@canonry/canonry 4.179.1 → 4.179.2

package/assets/assets/{react-sigma_core.esm.min-CZrBq6qL.js → react-sigma_core.esm.min-tfJo9bgS.js}

@@ -1,4 +1,4 @@
-import{g as Bt,t as S,r as C}from"./vendor-tanstack-Dock0eH1.js";import{e as Ht,G as Wt}from"./SiteHealthSection-BXAMjVeD.js";import"./index-BR9BgNb3.js";import"./vendor-radix-4UOaVWza.js";import"./vendor-recharts-D8rt5lKn.js";import"./vendor-lucide-nYKv-BB7.js";import"./vendor-markdown-Bn7fRwrx.js";import"./vendor-yaml-GWJz5H2G.js";import"./ChartPrimitives-DG35TyhH.js";function Vt(r,n){if(typeof r!="object"||!r)return r;var i=r[Symbol.toPrimitive];if(i!==void 0){var e=i.call(r,n);if(typeof e!="object")return e;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}function ae(r){var n=Vt(r,"string");return typeof n=="symbol"?n:n+""}function A(r,n){if(!(r instanceof n))throw new TypeError("Cannot call a class as a function")}function He(r,n){for(var i=0;i<n.length;i++){var e=n[i];e.enumerable=e.enumerable||!1,e.configurable=!0,"value"in e&&(e.writable=!0),Object.defineProperty(r,ae(e.key),e)}}function L(r,n,i){return n&&He(r.prototype,n),i&&He(r,i),Object.defineProperty(r,"prototype",{writable:!1}),r}function Q(r){return Q=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(n){return n.__proto__||Object.getPrototypeOf(n)},Q(r)}function yt(){try{var r=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){}))}catch{}return(yt=function(){return!!r})()}function jt(r){if(r===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return r}function Zt(r,n){if(n&&(typeof n=="object"||typeof n=="function"))return n;if(n!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return jt(r)}function I(r,n,i){return n=Q(n),Zt(r,yt()?Reflect.construct(n,i||[],Q(r).constructor):n.apply(r,i))}function xe(r,n){return xe=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(i,e){return i.__proto__=e,i},xe(r,n)}function G(r,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");r.prototype=Object.create(n&&n.prototype,{constructor:{value:r,writable:!0,configurable:!0}}),Object.defineProperty(r,"prototype",{writable:!1}),n&&xe(r,n)}function qt(r){if(Array.isArray(r))return r}function Yt(r,n){var i=r==null?null:typeof Symbol<"u"&&r[Symbol.iterator]||r["@@iterator"];if(i!=null){var e,t,a,o,s=[],l=!0,h=!1;try{if(a=(i=i.call(r)).next,n===0){if(Object(i)!==i)return;l=!1}else for(;!(l=(e=a.call(i)).done)&&(s.push(e.value),s.length!==n);l=!0);}catch(u){h=!0,t=u}finally{try{if(!l&&i.return!=null&&(o=i.return(),Object(o)!==o))return}finally{if(h)throw t}}return s}}function Se(r,n){(n==null||n>r.length)&&(n=r.length);for(var i=0,e=Array(n);i<n;i++)e[i]=r[i];return e}function Tt(r,n){if(r){if(typeof r=="string")return Se(r,n);var i={}.toString.call(r).slice(8,-1);return i==="Object"&&r.constructor&&(i=r.constructor.name),i==="Map"||i==="Set"?Array.from(r):i==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?Se(r,n):void 0}}function Xt(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
+import{g as Bt,t as S,r as C}from"./vendor-tanstack-Dock0eH1.js";import{e as Ht,G as Wt}from"./SiteHealthSection-xlUYOOe2.js";import"./index-rJBOFic-.js";import"./vendor-radix-4UOaVWza.js";import"./vendor-recharts-D8rt5lKn.js";import"./vendor-lucide-nYKv-BB7.js";import"./vendor-markdown-Bn7fRwrx.js";import"./vendor-yaml-GWJz5H2G.js";import"./ChartPrimitives-DG35TyhH.js";function Vt(r,n){if(typeof r!="object"||!r)return r;var i=r[Symbol.toPrimitive];if(i!==void 0){var e=i.call(r,n);if(typeof e!="object")return e;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}function ae(r){var n=Vt(r,"string");return typeof n=="symbol"?n:n+""}function A(r,n){if(!(r instanceof n))throw new TypeError("Cannot call a class as a function")}function He(r,n){for(var i=0;i<n.length;i++){var e=n[i];e.enumerable=e.enumerable||!1,e.configurable=!0,"value"in e&&(e.writable=!0),Object.defineProperty(r,ae(e.key),e)}}function L(r,n,i){return n&&He(r.prototype,n),i&&He(r,i),Object.defineProperty(r,"prototype",{writable:!1}),r}function Q(r){return Q=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(n){return n.__proto__||Object.getPrototypeOf(n)},Q(r)}function yt(){try{var r=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){}))}catch{}return(yt=function(){return!!r})()}function jt(r){if(r===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return r}function Zt(r,n){if(n&&(typeof n=="object"||typeof n=="function"))return n;if(n!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return jt(r)}function I(r,n,i){return n=Q(n),Zt(r,yt()?Reflect.construct(n,i||[],Q(r).constructor):n.apply(r,i))}function xe(r,n){return xe=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(i,e){return i.__proto__=e,i},xe(r,n)}function G(r,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");r.prototype=Object.create(n&&n.prototype,{constructor:{value:r,writable:!0,configurable:!0}}),Object.defineProperty(r,"prototype",{writable:!1}),n&&xe(r,n)}function qt(r){if(Array.isArray(r))return r}function Yt(r,n){var i=r==null?null:typeof Symbol<"u"&&r[Symbol.iterator]||r["@@iterator"];if(i!=null){var e,t,a,o,s=[],l=!0,h=!1;try{if(a=(i=i.call(r)).next,n===0){if(Object(i)!==i)return;l=!1}else for(;!(l=(e=a.call(i)).done)&&(s.push(e.value),s.length!==n);l=!0);}catch(u){h=!0,t=u}finally{try{if(!l&&i.return!=null&&(o=i.return(),Object(o)!==o))return}finally{if(h)throw t}}return s}}function Se(r,n){(n==null||n>r.length)&&(n=r.length);for(var i=0,e=Array(n);i<n;i++)e[i]=r[i];return e}function Tt(r,n){if(r){if(typeof r=="string")return Se(r,n);var i={}.toString.call(r).slice(8,-1);return i==="Object"&&r.constructor&&(i=r.constructor.name),i==="Map"||i==="Set"?Array.from(r):i==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?Se(r,n):void 0}}function Xt(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
 In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function ee(r,n){return qt(r)||Yt(r,n)||Tt(r,n)||Xt()}var pe={black:"#000000",silver:"#C0C0C0",gray:"#808080",grey:"#808080",white:"#FFFFFF",maroon:"#800000",red:"#FF0000",purple:"#800080",fuchsia:"#FF00FF",green:"#008000",lime:"#00FF00",olive:"#808000",yellow:"#FFFF00",navy:"#000080",blue:"#0000FF",teal:"#008080",aqua:"#00FFFF",darkblue:"#00008B",mediumblue:"#0000CD",darkgreen:"#006400",darkcyan:"#008B8B",deepskyblue:"#00BFFF",darkturquoise:"#00CED1",mediumspringgreen:"#00FA9A",springgreen:"#00FF7F",cyan:"#00FFFF",midnightblue:"#191970",dodgerblue:"#1E90FF",lightseagreen:"#20B2AA",forestgreen:"#228B22",seagreen:"#2E8B57",darkslategray:"#2F4F4F",darkslategrey:"#2F4F4F",limegreen:"#32CD32",mediumseagreen:"#3CB371",turquoise:"#40E0D0",royalblue:"#4169E1",steelblue:"#4682B4",darkslateblue:"#483D8B",mediumturquoise:"#48D1CC",indigo:"#4B0082",darkolivegreen:"#556B2F",cadetblue:"#5F9EA0",cornflowerblue:"#6495ED",rebeccapurple:"#663399",mediumaquamarine:"#66CDAA",dimgray:"#696969",dimgrey:"#696969",slateblue:"#6A5ACD",olivedrab:"#6B8E23",slategray:"#708090",slategrey:"#708090",lightslategray:"#778899",lightslategrey:"#778899",mediumslateblue:"#7B68EE",lawngreen:"#7CFC00",chartreuse:"#7FFF00",aquamarine:"#7FFFD4",skyblue:"#87CEEB",lightskyblue:"#87CEFA",blueviolet:"#8A2BE2",darkred:"#8B0000",darkmagenta:"#8B008B",saddlebrown:"#8B4513",darkseagreen:"#8FBC8F",lightgreen:"#90EE90",mediumpurple:"#9370DB",darkviolet:"#9400D3",palegreen:"#98FB98",darkorchid:"#9932CC",yellowgreen:"#9ACD32",sienna:"#A0522D",brown:"#A52A2A",darkgray:"#A9A9A9",darkgrey:"#A9A9A9",lightblue:"#ADD8E6",greenyellow:"#ADFF2F",paleturquoise:"#AFEEEE",lightsteelblue:"#B0C4DE",powderblue:"#B0E0E6",firebrick:"#B22222",darkgoldenrod:"#B8860B",mediumorchid:"#BA55D3",rosybrown:"#BC8F8F",darkkhaki:"#BDB76B",mediumvioletred:"#C71585",indianred:"#CD5C5C",peru:"#CD853F",chocolate:"#D2691E",tan:"#D2B48C",lightgray:"#D3D3D3",lightgrey:"#D3D3D3",thistle:"#D8BFD8",orchid:"#DA70D6",goldenrod:"#DAA520",palevioletred:"#DB7093",crimson:"#DC143C",gainsboro:"#DCDCDC",plum:"#DDA0DD",burlywood:"#DEB887",lightcyan:"#E0FFFF",lavender:"#E6E6FA",darksalmon:"#E9967A",violet:"#EE82EE",palegoldenrod:"#EEE8AA",lightcoral:"#F08080",khaki:"#F0E68C",aliceblue:"#F0F8FF",honeydew:"#F0FFF0",azure:"#F0FFFF",sandybrown:"#F4A460",wheat:"#F5DEB3",beige:"#F5F5DC",whitesmoke:"#F5F5F5",mintcream:"#F5FFFA",ghostwhite:"#F8F8FF",salmon:"#FA8072",antiquewhite:"#FAEBD7",linen:"#FAF0E6",lightgoldenrodyellow:"#FAFAD2",oldlace:"#FDF5E6",magenta:"#FF00FF",deeppink:"#FF1493",orangered:"#FF4500",tomato:"#FF6347",hotpink:"#FF69B4",coral:"#FF7F50",darkorange:"#FF8C00",lightsalmon:"#FFA07A",orange:"#FFA500",lightpink:"#FFB6C1",pink:"#FFC0CB",gold:"#FFD700",peachpuff:"#FFDAB9",navajowhite:"#FFDEAD",moccasin:"#FFE4B5",bisque:"#FFE4C4",mistyrose:"#FFE4E1",blanchedalmond:"#FFEBCD",papayawhip:"#FFEFD5",lavenderblush:"#FFF0F5",seashell:"#FFF5EE",cornsilk:"#FFF8DC",lemonchiffon:"#FFFACD",floralwhite:"#FFFAF0",snow:"#FFFAFA",lightyellow:"#FFFFE0",ivory:"#FFFFF0"},Ct=new Int8Array(4),be=new Int32Array(Ct.buffer,0,1),$t=new Float32Array(Ct.buffer,0,1),Kt=/^\s*rgba?\s*\(/,Jt=/^\s*rgba?\s*\(\s*([0-9]*)\s*,\s*([0-9]*)\s*,\s*([0-9]*)(?:\s*,\s*(.*)?)?\)\s*$/;function Qt(r){var n=0,i=0,e=0,t=1;if(r[0]==="#")r.length===4?(n=parseInt(r.charAt(1)+r.charAt(1),16),i=parseInt(r.charAt(2)+r.charAt(2),16),e=parseInt(r.charAt(3)+r.charAt(3),16)):(n=parseInt(r.charAt(1)+r.charAt(2),16),i=parseInt(r.charAt(3)+r.charAt(4),16),e=parseInt(r.charAt(5)+r.charAt(6),16)),r.length===9&&(t=parseInt(r.charAt(7)+r.charAt(8),16)/255);else if(Kt.test(r)){var a=r.match(Jt);a&&(n=+a[1],i=+a[2],e=+a[3],a[4]&&(t=+a[4]))}return{r:n,g:i,b:e,a:t}}var J={};for(var le in pe)J[le]=oe(pe[le]),J[pe[le]]=J[le];function Rt(r,n,i,e,t){return be[0]=e<<24|i<<16|n<<8|r,be[0]=be[0]&4278190079,$t[0]}function oe(r){if(r=r.toLowerCase(),typeof J[r]<"u")return J[r];var n=Qt(r),i=n.r,e=n.g,t=n.b,a=n.a;a=a*255|0;var o=Rt(i,e,t,a);return J[r]=o,o}var Ee={};function _t(r){if(typeof Ee[r]<"u")return Ee[r];var n=(r&16711680)>>>16,i=(r&65280)>>>8,e=r&255,t=255,a=Rt(n,i,e,t);return Ee[r]=a,a}function We(r,n,i,e){return i+(n<<8)+(r<<16)}function Ve(r,n,i,e,t,a){var o=Math.floor(i/a*t),s=Math.floor(r.drawingBufferHeight/a-e/a*t),l=new Uint8Array(4);r.bindFramebuffer(r.FRAMEBUFFER,n),r.readPixels(o,s,1,1,r.RGBA,r.UNSIGNED_BYTE,l);var h=ee(l,4),u=h[0],d=h[1],f=h[2],g=h[3];return[u,d,f,g]}function c(r,n,i){return(n=ae(n))in r?Object.defineProperty(r,n,{value:i,enumerable:!0,configurable:!0,writable:!0}):r[n]=i,r}function je(r,n){var i=Object.keys(r);if(Object.getOwnPropertySymbols){var e=Object.getOwnPropertySymbols(r);n&&(e=e.filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})),i.push.apply(i,e)}return i}function b(r){for(var n=1;n<arguments.length;n++){var i=arguments[n]!=null?arguments[n]:{};n%2?je(Object(i),!0).forEach(function(e){c(r,e,i[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(r,Object.getOwnPropertyDescriptors(i)):je(Object(i)).forEach(function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))})}return r}function ei(r,n){for(;!{}.hasOwnProperty.call(r,n)&&(r=Q(r))!==null;);return r}function Ae(){return Ae=typeof Reflect<"u"&&Reflect.get?Reflect.get.bind():function(r,n,i){var e=ei(r,n);if(e){var t=Object.getOwnPropertyDescriptor(e,n);return t.get?t.get.call(arguments.length<3?r:i):t.value}},Ae.apply(null,arguments)}function wt(r,n,i,e){var t=Ae(Q(r.prototype),n,i);return typeof t=="function"?function(a){return t.apply(i,a)}:t}function ti(r){return r.normalized?1:r.size}function ye(r){var n=0;return r.forEach(function(i){return n+=ti(i)}),n}function xt(r,n,i){var e=r==="VERTEX"?n.VERTEX_SHADER:n.FRAGMENT_SHADER,t=n.createShader(e);if(t===null)throw new Error("loadShader: error while creating the shader");n.shaderSource(t,i),n.compileShader(t);var a=n.getShaderParameter(t,n.COMPILE_STATUS);if(!a){var o=n.getShaderInfoLog(t);throw n.deleteShader(t),new Error(`loadShader: error while compiling the shader:
 `.concat(o,`
 `).concat(i))}return t}function ii(r,n){return xt("VERTEX",r,n)}function ri(r,n){return xt("FRAGMENT",r,n)}function ni(r,n){var i=r.createProgram();if(i===null)throw new Error("loadProgram: error while creating the program.");var e,t;for(e=0,t=n.length;e<t;e++)r.attachShader(i,n[e]);r.linkProgram(i);var a=r.getProgramParameter(i,r.LINK_STATUS);if(!a){var o=r.getProgramInfoLog(i);throw r.deleteProgram(i),new Error("loadProgram: error while linking the program: ".concat(o))}return i}function Ze(r){var n=r.gl,i=r.buffer,e=r.program,t=r.vertexShader,a=r.fragmentShader;n.deleteShader(t),n.deleteShader(a),n.deleteProgram(e),n.deleteBuffer(i)}var qe=`#define PICKING_MODE

package/assets/index.html

@@ -12,7 +12,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-BR9BgNb3.js"></script>
+    <script type="module" crossorigin src="./assets/index-rJBOFic-.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-Dock0eH1.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-4UOaVWza.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-D8rt5lKn.js">

package/dist/{chunk-A2AB7UK5.js → chunk-E2JGJH5E.js}

@@ -15427,12 +15427,19 @@ var adsActivationEntityRefSchema = z52.object({
   expectedUpdatedAt: z52.number().int().nonnegative()
 }).strict();
 var adsActivationAdSchema = adsActivationEntityRefSchema;
+var ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES = 1e3;
 var ADS_ACTIVATION_MAX_ENTITIES = 100;
+function countAdsActivationManifestEntities(manifest) {
+  return 1 + manifest.campaign.adGroups.reduce(
+    (count, group) => count + 1 + group.ads.length,
+    0
+  );
+}
 var adsActivationAdGroupSchema = adsActivationEntityRefSchema.extend({
-  ads: z52.array(adsActivationAdSchema).min(1).max(ADS_ACTIVATION_MAX_ENTITIES - 1)
+  ads: z52.array(adsActivationAdSchema).min(1).max(ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES - 1)
 }).strict();
 var adsActivationCampaignSchema = adsActivationEntityRefSchema.extend({
-  adGroups: z52.array(adsActivationAdGroupSchema).min(1).max(ADS_ACTIVATION_MAX_ENTITIES - 1)
+  adGroups: z52.array(adsActivationAdGroupSchema).min(1).max(ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES - 1)
 }).strict();
 function compareAdsActivationEntityIds(left, right) {
   if (left < right) return -1;
@@ -15454,15 +15461,12 @@ function addCanonicalEntityOrderIssue(items, path, ctx) {
 var adsActivationManifestSchema = z52.object({
   campaign: adsActivationCampaignSchema
 }).strict().superRefine((manifest, ctx) => {
-  const entityCount = 1 + manifest.campaign.adGroups.reduce(
-    (count, group) => count + 1 + group.ads.length,
-    0
-  );
-  if (entityCount > ADS_ACTIVATION_MAX_ENTITIES) {
+  const entityCount = countAdsActivationManifestEntities(manifest);
+  if (entityCount > ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES) {
     ctx.addIssue({
       code: "custom",
       path: ["campaign"],
-      message: `Activation manifests may contain at most ${ADS_ACTIVATION_MAX_ENTITIES} entities`
+      message: `Activation manifests may contain at most ${ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES} entities`
     });
   }
   addCanonicalEntityOrderIssue(manifest.campaign.adGroups, ["campaign", "adGroups"], ctx);
@@ -16999,6 +17003,9 @@ export {
   AdsEntityStatuses,
   AdsEntityTypes,
   AdsActivationEntityTypes,
+  ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
+  ADS_ACTIVATION_MAX_ENTITIES,
+  countAdsActivationManifestEntities,
   adsActivationManifestSchema,
   canonicalizeAdsActivationManifest,
   adsActivationManifestHashSchema,

package/dist/{chunk-FFXYNYPZ.js → chunk-F4HFEWLM.js}

@@ -92,7 +92,7 @@ import {
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema,
   trafficSeriesGranularitySchema
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/{chunk-WG4EDZT3.js → chunk-SKL6ZDIY.js}

@@ -11,7 +11,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-FFXYNYPZ.js";
+} from "./chunk-F4HFEWLM.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -157,7 +157,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-5BZWU35I.js";
+} from "./chunk-Z46AW53D.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -295,7 +295,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -11857,7 +11857,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-CKGM2RUJ.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-F67UFJBG.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-LPUTKQDR.js → chunk-VRQ7U4HU.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-FFXYNYPZ.js";
+} from "./chunk-F4HFEWLM.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-5BZWU35I.js → chunk-Z46AW53D.js}

@@ -1,5 +1,7 @@
 import {
   ADS_ACTIVATE_SCOPE,
+  ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
+  ADS_ACTIVATION_MAX_ENTITIES,
   ADS_APPROVE_SCOPE,
   ADS_WRITE_SCOPE,
   AGENT_PROVIDER_IDS,
@@ -251,6 +253,7 @@ import {
   conversionTrackingIntegrityReadEnvelopeSchema,
   conversionTrackingOptionsDtoSchema,
   cosineSimilarity,
+  countAdsActivationManifestEntities,
   createApiKeyRequestSchema,
   createTemplateLinkPairIndex,
   createUserRequestSchema,
@@ -639,7 +642,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/intelligence-service.ts
 import { eq as eq62, desc as desc27, asc as asc11, and as and51, ne as ne8, or as or14, inArray as inArray22, gte as gte14, lte as lte12, isNull as isNull9, sql as sql25, exists } from "drizzle-orm";
@@ -34269,7 +34272,7 @@ var routeCatalog = [
     method: "post",
     path: "/api/v1/projects/{name}/ads/activation-grants",
     summary: "Approve one exact paused OpenAI Ads campaign tree for activation",
-    description: "Human-only approval surface. The authenticated ads.approve key is recorded as approver and must differ from the named executor key. Canonry verifies account eligibility, exact parent-child membership, paused state, upstream timestamps, and ad review approval before issuing a short-lived single-use grant.",
+    description: "Human-only approval surface. The authenticated ads.approve key is recorded as approver and must differ from the named executor key. Canonry verifies account eligibility, exact parent-child membership, paused state, upstream timestamps, and ad review approval before issuing a short-lived single-use grant. New grants are refused when the manifest exceeds the deployment's operational entity cap (default 100, tunable via CANONRY_ADS_ACTIVATION_MAX_ENTITIES to a whole number between 1 and the structural ceiling of 1000; a set-but-invalid value fails closed and refuses new grants until fixed).",
     tags: ["ads"],
     parameters: [nameParameter],
     requestBody: {
@@ -34324,7 +34327,7 @@ var routeCatalog = [
     method: "post",
     path: "/api/v1/projects/{name}/ads/campaigns/{id}/activate-tree",
     summary: "Execute a grant-bound OpenAI Ads campaign-tree activation",
-    description: "Requires ads.activate and a nonexpired single-use grant bound to the exact executor key, project, advertiser account, manifest hash, campaign, entity IDs, and upstream timestamps. Canonry activates ads first, then ad groups, then the campaign; every step is durably checkpointed and verified. Failure rolls back the campaign before children and ambiguous outcomes fail closed as unknown.",
+    description: "Requires ads.activate and a nonexpired single-use grant bound to the exact executor key, project, advertiser account, manifest hash, campaign, entity IDs, and upstream timestamps. Canonry activates ads first, then ad groups, then the campaign; every step is durably checkpointed and verified. Failure rolls back the campaign before children and ambiguous outcomes fail closed as unknown. New executions are refused when the manifest exceeds the deployment's operational entity cap (default 100, tunable via CANONRY_ADS_ACTIVATION_MAX_ENTITIES to a whole number between 1 and the structural ceiling of 1000; a set-but-invalid value fails closed and refuses new executions until fixed); stored receipts replay and reconcile regardless.",
     tags: ["ads"],
     parameters: [
       nameParameter,
@@ -43179,10 +43182,6 @@ async function googleMarketingRoutes(app, opts) {
 import crypto35 from "crypto";
 import { eq as eq43, and as and35, asc as asc8, desc as desc19, gt as gt2, gte as gte9, lt as lt8, lte as lte8, ne as ne5, inArray as inArray17, or as or10, isNull as isNull5, isNotNull as isNotNull2, sql as sql17 } from "drizzle-orm";
 
-// ../api-routes/src/ads-activation-routes.ts
-import crypto34 from "crypto";
-import { and as and34, asc as asc7, eq as eq42, gt, isNotNull, isNull as isNull4, lte as lte7, or as or9, sql as sql16 } from "drizzle-orm";
-
 // ../api-routes/src/ads-activation.ts
 import crypto33 from "crypto";
 var AdsActivationErrorCodes = {
@@ -43221,6 +43220,55 @@ var AdsActivationError = class extends Error {
   operation;
   entity;
 };
+function createMemoizedAdsActivationProvider(source) {
+  const adGroupsByCampaignId = /* @__PURE__ */ new Map();
+  const adsByAdGroupId = /* @__PURE__ */ new Map();
+  const readThrough = (cache, parentId, load) => {
+    const cached = cache.get(parentId);
+    if (cached) return cached;
+    const pending = load();
+    cache.set(parentId, pending);
+    pending.catch(() => {
+      if (cache.get(parentId) === pending) cache.delete(parentId);
+    });
+    return pending;
+  };
+  const invalidate = () => {
+    adGroupsByCampaignId.clear();
+    adsByAdGroupId.clear();
+  };
+  const mutate = async (run) => {
+    try {
+      return await run();
+    } finally {
+      invalidate();
+    }
+  };
+  const listAdGroups = (campaignId) => readThrough(adGroupsByCampaignId, campaignId, () => source.listAdGroups(campaignId));
+  const listAds = (adGroupId) => readThrough(adsByAdGroupId, adGroupId, () => source.listAds(adGroupId));
+  return {
+    getAccount: () => source.getAccount(),
+    getCampaign: (id) => source.getCampaign(id),
+    listAdGroups,
+    getAdGroup: async (id, campaignId) => {
+      const entity = (await listAdGroups(campaignId)).find((candidate) => candidate.id === id);
+      if (!entity) throw new Error("OpenAI Ads ad group was not found under the approved campaign");
+      return entity;
+    },
+    listAds,
+    getAd: async (id, adGroupId) => {
+      const entity = (await listAds(adGroupId)).find((candidate) => candidate.id === id);
+      if (!entity) throw new Error("OpenAI Ads ad was not found under the approved ad group");
+      return entity;
+    },
+    activateCampaign: (id) => mutate(() => source.activateCampaign(id)),
+    activateAdGroup: (id) => mutate(() => source.activateAdGroup(id)),
+    activateAd: (id) => mutate(() => source.activateAd(id)),
+    pauseCampaign: (id) => mutate(() => source.pauseCampaign(id)),
+    pauseAdGroup: (id) => mutate(() => source.pauseAdGroup(id)),
+    pauseAd: (id) => mutate(() => source.pauseAd(id))
+  };
+}
 var DEFAULT_LEASE_MS = 5 * 6e4;
 var DEFAULT_ACTIVATION_VERIFICATION_RETRY_DELAYS_MS = [100, 250, 500, 1e3, 2e3, 2e3];
 var PROVIDER_PAUSED = "paused";
@@ -44517,6 +44565,8 @@ async function executeApprovedAdsActivation(dependencies, request) {
 }
 
 // ../api-routes/src/ads-activation-routes.ts
+import crypto34 from "crypto";
+import { and as and34, asc as asc7, eq as eq42, gt, isNotNull, isNull as isNull4, lte as lte7, or as or9, sql as sql16 } from "drizzle-orm";
 var MAX_ACTIVATION_GRANT_LIFETIME_MS = 24 * 60 * 60 * 1e3;
 var ACTIVATION_LEASE_MS = 5 * 6e4;
 var ACTIVATION_REVOCATION_SETTLEMENT_MS = ACTIVATION_LEASE_MS;
@@ -44934,6 +44984,40 @@ function countManifest(manifest) {
     adCount: manifest.campaign.adGroups.reduce((count2, group) => count2 + group.ads.length, 0)
   };
 }
+function resolveAdsActivationMaxEntities(env = process.env) {
+  const raw = env.CANONRY_ADS_ACTIVATION_MAX_ENTITIES;
+  if (raw === void 0 || raw.trim() === "") return ADS_ACTIVATION_MAX_ENTITIES;
+  const trimmed = raw.trim();
+  const parsed = /^\d+$/.test(trimmed) ? Number(trimmed) : Number.NaN;
+  if (!Number.isSafeInteger(parsed) || parsed < 1 || parsed > ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES) {
+    throw internalError(
+      `CANONRY_ADS_ACTIVATION_MAX_ENTITIES is set to the invalid value "${raw}". It must be a whole number between 1 and ${ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES} (unset it to use the default of ${ADS_ACTIVATION_MAX_ENTITIES}). New ads activations are refused until the variable is fixed.`,
+      {
+        envVar: "CANONRY_ADS_ACTIVATION_MAX_ENTITIES",
+        value: raw,
+        min: 1,
+        max: ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
+        default: ADS_ACTIVATION_MAX_ENTITIES
+      }
+    );
+  }
+  return parsed;
+}
+function enforceAdsActivationOperationalCap(manifest) {
+  const maxEntities = resolveAdsActivationMaxEntities();
+  const entityCount = countAdsActivationManifestEntities(manifest);
+  if (entityCount > maxEntities) {
+    throw validationError(
+      `New ads activations may contain at most ${maxEntities} entities (raise CANONRY_ADS_ACTIVATION_MAX_ENTITIES to change the operational cap)`,
+      {
+        entityCount,
+        maxEntities,
+        absoluteMaxEntities: ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
+        envVar: "CANONRY_ADS_ACTIVATION_MAX_ENTITIES"
+      }
+    );
+  }
+}
 function requireAuthenticatedKey(request) {
   if (!request.apiKey) {
     throw forbidden("Ads activation approval and execution require an authenticated API key");
@@ -45378,6 +45462,7 @@ function registerAdsActivationRoutes(app, opts) {
       const approver = requireAuthenticatedKey(request);
       const project = resolveProject(app.db, request.params.name);
       const body = parseBody3(adsActivationGrantCreateRequestSchema, request.body);
+      enforceAdsActivationOperationalCap(body.manifest);
       const now = /* @__PURE__ */ new Date();
       const expiresAt = Date.parse(body.expiresAt);
       if (!Number.isFinite(expiresAt) || expiresAt <= now.getTime() || expiresAt > now.getTime() + MAX_ACTIVATION_GRANT_LIFETIME_MS) {
@@ -45540,6 +45625,9 @@ function registerAdsActivationRoutes(app, opts) {
       if (grant.manifestHash !== body.manifestHash) {
         throw validationError("The activation grant does not match the requested manifest hash");
       }
+      if (!grant.operationId) {
+        enforceAdsActivationOperationalCap(grant.manifest);
+      }
       try {
         const terminal = terminalActivationResponse(app, opts, grant, body.operationKey);
         if (terminal) return terminal;
@@ -46986,20 +47074,14 @@ async function adsRoutes(app, opts) {
             entity: { ...entity, status: entity.status, updatedAt: entity.updatedAt }
           });
         },
-        provider: {
+        // getAdGroup/getAd are list-derived (no single-entity upstream read),
+        // so the memoized provider shares one list walk per parent across the
+        // whole verification pass and clears its cache on every mutation —
+        // see createMemoizedAdsActivationProvider for the invariants.
+        provider: createMemoizedAdsActivationProvider({
           getAccount: refreshAccount,
           getCampaign: (id) => operator.getCampaign(apiKey, id),
-          getAdGroup: async (id, campaignId) => {
-            const entity = (await operator.listAdGroups(apiKey, campaignId)).find((candidate) => candidate.id === id);
-            if (!entity) throw new Error("OpenAI Ads ad group was not found under the approved campaign");
-            return entity;
-          },
           listAdGroups: (campaignId) => operator.listAdGroups(apiKey, campaignId),
-          getAd: async (id, adGroupId) => {
-            const entity = (await operator.listAds(apiKey, adGroupId)).find((candidate) => candidate.id === id);
-            if (!entity) throw new Error("OpenAI Ads ad was not found under the approved ad group");
-            return entity;
-          },
           listAds: (adGroupId) => operator.listAds(apiKey, adGroupId),
           activateCampaign: (id) => activateCampaign(apiKey, id),
           activateAdGroup: (id) => activateAdGroup(apiKey, id),
@@ -47007,7 +47089,7 @@ async function adsRoutes(app, opts) {
           pauseCampaign: (id) => operator.pauseCampaign(apiKey, id),
           pauseAdGroup: (id) => operator.pauseAdGroup(apiKey, id),
           pauseAd: (id) => operator.pauseAd(apiKey, id)
-        }
+        })
       };
     },
     toOperationDto: operationDto

package/dist/cli.js

@@ -26,11 +26,11 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-WG4EDZT3.js";
+} from "./chunk-SKL6ZDIY.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-LPUTKQDR.js";
+} from "./chunk-VRQ7U4HU.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -55,7 +55,7 @@ import {
   saveConfigPatch,
   systemError,
   usageError
-} from "./chunk-FFXYNYPZ.js";
+} from "./chunk-F4HFEWLM.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -69,7 +69,7 @@ import {
   projects,
   queries,
   renderReportHtml
-} from "./chunk-5BZWU35I.js";
+} from "./chunk-Z46AW53D.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -138,7 +138,7 @@ import {
   providerQuotaPolicySchema,
   resolveProviderInput,
   winnabilityClassSchema
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";

package/dist/index.js

@@ -3,12 +3,12 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-WG4EDZT3.js";
+} from "./chunk-SKL6ZDIY.js";
 import {
   loadConfig
-} from "./chunk-FFXYNYPZ.js";
-import "./chunk-5BZWU35I.js";
-import "./chunk-A2AB7UK5.js";
+} from "./chunk-F4HFEWLM.js";
+import "./chunk-Z46AW53D.js";
+import "./chunk-E2JGJH5E.js";
 export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,

package/dist/{intelligence-service-CKGM2RUJ.js → intelligence-service-F67UFJBG.js}

@@ -1,7 +1,7 @@
 import {
   IntelligenceService
-} from "./chunk-5BZWU35I.js";
-import "./chunk-A2AB7UK5.js";
+} from "./chunk-Z46AW53D.js";
+import "./chunk-E2JGJH5E.js";
 export {
   IntelligenceService
 };

package/dist/mcp.js

@@ -1,13 +1,13 @@
 import {
   autoSyncSkills
-} from "./chunk-LPUTKQDR.js";
+} from "./chunk-VRQ7U4HU.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-FFXYNYPZ.js";
+} from "./chunk-F4HFEWLM.js";
 import {
   isReadOnlyKey
-} from "./chunk-A2AB7UK5.js";
+} from "./chunk-E2JGJH5E.js";
 
 // src/mcp/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "4.179.1",
+  "version": "4.179.2",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "license": "FSL-1.1-ALv2",
@@ -70,31 +70,31 @@
     "@types/node-cron": "^3.0.11",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
-    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
+    "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-ads": "0.0.0",
-    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-local": "0.0.0",
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
+    "@ainyc/canonry-provider-openai": "0.0.0"
   },
   "scripts": {
     "build": "tsx scripts/copy-agent-assets.ts && tsup && tsx build-web.ts",