@ainyc/canonry 4.54.0 → 4.55.3

package/dist/{chunk-VZPDBHBW.js → chunk-XHU35P3S.js}

@@ -4,316 +4,8 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// ../contracts/src/run.ts
-import { z as z2 } from "zod";
-
-// ../contracts/src/provider.ts
-import { z } from "zod";
-var providerQuotaPolicySchema = z.object({
-  maxConcurrency: z.number().int().positive(),
-  maxRequestsPerMinute: z.number().int().positive(),
-  maxRequestsPerDay: z.number().int().positive()
-});
-var ProviderNames = {
-  gemini: "gemini",
-  openai: "openai",
-  claude: "claude",
-  perplexity: "perplexity",
-  local: "local",
-  cdpChatgpt: "cdp:chatgpt"
-};
-var providerNameSchema = z.string().min(1);
-var apiProviderNameSchema = z.string().min(1);
-function isBrowserProvider(name) {
-  return name.startsWith("cdp:");
-}
-var CDP_TARGETS = ["cdp:chatgpt"];
-function resolveProviderInput(input) {
-  const lower = input.trim().toLowerCase();
-  if (lower === "cdp") {
-    return [...CDP_TARGETS];
-  }
-  return lower ? [lower] : [];
-}
-var locationContextSchema = z.object({
-  label: z.string().min(1),
-  city: z.string().min(1),
-  region: z.string().min(1),
-  country: z.string().length(2),
-  timezone: z.string().optional()
-});
-var PROVIDER_LOCATION_HANDLING = {
-  gemini: {
-    treatment: "prompt",
-    description: "Location appended to the query text the Gemini model receives."
-  },
-  perplexity: {
-    treatment: "prompt",
-    description: "Location appended to the query text the Perplexity model receives."
-  },
-  local: {
-    treatment: "prompt",
-    description: "Location appended to the system message sent to the local model."
-  },
-  openai: {
-    treatment: "request-param",
-    description: "Location sent as a structured `user_location` field on OpenAI\u2019s web_search tool."
-  },
-  claude: {
-    treatment: "request-param",
-    description: "Location sent as a structured `user_location` field on Anthropic\u2019s web_search_20250305 tool."
-  },
-  "cdp:chatgpt": {
-    treatment: "browser-geo",
-    description: "CDP relies on the browser session\u2019s own geolocation; canonry\u2019s configured location is not forwarded."
-  }
-};
-var UNKNOWN_PROVIDER_HANDLING = {
-  treatment: "ignored",
-  description: "No documented location handling for this provider \u2014 assume the configured location was not applied."
-};
-function getProviderLocationHandling(provider) {
-  return PROVIDER_LOCATION_HANDLING[provider] ?? UNKNOWN_PROVIDER_HANDLING;
-}
-
-// ../contracts/src/run.ts
-var runStatusSchema = z2.enum(["queued", "running", "completed", "partial", "failed", "cancelled"]);
-var RunStatuses = runStatusSchema.enum;
-var runKindSchema = z2.enum([
-  "answer-visibility",
-  "site-audit",
-  "gsc-sync",
-  "inspect-sitemap",
-  "ga-sync",
-  "bing-inspect",
-  "bing-inspect-sitemap",
-  "backlink-extract",
-  "traffic-sync",
-  "aeo-discover-seed",
-  "aeo-discover-probe"
-]);
-var RunKinds = runKindSchema.enum;
-var runTriggerSchema = z2.enum(["manual", "scheduled", "config-apply", "backfill", "probe"]);
-var RunTriggers = runTriggerSchema.enum;
-var citationStateSchema = z2.enum(["cited", "not-cited"]);
-var CitationStates = citationStateSchema.enum;
-var visibilityStateSchema = z2.enum(["visible", "not-visible"]);
-var VisibilityStates = visibilityStateSchema.enum;
-var mentionStateSchema = z2.enum(["mentioned", "not-mentioned"]);
-var MentionStates = mentionStateSchema.enum;
-var computedTransitionSchema = z2.enum(["new", "cited", "lost", "emerging", "not-cited"]);
-var ComputedTransitions = computedTransitionSchema.enum;
-var mentionTransitionSchema = z2.enum(["new", "mentioned", "lost", "emerging", "not-mentioned"]);
-var MentionTransitions = mentionTransitionSchema.enum;
-var operatorTriggerSchema = z2.enum([RunTriggers.manual, RunTriggers.probe]);
-var runTriggerRequestSchema = z2.object({
-  kind: z2.literal(RunKinds["answer-visibility"]).optional(),
-  trigger: operatorTriggerSchema.optional(),
-  providers: z2.array(providerNameSchema).optional(),
-  queries: z2.array(z2.string().min(1)).min(1).optional(),
-  location: z2.string().min(1).optional(),
-  allLocations: z2.boolean().optional(),
-  noLocation: z2.boolean().optional()
-}).refine(
-  (data) => Number(Boolean(data.location)) + Number(Boolean(data.allLocations)) + Number(Boolean(data.noLocation)) <= 1,
-  { message: 'Only one of "location", "allLocations", or "noLocation" may be provided' }
-);
-var runProviderErrorSchema = z2.object({
-  /** Human-readable error message (best-effort extracted from `raw.error.message` / `raw.message`, otherwise the raw text with any `[provider-X]` prefix stripped). */
-  message: z2.string(),
-  /** Original provider response payload, if the underlying error body parsed as JSON. Use this for structured fields like HTTP status, error code, etc. */
-  raw: z2.unknown().optional()
-});
-var runErrorSchema = z2.object({
-  /** Top-level message for runs that failed without a per-provider error (e.g. user cancellation, internal scheduling failures). */
-  message: z2.string().optional(),
-  /** Per-provider errors for visibility-sweep runs that had at least one provider fail. */
-  providers: z2.record(z2.string(), runProviderErrorSchema).optional()
-});
-var runDtoSchema = z2.object({
-  id: z2.string(),
-  projectId: z2.string(),
-  kind: runKindSchema,
-  status: runStatusSchema,
-  trigger: runTriggerSchema.default("manual"),
-  location: z2.string().nullable().optional(),
-  queries: z2.array(z2.string()).nullable().optional(),
-  startedAt: z2.string().nullable().optional(),
-  finishedAt: z2.string().nullable().optional(),
-  error: runErrorSchema.nullable().optional(),
-  createdAt: z2.string()
-});
-var PROVIDER_PREFIX = /^\[provider-[\w-]+\]\s+/;
-function parseProviderErrorMessage(msg) {
-  const stripped = msg.replace(PROVIDER_PREFIX, "");
-  try {
-    const raw = JSON.parse(stripped);
-    if (raw && typeof raw === "object") {
-      const inner = raw;
-      const fromErrorMessage = typeof inner.error?.message === "string" ? inner.error.message : void 0;
-      const fromMessage = typeof inner.message === "string" ? inner.message : void 0;
-      return { message: fromErrorMessage ?? fromMessage ?? stripped, raw };
-    }
-  } catch {
-  }
-  return { message: stripped };
-}
-function parseRunError(raw) {
-  if (!raw) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return { message: raw };
-  }
-  if (!parsed || typeof parsed !== "object") {
-    return { message: raw };
-  }
-  const obj = parsed;
-  const hasProviders = obj.providers && typeof obj.providers === "object";
-  const hasMessage = typeof obj.message === "string";
-  if (hasProviders || hasMessage) {
-    return parsed;
-  }
-  const providers = {};
-  for (const [name, val] of Object.entries(obj)) {
-    providers[name] = parseProviderErrorMessage(typeof val === "string" ? val : JSON.stringify(val));
-  }
-  return { providers };
-}
-function buildRunErrorFromMessages(messages) {
-  const providers = {};
-  for (const [name, msg] of messages) {
-    providers[name] = parseProviderErrorMessage(msg);
-  }
-  return { providers };
-}
-function serializeRunError(err) {
-  return JSON.stringify(err);
-}
-function formatRunErrorOneLine(err) {
-  if (err.providers) {
-    const entries = Object.entries(err.providers);
-    if (entries.length === 1) {
-      const [provider, detail] = entries[0];
-      return `${provider}: ${detail.message}`;
-    }
-    if (entries.length > 1) {
-      return entries.map(([p, d]) => `${p}: ${d.message}`).join(" \u2022 ");
-    }
-  }
-  return err.message ?? "Run failed.";
-}
-var groundingSourceSchema = z2.object({
-  uri: z2.string(),
-  title: z2.string()
-});
-var querySnapshotDtoSchema = z2.object({
-  id: z2.string(),
-  runId: z2.string(),
-  queryId: z2.string(),
-  query: z2.string().optional(),
-  provider: providerNameSchema,
-  citationState: citationStateSchema,
-  answerMentioned: z2.boolean().optional(),
-  /** @deprecated legacy name for `mentionState`; same data, kept for backwards compatibility. */
-  visibilityState: visibilityStateSchema.optional(),
-  /** Mention state for this snapshot — see `mentionStateSchema`. Prefer this over the legacy `visibilityState`. */
-  mentionState: mentionStateSchema.optional(),
-  transition: computedTransitionSchema.optional(),
-  answerText: z2.string().nullable().optional(),
-  citedDomains: z2.array(z2.string()).default([]),
-  competitorOverlap: z2.array(z2.string()).default([]),
-  recommendedCompetitors: z2.array(z2.string()).default([]),
-  matchedTerms: z2.array(z2.string()).default([]),
-  groundingSources: z2.array(groundingSourceSchema).default([]),
-  searchQueries: z2.array(z2.string()).default([]),
-  model: z2.string().nullable().optional(),
-  location: z2.string().nullable().optional(),
-  createdAt: z2.string()
-});
-var snapshotListResponseSchema = z2.object({
-  snapshots: z2.array(querySnapshotDtoSchema),
-  total: z2.number().int().nonnegative()
-});
-var snapshotDiffRowSchema = z2.object({
-  queryId: z2.string().nullable(),
-  query: z2.string().nullable(),
-  run1State: citationStateSchema.nullable(),
-  run2State: citationStateSchema.nullable(),
-  run1AnswerMentioned: z2.boolean().nullable(),
-  run2AnswerMentioned: z2.boolean().nullable(),
-  /** @deprecated legacy name for `run1MentionState`. */
-  run1VisibilityState: visibilityStateSchema.nullable(),
-  /** @deprecated legacy name for `run2MentionState`. */
-  run2VisibilityState: visibilityStateSchema.nullable(),
-  /** Mention state in run 1 — prefer this over the legacy `run1VisibilityState`. */
-  run1MentionState: mentionStateSchema.nullable().optional(),
-  /** Mention state in run 2 — prefer this over the legacy `run2VisibilityState`. */
-  run2MentionState: mentionStateSchema.nullable().optional(),
-  changed: z2.boolean(),
-  visibilityChanged: z2.boolean()
-});
-var snapshotDiffResponseSchema = z2.object({
-  run1: z2.string(),
-  run2: z2.string(),
-  diff: z2.array(snapshotDiffRowSchema)
-});
-var runDetailDtoSchema = runDtoSchema.extend({
-  snapshots: z2.array(querySnapshotDtoSchema).optional()
-});
-var latestProjectRunDtoSchema = z2.object({
-  totalRuns: z2.number().int().nonnegative(),
-  run: runDetailDtoSchema.nullable()
-});
-var auditLogEntrySchema = z2.object({
-  id: z2.string(),
-  projectId: z2.string().nullable().optional(),
-  actor: z2.string(),
-  action: z2.string(),
-  entityType: z2.string(),
-  entityId: z2.string().nullable().optional(),
-  diff: z2.unknown().optional(),
-  createdAt: z2.string()
-});
-
-// ../contracts/src/config-schema.ts
-import { z as z5 } from "zod";
-
-// ../contracts/src/notification.ts
-import { z as z3 } from "zod";
-var notificationEventSchema = z3.enum([
-  "citation.lost",
-  "citation.gained",
-  "run.completed",
-  "run.failed",
-  "insight.critical",
-  "insight.high"
-]);
-var notificationDtoSchema = z3.object({
-  id: z3.string(),
-  projectId: z3.string(),
-  channel: z3.literal("webhook"),
-  url: z3.string().url(),
-  urlDisplay: z3.string(),
-  urlHost: z3.string(),
-  events: z3.array(notificationEventSchema),
-  enabled: z3.boolean().default(true),
-  /** Opaque tag identifying the creator (e.g. `"agent"` for Aero webhooks). */
-  source: z3.string().optional(),
-  webhookSecret: z3.string().optional(),
-  createdAt: z3.string(),
-  updatedAt: z3.string()
-});
-var notificationCreateRequestSchema = z3.object({
-  channel: z3.literal("webhook"),
-  url: z3.string().url(),
-  events: z3.array(notificationEventSchema).min(1),
-  source: z3.string().optional()
-});
-
 // ../contracts/src/project.ts
-import { z as z4 } from "zod";
+import { z as z2 } from "zod";
 
 // ../contracts/src/errors.ts
 var AppError = class extends Error {
@@ -349,6 +41,9 @@ function authRequired() {
 function authInvalid() {
   return new AppError("AUTH_INVALID", "Invalid API key", 401);
 }
+function forbidden(message = "Forbidden") {
+  return new AppError("FORBIDDEN", message, 403);
+}
 function providerError(message, details) {
   return new AppError("PROVIDER_ERROR", message, 502, details);
 }
@@ -384,8 +79,77 @@ function runtimeStateMissing(message, details) {
   return new AppError("RUNTIME_STATE_MISSING", message, 503, details);
 }
 
+// ../contracts/src/provider.ts
+import { z } from "zod";
+var providerQuotaPolicySchema = z.object({
+  maxConcurrency: z.number().int().positive(),
+  maxRequestsPerMinute: z.number().int().positive(),
+  maxRequestsPerDay: z.number().int().positive()
+});
+var ProviderNames = {
+  gemini: "gemini",
+  openai: "openai",
+  claude: "claude",
+  perplexity: "perplexity",
+  local: "local",
+  cdpChatgpt: "cdp:chatgpt"
+};
+var providerNameSchema = z.string().min(1);
+var apiProviderNameSchema = z.string().min(1);
+function isBrowserProvider(name) {
+  return name.startsWith("cdp:");
+}
+var CDP_TARGETS = ["cdp:chatgpt"];
+function resolveProviderInput(input) {
+  const lower = input.trim().toLowerCase();
+  if (lower === "cdp") {
+    return [...CDP_TARGETS];
+  }
+  return lower ? [lower] : [];
+}
+var locationContextSchema = z.object({
+  label: z.string().min(1),
+  city: z.string().min(1),
+  region: z.string().min(1),
+  country: z.string().length(2),
+  timezone: z.string().optional()
+});
+var PROVIDER_LOCATION_HANDLING = {
+  gemini: {
+    treatment: "prompt",
+    description: "Location appended to the query text the Gemini model receives."
+  },
+  perplexity: {
+    treatment: "prompt",
+    description: "Location appended to the query text the Perplexity model receives."
+  },
+  local: {
+    treatment: "prompt",
+    description: "Location appended to the system message sent to the local model."
+  },
+  openai: {
+    treatment: "request-param",
+    description: "Location sent as a structured `user_location` field on OpenAI\u2019s web_search tool."
+  },
+  claude: {
+    treatment: "request-param",
+    description: "Location sent as a structured `user_location` field on Anthropic\u2019s web_search_20250305 tool."
+  },
+  "cdp:chatgpt": {
+    treatment: "browser-geo",
+    description: "CDP relies on the browser session\u2019s own geolocation; canonry\u2019s configured location is not forwarded."
+  }
+};
+var UNKNOWN_PROVIDER_HANDLING = {
+  treatment: "ignored",
+  description: "No documented location handling for this provider \u2014 assume the configured location was not applied."
+};
+function getProviderLocationHandling(provider) {
+  return PROVIDER_LOCATION_HANDLING[provider] ?? UNKNOWN_PROVIDER_HANDLING;
+}
+
 // ../contracts/src/project.ts
-var configSourceSchema = z4.enum(["cli", "api", "config-file"]);
+var configSourceSchema = z2.enum(["cli", "api", "config-file"]);
 function findDuplicateLocationLabels(locations) {
   const seen = /* @__PURE__ */ new Set();
   const duplicates = /* @__PURE__ */ new Set();
@@ -422,75 +186,75 @@ function resolveLocations(projectLocations, requestedLabels) {
   }
   return resolved;
 }
-var projectUpsertRequestSchema = z4.object({
-  displayName: z4.string().min(1),
-  canonicalDomain: z4.string().min(1),
-  ownedDomains: z4.array(z4.string().min(1)).optional(),
-  aliases: z4.array(z4.string()).optional(),
-  country: z4.string().length(2),
-  language: z4.string().min(2),
-  tags: z4.array(z4.string()).optional(),
-  labels: z4.record(z4.string(), z4.string()).optional(),
-  providers: z4.array(providerNameSchema).optional(),
-  locations: z4.array(locationContextSchema).optional(),
-  defaultLocation: z4.string().nullable().optional(),
-  autoExtractBacklinks: z4.boolean().optional(),
+var projectUpsertRequestSchema = z2.object({
+  displayName: z2.string().min(1),
+  canonicalDomain: z2.string().min(1),
+  ownedDomains: z2.array(z2.string().min(1)).optional(),
+  aliases: z2.array(z2.string()).optional(),
+  country: z2.string().length(2),
+  language: z2.string().min(2),
+  tags: z2.array(z2.string()).optional(),
+  labels: z2.record(z2.string(), z2.string()).optional(),
+  providers: z2.array(providerNameSchema).optional(),
+  locations: z2.array(locationContextSchema).optional(),
+  defaultLocation: z2.string().nullable().optional(),
+  autoExtractBacklinks: z2.boolean().optional(),
   configSource: configSourceSchema.optional()
 });
-var projectDtoSchema = z4.object({
-  id: z4.string(),
-  name: z4.string(),
-  displayName: z4.string().optional(),
-  canonicalDomain: z4.string(),
-  ownedDomains: z4.array(z4.string()).default([]),
-  aliases: z4.array(z4.string()).default([]),
-  country: z4.string().length(2),
-  language: z4.string().min(2),
-  tags: z4.array(z4.string()).default([]),
-  labels: z4.record(z4.string(), z4.string()).default({}),
+var projectDtoSchema = z2.object({
+  id: z2.string(),
+  name: z2.string(),
+  displayName: z2.string().optional(),
+  canonicalDomain: z2.string(),
+  ownedDomains: z2.array(z2.string()).default([]),
+  aliases: z2.array(z2.string()).default([]),
+  country: z2.string().length(2),
+  language: z2.string().min(2),
+  tags: z2.array(z2.string()).default([]),
+  labels: z2.record(z2.string(), z2.string()).default({}),
   // Provider names this project sweeps against (subset of available providers).
   // The server emits this on every project response (see GET /projects/:name in
   // packages/api-routes/src/projects.ts) — the schema was historically missing
   // the field even though the wire shape always included it. Add it here so
   // ProjectDto consumers (web + CLI ApiClient) typecheck against the real
   // response surface.
-  providers: z4.array(z4.string()).default([]),
-  locations: z4.array(locationContextSchema).default([]),
-  defaultLocation: z4.string().nullable().optional(),
-  autoExtractBacklinks: z4.boolean().default(false),
+  providers: z2.array(z2.string()).default([]),
+  locations: z2.array(locationContextSchema).default([]),
+  defaultLocation: z2.string().nullable().optional(),
+  autoExtractBacklinks: z2.boolean().default(false),
   configSource: configSourceSchema.default("cli"),
-  configRevision: z4.number().int().positive().default(1),
-  createdAt: z4.string().optional(),
-  updatedAt: z4.string().optional()
+  configRevision: z2.number().int().positive().default(1),
+  createdAt: z2.string().optional(),
+  updatedAt: z2.string().optional()
 });
-var queryDtoSchema = z4.object({
-  id: z4.string(),
-  query: z4.string(),
-  createdAt: z4.string()
+var queryDtoSchema = z2.object({
+  id: z2.string(),
+  query: z2.string(),
+  createdAt: z2.string()
 });
-var keywordDtoSchema = z4.object({
-  id: z4.string(),
-  keyword: z4.string(),
-  createdAt: z4.string()
+var keywordDtoSchema = z2.object({
+  id: z2.string(),
+  keyword: z2.string(),
+  createdAt: z2.string()
 });
-var queryBatchRequestSchema = z4.object({
-  queries: z4.array(z4.string().trim().min(1)).min(1)
+var queryBatchRequestSchema = z2.object({
+  queries: z2.array(z2.string().trim().min(1)).min(1)
 });
-var keywordBatchRequestSchema = z4.object({
-  keywords: z4.array(z4.string().trim().min(1)).min(1)
+var keywordBatchRequestSchema = z2.object({
+  keywords: z2.array(z2.string().trim().min(1)).min(1)
 });
-var queryGenerateRequestSchema = z4.object({
+var queryGenerateRequestSchema = z2.object({
   provider: providerNameSchema,
-  count: z4.number().int().min(1).max(20).optional()
+  count: z2.number().int().min(1).max(20).optional()
 });
 var keywordGenerateRequestSchema = queryGenerateRequestSchema;
-var competitorDtoSchema = z4.object({
-  id: z4.string(),
-  domain: z4.string(),
-  createdAt: z4.string()
+var competitorDtoSchema = z2.object({
+  id: z2.string(),
+  domain: z2.string(),
+  createdAt: z2.string()
 });
-var competitorBatchRequestSchema = z4.object({
-  competitors: z4.array(z4.string().trim().min(1)).min(1)
+var competitorBatchRequestSchema = z2.object({
+  competitors: z2.array(z2.string().trim().min(1)).min(1)
 });
 function normalizeProjectDomain(input) {
   let domain = input.trim().toLowerCase();
@@ -600,6 +364,243 @@ function effectiveBrandNames(project) {
   return names;
 }
 
+// ../contracts/src/run.ts
+import { z as z3 } from "zod";
+var runStatusSchema = z3.enum(["queued", "running", "completed", "partial", "failed", "cancelled"]);
+var RunStatuses = runStatusSchema.enum;
+var runKindSchema = z3.enum([
+  "answer-visibility",
+  "site-audit",
+  "gsc-sync",
+  "inspect-sitemap",
+  "ga-sync",
+  "bing-inspect",
+  "bing-inspect-sitemap",
+  "backlink-extract",
+  "traffic-sync",
+  "aeo-discover-seed",
+  "aeo-discover-probe"
+]);
+var RunKinds = runKindSchema.enum;
+var runTriggerSchema = z3.enum(["manual", "scheduled", "config-apply", "backfill", "probe"]);
+var RunTriggers = runTriggerSchema.enum;
+var citationStateSchema = z3.enum(["cited", "not-cited"]);
+var CitationStates = citationStateSchema.enum;
+var visibilityStateSchema = z3.enum(["visible", "not-visible"]);
+var VisibilityStates = visibilityStateSchema.enum;
+var mentionStateSchema = z3.enum(["mentioned", "not-mentioned"]);
+var MentionStates = mentionStateSchema.enum;
+var computedTransitionSchema = z3.enum(["new", "cited", "lost", "emerging", "not-cited"]);
+var ComputedTransitions = computedTransitionSchema.enum;
+var mentionTransitionSchema = z3.enum(["new", "mentioned", "lost", "emerging", "not-mentioned"]);
+var MentionTransitions = mentionTransitionSchema.enum;
+var operatorTriggerSchema = z3.enum([RunTriggers.manual, RunTriggers.probe]);
+var runTriggerRequestSchema = z3.object({
+  kind: z3.literal(RunKinds["answer-visibility"]).optional(),
+  trigger: operatorTriggerSchema.optional(),
+  providers: z3.array(providerNameSchema).optional(),
+  queries: z3.array(z3.string().min(1)).min(1).optional(),
+  location: z3.string().min(1).optional(),
+  allLocations: z3.boolean().optional(),
+  noLocation: z3.boolean().optional()
+}).refine(
+  (data) => Number(Boolean(data.location)) + Number(Boolean(data.allLocations)) + Number(Boolean(data.noLocation)) <= 1,
+  { message: 'Only one of "location", "allLocations", or "noLocation" may be provided' }
+);
+var runProviderErrorSchema = z3.object({
+  /** Human-readable error message (best-effort extracted from `raw.error.message` / `raw.message`, otherwise the raw text with any `[provider-X]` prefix stripped). */
+  message: z3.string(),
+  /** Original provider response payload, if the underlying error body parsed as JSON. Use this for structured fields like HTTP status, error code, etc. */
+  raw: z3.unknown().optional()
+});
+var runErrorSchema = z3.object({
+  /** Top-level message for runs that failed without a per-provider error (e.g. user cancellation, internal scheduling failures). */
+  message: z3.string().optional(),
+  /** Per-provider errors for visibility-sweep runs that had at least one provider fail. */
+  providers: z3.record(z3.string(), runProviderErrorSchema).optional()
+});
+var runDtoSchema = z3.object({
+  id: z3.string(),
+  projectId: z3.string(),
+  kind: runKindSchema,
+  status: runStatusSchema,
+  trigger: runTriggerSchema.default("manual"),
+  location: z3.string().nullable().optional(),
+  queries: z3.array(z3.string()).nullable().optional(),
+  startedAt: z3.string().nullable().optional(),
+  finishedAt: z3.string().nullable().optional(),
+  error: runErrorSchema.nullable().optional(),
+  createdAt: z3.string()
+});
+var PROVIDER_PREFIX = /^\[provider-[\w-]+\]\s+/;
+function parseProviderErrorMessage(msg) {
+  const stripped = msg.replace(PROVIDER_PREFIX, "");
+  try {
+    const raw = JSON.parse(stripped);
+    if (raw && typeof raw === "object") {
+      const inner = raw;
+      const fromErrorMessage = typeof inner.error?.message === "string" ? inner.error.message : void 0;
+      const fromMessage = typeof inner.message === "string" ? inner.message : void 0;
+      return { message: fromErrorMessage ?? fromMessage ?? stripped, raw };
+    }
+  } catch {
+  }
+  return { message: stripped };
+}
+function parseRunError(raw) {
+  if (!raw) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { message: raw };
+  }
+  if (!parsed || typeof parsed !== "object") {
+    return { message: raw };
+  }
+  const obj = parsed;
+  const hasProviders = obj.providers && typeof obj.providers === "object";
+  const hasMessage = typeof obj.message === "string";
+  if (hasProviders || hasMessage) {
+    return parsed;
+  }
+  const providers = {};
+  for (const [name, val] of Object.entries(obj)) {
+    providers[name] = parseProviderErrorMessage(typeof val === "string" ? val : JSON.stringify(val));
+  }
+  return { providers };
+}
+function buildRunErrorFromMessages(messages) {
+  const providers = {};
+  for (const [name, msg] of messages) {
+    providers[name] = parseProviderErrorMessage(msg);
+  }
+  return { providers };
+}
+function serializeRunError(err) {
+  return JSON.stringify(err);
+}
+function formatRunErrorOneLine(err) {
+  if (err.providers) {
+    const entries = Object.entries(err.providers);
+    if (entries.length === 1) {
+      const [provider, detail] = entries[0];
+      return `${provider}: ${detail.message}`;
+    }
+    if (entries.length > 1) {
+      return entries.map(([p, d]) => `${p}: ${d.message}`).join(" \u2022 ");
+    }
+  }
+  return err.message ?? "Run failed.";
+}
+var groundingSourceSchema = z3.object({
+  uri: z3.string(),
+  title: z3.string()
+});
+var querySnapshotDtoSchema = z3.object({
+  id: z3.string(),
+  runId: z3.string(),
+  queryId: z3.string(),
+  query: z3.string().optional(),
+  provider: providerNameSchema,
+  citationState: citationStateSchema,
+  answerMentioned: z3.boolean().optional(),
+  /** @deprecated legacy name for `mentionState`; same data, kept for backwards compatibility. */
+  visibilityState: visibilityStateSchema.optional(),
+  /** Mention state for this snapshot — see `mentionStateSchema`. Prefer this over the legacy `visibilityState`. */
+  mentionState: mentionStateSchema.optional(),
+  transition: computedTransitionSchema.optional(),
+  answerText: z3.string().nullable().optional(),
+  citedDomains: z3.array(z3.string()).default([]),
+  competitorOverlap: z3.array(z3.string()).default([]),
+  recommendedCompetitors: z3.array(z3.string()).default([]),
+  matchedTerms: z3.array(z3.string()).default([]),
+  groundingSources: z3.array(groundingSourceSchema).default([]),
+  searchQueries: z3.array(z3.string()).default([]),
+  model: z3.string().nullable().optional(),
+  location: z3.string().nullable().optional(),
+  createdAt: z3.string()
+});
+var snapshotListResponseSchema = z3.object({
+  snapshots: z3.array(querySnapshotDtoSchema),
+  total: z3.number().int().nonnegative()
+});
+var snapshotDiffRowSchema = z3.object({
+  queryId: z3.string().nullable(),
+  query: z3.string().nullable(),
+  run1State: citationStateSchema.nullable(),
+  run2State: citationStateSchema.nullable(),
+  run1AnswerMentioned: z3.boolean().nullable(),
+  run2AnswerMentioned: z3.boolean().nullable(),
+  /** @deprecated legacy name for `run1MentionState`. */
+  run1VisibilityState: visibilityStateSchema.nullable(),
+  /** @deprecated legacy name for `run2MentionState`. */
+  run2VisibilityState: visibilityStateSchema.nullable(),
+  /** Mention state in run 1 — prefer this over the legacy `run1VisibilityState`. */
+  run1MentionState: mentionStateSchema.nullable().optional(),
+  /** Mention state in run 2 — prefer this over the legacy `run2VisibilityState`. */
+  run2MentionState: mentionStateSchema.nullable().optional(),
+  changed: z3.boolean(),
+  visibilityChanged: z3.boolean()
+});
+var snapshotDiffResponseSchema = z3.object({
+  run1: z3.string(),
+  run2: z3.string(),
+  diff: z3.array(snapshotDiffRowSchema)
+});
+var runDetailDtoSchema = runDtoSchema.extend({
+  snapshots: z3.array(querySnapshotDtoSchema).optional()
+});
+var latestProjectRunDtoSchema = z3.object({
+  totalRuns: z3.number().int().nonnegative(),
+  run: runDetailDtoSchema.nullable()
+});
+var auditLogEntrySchema = z3.object({
+  id: z3.string(),
+  projectId: z3.string().nullable().optional(),
+  actor: z3.string(),
+  action: z3.string(),
+  entityType: z3.string(),
+  entityId: z3.string().nullable().optional(),
+  diff: z3.unknown().optional(),
+  createdAt: z3.string()
+});
+
+// ../contracts/src/config-schema.ts
+import { z as z5 } from "zod";
+
+// ../contracts/src/notification.ts
+import { z as z4 } from "zod";
+var notificationEventSchema = z4.enum([
+  "citation.lost",
+  "citation.gained",
+  "run.completed",
+  "run.failed",
+  "insight.critical",
+  "insight.high"
+]);
+var notificationDtoSchema = z4.object({
+  id: z4.string(),
+  projectId: z4.string(),
+  channel: z4.literal("webhook"),
+  url: z4.string().url(),
+  urlDisplay: z4.string(),
+  urlHost: z4.string(),
+  events: z4.array(notificationEventSchema),
+  enabled: z4.boolean().default(true),
+  /** Opaque tag identifying the creator (e.g. `"agent"` for Aero webhooks). */
+  source: z4.string().optional(),
+  webhookSecret: z4.string().optional(),
+  createdAt: z4.string(),
+  updatedAt: z4.string()
+});
+var notificationCreateRequestSchema = z4.object({
+  channel: z4.literal("webhook"),
+  url: z4.string().url(),
+  events: z4.array(notificationEventSchema).min(1),
+  source: z4.string().optional()
+});
+
 // ../contracts/src/config-schema.ts
 var configMetadataSchema = z5.object({
   name: z5.string().min(1).max(63).regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, {
@@ -2661,7 +2662,7 @@ var serverActivitySectionSchema = z21.object({
   byOperator: z21.array(z21.object({
     operator: z21.string(),
     verifiedHits: z21.number(),
-    /** Shown to agency audience only — claimed-bot UA, rDNS not confirmed. */
+    /** Shown to agency audience only: claimed-bot UA, source IP not in a published range. */
     unverifiedHits: z21.number(),
     /** Per-user fetches from this operator's AI surface (ChatGPT-User, …). */
     userFetchHits: z21.number(),
@@ -3160,7 +3161,7 @@ var VercelTrafficEnvironments = vercelTrafficEnvironmentSchema.enum;
 var vercelTrafficSourceConfigSchema = z23.object({
   /** Vercel project id (e.g. `prj_...`). */
   projectId: z23.string().min(1),
-  /** Vercel team / owner id (e.g. `team_...`). */
+  /** Vercel team or account id: the org that owns the project. */
   teamId: z23.string().min(1),
   environment: vercelTrafficEnvironmentSchema
 });
@@ -3196,9 +3197,9 @@ var trafficConnectWordpressRequestSchema = z23.object({
 var trafficConnectVercelRequestSchema = z23.object({
   /** Vercel project id (e.g. `prj_...`) — from the Vercel dashboard or `.vercel/project.json`. */
   projectId: z23.string().min(1),
-  /** Vercel team / owner id (e.g. `team_...`). */
+  /** Vercel team or account id: the org that owns the project ("orgId" in .vercel/project.json). */
   teamId: z23.string().min(1),
-  /** Vercel API token (personal access token). Stored in `~/.canonry/config.yaml`, never the DB. */
+  /** Vercel personal access token. Stored in `~/.canonry/config.yaml`, never the DB. */
   token: z23.string().min(1),
   /** Which deployment environment's request logs to pull. Default: `production`. */
   environment: vercelTrafficEnvironmentSchema.optional(),
@@ -3606,6 +3607,7 @@ export {
   validationError,
   authRequired,
   authInvalid,
+  forbidden,
   providerError,
   runInProgress,
   runNotCancellable,