@canonry/canonry 4.168.0 → 4.170.0

package/dist/cli.js

@@ -26,11 +26,11 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-R2SZWJDV.js";
+} from "./chunk-NMCLLN5X.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-76JMZAFZ.js";
+} from "./chunk-HTUI6BSK.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -55,7 +55,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-C4UWZLQX.js";
+} from "./chunk-BMW3AURU.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -69,7 +69,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-CDACTPTY.js";
+} from "./chunk-CCZNCH7Y.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -134,7 +134,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-TP4KXU3E.js";
+} from "./chunk-HJ7W2LXI.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { FastifyInstance } from 'fastify';
 import { DatabaseClient } from '@ainyc/canonry-db';
-import { ProviderQuotaPolicy, EmbedConfigEntry, AgentPluginState } from '@ainyc/canonry-contracts';
+import { ProviderQuotaPolicy, EmbedConfigEntry, AgentPluginState, GoogleAdsCampaignMetricsQuery, GoogleAdsRawSnapshotDto, GoogleAdsEffectiveGoalGraphDto, GoogleMarketingProvider, GoogleAdsAccessibleCustomersResponse, GoogleAdsAccessibleCustomerDto, GtmAccountsResponse, GtmContainerListResponse, GtmWorkspaceListResponse, GtmRawSnapshotDto } from '@ainyc/canonry-contracts';
+import { GoogleTokenResponse } from '@ainyc/canonry-integration-google';
 
 type GoogleConnectionType = 'gsc' | 'ga4' | 'gbp';
 interface ProviderConfigEntry {
@@ -107,6 +108,55 @@ interface OpenAiAdsConnectionConfigEntry {
 interface OpenAiAdsConfigEntry {
     connections?: OpenAiAdsConnectionConfigEntry[];
 }
+/**
+ * Private OAuth credentials are bound to the immutable `projects.id`.
+ * `projectName` is descriptive only and must never be used for lookup.
+ */
+interface GoogleAdsConnectionConfigEntry {
+    projectId: string;
+    projectName: string;
+    /**
+     * Opaque, secret-free nonce minted on every OAuth connect/reconnect.
+     * Refresh uses it as a compare-and-swap generation so an in-flight token
+     * refresh can never restore an older Google principal.
+     */
+    credentialGeneration?: string;
+    accessToken?: string;
+    refreshToken?: string | null;
+    tokenExpiresAt?: string | null;
+    scopes?: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+interface GoogleAdsConfigEntry {
+    developerToken?: string;
+    /** Optional dedicated OAuth app. Falls back to the shared `google` app. */
+    clientId?: string;
+    clientSecret?: string;
+    connections?: GoogleAdsConnectionConfigEntry[];
+}
+/**
+ * Private OAuth credentials are bound to the immutable `projects.id`.
+ * `projectName` is descriptive only and must never be used for lookup.
+ */
+interface GtmConnectionConfigEntry {
+    projectId: string;
+    projectName: string;
+    /** See GoogleAdsConnectionConfigEntry.credentialGeneration. */
+    credentialGeneration?: string;
+    accessToken?: string;
+    refreshToken?: string | null;
+    tokenExpiresAt?: string | null;
+    scopes?: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+interface GtmConfigEntry {
+    /** Optional dedicated OAuth app. Falls back to the shared `google` app. */
+    clientId?: string;
+    clientSecret?: string;
+    connections?: GtmConnectionConfigEntry[];
+}
 type WordpressEnv = 'live' | 'staging';
 interface WordpressConnectionConfigEntry {
     projectName: string;
@@ -294,6 +344,8 @@ interface CanonryConfig {
     vercelTraffic?: VercelTrafficConfigEntry;
     cloudflareTraffic?: CloudflareTrafficConfigEntry;
     openaiAds?: OpenAiAdsConfigEntry;
+    googleAds?: GoogleAdsConfigEntry;
+    gtm?: GtmConfigEntry;
     dashboardPasswordHash?: string;
     dashboard?: DashboardConfigEntry;
     telemetry?: boolean;
@@ -356,4 +408,82 @@ declare function createServer(opts: {
     getAgentPluginState?: () => AgentPluginState;
 }): Promise<FastifyInstance>;
 
-export { type CanonryConfig, createServer, loadConfig };
+interface GoogleMarketingProjectRef {
+    id: string;
+    name: string;
+}
+interface GoogleMarketingRuntimeOptions {
+    config: CanonryConfig;
+    saveConfigPatch: (patch: Partial<CanonryConfig>) => void | Promise<void>;
+    env?: Readonly<Record<string, string | undefined>>;
+    fetch?: typeof globalThis.fetch;
+    now?: () => Date;
+    randomUUID?: () => string;
+    refreshAccessToken?: (clientId: string, clientSecret: string, refreshToken: string) => Promise<GoogleTokenResponse>;
+}
+interface GoogleAdsCustomerDiscoveryOptions {
+    loginCustomerId?: string | null;
+    maxCustomers?: number;
+}
+interface GoogleAdsCustomerDetailsInput {
+    customerId: string;
+    loginCustomerId?: string | null;
+}
+interface GoogleMarketingListOptions {
+    maxResults?: number;
+}
+interface GoogleAdsSyncInput {
+    project: GoogleMarketingProjectRef;
+    connectionId: string;
+    runId: string;
+    selection: {
+        customerId: string;
+        loginCustomerId?: string | null;
+        selectedAt?: string | null;
+    };
+    /** Omit to use the trailing 31 customer-local calendar days (UTC fallback) and at most 50 campaigns. */
+    metricsQuery?: GoogleAdsCampaignMetricsQuery;
+}
+interface GoogleAdsSyncResult {
+    accessibleCustomers: GoogleAdsRawSnapshotDto;
+    inventory: GoogleAdsRawSnapshotDto;
+    metrics: GoogleAdsRawSnapshotDto | null;
+    effectiveGoalGraph: GoogleAdsEffectiveGoalGraphDto;
+}
+interface GtmSyncInput {
+    project: GoogleMarketingProjectRef;
+    connectionId: string;
+    runId: string;
+    selection: {
+        accountId: string;
+        containerId: string;
+        workspaceId?: string | null;
+    };
+    expectedEventName?: string;
+    expectedHostname?: string;
+}
+interface GoogleMarketingRuntime {
+    listGoogleAdsCustomers(project: GoogleMarketingProjectRef, options?: GoogleAdsCustomerDiscoveryOptions): Promise<GoogleAdsAccessibleCustomersResponse>;
+    getGoogleAdsCustomer(project: GoogleMarketingProjectRef, input: GoogleAdsCustomerDetailsInput): Promise<GoogleAdsAccessibleCustomerDto>;
+    listGtmAccounts(project: GoogleMarketingProjectRef, options?: GoogleMarketingListOptions): Promise<GtmAccountsResponse>;
+    listGtmContainers(project: GoogleMarketingProjectRef, accountId: string, options?: GoogleMarketingListOptions): Promise<GtmContainerListResponse>;
+    listGtmWorkspaces(project: GoogleMarketingProjectRef, accountId: string, containerId: string, options?: GoogleMarketingListOptions): Promise<GtmWorkspaceListResponse>;
+    syncGoogleAds(input: GoogleAdsSyncInput): Promise<GoogleAdsSyncResult>;
+    syncGtm(input: GtmSyncInput): Promise<GtmRawSnapshotDto>;
+}
+declare class GoogleMarketingRuntimeError extends Error {
+    readonly code: 'INVALID_INPUT' | 'NOT_CONFIGURED' | 'CONNECTION_NOT_FOUND' | 'TOKEN_REFRESH_REQUIRED' | 'INVALID_TOKEN_RESPONSE' | 'RESOURCE_NOT_FOUND';
+    readonly name = "GoogleMarketingRuntimeError";
+    constructor(message: string, code: 'INVALID_INPUT' | 'NOT_CONFIGURED' | 'CONNECTION_NOT_FOUND' | 'TOKEN_REFRESH_REQUIRED' | 'INVALID_TOKEN_RESPONSE' | 'RESOURCE_NOT_FOUND');
+}
+interface PrivateCredential {
+    accessToken: string;
+}
+/** Private runtime seam. Values returned here must never cross an API response boundary. */
+interface GoogleMarketingCredentialStore {
+    getCredential(project: GoogleMarketingProjectRef, provider: GoogleMarketingProvider): Promise<PrivateCredential>;
+}
+declare function createGoogleMarketingCredentialStore(options: GoogleMarketingRuntimeOptions): GoogleMarketingCredentialStore;
+declare function createGoogleMarketingRuntime(options: GoogleMarketingRuntimeOptions): GoogleMarketingRuntime;
+
+export { type CanonryConfig, type GoogleAdsCustomerDetailsInput, type GoogleAdsCustomerDiscoveryOptions, type GoogleAdsSyncInput, type GoogleAdsSyncResult, type GoogleMarketingCredentialStore, type GoogleMarketingListOptions, type GoogleMarketingProjectRef, type GoogleMarketingRuntime, GoogleMarketingRuntimeError, type GoogleMarketingRuntimeOptions, type GtmSyncInput, createGoogleMarketingCredentialStore, createGoogleMarketingRuntime, createServer, loadConfig };

package/dist/index.js

@@ -1,12 +1,18 @@
 import {
+  GoogleMarketingRuntimeError,
+  createGoogleMarketingCredentialStore,
+  createGoogleMarketingRuntime,
   createServer
-} from "./chunk-R2SZWJDV.js";
+} from "./chunk-NMCLLN5X.js";
 import {
   loadConfig
-} from "./chunk-C4UWZLQX.js";
-import "./chunk-CDACTPTY.js";
-import "./chunk-TP4KXU3E.js";
+} from "./chunk-BMW3AURU.js";
+import "./chunk-CCZNCH7Y.js";
+import "./chunk-HJ7W2LXI.js";
 export {
+  GoogleMarketingRuntimeError,
+  createGoogleMarketingCredentialStore,
+  createGoogleMarketingRuntime,
   createServer,
   loadConfig
 };

package/dist/{intelligence-service-KBSDKHED.js → intelligence-service-64IPZ4NU.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-CDACTPTY.js";
-import "./chunk-TP4KXU3E.js";
+} from "./chunk-CCZNCH7Y.js";
+import "./chunk-HJ7W2LXI.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -1,15 +1,15 @@
 import {
   autoSyncSkills
-} from "./chunk-76JMZAFZ.js";
+} from "./chunk-HTUI6BSK.js";
 import {
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools,
   createApiClient
-} from "./chunk-C4UWZLQX.js";
+} from "./chunk-BMW3AURU.js";
 import {
   isReadOnlyKey
-} from "./chunk-TP4KXU3E.js";
+} from "./chunk-HJ7W2LXI.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "4.168.0",
+  "version": "4.170.0",
   "type": "module",
   "description": "Agent-first open-source AEO operating platform - track how answer engines cite your domain",
   "license": "FSL-1.1-ALv2",
@@ -75,24 +75,26 @@
     "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-cloud-run": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
+    "@ainyc/canonry-provider-gemini": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",