@canonry/canonry 7.63.0 → 7.63.1

package/assets/agent-workspace/skills/canonry/references/server-side-traffic.md

@@ -295,6 +295,16 @@ Run `cnry traffic backfill <project> --source <id> --days N` (capped at
 history. It's an explicit operator action; the connect flow never pulls
 it implicitly.
 
+A backfill holds the source's sync lease until it finishes, however long the
+pull takes. Scheduled syncs for that source skip while it runs and resume
+from the same watermark afterwards, so nothing commits into the window the
+backfill replaces. A backfill requested while a sync is running returns
+`OPERATION_IN_PROGRESS`; retry when that sync ends. A reset, reconnect or
+deactivation during a backfill stops it within a minute: it releases the
+source, stops pulling, and fails without writing. The CLI stops waiting
+after 5 minutes, but the run continues on the server: follow it with
+`cnry runs <project> --kind traffic-sync`.
+
 ## Connecting a Cloudflare source
 
 Both Cloudflare modes run the same small ES-module Worker on the site's exact

package/dist/{backfill-HZU3BBOH.js → backfill-2BVFKQ6J.js}

@@ -10,7 +10,7 @@ import {
   backfillSnapshotAttributionCommand,
   backfillTrafficClassificationCommand,
   replayQueryAuditLog
-} from "./chunk-XWDCLX55.js";
+} from "./chunk-6ABOEN5D.js";
 import "./chunk-UYPBR3SF.js";
 import "./chunk-A57HYHJ3.js";
 import "./chunk-HGMYEDAQ.js";
@@ -18,7 +18,7 @@ import "./chunk-EHTSCLEL.js";
 import {
   backfillProjectAnswerMentions,
   backfillProjectAnswerMentionsInChunks
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import "./chunk-SG2OPR7J.js";
 import "./chunk-QNFX7ZCT.js";
 import "./chunk-HNZQVIPS.js";

package/dist/{chunk-Q4U2GJME.js → chunk-22ABGRB7.js}

@@ -62187,6 +62187,9 @@ var CLOUDFLARE_QUEUE_RETENTION_READ_TIMEOUT_MS = 1e4;
 var CLOUDFLARE_QUEUE_VISIBILITY_TIMEOUT_MS = 5 * 6e4;
 var CLOUDFLARE_QUEUE_SYNC_LEASE_TTL_MS = 5 * 6e4;
 var WORDPRESS_SYNC_LEASE_TTL_MS = 5 * 6e4;
+var PULL_SYNC_LEASE_TTL_MS = 10 * 6e4;
+var TRAFFIC_BACKFILL_LEASE_TTL_MS = 5 * 6e4;
+var TRAFFIC_BACKFILL_LEASE_RENEW_MS = 6e4;
 var DEFAULT_CLOUDFLARE_INGEST_RATE_LIMIT_MAX = 6e3;
 var SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/i;
 function sha256Hex3(value) {
@@ -62533,6 +62536,9 @@ function isAuthoritativeTrafficSource(db, source) {
 function trafficConnectStatus(tx, projectId, existingSource) {
   return existingSource?.status === TrafficSourceStatuses.paused || hasConnectedTrafficSourceSibling(tx, projectId, existingSource?.id ?? "") ? TrafficSourceStatuses.paused : TrafficSourceStatuses.connected;
 }
+function isSameBackfillSource(current, started, leaseOwner) {
+  return current.syncLeaseOwner === leaseOwner && isSameTrafficSourceGeneration(current, started);
+}
 function isSameTrafficSourceGeneration(current, started) {
   return isDeepStrictEqual(current.configJson, started.configJson) && current.updatedAt === started.updatedAt && current.lastSyncedAt === started.lastSyncedAt && current.lastCursor === started.lastCursor && current.wordpressPendingUntil === started.wordpressPendingUntil;
 }
@@ -62586,6 +62592,42 @@ function vercelRetentionClampError(requestedStartMs, effectiveStartMs) {
   return new VercelRetentionClampError(requestedStartMs, effectiveStartMs);
 }
 async function runBackfillTask(options) {
+  const { app, sourceRow: sourceRow2, leaseOwner } = options;
+  const stopped = new AbortController();
+  const releaseLease = () => {
+    try {
+      releaseTrafficSyncLease({ db: app.db, sourceId: sourceRow2.id, owner: leaseOwner, now: (/* @__PURE__ */ new Date()).toISOString() });
+    } catch {
+    }
+  };
+  const renewLease2 = setInterval(() => {
+    try {
+      const latest = app.db.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
+      if (!latest || !isAuthoritativeTrafficSource(app.db, latest) || !isSameTrafficSourceGeneration(latest, sourceRow2)) {
+        clearInterval(renewLease2);
+        stopped.abort();
+        releaseLease();
+        return;
+      }
+      tryClaimTrafficSyncLease({
+        db: app.db,
+        sourceId: sourceRow2.id,
+        owner: leaseOwner,
+        now: (/* @__PURE__ */ new Date()).toISOString(),
+        ttlMs: TRAFFIC_BACKFILL_LEASE_TTL_MS
+      });
+    } catch {
+    }
+  }, options.leaseRenewMs);
+  renewLease2.unref?.();
+  try {
+    await runBackfillTaskHoldingLease(options, stopped.signal);
+  } finally {
+    clearInterval(renewLease2);
+    releaseLease();
+  }
+}
+async function runBackfillTaskHoldingLease(options, signal) {
   const {
     app,
     runId,
@@ -62595,7 +62637,8 @@ async function runBackfillTask(options) {
     windowEnd,
     journeyKeySecret,
     pullForBackfill,
-    pullErrorPrefix
+    pullErrorPrefix,
+    leaseOwner
   } = options;
   const backfillStartedAt = Date.now();
   const target = { feature: "server_traffic", operation: "backfill", attribution: currentOutcomeAttribution() };
@@ -62609,7 +62652,7 @@ async function runBackfillTask(options) {
       app.db.transaction((tx) => {
         tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq80(runs.id, runId)).run();
         const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-        if (!preserveSourceState && latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+        if (!preserveSourceState && latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameBackfillSource(latestSource, sourceRow2, leaseOwner)) {
           tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq80(trafficSources.id, sourceRow2.id)).run();
         }
       });
@@ -62623,8 +62666,13 @@ async function runBackfillTask(options) {
   }
   let allEvents;
   try {
-    allEvents = await pullForBackfill();
+    allEvents = await pullForBackfill(signal);
   } catch (e) {
+    if (signal.aborted) {
+      markFailed("Backfill stopped: the traffic source was reset, reconnected or deactivated while it ran", true);
+      reportBackfill({ status: OutcomeStatuses.failed, reasonCode: OutcomeReasonCodes.NOT_CONNECTED });
+      return;
+    }
     markFailed(
       `${pullErrorPrefix}: ${describeError(e)}`,
       e instanceof VercelRetentionClampError
@@ -62638,7 +62686,7 @@ async function runBackfillTask(options) {
     try {
       const completed = app.db.transaction((tx) => {
         const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-        const stillAuthoritative = latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameTrafficSourceGeneration(latestSource, sourceRow2);
+        const stillAuthoritative = latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameBackfillSource(latestSource, sourceRow2, leaseOwner);
         if (stillAuthoritative) {
           enforceRawEventSampleRetention(tx, sourceRow2.id, finishedAt2);
         }
@@ -62681,7 +62729,7 @@ async function runBackfillTask(options) {
         }).where(eq80(runs.id, runId)).run();
         return "wordpress-backfill-unsupported";
       }
-      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameBackfillSource(latestSource, sourceRow2, leaseOwner)) {
         tx.update(runs).set({
           status: RunStatuses.failed,
           error: "Traffic source was deactivated or reconfigured during backfill",
@@ -64205,15 +64253,19 @@ async function trafficRoutes(app, opts) {
     if (sourceRow2.status === TrafficSourceStatuses.paused || sourceRow2.status === TrafficSourceStatuses.archived || hasConnectedSibling) {
       throw validationError("Traffic source must be active before it can sync");
     }
-    const wordpressLeaseOwner = sourceRow2.sourceType === TrafficSourceTypes.wordpress ? crypto52.randomUUID() : void 0;
-    if (wordpressLeaseOwner && !tryClaimTrafficSyncLease({
+    const isWordpressSource = sourceRow2.sourceType === TrafficSourceTypes.wordpress;
+    const syncLeaseOwner = crypto52.randomUUID();
+    if (!tryClaimTrafficSyncLease({
       db: app.db,
       sourceId: sourceRow2.id,
-      owner: wordpressLeaseOwner,
+      owner: syncLeaseOwner,
       now: (/* @__PURE__ */ new Date()).toISOString(),
-      ttlMs: WORDPRESS_SYNC_LEASE_TTL_MS
+      ttlMs: isWordpressSource ? WORDPRESS_SYNC_LEASE_TTL_MS : PULL_SYNC_LEASE_TTL_MS
     })) {
-      throw operationInProgress("WordPress source sync is already in progress", { sourceId: sourceRow2.id });
+      throw operationInProgress(
+        isWordpressSource ? "WordPress source sync is already in progress" : "A sync or backfill is already running for this traffic source",
+        { sourceId: sourceRow2.id }
+      );
     }
     try {
       const syncWindowEnd = /* @__PURE__ */ new Date();
@@ -64236,7 +64288,7 @@ async function trafficRoutes(app, opts) {
         app.db.transaction((tx) => {
           tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq80(runs.id, runId)).run();
           const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-          if (latestSource?.status === TrafficSourceStatuses.connected && isSameTrafficSourceGeneration(latestSource, sourceRow2) && (wordpressLeaseOwner === void 0 || latestSource.syncLeaseOwner === wordpressLeaseOwner)) {
+          if (latestSource?.status === TrafficSourceStatuses.connected && isSameTrafficSourceGeneration(latestSource, sourceRow2) && latestSource.syncLeaseOwner === syncLeaseOwner) {
             tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq80(trafficSources.id, sourceRow2.id)).run();
           }
         });
@@ -64257,11 +64309,11 @@ async function trafficRoutes(app, opts) {
         }
       };
       const renewWordpressLease = () => {
-        if (!wordpressLeaseOwner) return;
+        if (!isWordpressSource) return;
         if (!tryClaimTrafficSyncLease({
           db: app.db,
           sourceId: sourceRow2.id,
-          owner: wordpressLeaseOwner,
+          owner: syncLeaseOwner,
           now: (/* @__PURE__ */ new Date()).toISOString(),
           ttlMs: WORDPRESS_SYNC_LEASE_TTL_MS
         })) {
@@ -64366,7 +64418,7 @@ async function trafficRoutes(app, opts) {
           const reservedAt = (/* @__PURE__ */ new Date()).toISOString();
           const reservedSource = app.db.transaction((tx) => {
             const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-            if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2) || latestSource.syncLeaseOwner !== wordpressLeaseOwner || latestSource.lastCursor || latestSource.wordpressPendingUntil) return void 0;
+            if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2) || latestSource.syncLeaseOwner !== syncLeaseOwner || latestSource.lastCursor || latestSource.wordpressPendingUntil) return void 0;
             tx.update(trafficSources).set({
               lastSyncedAt: windowStartIso2,
               wordpressPendingUntil: windowEndIso2,
@@ -64550,7 +64602,7 @@ async function trafficRoutes(app, opts) {
       const commitOutcome = app.db.transaction((tx) => {
         const latestRow = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
         const latestHasConnectedSibling = tx.select().from(trafficSources).where(eq80(trafficSources.projectId, project.id)).all().some((row) => row.id !== sourceRow2.id && row.status === TrafficSourceStatuses.connected);
-        if (!latestRow || latestRow.status !== TrafficSourceStatuses.connected && latestRow.status !== TrafficSourceStatuses.error || latestHasConnectedSibling || wordpressLeaseOwner !== void 0 && latestRow.syncLeaseOwner !== wordpressLeaseOwner || !isSameTrafficSourceGeneration(latestRow, sourceRow2)) {
+        if (!latestRow || latestRow.status !== TrafficSourceStatuses.connected && latestRow.status !== TrafficSourceStatuses.error || latestHasConnectedSibling || latestRow.syncLeaseOwner !== syncLeaseOwner || !isSameTrafficSourceGeneration(latestRow, sourceRow2)) {
           const abortedAt = (/* @__PURE__ */ new Date()).toISOString();
           tx.update(runs).set({
             status: RunStatuses.failed,
@@ -64880,17 +64932,15 @@ async function trafficRoutes(app, opts) {
       };
       return response;
     } finally {
-      if (wordpressLeaseOwner) {
-        try {
-          releaseTrafficSyncLease({
-            db: app.db,
-            sourceId: sourceRow2.id,
-            owner: wordpressLeaseOwner,
-            now: (/* @__PURE__ */ new Date()).toISOString()
-          });
-        } catch (error) {
-          request.log.warn({ sourceId: sourceRow2.id, error: describeError(error) }, "Failed to release WordPress sync lease");
-        }
+      try {
+        releaseTrafficSyncLease({
+          db: app.db,
+          sourceId: sourceRow2.id,
+          owner: syncLeaseOwner,
+          now: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch (error) {
+        request.log.warn({ sourceId: sourceRow2.id, error: describeError(error) }, "Failed to release traffic sync lease");
       }
     }
   });
@@ -64976,11 +65026,12 @@ async function trafficRoutes(app, opts) {
       const vercelTeamId = config.teamId ?? credential.teamId;
       const vercelEnvironment = config.environment ?? credential.environment;
       pullErrorPrefix = "Vercel pull failed";
-      pullForBackfill = async () => {
+      pullForBackfill = async (signal) => {
         const collected = [];
         const seenEventIds = /* @__PURE__ */ new Set();
         const backfillEndMs = windowEnd.getTime();
         for (let chunkStartMs = windowStart.getTime(); chunkStartMs < backfillEndMs; chunkStartMs += VERCEL_BACKFILL_CHUNK_MS) {
+          signal.throwIfAborted();
           const chunkEndMs = Math.min(chunkStartMs + VERCEL_BACKFILL_CHUNK_MS, backfillEndMs);
           const drained = await drainVercelTrafficEvents({
             pull: pullVercelEvents,
@@ -65008,25 +65059,42 @@ async function trafficRoutes(app, opts) {
     }
     const startedAt = windowEnd.toISOString();
     const runId = crypto52.randomUUID();
-    app.db.transaction((tx) => {
-      const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
-        throw validationError("Traffic source must remain active and unchanged before it can backfill");
-      }
-      tx.insert(runs).values({
-        id: runId,
-        projectId: project.id,
-        kind: RunKinds["traffic-sync"],
-        status: RunStatuses.running,
-        trigger: RunTriggers.backfill,
-        sourceId: sourceRow2.id,
-        startedAt,
-        createdAt: startedAt
-      }).run();
-    });
+    const leaseOwner = crypto52.randomUUID();
+    if (!tryClaimTrafficSyncLease({
+      db: app.db,
+      sourceId: sourceRow2.id,
+      owner: leaseOwner,
+      now: (/* @__PURE__ */ new Date()).toISOString(),
+      ttlMs: TRAFFIC_BACKFILL_LEASE_TTL_MS
+    })) {
+      throw operationInProgress("A sync or backfill is already running for this traffic source; retry when it finishes", { sourceId: sourceRow2.id });
+    }
+    try {
+      app.db.transaction((tx) => {
+        const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
+        if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+          throw validationError("Traffic source must remain active and unchanged before it can backfill");
+        }
+        tx.insert(runs).values({
+          id: runId,
+          projectId: project.id,
+          kind: RunKinds["traffic-sync"],
+          status: RunStatuses.running,
+          trigger: RunTriggers.backfill,
+          sourceId: sourceRow2.id,
+          startedAt,
+          createdAt: startedAt
+        }).run();
+      });
+    } catch (error) {
+      releaseTrafficSyncLease({ db: app.db, sourceId: sourceRow2.id, owner: leaseOwner, now: (/* @__PURE__ */ new Date()).toISOString() });
+      throw error;
+    }
     void runBackfillTask({
       app,
       runId,
+      leaseOwner,
+      leaseRenewMs: opts.trafficBackfillLeaseRenewMs ?? TRAFFIC_BACKFILL_LEASE_RENEW_MS,
       project,
       sourceRow: sourceRow2,
       journeyKeySecret: opts.journeyKeySecret,
@@ -74342,6 +74410,7 @@ async function apiRoutes(app, opts) {
       vercelTrafficCredentialStore: opts.vercelTrafficCredentialStore,
       pullVercelTrafficEvents: opts.pullVercelTrafficEvents,
       vercelSyncDeadlineMs: opts.vercelSyncDeadlineMs,
+      trafficBackfillLeaseRenewMs: opts.trafficBackfillLeaseRenewMs,
       cloudflareTrafficCredentialStore: opts.cloudflareTrafficCredentialStore,
       pullCloudflareQueueMessages: opts.pullCloudflareQueueMessages,
       ackCloudflareQueueMessages: opts.ackCloudflareQueueMessages,

package/dist/{chunk-I5QSS3CY.js → chunk-32KNDPD3.js}

@@ -599,7 +599,7 @@ var DEMO_CLI_COMMANDS = [{
   options: { host: stringOption(), port: stringOption(), "trust-proxy": multiStringOption() },
   allowPositionals: false,
   run: async (input) => {
-    const { demoCommand } = await import("./demo-X7LQ24GS.js");
+    const { demoCommand } = await import("./demo-ZRFZ5EBH.js");
     await demoCommand({
       host: getString(input.values, "host"),
       port: getString(input.values, "port"),
@@ -620,7 +620,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillAnswerVisibilityCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillAnswerVisibilityCommand } = await import("./backfill-2BVFKQ6J.js");
       await backfillAnswerVisibilityCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -637,7 +637,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillAnswerMentionsCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillAnswerMentionsCommand } = await import("./backfill-2BVFKQ6J.js");
       await backfillAnswerMentionsCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -655,7 +655,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillInsightsCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillInsightsCommand } = await import("./backfill-2BVFKQ6J.js");
       const usage = "canonry backfill insights <project> [--from-run <id>] [--to-run <id>] [--since <date>] [--dry-run] [--format json]";
       const project3 = requireProject(input, "backfill insights", usage);
       await backfillInsightsCommand(project3, {
@@ -675,7 +675,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { backfillNormalizedPathsCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillNormalizedPathsCommand } = await import("./backfill-2BVFKQ6J.js");
       await backfillNormalizedPathsCommand({
         project: getString(input.values, "project"),
         format: input.format
@@ -690,7 +690,7 @@ var BACKFILL_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { backfillAiReferralPathsCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillAiReferralPathsCommand } = await import("./backfill-2BVFKQ6J.js");
       await backfillAiReferralPathsCommand({
         project: getString(input.values, "project"),
         format: input.format
@@ -702,7 +702,7 @@ var BACKFILL_CLI_COMMANDS = [
     usage: "canonry backfill snapshot-attribution <project> [--dry-run] [--format json]",
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillSnapshotAttributionCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillSnapshotAttributionCommand } = await import("./backfill-2BVFKQ6J.js");
       const usage = "canonry backfill snapshot-attribution <project> [--dry-run] [--format json]";
       const project3 = requireProject(input, "backfill snapshot-attribution", usage);
       await backfillSnapshotAttributionCommand({
@@ -721,7 +721,7 @@ var BACKFILL_CLI_COMMANDS = [
     allowPositionals: false,
     supportsDryRun: true,
     run: async (input) => {
-      const { backfillTrafficClassificationCommand } = await import("./backfill-HZU3BBOH.js");
+      const { backfillTrafficClassificationCommand } = await import("./backfill-2BVFKQ6J.js");
       await backfillTrafficClassificationCommand({
         project: getString(input.values, "project"),
         dryRun: input.dryRun,
@@ -1163,7 +1163,7 @@ var DASHBOARD_CLI_COMMANDS = [
     usage: "canonry dashboard reset-password [--format json]",
     help: "Clears the dashboard password from config.yaml, so the dashboard asks for a new one after a restart.\nLocal only: it edits the config file under CANONRY_CONFIG_DIR and does not call the server.",
     run: async (input) => {
-      const { resetDashboardPassword } = await import("./dashboard-XJJ6NZ2L.js");
+      const { resetDashboardPassword } = await import("./dashboard-BC4NKAO2.js");
       await resetDashboardPassword({ format: input.format });
     }
   },
@@ -6720,7 +6720,7 @@ var SYSTEM_CLI_COMMANDS = [
     options: { access: stringOption() },
     run: async (input) => {
       if (input.positionals.length > 1) throw usageError("Expected at most one command group");
-      const [{ printCliCatalog }, { REGISTERED_CLI_COMMANDS: REGISTERED_CLI_COMMANDS2 }] = await Promise.all([import("./cli-catalog-VRJS66GR.js"), import("./cli-commands-6LZ5OIIP.js")]);
+      const [{ printCliCatalog }, { REGISTERED_CLI_COMMANDS: REGISTERED_CLI_COMMANDS2 }] = await Promise.all([import("./cli-catalog-VRJS66GR.js"), import("./cli-commands-ONFE63OB.js")]);
       printCliCatalog(REGISTERED_CLI_COMMANDS2, input.format, input.positionals[0], getString(input.values, "access"));
     }
   },
@@ -6769,7 +6769,7 @@ var SYSTEM_CLI_COMMANDS = [
     },
     allowPositionals: false,
     run: async (input) => {
-      const { initCommand } = await import("./init-JRGRHLYU.js");
+      const { initCommand } = await import("./init-TU4VSGVU.js");
       await initCommand({
         force: getBoolean(input.values, "force"),
         ref: getString(input.values, "ref"),
@@ -6824,7 +6824,7 @@ var SYSTEM_CLI_COMMANDS = [
     allowPositionals: false,
     run: async (input) => {
       applyServerEnv(input.values);
-      const { serveCommand } = await import("./serve-FTAFEEJD.js");
+      const { serveCommand } = await import("./serve-VIEGFGSK.js");
       await serveCommand(input.format);
     }
   },
@@ -8132,8 +8132,8 @@ var AGENT_CLI_COMMANDS = [
       "timeout-ms": stringOption()
     },
     run: async (input) => {
-      const { coerceAgentProvider } = await import("./session-E4V5MRUE.js");
-      const { AERO_TOOL_PROFILES, isAeroToolProfile } = await import("./tools-XKGEC56T.js");
+      const { coerceAgentProvider } = await import("./session-JLH72BF5.js");
+      const { AERO_TOOL_PROFILES, isAeroToolProfile } = await import("./tools-YOV2KHF2.js");
       const { agentAsk } = await import("./agent-ask-UEYN2SQX.js");
       const usage = `canonry agent ask <project> "<prompt>" [--provider ${AGENT_PROVIDER_IDS.join("|")}] [--model <id>] [--scope all|read-only] [--profile default|ads-operator] [--context <json>] [--conversation <id>] [--max-tool-calls <n>] [--timeout-ms <ms>] [--format json]`;
       const project3 = requireProject(input, "agent.ask", usage);

package/dist/{chunk-TDWNONBU.js → chunk-5GMYD7UZ.js}

@@ -14,7 +14,7 @@ import {
   mergeGscQueryTotalsWithFallback,
   readGscQueryDailyRows,
   readLatestGscDataDate
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import {
   getRequestContext
 } from "./chunk-QNFX7ZCT.js";

package/dist/{chunk-XWDCLX55.js → chunk-6ABOEN5D.js}

@@ -23,7 +23,7 @@ import {
   createRunCompetitorResolver,
   readMarketCompetitorNames,
   refreshSnapshotMentionIdentity
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import {
   classifyAiUserFetch,
   classifyCrawler
@@ -437,7 +437,7 @@ No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-7LCTJQDL.js");
+  const { IntelligenceService } = await import("./intelligence-service-MWTHUE7S.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-DBA374EM.js → chunk-AGSQWIE4.js}

@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-WYTRXYUR.js";
+} from "./chunk-V3QMOGZE.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-QPTSZDHE.js";
+} from "./chunk-JM6OFCLX.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -162,7 +162,7 @@ import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-TDWNONBU.js";
+} from "./chunk-5GMYD7UZ.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
@@ -285,7 +285,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -5658,7 +5658,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "c84ec8de1e654959b9c19d25c2d2e0c6b3da20a5" : void 0;
+  const embedded = true ? "bf661eb5ab6eb02b455254b13b5cc8d0d8ca6536" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -19723,6 +19723,10 @@ async function createServer(opts) {
       schedulerClient.trafficSync(projectName, sourceId).finally(() => {
         scheduledSyncClaims.delete(syncRunClaimKey(projectName, RunKinds["traffic-sync"], sourceId));
       }).catch((err) => {
+        if (err instanceof CliError && err.code === "OPERATION_IN_PROGRESS") {
+          app.log.info({ projectName, sourceId }, "Scheduled traffic sync skipped: the source is busy");
+          return;
+        }
         app.log.error(
           {
             projectName,

package/dist/{chunk-W5TIRS4U.js → chunk-IRRONWF7.js}

@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-FTAFEEJD.js");
+  const { serveCommand } = await import("./serve-VIEGFGSK.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-QPTSZDHE.js → chunk-JM6OFCLX.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,

package/dist/{chunk-WYTRXYUR.js → chunk-V3QMOGZE.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-QPTSZDHE.js";
+} from "./chunk-JM6OFCLX.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NCIPNVD6.js";

package/dist/{cli-commands-6LZ5OIIP.js → cli-commands-ONFE63OB.js}

@@ -1,6 +1,6 @@
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-I5QSS3CY.js";
+} from "./chunk-32KNDPD3.js";
 import "./chunk-6GO5VVAC.js";
 import "./chunk-2LAL5W6J.js";
 import "./chunk-VJWDBFSL.js";

package/dist/cli.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node --import tsx
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-I5QSS3CY.js";
+} from "./chunk-32KNDPD3.js";
 import {
   buildSetupState,
   runPendingServeHandoff
-} from "./chunk-W5TIRS4U.js";
+} from "./chunk-IRRONWF7.js";
 import "./chunk-6GO5VVAC.js";
 import "./chunk-2LAL5W6J.js";
 import "./chunk-VJWDBFSL.js";

package/dist/{dashboard-XJJ6NZ2L.js → dashboard-BC4NKAO2.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   anyUsersExist
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import "./chunk-SG2OPR7J.js";
 import "./chunk-QNFX7ZCT.js";
 import {

package/dist/{demo-X7LQ24GS.js → demo-ZRFZ5EBH.js}

@@ -40,7 +40,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-MBPBTJXG.js");
+  const { createDemoServer } = await import("./demo-server-7R7NGWJA.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-MBPBTJXG.js → demo-server-7R7NGWJA.js}

@@ -18,14 +18,14 @@ import "./chunk-HGMYEDAQ.js";
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-TDWNONBU.js";
+} from "./chunk-5GMYD7UZ.js";
 import {
   determineCitationState
 } from "./chunk-EHTSCLEL.js";
 import {
   apiRoutes,
   assessConversionTrackingIntegrity
-} from "./chunk-Q4U2GJME.js";
+} from "./chunk-22ABGRB7.js";
 import "./chunk-SG2OPR7J.js";
 import "./chunk-QNFX7ZCT.js";
 import {