@ainyc/canonry 5.2.1 → 5.3.1

package/dist/{chunk-YQNKULAD.js → chunk-IACO5R7A.js}

@@ -709,7 +709,7 @@ import {
 } from "./chunk-2U5IW3G5.js";
 
 // src/intelligence-service.ts
-import { eq as eq67, desc as desc29, asc as asc12, and as and57, ne as ne11, or as or16, inArray as inArray25, gte as gte18, lte as lte15, isNull as isNull12, sql as sql27, exists } from "drizzle-orm";
+import { eq as eq68, desc as desc30, asc as asc12, and as and58, ne as ne11, or as or16, inArray as inArray26, gte as gte18, lte as lte15, isNull as isNull12, sql as sql27, exists } from "drizzle-orm";
 
 // ../db/src/client.ts
 import { mkdirSync } from "fs";
@@ -825,6 +825,7 @@ __export(schema_exports, {
   siteCrawlPages: () => siteCrawlPages,
   siteCrawlRunRequests: () => siteCrawlRunRequests,
   siteCrawlSnapshots: () => siteCrawlSnapshots,
+  siteLivenessState: () => siteLivenessState,
   trafficEventReceipts: () => trafficEventReceipts,
   trafficSources: () => trafficSources,
   usageCounters: () => usageCounters,
@@ -1385,6 +1386,28 @@ var doctorHealthState = sqliteTable("doctor_health_state", {
   summary: text("summary").notNull(),
   checkedAt: text("checked_at").notNull(),
   /** When we last emitted for this (status, code). Null until first emit. */
+  notifiedAt: text("notified_at"),
+  /**
+   * Every failing check from the last pass as sorted `status:code` pairs. The
+   * headline code alone cannot see a second breach arriving UNDER an existing
+   * one: a GBP outage opening beneath a standing GA warning left the worst code
+   * unchanged, so it was graded, listed in the payload, and then never sent.
+   * NULL on rows written before this column existed — unknown is not the same
+   * as changed, so the trigger falls back to the code rule for one pass rather
+   * than paging every already-degraded project the moment this ships.
+   */
+  failingSignature: text("failing_signature")
+});
+var siteLivenessState = sqliteTable("site_liveness_state", {
+  projectId: text("project_id").primaryKey(),
+  /** Last graded probe: ok | fail. Skipped probes are not recorded. */
+  status: text("status").notNull(),
+  code: text("code").notNull(),
+  summary: text("summary").notNull(),
+  /** Failed passes in a row. Paging waits for two so one blip never alerts. */
+  consecutiveFailures: integer("consecutive_failures").notNull().default(0),
+  checkedAt: text("checked_at").notNull(),
+  /** Set when an outage was actually paged; cleared on recovery. */
   notifiedAt: text("notified_at")
 });
 var notifications = sqliteTable("notifications", {
@@ -7291,6 +7314,35 @@ var MIGRATION_VERSIONS = [
       `CREATE INDEX IF NOT EXISTS idx_runtime_logs_module_level_ts ON runtime_logs(module, level, ts, sequence)`,
       `CREATE INDEX IF NOT EXISTS idx_runtime_logs_ts ON runtime_logs(ts, sequence)`
     ]
+  },
+  {
+    // Liveness gets its own row per project. See siteLivenessState in
+    // schema.ts: a fast "site is up" pass must never overwrite the 6h doctor
+    // state, or it would clear an unrelated outage and send a false recovery.
+    version: 156,
+    name: "site-liveness-state",
+    statements: [
+      `CREATE TABLE IF NOT EXISTS site_liveness_state (
+        project_id           TEXT PRIMARY KEY REFERENCES projects(id) ON DELETE CASCADE,
+        status               TEXT NOT NULL,
+        code                 TEXT NOT NULL,
+        summary              TEXT NOT NULL,
+        consecutive_failures INTEGER NOT NULL DEFAULT 0,
+        checked_at           TEXT NOT NULL,
+        notified_at          TEXT
+      )`
+    ]
+  },
+  {
+    // A breach opening underneath an existing one never reached anyone: the
+    // trigger keyed on the worst check's code, and a lower-ranked check going
+    // bad does not change it. Existing rows get NULL, which the notifier reads
+    // as "unknown" rather than "changed" so shipping this pages nobody.
+    version: 157,
+    name: "doctor-health-failing-signature",
+    statements: [
+      `ALTER TABLE doctor_health_state ADD COLUMN failing_signature TEXT`
+    ]
   }
 ];
 function addRunsMeasurementPlanVersionForeignKey(tx) {
@@ -7757,8 +7809,8 @@ function projectContext(event, nested) {
     const value = event[key] ?? nested[key];
     if (typeof value === "boolean") context[key] = value;
   }
-  const errorCode = optionalString(event.errorCode ?? nested.errorCode, 128);
-  if (errorCode !== void 0) context.errorCode = errorCode;
+  const errorCode2 = optionalString(event.errorCode ?? nested.errorCode, 128);
+  if (errorCode2 !== void 0) context.errorCode = errorCode2;
   return context;
 }
 var ID_FIELDS = [
@@ -43383,9 +43435,10 @@ function healthView(payload) {
       value: bulletList(others.map((check2) => `${check2.status} \u2014 ${check2.code}`))
     });
   }
+  const website = health.code.startsWith("site.reachability.");
   return {
     severity,
-    title: recovered ? `${project.name} recovered` : `${project.name} \u2014 measurement degraded`,
+    title: website ? recovered ? `${project.name} website is back up` : `${project.name} website is down` : recovered ? `${project.name} recovered` : `${project.name} \u2014 measurement degraded`,
     body: health.summary,
     fields,
     url: payload.dashboardUrl,
@@ -52229,14 +52282,14 @@ function finishReconciliation(app, row, leaseOwner, context, outcome, maxAttempt
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const entityId = outcome.entity?.id ?? row.entityId;
   const exhausted = outcome.state === AdsOperationStates.unknown && row.reconcileAttempts >= maxAttempts;
-  const errorCode = exhausted ? ADS_RECONCILIATION_QUARANTINED : outcome.errorCode ?? null;
+  const errorCode2 = exhausted ? ADS_RECONCILIATION_QUARANTINED : outcome.errorCode ?? null;
   const errorMessage = exhausted ? `Reconciliation stopped after ${maxAttempts} inconclusive attempts; manual remediation is required` : outcome.errorMessage ?? null;
   app.db.transaction((tx) => {
     const result = tx.update(adsOperations).set({
       state: outcome.state,
       entityId,
       upstreamUpdatedAt: outcome.entity?.updatedAt ?? row.upstreamUpdatedAt,
-      errorCode,
+      errorCode: errorCode2,
       errorMessage,
       lastReconciledAt: now,
       leaseOwner: null,
@@ -52251,7 +52304,7 @@ function finishReconciliation(app, row, leaseOwner, context, outcome, maxAttempt
     if (result.changes > 0) {
       writeAuditLog(tx, reconciliationAuditEntry(row, outcome.state, context, {
         entityId,
-        errorCode
+        errorCode: errorCode2
       }));
     }
   });
@@ -57516,11 +57569,11 @@ async function wordpressRoutes(app, opts) {
           const result = await bulkSetSeoMeta(connection, metaEntries);
           const applied = result.results.filter((r) => r.status === "applied").length;
           const manual = result.results.filter((r) => r.status === "manual").length;
-          const skipped = result.results.filter((r) => r.status === "skipped").length;
+          const skipped3 = result.results.filter((r) => r.status === "skipped").length;
           steps.push({
             name: "set-meta",
             status: "completed",
-            summary: `${applied} applied, ${manual} manual-assist, ${skipped} skipped`
+            summary: `${applied} applied, ${manual} manual-assist, ${skipped3} skipped`
           });
         }
       } catch (err) {
@@ -57542,11 +57595,11 @@ async function wordpressRoutes(app, opts) {
             const result = await deploySchemaFromProfile(connection, profile);
             const deployed = result.results.filter((r) => r.status === "deployed").length;
             const stripped = result.results.filter((r) => r.status === "stripped").length;
-            const skipped = result.results.filter((r) => r.status === "skipped").length;
+            const skipped3 = result.results.filter((r) => r.status === "skipped").length;
             steps.push({
               name: "schema-deploy",
               status: "completed",
-              summary: `${deployed} deployed, ${stripped} stripped (manual-assist), ${skipped} skipped`
+              summary: `${deployed} deployed, ${stripped} stripped (manual-assist), ${skipped3} skipped`
             });
           }
         } catch (err) {
@@ -77300,7 +77353,7 @@ async function trafficRoutes(app, opts) {
         startedAt,
         createdAt: startedAt
       }).run();
-      const markFailed = (msg, errorCode) => {
+      const markFailed = (msg, errorCode2) => {
         const failedAt = (/* @__PURE__ */ new Date()).toISOString();
         app.db.transaction((tx) => {
           tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq55(runs.id, runId)).run();
@@ -77320,7 +77373,7 @@ async function trafficRoutes(app, opts) {
             aiUserFetchHits: 0,
             aiReferralHits: 0,
             durationMs: Date.now() - syncStartedAtMs,
-            errorCode
+            errorCode: errorCode2
           });
         } catch {
         }
@@ -79472,9 +79525,418 @@ var ga4ConnectionCheck = {
 };
 var GA_AUTH_CHECKS = [ga4ConnectionCheck];
 
+// ../api-routes/src/doctor/checks/data-freshness.ts
+import { and as and51, desc as desc26, eq as eq59, inArray as inArray22 } from "drizzle-orm";
+var GA_DATA_AGING_DAYS = 3;
+var GA_DATA_STALE_DAYS = 5;
+var GSC_DATA_AGING_DAYS = 5;
+var GSC_DATA_STALE_DAYS = 7;
+var SYNC_IDLE_DAYS = 3;
+var GSC_REPORTING_TIME_ZONE2 = "America/Los_Angeles";
+var DAY_MS2 = 24 * 60 * 60 * 1e3;
+var ISO_DATE = /^(\d{4})-(\d{2})-(\d{2})$/;
+function utcFromIsoDate(date) {
+  const match = ISO_DATE.exec(date);
+  if (!match) return null;
+  return Date.UTC(Number(match[1]), Number(match[2]) - 1, Number(match[3]));
+}
+function daysBetweenIsoDates(from, to) {
+  const start = utcFromIsoDate(from);
+  const end = utcFromIsoDate(to);
+  if (start === null || end === null) return null;
+  return Math.floor((end - start) / DAY_MS2);
+}
+function daysSinceDate(date, now = /* @__PURE__ */ new Date(), timeZone) {
+  const today = timeZone ? formatIsoDateInTimeZone(now.toISOString(), timeZone) : `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, "0")}-${String(now.getUTCDate()).padStart(2, "0")}`;
+  return daysBetweenIsoDates(date, today);
+}
+function skipped(code, summary2) {
+  return { status: CheckStatuses.skipped, code, summary: summary2, remediation: null };
+}
+function lastSyncAgeDays(ctx, kinds) {
+  const row = ctx.db.select({ createdAt: runs.createdAt }).from(runs).where(and51(eq59(runs.projectId, ctx.project.id), inArray22(runs.kind, kinds), eq59(runs.status, "completed"))).orderBy(desc26(runs.createdAt)).limit(1).get();
+  if (!row?.createdAt) return null;
+  const age = Math.floor((Date.now() - Date.parse(row.createdAt)) / DAY_MS2);
+  return Number.isFinite(age) ? age : null;
+}
+function grade(ctx, spec, newestDate) {
+  const projectName = ctx.project.name;
+  const code = (suffix) => `${spec.source}.data.${suffix}`;
+  const sync = spec.syncCommand(projectName);
+  const syncAge = lastSyncAgeDays(ctx, spec.syncKinds);
+  const syncIdle = syncAge === null || syncAge >= SYNC_IDLE_DAYS;
+  if (!newestDate) {
+    return {
+      status: CheckStatuses.warn,
+      code: code("never-synced"),
+      summary: `${spec.label} is connected but no daily data has been stored yet.`,
+      remediation: `Run \`${sync}\`, or set a data-refresh schedule so it keeps itself current.`,
+      details: { lastSyncAgeDays: syncAge }
+    };
+  }
+  const age = daysSinceDate(newestDate, /* @__PURE__ */ new Date(), spec.timeZone);
+  if (age === null) {
+    return {
+      status: CheckStatuses.warn,
+      code: code("unreadable-date"),
+      summary: `Newest stored ${spec.label} date "${newestDate}" is not a calendar date.`,
+      remediation: null,
+      details: { newestDate }
+    };
+  }
+  const details = { newestDate, ageDays: age, agingDays: spec.agingDays, staleDays: spec.staleDays, lastSyncAgeDays: syncAge };
+  if (age < spec.agingDays) {
+    return {
+      status: CheckStatuses.ok,
+      code: code("fresh"),
+      summary: `${spec.label} data is current through ${newestDate}.`,
+      remediation: null,
+      details
+    };
+  }
+  if (syncIdle) {
+    return {
+      status: CheckStatuses.warn,
+      code: code("not-syncing"),
+      summary: `No ${spec.label} sync has completed in ${syncAge === null ? "any recorded run" : `${syncAge} days`}, and stored data ends ${newestDate}.`,
+      remediation: `Run \`${sync}\`, or set a data-refresh schedule: \`canonry schedule set ${projectName} --kind data-refresh --preset daily\`.`,
+      details
+    };
+  }
+  const remediation = `${spec.quietExplanation} ${spec.brokenExplanation}`;
+  return {
+    status: CheckStatuses.warn,
+    code: code(age >= spec.staleDays ? "stale" : "aging"),
+    summary: `${spec.label} syncs are running but have stored nothing newer than ${newestDate} (${age} days).`,
+    remediation,
+    details
+  };
+}
+var GA_SPEC = {
+  source: "ga",
+  label: "GA4",
+  agingDays: GA_DATA_AGING_DAYS,
+  staleDays: GA_DATA_STALE_DAYS,
+  syncKinds: ["ga-sync"],
+  syncCommand: (name) => `canonry ga sync ${name}`,
+  quietExplanation: "GA4 omits days with no sessions, so a genuinely quiet period clears itself on the next visit.",
+  brokenExplanation: "If the site did have visitors, check that the GA4 tag or its Tag Manager container is still on the live site."
+};
+var GSC_SPEC = {
+  source: "gsc",
+  label: "Search Console",
+  agingDays: GSC_DATA_AGING_DAYS,
+  staleDays: GSC_DATA_STALE_DAYS,
+  timeZone: GSC_REPORTING_TIME_ZONE2,
+  syncKinds: ["gsc-sync"],
+  syncCommand: (name) => `canonry google sync ${name}`,
+  quietExplanation: "Search Console omits days with no impressions and reports two to three days behind, so a quiet period clears itself.",
+  brokenExplanation: "If the site did have impressions, check that the property still lists this site and the connected account still has access."
+};
+function gaConnected(ctx) {
+  const project = ctx.project;
+  if (!ctx.ga4CredentialStore && !ctx.googleConnectionStore) return "store-unavailable";
+  if (ctx.ga4CredentialStore?.getConnection(project.name)) return "connected";
+  if (ctx.googleConnectionStore?.getConnection(project.canonicalDomain, "ga4")) return "connected";
+  return "not-connected";
+}
+var gaRecentDataCheck = {
+  id: "ga.data.recent-data",
+  category: CheckCategories.integrations,
+  scope: CheckScopes.project,
+  title: "GA4 data still arriving",
+  run: (ctx) => {
+    if (!ctx.project) return skipped("ga.data.no-project", "Project context required.");
+    const connection = gaConnected(ctx);
+    if (connection === "store-unavailable") return skipped("ga.data.store-unavailable", "No GA4 credential store configured for this deployment.");
+    if (connection === "not-connected") return skipped("ga.data.not-connected", "GA4 is not connected for this project.");
+    const newest = ctx.db.select({ date: gaDailyTotals.date }).from(gaDailyTotals).where(eq59(gaDailyTotals.projectId, ctx.project.id)).orderBy(desc26(gaDailyTotals.date)).limit(1).get();
+    return grade(ctx, GA_SPEC, newest?.date);
+  }
+};
+var gscRecentDataCheck = {
+  id: "gsc.data.recent-data",
+  category: CheckCategories.integrations,
+  scope: CheckScopes.project,
+  title: "Search Console data still arriving",
+  run: (ctx) => {
+    if (!ctx.project) return skipped("gsc.data.no-project", "Project context required.");
+    if (!ctx.googleConnectionStore) return skipped("gsc.data.store-unavailable", "No Google connection store configured for this deployment.");
+    if (!ctx.googleConnectionStore.getConnection(ctx.project.canonicalDomain, "gsc")) {
+      return skipped("gsc.data.not-connected", "Search Console is not connected for this project.");
+    }
+    const watermark = ctx.db.select({ dataThroughDate: gscDataWatermarks.dataThroughDate }).from(gscDataWatermarks).where(eq59(gscDataWatermarks.projectId, ctx.project.id)).get();
+    if (watermark?.dataThroughDate) return grade(ctx, GSC_SPEC, watermark.dataThroughDate);
+    const newest = ctx.db.select({ date: gscDailyTotals.date }).from(gscDailyTotals).where(eq59(gscDailyTotals.projectId, ctx.project.id)).orderBy(desc26(gscDailyTotals.date)).limit(1).get();
+    return grade(ctx, GSC_SPEC, newest?.date);
+  }
+};
+var DATA_FRESHNESS_CHECKS = [gaRecentDataCheck, gscRecentDataCheck];
+
+// ../api-routes/src/site-reachability.ts
+import dns3 from "dns/promises";
+import http3 from "http";
+import https3 from "https";
+import net3 from "net";
+var SITE_REACHABILITY_USER_AGENT = "Canonry site-liveness (+https://canonry.ai)";
+var DEFAULT_SITE_MAX_REDIRECTS = 10;
+var DEFAULT_TIMEOUT_MS5 = 1e4;
+var DEFAULT_RETRY_DELAY_MS = 2e3;
+var DNS_TIMEOUT_MS = 5e3;
+var MAX_ADDRESSES_PER_HOP = 4;
+var LENIENT_RETRY_CODES = /* @__PURE__ */ new Set([
+  "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+  "UNABLE_TO_GET_ISSUER_CERT",
+  "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+  "SELF_SIGNED_CERT_IN_CHAIN",
+  "DEPTH_ZERO_SELF_SIGNED_CERT",
+  "ERR_TLS_CERT_ALTNAME_INVALID",
+  "HPE_INVALID_HEADER_TOKEN",
+  "HPE_UNEXPECTED_CONTENT_LENGTH",
+  "HPE_INVALID_CONSTANT"
+]);
+var NO_SUCH_HOST_CODES = /* @__PURE__ */ new Set(["ENOTFOUND", "ENODATA"]);
+var REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+function errorCode(err) {
+  const code = err?.code;
+  return typeof code === "string" ? code : "";
+}
+async function lookupSiteAddresses(hostname, timeoutMs = DNS_TIMEOUT_MS) {
+  const literalFamily = net3.isIPv6(hostname) ? 6 : net3.isIPv4(hostname) ? 4 : null;
+  if (literalFamily) return { kind: "addresses", addresses: [{ address: hostname, family: literalFamily }] };
+  let timer;
+  const deadline = new Promise((resolve) => {
+    timer = setTimeout(() => resolve("timeout"), timeoutMs);
+  });
+  try {
+    const settled = await Promise.race([
+      Promise.allSettled([dns3.resolve4(hostname), dns3.resolve6(hostname)]),
+      deadline
+    ]);
+    if (settled === "timeout") return { kind: "resolver-error", reason: `DNS did not answer within ${Math.round(timeoutMs / 1e3)}s` };
+    const [ipv4, ipv6] = settled;
+    const found = /* @__PURE__ */ new Map();
+    if (ipv4.status === "fulfilled") for (const address of ipv4.value) found.set(`4:${address}`, { address, family: 4 });
+    if (ipv6.status === "fulfilled") for (const address of ipv6.value) found.set(`6:${address}`, { address, family: 6 });
+    if (found.size > 0) return { kind: "addresses", addresses: [...found.values()] };
+    const codes = [ipv4, ipv6].map((r) => r.status === "rejected" ? errorCode(r.reason) : "");
+    if (codes.every((code) => NO_SUCH_HOST_CODES.has(code))) {
+      return { kind: "no-such-host", reason: `${hostname} has no DNS address (${codes[0]})` };
+    }
+    const failing = codes.find((code) => code && !NO_SUCH_HOST_CODES.has(code)) ?? "unknown resolver error";
+    return { kind: "resolver-error", reason: `DNS lookup for ${hostname} failed (${failing})` };
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+async function requestPinnedStatus(target, timeoutMs, options = {}) {
+  const secure = target.url.protocol === "https:";
+  const port = target.url.port ? Number(target.url.port) : secure ? 443 : 80;
+  const requestOptions = {
+    hostname: target.address,
+    family: target.family,
+    port,
+    method: "GET",
+    path: `${target.url.pathname}${target.url.search}`,
+    headers: { Host: target.url.host, "User-Agent": SITE_REACHABILITY_USER_AGENT, Accept: "text/html,*/*;q=0.8" },
+    insecureHTTPParser: options.lenient === true
+  };
+  if (secure) {
+    requestOptions.servername = target.url.hostname.replace(/^\[|\]$/g, "");
+    if (options.lenient) requestOptions.rejectUnauthorized = false;
+  }
+  return await new Promise((resolve, reject) => {
+    let settled = false;
+    const request = (secure ? https3.request : http3.request)(requestOptions, (response) => {
+      if (settled) {
+        response.destroy();
+        return;
+      }
+      settled = true;
+      clearTimeout(deadline);
+      const location = typeof response.headers.location === "string" ? response.headers.location : null;
+      resolve({ status: response.statusCode ?? 0, location });
+      response.destroy();
+      request.destroy();
+    });
+    const deadline = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      request.destroy();
+      reject(new Error(`no response within ${Math.round(timeoutMs / 1e3)}s`));
+    }, timeoutMs);
+    request.on("error", (err) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      reject(err);
+    });
+    request.end();
+  });
+}
+async function probeSiteReachability(url, options = {}) {
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS5;
+  const maxRedirects = options.maxRedirects ?? DEFAULT_SITE_MAX_REDIRECTS;
+  const retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+  const transport = options.transport ?? ((target, ms, opts) => requestPinnedStatus(target, ms, opts));
+  const resolveAddresses = options.resolveAddresses ?? ((hostname) => lookupSiteAddresses(hostname));
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const started = Date.now();
+  const approveHop = async (hopUrl) => {
+    let hostname;
+    try {
+      hostname = new URL(hopUrl).hostname.replace(/^\[|\]$/g, "");
+    } catch {
+      return { kind: "refused", reason: `${hopUrl} is not a valid URL` };
+    }
+    const lookup = await resolveAddresses(hostname);
+    if (lookup.kind !== "addresses") return lookup;
+    const targets = [];
+    let refusal = "";
+    for (const address of lookup.addresses.slice(0, MAX_ADDRESSES_PER_HOP)) {
+      const approved = await resolveMeasurementSitemapTarget(hopUrl, { resolveAddresses: async () => [address] });
+      if (approved.ok) targets.push(approved.target);
+      else if (!refusal) refusal = approved.message;
+    }
+    if (targets.length === 0) return { kind: "refused", reason: refusal || `${hostname} has no address this instance may dial` };
+    return { kind: "targets", targets };
+  };
+  const attempt = async () => {
+    let current = url;
+    for (let hop = 0; ; hop += 1) {
+      const approved = await approveHop(current);
+      if (approved.kind === "no-such-host") return { kind: "down", finalUrl: current, httpStatus: null, reason: approved.reason };
+      if (approved.kind === "resolver-error") return { kind: "unavailable", reason: approved.reason };
+      if (approved.kind === "refused") return { kind: "unreachable", finalUrl: current, reason: approved.reason };
+      let response = null;
+      let lastError = "";
+      for (const target of approved.targets) {
+        try {
+          response = await transport(target, timeoutMs);
+          break;
+        } catch (err) {
+          lastError = describeError(err);
+          if (LENIENT_RETRY_CODES.has(errorCode(err))) {
+            try {
+              const lenient = await transport(target, timeoutMs, { lenient: true });
+              response = { ...lenient, lenient: `${errorCode(err)} (accepted leniently)` };
+              break;
+            } catch (retryErr) {
+              lastError = describeError(retryErr);
+            }
+          }
+        }
+      }
+      if (!response) return { kind: "down", finalUrl: current, httpStatus: null, reason: lastError || "no address answered" };
+      if (REDIRECT_STATUSES.has(response.status) && response.location) {
+        if (hop >= maxRedirects) {
+          return { kind: "down", finalUrl: current, httpStatus: response.status, reason: `more than ${maxRedirects} redirects` };
+        }
+        try {
+          current = new URL(response.location, current).toString();
+        } catch {
+          return { kind: "down", finalUrl: current, httpStatus: response.status, reason: "redirect with an invalid Location header" };
+        }
+        continue;
+      }
+      if (response.status >= 500 || response.status === 0) {
+        return { kind: "down", finalUrl: current, httpStatus: response.status, reason: `HTTP ${response.status}` };
+      }
+      return { kind: "up", finalUrl: current, httpStatus: response.status, lenient: response.lenient };
+    }
+  };
+  let attempts = 1;
+  let outcome = await attempt();
+  if (outcome.kind === "down" || outcome.kind === "unreachable") {
+    await sleep(retryDelayMs);
+    attempts = 2;
+    outcome = await attempt();
+  }
+  const durationMs = Date.now() - started;
+  if (outcome.kind === "unavailable") return { state: "unavailable", url, reason: outcome.reason };
+  if (outcome.kind === "up") {
+    return { state: "up", url, finalUrl: outcome.finalUrl, httpStatus: outcome.httpStatus, attempts, durationMs, ...outcome.lenient ? { lenient: outcome.lenient } : {} };
+  }
+  if (outcome.kind === "unreachable") return { state: "unreachable", url, finalUrl: outcome.finalUrl, reason: outcome.reason, attempts, durationMs };
+  return { state: "down", url, finalUrl: outcome.finalUrl, httpStatus: outcome.httpStatus, reason: outcome.reason, attempts, durationMs };
+}
+
+// ../api-routes/src/doctor/checks/site-reachability.ts
+var SITE_REACHABILITY_CHECK_ID = "site.reachability";
+function probeHostFromDomain(value) {
+  const trimmed = (value ?? "").trim();
+  if (!trimmed) return null;
+  let hostname;
+  try {
+    hostname = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`).hostname;
+  } catch {
+    return null;
+  }
+  hostname = hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+  if (!hostname || !hostname.includes(".") || hostname.endsWith(".localhost")) return null;
+  return hostname;
+}
+var skipped2 = (code, summary2) => ({ status: CheckStatuses.skipped, code, summary: summary2, remediation: null });
+var siteReachabilityCheck = {
+  id: SITE_REACHABILITY_CHECK_ID,
+  category: CheckCategories.integrations,
+  scope: CheckScopes.project,
+  title: "Website reachable",
+  // Reaches the network, and one bad answer is not an outage: the liveness loop
+  // names it explicitly and applies the two-pass debounce. An unfiltered
+  // `canonry doctor --project` must not exit 1 on a single dropped packet.
+  optIn: true,
+  run: async (ctx) => {
+    if (!ctx.project) return skipped2("site.reachability.no-project", "Project context required.");
+    const host = probeHostFromDomain(ctx.project.canonicalDomain);
+    if (!host) {
+      return skipped2("site.reachability.no-domain", `Project domain "${(ctx.project.canonicalDomain ?? "").trim()}" is not a probeable hostname.`);
+    }
+    const url = `https://${host}/`;
+    const probe = ctx.probeSiteReachability ?? probeSiteReachability;
+    const result = await probe(url);
+    if (result.state === "unavailable") {
+      return skipped2("site.reachability.probe-unavailable", `Could not probe ${url} from this host: ${result.reason}.`);
+    }
+    if (result.state === "up") {
+      return {
+        status: CheckStatuses.ok,
+        code: "site.reachability.up",
+        summary: `${url} answered HTTP ${result.httpStatus} in ${result.durationMs} ms.`,
+        remediation: null,
+        details: {
+          url,
+          finalUrl: result.finalUrl,
+          httpStatus: result.httpStatus,
+          attempts: result.attempts,
+          durationMs: result.durationMs,
+          ...result.lenient ? { tlsOrParserWarning: result.lenient } : {}
+        }
+      };
+    }
+    if (result.state === "unreachable") {
+      return {
+        status: CheckStatuses.fail,
+        code: "site.reachability.refused-address",
+        summary: `${url} resolves only to addresses that cannot serve visitors: ${result.reason}.`,
+        remediation: "Check the domain registration and its DNS records. A suspended or parked domain resolves this way.",
+        details: { url, finalUrl: result.finalUrl, reason: result.reason, attempts: result.attempts, durationMs: result.durationMs }
+      };
+    }
+    return {
+      status: CheckStatuses.fail,
+      code: "site.reachability.down",
+      summary: `${url} is not responding: ${result.reason}.`,
+      remediation: "Open the site in a browser and check with the host. Canonry keeps checking and sends health.recovered when it answers again.",
+      details: { url, finalUrl: result.finalUrl, httpStatus: result.httpStatus, reason: result.reason, attempts: result.attempts, durationMs: result.durationMs }
+    };
+  }
+};
+var SITE_REACHABILITY_CHECKS = [siteReachabilityCheck];
+
 // ../api-routes/src/doctor/checks/gbp-auth.ts
-import { and as and51, eq as eq59 } from "drizzle-orm";
-var RECENT_SYNC_WARN_DAYS2 = 7;
+import { and as and52, eq as eq60 } from "drizzle-orm";
+var RECENT_SYNC_WARN_DAYS2 = 4;
 var RECENT_SYNC_FAIL_DAYS2 = 30;
 function skippedNoProject3() {
   return {
@@ -79706,7 +80168,7 @@ var recentSyncCheck = {
   title: "GBP recent sync",
   run: (ctx) => {
     if (!ctx.project) return skippedNoProject3();
-    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and51(eq59(gbpLocations.projectId, ctx.project.id), eq59(gbpLocations.selected, true))).all();
+    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and52(eq60(gbpLocations.projectId, ctx.project.id), eq60(gbpLocations.selected, true))).all();
     if (selected.length === 0) {
       return {
         status: CheckStatuses.skipped,
@@ -79766,7 +80228,7 @@ var GBP_AUTH_CHECK_BY_ID = Object.fromEntries(
 );
 
 // ../api-routes/src/doctor/checks/places.ts
-import { eq as eq60 } from "drizzle-orm";
+import { eq as eq61 } from "drizzle-orm";
 var apiKeyCheck = {
   id: "gbp.places.api-key",
   category: CheckCategories.auth,
@@ -79811,7 +80273,7 @@ var apiKeyCheck = {
         details: { tier: cfg.tier }
       };
     }
-    const rows = ctx.db.select({ placeId: gbpLocations.placeId, selected: gbpLocations.selected }).from(gbpLocations).where(eq60(gbpLocations.projectId, ctx.project.id)).all();
+    const rows = ctx.db.select({ placeId: gbpLocations.placeId, selected: gbpLocations.selected }).from(gbpLocations).where(eq61(gbpLocations.projectId, ctx.project.id)).all();
     const selected = rows.filter((r) => r.selected);
     const locationsWithPlaceId = selected.filter((r) => Boolean(r.placeId)).length;
     const details = {
@@ -80326,7 +80788,7 @@ var RUNTIME_STATE_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/traffic-source.ts
-import { and as and52, eq as eq61, gte as gte15, inArray as inArray22, ne as ne10, sql as sql24 } from "drizzle-orm";
+import { and as and53, eq as eq62, gte as gte15, inArray as inArray23, ne as ne10, sql as sql24 } from "drizzle-orm";
 var RECENT_DATA_WARN_DAYS = 7;
 var RECENT_DATA_FAIL_DAYS = 30;
 function isCloudflareDirectPush(source) {
@@ -80365,8 +80827,8 @@ function skippedNoProject5() {
 function loadProbes(ctx) {
   if (!ctx.project) return [];
   const rows = ctx.db.select().from(trafficSources).where(
-    and52(
-      eq61(trafficSources.projectId, ctx.project.id),
+    and53(
+      eq62(trafficSources.projectId, ctx.project.id),
       ne10(trafficSources.status, TrafficSourceStatuses.archived)
     )
   ).all();
@@ -80472,27 +80934,27 @@ var recentDataCheck = {
     const failCutoff = new Date(now.getTime() - RECENT_DATA_FAIL_DAYS * 24 * 60 * 6e4).toISOString();
     const recentCrawlers = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and52(
-          eq61(crawlerEventsHourly.projectId, ctx.project.id),
-          inArray22(crawlerEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(crawlerEventsHourly.projectId, ctx.project.id),
+          inArray23(crawlerEventsHourly.sourceId, activeSourceIds),
           gte15(crawlerEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
     );
     const recentReferrals = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and52(
-          eq61(aiReferralEventsHourly.projectId, ctx.project.id),
-          inArray22(aiReferralEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(aiReferralEventsHourly.projectId, ctx.project.id),
+          inArray23(aiReferralEventsHourly.sourceId, activeSourceIds),
           gte15(aiReferralEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
     );
     const recentUserFetches = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
-        and52(
-          eq61(aiUserFetchEventsHourly.projectId, ctx.project.id),
-          inArray22(aiUserFetchEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(aiUserFetchEventsHourly.projectId, ctx.project.id),
+          inArray23(aiUserFetchEventsHourly.sourceId, activeSourceIds),
           gte15(aiUserFetchEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
@@ -80516,27 +80978,27 @@ var recentDataCheck = {
     }
     const olderCrawlers = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and52(
-          eq61(crawlerEventsHourly.projectId, ctx.project.id),
-          inArray22(crawlerEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(crawlerEventsHourly.projectId, ctx.project.id),
+          inArray23(crawlerEventsHourly.sourceId, activeSourceIds),
           gte15(crawlerEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
     );
     const olderReferrals = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and52(
-          eq61(aiReferralEventsHourly.projectId, ctx.project.id),
-          inArray22(aiReferralEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(aiReferralEventsHourly.projectId, ctx.project.id),
+          inArray23(aiReferralEventsHourly.sourceId, activeSourceIds),
           gte15(aiReferralEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
     );
     const olderUserFetches = Number(
       ctx.db.select({ total: sql24`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
-        and52(
-          eq61(aiUserFetchEventsHourly.projectId, ctx.project.id),
-          inArray22(aiUserFetchEventsHourly.sourceId, activeSourceIds),
+        and53(
+          eq62(aiUserFetchEventsHourly.projectId, ctx.project.id),
+          inArray23(aiUserFetchEventsHourly.sourceId, activeSourceIds),
           gte15(aiUserFetchEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
@@ -80601,7 +81063,7 @@ async function runValidator(source, validator, fallbackId, fallbackLabel) {
 function summarizePerSourceResults(fallbackId, fallbackLabel, results) {
   const failed = results.filter((r) => r.output.status === CheckStatuses.fail);
   const warned = results.filter((r) => r.output.status === CheckStatuses.warn);
-  const skipped = results.filter((r) => r.output.status === CheckStatuses.skipped);
+  const skipped3 = results.filter((r) => r.output.status === CheckStatuses.skipped);
   const ok = results.filter((r) => r.output.status === CheckStatuses.ok);
   const detail = {
     sources: results.map((r) => ({
@@ -80635,7 +81097,7 @@ function summarizePerSourceResults(fallbackId, fallbackLabel, results) {
     return {
       status: CheckStatuses.ok,
       code: `traffic.${fallbackId}.ok`,
-      summary: `${ok.length} source(s) passed ${fallbackLabel} validation${skipped.length > 0 ? ` (${skipped.length} skipped)` : ""}.`,
+      summary: `${ok.length} source(s) passed ${fallbackLabel} validation${skipped3.length > 0 ? ` (${skipped3.length} skipped)` : ""}.`,
       details: detail
     };
   }
@@ -80643,7 +81105,7 @@ function summarizePerSourceResults(fallbackId, fallbackLabel, results) {
     status: CheckStatuses.skipped,
     code: `traffic.${fallbackId}.all-skipped`,
     summary: `No source-type validator was available for any of the ${results.length} connected source(s).`,
-    remediation: skipped.find((result) => result.output.remediation)?.output.remediation,
+    remediation: skipped3.find((result) => result.output.remediation)?.output.remediation,
     details: detail
   };
 }
@@ -81069,7 +81531,7 @@ var GTM_REQUIRED_OAUTH_SCOPES = [
 ];
 var FRESH_SNAPSHOT_WARN_DAYS = 7;
 var FRESH_SNAPSHOT_FAIL_DAYS = 30;
-var DAY_MS2 = 24 * 60 * 60 * 1e3;
+var DAY_MS3 = 24 * 60 * 60 * 1e3;
 function unavailableStatus() {
   return {
     status: CheckStatuses.skipped,
@@ -81156,7 +81618,7 @@ function snapshotOutput(provider, latestSnapshotAt, now) {
       details: { latestSnapshotAt }
     };
   }
-  const ageDays = (now.getTime() - snapshotMs) / DAY_MS2;
+  const ageDays = (now.getTime() - snapshotMs) / DAY_MS3;
   const details = { latestSnapshotAt, ageDays: Math.max(0, Math.round(ageDays)) };
   if (ageDays < 0) {
     return {
@@ -81377,13 +81839,16 @@ var ALL_CHECKS = [
   ...BING_AUTH_CHECKS,
   ...WORDPRESS_PUBLISH_CHECKS,
   ...GA_AUTH_CHECKS,
+  ...DATA_FRESHNESS_CHECKS,
   ...ADS_CHECKS,
   ...GOOGLE_MARKETING_DOCTOR_CHECKS,
   ...PROVIDERS_CHECKS,
   ...TRAFFIC_SOURCE_CHECKS,
   ...BACKLINKS_CHECKS,
   ...CONTENT_CHECKS,
-  ...AGENT_CHECKS
+  ...AGENT_CHECKS,
+  // Network probe last, so a slow or unreachable site never delays the local checks.
+  ...SITE_REACHABILITY_CHECKS
 ];
 
 // ../api-routes/src/doctor/runner.ts
@@ -81405,6 +81870,7 @@ async function runChecks(ctx, checks, options = {}) {
   const projectName = ctx.project?.name ?? null;
   const selected = checks.filter((check2) => {
     if (check2.scope !== targetScope) return false;
+    if (check2.optIn && filters.length === 0) return false;
     return matchesCheckId(check2.id, filters);
   });
   const results = [];
@@ -81515,7 +81981,7 @@ async function doctorRoutes(app, opts) {
 
 // ../api-routes/src/discovery/routes.ts
 import crypto46 from "crypto";
-import { and as and53, desc as desc26, eq as eq62, gte as gte16, inArray as inArray23, isNull as isNull10, or as or13 } from "drizzle-orm";
+import { and as and54, desc as desc27, eq as eq63, gte as gte16, inArray as inArray24, isNull as isNull10, or as or13 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
   app.post("/projects/:name/discover/run", async (request, reply) => {
@@ -81549,13 +82015,13 @@ async function discoveryRoutes(app, opts) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const ageFloorIso = new Date(Date.now() - MAX_INFLIGHT_DISCOVERY_AGE_MS).toISOString();
     const decision = app.db.transaction((tx) => {
-      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and53(
-        eq62(discoverySessions.projectId, project.id),
-        eq62(discoverySessions.icpDescription, icpDescription),
+      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and54(
+        eq63(discoverySessions.projectId, project.id),
+        eq63(discoverySessions.icpDescription, icpDescription),
         // Buyer is part of session identity: it changes the seed prompt's
         // semantics, so a request with a different (or no) buyer must start
         // its own session, never adopt another buyer's probes.
-        parsed.data.buyerDescription == null ? isNull10(discoverySessions.buyerDescription) : eq62(discoverySessions.buyerDescription, parsed.data.buyerDescription),
+        parsed.data.buyerDescription == null ? isNull10(discoverySessions.buyerDescription) : eq63(discoverySessions.buyerDescription, parsed.data.buyerDescription),
         // Locations are identity too: a different service-area subset seeds
         // and probes a different geo, so it must never reuse another geo's
         // session. resolveLocations is deterministic (project-config order),
@@ -81565,18 +82031,18 @@ async function discoveryRoutes(app, opts) {
         // locations a NULL row's subset is unknowable, so it conservatively
         // never reuses — a one-time, bounded (2h window) non-reuse after
         // upgrade, never a wrong reuse.
-        locations.length === 0 ? or13(isNull10(discoverySessions.locations), eq62(discoverySessions.locations, locations)) : eq62(discoverySessions.locations, locations),
+        locations.length === 0 ? or13(isNull10(discoverySessions.locations), eq63(discoverySessions.locations, locations)) : eq63(discoverySessions.locations, locations),
         // Seed provider set is identity: a different phrasing distribution
         // must never reuse another set's session. Null (= Gemini-only
         // default, including explicit ['gemini']) matches legacy rows.
-        seedProviders == null ? isNull10(discoverySessions.seedProviders) : eq62(discoverySessions.seedProviders, seedProviders),
-        inArray23(discoverySessions.status, [
+        seedProviders == null ? isNull10(discoverySessions.seedProviders) : eq63(discoverySessions.seedProviders, seedProviders),
+        inArray24(discoverySessions.status, [
           DiscoverySessionStatuses.queued,
           DiscoverySessionStatuses.seeding,
           DiscoverySessionStatuses.probing
         ]),
         gte16(discoverySessions.createdAt, ageFloorIso)
-      )).orderBy(desc26(discoverySessions.createdAt)).get();
+      )).orderBy(desc27(discoverySessions.createdAt)).get();
       if (existing && existing.runId) {
         return { reused: true, sessionId: existing.id, runId: existing.runId };
       }
@@ -81645,7 +82111,7 @@ async function discoveryRoutes(app, opts) {
       const project = resolveProject(app.db, request.params.name);
       const parsedLimit = parseInt(request.query.limit ?? "", 10);
       const limit = Number.isNaN(parsedLimit) || parsedLimit <= 0 ? 50 : parsedLimit;
-      const rows = app.db.select().from(discoverySessions).where(eq62(discoverySessions.projectId, project.id)).orderBy(desc26(discoverySessions.createdAt)).limit(limit).all();
+      const rows = app.db.select().from(discoverySessions).where(eq63(discoverySessions.projectId, project.id)).orderBy(desc27(discoverySessions.createdAt)).limit(limit).all();
       return reply.send(rows.map(serializeSession));
     }
   );
@@ -81653,11 +82119,11 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq62(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq63(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
-      const probeRows = app.db.select().from(discoveryProbes).where(eq62(discoveryProbes.sessionId, session.id)).all();
+      const probeRows = app.db.select().from(discoveryProbes).where(eq63(discoveryProbes.sessionId, session.id)).all();
       const detail = {
         ...serializeSession(session),
         probes: probeRows.map(serializeProbe)
@@ -81669,7 +82135,7 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id/harvest",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq62(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq63(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
@@ -81677,7 +82143,7 @@ async function discoveryRoutes(app, opts) {
       const minProbeHits = Number.isNaN(parsedFloor) || parsedFloor < 1 ? 1 : parsedFloor;
       const applyAnchor = request.query.anchor !== "false";
       const provider = session.seedProvider ?? "gemini";
-      const probeRows = app.db.select().from(discoveryProbes).where(eq62(discoveryProbes.sessionId, session.id)).all();
+      const probeRows = app.db.select().from(discoveryProbes).where(eq63(discoveryProbes.sessionId, session.id)).all();
       const extract = opts.harvestSearchQueries;
       const probesWithQueries = probeRows.map((row) => {
         if (!extract || !row.rawResponse) return { searchQueries: [] };
@@ -81688,7 +82154,7 @@ async function discoveryRoutes(app, opts) {
           return { searchQueries: [] };
         }
       });
-      const trackedQueries = app.db.select({ query: queries.query }).from(queries).where(eq62(queries.projectId, project.id)).all().map((r) => r.query);
+      const trackedQueries = app.db.select({ query: queries.query }).from(queries).where(eq63(queries.projectId, project.id)).all().map((r) => r.query);
       const anchorTerms = buildHarvestAnchorTerms(
         [session.icpDescription ?? "", ...trackedQueries],
         effectiveDomains(project)
@@ -81735,12 +82201,12 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id/promote",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq62(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq63(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
-      const probeRows = app.db.select().from(discoveryProbes).where(eq62(discoveryProbes.sessionId, session.id)).all();
-      const existingCompetitors = app.db.select({ domain: competitors.domain }).from(competitors).where(eq62(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase());
+      const probeRows = app.db.select().from(discoveryProbes).where(eq63(discoveryProbes.sessionId, session.id)).all();
+      const existingCompetitors = app.db.select({ domain: competitors.domain }).from(competitors).where(eq63(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase());
       const seenCompetitors = new Set(existingCompetitors);
       const cited = /* @__PURE__ */ new Set();
       const aspirational = /* @__PURE__ */ new Set();
@@ -81769,7 +82235,7 @@ async function discoveryRoutes(app, opts) {
   );
   app.post("/projects/:name/discover/sessions/:id/promote", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const session = app.db.select().from(discoverySessions).where(eq62(discoverySessions.id, request.params.id)).get();
+    const session = app.db.select().from(discoverySessions).where(eq63(discoverySessions.id, request.params.id)).get();
     if (!session || session.projectId !== project.id) {
       throw notFound("Discovery session", request.params.id);
     }
@@ -81792,7 +82258,7 @@ async function discoveryRoutes(app, opts) {
     const bucketSet = new Set(buckets);
     const includeCompetitors = parsed.data.includeCompetitors ?? true;
     const competitorTypes = parsed.data.competitorTypes ?? DEFAULT_DISCOVERY_PROMOTE_COMPETITOR_TYPES;
-    const probeRows = app.db.select().from(discoveryProbes).where(eq62(discoveryProbes.sessionId, session.id)).all();
+    const probeRows = app.db.select().from(discoveryProbes).where(eq63(discoveryProbes.sessionId, session.id)).all();
     const candidateQueries = /* @__PURE__ */ new Set();
     for (const probe of probeRows) {
       if (!probe.bucket) continue;
@@ -81800,7 +82266,7 @@ async function discoveryRoutes(app, opts) {
       if (bucket.success && bucketSet.has(bucket.data)) candidateQueries.add(probe.query);
     }
     const existingQueries = new Set(
-      app.db.select({ query: queries.query }).from(queries).where(eq62(queries.projectId, project.id)).all().map((r) => r.query.toLowerCase())
+      app.db.select({ query: queries.query }).from(queries).where(eq63(queries.projectId, project.id)).all().map((r) => r.query.toLowerCase())
     );
     const promotedQueries = [];
     const skippedQueries = [];
@@ -81816,7 +82282,7 @@ async function discoveryRoutes(app, opts) {
     const skippedCompetitors = [];
     if (includeCompetitors) {
       const existingCompetitors = new Set(
-        app.db.select({ domain: competitors.domain }).from(competitors).where(eq62(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase())
+        app.db.select({ domain: competitors.domain }).from(competitors).where(eq63(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase())
       );
       const competitorMap = parseCompetitorMap(session.competitorMap);
       for (const entry of selectEligibleCompetitors(competitorMap, competitorTypes)) {
@@ -81935,7 +82401,7 @@ function selectEligibleCompetitors(competitorMap, competitorTypes) {
 
 // ../api-routes/src/discovery/orchestrate.ts
 import crypto47 from "crypto";
-import { eq as eq63 } from "drizzle-orm";
+import { eq as eq64 } from "drizzle-orm";
 var DEFAULT_MAX_PROBES = 100;
 var ABSOLUTE_MAX_PROBES = 500;
 function classifyProbeBucket(input) {
@@ -82022,7 +82488,7 @@ async function executeDiscovery(opts) {
     status: DiscoverySessionStatuses.seeding,
     dedupThreshold,
     startedAt
-  }).where(eq63(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq64(discoverySessions.id, opts.sessionId)).run();
   const seedResult = await opts.deps.seed({
     project: opts.project,
     icpDescription: opts.icpDescription,
@@ -82083,7 +82549,7 @@ async function executeDiscovery(opts) {
     dedupBandPairFraction: dedupStats.bandPairFraction,
     dedupPairsTotal: dedupStats.pairsTotal,
     warning
-  }).where(eq63(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq64(discoverySessions.id, opts.sessionId)).run();
   const probeLocation = opts.locations?.[0];
   const probeResults = await mapWithConcurrency(
     probedCanonicals,
@@ -82137,7 +82603,7 @@ async function executeDiscovery(opts) {
     wastedCount: buckets["wasted-surface"],
     competitorMap,
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq63(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq64(discoverySessions.id, opts.sessionId)).run();
   upsertDomainClassifications(opts.db, opts.project.id, opts.sessionId, competitorMap);
   return {
     buckets,
@@ -82177,7 +82643,7 @@ function markSessionFailed(db, sessionId, error) {
     status: DiscoverySessionStatuses.failed,
     error,
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq63(discoverySessions.id, sessionId)).run();
+  }).where(eq64(discoverySessions.id, sessionId)).run();
 }
 function dedupeStrings(input) {
   const seen2 = /* @__PURE__ */ new Set();
@@ -82195,7 +82661,7 @@ function dedupeStrings(input) {
 
 // ../api-routes/src/technical-aeo.ts
 import crypto48 from "crypto";
-import { and as and54, asc as asc11, count as count2, desc as desc27, eq as eq64, inArray as inArray24, isNotNull as isNotNull5, isNull as isNull11, lt as lt10, or as or14, sql as sql25 } from "drizzle-orm";
+import { and as and55, asc as asc11, count as count2, desc as desc28, eq as eq65, inArray as inArray25, isNotNull as isNotNull5, isNull as isNull11, lt as lt10, or as or14, sql as sql25 } from "drizzle-orm";
 import { alias } from "drizzle-orm/sqlite-core";
 var FETCHED_SITE_CRAWL_STATES = /* @__PURE__ */ new Set([
   ...SiteCrawlFetchedStates,
@@ -82408,8 +82874,8 @@ function parseLinkKind(value) {
   return allowed.data;
 }
 function linkKindFilter(linkKind) {
-  if (linkKind === SiteHealthLinkKinds.content) return eq64(siteCrawlEdges.isTemplate, false);
-  if (linkKind === SiteHealthLinkKinds.template) return eq64(siteCrawlEdges.isTemplate, true);
+  if (linkKind === SiteHealthLinkKinds.content) return eq65(siteCrawlEdges.isTemplate, false);
+  if (linkKind === SiteHealthLinkKinds.template) return eq65(siteCrawlEdges.isTemplate, true);
   return void 0;
 }
 var graphSourceNode = alias(siteCrawlGraphNodes, "site_crawl_graph_source_node");
@@ -82514,50 +82980,50 @@ function changedFields(before, after, fields) {
 async function technicalAeoRoutes(app, opts) {
   const resolveCrawl = (projectId, runId) => {
     const filters = [
-      eq64(siteCrawlSnapshots.projectId, projectId),
-      eq64(runs.projectId, projectId),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      inArray24(runs.status, SURFACEABLE_STATUSES),
+      eq65(siteCrawlSnapshots.projectId, projectId),
+      eq65(runs.projectId, projectId),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      inArray25(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
     ];
     if (runId) {
-      filters.push(eq64(siteCrawlSnapshots.runId, runId));
+      filters.push(eq65(siteCrawlSnapshots.runId, runId));
     } else {
-      filters.push(eq64(siteCrawlSnapshots.complete, true), eq64(runs.status, RunStatuses.completed));
+      filters.push(eq65(siteCrawlSnapshots.complete, true), eq65(runs.status, RunStatuses.completed));
     }
-    return app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq64(siteCrawlSnapshots.runId, runs.id)).where(and54(...filters)).orderBy(desc27(siteCrawlSnapshots.createdAt), desc27(siteCrawlSnapshots.runId)).limit(1).get();
+    return app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq65(siteCrawlSnapshots.runId, runs.id)).where(and55(...filters)).orderBy(desc28(siteCrawlSnapshots.createdAt), desc28(siteCrawlSnapshots.runId)).limit(1).get();
   };
   const detailScopeFor = (projectId, snapshot) => snapshot.detailsAvailable && snapshot.attemptId ? { projectId, runId: snapshot.runId, attemptId: snapshot.attemptId } : null;
   const pageInScope = (scope, selector) => {
     if (!selector.nodeKey && !selector.url) return null;
-    return app.db.select().from(siteCrawlPages).where(and54(
-      eq64(siteCrawlPages.projectId, scope.projectId),
-      eq64(siteCrawlPages.runId, scope.runId),
-      eq64(siteCrawlPages.attemptId, scope.attemptId),
-      selector.nodeKey ? eq64(siteCrawlPages.nodeKey, selector.nodeKey) : eq64(siteCrawlPages.url, selector.url)
+    return app.db.select().from(siteCrawlPages).where(and55(
+      eq65(siteCrawlPages.projectId, scope.projectId),
+      eq65(siteCrawlPages.runId, scope.runId),
+      eq65(siteCrawlPages.attemptId, scope.attemptId),
+      selector.nodeKey ? eq65(siteCrawlPages.nodeKey, selector.nodeKey) : eq65(siteCrawlPages.url, selector.url)
     )).orderBy(asc11(siteCrawlPages.nodeKey)).limit(1).get() ?? null;
   };
-  const rootPageInScope = (scope, rootUrl) => pageInScope(scope, { url: rootUrl }) ?? app.db.select().from(siteCrawlPages).where(and54(
-    eq64(siteCrawlPages.projectId, scope.projectId),
-    eq64(siteCrawlPages.runId, scope.runId),
-    eq64(siteCrawlPages.attemptId, scope.attemptId),
-    eq64(siteCrawlPages.depth, 0)
+  const rootPageInScope = (scope, rootUrl) => pageInScope(scope, { url: rootUrl }) ?? app.db.select().from(siteCrawlPages).where(and55(
+    eq65(siteCrawlPages.projectId, scope.projectId),
+    eq65(siteCrawlPages.runId, scope.runId),
+    eq65(siteCrawlPages.attemptId, scope.attemptId),
+    eq65(siteCrawlPages.depth, 0)
   )).orderBy(asc11(siteCrawlPages.nodeKey)).limit(1).get() ?? null;
-  const isSurfaceableAuditRun = (projectId, runId) => Boolean(app.db.select({ id: runs.id }).from(runs).where(and54(
-    eq64(runs.id, runId),
-    eq64(runs.projectId, projectId),
-    eq64(runs.kind, RunKinds["site-audit"]),
-    inArray24(runs.status, SURFACEABLE_STATUSES),
+  const isSurfaceableAuditRun = (projectId, runId) => Boolean(app.db.select({ id: runs.id }).from(runs).where(and55(
+    eq65(runs.id, runId),
+    eq65(runs.projectId, projectId),
+    eq65(runs.kind, RunKinds["site-audit"]),
+    inArray25(runs.status, SURFACEABLE_STATUSES),
     notProbeRun()
   )).limit(1).get());
   const assertKnownAuditRun = (projectId, runId) => {
     if (runId && !isSurfaceableAuditRun(projectId, runId)) throw notFound("Site crawl run", runId);
   };
-  const hasLegacyAudit = (projectId) => Boolean(app.db.select({ runId: siteAuditSnapshots.runId }).from(siteAuditSnapshots).innerJoin(runs, eq64(siteAuditSnapshots.runId, runs.id)).where(and54(
-    eq64(siteAuditSnapshots.projectId, projectId),
-    eq64(runs.projectId, projectId),
-    eq64(runs.kind, RunKinds["site-audit"]),
-    inArray24(runs.status, SURFACEABLE_STATUSES),
+  const hasLegacyAudit = (projectId) => Boolean(app.db.select({ runId: siteAuditSnapshots.runId }).from(siteAuditSnapshots).innerJoin(runs, eq65(siteAuditSnapshots.runId, runs.id)).where(and55(
+    eq65(siteAuditSnapshots.projectId, projectId),
+    eq65(runs.projectId, projectId),
+    eq65(runs.kind, RunKinds["site-audit"]),
+    inArray25(runs.status, SURFACEABLE_STATUSES),
     notProbeRun()
   )).limit(1).get());
   const emptyCrawlSummary = (projectName, legacyAuditAvailable) => ({
@@ -82578,20 +83044,20 @@ async function technicalAeoRoutes(app, opts) {
   app.get("/projects/:name/technical-aeo", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const baseFilters = [
-      eq64(siteAuditSnapshots.projectId, project.id),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      inArray24(runs.status, SURFACEABLE_STATUSES),
+      eq65(siteAuditSnapshots.projectId, project.id),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      inArray25(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
     ];
-    const targetFilters = request.query.runId ? [...baseFilters, eq64(siteAuditSnapshots.runId, request.query.runId)] : baseFilters;
-    const latest = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq64(siteAuditSnapshots.runId, runs.id)).where(and54(...targetFilters)).orderBy(desc27(siteAuditSnapshots.createdAt)).limit(1).get();
+    const targetFilters = request.query.runId ? [...baseFilters, eq65(siteAuditSnapshots.runId, request.query.runId)] : baseFilters;
+    const latest = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq65(siteAuditSnapshots.runId, runs.id)).where(and55(...targetFilters)).orderBy(desc28(siteAuditSnapshots.createdAt)).limit(1).get();
     if (!latest) {
       if (request.query.runId) throw notFound("Site audit run", request.query.runId);
       return emptyScore(project.name);
     }
     const snap = latest.snap;
-    const previous = app.db.select({ snap: siteAuditSnapshots }).from(siteAuditSnapshots).innerJoin(runs, eq64(siteAuditSnapshots.runId, runs.id)).where(and54(...baseFilters, lt10(siteAuditSnapshots.createdAt, snap.createdAt))).orderBy(desc27(siteAuditSnapshots.createdAt)).limit(1).get()?.snap ?? null;
+    const previous = app.db.select({ snap: siteAuditSnapshots }).from(siteAuditSnapshots).innerJoin(runs, eq65(siteAuditSnapshots.runId, runs.id)).where(and55(...baseFilters, lt10(siteAuditSnapshots.createdAt, snap.createdAt))).orderBy(desc28(siteAuditSnapshots.createdAt)).limit(1).get()?.snap ?? null;
     const deltaScore = previous ? snap.aggregateScore - previous.aggregateScore : null;
     const trend = deltaScore == null ? null : deltaScore > 0 ? SiteAuditTrendDirections.up : deltaScore < 0 ? SiteAuditTrendDirections.down : SiteAuditTrendDirections.flat;
     return {
@@ -82618,14 +83084,14 @@ async function technicalAeoRoutes(app, opts) {
   app.get("/projects/:name/technical-aeo/pages", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const targetFilters = [
-      eq64(siteAuditSnapshots.projectId, project.id),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      inArray24(runs.status, SURFACEABLE_STATUSES),
+      eq65(siteAuditSnapshots.projectId, project.id),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      inArray25(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
     ];
-    if (request.query.runId) targetFilters.push(eq64(siteAuditSnapshots.runId, request.query.runId));
-    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq64(siteAuditSnapshots.runId, runs.id)).where(and54(...targetFilters)).orderBy(desc27(siteAuditSnapshots.createdAt)).limit(1).get();
+    if (request.query.runId) targetFilters.push(eq65(siteAuditSnapshots.runId, request.query.runId));
+    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq65(siteAuditSnapshots.runId, runs.id)).where(and55(...targetFilters)).orderBy(desc28(siteAuditSnapshots.createdAt)).limit(1).get();
     if (!latest && request.query.runId) {
       throw notFound("Site audit run", request.query.runId);
     }
@@ -82633,14 +83099,14 @@ async function technicalAeoRoutes(app, opts) {
       return { project: project.name, runId: null, auditedAt: null, total: 0, pages: [] };
     }
     const statusFilter = request.query.status === "success" || request.query.status === "error" ? request.query.status : null;
-    const conds = [eq64(siteAuditPages.projectId, project.id), eq64(siteAuditPages.runId, latest.runId)];
-    if (statusFilter) conds.push(eq64(siteAuditPages.status, statusFilter));
-    const where = and54(...conds);
+    const conds = [eq65(siteAuditPages.projectId, project.id), eq65(siteAuditPages.runId, latest.runId)];
+    if (statusFilter) conds.push(eq65(siteAuditPages.status, statusFilter));
+    const where = and55(...conds);
     const totalRow = app.db.select({ value: count2() }).from(siteAuditPages).where(where).get();
     const total = totalRow?.value ?? 0;
     const limit = parsePositiveInt(request.query.limit, 100, 500);
     const offset = parsePositiveInt(request.query.offset, 0, Number.MAX_SAFE_INTEGER);
-    const orderBy = request.query.sort === "score-desc" ? desc27(siteAuditPages.overallScore) : request.query.sort === "url" ? asc11(siteAuditPages.url) : asc11(siteAuditPages.overallScore);
+    const orderBy = request.query.sort === "score-desc" ? desc28(siteAuditPages.overallScore) : request.query.sort === "url" ? asc11(siteAuditPages.url) : asc11(siteAuditPages.overallScore);
     const rows = app.db.select().from(siteAuditPages).where(where).orderBy(orderBy).limit(limit).offset(offset).all();
     const pages = rows.map((row) => ({
       url: row.url,
@@ -82659,13 +83125,13 @@ async function technicalAeoRoutes(app, opts) {
       auditedAt: siteAuditSnapshots.auditedAt,
       aggregateScore: siteAuditSnapshots.aggregateScore,
       pagesAudited: siteAuditSnapshots.pagesAudited
-    }).from(siteAuditSnapshots).innerJoin(runs, eq64(siteAuditSnapshots.runId, runs.id)).where(and54(
-      eq64(siteAuditSnapshots.projectId, project.id),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      inArray24(runs.status, SURFACEABLE_STATUSES),
+    }).from(siteAuditSnapshots).innerJoin(runs, eq65(siteAuditSnapshots.runId, runs.id)).where(and55(
+      eq65(siteAuditSnapshots.projectId, project.id),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      inArray25(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
-    )).orderBy(desc27(siteAuditSnapshots.createdAt)).limit(limit).all();
+    )).orderBy(desc28(siteAuditSnapshots.createdAt)).limit(limit).all();
     return { project: project.name, points: rows.reverse() };
   });
   app.get("/projects/:name/technical-aeo/crawl", async (request) => {
@@ -82757,10 +83223,10 @@ async function technicalAeoRoutes(app, opts) {
       { projectId: project.id, runId: snapshot.runId, attemptId: snapshot.attemptId },
       snapshot.rootUrl
     )?.nodeKey ?? null;
-    const persistedLayout = app.db.select().from(siteCrawlGraphLayouts).where(and54(
-      eq64(siteCrawlGraphLayouts.projectId, project.id),
-      eq64(siteCrawlGraphLayouts.runId, snapshot.runId),
-      eq64(siteCrawlGraphLayouts.attemptId, snapshot.attemptId)
+    const persistedLayout = app.db.select().from(siteCrawlGraphLayouts).where(and55(
+      eq65(siteCrawlGraphLayouts.projectId, project.id),
+      eq65(siteCrawlGraphLayouts.runId, snapshot.runId),
+      eq65(siteCrawlGraphLayouts.attemptId, snapshot.attemptId)
     )).limit(1).get();
     if (!persistedLayout) {
       return {
@@ -82811,9 +83277,9 @@ async function technicalAeoRoutes(app, opts) {
     const maxNodes = parseBoundedLimit(request.query.maxNodes, SITE_CRAWL_GRAPH_DEFAULT_MAX_NODES, SITE_CRAWL_GRAPH_MAX_NODES);
     const maxEdges = parseBoundedLimit(request.query.maxEdges, SITE_CRAWL_GRAPH_DEFAULT_MAX_EDGES, SITE_CRAWL_GRAPH_MAX_EDGES);
     const graphScope = [
-      eq64(siteCrawlGraphNodes.projectId, project.id),
-      eq64(siteCrawlGraphNodes.runId, snapshot.runId),
-      eq64(siteCrawlGraphNodes.attemptId, snapshot.attemptId)
+      eq65(siteCrawlGraphNodes.projectId, project.id),
+      eq65(siteCrawlGraphNodes.runId, snapshot.runId),
+      eq65(siteCrawlGraphNodes.attemptId, snapshot.attemptId)
     ];
     const nodeRows = app.db.select({
       nodeKey: siteCrawlPages.nodeKey,
@@ -82832,17 +83298,17 @@ async function technicalAeoRoutes(app, opts) {
       linkScoreNormalized: siteCrawlPages.linkScoreNormalized,
       x: siteCrawlGraphNodes.x,
       y: siteCrawlGraphNodes.y
-    }).from(siteCrawlGraphNodes).innerJoin(siteCrawlPages, and54(
-      eq64(siteCrawlPages.projectId, siteCrawlGraphNodes.projectId),
-      eq64(siteCrawlPages.runId, siteCrawlGraphNodes.runId),
-      eq64(siteCrawlPages.attemptId, siteCrawlGraphNodes.attemptId),
-      eq64(siteCrawlPages.nodeKey, siteCrawlGraphNodes.nodeKey)
-    )).where(and54(...graphScope, lt10(siteCrawlGraphNodes.sampleRank, maxNodes))).orderBy(asc11(siteCrawlGraphNodes.sampleRank)).all();
+    }).from(siteCrawlGraphNodes).innerJoin(siteCrawlPages, and55(
+      eq65(siteCrawlPages.projectId, siteCrawlGraphNodes.projectId),
+      eq65(siteCrawlPages.runId, siteCrawlGraphNodes.runId),
+      eq65(siteCrawlPages.attemptId, siteCrawlGraphNodes.attemptId),
+      eq65(siteCrawlPages.nodeKey, siteCrawlGraphNodes.nodeKey)
+    )).where(and55(...graphScope, lt10(siteCrawlGraphNodes.sampleRank, maxNodes))).orderBy(asc11(siteCrawlGraphNodes.sampleRank)).all();
     const nodes = nodeRows.map(({ indexabilityReasons, canonicalNodeKey, ...row }) => ({
       ...row,
       healthState: deriveSiteHealthState({ ...row, indexabilityReasons, canonicalNodeKey })
     }));
-    const graphLinkKindFilter = linkKind === SiteHealthLinkKinds.all ? void 0 : eq64(siteCrawlGraphEdges.isTemplate, linkKind === SiteHealthLinkKinds.template);
+    const graphLinkKindFilter = linkKind === SiteHealthLinkKinds.all ? void 0 : eq65(siteCrawlGraphEdges.isTemplate, linkKind === SiteHealthLinkKinds.template);
     const edges = app.db.select({
       edgeKey: siteCrawlGraphEdges.edgeKey,
       sourceNodeKey: siteCrawlGraphEdges.sourceNodeKey,
@@ -82850,22 +83316,22 @@ async function technicalAeoRoutes(app, opts) {
       followable: siteCrawlGraphEdges.followable,
       occurrences: siteCrawlGraphEdges.occurrences,
       isTemplate: siteCrawlGraphEdges.isTemplate
-    }).from(siteCrawlGraphEdges).innerJoin(graphSourceNode, and54(
-      eq64(graphSourceNode.projectId, siteCrawlGraphEdges.projectId),
-      eq64(graphSourceNode.runId, siteCrawlGraphEdges.runId),
-      eq64(graphSourceNode.attemptId, siteCrawlGraphEdges.attemptId),
-      eq64(graphSourceNode.nodeKey, siteCrawlGraphEdges.sourceNodeKey),
+    }).from(siteCrawlGraphEdges).innerJoin(graphSourceNode, and55(
+      eq65(graphSourceNode.projectId, siteCrawlGraphEdges.projectId),
+      eq65(graphSourceNode.runId, siteCrawlGraphEdges.runId),
+      eq65(graphSourceNode.attemptId, siteCrawlGraphEdges.attemptId),
+      eq65(graphSourceNode.nodeKey, siteCrawlGraphEdges.sourceNodeKey),
       lt10(graphSourceNode.sampleRank, maxNodes)
-    )).innerJoin(graphTargetNode, and54(
-      eq64(graphTargetNode.projectId, siteCrawlGraphEdges.projectId),
-      eq64(graphTargetNode.runId, siteCrawlGraphEdges.runId),
-      eq64(graphTargetNode.attemptId, siteCrawlGraphEdges.attemptId),
-      eq64(graphTargetNode.nodeKey, siteCrawlGraphEdges.targetNodeKey),
+    )).innerJoin(graphTargetNode, and55(
+      eq65(graphTargetNode.projectId, siteCrawlGraphEdges.projectId),
+      eq65(graphTargetNode.runId, siteCrawlGraphEdges.runId),
+      eq65(graphTargetNode.attemptId, siteCrawlGraphEdges.attemptId),
+      eq65(graphTargetNode.nodeKey, siteCrawlGraphEdges.targetNodeKey),
       lt10(graphTargetNode.sampleRank, maxNodes)
-    )).where(and54(
-      eq64(siteCrawlGraphEdges.projectId, project.id),
-      eq64(siteCrawlGraphEdges.runId, snapshot.runId),
-      eq64(siteCrawlGraphEdges.attemptId, snapshot.attemptId),
+    )).where(and55(
+      eq65(siteCrawlGraphEdges.projectId, project.id),
+      eq65(siteCrawlGraphEdges.runId, snapshot.runId),
+      eq65(siteCrawlGraphEdges.attemptId, snapshot.attemptId),
       lt10(siteCrawlGraphEdges.sampleRank, maxEdges),
       graphLinkKindFilter
     )).orderBy(asc11(siteCrawlGraphEdges.sampleRank)).all();
@@ -82959,15 +83425,15 @@ async function technicalAeoRoutes(app, opts) {
     let frontier = [focus.nodeKey];
     let queryTruncated = false;
     for (let distance = 0; distance < hops && frontier.length > 0; distance += 1) {
-      const candidates = app.db.select().from(siteCrawlEdges).where(and54(
-        eq64(siteCrawlEdges.projectId, scope.projectId),
-        eq64(siteCrawlEdges.runId, scope.runId),
-        eq64(siteCrawlEdges.attemptId, scope.attemptId),
-        eq64(siteCrawlEdges.internal, true),
+      const candidates = app.db.select().from(siteCrawlEdges).where(and55(
+        eq65(siteCrawlEdges.projectId, scope.projectId),
+        eq65(siteCrawlEdges.runId, scope.runId),
+        eq65(siteCrawlEdges.attemptId, scope.attemptId),
+        eq65(siteCrawlEdges.internal, true),
         isNotNull5(siteCrawlEdges.targetNodeKey),
         or14(
-          inArray24(siteCrawlEdges.sourceNodeKey, frontier),
-          inArray24(siteCrawlEdges.targetNodeKey, frontier)
+          inArray25(siteCrawlEdges.sourceNodeKey, frontier),
+          inArray25(siteCrawlEdges.targetNodeKey, frontier)
         )
       )).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(maxEdges + maxNodes + 1).all();
       if (candidates.length > maxEdges + maxNodes) queryTruncated = true;
@@ -83000,22 +83466,22 @@ async function technicalAeoRoutes(app, opts) {
       frontier = [...next].sort();
     }
     const nodeKeys = [...distances.keys()];
-    const pageRows = nodeKeys.length === 0 ? [] : app.db.select().from(siteCrawlPages).where(and54(
-      eq64(siteCrawlPages.projectId, scope.projectId),
-      eq64(siteCrawlPages.runId, scope.runId),
-      eq64(siteCrawlPages.attemptId, scope.attemptId),
-      inArray24(siteCrawlPages.nodeKey, nodeKeys)
+    const pageRows = nodeKeys.length === 0 ? [] : app.db.select().from(siteCrawlPages).where(and55(
+      eq65(siteCrawlPages.projectId, scope.projectId),
+      eq65(siteCrawlPages.runId, scope.runId),
+      eq65(siteCrawlPages.attemptId, scope.attemptId),
+      inArray25(siteCrawlPages.nodeKey, nodeKeys)
     )).all();
     const persistedNodeKeys = new Set(pageRows.map((row) => row.nodeKey));
     const outermostNodeKeys = pageRows.filter((row) => distances.get(row.nodeKey) === hops).map((row) => row.nodeKey);
-    const omittedOutermostEdge = outermostNodeKeys.length === 0 ? void 0 : app.db.select({ edgeKey: siteCrawlEdges.edgeKey }).from(siteCrawlEdges).where(and54(
-      eq64(siteCrawlEdges.projectId, scope.projectId),
-      eq64(siteCrawlEdges.runId, scope.runId),
-      eq64(siteCrawlEdges.attemptId, scope.attemptId),
-      eq64(siteCrawlEdges.internal, true),
+    const omittedOutermostEdge = outermostNodeKeys.length === 0 ? void 0 : app.db.select({ edgeKey: siteCrawlEdges.edgeKey }).from(siteCrawlEdges).where(and55(
+      eq65(siteCrawlEdges.projectId, scope.projectId),
+      eq65(siteCrawlEdges.runId, scope.runId),
+      eq65(siteCrawlEdges.attemptId, scope.attemptId),
+      eq65(siteCrawlEdges.internal, true),
       isNotNull5(siteCrawlEdges.targetNodeKey),
-      inArray24(siteCrawlEdges.sourceNodeKey, outermostNodeKeys),
-      inArray24(siteCrawlEdges.targetNodeKey, outermostNodeKeys)
+      inArray25(siteCrawlEdges.sourceNodeKey, outermostNodeKeys),
+      inArray25(siteCrawlEdges.targetNodeKey, outermostNodeKeys)
     )).limit(1).get();
     if (omittedOutermostEdge && !seenEdgeKeys.has(omittedOutermostEdge.edgeKey)) {
       omittedEdgeKeys.add(omittedOutermostEdge.edgeKey);
@@ -83110,23 +83576,23 @@ async function technicalAeoRoutes(app, opts) {
     let found = fromPage.nodeKey === toPage.nodeKey;
     let truncated = false;
     for (let depth = 0; depth < maxDepth && frontier.length > 0 && !found; depth += 1) {
-      const candidates = app.db.select().from(siteCrawlEdges).where(and54(
-        eq64(siteCrawlEdges.projectId, scope.projectId),
-        eq64(siteCrawlEdges.runId, scope.runId),
-        eq64(siteCrawlEdges.attemptId, scope.attemptId),
-        eq64(siteCrawlEdges.internal, true),
-        eq64(siteCrawlEdges.followable, true),
-        eq64(siteCrawlEdges.relation, "anchor"),
+      const candidates = app.db.select().from(siteCrawlEdges).where(and55(
+        eq65(siteCrawlEdges.projectId, scope.projectId),
+        eq65(siteCrawlEdges.runId, scope.runId),
+        eq65(siteCrawlEdges.attemptId, scope.attemptId),
+        eq65(siteCrawlEdges.internal, true),
+        eq65(siteCrawlEdges.followable, true),
+        eq65(siteCrawlEdges.relation, "anchor"),
         isNotNull5(siteCrawlEdges.targetNodeKey),
-        inArray24(siteCrawlEdges.sourceNodeKey, frontier)
+        inArray25(siteCrawlEdges.sourceNodeKey, frontier)
       )).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(SITE_HEALTH_PATH_MAX_VISITED_NODES + 1).all();
       if (candidates.length > SITE_HEALTH_PATH_MAX_VISITED_NODES) truncated = true;
       const candidateTargetKeys = [...new Set(candidates.map((edge) => edge.targetNodeKey).filter((nodeKey) => nodeKey != null))];
-      const persistedTargetKeys = new Set(candidateTargetKeys.length === 0 ? [] : app.db.select({ nodeKey: siteCrawlPages.nodeKey }).from(siteCrawlPages).where(and54(
-        eq64(siteCrawlPages.projectId, scope.projectId),
-        eq64(siteCrawlPages.runId, scope.runId),
-        eq64(siteCrawlPages.attemptId, scope.attemptId),
-        inArray24(siteCrawlPages.nodeKey, candidateTargetKeys)
+      const persistedTargetKeys = new Set(candidateTargetKeys.length === 0 ? [] : app.db.select({ nodeKey: siteCrawlPages.nodeKey }).from(siteCrawlPages).where(and55(
+        eq65(siteCrawlPages.projectId, scope.projectId),
+        eq65(siteCrawlPages.runId, scope.runId),
+        eq65(siteCrawlPages.attemptId, scope.attemptId),
+        inArray25(siteCrawlPages.nodeKey, candidateTargetKeys)
       )).all().map((row) => row.nodeKey));
       const next = /* @__PURE__ */ new Set();
       for (const edge of candidates.slice(0, SITE_HEALTH_PATH_MAX_VISITED_NODES)) {
@@ -83168,11 +83634,11 @@ async function technicalAeoRoutes(app, opts) {
       pathEdges.unshift(step.edge);
       pathKeys.unshift(step.nodeKey);
     }
-    const pathRows = app.db.select().from(siteCrawlPages).where(and54(
-      eq64(siteCrawlPages.projectId, scope.projectId),
-      eq64(siteCrawlPages.runId, scope.runId),
-      eq64(siteCrawlPages.attemptId, scope.attemptId),
-      inArray24(siteCrawlPages.nodeKey, pathKeys)
+    const pathRows = app.db.select().from(siteCrawlPages).where(and55(
+      eq65(siteCrawlPages.projectId, scope.projectId),
+      eq65(siteCrawlPages.runId, scope.runId),
+      eq65(siteCrawlPages.attemptId, scope.attemptId),
+      inArray25(siteCrawlPages.nodeKey, pathKeys)
     )).all();
     const pageByKey = new Map(pathRows.map((row) => [row.nodeKey, row]));
     const pathDetection = templateDetectionOf(snapshot.templateDetection);
@@ -83201,25 +83667,25 @@ async function technicalAeoRoutes(app, opts) {
       throw validationError("change must be all, added, removed, or changed");
     }
     const completeSnapshotFilters = [
-      eq64(siteCrawlSnapshots.projectId, project.id),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      eq64(runs.status, RunStatuses.completed),
-      eq64(siteCrawlSnapshots.complete, true),
+      eq65(siteCrawlSnapshots.projectId, project.id),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      eq65(runs.status, RunStatuses.completed),
+      eq65(siteCrawlSnapshots.complete, true),
       notProbeRun()
     ];
-    const afterTarget = request.query.toRunId ? resolveCrawl(project.id, request.query.toRunId) : app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq64(siteCrawlSnapshots.runId, runs.id)).where(and54(...completeSnapshotFilters)).orderBy(desc27(siteCrawlSnapshots.createdAt), desc27(siteCrawlSnapshots.runId)).limit(1).get();
+    const afterTarget = request.query.toRunId ? resolveCrawl(project.id, request.query.toRunId) : app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq65(siteCrawlSnapshots.runId, runs.id)).where(and55(...completeSnapshotFilters)).orderBy(desc28(siteCrawlSnapshots.createdAt), desc28(siteCrawlSnapshots.runId)).limit(1).get();
     if (request.query.toRunId && !afterTarget) throw notFound("Site crawl run", request.query.toRunId);
-    const beforeTarget = request.query.fromRunId ? resolveCrawl(project.id, request.query.fromRunId) : afterTarget ? app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq64(siteCrawlSnapshots.runId, runs.id)).where(and54(
+    const beforeTarget = request.query.fromRunId ? resolveCrawl(project.id, request.query.fromRunId) : afterTarget ? app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq65(siteCrawlSnapshots.runId, runs.id)).where(and55(
       ...completeSnapshotFilters,
       or14(
         lt10(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
-        and54(
-          eq64(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
+        and55(
+          eq65(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
           lt10(siteCrawlSnapshots.runId, afterTarget.snapshot.runId)
         )
       )
-    )).orderBy(desc27(siteCrawlSnapshots.createdAt), desc27(siteCrawlSnapshots.runId)).limit(1).get() : void 0;
+    )).orderBy(desc28(siteCrawlSnapshots.createdAt), desc28(siteCrawlSnapshots.runId)).limit(1).get() : void 0;
     if (request.query.fromRunId && !beforeTarget) throw notFound("Site crawl run", request.query.fromRunId);
     if (!afterTarget) {
       return { project: project.name, state: "unavailable", reason: "no-crawl", fromRunId: null, toRunId: null };
@@ -83450,18 +83916,18 @@ async function technicalAeoRoutes(app, opts) {
     const visibleKeys = keyRows.slice(0, limit);
     const pageKeys = visibleKeys.filter((row) => row.entity === "page").map((row) => row.key);
     const linkKeys = visibleKeys.filter((row) => row.entity === "link").map((row) => row.key);
-    const pageRowsFor = (scope) => pageKeys.length === 0 ? [] : app.db.select().from(siteCrawlPages).where(and54(
-      eq64(siteCrawlPages.projectId, scope.projectId),
-      eq64(siteCrawlPages.runId, scope.runId),
-      eq64(siteCrawlPages.attemptId, scope.attemptId),
-      inArray24(siteCrawlPages.nodeKey, pageKeys)
+    const pageRowsFor = (scope) => pageKeys.length === 0 ? [] : app.db.select().from(siteCrawlPages).where(and55(
+      eq65(siteCrawlPages.projectId, scope.projectId),
+      eq65(siteCrawlPages.runId, scope.runId),
+      eq65(siteCrawlPages.attemptId, scope.attemptId),
+      inArray25(siteCrawlPages.nodeKey, pageKeys)
     )).all();
-    const edgeRowsFor = (scope) => linkKeys.length === 0 ? [] : app.db.select().from(siteCrawlEdges).where(and54(
-      eq64(siteCrawlEdges.projectId, scope.projectId),
-      eq64(siteCrawlEdges.runId, scope.runId),
-      eq64(siteCrawlEdges.attemptId, scope.attemptId),
-      eq64(siteCrawlEdges.internal, true),
-      inArray24(siteCrawlEdges.edgeKey, linkKeys)
+    const edgeRowsFor = (scope) => linkKeys.length === 0 ? [] : app.db.select().from(siteCrawlEdges).where(and55(
+      eq65(siteCrawlEdges.projectId, scope.projectId),
+      eq65(siteCrawlEdges.runId, scope.runId),
+      eq65(siteCrawlEdges.attemptId, scope.attemptId),
+      eq65(siteCrawlEdges.internal, true),
+      inArray25(siteCrawlEdges.edgeKey, linkKeys)
     )).all();
     const beforePages = new Map(pageRowsFor(beforeScope).map((row) => [row.nodeKey, mapCrawlPage(row)]));
     const afterPages = new Map(pageRowsFor(afterScope).map((row) => [row.nodeKey, mapCrawlPage(row)]));
@@ -83586,30 +84052,30 @@ async function technicalAeoRoutes(app, opts) {
       return { project: project.name, hasCrawlData: true, runId: snapshot.runId, total: 0, nextCursor: null, healthStateFilter: null, pages: [] };
     }
     const filters = [
-      eq64(siteCrawlPages.projectId, project.id),
-      eq64(siteCrawlPages.runId, snapshot.runId),
-      eq64(siteCrawlPages.attemptId, snapshot.attemptId)
+      eq65(siteCrawlPages.projectId, project.id),
+      eq65(siteCrawlPages.runId, snapshot.runId),
+      eq65(siteCrawlPages.attemptId, snapshot.attemptId)
     ];
-    if (request.query.nodeKey) filters.push(eq64(siteCrawlPages.nodeKey, request.query.nodeKey));
+    if (request.query.nodeKey) filters.push(eq65(siteCrawlPages.nodeKey, request.query.nodeKey));
     const inventoryEligible = parseBoolean2(request.query.inventoryEligible);
-    if (inventoryEligible != null) filters.push(eq64(siteCrawlPages.inventoryEligible, inventoryEligible));
-    if (request.query.fetchState) filters.push(eq64(siteCrawlPages.fetchState, request.query.fetchState));
-    if (request.query.indexabilityState) filters.push(eq64(siteCrawlPages.indexabilityState, request.query.indexabilityState));
-    if (request.query.auditState) filters.push(eq64(siteCrawlPages.auditState, request.query.auditState));
+    if (inventoryEligible != null) filters.push(eq65(siteCrawlPages.inventoryEligible, inventoryEligible));
+    if (request.query.fetchState) filters.push(eq65(siteCrawlPages.fetchState, request.query.fetchState));
+    if (request.query.indexabilityState) filters.push(eq65(siteCrawlPages.indexabilityState, request.query.indexabilityState));
+    if (request.query.auditState) filters.push(eq65(siteCrawlPages.auditState, request.query.auditState));
     const healthState = parseSiteHealthState(request.query.healthState);
     const limit = parseBoundedLimit(request.query.limit, 100, 200);
     const offset = decodeCursor(request.query.cursor);
-    const orderBy = request.query.sort === "score-desc" ? [desc27(siteCrawlPages.auditScore), asc11(siteCrawlPages.nodeKey)] : request.query.sort === "score-asc" ? [asc11(siteCrawlPages.auditScore), asc11(siteCrawlPages.nodeKey)] : request.query.sort === "path" ? [asc11(siteCrawlPages.path), asc11(siteCrawlPages.nodeKey)] : [asc11(siteCrawlPages.url), asc11(siteCrawlPages.nodeKey)];
+    const orderBy = request.query.sort === "score-desc" ? [desc28(siteCrawlPages.auditScore), asc11(siteCrawlPages.nodeKey)] : request.query.sort === "score-asc" ? [asc11(siteCrawlPages.auditScore), asc11(siteCrawlPages.nodeKey)] : request.query.sort === "path" ? [asc11(siteCrawlPages.path), asc11(siteCrawlPages.nodeKey)] : [asc11(siteCrawlPages.url), asc11(siteCrawlPages.nodeKey)];
     let healthStateFilter = null;
     if (healthState) {
-      const legacyRow = app.db.select({ id: siteCrawlPages.id }).from(siteCrawlPages).where(and54(
-        eq64(siteCrawlPages.projectId, project.id),
-        eq64(siteCrawlPages.runId, snapshot.runId),
-        eq64(siteCrawlPages.attemptId, snapshot.attemptId),
+      const legacyRow = app.db.select({ id: siteCrawlPages.id }).from(siteCrawlPages).where(and55(
+        eq65(siteCrawlPages.projectId, project.id),
+        eq65(siteCrawlPages.runId, snapshot.runId),
+        eq65(siteCrawlPages.attemptId, snapshot.attemptId),
         isNull11(siteCrawlPages.healthState)
       )).limit(1).get();
       healthStateFilter = legacyRow ? "unavailable-legacy-scan" : "applied";
-      if (healthStateFilter === "applied") filters.push(eq64(siteCrawlPages.healthState, healthState));
+      if (healthStateFilter === "applied") filters.push(eq65(siteCrawlPages.healthState, healthState));
     }
     if (healthStateFilter === "unavailable-legacy-scan") {
       return {
@@ -83622,7 +84088,7 @@ async function technicalAeoRoutes(app, opts) {
         pages: []
       };
     }
-    const where = and54(...filters);
+    const where = and55(...filters);
     const total = app.db.select({ value: count2() }).from(siteCrawlPages).where(where).get()?.value ?? 0;
     const rows = app.db.select().from(siteCrawlPages).where(where).orderBy(...orderBy).limit(limit).offset(offset).all();
     const nextOffset = offset + rows.length;
@@ -83653,10 +84119,10 @@ async function technicalAeoRoutes(app, opts) {
       url: siteCrawlPages.url,
       inventoryEligible: siteCrawlPages.inventoryEligible,
       fetchState: siteCrawlPages.fetchState
-    }).from(siteCrawlPages).where(and54(
-      eq64(siteCrawlPages.projectId, project.id),
-      eq64(siteCrawlPages.runId, snapshot.runId),
-      eq64(siteCrawlPages.attemptId, snapshot.attemptId)
+    }).from(siteCrawlPages).where(and55(
+      eq65(siteCrawlPages.projectId, project.id),
+      eq65(siteCrawlPages.runId, snapshot.runId),
+      eq65(siteCrawlPages.attemptId, snapshot.attemptId)
     )).limit(MAX_STRUCTURE_SOURCE_ROWS + 1).all();
     if (sourceRows.length > MAX_STRUCTURE_SOURCE_ROWS) {
       throw validationError(`Persisted crawl exceeds the ${MAX_STRUCTURE_SOURCE_ROWS}-page structure limit`);
@@ -83735,17 +84201,17 @@ async function technicalAeoRoutes(app, opts) {
       };
     }
     const filters = [
-      eq64(siteCrawlEdges.projectId, project.id),
-      eq64(siteCrawlEdges.runId, snapshot.runId),
-      eq64(siteCrawlEdges.attemptId, snapshot.attemptId),
-      eq64(siteCrawlEdges.internal, true),
+      eq65(siteCrawlEdges.projectId, project.id),
+      eq65(siteCrawlEdges.runId, snapshot.runId),
+      eq65(siteCrawlEdges.attemptId, snapshot.attemptId),
+      eq65(siteCrawlEdges.internal, true),
       linkKindFilter(linkKind)
     ];
-    if (request.query.sourceUrl) filters.push(eq64(siteCrawlEdges.sourceUrl, request.query.sourceUrl));
-    if (request.query.targetUrl) filters.push(eq64(siteCrawlEdges.targetUrl, request.query.targetUrl));
+    if (request.query.sourceUrl) filters.push(eq65(siteCrawlEdges.sourceUrl, request.query.sourceUrl));
+    if (request.query.targetUrl) filters.push(eq65(siteCrawlEdges.targetUrl, request.query.targetUrl));
     const followable = parseBoolean2(request.query.followable);
-    if (followable != null) filters.push(eq64(siteCrawlEdges.followable, followable));
-    const where = and54(...filters);
+    if (followable != null) filters.push(eq65(siteCrawlEdges.followable, followable));
+    const where = and55(...filters);
     const total = app.db.select({ value: count2() }).from(siteCrawlEdges).where(where).get()?.value ?? 0;
     const limit = parseBoundedLimit(request.query.limit, 100, 200);
     const offset = decodeCursor(request.query.cursor);
@@ -83803,17 +84269,17 @@ async function technicalAeoRoutes(app, opts) {
       };
     }
     const scope = [
-      eq64(siteCrawlEdges.projectId, project.id),
-      eq64(siteCrawlEdges.runId, snapshot.runId),
-      eq64(siteCrawlEdges.attemptId, snapshot.attemptId),
-      eq64(siteCrawlEdges.internal, true),
+      eq65(siteCrawlEdges.projectId, project.id),
+      eq65(siteCrawlEdges.runId, snapshot.runId),
+      eq65(siteCrawlEdges.attemptId, snapshot.attemptId),
+      eq65(siteCrawlEdges.internal, true),
       linkKindFilter(linkKind)
     ];
-    const inboundMatch = request.query.nodeKey && request.query.url ? or14(eq64(siteCrawlEdges.targetNodeKey, request.query.nodeKey), eq64(siteCrawlEdges.targetUrl, request.query.url)) : request.query.nodeKey ? eq64(siteCrawlEdges.targetNodeKey, request.query.nodeKey) : eq64(siteCrawlEdges.targetUrl, request.query.url);
-    const outboundMatch = request.query.nodeKey && request.query.url ? or14(eq64(siteCrawlEdges.sourceNodeKey, request.query.nodeKey), eq64(siteCrawlEdges.sourceUrl, request.query.url)) : request.query.nodeKey ? eq64(siteCrawlEdges.sourceNodeKey, request.query.nodeKey) : eq64(siteCrawlEdges.sourceUrl, request.query.url);
+    const inboundMatch = request.query.nodeKey && request.query.url ? or14(eq65(siteCrawlEdges.targetNodeKey, request.query.nodeKey), eq65(siteCrawlEdges.targetUrl, request.query.url)) : request.query.nodeKey ? eq65(siteCrawlEdges.targetNodeKey, request.query.nodeKey) : eq65(siteCrawlEdges.targetUrl, request.query.url);
+    const outboundMatch = request.query.nodeKey && request.query.url ? or14(eq65(siteCrawlEdges.sourceNodeKey, request.query.nodeKey), eq65(siteCrawlEdges.sourceUrl, request.query.url)) : request.query.nodeKey ? eq65(siteCrawlEdges.sourceNodeKey, request.query.nodeKey) : eq65(siteCrawlEdges.sourceUrl, request.query.url);
     const limit = parseBoundedLimit(request.query.limit, 50, 100);
-    const inboundRows = app.db.select().from(siteCrawlEdges).where(and54(...scope, inboundMatch)).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(limit + 1).all();
-    const outboundRows = app.db.select().from(siteCrawlEdges).where(and54(...scope, outboundMatch)).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(limit + 1).all();
+    const inboundRows = app.db.select().from(siteCrawlEdges).where(and55(...scope, inboundMatch)).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(limit + 1).all();
+    const outboundRows = app.db.select().from(siteCrawlEdges).where(and55(...scope, outboundMatch)).orderBy(asc11(siteCrawlEdges.edgeKey)).limit(limit + 1).all();
     return {
       project: project.name,
       hasCrawlData: true,
@@ -83846,11 +84312,11 @@ async function technicalAeoRoutes(app, opts) {
     if (!snapshot.attemptId) {
       return { project: project.name, runId: snapshot.runId, state: "partial", checkDeadLinks: true, checked: snapshot.deadLinksChecked, found: snapshot.deadLinksFound, unverified: snapshot.deadLinksUnverified, total: 0, nextCursor: null, deadLinks: [] };
     }
-    const where = and54(
-      eq64(siteCrawlFindings.projectId, project.id),
-      eq64(siteCrawlFindings.runId, snapshot.runId),
-      eq64(siteCrawlFindings.attemptId, snapshot.attemptId),
-      eq64(siteCrawlFindings.findingType, "dead-link"),
+    const where = and55(
+      eq65(siteCrawlFindings.projectId, project.id),
+      eq65(siteCrawlFindings.runId, snapshot.runId),
+      eq65(siteCrawlFindings.attemptId, snapshot.attemptId),
+      eq65(siteCrawlFindings.findingType, "dead-link"),
       // Belt and braces on the client-facing surface: a row without a status
       // code is not evidence of a broken link, and this response is where such
       // a row would be read as one. Migration 140 removed every stored row that
@@ -83899,19 +84365,19 @@ async function technicalAeoRoutes(app, opts) {
       createdAt: runs.createdAt,
       startedAt: runs.startedAt,
       finishedAt: runs.finishedAt
-    }).from(runs).where(and54(
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
+    }).from(runs).where(and55(
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
       notProbeRun()
-    )).orderBy(desc27(runs.createdAt), desc27(runs.id)).limit(limit).all();
+    )).orderBy(desc28(runs.createdAt), desc28(runs.id)).limit(limit).all();
     const runIds = rows.map((row) => row.runId);
-    const crawlRunIds = new Set(runIds.length === 0 ? [] : app.db.select({ runId: siteCrawlSnapshots.runId }).from(siteCrawlSnapshots).innerJoin(runs, eq64(siteCrawlSnapshots.runId, runs.id)).where(and54(
-      eq64(siteCrawlSnapshots.projectId, project.id),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
-      inArray24(runs.status, SURFACEABLE_STATUSES),
+    const crawlRunIds = new Set(runIds.length === 0 ? [] : app.db.select({ runId: siteCrawlSnapshots.runId }).from(siteCrawlSnapshots).innerJoin(runs, eq65(siteCrawlSnapshots.runId, runs.id)).where(and55(
+      eq65(siteCrawlSnapshots.projectId, project.id),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
+      inArray25(runs.status, SURFACEABLE_STATUSES),
       notProbeRun(),
-      inArray24(siteCrawlSnapshots.runId, runIds)
+      inArray25(siteCrawlSnapshots.runId, runIds)
     )).all().map((row) => row.runId));
     return {
       project: project.name,
@@ -83924,21 +84390,21 @@ async function technicalAeoRoutes(app, opts) {
   });
   app.get("/projects/:name/technical-aeo/runs/:runId/progress", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const run = app.db.select().from(runs).where(and54(
-      eq64(runs.id, request.params.runId),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
+    const run = app.db.select().from(runs).where(and55(
+      eq65(runs.id, request.params.runId),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
       notProbeRun()
     )).get();
     if (!run) throw notFound("Site audit run", request.params.runId);
-    const attempt = app.db.select().from(siteCrawlAttempts).where(and54(
-      eq64(siteCrawlAttempts.projectId, project.id),
-      eq64(siteCrawlAttempts.runId, run.id)
-    )).orderBy(desc27(siteCrawlAttempts.attemptNumber), desc27(siteCrawlAttempts.updatedAt)).limit(1).get();
-    const persistedLayout = attempt ? app.db.select().from(siteCrawlGraphLayouts).where(and54(
-      eq64(siteCrawlGraphLayouts.projectId, project.id),
-      eq64(siteCrawlGraphLayouts.runId, run.id),
-      eq64(siteCrawlGraphLayouts.attemptId, attempt.id)
+    const attempt = app.db.select().from(siteCrawlAttempts).where(and55(
+      eq65(siteCrawlAttempts.projectId, project.id),
+      eq65(siteCrawlAttempts.runId, run.id)
+    )).orderBy(desc28(siteCrawlAttempts.attemptNumber), desc28(siteCrawlAttempts.updatedAt)).limit(1).get();
+    const persistedLayout = attempt ? app.db.select().from(siteCrawlGraphLayouts).where(and55(
+      eq65(siteCrawlGraphLayouts.projectId, project.id),
+      eq65(siteCrawlGraphLayouts.runId, run.id),
+      eq65(siteCrawlGraphLayouts.attemptId, attempt.id)
     )).get() : void 0;
     const layoutState = persistedLayout?.state === "ready" || persistedLayout?.state === "unavailable" ? persistedLayout.state : run.status === RunStatuses.completed || run.status === RunStatuses.partial ? "unavailable" : "pending";
     return {
@@ -83969,19 +84435,19 @@ async function technicalAeoRoutes(app, opts) {
     };
   });
   app.get("/projects/:name/technical-aeo/runs/:runId/page-health-preview", async (request) => app.db.transaction((tx) => {
-    const project = tx.select().from(projects).where(eq64(projects.name, request.params.name)).get();
+    const project = tx.select().from(projects).where(eq65(projects.name, request.params.name)).get();
     if (!project) throw notFound("Project", request.params.name);
-    const run = tx.select().from(runs).where(and54(
-      eq64(runs.id, request.params.runId),
-      eq64(runs.projectId, project.id),
-      eq64(runs.kind, RunKinds["site-audit"]),
+    const run = tx.select().from(runs).where(and55(
+      eq65(runs.id, request.params.runId),
+      eq65(runs.projectId, project.id),
+      eq65(runs.kind, RunKinds["site-audit"]),
       notProbeRun()
     )).get();
     if (!run) throw notFound("Site audit run", request.params.runId);
-    const attempt = tx.select().from(siteCrawlAttempts).where(and54(
-      eq64(siteCrawlAttempts.projectId, project.id),
-      eq64(siteCrawlAttempts.runId, run.id)
-    )).orderBy(desc27(siteCrawlAttempts.attemptNumber), desc27(siteCrawlAttempts.updatedAt)).limit(1).get();
+    const attempt = tx.select().from(siteCrawlAttempts).where(and55(
+      eq65(siteCrawlAttempts.projectId, project.id),
+      eq65(siteCrawlAttempts.runId, run.id)
+    )).orderBy(desc28(siteCrawlAttempts.attemptNumber), desc28(siteCrawlAttempts.updatedAt)).limit(1).get();
     const state = run.status === RunStatuses.queued ? "waiting" : run.status === RunStatuses.running ? "collecting" : "terminal";
     const base = {
       project: project.name,
@@ -83994,11 +84460,11 @@ async function technicalAeoRoutes(app, opts) {
     if (!attempt) {
       return { ...base, pagesAudited: 0, examples: [] };
     }
-    const auditedWhere = and54(
-      eq64(siteCrawlPages.projectId, project.id),
-      eq64(siteCrawlPages.runId, run.id),
-      eq64(siteCrawlPages.attemptId, attempt.id),
-      eq64(siteCrawlPages.auditState, "success")
+    const auditedWhere = and55(
+      eq65(siteCrawlPages.projectId, project.id),
+      eq65(siteCrawlPages.runId, run.id),
+      eq65(siteCrawlPages.attemptId, attempt.id),
+      eq65(siteCrawlPages.auditState, "success")
     );
     const pagesAudited = tx.select({ value: count2() }).from(siteCrawlPages).where(auditedWhere).get()?.value ?? 0;
     if (state !== "collecting") {
@@ -84009,7 +84475,7 @@ async function technicalAeoRoutes(app, opts) {
       url: siteCrawlPages.url,
       auditScore: siteCrawlPages.auditScore,
       auditFields: siteCrawlPages.auditFields
-    }).from(siteCrawlPages).where(and54(
+    }).from(siteCrawlPages).where(and55(
       auditedWhere,
       isNotNull5(siteCrawlPages.auditScore),
       lt10(siteCrawlPages.auditScore, 70)
@@ -84045,13 +84511,13 @@ async function technicalAeoRoutes(app, opts) {
         status: runs.status,
         identityKey: siteCrawlRunRequests.identityKey,
         effectiveOptions: siteCrawlRunRequests.effectiveOptions
-      }).from(runs).leftJoin(siteCrawlRunRequests, and54(
-        eq64(siteCrawlRunRequests.projectId, runs.projectId),
-        eq64(siteCrawlRunRequests.runId, runs.id)
-      )).where(and54(
-        eq64(runs.projectId, project.id),
-        eq64(runs.kind, RunKinds["site-audit"]),
-        inArray24(runs.status, [RunStatuses.queued, RunStatuses.running])
+      }).from(runs).leftJoin(siteCrawlRunRequests, and55(
+        eq65(siteCrawlRunRequests.projectId, runs.projectId),
+        eq65(siteCrawlRunRequests.runId, runs.id)
+      )).where(and55(
+        eq65(runs.projectId, project.id),
+        eq65(runs.kind, RunKinds["site-audit"]),
+        inArray25(runs.status, [RunStatuses.queued, RunStatuses.running])
       )).get();
       if (existing) {
         if (existing.identityKey === identityKey) {
@@ -84105,7 +84571,7 @@ async function technicalAeoRoutes(app, opts) {
 // ../api-routes/src/research.ts
 import crypto49 from "crypto";
 import { z as z5 } from "zod";
-import { and as and55, count as count3, desc as desc28, eq as eq65, gte as gte17, lt as lt11, or as or15, sql as sql26 } from "drizzle-orm";
+import { and as and56, count as count3, desc as desc29, eq as eq66, gte as gte17, lt as lt11, or as or15, sql as sql26 } from "drizzle-orm";
 var sameLocation = (a, b) => a.label === b.label && a.city === b.city && a.region === b.region && a.country === b.country && a.timezone === b.timezone;
 var BATCH_RECEIPT_PREFIX = "__canonry_research_batch__:";
 async function researchRoutes(app, opts) {
@@ -84123,7 +84589,7 @@ async function researchRoutes(app, opts) {
     const input = parsed.data;
     if (input.idempotencyKey?.startsWith(BATCH_RECEIPT_PREFIX)) throw validationError("This idempotency key prefix is reserved for internal research batch receipts.");
     const requestHash2 = directResearchRequestHash(input);
-    const existingReceipt = input.idempotencyKey ? app.db.select().from(researchRuns).where(and55(eq65(researchRuns.projectId, project.id), eq65(researchRuns.idempotencyKey, input.idempotencyKey))).get() : void 0;
+    const existingReceipt = input.idempotencyKey ? app.db.select().from(researchRuns).where(and56(eq66(researchRuns.projectId, project.id), eq66(researchRuns.idempotencyKey, input.idempotencyKey))).get() : void 0;
     if (existingReceipt) {
       assertSameDirectResearchRequest(existingReceipt, input, requestHash2);
       const result2 = getDetail(app, project.id, existingReceipt.id);
@@ -84155,7 +84621,7 @@ async function researchRoutes(app, opts) {
     const initiatedBy = researchPrincipal(request);
     const decision = app.db.transaction((tx) => {
       if (input.idempotencyKey) {
-        const existing = tx.select().from(researchRuns).where(and55(eq65(researchRuns.projectId, project.id), eq65(researchRuns.idempotencyKey, input.idempotencyKey))).get();
+        const existing = tx.select().from(researchRuns).where(and56(eq66(researchRuns.projectId, project.id), eq66(researchRuns.idempotencyKey, input.idempotencyKey))).get();
         if (existing) {
           assertSameDirectResearchRequest(existing, input, requestHash2);
           return { reused: true, id: existing.id, shouldDispatch: existing.status === ResearchRunStatuses.queued };
@@ -84163,8 +84629,8 @@ async function researchRoutes(app, opts) {
       }
       if (initiatedBy?.limited) {
         const { start, end, date } = utcDayBounds(now);
-        const used = tx.select({ value: count3() }).from(researchRuns).where(and55(
-          eq65(researchRuns.projectId, project.id),
+        const used = tx.select({ value: count3() }).from(researchRuns).where(and56(
+          eq66(researchRuns.projectId, project.id),
           gte17(researchRuns.createdAt, start),
           lt11(researchRuns.createdAt, end),
           sql26`(json_extract(${researchRuns.initiatedBy}, '$.role') = ${UserRoles.viewer} OR json_extract(${researchRuns.initiatedBy}, '$.limited') = 1)`
@@ -84195,15 +84661,15 @@ async function researchRoutes(app, opts) {
     if (input.idempotencyKey.startsWith(BATCH_RECEIPT_PREFIX)) throw validationError("This idempotency key prefix is reserved for internal research batch receipts.");
     const requestHash2 = researchBatchRequestHash(input);
     const receiptKeys = input.runs.map((_run, index2) => batchChildReceiptKey(input.idempotencyKey, index2));
-    const firstReceipt = app.db.select().from(researchRuns).where(and55(
-      eq65(researchRuns.projectId, project.id),
-      eq65(researchRuns.idempotencyKey, receiptKeys[0])
+    const firstReceipt = app.db.select().from(researchRuns).where(and56(
+      eq66(researchRuns.projectId, project.id),
+      eq66(researchRuns.idempotencyKey, receiptKeys[0])
     )).get();
     if (firstReceipt) {
       if (firstReceipt.requestHash !== requestHash2) throw alreadyExists("Research batch idempotency key", input.idempotencyKey);
-      const saved = receiptKeys.map((key) => app.db.select().from(researchRuns).where(and55(
-        eq65(researchRuns.projectId, project.id),
-        eq65(researchRuns.idempotencyKey, key)
+      const saved = receiptKeys.map((key) => app.db.select().from(researchRuns).where(and56(
+        eq66(researchRuns.projectId, project.id),
+        eq66(researchRuns.idempotencyKey, key)
       )).get());
       if (saved.some((row) => !row || row.requestHash !== requestHash2)) throw alreadyExists("Research batch idempotency key", input.idempotencyKey);
       const runs3 = saved.map((row) => getDetail(app, project.id, row.id));
@@ -84218,8 +84684,8 @@ async function researchRoutes(app, opts) {
     const decision = app.db.transaction((tx) => {
       if (initiatedBy?.limited) {
         const { start, end, date } = utcDayBounds(now);
-        const used = tx.select({ value: count3() }).from(researchRuns).where(and55(
-          eq65(researchRuns.projectId, project.id),
+        const used = tx.select({ value: count3() }).from(researchRuns).where(and56(
+          eq66(researchRuns.projectId, project.id),
           gte17(researchRuns.createdAt, start),
           lt11(researchRuns.createdAt, end),
           sql26`(json_extract(${researchRuns.initiatedBy}, '$.role') = ${UserRoles.viewer} OR json_extract(${researchRuns.initiatedBy}, '$.limited') = 1)`
@@ -84273,10 +84739,10 @@ async function researchRoutes(app, opts) {
     const requested = Number.parseInt(request.query.limit ?? "", 10);
     const limit = Number.isInteger(requested) && requested > 0 ? Math.min(requested, 100) : 20;
     const cursor = request.query.cursor ? parseResearchCursor(request.query.cursor, project.id) : null;
-    const rows = app.db.select().from(researchRuns).where(and55(
-      eq65(researchRuns.projectId, project.id),
-      cursor ? or15(lt11(researchRuns.createdAt, cursor.createdAt), and55(eq65(researchRuns.createdAt, cursor.createdAt), lt11(researchRuns.id, cursor.id))) : void 0
-    )).orderBy(desc28(researchRuns.createdAt), desc28(researchRuns.id)).limit(limit + 1).all();
+    const rows = app.db.select().from(researchRuns).where(and56(
+      eq66(researchRuns.projectId, project.id),
+      cursor ? or15(lt11(researchRuns.createdAt, cursor.createdAt), and56(eq66(researchRuns.createdAt, cursor.createdAt), lt11(researchRuns.id, cursor.id))) : void 0
+    )).orderBy(desc29(researchRuns.createdAt), desc29(researchRuns.id)).limit(limit + 1).all();
     const runs2 = rows.slice(0, limit).map(serializeRun);
     const last = runs2.at(-1);
     const nextCursor = rows.length > limit && last ? Buffer.from(JSON.stringify({ projectId: project.id, createdAt: last.createdAt, id: last.id })).toString("base64url") : null;
@@ -84402,9 +84868,9 @@ function resolveStoredResearchTemplate(stored, selection, idempotencyKey) {
   return stored;
 }
 function resolveResearchTemplate(app, projectId, selection, scope, location) {
-  const savedTemplate = app.db.select().from(measurementQueryTemplates).where(and55(
-    eq65(measurementQueryTemplates.projectId, projectId),
-    eq65(measurementQueryTemplates.id, selection.templateId)
+  const savedTemplate = app.db.select().from(measurementQueryTemplates).where(and56(
+    eq66(measurementQueryTemplates.projectId, projectId),
+    eq66(measurementQueryTemplates.id, selection.templateId)
   )).get();
   if (!savedTemplate) throw validationError("Unknown or stale research template. Reload the selected template and try again.");
   const templateVersion = savedTemplate.updatedAt;
@@ -84413,7 +84879,7 @@ function resolveResearchTemplate(app, projectId, selection, scope, location) {
   }
   const bindingLocation = selection.bindingLocation === void 0 ? location : selection.bindingLocation;
   if (bindingLocation) {
-    const project = app.db.select({ locations: projects.locations }).from(projects).where(eq65(projects.id, projectId)).get();
+    const project = app.db.select({ locations: projects.locations }).from(projects).where(eq66(projects.id, projectId)).get();
     if (!project.locations.some((item2) => sameLocation(item2, bindingLocation))) throw validationError("Research template binding location must match a configured project location.");
   }
   const { bindings, output } = expandResearchTemplate(savedTemplate, scope, bindingLocation);
@@ -84426,9 +84892,9 @@ function classifyResearchQueries(project, plan, queries2) {
   return queries2.map((query) => classifier?.classify(query) ?? null);
 }
 function getDetail(app, projectId, id) {
-  const row = app.db.select().from(researchRuns).where(and55(eq65(researchRuns.id, id), eq65(researchRuns.projectId, projectId))).get();
+  const row = app.db.select().from(researchRuns).where(and56(eq66(researchRuns.id, id), eq66(researchRuns.projectId, projectId))).get();
   if (!row) throw notFound("Research run", id);
-  const queries2 = app.db.select().from(researchRunQueries).where(eq65(researchRunQueries.researchRunId, id)).orderBy(researchRunQueries.position).all().map(serializeQuery);
+  const queries2 = app.db.select().from(researchRunQueries).where(eq66(researchRunQueries.researchRunId, id)).orderBy(researchRunQueries.position).all().map(serializeQuery);
   return { ...serializeRun(row), queries: queries2 };
 }
 function serializeRun(row) {
@@ -84458,7 +84924,7 @@ function utcDayBounds(now) {
 
 // ../api-routes/src/simple-measurement-definitions.ts
 import crypto50 from "crypto";
-import { and as and56, eq as eq66 } from "drizzle-orm";
+import { and as and57, eq as eq67 } from "drizzle-orm";
 function captureSimpleMeasurementDefinition(db, input) {
   return db.transaction((tx) => {
     const run = tx.select({
@@ -84466,7 +84932,7 @@ function captureSimpleMeasurementDefinition(db, input) {
       trigger: runs.trigger,
       status: runs.status,
       measurementPlanVersionId: runs.measurementPlanVersionId
-    }).from(runs).where(and56(eq66(runs.projectId, input.projectId), eq66(runs.id, input.runId))).get();
+    }).from(runs).where(and57(eq67(runs.projectId, input.projectId), eq67(runs.id, input.runId))).get();
     if (!run) throw notFound("Run", input.runId);
     if (run.kind !== RunKinds["answer-visibility"] || run.trigger === RunTriggers.probe || run.measurementPlanVersionId !== null) {
       return null;
@@ -84476,7 +84942,7 @@ function captureSimpleMeasurementDefinition(db, input) {
     if (definition.queries.some((query) => query.queryClass !== (classifier?.classify(query.queryText) ?? null))) {
       throw validationError("Query classes must match the captured identity and text.");
     }
-    const existing = tx.select().from(simpleMeasurementDefinitions).where(and56(eq66(simpleMeasurementDefinitions.projectId, input.projectId), eq66(simpleMeasurementDefinitions.runId, input.runId))).get();
+    const existing = tx.select().from(simpleMeasurementDefinitions).where(and57(eq67(simpleMeasurementDefinitions.projectId, input.projectId), eq67(simpleMeasurementDefinitions.runId, input.runId))).get();
     if (existing) {
       const frozen = simpleMeasurementDefinitionSchema.parse(existing.definition);
       const replayDefinition = {
@@ -84497,15 +84963,15 @@ function captureSimpleMeasurementDefinition(db, input) {
     if (run.status !== RunStatuses.running) {
       throw validationError("Only a running run can capture a new measurement definition.");
     }
-    if (tx.select({ id: querySnapshots.id }).from(querySnapshots).where(eq66(querySnapshots.runId, input.runId)).limit(1).get()) {
+    if (tx.select({ id: querySnapshots.id }).from(querySnapshots).where(eq67(querySnapshots.runId, input.runId)).limit(1).get()) {
       throw validationError("This run already has stored answers. Its measurement definition cannot be inferred afterward.");
     }
-    const projectQueryIds = new Set(tx.select({ id: queries.id }).from(queries).where(eq66(queries.projectId, input.projectId)).all().map((query) => query.id));
+    const projectQueryIds = new Set(tx.select({ id: queries.id }).from(queries).where(eq67(queries.projectId, input.projectId)).all().map((query) => query.id));
     if (definition.queries.some((query) => !projectQueryIds.has(query.queryId))) {
       throw validationError("Every captured query must belong to the run project.");
     }
     if (definition.competitors !== void 0) {
-      const liveCompetitorDomains = new Set(tx.select({ domain: competitors.domain }).from(competitors).where(eq66(competitors.projectId, input.projectId)).all().map((competitor) => competitor.domain));
+      const liveCompetitorDomains = new Set(tx.select({ domain: competitors.domain }).from(competitors).where(eq67(competitors.projectId, input.projectId)).all().map((competitor) => competitor.domain));
       const capturedDomains = new Set(definition.competitors.map((competitor) => competitor.domain));
       if (liveCompetitorDomains.size !== capturedDomains.size || [...liveCompetitorDomains].some((domain) => !capturedDomains.has(domain))) {
         throw validationError("Captured competitors must exactly match the project competitors dispatched for this run.");
@@ -85449,10 +85915,10 @@ var log = createLogger("IntelligenceService");
 var runChronologyKey = sql27`coalesce(${runs.finishedAt}, ${runs.createdAt})`;
 function analyzableRunPredicates(projectId) {
   return [
-    eq67(runs.projectId, projectId),
+    eq68(runs.projectId, projectId),
     // Only this kind writes query_snapshots.
-    eq67(runs.kind, RunKinds["answer-visibility"]),
-    or16(eq67(runs.status, RunStatuses.completed), eq67(runs.status, RunStatuses.partial)),
+    eq68(runs.kind, RunKinds["answer-visibility"]),
+    or16(eq68(runs.status, RunStatuses.completed), eq68(runs.status, RunStatuses.partial)),
     // Defensive: RunCoordinator already skips probes before analyzeAndPersist
     // is called, but a future call site invoking it directly for a probe must
     // still not pollute the intelligence window.
@@ -85497,16 +85963,16 @@ var IntelligenceService = class {
    * Returns the analysis result for the coordinator to inspect (e.g. for webhook dispatch).
    */
   analyzeAndPersist(runId, projectId) {
-    const currentRunRecord = this.db.select().from(runs).where(and57(eq67(runs.id, runId), ...analyzableRunPredicates(projectId))).get();
+    const currentRunRecord = this.db.select().from(runs).where(and58(eq68(runs.id, runId), ...analyzableRunPredicates(projectId))).get();
     if (!currentRunRecord) {
       log.info("intelligence.skip", { runId, reason: "run not eligible for analysis" });
       return null;
     }
     const currentLocation = currentRunRecord.location ?? null;
     const recentRuns = this.db.select().from(runs).where(
-      and57(
+      and58(
         ...analyzableRunPredicates(projectId),
-        currentLocation === null ? isNull12(runs.location) : eq67(runs.location, currentLocation),
+        currentLocation === null ? isNull12(runs.location) : eq68(runs.location, currentLocation),
         // Never look forward. The window is this run's own past, so
         // re-analyzing a historical run compares it against its true
         // predecessor rather than against sweeps that came after it.
@@ -85514,10 +85980,10 @@ var IntelligenceService = class {
         // MEASUREMENT: only runs that actually wrote snapshots — see above.
         // Index seek on idx_snapshots_run, short-circuited on the first row.
         exists(
-          this.db.select({ one: sql27`1` }).from(querySnapshots).where(eq67(querySnapshots.runId, runs.id))
+          this.db.select({ one: sql27`1` }).from(querySnapshots).where(eq68(querySnapshots.runId, runs.id))
         )
       )
-    ).orderBy(desc29(runs.finishedAt), desc29(runs.createdAt)).limit(HISTORY_WINDOW_RUNS).all();
+    ).orderBy(desc30(runs.finishedAt), desc30(runs.createdAt)).limit(HISTORY_WINDOW_RUNS).all();
     const trackedCompetitors = this.loadTrackedCompetitors(projectId);
     const currentRun = this.buildRunData(
       runId,
@@ -85589,7 +86055,7 @@ var IntelligenceService = class {
    * Returns the persisted insights so the coordinator can count critical/high.
    */
   analyzeAndPersistGbp(runId, projectId) {
-    const runRow = this.db.select({ createdAt: runs.createdAt, startedAt: runs.startedAt, finishedAt: runs.finishedAt }).from(runs).where(eq67(runs.id, runId)).get();
+    const runRow = this.db.select({ createdAt: runs.createdAt, startedAt: runs.startedAt, finishedAt: runs.finishedAt }).from(runs).where(eq68(runs.id, runId)).get();
     if (!runRow) {
       log.info("gbp-intelligence.skip", { runId, reason: "run not found" });
       this.persistGbpInsights(runId, projectId, [], []);
@@ -85597,9 +86063,9 @@ var IntelligenceService = class {
     }
     const windowStart = runRow.startedAt ?? runRow.createdAt;
     const windowEnd = runRow.finishedAt ?? (/* @__PURE__ */ new Date()).toISOString();
-    const selected = this.db.select().from(gbpLocations).where(and57(
-      eq67(gbpLocations.projectId, projectId),
-      eq67(gbpLocations.selected, true),
+    const selected = this.db.select().from(gbpLocations).where(and58(
+      eq68(gbpLocations.projectId, projectId),
+      eq68(gbpLocations.selected, true),
       gte18(gbpLocations.syncedAt, windowStart),
       lte15(gbpLocations.syncedAt, windowEnd)
     )).all();
@@ -85634,12 +86100,12 @@ var IntelligenceService = class {
   }
   /** Build the per-location signal bundle the GBP analyzer consumes. */
   buildGbpLocationSignals(projectId, locationName, displayName, fallbackDate) {
-    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and57(eq67(gbpDailyMetrics.projectId, projectId), eq67(gbpDailyMetrics.locationName, locationName))).all();
-    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and57(eq67(gbpPlaceActions.projectId, projectId), eq67(gbpPlaceActions.locationName, locationName))).all();
-    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and57(eq67(gbpLodgingSnapshots.projectId, projectId), eq67(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc29(gbpLodgingSnapshots.syncedAt)).limit(1).get();
-    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and57(eq67(gbpLocations.projectId, projectId), eq67(gbpLocations.locationName, locationName))).get();
+    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and58(eq68(gbpDailyMetrics.projectId, projectId), eq68(gbpDailyMetrics.locationName, locationName))).all();
+    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and58(eq68(gbpPlaceActions.projectId, projectId), eq68(gbpPlaceActions.locationName, locationName))).all();
+    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and58(eq68(gbpLodgingSnapshots.projectId, projectId), eq68(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc30(gbpLodgingSnapshots.syncedAt)).limit(1).get();
+    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and58(eq68(gbpLocations.projectId, projectId), eq68(gbpLocations.locationName, locationName))).get();
     const descriptionMissing = !(ownerRow?.description ?? "").trim();
-    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and57(eq67(gbpPlaceDetails.projectId, projectId), eq67(gbpPlaceDetails.locationName, locationName))).orderBy(desc29(gbpPlaceDetails.syncedAt)).limit(1).get();
+    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and58(eq68(gbpPlaceDetails.projectId, projectId), eq68(gbpPlaceDetails.locationName, locationName))).orderBy(desc30(gbpPlaceDetails.syncedAt)).limit(1).get();
     const placesAmenities = placeRow ? extractPlaceAmenities(placeRow.attributes) : [];
     const summary2 = buildGbpSummary({
       locationName,
@@ -85675,7 +86141,7 @@ var IntelligenceService = class {
   /** Build the month-over-month keyword series for a location from the
    *  accumulating gbp_keyword_monthly table (latest complete month vs prior). */
   buildGbpKeywordTrend(projectId, locationName) {
-    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and57(eq67(gbpKeywordMonthly.projectId, projectId), eq67(gbpKeywordMonthly.locationName, locationName))).all();
+    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and58(eq68(gbpKeywordMonthly.projectId, projectId), eq68(gbpKeywordMonthly.locationName, locationName))).all();
     if (rows.length === 0) return { recentMonth: null, priorMonth: null, points: [] };
     const months = [...new Set(rows.map((r) => r.month))].sort().reverse();
     const recentMonth = months[0] ?? null;
@@ -85706,7 +86172,7 @@ var IntelligenceService = class {
    */
   persistGbpInsights(runId, projectId, gbpInsights, coveredLocationNames) {
     const covered = new Set(coveredLocationNames);
-    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and57(eq67(insights.projectId, projectId), eq67(insights.provider, GBP_INSIGHT_PROVIDER))).all();
+    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and58(eq68(insights.projectId, projectId), eq68(insights.provider, GBP_INSIGHT_PROVIDER))).all();
     const staleIds = [];
     const dismissedSlots = /* @__PURE__ */ new Set();
     for (const row of existing) {
@@ -85717,7 +86183,7 @@ var IntelligenceService = class {
     }
     this.db.transaction((tx) => {
       for (const id of staleIds) {
-        tx.delete(insights).where(eq67(insights.id, id)).run();
+        tx.delete(insights).where(eq68(insights.id, id)).run();
       }
       for (const insight of gbpInsights) {
         const parsed = parseGbpInsightId(insight.id);
@@ -85803,7 +86269,7 @@ var IntelligenceService = class {
    *     create per run + aggregate). DB is left untouched.
    */
   backfill(projectName, opts, onProgress) {
-    const project = this.db.select().from(projects).where(eq67(projects.name, projectName)).get();
+    const project = this.db.select().from(projects).where(eq68(projects.name, projectName)).get();
     if (!project) {
       throw new Error(`Project "${projectName}" not found`);
     }
@@ -85815,7 +86281,7 @@ var IntelligenceService = class {
       }
       sinceTimestamp = parsed;
     }
-    const allRuns = this.db.select().from(runs).where(and57(...analyzableRunPredicates(project.id))).orderBy(asc12(runs.finishedAt)).all();
+    const allRuns = this.db.select().from(runs).where(and58(...analyzableRunPredicates(project.id))).orderBy(asc12(runs.finishedAt)).all();
     const measuredRunIds = this.runIdsWithSnapshots(allRuns.map((r) => r.id));
     const measuredRuns = allRuns.filter((r) => measuredRunIds.has(r.id));
     let startIdx = 0;
@@ -85839,14 +86305,14 @@ var IntelligenceService = class {
       });
     }
     let processed = 0;
-    let skipped = 0;
+    let skipped3 = 0;
     let totalInsights = 0;
     const isDryRun = opts?.dryRun === true;
     const perRunDelta = [];
     let wouldDeleteTotal = 0;
     const existingByRunId = /* @__PURE__ */ new Map();
     if (isDryRun && targetRuns.length > 0) {
-      const rows = this.db.select({ runId: insights.runId }).from(insights).where(inArray25(insights.runId, targetRuns.map((r) => r.id))).all();
+      const rows = this.db.select({ runId: insights.runId }).from(insights).where(inArray26(insights.runId, targetRuns.map((r) => r.id))).all();
       for (const r of rows) {
         if (r.runId == null) continue;
         existingByRunId.set(r.runId, (existingByRunId.get(r.runId) ?? 0) + 1);
@@ -85871,14 +86337,14 @@ var IntelligenceService = class {
         }
         onProgress?.({ runId: run.id, index: i + 1, total: targetRuns.length, insights: result.insights.length });
       } else {
-        skipped++;
+        skipped3++;
         onProgress?.({ runId: run.id, index: i + 1, total: targetRuns.length, insights: 0 });
       }
     }
     if (isDryRun) {
       return {
         processed,
-        skipped,
+        skipped: skipped3,
         totalInsights,
         dryRun: true,
         delta: {
@@ -85889,10 +86355,10 @@ var IntelligenceService = class {
         }
       };
     }
-    return { processed, skipped, totalInsights };
+    return { processed, skipped: skipped3, totalInsights };
   }
   loadTrackedCompetitors(projectId) {
-    return this.db.select({ domain: competitors.domain }).from(competitors).where(eq67(competitors.projectId, projectId)).all().map((r) => r.domain);
+    return this.db.select({ domain: competitors.domain }).from(competitors).where(eq68(competitors.projectId, projectId)).all().map((r) => r.domain);
   }
   /**
    * Which of `runIds` actually wrote query snapshots. One grouped read, so
@@ -85901,7 +86367,7 @@ var IntelligenceService = class {
    */
   runIdsWithSnapshots(runIds) {
     if (runIds.length === 0) return /* @__PURE__ */ new Set();
-    const rows = this.db.select({ runId: querySnapshots.runId }).from(querySnapshots).where(inArray25(querySnapshots.runId, [...runIds])).groupBy(querySnapshots.runId).all();
+    const rows = this.db.select({ runId: querySnapshots.runId }).from(querySnapshots).where(inArray26(querySnapshots.runId, [...runIds])).groupBy(querySnapshots.runId).all();
     return new Set(rows.map((r) => r.runId));
   }
   /**
@@ -85923,15 +86389,15 @@ var IntelligenceService = class {
   }
   persistResult(result, runId, projectId) {
     const previouslyDismissed = /* @__PURE__ */ new Set();
-    const existingInsights = this.db.select({ query: insights.query, provider: insights.provider, type: insights.type, dismissed: insights.dismissed }).from(insights).where(eq67(insights.runId, runId)).all();
+    const existingInsights = this.db.select({ query: insights.query, provider: insights.provider, type: insights.type, dismissed: insights.dismissed }).from(insights).where(eq68(insights.runId, runId)).all();
     for (const row of existingInsights) {
       if (row.dismissed) {
         previouslyDismissed.add(`${row.query}:${row.provider}:${row.type}`);
       }
     }
     this.db.transaction((tx) => {
-      tx.delete(insights).where(eq67(insights.runId, runId)).run();
-      tx.delete(healthSnapshots).where(eq67(healthSnapshots.runId, runId)).run();
+      tx.delete(insights).where(eq68(insights.runId, runId)).run();
+      tx.delete(healthSnapshots).where(eq68(healthSnapshots.runId, runId)).run();
       const now = (/* @__PURE__ */ new Date()).toISOString();
       for (const insight of result.insights) {
         const wasDismissed = previouslyDismissed.has(`${insight.query}:${insight.provider}:${insight.type}`);
@@ -85978,8 +86444,8 @@ var IntelligenceService = class {
       clicks: gscSearchData.clicks,
       impressions: gscSearchData.impressions,
       position: gscSearchData.position
-    }).from(gscSearchData).where(and57(
-      eq67(gscSearchData.projectId, projectId),
+    }).from(gscSearchData).where(and58(
+      eq68(gscSearchData.projectId, projectId),
       gte18(gscSearchData.date, window.startDate),
       lte15(gscSearchData.date, window.endDate)
     )).all();
@@ -86032,21 +86498,21 @@ var IntelligenceService = class {
       const key = row.query.toLowerCase();
       gscImpressionsByQuery.set(key, (gscImpressionsByQuery.get(key) ?? 0) + row.impressions);
     }
-    const projectRow = this.db.select({ locations: projects.locations }).from(projects).where(eq67(projects.id, projectId)).get();
+    const projectRow = this.db.select({ locations: projects.locations }).from(projects).where(eq68(projects.id, projectId)).get();
     const locationCount = Math.max(
       1,
       (projectRow?.locations ?? []).length
     );
     const ROWS_PER_GROUP_BUDGET = Math.max(2, locationCount);
     const recentRunRows = this.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(
-      and57(
-        eq67(runs.projectId, projectId),
-        eq67(runs.kind, RunKinds["answer-visibility"]),
-        or16(eq67(runs.status, "completed"), eq67(runs.status, "partial")),
+      and58(
+        eq68(runs.projectId, projectId),
+        eq68(runs.kind, RunKinds["answer-visibility"]),
+        or16(eq68(runs.status, "completed"), eq68(runs.status, "partial")),
         // Defensive — see top of file.
         ne11(runs.trigger, RunTriggers.probe)
       )
-    ).orderBy(desc29(runs.createdAt), desc29(runs.id)).limit((RECURRENCE_LOOKBACK_RUNS + 1) * ROWS_PER_GROUP_BUDGET).all();
+    ).orderBy(desc30(runs.createdAt), desc30(runs.id)).limit((RECURRENCE_LOOKBACK_RUNS + 1) * ROWS_PER_GROUP_BUDGET).all();
     const recentGroups = groupRunsByCreatedAt(recentRunRows);
     const recentRunIds = [];
     const recentRunIdToCreatedAt = /* @__PURE__ */ new Map();
@@ -86062,7 +86528,7 @@ var IntelligenceService = class {
     const haveHistory = recentRunIds.length > 0;
     const priorRegressionsByPair = /* @__PURE__ */ new Map();
     if (haveHistory) {
-      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and57(eq67(insights.type, "regression"), inArray25(insights.runId, recentRunIds))).all();
+      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and58(eq68(insights.type, "regression"), inArray26(insights.runId, recentRunIds))).all();
       const regressionGroups = /* @__PURE__ */ new Map();
       for (const row of priorRows) {
         if (!row.runId) continue;
@@ -86091,7 +86557,7 @@ var IntelligenceService = class {
     });
   }
   buildRunData(runId, projectId, completedAt, location = null, trackedCompetitors = []) {
-    const projectDomainRow = this.db.select({ canonicalDomain: projects.canonicalDomain, ownedDomains: projects.ownedDomains }).from(projects).where(eq67(projects.id, projectId)).get();
+    const projectDomainRow = this.db.select({ canonicalDomain: projects.canonicalDomain, ownedDomains: projects.ownedDomains }).from(projects).where(eq68(projects.id, projectId)).get();
     const projectDomains = projectDomainRow ? effectiveDomains({
       canonicalDomain: projectDomainRow.canonicalDomain,
       ownedDomains: projectDomainRow.ownedDomains
@@ -86109,7 +86575,7 @@ var IntelligenceService = class {
       citedDomains: querySnapshots.citedDomains,
       rawResponse: querySnapshots.rawResponse,
       snapshotLocation: querySnapshots.location
-    }).from(querySnapshots).leftJoin(queries, eq67(querySnapshots.queryId, queries.id)).where(eq67(querySnapshots.runId, runId)).all();
+    }).from(querySnapshots).leftJoin(queries, eq68(querySnapshots.queryId, queries.id)).where(eq68(querySnapshots.runId, runId)).all();
     const snapshots = [];
     let orphanCount = 0;
     for (const r of rows) {
@@ -86170,6 +86636,7 @@ export {
   schedules,
   insightNotifyState,
   doctorHealthState,
+  siteLivenessState,
   notifications,
   googleConnections,
   gscSearchData,
@@ -86318,6 +86785,9 @@ export {
   DEFAULT_BOT_LIST,
   generateWorkerScript,
   generateWranglerToml,
+  SITE_REACHABILITY_CHECK_ID,
+  SITE_REACHABILITY_CHECKS,
+  runChecks,
   executeDiscovery,
   markSessionFailed,
   captureSimpleMeasurementDefinition,