@canonry/canonry 4.152.0 → 4.154.0

package/dist/{chunk-JWTFZG7Q.js → chunk-IFZS2TXV.js}

@@ -521,7 +521,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-BUAVO37B.js";
+} from "./chunk-NNW7TJUZ.js";
 
 // src/intelligence-service.ts
 import { eq as eq57, desc as desc26, asc as asc11, and as and45, ne as ne7, or as or11, inArray as inArray19, gte as gte13, lte as lte10 } from "drizzle-orm";
@@ -15721,6 +15721,31 @@ function validatedCursor(query, activePlanVersionId) {
   }
   return cursor;
 }
+function measurementOutcomeCounts(rows) {
+  const counts2 = {
+    bothSignals: 0,
+    mentionedOnly: 0,
+    citedOnly: 0,
+    neither: 0,
+    notMeasured: 0,
+    total: rows.length
+  };
+  for (const row of rows) {
+    const mention = row.mentionCoverage;
+    const citation = row.citationCoverage;
+    if (mention.state !== "available" || citation.state !== "available") {
+      counts2.notMeasured += 1;
+      continue;
+    }
+    const mentioned = (mention.numerator ?? mention.value) > 0;
+    const cited = (citation.numerator ?? citation.value) > 0;
+    if (mentioned && cited) counts2.bothSignals += 1;
+    else if (mentioned) counts2.mentionedOnly += 1;
+    else if (cited) counts2.citedOnly += 1;
+    else counts2.neither += 1;
+  }
+  return counts2;
+}
 function pageOf(rows, query, displayedRunId, activePlanVersionId, evidenceFingerprint) {
   const sort = query.sort ?? MEASUREMENT_OVERVIEW_DEFAULT_SORT;
   const ordered = [...rows].sort((left, right) => compareRows(left, right, sort));
@@ -15738,16 +15763,19 @@ function pageOf(rows, query, displayedRunId, activePlanVersionId, evidenceFinger
   const items = ordered.slice(offset, offset + limit);
   const last = items.at(-1);
   return {
-    items,
-    nextCursor: last === void 0 || ordered.at(offset + limit) === void 0 ? null : cursorOf(
-      last,
-      sort,
-      displayedRunId,
-      overviewFilterFingerprint(query),
-      activePlanVersionId,
-      evidenceFingerprint
-    ),
-    totalEstimate: ordered.length
+    page: {
+      items,
+      nextCursor: last === void 0 || ordered.at(offset + limit) === void 0 ? null : cursorOf(
+        last,
+        sort,
+        displayedRunId,
+        overviewFilterFingerprint(query),
+        activePlanVersionId,
+        evidenceFingerprint
+      ),
+      totalEstimate: ordered.length
+    },
+    outcomes: measurementOutcomeCounts(ordered)
   };
 }
 function runRevisionMismatch(runId, runRevision, activeRevision) {
@@ -15879,7 +15907,7 @@ function runProgress(db, displayed, plan) {
 }
 function planV1Overview(db, projectId, active, query, scope) {
   const displayed = selectDisplayedRun(db, projectId, active, query);
-  const page = pageOf(
+  const { page, outcomes } = pageOf(
     propertyLabels(active.plan, scope).filter((row) => matchesSearch(row, query.search)).map((row) => ({
       ...row,
       mentionCoverage: unavailable2("plan_v1"),
@@ -15913,6 +15941,7 @@ function planV1Overview(db, projectId, active, query, scope) {
       sov: unavailable2("plan_v1")
     },
     properties: page,
+    outcomes,
     flags: { total: 0 }
   };
 }
@@ -15922,7 +15951,7 @@ function planV2Overview(db, projectId, active, plan, query, scope, cache) {
   const current = latestMeasurementRun(db, projectId, active.version.id, CURRENT_RUN_STATUSES);
   const currentDto = current ? { currentRunId: current.id } : {};
   if (!displayed) {
-    const page2 = pageOf(
+    const { page: page2, outcomes: outcomes2 } = pageOf(
       propertyLabels(plan, scope).filter((row) => matchesSearch(row, query.search)).map((row) => ({
         ...row,
         mentionCoverage: unavailable2("no_completed_run"),
@@ -15954,6 +15983,7 @@ function planV2Overview(db, projectId, active, plan, query, scope, cache) {
         sov: unavailable2("no_completed_run")
       },
       properties: page2,
+      outcomes: outcomes2,
       flags: { total: 0 }
     };
   }
@@ -15982,7 +16012,7 @@ function planV2Overview(db, projectId, active, plan, query, scope, cache) {
   const measured = new Map(
     overview.properties.map((row) => [row.targetId, row])
   );
-  const page = pageOf(
+  const { page, outcomes } = pageOf(
     propertyLabels(plan, scope).filter((row) => matchesSearch(row, query.search)).map((row) => {
       const property = measured.get(row.targetKey);
       return {
@@ -16036,6 +16066,7 @@ function planV2Overview(db, projectId, active, plan, query, scope, cache) {
       sov: brandPresence
     },
     properties: page,
+    outcomes,
     flags: { total: overview.flags },
     ...namedShareOfVoice === void 0 ? {} : { namedShareOfVoice }
   };
@@ -35470,8 +35501,9 @@ function isSitemapOwnedByProperty(sitemapUrl, propertyId, canonicalDomain) {
 function signState(payload, secret) {
   return crypto29.createHmac("sha256", secret).update(payload).digest("hex");
 }
+var OAUTH_STATE_MAX_AGE_MS = 15 * 60 * 1e3;
 function buildSignedState(data, secret) {
-  const payload = JSON.stringify(data);
+  const payload = JSON.stringify({ ...data, issuedAt: Date.now() });
   const sig = signState(payload, secret);
   return Buffer.from(JSON.stringify({ payload, sig })).toString("base64url");
 }
@@ -35480,7 +35512,10 @@ function verifySignedState(encoded, secret) {
     const { payload, sig } = JSON.parse(Buffer.from(encoded, "base64url").toString());
     const expected = signState(payload, secret);
     if (!crypto29.timingSafeEqual(Buffer.from(sig, "hex"), Buffer.from(expected, "hex"))) return null;
-    return JSON.parse(payload);
+    const parsed = JSON.parse(payload);
+    const issuedAt = typeof parsed.issuedAt === "number" ? parsed.issuedAt : null;
+    if (issuedAt === null || Date.now() - issuedAt > OAUTH_STATE_MAX_AGE_MS) return null;
+    return parsed;
   } catch {
     return null;
   }
@@ -41766,9 +41801,12 @@ async function adsRoutes(app, opts) {
 }
 
 // ../api-routes/src/bing.ts
-import crypto33 from "crypto";
+import crypto34 from "crypto";
 import { eq as eq42, and as and33, desc as desc19 } from "drizzle-orm";
 
+// ../integration-bing/src/bing-client.ts
+import crypto33 from "crypto";
+
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
 var BING_SUBMIT_URL_BATCH_LIMIT = 500;
@@ -41777,6 +41815,7 @@ var BING_REQUEST_TIMEOUT_MS = 3e4;
 var BING_MAX_RETRIES = 4;
 var BING_RETRY_BASE_DELAY_MS = 2e3;
 var BING_RETRY_MAX_DELAY_MS = 3e4;
+var BING_THROTTLE_COOLDOWN_MS = 10 * 60 * 1e3;
 
 // ../integration-bing/src/types.ts
 var BING_THROTTLE_ERROR_CODES = /* @__PURE__ */ new Set([4, 5]);
@@ -41916,26 +41955,58 @@ async function bingFetchOnce(apiKey, endpoint, opts) {
     throw new BingApiError("Bing API returned invalid JSON", 502);
   }
 }
+var throttleCooldownUntil = /* @__PURE__ */ new Map();
+var cooldownNow = () => Date.now();
+function cooldownKey(apiKey) {
+  return crypto33.createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+}
+function throttleCooldownRemainingMs(apiKey) {
+  const until = throttleCooldownUntil.get(cooldownKey(apiKey));
+  if (until == null) return 0;
+  const remaining = until - cooldownNow();
+  if (remaining <= 0) {
+    throttleCooldownUntil.delete(cooldownKey(apiKey));
+    return 0;
+  }
+  return remaining;
+}
+function openThrottleCooldown(apiKey) {
+  throttleCooldownUntil.set(cooldownKey(apiKey), cooldownNow() + BING_THROTTLE_COOLDOWN_MS);
+  bingClientLog("error", "http.cooldown-open", { cooldownMs: BING_THROTTLE_COOLDOWN_MS });
+}
 async function bingFetch(apiKey, endpoint, opts) {
   const isIdempotent = (opts?.method ?? "GET") === "GET";
-  return withRetry(() => bingFetchOnce(apiKey, endpoint, opts), {
-    maxRetries: BING_MAX_RETRIES,
-    baseDelayMs: BING_RETRY_BASE_DELAY_MS,
-    maxDelayMs: BING_RETRY_MAX_DELAY_MS,
-    isRetryable: (err) => {
-      if (err instanceof BingApiError && err.isThrottle) return true;
-      return isIdempotent && isRetryableHttpError(err);
-    },
-    computeDelayMs: (_attempt, err, defaultMs) => retryAfterDelayMs(err) ?? defaultMs,
-    onRetry: ({ attempt, err, delayMs }) => {
-      bingClientLog("warn", "http.retry", {
-        endpoint,
-        attempt,
-        delayMs: Math.round(delayMs),
-        throttled: err instanceof BingApiError ? err.isThrottle : false
-      });
-    }
-  });
+  const cooling = throttleCooldownRemainingMs(apiKey);
+  if (cooling > 0) {
+    bingClientLog("warn", "http.cooldown-skip", { endpoint, remainingMs: cooling });
+    throw new BingApiError(
+      `Bing API key is in a throttle cooldown for another ${Math.ceil(cooling / 1e3)}s; the account was still throttled after a full retry budget, so this call was not attempted.`,
+      429
+    );
+  }
+  try {
+    return await withRetry(() => bingFetchOnce(apiKey, endpoint, opts), {
+      maxRetries: BING_MAX_RETRIES,
+      baseDelayMs: BING_RETRY_BASE_DELAY_MS,
+      maxDelayMs: BING_RETRY_MAX_DELAY_MS,
+      isRetryable: (err) => {
+        if (err instanceof BingApiError && err.isThrottle) return true;
+        return isIdempotent && isRetryableHttpError(err);
+      },
+      computeDelayMs: (_attempt, err, defaultMs) => retryAfterDelayMs(err) ?? defaultMs,
+      onRetry: ({ attempt, err, delayMs }) => {
+        bingClientLog("warn", "http.retry", {
+          endpoint,
+          attempt,
+          delayMs: Math.round(delayMs),
+          throttled: err instanceof BingApiError ? err.isThrottle : false
+        });
+      }
+    });
+  } catch (err) {
+    if (err instanceof BingApiError && err.isThrottle) openThrottleCooldown(apiKey);
+    throw err;
+  }
 }
 async function getSites(apiKey) {
   validateApiKey(apiKey);
@@ -42206,7 +42277,7 @@ async function bingRoutes(app, opts) {
       const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
       const now = (/* @__PURE__ */ new Date()).toISOString();
       app.db.insert(bingCoverageSnapshots).values({
-        id: crypto33.randomUUID(),
+        id: crypto34.randomUUID(),
         projectId: project.id,
         syncRunId: snapshotRunId,
         date: snapshotDate,
@@ -42277,7 +42348,7 @@ async function bingRoutes(app, opts) {
       throw validationError("url is required");
     }
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto33.randomUUID();
+    const runId = crypto34.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -42298,7 +42369,7 @@ async function bingRoutes(app, opts) {
         discoveryDate: result.DiscoveryDate ?? null
       });
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const id = crypto33.randomUUID();
+      const id = crypto34.randomUUID();
       const httpCode = result.HttpStatus ?? result.HttpCode ?? null;
       const lastCrawledDate = parseBingDate(result.LastCrawledDate);
       const inIndexDate = parseBingDate(result.InIndexDate);
@@ -42368,7 +42439,7 @@ async function bingRoutes(app, opts) {
       throw validationError('No Bing site configured. Run "canonry bing set-site <project> <url>" first.');
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto33.randomUUID();
+    const runId = crypto34.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -42653,7 +42724,7 @@ async function cdpRoutes(app, opts) {
 }
 
 // ../api-routes/src/ga.ts
-import crypto34 from "crypto";
+import crypto35 from "crypto";
 import { eq as eq44, desc as desc20, and as and35, sql as sql16 } from "drizzle-orm";
 
 // ../api-routes/src/ga-session-history.ts
@@ -42855,7 +42926,7 @@ function persistAcquisitionMeasurement(db, input) {
     )).run();
     for (const row of input.report.rows) {
       tx.insert(gaAcquisitionDaily).values({
-        id: crypto34.randomUUID(),
+        id: crypto35.randomUUID(),
         projectId: input.projectId,
         date: row.date,
         channelGroup: row.channelGroup,
@@ -42897,7 +42968,7 @@ function persistLeadMeasurement(db, input) {
     )).run();
     for (const row of input.report.rows) {
       tx.insert(gaLeadEventsDaily).values({
-        id: crypto34.randomUUID(),
+        id: crypto35.randomUUID(),
         projectId: input.projectId,
         date: row.date,
         eventName: row.eventName,
@@ -43177,7 +43248,7 @@ async function ga4Routes(app, opts) {
     const leadDays = measurementState?.leadSyncedAt != null ? Math.min(Math.max(1, days), 90) : 90;
     const leadEventNames = project.measurement.leadEventNames;
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto34.randomUUID();
+    const runId = crypto35.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -43231,7 +43302,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of rows) {
             tx.insert(gaTrafficSnapshots).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               landingPage: row.landingPage,
@@ -43254,7 +43325,7 @@ async function ga4Routes(app, opts) {
         ).run();
         for (const row of dailyTotals) {
           tx.insert(gaDailyTotals).values({
-            id: crypto34.randomUUID(),
+            id: crypto35.randomUUID(),
             projectId: project.id,
             date: row.date,
             sessions: row.sessions,
@@ -43280,7 +43351,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of aiReferrals) {
             tx.insert(gaAiReferrals).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               source: row.source,
@@ -43312,7 +43383,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of socialReferrals) {
             tx.insert(gaSocialReferrals).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               source: row.source,
@@ -43328,7 +43399,7 @@ async function ga4Routes(app, opts) {
         if (syncSummary) {
           tx.delete(gaTrafficSummaries).where(eq44(gaTrafficSummaries.projectId, project.id)).run();
           tx.insert(gaTrafficSummaries).values({
-            id: crypto34.randomUUID(),
+            id: crypto35.randomUUID(),
             projectId: project.id,
             periodStart: summary.periodStart,
             periodEnd: summary.periodEnd,
@@ -43341,7 +43412,7 @@ async function ga4Routes(app, opts) {
           tx.delete(gaTrafficWindowSummaries).where(eq44(gaTrafficWindowSummaries.projectId, project.id)).run();
           for (const ws of windowSummaries) {
             tx.insert(gaTrafficWindowSummaries).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               windowKey: ws.windowKey,
               periodStart: ws.periodStart,
@@ -44022,7 +44093,7 @@ function parseSchemaPageEntry(entry) {
 }
 
 // ../integration-wordpress/src/wordpress-client.ts
-import crypto35 from "crypto";
+import crypto36 from "crypto";
 function validateUsername(username) {
   if (!username || typeof username !== "string" || username.trim().length === 0) {
     throw new WordpressApiError("AUTH_INVALID", "Username is required and must be a non-empty string", 400);
@@ -44242,7 +44313,7 @@ function buildSnippet(content) {
   return `${text2.slice(0, 157)}...`;
 }
 function contentHash(content) {
-  return crypto35.createHash("sha256").update(content).digest("hex");
+  return crypto36.createHash("sha256").update(content).digest("hex");
 }
 function buildAmbiguousSlugMessage(slug, pages) {
   const candidates = pages.map((page) => {
@@ -45542,7 +45613,7 @@ async function wordpressRoutes(app, opts) {
 }
 
 // ../api-routes/src/backlinks.ts
-import crypto36 from "crypto";
+import crypto37 from "crypto";
 import { and as and37, asc as asc9, desc as desc21, eq as eq45, sql as sql17 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
@@ -46179,7 +46250,7 @@ async function backlinksRoutes(app, opts) {
       const refreshed = app.db.select().from(ccReleaseSyncs).where(eq45(ccReleaseSyncs.id, existing.id)).get();
       return reply.status(200).send(mapSyncRow(refreshed));
     }
-    const id = crypto36.randomUUID();
+    const id = crypto37.randomUUID();
     app.db.insert(ccReleaseSyncs).values({
       id,
       release,
@@ -46236,7 +46307,7 @@ async function backlinksRoutes(app, opts) {
       throw validationError("Invalid release id");
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto36.randomUUID();
+    const runId = crypto37.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -46325,7 +46396,7 @@ async function backlinksRoutes(app, opts) {
 }
 
 // ../api-routes/src/traffic.ts
-import crypto38 from "crypto";
+import crypto39 from "crypto";
 import { Agent as UndiciAgent } from "undici";
 import { and as and38, desc as desc22, eq as eq46, gte as gte10, lte as lte9, sql as sql18 } from "drizzle-orm";
 
@@ -46346,7 +46417,7 @@ function resolveVercelSyncDeadlineMs(env = process.env) {
 }
 
 // ../integration-cloud-run/src/auth.ts
-import crypto37 from "crypto";
+import crypto38 from "crypto";
 var GOOGLE_TOKEN_URL3 = "https://oauth2.googleapis.com/token";
 var CLOUD_LOGGING_READ_SCOPE = "https://www.googleapis.com/auth/logging.read";
 var TOKEN_REQUEST_TIMEOUT_MS = 3e4;
@@ -46377,7 +46448,7 @@ function createServiceAccountJwt2(clientEmail, privateKey, scope) {
   const headerB64 = encode(header);
   const payloadB64 = encode(payload);
   const signingInput = `${headerB64}.${payloadB64}`;
-  const sign = crypto37.createSign("RSA-SHA256");
+  const sign = crypto38.createSign("RSA-SHA256");
   sign.update(signingInput);
   const signature = sign.sign(privateKey, "base64url");
   return `${signingInput}.${signature}`;
@@ -50354,7 +50425,7 @@ async function runBackfillTask(options) {
           }
         })();
         tx.insert(rawEventSamples).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           sourceId: sourceRow2.id,
           ts: sample.observedAt,
@@ -50483,7 +50554,7 @@ async function trafficRoutes(app, opts) {
       }).where(eq46(trafficSources.id, activeSource.id)).run();
       sourceRow2 = app.db.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
     } else {
-      const newId = crypto38.randomUUID();
+      const newId = crypto39.randomUUID();
       app.db.insert(trafficSources).values({
         id: newId,
         projectId: project.id,
@@ -50564,7 +50635,7 @@ async function trafficRoutes(app, opts) {
       }).where(eq46(trafficSources.id, activeSource.id)).run();
       sourceRow2 = app.db.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
     } else {
-      const newId = crypto38.randomUUID();
+      const newId = crypto39.randomUUID();
       app.db.insert(trafficSources).values({
         id: newId,
         projectId: project.id,
@@ -50648,7 +50719,7 @@ async function trafficRoutes(app, opts) {
         }).where(eq46(trafficSources.id, activeSource.id)).run();
         row = tx.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
       } else {
-        const newId = crypto38.randomUUID();
+        const newId = crypto39.randomUUID();
         tx.insert(trafficSources).values({
           id: newId,
           projectId: project.id,
@@ -50682,7 +50753,7 @@ async function trafficRoutes(app, opts) {
       let created = false;
       if (!existingSchedule) {
         tx.insert(schedules).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           kind: SchedulableRunKinds["traffic-sync"],
           cronExpr: DEFAULT_TRAFFIC_SYNC_CRON,
@@ -50737,7 +50808,7 @@ async function trafficRoutes(app, opts) {
     const windowEnd = /* @__PURE__ */ new Date();
     const startedAt = windowEnd.toISOString();
     const syncStartedAtMs = windowEnd.getTime();
-    const runId = crypto38.randomUUID();
+    const runId = crypto39.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -51130,7 +51201,7 @@ async function trafficRoutes(app, opts) {
           }
         })();
         tx.insert(rawEventSamples).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           sourceId: sourceRow2.id,
           ts: sample.observedAt,
@@ -51381,7 +51452,7 @@ async function trafficRoutes(app, opts) {
       };
     }
     const startedAt = windowEnd.toISOString();
-    const runId = crypto38.randomUUID();
+    const runId = crypto39.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -51751,7 +51822,7 @@ async function trafficRoutes(app, opts) {
 }
 
 // ../api-routes/src/doctor/checks/agent.ts
-import crypto39 from "crypto";
+import crypto40 from "crypto";
 import fs6 from "fs";
 import path7 from "path";
 var REQUIRED_SKILLS = ["canonry", "aero"];
@@ -51982,7 +52053,7 @@ function isInstalled(dir) {
 }
 function hashInstalledFile(filePath) {
   try {
-    return crypto39.createHash("sha256").update(fs6.readFileSync(filePath)).digest("hex");
+    return crypto40.createHash("sha256").update(fs6.readFileSync(filePath)).digest("hex");
   } catch {
     return void 0;
   }
@@ -54055,7 +54126,7 @@ async function doctorRoutes(app, opts) {
 }
 
 // ../api-routes/src/discovery/routes.ts
-import crypto40 from "crypto";
+import crypto41 from "crypto";
 import { and as and42, desc as desc23, eq as eq53, gte as gte12, inArray as inArray17, isNull as isNull4, or as or10 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
@@ -54121,8 +54192,8 @@ async function discoveryRoutes(app, opts) {
       if (existing && existing.runId) {
         return { reused: true, sessionId: existing.id, runId: existing.runId };
       }
-      const sessionId = crypto40.randomUUID();
-      const runId = crypto40.randomUUID();
+      const sessionId = crypto41.randomUUID();
+      const runId = crypto41.randomUUID();
       tx.insert(discoverySessions).values({
         id: sessionId,
         projectId: project.id,
@@ -54376,7 +54447,7 @@ async function discoveryRoutes(app, opts) {
       app.db.transaction((tx) => {
         for (const query of promotedQueries) {
           tx.insert(queries).values({
-            id: crypto40.randomUUID(),
+            id: crypto41.randomUUID(),
             projectId: project.id,
             query,
             provenance,
@@ -54385,7 +54456,7 @@ async function discoveryRoutes(app, opts) {
         }
         for (const domain of promotedCompetitors) {
           tx.insert(competitors).values({
-            id: crypto40.randomUUID(),
+            id: crypto41.randomUUID(),
             projectId: project.id,
             domain,
             provenance,
@@ -54475,7 +54546,7 @@ function selectEligibleCompetitors(competitorMap, competitorTypes) {
 }
 
 // ../api-routes/src/discovery/orchestrate.ts
-import crypto41 from "crypto";
+import crypto42 from "crypto";
 import { eq as eq54 } from "drizzle-orm";
 var DEFAULT_MAX_PROBES = 100;
 var ABSOLUTE_MAX_PROBES = 500;
@@ -54643,7 +54714,7 @@ async function executeDiscovery(opts) {
     probeRows.push({ citedDomains: probe.citedDomains, bucket });
     buckets[bucket]++;
     return {
-      id: crypto41.randomUUID(),
+      id: crypto42.randomUUID(),
       sessionId: opts.sessionId,
       projectId: opts.project.id,
       query: probedCanonicals[index2],
@@ -54695,7 +54766,7 @@ function upsertDomainClassifications(db, projectId, sessionId, competitorMap) {
     const domain = hostOf(entry.domain) ?? "";
     if (!domain) continue;
     db.insert(domainClassifications).values({
-      id: crypto41.randomUUID(),
+      id: crypto42.randomUUID(),
       projectId,
       domain,
       competitorType: entry.competitorType,
@@ -54735,7 +54806,7 @@ function dedupeStrings(input) {
 }
 
 // ../api-routes/src/technical-aeo.ts
-import crypto42 from "crypto";
+import crypto43 from "crypto";
 import { and as and43, asc as asc10, count, desc as desc24, eq as eq55, inArray as inArray18, lt as lt7 } from "drizzle-orm";
 var SURFACEABLE_STATUSES = [RunStatuses.completed, RunStatuses.partial];
 function emptyScore(projectName) {
@@ -54871,7 +54942,7 @@ async function technicalAeoRoutes(app, opts) {
       return { runId: existing.id, status: existing.status };
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto42.randomUUID();
+    const runId = crypto43.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -54889,7 +54960,7 @@ async function technicalAeoRoutes(app, opts) {
 }
 
 // ../api-routes/src/research.ts
-import crypto43 from "crypto";
+import crypto44 from "crypto";
 import { and as and44, desc as desc25, eq as eq56 } from "drizzle-orm";
 var sameLocation = (a, b) => a.label === b.label && a.city === b.city && a.region === b.region && a.country === b.country && a.timezone === b.timezone;
 async function researchRoutes(app, opts) {
@@ -54916,7 +54987,7 @@ async function researchRoutes(app, opts) {
     if (!adapter.modelValidationPattern.test(resolvedModel)) throw validationError(`Invalid resolved model "${resolvedModel}" for provider "${providerName}".`, { provider: providerName, model: resolvedModel, hint: adapter.modelValidationHint });
     if (new Set(input.queries.map((query) => query.toLocaleLowerCase())).size !== input.queries.length) throw validationError("Research queries must be unique within a batch.");
     const normalized = { queries: input.queries, provider: providerName, model: requestedModel, location: location ?? null };
-    const requestHash2 = crypto43.createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
+    const requestHash2 = crypto44.createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const decision = app.db.transaction((tx) => {
       if (input.idempotencyKey) {
@@ -54926,9 +54997,9 @@ async function researchRoutes(app, opts) {
           return { reused: true, id: existing.id, shouldDispatch: existing.status === ResearchRunStatuses.queued };
         }
       }
-      const id = crypto43.randomUUID();
+      const id = crypto44.randomUUID();
       tx.insert(researchRuns).values({ id, projectId: project.id, status: ResearchRunStatuses.queued, provider: providerName, requestedModel, resolvedModel, location: location ?? null, totalQueries: input.queries.length, idempotencyKey: input.idempotencyKey ?? null, requestHash: input.idempotencyKey ? requestHash2 : null, createdAt: now }).run();
-      for (const [position, query] of input.queries.entries()) tx.insert(researchRunQueries).values({ id: crypto43.randomUUID(), researchRunId: id, position, queryText: query, status: ResearchQueryStatuses.queued, requestedModel, resolvedModel, groundingSources: [], citedDomains: [], searchQueries: [], createdAt: now }).run();
+      for (const [position, query] of input.queries.entries()) tx.insert(researchRunQueries).values({ id: crypto44.randomUUID(), researchRunId: id, position, queryText: query, status: ResearchQueryStatuses.queued, requestedModel, resolvedModel, groundingSources: [], citedDomains: [], searchQueries: [], createdAt: now }).run();
       writeAuditLog(tx, { projectId: project.id, actor: "api", action: "research.created", entityType: "research_run", entityId: id });
       return { reused: false, id, shouldDispatch: true };
     });
@@ -55345,7 +55416,7 @@ function buildTrafficSourceValidators(opts) {
 }
 
 // src/intelligence-service.ts
-import crypto44 from "crypto";
+import crypto45 from "crypto";
 
 // src/logger.ts
 var IS_TTY = process.stdout.isTTY === true;
@@ -55986,7 +56057,7 @@ var IntelligenceService = class {
         }).run();
       }
       tx.insert(healthSnapshots).values({
-        id: crypto44.randomUUID(),
+        id: crypto45.randomUUID(),
         projectId,
         runId,
         overallCitedRate: String(result.health.overallCitedRate),

package/dist/{chunk-BUAVO37B.js → chunk-NNW7TJUZ.js}

@@ -4019,6 +4019,14 @@ var measurementPropertyProviderRowSchema = z5.object({
   mentionCoverage: measurementMetricValueSchema,
   citationCoverage: measurementMetricValueSchema
 }).strict();
+var measurementOutcomeCountsSchema = z5.object({
+  bothSignals: z5.number().int().nonnegative(),
+  mentionedOnly: z5.number().int().nonnegative(),
+  citedOnly: z5.number().int().nonnegative(),
+  neither: z5.number().int().nonnegative(),
+  notMeasured: z5.number().int().nonnegative(),
+  total: z5.number().int().nonnegative()
+}).strict();
 var measurementPropertyRowSchema = z5.object({
   targetKey: measurementV2StableKeySchema,
   label: z5.string().min(1),
@@ -4076,6 +4084,13 @@ var measurementOverviewResponseSchema = z5.object({
     )
   }).strict(),
   properties: measurementCursorPageSchema(measurementPropertyRowSchema),
+  /**
+   * Outcome split over the whole RESULT SET, not the page — so paging through
+   * does not move it. It narrows with `search` exactly as `properties.totalEstimate`
+   * does, because both are computed from the same filtered rows; with no search
+   * that result set is the entire scope.
+   */
+  outcomes: measurementOutcomeCountsSchema,
   flags: z5.object({ total: z5.number().int().nonnegative() }).strict(),
   namedShareOfVoice: measurementNamedShareOfVoiceSchema.optional()
 }).strict();