@canonry/canonry 4.153.0 → 4.154.0

package/assets/assets/{refresh-cw-BFnkrZE9.js → refresh-cw-DYSS2Wd-.js}

@@ -1 +1 @@
-import{c as e}from"./index-Bio0Z1kJ.js";const o=[["path",{d:"m15 18-6-6 6-6",key:"1wnfg3"}]],a=e("chevron-left",o);const t=[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]],h=e("refresh-cw",t);export{a as C,h as R};
+import{c as e}from"./index-CsM-Xxia.js";const o=[["path",{d:"m15 18-6-6 6-6",key:"1wnfg3"}]],a=e("chevron-left",o);const t=[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]],h=e("refresh-cw",t);export{a as C,h as R};

package/assets/assets/{trash-2-CQtsaJ-3.js → trash-2-VoiF_ckU.js}

@@ -1 +1 @@
-import{c as a}from"./index-Bio0Z1kJ.js";const t=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],h=a("circle-question-mark",t);const e=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],d=a("download",e);const o=[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]],p=a("external-link",o);const c=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],s=a("trash-2",c);export{h as C,d as D,p as E,s as T};
+import{c as a}from"./index-CsM-Xxia.js";const t=[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"M9.09 9a3 3 0 0 1 5.83 1c0 2-3 3-3 3",key:"1u773s"}],["path",{d:"M12 17h.01",key:"p32p05"}]],h=a("circle-question-mark",t);const e=[["path",{d:"M12 15V3",key:"m9g1x1"}],["path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4",key:"ih7n3h"}],["path",{d:"m7 10 5 5 5-5",key:"brsn70"}]],d=a("download",e);const o=[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]],p=a("external-link",o);const c=[["path",{d:"M10 11v6",key:"nco0om"}],["path",{d:"M14 11v6",key:"outv1u"}],["path",{d:"M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6",key:"miytrc"}],["path",{d:"M3 6h18",key:"d0wm0j"}],["path",{d:"M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2",key:"e791ji"}]],s=a("trash-2",c);export{h as C,d as D,p as E,s as T};

package/assets/assets/v2-overview-adapter-COMP5UGt.js

@@ -0,0 +1 @@
+function R(e){const r=e[0];return r?e.every(a=>a.mode===r.mode&&a.scope.kind===r.scope.kind&&a.scope.key===r.scope.key&&a.queryClass===r.queryClass&&a.measurement.displayedRunId===r.measurement.displayedRunId):!0}function u(e){return e.state==="unavailable"?{numerator:null,denominator:null,reason:e.reason}:e.numerator===void 0||e.denominator===void 0||e.denominator<=0?{numerator:null,denominator:null,reason:"not_applicable"}:{numerator:e.numerator,denominator:e.denominator}}function K(e){return e.kind==="exact"?e.url:e.kind==="prefix"?`https://${e.host}${e.pathPrefix}/*`:`https://${e.host}/*`}function $(e){return e==="assigned"?"this-property":e==="sibling"?"another-property":e==="ownedUnmapped"?"owned-unassigned":e==="external"?"external":e==="ambiguous"?"multiple-properties":"invalid-url"}function I(e){return e==="assigned"?"positive":e==="external"?"neutral":e==="invalid"?"negative":"caution"}function C(e){return`target:${e.targetKey}:${e.queryId}:${e.executionNodeKey}`}function T(e,r,a){const l=new Map;if(!r)return l;const m=new Map(e.usageEdges.map(n=>[C(n),n.targetKey])),i=new Map(e.assignments.map(n=>[`${n.targetKey}:${n.queryId}`,n.queryClass])),g=new Map(e.usageEdges.map(n=>[C(n),i.get(`${n.targetKey}:${n.queryId}`)]));for(const n of r.evidence){if(a&&g.get(n.usageEdgeId)!==a)continue;const s=m.get(n.usageEdgeId);if(!s)continue;const d=l.get(s)??[];d.push({id:`${n.observationId}:${n.expectedSlotId}:${n.usageEdgeId}:${n.sourceUrl}`,kind:$(n.classification),query:n.queryText,provider:n.provider,location:n.location,url:n.sourceUrl,tone:I(n.classification),historical:n.historical||n.bridged}),l.set(s,d)}return l}function M(e){if(e.flags>0)return{label:"Review",tone:"caution"};const r=[e.mentionCoverage,e.citationCoverage].filter(a=>a.state==="unavailable").map(a=>a.reason);return r.includes("no_completed_run")?{label:"Not measured",tone:"neutral"}:r.includes("plan_v1")?{label:"Update setup",tone:"caution"}:r.includes("evidence_incomplete")?{label:"Evidence incomplete",tone:"caution"}:r.includes("no_population")?{label:"No queries",tone:"neutral"}:r.includes("not_applicable")?{label:"Not applicable",tone:"neutral"}:{label:"Complete",tone:"positive"}}function S(e){return e==="complete"?{label:"Complete",tone:"positive"}:e==="partial"?{label:"Partial",tone:"caution"}:e==="queued"?{label:"Queued",tone:"neutral"}:e==="running"?{label:"Running",tone:"neutral"}:e==="failed"?{label:"Failed",tone:"negative"}:{label:"Not measured",tone:"neutral"}}function E(e){if(!e)return"";const r=new Date(e);return Number.isFinite(r.getTime())?r.toLocaleDateString("en-US",{month:"short",day:"numeric",year:"numeric",timeZone:"UTC"}):""}function x(e){const r=e.nextAction.count??e.flags.total;if(e.nextAction.kind==="review_flags")return`${r} flagged ${r===1?"result needs":"results need"} review.`;if(e.nextAction.kind==="complete_setup")return"Finish setup.";if(e.nextAction.kind==="republish_setup")return"Setup update required.";if(e.nextAction.kind==="run_measurement")return"Ready to measure."}function _({overview:e,activePlan:r,report:a,reportState:l=a?"ready":"loading",sort:m}){if(r.plan.schemaVersion!==2||e.mode!=="active-v2")throw new Error("The current overview requires an active version-two setup.");if(e.scope.kind!=="all"&&e.scope.kind!=="group")throw new Error("The current overview requires an All Properties or group scope.");const i=r.plan,g=new Map(i.targets.map(t=>[t.stableKey,t])),n=new Map(i.querySnapshots.map(t=>[t.queryId,t.queryText])),s=new Map;for(const t of i.assignments){if(e.queryClass!=="all"&&t.queryClass!==e.queryClass)continue;const o=n.get(t.queryId);if(!o)continue;const c=s.get(t.targetKey)??new Set;c.add(o),s.set(t.targetKey,c)}const d=a?.revision===r.revision&&a.run?.id===e.measurement.displayedRunId?a:null,h=e.measurement.displayedRunId===void 0||d?"ready":l==="error"||a!=null?"error":"loading",q=T(i,d,e.queryClass==="all"?void 0:e.queryClass),f=new Map;for(const t of i.groups)for(const o of t.targetKeys)f.has(o)||f.set(o,t.label);const y=e.properties.items.map(t=>{const o=g.get(t.targetKey),c=q.get(t.targetKey)??[];return{id:t.targetKey,name:t.label,mentionCoverage:u(t.mentionCoverage),citationCoverage:u(t.citationCoverage),status:M(t),providers:t.providers?.map(p=>({provider:p.provider,mentionCoverage:u(p.mentionCoverage),citationCoverage:u(p.citationCoverage)})),market:f.get(t.targetKey),assignedQueries:[...s.get(t.targetKey)??[]],urls:o?.urlMatchers.map(K)??[],evidence:c,evidenceState:h,historical:c.some(p=>p.historical)}}),b=e.namedShareOfVoice?.entries.map(t=>({name:t.label,coverage:{numerator:t.credits,denominator:e.namedShareOfVoice.denominator}})),k=e.properties.items.flatMap(t=>t.flags>0?[{id:`property:${t.targetKey}`,property:t.label,summary:`${t.flags} ${t.flags===1?"result needs":"results need"} review.`,tone:"caution",count:t.flags}]:[]);return{classReporting:"available",latestMeasurement:{status:S(e.measurement.state),completedSlots:e.measurement.completed,totalSlots:e.measurement.expected,date:E(e.measurement.completedAt),includesBridgedHistory:e.measurement.includesHistoricalData===!0},currentView:{scope:e.scope.kind==="group"?{kind:"group",...e.scope.key?{key:e.scope.key}:{}}:{kind:"all"},queryClass:e.queryClass,aggregate:{metrics:{propertiesMentioned:u(e.metrics.propertiesMentioned),mentionCoverage:u(e.metrics.mentionCoverage),citationCoverage:u(e.metrics.citationCoverage)},properties:y,...b?{shareOfVoice:b}:{}},propertyTotal:e.properties.totalEstimate??y.length,outcomes:e.outcomes,nextCursor:e.properties.nextCursor,...m?{sort:m}:{}},availableGroups:i.groups.map(t=>({id:t.stableKey,label:t.label})),...x(e)?{nextActionText:x(e)}:{},flaggedResultsTotal:e.flags.total,flaggedResults:k}}export{R as a,_ as b,K as m};

package/assets/index.html

@@ -12,12 +12,12 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-Bio0Z1kJ.js"></script>
+    <script type="module" crossorigin src="./assets/index-CsM-Xxia.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-BjS7iY3g.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-DnzzbllM.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-33ACLxsD.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-markdown-CpDJch4G.js">
-    <link rel="stylesheet" crossorigin href="./assets/index-CaYn5phz.css">
+    <link rel="stylesheet" crossorigin href="./assets/index-DyL54s8x.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/{chunk-LNJF7LL5.js → chunk-ANSQ6JNO.js}

@@ -81,7 +81,7 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema
-} from "./chunk-SKTXCZZD.js";
+} from "./chunk-NNW7TJUZ.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/{chunk-VTL2WOIO.js → chunk-IFZS2TXV.js}

@@ -521,7 +521,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-SKTXCZZD.js";
+} from "./chunk-NNW7TJUZ.js";
 
 // src/intelligence-service.ts
 import { eq as eq57, desc as desc26, asc as asc11, and as and45, ne as ne7, or as or11, inArray as inArray19, gte as gte13, lte as lte10 } from "drizzle-orm";
@@ -35501,8 +35501,9 @@ function isSitemapOwnedByProperty(sitemapUrl, propertyId, canonicalDomain) {
 function signState(payload, secret) {
   return crypto29.createHmac("sha256", secret).update(payload).digest("hex");
 }
+var OAUTH_STATE_MAX_AGE_MS = 15 * 60 * 1e3;
 function buildSignedState(data, secret) {
-  const payload = JSON.stringify(data);
+  const payload = JSON.stringify({ ...data, issuedAt: Date.now() });
   const sig = signState(payload, secret);
   return Buffer.from(JSON.stringify({ payload, sig })).toString("base64url");
 }
@@ -35511,7 +35512,10 @@ function verifySignedState(encoded, secret) {
     const { payload, sig } = JSON.parse(Buffer.from(encoded, "base64url").toString());
     const expected = signState(payload, secret);
     if (!crypto29.timingSafeEqual(Buffer.from(sig, "hex"), Buffer.from(expected, "hex"))) return null;
-    return JSON.parse(payload);
+    const parsed = JSON.parse(payload);
+    const issuedAt = typeof parsed.issuedAt === "number" ? parsed.issuedAt : null;
+    if (issuedAt === null || Date.now() - issuedAt > OAUTH_STATE_MAX_AGE_MS) return null;
+    return parsed;
   } catch {
     return null;
   }
@@ -41797,9 +41801,12 @@ async function adsRoutes(app, opts) {
 }
 
 // ../api-routes/src/bing.ts
-import crypto33 from "crypto";
+import crypto34 from "crypto";
 import { eq as eq42, and as and33, desc as desc19 } from "drizzle-orm";
 
+// ../integration-bing/src/bing-client.ts
+import crypto33 from "crypto";
+
 // ../integration-bing/src/constants.ts
 var BING_WMT_API_BASE = "https://ssl.bing.com/webmaster/api.svc/json";
 var BING_SUBMIT_URL_BATCH_LIMIT = 500;
@@ -41808,6 +41815,7 @@ var BING_REQUEST_TIMEOUT_MS = 3e4;
 var BING_MAX_RETRIES = 4;
 var BING_RETRY_BASE_DELAY_MS = 2e3;
 var BING_RETRY_MAX_DELAY_MS = 3e4;
+var BING_THROTTLE_COOLDOWN_MS = 10 * 60 * 1e3;
 
 // ../integration-bing/src/types.ts
 var BING_THROTTLE_ERROR_CODES = /* @__PURE__ */ new Set([4, 5]);
@@ -41947,26 +41955,58 @@ async function bingFetchOnce(apiKey, endpoint, opts) {
     throw new BingApiError("Bing API returned invalid JSON", 502);
   }
 }
+var throttleCooldownUntil = /* @__PURE__ */ new Map();
+var cooldownNow = () => Date.now();
+function cooldownKey(apiKey) {
+  return crypto33.createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+}
+function throttleCooldownRemainingMs(apiKey) {
+  const until = throttleCooldownUntil.get(cooldownKey(apiKey));
+  if (until == null) return 0;
+  const remaining = until - cooldownNow();
+  if (remaining <= 0) {
+    throttleCooldownUntil.delete(cooldownKey(apiKey));
+    return 0;
+  }
+  return remaining;
+}
+function openThrottleCooldown(apiKey) {
+  throttleCooldownUntil.set(cooldownKey(apiKey), cooldownNow() + BING_THROTTLE_COOLDOWN_MS);
+  bingClientLog("error", "http.cooldown-open", { cooldownMs: BING_THROTTLE_COOLDOWN_MS });
+}
 async function bingFetch(apiKey, endpoint, opts) {
   const isIdempotent = (opts?.method ?? "GET") === "GET";
-  return withRetry(() => bingFetchOnce(apiKey, endpoint, opts), {
-    maxRetries: BING_MAX_RETRIES,
-    baseDelayMs: BING_RETRY_BASE_DELAY_MS,
-    maxDelayMs: BING_RETRY_MAX_DELAY_MS,
-    isRetryable: (err) => {
-      if (err instanceof BingApiError && err.isThrottle) return true;
-      return isIdempotent && isRetryableHttpError(err);
-    },
-    computeDelayMs: (_attempt, err, defaultMs) => retryAfterDelayMs(err) ?? defaultMs,
-    onRetry: ({ attempt, err, delayMs }) => {
-      bingClientLog("warn", "http.retry", {
-        endpoint,
-        attempt,
-        delayMs: Math.round(delayMs),
-        throttled: err instanceof BingApiError ? err.isThrottle : false
-      });
-    }
-  });
+  const cooling = throttleCooldownRemainingMs(apiKey);
+  if (cooling > 0) {
+    bingClientLog("warn", "http.cooldown-skip", { endpoint, remainingMs: cooling });
+    throw new BingApiError(
+      `Bing API key is in a throttle cooldown for another ${Math.ceil(cooling / 1e3)}s; the account was still throttled after a full retry budget, so this call was not attempted.`,
+      429
+    );
+  }
+  try {
+    return await withRetry(() => bingFetchOnce(apiKey, endpoint, opts), {
+      maxRetries: BING_MAX_RETRIES,
+      baseDelayMs: BING_RETRY_BASE_DELAY_MS,
+      maxDelayMs: BING_RETRY_MAX_DELAY_MS,
+      isRetryable: (err) => {
+        if (err instanceof BingApiError && err.isThrottle) return true;
+        return isIdempotent && isRetryableHttpError(err);
+      },
+      computeDelayMs: (_attempt, err, defaultMs) => retryAfterDelayMs(err) ?? defaultMs,
+      onRetry: ({ attempt, err, delayMs }) => {
+        bingClientLog("warn", "http.retry", {
+          endpoint,
+          attempt,
+          delayMs: Math.round(delayMs),
+          throttled: err instanceof BingApiError ? err.isThrottle : false
+        });
+      }
+    });
+  } catch (err) {
+    if (err instanceof BingApiError && err.isThrottle) openThrottleCooldown(apiKey);
+    throw err;
+  }
 }
 async function getSites(apiKey) {
   validateApiKey(apiKey);
@@ -42237,7 +42277,7 @@ async function bingRoutes(app, opts) {
       const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
       const now = (/* @__PURE__ */ new Date()).toISOString();
       app.db.insert(bingCoverageSnapshots).values({
-        id: crypto33.randomUUID(),
+        id: crypto34.randomUUID(),
         projectId: project.id,
         syncRunId: snapshotRunId,
         date: snapshotDate,
@@ -42308,7 +42348,7 @@ async function bingRoutes(app, opts) {
       throw validationError("url is required");
     }
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto33.randomUUID();
+    const runId = crypto34.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -42329,7 +42369,7 @@ async function bingRoutes(app, opts) {
         discoveryDate: result.DiscoveryDate ?? null
       });
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const id = crypto33.randomUUID();
+      const id = crypto34.randomUUID();
       const httpCode = result.HttpStatus ?? result.HttpCode ?? null;
       const lastCrawledDate = parseBingDate(result.LastCrawledDate);
       const inIndexDate = parseBingDate(result.InIndexDate);
@@ -42399,7 +42439,7 @@ async function bingRoutes(app, opts) {
       throw validationError('No Bing site configured. Run "canonry bing set-site <project> <url>" first.');
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto33.randomUUID();
+    const runId = crypto34.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -42684,7 +42724,7 @@ async function cdpRoutes(app, opts) {
 }
 
 // ../api-routes/src/ga.ts
-import crypto34 from "crypto";
+import crypto35 from "crypto";
 import { eq as eq44, desc as desc20, and as and35, sql as sql16 } from "drizzle-orm";
 
 // ../api-routes/src/ga-session-history.ts
@@ -42886,7 +42926,7 @@ function persistAcquisitionMeasurement(db, input) {
     )).run();
     for (const row of input.report.rows) {
       tx.insert(gaAcquisitionDaily).values({
-        id: crypto34.randomUUID(),
+        id: crypto35.randomUUID(),
         projectId: input.projectId,
         date: row.date,
         channelGroup: row.channelGroup,
@@ -42928,7 +42968,7 @@ function persistLeadMeasurement(db, input) {
     )).run();
     for (const row of input.report.rows) {
       tx.insert(gaLeadEventsDaily).values({
-        id: crypto34.randomUUID(),
+        id: crypto35.randomUUID(),
         projectId: input.projectId,
         date: row.date,
         eventName: row.eventName,
@@ -43208,7 +43248,7 @@ async function ga4Routes(app, opts) {
     const leadDays = measurementState?.leadSyncedAt != null ? Math.min(Math.max(1, days), 90) : 90;
     const leadEventNames = project.measurement.leadEventNames;
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto34.randomUUID();
+    const runId = crypto35.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -43262,7 +43302,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of rows) {
             tx.insert(gaTrafficSnapshots).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               landingPage: row.landingPage,
@@ -43285,7 +43325,7 @@ async function ga4Routes(app, opts) {
         ).run();
         for (const row of dailyTotals) {
           tx.insert(gaDailyTotals).values({
-            id: crypto34.randomUUID(),
+            id: crypto35.randomUUID(),
             projectId: project.id,
             date: row.date,
             sessions: row.sessions,
@@ -43311,7 +43351,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of aiReferrals) {
             tx.insert(gaAiReferrals).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               source: row.source,
@@ -43343,7 +43383,7 @@ async function ga4Routes(app, opts) {
           ).run();
           for (const row of socialReferrals) {
             tx.insert(gaSocialReferrals).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               date: row.date,
               source: row.source,
@@ -43359,7 +43399,7 @@ async function ga4Routes(app, opts) {
         if (syncSummary) {
           tx.delete(gaTrafficSummaries).where(eq44(gaTrafficSummaries.projectId, project.id)).run();
           tx.insert(gaTrafficSummaries).values({
-            id: crypto34.randomUUID(),
+            id: crypto35.randomUUID(),
             projectId: project.id,
             periodStart: summary.periodStart,
             periodEnd: summary.periodEnd,
@@ -43372,7 +43412,7 @@ async function ga4Routes(app, opts) {
           tx.delete(gaTrafficWindowSummaries).where(eq44(gaTrafficWindowSummaries.projectId, project.id)).run();
           for (const ws of windowSummaries) {
             tx.insert(gaTrafficWindowSummaries).values({
-              id: crypto34.randomUUID(),
+              id: crypto35.randomUUID(),
               projectId: project.id,
               windowKey: ws.windowKey,
               periodStart: ws.periodStart,
@@ -44053,7 +44093,7 @@ function parseSchemaPageEntry(entry) {
 }
 
 // ../integration-wordpress/src/wordpress-client.ts
-import crypto35 from "crypto";
+import crypto36 from "crypto";
 function validateUsername(username) {
   if (!username || typeof username !== "string" || username.trim().length === 0) {
     throw new WordpressApiError("AUTH_INVALID", "Username is required and must be a non-empty string", 400);
@@ -44273,7 +44313,7 @@ function buildSnippet(content) {
   return `${text2.slice(0, 157)}...`;
 }
 function contentHash(content) {
-  return crypto35.createHash("sha256").update(content).digest("hex");
+  return crypto36.createHash("sha256").update(content).digest("hex");
 }
 function buildAmbiguousSlugMessage(slug, pages) {
   const candidates = pages.map((page) => {
@@ -45573,7 +45613,7 @@ async function wordpressRoutes(app, opts) {
 }
 
 // ../api-routes/src/backlinks.ts
-import crypto36 from "crypto";
+import crypto37 from "crypto";
 import { and as and37, asc as asc9, desc as desc21, eq as eq45, sql as sql17 } from "drizzle-orm";
 
 // ../integration-commoncrawl/src/constants.ts
@@ -46210,7 +46250,7 @@ async function backlinksRoutes(app, opts) {
       const refreshed = app.db.select().from(ccReleaseSyncs).where(eq45(ccReleaseSyncs.id, existing.id)).get();
       return reply.status(200).send(mapSyncRow(refreshed));
     }
-    const id = crypto36.randomUUID();
+    const id = crypto37.randomUUID();
     app.db.insert(ccReleaseSyncs).values({
       id,
       release,
@@ -46267,7 +46307,7 @@ async function backlinksRoutes(app, opts) {
       throw validationError("Invalid release id");
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto36.randomUUID();
+    const runId = crypto37.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -46356,7 +46396,7 @@ async function backlinksRoutes(app, opts) {
 }
 
 // ../api-routes/src/traffic.ts
-import crypto38 from "crypto";
+import crypto39 from "crypto";
 import { Agent as UndiciAgent } from "undici";
 import { and as and38, desc as desc22, eq as eq46, gte as gte10, lte as lte9, sql as sql18 } from "drizzle-orm";
 
@@ -46377,7 +46417,7 @@ function resolveVercelSyncDeadlineMs(env = process.env) {
 }
 
 // ../integration-cloud-run/src/auth.ts
-import crypto37 from "crypto";
+import crypto38 from "crypto";
 var GOOGLE_TOKEN_URL3 = "https://oauth2.googleapis.com/token";
 var CLOUD_LOGGING_READ_SCOPE = "https://www.googleapis.com/auth/logging.read";
 var TOKEN_REQUEST_TIMEOUT_MS = 3e4;
@@ -46408,7 +46448,7 @@ function createServiceAccountJwt2(clientEmail, privateKey, scope) {
   const headerB64 = encode(header);
   const payloadB64 = encode(payload);
   const signingInput = `${headerB64}.${payloadB64}`;
-  const sign = crypto37.createSign("RSA-SHA256");
+  const sign = crypto38.createSign("RSA-SHA256");
   sign.update(signingInput);
   const signature = sign.sign(privateKey, "base64url");
   return `${signingInput}.${signature}`;
@@ -50385,7 +50425,7 @@ async function runBackfillTask(options) {
           }
         })();
         tx.insert(rawEventSamples).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           sourceId: sourceRow2.id,
           ts: sample.observedAt,
@@ -50514,7 +50554,7 @@ async function trafficRoutes(app, opts) {
       }).where(eq46(trafficSources.id, activeSource.id)).run();
       sourceRow2 = app.db.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
     } else {
-      const newId = crypto38.randomUUID();
+      const newId = crypto39.randomUUID();
       app.db.insert(trafficSources).values({
         id: newId,
         projectId: project.id,
@@ -50595,7 +50635,7 @@ async function trafficRoutes(app, opts) {
       }).where(eq46(trafficSources.id, activeSource.id)).run();
       sourceRow2 = app.db.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
     } else {
-      const newId = crypto38.randomUUID();
+      const newId = crypto39.randomUUID();
       app.db.insert(trafficSources).values({
         id: newId,
         projectId: project.id,
@@ -50679,7 +50719,7 @@ async function trafficRoutes(app, opts) {
         }).where(eq46(trafficSources.id, activeSource.id)).run();
         row = tx.select().from(trafficSources).where(eq46(trafficSources.id, activeSource.id)).get();
       } else {
-        const newId = crypto38.randomUUID();
+        const newId = crypto39.randomUUID();
         tx.insert(trafficSources).values({
           id: newId,
           projectId: project.id,
@@ -50713,7 +50753,7 @@ async function trafficRoutes(app, opts) {
       let created = false;
       if (!existingSchedule) {
         tx.insert(schedules).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           kind: SchedulableRunKinds["traffic-sync"],
           cronExpr: DEFAULT_TRAFFIC_SYNC_CRON,
@@ -50768,7 +50808,7 @@ async function trafficRoutes(app, opts) {
     const windowEnd = /* @__PURE__ */ new Date();
     const startedAt = windowEnd.toISOString();
     const syncStartedAtMs = windowEnd.getTime();
-    const runId = crypto38.randomUUID();
+    const runId = crypto39.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -51161,7 +51201,7 @@ async function trafficRoutes(app, opts) {
           }
         })();
         tx.insert(rawEventSamples).values({
-          id: crypto38.randomUUID(),
+          id: crypto39.randomUUID(),
           projectId: project.id,
           sourceId: sourceRow2.id,
           ts: sample.observedAt,
@@ -51412,7 +51452,7 @@ async function trafficRoutes(app, opts) {
       };
     }
     const startedAt = windowEnd.toISOString();
-    const runId = crypto38.randomUUID();
+    const runId = crypto39.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -51782,7 +51822,7 @@ async function trafficRoutes(app, opts) {
 }
 
 // ../api-routes/src/doctor/checks/agent.ts
-import crypto39 from "crypto";
+import crypto40 from "crypto";
 import fs6 from "fs";
 import path7 from "path";
 var REQUIRED_SKILLS = ["canonry", "aero"];
@@ -52013,7 +52053,7 @@ function isInstalled(dir) {
 }
 function hashInstalledFile(filePath) {
   try {
-    return crypto39.createHash("sha256").update(fs6.readFileSync(filePath)).digest("hex");
+    return crypto40.createHash("sha256").update(fs6.readFileSync(filePath)).digest("hex");
   } catch {
     return void 0;
   }
@@ -54086,7 +54126,7 @@ async function doctorRoutes(app, opts) {
 }
 
 // ../api-routes/src/discovery/routes.ts
-import crypto40 from "crypto";
+import crypto41 from "crypto";
 import { and as and42, desc as desc23, eq as eq53, gte as gte12, inArray as inArray17, isNull as isNull4, or as or10 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
@@ -54152,8 +54192,8 @@ async function discoveryRoutes(app, opts) {
       if (existing && existing.runId) {
         return { reused: true, sessionId: existing.id, runId: existing.runId };
       }
-      const sessionId = crypto40.randomUUID();
-      const runId = crypto40.randomUUID();
+      const sessionId = crypto41.randomUUID();
+      const runId = crypto41.randomUUID();
       tx.insert(discoverySessions).values({
         id: sessionId,
         projectId: project.id,
@@ -54407,7 +54447,7 @@ async function discoveryRoutes(app, opts) {
       app.db.transaction((tx) => {
         for (const query of promotedQueries) {
           tx.insert(queries).values({
-            id: crypto40.randomUUID(),
+            id: crypto41.randomUUID(),
             projectId: project.id,
             query,
             provenance,
@@ -54416,7 +54456,7 @@ async function discoveryRoutes(app, opts) {
         }
         for (const domain of promotedCompetitors) {
           tx.insert(competitors).values({
-            id: crypto40.randomUUID(),
+            id: crypto41.randomUUID(),
             projectId: project.id,
             domain,
             provenance,
@@ -54506,7 +54546,7 @@ function selectEligibleCompetitors(competitorMap, competitorTypes) {
 }
 
 // ../api-routes/src/discovery/orchestrate.ts
-import crypto41 from "crypto";
+import crypto42 from "crypto";
 import { eq as eq54 } from "drizzle-orm";
 var DEFAULT_MAX_PROBES = 100;
 var ABSOLUTE_MAX_PROBES = 500;
@@ -54674,7 +54714,7 @@ async function executeDiscovery(opts) {
     probeRows.push({ citedDomains: probe.citedDomains, bucket });
     buckets[bucket]++;
     return {
-      id: crypto41.randomUUID(),
+      id: crypto42.randomUUID(),
       sessionId: opts.sessionId,
       projectId: opts.project.id,
       query: probedCanonicals[index2],
@@ -54726,7 +54766,7 @@ function upsertDomainClassifications(db, projectId, sessionId, competitorMap) {
     const domain = hostOf(entry.domain) ?? "";
     if (!domain) continue;
     db.insert(domainClassifications).values({
-      id: crypto41.randomUUID(),
+      id: crypto42.randomUUID(),
       projectId,
       domain,
       competitorType: entry.competitorType,
@@ -54766,7 +54806,7 @@ function dedupeStrings(input) {
 }
 
 // ../api-routes/src/technical-aeo.ts
-import crypto42 from "crypto";
+import crypto43 from "crypto";
 import { and as and43, asc as asc10, count, desc as desc24, eq as eq55, inArray as inArray18, lt as lt7 } from "drizzle-orm";
 var SURFACEABLE_STATUSES = [RunStatuses.completed, RunStatuses.partial];
 function emptyScore(projectName) {
@@ -54902,7 +54942,7 @@ async function technicalAeoRoutes(app, opts) {
       return { runId: existing.id, status: existing.status };
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const runId = crypto42.randomUUID();
+    const runId = crypto43.randomUUID();
     app.db.insert(runs).values({
       id: runId,
       projectId: project.id,
@@ -54920,7 +54960,7 @@ async function technicalAeoRoutes(app, opts) {
 }
 
 // ../api-routes/src/research.ts
-import crypto43 from "crypto";
+import crypto44 from "crypto";
 import { and as and44, desc as desc25, eq as eq56 } from "drizzle-orm";
 var sameLocation = (a, b) => a.label === b.label && a.city === b.city && a.region === b.region && a.country === b.country && a.timezone === b.timezone;
 async function researchRoutes(app, opts) {
@@ -54947,7 +54987,7 @@ async function researchRoutes(app, opts) {
     if (!adapter.modelValidationPattern.test(resolvedModel)) throw validationError(`Invalid resolved model "${resolvedModel}" for provider "${providerName}".`, { provider: providerName, model: resolvedModel, hint: adapter.modelValidationHint });
     if (new Set(input.queries.map((query) => query.toLocaleLowerCase())).size !== input.queries.length) throw validationError("Research queries must be unique within a batch.");
     const normalized = { queries: input.queries, provider: providerName, model: requestedModel, location: location ?? null };
-    const requestHash2 = crypto43.createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
+    const requestHash2 = crypto44.createHash("sha256").update(JSON.stringify(normalized)).digest("hex");
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const decision = app.db.transaction((tx) => {
       if (input.idempotencyKey) {
@@ -54957,9 +54997,9 @@ async function researchRoutes(app, opts) {
           return { reused: true, id: existing.id, shouldDispatch: existing.status === ResearchRunStatuses.queued };
         }
       }
-      const id = crypto43.randomUUID();
+      const id = crypto44.randomUUID();
       tx.insert(researchRuns).values({ id, projectId: project.id, status: ResearchRunStatuses.queued, provider: providerName, requestedModel, resolvedModel, location: location ?? null, totalQueries: input.queries.length, idempotencyKey: input.idempotencyKey ?? null, requestHash: input.idempotencyKey ? requestHash2 : null, createdAt: now }).run();
-      for (const [position, query] of input.queries.entries()) tx.insert(researchRunQueries).values({ id: crypto43.randomUUID(), researchRunId: id, position, queryText: query, status: ResearchQueryStatuses.queued, requestedModel, resolvedModel, groundingSources: [], citedDomains: [], searchQueries: [], createdAt: now }).run();
+      for (const [position, query] of input.queries.entries()) tx.insert(researchRunQueries).values({ id: crypto44.randomUUID(), researchRunId: id, position, queryText: query, status: ResearchQueryStatuses.queued, requestedModel, resolvedModel, groundingSources: [], citedDomains: [], searchQueries: [], createdAt: now }).run();
       writeAuditLog(tx, { projectId: project.id, actor: "api", action: "research.created", entityType: "research_run", entityId: id });
       return { reused: false, id, shouldDispatch: true };
     });
@@ -55376,7 +55416,7 @@ function buildTrafficSourceValidators(opts) {
 }
 
 // src/intelligence-service.ts
-import crypto44 from "crypto";
+import crypto45 from "crypto";
 
 // src/logger.ts
 var IS_TTY = process.stdout.isTTY === true;
@@ -56017,7 +56057,7 @@ var IntelligenceService = class {
         }).run();
       }
       tx.insert(healthSnapshots).values({
-        id: crypto44.randomUUID(),
+        id: crypto45.randomUUID(),
         projectId,
         runId,
         overallCitedRate: String(result.health.overallCitedRate),

package/dist/{chunk-SKTXCZZD.js → chunk-NNW7TJUZ.js}

@@ -4084,7 +4084,12 @@ var measurementOverviewResponseSchema = z5.object({
     )
   }).strict(),
   properties: measurementCursorPageSchema(measurementPropertyRowSchema),
-  /** Scope-wide outcome split. Counted over EVERY Property in scope, not the page. */
+  /**
+   * Outcome split over the whole RESULT SET, not the page — so paging through
+   * does not move it. It narrows with `search` exactly as `properties.totalEstimate`
+   * does, because both are computed from the same filtered rows; with no search
+   * that result set is the entire scope.
+   */
   outcomes: measurementOutcomeCountsSchema,
   flags: z5.object({ total: z5.number().int().nonnegative() }).strict(),
   namedShareOfVoice: measurementNamedShareOfVoiceSchema.optional()