@ainyc/canonry 4.21.3 → 4.23.0

package/dist/{chunk-EY63PENL.js → chunk-EUGCQSFC.js}

@@ -2227,6 +2227,10 @@ var cloudRunSourceConfigSchema = z20.object({
   location: z20.string().nullable().optional(),
   authMode: trafficSourceAuthModeSchema
 });
+var wordpressTrafficSourceConfigSchema = z20.object({
+  baseUrl: z20.string().url(),
+  username: z20.string().min(1)
+});
 var trafficSourceDtoSchema = z20.object({
   id: z20.string(),
   projectId: z20.string(),
@@ -2249,6 +2253,13 @@ var trafficConnectCloudRunRequestSchema = z20.object({
   /** Service-account JSON content (string). When omitted, defaults to OAuth via `canonry google connect <project> --type ga4` flow. */
   keyJson: z20.string().optional()
 });
+var trafficConnectWordpressRequestSchema = z20.object({
+  baseUrl: z20.string().url(),
+  username: z20.string().min(1),
+  /** WordPress Application Password (the same auth used by the content client). */
+  applicationPassword: z20.string().min(1),
+  displayName: z20.string().min(1).optional()
+});
 var trafficSyncResponseSchema = z20.object({
   sourceId: z20.string(),
   runId: z20.string(),
@@ -2494,6 +2505,7 @@ export {
   TrafficSourceAuthModes,
   VerificationStatuses,
   trafficConnectCloudRunRequestSchema,
+  trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   TrafficEventKinds,
   formatRatio,

package/dist/{chunk-GVQYROIK.js → chunk-OYYFXKRK.js}

@@ -8,7 +8,7 @@ import {
   categoryLabel,
   determineAnswerMentioned,
   normalizeProjectDomain
-} from "./chunk-EY63PENL.js";
+} from "./chunk-EUGCQSFC.js";
 
 // src/intelligence-service.ts
 import { eq, desc, asc, and, or, inArray } from "drizzle-orm";

package/dist/{chunk-VFKGHXVJ.js → chunk-VOSBGXXG.js}

@@ -14,8 +14,9 @@ import {
   schedulableRunKindSchema,
   scheduleUpsertRequestSchema,
   trafficConnectCloudRunRequestSchema,
+  trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-EY63PENL.js";
+} from "./chunk-EUGCQSFC.js";
 
 // src/config.ts
 import fs from "fs";
@@ -766,6 +767,13 @@ var ApiClient = class {
       body
     );
   }
+  async trafficConnectWordpress(project, body) {
+    return this.request(
+      "POST",
+      `/projects/${encodeURIComponent(project)}/traffic/connect/wordpress`,
+      body
+    );
+  }
   async trafficSync(project, sourceId, body) {
     return this.request(
       "POST",
@@ -1192,6 +1200,10 @@ var trafficConnectCloudRunInputSchema = z2.object({
   project: projectNameSchema,
   request: trafficConnectCloudRunRequestSchema
 });
+var trafficConnectWordpressInputSchema = z2.object({
+  project: projectNameSchema,
+  request: trafficConnectWordpressRequestSchema
+});
 var trafficSyncInputSchema = z2.object({
   project: projectNameSchema,
   sourceId: z2.string().min(1).describe("Traffic source ID returned by canonry_traffic_connect_cloud_run or canonry_traffic_sources_list."),
@@ -1789,6 +1801,17 @@ var canonryMcpTools = [
     openApiOperations: ["POST /api/v1/projects/{name}/traffic/connect/cloud-run"],
     handler: (client, input) => client.trafficConnectCloudRun(input.project, input.request)
   }),
+  defineTool({
+    name: "canonry_traffic_connect_wordpress",
+    title: "Connect WordPress traffic-logger source",
+    description: "Connect a WordPress site (running the canonry traffic-logger plugin) as a server-side traffic source. Probes the plugin endpoint with the supplied Application Password before persisting \u2014 a bad credential or unreachable host surfaces as a 502 error. Reconnecting updates the existing active WordPress source in place. The Application Password is stored in ~/.canonry/config.yaml (not the DB) and never echoed back.",
+    access: "write",
+    tier: "traffic",
+    inputSchema: trafficConnectWordpressInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/traffic/connect/wordpress"],
+    handler: (client, input) => client.trafficConnectWordpress(input.project, input.request)
+  }),
   defineTool({
     name: "canonry_traffic_sync",
     title: "Sync Cloud Run traffic source",

package/dist/cli.js

@@ -20,7 +20,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-3UGJUNQX.js";
+} from "./chunk-CLVZF3X7.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -36,7 +36,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-VFKGHXVJ.js";
+} from "./chunk-VOSBGXXG.js";
 import {
   apiKeys,
   competitors,
@@ -49,7 +49,7 @@ import {
   queries,
   querySnapshots,
   runs
-} from "./chunk-GVQYROIK.js";
+} from "./chunk-OYYFXKRK.js";
 import {
   CcReleaseSyncStatuses,
   CheckScopes,
@@ -69,7 +69,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   skillsClientSchema
-} from "./chunk-EY63PENL.js";
+} from "./chunk-EUGCQSFC.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -621,7 +621,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-5COCQKXG.js");
+  const { IntelligenceService } = await import("./intelligence-service-NVN2PAR7.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -2722,6 +2722,74 @@ var GA_CLI_COMMANDS = [
 function getClient5() {
   return createApiClient();
 }
+async function trafficConnectWordpress(project, opts) {
+  if (!opts.url) {
+    throw new CliError({
+      code: "TRAFFIC_WP_URL_REQUIRED",
+      message: "--url is required",
+      displayMessage: "Error: --url is required",
+      details: { project }
+    });
+  }
+  if (!opts.username) {
+    throw new CliError({
+      code: "TRAFFIC_WP_USERNAME_REQUIRED",
+      message: "--username is required",
+      displayMessage: "Error: --username is required",
+      details: { project }
+    });
+  }
+  if (opts.appPassword && opts.appPasswordFile) {
+    throw new CliError({
+      code: "TRAFFIC_WP_APP_PASSWORD_CONFLICT",
+      message: "--app-password and --app-password-file are mutually exclusive",
+      displayMessage: "Error: pass either --app-password <pw> or --app-password-file <path>, not both",
+      details: { project }
+    });
+  }
+  let applicationPassword = opts.appPassword?.trim() ?? "";
+  if (!applicationPassword && opts.appPasswordFile) {
+    const fs13 = await import("fs");
+    try {
+      applicationPassword = fs13.readFileSync(opts.appPasswordFile, "utf-8").trim();
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      throw new CliError({
+        code: "TRAFFIC_WP_APP_PASSWORD_FILE_READ_ERROR",
+        message: `Failed to read --app-password-file: ${msg}`,
+        displayMessage: `Error: failed to read --app-password-file "${opts.appPasswordFile}": ${msg}`,
+        details: { project, appPasswordFile: opts.appPasswordFile }
+      });
+    }
+  }
+  if (!applicationPassword) {
+    throw new CliError({
+      code: "TRAFFIC_WP_APP_PASSWORD_REQUIRED",
+      message: "--app-password or --app-password-file is required",
+      displayMessage: "Error: pass --app-password <pw> or --app-password-file <path>",
+      details: { project }
+    });
+  }
+  const client = getClient5();
+  const result = await client.trafficConnectWordpress(project, {
+    baseUrl: opts.url,
+    username: opts.username,
+    applicationPassword,
+    displayName: opts.displayName
+  });
+  if (opts.format === "json") {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log(`WordPress traffic source connected for project "${project}".`);
+  console.log(`  Source ID:    ${result.id}`);
+  console.log(`  Display name: ${result.displayName}`);
+  console.log(`  Status:       ${result.status}`);
+  console.log(`  Site URL:     ${result.config.baseUrl ?? "(unset)"}`);
+  console.log(`  Username:     ${result.config.username ?? "(unset)"}`);
+  console.log("");
+  console.log(`Next: canonry traffic sync ${project} --source ${result.id}`);
+}
 async function trafficConnectCloudRun(project, opts) {
   if (!opts.gcpProject) {
     throw new CliError({
@@ -3026,6 +3094,36 @@ var TRAFFIC_CLI_COMMANDS = [
       });
     }
   },
+  {
+    path: ["traffic", "connect", "wordpress"],
+    usage: "canonry traffic connect wordpress <project> --url <wp-site-url> --username <wp-user> (--app-password <pw> | --app-password-file <path>) [--display-name <name>] [--format json]",
+    options: {
+      url: stringOption(),
+      username: stringOption(),
+      "app-password": stringOption(),
+      "app-password-file": stringOption(),
+      "display-name": stringOption()
+    },
+    run: async (input) => {
+      const project = requireProject(
+        input,
+        "traffic.connect.wordpress",
+        "canonry traffic connect wordpress <project> --url <wp-site-url> --username <wp-user> (--app-password <pw> | --app-password-file <path>)"
+      );
+      const url = getString(input.values, "url");
+      if (!url) throw new Error("--url is required");
+      const username = getString(input.values, "username");
+      if (!username) throw new Error("--username is required");
+      await trafficConnectWordpress(project, {
+        url,
+        username,
+        appPassword: getString(input.values, "app-password"),
+        appPasswordFile: getString(input.values, "app-password-file"),
+        displayName: getString(input.values, "display-name"),
+        format: input.format
+      });
+    }
+  },
   {
     path: ["traffic", "connect"],
     usage: "canonry traffic connect <provider> <project> [args]",
@@ -3033,7 +3131,7 @@ var TRAFFIC_CLI_COMMANDS = [
       unknownSubcommand(input.positionals[0], {
         command: "traffic connect",
         usage: "canonry traffic connect <provider> <project> [args]",
-        available: ["cloud-run"]
+        available: ["cloud-run", "wordpress"]
       });
     }
   },

package/dist/index.d.ts

@@ -91,6 +91,22 @@ interface WordpressConnectionConfigEntry {
 interface WordpressConfigEntry {
     connections?: WordpressConnectionConfigEntry[];
 }
+/**
+ * Per-project WordPress traffic-logger connection. Separate from `wordpress.connections`,
+ * which is the content-publishing client. Authenticates against the WP traffic plugin's
+ * REST endpoint using a WordPress Application Password.
+ */
+interface WordpressTrafficConnectionConfigEntry {
+    projectName: string;
+    baseUrl: string;
+    username: string;
+    applicationPassword: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface WordpressTrafficConfigEntry {
+    connections?: WordpressTrafficConnectionConfigEntry[];
+}
 interface AgentConfigEntry {
     /** Agent mode. Only 'disabled' is valid until the native loop ships. */
     mode?: 'disabled';
@@ -113,6 +129,7 @@ interface CanonryConfig {
     ga4?: Ga4ConfigEntry;
     cloudRun?: CloudRunConfigEntry;
     wordpress?: WordpressConfigEntry;
+    wordpressTraffic?: WordpressTrafficConfigEntry;
     dashboardPasswordHash?: string;
     telemetry?: boolean;
     anonymousId?: string;

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-3UGJUNQX.js";
+} from "./chunk-CLVZF3X7.js";
 import {
   loadConfig
-} from "./chunk-VFKGHXVJ.js";
-import "./chunk-GVQYROIK.js";
-import "./chunk-EY63PENL.js";
+} from "./chunk-VOSBGXXG.js";
+import "./chunk-OYYFXKRK.js";
+import "./chunk-EUGCQSFC.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-5COCQKXG.js → intelligence-service-NVN2PAR7.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-GVQYROIK.js";
-import "./chunk-EY63PENL.js";
+} from "./chunk-OYYFXKRK.js";
+import "./chunk-EUGCQSFC.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -2,8 +2,8 @@ import {
   CliError,
   canonryMcpTools,
   createApiClient
-} from "./chunk-VFKGHXVJ.js";
-import "./chunk-EY63PENL.js";
+} from "./chunk-VOSBGXXG.js";
+import "./chunk-EUGCQSFC.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.21.3",
+  "version": "4.23.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -61,20 +61,20 @@
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {