@canonry/canonry 5.16.0 → 5.17.0

package/dist/{chunk-3YAPVVFN.js → chunk-H6COEFVL.js}

@@ -11681,6 +11681,7 @@ function applyRoleGates(request) {
 }
 function applyScopedWriteGates(request) {
   if (!WRITE_METHODS2.has(request.method) || isTransportEnvelopeRoute(request) || request.readSemanticGrant) return;
+  if (isPaidReadRoute(request) && request.principal?.kind === "user") return;
   const scopes = principalScopes(request) ?? [];
   const restricted = restrictedWriteScopes(scopes);
   if (!restricted) return;

package/dist/{chunk-ZGZSROSR.js → chunk-XC24KCTL.js}

@@ -206,6 +206,7 @@ import { parse, stringify } from "yaml";
 import { z } from "zod";
 var dashboardManagedSweepsSchema = z.boolean().nullish();
 var researchAllowViewersSchema = z.boolean().nullish();
+var agentAllowViewersSchema = z.boolean().nullish();
 var researchViewerDailyRunLimitSchema = z.number().int().positive().nullish();
 var dashboardManagedRunKindsSchema = z.array(schedulableRunKindSchema).nullish();
 var agentProviderSchema = agentProviderIdSchema.nullish();
@@ -476,6 +477,12 @@ Do not use "canonry init --force" for recovery. It replaces credentials without
       message: `Invalid config at ${configPath}: agent.model must be a non-empty string or left blank.`
     });
   }
+  if (!agentAllowViewersSchema.safeParse(parsed.agent?.allowViewers).success) {
+    throw new CliError({
+      code: "CONFIG_INVALID",
+      message: `Invalid config at ${configPath}: agent.allowViewers must be true, false, or left blank.`
+    });
+  }
   if (parsed.agent?.model && !parsed.agent?.provider) {
     throw new CliError({
       code: "CONFIG_INVALID",

package/dist/cli.js

@@ -35,11 +35,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-XDFMFZRN.js";
+} from "./chunk-GYX277BV.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-JO5HHEJV.js";
+} from "./chunk-2EE6RPWV.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -66,13 +66,13 @@ import {
   shouldPrintServeSkillsNudge,
   systemError,
   usageError
-} from "./chunk-ZGZSROSR.js";
+} from "./chunk-XC24KCTL.js";
 import {
   DEFAULT_DEMO_TRUSTED_PROXIES,
   trustedProxiesProblem,
   trustedProxyProblem
 } from "./chunk-RB2F4D3Z.js";
-import "./chunk-CDQDPUY4.js";
+import "./chunk-3OYWLQEE.js";
 import "./chunk-AOJU5LKX.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
@@ -88,7 +88,7 @@ import {
   queries,
   renderReportHtml,
   runs
-} from "./chunk-3YAPVVFN.js";
+} from "./chunk-H6COEFVL.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -438,7 +438,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-QLQUVMKJ.js");
+  const { createDemoServer } = await import("./demo-server-CUBR2NVR.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-QLQUVMKJ.js → demo-server-CUBR2NVR.js}

@@ -4,7 +4,7 @@ import {
 import {
   layoutSiteCrawlGraphInput,
   persistSiteCrawlGraphLayout
-} from "./chunk-CDQDPUY4.js";
+} from "./chunk-3OYWLQEE.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -83,7 +83,7 @@ import {
   siteCrawlPages,
   siteCrawlSnapshots,
   trafficSources
-} from "./chunk-3YAPVVFN.js";
+} from "./chunk-H6COEFVL.js";
 import {
   RunKinds,
   SiteCrawlFetchStates,

package/dist/index.d.ts

@@ -316,6 +316,13 @@ interface AgentConfigEntry {
      * provider's agent-tier default.
      */
     model?: string;
+    /**
+     * Let signed-in viewer accounts use Aero. Off by default. A viewer gets their
+     * own in-memory conversation, never the operator's, and every tool call runs
+     * with the viewer's own read-only authority. `CANONRY_AGENT_ALLOW_VIEWERS`
+     * overrides it; resolved by `resolveAgentAllowViewers`.
+     */
+    allowViewers?: boolean | null;
 }
 interface DashboardConfigEntry {
     /**

package/dist/index.js

@@ -3,13 +3,13 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-XDFMFZRN.js";
+} from "./chunk-GYX277BV.js";
 import {
   loadConfig
-} from "./chunk-ZGZSROSR.js";
-import "./chunk-CDQDPUY4.js";
+} from "./chunk-XC24KCTL.js";
+import "./chunk-3OYWLQEE.js";
 import "./chunk-AOJU5LKX.js";
-import "./chunk-3YAPVVFN.js";
+import "./chunk-H6COEFVL.js";
 import "./chunk-L36TC6LB.js";
 export {
   GoogleMarketingRuntimeError,

package/dist/{intelligence-service-EAUKUVVM.js → intelligence-service-6N7SIWLD.js}

@@ -1,7 +1,7 @@
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-3YAPVVFN.js";
+} from "./chunk-H6COEFVL.js";
 import "./chunk-L36TC6LB.js";
 export {
   HISTORY_WINDOW_RUNS,

package/dist/mcp.js

@@ -1,10 +1,10 @@
 import {
   autoSyncSkills
-} from "./chunk-JO5HHEJV.js";
+} from "./chunk-2EE6RPWV.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-ZGZSROSR.js";
+} from "./chunk-XC24KCTL.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isReadOnlyKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "5.16.0",
+  "version": "5.17.0",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "keywords": [
@@ -88,30 +88,30 @@
     "tsx": "^4.19.0",
     "@ainyc/canonry-api-client": "0.0.0",
     "@ainyc/canonry-web": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google": "0.0.0",
-    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
     "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
-    "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-integration-wordpress": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
+    "@ainyc/canonry-integration-openai-ads": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
+    "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
-    "@ainyc/canonry-provider-gemini": "0.0.0",
-    "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
+    "@ainyc/canonry-provider-local": "0.0.0",
+    "@ainyc/canonry-provider-perplexity": "0.0.0",
     "@ainyc/canonry-provider-openai": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0"
+    "@ainyc/canonry-provider-gemini": "0.0.0"
   },
   "scripts": {
     "build": "pnpm run build:cli && pnpm run build:web",