@ainyc/canonry 4.80.0 → 4.82.0

package/dist/{chunk-2QBSRHSN.js → chunk-JLAD6CYH.js}

@@ -2,6 +2,7 @@ import {
   AGENT_MEMORY_KEY_MAX_LENGTH,
   AGENT_MEMORY_VALUE_MAX_BYTES,
   DISCOVERY_MAX_PROBES_CAP,
+  backlinkSourceSchema,
   competitorBatchRequestSchema,
   discoveryBucketSchema,
   discoveryCompetitorTypeSchema,
@@ -22,7 +23,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-AVN6Q6LM.js";
+} from "./chunk-KPSFRSS7.js";
 
 // src/config.ts
 import fs from "fs";
@@ -1605,6 +1606,18 @@ var postApiV1Keys = (options) => {
     }
   });
 };
+var getApiV1KeysSelf = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/keys/self",
+    ...options
+  });
+};
 var postApiV1KeysByIdRevoke = (options) => {
   return (options.client ?? client).post({
     security: [
@@ -3221,6 +3234,30 @@ var getApiV1ProjectsByNameBacklinksHistory = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameBacklinksSources = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/backlinks/sources",
+    ...options
+  });
+};
+var postApiV1ProjectsByNameBacklinksBingSync = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/backlinks/bing-sync",
+    ...options
+  });
+};
 var postApiV1ProjectsByNameTrafficConnectCloudRun = (options) => {
   return (options.client ?? client).post({
     security: [
@@ -4017,6 +4054,10 @@ var ApiClient = class {
   async listApiKeys() {
     return this.invoke(() => getApiV1Keys({ client: this.heyClient }));
   }
+  /** Introspect the CURRENT key (the one this client authenticates with). */
+  async getApiKeySelf() {
+    return this.invoke(() => getApiV1KeysSelf({ client: this.heyClient }));
+  }
   async createApiKey(body) {
     return this.invoke(() => postApiV1Keys({ client: this.heyClient, body }));
   }
@@ -5060,6 +5101,23 @@ var ApiClient = class {
       })
     );
   }
+  async backlinksBingSync(project) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameBacklinksBingSync({
+        client: this.heyClient,
+        path: { name: project }
+      })
+    );
+  }
+  async backlinksSources(project, opts = {}) {
+    return this.invoke(
+      () => getApiV1ProjectsByNameBacklinksSources({
+        client: this.heyClient,
+        path: { name: project },
+        query: { excludeCrawlers: opts.excludeCrawlers ? "1" : void 0 }
+      })
+    );
+  }
   async backlinksSummary(project, opts = {}) {
     return this.invoke(
       () => getApiV1ProjectsByNameBacklinksSummary({
@@ -5067,7 +5125,8 @@ var ApiClient = class {
         path: { name: project },
         query: {
           release: opts.release,
-          excludeCrawlers: opts.excludeCrawlers ? "1" : void 0
+          excludeCrawlers: opts.excludeCrawlers ? "1" : void 0,
+          source: opts.source
         }
       })
     );
@@ -5081,14 +5140,19 @@ var ApiClient = class {
           limit: opts.limit,
           offset: opts.offset,
           release: opts.release,
-          excludeCrawlers: opts.excludeCrawlers ? "1" : void 0
+          excludeCrawlers: opts.excludeCrawlers ? "1" : void 0,
+          source: opts.source
         }
       })
     );
   }
-  async backlinksHistory(project) {
+  async backlinksHistory(project, opts = {}) {
     return this.invoke(
-      () => getApiV1ProjectsByNameBacklinksHistory({ client: this.heyClient, path: { name: project } })
+      () => getApiV1ProjectsByNameBacklinksHistory({
+        client: this.heyClient,
+        path: { name: project },
+        query: { source: opts.source }
+      })
     );
   }
 };
@@ -5332,7 +5396,11 @@ var contentMapInputSchema = z2.object({
 var backlinksDomainsInputSchema = z2.object({
   project: projectNameSchema,
   limit: z2.number().int().positive().max(200).optional().describe("Max linking-domain rows. Default 50, max 200."),
-  release: z2.string().optional().describe("Common Crawl release id (e.g., cc-main-2026-jan-feb-mar). Omit for the most recent release with data.")
+  release: z2.string().optional().describe("Window id (Common Crawl release e.g. cc-main-2026-jan-feb-mar, or Bing window e.g. bing-2026-06-15). Omit for the most recent window with data."),
+  source: backlinkSourceSchema.optional().describe("Backlink source: commoncrawl (default) or bing-webmaster.")
+});
+var backlinksSourcesInputSchema = z2.object({
+  project: projectNameSchema
 });
 var memoryUpsertInputSchema = z2.object({
   project: projectNameSchema,
@@ -5822,7 +5890,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_backlinks_domains",
     title: "List backlink domains",
-    description: "Backlink summary and top linking domains from the most recent ready Common Crawl release for a project. Off-site authority signal that correlates with citation likelihood. Returns null summary when no release sync has completed for this workspace.",
+    description: "Source-aware backlink summary + top linking domains for a project. `source=commoncrawl` (default) reads the most recent ready Common Crawl release; `source=bing-webmaster` reads the latest live Bing Webmaster inbound-link window. Off-site authority signal that correlates with citation likelihood. Returns null summary when the source has no data yet.",
     access: "read",
     tier: "setup",
     inputSchema: backlinksDomainsInputSchema,
@@ -5830,9 +5898,21 @@ var canonryMcpTools = [
     openApiOperations: ["GET /api/v1/projects/{name}/backlinks/domains"],
     handler: (client2, input) => client2.backlinksDomains(input.project, {
       limit: input.limit ?? 50,
-      release: input.release
+      release: input.release,
+      source: input.source
     })
   }),
+  defineTool({
+    name: "canonry_backlinks_sources",
+    title: "Backlink source availability",
+    description: "Reports which backlink sources are set up for a project (commoncrawl, bing-webmaster): connected, has data, latest window, linking-domain count, and freshness. Use to decide whether to read CC vs Bing or prompt the operator to connect a source.",
+    access: "read",
+    tier: "setup",
+    inputSchema: backlinksSourcesInputSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/backlinks/sources"],
+    handler: (client2, input) => client2.backlinksSources(input.project)
+  }),
   defineTool({
     name: "canonry_settings_get",
     title: "Get settings",

package/dist/{chunk-AVN6Q6LM.js → chunk-KPSFRSS7.js}

@@ -571,6 +571,16 @@ var auditLogEntrySchema = z3.object({
   createdAt: z3.string()
 });
 
+// ../contracts/src/scopes.ts
+var READ_ONLY_SCOPE = "read";
+var WILDCARD_SCOPE = "*";
+function grantsWrite(scope) {
+  return scope === WILDCARD_SCOPE || scope === "write" || scope.endsWith(".write");
+}
+function isReadOnlyKey(scopes) {
+  return scopes.includes(READ_ONLY_SCOPE) && !scopes.some(grantsWrite);
+}
+
 // ../contracts/src/api-keys.ts
 import { z as z4 } from "zod";
 var apiKeyDtoSchema = z4.object({
@@ -579,6 +589,13 @@ var apiKeyDtoSchema = z4.object({
   /** First 9 chars of the raw token (`cnry_` + 4 hex). Safe to display. */
   keyPrefix: z4.string(),
   scopes: z4.array(z4.string()),
+  /**
+   * Server-derived convenience flag: `true` when this key is read-only (carries
+   * the `read` scope and no write-granting scope), in which case the API rejects
+   * every write HTTP method for it. Derived from `scopes` via `isReadOnlyKey`
+   * — surfaces don't recompute it (see the UI/CLI parity rule). Additive field.
+   */
+  readOnly: z4.boolean(),
   createdAt: z4.string(),
   lastUsedAt: z4.string().nullable(),
   revokedAt: z4.string().nullable()
@@ -2501,6 +2518,22 @@ var agentMemoryDeleteRequestSchema = z21.object({
 
 // ../contracts/src/backlinks.ts
 import { z as z22 } from "zod";
+var backlinkSourceSchema = z22.enum(["commoncrawl", "bing-webmaster"]);
+var BacklinkSources = backlinkSourceSchema.enum;
+function computeBacklinkSummaryMetrics(rows) {
+  if (rows.length === 0) {
+    return { totalLinkingDomains: 0, totalHosts: 0, top10HostsShare: "0" };
+  }
+  const sorted = [...rows].sort((a, b) => b.numHosts - a.numHosts);
+  const totalHosts = sorted.reduce((acc, r) => acc + r.numHosts, 0);
+  const top10Hosts = sorted.slice(0, 10).reduce((acc, r) => acc + r.numHosts, 0);
+  const share = totalHosts > 0 ? top10Hosts / totalHosts : 0;
+  return {
+    totalLinkingDomains: rows.length,
+    totalHosts,
+    top10HostsShare: share.toFixed(6)
+  };
+}
 var ccReleaseSyncStatusSchema = z22.enum(["queued", "downloading", "querying", "ready", "failed"]);
 var CcReleaseSyncStatuses = ccReleaseSyncStatusSchema.enum;
 var ccReleaseSyncDtoSchema = z22.object({
@@ -2526,16 +2559,24 @@ var ccReleaseSyncDtoSchema = z22.object({
 });
 var backlinkDomainDtoSchema = z22.object({
   linkingDomain: z22.string(),
-  numHosts: z22.number().int()
+  // For Common Crawl this is the count of distinct hosts within the linking
+  // domain; for Bing Webmaster it is the count of distinct linking pages (URLs)
+  // from that linking host. Read alongside `source` — the unit differs per source.
+  numHosts: z22.number().int(),
+  source: backlinkSourceSchema
 });
 var backlinkSummaryDtoSchema = z22.object({
   projectId: z22.string(),
+  // Window identifier. Common Crawl uses the release slug
+  // (`cc-main-YYYY-<mon>-<mon>-<mon>`); Bing Webmaster uses a synthetic
+  // per-sync-day window (`bing-YYYY-MM-DD`).
   release: z22.string(),
   targetDomain: z22.string(),
   totalLinkingDomains: z22.number().int(),
   totalHosts: z22.number().int(),
   top10HostsShare: z22.string(),
   queriedAt: z22.string(),
+  source: backlinkSourceSchema,
   // Populated when the response is filtered (e.g. ?excludeCrawlers=1).
   // Counts the rows omitted from totalLinkingDomains/totalHosts so callers
   // can show "N hidden" hints without re-deriving them.
@@ -2543,6 +2584,9 @@ var backlinkSummaryDtoSchema = z22.object({
   excludedHosts: z22.number().int().optional()
 });
 var backlinkListResponseSchema = z22.object({
+  // The source this response was filtered to (defaults to commoncrawl when the
+  // caller omits `?source`).
+  source: backlinkSourceSchema,
   summary: backlinkSummaryDtoSchema.nullable(),
   total: z22.number().int(),
   rows: z22.array(backlinkDomainDtoSchema)
@@ -2552,7 +2596,38 @@ var backlinkHistoryEntrySchema = z22.object({
   totalLinkingDomains: z22.number().int(),
   totalHosts: z22.number().int(),
   top10HostsShare: z22.string(),
-  queriedAt: z22.string()
+  queriedAt: z22.string(),
+  source: backlinkSourceSchema
+});
+var backlinkSourceAvailabilityDtoSchema = z22.object({
+  source: backlinkSourceSchema,
+  /**
+   * The source is set up for this project:
+   *  - commoncrawl: `autoExtractBacklinks` enabled AND a `ready` release sync exists.
+   *  - bing-webmaster: a Bing Webmaster connection exists for the project domain.
+   */
+  connected: z22.boolean(),
+  /** Backlink rows exist for this project + source. */
+  hasData: z22.boolean(),
+  /** Latest window id with data for this source, null when none. */
+  latestRelease: z22.string().nullable(),
+  /**
+   * Linking-domain count in the latest window. Excludes crawler/proxy hosts only
+   * when the request sets `?excludeCrawlers=1` (default off, matching the summary
+   * and domains endpoints); the dashboard passes it so the switcher pill matches
+   * the metric card.
+   */
+  totalLinkingDomains: z22.number().int(),
+  /** Freshness: `queriedAt` of the latest summary for this source, null when none. */
+  lastSyncedAt: z22.string().nullable()
+});
+var backlinkSourcesResponseSchema = z22.object({
+  projectId: z22.string(),
+  targetDomain: z22.string(),
+  /** Availability for every known source, in a stable order. */
+  sources: z22.array(backlinkSourceAvailabilityDtoSchema),
+  anyConnected: z22.boolean(),
+  anyData: z22.boolean()
 });
 var backlinksInstallStatusDtoSchema = z22.object({
   duckdbInstalled: z22.boolean(),
@@ -3023,6 +3098,17 @@ function absolutizeProjectUrl(url, canonicalDomain) {
   if (trimmed.startsWith("/")) return `https://${host}${trimmed}`;
   return `https://${host}/${trimmed}`;
 }
+function hostOf(value) {
+  if (value == null) return null;
+  const trimmed = value.trim();
+  if (!trimmed) return null;
+  try {
+    const url = trimmed.includes("://") ? new URL(trimmed) : new URL(`https://${trimmed}`);
+    return url.hostname.replace(/^www\./, "").toLowerCase();
+  } catch {
+    return null;
+  }
+}
 function normalizeUrlPath(input) {
   if (input == null) return null;
   let trimmed = input.trim();
@@ -4610,11 +4696,15 @@ export {
   AGENT_MEMORY_KEY_MAX_LENGTH,
   agentMemoryUpsertRequestSchema,
   agentMemoryDeleteRequestSchema,
+  backlinkSourceSchema,
+  BacklinkSources,
+  computeBacklinkSummaryMetrics,
   CcReleaseSyncStatuses,
   ccReleaseSyncDtoSchema,
   backlinkSummaryDtoSchema,
   backlinkListResponseSchema,
   backlinkHistoryEntrySchema,
+  backlinkSourcesResponseSchema,
   backlinksInstallStatusDtoSchema,
   backlinksInstallResultDtoSchema,
   ccAvailableReleaseSchema,
@@ -4643,6 +4733,7 @@ export {
   doctorReportSchema,
   summarizeCheckResults,
   absolutizeProjectUrl,
+  hostOf,
   normalizeUrlPath,
   citationVisibilityResponseSchema,
   emptyCitationVisibility,
@@ -4706,5 +4797,7 @@ export {
   AI_ENGINE_SELF_DOMAINS,
   VERTEX_AI_SEARCH_PROXY_DOMAIN,
   AI_PROVIDER_INFRA_DOMAINS,
-  escapeLikePattern
+  escapeLikePattern,
+  READ_ONLY_SCOPE,
+  isReadOnlyKey
 };