@canonry/canonry 7.58.5 → 7.60.0

package/dist/{chunk-5D4RL23M.js → chunk-L7WQTD3D.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-A5F5E4DL.js";
+} from "./chunk-OA6N3BI7.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NCIPNVD6.js";
@@ -22,15 +22,15 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-TVANRUBO.js";
+} from "./chunk-QEG7BSLH.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-YJPQBJZO.js";
+} from "./chunk-7XSGAPN5.js";
 import {
   agentToolEvents,
   llmUsageEvents
-} from "./chunk-SCS7R2ND.js";
+} from "./chunk-3JV3PWNA.js";
 import {
   MeasurementPortfolioLists,
   agentTurnLimitsSchema,
@@ -38,7 +38,7 @@ import {
   describeError,
   validationError,
   visibilityReportRequestSchema
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // src/agent/session.ts
 import fs3 from "fs";

package/dist/{chunk-6IBLGQVZ.js → chunk-NQTUPEBQ.js}

@@ -1,6 +1,6 @@
 import {
   cloudflareQueueNameSchema
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // src/cloudflare-traffic-config.ts
 function unsupportedDeliveryMode(deliveryMode) {

package/dist/{chunk-Q4J3XSWE.js → chunk-O7KIDW4H.js}

@@ -5,9 +5,10 @@ import {
   TrafficEvidenceKinds,
   TrafficSourceTypes,
   classifyAiReferralTrafficClass,
+  classifyJourneyEntry,
   hostMatchesDomain,
   hostOf
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // ../integration-traffic/src/ip-ranges/amazonbot.json
 var amazonbot_default = {
@@ -14506,14 +14507,321 @@ function classifyAiReferral(event) {
   return null;
 }
 
+// ../integration-traffic/src/journey.ts
+var ASSET_EXTENSION_PATTERN = /\.(?:avif|bmp|css|gif|ico|jpe?g|js|map|mjs|mp3|mp4|otf|png|svg|ttf|txt|webm|webmanifest|webp|woff2?|xml)$/i;
+var ASSET_PATH_PREFIXES = ["/_next/static/", "/_nuxt/", "/_ipx/", "/_vercel/", "/assets/", "/build/", "/dist/", "/fonts/", "/images/", "/img/", "/static/", "/wp-content/", "/wp-includes/", "/cdn-cgi/"];
+var DATA_PATH_PATTERN = /\.json$|^\/api\/|^\/wp-json\/|^\/graphql/i;
+var NON_BROWSER_PATTERN = /bot|crawl|spider|slurp|scrape|curl\/|wget|python|java\/|go-http|okhttp|axios|node-fetch|headless|phantom|lighthouse|pingdom|uptime|monitor|preview|facebookexternalhit|whatsapp|telegram|discord|slack/i;
+var KEPT_QUERY_PARAMETERS = ["utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content"];
+var AD_CLICK_ID_PARAMETERS = ["gclid", "gbraid", "wbraid", "dclid", "msclkid", "ttclid", "li_fat_id"];
+var NETWORK_CLICK_ID_PARAMETERS = { fbclid: "Facebook", twclid: "X" };
+var STEP_REFERER_HOSTS = [
+  "accounts.google.com",
+  "accounts.youtube.com",
+  "pay.google.com",
+  "appleid.apple.com",
+  "login.microsoftonline.com",
+  "login.live.com",
+  "login.microsoft.com",
+  "github.com/login",
+  "checkout.stripe.com",
+  "js.stripe.com",
+  "hooks.stripe.com",
+  "pay.stripe.com",
+  "connect.stripe.com",
+  "paypal.com",
+  "pay.amazon.com",
+  "checkout.shopify.com",
+  "shop.app",
+  "klarna.com",
+  "afterpay.com",
+  "squareup.com",
+  "checkout.square.site",
+  "adyen.com",
+  "braintreegateway.com",
+  "auth0.com",
+  "okta.com",
+  "onelogin.com",
+  "amazoncognito.com",
+  "clerk.accounts.dev"
+];
+var MAX_PATH_LENGTH = 512;
+var UUID_SEGMENT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var LONG_HEX_SEGMENT = /^[0-9a-f]{16,}$/i;
+var TOKEN_CHARSET = /^[\w-]+$/;
+var JWT_SEGMENT = /^eyJ[\w-]+\.[\w-]+/;
+function baseHost(host) {
+  const h = host?.trim().toLowerCase().replace(/:\d+$/, "").replace(/^www\./, "").replace(/\.$/, "");
+  return h || null;
+}
+function domainOf(value) {
+  const v = value.trim().toLowerCase();
+  if (!v) return null;
+  try {
+    return baseHost(new URL(v.includes("://") ? v : `https://${v}`).hostname);
+  } catch {
+    return null;
+  }
+}
+function refererUrlOf(referer) {
+  if (!referer) return null;
+  try {
+    return new URL(referer);
+  } catch {
+    return null;
+  }
+}
+function hostOfEvent(event) {
+  if (event.host) return event.host;
+  if (!event.requestUrl) return null;
+  try {
+    return new URL(event.requestUrl).hostname || null;
+  } catch {
+    return null;
+  }
+}
+var onDomain = (host, domain) => host === domain || host.endsWith(`.${domain}`);
+function isStepRefererHost(host, path) {
+  return STEP_REFERER_HOSTS.some((entry) => {
+    const slash = entry.indexOf("/");
+    if (slash < 0) return onDomain(host, entry);
+    return host === entry.slice(0, slash) && path.startsWith(entry.slice(slash));
+  });
+}
+function isAssetPath(path) {
+  return ASSET_PATH_PREFIXES.some((prefix) => path.startsWith(prefix)) || ASSET_EXTENSION_PATTERN.test(path);
+}
+function looksSecret(segment) {
+  if (UUID_SEGMENT.test(segment) || LONG_HEX_SEGMENT.test(segment) || JWT_SEGMENT.test(segment)) return true;
+  if (segment.length < 20 || !TOKEN_CHARSET.test(segment)) return false;
+  const digits = segment.replace(/\D/g, "").length;
+  const letters = segment.replace(/[^a-z]/gi, "").length;
+  const mixedCase = /[a-z]/.test(segment) && /[A-Z]/.test(segment);
+  return digits >= 3 && letters >= 3 && (mixedCase || !/[-_]/.test(segment));
+}
+function maskJourneyPath(path) {
+  return (path || "/").split("/").map((raw) => {
+    const segment = raw.split(";")[0];
+    if (!segment) return segment;
+    if (/@|%40/.test(segment)) return ":email";
+    return looksSecret(segment) ? ":token" : segment;
+  }).join("/") || "/";
+}
+function isLikelyBrowser(userAgent) {
+  const ua = userAgent?.trim();
+  return Boolean(ua) && /^Mozilla\//.test(ua) && !NON_BROWSER_PATTERN.test(ua);
+}
+function extractJourneyRequests(events, options = {}) {
+  const siteDomains = (options.siteDomains ?? []).map(domainOf).filter((d) => Boolean(d));
+  const out = [];
+  for (const event of events) {
+    const method = event.method?.toUpperCase() ?? null;
+    if (method === "HEAD" || method === "OPTIONS") continue;
+    const observedMs = Date.parse(event.observedAt);
+    if (!Number.isFinite(observedMs)) continue;
+    const rawPath = event.path.split("?")[0] || "/";
+    if (isAssetPath(rawPath)) continue;
+    if (!isLikelyBrowser(event.userAgent)) continue;
+    if (isSelfTraffic(event) || classifyCrawler(event) || classifyAiUserFetch(event)) continue;
+    const params = new URLSearchParams(event.queryString ?? "");
+    const kept = KEPT_QUERY_PARAMETERS.flatMap((name) => {
+      const value = params.get(name);
+      return value ? [`${name}=${encodeURIComponent(value)}`] : [];
+    });
+    const maskedPath = maskJourneyPath(rawPath);
+    const path = (kept.length ? `${maskedPath}?${kept.join("&")}` : maskedPath).slice(0, MAX_PATH_LENGTH);
+    const refererUrl = refererUrlOf(event.referer);
+    const refererHost = refererUrl?.hostname || null;
+    const refererBase = baseHost(refererHost);
+    const siteHost = baseHost(hostOfEvent(event));
+    const sameSite = Boolean(refererBase && (siteHost && (onDomain(refererBase, siteHost) || onDomain(siteHost, refererBase)) || siteDomains.some((domain) => onDomain(refererBase, domain))));
+    const stepReferer = sameSite || Boolean(refererBase && isStepRefererHost(refererBase, refererUrl?.pathname ?? "/"));
+    const ai = classifyAiReferral(event);
+    const networkClickId = Object.keys(NETWORK_CLICK_ID_PARAMETERS).find((name) => params.has(name));
+    out.push({
+      eventId: event.eventId,
+      observedAt: new Date(observedMs).toISOString(),
+      method,
+      path,
+      status: event.status,
+      kind: DATA_PATH_PATTERN.test(rawPath) ? "data" : "page",
+      remoteIp: event.remoteIp?.trim() || null,
+      userAgent: event.userAgent.trim(),
+      stepReferer,
+      aiEvidence: ai?.evidenceType ?? null,
+      signal: {
+        aiProduct: ai?.product ?? null,
+        aiDomain: ai?.sourceDomain ?? null,
+        aiPaid: ai?.trafficClass === "paid",
+        refererHost: stepReferer ? null : refererHost,
+        utmSource: params.get("utm_source"),
+        utmMedium: params.get("utm_medium"),
+        adClickId: AD_CLICK_ID_PARAMETERS.some((name) => params.has(name)),
+        clickNetwork: networkClickId ? NETWORK_CLICK_ID_PARAMETERS[networkClickId] : null
+      }
+    });
+  }
+  return out;
+}
+function hasEntryEvidence(request) {
+  if (request.stepReferer) return false;
+  const s = request.signal;
+  return Boolean(s.aiProduct || s.refererHost || s.utmSource || s.utmMedium || s.adClickId || s.clickNetwork);
+}
+function entryKey(entry) {
+  return `${entry.entryClass}:${entry.entryName ?? entry.entryHost ?? ""}`;
+}
+var ms = (iso) => Date.parse(iso);
+var DIRECT_ENTRY = { entryClass: "direct", entryName: null, entryHost: null, paid: false };
+var laterOf = (a, b) => a !== null && a > b ? a : b;
+function placeRequest(visits, t, outsideEntry, idleMs) {
+  let current;
+  let next;
+  for (const v of visits) {
+    const start = ms(v.startedAt);
+    if (start <= t) {
+      if (t <= ms(v.endedAt) + idleMs && (!current || v.startedAt > current.startedAt)) current = v;
+    } else if (start - t <= idleMs && (!next || v.startedAt < next.startedAt)) {
+      next = v;
+    }
+  }
+  if (current && (outsideEntry === null || outsideEntry === entryKey(current.entry))) return { visit: current, head: false, current };
+  if (next && (next.entry.entryClass === "direct" || outsideEntry === entryKey(next.entry))) return { visit: next, head: true, current };
+  return { visit: void 0, head: false, current };
+}
+function insertSorted(values, value) {
+  let i = values.length;
+  while (i > 0 && values[i - 1] > value) i -= 1;
+  if (values[i - 1] !== value) values.splice(i, 0, value);
+}
+function sessionizeJourneyRequests(requests, state, options) {
+  const byVisitor = /* @__PURE__ */ new Map();
+  for (const request of requests) {
+    const list = byVisitor.get(request.visitorKey);
+    if (list) list.push(request);
+    else byVisitor.set(request.visitorKey, [request]);
+  }
+  const visits = /* @__PURE__ */ new Map();
+  const events = [];
+  const visitors = [];
+  let dropped = 0;
+  let capped = 0;
+  for (const [visitorKey, list] of byVisitor) {
+    list.sort((a, b) => a.observedAt < b.observedAt ? -1 : a.observedAt > b.observedAt ? 1 : 0);
+    const prior = state.get(visitorKey);
+    const isWeakAi = (r) => Boolean(r.signal.aiProduct) && r.stepReferer;
+    const isStrongAi = (r) => Boolean(r.signal.aiProduct) && !r.stepReferer;
+    const aiTimes = [...new Set([
+      prior?.firstAiAt,
+      prior?.lastAiAt,
+      ...prior?.aiTimes ?? [],
+      ...list.filter(isStrongAi).map((r) => r.observedAt)
+    ].filter((t) => Boolean(t)))].sort();
+    if (aiTimes.length === 0 && !list.some(isWeakAi)) {
+      dropped += list.length;
+      continue;
+    }
+    const engineAt = /* @__PURE__ */ new Map();
+    const known = (prior?.visits ?? []).map((v) => ({ ...v, visitorKey, landingPath: "", isNew: false, headChanged: false }));
+    const requestsByDay = new Map(Object.entries(prior?.requestsByDay ?? {}));
+    let keptAny = false;
+    const cappedDays = /* @__PURE__ */ new Set();
+    let lastSeenAt = null;
+    let userAgent = list[0].userAgent;
+    let aiIndex = -1;
+    for (const request of list) {
+      const t = ms(request.observedAt);
+      while (aiIndex + 1 < aiTimes.length && aiTimes[aiIndex + 1] <= request.observedAt) aiIndex += 1;
+      const withinLookback = aiIndex >= 0 && t - ms(aiTimes[aiIndex]) <= options.lookbackMs;
+      let aiTouch = isStrongAi(request);
+      if (isWeakAi(request) && !withinLookback) {
+        aiTouch = true;
+        insertSorted(aiTimes, request.observedAt);
+        aiIndex = aiTimes.indexOf(request.observedAt);
+      }
+      if (aiTouch && request.signal.aiProduct && !engineAt.has(request.observedAt)) engineAt.set(request.observedAt, request.signal.aiProduct);
+      const entry = aiTouch ? classifyJourneyEntry(request.signal) : request.stepReferer ? DIRECT_ENTRY : classifyJourneyEntry({ ...request.signal, aiProduct: null, aiDomain: null, aiPaid: false });
+      const outside = aiTouch || hasEntryEvidence(request);
+      const placement = placeRequest(known, t, outside ? entryKey(entry) : null, options.idleMs);
+      const continues = placement.visit !== void 0 && !placement.head;
+      const kept = aiTouch || withinLookback || continues;
+      const opensVisit = placement.visit === void 0;
+      if (!kept || opensVisit && request.kind === "data" && !outside) {
+        dropped += 1;
+        continue;
+      }
+      const day = request.observedAt.slice(0, 10);
+      const stored = requestsByDay.get(day) ?? 0;
+      if (stored >= options.maxRequestsPerDay && !aiTouch) {
+        cappedDays.add(day);
+        capped += 1;
+        continue;
+      }
+      requestsByDay.set(day, stored + 1);
+      let target;
+      if (placement.visit) {
+        target = placement.visit;
+        if (placement.head) {
+          target.startedAt = request.observedAt;
+          target.landingPath = request.path;
+          if (outside) target.entry = entry;
+          target.headChanged = !target.isNew;
+        }
+        if (request.observedAt > target.endedAt) target.endedAt = request.observedAt;
+        target.requestCount += 1;
+        if (request.kind === "page") target.pageCount += 1;
+      } else {
+        target = {
+          id: options.newId(),
+          visitorKey,
+          startedAt: request.observedAt,
+          endedAt: request.observedAt,
+          entry,
+          requestCount: 1,
+          pageCount: request.kind === "page" ? 1 : 0,
+          landingPath: request.path,
+          isNew: true,
+          headChanged: false
+        };
+        const inside = placement.current;
+        if (outside && inside && request.observedAt < inside.endedAt) {
+          target.splitFrom = { visitId: inside.id, after: request.observedAt };
+          target.endedAt = inside.endedAt;
+          inside.endedAt = request.observedAt;
+          visits.set(inside.id, inside);
+        }
+        known.push(target);
+      }
+      visits.set(target.id, target);
+      events.push({ visitId: target.id, visitorKey, request, aiTouch });
+      keptAny = true;
+      lastSeenAt = laterOf(lastSeenAt, request.observedAt);
+      userAgent = request.userAgent;
+    }
+    if ((keptAny || cappedDays.size > 0) && aiTimes.length > 0) {
+      const firstAiAt = aiTimes[0];
+      visitors.push({
+        visitorKey,
+        firstAiAt,
+        firstAiEngine: (prior?.firstAiAt === firstAiAt ? prior?.firstAiEngine : null) ?? engineAt.get(firstAiAt) ?? prior?.firstAiEngine ?? "AI",
+        lastAiAt: aiTimes[aiTimes.length - 1],
+        userAgent,
+        lastSeenAt: lastSeenAt ?? prior?.lastAiAt ?? firstAiAt,
+        cappedDays: [...cappedDays].sort()
+      });
+    }
+  }
+  return { visits: [...visits.values()], events, visitors, dropped, capped };
+}
+
 // ../integration-traffic/src/rollup.ts
 var DEFAULT_SAMPLE_LIMIT = 25;
 var DEFAULT_AI_REFERRAL_SESSION_WINDOW_MS = 6e4;
-var UUID_SEGMENT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var LONG_HEX_SEGMENT = /^[0-9a-f]{16,}$/i;
+var UUID_SEGMENT2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var LONG_HEX_SEGMENT2 = /^[0-9a-f]{16,}$/i;
 var NUMERIC_SEGMENT = /^\d+$/;
-var ASSET_EXTENSION_PATTERN = /\.(?:avif|bmp|css|gif|ico|jpe?g|js|json|map|mjs|mp4|otf|png|svg|webm|webmanifest|woff2?|xml)$/i;
-var ASSET_PATH_PREFIXES = [
+var ASSET_EXTENSION_PATTERN2 = /\.(?:avif|bmp|css|gif|ico|jpe?g|js|json|map|mjs|mp4|otf|png|svg|webm|webmanifest|woff2?|xml)$/i;
+var ASSET_PATH_PREFIXES2 = [
   "/_next/static/",
   "/assets/",
   "/build/",
@@ -14528,7 +14836,7 @@ function normalizeTrafficPathPattern(path) {
   const pathOnly = cleanPath.split("?")[0] || "/";
   const segments = pathOnly.split("/").map((segment) => {
     if (!segment) return segment;
-    if (UUID_SEGMENT.test(segment) || LONG_HEX_SEGMENT.test(segment) || NUMERIC_SEGMENT.test(segment)) {
+    if (UUID_SEGMENT2.test(segment) || LONG_HEX_SEGMENT2.test(segment) || NUMERIC_SEGMENT.test(segment)) {
       return ":id";
     }
     return segment;
@@ -14571,7 +14879,7 @@ function resolveAiReferralLandingPath(event, evidenceType) {
 }
 function isLikelySubresourcePath(path) {
   const cleanPath = path.split("?")[0] || "/";
-  return ASSET_PATH_PREFIXES.some((prefix) => cleanPath.startsWith(prefix)) || ASSET_EXTENSION_PATTERN.test(cleanPath);
+  return ASSET_PATH_PREFIXES2.some((prefix) => cleanPath.startsWith(prefix)) || ASSET_EXTENSION_PATTERN2.test(cleanPath);
 }
 function actorKey(event) {
   const remoteIp = event.remoteIp?.trim();
@@ -14878,6 +15186,29 @@ var DEFAULT_BOT_LIST = {
 };
 var DEFAULT_BOT_SCORE_MAX_FORWARD = 30;
 var WORKER_COMPATIBILITY_DATE = "2026-05-01";
+var CLOUDFLARE_PAGE_VIEWS_VERSION_SUFFIX = "+page-views";
+var PAGE_VIEW_ASSET_EXTENSIONS = ["avif", "bmp", "css", "gif", "ico", "jpeg", "jpg", "js", "map", "mjs", "mp3", "mp4", "otf", "pdf", "png", "svg", "ttf", "txt", "webm", "webmanifest", "webp", "woff", "woff2", "xml", "zip"];
+var PAGE_VIEW_FILTER = `
+const PAGE_VIEW_ASSET_PATTERN = new RegExp(${JSON.stringify(`\\.(?:${PAGE_VIEW_ASSET_EXTENSIONS.join("|")})$`)}, 'i')
+
+function isPageView(request) {
+  const method = request.method || 'GET'
+  if (method !== 'GET' && method !== 'POST') return false
+  const purpose = lower(request.headers.get('sec-purpose') || request.headers.get('purpose') || '')
+  if (purpose.indexOf('prefetch') !== -1 || purpose.indexOf('prerender') !== -1) return false
+  const ua = request.headers.get('user-agent') || ''
+  if (ua.indexOf('Mozilla/') !== 0) return false
+  const dest = lower(request.headers.get('sec-fetch-dest') || '')
+  if (dest) return dest === 'document'
+  if (method !== 'GET') return false
+  if (lower(request.headers.get('accept') || '').indexOf('text/html') === -1) return false
+  try {
+    return !PAGE_VIEW_ASSET_PATTERN.test(new URL(request.url).pathname)
+  } catch (_) {
+    return false
+  }
+}
+`;
 function jsString(value) {
   return JSON.stringify(value);
 }
@@ -14886,6 +15217,9 @@ function jsArray(values) {
 }
 function generateWorkerScript(opts) {
   const botScoreMax = opts.botScoreMaxForward ?? DEFAULT_BOT_SCORE_MAX_FORWARD;
+  const pageViewHeader = opts.forwardPageViews ? "\n// page views: forwarded" : "";
+  const pageViewFilter = opts.forwardPageViews ? PAGE_VIEW_FILTER : "";
+  const pageViewCheck = opts.forwardPageViews ? "\n  if (isPageView(request)) return true" : "";
   const canonicalJsonFunction = canonicalizeCloudflareJson.toString();
   const directPushDelivery = opts.deliveryMode === "direct-push" ? `
 function toHex(buffer) {
@@ -14995,7 +15329,7 @@ async function deliverViaQueue(env, batch) {
   return `${CLOUDFLARE_WORKER_GENERATED_MARKER}
 // worker version: ${opts.workerVersion}
 // bot-list version: ${opts.botList.version}
-// delivery mode: ${opts.deliveryMode}
+// delivery mode: ${opts.deliveryMode}${pageViewHeader}
 
 const UA_KEYWORDS = ${jsArray(opts.botList.uaKeywords)}
 const REFERER_DOMAINS = ${jsArray(opts.botList.refererDomains)}
@@ -15070,14 +15404,14 @@ function botSignals(cf) {
   if (typeof cf.botScore === 'number' && cf.botScore < BOT_SCORE_MAX_FORWARD) return true
   return false
 }
-
+${pageViewFilter}
 function shouldForward(request) {
   const ua = request.headers.get('user-agent') || ''
   if (uaMatches(ua)) return true
   if (urlUtmMatches(request.url)) return true
   const referer = request.headers.get('referer') || ''
   if (refererMatches(referer)) return true
-  if (urlUtmMatches(referer)) return true
+  if (urlUtmMatches(referer)) return true${pageViewCheck}
   return botSignals(request.cf)
 }
 
@@ -15364,12 +15698,15 @@ export {
   isSelfTraffic,
   classifyCrawler,
   classifyAiUserFetch,
+  extractJourneyRequests,
+  sessionizeJourneyRequests,
   buildTrafficProbeReport,
   normalizeCloudflareWorkerEvent,
   CLOUDFLARE_WORKER_BINDINGS,
   CLOUDFLARE_WORKER_GENERATED_MARKER,
   CLOUDFLARE_WRANGLER_GENERATED_MARKER,
   DEFAULT_BOT_LIST,
+  CLOUDFLARE_PAGE_VIEWS_VERSION_SUFFIX,
   generateWorkerScript,
   generateWranglerToml,
   verifyRequestSignature

package/dist/{chunk-A5F5E4DL.js → chunk-OA6N3BI7.js}

@@ -1,16 +1,16 @@
 import {
   runWithUsageTags
-} from "./chunk-F6W7FCS2.js";
+} from "./chunk-SJNF5GN2.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-YJPQBJZO.js";
+} from "./chunk-7XSGAPN5.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-QEJBAPDP.js";
+} from "./chunk-4IV4FO3O.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,
@@ -20,7 +20,7 @@ import {
   formatPercent,
   ratioUnitSchema,
   truncateUtf16
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // src/agent/tools.ts
 import { Type as Type2 } from "@earendil-works/pi-ai";

package/dist/{chunk-3U7LL3JM.js → chunk-QCSNNKFI.js}

@@ -1,7 +1,7 @@
 import {
   API_PROVIDER_NAMES,
   ProviderNames
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // src/provider-registration.ts
 function isApiProviderRegistrable(name, entry) {

package/dist/{chunk-TVANRUBO.js → chunk-QEG7BSLH.js}

@@ -20,7 +20,7 @@ import {
   resolveProviderModel,
   schedulableRunKindSchema,
   sentimentEvaluatorProviderSchema
-} from "./chunk-Y7NX6EIK.js";
+} from "./chunk-JDL4QAPT.js";
 
 // ../config/src/index.ts
 import { z as z4 } from "zod";
@@ -960,6 +960,13 @@ Do not use "canonry init --force" for recovery. It replaces credentials without
       message: `Invalid config at ${configPath}: agent.model must be a non-empty string or left blank.`
     });
   }
+  const journeySecret = parsed.journeys?.visitorKeySecret;
+  if (journeySecret !== void 0 && journeySecret !== null && (typeof journeySecret !== "string" || journeySecret.trim().length > 0 && journeySecret.trim().length < 32)) {
+    throw new CliError({
+      code: "CONFIG_INVALID",
+      message: `Invalid config at ${configPath}: journeys.visitorKeySecret must be a string of at least 32 characters, or left blank to generate one.`
+    });
+  }
   if (!agentAllowViewersSchema.safeParse(parsed.agent?.allowViewers).success) {
     throw new CliError({
       code: "CONFIG_INVALID",