@canonry/canonry 5.6.0 → 5.9.0

package/assets/index.html

@@ -12,14 +12,14 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-DTrkuKOh.js"></script>
+    <script type="module" crossorigin src="./assets/index-2Ldc0Hq4.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-ZXXkndVj.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-twS1M3FF.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-llkUFBGR.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-lucide-CneDbhOr.js">
-    <link rel="modulepreload" crossorigin href="./assets/vendor-markdown-B-Oq2NYq.js">
+    <link rel="modulepreload" crossorigin href="./assets/vendor-markdown-B4giJcws.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-yaml-GWJz5H2G.js">
-    <link rel="stylesheet" crossorigin href="./assets/index-PT4UiPTM.css">
+    <link rel="stylesheet" crossorigin href="./assets/index-neNKCg78.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/{chunk-TM2NQMJA.js → chunk-5E4ASNU4.js}

@@ -7406,6 +7406,26 @@ var MIGRATION_VERSIONS = [
     statements: [
       `ALTER TABLE doctor_health_state ADD COLUMN failing_signature TEXT`
     ]
+  },
+  {
+    version: 158,
+    name: "deepinfra-agent-default-model",
+    // Move the previous agent default once. A later explicit GLM selection
+    // must survive subsequent boots and session hydration.
+    //
+    // A run hook rather than a statement for two reasons. The statement
+    // allowlist is schema-shaped and this rewrites VALUES, and a supported
+    // legacy database can reach this version with no `agent_sessions` at
+    // all: one stamped in `_migrations` at a version above 38 resumes past
+    // the migration that introduces the table, so an unguarded UPDATE dies
+    // with `no such table`.
+    statements: [],
+    run: (tx) => {
+      if (!tableExists(tx, "agent_sessions")) return;
+      tx.run(sql2.raw(
+        `UPDATE agent_sessions SET model_id = 'deepseek-ai/DeepSeek-V4-Flash' WHERE model_provider = 'deepinfra' AND model_id = 'zai-org/GLM-5.2'`
+      ));
+    }
   }
 ];
 function addRunsMeasurementPlanVersionForeignKey(tx) {
@@ -11345,6 +11365,22 @@ function requireAdminSession(request) {
   if (!role || role === UserRoles.admin) return;
   throw forbidden(ADMIN_ONLY_MESSAGE);
 }
+var NARROW_KEY_DENIED_MESSAGE = "This API key is narrower than the install, so it cannot use an administrator surface.";
+function isInstanceAdministrator(request) {
+  const principal = request.principal;
+  if (!principal) return true;
+  const role = principal.kind === "user" ? principal.role : principal.delegatedUser?.role;
+  if (role && role !== UserRoles.admin) return false;
+  return !principal.projectId && principal.scopes.includes(WILDCARD_SCOPE);
+}
+function requireInstanceAdministrator(request) {
+  const principal = request.principal;
+  if (!principal) return;
+  const role = principal.kind === "user" ? principal.role : principal.delegatedUser?.role;
+  if (role && role !== UserRoles.admin) throw forbidden(ADMIN_ONLY_MESSAGE);
+  if (isInstanceAdministrator(request)) return;
+  throw forbidden(NARROW_KEY_DENIED_MESSAGE);
+}
 function requireOperator(request) {
   const principal = request.principal;
   if (request.operatorAccess === true && principal?.kind === "api-key" && !principal.viaCookie && !principal.projectId && !principal.delegatedUser) return;
@@ -42637,7 +42673,7 @@ var canonryLocalRouteCatalog = [
     method: "get",
     path: "/api/v1/projects/{name}/agent/transcript",
     summary: "Get the rolling Aero transcript for this project",
-    description: "Returns the full message history of the project-scoped Aero session plus the persisted model provider/id and last-updated timestamp. Empty messages array when the project has no session yet.",
+    description: "Returns the full message history of the project-scoped Aero session plus the persisted model provider/id and last-updated timestamp. Empty messages array when the project has no session yet. Administrator-only: a signed-in viewer, and any API key narrower than the install (read-only, or scoped to a single project), are refused with 403. There is one Aero session per project, so this is the operator conversation rather than metadata about it.",
     tags: ["agent"],
     parameters: [nameParameter],
     responses: {
@@ -42650,7 +42686,7 @@ var canonryLocalRouteCatalog = [
     method: "delete",
     path: "/api/v1/projects/{name}/agent/transcript",
     summary: "Reset the Aero transcript + queued follow-ups",
-    description: "Evicts any live Agent instance, clears the persisted messages and follow_up_queue. A subsequent prompt starts a fresh session.",
+    description: "Evicts any live Agent instance, clears the persisted messages and follow_up_queue. A subsequent prompt starts a fresh session. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403.",
     tags: ["agent"],
     parameters: [nameParameter],
     responses: {
@@ -42663,7 +42699,7 @@ var canonryLocalRouteCatalog = [
     method: "get",
     path: "/api/v1/projects/{name}/agent/memory",
     summary: "List durable Aero memory entries for a project",
-    description: "Returns the project-scoped agent_memory rows newest-first. Includes both operator-authored notes (source `user`/`aero`) and LLM-authored compaction summaries (source `compaction`, key prefix `compaction:`). The N most-recent rows are also injected into the system prompt at every new session start.",
+    description: "Returns the project-scoped agent_memory rows newest-first. Includes both operator-authored notes (source `user`/`aero`) and LLM-authored compaction summaries (source `compaction`, key prefix `compaction:`). The N most-recent rows are also injected into the system prompt at every new session start. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403.",
     tags: ["agent"],
     parameters: [nameParameter],
     responses: {
@@ -42676,7 +42712,7 @@ var canonryLocalRouteCatalog = [
     method: "put",
     path: "/api/v1/projects/{name}/agent/memory",
     summary: "Upsert a durable Aero memory entry",
-    description: "Creates or replaces a project-scoped note (max 2 KB, max 128-char key). Same key replaces the prior value. Keys with the reserved `compaction:` prefix are rejected \u2014 that namespace is owned by transcript compaction.",
+    description: "Creates or replaces a project-scoped note (max 2 KB, max 128-char key). Same key replaces the prior value. Keys with the reserved `compaction:` prefix are rejected \u2014 that namespace is owned by transcript compaction. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403.",
     tags: ["agent"],
     parameters: [nameParameter],
     requestBody: {
@@ -42705,7 +42741,7 @@ var canonryLocalRouteCatalog = [
     method: "delete",
     path: "/api/v1/projects/{name}/agent/memory",
     summary: "Delete a durable Aero memory entry",
-    description: "Removes a single project-scoped note by key. Returns `status: missing` (non-error) when the key never existed. Keys with the reserved `compaction:` prefix are rejected \u2014 those notes are pruned automatically.",
+    description: "Removes a single project-scoped note by key. Returns `status: missing` (non-error) when the key never existed. Keys with the reserved `compaction:` prefix are rejected \u2014 those notes are pruned automatically. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403.",
     tags: ["agent"],
     parameters: [nameParameter],
     requestBody: {
@@ -42733,7 +42769,7 @@ var canonryLocalRouteCatalog = [
     method: "get",
     path: "/api/v1/projects/{name}/agent/providers",
     summary: "List the LLM providers Aero can route to",
-    description: "Returns every provider Aero knows about with its default model, whether a usable API key is configured, and where the key resolved from (`config` | `env`). `defaultProvider` is the one Aero auto-picks when a caller omits `provider` on the prompt endpoint. Path is project-scoped for auth symmetry; the response does not vary per project today.",
+    description: "Returns every provider Aero knows about with its default model, whether a usable API key is configured, and where the key resolved from (`config` | `env`). `defaultProvider` is the one Aero auto-picks when a caller omits `provider` on the prompt endpoint. Path is project-scoped for auth symmetry; the response does not vary per project today. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403, because each entry names a default model and which providers are configured is itself administrator knowledge.",
     tags: ["agent"],
     parameters: [nameParameter],
     responses: {
@@ -42745,7 +42781,7 @@ var canonryLocalRouteCatalog = [
     method: "post",
     path: "/api/v1/projects/{name}/agent/prompt",
     summary: "Send a prompt to Aero and stream events back as SSE",
-    description: 'Posts a prompt into the project\'s Aero session and streams `AgentEvent` frames as `text/event-stream`. Each frame is `data: <JSON>\\n\\n`. The server brackets the stream with `{"type":"stream_open"}` and `{"type":"stream_close"}` control frames; `{"type":"error","message":"..."}` surfaces in-stream failures without collapsing the stream. Returns 409 `AGENT_BUSY` if another turn is already in flight for this project. Body field `scope` accepts "all" | "read-only"; omitted defaults to "read-only" (safe dashboard surface). Body field `profile` accepts "default" | "ads-operator"; omitted keeps the default full Canonry operator surface. The CLI passes "all" to keep write tools available.',
+    description: 'Posts a prompt into the project\'s Aero session and streams `AgentEvent` frames as `text/event-stream`. Each frame is `data: <JSON>\\n\\n`. The server brackets the stream with `{"type":"stream_open"}` and `{"type":"stream_close"}` control frames; `{"type":"error","message":"..."}` surfaces in-stream failures without collapsing the stream. Returns 409 `AGENT_BUSY` if another turn is already in flight for this project. Body field `scope` accepts "all" | "read-only"; omitted defaults to "read-only" (safe dashboard surface). Body field `profile` accepts "default" | "ads-operator"; omitted keeps the default full Canonry operator surface. The CLI passes "all" to keep write tools available. Administrator-only: a signed-in viewer, and any API key narrower than the install, are refused with 403. Tools execute with the install root key, so this route is an operator surface regardless of the scope requested.',
     tags: ["agent"],
     parameters: [nameParameter],
     requestBody: {
@@ -80704,6 +80740,14 @@ var agentProvidersConfiguredCheck = {
   scope: CheckScopes.global,
   title: "Agent provider keys",
   run: (ctx) => {
+    if (ctx.callerIsInstanceAdministrator === false) {
+      return {
+        status: CheckStatuses.skipped,
+        code: "agent-providers.restricted",
+        summary: "Agent provider configuration is visible to administrators only.",
+        remediation: null
+      };
+    }
     const summary2 = ctx.getAgentProviderSummary?.();
     if (!summary2) {
       return {
@@ -81970,6 +82014,7 @@ async function doctorRoutes(app, opts) {
       redirectUri,
       providerSummary: opts.providerSummary,
       getAgentProviderSummary: opts.getAgentProviderSummary,
+      callerIsInstanceAdministrator: isInstanceAdministrator(request),
       trafficSourceValidators: opts.trafficSourceValidators,
       runtimeStatePaths: opts.runtimeStatePaths,
       bundledSkills: opts.bundledSkills,
@@ -82000,6 +82045,7 @@ async function doctorRoutes(app, opts) {
       redirectUri,
       providerSummary: opts.providerSummary,
       getAgentProviderSummary: opts.getAgentProviderSummary,
+      callerIsInstanceAdministrator: isInstanceAdministrator(request),
       trafficSourceValidators: opts.trafficSourceValidators,
       runtimeStatePaths: opts.runtimeStatePaths,
       bundledSkills: opts.bundledSkills,
@@ -86753,6 +86799,7 @@ export {
   createUserSession,
   resolveUserSession,
   createCredentialChecker,
+  requireInstanceAdministrator,
   hashApiKey,
   registerOAuthRoutes,
   registerOAuthAdminRoutes,

package/dist/{chunk-GHAUT7XJ.js → chunk-LR7BVM53.js}

@@ -4,7 +4,7 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-I4AHG7K3.js";
+} from "./chunk-S4DBS5DP.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";

package/dist/{chunk-KZYOJ4F5.js → chunk-R4COV5KR.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-TM2NQMJA.js";
+} from "./chunk-5E4ASNU4.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,

package/dist/{chunk-I4AHG7K3.js → chunk-S4DBS5DP.js}

@@ -10041,7 +10041,7 @@ var canonryMcpTools = [
   defineTool({
     name: "canonry_project_overview",
     title: "Get project overview (composite)",
-    description: 'One-call summary for "how is project X doing?". Returns independent mention and citation coverage, separate query-level movement for each signal, query-basket comparability with added/removed counts, latest run and health, insights, provider/model breakdowns, competitors, attention items, and recent history. Movement excludes queries not shared by both sweeps. Filterable by location and time window. Prefer this over fanning out to separate tools.',
+    description: 'One-call summary for "how is project X doing?". Returns independent mention and citation coverage, separate query-level movement for each signal, query-basket comparability with added/removed counts, latest run and health, insights, provider/model breakdowns, competitors, attention items, and recent history. Movement excludes queries not shared by both sweeps. Filterable by location and time window. Prefer this over fanning out to separate read tools for the same question. SCOPE LIMIT: this returns nothing about Advanced Measurement: no plan, Targets, Properties, groups, or segments. Its silence is not evidence that a project lacks them. Before stating that a project has no Properties, no Advanced plan, or cannot break out per-Property performance, call canonry_measurement_plan_get to establish the portfolio type, and canonry_measurement_portfolio_summary to rank Properties.',
     access: "read",
     tier: "core",
     inputSchema: z4.object({

package/dist/{chunk-C4KBR4H6.js → chunk-WTYVSCMP.js}

@@ -16,12 +16,12 @@ import {
   resolveOperatorApiKeyIds,
   runWithUsageTags,
   saveConfigPatch
-} from "./chunk-I4AHG7K3.js";
+} from "./chunk-S4DBS5DP.js";
 import {
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout
-} from "./chunk-KZYOJ4F5.js";
+} from "./chunk-R4COV5KR.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -152,6 +152,7 @@ import {
   refreshAccessToken,
   registerOAuthAdminRoutes,
   registerOAuthRoutes,
+  requireInstanceAdministrator,
   researchRunQueries,
   researchRuns,
   resolveDestination,
@@ -176,7 +177,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-TM2NQMJA.js";
+} from "./chunk-5E4ASNU4.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -6040,6 +6041,13 @@ function resolveAgentEnabled(env, config) {
   }
   return config.agent?.mode !== "disabled";
 }
+function resolveAgentProactiveEnabled(env, config) {
+  const raw = env.CANONRY_AGENT_PROMPT_ONLY?.trim();
+  if (raw) {
+    return !(raw === "1" || raw.toLowerCase() === "true");
+  }
+  return config.agent?.mode !== "prompt-only";
+}
 
 // src/places-config.ts
 var DEFAULT_TIER = "atmosphere";
@@ -6468,7 +6476,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "f2d9ae1712b6aa64f5f6d4141c9a5208763a634e" : void 0;
+  const embedded = true ? "3bdf995c7b38b778a35e91dc19377f788cc77204" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -11762,7 +11770,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-5P62KKG6.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-4XMMO3JK.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -13656,11 +13664,18 @@ var PROVIDER_MODELS = {
     [LlmCapabilities.classify]: "glm-5-turbo"
   },
   [AgentProviderIds.deepinfra]: {
-    // DeepInfra `org/Model` slugs. GLM-5.2 (Sonnet-class) on all three tiers —
-    // it undercuts the Claude tiers it replaces, so the cheaper tiers take no
-    // quality hit. Resolved into a custom openai-completions model, not pi-ai's
-    // catalog.
-    [LlmCapabilities.agent]: "zai-org/GLM-5.2",
+    // DeepInfra `org/Model` slugs, resolved into a custom openai-completions
+    // model rather than pi-ai's catalog.
+    //
+    // The agent tier is pinned explicitly: the dashboard picker sends a
+    // provider and no model, so whatever sits here is what selecting DeepInfra
+    // pins a session to.
+    //
+    // analyze + classify stay on GLM on purpose. Those tiers suppress the
+    // reasoning trace through GLM's chat-template switch, and that branch
+    // applies only to a model declared `reasoning: true`; moving them to
+    // DeepSeek-V4-Flash (which is not) would quietly stop suppressing anything.
+    [LlmCapabilities.agent]: "deepseek-ai/DeepSeek-V4-Flash",
     [LlmCapabilities.analyze]: "zai-org/GLM-5.2",
     [LlmCapabilities.classify]: "zai-org/GLM-5.2"
   }
@@ -13718,7 +13733,7 @@ var AGENT_PROVIDERS = {
       },
       // Best-effort metadata. Costs are USD/1M tokens (DeepInfra published
       // rates: GLM-5.2 ~$0.95 in / $0.18 cached / $3.00 out; DeepSeek-V4-Flash
-      // ~$0.10 in / $0.20 out). contextWindow is DeepInfra's 1M (fp4) serving
+      // $0.09 in / $0.18 out). contextWindow is DeepInfra's 1M (fp4) serving
       // window for both models; it's descriptive (see OpenAiCompatibleModelMeta),
       // so it documents the real window rather than gating compaction.
       knownModels: {
@@ -13732,7 +13747,7 @@ var AGENT_PROVIDERS = {
           contextWindow: 1048576,
           maxTokens: 32768,
           reasoning: false,
-          cost: { input: 0.1, output: 0.2, cacheRead: 0, cacheWrite: 0 }
+          cost: { input: 0.09, output: 0.18, cacheRead: 0, cacheWrite: 0 }
         }
       },
       // Fallback for arbitrary `--model` slugs we don't ship as tiers. cost is
@@ -13981,6 +13996,8 @@ import { Type as Type2 } from "@sinclair/typebox";
 import { randomUUID } from "crypto";
 var MAX_TOOL_RESULT_CHARS = 2e4;
 var TRUNCATION_NOTE = "... (truncated \u2014 result too large)";
+var MAX_STRUCTURED_TRUNCATION_CHARS = 2e6;
+var MAX_TRUNCATION_PASSES = 32;
 function serializeResult(value) {
   return JSON.stringify(value, null, 2);
 }
@@ -13998,11 +14015,17 @@ function largestArrayKey(obj) {
   return best;
 }
 function trimRowsToFit(rows, render) {
-  let kept = rows.slice();
-  while (kept.length > 0 && render(kept).length > MAX_TOOL_RESULT_CHARS) {
-    kept = kept.slice(0, -1);
-  }
-  return kept;
+  if (rows.length === 0) return [];
+  const all = rows.slice();
+  if (render(all).length <= MAX_TOOL_RESULT_CHARS) return all;
+  let low = 0;
+  let high = rows.length - 1;
+  while (low < high) {
+    const middle = Math.ceil((low + high) / 2);
+    if (render(rows.slice(0, middle)).length <= MAX_TOOL_RESULT_CHARS) low = middle;
+    else high = middle - 1;
+  }
+  return rows.slice(0, low);
 }
 function nestedArrayCandidates(root) {
   const candidates = [];
@@ -14039,7 +14062,9 @@ function trimNestedArrays(full) {
   const copy = parsed;
   copy.__truncated = true;
   let out = serializeResult(copy);
+  let passes = 0;
   while (out.length > MAX_TOOL_RESULT_CHARS) {
+    if (++passes > MAX_TRUNCATION_PASSES) return void 0;
     const candidate = nestedArrayCandidates(copy).at(0);
     if (!candidate) return void 0;
     const { owner, key, rows } = candidate;
@@ -14069,6 +14094,9 @@ function trimNestedArrays(full) {
 function truncateToolResult(details) {
   const full = serializeResult(details);
   if (full.length <= MAX_TOOL_RESULT_CHARS) return full;
+  if (full.length > MAX_STRUCTURED_TRUNCATION_CHARS) {
+    return full.slice(0, MAX_TOOL_RESULT_CHARS) + "\n" + TRUNCATION_NOTE;
+  }
   if (Array.isArray(details)) {
     const kept = trimRowsToFit(
       details,
@@ -15038,6 +15066,15 @@ var MAX_HYDRATE_BYTES = 32 * 1024;
 function escapeMemoryFragment(value) {
   return value.replace(/<(\/?)memory>/gi, "<$1\u200Cmemory>");
 }
+function withoutPersistedToolDetails(messages) {
+  return messages.map((message) => {
+    if (!message || typeof message !== "object") return message;
+    const row = message;
+    if (row.role !== "toolResult" || !("details" in row)) return message;
+    const { details: _omitted, ...rest } = row;
+    return rest;
+  });
+}
 var SessionRegistry = class {
   live = /* @__PURE__ */ new Map();
   pending = /* @__PURE__ */ new Map();
@@ -15065,6 +15102,10 @@ var SessionRegistry = class {
   constructor(opts) {
     this.opts = opts;
   }
+  /** False only in prompt-only mode; absent means proactive, as it always was. */
+  get proactive() {
+    return this.opts.proactive !== false;
+  }
   /**
    * Lazily load + cache the injected remote MCP tools. The seam OSS-A exposes:
    * `loadExternalMcpTools` connects to each configured server over the frozen
@@ -15149,7 +15190,7 @@ var SessionRegistry = class {
       this.scopes.set(projectName, preferences?.toolScope ?? AeroToolScopes.all);
       this.profiles.set(projectName, preferences?.toolProfile ?? AeroToolProfiles.default);
       this.projectIds.set(projectName, projectId);
-      if (queued.length > 0) {
+      if (queued.length > 0 && this.proactive) {
         this.appendPending(projectName, queued);
         this.updateRow(projectId, { followUpQueue: "[]" });
       }
@@ -15378,7 +15419,7 @@ ${lines.join("\n")}
     if (!agent) return;
     const projectId = this.resolveProjectId(projectName);
     this.updateRow(projectId, {
-      messages: JSON.stringify(agent.state.messages)
+      messages: JSON.stringify(withoutPersistedToolDetails(agent.state.messages))
     });
   }
   /**
@@ -15395,6 +15436,7 @@ ${lines.join("\n")}
    * both the in-memory pending and the DB-queue migration produced copies).
    */
   queueFollowUp(projectName, message) {
+    if (!this.proactive) return;
     if (this.live.has(projectName)) {
       this.appendPending(projectName, [message]);
     } else {
@@ -15403,6 +15445,7 @@ ${lines.join("\n")}
   }
   /** Consume (and clear) the pending queue for a project. Caller prompts with the result. */
   consumePending(projectName) {
+    if (!this.proactive) return [];
     const msgs = this.pending.get(projectName) ?? [];
     if (msgs.length === 0) return [];
     this.pending.delete(projectName);
@@ -15422,6 +15465,7 @@ ${lines.join("\n")}
    * RunCoordinator calls after a run completes to wake Aero unprompted.
    */
   async drainNow(projectName) {
+    if (!this.proactive) return;
     if (!this.hasPendingWork(projectName)) return;
     try {
       let agent;
@@ -15549,7 +15593,7 @@ ${lines.join("\n")}
       systemPrompt: params.systemPrompt,
       modelProvider: params.provider ?? params.modelProvider ?? AgentProviderIds.claude,
       modelId: params.modelId ?? "claude-opus-4-7",
-      messages: JSON.stringify(params.messages),
+      messages: JSON.stringify(withoutPersistedToolDetails(params.messages)),
       followUpQueue: JSON.stringify(params.followUpQueue),
       createdAt: now,
       updatedAt: now
@@ -15786,13 +15830,15 @@ function registerAgentRoutes(app, opts) {
   app.get(
     "/projects/:name/agent/transcript",
     async (request) => {
+      requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
       const row = opts.db.select().from(agentSessions).where(eq22(agentSessions.projectId, project.id)).get();
       if (!row) {
         return { messages: [], modelProvider: null, modelId: null, updatedAt: null };
       }
+      const messages = parseJsonColumn(row.messages, []);
       return {
-        messages: parseJsonColumn(row.messages, []),
+        messages,
         modelProvider: row.modelProvider,
         modelId: row.modelId,
         updatedAt: row.updatedAt
@@ -15802,6 +15848,7 @@ function registerAgentRoutes(app, opts) {
   app.get(
     "/projects/:name/agent/providers",
     async (request) => {
+      requireInstanceAdministrator(request);
       resolveProject(opts.db, request.params.name);
       return buildAgentProvidersResponse(opts.sessionRegistry.getConfig());
     }
@@ -15809,6 +15856,7 @@ function registerAgentRoutes(app, opts) {
   app.delete(
     "/projects/:name/agent/transcript",
     async (request) => {
+      requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
       opts.sessionRegistry.reset(project.name);
       opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq22(agentSessions.projectId, project.id)).run();
@@ -15816,6 +15864,7 @@ function registerAgentRoutes(app, opts) {
     }
   );
   app.post("/projects/:name/agent/prompt", async (request, reply) => {
+    requireInstanceAdministrator(request);
     const project = resolveProject(opts.db, request.params.name);
     const body = request.body;
     const promptText = (body?.prompt ?? "").trim();
@@ -15877,6 +15926,7 @@ function registerAgentRoutes(app, opts) {
   app.get(
     "/projects/:name/agent/memory",
     async (request) => {
+      requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
       return { entries: listMemoryEntries(opts.db, project.id) };
     }
@@ -15884,6 +15934,7 @@ function registerAgentRoutes(app, opts) {
   app.put(
     "/projects/:name/agent/memory",
     async (request) => {
+      requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
       const parsed = agentMemoryUpsertRequestSchema.safeParse(request.body);
       if (!parsed.success) {
@@ -15910,6 +15961,7 @@ function registerAgentRoutes(app, opts) {
   app.delete(
     "/projects/:name/agent/memory",
     async (request) => {
+      requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
       const parsed = agentMemoryDeleteRequestSchema.safeParse(request.body);
       if (!parsed.success) {
@@ -17597,10 +17649,12 @@ async function createServer(opts) {
     skipProbe: true
   });
   const agentEnabled = resolveAgentEnabled(process.env, opts.config);
+  const agentProactive = resolveAgentProactiveEnabled(process.env, opts.config);
   const sessionRegistry = agentEnabled ? new SessionRegistry({
     db: opts.db,
     client: aeroClient,
-    config: opts.config
+    config: opts.config,
+    proactive: agentProactive
   }) : void 0;
   const runCoordinator = new RunCoordinator(
     opts.db,
@@ -17609,6 +17663,7 @@ async function createServer(opts) {
     (runId, projectId, result) => notifier.dispatchInsightWebhooks(runId, projectId, result),
     async (ctx) => {
       if (!sessionRegistry) return;
+      if (!agentProactive) return;
       const project = opts.db.select({ name: projects.name }).from(projects).where(eq25(projects.id, ctx.projectId)).get();
       if (!project) return;
       let content;

package/dist/cli.js

@@ -35,11 +35,11 @@ import {
   trackCliCommandFinished,
   trackEvent,
   waitForServerRuntimeStartup
-} from "./chunk-C4KBR4H6.js";
+} from "./chunk-WTYVSCMP.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-GHAUT7XJ.js";
+} from "./chunk-LR7BVM53.js";
 import {
   CliError,
   EXIT_SYSTEM_ERROR,
@@ -66,13 +66,13 @@ import {
   shouldPrintServeSkillsNudge,
   systemError,
   usageError
-} from "./chunk-I4AHG7K3.js";
+} from "./chunk-S4DBS5DP.js";
 import {
   DEFAULT_DEMO_TRUSTED_PROXIES,
   trustedProxiesProblem,
   trustedProxyProblem
 } from "./chunk-RB2F4D3Z.js";
-import "./chunk-KZYOJ4F5.js";
+import "./chunk-R4COV5KR.js";
 import "./chunk-AOJU5LKX.js";
 import {
   CLOUDFLARE_WORKER_BINDINGS,
@@ -88,7 +88,7 @@ import {
   queries,
   renderReportHtml,
   runs
-} from "./chunk-TM2NQMJA.js";
+} from "./chunk-5E4ASNU4.js";
 import {
   AdsDeliverySnapshotStatuses,
   AdsHistoricalCampaignRollupStatuses,
@@ -435,7 +435,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-JEGVGOPQ.js");
+  const { createDemoServer } = await import("./demo-server-WRVVNKLS.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-JEGVGOPQ.js → demo-server-WRVVNKLS.js}

@@ -4,7 +4,7 @@ import {
 import {
   layoutSiteCrawlGraphInput,
   persistSiteCrawlGraphLayout
-} from "./chunk-KZYOJ4F5.js";
+} from "./chunk-R4COV5KR.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -83,7 +83,7 @@ import {
   siteCrawlPages,
   siteCrawlSnapshots,
   trafficSources
-} from "./chunk-TM2NQMJA.js";
+} from "./chunk-5E4ASNU4.js";
 import {
   RunKinds,
   SiteCrawlFetchStates,

package/dist/index.d.ts

@@ -268,15 +268,27 @@ interface ExternalMcpServerConfig {
 }
 interface AgentConfigEntry {
     /**
-     * Agent mode. `'disabled'` turns the built-in Aero agent OFF entirely — the
-     * proactive auto-wake on run completion does not fire, the `SessionRegistry`
-     * is not constructed, and the interactive agent routes (`/projects/:name/
-     * agent/*`) plus the `canonry agent ask` CLI (a thin client of those routes)
-     * are not served. Absent (the default) leaves Aero enabled. Resolved, with
-     * the `CANONRY_AGENT_DISABLED` env override, by `resolveAgentEnabled` in
-     * agent-config.ts.
+     * Agent mode. Three states, held on ONE field so they stay mutually
+     * exclusive: there is no way to write down "off, but still waking itself".
+     *
+     *  - `'disabled'` turns the built-in Aero agent OFF entirely — the proactive
+     *    auto-wake on run completion does not fire, the `SessionRegistry` is not
+     *    constructed, and the interactive agent routes (`/projects/:name/agent/*`)
+     *    plus the `canonry agent ask` CLI (a thin client of those routes) are not
+     *    served. Resolved, with the `CANONRY_AGENT_DISABLED` env override, by
+     *    `resolveAgentEnabled`.
+     *  - `'prompt-only'` keeps every interactive surface and removes ONLY the
+     *    proactive wake: Aero answers when asked and never starts a turn by
+     *    itself, so it costs nothing while nobody is talking to it and never
+     *    writes into the transcript unattended. Resolved, with the
+     *    `CANONRY_AGENT_PROMPT_ONLY` env override, by
+     *    `resolveAgentProactiveEnabled`.
+     *  - absent (the default) leaves Aero enabled AND proactive, which is the
+     *    behaviour every existing install already has.
+     *
+     * Both resolvers live in agent-config.ts.
      */
-    mode?: 'disabled';
+    mode?: 'disabled' | 'prompt-only';
 }
 interface DashboardConfigEntry {
     /**

package/dist/index.js

@@ -3,13 +3,13 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-C4KBR4H6.js";
+} from "./chunk-WTYVSCMP.js";
 import {
   loadConfig
-} from "./chunk-I4AHG7K3.js";
-import "./chunk-KZYOJ4F5.js";
+} from "./chunk-S4DBS5DP.js";
+import "./chunk-R4COV5KR.js";
 import "./chunk-AOJU5LKX.js";
-import "./chunk-TM2NQMJA.js";
+import "./chunk-5E4ASNU4.js";
 import "./chunk-D3DKDTXP.js";
 export {
   GoogleMarketingRuntimeError,

package/dist/{intelligence-service-5P62KKG6.js → intelligence-service-4XMMO3JK.js}

@@ -1,7 +1,7 @@
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-TM2NQMJA.js";
+} from "./chunk-5E4ASNU4.js";
 import "./chunk-D3DKDTXP.js";
 export {
   HISTORY_WINDOW_RUNS,