@canonry/canonry 5.33.0 → 6.0.0

package/dist/{chunk-SJX7XJB6.js → chunk-HAALQW4R.js}

@@ -3455,6 +3455,9 @@ function brandLabelFromDomain(value) {
   if (value == null || value.trim() === "") return "";
   return getDomainWithoutSuffix2(value, DOMAIN_PARSE_OPTIONS)?.toLowerCase() ?? "";
 }
+function competitorLabelFromDomain(domain) {
+  return brandLabelFromDomain(domain) || domain;
+}
 function hostMatchesDomain(candidate, domain) {
   const candidateHost = hostOf(candidate);
   const domainHost = hostOf(domain);
@@ -4126,6 +4129,8 @@ function resolveLocations(projectLocations, requestedLabels) {
   }
   return resolved;
 }
+var PROJECT_QUALIFIED_ALIAS_LIMIT = 20;
+var PROJECT_QUALIFIED_ALIAS_MAX_LENGTH = 200;
 var projectUpsertRequestSchema = z7.object({
   displayName: z7.string().min(1),
   canonicalDomain: z7.string().min(1),
@@ -4146,6 +4151,12 @@ var projectUpsertRequestSchema = z7.object({
   defaultLocation: z7.string().nullable().optional(),
   measurement: measurementConfigSchema.optional(),
   autoExtractBacklinks: z7.boolean().optional(),
+  /**
+   * Aliases the sentiment evaluator is told are this brand's own names. Each
+   * entry must already be one of `aliases`. Omitted keeps the stored list,
+   * minus names that no longer qualify; `[]` clears.
+   */
+  qualifiedAliases: z7.array(z7.string().trim().min(1).max(PROJECT_QUALIFIED_ALIAS_MAX_LENGTH)).max(PROJECT_QUALIFIED_ALIAS_LIMIT).optional(),
   /**
    * Highest star rating that counts as a negative Google review for this
    * project's `review.negative` webhook (1-4). Omit to keep the stored value;
@@ -4167,6 +4178,8 @@ var projectDtoSchema = z7.object({
   canonicalDomain: z7.string(),
   ownedDomains: z7.array(z7.string()).default([]),
   aliases: z7.array(z7.string()).default([]),
+  /** Operator-chosen subset of `aliases` that Simple sentiment treats as this brand's own names. */
+  qualifiedAliases: z7.array(z7.string()).default([]),
   country: z7.string().length(2),
   language: z7.string().min(2),
   tags: z7.array(z7.string()).default([]),
@@ -4259,6 +4272,40 @@ function normalizeProjectAliases(displayName, aliases) {
   }
   return result;
 }
+function resolveProjectQualifiedAliases(identity, requested, competitorNames = []) {
+  const stored = /* @__PURE__ */ new Map();
+  for (const alias of normalizeProjectAliases(identity.displayName, identity.aliases)) {
+    stored.set(alias.toLowerCase(), alias);
+  }
+  const displayKey = brandKeyFromText(identity.displayName ?? "");
+  const competitorKeys = new Set(competitorNames.map(brandKeyFromText).filter((key) => key.length > 0));
+  const value = [];
+  const rejected = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of requested ?? []) {
+    const name = raw.trim();
+    if (!name) continue;
+    const lower = name.toLowerCase();
+    if (seen.has(lower)) continue;
+    seen.add(lower);
+    const alias = stored.get(lower);
+    if (alias === void 0) {
+      rejected.push({ name, reason: "not-an-alias" });
+      continue;
+    }
+    const key = brandKeyFromText(alias);
+    if (displayKey && key === displayKey) {
+      rejected.push({ name, reason: "display-name" });
+    } else if (key.length < MIN_DOMAIN_BRAND_KEY_LENGTH) {
+      rejected.push({ name, reason: "too-short" });
+    } else if (competitorKeys.has(key)) {
+      rejected.push({ name, reason: "competitor-collision" });
+    } else {
+      value.push(alias);
+    }
+  }
+  return { value: value.sort(), rejected };
+}
 function effectiveBrandNames(project) {
   const names = [];
   const seen = /* @__PURE__ */ new Set();
@@ -6558,6 +6605,10 @@ var configSpecSchema = z16.object({
   canonicalDomain: z16.string().min(1),
   ownedDomains: z16.array(z16.string().min(1)).optional().default([]),
   aliases: z16.array(z16.string().min(1)).optional().default([]),
+  // No default on purpose: an apply that omits it keeps the project's stored
+  // list, minus names that no longer qualify against this spec's `aliases`,
+  // display name and competitors. Each entry must be an alias.
+  qualifiedAliases: z16.array(z16.string().min(1).max(PROJECT_QUALIFIED_ALIAS_MAX_LENGTH)).max(PROJECT_QUALIFIED_ALIAS_LIMIT).optional(),
   country: z16.string().length(2),
   language: z16.string().min(2),
   queries: configQueryListSchema.optional(),
@@ -6623,7 +6674,12 @@ var simpleMeasurementIdentitySchema = z17.object({
   displayName: z17.string(),
   aliases: z17.array(z17.string()),
   canonicalDomain: z17.string(),
-  ownedDomains: z17.array(z17.string())
+  ownedDomains: z17.array(z17.string()),
+  // Sentiment-only: the aliases the evaluator is told are this brand's own
+  // names. Omitted when empty, so a sidecar that never opted in keeps its
+  // checksum. No bounds or matcher rules here: a later change to the write
+  // rules must never make a stored sidecar unreadable.
+  qualifiedAliases: z17.array(z17.string()).optional()
 }).strict();
 var simpleMeasurementEngineSchema = z17.object({
   provider: providerNameSchema.refine((value) => value.trim().length > 0, {
@@ -6711,9 +6767,17 @@ var simpleMeasurementDefinitionSchema = z17.object({
   competitors: z17.array(simpleMeasurementCompetitorSchema).optional(),
   queries: z17.array(simpleMeasurementQuerySchema)
 }).strict().superRefine(addCollectionIssues);
+function simpleMeasurementCompetitorNames(competitors) {
+  return competitors?.flatMap((competitor) => [competitor.label, ...competitor.aliases]) ?? [];
+}
 function buildSimpleMeasurementDefinition(input) {
   const parsed = simpleMeasurementDefinitionInputSchema.parse(input);
   const classifier = compileQueryClassifier(effectiveBrandNames(parsed.identity));
+  const qualifiedAliases = resolveProjectQualifiedAliases(
+    { displayName: parsed.identity.displayName, aliases: parsed.identity.aliases },
+    parsed.identity.qualifiedAliases,
+    simpleMeasurementCompetitorNames(parsed.competitors)
+  ).value;
   return simpleMeasurementDefinitionSchema.parse({
     schemaVersion: SIMPLE_MEASUREMENT_DEFINITION_SCHEMA_VERSION,
     capturedAt: parsed.capturedAt,
@@ -6721,7 +6785,8 @@ function buildSimpleMeasurementDefinition(input) {
       displayName: parsed.identity.displayName,
       aliases: [...parsed.identity.aliases],
       canonicalDomain: parsed.identity.canonicalDomain,
-      ownedDomains: [...parsed.identity.ownedDomains]
+      ownedDomains: [...parsed.identity.ownedDomains],
+      ...qualifiedAliases.length ? { qualifiedAliases } : {}
     },
     country: parsed.country,
     language: parsed.language,
@@ -6765,7 +6830,9 @@ function canonicalSimpleMeasurementDefinitionJson(definition) {
       displayName: parsed.identity.displayName,
       aliases: [...parsed.identity.aliases].sort(compareText3),
       canonicalDomain: parsed.identity.canonicalDomain,
-      ownedDomains: [...parsed.identity.ownedDomains].sort(compareText3)
+      ownedDomains: [...parsed.identity.ownedDomains].sort(compareText3),
+      // Absent and empty serialize alike, so pre-feature checksums never move.
+      ...parsed.identity.qualifiedAliases?.length ? { qualifiedAliases: [...parsed.identity.qualifiedAliases].sort(compareText3) } : {}
     },
     country: parsed.country,
     language: parsed.language,
@@ -7995,8 +8062,16 @@ var measurementPortfolioAnswerSourcesSchema = z22.object({
   properties: measurementDemoCountSchema,
   answers: measurementDemoCountSchema,
   domains: z22.array(measurementPortfolioCountedDomainSchema).max(MEASUREMENT_PORTFOLIO_ANSWER_SOURCES_LIMIT),
-  domainTotal: measurementDemoCountSchema
+  domainTotal: measurementDemoCountSchema,
+  /**
+   * Answers in the basis that cite any of the project's own domains, each
+   * answer once. Optional only so an older server's response still parses.
+   */
+  ownDomainAnswers: measurementDemoCountSchema.optional()
 }).strict().superRefine((sources, ctx) => {
+  if (sources.ownDomainAnswers !== void 0 && sources.ownDomainAnswers > sources.answers) {
+    ctx.addIssue({ code: z22.ZodIssueCode.custom, path: ["ownDomainAnswers"], message: "Own-domain answers cannot exceed the basis" });
+  }
   if (sources.domains.length > sources.domainTotal) {
     ctx.addIssue({ code: z22.ZodIssueCode.custom, path: ["domainTotal"], message: "Total cannot be smaller than the returned domains" });
   }
@@ -8347,7 +8422,14 @@ var measurementChangedPropertySchema = measurementDemoPropertySchema.extend({
    * whenever the denominator held. False when a metric was measured in one
    * run only.
    */
-  withinNoise: z22.boolean().optional()
+  withinNoise: z22.boolean().optional(),
+  /**
+   * The same noise rule for each signal alone: a Property beyond noise overall
+   * can still have one signal that moved two answers or fewer, which is not a
+   * gain or loss on its own. Null when that signal cannot be sized.
+   */
+  mentionWithinNoise: z22.boolean().nullable().optional(),
+  citationWithinNoise: z22.boolean().nullable().optional()
 }).strict();
 var measurementChangesResponseSchema = z22.object({
   current: measurementComparableRunSchema,
@@ -9195,6 +9277,14 @@ function formatDate(iso) {
     return iso;
   }
 }
+var MONTH_NAMES = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
+function formatCalendarDay(day, now = /* @__PURE__ */ new Date()) {
+  const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(day);
+  const month = match ? MONTH_NAMES[Number(match[2]) - 1] : void 0;
+  if (!match || !month) return day;
+  const label = `${month} ${Number(match[3])}`;
+  return Number(match[1]) === now.getFullYear() ? label : `${label}, ${match[1]}`;
+}
 function formatIsoDate(iso) {
   if (!iso) return "\u2014";
   try {
@@ -9573,8 +9663,8 @@ function dayOf(value) {
 function sortedUnique(days) {
   return [...new Set(days.filter((d) => d !== null))].sort();
 }
-function normalizeEngineChange(provider, entry) {
-  const engine = answerEngineName(provider);
+function normalizeEngineChange(provider, entry, engineName) {
+  const engine = engineName(provider);
   const perChange = Array.isArray(entry.changes) ? entry.changes : [];
   const changeCount = countOf(entry.changeCount) || perChange.length;
   const unconfirmedCount = Math.min(
@@ -9610,8 +9700,8 @@ function joinNames(names) {
 }
 function whenPhrase(dates, count2) {
   if (dates.length === 0) return null;
-  if (dates.length === 1 && count2 <= 1) return `on ${dates[0]}`;
-  return `more than once between ${dates[0]} and ${dates[dates.length - 1]}`;
+  if (dates.length === 1 && count2 <= 1) return `on ${formatCalendarDay(dates[0])}`;
+  return `more than once between ${formatCalendarDay(dates[0])} and ${formatCalendarDay(dates[dates.length - 1])}`;
 }
 function engineClause(change) {
   const confirmedWhen = whenPhrase(change.confirmedDates, change.confirmedCount);
@@ -9633,10 +9723,11 @@ function uncheckedTailSentence(entries) {
   const unchecked = entries.filter((e) => !e.checkedThroughPeriodEnd && e.knownGoodAsOf !== null);
   if (unchecked.length === 0) return null;
   const oldest = unchecked.map((e) => e.knownGoodAsOf).sort()[0];
-  return `We last checked for model updates on ${oldest}, and this period runs past that date, so there may be later updates we do not know about.`;
+  return `We last checked for model updates on ${formatCalendarDay(oldest)}, and this period runs past that date, so there may be later updates we do not know about.`;
 }
-function buildModelChangeNotice(disclosures) {
-  const entries = Object.entries(disclosures ?? {}).map(([provider, entry]) => normalizeEngineChange(provider, entry ?? {})).sort((a, b) => a.engine.localeCompare(b.engine));
+function buildModelChangeNotice(disclosures, options = {}) {
+  const engineName = options.engineName ?? answerEngineName;
+  const entries = Object.entries(disclosures ?? {}).map(([provider, entry]) => normalizeEngineChange(provider, entry ?? {}, engineName)).sort((a, b) => a.engine.localeCompare(b.engine));
   if (entries.length === 0) return null;
   const changed = entries.filter((e) => e.confirmedCount + e.unconfirmedCount > 0);
   if (changed.length === 0) {
@@ -9644,7 +9735,7 @@ function buildModelChangeNotice(disclosures) {
     const plural = engines.length > 1;
     const tail2 = uncheckedTailSentence(entries);
     const checked = [...new Set(entries.map((e) => e.knownGoodAsOf).filter((d) => d !== null))].sort();
-    const freshness = tail2 ?? (checked.length > 0 ? `We last checked for model updates on ${checked[0]}.` : null);
+    const freshness = tail2 ?? (checked.length > 0 ? `We last checked for model updates on ${formatCalendarDay(checked[0])}.` : null);
     return {
       kind: "no-known-change",
       text: `No model updates are on record for ${joinNames(engines)} in this period.`,
@@ -11653,8 +11744,7 @@ var ProviderIds = {
   muse: "muse",
   local: "local",
   cdpChatgpt: "cdp:chatgpt",
-  zai: "zai",
-  deepinfra: "deepinfra"
+  zai: "zai"
 };
 var PROVIDER_IDS = Object.values(ProviderIds);
 var SweepProviderIds = {
@@ -11671,13 +11761,16 @@ var AgentProviderIds = {
   claude: ProviderIds.claude,
   openai: ProviderIds.openai,
   gemini: ProviderIds.gemini,
-  zai: ProviderIds.zai,
-  deepinfra: ProviderIds.deepinfra
+  zai: ProviderIds.zai
 };
 var AGENT_PROVIDER_IDS = Object.values(AgentProviderIds);
 function isAgentProviderId(value) {
   return AGENT_PROVIDER_IDS.includes(value);
 }
+var RETIRED_AGENT_PROVIDER_IDS = ["deepinfra"];
+function isRetiredAgentProviderId(value) {
+  return RETIRED_AGENT_PROVIDER_IDS.includes(value);
+}
 var LlmCapabilities = {
   agent: "agent",
   analyze: "analyze",
@@ -13981,6 +14074,12 @@ var sourceCategoryCountSchema = z43.object({
 });
 var sourceRankEntrySchema = z43.object({
   domain: z43.string(),
+  /**
+   * 1-based position by `count` over the whole scope, before any `limit`.
+   * Domains with equal counts share a rank (competition ranking: 1, 2, 2, 4).
+   * Optional only so an older server's response still parses.
+   */
+  rank: z43.number().int().positive().optional(),
   count: z43.number().int(),
   /** Share of the list's `totalCitedSlots`, 0..1 (at wire precision). */
   percentage: fraction(),
@@ -15251,7 +15350,7 @@ function agentVisibilityEvidence(report, project, retrievedAt) {
     ))
   };
 }
-var agentProviderIdSchema = z49.enum(["claude", "openai", "gemini", "zai", "deepinfra"]);
+var agentProviderIdSchema = z49.enum(["claude", "openai", "gemini", "zai"]);
 var agentProviderOptionDtoSchema = z49.object({
   /** Stable identifier — what clients pass back as `provider` on the prompt endpoint. */
   id: agentProviderIdSchema,
@@ -21247,6 +21346,7 @@ export {
   hostOf,
   registrableDomain,
   brandLabelFromDomain,
+  competitorLabelFromDomain,
   hostMatchesDomain,
   hostMatchesAnyDomain,
   extractDomainsFromText,
@@ -21305,6 +21405,7 @@ export {
   normalizeProjectDomain,
   effectiveDomains,
   normalizeProjectAliases,
+  resolveProjectQualifiedAliases,
   effectiveBrandNames,
   projectConfigSchema,
   resolveConfigSpecQueries,
@@ -21356,6 +21457,7 @@ export {
   compileMeasurementPlanPreview,
   canonicalMeasurementPlanJson,
   simpleMeasurementDefinitionSchema,
+  simpleMeasurementCompetitorNames,
   buildSimpleMeasurementDefinition,
   canonicalSimpleMeasurementDefinitionJson,
   visibilityReportRequestSchema,
@@ -21624,6 +21726,7 @@ export {
   AgentProviderIds,
   AGENT_PROVIDER_IDS,
   isAgentProviderId,
+  isRetiredAgentProviderId,
   LlmCapabilities,
   LLM_CAPABILITIES,
   providerSummaryEntryDtoSchema,

package/dist/{chunk-Y23FQK6O.js → chunk-K4356AGP.js}

@@ -128,7 +128,7 @@ import {
   trafficSeriesGranularitySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-SJX7XJB6.js";
+} from "./chunk-HAALQW4R.js";
 
 // src/cli-error.ts
 function isMachineFormat(format) {
@@ -456,7 +456,7 @@ var MEASUREMENT_CHANGES_AGENT_ROWS = 20;
 var measurementChangesInputSchema = measurementChangesQuerySchema.safeExtend({
   project: projectNameSchema,
   queryClass: measurementQueryClassFilterSchema.default(AGENT_DEFAULT_QUERY_CLASS).describe("Defaults to non-brand. Call once per class; all pools both classes in rows and distribution."),
-  limit: z3.number().int().positive().max(MEASUREMENT_CHANGES_AGENT_ROWS).optional().describe(`Changed rows, largest move first. Default 10, at most ${MEASUREMENT_CHANGES_AGENT_ROWS}; distribution counts every Property whatever the limit.`)
+  limit: z3.number().int().positive().max(MEASUREMENT_CHANGES_AGENT_ROWS).optional().describe(`Changed rows, largest move first, every move beyond noise before any within it. Default and maximum ${MEASUREMENT_CHANGES_AGENT_ROWS}; distribution counts every Property whatever the limit.`)
 }).strict();
 var measurementDataQualityInputSchema = measurementDataQualityQuerySchema.extend({
   project: projectNameSchema
@@ -948,7 +948,7 @@ var contentTargetsInputSchema = z3.object({
 var contentBriefInputSchema = z3.object({
   project: projectNameSchema,
   targetRef: z3.string().min(1).describe("Stable target ref from canonry_content_targets. The target must be ownable; ceded targets are rejected."),
-  provider: z3.string().optional().describe("Optional provider override (claude|openai|gemini|zai|deepinfra)."),
+  provider: z3.string().optional().describe("Optional provider override (claude|openai|gemini|zai)."),
   model: z3.string().optional().describe("Optional model override within the chosen provider."),
   forceRefresh: z3.boolean().optional().describe("Force a fresh synthesis even if a cached brief exists.")
 });
@@ -1248,7 +1248,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_sentiment_configure",
     title: "Configure project sentiment",
-    description: "Install administrator only: explicitly enable or disable stance-and-evidence sentiment. Both install and project switches default off. Enabling processes future eligible complete runs; historical answers require explicit backfill. On dispatch TypeSafe receives the text of each answer with the frozen subject identity (name, aliases and URLs), the tracked query text and class, the answer engine with its requested and served models, the location, and internal query, subject, Property, group and market identifiers. API keys remain local install configuration and are never accepted here.",
+    description: "Install administrator only: explicitly enable or disable stance-and-evidence sentiment. Both install and project switches default off. Enabling processes future eligible complete runs; historical answers require explicit backfill. On dispatch TypeSafe receives the text of each answer with the frozen subject identity (name, aliases, qualified aliases and URLs), the tracked query text and class, the answer engine with its requested and served models, the location, and internal query, subject, Property, group and market identifiers. API keys remain local install configuration and are never accepted here.",
     access: "write",
     tier: "monitoring",
     inputSchema: sentimentConfigureInputSchema,
@@ -1515,7 +1515,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_analytics_sources",
     title: "Get cited-source rankings",
-    description: "Where AI engines cite from for a project: cited domains ranked by how many answers cite them, each tagged with a category and a surface class (own / direct-competitor / ota-aggregator / editorial-media / other), plus a surface-class roll-up and a per-provider breakdown. Project-wide: without `queryClass` it pools branded and non-brand answers, where branded queries inflate your own domain. With `queryClass` set and neither `runId` nor `window`, this tool reads the latest sweep (`runId` latest); pass `window` to pool every sweep in it. `pooledAcrossRuns` true (`runCount` above 1) means the counts sum several runs and `runIds` is their scope; the legacy `runId` field is then only the newest run in the window. On a v2 measurement plan the class comes from the plan, the same answers as canonry_competitor_landscape with scope=all-markets. `countUnits` says what each count counts: `domainTotal` is distinct domains, never answers or citations. Compare engines by answer count or `answerShare`, never by rank position. Counts come from each answer's stored source list, so every engine is included, Gemini too. A domain counts at most once per answer; `answerShare` is the share of all answers in scope that cite it. `providersWithoutSources` names engines that answered but cited nothing. `limit` caps each ranked list (default 10 for this tool, which keeps each engine list whole); a long-tail rollup keeps the totals. The per-query breakdown is omitted unless `includeByQuery` is true. No LLM calls; probe runs excluded.",
+    description: "Where AI engines cite from for a project: cited domains ranked by how many answers cite them, each tagged with a category and a surface class (own / direct-competitor / ota-aggregator / editorial-media / other), plus a surface-class roll-up and a per-provider breakdown. Every entry carries rank, its position by count in that list over the whole scope (equal counts share a rank); state where a domain places only from its rank, never by counting rows. Project-wide: without `queryClass` it pools branded and non-brand answers, where branded queries inflate your own domain. With `queryClass` set and neither `runId` nor `window`, this tool reads the latest sweep (`runId` latest); pass `window` to pool every sweep in it. `pooledAcrossRuns` true (`runCount` above 1) means the counts sum several runs and `runIds` is their scope; the legacy `runId` field is then only the newest run in the window. On a v2 measurement plan the class comes from the plan, the same answers as canonry_competitor_landscape with scope=all-markets. `countUnits` says what each count counts: `domainTotal` is distinct domains, never answers or citations. Compare engines by answer count or `answerShare`, never by rank position. Counts come from each answer's stored source list, so every engine is included, Gemini too. A domain counts at most once per answer; `answerShare` is the share of all answers in scope that cite it. `providersWithoutSources` names engines that answered but cited nothing. `limit` caps each ranked list (default 10 for this tool, which keeps each engine list whole); a long-tail rollup keeps the totals. The per-query breakdown is omitted unless `includeByQuery` is true. No LLM calls; probe runs excluded.",
     access: "read",
     tier: "monitoring",
     inputSchema: z3.object({
@@ -2626,7 +2626,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_project_upsert",
     title: "Create or replace project",
-    description: "Create or replace a Canonry project. PUT semantics \u2014 fields not in the request are reset to their defaults. Provide the full intended project shape. Exception: an omitted providerDispatchModes (provider \u2192 sync|batch for scheduled sweeps) keeps the stored preference; send {} to clear it.",
+    description: "Create or replace a Canonry project. PUT semantics: fields not in the request are reset to their defaults. Provide the full intended project shape. Exceptions: an omitted providerDispatchModes (provider \u2192 sync|batch for scheduled sweeps) keeps the stored preference; send {} to clear it. An omitted qualifiedAliases (the aliases Simple sentiment treats as this brand's own names) keeps the stored list, minus names that no longer qualify (a removed alias, a spelling of the display name, or a competitor's name); send [] to clear it.",
     access: "write",
     tier: "setup",
     inputSchema: projectUpsertInputSchema,
@@ -2637,7 +2637,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_apply_config",
     title: "Apply project config",
-    description: "Apply one Canonry config-as-code project document. Replaces the project to match the config \u2014 fields omitted from the spec are reset to defaults, with one exception: a spec with neither queries nor keywords leaves the tracked-query basket unchanged. To clear the basket, pass an explicit empty queries list. For multi-document YAML, call this tool once per project document.",
+    description: "Apply one Canonry config-as-code project document. Replaces the project to match the config; fields omitted from the spec are reset to defaults, with these exceptions: a spec with neither queries nor keywords leaves the tracked-query basket unchanged (to clear the basket, pass an explicit empty queries list); an omitted providerDispatchModes keeps the stored preference; and an omitted qualifiedAliases keeps the stored list, minus names that no longer qualify (a removed alias, a spelling of the display name, or a competitor's name); send [] to clear it. For multi-document YAML, call this tool once per project document.",
     access: "write",
     tier: "core",
     inputSchema: applyConfigInputSchema,
@@ -2842,7 +2842,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_measurement_portfolio_summary",
     title: "Summarize measured Properties",
-    description: "Start here for best and worst Properties. One call returns the weakest Properties, the names answers wrote instead of them, and the domains engines cited for them. Defaults to non-brand queries; state the returned queryClass and never pool branded with non-brand. Returns at most 4 Property rows per list, the most that fit one result; a larger limit is lowered and limitNote says so. For other rows pass groupKey (one metro's weakest), or page canonry_measurement_overview. Mention (answer text names the Property) and citation (a source URL on its page) are separate: report each as numerator/denominator, with any unattributed count beside mention. Denominators count answers, one per query per engine (queries x engines = answers). Group Properties only by each row's metro and submarkets, never by label. namedInsteadInAnswerText lists names written in the answer text of answers that neither named nor cited the Property, counted by answer: they are not citations, and namedInsteadInAnswerTextTotal counts distinct names, not answers. citedDomains and weakestAnswerSources count answers citing each domain, every engine included; weakestAnswerSources pools the weakest rows plus every tied Property, each answer once, and its domainTotal counts distinct domains, not citations. When tiedAtWeakest is set, tiedAtWeakest.count Properties share the weakest rates and the rows are the first of them by name, not a rank: report the count, tiedAtWeakest.byMetro (tied Properties per metro over the whole tie; a Property in two metros counts in both) and tiedAtWeakest.namedInstead (names written instead across the whole tie, counted by distinct answer; namedInsteadTotal is distinct names), and call the rows examples. mentionRanking.strongest/.weakest rank every Property with an available mention rate; .excluded lists the rest with reasons. markets lists every market at one level, worst-first (every metro, or a groupKey's submarkets), whatever the limit. Markets may share Properties and never sum to portfolio totals. Reads stored data only; never starts provider work.",
+    description: "Start here for best and worst Properties. One call returns the weakest Properties, the names answers wrote instead of them, and the domains engines cited for them. Defaults to non-brand queries; state the returned queryClass and never pool branded with non-brand. Returns at most 4 Property rows per list, the most that fit one result; a larger limit is lowered and limitNote says so. For other rows pass groupKey (one metro's weakest), or page canonry_measurement_overview. Mention (answer text names the Property) and citation (a source URL on its page) are separate: report each as numerator/denominator, with any unattributed count beside mention. Denominators count answers, one per query per engine (queries x engines = answers). Group Properties only by each row's metro and submarkets, never by label. namedInsteadInAnswerText lists names written in the answer text of answers that neither named nor cited the Property, counted by answer: they are not citations, and namedInsteadInAnswerTextTotal counts distinct names, not answers. citedDomains and weakestAnswerSources count answers citing each domain, every engine included; weakestAnswerSources pools the weakest rows plus every tied Property, each answer once, and its domainTotal counts distinct domains, not citations. weakestAnswerSources.ownDomainAnswers counts those answers that cite any of your own domains. A Property's citationCoverage counts only answers citing that Property's own page, so 0% citation does not mean your domain went uncited; use ownDomainAnswers for that. When tiedAtWeakest is set, tiedAtWeakest.count Properties share the weakest rates and the rows are the first of them by name, not a rank: report the count, tiedAtWeakest.byMetro (tied Properties per metro over the whole tie; a Property in two metros counts in both) and tiedAtWeakest.namedInstead (names written instead across the whole tie, counted by distinct answer; namedInsteadTotal is distinct names), and call the rows examples. mentionRanking.strongest/.weakest rank every Property with an available mention rate; .excluded lists the rest with reasons. markets lists every market at one level, worst-first (every metro, or a groupKey's submarkets), whatever the limit. Markets may share Properties and never sum to portfolio totals. Reads stored data only; never starts provider work.",
     access: "read",
     tier: "monitoring",
     inputSchema: measurementPortfolioSummaryInputSchema,
@@ -2902,7 +2902,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_measurement_changes",
     title: "Compare stored measurement changes",
-    description: "What changed since the previous sweep: compares the displayed run with the previous run of the same plan revision and execution identity; an incompatible pair returns unavailable with a reason, never a trend. Defaults to non-brand queries: call once per class (queryClass branded for the branded move) and never report one class as the whole. queryClass all pools both classes in rows and distribution and adds metricsByClass, the headline metrics per class; report those per class, never the pooled metrics alone. changedProperties come largest move first (answers that named the Property, then answers that cited it; sort label for alphabetical), default 10 and at most 20 rows; totalProperties above the rows returned means rows you did not see. distribution counts every Property in scope: improved, declined, mixed, withinNoise, unchanged, notComparable. mentionAnswersDelta and citationAnswersDelta are signed answer counts; denominatorChanged true means a rate was taken over a different number of answers, so those counts are not like for like and the coverage rates give the direction. A move is the rate change times the larger answer count (the count change when the denominator held). withinNoise true means every move was 2 answers or fewer: within noise, never a gain, loss, trend or regression. Reads stored data only; it never starts provider work.",
+    description: "What changed since the previous sweep: compares the displayed run with the previous run of the same plan revision and execution identity; an incompatible pair returns unavailable with a reason, never a trend. Defaults to non-brand queries: call once per class (queryClass branded for the branded move) and never report one class as the whole. queryClass all pools both classes in rows and distribution and adds metricsByClass, the headline metrics per class; report those per class, never the pooled metrics alone. changedProperties come largest move first (answers that named the Property, then answers that cited it; sort label for alphabetical), every move beyond noise before any within it, 20 rows by default and at most; totalProperties above the rows returned means rows you did not see. distribution counts every Property in scope: improved, declined, mixed, withinNoise, unchanged, notComparable. mentionAnswersDelta and citationAnswersDelta are signed answer counts; denominatorChanged true means a rate was taken over a different number of answers, so those counts are not like for like and the coverage rates give the direction. A move is the rate change times the larger answer count (the count change when the denominator held). withinNoise true means every move was 2 answers or fewer: within noise, never a gain, loss, trend or regression. mentionWithinNoise and citationWithinNoise apply the same rule to each signal alone: a Property beyond noise can still have one signal within noise, and that signal is not a gain or loss. Report every headline metric, branded included, as previous numerator/denominator to current numerator/denominator. Reads stored data only; it never starts provider work.",
     access: "read",
     tier: "monitoring",
     inputSchema: measurementChangesInputSchema,
@@ -2910,7 +2910,7 @@ var canonryMcpTools = [
     openApiOperations: ["GET /api/v1/projects/{name}/measurement-changes"],
     handler: (client, input) => {
       const { project, ...query } = input;
-      return client.getMeasurementChanges(project, { ...query, queryClass: agentQueryClass(query.queryClass) });
+      return client.getMeasurementChanges(project, { ...query, limit: query.limit ?? MEASUREMENT_CHANGES_AGENT_ROWS, queryClass: agentQueryClass(query.queryClass) });
     }
   }),
   defineTool({

package/dist/{chunk-G3CMWO26.js → chunk-XGERCNUR.js}

@@ -5,7 +5,7 @@ import {
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-Y23FQK6O.js";
+} from "./chunk-K4356AGP.js";
 import {
   AGENT_PROVIDER_IDS,
   CANONRY_NPM_PACKAGE_URL,
@@ -28,6 +28,7 @@ import {
   formatCanonryPluginVersionMismatch,
   isInstallMethod,
   isReadOnlyKey,
+  isRetiredAgentProviderId,
   isSensitiveDiagnosticQueryKey,
   isStrictSemver,
   normalizeAgentSlug,
@@ -49,7 +50,7 @@ import {
   skillsClientSchema,
   upgradeCaveatFor,
   upgradeCommandFor
-} from "./chunk-SJX7XJB6.js";
+} from "./chunk-HAALQW4R.js";
 
 // src/config.ts
 import fs from "fs";
@@ -429,9 +430,11 @@ Do not use "canonry init --force" for recovery. It replaces credentials without
     });
   }
   if (!agentProviderSchema.safeParse(parsed.agent?.provider).success) {
+    const pinned = parsed.agent?.provider;
+    const retired = typeof pinned === "string" && isRetiredAgentProviderId(pinned);
     throw new CliError({
       code: "CONFIG_INVALID",
-      message: `Invalid config at ${configPath}: agent.provider must be one of ${AGENT_PROVIDER_IDS.join(", ")}, or left blank.`
+      message: retired ? `Invalid config at ${configPath}: agent.provider ${pinned} was removed. Pin one of ${AGENT_PROVIDER_IDS.join(", ")} (with a key under providers.<name>.apiKey), or leave it blank.` : `Invalid config at ${configPath}: agent.provider must be one of ${AGENT_PROVIDER_IDS.join(", ")}, or left blank.`
     });
   }
   if (!agentModelSchema.safeParse(parsed.agent?.model).success) {