@ainyc/canonry 5.0.0 → 5.1.1

package/dist/{chunk-67NX4KVE.js → chunk-ZWVXUPLP.js}

@@ -14,8 +14,9 @@ import {
   isMachineFormat,
   loadConfig,
   loadConfigRaw,
+  resolveOperatorApiKeyIds,
   saveConfigPatch
-} from "./chunk-B2XM6AQ6.js";
+} from "./chunk-MEQGGODM.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -166,7 +167,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-UMU3IBXM.js";
+} from "./chunk-LHHJVGH7.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -311,7 +312,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-3WODA4JF.js";
+} from "./chunk-3DL3KV6C.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -6285,7 +6286,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "b510dfd8c0f64721829f5edb0df5afd951d7b960" : void 0;
+  const embedded = true ? "2c66fea459e20ff285096090dbc6a6ee788c4c00" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -6341,6 +6342,30 @@ function buildRunCompletedProps(input) {
   if (input.location) props.location = input.location;
   return props;
 }
+function buildSiteAuditCompletedProps(input) {
+  const props = {
+    status: input.status,
+    durationMs: Date.now() - input.startTime
+  };
+  if (input.trigger) props.trigger = input.trigger;
+  const domainHash = hashDomain(input.canonicalDomain ?? null);
+  if (domainHash) props.domainHash = domainHash;
+  const crawl = input.crawl;
+  if (!crawl) return props;
+  props.complete = crawl.complete;
+  if (crawl.termination) props.termination = crawl.termination;
+  props.pagesDiscovered = crawl.pagesDiscovered;
+  props.pagesFetched = crawl.pagesFetched;
+  props.pagesAudited = crawl.pagesAudited;
+  props.pagesErrored = crawl.pagesErrored;
+  if (crawl.pagesAudited > 0 && typeof crawl.aggregateScore === "number" && Number.isFinite(crawl.aggregateScore)) {
+    props.aggregateScore = crawl.aggregateScore;
+  }
+  props.pageBudget = crawl.pageBudget;
+  props.checkDeadLinks = crawl.checkDeadLinks;
+  if (crawl.checkDeadLinks) props.deadLinksFound = crawl.deadLinksFound;
+  return props;
+}
 
 // src/provider-execution-gate.ts
 var ProviderExecutionGate = class {
@@ -6609,7 +6634,14 @@ var JobRunner = class {
     this.registry = registry;
   }
   recoverStaleRuns() {
-    const stale = this.db.select({ id: runs.id, projectId: runs.projectId, kind: runs.kind, status: runs.status }).from(runs).where(inArray(runs.status, ["running", "queued"])).all();
+    const stale = this.db.select({
+      id: runs.id,
+      projectId: runs.projectId,
+      kind: runs.kind,
+      status: runs.status,
+      trigger: runs.trigger,
+      startedAt: runs.startedAt
+    }).from(runs).where(inArray(runs.status, ["running", "queued"])).all();
     if (stale.length === 0) return;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     for (const run of stale) {
@@ -6627,6 +6659,35 @@ var JobRunner = class {
       });
       if (!recovered) continue;
       log2.warn("run.recovered-stale", { runId: run.id, previousStatus: run.status });
+      if (run.kind === RunKinds["site-audit"]) this.trackRecoveredSiteAudit(run);
+    }
+  }
+  /**
+   * A crawl the process died under never reaches `executeSiteAudit`'s terminal
+   * telemetry, so without this every interrupted audit vanishes from the data.
+   * Emitted after the recovery transaction commits. `durationMs` runs from the
+   * crawl's start to this recovery, so it includes the downtime and is an upper
+   * bound; a run that was still queued has no start and reports 0.
+   *
+   * The source is set explicitly: recovery runs during server construction,
+   * before `canonry serve` switches the process source to `cli-server`.
+   */
+  trackRecoveredSiteAudit(run) {
+    try {
+      const startedAt = run.startedAt ? Date.parse(run.startedAt) : Number.NaN;
+      const project = this.db.select({ canonicalDomain: projects.canonicalDomain }).from(projects).where(eq2(projects.id, run.projectId)).get();
+      trackEvent(
+        "site_audit.completed",
+        buildSiteAuditCompletedProps({
+          status: "failed",
+          startTime: Number.isFinite(startedAt) ? startedAt : Date.now(),
+          trigger: run.trigger,
+          canonicalDomain: project?.canonicalDomain ?? null
+        }),
+        { errorCode: "SERVER_RESTARTED", source: "cli-server" }
+      );
+    } catch (err) {
+      log2.warn("telemetry.recovered-site-audit-failed", { runId: run.id, error: describeError(err) });
     }
   }
   async executeRun(runId, projectId, providerOverride, locationOverride) {
@@ -7148,6 +7209,7 @@ var JobRunner = class {
       if (existingRun.kind === "answer-visibility" && runTrigger !== "probe" && totalSnapshotsInserted > 0 && !this.hasPriorActivation(projectId, runId)) {
         trackEvent("activation.completed", {
           flowVersion: ONBOARDING_FLOW_VERSION,
+          kind: "answer_visibility",
           status: finalStatus,
           providerCountBucket: bucketOnboardingCount(executionContext.providerCount),
           queryCountBucket: bucketOnboardingCount(executionContext.queryCount),
@@ -10030,7 +10092,7 @@ function buildDiscoveryInsightTitle(input) {
 
 // src/execute-site-audit.ts
 import crypto19 from "crypto";
-import { and as and13, eq as eq15, sql as sql6 } from "drizzle-orm";
+import { and as and13, eq as eq15, ne as ne3, sql as sql6 } from "drizzle-orm";
 import { runSiteCrawl } from "@canonry/aeo-audit";
 
 // src/site-audit-root.ts
@@ -11107,10 +11169,35 @@ function deadLinkCheckedCount(edges, pages) {
   }
   return new Set([...edges].filter((edge) => edge.type === "anchor" && edge.classification === "internal" && attemptedUrls.has(edge.to)).map((edge) => edge.to)).size;
 }
+function trackSiteAuditOutcome(db, input) {
+  try {
+    const errorCode = input.status === "cancelled" ? "RUN_CANCELLED" : input.status === "failed" ? "UNKNOWN" : void 0;
+    trackEvent(
+      "site_audit.completed",
+      buildSiteAuditCompletedProps(input),
+      errorCode ? { errorCode } : void 0
+    );
+    const pagesAudited = input.crawl?.pagesAudited ?? 0;
+    if (pagesAudited === 0 || input.trigger === RunTriggers.probe) return;
+    const prior = db.select({ id: siteAuditSnapshots.id }).from(siteAuditSnapshots).where(and13(eq15(siteAuditSnapshots.projectId, input.projectId), ne3(siteAuditSnapshots.runId, input.runId))).limit(1).get();
+    if (prior) return;
+    trackEvent("activation.completed", {
+      flowVersion: ONBOARDING_FLOW_VERSION,
+      kind: "site_health",
+      status: input.status,
+      pagesAuditedBucket: bucketOnboardingCount(pagesAudited)
+    });
+  } catch (error) {
+    log13.warn("telemetry.failed", { runId: input.runId, projectId: input.projectId, error: describeError(error) });
+  }
+}
 async function executeSiteAudit(db, runId, projectId, opts = {}) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   const claim = db.update(runs).set({ status: "running", startedAt }).where(and13(eq15(runs.id, runId), eq15(runs.projectId, projectId), eq15(runs.status, "queued"))).run();
   if (claim.changes === 0) return;
+  const startTime = Date.now();
+  const trigger = db.select({ trigger: runs.trigger }).from(runs).where(eq15(runs.id, runId)).get()?.trigger ?? null;
+  let canonicalDomain = null;
   const attemptNumber = (db.select({ value: sql6`coalesce(max(${siteCrawlAttempts.attemptNumber}), 0)` }).from(siteCrawlAttempts).where(eq15(siteCrawlAttempts.runId, runId)).get()?.value ?? 0) + 1;
   const attemptId = crypto19.randomUUID();
   db.insert(siteCrawlAttempts).values({
@@ -11390,6 +11477,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
   try {
     const project = db.select().from(projects).where(eq15(projects.id, projectId)).get();
     if (!project) throw new Error(`Project not found: ${projectId}`);
+    canonicalDomain = project.canonicalDomain;
     const homepageUrl = toHomepageUrl(project.canonicalDomain);
     const maxPages = clampSiteAuditLimit(opts.maxPages ?? opts.limit);
     const maxEdges = clampSiteAuditEdgeLimit(opts.maxEdges);
@@ -11609,6 +11697,26 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       throw new Error(`Site audit run was no longer running before publication: ${runId}`);
     }
     log13.info("completed", { runId, projectId, status: terminalStatus, complete: crawlSummary.complete, pages: crawlSummary.pagesObserved });
+    trackSiteAuditOutcome(db, {
+      runId,
+      projectId,
+      status: crawlSummary.complete ? "completed" : "partial",
+      startTime,
+      trigger,
+      canonicalDomain,
+      crawl: {
+        complete: crawlSummary.complete,
+        termination: crawlSummary.terminationReason,
+        pagesDiscovered: crawlSummary.pagesDiscovered,
+        pagesFetched: crawlSummary.pagesFetched,
+        pagesAudited: crawlSummary.auditRollup.auditedPages,
+        pagesErrored: errorCount,
+        aggregateScore: crawlSummary.auditRollup.aggregateScore,
+        pageBudget: maxPages,
+        checkDeadLinks: opts.checkDeadLinks ?? false,
+        deadLinksFound
+      }
+    });
   } catch (error) {
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     const cancelled = isCancelled(error, opts.signal);
@@ -11627,6 +11735,14 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       }).where(and13(eq15(runs.id, runId), eq15(runs.status, "running"))).run();
     });
     log13.error("failed", { runId, projectId, cancelled, error: message });
+    trackSiteAuditOutcome(db, {
+      runId,
+      projectId,
+      status: cancelled ? "cancelled" : "failed",
+      startTime,
+      trigger,
+      canonicalDomain
+    });
     throw error;
   }
 }
@@ -12096,7 +12212,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-MGQRJW4V.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-7XX5ZRYE.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -15861,6 +15977,7 @@ function registerMcpHttpRoutes(scope, opts) {
       server = createCanonryMcpServer({
         scope: segment.readOnly || isReadOnlyKey(scopes) ? "read-only" : "all",
         credentialScopes: scopes,
+        operator: request.operatorAccess === true,
         tiers: segment.tiers,
         clientFactory: () => client
       });
@@ -15908,7 +16025,8 @@ function registerMcpHttpRoutes(scope, opts) {
       kind: request.principal?.kind ?? "api-key",
       id: principal.id,
       scopes: [...new Set(principal.scopes)].sort(),
-      projectId: principal.projectId ?? null
+      projectId: principal.projectId ?? null,
+      operator: request.operatorAccess === true
     }));
     const sessionId = request.headers["mcp-session-id"];
     const existing = typeof sessionId === "string" ? sessions.get(sessionId) : void 0;
@@ -17699,6 +17817,7 @@ function createGoogleMarketingConfigCredentialStore(input) {
   };
 }
 async function createServer(opts) {
+  const operatorApiKeyIds = resolveOperatorApiKeyIds(process.env);
   const dashboardManagedRunKinds = resolveDashboardManagedRunKinds(process.env, opts.config);
   const operationalLogs = new OperationalLogStore(opts.db, {
     retention: opts.config.database === ":memory:" ? "process" : "durable"
@@ -19305,6 +19424,7 @@ async function createServer(opts) {
         }
       });
     },
+    operatorApiKeyIds,
     listOperationalLogs: (query) => operationalLogs.list(query),
     getTelemetryStatus,
     setTelemetryEnabled: (enabled) => {

package/dist/cli.js

@@ -29,11 +29,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-67NX4KVE.js";
+} from "./chunk-ZWVXUPLP.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-LJKAB4CX.js";
+} from "./chunk-66KGNC4U.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -59,7 +59,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-B2XM6AQ6.js";
+} from "./chunk-MEQGGODM.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -73,7 +73,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-UMU3IBXM.js";
+} from "./chunk-LHHJVGH7.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -152,7 +152,7 @@ import {
   snapshotProviderModeSchema,
   visibilityReportRequestSchema,
   winnabilityClassSchema
-} from "./chunk-3WODA4JF.js";
+} from "./chunk-3DL3KV6C.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -9235,6 +9235,7 @@ async function showApiKeySelf(format) {
   console.log(`API key "${key.name}" (${key.keyPrefix})`);
   console.log(`  Scopes:    ${key.scopes.join(", ")}`);
   console.log(`  Read-only: ${key.readOnly ? "yes" : "no"}`);
+  console.log(`  Operator:  ${key.operator === true ? "yes" : "no"}`);
   console.log(`  Reach:     ${keyReach(key)}`);
   console.log(`  Status:    ${keyStatus(key)}`);
 }

package/dist/index.js

@@ -3,12 +3,12 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-67NX4KVE.js";
+} from "./chunk-ZWVXUPLP.js";
 import {
   loadConfig
-} from "./chunk-B2XM6AQ6.js";
-import "./chunk-UMU3IBXM.js";
-import "./chunk-3WODA4JF.js";
+} from "./chunk-MEQGGODM.js";
+import "./chunk-LHHJVGH7.js";
+import "./chunk-3DL3KV6C.js";
 export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,

package/dist/{intelligence-service-MGQRJW4V.js → intelligence-service-7XX5ZRYE.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-UMU3IBXM.js";
-import "./chunk-3WODA4JF.js";
+} from "./chunk-LHHJVGH7.js";
+import "./chunk-3DL3KV6C.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -1,13 +1,13 @@
 import {
   autoSyncSkills
-} from "./chunk-LJKAB4CX.js";
+} from "./chunk-66KGNC4U.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-B2XM6AQ6.js";
+} from "./chunk-MEQGGODM.js";
 import {
   isReadOnlyKey
-} from "./chunk-3WODA4JF.js";
+} from "./chunk-3DL3KV6C.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -54,19 +54,18 @@ async function resolveEffectiveScope(client, flagScope) {
   return (await resolveEffectiveAuthorization(client, flagScope)).scope;
 }
 async function resolveEffectiveAuthorization(client, flagScope) {
-  if (flagScope === "read-only") return { scope: "read-only" };
   try {
     const self = await client.getApiKeySelf();
     if (isReadOnlyKey(self.scopes)) {
       process.stderr.write(
         "canonry-mcp: configured API key is read-only \u2014 restricting to read tools.\n"
       );
-      return { scope: "read-only", credentialScopes: self.scopes };
+      return { scope: "read-only", credentialScopes: self.scopes, operator: self.operator === true };
     }
-    return { scope: flagScope, credentialScopes: self.scopes };
+    return { scope: flagScope, credentialScopes: self.scopes, operator: self.operator === true };
   } catch {
   }
-  return { scope: flagScope };
+  return { scope: flagScope, operator: false };
 }
 function parseCliOptions(argv, env = process.env) {
   if (argv.includes("--help") || argv.includes("-h")) {

package/package.json

@@ -1,8 +1,23 @@
 {
   "name": "@ainyc/canonry",
-  "version": "5.0.0",
+  "version": "5.1.1",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
+  "keywords": [
+    "aeo",
+    "answer-engine-optimization",
+    "geo",
+    "generative-engine-optimization",
+    "ai-visibility",
+    "citation-tracking",
+    "seo",
+    "mcp",
+    "chatgpt",
+    "claude",
+    "gemini",
+    "perplexity",
+    "self-hosted"
+  ],
   "license": "MIT",
   "homepage": "https://canonry.ai",
   "repository": {
@@ -73,30 +88,30 @@
     "tsx": "^4.19.0",
     "@ainyc/canonry-web": "0.0.0",
     "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
-    "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
+    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0"
+    "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {
     "build": "pnpm run build:cli && pnpm run build:web",