@canonry/canonry 7.58.4 → 7.58.5

package/assets/agent-workspace/skills/canonry/references/server-side-traffic.md

@@ -918,16 +918,24 @@ Cloudflare to redeliver after the visibility timeout.
 
 The source lease rejects concurrent scheduler and operator drains. A stale
 lease can be recovered after its expiry, and only its owner can release it.
-Receipts remain for Cloudflare's current 14-day platform maximum plus a replay
-margin. This stays safe even when the locally recorded retention is stale or
-lower than the Queue's actual setting.
-
-Each default Queue sync drains at most 10 batches of 100 messages: **1,000
-messages per tick**. Doctor reports a residual of 1–1,000 messages as within
-that budget. If no new messages arrive, the next scheduled sync can clear it.
-Doctor warns when more than 1,000 messages remain because one default tick
-cannot drain the residual. Run a manual sync to accelerate the drain. If the
-backlog remains above 1,000, shorten the `traffic-sync` schedule interval.
+Each sync reads the Queue's live message retention from Cloudflare and keeps
+receipts for that long plus a 10-minute replay margin, since a message can only
+be redelivered while it is retained. When the retention goes up, live receipts
+are extended to it; when it goes down, new receipts never expire before the
+newest receipt from the longer retention. If the read fails or returns no
+usable value, receipts keep Cloudflare's 14-day maximum plus the margin.
+
+Each Queue sync drains in batches of up to 100 messages for as long as
+Cloudflare reports a backlog, up to a 4-minute time limit per sync
+(`CANONRY_CLOUDFLARE_QUEUE_SYNC_DEADLINE_MS`, 30 seconds to 15 minutes) and a
+300-pull safety cap. Cloudflare can return a partial or briefly empty batch
+while a backlog waits, so a sync stops only when Cloudflare reports no backlog,
+two pulls in a row come back empty, or the limit is reached. If a pull fails
+after earlier batches were saved, the run ends `partial` and keeps them.
+Doctor treats a residual of up to 1,000 messages as normal (they arrived during
+the drain) and warns above that: the drain hit its limit before the Queue was
+empty. Shorten the `traffic-sync` interval or raise the time limit, or messages
+will pass the Queue's retention and be dropped.
 
 ## Syncing data
 
@@ -1074,9 +1082,9 @@ schedule. Recurring syncs are safe because of the adapter's overlap ring or
 durable Queue receipts.
 
 Keep the auto-created 30-minute schedule for Queue pull. The Worker sends one
-selected event in each Queue message. At its 1,000-message limit, this cadence
-drains about 0.56 selected events per second. If the Queue backlog remains
-above 1,000, run a manual sync. Then shorten the interval:
+selected event in each Queue message, and each sync drains for up to 4 minutes.
+If doctor reports more than 1,000 messages remaining after syncs, shorten the
+interval:
 
 ```bash
 cnry schedule set <project> --kind traffic-sync \

package/dist/{backfill-JAHDHVXJ.js → backfill-SINDWLD3.js}

@@ -10,7 +10,7 @@ import {
   backfillSnapshotAttributionCommand,
   backfillTrafficClassificationCommand,
   replayQueryAuditLog
-} from "./chunk-RXMGU7AF.js";
+} from "./chunk-O6TF6TPM.js";
 import "./chunk-BP5OKJIC.js";
 import "./chunk-TVANRUBO.js";
 import "./chunk-HGMYEDAQ.js";
@@ -18,7 +18,7 @@ import "./chunk-L7TKNHEX.js";
 import {
   backfillProjectAnswerMentions,
   backfillProjectAnswerMentionsInChunks
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import "./chunk-SCS7R2ND.js";

package/dist/{chunk-2DZYA62C.js → chunk-5D4RL23M.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-QFO7JHX2.js";
+} from "./chunk-A5F5E4DL.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NCIPNVD6.js";

package/dist/{chunk-NMLVLFF7.js → chunk-65YQFVJM.js}

@@ -14,7 +14,7 @@ import {
   mergeGscQueryTotalsWithFallback,
   readGscQueryDailyRows,
   readLatestGscDataDate
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import {
   getRequestContext
 } from "./chunk-27SGL3DF.js";

package/dist/{chunk-QFO7JHX2.js → chunk-A5F5E4DL.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,

package/dist/{chunk-CFGA6OAK.js → chunk-AP7YSOFC.js}

@@ -599,7 +599,7 @@ var DEMO_CLI_COMMANDS = [{
   options: { host: stringOption(), port: stringOption(), "trust-proxy": multiStringOption() },
   allowPositionals: false,
   run: async (input) => {
-    const { demoCommand } = await import("./demo-F5TRWB6V.js");
+    const { demoCommand } = await import("./demo-ZBNVULOO.js");
     await demoCommand({
       host: getString(input.values, "host"),
       port: getString(input.values, "port"),
@@ -620,7 +620,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillAnswerVisibilityCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillAnswerVisibilityCommand } = await import("./backfill-SINDWLD3.js");
       await backfillAnswerVisibilityCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -637,7 +637,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillAnswerMentionsCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillAnswerMentionsCommand } = await import("./backfill-SINDWLD3.js");
       await backfillAnswerMentionsCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -655,7 +655,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillInsightsCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillInsightsCommand } = await import("./backfill-SINDWLD3.js");
       const usage = "canonry backfill insights <project> [--from-run <id>] [--to-run <id>] [--since <date>] [--dry-run] [--format json]";
       const project3 = requireProject(input, "backfill insights", usage);
       await backfillInsightsCommand(project3, {
@@ -675,7 +675,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { backfillNormalizedPathsCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillNormalizedPathsCommand } = await import("./backfill-SINDWLD3.js");
       await backfillNormalizedPathsCommand({
         project: getString(input.values, "project"),
         format: input.format
@@ -690,7 +690,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { backfillAiReferralPathsCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillAiReferralPathsCommand } = await import("./backfill-SINDWLD3.js");
       await backfillAiReferralPathsCommand({
         project: getString(input.values, "project"),
         format: input.format
@@ -702,7 +702,7 @@ var BACKFILL_CLI_COMMANDS = [
     usage: "canonry backfill snapshot-attribution <project> [--dry-run] [--format json]",
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillSnapshotAttributionCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillSnapshotAttributionCommand } = await import("./backfill-SINDWLD3.js");
       const usage = "canonry backfill snapshot-attribution <project> [--dry-run] [--format json]";
       const project3 = requireProject(input, "backfill snapshot-attribution", usage);
       await backfillSnapshotAttributionCommand({
@@ -721,7 +721,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillTrafficClassificationCommand } = await import("./backfill-JAHDHVXJ.js");
+      const { backfillTrafficClassificationCommand } = await import("./backfill-SINDWLD3.js");
       await backfillTrafficClassificationCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -1163,7 +1163,7 @@ var DASHBOARD_CLI_COMMANDS = [
     usage: "canonry dashboard reset-password [--format json]",
     help: "Clears the dashboard password from config.yaml, so the dashboard asks for a new one after a restart.\nLocal only: it edits the config file under CANONRY_CONFIG_DIR and does not call the server.",
     run: async (input) => {
-      const { resetDashboardPassword } = await import("./dashboard-2P3TEH6S.js");
+      const { resetDashboardPassword } = await import("./dashboard-VT3GQRW4.js");
       await resetDashboardPassword({ format: input.format });
     }
   },
@@ -6615,7 +6615,7 @@ var SYSTEM_CLI_COMMANDS = [
     options: { access: stringOption() },
     run: async (input) => {
       if (input.positionals.length > 1) throw usageError("Expected at most one command group");
-      const [{ printCliCatalog }, { REGISTERED_CLI_COMMANDS: REGISTERED_CLI_COMMANDS2 }] = await Promise.all([import("./cli-catalog-PJYR3JHX.js"), import("./cli-commands-JBLV55EA.js")]);
+      const [{ printCliCatalog }, { REGISTERED_CLI_COMMANDS: REGISTERED_CLI_COMMANDS2 }] = await Promise.all([import("./cli-catalog-PJYR3JHX.js"), import("./cli-commands-ZPW3OST3.js")]);
       printCliCatalog(REGISTERED_CLI_COMMANDS2, input.format, input.positionals[0], getString(input.values, "access"));
     }
   },
@@ -6664,7 +6664,7 @@ var SYSTEM_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { initCommand } = await import("./init-LABWY7HI.js");
+      const { initCommand } = await import("./init-C2DLDK6T.js");
       await initCommand({
         force: getBoolean(input.values, "force"),
         ref: getString(input.values, "ref"),
@@ -6719,7 +6719,7 @@ var SYSTEM_CLI_COMMANDS = [
     allowPositionals: false,
     run: async (input) => {
       applyServerEnv(input.values);
-      const { serveCommand } = await import("./serve-3WJL5N2Z.js");
+      const { serveCommand } = await import("./serve-ME2KJ6BG.js");
       await serveCommand(input.format);
     }
   },
@@ -8027,8 +8027,8 @@ var AGENT_CLI_COMMANDS = [
       "timeout-ms": stringOption()
     },
     run: async (input) => {
-      const { coerceAgentProvider } = await import("./session-VTFLD3C5.js");
-      const { AERO_TOOL_PROFILES, isAeroToolProfile } = await import("./tools-LRHO7QOT.js");
+      const { coerceAgentProvider } = await import("./session-R3PRJ3RB.js");
+      const { AERO_TOOL_PROFILES, isAeroToolProfile } = await import("./tools-VZVQ2CTU.js");
       const { agentAsk } = await import("./agent-ask-XG7WQBX6.js");
       const usage = `canonry agent ask <project> "<prompt>" [--provider ${AGENT_PROVIDER_IDS.join("|")}] [--model <id>] [--scope all|read-only] [--profile default|ads-operator] [--context <json>] [--conversation <id>] [--max-tool-calls <n>] [--timeout-ms <ms>] [--format json]`;
       const project3 = requireProject(input, "agent.ask", usage);

package/dist/{chunk-6A6BD5KS.js → chunk-CYVQW32W.js}

@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-2DZYA62C.js";
+} from "./chunk-5D4RL23M.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-QFO7JHX2.js";
+} from "./chunk-A5F5E4DL.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -162,7 +162,7 @@ import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-NMLVLFF7.js";
+} from "./chunk-65YQFVJM.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
@@ -265,6 +265,7 @@ import {
   registerOAuthAdminRoutes,
   registerOAuthRoutes,
   requireInstanceAdministrator,
+  resolveCloudflareQueueSyncDeadlineMs,
   resolveDestination,
   resolveMeasurementSitemapTarget,
   resolveTrustProxy,
@@ -284,7 +285,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -5656,7 +5657,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "defc4dd5f82b7402ab8fc0b78cd5ac850deb3e35" : void 0;
+  const embedded = true ? "9a896bfe2e40ca556ac3d4d8e35a39ad0f9060f5" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -20519,6 +20520,7 @@ async function createServer(opts) {
     // was previously reachable only from tests, so a source losing ground could
     // not be rescued without shipping code. Unset keeps the built-in default.
     vercelSyncDeadlineMs: resolveVercelSyncDeadlineMs(process.env),
+    cloudflareQueueSyncDeadlineMs: resolveCloudflareQueueSyncDeadlineMs(process.env),
     researchAllowViewers,
     researchViewerDailyRunLimit,
     // Local-only Aero agent routes. Registered here so they inherit api-routes'

package/dist/{chunk-BNGGUL7F.js → chunk-NWYNTYPD.js}

@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-3WJL5N2Z.js");
+  const { serveCommand } = await import("./serve-ME2KJ6BG.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-RXMGU7AF.js → chunk-O6TF6TPM.js}

@@ -23,7 +23,7 @@ import {
   createRunCompetitorResolver,
   readMarketCompetitorNames,
   refreshSnapshotMentionIdentity
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import {
   classifyAiUserFetch,
   classifyCrawler
@@ -437,7 +437,7 @@ No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-4PHEK5F4.js");
+  const { IntelligenceService } = await import("./intelligence-service-R5BRSQKI.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-NWQQYLZV.js → chunk-QEJBAPDP.js}

@@ -59714,7 +59714,7 @@ async function backlinksRoutes(app, opts) {
 import crypto51 from "crypto";
 import { isIP } from "net";
 import { isDeepStrictEqual } from "util";
-import { and as and68, desc as desc38, eq as eq79, gte as gte18, inArray as inArray33, lte as lte19, sql as sql29 } from "drizzle-orm";
+import { and as and68, desc as desc38, eq as eq79, gt as gt6, gte as gte18, inArray as inArray33, lt as lt12, lte as lte19, sql as sql29 } from "drizzle-orm";
 
 // ../api-routes/src/cloudflare-worker-version.ts
 var CURRENT_CLOUDFLARE_WORKER_VERSION = "1.0.1";
@@ -59723,8 +59723,9 @@ var CURRENT_CLOUDFLARE_WORKER_VERSION = "1.0.1";
 var VERCEL_MAX_SYNC_WINDOW_MS = 24 * 60 * 6e4;
 var DEFAULT_VERCEL_SYNC_DEADLINE_MS = 4 * 6e4;
 var CLOUDFLARE_QUEUE_BATCH_SIZE = 100;
-var DEFAULT_CLOUDFLARE_QUEUE_MAX_BATCHES = 10;
-var DEFAULT_CLOUDFLARE_QUEUE_DRAIN_BUDGET = CLOUDFLARE_QUEUE_BATCH_SIZE * DEFAULT_CLOUDFLARE_QUEUE_MAX_BATCHES;
+var DEFAULT_CLOUDFLARE_QUEUE_SYNC_DEADLINE_MS = 4 * 6e4;
+var DEFAULT_CLOUDFLARE_QUEUE_MAX_BATCHES = 300;
+var CLOUDFLARE_QUEUE_RESIDUAL_WARN_COUNT = 1e3;
 var MIN_VERCEL_SYNC_DEADLINE_MS = 3e4;
 var MAX_VERCEL_SYNC_DEADLINE_MS = 15 * 6e4;
 var TRAFFIC_SOURCE_MAX_CATCHUP_MS = {
@@ -59737,6 +59738,13 @@ function resolveVercelSyncDeadlineMs(env = process.env) {
   if (!Number.isFinite(parsed) || parsed <= 0) return void 0;
   return Math.min(MAX_VERCEL_SYNC_DEADLINE_MS, Math.max(MIN_VERCEL_SYNC_DEADLINE_MS, Math.trunc(parsed)));
 }
+function resolveCloudflareQueueSyncDeadlineMs(env = process.env) {
+  const raw = env.CANONRY_CLOUDFLARE_QUEUE_SYNC_DEADLINE_MS;
+  if (raw === void 0 || raw.trim() === "") return void 0;
+  const parsed = Number(raw);
+  if (!Number.isFinite(parsed) || parsed <= 0) return void 0;
+  return Math.min(MAX_VERCEL_SYNC_DEADLINE_MS, Math.max(MIN_VERCEL_SYNC_DEADLINE_MS, Math.trunc(parsed)));
+}
 
 // ../integration-cloud-run/src/auth.ts
 import crypto49 from "crypto";
@@ -60723,8 +60731,11 @@ function resolveOptions(options) {
     sleep: options.sleep
   };
 }
+function queueUrl(options) {
+  return `${options.apiBaseUrl}/accounts/${encodeURIComponent(options.accountId)}/queues/${encodeURIComponent(options.queueId)}`;
+}
 function queueMessagesUrl(options, action) {
-  return `${options.apiBaseUrl}/accounts/${encodeURIComponent(options.accountId)}/queues/${encodeURIComponent(options.queueId)}/messages/${action}`;
+  return `${queueUrl(options)}/messages/${action}`;
 }
 function requestSignal(timeoutMs, signal) {
   const timeout = AbortSignal.timeout(timeoutMs);
@@ -60768,16 +60779,20 @@ async function withQueueRetry(attempt, options) {
   throw lastError;
 }
 async function postJson(options, action, body, signal) {
+  return requestJson(options, { method: "POST", url: queueMessagesUrl(options, action), label: action, body }, signal);
+}
+async function requestJson(options, request, signal) {
+  const { label: action } = request;
   return withQueueRetry(async () => {
     let response;
     try {
-      response = await options.fetchImpl(queueMessagesUrl(options, action), {
-        method: "POST",
+      response = await options.fetchImpl(request.url, {
+        method: request.method,
         headers: {
           Authorization: `Bearer ${options.apiToken}`,
-          "Content-Type": "application/json"
+          ...request.body ? { "Content-Type": "application/json" } : {}
         },
-        body: JSON.stringify(body),
+        ...request.body ? { body: JSON.stringify(request.body) } : {},
         signal: requestSignal(options.timeoutMs, signal)
       });
     } catch (error) {
@@ -60795,7 +60810,10 @@ async function postJson(options, action, body, signal) {
     }
     try {
       return await response.json();
-    } catch {
+    } catch (error) {
+      if (isAbortError(error)) {
+        throw new CloudflareQueueApiError("Cloudflare Queue request timed out or was aborted", 408);
+      }
       throw new CloudflareQueueApiError(`Cloudflare Queue ${action} returned invalid JSON`, 502);
     }
   }, {
@@ -60996,6 +61014,19 @@ function normalizeRetries(retries) {
     return { leaseId, ...retry.delaySeconds === void 0 ? {} : { delaySeconds: retry.delaySeconds } };
   });
 }
+var CLOUDFLARE_QUEUE_MAX_RETENTION_SECONDS = 14 * 24 * 60 * 60;
+var MIN_RETENTION_SECONDS = 60;
+var SANITY_MAX_RETENTION_SECONDS = 10 * 365 * 24 * 60 * 60;
+function recordOrNull(value) {
+  return value != null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+async function getCloudflareQueueRetentionSeconds(client, signal) {
+  const resolved = resolveOptions(client);
+  const envelope = recordOrNull(await requestJson(resolved, { method: "GET", url: queueUrl(resolved), label: "read" }, signal));
+  if (envelope?.success !== true) return null;
+  const seconds = recordOrNull(recordOrNull(envelope.result)?.settings)?.message_retention_period;
+  return typeof seconds === "number" && Number.isInteger(seconds) && seconds >= MIN_RETENTION_SECONDS && seconds <= SANITY_MAX_RETENTION_SECONDS ? seconds : null;
+}
 async function pullCloudflareQueueMessages(client, options = {}) {
   const resolved = resolveOptions(client);
   const body = {};
@@ -61421,7 +61452,10 @@ var MAX_BACKFILL_DAYS = 90;
 var BACKFILL_MAX_PAGES = 1e3;
 var BACKFILL_SAMPLE_LIMIT = 500;
 var CLOUDFLARE_INGEST_BODY_LIMIT = 256 * 1024;
-var CLOUDFLARE_QUEUE_RECEIPT_TTL_MS = 14 * 24 * 60 * 6e4 + 10 * 6e4;
+var CLOUDFLARE_QUEUE_RECEIPT_REPLAY_MARGIN_MS = 10 * 6e4;
+var CLOUDFLARE_QUEUE_RECEIPT_TTL_MS = CLOUDFLARE_QUEUE_MAX_RETENTION_SECONDS * 1e3 + CLOUDFLARE_QUEUE_RECEIPT_REPLAY_MARGIN_MS;
+var DAY_MS2 = 24 * 60 * 6e4;
+var CLOUDFLARE_QUEUE_RETENTION_READ_TIMEOUT_MS = 1e4;
 var CLOUDFLARE_QUEUE_VISIBILITY_TIMEOUT_MS = 5 * 6e4;
 var CLOUDFLARE_QUEUE_SYNC_LEASE_TTL_MS = 5 * 6e4;
 var WORDPRESS_SYNC_LEASE_TTL_MS = 5 * 6e4;
@@ -61440,6 +61474,35 @@ function timingSafeEqualHex(a, b) {
   const right = Buffer.from(b, "hex");
   return left.length === right.length && crypto51.timingSafeEqual(left, right);
 }
+async function loadQueueReceiptPolicy(db, sourceId, readRetentionSeconds, warn2) {
+  let liveTtlMs = null;
+  try {
+    const seconds = await readRetentionSeconds();
+    if (seconds === null) {
+      warn2({}, "Cloudflare reported no usable Queue retention; keeping dedupe receipts for the maximum retention");
+    } else {
+      liveTtlMs = seconds * 1e3 + CLOUDFLARE_QUEUE_RECEIPT_REPLAY_MARGIN_MS;
+    }
+  } catch (error) {
+    warn2(
+      error instanceof CloudflareQueueApiError ? { status: error.status, error: error.message } : { error: "unexpected error" },
+      "Could not read Cloudflare Queue retention; keeping dedupe receipts for the maximum retention"
+    );
+  }
+  if (liveTtlMs === null) return { ttlMsAt: () => CLOUDFLARE_QUEUE_RECEIPT_TTL_MS };
+  const ttlMs = liveTtlMs;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const alive = and68(eq79(trafficEventReceipts.sourceId, sourceId), gt6(trafficEventReceipts.expiresAt, now));
+  const lifetimeMs = sql29`(julianday(${trafficEventReceipts.expiresAt}) - julianday(${trafficEventReceipts.receivedAt})) * ${DAY_MS2}`;
+  const shortest = db.select({ ms: sql29`min(${lifetimeMs})` }).from(trafficEventReceipts).where(alive).get()?.ms ?? null;
+  if (shortest !== null && shortest < ttlMs - 1e3) {
+    const extended = sql29`strftime('%Y-%m-%dT%H:%M:%fZ', julianday(${trafficEventReceipts.receivedAt}) + ${ttlMs / DAY_MS2})`;
+    db.update(trafficEventReceipts).set({ expiresAt: extended }).where(and68(alive, lt12(trafficEventReceipts.expiresAt, extended))).run();
+  }
+  const floorExpiry = db.select({ at: sql29`max(${trafficEventReceipts.expiresAt})` }).from(trafficEventReceipts).where(and68(alive, sql29`${lifetimeMs} < ${CLOUDFLARE_QUEUE_RECEIPT_TTL_MS - 1e3}`)).get()?.at ?? null;
+  const floorMs = floorExpiry ? Date.parse(floorExpiry) : 0;
+  return { ttlMsAt: (receivedAt) => Math.max(ttlMs, floorMs - Date.parse(receivedAt)) };
+}
 function parseDirectPushCloudflareSourceConfig(config) {
   const parsed = cloudflareTrafficSourceConfigSchema.safeParse(config);
   return parsed.success && parsed.data.deliveryMode === CloudflareTrafficDeliveryModes["direct-push"] ? parsed.data : null;
@@ -62139,9 +62202,11 @@ async function trafficRoutes(app, opts) {
   const pullVercelEvents = opts.pullVercelTrafficEvents ?? listVercelTrafficEvents;
   const pullQueueMessages = opts.pullCloudflareQueueMessages ?? pullCloudflareQueueMessages;
   const ackQueueMessages = opts.ackCloudflareQueueMessages ?? ackCloudflareQueueMessages;
+  const readQueueRetentionSeconds = opts.getCloudflareQueueRetentionSeconds ?? getCloudflareQueueRetentionSeconds;
   const cloudflareQueueMaxBatches = opts.cloudflareQueueMaxBatches ?? DEFAULT_CLOUDFLARE_QUEUE_MAX_BATCHES;
-  if (!Number.isInteger(cloudflareQueueMaxBatches) || cloudflareQueueMaxBatches < 1 || cloudflareQueueMaxBatches > 50) {
-    throw new RangeError("cloudflareQueueMaxBatches must be an integer from 1 to 50");
+  const cloudflareQueueSyncDeadlineMs = opts.cloudflareQueueSyncDeadlineMs ?? DEFAULT_CLOUDFLARE_QUEUE_SYNC_DEADLINE_MS;
+  if (!Number.isInteger(cloudflareQueueMaxBatches) || cloudflareQueueMaxBatches < 1 || cloudflareQueueMaxBatches > 1e3) {
+    throw new RangeError("cloudflareQueueMaxBatches must be an integer from 1 to 1000");
   }
   const allowLoopback = opts.allowLoopbackWebhooks === true;
   let rawSampleRetentionTimer;
@@ -63054,6 +63119,61 @@ async function trafficRoutes(app, opts) {
       const runId = crypto51.randomUUID();
       const startedAt = (/* @__PURE__ */ new Date()).toISOString();
       const startedMs = Date.now();
+      let acceptedEvents = 0;
+      let selfTrafficExcluded = 0;
+      let crawlerHits = 0;
+      let aiUserFetchHits = 0;
+      let aiReferralHits = 0;
+      let unknownHits = 0;
+      let crawlerBucketRows = 0;
+      let aiUserFetchBucketRows = 0;
+      let aiReferralBucketRows = 0;
+      let sampleRows = 0;
+      let committedAt = startedAt;
+      let remainingBacklogCount = 0;
+      let completedBatches = 0;
+      const finishSync = (status, error) => {
+        app.db.update(runs).set({ status, finishedAt: committedAt, ...error ? { error } : {} }).where(eq79(runs.id, runId)).run();
+        writeAuditLog(app.db, {
+          projectId: project.id,
+          actor: "api",
+          action: "traffic.cloudflare.queue-synced",
+          entityType: "traffic_source",
+          entityId: sourceRow2.id
+        });
+        try {
+          opts.onTrafficSynced?.({
+            status: "completed",
+            sourceType: sourceRow2.sourceType,
+            sourceId: sourceRow2.id,
+            pulledEvents: acceptedEvents,
+            selfTrafficExcluded,
+            crawlerHits,
+            aiUserFetchHits,
+            aiReferralHits,
+            durationMs: Date.now() - startedMs
+          });
+        } catch {
+        }
+        return {
+          sourceId: sourceRow2.id,
+          runId,
+          syncedAt: committedAt,
+          pulledEvents: acceptedEvents,
+          selfTrafficExcluded,
+          crawlerHits,
+          aiUserFetchHits,
+          aiReferralHits,
+          unknownHits,
+          crawlerBucketRows,
+          aiUserFetchBucketRows,
+          aiReferralBucketRows,
+          sampleRows,
+          remainingBacklogCount,
+          windowStart: startedAt,
+          windowEnd: committedAt
+        };
+      };
       try {
         app.db.insert(runs).values({
           id: runId,
@@ -63065,20 +63185,17 @@ async function trafficRoutes(app, opts) {
           startedAt,
           createdAt: startedAt
         }).run();
-        let acceptedEvents = 0;
-        let selfTrafficExcluded = 0;
-        let crawlerHits = 0;
-        let aiUserFetchHits = 0;
-        let aiReferralHits = 0;
-        let unknownHits = 0;
-        let crawlerBucketRows = 0;
-        let aiUserFetchBucketRows = 0;
-        let aiReferralBucketRows = 0;
-        let sampleRows = 0;
-        let committedAt = startedAt;
-        let remainingBacklogCount = 0;
         const canonicalHost = resolveCloudflareWorkerRouteHost(project.canonicalDomain);
-        for (let batch = 0; batch < cloudflareQueueMaxBatches; batch += 1) {
+        const drainDeadlineMs = startedMs + cloudflareQueueSyncDeadlineMs;
+        let consecutiveEmptyPulls = 0;
+        let receiptPolicy = null;
+        const resolveReceiptPolicy = () => receiptPolicy ??= loadQueueReceiptPolicy(
+          app.db,
+          sourceRow2.id,
+          () => readQueueRetentionSeconds({ ...queueClient, maxRetries: 0, timeoutMs: CLOUDFLARE_QUEUE_RETENTION_READ_TIMEOUT_MS }),
+          (fields, message) => request.log.warn({ sourceId: sourceRow2.id, ...fields }, message)
+        );
+        for (let batch = 0; batch < cloudflareQueueMaxBatches && (batch === 0 || Date.now() < drainDeadlineMs); batch += 1) {
           if (!tryClaimTrafficSyncLease({
             db: app.db,
             sourceId: sourceRow2.id,
@@ -63144,6 +63261,7 @@ async function trafficRoutes(app, opts) {
             }
             validLeases.push(message.leaseId);
           }
+          const policy = normalized.length > 0 ? await resolveReceiptPolicy() : null;
           committedAt = (/* @__PURE__ */ new Date()).toISOString();
           const writeResult = writeTrafficEventBatch({
             db: app.db,
@@ -63151,7 +63269,7 @@ async function trafficRoutes(app, opts) {
             sourceId: sourceRow2.id,
             events: normalized,
             receivedAt: committedAt,
-            receiptTtlMs: CLOUDFLARE_QUEUE_RECEIPT_TTL_MS,
+            receiptTtlMs: policy ? policy.ttlMsAt(committedAt) : CLOUDFLARE_QUEUE_RECEIPT_TTL_MS,
             sampleLimit,
             validateSource: (latest) => {
               if (!latest || latest.projectId !== project.id || latest.status !== TrafficSourceStatuses.connected || latest.syncLeaseOwner !== leaseOwner || !isDeepStrictEqual(latest.configJson, sourceRow2.configJson)) {
@@ -63198,53 +63316,27 @@ async function trafficRoutes(app, opts) {
           aiUserFetchBucketRows += writeResult.aiUserFetchBucketRows;
           aiReferralBucketRows += writeResult.aiReferralBucketRows;
           sampleRows += writeResult.sampleRows;
-          const pulledEnvelopeCount = pulled.messages.length + pulled.skippedUnleasedMessageCount;
-          if (pulledEnvelopeCount < CLOUDFLARE_QUEUE_BATCH_SIZE || remainingBacklogCount === 0) break;
-        }
-        app.db.update(runs).set({ status: RunStatuses.completed, finishedAt: committedAt }).where(eq79(runs.id, runId)).run();
-        writeAuditLog(app.db, {
-          projectId: project.id,
-          actor: "api",
-          action: "traffic.cloudflare.queue-synced",
-          entityType: "traffic_source",
-          entityId: sourceRow2.id
-        });
-        try {
-          opts.onTrafficSynced?.({
-            status: "completed",
-            sourceType: sourceRow2.sourceType,
-            sourceId: sourceRow2.id,
-            pulledEvents: acceptedEvents,
-            selfTrafficExcluded,
-            crawlerHits,
-            aiUserFetchHits,
-            aiReferralHits,
-            durationMs: Date.now() - startedMs
-          });
-        } catch {
+          completedBatches += 1;
+          if (remainingBacklogCount === 0) break;
+          if (pulled.messages.length === 0) {
+            if (pulled.skippedUnleasedMessageCount > 0 && pulled.skippedUnleasedMessageCount < CLOUDFLARE_QUEUE_BATCH_SIZE) break;
+            consecutiveEmptyPulls = pulled.skippedUnleasedMessageCount === 0 ? consecutiveEmptyPulls + 1 : 0;
+            if (consecutiveEmptyPulls >= 2) break;
+          } else {
+            consecutiveEmptyPulls = 0;
+          }
         }
-        const response = {
-          sourceId: sourceRow2.id,
-          runId,
-          syncedAt: committedAt,
-          pulledEvents: acceptedEvents,
-          selfTrafficExcluded,
-          crawlerHits,
-          aiUserFetchHits,
-          aiReferralHits,
-          unknownHits,
-          crawlerBucketRows,
-          aiUserFetchBucketRows,
-          aiReferralBucketRows,
-          sampleRows,
-          remainingBacklogCount,
-          windowStart: startedAt,
-          windowEnd: committedAt
-        };
-        return response;
+        return finishSync(RunStatuses.completed, null);
       } catch (error) {
         const failedAt = (/* @__PURE__ */ new Date()).toISOString();
         const safeError = error instanceof CloudflareQueueApiError ? error.message : "Cloudflare Queue sync failed; retry the active source.";
+        if (completedBatches > 0) {
+          request.log.warn(
+            { sourceId: sourceRow2.id, completedBatches, error: safeError },
+            "Cloudflare Queue sync stopped after saving some batches"
+          );
+          return finishSync(RunStatuses.partial, safeError);
+        }
         try {
           opts.onTrafficSynced?.({
             status: "failed",
@@ -65907,7 +65999,7 @@ var GSC_DATA_STALE_DAYS = 7;
 var SYNC_IDLE_DAYS = 3;
 var NOT_SYNCING_URGENT_DAYS = 8;
 var GSC_REPORTING_TIME_ZONE2 = "America/Los_Angeles";
-var DAY_MS2 = 24 * 60 * 60 * 1e3;
+var DAY_MS3 = 24 * 60 * 60 * 1e3;
 var ISO_DATE = /^(\d{4})-(\d{2})-(\d{2})$/;
 function utcFromIsoDate(date) {
   const match = ISO_DATE.exec(date);
@@ -65918,7 +66010,7 @@ function daysBetweenIsoDates(from, to) {
   const start = utcFromIsoDate(from);
   const end = utcFromIsoDate(to);
   if (start === null || end === null) return null;
-  return Math.floor((end - start) / DAY_MS2);
+  return Math.floor((end - start) / DAY_MS3);
 }
 function daysSinceDate(date, now = /* @__PURE__ */ new Date(), timeZone) {
   const today = timeZone ? formatIsoDateInTimeZone(now.toISOString(), timeZone) : `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, "0")}-${String(now.getUTCDate()).padStart(2, "0")}`;
@@ -65930,7 +66022,7 @@ function skipped(code, summary3) {
 function lastSyncAgeDays(ctx, kinds) {
   const row = ctx.db.select({ createdAt: runs.createdAt }).from(runs).where(and73(eq87(runs.projectId, ctx.project.id), inArray36(runs.kind, kinds), eq87(runs.status, "completed"))).orderBy(desc40(runs.createdAt)).limit(1).get();
   if (!row?.createdAt) return null;
-  const age = Math.floor((Date.now() - Date.parse(row.createdAt)) / DAY_MS2);
+  const age = Math.floor((Date.now() - Date.parse(row.createdAt)) / DAY_MS3);
   return Number.isFinite(age) ? age : null;
 }
 function grade(ctx, spec, newestDate) {
@@ -66423,7 +66515,7 @@ async function probeApiHost(host, options = {}) {
 }
 
 // ../api-routes/src/doctor/checks/integration-sync.ts
-import { and as and74, count as count6, desc as desc41, eq as eq88, gte as gte21, gt as gt6, inArray as inArray37, isNull as isNull14, notInArray as notInArray3, or as or19 } from "drizzle-orm";
+import { and as and74, count as count6, desc as desc41, eq as eq88, gte as gte21, gt as gt7, inArray as inArray37, isNull as isNull14, notInArray as notInArray3, or as or19 } from "drizzle-orm";
 var SYNC_FAILURE_WINDOW = 3;
 var SUMMARY_ERROR_LIMIT = 300;
 var FINISHED_STATUSES = [RunStatuses.completed, RunStatuses.partial, RunStatuses.failed];
@@ -66518,7 +66610,7 @@ function readSyncRunState(db, projectId, kind, options = {}) {
   const graded = options.since ? and74(scope, gte21(runs.createdAt, options.since)) : scope;
   const recent = db.select({ id: runs.id, status: runs.status, trigger: runs.trigger, error: runs.error, createdAt: runs.createdAt }).from(runs).where(and74(graded, inArray37(runs.status, FINISHED_STATUSES))).orderBy(desc41(runs.createdAt)).limit(SYNC_FAILURE_WINDOW).all();
   const lastSuccess = db.select({ createdAt: runs.createdAt, finishedAt: runs.finishedAt }).from(runs).where(and74(graded, inArray37(runs.status, SUCCESS_STATUSES))).orderBy(desc41(runs.createdAt)).limit(1).get();
-  const failureCount = db.select({ count: count6() }).from(runs).where(and74(lastSuccess ? and74(graded, gt6(runs.createdAt, lastSuccess.createdAt)) : graded, eq88(runs.status, RunStatuses.failed))).get();
+  const failureCount = db.select({ count: count6() }).from(runs).where(and74(lastSuccess ? and74(graded, gt7(runs.createdAt, lastSuccess.createdAt)) : graded, eq88(runs.status, RunStatuses.failed))).get();
   const failuresSinceSuccess = Number(failureCount?.count ?? 0);
   const latest = recent[0];
   return {
@@ -68353,12 +68445,12 @@ var queueBacklogCheck = {
     }
     const remaining = measured.filter((source) => (source.queueBacklogCount ?? 0) > 0);
     const total = remaining.reduce((sum, source) => sum + source.queueBacklogCount, 0);
-    if (total > DEFAULT_CLOUDFLARE_QUEUE_DRAIN_BUDGET) {
+    if (total > CLOUDFLARE_QUEUE_RESIDUAL_WARN_COUNT) {
       return {
         status: CheckStatuses.warn,
         code: "traffic.queue-backlog.remaining",
-        summary: `${total.toLocaleString("en-US")} message(s) remained across ${remaining.length} Cloudflare Queue source(s) after the last bounded sync, exceeding the default ${DEFAULT_CLOUDFLARE_QUEUE_DRAIN_BUDGET.toLocaleString("en-US")}-message drain budget.`,
-        remediation: "Run `canonry traffic sync <project> --source <id>` again. If the backlog stays above 1,000 messages, shorten the traffic-sync schedule interval.",
+        summary: `${total.toLocaleString("en-US")} message(s) remained across ${remaining.length} Cloudflare Queue source(s) after the last sync, more than the ${CLOUDFLARE_QUEUE_RESIDUAL_WARN_COUNT.toLocaleString("en-US")} that can arrive while a drain runs. The drain stopped at its time limit or pull cap before the Queue was empty.`,
+        remediation: "If the backlog keeps growing, messages will pass the Queue's retention and be dropped. Shorten the traffic-sync schedule interval, or raise `CANONRY_CLOUDFLARE_QUEUE_SYNC_DEADLINE_MS` (default 4 minutes per sync).",
         details
       };
     }
@@ -68366,8 +68458,8 @@ var queueBacklogCheck = {
       return {
         status: CheckStatuses.ok,
         code: "traffic.queue-backlog.within-drain-budget",
-        summary: `${total.toLocaleString("en-US")} message(s) remained after the last bounded sync, within the default ${DEFAULT_CLOUDFLARE_QUEUE_DRAIN_BUDGET.toLocaleString("en-US")}-message drain budget.`,
-        remediation: "If no new messages arrive, the next scheduled sync can drain this residual backlog. Run `canonry traffic sync <project> --source <id>` to accelerate it.",
+        summary: `${total.toLocaleString("en-US")} message(s) remained after the last sync, within the ${CLOUDFLARE_QUEUE_RESIDUAL_WARN_COUNT.toLocaleString("en-US")} that can arrive while a drain runs.`,
+        remediation: "The next scheduled sync drains these. Run `canonry traffic sync <project> --source <id>` to drain them sooner.",
         details
       };
     }
@@ -68529,7 +68621,7 @@ var GTM_REQUIRED_OAUTH_SCOPES = [
 ];
 var FRESH_SNAPSHOT_WARN_DAYS = 7;
 var FRESH_SNAPSHOT_FAIL_DAYS = 30;
-var DAY_MS3 = 24 * 60 * 60 * 1e3;
+var DAY_MS4 = 24 * 60 * 60 * 1e3;
 function unavailableStatus() {
   return {
     status: CheckStatuses.skipped,
@@ -68616,7 +68708,7 @@ function snapshotOutput(provider, latestSnapshotAt, now) {
       details: { latestSnapshotAt }
     };
   }
-  const ageDays2 = (now.getTime() - snapshotMs) / DAY_MS3;
+  const ageDays2 = (now.getTime() - snapshotMs) / DAY_MS4;
   const details = { latestSnapshotAt, ageDays: Math.max(0, Math.round(ageDays2)) };
   if (ageDays2 < 0) {
     return {
@@ -69925,12 +70017,12 @@ function dedupeStrings(input) {
 
 // ../api-routes/src/technical-aeo.ts
 import crypto55 from "crypto";
-import { and as and81, asc as asc20, count as count7, desc as desc45, eq as eq98, gte as gte25, inArray as inArray41, isNotNull as isNotNull9, isNull as isNull17, lt as lt12, or as or21, sql as sql33 } from "drizzle-orm";
+import { and as and81, asc as asc20, count as count7, desc as desc45, eq as eq98, gte as gte25, inArray as inArray41, isNotNull as isNotNull9, isNull as isNull17, lt as lt13, or as or21, sql as sql33 } from "drizzle-orm";
 import { alias } from "drizzle-orm/sqlite-core";
 
 // ../api-routes/src/technical-aeo-issues.ts
 import { createHash as createHash10 } from "crypto";
-import { and as and80, asc as asc19, eq as eq97, gt as gt7, sql as sql32 } from "drizzle-orm";
+import { and as and80, asc as asc19, eq as eq97, gt as gt8, sql as sql32 } from "drizzle-orm";
 var ADVISORY_CODES = /* @__PURE__ */ new Set([
   "entity-consistency.title.short",
   "site.duplicate-title",
@@ -70091,7 +70183,7 @@ function readSiteAuditIssues(input) {
         url: siteCrawlPages.url,
         auditScore: siteCrawlPages.auditScore,
         auditFields: siteCrawlPages.auditFields
-      }).from(siteCrawlPages).where(and80(scope, after === void 0 ? void 0 : gt7(siteCrawlPages.nodeKey, after))).orderBy(asc19(siteCrawlPages.nodeKey)).limit(200).all();
+      }).from(siteCrawlPages).where(and80(scope, after === void 0 ? void 0 : gt8(siteCrawlPages.nodeKey, after))).orderBy(asc19(siteCrawlPages.nodeKey)).limit(200).all();
       for (const page3 of pages) {
         evidenceHash.update(JSON.stringify(page3));
         const fields = record(page3.auditFields);
@@ -70581,11 +70673,11 @@ async function technicalAeoRoutes(app, opts) {
   };
   const resolveCrawl = (projectId, runId, requestedDate, scope = {}) => {
     const filters = visibleCrawlFilters(projectId);
-    if (scope.recordedBefore) filters.push(lt12(siteCrawlSnapshots.createdAt, scope.recordedBefore));
+    if (scope.recordedBefore) filters.push(lt13(siteCrawlSnapshots.createdAt, scope.recordedBefore));
     if (requestedDate) {
       const nextDate2 = /* @__PURE__ */ new Date(`${requestedDate}T00:00:00.000Z`);
       nextDate2.setUTCDate(nextDate2.getUTCDate() + 1);
-      filters.push(gte25(siteCrawlSnapshots.createdAt, requestedDate), lt12(siteCrawlSnapshots.createdAt, nextDate2.toISOString()));
+      filters.push(gte25(siteCrawlSnapshots.createdAt, requestedDate), lt13(siteCrawlSnapshots.createdAt, nextDate2.toISOString()));
     }
     const selectionFilters = scope.scoredOnly ? [...filters, sql33`exists (select 1 from ${siteAuditSnapshots} where ${siteAuditSnapshots.projectId} = ${siteCrawlSnapshots.projectId} and ${siteAuditSnapshots.runId} = ${siteCrawlSnapshots.runId})`] : filters;
     const selected = app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq98(siteCrawlSnapshots.runId, runs.id)).where(and81(...selectionFilters, runId ? eq98(siteCrawlSnapshots.runId, runId) : void 0)).orderBy(
@@ -70602,7 +70694,7 @@ async function technicalAeoRoutes(app, opts) {
     const sameDate = and81(
       ...filters,
       gte25(siteCrawlSnapshots.createdAt, date),
-      lt12(siteCrawlSnapshots.createdAt, nextDate.toISOString())
+      lt13(siteCrawlSnapshots.createdAt, nextDate.toISOString())
     );
     const sameDateRunCount = app.db.select({ value: count7() }).from(siteCrawlSnapshots).innerJoin(runs, eq98(siteCrawlSnapshots.runId, runs.id)).where(sameDate).get()?.value ?? 0;
     const candidates = app.db.select({
@@ -70633,7 +70725,7 @@ async function technicalAeoRoutes(app, opts) {
       eq98(runs.kind, RunKinds["site-audit"]),
       inArray41(runs.status, SURFACEABLE_STATUSES),
       notProbeRun(),
-      ...recordedBefore ? [lt12(siteAuditSnapshots.createdAt, recordedBefore)] : []
+      ...recordedBefore ? [lt13(siteAuditSnapshots.createdAt, recordedBefore)] : []
     ];
     const complete = sql33`case when ${runs.status} = ${RunStatuses.completed} then 1 else 0 end`;
     const selectAudit = (pinnedRunId) => app.db.select({ snap: siteAuditSnapshots, runStatus: runs.status }).from(siteAuditSnapshots).innerJoin(runs, eq98(siteAuditSnapshots.runId, runs.id)).where(and81(...filters, pinnedRunId ? eq98(siteAuditSnapshots.runId, pinnedRunId) : void 0)).orderBy(
@@ -70660,7 +70752,7 @@ async function technicalAeoRoutes(app, opts) {
     const sameDate = and81(
       ...filters,
       gte25(siteAuditSnapshots.createdAt, date),
-      lt12(siteAuditSnapshots.createdAt, nextDate.toISOString())
+      lt13(siteAuditSnapshots.createdAt, nextDate.toISOString())
     );
     const sameDateRunCount = app.db.select({ value: count7() }).from(siteAuditSnapshots).innerJoin(runs, eq98(siteAuditSnapshots.runId, runs.id)).where(sameDate).get()?.value ?? 0;
     const candidates = app.db.select({
@@ -71099,7 +71191,7 @@ async function technicalAeoRoutes(app, opts) {
       eq98(siteCrawlPages.runId, siteCrawlGraphNodes.runId),
       eq98(siteCrawlPages.attemptId, siteCrawlGraphNodes.attemptId),
       eq98(siteCrawlPages.nodeKey, siteCrawlGraphNodes.nodeKey)
-    )).where(and81(...graphScope, lt12(siteCrawlGraphNodes.sampleRank, maxNodes))).orderBy(asc20(siteCrawlGraphNodes.sampleRank)).all();
+    )).where(and81(...graphScope, lt13(siteCrawlGraphNodes.sampleRank, maxNodes))).orderBy(asc20(siteCrawlGraphNodes.sampleRank)).all();
     const nodes = nodeRows.map(({ indexabilityReasons, canonicalNodeKey, ...row }) => ({
       ...row,
       healthState: deriveSiteHealthState({ ...row, indexabilityReasons, canonicalNodeKey }),
@@ -71118,18 +71210,18 @@ async function technicalAeoRoutes(app, opts) {
       eq98(graphSourceNode.runId, siteCrawlGraphEdges.runId),
       eq98(graphSourceNode.attemptId, siteCrawlGraphEdges.attemptId),
       eq98(graphSourceNode.nodeKey, siteCrawlGraphEdges.sourceNodeKey),
-      lt12(graphSourceNode.sampleRank, maxNodes)
+      lt13(graphSourceNode.sampleRank, maxNodes)
     )).innerJoin(graphTargetNode, and81(
       eq98(graphTargetNode.projectId, siteCrawlGraphEdges.projectId),
       eq98(graphTargetNode.runId, siteCrawlGraphEdges.runId),
       eq98(graphTargetNode.attemptId, siteCrawlGraphEdges.attemptId),
       eq98(graphTargetNode.nodeKey, siteCrawlGraphEdges.targetNodeKey),
-      lt12(graphTargetNode.sampleRank, maxNodes)
+      lt13(graphTargetNode.sampleRank, maxNodes)
     )).where(and81(
       eq98(siteCrawlGraphEdges.projectId, project.id),
       eq98(siteCrawlGraphEdges.runId, snapshot.runId),
       eq98(siteCrawlGraphEdges.attemptId, snapshot.attemptId),
-      lt12(siteCrawlGraphEdges.sampleRank, maxEdges),
+      lt13(siteCrawlGraphEdges.sampleRank, maxEdges),
       graphLinkKindFilter
     )).orderBy(asc20(siteCrawlGraphEdges.sampleRank)).all();
     const totalNodes = persistedLayout.totalNodes;
@@ -71473,10 +71565,10 @@ async function technicalAeoRoutes(app, opts) {
     const beforeTarget = request.query.fromRunId ? resolveCrawl(project.id, request.query.fromRunId) : afterTarget ? app.db.select({ snapshot: siteCrawlSnapshots, runStatus: runs.status }).from(siteCrawlSnapshots).innerJoin(runs, eq98(siteCrawlSnapshots.runId, runs.id)).where(and81(
       ...completeSnapshotFilters,
       or21(
-        lt12(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
+        lt13(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
         and81(
           eq98(siteCrawlSnapshots.createdAt, afterTarget.snapshot.createdAt),
-          lt12(siteCrawlSnapshots.runId, afterTarget.snapshot.runId)
+          lt13(siteCrawlSnapshots.runId, afterTarget.snapshot.runId)
         )
       )
     )).orderBy(desc45(siteCrawlSnapshots.createdAt), desc45(siteCrawlSnapshots.runId)).limit(1).get() : void 0;
@@ -72361,7 +72453,7 @@ async function technicalAeoRoutes(app, opts) {
     }).from(siteCrawlPages).where(and81(
       auditedWhere,
       isNotNull9(siteCrawlPages.auditScore),
-      lt12(siteCrawlPages.auditScore, 70)
+      lt13(siteCrawlPages.auditScore, 70)
     )).orderBy(asc20(siteCrawlPages.auditScore), asc20(siteCrawlPages.nodeKey)).limit(LIVE_PAGE_HEALTH_CANDIDATE_LIMIT).all();
     const examples = candidates.flatMap((candidate) => {
       if (candidate.auditScore == null) return [];
@@ -72456,7 +72548,7 @@ async function technicalAeoRoutes(app, opts) {
 // ../api-routes/src/research.ts
 import crypto56 from "crypto";
 import { z as z6 } from "zod";
-import { and as and82, count as count8, desc as desc46, eq as eq99, gte as gte26, lt as lt13, or as or22, sql as sql34 } from "drizzle-orm";
+import { and as and82, count as count8, desc as desc46, eq as eq99, gte as gte26, lt as lt14, or as or22, sql as sql34 } from "drizzle-orm";
 var sameLocation = (a, b) => a.label === b.label && a.city === b.city && a.region === b.region && a.country === b.country && a.timezone === b.timezone;
 var BATCH_RECEIPT_PREFIX = "__canonry_research_batch__:";
 async function researchRoutes(app, opts) {
@@ -72521,7 +72613,7 @@ async function researchRoutes(app, opts) {
         const used = tx.select({ value: count8() }).from(researchRuns).where(and82(
           eq99(researchRuns.projectId, project.id),
           gte26(researchRuns.createdAt, start),
-          lt13(researchRuns.createdAt, end),
+          lt14(researchRuns.createdAt, end),
           sql34`(json_extract(${researchRuns.initiatedBy}, '$.role') = ${UserRoles.viewer} OR json_extract(${researchRuns.initiatedBy}, '$.limited') = 1)`
         )).get()?.value ?? 0;
         if (used >= viewerDailyRunLimit) {
@@ -72577,7 +72669,7 @@ async function researchRoutes(app, opts) {
         const used = tx.select({ value: count8() }).from(researchRuns).where(and82(
           eq99(researchRuns.projectId, project.id),
           gte26(researchRuns.createdAt, start),
-          lt13(researchRuns.createdAt, end),
+          lt14(researchRuns.createdAt, end),
           sql34`(json_extract(${researchRuns.initiatedBy}, '$.role') = ${UserRoles.viewer} OR json_extract(${researchRuns.initiatedBy}, '$.limited') = 1)`
         )).get()?.value ?? 0;
         if (used + prepared.length > viewerDailyRunLimit) throw researchDailyLimitExceeded(project.name, viewerDailyRunLimit, date);
@@ -72631,7 +72723,7 @@ async function researchRoutes(app, opts) {
     const cursor = request.query.cursor ? parseResearchCursor(request.query.cursor, project.id) : null;
     const rows = app.db.select().from(researchRuns).where(and82(
       eq99(researchRuns.projectId, project.id),
-      cursor ? or22(lt13(researchRuns.createdAt, cursor.createdAt), and82(eq99(researchRuns.createdAt, cursor.createdAt), lt13(researchRuns.id, cursor.id))) : void 0
+      cursor ? or22(lt14(researchRuns.createdAt, cursor.createdAt), and82(eq99(researchRuns.createdAt, cursor.createdAt), lt14(researchRuns.id, cursor.id))) : void 0
     )).orderBy(desc46(researchRuns.createdAt), desc46(researchRuns.id)).limit(limit + 1).all();
     const runs2 = rows.slice(0, limit).map(serializeRun);
     const last = runs2.at(-1);
@@ -73260,7 +73352,9 @@ async function apiRoutes(app, opts) {
       cloudflareTrafficCredentialStore: opts.cloudflareTrafficCredentialStore,
       pullCloudflareQueueMessages: opts.pullCloudflareQueueMessages,
       ackCloudflareQueueMessages: opts.ackCloudflareQueueMessages,
+      getCloudflareQueueRetentionSeconds: opts.getCloudflareQueueRetentionSeconds,
       cloudflareQueueMaxBatches: opts.cloudflareQueueMaxBatches,
+      cloudflareQueueSyncDeadlineMs: opts.cloudflareQueueSyncDeadlineMs,
       cloudflareTrafficIngestUrl: opts.cloudflareTrafficIngestUrl,
       cloudflareIngestRateLimitMax: opts.cloudflareIngestRateLimitMax,
       cloudflareIngestIpRateLimitMax: opts.cloudflareIngestIpRateLimitMax,
@@ -73676,6 +73770,7 @@ export {
   listCachedReleases,
   pruneCachedRelease,
   resolveVercelSyncDeadlineMs,
+  resolveCloudflareQueueSyncDeadlineMs,
   SITE_REACHABILITY_CHECK_ID,
   SITE_REACHABILITY_CHECKS,
   scheduledHealthCheckIds,

package/dist/{cli-commands-JBLV55EA.js → cli-commands-ZPW3OST3.js}

@@ -1,6 +1,6 @@
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CFGA6OAK.js";
+} from "./chunk-AP7YSOFC.js";
 import "./chunk-6GO5VVAC.js";
 import "./chunk-WLIGKWVB.js";
 import "./chunk-VJWDBFSL.js";

package/dist/cli.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node --import tsx
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CFGA6OAK.js";
+} from "./chunk-AP7YSOFC.js";
 import "./chunk-6GO5VVAC.js";
 import {
   buildSetupState,
   runPendingServeHandoff
-} from "./chunk-BNGGUL7F.js";
+} from "./chunk-NWYNTYPD.js";
 import "./chunk-WLIGKWVB.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";

package/dist/{dashboard-2P3TEH6S.js → dashboard-VT3GQRW4.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   anyUsersExist
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import {

package/dist/{demo-F5TRWB6V.js → demo-ZBNVULOO.js}

@@ -40,7 +40,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-WIVTG6GH.js");
+  const { createDemoServer } = await import("./demo-server-QUW4TDJL.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-WIVTG6GH.js → demo-server-QUW4TDJL.js}

@@ -18,14 +18,14 @@ import "./chunk-HGMYEDAQ.js";
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-NMLVLFF7.js";
+} from "./chunk-65YQFVJM.js";
 import {
   determineCitationState
 } from "./chunk-L7TKNHEX.js";
 import {
   apiRoutes,
   assessConversionTrackingIntegrity
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import {

package/dist/index.js

@@ -3,10 +3,10 @@ import {
   createGoogleMarketingCredentialStore,
   createGoogleMarketingRuntime,
   createServer
-} from "./chunk-6A6BD5KS.js";
+} from "./chunk-CYVQW32W.js";
 import "./chunk-52NCZIAC.js";
-import "./chunk-2DZYA62C.js";
-import "./chunk-QFO7JHX2.js";
+import "./chunk-5D4RL23M.js";
+import "./chunk-A5F5E4DL.js";
 import "./chunk-ELCLGWUT.js";
 import "./chunk-XEBKF4N5.js";
 import "./chunk-6IBLGQVZ.js";
@@ -28,9 +28,9 @@ import "./chunk-QSPLYPVA.js";
 import "./chunk-N2HCXIQ3.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
-import "./chunk-NMLVLFF7.js";
+import "./chunk-65YQFVJM.js";
 import "./chunk-L7TKNHEX.js";
-import "./chunk-NWQQYLZV.js";
+import "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import "./chunk-SCS7R2ND.js";

package/dist/{init-LABWY7HI.js → init-C2DLDK6T.js}

@@ -7,7 +7,7 @@ import {
 import {
   buildSetupState,
   queueServeHandoff
-} from "./chunk-BNGGUL7F.js";
+} from "./chunk-NWYNTYPD.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-YDSY5YJE.js";
 import "./chunk-3U7LL3JM.js";

package/dist/{intelligence-service-4PHEK5F4.js → intelligence-service-R5BRSQKI.js}

@@ -1,9 +1,9 @@
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-NMLVLFF7.js";
+} from "./chunk-65YQFVJM.js";
 import "./chunk-L7TKNHEX.js";
-import "./chunk-NWQQYLZV.js";
+import "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import "./chunk-SCS7R2ND.js";

package/dist/{serve-3WJL5N2Z.js → serve-ME2KJ6BG.js}

@@ -1,7 +1,7 @@
 import {
   backfillAiReferralPaths,
   backfillNormalizedPaths
-} from "./chunk-RXMGU7AF.js";
+} from "./chunk-O6TF6TPM.js";
 import {
   operatorHttpUrl
 } from "./chunk-6GO5VVAC.js";
@@ -9,10 +9,10 @@ import {
   allowsKeylessFirstRunSetup,
   createServer,
   waitForServerRuntimeStartup
-} from "./chunk-6A6BD5KS.js";
+} from "./chunk-CYVQW32W.js";
 import "./chunk-52NCZIAC.js";
-import "./chunk-2DZYA62C.js";
-import "./chunk-QFO7JHX2.js";
+import "./chunk-5D4RL23M.js";
+import "./chunk-A5F5E4DL.js";
 import "./chunk-ELCLGWUT.js";
 import "./chunk-XEBKF4N5.js";
 import "./chunk-6IBLGQVZ.js";
@@ -55,12 +55,12 @@ import {
   CliError,
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
-import "./chunk-NMLVLFF7.js";
+import "./chunk-65YQFVJM.js";
 import "./chunk-L7TKNHEX.js";
 import {
   refreshSnapshotMentionIdentity,
   snapshotsWithSentimentResults
-} from "./chunk-NWQQYLZV.js";
+} from "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import {

package/dist/{session-VTFLD3C5.js → session-R3PRJ3RB.js}

@@ -10,8 +10,8 @@ import {
   resolveAeroSkillDir,
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel
-} from "./chunk-2DZYA62C.js";
-import "./chunk-QFO7JHX2.js";
+} from "./chunk-5D4RL23M.js";
+import "./chunk-A5F5E4DL.js";
 import "./chunk-NCIPNVD6.js";
 import "./chunk-F6W7FCS2.js";
 import {
@@ -24,7 +24,7 @@ import "./chunk-QSPLYPVA.js";
 import "./chunk-N2HCXIQ3.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
-import "./chunk-NWQQYLZV.js";
+import "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import "./chunk-SCS7R2ND.js";

package/dist/{tools-LRHO7QOT.js → tools-VZVQ2CTU.js}

@@ -11,7 +11,7 @@ import {
   buildAllTools,
   buildReadTools,
   isAeroToolProfile
-} from "./chunk-QFO7JHX2.js";
+} from "./chunk-A5F5E4DL.js";
 import "./chunk-F6W7FCS2.js";
 import "./chunk-TVANRUBO.js";
 import "./chunk-YJPQBJZO.js";
@@ -19,7 +19,7 @@ import "./chunk-QSPLYPVA.js";
 import "./chunk-N2HCXIQ3.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
-import "./chunk-NWQQYLZV.js";
+import "./chunk-QEJBAPDP.js";
 import "./chunk-Q4J3XSWE.js";
 import "./chunk-27SGL3DF.js";
 import "./chunk-SCS7R2ND.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonry/canonry",
-  "version": "7.58.4",
+  "version": "7.58.5",
   "type": "module",
   "description": "Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.",
   "keywords": [