }
+function isTelemetryEnabled() {
+  return getTelemetryStatus().enabled;
+}
 function getOrCreateAnonymousId() {
   const fromEnv = readEnvAnonymousId();
   if (fromEnv) return fromEnv;
@@ -6247,7 +6285,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "8d4ee4870a290e10a57c6f8455e98cf94ea48ae2" : void 0;
+  const embedded = true ? "9cc37abc3436114b63ddd6722b5bfb1af0f85c02" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -12058,7 +12096,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-M4V3YPFZ.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-MGQRJW4V.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -15812,7 +15850,12 @@ function registerMcpHttpRoutes(scope, opts) {
     if (!request.apiKey && request.principal?.kind === "user") {
       sessionKey = mintSessionKey(opts.db, scopes, request.principal.id);
     }
-    const client = new ApiClient(opts.selfApiUrl, sessionKey?.raw ?? bearer, { skipProbe: true });
+    const client = new ApiClient(opts.selfApiUrl, sessionKey?.raw ?? bearer, {
+      skipProbe: true,
+      clientName: `canonry-mcp/${PACKAGE_VERSION}`,
+      // Correlation only: this is never accepted as caller identity or authority.
+      actorSession: crypto26.randomUUID()
+    });
     let server;
     try {
       server = createCanonryMcpServer({
@@ -17657,20 +17700,14 @@ function createGoogleMarketingConfigCredentialStore(input) {
 }
 async function createServer(opts) {
   const dashboardManagedRunKinds = resolveDashboardManagedRunKinds(process.env, opts.config);
-  const logger = opts.logger === false ? false : process.stdout.isTTY ? {
-    transport: {
-      target: "pino-pretty",
-      options: {
-        colorize: true,
-        translateTime: "HH:MM:ss",
-        ignore: "pid,hostname,reqId",
-        messageFormat: "{msg} {req.method} {req.url}"
-      }
-    }
-  } : true;
+  const operationalLogs = new OperationalLogStore(opts.db, {
+    retention: opts.config.database === ":memory:" ? "process" : "durable"
+  });
+  const logger = createFastifyLogger({ enabled: opts.logger !== false, module: "Server" });
   const trustProxy = resolveTrustProxy(process.env.CANONRY_TRUST_PROXY);
   const app = Fastify({
-    logger,
+    loggerInstance: logger,
+    genReqId: () => crypto27.randomUUID(),
     trustProxy
   });
   const registry = new ProviderRegistry();
@@ -19128,7 +19165,7 @@ async function createServer(opts) {
     },
     getRunnableProviderNames: () => registry.getAll().map((provider) => provider.adapter.name),
     getEffectiveProviderModels: () => effectiveProviderModels(registry),
-    onProviderUpdate: (providerName, apiKey, model, baseUrl, incomingQuota) => {
+    onProviderUpdate: (providerName, apiKey, model, baseUrl, incomingQuota, auditContext) => {
       const name = providerName;
       if (!adapterMap[name]) return null;
       if (!opts.config.providers) opts.config.providers = {};
@@ -19188,7 +19225,11 @@ async function createServer(opts) {
           targetProjectIds.map((projectId) => ({
             id: crypto27.randomUUID(),
             projectId,
-            actor: "api",
+            actor: auditContext?.actor ?? "api",
+            userAgent: auditContext?.userAgent ?? null,
+            actorSession: auditContext?.actorSession ?? null,
+            credentialId: auditContext?.credentialId ?? null,
+            requestId: auditContext?.requestId ?? null,
             action: existing ? "provider.updated" : "provider.created",
             entityType: "provider",
             entityId: name,
@@ -19264,15 +19305,8 @@ async function createServer(opts) {
         }
       });
     },
-    getTelemetryStatus: () => {
-      const enabled = isTelemetryEnabled();
-      return {
-        enabled,
-        // Only read/create the anonymous ID if telemetry is enabled.
-        // Don't mutate config for opted-out users.
-        anonymousId: enabled ? getOrCreateAnonymousId() : void 0
-      };
-    },
+    listOperationalLogs: (query) => operationalLogs.list(query),
+    getTelemetryStatus,
     setTelemetryEnabled: (enabled) => {
       const config = loadConfig();
       config.telemetry = enabled;
@@ -19543,7 +19577,9 @@ async function createServer(opts) {
       rejectRuntimeStartup(error);
     }
   });
+  const stopLogCapture = addLogListener((entry) => operationalLogs.append(entry));
   app.addHook("onClose", async () => {
+    stopLogCapture();
     scheduler.stop();
   });
   return app;
@@ -19608,6 +19644,7 @@ function parseQueryResponse(raw, count2) {
 export {
   trackCliCommandFinished,
   setTelemetrySource,
+  getTelemetryStatus,
   isTelemetryEnabled,
   getOrCreateAnonymousId,
   isFirstRun,

package/dist/{chunk-AO5QJJE6.js → chunk-LJKAB4CX.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-7XXXNNE2.js";
+} from "./chunk-B2XM6AQ6.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-X5AE3GNC.js";
+} from "./chunk-3WODA4JF.js";
 
 // src/skills-autosync.ts
 import fs from "fs";