@canonry/canonry 5.20.0 → 5.20.2

package/README.md

@@ -166,14 +166,6 @@ For a configured portfolio destination, select one `--market <key>` or `--proper
 
 <a id="compare-competitors-and-measure-complex-portfolios"></a>
 
-### Portfolios and competitors
-
-Use [versioned measurement plans](docs/mcp.md#tool-surface) for portfolios of locations, products, or site sections.
-
-- **Properties:** Assign queries, engines, models, and locations to each property. Keep branded and non-brand coverage separate.
-- **Market groups:** Organize overlapping sets of properties, each with its own competitors.
-- **Comparisons:** Compare properties, groups, engines, and locations. Open the exact answers and cited URLs behind each result.
-
 ### Search, traffic, and site health
 
 Investigate visibility changes with evidence from search and local performance, crawler visits, AI page fetches, referrals, and conversions.
@@ -183,6 +175,14 @@ Site audits show technical findings alongside that evidence.
 
 *Map crawlable pages and the internal links that connect them.*
 
+### Portfolios and competitors
+
+Use [versioned measurement plans](docs/mcp.md#tool-surface) for portfolios of locations, products, or site sections.
+
+- **Properties:** Assign queries, engines, models, and locations to each property. Keep branded and non-brand coverage separate.
+- **Market groups:** Organize overlapping sets of properties, each with its own competitors.
+- **Comparisons:** Compare properties, groups, engines, and locations. Open the exact answers and cited URLs behind each result.
+
 ## Act on the evidence
 
 Your agent coordinates the work through Canonry and its own tools.

package/assets/agent-workspace/skills/aero/references/aeo-discovery.md

@@ -136,7 +136,7 @@ Keep it tight. The operator wakes to a short, decision-ready summary, not a full
 - **Gemini not configured** → orchestrator throws early; `runs.status='failed'` with `Gemini provider is not configured.` Surface as "configure Gemini before running discovery" — link to `cnry init` or `~/.canonry/config.yaml`.
 - **Vertex-only Gemini** → embeddings step throws (Vertex embeddings deferred). Same surface, "use a Gemini API key for now."
 - **ICP missing** → route returns 400 with `VALIDATION_ERROR`. Ask the operator for the ICP description in plain language.
-- **Seed collapse (hyperlocal/niche businesses)** → 40 raw seeds collapse to 1-2 canonical queries after embedding+clustering, even at low dedup thresholds. This happens when Gemini generates seed queries that all live in the same semantic pocket (e.g. all variants of "boutique hotel Venice Beach"). The embedding model sees them as near-identical, so clustering produces one representative.
+- **Seed collapse (hyperlocal/niche businesses)** → 40 raw seeds collapse to 1-2 canonical queries after embedding+clustering, even at low dedup thresholds. This happens when Gemini generates seed queries that all live in the same semantic pocket (e.g. all variants of "boutique hotel Harborline Beach"). The embedding model sees them as near-identical, so clustering produces one representative.
 
   **Diagnostic signal:** `seedCountRaw / seedCount > 10:1` (e.g. 40 raw → 1 selected).
 
@@ -144,9 +144,9 @@ Keep it tight. The operator wakes to a short, decision-ready summary, not a full
 
   ```bash
   cnry discover run <project> \
-    --icp-angle "romantic anniversary stay in Venice Beach" \
-    --icp-angle "best rooftop bars and dining hotels LA" \
-    --icp-angle "walkable Venice Beach hotels near Abbot Kinney" \
+    --icp-angle "romantic anniversary stay in Harborline Beach" \
+    --icp-angle "best rooftop bars and dining hotels near Harborline" \
+    --icp-angle "walkable Harborline Beach hotels near Kettle Row" \
     --icp-angle "design-forward boutique hotels for creative professionals" \
     --wait
   ```

package/assets/agent-workspace/skills/canonry/references/google-business-profile.md

@@ -262,22 +262,22 @@ Every GBP number belongs to one of three planes. **Tag each figure by plane befo
 
 ## Real-World Data Shapes & Signal Patterns
 
-Validated against three live businesses of different types (a computer-support shop, a roofing contractor, and a Venice Beach hotel). Bake these into any parsing or analysis code.
+Validated against three live businesses of different types (a computer-support shop, a roofing contractor, and a beachfront boutique hotel). Bake these into any parsing or analysis code.
 
 ### Response-shape quirks (the parser MUST handle these)
 
-- **Values are string-encoded integers.** Keyword counts come as `{ "insightsValue": { "value": "10939" } }` or `{ "insightsValue": { "threshold": "15" } }` — note the nesting under `insightsValue` and that `"10939"` is a string. `Number()` it.
+- **Values are string-encoded integers.** Keyword counts come as `{ "insightsValue": { "value": "10412" } }` or `{ "insightsValue": { "threshold": "15" } }` — note the nesting under `insightsValue` and that `"10412"` is a string. `Number()` it.
 - **Daily-metric zero days omit the value entirely.** A datedValue with no traffic is `{ "date": {"year":2026,"month":5,"day":1} }` — there is no `"value": "0"`. Treat a missing `value` as 0; don't skip the row.
 - **Dates are split objects** (`{year, month, day}`), not ISO strings. Reassemble.
 
 ### Signal patterns (what the data actually looks like)
 
-- **`BUSINESS_DIRECTION_REQUESTS` is the most reliably-populated conversion signal** across every business type — even a tiny roofing contractor logged 66/30d while its website-clicks (2) and call-clicks (1) were near-zero. For local/service businesses it's the headline AEO-conversion proxy, not website clicks.
+- **`BUSINESS_DIRECTION_REQUESTS` is the most reliably-populated conversion signal** across every business type — even a tiny roofing contractor logged 58/30d while its website-clicks (2) and call-clicks (1) were near-zero. For local/service businesses it's the headline AEO-conversion proxy, not website clicks.
 - **Most of the 11 daily metrics are all-zero** for non-retail businesses (`BUSINESS_CONVERSATIONS`, `BUSINESS_BOOKINGS`, `BUSINESS_FOOD_*` were 0 for all three). Syncing all 11 is fine (zeros are cheap) but the dashboard should hide all-zero series.
-- **Impressions skew to Maps for physical-destination businesses.** The hotel pulled 7,402 desktop-maps impressions vs 2,257 desktop-search in 30 days — people find it on Maps.
-- **Keyword thresholding scales with volume.** A busy hotel was ~89% thresholded (its head terms like `hotels`→10,939 had exact values); both small businesses were **100% thresholded** (every keyword redacted). For the typical SMB location, expect zero exact keyword values — design the UI to lead with the `<N` floor, not exact counts.
+- **Impressions skew to Maps for physical-destination businesses.** The hotel pulled 7,150 desktop-maps impressions vs 2,180 desktop-search in 30 days — people find it on Maps.
+- **Keyword thresholding scales with volume.** A busy hotel was ~89% thresholded (its head terms like `hotels`→10,412 had exact values); both small businesses were **100% thresholded** (every keyword redacted). For the typical SMB location, expect zero exact keyword values — design the UI to lead with the `<N` floor, not exact counts.
 - **An empty Lodging resource is the norm, but it does NOT prove the owner set no amenities.** A real operating hotel returned a lodging resource with only `{ "name": ... }` and zero place-action links, yet its GBP "Hotel details" panel had amenities filled in (breakfast, wifi, parking, accessibility). So `populatedGroupCount === 0` means "canonry can't read structured attributes via this API response", not "the hotel has none". Surface the lodging signal as a **verify** (check the "Hotel details" panel), not a confirmed gap. The place-action emptiness is a separate, genuinely owner-readable signal.
-- **The Places cross-reference is a thin slice for hotels, not the full rendered listing.** Run live against the Venice Beach hotel at the Atmosphere tier, Place Details surfaced exactly one structured amenity, `wheelchair accessibility`, even though the rendered Google hotel module advertises far more (wifi, pool, room service, room rates). Those richer fields come from **Hotel Center**, which the Places API does not expose. So a thin or empty `gbp places` amenity list is NOT evidence the public listing is sparse; Places only carries a narrow, schema-bound subset (breakfast, dining, parking, pet-friendly, accessibility, restroom, family-friendly, outdoor seating, reservations). Read `gbp-listing-discrepancy` as a **floor** on the public-vs-owner gap (proof the listing advertises *at least* the named amenities), never a complete inventory. The owner-control point still stands at any size: even one amenity the profile fails to assert is a structured-data gap the operator can close.
+- **The Places cross-reference is a thin slice for hotels, not the full rendered listing.** Run live against the beachfront hotel at the Atmosphere tier, Place Details surfaced exactly one structured amenity, `wheelchair accessibility`, even though the rendered Google hotel module advertises far more (wifi, pool, room service, room rates). Those richer fields come from **Hotel Center**, which the Places API does not expose. So a thin or empty `gbp places` amenity list is NOT evidence the public listing is sparse; Places only carries a narrow, schema-bound subset (breakfast, dining, parking, pet-friendly, accessibility, restroom, family-friendly, outdoor seating, reservations). Read `gbp-listing-discrepancy` as a **floor** on the public-vs-owner gap (proof the listing advertises *at least* the named amenities), never a complete inventory. The owner-control point still stands at any size: even one amenity the profile fails to assert is a structured-data gap the operator can close.
 
 ## Troubleshooting
 

package/dist/{chunk-WL27HO5C.js → chunk-7YGOE4R2.js}

@@ -792,7 +792,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/intelligence-service.ts
 import { eq as eq71, desc as desc32, asc as asc12, and as and60, ne as ne11, or as or18, inArray as inArray27, gte as gte18, lte as lte15, isNull as isNull13, sql as sql28, exists } from "drizzle-orm";
@@ -4841,7 +4841,7 @@ var MIGRATION_VERSIONS = [
       // through the LEFT JOIN forces every value to be either a valid `q.id`
       // or NULL — pre-existing orphans land with NULL `query_id` / NULL
       // `query_text`, preserving the snapshot row instead of failing the
-      // migration. The May 2026 azcoatings DB had 459 such pre-existing
+      // migration. A May 2026 production DB had 459 such pre-existing
       // orphans; without this guard, migrate() throws SQLITE_CONSTRAINT_FOREIGNKEY.
       `INSERT INTO query_snapshots_v58 (
          id, run_id, query_id, query_text, provider, model, citation_state,
@@ -4968,7 +4968,7 @@ var MIGRATION_VERSIONS = [
     version: 63,
     name: "audit-log-attribution-columns",
     // Adds `user_agent` and `actor_session` to `audit_log` so post-mortems
-    // can attribute destructive events (like the 2026-05-15 azcoatings
+    // can attribute destructive events (like the 2026-05-15
     // queries.replaced incident — see PR #593) to a specific caller.
     // Without these columns, every mutation rides as `actor='api'` with no
     // narrower identity, so it's impossible to tell whether a destructive

package/dist/{chunk-TSFKNQ5X.js → chunk-CVUR3O5G.js}

@@ -4,14 +4,14 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-5FKR2K76.js";
+} from "./chunk-PXVJ3P5G.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-XBGPHZKA.js";
+} from "./chunk-JJPZ4OQ2.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-XBGPHZKA.js → chunk-JJPZ4OQ2.js}

@@ -105,7 +105,7 @@ import {
   trafficEventKindSchema,
   trafficSeriesGranularitySchema,
   visibilityReportRequestSchema
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/cli-error.ts
 function isMachineFormat(format) {

package/dist/{chunk-4PENJKRN.js → chunk-KHNPBUUN.js}

@@ -5,12 +5,12 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-7YGOE4R2.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
   TEMPLATE_LINK_RATIO_THRESHOLD
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/site-crawl-graph-layout.ts
 import crypto from "crypto";

package/dist/{chunk-5FKR2K76.js → chunk-PXVJ3P5G.js}

@@ -5,7 +5,7 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-XBGPHZKA.js";
+} from "./chunk-JJPZ4OQ2.js";
 import {
   AGENT_PROVIDER_IDS,
   CANONRY_NPM_PACKAGE_URL,
@@ -37,7 +37,7 @@ import {
   skillsClientSchema,
   upgradeCaveatFor,
   upgradeCommandFor
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/config.ts
 import fs from "fs";

package/dist/{chunk-DRZWMFRV.js → chunk-RV3PYKXP.js}

@@ -13,19 +13,19 @@ import {
   resolveOperatorApiKeyIds,
   runWithUsageTags,
   saveConfigPatch
-} from "./chunk-5FKR2K76.js";
+} from "./chunk-PXVJ3P5G.js";
 import {
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout
-} from "./chunk-4PENJKRN.js";
+} from "./chunk-KHNPBUUN.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-XBGPHZKA.js";
+} from "./chunk-JJPZ4OQ2.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -186,7 +186,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-7YGOE4R2.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -223,6 +223,8 @@ import {
   RUN_FILL_PROVIDER_BREAKER,
   ResearchQueryStatuses,
   ResearchRunStatuses,
+  RetrievalContracts,
+  RetrievalStatuses,
   RunKinds,
   RunStatuses,
   RunTriggers,
@@ -351,7 +353,7 @@ import {
   visibilityReportRequestSchema,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -4076,6 +4078,7 @@ async function withRetry3(fn, options = {}) {
 
 // ../provider-openai/src/normalize.ts
 var DEFAULT_MODEL2 = "gpt-5.4";
+var OPENAI_RETRIEVAL_CONTRACT = RetrievalContracts["search-required-v1"];
 function createClient3(config) {
   return new OpenAI({
     apiKey: config.apiKey,
@@ -4138,6 +4141,8 @@ async function executeTrackedQuery2(input) {
       () => client.responses.create({
         model,
         tools: [webSearchTool],
+        // search-required-v1: web_search is the only tool, so requiring a tool
+        // call requires a search. See OPENAI_RETRIEVAL_CONTRACT.
         tool_choice: "required",
         input: buildPrompt2(input.query)
       })
@@ -4150,7 +4155,9 @@ async function executeTrackedQuery2(input) {
       model,
       servedModel: extractServedModel2(rawResponse),
       groundingSources: parsed.groundingSources,
-      searchQueries: parsed.searchQueries
+      searchQueries: parsed.searchQueries,
+      retrievalStatus: parsed.retrievalStatus,
+      retrievalContract: OPENAI_RETRIEVAL_CONTRACT
     };
   } catch (err) {
     const msg = describeError(err);
@@ -4168,7 +4175,8 @@ function normalizeResult2(raw) {
     answerText: parsed.answerText,
     citedDomains,
     groundingSources,
-    searchQueries
+    searchQueries,
+    retrievalStatus: useParsed ? parsed.retrievalStatus : raw.retrievalStatus
   };
 }
 function hasParsedResponseContent2(rawResponse) {
@@ -4185,9 +4193,22 @@ function reparseStoredResult2(rawResponse) {
     answerText: extractAnswerTextFromRaw(rawResponse),
     citedDomains: extractCitedDomainsFromSources2(groundingSources),
     groundingSources,
-    searchQueries
+    searchQueries,
+    retrievalStatus: extractRetrievalStatusFromRaw(rawResponse)
   };
 }
+function extractRetrievalStatusFromRaw(rawResponse) {
+  const output = rawResponse.output;
+  if (!Array.isArray(output) || output.length === 0) return RetrievalStatuses.unknown;
+  const searched = output.some(
+    (item) => item !== null && typeof item === "object" && item.type === "web_search_call"
+  );
+  if (searched) return RetrievalStatuses.used;
+  if (typeof rawResponse.status === "string" && rawResponse.status !== "completed") {
+    return RetrievalStatuses.unknown;
+  }
+  return RetrievalStatuses["not-used"];
+}
 function buildPrompt2(query) {
   return query;
 }
@@ -4402,13 +4423,12 @@ var openaiAdapter = {
       servedModel: raw.servedModel,
       groundingSources: raw.groundingSources,
       searchQueries: raw.searchQueries,
-      // Retrieval detection is not implemented for this provider. Its candidate
-      // marker is present on 100% of stored rows, so it has never been shown to
-      // discriminate a non-retrieving answer and wiring it up would hardcode
-      // `used`. `unknown` states what we actually know. The contract is a
-      // declaration about how we build the request, so it is always knowable.
-      retrievalStatus: "unknown",
-      retrievalContract: "native-auto-v1"
+      // Read from the response's `web_search_call` items. Under forced search
+      // nearly every row reads `used`; that is the contract holding, and a
+      // `not-used` row is the visible breach, so the observation still
+      // discriminates. The contract declares how the request was built.
+      retrievalStatus: raw.retrievalStatus,
+      retrievalContract: raw.retrievalContract
     };
   },
   normalizeResult(raw) {
@@ -4417,7 +4437,11 @@ var openaiAdapter = {
       rawResponse: raw.rawResponse,
       model: raw.model,
       groundingSources: raw.groundingSources,
-      searchQueries: raw.searchQueries
+      searchQueries: raw.searchQueries,
+      // A reconstruction that predates the field falls back to `unknown`
+      // rather than asserting an absence.
+      retrievalStatus: raw.retrievalStatus ?? RetrievalStatuses.unknown,
+      retrievalContract: raw.retrievalContract ?? OPENAI_RETRIEVAL_CONTRACT
     };
     const normalized = normalizeResult2(openaiRaw);
     return {
@@ -4426,7 +4450,7 @@ var openaiAdapter = {
       citedDomains: normalized.citedDomains,
       groundingSources: normalized.groundingSources,
       searchQueries: normalized.searchQueries,
-      retrievalStatus: "unknown"
+      retrievalStatus: normalized.retrievalStatus
     };
   },
   async generateText(prompt, config) {
@@ -4591,7 +4615,7 @@ function reparseStoredResult3(rawResponse) {
     citedDomains: extractCitedDomainsFromSources3(groundingSources),
     groundingSources,
     searchQueries,
-    retrievalStatus: extractRetrievalStatusFromRaw(rawResponse),
+    retrievalStatus: extractRetrievalStatusFromRaw2(rawResponse),
     ...providerErrors.length > 0 ? { providerError: `web_search tool error: ${providerErrors.join(", ")}` } : {}
   };
 }
@@ -4631,7 +4655,7 @@ function extractGroundingSourcesFromRaw2(rawResponse) {
   }
   return sources;
 }
-function extractRetrievalStatusFromRaw(rawResponse) {
+function extractRetrievalStatusFromRaw2(rawResponse) {
   try {
     const content = rawResponse.content;
     if (!Array.isArray(content) || content.length === 0) return "unknown";
@@ -6604,7 +6628,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "b5366056cfff6f0e275fe651252cfa1961bf40a9" : void 0;
+  const embedded = true ? "b00090f58284f63906eba753cace2b96a166ccfd" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -11720,6 +11744,7 @@ async function backfillAnswerVisibilityCommand(opts) {
   let mentioned = 0;
   let reparsed = 0;
   let providerErrors = 0;
+  let retrievalRelabeled = 0;
   if (scopedProjects.length > 0) {
     const runRows = projectFilter ? db.select({ id: runs.id, projectId: runs.projectId, planVersionId: runs.measurementPlanVersionId }).from(runs).where(and13(
       eq15(runs.kind, RunKinds["answer-visibility"]),
@@ -11758,7 +11783,9 @@ async function backfillAnswerVisibilityCommand(opts) {
           citedDomains: querySnapshots.citedDomains,
           competitorOverlap: querySnapshots.competitorOverlap,
           recommendedCompetitors: querySnapshots.recommendedCompetitors,
-          rawResponse: querySnapshots.rawResponse
+          rawResponse: querySnapshots.rawResponse,
+          retrievalStatus: querySnapshots.retrievalStatus,
+          retrievalContract: querySnapshots.retrievalContract
         }).from(querySnapshots).where(inArray6(querySnapshots.runId, batchRunIds)).all();
         const pendingUpdates = [];
         for (const snapshot of snapshotRows) {
@@ -11783,10 +11810,9 @@ async function backfillAnswerVisibilityCommand(opts) {
               citedDomains: reparsedResult.citedDomains,
               groundingSources: reparsedResult.groundingSources,
               searchQueries: reparsedResult.searchQueries,
-              // Backfill recomputes mention and citation state from stored
-              // rows; it never observes retrieval and never writes it back
-              // (nextPatch carries no retrieval field). `unknown` keeps this
-              // reconstruction from asserting anything about a search.
+              // Only feeds the citation/mention helpers below, which ignore
+              // it. Retrieval is written back solely by the narrow OpenAI
+              // contract correction after this block.
               retrievalStatus: "unknown"
             };
             const nextCitationState = determineCitationState(normalized, projectDomains);
@@ -11821,6 +11847,11 @@ async function backfillAnswerVisibilityCommand(opts) {
               nextPatch.rawResponse = nextRawResponse;
             }
           }
+          const retrievalCorrection = correctStoredOpenAIRetrieval(snapshot, reparsedResult);
+          if (retrievalCorrection) {
+            retrievalRelabeled++;
+            Object.assign(nextPatch, retrievalCorrection);
+          }
           if (Object.keys(nextPatch).length > 0) {
             pendingUpdates.push({ id: snapshot.id, patch: nextPatch });
           }
@@ -11847,7 +11878,8 @@ async function backfillAnswerVisibilityCommand(opts) {
     updated,
     mentioned,
     reparsed,
-    providerErrors
+    providerErrors,
+    retrievalRelabeled
   };
   if (isDryRun) {
     result2.dryRun = true;
@@ -11872,6 +11904,7 @@ async function backfillAnswerVisibilityCommand(opts) {
   console.log(`  Mentioned:    ${mentioned}`);
   console.log(`  Reparsed:     ${reparsed}`);
   console.log(`  Errors:       ${providerErrors}`);
+  console.log(`  Relabeled:    ${retrievalRelabeled} (OpenAI retrieval contract)`);
   if (isDryRun) {
     console.log(`
 No DB writes performed. Re-run without --dry-run to apply.`);
@@ -12072,7 +12105,8 @@ function backfillProjectAnswerMentions(db, projectId, opts) {
         answerText,
         citedDomains,
         groundingSources,
-        // See the note above: retrieval is not observed or written here.
+        // Only feeds the competitor helpers, which ignore it. This pass never
+        // observes or writes retrieval.
         retrievalStatus: "unknown",
         searchQueries: []
       };
@@ -12181,7 +12215,7 @@ function readStoredGroundingSources(rawResponse) {
   return result2;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-MKHINDHN.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-H4LGPJLZ.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -12470,6 +12504,14 @@ Snapshot attribution ${isDryRun ? "preview" : "recovery"} complete.`);
 No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
+function correctStoredOpenAIRetrieval(snapshot, reparsed) {
+  if (snapshot.provider !== ProviderNames.openai) return null;
+  if (snapshot.retrievalContract !== RetrievalContracts["native-auto-v1"]) return null;
+  return {
+    retrievalContract: OPENAI_RETRIEVAL_CONTRACT,
+    ...reparsed?.retrievalStatus === void 0 ? {} : { retrievalStatus: reparsed.retrievalStatus }
+  };
+}
 function reparseProviderSnapshot(provider, rawResponse) {
   const envelope = parseJsonColumn(rawResponse, {});
   const apiResponse = resolveStoredApiResponse(envelope);

package/dist/{chunk-QF7SY7AF.js → chunk-TOSPZ7I5.js}

@@ -19737,6 +19737,8 @@ export {
   buildMeasurementRunManifestV1,
   measurementReportResponseSchema,
   measurementPropertyEvidenceResponseSchema,
+  RetrievalStatuses,
+  RetrievalContracts,
   MEASUREMENT_PORTFOLIO_DEFAULT_LIMIT,
   MEASUREMENT_PORTFOLIO_ROW_EVIDENCE_LIMIT,
   MEASUREMENT_PORTFOLIO_ANSWER_SOURCES_LIMIT,

package/dist/cli.js

@@ -35,11 +35,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-DRZWMFRV.js";
+} from "./chunk-RV3PYKXP.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-TSFKNQ5X.js";
+} from "./chunk-CVUR3O5G.js";
 import {
   configExists,
   createApiClient,
@@ -56,13 +56,13 @@ import {
   saveConfig,
   saveConfigPatch,
   shouldPrintServeSkillsNudge
-} from "./chunk-5FKR2K76.js";
+} from "./chunk-PXVJ3P5G.js";
 import {
   DEFAULT_DEMO_TRUSTED_PROXIES,
   trustedProxiesProblem,
   trustedProxyProblem
 } from "./chunk-RB2F4D3Z.js";
-import "./chunk-4PENJKRN.js";
+import "./chunk-KHNPBUUN.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -74,7 +74,7 @@ import {
   runMeasurementDraftAction,
   systemError,
   usageError
-} from "./chunk-XBGPHZKA.js";
+} from "./chunk-JJPZ4OQ2.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
@@ -89,7 +89,7 @@ import {
   queries,
   renderReportHtml,
   runs
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-7YGOE4R2.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -177,7 +177,7 @@ import {
   snapshotProviderModeSchema,
   visibilityReportRequestSchema,
   winnabilityClassSchema
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/cli.ts
 import { pathToFileURL } from "url";
@@ -442,7 +442,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-OCBV5OMS.js");
+  const { createDemoServer } = await import("./demo-server-JYDAUEP2.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-OCBV5OMS.js → demo-server-JYDAUEP2.js}

@@ -4,11 +4,11 @@ import {
 import {
   layoutSiteCrawlGraphInput,
   persistSiteCrawlGraphLayout
-} from "./chunk-4PENJKRN.js";
+} from "./chunk-KHNPBUUN.js";
 import {
   PACKAGE_VERSION,
   canonryMcpTools
-} from "./chunk-XBGPHZKA.js";
+} from "./chunk-JJPZ4OQ2.js";
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService,
@@ -84,7 +84,7 @@ import {
   siteCrawlPages,
   siteCrawlSnapshots,
   trafficSources
-} from "./chunk-WL27HO5C.js";
+} from "./chunk-7YGOE4R2.js";
 import {
   RunKinds,
   SiteCrawlFetchStates,
@@ -108,7 +108,7 @@ import {
   placementLinkDecision,
   siteAuditPageFactorSchema,
   wilsonInterval
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/demo-server.ts
 import { dirname, join as join2 } from "path";

package/dist/index.js

@@ -3,14 +3,14 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-DRZWMFRV.js";
+} from "./chunk-RV3PYKXP.js";
 import {
   loadConfig
-} from "./chunk-5FKR2K76.js";
-import "./chunk-4PENJKRN.js";
-import "./chunk-XBGPHZKA.js";
-import "./chunk-WL27HO5C.js";
-import "./chunk-QF7SY7AF.js";
+} from "./chunk-PXVJ3P5G.js";
+import "./chunk-KHNPBUUN.js";
+import "./chunk-JJPZ4OQ2.js";
+import "./chunk-7YGOE4R2.js";
+import "./chunk-TOSPZ7I5.js";
 export {
   GoogleMarketingRuntimeError,
   createGoogleMarketingCredentialStore,

package/dist/{intelligence-service-MKHINDHN.js → intelligence-service-H4LGPJLZ.js}

@@ -1,8 +1,8 @@
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-WL27HO5C.js";
-import "./chunk-QF7SY7AF.js";
+} from "./chunk-7YGOE4R2.js";
+import "./chunk-TOSPZ7I5.js";
 export {
   HISTORY_WINDOW_RUNS,
   IntelligenceService

package/dist/mcp.js

@@ -1,15 +1,15 @@
 import {
   autoSyncSkills
-} from "./chunk-TSFKNQ5X.js";
+} from "./chunk-CVUR3O5G.js";
 import {
   createApiClient,
   createCanonryMcpServer
-} from "./chunk-5FKR2K76.js";
-import "./chunk-XBGPHZKA.js";
+} from "./chunk-PXVJ3P5G.js";
+import "./chunk-JJPZ4OQ2.js";
 import {
   isReadOnlyKey,
   updateCheckEnvOptOut
-} from "./chunk-QF7SY7AF.js";
+} from "./chunk-TOSPZ7I5.js";
 
 // src/mcp/cli.ts
 import { randomUUID } from "crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "5.20.0",
+  "version": "5.20.2",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "keywords": [
@@ -89,29 +89,29 @@
     "@ainyc/canonry-web": "0.0.0",
     "@ainyc/canonry-api-routes": "0.0.0",
     "@ainyc/canonry-api-client": "0.0.0",
-    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-config": "0.0.0",
+    "@ainyc/canonry-contracts": "0.0.0",
     "@ainyc/canonry-db": "0.0.0",
     "@ainyc/canonry-integration-bing": "0.0.0",
     "@ainyc/canonry-integration-cloud-run": "0.0.0",
     "@ainyc/canonry-integration-cloudflare-queue": "0.0.0",
-    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
     "@ainyc/canonry-integration-commoncrawl": "0.0.0",
     "@ainyc/canonry-integration-google-ads": "0.0.0",
     "@ainyc/canonry-integration-google-business-profile": "0.0.0",
+    "@ainyc/canonry-integration-google": "0.0.0",
+    "@ainyc/canonry-integration-cloudflare-worker": "0.0.0",
+    "@ainyc/canonry-integration-google-places": "0.0.0",
     "@ainyc/canonry-integration-google-tag-manager": "0.0.0",
     "@ainyc/canonry-integration-traffic": "0.0.0",
-    "@ainyc/canonry-integration-openai-ads": "0.0.0",
-    "@ainyc/canonry-integration-google": "0.0.0",
     "@ainyc/canonry-integration-wordpress": "0.0.0",
-    "@ainyc/canonry-intelligence": "0.0.0",
-    "@ainyc/canonry-integration-google-places": "0.0.0",
-    "@ainyc/canonry-provider-claude": "0.0.0",
     "@ainyc/canonry-provider-cdp": "0.0.0",
     "@ainyc/canonry-provider-gemini": "0.0.0",
+    "@ainyc/canonry-integration-openai-ads": "0.0.0",
+    "@ainyc/canonry-intelligence": "0.0.0",
     "@ainyc/canonry-provider-local": "0.0.0",
     "@ainyc/canonry-provider-perplexity": "0.0.0",
-    "@ainyc/canonry-provider-openai": "0.0.0"
+    "@ainyc/canonry-provider-openai": "0.0.0",
+    "@ainyc/canonry-provider-claude": "0.0.0"
   },
   "scripts": {
     "build": "pnpm run build:cli && pnpm run build:web",