@canonry/canonry 5.20.0 → 5.20.1

package/README.md

@@ -166,14 +166,6 @@ For a configured portfolio destination, select one `--market <key>` or `--proper
 
 <a id="compare-competitors-and-measure-complex-portfolios"></a>
 
-### Portfolios and competitors
-
-Use [versioned measurement plans](docs/mcp.md#tool-surface) for portfolios of locations, products, or site sections.
-
-- **Properties:** Assign queries, engines, models, and locations to each property. Keep branded and non-brand coverage separate.
-- **Market groups:** Organize overlapping sets of properties, each with its own competitors.
-- **Comparisons:** Compare properties, groups, engines, and locations. Open the exact answers and cited URLs behind each result.
-
 ### Search, traffic, and site health
 
 Investigate visibility changes with evidence from search and local performance, crawler visits, AI page fetches, referrals, and conversions.
@@ -183,6 +175,14 @@ Site audits show technical findings alongside that evidence.
 
 *Map crawlable pages and the internal links that connect them.*
 
+### Portfolios and competitors
+
+Use [versioned measurement plans](docs/mcp.md#tool-surface) for portfolios of locations, products, or site sections.
+
+- **Properties:** Assign queries, engines, models, and locations to each property. Keep branded and non-brand coverage separate.
+- **Market groups:** Organize overlapping sets of properties, each with its own competitors.
+- **Comparisons:** Compare properties, groups, engines, and locations. Open the exact answers and cited URLs behind each result.
+
 ## Act on the evidence
 
 Your agent coordinates the work through Canonry and its own tools.

package/assets/agent-workspace/skills/aero/references/aeo-discovery.md

@@ -136,7 +136,7 @@ Keep it tight. The operator wakes to a short, decision-ready summary, not a full
 - **Gemini not configured** → orchestrator throws early; `runs.status='failed'` with `Gemini provider is not configured.` Surface as "configure Gemini before running discovery" — link to `cnry init` or `~/.canonry/config.yaml`.
 - **Vertex-only Gemini** → embeddings step throws (Vertex embeddings deferred). Same surface, "use a Gemini API key for now."
 - **ICP missing** → route returns 400 with `VALIDATION_ERROR`. Ask the operator for the ICP description in plain language.
-- **Seed collapse (hyperlocal/niche businesses)** → 40 raw seeds collapse to 1-2 canonical queries after embedding+clustering, even at low dedup thresholds. This happens when Gemini generates seed queries that all live in the same semantic pocket (e.g. all variants of "boutique hotel Venice Beach"). The embedding model sees them as near-identical, so clustering produces one representative.
+- **Seed collapse (hyperlocal/niche businesses)** → 40 raw seeds collapse to 1-2 canonical queries after embedding+clustering, even at low dedup thresholds. This happens when Gemini generates seed queries that all live in the same semantic pocket (e.g. all variants of "boutique hotel Harborline Beach"). The embedding model sees them as near-identical, so clustering produces one representative.
 
   **Diagnostic signal:** `seedCountRaw / seedCount > 10:1` (e.g. 40 raw → 1 selected).
 
@@ -144,9 +144,9 @@ Keep it tight. The operator wakes to a short, decision-ready summary, not a full
 
   ```bash
   cnry discover run <project> \
-    --icp-angle "romantic anniversary stay in Venice Beach" \
-    --icp-angle "best rooftop bars and dining hotels LA" \
-    --icp-angle "walkable Venice Beach hotels near Abbot Kinney" \
+    --icp-angle "romantic anniversary stay in Harborline Beach" \
+    --icp-angle "best rooftop bars and dining hotels near Harborline" \
+    --icp-angle "walkable Harborline Beach hotels near Kettle Row" \
     --icp-angle "design-forward boutique hotels for creative professionals" \
     --wait
   ```

package/assets/agent-workspace/skills/canonry/references/google-business-profile.md

@@ -262,22 +262,22 @@ Every GBP number belongs to one of three planes. **Tag each figure by plane befo
 
 ## Real-World Data Shapes & Signal Patterns
 
-Validated against three live businesses of different types (a computer-support shop, a roofing contractor, and a Venice Beach hotel). Bake these into any parsing or analysis code.
+Validated against three live businesses of different types (a computer-support shop, a roofing contractor, and a beachfront boutique hotel). Bake these into any parsing or analysis code.
 
 ### Response-shape quirks (the parser MUST handle these)
 
-- **Values are string-encoded integers.** Keyword counts come as `{ "insightsValue": { "value": "10939" } }` or `{ "insightsValue": { "threshold": "15" } }` — note the nesting under `insightsValue` and that `"10939"` is a string. `Number()` it.
+- **Values are string-encoded integers.** Keyword counts come as `{ "insightsValue": { "value": "10412" } }` or `{ "insightsValue": { "threshold": "15" } }` — note the nesting under `insightsValue` and that `"10412"` is a string. `Number()` it.
 - **Daily-metric zero days omit the value entirely.** A datedValue with no traffic is `{ "date": {"year":2026,"month":5,"day":1} }` — there is no `"value": "0"`. Treat a missing `value` as 0; don't skip the row.
 - **Dates are split objects** (`{year, month, day}`), not ISO strings. Reassemble.
 
 ### Signal patterns (what the data actually looks like)
 
-- **`BUSINESS_DIRECTION_REQUESTS` is the most reliably-populated conversion signal** across every business type — even a tiny roofing contractor logged 66/30d while its website-clicks (2) and call-clicks (1) were near-zero. For local/service businesses it's the headline AEO-conversion proxy, not website clicks.
+- **`BUSINESS_DIRECTION_REQUESTS` is the most reliably-populated conversion signal** across every business type — even a tiny roofing contractor logged 58/30d while its website-clicks (2) and call-clicks (1) were near-zero. For local/service businesses it's the headline AEO-conversion proxy, not website clicks.
 - **Most of the 11 daily metrics are all-zero** for non-retail businesses (`BUSINESS_CONVERSATIONS`, `BUSINESS_BOOKINGS`, `BUSINESS_FOOD_*` were 0 for all three). Syncing all 11 is fine (zeros are cheap) but the dashboard should hide all-zero series.
-- **Impressions skew to Maps for physical-destination businesses.** The hotel pulled 7,402 desktop-maps impressions vs 2,257 desktop-search in 30 days — people find it on Maps.
-- **Keyword thresholding scales with volume.** A busy hotel was ~89% thresholded (its head terms like `hotels`→10,939 had exact values); both small businesses were **100% thresholded** (every keyword redacted). For the typical SMB location, expect zero exact keyword values — design the UI to lead with the `<N` floor, not exact counts.
+- **Impressions skew to Maps for physical-destination businesses.** The hotel pulled 7,150 desktop-maps impressions vs 2,180 desktop-search in 30 days — people find it on Maps.
+- **Keyword thresholding scales with volume.** A busy hotel was ~89% thresholded (its head terms like `hotels`→10,412 had exact values); both small businesses were **100% thresholded** (every keyword redacted). For the typical SMB location, expect zero exact keyword values — design the UI to lead with the `<N` floor, not exact counts.
 - **An empty Lodging resource is the norm, but it does NOT prove the owner set no amenities.** A real operating hotel returned a lodging resource with only `{ "name": ... }` and zero place-action links, yet its GBP "Hotel details" panel had amenities filled in (breakfast, wifi, parking, accessibility). So `populatedGroupCount === 0` means "canonry can't read structured attributes via this API response", not "the hotel has none". Surface the lodging signal as a **verify** (check the "Hotel details" panel), not a confirmed gap. The place-action emptiness is a separate, genuinely owner-readable signal.
-- **The Places cross-reference is a thin slice for hotels, not the full rendered listing.** Run live against the Venice Beach hotel at the Atmosphere tier, Place Details surfaced exactly one structured amenity, `wheelchair accessibility`, even though the rendered Google hotel module advertises far more (wifi, pool, room service, room rates). Those richer fields come from **Hotel Center**, which the Places API does not expose. So a thin or empty `gbp places` amenity list is NOT evidence the public listing is sparse; Places only carries a narrow, schema-bound subset (breakfast, dining, parking, pet-friendly, accessibility, restroom, family-friendly, outdoor seating, reservations). Read `gbp-listing-discrepancy` as a **floor** on the public-vs-owner gap (proof the listing advertises *at least* the named amenities), never a complete inventory. The owner-control point still stands at any size: even one amenity the profile fails to assert is a structured-data gap the operator can close.
+- **The Places cross-reference is a thin slice for hotels, not the full rendered listing.** Run live against the beachfront hotel at the Atmosphere tier, Place Details surfaced exactly one structured amenity, `wheelchair accessibility`, even though the rendered Google hotel module advertises far more (wifi, pool, room service, room rates). Those richer fields come from **Hotel Center**, which the Places API does not expose. So a thin or empty `gbp places` amenity list is NOT evidence the public listing is sparse; Places only carries a narrow, schema-bound subset (breakfast, dining, parking, pet-friendly, accessibility, restroom, family-friendly, outdoor seating, reservations). Read `gbp-listing-discrepancy` as a **floor** on the public-vs-owner gap (proof the listing advertises *at least* the named amenities), never a complete inventory. The owner-control point still stands at any size: even one amenity the profile fails to assert is a structured-data gap the operator can close.
 
 ## Troubleshooting
 

package/dist/{chunk-4PENJKRN.js → chunk-EM7ZNUVO.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-PAZVNFQ3.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,

package/dist/{chunk-WL27HO5C.js → chunk-PAZVNFQ3.js}

@@ -4841,7 +4841,7 @@ var MIGRATION_VERSIONS = [
       // through the LEFT JOIN forces every value to be either a valid `q.id`
       // or NULL — pre-existing orphans land with NULL `query_id` / NULL
       // `query_text`, preserving the snapshot row instead of failing the
-      // migration. The May 2026 azcoatings DB had 459 such pre-existing
+      // migration. A May 2026 production DB had 459 such pre-existing
       // orphans; without this guard, migrate() throws SQLITE_CONSTRAINT_FOREIGNKEY.
       `INSERT INTO query_snapshots_v58 (
          id, run_id, query_id, query_text, provider, model, citation_state,
@@ -4968,7 +4968,7 @@ var MIGRATION_VERSIONS = [
     version: 63,
     name: "audit-log-attribution-columns",
     // Adds `user_agent` and `actor_session` to `audit_log` so post-mortems
-    // can attribute destructive events (like the 2026-05-15 azcoatings
+    // can attribute destructive events (like the 2026-05-15
     // queries.replaced incident — see PR #593) to a specific caller.
     // Without these columns, every mutation rides as `actor='api'` with no
     // narrower identity, so it's impossible to tell whether a destructive

package/dist/{chunk-DRZWMFRV.js → chunk-S2RDUO6K.js}

@@ -18,7 +18,7 @@ import {
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout
-} from "./chunk-4PENJKRN.js";
+} from "./chunk-EM7ZNUVO.js";
 import {
   CanonryMcpToolNames,
   CliError,
@@ -186,7 +186,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-PAZVNFQ3.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -6604,7 +6604,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "b5366056cfff6f0e275fe651252cfa1961bf40a9" : void 0;
+  const embedded = true ? "ce28687c960cb27f6e173cc56510b33b44a0f0b3" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -12181,7 +12181,7 @@ function readStoredGroundingSources(rawResponse) {
   return result2;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-MKHINDHN.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-73OEZNLJ.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/cli.js

@@ -35,7 +35,7 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-DRZWMFRV.js";
+} from "./chunk-S2RDUO6K.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
@@ -62,7 +62,7 @@ import {
   trustedProxiesProblem,
   trustedProxyProblem
 } from "./chunk-RB2F4D3Z.js";
-import "./chunk-4PENJKRN.js";
+import "./chunk-EM7ZNUVO.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -89,7 +89,7 @@ import {
   queries,
   renderReportHtml,
   runs
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-PAZVNFQ3.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -442,7 +442,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-OCBV5OMS.js");
+  const { createDemoServer } = await import("./demo-server-UOIOPFAV.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-OCBV5OMS.js → demo-server-UOIOPFAV.js}

@@ -4,7 +4,7 @@ import {
 import {
   layoutSiteCrawlGraphInput,
   persistSiteCrawlGraphLayout
-} from "./chunk-4PENJKRN.js";
+} from "./chunk-EM7ZNUVO.js";
 import {
   PACKAGE_VERSION,
   canonryMcpTools
@@ -84,7 +84,7 @@ import {
   siteCrawlPages,
   siteCrawlSnapshots,
   trafficSources
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-PAZVNFQ3.js";
 import {
   RunKinds,
   SiteCrawlFetchStates,

package/dist/index.js

@@ -3,13 +3,13 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-DRZWMFRV.js";
+} from "./chunk-S2RDUO6K.js";
 import {
   loadConfig
 } from "./chunk-5FKR2K76.js";
-import "./chunk-4PENJKRN.js";
+import "./chunk-EM7ZNUVO.js";
 import "./chunk-XBGPHZKA.js";
-import "./chunk-WL27HO5C.js";
+import "./chunk-PAZVNFQ3.js";
 import "./chunk-QF7SY7AF.js";
 export {
   GoogleMarketingRuntimeError,

package/dist/{intelligence-service-MKHINDHN.js → intelligence-service-73OEZNLJ.js}

@@ -1,7 +1,7 @@
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-PAZVNFQ3.js";
 import "./chunk-QF7SY7AF.js";
 export {
   HISTORY_WINDOW_RUNS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "5.20.0",
+  "version": "5.20.1",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "keywords": [
@@ -87,31 +87,31 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "@ainyc/canonry-web": "0.0.0",
-    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
-    "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
-    "@ainyc/canonry-integration-bing": "0.0.0",
+    "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
+    "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
-    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
-    "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-google-ads": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
-    "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
+    "@ainyc/canonry-integration-commoncrawl": "0.0.0",
+    "@ainyc/canonry-integration-traffic": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
     "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
-    "@ainyc/canonry-provider-perplexity": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0"
+    "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-perplexity": "0.0.0"
   },
   "scripts": {
     "build": "pnpm run build:cli && pnpm run build:web",