@ainyc/canonry 4.51.4 → 4.54.0

package/dist/{chunk-WBO5S3IX.js → chunk-CRO6Q25G.js}

@@ -6,7 +6,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-HMZKIOLG.js";
+} from "./chunk-J7MX3YOH.js";
 import {
   DEFAULT_RUN_HISTORY_LIMIT,
   IntelligenceService,
@@ -14,6 +14,7 @@ import {
   agentMemory,
   agentSessions,
   aiReferralEventsHourly,
+  aiUserFetchEventsHourly,
   apiKeys,
   auditLog,
   backlinkDomains,
@@ -83,7 +84,7 @@ import {
   smoothedRunDelta,
   trafficSources,
   usageCounters
-} from "./chunk-QZ5XSM6C.js";
+} from "./chunk-JHAHNKSN.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -284,7 +285,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-FYGBW3SM.js";
+} from "./chunk-VZPDBHBW.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -5455,11 +5456,14 @@ function renderServerActivity(report, audience) {
     const crawlerTrustSummary = `${formatNumber(sa.verifiedCrawlerHits.current)} verified \xB7 ${formatNumber(sa.unverifiedCrawlerHits.current)} unverified`;
     const crawlerDelta = formatDelta(crawlerRequests, "requests");
     const crawlerSubtitle = crawlerDelta ? `${escapeHtml(crawlerTrustSummary)} \xB7 ${crawlerDelta}` : escapeHtml(crawlerTrustSummary);
-    const clientOperators = sa.byOperator.filter((o) => o.verifiedHits > 0 || o.unverifiedHits > 0 || o.referralArrivals > 0).slice(0, 5);
+    const userFetchDelta = formatDelta(sa.aiUserFetchHits, "requests");
+    const userFetchSubtitle = userFetchDelta || escapeHtml("ChatGPT-User, Perplexity-User, MistralAI-User");
+    const clientOperators = sa.byOperator.filter((o) => o.verifiedHits > 0 || o.unverifiedHits > 0 || o.userFetchHits > 0 || o.referralArrivals > 0).slice(0, 5);
     const clientOperatorRows = clientOperators.map((o) => `
     <tr>
       <td>${escapeHtml(o.operator)}</td>
       <td class="numeric">${formatNumber(o.verifiedHits + o.unverifiedHits)}</td>
+      <td class="numeric">${formatNumber(o.userFetchHits)}</td>
       <td class="numeric">${formatNumber(o.referralArrivals)}</td>
     </tr>`).join("");
     return section(
@@ -5470,6 +5474,11 @@ function renderServerActivity(report, audience) {
           <div class="value">${formatNumber(crawlerRequests.current)}</div>
           <div class="subtitle">${crawlerSubtitle}</div>
         </div>
+        <div class="metric">
+          <div class="label">AI user-fetch requests</div>
+          <div class="value">${formatNumber(sa.aiUserFetchHits.current)}</div>
+          <div class="subtitle">${userFetchSubtitle}</div>
+        </div>
         <div class="metric">
           <div class="label">AI referral sessions</div>
           <div class="value">${formatNumber(sa.referralArrivals.current)}</div>
@@ -5478,10 +5487,10 @@ function renderServerActivity(report, audience) {
       </div>
       ${clientOperatorRows ? `<div class="chart-card"><h3>By AI tool</h3>
         <table class="report-table">
-          <thead><tr><th>AI tool</th><th class="numeric">Bot requests (7d)</th><th class="numeric">Referral sessions</th></tr></thead>
+          <thead><tr><th>AI tool</th><th class="numeric">Bot requests (7d)</th><th class="numeric">User fetches (7d)</th><th class="numeric">Referral sessions</th></tr></thead>
           <tbody>${clientOperatorRows}</tbody>
         </table>
-        <p class="meta">Verified requests are reverse-DNS confirmed. Unverified requests are user-agent claims shown separately in agency diagnostics.</p>
+        <p class="meta">Bot requests are bulk crawl (GPTBot, PerplexityBot, \u2026). User fetches are on-demand reads triggered by real users inside an AI surface (ChatGPT-User, Perplexity-User, \u2026). Verified requests are reverse-DNS confirmed; unverified requests are UA claims shown separately in agency diagnostics.</p>
       </div>` : ""}`
     );
   }
@@ -5493,6 +5502,7 @@ function renderServerActivity(report, audience) {
       <td>${escapeHtml(o.operator)}</td>
       <td class="numeric">${formatNumber(o.verifiedHits)}</td>
       <td class="numeric meta">${formatNumber(o.unverifiedHits)}</td>
+      <td class="numeric">${formatNumber(o.userFetchHits)}</td>
       <td class="numeric">${formatNumber(o.referralArrivals)}</td>
       <td class="numeric ${toneClass}">${deltaText}</td>
     </tr>`;
@@ -5533,6 +5543,11 @@ function renderServerActivity(report, audience) {
         <div class="value">${formatNumber(sa.unverifiedCrawlerHits.current)}</div>
         <div class="subtitle">${formatDelta(sa.unverifiedCrawlerHits, "hits")}</div>
       </div>
+      <div class="metric">
+        <div class="label">AI user-fetch hits (7d)</div>
+        <div class="value">${formatNumber(sa.aiUserFetchHits.current)}</div>
+        <div class="subtitle">${formatDelta(sa.aiUserFetchHits, "hits")}</div>
+      </div>
       <div class="metric">
         <div class="label">AI-referral sessions (7d)</div>
         <div class="value">${formatNumber(sa.referralArrivals.current)}</div>
@@ -5541,9 +5556,9 @@ function renderServerActivity(report, audience) {
     </div>
     ${trendChart}
     ${operatorRows ? `<div class="chart-card"><h3>Per AI operator</h3>
-      <p class="meta">Verified means rDNS-confirmed. Unverified bots claim the user-agent but couldn't be verified \u2014 could be the real bot or an imitator.</p>
+      <p class="meta">Verified means rDNS-confirmed. Unverified bots claim the user-agent but couldn't be verified \u2014 could be the real bot or an imitator. User fetches are on-demand reads from an AI surface on behalf of a real user (ChatGPT-User, Perplexity-User, \u2026) \u2014 disjoint from bulk crawl.</p>
       <table class="report-table">
-        <thead><tr><th>Operator</th><th class="numeric">Verified hits</th><th class="numeric">Unverified</th><th class="numeric">Referral sessions</th><th class="numeric">7d delta</th></tr></thead>
+        <thead><tr><th>Operator</th><th class="numeric">Verified hits</th><th class="numeric">Unverified</th><th class="numeric">User fetches</th><th class="numeric">Referral sessions</th><th class="numeric">7d delta</th></tr></thead>
         <tbody>${operatorRows}</tbody>
       </table>
     </div>` : ""}
@@ -6385,10 +6400,21 @@ function buildServerActivity(db, projectId) {
       )
     ).get()?.total ?? 0
   );
+  const sumUserFetches = (windowStartIso, windowEndIso, exclusiveEnd = false) => Number(
+    db.select({ total: sql5`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
+      and9(
+        eq14(aiUserFetchEventsHourly.projectId, projectId),
+        gte2(aiUserFetchEventsHourly.tsHour, windowStartIso),
+        exclusiveEnd ? lt(aiUserFetchEventsHourly.tsHour, windowEndIso) : lte(aiUserFetchEventsHourly.tsHour, windowEndIso)
+      )
+    ).get()?.total ?? 0
+  );
   const verifiedCurrent = sumVerifiedCrawlers(headlineStart, headlineEnd);
   const verifiedPrior = sumVerifiedCrawlers(priorStart, headlineStart, true);
   const unverifiedCurrent = sumUnverifiedCrawlers(headlineStart, headlineEnd);
   const unverifiedPrior = sumUnverifiedCrawlers(priorStart, headlineStart, true);
+  const userFetchCurrent = sumUserFetches(headlineStart, headlineEnd);
+  const userFetchPrior = sumUserFetches(priorStart, headlineStart, true);
   const referralCurrent = sumReferrals(headlineStart, headlineEnd);
   const referralPrior = sumReferrals(priorStart, headlineStart, true);
   const crawlerByOperatorRows = db.select({
@@ -6424,11 +6450,21 @@ function buildServerActivity(db, projectId) {
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(aiReferralEventsHourly.operator).all();
+  const userFetchByOperatorRows = db.select({
+    operator: aiUserFetchEventsHourly.operator,
+    hits: sql5`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)`
+  }).from(aiUserFetchEventsHourly).where(
+    and9(
+      eq14(aiUserFetchEventsHourly.projectId, projectId),
+      gte2(aiUserFetchEventsHourly.tsHour, headlineStart),
+      lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
+    )
+  ).groupBy(aiUserFetchEventsHourly.operator).all();
   const operatorAgg = /* @__PURE__ */ new Map();
   const ensureOp = (op) => {
     let entry = operatorAgg.get(op);
     if (!entry) {
-      entry = { verified: 0, unverified: 0, referrals: 0, prior: 0 };
+      entry = { verified: 0, unverified: 0, userFetch: 0, referrals: 0, prior: 0 };
       operatorAgg.set(op, entry);
     }
     return entry;
@@ -6441,6 +6477,9 @@ function buildServerActivity(db, projectId) {
   for (const r of crawlerByOperatorPriorRows) {
     ensureOp(r.operator).prior += Number(r.hits);
   }
+  for (const r of userFetchByOperatorRows) {
+    ensureOp(r.operator).userFetch += Number(r.hits);
+  }
   for (const r of referralByOperatorRows) {
     ensureOp(r.operator).referrals += Number(r.hits);
   }
@@ -6448,10 +6487,11 @@ function buildServerActivity(db, projectId) {
     operator,
     verifiedHits: v.verified,
     unverifiedHits: v.unverified,
+    userFetchHits: v.userFetch,
     referralArrivals: v.referrals,
     deltaPct: deltaPercent(v.verified, v.prior)
   })).sort(
-    (a, b) => b.verifiedHits - a.verifiedHits || b.unverifiedHits - a.unverifiedHits || b.referralArrivals - a.referralArrivals
+    (a, b) => b.verifiedHits - a.verifiedHits || b.userFetchHits - a.userFetchHits || b.unverifiedHits - a.unverifiedHits || b.referralArrivals - a.referralArrivals
   );
   const topPathsRows = db.select({
     path: crawlerEventsHourly.pathNormalized,
@@ -6526,14 +6566,30 @@ function buildServerActivity(db, projectId) {
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(sql5`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`).all();
+  const userFetchTrendRows = db.select({
+    date: sql5`SUBSTR(${aiUserFetchEventsHourly.tsHour}, 1, 10)`,
+    hits: sql5`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)`
+  }).from(aiUserFetchEventsHourly).where(
+    and9(
+      eq14(aiUserFetchEventsHourly.projectId, projectId),
+      gte2(aiUserFetchEventsHourly.tsHour, trendStart),
+      lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
+    )
+  ).groupBy(sql5`SUBSTR(${aiUserFetchEventsHourly.tsHour}, 1, 10)`).all();
+  const emptyTrendEntry = () => ({ verifiedCrawlerHits: 0, userFetchHits: 0, referralArrivals: 0 });
   const dailyTrendMap = /* @__PURE__ */ new Map();
   for (const r of crawlerTrendRows) {
-    const e = dailyTrendMap.get(r.date) ?? { verifiedCrawlerHits: 0, referralArrivals: 0 };
+    const e = dailyTrendMap.get(r.date) ?? emptyTrendEntry();
     e.verifiedCrawlerHits += Number(r.hits);
     dailyTrendMap.set(r.date, e);
   }
+  for (const r of userFetchTrendRows) {
+    const e = dailyTrendMap.get(r.date) ?? emptyTrendEntry();
+    e.userFetchHits += Number(r.hits);
+    dailyTrendMap.set(r.date, e);
+  }
   for (const r of referralTrendRows) {
-    const e = dailyTrendMap.get(r.date) ?? { verifiedCrawlerHits: 0, referralArrivals: 0 };
+    const e = dailyTrendMap.get(r.date) ?? emptyTrendEntry();
     e.referralArrivals += Number(r.hits);
     dailyTrendMap.set(r.date, e);
   }
@@ -6541,7 +6597,7 @@ function buildServerActivity(db, projectId) {
   return {
     windowStart: headlineStart,
     windowEnd: headlineEnd,
-    hasData: verifiedCurrent + unverifiedCurrent + referralCurrent + verifiedPrior + unverifiedPrior + referralPrior > 0 || byOperator.length > 0 || topCrawledPaths.length > 0 || referralProducts.length > 0,
+    hasData: verifiedCurrent + unverifiedCurrent + userFetchCurrent + referralCurrent + verifiedPrior + unverifiedPrior + userFetchPrior + referralPrior > 0 || byOperator.length > 0 || topCrawledPaths.length > 0 || referralProducts.length > 0,
     verifiedCrawlerHits: {
       current: verifiedCurrent,
       prior: verifiedPrior,
@@ -6552,6 +6608,11 @@ function buildServerActivity(db, projectId) {
       prior: unverifiedPrior,
       deltaPct: deltaPercent(unverifiedCurrent, unverifiedPrior)
     },
+    aiUserFetchHits: {
+      current: userFetchCurrent,
+      prior: userFetchPrior,
+      deltaPct: deltaPercent(userFetchCurrent, userFetchPrior)
+    },
     referralArrivals: {
       current: referralCurrent,
       prior: referralPrior,
@@ -11458,14 +11519,14 @@ var routeCatalog = [
   {
     method: "get",
     path: "/api/v1/projects/{name}/traffic/events",
-    summary: "List rolled-up crawler hits and AI-referral sessions within a window",
-    description: "Returns hourly rollup rows from `crawler_events_hourly` and `ai_referral_events_hourly`. Defaults to the last 24h. Totals reflect the full window; the `events` array is capped by `limit` (default 500, max 5000).",
+    summary: "List rolled-up crawler hits, AI user-fetch hits, and AI-referral sessions within a window",
+    description: "Returns hourly rollup rows from `crawler_events_hourly`, `ai_user_fetch_events_hourly`, and `ai_referral_events_hourly`. Defaults to the last 24h. Totals reflect the full window; the `events` array is capped by `limit` (default 500, max 5000).",
     tags: ["traffic"],
     parameters: [
       nameParameter,
       { name: "since", in: "query", description: "ISO-8601 window start (defaults to 24h ago).", schema: stringSchema },
       { name: "until", in: "query", description: "ISO-8601 window end (defaults to now).", schema: stringSchema },
-      { name: "kind", in: "query", description: 'Filter to "crawler", "ai-referral", or "all" (default).', schema: stringSchema },
+      { name: "kind", in: "query", description: 'Filter to "crawler", "ai-user-fetch", "ai-referral", or "all" (default).', schema: stringSchema },
       { name: "limit", in: "query", description: "Max rows per kind in the events array (default 500, max 5000).", schema: stringSchema },
       { name: "sourceId", in: "query", description: "Restrict to a single traffic source.", schema: stringSchema }
     ],
@@ -19168,6 +19229,74 @@ var chatgpt_user_default = {
   ]
 };
 
+// ../integration-traffic/src/ip-ranges/google-user-triggered-agents.json
+var google_user_triggered_agents_default = {
+  _source: "https://developers.google.com/static/crawling/ipranges/user-triggered-agents.json",
+  creationTime: "2026-05-19T14:46:15.000000",
+  prefixes: [
+    {
+      ipv6Prefix: "2001:4860:c::/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::10/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::20/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::30/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::40/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::50/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::60/124"
+    },
+    {
+      ipv6Prefix: "2001:4860:c::70/124"
+    },
+    {
+      ipv4Prefix: "136.121.16.0/24"
+    },
+    {
+      ipv4Prefix: "136.121.24.0/21"
+    },
+    {
+      ipv4Prefix: "136.121.40.0/21"
+    },
+    {
+      ipv4Prefix: "136.122.0.0/16"
+    },
+    {
+      ipv4Prefix: "74.125.232.0/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.112/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.16/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.32/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.48/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.64/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.80/28"
+    },
+    {
+      ipv4Prefix: "74.125.232.96/28"
+    }
+  ]
+};
+
 // ../integration-traffic/src/ip-ranges/googlebot.json
 var googlebot_default = {
   _source: "https://developers.google.com/static/search/apis/ipranges/googlebot.json",
@@ -20366,6 +20495,12 @@ var RULE_ID_TO_RANGES = {
   // (also covers Copilot grounding — Microsoft routes Copilot's
   // web fetches through bingbot infrastructure)
   "bingbot": bingbot_default,
+  // Google-Agent — Google's agentic user-triggered fetcher (Project
+  // Mariner et al.). Verified against Google's user-triggered-agents
+  // list, which covers every Google user-triggered fetcher collectively
+  // (Google publishes no per-fetcher split).
+  // src: https://developers.google.com/static/crawling/ipranges/user-triggered-agents.json
+  "google-agent": google_user_triggered_agents_default,
   // Perplexity — split between crawler and user-on-behalf fetcher,
   // same shape as OpenAI's split.
   // src: https://www.perplexity.ai/perplexitybot.json
@@ -20377,10 +20512,12 @@ var RULE_ID_TO_RANGES = {
   // PBC at ARIN (the authoritative allocation record). Maintained by
   // hand; refresh by re-querying the ARIN entity below. The crawler
   // block is AWS-ANTHROPIC 216.73.216.0/22 — empirical Cloud Run
-  // logs show all real ClaudeBot traffic comes from there. Same raw
-  // set is shared across every Claude-* UA the classifier emits.
+  // logs show all real ClaudeBot traffic comes from there. The same
+  // raw set is shared across every Claude-* UA the classifier emits:
+  // both the training crawler and the per-user fetcher map here.
   // src: https://rdap.arin.net/registry/entity/AP-2440
-  "anthropic-claudebot": anthropic_default
+  "anthropic-claudebot": anthropic_default,
+  "claude-user": anthropic_default
 };
 var CACHE = (() => {
   const cache = /* @__PURE__ */ new Map();
@@ -20492,9 +20629,11 @@ var DEFAULT_AI_CRAWLER_RULES = [
     // Anthropic ships several Claude-* crawlers (ClaudeBot for training,
     // Claude-Web for chat fetches, Claude-SearchBot for search). The
     // `Claude-` prefix + `Bot/` suffix is the stable shape — pattern is
-    // permissive enough to catch new Claude-* variants as Anthropic
+    // permissive enough to catch new Claude-*Bot variants as Anthropic
     // adds them, without matching unrelated UAs that happen to mention
-    // "claude".
+    // "claude". The per-user fetcher `Claude-User` has no `Bot/` suffix
+    // and is intentionally NOT matched here — it routes through the
+    // separate `claude-user` rule below (purpose: 'user-agent').
     userAgentPatterns: [
       /ClaudeBot\//i,
       /Claude-Web\//i,
@@ -20503,6 +20642,21 @@ var DEFAULT_AI_CRAWLER_RULES = [
       /anthropic-ai/i
     ]
   },
+  {
+    // Anthropic's on-behalf-of-user fetcher: Claude fetches a URL when
+    // a person asks about it mid-conversation (citation click, "read
+    // this page" prompt). Distinct from ClaudeBot (training crawl) —
+    // same operator, opposite operational signal, mirroring OpenAI's
+    // GPTBot vs. ChatGPT-User split. The `anthropic-claudebot` rule
+    // above does not match `Claude-User/` (its `Claude-[A-Z]+Bot/`
+    // pattern needs a `Bot/` suffix), so this is the only rule that
+    // routes it — into the user-fetch bucket, not bulk crawl.
+    id: "claude-user",
+    operator: "Anthropic",
+    product: "Claude-User",
+    purpose: "user-agent",
+    userAgentPatterns: [/Claude-User\//i]
+  },
   {
     id: "perplexity-bot",
     operator: "Perplexity",
@@ -20528,6 +20682,21 @@ var DEFAULT_AI_CRAWLER_RULES = [
     purpose: "training-control",
     userAgentPatterns: [/Google-Extended/i]
   },
+  {
+    // Google-Agent: agents on Google infrastructure that navigate the
+    // web and act "upon user request" (e.g. Project Mariner) — a
+    // user-driven fetch, routed to the user-fetch bucket. Google ships
+    // no distinct Gemini fetch UA (`Google-Extended` above is a
+    // robots.txt control token, not a request UA), so this is the
+    // closest Google equivalent to ChatGPT-User. The UA is browser-like
+    // with a `compatible; Google-Agent;` token. IP ranges:
+    // user-triggered-agents.json.
+    id: "google-agent",
+    operator: "Google",
+    product: "Google-Agent",
+    purpose: "user-agent",
+    userAgentPatterns: [/Google-Agent/i]
+  },
   {
     id: "bytespider",
     operator: "ByteDance",
@@ -20582,16 +20751,23 @@ var DEFAULT_AI_CRAWLER_RULES = [
     userAgentPatterns: [/Diffbot/i]
   },
   {
-    id: "mistral-ai",
+    // Per-user, on-demand fetches initiated by a Mistral user (citation
+    // click, "read this URL" prompt). Separate from MistralBot (crawl)
+    // so the dashboard's user-fetch vs. bulk-crawl split stays honest.
+    id: "mistral-ai-user",
     operator: "Mistral AI",
     product: "MistralAI-User",
+    purpose: "user-agent",
+    userAgentPatterns: [/MistralAI-User\//i]
+  },
+  {
+    // Mistral's general crawler. Distinct from MistralAI-User (per-user
+    // fetch) — same operator, different operational signal.
+    id: "mistral-bot",
+    operator: "Mistral AI",
+    product: "MistralBot",
     purpose: "crawl",
-    // Mistral ships both `MistralAI-User/*` (chat-on-behalf-of-user
-    // fetches) and `MistralBot/*` (general crawler). Earlier rule only
-    // matched `MistralAI` and missed the bot — caught on 2026-05-18
-    // when canonry.ai/canonry-landing's classification chart went flat
-    // and the bot UA was sitting in the `unknown` bucket.
-    userAgentPatterns: [/MistralAI/i, /MistralBot/i]
+    userAgentPatterns: [/MistralBot\//i]
   },
   {
     id: "deepseek",
@@ -20600,6 +20776,21 @@ var DEFAULT_AI_CRAWLER_RULES = [
     purpose: "training",
     userAgentPatterns: [/DeepSeekBot/i]
   },
+  {
+    id: "xai-grok-bot",
+    operator: "xAI",
+    product: "xAI-Bot",
+    purpose: "crawl",
+    // xAI documents its crawler at https://x.ai/bots/ as `xAI-Bot/<version>`.
+    // Operators have also observed `Grok-Bot/...` in production logs. xAI
+    // has been less consistent than OpenAI/Anthropic about publishing every
+    // UA variant they ship, so the pattern is intentionally permissive
+    // across the xAI/Grok family — better to over-match the operator than
+    // leave real hits in the `unknown` bucket. A separate `purpose:
+    // 'user-agent'` Grok rule can be added later if xAI ships a citation
+    // user-fetcher UA (the way OpenAI ships ChatGPT-User alongside GPTBot).
+    userAgentPatterns: [/xAI-Bot\//i, /Grok-Bot\//i, /GrokBot\//i]
+  },
   // Classic search-engine crawlers. Not strictly "AI" by training origin,
   // but the same audience: machine traffic indexing the site for query
   // surfaces. Operators tracking AI visibility want this signal too —
@@ -20662,12 +20853,14 @@ var DEFAULT_AI_REFERRER_RULES = [
   { domain: AI_ENGINE_DOMAINS.claude, operator: "Anthropic", product: "Claude" },
   { domain: AI_ENGINE_DOMAINS.gemini, operator: "Google", product: "Gemini" },
   { domain: AI_ENGINE_DOMAINS.copilotMicrosoft, operator: "Microsoft", product: "Copilot" },
+  { domain: AI_ENGINE_DOMAINS.grok, operator: "xAI", product: "Grok" },
   { domain: AI_ENGINE_DOMAINS.phind, operator: "Phind", product: "Phind" },
   { domain: AI_ENGINE_DOMAINS.you, operator: "You.com", product: "You.com" },
   { domain: AI_ENGINE_DOMAINS.metaAi, operator: "Meta", product: "Meta AI" }
 ];
 
 // ../integration-traffic/src/classifier.ts
+var USER_FETCH_PURPOSE = "user-agent";
 function normalizeHost(host) {
   return host.trim().toLowerCase().replace(/^www\./, "");
 }
@@ -20708,6 +20901,7 @@ function classifyCrawler(event) {
   const userAgent = event.userAgent?.trim();
   if (!userAgent) return null;
   for (const rule of DEFAULT_AI_CRAWLER_RULES) {
+    if (rule.purpose === USER_FETCH_PURPOSE) continue;
     if (rule.userAgentPatterns.some((pattern) => pattern.test(userAgent))) {
       const verified = verifyIpForRule(event.remoteIp, rule.id);
       return {
@@ -20722,6 +20916,24 @@ function classifyCrawler(event) {
   }
   return null;
 }
+function classifyAiUserFetch(event) {
+  const userAgent = event.userAgent?.trim();
+  if (!userAgent) return null;
+  for (const rule of DEFAULT_AI_CRAWLER_RULES) {
+    if (rule.purpose !== USER_FETCH_PURPOSE) continue;
+    if (rule.userAgentPatterns.some((pattern) => pattern.test(userAgent))) {
+      const verified = verifyIpForRule(event.remoteIp, rule.id);
+      return {
+        botId: rule.id,
+        operator: rule.operator,
+        product: rule.product,
+        verificationStatus: verified ? "verified" : "claimed_unverified",
+        matchedUserAgent: userAgent
+      };
+    }
+  }
+  return null;
+}
 function classifyAiReferral(event) {
   const refererHost = hostFromUrl(event.referer);
   if (refererHost) {
@@ -20864,6 +21076,9 @@ function strongerReferralEvidence(current, next) {
 function sortCrawlerBuckets(a, b) {
   return a.tsHour.localeCompare(b.tsHour) || a.botId.localeCompare(b.botId) || a.pathNormalized.localeCompare(b.pathNormalized) || String(a.status).localeCompare(String(b.status));
 }
+function sortAiUserFetchBuckets(a, b) {
+  return a.tsHour.localeCompare(b.tsHour) || a.botId.localeCompare(b.botId) || a.pathNormalized.localeCompare(b.pathNormalized) || String(a.status).localeCompare(String(b.status));
+}
 function sortReferralBuckets(a, b) {
   return a.tsHour.localeCompare(b.tsHour) || a.product.localeCompare(b.product) || a.sourceDomain.localeCompare(b.sourceDomain) || a.landingPathNormalized.localeCompare(b.landingPathNormalized) || String(a.status).localeCompare(String(b.status));
 }
@@ -20875,13 +21090,17 @@ function buildTrafficProbeReport(events, options = {}) {
   const configuredSessionWindowMs = options.aiReferralSessionWindowMs ?? DEFAULT_AI_REFERRAL_SESSION_WINDOW_MS;
   const aiReferralSessionWindowMs = configuredSessionWindowMs > 0 ? configuredSessionWindowMs : DEFAULT_AI_REFERRAL_SESSION_WINDOW_MS;
   const crawlerBuckets = /* @__PURE__ */ new Map();
+  const aiUserFetchBuckets = /* @__PURE__ */ new Map();
   const aiReferralBuckets = /* @__PURE__ */ new Map();
   const aiReferralSessions = /* @__PURE__ */ new Map();
   const topBots = /* @__PURE__ */ new Map();
   const topCrawlerPaths = /* @__PURE__ */ new Map();
+  const topAiUserFetchBots = /* @__PURE__ */ new Map();
+  const topAiUserFetchPaths = /* @__PURE__ */ new Map();
   const topAiReferrers = /* @__PURE__ */ new Map();
   const topAiReferralLandingPaths = /* @__PURE__ */ new Map();
   let crawlerHits = 0;
+  let aiUserFetchHits = 0;
   let aiReferralHits = 0;
   let unknownHits = 0;
   const samples = [];
@@ -20889,6 +21108,7 @@ function buildTrafficProbeReport(events, options = {}) {
     const tsHour = hourBucket(event.observedAt);
     const pathNormalized = normalizeTrafficPathPattern(event.path);
     const crawler = classifyCrawler(event);
+    const aiUserFetch = classifyAiUserFetch(event);
     const aiReferral = classifyAiReferral(event);
     if (crawler) {
       crawlerHits += 1;
@@ -20921,6 +21141,37 @@ function buildTrafficProbeReport(events, options = {}) {
       else topBots.set(botKey, { fields: { botId: crawler.botId, operator: crawler.operator }, hits: 1 });
       incrementBucket(topCrawlerPaths, pathNormalized, { pathNormalized });
     }
+    if (aiUserFetch) {
+      aiUserFetchHits += 1;
+      const key = [
+        tsHour,
+        aiUserFetch.botId,
+        aiUserFetch.verificationStatus,
+        pathNormalized,
+        event.status ?? "null"
+      ].join("	");
+      const existing = aiUserFetchBuckets.get(key);
+      if (existing) {
+        existing.hits += 1;
+      } else {
+        aiUserFetchBuckets.set(key, {
+          tsHour,
+          botId: aiUserFetch.botId,
+          operator: aiUserFetch.operator,
+          product: aiUserFetch.product,
+          verificationStatus: aiUserFetch.verificationStatus,
+          pathNormalized,
+          status: event.status,
+          hits: 1,
+          sampledUserAgent: event.userAgent
+        });
+      }
+      const botKey = `${aiUserFetch.botId}	${aiUserFetch.operator}`;
+      const botEntry = topAiUserFetchBots.get(botKey);
+      if (botEntry) botEntry.hits += 1;
+      else topAiUserFetchBots.set(botKey, { fields: { botId: aiUserFetch.botId, operator: aiUserFetch.operator }, hits: 1 });
+      incrementBucket(topAiUserFetchPaths, pathNormalized, { pathNormalized });
+    }
     if (aiReferral) {
       aiReferralHits += 1;
       const landingPathNormalized = resolveAiReferralLandingPath(event, aiReferral.evidenceType);
@@ -20939,7 +21190,7 @@ function buildTrafficProbeReport(events, options = {}) {
         aiReferralSessions.set(key, existing ? strongerReferralEvidence(existing, session) : session);
       }
     }
-    if (!crawler && !aiReferral) unknownHits += 1;
+    if (!crawler && !aiUserFetch && !aiReferral) unknownHits += 1;
     samples.push({
       eventId: event.eventId,
       observedAt: event.observedAt,
@@ -20950,6 +21201,7 @@ function buildTrafficProbeReport(events, options = {}) {
       userAgent: event.userAgent,
       referer: event.referer,
       crawler,
+      aiUserFetch,
       aiReferral
     });
     if (samples.length > sampleLimit) samples.shift();
@@ -20985,14 +21237,18 @@ function buildTrafficProbeReport(events, options = {}) {
     totals: {
       normalizedEvents: events.length,
       crawlerHits,
+      aiUserFetchHits,
       aiReferralSessions: aiReferralSessions.size,
       aiReferralHits,
       unknownHits
     },
     crawlerEventsHourly: [...crawlerBuckets.values()].sort(sortCrawlerBuckets),
+    aiUserFetchEventsHourly: [...aiUserFetchBuckets.values()].sort(sortAiUserFetchBuckets),
     aiReferralEventsHourly: [...aiReferralBuckets.values()].sort(sortReferralBuckets),
     topBots: topEntries(topBots, 10),
     topCrawlerPaths: topEntries(topCrawlerPaths, 10),
+    topAiUserFetchBots: topEntries(topAiUserFetchBots, 10),
+    topAiUserFetchPaths: topEntries(topAiUserFetchPaths, 10),
     topAiReferrers: topEntries(topAiReferrers, 10),
     topAiReferralLandingPaths: topEntries(topAiReferralLandingPaths, 10),
     samples
@@ -21004,6 +21260,9 @@ function incrementBucket(map, key, fields) {
   else map.set(key, { fields, hits: 1 });
 }
 
+// ../integration-wordpress-traffic/src/client.ts
+import { randomUUID } from "crypto";
+
 // ../integration-wordpress-traffic/src/normalize.ts
 function trimOrNull(value) {
   if (value === null || value === void 0) return null;
@@ -21034,7 +21293,7 @@ function normalizeWordpressTrafficEvent(event) {
     queryString,
     status: typeof event.status === "number" && Number.isFinite(event.status) ? event.status : null,
     userAgent: trimOrNull(event.user_agent),
-    remoteIp: trimOrNull(event.remote_ip_hash),
+    remoteIp: trimOrNull(event.remote_ip),
     referer: trimOrNull(event.referer),
     latencyMs: null,
     requestSizeBytes: null,
@@ -21117,11 +21376,13 @@ async function listWordpressTrafficEvents(options) {
     if (options.until !== void 0 && options.until !== "") {
       url.searchParams.set("until", options.until);
     }
+    url.searchParams.set("_cb", randomUUID());
     const response = await fetch(url, {
       method: "GET",
       headers: {
         Authorization: authHeader,
-        Accept: "application/json"
+        Accept: "application/json",
+        "Cache-Control": "no-cache"
       },
       signal: AbortSignal.timeout(timeoutMs)
     });
@@ -21434,6 +21695,13 @@ async function runBackfillTask(options) {
           lte2(crawlerEventsHourly.tsHour, windowEndIso)
         )
       ).run();
+      tx.delete(aiUserFetchEventsHourly).where(
+        and19(
+          eq24(aiUserFetchEventsHourly.sourceId, sourceRow.id),
+          gte3(aiUserFetchEventsHourly.tsHour, windowStartIso),
+          lte2(aiUserFetchEventsHourly.tsHour, windowEndIso)
+        )
+      ).run();
       tx.delete(aiReferralEventsHourly).where(
         and19(
           eq24(aiReferralEventsHourly.sourceId, sourceRow.id),
@@ -21464,6 +21732,22 @@ async function runBackfillTask(options) {
           updatedAt: finishedAt
         }).run();
       }
+      for (const bucket of report.aiUserFetchEventsHourly) {
+        tx.insert(aiUserFetchEventsHourly).values({
+          projectId: project.id,
+          sourceId: sourceRow.id,
+          tsHour: bucket.tsHour,
+          botId: bucket.botId,
+          operator: bucket.operator,
+          verificationStatus: bucket.verificationStatus,
+          pathNormalized: bucket.pathNormalized,
+          status: bucket.status ?? 0,
+          hits: bucket.hits,
+          sampledUserAgent: bucket.sampledUserAgent,
+          createdAt: finishedAt,
+          updatedAt: finishedAt
+        }).run();
+      }
       for (const bucket of report.aiReferralEventsHourly) {
         tx.insert(aiReferralEventsHourly).values({
           projectId: project.id,
@@ -21482,7 +21766,7 @@ async function runBackfillTask(options) {
         }).run();
       }
       for (const sample of report.samples) {
-        const eventType = sample.crawler ? "crawler" : sample.aiReferral ? "ai_referral" : "unknown";
+        const eventType = sample.crawler ? "crawler" : sample.aiUserFetch ? "ai_user_fetch" : sample.aiReferral ? "ai_referral" : "unknown";
         const refererHost = (() => {
           if (!sample.referer) return null;
           try {
@@ -21504,6 +21788,7 @@ async function runBackfillTask(options) {
           refererHost,
           classifierDetailsJson: {
             crawler: sample.crawler,
+            aiUserFetch: sample.aiUserFetch,
             aiReferral: sample.aiReferral
           },
           createdAt: finishedAt
@@ -21813,6 +22098,7 @@ async function trafficRoutes(app, opts) {
           sourceId: sourceRow.id,
           pulledEvents: 0,
           crawlerHits: 0,
+          aiUserFetchHits: 0,
           aiReferralHits: 0,
           durationMs: Date.now() - syncStartedAtMs,
           errorCode
@@ -21964,11 +22250,13 @@ async function trafficRoutes(app, opts) {
       allEvents = page.events;
     }
     let crawlerBucketRows = 0;
+    let aiUserFetchBucketRows = 0;
     let aiReferralBucketRows = 0;
     let sampleRows = 0;
     let finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     let pulledEventsCount = 0;
     let crawlerHitsCount = 0;
+    let aiUserFetchHitsCount = 0;
     let aiReferralHitsCount = 0;
     let unknownHitsCount = 0;
     app.db.transaction((tx) => {
@@ -21990,6 +22278,7 @@ async function trafficRoutes(app, opts) {
       finishedAt = (/* @__PURE__ */ new Date()).toISOString();
       pulledEventsCount = report.totals.normalizedEvents;
       crawlerHitsCount = report.totals.crawlerHits;
+      aiUserFetchHitsCount = report.totals.aiUserFetchHits;
       aiReferralHitsCount = report.totals.aiReferralHits;
       unknownHitsCount = report.totals.unknownHits;
       for (const bucket of report.crawlerEventsHourly) {
@@ -22025,6 +22314,39 @@ async function trafficRoutes(app, opts) {
         }).run();
         crawlerBucketRows += 1;
       }
+      for (const bucket of report.aiUserFetchEventsHourly) {
+        const status = bucket.status ?? 0;
+        tx.insert(aiUserFetchEventsHourly).values({
+          projectId: project.id,
+          sourceId: sourceRow.id,
+          tsHour: bucket.tsHour,
+          botId: bucket.botId,
+          operator: bucket.operator,
+          verificationStatus: bucket.verificationStatus,
+          pathNormalized: bucket.pathNormalized,
+          status,
+          hits: bucket.hits,
+          sampledUserAgent: bucket.sampledUserAgent,
+          createdAt: finishedAt,
+          updatedAt: finishedAt
+        }).onConflictDoUpdate({
+          target: [
+            aiUserFetchEventsHourly.projectId,
+            aiUserFetchEventsHourly.sourceId,
+            aiUserFetchEventsHourly.tsHour,
+            aiUserFetchEventsHourly.botId,
+            aiUserFetchEventsHourly.verificationStatus,
+            aiUserFetchEventsHourly.pathNormalized,
+            aiUserFetchEventsHourly.status
+          ],
+          set: {
+            hits: sql10`${aiUserFetchEventsHourly.hits} + ${bucket.hits}`,
+            sampledUserAgent: bucket.sampledUserAgent,
+            updatedAt: finishedAt
+          }
+        }).run();
+        aiUserFetchBucketRows += 1;
+      }
       for (const bucket of report.aiReferralEventsHourly) {
         const status = bucket.status ?? 0;
         tx.insert(aiReferralEventsHourly).values({
@@ -22060,7 +22382,7 @@ async function trafficRoutes(app, opts) {
         aiReferralBucketRows += 1;
       }
       for (const sample of report.samples) {
-        const eventType = sample.crawler ? "crawler" : sample.aiReferral ? "ai_referral" : "unknown";
+        const eventType = sample.crawler ? "crawler" : sample.aiUserFetch ? "ai_user_fetch" : sample.aiReferral ? "ai_referral" : "unknown";
         const refererHost = (() => {
           if (!sample.referer) return null;
           try {
@@ -22082,6 +22404,7 @@ async function trafficRoutes(app, opts) {
           refererHost,
           classifierDetailsJson: {
             crawler: sample.crawler,
+            aiUserFetch: sample.aiUserFetch,
             aiReferral: sample.aiReferral
           },
           createdAt: finishedAt
@@ -22119,6 +22442,7 @@ async function trafficRoutes(app, opts) {
         sourceId: sourceRow.id,
         pulledEvents: pulledEventsCount,
         crawlerHits: crawlerHitsCount,
+        aiUserFetchHits: aiUserFetchHitsCount,
         aiReferralHits: aiReferralHitsCount,
         durationMs: Date.now() - syncStartedAtMs
       });
@@ -22130,9 +22454,11 @@ async function trafficRoutes(app, opts) {
       syncedAt: finishedAt,
       pulledEvents: pulledEventsCount,
       crawlerHits: crawlerHitsCount,
+      aiUserFetchHits: aiUserFetchHitsCount,
       aiReferralHits: aiReferralHitsCount,
       unknownHits: unknownHitsCount,
       crawlerBucketRows,
+      aiUserFetchBucketRows,
       aiReferralBucketRows,
       sampleRows,
       windowStart: windowStart.toISOString(),
@@ -22311,6 +22637,12 @@ async function trafficRoutes(app, opts) {
         gte3(crawlerEventsHourly.tsHour, since)
       )
     ).get();
+    const aiUserFetchTotals = app.db.select({ total: sql10`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
+      and19(
+        eq24(aiUserFetchEventsHourly.sourceId, row.id),
+        gte3(aiUserFetchEventsHourly.tsHour, since)
+      )
+    ).get();
     const aiTotals = app.db.select({ total: sql10`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
       and19(
         eq24(aiReferralEventsHourly.sourceId, row.id),
@@ -22334,6 +22666,7 @@ async function trafficRoutes(app, opts) {
       ...rowToDto(row),
       totals24h: {
         crawlerHits: Number(crawlerTotals?.total ?? 0),
+        aiUserFetchHits: Number(aiUserFetchTotals?.total ?? 0),
         aiReferralHits: Number(aiTotals?.total ?? 0),
         sampleCount: Number(sampleTotals?.total ?? 0)
       },
@@ -22393,10 +22726,12 @@ async function trafficRoutes(app, opts) {
     const kindParam = request.query?.kind;
     let kind = "all";
     if (kindParam !== void 0) {
-      if (kindParam === "all" || kindParam === TrafficEventKinds.crawler || kindParam === TrafficEventKinds["ai-referral"]) {
+      if (kindParam === "all" || kindParam === TrafficEventKinds.crawler || kindParam === TrafficEventKinds["ai-user-fetch"] || kindParam === TrafficEventKinds["ai-referral"]) {
         kind = kindParam;
       } else {
-        throw validationError(`"kind" must be one of: all, ${TrafficEventKinds.crawler}, ${TrafficEventKinds["ai-referral"]}`);
+        throw validationError(
+          `"kind" must be one of: all, ${TrafficEventKinds.crawler}, ${TrafficEventKinds["ai-user-fetch"]}, ${TrafficEventKinds["ai-referral"]}`
+        );
       }
     }
     const limitParam = request.query?.limit;
@@ -22410,6 +22745,7 @@ async function trafficRoutes(app, opts) {
     const untilIso = until.toISOString();
     const events = [];
     let crawlerTotal = 0;
+    let aiUserFetchTotal = 0;
     let aiReferralTotal = 0;
     if (kind === "all" || kind === TrafficEventKinds.crawler) {
       const crawlerFilters = [
@@ -22436,6 +22772,31 @@ async function trafficRoutes(app, opts) {
         });
       }
     }
+    if (kind === "all" || kind === TrafficEventKinds["ai-user-fetch"]) {
+      const userFetchFilters = [
+        eq24(aiUserFetchEventsHourly.projectId, project.id),
+        gte3(aiUserFetchEventsHourly.tsHour, sinceIso),
+        lte2(aiUserFetchEventsHourly.tsHour, untilIso)
+      ];
+      if (sourceIdParam) userFetchFilters.push(eq24(aiUserFetchEventsHourly.sourceId, sourceIdParam));
+      const userFetchWhere = and19(...userFetchFilters);
+      const total = app.db.select({ total: sql10`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(userFetchWhere).get();
+      aiUserFetchTotal = Number(total?.total ?? 0);
+      const rows = app.db.select().from(aiUserFetchEventsHourly).where(userFetchWhere).orderBy(desc13(aiUserFetchEventsHourly.tsHour)).limit(limit).all();
+      for (const r of rows) {
+        events.push({
+          kind: TrafficEventKinds["ai-user-fetch"],
+          sourceId: r.sourceId,
+          tsHour: r.tsHour,
+          botId: r.botId,
+          operator: r.operator,
+          verificationStatus: r.verificationStatus,
+          pathNormalized: r.pathNormalized,
+          status: r.status,
+          hits: r.hits
+        });
+      }
+    }
     if (kind === "all" || kind === TrafficEventKinds["ai-referral"]) {
       const aiFilters = [
         eq24(aiReferralEventsHourly.projectId, project.id),
@@ -22469,6 +22830,7 @@ async function trafficRoutes(app, opts) {
       windowEnd: untilIso,
       totals: {
         crawlerHits: crawlerTotal,
+        aiUserFetchHits: aiUserFetchTotal,
         aiReferralHits: aiReferralTotal
       },
       events: trimmed
@@ -23542,6 +23904,76 @@ var TRAFFIC_SOURCE_CHECKS = [
   scopesCheck2
 ];
 
+// ../api-routes/src/doctor/checks/wordpress-publish.ts
+var WORDPRESS_PUBLISH_CHECKS = [
+  {
+    id: "wordpress.publish.connection",
+    category: CheckCategories.auth,
+    scope: CheckScopes.project,
+    title: "WordPress publishing connection",
+    run: async (ctx) => {
+      if (!ctx.project) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "wordpress.publish.no-project",
+          summary: "Project context required.",
+          remediation: null
+        };
+      }
+      const store = ctx.wordpressConnectionStore;
+      if (!store) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "wordpress.publish.store-unavailable",
+          summary: "WordPress connection store is not configured for this deployment.",
+          remediation: null
+        };
+      }
+      const connection = store.getConnection(ctx.project.name);
+      if (!connection) {
+        return {
+          status: CheckStatuses.skipped,
+          code: "wordpress.publish.not-configured",
+          summary: `No WordPress publishing connection configured for ${ctx.project.name}.`,
+          remediation: `If this project publishes to WordPress, run \`canonry wordpress connect ${ctx.project.name} --url <url> --user <user>\`.`
+        };
+      }
+      try {
+        const status = await verifyWordpressConnection(connection);
+        return {
+          status: CheckStatuses.ok,
+          code: "wordpress.publish.connected",
+          summary: `WordPress publishing connection verified; wp/v2 REST API reachable at ${status.url}.`,
+          remediation: null,
+          details: {
+            url: status.url,
+            wordpressVersion: status.version,
+            pageCount: status.pageCount
+          }
+        };
+      } catch (err) {
+        if (err instanceof WordpressApiError && err.code === "AUTH_INVALID") {
+          return {
+            status: CheckStatuses.fail,
+            code: "wordpress.publish.unauthorized",
+            summary: "WordPress rejected the stored application password.",
+            remediation: `Regenerate the Application Password in wp-admin (Users \u2192 Profile \u2192 Application Passwords), then reconnect with \`canonry wordpress connect ${ctx.project.name} --url <url> --user <user>\`.`,
+            details: { error: err.message }
+          };
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          status: CheckStatuses.fail,
+          code: "wordpress.publish.verification-failed",
+          summary: "WordPress publishing connection could not be verified.",
+          remediation: "Confirm the site URL is correct and the WordPress REST API is reachable.",
+          details: { error: message }
+        };
+      }
+    }
+  }
+];
+
 // ../api-routes/src/doctor/registry.ts
 var ALL_CHECKS = [
   // Runtime-state checks run first so file-system gone errors surface
@@ -23549,6 +23981,7 @@ var ALL_CHECKS = [
   ...RUNTIME_STATE_CHECKS,
   ...GOOGLE_AUTH_CHECKS,
   ...BING_AUTH_CHECKS,
+  ...WORDPRESS_PUBLISH_CHECKS,
   ...GA_AUTH_CHECKS,
   ...PROVIDERS_CHECKS,
   ...TRAFFIC_SOURCE_CHECKS,
@@ -23633,6 +24066,7 @@ async function doctorRoutes(app, opts) {
       project: null,
       googleConnectionStore: opts.googleConnectionStore,
       bingConnectionStore: opts.bingConnectionStore,
+      wordpressConnectionStore: opts.wordpressConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       redirectUri,
@@ -23655,6 +24089,7 @@ async function doctorRoutes(app, opts) {
       },
       googleConnectionStore: opts.googleConnectionStore,
       bingConnectionStore: opts.bingConnectionStore,
+      wordpressConnectionStore: opts.wordpressConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       redirectUri,
@@ -24283,6 +24718,7 @@ async function apiRoutes(app, opts) {
     await api.register(doctorRoutes, {
       googleConnectionStore: opts.googleConnectionStore,
       bingConnectionStore: opts.bingConnectionStore,
+      wordpressConnectionStore: opts.wordpressConnectionStore,
       ga4CredentialStore: opts.ga4CredentialStore,
       getGoogleAuthConfig: opts.getGoogleAuthConfig,
       publicUrl: opts.publicUrl,
@@ -29445,7 +29881,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-2XL2M7QP.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-OCREQUCQ.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -29860,42 +30296,74 @@ async function backfillTrafficClassificationCommand(opts) {
       providerResource: { type: "cloud_run_revision", labels: {} },
       providerLabels: {}
     };
-    const classified = classifyCrawler(probe);
+    const userFetch = classifyAiUserFetch(probe);
+    const classified = userFetch ?? classifyCrawler(probe);
     if (!classified) continue;
     result.reclassified++;
     result.byBot[classified.botId] = (result.byBot[classified.botId] ?? 0) + 1;
     if (isDryRun) continue;
-    db.update(rawEventSamples).set({ eventType: TrafficEventKinds.crawler }).where(eq35(rawEventSamples.id, snap.id)).run();
+    db.update(rawEventSamples).set({ eventType: userFetch ? TrafficEventKinds["ai-user-fetch"] : TrafficEventKinds.crawler }).where(eq35(rawEventSamples.id, snap.id)).run();
     const tsHour = new Date(snap.ts);
     tsHour.setUTCMinutes(0, 0, 0);
-    db.insert(crawlerEventsHourly).values({
-      projectId: snap.projectId,
-      sourceId: snap.sourceId,
-      tsHour: tsHour.toISOString(),
-      botId: classified.botId,
-      operator: classified.operator,
-      verificationStatus: classified.verificationStatus,
-      pathNormalized: snap.pathNormalized,
-      status: snap.status ?? 200,
-      hits: 1,
-      sampledUserAgent: snap.userAgent,
-      createdAt: now,
-      updatedAt: now
-    }).onConflictDoUpdate({
-      target: [
-        crawlerEventsHourly.projectId,
-        crawlerEventsHourly.sourceId,
-        crawlerEventsHourly.tsHour,
-        crawlerEventsHourly.botId,
-        crawlerEventsHourly.verificationStatus,
-        crawlerEventsHourly.pathNormalized,
-        crawlerEventsHourly.status
-      ],
-      set: {
-        hits: sql15`${crawlerEventsHourly.hits} + 1`,
+    if (userFetch) {
+      db.insert(aiUserFetchEventsHourly).values({
+        projectId: snap.projectId,
+        sourceId: snap.sourceId,
+        tsHour: tsHour.toISOString(),
+        botId: userFetch.botId,
+        operator: userFetch.operator,
+        verificationStatus: userFetch.verificationStatus,
+        pathNormalized: snap.pathNormalized,
+        status: snap.status ?? 200,
+        hits: 1,
+        sampledUserAgent: snap.userAgent,
+        createdAt: now,
         updatedAt: now
-      }
-    }).run();
+      }).onConflictDoUpdate({
+        target: [
+          aiUserFetchEventsHourly.projectId,
+          aiUserFetchEventsHourly.sourceId,
+          aiUserFetchEventsHourly.tsHour,
+          aiUserFetchEventsHourly.botId,
+          aiUserFetchEventsHourly.verificationStatus,
+          aiUserFetchEventsHourly.pathNormalized,
+          aiUserFetchEventsHourly.status
+        ],
+        set: {
+          hits: sql15`${aiUserFetchEventsHourly.hits} + 1`,
+          updatedAt: now
+        }
+      }).run();
+    } else {
+      db.insert(crawlerEventsHourly).values({
+        projectId: snap.projectId,
+        sourceId: snap.sourceId,
+        tsHour: tsHour.toISOString(),
+        botId: classified.botId,
+        operator: classified.operator,
+        verificationStatus: classified.verificationStatus,
+        pathNormalized: snap.pathNormalized,
+        status: snap.status ?? 200,
+        hits: 1,
+        sampledUserAgent: snap.userAgent,
+        createdAt: now,
+        updatedAt: now
+      }).onConflictDoUpdate({
+        target: [
+          crawlerEventsHourly.projectId,
+          crawlerEventsHourly.sourceId,
+          crawlerEventsHourly.tsHour,
+          crawlerEventsHourly.botId,
+          crawlerEventsHourly.verificationStatus,
+          crawlerEventsHourly.pathNormalized,
+          crawlerEventsHourly.status
+        ],
+        set: {
+          hits: sql15`${crawlerEventsHourly.hits} + 1`,
+          updatedAt: now
+        }
+      }).run();
+    }
   }
   if (!isDryRun) {
     const afterRow = db.select({ n: sql15`count(*)` }).from(rawEventSamples).where(and28(