@canonry/canonry 4.104.0

package/dist/index.d.ts

@@ -0,0 +1,260 @@
+import { FastifyInstance } from 'fastify';
+import { DatabaseClient } from '@ainyc/canonry-db';
+import { ProviderQuotaPolicy, EmbedConfigEntry } from '@ainyc/canonry-contracts';
+
+type GoogleConnectionType = 'gsc' | 'ga4' | 'gbp';
+interface ProviderConfigEntry {
+    apiKey?: string;
+    baseUrl?: string;
+    model?: string;
+    quota?: ProviderQuotaPolicy;
+    /** Vertex AI GCP project ID (Gemini provider only) */
+    vertexProject?: string;
+    /** Vertex AI region, e.g. "us-central1" (Gemini provider only) */
+    vertexRegion?: string;
+    /** Path to service account JSON for Vertex AI auth (falls back to ADC) */
+    vertexCredentials?: string;
+}
+interface CdpConfigEntry {
+    host?: string;
+    port?: number;
+    quota?: ProviderQuotaPolicy;
+}
+interface GoogleConnectionConfigEntry {
+    domain: string;
+    connectionType: GoogleConnectionType;
+    propertyId?: string | null;
+    sitemapUrl?: string | null;
+    accessToken?: string;
+    refreshToken?: string | null;
+    tokenExpiresAt?: string | null;
+    scopes?: string[];
+    /**
+     * Project ID that first established this connection. Mirrors the
+     * `google_connections.created_by_project_id` DB column — written when the
+     * OAuth callback completes from a known project. Null/undefined for legacy
+     * connections written before the column existed; the API treats those as
+     * unowned (claimable by any project's next connect).
+     */
+    createdByProjectId?: string | null;
+    gbpAccountName?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface GoogleConfigEntry {
+    clientId?: string;
+    clientSecret?: string;
+    connections?: GoogleConnectionConfigEntry[];
+}
+interface BingConnectionConfigEntry {
+    domain: string;
+    apiKey: string;
+    siteUrl?: string | null;
+    /**
+     * Project ID that first established this connection. Mirrors the
+     * `bing_connections.created_by_project_id` DB column.
+     */
+    createdByProjectId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface BingConfigEntry {
+    apiKey?: string;
+    connections?: BingConnectionConfigEntry[];
+}
+interface Ga4ConnectionConfigEntry {
+    projectName: string;
+    propertyId: string;
+    clientEmail: string;
+    privateKey: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface Ga4ConfigEntry {
+    connections?: Ga4ConnectionConfigEntry[];
+}
+type CloudRunAuthMode = 'oauth' | 'service-account';
+interface CloudRunConnectionConfigEntry {
+    projectName: string;
+    gcpProjectId: string;
+    serviceName?: string;
+    location?: string;
+    authMode: CloudRunAuthMode;
+    clientEmail?: string;
+    privateKey?: string;
+    refreshToken?: string;
+    tokenExpiresAt?: string;
+    scopes?: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+interface CloudRunConfigEntry {
+    connections?: CloudRunConnectionConfigEntry[];
+}
+/**
+ * Per-project OpenAI Advertiser API (ChatGPT ads) connection. The "SDK key"
+ * is minted in OpenAI Ads Manager and scoped to one ad account; ad accounts
+ * are not domain-bound, so the connection keys on the project name. The
+ * `ads_connections` DB row holds metadata only — the key lives here.
+ */
+interface OpenAiAdsConnectionConfigEntry {
+    projectName: string;
+    apiKey: string;
+    adAccountId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface OpenAiAdsConfigEntry {
+    connections?: OpenAiAdsConnectionConfigEntry[];
+}
+type WordpressEnv = 'live' | 'staging';
+interface WordpressConnectionConfigEntry {
+    projectName: string;
+    url: string;
+    stagingUrl?: string;
+    username: string;
+    appPassword: string;
+    defaultEnv: WordpressEnv;
+    createdAt: string;
+    updatedAt: string;
+}
+interface WordpressConfigEntry {
+    connections?: WordpressConnectionConfigEntry[];
+}
+/**
+ * Per-project WordPress traffic-logger connection. Separate from `wordpress.connections`,
+ * which is the content-publishing client. Authenticates against the WP traffic plugin's
+ * REST endpoint using a WordPress Application Password.
+ */
+interface WordpressTrafficConnectionConfigEntry {
+    projectName: string;
+    baseUrl: string;
+    username: string;
+    applicationPassword: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface WordpressTrafficConfigEntry {
+    connections?: WordpressTrafficConnectionConfigEntry[];
+}
+type VercelTrafficEnvironment = 'production' | 'preview';
+/**
+ * Per-project Vercel traffic connection. Authenticates against Vercel's
+ * internal `request-logs` endpoint using a Vercel API token. The project id,
+ * team id, and environment are non-secret and also mirrored onto the
+ * `traffic_sources` row; the token lives only here.
+ */
+interface VercelTrafficConnectionConfigEntry {
+    projectName: string;
+    projectId: string;
+    teamId: string;
+    token: string;
+    environment: VercelTrafficEnvironment;
+    createdAt: string;
+    updatedAt: string;
+}
+interface VercelTrafficConfigEntry {
+    connections?: VercelTrafficConnectionConfigEntry[];
+}
+/**
+ * One injected remote MCP server Aero loads read-only tools from (OSS-A).
+ * Generic shape: `{ url, token, label? }`. The transport is bearer-gated MCP
+ * Streamable HTTP (the contract is frozen in `agent/remote-mcp.ts`). The
+ * server is remote, never co-located in the OSS container; per-tenant
+ * isolation is the token's responsibility, not the container boundary.
+ */
+interface ExternalMcpServerConfig {
+    /** Streamable HTTP endpoint of the remote MCP server. */
+    url: string;
+    /** Bearer token sent as `Authorization: Bearer <token>`. */
+    token: string;
+    /** Optional human label used in logs. Defaults to `url`. */
+    label?: string;
+}
+interface AgentConfigEntry {
+    /**
+     * Agent mode. `'disabled'` turns the built-in Aero agent OFF entirely — the
+     * proactive auto-wake on run completion does not fire, the `SessionRegistry`
+     * is not constructed, and the interactive agent routes (`/projects/:name/
+     * agent/*`) plus the `canonry agent ask` CLI (a thin client of those routes)
+     * are not served. Absent (the default) leaves Aero enabled. Resolved, with
+     * the `CANONRY_AGENT_DISABLED` env override, by `resolveAgentEnabled` in
+     * agent-config.ts.
+     */
+    mode?: 'disabled';
+}
+/**
+ * Google Places API config — supplemental rendered-listing data for GBP
+ * lodging locations (#648). The API key authenticates Place Details calls
+ * (`X-Goog-Api-Key`); it is NOT OAuth and is unrelated to `google.clientId`.
+ *   - `tier`: 'atmosphere' (default; amenity booleans for the cross-reference,
+ *     1k free calls/month) | 'pro' (cheaper, accessibility-only) | 'off'.
+ *   - `refreshIntervalDays`: minimum age before a location's Place Details is
+ *     re-fetched during gbp-sync (default 7) — the cost lever, since amenities
+ *     change rarely.
+ */
+interface PlacesConfigEntry {
+    apiKey?: string;
+    tier?: 'atmosphere' | 'pro' | 'off';
+    refreshIntervalDays?: number;
+}
+interface CanonryConfig {
+    apiUrl: string;
+    publicUrl?: string;
+    /** Sub-path prefix when canonry is served behind a reverse proxy (e.g. "/canonry/"). */
+    basePath?: string;
+    database: string;
+    apiKey: string;
+    port?: number;
+    geminiApiKey?: string;
+    geminiModel?: string;
+    geminiQuota?: ProviderQuotaPolicy;
+    providers?: Record<string, ProviderConfigEntry>;
+    cdp?: CdpConfigEntry;
+    google?: GoogleConfigEntry;
+    bing?: BingConfigEntry;
+    ga4?: Ga4ConfigEntry;
+    cloudRun?: CloudRunConfigEntry;
+    wordpress?: WordpressConfigEntry;
+    wordpressTraffic?: WordpressTrafficConfigEntry;
+    vercelTraffic?: VercelTrafficConfigEntry;
+    openaiAds?: OpenAiAdsConfigEntry;
+    dashboardPasswordHash?: string;
+    telemetry?: boolean;
+    anonymousId?: string;
+    lastSeenVersion?: string;
+    updateCheck?: boolean;
+    lastUpdateCheckAt?: string;
+    lastKnownLatestVersion?: string;
+    agent?: AgentConfigEntry;
+    externalMcpServers?: ExternalMcpServerConfig[];
+    places?: PlacesConfigEntry;
+    embed?: EmbedConfigEntry;
+}
+declare function loadConfig(): CanonryConfig;
+
+declare function createServer(opts: {
+    config: CanonryConfig;
+    db: DatabaseClient;
+    open?: boolean;
+    logger?: boolean;
+    /**
+     * The network interface the server will bind to (from `canonry serve`).
+     * Used to gate the unauthenticated first-run dashboard password setup: on a
+     * loopback bind only local processes can reach `/session/setup`, so claiming
+     * the initial password without the API key is safe. On a non-loopback bind
+     * (`0.0.0.0`, a LAN IP) the setup endpoint additionally requires a valid
+     * bearer key so a remote first-visitor cannot mint a full-access session.
+     * Defaults to loopback when unset (programmatic/test callers).
+     */
+    host?: string;
+    /**
+     * Override for the directory the pre-built SPA is served from. Defaults to
+     * the package's bundled `assets/` (resolved from `import.meta.url`). Exposed
+     * so tests can point at a temp dir containing a fixture `index.html` and
+     * assert the injected config + framing header on the served document.
+     */
+    assetsDir?: string;
+}): Promise<FastifyInstance>;
+
+export { type CanonryConfig, createServer, loadConfig };

package/dist/index.js

@@ -0,0 +1,12 @@
+import {
+  createServer
+} from "./chunk-GIKNEXFE.js";
+import {
+  loadConfig
+} from "./chunk-23DCY7DL.js";
+import "./chunk-GNMZTR6Y.js";
+import "./chunk-Q7FFDQU4.js";
+export {
+  createServer,
+  loadConfig
+};

package/dist/intelligence-service-GM3RXE2F.js

@@ -0,0 +1,7 @@
+import {
+  IntelligenceService
+} from "./chunk-GNMZTR6Y.js";
+import "./chunk-Q7FFDQU4.js";
+export {
+  IntelligenceService
+};