@ainyc/canonry 4.93.0 → 4.95.0

package/assets/assets/{trash-2-Cme1gNjU.js → trash-2-A1PQNK3E.js}

@@ -1 +1 @@
-import{c}from"./index-BPjIZIDO.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};
+import{c}from"./index-k1XIw8WK.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-BPjIZIDO.js"></script>
+    <script type="module" crossorigin src="./assets/index-k1XIw8WK.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Dq7p98wZ.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-B57xfQbP.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-ClRVR6aX.js">

package/dist/{chunk-ADTLQHJY.js → chunk-4E4JPS37.js}

@@ -9,7 +9,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-PK46TKGM.js";
+} from "./chunk-FFSJRZJR.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -111,7 +111,7 @@ import {
   siteAuditPages,
   siteAuditSnapshots,
   usageCounters
-} from "./chunk-KBDQ5OE4.js";
+} from "./chunk-7YU6ILWL.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -171,7 +171,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-AUQNKEHV.js";
+} from "./chunk-BUGJOQNW.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -2767,6 +2767,15 @@ function normalizeViews(raw) {
   return out.length > 0 ? out : void 0;
 }
 
+// src/agent-config.ts
+function resolveAgentEnabled(env, config) {
+  const raw = env.CANONRY_AGENT_DISABLED?.trim();
+  if (raw) {
+    return !(raw === "1" || raw.toLowerCase() === "true");
+  }
+  return config.agent?.mode !== "disabled";
+}
+
 // src/places-config.ts
 var DEFAULT_TIER = "atmosphere";
 var DEFAULT_REFRESH_INTERVAL_DAYS = 7;
@@ -6387,7 +6396,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-4ATCJITP.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-PGEGDNY6.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -10333,17 +10342,19 @@ async function createServer(opts) {
   const notifier = new Notifier(opts.db, serverUrl);
   const intelligenceService = new IntelligenceService(opts.db);
   const aeroClient = new ApiClient(opts.config.apiUrl, opts.config.apiKey, { skipProbe: true });
-  const sessionRegistry = new SessionRegistry({
+  const agentEnabled = resolveAgentEnabled(process.env, opts.config);
+  const sessionRegistry = agentEnabled ? new SessionRegistry({
     db: opts.db,
     client: aeroClient,
     config: opts.config
-  });
+  }) : void 0;
   const runCoordinator = new RunCoordinator(
     opts.db,
     notifier,
     intelligenceService,
     (runId, projectId, result) => notifier.dispatchInsightWebhooks(runId, projectId, result),
     async (ctx) => {
+      if (!sessionRegistry) return;
       const project = opts.db.select({ name: projects.name }).from(projects).where(eq20(projects.id, ctx.projectId)).get();
       if (!project) return;
       let content;
@@ -10870,6 +10881,7 @@ async function createServer(opts) {
     // Local-only Aero agent routes. Registered here so they inherit api-routes'
     // auth plugin — bare `registerAgentRoutes(app, ...)` would skip auth.
     registerAuthenticatedRoutes: async (scope) => {
+      if (!sessionRegistry) return;
       registerAgentRoutes(scope, { db: opts.db, sessionRegistry });
     },
     getGoogleAuthConfig: () => getGoogleAuthConfig(opts.config),

package/dist/{chunk-KBDQ5OE4.js → chunk-7YU6ILWL.js}

@@ -259,7 +259,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-AUQNKEHV.js";
+} from "./chunk-BUGJOQNW.js";
 
 // src/intelligence-service.ts
 import { eq as eq37, desc as desc18, asc as asc5, and as and27, ne as ne5, or as or5, inArray as inArray14, gte as gte7, lte as lte4 } from "drizzle-orm";
@@ -5284,7 +5284,7 @@ function analyzeGbp(signals) {
           title: `${loc.displayName}: public listing advertises ${loc.placesAmenities.length} amenit${loc.placesAmenities.length === 1 ? "y" : "ies"} canonry can\u2019t confirm via the GBP API`,
           recommendation: {
             action: 'Verify these amenities are set in the Google Business Profile "Hotel details" panel so the structured profile matches what the public listing advertises.',
-            reason: `Google\u2019s rendered listing advertises ${amenityList}, but the GBP Lodging API returns no structured attributes for this location. The Lodging API does not expose the owner-set "Hotel details" amenity panel, so the amenities may already be set there and simply not be readable via the API. Verify in Hotel details: if any are missing, add them, since the structured attributes are the amenity data you directly control and that AI answer engines cite.`
+            reason: `Google\u2019s rendered listing advertises ${amenityList}, but the GBP Lodging API returned no readable structured groups for this location. The amenities may already be set in the owner-facing "Hotel details" panel and simply not be visible in this API response. Verify in Hotel details: if any are missing, add them, since those structured attributes are amenity data you directly control.`
           }
         });
       } else {
@@ -5295,7 +5295,7 @@ function analyzeGbp(signals) {
           title: `${loc.displayName}: structured lodging attributes not readable via the GBP API`,
           recommendation: {
             action: 'Verify the hotel amenities in the Google Business Profile "Hotel details" panel. If they are already set there, no change is needed.',
-            reason: 'The GBP Lodging API returns no structured attributes for this location. That resource is commonly empty even for complete hotels, because the owner-set "Hotel details" amenity panel (breakfast, wifi, parking, accessibility, and the like) writes to a separate surface the Lodging API does not expose. Treat this as a verify, not a confirmed gap: confirm the amenities are set in Hotel details, the amenity source you directly control and that AI answer engines cite.'
+            reason: 'The GBP Lodging API returned no readable structured groups for this location. That response can be empty even for complete hotels whose owner-facing "Hotel details" panel has amenities set. Treat this as a verify, not a confirmed gap: confirm the amenities are set in Hotel details.'
           }
         });
       }
@@ -8117,7 +8117,15 @@ function buildCategoryCounts(counts2) {
 }
 
 // ../api-routes/src/intelligence.ts
-import { eq as eq11, desc as desc4, and as and6, inArray as inArray4 } from "drizzle-orm";
+import { eq as eq11, desc as desc4, and as and6, inArray as inArray4, like } from "drizzle-orm";
+var SEVERITY_RANK = { low: 0, medium: 1, high: 2, critical: 3 };
+function severitiesAtOrAbove(min) {
+  const floor = SEVERITY_RANK[min];
+  if (floor === void 0) {
+    throw validationError(`Invalid severity "${min}". Use one of: low, medium, high, critical.`);
+  }
+  return Object.keys(SEVERITY_RANK).filter((s) => SEVERITY_RANK[s] >= floor);
+}
 function emptyHealthSnapshot(projectId) {
   return {
     id: `no-data:${projectId}`,
@@ -8231,9 +8239,28 @@ async function intelligenceRoutes(app) {
     if (request.query.runId) {
       conditions.push(eq11(insights.runId, request.query.runId));
     }
+    const typeFilter = request.query.type?.trim();
+    if (typeFilter) {
+      conditions.push(
+        typeFilter.endsWith("*") ? like(insights.type, `${typeFilter.slice(0, -1)}%`) : eq11(insights.type, typeFilter)
+      );
+    }
+    const severityFilter = request.query.severity?.trim();
+    if (severityFilter) {
+      conditions.push(inArray4(insights.severity, severitiesAtOrAbove(severityFilter)));
+    }
+    let limit;
+    if (request.query.limit !== void 0) {
+      const parsed = Number(request.query.limit);
+      if (!Number.isInteger(parsed) || parsed < 1) {
+        throw validationError(`Invalid limit "${request.query.limit}". Use a positive integer.`);
+      }
+      limit = parsed;
+    }
     const rows = app.db.select().from(insights).where(conditions.length === 1 ? conditions[0] : and6(...conditions)).orderBy(desc4(insights.createdAt)).all();
     const showDismissed = request.query.dismissed === "true";
-    const result = rows.filter((r) => showDismissed || !r.dismissed).map(mapInsightRow);
+    let result = rows.filter((r) => showDismissed || !r.dismissed).map(mapInsightRow);
+    if (limit !== void 0) result = result.slice(0, limit);
     return reply.send(result);
   });
   app.get("/projects/:name/insights/:id", async (request, reply) => {
@@ -13050,7 +13077,7 @@ async function visibilityStatsRoutes(app) {
 }
 
 // ../api-routes/src/composites.ts
-import { eq as eq17, and as and12, desc as desc9, sql as sql7, like, or as or4, inArray as inArray9 } from "drizzle-orm";
+import { eq as eq17, and as and12, desc as desc9, sql as sql7, like as like2, or as or4, inArray as inArray9 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
@@ -13230,7 +13257,7 @@ async function compositeRoutes(app) {
           sql7`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
           sql7`${querySnapshots.citedDomains} LIKE ${pattern} ESCAPE '\\'`,
           sql7`${querySnapshots.rawResponse} LIKE ${pattern} ESCAPE '\\'`,
-          like(queries.query, pattern)
+          like2(queries.query, pattern)
         )
       )
     ).orderBy(desc9(querySnapshots.createdAt)).limit(limit + 1).all());
@@ -13238,8 +13265,8 @@ async function compositeRoutes(app) {
       and12(
         eq17(insights.projectId, project.id),
         or4(
-          like(insights.title, pattern),
-          like(insights.query, pattern),
+          like2(insights.title, pattern),
+          like2(insights.query, pattern),
           sql7`${insights.recommendation} LIKE ${pattern} ESCAPE '\\'`,
           sql7`${insights.cause} LIKE ${pattern} ESCAPE '\\'`
         )
@@ -16765,7 +16792,10 @@ var routeCatalog = [
     parameters: [
       nameParameter,
       { name: "dismissed", in: "query", description: "Include dismissed insights (true/false).", schema: stringSchema },
-      { name: "runId", in: "query", description: "Filter by run ID.", schema: stringSchema }
+      { name: "runId", in: "query", description: "Filter by run ID.", schema: stringSchema },
+      { name: "type", in: "query", description: "Filter by insight type. Exact match, or a trailing `*` for a prefix (e.g. `gbp-*`).", schema: stringSchema },
+      { name: "severity", in: "query", description: "Minimum severity (low|medium|high|critical); e.g. `high` returns high + critical.", schema: stringSchema },
+      { name: "limit", in: "query", description: "Cap the number of (newest-first) insights returned.", schema: stringSchema }
     ],
     responses: {
       // TODO: Add `InsightDto` Zod schema in contracts.
@@ -20147,11 +20177,12 @@ function normalizeAttribute(raw) {
     if (typeof v === "boolean" || typeof v === "string") values.push(v);
   }
   for (const s of raw.repeatedEnumValue?.setValues ?? []) values.push(s);
+  const unsetValues = [...raw.repeatedEnumValue?.unsetValues ?? []];
   const uris = [];
   for (const u of raw.uriValues ?? []) {
-    if (u?.uri) uris.push(u.uri);
+    if (u.uri) uris.push(u.uri);
   }
-  return { name: raw.name ?? "", valueType: raw.valueType ?? "", values, uris };
+  return { name: raw.name ?? "", valueType: raw.valueType ?? "", values, unsetValues, uris };
 }
 function countAttributes(attrs) {
   return attrs.length;
@@ -21390,7 +21421,10 @@ async function googleRoutes(app, opts) {
       locationName: r.locationName,
       attributeCount: r.attributeCount,
       syncedAt: r.syncedAt,
-      attributes: r.attributes
+      attributes: r.attributes.map((attr) => ({
+        ...attr,
+        unsetValues: attr.unsetValues ?? []
+      }))
     }));
     return { attributes, total: attributes.length };
   });
@@ -34530,8 +34564,8 @@ var IntelligenceService = class {
    *
    * Point-in-time (no previous-run comparison): for each SELECTED location it
    * derives signals from the shared GBP summary math (metric week-over-week,
-   * lodging completeness, place-action CTAs) plus the accumulating keyword
-   * monthly series (month-over-month keyword drop), then runs the pure
+   * Lodging API readable-group state, place-action CTAs) plus the accumulating
+   * keyword monthly series (month-over-month keyword drop), then runs the pure
    * `analyzeGbp` analyzer. Persists insights ONLY — no health snapshot, which is
    * an answer-visibility concept. Idempotent per `runId`; dismissals are
    * preserved across re-analysis of the same run by the stable insight id.

package/dist/{chunk-AUQNKEHV.js → chunk-BUGJOQNW.js}

@@ -995,7 +995,11 @@ var gbpPlaceActionListResponseSchema = z8.object({
 });
 var gbpLodgingDtoSchema = z8.object({
   locationName: z8.string(),
-  /** Count of non-empty top-level attribute groups (0 = empty profile / AEO gap). */
+  /**
+   * Count of non-empty top-level groups in the Lodging API response.
+   * 0 means the API returned no readable structured groups; it is a
+   * verify-the-Hotel-details-panel signal, not proof the hotel has no amenities.
+   */
   populatedGroupCount: z8.number().int().nonnegative(),
   syncedAt: z8.string(),
   /** Raw Lodging resource as Google returned it. */
@@ -1009,6 +1013,7 @@ var gbpAttributeDtoSchema = z8.object({
   name: z8.string(),
   valueType: z8.string(),
   values: z8.array(z8.union([z8.boolean(), z8.string()])),
+  unsetValues: z8.array(z8.string()),
   uris: z8.array(z8.string())
 });
 var gbpAttributesDtoSchema = z8.object({

package/dist/{chunk-PK46TKGM.js → chunk-FFSJRZJR.js}

@@ -23,7 +23,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-AUQNKEHV.js";
+} from "./chunk-BUGJOQNW.js";
 
 // src/config.ts
 import fs from "fs";
@@ -5024,7 +5024,10 @@ var ApiClient = class {
         path: { name: project },
         query: {
           dismissed: opts?.dismissed ? "true" : void 0,
-          runId: opts?.runId
+          runId: opts?.runId,
+          type: opts?.type,
+          severity: opts?.severity,
+          limit: opts?.limit !== void 0 ? String(opts.limit) : void 0
         }
       })
     );
@@ -6312,7 +6315,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_gbp_lodging",
     title: "Get GBP lodging attributes",
-    description: 'List the latest Google Business Profile lodging snapshot per location (hotel structured attributes). populatedGroupCount=0 means the Lodging API returned no structured attributes, which is common even for complete hotels because the owner-set "Hotel details" amenity panel is a separate surface the API does not expose. Treat it as a "verify the Hotel details panel", not a confirmed gap.',
+    description: 'List the latest Google Business Profile lodging snapshot per location (hotel structured attributes). populatedGroupCount=0 means the Lodging API returned no readable structured groups, which can happen even for complete hotels whose owner-facing "Hotel details" panel has amenities set. Treat it as a "verify the Hotel details panel", not a confirmed gap.',
     access: "read",
     tier: "gbp",
     inputSchema: gbpLocationScopedInputSchema,
@@ -6345,7 +6348,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_gbp_summary",
     title: "Get GBP local-AEO summary",
-    description: "Composite Google Business Profile summary for a project: performance totals + 7d deltas, keyword thresholded %, place-action CTA presence, lodging coverage, and owner-content profile completeness (how many selected locations populate secondary categories / description / service area / hours / phone, plus closed-status counts). All derived numbers computed server-side.",
+    description: "Composite Google Business Profile summary for a project: performance totals + 7d deltas, keyword thresholded %, place-action CTA presence, Lodging API readable-group counts, and owner-content profile completeness (how many selected locations populate secondary categories / description / service area / hours / phone, plus closed-status counts). All derived numbers computed server-side.",
     access: "read",
     tier: "gbp",
     inputSchema: gbpLocationScopedInputSchema,

package/dist/cli.js

@@ -27,7 +27,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-ADTLQHJY.js";
+} from "./chunk-4E4JPS37.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -44,7 +44,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-PK46TKGM.js";
+} from "./chunk-FFSJRZJR.js";
 import {
   apiKeys,
   createClient,
@@ -52,7 +52,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-KBDQ5OE4.js";
+} from "./chunk-7YU6ILWL.js";
 import {
   BacklinkSources,
   CcReleaseSyncStatuses,
@@ -77,7 +77,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-AUQNKEHV.js";
+} from "./chunk-BUGJOQNW.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -3534,7 +3534,11 @@ async function gbpAttributes(project, opts) {
     console.log(`  ${a.locationName}  ${a.attributeCount} attribute(s)`);
     for (const attr of a.attributes) {
       const key = attr.name.replace(/^attributes\//, "");
-      const val = attr.uris.length > 0 ? attr.uris.join(", ") : attr.values.join(", ");
+      const val = [
+        ...attr.values.map(String),
+        ...attr.unsetValues.map((v) => `unset:${v}`),
+        ...attr.uris
+      ].join(", ");
       console.log(`    ${key}: ${val}`);
     }
   }
@@ -3586,7 +3590,7 @@ async function gbpSummary(project, opts) {
   console.log(`
 Keywords: ${s.keywords.total} tracked, ${s.keywords.thresholdedPct}% privacy-thresholded`);
   console.log(`Place actions: ${s.placeActions.total} CTA(s) \u2014 reservation:${s.placeActions.hasReservationCta ? "yes" : "no"} booking:${s.placeActions.hasBookingCta ? "yes" : "no"} direct-merchant:${s.placeActions.hasDirectMerchantCta ? "yes" : "no"}`);
-  console.log(`Lodging: ${s.lodging.lodgingLocationCount} profile(s), ${s.lodging.populatedLodgingCount} populated, ${s.lodging.emptyLodgingCount} empty`);
+  console.log(`Lodging API: ${s.lodging.lodgingLocationCount} profile(s), ${s.lodging.populatedLodgingCount} with readable groups, ${s.lodging.emptyLodgingCount} with 0 readable groups`);
   const pc = s.profileCompleteness;
   console.log(`Profile completeness (${pc.locationCount} location(s)): ${pc.withSecondaryCategories} w/ secondary categories (${pc.secondaryCategoryTotal} total), ${pc.withDescription} w/ description, ${pc.withServiceArea} w/ service area, ${pc.withHours} w/ hours, ${pc.withPrimaryPhone} w/ phone` + (pc.permanentlyClosed || pc.temporarilyClosed ? `; closed: ${pc.permanentlyClosed} permanently, ${pc.temporarilyClosed} temporarily` : ""));
 }
@@ -9294,7 +9298,13 @@ var SNAPSHOT_CLI_COMMANDS = [
 // src/commands/insights.ts
 async function listInsights(project, opts) {
   const client = createApiClient();
-  const insights = await client.getInsights(project, { dismissed: opts.dismissed, runId: opts.runId });
+  const insights = await client.getInsights(project, {
+    dismissed: opts.dismissed,
+    runId: opts.runId,
+    type: opts.type,
+    severity: opts.severity,
+    limit: opts.limit
+  });
   if (opts.format === "json") {
     console.log(JSON.stringify(insights, null, 2));
     return;
@@ -9699,17 +9709,23 @@ function printGaps2(data) {
 var INTELLIGENCE_CLI_COMMANDS = [
   {
     path: ["insights"],
-    usage: "canonry insights <project> [--dismissed] [--run-id <id>] [--format json]",
+    usage: "canonry insights <project> [--type <type|prefix*>] [--severity <low|medium|high|critical>] [--limit <n>] [--dismissed] [--run-id <id>] [--format json]",
     options: {
       dismissed: { type: "boolean" },
-      "run-id": { type: "string" }
+      "run-id": { type: "string" },
+      type: { type: "string" },
+      severity: { type: "string" },
+      limit: { type: "string" }
     },
     run: async (input) => {
-      const usage = "canonry insights <project> [--dismissed] [--run-id <id>] [--format json]";
+      const usage = "canonry insights <project> [--type <type|prefix*>] [--severity <low|medium|high|critical>] [--limit <n>] [--dismissed] [--run-id <id>] [--format json]";
       const project = requireProject(input, "insights", usage);
       const dismissed = input.values.dismissed === true;
       const runId = getString(input.values, "run-id");
-      await listInsights(project, { dismissed, runId, format: input.format });
+      const type = getString(input.values, "type");
+      const severity = getString(input.values, "severity");
+      const limit = parseIntegerOption(input, "limit", { message: "limit must be an integer", usage, command: "insights" });
+      await listInsights(project, { dismissed, runId, type, severity, limit, format: input.format });
     }
   },
   {

package/dist/index.d.ts

@@ -157,7 +157,15 @@ interface VercelTrafficConfigEntry {
     connections?: VercelTrafficConnectionConfigEntry[];
 }
 interface AgentConfigEntry {
-    /** Agent mode. Only 'disabled' is valid until the native loop ships. */
+    /**
+     * Agent mode. `'disabled'` turns the built-in Aero agent OFF entirely — the
+     * proactive auto-wake on run completion does not fire, the `SessionRegistry`
+     * is not constructed, and the interactive agent routes (`/projects/:name/
+     * agent/*`) plus the `canonry agent ask` CLI (a thin client of those routes)
+     * are not served. Absent (the default) leaves Aero enabled. Resolved, with
+     * the `CANONRY_AGENT_DISABLED` env override, by `resolveAgentEnabled` in
+     * agent-config.ts.
+     */
     mode?: 'disabled';
 }
 /**

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-ADTLQHJY.js";
+} from "./chunk-4E4JPS37.js";
 import {
   loadConfig
-} from "./chunk-PK46TKGM.js";
-import "./chunk-KBDQ5OE4.js";
-import "./chunk-AUQNKEHV.js";
+} from "./chunk-FFSJRZJR.js";
+import "./chunk-7YU6ILWL.js";
+import "./chunk-BUGJOQNW.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-4ATCJITP.js → intelligence-service-PGEGDNY6.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-KBDQ5OE4.js";
-import "./chunk-AUQNKEHV.js";
+} from "./chunk-7YU6ILWL.js";
+import "./chunk-BUGJOQNW.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-PK46TKGM.js";
+} from "./chunk-FFSJRZJR.js";
 import {
   isReadOnlyKey
-} from "./chunk-AUQNKEHV.js";
+} from "./chunk-BUGJOQNW.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "4.93.0",
+  "version": "4.95.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -62,26 +62,26 @@
     "@types/node-cron": "^3.0.11",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
-    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
+    "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {