@canonry/canonry 7.19.0 → 7.20.1

package/dist/{chunk-OMP5OLBK.js → chunk-CIPWGVX6.js}

@@ -20,20 +20,20 @@ import {
   saveConfig,
   saveConfigPatch,
   sentimentInstallReadiness
-} from "./chunk-35IIFDIT.js";
+} from "./chunk-NDQOCFJQ.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-A75L7CUV.js";
+} from "./chunk-222NAFTY.js";
 import {
   CanonryMcpToolNames,
   CliError,
   PACKAGE_VERSION,
   canonryMcpTools
-} from "./chunk-VSTKTQPS.js";
+} from "./chunk-5IXQAOVK.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -223,13 +223,14 @@ import {
   toAlertView,
   usageCounters,
   writeAuditLog
-} from "./chunk-UUI4HOEL.js";
+} from "./chunk-46JZR2IV.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
   AGENT_PROVIDER_IDS,
   AI_ENGINE_DOMAINS,
   AI_ENGINE_SELF_DOMAINS,
+  API_PROVIDER_NAMES,
   AdsAdGroupBillingEventTypes,
   AdsCampaignBiddingTypes,
   AgentProviderIds,
@@ -269,6 +270,7 @@ import {
   ProviderBatchSubmitError,
   ProviderDispatchModes,
   ProviderNames,
+  ProviderReloadErrorReasons,
   RATIO_UNIT_META_KEY,
   ROUTE_CAPABLE_CITED_URL_PROVIDERS,
   RUN_FILL_PROVIDER_BREAKER,
@@ -398,6 +400,7 @@ import {
   notFound,
   observeTemplateLinkDetection,
   observeTemplateLinkEdges,
+  operationInProgress,
   parseMeasurementRunManifestV1,
   parseOriginList,
   parseRunError,
@@ -439,7 +442,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-CYHUZ2JQ.js";
+} from "./chunk-MRKV43TV.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -3569,7 +3572,7 @@ import path8 from "path";
 import { isIP } from "net";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { setImmediate as yieldToEventLoop4 } from "timers/promises";
-import { and as and23, eq as eq29, isNotNull as isNotNull4, isNull as isNull4, lte as lte2, ne as ne3, or as or3, sql as sql11 } from "drizzle-orm";
+import { and as and24, eq as eq29, isNotNull as isNotNull4, isNull as isNull4, lte as lte2, ne as ne3, or as or3, sql as sql11 } from "drizzle-orm";
 
 // ../integration-typesafe/src/classifier.ts
 import { createHash } from "crypto";
@@ -8049,7 +8052,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "e760bb248ecb01eb5783f35367dbc100edd5ed12" : void 0;
+  const embedded = true ? "29f2d7cd1ba516a39c9321b0399aaa3b5311ef46" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -8205,48 +8208,57 @@ var ProviderExecutionGate = class {
   maxPerMinute;
   window = [];
   waiters = [];
-  rateLimitChain = Promise.resolve();
+  rateTimer;
+  dispatching = false;
   inFlight = 0;
+  updatePolicy(maxConcurrency, maxPerMinute) {
+    this.maxConcurrency = maxConcurrency;
+    this.maxPerMinute = maxPerMinute;
+    this.dispatchQueued();
+  }
   async run(task) {
-    await this.acquire();
+    return new Promise((resolve2, reject) => {
+      this.waiters.push(() => {
+        void this.execute(task, resolve2, reject);
+      });
+      this.dispatchQueued();
+    });
+  }
+  async execute(task, resolve2, reject) {
     try {
-      await this.waitForRateLimit();
-      return await task();
+      resolve2(await task());
+    } catch (error) {
+      reject(error);
     } finally {
-      this.release();
+      this.inFlight--;
+      this.dispatchQueued();
     }
   }
-  async acquire() {
-    if (this.inFlight < Math.max(1, this.maxConcurrency)) {
-      this.inFlight++;
-      return;
+  dispatchQueued() {
+    if (this.dispatching) return;
+    if (this.rateTimer !== void 0) {
+      clearTimeout(this.rateTimer);
+      this.rateTimer = void 0;
     }
-    await new Promise((resolve2) => this.waiters.push(resolve2));
-    this.inFlight++;
-  }
-  release() {
-    this.inFlight = Math.max(0, this.inFlight - 1);
-    this.waiters.shift()?.();
-  }
-  async waitForRateLimit() {
-    let releaseChain;
-    const previousChain = this.rateLimitChain;
-    this.rateLimitChain = new Promise((resolve2) => {
-      releaseChain = resolve2;
-    });
-    await previousChain;
+    this.dispatching = true;
     try {
-      const now = Date.now();
-      const windowStart = now - 6e4;
-      while (this.window.length > 0 && this.window[0] < windowStart) this.window.shift();
-      if (this.window.length >= this.maxPerMinute) {
-        await new Promise((resolve2) => setTimeout(resolve2, this.window[0] + 6e4 - now + 50));
-        const nextWindowStart = Date.now() - 6e4;
-        while (this.window.length > 0 && this.window[0] < nextWindowStart) this.window.shift();
-      }
-      this.window.push(Date.now());
+      while (this.waiters.length > 0 && this.inFlight < Math.max(1, this.maxConcurrency)) {
+        const now = Date.now();
+        const windowStart = now - 6e4;
+        while (this.window.length > 0 && this.window[0] < windowStart) this.window.shift();
+        if (this.window.length >= this.maxPerMinute) break;
+        this.window.push(now);
+        this.inFlight++;
+        this.waiters.shift()();
+      }
     } finally {
-      releaseChain?.();
+      this.dispatching = false;
+    }
+    if (this.waiters.length > 0 && this.inFlight < Math.max(1, this.maxConcurrency)) {
+      this.rateTimer = setTimeout(() => {
+        this.rateTimer = void 0;
+        this.dispatchQueued();
+      }, this.window[0] + 6e4 - Date.now() + 50);
     }
   }
 };
@@ -8259,6 +8271,9 @@ function getSharedProviderExecutionGate(providerName, maxConcurrency, maxPerMinu
   sharedGates.set(key, gate);
   return gate;
 }
+function updateSharedProviderExecutionGate(providerName, maxConcurrency, maxPerMinute) {
+  getSharedProviderExecutionGate(providerName, maxConcurrency, maxPerMinute).updatePolicy(maxConcurrency, maxPerMinute);
+}
 
 // src/usage-quota.ts
 import crypto6 from "crypto";
@@ -8576,6 +8591,7 @@ var JobRunner = class {
    * handoff across a restart.
    */
   executing = /* @__PURE__ */ new Map();
+  executingBatchRegistrations = /* @__PURE__ */ new Map();
   constructor(db, registry, opts) {
     this.onFirstActivation = opts?.onFirstActivation;
     this.db = db;
@@ -8596,6 +8612,12 @@ var JobRunner = class {
   isExecuting(runId) {
     return this.executing.has(runId);
   }
+  /** Reload must preserve credentials captured by a batch sweep until it settles. */
+  getExecutingBatchRegistrations() {
+    return [...this.executingBatchRegistrations.values()].flatMap(
+      ({ runId, registrations }) => registrations.map((registration) => ({ runId, registration }))
+    );
+  }
   hasProviderBatches(runId) {
     return this.db.select({ id: providerBatches.id }).from(providerBatches).where(eq3(providerBatches.runId, runId)).limit(1).get() !== void 0;
   }
@@ -8711,6 +8733,7 @@ var JobRunner = class {
     const providerReservations = /* @__PURE__ */ new Map();
     const batchRowIds = [];
     const releaseExecution = this.enterExecution(runId);
+    const batchExecution = Symbol(runId);
     try {
       const existingRun = this.getRunState(runId);
       if (!existingRun) {
@@ -8829,6 +8852,18 @@ var JobRunner = class {
       let totalSnapshotsInserted = 0;
       const apiProviders = calledProviders.filter((p) => !isBrowserProvider(p.adapter.name));
       const browserProviders = calledProviders.filter((p) => isBrowserProvider(p.adapter.name));
+      const providerKey = (provider) => provider.adapter.name.trim().toLocaleLowerCase("en");
+      const batchProviders = /* @__PURE__ */ new Set();
+      if (planExecution) {
+        const frozenModes = existingRun.providerDispatchModes ?? {};
+        for (const provider of apiProviders) {
+          if (frozenModes[providerKey(provider)] !== ProviderDispatchModes.batch) continue;
+          if (adapterSupportsBatch(provider.adapter)) batchProviders.add(provider.adapter.name);
+          else log2.warn("run.batch-unsupported", { runId, provider: provider.adapter.name });
+        }
+        const registrations = apiProviders.filter((provider) => batchProviders.has(provider.adapter.name));
+        if (registrations.length > 0) this.executingBatchRegistrations.set(batchExecution, { runId, registrations });
+      }
       const processQueryForProvider = async (registeredProvider, q) => {
         const { adapter, config } = registeredProvider;
         const providerName = adapter.name;
@@ -9040,15 +9075,7 @@ var JobRunner = class {
       providerCallStart = Date.now();
       if (planExecution) {
         const plan = planExecution;
-        const providerKey = (provider) => provider.adapter.name.trim().toLocaleLowerCase("en");
         const unitsFor = (provider) => plan.unitsByProvider.get(providerKey(provider)) ?? [];
-        const frozenModes = existingRun.providerDispatchModes ?? {};
-        const batchProviders = /* @__PURE__ */ new Set();
-        for (const provider of apiProviders) {
-          if (frozenModes[providerKey(provider)] !== ProviderDispatchModes.batch) continue;
-          if (adapterSupportsBatch(provider.adapter)) batchProviders.add(provider.adapter.name);
-          else log2.warn("run.batch-unsupported", { runId, provider: provider.adapter.name });
-        }
         log2.info("run.plan-dispatch", {
           runId,
           expectedSlots: plan.manifest.expectedSlots.length,
@@ -9065,7 +9092,16 @@ var JobRunner = class {
           batchRowIds
         };
         await runWithConcurrency(apiProviders, resolveProviderFanout(), async (registeredProvider) => {
-          const units = batchProviders.has(registeredProvider.adapter.name) ? await this.submitPlanBatches(submission, registeredProvider, unitsFor(registeredProvider)) : unitsFor(registeredProvider);
+          let units;
+          if (batchProviders.has(registeredProvider.adapter.name)) {
+            const submitExecution = Symbol(runId);
+            this.executingBatchRegistrations.set(submitExecution, { runId, registrations: [registeredProvider] });
+            try {
+              units = await this.submitPlanBatches(submission, registeredProvider, unitsFor(registeredProvider));
+            } finally {
+              this.executingBatchRegistrations.delete(submitExecution);
+            }
+          } else units = unitsFor(registeredProvider);
           await Promise.all(units.map(async (unit) => {
             await processNodeForProvider(registeredProvider, unit);
           }));
@@ -9197,6 +9233,7 @@ var JobRunner = class {
       }
       await this.cancelAtProvider(abandoned);
     } finally {
+      this.executingBatchRegistrations.delete(batchExecution);
       releaseExecution();
     }
   }
@@ -9647,9 +9684,9 @@ var JobRunner = class {
     return marked;
   }
   async cancelAtProvider(rows) {
-    for (const row of rows) {
+    const registrations = rows.map((row) => ({ row, registered: this.registry.get(row.provider) }));
+    for (const { row, registered } of registrations) {
       if (!row.providerBatchId) continue;
-      const registered = this.registry.get(row.provider);
       if (!registered?.adapter.batch) {
         log2.warn("batch.cancel-unavailable", { batchId: row.id, provider: row.provider });
         continue;
@@ -14568,11 +14605,29 @@ function extractStoredAnswerAnchors(provider, rawResponse) {
 }
 
 // src/provider-registry.ts
+function resolveRegistration(adapter, config) {
+  return {
+    adapter,
+    config: config.model === void 0 ? config : { ...config, model: resolveProviderModel(adapter.name, config.model) }
+  };
+}
 var ProviderRegistry = class {
   providers = /* @__PURE__ */ new Map();
   register(adapter, config) {
-    const resolved = config.model === void 0 ? config : { ...config, model: resolveProviderModel(adapter.name, config.model) };
-    this.providers.set(adapter.name, { adapter, config: resolved });
+    const provider = resolveRegistration(adapter, config);
+    this.providers.set(adapter.name, provider);
+    updateSharedProviderExecutionGate(adapter.name, provider.config.quotaPolicy.maxConcurrency, provider.config.quotaPolicy.maxRequestsPerMinute);
+  }
+  /** Publish a complete registration set without mutating configs captured by active runs. */
+  replace(providers) {
+    const next = /* @__PURE__ */ new Map();
+    for (const { adapter, config } of providers) {
+      next.set(adapter.name, resolveRegistration(adapter, config));
+    }
+    this.providers = next;
+    for (const { adapter, config } of next.values()) {
+      updateSharedProviderExecutionGate(adapter.name, config.quotaPolicy.maxConcurrency, config.quotaPolicy.maxRequestsPerMinute);
+    }
   }
   get(name) {
     return this.providers.get(name);
@@ -14619,6 +14674,96 @@ var ProviderRegistry = class {
   }
 };
 
+// src/provider-registration.ts
+function isApiProviderRegistrable(name, entry) {
+  if (!entry) return false;
+  if (name === ProviderNames.local) return Boolean(entry.baseUrl);
+  if (name === ProviderNames.gemini) return Boolean(entry.apiKey || entry.vertexProject);
+  return Boolean(entry.apiKey);
+}
+function isCdpProviderRegistrable(cdp) {
+  return Boolean(cdp?.host || cdp?.port);
+}
+function registeredProviderNames(config) {
+  const names = API_PROVIDER_NAMES.filter((name) => {
+    const entry = config.providers?.[name];
+    if (name === ProviderNames.gemini && !entry && config.geminiApiKey) return true;
+    return isApiProviderRegistrable(name, entry);
+  });
+  if (isCdpProviderRegistrable(config.cdp)) names.push(ProviderNames.cdpChatgpt);
+  return names;
+}
+
+// src/provider-runtime-config.ts
+var DEFAULT_PROVIDER_QUOTA = {
+  maxConcurrency: 2,
+  maxRequestsPerMinute: 10,
+  maxRequestsPerDay: 1e3
+};
+var DEFAULT_CDP_QUOTA = {
+  maxConcurrency: 1,
+  maxRequestsPerMinute: 4,
+  maxRequestsPerDay: 200
+};
+function resolveProviderQuotaPolicy(quota, defaults) {
+  const saved = quota && typeof quota === "object" && !Array.isArray(quota) ? quota : {};
+  return {
+    maxConcurrency: saved.maxConcurrency ?? defaults.maxConcurrency,
+    maxRequestsPerMinute: saved.maxRequestsPerMinute ?? defaults.maxRequestsPerMinute,
+    maxRequestsPerDay: saved.maxRequestsPerDay ?? defaults.maxRequestsPerDay
+  };
+}
+function configuredProviderEntries(config, apiAdapters, cdpAdapter) {
+  const registered = [];
+  for (const adapter of apiAdapters) {
+    const entry = config.providers?.[adapter.name];
+    if (!entry) continue;
+    if (isApiProviderRegistrable(adapter.name, entry)) {
+      registered.push(resolveRegistration(adapter, providerConfigFromEntry(
+        adapter.name,
+        entry,
+        resolveProviderQuotaPolicy(entry.quota, DEFAULT_PROVIDER_QUOTA)
+      )));
+    }
+  }
+  if (isCdpProviderRegistrable(config.cdp)) {
+    registered.push(resolveRegistration(cdpAdapter, {
+      provider: cdpAdapter.name,
+      cdpEndpoint: `ws://${config.cdp?.host ?? "localhost"}:${config.cdp?.port ?? 9222}`,
+      quotaPolicy: resolveProviderQuotaPolicy(config.cdp?.quota, DEFAULT_CDP_QUOTA)
+    }));
+  }
+  return registered;
+}
+
+// src/provider-reload-batch-guard.ts
+import { isDeepStrictEqual } from "util";
+import { and as and15, inArray as inArray7 } from "drizzle-orm";
+function pendingBatchIdentity(provider) {
+  const { quotaPolicy: _quotaPolicy, ...identity } = resolveRegistration(provider.adapter, provider.config).config;
+  return identity;
+}
+function assertProviderReloadKeepsPendingBatches(db, previous, next, executing = []) {
+  const nextByName = new Map(next.map((provider) => [provider.adapter.name, provider]));
+  const changedRegistration = (provider) => {
+    const replacement = nextByName.get(provider.adapter.name);
+    return !replacement || !isDeepStrictEqual(pendingBatchIdentity(provider), pendingBatchIdentity(replacement));
+  };
+  const changed = previous.filter(changedRegistration).map((provider) => provider.adapter.name);
+  const active = executing.filter((snapshot) => changedRegistration(snapshot.registration));
+  if (changed.length === 0 && active.length === 0) return;
+  const pending = changed.length === 0 ? [] : db.select({ id: providerBatches.id, provider: providerBatches.provider, runId: providerBatches.runId }).from(providerBatches).where(and15(
+    inArray7(providerBatches.provider, changed),
+    inArray7(providerBatches.status, [ProviderBatchStatuses.submitting, ProviderBatchStatuses.submitted, ProviderBatchStatuses.ended])
+  )).all();
+  if (pending.length === 0 && active.length === 0) return;
+  throw operationInProgress("Changes to provider credentials or execution settings must wait for outstanding batch work to settle.", {
+    providers: [.../* @__PURE__ */ new Set([...pending.map((batch) => batch.provider), ...active.map((snapshot) => snapshot.registration.adapter.name)])].sort(),
+    batchIds: pending.map((batch) => batch.id).sort(),
+    runIds: [.../* @__PURE__ */ new Set([...pending.map((batch) => batch.runId), ...active.map((snapshot) => snapshot.runId)])].sort()
+  });
+}
+
 // src/provider-model-catalog.ts
 import { createHash as createHash4 } from "crypto";
 var TTL_MS = 60 * 60 * 1e3;
@@ -14682,7 +14827,7 @@ function createProviderModelCatalog(registry) {
 // src/scheduler.ts
 import crypto21 from "crypto";
 import cron from "node-cron";
-import { and as and15, eq as eq17, inArray as inArray7, notExists, sql as sql7 } from "drizzle-orm";
+import { and as and16, eq as eq17, inArray as inArray8, notExists, sql as sql7 } from "drizzle-orm";
 var log16 = createLogger("Scheduler");
 var DEFAULT_HEALTH_CRON = "0 */6 * * *";
 function ensureDefaultHealthSchedule(db, projectId, now = (/* @__PURE__ */ new Date()).toISOString()) {
@@ -14733,7 +14878,7 @@ var Scheduler = class {
    */
   ensureHealthSchedules() {
     const projectsWithoutHealth = this.db.select({ id: projects.id }).from(projects).where(notExists(
-      this.db.select({ one: sql7`1` }).from(schedules).where(and15(
+      this.db.select({ one: sql7`1` }).from(schedules).where(and16(
         eq17(schedules.projectId, projects.id),
         eq17(schedules.kind, SchedulableRunKinds.doctor)
       ))
@@ -14812,7 +14957,7 @@ var Scheduler = class {
       this.stopTask(key, existing, "Stopped");
       this.tasks.delete(key);
     }
-    const schedule = this.db.select().from(schedules).where(and15(eq17(schedules.projectId, projectId), eq17(schedules.kind, kind))).get();
+    const schedule = this.db.select().from(schedules).where(and16(eq17(schedules.projectId, projectId), eq17(schedules.kind, kind))).get();
     if (schedule && schedule.enabled) {
       this.registerCronTask(schedule);
     }
@@ -14948,7 +15093,7 @@ var Scheduler = class {
       const result2 = tx.update(schedules).set({
         nextRunAt,
         updatedAt: nextScheduleUpdatedAt(current.updatedAt)
-      }).where(and15(
+      }).where(and16(
         eq17(schedules.id, current.id),
         eq17(schedules.enabled, true),
         eq17(schedules.nextRunAt, dueAt),
@@ -15027,10 +15172,10 @@ var Scheduler = class {
           log16.warn("ads-sync.no-callback", { scheduleId, projectId, msg: "host did not register onAdsSyncRequested" });
           return;
         }
-        const activeAdsRun = this.db.select({ id: runs.id }).from(runs).where(and15(
+        const activeAdsRun = this.db.select({ id: runs.id }).from(runs).where(and16(
           eq17(runs.projectId, projectId),
           eq17(runs.kind, RunKinds["ads-sync"]),
-          inArray7(runs.status, [RunStatuses.queued, RunStatuses.running])
+          inArray8(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (activeAdsRun) {
           log16.info("ads-sync.skipped-active", { projectName: project.name, activeRunId: activeAdsRun.id });
@@ -15098,10 +15243,10 @@ var Scheduler = class {
           log16.warn("site-audit.no-callback", { scheduleId, projectId, msg: "host did not register onSiteAuditRequested" });
           return;
         }
-        const active = this.db.select({ id: runs.id }).from(runs).where(and15(
+        const active = this.db.select({ id: runs.id }).from(runs).where(and16(
           eq17(runs.projectId, projectId),
           eq17(runs.kind, RunKinds["site-audit"]),
-          inArray7(runs.status, [RunStatuses.queued, RunStatuses.running])
+          inArray8(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (active) {
           log16.info("site-audit.skipped-active", { projectName: project.name, activeRunId: active.id });
@@ -15276,7 +15421,7 @@ function startSiteLivenessLoop(deps, intervalMs = SITE_LIVENESS_INTERVAL_MS) {
 }
 
 // src/provider-batch-poller.ts
-import { and as and16, eq as eq18, inArray as inArray8, isNotNull as isNotNull2, isNull as isNull2, notExists as notExists2, sql as sql8 } from "drizzle-orm";
+import { and as and17, eq as eq18, inArray as inArray9, isNotNull as isNotNull2, isNull as isNull2, notExists as notExists2, sql as sql8 } from "drizzle-orm";
 var log18 = createLogger("ProviderBatchPoller");
 var PROVIDER_BATCH_POLL_INITIAL_MS = 3e4;
 var PROVIDER_BATCH_POLL_MAX_MS = 10 * 6e4;
@@ -15293,7 +15438,7 @@ var ProviderBatchPoller = class {
   /** One pass: advance every outstanding batch that is due, then finalize what that settled. */
   async tick() {
     const { db } = this.deps;
-    const rows = db.select().from(providerBatches).where(inArray8(providerBatches.status, [...OUTSTANDING_PROVIDER_BATCH_STATUSES])).all();
+    const rows = db.select().from(providerBatches).where(inArray9(providerBatches.status, [...OUTSTANDING_PROVIDER_BATCH_STATUSES])).all();
     const live = new Set(rows.map((row) => row.id));
     for (const id of this.schedule.keys()) if (!live.has(id)) this.schedule.delete(id);
     const settledRuns = /* @__PURE__ */ new Map();
@@ -15336,7 +15481,7 @@ var ProviderBatchPoller = class {
         status = poll.status;
         if (poll.status === "ended") {
           const endedAt = poll.endedAt ?? new Date(this.now()).toISOString();
-          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and16(eq18(providerBatches.id, row.id), eq18(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and17(eq18(providerBatches.id, row.id), eq18(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
           this.schedule.delete(row.id);
           return ended ? this.ingest({ ...row, status: ProviderBatchStatuses.ended, resultsExpireAt: poll.resultsExpireAt ?? null }) : false;
         }
@@ -15360,7 +15505,7 @@ var ProviderBatchPoller = class {
     const at = new Date(now).toISOString();
     if (row.cancelRequestedAt === null) {
       if (now < Date.parse(row.deadlineAt)) return false;
-      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and16(
+      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and17(
         eq18(providerBatches.id, row.id),
         eq18(providerBatches.status, ProviderBatchStatuses.submitted),
         isNull2(providerBatches.cancelRequestedAt)
@@ -15381,7 +15526,7 @@ var ProviderBatchPoller = class {
       status: ProviderBatchStatuses.cancelled,
       error: `The provider batch did not end within an hour of being cancelled at its deadline; its ${row.requestCount} answer(s) were not recorded.`,
       updatedAt: at
-    }).where(and16(eq18(providerBatches.id, row.id), eq18(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+    }).where(and17(eq18(providerBatches.id, row.id), eq18(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
     this.schedule.delete(row.id);
     if (gaveUp) log18.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
     return gaveUp;
@@ -15421,10 +15566,10 @@ var ProviderBatchPoller = class {
   /** Runs the sweep handed off whose batches have all settled. */
   finalizableRuns() {
     const holding = [ProviderBatchStatuses.submitting, ...OUTSTANDING_PROVIDER_BATCH_STATUSES];
-    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and16(
+    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and17(
       eq18(runs.status, RunStatuses.running),
       isNotNull2(runs.pendingProviderErrors),
-      notExists2(this.deps.db.select({ one: sql8`1` }).from(providerBatches).where(and16(eq18(providerBatches.runId, runs.id), inArray8(providerBatches.status, holding))))
+      notExists2(this.deps.db.select({ one: sql8`1` }).from(providerBatches).where(and17(eq18(providerBatches.runId, runs.id), inArray9(providerBatches.status, holding))))
     )).all();
   }
 };
@@ -15495,7 +15640,7 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 }
 
 // src/notifier.ts
-import { eq as eq19, desc as desc8, and as and17, inArray as inArray9, or } from "drizzle-orm";
+import { eq as eq19, desc as desc8, and as and18, inArray as inArray10, or } from "drizzle-orm";
 import crypto22 from "crypto";
 var log20 = createLogger("Notifier");
 var MATERIAL_MAGNITUDE_DELTA = 20;
@@ -15880,8 +16025,8 @@ var Notifier = class {
     }
   }
   async dispatchQueuedReviewAlerts(projectId) {
-    const pendingReviews = this.db.select().from(gbpReviews).where(and17(eq19(gbpReviews.projectId, projectId), eq19(gbpReviews.alertState, "pending"))).all();
-    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and17(eq19(gbpReviewRatings.projectId, projectId), eq19(gbpReviewRatings.alertState, "pending"))).all();
+    const pendingReviews = this.db.select().from(gbpReviews).where(and18(eq19(gbpReviews.projectId, projectId), eq19(gbpReviews.alertState, "pending"))).all();
+    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and18(eq19(gbpReviewRatings.projectId, projectId), eq19(gbpReviewRatings.alertState, "pending"))).all();
     if (pendingReviews.length === 0 && pendingRatings.length === 0) return { reviews: 0, ratingDrops: 0, delivered: 0 };
     const project = this.db.select().from(projects).where(eq19(projects.id, projectId)).get();
     if (!project) return { reviews: 0, ratingDrops: 0, delivered: 0 };
@@ -15897,7 +16042,7 @@ var Notifier = class {
       }).from(gbpLocations).where(eq19(gbpLocations.projectId, projectId)).all().map((loc) => [loc.locationName, loc])
     );
     const v4HasWorked = new Set(
-      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and17(eq19(gbpReviewRatings.projectId, projectId), eq19(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
+      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and18(eq19(gbpReviewRatings.projectId, projectId), eq19(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
     );
     const coveredByBusinessProfile = (locationName) => businessProfileReviewsCover(locations.get(locationName)?.reviewsAccess ?? null, v4HasWorked.has(locationName));
     const locationRef = (locationName) => {
@@ -15906,11 +16051,11 @@ var Notifier = class {
     };
     const setReviewState = (ids, alertState) => {
       if (ids.length === 0) return;
-      this.db.update(gbpReviews).set({ alertState, alertStateAt: nowIso }).where(inArray9(gbpReviews.id, ids)).run();
+      this.db.update(gbpReviews).set({ alertState, alertStateAt: nowIso }).where(inArray10(gbpReviews.id, ids)).run();
     };
     const setRatingState = (ids, alertState) => {
       if (ids.length === 0) return;
-      this.db.update(gbpReviewRatings).set({ alertState, alertStateAt: nowIso }).where(inArray9(gbpReviewRatings.id, ids)).run();
+      this.db.update(gbpReviewRatings).set({ alertState, alertStateAt: nowIso }).where(inArray10(gbpReviewRatings.id, ids)).run();
     };
     const reviewsToSend = [];
     for (const row of pendingReviews) {
@@ -16012,7 +16157,7 @@ var Notifier = class {
       });
       return [];
     }
-    const groupSiblings = this.db.select().from(runs).where(and17(
+    const groupSiblings = this.db.select().from(runs).where(and18(
       eq19(runs.projectId, projectId),
       eq19(runs.kind, thisRun.kind),
       eq19(runs.createdAt, thisRun.createdAt),
@@ -16039,7 +16184,7 @@ var Notifier = class {
     );
     const RECENT_FETCH_LIMIT = Math.max(8, locationCount * 4);
     const recentRuns = this.db.select().from(runs).where(
-      and17(
+      and18(
         eq19(runs.projectId, projectId),
         eq19(runs.kind, thisRun.kind),
         or(eq19(runs.status, "completed"), eq19(runs.status, "partial")),
@@ -16060,13 +16205,13 @@ var Notifier = class {
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(queries, eq19(querySnapshots.queryId, queries.id)).where(inArray9(querySnapshots.runId, currentRunIds)).all();
+    }).from(querySnapshots).leftJoin(queries, eq19(querySnapshots.queryId, queries.id)).where(inArray10(querySnapshots.runId, currentRunIds)).all();
     const previousSnapshots = this.db.select({
       queryId: querySnapshots.queryId,
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).where(inArray9(querySnapshots.runId, previousRunIds)).all();
+    }).from(querySnapshots).where(inArray10(querySnapshots.runId, previousRunIds)).all();
     const prevMap = /* @__PURE__ */ new Map();
     for (const s of previousSnapshots) {
       if (s.queryId == null) continue;
@@ -17377,6 +17522,8 @@ function mcpToAgentTool(tool, ctx) {
   return adapted;
 }
 var AERO_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
+  // Reloading install-wide credentials remains an explicit operator action.
+  CanonryMcpToolNames.canonry_providers_reload,
   // Aero reads stored sentiment. Configuration and backfill submission can
   // start paid classifier work and remain operator actions.
   "canonry_sentiment_configure",
@@ -17838,7 +17985,7 @@ function splitAeroAnthropicSystemCachePayload(payload, model) {
 // src/agent/runtime.ts
 import { z } from "zod";
 import { randomUUID as randomUUID3 } from "crypto";
-import { isDeepStrictEqual } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 import {
   Type as Type4,
   createInitialSystemMessage,
@@ -17901,7 +18048,7 @@ function resolvePageReferences(runtime, tool, params) {
     const page = runtime.pageReferences.get(value);
     if (!page) throw new Error("This Aero page reference is no longer available. Read the first page again with the original filters.");
     const inherited = { ...page.params, ...resolved };
-    if (page.tool !== tool || page.parameter !== parameter || !isDeepStrictEqual(page.selection, pageSelection(tool, inherited, parameter))) {
+    if (page.tool !== tool || page.parameter !== parameter || !isDeepStrictEqual2(page.selection, pageSelection(tool, inherited, parameter))) {
       throw new Error("Use this Aero page reference with the same tool and original filters; only limit, queryLimit or attemptLimit may change.");
     }
     resolved = { ...inherited, [parameter]: page.token };
@@ -18663,7 +18810,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
 
 // src/agent/memory-store.ts
 import crypto25 from "crypto";
-import { and as and18, desc as desc9, eq as eq21, like, sql as sql9, or as or2 } from "drizzle-orm";
+import { and as and19, desc as desc9, eq as eq21, like, sql as sql9, or as or2 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto(row) {
@@ -18708,19 +18855,19 @@ function upsertMemoryEntry(db, args) {
       updatedAt: now
     }
   }).run();
-  const row = db.select().from(agentMemory).where(and18(eq21(agentMemory.projectId, args.projectId), eq21(agentMemory.key, args.key))).get();
+  const row = db.select().from(agentMemory).where(and19(eq21(agentMemory.projectId, args.projectId), eq21(agentMemory.key, args.key))).get();
   if (!row) throw new Error("memory upsert produced no row");
   return rowToDto(row);
 }
 function deleteMemoryEntry(db, projectId, key) {
-  const result2 = db.delete(agentMemory).where(and18(eq21(agentMemory.projectId, projectId), eq21(agentMemory.key, key))).run();
+  const result2 = db.delete(agentMemory).where(and19(eq21(agentMemory.projectId, projectId), eq21(agentMemory.key, key))).run();
   const changes = result2.changes ?? 0;
   return changes > 0;
 }
 function loadRecentForHydrate(db, projectId, limit, sessionId) {
   if (sessionId === void 0) return listMemoryEntries(db, projectId, { limit });
   const sessionPrefix = `compaction:${sessionId ?? ""}:`;
-  return db.select().from(agentMemory).where(and18(
+  return db.select().from(agentMemory).where(and19(
     eq21(agentMemory.projectId, projectId),
     or2(sql9`substr(${agentMemory.key}, 1, ${COMPACTION_KEY_PREFIX.length}) <> ${COMPACTION_KEY_PREFIX}`, sessionId ? sql9`substr(${agentMemory.key}, 1, ${sessionPrefix.length}) = ${sessionPrefix}` : void 0)
   )).orderBy(desc9(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
@@ -18747,7 +18894,7 @@ function writeCompactionNote(db, args) {
     }).run();
     const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
     const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
-      and18(
+      and19(
         eq21(agentMemory.projectId, args.projectId),
         like(agentMemory.key, `${sessionPrefix}%`)
       )
@@ -18756,7 +18903,7 @@ function writeCompactionNote(db, args) {
     if (stale.length > 0) {
       tx.delete(agentMemory).where(sql9`${agentMemory.id} IN (${sql9.join(stale.map((s) => sql9`${s}`), sql9`, `)})`).run();
     }
-    const row = tx.select().from(agentMemory).where(and18(eq21(agentMemory.projectId, args.projectId), eq21(agentMemory.key, key))).get();
+    const row = tx.select().from(agentMemory).where(and19(eq21(agentMemory.projectId, args.projectId), eq21(agentMemory.key, key))).get();
     if (row) inserted = rowToDto(row);
   });
   if (!inserted) throw new Error("compaction note write produced no row");
@@ -18764,7 +18911,7 @@ function writeCompactionNote(db, args) {
 }
 
 // src/agent/project-shape.ts
-import { and as and19, count as count2, eq as eq22 } from "drizzle-orm";
+import { and as and20, count as count2, eq as eq22 } from "drizzle-orm";
 var ADVANCED_TOOLS = [
   "canonry_measurement_portfolio_summary",
   "canonry_measurement_overview",
@@ -18792,7 +18939,7 @@ var ADVANCED_ROUTES = [
 function aeroProjectShape(db, projectId) {
   try {
     const pointer = db.select().from(measurementPlans).where(eq22(measurementPlans.projectId, projectId)).get();
-    const version = pointer ? db.select().from(measurementPlanVersions).where(and19(
+    const version = pointer ? db.select().from(measurementPlanVersions).where(and20(
       eq22(measurementPlanVersions.projectId, projectId),
       eq22(measurementPlanVersions.id, pointer.activeVersionId)
     )).get() : void 0;
@@ -19586,7 +19733,7 @@ ${lines.join("\n")}
 
 // src/agent/viewer-sessions.ts
 import crypto27 from "crypto";
-import { and as and20, eq as eq24, isNotNull as isNotNull3, like as like2 } from "drizzle-orm";
+import { and as and21, eq as eq24, isNotNull as isNotNull3, like as like2 } from "drizzle-orm";
 var AERO_VIEWER_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
   CanonryMcpToolNames.canonry_ads_account,
   CanonryMcpToolNames.canonry_ads_geo_search,
@@ -19780,7 +19927,7 @@ var ViewerAeroSessions = class {
    */
   revokeOrphanedKeys() {
     try {
-      this.opts.db.delete(apiKeys).where(and20(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull3(apiKeys.delegatedUserId))).run();
+      this.opts.db.delete(apiKeys).where(and21(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull3(apiKeys.delegatedUserId))).run();
     } catch {
     }
   }
@@ -21147,20 +21294,20 @@ function clipText(value, length) {
 }
 
 // src/research-runner.ts
-import { and as and21, eq as eq27, inArray as inArray10, sql as sql10 } from "drizzle-orm";
+import { and as and22, eq as eq27, inArray as inArray11, sql as sql10 } from "drizzle-orm";
 var unfinishedResearchQueryStatuses = [ResearchQueryStatuses.queued, ResearchQueryStatuses.running];
 function finalResearchRunStatus(completed, failed) {
   if (failed === 0) return ResearchRunStatuses.completed;
   return completed > 0 ? ResearchRunStatuses.partial : ResearchRunStatuses.failed;
 }
 async function executeResearchRun(db, registry, runId, projectId) {
-  const run = db.select().from(researchRuns).where(and21(eq27(researchRuns.id, runId), eq27(researchRuns.projectId, projectId))).get();
+  const run = db.select().from(researchRuns).where(and22(eq27(researchRuns.id, runId), eq27(researchRuns.projectId, projectId))).get();
   if (!run || run.status !== ResearchRunStatuses.queued) return;
   const project = db.select().from(projects).where(eq27(projects.id, projectId)).get();
   if (!project) return;
   const provider = registry.get(run.provider);
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and21(eq27(researchRuns.id, runId), eq27(researchRuns.status, ResearchRunStatuses.queued))).run();
+  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and22(eq27(researchRuns.id, runId), eq27(researchRuns.status, ResearchRunStatuses.queued))).run();
   if (claim.changes !== 1) return;
   let reserved = 0;
   let dispatched = 0;
@@ -21195,7 +21342,7 @@ async function executeResearchRun(db, registry, runId, projectId) {
     await mapWithConcurrency(rows, Math.max(1, provider.config.quotaPolicy.maxConcurrency), async (row) => {
       try {
         const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and21(eq27(researchRunQueries.id, row.id), eq27(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
+        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and22(eq27(researchRunQueries.id, row.id), eq27(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
         const raw = await gate.run(async () => {
           dispatched++;
           return provider.adapter.executeTrackedQuery({ query: row.queryText, canonicalDomains: domains, competitorDomains, ...run.location ? { location: run.location } : {} }, config);
@@ -21223,7 +21370,7 @@ async function executeResearchRun(db, registry, runId, projectId) {
           citationState: determineCitationState(normalized, domains),
           rawResponse: raw.rawResponse,
           finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(and21(eq27(researchRunQueries.id, row.id), eq27(researchRunQueries.status, ResearchQueryStatuses.running))).run();
+        }).where(and22(eq27(researchRunQueries.id, row.id), eq27(researchRunQueries.status, ResearchQueryStatuses.running))).run();
         if (completed.changes === 1) incrementResearchProgress(db, runId, "completedQueries");
       } catch (error) {
         try {
@@ -21251,11 +21398,11 @@ function incrementResearchProgress(db, runId, column) {
 }
 function markResearchQueryFailed(db, runId, queryId, error) {
   const message = describeError(error);
-  const failed = db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error: message, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and21(eq27(researchRunQueries.id, queryId), inArray10(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
+  const failed = db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error: message, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and22(eq27(researchRunQueries.id, queryId), inArray11(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
   if (failed.changes === 1) incrementResearchProgress(db, runId, "failedQueries");
 }
 function markUnfinishedResearchQueriesFailed(db, runId, error) {
-  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and21(eq27(researchRunQueries.researchRunId, runId), inArray10(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
+  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and22(eq27(researchRunQueries.researchRunId, runId), inArray11(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
 }
 function finalizeResearchRun(db, runId, fatalError) {
   const rows = db.select({ status: researchRunQueries.status }).from(researchRunQueries).where(eq27(researchRunQueries.researchRunId, runId)).all();
@@ -21271,7 +21418,7 @@ function finalizeResearchRun(db, runId, fatalError) {
 }
 
 // src/google-marketing-sync.ts
-import { and as and22, eq as eq28, isNull as isNull3 } from "drizzle-orm";
+import { and as and23, eq as eq28, isNull as isNull3 } from "drizzle-orm";
 function safeErrorMessage(error) {
   const raw = describeError(error);
   return raw.replace(/(["']?authorization["']?\s*[:=]\s*["']?bearer\s+)[^\s,"'}]+/gi, "$1[redacted]").replace(/(["']?(?:developer|access|refresh|client)[_-]?(?:token|secret)["']?\s*[:=]\s*["']?)[^\s,"'}]+/gi, "$1[redacted]").replace(/[\r\n\t]+/g, " ").slice(0, 1e3);
@@ -21294,7 +21441,7 @@ function assertSnapshotContext(metadata2, expected) {
   }
 }
 function requireSyncRun(db, runId, projectId, kind) {
-  const run = db.select().from(runs).where(and22(
+  const run = db.select().from(runs).where(and23(
     eq28(runs.id, runId),
     eq28(runs.projectId, projectId),
     eq28(runs.kind, kind)
@@ -21310,7 +21457,7 @@ function markFailed(db, runId, projectId, kind, expectedStatus, error) {
     status: RunStatuses.failed,
     error: serializeRunError({ message: safeErrorMessage(error) }),
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(and22(
+  }).where(and23(
     eq28(runs.id, runId),
     eq28(runs.projectId, projectId),
     eq28(runs.kind, kind),
@@ -21318,7 +21465,7 @@ function markFailed(db, runId, projectId, kind, expectedStatus, error) {
   )).run();
 }
 function claimSyncRun(db, runId, projectId, kind, startedAt) {
-  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and22(
+  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and23(
     eq28(runs.id, runId),
     eq28(runs.projectId, projectId),
     eq28(runs.kind, kind),
@@ -21383,7 +21530,7 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and22(
+      }).where(and23(
         eq28(runs.id, runId),
         eq28(runs.projectId, projectId),
         eq28(runs.kind, RunKinds["google-ads-sync"]),
@@ -21404,7 +21551,7 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         lastMetricsSnapshotAt: result2.metrics?.metadata.capturedAt ?? connection.lastMetricsSnapshotAt,
         lastMetricsSnapshotId: result2.metrics?.metadata.id ?? connection.lastMetricsSnapshotId,
         updatedAt: finishedAt
-      }).where(and22(
+      }).where(and23(
         eq28(googleAdsConnections.id, connection.id),
         eq28(googleAdsConnections.projectId, projectId),
         eq28(googleAdsConnections.selectedCustomerId, connection.selectedCustomerId),
@@ -21473,7 +21620,7 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and22(
+      }).where(and23(
         eq28(runs.id, runId),
         eq28(runs.projectId, projectId),
         eq28(runs.kind, RunKinds["gtm-sync"]),
@@ -21491,7 +21638,7 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         lastSnapshotAt: snapshot.metadata.capturedAt,
         lastSnapshotId: snapshot.metadata.id,
         updatedAt: finishedAt
-      }).where(and22(
+      }).where(and23(
         eq28(gtmConnections.id, connection.id),
         eq28(gtmConnections.projectId, projectId),
         eq28(gtmConnections.selectedAccountId, connection.selectedAccountId),
@@ -21530,11 +21677,7 @@ var keylessFirstRunSetupByServer = /* @__PURE__ */ new WeakMap();
 function allowsKeylessFirstRunSetup(app) {
   return keylessFirstRunSetupByServer.get(app) ?? false;
 }
-var DEFAULT_QUOTA = {
-  maxConcurrency: 2,
-  maxRequestsPerMinute: 10,
-  maxRequestsPerDay: 1e3
-};
+var DEFAULT_QUOTA = DEFAULT_PROVIDER_QUOTA;
 var SESSION_COOKIE_NAME = "canonry_session";
 var SESSION_TTL_MS = 12 * 60 * 60 * 1e3;
 function effectiveProviderModels(registry) {
@@ -21609,19 +21752,47 @@ var BROWSER_ADAPTERS = [cdpChatgptAdapter];
 var adapterMap = Object.fromEntries(
   API_ADAPTERS.map((a) => [a.name, a])
 );
-function summarizeProviderConfig(config) {
+function summarizeProviderConfig(provider) {
+  const config = provider?.config;
   return {
-    configured: Boolean(config?.apiKey || config?.baseUrl),
+    configured: Boolean(config?.apiKey || config?.baseUrl || config?.vertexProject || config?.cdpEndpoint),
     model: config?.model ?? null,
     // baseUrl is surfaced for ALL providers, not just local — gemini/openai now
     // honor a custom endpoint, so repointing one must show in the settings
     // summary AND produce an audit diff. Omitting it for API providers would let
     // an endpoint redirect (a credential-exfiltration vector on a box where the
     // provider key is the carrier) happen with no audit trail.
-    baseUrl: config?.baseUrl ?? null,
-    quota: { ...config?.quota ?? DEFAULT_QUOTA }
+    baseUrl: config?.baseUrl ?? config?.cdpEndpoint ?? null,
+    quota: { ...config?.quotaPolicy ?? DEFAULT_QUOTA },
+    vertexProject: config?.vertexProject ?? null,
+    vertexRegion: config?.vertexRegion ?? null,
+    batch: config?.batch ?? null,
+    pricing: config?.pricing ?? null
   };
 }
+function providerSummaries(registry, config, includeBrowser = false) {
+  return [...API_ADAPTERS, ...includeBrowser ? BROWSER_ADAPTERS : []].map((adapter) => ({
+    name: adapter.name,
+    displayName: adapter.displayName,
+    keyUrl: adapter.keyUrl,
+    modelHint: `e.g. ${adapter.modelRegistry.defaultModel}`,
+    model: registry.get(adapter.name)?.config.model ?? void 0,
+    defaultModel: adapter.modelRegistry.defaultModel,
+    configured: Boolean(registry.get(adapter.name)),
+    quota: registry.get(adapter.name)?.config.quotaPolicy,
+    vertexConfigured: adapter.name === ProviderNames.gemini ? Boolean(config.providers?.gemini?.vertexProject) : void 0
+  }));
+}
+function runtimePathIdentity(runtimePath) {
+  if (runtimePath === ":memory:") return runtimePath;
+  const resolved = path8.resolve(runtimePath);
+  let directory = path8.dirname(resolved);
+  try {
+    directory = fs9.realpathSync(directory);
+  } catch {
+  }
+  return path8.join(directory, path8.basename(resolved));
+}
 var DASHBOARD_SCRYPT_KEYLEN = 64;
 var DASHBOARD_SCRYPT_COST = 1 << 15;
 var DASHBOARD_SCRYPT_MAXMEM = 64 * 1024 * 1024;
@@ -21932,6 +22103,10 @@ function createGoogleMarketingConfigCredentialStore(input) {
   };
 }
 async function createServer(opts) {
+  const runtimeConfigPath = path8.resolve(getConfigPath());
+  const runtimeConfigIdentity = runtimePathIdentity(runtimeConfigPath);
+  const runtimeDatabasePath = opts.config.database;
+  const runtimeDatabaseIdentity = runtimePathIdentity(runtimeDatabasePath);
   const embed = resolveEmbedConfig(process.env, opts.config);
   const operatorApiKeyIds = resolveOperatorApiKeyIds(process.env);
   const dashboardManagedRunKinds = resolveDashboardManagedRunKinds(process.env, opts.config);
@@ -21993,6 +22168,7 @@ async function createServer(opts) {
       quota: opts.config.geminiQuota
     };
   }
+  opts.config.providers = providers;
   try {
     const legacyRows = extractLegacyCredentials(opts.db);
     applyLegacyCredentials(legacyRows, opts.config);
@@ -22003,39 +22179,15 @@ async function createServer(opts) {
     });
   }
   log25.info("providers.configured", {
-    providers: Object.keys(providers).filter((k) => {
-      const p = providers[k];
-      return p?.apiKey || p?.baseUrl || p?.vertexProject;
-    })
+    providers: registeredProviderNames({ providers, cdp: opts.config.cdp })
   });
-  for (const adapter of API_ADAPTERS) {
-    const entry = providers[adapter.name];
-    if (!entry) continue;
-    const isConfigured = adapter.name === "local" ? !!entry.baseUrl : adapter.name === "gemini" ? !!(entry.apiKey || entry.vertexProject) : !!entry.apiKey;
-    if (isConfigured) {
-      registry.register(adapter, providerConfigFromEntry(adapter.name, entry, entry.quota ?? DEFAULT_QUOTA));
-    }
-  }
+  registry.replace(configuredProviderEntries(opts.config, API_ADAPTERS, cdpChatgptAdapter));
   for (const name of providersWithUnsupportedBatch(providers, (provider) => adapterMap[provider])) {
     log25.warn("provider.batch.unsupported", {
       provider: name,
       message: `providers.${name}.batch.enabled is true, but the ${name} adapter has no batch API; its sweeps run sync.`
     });
   }
-  const cdpConfig = opts.config.cdp;
-  if (cdpConfig?.host || cdpConfig?.port) {
-    const CDP_DEFAULT_QUOTA = {
-      maxConcurrency: 1,
-      maxRequestsPerMinute: 4,
-      maxRequestsPerDay: 200
-    };
-    const cdpEndpoint = `ws://${cdpConfig.host ?? "localhost"}:${cdpConfig.port ?? 9222}`;
-    registry.register(cdpChatgptAdapter, {
-      provider: "cdp:chatgpt",
-      cdpEndpoint,
-      quotaPolicy: cdpConfig.quota ?? CDP_DEFAULT_QUOTA
-    });
-  }
   const port = opts.config.port ?? 4100;
   const serverUrl = `http://localhost:${port}`;
   const jobRunner = new JobRunner(opts.db, registry, {
@@ -22566,7 +22718,7 @@ async function createServer(opts) {
         });
         if (!probed) return;
         const alreadySynced = opts.db.select().from(ccReleaseSyncs).where(
-          and23(
+          and24(
             eq29(ccReleaseSyncs.release, probed.release),
             eq29(ccReleaseSyncs.status, CcReleaseSyncStatuses.ready)
           )
@@ -22594,17 +22746,7 @@ async function createServer(opts) {
       runSiteAudit(runId, projectId, auditOpts);
     }
   });
-  const providerSummary = API_ADAPTERS.map((adapter) => ({
-    name: adapter.name,
-    displayName: adapter.displayName,
-    keyUrl: adapter.keyUrl,
-    modelHint: `e.g. ${adapter.modelRegistry.defaultModel}`,
-    model: registry.get(adapter.name)?.config.model,
-    defaultModel: adapter.modelRegistry.defaultModel,
-    configured: !!registry.get(adapter.name),
-    quota: registry.get(adapter.name)?.config.quotaPolicy,
-    vertexConfigured: adapter.name === "gemini" ? !!opts.config.providers?.gemini?.vertexProject : void 0
-  }));
+  const providerSummary = providerSummaries(registry, opts.config);
   const googleSettingsSummary = {
     configured: Boolean(
       opts.config.google?.clientId && opts.config.google?.clientSecret
@@ -22858,7 +23000,7 @@ async function createServer(opts) {
   const currentPasswordFingerprint = () => hashSessionToken(opts.config.dashboardPasswordHash ?? "");
   opts.db.delete(dashboardSessions).where(or3(
     eq29(dashboardSessions.apiKeyHash, ""),
-    and23(
+    and24(
       isNotNull4(dashboardSessions.passwordFingerprint),
       ne3(dashboardSessions.passwordFingerprint, currentPasswordFingerprint())
     )
@@ -22885,7 +23027,7 @@ async function createServer(opts) {
       currentApiKeyHash: apiKeys.keyHash,
       passwordFingerprint: dashboardSessions.passwordFingerprint,
       expiresAt: dashboardSessions.expiresAt
-    }).from(dashboardSessions).innerJoin(apiKeys, eq29(apiKeys.id, dashboardSessions.apiKeyId)).where(and23(eq29(dashboardSessions.tokenHash, tokenHash), isNull4(apiKeys.revokedAt))).get();
+    }).from(dashboardSessions).innerJoin(apiKeys, eq29(apiKeys.id, dashboardSessions.apiKeyId)).where(and24(eq29(dashboardSessions.tokenHash, tokenHash), isNull4(apiKeys.revokedAt))).get();
     if (!session) return null;
     const expiresAt = Date.parse(session.expiresAt);
     if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || session.apiKeyHash !== session.currentApiKeyHash || session.passwordFingerprint !== null && session.passwordFingerprint !== currentPasswordFingerprint()) {
@@ -23148,7 +23290,7 @@ async function createServer(opts) {
             opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq29(projects.id, projectId)).run();
             if (recomputeDebts.get(projectId) === debt) recomputeDebts.delete(projectId);
           } else if (debt.latestFull === 0) {
-            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and23(eq29(projects.id, projectId), eq29(projects.answerFieldsRecompute, "full"))).run();
+            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and24(eq29(projects.id, projectId), eq29(projects.answerFieldsRecompute, "full"))).run();
           }
         } catch (err) {
           app.log.error({ err, projectId }, "could not clear the owed answer field recompute");
@@ -23238,6 +23380,34 @@ async function createServer(opts) {
     await sentimentPoller.settled();
   });
   const providerModelCatalog = createProviderModelCatalog(registry);
+  const recordProviderChange = (name, before, after, auditContext) => {
+    const beforeConfig = summarizeProviderConfig(before);
+    const afterConfig = summarizeProviderConfig(after);
+    const apiKeyRotated = Boolean(before) && Boolean(after?.config.apiKey) && before?.config.apiKey !== after?.config.apiKey;
+    const credentialsChanged = before?.config.vertexCredentials !== after?.config.vertexCredentials;
+    if (!apiKeyRotated && !credentialsChanged && JSON.stringify(beforeConfig) === JSON.stringify(afterConfig)) return;
+    const affectedProjects = opts.db.select({ id: projects.id, providers: projects.providers }).from(projects).all().filter((project) => project.providers.length === 0 || project.providers.includes(name));
+    const projectIds = affectedProjects.length ? affectedProjects.map((project) => project.id) : [null];
+    for (const projectId of projectIds) {
+      writeAuditLog(opts.db, {
+        projectId,
+        actor: auditContext?.actor ?? "api",
+        userAgent: auditContext?.userAgent,
+        actorSession: auditContext?.actorSession,
+        credentialId: auditContext?.credentialId,
+        requestId: auditContext?.requestId,
+        action: after ? before ? "provider.updated" : "provider.created" : "provider.removed",
+        entityType: "provider",
+        entityId: name,
+        diff: {
+          before: before ? beforeConfig : null,
+          after: afterConfig,
+          ...apiKeyRotated ? { apiKeyRotated: true } : {},
+          ...credentialsChanged ? { credentialsChanged: true } : {}
+        }
+      });
+    }
+  };
   await app.register(apiRoutes, {
     db: opts.db,
     sentiment: {
@@ -23288,13 +23458,10 @@ async function createServer(opts) {
     // and would have thrown if the file were missing; tests that construct
     // `createServer` directly (bypassing `loadConfig`) won't have written
     // a config and shouldn't get 503s from a stub-missing file.
-    runtimeStatePaths: (() => {
-      const configPath = getConfigPath();
-      return {
-        databasePath: opts.config.database,
-        configPath: fs9.existsSync(configPath) ? configPath : null
-      };
-    })(),
+    runtimeStatePaths: {
+      databasePath: runtimeDatabasePath,
+      configPath: fs9.existsSync(runtimeConfigPath) ? runtimeConfigPath : null
+    },
     // Snapshot the bundled skill trees (version + file hashes) so the
     // `agent.skills.current` doctor check can flag a `~/.claude/skills/` install
     // that has drifted behind this build. Best-effort: if the bundled assets
@@ -23657,12 +23824,43 @@ async function createServer(opts) {
     getRunnableProviderNames: () => registry.getAll().map((provider) => provider.adapter.name),
     getEffectiveProviderModels: () => effectiveProviderModels(registry),
     getBatchEligibleProviderNames: () => batchEligibleProviderNames(registry),
+    onProviderReload: (input, auditContext) => {
+      if (input.configPath !== void 0 && (runtimePathIdentity(input.configPath) !== runtimeConfigIdentity || runtimePathIdentity(input.databasePath) !== runtimeDatabaseIdentity)) {
+        throw validationError("Provider reload identity does not match this running server.", {
+          reason: ProviderReloadErrorReasons["install-identity-mismatch"]
+        });
+      }
+      let loaded;
+      try {
+        loaded = loadConfig(runtimeConfigPath);
+      } catch {
+        throw validationError("Provider configuration could not be loaded; repair config.yaml and retry.");
+      }
+      const next = configuredProviderEntries(loaded, API_ADAPTERS, cdpChatgptAdapter);
+      assertProviderReloadKeepsPendingBatches(opts.db, registry.getAll(), next, jobRunner.getExecutingBatchRegistrations());
+      const nextByName = new Map(next.map((provider) => [provider.adapter.name, provider]));
+      const names = /* @__PURE__ */ new Set([...registry.getAll().map((provider) => provider.adapter.name), ...nextByName.keys()]);
+      opts.db.transaction(() => {
+        for (const name of names) recordProviderChange(name, registry.get(name), nextByName.get(name), auditContext);
+      });
+      registry.replace(next);
+      opts.config.providers = loaded.providers ?? {};
+      opts.config.cdp = loaded.cdp;
+      opts.config.geminiApiKey = loaded.geminiApiKey;
+      opts.config.geminiModel = loaded.geminiModel;
+      opts.config.geminiQuota = loaded.geminiQuota;
+      providerSummary.splice(0, providerSummary.length, ...providerSummaries(registry, opts.config));
+      return providerSummaries(registry, opts.config, true);
+    },
     onProviderUpdate: (providerName, apiKey, model, baseUrl, incomingQuota, auditContext) => {
       const name = providerName;
       if (!adapterMap[name]) return null;
       if (!opts.config.providers) opts.config.providers = {};
       const existing = opts.config.providers[name];
-      const beforeConfig = summarizeProviderConfig(existing);
+      const previousProvider = registry.get(name) ?? (existing ? {
+        adapter: adapterMap[name],
+        config: providerConfigFromEntry(name, existing, resolveProviderQuotaPolicy(existing.quota, DEFAULT_QUOTA))
+      } : void 0);
       const mergedQuota = incomingQuota ? { ...existing?.quota ?? DEFAULT_QUOTA, ...incomingQuota } : existing?.quota;
       opts.config.providers[name] = {
         apiKey: apiKey || existing?.apiKey,
@@ -23680,53 +23878,16 @@ async function createServer(opts) {
         ...existing?.pricing ? { pricing: existing.pricing } : {}
       };
       try {
-        saveConfigPatch(opts.config);
+        saveConfigPatch(fs9.existsSync(runtimeConfigPath) ? { providers: { [name]: opts.config.providers[name] } } : opts.config);
       } catch (err) {
         app.log.error({ err }, "Failed to save config");
         return null;
       }
-      const quota = opts.config.providers[name].quota ?? DEFAULT_QUOTA;
+      const quota = resolveProviderQuotaPolicy(opts.config.providers[name].quota, DEFAULT_QUOTA);
       registry.register(adapterMap[name], providerConfigFromEntry(name, opts.config.providers[name], quota));
-      const entry = providerSummary.find((p) => p.name === name);
-      if (entry) {
-        entry.configured = true;
-        entry.model = registry.get(name)?.config.model;
-        entry.quota = quota;
-        if (name === "gemini") {
-          entry.vertexConfigured = !!opts.config.providers?.[name]?.vertexProject;
-        }
-      }
-      const afterConfig = summarizeProviderConfig(opts.config.providers[name]);
-      const apiKeyRotated = Boolean(existing) && Boolean(apiKey) && apiKey !== existing?.apiKey;
-      if (apiKeyRotated || JSON.stringify(beforeConfig) !== JSON.stringify(afterConfig)) {
-        const diff = JSON.stringify({
-          before: existing ? beforeConfig : null,
-          after: afterConfig,
-          ...apiKeyRotated ? { apiKeyRotated: true } : {}
-        });
-        const affectedProjectIds = opts.db.select({ id: projects.id, providers: projects.providers }).from(projects).all().filter((project) => {
-          const configuredProviders = project.providers;
-          return configuredProviders.length === 0 || configuredProviders.includes(name);
-        }).map((project) => project.id);
-        const targetProjectIds = affectedProjectIds.length > 0 ? affectedProjectIds : [null];
-        const createdAt = (/* @__PURE__ */ new Date()).toISOString();
-        opts.db.insert(auditLog).values(
-          targetProjectIds.map((projectId) => ({
-            id: crypto29.randomUUID(),
-            projectId,
-            actor: auditContext?.actor ?? "api",
-            userAgent: auditContext?.userAgent ?? null,
-            actorSession: auditContext?.actorSession ?? null,
-            credentialId: auditContext?.credentialId ?? null,
-            requestId: auditContext?.requestId ?? null,
-            action: existing ? "provider.updated" : "provider.created",
-            entityType: "provider",
-            entityId: name,
-            diff,
-            createdAt
-          }))
-        ).run();
-      }
+      providerSummary.splice(0, providerSummary.length, ...providerSummaries(registry, opts.config));
+      const entry = providerSummary.find((provider) => provider.name === name);
+      opts.db.transaction(() => recordProviderChange(name, previousProvider, registry.get(name), auditContext));
       return {
         name,
         model: entry?.model,
@@ -23813,15 +23974,10 @@ async function createServer(opts) {
         app.log.error({ err }, "Failed to save CDP config");
         throw err;
       }
-      const CDP_DEFAULT_QUOTA = {
-        maxConcurrency: 1,
-        maxRequestsPerMinute: 4,
-        maxRequestsPerDay: 200
-      };
       registry.register(cdpChatgptAdapter, {
         provider: "cdp:chatgpt",
         cdpEndpoint: `ws://${host}:${port2}`,
-        quotaPolicy: opts.config.cdp.quota ?? CDP_DEFAULT_QUOTA
+        quotaPolicy: resolveProviderQuotaPolicy(opts.config.cdp.quota, DEFAULT_CDP_QUOTA)
       });
     },
     getCdpStatus: async () => {
@@ -24168,6 +24324,7 @@ export {
   detectAndTrackUpgrade,
   trackEvent,
   setTelemetryPreference,
+  registeredProviderNames,
   OPENAI_RETRIEVAL_CONTRACT,
   reparseStoredResult2 as reparseStoredResult,
   reparseStoredResult3 as reparseStoredResult2,