@canonry/canonry 6.2.0 → 6.3.1

package/dist/{chunk-4EKOKWQT.js → chunk-5FYTFE5T.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-ENI3GOWW.js";
+} from "./chunk-7CVTTQRV.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -13,7 +13,7 @@ import {
   TEMPLATE_LINK_RATIO_THRESHOLD,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-6EPN4XY5.js";
+} from "./chunk-EV5G5QRR.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {

package/dist/{chunk-Y2B7JRSB.js → chunk-5GY5WBAF.js}

@@ -4,14 +4,14 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-V6JUBTNL.js";
+} from "./chunk-ZZEPF3A5.js";
 import {
   PACKAGE_VERSION
-} from "./chunk-W3GDZZNF.js";
+} from "./chunk-DERWXLHX.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-6EPN4XY5.js";
+} from "./chunk-EV5G5QRR.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-ENI3GOWW.js → chunk-7CVTTQRV.js}

@@ -354,6 +354,8 @@ import {
   extractAnswerMentions,
   extractDomainsFromText,
   factorStatusFromScore,
+  feedbackAcceptedDtoSchema,
+  feedbackSubmissionSchema,
   filterBrandedSeedCandidates,
   filterCapturedCitedUrls,
   findDuplicateLocationLabels,
@@ -869,7 +871,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-6EPN4XY5.js";
+} from "./chunk-EV5G5QRR.js";
 
 // src/intelligence-service.ts
 import { eq as eq82, desc as desc36, asc as asc15, and as and69, ne as ne14, or as or20, inArray as inArray32, gte as gte22, lte as lte20, isNull as isNull16, sql as sql31, exists } from "drizzle-orm";
@@ -9001,6 +9003,10 @@ function cancelProject(db, projectId, now, reason) {
   )).run();
   recountJobs(db, affected, now);
 }
+function dispatchedInLastMinute(db, now) {
+  const since = new Date(Date.parse(now) - 6e4).toISOString();
+  return db.select({ requests: sql4`count(*)`, tokens: sql4`coalesce(sum(${sentimentAttempts.estimatedInputTokens}), 0)` }).from(sentimentAttempts).where(gt(sentimentAttempts.dispatchedAt, since)).get();
+}
 var SentimentRepository = class {
   constructor(db) {
     this.db = db;
@@ -9209,6 +9215,10 @@ var SentimentRepository = class {
       return claimed;
     }, { behavior: "immediate" });
   }
+  /** Requests and estimated input tokens dispatched in the minute before `now`: the window `startAttempt` enforces. */
+  recentDispatch(now) {
+    return dispatchedInLastMinute(this.db, now);
+  }
   startAttempt(input) {
     return this.db.transaction((tx) => {
       const work = tx.select().from(sentimentWorkItems).where(and(
@@ -9223,8 +9233,7 @@ var SentimentRepository = class {
       if (input.maxAttempts !== void 0 && work.attemptCount - work.attemptBudgetStart >= input.maxAttempts) return void 0;
       const estimate = input.estimatedInputTokens ?? 0;
       if (!Number.isSafeInteger(estimate) || estimate < 0) throw new Error("Invalid sentiment token estimate");
-      const since = new Date(Date.parse(input.now) - 6e4).toISOString();
-      const used = tx.select({ requests: sql4`count(*)`, tokens: sql4`coalesce(sum(${sentimentAttempts.estimatedInputTokens}), 0)` }).from(sentimentAttempts).where(gt(sentimentAttempts.dispatchedAt, since)).get();
+      const used = dispatchedInLastMinute(tx, input.now);
       if (input.maxRequestsPerMinute !== void 0 && used.requests >= input.maxRequestsPerMinute) return void 0;
       if (input.maxInputTokensPerMinute !== void 0 && used.tokens + estimate > input.maxInputTokensPerMinute) return void 0;
       const attemptNumber = work.attemptCount + 1;
@@ -9299,6 +9308,14 @@ var SentimentRepository = class {
       return true;
     }, { behavior: "immediate" });
   }
+  /** Hand claimed work back to the queue untouched: no error, no retry time, no attempt counted. */
+  releaseWork(input) {
+    return this.db.transaction((tx) => {
+      const changed = tx.update(sentimentWorkItems).set({ status: "pending", leaseOwner: null, leaseExpiresAt: null, updatedAt: input.now }).where(and(eq2(sentimentWorkItems.id, input.workItemId), eq2(sentimentWorkItems.leaseOwner, input.owner), eq2(sentimentWorkItems.status, "running"))).returning().all();
+      if (changed.length > 0) shiftJobs(tx, changed[0].id, "running", "pending", input.now);
+      return changed.length > 0;
+    }, { behavior: "immediate" });
+  }
   failWork(input) {
     return this.db.transaction((tx) => {
       const changed = tx.update(sentimentWorkItems).set({
@@ -12466,7 +12483,7 @@ function resolveTrustProxy(raw) {
 }
 var FORWARDED_HEADERS = ["x-forwarded-for", "forwarded", "x-real-ip"];
 function hasForwardedHeaders(request) {
-  return FORWARDED_HEADERS.some((header) => request.headers[header] !== void 0);
+  return FORWARDED_HEADERS.some((header2) => request.headers[header2] !== void 0);
 }
 function resolveCallerKey(request, trustProxyConfigured) {
   const socketAddress = request.socket.remoteAddress ?? request.ip;
@@ -12496,9 +12513,9 @@ function cookieIsSecure(request, configured) {
 function anyUsersExist(db) {
   return db.select({ id: users.id }).from(users).limit(1).get() !== void 0;
 }
-function parseCookieHeader(header) {
-  if (!header) return {};
-  return header.split(";").map((part) => part.trim()).filter(Boolean).reduce((cookies, part) => {
+function parseCookieHeader(header2) {
+  if (!header2) return {};
+  return header2.split(";").map((part) => part.trim()).filter(Boolean).reduce((cookies, part) => {
     const eqIdx = part.indexOf("=");
     if (eqIdx <= 0) return cookies;
     const name = part.slice(0, eqIdx).trim();
@@ -13018,11 +13035,11 @@ async function authPlugin(app, opts = {}) {
   app.addHook("onRequest", async (request, reply) => {
     const url = request.url.split("?")[0];
     if (shouldSkipAuth(url)) return;
-    const header = request.headers.authorization;
+    const header2 = request.headers.authorization;
     let key;
     let keyArrivedInCookie = false;
-    if (header) {
-      const parts = header.split(" ");
+    if (header2) {
+      const parts = header2.split(" ");
       if (parts.length !== 2 || parts[0] !== "Bearer") {
         throw authRequired();
       }
@@ -22569,11 +22586,11 @@ function parseCsvRecords(value) {
   return records.filter((record) => !record.physicalBlank);
 }
 function parseHeader(records) {
-  const header = records.at(0);
-  if (!header) csvError("csv-header-missing", "CSV must include a property and group header row.");
+  const header2 = records.at(0);
+  if (!header2) csvError("csv-header-missing", "CSV must include a property and group header row.");
   const allowed = /* @__PURE__ */ new Set(["property", "group", "url"]);
   const indices = /* @__PURE__ */ new Map();
-  for (const [index2, raw] of header.fields.entries()) {
+  for (const [index2, raw] of header2.fields.entries()) {
     const name = normalizeGroupMembershipLabel(raw);
     if (!allowed.has(name)) {
       csvError("csv-header-invalid", `CSV header "${raw}" is not supported. Use property, group, and optional url.`, 400, { header: raw });
@@ -22588,7 +22605,7 @@ function parseHeader(records) {
       csvError("csv-header-missing", `CSV is missing the required "${required2}" header.`, 400, { header: required2 });
     }
   }
-  return { indices, length: header.fields.length };
+  return { indices, length: header2.fields.length };
 }
 function parseGroupMembershipCsv(csv) {
   const byteLength = Buffer.byteLength(csv, "utf8");
@@ -22601,7 +22618,7 @@ function parseGroupMembershipCsv(csv) {
     );
   }
   const records = parseCsvRecords(csv);
-  const header = parseHeader(records);
+  const header2 = parseHeader(records);
   const dataRecords = records.slice(1);
   if (dataRecords.length > MEASUREMENT_GROUP_MEMBERSHIP_CSV_MAX_DATA_ROWS) {
     csvError(
@@ -22611,9 +22628,9 @@ function parseGroupMembershipCsv(csv) {
       { rowCount: dataRecords.length, maxRows: MEASUREMENT_GROUP_MEMBERSHIP_CSV_MAX_DATA_ROWS }
     );
   }
-  const propertyIndex = header.indices.get("property");
-  const groupIndex = header.indices.get("group");
-  const urlIndex = header.indices.get("url");
+  const propertyIndex = header2.indices.get("property");
+  const groupIndex = header2.indices.get("group");
+  const urlIndex = header2.indices.get("url");
   const rows = dataRecords.map((record, index2) => {
     const property = record.fields[propertyIndex] ?? "";
     const group = record.fields[groupIndex] ?? "";
@@ -22626,7 +22643,7 @@ function parseGroupMembershipCsv(csv) {
       url,
       normalizedProperty: normalizeGroupMembershipLabel(property),
       normalizedGroupLabel: normalizeGroupMembershipLabel(group),
-      columnCountValid: record.fields.length === header.length
+      columnCountValid: record.fields.length === header2.length
     };
   });
   return { sourceChecksum: sourceChecksum(csv), rows };
@@ -33766,7 +33783,7 @@ function renderWinsLosses(insights2, heading, emptyMessage, audience) {
     </tr>`;
   }).join("");
   const headerCells = (isClient ? REPORT_SECTION_COPY["whats-changed"].client : REPORT_SECTION_COPY["whats-changed"].agency).insightHeaders;
-  const headers = `<tr>${headerCells.map((header) => `<th>${header}</th>`).join("")}</tr>`;
+  const headers = `<tr>${headerCells.map((header2) => `<th>${header2}</th>`).join("")}</tr>`;
   return `<div class="chart-card"><h3>${escapeHtml2(heading)}</h3>
     <div class="table-scroll"><table class="report-table">
       <thead>${headers}</thead>
@@ -39924,6 +39941,8 @@ var SCHEMA_TABLE = {
   SnapshotRequest: z.object(snapshotRequestInputSchema.shape).omit({ phrases: true }),
   SourceBreakdownDto: sourceBreakdownDtoSchema,
   TelemetryEventAcceptedDto: telemetryEventAcceptedDtoSchema,
+  FeedbackSubmission: feedbackSubmissionSchema,
+  FeedbackAcceptedDto: feedbackAcceptedDtoSchema,
   TelemetryStatusDto: telemetryStatusDtoSchema,
   OperationalLogListDto: operationalLogListDtoSchema,
   CloudflareWorkerIngestRequest: cloudflareWorkerIngestRequestSchema,
@@ -43053,6 +43072,28 @@ var routeCatalog = [
       400: errorResponse("Invalid onboarding telemetry event.")
     }
   },
+  {
+    method: "post",
+    path: "/api/v1/feedback",
+    summary: "Send product feedback about Canonry",
+    description: "Forwards a struggle, bug, improvement, or other note about Canonry itself to the Canonry team (canonry.ai). Free text is redacted for credentials before it leaves the machine; never include customer data. The server adds version, OS, and the calling surface and agent; the anonymous install id is attached only while telemetry is enabled.",
+    tags: ["feedback"],
+    requestBody: {
+      required: true,
+      content: {
+        "application/json": {
+          schema: { $ref: "#/components/schemas/FeedbackSubmission" }
+        }
+      }
+    },
+    responses: {
+      202: jsonResponse("Feedback accepted by the collector.", "FeedbackAcceptedDto"),
+      400: errorResponse("Invalid feedback."),
+      429: errorResponse("Feedback rate limit reached; try again later."),
+      501: errorResponse("Feedback is not available in this deployment."),
+      502: errorResponse("The feedback collector could not be reached or rejected the submission.")
+    }
+  },
   {
     method: "get",
     path: "/api/v1/screenshots/{snapshotId}",
@@ -47791,6 +47832,31 @@ async function telemetryRoutes(app, opts) {
   });
 }
 
+// ../api-routes/src/feedback.ts
+function header(value) {
+  return Array.isArray(value) ? value[0] : value;
+}
+async function feedbackRoutes(app, opts) {
+  app.post("/feedback", async (request, reply) => {
+    const parsed = feedbackSubmissionSchema.safeParse(request.body);
+    if (!parsed.success) {
+      throw validationError("Invalid feedback", {
+        issues: parsed.error.issues.map((issue) => ({ code: issue.code, path: issue.path.join(".") }))
+      });
+    }
+    if (!opts.submitFeedback) {
+      throw notImplemented("Feedback is not available in this deployment");
+    }
+    const accepted = await opts.submitFeedback(parsed.data, {
+      userAgent: header(request.headers["user-agent"]),
+      surface: header(request.headers[USAGE_TELEMETRY_HEADERS.surface]),
+      agent: header(request.headers[USAGE_TELEMETRY_HEADERS.agent]),
+      mcpClient: header(request.headers[USAGE_TELEMETRY_HEADERS.mcpClient])
+    });
+    return reply.status(202).send(accepted);
+  });
+}
+
 // ../api-routes/src/operational-logs.ts
 async function operationalLogsRoutes(app, opts = {}) {
   app.get("/operations/logs", async (request, reply) => {
@@ -47811,8 +47877,8 @@ async function operationalLogsRoutes(app, opts = {}) {
     return withoutUnrequestedFields(page3, requestedFields(request.headers[OPERATIONAL_LOG_FIELDS_HEADER]));
   });
 }
-function requestedFields(header) {
-  const names = (Array.isArray(header) ? header : [header ?? ""]).flatMap((value) => value.split(",")).map((name) => name.trim());
+function requestedFields(header2) {
+  const names = (Array.isArray(header2) ? header2 : [header2 ?? ""]).flatMap((value) => value.split(",")).map((name) => name.trim());
   return new Set(OPERATIONAL_LOG_OPT_IN_CONTEXT_FIELDS.filter((field) => names.includes(field)));
 }
 function withoutUnrequestedFields(page3, requested) {
@@ -49250,7 +49316,7 @@ function createServiceAccountJwt(clientEmail, privateKey, scope) {
   validatePrivateKey(privateKey);
   validateScope(scope);
   const now = Math.floor(Date.now() / 1e3);
-  const header = { alg: "RS256", typ: "JWT" };
+  const header2 = { alg: "RS256", typ: "JWT" };
   const payload = {
     iss: clientEmail,
     scope,
@@ -49260,7 +49326,7 @@ function createServiceAccountJwt(clientEmail, privateKey, scope) {
     // 1 hour
   };
   const encode = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url");
-  const headerB64 = encode(header);
+  const headerB64 = encode(header2);
   const payloadB64 = encode(payload);
   const signingInput = `${headerB64}.${payloadB64}`;
   const sign = crypto30.createSign("RSA-SHA256");
@@ -63466,7 +63532,7 @@ function createServiceAccountJwt2(clientEmail, privateKey, scope) {
   if (!privateKey) throw new CloudRunAuthError("privateKey is required");
   if (!scope) throw new CloudRunAuthError("scope is required");
   const now = Math.floor(Date.now() / 1e3);
-  const header = { alg: "RS256", typ: "JWT" };
+  const header2 = { alg: "RS256", typ: "JWT" };
   const payload = {
     iss: clientEmail,
     scope,
@@ -63475,7 +63541,7 @@ function createServiceAccountJwt2(clientEmail, privateKey, scope) {
     exp: now + 3600
   };
   const encode = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url");
-  const headerB64 = encode(header);
+  const headerB64 = encode(header2);
   const payloadB64 = encode(payload);
   const signingInput = `${headerB64}.${payloadB64}`;
   const sign = crypto43.createSign("RSA-SHA256");
@@ -90767,6 +90833,9 @@ async function apiRoutes(app, opts) {
       setTelemetryEnabled: opts.setTelemetryEnabled,
       recordOnboardingEvent: opts.recordOnboardingEvent
     });
+    await api.register(feedbackRoutes, {
+      submitFeedback: opts.submitFeedback
+    });
     await api.register(adsRoutes, {
       adsCredentialStore: opts.adsCredentialStore,
       verifyAdsAccount: opts.verifyAdsAccount,

package/dist/{chunk-W3GDZZNF.js → chunk-DERWXLHX.js}

@@ -33,6 +33,8 @@ import {
   discoveryCompetitorTypeSchema,
   discoveryPromoteRequestSchema,
   discoveryRunRequestSchema,
+  feedbackAcceptedDtoSchema,
+  feedbackSubmissionSchema,
   gaMeasurementAnalysisWindowSchema,
   gaMeasurementHostScopeSchema,
   googleAdsMetricsWindowSchema,
@@ -128,7 +130,7 @@ import {
   trafficSeriesGranularitySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-6EPN4XY5.js";
+} from "./chunk-EV5G5QRR.js";
 
 // src/cli-error.ts
 function isMachineFormat(format) {
@@ -3122,6 +3124,18 @@ var canonryMcpTools = [
     openApiOperations: ["POST /api/v1/projects/{name}/runs"],
     handler: (client, input) => client.triggerRun(input.project, input.request)
   }),
+  defineTool({
+    name: "canonry_feedback",
+    title: "Send feedback about Canonry",
+    description: "Send feedback about Canonry itself to the Canonry team (canonry.ai). Use it when you uncover a struggle (a failure, confusing output, or something you had to work around) or have a concrete improvement. Tell the user what you are sending first, and send one report per issue. Be specific: the command or tool, the error code, and what you did instead. Never include secrets, API keys, or customer data; credentials are redacted before sending anyway. Not for questions about the user's own project data.",
+    access: "write",
+    tier: "core",
+    inputSchema: feedbackSubmissionSchema,
+    outputSchema: feedbackAcceptedDtoSchema,
+    annotations: writeAnnotations({ idempotentHint: false, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/feedback"],
+    handler: (client, input) => client.sendFeedback(input)
+  }),
   defineTool({
     name: "canonry_run_cancel",
     title: "Cancel run",