@canonry/canonry 5.21.0 → 5.28.1

package/dist/{chunk-FRWZWJB3.js → chunk-FNGITGDF.js}

@@ -5,12 +5,14 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-WUT3G2GM.js";
+} from "./chunk-MPICT6V7.js";
 import {
   AGENT_PROVIDER_IDS,
   CANONRY_NPM_PACKAGE_URL,
   CodingAgents,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
+  OPERATIONAL_LOG_FIELDS_HEADER,
+  OPERATIONAL_LOG_OPT_IN_CONTEXT_FIELDS,
   RESEARCH_RUN_SCOPE,
   SKILL_MANIFEST_FILENAME,
   SkillsClients,
@@ -30,6 +32,9 @@ import {
   isStrictSemver,
   normalizeAgentSlug,
   normalizeTelemetryStatus,
+  operationalLogListReadSchema,
+  providerBatchConfigSchema,
+  providerPricingSchema,
   providerQuotaPolicySchema,
   resolveProviderModel,
   restrictedWriteScopes,
@@ -37,7 +42,7 @@ import {
   skillsClientSchema,
   upgradeCaveatFor,
   upgradeCommandFor
-} from "./chunk-2LO7FLVD.js";
+} from "./chunk-KVQHG3WB.js";
 
 // src/config.ts
 import fs from "fs";
@@ -99,6 +104,13 @@ var envSchema = z.object({
   PERPLEXITY_MAX_CONCURRENCY: z.coerce.number().int().positive().default(2),
   PERPLEXITY_MAX_REQUESTS_PER_MINUTE: z.coerce.number().int().positive().default(10),
   PERPLEXITY_MAX_REQUESTS_PER_DAY: z.coerce.number().int().positive().default(1e3),
+  // Meta Muse
+  MUSE_API_KEY: z.string().optional(),
+  MUSE_MODEL: z.string().optional(),
+  MUSE_BASE_URL: z.string().optional(),
+  MUSE_MAX_CONCURRENCY: z.coerce.number().int().positive().default(2),
+  MUSE_MAX_REQUESTS_PER_MINUTE: z.coerce.number().int().positive().default(10),
+  MUSE_MAX_REQUESTS_PER_DAY: z.coerce.number().int().positive().default(1e3),
   // Secret for HMAC-signing Google OAuth state parameters. Required for
   // cloud deployments that mount googleRoutes; the plugin refuses to register
   // without it (see packages/api-routes/src/google.ts).
@@ -123,6 +135,9 @@ var bootstrapEnvSchema = z.object({
   ANTHROPIC_MODEL: z.string().optional(),
   PERPLEXITY_API_KEY: z.string().optional(),
   PERPLEXITY_MODEL: z.string().optional(),
+  MUSE_API_KEY: z.string().optional(),
+  MUSE_MODEL: z.string().optional(),
+  MUSE_BASE_URL: z.string().optional(),
   LOCAL_BASE_URL: z.string().optional(),
   LOCAL_API_KEY: z.string().optional(),
   LOCAL_MODEL: z.string().optional(),
@@ -182,6 +197,19 @@ function getBootstrapEnv(source, overrides) {
       })
     };
   }
+  const museKey = parsed.MUSE_API_KEY?.trim();
+  if (museKey) {
+    providers.muse = {
+      apiKey: museKey,
+      model: parsed.MUSE_MODEL?.trim() || "muse-spark-1.3",
+      baseUrl: parsed.MUSE_BASE_URL?.trim() || void 0,
+      quota: providerQuotaPolicySchema.parse({
+        maxConcurrency: 2,
+        maxRequestsPerMinute: 10,
+        maxRequestsPerDay: 500
+      })
+    };
+  }
   if (parsed.LOCAL_BASE_URL) {
     providers.local = {
       baseUrl: parsed.LOCAL_BASE_URL,
@@ -204,6 +232,63 @@ function getBootstrapEnv(source, overrides) {
   };
 }
 
+// src/provider-batch-config.ts
+function issuesText(issues) {
+  return issues.map((issue) => issue.path.length ? `${issue.path.join(".")}: ${issue.message}` : issue.message).join("; ");
+}
+function normalizeProviderBatchSettings(providers, configPath) {
+  for (const [name, entry] of Object.entries(providers ?? {})) {
+    if (!entry) continue;
+    if (entry.batch !== void 0) {
+      const parsed = providerBatchConfigSchema.safeParse(entry.batch);
+      if (!parsed.success) {
+        throw new CliError({
+          code: "CONFIG_INVALID",
+          message: `Invalid config at ${configPath}: providers.${name}.batch is invalid (${issuesText(parsed.error.issues)}). Allowed keys: enabled (true/false), maxRequestsPerBatch (positive integer), deadlineHours (positive number).`
+        });
+      }
+      entry.batch = parsed.data;
+    }
+    if (entry.pricing !== void 0) {
+      const parsed = providerPricingSchema.safeParse(entry.pricing);
+      if (!parsed.success) {
+        throw new CliError({
+          code: "CONFIG_INVALID",
+          message: `Invalid config at ${configPath}: providers.${name}.pricing is invalid (${issuesText(parsed.error.issues)}). Prices are USD: inputPerMTok / cachedInputPerMTok / cacheWritePerMTok / outputPerMTok per million tokens, searchPer1k per 1,000 searches.`
+        });
+      }
+      entry.pricing = parsed.data;
+    }
+  }
+}
+function providerConfigFromEntry(name, entry, quotaPolicy) {
+  return {
+    provider: name,
+    apiKey: entry.apiKey,
+    baseUrl: entry.baseUrl,
+    model: entry.model,
+    quotaPolicy,
+    vertexProject: entry.vertexProject,
+    vertexRegion: entry.vertexRegion,
+    vertexCredentials: entry.vertexCredentials,
+    ...entry.batch ? { batch: entry.batch } : {},
+    ...entry.pricing ? { pricing: entry.pricing } : {}
+  };
+}
+function adapterSupportsBatch(adapter) {
+  return adapter.batch !== void 0 && adapter.buildTrackedQueryRequest !== void 0 && adapter.parseTrackedQueryResponse !== void 0;
+}
+function batchEligibleProviderNames(registry) {
+  return registry.getAll().filter((provider) => provider.config.batch?.enabled === true && adapterSupportsBatch(provider.adapter)).map((provider) => provider.adapter.name).sort();
+}
+function providersWithUnsupportedBatch(providers, adapterFor) {
+  return Object.entries(providers ?? {}).filter(([name, entry]) => {
+    if (entry?.batch?.enabled !== true) return false;
+    const adapter = adapterFor(name);
+    return adapter !== void 0 && !adapterSupportsBatch(adapter);
+  }).map(([name]) => name).sort();
+}
+
 // src/config.ts
 function normalizeGoogleConfig(config) {
   if (!config.google) return;
@@ -343,6 +428,7 @@ Do not use "canonry init --force" for recovery. It replaces credentials without
       }
     };
   }
+  normalizeProviderBatchSettings(parsed.providers, configPath);
   normalizeGoogleConfig(parsed);
   normalizeGoogleMarketingConfig(parsed);
   normalizeWordpressConfig(parsed);
@@ -3655,6 +3741,18 @@ var getApiV1ProjectsByNameGoogleGscTopPages = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameGoogleGscQueryTotals = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/google/gsc/query-totals",
+    ...options
+  });
+};
 var postApiV1ProjectsByNameGoogleGscInspect = (options) => {
   return (options.client ?? client).post({
     security: [
@@ -3931,6 +4029,18 @@ var getApiV1ProjectsByNameGbpPlaces = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameGbpReviews = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/gbp/reviews",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameGbpSummary = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -5515,6 +5625,18 @@ var getApiV1ProjectsByNameTrafficSourcesById = (options) => {
     ...options
   });
 };
+var getApiV1ProjectsByNameTrafficReferralAssessment = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/traffic/referral-assessment",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameTrafficEvents = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -7157,8 +7279,18 @@ var ApiClient = class {
   async getTelemetry() {
     return normalizeTelemetryStatus(await this.invoke(() => getApiV1Telemetry({ client: this.heyClient })));
   }
+  /**
+   * Asks for every opt-in context field this build can read (older servers
+   * ignore the header), then reads the page with the tolerant schema, so a
+   * field added by a newer server is dropped rather than rejecting the page.
+   */
   async listOperationalLogs(query = {}) {
-    return this.invoke(() => getApiV1OperationsLogs({ client: this.heyClient, query }));
+    const page = await this.invoke(() => getApiV1OperationsLogs({
+      client: this.heyClient,
+      query,
+      headers: { [OPERATIONAL_LOG_FIELDS_HEADER]: OPERATIONAL_LOG_OPT_IN_CONTEXT_FIELDS.join(",") }
+    }));
+    return operationalLogListReadSchema.parse(page);
   }
   async updateTelemetry(enabled) {
     return normalizeTelemetryStatus(await this.invoke(() => putApiV1Telemetry({ client: this.heyClient, body: { enabled } })));
@@ -7830,6 +7962,19 @@ var ApiClient = class {
       })
     );
   }
+  async listGbpReviews(project, opts) {
+    const query = {};
+    if (opts?.locationName) query.locationName = opts.locationName;
+    if (opts?.negative !== void 0) query.negative = String(opts.negative);
+    if (opts?.limit !== void 0) query.limit = String(opts.limit);
+    return this.invoke(
+      () => getApiV1ProjectsByNameGbpReviews({
+        client: this.heyClient,
+        path: { name: project },
+        query: Object.keys(query).length > 0 ? query : void 0
+      })
+    );
+  }
   async getGbpSummary(project, opts) {
     return this.invoke(
       () => getApiV1ProjectsByNameGbpSummary({
@@ -7876,6 +8021,15 @@ var ApiClient = class {
       })
     );
   }
+  async gscQueryTotals(project, params) {
+    return this.invoke(
+      () => getApiV1ProjectsByNameGoogleGscQueryTotals({
+        client: this.heyClient,
+        path: { name: project },
+        query: params
+      })
+    );
+  }
   async gscInspect(project, url) {
     return this.invoke(
       () => postApiV1ProjectsByNameGoogleGscInspect({
@@ -8250,6 +8404,13 @@ var ApiClient = class {
       })
     );
   }
+  async trafficReferralAssessment(project, query) {
+    return this.invoke(() => getApiV1ProjectsByNameTrafficReferralAssessment({
+      client: this.heyClient,
+      path: { name: project },
+      query
+    }));
+  }
   async trafficListEvents(project, params) {
     return this.invoke(
       () => getApiV1ProjectsByNameTrafficEvents({
@@ -8846,7 +9007,10 @@ var ApiClient = class {
     );
   }
   async runDoctor(opts = {}) {
-    const checkQuery = opts.checkIds && opts.checkIds.length > 0 ? { check: opts.checkIds.join(",") } : void 0;
+    const checkQuery = {
+      ...opts.checkIds?.length ? { check: opts.checkIds.join(",") } : {},
+      ...opts.reportMonth ? { reportMonth: opts.reportMonth } : {}
+    };
     if (opts.project) {
       return this.invoke(
         () => getApiV1ProjectsByNameDoctor({
@@ -9138,7 +9302,7 @@ var CANONRY_MCP_TOOLKITS = [
   {
     name: "gsc",
     title: "Google Search Console",
-    description: "Read GSC performance, inspections, coverage, sitemaps, and deindexed URLs.",
+    description: "Read GSC performance, per-query totals, inspections, coverage, sitemaps, and deindexed URLs.",
     whenToLoad: "Load when you need indexing, coverage, or sitemap data from Google Search Console."
   },
   {
@@ -9150,7 +9314,7 @@ var CANONRY_MCP_TOOLKITS = [
   {
     name: "gbp",
     title: "Google Business Profile",
-    description: "Local AEO signals: discover GBP locations under a connected account and toggle which ones sync. Future phases will add reviews, keyword impressions, daily performance metrics, and hotel attributes.",
+    description: "Local AEO signals: discover GBP locations under a connected account and toggle which ones sync, then read daily performance metrics, search keywords, booking links, hotel and owner-set attributes, the public Places listing, and reviews with their alert state.",
     whenToLoad: "Load when the project tracks local search visibility or has connected Google Business Profile."
   },
   {
@@ -9180,8 +9344,8 @@ var CANONRY_MCP_TOOLKITS = [
   {
     name: "traffic",
     title: "Server-side traffic ingestion",
-    description: "Connect Cloud Run traffic sources, trigger syncs, and read crawler / AI-referral hourly rollups straight from server logs (no GA dependency).",
-    whenToLoad: "Load when you need server-log evidence of crawler hits or AI-referral sessions (e.g. confirming GPTBot or ChatGPT-User on a page), or when wiring up / syncing a Cloud Run traffic source."
+    description: "Read crawler / AI-referral hourly rollups straight from server logs (no GA dependency), assess AI-referral bursts from stored evidence (raw counts, candidate bursts, a separate adjusted estimate, coverage limits), connect Cloud Run / WordPress / Vercel sources, trigger syncs, and backfill Cloud Run / Vercel windows.",
+    whenToLoad: "Load when you need server-log evidence of crawler hits or AI-referral sessions (e.g. confirming GPTBot or ChatGPT-User on a page), when reviewing candidate AI-referral bursts before quoting server-side AI referral totals, or when wiring up / syncing a traffic source."
   },
   {
     name: "agent",
@@ -9982,6 +10146,10 @@ export {
   dashboardManagedRunKindsSchema,
   resolveOperatorApiKeyIds,
   getBootstrapEnv,
+  providerConfigFromEntry,
+  adapterSupportsBatch,
+  batchEligibleProviderNames,
+  providersWithUnsupportedBatch,
   getConfigDir,
   getConfigPath,
   loadConfig,