@ainyc/canonry 4.51.0 → 4.51.2

package/assets/assets/server-traffic-Bym-drXr.js

@@ -0,0 +1 @@
+import{c as d,j as a,bK as S,bG as l,bL as v,aj as m,l as t,bM as y,bH as i,bN as T,bO as h,bP as p,bQ as b}from"./index-VMFHNbas.js";import{u as s,r as C,n as c,o as u}from"./vendor-tanstack-Dq7p98wZ.js";const g=[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]],P=d("refresh-cw",g);function B(e){switch(e){case i.connected:return"positive";case i.paused:return"caution";case i.error:return"negative";case i.archived:return"neutral"}}function w(e){const r={};return e.kind&&e.kind!=="all"&&(r.kind=e.kind),e.sourceId&&(r.sourceId=e.sourceId),e.sinceMinutes!==void 0&&(r.since=new Date(Date.now()-e.sinceMinutes*6e4).toISOString()),e.limit!==void 0&&(r.limit=String(e.limit)),r}function o(e){e.invalidateQueries({predicate:r=>{const n=r.queryKey[0];return typeof n?._id=="string"&&n._id.startsWith("getApiV1ProjectsByNameTraffic")}})}function k(e){return s({...S({client:t,path:{name:e??""}}),enabled:!!e,staleTime:a})}function F(e){return s({...b({client:t,path:{name:e??""}}),enabled:!!e,staleTime:a})}function V(e,r){return s({...l({client:t,path:{name:e??"",id:r??""}}),enabled:!!(e&&r),staleTime:a})}function A(e,r){const n=C.useMemo(()=>w(r),[r.kind,r.sourceId,r.sinceMinutes,r.limit]);return s({...v({client:t,path:{name:e??""},query:n}),enabled:!!e,staleTime:a})}function E(e){const r=c();return u({mutationFn:n=>{if(!e)throw new Error("Project is required to connect a Cloud Run source");return p(e,n)},onSuccess:()=>{e&&o(r)}})}function Q(e){const r=c();return u({mutationFn:n=>{if(!e)throw new Error("Project is required to connect a WordPress source");return T(e,n)},onSuccess:()=>{e&&o(r)}})}function I(e){const r=c();return u({mutationFn:n=>{if(!e)throw new Error("Project is required to connect a Vercel source");return h(e,n)},onSuccess:()=>{e&&o(r)}})}function N(e,r){const n=c();return u({mutationFn:f=>{if(!e||!r)throw new Error("Project and sourceId are required to sync");return y(e,r,f??void 0)},onSuccess:()=>{e&&(o(n),n.invalidateQueries({queryKey:m({client:t})}))}})}export{P as R,Q as a,I as b,E as c,k as d,V as e,A as f,N as g,B as t,F as u};

package/assets/assets/{trash-2-CnBiLbiZ.js → trash-2-BNsIoa7t.js}

@@ -1 +1 @@
-import{c}from"./index-DKBPD33e.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};
+import{c}from"./index-VMFHNbas.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-DKBPD33e.js"></script>
+    <script type="module" crossorigin src="./assets/index-VMFHNbas.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Dq7p98wZ.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-B57xfQbP.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-DWvKDyBF.js">

package/dist/{chunk-2ARCCG5E.js → chunk-FYGBW3SM.js}

@@ -380,6 +380,9 @@ function missingDependency(message, details) {
 function internalError(message, details) {
   return new AppError("INTERNAL_ERROR", message, 500, details);
 }
+function runtimeStateMissing(message, details) {
+  return new AppError("RUNTIME_STATE_MISSING", message, 503, details);
+}
 
 // ../contracts/src/project.ts
 var configSourceSchema = z4.enum(["cli", "api", "config-file"]);
@@ -3584,6 +3587,7 @@ export {
   agentBusy,
   missingDependency,
   internalError,
+  runtimeStateMissing,
   findDuplicateLocationLabels,
   hasLocationLabel,
   resolveLocations,

package/dist/{chunk-GGXU5VKI.js → chunk-HMZKIOLG.js}

@@ -22,7 +22,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-2ARCCG5E.js";
+} from "./chunk-FYGBW3SM.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/{chunk-DLDLDWH4.js → chunk-QZ5XSM6C.js}

@@ -10,7 +10,7 @@ import {
   categoryLabel,
   determineAnswerMentioned,
   normalizeProjectDomain
-} from "./chunk-2ARCCG5E.js";
+} from "./chunk-FYGBW3SM.js";
 
 // src/intelligence-service.ts
 import { eq, desc, asc, and, ne, or, inArray } from "drizzle-orm";
@@ -164,11 +164,26 @@ var auditLog = sqliteTable("audit_log", {
   // reader could see it (the deletion would erase the only evidence it
   // happened). Detached rows surface in audit queries with project_id=NULL.
   projectId: text("project_id").references(() => projects.id, { onDelete: "set null" }),
+  // High-level identity of the caller: 'api' for HTTP requests, 'scheduler'
+  // for cron-triggered work, 'cli' / 'agent' / 'mcp' for direct DB writes
+  // (where applicable). Coarse on purpose — narrower attribution lives in
+  // `userAgent` and `actorSession`.
   actor: text("actor").notNull(),
   action: text("action").notNull(),
   entityType: text("entity_type").notNull(),
   entityId: text("entity_id"),
   diff: text("diff"),
+  // User-Agent header from the originating HTTP request, when available.
+  // The narrowest reliable signal for "which client did this" — distinguishes
+  // CLI (`canonry-cli/X.Y.Z`), dashboard (browser UA), MCP adapter, and
+  // external scripts. NULL for non-HTTP writes (scheduler, run-coordinator,
+  // direct CLI commands that bypass the API).
+  userAgent: text("user_agent"),
+  // Optional caller-supplied trace key for cross-request correlation —
+  // a session ID, prompt ID, batch ID, etc. The Aero agent populates this
+  // with its session id so post-mortems can group a related sequence of
+  // mutations. NULL when the caller didn't provide one.
+  actorSession: text("actor_session"),
   createdAt: text("created_at").notNull()
 }, (table) => [
   index("idx_audit_log_project").on(table.projectId),
@@ -2023,6 +2038,24 @@ var MIGRATION_VERSIONS = [
       `CREATE UNIQUE INDEX IF NOT EXISTS idx_recommendation_explanations_unique ON recommendation_explanations(project_id, target_ref, prompt_version)`,
       `CREATE INDEX IF NOT EXISTS idx_recommendation_explanations_project ON recommendation_explanations(project_id)`
     ]
+  },
+  {
+    version: 63,
+    name: "audit-log-attribution-columns",
+    // Adds `user_agent` and `actor_session` to `audit_log` so post-mortems
+    // can attribute destructive events (like the 2026-05-15 azcoatings
+    // queries.replaced incident — see PR #593) to a specific caller.
+    // Without these columns, every mutation rides as `actor='api'` with no
+    // narrower identity, so it's impossible to tell whether a destructive
+    // event came from CLI, dashboard, MCP, an agent, or an external script.
+    //
+    // Both columns nullable — the audit log accepts writes from sources
+    // that don't have an HTTP request context (scheduler, run-coordinator,
+    // direct DB writes from CLI commands).
+    statements: [
+      `ALTER TABLE audit_log ADD COLUMN user_agent TEXT`,
+      `ALTER TABLE audit_log ADD COLUMN actor_session TEXT`
+    ]
   }
 ];
 function isDuplicateColumnError(err) {