@canonry/canonry 4.177.3 → 4.178.0

package/dist/{chunk-6XUWDSLN.js → chunk-SXKA4OXZ.js}

@@ -32,6 +32,7 @@ import {
   discoveryRunRequestSchema,
   gaMeasurementAnalysisWindowSchema,
   gaMeasurementHostScopeSchema,
+  googleAdsMetricsWindowSchema,
   gscPerformanceOrderBySchema,
   keywordBatchRequestSchema,
   keywordGenerateRequestSchema,
@@ -91,7 +92,7 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema
-} from "./chunk-PQT3ECM3.js";
+} from "./chunk-T4JH77O6.js";
 
 // src/config.ts
 import fs from "fs";
@@ -2959,6 +2960,18 @@ var postApiV1ProjectsByNameGoogleAdsSync = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameGoogleAdsPerformance = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/google-ads/performance",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameGoogleAdsSnapshots = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -3123,6 +3136,18 @@ var deleteApiV1ProjectsByNameGtmConnection = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameConversionTrackingOptions = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/conversion-tracking/options",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameConversionTrackingContracts = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -6813,6 +6838,23 @@ var ApiClient = class {
       })
     );
   }
+  async getConversionTrackingOptions(project) {
+    return this.invoke(
+      () => getApiV1ProjectsByNameConversionTrackingOptions({
+        client: this.heyClient,
+        path: { name: project }
+      })
+    );
+  }
+  async getGoogleAdsPerformance(project, query) {
+    return this.invoke(
+      () => getApiV1ProjectsByNameGoogleAdsPerformance({
+        client: this.heyClient,
+        path: { name: project },
+        ...query?.window ? { query: { window: query.window } } : {}
+      })
+    );
+  }
   async listGoogleAdsSnapshots(project, query) {
     return this.invoke(
       () => getApiV1ProjectsByNameGoogleAdsSnapshots({
@@ -8376,973 +8418,599 @@ var ApiClient = class {
   }
 };
 
+// src/mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z4 } from "zod";
+
 // src/package-version.ts
 import { createRequire } from "module";
 var _require = createRequire(import.meta.url);
 var PACKAGE_VERSION = _require("../package.json").version;
 
-// src/commands/skills.ts
-import crypto2 from "crypto";
-import fs2 from "fs";
-import os2 from "os";
-import path2 from "path";
-import { fileURLToPath } from "url";
-var BUNDLED_SKILL_NAMES = ["canonry", "aero"];
-function resolveBundledSkillsRoot(pkgDir) {
-  const here = pkgDir ?? path2.dirname(fileURLToPath(import.meta.url));
-  const candidates = [
-    path2.join(here, "../assets/agent-workspace/skills"),
-    path2.join(here, "../../assets/agent-workspace/skills"),
-    path2.join(here, "../../../../skills")
-  ];
-  for (const candidate of candidates) {
-    if (BUNDLED_SKILL_NAMES.every((name) => fs2.existsSync(path2.join(candidate, name, "SKILL.md")))) {
-      return candidate;
-    }
-  }
-  throw new CliError({
-    code: "INTERNAL_ERROR",
-    message: `Bundled skills not found. Searched:
-  ${candidates.join("\n  ")}`,
-    exitCode: 2
-  });
+// src/mcp/tool-registry.ts
+import { z as z3 } from "zod";
+
+// src/measurement-draft-actions.ts
+import { z } from "zod";
+var idempotencyKeySchema = z.string().trim().min(1).describe(
+  "A fresh request key. Reuse it only when retrying the identical request."
+);
+var draftEtagSchema = z.string().trim().min(1).optional().describe(
+  "Current draft ETag from canonry_measurement_draft_get. The API requires it for draft edits, publish, and discard; omit it only to receive the API\u2019s actionable 428 response."
+);
+function mutationOperationSchema(action, request) {
+  return z.object({
+    action: z.literal(action),
+    request,
+    etag: draftEtagSchema,
+    idempotencyKey: idempotencyKeySchema
+  }).strict().describe(`Operation for ${action}.`);
 }
-function parseDescription(content) {
-  const fmMatch = /^---\n([\s\S]*?)\n---/.exec(content);
-  if (!fmMatch) return "";
-  const descMatch = /^description:\s*(\S.*)$/m.exec(fmMatch[1]);
-  if (!descMatch) return "";
-  return descMatch[1].replace(/^["']|["']$/g, "").trim();
+var measurementDraftOperationSchema = z.discriminatedUnion("action", [
+  z.object({
+    action: z.literal("create"),
+    request: measurementDraftCreateRequestSchema,
+    idempotencyKey: idempotencyKeySchema
+  }).strict().describe("Operation for create."),
+  mutationOperationSchema("import-sitemap", measurementDraftImportSitemapRequestSchema),
+  mutationOperationSchema("apply-sitemap-selection", measurementDraftApplySitemapSelectionRequestSchema),
+  mutationOperationSchema("upsert-target", measurementDraftUpsertTargetRequestSchema),
+  mutationOperationSchema("rename-target", measurementDraftRenameTargetRequestSchema),
+  mutationOperationSchema("merge-targets", measurementDraftMergeTargetsRequestSchema),
+  mutationOperationSchema("exclude-target", measurementDraftExcludeTargetRequestSchema),
+  mutationOperationSchema("rebind-target", measurementDraftRebindTargetRequestSchema),
+  mutationOperationSchema("apply-assignments", measurementDraftApplyAssignmentsRequestSchema),
+  z.object({
+    action: z.literal("preview-assignments"),
+    request: measurementDraftPreviewAssignmentsRequestSchema
+  }).strict().describe("Read-semantic assignment impact preview."),
+  mutationOperationSchema("replace-assignments", measurementDraftReplaceAssignmentsRequestSchema),
+  mutationOperationSchema("apply-paired-assignments", measurementDraftApplyPairedAssignmentsRequestSchema),
+  mutationOperationSchema("remove-assignment", measurementDraftRemoveAssignmentRequestSchema),
+  mutationOperationSchema("clear-assignments", measurementDraftClearAssignmentsRequestSchema),
+  mutationOperationSchema("classify-assignments", measurementDraftClassifyAssignmentsRequestSchema),
+  mutationOperationSchema("upsert-group", measurementDraftUpsertGroupRequestSchema),
+  mutationOperationSchema("remove-group", measurementDraftRemoveGroupRequestSchema),
+  z.object({
+    action: z.literal("preview-group-membership"),
+    request: measurementDraftPreviewGroupMembershipRequestSchema
+  }).strict().describe("Read-semantic CSV group-membership preview."),
+  mutationOperationSchema("apply-group-membership", measurementDraftApplyGroupMembershipRequestSchema),
+  mutationOperationSchema("upsert-competitor", measurementDraftUpsertCompetitorRequestSchema),
+  mutationOperationSchema("remove-competitor", measurementDraftRemoveCompetitorRequestSchema),
+  z.object({ action: z.literal("compile-preview") }).strict().describe("Operation for compile-preview."),
+  z.object({ action: z.literal("diff-preview") }).strict().describe("Operation for diff-preview."),
+  mutationOperationSchema("publish", measurementDraftPublishRequestSchema),
+  z.object({
+    action: z.literal("discard"),
+    etag: draftEtagSchema,
+    idempotencyKey: idempotencyKeySchema
+  }).strict().describe("Operation for discard.")
+]);
+function runMeasurementDraftAction(client2, project, actionInput) {
+  switch (actionInput.action) {
+    case "create":
+      return client2.createMeasurementPlanDraft(project, actionInput.request, actionInput.idempotencyKey);
+    case "import-sitemap":
+      return client2.importMeasurementDraftSitemap(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "apply-sitemap-selection":
+      return client2.applyMeasurementDraftSitemapSelection(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "upsert-target":
+      return client2.upsertMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "rename-target":
+      return client2.renameMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "merge-targets":
+      return client2.mergeMeasurementDraftTargets(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "exclude-target":
+      return client2.excludeMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "rebind-target":
+      return client2.rebindMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "apply-assignments":
+      return client2.applyMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "preview-assignments":
+      return client2.previewMeasurementDraftAssignments(project, actionInput.request);
+    case "replace-assignments":
+      return client2.replaceMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "apply-paired-assignments":
+      return client2.applyPairedMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "remove-assignment":
+      return client2.removeMeasurementDraftAssignment(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "clear-assignments":
+      return client2.clearMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "classify-assignments":
+      return client2.classifyMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "upsert-group":
+      return client2.upsertMeasurementDraftGroup(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "remove-group":
+      return client2.removeMeasurementDraftGroup(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "preview-group-membership":
+      return client2.previewMeasurementDraftGroupMembership(project, actionInput.request);
+    case "apply-group-membership":
+      return client2.applyMeasurementDraftGroupMembership(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "upsert-competitor":
+      return client2.upsertMeasurementDraftCompetitor(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "remove-competitor":
+      return client2.removeMeasurementDraftCompetitor(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "compile-preview":
+      return client2.compileMeasurementDraftPreview(project);
+    case "diff-preview":
+      return client2.diffMeasurementDraftPreview(project);
+    case "publish":
+      return client2.publishMeasurementDraft(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
+    case "discard":
+      return client2.discardMeasurementDraft(project, actionInput.idempotencyKey, actionInput.etag);
+  }
 }
-function getBundledSkills(pkgDir) {
-  const root = resolveBundledSkillsRoot(pkgDir);
-  return BUNDLED_SKILL_NAMES.map((name) => {
-    const skillDir = path2.join(root, name);
-    const skillFile = path2.join(skillDir, "SKILL.md");
-    const content = fs2.readFileSync(skillFile, "utf-8");
-    return { name, description: parseDescription(content), bundledPath: skillDir };
-  });
+
+// src/mcp/schema.ts
+import { z as z2 } from "zod";
+var projectNameSchema = z2.string().min(1).describe("Canonry project name.");
+var runIdSchema = z2.string().min(1).describe("Canonry run ID.");
+var insightIdSchema = z2.string().min(1).describe("Canonry insight ID.");
+var analyticsWindowSchema = z2.enum(["7d", "30d", "90d", "all"]).describe("Analytics time window.");
+var emptyInputSchema = z2.object({});
+var projectInputSchema = z2.object({
+  project: projectNameSchema
+});
+function toJsonSchema(schema, name) {
+  return {
+    ...z2.toJSONSchema(schema, { target: "draft-7" }),
+    title: name
+  };
 }
-function walkRelative(dir, prefix = "") {
-  const out = [];
-  for (const entry of fs2.readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? path2.join(prefix, entry.name) : entry.name;
-    const full = path2.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      out.push(...walkRelative(full, rel));
-    } else if (entry.isFile()) {
-      out.push(rel);
+function compactStringParams(values, keys) {
+  const params = {};
+  for (const key of keys) {
+    const value = values[key];
+    if (value === void 0 || value === null || value === "") continue;
+    if (typeof value === "string") {
+      params[key] = value;
+    } else if (typeof value === "number" || typeof value === "boolean") {
+      params[key] = String(value);
     }
   }
-  return out.sort();
-}
-function sha256File(filePath) {
-  return crypto2.createHash("sha256").update(fs2.readFileSync(filePath)).digest("hex");
+  return Object.keys(params).length ? params : void 0;
 }
-function readSkillManifest(skillDir) {
-  try {
-    return coerceSkillManifest(JSON.parse(fs2.readFileSync(path2.join(skillDir, SKILL_MANIFEST_FILENAME), "utf-8")));
-  } catch {
-    return null;
+function uniqueStrings(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values) {
+    const trimmed = value.trim();
+    if (!trimmed || seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    result.push(trimmed);
   }
+  return result;
 }
-function writeSkillManifest(skillDir, manifest) {
-  fs2.writeFileSync(path2.join(skillDir, SKILL_MANIFEST_FILENAME), `${JSON.stringify(manifest, null, 2)}
-`, "utf-8");
-}
-function reconcileSkillTree(srcDir, destDir, manifest, force) {
-  const result = { added: [], updated: [], unchanged: [], conflicts: [], bundledHashes: /* @__PURE__ */ new Map() };
-  for (const rel of walkRelative(srcDir)) {
-    const srcPath = path2.join(srcDir, rel);
-    const destPath = path2.join(destDir, rel);
-    const bundledHash = sha256File(srcPath);
-    result.bundledHashes.set(rel, bundledHash);
-    const installedHash = fs2.existsSync(destPath) ? sha256File(destPath) : void 0;
-    const state = classifySkillFile({ bundledHash, installedHash, manifestHash: manifest?.files[rel] });
-    switch (state) {
-      case "missing":
-        fs2.mkdirSync(path2.dirname(destPath), { recursive: true });
-        fs2.copyFileSync(srcPath, destPath);
-        result.added.push(rel);
-        break;
-      case "unchanged":
-        result.unchanged.push(rel);
-        break;
-      case "stale":
-        fs2.copyFileSync(srcPath, destPath);
-        result.updated.push(rel);
-        break;
-      case "edited":
-        if (force) {
-          fs2.copyFileSync(srcPath, destPath);
-          result.updated.push(rel);
-        } else {
-          result.conflicts.push(rel);
-        }
-        break;
-    }
-  }
-  return result;
-}
-function buildManifest(skillName, recon, prior) {
-  const conflicts = new Set(recon.conflicts);
-  const files = {};
-  for (const [rel, bundledHash] of recon.bundledHashes) {
-    files[rel] = conflicts.has(rel) ? prior?.files[rel] ?? bundledHash : bundledHash;
-  }
-  return { skill: skillName, version: PACKAGE_VERSION, files };
-}
-function describeChanges(recon) {
-  const parts = [];
-  if (recon.added.length > 0) parts.push(`${recon.added.length} added`);
-  if (recon.updated.length > 0) parts.push(`${recon.updated.length} refreshed`);
-  return parts.length > 0 ? parts.join(", ") : "no changes";
-}
-function buildClaudeMessage(name, status, recon) {
-  const rel = `.claude/skills/${name}`;
-  let message = status === "installed" ? `Installed ${rel}` : status === "updated" ? `Updated ${rel} (${describeChanges(recon)})` : `Already installed: ${rel}`;
-  if (recon.conflicts.length > 0) {
-    message += ` \u2014 ${recon.conflicts.length} file(s) differ from the bundle (local edits kept; pass --force to overwrite)`;
-  }
-  return message;
-}
-function installClaudeSkill(skill, targetDir, force) {
-  const targetPath = path2.join(targetDir, ".claude", "skills", skill.name);
-  const existedBefore = fs2.existsSync(path2.join(targetPath, "SKILL.md"));
-  const priorManifest = readSkillManifest(targetPath);
-  fs2.mkdirSync(targetPath, { recursive: true });
-  const recon = reconcileSkillTree(skill.bundledPath, targetPath, priorManifest, force);
-  writeSkillManifest(targetPath, buildManifest(skill.name, recon, priorManifest));
-  const changed = recon.added.length + recon.updated.length;
-  const status = !existedBefore ? "installed" : changed > 0 ? "updated" : "already-installed";
-  return {
-    skill: skill.name,
-    client: CodingAgents.claude,
-    targetPath,
-    status,
-    message: buildClaudeMessage(skill.name, status, recon),
-    added: recon.added,
-    updated: recon.updated,
-    unchanged: recon.unchanged,
-    conflicts: recon.conflicts
-  };
-}
-function installCodexSymlink(skill, targetDir, force) {
-  const codexPath = path2.join(targetDir, ".codex", "skills", skill.name);
-  const claudePath = path2.join(targetDir, ".claude", "skills", skill.name);
-  const linkTarget = path2.relative(path2.dirname(codexPath), claudePath);
-  fs2.mkdirSync(path2.dirname(codexPath), { recursive: true });
-  let stat;
-  try {
-    stat = fs2.lstatSync(codexPath);
-  } catch {
-    stat = void 0;
-  }
-  if (stat?.isSymbolicLink()) {
-    const existing = fs2.readlinkSync(codexPath);
-    if (existing === linkTarget) {
-      return {
-        skill: skill.name,
-        client: CodingAgents.codex,
-        targetPath: codexPath,
-        status: "already-linked",
-        message: `Already linked: .codex/skills/${skill.name}`
-      };
-    }
-    if (!force) {
-      throw new CliError({
-        code: "VALIDATION_ERROR",
-        message: `.codex/skills/${skill.name} is a symlink pointing elsewhere (${existing}). Pass --force to relink.`,
-        details: { skill: skill.name, targetPath: codexPath, existingTarget: existing },
-        exitCode: 1
-      });
-    }
-    fs2.unlinkSync(codexPath);
-    fs2.symlinkSync(linkTarget, codexPath);
-    return {
-      skill: skill.name,
-      client: CodingAgents.codex,
-      targetPath: codexPath,
-      status: "relinked",
-      message: `Relinked .codex/skills/${skill.name} \u2192 ${linkTarget}`
-    };
-  }
-  if (stat) {
-    if (!force) {
-      throw new CliError({
-        code: "VALIDATION_ERROR",
-        message: `.codex/skills/${skill.name} exists but is not a symlink. Pass --force to replace.`,
-        details: { skill: skill.name, targetPath: codexPath },
-        exitCode: 1
-      });
-    }
-    fs2.rmSync(codexPath, { recursive: true, force: true });
-  }
-  fs2.symlinkSync(linkTarget, codexPath);
+
+// src/mcp/tool-registry.ts
+var readAnnotations = (openWorldHint) => ({
+  readOnlyHint: true,
+  ...openWorldHint ? { openWorldHint } : {}
+});
+var writeAnnotations = (opts) => ({
+  readOnlyHint: false,
+  idempotentHint: opts.idempotentHint,
+  destructiveHint: Boolean(opts.destructiveHint),
+  ...opts.openWorldHint ? { openWorldHint: opts.openWorldHint } : {}
+});
+function defineTool(tool) {
   return {
-    skill: skill.name,
-    client: CodingAgents.codex,
-    targetPath: codexPath,
-    status: stat ? "relinked" : "linked",
-    message: stat ? `Replaced and linked .codex/skills/${skill.name} \u2192 ${linkTarget}` : `Linked .codex/skills/${skill.name} \u2192 ${linkTarget}`
+    ...tool,
+    inputJsonSchema: toJsonSchema(tool.inputSchema, tool.name)
   };
 }
-function buildSummaryMessage(results) {
-  const counts = {};
-  for (const r of results) counts[r.status] = (counts[r.status] ?? 0) + 1;
-  const parts = Object.entries(counts).map(([status, n]) => `${n} ${status}`);
-  let message = `Skills install summary: ${parts.join(", ")}.`;
-  const totalConflicts = results.reduce((sum, r) => sum + (r.conflicts?.length ?? 0), 0);
-  if (totalConflicts > 0) {
-    message += ` ${totalConflicts} file(s) differ from the bundle and were kept \u2014 pass --force to overwrite local edits.`;
-  }
-  return message;
-}
-function getBundledSkillSnapshots(pkgDir) {
-  return getBundledSkills(pkgDir).map((skill) => {
-    const files = {};
-    for (const rel of walkRelative(skill.bundledPath)) {
-      files[rel] = sha256File(path2.join(skill.bundledPath, rel));
-    }
-    return {
-      name: skill.name,
-      version: PACKAGE_VERSION,
-      files,
-      description: readBundledSkillDescription(skill.bundledPath)
-    };
-  });
-}
-function readBundledSkillDescription(skillDir) {
-  let raw;
-  try {
-    raw = fs2.readFileSync(path2.join(skillDir, "SKILL.md"), "utf-8");
-  } catch {
-    return void 0;
+var runTriggerInputSchema = z3.object({
+  project: projectNameSchema,
+  request: runTriggerRequestSchema.optional()
+});
+var measurementPlanVersionInputSchema = z3.object({ project: projectNameSchema, revision: z3.number().int().positive() });
+var measurementReportInputSchema = measurementPlanVersionInputSchema.extend({
+  runId: runIdSchema.optional().describe("Exact eligible full measurement run to reconstruct. Omit for the latest run in the revision.")
+});
+var measurementPlanPreviewInputSchema = z3.object({ project: projectNameSchema, plan: measurementPlanAuthoringSchema });
+var measurementPlanPublishInputSchema = measurementPlanPublishRequestSchema.extend({ project: projectNameSchema });
+var measurementPlanRetireInputSchema = z3.object({ project: projectNameSchema, stableKey: z3.string().min(1) });
+var measurementDiscoveryInputSchema = measurementDiscoveryRequestSchema.extend({ project: projectNameSchema });
+var idempotencyKeyInputSchema = z3.string().trim().min(1).describe("A fresh request key. Reuse it only when retrying the identical request.");
+var measurementOverviewInputSchema = z3.object({
+  project: projectNameSchema,
+  scope: measurementOverviewQuerySchema.shape.scope.describe("Read all Properties, one reporting group, or one Property."),
+  groupKey: measurementOverviewQuerySchema.shape.groupKey.describe("Group stable key. Required only for group scope."),
+  targetKey: measurementOverviewQuerySchema.shape.targetKey.describe("Property stable key. Required only for property scope."),
+  queryClass: measurementOverviewQuerySchema.shape.queryClass,
+  provider: measurementOverviewQuerySchema.shape.provider,
+  location: measurementOverviewQuerySchema.shape.location,
+  from: measurementOverviewQuerySchema.shape.from,
+  to: measurementOverviewQuerySchema.shape.to,
+  runId: measurementOverviewQuerySchema.shape.runId,
+  search: measurementOverviewQuerySchema.shape.search,
+  sort: measurementOverviewQuerySchema.shape.sort,
+  cursor: measurementOverviewQuerySchema.shape.cursor,
+  limit: measurementOverviewQuerySchema.shape.limit
+}).strict().superRefine((input, context) => {
+  if (input.scope === "group" && !input.groupKey) {
+    context.addIssue({ code: "custom", path: ["groupKey"], message: "Group scope requires groupKey." });
   }
-  const parts = raw.split("---");
-  if (parts.length < 3) return void 0;
-  const lines = (parts[1] ?? "").split("\n");
-  const collected = [];
-  let inside = false;
-  for (const line of lines) {
-    const isTopLevelKey = /^[a-z][\w-]*:/i.test(line);
-    if (inside && isTopLevelKey) break;
-    if (isTopLevelKey && line.startsWith("description:")) {
-      inside = true;
-      collected.push(line.slice("description:".length).trim());
-      continue;
-    }
-    if (inside) collected.push(line.trim());
+  if (input.scope === "property" && !input.targetKey) {
+    context.addIssue({ code: "custom", path: ["targetKey"], message: "Property scope requires targetKey." });
   }
-  if (!inside) return void 0;
-  const value = collected.join(" ").trim();
-  const unquoted = value.length >= 2 && value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value;
-  return unquoted.length > 0 ? unquoted : void 0;
-}
-async function installSkills(opts = {}) {
-  const targetDir = opts.user ? os2.homedir() : path2.resolve(opts.dir ?? process.cwd());
-  const client2 = opts.client ?? SkillsClients.all;
-  const force = opts.force ?? false;
-  const allSkills = getBundledSkills();
-  const requestedNames = opts.skills && opts.skills.length > 0 ? opts.skills : allSkills.map((s) => s.name);
-  const knownNames = new Set(allSkills.map((s) => s.name));
-  const unknown = requestedNames.filter((n) => !knownNames.has(n));
-  if (unknown.length > 0) {
-    throw new CliError({
-      code: "VALIDATION_ERROR",
-      message: `Unknown skill(s): ${unknown.join(", ")}. Available: ${[...knownNames].join(", ")}`,
-      details: { unknownSkills: unknown, availableSkills: [...knownNames] },
-      exitCode: 1
-    });
+  if (input.scope !== "group" && input.groupKey) {
+    context.addIssue({ code: "custom", path: ["groupKey"], message: `${input.scope} scope does not accept groupKey.` });
   }
-  const skillsToInstall = allSkills.filter((s) => requestedNames.includes(s.name));
-  fs2.mkdirSync(targetDir, { recursive: true });
-  const results = [];
-  for (const skill of skillsToInstall) {
-    results.push(installClaudeSkill(skill, targetDir, force));
-    if (client2 !== SkillsClients.claude) {
-      results.push(installCodexSymlink(skill, targetDir, force));
-    }
+  if (input.scope !== "property" && input.targetKey) {
+    context.addIssue({ code: "custom", path: ["targetKey"], message: `${input.scope} scope does not accept targetKey.` });
   }
-  return {
-    targetDir,
-    results,
-    message: buildSummaryMessage(results)
-  };
-}
-async function listSkills(opts = {}) {
-  const skills = getBundledSkills();
-  if (isMachineFormat(opts.format)) {
-    console.log(JSON.stringify({
-      skills: skills.map((s) => ({
-        name: s.name,
-        description: s.description,
-        claudePath: `.claude/skills/${s.name}`,
-        codexPath: `.codex/skills/${s.name}`
-      }))
-    }, null, 2));
-    return;
+});
+var measurementPropertyEvidenceInputSchema = measurementPropertyEvidenceQuerySchema.extend({
+  project: projectNameSchema,
+  targetKey: measurementPropertyEvidenceQuerySchema.shape.targetKey.describe("Property stable key. Required \u2014 this read is scoped to exactly one Property."),
+  shape: measurementPropertyEvidenceQuerySchema.shape.shape.describe(
+    "What one row is. Omit for sources (one row per cited URL). answers gives one row per measured answer with its cited URLs nested, including the answers that cited nothing."
+  )
+}).strict();
+var measurementPortfolioSummaryInputSchema = measurementPortfolioSummaryQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementPropertyQuestionsInputSchema = measurementPropertyQuestionsQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementQuestionResultInputSchema = measurementQuestionResultQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementPropertyCompetitorsInputSchema = measurementPropertyCompetitorsQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementChangesInputSchema = measurementChangesQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementDataQualityInputSchema = measurementDataQualityQuerySchema.extend({
+  project: projectNameSchema
+}).strict();
+var measurementDraftCollectionInputSchema = measurementDraftCollectionQuerySchema.extend({ project: projectNameSchema });
+var measurementQuerySetInputSchema = z3.object({
+  project: projectNameSchema,
+  setId: z3.string().trim().min(1)
+}).strict();
+var measurementQuerySetUpsertInputSchema = measurementQuerySetInputSchema.extend({
+  request: measurementQuerySetUpsertRequestSchema
+}).strict();
+var measurementQueryTemplateInputSchema = z3.object({
+  project: projectNameSchema,
+  templateId: z3.string().trim().min(1)
+}).strict();
+var measurementQueryTemplateUpsertInputSchema = measurementQueryTemplateInputSchema.extend({
+  request: measurementQueryTemplateUpsertRequestSchema
+}).strict();
+var measurementQueryTemplateApplyInputSchema = measurementQueryTemplateInputSchema.extend({
+  request: measurementQueryTemplateApplyRequestSchema,
+  idempotencyKey: idempotencyKeyInputSchema
+}).strict();
+var measurementPlanDeactivateInputSchema = measurementPlanDeactivateRequestSchema.extend({
+  project: projectNameSchema,
+  idempotencyKey: idempotencyKeyInputSchema
+}).strict();
+var measurementDraftActionInputSchema = z3.object({
+  project: projectNameSchema,
+  operation: measurementDraftOperationSchema.describe("Typed draft operation. Select exactly one action branch.")
+}).strict();
+var measurementDraftActionOpenApiOperations = [
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/create",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/import-sitemap",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-sitemap-selection",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-target",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/rename-target",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/merge-targets",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/exclude-target",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/rebind-target",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/preview-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/replace-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-paired-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-assignment",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/clear-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/classify-assignments",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-group",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-group",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/preview-group-membership",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-group-membership",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-competitor",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-competitor",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/compile-preview",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/diff-preview",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/publish",
+  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/discard"
+];
+var runsListInputSchema = z3.object({
+  project: projectNameSchema,
+  limit: z3.number().int().positive().max(500).optional()
+});
+var runGetInputSchema = z3.object({
+  runId: runIdSchema
+});
+var timelineInputSchema = z3.object({
+  project: projectNameSchema,
+  location: z3.string().optional().describe("Location label. Use an empty string for locationless results."),
+  limit: z3.number().int().positive().max(100).optional().describe("Restrict history to the most recent N project runs.")
+});
+var historyFilterShape = {
+  limit: z3.number().int().positive().max(500).optional(),
+  offset: z3.number().int().nonnegative().optional(),
+  since: z3.string().optional().describe("ISO 8601 lower bound."),
+  action: z3.string().optional().describe("Exact audit action filter."),
+  actor: z3.string().optional().describe("Exact actor filter."),
+  entityType: z3.string().optional().describe("Exact entity type filter.")
+};
+var projectHistoryInputSchema = z3.object({ project: projectNameSchema, ...historyFilterShape });
+var globalHistoryInputSchema = z3.object(historyFilterShape);
+var snapshotsListInputSchema = z3.object({
+  project: projectNameSchema,
+  limit: z3.number().int().positive().max(500).optional(),
+  offset: z3.number().int().nonnegative().optional(),
+  location: z3.string().optional().describe("Location label. Use an empty string for locationless results.")
+});
+var snapshotsDiffInputSchema = z3.object({
+  project: projectNameSchema,
+  run1: runIdSchema,
+  run2: runIdSchema
+});
+var insightsListInputSchema = z3.object({
+  project: projectNameSchema,
+  dismissed: z3.boolean().optional(),
+  runId: runIdSchema.optional()
+});
+var insightInputSchema = z3.object({
+  project: projectNameSchema,
+  insightId: insightIdSchema
+});
+var healthHistoryInputSchema = z3.object({
+  project: projectNameSchema,
+  limit: z3.number().int().positive().max(100).optional()
+});
+var gscPerformanceInputSchema = z3.object({
+  project: projectNameSchema,
+  startDate: z3.string().optional(),
+  endDate: z3.string().optional(),
+  query: z3.string().optional(),
+  page: z3.string().optional(),
+  limit: z3.number().int().positive().max(5e3).optional(),
+  offset: z3.number().int().nonnegative().optional(),
+  orderBy: gscPerformanceOrderBySchema.optional(),
+  window: analyticsWindowSchema.optional()
+});
+var gscPerformanceDailyInputSchema = z3.object({
+  project: projectNameSchema,
+  startDate: z3.string().optional(),
+  endDate: z3.string().optional(),
+  window: analyticsWindowSchema.optional()
+});
+var gscTopPagesInputSchema = z3.object({
+  project: projectNameSchema,
+  startDate: z3.string().optional(),
+  endDate: z3.string().optional(),
+  limit: z3.number().int().positive().max(500).optional(),
+  window: analyticsWindowSchema.optional()
+});
+var gscInspectionsInputSchema = z3.object({
+  project: projectNameSchema,
+  url: z3.string().optional(),
+  limit: z3.number().int().positive().max(500).optional()
+});
+var gscCoverageHistoryInputSchema = z3.object({
+  project: projectNameSchema,
+  limit: z3.number().int().positive().max(500).optional()
+});
+var gscSitemapsInputSchema = z3.object({
+  project: projectNameSchema,
+  sitemapIndex: z3.string().url().optional()
+});
+var gscSitemapsSubmitInputSchema = z3.union([
+  z3.object({
+    project: projectNameSchema,
+    sitemapUrls: z3.array(z3.string().url()).min(1).max(50)
+  }).strict(),
+  z3.object({
+    project: projectNameSchema,
+    mode: z3.enum(["indexes", "all-files"])
+  }).strict()
+]);
+async function submitGscSitemapsFromMcp(client2, input) {
+  let sitemapUrls;
+  if ("sitemapUrls" in input) {
+    sitemapUrls = uniqueStrings(input.sitemapUrls);
+  } else {
+    const topLevel = await client2.gscSitemaps(input.project);
+    if (input.mode === "indexes") {
+      sitemapUrls = uniqueStrings(
+        topLevel.preferredSubmissionUrls.length > 0 ? topLevel.preferredSubmissionUrls : topLevel.sitemaps.map((sitemap) => sitemap.path)
+      );
+    } else {
+      const indexes = topLevel.sitemaps.filter((sitemap) => sitemap.isSitemapsIndex).map((sitemap) => sitemap.path);
+      const expandedIndexUrls = [];
+      for (let offset = 0; offset < indexes.length; offset += 4) {
+        const children = await Promise.all(
+          indexes.slice(offset, offset + 4).map(
+            (sitemapIndex) => client2.gscSitemaps(input.project, { sitemapIndex })
+          )
+        );
+        children.forEach((result, index) => {
+          const sitemapIndex = indexes[offset + index];
+          expandedIndexUrls.push(...result.sitemaps.length > 0 ? result.sitemaps.map((sitemap) => sitemap.path) : [sitemapIndex]);
+        });
+      }
+      sitemapUrls = uniqueStrings([
+        ...topLevel.sitemaps.filter((sitemap) => !sitemap.isSitemapsIndex).map((sitemap) => sitemap.path),
+        ...expandedIndexUrls
+      ]);
+    }
   }
-  console.log("Bundled canonry skills:\n");
-  for (const skill of skills) {
-    console.log(`  ${skill.name}`);
-    if (skill.description) console.log(`    ${skill.description}`);
-    console.log(`    Claude: .claude/skills/${skill.name}/`);
-    console.log(`    Codex:  .codex/skills/${skill.name} (symlink \u2192 ../../.claude/skills/${skill.name})`);
-    console.log();
+  if (sitemapUrls.length === 0) {
+    throw new Error("No GSC sitemaps found. Submit an explicit sitemap URL first.");
+  }
+  const aggregate = {
+    summary: { total: 0, accepted: 0, failed: 0 },
+    results: []
+  };
+  for (let offset = 0; offset < sitemapUrls.length; offset += 50) {
+    const batchSitemapUrls = sitemapUrls.slice(offset, offset + 50);
+    try {
+      const result = await client2.gscSubmitSitemaps(input.project, {
+        sitemapUrls: batchSitemapUrls
+      });
+      aggregate.summary.total += result.summary.total;
+      aggregate.summary.accepted += result.summary.accepted;
+      aggregate.summary.failed += result.summary.failed;
+      aggregate.results.push(...result.results);
+    } catch (cause) {
+      if (offset === 0) throw cause;
+      const attempted = aggregate.summary.total + batchSitemapUrls.length;
+      const remaining = sitemapUrls.length - attempted;
+      throw new CliError({
+        code: "GOOGLE_SITEMAP_SUBMISSION_PARTIAL",
+        message: `Sitemap submission stopped after ${aggregate.summary.total} completed results; ${batchSitemapUrls.length} are unconfirmed and ${remaining} were not attempted.`,
+        exitCode: cause instanceof CliError && cause.exitCode === 1 ? 1 : EXIT_SYSTEM_ERROR,
+        details: {
+          project: input.project,
+          accepted: aggregate.summary.accepted,
+          failed: aggregate.summary.failed,
+          completed: aggregate.summary.total,
+          attempted,
+          unconfirmed: batchSitemapUrls.length,
+          remaining,
+          unconfirmedBatch: { index: Math.floor(offset / 50) + 1, sitemapUrls: batchSitemapUrls },
+          partialResult: aggregate,
+          cause: cause instanceof CliError ? { code: cause.code, message: cause.message, details: cause.details } : { message: describeError(cause) }
+        }
+      });
+    }
   }
+  return aggregate;
 }
-function emitInstallSummary(summary, format) {
-  if (isMachineFormat(format)) {
-    console.log(JSON.stringify(summary, null, 2));
-    return;
-  }
-  for (const r of summary.results) console.log(r.message);
-  console.log(`
-Target: ${summary.targetDir}`);
-  console.log(summary.message);
-}
-function getMissingUserSkillsNudge(home, agentPlugin) {
-  if (!home) return null;
-  const skillsBase = path2.join(home, ".claude", "skills");
-  const installed = [];
-  const missing = [];
-  for (const name of BUNDLED_SKILL_NAMES) {
-    const skillFile = path2.join(skillsBase, name, "SKILL.md");
-    if (existsSafe(skillFile)) installed.push(name);
-    else missing.push(name);
-  }
-  if (agentPlugin && agentPlugin.configuredClients.length > 0) {
-    const unverifiedClients = agentPlugin.configuredClients.filter((client2) => !agentPlugin.verifiedClients.includes(client2));
-    const mismatchedClients = agentPlugin.verifiedClients.filter((client2) => agentPlugin.verifiedClientVersions?.[client2] !== PACKAGE_VERSION);
-    if (unverifiedClients.length === 0 && mismatchedClients.length === 0) return null;
-    const displayClients = (clients) => clients.map((client2) => client2 === "claude-code" ? "Claude Code" : "Codex").join(" + ");
-    const problems = [];
-    if (unverifiedClients.length > 0) {
-      problems.push(`The Canonry plugin is enabled for ${displayClients(unverifiedClients)}, but its cached manifest and skill assets could not be verified.`);
-    }
-    if (mismatchedClients.length > 0) {
-      const versions = mismatchedClients.map((client2) => `${client2 === "claude-code" ? "Claude Code" : "Codex"} v${agentPlugin.verifiedClientVersions?.[client2] ?? "unknown"}`).join(", ");
-      problems.push(`${versions} ${mismatchedClients.length === 1 ? "does" : "do"} not match the running Canonry v${PACKAGE_VERSION}.`);
-    }
-    return {
-      message: `Tip: ${problems.join(" ")} Update or reinstall \`canonry@canonry\` with the affected client plugin manager.`,
-      missing,
-      installed
-    };
-  }
-  if (missing.length === 0) return null;
-  const fix = missing.length === BUNDLED_SKILL_NAMES.length ? "canonry skills install --user" : `canonry skills install ${missing.join(" ")} --user`;
-  return {
-    message: `Tip: ${missing.join(" + ")} skill${missing.length === 1 ? "" : "s"} not installed in ~/.claude/skills/. Run \`${fix}\` so Claude/Codex sessions on this host auto-load the canonry reference docs.`,
-    missing,
-    installed
-  };
-}
-function existsSafe(p) {
-  try {
-    return fs2.existsSync(p);
-  } catch {
-    return false;
-  }
-}
-function parseSkillsClient(value) {
-  if (!value) return SkillsClients.all;
-  const parsed = skillsClientSchema.safeParse(value);
-  if (parsed.success) return parsed.data;
-  const allowed = skillsClientSchema.options;
-  throw new CliError({
-    code: "VALIDATION_ERROR",
-    message: `Invalid --client value "${value}". Must be one of: ${allowed.join(", ")}`,
-    details: { flag: "client", value, allowed },
-    exitCode: 1
-  });
-}
-
-// src/mcp/tool-registry.ts
-import { z as z3 } from "zod";
-
-// src/measurement-draft-actions.ts
-import { z } from "zod";
-var idempotencyKeySchema = z.string().trim().min(1).describe(
-  "A fresh request key. Reuse it only when retrying the identical request."
-);
-var draftEtagSchema = z.string().trim().min(1).optional().describe(
-  "Current draft ETag from canonry_measurement_draft_get. The API requires it for draft edits, publish, and discard; omit it only to receive the API\u2019s actionable 428 response."
-);
-function mutationOperationSchema(action, request) {
-  return z.object({
-    action: z.literal(action),
-    request,
-    etag: draftEtagSchema,
-    idempotencyKey: idempotencyKeySchema
-  }).strict().describe(`Operation for ${action}.`);
-}
-var measurementDraftOperationSchema = z.discriminatedUnion("action", [
-  z.object({
-    action: z.literal("create"),
-    request: measurementDraftCreateRequestSchema,
-    idempotencyKey: idempotencyKeySchema
-  }).strict().describe("Operation for create."),
-  mutationOperationSchema("import-sitemap", measurementDraftImportSitemapRequestSchema),
-  mutationOperationSchema("apply-sitemap-selection", measurementDraftApplySitemapSelectionRequestSchema),
-  mutationOperationSchema("upsert-target", measurementDraftUpsertTargetRequestSchema),
-  mutationOperationSchema("rename-target", measurementDraftRenameTargetRequestSchema),
-  mutationOperationSchema("merge-targets", measurementDraftMergeTargetsRequestSchema),
-  mutationOperationSchema("exclude-target", measurementDraftExcludeTargetRequestSchema),
-  mutationOperationSchema("rebind-target", measurementDraftRebindTargetRequestSchema),
-  mutationOperationSchema("apply-assignments", measurementDraftApplyAssignmentsRequestSchema),
-  z.object({
-    action: z.literal("preview-assignments"),
-    request: measurementDraftPreviewAssignmentsRequestSchema
-  }).strict().describe("Read-semantic assignment impact preview."),
-  mutationOperationSchema("replace-assignments", measurementDraftReplaceAssignmentsRequestSchema),
-  mutationOperationSchema("apply-paired-assignments", measurementDraftApplyPairedAssignmentsRequestSchema),
-  mutationOperationSchema("remove-assignment", measurementDraftRemoveAssignmentRequestSchema),
-  mutationOperationSchema("clear-assignments", measurementDraftClearAssignmentsRequestSchema),
-  mutationOperationSchema("classify-assignments", measurementDraftClassifyAssignmentsRequestSchema),
-  mutationOperationSchema("upsert-group", measurementDraftUpsertGroupRequestSchema),
-  mutationOperationSchema("remove-group", measurementDraftRemoveGroupRequestSchema),
-  z.object({
-    action: z.literal("preview-group-membership"),
-    request: measurementDraftPreviewGroupMembershipRequestSchema
-  }).strict().describe("Read-semantic CSV group-membership preview."),
-  mutationOperationSchema("apply-group-membership", measurementDraftApplyGroupMembershipRequestSchema),
-  mutationOperationSchema("upsert-competitor", measurementDraftUpsertCompetitorRequestSchema),
-  mutationOperationSchema("remove-competitor", measurementDraftRemoveCompetitorRequestSchema),
-  z.object({ action: z.literal("compile-preview") }).strict().describe("Operation for compile-preview."),
-  z.object({ action: z.literal("diff-preview") }).strict().describe("Operation for diff-preview."),
-  mutationOperationSchema("publish", measurementDraftPublishRequestSchema),
-  z.object({
-    action: z.literal("discard"),
-    etag: draftEtagSchema,
-    idempotencyKey: idempotencyKeySchema
-  }).strict().describe("Operation for discard.")
-]);
-function runMeasurementDraftAction(client2, project, actionInput) {
-  switch (actionInput.action) {
-    case "create":
-      return client2.createMeasurementPlanDraft(project, actionInput.request, actionInput.idempotencyKey);
-    case "import-sitemap":
-      return client2.importMeasurementDraftSitemap(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "apply-sitemap-selection":
-      return client2.applyMeasurementDraftSitemapSelection(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "upsert-target":
-      return client2.upsertMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "rename-target":
-      return client2.renameMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "merge-targets":
-      return client2.mergeMeasurementDraftTargets(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "exclude-target":
-      return client2.excludeMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "rebind-target":
-      return client2.rebindMeasurementDraftTarget(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "apply-assignments":
-      return client2.applyMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "preview-assignments":
-      return client2.previewMeasurementDraftAssignments(project, actionInput.request);
-    case "replace-assignments":
-      return client2.replaceMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "apply-paired-assignments":
-      return client2.applyPairedMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "remove-assignment":
-      return client2.removeMeasurementDraftAssignment(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "clear-assignments":
-      return client2.clearMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "classify-assignments":
-      return client2.classifyMeasurementDraftAssignments(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "upsert-group":
-      return client2.upsertMeasurementDraftGroup(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "remove-group":
-      return client2.removeMeasurementDraftGroup(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "preview-group-membership":
-      return client2.previewMeasurementDraftGroupMembership(project, actionInput.request);
-    case "apply-group-membership":
-      return client2.applyMeasurementDraftGroupMembership(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "upsert-competitor":
-      return client2.upsertMeasurementDraftCompetitor(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "remove-competitor":
-      return client2.removeMeasurementDraftCompetitor(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "compile-preview":
-      return client2.compileMeasurementDraftPreview(project);
-    case "diff-preview":
-      return client2.diffMeasurementDraftPreview(project);
-    case "publish":
-      return client2.publishMeasurementDraft(project, actionInput.request, actionInput.idempotencyKey, actionInput.etag);
-    case "discard":
-      return client2.discardMeasurementDraft(project, actionInput.idempotencyKey, actionInput.etag);
-  }
-}
-
-// src/mcp/schema.ts
-import { z as z2 } from "zod";
-var projectNameSchema = z2.string().min(1).describe("Canonry project name.");
-var runIdSchema = z2.string().min(1).describe("Canonry run ID.");
-var insightIdSchema = z2.string().min(1).describe("Canonry insight ID.");
-var analyticsWindowSchema = z2.enum(["7d", "30d", "90d", "all"]).describe("Analytics time window.");
-var emptyInputSchema = z2.object({});
-var projectInputSchema = z2.object({
-  project: projectNameSchema
+var gaWindowInputSchema = z3.object({
+  project: projectNameSchema,
+  window: analyticsWindowSchema.optional(),
+  startDate: z3.string().optional(),
+  endDate: z3.string().optional()
 });
-function toJsonSchema(schema, name) {
-  return {
-    ...z2.toJSONSchema(schema, { target: "draft-7" }),
-    title: name
-  };
-}
-function compactStringParams(values, keys) {
-  const params = {};
-  for (const key of keys) {
-    const value = values[key];
-    if (value === void 0 || value === null || value === "") continue;
-    if (typeof value === "string") {
-      params[key] = value;
-    } else if (typeof value === "number" || typeof value === "boolean") {
-      params[key] = String(value);
-    }
-  }
-  return Object.keys(params).length ? params : void 0;
-}
-function uniqueStrings(values) {
-  const seen = /* @__PURE__ */ new Set();
-  const result = [];
-  for (const value of values) {
-    const trimmed = value.trim();
-    if (!trimmed || seen.has(trimmed)) continue;
-    seen.add(trimmed);
-    result.push(trimmed);
-  }
-  return result;
-}
-
-// src/mcp/tool-registry.ts
-var readAnnotations = (openWorldHint) => ({
-  readOnlyHint: true,
-  ...openWorldHint ? { openWorldHint } : {}
+var GA_RANGE_PARAMS = ["window", "startDate", "endDate"];
+var gaTrafficInputSchema = gaWindowInputSchema.extend({
+  limit: z3.number().int().positive().max(500).optional()
 });
-var writeAnnotations = (opts) => ({
-  readOnlyHint: false,
-  idempotentHint: opts.idempotentHint,
-  destructiveHint: Boolean(opts.destructiveHint),
-  ...opts.openWorldHint ? { openWorldHint: opts.openWorldHint } : {}
+var gaMeasurementAnalysisInputSchema = z3.object({
+  project: projectNameSchema,
+  window: gaMeasurementAnalysisWindowSchema.optional(),
+  hostScope: gaMeasurementHostScopeSchema.optional(),
+  pathPrefix: z3.string().min(1).optional(),
+  limit: z3.number().int().positive().max(100).optional()
 });
-function defineTool(tool) {
-  return {
-    ...tool,
-    inputJsonSchema: toJsonSchema(tool.inputSchema, tool.name)
-  };
-}
-var runTriggerInputSchema = z3.object({
+var queriesInputSchema = z3.object({
   project: projectNameSchema,
-  request: runTriggerRequestSchema.optional()
+  request: queryBatchRequestSchema
 });
-var measurementPlanVersionInputSchema = z3.object({ project: projectNameSchema, revision: z3.number().int().positive() });
-var measurementReportInputSchema = measurementPlanVersionInputSchema.extend({
-  runId: runIdSchema.optional().describe("Exact eligible full measurement run to reconstruct. Omit for the latest run in the revision.")
+var queryGenerateInputSchema = z3.object({
+  project: projectNameSchema,
+  request: queryGenerateRequestSchema
 });
-var measurementPlanPreviewInputSchema = z3.object({ project: projectNameSchema, plan: measurementPlanAuthoringSchema });
-var measurementPlanPublishInputSchema = measurementPlanPublishRequestSchema.extend({ project: projectNameSchema });
-var measurementPlanRetireInputSchema = z3.object({ project: projectNameSchema, stableKey: z3.string().min(1) });
-var measurementDiscoveryInputSchema = measurementDiscoveryRequestSchema.extend({ project: projectNameSchema });
-var idempotencyKeyInputSchema = z3.string().trim().min(1).describe("A fresh request key. Reuse it only when retrying the identical request.");
-var measurementOverviewInputSchema = z3.object({
+var gbpListLocationsInputSchema = z3.object({
   project: projectNameSchema,
-  scope: measurementOverviewQuerySchema.shape.scope.describe("Read all Properties, one reporting group, or one Property."),
-  groupKey: measurementOverviewQuerySchema.shape.groupKey.describe("Group stable key. Required only for group scope."),
-  targetKey: measurementOverviewQuerySchema.shape.targetKey.describe("Property stable key. Required only for property scope."),
-  queryClass: measurementOverviewQuerySchema.shape.queryClass,
-  provider: measurementOverviewQuerySchema.shape.provider,
-  location: measurementOverviewQuerySchema.shape.location,
-  from: measurementOverviewQuerySchema.shape.from,
-  to: measurementOverviewQuerySchema.shape.to,
-  runId: measurementOverviewQuerySchema.shape.runId,
-  search: measurementOverviewQuerySchema.shape.search,
-  sort: measurementOverviewQuerySchema.shape.sort,
-  cursor: measurementOverviewQuerySchema.shape.cursor,
-  limit: measurementOverviewQuerySchema.shape.limit
-}).strict().superRefine((input, context) => {
-  if (input.scope === "group" && !input.groupKey) {
-    context.addIssue({ code: "custom", path: ["groupKey"], message: "Group scope requires groupKey." });
-  }
-  if (input.scope === "property" && !input.targetKey) {
-    context.addIssue({ code: "custom", path: ["targetKey"], message: "Property scope requires targetKey." });
-  }
-  if (input.scope !== "group" && input.groupKey) {
-    context.addIssue({ code: "custom", path: ["groupKey"], message: `${input.scope} scope does not accept groupKey.` });
-  }
-  if (input.scope !== "property" && input.targetKey) {
-    context.addIssue({ code: "custom", path: ["targetKey"], message: `${input.scope} scope does not accept targetKey.` });
-  }
+  selected: z3.boolean().optional()
 });
-var measurementPropertyEvidenceInputSchema = measurementPropertyEvidenceQuerySchema.extend({
+var gbpDiscoverInputSchema = z3.object({
   project: projectNameSchema,
-  targetKey: measurementPropertyEvidenceQuerySchema.shape.targetKey.describe("Property stable key. Required \u2014 this read is scoped to exactly one Property."),
-  shape: measurementPropertyEvidenceQuerySchema.shape.shape.describe(
-    "What one row is. Omit for sources (one row per cited URL). answers gives one row per measured answer with its cited URLs nested, including the answers that cited nothing."
-  )
-}).strict();
-var measurementPortfolioSummaryInputSchema = measurementPortfolioSummaryQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementPropertyQuestionsInputSchema = measurementPropertyQuestionsQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementQuestionResultInputSchema = measurementQuestionResultQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementPropertyCompetitorsInputSchema = measurementPropertyCompetitorsQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementChangesInputSchema = measurementChangesQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementDataQualityInputSchema = measurementDataQualityQuerySchema.extend({
-  project: projectNameSchema
-}).strict();
-var measurementDraftCollectionInputSchema = measurementDraftCollectionQuerySchema.extend({ project: projectNameSchema });
-var measurementQuerySetInputSchema = z3.object({
+  selectAllNew: z3.boolean().optional().default(true),
+  accountName: z3.string().regex(/^accounts\//, 'accountName must be a Google resource name like "accounts/12345"').optional(),
+  switchAccount: z3.boolean().optional().default(false)
+});
+var gbpLocationSelectionInputSchema = z3.object({
   project: projectNameSchema,
-  setId: z3.string().trim().min(1)
-}).strict();
-var measurementQuerySetUpsertInputSchema = measurementQuerySetInputSchema.extend({
-  request: measurementQuerySetUpsertRequestSchema
-}).strict();
-var measurementQueryTemplateInputSchema = z3.object({
+  locationName: z3.string().min(1).regex(/^locations\//, 'locationName must be a Google resource name like "locations/12345"'),
+  selected: z3.boolean()
+});
+var gbpSyncInputSchema = z3.object({
   project: projectNameSchema,
-  templateId: z3.string().trim().min(1)
-}).strict();
-var measurementQueryTemplateUpsertInputSchema = measurementQueryTemplateInputSchema.extend({
-  request: measurementQueryTemplateUpsertRequestSchema
-}).strict();
-var measurementQueryTemplateApplyInputSchema = measurementQueryTemplateInputSchema.extend({
-  request: measurementQueryTemplateApplyRequestSchema,
-  idempotencyKey: idempotencyKeyInputSchema
-}).strict();
-var measurementPlanDeactivateInputSchema = measurementPlanDeactivateRequestSchema.extend({
+  locationNames: z3.array(z3.string()).optional(),
+  daysOfMetrics: z3.number().int().positive().max(540).optional(),
+  monthsOfKeywords: z3.number().int().positive().max(18).optional()
+});
+var gbpMetricsInputSchema = z3.object({
   project: projectNameSchema,
-  idempotencyKey: idempotencyKeyInputSchema
-}).strict();
-var measurementDraftActionInputSchema = z3.object({
+  locationName: z3.string().optional(),
+  metric: z3.string().optional()
+});
+var gbpLocationScopedInputSchema = z3.object({
   project: projectNameSchema,
-  operation: measurementDraftOperationSchema.describe("Typed draft operation. Select exactly one action branch.")
-}).strict();
-var measurementDraftActionOpenApiOperations = [
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/create",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/import-sitemap",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-sitemap-selection",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-target",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/rename-target",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/merge-targets",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/exclude-target",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/rebind-target",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/preview-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/replace-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-paired-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-assignment",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/clear-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/classify-assignments",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-group",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-group",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/preview-group-membership",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/apply-group-membership",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/upsert-competitor",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/remove-competitor",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/compile-preview",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/diff-preview",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/publish",
-  "POST /api/v1/projects/{name}/measurement-plan/draft/actions/discard"
-];
-var runsListInputSchema = z3.object({
+  locationName: z3.string().optional()
+});
+var gbpAccountsInputSchema = z3.object({
+  project: projectNameSchema
+});
+var adsInsightsInputSchema = z3.object({
   project: projectNameSchema,
-  limit: z3.number().int().positive().max(500).optional()
+  level: z3.enum(["campaign", "ad_group"]).optional(),
+  entityId: z3.string().optional(),
+  from: z3.string().optional(),
+  to: z3.string().optional()
 });
-var runGetInputSchema = z3.object({
-  runId: runIdSchema
+var adsGeoSearchInputSchema = adsGeoSearchQuerySchema.extend({
+  project: projectNameSchema
 });
-var timelineInputSchema = z3.object({
+var adsLiveDeliveryInputSchema = z3.object({
   project: projectNameSchema,
-  location: z3.string().optional().describe("Location label. Use an empty string for locationless results."),
-  limit: z3.number().int().positive().max(100).optional().describe("Restrict history to the most recent N project runs.")
+  campaignId: z3.string().min(1).max(200).optional(),
+  lookbackDays: z3.number().int().min(1).max(30).optional()
 });
-var historyFilterShape = {
-  limit: z3.number().int().positive().max(500).optional(),
-  offset: z3.number().int().nonnegative().optional(),
-  since: z3.string().optional().describe("ISO 8601 lower bound."),
-  action: z3.string().optional().describe("Exact audit action filter."),
-  actor: z3.string().optional().describe("Exact actor filter."),
-  entityType: z3.string().optional().describe("Exact entity type filter.")
-};
-var projectHistoryInputSchema = z3.object({ project: projectNameSchema, ...historyFilterShape });
-var globalHistoryInputSchema = z3.object(historyFilterShape);
-var snapshotsListInputSchema = z3.object({
+var adsOperationInputSchema = z3.object({
   project: projectNameSchema,
-  limit: z3.number().int().positive().max(500).optional(),
-  offset: z3.number().int().nonnegative().optional(),
-  location: z3.string().optional().describe("Location label. Use an empty string for locationless results.")
+  operationKey: z3.string().min(8).max(128)
 });
-var snapshotsDiffInputSchema = z3.object({
+var adsOperationResumeActivationInputSchema = adsOperationInputSchema.strict();
+var adsUnresolvedOperationsInputSchema = adsUnresolvedOperationListQuerySchema.extend({
+  project: projectNameSchema
+});
+var adsOperationReconcileInputSchema = adsOperationReconcileRequestSchema.extend({
   project: projectNameSchema,
-  run1: runIdSchema,
-  run2: runIdSchema
+  operationKey: z3.string().min(8).max(128)
 });
-var insightsListInputSchema = z3.object({
+var adsImageUploadInputSchema = z3.object({
   project: projectNameSchema,
-  dismissed: z3.boolean().optional(),
-  runId: runIdSchema.optional()
+  request: adsImageUploadRequestSchema
 });
-var insightInputSchema = z3.object({
+var adsCampaignCreateInputSchema = z3.object({
   project: projectNameSchema,
-  insightId: insightIdSchema
+  request: adsCampaignCreateRequestSchema
 });
-var healthHistoryInputSchema = z3.object({
+var adsCampaignUpdateInputSchema = z3.object({
   project: projectNameSchema,
-  limit: z3.number().int().positive().max(100).optional()
+  campaignId: z3.string().min(1),
+  request: adsCampaignUpdateRequestSchema
 });
-var gscPerformanceInputSchema = z3.object({
+var adsCampaignActivateTreeInputSchema = z3.object({
   project: projectNameSchema,
-  startDate: z3.string().optional(),
-  endDate: z3.string().optional(),
-  query: z3.string().optional(),
-  page: z3.string().optional(),
-  limit: z3.number().int().positive().max(5e3).optional(),
-  offset: z3.number().int().nonnegative().optional(),
-  orderBy: gscPerformanceOrderBySchema.optional(),
-  window: analyticsWindowSchema.optional()
+  campaignId: z3.string().min(1),
+  request: adsActivateTreeRequestSchema
 });
-var gscPerformanceDailyInputSchema = z3.object({
+var adsCampaignPauseInputSchema = z3.object({
   project: projectNameSchema,
-  startDate: z3.string().optional(),
-  endDate: z3.string().optional(),
-  window: analyticsWindowSchema.optional()
+  campaignId: z3.string().min(1),
+  request: adsPauseRequestSchema
 });
-var gscTopPagesInputSchema = z3.object({
+var adsAdGroupCreateInputSchema = z3.object({
   project: projectNameSchema,
-  startDate: z3.string().optional(),
-  endDate: z3.string().optional(),
-  limit: z3.number().int().positive().max(500).optional(),
-  window: analyticsWindowSchema.optional()
+  request: adsAdGroupCreateRequestSchema
 });
-var gscInspectionsInputSchema = z3.object({
+var adsAdGroupUpdateInputSchema = z3.object({
   project: projectNameSchema,
-  url: z3.string().optional(),
-  limit: z3.number().int().positive().max(500).optional()
+  adGroupId: z3.string().min(1),
+  request: adsAdGroupUpdateRequestSchema
 });
-var gscCoverageHistoryInputSchema = z3.object({
+var adsAdGroupPauseInputSchema = z3.object({
   project: projectNameSchema,
-  limit: z3.number().int().positive().max(500).optional()
+  adGroupId: z3.string().min(1),
+  request: adsPauseRequestSchema
 });
-var gscSitemapsInputSchema = z3.object({
+var adsAdCreateInputSchema = z3.object({
   project: projectNameSchema,
-  sitemapIndex: z3.string().url().optional()
-});
-var gscSitemapsSubmitInputSchema = z3.union([
-  z3.object({
-    project: projectNameSchema,
-    sitemapUrls: z3.array(z3.string().url()).min(1).max(50)
-  }).strict(),
-  z3.object({
-    project: projectNameSchema,
-    mode: z3.enum(["indexes", "all-files"])
-  }).strict()
-]);
-async function submitGscSitemapsFromMcp(client2, input) {
-  let sitemapUrls;
-  if ("sitemapUrls" in input) {
-    sitemapUrls = uniqueStrings(input.sitemapUrls);
-  } else {
-    const topLevel = await client2.gscSitemaps(input.project);
-    if (input.mode === "indexes") {
-      sitemapUrls = uniqueStrings(
-        topLevel.preferredSubmissionUrls.length > 0 ? topLevel.preferredSubmissionUrls : topLevel.sitemaps.map((sitemap) => sitemap.path)
-      );
-    } else {
-      const indexes = topLevel.sitemaps.filter((sitemap) => sitemap.isSitemapsIndex).map((sitemap) => sitemap.path);
-      const expandedIndexUrls = [];
-      for (let offset = 0; offset < indexes.length; offset += 4) {
-        const children = await Promise.all(
-          indexes.slice(offset, offset + 4).map(
-            (sitemapIndex) => client2.gscSitemaps(input.project, { sitemapIndex })
-          )
-        );
-        children.forEach((result, index) => {
-          const sitemapIndex = indexes[offset + index];
-          expandedIndexUrls.push(...result.sitemaps.length > 0 ? result.sitemaps.map((sitemap) => sitemap.path) : [sitemapIndex]);
-        });
-      }
-      sitemapUrls = uniqueStrings([
-        ...topLevel.sitemaps.filter((sitemap) => !sitemap.isSitemapsIndex).map((sitemap) => sitemap.path),
-        ...expandedIndexUrls
-      ]);
-    }
-  }
-  if (sitemapUrls.length === 0) {
-    throw new Error("No GSC sitemaps found. Submit an explicit sitemap URL first.");
-  }
-  const aggregate = {
-    summary: { total: 0, accepted: 0, failed: 0 },
-    results: []
-  };
-  for (let offset = 0; offset < sitemapUrls.length; offset += 50) {
-    const batchSitemapUrls = sitemapUrls.slice(offset, offset + 50);
-    try {
-      const result = await client2.gscSubmitSitemaps(input.project, {
-        sitemapUrls: batchSitemapUrls
-      });
-      aggregate.summary.total += result.summary.total;
-      aggregate.summary.accepted += result.summary.accepted;
-      aggregate.summary.failed += result.summary.failed;
-      aggregate.results.push(...result.results);
-    } catch (cause) {
-      if (offset === 0) throw cause;
-      const attempted = aggregate.summary.total + batchSitemapUrls.length;
-      const remaining = sitemapUrls.length - attempted;
-      throw new CliError({
-        code: "GOOGLE_SITEMAP_SUBMISSION_PARTIAL",
-        message: `Sitemap submission stopped after ${aggregate.summary.total} completed results; ${batchSitemapUrls.length} are unconfirmed and ${remaining} were not attempted.`,
-        exitCode: cause instanceof CliError && cause.exitCode === 1 ? 1 : EXIT_SYSTEM_ERROR,
-        details: {
-          project: input.project,
-          accepted: aggregate.summary.accepted,
-          failed: aggregate.summary.failed,
-          completed: aggregate.summary.total,
-          attempted,
-          unconfirmed: batchSitemapUrls.length,
-          remaining,
-          unconfirmedBatch: { index: Math.floor(offset / 50) + 1, sitemapUrls: batchSitemapUrls },
-          partialResult: aggregate,
-          cause: cause instanceof CliError ? { code: cause.code, message: cause.message, details: cause.details } : { message: describeError(cause) }
-        }
-      });
-    }
-  }
-  return aggregate;
-}
-var gaWindowInputSchema = z3.object({
-  project: projectNameSchema,
-  window: analyticsWindowSchema.optional(),
-  startDate: z3.string().optional(),
-  endDate: z3.string().optional()
-});
-var GA_RANGE_PARAMS = ["window", "startDate", "endDate"];
-var gaTrafficInputSchema = gaWindowInputSchema.extend({
-  limit: z3.number().int().positive().max(500).optional()
-});
-var gaMeasurementAnalysisInputSchema = z3.object({
-  project: projectNameSchema,
-  window: gaMeasurementAnalysisWindowSchema.optional(),
-  hostScope: gaMeasurementHostScopeSchema.optional(),
-  pathPrefix: z3.string().min(1).optional(),
-  limit: z3.number().int().positive().max(100).optional()
-});
-var queriesInputSchema = z3.object({
-  project: projectNameSchema,
-  request: queryBatchRequestSchema
-});
-var queryGenerateInputSchema = z3.object({
-  project: projectNameSchema,
-  request: queryGenerateRequestSchema
-});
-var gbpListLocationsInputSchema = z3.object({
-  project: projectNameSchema,
-  selected: z3.boolean().optional()
-});
-var gbpDiscoverInputSchema = z3.object({
-  project: projectNameSchema,
-  selectAllNew: z3.boolean().optional().default(true),
-  accountName: z3.string().regex(/^accounts\//, 'accountName must be a Google resource name like "accounts/12345"').optional(),
-  switchAccount: z3.boolean().optional().default(false)
-});
-var gbpLocationSelectionInputSchema = z3.object({
-  project: projectNameSchema,
-  locationName: z3.string().min(1).regex(/^locations\//, 'locationName must be a Google resource name like "locations/12345"'),
-  selected: z3.boolean()
-});
-var gbpSyncInputSchema = z3.object({
-  project: projectNameSchema,
-  locationNames: z3.array(z3.string()).optional(),
-  daysOfMetrics: z3.number().int().positive().max(540).optional(),
-  monthsOfKeywords: z3.number().int().positive().max(18).optional()
-});
-var gbpMetricsInputSchema = z3.object({
-  project: projectNameSchema,
-  locationName: z3.string().optional(),
-  metric: z3.string().optional()
-});
-var gbpLocationScopedInputSchema = z3.object({
-  project: projectNameSchema,
-  locationName: z3.string().optional()
-});
-var gbpAccountsInputSchema = z3.object({
-  project: projectNameSchema
-});
-var adsInsightsInputSchema = z3.object({
-  project: projectNameSchema,
-  level: z3.enum(["campaign", "ad_group"]).optional(),
-  entityId: z3.string().optional(),
-  from: z3.string().optional(),
-  to: z3.string().optional()
-});
-var adsGeoSearchInputSchema = adsGeoSearchQuerySchema.extend({
-  project: projectNameSchema
-});
-var adsLiveDeliveryInputSchema = z3.object({
-  project: projectNameSchema,
-  campaignId: z3.string().min(1).max(200).optional(),
-  lookbackDays: z3.number().int().min(1).max(30).optional()
-});
-var adsOperationInputSchema = z3.object({
-  project: projectNameSchema,
-  operationKey: z3.string().min(8).max(128)
-});
-var adsOperationResumeActivationInputSchema = adsOperationInputSchema.strict();
-var adsUnresolvedOperationsInputSchema = adsUnresolvedOperationListQuerySchema.extend({
-  project: projectNameSchema
-});
-var adsOperationReconcileInputSchema = adsOperationReconcileRequestSchema.extend({
-  project: projectNameSchema,
-  operationKey: z3.string().min(8).max(128)
-});
-var adsImageUploadInputSchema = z3.object({
-  project: projectNameSchema,
-  request: adsImageUploadRequestSchema
-});
-var adsCampaignCreateInputSchema = z3.object({
-  project: projectNameSchema,
-  request: adsCampaignCreateRequestSchema
-});
-var adsCampaignUpdateInputSchema = z3.object({
-  project: projectNameSchema,
-  campaignId: z3.string().min(1),
-  request: adsCampaignUpdateRequestSchema
-});
-var adsCampaignActivateTreeInputSchema = z3.object({
-  project: projectNameSchema,
-  campaignId: z3.string().min(1),
-  request: adsActivateTreeRequestSchema
-});
-var adsCampaignPauseInputSchema = z3.object({
-  project: projectNameSchema,
-  campaignId: z3.string().min(1),
-  request: adsPauseRequestSchema
-});
-var adsAdGroupCreateInputSchema = z3.object({
-  project: projectNameSchema,
-  request: adsAdGroupCreateRequestSchema
-});
-var adsAdGroupUpdateInputSchema = z3.object({
-  project: projectNameSchema,
-  adGroupId: z3.string().min(1),
-  request: adsAdGroupUpdateRequestSchema
-});
-var adsAdGroupPauseInputSchema = z3.object({
-  project: projectNameSchema,
-  adGroupId: z3.string().min(1),
-  request: adsPauseRequestSchema
-});
-var adsAdCreateInputSchema = z3.object({
-  project: projectNameSchema,
-  request: adsAdCreateRequestSchema
+  request: adsAdCreateRequestSchema
 });
 var adsAdUpdateInputSchema = z3.object({
   project: projectNameSchema,
@@ -9359,6 +9027,10 @@ var googleMarketingSnapshotPageInputSchema = z3.object({
   limit: z3.number().int().min(1).max(GOOGLE_MARKETING_STORED_SNAPSHOT_PAGE_MAX).optional(),
   cursor: z3.string().trim().min(1).optional()
 }).strict();
+var googleAdsPerformanceInputSchema = z3.object({
+  project: projectNameSchema,
+  window: googleAdsMetricsWindowSchema.optional()
+}).strict();
 var googleMarketingSnapshotInputSchema = z3.object({
   project: projectNameSchema,
   snapshotId: z3.string().trim().min(1)
@@ -11772,6 +11444,31 @@ var canonryMcpTools = [
     openApiOperations: ["GET /api/v1/projects/{name}/google-ads/customers"],
     handler: (client2, input) => client2.listGoogleAdsCustomers(input.project)
   }),
+  defineTool({
+    name: "canonry_conversion_tracking_options",
+    title: "List selectable conversion actions and GTM tags",
+    description: "List the Google Ads conversion actions and Tag Manager tags a conversion contract can point at, read from the newest stored snapshots. Stored read: quota-free, never calls a provider, never spends the advertiser budget. An empty list means the provider has not synced, not that no options exist.",
+    access: "read",
+    tier: "setup",
+    inputSchema: projectInputSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/conversion-tracking/options"],
+    handler: (client2, input) => client2.getConversionTrackingOptions(input.project)
+  }),
+  defineTool({
+    name: "canonry_google_ads_performance",
+    title: "Read stored Google Ads performance",
+    description: "Read impressions, clicks, cost (integer micros), conversions, the densified daily series, per-campaign totals, and the prior-equal-period comparison from the newest stored campaign-metrics snapshot. Stored read: it is quota-free, never calls Google, and never spends the advertiser budget. The capture day is partial and is excluded, so every window ends on the newest closed day.",
+    access: "read",
+    tier: "google-ads",
+    inputSchema: googleAdsPerformanceInputSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/google-ads/performance"],
+    handler: (client2, input) => client2.getGoogleAdsPerformance(
+      input.project,
+      input.window ? { window: input.window } : {}
+    )
+  }),
   defineTool({
     name: "canonry_google_ads_snapshots",
     title: "List stored Google Ads evidence",
@@ -12229,6 +11926,756 @@ var CanonryMcpToolNames = Object.freeze(
   Object.fromEntries(canonryMcpTools.map((tool) => [tool.name, tool.name]))
 );
 
+// src/mcp/results.ts
+import { ZodError } from "zod";
+function jsonToolResult(value) {
+  const result = value === void 0 ? { ok: true } : value;
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(result, null, 2)
+      }
+    ]
+  };
+}
+function errorToolResult(error) {
+  return {
+    isError: true,
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(toCanonryErrorEnvelope(error), null, 2)
+      }
+    ]
+  };
+}
+async function withToolErrors(handler) {
+  try {
+    return jsonToolResult(await handler());
+  } catch (error) {
+    return errorToolResult(error);
+  }
+}
+function toCanonryErrorEnvelope(error) {
+  if (error instanceof ZodError) {
+    return {
+      error: {
+        code: "VALIDATION_ERROR",
+        message: zodErrorMessage(error),
+        details: { issues: error.issues.map(formatZodIssue) }
+      }
+    };
+  }
+  if (error instanceof CliError) {
+    return {
+      error: {
+        code: error.code,
+        message: error.message,
+        ...error.details ? { details: error.details } : {}
+      }
+    };
+  }
+  if (hasErrorEnvelope(error)) {
+    const { code, message, details } = error.error;
+    return {
+      error: {
+        code: typeof code === "string" ? code : "API_ERROR",
+        message: typeof message === "string" ? message : "Canonry API error",
+        ...details !== void 0 ? { details } : {}
+      }
+    };
+  }
+  if (error instanceof Error) {
+    return {
+      error: {
+        code: "MCP_TOOL_ERROR",
+        message: error.message
+      }
+    };
+  }
+  return {
+    error: {
+      code: "MCP_TOOL_ERROR",
+      message: "Unknown MCP tool error"
+    }
+  };
+}
+function hasErrorEnvelope(value) {
+  if (!value || typeof value !== "object" || !("error" in value)) return false;
+  const error = value.error;
+  return Boolean(error && typeof error === "object");
+}
+function formatZodIssue(issue) {
+  return { path: issue.path.map(String).join("."), message: issue.message };
+}
+function zodErrorMessage(error) {
+  const first = error.issues[0];
+  if (!first) return "Input validation failed";
+  const path3 = first.path.map(String).join(".");
+  return path3 ? `${path3}: ${first.message}` : first.message;
+}
+
+// src/mcp/toolkits.ts
+var CANONRY_MCP_TOOLKIT_NAMES = [
+  "monitoring",
+  "setup",
+  "gsc",
+  "ga",
+  "gbp",
+  "ads",
+  "google-ads",
+  "gtm",
+  "conversion-tracking",
+  "traffic",
+  "agent",
+  "discovery"
+];
+var CANONRY_MCP_TOOLKITS = [
+  {
+    name: "monitoring",
+    title: "Measurement, runs, insights, health",
+    description: "Inspect portfolio and Property measurement, question results, run history, intelligence insights, health timelines, and bounded Site Health reads (overview, page audit evidence, focused subgraphs, paths, and scan changes).",
+    whenToLoad: "Load when finding weak Properties, reviewing answers and competitors, checking data quality, tying a Site Health page score to concrete findings, investigating site architecture, comparing scans, or diagnosing regressions."
+  },
+  {
+    name: "setup",
+    title: "Project setup and measurement",
+    description: "Manage project configuration, Advanced Measurement drafts, query assets, competitors, and schedules.",
+    whenToLoad: "Load when onboarding a project, editing its measurement plan, or managing tracked queries, competitors, or schedules."
+  },
+  {
+    name: "gsc",
+    title: "Google Search Console",
+    description: "Read GSC performance, inspections, coverage, sitemaps, and deindexed URLs.",
+    whenToLoad: "Load when you need indexing, coverage, or sitemap data from Google Search Console."
+  },
+  {
+    name: "ga",
+    title: "Google Analytics 4",
+    description: "Read GA traffic, AI/social referral history, attribution trend, and session history.",
+    whenToLoad: "Load when you need traffic, referral, or attribution data from Google Analytics 4."
+  },
+  {
+    name: "gbp",
+    title: "Google Business Profile",
+    description: "Local AEO signals: discover GBP locations under a connected account and toggle which ones sync. Future phases will add reviews, keyword impressions, daily performance metrics, and hotel attributes.",
+    whenToLoad: "Load when the project tracks local search visibility or has connected Google Business Profile."
+  },
+  {
+    name: "ads",
+    title: "OpenAI ads (ChatGPT ads)",
+    description: "Live OpenAI ad-account review state, targetable geo IDs, conversion pixels/event settings, synced campaign structure, paid-performance rollups, and guarded lifecycle operations.",
+    whenToLoad: "Load when planning, creating, reviewing, or measuring ChatGPT ads, including geo and conversion-readiness checks before launch."
+  },
+  {
+    name: "google-ads",
+    title: "Google Ads conversion evidence",
+    description: "Read a connected Google Ads account, its conversion actions, effective campaign goals, and bounded stored snapshots. v1 only reads provider state; it never edits campaigns, conversion actions, or bidding goals.",
+    whenToLoad: "Load when selecting a Google Ads customer, reviewing conversion-action and effective-goal evidence, or starting a bounded read-only sync."
+  },
+  {
+    name: "gtm",
+    title: "Google Tag Manager conversion evidence",
+    description: "Read GTM accounts, containers, workspaces, and sanitized live/draft tag graphs used to verify a conversion contract. v1 never edits a workspace or publishes a container version.",
+    whenToLoad: "Load when selecting a GTM container, reviewing a live or draft conversion-tag graph, or starting a bounded read-only sync."
+  },
+  {
+    name: "conversion-tracking",
+    title: "Cross-provider conversion integrity",
+    description: "Read declared conversion contracts and assess them against stored Google Ads and GTM evidence without calling or mutating either provider.",
+    whenToLoad: "Load when listing or inspecting declared conversion contracts, or when checking whether stored Google Ads and GTM evidence is consistent with one contract."
+  },
+  {
+    name: "traffic",
+    title: "Server-side traffic ingestion",
+    description: "Connect Cloud Run traffic sources, trigger syncs, and read crawler / AI-referral hourly rollups straight from server logs (no GA dependency).",
+    whenToLoad: "Load when you need server-log evidence of crawler hits or AI-referral sessions (e.g. confirming GPTBot or ChatGPT-User on a page), or when wiring up / syncing a Cloud Run traffic source."
+  },
+  {
+    name: "agent",
+    title: "Aero agent lifecycle and memory",
+    description: "Manage the built-in Aero agent: durable project-scoped memory (list/set/forget), clear the rolling transcript, and detach the external-agent webhook.",
+    whenToLoad: "Load when reading or writing project-scoped Aero notes, clearing a stuck conversation, or removing an external agent webhook."
+  },
+  {
+    name: "discovery",
+    title: "Query discovery and research",
+    description: "Two linked workflows: find queries expands an ICP into a promotable tracked-query basket; research queries runs saved free-form experiments against one API model. Research never adds queries to tracking.",
+    whenToLoad: "Load when the operator wants to find ICP-led candidates for a tracked basket, or research specific free-form queries, model answers, sources, and location effects without changing tracking."
+  }
+];
+function isCanonryMcpToolkitName(value) {
+  return CANONRY_MCP_TOOLKIT_NAMES.includes(value);
+}
+
+// src/mcp/dynamic-catalog.ts
+var DynamicToolCatalog = class {
+  entries;
+  loaded = /* @__PURE__ */ new Set();
+  eager;
+  scope;
+  server;
+  constructor(server, entries, scope, options = {}) {
+    this.server = server;
+    this.entries = entries;
+    this.scope = scope;
+    this.eager = Boolean(options.eager);
+    if (this.eager) {
+      for (const toolkit of CANONRY_MCP_TOOLKITS) {
+        if (this.toolsForToolkit(toolkit.name).length > 0) {
+          this.loaded.add(toolkit.name);
+        }
+      }
+    }
+  }
+  applyInitialEnablement() {
+    if (this.eager) return;
+    this.batchListChanged(() => {
+      for (const entry of this.entries) {
+        if (entry.tool.tier !== "core") entry.registered.disable();
+      }
+    });
+  }
+  loadToolkit(rawName) {
+    if (!isCanonryMcpToolkitName(rawName)) {
+      const valid = CANONRY_MCP_TOOLKITS.map((t) => t.name).join(", ");
+      throw new Error(`Unknown toolkit "${rawName}". Available: ${valid}.`);
+    }
+    const name = rawName;
+    const matches = this.entries.filter((entry) => entry.tool.tier === name);
+    if (matches.length === 0) {
+      return { status: "empty", name, tools: [] };
+    }
+    if (this.loaded.has(name)) {
+      return { status: "already-loaded", name, tools: matches.map((entry) => entry.tool.name) };
+    }
+    this.batchListChanged(() => {
+      for (const entry of matches) {
+        entry.registered.enable();
+      }
+    });
+    this.loaded.add(name);
+    return { status: "loaded", name, tools: matches.map((entry) => entry.tool.name) };
+  }
+  helpResult() {
+    return {
+      scope: this.scope,
+      eager: this.eager,
+      loadedToolkits: [...this.loaded].sort(),
+      coreTools: this.entries.filter((entry) => entry.tool.tier === "core").map((entry) => entry.tool.name),
+      toolkits: CANONRY_MCP_TOOLKITS.map((toolkit) => this.toolkitEntry(toolkit)).filter((entry) => entry.toolCount > 0),
+      usage: "Call canonry_load_toolkit with one of the toolkit names listed in `toolkits[].name` to register its tools for the rest of this session. Wait for its response before calling any newly enabled tool."
+    };
+  }
+  toolkitEntry(toolkit) {
+    const tools = this.toolsForToolkit(toolkit.name);
+    return {
+      name: toolkit.name,
+      title: toolkit.title,
+      description: toolkit.description,
+      whenToLoad: toolkit.whenToLoad,
+      toolCount: tools.length,
+      tools,
+      loaded: this.loaded.has(toolkit.name)
+    };
+  }
+  toolsForToolkit(name) {
+    return this.entries.filter((entry) => entry.tool.tier === name).map((entry) => entry.tool.name);
+  }
+  // RegisteredTool.enable/disable each call sendToolListChanged on the McpServer
+  // we registered with. Loading an 11-tool toolkit emits 11 notifications under
+  // that contract, which a spec-compliant client will treat as 11 catalog
+  // refetches. Coalesce them into one notification per batch by intercepting
+  // the SDK's sender for the duration of the batch.
+  batchListChanged(fn) {
+    const host = this.server;
+    const original = host.sendToolListChanged.bind(host);
+    let suppressed = false;
+    host.sendToolListChanged = () => {
+      suppressed = true;
+    };
+    try {
+      fn();
+    } finally {
+      host.sendToolListChanged = original;
+    }
+    if (suppressed) original();
+  }
+};
+
+// src/mcp/server.ts
+function createCanonryMcpServer(options = {}) {
+  return createCanonryMcpServerWithCatalog(options).server;
+}
+var SERVER_INSTRUCTIONS = `Canonry tracks how AI answer engines mention a brand and cite a domain.
+
+Load the "canonry" skill before operator work (project setup, integrations, traffic sources, sweeps, diagnosis). It carries the procedures and the failure modes; this text is only a pointer. Use "aero" for analyst work: regression diagnosis, reporting.
+
+Two signals, never interchangeable:
+- mentioned = the brand appears in the answer TEXT the model wrote.
+- cited = the domain appears in the SOURCE links behind the answer.
+A model can do either, both or neither. Never compute one from the other, and never report a number for one under the other's name.
+
+Sweeps and probes spend provider quota and write rows. Get explicit approval before any run, apply, or other mutation.
+
+Most reads are free. Five ads reads are NOT: canonry_ads_account, canonry_ads_geo_search, canonry_ads_live_delivery, canonry_ads_conversion_pixels and canonry_ads_conversion_event_settings call the provider live and spend against the advertiser account. They are marked read, so nothing in the tool list warns you. Get approval for those exactly as for a mutation.
+
+Google Marketing also calls providers live. Get approval before canonry_google_ads_customers, canonry_gtm_accounts, canonry_gtm_containers, canonry_gtm_workspaces, canonry_google_ads_sync or canonry_gtm_sync.
+
+A null answerMentioned means NOT CHECKED, not "not mentioned". Never coerce it to false.
+
+If no sweep has run, say so. Never state a mention or citation figure that no run produced.`;
+function createCanonryMcpServerWithCatalog(options = {}) {
+  const clientFactory = options.clientFactory ?? createApiClient;
+  const client2 = clientFactory();
+  const scope = options.scope ?? "all";
+  const server = new McpServer({
+    name: "canonry",
+    version: PACKAGE_VERSION
+  }, {
+    instructions: SERVER_INSTRUCTIONS
+  });
+  server.validateToolInput = async (_tool, args) => args;
+  const entries = [];
+  for (const registryTool of getCanonryMcpTools(scope, options.tiers)) {
+    const tool = registryTool;
+    const handler = tool.handler;
+    const registered = server.registerTool(
+      tool.name,
+      {
+        title: tool.title,
+        description: tool.description,
+        inputSchema: tool.inputSchema,
+        annotations: tool.annotations
+      },
+      async (input) => withToolErrors(async () => {
+        const parsed = tool.inputSchema.parse(input ?? {});
+        return handler(client2, parsed);
+      })
+    );
+    entries.push({ tool, registered });
+  }
+  const eager = options.eager === true || options.tiers !== void 0;
+  const catalog = new DynamicToolCatalog(server, entries, scope, { eager });
+  catalog.applyInitialEnablement();
+  registerMetaTools(server, catalog, { includeToolkitLoader: options.tiers === void 0 });
+  return { server, catalog };
+}
+var loadToolkitInputSchema = z4.object({
+  name: z4.enum(CANONRY_MCP_TOOLKIT_NAMES).describe("Toolkit name. List options with canonry_help.")
+});
+function registerMetaTools(server, catalog, opts) {
+  server.registerTool(
+    "canonry_help",
+    {
+      title: "List Canonry MCP toolkits",
+      description: "List available toolkits and which are loaded. Call before canonry_load_toolkit if unsure which to load.",
+      inputSchema: {},
+      annotations: { readOnlyHint: true }
+    },
+    async () => withToolErrors(async () => catalog.helpResult())
+  );
+  if (!opts.includeToolkitLoader) return;
+  server.registerTool(
+    "canonry_load_toolkit",
+    {
+      title: "Load a Canonry MCP toolkit",
+      description: `Register a toolkit's tools for this session and emit one notifications/tools/list_changed. Idempotent. Loaded toolkits remain loaded for the rest of the session. Wait for this call to return before calling any newly enabled tool \u2014 pipelining the call with a tools/call on the same connection can race the registration and fail with "MCP error -32602: Tool ... disabled".`,
+      inputSchema: loadToolkitInputSchema.shape,
+      annotations: { readOnlyHint: false, idempotentHint: true, destructiveHint: false }
+    },
+    async (input) => withToolErrors(async () => {
+      const parsed = loadToolkitInputSchema.parse(input ?? {});
+      return catalog.loadToolkit(parsed.name);
+    })
+  );
+}
+function getCanonryMcpTools(scope = "all", tiers) {
+  const byScope = scope === "read-only" ? canonryMcpTools.filter((tool) => tool.access === "read") : [...canonryMcpTools];
+  if (!tiers) return byScope;
+  const wanted = new Set(tiers);
+  return byScope.filter((tool) => wanted.has(tool.tier));
+}
+
+// src/commands/skills.ts
+import crypto2 from "crypto";
+import fs2 from "fs";
+import os2 from "os";
+import path2 from "path";
+import { fileURLToPath } from "url";
+var BUNDLED_SKILL_NAMES = ["canonry", "aero"];
+function resolveBundledSkillsRoot(pkgDir) {
+  const here = pkgDir ?? path2.dirname(fileURLToPath(import.meta.url));
+  const candidates = [
+    path2.join(here, "../assets/agent-workspace/skills"),
+    path2.join(here, "../../assets/agent-workspace/skills"),
+    path2.join(here, "../../../../skills")
+  ];
+  for (const candidate of candidates) {
+    if (BUNDLED_SKILL_NAMES.every((name) => fs2.existsSync(path2.join(candidate, name, "SKILL.md")))) {
+      return candidate;
+    }
+  }
+  throw new CliError({
+    code: "INTERNAL_ERROR",
+    message: `Bundled skills not found. Searched:
+  ${candidates.join("\n  ")}`,
+    exitCode: 2
+  });
+}
+function parseDescription(content) {
+  const fmMatch = /^---\n([\s\S]*?)\n---/.exec(content);
+  if (!fmMatch) return "";
+  const descMatch = /^description:\s*(\S.*)$/m.exec(fmMatch[1]);
+  if (!descMatch) return "";
+  return descMatch[1].replace(/^["']|["']$/g, "").trim();
+}
+function getBundledSkills(pkgDir) {
+  const root = resolveBundledSkillsRoot(pkgDir);
+  return BUNDLED_SKILL_NAMES.map((name) => {
+    const skillDir = path2.join(root, name);
+    const skillFile = path2.join(skillDir, "SKILL.md");
+    const content = fs2.readFileSync(skillFile, "utf-8");
+    return { name, description: parseDescription(content), bundledPath: skillDir };
+  });
+}
+function walkRelative(dir, prefix = "") {
+  const out = [];
+  for (const entry of fs2.readdirSync(dir, { withFileTypes: true })) {
+    const rel = prefix ? path2.join(prefix, entry.name) : entry.name;
+    const full = path2.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      out.push(...walkRelative(full, rel));
+    } else if (entry.isFile()) {
+      out.push(rel);
+    }
+  }
+  return out.sort();
+}
+function sha256File(filePath) {
+  return crypto2.createHash("sha256").update(fs2.readFileSync(filePath)).digest("hex");
+}
+function readSkillManifest(skillDir) {
+  try {
+    return coerceSkillManifest(JSON.parse(fs2.readFileSync(path2.join(skillDir, SKILL_MANIFEST_FILENAME), "utf-8")));
+  } catch {
+    return null;
+  }
+}
+function writeSkillManifest(skillDir, manifest) {
+  fs2.writeFileSync(path2.join(skillDir, SKILL_MANIFEST_FILENAME), `${JSON.stringify(manifest, null, 2)}
+`, "utf-8");
+}
+function reconcileSkillTree(srcDir, destDir, manifest, force) {
+  const result = { added: [], updated: [], unchanged: [], conflicts: [], bundledHashes: /* @__PURE__ */ new Map() };
+  for (const rel of walkRelative(srcDir)) {
+    const srcPath = path2.join(srcDir, rel);
+    const destPath = path2.join(destDir, rel);
+    const bundledHash = sha256File(srcPath);
+    result.bundledHashes.set(rel, bundledHash);
+    const installedHash = fs2.existsSync(destPath) ? sha256File(destPath) : void 0;
+    const state = classifySkillFile({ bundledHash, installedHash, manifestHash: manifest?.files[rel] });
+    switch (state) {
+      case "missing":
+        fs2.mkdirSync(path2.dirname(destPath), { recursive: true });
+        fs2.copyFileSync(srcPath, destPath);
+        result.added.push(rel);
+        break;
+      case "unchanged":
+        result.unchanged.push(rel);
+        break;
+      case "stale":
+        fs2.copyFileSync(srcPath, destPath);
+        result.updated.push(rel);
+        break;
+      case "edited":
+        if (force) {
+          fs2.copyFileSync(srcPath, destPath);
+          result.updated.push(rel);
+        } else {
+          result.conflicts.push(rel);
+        }
+        break;
+    }
+  }
+  return result;
+}
+function buildManifest(skillName, recon, prior) {
+  const conflicts = new Set(recon.conflicts);
+  const files = {};
+  for (const [rel, bundledHash] of recon.bundledHashes) {
+    files[rel] = conflicts.has(rel) ? prior?.files[rel] ?? bundledHash : bundledHash;
+  }
+  return { skill: skillName, version: PACKAGE_VERSION, files };
+}
+function describeChanges(recon) {
+  const parts = [];
+  if (recon.added.length > 0) parts.push(`${recon.added.length} added`);
+  if (recon.updated.length > 0) parts.push(`${recon.updated.length} refreshed`);
+  return parts.length > 0 ? parts.join(", ") : "no changes";
+}
+function buildClaudeMessage(name, status, recon) {
+  const rel = `.claude/skills/${name}`;
+  let message = status === "installed" ? `Installed ${rel}` : status === "updated" ? `Updated ${rel} (${describeChanges(recon)})` : `Already installed: ${rel}`;
+  if (recon.conflicts.length > 0) {
+    message += ` \u2014 ${recon.conflicts.length} file(s) differ from the bundle (local edits kept; pass --force to overwrite)`;
+  }
+  return message;
+}
+function installClaudeSkill(skill, targetDir, force) {
+  const targetPath = path2.join(targetDir, ".claude", "skills", skill.name);
+  const existedBefore = fs2.existsSync(path2.join(targetPath, "SKILL.md"));
+  const priorManifest = readSkillManifest(targetPath);
+  fs2.mkdirSync(targetPath, { recursive: true });
+  const recon = reconcileSkillTree(skill.bundledPath, targetPath, priorManifest, force);
+  writeSkillManifest(targetPath, buildManifest(skill.name, recon, priorManifest));
+  const changed = recon.added.length + recon.updated.length;
+  const status = !existedBefore ? "installed" : changed > 0 ? "updated" : "already-installed";
+  return {
+    skill: skill.name,
+    client: CodingAgents.claude,
+    targetPath,
+    status,
+    message: buildClaudeMessage(skill.name, status, recon),
+    added: recon.added,
+    updated: recon.updated,
+    unchanged: recon.unchanged,
+    conflicts: recon.conflicts
+  };
+}
+function installCodexSymlink(skill, targetDir, force) {
+  const codexPath = path2.join(targetDir, ".codex", "skills", skill.name);
+  const claudePath = path2.join(targetDir, ".claude", "skills", skill.name);
+  const linkTarget = path2.relative(path2.dirname(codexPath), claudePath);
+  fs2.mkdirSync(path2.dirname(codexPath), { recursive: true });
+  let stat;
+  try {
+    stat = fs2.lstatSync(codexPath);
+  } catch {
+    stat = void 0;
+  }
+  if (stat?.isSymbolicLink()) {
+    const existing = fs2.readlinkSync(codexPath);
+    if (existing === linkTarget) {
+      return {
+        skill: skill.name,
+        client: CodingAgents.codex,
+        targetPath: codexPath,
+        status: "already-linked",
+        message: `Already linked: .codex/skills/${skill.name}`
+      };
+    }
+    if (!force) {
+      throw new CliError({
+        code: "VALIDATION_ERROR",
+        message: `.codex/skills/${skill.name} is a symlink pointing elsewhere (${existing}). Pass --force to relink.`,
+        details: { skill: skill.name, targetPath: codexPath, existingTarget: existing },
+        exitCode: 1
+      });
+    }
+    fs2.unlinkSync(codexPath);
+    fs2.symlinkSync(linkTarget, codexPath);
+    return {
+      skill: skill.name,
+      client: CodingAgents.codex,
+      targetPath: codexPath,
+      status: "relinked",
+      message: `Relinked .codex/skills/${skill.name} \u2192 ${linkTarget}`
+    };
+  }
+  if (stat) {
+    if (!force) {
+      throw new CliError({
+        code: "VALIDATION_ERROR",
+        message: `.codex/skills/${skill.name} exists but is not a symlink. Pass --force to replace.`,
+        details: { skill: skill.name, targetPath: codexPath },
+        exitCode: 1
+      });
+    }
+    fs2.rmSync(codexPath, { recursive: true, force: true });
+  }
+  fs2.symlinkSync(linkTarget, codexPath);
+  return {
+    skill: skill.name,
+    client: CodingAgents.codex,
+    targetPath: codexPath,
+    status: stat ? "relinked" : "linked",
+    message: stat ? `Replaced and linked .codex/skills/${skill.name} \u2192 ${linkTarget}` : `Linked .codex/skills/${skill.name} \u2192 ${linkTarget}`
+  };
+}
+function buildSummaryMessage(results) {
+  const counts = {};
+  for (const r of results) counts[r.status] = (counts[r.status] ?? 0) + 1;
+  const parts = Object.entries(counts).map(([status, n]) => `${n} ${status}`);
+  let message = `Skills install summary: ${parts.join(", ")}.`;
+  const totalConflicts = results.reduce((sum, r) => sum + (r.conflicts?.length ?? 0), 0);
+  if (totalConflicts > 0) {
+    message += ` ${totalConflicts} file(s) differ from the bundle and were kept \u2014 pass --force to overwrite local edits.`;
+  }
+  return message;
+}
+function getBundledSkillSnapshots(pkgDir) {
+  return getBundledSkills(pkgDir).map((skill) => {
+    const files = {};
+    for (const rel of walkRelative(skill.bundledPath)) {
+      files[rel] = sha256File(path2.join(skill.bundledPath, rel));
+    }
+    return {
+      name: skill.name,
+      version: PACKAGE_VERSION,
+      files,
+      description: readBundledSkillDescription(skill.bundledPath)
+    };
+  });
+}
+function readBundledSkillDescription(skillDir) {
+  let raw;
+  try {
+    raw = fs2.readFileSync(path2.join(skillDir, "SKILL.md"), "utf-8");
+  } catch {
+    return void 0;
+  }
+  const parts = raw.split("---");
+  if (parts.length < 3) return void 0;
+  const lines = (parts[1] ?? "").split("\n");
+  const collected = [];
+  let inside = false;
+  for (const line of lines) {
+    const isTopLevelKey = /^[a-z][\w-]*:/i.test(line);
+    if (inside && isTopLevelKey) break;
+    if (isTopLevelKey && line.startsWith("description:")) {
+      inside = true;
+      collected.push(line.slice("description:".length).trim());
+      continue;
+    }
+    if (inside) collected.push(line.trim());
+  }
+  if (!inside) return void 0;
+  const value = collected.join(" ").trim();
+  const unquoted = value.length >= 2 && value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value;
+  return unquoted.length > 0 ? unquoted : void 0;
+}
+async function installSkills(opts = {}) {
+  const targetDir = opts.user ? os2.homedir() : path2.resolve(opts.dir ?? process.cwd());
+  const client2 = opts.client ?? SkillsClients.all;
+  const force = opts.force ?? false;
+  const allSkills = getBundledSkills();
+  const requestedNames = opts.skills && opts.skills.length > 0 ? opts.skills : allSkills.map((s) => s.name);
+  const knownNames = new Set(allSkills.map((s) => s.name));
+  const unknown = requestedNames.filter((n) => !knownNames.has(n));
+  if (unknown.length > 0) {
+    throw new CliError({
+      code: "VALIDATION_ERROR",
+      message: `Unknown skill(s): ${unknown.join(", ")}. Available: ${[...knownNames].join(", ")}`,
+      details: { unknownSkills: unknown, availableSkills: [...knownNames] },
+      exitCode: 1
+    });
+  }
+  const skillsToInstall = allSkills.filter((s) => requestedNames.includes(s.name));
+  fs2.mkdirSync(targetDir, { recursive: true });
+  const results = [];
+  for (const skill of skillsToInstall) {
+    results.push(installClaudeSkill(skill, targetDir, force));
+    if (client2 !== SkillsClients.claude) {
+      results.push(installCodexSymlink(skill, targetDir, force));
+    }
+  }
+  return {
+    targetDir,
+    results,
+    message: buildSummaryMessage(results)
+  };
+}
+async function listSkills(opts = {}) {
+  const skills = getBundledSkills();
+  if (isMachineFormat(opts.format)) {
+    console.log(JSON.stringify({
+      skills: skills.map((s) => ({
+        name: s.name,
+        description: s.description,
+        claudePath: `.claude/skills/${s.name}`,
+        codexPath: `.codex/skills/${s.name}`
+      }))
+    }, null, 2));
+    return;
+  }
+  console.log("Bundled canonry skills:\n");
+  for (const skill of skills) {
+    console.log(`  ${skill.name}`);
+    if (skill.description) console.log(`    ${skill.description}`);
+    console.log(`    Claude: .claude/skills/${skill.name}/`);
+    console.log(`    Codex:  .codex/skills/${skill.name} (symlink \u2192 ../../.claude/skills/${skill.name})`);
+    console.log();
+  }
+}
+function emitInstallSummary(summary, format) {
+  if (isMachineFormat(format)) {
+    console.log(JSON.stringify(summary, null, 2));
+    return;
+  }
+  for (const r of summary.results) console.log(r.message);
+  console.log(`
+Target: ${summary.targetDir}`);
+  console.log(summary.message);
+}
+function getMissingUserSkillsNudge(home, agentPlugin) {
+  if (!home) return null;
+  const skillsBase = path2.join(home, ".claude", "skills");
+  const installed = [];
+  const missing = [];
+  for (const name of BUNDLED_SKILL_NAMES) {
+    const skillFile = path2.join(skillsBase, name, "SKILL.md");
+    if (existsSafe(skillFile)) installed.push(name);
+    else missing.push(name);
+  }
+  if (agentPlugin && agentPlugin.configuredClients.length > 0) {
+    const unverifiedClients = agentPlugin.configuredClients.filter((client2) => !agentPlugin.verifiedClients.includes(client2));
+    const mismatchedClients = agentPlugin.verifiedClients.filter((client2) => agentPlugin.verifiedClientVersions?.[client2] !== PACKAGE_VERSION);
+    if (unverifiedClients.length === 0 && mismatchedClients.length === 0) return null;
+    const displayClients = (clients) => clients.map((client2) => client2 === "claude-code" ? "Claude Code" : "Codex").join(" + ");
+    const problems = [];
+    if (unverifiedClients.length > 0) {
+      problems.push(`The Canonry plugin is enabled for ${displayClients(unverifiedClients)}, but its cached manifest and skill assets could not be verified.`);
+    }
+    if (mismatchedClients.length > 0) {
+      const versions = mismatchedClients.map((client2) => `${client2 === "claude-code" ? "Claude Code" : "Codex"} v${agentPlugin.verifiedClientVersions?.[client2] ?? "unknown"}`).join(", ");
+      problems.push(`${versions} ${mismatchedClients.length === 1 ? "does" : "do"} not match the running Canonry v${PACKAGE_VERSION}.`);
+    }
+    return {
+      message: `Tip: ${problems.join(" ")} Update or reinstall \`canonry@canonry\` with the affected client plugin manager.`,
+      missing,
+      installed
+    };
+  }
+  if (missing.length === 0) return null;
+  const fix = missing.length === BUNDLED_SKILL_NAMES.length ? "canonry skills install --user" : `canonry skills install ${missing.join(" ")} --user`;
+  return {
+    message: `Tip: ${missing.join(" + ")} skill${missing.length === 1 ? "" : "s"} not installed in ~/.claude/skills/. Run \`${fix}\` so Claude/Codex sessions on this host auto-load the canonry reference docs.`,
+    missing,
+    installed
+  };
+}
+function existsSafe(p) {
+  try {
+    return fs2.existsSync(p);
+  } catch {
+    return false;
+  }
+}
+function parseSkillsClient(value) {
+  if (!value) return SkillsClients.all;
+  const parsed = skillsClientSchema.safeParse(value);
+  if (parsed.success) return parsed.data;
+  const allowed = skillsClientSchema.options;
+  throw new CliError({
+    code: "VALIDATION_ERROR",
+    message: `Invalid --client value "${value}". Must be one of: ${allowed.join(", ")}`,
+    details: { flag: "client", value, allowed },
+    exitCode: 1
+  });
+}
+
 export {
   getConfigDir,
   getConfigPath,
@@ -12258,5 +12705,7 @@ export {
   measurementDraftOperationSchema,
   runMeasurementDraftAction,
   canonryMcpTools,
-  CanonryMcpToolNames
+  CanonryMcpToolNames,
+  CANONRY_MCP_TOOLKIT_NAMES,
+  createCanonryMcpServer
 };