@canonry/canonry 4.159.0 → 4.161.0

package/dist/index.d.ts

@@ -156,23 +156,10 @@ interface VercelTrafficConnectionConfigEntry {
 interface VercelTrafficConfigEntry {
     connections?: VercelTrafficConnectionConfigEntry[];
 }
-/**
- * Per-project Cloudflare Worker traffic connection. In direct-push mode the
- * Worker forwards filtered requests to canonry's ingest endpoint. The Worker
- * reads the bearer and HMAC values from Cloudflare secret bindings; generated
- * source and Wrangler configuration never contain either cleartext value.
- * The DB stores only the bearer hash, while both cleartext secrets live here.
- */
-interface CloudflareTrafficConnectionConfigEntry {
+interface CloudflareTrafficConnectionConfigBase {
     projectName: string;
     /** `traffic_sources.id` for this connection — pairs the credential row with the DB row. */
     sourceId: string;
-    /** Explicit transport discriminator. Missing legacy values normalize to direct-push. */
-    deliveryMode: 'direct-push';
-    /** Bearer token authenticating ingest requests. Verified server-side via sha256(bearer) === ingestTokenHash. */
-    bearerToken: string;
-    /** HMAC-SHA256 shared secret. Worker signs `timestamp + "." + body` with it; server verifies. */
-    hmacSecret: string;
     /** Semver of the Worker script bundle that was generated at connect/rotate time. */
     workerVersion: string;
     /** Identifier of the bot/referer keyword set baked into the deployed Worker. */
@@ -184,6 +171,33 @@ interface CloudflareTrafficConnectionConfigEntry {
     createdAt: string;
     updatedAt: string;
 }
+/**
+ * Direct-push credentials. The Worker reads both values from secret bindings;
+ * generated source and Wrangler configuration never contain either cleartext
+ * value. The DB stores only the bearer hash.
+ */
+interface CloudflareDirectPushConnectionConfigEntry extends CloudflareTrafficConnectionConfigBase {
+    /** Explicit transport discriminator. Missing legacy values normalize to direct-push. */
+    deliveryMode: 'direct-push';
+    /** Bearer token authenticating ingest requests. Verified server-side via sha256(bearer) === ingestTokenHash. */
+    bearerToken: string;
+    /** HMAC-SHA256 shared secret. Worker signs `timestamp + "." + body` with it; server verifies. */
+    hmacSecret: string;
+}
+/**
+ * Queue-pull credentials. The account-scoped token is used only by the local
+ * Canonry server to pull and acknowledge Queue messages. It never enters the
+ * traffic source row, generated Worker artifacts, CLI argv, or MCP output.
+ */
+interface CloudflareQueuePullConnectionConfigEntry extends CloudflareTrafficConnectionConfigBase {
+    deliveryMode: 'queue-pull';
+    apiToken: string;
+    accountId: string;
+    queueId: string;
+    queueName: string;
+    retentionSeconds: number;
+}
+type CloudflareTrafficConnectionConfigEntry = CloudflareDirectPushConnectionConfigEntry | CloudflareQueuePullConnectionConfigEntry;
 interface CloudflareTrafficConfigEntry {
     connections?: CloudflareTrafficConnectionConfigEntry[];
 }

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   createServer
-} from "./chunk-BZPBVOAM.js";
+} from "./chunk-W6OWEPZG.js";
 import {
   loadConfig
-} from "./chunk-ZEG43TY2.js";
-import "./chunk-5AFWHKKI.js";
-import "./chunk-ZL3VY435.js";
+} from "./chunk-HCGTKQCG.js";
+import "./chunk-J27J2DF6.js";
+import "./chunk-EXDO7EPL.js";
 export {
   createServer,
   loadConfig

package/dist/{intelligence-service-DHY5CYWX.js → intelligence-service-HKDIVTZB.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-5AFWHKKI.js";
-import "./chunk-ZL3VY435.js";
+} from "./chunk-J27J2DF6.js";
+import "./chunk-EXDO7EPL.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -3,10 +3,10 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-ZEG43TY2.js";
+} from "./chunk-HCGTKQCG.js";
 import {
   isReadOnlyKey
-} from "./chunk-ZL3VY435.js";
+} from "./chunk-EXDO7EPL.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "4.159.0",
+  "version": "4.161.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -71,25 +71,26 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0"
   },