@ainyc/canonry 5.1.2 → 5.1.3

package/assets/agent-workspace/skills/canonry/references/canonry-cli.md

@@ -1258,6 +1258,8 @@ Every command takes `--format`:
 - **`json`** — one pretty-printed JSON document (the full envelope). Stable contract.
 - **`jsonl`** — newline-delimited JSON: the command's **primary collection**, one self-contained record per line. The agent-friendly machine format — no envelope key to guess (`.checks` vs `.results` vs `.rows`), no `jq` flattening, greppable line by line.
 
+**Update notice.** When a newer canonry is published, the CLI writes one line to **stderr** before the command runs (stdout is never touched): `[canonry] UPDATE_AVAILABLE: ...` in text mode, or `{"notice":{"code":"UPDATE_AVAILABLE","current":"…","latest":"…","installMethod":"npm|homebrew|docker","upgradeCommand":"…","url":"…"}}` with `--format json|jsonl`. Tell the operator, or run the `upgradeCommand` (it already matches how canonry was installed) and restart `canonry serve`. `cnry doctor --check canonry.version.current` reports the same for the running server (`version.outdated` warns). Silence with `CANONRY_DISABLE_UPDATE_CHECK=1`. Over MCP the same notice arrives in the initialize instructions and as `updateAvailable` in `canonry_help`.
+
 `jsonl` is supported by every **collection** command — one whose primary output is a list: `insights`, `runs`, `evidence`, `history`, `query/keyword/competitor list`, `notify list/events`, `google` reads (`performance`, `performance-daily`, `inspections`, `coverage-history`, `deindexed`, `status`, `properties`, `list-sitemaps`), `bing` reads (`coverage-history`, `inspections`, `performance`, `sites`), `ga` reads (`ai-referral-daily`, `ai-referral-history`, `social-referral-history`, `session-history`, `coverage`), `google-ads` customer/snapshot reads, `gtm` account/container/workspace/snapshot reads, conversion-tracking contracts and integrity findings, `ads geo search` and `ads conversions` reads, `traffic events/sources/status`, `discover list/show`, `content targets/sources/gaps/map`, `backlinks list/releases`, `project list/locations`, `key list`, `agent memory list`, `agent providers`, `sources` (streams the ranked cited-domain list), and `doctor`. (`content brief` is an object command — `jsonl` degrades to its JSON document.)
 
 Each `jsonl` line re-injects the envelope context it would otherwise lose, so a line lifted out still self-describes:

package/dist/{chunk-BS4ZC7FG.js → chunk-5ZOLPHTO.js}

@@ -17,7 +17,7 @@ import {
   resolveOperatorApiKeyIds,
   runWithUsageTags,
   saveConfigPatch
-} from "./chunk-5K2NUQOV.js";
+} from "./chunk-AEE5DGTE.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -168,7 +168,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-WSYJ4IT7.js";
+} from "./chunk-EBUX3C5H.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -179,6 +179,7 @@ import {
   AdsCampaignBiddingTypes,
   AgentProviderIds,
   BacklinkSources,
+  CANONRY_NPM_PACKAGE_URL,
   CITED_URL_CAPTURE_VERSION,
   CcReleaseSyncStatuses,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
@@ -239,6 +240,7 @@ import {
   classifyProviderErrorMessages,
   classifyTemplateLinkEdge,
   cloudflareQueueNameSchema,
+  compareSemver,
   computeBacklinkSummaryMetrics,
   contentActionLabel,
   contentBriefDtoSchema,
@@ -279,9 +281,11 @@ import {
   isAgentProviderId,
   isBrowserProvider,
   isGhostTelemetryEvent,
+  isInstallMethod,
   isReadOnlyKey,
   isRetryableHttpError,
   isSelfLink,
+  isStrictSemver,
   isVertexGroundingRedirect,
   mapWithConcurrency,
   maskTelemetryAnonymousId,
@@ -313,11 +317,14 @@ import {
   templateLinkUbiquityAvailable,
   textContainsBrandAlias,
   textContainsDomain,
+  updateCheckEnvOptOut,
+  upgradeCaveatFor,
+  upgradeCommandFor,
   usageSurfaceSchema,
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -569,47 +576,46 @@ function deliverEvent(event, properties, options, delivery = {}) {
 }
 
 // src/update-check.ts
+import fs from "fs";
 import { createRequire as createRequire2 } from "module";
+import { fileURLToPath } from "url";
 var _require2 = createRequire2(import.meta.url);
 var { version: PKG_VERSION } = _require2("../package.json");
 var PKG_NAME = "@canonry/canonry";
 var NPM_DIST_TAGS_URL = `https://registry.npmjs.org/-/package/${PKG_NAME}/dist-tags`;
-var NPM_PACKAGE_URL = `https://www.npmjs.com/package/${PKG_NAME}`;
+var NPM_PACKAGE_URL = CANONRY_NPM_PACKAGE_URL;
 var FETCH_TIMEOUT_MS = 1500;
-function isUpdateCheckEnabled() {
-  if (process.env.CANONRY_DISABLE_UPDATE_CHECK === "1") return false;
-  if (process.env.DO_NOT_TRACK === "1") return false;
-  if (process.env.CI) return false;
-  if (!configExists()) return true;
+var CONTAINER_MARKERS = ["/.dockerenv", "/run/.containerenv"];
+function detectInstallMethod(opts) {
+  const declared = (opts?.env ?? process.env).CANONRY_INSTALL_METHOD;
+  if (isInstallMethod(declared)) return declared;
+  let modulePath = opts?.modulePath ?? fileURLToPath(import.meta.url);
   try {
-    const raw = loadConfigRaw();
-    return raw?.updateCheck !== false;
+    modulePath = fs.realpathSync(modulePath);
   } catch {
-    return true;
   }
+  if (modulePath.replace(/\\/g, "/").includes("/Cellar/canonry/")) return "homebrew";
+  const exists = opts?.exists ?? fs.existsSync;
+  if (CONTAINER_MARKERS.some((marker) => exists(marker))) return "docker";
+  return "npm";
 }
-function compareSemver(a, b) {
-  const parse = (v) => {
-    const core = v.split(/[-+]/)[0];
-    if (!core) return null;
-    const parts = core.split(".");
-    if (parts.length < 3) return null;
-    const nums = [];
-    for (let i = 0; i < 3; i++) {
-      const n = Number(parts[i]);
-      if (!Number.isInteger(n) || n < 0) return null;
-      nums.push(n);
-    }
-    return [nums[0], nums[1], nums[2]];
-  };
-  const pa = parse(a);
-  const pb = parse(b);
-  if (!pa || !pb) return 0;
-  for (let i = 0; i < 3; i++) {
-    if (pa[i] > pb[i]) return 1;
-    if (pa[i] < pb[i]) return -1;
+var detectedInstallMethod;
+function currentInstallMethod() {
+  detectedInstallMethod ??= detectInstallMethod();
+  return detectedInstallMethod;
+}
+function isUpdateCheckEnabled() {
+  return updateCheckDisabledReason() === null;
+}
+function updateCheckDisabledReason() {
+  const envOptOut = updateCheckEnvOptOut(process.env);
+  if (envOptOut) return envOptOut;
+  if (!configExists()) return null;
+  try {
+    return loadConfigRaw()?.updateCheck === false ? "config" : null;
+  } catch {
+    return null;
   }
-  return 0;
 }
 async function fetchLatestVersion(opts) {
   const controller = new AbortController();
@@ -622,7 +628,7 @@ async function fetchLatestVersion(opts) {
     });
     if (!res.ok) return null;
     const data = await res.json();
-    if (typeof data.latest !== "string") return null;
+    if (typeof data.latest !== "string" || !isStrictSemver(data.latest)) return null;
     return data.latest;
   } catch {
     return null;
@@ -630,13 +636,15 @@ async function fetchLatestVersion(opts) {
     clearTimeout(timeout);
   }
 }
-function buildUpdateAvailable(current, latest) {
+function buildUpdateAvailable(current, latest, installMethod = currentInstallMethod()) {
+  if (!isStrictSemver(latest)) return null;
   if (compareSemver(latest, current) <= 0) return null;
   return {
     current,
     latest,
     url: NPM_PACKAGE_URL,
-    upgradeCommand: `npm install -g ${PKG_NAME}`
+    upgradeCommand: upgradeCommandFor(installMethod),
+    installMethod
   };
 }
 async function checkLatestVersionForCli(opts) {
@@ -674,6 +682,45 @@ async function checkLatestVersionForCli(opts) {
   }
   return buildUpdateAvailable(PKG_VERSION, latest);
 }
+function readCachedUpdateAvailable() {
+  if (!isUpdateCheckEnabled()) return null;
+  if (!configExists()) return null;
+  try {
+    const cachedLatest = loadConfigRaw()?.lastKnownLatestVersion;
+    if (typeof cachedLatest !== "string") return null;
+    return buildUpdateAvailable(PKG_VERSION, cachedLatest);
+  } catch {
+    return null;
+  }
+}
+var UPDATE_AVAILABLE_NOTICE_CODE = "UPDATE_AVAILABLE";
+function formatUpdateNotice(update, opts) {
+  const caveat = upgradeCaveatFor(update.installMethod);
+  if (opts.format === "json" || opts.format === "jsonl") {
+    return `${JSON.stringify({
+      notice: {
+        code: UPDATE_AVAILABLE_NOTICE_CODE,
+        current: update.current,
+        latest: update.latest,
+        installMethod: update.installMethod,
+        upgradeCommand: update.upgradeCommand,
+        url: update.url,
+        ...caveat ? { note: caveat } : {}
+      }
+    })}
+`;
+  }
+  if (opts.interactive) {
+    return `
+\u2192 canonry ${update.latest} is available (you have ${update.current}).
+  Upgrade: ${update.upgradeCommand}
+` + (caveat ? `  ${caveat}
+` : "") + "\n";
+  }
+  const upgrade = update.installMethod === "docker" ? `Upgrade: ${update.upgradeCommand}.` : `Upgrade with \`${update.upgradeCommand}\`, then restart any running \`canonry serve\`.`;
+  return `[canonry] ${UPDATE_AVAILABLE_NOTICE_CODE}: canonry ${update.latest} is available (installed ${update.current}). ${upgrade} ${caveat ? `${caveat} ` : ""}Silence with CANONRY_DISABLE_UPDATE_CHECK=1.
+`;
+}
 var memoryCache = null;
 var inFlight = null;
 function startBackgroundRefresh(getNow) {
@@ -700,6 +747,22 @@ function checkLatestVersionForServer(opts) {
   if (!memoryCache || !memoryCache.latest) return null;
   return buildUpdateAvailable(PKG_VERSION, memoryCache.latest);
 }
+function getServerUpdateStatus(opts) {
+  const installMethod = currentInstallMethod();
+  const base = { current: PKG_VERSION, installMethod, upgradeCommand: upgradeCommandFor(installMethod), url: NPM_PACKAGE_URL };
+  const disabledBy = updateCheckDisabledReason();
+  if (disabledBy) return { ...base, enabled: false, disabledBy, latest: null };
+  checkLatestVersionForServer(opts);
+  let latest = memoryCache?.latest ?? null;
+  if (!latest && configExists()) {
+    try {
+      const cached = loadConfigRaw()?.lastKnownLatestVersion;
+      if (typeof cached === "string") latest = cached;
+    } catch {
+    }
+  }
+  return { ...base, enabled: true, latest: latest && isStrictSemver(latest) ? latest : null };
+}
 
 // src/google-marketing-runtime.ts
 import crypto3 from "crypto";
@@ -3470,9 +3533,9 @@ function createGoogleMarketingRuntime(options) {
 // src/server.ts
 import { createRequire as createRequire4 } from "module";
 import crypto27 from "crypto";
-import fs7 from "fs";
+import fs8 from "fs";
 import path8 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { and as and20, eq as eq26 } from "drizzle-orm";
 import Fastify from "fastify";
 import os4 from "os";
@@ -5393,12 +5456,12 @@ function sleep2(ms) {
 }
 
 // ../provider-cdp/src/screenshot.ts
-import fs from "fs";
+import fs2 from "fs";
 import path from "path";
 async function captureElementScreenshot(client, selector, outputPath) {
   const dir = path.dirname(outputPath);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
+  if (!fs2.existsSync(dir)) {
+    fs2.mkdirSync(dir, { recursive: true });
   }
   let clip;
   try {
@@ -5432,7 +5495,7 @@ async function captureElementScreenshot(client, selector, outputPath) {
   }
   const { data } = await client.Page.captureScreenshot(screenshotParams);
   const buffer = Buffer.from(data, "base64");
-  fs.writeFileSync(outputPath, buffer);
+  fs2.writeFileSync(outputPath, buffer);
   return outputPath;
 }
 
@@ -6393,7 +6456,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "267b6410fa27a2bf032d4957047859e1f9eee6d1" : void 0;
+  const embedded = true ? "1f10658e1c5f2b615dfbee110d3f8cf68dbfbda9" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -6405,7 +6468,7 @@ function resolveInstanceIdentity(env = process.env) {
 
 // src/job-runner.ts
 import crypto6 from "crypto";
-import fs2 from "fs";
+import fs3 from "fs";
 import path3 from "path";
 import os3 from "os";
 import { and as and2, eq as eq2, inArray, ne, sql as sql2 } from "drizzle-orm";
@@ -6973,12 +7036,12 @@ var JobRunner = class {
               allBrandNames
             );
             let screenshotRelPath = null;
-            if (raw.screenshotPath && fs2.existsSync(raw.screenshotPath)) {
+            if (raw.screenshotPath && fs3.existsSync(raw.screenshotPath)) {
               const snapshotId = crypto6.randomUUID();
               const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", runId);
-              if (!fs2.existsSync(screenshotDir)) fs2.mkdirSync(screenshotDir, { recursive: true });
+              if (!fs3.existsSync(screenshotDir)) fs3.mkdirSync(screenshotDir, { recursive: true });
               const destPath = path3.join(screenshotDir, `${snapshotId}.png`);
-              fs2.renameSync(raw.screenshotPath, destPath);
+              fs3.renameSync(raw.screenshotPath, destPath);
               screenshotRelPath = `${runId}/${snapshotId}.png`;
               this.db.insert(querySnapshots).values({
                 id: snapshotId,
@@ -7131,11 +7194,11 @@ var JobRunner = class {
             );
             const snapshotId = crypto6.randomUUID();
             let screenshotRelPath = null;
-            if (raw.screenshotPath && fs2.existsSync(raw.screenshotPath)) {
+            if (raw.screenshotPath && fs3.existsSync(raw.screenshotPath)) {
               const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", runId);
-              if (!fs2.existsSync(screenshotDir)) fs2.mkdirSync(screenshotDir, { recursive: true });
+              if (!fs3.existsSync(screenshotDir)) fs3.mkdirSync(screenshotDir, { recursive: true });
               const destPath = path3.join(screenshotDir, `${snapshotId}.png`);
-              fs2.renameSync(raw.screenshotPath, destPath);
+              fs3.renameSync(raw.screenshotPath, destPath);
               screenshotRelPath = `${runId}/${snapshotId}.png`;
             }
             this.db.insert(querySnapshots).values({
@@ -9695,7 +9758,7 @@ function computeSummary(rows) {
 
 // src/backlink-extract.ts
 import crypto16 from "crypto";
-import fs3 from "fs";
+import fs4 from "fs";
 import { and as and9, desc as desc5, eq as eq11 } from "drizzle-orm";
 var log11 = createLogger("BacklinkExtract");
 function defaultDeps3() {
@@ -9724,7 +9787,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     if (!sync.vertexPath || !sync.edgesPath) {
       throw new Error(`Release ${sync.release} is missing cached file paths`);
     }
-    if (!fs3.existsSync(sync.vertexPath) || !fs3.existsSync(sync.edgesPath)) {
+    if (!fs4.existsSync(sync.vertexPath) || !fs4.existsSync(sync.edgesPath)) {
       throw new Error(
         `Cache for release ${sync.release} is missing from disk (expected at ${sync.vertexPath}). The sync record exists in the database, but the ~16 GB dump was deleted or never present on this machine. Re-sync this release from the Backlinks admin page to restore the cache.`
       );
@@ -12319,7 +12382,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-D2HY2S5F.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-25NQCETC.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -14054,7 +14117,7 @@ import crypto25 from "crypto";
 import { eq as eq21 } from "drizzle-orm";
 
 // src/agent/session.ts
-import fs6 from "fs";
+import fs7 from "fs";
 import path7 from "path";
 import { Agent } from "@mariozechner/pi-agent-core";
 import { registerBuiltInApiProviders } from "@mariozechner/pi-ai";
@@ -14298,25 +14361,25 @@ function buildAgentProvidersResponse(config) {
 }
 
 // src/agent/skill-paths.ts
-import fs4 from "fs";
+import fs5 from "fs";
 import path5 from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveAeroSkillDir(pkgDir) {
-  const here = pkgDir ?? path5.dirname(fileURLToPath(import.meta.url));
+  const here = pkgDir ?? path5.dirname(fileURLToPath2(import.meta.url));
   const candidates = [
     path5.join(here, "../assets/agent-workspace/skills/aero"),
     path5.join(here, "../../assets/agent-workspace/skills/aero"),
     path5.join(here, "../../../../skills/aero")
   ];
   for (const candidate of candidates) {
-    if (fs4.existsSync(path5.join(candidate, "SKILL.md"))) return candidate;
+    if (fs5.existsSync(path5.join(candidate, "SKILL.md"))) return candidate;
   }
   throw new Error(`Aero skill not found. Searched:
   ${candidates.join("\n  ")}`);
 }
 
 // src/agent/skill-tools.ts
-import fs5 from "fs";
+import fs6 from "fs";
 import path6 from "path";
 import { Type } from "@sinclair/typebox";
 var MAX_DOC_CHARS = 2e4;
@@ -14339,12 +14402,12 @@ function parseDescription(body) {
 }
 function scanSkillDocs(skillDir) {
   const refsDir = path6.join(skillDir ?? resolveAeroSkillDir(), "references");
-  if (!fs5.existsSync(refsDir)) return [];
+  if (!fs6.existsSync(refsDir)) return [];
   const entries = [];
-  for (const file of fs5.readdirSync(refsDir)) {
+  for (const file of fs6.readdirSync(refsDir)) {
     if (!file.endsWith(".md")) continue;
     const filePath = path6.join(refsDir, file);
-    const body = fs5.readFileSync(filePath, "utf-8");
+    const body = fs6.readFileSync(filePath, "utf-8");
     entries.push({
       slug: file.replace(/\.md$/, ""),
       description: parseDescription(body),
@@ -14388,7 +14451,7 @@ function buildReadSkillDocTool() {
         });
       }
       const filePath = path6.join(skillDir, "references", `${match.slug}.md`);
-      const content = fs5.readFileSync(filePath, "utf-8");
+      const content = fs6.readFileSync(filePath, "utf-8");
       if (content.length > MAX_DOC_CHARS) {
         return textResult({
           slug: match.slug,
@@ -15049,9 +15112,9 @@ function ensureBuiltinsRegistered() {
 }
 function loadAeroSystemPrompt(pkgDir) {
   const skillDir = resolveAeroSkillDir(pkgDir);
-  const skillBody = fs6.readFileSync(path7.join(skillDir, "SKILL.md"), "utf-8");
+  const skillBody = fs7.readFileSync(path7.join(skillDir, "SKILL.md"), "utf-8");
   const soulPath = path7.join(skillDir, "soul.md");
-  const base = fs6.existsSync(soulPath) ? `${fs6.readFileSync(soulPath, "utf-8").trimEnd()}
+  const base = fs7.existsSync(soulPath) ? `${fs7.readFileSync(soulPath, "utf-8").trimEnd()}
 
 ---
 
@@ -15064,7 +15127,7 @@ function appendSystemPromptExtras(base, env = process.env) {
   const filePath = env.AERO_SYSTEM_PROMPT_FILE?.trim();
   if (filePath) {
     try {
-      fileBody = fs6.readFileSync(filePath, "utf-8").trim();
+      fileBody = fs7.readFileSync(filePath, "utf-8").trim();
     } catch {
       fileBody = "";
     }
@@ -16088,7 +16151,8 @@ function registerMcpHttpRoutes(scope, opts) {
         credentialScopes: scopes,
         operator: request.operatorAccess === true,
         tiers: segment.tiers,
-        clientFactory: () => client
+        clientFactory: () => client,
+        updateAvailable: opts.getUpdateAvailable
       });
     } catch (error) {
       if (sessionKey) revokeSessionKey(opts.db, sessionKey.id);
@@ -18141,7 +18205,7 @@ async function createServer(opts) {
     });
   };
   const orphanedOpenClawDir = path8.join(os4.homedir(), ".openclaw-aero");
-  if (fs7.existsSync(orphanedOpenClawDir)) {
+  if (fs8.existsSync(orphanedOpenClawDir)) {
     app.log.warn(
       { path: orphanedOpenClawDir },
       "OpenClaw gateway is no longer used. Remove ~/.openclaw-aero/ manually to reclaim the directory."
@@ -19051,7 +19115,7 @@ async function createServer(opts) {
       const configPath = getConfigPath();
       return {
         databasePath: opts.config.database,
-        configPath: fs7.existsSync(configPath) ? configPath : null
+        configPath: fs8.existsSync(configPath) ? configPath : null
       };
     })(),
     // Snapshot the bundled skill trees (version + file hashes) so the
@@ -19066,6 +19130,8 @@ async function createServer(opts) {
       }
     })(),
     getAgentPluginState: opts.getAgentPluginState,
+    // Powers the `canonry.version.current` doctor check. Non-blocking.
+    getUpdateStatus: () => getServerUpdateStatus(),
     // Local canonry serve runs on the operator's machine, where pointing a
     // webhook at localhost (Discord test container, Pipedream-mock dev server,
     // etc.) is a legitimate workflow. Default to allowing it for the local
@@ -19084,7 +19150,13 @@ async function createServer(opts) {
     credentials: credentialChecker,
     oauthResourceUrl: publicOrigin ? `${publicOrigin}${`${basePath ?? "/"}api/v1/mcp`.replace("//", "/")}` : void 0,
     registerAuthenticatedRoutes: async (scope) => {
-      registerMcpHttpRoutes(scope, { selfApiUrl: opts.config.apiUrl, issuer: publicOrigin, db: opts.db });
+      registerMcpHttpRoutes(scope, {
+        selfApiUrl: opts.config.apiUrl,
+        issuer: publicOrigin,
+        db: opts.db,
+        // Same non-blocking cache as /health, so hosted agents see the notice too.
+        getUpdateAvailable: () => checkLatestVersionForServer()
+      });
       registerOAuthAdminRoutes(scope, { db: opts.db });
       if (!sessionRegistry) return;
       registerAgentRoutes(scope, { db: opts.db, sessionRegistry });
@@ -19627,9 +19699,9 @@ async function createServer(opts) {
       return snapshotService.createReport(input);
     }
   });
-  const dirname = path8.dirname(fileURLToPath2(import.meta.url));
+  const dirname = path8.dirname(fileURLToPath3(import.meta.url));
   const assetsDir = opts.assetsDir ?? path8.join(dirname, "..", "assets");
-  if (fs7.existsSync(assetsDir)) {
+  if (fs8.existsSync(assetsDir)) {
     const indexPath = path8.join(assetsDir, "index.html");
     const injectConfig = (html, projectTabsOverride, themeOverride, renderTokenOverride) => {
       const clientConfig = {};
@@ -19703,8 +19775,8 @@ async function createServer(opts) {
       }
     });
     const serveIndex = (_request, reply) => {
-      if (fs7.existsSync(indexPath)) {
-        const html = fs7.readFileSync(indexPath, "utf-8");
+      if (fs8.existsSync(indexPath)) {
+        const html = fs8.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Dashboard not built" });
@@ -19735,8 +19807,8 @@ async function createServer(opts) {
       if (basePath && !url.startsWith(basePath)) {
         return reply.status(404).send({ error: "Not found", path: request.url });
       }
-      if (fs7.existsSync(indexPath)) {
-        const html = fs7.readFileSync(indexPath, "utf-8");
+      if (fs8.existsSync(indexPath)) {
+        const html = fs8.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Not found" });
@@ -19900,6 +19972,8 @@ export {
   setGoogleAuthConfig,
   formatAuditFactorScore,
   checkLatestVersionForCli,
+  readCachedUpdateAvailable,
+  formatUpdateNotice,
   listAgentProviders,
   coerceAgentProvider,
   AERO_TOOL_PROFILES,

package/dist/{chunk-5K2NUQOV.js → chunk-AEE5DGTE.js}

@@ -1,6 +1,7 @@
 import {
   AGENT_MEMORY_KEY_MAX_LENGTH,
   AGENT_MEMORY_VALUE_MAX_BYTES,
+  CANONRY_NPM_PACKAGE_URL,
   CodingAgents,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DISCOVERY_MAX_PROBES_CAP,
@@ -28,6 +29,7 @@ import {
   canonicalizeGtmResourceSelection,
   classifySkillFile,
   coerceSkillManifest,
+  compareSemver,
   competitorBatchRequestSchema,
   competitorLandscapeQuerySchema,
   describeError,
@@ -40,8 +42,10 @@ import {
   gaMeasurementHostScopeSchema,
   googleAdsMetricsWindowSchema,
   gscPerformanceOrderBySchema,
+  isInstallMethod,
   isReadOnlyKey,
   isSensitiveDiagnosticQueryKey,
+  isStrictSemver,
   keywordBatchRequestSchema,
   keywordGenerateRequestSchema,
   logQuerySchema,
@@ -117,8 +121,10 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema,
+  upgradeCaveatFor,
+  upgradeCommandFor,
   visibilityReportRequestSchema
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/cli-error.ts
 function isMachineFormat(format) {
@@ -6027,6 +6033,16 @@ function createClient2(opts) {
 }
 
 // src/client.ts
+function parseServerUpdateAvailable(value) {
+  if (!value || typeof value !== "object") return null;
+  const { current, latest, installMethod } = value;
+  if (typeof current !== "string" || current.length > 32 || !isStrictSemver(current)) return null;
+  if (typeof latest !== "string" || latest.length > 32 || !isStrictSemver(latest)) return null;
+  if (compareSemver(latest, current) <= 0) return null;
+  const method = installMethod === void 0 ? "npm" : installMethod;
+  if (!isInstallMethod(method)) return null;
+  return { current, latest, installMethod: method, upgradeCommand: upgradeCommandFor(method), url: CANONRY_NPM_PACKAGE_URL };
+}
 var usageTagStore = new AsyncLocalStorage();
 function runWithUsageTags(client2, tags, fn) {
   if (!(client2 instanceof ApiClient)) return fn();
@@ -7095,6 +7111,22 @@ var ApiClient = class {
   async getApiKeySelf() {
     return this.invoke(() => getApiV1KeysSelf({ client: this.heyClient }));
   }
+  /**
+   * The connected server's update notice from `/health`, or null. Best-effort
+   * and bounded (2s), never throws: `canonry-mcp` uses it to tell agents that
+   * never run the CLI about a newer release.
+   */
+  async getServerUpdateAvailable() {
+    try {
+      await this.probeBasePath();
+      const res = await fetch(`${this.originUrl}/health`, { signal: AbortSignal.timeout(2e3) });
+      if (!res.ok) return null;
+      const body = await res.json();
+      return parseServerUpdateAvailable(body?.updateAvailable);
+    } catch {
+      return null;
+    }
+  }
   async createApiKey(body) {
     return this.invoke(() => postApiV1Keys({ client: this.heyClient, body }));
   }
@@ -13139,15 +13171,34 @@ function createCanonryMcpServer(options = {}) {
   return createCanonryMcpServerWithCatalog(options).server;
 }
 var SERVER_INSTRUCTIONS = OPERATIONS_GUIDE.initialize;
+function updateNoticeInstructions(update) {
+  const upgrade = update.installMethod === "docker" ? update.upgradeCommand : `${update.upgradeCommand}, then restart the Canonry server`;
+  const caveat = upgradeCaveatFor(update.installMethod);
+  return `Update available (UPDATE_AVAILABLE): canonry ${update.latest} is published; the connected Canonry server runs ${update.current}. Tell the operator. Upgrade: ${upgrade}. ${caveat ? `${caveat} ` : ""}Only upgrade with the operator's approval.`;
+}
+function updateNoticePayload(update) {
+  const caveat = upgradeCaveatFor(update.installMethod);
+  return { code: "UPDATE_AVAILABLE", ...update, ...caveat ? { note: caveat } : {} };
+}
+function readUpdateAvailable(getter) {
+  try {
+    return getter?.() ?? null;
+  } catch {
+    return null;
+  }
+}
 function createCanonryMcpServerWithCatalog(options = {}) {
   const clientFactory = options.clientFactory ?? (() => createApiClient({ clientName: "canonry-mcp", surface: "mcp-stdio", actorSession: randomUUID() }));
   const client2 = clientFactory();
   const scope = options.scope ?? "all";
+  const update = readUpdateAvailable(options.updateAvailable);
   const server = new McpServer({
     name: "canonry",
     version: PACKAGE_VERSION
   }, {
-    instructions: SERVER_INSTRUCTIONS
+    instructions: update ? `${SERVER_INSTRUCTIONS.trimEnd()}
+
+${updateNoticeInstructions(update)}` : SERVER_INSTRUCTIONS
   });
   server.validateToolInput = async (_tool, args) => args;
   const entries = [];
@@ -13178,7 +13229,7 @@ function createCanonryMcpServerWithCatalog(options = {}) {
   const catalog = new DynamicToolCatalog(server, entries, scope, { eager });
   catalog.applyInitialEnablement();
   const mode = options.tiers !== void 0 ? "hosted-fixed-catalog" : eager ? "stdio-fixed-catalog" : "stdio-progressive";
-  registerMetaTools(server, catalog, { includeToolkitLoader: options.tiers === void 0, mode });
+  registerMetaTools(server, catalog, { includeToolkitLoader: options.tiers === void 0, mode, updateAvailable: options.updateAvailable });
   server.registerResource("canonry-agent-operations-v1", OPERATIONS_GUIDE.resourceUri, {
     title: "Canonry Operations Guide v1",
     description: "Optional public operations guidance. Use canonry_help when resources are unavailable.",
@@ -13205,7 +13256,11 @@ function registerMetaTools(server, catalog, opts) {
     async (input) => {
       try {
         const parsed = helpInputSchema.parse(input ?? {});
-        const result = operationsHelp(catalog.helpResult(), opts.mode, parsed.intent, parsed.includeCatalog);
+        const update = readUpdateAvailable(opts.updateAvailable);
+        const result = {
+          ...operationsHelp(catalog.helpResult(), opts.mode, parsed.intent, parsed.includeCatalog),
+          ...update ? { updateAvailable: updateNoticePayload(update) } : {}
+        };
         return { ...jsonToolResult(result), structuredContent: result };
       } catch (error) {
         return errorToolResult(error);

package/dist/{chunk-WSYJ4IT7.js → chunk-EBUX3C5H.js}

@@ -241,6 +241,7 @@ import {
   clusterByCosine,
   coerceSkillManifest,
   compactDateToIso,
+  compareSemver,
   competitorBatchRequestSchema,
   competitorDtoSchema,
   competitorLandscapeQuerySchema,
@@ -391,6 +392,7 @@ import {
   isLocationRedirectStatus,
   isReadOnlyKey,
   isRetryableHttpError,
+  isStrictSemver,
   isTemplateLinkRatio,
   isTrendBaseline,
   isVertexGroundingRedirect,
@@ -678,6 +680,7 @@ import {
   trafficStatusResponseSchema,
   trafficSyncResponseSchema,
   unsupportedKind,
+  upgradeCaveatFor,
   userDtoSchema,
   userListDtoSchema,
   validationError,
@@ -703,7 +706,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/intelligence-service.ts
 import { eq as eq67, desc as desc29, asc as asc12, and as and57, ne as ne11, or as or16, inArray as inArray25, gte as gte18, lte as lte15, isNull as isNull12, sql as sql27, exists } from "drizzle-orm";
@@ -81302,11 +81305,72 @@ var GOOGLE_MARKETING_DOCTOR_CHECKS = createGoogleMarketingDoctorChecks(
   (ctx) => ctx.getGoogleMarketingDoctorInput?.(ctx)
 );
 
+// ../api-routes/src/doctor/checks/version.ts
+var versionCurrentCheck = {
+  id: "canonry.version.current",
+  category: CheckCategories.config,
+  scope: CheckScopes.global,
+  title: "Canonry version",
+  run: (ctx) => {
+    if (!ctx.getUpdateStatus) {
+      return {
+        status: CheckStatuses.skipped,
+        code: "version.status-unavailable",
+        summary: "This deployment does not report update status."
+      };
+    }
+    const status = ctx.getUpdateStatus();
+    if (!status.enabled) {
+      return {
+        status: CheckStatuses.skipped,
+        code: "version.check-disabled",
+        summary: `Update check is off (${status.disabledBy ?? "opted out"}); running ${status.current}.`,
+        details: { current: status.current, ...status.disabledBy ? { disabledBy: status.disabledBy } : {} }
+      };
+    }
+    if (!status.latest || !isStrictSemver(status.latest)) {
+      return {
+        status: CheckStatuses.skipped,
+        code: "version.latest-unknown",
+        summary: `Latest published version is not known yet (running ${status.current}).`,
+        remediation: "The npm registry has not been reached yet. Re-run doctor in a moment; offline hosts stay skipped.",
+        details: { current: status.current }
+      };
+    }
+    if (compareSemver(status.latest, status.current) > 0) {
+      const caveat = upgradeCaveatFor(status.installMethod);
+      return {
+        status: CheckStatuses.warn,
+        code: "version.outdated",
+        summary: `canonry ${status.latest} is available; this server runs ${status.current}.`,
+        remediation: status.installMethod === "docker" ? `Upgrade the container: ${status.upgradeCommand}.` : `Run \`${status.upgradeCommand}\`, then restart the server (\`canonry stop && canonry start\`, or restart \`canonry serve\`).${caveat ? ` ${caveat}` : ""}`,
+        details: {
+          current: status.current,
+          latest: status.latest,
+          installMethod: status.installMethod,
+          upgradeCommand: status.upgradeCommand,
+          url: status.url
+        }
+      };
+    }
+    return {
+      status: CheckStatuses.ok,
+      code: "version.current",
+      // "latest" would overstate it: when the registry is unreachable this can
+      // come from an older on-disk cache, which proves only that nothing newer is known.
+      summary: `No newer canonry known (running ${status.current}; latest seen ${status.latest}).`,
+      details: { current: status.current, latest: status.latest }
+    };
+  }
+};
+var VERSION_CHECKS = [versionCurrentCheck];
+
 // ../api-routes/src/doctor/registry.ts
 var ALL_CHECKS = [
   // Runtime-state checks run first so file-system gone errors surface
   // before any auth/integration checks try to touch the (orphaned) DB.
   ...RUNTIME_STATE_CHECKS,
+  ...VERSION_CHECKS,
   ...GOOGLE_AUTH_CHECKS,
   ...GBP_AUTH_CHECKS,
   ...PLACES_CHECKS,
@@ -81412,6 +81476,7 @@ async function doctorRoutes(app, opts) {
       runtimeStatePaths: opts.runtimeStatePaths,
       bundledSkills: opts.bundledSkills,
       getAgentPluginState: opts.getAgentPluginState,
+      getUpdateStatus: opts.getUpdateStatus,
       getGoogleMarketingDoctorInput: opts.getGoogleMarketingDoctorInput
     };
     return runChecks(ctx, ALL_CHECKS, { checkIds });
@@ -81441,6 +81506,7 @@ async function doctorRoutes(app, opts) {
       runtimeStatePaths: opts.runtimeStatePaths,
       bundledSkills: opts.bundledSkills,
       getAgentPluginState: opts.getAgentPluginState,
+      getUpdateStatus: opts.getUpdateStatus,
       getGoogleMarketingDoctorInput: opts.getGoogleMarketingDoctorInput
     };
     return runChecks(ctx, ALL_CHECKS, { checkIds });
@@ -84750,6 +84816,7 @@ async function apiRoutes(app, opts) {
       runtimeStatePaths: opts.runtimeStatePaths,
       bundledSkills: opts.bundledSkills,
       getAgentPluginState: opts.getAgentPluginState,
+      getUpdateStatus: opts.getUpdateStatus,
       getGoogleMarketingDoctorInput: opts.getGoogleMarketingDoctorInput
     });
     if (opts.registerAuthenticatedRoutes) {

package/dist/{chunk-NKEKDWGX.js → chunk-KJM4DRZN.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-5K2NUQOV.js";
+} from "./chunk-AEE5DGTE.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-5ZIUROAQ.js → chunk-MMSPU72Z.js}

@@ -18054,6 +18054,63 @@ function redactEmbeddedUrls(value) {
   });
 }
 
+// ../contracts/src/semver.ts
+var STRICT_SEMVER = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[\da-z-]+(?:\.[\da-z-]+)*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?$/i;
+var MAX_SEMVER_LENGTH = 128;
+function isStrictSemver(value) {
+  return value.length <= MAX_SEMVER_LENGTH && STRICT_SEMVER.test(value);
+}
+function compareSemver(a, b) {
+  const parse = (v) => {
+    const parts = (v.split(/[-+]/)[0] ?? "").split(".");
+    if (parts.length < 3) return null;
+    const nums = parts.slice(0, 3).map(Number);
+    if (!nums.every((n) => Number.isInteger(n) && n >= 0)) return null;
+    return [nums[0], nums[1], nums[2]];
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  if (!pa || !pb) return 0;
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] > pb[i]) return 1;
+    if (pa[i] < pb[i]) return -1;
+  }
+  return 0;
+}
+
+// ../contracts/src/update-notice.ts
+var CANONRY_NPM_PACKAGE = "@canonry/canonry";
+var CANONRY_NPM_PACKAGE_URL = `https://www.npmjs.com/package/${CANONRY_NPM_PACKAGE}`;
+var INSTALL_METHODS = ["npm", "homebrew", "docker"];
+function isInstallMethod(value) {
+  return typeof value === "string" && INSTALL_METHODS.includes(value);
+}
+function upgradeCommandFor(method) {
+  switch (method) {
+    case "npm":
+      return `npm install -g ${CANONRY_NPM_PACKAGE}`;
+    case "homebrew":
+      return "brew upgrade canonry";
+    case "docker":
+      return "pull or rebuild your canonry image, then recreate the container";
+  }
+}
+function upgradeCaveatFor(method) {
+  switch (method) {
+    case "homebrew":
+      return "Homebrew can trail npm briefly; if brew says canonry is up to date, retry later.";
+    case "npm":
+    case "docker":
+      return null;
+  }
+}
+function updateCheckEnvOptOut(env) {
+  if (env.CANONRY_DISABLE_UPDATE_CHECK === "1") return "CANONRY_DISABLE_UPDATE_CHECK";
+  if (env.DO_NOT_TRACK === "1") return "DO_NOT_TRACK";
+  if (env.CI) return "CI";
+  return null;
+}
+
 export {
   __export,
   apiKeyDtoSchema,
@@ -18849,5 +18906,12 @@ export {
   isSensitiveDiagnosticQueryKey,
   redactLogValue,
   redactLogString,
-  diagnosticIdentity
+  diagnosticIdentity,
+  isStrictSemver,
+  compareSemver,
+  CANONRY_NPM_PACKAGE_URL,
+  isInstallMethod,
+  upgradeCommandFor,
+  upgradeCaveatFor,
+  updateCheckEnvOptOut
 };

package/dist/cli.js

@@ -16,6 +16,7 @@ import {
   createServer,
   detectAndTrackUpgrade,
   formatAuditFactorScore,
+  formatUpdateNotice,
   getCloudflareTrafficConnectionBySourceId,
   getOrCreateAnonymousId,
   getTelemetryStatus,
@@ -24,6 +25,7 @@ import {
   isLoopbackBindHost,
   isTelemetryEnabled,
   listAgentProviders,
+  readCachedUpdateAvailable,
   setGoogleAuthConfig,
   setTelemetryPreference,
   setTelemetrySource,
@@ -31,11 +33,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-BS4ZC7FG.js";
+} from "./chunk-5ZOLPHTO.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-NKEKDWGX.js";
+} from "./chunk-KJM4DRZN.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -61,7 +63,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-5K2NUQOV.js";
+} from "./chunk-AEE5DGTE.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -75,7 +77,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-WSYJ4IT7.js";
+} from "./chunk-EBUX3C5H.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -154,7 +156,7 @@ import {
   snapshotProviderModeSchema,
   visibilityReportRequestSchema,
   winnabilityClassSchema
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -19304,17 +19306,12 @@ async function runCli(args = process.argv.slice(2)) {
       ...cliRuntimeContext()
     });
   }
-  if (!isHelpRequest && command !== "telemetry" && process.stderr.isTTY) {
-    void checkLatestVersionForCli().then((update) => {
-      if (!update) return;
-      process.stderr.write(
-        `
-\u2192 canonry ${update.latest} is available (you have ${update.current}).
-  Upgrade: ${update.upgradeCommand}
-
-`
-      );
-    });
+  if (!isHelpRequest && command !== "telemetry") {
+    const update = readCachedUpdateAvailable();
+    if (update) {
+      process.stderr.write(formatUpdateNotice(update, { format, interactive: Boolean(process.stderr.isTTY) }));
+    }
+    void checkLatestVersionForCli();
   }
   const commandStartedAt = Date.now();
   try {

package/dist/index.js

@@ -3,12 +3,12 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-BS4ZC7FG.js";
+} from "./chunk-5ZOLPHTO.js";
 import {
   loadConfig
-} from "./chunk-5K2NUQOV.js";
-import "./chunk-WSYJ4IT7.js";
-import "./chunk-5ZIUROAQ.js";
+} from "./chunk-AEE5DGTE.js";
+import "./chunk-EBUX3C5H.js";
+import "./chunk-MMSPU72Z.js";
 export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,

package/dist/{intelligence-service-D2HY2S5F.js → intelligence-service-25NQCETC.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-WSYJ4IT7.js";
-import "./chunk-5ZIUROAQ.js";
+} from "./chunk-EBUX3C5H.js";
+import "./chunk-MMSPU72Z.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -1,17 +1,49 @@
 import {
   autoSyncSkills
-} from "./chunk-NKEKDWGX.js";
+} from "./chunk-KJM4DRZN.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-5K2NUQOV.js";
+} from "./chunk-AEE5DGTE.js";
 import {
-  isReadOnlyKey
-} from "./chunk-5ZIUROAQ.js";
+  isReadOnlyKey,
+  updateCheckEnvOptOut
+} from "./chunk-MMSPU72Z.js";
 
 // src/mcp/cli.ts
 import { randomUUID } from "crypto";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+// src/mcp/update-notice.ts
+function createUpdateNoticeSource(client, opts = {}) {
+  const disabled = updateCheckEnvOptOut(opts.env ?? process.env) !== null;
+  const ttlMs = opts.ttlMs ?? 60 * 60 * 1e3;
+  const now = opts.now ?? Date.now;
+  let value = null;
+  let fetchedAt = Number.NEGATIVE_INFINITY;
+  let inFlight = null;
+  const refresh = () => {
+    if (disabled) return Promise.resolve();
+    inFlight ??= client.getServerUpdateAvailable().then((next) => {
+      value = next;
+    }, () => {
+      value = null;
+    }).finally(() => {
+      fetchedAt = now();
+      inFlight = null;
+    });
+    return inFlight;
+  };
+  return {
+    refresh,
+    get: () => {
+      if (!disabled && !inFlight && now() - fetchedAt >= ttlMs) void refresh();
+      return value;
+    }
+  };
+}
+
+// src/mcp/cli.ts
 var HELP_TEXT = `Usage: canonry-mcp [--read-only | --scope=<all|read-only>] [--eager]
 
 Stdio MCP adapter over the Canonry public API. Inherits config from
@@ -47,8 +79,17 @@ async function main(argv = process.argv.slice(2)) {
   }
   void autoSyncSkills();
   const client = createApiClient({ clientName: "canonry-mcp", surface: "mcp-stdio", actorSession: randomUUID() });
-  const authorization = await resolveEffectiveAuthorization(client, options.scope);
-  const server = createCanonryMcpServer({ ...authorization, eager: options.eager, clientFactory: () => client });
+  const updateNotice = createUpdateNoticeSource(client);
+  const [authorization] = await Promise.all([
+    resolveEffectiveAuthorization(client, options.scope),
+    updateNotice.refresh()
+  ]);
+  const server = createCanonryMcpServer({
+    ...authorization,
+    eager: options.eager,
+    clientFactory: () => client,
+    updateAvailable: updateNotice.get
+  });
   await server.connect(new StdioServerTransport());
 }
 async function resolveEffectiveScope(client, flagScope) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainyc/canonry",
-  "version": "5.1.2",
+  "version": "5.1.3",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "keywords": [
@@ -87,28 +87,28 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-web": "0.0.0",
-    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
+    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-intelligence": "0.0.0",
+    "@ainyc/canonry-integration-google-ads": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
-    "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-intelligence": "0.0.0",
+    "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"