npm - @ainyc/canonry - Versions diffs - 4.76.2 → 4.78.0 - Mend

@ainyc/canonry 4.76.2 → 4.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/assets/assets/{trash-2-C65kNIO5.js → trash-2-B_UtEEm8.js} RENAMED Viewed

	@@ -1 +1 @@
1	- import{c}from"./index-~~B-_Dwwhd~~.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};
1	+ import{c}from"./index-D9smxU6R.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};

package/assets/index.html CHANGED Viewed

@@ -12,12 +12,12 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-B-_Dwwhd.js"></script>
+    <script type="module" crossorigin src="./assets/index-D9smxU6R.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Dq7p98wZ.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-B57xfQbP.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-ClRVR6aX.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-markdown-DK7fbRNb.js">
-    <link rel="stylesheet" crossorigin href="./assets/index-DRhoqa2-.css">
+    <link rel="stylesheet" crossorigin href="./assets/index-BgWgJE7S.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/{chunk-BIT3JPMW.js → chunk-3WXARKUE.js} RENAMED Viewed

@@ -232,7 +232,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-ETM5EPQH.js";
+} from "./chunk-KPN22EWK.js";
 // src/intelligence-service.ts
 import { eq as eq33, desc as desc17, asc as asc4, and as and24, ne as ne5, or as or5, inArray as inArray12, gte as gte6, lte as lte3 } from "drizzle-orm";
@@ -19153,6 +19153,68 @@ async function getValidToken(store, domain, connectionType, clientId, clientSecr
     propertyId: conn.propertyId ?? null
   };
 }
+function parseGscApiDisabled(message) {
+  if (!/accessNotConfigured|SERVICE_DISABLED|has not been used in project|is disabled/i.test(message)) {
+    return null;
+  }
+  const projectNumber = message.match(/[?&]project=(\d+)/)?.[1] ?? message.match(/project\s+(\d+)/i)?.[1] ?? null;
+  const base = "https://console.developers.google.com/apis/api";
+  const qs = projectNumber ? `?project=${projectNumber}` : "";
+  return {
+    projectNumber,
+    enableUrl: `${base}/searchconsole.googleapis.com/overview${qs}`,
+    indexingApiUrl: `${base}/indexing.googleapis.com/overview${qs}`
+  };
+}
+function googleAuthErrorStatus(err) {
+  if (err.statusCode != null) return err.statusCode;
+  const match = err.message.match(/failed \((\d{3})\)/);
+  return match ? Number(match[1]) : null;
+}
+function gscErrorToAppError(err, context) {
+  if (err instanceof AppError) return err;
+  if (err instanceof GoogleApiError) {
+    if (err.status === 429) {
+      return quotaExceeded("Google Search Console API (rate limited; retries exhausted)");
+    }
+    if (err.status === 403) {
+      const disabled = parseGscApiDisabled(err.message);
+      if (disabled) {
+        const inProject = disabled.projectNumber ? ` (project ${disabled.projectNumber})` : "";
+        return forbidden(
+          `${context}: the Google Search Console API is not enabled for your Google Cloud project${inProject}. Enable the Search Console API and the Indexing API, wait ~2\u20135 minutes, then retry: ${disabled.enableUrl}`,
+          { reason: "gsc-api-disabled", upstreamStatus: 403, ...disabled }
+        );
+      }
+      return forbidden(
+        `${context}: the connected Google account does not have access to a verified Search Console property for this domain. Connect the account that owns the property.`,
+        { reason: "gsc-no-property-access", upstreamStatus: 403 }
+      );
+    }
+    if (err.status === 401) {
+      return forbidden(
+        `${context}: the Google connection has expired or was revoked. Reconnect Google Search Console.`,
+        { reason: "gsc-reconnect", upstreamStatus: 401 }
+      );
+    }
+    return providerError(`${context}: ${err.message}`, { upstreamStatus: err.status });
+  }
+  if (err instanceof GoogleAuthError) {
+    const status = googleAuthErrorStatus(err);
+    if (status === 429) return quotaExceeded("Google OAuth token refresh (rate limited)");
+    if (status != null && status >= 400 && status < 500) {
+      return forbidden(
+        `${context}: the stored Google credentials are no longer valid (token refresh failed). Reconnect Google Search Console.`,
+        { reason: "gsc-reconnect", upstreamStatus: status }
+      );
+    }
+    return providerError(
+      `${context}: ${err.message}. Reconnect Google Search Console if this persists.`,
+      status != null ? { upstreamStatus: status } : void 0
+    );
+  }
+  return providerError(`${context}: ${err instanceof Error ? err.message : String(err)}`);
+}
 async function googleRoutes(app, opts) {
   if (opts.googleStateSecret === void 0) {
     app.log.warn(
@@ -19375,9 +19437,13 @@ async function googleRoutes(app, opts) {
     }
     const store = requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
-    const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
-    const sites = await listSites(accessToken);
-    return { sites };
+    try {
+      const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
+      const sites = await listSites(accessToken);
+      return { sites };
+    } catch (err) {
+      throw gscErrorToAppError(err, "Failed to list Search Console properties");
+    }
   });
   app.post("/projects/:name/google/gsc/sync", async (request) => {
     const store = requireConnectionStore();
@@ -19470,11 +19536,16 @@ async function googleRoutes(app, opts) {
     if (!url) {
       throw validationError("url is required");
     }
-    const { accessToken, propertyId } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
-    if (!propertyId) {
-      throw validationError("No GSC property configured for this connection");
+    let result;
+    try {
+      const { accessToken, propertyId } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
+      if (!propertyId) {
+        throw validationError("No GSC property configured for this connection");
+      }
+      result = await inspectUrl(accessToken, url, propertyId);
+    } catch (err) {
+      throw gscErrorToAppError(err, "Failed to inspect URL in Search Console");
     }
-    const result = await inspectUrl(accessToken, url, propertyId);
     const ir = result.inspectionResult;
     const idx = ir.indexStatusResult;
     const mob = ir.mobileUsabilityResult;
@@ -19682,12 +19753,16 @@ async function googleRoutes(app, opts) {
     }
     const store = requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
-    const { accessToken, propertyId } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
-    if (!propertyId) {
-      throw validationError('No GSC property configured for this connection. Set one with "canonry google set-property".');
+    try {
+      const { accessToken, propertyId } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
+      if (!propertyId) {
+        throw validationError('No GSC property configured for this connection. Set one with "canonry google set-property".');
+      }
+      const sitemaps = await listSitemaps(accessToken, propertyId);
+      return { sitemaps };
+    } catch (err) {
+      throw gscErrorToAppError(err, "Failed to list Search Console sitemaps");
     }
-    const sitemaps = await listSitemaps(accessToken, propertyId);
-    return { sitemaps };
   });
   app.post("/projects/:name/google/gsc/discover-sitemaps", async (request) => {
     const { clientId: googleClientId, clientSecret: googleClientSecret } = getAuthConfig();
@@ -19703,8 +19778,13 @@ async function googleRoutes(app, opts) {
     if (!conn.propertyId) {
       throw validationError("No GSC property configured for this connection");
     }
-    const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
-    const sitemaps = await listSitemaps(accessToken, conn.propertyId);
+    let sitemaps;
+    try {
+      const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
+      sitemaps = await listSitemaps(accessToken, conn.propertyId);
+    } catch (err) {
+      throw gscErrorToAppError(err, "Failed to discover Search Console sitemaps");
+    }
     if (sitemaps.length === 0) {
       throw validationError("No sitemaps found for this GSC property. Submit a sitemap in Google Search Console first.");
     }
@@ -24303,6 +24383,8 @@ var CloudRunAuthError = class extends Error {
     this.body = body;
     this.name = "CloudRunAuthError";
   }
+  httpStatus;
+  body;
 };
 function createServiceAccountJwt2(clientEmail, privateKey, scope) {
   if (!clientEmail) throw new CloudRunAuthError("clientEmail is required");
@@ -24479,6 +24561,8 @@ var CloudRunLoggingApiError = class extends Error {
     this.body = body;
     this.name = "CloudRunLoggingApiError";
   }
+  status;
+  body;
 };
 function validateAccessToken3(accessToken) {
   if (!accessToken.trim()) {
@@ -27533,6 +27617,8 @@ var WordpressTrafficApiError = class extends Error {
     this.body = body;
     this.name = "WordpressTrafficApiError";
   }
+  status;
+  body;
 };
 function trimRequired(name, value) {
   const trimmed = value.trim();
@@ -27734,6 +27820,9 @@ var VercelLogsApiError = class extends Error {
     this.retryAfterSeconds = retryAfterSeconds;
     this.name = "VercelLogsApiError";
   }
+  status;
+  body;
+  retryAfterSeconds;
 };
 function parseRetryAfter2(headerValue) {
   if (!headerValue) return void 0;
@@ -32571,6 +32660,7 @@ var IntelligenceService = class {
   constructor(db) {
     this.db = db;
   }
+  db;
   /**
    * Analyze a completed run and persist insights + health snapshot.
    * Idempotent: deletes prior results for the same runId before inserting.

package/dist/{chunk-ETM5EPQH.js → chunk-KPN22EWK.js} RENAMED Viewed

@@ -41,8 +41,8 @@ function authRequired(message = "Authentication required") {
 function authInvalid() {
   return new AppError("AUTH_INVALID", "Invalid API key", 401);
 }
-function forbidden(message = "Forbidden") {
-  return new AppError("FORBIDDEN", message, 403);
+function forbidden(message = "Forbidden", details) {
+  return new AppError("FORBIDDEN", message, 403, details);
 }
 function quotaExceeded(metric) {
   return new AppError("QUOTA_EXCEEDED", `Quota exceeded for ${metric}`, 429);

package/dist/{chunk-ZUQK4TLL.js → chunk-QKTIP6GC.js} RENAMED Viewed

@@ -9,7 +9,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-42TDEKKM.js";
+} from "./chunk-XI6YSTGE.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -97,7 +97,7 @@ import {
   siteAuditPages,
   siteAuditSnapshots,
   usageCounters
-} from "./chunk-BIT3JPMW.js";
+} from "./chunk-3WXARKUE.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -149,7 +149,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-ETM5EPQH.js";
+} from "./chunk-KPN22EWK.js";
 // src/telemetry.ts
 import crypto from "crypto";
@@ -476,15 +476,17 @@ function resolveModel(config) {
   return config.model || DEFAULT_MODEL;
 }
 function createClient2(config) {
+  const httpOptions = config.baseUrl ? { httpOptions: { baseUrl: config.baseUrl } } : {};
   if (isVertexConfig(config)) {
     return new GoogleGenAI({
       vertexai: true,
       project: config.vertexProject,
       location: config.vertexRegion || "us-central1",
-      ...config.vertexCredentials ? { googleAuthOptions: { keyFilename: config.vertexCredentials } } : {}
+      ...config.vertexCredentials ? { googleAuthOptions: { keyFilename: config.vertexCredentials } } : {},
+      ...httpOptions
     });
   }
-  return new GoogleGenAI({ apiKey: config.apiKey });
+  return new GoogleGenAI({ apiKey: config.apiKey, ...httpOptions });
 }
 function validateConfig(config) {
   if ("vertexProject" in config && config.vertexProject !== void 0 && config.vertexProject.trim().length === 0) {
@@ -749,7 +751,7 @@ async function embedQueries(queries2, options) {
   if (!options.apiKey && !options.client) {
     throw new Error("embedQueries: missing apiKey");
   }
-  const client = options.client ?? createGeminiEmbedClient(options.apiKey);
+  const client = options.client ?? createGeminiEmbedClient(options.apiKey, options.baseUrl);
   return client.embedBatch(queries2, {
     model: options.model ?? DEFAULT_EMBED_MODEL,
     taskType: CLUSTERING_TASK_TYPE,
@@ -770,8 +772,11 @@ function extractEmbeddingVectors(response, expectedLength) {
     return e.values;
   });
 }
-function createGeminiEmbedClient(apiKey) {
-  const genai = new GoogleGenAI2({ apiKey });
+function createEmbedGenAI(apiKey, baseUrl) {
+  return new GoogleGenAI2({ apiKey, ...baseUrl ? { httpOptions: { baseUrl } } : {} });
+}
+function createGeminiEmbedClient(apiKey, baseUrl) {
+  const genai = createEmbedGenAI(apiKey, baseUrl);
   return {
     async embedBatch(queries2, opts) {
       const response = await genai.models.embedContent({
@@ -792,6 +797,7 @@ function toGeminiConfig(config) {
   return {
     apiKey: config.apiKey ?? "",
     model: config.model,
+    baseUrl: config.baseUrl,
     quotaPolicy: config.quotaPolicy,
     vertexProject: config.vertexProject,
     vertexRegion: config.vertexRegion,
@@ -895,6 +901,12 @@ async function withRetry3(fn, options = {}) {
 // ../provider-openai/src/normalize.ts
 var DEFAULT_MODEL2 = "gpt-5.4";
+function createClient3(config) {
+  return new OpenAI({
+    apiKey: config.apiKey,
+    ...config.baseUrl ? { baseURL: config.baseUrl } : {}
+  });
+}
 function validateConfig2(config) {
   if (!config.apiKey || config.apiKey.length === 0) {
     return { ok: false, provider: "openai", message: "missing api key" };
@@ -910,7 +922,7 @@ async function healthcheck2(config) {
   const validation = validateConfig2(config);
   if (!validation.ok) return validation;
   try {
-    const client = new OpenAI({ apiKey: config.apiKey });
+    const client = createClient3(config);
     const response = await withRetry3(
       () => client.responses.create({
         model: config.model ?? DEFAULT_MODEL2,
@@ -935,7 +947,7 @@ async function healthcheck2(config) {
 }
 async function executeTrackedQuery2(input) {
   const model = input.config.model ?? DEFAULT_MODEL2;
-  const client = new OpenAI({ apiKey: input.config.apiKey });
+  const client = createClient3(input.config);
   const webSearchTool = { type: "web_search" };
   if (input.location) {
     webSearchTool.user_location = {
@@ -1108,7 +1120,7 @@ function extractDomainFromUri2(uri) {
 }
 async function generateText2(prompt, config) {
   const model = config.model ?? DEFAULT_MODEL2;
-  const client = new OpenAI({ apiKey: config.apiKey });
+  const client = createClient3(config);
   const response = await withRetry3(
     () => client.responses.create({
       model,
@@ -1130,6 +1142,7 @@ function toOpenAIConfig(config) {
   return {
     apiKey: config.apiKey ?? "",
     model: config.model,
+    baseUrl: config.baseUrl,
     quotaPolicy: config.quotaPolicy
   };
 }
@@ -1823,6 +1836,7 @@ var CDPProviderError = class extends Error {
     this.code = code;
     this.name = "CDPProviderError";
   }
+  code;
 };
 // ../provider-cdp/src/connection.ts
@@ -3031,6 +3045,8 @@ var ProviderExecutionGate = class {
     this.maxConcurrency = maxConcurrency;
     this.maxPerMinute = maxPerMinute;
   }
+  maxConcurrency;
+  maxPerMinute;
   window = [];
   waiters = [];
   rateLimitChain = Promise.resolve();
@@ -4933,7 +4949,7 @@ function buildDefaultDeps(registry) {
     },
     async embed(queries2) {
       if (cfg.apiKey) {
-        return embedQueries(queries2, { apiKey: cfg.apiKey });
+        return embedQueries(queries2, { apiKey: cfg.apiKey, baseUrl: cfg.baseUrl });
       }
       throw new Error("Discovery currently requires a Gemini API key. Vertex-mode embeddings are not yet implemented.");
     },
@@ -5761,7 +5777,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-QIGX7IVQ.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-CDVUUG7O.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -7179,6 +7195,11 @@ var RunCoordinator = class {
     this.onInsightsGenerated = onInsightsGenerated;
     this.onAeroEvent = onAeroEvent;
   }
+  db;
+  notifier;
+  intelligenceService;
+  onInsightsGenerated;
+  onAeroEvent;
   async onRunCompleted(runId, projectId) {
     const runRow = this.db.select().from(runs).where(eq14(runs.id, runId)).get();
     const kind = runRow?.kind ?? RunKinds["answer-visibility"];
@@ -8843,6 +8864,8 @@ var ProviderExecutionGate2 = class {
     this.maxConcurrency = maxConcurrency;
     this.maxPerMinute = maxPerMinute;
   }
+  maxConcurrency;
+  maxPerMinute;
   window = [];
   waiters = [];
   rateLimitChain = Promise.resolve();
@@ -8904,6 +8927,7 @@ var SnapshotService = class {
   constructor(registry) {
     this.registry = registry;
   }
+  registry;
   async createReport(input) {
     const companyName = input.companyName.trim();
     const domain = normalizeDomain(input.domain);
@@ -9452,11 +9476,16 @@ var BROWSER_ADAPTERS = [
 var adapterMap = Object.fromEntries(
   API_ADAPTERS.map((a) => [a.name, a])
 );
-function summarizeProviderConfig(provider, config) {
+function summarizeProviderConfig(config) {
   return {
     configured: Boolean(config?.apiKey || config?.baseUrl),
     model: config?.model ?? null,
-    baseUrl: provider === "local" ? config?.baseUrl ?? null : null,
+    // baseUrl is surfaced for ALL providers, not just local — gemini/openai now
+    // honor a custom endpoint, so repointing one must show in the settings
+    // summary AND produce an audit diff. Omitting it for API providers would let
+    // an endpoint redirect (a credential-exfiltration vector on a box where the
+    // provider key is the carrier) happen with no audit trail.
+    baseUrl: config?.baseUrl ?? null,
     quota: { ...config?.quota ?? DEFAULT_QUOTA }
   };
 }
@@ -10330,7 +10359,7 @@ async function createServer(opts) {
       if (!adapterMap[name]) return null;
       if (!opts.config.providers) opts.config.providers = {};
       const existing = opts.config.providers[name];
-      const beforeConfig = summarizeProviderConfig(name, existing);
+      const beforeConfig = summarizeProviderConfig(existing);
       const mergedQuota = incomingQuota ? { ...existing?.quota ?? DEFAULT_QUOTA, ...incomingQuota } : existing?.quota;
       opts.config.providers[name] = {
         apiKey: apiKey || existing?.apiKey,
@@ -10369,7 +10398,7 @@ async function createServer(opts) {
           entry.vertexConfigured = !!opts.config.providers?.[name]?.vertexProject;
         }
       }
-      const afterConfig = summarizeProviderConfig(name, opts.config.providers[name]);
+      const afterConfig = summarizeProviderConfig(opts.config.providers[name]);
       if (JSON.stringify(beforeConfig) !== JSON.stringify(afterConfig)) {
         const diff = JSON.stringify({
           before: existing ? beforeConfig : null,

package/dist/{chunk-42TDEKKM.js → chunk-XI6YSTGE.js} RENAMED Viewed

@@ -22,7 +22,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-ETM5EPQH.js";
+} from "./chunk-KPN22EWK.js";
 // src/config.ts
 import fs from "fs";

package/dist/cli.js CHANGED Viewed

@@ -27,7 +27,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-ZUQK4TLL.js";
+} from "./chunk-QKTIP6GC.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -44,7 +44,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-42TDEKKM.js";
+} from "./chunk-XI6YSTGE.js";
 import {
   apiKeys,
   createClient,
@@ -52,7 +52,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-BIT3JPMW.js";
+} from "./chunk-3WXARKUE.js";
 import {
   CcReleaseSyncStatuses,
   CheckScopes,
@@ -72,7 +72,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-ETM5EPQH.js";
+} from "./chunk-KPN22EWK.js";
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -8305,6 +8305,9 @@ var PdfWriter = class {
     this.bold = bold;
     this.addPage();
   }
+  doc;
+  regular;
+  bold;
   usableWidth = PAGE_WIDTH - MARGIN * 2;
   page;
   y = 0;
@@ -9633,6 +9636,7 @@ var envSchema = z.object({
   // Gemini
   GEMINI_API_KEY: z.string().optional(),
   GEMINI_MODEL: z.string().optional(),
+  GEMINI_BASE_URL: z.string().optional(),
   GEMINI_MAX_CONCURRENCY: z.coerce.number().int().positive().default(2),
   GEMINI_MAX_REQUESTS_PER_MINUTE: z.coerce.number().int().positive().default(10),
   GEMINI_MAX_REQUESTS_PER_DAY: z.coerce.number().int().positive().default(1e3),
@@ -9643,6 +9647,7 @@ var envSchema = z.object({
   // OpenAI
   OPENAI_API_KEY: z.string().optional(),
   OPENAI_MODEL: z.string().optional(),
+  OPENAI_BASE_URL: z.string().optional(),
   OPENAI_MAX_CONCURRENCY: z.coerce.number().int().positive().default(2),
   OPENAI_MAX_REQUESTS_PER_MINUTE: z.coerce.number().int().positive().default(10),
   OPENAI_MAX_REQUESTS_PER_DAY: z.coerce.number().int().positive().default(1e3),
@@ -9669,11 +9674,13 @@ var bootstrapEnvSchema = z.object({
   CANONRY_DATABASE_PATH: z.string().optional(),
   GEMINI_API_KEY: z.string().optional(),
   GEMINI_MODEL: z.string().optional(),
+  GEMINI_BASE_URL: z.string().optional(),
   GEMINI_VERTEX_PROJECT: z.string().optional(),
   GEMINI_VERTEX_REGION: z.string().optional(),
   GEMINI_VERTEX_CREDENTIALS: z.string().optional(),
   OPENAI_API_KEY: z.string().optional(),
   OPENAI_MODEL: z.string().optional(),
+  OPENAI_BASE_URL: z.string().optional(),
   ANTHROPIC_API_KEY: z.string().optional(),
   ANTHROPIC_MODEL: z.string().optional(),
   PERPLEXITY_API_KEY: z.string().optional(),
@@ -9692,6 +9699,7 @@ function getBootstrapEnv(source, overrides) {
     providers.gemini = {
       apiKey: parsed.GEMINI_API_KEY ?? "",
       model: parsed.GEMINI_MODEL || "gemini-2.5-flash",
+      baseUrl: parsed.GEMINI_BASE_URL,
       quota: providerQuotaPolicySchema.parse({
         maxConcurrency: 2,
         maxRequestsPerMinute: 10,
@@ -9706,6 +9714,7 @@ function getBootstrapEnv(source, overrides) {
     providers.openai = {
       apiKey: parsed.OPENAI_API_KEY,
       model: parsed.OPENAI_MODEL || "gpt-5.4",
+      baseUrl: parsed.OPENAI_BASE_URL,
       quota: providerQuotaPolicySchema.parse({
         maxConcurrency: 2,
         maxRequestsPerMinute: 10,

package/dist/index.js CHANGED Viewed

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-ZUQK4TLL.js";
+} from "./chunk-QKTIP6GC.js";
 import {
   loadConfig
-} from "./chunk-42TDEKKM.js";
-import "./chunk-BIT3JPMW.js";
-import "./chunk-ETM5EPQH.js";
+} from "./chunk-XI6YSTGE.js";
+import "./chunk-3WXARKUE.js";
+import "./chunk-KPN22EWK.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-QIGX7IVQ.js → intelligence-service-CDVUUG7O.js} RENAMED Viewed

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-BIT3JPMW.js";
-import "./chunk-ETM5EPQH.js";
+} from "./chunk-3WXARKUE.js";
+import "./chunk-KPN22EWK.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js CHANGED Viewed

@@ -3,8 +3,8 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-42TDEKKM.js";
-import "./chunk-ETM5EPQH.js";
+} from "./chunk-XI6YSTGE.js";
+import "./chunk-KPN22EWK.js";
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.76.2",
+  "version": "4.78.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -37,8 +37,8 @@
   },
   "dependencies": {
     "@ainyc/aeo-audit": "3.0.0",
-    "@anthropic-ai/sdk": "^0.78.0",
-    "@fastify/static": "^8.1.0",
+    "@anthropic-ai/sdk": "^0.91.1",
+    "@fastify/static": "^9.1.1",
     "@google/genai": "^1.46.0",
     "@mariozechner/pi-agent-core": "0.67.6",
     "@mariozechner/pi-ai": "0.67.6",
@@ -63,25 +63,25 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
-    "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-intelligence": "0.0.0",
+    "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0"
+    "@ainyc/canonry-provider-local": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",