@canonry/canonry 6.1.5 → 6.2.0

package/dist/{chunk-4UEX44C3.js → chunk-2RFHQ6XT.js}

@@ -19,21 +19,21 @@ import {
   runWithUsageTags,
   saveConfigPatch,
   sentimentInstallReadiness
-} from "./chunk-FRBKYQN7.js";
+} from "./chunk-V6JUBTNL.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-MSFBNFTI.js";
+} from "./chunk-4EKOKWQT.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-5QH72CTN.js";
+} from "./chunk-W3GDZZNF.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -214,7 +214,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-MTEVU6KG.js";
+} from "./chunk-ENI3GOWW.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -304,6 +304,7 @@ import {
   canonicalizeGtmAccountId,
   canonicalizeGtmContainerId,
   canonicalizeGtmResourceSelection,
+  classifyProviderErrorMessage,
   classifyProviderErrorMessages,
   classifyTemplateLinkEdge,
   cloudflareQueueNameSchema,
@@ -327,6 +328,7 @@ import {
   effectiveBrandNames,
   effectiveDomains,
   embedClientConfigForRequest,
+  extractProviderHttpStatus,
   factorStatusFromScore,
   filterCapturedCitedUrls,
   forbidden,
@@ -414,7 +416,7 @@ import {
   visibilityReportRequestSchema,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-J7LV4CS2.js";
+} from "./chunk-6EPN4XY5.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -4053,6 +4055,19 @@ import os4 from "os";
 import { GoogleGenAI } from "@google/genai";
 
 // ../provider-gemini/src/utils.ts
+var GEMINI_MAX_RATE_LIMIT_WAIT_MS = 65e3;
+function geminiRetryDelayMs(err) {
+  const match = /"retryDelay"\s*:\s*"(\d+(?:\.\d+)?)s"/.exec(describeError(err));
+  return match ? Math.round(Number(match[1]) * 1e3) : null;
+}
+function isGeminiDailyQuotaError(err) {
+  return /"quotaId"\s*:\s*"[^"]*PerDay/i.test(describeError(err));
+}
+function isGeminiRetryable(err) {
+  if (!isRetryableHttpError(err) || isGeminiDailyQuotaError(err)) return false;
+  const asked = geminiRetryDelayMs(err);
+  return asked === null || asked <= GEMINI_MAX_RATE_LIMIT_WAIT_MS;
+}
 async function withRetry2(fn, options = {}) {
   return withRetry(fn, {
     maxRetries: options.maxRetries ?? 3,
@@ -4061,7 +4076,12 @@ async function withRetry2(fn, options = {}) {
     // provider has shipped to date (1000, 2000, 4000ms). Enable per-caller
     // if you need it.
     jitter: false,
-    isRetryable: isRetryableHttpError,
+    isRetryable: isGeminiRetryable,
+    computeDelayMs: (_attempt, err, defaultMs) => {
+      const asked = geminiRetryDelayMs(err);
+      return asked === null ? defaultMs : asked + 500;
+    },
+    ...options.sleep ? { sleep: options.sleep } : {},
     onRetry: ({ attempt, err, delayMs }) => {
       console.warn(
         `[provider] Attempt ${attempt + 1} failed, retrying in ${delayMs}ms...`,
@@ -4072,7 +4092,7 @@ async function withRetry2(fn, options = {}) {
 }
 
 // ../provider-gemini/src/normalize.ts
-var DEFAULT_MODEL = "gemini-2.5-flash";
+var DEFAULT_MODEL = "gemini-flash-latest";
 function isVertexConfig(config) {
   return !!config.vertexProject;
 }
@@ -4515,10 +4535,20 @@ var geminiAdapter = {
   keyUrl: "https://aistudio.google.com/apikey",
   // Upstream model list: https://ai.google.dev/gemini-api/docs/models
   modelRegistry: {
-    defaultModel: "gemini-2.5-flash",
+    defaultModel: "gemini-flash-latest",
     validationPattern: /./,
-    validationHint: "any valid Google model name (e.g. gemini-2.5-flash, learnlm-1.5-pro-experimental)",
+    validationHint: "any valid Google model name (e.g. gemini-flash-latest, gemini-3.8-flash)",
     knownModels: [
+      // Google's moving aliases: always the newest Flash / Flash-Lite, with
+      // 2 weeks' email notice before a breaking change. The model actually
+      // served is recorded per snapshot (`servedModel`), so trends still show
+      // when the model behind an alias changed.
+      { id: "gemini-flash-latest", displayName: "Gemini Flash (latest)", tier: "standard" },
+      { id: "gemini-flash-lite-latest", displayName: "Gemini Flash-Lite (latest)", tier: "economy" },
+      { id: "gemini-3.8-flash", displayName: "Gemini 3.8 Flash", tier: "standard" },
+      { id: "gemini-3.5-flash-lite", displayName: "Gemini 3.5 Flash-Lite", tier: "economy" },
+      // Google limits the 2.5 models to projects that already used them, so a
+      // new key may be refused. Listed for installs that still pin them.
       { id: "gemini-2.5-pro", displayName: "Gemini 2.5 Pro", tier: "flagship" },
       { id: "gemini-2.5-flash", displayName: "Gemini 2.5 Flash", tier: "standard" },
       { id: "gemini-2.5-flash-lite", displayName: "Gemini 2.5 Flash-Lite", tier: "economy" },
@@ -7830,7 +7860,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "07710f04d6bdd8ec8b4374a93f0f3c3d1b56f498" : void 0;
+  const embedded = true ? "633bd63832cf6af1da610e63f376dfc872975b49" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -7846,7 +7876,7 @@ import fs4 from "fs";
 import path3 from "path";
 import os3 from "os";
 import { setImmediate as yieldToEventLoop } from "timers/promises";
-import { and as and3, asc as asc2, count, eq as eq3, inArray, isNotNull, isNull, ne, sql as sql2 } from "drizzle-orm";
+import { and as and3, asc as asc2, count, desc, eq as eq3, inArray, isNotNull, isNull, lt, ne, sql as sql2 } from "drizzle-orm";
 
 // src/run-telemetry.ts
 import crypto4 from "crypto";
@@ -7911,6 +7941,51 @@ function buildSiteAuditCompletedProps(input) {
   if (crawl.checkDeadLinks) props.deadLinksFound = crawl.deadLinksFound;
   return props;
 }
+var MAX_NESTED_KEYS = 12;
+function buildProviderOutcomeProps(providers, providerErrors) {
+  if (providerErrors.size === 0) return {};
+  const names = [.../* @__PURE__ */ new Set([...providers, ...providerErrors.keys()])].slice(0, MAX_NESTED_KEYS);
+  const providerOutcomes = {};
+  const providerHttpStatus = {};
+  for (const name of names) {
+    const message = providerErrors.get(name);
+    if (message === void 0) {
+      providerOutcomes[name] = "ok";
+      continue;
+    }
+    providerOutcomes[name] = classifyProviderErrorMessage(message);
+    const status = extractProviderHttpStatus(message);
+    if (status !== void 0) providerHttpStatus[name] = status;
+  }
+  return Object.keys(providerHttpStatus).length > 0 ? { providerOutcomes, providerHttpStatus } : { providerOutcomes };
+}
+function runFailureSite(providerCallStart, providerCallEnd) {
+  if (providerCallStart === void 0) return "setup";
+  return providerCallEnd === void 0 ? "provider_call" : "finalize";
+}
+var ERROR_NAME_RE = /^[a-z_$][\w$]{0,39}$/i;
+var ERROR_SYS_CODE_RE = /^[A-Z][A-Z0-9_]{1,39}$/;
+function describeRunFailure(err, site) {
+  const props = site ? { errorSite: site } : {};
+  const name = err instanceof Error ? err.name : typeof err;
+  if (ERROR_NAME_RE.test(name)) props.errorName = name;
+  const code = err && typeof err === "object" && "code" in err ? err.code : void 0;
+  if (typeof code === "string" && ERROR_SYS_CODE_RE.test(code)) props.errorSysCode = code;
+  return props;
+}
+var FAILURE_STREAK_SAMPLE_AFTER = 5;
+var FAILURE_STREAK_SAMPLE_RATE = 20;
+function failureStreakSampling(status, priorStreak, runId) {
+  if (status !== "failed" && status !== "partial") return { report: true, props: {} };
+  if (priorStreak < FAILURE_STREAK_SAMPLE_AFTER) {
+    return { report: true, props: { failureStreak: priorStreak } };
+  }
+  const bucket = crypto4.createHash("sha256").update(runId).digest().readUInt32BE(0) % FAILURE_STREAK_SAMPLE_RATE;
+  return {
+    report: bucket === 0,
+    props: { failureStreak: priorStreak, sampleRate: FAILURE_STREAK_SAMPLE_RATE }
+  };
+}
 
 // src/provider-execution-gate.ts
 var ProviderExecutionGate = class {
@@ -8259,6 +8334,7 @@ function classifyRunAbortReason(message) {
   if (/^Run [^ ]+ is not executable\b/.test(message)) return "run_not_executable";
   return void 0;
 }
+var FAILURE_STREAK_LOOKBACK = 50;
 function classifyProviderErrors(errors) {
   return classifyProviderErrorMessages(errors.values());
 }
@@ -8853,21 +8929,28 @@ var JobRunner = class {
           ...executionContext.location ? { location: executionContext.location } : {}
         });
       } else {
-        trackEvent(
-          "run.completed",
-          buildRunCompletedProps({
-            status: "failed",
-            providerCount: executionContext.providerCount,
-            providers: executionContext.providers,
-            queryCount: executionContext.queryCount,
-            startTime,
-            trigger: executionContext.trigger,
-            canonicalDomain: executionContext.canonicalDomain,
-            phases,
-            location: executionContext.location
-          }),
-          { errorCode: "UNKNOWN" }
-        );
+        const sampling = failureStreakSampling("failed", this.priorFailureStreak(projectId, runId), runId);
+        if (sampling.report) {
+          trackEvent(
+            "run.completed",
+            {
+              ...buildRunCompletedProps({
+                status: "failed",
+                providerCount: executionContext.providerCount,
+                providers: executionContext.providers,
+                queryCount: executionContext.queryCount,
+                startTime,
+                trigger: executionContext.trigger,
+                canonicalDomain: executionContext.canonicalDomain,
+                phases,
+                location: executionContext.location
+              }),
+              ...describeRunFailure(err, runFailureSite(providerCallStart, providerCallEnd)),
+              ...sampling.props
+            },
+            { errorCode: "INTERNAL" }
+          );
+        }
       }
       if (this.onRunCompleted) {
         this.onRunCompleted(runId, projectId).catch((notifErr) => {
@@ -8931,21 +9014,28 @@ var JobRunner = class {
   reportFinalizedRun(input, finalStatus) {
     const { runId, projectId, providerErrors, executionContext } = input;
     const failureCode = providerErrors.size > 0 ? classifyProviderErrors(providerErrors) : void 0;
-    trackEvent(
-      "run.completed",
-      buildRunCompletedProps({
-        status: finalStatus,
-        providerCount: executionContext.providerCount,
-        providers: executionContext.providers,
-        queryCount: executionContext.queryCount,
-        startTime: input.startTime,
-        trigger: executionContext.trigger,
-        canonicalDomain: executionContext.canonicalDomain,
-        phases: input.phases,
-        location: executionContext.location
-      }),
-      failureCode ? { errorCode: failureCode } : void 0
-    );
+    const sampling = failureStreakSampling(finalStatus, this.priorFailureStreak(projectId, runId), runId);
+    if (sampling.report) {
+      trackEvent(
+        "run.completed",
+        {
+          ...buildRunCompletedProps({
+            status: finalStatus,
+            providerCount: executionContext.providerCount,
+            providers: executionContext.providers,
+            queryCount: executionContext.queryCount,
+            startTime: input.startTime,
+            trigger: executionContext.trigger,
+            canonicalDomain: executionContext.canonicalDomain,
+            phases: input.phases,
+            location: executionContext.location
+          }),
+          ...buildProviderOutcomeProps(executionContext.providers, providerErrors),
+          ...sampling.props
+        },
+        failureCode ? { errorCode: failureCode } : void 0
+      );
+    }
     if (input.kind === RunKinds["answer-visibility"] && executionContext.trigger !== RunTriggers.probe && input.inserted > 0 && !this.hasPriorActivation(projectId, runId)) {
       trackEvent("activation.completed", {
         flowVersion: ONBOARDING_FLOW_VERSION,
@@ -10008,6 +10098,36 @@ var JobRunner = class {
     }
     providerReservations.clear();
   }
+  /**
+   * How many runs of the same kind, created before this one, failed or came
+   * back partial in a row. Telemetry only: it feeds `failureStreak` and the
+   * sampling of runs stuck failing the same way. Probes do not count, other run
+   * kinds (syncs, audits) neither break nor extend a streak, and a run aborted
+   * before any provider was called (`run.aborted`, never a failed
+   * `run.completed`) is skipped, so every failure counted was also reported.
+   */
+  priorFailureStreak(projectId, currentRunId) {
+    try {
+      const current = this.db.select({ kind: runs.kind, createdAt: runs.createdAt }).from(runs).where(eq3(runs.id, currentRunId)).get();
+      if (!current) return 0;
+      const recent = this.db.select({ status: runs.status, error: runs.error }).from(runs).where(and3(
+        eq3(runs.projectId, projectId),
+        eq3(runs.kind, current.kind),
+        lt(runs.createdAt, current.createdAt),
+        ne(runs.trigger, RunTriggers.probe),
+        inArray(runs.status, ["completed", "partial", "failed"])
+      )).orderBy(desc(runs.createdAt)).limit(FAILURE_STREAK_LOOKBACK).all();
+      let streak = 0;
+      for (const row of recent) {
+        if (row.status === "completed") break;
+        if (row.status === "failed" && row.error && classifyRunAbortReason(row.error)) continue;
+        streak++;
+      }
+      return streak;
+    } catch {
+      return 0;
+    }
+  }
   hasPriorActivation(projectId, currentRunId) {
     return this.db.select({ id: querySnapshots.id }).from(querySnapshots).innerJoin(runs, eq3(querySnapshots.runId, runs.id)).where(and3(
       eq3(runs.projectId, projectId),
@@ -10099,7 +10219,7 @@ import { eq as eq5, and as and5, sql as sql3 } from "drizzle-orm";
 
 // src/gsc-coverage-snapshot.ts
 import crypto7 from "crypto";
-import { and as and4, desc, eq as eq4, gte } from "drizzle-orm";
+import { and as and4, desc as desc2, eq as eq4, gte } from "drizzle-orm";
 var COVERAGE_IMPRESSION_WINDOW_DAYS = 30;
 function pageKey(raw) {
   if (!raw) return null;
@@ -10123,9 +10243,9 @@ function writeCoverageSnapshot(db, projectId, runId, opts = {}) {
     eq4(siteCrawlSnapshots.projectId, projectId),
     eq4(siteCrawlSnapshots.complete, true),
     eq4(runs.status, "completed")
-  )).orderBy(desc(siteCrawlSnapshots.createdAt)).limit(1).get();
+  )).orderBy(desc2(siteCrawlSnapshots.createdAt)).limit(1).get();
   const hasCrawlHistory = Boolean(db.select({ id: siteCrawlSnapshots.id }).from(siteCrawlSnapshots).where(eq4(siteCrawlSnapshots.projectId, projectId)).limit(1).get());
-  const latestAudit = db.select({ runId: siteAuditSnapshots.runId }).from(siteAuditSnapshots).where(eq4(siteAuditSnapshots.projectId, projectId)).orderBy(desc(siteAuditSnapshots.createdAt)).limit(1).get();
+  const latestAudit = db.select({ runId: siteAuditSnapshots.runId }).from(siteAuditSnapshots).where(eq4(siteAuditSnapshots.projectId, projectId)).orderBy(desc2(siteAuditSnapshots.createdAt)).limit(1).get();
   const sitemapUrls = latestCrawl?.attemptId ? db.select({ url: siteCrawlPages.url }).from(siteCrawlPages).where(and4(
     eq4(siteCrawlPages.projectId, projectId),
     eq4(siteCrawlPages.runId, latestCrawl.runId),
@@ -10346,11 +10466,11 @@ async function executeGscSync(db, runId, projectId, opts) {
 
 // src/gbp-sync.ts
 import crypto10 from "crypto";
-import { eq as eq7, and as and7, desc as desc3, inArray as inArray3, lt } from "drizzle-orm";
+import { eq as eq7, and as and7, desc as desc4, inArray as inArray3, lt as lt2 } from "drizzle-orm";
 
 // src/gbp-reviews.ts
 import crypto9 from "crypto";
-import { and as and6, desc as desc2, eq as eq6, inArray as inArray2, sql as sql4 } from "drizzle-orm";
+import { and as and6, desc as desc3, eq as eq6, inArray as inArray2, sql as sql4 } from "drizzle-orm";
 var log4 = createLogger("GbpReviews");
 var MS_PER_DAY = 864e5;
 var REVIEW_ALERT_MAX_AGE_DAYS = 30;
@@ -10382,7 +10502,7 @@ function placesReviewsDue(db, projectId, locationName, now) {
     eq6(gbpReviewRatings.projectId, projectId),
     eq6(gbpReviewRatings.locationName, locationName),
     eq6(gbpReviewRatings.origin, "places")
-  )).orderBy(desc2(gbpReviewRatings.observedAt)).limit(1).get();
+  )).orderBy(desc3(gbpReviewRatings.observedAt)).limit(1).get();
   if (!latest) return true;
   return now.getTime() - Date.parse(latest.observedAt) >= PLACES_REVIEW_MIN_INTERVAL_HOURS * 36e5;
 }
@@ -10463,7 +10583,7 @@ function persistReviewObservation(tx, projectId, runId, obs, ctx) {
     eq6(gbpReviewRatings.projectId, projectId),
     eq6(gbpReviewRatings.locationName, obs.locationName),
     eq6(gbpReviewRatings.origin, obs.origin)
-  )).orderBy(desc2(gbpReviewRatings.observedAt)).limit(1).get();
+  )).orderBy(desc3(gbpReviewRatings.observedAt)).limit(1).get();
   const baseline = latestRating === void 0;
   let queuedRatingDrop = false;
   if (!latestRating) {
@@ -10669,15 +10789,15 @@ async function executeGbpSync(db, runId, projectId, opts) {
             fetchLocationReviews(db, projectId, loc, reviewContext)
           ]);
           const lodgingHash = lodging ? hashLodging(lodging) : null;
-          const latestLodging = lodging ? db.select().from(gbpLodgingSnapshots).where(and7(eq7(gbpLodgingSnapshots.projectId, projectId), eq7(gbpLodgingSnapshots.locationName, loc.locationName))).orderBy(desc3(gbpLodgingSnapshots.syncedAt)).limit(1).get() : void 0;
+          const latestLodging = lodging ? db.select().from(gbpLodgingSnapshots).where(and7(eq7(gbpLodgingSnapshots.projectId, projectId), eq7(gbpLodgingSnapshots.locationName, loc.locationName))).orderBy(desc4(gbpLodgingSnapshots.syncedAt)).limit(1).get() : void 0;
           const lodgingChanged = lodging !== null && latestLodging?.contentHash !== lodgingHash;
           const attributesHash = hashAttributes(attributes);
-          const latestAttributes = db.select().from(gbpAttributesSnapshots).where(and7(eq7(gbpAttributesSnapshots.projectId, projectId), eq7(gbpAttributesSnapshots.locationName, loc.locationName))).orderBy(desc3(gbpAttributesSnapshots.syncedAt)).limit(1).get();
+          const latestAttributes = db.select().from(gbpAttributesSnapshots).where(and7(eq7(gbpAttributesSnapshots.projectId, projectId), eq7(gbpAttributesSnapshots.locationName, loc.locationName))).orderBy(desc4(gbpAttributesSnapshots.syncedAt)).limit(1).get();
           const attributesChanged = latestAttributes?.contentHash !== attributesHash;
           let placeToWrite = null;
           let placeToTouch = null;
           if (placesTier !== "off" && placesApiKey && lodging !== null && loc.placeId) {
-            const latestPlace = db.select().from(gbpPlaceDetails).where(and7(eq7(gbpPlaceDetails.projectId, projectId), eq7(gbpPlaceDetails.locationName, loc.locationName))).orderBy(desc3(gbpPlaceDetails.syncedAt)).limit(1).get();
+            const latestPlace = db.select().from(gbpPlaceDetails).where(and7(eq7(gbpPlaceDetails.projectId, projectId), eq7(gbpPlaceDetails.locationName, loc.locationName))).orderBy(desc4(gbpPlaceDetails.syncedAt)).limit(1).get();
             const ageDays = latestPlace ? (Date.now() - new Date(latestPlace.syncedAt).getTime()) / MS_PER_DAY2 : Infinity;
             if (ageDays >= placesRefreshDays) {
               try {
@@ -10747,7 +10867,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
               tx.delete(gbpKeywordMonthly).where(and7(
                 eq7(gbpKeywordMonthly.projectId, projectId),
                 eq7(gbpKeywordMonthly.locationName, loc.locationName),
-                lt(gbpKeywordMonthly.month, keywordRetentionCutoff)
+                lt2(gbpKeywordMonthly.month, keywordRetentionCutoff)
               )).run();
             }
             tx.delete(gbpPlaceActions).where(and7(eq7(gbpPlaceActions.projectId, projectId), eq7(gbpPlaceActions.locationName, loc.locationName))).run();
@@ -12075,7 +12195,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
 
 // src/bing-inspect-sitemap.ts
 import crypto14 from "crypto";
-import { eq as eq10, desc as desc4 } from "drizzle-orm";
+import { eq as eq10, desc as desc5 } from "drizzle-orm";
 var log9 = createLogger("BingInspectSitemap");
 var BING_INSPECT_SPACING_MS = 2e3;
 function parseBingDate(value) {
@@ -12239,7 +12359,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
         `Bing inspection failed for every URL attempted (${errors} of ${targetUrls.length}); coverage was left unchanged rather than re-dated from stored inspections. Last error: ${detail}`
       );
     }
-    const allInspections = db.select().from(bingUrlInspections).where(eq10(bingUrlInspections.projectId, projectId)).orderBy(desc4(bingUrlInspections.inspectedAt)).all();
+    const allInspections = db.select().from(bingUrlInspections).where(eq10(bingUrlInspections.projectId, projectId)).orderBy(desc5(bingUrlInspections.inspectedAt)).all();
     const latestByUrl = /* @__PURE__ */ new Map();
     const definitiveByUrl = /* @__PURE__ */ new Map();
     for (const row of allInspections) {
@@ -12305,7 +12425,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
 
 // src/coverage-refresh.ts
 import crypto15 from "crypto";
-import { and as and9, desc as desc5, eq as eq11, inArray as inArray5 } from "drizzle-orm";
+import { and as and9, desc as desc6, eq as eq11, inArray as inArray5 } from "drizzle-orm";
 var log10 = createLogger("CoverageRefresh");
 var COVERAGE_REFRESH_MIN_INTERVAL_MS = 60 * 60 * 1e3;
 var COVERAGE_REFRESH_MANUAL_MIN_INTERVAL_MS = 2 * 60 * 1e3;
@@ -12334,7 +12454,7 @@ async function maybeRefreshGscCoverage(db, config, projectId, deps = defaultDeps
       eq11(runs.kind, RunKinds["inspect-sitemap"]),
       inArray5(runs.status, IN_FLIGHT_STATUSES)
     )
-  ).orderBy(desc5(runs.createdAt)).limit(1).get();
+  ).orderBy(desc6(runs.createdAt)).limit(1).get();
   if (inFlight2) {
     log10.info("skip.in-flight", { projectId });
     return null;
@@ -12346,7 +12466,7 @@ async function maybeRefreshGscCoverage(db, config, projectId, deps = defaultDeps
       eq11(runs.kind, RunKinds["inspect-sitemap"]),
       inArray5(runs.status, ACTIVE_OR_DONE_STATUSES)
     )
-  ).orderBy(desc5(runs.createdAt)).limit(1).get();
+  ).orderBy(desc6(runs.createdAt)).limit(1).get();
   if (recent) {
     const ageMs = nowMs - Date.parse(recent.createdAt);
     if (Number.isFinite(ageMs) && ageMs < windowMs) {
@@ -12571,7 +12691,7 @@ function computeSummary(rows) {
 // src/backlink-extract.ts
 import crypto17 from "crypto";
 import fs5 from "fs";
-import { and as and11, desc as desc6, eq as eq13 } from "drizzle-orm";
+import { and as and11, desc as desc7, eq as eq13 } from "drizzle-orm";
 var log12 = createLogger("BacklinkExtract");
 function defaultDeps3() {
   return {
@@ -12589,7 +12709,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     if (!project) {
       throw new Error(`Project not found: ${projectId}`);
     }
-    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq13(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq13(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc6(ccReleaseSyncs.createdAt)).limit(1).get();
+    const sync = opts.release ? db.select().from(ccReleaseSyncs).where(eq13(ccReleaseSyncs.release, opts.release)).get() : db.select().from(ccReleaseSyncs).where(eq13(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)).orderBy(desc7(ccReleaseSyncs.createdAt)).limit(1).get();
     if (!sync) {
       throw new Error("No ready release sync available \u2014 run `canonry backlinks sync` first");
     }
@@ -13493,10 +13613,13 @@ function deadLinkCheckedCount(edges, pages) {
 }
 function trackSiteAuditOutcome(db, input) {
   try {
-    const errorCode = input.status === "cancelled" ? "RUN_CANCELLED" : input.status === "failed" ? "UNKNOWN" : void 0;
+    const errorCode = input.status === "cancelled" ? "RUN_CANCELLED" : input.status === "failed" ? "INTERNAL" : void 0;
     trackEvent(
       "site_audit.completed",
-      buildSiteAuditCompletedProps(input),
+      {
+        ...buildSiteAuditCompletedProps(input),
+        ...input.status === "failed" ? describeRunFailure(input.error) : {}
+      },
       errorCode ? { errorCode } : void 0
     );
     const pagesAudited = input.crawl?.pagesAudited ?? 0;
@@ -14063,7 +14186,8 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       status: cancelled ? "cancelled" : "failed",
       startTime,
       trigger,
-      canonicalDomain
+      canonicalDomain,
+      error
     });
     throw error;
   }
@@ -14071,7 +14195,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
 
 // src/commands/backfill.ts
 import { setImmediate as yieldToEventLoop2 } from "timers/promises";
-import { and as and15, asc as asc4, desc as desc7, eq as eq17, gt as gt3, inArray as inArray7, isNull as isNull2, lte as lte2, sql as sql7 } from "drizzle-orm";
+import { and as and15, asc as asc4, desc as desc8, eq as eq17, gt as gt3, inArray as inArray7, isNull as isNull2, lte as lte2, sql as sql7 } from "drizzle-orm";
 var SNAPSHOT_BATCH_SIZE = 500;
 var PATH_REPAIR_PAGE_SIZE = 128;
 async function backfillAnswerVisibilityCommand(opts) {
@@ -14259,7 +14383,7 @@ function backfillNormalizedPaths(db, opts) {
 async function repairStoredPaths(db, table, opts) {
   const pageSize = opts?.pageSize ?? PATH_REPAIR_PAGE_SIZE;
   const projectScope = opts?.projectId ? sql7`+${table.projectId} = ${opts.projectId}` : void 0;
-  const lastId = db.select({ id: table.id }).from(table).where(projectScope).orderBy(desc7(table.id)).limit(1).get()?.id;
+  const lastId = db.select({ id: table.id }).from(table).where(projectScope).orderBy(desc8(table.id)).limit(1).get()?.id;
   if (lastId === void 0) return { examined: 0, updated: 0, unchanged: 0 };
   let cursor;
   let examined = 0;
@@ -14549,7 +14673,7 @@ function readStoredGroundingSources(rawResponse) {
   return result2;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-JYGP6LME.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-4IONMOFB.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -15966,7 +16090,7 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 }
 
 // src/notifier.ts
-import { eq as eq20, desc as desc8, and as and18, inArray as inArray10, or } from "drizzle-orm";
+import { eq as eq20, desc as desc9, and as and18, inArray as inArray10, or } from "drizzle-orm";
 import crypto21 from "crypto";
 var log19 = createLogger("Notifier");
 var MATERIAL_MAGNITUDE_DELTA = 20;
@@ -16507,7 +16631,7 @@ var Notifier = class {
         eq20(runs.kind, thisRun.kind),
         or(eq20(runs.status, "completed"), eq20(runs.status, "partial"))
       )
-    ).orderBy(desc8(runs.createdAt), desc8(runs.id)).limit(RECENT_FETCH_LIMIT).all();
+    ).orderBy(desc9(runs.createdAt), desc9(runs.id)).limit(RECENT_FETCH_LIMIT).all();
     const groups = groupRunsByCreatedAt(recentRuns);
     const currentGroupIdx = groups.findIndex((g) => g[0]?.createdAt === thisRun.createdAt);
     if (currentGroupIdx < 0) return [];
@@ -16828,12 +16952,17 @@ var PROVIDER_MODELS = {
     [LlmCapabilities.classify]: "gpt-5-nano"
   },
   [AgentProviderIds.gemini]: {
-    // Gemini's 2.5-flash is already cheap + capable; flash-lite is the
+    // Gemini's Flash is already cheap + capable; Flash-Lite is the
     // dedicated micro tier for classify. Analyze stays on flash because
     // flash-lite drops too much quality for structured synthesis.
-    [LlmCapabilities.agent]: "gemini-2.5-flash",
-    [LlmCapabilities.analyze]: "gemini-2.5-flash",
-    [LlmCapabilities.classify]: "gemini-2.5-flash-lite"
+    // Exact IDs, never Google's `-latest` aliases: pi-ai derives request
+    // options (thinking level) from the catalog entry for the ID it is given,
+    // and an alias entry can lag the model it serves. `gemini-flash-latest`
+    // allows MINIMAL thinking while the 3.8 Flash it resolves to rejects it,
+    // so every Aero turn failed. Sweeps can use the alias; Aero cannot.
+    [LlmCapabilities.agent]: "gemini-3.8-flash",
+    [LlmCapabilities.analyze]: "gemini-3.8-flash",
+    [LlmCapabilities.classify]: "gemini-3.5-flash-lite"
   },
   [AgentProviderIds.zai]: {
     // GLM lineage: 5.2 replaced 5.1, which pi-ai 0.87 dropped from its
@@ -18726,7 +18855,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
 
 // src/agent/memory-store.ts
 import crypto24 from "crypto";
-import { and as and19, desc as desc9, eq as eq22, like, sql as sql10, or as or2 } from "drizzle-orm";
+import { and as and19, desc as desc10, eq as eq22, like, sql as sql10, or as or2 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto(row) {
@@ -18740,7 +18869,7 @@ function rowToDto(row) {
   };
 }
 function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq22(agentMemory.projectId, projectId)).orderBy(desc9(agentMemory.updatedAt));
+  const query = db.select().from(agentMemory).where(eq22(agentMemory.projectId, projectId)).orderBy(desc10(agentMemory.updatedAt));
   const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
   return rows.map(rowToDto);
 }
@@ -18786,7 +18915,7 @@ function loadRecentForHydrate(db, projectId, limit, sessionId) {
   return db.select().from(agentMemory).where(and19(
     eq22(agentMemory.projectId, projectId),
     or2(sql10`substr(${agentMemory.key}, 1, ${COMPACTION_KEY_PREFIX.length}) <> ${COMPACTION_KEY_PREFIX}`, sessionId ? sql10`substr(${agentMemory.key}, 1, ${sessionPrefix.length}) = ${sessionPrefix}` : void 0)
-  )).orderBy(desc9(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
+  )).orderBy(desc10(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
 }
 function writeCompactionNote(db, args) {
   if (Buffer.byteLength(args.summary, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
@@ -18814,7 +18943,7 @@ function writeCompactionNote(db, args) {
         eq22(agentMemory.projectId, args.projectId),
         like(agentMemory.key, `${sessionPrefix}%`)
       )
-    ).orderBy(desc9(agentMemory.updatedAt)).all();
+    ).orderBy(desc10(agentMemory.updatedAt)).all();
     const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
     if (stale.length > 0) {
       tx.delete(agentMemory).where(sql10`${agentMemory.id} IN (${sql10.join(stale.map((s) => sql10`${s}`), sql10`, `)})`).run();

package/dist/{chunk-MSFBNFTI.js → chunk-4EKOKWQT.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-MTEVU6KG.js";
+} from "./chunk-ENI3GOWW.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -13,7 +13,7 @@ import {
   TEMPLATE_LINK_RATIO_THRESHOLD,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-J7LV4CS2.js";
+} from "./chunk-6EPN4XY5.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {

package/dist/{chunk-J7LV4CS2.js → chunk-6EPN4XY5.js}

@@ -19859,6 +19859,7 @@ function serializeForInlineScript(value) {
 var PROVIDER_ERROR_PRIORITY = [
   "PROVIDER_AUTH",
   "RATE_LIMITED",
+  "PROVIDER_UNAVAILABLE",
   "TIMEOUT",
   "NETWORK",
   "PARSE_ERROR",
@@ -19871,6 +19872,10 @@ function classifyProviderErrorMessage(message) {
   if (/\b429\b|rate[_ -]?limit|too many requests|quota[_ -]?exceeded/i.test(message)) {
     return "RATE_LIMITED";
   }
+  const status = extractProviderHttpStatus(message);
+  if (status !== void 0 && status >= 500 || /overloaded|service unavailable|bad gateway|internal server error/i.test(message)) {
+    return "PROVIDER_UNAVAILABLE";
+  }
   if (/timeout|timed out|ETIMEDOUT/i.test(message)) {
     return "TIMEOUT";
   }
@@ -19892,6 +19897,11 @@ function classifyProviderErrorMessages(messages) {
   }
   return "UNKNOWN";
 }
+function extractProviderHttpStatus(message) {
+  const text = message.replace(/^(?:\[[^\]]+\]\s*)+/, "");
+  const match = /^([1-5]\d\d)\b/.exec(text) ?? /\b(?:status(?: code)?|http)[:=]?\s*([1-5]\d\d)\b/i.exec(text) ?? /"(?:code|status)"\s*:\s*([1-5]\d\d)\b/.exec(text);
+  return match ? Number(match[1]) : void 0;
+}
 
 // ../contracts/src/telemetry.ts
 import { z as z65 } from "zod";
@@ -22203,6 +22213,7 @@ export {
   serializeForInlineScript,
   classifyProviderErrorMessage,
   classifyProviderErrorMessages,
+  extractProviderHttpStatus,
   telemetryStatusDtoSchema,
   normalizeTelemetryStatus,
   maskTelemetryAnonymousId,

package/dist/{chunk-MTEVU6KG.js → chunk-ENI3GOWW.js}

@@ -869,7 +869,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-J7LV4CS2.js";
+} from "./chunk-6EPN4XY5.js";
 
 // src/intelligence-service.ts
 import { eq as eq82, desc as desc36, asc as asc15, and as and69, ne as ne14, or as or20, inArray as inArray32, gte as gte22, lte as lte20, isNull as isNull16, sql as sql31, exists } from "drizzle-orm";
@@ -17678,6 +17678,7 @@ function generationFailure(err, fallbackMessage) {
       return providerAuthError(message);
     case "RATE_LIMITED":
       return quotaExceeded("provider requests", { message });
+    case "PROVIDER_UNAVAILABLE":
     case "NETWORK":
     case "TIMEOUT":
       return providerError(message);