@ainyc/canonry 4.34.0 → 4.36.0

package/dist/{chunk-7AF6B3L6.js → chunk-F2G67CIU.js}

@@ -5,7 +5,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-5EBN7736.js";
+} from "./chunk-O7S623DL.js";
 import {
   DEFAULT_RUN_HISTORY_LIMIT,
   IntelligenceService,
@@ -29,6 +29,7 @@ import {
   buildContentTargetRows,
   buildGapQueryScore,
   buildInventory,
+  buildMentionCoverage,
   buildMentionLandscape,
   buildMovementSummary,
   buildOverviewCompetitors,
@@ -39,6 +40,7 @@ import {
   ccReleaseSyncs,
   competitors,
   crawlerEventsHourly,
+  createClient,
   createLogger,
   discoveryProbes,
   discoverySessions,
@@ -60,6 +62,7 @@ import {
   isBlogShapedQuery,
   isTrendBaseline,
   mapOpportunitiesToNextSteps,
+  migrate,
   notifications,
   parseJsonColumn,
   pickGroupRepresentative,
@@ -71,7 +74,7 @@ import {
   schedules,
   trafficSources,
   usageCounters
-} from "./chunk-7256SFYT.js";
+} from "./chunk-JQQXMCQ7.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -90,6 +93,7 @@ import {
   DiscoveryCompetitorTypes,
   DiscoverySessionStatuses,
   MemorySources,
+  ProviderNames,
   RunKinds,
   RunStatuses,
   RunTriggers,
@@ -127,6 +131,7 @@ import {
   discoveryBucketSchema,
   discoveryPromoteRequestSchema,
   discoveryRunRequestSchema,
+  effectiveBrandNames,
   effectiveDomains,
   emptyCitationVisibility,
   extractAnswerMentions,
@@ -144,7 +149,9 @@ import {
   isBrowserProvider,
   keywordGenerateRequestSchema,
   locationContextSchema,
+  mentionStateFromAnswerMentioned,
   missingDependency,
+  normalizeProjectAliases,
   normalizeProjectDomain,
   normalizeUrlPath,
   notFound,
@@ -180,7 +187,7 @@ import {
   visibilityStateFromAnswerMentioned,
   windowCutoff,
   wordpressEnvSchema
-} from "./chunk-XW3F5EEW.js";
+} from "./chunk-XJVYVURK.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -333,13 +340,146 @@ function trackEvent(event, properties, options) {
   }).finally(() => clearTimeout(timeout));
 }
 
+// src/update-check.ts
+import { createRequire as createRequire2 } from "module";
+var _require2 = createRequire2(import.meta.url);
+var { version: PKG_VERSION } = _require2("../package.json");
+var PKG_NAME = "@ainyc/canonry";
+var NPM_DIST_TAGS_URL = `https://registry.npmjs.org/-/package/${PKG_NAME}/dist-tags`;
+var NPM_PACKAGE_URL = `https://www.npmjs.com/package/${PKG_NAME}`;
+var FETCH_TIMEOUT_MS = 1500;
+function isUpdateCheckEnabled() {
+  if (process.env.CANONRY_DISABLE_UPDATE_CHECK === "1") return false;
+  if (process.env.DO_NOT_TRACK === "1") return false;
+  if (process.env.CI) return false;
+  if (!configExists()) return true;
+  try {
+    const raw = loadConfigRaw();
+    return raw?.updateCheck !== false;
+  } catch {
+    return true;
+  }
+}
+function compareSemver(a, b) {
+  const parse = (v) => {
+    const core = v.split(/[-+]/)[0];
+    if (!core) return null;
+    const parts = core.split(".");
+    if (parts.length < 3) return null;
+    const nums = [];
+    for (let i = 0; i < 3; i++) {
+      const n = Number(parts[i]);
+      if (!Number.isInteger(n) || n < 0) return null;
+      nums.push(n);
+    }
+    return [nums[0], nums[1], nums[2]];
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  if (!pa || !pb) return 0;
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] > pb[i]) return 1;
+    if (pa[i] < pb[i]) return -1;
+  }
+  return 0;
+}
+async function fetchLatestVersion(opts) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), opts?.timeoutMs ?? FETCH_TIMEOUT_MS);
+  timeout.unref();
+  try {
+    const res = await fetch(NPM_DIST_TAGS_URL, {
+      signal: controller.signal,
+      headers: { accept: "application/json" }
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    if (typeof data.latest !== "string") return null;
+    return data.latest;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function buildUpdateAvailable(current, latest) {
+  if (compareSemver(latest, current) <= 0) return null;
+  return {
+    current,
+    latest,
+    url: NPM_PACKAGE_URL,
+    upgradeCommand: `npm install -g ${PKG_NAME}`
+  };
+}
+async function checkLatestVersionForCli(opts) {
+  if (!isUpdateCheckEnabled()) return null;
+  if (!configExists()) return null;
+  const now = opts?.now ? opts.now() : /* @__PURE__ */ new Date();
+  const ttlMs = (opts?.ttlHours ?? 24) * 60 * 60 * 1e3;
+  let raw;
+  try {
+    raw = loadConfigRaw();
+  } catch {
+    return null;
+  }
+  if (!raw) return null;
+  const lastCheckedAt = raw.lastUpdateCheckAt ? Date.parse(raw.lastUpdateCheckAt) : NaN;
+  const cachedLatest = typeof raw.lastKnownLatestVersion === "string" ? raw.lastKnownLatestVersion : void 0;
+  if (Number.isFinite(lastCheckedAt) && now.getTime() - lastCheckedAt < ttlMs) {
+    if (!cachedLatest) return null;
+    return buildUpdateAvailable(PKG_VERSION, cachedLatest);
+  }
+  const latest = await fetchLatestVersion();
+  if (!latest) {
+    try {
+      saveConfigPatch({ lastUpdateCheckAt: now.toISOString() });
+    } catch {
+    }
+    return null;
+  }
+  try {
+    saveConfigPatch({
+      lastUpdateCheckAt: now.toISOString(),
+      lastKnownLatestVersion: latest
+    });
+  } catch {
+  }
+  return buildUpdateAvailable(PKG_VERSION, latest);
+}
+var memoryCache = null;
+var inFlight = null;
+function startBackgroundRefresh(getNow) {
+  if (inFlight) return;
+  inFlight = (async () => {
+    try {
+      const latest = await fetchLatestVersion();
+      memoryCache = { fetchedAt: getNow(), latest };
+    } catch {
+      memoryCache = { fetchedAt: getNow(), latest: null };
+    } finally {
+      inFlight = null;
+    }
+  })();
+}
+function checkLatestVersionForServer(opts) {
+  if (!isUpdateCheckEnabled()) return null;
+  const getNow = opts?.now ?? Date.now;
+  const ttl = opts?.ttlMs ?? 60 * 60 * 1e3;
+  const now = getNow();
+  if (!memoryCache || now - memoryCache.fetchedAt >= ttl) {
+    startBackgroundRefresh(getNow);
+  }
+  if (!memoryCache || !memoryCache.latest) return null;
+  return buildUpdateAvailable(PKG_VERSION, memoryCache.latest);
+}
+
 // src/server.ts
-import { createRequire as createRequire3 } from "module";
+import { createRequire as createRequire4 } from "module";
 import crypto34 from "crypto";
-import fs12 from "fs";
-import path14 from "path";
+import fs13 from "fs";
+import path15 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { eq as eq40 } from "drizzle-orm";
+import { eq as eq41 } from "drizzle-orm";
 import Fastify from "fastify";
 
 // ../api-routes/src/auth.ts
@@ -409,7 +549,7 @@ async function authPlugin(app, opts = {}) {
 
 // ../api-routes/src/projects.ts
 import crypto4 from "crypto";
-import { eq as eq3 } from "drizzle-orm";
+import { eq as eq3, sql as sql2 } from "drizzle-orm";
 
 // ../api-routes/src/helpers.ts
 import crypto3 from "crypto";
@@ -440,7 +580,11 @@ function resolveSnapshotMentionResult(snapshot, project) {
       canonicalDomain: project.canonicalDomain,
       ownedDomains: normalizeOwnedDomains(project.ownedDomains)
     });
-    return extractAnswerMentions(snapshot.answerText, project.displayName, domains);
+    const brandNames = effectiveBrandNames({
+      displayName: project.displayName,
+      aliases: normalizeOwnedDomains(project.aliases)
+    });
+    return extractAnswerMentions(snapshot.answerText, brandNames, domains);
   }
   if (typeof snapshot.answerMentioned === "boolean") {
     return { mentioned: snapshot.answerMentioned, matchedTerms: [] };
@@ -453,6 +597,9 @@ function resolveSnapshotAnswerMentioned(snapshot, project) {
 function resolveSnapshotVisibilityState(snapshot, project) {
   return visibilityStateFromAnswerMentioned(resolveSnapshotMentionResult(snapshot, project).mentioned);
 }
+function resolveSnapshotMentionState(snapshot, project) {
+  return mentionStateFromAnswerMentioned(resolveSnapshotMentionResult(snapshot, project).mentioned);
+}
 function resolveSnapshotMatchedTerms(snapshot, project) {
   return resolveSnapshotMentionResult(snapshot, project).matchedTerms;
 }
@@ -503,12 +650,16 @@ async function projectRoutes(app, opts) {
       });
     }
     const nextAutoExtractBacklinks = body.autoExtractBacklinks !== void 0 ? body.autoExtractBacklinks ? 1 : 0 : existing?.autoExtractBacklinks ?? 0;
+    const nextAliases = normalizeProjectAliases(body.displayName, body.aliases ?? []);
     if (existing) {
+      const prevAliases = parseJsonColumn(existing.aliases, []);
+      const aliasesChanged = !aliasArraysEqual(prevAliases, nextAliases);
       app.db.transaction((tx) => {
         tx.update(projects).set({
           displayName: body.displayName,
           canonicalDomain: body.canonicalDomain,
           ownedDomains: JSON.stringify(body.ownedDomains ?? []),
+          aliases: JSON.stringify(nextAliases),
           country: body.country,
           language: body.language,
           tags: JSON.stringify(body.tags ?? []),
@@ -530,6 +681,7 @@ async function projectRoutes(app, opts) {
         });
       });
       opts.onProjectUpserted?.(existing.id, name);
+      if (aliasesChanged) opts.onAliasesChanged?.(existing.id, name);
       const updated = app.db.select().from(projects).where(eq3(projects.id, existing.id)).get();
       return reply.status(200).send(formatProject(updated));
     }
@@ -541,6 +693,7 @@ async function projectRoutes(app, opts) {
         displayName: body.displayName,
         canonicalDomain: body.canonicalDomain,
         ownedDomains: JSON.stringify(body.ownedDomains ?? []),
+        aliases: JSON.stringify(nextAliases),
         country: body.country,
         language: body.language,
         tags: JSON.stringify(body.tags ?? []),
@@ -574,6 +727,30 @@ async function projectRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     return reply.send(formatProject(project));
   });
+  app.get("/projects/:name/delete-preview", async (request, reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    const pid = project.id;
+    const count = (n) => n ?? 0;
+    const queryCount = app.db.select({ n: sql2`count(*)` }).from(queries).where(eq3(queries.projectId, pid)).get();
+    const competitorCount = app.db.select({ n: sql2`count(*)` }).from(competitors).where(eq3(competitors.projectId, pid)).get();
+    const runCount = app.db.select({ n: sql2`count(*)` }).from(runs).where(eq3(runs.projectId, pid)).get();
+    const snapshotCount = app.db.select({ n: sql2`count(*)` }).from(querySnapshots).innerJoin(runs, eq3(querySnapshots.runId, runs.id)).where(eq3(runs.projectId, pid)).get();
+    const insightCount = app.db.select({ n: sql2`count(*)` }).from(insights).where(eq3(insights.projectId, pid)).get();
+    const auditLogCount = app.db.select({ n: sql2`count(*)` }).from(auditLog).where(eq3(auditLog.projectId, pid)).get();
+    return reply.send({
+      project: { id: project.id, name: project.name },
+      cascadeRows: {
+        queries: count(queryCount?.n),
+        competitors: count(competitorCount?.n),
+        runs: count(runCount?.n),
+        snapshots: count(snapshotCount?.n),
+        insights: count(insightCount?.n)
+      },
+      detachedRows: {
+        auditLog: count(auditLogCount?.n)
+      }
+    });
+  });
   app.delete("/projects/:name", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     writeAuditLog(app.db, {
@@ -688,6 +865,7 @@ async function projectRoutes(app, opts) {
         displayName: project.displayName,
         canonicalDomain: project.canonicalDomain,
         ownedDomains: parseJsonColumn(project.ownedDomains, []),
+        aliases: parseJsonColumn(project.aliases, []),
         country: project.country,
         language: project.language,
         queries: qs.map((q) => q.query),
@@ -723,6 +901,7 @@ function formatProject(row) {
     displayName: row.displayName,
     canonicalDomain: row.canonicalDomain,
     ownedDomains: parseJsonColumn(row.ownedDomains, []),
+    aliases: parseJsonColumn(row.aliases, []),
     country: row.country,
     language: row.language,
     tags: parseJsonColumn(row.tags, []),
@@ -737,6 +916,13 @@ function formatProject(row) {
     updatedAt: row.updatedAt
   };
 }
+function aliasArraysEqual(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i].toLowerCase() !== b[i].toLowerCase()) return false;
+  }
+  return true;
+}
 
 // ../api-routes/src/queries.ts
 import crypto5 from "crypto";
@@ -1139,7 +1325,7 @@ function parseCompetitorBatch(value) {
 
 // ../api-routes/src/runs.ts
 import crypto8 from "crypto";
-import { eq as eq7, asc, desc, sql as sql2 } from "drizzle-orm";
+import { and as and2, eq as eq7, asc, desc, or as or2, sql as sql3 } from "drizzle-orm";
 
 // ../api-routes/src/run-queue.ts
 import crypto7 from "crypto";
@@ -1233,23 +1419,36 @@ async function runRoutes(app, opts) {
       if (projectLocations.length === 0) {
         throw validationError("No locations configured for this project");
       }
-      const newRuns = [];
-      for (const loc of projectLocations) {
-        const runId2 = crypto8.randomUUID();
-        app.db.insert(runs).values({
-          id: runId2,
-          projectId: project.id,
-          kind,
-          status: "queued",
-          trigger,
-          location: loc.label,
-          queries: queriesColumn,
-          createdAt: now
-        }).run();
-        newRuns.push({ runId: runId2, loc });
+      const result = app.db.transaction((tx) => {
+        const activeRun = tx.select({ id: runs.id }).from(runs).where(and2(
+          eq7(runs.projectId, project.id),
+          or2(eq7(runs.status, "queued"), eq7(runs.status, "running"))
+        )).get();
+        if (activeRun) {
+          return { conflict: true };
+        }
+        const inserted = [];
+        for (const loc of projectLocations) {
+          const runId2 = crypto8.randomUUID();
+          tx.insert(runs).values({
+            id: runId2,
+            projectId: project.id,
+            kind,
+            status: "queued",
+            trigger,
+            location: loc.label,
+            queries: queriesColumn,
+            createdAt: now
+          }).run();
+          inserted.push({ runId: runId2, loc });
+        }
+        return { conflict: false, inserted };
+      });
+      if (result.conflict) {
+        throw runInProgress(project.name);
       }
       const results = [];
-      for (const { runId: runId2, loc } of newRuns) {
+      for (const { runId: runId2, loc } of result.inserted) {
         writeAuditLog(app.db, {
           projectId: project.id,
           actor: "api",
@@ -1298,7 +1497,7 @@ async function runRoutes(app, opts) {
   });
   app.get("/projects/:name/runs/latest", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const countRow = app.db.select({ count: sql2`count(*)` }).from(runs).where(eq7(runs.projectId, project.id)).get();
+    const countRow = app.db.select({ count: sql3`count(*)` }).from(runs).where(eq7(runs.projectId, project.id)).get();
     const totalRuns = countRow?.count ?? 0;
     const latestRun = app.db.select().from(runs).where(eq7(runs.projectId, project.id)).orderBy(desc(runs.createdAt), desc(runs.id)).limit(1).get();
     if (!latestRun) {
@@ -1437,7 +1636,8 @@ function loadRunDetail(app, run) {
   const project = app.db.select({
     displayName: projects.displayName,
     canonicalDomain: projects.canonicalDomain,
-    ownedDomains: projects.ownedDomains
+    ownedDomains: projects.ownedDomains,
+    aliases: projects.aliases
   }).from(projects).where(eq7(projects.id, run.projectId)).get();
   const snapshots = app.db.select({
     id: querySnapshots.id,
@@ -1469,7 +1669,10 @@ function loadRunDetail(app, run) {
         provider: s.provider,
         citationState: s.citationState,
         answerMentioned,
+        // Legacy alias of `mentionState`, retained for backwards compatibility.
         visibilityState: project ? resolveSnapshotVisibilityState(s, project) : answerMentioned ? "visible" : "not-visible",
+        // Canonical vocabulary for answer-text presence; new consumers prefer this.
+        mentionState: project ? resolveSnapshotMentionState(s, project) : answerMentioned ? "mentioned" : "not-mentioned",
         answerText: s.answerText,
         citedDomains: parseJsonColumn(s.citedDomains, []),
         competitorOverlap: parseJsonColumn(s.competitorOverlap, []),
@@ -1487,7 +1690,7 @@ function loadRunDetail(app, run) {
 
 // ../api-routes/src/apply.ts
 import crypto10 from "crypto";
-import { and as and2, eq as eq8 } from "drizzle-orm";
+import { and as and3, eq as eq8 } from "drizzle-orm";
 
 // ../api-routes/src/schedule-utils.ts
 var DAY_MAP = {
@@ -1584,7 +1787,7 @@ import http from "http";
 import https from "https";
 import net from "net";
 var REQUEST_TIMEOUT_MS = 1e4;
-async function resolveWebhookTarget(raw) {
+async function resolveWebhookTarget(raw, options = {}) {
   let parsed;
   try {
     parsed = new URL(raw);
@@ -1605,7 +1808,7 @@ async function resolveWebhookTarget(raw) {
   if (addresses.length === 0) {
     return { ok: false, message: '"url" hostname could not be resolved' };
   }
-  const blocked = addresses.find((entry) => isBlockedAddress(entry.address));
+  const blocked = addresses.find((entry) => isBlockedAddress(entry.address, options));
   if (blocked) {
     return { ok: false, message: '"url" must not resolve to a private or loopback address' };
   }
@@ -1622,7 +1825,7 @@ async function deliverWebhook(target, payload, webhookSecret) {
   const body = JSON.stringify(payload);
   const isHttps = target.url.protocol === "https:";
   const port = target.url.port ? Number(target.url.port) : isHttps ? 443 : 80;
-  const path15 = `${target.url.pathname}${target.url.search}`;
+  const path16 = `${target.url.pathname}${target.url.search}`;
   const headers = {
     "Content-Length": String(Buffer.byteLength(body)),
     "Content-Type": "application/json",
@@ -1638,7 +1841,7 @@ async function deliverWebhook(target, payload, webhookSecret) {
       headers,
       hostname: target.address,
       method: "POST",
-      path: path15,
+      path: path16,
       port,
       timeout: REQUEST_TIMEOUT_MS
     };
@@ -1683,34 +1886,40 @@ async function resolveHostAddresses(hostname) {
     return [];
   }
 }
-function isBlockedAddress(address) {
+function isBlockedAddress(address, options) {
   const normalized = stripIpv6Brackets(address).toLowerCase();
   const family = net.isIP(normalized);
   if (family === 4) {
-    return isBlockedIpv4(normalized);
+    return isBlockedIpv4(normalized, options);
   }
   if (family === 6) {
     const mappedIpv4 = extractMappedIpv4(normalized);
     if (mappedIpv4) {
-      return isBlockedIpv4(mappedIpv4);
+      return isBlockedIpv4(mappedIpv4, options);
     }
-    return isBlockedIpv6(normalized);
+    return isBlockedIpv6(normalized, options);
   }
   return true;
 }
-function isBlockedIpv4(address) {
+function isBlockedIpv4(address, options) {
   const octets = address.split(".").map((part) => Number.parseInt(part, 10));
   if (octets.length !== 4 || octets.some(Number.isNaN)) {
     return true;
   }
   const [first, second] = octets;
+  if (first === 127 && !options.allowLoopback) {
+    return true;
+  }
   return first === 0 || first === 10 || first === 100 && second >= 64 && second <= 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168 || first === 198 && (second === 18 || second === 19);
 }
-function isBlockedIpv6(address) {
+function isBlockedIpv6(address, options) {
   const normalized = address.split("%")[0].toLowerCase();
   if (normalized === "::") {
     return true;
   }
+  if (normalized === "::1") {
+    return !options.allowLoopback;
+  }
   const firstHextetText = normalized.split(":")[0] ?? "";
   const firstHextet = firstHextetText === "" ? 0 : Number.parseInt(firstHextetText, 16);
   if (Number.isNaN(firstHextet)) {
@@ -1741,6 +1950,7 @@ function stripIpv6Brackets(value) {
 
 // ../api-routes/src/apply.ts
 async function applyRoutes(app, opts) {
+  const allowLoopback = opts?.allowLoopbackWebhooks === true;
   app.post("/apply", async (request, reply) => {
     const parsed = projectConfigSchema.safeParse(request.body);
     if (!parsed.success) {
@@ -1795,7 +2005,7 @@ async function applyRoutes(app, opts) {
     const hasNotifications = "notifications" in rawSpec;
     if (hasNotifications) {
       for (const notif of config.spec.notifications) {
-        const urlCheck = await resolveWebhookTarget(notif.url ?? "");
+        const urlCheck = await resolveWebhookTarget(notif.url ?? "", { allowLoopback });
         if (!urlCheck.ok) throw validationError(`Notification URL invalid: ${urlCheck.message}`);
       }
     }
@@ -1804,14 +2014,21 @@ async function applyRoutes(app, opts) {
     const configQueries = resolveConfigSpecQueries(config.spec);
     let projectId;
     let scheduleAction = null;
+    let aliasesChanged = false;
     app.db.transaction((tx) => {
       const existing = tx.select().from(projects).where(eq8(projects.name, name)).get();
+      const nextAliases = normalizeProjectAliases(config.spec.displayName, config.spec.aliases ?? []);
+      if (existing) {
+        const prevAliases = parseJsonColumn(existing.aliases, []);
+        aliasesChanged = !aliasArraysEqual2(prevAliases, nextAliases);
+      }
       if (existing) {
         projectId = existing.id;
         tx.update(projects).set({
           displayName: config.spec.displayName,
           canonicalDomain: config.spec.canonicalDomain,
           ownedDomains: JSON.stringify(config.spec.ownedDomains ?? []),
+          aliases: JSON.stringify(nextAliases),
           country: config.spec.country,
           language: config.spec.language,
           labels: JSON.stringify(config.metadata.labels),
@@ -1838,6 +2055,7 @@ async function applyRoutes(app, opts) {
           displayName: config.spec.displayName,
           canonicalDomain: config.spec.canonicalDomain,
           ownedDomains: JSON.stringify(config.spec.ownedDomains ?? []),
+          aliases: JSON.stringify(nextAliases),
           country: config.spec.country,
           language: config.spec.language,
           tags: "[]",
@@ -1896,7 +2114,7 @@ async function applyRoutes(app, opts) {
       });
       const AV_KIND = SchedulableRunKinds["answer-visibility"];
       if (resolvedSchedule) {
-        const existingSched = tx.select().from(schedules).where(and2(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
+        const existingSched = tx.select().from(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
         if (existingSched) {
           tx.update(schedules).set({
             cronExpr: resolvedSchedule.cronExpr,
@@ -1922,9 +2140,9 @@ async function applyRoutes(app, opts) {
         }
         scheduleAction = "upsert";
       } else if (deleteSchedule) {
-        const existingSched = tx.select().from(schedules).where(and2(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
+        const existingSched = tx.select().from(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).get();
         if (existingSched) {
-          tx.delete(schedules).where(and2(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).run();
+          tx.delete(schedules).where(and3(eq8(schedules.projectId, projectId), eq8(schedules.kind, AV_KIND))).run();
           scheduleAction = "delete";
         }
       }
@@ -1957,6 +2175,9 @@ async function applyRoutes(app, opts) {
     if (!hasNotifications) {
       opts?.onProjectUpserted?.(projectId, config.metadata.name);
     }
+    if (aliasesChanged) {
+      opts?.onAliasesChanged?.(projectId, config.metadata.name);
+    }
     if ("google" in rawSpec && config.spec.google?.gsc?.propertyUrl) {
       opts?.onGoogleConnectionPropertyUpdated?.(config.spec.canonicalDomain, "gsc", config.spec.google.gsc.propertyUrl);
     }
@@ -1967,6 +2188,7 @@ async function applyRoutes(app, opts) {
       displayName: project.displayName,
       canonicalDomain: project.canonicalDomain,
       ownedDomains: parseJsonColumn(project.ownedDomains, []),
+      aliases: parseJsonColumn(project.aliases, []),
       country: project.country,
       language: project.language,
       tags: parseJsonColumn(project.tags, []),
@@ -1982,6 +2204,13 @@ async function applyRoutes(app, opts) {
     });
   });
 }
+function aliasArraysEqual2(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i].toLowerCase() !== b[i].toLowerCase()) return false;
+  }
+  return true;
+}
 function normalizeCompetitorList2(domains) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
@@ -2089,6 +2318,7 @@ async function historyRoutes(app) {
         citationState: s.citationState,
         answerMentioned: resolveSnapshotAnswerMentioned(s, project),
         visibilityState: resolveSnapshotVisibilityState(s, project),
+        mentionState: resolveSnapshotMentionState(s, project),
         answerText: s.answerText,
         citedDomains: parseJsonColumn(s.citedDomains, []),
         competitorOverlap: parseJsonColumn(s.competitorOverlap, []),
@@ -2142,9 +2372,11 @@ async function historyRoutes(app) {
         const run = projectRuns.find((r) => r.id === snap.runId);
         let transition = snap.citationState === CitationStates.cited ? "cited" : "not-cited";
         let visibilityTransition = snap.answerMentioned ? "visible" : "not-visible";
+        let mentionTransition = snap.answerMentioned ? "mentioned" : "not-mentioned";
         if (idx === 0) {
           transition = "new";
           visibilityTransition = "new";
+          mentionTransition = "new";
         } else {
           const prev = snaps[idx - 1];
           if (prev.citationState === CitationStates["not-cited"] && snap.citationState === CitationStates.cited) {
@@ -2154,8 +2386,10 @@ async function historyRoutes(app) {
           }
           if (!prev.answerMentioned && snap.answerMentioned) {
             visibilityTransition = "emerging";
+            mentionTransition = "emerging";
           } else if (prev.answerMentioned && !snap.answerMentioned) {
             visibilityTransition = "lost";
+            mentionTransition = "lost";
           }
         }
         return {
@@ -2164,8 +2398,12 @@ async function historyRoutes(app) {
           citationState: snap.citationState,
           transition,
           answerMentioned: snap.answerMentioned,
+          // Legacy aliases of `mentionState` / `mentionTransition`.
           visibilityState: snap.answerMentioned ? "visible" : "not-visible",
           visibilityTransition,
+          // Canonical-vocabulary fields — new consumers prefer these.
+          mentionState: snap.answerMentioned ? "mentioned" : "not-mentioned",
+          mentionTransition,
           location: snap.location
         };
       });
@@ -2221,7 +2459,8 @@ async function historyRoutes(app) {
       const resolved = {
         ...s,
         resolvedAnswerMentioned: resolveSnapshotAnswerMentioned(s, project),
-        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project)
+        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project),
+        resolvedMentionState: resolveSnapshotMentionState(s, project)
       };
       const existing = map1.get(s.queryId);
       if (!existing || !existing.resolvedAnswerMentioned && resolved.resolvedAnswerMentioned || existing.resolvedAnswerMentioned === resolved.resolvedAnswerMentioned && resolved.citationState === CitationStates.cited) {
@@ -2233,7 +2472,8 @@ async function historyRoutes(app) {
       const resolved = {
         ...s,
         resolvedAnswerMentioned: resolveSnapshotAnswerMentioned(s, project),
-        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project)
+        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project),
+        resolvedMentionState: resolveSnapshotMentionState(s, project)
       };
       const existing = map2.get(s.queryId);
       if (!existing || !existing.resolvedAnswerMentioned && resolved.resolvedAnswerMentioned || existing.resolvedAnswerMentioned === resolved.resolvedAnswerMentioned && resolved.citationState === CitationStates.cited) {
@@ -2251,8 +2491,11 @@ async function historyRoutes(app) {
         run2State: s2?.citationState ?? null,
         run1AnswerMentioned: s1?.resolvedAnswerMentioned ?? null,
         run2AnswerMentioned: s2?.resolvedAnswerMentioned ?? null,
+        // Legacy aliases — same data as run{1,2}MentionState below.
         run1VisibilityState: s1?.resolvedVisibilityState ?? null,
         run2VisibilityState: s2?.resolvedVisibilityState ?? null,
+        run1MentionState: s1?.resolvedMentionState ?? null,
+        run2MentionState: s2?.resolvedMentionState ?? null,
         changed: (s1?.citationState ?? null) !== (s2?.citationState ?? null),
         visibilityChanged: (s1?.resolvedAnswerMentioned ?? null) !== (s2?.resolvedAnswerMentioned ?? null)
       };
@@ -2621,7 +2864,7 @@ function buildCategoryCounts(counts) {
 }
 
 // ../api-routes/src/intelligence.ts
-import { eq as eq11, desc as desc4, and as and3, inArray as inArray3 } from "drizzle-orm";
+import { eq as eq11, desc as desc4, and as and4, inArray as inArray3 } from "drizzle-orm";
 function emptyHealthSnapshot(projectId) {
   return {
     id: `no-data:${projectId}`,
@@ -2710,7 +2953,7 @@ async function intelligenceRoutes(app) {
     if (request.query.runId) {
       conditions.push(eq11(insights.runId, request.query.runId));
     }
-    const rows = app.db.select().from(insights).where(conditions.length === 1 ? conditions[0] : and3(...conditions)).orderBy(desc4(insights.createdAt)).all();
+    const rows = app.db.select().from(insights).where(conditions.length === 1 ? conditions[0] : and4(...conditions)).orderBy(desc4(insights.createdAt)).all();
     const showDismissed = request.query.dismissed === "true";
     const result = rows.filter((r) => showDismissed || !r.dismissed).map(mapInsightRow);
     return reply.send(result);
@@ -2734,7 +2977,7 @@ async function intelligenceRoutes(app) {
   });
   app.get("/projects/:name/health/latest", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const projectVisRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and3(
+    const projectVisRuns = app.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(and4(
       eq11(runs.projectId, project.id),
       eq11(runs.kind, RunKinds["answer-visibility"]),
       inArray3(runs.status, [RunStatuses.completed, RunStatuses.partial])
@@ -2742,7 +2985,7 @@ async function intelligenceRoutes(app) {
     const latestGroup = groupRunsByCreatedAt(projectVisRuns)[0] ?? [];
     const latestGroupRunIds = latestGroup.map((r) => r.id);
     if (latestGroupRunIds.length > 0) {
-      const groupRows = app.db.select().from(healthSnapshots).where(and3(
+      const groupRows = app.db.select().from(healthSnapshots).where(and4(
         eq11(healthSnapshots.projectId, project.id),
         inArray3(healthSnapshots.runId, latestGroupRunIds)
       )).all();
@@ -2766,7 +3009,7 @@ async function intelligenceRoutes(app) {
 }
 
 // ../api-routes/src/report.ts
-import { and as and5, desc as desc6, eq as eq13, gte, inArray as inArray5, lt, lte, ne, or as or2, sql as sql3 } from "drizzle-orm";
+import { and as and6, desc as desc6, eq as eq13, gte, inArray as inArray5, lt, lte, ne, or as or3, sql as sql4 } from "drizzle-orm";
 
 // ../api-routes/src/report-renderer.ts
 var COLORS = {
@@ -2815,9 +3058,9 @@ function inferAdSource(params) {
 function formatLandingPageHtml(raw) {
   const value = raw ?? "";
   const queryIdx = value.indexOf("?");
-  const path15 = queryIdx === -1 ? value : value.slice(0, queryIdx);
+  const path16 = queryIdx === -1 ? value : value.slice(0, queryIdx);
   const query = queryIdx === -1 ? "" : value.slice(queryIdx + 1);
-  const pathHtml = `<span class="page-path">${escapeHtml(path15 || "/")}</span>`;
+  const pathHtml = `<span class="page-path">${escapeHtml(path16 || "/")}</span>`;
   if (!query) return pathHtml;
   let summary = "";
   try {
@@ -4171,7 +4414,7 @@ function renderLineChart(points, color, title, height = 200) {
     y: padY + usableH - p.y / max * usableH,
     raw: p
   }));
-  const path15 = xy.map((p, i) => `${i === 0 ? "M" : "L"} ${p.x.toFixed(1)} ${p.y.toFixed(1)}`).join(" ");
+  const path16 = xy.map((p, i) => `${i === 0 ? "M" : "L"} ${p.x.toFixed(1)} ${p.y.toFixed(1)}`).join(" ");
   const dots = xy.map((p) => `<circle cx="${p.x.toFixed(1)}" cy="${p.y.toFixed(1)}" r="3" fill="${color}" />`).join("");
   const xLabels = xy.map((p, i) => {
     if (points.length > 8 && i % Math.ceil(points.length / 6) !== 0 && i !== points.length - 1) return "";
@@ -4183,7 +4426,7 @@ function renderLineChart(points, color, title, height = 200) {
       <line x1="${padX}" y1="${padY + usableH}" x2="${padX + usableW}" y2="${padY + usableH}" stroke="${COLORS.border}" stroke-width="1" />
       <text x="${padX - 6}" y="${(padY + 4).toFixed(1)}" fill="${COLORS.textFaint}" font-size="9" text-anchor="end">${formatNumber(max)}</text>
       <text x="${padX - 6}" y="${(padY + usableH).toFixed(1)}" fill="${COLORS.textFaint}" font-size="9" text-anchor="end">0</text>
-      <path d="${path15}" stroke="${color}" stroke-width="2" fill="none" />
+      <path d="${path16}" stroke="${color}" stroke-width="2" fill="none" />
       ${dots}
       ${xLabels}
     </svg>
@@ -5002,7 +5245,7 @@ function renderReportHtml(report, opts = {}) {
 }
 
 // ../api-routes/src/content-data.ts
-import { and as and4, eq as eq12, desc as desc5, inArray as inArray4 } from "drizzle-orm";
+import { and as and5, eq as eq12, desc as desc5, inArray as inArray4 } from "drizzle-orm";
 var RECENT_RUNS_WINDOW = 5;
 function loadOrchestratorInput(db, project, locationFilter = void 0) {
   const projectId = project.id;
@@ -5126,7 +5369,7 @@ function listCompetitorDomains(db, projectId) {
 }
 function listRecentAnswerVisibilityRunIds(db, projectId, limit, locationFilter) {
   const rows = db.select({ id: runs.id, location: runs.location }).from(runs).where(
-    and4(
+    and5(
       eq12(runs.projectId, projectId),
       eq12(runs.kind, RunKinds["answer-visibility"]),
       // Queued/running/failed/cancelled runs may have partial or no
@@ -5157,9 +5400,9 @@ function buildGaTrafficByPage(db, projectId) {
   }).from(gaTrafficSnapshots).where(eq12(gaTrafficSnapshots.projectId, projectId)).all();
   const map = /* @__PURE__ */ new Map();
   for (const row of rows) {
-    const path15 = extractPath(row.landingPage);
-    if (!path15) continue;
-    map.set(path15, (map.get(path15) ?? 0) + (row.sessions ?? 0));
+    const path16 = extractPath(row.landingPage);
+    if (!path16) continue;
+    map.set(path16, (map.get(path16) ?? 0) + (row.sessions ?? 0));
   }
   return map;
 }
@@ -5354,8 +5597,8 @@ function normalizeDomain(domain) {
 function extractPath(url) {
   if (!url) return "";
   const match = /^https?:\/\/[^/]+(.*)$/.exec(url.trim());
-  const path15 = match ? match[1] : url.trim();
-  const stripped = path15.replace(/\/+$/, "");
+  const path16 = match ? match[1] : url.trim();
+  const stripped = path16.replace(/\/+$/, "");
   return stripped || "/";
 }
 
@@ -5384,8 +5627,8 @@ function safeNum(value) {
   }
   return 0;
 }
-function categorizeQuery(query, projectDisplayName, canonicalDomain) {
-  return categorizeQueryByIntent(query, buildBrandTokens(canonicalDomain, projectDisplayName));
+function categorizeQuery(query, projectBrandNames, canonicalDomain) {
+  return categorizeQueryByIntent(query, buildBrandTokens(canonicalDomain, projectBrandNames));
 }
 function loadSnapshotsForRun(db, runId) {
   return loadSnapshotsForRunIds(db, [runId]);
@@ -5414,7 +5657,7 @@ function loadQueryLookup(db, projectId) {
   for (const row of rows) byId.set(row.id, row.query);
   return { byId };
 }
-function buildGscSection(db, projectId, projectDisplayName, canonicalDomain, trackedQueries) {
+function buildGscSection(db, projectId, projectBrandNames, canonicalDomain, trackedQueries) {
   const allRows = db.select().from(gscSearchData).where(eq13(gscSearchData.projectId, projectId)).all();
   if (allRows.length === 0) return null;
   let maxDate = "";
@@ -5449,11 +5692,11 @@ function buildGscSection(db, projectId, projectDisplayName, canonicalDomain, tra
     impressions: agg.impressions,
     ctr: agg.impressions > 0 ? agg.clicks / agg.impressions : 0,
     avgPosition: agg.impressions > 0 ? agg.weightedPositionSum / agg.impressions : 0,
-    category: categorizeQuery(query, projectDisplayName, canonicalDomain)
+    category: categorizeQuery(query, projectBrandNames, canonicalDomain)
   })).sort((a, b) => b.clicks - a.clicks).slice(0, TOP_QUERIES_LIMIT);
   const categoryAgg = /* @__PURE__ */ new Map();
   for (const [query, agg] of queryAgg) {
-    const cat = categorizeQuery(query, projectDisplayName, canonicalDomain);
+    const cat = categorizeQuery(query, projectBrandNames, canonicalDomain);
     const bucket = categoryAgg.get(cat) ?? { clicks: 0, impressions: 0 };
     bucket.clicks += agg.clicks;
     bucket.impressions += agg.impressions;
@@ -5471,7 +5714,7 @@ function buildGscSection(db, projectId, projectDisplayName, canonicalDomain, tra
   const trackedSet = new Set(trackedQueries.map((q) => q.toLowerCase()));
   const gscQuerySet = new Set([...queryAgg.keys()].map((q) => q.toLowerCase()));
   const trackedButNoGsc = trackedQueries.filter((q) => !gscQuerySet.has(q.toLowerCase())).sort();
-  const gscButNotTracked = [...queryAgg.entries()].filter(([q]) => !trackedSet.has(q.toLowerCase())).filter(([q]) => categorizeQuery(q, projectDisplayName, canonicalDomain) !== "brand").sort((a, b) => b[1].impressions - a[1].impressions).map(([q]) => q).slice(0, TOP_QUERIES_LIMIT);
+  const gscButNotTracked = [...queryAgg.entries()].filter(([q]) => !trackedSet.has(q.toLowerCase())).filter(([q]) => categorizeQuery(q, projectBrandNames, canonicalDomain) !== "brand").sort((a, b) => b[1].impressions - a[1].impressions).map(([q]) => q).slice(0, TOP_QUERIES_LIMIT);
   return {
     periodStart,
     periodEnd,
@@ -5488,7 +5731,7 @@ function buildGscSection(db, projectId, projectDisplayName, canonicalDomain, tra
 }
 function buildGaSection(db, projectId) {
   const windowSummary = db.select().from(gaTrafficWindowSummaries).where(
-    and5(
+    and6(
       eq13(gaTrafficWindowSummaries.projectId, projectId),
       eq13(gaTrafficWindowSummaries.windowKey, "30d")
     )
@@ -5642,7 +5885,7 @@ function buildAiReferrals(db, projectId) {
   return { totalSessions: total, totalUsers, bySource, trend, topLandingPages };
 }
 function nonSubresourceReferralPathCondition() {
-  return sql3`
+  return sql4`
     LOWER(${aiReferralEventsHourly.landingPathNormalized}) NOT LIKE '/_next/static/%'
     AND LOWER(${aiReferralEventsHourly.landingPathNormalized}) NOT LIKE '/assets/%'
     AND LOWER(${aiReferralEventsHourly.landingPathNormalized}) NOT LIKE '/static/%'
@@ -5666,7 +5909,7 @@ function nonSubresourceReferralPathCondition() {
 }
 function buildServerActivity(db, projectId) {
   const sourceRows = db.select({ id: trafficSources.id }).from(trafficSources).where(
-    and5(
+    and6(
       eq13(trafficSources.projectId, projectId),
       ne(trafficSources.status, TrafficSourceStatuses.archived)
     )
@@ -5681,8 +5924,8 @@ function buildServerActivity(db, projectId) {
   const priorStart = new Date(priorStartMs).toISOString();
   const trendStart = new Date(trendStartMs).toISOString();
   const sumVerifiedCrawlers = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
-    db.select({ total: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-      and5(
+    db.select({ total: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
+      and6(
         eq13(crawlerEventsHourly.projectId, projectId),
         eq13(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
         gte(crawlerEventsHourly.tsHour, windowStartIso),
@@ -5691,8 +5934,8 @@ function buildServerActivity(db, projectId) {
     ).get()?.total ?? 0
   );
   const sumUnverifiedCrawlers = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
-    db.select({ total: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-      and5(
+    db.select({ total: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
+      and6(
         eq13(crawlerEventsHourly.projectId, projectId),
         ne(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
         gte(crawlerEventsHourly.tsHour, windowStartIso),
@@ -5701,8 +5944,8 @@ function buildServerActivity(db, projectId) {
     ).get()?.total ?? 0
   );
   const sumReferrals = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
-    db.select({ total: sql3`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-      and5(
+    db.select({ total: sql4`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
+      and6(
         eq13(aiReferralEventsHourly.projectId, projectId),
         nonSubresourceReferralPathCondition(),
         gte(aiReferralEventsHourly.tsHour, windowStartIso),
@@ -5719,9 +5962,9 @@ function buildServerActivity(db, projectId) {
   const crawlerByOperatorRows = db.select({
     operator: crawlerEventsHourly.operator,
     verificationStatus: crawlerEventsHourly.verificationStatus,
-    hits: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
+    hits: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and5(
+    and6(
       eq13(crawlerEventsHourly.projectId, projectId),
       gte(crawlerEventsHourly.tsHour, headlineStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
@@ -5729,9 +5972,9 @@ function buildServerActivity(db, projectId) {
   ).groupBy(crawlerEventsHourly.operator, crawlerEventsHourly.verificationStatus).all();
   const crawlerByOperatorPriorRows = db.select({
     operator: crawlerEventsHourly.operator,
-    hits: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
+    hits: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and5(
+    and6(
       eq13(crawlerEventsHourly.projectId, projectId),
       eq13(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte(crawlerEventsHourly.tsHour, priorStart),
@@ -5740,9 +5983,9 @@ function buildServerActivity(db, projectId) {
   ).groupBy(crawlerEventsHourly.operator).all();
   const referralByOperatorRows = db.select({
     operator: aiReferralEventsHourly.operator,
-    hits: sql3`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
+    hits: sql4`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
   }).from(aiReferralEventsHourly).where(
-    and5(
+    and6(
       eq13(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte(aiReferralEventsHourly.tsHour, headlineStart),
@@ -5780,16 +6023,16 @@ function buildServerActivity(db, projectId) {
   );
   const topPathsRows = db.select({
     path: crawlerEventsHourly.pathNormalized,
-    hits: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`,
-    operators: sql3`COUNT(DISTINCT ${crawlerEventsHourly.operator})`
+    hits: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`,
+    operators: sql4`COUNT(DISTINCT ${crawlerEventsHourly.operator})`
   }).from(crawlerEventsHourly).where(
-    and5(
+    and6(
       eq13(crawlerEventsHourly.projectId, projectId),
       eq13(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte(crawlerEventsHourly.tsHour, headlineStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
     )
-  ).groupBy(crawlerEventsHourly.pathNormalized).orderBy(desc6(sql3`SUM(${crawlerEventsHourly.hits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
+  ).groupBy(crawlerEventsHourly.pathNormalized).orderBy(desc6(sql4`SUM(${crawlerEventsHourly.hits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
   const topCrawledPaths = topPathsRows.map((r) => ({
     path: r.path,
     verifiedHits: Number(r.hits),
@@ -5797,16 +6040,16 @@ function buildServerActivity(db, projectId) {
   }));
   const referralProductsRows = db.select({
     product: aiReferralEventsHourly.product,
-    arrivals: sql3`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
-    landingPaths: sql3`COUNT(DISTINCT ${aiReferralEventsHourly.landingPathNormalized})`
+    arrivals: sql4`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
+    landingPaths: sql4`COUNT(DISTINCT ${aiReferralEventsHourly.landingPathNormalized})`
   }).from(aiReferralEventsHourly).where(
-    and5(
+    and6(
       eq13(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte(aiReferralEventsHourly.tsHour, headlineStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
-  ).groupBy(aiReferralEventsHourly.product).orderBy(desc6(sql3`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).all();
+  ).groupBy(aiReferralEventsHourly.product).orderBy(desc6(sql4`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).all();
   const referralProducts = referralProductsRows.map((r) => ({
     product: r.product,
     arrivals: Number(r.arrivals),
@@ -5814,43 +6057,43 @@ function buildServerActivity(db, projectId) {
   }));
   const topReferralRows = db.select({
     path: aiReferralEventsHourly.landingPathNormalized,
-    arrivals: sql3`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
-    products: sql3`COUNT(DISTINCT ${aiReferralEventsHourly.product})`
+    arrivals: sql4`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
+    products: sql4`COUNT(DISTINCT ${aiReferralEventsHourly.product})`
   }).from(aiReferralEventsHourly).where(
-    and5(
+    and6(
       eq13(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte(aiReferralEventsHourly.tsHour, headlineStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
-  ).groupBy(aiReferralEventsHourly.landingPathNormalized).orderBy(desc6(sql3`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
+  ).groupBy(aiReferralEventsHourly.landingPathNormalized).orderBy(desc6(sql4`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
   const topReferralLandingPaths = topReferralRows.map((r) => ({
     path: r.path,
     arrivals: Number(r.arrivals),
     distinctProducts: Number(r.products)
   }));
   const crawlerTrendRows = db.select({
-    date: sql3`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`,
-    hits: sql3`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
+    date: sql4`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`,
+    hits: sql4`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
   }).from(crawlerEventsHourly).where(
-    and5(
+    and6(
       eq13(crawlerEventsHourly.projectId, projectId),
       eq13(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
       gte(crawlerEventsHourly.tsHour, trendStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
     )
-  ).groupBy(sql3`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`).all();
+  ).groupBy(sql4`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`).all();
   const referralTrendRows = db.select({
-    date: sql3`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`,
-    hits: sql3`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
+    date: sql4`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`,
+    hits: sql4`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`
   }).from(aiReferralEventsHourly).where(
-    and5(
+    and6(
       eq13(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
       gte(aiReferralEventsHourly.tsHour, trendStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
-  ).groupBy(sql3`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`).all();
+  ).groupBy(sql4`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`).all();
   const dailyTrendMap = /* @__PURE__ */ new Map();
   for (const r of crawlerTrendRows) {
     const e = dailyTrendMap.get(r.date) ?? { verifiedCrawlerHits: 0, referralArrivals: 0 };
@@ -5919,7 +6162,7 @@ function buildIndexingHealth(db, projectId) {
   return null;
 }
 function buildCitationsTrend(db, projectId, queryLookup, locationFilter) {
-  const visibilityRuns = db.select().from(runs).where(and5(eq13(runs.projectId, projectId), eq13(runs.kind, RunKinds["answer-visibility"]))).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter);
+  const visibilityRuns = db.select().from(runs).where(and6(eq13(runs.projectId, projectId), eq13(runs.kind, RunKinds["answer-visibility"]))).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter);
   const totalQueries = queryLookup.byId.size;
   const points = [];
   for (const run of visibilityRuns) {
@@ -5965,14 +6208,14 @@ function buildCitationsTrend(db, projectId, queryLookup, locationFilter) {
 }
 function buildInsightList(db, projectId, locationFilter) {
   const recentRunIds = db.select({ id: runs.id, location: runs.location }).from(runs).where(
-    and5(
+    and6(
       eq13(runs.projectId, projectId),
       eq13(runs.kind, RunKinds["answer-visibility"]),
-      or2(eq13(runs.status, RunStatuses.completed), eq13(runs.status, RunStatuses.partial))
+      or3(eq13(runs.status, RunStatuses.completed), eq13(runs.status, RunStatuses.partial))
     )
   ).orderBy(desc6(runs.createdAt)).all().filter((r) => locationFilter === void 0 || (r.location ?? null) === locationFilter).slice(0, INSIGHT_LOOKBACK_RUNS).map((r) => r.id);
   if (recentRunIds.length === 0) return [];
-  const rows = db.select().from(insights).where(and5(eq13(insights.projectId, projectId), inArray5(insights.runId, recentRunIds))).orderBy(desc6(insights.createdAt)).all();
+  const rows = db.select().from(insights).where(and6(eq13(insights.projectId, projectId), inArray5(insights.runId, recentRunIds))).orderBy(desc6(insights.createdAt)).all();
   const severityRank = { critical: 0, high: 1, medium: 2, low: 3 };
   const flat = rows.filter((r) => !r.dismissed).map((r) => {
     const recommendation = parseJsonColumn(r.recommendation, null);
@@ -6160,7 +6403,8 @@ function buildReportActionPlan(input) {
   }
   for (const [index, opportunity] of input.contentOpportunities.slice(0, 2).entries()) {
     const verb = contentActionVerb(opportunity.action);
-    const target = opportunity.ourBestPage?.url ?? `a new page for "${opportunity.query}"`;
+    const bestPageUrl = opportunity.ourBestPage?.url;
+    const hasUsablePage = !!bestPageUrl && bestPageUrl !== "/" && bestPageUrl.trim() !== "";
     const evidence = [
       `Opportunity score ${Math.round(opportunity.score)} with ${opportunity.actionConfidence} confidence`,
       `Demand source: ${opportunity.demandSource}`
@@ -6169,17 +6413,22 @@ function buildReportActionPlan(input) {
       evidence.push(`${opportunity.winningCompetitor.domain} is the current winning cited source`);
     }
     if (opportunity.ourBestPage) {
-      evidence.push(`Best matching owned page: ${opportunity.ourBestPage.url}`);
+      if (bestPageUrl === "/") {
+        evidence.push("No topical page yet \u2014 homepage is the closest slug match");
+      } else {
+        evidence.push(`Best matching owned page: ${bestPageUrl}`);
+      }
     } else {
       evidence.push("No matching owned page was found");
     }
+    const targetIsExistingPage = opportunity.action !== "create" && hasUsablePage;
     actions.push({
       audience: "both",
       priority: 20 + index,
       horizon: opportunity.actionConfidence === "high" ? "short-term" : "medium-term",
       category: "content",
       title: `${verb} content for "${opportunity.query}"`,
-      action: opportunity.ourBestPage ? `${verb} ${target} so it directly answers the tracked query and cites the strongest supporting evidence.` : `${verb} ${target} that directly answers the query and earns citations from AI answer engines.`,
+      action: targetIsExistingPage ? `${verb} the existing page so it directly answers the tracked query and cites the strongest supporting evidence.` : `${verb} a new page for "${opportunity.query}" that directly answers the query and earns citations from AI answer engines.`,
       why: opportunity.drivers.length > 0 ? opportunity.drivers : ["Canonry ranked this as a content opportunity from search-demand and citation evidence."],
       evidence,
       successMetric: `A future check cites ${input.canonicalDomain} for "${opportunity.query}" and the matching GSC query/page improves.`,
@@ -6524,6 +6773,11 @@ function buildProjectReport(db, projectName) {
   const competitorDomains = competitorRows.map((c) => c.domain);
   const ownedDomains = parseJsonColumn(project.ownedDomains, []);
   const projectDomains = [project.canonicalDomain, ...ownedDomains];
+  const projectAliases = parseJsonColumn(project.aliases, []);
+  const projectBrandNames = effectiveBrandNames({
+    displayName: project.displayName,
+    aliases: projectAliases
+  });
   const citationScorecard = buildCitationScorecard(latestSnapshots, queryLookup);
   const competitorLandscape = buildCompetitorLandscape(
     latestSnapshots,
@@ -6534,7 +6788,7 @@ function buildProjectReport(db, projectName) {
   const mentionLandscape = buildMentionLandscape(
     latestSnapshots,
     competitorDomains,
-    project.displayName,
+    projectBrandNames,
     projectDomains,
     queryLookup
   );
@@ -6543,7 +6797,7 @@ function buildProjectReport(db, projectName) {
   const gscSection = buildGscSection(
     db,
     project.id,
-    project.displayName,
+    projectBrandNames,
     project.canonicalDomain,
     trackedQueries
   );
@@ -6899,7 +7153,7 @@ function normalizeDomain2(domain) {
 }
 
 // ../api-routes/src/composites.ts
-import { eq as eq15, and as and6, desc as desc7, sql as sql4, like, or as or3, inArray as inArray7 } from "drizzle-orm";
+import { eq as eq15, and as and7, desc as desc7, sql as sql5, like, or as or4, inArray as inArray7 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
@@ -6952,6 +7206,7 @@ async function compositeRoutes(app) {
     const queryLookup = { byId: new Map(projectQueries.map((q) => [q.id, q.query])) };
     const configuredApiProviders = parseJsonColumn(project.providers, []).filter((p) => !p.startsWith("cdp:"));
     const scores = {
+      mention: buildMentionCoverage(latestSnapshots, { configuredApiProviders }),
       visibility: buildVisibilityScore(latestSnapshots, { configuredApiProviders }),
       gapQueries: buildGapQueryScore(latestSnapshots),
       indexCoverage: buildIndexCoverageScore(app, project.id),
@@ -7013,24 +7268,24 @@ async function compositeRoutes(app) {
       rawResponse: querySnapshots.rawResponse,
       createdAt: querySnapshots.createdAt
     }).from(querySnapshots).innerJoin(queries, eq15(querySnapshots.queryId, queries.id)).where(
-      and6(
+      and7(
         eq15(queries.projectId, project.id),
-        or3(
-          sql4`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
-          sql4`${querySnapshots.citedDomains} LIKE ${pattern} ESCAPE '\\'`,
-          sql4`${querySnapshots.rawResponse} LIKE ${pattern} ESCAPE '\\'`,
+        or4(
+          sql5`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
+          sql5`${querySnapshots.citedDomains} LIKE ${pattern} ESCAPE '\\'`,
+          sql5`${querySnapshots.rawResponse} LIKE ${pattern} ESCAPE '\\'`,
           like(queries.query, pattern)
         )
       )
     ).orderBy(desc7(querySnapshots.createdAt)).limit(limit + 1).all());
     const insightMatches = app.db.select().from(insights).where(
-      and6(
+      and7(
         eq15(insights.projectId, project.id),
-        or3(
+        or4(
           like(insights.title, pattern),
           like(insights.query, pattern),
-          sql4`${insights.recommendation} LIKE ${pattern} ESCAPE '\\'`,
-          sql4`${insights.cause} LIKE ${pattern} ESCAPE '\\'`
+          sql5`${insights.recommendation} LIKE ${pattern} ESCAPE '\\'`,
+          sql5`${insights.cause} LIKE ${pattern} ESCAPE '\\'`
         )
       )
     ).orderBy(desc7(insights.createdAt)).limit(limit + 1).all();
@@ -7102,6 +7357,7 @@ function loadSnapshotsByRunIds(app, runIds) {
     provider: querySnapshots.provider,
     model: querySnapshots.model,
     citationState: querySnapshots.citationState,
+    answerMentioned: querySnapshots.answerMentioned,
     competitorOverlap: querySnapshots.competitorOverlap,
     citedDomains: querySnapshots.citedDomains
   }).from(querySnapshots).where(inArray7(querySnapshots.runId, [...runIds])).all());
@@ -7112,6 +7368,7 @@ function loadSnapshotsByRunIds(app, runIds) {
       provider: row.provider,
       model: row.model,
       citationState: row.citationState,
+      answerMentioned: row.answerMentioned,
       competitorOverlap: parseJsonColumn(row.competitorOverlap, []),
       citedDomains: parseJsonColumn(row.citedDomains, [])
     });
@@ -7354,6 +7611,7 @@ function formatProject2(row) {
     displayName: row.displayName,
     canonicalDomain: row.canonicalDomain,
     ownedDomains: parseJsonColumn(row.ownedDomains, []),
+    aliases: parseJsonColumn(row.aliases, []),
     country: row.country,
     language: row.language,
     tags: parseJsonColumn(row.tags, []),
@@ -7656,6 +7914,7 @@ var routeCatalog = [
               displayName: stringSchema,
               canonicalDomain: stringSchema,
               ownedDomains: stringArraySchema,
+              aliases: stringArraySchema,
               country: stringSchema,
               language: stringSchema,
               tags: stringArraySchema,
@@ -7705,6 +7964,18 @@ var routeCatalog = [
       404: { description: "Project not found." }
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/delete-preview",
+    summary: "Preview the cascade impact of deleting a project",
+    description: "Read-only impact summary backing `canonry project delete --dry-run`. Returns counts of rows that would cascade-delete (queries, competitors, runs, snapshots, insights) and rows that would be detached (audit_log \u2014 `project_id` set to NULL).",
+    tags: ["projects"],
+    parameters: [nameParameter],
+    responses: {
+      200: { description: "Preview of cascade impact." },
+      404: { description: "Project not found." }
+    }
+  },
   {
     method: "post",
     path: "/api/v1/projects/{name}/locations",
@@ -10710,8 +10981,8 @@ async function openApiRoutes(app, opts = {}) {
     return reply.type("application/json").send(buildOpenApiDocument(opts));
   });
 }
-function buildOperationId(method, path15) {
-  const parts = path15.split("/").filter(Boolean).map((part) => {
+function buildOperationId(method, path16) {
+  const parts = path16.split("/").filter(Boolean).map((part) => {
     if (part.startsWith("{") && part.endsWith("}")) {
       return `by-${part.slice(1, -1)}`;
     }
@@ -10875,7 +11146,7 @@ async function telemetryRoutes(app, opts) {
 
 // ../api-routes/src/schedules.ts
 import crypto11 from "crypto";
-import { and as and7, eq as eq16 } from "drizzle-orm";
+import { and as and8, eq as eq16 } from "drizzle-orm";
 function parseKindParam(raw) {
   if (raw === void 0 || raw === null || raw === "") return SchedulableRunKinds["answer-visibility"];
   const parsed = schedulableRunKindSchema.safeParse(raw);
@@ -10941,7 +11212,7 @@ async function scheduleRoutes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const enabledInt = enabled === false ? 0 : 1;
-    const existing = app.db.select().from(schedules).where(and7(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
+    const existing = app.db.select().from(schedules).where(and8(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
     if (existing) {
       app.db.update(schedules).set({
         cronExpr,
@@ -10975,13 +11246,13 @@ async function scheduleRoutes(app, opts) {
       diff: { kind, cronExpr, preset, timezone, providers, sourceId }
     });
     opts.onScheduleUpdated?.("upsert", project.id, kind);
-    const schedule = app.db.select().from(schedules).where(and7(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and8(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
     return reply.status(existing ? 200 : 201).send(formatSchedule(schedule));
   });
   app.get("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and7(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and8(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
@@ -10990,7 +11261,7 @@ async function scheduleRoutes(app, opts) {
   app.delete("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and7(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and8(eq16(schedules.projectId, project.id), eq16(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
@@ -11029,7 +11300,8 @@ function formatSchedule(row) {
 import crypto12 from "crypto";
 import { eq as eq17 } from "drizzle-orm";
 var VALID_EVENTS = ["citation.lost", "citation.gained", "run.completed", "run.failed", "insight.critical", "insight.high"];
-async function notificationRoutes(app) {
+async function notificationRoutes(app, opts = {}) {
+  const allowLoopback = opts.allowLoopbackWebhooks === true;
   app.get("/notifications/events", async (_request, reply) => {
     return reply.send(VALID_EVENTS);
   });
@@ -11037,7 +11309,7 @@ async function notificationRoutes(app) {
     const project = resolveProject(app.db, request.params.name);
     const { channel, url, events, source } = request.body ?? {};
     if (channel !== "webhook") throw validationError('Only "webhook" channel is supported');
-    const urlCheck = await resolveWebhookTarget(url ?? "");
+    const urlCheck = await resolveWebhookTarget(url ?? "", { allowLoopback });
     if (!urlCheck.ok) throw validationError(urlCheck.message);
     if (!events?.length) throw validationError('"events" must be a non-empty array');
     const invalid = events.filter((e) => !VALID_EVENTS.includes(e));
@@ -11098,7 +11370,7 @@ async function notificationRoutes(app) {
       throw notFound("Notification", request.params.id);
     }
     const config = parseJsonColumn(notification.config, { url: "", events: [] });
-    const urlCheck = await resolveWebhookTarget(config.url);
+    const urlCheck = await resolveWebhookTarget(config.url, { allowLoopback });
     if (!urlCheck.ok) throw validationError(`Stored webhook URL is invalid: ${urlCheck.message}`);
     const payload = {
       source: "canonry",
@@ -11146,7 +11418,7 @@ function formatNotification(row) {
 
 // ../api-routes/src/google.ts
 import crypto14 from "crypto";
-import { eq as eq18, and as and8, desc as desc8, sql as sql5 } from "drizzle-orm";
+import { eq as eq18, and as and9, desc as desc8, sql as sql6 } from "drizzle-orm";
 
 // ../integration-google/src/constants.ts
 var GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
@@ -12156,7 +12428,23 @@ async function getValidToken(store, domain, connectionType, clientId, clientSecr
   };
 }
 async function googleRoutes(app, opts) {
-  const stateSecret = opts.googleStateSecret ?? "insecure-default-secret";
+  if (opts.googleStateSecret === void 0) {
+    app.log.warn(
+      "googleStateSecret is not configured \u2014 Google OAuth routes will not be registered. Set GOOGLE_STATE_SECRET to enable Google integrations."
+    );
+    return;
+  }
+  if (opts.googleStateSecret === "") {
+    throw new Error(
+      "googleStateSecret is empty. Set a non-empty secret (e.g. `openssl rand -hex 32`) via the GOOGLE_STATE_SECRET environment variable."
+    );
+  }
+  if (opts.googleStateSecret === "insecure-default-secret") {
+    throw new Error(
+      "googleStateSecret is set to the legacy insecure default. Generate a real secret (e.g. `openssl rand -hex 32`) and set GOOGLE_STATE_SECRET."
+    );
+  }
+  const stateSecret = opts.googleStateSecret;
   function getAuthConfig() {
     return opts.getGoogleAuthConfig?.() ?? {};
   }
@@ -12356,14 +12644,14 @@ async function googleRoutes(app, opts) {
     const { startDate, endDate, query, page, limit, offset } = request.query;
     const cutoffDate = !startDate ? windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null : null;
     const conditions = [eq18(gscSearchData.projectId, project.id)];
-    if (startDate) conditions.push(sql5`${gscSearchData.date} >= ${startDate}`);
-    else if (cutoffDate) conditions.push(sql5`${gscSearchData.date} >= ${cutoffDate}`);
-    if (endDate) conditions.push(sql5`${gscSearchData.date} <= ${endDate}`);
-    if (query) conditions.push(sql5`${gscSearchData.query} LIKE ${"%" + query + "%"}`);
-    if (page) conditions.push(sql5`${gscSearchData.page} LIKE ${"%" + page + "%"}`);
+    if (startDate) conditions.push(sql6`${gscSearchData.date} >= ${startDate}`);
+    else if (cutoffDate) conditions.push(sql6`${gscSearchData.date} >= ${cutoffDate}`);
+    if (endDate) conditions.push(sql6`${gscSearchData.date} <= ${endDate}`);
+    if (query) conditions.push(sql6`${gscSearchData.query} LIKE ${"%" + query + "%"}`);
+    if (page) conditions.push(sql6`${gscSearchData.page} LIKE ${"%" + page + "%"}`);
     const limitVal = Math.max(parseInt(limit ?? "500", 10) || 0, 1);
     const offsetVal = Math.max(parseInt(offset ?? "0", 10) || 0, 0);
-    const rows = app.db.select().from(gscSearchData).where(and8(...conditions)).orderBy(desc8(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
+    const rows = app.db.select().from(gscSearchData).where(and9(...conditions)).orderBy(desc8(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
     return rows.map((r) => ({
       date: r.date,
       query: r.query,
@@ -12437,7 +12725,7 @@ async function googleRoutes(app, opts) {
     const { url, limit } = request.query;
     const conditions = [eq18(gscUrlInspections.projectId, project.id)];
     if (url) conditions.push(eq18(gscUrlInspections.url, url));
-    const rows = app.db.select().from(gscUrlInspections).where(and8(...conditions)).orderBy(desc8(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
+    const rows = app.db.select().from(gscUrlInspections).where(and9(...conditions)).orderBy(desc8(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
     return rows.map((r) => ({
       id: r.id,
       url: r.url,
@@ -12789,7 +13077,7 @@ async function googleRoutes(app, opts) {
 
 // ../api-routes/src/bing.ts
 import crypto15 from "crypto";
-import { eq as eq19, and as and9, desc as desc9 } from "drizzle-orm";
+import { eq as eq19, and as and10, desc as desc9 } from "drizzle-orm";
 
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
@@ -13203,7 +13491,7 @@ async function bingRoutes(app, opts) {
     requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const whereClause = url ? and9(eq19(bingUrlInspections.projectId, project.id), eq19(bingUrlInspections.url, url)) : eq19(bingUrlInspections.projectId, project.id);
+    const whereClause = url ? and10(eq19(bingUrlInspections.projectId, project.id), eq19(bingUrlInspections.url, url)) : eq19(bingUrlInspections.projectId, project.id);
     const filtered = app.db.select().from(bingUrlInspections).where(whereClause).orderBy(desc9(bingUrlInspections.inspectedAt)).limit(Math.max(1, Math.min(parseInt(limit ?? "100", 10) || 100, 1e3))).all();
     return filtered.map((r) => ({
       id: r.id,
@@ -13435,7 +13723,7 @@ async function bingRoutes(app, opts) {
 import fs from "fs";
 import path from "path";
 import os2 from "os";
-import { eq as eq20, and as and10 } from "drizzle-orm";
+import { eq as eq20, and as and11 } from "drizzle-orm";
 function getScreenshotDir() {
   return path.join(os2.homedir(), ".canonry", "screenshots");
 }
@@ -13508,7 +13796,7 @@ async function cdpRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const { runId } = request.params;
-      const run = app.db.select().from(runs).where(and10(eq20(runs.id, runId), eq20(runs.projectId, project.id))).get();
+      const run = app.db.select().from(runs).where(and11(eq20(runs.id, runId), eq20(runs.projectId, project.id))).get();
       if (!run) {
         const err = notFound("Run", runId);
         return reply.code(err.statusCode).send(err.toJSON());
@@ -13605,7 +13893,7 @@ async function cdpRoutes(app, opts) {
 
 // ../api-routes/src/ga.ts
 import crypto16 from "crypto";
-import { eq as eq21, desc as desc10, and as and11, sql as sql6 } from "drizzle-orm";
+import { eq as eq21, desc as desc10, and as and12, sql as sql7 } from "drizzle-orm";
 function gaLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GA4Routes", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -13900,10 +14188,10 @@ async function ga4Routes(app, opts) {
       app.db.transaction((tx) => {
         if (syncTraffic) {
           tx.delete(gaTrafficSnapshots).where(
-            and11(
+            and12(
               eq21(gaTrafficSnapshots.projectId, project.id),
-              sql6`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
-              sql6`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
+              sql7`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
+              sql7`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
             )
           ).run();
           for (const row of rows) {
@@ -13924,10 +14212,10 @@ async function ga4Routes(app, opts) {
         }
         if (syncAi) {
           tx.delete(gaAiReferrals).where(
-            and11(
+            and12(
               eq21(gaAiReferrals.projectId, project.id),
-              sql6`${gaAiReferrals.date} >= ${summary.periodStart}`,
-              sql6`${gaAiReferrals.date} <= ${summary.periodEnd}`
+              sql7`${gaAiReferrals.date} >= ${summary.periodStart}`,
+              sql7`${gaAiReferrals.date} <= ${summary.periodEnd}`
             )
           ).run();
           for (const row of aiReferrals) {
@@ -13950,10 +14238,10 @@ async function ga4Routes(app, opts) {
         }
         if (syncSocial) {
           tx.delete(gaSocialReferrals).where(
-            and11(
+            and12(
               eq21(gaSocialReferrals.projectId, project.id),
-              sql6`${gaSocialReferrals.date} >= ${summary.periodStart}`,
-              sql6`${gaSocialReferrals.date} <= ${summary.periodEnd}`
+              sql7`${gaSocialReferrals.date} >= ${summary.periodStart}`,
+              sql7`${gaSocialReferrals.date} <= ${summary.periodEnd}`
             )
           ).run();
           for (const row of socialReferrals) {
@@ -14043,65 +14331,65 @@ async function ga4Routes(app, opts) {
     const cutoff = windowCutoff(window);
     const cutoffDate = cutoff?.slice(0, 10) ?? null;
     const snapshotConditions = [eq21(gaTrafficSnapshots.projectId, project.id)];
-    if (cutoffDate) snapshotConditions.push(sql6`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
+    if (cutoffDate) snapshotConditions.push(sql7`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
     const aiConditions = [eq21(gaAiReferrals.projectId, project.id)];
-    if (cutoffDate) aiConditions.push(sql6`${gaAiReferrals.date} >= ${cutoffDate}`);
+    if (cutoffDate) aiConditions.push(sql7`${gaAiReferrals.date} >= ${cutoffDate}`);
     const socialConditions = [eq21(gaSocialReferrals.projectId, project.id)];
-    if (cutoffDate) socialConditions.push(sql6`${gaSocialReferrals.date} >= ${cutoffDate}`);
+    if (cutoffDate) socialConditions.push(sql7`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const windowSummaryRow = cutoffDate ? app.db.select({
       totalSessions: gaTrafficWindowSummaries.totalSessions,
       totalOrganicSessions: gaTrafficWindowSummaries.totalOrganicSessions,
       totalDirectSessions: gaTrafficWindowSummaries.totalDirectSessions,
       totalUsers: gaTrafficWindowSummaries.totalUsers
     }).from(gaTrafficWindowSummaries).where(
-      and11(
+      and12(
         eq21(gaTrafficWindowSummaries.projectId, project.id),
         eq21(gaTrafficWindowSummaries.windowKey, window)
       )
     ).get() : null;
     const snapshotTotalsRow = cutoffDate && !windowSummaryRow ? app.db.select({
-      totalSessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)`,
-      totalOrganicSessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)`,
-      totalUsers: sql6`COALESCE(SUM(${gaTrafficSnapshots.users}), 0)`
-    }).from(gaTrafficSnapshots).where(and11(...snapshotConditions)).get() : null;
+      totalSessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)`,
+      totalOrganicSessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)`,
+      totalUsers: sql7`COALESCE(SUM(${gaTrafficSnapshots.users}), 0)`
+    }).from(gaTrafficSnapshots).where(and12(...snapshotConditions)).get() : null;
     const summaryRow = cutoffDate ? windowSummaryRow ?? snapshotTotalsRow : app.db.select({
       totalSessions: gaTrafficSummaries.totalSessions,
       totalOrganicSessions: gaTrafficSummaries.totalOrganicSessions,
       totalUsers: gaTrafficSummaries.totalUsers
     }).from(gaTrafficSummaries).where(eq21(gaTrafficSummaries.projectId, project.id)).get();
     const directTotalRow = windowSummaryRow ? { totalDirectSessions: windowSummaryRow.totalDirectSessions } : app.db.select({
-      totalDirectSessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`
-    }).from(gaTrafficSnapshots).where(and11(...snapshotConditions)).get();
+      totalDirectSessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`
+    }).from(gaTrafficSnapshots).where(and12(...snapshotConditions)).get();
     const summaryMeta = app.db.select({
       periodStart: gaTrafficSummaries.periodStart,
       periodEnd: gaTrafficSummaries.periodEnd
     }).from(gaTrafficSummaries).where(eq21(gaTrafficSummaries.projectId, project.id)).get();
     const rows = app.db.select({
-      landingPage: sql6`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
-      sessions: sql6`SUM(${gaTrafficSnapshots.sessions})`,
-      organicSessions: sql6`SUM(${gaTrafficSnapshots.organicSessions})`,
-      directSessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`,
-      users: sql6`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and11(...snapshotConditions)).groupBy(sql6`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql6`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
+      landingPage: sql7`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
+      sessions: sql7`SUM(${gaTrafficSnapshots.sessions})`,
+      organicSessions: sql7`SUM(${gaTrafficSnapshots.organicSessions})`,
+      directSessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`,
+      users: sql7`SUM(${gaTrafficSnapshots.users})`
+    }).from(gaTrafficSnapshots).where(and12(...snapshotConditions)).groupBy(sql7`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql7`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
     const aiReferralRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
       sourceDimension: gaAiReferrals.sourceDimension,
-      sessions: sql6`SUM(${gaAiReferrals.sessions})`,
-      users: sql6`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and11(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.sourceDimension).all();
+      sessions: sql7`SUM(${gaAiReferrals.sessions})`,
+      users: sql7`SUM(${gaAiReferrals.users})`
+    }).from(gaAiReferrals).where(and12(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.sourceDimension).all();
     const aiReferralLandingPageRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
       sourceDimension: gaAiReferrals.sourceDimension,
-      landingPage: sql6`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
-      sessions: sql6`SUM(${gaAiReferrals.sessions})`,
-      users: sql6`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and11(...aiConditions)).groupBy(
+      landingPage: sql7`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
+      sessions: sql7`SUM(${gaAiReferrals.sessions})`,
+      users: sql7`SUM(${gaAiReferrals.users})`
+    }).from(gaAiReferrals).where(and12(...aiConditions)).groupBy(
       gaAiReferrals.source,
       gaAiReferrals.medium,
       gaAiReferrals.sourceDimension,
-      sql6`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`
+      sql7`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`
     ).all();
     const aiReferrals = pickWinningDimension(
       aiReferralRows,
@@ -14112,10 +14400,10 @@ async function ga4Routes(app, opts) {
       (r) => `${r.source}\0${r.medium}\0${r.landingPage}`
     );
     const aiDeduped = app.db.select({
-      sessions: sql6`COALESCE(SUM(max_sessions), 0)`,
-      users: sql6`COALESCE(SUM(max_users), 0)`
+      sessions: sql7`COALESCE(SUM(max_sessions), 0)`,
+      users: sql7`COALESCE(SUM(max_users), 0)`
     }).from(
-      sql6`(
+      sql7`(
           SELECT date, source, medium,
                  MAX(dimension_sessions) AS max_sessions,
                  MAX(dimension_users) AS max_users
@@ -14124,7 +14412,7 @@ async function ga4Routes(app, opts) {
                    SUM(sessions) AS dimension_sessions,
                    SUM(users) AS dimension_users
             FROM ga_ai_referrals
-            WHERE project_id = ${project.id}${cutoffDate ? sql6` AND date >= ${cutoffDate}` : sql6``}
+            WHERE project_id = ${project.id}${cutoffDate ? sql7` AND date >= ${cutoffDate}` : sql7``}
             GROUP BY date, source, medium, source_dimension
           )
           GROUP BY date, source, medium
@@ -14132,9 +14420,9 @@ async function ga4Routes(app, opts) {
     ).get();
     const aiBySessionRows = app.db.select({
       channelGroup: gaAiReferrals.channelGroup,
-      sessions: sql6`COALESCE(SUM(${gaAiReferrals.sessions}), 0)`,
-      users: sql6`COALESCE(SUM(${gaAiReferrals.users}), 0)`
-    }).from(gaAiReferrals).where(and11(...aiConditions, eq21(gaAiReferrals.sourceDimension, "session"))).groupBy(gaAiReferrals.channelGroup).all();
+      sessions: sql7`COALESCE(SUM(${gaAiReferrals.sessions}), 0)`,
+      users: sql7`COALESCE(SUM(${gaAiReferrals.users}), 0)`
+    }).from(gaAiReferrals).where(and12(...aiConditions, eq21(gaAiReferrals.sourceDimension, "session"))).groupBy(gaAiReferrals.channelGroup).all();
     const aiSessionsByChannelGroup = /* @__PURE__ */ new Map();
     let aiBySessionUsers = 0;
     for (const row of aiBySessionRows) {
@@ -14146,13 +14434,13 @@ async function ga4Routes(app, opts) {
       source: gaSocialReferrals.source,
       medium: gaSocialReferrals.medium,
       channelGroup: gaSocialReferrals.channelGroup,
-      sessions: sql6`SUM(${gaSocialReferrals.sessions})`,
-      users: sql6`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and11(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql6`SUM(${gaSocialReferrals.sessions}) DESC`).all();
+      sessions: sql7`SUM(${gaSocialReferrals.sessions})`,
+      users: sql7`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(and12(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql7`SUM(${gaSocialReferrals.sessions}) DESC`).all();
     const socialTotals = app.db.select({
-      sessions: sql6`SUM(${gaSocialReferrals.sessions})`,
-      users: sql6`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and11(...socialConditions)).get();
+      sessions: sql7`SUM(${gaSocialReferrals.sessions})`,
+      users: sql7`SUM(${gaSocialReferrals.users})`
+    }).from(gaSocialReferrals).where(and12(...socialConditions)).get();
     const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq21(gaTrafficSummaries.projectId, project.id)).orderBy(desc10(gaTrafficSummaries.syncedAt)).limit(1).get();
     const total = summaryRow?.totalSessions ?? 0;
     const totalDirectSessions = directTotalRow?.totalDirectSessions ?? 0;
@@ -14234,21 +14522,21 @@ async function ga4Routes(app, opts) {
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
     const conditions = [eq21(gaAiReferrals.projectId, project.id)];
-    if (cutoffDate) conditions.push(sql6`${gaAiReferrals.date} >= ${cutoffDate}`);
+    if (cutoffDate) conditions.push(sql7`${gaAiReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaAiReferrals.date,
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
-      landingPage: sql6`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
+      landingPage: sql7`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
       sourceDimension: gaAiReferrals.sourceDimension,
-      sessions: sql6`SUM(${gaAiReferrals.sessions})`,
-      users: sql6`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and11(...conditions)).groupBy(
+      sessions: sql7`SUM(${gaAiReferrals.sessions})`,
+      users: sql7`SUM(${gaAiReferrals.users})`
+    }).from(gaAiReferrals).where(and12(...conditions)).groupBy(
       gaAiReferrals.date,
       gaAiReferrals.source,
       gaAiReferrals.medium,
       gaAiReferrals.sourceDimension,
-      sql6`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`
+      sql7`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`
     ).orderBy(gaAiReferrals.date).all();
     return rows;
   });
@@ -14257,7 +14545,7 @@ async function ga4Routes(app, opts) {
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
     const conditions = [eq21(gaSocialReferrals.projectId, project.id)];
-    if (cutoffDate) conditions.push(sql6`${gaSocialReferrals.date} >= ${cutoffDate}`);
+    if (cutoffDate) conditions.push(sql7`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaSocialReferrals.date,
       source: gaSocialReferrals.source,
@@ -14265,7 +14553,7 @@ async function ga4Routes(app, opts) {
       channelGroup: gaSocialReferrals.channelGroup,
       sessions: gaSocialReferrals.sessions,
       users: gaSocialReferrals.users
-    }).from(gaSocialReferrals).where(and11(...conditions)).orderBy(gaSocialReferrals.date).all();
+    }).from(gaSocialReferrals).where(and12(...conditions)).orderBy(gaSocialReferrals.date).all();
     return rows;
   });
   app.get("/projects/:name/ga/social-referral-trend", async (request, _reply) => {
@@ -14278,10 +14566,10 @@ async function ga4Routes(app, opts) {
       d.setDate(d.getDate() - n);
       return fmt(d);
     };
-    const sumSocial = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and11(
+    const sumSocial = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and12(
       eq21(gaSocialReferrals.projectId, project.id),
-      sql6`${gaSocialReferrals.date} >= ${from}`,
-      sql6`${gaSocialReferrals.date} < ${to}`
+      sql7`${gaSocialReferrals.date} >= ${from}`,
+      sql7`${gaSocialReferrals.date} < ${to}`
     )).get();
     const current7d = sumSocial(daysAgo2(7), fmt(today));
     const prev7d = sumSocial(daysAgo2(14), daysAgo2(7));
@@ -14290,19 +14578,19 @@ async function ga4Routes(app, opts) {
     const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
     const sourceCurrent = app.db.select({
       source: gaSocialReferrals.source,
-      sessions: sql6`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and11(
+      sessions: sql7`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and12(
       eq21(gaSocialReferrals.projectId, project.id),
-      sql6`${gaSocialReferrals.date} >= ${daysAgo2(7)}`,
-      sql6`${gaSocialReferrals.date} < ${fmt(today)}`
+      sql7`${gaSocialReferrals.date} >= ${daysAgo2(7)}`,
+      sql7`${gaSocialReferrals.date} < ${fmt(today)}`
     )).groupBy(gaSocialReferrals.source).all();
     const sourcePrev = app.db.select({
       source: gaSocialReferrals.source,
-      sessions: sql6`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and11(
+      sessions: sql7`SUM(${gaSocialReferrals.sessions})`
+    }).from(gaSocialReferrals).where(and12(
       eq21(gaSocialReferrals.projectId, project.id),
-      sql6`${gaSocialReferrals.date} >= ${daysAgo2(14)}`,
-      sql6`${gaSocialReferrals.date} < ${daysAgo2(7)}`
+      sql7`${gaSocialReferrals.date} >= ${daysAgo2(14)}`,
+      sql7`${gaSocialReferrals.date} < ${daysAgo2(7)}`
     )).groupBy(gaSocialReferrals.source).all();
     const prevMap = new Map(sourcePrev.map((r) => [r.source, r.sessions]));
     let biggestMover = null;
@@ -14341,16 +14629,16 @@ async function ga4Routes(app, opts) {
       return fmt(d);
     };
     const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
-    const sumTotal = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and11(eq21(gaTrafficSnapshots.projectId, project.id), sql6`${gaTrafficSnapshots.date} >= ${from}`, sql6`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumOrganic = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and11(eq21(gaTrafficSnapshots.projectId, project.id), sql6`${gaTrafficSnapshots.date} >= ${from}`, sql6`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumDirect = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and11(eq21(gaTrafficSnapshots.projectId, project.id), sql6`${gaTrafficSnapshots.date} >= ${from}`, sql6`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumAi = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and11(
+    const sumTotal = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and12(eq21(gaTrafficSnapshots.projectId, project.id), sql7`${gaTrafficSnapshots.date} >= ${from}`, sql7`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and12(eq21(gaTrafficSnapshots.projectId, project.id), sql7`${gaTrafficSnapshots.date} >= ${from}`, sql7`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumDirect = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and12(eq21(gaTrafficSnapshots.projectId, project.id), sql7`${gaTrafficSnapshots.date} >= ${from}`, sql7`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumAi = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and12(
       eq21(gaAiReferrals.projectId, project.id),
-      sql6`${gaAiReferrals.date} >= ${from}`,
-      sql6`${gaAiReferrals.date} < ${to}`,
+      sql7`${gaAiReferrals.date} >= ${from}`,
+      sql7`${gaAiReferrals.date} < ${to}`,
       eq21(gaAiReferrals.sourceDimension, "session")
     )).get();
-    const sumSocial = (from, to) => app.db.select({ sessions: sql6`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and11(eq21(gaSocialReferrals.projectId, project.id), sql6`${gaSocialReferrals.date} >= ${from}`, sql6`${gaSocialReferrals.date} < ${to}`)).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql7`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and12(eq21(gaSocialReferrals.projectId, project.id), sql7`${gaSocialReferrals.date} >= ${from}`, sql7`${gaSocialReferrals.date} < ${to}`)).get();
     const todayStr = fmt(today);
     const buildTrend = (sum) => {
       const c7 = sum(daysAgo2(7), todayStr)?.sessions ?? 0;
@@ -14359,16 +14647,16 @@ async function ga4Routes(app, opts) {
       const p30 = sum(daysAgo2(60), daysAgo2(30))?.sessions ?? 0;
       return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
     };
-    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql6`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and11(
+    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql7`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and12(
       eq21(gaAiReferrals.projectId, project.id),
-      sql6`${gaAiReferrals.date} >= ${daysAgo2(7)}`,
-      sql6`${gaAiReferrals.date} < ${todayStr}`,
+      sql7`${gaAiReferrals.date} >= ${daysAgo2(7)}`,
+      sql7`${gaAiReferrals.date} < ${todayStr}`,
       eq21(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
-    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql6`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and11(
+    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql7`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and12(
       eq21(gaAiReferrals.projectId, project.id),
-      sql6`${gaAiReferrals.date} >= ${daysAgo2(14)}`,
-      sql6`${gaAiReferrals.date} < ${daysAgo2(7)}`,
+      sql7`${gaAiReferrals.date} >= ${daysAgo2(14)}`,
+      sql7`${gaAiReferrals.date} < ${daysAgo2(7)}`,
       eq21(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
     const findBiggestMover = (current, prev) => {
@@ -14385,8 +14673,8 @@ async function ga4Routes(app, opts) {
       }
       return mover;
     };
-    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql6`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and11(eq21(gaSocialReferrals.projectId, project.id), sql6`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql6`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
-    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql6`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and11(eq21(gaSocialReferrals.projectId, project.id), sql6`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql6`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql7`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and12(eq21(gaSocialReferrals.projectId, project.id), sql7`${gaSocialReferrals.date} >= ${daysAgo2(7)}`, sql7`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql7`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and12(eq21(gaSocialReferrals.projectId, project.id), sql7`${gaSocialReferrals.date} >= ${daysAgo2(14)}`, sql7`${gaSocialReferrals.date} < ${daysAgo2(7)}`)).groupBy(gaSocialReferrals.source).all();
     return {
       total: buildTrend(sumTotal),
       organic: buildTrend(sumOrganic),
@@ -14402,13 +14690,13 @@ async function ga4Routes(app, opts) {
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
     const conditions = [eq21(gaTrafficSnapshots.projectId, project.id)];
-    if (cutoffDate) conditions.push(sql6`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
+    if (cutoffDate) conditions.push(sql7`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaTrafficSnapshots.date,
-      sessions: sql6`SUM(${gaTrafficSnapshots.sessions})`,
-      organicSessions: sql6`SUM(${gaTrafficSnapshots.organicSessions})`,
-      users: sql6`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and11(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
+      sessions: sql7`SUM(${gaTrafficSnapshots.sessions})`,
+      organicSessions: sql7`SUM(${gaTrafficSnapshots.organicSessions})`,
+      users: sql7`SUM(${gaTrafficSnapshots.users})`
+    }).from(gaTrafficSnapshots).where(and12(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
     return rows.map((r) => ({
       date: r.date,
       sessions: r.sessions ?? 0,
@@ -14420,11 +14708,11 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const trafficPages = app.db.select({
-      landingPage: sql6`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
-      sessions: sql6`SUM(${gaTrafficSnapshots.sessions})`,
-      organicSessions: sql6`SUM(${gaTrafficSnapshots.organicSessions})`,
-      users: sql6`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(eq21(gaTrafficSnapshots.projectId, project.id)).groupBy(sql6`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql6`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
+      landingPage: sql7`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
+      sessions: sql7`SUM(${gaTrafficSnapshots.sessions})`,
+      organicSessions: sql7`SUM(${gaTrafficSnapshots.organicSessions})`,
+      users: sql7`SUM(${gaTrafficSnapshots.users})`
+    }).from(gaTrafficSnapshots).where(eq21(gaTrafficSnapshots.projectId, project.id)).groupBy(sql7`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql7`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
     return {
       pages: trafficPages.map((r) => ({
         landingPage: r.landingPage,
@@ -14640,10 +14928,10 @@ function buildAuthErrorMessage(res, responseText) {
   }
   return "WordPress credentials are invalid or lack permission for this action";
 }
-async function fetchJson(connection, siteUrl, path15, init) {
+async function fetchJson(connection, siteUrl, path16, init) {
   if (siteUrl.startsWith("http:")) {
   }
-  const res = await fetch(`${normalizeSiteUrl(siteUrl)}${path15}`, {
+  const res = await fetch(`${normalizeSiteUrl(siteUrl)}${path16}`, {
     ...init,
     headers: {
       "Authorization": `Basic ${encodeBasicAuth(connection.username, connection.appPassword)}`,
@@ -16061,7 +16349,7 @@ async function wordpressRoutes(app, opts) {
 
 // ../api-routes/src/backlinks.ts
 import crypto18 from "crypto";
-import { and as and13, asc as asc2, desc as desc11, eq as eq22, sql as sql7 } from "drizzle-orm";
+import { and as and14, asc as asc2, desc as desc11, eq as eq22, sql as sql8 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
 import os3 from "os";
@@ -16236,7 +16524,7 @@ function parseContentLength2(value) {
 
 // ../integration-commoncrawl/src/plugin-resolver.ts
 import fs3 from "fs";
-import { createRequire as createRequire2 } from "module";
+import { createRequire as createRequire3 } from "module";
 import path4 from "path";
 function pluginDirFor(pkgJson) {
   return path4.dirname(pkgJson);
@@ -16255,7 +16543,7 @@ function loadDuckdb(opts = {}) {
     );
   }
   try {
-    const pluginRequire = createRequire2(duckdbPkg);
+    const pluginRequire = createRequire3(duckdbPkg);
     return pluginRequire("@duckdb/node-api");
   } catch {
     throw missingDependency(
@@ -16345,7 +16633,7 @@ async function queryBacklinks(opts) {
   const reversed = opts.targets.map(reverseDomain);
   const targetList = reversed.map(quote).join(", ");
   const limitClause = opts.limitPerTarget ? `QUALIFY row_number() OVER (PARTITION BY t.target_rev_domain ORDER BY v.num_hosts DESC) <= ${Math.floor(opts.limitPerTarget)}` : "";
-  const sql14 = `
+  const sql15 = `
     WITH vertices AS (
       SELECT * FROM read_csv(
         ${quote(opts.vertexPath)},
@@ -16381,7 +16669,7 @@ async function queryBacklinks(opts) {
   const conn = await instance.connect();
   let rows;
   try {
-    const reader = await conn.runAndReadAll(sql14);
+    const reader = await conn.runAndReadAll(sql15);
     rows = reader.getRowObjects();
   } finally {
     conn.disconnectSync?.();
@@ -16458,7 +16746,7 @@ function pruneCachedRelease(release, opts = {}) {
 }
 
 // ../api-routes/src/backlinks-filter.ts
-import { and as and12, ne as ne2, notLike } from "drizzle-orm";
+import { and as and13, ne as ne2, notLike } from "drizzle-orm";
 var BACKLINK_FILTER_PATTERNS = [
   "*.google.com",
   "*.googleusercontent.com",
@@ -16481,7 +16769,7 @@ function backlinkCrawlerExclusionClause() {
       conditions.push(ne2(backlinkDomains.linkingDomain, pattern));
     }
   }
-  const combined = and12(...conditions);
+  const combined = and13(...conditions);
   if (!combined) throw new Error("BACKLINK_FILTER_PATTERNS is unexpectedly empty");
   return combined;
 }
@@ -16542,7 +16830,7 @@ function mapRunRow(row) {
   };
 }
 function latestSummaryForProject(db, projectId, release) {
-  const condition = release ? and13(eq22(backlinkSummaries.projectId, projectId), eq22(backlinkSummaries.release, release)) : eq22(backlinkSummaries.projectId, projectId);
+  const condition = release ? and14(eq22(backlinkSummaries.projectId, projectId), eq22(backlinkSummaries.release, release)) : eq22(backlinkSummaries.projectId, projectId);
   return db.select().from(backlinkSummaries).where(condition).orderBy(desc11(backlinkSummaries.queriedAt)).limit(1).get();
 }
 function parseExcludeCrawlers(value) {
@@ -16551,18 +16839,18 @@ function parseExcludeCrawlers(value) {
   return lower === "1" || lower === "true" || lower === "yes";
 }
 function computeFilteredSummary(db, base) {
-  const baseDomainCondition = and13(
+  const baseDomainCondition = and14(
     eq22(backlinkDomains.projectId, base.projectId),
     eq22(backlinkDomains.release, base.release)
   );
-  const filteredCondition = and13(baseDomainCondition, backlinkCrawlerExclusionClause());
+  const filteredCondition = and14(baseDomainCondition, backlinkCrawlerExclusionClause());
   const unfilteredAgg = db.select({
-    count: sql7`count(*)`,
-    total: sql7`coalesce(sum(${backlinkDomains.numHosts}), 0)`
+    count: sql8`count(*)`,
+    total: sql8`coalesce(sum(${backlinkDomains.numHosts}), 0)`
   }).from(backlinkDomains).where(baseDomainCondition).get();
   const filteredAgg = db.select({
-    count: sql7`count(*)`,
-    total: sql7`coalesce(sum(${backlinkDomains.numHosts}), 0)`
+    count: sql8`count(*)`,
+    total: sql8`coalesce(sum(${backlinkDomains.numHosts}), 0)`
   }).from(backlinkDomains).where(filteredCondition).get();
   const top10Rows = db.select({ numHosts: backlinkDomains.numHosts }).from(backlinkDomains).where(filteredCondition).orderBy(desc11(backlinkDomains.numHosts)).limit(10).all();
   const totalLinkingDomains = Number(filteredAgg?.count ?? 0);
@@ -16731,12 +17019,12 @@ async function backlinksRoutes(app, opts) {
     const limit = Math.min(Math.max(parseInt(request.query.limit ?? "50", 10) || 50, 1), 500);
     const offset = Math.max(parseInt(request.query.offset ?? "0", 10) || 0, 0);
     const excludeCrawlers = parseExcludeCrawlers(request.query.excludeCrawlers);
-    const baseDomainCondition = and13(
+    const baseDomainCondition = and14(
       eq22(backlinkDomains.projectId, project.id),
       eq22(backlinkDomains.release, targetRelease)
     );
-    const domainCondition = excludeCrawlers ? and13(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
-    const totalRow = app.db.select({ count: sql7`count(*)` }).from(backlinkDomains).where(domainCondition).get();
+    const domainCondition = excludeCrawlers ? and14(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
+    const totalRow = app.db.select({ count: sql8`count(*)` }).from(backlinkDomains).where(domainCondition).get();
     const rows = app.db.select({
       linkingDomain: backlinkDomains.linkingDomain,
       numHosts: backlinkDomains.numHosts
@@ -16771,7 +17059,7 @@ async function backlinksRoutes(app, opts) {
 
 // ../api-routes/src/traffic.ts
 import crypto20 from "crypto";
-import { and as and14, desc as desc12, eq as eq23, gte as gte2, lte as lte2, sql as sql8 } from "drizzle-orm";
+import { and as and15, desc as desc12, eq as eq23, gte as gte2, lte as lte2, sql as sql9 } from "drizzle-orm";
 
 // ../integration-cloud-run/src/auth.ts
 import crypto19 from "crypto";
@@ -17270,8 +17558,8 @@ var ASSET_PATH_PREFIXES = [
   "/img/",
   "/static/"
 ];
-function normalizeTrafficPathPattern(path15) {
-  const cleanPath = path15.trim() || "/";
+function normalizeTrafficPathPattern(path16) {
+  const cleanPath = path16.trim() || "/";
   const pathOnly = cleanPath.split("?")[0] || "/";
   const segments = pathOnly.split("/").map((segment) => {
     if (!segment) return segment;
@@ -17320,8 +17608,8 @@ function resolveAiReferralLandingPath(event, evidenceType) {
   }
   return normalizeTrafficPathPattern(event.path);
 }
-function isLikelySubresourcePath(path15) {
-  const cleanPath = path15.split("?")[0] || "/";
+function isLikelySubresourcePath(path16) {
+  const cleanPath = path16.split("?")[0] || "/";
   return ASSET_PATH_PREFIXES.some((prefix) => cleanPath.startsWith(prefix)) || ASSET_EXTENSION_PATTERN.test(cleanPath);
 }
 function actorKey(event) {
@@ -17507,11 +17795,11 @@ function buildEventId2(event) {
 function normalizeWordpressTrafficEvent(event) {
   if (!event.observed_at) return null;
   if (typeof event.id !== "number" || !Number.isFinite(event.id)) return null;
-  const path15 = event.path?.trim();
-  if (!path15) return null;
+  const path16 = event.path?.trim();
+  if (!path16) return null;
   const queryString = trimOrNull(event.query_string);
   const host = trimOrNull(event.host);
-  const requestUrl = host ? `https://${host}${path15}${queryString ? `?${queryString}` : ""}` : `${path15}${queryString ? `?${queryString}` : ""}`;
+  const requestUrl = host ? `https://${host}${path16}${queryString ? `?${queryString}` : ""}` : `${path16}${queryString ? `?${queryString}` : ""}`;
   return {
     sourceType: TrafficSourceTypes.wordpress,
     evidenceKind: TrafficEvidenceKinds["raw-request"],
@@ -17521,7 +17809,7 @@ function normalizeWordpressTrafficEvent(event) {
     method: trimOrNull(event.method),
     requestUrl,
     host,
-    path: path15,
+    path: path16,
     queryString,
     status: typeof event.status === "number" && Number.isFinite(event.status) ? event.status : null,
     userAgent: trimOrNull(event.user_agent),
@@ -17685,15 +17973,15 @@ function stringLabels(input) {
   );
 }
 function normalizeVercelLogRow(row) {
-  const path15 = row.requestPath;
-  if (!path15) return null;
+  const path16 = row.requestPath;
+  if (!path16) return null;
   const observedAt = row.timestamp;
   if (!observedAt) return null;
   const requestId = row.requestId;
   if (!requestId) return null;
   const host = emptyToNull(row.domain);
   const queryString = serializeSearchParams(row.requestSearchParams);
-  const requestUrl = host ? `https://${host}${path15}${queryString ? `?${queryString}` : ""}` : null;
+  const requestUrl = host ? `https://${host}${path16}${queryString ? `?${queryString}` : ""}` : null;
   return {
     sourceType: TrafficSourceTypes.vercel,
     evidenceKind: TrafficEvidenceKinds["raw-request"],
@@ -17703,7 +17991,7 @@ function normalizeVercelLogRow(row) {
     method: row.requestMethod ?? null,
     requestUrl,
     host,
-    path: path15,
+    path: path16,
     queryString,
     status: resolveStatus(row),
     userAgent: emptyToNull(row.clientUserAgent),
@@ -17839,7 +18127,7 @@ var DEFAULT_WP_MAX_PAGES = 20;
 var DEFAULT_VERCEL_MAX_PAGES = 50;
 var MAX_TRACKED_EVENT_IDS = 1e3;
 var DEFAULT_BACKFILL_DAYS = 30;
-var MAX_BACKFILL_DAYS = 30;
+var MAX_BACKFILL_DAYS = 90;
 var BACKFILL_MAX_PAGES = 1e3;
 var BACKFILL_SAMPLE_LIMIT = 500;
 function parseSourceConfig(row) {
@@ -17919,21 +18207,21 @@ async function runBackfillTask(options) {
   try {
     app.db.transaction((tx) => {
       tx.delete(crawlerEventsHourly).where(
-        and14(
+        and15(
           eq23(crawlerEventsHourly.sourceId, sourceRow.id),
           gte2(crawlerEventsHourly.tsHour, windowStartIso),
           lte2(crawlerEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(aiReferralEventsHourly).where(
-        and14(
+        and15(
           eq23(aiReferralEventsHourly.sourceId, sourceRow.id),
           gte2(aiReferralEventsHourly.tsHour, windowStartIso),
           lte2(aiReferralEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(rawEventSamples).where(
-        and14(
+        and15(
           eq23(rawEventSamples.sourceId, sourceRow.id),
           gte2(rawEventSamples.ts, windowStartIso),
           lte2(rawEventSamples.ts, windowEndIso)
@@ -18356,7 +18644,8 @@ async function trafficRoutes(app, opts) {
           endTime: windowEnd.toISOString(),
           pageSize,
           maxPages,
-          firstSync: isFirstSync
+          firstSync: isFirstSync,
+          requestUrlSubstrings: [project.canonicalDomain]
         });
         allEvents = page.events;
       } catch (e) {
@@ -18508,7 +18797,7 @@ async function trafficRoutes(app, opts) {
             crawlerEventsHourly.status
           ],
           set: {
-            hits: sql8`${crawlerEventsHourly.hits} + ${bucket.hits}`,
+            hits: sql9`${crawlerEventsHourly.hits} + ${bucket.hits}`,
             sampledUserAgent: bucket.sampledUserAgent,
             updatedAt: finishedAt
           }
@@ -18543,7 +18832,7 @@ async function trafficRoutes(app, opts) {
             aiReferralEventsHourly.status
           ],
           set: {
-            sessionsOrHits: sql8`${aiReferralEventsHourly.sessionsOrHits} + ${bucket.hits}`,
+            sessionsOrHits: sql9`${aiReferralEventsHourly.sessionsOrHits} + ${bucket.hits}`,
             updatedAt: finishedAt
           }
         }).run();
@@ -18682,7 +18971,8 @@ async function trafficRoutes(app, opts) {
           // ring-buffer reseed at the end takes the most-recent IDs from the
           // dedupedEvents anyway.
           firstSync: false,
-          orderBy: "timestamp asc"
+          orderBy: "timestamp asc",
+          requestUrlSubstrings: [project.canonicalDomain]
         });
         return page.events;
       };
@@ -18794,26 +19084,26 @@ async function trafficRoutes(app, opts) {
     return response;
   });
   function buildSourceDetail(projectId, row, since) {
-    const crawlerTotals = app.db.select({ total: sql8`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-      and14(
+    const crawlerTotals = app.db.select({ total: sql9`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
+      and15(
         eq23(crawlerEventsHourly.sourceId, row.id),
         gte2(crawlerEventsHourly.tsHour, since)
       )
     ).get();
-    const aiTotals = app.db.select({ total: sql8`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-      and14(
+    const aiTotals = app.db.select({ total: sql9`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
+      and15(
         eq23(aiReferralEventsHourly.sourceId, row.id),
         gte2(aiReferralEventsHourly.tsHour, since)
       )
     ).get();
-    const sampleTotals = app.db.select({ total: sql8`COUNT(*)` }).from(rawEventSamples).where(
-      and14(
+    const sampleTotals = app.db.select({ total: sql9`COUNT(*)` }).from(rawEventSamples).where(
+      and15(
         eq23(rawEventSamples.sourceId, row.id),
         gte2(rawEventSamples.ts, since)
       )
     ).get();
     const latestRun = app.db.select().from(runs).where(
-      and14(
+      and15(
         eq23(runs.projectId, projectId),
         eq23(runs.kind, RunKinds["traffic-sync"]),
         eq23(runs.sourceId, row.id)
@@ -18907,8 +19197,8 @@ async function trafficRoutes(app, opts) {
         lte2(crawlerEventsHourly.tsHour, untilIso)
       ];
       if (sourceIdParam) crawlerFilters.push(eq23(crawlerEventsHourly.sourceId, sourceIdParam));
-      const crawlerWhere = and14(...crawlerFilters);
-      const total = app.db.select({ total: sql8`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(crawlerWhere).get();
+      const crawlerWhere = and15(...crawlerFilters);
+      const total = app.db.select({ total: sql9`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(crawlerWhere).get();
       crawlerTotal = Number(total?.total ?? 0);
       const rows = app.db.select().from(crawlerEventsHourly).where(crawlerWhere).orderBy(desc12(crawlerEventsHourly.tsHour)).limit(limit).all();
       for (const r of rows) {
@@ -18932,8 +19222,8 @@ async function trafficRoutes(app, opts) {
         lte2(aiReferralEventsHourly.tsHour, untilIso)
       ];
       if (sourceIdParam) aiFilters.push(eq23(aiReferralEventsHourly.sourceId, sourceIdParam));
-      const aiWhere = and14(...aiFilters);
-      const total = app.db.select({ total: sql8`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(aiWhere).get();
+      const aiWhere = and15(...aiFilters);
+      const total = app.db.select({ total: sql9`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(aiWhere).get();
       aiReferralTotal = Number(total?.total ?? 0);
       const rows = app.db.select().from(aiReferralEventsHourly).where(aiWhere).orderBy(desc12(aiReferralEventsHourly.tsHour)).limit(limit).all();
       for (const r of rows) {
@@ -18966,6 +19256,75 @@ async function trafficRoutes(app, opts) {
   });
 }
 
+// ../api-routes/src/doctor/checks/agent.ts
+import fs6 from "fs";
+import path7 from "path";
+var REQUIRED_SKILLS = ["canonry", "aero"];
+var skillsInstalledCheck = {
+  id: "agent.skills.installed",
+  category: CheckCategories.agent,
+  scope: CheckScopes.global,
+  title: "Agent skills installed (~/.claude/skills/)",
+  run: () => {
+    const home = process.env.HOME;
+    if (!home) {
+      return {
+        status: CheckStatuses.skipped,
+        code: "agent.skills.no-home",
+        summary: "Cannot determine $HOME \u2014 skip skills filesystem check.",
+        remediation: null
+      };
+    }
+    const skillsBase = path7.join(home, ".claude", "skills");
+    const installed = [];
+    const missing = [];
+    for (const name of REQUIRED_SKILLS) {
+      const dir = path7.join(skillsBase, name);
+      if (isInstalled(dir)) installed.push(name);
+      else missing.push(name);
+    }
+    const details = {
+      checkedPath: skillsBase,
+      installed,
+      missing
+    };
+    if (missing.length === 0) {
+      return {
+        status: CheckStatuses.ok,
+        code: "agent.skills.installed",
+        summary: `Both canonry and aero skills are installed in ${skillsBase}.`,
+        remediation: null,
+        details
+      };
+    }
+    if (installed.length === 0) {
+      return {
+        status: CheckStatuses.warn,
+        code: "agent.skills.not-installed",
+        summary: "Agent skills are not installed for Claude Code on this machine. Claude sessions on this host will not auto-load canonry/aero reference docs.",
+        remediation: "Run `canonry skills install --dir ~` (or `canonry skills install --user`) to install both skills to ~/.claude/skills/ and ~/.codex/skills/.",
+        details
+      };
+    }
+    return {
+      status: CheckStatuses.warn,
+      code: "agent.skills.partial",
+      summary: `Only ${installed.length} of ${REQUIRED_SKILLS.length} agent skills are installed (${installed.join(", ")}); ${missing.join(", ")} missing.`,
+      remediation: `Run \`canonry skills install ${missing.join(" ")} --dir ~\` to fill the gap.`,
+      details
+    };
+  }
+};
+function isInstalled(dir) {
+  try {
+    if (!fs6.existsSync(dir)) return false;
+    return fs6.existsSync(path7.join(dir, "SKILL.md"));
+  } catch {
+    return false;
+  }
+}
+var AGENT_CHECKS = [skillsInstalledCheck];
+
 // ../api-routes/src/doctor/checks/bing-auth.ts
 var BING_AUTH_CHECKS = [
   {
@@ -19587,7 +19946,7 @@ var providersConfiguredCheck = {
 var PROVIDERS_CHECKS = [providersConfiguredCheck];
 
 // ../api-routes/src/doctor/checks/traffic-source.ts
-import { and as and15, eq as eq24, gte as gte3, ne as ne3, sql as sql9 } from "drizzle-orm";
+import { and as and16, eq as eq24, gte as gte3, ne as ne3, sql as sql10 } from "drizzle-orm";
 var RECENT_DATA_WARN_DAYS = 7;
 var RECENT_DATA_FAIL_DAYS = 30;
 function skippedNoProject2() {
@@ -19601,7 +19960,7 @@ function skippedNoProject2() {
 function loadProbes(ctx) {
   if (!ctx.project) return [];
   const rows = ctx.db.select().from(trafficSources).where(
-    and15(
+    and16(
       eq24(trafficSources.projectId, ctx.project.id),
       ne3(trafficSources.status, TrafficSourceStatuses.archived)
     )
@@ -19681,16 +20040,16 @@ var recentDataCheck = {
     const warnCutoff = new Date(now.getTime() - RECENT_DATA_WARN_DAYS * 24 * 60 * 6e4).toISOString();
     const failCutoff = new Date(now.getTime() - RECENT_DATA_FAIL_DAYS * 24 * 60 * 6e4).toISOString();
     const recentCrawlers = Number(
-      ctx.db.select({ total: sql9`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and15(
+      ctx.db.select({ total: sql10`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
+        and16(
           eq24(crawlerEventsHourly.projectId, ctx.project.id),
           gte3(crawlerEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
     );
     const recentReferrals = Number(
-      ctx.db.select({ total: sql9`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and15(
+      ctx.db.select({ total: sql10`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
+        and16(
           eq24(aiReferralEventsHourly.projectId, ctx.project.id),
           gte3(aiReferralEventsHourly.tsHour, warnCutoff)
         )
@@ -19705,16 +20064,16 @@ var recentDataCheck = {
       };
     }
     const olderCrawlers = Number(
-      ctx.db.select({ total: sql9`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and15(
+      ctx.db.select({ total: sql10`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
+        and16(
           eq24(crawlerEventsHourly.projectId, ctx.project.id),
           gte3(crawlerEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
     );
     const olderReferrals = Number(
-      ctx.db.select({ total: sql9`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and15(
+      ctx.db.select({ total: sql10`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
+        and16(
           eq24(aiReferralEventsHourly.projectId, ctx.project.id),
           gte3(aiReferralEventsHourly.tsHour, failCutoff)
         )
@@ -19895,7 +20254,8 @@ var ALL_CHECKS = [
   ...BING_AUTH_CHECKS,
   ...GA_AUTH_CHECKS,
   ...PROVIDERS_CHECKS,
-  ...TRAFFIC_SOURCE_CHECKS
+  ...TRAFFIC_SOURCE_CHECKS,
+  ...AGENT_CHECKS
 ];
 var CHECK_BY_ID = Object.fromEntries(
   ALL_CHECKS.map((check) => [check.id, check])
@@ -20012,7 +20372,7 @@ async function doctorRoutes(app, opts) {
 
 // ../api-routes/src/discovery/routes.ts
 import crypto21 from "crypto";
-import { and as and16, desc as desc13, eq as eq25, gte as gte4, inArray as inArray8 } from "drizzle-orm";
+import { and as and17, desc as desc13, eq as eq25, gte as gte4, inArray as inArray8 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
   app.post("/projects/:name/discover/run", async (request, reply) => {
@@ -20044,7 +20404,7 @@ async function discoveryRoutes(app, opts) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const ageFloorIso = new Date(Date.now() - MAX_INFLIGHT_DISCOVERY_AGE_MS).toISOString();
     const decision = app.db.transaction((tx) => {
-      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and16(
+      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and17(
         eq25(discoverySessions.projectId, project.id),
         eq25(discoverySessions.icpDescription, icpDescription),
         inArray8(discoverySessions.status, [
@@ -20508,6 +20868,7 @@ async function apiRoutes(app, opts) {
     await api.register(projectRoutes, {
       onProjectDeleted: opts.onProjectDeleted,
       onProjectUpserted: opts.onProjectUpserted,
+      onAliasesChanged: opts.onAliasesChanged,
       validProviderNames: opts.providerAdapters?.map((a) => a.name)
     });
     await api.register(queryRoutes, {
@@ -20522,7 +20883,9 @@ async function apiRoutes(app, opts) {
     await api.register(applyRoutes, {
       onScheduleUpdated: opts.onScheduleUpdated,
       onProjectUpserted: opts.onProjectUpserted,
+      onAliasesChanged: opts.onAliasesChanged,
       validProviderNames: opts.providerAdapters?.map((a) => a.name),
+      allowLoopbackWebhooks: opts.allowLoopbackWebhooks,
       onGoogleConnectionPropertyUpdated: (domain, connectionType, propertyId) => {
         opts.googleConnectionStore?.updateConnection(domain, connectionType, {
           propertyId,
@@ -20553,7 +20916,9 @@ async function apiRoutes(app, opts) {
       onScheduleUpdated: opts.onScheduleUpdated,
       validProviderNames: opts.providerAdapters?.map((a) => a.name)
     });
-    await api.register(notificationRoutes);
+    await api.register(notificationRoutes, {
+      allowLoopbackWebhooks: opts.allowLoopbackWebhooks
+    });
     await api.register(telemetryRoutes, {
       getTelemetryStatus: opts.getTelemetryStatus,
       setTelemetryEnabled: opts.setTelemetryEnabled
@@ -20808,7 +21173,7 @@ function isVertexConfig(config) {
 function resolveModel(config) {
   return config.model || DEFAULT_MODEL;
 }
-function createClient(config) {
+function createClient2(config) {
   if (isVertexConfig(config)) {
     return new GoogleGenAI({
       vertexai: true,
@@ -20848,7 +21213,7 @@ async function healthcheck(config) {
   if (!validation.ok) return validation;
   try {
     const model = resolveModel(config);
-    const client = createClient(config);
+    const client = createClient2(config);
     const result = await withRetry(
       () => client.models.generateContent({
         model,
@@ -20875,7 +21240,7 @@ async function healthcheck(config) {
 async function executeTrackedQuery(input) {
   const model = resolveModel(input.config);
   const prompt = buildPrompt(input.query, input.location);
-  const client = createClient(input.config);
+  const client = createClient2(input.config);
   try {
     const result = await withRetry(
       () => client.models.generateContent({
@@ -21040,7 +21405,7 @@ function extractDomainFromUri(uri) {
 }
 async function generateText(prompt, config) {
   const model = resolveModel(config);
-  const client = createClient(config);
+  const client = createClient2(config);
   const result = await withRetry(
     () => client.models.generateContent({
       model,
@@ -22195,7 +22560,7 @@ var localAdapter = {
 };
 
 // ../provider-cdp/src/adapter.ts
-import path8 from "path";
+import path9 from "path";
 import os4 from "os";
 
 // ../provider-cdp/src/connection.ts
@@ -22560,12 +22925,12 @@ function sleep2(ms) {
 }
 
 // ../provider-cdp/src/screenshot.ts
-import fs6 from "fs";
-import path7 from "path";
+import fs7 from "fs";
+import path8 from "path";
 async function captureElementScreenshot(client, selector, outputPath) {
-  const dir = path7.dirname(outputPath);
-  if (!fs6.existsSync(dir)) {
-    fs6.mkdirSync(dir, { recursive: true });
+  const dir = path8.dirname(outputPath);
+  if (!fs7.existsSync(dir)) {
+    fs7.mkdirSync(dir, { recursive: true });
   }
   let clip;
   try {
@@ -22599,7 +22964,7 @@ async function captureElementScreenshot(client, selector, outputPath) {
   }
   const { data } = await client.Page.captureScreenshot(screenshotParams);
   const buffer = Buffer.from(data, "base64");
-  fs6.writeFileSync(outputPath, buffer);
+  fs7.writeFileSync(outputPath, buffer);
   return outputPath;
 }
 
@@ -22660,7 +23025,7 @@ function getConnection(config) {
   return conn;
 }
 function getScreenshotDir2() {
-  return path8.join(os4.homedir(), ".canonry", "screenshots");
+  return path9.join(os4.homedir(), ".canonry", "screenshots");
 }
 var cdpChatgptAdapter = {
   name: "cdp:chatgpt",
@@ -22724,7 +23089,7 @@ var cdpChatgptAdapter = {
       const answerText = await target.extractAnswer(client);
       const groundingSources = await target.extractCitations(client);
       const screenshotId = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-      const screenshotPath = path8.join(getScreenshotDir2(), `${screenshotId}.png`);
+      const screenshotPath = path9.join(getScreenshotDir2(), `${screenshotId}.png`);
       let capturedScreenshotPath;
       try {
         capturedScreenshotPath = await captureElementScreenshot(
@@ -23357,10 +23722,10 @@ function removeWordpressConnection(config, projectName) {
 
 // src/job-runner.ts
 import crypto24 from "crypto";
-import fs7 from "fs";
-import path9 from "path";
+import fs8 from "fs";
+import path10 from "path";
 import os5 from "os";
-import { and as and17, eq as eq27, inArray as inArray9, sql as sql10 } from "drizzle-orm";
+import { and as and18, eq as eq27, inArray as inArray9, sql as sql11 } from "drizzle-orm";
 
 // src/run-telemetry.ts
 import crypto23 from "crypto";
@@ -23467,11 +23832,15 @@ function computeCompetitorOverlap(normalized, competitorDomains) {
 function escapeRegExp5(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function extractRecommendedCompetitors(answerText, ownDomains, citedDomains, competitorDomains) {
+function extractRecommendedCompetitors(answerText, ownDomains, citedDomains, competitorDomains, ownBrandNames = []) {
   if (!answerText || answerText.length < 20) return [];
   const ownBrandKeys = new Set(
     ownDomains.flatMap((domain) => collectBrandKeysFromDomain(domain))
   );
+  for (const name of ownBrandNames) {
+    const key = brandKeyFromText(name);
+    if (key.length >= 4) ownBrandKeys.add(key);
+  }
   const knownCompetitorKeys = new Set(
     [...citedDomains, ...competitorDomains].flatMap((domain) => collectBrandKeysFromDomain(domain)).filter((key) => !ownBrandKeys.has(key))
   );
@@ -23739,7 +24108,7 @@ var JobRunner = class {
         throw new Error(`Run ${runId} is not executable from status '${existingRun.status}'`);
       }
       if (existingRun.status === "queued") {
-        this.db.update(runs).set({ status: "running", startedAt: now }).where(and17(eq27(runs.id, runId), eq27(runs.status, "queued"))).run();
+        this.db.update(runs).set({ status: "running", startedAt: now }).where(and18(eq27(runs.id, runId), eq27(runs.status, "queued"))).run();
       }
       this.throwIfRunCancelled(runId);
       const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
@@ -23764,13 +24133,17 @@ var JobRunner = class {
       }
       log.info("run.dispatch", { runId, providerCount: activeProviders.length, providers: activeProviders.map((p) => p.adapter.name) });
       const scopedQueryNames = parseJsonColumn(existingRun.queries, null);
-      projectQueries = scopedQueryNames ? this.db.select().from(queries).where(and17(eq27(queries.projectId, projectId), inArray9(queries.query, scopedQueryNames))).all() : this.db.select().from(queries).where(eq27(queries.projectId, projectId)).all();
+      projectQueries = scopedQueryNames ? this.db.select().from(queries).where(and18(eq27(queries.projectId, projectId), inArray9(queries.query, scopedQueryNames))).all() : this.db.select().from(queries).where(eq27(queries.projectId, projectId)).all();
       const projectCompetitors = this.db.select().from(competitors).where(eq27(competitors.projectId, projectId)).all();
       const competitorDomains = projectCompetitors.map((c) => c.domain);
       const allDomains = effectiveDomains({
         canonicalDomain: project.canonicalDomain,
         ownedDomains: parseJsonColumn(project.ownedDomains, [])
       });
+      const allBrandNames = effectiveBrandNames({
+        displayName: project.displayName,
+        aliases: parseJsonColumn(project.aliases, [])
+      });
       const executionContext = {
         providerCount: activeProviders.length,
         providers: activeProviders.map((provider) => provider.adapter.name),
@@ -23831,7 +24204,7 @@ var JobRunner = class {
             const citationState = determineCitationState(normalized, allDomains);
             const answerMentioned = determineAnswerMentioned(
               normalized.answerText,
-              project.displayName,
+              allBrandNames,
               allDomains
             );
             const overlap = computeCompetitorOverlap(normalized, competitorDomains);
@@ -23839,15 +24212,16 @@ var JobRunner = class {
               normalized.answerText,
               allDomains,
               normalized.citedDomains,
-              competitorDomains
+              competitorDomains,
+              allBrandNames
             );
             let screenshotRelPath = null;
-            if (raw.screenshotPath && fs7.existsSync(raw.screenshotPath)) {
+            if (raw.screenshotPath && fs8.existsSync(raw.screenshotPath)) {
               const snapshotId = crypto24.randomUUID();
-              const screenshotDir = path9.join(os5.homedir(), ".canonry", "screenshots", runId);
-              if (!fs7.existsSync(screenshotDir)) fs7.mkdirSync(screenshotDir, { recursive: true });
-              const destPath = path9.join(screenshotDir, `${snapshotId}.png`);
-              fs7.renameSync(raw.screenshotPath, destPath);
+              const screenshotDir = path10.join(os5.homedir(), ".canonry", "screenshots", runId);
+              if (!fs8.existsSync(screenshotDir)) fs8.mkdirSync(screenshotDir, { recursive: true });
+              const destPath = path10.join(screenshotDir, `${snapshotId}.png`);
+              fs8.renameSync(raw.screenshotPath, destPath);
               screenshotRelPath = `${runId}/${snapshotId}.png`;
               this.db.insert(querySnapshots).values({
                 id: snapshotId,
@@ -24032,7 +24406,7 @@ var JobRunner = class {
       updatedAt: now
     }).onConflictDoUpdate({
       target: [usageCounters.scope, usageCounters.period, usageCounters.metric],
-      set: { count: sql10`${usageCounters.count} + ${count}`, updatedAt: now }
+      set: { count: sql11`${usageCounters.count} + ${count}`, updatedAt: now }
     }).run();
   }
   flushProviderUsage(projectId, providerDispatchCounts) {
@@ -24102,7 +24476,7 @@ function buildPhases(input) {
 
 // src/gsc-sync.ts
 import crypto25 from "crypto";
-import { eq as eq28, and as and18, sql as sql11 } from "drizzle-orm";
+import { eq as eq28, and as and19, sql as sql12 } from "drizzle-orm";
 var log2 = createLogger("GscSync");
 function formatDate3(d) {
   return d.toISOString().split("T")[0];
@@ -24154,10 +24528,10 @@ async function executeGscSync(db, runId, projectId, opts) {
     });
     log2.info("fetch.complete", { runId, projectId, rowCount: rows.length });
     db.delete(gscSearchData).where(
-      and18(
+      and19(
         eq28(gscSearchData.projectId, projectId),
-        sql11`${gscSearchData.date} >= ${startDate}`,
-        sql11`${gscSearchData.date} <= ${endDate}`
+        sql12`${gscSearchData.date} >= ${startDate}`,
+        sql12`${gscSearchData.date} <= ${endDate}`
       )
     ).run();
     const batchSize = 500;
@@ -24243,7 +24617,7 @@ async function executeGscSync(db, runId, projectId, opts) {
       }
     }
     const snapshotDate = formatDate3(/* @__PURE__ */ new Date());
-    db.delete(gscCoverageSnapshots).where(and18(eq28(gscCoverageSnapshots.projectId, projectId), eq28(gscCoverageSnapshots.date, snapshotDate))).run();
+    db.delete(gscCoverageSnapshots).where(and19(eq28(gscCoverageSnapshots.projectId, projectId), eq28(gscCoverageSnapshots.date, snapshotDate))).run();
     db.insert(gscCoverageSnapshots).values({
       id: crypto25.randomUUID(),
       projectId,
@@ -24266,7 +24640,7 @@ async function executeGscSync(db, runId, projectId, opts) {
 
 // src/gsc-inspect-sitemap.ts
 import crypto26 from "crypto";
-import { eq as eq29, and as and19 } from "drizzle-orm";
+import { eq as eq29, and as and20 } from "drizzle-orm";
 
 // src/sitemap-parser.ts
 var log3 = createLogger("SitemapParser");
@@ -24482,7 +24856,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
       }
     }
     const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-    db.delete(gscCoverageSnapshots).where(and19(eq29(gscCoverageSnapshots.projectId, projectId), eq29(gscCoverageSnapshots.date, snapshotDate))).run();
+    db.delete(gscCoverageSnapshots).where(and20(eq29(gscCoverageSnapshots.projectId, projectId), eq29(gscCoverageSnapshots.date, snapshotDate))).run();
     db.insert(gscCoverageSnapshots).values({
       id: crypto26.randomUUID(),
       projectId,
@@ -24692,8 +25066,8 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
 
 // src/commoncrawl-sync.ts
 import crypto28 from "crypto";
-import path10 from "path";
-import { and as and20, eq as eq31, sql as sql12 } from "drizzle-orm";
+import path11 from "path";
+import { and as and21, eq as eq31, sql as sql13 } from "drizzle-orm";
 var log6 = createLogger("CommonCrawlSync");
 var INSERT_CHUNK_SIZE = 1e4;
 function defaultDeps() {
@@ -24721,9 +25095,9 @@ async function executeReleaseSync(db, syncId, opts) {
       error: null
     }).where(eq31(ccReleaseSyncs.id, syncId)).run();
     const paths = ccReleasePaths(release);
-    const releaseCacheDir = path10.join(deps.cacheDir, release);
-    const vertexPath = path10.join(releaseCacheDir, paths.vertexFilename);
-    const edgesPath = path10.join(releaseCacheDir, paths.edgesFilename);
+    const releaseCacheDir = path11.join(deps.cacheDir, release);
+    const vertexPath = path11.join(releaseCacheDir, paths.vertexFilename);
+    const edgesPath = path11.join(releaseCacheDir, paths.edgesFilename);
     const [vertex, edges] = await Promise.all([
       deps.downloadFile({ url: paths.vertexUrl, destPath: vertexPath }),
       deps.downloadFile({ url: paths.edgesUrl, destPath: edgesPath })
@@ -24883,8 +25257,8 @@ function computeSummary(rows) {
 
 // src/backlink-extract.ts
 import crypto29 from "crypto";
-import fs8 from "fs";
-import { and as and21, desc as desc15, eq as eq32 } from "drizzle-orm";
+import fs9 from "fs";
+import { and as and22, desc as desc15, eq as eq32 } from "drizzle-orm";
 var log7 = createLogger("BacklinkExtract");
 function defaultDeps2() {
   return {
@@ -24912,7 +25286,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     if (!sync.vertexPath || !sync.edgesPath) {
       throw new Error(`Release ${sync.release} is missing cached file paths`);
     }
-    if (!fs8.existsSync(sync.vertexPath) || !fs8.existsSync(sync.edgesPath)) {
+    if (!fs9.existsSync(sync.vertexPath) || !fs9.existsSync(sync.edgesPath)) {
       throw new Error(
         `Cache for release ${sync.release} is missing from disk (expected at ${sync.vertexPath}). The sync record exists in the database, but the ~16 GB dump was deleted or never present on this machine. Re-sync this release from the Backlinks admin page to restore the cache.`
       );
@@ -24930,7 +25304,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     const targetDomain = project.canonicalDomain;
     db.transaction((tx) => {
       tx.delete(backlinkDomains).where(
-        and21(eq32(backlinkDomains.projectId, projectId), eq32(backlinkDomains.release, release))
+        and22(eq32(backlinkDomains.projectId, projectId), eq32(backlinkDomains.release, release))
       ).run();
       if (rows.length > 0) {
         const values = rows.map((r) => ({
@@ -25001,9 +25375,10 @@ function computeSummary2(rows) {
 
 // src/discovery-run.ts
 import crypto30 from "crypto";
-import { eq as eq33 } from "drizzle-orm";
+import { and as and23, eq as eq33 } from "drizzle-orm";
 var log8 = createLogger("DiscoveryRun");
 var DEFAULT_SEED_COUNT = 30;
+var QUERIES_PER_INTENT_BUCKET = 6;
 async function executeDiscoveryRun(opts) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   opts.db.update(runs).set({ status: RunStatuses.running, startedAt }).where(eq33(runs.id, opts.runId)).run();
@@ -25208,6 +25583,7 @@ function buildLocationConstraint(locations) {
 }
 function buildSeedPrompt(input) {
   const locationConstraint = buildLocationConstraint(input.locations ?? []);
+  const currentYear = (/* @__PURE__ */ new Date()).getFullYear();
   return [
     "You are an AEO (Answer Engine Optimization) analyst expanding a tracked-query basket for a customer.",
     "",
@@ -25215,14 +25591,15 @@ function buildSeedPrompt(input) {
     `ICP: ${input.icpDescription}`,
     ...locationConstraint.length > 0 ? ["", ...locationConstraint] : [],
     "",
-    "Brainstorm a wide set of queries a member of this ICP would type into an AI answer engine (Gemini, ChatGPT, Perplexity) when they are about to make a decision in this space. Aim for 30+ candidates covering:",
-    ' - Comparison queries ("best X for Y")',
-    " - Specific feature / capability queries",
-    " - Pricing / vendor-shortlist queries",
-    " - Workflow / how-to queries",
-    " - Adjacent jobs-to-be-done queries",
+    "Brainstorm queries a member of this ICP would type into an AI answer engine (Gemini, ChatGPT, Perplexity). Generate candidates across the five intent buckets below \u2014 these are SEMANTICALLY DISTINCT search intents, not stylistic variants. A query should fit one bucket cleanly. Diversity across buckets is the point: it keeps the list from collapsing into near-synonyms of a single intent.",
     "",
-    "Return ONE query per line. Plain text only \u2014 no numbering, bullets, quotes, or commentary."
+    ' 1. Informational \u2014 the searcher wants to understand a concept, market, or problem. Templates: "what is X", "how does X work", "X explained", "why X matters".',
+    ` 2. Commercial \u2014 the searcher is researching category leaders before a purchase. Templates: "best X for Y", "top X ${currentYear}", "leading X providers", "X for [use case]".`,
+    ' 3. Navigational \u2014 the searcher is looking for a specific brand, place, or directory. Templates: "X near me", "X reviews", "X website", "X directory".',
+    ' 4. Comparative \u2014 the searcher is weighing named alternatives head-to-head. Templates: "X vs Y", "X or Y for Z", "alternatives to X".',
+    ' 5. Transactional \u2014 the searcher is ready to act on a purchase or booking. Templates: "book X", "X pricing", "X discount code", "buy X online".',
+    "",
+    `Generate EXACTLY ${QUERIES_PER_INTENT_BUCKET} queries per bucket \u2014 ${QUERIES_PER_INTENT_BUCKET * 5} total. Return ONE query per line. Plain text only \u2014 no numbering, bullets, quotes, bucket labels, or commentary.`
   ].join("\n");
 }
 function parseQueryLines(text, max) {
@@ -25257,33 +25634,40 @@ function writeDiscoveryInsight(db, input) {
     aspirational: buckets.aspirational,
     totalProbes
   });
-  db.insert(insights).values({
-    id: crypto30.randomUUID(),
-    projectId: input.projectId,
-    runId: input.runId,
-    type: "discovery.basket-divergence",
-    severity,
-    title,
-    // query/provider fields don't fit the visibility-snapshot model for a
-    // session-level insight. Use the session marker so the
-    // (query, provider) index stays distinct across sessions; PR 5 will
-    // formalize a session-scoped insight subtype.
-    query: `discovery:${input.sessionId}`,
-    provider: input.seedProvider,
-    recommendation: JSON.stringify({
-      action: "review-discovered-basket",
-      summary: `Run \`canonry discover show ${input.sessionId} --format json\` to inspect the per-query breakdown, then \`canonry discover promote <project> ${input.sessionId}\` to merge cited + aspirational findings into the project.`,
-      bucketCounts: buckets,
-      topCompetitors
-    }),
-    cause: JSON.stringify({
-      sessionId: input.sessionId,
-      totalProbes,
-      seedProvider: input.seedProvider
-    }),
-    dismissed: false,
-    createdAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).run();
+  db.transaction((tx) => {
+    tx.update(insights).set({ dismissed: true }).where(and23(
+      eq33(insights.projectId, input.projectId),
+      eq33(insights.type, "discovery.basket-divergence"),
+      eq33(insights.dismissed, false)
+    )).run();
+    tx.insert(insights).values({
+      id: crypto30.randomUUID(),
+      projectId: input.projectId,
+      runId: input.runId,
+      type: "discovery.basket-divergence",
+      severity,
+      title,
+      // query/provider fields don't fit the visibility-snapshot model for
+      // a session-level insight. Use the session marker so the
+      // (query, provider) index stays distinct across sessions; PR 5 will
+      // formalize a session-scoped insight subtype.
+      query: `discovery:${input.sessionId}`,
+      provider: input.seedProvider,
+      recommendation: JSON.stringify({
+        action: "review-discovered-basket",
+        summary: `Run \`canonry discover show ${input.sessionId} --format json\` to inspect the per-query breakdown, then \`canonry discover promote <project> ${input.sessionId}\` to merge cited + aspirational findings into the project.`,
+        bucketCounts: buckets,
+        topCompetitors
+      }),
+      cause: JSON.stringify({
+        sessionId: input.sessionId,
+        totalProbes,
+        seedProvider: input.seedProvider
+      }),
+      dismissed: false,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    }).run();
+  });
 }
 function buildDiscoveryInsightTitle(input) {
   const parts = [];
@@ -25294,6 +25678,525 @@ function buildDiscoveryInsightTitle(input) {
   return parts.join(" \u2022 ");
 }
 
+// src/commands/backfill.ts
+import { and as and24, eq as eq34, inArray as inArray10 } from "drizzle-orm";
+var SNAPSHOT_BATCH_SIZE = 500;
+async function backfillAnswerVisibilityCommand(opts) {
+  const config = loadConfig();
+  const db = createClient(config.database);
+  migrate(db);
+  const projectFilter = opts?.project?.trim();
+  const scopedProjects = projectFilter ? db.select().from(projects).where(eq34(projects.name, projectFilter)).all() : db.select().from(projects).all();
+  let examined = 0;
+  let updated = 0;
+  let mentioned = 0;
+  let reparsed = 0;
+  let providerErrors = 0;
+  if (scopedProjects.length > 0) {
+    const runRows = projectFilter ? db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and24(
+      eq34(runs.kind, RunKinds["answer-visibility"]),
+      inArray10(runs.projectId, scopedProjects.map((project) => project.id))
+    )).all() : db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(eq34(runs.kind, RunKinds["answer-visibility"])).all();
+    const runIdsByProject = /* @__PURE__ */ new Map();
+    for (const run of runRows) {
+      const existing = runIdsByProject.get(run.projectId);
+      if (existing) existing.push(run.id);
+      else runIdsByProject.set(run.projectId, [run.id]);
+    }
+    for (const project of scopedProjects) {
+      const competitorDomains = db.select({ domain: competitors.domain }).from(competitors).where(eq34(competitors.projectId, project.id)).all().map((row) => row.domain);
+      const runIds = runIdsByProject.get(project.id) ?? [];
+      if (runIds.length === 0) continue;
+      const projectDomains = effectiveDomains({
+        canonicalDomain: project.canonicalDomain,
+        ownedDomains: parseJsonColumn(project.ownedDomains, [])
+      });
+      const projectBrandNames = effectiveBrandNames({
+        displayName: project.displayName,
+        aliases: parseJsonColumn(project.aliases, [])
+      });
+      for (let offset = 0; offset < runIds.length; offset += SNAPSHOT_BATCH_SIZE) {
+        const batchRunIds = runIds.slice(offset, offset + SNAPSHOT_BATCH_SIZE);
+        const snapshotRows = db.select({
+          id: querySnapshots.id,
+          provider: querySnapshots.provider,
+          citationState: querySnapshots.citationState,
+          answerMentioned: querySnapshots.answerMentioned,
+          answerText: querySnapshots.answerText,
+          citedDomains: querySnapshots.citedDomains,
+          competitorOverlap: querySnapshots.competitorOverlap,
+          recommendedCompetitors: querySnapshots.recommendedCompetitors,
+          rawResponse: querySnapshots.rawResponse
+        }).from(querySnapshots).where(inArray10(querySnapshots.runId, batchRunIds)).all();
+        const pendingUpdates = [];
+        for (const snapshot of snapshotRows) {
+          examined++;
+          const reparsedResult = reparseProviderSnapshot(snapshot.provider, snapshot.rawResponse);
+          if (reparsedResult) reparsed++;
+          if (reparsedResult?.providerError) providerErrors++;
+          const answerText = reparsedResult?.answerText ?? snapshot.answerText ?? "";
+          const nextValue = determineAnswerMentioned(answerText, projectBrandNames, projectDomains);
+          if (nextValue) mentioned++;
+          const nextPatch = {};
+          if (snapshot.answerMentioned !== nextValue) {
+            nextPatch.answerMentioned = nextValue;
+          }
+          if ((snapshot.answerText ?? "") !== answerText) {
+            nextPatch.answerText = answerText;
+          }
+          if (reparsedResult) {
+            const normalized = {
+              provider: snapshot.provider,
+              answerText,
+              citedDomains: reparsedResult.citedDomains,
+              groundingSources: reparsedResult.groundingSources,
+              searchQueries: reparsedResult.searchQueries
+            };
+            const nextCitationState = determineCitationState(normalized, projectDomains);
+            const nextCitedDomains = JSON.stringify(reparsedResult.citedDomains);
+            const nextCompetitorOverlap = JSON.stringify(
+              computeCompetitorOverlap(normalized, competitorDomains)
+            );
+            const nextRecommendedCompetitors = JSON.stringify(
+              extractRecommendedCompetitors(
+                normalized.answerText,
+                projectDomains,
+                normalized.citedDomains,
+                competitorDomains,
+                projectBrandNames
+              )
+            );
+            const nextRawResponse = stringifyStoredSnapshotEnvelope(
+              snapshot.rawResponse,
+              reparsedResult
+            );
+            if (snapshot.citationState !== nextCitationState) {
+              nextPatch.citationState = nextCitationState;
+            }
+            if (snapshot.citedDomains !== nextCitedDomains) {
+              nextPatch.citedDomains = nextCitedDomains;
+            }
+            if (snapshot.competitorOverlap !== nextCompetitorOverlap) {
+              nextPatch.competitorOverlap = nextCompetitorOverlap;
+            }
+            if (snapshot.recommendedCompetitors !== nextRecommendedCompetitors) {
+              nextPatch.recommendedCompetitors = nextRecommendedCompetitors;
+            }
+            if (snapshot.rawResponse !== nextRawResponse) {
+              nextPatch.rawResponse = nextRawResponse;
+            }
+          }
+          if (Object.keys(nextPatch).length > 0) {
+            pendingUpdates.push({ id: snapshot.id, patch: nextPatch });
+          }
+        }
+        if (pendingUpdates.length > 0) {
+          db.transaction((tx) => {
+            for (const update of pendingUpdates) {
+              tx.update(querySnapshots).set(update.patch).where(eq34(querySnapshots.id, update.id)).run();
+            }
+          });
+          updated += pendingUpdates.length;
+        }
+      }
+    }
+  }
+  const result = {
+    project: projectFilter ?? null,
+    projects: scopedProjects.length,
+    examined,
+    updated,
+    mentioned,
+    reparsed,
+    providerErrors
+  };
+  if (opts?.format === "json") {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log("Answer visibility backfill complete.\n");
+  if (projectFilter) {
+    console.log(`  Project:  ${projectFilter}`);
+  }
+  console.log(`  Projects: ${scopedProjects.length}`);
+  console.log(`  Examined:  ${examined}`);
+  console.log(`  Updated:   ${updated}`);
+  console.log(`  Mentioned: ${mentioned}`);
+  console.log(`  Reparsed:  ${reparsed}`);
+  console.log(`  Errors:    ${providerErrors}`);
+}
+function backfillNormalizedPaths(db, opts) {
+  const baseConditions = [];
+  if (opts?.projectId) {
+    baseConditions.push(eq34(gaTrafficSnapshots.projectId, opts.projectId));
+  }
+  const rows = db.select({
+    id: gaTrafficSnapshots.id,
+    landingPage: gaTrafficSnapshots.landingPage,
+    landingPageNormalized: gaTrafficSnapshots.landingPageNormalized
+  }).from(gaTrafficSnapshots).where(baseConditions.length > 0 ? and24(...baseConditions) : void 0).all();
+  let updated = 0;
+  let unchanged = 0;
+  if (rows.length > 0) {
+    db.transaction((tx) => {
+      for (const row of rows) {
+        const next = normalizeUrlPath(row.landingPage);
+        if (next === null) {
+          unchanged++;
+          continue;
+        }
+        if (row.landingPageNormalized === next) {
+          unchanged++;
+          continue;
+        }
+        tx.update(gaTrafficSnapshots).set({ landingPageNormalized: next }).where(eq34(gaTrafficSnapshots.id, row.id)).run();
+        updated++;
+      }
+    });
+  }
+  return { examined: rows.length, updated, unchanged };
+}
+async function backfillNormalizedPathsCommand(opts) {
+  const config = loadConfig();
+  const db = createClient(config.database);
+  migrate(db);
+  const projectFilter = opts?.project?.trim();
+  let projectId;
+  if (projectFilter) {
+    const project = db.select({ id: projects.id }).from(projects).where(eq34(projects.name, projectFilter)).get();
+    if (!project) {
+      const result2 = {
+        project: projectFilter,
+        examined: 0,
+        updated: 0,
+        unchanged: 0
+      };
+      if (opts?.format === "json") {
+        console.log(JSON.stringify(result2, null, 2));
+        return;
+      }
+      console.log(`Backfill normalized-paths: project "${projectFilter}" not found.`);
+      return;
+    }
+    projectId = project.id;
+  }
+  const { examined, updated, unchanged } = backfillNormalizedPaths(db, { projectId });
+  const result = {
+    project: projectFilter ?? null,
+    examined,
+    updated,
+    unchanged
+  };
+  if (opts?.format === "json") {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log("Normalized-path backfill complete.\n");
+  if (projectFilter) console.log(`  Project:   ${projectFilter}`);
+  console.log(`  Examined:  ${examined}`);
+  console.log(`  Updated:   ${updated}`);
+  console.log(`  Unchanged: ${unchanged}`);
+}
+function backfillAiReferralPaths(db, opts) {
+  const baseConditions = [];
+  if (opts?.projectId) {
+    baseConditions.push(eq34(gaAiReferrals.projectId, opts.projectId));
+  }
+  const rows = db.select({
+    id: gaAiReferrals.id,
+    landingPage: gaAiReferrals.landingPage,
+    landingPageNormalized: gaAiReferrals.landingPageNormalized
+  }).from(gaAiReferrals).where(baseConditions.length > 0 ? and24(...baseConditions) : void 0).all();
+  let updated = 0;
+  let unchanged = 0;
+  if (rows.length > 0) {
+    db.transaction((tx) => {
+      for (const row of rows) {
+        const next = normalizeUrlPath(row.landingPage);
+        if (next === null) {
+          unchanged++;
+          continue;
+        }
+        if (row.landingPageNormalized === next) {
+          unchanged++;
+          continue;
+        }
+        tx.update(gaAiReferrals).set({ landingPageNormalized: next }).where(eq34(gaAiReferrals.id, row.id)).run();
+        updated++;
+      }
+    });
+  }
+  return { examined: rows.length, updated, unchanged };
+}
+async function backfillAiReferralPathsCommand(opts) {
+  const config = loadConfig();
+  const db = createClient(config.database);
+  migrate(db);
+  const projectFilter = opts?.project?.trim();
+  let projectId;
+  if (projectFilter) {
+    const project = db.select({ id: projects.id }).from(projects).where(eq34(projects.name, projectFilter)).get();
+    if (!project) {
+      const result2 = {
+        project: projectFilter,
+        examined: 0,
+        updated: 0,
+        unchanged: 0
+      };
+      if (opts?.format === "json") {
+        console.log(JSON.stringify(result2, null, 2));
+        return;
+      }
+      console.log(`Backfill ai-referral-paths: project "${projectFilter}" not found.`);
+      return;
+    }
+    projectId = project.id;
+  }
+  const { examined, updated, unchanged } = backfillAiReferralPaths(db, { projectId });
+  const result = {
+    project: projectFilter ?? null,
+    examined,
+    updated,
+    unchanged
+  };
+  if (opts?.format === "json") {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log("AI referral landing-page backfill complete.\n");
+  if (projectFilter) console.log(`  Project:   ${projectFilter}`);
+  console.log(`  Examined:  ${examined}`);
+  console.log(`  Updated:   ${updated}`);
+  console.log(`  Unchanged: ${unchanged}`);
+}
+function backfillProjectAnswerMentions(db, projectId) {
+  const project = db.select().from(projects).where(eq34(projects.id, projectId)).get();
+  if (!project) return { examined: 0, updated: 0, mentioned: 0 };
+  const competitorDomains = db.select({ domain: competitors.domain }).from(competitors).where(eq34(competitors.projectId, projectId)).all().map((row) => row.domain);
+  const runRows = db.select({ id: runs.id }).from(runs).where(and24(eq34(runs.kind, RunKinds["answer-visibility"]), eq34(runs.projectId, projectId))).all();
+  const runIds = runRows.map((r) => r.id);
+  let examined = 0;
+  let updated = 0;
+  let mentioned = 0;
+  if (runIds.length === 0) return { examined, updated, mentioned };
+  const projectDomains = effectiveDomains({
+    canonicalDomain: project.canonicalDomain,
+    ownedDomains: parseJsonColumn(project.ownedDomains, [])
+  });
+  const projectBrandNames = effectiveBrandNames({
+    displayName: project.displayName,
+    aliases: parseJsonColumn(project.aliases, [])
+  });
+  for (let offset = 0; offset < runIds.length; offset += SNAPSHOT_BATCH_SIZE) {
+    const batchRunIds = runIds.slice(offset, offset + SNAPSHOT_BATCH_SIZE);
+    const snapshotRows = db.select({
+      id: querySnapshots.id,
+      provider: querySnapshots.provider,
+      answerMentioned: querySnapshots.answerMentioned,
+      answerText: querySnapshots.answerText,
+      citedDomains: querySnapshots.citedDomains,
+      competitorOverlap: querySnapshots.competitorOverlap,
+      recommendedCompetitors: querySnapshots.recommendedCompetitors,
+      rawResponse: querySnapshots.rawResponse
+    }).from(querySnapshots).where(inArray10(querySnapshots.runId, batchRunIds)).all();
+    const pendingUpdates = [];
+    for (const snapshot of snapshotRows) {
+      examined++;
+      const answerText = snapshot.answerText ?? "";
+      const nextAnswerMentioned = determineAnswerMentioned(answerText, projectBrandNames, projectDomains);
+      if (nextAnswerMentioned) mentioned++;
+      const citedDomains = parseJsonColumn(snapshot.citedDomains, []);
+      const groundingSources = readStoredGroundingSources(snapshot.rawResponse);
+      const normalized = {
+        provider: snapshot.provider,
+        answerText,
+        citedDomains,
+        groundingSources,
+        searchQueries: []
+      };
+      const nextCompetitorOverlap = JSON.stringify(
+        computeCompetitorOverlap(normalized, competitorDomains)
+      );
+      const nextRecommendedCompetitors = JSON.stringify(
+        extractRecommendedCompetitors(
+          answerText,
+          projectDomains,
+          citedDomains,
+          competitorDomains,
+          projectBrandNames
+        )
+      );
+      const nextPatch = {};
+      if (snapshot.answerMentioned !== nextAnswerMentioned) {
+        nextPatch.answerMentioned = nextAnswerMentioned;
+      }
+      if (snapshot.competitorOverlap !== nextCompetitorOverlap) {
+        nextPatch.competitorOverlap = nextCompetitorOverlap;
+      }
+      if (snapshot.recommendedCompetitors !== nextRecommendedCompetitors) {
+        nextPatch.recommendedCompetitors = nextRecommendedCompetitors;
+      }
+      if (Object.keys(nextPatch).length > 0) {
+        pendingUpdates.push({ id: snapshot.id, patch: nextPatch });
+      }
+    }
+    if (pendingUpdates.length > 0) {
+      db.transaction((tx) => {
+        for (const update of pendingUpdates) {
+          tx.update(querySnapshots).set(update.patch).where(eq34(querySnapshots.id, update.id)).run();
+        }
+      });
+      updated += pendingUpdates.length;
+    }
+  }
+  return { examined, updated, mentioned };
+}
+async function backfillAnswerMentionsCommand(opts) {
+  const config = loadConfig();
+  const db = createClient(config.database);
+  migrate(db);
+  const projectFilter = opts?.project?.trim();
+  const scopedProjects = projectFilter ? db.select().from(projects).where(eq34(projects.name, projectFilter)).all() : db.select().from(projects).all();
+  let examined = 0;
+  let updated = 0;
+  let mentioned = 0;
+  for (const project of scopedProjects) {
+    const result2 = backfillProjectAnswerMentions(db, project.id);
+    examined += result2.examined;
+    updated += result2.updated;
+    mentioned += result2.mentioned;
+  }
+  const result = {
+    project: projectFilter ?? null,
+    projects: scopedProjects.length,
+    examined,
+    updated,
+    mentioned
+  };
+  if (opts?.format === "json") {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log("Answer mentions backfill complete.\n");
+  if (projectFilter) console.log(`  Project:   ${projectFilter}`);
+  console.log(`  Projects:  ${scopedProjects.length}`);
+  console.log(`  Examined:  ${examined}`);
+  console.log(`  Updated:   ${updated}`);
+  console.log(`  Mentioned: ${mentioned}`);
+}
+function readStoredGroundingSources(rawResponse) {
+  const envelope = parseJsonColumn(rawResponse, {});
+  const sources = envelope.groundingSources;
+  if (!Array.isArray(sources)) return [];
+  const result = [];
+  for (const source of sources) {
+    if (source && typeof source === "object") {
+      const uri = source.uri;
+      const title = source.title;
+      if (typeof uri === "string") {
+        result.push({ uri, title: typeof title === "string" ? title : "" });
+      }
+    }
+  }
+  return result;
+}
+async function backfillInsightsCommand(project, opts) {
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-7AWRUNI2.js");
+  const config = loadConfig();
+  const db = createClient(config.database);
+  migrate(db);
+  const service = new IntelligenceService2(db);
+  const isJson = opts?.format === "json";
+  const isDryRun = opts?.dryRun === true;
+  if (!isJson) {
+    const scope = opts?.since ? ` (since ${opts.since})` : "";
+    const mode = isDryRun ? " [DRY RUN \u2014 no writes]" : "";
+    process.stderr.write(`Backfilling insights for "${project}"${scope}${mode}...
+`);
+  }
+  const result = service.backfill(project, {
+    fromRunId: opts?.fromRun,
+    toRunId: opts?.toRun,
+    since: opts?.since,
+    dryRun: isDryRun
+  }, (info) => {
+    if (!isJson) {
+      process.stderr.write(`  [${info.index}/${info.total}] ${info.runId} \u2014 ${info.insights} insights
+`);
+    }
+  });
+  const output = {
+    project,
+    processed: result.processed,
+    skipped: result.skipped,
+    totalInsights: result.totalInsights
+  };
+  if (result.dryRun) {
+    output.dryRun = true;
+    output.delta = result.delta;
+  }
+  if (isJson) {
+    console.log(JSON.stringify(output, null, 2));
+    return;
+  }
+  console.log(`
+Backfill ${isDryRun ? "preview" : "complete"}.`);
+  console.log(`  Processed: ${result.processed}`);
+  console.log(`  Skipped:   ${result.skipped}`);
+  console.log(`  Insights:  ${result.totalInsights}`);
+  if (result.delta) {
+    console.log(`  Delta:     -${result.delta.wouldDelete} existing  +${result.delta.wouldCreate} new  (net ${result.delta.netChange >= 0 ? "+" : ""}${result.delta.netChange})`);
+    console.log(`             No DB writes performed. Re-run without --dry-run to apply.`);
+  }
+}
+function reparseProviderSnapshot(provider, rawResponse) {
+  const envelope = parseJsonColumn(rawResponse, {});
+  const apiResponse = resolveStoredApiResponse(envelope);
+  if (!apiResponse) return null;
+  switch (provider) {
+    case ProviderNames.openai:
+      return reparseStoredResult2(apiResponse);
+    case ProviderNames.claude:
+      return reparseStoredResult3(apiResponse);
+    case ProviderNames.gemini:
+      return reparseStoredResult(apiResponse);
+    case ProviderNames.perplexity:
+      return reparseStoredResult4(apiResponse);
+    default:
+      return null;
+  }
+}
+function resolveStoredApiResponse(parsed) {
+  const nested = parsed.apiResponse;
+  if (nested !== null && typeof nested === "object" && !Array.isArray(nested)) {
+    return nested;
+  }
+  if (looksLikeProviderApiResponse(parsed)) {
+    return parsed;
+  }
+  return null;
+}
+function looksLikeProviderApiResponse(value) {
+  return Array.isArray(value.output) || Array.isArray(value.content) || Array.isArray(value.candidates) || Array.isArray(value.choices);
+}
+function stringifyStoredSnapshotEnvelope(rawResponse, reparsed) {
+  const parsed = parseJsonColumn(rawResponse, {});
+  const apiResponse = resolveStoredApiResponse(parsed);
+  const envelope = apiResponse === parsed ? {} : { ...parsed };
+  delete envelope.answerText;
+  delete envelope.citedDomains;
+  delete envelope.competitorOverlap;
+  delete envelope.recommendedCompetitors;
+  delete envelope.providerError;
+  return JSON.stringify({
+    ...envelope,
+    groundingSources: reparsed.groundingSources,
+    searchQueries: reparsed.searchQueries,
+    ...reparsed.providerError ? { providerError: reparsed.providerError } : {},
+    ...apiResponse ? { apiResponse } : {}
+  });
+}
+
 // src/provider-registry.ts
 var ProviderRegistry = class {
   providers = /* @__PURE__ */ new Map();
@@ -25347,7 +26250,7 @@ var ProviderRegistry = class {
 
 // src/scheduler.ts
 import cron from "node-cron";
-import { and as and22, eq as eq34 } from "drizzle-orm";
+import { and as and25, eq as eq35 } from "drizzle-orm";
 var log9 = createLogger("Scheduler");
 function taskKey(projectId, kind) {
   return `${projectId}::${kind}`;
@@ -25362,7 +26265,7 @@ var Scheduler = class {
   }
   /** Load all enabled schedules from DB and register cron jobs. */
   start() {
-    const allSchedules = this.db.select().from(schedules).where(eq34(schedules.enabled, 1)).all();
+    const allSchedules = this.db.select().from(schedules).where(eq35(schedules.enabled, 1)).all();
     for (const schedule of allSchedules) {
       const missedRunAt = schedule.nextRunAt;
       this.registerCronTask(schedule);
@@ -25392,7 +26295,7 @@ var Scheduler = class {
       this.stopTask(key, existing, "Stopped");
       this.tasks.delete(key);
     }
-    const schedule = this.db.select().from(schedules).where(and22(eq34(schedules.projectId, projectId), eq34(schedules.kind, kind))).get();
+    const schedule = this.db.select().from(schedules).where(and25(eq35(schedules.projectId, projectId), eq35(schedules.kind, kind))).get();
     if (schedule && schedule.enabled === 1) {
       this.registerCronTask(schedule);
     }
@@ -25433,14 +26336,14 @@ var Scheduler = class {
     this.db.update(schedules).set({
       nextRunAt: task.getNextRun()?.toISOString() ?? null,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq34(schedules.id, scheduleId)).run();
+    }).where(eq35(schedules.id, scheduleId)).run();
     const label = schedule.preset ?? cronExpr;
     log9.info("cron.registered", { projectId, kind, schedule: label, timezone });
   }
   triggerRun(scheduleId, projectId, kind) {
     try {
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const currentSchedule = this.db.select().from(schedules).where(eq34(schedules.id, scheduleId)).get();
+      const currentSchedule = this.db.select().from(schedules).where(eq35(schedules.id, scheduleId)).get();
       if (!currentSchedule || currentSchedule.enabled !== 1) {
         log9.warn("schedule.stale", { scheduleId, projectId, kind, msg: "schedule no longer exists or is disabled" });
         this.remove(projectId, kind);
@@ -25448,7 +26351,7 @@ var Scheduler = class {
       }
       const task = this.tasks.get(taskKey(projectId, kind));
       const nextRunAt = task?.getNextRun()?.toISOString() ?? null;
-      const project = this.db.select().from(projects).where(eq34(projects.id, projectId)).get();
+      const project = this.db.select().from(projects).where(eq35(projects.id, projectId)).get();
       if (!project) {
         log9.error("project.not-found", { projectId, kind, msg: "skipping scheduled run" });
         this.remove(projectId, kind);
@@ -25468,7 +26371,7 @@ var Scheduler = class {
           lastRunAt: now,
           nextRunAt,
           updatedAt: now
-        }).where(eq34(schedules.id, currentSchedule.id)).run();
+        }).where(eq35(schedules.id, currentSchedule.id)).run();
         log9.info("traffic-sync.triggered", { projectName: project.name, sourceId });
         this.callbacks.onTrafficSyncRequested(project.name, sourceId);
         return;
@@ -25496,7 +26399,7 @@ var Scheduler = class {
         this.db.update(schedules).set({
           nextRunAt,
           updatedAt: now
-        }).where(eq34(schedules.id, currentSchedule.id)).run();
+        }).where(eq35(schedules.id, currentSchedule.id)).run();
         return;
       }
       const runId = queueResult.runId;
@@ -25504,7 +26407,7 @@ var Scheduler = class {
         lastRunAt: now,
         nextRunAt,
         updatedAt: now
-      }).where(eq34(schedules.id, currentSchedule.id)).run();
+      }).where(eq35(schedules.id, currentSchedule.id)).run();
       const scheduleProviders = parseJsonColumn(currentSchedule.providers, []);
       const providers = scheduleProviders.length > 0 ? scheduleProviders : void 0;
       log9.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
@@ -25516,7 +26419,7 @@ var Scheduler = class {
 };
 
 // src/notifier.ts
-import { eq as eq35, desc as desc16, and as and23, inArray as inArray10, or as or4 } from "drizzle-orm";
+import { eq as eq36, desc as desc16, and as and26, inArray as inArray11, or as or5 } from "drizzle-orm";
 import crypto31 from "crypto";
 var log10 = createLogger("Notifier");
 var Notifier = class {
@@ -25529,18 +26432,18 @@ var Notifier = class {
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId) {
     log10.info("run.completed", { runId, projectId });
-    const notifs = this.db.select().from(notifications).where(eq35(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    const notifs = this.db.select().from(notifications).where(eq36(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) {
       log10.info("notifications.none-enabled", { projectId });
       return;
     }
     log10.info("notifications.found", { projectId, count: notifs.length });
-    const run = this.db.select().from(runs).where(eq35(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq36(runs.id, runId)).get();
     if (!run) {
       log10.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
-    const project = this.db.select().from(projects).where(eq35(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq36(projects.id, projectId)).get();
     if (!project) {
       log10.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
@@ -25587,11 +26490,11 @@ var Notifier = class {
     if (criticalInsights.length > 0) insightEvents.push("insight.critical");
     if (highInsights.length > 0) insightEvents.push("insight.high");
     if (insightEvents.length === 0) return;
-    const notifs = this.db.select().from(notifications).where(eq35(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
+    const notifs = this.db.select().from(notifications).where(eq36(notifications.projectId, projectId)).all().filter((n) => n.enabled === 1);
     if (notifs.length === 0) return;
-    const run = this.db.select().from(runs).where(eq35(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq36(runs.id, runId)).get();
     if (!run) return;
-    const project = this.db.select().from(projects).where(eq35(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq36(projects.id, projectId)).get();
     if (!project) return;
     for (const notif of notifs) {
       const config = parseJsonColumn(notif.config, { url: "", events: [] });
@@ -25621,12 +26524,12 @@ var Notifier = class {
     }
   }
   computeTransitions(runId, projectId) {
-    const thisRun = this.db.select().from(runs).where(eq35(runs.id, runId)).get();
+    const thisRun = this.db.select().from(runs).where(eq36(runs.id, runId)).get();
     if (!thisRun) return [];
-    const groupSiblings = this.db.select().from(runs).where(and23(
-      eq35(runs.projectId, projectId),
-      eq35(runs.kind, thisRun.kind),
-      eq35(runs.createdAt, thisRun.createdAt)
+    const groupSiblings = this.db.select().from(runs).where(and26(
+      eq36(runs.projectId, projectId),
+      eq36(runs.kind, thisRun.kind),
+      eq36(runs.createdAt, thisRun.createdAt)
     )).all();
     const stillPending = groupSiblings.some((r) => r.status === "queued" || r.status === "running");
     if (stillPending) return [];
@@ -25642,17 +26545,17 @@ var Notifier = class {
       return candidate.id > best.id ? candidate : best;
     });
     if (winner.id !== runId) return [];
-    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq35(projects.id, projectId)).get();
+    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq36(projects.id, projectId)).get();
     const locationCount = Math.max(
       1,
       parseJsonColumn(projectLocations?.locations ?? null, []).length
     );
     const RECENT_FETCH_LIMIT = Math.max(8, locationCount * 4);
     const recentRuns = this.db.select().from(runs).where(
-      and23(
-        eq35(runs.projectId, projectId),
-        eq35(runs.kind, thisRun.kind),
-        or4(eq35(runs.status, "completed"), eq35(runs.status, "partial"))
+      and26(
+        eq36(runs.projectId, projectId),
+        eq36(runs.kind, thisRun.kind),
+        or5(eq36(runs.status, "completed"), eq36(runs.status, "partial"))
       )
     ).orderBy(desc16(runs.createdAt), desc16(runs.id)).limit(RECENT_FETCH_LIMIT).all();
     const groups = groupRunsByCreatedAt(recentRuns);
@@ -25669,13 +26572,13 @@ var Notifier = class {
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(queries, eq35(querySnapshots.queryId, queries.id)).where(inArray10(querySnapshots.runId, currentRunIds)).all();
+    }).from(querySnapshots).leftJoin(queries, eq36(querySnapshots.queryId, queries.id)).where(inArray11(querySnapshots.runId, currentRunIds)).all();
     const previousSnapshots = this.db.select({
       queryId: querySnapshots.queryId,
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).where(inArray10(querySnapshots.runId, previousRunIds)).all();
+    }).from(querySnapshots).where(inArray11(querySnapshots.runId, previousRunIds)).all();
     const prevMap = /* @__PURE__ */ new Map();
     for (const s of previousSnapshots) {
       if (s.queryId == null) continue;
@@ -25749,7 +26652,7 @@ var Notifier = class {
 };
 
 // src/run-coordinator.ts
-import { eq as eq36 } from "drizzle-orm";
+import { eq as eq37 } from "drizzle-orm";
 var log11 = createLogger("RunCoordinator");
 var RunCoordinator = class {
   constructor(db, notifier, intelligenceService, onInsightsGenerated, onAeroEvent) {
@@ -25760,7 +26663,7 @@ var RunCoordinator = class {
     this.onAeroEvent = onAeroEvent;
   }
   async onRunCompleted(runId, projectId) {
-    const runRow = this.db.select().from(runs).where(eq36(runs.id, runId)).get();
+    const runRow = this.db.select().from(runs).where(eq37(runs.id, runId)).get();
     const kind = runRow?.kind ?? RunKinds["answer-visibility"];
     let insightCount = 0;
     let criticalOrHigh = 0;
@@ -25815,7 +26718,7 @@ var RunCoordinator = class {
    * so the Aero queue is never starved of a follow-up.
    */
   buildDiscoveryAeroContext(runId, projectId, status, error) {
-    const session = this.db.select().from(discoverySessions).where(eq36(discoverySessions.runId, runId)).get();
+    const session = this.db.select().from(discoverySessions).where(eq37(discoverySessions.runId, runId)).get();
     const competitorMap = session ? parseJsonColumn(session.competitorMap, []) : [];
     return {
       kind: RunKinds["aeo-discover-probe"],
@@ -25838,11 +26741,11 @@ var RunCoordinator = class {
 
 // src/agent/session-registry.ts
 import crypto33 from "crypto";
-import { eq as eq38 } from "drizzle-orm";
+import { eq as eq39 } from "drizzle-orm";
 
 // src/agent/session.ts
-import fs11 from "fs";
-import path13 from "path";
+import fs12 from "fs";
+import path14 from "path";
 import { Agent } from "@mariozechner/pi-agent-core";
 import { registerBuiltInApiProviders } from "@mariozechner/pi-ai";
 
@@ -25943,26 +26846,26 @@ function buildAgentProvidersResponse(config) {
 }
 
 // src/agent/skill-paths.ts
-import fs9 from "fs";
-import path11 from "path";
+import fs10 from "fs";
+import path12 from "path";
 import { fileURLToPath } from "url";
 function resolveAeroSkillDir(pkgDir) {
-  const here = pkgDir ?? path11.dirname(fileURLToPath(import.meta.url));
+  const here = pkgDir ?? path12.dirname(fileURLToPath(import.meta.url));
   const candidates = [
-    path11.join(here, "../assets/agent-workspace/skills/aero"),
-    path11.join(here, "../../assets/agent-workspace/skills/aero"),
-    path11.join(here, "../../../../skills/aero")
+    path12.join(here, "../assets/agent-workspace/skills/aero"),
+    path12.join(here, "../../assets/agent-workspace/skills/aero"),
+    path12.join(here, "../../../../skills/aero")
   ];
   for (const candidate of candidates) {
-    if (fs9.existsSync(path11.join(candidate, "SKILL.md"))) return candidate;
+    if (fs10.existsSync(path12.join(candidate, "SKILL.md"))) return candidate;
   }
   throw new Error(`Aero skill not found. Searched:
   ${candidates.join("\n  ")}`);
 }
 
 // src/agent/skill-tools.ts
-import fs10 from "fs";
-import path12 from "path";
+import fs11 from "fs";
+import path13 from "path";
 import { Type } from "@sinclair/typebox";
 var MAX_DOC_CHARS = 2e4;
 function textResult(details) {
@@ -25983,13 +26886,13 @@ function parseDescription(body) {
   return "(no description)";
 }
 function scanSkillDocs(skillDir) {
-  const refsDir = path12.join(skillDir ?? resolveAeroSkillDir(), "references");
-  if (!fs10.existsSync(refsDir)) return [];
+  const refsDir = path13.join(skillDir ?? resolveAeroSkillDir(), "references");
+  if (!fs11.existsSync(refsDir)) return [];
   const entries = [];
-  for (const file of fs10.readdirSync(refsDir)) {
+  for (const file of fs11.readdirSync(refsDir)) {
     if (!file.endsWith(".md")) continue;
-    const filePath = path12.join(refsDir, file);
-    const body = fs10.readFileSync(filePath, "utf-8");
+    const filePath = path13.join(refsDir, file);
+    const body = fs11.readFileSync(filePath, "utf-8");
     entries.push({
       slug: file.replace(/\.md$/, ""),
       description: parseDescription(body),
@@ -26032,8 +26935,8 @@ function buildReadSkillDocTool() {
           availableSlugs: docs.map((d) => d.slug)
         });
       }
-      const filePath = path12.join(skillDir, "references", `${match.slug}.md`);
-      const content = fs10.readFileSync(filePath, "utf-8");
+      const filePath = path13.join(skillDir, "references", `${match.slug}.md`);
+      const content = fs11.readFileSync(filePath, "utf-8");
       if (content.length > MAX_DOC_CHARS) {
         return textResult({
           slug: match.slug,
@@ -26127,10 +27030,10 @@ function ensureBuiltinsRegistered() {
 }
 function loadAeroSystemPrompt(pkgDir) {
   const skillDir = resolveAeroSkillDir(pkgDir);
-  const skillBody = fs11.readFileSync(path13.join(skillDir, "SKILL.md"), "utf-8");
-  const soulPath = path13.join(skillDir, "soul.md");
-  if (!fs11.existsSync(soulPath)) return skillBody;
-  const soulBody = fs11.readFileSync(soulPath, "utf-8");
+  const skillBody = fs12.readFileSync(path14.join(skillDir, "SKILL.md"), "utf-8");
+  const soulPath = path14.join(skillDir, "soul.md");
+  if (!fs12.existsSync(soulPath)) return skillBody;
+  const soulBody = fs12.readFileSync(soulPath, "utf-8");
   return `${soulBody.trimEnd()}
 
 ---
@@ -26188,7 +27091,7 @@ function resolveSessionProviderAndModel(config, opts) {
 
 // src/agent/memory-store.ts
 import crypto32 from "crypto";
-import { and as and24, desc as desc17, eq as eq37, like as like2, sql as sql13 } from "drizzle-orm";
+import { and as and27, desc as desc17, eq as eq38, like as like2, sql as sql14 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto2(row) {
@@ -26202,7 +27105,7 @@ function rowToDto2(row) {
   };
 }
 function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq37(agentMemory.projectId, projectId)).orderBy(desc17(agentMemory.updatedAt));
+  const query = db.select().from(agentMemory).where(eq38(agentMemory.projectId, projectId)).orderBy(desc17(agentMemory.updatedAt));
   const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
   return rows.map(rowToDto2);
 }
@@ -26233,12 +27136,12 @@ function upsertMemoryEntry(db, args) {
       updatedAt: now
     }
   }).run();
-  const row = db.select().from(agentMemory).where(and24(eq37(agentMemory.projectId, args.projectId), eq37(agentMemory.key, args.key))).get();
+  const row = db.select().from(agentMemory).where(and27(eq38(agentMemory.projectId, args.projectId), eq38(agentMemory.key, args.key))).get();
   if (!row) throw new Error("memory upsert produced no row");
   return rowToDto2(row);
 }
 function deleteMemoryEntry(db, projectId, key) {
-  const result = db.delete(agentMemory).where(and24(eq37(agentMemory.projectId, projectId), eq37(agentMemory.key, key))).run();
+  const result = db.delete(agentMemory).where(and27(eq38(agentMemory.projectId, projectId), eq38(agentMemory.key, key))).run();
   const changes = result.changes ?? 0;
   return changes > 0;
 }
@@ -26267,16 +27170,16 @@ function writeCompactionNote(db, args) {
     }).run();
     const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
     const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
-      and24(
-        eq37(agentMemory.projectId, args.projectId),
+      and27(
+        eq38(agentMemory.projectId, args.projectId),
         like2(agentMemory.key, `${sessionPrefix}%`)
       )
     ).orderBy(desc17(agentMemory.updatedAt)).all();
     const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
     if (stale.length > 0) {
-      tx.delete(agentMemory).where(sql13`${agentMemory.id} IN (${sql13.join(stale.map((s) => sql13`${s}`), sql13`, `)})`).run();
+      tx.delete(agentMemory).where(sql14`${agentMemory.id} IN (${sql14.join(stale.map((s) => sql14`${s}`), sql14`, `)})`).run();
     }
-    const row = tx.select().from(agentMemory).where(and24(eq37(agentMemory.projectId, args.projectId), eq37(agentMemory.key, key))).get();
+    const row = tx.select().from(agentMemory).where(and27(eq38(agentMemory.projectId, args.projectId), eq38(agentMemory.key, key))).get();
     if (row) inserted = rowToDto2(row);
   });
   if (!inserted) throw new Error("compaction note write produced no row");
@@ -26458,7 +27361,7 @@ var SessionRegistry = class {
           modelProvider: effectiveProvider,
           modelId: effectiveModelId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(eq38(agentSessions.projectId, projectId)).run();
+        }).where(eq39(agentSessions.projectId, projectId)).run();
       }
       const agent2 = createAeroSession({
         projectName,
@@ -26672,7 +27575,7 @@ ${lines.join("\n")}
       modelProvider: nextProvider,
       modelId: nextModelId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq38(agentSessions.projectId, projectId)).run();
+    }).where(eq39(agentSessions.projectId, projectId)).run();
   }
   /** Persist a session's transcript back to the DB. Call after any run settles. */
   save(projectName) {
@@ -26834,11 +27737,11 @@ ${lines.join("\n")}
     return id;
   }
   tryResolveProjectId(projectName) {
-    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq38(projects.name, projectName)).get();
+    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq39(projects.name, projectName)).get();
     return row?.id;
   }
   loadRow(projectId) {
-    const row = this.opts.db.select().from(agentSessions).where(eq38(agentSessions.projectId, projectId)).get();
+    const row = this.opts.db.select().from(agentSessions).where(eq39(agentSessions.projectId, projectId)).get();
     return row ?? null;
   }
   insertRow(params) {
@@ -26857,14 +27760,14 @@ ${lines.join("\n")}
   }
   updateRow(projectId, patch) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq38(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq39(agentSessions.projectId, projectId)).run();
   }
 };
 
 // src/agent/agent-routes.ts
-import { eq as eq39 } from "drizzle-orm";
+import { eq as eq40 } from "drizzle-orm";
 function resolveProject2(db, name) {
-  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq39(projects.name, name)).get();
+  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq40(projects.name, name)).get();
   if (!row) throw notFound("project", name);
   return row;
 }
@@ -26873,7 +27776,7 @@ function registerAgentRoutes(app, opts) {
     "/projects/:name/agent/transcript",
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
-      const row = opts.db.select().from(agentSessions).where(eq39(agentSessions.projectId, project.id)).get();
+      const row = opts.db.select().from(agentSessions).where(eq40(agentSessions.projectId, project.id)).get();
       if (!row) {
         return { messages: [], modelProvider: null, modelId: null, updatedAt: null };
       }
@@ -26897,7 +27800,7 @@ function registerAgentRoutes(app, opts) {
     async (request) => {
       const project = resolveProject2(opts.db, request.params.name);
       opts.sessionRegistry.reset(project.name);
-      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq39(agentSessions.projectId, project.id)).run();
+      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq40(agentSessions.projectId, project.id)).run();
       return { status: "reset" };
     }
   );
@@ -27015,7 +27918,7 @@ import { runAeoAudit } from "@ainyc/aeo-audit";
 
 // src/site-fetch.ts
 import https2 from "https";
-var FETCH_TIMEOUT_MS = 1e4;
+var FETCH_TIMEOUT_MS2 = 1e4;
 var MAX_TEXT_LENGTH = 4e3;
 var MAX_BODY_BYTES = 512e3;
 var USER_AGENT = "Canonry/1.0 (site-analysis)";
@@ -27032,15 +27935,15 @@ function extractHostname(domain) {
 function fetchWithPinnedAddress(target) {
   return new Promise((resolve) => {
     const port = target.url.port ? Number(target.url.port) : 443;
-    const path15 = target.url.pathname + target.url.search;
+    const path16 = target.url.pathname + target.url.search;
     const req = https2.request(
       {
         hostname: target.address,
         family: target.family,
         port,
-        path: path15,
+        path: path16,
         method: "GET",
-        timeout: FETCH_TIMEOUT_MS,
+        timeout: FETCH_TIMEOUT_MS2,
         servername: target.url.hostname,
         // SNI for TLS
         headers: {
@@ -27361,7 +28264,7 @@ var SnapshotService = class {
               provider: provider.adapter.name,
               displayName: provider.adapter.displayName,
               model: raw.model,
-              mentioned: determineAnswerMentioned(normalized.answerText, ctx.companyName, answerVisibilityDomains),
+              mentioned: determineAnswerMentioned(normalized.answerText, [ctx.companyName], answerVisibilityDomains),
               cited: citesTargetDomain(normalized.citedDomains, normalized.groundingSources, ctx.domain),
               describedAccurately: "unknown",
               accuracyNotes: null,
@@ -27728,8 +28631,8 @@ function clipText(value, length) {
 }
 
 // src/server.ts
-var _require2 = createRequire3(import.meta.url);
-var { version: PKG_VERSION } = _require2("../package.json");
+var _require3 = createRequire4(import.meta.url);
+var { version: PKG_VERSION2 } = _require3("../package.json");
 var log14 = createLogger("Server");
 var DEFAULT_QUOTA = {
   maxConcurrency: 2,
@@ -27920,7 +28823,7 @@ async function createServer(opts) {
     intelligenceService,
     (runId, projectId, result) => notifier.dispatchInsightWebhooks(runId, projectId, result),
     async (ctx) => {
-      const project = opts.db.select({ name: projects.name }).from(projects).where(eq40(projects.id, ctx.projectId)).get();
+      const project = opts.db.select({ name: projects.name }).from(projects).where(eq41(projects.id, ctx.projectId)).get();
       if (!project) return;
       let content;
       if (ctx.kind === RunKinds["aeo-discover-probe"]) {
@@ -27943,8 +28846,8 @@ async function createServer(opts) {
   );
   jobRunner.onRunCompleted = (runId, projectId) => runCoordinator.onRunCompleted(runId, projectId);
   const snapshotService = new SnapshotService(registry);
-  const orphanedOpenClawDir = path14.join(os6.homedir(), ".openclaw-aero");
-  if (fs12.existsSync(orphanedOpenClawDir)) {
+  const orphanedOpenClawDir = path15.join(os6.homedir(), ".openclaw-aero");
+  if (fs13.existsSync(orphanedOpenClawDir)) {
     app.log.warn(
       { path: orphanedOpenClawDir },
       "OpenClaw gateway is no longer used. Remove ~/.openclaw-aero/ manually to reclaim the directory."
@@ -28121,7 +29024,7 @@ async function createServer(opts) {
   const apiPrefix = basePath ? `${basePath}api/v1` : "/api/v1";
   if (opts.config.apiKey) {
     const keyHash = hashApiKey(opts.config.apiKey);
-    const existing = opts.db.select().from(apiKeys).where(eq40(apiKeys.keyHash, keyHash)).get();
+    const existing = opts.db.select().from(apiKeys).where(eq41(apiKeys.keyHash, keyHash)).get();
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
@@ -28173,7 +29076,7 @@ async function createServer(opts) {
   };
   const getDefaultApiKey = () => {
     if (!opts.config.apiKey) return void 0;
-    return opts.db.select().from(apiKeys).where(eq40(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
+    return opts.db.select().from(apiKeys).where(eq41(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
   };
   const createPasswordSession = (reply) => {
     const key = getDefaultApiKey();
@@ -28230,12 +29133,12 @@ async function createServer(opts) {
       return reply.send({ authenticated: true });
     }
     if (apiKey) {
-      const key = opts.db.select().from(apiKeys).where(eq40(apiKeys.keyHash, hashApiKey(apiKey))).get();
+      const key = opts.db.select().from(apiKeys).where(eq41(apiKeys.keyHash, hashApiKey(apiKey))).get();
       if (!key || key.revokedAt) {
         const err2 = authInvalid();
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
-      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq40(apiKeys.id, key.id)).run();
+      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq41(apiKeys.id, key.id)).run();
       const sessionId = createSession(key.id);
       reply.header("set-cookie", serializeSessionCookie({
         name: SESSION_COOKIE_NAME,
@@ -28289,6 +29192,12 @@ async function createServer(opts) {
     skipAuth: false,
     sessionCookieName: SESSION_COOKIE_NAME,
     resolveSessionApiKeyId,
+    // Local canonry serve runs on the operator's machine, where pointing a
+    // webhook at localhost (Discord test container, Pipedream-mock dev server,
+    // etc.) is a legitimate workflow. Default to allowing it for the local
+    // installer; cloud deployments inherit the secure default of `false` by
+    // not passing this option. Override with CANONRY_ALLOW_LOOPBACK_WEBHOOKS=0.
+    allowLoopbackWebhooks: process.env.CANONRY_ALLOW_LOOPBACK_WEBHOOKS !== "0",
     // Local-only Aero agent routes. Registered here so they inherit api-routes'
     // auth plugin — bare `registerAgentRoutes(app, ...)` would skip auth.
     registerAuthenticatedRoutes: async (scope) => {
@@ -28409,7 +29318,7 @@ async function createServer(opts) {
     discoverLatestRelease,
     openApiInfo: {
       title: "Canonry API",
-      version: PKG_VERSION,
+      version: PKG_VERSION2,
       includeCanonryLocal: true
     },
     providerSummary,
@@ -28556,6 +29465,19 @@ async function createServer(opts) {
     onProjectDeleted: (projectId) => {
       scheduler.removeAllForProject(projectId);
     },
+    onAliasesChanged: (projectId, projectName) => {
+      setImmediate(() => {
+        try {
+          const result = backfillProjectAnswerMentions(opts.db, projectId);
+          app.log.info(
+            { projectId, projectName, ...result },
+            "aliases changed \u2014 recomputed mention fields on historical snapshots"
+          );
+        } catch (err) {
+          app.log.error({ err, projectId, projectName }, "alias-triggered backfill failed");
+        }
+      });
+    },
     getTelemetryStatus: () => {
       const enabled = isTelemetryEnabled();
       return {
@@ -28640,10 +29562,10 @@ async function createServer(opts) {
       return snapshotService.createReport(input);
     }
   });
-  const dirname = path14.dirname(fileURLToPath2(import.meta.url));
-  const assetsDir = path14.join(dirname, "..", "assets");
-  if (fs12.existsSync(assetsDir)) {
-    const indexPath = path14.join(assetsDir, "index.html");
+  const dirname = path15.dirname(fileURLToPath2(import.meta.url));
+  const assetsDir = path15.join(dirname, "..", "assets");
+  if (fs13.existsSync(assetsDir)) {
+    const indexPath = path15.join(assetsDir, "index.html");
     const injectConfig = (html) => {
       const clientConfig = {};
       if (basePath) clientConfig.basePath = basePath;
@@ -28661,8 +29583,8 @@ async function createServer(opts) {
       index: false
     });
     const serveIndex = (_request, reply) => {
-      if (fs12.existsSync(indexPath)) {
-        const html = fs12.readFileSync(indexPath, "utf-8");
+      if (fs13.existsSync(indexPath)) {
+        const html = fs13.readFileSync(indexPath, "utf-8");
         return reply.type("text/html").send(injectConfig(html));
       }
       return reply.status(404).send({ error: "Dashboard not built" });
@@ -28682,23 +29604,28 @@ async function createServer(opts) {
       if (basePath && !url.startsWith(basePath)) {
         return reply.status(404).send({ error: "Not found", path: request.url });
       }
-      if (fs12.existsSync(indexPath)) {
-        const html = fs12.readFileSync(indexPath, "utf-8");
+      if (fs13.existsSync(indexPath)) {
+        const html = fs13.readFileSync(indexPath, "utf-8");
         return reply.type("text/html").send(injectConfig(html));
       }
       return reply.status(404).send({ error: "Not found" });
     });
   }
-  const healthHandler = async () => ({
-    status: "ok",
-    service: "canonry",
-    version: PKG_VERSION,
-    ...basePath ? { basePath: basePath.replace(/\/$/, "") } : {}
-  });
+  const healthHandler = () => {
+    const update = checkLatestVersionForServer();
+    return {
+      status: "ok",
+      service: "canonry",
+      version: PKG_VERSION2,
+      ...basePath ? { basePath: basePath.replace(/\/$/, "") } : {},
+      ...update ? { updateAvailable: update } : {}
+    };
+  };
   app.get("/health", healthHandler);
   if (basePath) {
     app.get(`${basePath}health`, healthHandler);
   }
+  checkLatestVersionForServer();
   scheduler.start();
   app.addHook("onClose", async () => {
     scheduler.stop();
@@ -28759,16 +29686,17 @@ export {
   showFirstRunNotice,
   detectAndTrackUpgrade,
   trackEvent,
-  reparseStoredResult2 as reparseStoredResult,
-  reparseStoredResult3 as reparseStoredResult2,
-  reparseStoredResult as reparseStoredResult3,
-  reparseStoredResult4,
-  determineCitationState,
-  computeCompetitorOverlap,
-  extractRecommendedCompetitors,
+  backfillAnswerVisibilityCommand,
+  backfillNormalizedPaths,
+  backfillNormalizedPathsCommand,
+  backfillAiReferralPaths,
+  backfillAiReferralPathsCommand,
+  backfillAnswerMentionsCommand,
+  backfillInsightsCommand,
   renderReportHtml,
   setGoogleAuthConfig,
   formatAuditFactorScore,
+  checkLatestVersionForCli,
   listAgentProviders,
   coerceAgentProvider,
   createServer