@ainyc/canonry 5.1.2 → 5.1.4

package/assets/agent-workspace/skills/aero/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: aero
-description: "Diagnose AEO regressions and report on them: why mention or citation coverage moved, which queries and answer engines changed, and what to do about it. Use when a coverage number moved and needs explaining, when preparing a client report or month-over-month comparison, or when a `cnry` sweep completed and needs analysis. Coordinates canonry sweeps with aeo-audit site analysis and keeps durable project memory. Use the canonry skill for setup and operations instead."
+description: "Diagnose AEO regressions and interpret Canonry AI visibility, Advanced multi-property portfolios, and Site Health evidence. Use when a mention or citation coverage number moved and needs explaining, when comparing Properties or markets, diagnosing crawl or page findings, preparing a client report or month-over-month comparison, or analyzing a completed `cnry` sweep or site audit. Preserves measurement scope, missing-data states, and comparison limits. Use the canonry skill for setup and operations."
 metadata:
   homepage: https://canonry.ai
   repository: https://github.com/AINYC/aero
@@ -8,13 +8,44 @@ metadata:
 
 # Aero Orchestration Skill
 
-You coordinate across two tools to deliver comprehensive AEO monitoring:
-- **canonry** — the source of truth for project state (runs, snapshots, timelines, insights, audit log, **GA4 traffic + AI/social referrals**, **server-side crawler + referral events**). Query it with `cnry <command> --format json` (the CLI is also installed as `canonry` — the two are interchangeable); never maintain a parallel copy in agent memory. For a specific scalar use `cnry get <project> <path>` instead of pulling a full payload.
-- **aeo-audit** — on-demand site analysis and fix generation.
+Use Canonry's stored evidence to explain AI visibility and site readiness. In
+built-in Aero, call the available `canonry_*` tools directly. Project-scoped
+tools use the session's project; they do not accept a different project from
+the model. External agents can use connected MCP or `cnry <command> --format
+json`. CLI examples in the references are for hosts with a shell; built-in
+Aero should use the corresponding exposed tool, not invent shell access.
+
+Canonry is the source of truth for runs, measurement plans, Property evidence,
+Site Health audits, integrations, and history. Read stored page audits before
+proposing fresh `aeo-audit` work. New crawls and provider work require approval
+covering that work; an existing explicit authorization remains valid.
+
+## Choose the evidence scope
+
+- **Simple portfolio:** use project overview, visibility statistics, and stored
+  answer evidence. **Advanced portfolio:** read the active plan and use the
+  measurement tools. Preserve Property/Target identity, market, plan revision,
+  run, provider/model, location, and query class. Read
+  `references/portfolio-analysis.md` before ranking Properties or comparing
+  Advanced results.
+- **Site Health:** read `references/site-health.md` before diagnosing scores,
+  crawl coverage, internal links, or page findings. Technical readiness is a
+  separate signal from measured mentions and citations.
+- Missing runs, `not_measured`, unavailable metrics, and unchecked signals
+  are not zero. Use returned numerators, denominators, and availability
+  reasons; do not average Property percentages or sum overlapping markets.
+- The dashboard chat supplies the project and message, not its selected
+  Property, market, filters, or graph page. Resolve explicit names/URLs from
+  stored data. If "this Property" or "this page" remains ambiguous, ask which
+  one before making a scoped claim. State the scope used for broad questions.
+- Read `references/agent-operations.md` for shared vocabulary, evidence,
+  comparison, and authority rules. Its MCP onboarding instructions apply to
+  external hosts; built-in Aero already has its tool catalog and skill-doc
+  readers. Tool descriptions define the parameters actually available.
 
 Persist only *user-scoped* context (operator preferences, communication style) in your platform's native memory. Project-scoped facts live in canonry and must be read back, not remembered.
 
-**Two signals, not one.** Every (query × provider) snapshot tracks **mentioned** (brand in answer text) and **cited** (domain in source links) independently. Lead with **Mention Coverage** when narrating health — it is the primary gauge — and report **Citation Coverage** as the secondary signal. Never compute one from the other, and never collapse them into a single "visibility" headline. The downloadable report (`cnry report`) and the dashboard hero both honor this split.
+**Two signals, not one.** Every (query × provider) snapshot tracks **mentioned** (brand in answer text) and **cited** (domain in source links) independently. Lead with **Mention Coverage** when narrating AI visibility and report **Citation Coverage** as the secondary signal. Never compute one from the other, and never collapse them into a single "visibility" headline. For Site Health questions, lead with the requested audit or crawl evidence.
 
 When a project has GA4 connected, traffic is a first-class signal alongside
 mentions and citations. Use `cnry ga traffic` and `cnry ga attribution --trend`
@@ -37,7 +68,7 @@ command reference is in the co-installed
 
 ## Judgment Rules
 
-### What to Prioritize
+### AI visibility priorities
 
 Mention is the primary gauge (see "Two signals, not one" above); citation is the secondary signal on the same query. Rank work accordingly:
 
@@ -49,7 +80,7 @@ Mention is the primary gauge (see "Two signals, not one" above); citation is the
 
 ### What NOT to Do
 - Don't promise fixes will appear in the next sweep (AEO changes take weeks/months)
-- Don't give generic SEO advice — always ground recommendations in mention and citation data, leading with the mention signal
+- Ground AI visibility recommendations in mention and citation evidence. Ground Site Health recommendations in persisted audit and crawl findings.
 - Don't run sweeps, probes, syncs, audits, discovery sessions, or any other write or quota-consuming operation without explicit user approval
 - Don't edit client's code without showing diffs and getting approval
 - Don't conflate "not mentioned" with "page doesn't exist" — and don't conflate "not cited" with "not mentioned" either; check first. The two signals are independent (see "Two signals, not one") and are never computed from each other.
@@ -76,7 +107,7 @@ A real (non-probe) sweep is appropriate when the user explicitly asks to refresh
 
 ### How to Communicate
 - Data first: show the numbers before the interpretation
-- Lead with the mention transition, keep citation as a trailing clause: "ChatGPT stopped mentioning you for 'roof repair phoenix' between Mar 28-Apr 2, and your mention share fell from 50% to 0% as a competitor took the slot" — then, second, note that you also lost the citation for that query. Not "your visibility decreased."
+- For AI visibility, lead with the mention transition, then the citation change. For Site Health, lead with the requested score or finding and its affected pages and crawl limits.
 - Action-oriented: every observation ends with a recommended next step
 
 ## References
@@ -85,6 +116,9 @@ Detailed playbooks live alongside this file. Read them on demand when the task m
 
 | File | Read when |
 |---|---|
+| `references/portfolio-analysis.md` | Interpreting Simple or Advanced portfolios, ranking Properties or markets, or comparing measurement runs |
+| `references/site-health.md` | Diagnosing site/page scores, crawl completeness, internal links, or changes between scans |
+| `references/agent-operations.md` | Checking shared scope, evidence, comparison, or permission rules; generated from the canonical operations guide |
 | `references/orchestration.md` | Planning a multi-step or recurring workflow (baseline, weekly review, content-gap analysis) |
 | `references/regression-playbook.md` | A query lost a mention (primary) or a citation (secondary) and you need to triage and respond |
 | `references/aeo-discovery.md` | Expanding a tracked-query basket, auditing competitive surface, or responding to `aeo-discover-probe.completed` |
@@ -92,4 +126,4 @@ Detailed playbooks live alongside this file. Read them on demand when the task m
 | `references/reporting.md` | Producing a client-facing weekly or monthly summary |
 | `references/wordpress-elementor-mcp.md` | Editing WordPress pages with the Elementor MCP integration |
 
-Aero (canonry's built-in agent) additionally exposes `list_skill_docs` / `read_skill_doc` MCP tools that walk this directory programmatically. External agents (Claude Code, Codex) should `Read` the files directly.
+Aero (canonry's built-in agent) exposes `list_skill_docs` / `read_skill_doc` tools that walk this directory programmatically. External agents (Claude Code, Codex) can read the files directly.

package/assets/agent-workspace/skills/aero/references/agent-operations.md

@@ -0,0 +1,231 @@
+---
+name: agent-operations
+description: Shared Canonry vocabulary, evidence scope, comparison rules, and authority boundaries. Read when interpreting unfamiliar data or checking an operation.
+---
+
+<!-- Generated from docs/agent-operations/v1.md by pnpm guide:sync. Do not edit. -->
+
+> **Built-in Aero:** your available `canonry_*` tools are already loaded, and
+> you read this guide through `read_skill_doc` (slug `agent-operations`). Your
+> catalog does not include `canonry_help` or `canonry_load_toolkit`; the
+> connection and navigation steps below are for external MCP hosts. Your
+> project-scoped tools use the current session's project. Dashboard selections
+> are not passed to chat: resolve the requested Property, market, filters, or
+> page before making a scoped claim. The `portfolio-analysis` and `site-health`
+> skill docs cover those investigations for Simple and Advanced portfolios.
+
+# Canonry Operations Guide v1
+
+Canonry is an agent-first AI visibility platform. MCP is the universal entry
+point for connected agents. Host-native skills are optional upgrades, not a
+prerequisite or a permission mechanism.
+
+## Connect and choose a route
+
+Read the initialization guidance, then call `canonry_help` with an `intent`:
+`status`, `diagnose`, `operations`, `prospecting`, `measurement`, `integrations`,
+`reports`, or a short task
+description. Select an accessible project with `canonry_projects_list` before
+using its exact name in project tools. Inspect each listed tool's input schema;
+help suggests tool names, not invented arguments or authorization.
+
+Help returns a versioned, compact route: connection `mode`, available `next`
+tools, workflow guidance, approval boundaries, and this guide's URL. It performs
+no provider calls, reads no project data, and changes no permissions.
+`next` lists stored reads. Optional `actions` lists loaded tools for work that
+requires approval; listing an action does not authorize or execute it.
+`includeCatalog: true` additionally returns toolkit details when needed.
+
+Hosted connections use a fixed catalog. Help only suggests tools offered by that
+connection; it never tells a hosted agent to dynamically load a toolkit. A
+progressive local stdio connection may return `loadToolkits`: call
+`canonry_load_toolkit` with one returned name, await it, then call help again.
+Loading only changes local tool discovery, never server authority.
+
+The optional `canonry://agent-operations/v1` MCP resource contains this same
+guide. If the host cannot read resources or open links, continue through help.
+Do not install a plugin, local runtime, or skill merely to use connected MCP.
+An installed Codex or Claude Canonry skill contains a generated copy of this
+guide plus links to host-native references. It does not replace runtime help.
+
+## Vocabulary and evidence
+
+- **Mentioned** means the brand appears in answer text. **Cited** means its
+  domain appears in source links. Either, both, or neither can occur; never
+  compute one signal from the other.
+- `answerMentioned: null` means not checked, not false. Missing runs and empty
+  populations mean no measurement, not zero visibility.
+- Preserve project, time window, provider, requested/served model, location,
+  sample size, and query class when comparing evidence. Use server-returned
+  metrics; do not invent a score from incompatible populations.
+- Simple projects and Advanced portfolios share the workflow. For Advanced
+  results, preserve Property, Target, market, plan revision, and class scope.
+  Groups organize navigation; do not infer an unrequested fan-out.
+- Research is isolated evidence, not tracked measurement. A probe still spends
+  quota and persists evidence but is excluded from normal tracking metrics.
+
+## Workflows
+
+**Status:** read the stored overview and freshness first. Say when evidence is
+missing instead of silently creating it.
+
+**Diagnose:** inspect stored history and comparable evidence. Explain what
+changed separately from why it might have changed. A hypothesis is not a
+measured cause. Propose bounded verification if stored evidence is insufficient.
+
+**Prospecting:** generate a one-shot company snapshot without creating a project.
+Inspect stored provider settings first. Agree on the company, domain, selected
+providers, and queries before starting the quota-spending snapshot action.
+Browser-only selection requires manual queries. Progressive stdio help offers
+the discovery toolkit when this connection permits snapshots; load it, then
+call help again. Fixed catalogs offer only already available actions. Read-only
+and restricted connections must not bypass missing snapshot access.
+
+**Measurement:** inspect the existing setup and results before proposing edits.
+Keep research, query tracking, plan publication, and sweep execution separate.
+For direct research, submit the final editable query text in one context. For a
+reviewed batch, submit each explicit destination with its final text and one
+idempotency key. Pattern substitution happens in the client before either
+request; choosing a market or Property records a destination only and never
+rewrites a query or creates an automatic fan-out. `research.run` does not
+authorize saving patterns, changing tracking, publishing plans, or settings.
+Use a supported preview where available, inspect its exact destination and
+revision, then seek approval for the actual change. A preview may itself require
+write permission; never treat a dry-run flag as a universal safety guarantee.
+
+**Integrations:** inspect stored connection state and snapshot freshness first.
+Provider configuration evidence does not prove a browser event fired or a
+conversion was recorded. Connection, resource selection, refresh/sync, and live
+reads are separate actions. Credentials belong in the operator's secure setup
+flow, never in chat, tool arguments, reports, or public guidance.
+
+**Reports:** use saved evidence for the requested period and scope. Keep mention
+and citation signals separate, include dates and sample sizes, and state missing
+or stale inputs. For Advanced Property mention rankings, use
+`canonry_measurement_portfolio_summary` and its `mentionRanking.strongest`,
+`.weakest`, and `.excluded` lists. It defaults to non-brand questions; state the
+returned class and report branded results separately. An unavailable portfolio
+aggregate does not invalidate available Property mention rates. Flag excluded
+Properties individually; do not silently replace mention ranking with citation
+ranking. Keep sample sizes and ties visible. Preparing a report does not
+authorize new measurement.
+
+## Authority and approval
+
+### Agent operations
+
+Use `canonry_key_self` (CLI `canonry key whoami --format json`) to inspect the
+current credential's scopes, project boundary, and host-derived `operator`
+authority without exposing its token. Missing `operator` means unapproved.
+`canonry_settings_get` and
+`canonry_telemetry_get` describe the connected server, not the agent's local
+machine. Telemetry reports configured preference, effective state, and any
+environment override; inspecting status never creates an anonymous identifier.
+After approval, `canonry_telemetry_update` changes that preference and
+`canonry_provider_settings_update` changes an already-configured provider's
+model/quota. Both require `settings.write`; neither accepts credentials.
+Server telemetry reads and updates additionally require operator authority.
+Ordinary audit-history reads omit internal telemetry events and their state.
+
+Operator authority is deny-by-default and separate from customer admin roles.
+The deployment owner must approve a dedicated, instance-wide API key's ID in
+the server environment variable `CANONRY_OPERATOR_KEY_IDS` (comma-separated IDs),
+then restart the server. Empty/unset approves nobody; wildcards are invalid.
+Keep the bearer private to internal operators; never approve a customer-held or
+shared proxy/bootstrap key. Use `logs.read` for read-only diagnostics, adding
+`settings.write` only when telemetry control is required. Ordinary key creation,
+account roles, OAuth consent, and caller headers cannot grant operator status.
+Revoking an approved key invalidates it immediately. Host enrollment is a trust
+bootstrap step, intentionally unavailable through customer-facing APIs.
+API, CLI, and MCP enforce the same boundary; MCP hides internal tools unless
+the server confirms operator authority, including in explicit read-only mode.
+Project analytics, research, and normal project permissions are unchanged.
+
+`canonry_logs_list` reads bounded, redacted runtime events from both the
+application logger and Fastify request/error logging. It requires an
+instance-wide `logs.read` grant (or wildcard) and a host-approved direct bearer.
+Browser sessions, OAuth/delegated credentials, customer admins, and project-scoped
+keys cannot use it, even with a project filter or a matching allowlist ID.
+A `logs.read`-only key is read-only automatically, without a
+second `read` marker. Named `*.read` scopes cannot grant mutations; an explicit
+write grant is needed and remains subject to its route gates. Returned messages
+are sanitized and bounded; raw request or response bodies, headers, cookies,
+provider payloads, and stacks are not
+part of the queryable surface. The same secret-redaction policy runs before
+console output and storage. Do not deliberately log secrets: redaction is a
+defense in depth, not permission to put credentials into diagnostic strings.
+Opaque escaped payloads containing secret assignments are omitted when safe
+partial masking cannot be guaranteed; correlate their retained error codes and IDs.
+
+File-backed hosts retain runtime logs in SQLite across restarts, bounded to
+10,000 events and seven days. In-memory hosts report `retention: "process"`.
+Filter by `actor`, `requestId`, `runId`, `projectId`, `module`, `level`, or an
+inclusive `since`/`until` interval. Keep filters unchanged when resuming an
+opaque cursor; retention eviction can invalidate it. Inspect `retentionPolicy`,
+`captureErrors`, `dropped`, `truncated`, and `retention` before drawing
+conclusions. Missing logs are not proof that an action did not happen. Use
+`canonry_project_history` or `canonry_history_global` for persistent audit events;
+offset pages have deterministic ordering but are not snapshots of concurrent writes.
+
+Audit `actor` comes from authenticated identity (`user:<id>` or `api-key:<id>`),
+not a caller-supplied header. A delegated MCP credential records its originating
+user as actor and the actual credential in `credentialId`. `requestId` correlates
+HTTP events; `userAgent` and `actorSession` are bounded, untrusted client hints,
+never identity or permission grants. Older audit rows are not backfilled with
+identities the server cannot prove.
+
+Both shipped HTTP hosts issue restart-safe UUID request IDs and return them in
+`x-request-id`. Use that value to correlate a CLI/API failure with log entries;
+HTTP diagnostics retain the method and route template, not raw URL parameters.
+Request-bound loggers retain completion attribution, while generic background
+continuations stop inheriting caller identity after the response completes.
+Capture covers the owning server process after initialization, not arbitrary
+console output, other worker processes, or host/container logs. Run one server
+instance per process and database, as required by the single-tenant deployment
+model; this is not a cross-tenant or distributed log collector.
+
+For CLI use, settings reads are remote. Google setup and telemetry retain their
+local defaults: pass `--target server` explicitly to configure the connected
+server. `schedule list <project>` lists all schedule kinds, and
+`notify events --target server` discovers the server's event catalog.
+
+MCP returns legacy text JSON plus structured results. Objects keep their shape;
+arrays use `{items: [...]}` in `structuredContent`, and scalars use `{value: ...}`.
+Errors preserve the existing envelope and CLI exit codes: HTTP 4xx (including
+429 policy limits) use exit 1; HTTP 5xx use exit 2. Server-provided `Retry-After`
+and request IDs are exposed as `retryAfterMs` and `requestId` when available;
+clients do not infer retryability from HTTP 429 or retry automatically.
+For a write with an ambiguous outcome, inspect saved state or its receipt before
+retrying; a retry hint is not proof that repeating a write is safe.
+
+### Action boundaries
+
+Start with stored evidence. Before a live provider read, sweep, probe, research
+run, sync, write, or externally visible action, obtain approval covering its
+exact target, action, and bounded work. Approval already given for that exact
+operation need not be asked for again, but does not extend to more projects,
+larger batches, retries with new identities, or recurring work.
+
+HTTP GET and MCP `readOnlyHint` describe aspects of an operation, not its cost
+or permission. Provider discovery, account reads, and live diagnostics may
+consume quota even when labeled read-only. If the tool's effect is unclear,
+inspect its description and request direction before calling it.
+
+Authentication, role/scope checks, project restrictions, quotas, and guarded
+approval receipts are enforced by the server. Help, skills, resources, and tool
+visibility cannot grant authority. Never change credentials, endpoints, or
+project identifiers to work around a missing tool or a `403` response.
+
+For guarded ads writes, inspect unresolved operation receipts before retrying.
+Use the receipt's supported recovery action; do not replay a mutation under a
+new identity. An executor cannot create or widen its own human approval grant.
+On ambiguous results, exhausted bounds, or refusal, stop and report what is
+known and what permission or operator action is needed.
+
+## Version and source
+
+This public, versioned document is the source for initialization guidance,
+intent routes, the optional resource, and generated Canonry `SKILL.md` files.
+Guide v1 may receive compatible clarifications; incompatible routing contracts
+require a new guide version. The running server's help describes its actual
+catalog and remains usable without fetching this document.

package/assets/agent-workspace/skills/aero/references/orchestration.md

@@ -5,6 +5,12 @@ description: Workflow recipes — baseline, regression response, weekly review,
 
 # Orchestration Workflows
 
+Use these recipes with the current measurement scope. For Advanced
+portfolios, read `portfolio-analysis.md` and use the Property/market tools
+instead of substituting project-level metrics. For crawl or audit work, read
+`site-health.md`. Built-in Aero uses the corresponding exposed `canonry_*`
+tools; CLI examples below assume an external host with a shell.
+
 **Read the mention signal first in every workflow.** Compute and compare **mention rate + mention share** before cited rate. The fast mention read is `cnry overview <project> --format json` (returns `queryCounts.mentionRate`, `scores.mention`, `scores.mentionShare`) plus `cnry analytics <project> --feature gaps --format json` (returns `mentionedQueries[]`, `mentionGap[]`, `notMentioned[]` alongside the cited buckets). Use `cnry evidence <project>` for the per-query drilldown — it prints the two-glyph `[C/c][M/m]` cell per (query × provider) and a `Mentioned: X / Y` line next to `Cited: X / Y`. Mention and citation are independent — never derive one from the other. Treat `answerMentioned = null` as "not checked," never as not-mentioned.
 
 ## Workflow 1: New Client Baseline
@@ -17,7 +23,7 @@ Steps:
 3. With explicit operator approval for the crawl and persisted run, `cnry technical-aeo run <project> --wait`, then `cnry technical-aeo score <project> --format json` for site readiness. Use `cnry site-health overview <project> --format json` only to add crawl metadata (root, completeness, budgets, and termination); it never replaces the score. The crawl discovers the in-scope URL inventory from the root, sitemaps, and internal links. The default page budget is 1,000; the edge budget is unset by default and the crawl engine derives it from the page count, so `--max-edges` sets a ceiling rather than lifting one. Use `--max-pages`, `--max-edges`, or `--max-depth` to tighten them. Dead-link checks remain off unless `--check-dead-links` is explicit. For architecture investigation, use bounded Site Health subgraph/path/changes reads rather than attempting to load the visualization graph. Treat `countAccuracy: "lower-bound"` subgraph counts as minimums, and qualify an incomplete path's unreachable/truncated result with `complete: false` plus `termination`; neither is a site-wide conclusion. Persists to the dashboard and is trendable via `cnry technical-aeo trend <project>`.
 4. Identify top 3 gaps — lead with `mentionGap[]` / `notMentioned[]` (where competitors are named and you aren't), then the cited gaps with fixable site issues.
 5. Generate onboarding report with baseline + action plan
-6. Store baseline metrics in memory (include mention rate + mention share, not just cited rate)
+6. Read baselines back from stored runs; remember only operator-confirmed context that Canonry cannot observe.
 
 ## Workflow 2: Regression Response
 
@@ -28,11 +34,11 @@ Steps:
 2. `cnry history <project>` → trend for affected query
 3. Check competitor mention share BEFORE cited displacement: did a competitor take the **mention** share you lost (`mentionGap[]`)? Only then ask whether a competitor gained the **citation** you lost.
 4. Check indexing: `cnry google coverage <project>` → is the page still indexed? (a deindexed/thin page starves both signals)
-5. Audit the page: `npx @canonry/aeo-audit@4 "<page-url>" --format json`
+5. Read the page's persisted audit with `canonry_site_health_page_audit`. Propose a bounded new audit only if the stored evidence cannot answer the question.
 6. Diagnose cause: indexing issue / content issue / competitive displacement (mention-share loss first, citation loss second)
 7. Recommend fix with evidence — lead with what restores the mention
 8. If content fix: generate diff (schema, llms.txt, or content changes)
-9. Update memory with regression event + diagnosis (record which signal regressed: mention, citation, or both)
+9. Ground the diagnosis in stored run and page evidence; do not save metrics or unvalidated causes as durable facts.
 
 **Want to verify the regression is real / reproducible before reporting?**
 Propose the exact provider/query and get explicit approval, then use a probe
@@ -50,7 +56,7 @@ Trigger: Scheduled (weekly, or on-demand)
 
 Steps:
 1. `cnry overview <project> --format json` → current metrics, mention first (`queryCounts.mentionRate`, `scores.mention`, `scores.mentionShare`); `cnry analytics <project> --feature gaps --format json` for the mention gaps; `cnry evidence <project> --format json` for the per-query `[C/c][M/m]` drilldown
-2. Compare to baseline/prior week from memory — mention rate + mention share first, cited rate second
+2. Compare compatible stored periods/runs using the reporting or portfolio playbook — mention rate + mention share first, cited rate second
 3. Compute deltas: mentions gained/lost/stable (primary), then citations gained/lost/stable (secondary)
 4. Flag any new regressions not yet addressed (lead with lost mentions)
 5. Check competitor movement — mention share swing first, then cited-domain displacement
@@ -64,6 +70,6 @@ Steps:
 1. `cnry overview <project> --format json` + `cnry analytics <project> --feature gaps --format json` → confirm the gap, mention first: is the query in `notMentioned[]` (not named at all) or `mentionGap[]` (a competitor is named, you aren't)? Then `cnry evidence <project>` for the per-query `[C/c][M/m]` cell to see whether you also lack the citation. Mention gap leads the diagnosis; the missing citation is the secondary lens.
 2. Check if a relevant page exists on the domain
 3. If no page: recommend content creation (topic, target queries) — give the engine a reason to name you
-4. If page exists: `npx @canonry/aeo-audit@4 "<page-url>"` → diagnose why neither mentioned nor cited
+4. If page exists, inspect its persisted page audit and answer evidence. Treat a technical finding as a possible contributor, not proof of why an answer engine omitted the brand.
 5. Check schema completeness, llms.txt coverage, indexing status
 6. Generate prioritized fix list — fixes that earn the mention first, then the citation

package/assets/agent-workspace/skills/aero/references/portfolio-analysis.md

@@ -0,0 +1,93 @@
+---
+name: portfolio-analysis
+description: Interpret Simple and Advanced portfolios, compare Properties and markets, trace answer evidence, and qualify missing or incompatible measurements.
+---
+
+# Portfolio analysis
+
+## Establish the measurement
+
+Use `canonry_project_get` and `canonry_measurement_plan_get` to establish the
+project and active plan. A Simple portfolio uses the standard project flow;
+an Advanced portfolio uses a versioned measurement plan. "Multiportfolio"
+may mean Properties within one project or several projects. Built-in Aero's
+project-scoped tools operate on the current session's project. Do not present
+one project's results as an account-wide comparison.
+
+Resolve Property and market names to returned stable keys. A Property is
+addressed by `targetKey`; a reporting group by `groupKey`. Preserve these
+keys alongside labels, plan revision, displayed run, provider, requested and
+served model when available, location, date window, and query class. A market
+group and provider location are distinct scopes. Use only the filters exposed
+by each tool; never invent a model or market parameter.
+
+The chat does not inherit dashboard selections. Resolve names and URLs from
+the request; ask for the selection when a reference such as "this market"
+cannot be resolved. For an unqualified portfolio ranking, use non-brand
+questions and state the returned scope. Keep branded recall separate. An
+explicit request for all classes permits a combined coverage read, not an
+invented combined share-of-voice ratio.
+
+## Choose the read
+
+| Question | Stored evidence |
+|---|---|
+| How is a Simple portfolio doing? | `canonry_project_overview`, `canonry_visibility_stats`; preserve sample sizes and returned class |
+| Which Advanced Properties are strongest or weakest? | `canonry_measurement_portfolio_summary`; use `mentionRanking.strongest`, `.weakest`, and `.excluded` |
+| What is measured for one Property or market? | `canonry_measurement_overview` with `scope: property` / `targetKey` or `scope: group` / `groupKey` |
+| Which questions explain a Property's gaps? | `canonry_measurement_property_questions`, then `canonry_measurement_question_result` with a returned `resultId` |
+| What was mentioned or linked in individual answers? | `canonry_measurement_property_evidence` with `shape: answers` |
+| Who appeared instead? | `canonry_measurement_property_competitors`; report stored replacement names as observations |
+| Did performance change? | `canonry_measurement_changes` for Advanced; `canonry_visibility_compare` for Simple month comparisons |
+| Can these results support a conclusion? | `canonry_measurement_data_quality` for Advanced completeness, capture, retrieval, and comparability |
+
+For schema-v1 plans use `canonry_measurement_report` pinned to the requested
+revision. Do not assume v2 Property/question-class reads are supported or
+change the plan to make a read work.
+
+## Interpret the denominator
+
+- Quote the server's numerator and denominator with a rate. Mention and
+  citation are independent signals; `mentioned: null` or
+  `answerMentioned: null` means unchecked, not a measured miss.
+- An empty result with `measurement.state: not_measured` means no
+  measurement. An unavailable aggregate does not invalidate available
+  Property metrics. Report ranked Properties and list excluded Properties
+  with the returned reasons, including ambiguous identity.
+- `mentionRanking` ranks all eligible Properties before applying its limit.
+  Do not recompute a best/worst ranking from one overview page. Tied rates
+  are ties; stable label/key order does not establish a unique winner or
+  statistical significance.
+- Markets can share Properties and do not sum to a portfolio total. Do not
+  average Property percentages, add overlapping market counts, or substitute
+  project-brand performance for an individual Property's performance.
+- `shape: sources` returns cited URLs. Answers without citations are absent
+  from that shape, so source-row counts cannot measure answer coverage or
+  prove the absence of mentions. Use `shape: answers` to explain gaps.
+- Overview's omitted query class combines classes; portfolio summary defaults
+  to non-brand. Pass an explicit class for a sequence of comparable reads
+  and report what the response actually served.
+
+## Compare and drill down safely
+
+A ranking describes one snapshot. Use the comparison tool's compatibility
+decision before describing a trend; a plan revision, model, assignment, or
+capture change can make raw rates incomparable. Report an unavailable or
+incompatible comparison with its reason instead of subtracting rates by hand.
+For Simple month comparisons, honor the returned interval, continuity,
+`within-noise`, and low-sample qualifications from the reporting playbook.
+
+Carry the displayed run and the supported filters into follow-up reads.
+Reuse cursors unchanged with the same scope, class, sort, shape, and filters.
+A revision or evidence change can invalidate a cursor; restart that read
+without merging pages from incompatible snapshots. Overview search narrows
+displayed rows without changing metric denominators.
+
+Tool output can be trimmed. Inspect `__truncated`, `__omittedRows`, and
+`__omittedRowsByField` as well as API pagination metadata. Request a smaller
+page or narrower scope before treating the returned rows as exhaustive.
+
+Lead the answer with the scoped result, give numerator/denominator and the
+evidence explaining it, state missing data or comparison limits, then suggest
+an action supported by that evidence. Reads do not authorize a new sweep,
+probe, draft publication, or recurring measurement.

package/assets/agent-workspace/skills/aero/references/reporting.md

@@ -7,7 +7,16 @@ description: Weekly and monthly report templates with metric tables, regression/
 
 ## Month-over-month AEO (do this right)
 
-For ANY month-over-month AEO claim, use `cnry visibility-compare <project> --from <YYYY-MM> --to <YYYY-MM>` — never diff two `visibility-stats --month` calls by hand. It returns the statistically honest comparison. **Share of voice is less exposed to an engine's broad naming propensity than an absolute rate**, and is computed over non-brand queries only (see the branded caveat below), but it does **not** bypass model continuity. The comparison is restricted to the query/provider PAIRS present in BOTH months, then to providers with one known, identical configured model id in both months. Every figure carries a Wilson interval and a `verdict`:
+For Advanced Property or market reports, read `portfolio-analysis.md` first
+and use `canonry_measurement_changes` for compatible stored-run comparisons.
+Do not substitute a project-wide month comparison for Property-scoped data.
+For Site Health reports, read `site-health.md` and keep crawl and audit
+provenance separate from answer-visibility periods.
+
+For Simple month-over-month AEO claims, use `canonry_visibility_compare`
+(CLI: `cnry visibility-compare <project> --from <YYYY-MM> --to <YYYY-MM>`),
+never diff two `visibility-stats --month` calls by hand. It returns the
+statistically honest comparison. **Share of voice is less exposed to an engine's broad naming propensity than an absolute rate**, and is computed over non-brand queries only (see the branded caveat below), but it does **not** bypass model continuity. The comparison is restricted to the query/provider PAIRS present in BOTH months, then to providers with one known, identical configured model id in both months. Every figure carries a Wilson interval and a `verdict`:
 
 - **`within-noise`** — the periods' intervals overlap. **No confirmed change; never report it as a rise or a decline.**
 - **`moved`** — disjoint intervals; a real directional move (the point sign is the direction).

package/assets/agent-workspace/skills/aero/references/site-health.md

@@ -0,0 +1,104 @@
+---
+name: site-health
+description: Diagnose Site Health scores, page findings, crawl coverage, internal links, and scan changes while preserving run provenance and incomplete-data limits.
+---
+
+# Site Health diagnosis
+
+Site Health is the product label for the `technical-aeo` audit and crawl
+surface. It measures technical readiness. Mention coverage and citation
+coverage come from answer-engine measurements; neither is derived from an
+audit score, link score, or graph position.
+
+## Start with stored evidence
+
+Read `canonry_site_health_overview` for the selected or latest crawl's root,
+run identity, completeness, counts, budgets, versions, termination, and
+dead-link check state. Pair it with `canonry_technical_aeo_score` for the
+aggregate score, factor distributions, issues, and prioritized fixes. Pin
+the score and subsequent reads to the returned run when available. Overview
+is crawl metadata, not the scorecard. Older scorecard-only audits can lack
+a graph; report the available scores and missing crawl evidence separately.
+
+Use `canonry_technical_aeo_pages` for low-scoring or failed pages and
+`canonry_site_health_page_audit` for one page's exact factor scores, finding
+codes/messages, recommendations, and critical defects. Prefer a returned
+`nodeKey`; use the exact URL when no node key is available. The chat does not
+receive the selected graph node, so resolve the requested page or ask for it.
+
+## Choose a bounded investigation
+
+| Question | Read |
+|---|---|
+| Which URLs were discovered and audited? | `canonry_technical_aeo_crawl_pages`; filter audit/fetch/indexability state and follow its cursor |
+| How is the site organized? | `canonry_technical_aeo_structure` for one path level |
+| What links to/from this page? | `canonry_technical_aeo_link_neighbors`; inbound and outbound truncation are independent |
+| What is around this page? | `canonry_site_health_subgraph`; refocus or expand only as needed |
+| Can the root reach this page? | `canonry_site_health_path` for a directed followable path |
+| Which editorial or template links exist? | `canonry_technical_aeo_internal_links` with supported filters |
+| What changed between scans? | `canonry_site_health_changes` for compatible complete snapshots |
+| Were broken links checked? | `canonry_technical_aeo_dead_links` |
+| How have scores moved? | `canonry_technical_aeo_trend`, then inspect the relevant runs and coverage |
+
+Use semantic reads rather than requesting the full interactive graph or
+inferring importance from visualization coordinates. Defaults for subgraphs
+are 25 nodes and 50 edges; a bounded neighborhood is not the whole site.
+
+## Interpret states before findings
+
+- `hasData: false`, no crawl, details unavailable, page not found, and page
+  not audited are different states. None means a zero score or a passing
+  page. `scores-only` permits discussing scores but not inventing findings.
+- `complete: false` and `termination` qualify conclusions. A budget-limited
+  scan does not establish site-wide coverage. Raw found/checked/failed
+  counts are not a completion percentage when total discovery is unknown.
+- Subgraph `countAccuracy: lower-bound` means counts are minimums. An
+  unreachable or truncated path in an incomplete crawl does not prove a
+  site-wide orphan. Absence from a bounded result is not absence from the site.
+- Crawler-derived indexability is technical eligibility, not Google index
+  coverage. Verify Google indexing with its own stored integration evidence.
+- Link score indicates structural importance, not an audit failure. Pair
+  important pages with their actual audit findings when prioritizing fixes.
+- Dead-link checks are opt-in. `disabled` means unchecked, not zero broken
+  links. A listed dead link requires a recorded HTTP 4xx/5xx. Fetch failures
+  such as timeouts can be `unverified`; do not label them broken URLs.
+- Link template classification carries `templateSource` and scan-level
+  `templateDetection`. An empty content-only result under unmeasured
+  classification cannot establish that the site has no editorial links.
+  Different classification rules are not equivalent measurements.
+
+## Compare scans and prioritize
+
+Use the changes tool's resolved run IDs and filters; keep them fixed when
+paging. Its first page carries the exact summary; continuation pages omit
+summary/total. Retain that first summary and do not treat its absence on later
+pages as zero. Inspect API and Aero truncation markers before claiming a
+complete list. Reject/refusal states do not justify joining partial or
+incompatible scans manually.
+
+Before attributing a score delta to fixes, check root/scope, completeness,
+audited-page population, effective budgets, and scoring/crawl versions. A
+changed sample can move an aggregate without any page improving. Explain
+page-level before/after evidence where available and qualify remaining gaps.
+
+For Simple portfolios, relate findings to the requested site or pages. For
+Advanced portfolios, read `portfolio-analysis` and resolve each Property's
+Target/URL scope from its plan. The project-wide score is not a Property
+score. Label a filtered page sample as such, preserve the Property and market
+context, and do not invent a Property aggregate. Shared paths can affect
+multiple Properties; avoid counting the same finding as independent proof
+for each one.
+
+Rank persisted critical defects and fixes using severity and affected-page
+evidence, with business or link importance where available. State the run,
+scope, finding, affected page(s), and supported next step. A technical issue
+can be a hypothesis for an AI-visibility gap, but the crawl alone cannot prove
+why an answer engine omitted a Property. Join the corresponding answer
+evidence before making that connection.
+
+Read existing data first. If absent or stale, propose an explicitly bounded
+`canonry_technical_aeo_run` when a new audit is needed. Existing authorization
+for that run remains valid; a diagnostic question alone does not authorize
+a crawl. Dead-link checks remain off unless requested. After an approved
+run, follow its returned ID with `canonry_run_get`, then inspect that run's
+crawl and score rather than silently switching to another scan.

package/assets/agent-workspace/skills/aero/soul.md

@@ -7,6 +7,11 @@ description: Aero's persona, values, and voice — context-agnostic identity tha
 
 You are **Aero** — an AEO analyst. You help operators understand whether AI answer engines NAME their brand (mention) and, secondarily, whether they CITE their domain, and you act decisively on what the data shows. Mention is the primary gauge; citation is the secondary signal. The two are independent — never compute one from the other.
 
+For multi-property portfolios, keep each Property's identity and measurement
+scope intact. For Site Health, explain the stored audit findings and crawl
+limits first. A technical score does not measure AI visibility, and a crawl
+finding alone does not prove why an answer engine omitted a brand.
+
 ## Values
 
 - **Evidence over opinion.** Numbers before interpretation. "ChatGPT stopped mentioning you for 'roof repair phoenix' between March 28 and April 2, and your mention share fell from 50% to 0%" beats "your visibility decreased" — then note the lost citation second.

package/assets/agent-workspace/skills/canonry/references/canonry-cli.md

@@ -1258,6 +1258,8 @@ Every command takes `--format`:
 - **`json`** — one pretty-printed JSON document (the full envelope). Stable contract.
 - **`jsonl`** — newline-delimited JSON: the command's **primary collection**, one self-contained record per line. The agent-friendly machine format — no envelope key to guess (`.checks` vs `.results` vs `.rows`), no `jq` flattening, greppable line by line.
 
+**Update notice.** When a newer canonry is published, the CLI writes one line to **stderr** before the command runs (stdout is never touched): `[canonry] UPDATE_AVAILABLE: ...` in text mode, or `{"notice":{"code":"UPDATE_AVAILABLE","current":"…","latest":"…","installMethod":"npm|homebrew|docker","upgradeCommand":"…","url":"…"}}` with `--format json|jsonl`. Tell the operator, or run the `upgradeCommand` (it already matches how canonry was installed) and restart `canonry serve`. `cnry doctor --check canonry.version.current` reports the same for the running server (`version.outdated` warns). Silence with `CANONRY_DISABLE_UPDATE_CHECK=1`. Over MCP the same notice arrives in the initialize instructions and as `updateAvailable` in `canonry_help`.
+
 `jsonl` is supported by every **collection** command — one whose primary output is a list: `insights`, `runs`, `evidence`, `history`, `query/keyword/competitor list`, `notify list/events`, `google` reads (`performance`, `performance-daily`, `inspections`, `coverage-history`, `deindexed`, `status`, `properties`, `list-sitemaps`), `bing` reads (`coverage-history`, `inspections`, `performance`, `sites`), `ga` reads (`ai-referral-daily`, `ai-referral-history`, `social-referral-history`, `session-history`, `coverage`), `google-ads` customer/snapshot reads, `gtm` account/container/workspace/snapshot reads, conversion-tracking contracts and integrity findings, `ads geo search` and `ads conversions` reads, `traffic events/sources/status`, `discover list/show`, `content targets/sources/gaps/map`, `backlinks list/releases`, `project list/locations`, `key list`, `agent memory list`, `agent providers`, `sources` (streams the ranked cited-domain list), and `doctor`. (`content brief` is an object command — `jsonl` degrades to its JSON document.)
 
 Each `jsonl` line re-injects the envelope context it would otherwise lose, so a line lifted out still self-describes: