@canonry/canonry 4.117.1 → 4.118.0

package/dist/{chunk-V4SW7SVX.js → chunk-CMZIPFNQ.js}

@@ -1,7 +1,12 @@
 import {
+  ADS_WRITE_SCOPE,
   AGENT_PROVIDER_IDS,
   AI_ENGINE_DOMAINS,
   AI_PROVIDER_INFRA_DOMAINS,
+  AdsEntityStatuses,
+  AdsEntityTypes,
+  AdsOperationKinds,
+  AdsOperationStates,
   AiReferralTrafficClasses,
   AppError,
   BacklinkSources,
@@ -38,19 +43,29 @@ import {
   __export,
   absolutizeProjectUrl,
   actionConfidenceLabel,
+  adsAdCreateRequestSchema,
+  adsAdGroupCreateRequestSchema,
+  adsAdGroupUpdateRequestSchema,
+  adsAdUpdateRequestSchema,
+  adsCampaignCreateRequestSchema,
   adsCampaignListResponseSchema,
+  adsCampaignUpdateRequestSchema,
   adsConnectRequestSchema,
   adsConnectionStatusDtoSchema,
   adsCpcMicros,
   adsCtr,
   adsDisconnectResponseSchema,
+  adsImageUploadRequestSchema,
   adsInsightLevelSchema,
   adsInsightsResponseSchema,
+  adsOperationResponseSchema,
+  adsPauseRequestSchema,
   adsSummaryDtoSchema,
   adsSyncResponseSchema,
   agentProvidersResponseDtoSchema,
   aggregateHarvestedQueries,
   aiReferralClassCounts,
+  alreadyExists,
   apiKeyDtoSchema,
   apiKeyListDtoSchema,
   applyHarvestSemanticNovelty,
@@ -173,6 +188,7 @@ import {
   gscSitemapListResponseDtoSchema,
   gscUrlInspectionDtoSchema,
   hasLocationLabel,
+  healthSnapshotDtoSchema,
   hostOf,
   indexingRequestResponseDtoSchema,
   internalError,
@@ -220,11 +236,14 @@ import {
   resolveConfigSpecQueries,
   resolveLocations,
   resolveSnapshotRequestQueries,
+  resultsExportDtoSchema,
   runDetailDtoSchema,
   runDtoSchema,
   runInProgress,
   runNotCancellable,
+  runStatusSchema,
   runTriggerRequestSchema,
+  runTriggerSchema,
   runtimeStateMissing,
   schedulableRunKindSchema,
   scheduleDtoSchema,
@@ -280,10 +299,10 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-IAJ5TQ4S.js";
+} from "./chunk-KEZWLP4O.js";
 
 // src/intelligence-service.ts
-import { eq as eq39, desc as desc18, asc as asc6, and as and30, ne as ne5, or as or6, inArray as inArray15, gte as gte7, lte as lte4 } from "drizzle-orm";
+import { eq as eq40, desc as desc18, asc as asc8, and as and31, ne as ne5, or as or6, inArray as inArray15, gte as gte9, lte as lte5 } from "drizzle-orm";
 
 // ../db/src/client.ts
 import { mkdirSync } from "fs";
@@ -299,6 +318,7 @@ __export(schema_exports, {
   adsCampaigns: () => adsCampaigns,
   adsConnections: () => adsConnections,
   adsInsightsDaily: () => adsInsightsDaily,
+  adsOperations: () => adsOperations,
   agentMemory: () => agentMemory,
   agentSessions: () => agentSessions,
   agentToolEvents: () => agentToolEvents,
@@ -1441,11 +1461,33 @@ var adsConnections = sqliteTable("ads_connections", {
 }, (table) => [
   uniqueIndex("idx_ads_conn_project").on(table.projectId)
 ]);
+var adsOperations = sqliteTable("ads_operations", {
+  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+  operationKey: text("operation_key").notNull(),
+  requestHash: text("request_hash").notNull(),
+  kind: text("kind").notNull(),
+  state: text("state").notNull(),
+  entityType: text("entity_type"),
+  entityId: text("entity_id"),
+  upstreamUpdatedAt: integer("upstream_updated_at"),
+  errorCode: text("error_code"),
+  errorMessage: text("error_message"),
+  createdAt: text("created_at").notNull(),
+  updatedAt: text("updated_at").notNull()
+}, (table) => [
+  uniqueIndex("idx_ads_operations_project_key").on(table.projectId, table.operationKey),
+  index("idx_ads_operations_project_created").on(table.projectId, table.createdAt),
+  index("idx_ads_operations_project_state").on(table.projectId, table.state)
+]);
 var adsCampaigns = sqliteTable("ads_campaigns", {
   id: text("id").primaryKey(),
   projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
   name: text("name").notNull(),
+  description: text("description"),
   status: text("status").notNull(),
+  startTime: integer("start_time"),
+  endTime: integer("end_time"),
   biddingType: text("bidding_type"),
   dailySpendLimitMicros: integer("daily_spend_limit_micros"),
   lifetimeSpendLimitMicros: integer("lifetime_spend_limit_micros"),
@@ -1462,6 +1504,7 @@ var adsAdGroups = sqliteTable("ads_ad_groups", {
   projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
   campaignId: text("campaign_id").notNull().references(() => adsCampaigns.id, { onDelete: "cascade" }),
   name: text("name").notNull(),
+  description: text("description"),
   status: text("status").notNull(),
   billingEventType: text("billing_event_type"),
   maxBidMicros: integer("max_bid_micros"),
@@ -3597,6 +3640,34 @@ var MIGRATION_VERSIONS = [
     run: (tx) => {
       relinkOrphanedSnapshotQueryIds(tx);
     }
+  },
+  {
+    version: 99,
+    name: "ads-operator-lifecycle",
+    statements: [
+      `ALTER TABLE ads_campaigns ADD COLUMN description TEXT`,
+      `ALTER TABLE ads_campaigns ADD COLUMN start_time INTEGER`,
+      `ALTER TABLE ads_campaigns ADD COLUMN end_time INTEGER`,
+      `ALTER TABLE ads_ad_groups ADD COLUMN description TEXT`,
+      `CREATE TABLE IF NOT EXISTS ads_operations (
+        id                    TEXT PRIMARY KEY,
+        project_id            TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+        operation_key         TEXT NOT NULL,
+        request_hash          TEXT NOT NULL,
+        kind                  TEXT NOT NULL,
+        state                 TEXT NOT NULL,
+        entity_type           TEXT,
+        entity_id             TEXT,
+        upstream_updated_at   INTEGER,
+        error_code            TEXT,
+        error_message         TEXT,
+        created_at            TEXT NOT NULL,
+        updated_at            TEXT NOT NULL
+      )`,
+      `CREATE UNIQUE INDEX IF NOT EXISTS idx_ads_operations_project_key ON ads_operations(project_id, operation_key)`,
+      `CREATE INDEX IF NOT EXISTS idx_ads_operations_project_created ON ads_operations(project_id, created_at)`,
+      `CREATE INDEX IF NOT EXISTS idx_ads_operations_project_state ON ads_operations(project_id, state)`
+    ]
   }
 ];
 function rebuildBacklinkTableWithSource(tx, table) {
@@ -5945,6 +6016,14 @@ import fs8 from "fs";
 import crypto2 from "crypto";
 import { eq } from "drizzle-orm";
 var WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+function isAdsWriteOnlyKey(scopes) {
+  const writeGrants = scopes.filter((scope) => scope === "*" || scope === "write" || scope.endsWith(".write"));
+  return writeGrants.length === 1 && writeGrants[0] === ADS_WRITE_SCOPE;
+}
+function isAdsWriteRoute(url) {
+  const rest = projectRouteRest(url);
+  return rest !== null && rest.startsWith("ads/");
+}
 function requireScope(request, scope) {
   const key = request.apiKey;
   if (!key) return;
@@ -6097,6 +6176,9 @@ async function authPlugin(app, opts = {}) {
     if (isReadOnlyKey(scopes) && WRITE_METHODS.has(request.method)) {
       throw forbidden("This API key is read-only and cannot perform write operations.");
     }
+    if (isAdsWriteOnlyKey(scopes) && WRITE_METHODS.has(request.method) && !isAdsWriteRoute(url)) {
+      throw forbidden("This API key can only perform OpenAI Ads write operations.");
+    }
     enforceEmbedProjectTabs(request, opts.embedProjectTabs);
     if (key.projectId) {
       const match = url.match(/\/projects\/([^/?#]+)/);
@@ -7991,7 +8073,7 @@ function normalizeCompetitorList2(domains) {
 }
 
 // ../api-routes/src/history.ts
-import { and as and6, eq as eq10, desc as desc2, inArray as inArray3 } from "drizzle-orm";
+import { and as and6, asc as asc2, desc as desc2, eq as eq10, gte as gte2, inArray as inArray3 } from "drizzle-orm";
 
 // ../api-routes/src/notification-redaction.ts
 var REDACTED_URL = {
@@ -8037,12 +8119,16 @@ function redactNotificationDiff(value) {
 async function historyRoutes(app) {
   app.get("/projects/:name/history", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select().from(auditLog).where(eq10(auditLog.projectId, project.id)).orderBy(desc2(auditLog.createdAt)).all();
+    const filters = [eq10(auditLog.projectId, project.id)];
+    addAuditHistoryFilters(filters, request.query);
+    const rows = app.db.select().from(auditLog).where(and6(...filters)).orderBy(desc2(auditLog.createdAt)).limit(parseBoundedInt(request.query.limit, 100, 500)).offset(parseBoundedInt(request.query.offset, 0, Number.MAX_SAFE_INTEGER)).all();
     return reply.send(rows.map(formatAuditEntry));
   });
   app.get("/history", async (request, reply) => {
     const scopedProjectId = request.apiKey?.projectId;
-    const rows = app.db.select().from(auditLog).where(scopedProjectId ? eq10(auditLog.projectId, scopedProjectId) : void 0).orderBy(desc2(auditLog.createdAt)).all();
+    const filters = scopedProjectId ? [eq10(auditLog.projectId, scopedProjectId)] : [];
+    addAuditHistoryFilters(filters, request.query);
+    const rows = app.db.select().from(auditLog).where(filters.length > 0 ? and6(...filters) : void 0).orderBy(desc2(auditLog.createdAt)).limit(parseBoundedInt(request.query.limit, 100, 500)).offset(parseBoundedInt(request.query.offset, 0, Number.MAX_SAFE_INTEGER)).all();
     return reply.send(rows.map(formatAuditEntry));
   });
   app.get("/projects/:name/snapshots", async (request, reply) => {
@@ -8098,7 +8184,8 @@ async function historyRoutes(app) {
   app.get("/projects/:name/timeline", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const projectQueries = app.db.select().from(queries).where(eq10(queries.projectId, project.id)).all();
-    const projectRuns = app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(runs.createdAt).all();
+    const requestedLimit = parseOptionalPositiveInt(request.query.limit, 100);
+    const projectRuns = requestedLimit == null ? app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(asc2(runs.createdAt)).all() : app.db.select().from(runs).where(and6(eq10(runs.projectId, project.id), notProbeRun())).orderBy(desc2(runs.createdAt)).limit(requestedLimit).all().reverse();
     if (projectRuns.length === 0 || projectQueries.length === 0) {
       return reply.send([]);
     }
@@ -8248,29 +8335,23 @@ async function historyRoutes(app) {
     }).from(querySnapshots).leftJoin(queries, eq10(querySnapshots.queryId, queries.id)).where(eq10(querySnapshots.runId, run2)).all();
     const map1 = /* @__PURE__ */ new Map();
     for (const s of snaps1) {
-      const resolved = {
-        ...s,
-        resolvedAnswerMentioned: resolveSnapshotAnswerMentioned(s, project),
-        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project),
-        resolvedMentionState: resolveSnapshotMentionState(s, project)
-      };
       const existing = map1.get(s.queryId);
-      if (!existing || !existing.resolvedAnswerMentioned && resolved.resolvedAnswerMentioned || existing.resolvedAnswerMentioned === resolved.resolvedAnswerMentioned && resolved.citationState === CitationStates.cited) {
-        map1.set(s.queryId, resolved);
-      }
+      map1.set(s.queryId, {
+        ...s,
+        query: existing?.query ?? s.query,
+        citationState: existing?.citationState === CitationStates.cited || s.citationState === CitationStates.cited ? CitationStates.cited : CitationStates["not-cited"],
+        resolvedAnswerMentioned: (existing?.resolvedAnswerMentioned ?? false) || resolveSnapshotAnswerMentioned(s, project)
+      });
     }
     const map2 = /* @__PURE__ */ new Map();
     for (const s of snaps2) {
-      const resolved = {
-        ...s,
-        resolvedAnswerMentioned: resolveSnapshotAnswerMentioned(s, project),
-        resolvedVisibilityState: resolveSnapshotVisibilityState(s, project),
-        resolvedMentionState: resolveSnapshotMentionState(s, project)
-      };
       const existing = map2.get(s.queryId);
-      if (!existing || !existing.resolvedAnswerMentioned && resolved.resolvedAnswerMentioned || existing.resolvedAnswerMentioned === resolved.resolvedAnswerMentioned && resolved.citationState === CitationStates.cited) {
-        map2.set(s.queryId, resolved);
-      }
+      map2.set(s.queryId, {
+        ...s,
+        query: existing?.query ?? s.query,
+        citationState: existing?.citationState === CitationStates.cited || s.citationState === CitationStates.cited ? CitationStates.cited : CitationStates["not-cited"],
+        resolvedAnswerMentioned: (existing?.resolvedAnswerMentioned ?? false) || resolveSnapshotAnswerMentioned(s, project)
+      });
     }
     const allQueryIds = /* @__PURE__ */ new Set([...map1.keys(), ...map2.keys()]);
     const diff = [...allQueryIds].map((qId) => {
@@ -8284,10 +8365,10 @@ async function historyRoutes(app) {
         run1AnswerMentioned: s1?.resolvedAnswerMentioned ?? null,
         run2AnswerMentioned: s2?.resolvedAnswerMentioned ?? null,
         // Legacy aliases — same data as run{1,2}MentionState below.
-        run1VisibilityState: s1?.resolvedVisibilityState ?? null,
-        run2VisibilityState: s2?.resolvedVisibilityState ?? null,
-        run1MentionState: s1?.resolvedMentionState ?? null,
-        run2MentionState: s2?.resolvedMentionState ?? null,
+        run1VisibilityState: s1 ? visibilityStateFromAnswerMentioned(s1.resolvedAnswerMentioned) : null,
+        run2VisibilityState: s2 ? visibilityStateFromAnswerMentioned(s2.resolvedAnswerMentioned) : null,
+        run1MentionState: s1 ? mentionStateFromAnswerMentioned(s1.resolvedAnswerMentioned) : null,
+        run2MentionState: s2 ? mentionStateFromAnswerMentioned(s2.resolvedAnswerMentioned) : null,
         changed: (s1?.citationState ?? null) !== (s2?.citationState ?? null),
         visibilityChanged: (s1?.resolvedAnswerMentioned ?? null) !== (s2?.resolvedAnswerMentioned ?? null)
       };
@@ -8304,9 +8385,28 @@ function formatAuditEntry(row) {
     entityType: row.entityType,
     entityId: row.entityId,
     diff: row.diff ? row.entityType === "notification" ? redactNotificationDiff(parseJsonColumn(row.diff, null)) : parseJsonColumn(row.diff, null) : null,
+    userAgent: row.userAgent,
+    actorSession: row.actorSession,
     createdAt: row.createdAt
   };
 }
+function addAuditHistoryFilters(filters, query) {
+  if (query.since && !Number.isNaN(Date.parse(query.since))) filters.push(gte2(auditLog.createdAt, query.since));
+  if (query.action) filters.push(eq10(auditLog.action, query.action));
+  if (query.actor) filters.push(eq10(auditLog.actor, query.actor));
+  if (query.entityType) filters.push(eq10(auditLog.entityType, query.entityType));
+}
+function parseBoundedInt(value, fallback, max) {
+  const parsed = Number.parseInt(value ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed < 0) return fallback;
+  return Math.min(parsed, max);
+}
+function parseOptionalPositiveInt(value, max) {
+  if (value == null) return void 0;
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) return void 0;
+  return Math.min(parsed, max);
+}
 
 // ../api-routes/src/analytics.ts
 import { and as and7, eq as eq11, desc as desc3, inArray as inArray4 } from "drizzle-orm";
@@ -8970,7 +9070,7 @@ async function intelligenceRoutes(app) {
 }
 
 // ../api-routes/src/report.ts
-import { and as and12, desc as desc7, eq as eq16, gte as gte2, inArray as inArray7, lt, lte, ne as ne2, or as or3, sql as sql7 } from "drizzle-orm";
+import { and as and12, desc as desc7, eq as eq16, gte as gte3, inArray as inArray7, lt, lte, ne as ne2, or as or3, sql as sql7 } from "drizzle-orm";
 
 // ../api-routes/src/content.ts
 import crypto12 from "crypto";
@@ -9706,7 +9806,7 @@ function winnabilityClassRank(winnabilityClass) {
 }
 
 // ../api-routes/src/gsc-totals.ts
-import { and as and11, asc as asc2, eq as eq15, sql as sql6 } from "drizzle-orm";
+import { and as and11, asc as asc3, eq as eq15, sql as sql6 } from "drizzle-orm";
 function readGscDailyTotals(db, projectId, startDate, endDate) {
   const rows = db.select({
     date: gscDailyTotals.date,
@@ -9719,7 +9819,7 @@ function readGscDailyTotals(db, projectId, startDate, endDate) {
       sql6`${gscDailyTotals.date} >= ${startDate}`,
       sql6`${gscDailyTotals.date} <= ${endDate}`
     )
-  ).orderBy(asc2(gscDailyTotals.date)).all();
+  ).orderBy(asc3(gscDailyTotals.date)).all();
   return rows.map((r) => {
     const position = Number(r.position);
     return {
@@ -12186,7 +12286,7 @@ function buildGaSection(db, projectId, windowDays) {
     eq16(gaAiReferrals.sourceDimension, "session")
   ];
   if (snapshotStartDate && snapshotMaxDate) {
-    aiConditions.push(gte2(gaAiReferrals.date, snapshotStartDate));
+    aiConditions.push(gte3(gaAiReferrals.date, snapshotStartDate));
     aiConditions.push(lte(gaAiReferrals.date, snapshotMaxDate));
   }
   const aiSessionRows = db.select({
@@ -12403,7 +12503,7 @@ function buildServerActivity(db, projectId, windowDays) {
       and12(
         eq16(crawlerEventsHourly.projectId, projectId),
         eq16(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
-        gte2(crawlerEventsHourly.tsHour, windowStartIso),
+        gte3(crawlerEventsHourly.tsHour, windowStartIso),
         exclusiveEnd ? lt(crawlerEventsHourly.tsHour, windowEndIso) : lte(crawlerEventsHourly.tsHour, windowEndIso)
       )
     ).get()?.total ?? 0
@@ -12413,7 +12513,7 @@ function buildServerActivity(db, projectId, windowDays) {
       and12(
         eq16(crawlerEventsHourly.projectId, projectId),
         ne2(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
-        gte2(crawlerEventsHourly.tsHour, windowStartIso),
+        gte3(crawlerEventsHourly.tsHour, windowStartIso),
         exclusiveEnd ? lt(crawlerEventsHourly.tsHour, windowEndIso) : lte(crawlerEventsHourly.tsHour, windowEndIso)
       )
     ).get()?.total ?? 0
@@ -12427,7 +12527,7 @@ function buildServerActivity(db, projectId, windowDays) {
       and12(
         eq16(aiReferralEventsHourly.projectId, projectId),
         nonSubresourceReferralPathCondition(),
-        gte2(aiReferralEventsHourly.tsHour, windowStartIso),
+        gte3(aiReferralEventsHourly.tsHour, windowStartIso),
         exclusiveEnd ? lt(aiReferralEventsHourly.tsHour, windowEndIso) : lte(aiReferralEventsHourly.tsHour, windowEndIso)
       )
     ).get();
@@ -12437,7 +12537,7 @@ function buildServerActivity(db, projectId, windowDays) {
     db.select({ total: sql7`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
       and12(
         eq16(aiUserFetchEventsHourly.projectId, projectId),
-        gte2(aiUserFetchEventsHourly.tsHour, windowStartIso),
+        gte3(aiUserFetchEventsHourly.tsHour, windowStartIso),
         exclusiveEnd ? lt(aiUserFetchEventsHourly.tsHour, windowEndIso) : lte(aiUserFetchEventsHourly.tsHour, windowEndIso)
       )
     ).get()?.total ?? 0
@@ -12457,7 +12557,7 @@ function buildServerActivity(db, projectId, windowDays) {
   }).from(crawlerEventsHourly).where(
     and12(
       eq16(crawlerEventsHourly.projectId, projectId),
-      gte2(crawlerEventsHourly.tsHour, headlineStart),
+      gte3(crawlerEventsHourly.tsHour, headlineStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(crawlerEventsHourly.operator, crawlerEventsHourly.verificationStatus).all();
@@ -12468,7 +12568,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(crawlerEventsHourly.projectId, projectId),
       eq16(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
-      gte2(crawlerEventsHourly.tsHour, priorStart),
+      gte3(crawlerEventsHourly.tsHour, priorStart),
       lt(crawlerEventsHourly.tsHour, headlineStart)
     )
   ).groupBy(crawlerEventsHourly.operator).all();
@@ -12479,7 +12579,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
-      gte2(aiReferralEventsHourly.tsHour, headlineStart),
+      gte3(aiReferralEventsHourly.tsHour, headlineStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(aiReferralEventsHourly.operator).all();
@@ -12489,7 +12589,7 @@ function buildServerActivity(db, projectId, windowDays) {
   }).from(aiUserFetchEventsHourly).where(
     and12(
       eq16(aiUserFetchEventsHourly.projectId, projectId),
-      gte2(aiUserFetchEventsHourly.tsHour, headlineStart),
+      gte3(aiUserFetchEventsHourly.tsHour, headlineStart),
       lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(aiUserFetchEventsHourly.operator).all();
@@ -12534,7 +12634,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(crawlerEventsHourly.projectId, projectId),
       eq16(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
-      gte2(crawlerEventsHourly.tsHour, headlineStart),
+      gte3(crawlerEventsHourly.tsHour, headlineStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(crawlerEventsHourly.pathNormalized).orderBy(desc7(sql7`SUM(${crawlerEventsHourly.hits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
@@ -12551,7 +12651,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
-      gte2(aiReferralEventsHourly.tsHour, headlineStart),
+      gte3(aiReferralEventsHourly.tsHour, headlineStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(aiReferralEventsHourly.product).orderBy(desc7(sql7`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).all();
@@ -12568,7 +12668,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
-      gte2(aiReferralEventsHourly.tsHour, headlineStart),
+      gte3(aiReferralEventsHourly.tsHour, headlineStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(aiReferralEventsHourly.landingPathNormalized).orderBy(desc7(sql7`SUM(${aiReferralEventsHourly.sessionsOrHits})`)).limit(SERVER_ACTIVITY_TOP_PATHS_LIMIT).all();
@@ -12584,7 +12684,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(crawlerEventsHourly.projectId, projectId),
       eq16(crawlerEventsHourly.verificationStatus, VerificationStatuses.verified),
-      gte2(crawlerEventsHourly.tsHour, trendStart),
+      gte3(crawlerEventsHourly.tsHour, trendStart),
       lte(crawlerEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(sql7`SUBSTR(${crawlerEventsHourly.tsHour}, 1, 10)`).all();
@@ -12595,7 +12695,7 @@ function buildServerActivity(db, projectId, windowDays) {
     and12(
       eq16(aiReferralEventsHourly.projectId, projectId),
       nonSubresourceReferralPathCondition(),
-      gte2(aiReferralEventsHourly.tsHour, trendStart),
+      gte3(aiReferralEventsHourly.tsHour, trendStart),
       lte(aiReferralEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(sql7`SUBSTR(${aiReferralEventsHourly.tsHour}, 1, 10)`).all();
@@ -12605,7 +12705,7 @@ function buildServerActivity(db, projectId, windowDays) {
   }).from(aiUserFetchEventsHourly).where(
     and12(
       eq16(aiUserFetchEventsHourly.projectId, projectId),
-      gte2(aiUserFetchEventsHourly.tsHour, trendStart),
+      gte3(aiUserFetchEventsHourly.tsHour, trendStart),
       lte(aiUserFetchEventsHourly.tsHour, headlineEnd)
     )
   ).groupBy(sql7`SUBSTR(${aiUserFetchEventsHourly.tsHour}, 1, 10)`).all();
@@ -14239,8 +14339,226 @@ async function visibilityStatsRoutes(app) {
   });
 }
 
+// ../api-routes/src/results-export.ts
+import { and as and15, asc as asc4, eq as eq19, gte as gte4, lte as lte2 } from "drizzle-orm";
+var CSV_COLUMNS = [
+  "export_schema_version",
+  "project_id",
+  "project_name",
+  "project_display_name",
+  "canonical_domain",
+  "run_id",
+  "run_kind",
+  "run_status",
+  "run_trigger",
+  "run_created_at",
+  "run_started_at",
+  "run_finished_at",
+  "snapshot_id",
+  "snapshot_created_at",
+  "query_id",
+  "query",
+  "provider",
+  "model",
+  "location",
+  "citation_state",
+  "cited",
+  "answer_mentioned",
+  "mention_state",
+  "cited_domains_json",
+  "competitor_overlap_json",
+  "recommended_competitors_json",
+  "answer_text",
+  "grounding_sources_json",
+  "search_queries_json"
+];
+function parseFormat(value) {
+  if (value === void 0 || value === "" || value === "json") return "json";
+  if (value === "csv") return "csv";
+  throw validationError('"format" must be "json" or "csv"');
+}
+function parseBoolean(value, name) {
+  if (value === void 0 || value === "") return false;
+  if (value === "true" || value === "1") return true;
+  if (value === "false" || value === "0") return false;
+  throw validationError(`"${name}" must be "true" or "false"`);
+}
+function parseDateBounds(since, until) {
+  let sinceIso = null;
+  let untilIso = null;
+  if (since !== void 0 && since !== "") {
+    const ms = Date.parse(since);
+    if (Number.isNaN(ms)) throw validationError('"since" must be an ISO 8601 date/time');
+    sinceIso = new Date(ms).toISOString();
+  }
+  if (until !== void 0 && until !== "") {
+    const ms = parseInclusiveEndMs(until);
+    if (ms === null) throw validationError('"until" must be an ISO 8601 date/time');
+    untilIso = new Date(ms).toISOString();
+  }
+  if (sinceIso !== null && untilIso !== null && untilIso < sinceIso) {
+    throw validationError('"until" must be on or after "since"');
+  }
+  return { sinceIso, untilIso };
+}
+function readEvidence(rawResponse) {
+  const parsed = parseJsonColumn(rawResponse, {});
+  const groundingSources = Array.isArray(parsed.groundingSources) ? parsed.groundingSources.filter(
+    (source) => typeof source === "object" && source !== null && typeof source.uri === "string"
+  ).map((source) => ({ uri: source.uri, title: typeof source.title === "string" ? source.title : "" })) : [];
+  const searchQueries = Array.isArray(parsed.searchQueries) ? parsed.searchQueries.filter((query) => typeof query === "string") : [];
+  return { groundingSources, searchQueries };
+}
+function recordMentionState(answerMentioned) {
+  if (answerMentioned === null) return null;
+  return answerMentioned ? "mentioned" : "not-mentioned";
+}
+function spreadsheetSafe(value) {
+  return /^[\t\r ]*[=+\-@]/.test(value) ? `'${value}` : value;
+}
+function csvCell(value) {
+  if (value === null) return "";
+  const text2 = typeof value === "string" ? spreadsheetSafe(value) : String(value);
+  return /[",\r\n]/.test(text2) ? `"${text2.replace(/"/g, '""')}"` : text2;
+}
+function renderResultsExportCsv(report) {
+  const rows = report.records.map((record) => [
+    report.schemaVersion,
+    report.project.id,
+    report.project.name,
+    report.project.displayName,
+    report.project.canonicalDomain,
+    record.runId,
+    record.runKind,
+    record.runStatus,
+    record.runTrigger,
+    record.runCreatedAt,
+    record.runStartedAt,
+    record.runFinishedAt,
+    record.snapshotId,
+    record.snapshotCreatedAt,
+    record.queryId,
+    record.query,
+    record.provider,
+    record.model,
+    record.location,
+    record.citationState,
+    record.cited,
+    record.answerMentioned,
+    record.mentionState,
+    JSON.stringify(record.citedDomains),
+    JSON.stringify(record.competitorOverlap),
+    JSON.stringify(record.recommendedCompetitors),
+    record.answerText,
+    JSON.stringify(record.groundingSources),
+    JSON.stringify(record.searchQueries)
+  ].map(csvCell).join(","));
+  return [CSV_COLUMNS.join(","), ...rows].join("\r\n") + "\r\n";
+}
+function filenameFor(projectName, format) {
+  const safeName = projectName.replace(/[^\w.-]+/gi, "_") || "project";
+  const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  return `canonry-results-${safeName}-${date}.${format}`;
+}
+async function resultsExportRoutes(app) {
+  app.get("/projects/:name/results/export", async (request, reply) => {
+    const project = resolveProject(app.db, request.params.name);
+    const format = parseFormat(request.query.format);
+    const includeProbes = parseBoolean(request.query.includeProbes, "includeProbes");
+    const { sinceIso, untilIso } = parseDateBounds(request.query.since, request.query.until);
+    const conditions = [
+      eq19(runs.projectId, project.id),
+      eq19(runs.kind, RunKinds["answer-visibility"]),
+      ...includeProbes ? [] : [notProbeRun()],
+      ...sinceIso ? [gte4(runs.createdAt, sinceIso)] : [],
+      ...untilIso ? [lte2(runs.createdAt, untilIso)] : []
+    ];
+    const rows = app.db.select({
+      runId: runs.id,
+      runStatus: runs.status,
+      runTrigger: runs.trigger,
+      runCreatedAt: runs.createdAt,
+      runStartedAt: runs.startedAt,
+      runFinishedAt: runs.finishedAt,
+      snapshotId: querySnapshots.id,
+      snapshotCreatedAt: querySnapshots.createdAt,
+      queryId: querySnapshots.queryId,
+      queryText: querySnapshots.queryText,
+      currentQuery: queries.query,
+      provider: querySnapshots.provider,
+      model: querySnapshots.model,
+      location: querySnapshots.location,
+      citationState: querySnapshots.citationState,
+      answerMentioned: querySnapshots.answerMentioned,
+      citedDomains: querySnapshots.citedDomains,
+      competitorOverlap: querySnapshots.competitorOverlap,
+      recommendedCompetitors: querySnapshots.recommendedCompetitors,
+      answerText: querySnapshots.answerText,
+      rawResponse: querySnapshots.rawResponse
+    }).from(querySnapshots).innerJoin(runs, eq19(querySnapshots.runId, runs.id)).leftJoin(queries, eq19(querySnapshots.queryId, queries.id)).where(and15(...conditions)).orderBy(asc4(runs.createdAt), asc4(runs.id), asc4(querySnapshots.createdAt), asc4(querySnapshots.id)).all();
+    const records = rows.map((row) => {
+      const evidence = readEvidence(row.rawResponse);
+      const citationState = row.citationState === CitationStates.cited ? CitationStates.cited : CitationStates["not-cited"];
+      return {
+        runId: row.runId,
+        runKind: RunKinds["answer-visibility"],
+        runStatus: runStatusSchema.parse(row.runStatus),
+        runTrigger: runTriggerSchema.parse(row.runTrigger),
+        runCreatedAt: row.runCreatedAt,
+        runStartedAt: row.runStartedAt,
+        runFinishedAt: row.runFinishedAt,
+        snapshotId: row.snapshotId,
+        snapshotCreatedAt: row.snapshotCreatedAt,
+        queryId: row.queryId,
+        query: row.queryText ?? row.currentQuery,
+        provider: row.provider,
+        model: row.model,
+        location: row.location,
+        citationState,
+        cited: citationState === CitationStates.cited,
+        answerMentioned: row.answerMentioned,
+        mentionState: recordMentionState(row.answerMentioned),
+        citedDomains: row.citedDomains,
+        competitorOverlap: row.competitorOverlap,
+        recommendedCompetitors: row.recommendedCompetitors,
+        answerText: row.answerText,
+        groundingSources: evidence.groundingSources,
+        searchQueries: evidence.searchQueries
+      };
+    });
+    const dto = {
+      schemaVersion: "canonry.results-export/v1",
+      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      project: {
+        id: project.id,
+        name: project.name,
+        displayName: project.displayName,
+        canonicalDomain: project.canonicalDomain,
+        country: project.country,
+        language: project.language
+      },
+      filters: {
+        since: request.query.since || null,
+        until: request.query.until || null,
+        includeProbes
+      },
+      recordCount: records.length,
+      records
+    };
+    reply.header("Content-Disposition", `attachment; filename="${filenameFor(project.name, format)}"`);
+    reply.header("Cache-Control", "private, no-store");
+    reply.header("X-Content-Type-Options", "nosniff");
+    if (format === "csv") {
+      reply.type("text/csv; charset=utf-8");
+      return reply.send(renderResultsExportCsv(dto));
+    }
+    reply.type("application/json; charset=utf-8");
+    return reply.send(dto);
+  });
+}
+
 // ../api-routes/src/composites.ts
-import { eq as eq19, and as and15, desc as desc9, sql as sql8, like as like2, or as or4, inArray as inArray10 } from "drizzle-orm";
+import { eq as eq20, and as and16, desc as desc9, sql as sql8, like as like2, or as or4, inArray as inArray10 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
@@ -14258,7 +14576,7 @@ async function compositeRoutes(app) {
     const project = resolveProject(app.db, request.params.name);
     const filterLocation = (request.query.location ?? "").trim() || null;
     const sinceIso = parseSinceFilter(request.query.since);
-    const allRunsRaw = app.db.select().from(runs).where(and15(eq19(runs.projectId, project.id), notProbeRun())).orderBy(desc9(runs.createdAt), desc9(runs.id)).all();
+    const allRunsRaw = app.db.select().from(runs).where(and16(eq20(runs.projectId, project.id), notProbeRun())).orderBy(desc9(runs.createdAt), desc9(runs.id)).all();
     const allRuns = allRunsRaw.filter((r) => runMatchesFilters(r, filterLocation, sinceIso));
     const totalRuns = allRuns.length;
     const visibilityRuns = allRuns.filter((r) => r.kind === RunKinds["answer-visibility"]);
@@ -14271,15 +14589,15 @@ async function compositeRoutes(app) {
     const previousVisibilityRun = pickGroupRepresentative(previousVisRunGroup);
     const latestRunRow = allRuns[0] ?? null;
     const latestRun = latestRunRow ? { totalRuns, run: summarizeRun(latestRunRow) } : { totalRuns: 0, run: null };
-    const healthRow = app.db.select().from(healthSnapshots).where(eq19(healthSnapshots.projectId, project.id)).orderBy(desc9(healthSnapshots.createdAt)).limit(1).get();
+    const healthRow = app.db.select().from(healthSnapshots).where(eq20(healthSnapshots.projectId, project.id)).orderBy(desc9(healthSnapshots.createdAt)).limit(1).get();
     const health = healthRow ? mapHealthRow2(healthRow) : null;
-    const insightRows = app.db.select().from(insights).where(eq19(insights.projectId, project.id)).orderBy(desc9(insights.createdAt)).all();
+    const insightRows = app.db.select().from(insights).where(eq20(insights.projectId, project.id)).orderBy(desc9(insights.createdAt)).all();
     const topInsights = insightRows.filter((row) => !row.dismissed).slice(0, TOP_INSIGHT_LIMIT).map(mapInsightRow2);
     const sparklineRunIds = visibilityRuns.slice(0, DEFAULT_RUN_HISTORY_LIMIT).map((r) => r.id);
     const snapshotRunIds = new Set(sparklineRunIds);
     for (const run of latestVisRunGroup) snapshotRunIds.add(run.id);
     for (const run of previousVisRunGroup) snapshotRunIds.add(run.id);
-    const projectQueries = app.db.select({ id: queries.id, query: queries.query }).from(queries).where(eq19(queries.projectId, project.id)).all();
+    const projectQueries = app.db.select({ id: queries.id, query: queries.query }).from(queries).where(eq20(queries.projectId, project.id)).all();
     const queryIdByText = new Map(projectQueries.map((q) => [normalizeQueryText(q.query), q.id]));
     const snapshotsByRun = loadSnapshotsByRunIds(app, [...snapshotRunIds], queryIdByText);
     const latestSnapshots = latestVisRunGroup.flatMap((r) => snapshotsByRun.get(r.id) ?? []);
@@ -14295,7 +14613,7 @@ async function compositeRoutes(app) {
       trackedPrevious,
       previousVisibilityRun?.createdAt ?? null
     );
-    const competitorRows = app.db.select().from(competitors).where(eq19(competitors.projectId, project.id)).all();
+    const competitorRows = app.db.select().from(competitors).where(eq20(competitors.projectId, project.id)).all();
     const queryLookup = { byId: new Map(projectQueries.map((q) => [q.id, q.query])) };
     for (const snapshots of snapshotsByRun.values()) {
       for (const snapshot of snapshots) {
@@ -14413,9 +14731,9 @@ async function compositeRoutes(app) {
       citedDomains: querySnapshots.citedDomains,
       rawResponse: querySnapshots.rawResponse,
       createdAt: querySnapshots.createdAt
-    }).from(querySnapshots).innerJoin(queries, eq19(querySnapshots.queryId, queries.id)).where(
-      and15(
-        eq19(queries.projectId, project.id),
+    }).from(querySnapshots).innerJoin(queries, eq20(querySnapshots.queryId, queries.id)).where(
+      and16(
+        eq20(queries.projectId, project.id),
         or4(
           sql8`${querySnapshots.answerText} LIKE ${pattern} ESCAPE '\\'`,
           sql8`${querySnapshots.citedDomains} LIKE ${pattern} ESCAPE '\\'`,
@@ -14425,8 +14743,8 @@ async function compositeRoutes(app) {
       )
     ).orderBy(desc9(querySnapshots.createdAt)).limit(limit + 1).all());
     const insightMatches = app.db.select().from(insights).where(
-      and15(
-        eq19(insights.projectId, project.id),
+      and16(
+        eq20(insights.projectId, project.id),
         or4(
           like2(insights.title, pattern),
           like2(insights.query, pattern),
@@ -14642,8 +14960,8 @@ function buildSuggestedQueriesFromGsc(app, projectId, trackedQueries) {
     // NULLIF guards the degenerate impressions=0 case (SQLite returns NULL,
     // which the JS coerces to 0 — caught by the impression floor anyway).
     avgPosition: sql8`COALESCE(SUM(${gscSearchData.position} * ${gscSearchData.impressions}) * 1.0 / NULLIF(SUM(${gscSearchData.impressions}), 0), 0)`
-  }).from(gscSearchData).where(and15(
-    eq19(gscSearchData.projectId, projectId),
+  }).from(gscSearchData).where(and16(
+    eq20(gscSearchData.projectId, projectId),
     sql8`${gscSearchData.date} >= ${cutoff}`,
     sql8`${gscSearchData.impressions} > 0`
   )).groupBy(gscSearchData.query).orderBy(sql8`SUM(${gscSearchData.impressions}) DESC`).limit(100).all();
@@ -14666,8 +14984,8 @@ function buildIndexCoverageScore(app, projectId) {
     tooltip,
     trend: []
   };
-  const gscRow = app.db.select().from(gscCoverageSnapshots).where(eq19(gscCoverageSnapshots.projectId, projectId)).orderBy(desc9(gscCoverageSnapshots.date)).limit(1).get();
-  const bingRow = app.db.select().from(bingCoverageSnapshots).where(eq19(bingCoverageSnapshots.projectId, projectId)).orderBy(desc9(bingCoverageSnapshots.date)).limit(1).get();
+  const gscRow = app.db.select().from(gscCoverageSnapshots).where(eq20(gscCoverageSnapshots.projectId, projectId)).orderBy(desc9(gscCoverageSnapshots.date)).limit(1).get();
+  const bingRow = app.db.select().from(bingCoverageSnapshots).where(eq20(bingCoverageSnapshots.projectId, projectId)).orderBy(desc9(bingCoverageSnapshots.date)).limit(1).get();
   const chosen = pickIndexCoverageRow(gscRow, bingRow);
   if (!chosen) return empty;
   const total = chosen.indexed + chosen.notIndexed;
@@ -14693,7 +15011,7 @@ function countGoogleDeindexedUrls(app, projectId) {
     url: gscUrlInspections.url,
     indexingState: gscUrlInspections.indexingState,
     inspectedAt: gscUrlInspections.inspectedAt
-  }).from(gscUrlInspections).where(eq19(gscUrlInspections.projectId, projectId)).orderBy(desc9(gscUrlInspections.inspectedAt)).all();
+  }).from(gscUrlInspections).where(eq20(gscUrlInspections.projectId, projectId)).orderBy(desc9(gscUrlInspections.inspectedAt)).all();
   if (rows.length === 0) return 0;
   const canonicalUrl = (url) => url.replace(/^http:\/\//, "https://");
   const historyByUrl = /* @__PURE__ */ new Map();
@@ -14945,6 +15263,7 @@ var SCHEMA_TABLE = {
   AdsConnectionStatusDto: adsConnectionStatusDtoSchema,
   AdsDisconnectResponse: adsDisconnectResponseSchema,
   AdsInsightsResponse: adsInsightsResponseSchema,
+  AdsOperationResponse: adsOperationResponseSchema,
   AdsSummaryDto: adsSummaryDtoSchema,
   AdsSyncResponse: adsSyncResponseSchema,
   ApiKeyDto: apiKeyDtoSchema,
@@ -15013,6 +15332,7 @@ var SCHEMA_TABLE = {
   GscSiteListResponseDto: gscSiteListResponseDtoSchema,
   GscSitemapListResponseDto: gscSitemapListResponseDtoSchema,
   GscUrlInspectionDto: gscUrlInspectionDtoSchema,
+  HealthSnapshotDto: healthSnapshotDtoSchema,
   IndexingRequestResponseDto: indexingRequestResponseDtoSchema,
   KeywordDto: keywordDtoSchema,
   LatestProjectRunDto: latestProjectRunDtoSchema,
@@ -15022,6 +15342,7 @@ var SCHEMA_TABLE = {
   ProjectOverviewDto: projectOverviewDtoSchema,
   ProjectReportDto: projectReportDtoSchema,
   QueryDto: queryDtoSchema,
+  ResultsExportDto: resultsExportDtoSchema,
   RunDetailDto: runDetailDtoSchema,
   RunDto: runDtoSchema,
   SchedulableRunKind: schedulableRunKindSchema,
@@ -15125,6 +15446,17 @@ var booleanSchema = { type: "boolean" };
 var integerSchema = { type: "integer" };
 var objectSchema = { type: "object", additionalProperties: true };
 var stringArraySchema = { type: "array", items: stringSchema };
+var adsOperationKeySchema = { type: "string", minLength: 8, maxLength: 128 };
+var adsCreativeRequestSchema = {
+  type: "object",
+  required: ["title", "body", "targetUrl", "fileId"],
+  properties: {
+    title: { type: "string", minLength: 3, maxLength: 50 },
+    body: { type: "string", minLength: 1, maxLength: 100 },
+    targetUrl: { type: "string", format: "uri" },
+    fileId: stringSchema
+  }
+};
 var googleConnectionTypeSchema = { type: "string", enum: ["gsc", "ga4", "gbp"] };
 var locationSchema = {
   type: "object",
@@ -15526,6 +15858,62 @@ var routeCatalog = [
       404: errorResponse("Project not found.")
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/results/export",
+    summary: "Download historical answer-engine results",
+    tags: ["exports"],
+    description: "Downloads one record per persisted answer-visibility query \xD7 provider observation. Citation and mention stay independent: `citationState` describes source-list attribution, while nullable `answerMentioned` describes answer-text presence. Excludes probe runs by default. JSON is a versioned portable artifact; CSV is its flat spreadsheet representation. Raw provider payloads, credentials, and local paths are never included.",
+    parameters: [
+      nameParameter,
+      {
+        name: "format",
+        in: "query",
+        description: "Download format. Defaults to `json`.",
+        schema: { type: "string", enum: ["json", "csv"], default: "json" }
+      },
+      {
+        name: "since",
+        in: "query",
+        description: "Inclusive ISO 8601 lower bound on run creation time.",
+        schema: stringSchema
+      },
+      {
+        name: "until",
+        in: "query",
+        description: "Inclusive ISO 8601 upper bound on run creation time. A date-only value includes that whole UTC day.",
+        schema: stringSchema
+      },
+      {
+        name: "includeProbes",
+        in: "query",
+        description: "Include operator/agent probe runs. Defaults to `false`.",
+        schema: booleanSchema
+      }
+    ],
+    responses: {
+      200: {
+        description: "Results attachment returned.",
+        content: {
+          // The query-selected attachment can be JSON or CSV. OpenAPI cannot
+          // express that the `format` parameter selects a media type, so keep
+          // the generated SDK honest with a union rather than promising JSON
+          // to a caller that requested CSV.
+          "application/json": {
+            schema: {
+              oneOf: [
+                { $ref: "#/components/schemas/ResultsExportDto" },
+                { type: "string" }
+              ]
+            }
+          },
+          "text/csv": { schema: { type: "string" } }
+        }
+      },
+      400: errorResponse("Invalid export filters."),
+      404: errorResponse("Project not found.")
+    }
+  },
   {
     method: "get",
     path: "/api/v1/projects/{name}/queries",
@@ -16013,7 +16401,15 @@ var routeCatalog = [
     path: "/api/v1/projects/{name}/history",
     summary: "Get project audit history",
     tags: ["history"],
-    parameters: [nameParameter],
+    parameters: [
+      nameParameter,
+      limitQueryParameter,
+      offsetQueryParameter,
+      { name: "since", in: "query", description: "ISO 8601 lower bound.", schema: stringSchema },
+      { name: "action", in: "query", description: "Exact audit action filter.", schema: stringSchema },
+      { name: "actor", in: "query", description: "Exact actor filter.", schema: stringSchema },
+      { name: "entityType", in: "query", description: "Exact entity type filter.", schema: stringSchema }
+    ],
     responses: {
       200: jsonArrayResponse("Audit history returned.", "AuditLogEntry")
     }
@@ -16023,6 +16419,14 @@ var routeCatalog = [
     path: "/api/v1/history",
     summary: "Get global audit history",
     tags: ["history"],
+    parameters: [
+      limitQueryParameter,
+      offsetQueryParameter,
+      { name: "since", in: "query", description: "ISO 8601 lower bound.", schema: stringSchema },
+      { name: "action", in: "query", description: "Exact audit action filter.", schema: stringSchema },
+      { name: "actor", in: "query", description: "Exact actor filter.", schema: stringSchema },
+      { name: "entityType", in: "query", description: "Exact entity type filter.", schema: stringSchema }
+    ],
     responses: {
       200: jsonArrayResponse("Audit history returned.", "AuditLogEntry")
     }
@@ -16047,7 +16451,11 @@ var routeCatalog = [
     path: "/api/v1/projects/{name}/timeline",
     summary: "Get query timeline",
     tags: ["history"],
-    parameters: [nameParameter, locationQueryParameter],
+    parameters: [
+      nameParameter,
+      locationQueryParameter,
+      { name: "limit", in: "query", description: "Restrict each query timeline to snapshots from the most recent N project runs. Omit for full history.", schema: { ...integerSchema, minimum: 1, maximum: 100 } }
+    ],
     responses: {
       // TODO: Add `ProjectTimelineDto` Zod schema in contracts.
       200: rawJsonResponse("Timeline returned.", looseObjectSchema)
@@ -17168,6 +17576,7 @@ var routeCatalog = [
     responses: {
       200: jsonResponse("Connected; key validated against the upstream ad account.", "AdsConnectionStatusDto"),
       400: errorResponse("Missing/invalid key or credential storage unavailable."),
+      403: errorResponse("The key lacks ads.write."),
       404: errorResponse("Project not found.")
     }
   },
@@ -17179,6 +17588,7 @@ var routeCatalog = [
     parameters: [nameParameter],
     responses: {
       200: jsonResponse("Disconnected (idempotent).", "AdsDisconnectResponse"),
+      403: errorResponse("The key lacks ads.write."),
       404: errorResponse("Project not found.")
     }
   },
@@ -17193,6 +17603,288 @@ var routeCatalog = [
       404: errorResponse("Project not found.")
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/ads/operations/{operationKey}",
+    summary: "Read a durable OpenAI Ads mutation receipt by operation key",
+    tags: ["ads"],
+    parameters: [
+      nameParameter,
+      { name: "operationKey", in: "path", required: true, description: "Caller-supplied idempotency key.", schema: adsOperationKeySchema }
+    ],
+    responses: {
+      200: jsonResponse("Operation receipt.", "AdsOperationResponse"),
+      404: errorResponse("Project or operation not found.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/files",
+    summary: "Upload an OpenAI Ads image from a public HTTPS URL",
+    tags: ["ads"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "imageUrl"],
+        properties: { operationKey: adsOperationKeySchema, imageUrl: { type: "string", format: "uri" } }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Upload receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/campaigns",
+    summary: "Create a paused OpenAI Ads campaign",
+    description: "The server always creates the campaign paused. Status is not accepted from the caller.",
+    tags: ["ads"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "name", "lifetimeSpendLimitMicros", "locationIds"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          description: stringSchema,
+          startTime: integerSchema,
+          endTime: integerSchema,
+          lifetimeSpendLimitMicros: { type: "integer", minimum: 1e6 },
+          locationIds: { type: "array", minItems: 1, maxItems: 100, items: stringSchema }
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Paused campaign creation receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ad-groups",
+    summary: "Create a paused OpenAI Ads ad group",
+    description: "The server fixes billing to impressions and always creates the ad group paused.",
+    tags: ["ads"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "campaignId", "name", "contextHints", "maxBidMicros"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          campaignId: stringSchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          description: stringSchema,
+          contextHints: { type: "array", minItems: 1, maxItems: 100, items: stringSchema },
+          maxBidMicros: { type: "integer", minimum: 1, maximum: 1e8 }
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Paused ad-group creation receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ads",
+    summary: "Create a paused OpenAI Ads chat-card ad",
+    description: "The server always creates the ad paused and fixes creative.type to chat_card.",
+    tags: ["ads"],
+    parameters: [nameParameter],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "adGroupId", "name", "creative"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          adGroupId: stringSchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          creative: adsCreativeRequestSchema
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Paused ad creation receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/campaigns/{id}",
+    summary: "Update an OpenAI Ads campaign with optimistic concurrency",
+    description: "The campaign must already be paused. Pause and sync first, then pass the refreshed upstreamUpdatedAt. Activation remains human-only.",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Campaign ID.", schema: stringSchema }],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "expectedUpdatedAt"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          expectedUpdatedAt: integerSchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          description: { type: "string", nullable: true },
+          startTime: { type: "integer", nullable: true },
+          endTime: { type: "integer", nullable: true },
+          lifetimeSpendLimitMicros: { type: "integer", minimum: 1e6 },
+          locationIds: { type: "array", minItems: 1, maxItems: 100, items: stringSchema }
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Campaign update receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request, active entity, or stale expectedUpdatedAt."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ad-groups/{id}",
+    summary: "Update an OpenAI Ads ad group with optimistic concurrency",
+    description: "The ad group must already be paused. Pause and sync first, then pass the refreshed upstreamUpdatedAt. Activation remains human-only.",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Ad group ID.", schema: stringSchema }],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "expectedUpdatedAt"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          expectedUpdatedAt: integerSchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          description: { type: "string", nullable: true },
+          contextHints: { type: "array", minItems: 1, maxItems: 100, items: stringSchema },
+          maxBidMicros: { type: "integer", minimum: 1, maximum: 1e8 }
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Ad-group update receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request, active entity, or stale expectedUpdatedAt."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ads/{id}",
+    summary: "Update an OpenAI Ads chat-card ad with optimistic concurrency",
+    description: "The ad must already be paused. Pause and sync first, then pass the refreshed upstreamUpdatedAt. Activation remains human-only.",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Ad ID.", schema: stringSchema }],
+    requestBody: {
+      required: true,
+      content: { "application/json": { schema: {
+        type: "object",
+        required: ["operationKey", "expectedUpdatedAt"],
+        properties: {
+          operationKey: adsOperationKeySchema,
+          expectedUpdatedAt: integerSchema,
+          name: { type: "string", minLength: 3, maxLength: 1e3 },
+          creative: adsCreativeRequestSchema
+        }
+      } } }
+    },
+    responses: {
+      200: jsonResponse("Ad update receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request, active entity, or stale expectedUpdatedAt."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/campaigns/{id}/pause",
+    summary: "Pause an OpenAI Ads campaign",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Campaign ID.", schema: stringSchema }],
+    requestBody: { required: true, content: { "application/json": { schema: {
+      type: "object",
+      required: ["operationKey"],
+      properties: { operationKey: adsOperationKeySchema }
+    } } } },
+    responses: {
+      200: jsonResponse("Campaign pause receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ad-groups/{id}/pause",
+    summary: "Pause an OpenAI Ads ad group",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Ad group ID.", schema: stringSchema }],
+    requestBody: { required: true, content: { "application/json": { schema: {
+      type: "object",
+      required: ["operationKey"],
+      properties: { operationKey: adsOperationKeySchema }
+    } } } },
+    responses: {
+      200: jsonResponse("Ad-group pause receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
+  {
+    method: "post",
+    path: "/api/v1/projects/{name}/ads/ads/{id}/pause",
+    summary: "Pause an OpenAI Ads ad",
+    tags: ["ads"],
+    parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Ad ID.", schema: stringSchema }],
+    requestBody: { required: true, content: { "application/json": { schema: {
+      type: "object",
+      required: ["operationKey"],
+      properties: { operationKey: adsOperationKeySchema }
+    } } } },
+    responses: {
+      200: jsonResponse("Ad pause receipt.", "AdsOperationResponse"),
+      400: errorResponse("Invalid request or ads connection unavailable."),
+      403: errorResponse("The key lacks ads.write."),
+      404: errorResponse("Project not found."),
+      409: errorResponse("Operation key was already used for a different request."),
+      502: errorResponse("Upstream outcome failed or is unknown.")
+    }
+  },
   {
     method: "post",
     path: "/api/v1/projects/{name}/ads/sync",
@@ -17202,13 +17894,14 @@ var routeCatalog = [
     responses: {
       200: jsonResponse("Sync run queued.", "AdsSyncResponse"),
       400: errorResponse("No ads connection for this project."),
+      403: errorResponse("The key lacks ads.write."),
       404: errorResponse("Project not found.")
     }
   },
   {
     method: "get",
     path: "/api/v1/projects/{name}/ads/campaigns",
-    summary: "Synced campaign snapshots with nested ad groups (context hints) and ads",
+    summary: "Synced campaign snapshots with lifecycle timestamps, targeting, nested ad groups, and ads",
     tags: ["ads"],
     parameters: [nameParameter],
     responses: {
@@ -18118,8 +18811,7 @@ var routeCatalog = [
     tags: ["intelligence"],
     parameters: [nameParameter],
     responses: {
-      // TODO: Add `HealthSnapshotDto` Zod schema in contracts.
-      200: rawJsonResponse("Health snapshot or no-data sentinel returned.", looseObjectSchema),
+      200: jsonResponse("Health snapshot or no-data sentinel returned.", "HealthSnapshotDto"),
       404: errorResponse("Project not found.")
     }
   },
@@ -18130,11 +18822,10 @@ var routeCatalog = [
     tags: ["intelligence"],
     parameters: [
       nameParameter,
-      { name: "limit", in: "query", description: "Max results.", schema: stringSchema }
+      { name: "limit", in: "query", description: "Max results.", schema: { ...integerSchema, minimum: 1, maximum: 100 } }
     ],
     responses: {
-      // TODO: Add `HealthSnapshotDto` Zod schema in contracts.
-      200: rawJsonResponse("Health history returned.", { type: "array", items: looseObjectSchema }),
+      200: jsonArrayResponse("Health history returned.", "HealthSnapshotDto"),
       404: errorResponse("Project not found.")
     }
   },
@@ -19035,22 +19726,26 @@ var routeCatalog = [
     method: "get",
     path: "/api/v1/projects/{name}/technical-aeo",
     summary: "Get the Technical AEO scorecard for a project",
-    description: "Returns the latest completed/partial site-audit: aggregate 0\u2013100 score, page counts, the full per-factor scorecard (site-level averages with pass/partial/fail distribution), cross-cutting issues, prioritized fixes, and the delta vs the previous audit. When the project has never been audited, `hasData` is false and the numeric fields are zeroed \u2014 render an onboarding state.",
+    description: "Returns the latest completed/partial site-audit, or the historical audit selected by `runId`: aggregate 0\u2013100 score, page counts, the full per-factor scorecard (site-level averages with pass/partial/fail distribution), cross-cutting issues, prioritized fixes, and the delta vs the audit immediately before it. When the project has never been audited, `hasData` is false and the numeric fields are zeroed \u2014 render an onboarding state.",
     tags: ["technical-aeo"],
-    parameters: [nameParameter],
+    parameters: [
+      nameParameter,
+      { name: "runId", in: "query", description: "Historical site-audit run ID. Omit for the latest audit.", schema: stringSchema }
+    ],
     responses: {
       200: jsonResponse("Technical AEO scorecard returned.", "SiteAuditScoreDto"),
-      404: errorResponse("Project not found.")
+      404: errorResponse("Project or site-audit run not found.")
     }
   },
   {
     method: "get",
     path: "/api/v1/projects/{name}/technical-aeo/pages",
-    summary: "List audited pages from the latest site-audit run",
-    description: "Returns the per-page breakdown of the latest completed/partial site-audit run (paginated). Filter to `status=error` to surface unreachable pages; sort `score-asc` (default) to surface the worst-scoring pages first.",
+    summary: "List audited pages from a site-audit run",
+    description: "Returns the per-page breakdown of the latest completed/partial site-audit run, or the historical audit selected by `runId` (paginated). Filter to `status=error` to surface unreachable pages; sort `score-asc` (default) to surface the worst-scoring pages first.",
     tags: ["technical-aeo"],
     parameters: [
       nameParameter,
+      { name: "runId", in: "query", description: "Historical site-audit run ID. Omit for the latest audit.", schema: stringSchema },
       { name: "status", in: "query", description: "Filter by page audit status: `success` or `error`.", schema: { type: "string", enum: ["success", "error"] } },
       { name: "sort", in: "query", description: "Sort order: `score-asc` (default), `score-desc`, or `url`.", schema: { type: "string", enum: ["score-asc", "score-desc", "url"] } },
       limitQueryParameter,
@@ -19058,7 +19753,7 @@ var routeCatalog = [
     ],
     responses: {
       200: jsonResponse("Audited pages returned.", "SiteAuditPagesResponseDto"),
-      404: errorResponse("Project not found.")
+      404: errorResponse("Project or site-audit run not found.")
     }
   },
   {
@@ -19432,7 +20127,7 @@ async function settingsRoutes(app, opts) {
 
 // ../api-routes/src/keys.ts
 import crypto13 from "crypto";
-import { desc as desc10, eq as eq20 } from "drizzle-orm";
+import { desc as desc10, eq as eq21 } from "drizzle-orm";
 var KEYS_WRITE_SCOPE = "keys.write";
 function toApiKeyDto(row) {
   const scopes = Array.isArray(row.scopes) ? row.scopes : [];
@@ -19451,7 +20146,7 @@ function toApiKeyDto(row) {
 async function keysRoutes(app) {
   app.get("/keys", async (request) => {
     const scopedProjectId = request.apiKey?.projectId;
-    const rows = scopedProjectId ? app.db.select().from(apiKeys).where(eq20(apiKeys.projectId, scopedProjectId)).orderBy(desc10(apiKeys.createdAt)).all() : app.db.select().from(apiKeys).orderBy(desc10(apiKeys.createdAt)).all();
+    const rows = scopedProjectId ? app.db.select().from(apiKeys).where(eq21(apiKeys.projectId, scopedProjectId)).orderBy(desc10(apiKeys.createdAt)).all() : app.db.select().from(apiKeys).orderBy(desc10(apiKeys.createdAt)).all();
     return { keys: rows.map(toApiKeyDto) };
   });
   app.get("/keys/self", async (request) => {
@@ -19459,7 +20154,7 @@ async function keysRoutes(app) {
     if (!id) {
       throw notFound("API key", "self");
     }
-    const row = app.db.select().from(apiKeys).where(eq20(apiKeys.id, id)).get();
+    const row = app.db.select().from(apiKeys).where(eq21(apiKeys.id, id)).get();
     if (!row) {
       throw notFound("API key", id);
     }
@@ -19477,7 +20172,7 @@ async function keysRoutes(app) {
       throw forbidden("A project-scoped key can only mint keys scoped to its own project.");
     }
     if (projectId) {
-      const proj = app.db.select({ id: projects.id }).from(projects).where(eq20(projects.id, projectId)).get();
+      const proj = app.db.select({ id: projects.id }).from(projects).where(eq21(projects.id, projectId)).get();
       if (!proj) {
         throw notFound("Project", projectId);
       }
@@ -19523,7 +20218,7 @@ async function keysRoutes(app) {
   app.post("/keys/:id/revoke", async (request) => {
     requireScope(request, KEYS_WRITE_SCOPE);
     const { id } = request.params;
-    const row = app.db.select().from(apiKeys).where(eq20(apiKeys.id, id)).get();
+    const row = app.db.select().from(apiKeys).where(eq21(apiKeys.id, id)).get();
     if (!row) {
       throw notFound("API key", id);
     }
@@ -19539,7 +20234,7 @@ async function keysRoutes(app) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
-      tx.update(apiKeys).set({ revokedAt: now }).where(eq20(apiKeys.id, id)).run();
+      tx.update(apiKeys).set({ revokedAt: now }).where(eq21(apiKeys.id, id)).run();
       writeAuditLog(tx, auditFromRequest(request, {
         actor: "api",
         action: "api-key.revoked",
@@ -19612,7 +20307,7 @@ async function telemetryRoutes(app, opts) {
 
 // ../api-routes/src/schedules.ts
 import crypto14 from "crypto";
-import { and as and16, eq as eq21 } from "drizzle-orm";
+import { and as and17, eq as eq22 } from "drizzle-orm";
 function parseKindParam(raw) {
   if (raw === void 0 || raw === null || raw === "") return SchedulableRunKinds["answer-visibility"];
   const parsed = schedulableRunKindSchema.safeParse(raw);
@@ -19639,7 +20334,7 @@ async function scheduleRoutes(app, opts) {
       if (!sourceId) {
         throw validationError('"sourceId" is required when kind is "traffic-sync"');
       }
-      const sourceRow = app.db.select().from(trafficSources).where(eq21(trafficSources.id, sourceId)).get();
+      const sourceRow = app.db.select().from(trafficSources).where(eq22(trafficSources.id, sourceId)).get();
       if (!sourceRow || sourceRow.projectId !== project.id) {
         throw notFound("Traffic source", sourceId);
       }
@@ -19684,7 +20379,7 @@ async function scheduleRoutes(app, opts) {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const enabledBool = enabled !== false;
-    const existing = app.db.select().from(schedules).where(and16(eq21(schedules.projectId, project.id), eq21(schedules.kind, kind))).get();
+    const existing = app.db.select().from(schedules).where(and17(eq22(schedules.projectId, project.id), eq22(schedules.kind, kind))).get();
     if (existing) {
       app.db.update(schedules).set({
         cronExpr,
@@ -19694,7 +20389,7 @@ async function scheduleRoutes(app, opts) {
         sourceId: sourceId ?? null,
         enabled: enabledBool,
         updatedAt: now
-      }).where(eq21(schedules.id, existing.id)).run();
+      }).where(eq22(schedules.id, existing.id)).run();
     } else {
       app.db.insert(schedules).values({
         id: crypto14.randomUUID(),
@@ -19718,13 +20413,13 @@ async function scheduleRoutes(app, opts) {
       diff: { kind, cronExpr, preset, timezone, providers, sourceId }
     });
     opts.onScheduleUpdated?.("upsert", project.id, kind);
-    const schedule = app.db.select().from(schedules).where(and16(eq21(schedules.projectId, project.id), eq21(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and17(eq22(schedules.projectId, project.id), eq22(schedules.kind, kind))).get();
     return reply.status(existing ? 200 : 201).send(formatSchedule(schedule));
   });
   app.get("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and16(eq21(schedules.projectId, project.id), eq21(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and17(eq22(schedules.projectId, project.id), eq22(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
@@ -19733,11 +20428,11 @@ async function scheduleRoutes(app, opts) {
   app.delete("/projects/:name/schedule", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
     const kind = parseKindParam(request.query?.kind);
-    const schedule = app.db.select().from(schedules).where(and16(eq21(schedules.projectId, project.id), eq21(schedules.kind, kind))).get();
+    const schedule = app.db.select().from(schedules).where(and17(eq22(schedules.projectId, project.id), eq22(schedules.kind, kind))).get();
     if (!schedule) {
       throw notFound("Schedule", `${request.params.name} (kind=${kind})`);
     }
-    app.db.delete(schedules).where(eq21(schedules.id, schedule.id)).run();
+    app.db.delete(schedules).where(eq22(schedules.id, schedule.id)).run();
     writeAuditLog(app.db, {
       projectId: project.id,
       actor: "api",
@@ -19770,7 +20465,7 @@ function formatSchedule(row) {
 
 // ../api-routes/src/notifications.ts
 import crypto15 from "crypto";
-import { eq as eq22 } from "drizzle-orm";
+import { eq as eq23 } from "drizzle-orm";
 var VALID_EVENTS = ["citation.lost", "citation.gained", "run.completed", "run.failed", "insight.critical", "insight.high"];
 async function notificationRoutes(app, opts = {}) {
   const allowLoopback = opts.allowLoopbackWebhooks === true;
@@ -19810,22 +20505,22 @@ async function notificationRoutes(app, opts = {}) {
       diff: { channel, ...redactNotificationUrl(url), events }
     });
     return reply.status(201).send({
-      ...formatNotification(app.db.select().from(notifications).where(eq22(notifications.id, id)).get()),
+      ...formatNotification(app.db.select().from(notifications).where(eq23(notifications.id, id)).get()),
       webhookSecret
     });
   });
   app.get("/projects/:name/notifications", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select().from(notifications).where(eq22(notifications.projectId, project.id)).all();
+    const rows = app.db.select().from(notifications).where(eq23(notifications.projectId, project.id)).all();
     return reply.send(rows.map(formatNotification));
   });
   app.delete("/projects/:name/notifications/:id", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const notification = app.db.select().from(notifications).where(eq22(notifications.id, request.params.id)).get();
+    const notification = app.db.select().from(notifications).where(eq23(notifications.id, request.params.id)).get();
     if (!notification || notification.projectId !== project.id) {
       throw notFound("Notification", request.params.id);
     }
-    app.db.delete(notifications).where(eq22(notifications.id, notification.id)).run();
+    app.db.delete(notifications).where(eq23(notifications.id, notification.id)).run();
     writeAuditLog(app.db, {
       projectId: project.id,
       actor: "api",
@@ -19837,7 +20532,7 @@ async function notificationRoutes(app, opts = {}) {
   });
   app.post("/projects/:name/notifications/:id/test", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const notification = app.db.select().from(notifications).where(eq22(notifications.id, request.params.id)).get();
+    const notification = app.db.select().from(notifications).where(eq23(notifications.id, request.params.id)).get();
     if (!notification || notification.projectId !== project.id) {
       throw notFound("Notification", request.params.id);
     }
@@ -19890,7 +20585,7 @@ function formatNotification(row) {
 
 // ../api-routes/src/google.ts
 import crypto19 from "crypto";
-import { eq as eq23, and as and17, desc as desc11, sql as sql9, inArray as inArray11 } from "drizzle-orm";
+import { eq as eq24, and as and18, desc as desc11, sql as sql9, inArray as inArray11 } from "drizzle-orm";
 
 // ../api-routes/src/gbp-summary.ts
 function computeMetricTotals(rows) {
@@ -21730,7 +22425,7 @@ async function googleRoutes(app, opts) {
     if (!projectId) {
       return reply.status(400).send("Stale OAuth state \u2014 restart the connect flow.");
     }
-    const project = app.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = app.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
       return reply.status(400).send("Project no longer exists. Restart the connect flow.");
     }
@@ -21862,14 +22557,14 @@ async function googleRoutes(app, opts) {
     if (opts.onGscSyncRequested) {
       opts.onGscSyncRequested(runId, project.id, { days, full });
     }
-    const run = app.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq24(runs.id, runId)).get();
     return run;
   });
   app.get("/projects/:name/google/gsc/performance", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const { startDate, endDate, query, page, limit, offset } = request.query;
     const cutoffDate = !startDate ? windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null : null;
-    const conditions = [eq23(gscSearchData.projectId, project.id)];
+    const conditions = [eq24(gscSearchData.projectId, project.id)];
     if (startDate) conditions.push(sql9`${gscSearchData.date} >= ${startDate}`);
     else if (cutoffDate) conditions.push(sql9`${gscSearchData.date} >= ${cutoffDate}`);
     if (endDate) conditions.push(sql9`${gscSearchData.date} <= ${endDate}`);
@@ -21877,7 +22572,7 @@ async function googleRoutes(app, opts) {
     if (page) conditions.push(sql9`${gscSearchData.page} LIKE ${"%" + escapeLikePattern(page) + "%"} ESCAPE '\\'`);
     const limitVal = Math.max(parseInt(limit ?? "500", 10) || 0, 1);
     const offsetVal = Math.max(parseInt(offset ?? "0", 10) || 0, 0);
-    const rows = app.db.select().from(gscSearchData).where(and17(...conditions)).orderBy(desc11(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
+    const rows = app.db.select().from(gscSearchData).where(and18(...conditions)).orderBy(desc11(gscSearchData.date)).limit(limitVal).offset(offsetVal).all();
     return rows.map((r) => ({
       date: r.date,
       query: r.query,
@@ -21897,7 +22592,7 @@ async function googleRoutes(app, opts) {
     const windowStart = startDate ?? cutoffDate ?? "";
     const windowEnd = endDate ?? "9999-12-31";
     const dailyTotals = readGscDailyTotals(app.db, project.id, windowStart, windowEnd);
-    const conditions = [eq23(gscSearchData.projectId, project.id)];
+    const conditions = [eq24(gscSearchData.projectId, project.id)];
     if (startDate) conditions.push(sql9`${gscSearchData.date} >= ${startDate}`);
     else if (cutoffDate) conditions.push(sql9`${gscSearchData.date} >= ${cutoffDate}`);
     if (endDate) conditions.push(sql9`${gscSearchData.date} <= ${endDate}`);
@@ -21905,7 +22600,7 @@ async function googleRoutes(app, opts) {
       date: gscSearchData.date,
       clicks: sql9`COALESCE(SUM(${gscSearchData.clicks}), 0)`,
       impressions: sql9`COALESCE(SUM(${gscSearchData.impressions}), 0)`
-    }).from(gscSearchData).where(and17(...conditions)).groupBy(gscSearchData.date).orderBy(gscSearchData.date).all();
+    }).from(gscSearchData).where(and18(...conditions)).groupBy(gscSearchData.date).orderBy(gscSearchData.date).all();
     const daily = mergeGscDailyTotalsWithFallback(
       dailyTotals,
       dimensionedRows.map((r) => ({
@@ -21996,9 +22691,9 @@ async function googleRoutes(app, opts) {
   app.get("/projects/:name/google/gsc/inspections", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const conditions = [eq23(gscUrlInspections.projectId, project.id)];
-    if (url) conditions.push(eq23(gscUrlInspections.url, url));
-    const rows = app.db.select().from(gscUrlInspections).where(and17(...conditions)).orderBy(desc11(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
+    const conditions = [eq24(gscUrlInspections.projectId, project.id)];
+    if (url) conditions.push(eq24(gscUrlInspections.url, url));
+    const rows = app.db.select().from(gscUrlInspections).where(and18(...conditions)).orderBy(desc11(gscUrlInspections.inspectedAt)).limit(parseInt(limit ?? "100", 10)).all();
     return rows.map((r) => ({
       id: r.id,
       url: r.url,
@@ -22017,7 +22712,7 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/google/gsc/deindexed", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const allInspections = app.db.select().from(gscUrlInspections).where(eq23(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(gscUrlInspections).where(eq24(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
     const byUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
       const existing = byUrl.get(row.url);
@@ -22045,7 +22740,7 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/google/gsc/coverage", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const allInspections = app.db.select().from(gscUrlInspections).where(eq23(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(gscUrlInspections).where(eq24(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
     const canonicalUrl = (url) => url.replace(/^http:\/\//, "https://");
     const latestByUrl = /* @__PURE__ */ new Map();
     const historyByUrl = /* @__PURE__ */ new Map();
@@ -22094,7 +22789,7 @@ async function googleRoutes(app, opts) {
     const total = latestByUrl.size;
     const indexed = indexedUrls.length;
     const notIndexed = notIndexedUrls.length;
-    const latestSnapshot = app.db.select({ createdAt: gscCoverageSnapshots.createdAt }).from(gscCoverageSnapshots).where(eq23(gscCoverageSnapshots.projectId, project.id)).orderBy(desc11(gscCoverageSnapshots.createdAt)).limit(1).get();
+    const latestSnapshot = app.db.select({ createdAt: gscCoverageSnapshots.createdAt }).from(gscCoverageSnapshots).where(eq24(gscCoverageSnapshots.projectId, project.id)).orderBy(desc11(gscCoverageSnapshots.createdAt)).limit(1).get();
     const lastSyncedAt = latestSnapshot?.createdAt ?? null;
     const formatRow = (r) => ({
       id: r.id,
@@ -22145,7 +22840,7 @@ async function googleRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const parsed = parseInt(request.query.limit ?? "90", 10);
     const limit = Number.isNaN(parsed) || parsed <= 0 ? 90 : parsed;
-    const rows = app.db.select().from(gscCoverageSnapshots).where(eq23(gscCoverageSnapshots.projectId, project.id)).orderBy(desc11(gscCoverageSnapshots.date)).limit(limit).all();
+    const rows = app.db.select().from(gscCoverageSnapshots).where(eq24(gscCoverageSnapshots.projectId, project.id)).orderBy(desc11(gscCoverageSnapshots.date)).limit(limit).all();
     return rows.map((r) => ({
       date: r.date,
       indexed: r.indexed,
@@ -22214,7 +22909,7 @@ async function googleRoutes(app, opts) {
     if (opts.onInspectSitemapRequested) {
       opts.onInspectSitemapRequested(runId, project.id, { sitemapUrl });
     }
-    const run = app.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq24(runs.id, runId)).get();
     return { sitemaps, primarySitemapUrl: sitemapUrl, run };
   });
   app.post("/projects/:name/google/gsc/inspect-sitemap", async (request) => {
@@ -22241,7 +22936,7 @@ async function googleRoutes(app, opts) {
     if (opts.onInspectSitemapRequested) {
       opts.onInspectSitemapRequested(runId, project.id, { sitemapUrl: sitemapUrl ?? void 0 });
     }
-    const run = app.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq24(runs.id, runId)).get();
     return run;
   });
   app.put("/projects/:name/google/connections/:type/sitemap", async (request) => {
@@ -22288,7 +22983,7 @@ async function googleRoutes(app, opts) {
     const { accessToken } = await getValidToken(store, project.canonicalDomain, "gsc", googleClientId, googleClientSecret);
     let urlsToNotify = request.body?.urls ?? [];
     if (request.body?.allUnindexed) {
-      const allInspections = app.db.select().from(gscUrlInspections).where(eq23(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
+      const allInspections = app.db.select().from(gscUrlInspections).where(eq24(gscUrlInspections.projectId, project.id)).orderBy(desc11(gscUrlInspections.inspectedAt)).all();
       const latestByUrl = /* @__PURE__ */ new Map();
       for (const row of allInspections) {
         if (!latestByUrl.has(row.url)) {
@@ -22406,7 +23101,7 @@ async function googleRoutes(app, opts) {
     };
   }
   function listSelectionResponse(projectId) {
-    const rows = app.db.select().from(gbpLocations).where(eq23(gbpLocations.projectId, projectId)).all();
+    const rows = app.db.select().from(gbpLocations).where(eq24(gbpLocations.projectId, projectId)).all();
     const dtos = rows.map(rowToDto2);
     return {
       locations: dtos,
@@ -22415,15 +23110,15 @@ async function googleRoutes(app, opts) {
     };
   }
   function clearGbpProjectData(tx, projectId) {
-    tx.delete(gbpDailyMetrics).where(eq23(gbpDailyMetrics.projectId, projectId)).run();
-    tx.delete(gbpKeywordImpressions).where(eq23(gbpKeywordImpressions.projectId, projectId)).run();
-    tx.delete(gbpKeywordMonthly).where(eq23(gbpKeywordMonthly.projectId, projectId)).run();
-    tx.delete(gbpPlaceActions).where(eq23(gbpPlaceActions.projectId, projectId)).run();
-    tx.delete(gbpLodgingSnapshots).where(eq23(gbpLodgingSnapshots.projectId, projectId)).run();
-    tx.delete(gbpLocations).where(eq23(gbpLocations.projectId, projectId)).run();
+    tx.delete(gbpDailyMetrics).where(eq24(gbpDailyMetrics.projectId, projectId)).run();
+    tx.delete(gbpKeywordImpressions).where(eq24(gbpKeywordImpressions.projectId, projectId)).run();
+    tx.delete(gbpKeywordMonthly).where(eq24(gbpKeywordMonthly.projectId, projectId)).run();
+    tx.delete(gbpPlaceActions).where(eq24(gbpPlaceActions.projectId, projectId)).run();
+    tx.delete(gbpLodgingSnapshots).where(eq24(gbpLodgingSnapshots.projectId, projectId)).run();
+    tx.delete(gbpLocations).where(eq24(gbpLocations.projectId, projectId)).run();
   }
   function currentProjectAccount(projectId) {
-    const row = app.db.select({ accountName: gbpLocations.accountName }).from(gbpLocations).where(eq23(gbpLocations.projectId, projectId)).limit(1).get();
+    const row = app.db.select({ accountName: gbpLocations.accountName }).from(gbpLocations).where(eq24(gbpLocations.projectId, projectId)).limit(1).get();
     return row?.accountName ?? null;
   }
   app.post("/projects/:name/gbp/locations/discover", async (request) => {
@@ -22493,7 +23188,7 @@ async function googleRoutes(app, opts) {
     app.db.transaction((tx) => {
       if (switching) clearGbpProjectData(tx, project.id);
       for (const remote of remoteLocations) {
-        const existing = tx.select().from(gbpLocations).where(and17(eq23(gbpLocations.projectId, project.id), eq23(gbpLocations.locationName, remote.name))).get();
+        const existing = tx.select().from(gbpLocations).where(and18(eq24(gbpLocations.projectId, project.id), eq24(gbpLocations.locationName, remote.name))).get();
         const profile = buildLocationProfileFields(remote);
         if (existing) {
           tx.update(gbpLocations).set({
@@ -22506,7 +23201,7 @@ async function googleRoutes(app, opts) {
             mapsUri: remote.metadata?.mapsUri ?? null,
             ...profile,
             updatedAt: now
-          }).where(eq23(gbpLocations.id, existing.id)).run();
+          }).where(eq24(gbpLocations.id, existing.id)).run();
         } else {
           tx.insert(gbpLocations).values({
             id: crypto19.randomUUID(),
@@ -22590,11 +23285,11 @@ async function googleRoutes(app, opts) {
       throw validationError(parsed.error.issues[0]?.message ?? "Invalid selection request");
     }
     const { selected } = parsed.data;
-    const existing = app.db.select().from(gbpLocations).where(and17(eq23(gbpLocations.projectId, project.id), eq23(gbpLocations.locationName, locationName))).get();
+    const existing = app.db.select().from(gbpLocations).where(and18(eq24(gbpLocations.projectId, project.id), eq24(gbpLocations.locationName, locationName))).get();
     if (!existing) throw notFound("GBP location", locationName);
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
-      tx.update(gbpLocations).set({ selected, updatedAt: now }).where(eq23(gbpLocations.id, existing.id)).run();
+      tx.update(gbpLocations).set({ selected, updatedAt: now }).where(eq24(gbpLocations.id, existing.id)).run();
       writeAuditLog(tx, {
         projectId: project.id,
         actor: "api",
@@ -22603,7 +23298,7 @@ async function googleRoutes(app, opts) {
         entityId: locationName
       });
     });
-    const refreshed = app.db.select().from(gbpLocations).where(eq23(gbpLocations.id, existing.id)).get();
+    const refreshed = app.db.select().from(gbpLocations).where(eq24(gbpLocations.id, existing.id)).get();
     return rowToDto2(refreshed);
   });
   app.delete("/projects/:name/gbp/connection", async (request, reply) => {
@@ -22647,10 +23342,10 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/metrics", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpDailyMetrics.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpDailyMetrics.locationName, request.query.locationName));
-    if (request.query.metric) conditions.push(eq23(gbpDailyMetrics.metric, request.query.metric));
-    const rows = app.db.select().from(gbpDailyMetrics).where(and17(...conditions)).orderBy(desc11(gbpDailyMetrics.date)).all();
+    const conditions = [eq24(gbpDailyMetrics.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpDailyMetrics.locationName, request.query.locationName));
+    if (request.query.metric) conditions.push(eq24(gbpDailyMetrics.metric, request.query.metric));
+    const rows = app.db.select().from(gbpDailyMetrics).where(and18(...conditions)).orderBy(desc11(gbpDailyMetrics.date)).all();
     return {
       metrics: rows.map((r) => ({ locationName: r.locationName, date: r.date, metric: r.metric, value: r.value })),
       total: rows.length
@@ -22658,9 +23353,9 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/keywords", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpKeywordImpressions.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpKeywordImpressions.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpKeywordImpressions).where(and17(...conditions)).all();
+    const conditions = [eq24(gbpKeywordImpressions.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpKeywordImpressions.locationName, request.query.locationName));
+    const rows = app.db.select().from(gbpKeywordImpressions).where(and18(...conditions)).all();
     rows.sort((a, b) => (b.valueCount ?? -1) - (a.valueCount ?? -1));
     const thresholded = rows.filter((r) => r.valueThreshold !== null).length;
     return {
@@ -22678,9 +23373,9 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/place-actions", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpPlaceActions.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpPlaceActions.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpPlaceActions).where(and17(...conditions)).all();
+    const conditions = [eq24(gbpPlaceActions.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpPlaceActions.locationName, request.query.locationName));
+    const rows = app.db.select().from(gbpPlaceActions).where(and18(...conditions)).all();
     return {
       placeActions: rows.map((r) => ({
         locationName: r.locationName,
@@ -22695,9 +23390,9 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/lodging", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpLodgingSnapshots.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpLodgingSnapshots.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpLodgingSnapshots).where(and17(...conditions)).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
+    const conditions = [eq24(gbpLodgingSnapshots.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpLodgingSnapshots.locationName, request.query.locationName));
+    const rows = app.db.select().from(gbpLodgingSnapshots).where(and18(...conditions)).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -22712,9 +23407,9 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/attributes", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpAttributesSnapshots.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpAttributesSnapshots.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpAttributesSnapshots).where(and17(...conditions)).orderBy(desc11(gbpAttributesSnapshots.syncedAt)).all();
+    const conditions = [eq24(gbpAttributesSnapshots.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpAttributesSnapshots.locationName, request.query.locationName));
+    const rows = app.db.select().from(gbpAttributesSnapshots).where(and18(...conditions)).orderBy(desc11(gbpAttributesSnapshots.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -22732,9 +23427,9 @@ async function googleRoutes(app, opts) {
   });
   app.get("/projects/:name/gbp/places", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const conditions = [eq23(gbpPlaceDetails.projectId, project.id)];
-    if (request.query.locationName) conditions.push(eq23(gbpPlaceDetails.locationName, request.query.locationName));
-    const rows = app.db.select().from(gbpPlaceDetails).where(and17(...conditions)).orderBy(desc11(gbpPlaceDetails.syncedAt)).all();
+    const conditions = [eq24(gbpPlaceDetails.projectId, project.id)];
+    if (request.query.locationName) conditions.push(eq24(gbpPlaceDetails.locationName, request.query.locationName));
+    const rows = app.db.select().from(gbpPlaceDetails).where(and18(...conditions)).orderBy(desc11(gbpPlaceDetails.syncedAt)).all();
     const latestByLocation = /* @__PURE__ */ new Map();
     for (const row of rows) {
       if (!latestByLocation.has(row.locationName)) latestByLocation.set(row.locationName, row);
@@ -22753,7 +23448,7 @@ async function googleRoutes(app, opts) {
   app.get("/projects/:name/gbp/summary", async (request) => {
     const project = resolveProject(app.db, request.params.name);
     const locationName = request.query.locationName ?? null;
-    const locationNames = locationName ? [locationName] : app.db.select({ n: gbpLocations.locationName }).from(gbpLocations).where(and17(eq23(gbpLocations.projectId, project.id), eq23(gbpLocations.selected, true))).all().map((r) => r.n);
+    const locationNames = locationName ? [locationName] : app.db.select({ n: gbpLocations.locationName }).from(gbpLocations).where(and18(eq24(gbpLocations.projectId, project.id), eq24(gbpLocations.selected, true))).all().map((r) => r.n);
     const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
     if (locationNames.length === 0) {
       return buildGbpSummary({
@@ -22767,10 +23462,10 @@ async function googleRoutes(app, opts) {
         locationProfiles: []
       });
     }
-    const metricRows = app.db.select().from(gbpDailyMetrics).where(and17(eq23(gbpDailyMetrics.projectId, project.id), inArray11(gbpDailyMetrics.locationName, locationNames))).all();
-    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and17(eq23(gbpKeywordImpressions.projectId, project.id), inArray11(gbpKeywordImpressions.locationName, locationNames))).all();
-    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and17(eq23(gbpPlaceActions.projectId, project.id), inArray11(gbpPlaceActions.locationName, locationNames))).all();
-    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and17(eq23(gbpLodgingSnapshots.projectId, project.id), inArray11(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
+    const metricRows = app.db.select().from(gbpDailyMetrics).where(and18(eq24(gbpDailyMetrics.projectId, project.id), inArray11(gbpDailyMetrics.locationName, locationNames))).all();
+    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and18(eq24(gbpKeywordImpressions.projectId, project.id), inArray11(gbpKeywordImpressions.locationName, locationNames))).all();
+    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and18(eq24(gbpPlaceActions.projectId, project.id), inArray11(gbpPlaceActions.locationName, locationNames))).all();
+    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and18(eq24(gbpLodgingSnapshots.projectId, project.id), inArray11(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc11(gbpLodgingSnapshots.syncedAt)).all();
     const latestLodgingByLocation = /* @__PURE__ */ new Map();
     for (const row of lodgingRows) {
       if (!latestLodgingByLocation.has(row.locationName)) {
@@ -22784,7 +23479,7 @@ async function googleRoutes(app, opts) {
       regularHours: gbpLocations.regularHours,
       primaryPhone: gbpLocations.primaryPhone,
       openStatus: gbpLocations.openStatus
-    }).from(gbpLocations).where(and17(eq23(gbpLocations.projectId, project.id), inArray11(gbpLocations.locationName, locationNames))).all();
+    }).from(gbpLocations).where(and18(eq24(gbpLocations.projectId, project.id), inArray11(gbpLocations.locationName, locationNames))).all();
     return buildGbpSummary({
       locationName,
       locationCount: locationNames.length,
@@ -22800,7 +23495,17 @@ async function googleRoutes(app, opts) {
 
 // ../api-routes/src/ads.ts
 import crypto20 from "crypto";
-import { eq as eq24, and as and18, asc as asc3, gte as gte3, lte as lte2, inArray as inArray12 } from "drizzle-orm";
+import { eq as eq25, and as and19, asc as asc5, gte as gte5, lte as lte3, inArray as inArray12 } from "drizzle-orm";
+var AdsPausedPostconditionError = class extends Error {
+  constructor(entityId) {
+    super("OpenAI Ads API did not confirm the required paused state");
+    this.entityId = entityId;
+    this.name = "AdsPausedPostconditionError";
+  }
+  entityId;
+  code = "ADS_PAUSED_POSTCONDITION_FAILED";
+  status = 502;
+};
 function statusDto(row) {
   if (!row) return { connected: false };
   return {
@@ -22821,15 +23526,185 @@ function creativeDto(raw) {
     type: typeof c.type === "string" ? c.type : null,
     title: typeof c.title === "string" ? c.title : null,
     body: typeof c.body === "string" ? c.body : null,
-    targetUrl: typeof c.target_url === "string" ? c.target_url : null
+    targetUrl: typeof c.target_url === "string" ? c.target_url : null,
+    fileId: typeof c.file_id === "string" ? c.file_id : null
+  };
+}
+function locationIdsDto(raw) {
+  if (!raw || typeof raw !== "object") return [];
+  const locations = raw.locations;
+  if (!locations || typeof locations !== "object") return [];
+  const include = locations.include;
+  if (!Array.isArray(include)) return [];
+  return include.flatMap((entry) => {
+    if (!entry || typeof entry !== "object") return [];
+    const id = entry.id;
+    return typeof id === "string" && id.length > 0 ? [id] : [];
+  });
+}
+function operationDto(row) {
+  return {
+    id: row.id,
+    operationKey: row.operationKey,
+    kind: row.kind,
+    state: row.state,
+    entityType: row.entityType,
+    entityId: row.entityId,
+    upstreamUpdatedAt: row.upstreamUpdatedAt,
+    errorCode: row.errorCode,
+    errorMessage: row.errorMessage,
+    createdAt: row.createdAt,
+    updatedAt: row.updatedAt
+  };
+}
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (!value || typeof value !== "object") return value;
+  const out = {};
+  for (const key of Object.keys(value).sort()) {
+    const child = value[key];
+    if (child !== void 0) out[key] = canonicalize(child);
+  }
+  return out;
+}
+function requestHash(value) {
+  return crypto20.createHash("sha256").update(JSON.stringify(canonicalize(value))).digest("hex");
+}
+function errorDetails(err) {
+  const candidate = err;
+  const status = typeof candidate.status === "number" ? candidate.status : void 0;
+  const knownClientFailure = err instanceof AppError || status !== void 0 && status >= 400 && status < 500 && status !== 408 && status !== 429;
+  const rawCode = typeof candidate.code === "string" ? candidate.code : err instanceof AppError ? err.code : "upstream_error";
+  const code = rawCode.replace(/[^\w.:-]/g, "_").slice(0, 100) || "upstream_error";
+  const message = err instanceof AppError ? err.message.slice(0, 500) : knownClientFailure ? "OpenAI Ads API rejected the operation" : "OpenAI Ads API outcome could not be confirmed";
+  return {
+    state: knownClientFailure ? AdsOperationStates.failed : AdsOperationStates.unknown,
+    code,
+    message,
+    entityId: typeof candidate.entityId === "string" ? candidate.entityId.slice(0, 200) : void 0
   };
 }
+function resolveAdsOperator(opts, projectName) {
+  const apiKey = opts.adsCredentialStore?.getConnection(projectName)?.apiKey;
+  if (!apiKey) {
+    throw validationError('No ads connection for this project. Run "canonry ads connect" first.');
+  }
+  if (!opts.adsOperator) {
+    throw validationError("Ads lifecycle operations are not configured for this deployment");
+  }
+  return { apiKey, operator: opts.adsOperator };
+}
+async function executeAdsOperation(app, request, input) {
+  const hash = requestHash({ kind: input.kind, entityType: input.entityType, payload: input.payload });
+  const existing = app.db.select().from(adsOperations).where(and19(
+    eq25(adsOperations.projectId, input.projectId),
+    eq25(adsOperations.operationKey, input.operationKey)
+  )).get();
+  if (existing) {
+    if (existing.requestHash !== hash) {
+      throw alreadyExists("Ads operation key", input.operationKey);
+    }
+    return { operation: operationDto(existing), replayed: true };
+  }
+  const id = crypto20.randomUUID();
+  const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+  app.db.insert(adsOperations).values({
+    id,
+    projectId: input.projectId,
+    operationKey: input.operationKey,
+    requestHash: hash,
+    kind: input.kind,
+    state: AdsOperationStates.pending,
+    entityType: input.entityType,
+    createdAt,
+    updatedAt: createdAt
+  }).run();
+  let result;
+  try {
+    result = await input.run();
+    if (input.expectedStatus !== void 0 && result.status !== input.expectedStatus) {
+      if (input.remediateStatus) result = await input.remediateStatus(result);
+      if (result.status !== input.expectedStatus) {
+        throw new AdsPausedPostconditionError(result.id);
+      }
+    }
+    const succeededResult = result;
+    const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    app.db.transaction((tx) => {
+      tx.update(adsOperations).set({
+        state: AdsOperationStates.succeeded,
+        entityId: succeededResult.id,
+        upstreamUpdatedAt: succeededResult.updatedAt ?? null,
+        updatedAt
+      }).where(eq25(adsOperations.id, id)).run();
+      writeAuditLog(tx, auditFromRequest(request, {
+        projectId: input.projectId,
+        actor: "api",
+        action: `ads.${input.kind}.succeeded`,
+        entityType: input.entityType,
+        entityId: succeededResult.id,
+        diff: { operationId: id, operationKey: input.operationKey }
+      }));
+    });
+    const row = app.db.select().from(adsOperations).where(eq25(adsOperations.id, id)).get();
+    return { operation: operationDto(row), replayed: false };
+  } catch (err) {
+    const failure = errorDetails(err);
+    const entityId = failure.entityId ?? result?.id;
+    const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    app.db.transaction((tx) => {
+      tx.update(adsOperations).set({
+        state: failure.state,
+        entityId,
+        errorCode: failure.code,
+        errorMessage: failure.message,
+        updatedAt
+      }).where(eq25(adsOperations.id, id)).run();
+      writeAuditLog(tx, auditFromRequest(request, {
+        projectId: input.projectId,
+        actor: "api",
+        action: `ads.${input.kind}.${failure.state}`,
+        entityType: input.entityType,
+        entityId: entityId ?? id,
+        diff: { operationId: id, operationKey: input.operationKey, errorCode: failure.code }
+      }));
+    });
+    if (err instanceof AppError) throw err;
+    throw providerError("OpenAI Ads API mutation failed", {
+      operationId: id,
+      operationKey: input.operationKey,
+      state: failure.state,
+      code: failure.code
+    });
+  }
+}
+function parseBody(schema, value) {
+  const parsed = schema.safeParse(value);
+  if (!parsed.success) throw validationError("Invalid ads operation request", { issues: parsed.error.issues });
+  return parsed.data;
+}
+function assertExpectedUpdatedAt(entity, expected) {
+  if (entity.updatedAt !== expected) {
+    throw validationError("The upstream ad entity changed since it was reviewed", {
+      expectedUpdatedAt: expected,
+      actualUpdatedAt: entity.updatedAt
+    });
+  }
+}
+function assertPausedForUpdate(entity) {
+  if (entity.status !== AdsEntityStatuses.paused) {
+    throw validationError("Pause the upstream ad entity before updating it", {
+      actualStatus: entity.status
+    });
+  }
+}
 async function adsRoutes(app, opts) {
   app.post(
     "/projects/:name/ads/connect",
     async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
       const project = resolveProject(app.db, request.params.name);
-      const parsed = adsConnectRequestSchema.safeParse(request.body ?? {});
+      const parsed = adsConnectRequestSchema.safeParse(request.body);
       if (!parsed.success) throw validationError('"apiKey" is required');
       if (!opts.adsCredentialStore || !opts.verifyAdsAccount) {
         throw validationError("Ads credential storage is not configured for this deployment");
@@ -22850,7 +23725,7 @@ async function adsRoutes(app, opts) {
         createdAt: existingCfg?.createdAt ?? now,
         updatedAt: now
       });
-      const existingRow = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+      const existingRow = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
       app.db.transaction((tx) => {
         if (existingRow) {
           tx.update(adsConnections).set({
@@ -22860,7 +23735,7 @@ async function adsRoutes(app, opts) {
             timezone: account.timezone,
             status: account.status,
             updatedAt: now
-          }).where(eq24(adsConnections.id, existingRow.id)).run();
+          }).where(eq25(adsConnections.id, existingRow.id)).run();
         } else {
           tx.insert(adsConnections).values({
             id: crypto20.randomUUID(),
@@ -22882,16 +23757,17 @@ async function adsRoutes(app, opts) {
           entityId: account.id
         }));
       });
-      const row = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+      const row = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
       return statusDto(row);
     }
   );
   app.delete("/projects/:name/ads/connection", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
     const project = resolveProject(app.db, request.params.name);
-    const row = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+    const row = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
     if (row) {
       app.db.transaction((tx) => {
-        tx.delete(adsConnections).where(eq24(adsConnections.id, row.id)).run();
+        tx.delete(adsConnections).where(eq25(adsConnections.id, row.id)).run();
         writeAuditLog(tx, auditFromRequest(request, {
           projectId: project.id,
           actor: "api",
@@ -22907,18 +23783,232 @@ async function adsRoutes(app, opts) {
   });
   app.get("/projects/:name/ads/status", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const row = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+    const row = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
     return statusDto(row);
   });
+  app.get(
+    "/projects/:name/ads/operations/:operationKey",
+    async (request) => {
+      const project = resolveProject(app.db, request.params.name);
+      const row = app.db.select().from(adsOperations).where(and19(
+        eq25(adsOperations.projectId, project.id),
+        eq25(adsOperations.operationKey, request.params.operationKey)
+      )).get();
+      if (!row) throw notFound("Ads operation", request.params.operationKey);
+      const response = { operation: operationDto(row), replayed: true };
+      return response;
+    }
+  );
+  app.post("/projects/:name/ads/files", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
+    const project = resolveProject(app.db, request.params.name);
+    const body = parseBody(adsImageUploadRequestSchema, request.body);
+    const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+    return executeAdsOperation(app, request, {
+      projectId: project.id,
+      operationKey: body.operationKey,
+      kind: AdsOperationKinds.image_upload,
+      entityType: AdsEntityTypes.file,
+      payload: { imageUrl: body.imageUrl },
+      run: async () => {
+        const result = await operator.uploadImage(apiKey, body.imageUrl);
+        return { id: result.fileId };
+      }
+    });
+  });
+  app.post("/projects/:name/ads/campaigns", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
+    const project = resolveProject(app.db, request.params.name);
+    const body = parseBody(adsCampaignCreateRequestSchema, request.body);
+    const { operationKey, ...providerInput } = body;
+    const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+    return executeAdsOperation(app, request, {
+      projectId: project.id,
+      operationKey,
+      kind: AdsOperationKinds.campaign_create,
+      entityType: AdsEntityTypes.campaign,
+      payload: providerInput,
+      expectedStatus: AdsEntityStatuses.paused,
+      remediateStatus: (result) => operator.pauseCampaign(apiKey, result.id),
+      run: async () => operator.createCampaign(apiKey, providerInput)
+    });
+  });
+  app.post("/projects/:name/ads/ad-groups", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
+    const project = resolveProject(app.db, request.params.name);
+    const body = parseBody(adsAdGroupCreateRequestSchema, request.body);
+    const { operationKey, ...providerInput } = body;
+    const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+    return executeAdsOperation(app, request, {
+      projectId: project.id,
+      operationKey,
+      kind: AdsOperationKinds.ad_group_create,
+      entityType: AdsEntityTypes.ad_group,
+      payload: providerInput,
+      expectedStatus: AdsEntityStatuses.paused,
+      remediateStatus: (result) => operator.pauseAdGroup(apiKey, result.id),
+      run: async () => operator.createAdGroup(apiKey, providerInput)
+    });
+  });
+  app.post("/projects/:name/ads/ads", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
+    const project = resolveProject(app.db, request.params.name);
+    const body = parseBody(adsAdCreateRequestSchema, request.body);
+    const { operationKey, ...providerInput } = body;
+    const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+    return executeAdsOperation(app, request, {
+      projectId: project.id,
+      operationKey,
+      kind: AdsOperationKinds.ad_create,
+      entityType: AdsEntityTypes.ad,
+      payload: providerInput,
+      expectedStatus: AdsEntityStatuses.paused,
+      remediateStatus: (result) => operator.pauseAd(apiKey, result.id),
+      run: async () => operator.createAd(apiKey, providerInput)
+    });
+  });
+  app.post(
+    "/projects/:name/ads/campaigns/:id",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsCampaignUpdateRequestSchema, request.body);
+      const { operationKey, expectedUpdatedAt, ...update } = body;
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey,
+        kind: AdsOperationKinds.campaign_update,
+        entityType: AdsEntityTypes.campaign,
+        payload: { id: request.params.id, expectedUpdatedAt, update },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseCampaign(apiKey, result.id),
+        run: async () => {
+          const current = await operator.getCampaign(apiKey, request.params.id);
+          assertExpectedUpdatedAt(current, expectedUpdatedAt);
+          assertPausedForUpdate(current);
+          return operator.updateCampaign(apiKey, request.params.id, update);
+        }
+      });
+    }
+  );
+  app.post(
+    "/projects/:name/ads/ad-groups/:id",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsAdGroupUpdateRequestSchema, request.body);
+      const { operationKey, expectedUpdatedAt, ...update } = body;
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey,
+        kind: AdsOperationKinds.ad_group_update,
+        entityType: AdsEntityTypes.ad_group,
+        payload: { id: request.params.id, expectedUpdatedAt, update },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseAdGroup(apiKey, result.id),
+        run: async () => {
+          const current = await operator.getAdGroup(apiKey, request.params.id);
+          assertExpectedUpdatedAt(current, expectedUpdatedAt);
+          assertPausedForUpdate(current);
+          return operator.updateAdGroup(apiKey, request.params.id, update);
+        }
+      });
+    }
+  );
+  app.post(
+    "/projects/:name/ads/ads/:id",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsAdUpdateRequestSchema, request.body);
+      const { operationKey, expectedUpdatedAt, ...update } = body;
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey,
+        kind: AdsOperationKinds.ad_update,
+        entityType: AdsEntityTypes.ad,
+        payload: { id: request.params.id, expectedUpdatedAt, update },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseAd(apiKey, result.id),
+        run: async () => {
+          const current = await operator.getAd(apiKey, request.params.id);
+          assertExpectedUpdatedAt(current, expectedUpdatedAt);
+          assertPausedForUpdate(current);
+          return operator.updateAd(apiKey, request.params.id, update);
+        }
+      });
+    }
+  );
+  app.post(
+    "/projects/:name/ads/campaigns/:id/pause",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsPauseRequestSchema, request.body);
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey: body.operationKey,
+        kind: AdsOperationKinds.campaign_pause,
+        entityType: AdsEntityTypes.campaign,
+        payload: { id: request.params.id },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseCampaign(apiKey, result.id),
+        run: async () => operator.pauseCampaign(apiKey, request.params.id)
+      });
+    }
+  );
+  app.post(
+    "/projects/:name/ads/ad-groups/:id/pause",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsPauseRequestSchema, request.body);
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey: body.operationKey,
+        kind: AdsOperationKinds.ad_group_pause,
+        entityType: AdsEntityTypes.ad_group,
+        payload: { id: request.params.id },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseAdGroup(apiKey, result.id),
+        run: async () => operator.pauseAdGroup(apiKey, request.params.id)
+      });
+    }
+  );
+  app.post(
+    "/projects/:name/ads/ads/:id/pause",
+    async (request) => {
+      requireScope(request, ADS_WRITE_SCOPE);
+      const project = resolveProject(app.db, request.params.name);
+      const body = parseBody(adsPauseRequestSchema, request.body);
+      const { apiKey, operator } = resolveAdsOperator(opts, project.name);
+      return executeAdsOperation(app, request, {
+        projectId: project.id,
+        operationKey: body.operationKey,
+        kind: AdsOperationKinds.ad_pause,
+        entityType: AdsEntityTypes.ad,
+        payload: { id: request.params.id },
+        expectedStatus: AdsEntityStatuses.paused,
+        remediateStatus: (result) => operator.pauseAd(apiKey, result.id),
+        run: async () => operator.pauseAd(apiKey, request.params.id)
+      });
+    }
+  );
   app.post("/projects/:name/ads/sync", async (request) => {
+    requireScope(request, ADS_WRITE_SCOPE);
     const project = resolveProject(app.db, request.params.name);
-    const row = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+    const row = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
     if (!row) {
       throw validationError('No ads connection for this project. Run "canonry ads connect" first.');
     }
-    const inFlight = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and18(
-      eq24(runs.projectId, project.id),
-      eq24(runs.kind, RunKinds["ads-sync"]),
+    const inFlight = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and19(
+      eq25(runs.projectId, project.id),
+      eq25(runs.kind, RunKinds["ads-sync"]),
       inArray12(runs.status, [RunStatuses.queued, RunStatuses.running])
     )).get();
     if (inFlight) {
@@ -22940,9 +24030,9 @@ async function adsRoutes(app, opts) {
   });
   app.get("/projects/:name/ads/campaigns", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const campaignRows = app.db.select().from(adsCampaigns).where(eq24(adsCampaigns.projectId, project.id)).all();
-    const groupRows = app.db.select().from(adsAdGroups).where(eq24(adsAdGroups.projectId, project.id)).all();
-    const adRows = app.db.select().from(adsAds).where(eq24(adsAds.projectId, project.id)).all();
+    const campaignRows = app.db.select().from(adsCampaigns).where(eq25(adsCampaigns.projectId, project.id)).all();
+    const groupRows = app.db.select().from(adsAdGroups).where(eq25(adsAdGroups.projectId, project.id)).all();
+    const adRows = app.db.select().from(adsAds).where(eq25(adsAds.projectId, project.id)).all();
     const adsByGroup = /* @__PURE__ */ new Map();
     for (const ad of adRows) {
       const dto = {
@@ -22951,7 +24041,9 @@ async function adsRoutes(app, opts) {
         name: ad.name,
         status: ad.status,
         reviewStatus: ad.reviewStatus,
-        creative: creativeDto(ad.creative)
+        creative: creativeDto(ad.creative),
+        upstreamUpdatedAt: ad.upstreamUpdatedAt,
+        syncedAt: ad.syncedAt
       };
       const list = adsByGroup.get(ad.adGroupId) ?? [];
       list.push(dto);
@@ -22963,11 +24055,14 @@ async function adsRoutes(app, opts) {
         id: group.id,
         campaignId: group.campaignId,
         name: group.name,
+        description: group.description,
         status: group.status,
         billingEventType: group.billingEventType,
         maxBidMicros: group.maxBidMicros,
         contextHints: group.contextHints,
-        ads: adsByGroup.get(group.id) ?? []
+        ads: adsByGroup.get(group.id) ?? [],
+        upstreamUpdatedAt: group.upstreamUpdatedAt,
+        syncedAt: group.syncedAt
       };
       const list = groupsByCampaign.get(group.campaignId) ?? [];
       list.push(dto);
@@ -22976,11 +24071,17 @@ async function adsRoutes(app, opts) {
     const campaigns = campaignRows.map((campaign) => ({
       id: campaign.id,
       name: campaign.name,
+      description: campaign.description,
       status: campaign.status,
+      startTime: campaign.startTime,
+      endTime: campaign.endTime,
       biddingType: campaign.biddingType,
       dailySpendLimitMicros: campaign.dailySpendLimitMicros,
       lifetimeSpendLimitMicros: campaign.lifetimeSpendLimitMicros,
-      adGroups: groupsByCampaign.get(campaign.id) ?? []
+      locationIds: locationIdsDto(campaign.targeting),
+      adGroups: groupsByCampaign.get(campaign.id) ?? [],
+      upstreamUpdatedAt: campaign.upstreamUpdatedAt,
+      syncedAt: campaign.syncedAt
     }));
     const response = { campaigns };
     return response;
@@ -22996,12 +24097,12 @@ async function adsRoutes(app, opts) {
       }
       parsedLevel = result.data;
     }
-    const conditions = [eq24(adsInsightsDaily.projectId, project.id)];
-    if (parsedLevel) conditions.push(eq24(adsInsightsDaily.level, parsedLevel));
-    if (entityId) conditions.push(eq24(adsInsightsDaily.entityId, entityId));
-    if (from) conditions.push(gte3(adsInsightsDaily.date, from));
-    if (to) conditions.push(lte2(adsInsightsDaily.date, to));
-    const rows = app.db.select().from(adsInsightsDaily).where(and18(...conditions)).orderBy(asc3(adsInsightsDaily.date)).all();
+    const conditions = [eq25(adsInsightsDaily.projectId, project.id)];
+    if (parsedLevel) conditions.push(eq25(adsInsightsDaily.level, parsedLevel));
+    if (entityId) conditions.push(eq25(adsInsightsDaily.entityId, entityId));
+    if (from) conditions.push(gte5(adsInsightsDaily.date, from));
+    if (to) conditions.push(lte3(adsInsightsDaily.date, to));
+    const rows = app.db.select().from(adsInsightsDaily).where(and19(...conditions)).orderBy(asc5(adsInsightsDaily.date)).all();
     const dtoRows = rows.map((row) => ({
       level: row.level,
       entityId: row.entityId,
@@ -23013,19 +24114,19 @@ async function adsRoutes(app, opts) {
       ctr: adsCtr(row.clicks, row.impressions),
       cpcMicros: adsCpcMicros(row.spendMicros, row.clicks)
     }));
-    const conn = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
+    const conn = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
     const response = { rows: dtoRows, currencyCode: conn?.currencyCode ?? null };
     return response;
   });
   app.get("/projects/:name/ads/summary", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const row = app.db.select().from(adsConnections).where(eq24(adsConnections.projectId, project.id)).get();
-    const campaignCount = app.db.select().from(adsCampaigns).where(eq24(adsCampaigns.projectId, project.id)).all().length;
-    const adGroupCount = app.db.select().from(adsAdGroups).where(eq24(adsAdGroups.projectId, project.id)).all().length;
-    const adCount = app.db.select().from(adsAds).where(eq24(adsAds.projectId, project.id)).all().length;
-    const campaignInsights = app.db.select().from(adsInsightsDaily).where(and18(
-      eq24(adsInsightsDaily.projectId, project.id),
-      eq24(adsInsightsDaily.level, "campaign")
+    const row = app.db.select().from(adsConnections).where(eq25(adsConnections.projectId, project.id)).get();
+    const campaignCount = app.db.select().from(adsCampaigns).where(eq25(adsCampaigns.projectId, project.id)).all().length;
+    const adGroupCount = app.db.select().from(adsAdGroups).where(eq25(adsAdGroups.projectId, project.id)).all().length;
+    const adCount = app.db.select().from(adsAds).where(eq25(adsAds.projectId, project.id)).all().length;
+    const campaignInsights = app.db.select().from(adsInsightsDaily).where(and19(
+      eq25(adsInsightsDaily.projectId, project.id),
+      eq25(adsInsightsDaily.level, "campaign")
     )).all();
     let impressions = 0;
     let clicks = 0;
@@ -23065,7 +24166,7 @@ async function adsRoutes(app, opts) {
 
 // ../api-routes/src/bing.ts
 import crypto21 from "crypto";
-import { eq as eq25, and as and19, desc as desc12 } from "drizzle-orm";
+import { eq as eq26, and as and20, desc as desc12 } from "drizzle-orm";
 
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
@@ -23439,7 +24540,7 @@ async function bingRoutes(app, opts) {
     const store = requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     requireConnection(store, project.canonicalDomain);
-    const allInspections = app.db.select().from(bingUrlInspections).where(eq25(bingUrlInspections.projectId, project.id)).orderBy(desc12(bingUrlInspections.inspectedAt)).all();
+    const allInspections = app.db.select().from(bingUrlInspections).where(eq26(bingUrlInspections.projectId, project.id)).orderBy(desc12(bingUrlInspections.inspectedAt)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     const definitiveByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
@@ -23528,7 +24629,7 @@ async function bingRoutes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     const parsed = parseInt(request.query.limit ?? "90", 10);
     const limit = Number.isNaN(parsed) || parsed <= 0 ? 90 : parsed;
-    const rows = app.db.select().from(bingCoverageSnapshots).where(eq25(bingCoverageSnapshots.projectId, project.id)).orderBy(desc12(bingCoverageSnapshots.date)).limit(limit).all();
+    const rows = app.db.select().from(bingCoverageSnapshots).where(eq26(bingCoverageSnapshots.projectId, project.id)).orderBy(desc12(bingCoverageSnapshots.date)).limit(limit).all();
     return rows.map((r) => ({
       date: r.date,
       indexed: r.indexed,
@@ -23540,7 +24641,7 @@ async function bingRoutes(app, opts) {
     requireConnectionStore();
     const project = resolveProject(app.db, request.params.name);
     const { url, limit } = request.query;
-    const whereClause = url ? and19(eq25(bingUrlInspections.projectId, project.id), eq25(bingUrlInspections.url, url)) : eq25(bingUrlInspections.projectId, project.id);
+    const whereClause = url ? and20(eq26(bingUrlInspections.projectId, project.id), eq26(bingUrlInspections.url, url)) : eq26(bingUrlInspections.projectId, project.id);
     const filtered = app.db.select().from(bingUrlInspections).where(whereClause).orderBy(desc12(bingUrlInspections.inspectedAt)).limit(Math.max(1, Math.min(parseInt(limit ?? "100", 10) || 100, 1e3))).all();
     return filtered.map((r) => ({
       id: r.id,
@@ -23630,7 +24731,7 @@ async function bingRoutes(app, opts) {
         anchorCount: result.AnchorCount ?? null,
         discoveryDate
       }).run();
-      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq25(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq26(runs.id, runId)).run();
       return {
         id,
         url,
@@ -23646,7 +24747,7 @@ async function bingRoutes(app, opts) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       bingLog("error", "inspect-url.failed", { domain: project.canonicalDomain, url, error: msg });
-      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq25(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq26(runs.id, runId)).run();
       throw e;
     }
   });
@@ -23673,7 +24774,7 @@ async function bingRoutes(app, opts) {
     } else {
       bingLog("warn", "inspect-sitemap.no-callback", { domain: project.canonicalDomain, runId });
     }
-    const run = app.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq26(runs.id, runId)).get();
     return run;
   });
   app.post("/projects/:name/bing/request-indexing", async (request) => {
@@ -23685,7 +24786,7 @@ async function bingRoutes(app, opts) {
     }
     let urlsToSubmit = request.body?.urls ?? [];
     if (request.body?.allUnindexed) {
-      const allInspections = app.db.select().from(bingUrlInspections).where(eq25(bingUrlInspections.projectId, project.id)).orderBy(desc12(bingUrlInspections.inspectedAt)).all();
+      const allInspections = app.db.select().from(bingUrlInspections).where(eq26(bingUrlInspections.projectId, project.id)).orderBy(desc12(bingUrlInspections.inspectedAt)).all();
       const latestByUrl = /* @__PURE__ */ new Map();
       for (const row of allInspections) {
         if (!latestByUrl.has(row.url)) {
@@ -23772,14 +24873,14 @@ async function bingRoutes(app, opts) {
 import fs from "fs";
 import path from "path";
 import os from "os";
-import { eq as eq26, and as and20 } from "drizzle-orm";
+import { eq as eq27, and as and21 } from "drizzle-orm";
 function getScreenshotDir() {
   return path.join(os.homedir(), ".canonry", "screenshots");
 }
 async function cdpRoutes(app, opts) {
   app.get("/screenshots/:snapshotId", async (request, reply) => {
     const { snapshotId } = request.params;
-    const snapshot = app.db.select({ screenshotPath: querySnapshots.screenshotPath, projectId: runs.projectId }).from(querySnapshots).innerJoin(runs, eq26(querySnapshots.runId, runs.id)).where(eq26(querySnapshots.id, snapshotId)).get();
+    const snapshot = app.db.select({ screenshotPath: querySnapshots.screenshotPath, projectId: runs.projectId }).from(querySnapshots).innerJoin(runs, eq27(querySnapshots.runId, runs.id)).where(eq27(querySnapshots.id, snapshotId)).get();
     if (!snapshot?.screenshotPath) {
       const err = notFound("Screenshot", snapshotId);
       return reply.code(err.statusCode).send(err.toJSON());
@@ -23847,7 +24948,7 @@ async function cdpRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const { runId } = request.params;
-      const run = app.db.select().from(runs).where(and20(eq26(runs.id, runId), eq26(runs.projectId, project.id))).get();
+      const run = app.db.select().from(runs).where(and21(eq27(runs.id, runId), eq27(runs.projectId, project.id))).get();
       if (!run) {
         const err = notFound("Run", runId);
         return reply.code(err.statusCode).send(err.toJSON());
@@ -23860,8 +24961,8 @@ async function cdpRoutes(app, opts) {
         citedDomains: querySnapshots.citedDomains,
         screenshotPath: querySnapshots.screenshotPath,
         rawResponse: querySnapshots.rawResponse
-      }).from(querySnapshots).where(eq26(querySnapshots.runId, runId)).all());
-      const queryRows = app.db.select({ id: queries.id, query: queries.query }).from(queries).where(eq26(queries.projectId, project.id)).all();
+      }).from(querySnapshots).where(eq27(querySnapshots.runId, runId)).all());
+      const queryRows = app.db.select({ id: queries.id, query: queries.query }).from(queries).where(eq27(queries.projectId, project.id)).all();
       const queryMap = new Map(queryRows.map((q) => [q.id, q.query]));
       const byQuery = /* @__PURE__ */ new Map();
       for (const snap of snapshots) {
@@ -23944,7 +25045,7 @@ async function cdpRoutes(app, opts) {
 
 // ../api-routes/src/ga.ts
 import crypto22 from "crypto";
-import { eq as eq27, desc as desc13, and as and21, sql as sql10 } from "drizzle-orm";
+import { eq as eq28, desc as desc13, and as and22, sql as sql10 } from "drizzle-orm";
 function gaLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GA4Routes", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -24221,10 +25322,10 @@ async function ga4Routes(app, opts) {
     if (!saConn && !oauthConn) {
       throw notFound("GA4 connection", project.name);
     }
-    app.db.delete(gaTrafficSnapshots).where(eq27(gaTrafficSnapshots.projectId, project.id)).run();
-    app.db.delete(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).run();
-    app.db.delete(gaAiReferrals).where(eq27(gaAiReferrals.projectId, project.id)).run();
-    app.db.delete(gaSocialReferrals).where(eq27(gaSocialReferrals.projectId, project.id)).run();
+    app.db.delete(gaTrafficSnapshots).where(eq28(gaTrafficSnapshots.projectId, project.id)).run();
+    app.db.delete(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).run();
+    app.db.delete(gaAiReferrals).where(eq28(gaAiReferrals.projectId, project.id)).run();
+    app.db.delete(gaSocialReferrals).where(eq28(gaSocialReferrals.projectId, project.id)).run();
     const propertyId = saConn?.propertyId ?? oauthConn?.propertyId ?? null;
     opts.ga4CredentialStore?.deleteConnection(project.name);
     opts.googleConnectionStore?.deleteConnection(project.canonicalDomain, "ga4");
@@ -24245,7 +25346,7 @@ async function ga4Routes(app, opts) {
     if (!connected) {
       return { connected: false, propertyId: null, clientEmail: null, authMethod: null, lastSyncedAt: null };
     }
-    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).orderBy(desc13(gaTrafficSummaries.syncedAt)).limit(1).get();
+    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).orderBy(desc13(gaTrafficSummaries.syncedAt)).limit(1).get();
     return {
       connected: true,
       propertyId: saConn?.propertyId ?? oauthConn?.propertyId ?? null,
@@ -24309,8 +25410,8 @@ async function ga4Routes(app, opts) {
       app.db.transaction((tx) => {
         if (syncTraffic) {
           tx.delete(gaTrafficSnapshots).where(
-            and21(
-              eq27(gaTrafficSnapshots.projectId, project.id),
+            and22(
+              eq28(gaTrafficSnapshots.projectId, project.id),
               sql10`${gaTrafficSnapshots.date} >= ${summary.periodStart}`,
               sql10`${gaTrafficSnapshots.date} <= ${summary.periodEnd}`
             )
@@ -24333,8 +25434,8 @@ async function ga4Routes(app, opts) {
         }
         if (syncAi) {
           tx.delete(gaAiReferrals).where(
-            and21(
-              eq27(gaAiReferrals.projectId, project.id),
+            and22(
+              eq28(gaAiReferrals.projectId, project.id),
               sql10`${gaAiReferrals.date} >= ${summary.periodStart}`,
               sql10`${gaAiReferrals.date} <= ${summary.periodEnd}`
             )
@@ -24365,8 +25466,8 @@ async function ga4Routes(app, opts) {
         }
         if (syncSocial) {
           tx.delete(gaSocialReferrals).where(
-            and21(
-              eq27(gaSocialReferrals.projectId, project.id),
+            and22(
+              eq28(gaSocialReferrals.projectId, project.id),
               sql10`${gaSocialReferrals.date} >= ${summary.periodStart}`,
               sql10`${gaSocialReferrals.date} <= ${summary.periodEnd}`
             )
@@ -24387,7 +25488,7 @@ async function ga4Routes(app, opts) {
           }
         }
         if (syncSummary) {
-          tx.delete(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).run();
+          tx.delete(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).run();
           tx.insert(gaTrafficSummaries).values({
             id: crypto22.randomUUID(),
             projectId: project.id,
@@ -24399,7 +25500,7 @@ async function ga4Routes(app, opts) {
             syncedAt: now,
             syncRunId: runId
           }).run();
-          tx.delete(gaTrafficWindowSummaries).where(eq27(gaTrafficWindowSummaries.projectId, project.id)).run();
+          tx.delete(gaTrafficWindowSummaries).where(eq28(gaTrafficWindowSummaries.projectId, project.id)).run();
           for (const ws of windowSummaries) {
             tx.insert(gaTrafficWindowSummaries).values({
               id: crypto22.randomUUID(),
@@ -24417,7 +25518,7 @@ async function ga4Routes(app, opts) {
           }
         }
       });
-      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq27(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: now }).where(eq28(runs.id, runId)).run();
       const syncedComponents = only ? [
         ...syncTraffic ? ["traffic"] : [],
         ...syncSummary ? ["summary"] : [],
@@ -24446,7 +25547,7 @@ async function ga4Routes(app, opts) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       gaLog("error", "sync.fetch-failed", { projectId: project.id, runId, error: msg });
-      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq27(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq28(runs.id, runId)).run();
       throw e;
     }
   });
@@ -24457,11 +25558,11 @@ async function ga4Routes(app, opts) {
     const window = parseWindow(request.query.window);
     const cutoff = windowCutoff(window);
     const cutoffDate = cutoff?.slice(0, 10) ?? null;
-    const snapshotConditions = [eq27(gaTrafficSnapshots.projectId, project.id)];
+    const snapshotConditions = [eq28(gaTrafficSnapshots.projectId, project.id)];
     if (cutoffDate) snapshotConditions.push(sql10`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
-    const aiConditions = [eq27(gaAiReferrals.projectId, project.id)];
+    const aiConditions = [eq28(gaAiReferrals.projectId, project.id)];
     if (cutoffDate) aiConditions.push(sql10`${gaAiReferrals.date} >= ${cutoffDate}`);
-    const socialConditions = [eq27(gaSocialReferrals.projectId, project.id)];
+    const socialConditions = [eq28(gaSocialReferrals.projectId, project.id)];
     if (cutoffDate) socialConditions.push(sql10`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const windowSummaryRow = cutoffDate ? app.db.select({
       totalSessions: gaTrafficWindowSummaries.totalSessions,
@@ -24469,35 +25570,35 @@ async function ga4Routes(app, opts) {
       totalDirectSessions: gaTrafficWindowSummaries.totalDirectSessions,
       totalUsers: gaTrafficWindowSummaries.totalUsers
     }).from(gaTrafficWindowSummaries).where(
-      and21(
-        eq27(gaTrafficWindowSummaries.projectId, project.id),
-        eq27(gaTrafficWindowSummaries.windowKey, window)
+      and22(
+        eq28(gaTrafficWindowSummaries.projectId, project.id),
+        eq28(gaTrafficWindowSummaries.windowKey, window)
       )
     ).get() : null;
     const snapshotTotalsRow = cutoffDate && !windowSummaryRow ? app.db.select({
       totalSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)`,
       totalOrganicSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)`,
       totalUsers: sql10`COALESCE(SUM(${gaTrafficSnapshots.users}), 0)`
-    }).from(gaTrafficSnapshots).where(and21(...snapshotConditions)).get() : null;
+    }).from(gaTrafficSnapshots).where(and22(...snapshotConditions)).get() : null;
     const summaryRow = cutoffDate ? windowSummaryRow ?? snapshotTotalsRow : app.db.select({
       totalSessions: gaTrafficSummaries.totalSessions,
       totalOrganicSessions: gaTrafficSummaries.totalOrganicSessions,
       totalUsers: gaTrafficSummaries.totalUsers
-    }).from(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).get();
+    }).from(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).get();
     const directTotalRow = windowSummaryRow ? { totalDirectSessions: windowSummaryRow.totalDirectSessions } : app.db.select({
       totalDirectSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`
-    }).from(gaTrafficSnapshots).where(and21(...snapshotConditions)).get();
+    }).from(gaTrafficSnapshots).where(and22(...snapshotConditions)).get();
     const summaryMeta = app.db.select({
       periodStart: gaTrafficSummaries.periodStart,
       periodEnd: gaTrafficSummaries.periodEnd
-    }).from(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).get();
+    }).from(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).get();
     const rows = app.db.select({
       landingPage: sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`,
       sessions: sql10`SUM(${gaTrafficSnapshots.sessions})`,
       organicSessions: sql10`SUM(${gaTrafficSnapshots.organicSessions})`,
       directSessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)`,
       users: sql10`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and21(...snapshotConditions)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
+    }).from(gaTrafficSnapshots).where(and22(...snapshotConditions)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).limit(limit).all();
     const aiReferralRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
@@ -24505,7 +25606,7 @@ async function ga4Routes(app, opts) {
       sourceDimension: gaAiReferrals.sourceDimension,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and21(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.trafficClass, gaAiReferrals.sourceDimension).all();
+    }).from(gaAiReferrals).where(and22(...aiConditions)).groupBy(gaAiReferrals.source, gaAiReferrals.medium, gaAiReferrals.trafficClass, gaAiReferrals.sourceDimension).all();
     const aiReferralLandingPageRows = app.db.select({
       source: gaAiReferrals.source,
       medium: gaAiReferrals.medium,
@@ -24514,7 +25615,7 @@ async function ga4Routes(app, opts) {
       landingPage: sql10`COALESCE(${gaAiReferrals.landingPageNormalized}, ${gaAiReferrals.landingPage})`,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and21(...aiConditions)).groupBy(
+    }).from(gaAiReferrals).where(and22(...aiConditions)).groupBy(
       gaAiReferrals.source,
       gaAiReferrals.medium,
       gaAiReferrals.trafficClass,
@@ -24530,7 +25631,7 @@ async function ga4Routes(app, opts) {
       channelGroup: gaAiReferrals.channelGroup,
       sessions: gaAiReferrals.sessions,
       users: gaAiReferrals.users
-    }).from(gaAiReferrals).where(and21(...aiConditions)).all();
+    }).from(gaAiReferrals).where(and22(...aiConditions)).all();
     const aiReferrals = pickWinningDimension(
       aiReferralRows,
       (r) => `${r.source}\0${r.medium}\0${r.trafficClass}`
@@ -24546,12 +25647,12 @@ async function ga4Routes(app, opts) {
       channelGroup: gaSocialReferrals.channelGroup,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`,
       users: sql10`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and21(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql10`SUM(${gaSocialReferrals.sessions}) DESC`).all();
+    }).from(gaSocialReferrals).where(and22(...socialConditions)).groupBy(gaSocialReferrals.source, gaSocialReferrals.medium, gaSocialReferrals.channelGroup).orderBy(sql10`SUM(${gaSocialReferrals.sessions}) DESC`).all();
     const socialTotals = app.db.select({
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`,
       users: sql10`SUM(${gaSocialReferrals.users})`
-    }).from(gaSocialReferrals).where(and21(...socialConditions)).get();
-    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq27(gaTrafficSummaries.projectId, project.id)).orderBy(desc13(gaTrafficSummaries.syncedAt)).limit(1).get();
+    }).from(gaSocialReferrals).where(and22(...socialConditions)).get();
+    const latestSync = app.db.select({ syncedAt: gaTrafficSummaries.syncedAt }).from(gaTrafficSummaries).where(eq28(gaTrafficSummaries.projectId, project.id)).orderBy(desc13(gaTrafficSummaries.syncedAt)).limit(1).get();
     const total = summaryRow?.totalSessions ?? 0;
     const totalDirectSessions = directTotalRow?.totalDirectSessions ?? 0;
     const totalOrganicSessions = summaryRow?.totalOrganicSessions ?? 0;
@@ -24649,7 +25750,7 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq27(gaAiReferrals.projectId, project.id)];
+    const conditions = [eq28(gaAiReferrals.projectId, project.id)];
     if (cutoffDate) conditions.push(sql10`${gaAiReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaAiReferrals.date,
@@ -24660,7 +25761,7 @@ async function ga4Routes(app, opts) {
       sourceDimension: gaAiReferrals.sourceDimension,
       sessions: sql10`SUM(${gaAiReferrals.sessions})`,
       users: sql10`SUM(${gaAiReferrals.users})`
-    }).from(gaAiReferrals).where(and21(...conditions)).groupBy(
+    }).from(gaAiReferrals).where(and22(...conditions)).groupBy(
       gaAiReferrals.date,
       gaAiReferrals.source,
       gaAiReferrals.medium,
@@ -24674,7 +25775,7 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq27(gaSocialReferrals.projectId, project.id)];
+    const conditions = [eq28(gaSocialReferrals.projectId, project.id)];
     if (cutoffDate) conditions.push(sql10`${gaSocialReferrals.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaSocialReferrals.date,
@@ -24683,7 +25784,7 @@ async function ga4Routes(app, opts) {
       channelGroup: gaSocialReferrals.channelGroup,
       sessions: gaSocialReferrals.sessions,
       users: gaSocialReferrals.users
-    }).from(gaSocialReferrals).where(and21(...conditions)).orderBy(gaSocialReferrals.date).all();
+    }).from(gaSocialReferrals).where(and22(...conditions)).orderBy(gaSocialReferrals.date).all();
     return rows;
   });
   app.get("/projects/:name/ga/social-referral-trend", async (request, _reply) => {
@@ -24696,8 +25797,8 @@ async function ga4Routes(app, opts) {
       d.setDate(d.getDate() - n);
       return fmt(d);
     };
-    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and21(
-      eq27(gaSocialReferrals.projectId, project.id),
+    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and22(
+      eq28(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${from}`,
       sql10`${gaSocialReferrals.date} < ${to}`
     )).get();
@@ -24709,16 +25810,16 @@ async function ga4Routes(app, opts) {
     const sourceCurrent = app.db.select({
       source: gaSocialReferrals.source,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and21(
-      eq27(gaSocialReferrals.projectId, project.id),
+    }).from(gaSocialReferrals).where(and22(
+      eq28(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`,
       sql10`${gaSocialReferrals.date} < ${fmt(today)}`
     )).groupBy(gaSocialReferrals.source).all();
     const sourcePrev = app.db.select({
       source: gaSocialReferrals.source,
       sessions: sql10`SUM(${gaSocialReferrals.sessions})`
-    }).from(gaSocialReferrals).where(and21(
-      eq27(gaSocialReferrals.projectId, project.id),
+    }).from(gaSocialReferrals).where(and22(
+      eq28(gaSocialReferrals.projectId, project.id),
       sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`,
       sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`
     )).groupBy(gaSocialReferrals.source).all();
@@ -24759,16 +25860,16 @@ async function ga4Routes(app, opts) {
       return fmt(d);
     };
     const pct = (cur, prev) => prev === 0 ? null : Math.round((cur - prev) / prev * 100);
-    const sumTotal = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and21(eq27(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumOrganic = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and21(eq27(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumDirect = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and21(eq27(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
-    const sumAi = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and21(
-      eq27(gaAiReferrals.projectId, project.id),
+    const sumTotal = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.sessions}), 0)` }).from(gaTrafficSnapshots).where(and22(eq28(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumOrganic = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.organicSessions}), 0)` }).from(gaTrafficSnapshots).where(and22(eq28(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumDirect = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaTrafficSnapshots.directSessions}), 0)` }).from(gaTrafficSnapshots).where(and22(eq28(gaTrafficSnapshots.projectId, project.id), sql10`${gaTrafficSnapshots.date} >= ${from}`, sql10`${gaTrafficSnapshots.date} < ${to}`)).get();
+    const sumAi = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and22(
+      eq28(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${from}`,
       sql10`${gaAiReferrals.date} < ${to}`,
-      eq27(gaAiReferrals.sourceDimension, "session")
+      eq28(gaAiReferrals.sourceDimension, "session")
     )).get();
-    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and21(eq27(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${from}`, sql10`${gaSocialReferrals.date} < ${to}`)).get();
+    const sumSocial = (from, to) => app.db.select({ sessions: sql10`COALESCE(SUM(${gaSocialReferrals.sessions}), 0)` }).from(gaSocialReferrals).where(and22(eq28(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${from}`, sql10`${gaSocialReferrals.date} < ${to}`)).get();
     const todayStr = fmt(today);
     const buildTrend = (sum) => {
       const c7 = sum(daysAgo(7), todayStr)?.sessions ?? 0;
@@ -24777,17 +25878,17 @@ async function ga4Routes(app, opts) {
       const p30 = sum(daysAgo(60), daysAgo(30))?.sessions ?? 0;
       return { sessions7d: c7, sessionsPrev7d: p7, trend7dPct: pct(c7, p7), sessions30d: c30, sessionsPrev30d: p30, trend30dPct: pct(c30, p30) };
     };
-    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and21(
-      eq27(gaAiReferrals.projectId, project.id),
+    const aiSourceCurrent = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and22(
+      eq28(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${daysAgo(7)}`,
       sql10`${gaAiReferrals.date} < ${todayStr}`,
-      eq27(gaAiReferrals.sourceDimension, "session")
+      eq28(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
-    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and21(
-      eq27(gaAiReferrals.projectId, project.id),
+    const aiSourcePrev = app.db.select({ source: gaAiReferrals.source, sessions: sql10`COALESCE(SUM(${gaAiReferrals.sessions}), 0)` }).from(gaAiReferrals).where(and22(
+      eq28(gaAiReferrals.projectId, project.id),
       sql10`${gaAiReferrals.date} >= ${daysAgo(14)}`,
       sql10`${gaAiReferrals.date} < ${daysAgo(7)}`,
-      eq27(gaAiReferrals.sourceDimension, "session")
+      eq28(gaAiReferrals.sourceDimension, "session")
     )).groupBy(gaAiReferrals.source).all();
     const findBiggestMover = (current, prev) => {
       const prevMap = new Map(prev.map((r) => [r.source, r.sessions]));
@@ -24803,8 +25904,8 @@ async function ga4Routes(app, opts) {
       }
       return mover;
     };
-    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and21(eq27(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`, sql10`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
-    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and21(eq27(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`, sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourceCurrent = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and22(eq28(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(7)}`, sql10`${gaSocialReferrals.date} < ${todayStr}`)).groupBy(gaSocialReferrals.source).all();
+    const socialSourcePrev = app.db.select({ source: gaSocialReferrals.source, sessions: sql10`SUM(${gaSocialReferrals.sessions})` }).from(gaSocialReferrals).where(and22(eq28(gaSocialReferrals.projectId, project.id), sql10`${gaSocialReferrals.date} >= ${daysAgo(14)}`, sql10`${gaSocialReferrals.date} < ${daysAgo(7)}`)).groupBy(gaSocialReferrals.source).all();
     return {
       total: buildTrend(sumTotal),
       organic: buildTrend(sumOrganic),
@@ -24819,14 +25920,14 @@ async function ga4Routes(app, opts) {
     const project = resolveProject(app.db, request.params.name);
     requireGa4Connection(opts, project.name, project.canonicalDomain);
     const cutoffDate = windowCutoff(parseWindow(request.query.window))?.slice(0, 10) ?? null;
-    const conditions = [eq27(gaTrafficSnapshots.projectId, project.id)];
+    const conditions = [eq28(gaTrafficSnapshots.projectId, project.id)];
     if (cutoffDate) conditions.push(sql10`${gaTrafficSnapshots.date} >= ${cutoffDate}`);
     const rows = app.db.select({
       date: gaTrafficSnapshots.date,
       sessions: sql10`SUM(${gaTrafficSnapshots.sessions})`,
       organicSessions: sql10`SUM(${gaTrafficSnapshots.organicSessions})`,
       users: sql10`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(and21(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
+    }).from(gaTrafficSnapshots).where(and22(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
     return rows.map((r) => ({
       date: r.date,
       sessions: r.sessions ?? 0,
@@ -24842,7 +25943,7 @@ async function ga4Routes(app, opts) {
       sessions: sql10`SUM(${gaTrafficSnapshots.sessions})`,
       organicSessions: sql10`SUM(${gaTrafficSnapshots.organicSessions})`,
       users: sql10`SUM(${gaTrafficSnapshots.users})`
-    }).from(gaTrafficSnapshots).where(eq27(gaTrafficSnapshots.projectId, project.id)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
+    }).from(gaTrafficSnapshots).where(eq28(gaTrafficSnapshots.projectId, project.id)).groupBy(sql10`COALESCE(${gaTrafficSnapshots.landingPageNormalized}, ${gaTrafficSnapshots.landingPage})`).orderBy(sql10`SUM(${gaTrafficSnapshots.sessions}) DESC`).all();
     return {
       pages: trafficPages.map((r) => ({
         landingPage: r.landingPage,
@@ -26490,7 +27591,7 @@ async function wordpressRoutes(app, opts) {
 
 // ../api-routes/src/backlinks.ts
 import crypto24 from "crypto";
-import { and as and23, asc as asc4, desc as desc14, eq as eq28, sql as sql11 } from "drizzle-orm";
+import { and as and24, asc as asc6, desc as desc14, eq as eq29, sql as sql11 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
 import os2 from "os";
@@ -26893,7 +27994,7 @@ function pruneCachedRelease(release, opts = {}) {
 }
 
 // ../api-routes/src/backlinks-filter.ts
-import { and as and22, ne as ne3, notLike } from "drizzle-orm";
+import { and as and23, ne as ne3, notLike } from "drizzle-orm";
 var BACKLINK_FILTER_PATTERNS = [
   "*.google.com",
   "*.googleusercontent.com",
@@ -26916,7 +28017,7 @@ function backlinkCrawlerExclusionClause() {
       conditions.push(ne3(backlinkDomains.linkingDomain, pattern));
     }
   }
-  const combined = and22(...conditions);
+  const combined = and23(...conditions);
   if (!combined) throw new Error("BACKLINK_FILTER_PATTERNS is unexpectedly empty");
   return combined;
 }
@@ -26987,11 +28088,11 @@ function mapRunRow(row) {
 }
 function latestSummaryForProject(db, projectId, source, release) {
   const conditions = [
-    eq28(backlinkSummaries.projectId, projectId),
-    eq28(backlinkSummaries.source, source)
+    eq29(backlinkSummaries.projectId, projectId),
+    eq29(backlinkSummaries.source, source)
   ];
-  if (release) conditions.push(eq28(backlinkSummaries.release, release));
-  return db.select().from(backlinkSummaries).where(and23(...conditions)).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
+  if (release) conditions.push(eq29(backlinkSummaries.release, release));
+  return db.select().from(backlinkSummaries).where(and24(...conditions)).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
 }
 function parseExcludeCrawlers(value) {
   if (!value) return false;
@@ -26999,12 +28100,12 @@ function parseExcludeCrawlers(value) {
   return lower === "1" || lower === "true" || lower === "yes";
 }
 function computeFilteredSummary(db, base) {
-  const baseDomainCondition = and23(
-    eq28(backlinkDomains.projectId, base.projectId),
-    eq28(backlinkDomains.source, base.source),
-    eq28(backlinkDomains.release, base.release)
+  const baseDomainCondition = and24(
+    eq29(backlinkDomains.projectId, base.projectId),
+    eq29(backlinkDomains.source, base.source),
+    eq29(backlinkDomains.release, base.release)
   );
-  const filteredCondition = and23(baseDomainCondition, backlinkCrawlerExclusionClause());
+  const filteredCondition = and24(baseDomainCondition, backlinkCrawlerExclusionClause());
   const unfilteredAgg = db.select({
     count: sql11`count(*)`,
     total: sql11`coalesce(sum(${backlinkDomains.numHosts}), 0)`
@@ -27034,13 +28135,13 @@ function computeFilteredSummary(db, base) {
   };
 }
 function buildSourceAvailability(db, projectId, source, connected, excludeCrawlers) {
-  const summary = db.select().from(backlinkSummaries).where(and23(eq28(backlinkSummaries.projectId, projectId), eq28(backlinkSummaries.source, source))).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
+  const summary = db.select().from(backlinkSummaries).where(and24(eq29(backlinkSummaries.projectId, projectId), eq29(backlinkSummaries.source, source))).orderBy(desc14(backlinkSummaries.queriedAt)).limit(1).get();
   let totalLinkingDomains = summary?.totalLinkingDomains ?? 0;
   if (summary && excludeCrawlers) {
-    const filtered = db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(and23(
-      eq28(backlinkDomains.projectId, projectId),
-      eq28(backlinkDomains.source, source),
-      eq28(backlinkDomains.release, summary.release),
+    const filtered = db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(and24(
+      eq29(backlinkDomains.projectId, projectId),
+      eq29(backlinkDomains.source, source),
+      eq29(backlinkDomains.release, summary.release),
       backlinkCrawlerExclusionClause()
     )).get();
     totalLinkingDomains = Number(filtered?.count ?? 0);
@@ -27055,7 +28156,7 @@ function buildSourceAvailability(db, projectId, source, connected, excludeCrawle
   };
 }
 function computeSourceAvailability(db, project, bingStore, excludeCrawlers) {
-  const ccReadySync = db.select({ id: ccReleaseSyncs.id }).from(ccReleaseSyncs).where(eq28(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).limit(1).get();
+  const ccReadySync = db.select({ id: ccReleaseSyncs.id }).from(ccReleaseSyncs).where(eq29(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).limit(1).get();
   const ccConnected = project.autoExtractBacklinks === true && !!ccReadySync;
   const bingConnected = !!bingStore?.getConnection(project.canonicalDomain);
   const sources = [
@@ -27111,7 +28212,7 @@ async function backlinksRoutes(app, opts) {
         "@duckdb/node-api is not installed. Run `canonry backlinks install` to enable the backlinks feature."
       );
     }
-    const existing = app.db.select().from(ccReleaseSyncs).where(eq28(ccReleaseSyncs.release, release)).get();
+    const existing = app.db.select().from(ccReleaseSyncs).where(eq29(ccReleaseSyncs.release, release)).get();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     if (existing) {
       if (NON_TERMINAL_SYNC_STATUSES.has(existing.status)) {
@@ -27122,9 +28223,9 @@ async function backlinksRoutes(app, opts) {
         phaseDetail: null,
         error: null,
         updatedAt: now
-      }).where(eq28(ccReleaseSyncs.id, existing.id)).run();
+      }).where(eq29(ccReleaseSyncs.id, existing.id)).run();
       opts.onReleaseSyncRequested(existing.id, release);
-      const refreshed = app.db.select().from(ccReleaseSyncs).where(eq28(ccReleaseSyncs.id, existing.id)).get();
+      const refreshed = app.db.select().from(ccReleaseSyncs).where(eq29(ccReleaseSyncs.id, existing.id)).get();
       return reply.status(200).send(mapSyncRow(refreshed));
     }
     const id = crypto24.randomUUID();
@@ -27136,7 +28237,7 @@ async function backlinksRoutes(app, opts) {
       updatedAt: now
     }).run();
     opts.onReleaseSyncRequested(id, release);
-    const inserted = app.db.select().from(ccReleaseSyncs).where(eq28(ccReleaseSyncs.id, id)).get();
+    const inserted = app.db.select().from(ccReleaseSyncs).where(eq29(ccReleaseSyncs.id, id)).get();
     return reply.status(201).send(mapSyncRow(inserted));
   });
   app.get("/backlinks/syncs/latest", async (_request, reply) => {
@@ -27194,7 +28295,7 @@ async function backlinksRoutes(app, opts) {
       createdAt: now
     }).run();
     opts.onBacklinkExtractRequested(runId, project.id, release);
-    const run = app.db.select().from(runs).where(eq28(runs.id, runId)).get();
+    const run = app.db.select().from(runs).where(eq29(runs.id, runId)).get();
     return reply.status(201).send(mapRunRow(run));
   });
   app.get(
@@ -27220,12 +28321,12 @@ async function backlinksRoutes(app, opts) {
     const limit = Math.min(Math.max(parseInt(request.query.limit ?? "50", 10) || 50, 1), 500);
     const offset = Math.max(parseInt(request.query.offset ?? "0", 10) || 0, 0);
     const excludeCrawlers = parseExcludeCrawlers(request.query.excludeCrawlers);
-    const baseDomainCondition = and23(
-      eq28(backlinkDomains.projectId, project.id),
-      eq28(backlinkDomains.source, source),
-      eq28(backlinkDomains.release, targetRelease)
+    const baseDomainCondition = and24(
+      eq29(backlinkDomains.projectId, project.id),
+      eq29(backlinkDomains.source, source),
+      eq29(backlinkDomains.release, targetRelease)
     );
-    const domainCondition = excludeCrawlers ? and23(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
+    const domainCondition = excludeCrawlers ? and24(baseDomainCondition, backlinkCrawlerExclusionClause()) : baseDomainCondition;
     const totalRow = app.db.select({ count: sql11`count(*)` }).from(backlinkDomains).where(domainCondition).get();
     const rows = app.db.select({
       linkingDomain: backlinkDomains.linkingDomain,
@@ -27249,7 +28350,7 @@ async function backlinksRoutes(app, opts) {
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
       const source = parseSourceParam(request.query.source);
-      const rows = app.db.select().from(backlinkSummaries).where(and23(eq28(backlinkSummaries.projectId, project.id), eq28(backlinkSummaries.source, source))).orderBy(asc4(backlinkSummaries.queriedAt)).all();
+      const rows = app.db.select().from(backlinkSummaries).where(and24(eq29(backlinkSummaries.projectId, project.id), eq29(backlinkSummaries.source, source))).orderBy(asc6(backlinkSummaries.queriedAt)).all();
       const response = rows.map((r) => ({
         release: r.release,
         totalLinkingDomains: r.totalLinkingDomains,
@@ -27296,7 +28397,7 @@ async function backlinksRoutes(app, opts) {
         createdAt: now
       }).run();
       opts.onBingBacklinkSyncRequested(runId, project.id);
-      const run = app.db.select().from(runs).where(eq28(runs.id, runId)).get();
+      const run = app.db.select().from(runs).where(eq29(runs.id, runId)).get();
       return reply.status(201).send(mapRunRow(run));
     }
   );
@@ -27305,7 +28406,7 @@ async function backlinksRoutes(app, opts) {
 // ../api-routes/src/traffic.ts
 import crypto26 from "crypto";
 import { Agent as UndiciAgent } from "undici";
-import { and as and24, desc as desc15, eq as eq29, gte as gte4, lte as lte3, sql as sql12 } from "drizzle-orm";
+import { and as and25, desc as desc15, eq as eq30, gte as gte6, lte as lte4, sql as sql12 } from "drizzle-orm";
 
 // ../integration-cloud-run/src/auth.ts
 import crypto25 from "crypto";
@@ -31172,8 +32273,8 @@ async function runBackfillTask(options) {
     const failedAt = (/* @__PURE__ */ new Date()).toISOString();
     try {
       app.db.transaction((tx) => {
-        tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq29(runs.id, runId)).run();
-        tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq29(trafficSources.id, sourceRow.id)).run();
+        tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq30(runs.id, runId)).run();
+        tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq30(trafficSources.id, sourceRow.id)).run();
       });
     } catch {
     }
@@ -31188,7 +32289,7 @@ async function runBackfillTask(options) {
   if (allEvents.length === 0) {
     const finishedAt2 = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: finishedAt2 }).where(eq29(runs.id, runId)).run();
+      app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: finishedAt2 }).where(eq30(runs.id, runId)).run();
     } catch {
     }
     return;
@@ -31210,31 +32311,31 @@ async function runBackfillTask(options) {
   try {
     app.db.transaction((tx) => {
       tx.delete(crawlerEventsHourly).where(
-        and24(
-          eq29(crawlerEventsHourly.sourceId, sourceRow.id),
-          gte4(crawlerEventsHourly.tsHour, windowStartIso),
-          lte3(crawlerEventsHourly.tsHour, windowEndIso)
+        and25(
+          eq30(crawlerEventsHourly.sourceId, sourceRow.id),
+          gte6(crawlerEventsHourly.tsHour, windowStartIso),
+          lte4(crawlerEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(aiUserFetchEventsHourly).where(
-        and24(
-          eq29(aiUserFetchEventsHourly.sourceId, sourceRow.id),
-          gte4(aiUserFetchEventsHourly.tsHour, windowStartIso),
-          lte3(aiUserFetchEventsHourly.tsHour, windowEndIso)
+        and25(
+          eq30(aiUserFetchEventsHourly.sourceId, sourceRow.id),
+          gte6(aiUserFetchEventsHourly.tsHour, windowStartIso),
+          lte4(aiUserFetchEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(aiReferralEventsHourly).where(
-        and24(
-          eq29(aiReferralEventsHourly.sourceId, sourceRow.id),
-          gte4(aiReferralEventsHourly.tsHour, windowStartIso),
-          lte3(aiReferralEventsHourly.tsHour, windowEndIso)
+        and25(
+          eq30(aiReferralEventsHourly.sourceId, sourceRow.id),
+          gte6(aiReferralEventsHourly.tsHour, windowStartIso),
+          lte4(aiReferralEventsHourly.tsHour, windowEndIso)
         )
       ).run();
       tx.delete(rawEventSamples).where(
-        and24(
-          eq29(rawEventSamples.sourceId, sourceRow.id),
-          gte4(rawEventSamples.ts, windowStartIso),
-          lte3(rawEventSamples.ts, windowEndIso)
+        and25(
+          eq30(rawEventSamples.sourceId, sourceRow.id),
+          gte6(rawEventSamples.ts, windowStartIso),
+          lte4(rawEventSamples.ts, windowEndIso)
         )
       ).run();
       for (const bucket of report.crawlerEventsHourly) {
@@ -31323,8 +32424,8 @@ async function runBackfillTask(options) {
         lastError: null,
         lastEventIds: newRingBuffer,
         updatedAt: finishedAt
-      }).where(eq29(trafficSources.id, sourceRow.id)).run();
-      tx.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq29(runs.id, runId)).run();
+      }).where(eq30(trafficSources.id, sourceRow.id)).run();
+      tx.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq30(runs.id, runId)).run();
     });
   } catch (e) {
     markFailed(`Backfill rollup write failed: ${e instanceof Error ? e.message : String(e)}`);
@@ -31406,7 +32507,7 @@ async function trafficRoutes(app, opts) {
       createdAt: existing?.createdAt ?? now,
       updatedAt: now
     });
-    const activeSource = app.db.select().from(trafficSources).where(eq29(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes["cloud-run"] && row.status !== TrafficSourceStatuses.archived);
+    const activeSource = app.db.select().from(trafficSources).where(eq30(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes["cloud-run"] && row.status !== TrafficSourceStatuses.archived);
     const config = {
       gcpProjectId,
       serviceName: serviceName ?? null,
@@ -31422,8 +32523,8 @@ async function trafficRoutes(app, opts) {
         lastError: null,
         configJson: config,
         updatedAt: now
-      }).where(eq29(trafficSources.id, activeSource.id)).run();
-      sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, activeSource.id)).get();
+      }).where(eq30(trafficSources.id, activeSource.id)).run();
+      sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, activeSource.id)).get();
     } else {
       const newId = crypto26.randomUUID();
       app.db.insert(trafficSources).values({
@@ -31440,7 +32541,7 @@ async function trafficRoutes(app, opts) {
         createdAt: now,
         updatedAt: now
       }).run();
-      sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, newId)).get();
+      sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, newId)).get();
     }
     writeAuditLog(app.db, {
       projectId: project.id,
@@ -31492,7 +32593,7 @@ async function trafficRoutes(app, opts) {
       createdAt: existing?.createdAt ?? now,
       updatedAt: now
     });
-    const activeSource = app.db.select().from(trafficSources).where(eq29(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes.wordpress && row.status !== TrafficSourceStatuses.archived);
+    const activeSource = app.db.select().from(trafficSources).where(eq30(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes.wordpress && row.status !== TrafficSourceStatuses.archived);
     const config = { baseUrl, username };
     const fallbackName = displayName ?? `WordPress \xB7 ${new URL(baseUrl).host}`;
     let sourceRow;
@@ -31503,8 +32604,8 @@ async function trafficRoutes(app, opts) {
         lastError: null,
         configJson: config,
         updatedAt: now
-      }).where(eq29(trafficSources.id, activeSource.id)).run();
-      sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, activeSource.id)).get();
+      }).where(eq30(trafficSources.id, activeSource.id)).run();
+      sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, activeSource.id)).get();
     } else {
       const newId = crypto26.randomUUID();
       app.db.insert(trafficSources).values({
@@ -31521,7 +32622,7 @@ async function trafficRoutes(app, opts) {
         createdAt: now,
         updatedAt: now
       }).run();
-      sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, newId)).get();
+      sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, newId)).get();
     }
     writeAuditLog(app.db, {
       projectId: project.id,
@@ -31575,7 +32676,7 @@ async function trafficRoutes(app, opts) {
       createdAt: existing?.createdAt ?? now,
       updatedAt: now
     });
-    const activeSource = app.db.select().from(trafficSources).where(eq29(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes.vercel && row.status !== TrafficSourceStatuses.archived);
+    const activeSource = app.db.select().from(trafficSources).where(eq30(trafficSources.projectId, project.id)).all().find((row) => row.sourceType === TrafficSourceTypes.vercel && row.status !== TrafficSourceStatuses.archived);
     const config = { projectId, teamId, environment };
     const fallbackName = displayName ?? `Vercel \xB7 ${projectId}`;
     const { sourceRow, scheduleCreated } = app.db.transaction((tx) => {
@@ -31587,8 +32688,8 @@ async function trafficRoutes(app, opts) {
           lastError: null,
           configJson: config,
           updatedAt: now
-        }).where(eq29(trafficSources.id, activeSource.id)).run();
-        row = tx.select().from(trafficSources).where(eq29(trafficSources.id, activeSource.id)).get();
+        }).where(eq30(trafficSources.id, activeSource.id)).run();
+        row = tx.select().from(trafficSources).where(eq30(trafficSources.id, activeSource.id)).get();
       } else {
         const newId = crypto26.randomUUID();
         tx.insert(trafficSources).values({
@@ -31613,12 +32714,12 @@ async function trafficRoutes(app, opts) {
           createdAt: now,
           updatedAt: now
         }).run();
-        row = tx.select().from(trafficSources).where(eq29(trafficSources.id, newId)).get();
+        row = tx.select().from(trafficSources).where(eq30(trafficSources.id, newId)).get();
       }
       const existingSchedule = tx.select().from(schedules).where(
-        and24(
-          eq29(schedules.projectId, project.id),
-          eq29(schedules.kind, SchedulableRunKinds["traffic-sync"])
+        and25(
+          eq30(schedules.projectId, project.id),
+          eq30(schedules.kind, SchedulableRunKinds["traffic-sync"])
         )
       ).get();
       let created = false;
@@ -31667,7 +32768,7 @@ async function trafficRoutes(app, opts) {
   });
   app.post("/projects/:name/traffic/sources/:id/sync", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, request.params.id)).get();
+    const sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, request.params.id)).get();
     if (!sourceRow || sourceRow.projectId !== project.id) {
       throw notFound("Traffic source", request.params.id);
     }
@@ -31693,8 +32794,8 @@ async function trafficRoutes(app, opts) {
     const markFailed = (msg, errorCode) => {
       const failedAt = (/* @__PURE__ */ new Date()).toISOString();
       app.db.transaction((tx) => {
-        tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq29(runs.id, runId)).run();
-        tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq29(trafficSources.id, sourceRow.id)).run();
+        tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq30(runs.id, runId)).run();
+        tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq30(trafficSources.id, sourceRow.id)).run();
       });
       try {
         opts.onTrafficSynced?.({
@@ -31775,7 +32876,7 @@ async function trafficRoutes(app, opts) {
       }
       const credential = credentialStore.getConnection(project.name);
       if (!credential) {
-        app.db.delete(runs).where(eq29(runs.id, runId)).run();
+        app.db.delete(runs).where(eq30(runs.id, runId)).run();
         throw validationError(
           `No WordPress credential found for project "${project.name}". Run "canonry traffic connect wordpress" first.`
         );
@@ -31824,12 +32925,12 @@ async function trafficRoutes(app, opts) {
       auditAction = "traffic.vercel.synced";
       const credentialStore = opts.vercelTrafficCredentialStore;
       if (!credentialStore) {
-        app.db.delete(runs).where(eq29(runs.id, runId)).run();
+        app.db.delete(runs).where(eq30(runs.id, runId)).run();
         throw validationError("Vercel traffic credential storage is not configured for this deployment");
       }
       const credential = credentialStore.getConnection(project.name);
       if (!credential) {
-        app.db.delete(runs).where(eq29(runs.id, runId)).run();
+        app.db.delete(runs).where(eq30(runs.id, runId)).run();
         throw validationError(
           `No Vercel credential found for project "${project.name}". Run "canonry traffic connect vercel" first.`
         );
@@ -31929,7 +33030,7 @@ async function trafficRoutes(app, opts) {
     let aiReferralHitsCount = 0;
     let unknownHitsCount = 0;
     app.db.transaction((tx) => {
-      const latestRow = tx.select().from(trafficSources).where(eq29(trafficSources.id, sourceRow.id)).get();
+      const latestRow = tx.select().from(trafficSources).where(eq30(trafficSources.id, sourceRow.id)).get();
       const previousIds = latestRow.lastEventIds ?? [];
       const seenEventIds = new Set(previousIds);
       const dedupedEvents = seenEventIds.size === 0 ? allEvents : allEvents.filter((e) => !seenEventIds.has(e.eventId));
@@ -32104,8 +33205,8 @@ async function trafficRoutes(app, opts) {
       if (sourceRow.sourceType === TrafficSourceTypes.wordpress) {
         sourceUpdate.lastCursor = nextCursor ?? null;
       }
-      tx.update(trafficSources).set(sourceUpdate).where(eq29(trafficSources.id, sourceRow.id)).run();
-      tx.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq29(runs.id, runId)).run();
+      tx.update(trafficSources).set(sourceUpdate).where(eq30(trafficSources.id, sourceRow.id)).run();
+      tx.update(runs).set({ status: RunStatuses.completed, finishedAt }).where(eq30(runs.id, runId)).run();
     });
     writeAuditLog(app.db, {
       projectId: project.id,
@@ -32157,7 +33258,7 @@ async function trafficRoutes(app, opts) {
   });
   app.post("/projects/:name/traffic/sources/:id/backfill", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const sourceRow = app.db.select().from(trafficSources).where(eq29(trafficSources.id, request.params.id)).get();
+    const sourceRow = app.db.select().from(trafficSources).where(eq30(trafficSources.id, request.params.id)).get();
     if (!sourceRow || sourceRow.projectId !== project.id) {
       throw notFound("Traffic source", request.params.id);
     }
@@ -32345,9 +33446,9 @@ async function trafficRoutes(app, opts) {
       pathNormalized: crawlerEventsHourly.pathNormalized,
       hits: sql12`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
     }).from(crawlerEventsHourly).where(
-      and24(
-        eq29(crawlerEventsHourly.sourceId, row.id),
-        gte4(crawlerEventsHourly.tsHour, since)
+      and25(
+        eq30(crawlerEventsHourly.sourceId, row.id),
+        gte6(crawlerEventsHourly.tsHour, since)
       )
     ).groupBy(crawlerEventsHourly.pathNormalized).all();
     const crawlerSegments = segmentCrawlerHits(
@@ -32355,28 +33456,28 @@ async function trafficRoutes(app, opts) {
     );
     const crawlerTotal = crawlerSegments.content + crawlerSegments.sitemap + crawlerSegments.robots + crawlerSegments.asset + crawlerSegments.other;
     const aiUserFetchTotals = app.db.select({ total: sql12`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
-      and24(
-        eq29(aiUserFetchEventsHourly.sourceId, row.id),
-        gte4(aiUserFetchEventsHourly.tsHour, since)
+      and25(
+        eq30(aiUserFetchEventsHourly.sourceId, row.id),
+        gte6(aiUserFetchEventsHourly.tsHour, since)
       )
     ).get();
     const aiTotals = app.db.select({ total: sql12`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-      and24(
-        eq29(aiReferralEventsHourly.sourceId, row.id),
-        gte4(aiReferralEventsHourly.tsHour, since)
+      and25(
+        eq30(aiReferralEventsHourly.sourceId, row.id),
+        gte6(aiReferralEventsHourly.tsHour, since)
       )
     ).get();
     const sampleTotals = app.db.select({ total: sql12`COUNT(*)` }).from(rawEventSamples).where(
-      and24(
-        eq29(rawEventSamples.sourceId, row.id),
-        gte4(rawEventSamples.ts, since)
+      and25(
+        eq30(rawEventSamples.sourceId, row.id),
+        gte6(rawEventSamples.ts, since)
       )
     ).get();
     const latestRun = app.db.select().from(runs).where(
-      and24(
-        eq29(runs.projectId, projectId),
-        eq29(runs.kind, RunKinds["traffic-sync"]),
-        eq29(runs.sourceId, row.id)
+      and25(
+        eq30(runs.projectId, projectId),
+        eq30(runs.kind, RunKinds["traffic-sync"]),
+        eq30(runs.sourceId, row.id)
       )
     ).orderBy(desc15(runs.startedAt)).limit(1).get();
     return {
@@ -32407,7 +33508,7 @@ async function trafficRoutes(app, opts) {
         "`advanceToNow` must be `true`. There is no implicit reset."
       );
     }
-    const sourceRow = app.db.select().from(trafficSources).where(and24(eq29(trafficSources.projectId, project.id), eq29(trafficSources.id, request.params.id))).get();
+    const sourceRow = app.db.select().from(trafficSources).where(and25(eq30(trafficSources.projectId, project.id), eq30(trafficSources.id, request.params.id))).get();
     if (!sourceRow) {
       throw notFound("traffic source", request.params.id);
     }
@@ -32424,7 +33525,7 @@ async function trafficRoutes(app, opts) {
         status: TrafficSourceStatuses.connected,
         lastError: null,
         updatedAt: now
-      }).where(eq29(trafficSources.id, sourceRow.id)).run();
+      }).where(eq30(trafficSources.id, sourceRow.id)).run();
       writeAuditLog(tx, auditFromRequest(request, {
         projectId: project.id,
         actor: "api",
@@ -32432,20 +33533,20 @@ async function trafficRoutes(app, opts) {
         entityType: "traffic_source",
         entityId: sourceRow.id
       }));
-      updatedRow = tx.select().from(trafficSources).where(eq29(trafficSources.id, sourceRow.id)).get();
+      updatedRow = tx.select().from(trafficSources).where(eq30(trafficSources.id, sourceRow.id)).get();
     });
     return buildSourceDetail(project.id, updatedRow, new Date(Date.now() - 24 * 60 * 6e4).toISOString());
   });
   app.get("/projects/:name/traffic/sources", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select().from(trafficSources).where(eq29(trafficSources.projectId, project.id)).orderBy(desc15(trafficSources.createdAt)).all();
+    const rows = app.db.select().from(trafficSources).where(eq30(trafficSources.projectId, project.id)).orderBy(desc15(trafficSources.createdAt)).all();
     const sources = rows.filter((row) => row.status !== TrafficSourceStatuses.archived).map(rowToDto);
     const response = { sources };
     return response;
   });
   app.get("/projects/:name/traffic/status", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select().from(trafficSources).where(eq29(trafficSources.projectId, project.id)).orderBy(desc15(trafficSources.createdAt)).all();
+    const rows = app.db.select().from(trafficSources).where(eq30(trafficSources.projectId, project.id)).orderBy(desc15(trafficSources.createdAt)).all();
     const since = new Date(Date.now() - 24 * 60 * 6e4).toISOString();
     const sources = rows.filter((row) => row.status !== TrafficSourceStatuses.archived).map((row) => buildSourceDetail(project.id, row, since));
     const response = { sources };
@@ -32455,7 +33556,7 @@ async function trafficRoutes(app, opts) {
     "/projects/:name/traffic/sources/:id",
     async (request) => {
       const project = resolveProject(app.db, request.params.name);
-      const row = app.db.select().from(trafficSources).where(eq29(trafficSources.id, request.params.id)).get();
+      const row = app.db.select().from(trafficSources).where(eq30(trafficSources.id, request.params.id)).get();
       if (!row || row.projectId !== project.id) {
         throw notFound("Traffic source", request.params.id);
       }
@@ -32507,12 +33608,12 @@ async function trafficRoutes(app, opts) {
     let aiReferralCounts = aiReferralClassCounts(0, 0, 0);
     if (kind === "all" || kind === TrafficEventKinds.crawler) {
       const crawlerFilters = [
-        eq29(crawlerEventsHourly.projectId, project.id),
-        gte4(crawlerEventsHourly.tsHour, sinceIso),
-        lte3(crawlerEventsHourly.tsHour, untilIso)
+        eq30(crawlerEventsHourly.projectId, project.id),
+        gte6(crawlerEventsHourly.tsHour, sinceIso),
+        lte4(crawlerEventsHourly.tsHour, untilIso)
       ];
-      if (sourceIdParam) crawlerFilters.push(eq29(crawlerEventsHourly.sourceId, sourceIdParam));
-      const crawlerWhere = and24(...crawlerFilters);
+      if (sourceIdParam) crawlerFilters.push(eq30(crawlerEventsHourly.sourceId, sourceIdParam));
+      const crawlerWhere = and25(...crawlerFilters);
       const pathTotals = app.db.select({
         pathNormalized: crawlerEventsHourly.pathNormalized,
         hits: sql12`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)`
@@ -32539,12 +33640,12 @@ async function trafficRoutes(app, opts) {
     }
     if (kind === "all" || kind === TrafficEventKinds["ai-user-fetch"]) {
       const userFetchFilters = [
-        eq29(aiUserFetchEventsHourly.projectId, project.id),
-        gte4(aiUserFetchEventsHourly.tsHour, sinceIso),
-        lte3(aiUserFetchEventsHourly.tsHour, untilIso)
+        eq30(aiUserFetchEventsHourly.projectId, project.id),
+        gte6(aiUserFetchEventsHourly.tsHour, sinceIso),
+        lte4(aiUserFetchEventsHourly.tsHour, untilIso)
       ];
-      if (sourceIdParam) userFetchFilters.push(eq29(aiUserFetchEventsHourly.sourceId, sourceIdParam));
-      const userFetchWhere = and24(...userFetchFilters);
+      if (sourceIdParam) userFetchFilters.push(eq30(aiUserFetchEventsHourly.sourceId, sourceIdParam));
+      const userFetchWhere = and25(...userFetchFilters);
       const total = app.db.select({ total: sql12`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(userFetchWhere).get();
       aiUserFetchTotal = Number(total?.total ?? 0);
       const rows = app.db.select().from(aiUserFetchEventsHourly).where(userFetchWhere).orderBy(desc15(aiUserFetchEventsHourly.tsHour)).limit(limit).all();
@@ -32564,12 +33665,12 @@ async function trafficRoutes(app, opts) {
     }
     if (kind === "all" || kind === TrafficEventKinds["ai-referral"]) {
       const aiFilters = [
-        eq29(aiReferralEventsHourly.projectId, project.id),
-        gte4(aiReferralEventsHourly.tsHour, sinceIso),
-        lte3(aiReferralEventsHourly.tsHour, untilIso)
+        eq30(aiReferralEventsHourly.projectId, project.id),
+        gte6(aiReferralEventsHourly.tsHour, sinceIso),
+        lte4(aiReferralEventsHourly.tsHour, untilIso)
       ];
-      if (sourceIdParam) aiFilters.push(eq29(aiReferralEventsHourly.sourceId, sourceIdParam));
-      const aiWhere = and24(...aiFilters);
+      if (sourceIdParam) aiFilters.push(eq30(aiReferralEventsHourly.sourceId, sourceIdParam));
+      const aiWhere = and25(...aiFilters);
       const total = app.db.select({
         total: sql12`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)`,
         paid: sql12`COALESCE(SUM(${aiReferralEventsHourly.paidSessionsOrHits}), 0)`,
@@ -32791,7 +33892,7 @@ function readInstalledManifest(skillDir) {
 var AGENT_CHECKS = [skillsInstalledCheck, skillsCurrentCheck];
 
 // ../api-routes/src/doctor/checks/backlinks.ts
-import { and as and25, eq as eq30 } from "drizzle-orm";
+import { and as and26, eq as eq31 } from "drizzle-orm";
 function skippedNoProject() {
   return {
     status: CheckStatuses.skipped,
@@ -32807,8 +33908,8 @@ var BACKLINKS_CHECKS = [
     title: "Backlinks source connected",
     run: (ctx) => {
       if (!ctx.project) return skippedNoProject();
-      const projectRow = ctx.db.select({ autoExtract: projects.autoExtractBacklinks }).from(projects).where(eq30(projects.id, ctx.project.id)).get();
-      const readySync = ctx.db.select({ id: ccReleaseSyncs.id }).from(ccReleaseSyncs).where(eq30(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).limit(1).get();
+      const projectRow = ctx.db.select({ autoExtract: projects.autoExtractBacklinks }).from(projects).where(eq31(projects.id, ctx.project.id)).get();
+      const readySync = ctx.db.select({ id: ccReleaseSyncs.id }).from(ccReleaseSyncs).where(eq31(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).limit(1).get();
       const ccConnected = projectRow?.autoExtract === true && !!readySync;
       const bingConnected = !!ctx.bingConnectionStore?.getConnection(ctx.project.canonicalDomain);
       const connected = [];
@@ -32823,9 +33924,9 @@ var BACKLINKS_CHECKS = [
           details: { commoncrawl: ccConnected, bingWebmaster: bingConnected }
         };
       }
-      const ccHasData = ccConnected ? !!ctx.db.select({ id: backlinkSummaries.id }).from(backlinkSummaries).where(and25(
-        eq30(backlinkSummaries.projectId, ctx.project.id),
-        eq30(backlinkSummaries.source, BacklinkSources.commoncrawl)
+      const ccHasData = ccConnected ? !!ctx.db.select({ id: backlinkSummaries.id }).from(backlinkSummaries).where(and26(
+        eq31(backlinkSummaries.projectId, ctx.project.id),
+        eq31(backlinkSummaries.source, BacklinkSources.commoncrawl)
       )).limit(1).get() : false;
       return {
         status: CheckStatuses.ok,
@@ -32985,7 +34086,7 @@ var BING_AUTH_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/content.ts
-import { eq as eq31 } from "drizzle-orm";
+import { eq as eq32 } from "drizzle-orm";
 var WINNABILITY_COVERAGE_WARN_THRESHOLD = 0.8;
 var UNCLASSIFIED_DOMAIN_SAMPLE_LIMIT = 10;
 function skippedNoProject2() {
@@ -32998,7 +34099,7 @@ function skippedNoProject2() {
 }
 function loadProject(ctx) {
   if (!ctx.project) return null;
-  return ctx.db.select().from(projects).where(eq31(projects.id, ctx.project.id)).get() ?? null;
+  return ctx.db.select().from(projects).where(eq32(projects.id, ctx.project.id)).get() ?? null;
 }
 function percent(value) {
   return Math.round(value * 100);
@@ -33090,7 +34191,7 @@ var CONTENT_CHECK_BY_ID = Object.fromEntries(
 );
 
 // ../api-routes/src/doctor/checks/ads.ts
-import { eq as eq32 } from "drizzle-orm";
+import { eq as eq33 } from "drizzle-orm";
 var RECENT_SYNC_WARN_DAYS = 7;
 var RECENT_SYNC_FAIL_DAYS = 30;
 var adsConnectionCheck = {
@@ -33107,7 +34208,7 @@ var adsConnectionCheck = {
         remediation: null
       };
     }
-    const row = ctx.db.select().from(adsConnections).where(eq32(adsConnections.projectId, ctx.project.id)).get();
+    const row = ctx.db.select().from(adsConnections).where(eq33(adsConnections.projectId, ctx.project.id)).get();
     if (!row) {
       return {
         status: CheckStatuses.skipped,
@@ -33157,7 +34258,7 @@ var adsRecentSyncCheck = {
         remediation: null
       };
     }
-    const row = ctx.db.select().from(adsConnections).where(eq32(adsConnections.projectId, ctx.project.id)).get();
+    const row = ctx.db.select().from(adsConnections).where(eq33(adsConnections.projectId, ctx.project.id)).get();
     if (!row) {
       return {
         status: CheckStatuses.skipped,
@@ -33348,7 +34449,7 @@ var ga4ConnectionCheck = {
 var GA_AUTH_CHECKS = [ga4ConnectionCheck];
 
 // ../api-routes/src/doctor/checks/gbp-auth.ts
-import { and as and26, eq as eq33 } from "drizzle-orm";
+import { and as and27, eq as eq34 } from "drizzle-orm";
 var RECENT_SYNC_WARN_DAYS2 = 7;
 var RECENT_SYNC_FAIL_DAYS2 = 30;
 function skippedNoProject3() {
@@ -33581,7 +34682,7 @@ var recentSyncCheck = {
   title: "GBP recent sync",
   run: (ctx) => {
     if (!ctx.project) return skippedNoProject3();
-    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and26(eq33(gbpLocations.projectId, ctx.project.id), eq33(gbpLocations.selected, true))).all();
+    const selected = ctx.db.select({ locationName: gbpLocations.locationName, syncedAt: gbpLocations.syncedAt }).from(gbpLocations).where(and27(eq34(gbpLocations.projectId, ctx.project.id), eq34(gbpLocations.selected, true))).all();
     if (selected.length === 0) {
       return {
         status: CheckStatuses.skipped,
@@ -33641,7 +34742,7 @@ var GBP_AUTH_CHECK_BY_ID = Object.fromEntries(
 );
 
 // ../api-routes/src/doctor/checks/places.ts
-import { eq as eq34 } from "drizzle-orm";
+import { eq as eq35 } from "drizzle-orm";
 var apiKeyCheck = {
   id: "gbp.places.api-key",
   category: CheckCategories.auth,
@@ -33686,7 +34787,7 @@ var apiKeyCheck = {
         details: { tier: cfg.tier }
       };
     }
-    const rows = ctx.db.select({ placeId: gbpLocations.placeId, selected: gbpLocations.selected }).from(gbpLocations).where(eq34(gbpLocations.projectId, ctx.project.id)).all();
+    const rows = ctx.db.select({ placeId: gbpLocations.placeId, selected: gbpLocations.selected }).from(gbpLocations).where(eq35(gbpLocations.projectId, ctx.project.id)).all();
     const selected = rows.filter((r) => r.selected);
     const locationsWithPlaceId = selected.filter((r) => Boolean(r.placeId)).length;
     const details = {
@@ -34183,7 +35284,7 @@ var RUNTIME_STATE_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/traffic-source.ts
-import { and as and27, eq as eq35, gte as gte5, ne as ne4, sql as sql13 } from "drizzle-orm";
+import { and as and28, eq as eq36, gte as gte7, ne as ne4, sql as sql13 } from "drizzle-orm";
 var RECENT_DATA_WARN_DAYS = 7;
 var RECENT_DATA_FAIL_DAYS = 30;
 function skippedNoProject5() {
@@ -34197,8 +35298,8 @@ function skippedNoProject5() {
 function loadProbes(ctx) {
   if (!ctx.project) return [];
   const rows = ctx.db.select().from(trafficSources).where(
-    and27(
-      eq35(trafficSources.projectId, ctx.project.id),
+    and28(
+      eq36(trafficSources.projectId, ctx.project.id),
       ne4(trafficSources.status, TrafficSourceStatuses.archived)
     )
   ).all();
@@ -34278,17 +35379,17 @@ var recentDataCheck = {
     const failCutoff = new Date(now.getTime() - RECENT_DATA_FAIL_DAYS * 24 * 60 * 6e4).toISOString();
     const recentCrawlers = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and27(
-          eq35(crawlerEventsHourly.projectId, ctx.project.id),
-          gte5(crawlerEventsHourly.tsHour, warnCutoff)
+        and28(
+          eq36(crawlerEventsHourly.projectId, ctx.project.id),
+          gte7(crawlerEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
     );
     const recentReferrals = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and27(
-          eq35(aiReferralEventsHourly.projectId, ctx.project.id),
-          gte5(aiReferralEventsHourly.tsHour, warnCutoff)
+        and28(
+          eq36(aiReferralEventsHourly.projectId, ctx.project.id),
+          gte7(aiReferralEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
     );
@@ -34302,17 +35403,17 @@ var recentDataCheck = {
     }
     const olderCrawlers = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
-        and27(
-          eq35(crawlerEventsHourly.projectId, ctx.project.id),
-          gte5(crawlerEventsHourly.tsHour, failCutoff)
+        and28(
+          eq36(crawlerEventsHourly.projectId, ctx.project.id),
+          gte7(crawlerEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
     );
     const olderReferrals = Number(
       ctx.db.select({ total: sql13`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
-        and27(
-          eq35(aiReferralEventsHourly.projectId, ctx.project.id),
-          gte5(aiReferralEventsHourly.tsHour, failCutoff)
+        and28(
+          eq36(aiReferralEventsHourly.projectId, ctx.project.id),
+          gte7(aiReferralEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
     );
@@ -34727,7 +35828,7 @@ async function doctorRoutes(app, opts) {
 
 // ../api-routes/src/discovery/routes.ts
 import crypto28 from "crypto";
-import { and as and28, desc as desc16, eq as eq36, gte as gte6, inArray as inArray13, isNull, or as or5 } from "drizzle-orm";
+import { and as and29, desc as desc16, eq as eq37, gte as gte8, inArray as inArray13, isNull, or as or5 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
   app.post("/projects/:name/discover/run", async (request, reply) => {
@@ -34761,13 +35862,13 @@ async function discoveryRoutes(app, opts) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const ageFloorIso = new Date(Date.now() - MAX_INFLIGHT_DISCOVERY_AGE_MS).toISOString();
     const decision = app.db.transaction((tx) => {
-      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and28(
-        eq36(discoverySessions.projectId, project.id),
-        eq36(discoverySessions.icpDescription, icpDescription),
+      const existing = tx.select({ id: discoverySessions.id, runId: discoverySessions.runId }).from(discoverySessions).where(and29(
+        eq37(discoverySessions.projectId, project.id),
+        eq37(discoverySessions.icpDescription, icpDescription),
         // Buyer is part of session identity: it changes the seed prompt's
         // semantics, so a request with a different (or no) buyer must start
         // its own session, never adopt another buyer's probes.
-        parsed.data.buyerDescription == null ? isNull(discoverySessions.buyerDescription) : eq36(discoverySessions.buyerDescription, parsed.data.buyerDescription),
+        parsed.data.buyerDescription == null ? isNull(discoverySessions.buyerDescription) : eq37(discoverySessions.buyerDescription, parsed.data.buyerDescription),
         // Locations are identity too: a different service-area subset seeds
         // and probes a different geo, so it must never reuse another geo's
         // session. resolveLocations is deterministic (project-config order),
@@ -34777,17 +35878,17 @@ async function discoveryRoutes(app, opts) {
         // locations a NULL row's subset is unknowable, so it conservatively
         // never reuses — a one-time, bounded (2h window) non-reuse after
         // upgrade, never a wrong reuse.
-        locations.length === 0 ? or5(isNull(discoverySessions.locations), eq36(discoverySessions.locations, locations)) : eq36(discoverySessions.locations, locations),
+        locations.length === 0 ? or5(isNull(discoverySessions.locations), eq37(discoverySessions.locations, locations)) : eq37(discoverySessions.locations, locations),
         // Seed provider set is identity: a different phrasing distribution
         // must never reuse another set's session. Null (= Gemini-only
         // default, including explicit ['gemini']) matches legacy rows.
-        seedProviders == null ? isNull(discoverySessions.seedProviders) : eq36(discoverySessions.seedProviders, seedProviders),
+        seedProviders == null ? isNull(discoverySessions.seedProviders) : eq37(discoverySessions.seedProviders, seedProviders),
         inArray13(discoverySessions.status, [
           DiscoverySessionStatuses.queued,
           DiscoverySessionStatuses.seeding,
           DiscoverySessionStatuses.probing
         ]),
-        gte6(discoverySessions.createdAt, ageFloorIso)
+        gte8(discoverySessions.createdAt, ageFloorIso)
       )).orderBy(desc16(discoverySessions.createdAt)).get();
       if (existing && existing.runId) {
         return { reused: true, sessionId: existing.id, runId: existing.runId };
@@ -34857,7 +35958,7 @@ async function discoveryRoutes(app, opts) {
       const project = resolveProject(app.db, request.params.name);
       const parsedLimit = parseInt(request.query.limit ?? "", 10);
       const limit = Number.isNaN(parsedLimit) || parsedLimit <= 0 ? 50 : parsedLimit;
-      const rows = app.db.select().from(discoverySessions).where(eq36(discoverySessions.projectId, project.id)).orderBy(desc16(discoverySessions.createdAt)).limit(limit).all();
+      const rows = app.db.select().from(discoverySessions).where(eq37(discoverySessions.projectId, project.id)).orderBy(desc16(discoverySessions.createdAt)).limit(limit).all();
       return reply.send(rows.map(serializeSession));
     }
   );
@@ -34865,11 +35966,11 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq36(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq37(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
-      const probeRows = app.db.select().from(discoveryProbes).where(eq36(discoveryProbes.sessionId, session.id)).all();
+      const probeRows = app.db.select().from(discoveryProbes).where(eq37(discoveryProbes.sessionId, session.id)).all();
       const detail = {
         ...serializeSession(session),
         probes: probeRows.map(serializeProbe)
@@ -34881,7 +35982,7 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id/harvest",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq36(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq37(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
@@ -34889,7 +35990,7 @@ async function discoveryRoutes(app, opts) {
       const minProbeHits = Number.isNaN(parsedFloor) || parsedFloor < 1 ? 1 : parsedFloor;
       const applyAnchor = request.query.anchor !== "false";
       const provider = session.seedProvider ?? "gemini";
-      const probeRows = app.db.select().from(discoveryProbes).where(eq36(discoveryProbes.sessionId, session.id)).all();
+      const probeRows = app.db.select().from(discoveryProbes).where(eq37(discoveryProbes.sessionId, session.id)).all();
       const extract = opts.harvestSearchQueries;
       const probesWithQueries = probeRows.map((row) => {
         if (!extract || !row.rawResponse) return { searchQueries: [] };
@@ -34900,7 +36001,7 @@ async function discoveryRoutes(app, opts) {
           return { searchQueries: [] };
         }
       });
-      const trackedQueries = app.db.select({ query: queries.query }).from(queries).where(eq36(queries.projectId, project.id)).all().map((r) => r.query);
+      const trackedQueries = app.db.select({ query: queries.query }).from(queries).where(eq37(queries.projectId, project.id)).all().map((r) => r.query);
       const anchorTerms = buildHarvestAnchorTerms(
         [session.icpDescription ?? "", ...trackedQueries],
         effectiveDomains(project)
@@ -34947,12 +36048,12 @@ async function discoveryRoutes(app, opts) {
     "/projects/:name/discover/sessions/:id/promote",
     async (request, reply) => {
       const project = resolveProject(app.db, request.params.name);
-      const session = app.db.select().from(discoverySessions).where(eq36(discoverySessions.id, request.params.id)).get();
+      const session = app.db.select().from(discoverySessions).where(eq37(discoverySessions.id, request.params.id)).get();
       if (!session || session.projectId !== project.id) {
         throw notFound("Discovery session", request.params.id);
       }
-      const probeRows = app.db.select().from(discoveryProbes).where(eq36(discoveryProbes.sessionId, session.id)).all();
-      const existingCompetitors = app.db.select({ domain: competitors.domain }).from(competitors).where(eq36(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase());
+      const probeRows = app.db.select().from(discoveryProbes).where(eq37(discoveryProbes.sessionId, session.id)).all();
+      const existingCompetitors = app.db.select({ domain: competitors.domain }).from(competitors).where(eq37(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase());
       const seenCompetitors = new Set(existingCompetitors);
       const cited = /* @__PURE__ */ new Set();
       const aspirational = /* @__PURE__ */ new Set();
@@ -34981,7 +36082,7 @@ async function discoveryRoutes(app, opts) {
   );
   app.post("/projects/:name/discover/sessions/:id/promote", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
-    const session = app.db.select().from(discoverySessions).where(eq36(discoverySessions.id, request.params.id)).get();
+    const session = app.db.select().from(discoverySessions).where(eq37(discoverySessions.id, request.params.id)).get();
     if (!session || session.projectId !== project.id) {
       throw notFound("Discovery session", request.params.id);
     }
@@ -35004,7 +36105,7 @@ async function discoveryRoutes(app, opts) {
     const bucketSet = new Set(buckets);
     const includeCompetitors = parsed.data.includeCompetitors ?? true;
     const competitorTypes = parsed.data.competitorTypes ?? DEFAULT_DISCOVERY_PROMOTE_COMPETITOR_TYPES;
-    const probeRows = app.db.select().from(discoveryProbes).where(eq36(discoveryProbes.sessionId, session.id)).all();
+    const probeRows = app.db.select().from(discoveryProbes).where(eq37(discoveryProbes.sessionId, session.id)).all();
     const candidateQueries = /* @__PURE__ */ new Set();
     for (const probe of probeRows) {
       if (!probe.bucket) continue;
@@ -35012,7 +36113,7 @@ async function discoveryRoutes(app, opts) {
       if (bucket.success && bucketSet.has(bucket.data)) candidateQueries.add(probe.query);
     }
     const existingQueries = new Set(
-      app.db.select({ query: queries.query }).from(queries).where(eq36(queries.projectId, project.id)).all().map((r) => r.query.toLowerCase())
+      app.db.select({ query: queries.query }).from(queries).where(eq37(queries.projectId, project.id)).all().map((r) => r.query.toLowerCase())
     );
     const promotedQueries = [];
     const skippedQueries = [];
@@ -35028,7 +36129,7 @@ async function discoveryRoutes(app, opts) {
     const skippedCompetitors = [];
     if (includeCompetitors) {
       const existingCompetitors = new Set(
-        app.db.select({ domain: competitors.domain }).from(competitors).where(eq36(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase())
+        app.db.select({ domain: competitors.domain }).from(competitors).where(eq37(competitors.projectId, project.id)).all().map((r) => r.domain.toLowerCase())
       );
       const competitorMap = parseCompetitorMap(session.competitorMap);
       for (const entry of selectEligibleCompetitors(competitorMap, competitorTypes)) {
@@ -35147,7 +36248,7 @@ function selectEligibleCompetitors(competitorMap, competitorTypes) {
 
 // ../api-routes/src/discovery/orchestrate.ts
 import crypto29 from "crypto";
-import { eq as eq37 } from "drizzle-orm";
+import { eq as eq38 } from "drizzle-orm";
 var DEFAULT_MAX_PROBES = 100;
 var ABSOLUTE_MAX_PROBES = 500;
 function classifyProbeBucket(input) {
@@ -35234,7 +36335,7 @@ async function executeDiscovery(opts) {
     status: DiscoverySessionStatuses.seeding,
     dedupThreshold,
     startedAt
-  }).where(eq37(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq38(discoverySessions.id, opts.sessionId)).run();
   const seedResult = await opts.deps.seed({
     project: opts.project,
     icpDescription: opts.icpDescription,
@@ -35295,7 +36396,7 @@ async function executeDiscovery(opts) {
     dedupBandPairFraction: dedupStats.bandPairFraction,
     dedupPairsTotal: dedupStats.pairsTotal,
     warning
-  }).where(eq37(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq38(discoverySessions.id, opts.sessionId)).run();
   const probeLocation = opts.locations?.[0];
   const probeResults = await mapWithConcurrency(
     probedCanonicals,
@@ -35349,7 +36450,7 @@ async function executeDiscovery(opts) {
     wastedCount: buckets["wasted-surface"],
     competitorMap,
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq37(discoverySessions.id, opts.sessionId)).run();
+  }).where(eq38(discoverySessions.id, opts.sessionId)).run();
   upsertDomainClassifications(opts.db, opts.project.id, opts.sessionId, competitorMap);
   return {
     buckets,
@@ -35389,7 +36490,7 @@ function markSessionFailed(db, sessionId, error) {
     status: DiscoverySessionStatuses.failed,
     error,
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq37(discoverySessions.id, sessionId)).run();
+  }).where(eq38(discoverySessions.id, sessionId)).run();
 }
 function dedupeStrings(input) {
   const seen = /* @__PURE__ */ new Set();
@@ -35407,7 +36508,7 @@ function dedupeStrings(input) {
 
 // ../api-routes/src/technical-aeo.ts
 import crypto30 from "crypto";
-import { and as and29, asc as asc5, count, desc as desc17, eq as eq38, inArray as inArray14 } from "drizzle-orm";
+import { and as and30, asc as asc7, count, desc as desc17, eq as eq39, inArray as inArray14, lt as lt2 } from "drizzle-orm";
 var SURFACEABLE_STATUSES = [RunStatuses.completed, RunStatuses.partial];
 function emptyScore(projectName) {
   return {
@@ -35439,16 +36540,20 @@ function parsePositiveInt(value, fallback, max) {
 async function technicalAeoRoutes(app, opts) {
   app.get("/projects/:name/technical-aeo", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const rows = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq38(siteAuditSnapshots.runId, runs.id)).where(and29(
-      eq38(siteAuditSnapshots.projectId, project.id),
-      eq38(runs.kind, RunKinds["site-audit"]),
+    const baseFilters = [
+      eq39(siteAuditSnapshots.projectId, project.id),
+      eq39(runs.kind, RunKinds["site-audit"]),
       inArray14(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
-    )).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(2).all();
-    const latest = rows[0];
-    if (!latest) return emptyScore(project.name);
+    ];
+    const targetFilters = request.query.runId ? [...baseFilters, eq39(siteAuditSnapshots.runId, request.query.runId)] : baseFilters;
+    const latest = app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq39(siteAuditSnapshots.runId, runs.id)).where(and30(...targetFilters)).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(1).get();
+    if (!latest) {
+      if (request.query.runId) throw notFound("Site audit run", request.query.runId);
+      return emptyScore(project.name);
+    }
     const snap = latest.snap;
-    const previous = rows[1]?.snap ?? null;
+    const previous = app.db.select({ snap: siteAuditSnapshots }).from(siteAuditSnapshots).innerJoin(runs, eq39(siteAuditSnapshots.runId, runs.id)).where(and30(...baseFilters, lt2(siteAuditSnapshots.createdAt, snap.createdAt))).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(1).get()?.snap ?? null;
     const deltaScore = previous ? snap.aggregateScore - previous.aggregateScore : null;
     const trend = deltaScore == null ? null : deltaScore > 0 ? SiteAuditTrendDirections.up : deltaScore < 0 ? SiteAuditTrendDirections.down : SiteAuditTrendDirections.flat;
     return {
@@ -35474,24 +36579,29 @@ async function technicalAeoRoutes(app, opts) {
   });
   app.get("/projects/:name/technical-aeo/pages", async (request) => {
     const project = resolveProject(app.db, request.params.name);
-    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq38(siteAuditSnapshots.runId, runs.id)).where(and29(
-      eq38(siteAuditSnapshots.projectId, project.id),
-      eq38(runs.kind, RunKinds["site-audit"]),
+    const targetFilters = [
+      eq39(siteAuditSnapshots.projectId, project.id),
+      eq39(runs.kind, RunKinds["site-audit"]),
       inArray14(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
-    )).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(1).get();
+    ];
+    if (request.query.runId) targetFilters.push(eq39(siteAuditSnapshots.runId, request.query.runId));
+    const latest = app.db.select({ runId: siteAuditSnapshots.runId, auditedAt: siteAuditSnapshots.auditedAt }).from(siteAuditSnapshots).innerJoin(runs, eq39(siteAuditSnapshots.runId, runs.id)).where(and30(...targetFilters)).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(1).get();
+    if (!latest && request.query.runId) {
+      throw notFound("Site audit run", request.query.runId);
+    }
     if (!latest) {
       return { project: project.name, runId: null, auditedAt: null, total: 0, pages: [] };
     }
     const statusFilter = request.query.status === "success" || request.query.status === "error" ? request.query.status : null;
-    const conds = [eq38(siteAuditPages.runId, latest.runId)];
-    if (statusFilter) conds.push(eq38(siteAuditPages.status, statusFilter));
-    const where = and29(...conds);
+    const conds = [eq39(siteAuditPages.runId, latest.runId)];
+    if (statusFilter) conds.push(eq39(siteAuditPages.status, statusFilter));
+    const where = and30(...conds);
     const totalRow = app.db.select({ value: count() }).from(siteAuditPages).where(where).get();
     const total = totalRow?.value ?? 0;
     const limit = parsePositiveInt(request.query.limit, 100, 500);
     const offset = parsePositiveInt(request.query.offset, 0, Number.MAX_SAFE_INTEGER);
-    const orderBy = request.query.sort === "score-desc" ? desc17(siteAuditPages.overallScore) : request.query.sort === "url" ? asc5(siteAuditPages.url) : asc5(siteAuditPages.overallScore);
+    const orderBy = request.query.sort === "score-desc" ? desc17(siteAuditPages.overallScore) : request.query.sort === "url" ? asc7(siteAuditPages.url) : asc7(siteAuditPages.overallScore);
     const rows = app.db.select().from(siteAuditPages).where(where).orderBy(orderBy).limit(limit).offset(offset).all();
     const pages = rows.map((row) => ({
       url: row.url,
@@ -35510,9 +36620,9 @@ async function technicalAeoRoutes(app, opts) {
       auditedAt: siteAuditSnapshots.auditedAt,
       aggregateScore: siteAuditSnapshots.aggregateScore,
       pagesAudited: siteAuditSnapshots.pagesAudited
-    }).from(siteAuditSnapshots).innerJoin(runs, eq38(siteAuditSnapshots.runId, runs.id)).where(and29(
-      eq38(siteAuditSnapshots.projectId, project.id),
-      eq38(runs.kind, RunKinds["site-audit"]),
+    }).from(siteAuditSnapshots).innerJoin(runs, eq39(siteAuditSnapshots.runId, runs.id)).where(and30(
+      eq39(siteAuditSnapshots.projectId, project.id),
+      eq39(runs.kind, RunKinds["site-audit"]),
       inArray14(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
     )).orderBy(desc17(siteAuditSnapshots.createdAt)).limit(limit).all();
@@ -35524,9 +36634,9 @@ async function technicalAeoRoutes(app, opts) {
     if (!parsed.success) {
       throw validationError(parsed.error.issues[0]?.message ?? "Invalid site-audit request");
     }
-    const existing = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and29(
-      eq38(runs.projectId, project.id),
-      eq38(runs.kind, RunKinds["site-audit"]),
+    const existing = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and30(
+      eq39(runs.projectId, project.id),
+      eq39(runs.kind, RunKinds["site-audit"]),
       inArray14(runs.status, [RunStatuses.queued, RunStatuses.running])
     )).get();
     if (existing) {
@@ -35632,6 +36742,7 @@ async function apiRoutes(app, opts) {
     await api.register(reportRoutes);
     await api.register(citationRoutes);
     await api.register(visibilityStatsRoutes);
+    await api.register(resultsExportRoutes);
     await api.register(compositeRoutes);
     await api.register(contentRoutes, {
       explainContentRecommendation: opts.explainContentRecommendation,
@@ -35665,7 +36776,8 @@ async function apiRoutes(app, opts) {
     await api.register(adsRoutes, {
       adsCredentialStore: opts.adsCredentialStore,
       verifyAdsAccount: opts.verifyAdsAccount,
-      onAdsSyncRequested: opts.onAdsSyncRequested
+      onAdsSyncRequested: opts.onAdsSyncRequested,
+      adsOperator: opts.adsOperator
     });
     await api.register(bingRoutes, {
       bingConnectionStore: opts.bingConnectionStore,
@@ -36118,9 +37230,9 @@ var IntelligenceService = class {
    */
   analyzeAndPersist(runId, projectId) {
     const recentRuns = this.db.select().from(runs).where(
-      and30(
-        eq39(runs.projectId, projectId),
-        or6(eq39(runs.status, "completed"), eq39(runs.status, "partial")),
+      and31(
+        eq40(runs.projectId, projectId),
+        or6(eq40(runs.status, "completed"), eq40(runs.status, "partial")),
         // Defensive: RunCoordinator already skips probes before this is
         // called, but if a future call site invokes analyzeAndPersist
         // directly for a probe, probes still must not pollute the
@@ -36202,7 +37314,7 @@ var IntelligenceService = class {
    * Returns the persisted insights so the coordinator can count critical/high.
    */
   analyzeAndPersistGbp(runId, projectId) {
-    const runRow = this.db.select({ createdAt: runs.createdAt, startedAt: runs.startedAt, finishedAt: runs.finishedAt }).from(runs).where(eq39(runs.id, runId)).get();
+    const runRow = this.db.select({ createdAt: runs.createdAt, startedAt: runs.startedAt, finishedAt: runs.finishedAt }).from(runs).where(eq40(runs.id, runId)).get();
     if (!runRow) {
       log.info("gbp-intelligence.skip", { runId, reason: "run not found" });
       this.persistGbpInsights(runId, projectId, [], []);
@@ -36210,11 +37322,11 @@ var IntelligenceService = class {
     }
     const windowStart = runRow.startedAt ?? runRow.createdAt;
     const windowEnd = runRow.finishedAt ?? (/* @__PURE__ */ new Date()).toISOString();
-    const selected = this.db.select().from(gbpLocations).where(and30(
-      eq39(gbpLocations.projectId, projectId),
-      eq39(gbpLocations.selected, true),
-      gte7(gbpLocations.syncedAt, windowStart),
-      lte4(gbpLocations.syncedAt, windowEnd)
+    const selected = this.db.select().from(gbpLocations).where(and31(
+      eq40(gbpLocations.projectId, projectId),
+      eq40(gbpLocations.selected, true),
+      gte9(gbpLocations.syncedAt, windowStart),
+      lte5(gbpLocations.syncedAt, windowEnd)
     )).all();
     if (selected.length === 0) {
       log.info("gbp-intelligence.skip", { runId, reason: "no locations synced during run" });
@@ -36247,12 +37359,12 @@ var IntelligenceService = class {
   }
   /** Build the per-location signal bundle the GBP analyzer consumes. */
   buildGbpLocationSignals(projectId, locationName, displayName, fallbackDate) {
-    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and30(eq39(gbpDailyMetrics.projectId, projectId), eq39(gbpDailyMetrics.locationName, locationName))).all();
-    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and30(eq39(gbpPlaceActions.projectId, projectId), eq39(gbpPlaceActions.locationName, locationName))).all();
-    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and30(eq39(gbpLodgingSnapshots.projectId, projectId), eq39(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc18(gbpLodgingSnapshots.syncedAt)).limit(1).get();
-    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and30(eq39(gbpLocations.projectId, projectId), eq39(gbpLocations.locationName, locationName))).get();
+    const metricRows = this.db.select({ metric: gbpDailyMetrics.metric, date: gbpDailyMetrics.date, value: gbpDailyMetrics.value }).from(gbpDailyMetrics).where(and31(eq40(gbpDailyMetrics.projectId, projectId), eq40(gbpDailyMetrics.locationName, locationName))).all();
+    const placeActionRows = this.db.select({ placeActionType: gbpPlaceActions.placeActionType, providerType: gbpPlaceActions.providerType }).from(gbpPlaceActions).where(and31(eq40(gbpPlaceActions.projectId, projectId), eq40(gbpPlaceActions.locationName, locationName))).all();
+    const lodgingRow = this.db.select({ populatedGroupCount: gbpLodgingSnapshots.populatedGroupCount }).from(gbpLodgingSnapshots).where(and31(eq40(gbpLodgingSnapshots.projectId, projectId), eq40(gbpLodgingSnapshots.locationName, locationName))).orderBy(desc18(gbpLodgingSnapshots.syncedAt)).limit(1).get();
+    const ownerRow = this.db.select({ description: gbpLocations.description }).from(gbpLocations).where(and31(eq40(gbpLocations.projectId, projectId), eq40(gbpLocations.locationName, locationName))).get();
     const descriptionMissing = !(ownerRow?.description ?? "").trim();
-    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and30(eq39(gbpPlaceDetails.projectId, projectId), eq39(gbpPlaceDetails.locationName, locationName))).orderBy(desc18(gbpPlaceDetails.syncedAt)).limit(1).get();
+    const placeRow = this.db.select({ attributes: gbpPlaceDetails.attributes }).from(gbpPlaceDetails).where(and31(eq40(gbpPlaceDetails.projectId, projectId), eq40(gbpPlaceDetails.locationName, locationName))).orderBy(desc18(gbpPlaceDetails.syncedAt)).limit(1).get();
     const placesAmenities = placeRow ? extractPlaceAmenities(placeRow.attributes) : [];
     const summary = buildGbpSummary({
       locationName,
@@ -36288,7 +37400,7 @@ var IntelligenceService = class {
   /** Build the month-over-month keyword series for a location from the
    *  accumulating gbp_keyword_monthly table (latest complete month vs prior). */
   buildGbpKeywordTrend(projectId, locationName) {
-    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and30(eq39(gbpKeywordMonthly.projectId, projectId), eq39(gbpKeywordMonthly.locationName, locationName))).all();
+    const rows = this.db.select({ month: gbpKeywordMonthly.month, keyword: gbpKeywordMonthly.keyword, valueCount: gbpKeywordMonthly.valueCount }).from(gbpKeywordMonthly).where(and31(eq40(gbpKeywordMonthly.projectId, projectId), eq40(gbpKeywordMonthly.locationName, locationName))).all();
     if (rows.length === 0) return { recentMonth: null, priorMonth: null, points: [] };
     const months = [...new Set(rows.map((r) => r.month))].sort().reverse();
     const recentMonth = months[0] ?? null;
@@ -36319,7 +37431,7 @@ var IntelligenceService = class {
    */
   persistGbpInsights(runId, projectId, gbpInsights, coveredLocationNames) {
     const covered = new Set(coveredLocationNames);
-    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and30(eq39(insights.projectId, projectId), eq39(insights.provider, GBP_INSIGHT_PROVIDER))).all();
+    const existing = this.db.select({ id: insights.id, dismissed: insights.dismissed }).from(insights).where(and31(eq40(insights.projectId, projectId), eq40(insights.provider, GBP_INSIGHT_PROVIDER))).all();
     const staleIds = [];
     const dismissedSlots = /* @__PURE__ */ new Set();
     for (const row of existing) {
@@ -36330,7 +37442,7 @@ var IntelligenceService = class {
     }
     this.db.transaction((tx) => {
       for (const id of staleIds) {
-        tx.delete(insights).where(eq39(insights.id, id)).run();
+        tx.delete(insights).where(eq40(insights.id, id)).run();
       }
       for (const insight of gbpInsights) {
         const parsed = parseGbpInsightId(insight.id);
@@ -36408,7 +37520,7 @@ var IntelligenceService = class {
    *     create per run + aggregate). DB is left untouched.
    */
   backfill(projectName, opts, onProgress) {
-    const project = this.db.select().from(projects).where(eq39(projects.name, projectName)).get();
+    const project = this.db.select().from(projects).where(eq40(projects.name, projectName)).get();
     if (!project) {
       throw new Error(`Project "${projectName}" not found`);
     }
@@ -36421,13 +37533,13 @@ var IntelligenceService = class {
       sinceTimestamp = parsed;
     }
     const allRuns = this.db.select().from(runs).where(
-      and30(
-        eq39(runs.projectId, project.id),
-        or6(eq39(runs.status, "completed"), eq39(runs.status, "partial")),
+      and31(
+        eq40(runs.projectId, project.id),
+        or6(eq40(runs.status, "completed"), eq40(runs.status, "partial")),
         // Backfill must not replay probe runs as if they were real sweeps.
         ne5(runs.trigger, RunTriggers.probe)
       )
-    ).orderBy(asc6(runs.finishedAt)).all();
+    ).orderBy(asc8(runs.finishedAt)).all();
     let startIdx = 0;
     let endIdx = allRuns.length;
     if (opts?.fromRunId) {
@@ -36502,7 +37614,7 @@ var IntelligenceService = class {
     return { processed, skipped, totalInsights };
   }
   loadTrackedCompetitors(projectId) {
-    return this.db.select({ domain: competitors.domain }).from(competitors).where(eq39(competitors.projectId, projectId)).all().map((r) => r.domain);
+    return this.db.select({ domain: competitors.domain }).from(competitors).where(eq40(competitors.projectId, projectId)).all().map((r) => r.domain);
   }
   /**
    * Wipe transition signals from an analysis result while keeping health.
@@ -36523,15 +37635,15 @@ var IntelligenceService = class {
   }
   persistResult(result, runId, projectId) {
     const previouslyDismissed = /* @__PURE__ */ new Set();
-    const existingInsights = this.db.select({ query: insights.query, provider: insights.provider, type: insights.type, dismissed: insights.dismissed }).from(insights).where(eq39(insights.runId, runId)).all();
+    const existingInsights = this.db.select({ query: insights.query, provider: insights.provider, type: insights.type, dismissed: insights.dismissed }).from(insights).where(eq40(insights.runId, runId)).all();
     for (const row of existingInsights) {
       if (row.dismissed) {
         previouslyDismissed.add(`${row.query}:${row.provider}:${row.type}`);
       }
     }
     this.db.transaction((tx) => {
-      tx.delete(insights).where(eq39(insights.runId, runId)).run();
-      tx.delete(healthSnapshots).where(eq39(healthSnapshots.runId, runId)).run();
+      tx.delete(insights).where(eq40(insights.runId, runId)).run();
+      tx.delete(healthSnapshots).where(eq40(healthSnapshots.runId, runId)).run();
       const now = (/* @__PURE__ */ new Date()).toISOString();
       for (const insight of result.insights) {
         const wasDismissed = previouslyDismissed.has(`${insight.query}:${insight.provider}:${insight.type}`);
@@ -36584,24 +37696,24 @@ var IntelligenceService = class {
   applySeverityTiering(rawInsights, excludeRunId, projectId) {
     const regressions = rawInsights.filter((i) => i.type === "regression");
     if (regressions.length === 0) return rawInsights;
-    const gscRows = this.db.select({ query: gscSearchData.query, impressions: gscSearchData.impressions }).from(gscSearchData).where(eq39(gscSearchData.projectId, projectId)).all();
+    const gscRows = this.db.select({ query: gscSearchData.query, impressions: gscSearchData.impressions }).from(gscSearchData).where(eq40(gscSearchData.projectId, projectId)).all();
     const gscConnected = gscRows.length > 0;
     const gscImpressionsByQuery = /* @__PURE__ */ new Map();
     for (const row of gscRows) {
       const key = row.query.toLowerCase();
       gscImpressionsByQuery.set(key, (gscImpressionsByQuery.get(key) ?? 0) + row.impressions);
     }
-    const projectRow = this.db.select({ locations: projects.locations }).from(projects).where(eq39(projects.id, projectId)).get();
+    const projectRow = this.db.select({ locations: projects.locations }).from(projects).where(eq40(projects.id, projectId)).get();
     const locationCount = Math.max(
       1,
       (projectRow?.locations ?? []).length
     );
     const ROWS_PER_GROUP_BUDGET = Math.max(2, locationCount);
     const recentRunRows = this.db.select({ id: runs.id, createdAt: runs.createdAt }).from(runs).where(
-      and30(
-        eq39(runs.projectId, projectId),
-        eq39(runs.kind, RunKinds["answer-visibility"]),
-        or6(eq39(runs.status, "completed"), eq39(runs.status, "partial")),
+      and31(
+        eq40(runs.projectId, projectId),
+        eq40(runs.kind, RunKinds["answer-visibility"]),
+        or6(eq40(runs.status, "completed"), eq40(runs.status, "partial")),
         // Defensive — see top of file.
         ne5(runs.trigger, RunTriggers.probe)
       )
@@ -36621,7 +37733,7 @@ var IntelligenceService = class {
     const haveHistory = recentRunIds.length > 0;
     const priorRegressionsByPair = /* @__PURE__ */ new Map();
     if (haveHistory) {
-      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and30(eq39(insights.type, "regression"), inArray15(insights.runId, recentRunIds))).all();
+      const priorRows = this.db.select({ query: insights.query, provider: insights.provider, runId: insights.runId }).from(insights).where(and31(eq40(insights.type, "regression"), inArray15(insights.runId, recentRunIds))).all();
       const regressionGroups = /* @__PURE__ */ new Map();
       for (const row of priorRows) {
         if (!row.runId) continue;
@@ -36650,7 +37762,7 @@ var IntelligenceService = class {
     });
   }
   buildRunData(runId, projectId, completedAt, location = null) {
-    const projectDomainRow = this.db.select({ canonicalDomain: projects.canonicalDomain, ownedDomains: projects.ownedDomains }).from(projects).where(eq39(projects.id, projectId)).get();
+    const projectDomainRow = this.db.select({ canonicalDomain: projects.canonicalDomain, ownedDomains: projects.ownedDomains }).from(projects).where(eq40(projects.id, projectId)).get();
     const projectDomains = projectDomainRow ? effectiveDomains({
       canonicalDomain: projectDomainRow.canonicalDomain,
       ownedDomains: projectDomainRow.ownedDomains
@@ -36667,7 +37779,7 @@ var IntelligenceService = class {
       citedDomains: querySnapshots.citedDomains,
       competitorOverlap: querySnapshots.competitorOverlap,
       snapshotLocation: querySnapshots.location
-    }).from(querySnapshots).leftJoin(queries, eq39(querySnapshots.queryId, queries.id)).where(eq39(querySnapshots.runId, runId)).all();
+    }).from(querySnapshots).leftJoin(queries, eq40(querySnapshots.queryId, queries.id)).where(eq40(querySnapshots.runId, runId)).all();
     const snapshots = [];
     let orphanCount = 0;
     for (const r of rows) {