@canonry/canonry 4.123.0 → 4.125.0

package/assets/assets/{trash-2-Bh-Yvkgc.js → trash-2-BnFgG3Wq.js}

@@ -1 +1 @@
-import{c}from"./index-mzLganDP.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};
+import{c}from"./index-B_CDPjOg.js";const a=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]],h=c("circle-check",a);const e=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],n=c("circle-question-mark",e);const o=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],s=c("download",o);const t=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],r=c("trash-2",t);export{h as C,s as D,r as T,n as a};

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-mzLganDP.js"></script>
+    <script type="module" crossorigin src="./assets/index-B_CDPjOg.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Be8JdV5M.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-CQ77EO2y.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-DSxTZhaH.js">

package/dist/{chunk-JYBNBK25.js → chunk-DN5H2ZN7.js}

@@ -10,7 +10,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-HJIIJI7K.js";
+} from "./chunk-WA57WG6W.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -115,7 +115,7 @@ import {
   siteAuditPages,
   siteAuditSnapshots,
   usageCounters
-} from "./chunk-4AZ7VES6.js";
+} from "./chunk-YPRUBNUK.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -185,7 +185,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-MMFSI3OG.js";
+} from "./chunk-RFLNTI7Y.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -4612,7 +4612,10 @@ async function fetchAllPages(apiKey, path10, queryPairs) {
   );
 }
 function insightsPairs(opts) {
-  return (opts?.fields ?? []).map((field) => `fields[]=${encodeURIComponent(field)}`);
+  return [
+    ...(opts?.fields ?? []).map((field) => `fields[]=${encodeURIComponent(field)}`),
+    ...(opts?.timeRanges ?? []).map((range) => `time_ranges[]=${encodeURIComponent(JSON.stringify(range))}`)
+  ];
 }
 async function getAdAccount(apiKey) {
   validateApiKey(apiKey);
@@ -4793,6 +4796,31 @@ function removeOpenAiAdsConnection(config, projectName) {
 var log4 = createLogger("AdsSync");
 var CAMPAIGN_INSIGHT_FIELDS = ["campaign.impressions", "campaign.clicks", "campaign.spend", "campaign.conversions", "metadata.readable_time"];
 var AD_GROUP_INSIGHT_FIELDS = ["ad_group.impressions", "ad_group.clicks", "ad_group.spend", "ad_group.conversions", "metadata.readable_time"];
+var INSIGHTS_LOOKBACK_MS = 90 * 24 * 60 * 60 * 1e3;
+function accountHour(date, timezone) {
+  const parts = new Intl.DateTimeFormat("en-CA", {
+    timeZone: timezone,
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    hourCycle: "h23"
+  }).formatToParts(date);
+  const value = (type) => {
+    const part = parts.find((candidate) => candidate.type === type)?.value;
+    if (!part) throw new Error(`OpenAI Ads account timezone did not produce a ${type}`);
+    return part;
+  };
+  return `${value("year")}-${value("month")}-${value("day")}T${value("hour")}`;
+}
+function trailingAdsInsightHourRange(now, timezone) {
+  return {
+    type: "hour_range",
+    since: accountHour(new Date(now.getTime() - INSIGHTS_LOOKBACK_MS), timezone),
+    until: accountHour(now, timezone),
+    timezone
+  };
+}
 function toInsightUpserts(level, entityId, rows) {
   const upserts = [];
   for (const row of rows) {
@@ -4830,6 +4858,7 @@ async function executeAdsSync(db, runId, projectId, opts) {
     log4.info("sync.start", { runId, projectId, adAccountId: connRow.adAccountId });
     const account = await getAdAccount(apiKey);
     const campaigns = await listCampaigns(apiKey);
+    const insightTimeRanges = [trailingAdsInsightHourRange(/* @__PURE__ */ new Date(), account.timezone)];
     const errors = /* @__PURE__ */ new Map();
     const adGroupsByCampaign = /* @__PURE__ */ new Map();
     const adsByGroup = /* @__PURE__ */ new Map();
@@ -4839,12 +4868,18 @@ async function executeAdsSync(db, runId, projectId, opts) {
       try {
         const [adGroups, campaignInsights] = await Promise.all([
           listAdGroups(apiKey, campaign.id),
-          getCampaignInsights(apiKey, campaign.id, { fields: CAMPAIGN_INSIGHT_FIELDS })
+          getCampaignInsights(apiKey, campaign.id, {
+            fields: CAMPAIGN_INSIGHT_FIELDS,
+            timeRanges: insightTimeRanges
+          })
         ]);
         const groupResults = await Promise.all(adGroups.map(async (group) => ({
           group,
           ads: await listAds(apiKey, group.id),
-          insights: await getAdGroupInsights(apiKey, group.id, { fields: AD_GROUP_INSIGHT_FIELDS })
+          insights: await getAdGroupInsights(apiKey, group.id, {
+            fields: AD_GROUP_INSIGHT_FIELDS,
+            timeRanges: insightTimeRanges
+          })
         })));
         syncedCampaigns.push(campaign);
         adGroupsByCampaign.set(campaign.id, adGroups);
@@ -6901,7 +6936,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-K35EN43I.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-WJ2ZR7GF.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-MMFSI3OG.js → chunk-RFLNTI7Y.js}

@@ -867,6 +867,10 @@ function formatWindowCountDelta(d, countLabel, windowLabel) {
   const sign = d.deltaAbs > 0 ? "+" : "";
   return `${sign}${formatNumber(Math.round(d.deltaAbs))} ${countLabel} ${windowLabel}`;
 }
+function compactDateToIso(value) {
+  if (value.length !== 8 || !/^\d{8}$/.test(value)) return value;
+  return `${value.slice(0, 4)}-${value.slice(4, 6)}-${value.slice(6, 8)}`;
+}
 
 // ../contracts/src/model-pointers.ts
 var modelPointerEventKindSchema = z7.enum(["introduced", "repointed", "retired"]);
@@ -3908,7 +3912,18 @@ var ga4SessionHistoryEntrySchema = z24.object({
   date: z24.string(),
   sessions: z24.number(),
   organicSessions: z24.number(),
-  users: z24.number()
+  /**
+   * Unique visitors for the day. Deduplicated by GA when `usersSource` is
+   * `deduplicated`; a landing-page sum (which overcounts multi-page visitors)
+   * for days synced before per-day totals were captured.
+   */
+  users: z24.number(),
+  /**
+   * How `users` was derived. `deduplicated` matches the GA UI's active users;
+   * `landing-page-sum` is the legacy overcount kept so historical days still
+   * render. Never compare the two across a series without saying which is which.
+   */
+  usersSource: z24.enum(["deduplicated", "landing-page-sum"])
 });
 
 // ../contracts/src/answer-visibility.ts
@@ -6833,10 +6848,19 @@ var adsOperationStepDtoSchema = z35.discriminatedUnion("state", [
   adsOperationStepRollbackFailedDtoSchema,
   adsOperationStepUnknownDtoSchema
 ]);
+var AdsActivationVersionPolicies = {
+  exact: "exact",
+  refreshSemanticallyUnchanged: "refresh_semantically_unchanged"
+};
+var adsActivationVersionPolicySchema = z35.enum([
+  AdsActivationVersionPolicies.exact,
+  AdsActivationVersionPolicies.refreshSemanticallyUnchanged
+]);
 var adsActivationGrantCreateRequestSchema = z35.object({
   manifest: adsActivationManifestSchema,
   executorApiKeyId: adsEntityIdSchema,
-  expiresAt: adsActivationIsoTimestampSchema
+  expiresAt: adsActivationIsoTimestampSchema,
+  versionPolicy: adsActivationVersionPolicySchema.default(AdsActivationVersionPolicies.exact)
 }).strict();
 var adsActivationGrantResponseSchema = z35.object({
   grant: adsActivationGrantDtoSchema
@@ -7140,6 +7164,7 @@ export {
   formatDeltaCopy,
   formatAverageDelta,
   formatWindowCountDelta,
+  compactDateToIso,
   evaluateModelPointerExposure,
   buildModelChangeNotice,
   googleConnectionDtoSchema,
@@ -7425,6 +7450,7 @@ export {
   adsOperationResponseSchema,
   adsActivationGrantDtoSchema,
   adsOperationStepDtoSchema,
+  AdsActivationVersionPolicies,
   adsActivationGrantCreateRequestSchema,
   adsActivationGrantResponseSchema,
   adsActivationGrantRevokeRequestSchema,

package/dist/{chunk-HJIIJI7K.js → chunk-WA57WG6W.js}

@@ -37,7 +37,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-MMFSI3OG.js";
+} from "./chunk-RFLNTI7Y.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/{chunk-4AZ7VES6.js → chunk-YPRUBNUK.js}

@@ -7,6 +7,7 @@ import {
   AI_PROVIDER_INFRA_DOMAINS,
   AdsActivationEntityTypes,
   AdsActivationGrantStates,
+  AdsActivationVersionPolicies,
   AdsAdGroupBillingEventTypes,
   AdsCampaignBiddingTypes,
   AdsEntityStatuses,
@@ -141,6 +142,7 @@ import {
   classifyTrafficPath,
   clusterByCosine,
   coerceSkillManifest,
+  compactDateToIso,
   competitorBatchRequestSchema,
   competitorDtoSchema,
   computeDedupSimilarityStats,
@@ -334,7 +336,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-MMFSI3OG.js";
+} from "./chunk-RFLNTI7Y.js";
 
 // src/intelligence-service.ts
 import { eq as eq41, desc as desc18, asc as asc9, and as and32, ne as ne6, or as or8, inArray as inArray15, gte as gte10, lte as lte6 } from "drizzle-orm";
@@ -378,6 +380,7 @@ __export(schema_exports, {
   domainClassifications: () => domainClassifications,
   gaAiReferrals: () => gaAiReferrals,
   gaConnections: () => gaConnections,
+  gaDailyTotals: () => gaDailyTotals,
   gaSocialReferrals: () => gaSocialReferrals,
   gaTrafficSnapshots: () => gaTrafficSnapshots,
   gaTrafficSummaries: () => gaTrafficSummaries,
@@ -823,6 +826,20 @@ var gaTrafficSnapshots = sqliteTable("ga_traffic_snapshots", {
   index("idx_ga_traffic_page_normalized").on(table.projectId, table.date, table.landingPageNormalized),
   index("idx_ga_traffic_run").on(table.syncRunId)
 ]);
+var gaDailyTotals = sqliteTable("ga_daily_totals", {
+  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+  date: text("date").notNull(),
+  sessions: integer("sessions").notNull().default(0),
+  users: integer("users").notNull().default(0),
+  syncedAt: text("synced_at").notNull(),
+  syncRunId: text("sync_run_id").references(() => runs.id, { onDelete: "cascade" }),
+  createdAt: text("created_at").notNull()
+}, (table) => [
+  uniqueIndex("idx_ga_daily_totals_project_date").on(table.projectId, table.date),
+  index("idx_ga_daily_totals_project").on(table.projectId),
+  index("idx_ga_daily_totals_run").on(table.syncRunId)
+]);
 var gaAiReferrals = sqliteTable("ga_ai_referrals", {
   id: text("id").primaryKey(),
   projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
@@ -3929,6 +3946,31 @@ var MIGRATION_VERSIONS = [
     run: (tx) => {
       backfillQuerySnapshotServedModel(tx);
     }
+  },
+  {
+    // `users` is not additive across landing pages — one visitor who lands on
+    // three pages is one user but contributes to three `ga_traffic_snapshots`
+    // rows. Summing that dimensioned table overcounts the day. This table
+    // stores the same day fetched with NO landing-page dimension, so GA does
+    // the dedup and the stored number matches the GA UI. Same shape and
+    // rationale as `gsc_daily_totals`.
+    version: 106,
+    name: "ga-daily-totals",
+    statements: [
+      `CREATE TABLE IF NOT EXISTS ga_daily_totals (
+        id           TEXT PRIMARY KEY,
+        project_id   TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+        date         TEXT NOT NULL,
+        sessions     INTEGER NOT NULL DEFAULT 0,
+        users        INTEGER NOT NULL DEFAULT 0,
+        synced_at    TEXT NOT NULL,
+        sync_run_id  TEXT REFERENCES runs(id) ON DELETE CASCADE,
+        created_at   TEXT NOT NULL
+      )`,
+      `CREATE UNIQUE INDEX IF NOT EXISTS idx_ga_daily_totals_project_date ON ga_daily_totals(project_id, date)`,
+      `CREATE INDEX IF NOT EXISTS idx_ga_daily_totals_project ON ga_daily_totals(project_id)`,
+      `CREATE INDEX IF NOT EXISTS idx_ga_daily_totals_run ON ga_daily_totals(sync_run_id)`
+    ]
   }
 ];
 function rebuildBacklinkTableWithSource(tx, table) {
@@ -18582,7 +18624,13 @@ var routeCatalog = [
             properties: {
               manifest: adsActivationManifestSchema2,
               executorApiKeyId: adsEntityIdSchema,
-              expiresAt: { type: "string", format: "date-time" }
+              expiresAt: { type: "string", format: "date-time" },
+              versionPolicy: {
+                type: "string",
+                enum: ["exact", "refresh_semantically_unchanged"],
+                default: "exact",
+                description: "Exact rejects any provider version drift. refresh_semantically_unchanged rebinds versions only when the live paused tree still matches its durable create receipts field-for-field."
+              }
             }
           }
         }
@@ -22475,9 +22523,7 @@ async function fetchTrafficByLandingPage(accessToken, propertyId, days) {
     row.directSessions = directMap.get(key) ?? 0;
   }
   for (const row of rows) {
-    if (row.date.length === 8 && !row.date.includes("-")) {
-      row.date = `${row.date.slice(0, 4)}-${row.date.slice(4, 6)}-${row.date.slice(6, 8)}`;
-    }
+    row.date = compactDateToIso(row.date);
   }
   ga4Log("info", "fetch-traffic.done", { propertyId, rowCount: rows.length });
   return rows;
@@ -22544,6 +22590,28 @@ async function fetchAggregateSummary(accessToken, propertyId, days) {
   ga4Log("info", "fetch-aggregate.done", { propertyId, ...summary });
   return summary;
 }
+async function fetchDailyTotals(accessToken, propertyId, days) {
+  validateAccessToken2(accessToken);
+  validatePropertyId(propertyId);
+  const syncDays = Math.min(Math.max(1, days ?? GA4_DEFAULT_SYNC_DAYS), GA4_MAX_SYNC_DAYS);
+  const endDate = /* @__PURE__ */ new Date();
+  const startDate = /* @__PURE__ */ new Date();
+  startDate.setDate(startDate.getDate() - syncDays);
+  ga4Log("info", "fetch-daily-totals.start", { propertyId, days: syncDays });
+  const res = await runReport(accessToken, propertyId, {
+    dateRanges: [{ startDate: formatDate2(startDate), endDate: formatDate2(endDate) }],
+    dimensions: [{ name: GA4_DIMENSIONS.date }],
+    metrics: [{ name: GA4_METRICS.sessions }, { name: GA4_METRICS.totalUsers }],
+    limit: syncDays + 1
+  });
+  const rows = (res.rows ?? []).map((row) => ({
+    date: compactDateToIso(row.dimensionValues[0]?.value ?? ""),
+    sessions: parseInt(row.metricValues[0]?.value ?? "0", 10) || 0,
+    users: parseInt(row.metricValues[1]?.value ?? "0", 10) || 0
+  })).filter((row) => row.date.length > 0);
+  ga4Log("info", "fetch-daily-totals.done", { propertyId, days: syncDays, rows: rows.length });
+  return rows;
+}
 var WINDOW_DAYS = { "7d": 7, "30d": 30, "90d": 90 };
 async function fetchWindowSummary(accessToken, propertyId, windowKey) {
   validateAccessToken2(accessToken);
@@ -22691,9 +22759,7 @@ async function fetchAiReferrals(accessToken, propertyId, days) {
   }
   const dedupedRows = [...deduped.values()];
   for (const row of dedupedRows) {
-    if (row.date.length === 8 && !row.date.includes("-")) {
-      row.date = `${row.date.slice(0, 4)}-${row.date.slice(4, 6)}-${row.date.slice(6, 8)}`;
-    }
+    row.date = compactDateToIso(row.date);
   }
   ga4Log("info", "fetch-ai-referrals.done", { propertyId, rowCount: dedupedRows.length });
   return dedupedRows;
@@ -22754,9 +22820,7 @@ async function fetchSocialReferrals(accessToken, propertyId, days) {
     if (pageRows.length < PAGE_SIZE || offset >= totalRows) break;
   }
   for (const row of rows) {
-    if (row.date.length === 8 && !row.date.includes("-")) {
-      row.date = `${row.date.slice(0, 4)}-${row.date.slice(4, 6)}-${row.date.slice(6, 8)}`;
-    }
+    row.date = compactDateToIso(row.date);
   }
   ga4Log("info", "fetch-social-referrals.done", { propertyId, rowCount: rows.length });
   return rows;
@@ -24891,6 +24955,81 @@ async function preflightAdsActivationApproval(provider, request) {
   }
   return { manifest, manifestHash: hashAdsActivationManifest(manifest) };
 }
+async function refreshSemanticallyUnchangedAdsActivationManifest(provider, request) {
+  const manifest = canonicalManifest(request.manifest);
+  await validateAccount(provider, request.adAccountId);
+  await validateExactDescendants(provider, manifest, {
+    entityType: AdsActivationEntityTypes.campaign,
+    entityId: manifest.campaign.id,
+    parentId: null,
+    expectedUpdatedAt: manifest.campaign.expectedUpdatedAt
+  });
+  const versions = /* @__PURE__ */ new Map();
+  for (const target of activationTargets(manifest)) {
+    let entity;
+    try {
+      entity = await readTarget(provider, target);
+    } catch {
+      throw targetError(
+        AdsActivationErrorCodes.providerReadFailed,
+        "An ads entity could not be verified for version refresh",
+        502,
+        target
+      );
+    }
+    validateIdentity(target, entity);
+    validateAdApproval(target, entity);
+    if (entity.status !== PROVIDER_PAUSED) {
+      throw targetError(AdsActivationErrorCodes.entityNotPaused, "Every approved ads entity must still be paused", 409, target);
+    }
+    if (!Number.isInteger(entity.updatedAt) || entity.updatedAt === null || entity.updatedAt < 0) {
+      throw targetError(
+        AdsActivationErrorCodes.providerReadFailed,
+        "An ads entity did not report a usable provider version",
+        502,
+        target
+      );
+    }
+    if (!request.semanticallyMatchesMaterialization(target.entityType, target.entityId, entity)) {
+      throw targetError(
+        AdsActivationErrorCodes.entityMismatch,
+        "An ads entity no longer matches its materialized approved fields",
+        409,
+        target
+      );
+    }
+    versions.set(`${target.entityType}:${target.entityId}`, entity.updatedAt);
+  }
+  const version = (entityType, entityId) => {
+    const current = versions.get(`${entityType}:${entityId}`);
+    if (current === void 0) {
+      throw new AdsActivationError(
+        AdsActivationErrorCodes.persistenceFailed,
+        "A refreshed ads entity version is missing",
+        500
+      );
+    }
+    return current;
+  };
+  const refreshed = {
+    campaign: {
+      id: manifest.campaign.id,
+      expectedUpdatedAt: version(AdsActivationEntityTypes.campaign, manifest.campaign.id),
+      adGroups: manifest.campaign.adGroups.map((group) => ({
+        id: group.id,
+        expectedUpdatedAt: version(AdsActivationEntityTypes.ad_group, group.id),
+        ads: group.ads.map((ad) => ({
+          id: ad.id,
+          expectedUpdatedAt: version(AdsActivationEntityTypes.ad, ad.id)
+        }))
+      }))
+    }
+  };
+  return preflightAdsActivationApproval(provider, {
+    adAccountId: request.adAccountId,
+    manifest: refreshed
+  });
+}
 function stepTarget(manifest, step) {
   const target = activationTargets(manifest).find(
     (candidate) => candidate.entityType === step.entityType && candidate.entityId === step.entityId
@@ -26462,7 +26601,11 @@ function registerAdsActivationRoutes(app, opts) {
       const runtime = await opts.resolveRuntime(project);
       let preflight;
       try {
-        preflight = await preflightAdsActivationApproval(runtime.provider, {
+        preflight = body.versionPolicy === AdsActivationVersionPolicies.refreshSemanticallyUnchanged ? await refreshSemanticallyUnchangedAdsActivationManifest(runtime.provider, {
+          adAccountId: runtime.adAccountId,
+          manifest: body.manifest,
+          semanticallyMatchesMaterialization: runtime.semanticallyMatchesMaterialization ?? (() => false)
+        }) : await preflightAdsActivationApproval(runtime.provider, {
           adAccountId: runtime.adAccountId,
           manifest: body.manifest
         });
@@ -26903,6 +27046,44 @@ function entityMatchesReconcileFields(entity, desired, fingerprint) {
   const candidateFingerprint = requestHash(selected);
   return fingerprint === null ? candidateFingerprint === requestHash(desired) : candidateFingerprint === fingerprint;
 }
+function semanticallyMatchesMaterializedEntity(app, input) {
+  const createKind = (() => {
+    switch (input.entityType) {
+      case AdsActivationEntityTypes.campaign:
+        return AdsOperationKinds.campaign_create;
+      case AdsActivationEntityTypes.ad_group:
+        return AdsOperationKinds.ad_group_create;
+      case AdsActivationEntityTypes.ad:
+        return AdsOperationKinds.ad_create;
+    }
+  })();
+  const updateKind = (() => {
+    switch (input.entityType) {
+      case AdsActivationEntityTypes.campaign:
+        return AdsOperationKinds.campaign_update;
+      case AdsActivationEntityTypes.ad_group:
+        return AdsOperationKinds.ad_group_update;
+      case AdsActivationEntityTypes.ad:
+        return AdsOperationKinds.ad_update;
+    }
+  })();
+  const rows = app.db.select().from(adsOperations).where(and20(
+    eq26(adsOperations.projectId, input.projectId),
+    eq26(adsOperations.entityType, input.entityType),
+    eq26(adsOperations.entityId, input.entityId),
+    inArray12(adsOperations.kind, [createKind, updateKind])
+  )).orderBy(asc6(adsOperations.createdAt), asc6(adsOperations.id)).all();
+  if (rows.some((row) => row.state === AdsOperationStates.pending || row.state === AdsOperationStates.reconciling || row.state === AdsOperationStates.unknown || row.kind === updateKind && row.state === AdsOperationStates.succeeded)) {
+    return false;
+  }
+  const creates = rows.filter((row) => row.kind === createKind && row.state === AdsOperationStates.succeeded);
+  if (creates.length !== 1) return false;
+  const create = creates[0];
+  if (create.adAccountId !== input.adAccountId || create.reconcileStrategy !== AdsReconcileStrategies.create_fingerprint || !create.reconcileFields) {
+    return false;
+  }
+  return entityMatchesReconcileFields(input.entity, create.reconcileFields, null);
+}
 function reconcileFieldsWithoutParent(fields) {
   const { campaignId: _campaignId, adGroupId: _adGroupId, ...withoutParent } = fields;
   return withoutParent;
@@ -27686,6 +27867,16 @@ async function adsRoutes(app, opts) {
       }
       return {
         adAccountId,
+        semanticallyMatchesMaterialization: (entityType, entityId, entity) => {
+          if (entity.status === null || entity.updatedAt === null) return false;
+          return semanticallyMatchesMaterializedEntity(app, {
+            projectId: project.id,
+            adAccountId,
+            entityType,
+            entityId,
+            entity: { ...entity, status: entity.status, updatedAt: entity.updatedAt }
+          });
+        },
         provider: {
           getAccount: refreshAccount,
           getCampaign: (id) => operator.getCampaign(apiKey, id),
@@ -29234,6 +29425,23 @@ async function cdpRoutes(app, opts) {
 // ../api-routes/src/ga.ts
 import crypto24 from "crypto";
 import { eq as eq29, desc as desc13, and as and23, sql as sql12 } from "drizzle-orm";
+
+// ../api-routes/src/ga-session-history.ts
+function buildSessionHistory(landingPageDays, dailyTotals) {
+  const totalsByDate = new Map(dailyTotals.map((row) => [row.date, row.users]));
+  return landingPageDays.map((day) => {
+    const deduplicated = totalsByDate.get(day.date);
+    return {
+      date: day.date,
+      sessions: day.sessions,
+      organicSessions: day.organicSessions,
+      users: deduplicated ?? day.users,
+      usersSource: deduplicated === void 0 ? "landing-page-sum" : "deduplicated"
+    };
+  });
+}
+
+// ../api-routes/src/ga.ts
 function gaLog(level, action, ctx) {
   const entry = { ts: (/* @__PURE__ */ new Date()).toISOString(), level, module: "GA4Routes", action, ...ctx };
   const stream = level === "error" ? process.stderr : process.stdout;
@@ -29512,6 +29720,7 @@ async function ga4Routes(app, opts) {
     }
     app.db.delete(gaTrafficSnapshots).where(eq29(gaTrafficSnapshots.projectId, project.id)).run();
     app.db.delete(gaTrafficSummaries).where(eq29(gaTrafficSummaries.projectId, project.id)).run();
+    app.db.delete(gaDailyTotals).where(eq29(gaDailyTotals.projectId, project.id)).run();
     app.db.delete(gaAiReferrals).where(eq29(gaAiReferrals.projectId, project.id)).run();
     app.db.delete(gaSocialReferrals).where(eq29(gaSocialReferrals.projectId, project.id)).run();
     const propertyId = saConn?.propertyId ?? oauthConn?.propertyId ?? null;
@@ -29576,7 +29785,8 @@ async function ga4Routes(app, opts) {
       const WINDOW_KEYS = ["7d", "30d", "90d"];
       const fetches = [
         fetchAggregateSummary(accessToken, propertyId, days),
-        ...WINDOW_KEYS.map((w) => fetchWindowSummary(accessToken, propertyId, w))
+        ...WINDOW_KEYS.map((w) => fetchWindowSummary(accessToken, propertyId, w)),
+        fetchDailyTotals(accessToken, propertyId, days)
       ];
       if (syncTraffic) fetches.push(fetchTrafficByLandingPage(accessToken, propertyId, days));
       if (syncAi) fetches.push(fetchAiReferrals(accessToken, propertyId, days));
@@ -29584,7 +29794,8 @@ async function ga4Routes(app, opts) {
       const results = await Promise.all(fetches);
       const summary = results[0];
       const windowSummaries = results.slice(1, 1 + WINDOW_KEYS.length);
-      let idx = 1 + WINDOW_KEYS.length;
+      const dailyTotals = results[1 + WINDOW_KEYS.length];
+      let idx = 2 + WINDOW_KEYS.length;
       if (syncTraffic) {
         rows = results[idx++];
       }
@@ -29620,6 +29831,25 @@ async function ga4Routes(app, opts) {
             }).run();
           }
         }
+        tx.delete(gaDailyTotals).where(
+          and23(
+            eq29(gaDailyTotals.projectId, project.id),
+            sql12`${gaDailyTotals.date} >= ${summary.periodStart}`,
+            sql12`${gaDailyTotals.date} <= ${summary.periodEnd}`
+          )
+        ).run();
+        for (const row of dailyTotals) {
+          tx.insert(gaDailyTotals).values({
+            id: crypto24.randomUUID(),
+            projectId: project.id,
+            date: row.date,
+            sessions: row.sessions,
+            users: row.users,
+            syncedAt: now,
+            syncRunId: runId,
+            createdAt: now
+          }).run();
+        }
         if (syncAi) {
           tx.delete(gaAiReferrals).where(
             and23(
@@ -30116,12 +30346,18 @@ async function ga4Routes(app, opts) {
       organicSessions: sql12`SUM(${gaTrafficSnapshots.organicSessions})`,
       users: sql12`SUM(${gaTrafficSnapshots.users})`
     }).from(gaTrafficSnapshots).where(and23(...conditions)).groupBy(gaTrafficSnapshots.date).orderBy(gaTrafficSnapshots.date).all();
-    return rows.map((r) => ({
-      date: r.date,
-      sessions: r.sessions ?? 0,
-      organicSessions: r.organicSessions ?? 0,
-      users: r.users ?? 0
-    }));
+    const totalConditions = [eq29(gaDailyTotals.projectId, project.id)];
+    if (cutoffDate) totalConditions.push(sql12`${gaDailyTotals.date} >= ${cutoffDate}`);
+    const totals = app.db.select({ date: gaDailyTotals.date, users: gaDailyTotals.users }).from(gaDailyTotals).where(and23(...totalConditions)).all();
+    return buildSessionHistory(
+      rows.map((r) => ({
+        date: r.date,
+        sessions: r.sessions ?? 0,
+        organicSessions: r.organicSessions ?? 0,
+        users: r.users ?? 0
+      })),
+      totals
+    );
   });
   app.get("/projects/:name/ga/coverage", async (request, _reply) => {
     const project = resolveProject(app.db, request.params.name);

package/dist/cli.js

@@ -29,7 +29,7 @@ import {
   setTelemetrySource,
   showFirstRunNotice,
   trackEvent
-} from "./chunk-JYBNBK25.js";
+} from "./chunk-DN5H2ZN7.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -46,7 +46,7 @@ import {
   saveConfig,
   saveConfigPatch,
   usageError
-} from "./chunk-HJIIJI7K.js";
+} from "./chunk-WA57WG6W.js";
 import {
   apiKeys,
   createClient,
@@ -54,7 +54,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-4AZ7VES6.js";
+} from "./chunk-YPRUBNUK.js";
 import {
   AdsOperationKinds,
   AdsOperationStates,
@@ -95,7 +95,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-MMFSI3OG.js";
+} from "./chunk-RFLNTI7Y.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -3763,10 +3763,16 @@ async function gaSessionHistory(project, opts) {
   console.log(`  ${"DATE".padEnd(dateWidth)}  ${"SESSIONS".padEnd(10)}${"ORGANIC".padEnd(10)}${"USERS".padEnd(8)}`);
   console.log(`  ${"\u2500".repeat(dateWidth)}  ${"\u2500".repeat(10)}${"\u2500".repeat(10)}${"\u2500".repeat(8)}`);
   for (const row of result) {
+    const users = row.usersSource === "deduplicated" ? String(row.users) : `${row.users}*`;
     console.log(
-      `  ${row.date.padEnd(dateWidth)}  ${String(row.sessions).padEnd(10)}${String(row.organicSessions).padEnd(10)}${String(row.users).padEnd(8)}`
+      `  ${row.date.padEnd(dateWidth)}  ${String(row.sessions).padEnd(10)}${String(row.organicSessions).padEnd(10)}${users.padEnd(8)}`
     );
   }
+  if (result.some((row) => row.usersSource !== "deduplicated")) {
+    console.log("\n  * Visitor count is approximate \u2014 it adds up each page a visitor landed on,");
+    console.log("    so someone who read several pages is counted more than once. Run");
+    console.log(`    "canonry ga sync ${project}" to replace these with exact counts.`);
+  }
 }
 async function gaCoverage(project, format) {
   const client = getClient6();