@canonry/canonry 6.3.1 → 7.1.1

package/assets/index.html

@@ -12,14 +12,14 @@
     <link rel="icon" type="image/png" sizes="32x32" href="./favicon-32.png" />
     <link rel="apple-touch-icon" href="./apple-touch-icon.png" />
     <title>Canonry</title>
-    <script type="module" crossorigin src="./assets/index-DSCun3I9.js"></script>
+    <script type="module" crossorigin src="./assets/index-DuhS0WLM.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-tanstack-ZXXkndVj.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-radix-twS1M3FF.js">
-    <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-llkUFBGR.js">
+    <link rel="modulepreload" crossorigin href="./assets/vendor-recharts-D-cUuLZo.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-lucide-N6vOpZmh.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-markdown-B4giJcws.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-yaml-GWJz5H2G.js">
-    <link rel="stylesheet" crossorigin href="./assets/index-C17E5ZcA.css">
+    <link rel="stylesheet" crossorigin href="./assets/index-CMe_-fAB.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/{chunk-4WZUR7XX.js → chunk-22R5E5CY.js}

@@ -17,23 +17,24 @@ import {
   resolveOperatorApiKeyIds,
   resolveSentimentInstallConfig,
   runWithUsageTags,
+  saveConfig,
   saveConfigPatch,
   sentimentInstallReadiness
-} from "./chunk-ZZEPF3A5.js";
+} from "./chunk-MTSFSXCG.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-5FYTFE5T.js";
+} from "./chunk-U2S5ABOR.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools,
   isMachineFormat
-} from "./chunk-DERWXLHX.js";
+} from "./chunk-2OQ6D26U.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -161,6 +162,7 @@ import {
   newerFullSweep,
   nextRunFromCron,
   nextRunFromSchedule,
+  notProbeRun,
   notifications,
   parseCookieHeader,
   parseJsonColumn,
@@ -214,7 +216,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-7CVTTQRV.js";
+} from "./chunk-VDX3LYKL.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -330,6 +332,7 @@ import {
   effectiveBrandNames,
   effectiveDomains,
   embedClientConfigForRequest,
+  embedProjectTabsError,
   extractProviderHttpStatus,
   factorStatusFromScore,
   filterCapturedCitedUrls,
@@ -375,6 +378,7 @@ import {
   normalizeAgentSlug,
   normalizeIdTokens,
   normalizeMeasurementExecutionQueryText,
+  normalizeProjectDomain,
   normalizeServedModel,
   normalizeSiteAuditRunRequest,
   normalizeUrlPath,
@@ -420,7 +424,7 @@ import {
   visibilityReportRequestSchema,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-EV5G5QRR.js";
+} from "./chunk-YGHPT5B2.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -440,9 +444,6 @@ var TELEMETRY_ENDPOINT = "https://canonry.ai/api/telemetry";
 var TIMEOUT_MS = 3e3;
 var ANON_ID_ENV_VAR = "CANONRY_ANONYMOUS_ID";
 var ANON_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function shouldDropTelemetryEvent(event, properties) {
-  return isGhostTelemetryEvent(event, properties);
-}
 function bucketCliCommandDuration(durationMs) {
   const duration = Number.isFinite(durationMs) ? Math.max(0, durationMs) : 0;
   if (duration < 1e3) return "under_1s";
@@ -486,7 +487,7 @@ function setTelemetrySource(source) {
 function resolveTelemetryStatus(input) {
   const base = {
     configuredEnabled: input.configuredEnabled,
-    ...input.anonymousId ? { anonymousId: maskAnonymousId(input.anonymousId) } : {},
+    ...input.anonymousId ? { anonymousId: maskTelemetryAnonymousId(input.anonymousId) } : {},
     target: "local"
   };
   if (input.canonryTelemetryDisabled === "1") {
@@ -501,9 +502,6 @@ function resolveTelemetryStatus(input) {
   if (input.configState === "unavailable") return { ...base, enabled: true, reason: "CONFIG_UNAVAILABLE" };
   return { ...base, enabled: true, reason: "enabled" };
 }
-function maskAnonymousId(value) {
-  return maskTelemetryAnonymousId(value);
-}
 function getTelemetryStatus() {
   const env = {
     canonryTelemetryDisabled: process.env.CANONRY_TELEMETRY_DISABLED,
@@ -629,6 +627,10 @@ function detectAndTrackUpgrade() {
 function trackEvent(event, properties, options) {
   void deliverEvent(event, properties, options);
 }
+function recordDashboardEvent(event) {
+  const { event: eventName, eventId, ...properties } = event;
+  trackEvent(eventName, properties, { source: "dashboard", eventId: String(eventId) });
+}
 function setTelemetryPreference(enabled, method) {
   loadConfig();
   const announce = !enabled && isTelemetryEnabled();
@@ -637,7 +639,7 @@ function setTelemetryPreference(enabled, method) {
 }
 function deliverEvent(event, properties, options, delivery = {}) {
   if (!delivery.preferenceChecked && !isTelemetryEnabled()) return Promise.resolve();
-  if (shouldDropTelemetryEvent(event, properties)) return Promise.resolve();
+  if (isGhostTelemetryEvent(event, properties)) return Promise.resolve();
   const anonymousId = getOrCreateAnonymousId();
   if (!anonymousId) return Promise.resolve();
   const payload = {
@@ -890,92 +892,6 @@ var GOOGLE_ADS_MAX_CUSTOMER_CLIENTS = 1e3;
 var GOOGLE_ADS_DEFAULT_CUSTOMER_CLIENT_DEPTH = 1;
 var GOOGLE_ADS_MAX_CUSTOMER_CLIENT_DEPTH = 10;
 
-// ../integration-google-ads/src/goal-semantics.ts
-function addInclusion(included, action, inclusion) {
-  const existing = included.get(action.resourceName);
-  if (existing) {
-    existing.includedBy.push(inclusion);
-    return;
-  }
-  included.set(action.resourceName, { conversionAction: action, includedBy: [inclusion] });
-}
-function resolveEffectiveCampaignGoalInputs(inputs) {
-  const actions = inputs.conversionActions.map((row) => row.conversionAction);
-  const actionsByResource = new Map(actions.map((action) => [action.resourceName, action]));
-  const customGoalsByResource = new Map(
-    inputs.customGoals.map((row) => [row.customConversionGoal.resourceName, row.customConversionGoal])
-  );
-  return inputs.campaignConfigs.map((row) => {
-    const config = row.conversionGoalCampaignConfig;
-    let categoryGoalSource = "UNKNOWN";
-    let categoryOriginGoals = [];
-    if (config.goalConfigLevel === "CUSTOMER") {
-      categoryGoalSource = "CUSTOMER";
-      categoryOriginGoals = inputs.customerGoals.map(({ customerConversionGoal: goal }) => ({
-        resourceName: goal.resourceName,
-        source: "CUSTOMER",
-        category: goal.category,
-        origin: goal.origin,
-        biddable: goal.biddable === true
-      }));
-    } else if (config.goalConfigLevel === "CAMPAIGN") {
-      categoryGoalSource = "CAMPAIGN";
-      categoryOriginGoals = inputs.campaignGoals.filter(({ campaignConversionGoal: goal }) => goal.campaign === config.campaign).map(({ campaignConversionGoal: goal }) => ({
-        resourceName: goal.resourceName,
-        source: "CAMPAIGN",
-        category: goal.category,
-        origin: goal.origin,
-        biddable: goal.biddable === true
-      }));
-    }
-    const included = /* @__PURE__ */ new Map();
-    for (const goal of categoryOriginGoals) {
-      if (!goal.biddable) continue;
-      for (const action of actions) {
-        if (action.primaryForGoal !== false && action.category === goal.category && action.origin === goal.origin) {
-          addInclusion(included, action, {
-            source: goal.source === "CUSTOMER" ? "CUSTOMER_GOAL" : "CAMPAIGN_GOAL",
-            goalResourceName: goal.resourceName,
-            category: goal.category,
-            origin: goal.origin
-          });
-        }
-      }
-    }
-    let customGoal = null;
-    let missingCustomGoalResourceName;
-    const missingConversionActionResourceNames = [];
-    if (config.goalConfigLevel === "CAMPAIGN" && config.customConversionGoal) {
-      customGoal = customGoalsByResource.get(config.customConversionGoal) ?? null;
-      if (!customGoal) {
-        missingCustomGoalResourceName = config.customConversionGoal;
-      } else {
-        for (const resourceName of customGoal.conversionActions ?? []) {
-          const action = actionsByResource.get(resourceName);
-          if (!action) {
-            missingConversionActionResourceNames.push(resourceName);
-            continue;
-          }
-          addInclusion(included, action, {
-            source: "CUSTOM_GOAL",
-            goalResourceName: customGoal.resourceName
-          });
-        }
-      }
-    }
-    return {
-      campaign: row.campaign,
-      config,
-      categoryGoalSource,
-      categoryOriginGoals,
-      customGoal,
-      conversionActions: [...included.values()],
-      ...missingCustomGoalResourceName ? { missingCustomGoalResourceName } : {},
-      missingConversionActionResourceNames
-    };
-  });
-}
-
 // ../integration-google-ads/src/types.ts
 var GoogleAdsApiError = class extends Error {
   constructor(message, status, providerStatus, requestId, retryAfter) {
@@ -1576,8 +1492,7 @@ var GoogleAdsClient = class {
         ...raw,
         // A result exactly at the cap may have more rows upstream. Treat it
         // as incomplete rather than silently deriving absent campaign goals.
-        campaignGoalsComplete: campaignGoals.data.length < GOOGLE_ADS_MAX_RESULT_ROWS,
-        effectiveCampaignGoalInputs: resolveEffectiveCampaignGoalInputs(raw)
+        campaignGoalsComplete: campaignGoals.data.length < GOOGLE_ADS_MAX_RESULT_ROWS
       },
       metadata: {
         apiVersion: GOOGLE_ADS_API_VERSION,
@@ -4237,7 +4152,7 @@ function parseTrackedQueryResponse(body, model) {
     provider: "gemini",
     rawResponse,
     model,
-    servedModel: extractServedModel(rawResponse),
+    servedModel: normalizeServedModel(rawResponse.modelVersion),
     groundingSources: parsed.groundingSources,
     searchQueries: parsed.searchQueries,
     usage: extractUsageFromRaw(rawResponse),
@@ -4261,9 +4176,6 @@ function normalizeResult(raw) {
 function hasParsedResponseContent(rawResponse) {
   return Array.isArray(rawResponse.candidates) && rawResponse.candidates.length > 0;
 }
-function extractServedModel(rawResponse) {
-  return normalizeServedModel(rawResponse.modelVersion);
-}
 function reparseStoredResult(rawResponse) {
   const groundingSources = extractGroundingMetadataFromRaw(rawResponse);
   const searchQueries = extractSearchQueriesFromRaw(rawResponse);
@@ -4447,49 +4359,25 @@ var DEFAULT_OUTPUT_DIMENSIONALITY = 768;
 var CLUSTERING_TASK_TYPE = "CLUSTERING";
 async function embedQueries(queries2, options) {
   if (queries2.length === 0) return [];
-  if (!options.apiKey && !options.client) {
-    throw new Error("embedQueries: missing apiKey");
-  }
-  const client = options.client ?? createGeminiEmbedClient(options.apiKey, options.baseUrl);
-  return client.embedBatch(queries2, {
+  if (!options.apiKey) throw new Error("embedQueries: missing apiKey");
+  const genai = new GoogleGenAI2({ apiKey: options.apiKey, ...options.baseUrl ? { httpOptions: { baseUrl: options.baseUrl } } : {} });
+  const response = await genai.models.embedContent({
     model: options.model ?? DEFAULT_EMBED_MODEL,
-    taskType: CLUSTERING_TASK_TYPE,
-    outputDimensionality: options.outputDimensionality ?? DEFAULT_OUTPUT_DIMENSIONALITY
+    contents: queries2,
+    config: { taskType: CLUSTERING_TASK_TYPE, outputDimensionality: options.outputDimensionality ?? DEFAULT_OUTPUT_DIMENSIONALITY }
   });
+  return extractEmbeddingVectors(response, queries2.length);
 }
 function extractEmbeddingVectors(response, expectedLength) {
   const embeddings = response?.embeddings ?? [];
   if (embeddings.length !== expectedLength) {
-    throw new Error(
-      `embedQueries: expected ${expectedLength} embeddings, got ${embeddings.length}`
-    );
+    throw new Error(`embedQueries: expected ${expectedLength} embeddings, got ${embeddings.length}`);
   }
   return embeddings.map((e, i) => {
-    if (!e.values || e.values.length === 0) {
-      throw new Error(`embedQueries: missing values for query at index ${i}`);
-    }
+    if (!e.values || e.values.length === 0) throw new Error(`embedQueries: missing values for query at index ${i}`);
     return e.values;
   });
 }
-function createEmbedGenAI(apiKey, baseUrl) {
-  return new GoogleGenAI2({ apiKey, ...baseUrl ? { httpOptions: { baseUrl } } : {} });
-}
-function createGeminiEmbedClient(apiKey, baseUrl) {
-  const genai = createEmbedGenAI(apiKey, baseUrl);
-  return {
-    async embedBatch(queries2, opts) {
-      const response = await genai.models.embedContent({
-        model: opts.model,
-        contents: queries2,
-        config: {
-          taskType: opts.taskType,
-          outputDimensionality: opts.outputDimensionality
-        }
-      });
-      return extractEmbeddingVectors(response, queries2.length);
-    }
-  };
-}
 
 // ../provider-gemini/src/list-models.ts
 function listModels(config, signal) {
@@ -4727,7 +4615,7 @@ function buildTrackedQueryRequest2(input) {
     // search-required-v1: web_search is the only tool, so requiring a tool
     // call requires a search. See OPENAI_RETRIEVAL_CONTRACT.
     tool_choice: "required",
-    input: buildPrompt2(input.query)
+    input: input.query
   };
   return { endpoint: OPENAI_RESPONSES_ENDPOINT, body };
 }
@@ -4751,7 +4639,7 @@ function parseTrackedQueryResponse2(body, model) {
     provider: "openai",
     rawResponse,
     model,
-    servedModel: extractServedModel2(rawResponse),
+    servedModel: normalizeServedModel(rawResponse.model),
     groundingSources: parsed.groundingSources,
     searchQueries: parsed.searchQueries,
     retrievalStatus: parsed.retrievalStatus,
@@ -4778,9 +4666,6 @@ function normalizeResult2(raw) {
 function hasParsedResponseContent2(rawResponse) {
   return Array.isArray(rawResponse.output) && rawResponse.output.length > 0;
 }
-function extractServedModel2(rawResponse) {
-  return normalizeServedModel(rawResponse.model);
-}
 function reparseStoredResult2(rawResponse) {
   const groundingSources = extractGroundingSourcesFromRaw(rawResponse);
   const searchQueries = extractSearchQueriesFromRaw2(rawResponse);
@@ -4805,9 +4690,6 @@ function extractRetrievalStatusFromRaw(rawResponse) {
   }
   return RetrievalStatuses["not-used"];
 }
-function buildPrompt2(query) {
-  return query;
-}
 function extractResponseText(response) {
   try {
     const parts = [];
@@ -5235,7 +5117,7 @@ function parseTrackedQueryResponse3(body, model) {
     provider: "claude",
     rawResponse,
     model,
-    servedModel: extractServedModel3(rawResponse),
+    servedModel: extractServedModel(rawResponse),
     groundingSources: parsed.groundingSources,
     searchQueries: parsed.searchQueries,
     retrievalStatus: parsed.retrievalStatus,
@@ -5264,7 +5146,7 @@ function normalizeResult3(raw) {
 function hasParsedResponseContent3(rawResponse) {
   return Array.isArray(rawResponse.content) && rawResponse.content.length > 0;
 }
-function extractServedModel3(rawResponse) {
+function extractServedModel(rawResponse) {
   return normalizeServedModel(rawResponse.model);
 }
 function reparseStoredResult3(rawResponse) {
@@ -5802,7 +5684,7 @@ function buildTrackedQueryRequest4(input) {
       },
       {
         role: "user",
-        content: buildPrompt3(input.query, input.location)
+        content: buildPrompt2(input.query, input.location)
       }
     ]
   };
@@ -5830,7 +5712,7 @@ function parseTrackedQueryResponse4(body, model) {
     provider: "local",
     rawResponse,
     model,
-    servedModel: extractServedModel4(rawResponse),
+    servedModel: normalizeServedModel(rawResponse.model),
     groundingSources: [],
     searchQueries: [],
     usage: extractUsageFromRaw4(rawResponse),
@@ -5851,7 +5733,7 @@ function normalizeResult4(raw) {
     searchQueries: raw.searchQueries
   };
 }
-function buildPrompt3(query, location) {
+function buildPrompt2(query, location) {
   const locationContext = location ? ` The user is searching from ${location.city}, ${location.region}, ${location.country}.` : "";
   return `Based on your training knowledge, what websites, services, or organizations are commonly associated with "${query}"?${locationContext} List the most relevant ones and include their domain names (e.g. example.com) where you know them.`;
 }
@@ -5878,9 +5760,6 @@ async function generateText4(prompt, config) {
   );
   return response.choices[0]?.message?.content ?? "";
 }
-function extractServedModel4(rawResponse) {
-  return normalizeServedModel(rawResponse.model);
-}
 function extractUsageFromRaw4(rawResponse) {
   const usage = rawResponse.usage;
   if (usage === null || typeof usage !== "object") return void 0;
@@ -6723,7 +6602,7 @@ function parseTrackedQueryResponse5(body, model) {
     provider: "perplexity",
     rawResponse: body,
     model: resolveModel3(model),
-    servedModel: extractServedModel5(body),
+    servedModel: normalizeServedModel(body.model),
     groundingSources: parsed.groundingSources,
     searchQueries: parsed.searchQueries,
     retrievalStatus: parsed.retrievalStatus,
@@ -6756,9 +6635,6 @@ function hasParsedResponseContent4(rawResponse) {
   if (!nestedResponse) return false;
   return Array.isArray(nestedResponse.choices) && nestedResponse.choices.length > 0 || Array.isArray(nestedResponse.search_results) && nestedResponse.search_results.length > 0 || Array.isArray(nestedResponse.citations) && nestedResponse.citations.length > 0;
 }
-function extractServedModel5(rawResponse) {
-  return normalizeServedModel(rawResponse.model);
-}
 function reparseStoredResult4(rawResponse) {
   const agent = agentResponseOf(rawResponse);
   if (agent) return parseAgentResponse(agent);
@@ -7197,7 +7073,7 @@ async function executeTrackedQuery6(input) {
       provider: "muse",
       rawResponse,
       model,
-      servedModel: extractServedModel6(rawResponse),
+      servedModel: normalizeServedModel(rawResponse.model),
       groundingSources: parsed.groundingSources,
       searchQueries: parsed.searchQueries,
       retrievalStatus: parsed.retrievalStatus,
@@ -7208,9 +7084,6 @@ async function executeTrackedQuery6(input) {
     throw new Error(`[provider-muse] ${describeError(err)}`);
   }
 }
-function extractServedModel6(rawResponse) {
-  return normalizeServedModel(rawResponse.model);
-}
 function extractUsage(rawResponse) {
   const usage = asRecord(rawResponse.usage);
   if (!usage) return void 0;
@@ -7422,7 +7295,7 @@ var museAdapter = {
 
 // src/embed.ts
 var DEFAULT_EMBED_PROJECT_TABS = ["overview"];
-var SERVER_ENFORCED_EMBED_PROJECT_TABS = ["overview", "technical-aeo", "report"];
+var SERVER_ENFORCED_EMBED_PROJECT_TABS = ["overview", "technical-aeo"];
 function unsupportedEmbedProjectTabs(projectTabs) {
   if (!projectTabs) return [];
   const supported = new Set(SERVER_ENFORCED_EMBED_PROJECT_TABS);
@@ -7437,6 +7310,8 @@ function resolveEmbedConfig(env, config) {
   const views = normalizeIdTokens(rawViews);
   const rawProjectTabs = env.CANONRY_EMBED_PROJECT_TABS !== void 0 ? splitList(env.CANONRY_EMBED_PROJECT_TABS) : splitList(embed?.projectTabs);
   const projectTabs = normalizeIdTokens(rawProjectTabs) ?? (enabled ? DEFAULT_EMBED_PROJECT_TABS : void 0);
+  const projectTabsError = enabled ? embedProjectTabsError(projectTabs) : void 0;
+  if (projectTabsError) throw new Error(projectTabsError);
   return {
     enabled,
     allowedOrigins,
@@ -7976,13 +7851,38 @@ function fitToByteBudget(payload) {
   return JSON.stringify(current);
 }
 
+// src/ui-telemetry-gate.ts
+var UI_EVENT_MINUTE_CAPACITY = 60;
+var UI_EVENT_HOUR_CAPACITY = 600;
+function createUiTelemetryGate(options = {}) {
+  const now = options.now ?? Date.now;
+  const enabled = options.enabled ?? isTelemetryEnabled;
+  const record2 = options.record ?? recordDashboardEvent;
+  const buckets = [
+    { capacity: UI_EVENT_MINUTE_CAPACITY, perMs: UI_EVENT_MINUTE_CAPACITY / 6e4, tokens: UI_EVENT_MINUTE_CAPACITY },
+    { capacity: UI_EVENT_HOUR_CAPACITY, perMs: UI_EVENT_HOUR_CAPACITY / 36e5, tokens: UI_EVENT_HOUR_CAPACITY }
+  ];
+  let refilledAt = now();
+  return (event) => {
+    if (!enabled()) return false;
+    const at = now();
+    const elapsed = Math.max(0, at - refilledAt);
+    refilledAt = at;
+    for (const bucket of buckets) bucket.tokens = Math.min(bucket.capacity, bucket.tokens + elapsed * bucket.perMs);
+    if (buckets.some((bucket) => bucket.tokens < 1)) return false;
+    for (const bucket of buckets) bucket.tokens -= 1;
+    record2(event);
+    return true;
+  };
+}
+
 // src/instance-identity.ts
 function nonBlank(value) {
   const trimmed = value?.trim();
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "a9545eefb45af8bb1a00366b6e75ce25bb3f4c2b" : void 0;
+  const embedded = true ? "9ddd0d5e4575e0983aae488bd457b664c8b9fd4a" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -12949,18 +12849,17 @@ function withAttemptTimeout(promise, timeoutMs, label) {
     );
   });
 }
-async function embedWithRetry(fn, opts = {}) {
-  const attemptTimeoutMs = opts.attemptTimeoutMs ?? EMBED_ATTEMPT_TIMEOUT_MS;
+async function embedWithRetry(fn) {
+  const attemptTimeoutMs = EMBED_ATTEMPT_TIMEOUT_MS;
   return withRetry(
     () => withAttemptTimeout(fn(), attemptTimeoutMs, "Discovery embedding call"),
     {
-      maxRetries: opts.maxRetries ?? EMBED_RETRY_MAX_RETRIES,
+      maxRetries: EMBED_RETRY_MAX_RETRIES,
       isRetryable: isRetryableHttpError,
       maxDelayMs: EMBED_RETRY_MAX_DELAY_MS,
-      sleep: opts.sleep,
-      onRetry: opts.onRetry ?? (({ attempt, delayMs }) => {
+      onRetry: ({ attempt, delayMs }) => {
         log13.warn("discovery.embed.retry", { attempt, delayMs });
-      })
+      }
     }
   );
 }
@@ -12975,7 +12874,7 @@ async function executeDiscoveryRun(opts) {
     const canonicalDomains = effectiveDomains({
       canonicalDomain: projectRow.canonicalDomain,
       ownedDomains: projectRow.ownedDomains
-    });
+    }).map(normalizeProjectDomain);
     const brandNames = effectiveBrandNames({
       displayName: projectRow.displayName,
       aliases: projectRow.aliases
@@ -12987,7 +12886,7 @@ async function executeDiscoveryRun(opts) {
       canonicalDomains,
       competitorDomains: projectCompetitors
     };
-    const deps = opts.deps ?? buildDefaultDeps(opts.registry);
+    const deps = buildDefaultDeps(opts.registry);
     const result2 = await executeDiscovery({
       db: opts.db,
       runId: opts.runId,
@@ -13049,8 +12948,8 @@ function buildDefaultDeps(registry) {
     async seed(input) {
       const prompt = buildSeedPrompt(input);
       const providerNames = input.seedProviders && input.seedProviders.length > 0 ? [...input.seedProviders] : ["gemini"];
-      const perProvider = await Promise.all(providerNames.map(async (name) => {
-        const seedProvider = seedProviderFor(name);
+      const admittedProviders = providerNames.map((name) => ({ name, seedProvider: seedProviderFor(name) }));
+      const perProvider = await Promise.all(admittedProviders.map(async ({ name, seedProvider }) => {
         const raw = await seedProvider.adapter.executeTrackedQuery(
           {
             query: prompt,
@@ -14795,7 +14694,7 @@ function readStoredGroundingSources(rawResponse) {
   return result2;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-SYISPW25.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-YCMRTVCI.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -16554,8 +16453,9 @@ var Notifier = class {
           })),
           dashboardUrl: `${this.serverUrl}/projects/${project.name}`
         };
-        await this.sendWebhook(config.url, payload, notif.id, projectId, notif.webhookSecret ?? null);
-        for (const insight of relevantInsights) this.rememberInsightNotified(projectId, insight);
+        if (await this.sendWebhook(config.url, payload, notif.id, projectId, notif.webhookSecret ?? null)) {
+          for (const insight of relevantInsights) this.rememberInsightNotified(projectId, insight);
+        }
       }
     }
   }
@@ -16725,7 +16625,8 @@ var Notifier = class {
     const groupSiblings = this.db.select().from(runs).where(and18(
       eq20(runs.projectId, projectId),
       eq20(runs.kind, thisRun.kind),
-      eq20(runs.createdAt, thisRun.createdAt)
+      eq20(runs.createdAt, thisRun.createdAt),
+      notProbeRun()
     )).all();
     const stillPending = groupSiblings.some((r) => r.status === "queued" || r.status === "running");
     if (stillPending) return [];
@@ -16751,7 +16652,8 @@ var Notifier = class {
       and18(
         eq20(runs.projectId, projectId),
         eq20(runs.kind, thisRun.kind),
-        or(eq20(runs.status, "completed"), eq20(runs.status, "partial"))
+        or(eq20(runs.status, "completed"), eq20(runs.status, "partial")),
+        notProbeRun()
       )
     ).orderBy(desc9(runs.createdAt), desc9(runs.id)).limit(RECENT_FETCH_LIMIT).all();
     const groups = groupRunsByCreatedAt(recentRuns);
@@ -19236,11 +19138,12 @@ function truncateToByteLimit(text, maxBytes) {
   if (Buffer.byteLength(text, "utf8") <= maxBytes) return text;
   const suffix = "\u2026[truncated]";
   const budget = maxBytes - Buffer.byteLength(suffix, "utf8");
-  let buf = Buffer.from(text, "utf8").subarray(0, budget);
-  while (buf.length > 0 && (buf[buf.length - 1] & 192) === 128) {
-    buf = buf.subarray(0, buf.length - 1);
+  const buf = Buffer.from(text, "utf8");
+  let end = budget;
+  while (end > 0 && (buf[end] & 192) === 128) {
+    end -= 1;
   }
-  return buf.toString("utf8") + suffix;
+  return buf.subarray(0, end).toString("utf8") + suffix;
 }
 async function runSummaryLlm(args) {
   const context = {
@@ -19261,8 +19164,7 @@ async function compactMessages(args) {
   if (split === 0) return null;
   const chunk = messages.slice(0, split);
   const suffix = messages.slice(split);
-  const summarize = args.summarize ?? runSummaryLlm;
-  const rawSummary = await summarize({ model: args.model, chunk, getApiKey: args.getApiKey });
+  const rawSummary = await runSummaryLlm({ model: args.model, chunk, getApiKey: args.getApiKey });
   const summary = truncateToByteLimit(rawSummary, AGENT_MEMORY_VALUE_MAX_BYTES);
   writeCompactionNote(args.db, {
     projectId: args.projectId,
@@ -22197,6 +22099,7 @@ function createGoogleMarketingConfigCredentialStore(input) {
   };
 }
 async function createServer(opts) {
+  const embed = resolveEmbedConfig(process.env, opts.config);
   const operatorApiKeyIds = resolveOperatorApiKeyIds(process.env);
   const dashboardManagedRunKinds = resolveDashboardManagedRunKinds(process.env, opts.config);
   const operationalLogs = new OperationalLogStore(opts.db, {
@@ -23025,7 +22928,6 @@ async function createServer(opts) {
   const rawBasePath = process.env.CANONRY_BASE_PATH ?? opts.config.basePath;
   const normalizedBasePath = rawBasePath ? "/" + rawBasePath.replace(/^\//, "").replace(/\/?$/, "/") : void 0;
   const basePath = normalizedBasePath === "/" ? void 0 : normalizedBasePath;
-  const embed = resolveEmbedConfig(process.env, opts.config);
   const embedCsp = embed.enabled ? frameAncestorsHeaderValue(embed.allowedOrigins) : void 0;
   const unsupportedProjectTabs = unsupportedEmbedProjectTabs(embed.projectTabs);
   if (embed.enabled && unsupportedProjectTabs.length > 0) {
@@ -23209,14 +23111,19 @@ async function createServer(opts) {
         password,
         opts.config.dashboardPasswordHash
       );
-      if (!verification.ok) {
+      const onDisk = verification.ok && verification.needsRehash ? loadConfigRaw() : null;
+      if (!verification.ok || onDisk && onDisk.dashboardPasswordHash !== opts.config.dashboardPasswordHash) {
         return reply.status(401).send({
           error: { code: "AUTH_INVALID", message: "Incorrect password" }
         });
       }
       if (verification.needsRehash) {
-        opts.config.dashboardPasswordHash = hashDashboardPassword(password);
-        saveConfigPatch(opts.config);
+        if (fs9.existsSync(getConfigPath()) && (!onDisk || typeof onDisk !== "object" || Array.isArray(onDisk) || !onDisk.apiUrl || !onDisk.database || !onDisk.apiKey)) {
+          throw new Error("Cannot migrate dashboard password: config.yaml is unreadable or invalid");
+        }
+        const migratedHash = hashDashboardPassword(password);
+        saveConfig({ ...onDisk ?? opts.config, dashboardPasswordHash: migratedHash });
+        opts.config.dashboardPasswordHash = migratedHash;
       }
       if (!createPasswordSession(reply)) {
         return reply.status(401).send({
@@ -23899,10 +23806,10 @@ async function createServer(opts) {
       void setTelemetryPreference(enabled, "api");
       opts.config.telemetry = enabled;
     },
-    recordOnboardingEvent: (event) => {
-      const { event: eventName, eventId, ...properties } = event;
-      trackEvent(eventName, properties, { source: "dashboard", eventId });
-    },
+    recordOnboardingEvent: (event) => recordDashboardEvent(event),
+    // Answers false while telemetry is off or the per-process cap is spent, so
+    // the dashboard stops sending for the session.
+    recordUiEvent: createUiTelemetryGate(),
     submitFeedback: (submission, context) => sendFeedback(submission, context),
     onCdpConfigure: async (host, port2) => {
       if (!opts.config.cdp) opts.config.cdp = {};
@@ -24017,6 +23924,8 @@ async function createServer(opts) {
       }
       if (embed.enabled) {
         const embedClient = embedClientConfigForRequest(embed, projectTabsOverride, themeOverride, renderTokenOverride);
+        const projectTabsError = embedProjectTabsError(embedClient?.projectTabs);
+        if (projectTabsError) throw validationError(projectTabsError);
         if (embedClient) clientConfig.embed = embedClient;
       }
       const configScript = `<script>window.__CANONRY_CONFIG__=${serializeForInlineScript(clientConfig)}</script>`;