@canonry/canonry 6.2.0 → 6.3.1

package/dist/{chunk-2RFHQ6XT.js → chunk-4WZUR7XX.js}

@@ -19,21 +19,21 @@ import {
   runWithUsageTags,
   saveConfigPatch,
   sentimentInstallReadiness
-} from "./chunk-V6JUBTNL.js";
+} from "./chunk-ZZEPF3A5.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-4EKOKWQT.js";
+} from "./chunk-5FYTFE5T.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-W3GDZZNF.js";
+} from "./chunk-DERWXLHX.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -214,7 +214,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-ENI3GOWW.js";
+} from "./chunk-7CVTTQRV.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -232,6 +232,7 @@ import {
   CheckNotificationPolicies,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DiscoveryCompetitorTypes,
+  FEEDBACK_LIMITS,
   GOOGLE_ADS_CAMPAIGN_METRICS_MAX_CAMPAIGNS,
   GOOGLE_ADS_CAMPAIGN_METRICS_MAX_DAYS,
   GOOGLE_ADS_CAMPAIGN_METRICS_MAX_ROWS,
@@ -316,6 +317,7 @@ import {
   contentBriefDtoSchema,
   createTemplateLinkDetectionTally,
   createTemplateLinkPairIndex,
+  deliveryFailed,
   deriveCitedUrlCandidates,
   deriveGoogleAdsEffectiveGoalGraph,
   deriveIndexCoverage,
@@ -385,7 +387,9 @@ import {
   percentOf,
   providerError,
   providerSupportsLocationContext,
+  quotaExceeded,
   ratioUnitSchema,
+  redactFeedbackText,
   registrableDomain,
   reportMonthsForDoctor,
   resolveNegativeReviewMaxStars,
@@ -416,7 +420,7 @@ import {
   visibilityReportRequestSchema,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-6EPN4XY5.js";
+} from "./chunk-EV5G5QRR.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -3631,7 +3635,7 @@ function createGoogleMarketingRuntime(options) {
 
 // src/server.ts
 import { createRequire as createRequire3 } from "module";
-import crypto28 from "crypto";
+import crypto29 from "crypto";
 import fs9 from "fs";
 import path8 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -3937,14 +3941,17 @@ var SentimentWorker = class {
     this.reconcile();
     const gate = this.repository.dispatchGate({ now: this.now(), credentialFingerprint: credentialFingerprint(config.apiKey) });
     if (gate === "closed") return 0;
+    const used = this.repository.recentDispatch(this.now());
+    if (used.tokens >= config.maxInputTokensPerMinute) return 0;
+    const allowed = Math.min(gate === "probe" ? 1 : config.maxConcurrency, config.maxRequestsPerMinute - used.requests);
     const claims = [];
-    for (let index = 0; index < (gate === "probe" ? 1 : config.maxConcurrency); index++) {
+    for (let index = 0; index < allowed; index++) {
       const claim = this.repository.claim({ owner: randomUUID(), now: this.now(), leaseMs: 12e4, maxConcurrent: config.maxConcurrency });
       if (!claim) break;
       claims.push(claim);
     }
-    await Promise.all(claims.map((work) => this.execute(work)));
-    return claims.length;
+    const outcomes = await Promise.all(claims.map((work) => this.execute(work)));
+    return outcomes.filter((outcome) => outcome !== "released").length;
   }
   async execute(work) {
     const owner = work.leaseOwner;
@@ -3986,6 +3993,11 @@ var SentimentWorker = class {
     }
     const attempt = this.repository.startAttempt({ workItemId: work.id, owner, requestedModel: input.definition.requestedModel, now: this.now(), estimatedInputTokens: estimate, maxRequestsPerMinute: config.maxRequestsPerMinute, maxAttempts: config.maxAttempts, maxInputTokensPerMinute: config.maxInputTokensPerMinute });
     if (!attempt) {
+      const used = this.repository.recentDispatch(this.now());
+      if (used.requests >= config.maxRequestsPerMinute || used.tokens + estimate > config.maxInputTokensPerMinute) {
+        this.repository.releaseWork({ workItemId: work.id, owner, now: this.now() });
+        return "released";
+      }
       this.repository.failWork({ workItemId: work.id, owner, now: this.now(), errorCode: "RATE_LIMIT_WAIT", retryAt: new Date(Date.parse(this.now()) + 6e4).toISOString() });
       return;
     }
@@ -4026,6 +4038,28 @@ var SentimentWorker = class {
     }
   }
 };
+function createSentimentPoller(tick, onError, schedule = setImmediate) {
+  let inFlight2 = null;
+  let stopped = false;
+  const poll = () => {
+    if (inFlight2 || stopped) return;
+    inFlight2 = tick().catch(() => {
+      onError();
+      return 0;
+    }).then((claimed) => {
+      inFlight2 = null;
+      if (claimed > 0 && !stopped) schedule(poll);
+    });
+  };
+  return {
+    poll,
+    /** The tick in flight, if any. */
+    settled: () => inFlight2,
+    stop: () => {
+      stopped = true;
+    }
+  };
+}
 
 // src/sentiment-config.ts
 import fs2 from "fs";
@@ -7854,13 +7888,101 @@ function createApiUsageTelemetry(options = {}) {
   };
 }
 
+// src/feedback.ts
+import crypto4 from "crypto";
+var FEEDBACK_ENDPOINT = "https://canonry.ai/api/feedback";
+var TIMEOUT_MS2 = 1e4;
+var FEEDBACK_MAX_BODY_BYTES = 8e3;
+function feedbackSource(context) {
+  const surface = classifyUsageSurface({
+    userAgent: context.userAgent,
+    usageLabels: { surface: context.surface }
+  });
+  if (surface === "cli" || surface === "dashboard") return surface;
+  if (surface === "mcp-stdio" || surface === "mcp-http") return "mcp";
+  return "api";
+}
+async function sendFeedback(submission, context, deps = {}) {
+  const doFetch = deps.fetch ?? fetch;
+  const telemetryOn = (deps.telemetryEnabled ?? isTelemetryEnabled)();
+  const anonymousId = telemetryOn ? (deps.anonymousId ?? getOrCreateAnonymousId)() : void 0;
+  const agent = [context.agent, context.mcpClient].map((label) => normalizeAgentSlug(label)).find((slug) => !!slug && slug !== "none");
+  const payload = {
+    feedbackId: crypto4.randomUUID(),
+    ...anonymousId ? { anonymousId } : {},
+    kind: submission.kind,
+    summary: redactFeedbackText(submission.summary, FEEDBACK_LIMITS.summary),
+    ...submission.details ? { details: redactFeedbackText(submission.details, FEEDBACK_LIMITS.details) } : {},
+    ...submission.area ? { area: redactFeedbackText(submission.area, FEEDBACK_LIMITS.area) } : {},
+    ...submission.command ? { command: redactFeedbackText(submission.command, FEEDBACK_LIMITS.command) } : {},
+    ...submission.errorCode ? { errorCode: redactFeedbackText(submission.errorCode, FEEDBACK_LIMITS.errorCode) } : {},
+    source: feedbackSource(context),
+    ...agent ? { agent } : {},
+    version: PACKAGE_VERSION.slice(0, 20),
+    nodeVersion: process.versions.node.slice(0, 20),
+    os: process.platform.slice(0, 20),
+    arch: process.arch.slice(0, 20),
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const body = fitToByteBudget(payload);
+  let response;
+  try {
+    response = await doFetch(FEEDBACK_ENDPOINT, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body,
+      signal: AbortSignal.timeout(TIMEOUT_MS2)
+    });
+  } catch {
+    throw deliveryFailed("Could not reach canonry.ai to send feedback. Check the network and try again.");
+  }
+  if (response.status === 202 || response.ok) {
+    const body2 = await response.json().catch(() => ({}));
+    return { accepted: body2.accepted ?? true, id: typeof body2.id === "string" ? body2.id : payload.feedbackId };
+  }
+  if (response.status === 429) throw quotaExceeded("feedback submissions", { retryLater: true });
+  if (response.status === 400 || response.status === 413) {
+    const body2 = await response.json().catch(() => ({}));
+    throw validationError("canonry.ai rejected the feedback", body2.issues ? { issues: body2.issues } : void 0);
+  }
+  throw deliveryFailed(`canonry.ai could not store the feedback (HTTP ${response.status}). Try again later.`);
+}
+function truncateCodePoints(value, maxCodePoints) {
+  return Array.from(value).slice(0, Math.max(0, maxCodePoints)).join("");
+}
+function fitToByteBudget(payload) {
+  let current = { ...payload };
+  for (const field of ["details", "summary"]) {
+    let serialized = JSON.stringify(current);
+    let bytes = Buffer.byteLength(serialized, "utf8");
+    while (bytes > FEEDBACK_MAX_BODY_BYTES) {
+      const text = current[field];
+      if (typeof text !== "string" || text.length === 0) break;
+      const points = Array.from(text).length;
+      const target = points - Math.max(1, Math.ceil((bytes - FEEDBACK_MAX_BODY_BYTES) / 4));
+      if (field === "summary" && target < 1) break;
+      const shorter = truncateCodePoints(text, target);
+      if (field === "details" && shorter.length === 0) {
+        const { details: _dropped, ...rest } = current;
+        current = rest;
+      } else {
+        current = { ...current, [field]: shorter };
+      }
+      serialized = JSON.stringify(current);
+      bytes = Buffer.byteLength(serialized, "utf8");
+    }
+    if (bytes <= FEEDBACK_MAX_BODY_BYTES) return serialized;
+  }
+  return JSON.stringify(current);
+}
+
 // src/instance-identity.ts
 function nonBlank(value) {
   const trimmed = value?.trim();
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "633bd63832cf6af1da610e63f376dfc872975b49" : void 0;
+  const embedded = true ? "a9545eefb45af8bb1a00366b6e75ce25bb3f4c2b" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -7871,7 +7993,7 @@ function resolveInstanceIdentity(env = process.env) {
 }
 
 // src/job-runner.ts
-import crypto6 from "crypto";
+import crypto7 from "crypto";
 import fs4 from "fs";
 import path3 from "path";
 import os3 from "os";
@@ -7879,7 +8001,7 @@ import { setImmediate as yieldToEventLoop } from "timers/promises";
 import { and as and3, asc as asc2, count, desc, eq as eq3, inArray, isNotNull, isNull, lt, ne, sql as sql2 } from "drizzle-orm";
 
 // src/run-telemetry.ts
-import crypto4 from "crypto";
+import crypto5 from "crypto";
 function extractRegistrableHost(input) {
   if (!input) return null;
   const trimmed = input.trim();
@@ -7899,7 +8021,7 @@ function extractRegistrableHost(input) {
 function hashDomain(input) {
   const host = extractRegistrableHost(input);
   if (!host) return null;
-  return crypto4.createHash("sha256").update(host).digest("hex");
+  return crypto5.createHash("sha256").update(host).digest("hex");
 }
 function buildRunCompletedProps(input) {
   const totalMs = input.phases?.total_ms ?? Date.now() - input.startTime;
@@ -7980,7 +8102,7 @@ function failureStreakSampling(status, priorStreak, runId) {
   if (priorStreak < FAILURE_STREAK_SAMPLE_AFTER) {
     return { report: true, props: { failureStreak: priorStreak } };
   }
-  const bucket = crypto4.createHash("sha256").update(runId).digest().readUInt32BE(0) % FAILURE_STREAK_SAMPLE_RATE;
+  const bucket = crypto5.createHash("sha256").update(runId).digest().readUInt32BE(0) % FAILURE_STREAK_SAMPLE_RATE;
   return {
     report: bucket === 0,
     props: { failureStreak: priorStreak, sampleRate: FAILURE_STREAK_SAMPLE_RATE }
@@ -8053,7 +8175,7 @@ function getSharedProviderExecutionGate(providerName, maxConcurrency, maxPerMinu
 }
 
 // src/usage-quota.ts
-import crypto5 from "crypto";
+import crypto6 from "crypto";
 import { and as and2, eq as eq2, lte, sql } from "drizzle-orm";
 function getCurrentUsageDay() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
@@ -8070,7 +8192,7 @@ function reserveDailyQueryQuota(db, input) {
     )).run();
     if (reserveExisting().changes === 1) return { reserved: true, used: 0 };
     const inserted = tx.insert(usageCounters).values({
-      id: crypto5.randomUUID(),
+      id: crypto6.randomUUID(),
       scope: input.scope,
       period: input.period,
       metric: "queries",
@@ -8665,7 +8787,7 @@ var JobRunner = class {
             const answerLocation = runLocation && isSearchLocationIgnored(providerName, normalized.retrievalStatus) ? { location: null, requestedContext: runLocation, supportedContext: { status: "ignored" } } : { location: runLocation?.label ?? null };
             let screenshotRelPath = null;
             if (raw.screenshotPath && fs4.existsSync(raw.screenshotPath)) {
-              const snapshotId = crypto6.randomUUID();
+              const snapshotId = crypto7.randomUUID();
               const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", runId);
               if (!fs4.existsSync(screenshotDir)) fs4.mkdirSync(screenshotDir, { recursive: true });
               const destPath = path3.join(screenshotDir, `${snapshotId}.png`);
@@ -8709,7 +8831,7 @@ var JobRunner = class {
               }).run();
             } else {
               this.db.insert(querySnapshots).values({
-                id: crypto6.randomUUID(),
+                id: crypto7.randomUUID(),
                 runId,
                 queryId: q.id,
                 queryText: q.query,
@@ -9249,7 +9371,7 @@ var JobRunner = class {
         syncUnits.push(unit);
         continue;
       }
-      const customId = crypto6.randomUUID().replace(/-/g, "");
+      const customId = crypto7.randomUUID().replace(/-/g, "");
       const lines = linesByModel.get(model) ?? [];
       lines.push({ unit, requestedModel, customId, request, bytes: Buffer.byteLength(JSON.stringify({ custom_id: customId, params: request.body })) });
       linesByModel.set(model, lines);
@@ -9285,7 +9407,7 @@ var JobRunner = class {
     if (!capability || !reservation) throw new Error(`Provider ${providerName} cannot submit a batch for run ${ctx.runId}`);
     const deadlineMs = (config.batch?.deadlineHours ?? capability.defaultDeadlineHours) * HOUR_MS;
     const created = /* @__PURE__ */ new Date();
-    const rowId = crypto6.randomUUID();
+    const rowId = crypto7.randomUUID();
     const ledger = lines.map((line) => ({
       id: line.customId,
       batchId: rowId,
@@ -9978,7 +10100,7 @@ var JobRunner = class {
       competitorAliases
     );
     const answerContext = supportedContext && isSearchLocationIgnored(providerName, normalized.retrievalStatus) ? { status: "ignored" } : supportedContext;
-    const snapshotId = crypto6.randomUUID();
+    const snapshotId = crypto7.randomUUID();
     let screenshotRelPath = null;
     if (raw.screenshotPath && fs4.existsSync(raw.screenshotPath)) {
       const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", ctx.runId);
@@ -10080,7 +10202,7 @@ var JobRunner = class {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const period = now.slice(0, 10);
     this.db.insert(usageCounters).values({
-      id: crypto6.randomUUID(),
+      id: crypto7.randomUUID(),
       scope,
       period,
       metric,
@@ -10214,11 +10336,11 @@ function maybeShowActivationNotice(io = {}) {
 }
 
 // src/gsc-sync.ts
-import crypto8 from "crypto";
+import crypto9 from "crypto";
 import { eq as eq5, and as and5, sql as sql3 } from "drizzle-orm";
 
 // src/gsc-coverage-snapshot.ts
-import crypto7 from "crypto";
+import crypto8 from "crypto";
 import { and as and4, desc as desc2, eq as eq4, gte } from "drizzle-orm";
 var COVERAGE_IMPRESSION_WINDOW_DAYS = 30;
 function pageKey(raw) {
@@ -10280,7 +10402,7 @@ function writeCoverageSnapshot(db, projectId, runId, opts = {}) {
   const snapshotDate = now.toISOString().split("T")[0];
   db.delete(gscCoverageSnapshots).where(and4(eq4(gscCoverageSnapshots.projectId, projectId), eq4(gscCoverageSnapshots.date, snapshotDate))).run();
   db.insert(gscCoverageSnapshots).values({
-    id: crypto7.randomUUID(),
+    id: crypto8.randomUUID(),
     projectId,
     syncRunId: runId,
     date: snapshotDate,
@@ -10359,7 +10481,7 @@ async function executeGscSync(db, runId, projectId, opts) {
       for (const row of batch) {
         const [query, page, country, device, date] = row.keys;
         db.insert(gscSearchData).values({
-          id: crypto8.randomUUID(),
+          id: crypto9.randomUUID(),
           projectId,
           syncRunId: runId,
           date: date ?? "",
@@ -10391,7 +10513,7 @@ async function executeGscSync(db, runId, projectId, opts) {
     for (const row of totalRows) {
       const [date] = row.keys;
       db.insert(gscDailyTotals).values({
-        id: crypto8.randomUUID(),
+        id: crypto9.randomUUID(),
         projectId,
         date: date ?? "",
         clicks: row.clicks,
@@ -10440,7 +10562,7 @@ async function executeGscSync(db, runId, projectId, opts) {
       const [date, query] = row.keys;
       if (!date || !query) continue;
       db.insert(gscQueryDailyTotals).values({
-        id: crypto8.randomUUID(),
+        id: crypto9.randomUUID(),
         projectId,
         date,
         query,
@@ -10465,11 +10587,11 @@ async function executeGscSync(db, runId, projectId, opts) {
 }
 
 // src/gbp-sync.ts
-import crypto10 from "crypto";
+import crypto11 from "crypto";
 import { eq as eq7, and as and7, desc as desc4, inArray as inArray3, lt as lt2 } from "drizzle-orm";
 
 // src/gbp-reviews.ts
-import crypto9 from "crypto";
+import crypto10 from "crypto";
 import { and as and6, desc as desc3, eq as eq6, inArray as inArray2, sql as sql4 } from "drizzle-orm";
 var log4 = createLogger("GbpReviews");
 var MS_PER_DAY = 864e5;
@@ -10588,7 +10710,7 @@ function persistReviewObservation(tx, projectId, runId, obs, ctx) {
   let queuedRatingDrop = false;
   if (!latestRating) {
     tx.insert(gbpReviewRatings).values({
-      id: crypto9.randomUUID(),
+      id: crypto10.randomUUID(),
       projectId,
       locationName: obs.locationName,
       origin: obs.origin,
@@ -10608,7 +10730,7 @@ function persistReviewObservation(tx, projectId, runId, obs, ctx) {
     const alertState = ratingAlertState(obs.origin, latestRating.rating, obs.rating);
     queuedRatingDrop = alertState === "pending";
     tx.insert(gbpReviewRatings).values({
-      id: crypto9.randomUUID(),
+      id: crypto10.randomUUID(),
       projectId,
       locationName: obs.locationName,
       origin: obs.origin,
@@ -10658,7 +10780,7 @@ function persistReviewObservation(tx, projectId, runId, obs, ctx) {
       const alertState = reviewAlertState(review, { baseline, now, negativeMaxStars });
       if (alertState === "pending") queuedReviews++;
       tx.insert(gbpReviews).values({
-        id: crypto9.randomUUID(),
+        id: crypto10.randomUUID(),
         projectId,
         origin: obs.origin,
         reviewName: review.reviewName,
@@ -10819,7 +10941,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             tx.delete(gbpDailyMetrics).where(and7(eq7(gbpDailyMetrics.projectId, projectId), eq7(gbpDailyMetrics.locationName, loc.locationName))).run();
             for (const row of metricRows) {
               tx.insert(gbpDailyMetrics).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 date: row.date,
@@ -10831,7 +10953,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             tx.delete(gbpKeywordImpressions).where(and7(eq7(gbpKeywordImpressions.projectId, projectId), eq7(gbpKeywordImpressions.locationName, loc.locationName))).run();
             for (const row of keywordRows) {
               tx.insert(gbpKeywordImpressions).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 periodStart: monthKey(keywordsStart),
@@ -10852,7 +10974,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
               for (const { month, rows } of monthlyKeywordResults) {
                 for (const row of rows) {
                   tx.insert(gbpKeywordMonthly).values({
-                    id: crypto10.randomUUID(),
+                    id: crypto11.randomUUID(),
                     projectId,
                     locationName: loc.locationName,
                     month,
@@ -10873,7 +10995,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             tx.delete(gbpPlaceActions).where(and7(eq7(gbpPlaceActions.projectId, projectId), eq7(gbpPlaceActions.locationName, loc.locationName))).run();
             for (const row of placeActionRows) {
               tx.insert(gbpPlaceActions).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 placeActionLinkName: row.placeActionLinkName,
@@ -10886,7 +11008,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             }
             if (lodging !== null && lodgingChanged) {
               tx.insert(gbpLodgingSnapshots).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 contentHash: lodgingHash,
@@ -10900,7 +11022,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             }
             if (attributesChanged) {
               tx.insert(gbpAttributesSnapshots).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 contentHash: attributesHash,
@@ -10914,7 +11036,7 @@ async function executeGbpSync(db, runId, projectId, opts) {
             }
             if (placeToWrite) {
               tx.insert(gbpPlaceDetails).values({
-                id: crypto10.randomUUID(),
+                id: crypto11.randomUUID(),
                 projectId,
                 locationName: loc.locationName,
                 placeId: placeToWrite.placeId,
@@ -11019,7 +11141,7 @@ async function refreshSelectedLocationProfiles(db, projectId, accessToken, locat
 }
 
 // src/ads-sync.ts
-import crypto11 from "crypto";
+import crypto12 from "crypto";
 import { and as and8, eq as eq8, inArray as inArray4, notInArray } from "drizzle-orm";
 
 // ../integration-openai-ads/src/constants.ts
@@ -11794,7 +11916,7 @@ async function executeAdsSync(db, runId, projectId, opts) {
       }
       for (const upsert of insightUpserts) {
         tx.insert(adsInsightsDaily).values({
-          id: crypto11.randomUUID(),
+          id: crypto12.randomUUID(),
           projectId,
           level: upsert.level,
           entityId: upsert.entityId,
@@ -11862,7 +11984,7 @@ async function executeAdsSync(db, runId, projectId, opts) {
 }
 
 // src/gsc-inspect-sitemap.ts
-import crypto13 from "crypto";
+import crypto14 from "crypto";
 import { eq as eq9 } from "drizzle-orm";
 
 // src/sitemap-parser.ts
@@ -11962,7 +12084,7 @@ async function parseSitemapRecursive(url, urls, visited, depth, isChild) {
 }
 
 // src/inspect-rate-gate.ts
-import crypto12 from "crypto";
+import crypto13 from "crypto";
 var gates = /* @__PURE__ */ new Map();
 function sharedRateGate(key) {
   let entry = gates.get(key);
@@ -11981,7 +12103,7 @@ function sharedRateGate(key) {
   };
 }
 function credentialGateKey(prefix, secret) {
-  const digest = crypto12.createHash("sha256").update(secret).digest("hex").slice(0, 12);
+  const digest = crypto13.createHash("sha256").update(secret).digest("hex").slice(0, 12);
   return `${prefix}:${digest}`;
 }
 
@@ -12136,7 +12258,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
           const rich = ir.richResultsResult;
           const inspectedAt = (/* @__PURE__ */ new Date()).toISOString();
           db.insert(gscUrlInspections).values({
-            id: crypto13.randomUUID(),
+            id: crypto14.randomUUID(),
             projectId,
             syncRunId: runId,
             url: pageUrl,
@@ -12194,7 +12316,7 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
 }
 
 // src/bing-inspect-sitemap.ts
-import crypto14 from "crypto";
+import crypto15 from "crypto";
 import { eq as eq10, desc as desc5 } from "drizzle-orm";
 var log9 = createLogger("BingInspectSitemap");
 var BING_INSPECT_SPACING_MS = 2e3;
@@ -12299,7 +12421,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
             derivedInIndex = false;
           }
           db.insert(bingUrlInspections).values({
-            id: crypto14.randomUUID(),
+            id: crypto15.randomUUID(),
             projectId,
             url: pageUrl,
             httpCode,
@@ -12383,7 +12505,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
     const snapshotDate = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
     const snapNow = (/* @__PURE__ */ new Date()).toISOString();
     db.insert(bingCoverageSnapshots).values({
-      id: crypto14.randomUUID(),
+      id: crypto15.randomUUID(),
       projectId,
       syncRunId: runId,
       date: snapshotDate,
@@ -12424,7 +12546,7 @@ async function executeBingInspectSitemap(db, runId, projectId, opts) {
 }
 
 // src/coverage-refresh.ts
-import crypto15 from "crypto";
+import crypto16 from "crypto";
 import { and as and9, desc as desc6, eq as eq11, inArray as inArray5 } from "drizzle-orm";
 var log10 = createLogger("CoverageRefresh");
 var COVERAGE_REFRESH_MIN_INTERVAL_MS = 60 * 60 * 1e3;
@@ -12474,7 +12596,7 @@ async function maybeRefreshGscCoverage(db, config, projectId, deps = defaultDeps
       return null;
     }
   }
-  const runId = crypto15.randomUUID();
+  const runId = crypto16.randomUUID();
   db.insert(runs).values({
     id: runId,
     projectId,
@@ -12497,7 +12619,7 @@ async function maybeRefreshGscCoverage(db, config, projectId, deps = defaultDeps
 }
 
 // src/commoncrawl-sync.ts
-import crypto16 from "crypto";
+import crypto17 from "crypto";
 import path4 from "path";
 import { and as and10, eq as eq12, sql as sql5 } from "drizzle-orm";
 var log11 = createLogger("CommonCrawlSync");
@@ -12572,7 +12694,7 @@ async function executeReleaseSync(db, syncId, opts) {
         if (!projectIds) continue;
         for (const projectId of projectIds) {
           expanded.push({
-            id: crypto16.randomUUID(),
+            id: crypto17.randomUUID(),
             projectId,
             releaseSyncId: syncId,
             release,
@@ -12592,7 +12714,7 @@ async function executeReleaseSync(db, syncId, opts) {
         const projectRows = rowsByProject.get(p.id) ?? [];
         const summary = computeSummary(projectRows);
         tx.insert(backlinkSummaries).values({
-          id: crypto16.randomUUID(),
+          id: crypto17.randomUUID(),
           projectId: p.id,
           releaseSyncId: syncId,
           source: BacklinkSources.commoncrawl,
@@ -12689,7 +12811,7 @@ function computeSummary(rows) {
 }
 
 // src/backlink-extract.ts
-import crypto17 from "crypto";
+import crypto18 from "crypto";
 import fs5 from "fs";
 import { and as and11, desc as desc7, eq as eq13 } from "drizzle-orm";
 var log12 = createLogger("BacklinkExtract");
@@ -12745,7 +12867,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       ).run();
       if (rows.length > 0) {
         const values = rows.map((r) => ({
-          id: crypto17.randomUUID(),
+          id: crypto18.randomUUID(),
           projectId,
           releaseSyncId: syncId,
           source: BacklinkSources.commoncrawl,
@@ -12759,7 +12881,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
       }
       const summary = computeSummary2(rows);
       tx.insert(backlinkSummaries).values({
-        id: crypto17.randomUUID(),
+        id: crypto18.randomUUID(),
         projectId,
         releaseSyncId: syncId,
         source: BacklinkSources.commoncrawl,
@@ -12802,7 +12924,7 @@ function computeSummary2(rows) {
 }
 
 // src/discovery-run.ts
-import crypto18 from "crypto";
+import crypto19 from "crypto";
 import { and as and12, eq as eq14 } from "drizzle-orm";
 var log13 = createLogger("DiscoveryRun");
 var DEFAULT_SEED_COUNT = 30;
@@ -13157,7 +13279,7 @@ function writeDiscoveryInsight(db, input) {
       eq14(insights.dismissed, false)
     )).run();
     tx.insert(insights).values({
-      id: crypto18.randomUUID(),
+      id: crypto19.randomUUID(),
       projectId: input.projectId,
       runId: input.runId,
       type: "discovery.basket-divergence",
@@ -13193,7 +13315,7 @@ function buildDiscoveryInsightTitle(input) {
 }
 
 // src/execute-site-audit.ts
-import crypto19 from "crypto";
+import crypto20 from "crypto";
 import { and as and14, eq as eq16, ne as ne2, sql as sql6 } from "drizzle-orm";
 import { runSiteCrawl } from "@canonry/aeo-audit";
 
@@ -13644,7 +13766,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
   const trigger = db.select({ trigger: runs.trigger }).from(runs).where(eq16(runs.id, runId)).get()?.trigger ?? null;
   let canonicalDomain = null;
   const attemptNumber = (db.select({ value: sql6`coalesce(max(${siteCrawlAttempts.attemptNumber}), 0)` }).from(siteCrawlAttempts).where(eq16(siteCrawlAttempts.runId, runId)).get()?.value ?? 0) + 1;
-  const attemptId = crypto19.randomUUID();
+  const attemptId = crypto20.randomUUID();
   db.insert(siteCrawlAttempts).values({
     id: attemptId,
     projectId,
@@ -13722,7 +13844,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       nodeKey: page.key
     });
     tx.insert(siteCrawlPages).values({
-      id: crypto19.randomUUID(),
+      id: crypto20.randomUUID(),
       projectId,
       runId,
       attemptId,
@@ -13815,7 +13937,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
     if (isSelfLink(edge.from, edge.to)) return;
     observedEdges.set(edge.key, edge);
     tx.insert(siteCrawlEdges).values({
-      id: crypto19.randomUUID(),
+      id: crypto20.randomUUID(),
       projectId,
       runId,
       attemptId,
@@ -13885,7 +14007,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         return;
       }
       tx.insert(siteCrawlEventReceipts).values({
-        id: crypto19.randomUUID(),
+        id: crypto20.randomUUID(),
         projectId,
         runId,
         attemptId,
@@ -14021,7 +14143,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       if (claim2.changes === 0) return false;
       if (hasAuditedPages) {
         tx.insert(siteAuditSnapshots).values({
-          id: crypto19.randomUUID(),
+          id: crypto20.randomUUID(),
           projectId,
           runId,
           sitemapUrl: opts.sitemapUrl ?? new URL("/sitemap.xml", crawlRootUrl).href,
@@ -14039,7 +14161,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         for (const page of observedPages.values()) {
           if (!isLegacyScorecardPage(page)) continue;
           tx.insert(siteAuditPages).values({
-            id: crypto19.randomUUID(),
+            id: crypto20.randomUUID(),
             projectId,
             runId,
             url: page.finalUrl ?? page.requestedUrl,
@@ -14052,7 +14174,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         }
       }
       tx.insert(siteCrawlSnapshots).values({
-        id: crypto19.randomUUID(),
+        id: crypto20.randomUUID(),
         projectId,
         runId,
         attemptId,
@@ -14098,7 +14220,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       if (opts.checkDeadLinks) {
         for (const finding of deadLinkFindings) {
           tx.insert(siteCrawlFindings).values({
-            id: crypto19.randomUUID(),
+            id: crypto20.randomUUID(),
             projectId,
             runId,
             attemptId,
@@ -14673,7 +14795,7 @@ function readStoredGroundingSources(rawResponse) {
   return result2;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-4IONMOFB.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-SYISPW25.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -15263,7 +15385,7 @@ var ProviderRegistry = class {
 import { createHash as createHash4 } from "crypto";
 var TTL_MS = 60 * 60 * 1e3;
 var RETRY_MS = 60 * 1e3;
-var TIMEOUT_MS2 = 3e3;
+var TIMEOUT_MS3 = 3e3;
 function createProviderModelCatalog(registry) {
   const cache = /* @__PURE__ */ new Map();
   const read = async (name) => {
@@ -15289,7 +15411,7 @@ function createProviderModelCatalog(registry) {
       timer = setTimeout(() => {
         controller.abort();
         reject(new Error("Model discovery timed out"));
-      }, TIMEOUT_MS2);
+      }, TIMEOUT_MS3);
     });
     current.pending = Promise.race([
       Promise.resolve().then(() => provider.adapter.listModels(provider.config, controller.signal)),
@@ -15320,14 +15442,14 @@ function createProviderModelCatalog(registry) {
 }
 
 // src/scheduler.ts
-import crypto20 from "crypto";
+import crypto21 from "crypto";
 import cron from "node-cron";
 import { and as and16, eq as eq18, inArray as inArray8, notExists, sql as sql8 } from "drizzle-orm";
 var log15 = createLogger("Scheduler");
 var DEFAULT_HEALTH_CRON = "0 */6 * * *";
 function ensureDefaultHealthSchedule(db, projectId, now = (/* @__PURE__ */ new Date()).toISOString()) {
   const result2 = db.insert(schedules).values({
-    id: crypto20.randomUUID(),
+    id: crypto21.randomUUID(),
     projectId,
     kind: SchedulableRunKinds.doctor,
     cronExpr: DEFAULT_HEALTH_CRON,
@@ -15645,7 +15767,7 @@ var Scheduler = class {
           log15.warn("gbp-sync.no-callback", { scheduleId, projectId, msg: "host did not register onGbpSyncRequested" });
           return;
         }
-        const runId2 = crypto20.randomUUID();
+        const runId2 = crypto21.randomUUID();
         this.db.insert(runs).values({
           id: runId2,
           projectId,
@@ -15677,7 +15799,7 @@ var Scheduler = class {
           this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
-        const runId2 = crypto20.randomUUID();
+        const runId2 = crypto21.randomUUID();
         this.db.insert(runs).values({
           id: runId2,
           projectId,
@@ -15748,7 +15870,7 @@ var Scheduler = class {
           this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
-        const runId2 = crypto20.randomUUID();
+        const runId2 = crypto21.randomUUID();
         const effectiveRequest = normalizeSiteAuditRunRequest({ maxPages: SITE_AUDIT_MAX_PAGE_LIMIT });
         this.db.transaction((tx) => {
           tx.insert(runs).values({
@@ -16091,7 +16213,7 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 
 // src/notifier.ts
 import { eq as eq20, desc as desc9, and as and18, inArray as inArray10, or } from "drizzle-orm";
-import crypto21 from "crypto";
+import crypto22 from "crypto";
 var log19 = createLogger("Notifier");
 var MATERIAL_MAGNITUDE_DELTA = 20;
 var SEVERITY_RANK = { low: 0, medium: 1, high: 2, critical: 3 };
@@ -16718,7 +16840,7 @@ var Notifier = class {
   }
   logDelivery(projectId, notificationId, event, status, error) {
     this.db.insert(auditLog).values({
-      id: crypto21.randomUUID(),
+      id: crypto22.randomUUID(),
       projectId,
       actor: "scheduler",
       action: `notification.${status}`,
@@ -16894,7 +17016,7 @@ function analysisResultFromInsights(insights2) {
 }
 
 // src/agent/session-registry.ts
-import crypto25 from "crypto";
+import crypto26 from "crypto";
 import { eq as eq24 } from "drizzle-orm";
 
 // src/agent/session.ts
@@ -18147,7 +18269,7 @@ function buildAeroStateTools(ctx, opts = {}) {
 }
 
 // src/agent/llm-usage.ts
-import crypto22 from "crypto";
+import crypto23 from "crypto";
 var AeroLlmUsageFeatures = {
   turn: "aero.turn"
 };
@@ -18166,7 +18288,7 @@ function recordLlmUsageEvent(args) {
     const usage = args.message.usage;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     args.db.insert(llmUsageEvents).values({
-      id: crypto22.randomUUID(),
+      id: crypto23.randomUUID(),
       projectId: args.projectId,
       runId: args.runId,
       agentSessionId: args.agentSessionId,
@@ -18536,7 +18658,7 @@ This context applies to this turn. Explicit user scope takes precedence; do not
 }
 
 // src/agent/tool-usage.ts
-import crypto23 from "crypto";
+import crypto24 from "crypto";
 var AeroToolEventStatuses = {
   success: "success",
   error: "error"
@@ -18599,7 +18721,7 @@ function createAeroToolUsageHooks(args) {
 function recordAgentToolEvent(args) {
   try {
     args.db.insert(agentToolEvents).values({
-      id: crypto23.randomUUID(),
+      id: crypto24.randomUUID(),
       projectId: args.projectId,
       agentSessionId: args.agentSessionId,
       toolCallId: args.toolCallId,
@@ -18854,7 +18976,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
 }
 
 // src/agent/memory-store.ts
-import crypto24 from "crypto";
+import crypto25 from "crypto";
 import { and as and19, desc as desc10, eq as eq22, like, sql as sql10, or as or2 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
@@ -18883,7 +19005,7 @@ function upsertMemoryEntry(db, args) {
     throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto24.randomUUID();
+  const id = crypto25.randomUUID();
   db.insert(agentMemory).values({
     id,
     projectId: args.projectId,
@@ -18925,7 +19047,7 @@ function writeCompactionNote(db, args) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
-  const id = crypto24.randomUUID();
+  const id = crypto25.randomUUID();
   let inserted;
   db.transaction((tx) => {
     tx.insert(agentMemory).values({
@@ -19297,7 +19419,7 @@ var SessionRegistry = class {
       return agent2;
     }
     const { provider, modelId } = resolveSessionProviderAndModel(this.opts.config, preferences);
-    const sessionId = crypto25.randomUUID();
+    const sessionId = crypto26.randomUUID();
     const agent = createAeroSession({
       projectName,
       client: this.opts.client,
@@ -19749,7 +19871,7 @@ ${lines.join("\n")}
   insertRow(params) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     this.opts.db.insert(agentSessions).values({
-      id: params.id ?? crypto25.randomUUID(),
+      id: params.id ?? crypto26.randomUUID(),
       projectId: params.projectId,
       systemPrompt: params.systemPrompt,
       modelProvider: params.provider ?? params.modelProvider ?? AgentProviderIds.claude,
@@ -19776,7 +19898,7 @@ ${lines.join("\n")}
 };
 
 // src/agent/viewer-sessions.ts
-import crypto26 from "crypto";
+import crypto27 from "crypto";
 import { and as and21, eq as eq25, isNotNull as isNotNull3, like as like2 } from "drizzle-orm";
 var AERO_VIEWER_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
   CanonryMcpToolNames.canonry_ads_account,
@@ -19830,8 +19952,8 @@ function trimViewerTranscript(messages, max = MAX_VIEWER_MESSAGES) {
 }
 var VIEWER_IDLE_MS = 12 * 60 * 60 * 1e3;
 function mintViewerAeroKey(db, userId, now = /* @__PURE__ */ new Date()) {
-  const raw = `cnry_${crypto26.randomBytes(24).toString("hex")}`;
-  const id = crypto26.randomUUID();
+  const raw = `cnry_${crypto27.randomBytes(24).toString("hex")}`;
+  const id = crypto27.randomUUID();
   db.insert(apiKeys).values({
     id,
     name: `${VIEWER_AERO_KEY_PREFIX}${userId}`,
@@ -19983,15 +20105,15 @@ var ViewerAeroSessions = class {
 };
 
 // src/mcp-http.ts
-import crypto27 from "crypto";
+import crypto28 from "crypto";
 import { eq as eq26 } from "drizzle-orm";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 var SESSION_IDLE_MS = 10 * 60 * 1e3;
 var SWEEP_INTERVAL_MS = 60 * 1e3;
 function mintSessionKey(db, scopes, userId) {
-  const raw = `cnry_${crypto27.randomBytes(24).toString("hex")}`;
-  const id = crypto27.randomUUID();
+  const raw = `cnry_${crypto28.randomBytes(24).toString("hex")}`;
+  const id = crypto28.randomUUID();
   db.insert(apiKeys).values({
     id,
     name: `mcp-session:${userId}`,
@@ -20075,7 +20197,7 @@ function registerMcpHttpRoutes(scope, opts) {
       clientName: `canonry-mcp/${PACKAGE_VERSION}`,
       surface: "mcp-http",
       // Correlation only: this is never accepted as caller identity or authority.
-      actorSession: crypto27.randomUUID()
+      actorSession: crypto28.randomUUID()
     });
     let server;
     try {
@@ -20092,7 +20214,7 @@ function registerMcpHttpRoutes(scope, opts) {
       throw error;
     }
     const transport = new StreamableHTTPServerTransport({
-      sessionIdGenerator: () => crypto27.randomUUID(),
+      sessionIdGenerator: () => crypto28.randomUUID(),
       onsessioninitialized: (id) => {
         sessions.set(id, { transport, close, authorizationId, segmentId: segment.id, lastSeenAt: now() });
       }
@@ -21801,14 +21923,14 @@ function summarizeProviderConfig(config) {
   };
 }
 function hashApiKey2(key) {
-  return crypto28.createHash("sha256").update(key).digest("hex");
+  return crypto29.createHash("sha256").update(key).digest("hex");
 }
 var DASHBOARD_SCRYPT_KEYLEN = 64;
 var DASHBOARD_SCRYPT_COST = 1 << 15;
 var DASHBOARD_SCRYPT_MAXMEM = 64 * 1024 * 1024;
 function hashDashboardPassword(password) {
-  const salt = crypto28.randomBytes(16);
-  const derived = crypto28.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
+  const salt = crypto29.randomBytes(16);
+  const derived = crypto29.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
     N: DASHBOARD_SCRYPT_COST,
     maxmem: DASHBOARD_SCRYPT_MAXMEM
   });
@@ -21829,14 +21951,14 @@ function verifyDashboardPassword(password, storedHash) {
     } catch {
       return { ok: false, needsRehash: false };
     }
-    const derived = crypto28.scryptSync(password, salt, expected.length, {
+    const derived = crypto29.scryptSync(password, salt, expected.length, {
       N: DASHBOARD_SCRYPT_COST,
       maxmem: DASHBOARD_SCRYPT_MAXMEM
     });
     if (derived.length !== expected.length)
       return { ok: false, needsRehash: false };
     return {
-      ok: crypto28.timingSafeEqual(derived, expected),
+      ok: crypto29.timingSafeEqual(derived, expected),
       needsRehash: false
     };
   }
@@ -21845,7 +21967,7 @@ function verifyDashboardPassword(password, storedHash) {
     const expected = Buffer.from(storedHash, "hex");
     if (candidate.length !== expected.length)
       return { ok: false, needsRehash: false };
-    const ok = crypto28.timingSafeEqual(candidate, expected);
+    const ok = crypto29.timingSafeEqual(candidate, expected);
     return { ok, needsRehash: ok };
   }
   return { ok: false, needsRehash: false };
@@ -21981,7 +22103,7 @@ function cloneGtmConfig(config) {
 function createGoogleMarketingConfigCredentialStore(input) {
   const persistConfigPatch = input.saveConfigPatch ?? saveConfigPatch;
   const env = input.env ?? process.env;
-  const randomUUID3 = input.randomUUID ?? crypto28.randomUUID;
+  const randomUUID3 = input.randomUUID ?? crypto29.randomUUID;
   const snapshot = () => ({
     googleAds: cloneGoogleAdsConfig(input.config.googleAds),
     gtm: cloneGtmConfig(input.config.gtm)
@@ -22084,7 +22206,7 @@ async function createServer(opts) {
   const trustProxy = resolveTrustProxy(process.env.CANONRY_TRUST_PROXY);
   const app = Fastify({
     loggerInstance: logger,
-    genReqId: () => crypto28.randomUUID(),
+    genReqId: () => crypto29.randomUUID(),
     trustProxy
   });
   const registry = new ProviderRegistry();
@@ -22851,7 +22973,7 @@ async function createServer(opts) {
       return removed;
     }
   };
-  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto28.randomBytes(32).toString("hex");
+  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto29.randomBytes(32).toString("hex");
   const googleConnectionStore = {
     listConnections: (domain) => listGoogleConnections(opts.config, domain),
     getConnection: (domain, connectionType) => getGoogleConnection(opts.config, domain, connectionType),
@@ -22945,7 +23067,7 @@ async function createServer(opts) {
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
-        id: `key_${crypto28.randomBytes(8).toString("hex")}`,
+        id: `key_${crypto29.randomBytes(8).toString("hex")}`,
         name: "default",
         keyHash,
         keyPrefix: prefix,
@@ -22969,7 +23091,7 @@ async function createServer(opts) {
   };
   const createSession = (apiKeyId) => {
     pruneExpiredSessions();
-    const sessionId = crypto28.randomBytes(32).toString("hex");
+    const sessionId = crypto29.randomBytes(32).toString("hex");
     sessions.set(sessionId, {
       apiKeyId,
       expiresAt: Date.now() + SESSION_TTL_MS
@@ -23185,16 +23307,13 @@ async function createServer(opts) {
       return built.ok ? { ok: true, estimatedInputTokens: built.estimate.inputTokens } : built;
     }
   });
-  let sentimentTick = null;
-  const pollSentiment = () => {
-    if (sentimentTick) return;
-    sentimentTick = sentimentWorker.tick().catch(() => {
+  const sentimentPoller = createSentimentPoller(
+    () => sentimentWorker.tick(),
+    () => {
       log24.error("sentiment.worker-failed", { reason: "Stored sentiment worker could not finish its tick." });
-      return 0;
-    }).finally(() => {
-      sentimentTick = null;
-    });
-  };
+    }
+  );
+  const pollSentiment = sentimentPoller.poll;
   let sentimentTimer;
   runCoordinator.onSentimentCompleted = async () => {
     pollSentiment();
@@ -23206,7 +23325,8 @@ async function createServer(opts) {
   });
   app.addHook("onClose", async () => {
     clearInterval(sentimentTimer);
-    await sentimentTick;
+    sentimentPoller.stop();
+    await sentimentPoller.settled();
   });
   const providerModelCatalog = createProviderModelCatalog(registry);
   await app.register(apiRoutes, {
@@ -23442,7 +23562,7 @@ async function createServer(opts) {
         deps: {
           enqueueAutoExtract: ({ projectId, release: r }) => {
             const now = (/* @__PURE__ */ new Date()).toISOString();
-            const runId = crypto28.randomUUID();
+            const runId = crypto29.randomUUID();
             opts.db.insert(runs).values({
               id: runId,
               projectId,
@@ -23686,7 +23806,7 @@ async function createServer(opts) {
         const createdAt = (/* @__PURE__ */ new Date()).toISOString();
         opts.db.insert(auditLog).values(
           targetProjectIds.map((projectId) => ({
-            id: crypto28.randomUUID(),
+            id: crypto29.randomUUID(),
             projectId,
             actor: auditContext?.actor ?? "api",
             userAgent: auditContext?.userAgent ?? null,
@@ -23783,6 +23903,7 @@ async function createServer(opts) {
       const { event: eventName, eventId, ...properties } = event;
       trackEvent(eventName, properties, { source: "dashboard", eventId });
     },
+    submitFeedback: (submission, context) => sendFeedback(submission, context),
     onCdpConfigure: async (host, port2) => {
       if (!opts.config.cdp) opts.config.cdp = {};
       opts.config.cdp.host = host;