@canonry/canonry 4.156.0 → 4.158.0

package/dist/index.d.ts

@@ -156,6 +156,37 @@ interface VercelTrafficConnectionConfigEntry {
 interface VercelTrafficConfigEntry {
     connections?: VercelTrafficConnectionConfigEntry[];
 }
+/**
+ * Per-project Cloudflare Worker traffic connection. In direct-push mode the
+ * Worker forwards filtered requests to canonry's ingest endpoint. The Worker
+ * reads the bearer and HMAC values from Cloudflare secret bindings; generated
+ * source and Wrangler configuration never contain either cleartext value.
+ * The DB stores only the bearer hash, while both cleartext secrets live here.
+ */
+interface CloudflareTrafficConnectionConfigEntry {
+    projectName: string;
+    /** `traffic_sources.id` for this connection — pairs the credential row with the DB row. */
+    sourceId: string;
+    /** Explicit transport discriminator. Missing legacy values normalize to direct-push. */
+    deliveryMode: 'direct-push';
+    /** Bearer token authenticating ingest requests. Verified server-side via sha256(bearer) === ingestTokenHash. */
+    bearerToken: string;
+    /** HMAC-SHA256 shared secret. Worker signs `timestamp + "." + body` with it; server verifies. */
+    hmacSecret: string;
+    /** Semver of the Worker script bundle that was generated at connect/rotate time. */
+    workerVersion: string;
+    /** Identifier of the bot/referer keyword set baked into the deployed Worker. */
+    expectedBotListVersion: string;
+    /** Target zone retained for manual route instructions. Wrangler does not attach the route. */
+    zoneId: string | null;
+    /** Optional Cloudflare account id emitted as top-level Wrangler configuration. */
+    accountId: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface CloudflareTrafficConfigEntry {
+    connections?: CloudflareTrafficConnectionConfigEntry[];
+}
 /**
  * One injected remote MCP server Aero loads read-only tools from (OSS-A).
  * Generic shape: `{ url, token, label? }`. The transport is bearer-gated MCP
@@ -238,6 +269,7 @@ interface CanonryConfig {
     wordpress?: WordpressConfigEntry;
     wordpressTraffic?: WordpressTrafficConfigEntry;
     vercelTraffic?: VercelTrafficConfigEntry;
+    cloudflareTraffic?: CloudflareTrafficConfigEntry;
     openaiAds?: OpenAiAdsConfigEntry;
     dashboardPasswordHash?: string;
     dashboard?: DashboardConfigEntry;

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-ZWESOFA5.js";
+} from "./chunk-4VZP64GZ.js";
 import {
   loadConfig
-} from "./chunk-CPASKGUE.js";
-import "./chunk-ABNN2ZVR.js";
-import "./chunk-AMPT2EP7.js";
+} from "./chunk-LK6YFHG4.js";
+import "./chunk-YP4K2KXH.js";
+import "./chunk-DEVAEC2S.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-WHC7B32V.js → intelligence-service-LQ6ZRWMF.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-ABNN2ZVR.js";
-import "./chunk-AMPT2EP7.js";
+} from "./chunk-YP4K2KXH.js";
+import "./chunk-DEVAEC2S.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-CPASKGUE.js";
+} from "./chunk-LK6YFHG4.js";
 import {
   isReadOnlyKey
-} from "./chunk-AMPT2EP7.js";
+} from "./chunk-DEVAEC2S.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "4.156.0",
+  "version": "4.158.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -36,11 +36,11 @@
     "README.md"
   ],
   "engines": {
-    "node": ">=22.14.0"
+    "node": ">=22.14.0 <26"
   },
   "dependencies": {
-    "@canonry/aeo-audit": "4.6.2",
     "@anthropic-ai/sdk": "^0.91.1",
+    "@canonry/aeo-audit": "4.6.2",
     "@fastify/rate-limit": "^11.2.0",
     "@fastify/static": "^9.1.1",
     "@google/genai": "^1.46.0",
@@ -55,6 +55,7 @@
     "fastify": "^5.8.5",
     "graphology": "0.26.0",
     "graphology-layout-forceatlas2": "0.10.1",
+    "graphology-layout-noverlap": "0.4.2",
     "node-cron": "^4.2.1",
     "openai": "^6.0.0",
     "pdf-lib": "^1.17.1",
@@ -70,24 +71,25 @@
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
-    "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-integration-wordpress": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
-    "@ainyc/canonry-provider-cdp": "0.0.0",
+    "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-traffic": "0.0.0",
+    "@ainyc/canonry-provider-openai": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {