@ainyc/canonry 4.80.0 → 4.82.0

package/dist/cli.js

@@ -27,7 +27,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-LCABGFYN.js";
+} from "./chunk-NSZ3D3MM.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -44,7 +44,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-2QBSRHSN.js";
+} from "./chunk-JLAD6CYH.js";
 import {
   apiKeys,
   createClient,
@@ -52,14 +52,17 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-CXIGHPBE.js";
+} from "./chunk-IEUTAQUF.js";
 import {
+  BacklinkSources,
   CcReleaseSyncStatuses,
   CheckScopes,
   CheckStatuses,
   CitationStates,
+  READ_ONLY_SCOPE,
   RunStatuses,
   TrafficEventKinds,
+  backlinkSourceSchema,
   discoveryBucketSchema,
   discoveryCompetitorTypeSchema,
   effectiveDomains,
@@ -73,7 +76,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-AVN6Q6LM.js";
+} from "./chunk-KPSFRSS7.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -441,6 +444,17 @@ function emitJsonl(records) {
 }
 
 // src/commands/backlinks.ts
+function parseSourceFlag(value) {
+  if (value === void 0) return void 0;
+  const parsed = backlinkSourceSchema.safeParse(value);
+  if (!parsed.success) {
+    throw new CliError({
+      code: "VALIDATION_ERROR",
+      message: `Invalid --source "${value}". Expected one of: ${Object.values(BacklinkSources).join(", ")}.`
+    });
+  }
+  return parsed.data;
+}
 function getClient() {
   return createApiClient();
 }
@@ -472,8 +486,10 @@ function formatSync(sync) {
 function formatSummaryAndDomains(project, response) {
   const lines = [];
   lines.push(`Project: ${project}`);
+  lines.push(`Source:  ${response.source}`);
   if (!response.summary) {
-    lines.push("No ready release \u2014 run `canonry backlinks sync --release <id>` first.");
+    const hint = response.source === BacklinkSources["bing-webmaster"] ? "No Bing inbound links yet \u2014 run `canonry backlinks bing-sync <project>` (Bing must be connected)." : "No ready release \u2014 run `canonry backlinks sync --release <id>` first.";
+    lines.push(hint);
     return lines.join("\n");
   }
   const s = response.summary;
@@ -619,7 +635,8 @@ async function backlinksList(opts) {
   const response = await client.backlinksDomains(opts.project, {
     limit: opts.limit ?? 50,
     release: opts.release,
-    excludeCrawlers: opts.excludeCrawlers
+    excludeCrawlers: opts.excludeCrawlers,
+    source: opts.source
   });
   if (opts.format === "json") {
     printJson(response);
@@ -632,6 +649,45 @@ async function backlinksList(opts) {
   }
   console.log(formatSummaryAndDomains(opts.project, response));
 }
+function formatSourceAvailability(res) {
+  const lines = [];
+  lines.push(`Project: ${res.projectId}   Target: ${res.targetDomain}`);
+  lines.push("");
+  lines.push("Source          Connected  Data   Linking domains  Latest window");
+  for (const s of res.sources) {
+    lines.push(
+      `${s.source.padEnd(15)} ${(s.connected ? "yes" : "no").padEnd(10)} ${(s.hasData ? "yes" : "no").padEnd(6)} ${String(s.totalLinkingDomains).padStart(15)}  ${s.latestRelease ?? "\u2014"}`
+    );
+  }
+  if (!res.anyConnected) {
+    lines.push("");
+    lines.push("No backlink source is set up. Enable Common Crawl (`canonry project \u2026 autoExtractBacklinks`");
+    lines.push("+ `canonry backlinks sync`) or connect Bing (`canonry bing connect <project> --api-key <key>`).");
+  }
+  return lines.join("\n");
+}
+async function backlinksSources(opts) {
+  const res = await getClient().backlinksSources(opts.project, { excludeCrawlers: opts.excludeCrawlers });
+  if (opts.format === "json") {
+    printJson(res);
+    return;
+  } else if (opts.format === "jsonl") {
+    emitJsonl(res.sources.map((s) => ({ project: opts.project, targetDomain: res.targetDomain, ...s })));
+    return;
+  }
+  console.log(formatSourceAvailability(res));
+}
+async function backlinksBingSync(opts) {
+  const client = getClient();
+  const run = await client.backlinksBingSync(opts.project);
+  const final = opts.wait ? await pollRun(run.id, opts.format) : run;
+  if (isMachineFormat(opts.format)) {
+    printJson(final);
+    return;
+  }
+  if (opts.wait) process.stderr.write("\n");
+  console.log(`Bing sync run ${final.id} (${final.status})${final.error ? " \u2014 " + formatRunErrorOneLine(final.error) : ""}`);
+}
 async function backlinksReleases(opts = {}) {
   const rows = await getClient().backlinksCachedReleases();
   if (opts.format === "json") {
@@ -709,17 +765,18 @@ var BACKLINKS_CLI_COMMANDS = [
   },
   {
     path: ["backlinks", "list"],
-    usage: "canonry backlinks list <project> [--limit <n>] [--release <id>] [--exclude-crawlers] [--format json]",
+    usage: "canonry backlinks list <project> [--source commoncrawl|bing-webmaster] [--limit <n>] [--release <id>] [--exclude-crawlers] [--format json|jsonl]",
     options: {
       limit: stringOption(),
       release: stringOption(),
+      source: stringOption(),
       "exclude-crawlers": { type: "boolean" }
     },
     run: async (input) => {
       const project = requireProject(
         input,
         "backlinks list",
-        "canonry backlinks list <project> [--limit <n>] [--release <id>] [--exclude-crawlers]"
+        "canonry backlinks list <project> [--source commoncrawl|bing-webmaster] [--limit <n>] [--release <id>] [--exclude-crawlers]"
       );
       const limit = parseIntegerOption(input, "limit", {
         message: "--limit must be an integer",
@@ -730,11 +787,50 @@ var BACKLINKS_CLI_COMMANDS = [
         project,
         limit,
         release: getString(input.values, "release"),
+        source: parseSourceFlag(getString(input.values, "source")),
+        excludeCrawlers: getBoolean(input.values, "exclude-crawlers"),
+        format: input.format
+      });
+    }
+  },
+  {
+    path: ["backlinks", "sources"],
+    usage: "canonry backlinks sources <project> [--exclude-crawlers] [--format json|jsonl]",
+    options: {
+      "exclude-crawlers": { type: "boolean" }
+    },
+    run: async (input) => {
+      const project = requireProject(
+        input,
+        "backlinks sources",
+        "canonry backlinks sources <project>"
+      );
+      await backlinksSources({
+        project,
         excludeCrawlers: getBoolean(input.values, "exclude-crawlers"),
         format: input.format
       });
     }
   },
+  {
+    path: ["backlinks", "bing-sync"],
+    usage: "canonry backlinks bing-sync <project> [--wait] [--format json]",
+    options: {
+      wait: { type: "boolean" }
+    },
+    run: async (input) => {
+      const project = requireProject(
+        input,
+        "backlinks bing-sync",
+        "canonry backlinks bing-sync <project> [--wait]"
+      );
+      await backlinksBingSync({
+        project,
+        wait: getBoolean(input.values, "wait"),
+        format: input.format
+      });
+    }
+  },
   {
     path: ["backlinks", "releases"],
     usage: "canonry backlinks releases [--format json]",
@@ -5545,9 +5641,18 @@ async function listApiKeys(format) {
   }
 }
 async function createApiKey(opts) {
+  const explicitScopes = opts.scopes && opts.scopes.length > 0 ? opts.scopes : void 0;
+  if (opts.readOnly && explicitScopes) {
+    throw new CliError({
+      code: "CLI_USAGE_ERROR",
+      message: "--read-only cannot be combined with --scope",
+      displayMessage: 'Error: --read-only cannot be combined with --scope (it already implies the "read" scope).'
+    });
+  }
   const client = getClient11();
   const body = { name: opts.name };
-  if (opts.scopes && opts.scopes.length > 0) body.scopes = opts.scopes;
+  const scopes = opts.readOnly ? [READ_ONLY_SCOPE] : explicitScopes;
+  if (scopes) body.scopes = scopes;
   const created = await client.createApiKey(body);
   if (isMachineFormat(opts.format)) {
     console.log(JSON.stringify(created, null, 2));
@@ -5555,11 +5660,24 @@ async function createApiKey(opts) {
   }
   console.log(`API key "${created.name}" created.
 `);
-  console.log(`  Key:     ${created.key}`);
-  console.log(`  Prefix:  ${created.keyPrefix}`);
-  console.log(`  Scopes:  ${created.scopes.join(", ")}`);
+  console.log(`  Key:       ${created.key}`);
+  console.log(`  Prefix:    ${created.keyPrefix}`);
+  console.log(`  Scopes:    ${created.scopes.join(", ")}`);
+  console.log(`  Read-only: ${created.readOnly ? "yes" : "no"}`);
   console.log("\nSave this now \u2014 it will not be shown again.");
 }
+async function showApiKeySelf(format) {
+  const client = getClient11();
+  const key = await client.getApiKeySelf();
+  if (isMachineFormat(format)) {
+    console.log(JSON.stringify(key, null, 2));
+    return;
+  }
+  console.log(`API key "${key.name}" (${key.keyPrefix})`);
+  console.log(`  Scopes:    ${key.scopes.join(", ")}`);
+  console.log(`  Read-only: ${key.readOnly ? "yes" : "no"}`);
+  console.log(`  Status:    ${keyStatus(key)}`);
+}
 async function revokeApiKey(id, format) {
   const client = getClient11();
   const key = await client.revokeApiKey(id);
@@ -5581,15 +5699,16 @@ var KEYS_CLI_COMMANDS = [
   },
   {
     path: ["key", "create"],
-    usage: "canonry key create --name <name> [--scope <s> ...] [--format json]",
+    usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
     options: {
       name: stringOption(),
-      scope: multiStringOption()
+      scope: multiStringOption(),
+      "read-only": { type: "boolean" }
     },
     run: async (input) => {
       const name = requireStringOption(input, "name", {
         command: "key.create",
-        usage: "canonry key create --name <name> [--scope <s> ...] [--format json]",
+        usage: "canonry key create --name <name> [--read-only | --scope <s> ...] [--format json]",
         message: "--name is required"
       });
       const raw = getStringArray(input.values, "scope") ?? [];
@@ -5597,10 +5716,18 @@ var KEYS_CLI_COMMANDS = [
       await createApiKey({
         name,
         scopes: scopes.length > 0 ? scopes : void 0,
+        readOnly: getBoolean(input.values, "read-only"),
         format: input.format
       });
     }
   },
+  {
+    path: ["key", "whoami"],
+    usage: "canonry key whoami [--format json]",
+    run: async (input) => {
+      await showApiKeySelf(input.format);
+    }
+  },
   {
     path: ["key", "revoke"],
     usage: "canonry key revoke <id> [--format json]",
@@ -5615,12 +5742,12 @@ var KEYS_CLI_COMMANDS = [
   },
   {
     path: ["key"],
-    usage: "canonry key <list|create|revoke>",
+    usage: "canonry key <list|create|revoke|whoami>",
     run: async (input) => {
       unknownSubcommand(input.positionals[0], {
         command: "key",
-        usage: "canonry key <list|create|revoke>",
-        available: ["list", "create", "revoke"]
+        usage: "canonry key <list|create|revoke|whoami>",
+        available: ["list", "create", "revoke", "whoami"]
       });
     }
   }

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-LCABGFYN.js";
+} from "./chunk-NSZ3D3MM.js";
 import {
   loadConfig
-} from "./chunk-2QBSRHSN.js";
-import "./chunk-CXIGHPBE.js";
-import "./chunk-AVN6Q6LM.js";
+} from "./chunk-JLAD6CYH.js";
+import "./chunk-IEUTAQUF.js";
+import "./chunk-KPSFRSS7.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-ZWW3I3NL.js → intelligence-service-2UUJ3YGI.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-CXIGHPBE.js";
-import "./chunk-AVN6Q6LM.js";
+} from "./chunk-IEUTAQUF.js";
+import "./chunk-KPSFRSS7.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,8 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-2QBSRHSN.js";
-import "./chunk-AVN6Q6LM.js";
+} from "./chunk-JLAD6CYH.js";
+import {
+  isReadOnlyKey
+} from "./chunk-KPSFRSS7.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -363,9 +365,25 @@ async function main(argv = process.argv.slice(2)) {
     }
     throw error;
   }
-  const server = createCanonryMcpServer({ scope: options.scope, eager: options.eager });
+  const client = createApiClient();
+  const scope = await resolveEffectiveScope(client, options.scope);
+  const server = createCanonryMcpServer({ scope, eager: options.eager, clientFactory: () => client });
   await server.connect(new StdioServerTransport());
 }
+async function resolveEffectiveScope(client, flagScope) {
+  if (flagScope === "read-only") return "read-only";
+  try {
+    const self = await client.getApiKeySelf();
+    if (isReadOnlyKey(self.scopes)) {
+      process.stderr.write(
+        "canonry-mcp: configured API key is read-only \u2014 restricting to read tools.\n"
+      );
+      return "read-only";
+    }
+  } catch {
+  }
+  return flagScope;
+}
 function parseCliOptions(argv, env = process.env) {
   if (argv.includes("--help") || argv.includes("-h")) {
     throw new HelpRequested();
@@ -419,5 +437,6 @@ export {
   HELP_TEXT,
   HelpRequested,
   main,
-  parseCliOptions
+  parseCliOptions,
+  resolveEffectiveScope
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.80.0",
+  "version": "4.82.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -62,27 +62,27 @@
     "@types/node-cron": "^3.0.11",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
+    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
-    "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
-    "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
+    "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
+    "@ainyc/canonry-provider-openai": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",