@canonry/canonry 4.147.1 → 4.148.3

package/assets/assets/{trash-2-UHAxuTT7.js → trash-2-lAIhBm6w.js}

@@ -1 +1 @@
-import{c as a}from"./index-DF8X6nM0.js";const t=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],h=a("circle-question-mark",t);const e=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],d=a("download",e);const o=[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]],p=a("external-link",o);const c=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],s=a("trash-2",c);export{h as C,d as D,p as E,s as T};
+import{c as a}from"./index-Bo0hzrG2.js";const t=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],h=a("circle-question-mark",t);const e=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],d=a("download",e);const o=[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]],p=a("external-link",o);const c=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],s=a("trash-2",c);export{h as C,d as D,p as E,s as T};

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-DF8X6nM0.js"></script>
+    <script type="module" crossorigin src="./assets/index-Bo0hzrG2.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-BjS7iY3g.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-DnzzbllM.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-33ACLxsD.js">

package/dist/{chunk-BVOU4UJM.js → chunk-3VMKOSTQ.js}

@@ -5436,6 +5436,14 @@ var apiKeyDtoSchema = z9.object({
    * scoped key may only read/write its own project (enforced server-side).
    */
   projectId: z9.string().nullable(),
+  /**
+   * The scoped project's name, or `null` for a full-instance key. Resolved
+   * server-side so a surface listing keys does not have to fetch every project
+   * to turn an id into something a person can read — the id alone cannot answer
+   * "is this key safe to hand to someone", which is the question the list is
+   * usually open to answer. Additive field.
+   */
+  projectName: z9.string().nullable(),
   /**
    * Server-derived convenience flag: `true` when this key is read-only (carries
    * the `read` scope and no write-granting scope), in which case the API rejects
@@ -7885,7 +7893,32 @@ async function withRetry(fn, opts = {}) {
   }
   throw lastErr;
 }
+var RATE_LIMIT_MARKERS = [
+  "throttle",
+  // Bing Webmaster Tools: ThrottleHost / ThrottleUser
+  "rate limit",
+  "ratelimit",
+  "too many requests",
+  "quota exceeded",
+  "quotaexceeded",
+  "over quota",
+  "slow down"
+];
+function isRateLimitError(err) {
+  if (err != null && typeof err === "object") {
+    const record = err;
+    const retryAfter = record.retryAfter ?? record["retry-after"];
+    if (typeof retryAfter === "number" || typeof retryAfter === "string") return true;
+    if (typeof record.status === "number" && record.status === 429) return true;
+  }
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return RATE_LIMIT_MARKERS.some((marker) => msg.includes(marker));
+  }
+  return false;
+}
 function isRetryableHttpError(err) {
+  if (isRateLimitError(err)) return true;
   if (err != null && typeof err === "object" && "status" in err) {
     const status = err.status;
     if (typeof status === "number") {

package/dist/{chunk-GNKVF6TZ.js → chunk-GUKRQT22.js}

@@ -10,7 +10,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-2NTWZHNF.js";
+} from "./chunk-NIKDPQOF.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -126,7 +126,7 @@ import {
   siteAuditSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-ZRUNFIGA.js";
+} from "./chunk-ILUVQDXM.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -217,7 +217,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-BVOU4UJM.js";
+} from "./chunk-3VMKOSTQ.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -7420,7 +7420,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-2E5YAXI3.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-CEYWNR6W.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-ZRUNFIGA.js → chunk-ILUVQDXM.js}

@@ -517,7 +517,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-BVOU4UJM.js";
+} from "./chunk-3VMKOSTQ.js";
 
 // src/intelligence-service.ts
 import { eq as eq57, desc as desc26, asc as asc11, and as and45, ne as ne7, or as or11, inArray as inArray19, gte as gte13, lte as lte10 } from "drizzle-orm";
@@ -32727,26 +32727,32 @@ function buildOperationId(method, path8) {
 import crypto22 from "crypto";
 import { desc as desc16, eq as eq35 } from "drizzle-orm";
 var KEYS_WRITE_SCOPE = "keys.write";
-function toApiKeyDto(row) {
+function toApiKeyDto(row, projectNames) {
   const scopes = Array.isArray(row.scopes) ? row.scopes : [];
+  const projectId = row.projectId ?? null;
   return {
     id: row.id,
     name: row.name,
     keyPrefix: row.keyPrefix,
     scopes,
-    projectId: row.projectId ?? null,
+    projectId,
+    projectName: projectId ? projectNames.get(projectId) ?? null : null,
     readOnly: isReadOnlyKey(scopes),
     createdAt: row.createdAt,
     lastUsedAt: row.lastUsedAt ?? null,
     revokedAt: row.revokedAt ?? null
   };
 }
+function projectNameById(db) {
+  return new Map(db.select().from(projects).all().map((p) => [p.id, p.name]));
+}
 async function keysRoutes(app) {
   app.get("/keys", async (request) => {
     requireAdminSession(request);
     const scopedProjectId = request.apiKey?.projectId;
     const rows = scopedProjectId ? app.db.select().from(apiKeys).where(eq35(apiKeys.projectId, scopedProjectId)).orderBy(desc16(apiKeys.createdAt)).all() : app.db.select().from(apiKeys).orderBy(desc16(apiKeys.createdAt)).all();
-    return { keys: rows.map(toApiKeyDto) };
+    const names = projectNameById(app.db);
+    return { keys: rows.map((row) => toApiKeyDto(row, names)) };
   });
   app.get("/keys/self", async (request) => {
     const id = request.apiKey?.id;
@@ -32757,7 +32763,7 @@ async function keysRoutes(app) {
     if (!row) {
       throw notFound("API key", id);
     }
-    return toApiKeyDto(row);
+    return toApiKeyDto(row, projectNameById(app.db));
   });
   app.post("/keys", async (request) => {
     requireAdminSession(request);
@@ -32807,6 +32813,9 @@ async function keysRoutes(app) {
       keyPrefix,
       scopes: effectiveScopes,
       projectId: projectId ?? null,
+      // Resolved from the project the caller just named, so the response says
+      // what the key reaches without a second round trip.
+      projectName: projectId ? projectNameById(app.db).get(projectId) ?? null : null,
       readOnly: isReadOnlyKey(effectiveScopes),
       createdAt: now,
       lastUsedAt: null,
@@ -32831,7 +32840,7 @@ async function keysRoutes(app) {
       throw forbidden("A project-scoped key can only revoke keys scoped to its own project.");
     }
     if (row.revokedAt) {
-      return toApiKeyDto(row);
+      return toApiKeyDto(row, projectNameById(app.db));
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     app.db.transaction((tx) => {
@@ -32844,7 +32853,7 @@ async function keysRoutes(app) {
         diff: { name: row.name, keyPrefix: row.keyPrefix }
       }));
     });
-    return toApiKeyDto({ ...row, revokedAt: now });
+    return toApiKeyDto({ ...row, revokedAt: now }, projectNameById(app.db));
   });
 }
 

package/dist/{chunk-2NTWZHNF.js → chunk-NIKDPQOF.js}

@@ -81,7 +81,7 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema
-} from "./chunk-BVOU4UJM.js";
+} from "./chunk-3VMKOSTQ.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/cli.js

@@ -30,7 +30,7 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-GNKVF6TZ.js";
+} from "./chunk-GUKRQT22.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -50,7 +50,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-2NTWZHNF.js";
+} from "./chunk-NIKDPQOF.js";
 import {
   apiKeys,
   createClient,
@@ -58,7 +58,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-ZRUNFIGA.js";
+} from "./chunk-ILUVQDXM.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -122,7 +122,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-BVOU4UJM.js";
+} from "./chunk-3VMKOSTQ.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -7437,16 +7437,21 @@ async function listApiKeys(format) {
     return;
   }
   console.log(
-    `${"NAME".padEnd(20)} ${"PREFIX".padEnd(11)} ${"SCOPES".padEnd(20)} ${"CREATED".padEnd(12)} ${"LAST USED".padEnd(12)} STATUS`
+    `${"NAME".padEnd(20)} ${"PREFIX".padEnd(11)} ${"SCOPES".padEnd(20)} ${"REACH".padEnd(18)} ${"CREATED".padEnd(12)} ${"LAST USED".padEnd(12)} STATUS`
   );
   for (const key of keys) {
     const scopes = key.scopes.join(",");
     const lastUsed = key.lastUsedAt ? formatIsoDate(key.lastUsedAt) : "\u2014";
     console.log(
-      `${key.name.padEnd(20)} ${key.keyPrefix.padEnd(11)} ${scopes.padEnd(20)} ${formatIsoDate(key.createdAt).padEnd(12)} ${lastUsed.padEnd(12)} ${keyStatus(key)}`
+      `${key.name.padEnd(20)} ${key.keyPrefix.padEnd(11)} ${scopes.padEnd(20)} ${keyReach(key).padEnd(18)} ${formatIsoDate(key.createdAt).padEnd(12)} ${lastUsed.padEnd(12)} ${keyStatus(key)}`
     );
   }
 }
+function keyReach(key) {
+  if (!key.projectId) return "full instance";
+  if (typeof key.projectName === "string") return key.projectName;
+  return key.projectName === null ? "(deleted project)" : key.projectId.slice(0, 8);
+}
 async function createApiKey(opts) {
   const explicitScopes = opts.scopes && opts.scopes.length > 0 ? opts.scopes : void 0;
   if (opts.readOnly && explicitScopes) {
@@ -7475,7 +7480,7 @@ async function createApiKey(opts) {
   console.log(`  Prefix:    ${created.keyPrefix}`);
   console.log(`  Scopes:    ${created.scopes.join(", ")}`);
   console.log(`  Read-only: ${created.readOnly ? "yes" : "no"}`);
-  console.log(`  Project:   ${opts.project ?? "(full instance)"}`);
+  console.log(`  Reach:     ${keyReach(created)}`);
   console.log("\nSave this now \u2014 it will not be shown again.");
 }
 async function showApiKeySelf(format) {
@@ -7488,6 +7493,7 @@ async function showApiKeySelf(format) {
   console.log(`API key "${key.name}" (${key.keyPrefix})`);
   console.log(`  Scopes:    ${key.scopes.join(", ")}`);
   console.log(`  Read-only: ${key.readOnly ? "yes" : "no"}`);
+  console.log(`  Reach:     ${keyReach(key)}`);
   console.log(`  Status:    ${keyStatus(key)}`);
 }
 async function revokeApiKey(id, format) {

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-GNKVF6TZ.js";
+} from "./chunk-GUKRQT22.js";
 import {
   loadConfig
-} from "./chunk-2NTWZHNF.js";
-import "./chunk-ZRUNFIGA.js";
-import "./chunk-BVOU4UJM.js";
+} from "./chunk-NIKDPQOF.js";
+import "./chunk-ILUVQDXM.js";
+import "./chunk-3VMKOSTQ.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-2E5YAXI3.js → intelligence-service-CEYWNR6W.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-ZRUNFIGA.js";
-import "./chunk-BVOU4UJM.js";
+} from "./chunk-ILUVQDXM.js";
+import "./chunk-3VMKOSTQ.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-2NTWZHNF.js";
+} from "./chunk-NIKDPQOF.js";
 import {
   isReadOnlyKey
-} from "./chunk-BVOU4UJM.js";
+} from "./chunk-3VMKOSTQ.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "4.147.1",
+  "version": "4.148.3",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -67,26 +67,26 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-provider-openai": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0"
+    "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",