@canonry/canonry 7.10.0 → 7.12.0

package/dist/{chunk-FVMWUT2R.js → chunk-DXI2FTSW.js}

@@ -20,20 +20,20 @@ import {
   saveConfig,
   saveConfigPatch,
   sentimentInstallReadiness
-} from "./chunk-IKXVLT4M.js";
+} from "./chunk-SM6ZZAPK.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-5ZBN3EEK.js";
+} from "./chunk-7I64KEGM.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools
-} from "./chunk-VSZJVBVR.js";
+} from "./chunk-BTHEFJCI.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -58,12 +58,16 @@ import {
   agentMemory,
   agentSessions,
   agentToolEvents,
+  answerIdentityChanged,
+  answerIdentityFrom,
   anyUsersExist,
   apiKeys,
   apiRoutes,
+  applyCompetitorAutoAliases,
   assessConversionTrackingIntegrity,
   auditLog,
   backfillProjectAnswerMentions,
+  backfillProjectAnswerMentionsInChunks,
   backlinkDomains,
   backlinkSummaries,
   bingCoverageSnapshots,
@@ -74,15 +78,19 @@ import {
   ccReleasePaths,
   ccReleaseSyncs,
   classifyReviewsError,
+  competitorIdentityColumns,
   competitors,
   computeCitedCompetitorDomains,
+  cookieIsSecure,
   countAttributes,
   countPopulatedGroups,
   createCredentialChecker,
   createFastifyLogger,
   createLogger,
+  createProjectPassQueue,
   createRunCompetitorResolver,
   createUserSession,
+  dashboardSessions,
   deliverWebhook,
   determineCitationState,
   discoverySessions,
@@ -129,6 +137,7 @@ import {
   hashAttributes,
   hashLodging,
   hashPlaceDetails,
+  hashSessionToken,
   insightNotifyState,
   insights,
   inspectUrl,
@@ -156,6 +165,7 @@ import {
   notifications,
   parseCookieHeader,
   parseJsonColumn,
+  previewCompetitorAutoAliases,
   probeLatestRelease,
   projects,
   providerBatchRequests,
@@ -165,7 +175,9 @@ import {
   queryBacklinks,
   querySnapshots,
   queueRunIfProjectIdle,
+  readAnswerIdentity,
   readInstalledVersion,
+  readMarketCompetitorNames,
   readNegativeReviewMaxStars,
   recordSentimentCompletion,
   redactNotificationUrl,
@@ -205,7 +217,7 @@ import {
   siteLivenessState,
   toAlertView,
   usageCounters
-} from "./chunk-52PHEGHT.js";
+} from "./chunk-GQMSJEMZ.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -215,12 +227,14 @@ import {
   AdsAdGroupBillingEventTypes,
   AdsCampaignBiddingTypes,
   AgentProviderIds,
+  AnchoredSpanSources,
   AppError,
   BacklinkSources,
   CANONRY_NPM_PACKAGE_URL,
   CITED_URL_CAPTURE_VERSION,
   CcReleaseSyncStatuses,
   CheckNotificationPolicies,
+  DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DiscoveryCompetitorTypes,
   FEEDBACK_LIMITS,
@@ -247,6 +261,7 @@ import {
   ProviderBatchStatuses,
   ProviderBatchSubmitError,
   ProviderDispatchModes,
+  ProviderNames,
   RATIO_UNIT_META_KEY,
   ROUTE_CAPABLE_CITED_URL_PROVIDERS,
   RUN_FILL_PROVIDER_BREAKER,
@@ -298,6 +313,7 @@ import {
   classifyTemplateLinkEdge,
   cloudflareQueueNameSchema,
   compareSemver,
+  competitorIdentityAliases,
   competitorLabelFromDomain,
   compileBrandAliases,
   computeBacklinkSummaryMetrics,
@@ -364,7 +380,6 @@ import {
   missingDependency,
   nextScheduleUpdatedAt,
   normalizeAgentSlug,
-  normalizeCompetitorAliases,
   normalizeIdTokens,
   normalizeMeasurementExecutionQueryText,
   normalizeProjectDomain,
@@ -414,7 +429,7 @@ import {
   visibilityReportRequestSchema,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-66DVP4DN.js";
+} from "./chunk-AU7OUDWR.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -3545,7 +3560,8 @@ import fs9 from "fs";
 import path8 from "path";
 import { isIP } from "net";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { and as and23, eq as eq29 } from "drizzle-orm";
+import { setImmediate as yieldToEventLoop4 } from "timers/promises";
+import { and as and23, eq as eq29, isNotNull as isNotNull4, isNull as isNull4, lte as lte2, ne as ne3, or as or3, sql as sql11 } from "drizzle-orm";
 
 // ../integration-typesafe/src/classifier.ts
 import { createHash } from "crypto";
@@ -4519,6 +4535,42 @@ var geminiAdapter = {
   }
 };
 
+// ../provider-gemini/src/anchored-spans.ts
+function isRecord2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function chunkSource(chunk) {
+  if (!isRecord2(chunk) || !isRecord2(chunk.web)) return null;
+  const uri = typeof chunk.web.uri === "string" ? chunk.web.uri : "";
+  const uriHost = hostOf(uri);
+  if (uriHost && uriHost !== VERTEX_AI_SEARCH_PROXY_DOMAIN && registrableDomain(uriHost)) return uri;
+  const title = typeof chunk.web.title === "string" ? chunk.web.title.trim() : "";
+  return title && registrableDomain(title) ? title : null;
+}
+function extractAnchoredSpans(rawResponse) {
+  const candidates = Array.isArray(rawResponse.candidates) ? rawResponse.candidates : [];
+  const candidate = candidates[0];
+  if (!isRecord2(candidate) || !isRecord2(candidate.groundingMetadata)) return [];
+  const metadata2 = candidate.groundingMetadata;
+  const chunks = Array.isArray(metadata2.groundingChunks) ? metadata2.groundingChunks : [];
+  const spans = [];
+  for (const support of Array.isArray(metadata2.groundingSupports) ? metadata2.groundingSupports : []) {
+    if (!isRecord2(support) || !isRecord2(support.segment)) continue;
+    const text = support.segment.text;
+    if (typeof text !== "string" || !text.trim()) continue;
+    const sources = /* @__PURE__ */ new Set();
+    for (const index of Array.isArray(support.groundingChunkIndices) ? support.groundingChunkIndices : []) {
+      if (typeof index !== "number" || !Number.isInteger(index) || index < 0 || index >= chunks.length) continue;
+      const source = chunkSource(chunks[index]);
+      if (source) sources.add(source);
+    }
+    for (const source of sources) {
+      spans.push({ text, source, kind: "window", via: AnchoredSpanSources["gemini-support"] });
+    }
+  }
+  return spans;
+}
+
 // ../provider-openai/src/normalize.ts
 import OpenAI from "openai";
 
@@ -4961,6 +5013,40 @@ var openaiAdapter = {
   }
 };
 
+// ../provider-openai/src/anchored-spans.ts
+function isRecord3(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function extractAnchoredSpans2(rawResponse) {
+  const spans = [];
+  const output = Array.isArray(rawResponse.output) ? rawResponse.output : [];
+  for (const item of output) {
+    if (!isRecord3(item) || item.type !== "message" || !Array.isArray(item.content)) continue;
+    for (const part of item.content) {
+      if (!isRecord3(part) || part.type !== "output_text" || typeof part.text !== "string") continue;
+      const text = part.text;
+      const citations = (Array.isArray(part.annotations) ? part.annotations : []).flatMap((annotation) => {
+        if (!isRecord3(annotation) || annotation.type !== "url_citation" || typeof annotation.url !== "string") return [];
+        const start = annotation.start_index;
+        const end = annotation.end_index;
+        if (typeof start !== "number" || typeof end !== "number" || !Number.isInteger(start) || !Number.isInteger(end)) return [];
+        if (start < 0 || end < start || end > text.length) return [];
+        return [{ start, end, url: annotation.url }];
+      }).sort((a, b) => a.start - b.start);
+      let previousEnd = 0;
+      for (const citation of citations) {
+        const lineStart = citation.start === 0 ? 0 : text.lastIndexOf("\n", citation.start - 1) + 1;
+        const from = Math.max(lineStart, previousEnd);
+        if (citation.start > from) {
+          spans.push({ text: text.slice(from, citation.start), source: citation.url, kind: "window", via: AnchoredSpanSources["openai-annotation"] });
+        }
+        previousEnd = Math.max(previousEnd, citation.end);
+      }
+    }
+  }
+  return spans;
+}
+
 // ../provider-claude/src/normalize.ts
 import Anthropic from "@anthropic-ai/sdk";
 
@@ -5597,6 +5683,40 @@ var claudeAdapter = {
   }
 };
 
+// ../provider-claude/src/anchored-spans.ts
+function isRecord4(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function leadIn(text) {
+  const end = text.trimEnd().length;
+  if (end === 0) return "";
+  return text.slice(text.lastIndexOf("\n", end - 1) + 1);
+}
+function extractAnchoredSpans3(rawResponse) {
+  const spans = [];
+  const content = Array.isArray(rawResponse.content) ? rawResponse.content : [];
+  let previousUncited = null;
+  for (const block of content) {
+    if (!isRecord4(block) || block.type !== "text" || typeof block.text !== "string") continue;
+    const urls = /* @__PURE__ */ new Set();
+    for (const citation of Array.isArray(block.citations) ? block.citations : []) {
+      if (isRecord4(citation) && citation.type === "web_search_result_location" && typeof citation.url === "string") {
+        urls.add(citation.url);
+      }
+    }
+    if (urls.size === 0) {
+      previousUncited = block.text;
+      continue;
+    }
+    const window = (previousUncited === null ? "" : leadIn(previousUncited)) + block.text;
+    for (const url of urls) {
+      spans.push({ text: window, source: url, kind: "window", via: AnchoredSpanSources["claude-citation"] });
+    }
+    previousUncited = null;
+  }
+  return spans;
+}
+
 // ../provider-local/src/normalize.ts
 import OpenAI3 from "openai";
 
@@ -6631,6 +6751,54 @@ function reparseStoredResult4(rawResponse) {
   if (agent) return parseAgentResponse(agent);
   return parseSonarResponse(rawResponse);
 }
+function extractAnchoredSpans4(rawResponse) {
+  const agent = agentResponseOf(rawResponse);
+  let text;
+  let sourceFor;
+  if (agent) {
+    text = extractAgentAnswerText(agent);
+    const byId = /* @__PURE__ */ new Map();
+    for (const item of agentOutput(agent)) {
+      if (item.type !== "search_results" || !Array.isArray(item.results)) continue;
+      for (const result2 of item.results) {
+        if (!isRecord5(result2) || typeof result2.id !== "number" || typeof result2.url !== "string" || !result2.url) continue;
+        if (!byId.has(result2.id)) byId.set(result2.id, result2.url);
+      }
+    }
+    sourceFor = (marker) => byId.get(marker);
+  } else {
+    text = extractAnswerText3(rawResponse);
+    const citations = extractCitations(rawResponse);
+    sourceFor = (marker) => citations[marker - 1];
+  }
+  const spans = [];
+  if (!text.includes("[")) return spans;
+  let groupStart = -1;
+  let groupEnd = -1;
+  let previousEnd = 0;
+  let markers = [];
+  const flush = () => {
+    if (markers.length === 0) return;
+    const lineStart = groupStart === 0 ? 0 : text.lastIndexOf("\n", groupStart - 1) + 1;
+    const from = Math.max(lineStart, previousEnd);
+    const window = text.slice(from, groupStart);
+    if (window.trim()) {
+      for (const source of new Set(markers.map(sourceFor).filter((url) => typeof url === "string" && url.length > 0))) {
+        spans.push({ text: window, source, kind: "window", via: AnchoredSpanSources["perplexity-marker"] });
+      }
+    }
+    previousEnd = groupEnd;
+    markers = [];
+  };
+  for (const match of text.matchAll(/\[(\d{1,3})\]/g)) {
+    if (markers.length > 0 && match.index !== groupEnd) flush();
+    if (markers.length === 0) groupStart = match.index;
+    markers.push(Number(match[1]));
+    groupEnd = match.index + match[0].length;
+  }
+  flush();
+  return spans;
+}
 function createClient3(apiKey) {
   return new OpenAI4({ apiKey, baseURL: BASE_URL });
 }
@@ -6642,11 +6810,11 @@ function assertUsableResponse(response) {
   if (status === void 0 || status === "completed") return;
   if (status === "incomplete") {
     if (extractAgentAnswerText(response).trim().length > 0) return;
-    const details = isRecord2(response.incomplete_details) ? response.incomplete_details : void 0;
+    const details = isRecord5(response.incomplete_details) ? response.incomplete_details : void 0;
     const reason = typeof details?.reason === "string" && details.reason.length > 0 ? details.reason : "no reason given";
     throw new Error(`agent response incomplete with no answer: ${reason}`);
   }
-  const error = isRecord2(response.error) ? response.error : void 0;
+  const error = isRecord5(response.error) ? response.error : void 0;
   const message = typeof error?.message === "string" && error.message.length > 0 ? error.message : "no error detail";
   const type = typeof error?.type === "string" && error.type.length > 0 ? ` (${error.type})` : "";
   throw new Error(`agent response ${typeof status === "string" ? status : describeError(status)}: ${message}${type}`);
@@ -6657,7 +6825,7 @@ function agentResponseOf(rawResponse) {
   return nested && Array.isArray(nested.output) ? nested : null;
 }
 function agentOutput(response) {
-  return Array.isArray(response.output) ? response.output.filter(isRecord2) : [];
+  return Array.isArray(response.output) ? response.output.filter(isRecord5) : [];
 }
 function parseAgentResponse(response) {
   const groundingSources = extractAgentGroundingSources(response);
@@ -6675,7 +6843,7 @@ function extractAgentAnswerText(response) {
   for (const item of agentOutput(response)) {
     if (item.type !== "message" || !Array.isArray(item.content)) continue;
     for (const part of item.content) {
-      if (isRecord2(part) && part.type === "output_text" && typeof part.text === "string") parts.push(part.text);
+      if (isRecord5(part) && part.type === "output_text" && typeof part.text === "string") parts.push(part.text);
     }
   }
   return parts.join("");
@@ -6684,7 +6852,7 @@ function extractAgentGroundingSources(response) {
   const sources = [];
   const seen = /* @__PURE__ */ new Set();
   const add = (entry) => {
-    if (!isRecord2(entry) || typeof entry.url !== "string" || entry.url.length === 0) return;
+    if (!isRecord5(entry) || typeof entry.url !== "string" || entry.url.length === 0) return;
     if (seen.has(entry.url)) return;
     seen.add(entry.url);
     sources.push({ uri: entry.url, title: typeof entry.title === "string" ? entry.title : "" });
@@ -6696,7 +6864,7 @@ function extractAgentGroundingSources(response) {
       item.contents.forEach(add);
     } else if (item.type === "message" && Array.isArray(item.content)) {
       for (const part of item.content) {
-        if (isRecord2(part) && Array.isArray(part.annotations)) part.annotations.forEach(add);
+        if (isRecord5(part) && Array.isArray(part.annotations)) part.annotations.forEach(add);
       }
     }
   }
@@ -6713,13 +6881,13 @@ function extractAgentSearchQueries(response) {
   return [...queries2];
 }
 function extractAgentUsage(response) {
-  const usage = isRecord2(response.usage) ? response.usage : void 0;
+  const usage = isRecord5(response.usage) ? response.usage : void 0;
   if (!usage) return void 0;
-  const details = isRecord2(usage.input_tokens_details) ? usage.input_tokens_details : void 0;
+  const details = isRecord5(usage.input_tokens_details) ? usage.input_tokens_details : void 0;
   const cachedInputTokens = usageCount(details?.cache_read_input_tokens);
   const cacheWriteTokens = usageCount(details?.cache_creation_input_tokens);
-  const toolCalls = isRecord2(usage.tool_calls_details) ? usage.tool_calls_details : void 0;
-  const webSearch = isRecord2(toolCalls?.web_search) ? toolCalls.web_search : void 0;
+  const toolCalls = isRecord5(usage.tool_calls_details) ? usage.tool_calls_details : void 0;
+  const webSearch = isRecord5(toolCalls?.web_search) ? toolCalls.web_search : void 0;
   const searchCount = typeof webSearch?.invocation === "number" ? usageCount(webSearch.invocation) : agentOutput(response).filter((item) => item.type === "search_results").length;
   return {
     inputTokens: Math.max(0, usageCount(usage.input_tokens) - cachedInputTokens - cacheWriteTokens),
@@ -6730,7 +6898,7 @@ function extractAgentUsage(response) {
   };
 }
 function extractAgentStopReason(response) {
-  const details = isRecord2(response.incomplete_details) ? response.incomplete_details : void 0;
+  const details = isRecord5(response.incomplete_details) ? response.incomplete_details : void 0;
   if (typeof details?.reason === "string" && details.reason.length > 0) return details.reason;
   return typeof response.status === "string" && response.status.length > 0 ? response.status : void 0;
 }
@@ -6798,7 +6966,7 @@ function extractSearchResults(rawResponse) {
 function parseSearchResultsArray(value) {
   if (!Array.isArray(value)) return [];
   return value.flatMap((result2) => {
-    if (!isRecord2(result2)) return [];
+    if (!isRecord5(result2)) return [];
     const url = result2.url;
     if (typeof url !== "string" || url.length === 0) {
       return [];
@@ -6825,9 +6993,9 @@ function extractAnswerText3(rawResponse) {
   }
 }
 function extractNestedApiResponse(rawResponse) {
-  return isRecord2(rawResponse.apiResponse) ? rawResponse.apiResponse : null;
+  return isRecord5(rawResponse.apiResponse) ? rawResponse.apiResponse : null;
 }
-function isRecord2(value) {
+function isRecord5(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function extractCitedDomains2(groundingSources) {
@@ -7873,7 +8041,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "b8858fd6adad2abea13e838eab395ad7aef15323" : void 0;
+  const embedded = true ? "0c7138fae1222b76fc53fbc904a8e30d18ee72bf" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -8295,17 +8463,15 @@ function runOutcome(inserted, providerErrors, planShortfall) {
     error: someFailed ? serializeRunError(buildProviderRunError(providerErrors)) : null
   };
 }
-function competitorIdentityKey(rows) {
-  return JSON.stringify(rows.map((row) => ({ domain: row.domain, aliases: normalizeCompetitorAliases(row.aliases) })).sort((left, right) => left.domain.localeCompare(right.domain)));
-}
 function runRecordingContext(db, input) {
-  const resolveCompetitors = createRunCompetitorResolver(db, input.competitors);
+  const identity = answerIdentityFrom(input.project, input.competitors, input.marketNames);
+  const resolveCompetitors = createRunCompetitorResolver(db, identity.competitors, identity.marketNames);
   return {
     runId: input.runId,
-    allDomains: effectiveDomains({ canonicalDomain: input.project.canonicalDomain, ownedDomains: input.project.ownedDomains }),
+    identity: identity.fingerprint,
+    allDomains: identity.projectDomains,
     competitorsFor: (executionId) => resolveCompetitors(input.measurementPlanVersionId, executionId),
-    allBrandNames: effectiveBrandNames({ displayName: input.project.displayName, aliases: input.project.aliases }),
-    competitorIdentity: competitorIdentityKey(input.competitors)
+    allBrandNames: identity.projectBrandNames
   };
 }
 function resolvePlanExecution(run, projectQueries) {
@@ -8574,13 +8740,14 @@ var JobRunner = class {
         throw new Error("No providers configured. Add at least one provider API key.");
       }
       log2.info("run.dispatch", { runId, providerCount: activeProviders.length, providers: activeProviders.map((p) => p.adapter.name) });
-      const projectCompetitors = this.db.select().from(competitors).where(eq3(competitors.projectId, projectId)).all();
+      const projectCompetitors = this.db.select().from(competitors).where(eq3(competitors.projectId, projectId)).orderBy(competitors.domain).all();
       const competitorDomains = projectCompetitors.map((c) => c.domain);
       recording = runRecordingContext(this.db, {
         runId,
         measurementPlanVersionId: existingRun.measurementPlanVersionId,
         project,
-        competitors: projectCompetitors
+        competitors: projectCompetitors,
+        marketNames: readMarketCompetitorNames(this.db, projectId)
       });
       const { allDomains, allBrandNames } = recording;
       const { aliases: competitorAliases } = recording.competitorsFor(null);
@@ -8808,14 +8975,17 @@ var JobRunner = class {
             requestedModel: config.model ?? null
           })),
           // Freeze the exact identity we actually dispatched with (domain label
-          // plus curated aliases) so later reporting never borrows renamed or
-          // newly added competitors, or later alias edits, from live project
-          // state. A competitor with no curated alias freezes exactly as it did
-          // before aliases existed, so its definition checksum is unchanged.
+          // plus curated and auto-detected aliases, minus blocked names) so
+          // later reporting never borrows renamed or newly added competitors,
+          // or later alias edits or detections, from live project state. A
+          // competitor with no alias of either kind freezes exactly as it did
+          // before aliases existed, so its definition checksum is unchanged;
+          // an auto-detected name moves the checksum only for runs dispatched
+          // after it was applied.
           competitors: projectCompetitors.map((competitor) => {
             const label = competitorLabelFromDomain(competitor.domain);
-            const curated = normalizeCompetitorAliases(competitor.aliases).filter((alias) => alias.toLowerCase() !== label.toLowerCase());
-            return { domain: competitor.domain, label, aliases: [label, ...curated] };
+            const named = competitorIdentityAliases(competitor).filter((alias) => alias.toLowerCase() !== label.toLowerCase());
+            return { domain: competitor.domain, label, aliases: [label, ...named] };
           }),
           queries: projectQueries.map((query) => ({
             queryId: query.id,
@@ -8876,7 +9046,7 @@ var JobRunner = class {
         }
       }
       providerCallEnd = Date.now();
-      this.reconcileRunCompetitorFields(recording, projectId);
+      this.reconcileRunAnswerFields(recording, projectId);
       this.throwIfRunCancelled(runId);
       if (planExecution) {
         for (const [provider, units] of planExecution.unitsByProvider) {
@@ -8914,7 +9084,7 @@ var JobRunner = class {
       });
       if (!finalized && this.isRunCancelled(runId)) throw new RunCancelledError(runId);
     } catch (err) {
-      if (recording) this.reconcileRunCompetitorFields(recording, projectId);
+      if (recording) this.reconcileRunAnswerFields(recording, projectId);
       const executionContext = {
         providerCount: activeProviders.length,
         providers: activeProviders.map((provider) => provider.adapter.name),
@@ -9556,7 +9726,7 @@ var JobRunner = class {
       this.markBatchesCancelled([batch.id], "Cancelled because its run is no longer running.");
       return { kind: "cancelled" };
     } finally {
-      this.reconcileRunCompetitorFields(ctx, batch.projectId);
+      this.reconcileRunAnswerFields(ctx, batch.projectId);
     }
     return this.completeBatchIngest(batch);
   }
@@ -9847,7 +10017,7 @@ var JobRunner = class {
       fatal = describeError(err);
       log2.error("fill.failed", { fillId, runId, error: fatal });
     } finally {
-      if (recording) this.reconcileRunCompetitorFields(recording, projectId);
+      if (recording) this.reconcileRunAnswerFields(recording, projectId);
       this.flushProviderUsage(providerDispatchCounts, providerReservations);
     }
     const outcome = this.finalizeRunFill({ fillId, runId, filled, fatal, providerErrors, superseded });
@@ -10097,34 +10267,38 @@ var JobRunner = class {
     if (!run) throw new Error(`Run ${runId} not found`);
     const project = this.db.select().from(projects).where(eq3(projects.id, projectId)).get();
     if (!project) throw new Error(`Project ${projectId} not found`);
-    const projectCompetitors = this.db.select().from(competitors).where(eq3(competitors.projectId, projectId)).all();
+    const projectCompetitors = this.db.select().from(competitors).where(eq3(competitors.projectId, projectId)).orderBy(competitors.domain).all();
     return runRecordingContext(this.db, {
       runId,
       measurementPlanVersionId: run.measurementPlanVersionId,
       project,
-      competitors: projectCompetitors
+      competitors: projectCompetitors,
+      marketNames: readMarketCompetitorNames(this.db, projectId)
     });
   }
   /**
-   * Rescore a run's stored competitor columns when the project's competitors
-   * changed after `recording` read them.
+   * Rescore a run's stored answer fields when the identity they are scored
+   * against changed after `recording` read it (`answerIdentityChanged`).
    *
-   * Saving a competitor alias rescores the stored answers once
-   * (`onCompetitorAliasesChanged`). A writer that read the names before the
-   * edit keeps scoring with them, so an answer it stores afterwards would
-   * disagree with an identical one the edit rescored. Each writer calls this
-   * after its last write: when its names are no longer current, the whole run
-   * gets the same competitor-only pass the edit ran. A failure is logged and
-   * never fails the writer.
+   * Saving a competitor alias, a detection pass that changes a competitor's
+   * auto-detected names, or a project alias edit rescores the stored answers
+   * once (`onCompetitorAliasesChanged`, `onAliasesChanged`). A writer that read
+   * the identity before the edit keeps scoring with it, so an answer it stores
+   * afterwards would disagree with an identical one the edit rescored. Each
+   * writer calls this after its last write: when its identity is no longer
+   * current, the whole run gets the pass the edit ran, the competitor fields
+   * only, or `answer_mentioned` too when the project's own identity moved. A
+   * failure is logged and never fails the writer.
    */
-  reconcileRunCompetitorFields(recording, projectId) {
+  reconcileRunAnswerFields(recording, projectId) {
     try {
-      const current = this.db.select({ domain: competitors.domain, aliases: competitors.aliases }).from(competitors).where(eq3(competitors.projectId, projectId)).all();
-      if (competitorIdentityKey(current) === recording.competitorIdentity) return;
-      const result2 = backfillProjectAnswerMentions(this.db, projectId, { competitorFieldsOnly: true, runId: recording.runId });
-      log2.info("run.competitor-fields-rescored", { runId: recording.runId, projectId, ...result2 });
+      const current = readAnswerIdentity(this.db, projectId);
+      if (!current || !answerIdentityChanged(recording.identity, current.fingerprint)) return;
+      const full = recording.identity.project !== current.fingerprint.project;
+      const result2 = backfillProjectAnswerMentions(this.db, projectId, { competitorFieldsOnly: !full, runId: recording.runId });
+      log2.info("run.answer-fields-rescored", { runId: recording.runId, projectId, full, ...result2 });
     } catch (err) {
-      log2.error("run.competitor-fields-rescore-failed", { runId: recording.runId, projectId, error: describeError(err) });
+      log2.error("run.answer-fields-rescore-failed", { runId: recording.runId, projectId, error: describeError(err) });
     }
   }
   incrementUsage(scope, metric, count3) {
@@ -11142,11 +11316,11 @@ function validateGeoSearchLimit(limit) {
     );
   }
 }
-function isRecord3(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function validateRequestObject(value, label) {
-  if (!isRecord3(value)) {
+  if (!isRecord6(value)) {
     throw new OpenAiAdsApiError(`${label} must be a JSON object`, 400);
   }
 }
@@ -11305,7 +11479,7 @@ function validateLandingPageConfiguration(value, label) {
   }
 }
 function parseLandingPageQueryStringTemplate(value) {
-  if (!isRecord3(value)) return null;
+  if (!isRecord6(value)) return null;
   const template = value.query_string_template;
   return typeof template === "string" && template.trim().length > 0 ? template : null;
 }
@@ -12899,7 +13073,7 @@ async function executeDiscoveryRun(opts) {
   try {
     const projectRow = opts.db.select().from(projects).where(eq14(projects.id, opts.projectId)).get();
     if (!projectRow) throw new Error(`Project ${opts.projectId} not found`);
-    const projectCompetitors = opts.db.select({ domain: competitors.domain }).from(competitors).where(eq14(competitors.projectId, opts.projectId)).all().map((r) => r.domain.toLowerCase());
+    const projectCompetitors = opts.db.select({ domain: competitors.domain }).from(competitors).where(eq14(competitors.projectId, opts.projectId)).orderBy(competitors.domain).all().map((r) => r.domain.toLowerCase());
     const canonicalDomains = effectiveDomains({
       canonicalDomain: projectRow.canonicalDomain,
       ownedDomains: projectRow.ownedDomains
@@ -14242,6 +14416,115 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
   }
 }
 
+// src/answer-field-recompute.ts
+import { setImmediate as yieldToEventLoop2 } from "timers/promises";
+function createAnswerFieldRecomputeQueue(opts) {
+  const pendingFull = /* @__PURE__ */ new Map();
+  const queue = createProjectPassQueue(async (projectId) => {
+    const full = pendingFull.get(projectId) ?? false;
+    pendingFull.delete(projectId);
+    await yieldToEventLoop2();
+    const result2 = await backfillProjectAnswerMentionsInChunks(opts.db, projectId, { competitorFieldsOnly: !full });
+    return { full, result: result2 };
+  });
+  return {
+    request(projectId, scope) {
+      pendingFull.set(projectId, (pendingFull.get(projectId) ?? false) || scope.full === true);
+      return queue.request(projectId);
+    },
+    settled: () => queue.settled()
+  };
+}
+
+// src/competitor-auto-alias-runner.ts
+import { setImmediate as yieldToEventLoop3 } from "timers/promises";
+var log15 = createLogger("CompetitorAutoAliases");
+function createCompetitorAutoAliasRunner(opts) {
+  const reasons = /* @__PURE__ */ new Map();
+  const queue = createProjectPassQueue(async (projectId) => {
+    await yieldToEventLoop3();
+    const reason = (reasons.get(projectId) ?? []).join(",");
+    reasons.delete(projectId);
+    const result2 = await applyCompetitorAutoAliases(opts.db, projectId, { readAnchors: opts.readAnchors });
+    if (!result2) return null;
+    const added = result2.detection.competitors.reduce((sum, competitor) => sum + competitor.added.length, 0);
+    const removed = result2.detection.competitors.reduce((sum, competitor) => sum + competitor.removed.length, 0);
+    log15.info("detection.completed", {
+      projectId,
+      reason,
+      runs: result2.detection.scan.runs,
+      snapshots: result2.detection.scan.snapshots,
+      added,
+      removed,
+      namesChanged: result2.namesChanged
+    });
+    if (result2.namesChanged) {
+      try {
+        opts.onNamesChanged(projectId, result2.detection.project);
+      } catch (err) {
+        log15.error("names-changed.failed", { projectId, error: describeError(err) });
+      }
+    }
+    return result2;
+  });
+  const enqueue = (projectId, reason) => {
+    reasons.set(projectId, [...reasons.get(projectId) ?? [], reason]);
+    return queue.request(projectId);
+  };
+  return {
+    schedule(projectId, reason) {
+      enqueue(projectId, reason).catch((err) => {
+        log15.error("detection.failed", { projectId, reason, error: describeError(err) });
+      });
+    },
+    async request(projectId, reason) {
+      try {
+        return await enqueue(projectId, reason);
+      } catch (err) {
+        log15.error("detection.failed", { projectId, reason, error: describeError(err) });
+        throw err;
+      }
+    },
+    settled: () => queue.settled()
+  };
+}
+
+// src/stored-answer-anchors.ts
+function resolveStoredApiResponse(parsed) {
+  const nested = parsed.apiResponse;
+  if (nested !== null && typeof nested === "object" && !Array.isArray(nested)) {
+    return nested;
+  }
+  if (looksLikeProviderApiResponse(parsed)) {
+    return parsed;
+  }
+  return null;
+}
+function looksLikeProviderApiResponse(value) {
+  return Array.isArray(value.output) || Array.isArray(value.content) || Array.isArray(value.candidates) || Array.isArray(value.choices);
+}
+function extractStoredAnswerAnchors(provider, rawResponse) {
+  if (!rawResponse) return [];
+  const apiResponse = resolveStoredApiResponse(parseJsonColumn(rawResponse, {}));
+  if (!apiResponse) return [];
+  try {
+    switch (provider) {
+      case ProviderNames.openai:
+        return extractAnchoredSpans2(apiResponse);
+      case ProviderNames.claude:
+        return extractAnchoredSpans3(apiResponse);
+      case ProviderNames.gemini:
+        return extractAnchoredSpans(apiResponse);
+      case ProviderNames.perplexity:
+        return extractAnchoredSpans4(apiResponse);
+      default:
+        return [];
+    }
+  } catch {
+    return [];
+  }
+}
+
 // src/provider-registry.ts
 var ProviderRegistry = class {
   providers = /* @__PURE__ */ new Map();
@@ -14358,7 +14641,7 @@ function createProviderModelCatalog(registry) {
 import crypto21 from "crypto";
 import cron from "node-cron";
 import { and as and15, eq as eq17, inArray as inArray7, notExists, sql as sql7 } from "drizzle-orm";
-var log15 = createLogger("Scheduler");
+var log16 = createLogger("Scheduler");
 var DEFAULT_HEALTH_CRON = "0 */6 * * *";
 function ensureDefaultHealthSchedule(db, projectId, now = (/* @__PURE__ */ new Date()).toISOString()) {
   const result2 = db.insert(schedules).values({
@@ -14420,7 +14703,7 @@ var Scheduler = class {
       if (ensureDefaultHealthSchedule(this.db, project.id, now)) seeded += 1;
     }
     if (seeded > 0) {
-      log15.info("health-schedule.seeded", { projectCount: seeded, cron: DEFAULT_HEALTH_CRON });
+      log16.info("health-schedule.seeded", { projectCount: seeded, cron: DEFAULT_HEALTH_CRON });
     }
   }
   /**
@@ -14444,10 +14727,10 @@ var Scheduler = class {
         const current = ensureCurrentQueryBasketRevision(this.db, project.id);
         if (current !== null && current.revision !== previous) minted += 1;
       } catch (err) {
-        log15.warn("query-basket.mint-failed", { projectId: project.id, err: String(err) });
+        log16.warn("query-basket.mint-failed", { projectId: project.id, err: String(err) });
       }
     }
-    if (minted > 0) log15.info("query-basket.ensured", { projectCount: minted });
+    if (minted > 0) log16.info("query-basket.ensured", { projectCount: minted });
   }
   /** Load all enabled schedules from DB and register cron jobs. */
   start() {
@@ -14461,12 +14744,12 @@ var Scheduler = class {
       if (registered && missedRunAt && new Date(missedRunAt) < /* @__PURE__ */ new Date()) {
         const answerRecurrence = recurrence && schedule.kind === SchedulableRunKinds["answer-visibility"];
         if (!recurrence || answerRecurrence || this.claimCalendarOccurrence(schedule, missedRunAt, /* @__PURE__ */ new Date())) {
-          log15.info("run.catch-up", { projectId: schedule.projectId, kind: schedule.kind, missedRunAt });
+          log16.info("run.catch-up", { projectId: schedule.projectId, kind: schedule.kind, missedRunAt });
           this.triggerRun(schedule.id, schedule.projectId, schedule.kind, answerRecurrence ? missedRunAt : void 0);
         }
       }
     }
-    log15.info("started", { scheduleCount: allSchedules.length });
+    log16.info("started", { scheduleCount: allSchedules.length });
   }
   /** Stop all cron tasks for graceful shutdown. */
   stop() {
@@ -14510,7 +14793,7 @@ var Scheduler = class {
   stopTask(key, task, verb) {
     void task.stop();
     void task.destroy();
-    log15.info(`task.${verb.toLowerCase()}`, { key });
+    log16.info(`task.${verb.toLowerCase()}`, { key });
   }
   /** Runtime timing writes must not restore a version already issued to a settings caller. */
   updateScheduleTiming(scheduleId, timing) {
@@ -14530,13 +14813,13 @@ var Scheduler = class {
       return true;
     }
     if (schedule.recurrence) {
-      log15.error("calendar.invalid", { projectId: schedule.projectId, kind: schedule.kind });
+      log16.error("calendar.invalid", { projectId: schedule.projectId, kind: schedule.kind });
       return false;
     }
     const { id: scheduleId, projectId, cronExpr, timezone } = schedule;
     const kind = schedule.kind;
     if (!cron.validate(cronExpr)) {
-      log15.error("cron.invalid", { projectId, kind, cronExpr });
+      log16.error("cron.invalid", { projectId, kind, cronExpr });
       return false;
     }
     const task = cron.schedule(cronExpr, () => {
@@ -14551,7 +14834,7 @@ var Scheduler = class {
       });
     }
     const label = schedule.preset ?? cronExpr;
-    log15.info("cron.registered", { projectId, kind, schedule: label, timezone });
+    log16.info("cron.registered", { projectId, kind, schedule: label, timezone });
     return true;
   }
   /** Calendar schedules are checked at most once a minute so long intervals
@@ -14609,7 +14892,7 @@ var Scheduler = class {
     }
     if (options.preserveNextRunAt) arm(registeredNextRunAt);
     else timer = setTimeout(tick, 0);
-    log15.info("calendar.registered", { projectId, kind, recurrence, timezone });
+    log16.info("calendar.registered", { projectId, kind, recurrence, timezone });
   }
   /** Atomically advance a due callback-only calendar occurrence before dispatch. */
   claimCalendarOccurrence(schedule, dueAt, now) {
@@ -14637,13 +14920,13 @@ var Scheduler = class {
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const currentSchedule = this.db.select().from(schedules).where(eq17(schedules.id, scheduleId)).get();
       if (!currentSchedule || !currentSchedule.enabled) {
-        log15.warn("schedule.stale", { scheduleId, projectId, kind, msg: "schedule no longer exists or is disabled" });
+        log16.warn("schedule.stale", { scheduleId, projectId, kind, msg: "schedule no longer exists or is disabled" });
         this.remove(projectId, kind);
         return;
       }
       const recurrence = scheduleRecurrence(currentSchedule);
       if (claimedOccurrence && (!recurrence || currentSchedule.nextRunAt !== claimedOccurrence)) {
-        log15.info("calendar.stale-claim", { projectId, scheduleId, kind });
+        log16.info("calendar.stale-claim", { projectId, scheduleId, kind });
         return;
       }
       const nextRunAt = nextRunFromSchedule({
@@ -14653,31 +14936,31 @@ var Scheduler = class {
       });
       const project = this.db.select().from(projects).where(eq17(projects.id, projectId)).get();
       if (!project) {
-        log15.error("project.not-found", { projectId, kind, msg: "skipping scheduled run" });
+        log16.error("project.not-found", { projectId, kind, msg: "skipping scheduled run" });
         this.remove(projectId, kind);
         return;
       }
       if (kind === SchedulableRunKinds["traffic-sync"]) {
         const sourceId = currentSchedule.sourceId;
         if (!sourceId) {
-          log15.warn("traffic-sync.missing-source", { scheduleId, projectId });
+          log16.warn("traffic-sync.missing-source", { scheduleId, projectId });
           return;
         }
         if (!this.callbacks.onTrafficSyncRequested) {
-          log15.warn("traffic-sync.no-callback", { scheduleId, projectId, msg: "host did not register onTrafficSyncRequested" });
+          log16.warn("traffic-sync.no-callback", { scheduleId, projectId, msg: "host did not register onTrafficSyncRequested" });
           return;
         }
         this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("traffic-sync.triggered", { projectName: project.name, sourceId });
+        log16.info("traffic-sync.triggered", { projectName: project.name, sourceId });
         this.callbacks.onTrafficSyncRequested(project.name, sourceId);
         return;
       }
       if (kind === SchedulableRunKinds["gbp-sync"]) {
         if (!this.callbacks.onGbpSyncRequested) {
-          log15.warn("gbp-sync.no-callback", { scheduleId, projectId, msg: "host did not register onGbpSyncRequested" });
+          log16.warn("gbp-sync.no-callback", { scheduleId, projectId, msg: "host did not register onGbpSyncRequested" });
           return;
         }
         const runId2 = crypto21.randomUUID();
@@ -14693,13 +14976,13 @@ var Scheduler = class {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("gbp-sync.triggered", { runId: runId2, projectName: project.name });
+        log16.info("gbp-sync.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onGbpSyncRequested(runId2, projectId);
         return;
       }
       if (kind === SchedulableRunKinds["ads-sync"]) {
         if (!this.callbacks.onAdsSyncRequested) {
-          log15.warn("ads-sync.no-callback", { scheduleId, projectId, msg: "host did not register onAdsSyncRequested" });
+          log16.warn("ads-sync.no-callback", { scheduleId, projectId, msg: "host did not register onAdsSyncRequested" });
           return;
         }
         const activeAdsRun = this.db.select({ id: runs.id }).from(runs).where(and15(
@@ -14708,7 +14991,7 @@ var Scheduler = class {
           inArray7(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (activeAdsRun) {
-          log15.info("ads-sync.skipped-active", { projectName: project.name, activeRunId: activeAdsRun.id });
+          log16.info("ads-sync.skipped-active", { projectName: project.name, activeRunId: activeAdsRun.id });
           this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
@@ -14725,52 +15008,52 @@ var Scheduler = class {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("ads-sync.triggered", { runId: runId2, projectName: project.name });
+        log16.info("ads-sync.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onAdsSyncRequested(runId2, projectId);
         return;
       }
       if (kind === SchedulableRunKinds["data-refresh"]) {
         if (!this.callbacks.onDataRefreshRequested) {
-          log15.warn("data-refresh.no-callback", { scheduleId, projectId, msg: "host did not register onDataRefreshRequested" });
+          log16.warn("data-refresh.no-callback", { scheduleId, projectId, msg: "host did not register onDataRefreshRequested" });
           return;
         }
         this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("data-refresh.triggered", { projectName: project.name });
+        log16.info("data-refresh.triggered", { projectName: project.name });
         this.callbacks.onDataRefreshRequested(project.name);
         return;
       }
       if (kind === SchedulableRunKinds.doctor) {
         if (!this.callbacks.onDoctorRequested) {
-          log15.warn("doctor.no-callback", { scheduleId, projectId, msg: "host did not register onDoctorRequested" });
+          log16.warn("doctor.no-callback", { scheduleId, projectId, msg: "host did not register onDoctorRequested" });
           return;
         }
         this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("doctor.triggered", { projectName: project.name });
+        log16.info("doctor.triggered", { projectName: project.name });
         this.callbacks.onDoctorRequested(project.name);
         return;
       }
       if (kind === SchedulableRunKinds["backlinks-sync"]) {
         if (!this.callbacks.onBacklinksSyncRequested) {
-          log15.warn("backlinks-sync.no-callback", { scheduleId, projectId, msg: "host did not register onBacklinksSyncRequested" });
+          log16.warn("backlinks-sync.no-callback", { scheduleId, projectId, msg: "host did not register onBacklinksSyncRequested" });
           return;
         }
         this.updateScheduleTiming(currentSchedule.id, {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("backlinks-sync.triggered", { projectName: project.name });
+        log16.info("backlinks-sync.triggered", { projectName: project.name });
         this.callbacks.onBacklinksSyncRequested(project.name);
         return;
       }
       if (kind === SchedulableRunKinds["site-audit"]) {
         if (!this.callbacks.onSiteAuditRequested) {
-          log15.warn("site-audit.no-callback", { scheduleId, projectId, msg: "host did not register onSiteAuditRequested" });
+          log16.warn("site-audit.no-callback", { scheduleId, projectId, msg: "host did not register onSiteAuditRequested" });
           return;
         }
         const active = this.db.select({ id: runs.id }).from(runs).where(and15(
@@ -14779,7 +15062,7 @@ var Scheduler = class {
           inArray7(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (active) {
-          log15.info("site-audit.skipped-active", { projectName: project.name, activeRunId: active.id });
+          log16.info("site-audit.skipped-active", { projectName: project.name, activeRunId: active.id });
           this.updateScheduleTiming(currentSchedule.id, { nextRunAt });
           return;
         }
@@ -14806,7 +15089,7 @@ var Scheduler = class {
           lastRunAt: now,
           nextRunAt
         });
-        log15.info("site-audit.triggered", { runId: runId2, projectName: project.name });
+        log16.info("site-audit.triggered", { runId: runId2, projectName: project.name });
         this.callbacks.onSiteAuditRequested(runId2, projectId, { maxPages: effectiveRequest.maxPages });
         return;
       }
@@ -14815,7 +15098,7 @@ var Scheduler = class {
       if (project.defaultLocation) {
         const loc = projectLocations.find((l) => l.label === project.defaultLocation);
         if (!loc) {
-          log15.warn("default-location.stale", { scheduleId, projectId, label: project.defaultLocation });
+          log16.warn("default-location.stale", { scheduleId, projectId, label: project.defaultLocation });
           return;
         }
         resolvedLocation = loc;
@@ -14824,7 +15107,7 @@ var Scheduler = class {
       const scheduleProviders = currentSchedule.providers;
       const providers = scheduleProviders.length > 0 ? scheduleProviders : void 0;
       if (claimedOccurrence && recurrence && !nextRunAt) {
-        log15.error("calendar.invalid", { projectId, kind, scheduleId });
+        log16.error("calendar.invalid", { projectId, kind, scheduleId });
         return;
       }
       const queueResult = queueRunIfProjectIdle(this.db, {
@@ -14848,11 +15131,11 @@ var Scheduler = class {
       });
       if (queueResult.conflict) {
         if (queueResult.scheduleClaimed === false) {
-          log15.info("calendar.skipped-claimed", { projectName: project.name, scheduleId: currentSchedule.id });
+          log16.info("calendar.skipped-claimed", { projectName: project.name, scheduleId: currentSchedule.id });
           return;
         }
         const batchPending = hasOutstandingProviderBatch(this.db, queueResult.activeRunId);
-        log15.info("run.skipped-active", {
+        log16.info("run.skipped-active", {
           projectName: project.name,
           activeRunId: queueResult.activeRunId,
           ...batchPending ? { reason: "batch-pending" } : {}
@@ -14861,7 +15144,7 @@ var Scheduler = class {
         return;
       }
       if (queueResult.refused) {
-        log15.warn("run.skipped-providers-failing", {
+        log16.warn("run.skipped-providers-failing", {
           projectName: project.name,
           scheduleId: currentSchedule.id,
           ...queueResult.refused
@@ -14872,7 +15155,7 @@ var Scheduler = class {
       const runId = queueResult.runId;
       for (const [provider, reason] of Object.entries(queueResult.dispatch.ineligible)) {
         if (!reason) continue;
-        log15.warn("run.dispatch-sync-fallback", {
+        log16.warn("run.dispatch-sync-fallback", {
           runId,
           projectName: project.name,
           provider,
@@ -14886,16 +15169,16 @@ var Scheduler = class {
         lastRunAt: now,
         nextRunAt
       });
-      log15.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
+      log16.info("run.triggered", { runId, projectName: project.name, providers: providers ?? "all" });
       this.callbacks.onRunCreated(runId, projectId, providers, resolvedLocation);
     } catch (err) {
-      log15.error("trigger.error", { scheduleId, projectId, kind, error: describeError(err) });
+      log16.error("trigger.error", { scheduleId, projectId, kind, error: describeError(err) });
     }
   }
 };
 
 // src/site-liveness-loop.ts
-var log16 = createLogger("SiteLiveness");
+var log17 = createLogger("SiteLiveness");
 var SITE_LIVENESS_INTERVAL_MS = 10 * 6e4;
 async function runSiteLivenessPass(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
@@ -14910,10 +15193,10 @@ async function runSiteLivenessPass(deps) {
       const event = await deps.notify(project.id, { check, checkedAt: now() });
       if (event) {
         events += 1;
-        log16.info("site-liveness.notified", { projectName: project.name, event, code: check.code });
+        log17.info("site-liveness.notified", { projectName: project.name, event, code: check.code });
       }
     } catch (err) {
-      log16.warn("site-liveness.project-failed", { projectName: project.name, err: String(err) });
+      log17.warn("site-liveness.project-failed", { projectName: project.name, err: String(err) });
     }
   }
   return { checked, events };
@@ -14922,11 +15205,11 @@ function startSiteLivenessLoop(deps, intervalMs = SITE_LIVENESS_INTERVAL_MS) {
   let running = false;
   const timer = setInterval(() => {
     if (running) {
-      log16.warn("site-liveness.pass-still-running", { intervalMs });
+      log17.warn("site-liveness.pass-still-running", { intervalMs });
       return;
     }
     running = true;
-    void runSiteLivenessPass(deps).catch((err) => log16.warn("site-liveness.pass-failed", { err: String(err) })).finally(() => {
+    void runSiteLivenessPass(deps).catch((err) => log17.warn("site-liveness.pass-failed", { err: String(err) })).finally(() => {
       running = false;
     });
   }, intervalMs);
@@ -14936,7 +15219,7 @@ function startSiteLivenessLoop(deps, intervalMs = SITE_LIVENESS_INTERVAL_MS) {
 
 // src/provider-batch-poller.ts
 import { and as and16, eq as eq18, inArray as inArray8, isNotNull as isNotNull2, isNull as isNull2, notExists as notExists2, sql as sql8 } from "drizzle-orm";
-var log17 = createLogger("ProviderBatchPoller");
+var log18 = createLogger("ProviderBatchPoller");
 var PROVIDER_BATCH_POLL_INITIAL_MS = 3e4;
 var PROVIDER_BATCH_POLL_MAX_MS = 10 * 6e4;
 var PROVIDER_BATCH_CANCEL_GRACE_MS = 60 * 6e4;
@@ -14960,7 +15243,7 @@ var ProviderBatchPoller = class {
       try {
         if (await this.advance(row)) settledRuns.set(row.runId, row.projectId);
       } catch (err) {
-        log17.warn("batch.advance-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
+        log18.warn("batch.advance-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
         this.reschedule(row.id, null);
       }
     }
@@ -14969,7 +15252,7 @@ var ProviderBatchPoller = class {
       try {
         this.deps.runner.finalizeBatchRun(runId, projectId);
       } catch (err) {
-        log17.warn("batch.finalize-failed", { runId, error: describeError(err) });
+        log18.warn("batch.finalize-failed", { runId, error: describeError(err) });
       }
     }
   }
@@ -15000,10 +15283,10 @@ var ProviderBatchPoller = class {
           return ended ? this.ingest({ ...row, status: ProviderBatchStatuses.ended, resultsExpireAt: poll.resultsExpireAt ?? null }) : false;
         }
       } catch (err) {
-        log17.warn("batch.poll-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
+        log18.warn("batch.poll-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
       }
     } else {
-      log17.warn("batch.poll-unavailable", { batchId: row.id, runId: row.runId, provider: row.provider });
+      log18.warn("batch.poll-unavailable", { batchId: row.id, runId: row.runId, provider: row.provider });
     }
     this.reschedule(row.id, status);
     return this.enforceDeadline(row, registered);
@@ -15025,12 +15308,12 @@ var ProviderBatchPoller = class {
         isNull2(providerBatches.cancelRequestedAt)
       )).run().changes === 1;
       if (!claimed) return false;
-      log17.warn("batch.deadline-passed", { batchId: row.id, runId: row.runId, provider: row.provider, deadlineAt: row.deadlineAt });
+      log18.warn("batch.deadline-passed", { batchId: row.id, runId: row.runId, provider: row.provider, deadlineAt: row.deadlineAt });
       if (registered?.adapter.batch && row.providerBatchId) {
         try {
           await registered.adapter.batch.cancel(row.providerBatchId, registered.config);
         } catch (err) {
-          log17.warn("batch.cancel-failed", { batchId: row.id, provider: row.provider, error: describeError(err) });
+          log18.warn("batch.cancel-failed", { batchId: row.id, provider: row.provider, error: describeError(err) });
         }
       }
       return false;
@@ -15042,7 +15325,7 @@ var ProviderBatchPoller = class {
       updatedAt: at
     }).where(and16(eq18(providerBatches.id, row.id), eq18(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
     this.schedule.delete(row.id);
-    if (gaveUp) log17.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
+    if (gaveUp) log18.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
     return gaveUp;
   }
   async ingest(row) {
@@ -15051,7 +15334,7 @@ var ProviderBatchPoller = class {
       return result2.kind !== "skipped";
     } catch (err) {
       const error = describeError(err);
-      log17.warn("batch.ingest-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error });
+      log18.warn("batch.ingest-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error });
       const now = this.now();
       const unreadable = row.resultsExpireAt !== null && now >= Date.parse(row.resultsExpireAt);
       if (unreadable || now >= Date.parse(row.deadlineAt) + PROVIDER_BATCH_CANCEL_GRACE_MS) {
@@ -15093,7 +15376,7 @@ function startProviderBatchPoller(deps, intervalMs = PROVIDER_BATCH_TICK_MS) {
   const timer = setInterval(() => {
     if (running) return;
     running = true;
-    void poller.tick().catch((err) => log17.warn("batch.pass-failed", { error: describeError(err) })).finally(() => {
+    void poller.tick().catch((err) => log18.warn("batch.pass-failed", { error: describeError(err) })).finally(() => {
       running = false;
     });
   }, intervalMs);
@@ -15102,7 +15385,7 @@ function startProviderBatchPoller(deps, intervalMs = PROVIDER_BATCH_TICK_MS) {
 }
 
 // src/data-refresh.ts
-var log18 = createLogger("DataRefresh");
+var log19 = createLogger("DataRefresh");
 function gaRefreshDays(now = /* @__PURE__ */ new Date()) {
   const [reportMonth] = reportMonthsForDoctor(void 0, now);
   const reach = inclusiveDayCount(`${reportMonth}-01`, now.toISOString().slice(0, 10)) ?? 0;
@@ -15124,11 +15407,11 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
   results.forEach((result2, idx) => {
     const integration = integrations[idx].name;
     if (result2.status === "fulfilled") {
-      log18.info("integration.refreshed", { projectName, integration });
+      log19.info("integration.refreshed", { projectName, integration });
     } else {
       const reason = result2.reason;
       const message = describeError(reason);
-      log18.warn("integration.refresh-failed", { projectName, integration, error: message });
+      log19.warn("integration.refresh-failed", { projectName, integration, error: message });
     }
   });
 }
@@ -15136,7 +15419,7 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 // src/notifier.ts
 import { eq as eq19, desc as desc8, and as and17, inArray as inArray9, or } from "drizzle-orm";
 import crypto22 from "crypto";
-var log19 = createLogger("Notifier");
+var log20 = createLogger("Notifier");
 var MATERIAL_MAGNITUDE_DELTA = 20;
 var SEVERITY_RANK = { low: 0, medium: 1, high: 2, critical: 3 };
 function severityRank(severity) {
@@ -15166,26 +15449,26 @@ var Notifier = class {
   }
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId, opts) {
-    log19.info("run.completed", { runId, projectId, origin: opts?.origin ?? "sweep" });
+    log20.info("run.completed", { runId, projectId, origin: opts?.origin ?? "sweep" });
     const notifs = this.db.select().from(notifications).where(eq19(notifications.projectId, projectId)).all().filter((n) => n.enabled);
     if (notifs.length === 0) {
-      log19.info("notifications.none-enabled", { projectId });
+      log20.info("notifications.none-enabled", { projectId });
       return;
     }
-    log19.info("notifications.found", { projectId, count: notifs.length });
+    log20.info("notifications.found", { projectId, count: notifs.length });
     const run = this.db.select().from(runs).where(eq19(runs.id, runId)).get();
     if (!run) {
-      log19.error("run.not-found", { runId, msg: "skipping notification dispatch" });
+      log20.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
     const project = this.db.select().from(projects).where(eq19(projects.id, projectId)).get();
     if (!project) {
-      log19.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
+      log20.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
     }
     const transitions = this.computeTransitions(runId, projectId);
     const events = [];
-    log19.info("run.status", { runId: run.id, status: run.status, projectId });
+    log20.info("run.status", { runId: run.id, status: run.status, projectId });
     if ((run.status === "completed" || run.status === "partial") && opts?.origin !== "fill") {
       events.push("run.completed");
     }
@@ -15201,7 +15484,7 @@ var Notifier = class {
       if (!config.url) continue;
       const subscribedEvents = config.events;
       const matchingEvents = events.filter((e) => subscribedEvents.includes(e));
-      log19.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
+      log20.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
       if (matchingEvents.length === 0) continue;
       for (const event of matchingEvents) {
         const relevantTransitions = event === "citation.lost" ? lostTransitions : event === "citation.gained" ? gainedTransitions : transitions;
@@ -15233,7 +15516,7 @@ var Notifier = class {
   async onHealthChecked(projectId, report) {
     const project = this.db.select().from(projects).where(eq19(projects.id, projectId)).get();
     if (!project) {
-      log19.error("project.not-found", { projectId, msg: "skipping health notification" });
+      log20.error("project.not-found", { projectId, msg: "skipping health notification" });
       return null;
     }
     const rank = (status2) => status2 === "fail" ? 2 : status2 === "warn" ? 1 : 0;
@@ -15285,7 +15568,7 @@ var Notifier = class {
       this.db.update(doctorHealthState).set(observation).where(eq19(doctorHealthState.projectId, projectId)).run();
     }
     if (!event) {
-      log19.info("health.unchanged", { projectId, status, code });
+      log20.info("health.unchanged", { projectId, status, code });
       return null;
     }
     const notifs = this.db.select().from(notifications).where(eq19(notifications.projectId, projectId)).all().filter((n) => n.enabled);
@@ -15313,7 +15596,7 @@ var Notifier = class {
     if (delivered > 0) {
       this.db.update(doctorHealthState).set({ notifiedAt: now }).where(eq19(doctorHealthState.projectId, projectId)).run();
     }
-    log19.info("health.notified", { projectId, event, status, code, subscribers: notifs.length, delivered });
+    log20.info("health.notified", { projectId, event, status, code, subscribers: notifs.length, delivered });
     return event;
   }
   /**
@@ -15334,7 +15617,7 @@ var Notifier = class {
     if (check.status !== "ok" && check.status !== "fail") return null;
     const project = this.db.select().from(projects).where(eq19(projects.id, projectId)).get();
     if (!project) {
-      log19.error("project.not-found", { projectId, msg: "skipping site liveness notification" });
+      log20.error("project.not-found", { projectId, msg: "skipping site liveness notification" });
       return null;
     }
     const previous = this.db.select().from(siteLivenessState).where(eq19(siteLivenessState.projectId, projectId)).get();
@@ -15388,7 +15671,7 @@ var Notifier = class {
     if (event === "health.degraded" && delivered > 0) {
       this.db.update(siteLivenessState).set({ notifiedAt: checkedAt }).where(eq19(siteLivenessState.projectId, projectId)).run();
     }
-    log19.info("site-liveness.notified", { projectId, event, code: check.code, subscribers: notifs.length, delivered });
+    log20.info("site-liveness.notified", { projectId, event, code: check.code, subscribers: notifs.length, delivered });
     return event;
   }
   /**
@@ -15625,7 +15908,7 @@ var Notifier = class {
         delivered += accepted;
       }
     }
-    log19.info("reviews.dispatched", {
+    log20.info("reviews.dispatched", {
       projectId,
       reviews: reviewsToSend.length,
       ratingDrops: ratingsToSend.length,
@@ -15638,7 +15921,7 @@ var Notifier = class {
     if (!thisRun) return [];
     const completeness = measurementRunCompleteness(this.db, runId);
     if (completeness.planned && !completeness.complete) {
-      log19.info("transitions.skipped-incomplete", {
+      log20.info("transitions.skipped-incomplete", {
         runId,
         executed: completeness.executed,
         expected: completeness.expected
@@ -15730,23 +16013,23 @@ var Notifier = class {
     const targetLabel = redactNotificationUrl(url).urlDisplay;
     const targetCheck = await resolveWebhookTarget(url);
     if (!targetCheck.ok) {
-      log19.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
+      log20.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
       this.logDelivery(projectId, notificationId, payload.event, "failed", `SSRF: ${targetCheck.message}`);
       return false;
     }
-    log19.info("webhook.send", { event: payload.event, url: targetLabel });
+    log20.info("webhook.send", { event: payload.event, url: targetLabel });
     const maxRetries = 3;
     const delays = [1e3, 4e3, 16e3];
     for (let attempt = 0; attempt < maxRetries; attempt++) {
       try {
         const response = await deliverWebhook(targetCheck.target, body, signingSecret);
         if (response.status >= 200 && response.status < 300) {
-          log19.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
+          log20.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
           this.logDelivery(projectId, notificationId, payload.event, "sent", null);
           return true;
         }
         const errorDetail = response.error ?? `HTTP ${response.status}`;
-        log19.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
+        log20.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
         if (attempt === maxRetries - 1) {
           this.logDelivery(projectId, notificationId, payload.event, "failed", errorDetail);
         }
@@ -15754,7 +16037,7 @@ var Notifier = class {
         const errorDetail = describeError(err);
         if (attempt === maxRetries - 1) {
           this.logDelivery(projectId, notificationId, payload.event, "failed", errorDetail);
-          log19.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
+          log20.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
         }
       }
       if (attempt < maxRetries - 1) {
@@ -15779,7 +16062,7 @@ var Notifier = class {
 
 // src/run-coordinator.ts
 import { eq as eq20 } from "drizzle-orm";
-var log20 = createLogger("RunCoordinator");
+var log21 = createLogger("RunCoordinator");
 var RunCoordinator = class {
   constructor(db, notifier, intelligenceService, onInsightsGenerated, onAeroEvent) {
     this.db = db;
@@ -15795,16 +16078,31 @@ var RunCoordinator = class {
   onAeroEvent;
   /** Host wakeup only; durable completion receipts remain the delivery authority. */
   onSentimentCompleted;
+  /**
+   * Host hook after a non-probe answer-visibility run finishes `completed` or
+   * `partial`: the run stored new answers, so answer-derived competitor
+   * aliases may have new evidence. The local server schedules a detection pass
+   * off the completion path (`createCompetitorAutoAliasRunner`). Failures are
+   * logged and never reach the other subscribers.
+   */
+  onAnswersRecorded;
   async onRunCompleted(runId, projectId, opts) {
     const runRow = this.db.select().from(runs).where(eq20(runs.id, runId)).get();
     const kind = runRow?.kind ?? RunKinds["answer-visibility"];
     if (runRow?.trigger === RunTriggers.probe) {
-      log20.info("probe.skip-side-effects", { runId, projectId, kind });
+      log21.info("probe.skip-side-effects", { runId, projectId, kind });
       return;
     }
+    if (kind === RunKinds["answer-visibility"] && (runRow?.status === RunStatuses.completed || runRow?.status === RunStatuses.partial) && this.onAnswersRecorded) {
+      try {
+        await this.onAnswersRecorded(runId, projectId);
+      } catch (err) {
+        log21.error("answers-recorded.failed", { runId, projectId, error: describeError(err) });
+      }
+    }
     const completeness = measurementRunCompleteness(this.db, runId);
     if (completeness.planned && !completeness.complete) {
-      log20.info("measurement.incomplete-skip-derived", {
+      log21.info("measurement.incomplete-skip-derived", {
         runId,
         projectId,
         executed: completeness.executed,
@@ -15813,7 +16111,7 @@ var RunCoordinator = class {
       try {
         await this.notifier.onRunCompleted(runId, projectId);
       } catch (err) {
-        log20.error("notifier.failed", { runId, error: describeError(err) });
+        log21.error("notifier.failed", { runId, error: describeError(err) });
       }
       return;
     }
@@ -15821,7 +16119,7 @@ var RunCoordinator = class {
       try {
         await this.onSentimentCompleted(runId, projectId);
       } catch {
-        log20.error("sentiment.wakeup-failed", { runId, projectId });
+        log21.error("sentiment.wakeup-failed", { runId, projectId });
       }
     }
     let insightCount = 0;
@@ -15838,12 +16136,12 @@ var RunCoordinator = class {
             try {
               await this.onInsightsGenerated(runId, projectId, result2);
             } catch (err) {
-              log20.error("insight-webhook.failed", { runId, error: describeError(err) });
+              log21.error("insight-webhook.failed", { runId, error: describeError(err) });
             }
           }
         }
       } catch (err) {
-        log20.error("intelligence.failed", { runId, error: describeError(err) });
+        log21.error("intelligence.failed", { runId, error: describeError(err) });
       }
     } else if (kind === RunKinds["gbp-sync"]) {
       try {
@@ -15856,22 +16154,22 @@ var RunCoordinator = class {
           try {
             await this.onInsightsGenerated(runId, projectId, analysisResultFromInsights(gbpInsights));
           } catch (err) {
-            log20.error("gbp-insight-webhook.failed", { runId, error: describeError(err) });
+            log21.error("gbp-insight-webhook.failed", { runId, error: describeError(err) });
           }
         }
       } catch (err) {
-        log20.error("gbp-intelligence.failed", { runId, error: describeError(err) });
+        log21.error("gbp-intelligence.failed", { runId, error: describeError(err) });
       }
       try {
         await this.notifier.dispatchReviewAlerts(projectId);
       } catch (err) {
-        log20.error("review-webhook.failed", { runId, error: describeError(err) });
+        log21.error("review-webhook.failed", { runId, error: describeError(err) });
       }
     }
     try {
       await (opts ? this.notifier.onRunCompleted(runId, projectId, opts) : this.notifier.onRunCompleted(runId, projectId));
     } catch (err) {
-      log20.error("notifier.failed", { runId, error: describeError(err) });
+      log21.error("notifier.failed", { runId, error: describeError(err) });
     }
     if (this.onAeroEvent) {
       try {
@@ -15884,7 +16182,7 @@ var RunCoordinator = class {
         };
         await this.onAeroEvent(ctx);
       } catch (err) {
-        log20.error("aero.failed", { runId, error: describeError(err) });
+        log21.error("aero.failed", { runId, error: describeError(err) });
       }
     }
   }
@@ -16289,7 +16587,7 @@ function responseSchemasFor(operations) {
     return schema ? [schema] : [];
   });
 }
-function isRecord4(value) {
+function isRecord7(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function resolve(schema, components) {
@@ -16322,7 +16620,7 @@ function render(schema, value, components, depth) {
   }
   let current = value;
   for (const member of members(node)) current = render(member, current, components, depth + 1);
-  if (Array.isArray(current) && isRecord4(node.items)) {
+  if (Array.isArray(current) && isRecord7(node.items)) {
     const items = node.items;
     let changed = false;
     const out = current.map((item) => {
@@ -16332,9 +16630,9 @@ function render(schema, value, components, depth) {
     });
     return changed ? out : current;
   }
-  if (isRecord4(current)) {
-    const properties = isRecord4(node.properties) ? node.properties : {};
-    const extra = isRecord4(node.additionalProperties) ? node.additionalProperties : void 0;
+  if (isRecord7(current)) {
+    const properties = isRecord7(node.properties) ? node.properties : {};
+    const extra = isRecord7(node.additionalProperties) ? node.additionalProperties : void 0;
     let changed = false;
     const out = {};
     for (const [key, child] of Object.entries(current)) {
@@ -16380,7 +16678,7 @@ var MAX_PARTIAL_NOTES = 12;
 function serializeResult(value) {
   return JSON.stringify(value);
 }
-function isRecord5(value) {
+function isRecord8(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function keptSummary(counts, cursors = {}) {
@@ -16400,7 +16698,7 @@ function noteCursor(owner, ownerPath, listPath, kept, total, notes, root = owner
 }
 function cursorForList(owner, ownerPath, listKey, root = owner) {
   const prefix = ownerPath ? `${ownerPath}.` : "";
-  if (listKey === "queries" && isRecord5(owner.queryPage) && owner.queryPage.nextCursor !== void 0 && owner.queryPage.nextCursor !== null) {
+  if (listKey === "queries" && isRecord8(owner.queryPage) && owner.queryPage.nextCursor !== void 0 && owner.queryPage.nextCursor !== null) {
     const page = owner.queryPage;
     return {
       path: `${prefix}queryPage.nextCursor`,
@@ -16477,7 +16775,7 @@ function partialLists(root) {
           if (count3.count <= rows.length) continue;
           notes.push([label, `${rows.length} of ${count3.text}`]);
           noted = true;
-        } else if (ownFlag === true || object.truncated === true && typeof ownFlag !== "boolean" && (lists.length === 1 || rows.some(isRecord5))) {
+        } else if (ownFlag === true || object.truncated === true && typeof ownFlag !== "boolean" && (lists.length === 1 || rows.some(isRecord8))) {
           notes.push([label, `${rows.length} shown; the tool cut this list`]);
           noted = true;
         }
@@ -16486,17 +16784,17 @@ function partialLists(root) {
     if (object.truncated === true && !noted) notes.push([path9 || "(root)", "the tool cut the lists here"]);
     if (depth >= MAX_PARTIAL_DEPTH || notes.length >= MAX_PARTIAL_NOTES) return;
     for (const [key, value] of Object.entries(object)) {
-      if (!key.startsWith("__") && isRecord5(value)) visit(value, path9 ? `${path9}.${key}` : key, depth + 1);
+      if (!key.startsWith("__") && isRecord8(value)) visit(value, path9 ? `${path9}.${key}` : key, depth + 1);
     }
   };
   visit(root, "", 1);
   return notes.length > 0 ? Object.fromEntries(notes.slice(0, MAX_PARTIAL_NOTES)) : void 0;
 }
 function withPartialLists(value) {
-  if (!isRecord5(value) || typeof value.toJSON === "function") return value;
+  if (!isRecord8(value) || typeof value.toJSON === "function") return value;
   const hadNote = Object.hasOwn(value, PARTIAL_LISTS_KEY);
   const notes = partialLists(value);
-  if (!notes && !hadNote && value.nextAttemptCursor == null && !CURSOR_KEYS.some((key) => value[key] !== void 0 && value[key] !== null) && !Object.values(value).some((child) => isRecord5(child) && CURSOR_KEYS.some((key) => child[key] !== void 0 && child[key] !== null))) return value;
+  if (!notes && !hadNote && value.nextAttemptCursor == null && !CURSOR_KEYS.some((key) => value[key] !== void 0 && value[key] !== null) && !Object.values(value).some((child) => isRecord8(child) && CURSOR_KEYS.some((key) => child[key] !== void 0 && child[key] !== null))) return value;
   const pagination = {};
   const visit = (owner, path9, depth) => {
     const lists = Object.entries(owner).filter((entry) => Array.isArray(entry[1]));
@@ -16506,11 +16804,11 @@ function withPartialLists(value) {
       if (!cursor || key.startsWith("__") || Object.keys(pagination).length >= MAX_PARTIAL_NOTES) continue;
       const label = path9 ? `${path9}.${key}` : key;
       const total = cursor.total ?? ownListTotal(numbers, key) ?? (lists.length === 1 ? bareTotal(numbers) : void 0);
-      const incomplete = owner.__truncated === true || isRecord5(owner.__omittedRowsByField) && typeof owner.__omittedRowsByField[key] === "number";
+      const incomplete = owner.__truncated === true || isRecord8(owner.__omittedRowsByField) && typeof owner.__omittedRowsByField[key] === "number";
       pagination[label] = `showing ${rows.length}${total ? ` of ${total.text}` : " rows"}; ${incomplete ? `incomplete page: re-request the original cursor with a smaller ${cursor.limit}; the next cursor skips omitted rows` : `pass ${cursor.parameter} ${JSON.stringify(cursor.value)}`}`;
     }
     if (depth >= MAX_PARTIAL_DEPTH) return;
-    for (const [key, child] of Object.entries(owner)) if (!key.startsWith("__") && isRecord5(child)) visit(child, path9 ? `${path9}.${key}` : key, depth + 1);
+    for (const [key, child] of Object.entries(owner)) if (!key.startsWith("__") && isRecord8(child)) visit(child, path9 ? `${path9}.${key}` : key, depth + 1);
   };
   visit(value, "", 1);
   const { [PARTIAL_LISTS_KEY]: _previous, __pagination: _pagination, ...rest } = value;
@@ -16563,7 +16861,7 @@ function listTrimmer(lists) {
       hadTruncated: Object.hasOwn(owner, "__truncated"),
       priorTruncated: owner.__truncated,
       previous,
-      priorOmitted: isRecord5(previous) ? previous : void 0
+      priorOmitted: isRecord8(previous) ? previous : void 0
     };
   });
   return (counts) => {
@@ -16599,12 +16897,12 @@ function collectCollections(root) {
       if (Array.isArray(value)) {
         let records = false;
         for (const row of value) {
-          if (!isRecord5(row)) continue;
+          if (!isRecord8(row)) continue;
           records = true;
           visit(row, `${valuePath}[]`, true);
         }
         if (value.length > 0) found.push({ path: valuePath, nested, records, owner: object, key, rows: value });
-      } else if (isRecord5(value)) {
+      } else if (isRecord8(value)) {
         visit(value, valuePath, nested);
       }
     }
@@ -16641,8 +16939,8 @@ function currentSummary(root, owned) {
           counts.set(list.path, count3);
           noteCursor(object, path9, list.path, value.length, list.rows.length, cursors, root);
         }
-        for (const row of value) if (isRecord5(row)) visit(row, `${valuePath}[]`);
-      } else if (isRecord5(value)) {
+        for (const row of value) if (isRecord8(row)) visit(row, `${valuePath}[]`);
+      } else if (isRecord8(value)) {
         visit(value, valuePath);
       }
     }
@@ -16655,7 +16953,7 @@ function emptiedFloorChars(root) {
 }
 function trimNestedArrays(full) {
   const copy = JSON.parse(full);
-  if (!isRecord5(copy)) return void 0;
+  if (!isRecord8(copy)) return void 0;
   copy.__truncated = true;
   copy[TRUNCATION_SUMMARY_KEY] = keptSummary(/* @__PURE__ */ new Map());
   if (emptiedFloorChars(copy) > MAX_TOOL_RESULT_CHARS) return void 0;
@@ -16726,7 +17024,7 @@ function trimNestedArrays(full) {
 function keptRowTotal(serialized) {
   const count3 = (value) => {
     if (Array.isArray(value)) return value.length;
-    if (!isRecord5(value)) return 0;
+    if (!isRecord8(value)) return 0;
     return Object.entries(value).reduce((sum, [key, child]) => key.startsWith("__") ? sum : sum + count3(child), 0);
   };
   try {
@@ -16738,9 +17036,9 @@ function keptRowTotal(serialized) {
 function hasOtherLists(value, primary) {
   if (Array.isArray(value)) {
     if (value !== primary && value.length > 0) return true;
-    return value.some((row) => (isRecord5(row) || Array.isArray(row)) && hasOtherLists(row, primary));
+    return value.some((row) => (isRecord8(row) || Array.isArray(row)) && hasOtherLists(row, primary));
   }
-  return isRecord5(value) && Object.values(value).some((child) => hasOtherLists(child, primary));
+  return isRecord8(value) && Object.values(value).some((child) => hasOtherLists(child, primary));
 }
 function projectionPath(path9) {
   if (path9.length <= MAX_SUMMARY_PATH_CHARS) return path9;
@@ -16810,7 +17108,7 @@ function boundedProjection(full, partialRows, reserve = 0) {
         if (rows.length === 0) omit(path9 || "items");
         if (owner) {
           const cursors = {};
-          noteCursor(owner, ownerPath, path9, rows.length, input.length, cursors, isRecord5(value) ? value : owner);
+          noteCursor(owner, ownerPath, path9, rows.length, input.length, cursors, isRecord8(value) ? value : owner);
           for (const [cursor, note] of Object.entries(cursors)) {
             record2(summary.cursors ??= {}, cursor, note.replace(path9, projectionPath(path9)));
           }
@@ -16818,7 +17116,7 @@ function boundedProjection(full, partialRows, reserve = 0) {
       }
       return `[${rows.join(",")}]`;
     }
-    if (!isRecord5(input)) {
+    if (!isRecord8(input)) {
       const text = serializeResult(input);
       if (text.length <= budget) return text;
       if (typeof input === "string" && budget > 2) {
@@ -16829,7 +17127,7 @@ function boundedProjection(full, partialRows, reserve = 0) {
       omit(path9 || "(root)");
       return void 0;
     }
-    const priority = ([key, child]) => key === "queryPage" && isRecord5(child) ? 0 : typeof child === "string" && child.length > budget ? 2 : typeof child !== "object" || child === null ? 0 : partialRows && serializeResult(child).length > budget ? 2 : 1;
+    const priority = ([key, child]) => key === "queryPage" && isRecord8(child) ? 0 : typeof child === "string" && child.length > budget ? 2 : typeof child !== "object" || child === null ? 0 : partialRows && serializeResult(child).length > budget ? 2 : 1;
     const fields = Object.entries(input).filter(([key]) => !key.startsWith("__")).map((field) => ({ field, rank: priority(field) })).sort((a, b) => a.rank - b.rank).map(({ field }) => field);
     const shown2 = [];
     let used = 2;
@@ -16851,13 +17149,13 @@ function boundedProjection(full, partialRows, reserve = 0) {
   };
   const projected = project(value, MAX_TOOL_RESULT_CHARS - PROJECTION_SUMMARY_CHARS - reserve, "");
   const shown = projected === void 0 ? {} : JSON.parse(projected);
-  const output = isRecord5(shown) ? shown : { items: shown };
+  const output = isRecord8(shown) ? shown : { items: shown };
   const result2 = { ...output, __truncated: true, [TRUNCATION_SUMMARY_KEY]: summary };
   return serializeResult(partialRows ? withPartialLists(result2) : result2);
 }
 function rowsShown(cut, path9) {
   if (path9.includes("[")) return Infinity;
-  const list = path9.split(".").reduce((owner, key) => isRecord5(owner) ? owner[key] : void 0, cut);
+  const list = path9.split(".").reduce((owner, key) => isRecord8(owner) ? owner[key] : void 0, cut);
   return Array.isArray(list) ? list.length : 0;
 }
 function withPartialRows(full, whole) {
@@ -16999,6 +17297,12 @@ var AERO_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
   // start paid classifier work and remain operator actions.
   "canonry_sentiment_configure",
   "canonry_sentiment_backfill",
+  // Applying answer-derived competitor names changes the measured competitor
+  // identity and restates stored history. Aero may preview detection
+  // (`canonry_competitors_auto_aliases_detect`); applying stays an operator action.
+  // The project writes that set the mode refuse a change instead; see
+  // `refuseCompetitorAutoAliasModeChange`.
+  CanonryMcpToolNames.canonry_competitors_auto_aliases_apply,
   CanonryMcpToolNames.canonry_agent_clear,
   CanonryMcpToolNames.canonry_agent_conversations_new,
   CanonryMcpToolNames.canonry_agent_conversations_resume,
@@ -17027,9 +17331,48 @@ function refuseManagedSweepCancel(tool, ctx) {
     }
   };
 }
+var COMPETITOR_AUTO_ALIAS_MODE_REFUSAL = "Aero cannot change a project's competitorAutoAliases mode. Omit competitorAutoAliases to keep the stored mode, or ask the operator to change it.";
+var COMPETITOR_AUTO_ALIAS_MODE_WRITES = /* @__PURE__ */ new Set([
+  CanonryMcpToolNames.canonry_project_upsert,
+  CanonryMcpToolNames.canonry_apply_config
+]);
+function requestedCompetitorAutoAliasMode(toolName, params, ctx) {
+  if (!isRecord8(params)) return { project: void 0, mode: void 0 };
+  if (toolName === CanonryMcpToolNames.canonry_project_upsert) {
+    const request = isRecord8(params.request) ? params.request : {};
+    return { project: ctx.projectName, mode: request.competitorAutoAliases };
+  }
+  const config = isRecord8(params.config) ? params.config : {};
+  const metadata2 = isRecord8(config.metadata) ? config.metadata : {};
+  const spec = isRecord8(config.spec) ? config.spec : {};
+  return { project: metadata2.name, mode: spec.competitorAutoAliases };
+}
+async function storedCompetitorAutoAliasMode(client, project) {
+  if (typeof project !== "string") return DEFAULT_COMPETITOR_AUTO_ALIAS_MODE;
+  try {
+    return (await client.getProject(project)).competitorAutoAliases ?? DEFAULT_COMPETITOR_AUTO_ALIAS_MODE;
+  } catch (err) {
+    if (err instanceof CliError && err.code === "NOT_FOUND") return DEFAULT_COMPETITOR_AUTO_ALIAS_MODE;
+    throw err;
+  }
+}
+function refuseCompetitorAutoAliasModeChange(tool, ctx) {
+  const write = tool.execute;
+  return {
+    ...tool,
+    execute: async (toolCallId, params, ...rest) => {
+      const { project, mode } = requestedCompetitorAutoAliasMode(tool.name, params, ctx);
+      if (mode !== void 0 && mode !== await storedCompetitorAutoAliasMode(ctx.client, project)) {
+        throw new Error(COMPETITOR_AUTO_ALIAS_MODE_REFUSAL);
+      }
+      return write(toolCallId, params, ...rest);
+    }
+  };
+}
 function buildMcpAgentTools(registry, ctx, opts = {}) {
   return registry.filter((tool) => !AERO_EXCLUDED_MCP_TOOLS.has(tool.name)).filter((tool) => opts.includeNames ? opts.includeNames.has(tool.name) : true).filter((tool) => opts.readOnly ? tool.access === "read" : true).filter((tool) => opts.managedSweeps ? !AERO_MANAGED_SWEEP_MCP_TOOLS.has(tool.name) : true).map((tool) => {
     const agentTool = mcpToAgentTool(tool, ctx);
+    if (COMPETITOR_AUTO_ALIAS_MODE_WRITES.has(tool.name)) return refuseCompetitorAutoAliasModeChange(agentTool, ctx);
     return opts.managedSweeps && tool.name === CanonryMcpToolNames.canonry_run_cancel ? refuseManagedSweepCancel(agentTool, ctx) : agentTool;
   });
 }
@@ -17360,11 +17703,11 @@ function recordLlmUsageEvent(args) {
 var AERO_MEMORY_SEPARATOR = "\n\n---\n\n";
 var AERO_MEMORY_BLOCK_PREFIX = `${AERO_MEMORY_SEPARATOR}<memory>
 `;
-function isRecord6(value) {
+function isRecord9(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 function isTextSystemBlock(value) {
-  return isRecord6(value) && value.type === "text" && typeof value.text === "string";
+  return isRecord9(value) && value.type === "text" && typeof value.text === "string";
 }
 function splitAeroHydratedSystemPrompt(systemPrompt) {
   const idx = systemPrompt.lastIndexOf(AERO_MEMORY_BLOCK_PREFIX);
@@ -17376,7 +17719,7 @@ function splitAeroHydratedSystemPrompt(systemPrompt) {
 }
 function splitAeroAnthropicSystemCachePayload(payload, model) {
   if (model.api !== "anthropic-messages") return void 0;
-  if (!isRecord6(payload) || !Array.isArray(payload.system)) return void 0;
+  if (!isRecord9(payload) || !Array.isArray(payload.system)) return void 0;
   let changed = false;
   const nextSystem = [];
   for (const block of payload.system) {
@@ -18136,7 +18479,7 @@ function resolveSessionProviderAndModel(config, opts) {
 import { Type as Type6 } from "@earendil-works/pi-ai";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-var log21 = createLogger("RemoteMcp");
+var log22 = createLogger("RemoteMcp");
 var AERO_EXCLUDED_MCP_TOOLS2 = /* @__PURE__ */ new Set([]);
 async function connectStreamableHttp(server) {
   const transport = new StreamableHTTPClientTransport(new URL(server.url), {
@@ -18204,7 +18547,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
     try {
       client = await connect(server);
     } catch (err) {
-      log21.error("external-mcp.connect-failed", {
+      log22.error("external-mcp.connect-failed", {
         label,
         error: describeError(err)
       });
@@ -18214,7 +18557,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
     try {
       listed = await client.listTools();
     } catch (err) {
-      log21.error("external-mcp.list-failed", {
+      log22.error("external-mcp.list-failed", {
         label,
         error: describeError(err)
       });
@@ -18225,7 +18568,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
       if (!isReadOnly(tool)) continue;
       tools.push(adaptRemoteTool(client, tool));
     }
-    log21.info("external-mcp.loaded", {
+    log22.info("external-mcp.loaded", {
       label,
       discovered: listed.tools.length,
       adopted: tools.length
@@ -18533,7 +18876,7 @@ async function compactMessages(args) {
 }
 
 // src/agent/session-registry.ts
-var log22 = createLogger("SessionRegistry");
+var log23 = createLogger("SessionRegistry");
 var MAX_HYDRATE_NOTES = 20;
 var MAX_HYDRATE_BYTES = 32 * 1024;
 function escapeMemoryFragment(value) {
@@ -18592,7 +18935,7 @@ var SessionRegistry = class {
     if (!this.externalToolsPromise) {
       this.externalToolsPromise = loadExternalMcpTools(this.opts.config.externalMcpServers).catch(
         (err) => {
-          log22.error("external-mcp.load-failed", {
+          log23.error("external-mcp.load-failed", {
             error: describeError(err)
           });
           return [];
@@ -18866,13 +19209,13 @@ ${lines.join("\n")}
       agent.state.messages = result2.messages;
       setAeroSystemPrompt(agent, this.buildHydratedSystemPrompt(projectId, row.systemPrompt));
       this.save(projectName);
-      log22.info("compaction.completed", {
+      log23.info("compaction.completed", {
         projectName,
         removedCount: result2.removedCount,
         summaryBytes: Buffer.byteLength(result2.summary, "utf8")
       });
     } catch (err) {
-      log22.error("compaction.failed", {
+      log23.error("compaction.failed", {
         projectName,
         error: describeError(err)
       });
@@ -19023,7 +19366,7 @@ ${lines.join("\n")}
       await agent.prompt(msgs);
       this.save(projectName);
     } catch (err) {
-      log22.error("drain.failed", {
+      log23.error("drain.failed", {
         projectName,
         error: describeError(err)
       });
@@ -19337,7 +19680,10 @@ var ViewerAeroSessions = class {
       this.opts.db.delete(apiKeys).where(eq24(apiKeys.id, id)).run();
     } catch {
       try {
-        this.opts.db.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq24(apiKeys.id, id)).run();
+        this.opts.db.transaction((tx) => {
+          tx.delete(dashboardSessions).where(eq24(dashboardSessions.apiKeyId, id)).run();
+          tx.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq24(apiKeys.id, id)).run();
+        });
       } catch {
       }
     }
@@ -19386,7 +19732,10 @@ function mintSessionKey(db, scopes, userId) {
 }
 function revokeSessionKey(db, id) {
   try {
-    db.update(apiKeys).set({ revokedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq25(apiKeys.id, id)).run();
+    db.transaction((tx) => {
+      tx.delete(dashboardSessions).where(eq25(dashboardSessions.apiKeyId, id)).run();
+      tx.update(apiKeys).set({ revokedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq25(apiKeys.id, id)).run();
+    });
   } catch {
   }
 }
@@ -20189,7 +20538,7 @@ function formatAuditFactorScore(factor) {
 }
 
 // src/snapshot-service.ts
-var log23 = createLogger("Snapshot");
+var log24 = createLogger("Snapshot");
 var ANALYSIS_PROVIDER_PRIORITY = ["openai", "claude", "gemini", "perplexity", "muse", "local"];
 var SNAPSHOT_QUERY_COUNT = 6;
 var SnapshotService = class {
@@ -20286,7 +20635,7 @@ var SnapshotService = class {
       return mapAuditReport(report);
     } catch (err) {
       const message = describeError(err);
-      log23.warn("audit.failed", { homepageUrl, error: message });
+      log24.warn("audit.failed", { homepageUrl, error: message });
       return {
         url: homepageUrl,
         finalUrl: homepageUrl,
@@ -20315,7 +20664,7 @@ var SnapshotService = class {
           queries: parsedQueries
         };
       } catch (err) {
-        log23.warn("profile.generation-failed", {
+        log24.warn("profile.generation-failed", {
           domain: ctx.domain,
           provider: ctx.analysisProvider.adapter.name,
           error: describeError(err)
@@ -20458,7 +20807,7 @@ var SnapshotService = class {
         recommendedActions: uniqueStrings2(parsed.recommendedActions ?? []).slice(0, 4)
       };
     } catch (err) {
-      log23.warn("response.analysis-failed", {
+      log24.warn("response.analysis-failed", {
         provider: ctx.analysisProvider.adapter.name,
         error: describeError(err)
       });
@@ -20751,9 +21100,9 @@ async function executeResearchRun(db, registry, runId, projectId) {
     reserved = run.totalQueries;
     reservation = { scope, period };
     const rows = db.select().from(researchRunQueries).where(eq27(researchRunQueries.researchRunId, runId)).orderBy(researchRunQueries.position).all();
-    const competitorRows = db.select({ domain: competitors.domain, aliases: competitors.aliases }).from(competitors).where(eq27(competitors.projectId, projectId)).all();
+    const competitorRows = db.select(competitorIdentityColumns).from(competitors).where(eq27(competitors.projectId, projectId)).orderBy(competitors.domain).all();
     const competitorDomains = competitorRows.map((row) => row.domain);
-    const competitorAliases = new Map(competitorRows.filter((row) => row.aliases.length > 0).map((row) => [row.domain, row.aliases]));
+    const competitorAliases = new Map(competitorRows.map((row) => [row.domain, competitorIdentityAliases(row)]).filter(([, aliases]) => aliases.length > 0));
     const domains = effectiveDomains(project);
     const brands = effectiveBrandNames(project);
     const config = { ...provider.config, model: run.resolvedModel };
@@ -21086,7 +21435,7 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
 // src/server.ts
 var _require3 = createRequire3(import.meta.url);
 var { version: PKG_VERSION2 } = _require3("../package.json");
-var log24 = createLogger("Server");
+var log25 = createLogger("Server");
 var runtimeStartupByServer = /* @__PURE__ */ new WeakMap();
 function waitForServerRuntimeStartup(app) {
   const startup = runtimeStartupByServer.get(app);
@@ -21292,7 +21641,7 @@ function applyLegacyCredentials(rows, config) {
   }
   if (migratedGoogle > 0) {
     saveConfigPatch({ google: config.google });
-    log24.info("credentials.migrated", { type: "google", count: migratedGoogle });
+    log25.info("credentials.migrated", { type: "google", count: migratedGoogle });
   }
   let migratedGa4 = 0;
   for (const row of rows.ga4) {
@@ -21310,7 +21659,7 @@ function applyLegacyCredentials(rows, config) {
   }
   if (migratedGa4 > 0) {
     saveConfigPatch({ ga4: config.ga4 });
-    log24.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
+    log25.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
   }
 }
 function isLoopbackBindHost(host) {
@@ -21547,11 +21896,11 @@ async function createServer(opts) {
     applyLegacyCredentials(legacyRows, opts.config);
     dropLegacyCredentialColumns(opts.db);
   } catch (err) {
-    log24.warn("credentials.migration.failed", {
+    log25.warn("credentials.migration.failed", {
       error: describeError(err)
     });
   }
-  log24.info("providers.configured", {
+  log25.info("providers.configured", {
     providers: Object.keys(providers).filter((k) => {
       const p = providers[k];
       return p?.apiKey || p?.baseUrl || p?.vertexProject;
@@ -21566,7 +21915,7 @@ async function createServer(opts) {
     }
   }
   for (const name of providersWithUnsupportedBatch(providers, (provider) => adapterMap[provider])) {
-    log24.warn("provider.batch.unsupported", {
+    log25.warn("provider.batch.unsupported", {
       provider: name,
       message: `providers.${name}.batch.enabled is true, but the ${name} adapter has no batch API; its sweeps run sync.`
     });
@@ -22403,37 +22752,48 @@ async function createServer(opts) {
   const sessionCookieSecure = Boolean(
     opts.config.publicUrl?.startsWith("https://") || opts.config.apiUrl?.startsWith("https://")
   );
-  const sessions = /* @__PURE__ */ new Map();
-  const pruneExpiredSessions = () => {
-    const now = Date.now();
-    for (const [sessionId, session] of sessions.entries()) {
-      if (session.expiresAt <= now) {
-        sessions.delete(sessionId);
-      }
-    }
-  };
-  const createSession = (apiKeyId) => {
-    pruneExpiredSessions();
+  const currentPasswordFingerprint = () => hashSessionToken(opts.config.dashboardPasswordHash ?? "");
+  opts.db.delete(dashboardSessions).where(or3(
+    eq29(dashboardSessions.apiKeyHash, ""),
+    and23(
+      isNotNull4(dashboardSessions.passwordFingerprint),
+      ne3(dashboardSessions.passwordFingerprint, currentPasswordFingerprint())
+    )
+  )).run();
+  const createSession = (key, passwordBased = false) => {
+    const now = /* @__PURE__ */ new Date();
+    opts.db.delete(dashboardSessions).where(lte2(dashboardSessions.expiresAt, now.toISOString())).run();
     const sessionId = crypto29.randomBytes(32).toString("hex");
-    sessions.set(sessionId, {
-      apiKeyId,
-      expiresAt: Date.now() + SESSION_TTL_MS
-    });
+    opts.db.insert(dashboardSessions).values({
+      tokenHash: hashSessionToken(sessionId),
+      apiKeyId: key.id,
+      apiKeyHash: key.keyHash,
+      passwordFingerprint: passwordBased ? currentPasswordFingerprint() : null,
+      createdAt: now.toISOString(),
+      expiresAt: new Date(now.getTime() + SESSION_TTL_MS).toISOString()
+    }).run();
     return sessionId;
   };
   const resolveSessionApiKeyId = (sessionId) => {
-    pruneExpiredSessions();
-    const session = sessions.get(sessionId);
+    const tokenHash = hashSessionToken(sessionId);
+    const session = opts.db.select({
+      apiKeyId: dashboardSessions.apiKeyId,
+      apiKeyHash: dashboardSessions.apiKeyHash,
+      currentApiKeyHash: apiKeys.keyHash,
+      passwordFingerprint: dashboardSessions.passwordFingerprint,
+      expiresAt: dashboardSessions.expiresAt
+    }).from(dashboardSessions).innerJoin(apiKeys, eq29(apiKeys.id, dashboardSessions.apiKeyId)).where(and23(eq29(dashboardSessions.tokenHash, tokenHash), isNull4(apiKeys.revokedAt))).get();
     if (!session) return null;
-    if (session.expiresAt <= Date.now()) {
-      sessions.delete(sessionId);
+    const expiresAt = Date.parse(session.expiresAt);
+    if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || session.apiKeyHash !== session.currentApiKeyHash || session.passwordFingerprint !== null && session.passwordFingerprint !== currentPasswordFingerprint()) {
+      opts.db.delete(dashboardSessions).where(eq29(dashboardSessions.tokenHash, tokenHash)).run();
       return null;
     }
     return session.apiKeyId;
   };
   const clearSession = (sessionId) => {
     if (sessionId) {
-      sessions.delete(sessionId);
+      opts.db.delete(dashboardSessions).where(eq29(dashboardSessions.tokenHash, hashSessionToken(sessionId))).run();
     }
   };
   const getDefaultApiKey = () => {
@@ -22443,7 +22803,7 @@ async function createServer(opts) {
   const createPasswordSession = (reply) => {
     const key = getDefaultApiKey();
     if (!key || key.revokedAt) return false;
-    const sessionId = createSession(key.id);
+    const sessionId = createSession(key, true);
     reply.header(
       "set-cookie",
       serializeSessionCookie({
@@ -22563,7 +22923,7 @@ async function createServer(opts) {
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
       opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq29(apiKeys.id, key.id)).run();
-      const sessionId = createSession(key.id);
+      const sessionId = createSession(key);
       reply.header(
         "set-cookie",
         serializeSessionCookie({
@@ -22638,7 +22998,7 @@ async function createServer(opts) {
   const sentimentPoller = createSentimentPoller(
     () => sentimentWorker.tick(),
     () => {
-      log24.error("sentiment.worker-failed", { reason: "Stored sentiment worker could not finish its tick." });
+      log25.error("sentiment.worker-failed", { reason: "Stored sentiment worker could not finish its tick." });
     }
   );
   const pollSentiment = sentimentPoller.poll;
@@ -22646,6 +23006,110 @@ async function createServer(opts) {
   runCoordinator.onSentimentCompleted = async () => {
     pollSentiment();
   };
+  const answerFieldRecomputes = createAnswerFieldRecomputeQueue({ db: opts.db });
+  const recomputeDebts = /* @__PURE__ */ new Map();
+  let recomputeSequence = 0;
+  const markAnswerFieldRecompute = (projectId, full) => {
+    opts.db.update(projects).set({ answerFieldsRecompute: full ? "full" : sql11`CASE WHEN ${projects.answerFieldsRecompute} = 'full' THEN 'full' ELSE 'competitors' END` }).where(eq29(projects.id, projectId)).run();
+  };
+  const requestAnswerFieldRecompute = (projectId, projectName, scope, reason) => {
+    const sequence = ++recomputeSequence;
+    const debt = recomputeDebts.get(projectId) ?? { latest: 0, latestFull: 0 };
+    debt.latest = sequence;
+    if (scope.full) debt.latestFull = sequence;
+    recomputeDebts.set(projectId, debt);
+    try {
+      markAnswerFieldRecompute(projectId, scope.full === true);
+    } catch (err) {
+      app.log.error({ err, projectId }, "could not mark the owed answer field recompute");
+    }
+    answerFieldRecomputes.request(projectId, scope).then(
+      (pass) => {
+        if (pass.full && debt.latestFull <= sequence) debt.latestFull = 0;
+        try {
+          if (debt.latest === sequence && debt.latestFull === 0) {
+            opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq29(projects.id, projectId)).run();
+            if (recomputeDebts.get(projectId) === debt) recomputeDebts.delete(projectId);
+          } else if (debt.latestFull === 0) {
+            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and23(eq29(projects.id, projectId), eq29(projects.answerFieldsRecompute, "full"))).run();
+          }
+        } catch (err) {
+          app.log.error({ err, projectId }, "could not clear the owed answer field recompute");
+        }
+        app.log.info(
+          { projectId, projectName, reason, full: pass.full, ...pass.result },
+          "identity changed: recomputed stored answer fields on historical snapshots"
+        );
+      },
+      (err) => {
+        app.log.error(
+          { err, projectId, projectName, reason },
+          "identity-triggered answer field recompute failed"
+        );
+      }
+    );
+  };
+  const resumeAnswerFieldRecomputes = () => {
+    const owed = opts.db.select({ id: projects.id, name: projects.name, scope: projects.answerFieldsRecompute }).from(projects).where(isNotNull4(projects.answerFieldsRecompute)).all();
+    for (const project of owed) {
+      requestAnswerFieldRecompute(project.id, project.name, { full: project.scope === "full" }, "resume-after-restart");
+    }
+  };
+  const recomputeCompetitorFields = (projectId, projectName) => {
+    requestAnswerFieldRecompute(projectId, projectName, {}, "competitor-names");
+  };
+  const competitorAutoAliases = createCompetitorAutoAliasRunner({
+    db: opts.db,
+    readAnchors: extractStoredAnswerAnchors,
+    onNamesChanged: recomputeCompetitorFields
+  });
+  const competitorAutoAliasReasons = /* @__PURE__ */ new Map();
+  const competitorAutoAliasPasses = createProjectPassQueue(async (projectId) => {
+    await yieldToEventLoop4();
+    const reason = (competitorAutoAliasReasons.get(projectId) ?? []).join(",");
+    competitorAutoAliasReasons.delete(projectId);
+    const project = opts.db.select().from(projects).where(eq29(projects.id, projectId)).get();
+    if (!project || project.competitorAutoAliases === "off") return;
+    if (project.competitorAutoAliases === "apply") {
+      await competitorAutoAliases.request(projectId, reason).catch(() => void 0);
+      return;
+    }
+    const detection = await previewCompetitorAutoAliases(opts.db, project, { readAnchors: extractStoredAnswerAnchors });
+    const wouldAdd = detection.competitors.flatMap((competitor) => competitor.added.map((name) => `${competitor.domain}: ${name}`));
+    const wouldRemove = detection.competitors.flatMap((competitor) => competitor.removed.map((entry) => `${competitor.domain}: ${entry.name}`));
+    app.log.info(
+      {
+        projectId,
+        projectName: project.name,
+        reason,
+        mode: "preview",
+        runs: detection.scan.runs,
+        snapshots: detection.scan.snapshots,
+        wouldAdd: wouldAdd.slice(0, 20),
+        wouldAddCount: wouldAdd.length,
+        wouldRemove: wouldRemove.slice(0, 20),
+        wouldRemoveCount: wouldRemove.length
+      },
+      "competitor auto aliases (preview): stored nothing; set the project to apply, or run detect --apply, to store them"
+    );
+  });
+  const scheduleCompetitorAutoAliases = (projectId, reason) => {
+    competitorAutoAliasReasons.set(projectId, [...competitorAutoAliasReasons.get(projectId) ?? [], reason]);
+    competitorAutoAliasPasses.request(projectId).catch((err) => {
+      app.log.error({ err, projectId, reason }, "competitor auto alias pass failed");
+    });
+  };
+  runCoordinator.onAnswersRecorded = (runId, projectId) => {
+    scheduleCompetitorAutoAliases(projectId, `run:${runId}`);
+  };
+  app.addHook("onClose", async () => {
+    await competitorAutoAliasPasses.settled();
+    await competitorAutoAliases.settled();
+    await answerFieldRecomputes.settled();
+  });
+  app.addHook("onReady", async () => {
+    resumeAnswerFieldRecomputes();
+  });
   app.addHook("onReady", async () => {
     sentimentTimer = setInterval(pollSentiment, 5e3);
     sentimentTimer.unref();
@@ -23207,37 +23671,14 @@ async function createServer(opts) {
       }
     },
     onAliasesChanged: (projectId, projectName) => {
-      setImmediate(() => {
-        try {
-          const result2 = backfillProjectAnswerMentions(opts.db, projectId);
-          app.log.info(
-            { projectId, projectName, ...result2 },
-            "aliases changed \u2014 recomputed mention fields on historical snapshots"
-          );
-        } catch (err) {
-          app.log.error(
-            { err, projectId, projectName },
-            "alias-triggered backfill failed"
-          );
-        }
-      });
+      requestAnswerFieldRecompute(projectId, projectName, { full: true }, "project-aliases");
     },
-    onCompetitorAliasesChanged: (projectId, projectName) => {
-      setImmediate(() => {
-        try {
-          const result2 = backfillProjectAnswerMentions(opts.db, projectId, { competitorFieldsOnly: true });
-          app.log.info(
-            { projectId, projectName, ...result2 },
-            "competitor aliases changed: recomputed competitor fields on historical snapshots"
-          );
-        } catch (err) {
-          app.log.error(
-            { err, projectId, projectName },
-            "competitor-alias-triggered backfill failed"
-          );
-        }
-      });
+    onCompetitorAliasesChanged: recomputeCompetitorFields,
+    onCompetitorAutoAliasRescan: (projectId) => {
+      scheduleCompetitorAutoAliases(projectId, "rescan");
     },
+    competitorAnswerAnchors: extractStoredAnswerAnchors,
+    runCompetitorAutoAliasPass: (projectId) => competitorAutoAliases.request(projectId, "api"),
     operatorApiKeyIds,
     listOperationalLogs: (query) => operationalLogs.list(query),
     getTelemetryStatus,
@@ -23468,11 +23909,18 @@ async function createServer(opts) {
       resourcePaths: mcpTransportPaths().map(
         (suffix) => `${basePath ?? "/"}api/v1${suffix}`.replace("//", "/")
       ),
-      resolveUser: (request) => {
+      resolveUser: (request, reply) => {
         const cookies = parseCookieHeader(request.headers.cookie);
         const token = cookies[USER_SESSION_COOKIE_NAME];
         if (!token) return null;
         const resolved = resolveUserSession(opts.db, token);
+        if (resolved?.renewedExpiresAt) {
+          reply.header("set-cookie", serializeUserSessionCookie({
+            value: token,
+            path: sessionCookiePath,
+            secure: cookieIsSecure(request, sessionCookieSecure ? true : void 0)
+          }));
+        }
         return resolved ? { id: resolved.user.id, name: resolved.user.name } : null;
       },
       credentials: credentialChecker,
@@ -23614,6 +24062,7 @@ export {
   reparseStoredResult as reparseStoredResult3,
   reparseStoredResult4,
   reparseStoredResult5,
+  resolveStoredApiResponse,
   getCloudflareTrafficConnectionBySourceId,
   setGoogleAuthConfig,
   formatAuditFactorScore,