@canonry/canonry 7.63.0 → 7.64.0

package/dist/{chunk-Q4U2GJME.js → chunk-L6QDD6F5.js}

@@ -9,14 +9,14 @@ import {
   normalizeCloudflareWorkerEvent,
   sessionizeJourneyRequests,
   verifyRequestSignature
-} from "./chunk-SG2OPR7J.js";
+} from "./chunk-HOPQMZOC.js";
 import {
   currentOutcomeAttribution,
   getRequestContext,
   registerRequestContext,
   requestAuditIdentity,
   sanitizeRequestContext
-} from "./chunk-QNFX7ZCT.js";
+} from "./chunk-S67ZCRDF.js";
 import {
   SentimentIdempotencyConflict,
   SentimentRepository,
@@ -154,7 +154,7 @@ import {
   userSessions,
   users,
   writeNegativeReviewMaxStars
-} from "./chunk-HNZQVIPS.js";
+} from "./chunk-3I3TZNDR.js";
 import {
   ADS_ACTIVATE_SCOPE,
   ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
@@ -565,7 +565,9 @@ import {
   conversionTrackingOptionsDtoSchema,
   cosineSimilarity,
   countAdsActivationManifestEntities,
+  countedLeadEventNames,
   countsAsMention,
+  countsKeyEvents,
   createApiKeyRequestSchema,
   createAutoAliasAccumulator,
   createSentimentEvaluationDefinition,
@@ -1163,7 +1165,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-TKLE2Y6H.js";
+} from "./chunk-VCMF4TX5.js";
 
 // ../api-routes/src/user-session.ts
 import crypto2 from "crypto";
@@ -11732,7 +11734,9 @@ async function projectRoutes(app, opts) {
         measurement: {
           marketingHosts: patch.measurement.marketingHosts ?? existing.measurement.marketingHosts,
           brandTerms: patch.measurement.brandTerms ?? existing.measurement.brandTerms,
-          leadEventNames: patch.measurement.leadEventNames ?? existing.measurement.leadEventNames
+          leadEventNames: patch.measurement.leadEventNames ?? existing.measurement.leadEventNames,
+          // Omitted stays omitted, which means on.
+          ...(patch.measurement.countKeyEvents ?? existing.measurement.countKeyEvents) !== void 0 ? { countKeyEvents: patch.measurement.countKeyEvents ?? existing.measurement.countKeyEvents } : {}
         }
       } : {},
       ...patch.autoExtractBacklinks !== void 0 ? { autoExtractBacklinks: patch.autoExtractBacklinks } : {},
@@ -26627,6 +26631,7 @@ function readProjectConfigState(db, name, options = {}) {
       "measurement.marketingHosts": project.measurement.marketingHosts,
       "measurement.brandTerms": project.measurement.brandTerms,
       "measurement.leadEventNames": project.measurement.leadEventNames,
+      "measurement.countKeyEvents": countsKeyEvents(project.measurement),
       locations: project.locations,
       defaultLocation: project.defaultLocation,
       autoExtractBacklinks: project.autoExtractBacklinks,
@@ -29830,7 +29835,7 @@ function literalPathPrefixCondition(path8, prefix) {
 }
 
 // ../api-routes/src/ga-measurement-analysis.ts
-import { and as and44, eq as eq52, gte as gte12, lte as lte11, or as or11, sql as sql18 } from "drizzle-orm";
+import { and as and44, eq as eq52, gte as gte12, inArray as inArray28, lte as lte11, or as or11, sql as sql18 } from "drizzle-orm";
 var UNKNOWN_LANDING_PAGE = "(not set)";
 function addDays(date, offset) {
   const value = /* @__PURE__ */ new Date(`${date}T00:00:00.000Z`);
@@ -30131,8 +30136,16 @@ function buildGaMeasurementAnalysis(db, projectName, options = {}) {
   };
   const acquisitionScope = scopedConditions(gaAcquisitionDaily.hostName, gaAcquisitionDaily.landingPageNormalized, gaAcquisitionDaily.landingPage);
   const leadLandingScope = scopedConditions(gaLeadEventsDaily.hostName, gaLeadEventsDaily.landingPageNormalized, gaLeadEventsDaily.landingPage);
+  const state = db.select().from(gaMeasurementSyncStates).where(eq52(gaMeasurementSyncStates.projectId, project.id)).get();
+  const configuredLeadEvents = [...project.measurement.leadEventNames];
+  const keyEventsEnabled = countsKeyEvents(project.measurement);
+  const keyEventNames = keyEventsEnabled ? state?.keyEventNames ?? null : null;
+  const countedEventNames = countedLeadEventNames(configuredLeadEvents, keyEventNames ?? []);
+  const measuredEventSet = new Set(state?.leadEventNames ?? configuredLeadEvents);
+  const reportedEventNames = countedEventNames.filter((name) => measuredEventSet.has(name));
+  const leadEventCondition = reportedEventNames.length > 0 ? inArray28(gaLeadEventsDaily.eventName, reportedEventNames) : null;
   const acquisitionAnchor = db.select({ date: sql18`max(${gaAcquisitionDaily.date})` }).from(gaAcquisitionDaily).where(and44(eq52(gaAcquisitionDaily.projectId, project.id), ...acquisitionScope)).get()?.date ?? null;
-  const leadAnchor = db.select({ date: sql18`max(${gaLeadEventsDaily.date})` }).from(gaLeadEventsDaily).where(and44(eq52(gaLeadEventsDaily.projectId, project.id), or11(
+  const leadAnchor = leadEventCondition === null ? null : db.select({ date: sql18`max(${gaLeadEventsDaily.date})` }).from(gaLeadEventsDaily).where(and44(eq52(gaLeadEventsDaily.projectId, project.id), leadEventCondition, or11(
     eq52(gaLeadEventsDaily.attributionScope, "channel"),
     and44(eq52(gaLeadEventsDaily.attributionScope, "landing-page"), ...leadLandingScope)
   ))).get()?.date ?? null;
@@ -30140,7 +30153,7 @@ function buildGaMeasurementAnalysis(db, projectName, options = {}) {
   const gaPeriods = gaAnchor ? buildPeriods(gaAnchor, days) : [];
   const gaStartDate = gaPeriods[0]?.startDate;
   const acquisitionRows = gaStartDate ? db.select().from(gaAcquisitionDaily).where(and44(eq52(gaAcquisitionDaily.projectId, project.id), gte12(gaAcquisitionDaily.date, gaStartDate), lte11(gaAcquisitionDaily.date, gaAnchor))).all() : [];
-  const leadRows = gaStartDate ? db.select().from(gaLeadEventsDaily).where(and44(eq52(gaLeadEventsDaily.projectId, project.id), gte12(gaLeadEventsDaily.date, gaStartDate), lte11(gaLeadEventsDaily.date, gaAnchor))).all() : [];
+  const leadRows = gaStartDate && leadEventCondition !== null ? db.select().from(gaLeadEventsDaily).where(and44(eq52(gaLeadEventsDaily.projectId, project.id), leadEventCondition, gte12(gaLeadEventsDaily.date, gaStartDate), lte11(gaLeadEventsDaily.date, gaAnchor))).all() : [];
   const engagementAnchor = db.select({ date: sql18`max(${gaDailyTotals.date})` }).from(gaDailyTotals).where(eq52(gaDailyTotals.projectId, project.id)).get()?.date ?? null;
   const engagementPeriodWindow = engagementAnchor ? buildPeriods(engagementAnchor, days) : [];
   const engagementStartDate = engagementPeriodWindow[0]?.startDate;
@@ -30164,7 +30177,6 @@ function buildGaMeasurementAnalysis(db, projectName, options = {}) {
   const propertyRows = gscStartDate ? db.select().from(gscDailyTotals).where(and44(eq52(gscDailyTotals.projectId, project.id), gte12(gscDailyTotals.date, gscStartDate), lte11(gscDailyTotals.date, gscAnchor))).all() : [];
   const queryRows2 = gscStartDate ? db.select().from(gscQueryDailyTotals).where(and44(eq52(gscQueryDailyTotals.projectId, project.id), gte12(gscQueryDailyTotals.date, gscStartDate), lte11(gscQueryDailyTotals.date, gscAnchor))).all() : [];
   const rawPageRows = gscStartDate ? db.select().from(gscSearchData).where(and44(eq52(gscSearchData.projectId, project.id), gte12(gscSearchData.date, gscStartDate), lte11(gscSearchData.date, gscAnchor))).all() : [];
-  const state = db.select().from(gaMeasurementSyncStates).where(eq52(gaMeasurementSyncStates.projectId, project.id)).get();
   const acquisition = acquisitionRows.filter((row) => {
     const landingPage = normalizeLandingPage(row.landingPageNormalized ?? row.landingPage);
     return hostIsIncluded(row.hostName) && pageIsIncluded(landingPage);
@@ -30211,6 +30223,19 @@ function buildGaMeasurementAnalysis(db, projectName, options = {}) {
     (row) => row.channelGroup,
     (row) => row.eventCount
   );
+  const leadEvents = aggregateByKey(
+    leads,
+    gaPeriods,
+    (row) => row.eventName,
+    (row) => row.eventCount
+  );
+  for (const eventName of reportedEventNames) {
+    if (!leadEvents.has(eventName)) leadEvents.set(eventName, gaPeriods.map(() => 0));
+  }
+  const unmeasuredEventNames = countedEventNames.filter((name) => !measuredEventSet.has(name));
+  const configuredEventSet = new Set(configuredLeadEvents);
+  const keyEventSet = new Set(keyEventNames ?? []);
+  const eventOrigin = (eventName) => configuredEventSet.has(eventName) && keyEventSet.has(eventName) ? "both" : keyEventSet.has(eventName) ? "key-event" : "configured";
   const filtersNarrowSessions = parsedHostScope.data === "marketing" || pathPrefix !== null && pathPrefix !== "/";
   const hasAiEngineLeadData = gaAnchor !== null && hasLeadTimeline;
   const aiEngineRows = attributeAiEngineRows({
@@ -30338,7 +30363,27 @@ function buildGaMeasurementAnalysis(db, projectName, options = {}) {
         channelGroup,
         periods: eventPeriods(gaPeriods, values)
       })),
-      aiEngines: aiEngineLeads
+      aiEngines: aiEngineLeads,
+      countedEvents: {
+        configured: configuredLeadEvents,
+        keyEventsEnabled,
+        keyEvents: keyEventNames,
+        keyEventsError: keyEventsEnabled ? state?.keyEventsError ?? null : null
+      },
+      events: [
+        ...gaAnchor && hasLeadTimeline ? rankEntries(leadEvents).map(([eventName, values]) => ({
+          eventName,
+          origin: eventOrigin(eventName),
+          measured: true,
+          periods: eventPeriods(gaPeriods, values)
+        })) : [],
+        ...unmeasuredEventNames.map((eventName) => ({
+          eventName,
+          origin: eventOrigin(eventName),
+          measured: false,
+          periods: []
+        }))
+      ]
     },
     engagement: {
       status: engagementAnchor === null ? "unavailable" : "ready",
@@ -30921,7 +30966,7 @@ async function organicEvidenceRoutes(app) {
 }
 
 // ../api-routes/src/citations.ts
-import { and as and46, eq as eq54, inArray as inArray28 } from "drizzle-orm";
+import { and as and46, eq as eq54, inArray as inArray29 } from "drizzle-orm";
 async function citationRoutes(app) {
   app.get("/projects/:name/citations/visibility", async (request, reply) => {
     const project = resolveProject(app.db, request.params.name);
@@ -30945,7 +30990,7 @@ async function citationRoutes(app) {
       competitorOverlap: querySnapshots.competitorOverlap,
       answerMentioned: querySnapshots.answerMentioned,
       createdAt: querySnapshots.createdAt
-    }).from(querySnapshots).where(inArray28(querySnapshots.runId, projectRuns.map((r) => r.id))).all();
+    }).from(querySnapshots).where(inArray29(querySnapshots.runId, projectRuns.map((r) => r.id))).all();
     if (rawSnapshots.length === 0) {
       return reply.send(emptyCitationVisibility("no-runs-yet"));
     }
@@ -31082,7 +31127,7 @@ function computeCitationVisibility(input) {
 }
 
 // ../api-routes/src/visibility-stats.ts
-import { and as and47, desc as desc26, eq as eq55, inArray as inArray29 } from "drizzle-orm";
+import { and as and47, desc as desc26, eq as eq55, inArray as inArray30 } from "drizzle-orm";
 
 // ../api-routes/src/visibility-compare.ts
 var VISIBILITY_COMPARE_MIN_RUNS = 5;
@@ -31569,7 +31614,7 @@ async function visibilityStatsRoutes(app) {
       citationState: querySnapshots.citationState,
       answerMentioned: querySnapshots.answerMentioned,
       createdAt: querySnapshots.createdAt
-    }).from(querySnapshots).where(inArray29(querySnapshots.runId, runIds)).all() : [];
+    }).from(querySnapshots).where(inArray30(querySnapshots.runId, runIds)).all() : [];
     const stats = computeVisibilityStats({ queries: projectQueries, snapshots, groupBy });
     const queryAttribution = buildQueryAttribution(projectQueries);
     let shareOfVoice;
@@ -31580,7 +31625,7 @@ async function visibilityStatsRoutes(app) {
         queryText: querySnapshots.queryText,
         answerMentioned: querySnapshots.answerMentioned,
         answerText: querySnapshots.answerText
-      }).from(querySnapshots).where(inArray29(querySnapshots.runId, runIds)).all() : [];
+      }).from(querySnapshots).where(inArray30(querySnapshots.runId, runIds)).all() : [];
       const attributedSovSnapshots = sovSnapshots.filter((s) => resolveCurrentQuery(queryAttribution, s) !== void 0);
       const advanced = activeMeasurementPlan(app.db, project.id)?.plan.schemaVersion === 2;
       const queryClass = advanced || projectQueryClassifier(project) ? requestedQueryClass : "all";
@@ -31678,7 +31723,7 @@ function readVisibilityCompare(db, projectName, query) {
       answerText: querySnapshots.answerText,
       citedDomains: querySnapshots.citedDomains,
       location: querySnapshots.location
-    }).from(querySnapshots).where(inArray29(querySnapshots.runId, runIds)).all() : [];
+    }).from(querySnapshots).where(inArray30(querySnapshots.runId, runIds)).all() : [];
     return {
       runCount: runIds.length,
       snapshots: snapshots.filter((snapshot) => (providerKey2 === void 0 || normalizeIdentityText(snapshot.provider) === providerKey2) && (locationKey2 === void 0 || (locationKey2 === "none" ? snapshot.location === null : snapshot.location !== null && normalizeIdentityText(snapshot.location) === locationKey2)))
@@ -31797,7 +31842,7 @@ function readVisibilityContinuity(db, projectName, months) {
   const trackedQueries = db.select({ id: queries.id, query: queries.query }).from(queries).where(eq55(queries.projectId, project.id)).all();
   const loadProjectMonth = (bounds) => {
     const runIds = legacyCompareRunIds(db, project.id, bounds);
-    const rows = runIds.length > 0 && trackedQueries.length > 0 ? db.select({ queryId: querySnapshots.queryId, queryText: querySnapshots.queryText, provider: querySnapshots.provider, model: querySnapshots.model }).from(querySnapshots).where(inArray29(querySnapshots.runId, runIds)).all() : [];
+    const rows = runIds.length > 0 && trackedQueries.length > 0 ? db.select({ queryId: querySnapshots.queryId, queryText: querySnapshots.queryText, provider: querySnapshots.provider, model: querySnapshots.model }).from(querySnapshots).where(inArray30(querySnapshots.runId, runIds)).all() : [];
     return { runCount: runIds.length, snapshots: rows.map(bare) };
   };
   const frames = [{ frame: "project", continuity: gate(trackedQueries, loadProjectMonth(fromBounds), loadProjectMonth(toBounds)) }];
@@ -32057,7 +32102,7 @@ async function resultsExportRoutes(app) {
 }
 
 // ../api-routes/src/composites.ts
-import { eq as eq57, and as and49, desc as desc27, sql as sql20, like as like5, or as or13, inArray as inArray30 } from "drizzle-orm";
+import { eq as eq57, and as and49, desc as desc27, sql as sql20, like as like5, or as or13, inArray as inArray31 } from "drizzle-orm";
 var TOP_INSIGHT_LIMIT = 5;
 var SEARCH_HIT_HARD_LIMIT = 50;
 var SEARCH_SNIPPET_RADIUS = 80;
@@ -32358,7 +32403,7 @@ function loadSnapshotsByRunIds(app, runIds, queryIdByText) {
     rawResponse: querySnapshots.rawResponse,
     competitorOverlap: querySnapshots.competitorOverlap,
     citedDomains: querySnapshots.citedDomains
-  }).from(querySnapshots).where(inArray30(querySnapshots.runId, [...runIds])).all();
+  }).from(querySnapshots).where(inArray31(querySnapshots.runId, [...runIds])).all();
   for (const row of rows) {
     const queryText = row.queryText?.trim() || null;
     let queryId;
@@ -32798,7 +32843,7 @@ import crypto29 from "crypto";
 import { and as and51, desc as desc29, eq as eq59 } from "drizzle-orm";
 
 // ../api-routes/src/content-data.ts
-import { and as and50, eq as eq58, desc as desc28, gte as gte15, inArray as inArray31, lte as lte14 } from "drizzle-orm";
+import { and as and50, eq as eq58, desc as desc28, gte as gte15, inArray as inArray32, lte as lte14 } from "drizzle-orm";
 var RECENT_RUNS_WINDOW = 5;
 function loadOrchestratorInput(db, project, locationFilter = void 0, gscWindowDays = DEFAULT_CONTENT_GSC_WINDOW_DAYS) {
   const projectId = project.id;
@@ -32938,7 +32983,7 @@ function listRecentAnswerVisibilityRunIds(db, projectId, limit, locationFilter)
       // Queued/running/failed/cancelled runs may have partial or no
       // snapshots; including them risks pointing latestRunId at a run with
       // no usable evidence.
-      inArray31(runs.status, [RunStatuses.completed, RunStatuses.partial]),
+      inArray32(runs.status, [RunStatuses.completed, RunStatuses.partial]),
       // Probe runs are operator/agent test runs; they must not poison the
       // recent-runs window the content engine uses to recommend actions.
       notProbeRun()
@@ -33006,7 +33051,7 @@ function buildCandidateQueries(opts) {
   const queryRows2 = opts.db.select({ id: queries.id, text: queries.query }).from(queries).where(eq58(queries.projectId, opts.projectId)).all();
   const queryIdByText = new Map(queryRows2.map((r) => [r.text, r.id]));
   const candidateQueryIds = opts.candidateQueryStrings.map((q) => queryIdByText.get(q)).filter((id) => Boolean(id));
-  const snapshotRows = filterTrackedSnapshots(opts.db.select().from(querySnapshots).where(inArray31(querySnapshots.runId, opts.recentRunIds)).all()).filter((r) => candidateQueryIds.includes(r.queryId));
+  const snapshotRows = filterTrackedSnapshots(opts.db.select().from(querySnapshots).where(inArray32(querySnapshots.runId, opts.recentRunIds)).all()).filter((r) => candidateQueryIds.includes(r.queryId));
   const snapshotsByQuery = /* @__PURE__ */ new Map();
   for (const row of snapshotRows) {
     const list = snapshotsByQuery.get(row.queryId) ?? [];
@@ -45064,7 +45109,7 @@ async function gbpLocalPostsRoutes(app, options) {
 }
 
 // ../api-routes/src/google.ts
-import { eq as eq66, and as and54, desc as desc31, sql as sql21, inArray as inArray32 } from "drizzle-orm";
+import { eq as eq66, and as and54, desc as desc31, sql as sql21, inArray as inArray33 } from "drizzle-orm";
 
 // ../api-routes/src/gsc-period-comparison.ts
 var DAY_MS2 = 864e5;
@@ -45937,39 +45982,7 @@ async function listProperties(accessToken) {
         headers: { "Authorization": `Bearer ${accessToken}` },
         signal: AbortSignal.timeout(GA4_REQUEST_TIMEOUT_MS)
       });
-      if (!res.ok) {
-        const raw = await res.text().catch(() => "");
-        let detail = "";
-        let quotaReason = false;
-        try {
-          const parsed = JSON.parse(raw);
-          if (parsed.error?.status === "SERVICE_DISABLED") {
-            detail = " The Google Analytics Admin API is not enabled for this GCP project. Enable it at: https://console.developers.google.com/apis/api/analyticsadmin.googleapis.com/overview";
-          } else if (parsed.error?.message) {
-            detail = ` ${parsed.error.message}`;
-          }
-          quotaReason = (parsed.error?.errors ?? []).some(
-            (e) => e.reason === "rateLimitExceeded" || e.reason === "quotaExceeded" || e.reason === "userRateLimitExceeded"
-          ) || parsed.error?.status === "RESOURCE_EXHAUSTED";
-        } catch {
-          if (raw.length < 200) detail = ` ${raw}`;
-        }
-        const sanitized = detail.replace(new RegExp(escapeRegExp(accessToken), "g"), "***");
-        const retryAfterSeconds2 = res.status === 429 || res.status >= 500 || res.status === 403 && quotaReason ? parseRetryAfter(res.headers.get("retry-after")) : void 0;
-        ga4Log("error", "admin.account-summaries-failed", {
-          httpStatus: res.status,
-          retryAfterSeconds: retryAfterSeconds2,
-          quotaReason
-        });
-        throw new GA4ApiError(
-          `Failed to list GA4 properties.${sanitized}`,
-          // A quota 403 is surfaced as 429 so every downstream consumer — the
-          // retry predicate and the route's error mapper — reads it as rate
-          // limiting rather than as a permission denial.
-          res.status === 403 && quotaReason ? 429 : res.status,
-          retryAfterSeconds2
-        );
-      }
+      if (!res.ok) throw await adminApiError(res, accessToken, "admin.account-summaries-failed", "Failed to list GA4 properties.");
       return await res.json();
     }, "GA4 accountSummaries"));
     for (const account of body.accountSummaries ?? []) {
@@ -45987,6 +46000,53 @@ async function listProperties(accessToken) {
   } while (pageToken);
   return properties;
 }
+async function adminApiError(res, accessToken, logAction, message) {
+  const raw = await res.text().catch(() => "");
+  let detail = "";
+  let quotaReason = false;
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed.error?.status === "SERVICE_DISABLED") {
+      detail = " The Google Analytics Admin API is not enabled for this GCP project. Enable it at: https://console.developers.google.com/apis/api/analyticsadmin.googleapis.com/overview";
+    } else if (parsed.error?.message) {
+      detail = ` ${parsed.error.message}`;
+    }
+    quotaReason = (parsed.error?.errors ?? []).some(
+      (e) => e.reason === "rateLimitExceeded" || e.reason === "quotaExceeded" || e.reason === "userRateLimitExceeded"
+    ) || parsed.error?.status === "RESOURCE_EXHAUSTED";
+  } catch {
+    if (raw.length < 200) detail = ` ${raw}`;
+  }
+  const sanitized = detail.replace(new RegExp(escapeRegExp(accessToken), "g"), "***");
+  const retryAfterSeconds2 = res.status === 429 || res.status >= 500 || res.status === 403 && quotaReason ? parseRetryAfter(res.headers.get("retry-after")) : void 0;
+  ga4Log("error", logAction, { httpStatus: res.status, retryAfterSeconds: retryAfterSeconds2, quotaReason });
+  return new GA4ApiError(`${message}${sanitized}`, res.status === 403 && quotaReason ? 429 : res.status, retryAfterSeconds2);
+}
+async function fetchKeyEventNames(accessToken, propertyId) {
+  validateAccessToken2(accessToken);
+  validatePropertyId(propertyId);
+  const names = /* @__PURE__ */ new Set();
+  let pageToken;
+  do {
+    const url = new URL(`${GA4_ADMIN_API_BASE}/properties/${propertyId}/keyEvents`);
+    url.searchParams.set("pageSize", "200");
+    if (pageToken) url.searchParams.set("pageToken", pageToken);
+    const body = await withGa4Limit(() => withGa4Retry(async () => {
+      const res = await fetchWithContext(url, {
+        headers: { "Authorization": `Bearer ${accessToken}` },
+        signal: AbortSignal.timeout(GA4_REQUEST_TIMEOUT_MS)
+      });
+      if (!res.ok) throw await adminApiError(res, accessToken, "admin.key-events-failed", "Failed to list GA4 key events.");
+      return await res.json();
+    }, "GA4 keyEvents"));
+    for (const keyEvent of body.keyEvents ?? []) {
+      const name = keyEvent.eventName?.trim();
+      if (name) names.add(name);
+    }
+    pageToken = body.nextPageToken;
+  } while (pageToken);
+  return [...names].sort();
+}
 async function fetchAggregateSummary(accessToken, propertyId, days) {
   validateAccessToken2(accessToken);
   validatePropertyId(propertyId);
@@ -48304,10 +48364,10 @@ async function googleRoutes(app, opts) {
         locationProfiles: []
       });
     }
-    const metricRows = app.db.select().from(gbpDailyMetrics).where(and54(eq66(gbpDailyMetrics.projectId, project.id), inArray32(gbpDailyMetrics.locationName, locationNames))).all();
-    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and54(eq66(gbpKeywordImpressions.projectId, project.id), inArray32(gbpKeywordImpressions.locationName, locationNames))).all();
-    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and54(eq66(gbpPlaceActions.projectId, project.id), inArray32(gbpPlaceActions.locationName, locationNames))).all();
-    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and54(eq66(gbpLodgingSnapshots.projectId, project.id), inArray32(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc31(gbpLodgingSnapshots.syncedAt)).all();
+    const metricRows = app.db.select().from(gbpDailyMetrics).where(and54(eq66(gbpDailyMetrics.projectId, project.id), inArray33(gbpDailyMetrics.locationName, locationNames))).all();
+    const keywordRows = app.db.select().from(gbpKeywordImpressions).where(and54(eq66(gbpKeywordImpressions.projectId, project.id), inArray33(gbpKeywordImpressions.locationName, locationNames))).all();
+    const placeActionRows = app.db.select().from(gbpPlaceActions).where(and54(eq66(gbpPlaceActions.projectId, project.id), inArray33(gbpPlaceActions.locationName, locationNames))).all();
+    const lodgingRows = app.db.select().from(gbpLodgingSnapshots).where(and54(eq66(gbpLodgingSnapshots.projectId, project.id), inArray33(gbpLodgingSnapshots.locationName, locationNames))).orderBy(desc31(gbpLodgingSnapshots.syncedAt)).all();
     const latestLodgingByLocation = /* @__PURE__ */ new Map();
     for (const row of lodgingRows) {
       if (!latestLodgingByLocation.has(row.locationName)) {
@@ -48321,7 +48381,7 @@ async function googleRoutes(app, opts) {
       regularHours: gbpLocations.regularHours,
       primaryPhone: gbpLocations.primaryPhone,
       openStatus: gbpLocations.openStatus
-    }).from(gbpLocations).where(and54(eq66(gbpLocations.projectId, project.id), inArray32(gbpLocations.locationName, locationNames))).all();
+    }).from(gbpLocations).where(and54(eq66(gbpLocations.projectId, project.id), inArray33(gbpLocations.locationName, locationNames))).all();
     return buildGbpSummary({
       locationName,
       locationCount: locationNames.length,
@@ -49991,7 +50051,7 @@ async function googleMarketingRoutes(app, opts) {
 
 // ../api-routes/src/ads.ts
 import crypto42 from "crypto";
-import { eq as eq69, and as and57, asc as asc15, desc as desc33, gt as gt6, gte as gte16, lt as lt10, lte as lte16, ne as ne13, inArray as inArray33, or as or16, isNull as isNull12, isNotNull as isNotNull7, sql as sql24 } from "drizzle-orm";
+import { eq as eq69, and as and57, asc as asc15, desc as desc33, gt as gt6, gte as gte16, lt as lt10, lte as lte16, ne as ne13, inArray as inArray34, or as or16, isNull as isNull12, isNotNull as isNotNull7, sql as sql24 } from "drizzle-orm";
 
 // ../api-routes/src/ads-activation.ts
 import crypto40 from "crypto";
@@ -53089,7 +53149,7 @@ function semanticallyMatchesMaterializedEntity(app, input) {
     eq69(adsOperations.projectId, input.projectId),
     eq69(adsOperations.entityType, input.entityType),
     eq69(adsOperations.entityId, input.entityId),
-    inArray33(adsOperations.kind, [createKind, updateKind])
+    inArray34(adsOperations.kind, [createKind, updateKind])
   )).orderBy(asc15(adsOperations.createdAt), asc15(adsOperations.id)).all();
   if (rows.some((row) => row.state === AdsOperationStates.pending || row.state === AdsOperationStates.reconciling || row.state === AdsOperationStates.unknown || row.kind === updateKind && row.state === AdsOperationStates.succeeded)) {
     return false;
@@ -53537,7 +53597,7 @@ function quarantineExhaustedReconciliation(app, row, now, policy, context) {
       eq69(adsOperations.id, row.id),
       eq69(adsOperations.projectId, row.projectId),
       gte16(adsOperations.reconcileAttempts, policy.maxAttempts),
-      inArray33(adsOperations.state, [
+      inArray34(adsOperations.state, [
         AdsOperationStates.pending,
         AdsOperationStates.unknown,
         AdsOperationStates.reconciling
@@ -53781,7 +53841,7 @@ async function sweepAdsOperationsOnce(app, opts, config) {
         eq69(adsOperations.reconcileStrategy, AdsReconcileStrategies.create_fingerprint),
         or16(
           isNotNull7(adsOperations.entityId),
-          inArray33(adsOperations.state, [
+          inArray34(adsOperations.state, [
             AdsOperationStates.pending,
             AdsOperationStates.reconciling
           ])
@@ -53832,7 +53892,7 @@ async function sweepAdsOperationsOnce(app, opts, config) {
   const eligibleProjectIds = [...credentialsByProjectId.keys()];
   if (eligibleProjectIds.length === 0) return;
   const rows = app.db.select().from(adsOperations).where(and57(
-    inArray33(adsOperations.projectId, eligibleProjectIds),
+    inArray34(adsOperations.projectId, eligibleProjectIds),
     staleReconcileWhere
   )).orderBy(asc15(adsOperations.updatedAt)).limit(config.batchSize).all();
   for (const row of rows) {
@@ -54158,7 +54218,7 @@ async function adsRoutes(app, opts) {
     const cursor = parsed.data.cursor ? decodeAdsOperationCursor(parsed.data.cursor, project.id, parsed.data.state) : void 0;
     const rows = app.db.select().from(adsOperations).where(and57(
       eq69(adsOperations.projectId, project.id),
-      inArray33(adsOperations.state, parsed.data.state),
+      inArray34(adsOperations.state, parsed.data.state),
       cursor ? or16(
         gt6(adsOperations.createdAt, cursor.createdAt),
         and57(
@@ -54592,7 +54652,7 @@ async function adsRoutes(app, opts) {
     const inFlight2 = app.db.select({ id: runs.id, status: runs.status }).from(runs).where(and57(
       eq69(runs.projectId, project.id),
       eq69(runs.kind, RunKinds["ads-sync"]),
-      inArray33(runs.status, [RunStatuses.queued, RunStatuses.running])
+      inArray34(runs.status, [RunStatuses.queued, RunStatuses.running])
     )).get();
     if (inFlight2) {
       const existing = { runId: inFlight2.id, status: inFlight2.status };
@@ -56623,6 +56683,7 @@ function persistLeadMeasurement(db, input) {
       leadError: null,
       leadSyncedAt: input.syncedAt,
       leadAttributionScope: input.report.attributionScope,
+      leadEventNames: input.eventNames,
       updatedAt: input.syncedAt
     }).onConflictDoUpdate({
       target: gaMeasurementSyncStates.projectId,
@@ -56631,6 +56692,7 @@ function persistLeadMeasurement(db, input) {
         leadError: null,
         leadSyncedAt: input.syncedAt,
         leadAttributionScope: input.report.attributionScope,
+        leadEventNames: input.eventNames,
         updatedAt: input.syncedAt
       }
     }).run();
@@ -56639,12 +56701,23 @@ function persistLeadMeasurement(db, input) {
 function resetLeadMeasurement(db, projectId, updatedAt) {
   db.transaction((tx) => {
     tx.delete(gaLeadEventsDaily).where(eq73(gaLeadEventsDaily.projectId, projectId)).run();
-    tx.insert(gaMeasurementSyncStates).values({ projectId, leadStatus: "never-synced", leadError: null, leadSyncedAt: null, leadAttributionScope: null, updatedAt }).onConflictDoUpdate({
+    tx.insert(gaMeasurementSyncStates).values({ projectId, leadStatus: "never-synced", leadError: null, leadSyncedAt: null, leadAttributionScope: null, leadEventNames: null, updatedAt }).onConflictDoUpdate({
       target: gaMeasurementSyncStates.projectId,
-      set: { leadStatus: "never-synced", leadError: null, leadSyncedAt: null, leadAttributionScope: null, updatedAt }
+      set: { leadStatus: "never-synced", leadError: null, leadSyncedAt: null, leadAttributionScope: null, leadEventNames: null, updatedAt }
     }).run();
   });
 }
+function persistKeyEventRead(db, projectId, read, updatedAt) {
+  if (read.status === "disabled") return;
+  const set = read.status === "read" ? { keyEventNames: read.names, keyEventsError: null, updatedAt } : { keyEventsError: read.error ?? "Key event read failed", updatedAt };
+  db.insert(gaMeasurementSyncStates).values({ projectId, ...set }).onConflictDoUpdate({
+    target: gaMeasurementSyncStates.projectId,
+    set
+  }).run();
+}
+function sameEventNames(left, right) {
+  return left.length === right.length && left.every((name, index) => name === right[index]);
+}
 function persistMeasurementError(db, projectId, component, message, updatedAt) {
   if (component === "acquisition") {
     db.insert(gaMeasurementSyncStates).values({
@@ -56994,8 +57067,9 @@ async function ga4Routes(app, opts) {
     const syncSearchLanding = !only || only === "search-landing";
     const measurementState = app.db.select().from(gaMeasurementSyncStates).where(eq73(gaMeasurementSyncStates.projectId, project.id)).get();
     const acquisitionDays = measurementState?.acquisitionSyncedAt != null ? days : GA4_MAX_SYNC_DAYS;
-    const leadDays = measurementState?.leadSyncedAt != null ? days : GA4_MAX_SYNC_DAYS;
-    const leadEventNames = project.measurement.leadEventNames;
+    let leadDays = GA4_MAX_SYNC_DAYS;
+    let leadEventNames = [];
+    let keyEventRead = { status: "disabled", names: [] };
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
     const runId = crypto47.randomUUID();
     app.db.insert(runs).values({
@@ -57013,6 +57087,18 @@ async function ga4Routes(app, opts) {
     try {
       const { accessToken, propertyId } = await resolveGa4AccessToken(opts, project.name, project.canonicalDomain);
       credentialsResolved = true;
+      if (countsKeyEvents(project.measurement)) {
+        try {
+          keyEventRead = { status: "read", names: await fetchKeyEventNames(accessToken, propertyId) };
+        } catch (error) {
+          keyEventRead = { status: "error", names: measurementState?.keyEventNames ?? [], error: describeError(error) };
+        }
+        persistKeyEventRead(app.db, project.id, keyEventRead, (/* @__PURE__ */ new Date()).toISOString());
+      }
+      leadEventNames = countedLeadEventNames(project.measurement.leadEventNames, keyEventRead.names);
+      const previousLeadEvents = measurementState?.leadEventNames ?? null;
+      const leadEventsChanged = previousLeadEvents === null || !sameEventNames(previousLeadEvents, leadEventNames);
+      leadDays = measurementState?.leadSyncedAt != null && !leadEventsChanged ? days : GA4_MAX_SYNC_DAYS;
       let rows = [];
       let aiReferrals = [];
       let socialReferrals = [];
@@ -57276,13 +57362,16 @@ async function ga4Routes(app, opts) {
             projectId: project.id,
             runId,
             syncedAt: measurementNow,
-            report: leadsSettled.value
+            report: leadsSettled.value,
+            eventNames: leadEventNames
           });
           return {
             status: "ready",
             days: leadDays,
             rowCount: leadsSettled.value.rows.length,
-            attributionScope: leadsSettled.value.attributionScope
+            attributionScope: leadsSettled.value.attributionScope,
+            eventNames: leadEventNames,
+            keyEvents: keyEventRead
           };
         } catch (error) {
           return recordMeasurementFailure("leads", error);
@@ -60441,7 +60530,7 @@ async function backlinksRoutes(app, opts) {
 import crypto52 from "crypto";
 import { isIP } from "net";
 import { isDeepStrictEqual } from "util";
-import { and as and69, desc as desc39, eq as eq80, gt as gt7, gte as gte19, inArray as inArray34, lt as lt13, lte as lte20, sql as sql30 } from "drizzle-orm";
+import { and as and69, desc as desc39, eq as eq80, gt as gt7, gte as gte19, inArray as inArray35, lt as lt13, lte as lte20, sql as sql30 } from "drizzle-orm";
 
 // ../api-routes/src/traffic-limits.ts
 var VERCEL_MAX_SYNC_WINDOW_MS = 24 * 60 * 6e4;
@@ -62187,6 +62276,9 @@ var CLOUDFLARE_QUEUE_RETENTION_READ_TIMEOUT_MS = 1e4;
 var CLOUDFLARE_QUEUE_VISIBILITY_TIMEOUT_MS = 5 * 6e4;
 var CLOUDFLARE_QUEUE_SYNC_LEASE_TTL_MS = 5 * 6e4;
 var WORDPRESS_SYNC_LEASE_TTL_MS = 5 * 6e4;
+var PULL_SYNC_LEASE_TTL_MS = 10 * 6e4;
+var TRAFFIC_BACKFILL_LEASE_TTL_MS = 5 * 6e4;
+var TRAFFIC_BACKFILL_LEASE_RENEW_MS = 6e4;
 var DEFAULT_CLOUDFLARE_INGEST_RATE_LIMIT_MAX = 6e3;
 var SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/i;
 function sha256Hex3(value) {
@@ -62533,6 +62625,9 @@ function isAuthoritativeTrafficSource(db, source) {
 function trafficConnectStatus(tx, projectId, existingSource) {
   return existingSource?.status === TrafficSourceStatuses.paused || hasConnectedTrafficSourceSibling(tx, projectId, existingSource?.id ?? "") ? TrafficSourceStatuses.paused : TrafficSourceStatuses.connected;
 }
+function isSameBackfillSource(current, started, leaseOwner) {
+  return current.syncLeaseOwner === leaseOwner && isSameTrafficSourceGeneration(current, started);
+}
 function isSameTrafficSourceGeneration(current, started) {
   return isDeepStrictEqual(current.configJson, started.configJson) && current.updatedAt === started.updatedAt && current.lastSyncedAt === started.lastSyncedAt && current.lastCursor === started.lastCursor && current.wordpressPendingUntil === started.wordpressPendingUntil;
 }
@@ -62586,6 +62681,42 @@ function vercelRetentionClampError(requestedStartMs, effectiveStartMs) {
   return new VercelRetentionClampError(requestedStartMs, effectiveStartMs);
 }
 async function runBackfillTask(options) {
+  const { app, sourceRow: sourceRow2, leaseOwner } = options;
+  const stopped = new AbortController();
+  const releaseLease = () => {
+    try {
+      releaseTrafficSyncLease({ db: app.db, sourceId: sourceRow2.id, owner: leaseOwner, now: (/* @__PURE__ */ new Date()).toISOString() });
+    } catch {
+    }
+  };
+  const renewLease2 = setInterval(() => {
+    try {
+      const latest = app.db.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
+      if (!latest || !isAuthoritativeTrafficSource(app.db, latest) || !isSameTrafficSourceGeneration(latest, sourceRow2)) {
+        clearInterval(renewLease2);
+        stopped.abort();
+        releaseLease();
+        return;
+      }
+      tryClaimTrafficSyncLease({
+        db: app.db,
+        sourceId: sourceRow2.id,
+        owner: leaseOwner,
+        now: (/* @__PURE__ */ new Date()).toISOString(),
+        ttlMs: TRAFFIC_BACKFILL_LEASE_TTL_MS
+      });
+    } catch {
+    }
+  }, options.leaseRenewMs);
+  renewLease2.unref?.();
+  try {
+    await runBackfillTaskHoldingLease(options, stopped.signal);
+  } finally {
+    clearInterval(renewLease2);
+    releaseLease();
+  }
+}
+async function runBackfillTaskHoldingLease(options, signal) {
   const {
     app,
     runId,
@@ -62595,7 +62726,8 @@ async function runBackfillTask(options) {
     windowEnd,
     journeyKeySecret,
     pullForBackfill,
-    pullErrorPrefix
+    pullErrorPrefix,
+    leaseOwner
   } = options;
   const backfillStartedAt = Date.now();
   const target = { feature: "server_traffic", operation: "backfill", attribution: currentOutcomeAttribution() };
@@ -62609,7 +62741,7 @@ async function runBackfillTask(options) {
       app.db.transaction((tx) => {
         tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq80(runs.id, runId)).run();
         const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-        if (!preserveSourceState && latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+        if (!preserveSourceState && latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameBackfillSource(latestSource, sourceRow2, leaseOwner)) {
           tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq80(trafficSources.id, sourceRow2.id)).run();
         }
       });
@@ -62623,8 +62755,13 @@ async function runBackfillTask(options) {
   }
   let allEvents;
   try {
-    allEvents = await pullForBackfill();
+    allEvents = await pullForBackfill(signal);
   } catch (e) {
+    if (signal.aborted) {
+      markFailed("Backfill stopped: the traffic source was reset, reconnected or deactivated while it ran", true);
+      reportBackfill({ status: OutcomeStatuses.failed, reasonCode: OutcomeReasonCodes.NOT_CONNECTED });
+      return;
+    }
     markFailed(
       `${pullErrorPrefix}: ${describeError(e)}`,
       e instanceof VercelRetentionClampError
@@ -62638,7 +62775,7 @@ async function runBackfillTask(options) {
     try {
       const completed = app.db.transaction((tx) => {
         const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-        const stillAuthoritative = latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameTrafficSourceGeneration(latestSource, sourceRow2);
+        const stillAuthoritative = latestSource && isAuthoritativeTrafficSource(tx, latestSource) && isSameBackfillSource(latestSource, sourceRow2, leaseOwner);
         if (stillAuthoritative) {
           enforceRawEventSampleRetention(tx, sourceRow2.id, finishedAt2);
         }
@@ -62681,7 +62818,7 @@ async function runBackfillTask(options) {
         }).where(eq80(runs.id, runId)).run();
         return "wordpress-backfill-unsupported";
       }
-      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameBackfillSource(latestSource, sourceRow2, leaseOwner)) {
         tx.update(runs).set({
           status: RunStatuses.failed,
           error: "Traffic source was deactivated or reconfigured during backfill",
@@ -64205,15 +64342,19 @@ async function trafficRoutes(app, opts) {
     if (sourceRow2.status === TrafficSourceStatuses.paused || sourceRow2.status === TrafficSourceStatuses.archived || hasConnectedSibling) {
       throw validationError("Traffic source must be active before it can sync");
     }
-    const wordpressLeaseOwner = sourceRow2.sourceType === TrafficSourceTypes.wordpress ? crypto52.randomUUID() : void 0;
-    if (wordpressLeaseOwner && !tryClaimTrafficSyncLease({
+    const isWordpressSource = sourceRow2.sourceType === TrafficSourceTypes.wordpress;
+    const syncLeaseOwner = crypto52.randomUUID();
+    if (!tryClaimTrafficSyncLease({
       db: app.db,
       sourceId: sourceRow2.id,
-      owner: wordpressLeaseOwner,
+      owner: syncLeaseOwner,
       now: (/* @__PURE__ */ new Date()).toISOString(),
-      ttlMs: WORDPRESS_SYNC_LEASE_TTL_MS
+      ttlMs: isWordpressSource ? WORDPRESS_SYNC_LEASE_TTL_MS : PULL_SYNC_LEASE_TTL_MS
     })) {
-      throw operationInProgress("WordPress source sync is already in progress", { sourceId: sourceRow2.id });
+      throw operationInProgress(
+        isWordpressSource ? "WordPress source sync is already in progress" : "A sync or backfill is already running for this traffic source",
+        { sourceId: sourceRow2.id }
+      );
     }
     try {
       const syncWindowEnd = /* @__PURE__ */ new Date();
@@ -64236,7 +64377,7 @@ async function trafficRoutes(app, opts) {
         app.db.transaction((tx) => {
           tx.update(runs).set({ status: RunStatuses.failed, error: msg, finishedAt: failedAt }).where(eq80(runs.id, runId)).run();
           const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-          if (latestSource?.status === TrafficSourceStatuses.connected && isSameTrafficSourceGeneration(latestSource, sourceRow2) && (wordpressLeaseOwner === void 0 || latestSource.syncLeaseOwner === wordpressLeaseOwner)) {
+          if (latestSource?.status === TrafficSourceStatuses.connected && isSameTrafficSourceGeneration(latestSource, sourceRow2) && latestSource.syncLeaseOwner === syncLeaseOwner) {
             tx.update(trafficSources).set({ status: TrafficSourceStatuses.error, lastError: msg, updatedAt: failedAt }).where(eq80(trafficSources.id, sourceRow2.id)).run();
           }
         });
@@ -64257,11 +64398,11 @@ async function trafficRoutes(app, opts) {
         }
       };
       const renewWordpressLease = () => {
-        if (!wordpressLeaseOwner) return;
+        if (!isWordpressSource) return;
         if (!tryClaimTrafficSyncLease({
           db: app.db,
           sourceId: sourceRow2.id,
-          owner: wordpressLeaseOwner,
+          owner: syncLeaseOwner,
           now: (/* @__PURE__ */ new Date()).toISOString(),
           ttlMs: WORDPRESS_SYNC_LEASE_TTL_MS
         })) {
@@ -64366,7 +64507,7 @@ async function trafficRoutes(app, opts) {
           const reservedAt = (/* @__PURE__ */ new Date()).toISOString();
           const reservedSource = app.db.transaction((tx) => {
             const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-            if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2) || latestSource.syncLeaseOwner !== wordpressLeaseOwner || latestSource.lastCursor || latestSource.wordpressPendingUntil) return void 0;
+            if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2) || latestSource.syncLeaseOwner !== syncLeaseOwner || latestSource.lastCursor || latestSource.wordpressPendingUntil) return void 0;
             tx.update(trafficSources).set({
               lastSyncedAt: windowStartIso2,
               wordpressPendingUntil: windowEndIso2,
@@ -64550,7 +64691,7 @@ async function trafficRoutes(app, opts) {
       const commitOutcome = app.db.transaction((tx) => {
         const latestRow = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
         const latestHasConnectedSibling = tx.select().from(trafficSources).where(eq80(trafficSources.projectId, project.id)).all().some((row) => row.id !== sourceRow2.id && row.status === TrafficSourceStatuses.connected);
-        if (!latestRow || latestRow.status !== TrafficSourceStatuses.connected && latestRow.status !== TrafficSourceStatuses.error || latestHasConnectedSibling || wordpressLeaseOwner !== void 0 && latestRow.syncLeaseOwner !== wordpressLeaseOwner || !isSameTrafficSourceGeneration(latestRow, sourceRow2)) {
+        if (!latestRow || latestRow.status !== TrafficSourceStatuses.connected && latestRow.status !== TrafficSourceStatuses.error || latestHasConnectedSibling || latestRow.syncLeaseOwner !== syncLeaseOwner || !isSameTrafficSourceGeneration(latestRow, sourceRow2)) {
           const abortedAt = (/* @__PURE__ */ new Date()).toISOString();
           tx.update(runs).set({
             status: RunStatuses.failed,
@@ -64880,17 +65021,15 @@ async function trafficRoutes(app, opts) {
       };
       return response;
     } finally {
-      if (wordpressLeaseOwner) {
-        try {
-          releaseTrafficSyncLease({
-            db: app.db,
-            sourceId: sourceRow2.id,
-            owner: wordpressLeaseOwner,
-            now: (/* @__PURE__ */ new Date()).toISOString()
-          });
-        } catch (error) {
-          request.log.warn({ sourceId: sourceRow2.id, error: describeError(error) }, "Failed to release WordPress sync lease");
-        }
+      try {
+        releaseTrafficSyncLease({
+          db: app.db,
+          sourceId: sourceRow2.id,
+          owner: syncLeaseOwner,
+          now: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch (error) {
+        request.log.warn({ sourceId: sourceRow2.id, error: describeError(error) }, "Failed to release traffic sync lease");
       }
     }
   });
@@ -64976,11 +65115,12 @@ async function trafficRoutes(app, opts) {
       const vercelTeamId = config.teamId ?? credential.teamId;
       const vercelEnvironment = config.environment ?? credential.environment;
       pullErrorPrefix = "Vercel pull failed";
-      pullForBackfill = async () => {
+      pullForBackfill = async (signal) => {
         const collected = [];
         const seenEventIds = /* @__PURE__ */ new Set();
         const backfillEndMs = windowEnd.getTime();
         for (let chunkStartMs = windowStart.getTime(); chunkStartMs < backfillEndMs; chunkStartMs += VERCEL_BACKFILL_CHUNK_MS) {
+          signal.throwIfAborted();
           const chunkEndMs = Math.min(chunkStartMs + VERCEL_BACKFILL_CHUNK_MS, backfillEndMs);
           const drained = await drainVercelTrafficEvents({
             pull: pullVercelEvents,
@@ -65008,25 +65148,42 @@ async function trafficRoutes(app, opts) {
     }
     const startedAt = windowEnd.toISOString();
     const runId = crypto52.randomUUID();
-    app.db.transaction((tx) => {
-      const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
-      if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
-        throw validationError("Traffic source must remain active and unchanged before it can backfill");
-      }
-      tx.insert(runs).values({
-        id: runId,
-        projectId: project.id,
-        kind: RunKinds["traffic-sync"],
-        status: RunStatuses.running,
-        trigger: RunTriggers.backfill,
-        sourceId: sourceRow2.id,
-        startedAt,
-        createdAt: startedAt
-      }).run();
-    });
+    const leaseOwner = crypto52.randomUUID();
+    if (!tryClaimTrafficSyncLease({
+      db: app.db,
+      sourceId: sourceRow2.id,
+      owner: leaseOwner,
+      now: (/* @__PURE__ */ new Date()).toISOString(),
+      ttlMs: TRAFFIC_BACKFILL_LEASE_TTL_MS
+    })) {
+      throw operationInProgress("A sync or backfill is already running for this traffic source; retry when it finishes", { sourceId: sourceRow2.id });
+    }
+    try {
+      app.db.transaction((tx) => {
+        const latestSource = tx.select().from(trafficSources).where(eq80(trafficSources.id, sourceRow2.id)).get();
+        if (!latestSource || !isAuthoritativeTrafficSource(tx, latestSource) || !isSameTrafficSourceGeneration(latestSource, sourceRow2)) {
+          throw validationError("Traffic source must remain active and unchanged before it can backfill");
+        }
+        tx.insert(runs).values({
+          id: runId,
+          projectId: project.id,
+          kind: RunKinds["traffic-sync"],
+          status: RunStatuses.running,
+          trigger: RunTriggers.backfill,
+          sourceId: sourceRow2.id,
+          startedAt,
+          createdAt: startedAt
+        }).run();
+      });
+    } catch (error) {
+      releaseTrafficSyncLease({ db: app.db, sourceId: sourceRow2.id, owner: leaseOwner, now: (/* @__PURE__ */ new Date()).toISOString() });
+      throw error;
+    }
     void runBackfillTask({
       app,
       runId,
+      leaseOwner,
+      leaseRenewMs: opts.trafficBackfillLeaseRenewMs ?? TRAFFIC_BACKFILL_LEASE_RENEW_MS,
       project,
       sourceRow: sourceRow2,
       journeyKeySecret: opts.journeyKeySecret,
@@ -65322,7 +65479,7 @@ async function trafficRoutes(app, opts) {
       const listed = useContentList ? contentPaths : infraPaths;
       const IN_LIST_CAP = 2e4;
       const listFitsInSql = listed.length <= IN_LIST_CAP;
-      const contentExpr = listed.length === 0 ? useContentList ? sql30`0` : sql30`${crawlerEventsHourly.hits}` : useContentList ? sql30`CASE WHEN ${inArray34(crawlerEventsHourly.pathNormalized, listed)} THEN ${crawlerEventsHourly.hits} ELSE 0 END` : sql30`CASE WHEN ${inArray34(crawlerEventsHourly.pathNormalized, listed)} THEN 0 ELSE ${crawlerEventsHourly.hits} END`;
+      const contentExpr = listed.length === 0 ? useContentList ? sql30`0` : sql30`${crawlerEventsHourly.hits}` : useContentList ? sql30`CASE WHEN ${inArray35(crawlerEventsHourly.pathNormalized, listed)} THEN ${crawlerEventsHourly.hits} ELSE 0 END` : sql30`CASE WHEN ${inArray35(crawlerEventsHourly.pathNormalized, listed)} THEN 0 ELSE ${crawlerEventsHourly.hits} END`;
       if (listFitsInSql) {
         const crawlerSeries = app.db.select({
           bucket: crawlerSeriesBucket,
@@ -65711,7 +65868,7 @@ var reportSweepsCheck = {
 };
 
 // ../api-routes/src/doctor/checks/report-models.ts
-import { and as and71, eq as eq82, gte as gte21, inArray as inArray35, lte as lte22 } from "drizzle-orm";
+import { and as and71, eq as eq82, gte as gte21, inArray as inArray36, lte as lte22 } from "drizzle-orm";
 var reportModelsCheck = {
   id: "report.models",
   category: CheckCategories.providers,
@@ -65726,7 +65883,7 @@ var reportModelsCheck = {
     const months = reportMonths.flatMap((month) => {
       const bounds = calendarMonthBounds(month);
       const previous = new Date(Date.parse(bounds.since) - 1).toISOString().slice(0, 7);
-      const observations = ctx.db.select({ provider: querySnapshots.provider, model: querySnapshots.model, at: runs.createdAt }).from(querySnapshots).innerJoin(runs, eq82(runs.id, querySnapshots.runId)).where(and71(eq82(runs.projectId, ctx.project.id), eq82(runs.kind, RunKinds["answer-visibility"]), inArray35(runs.status, [RunStatuses.completed, RunStatuses.partial]), notProbeRun(), gte21(runs.createdAt, bounds.since), lte22(runs.createdAt, bounds.until))).all();
+      const observations = ctx.db.select({ provider: querySnapshots.provider, model: querySnapshots.model, at: runs.createdAt }).from(querySnapshots).innerJoin(runs, eq82(runs.id, querySnapshots.runId)).where(and71(eq82(runs.projectId, ctx.project.id), eq82(runs.kind, RunKinds["answer-visibility"]), inArray36(runs.status, [RunStatuses.completed, RunStatuses.partial]), notProbeRun(), gte21(runs.createdAt, bounds.since), lte22(runs.createdAt, bounds.until))).all();
       return readVisibilityContinuity(ctx.db, ctx.project.name, { from: previous, to: month }).map(({ frame, continuity: continuity2 }) => ({
         month,
         previousMonth: previous,
@@ -66303,7 +66460,7 @@ var BACKLINKS_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/bing-auth.ts
-import { and as and73, desc as desc40, eq as eq85, inArray as inArray36 } from "drizzle-orm";
+import { and as and73, desc as desc40, eq as eq85, inArray as inArray37 } from "drizzle-orm";
 var BING_CONNECTION_ENTITY = "bing_connection";
 var BING_CONNECTED_ACTION = "bing.connected";
 var BING_DISCONNECTED_ACTION = "bing.disconnected";
@@ -66314,7 +66471,7 @@ function lostBingConnection(ctx, project) {
   const lastChange = ctx.db.select({ action: auditLog.action }).from(auditLog).where(and73(
     eq85(auditLog.entityType, BING_CONNECTION_ENTITY),
     eq85(auditLog.entityId, project.canonicalDomain),
-    inArray36(auditLog.action, [BING_CONNECTED_ACTION, BING_DISCONNECTED_ACTION])
+    inArray37(auditLog.action, [BING_CONNECTED_ACTION, BING_DISCONNECTED_ACTION])
   )).orderBy(desc40(auditLog.createdAt)).limit(1).get();
   return lastChange?.action !== BING_DISCONNECTED_ACTION;
 }
@@ -66860,7 +67017,7 @@ var ga4ConnectionCheck = {
 var GA_AUTH_CHECKS = [ga4ConnectionCheck];
 
 // ../api-routes/src/doctor/checks/data-freshness.ts
-import { and as and74, desc as desc41, eq as eq88, inArray as inArray37 } from "drizzle-orm";
+import { and as and74, desc as desc41, eq as eq88, inArray as inArray38 } from "drizzle-orm";
 var GA_DATA_AGING_DAYS = 3;
 var GA_DATA_STALE_DAYS = 5;
 var GSC_DATA_AGING_DAYS = 5;
@@ -66889,7 +67046,7 @@ function skipped(code, summary3) {
   return { status: CheckStatuses.skipped, code, summary: summary3, remediation: null };
 }
 function lastSyncAgeDays(ctx, kinds) {
-  const row = ctx.db.select({ createdAt: runs.createdAt }).from(runs).where(and74(eq88(runs.projectId, ctx.project.id), inArray37(runs.kind, kinds), eq88(runs.status, "completed"))).orderBy(desc41(runs.createdAt)).limit(1).get();
+  const row = ctx.db.select({ createdAt: runs.createdAt }).from(runs).where(and74(eq88(runs.projectId, ctx.project.id), inArray38(runs.kind, kinds), eq88(runs.status, "completed"))).orderBy(desc41(runs.createdAt)).limit(1).get();
   if (!row?.createdAt) return null;
   const age = Math.floor((Date.now() - Date.parse(row.createdAt)) / DAY_MS4);
   return Number.isFinite(age) ? age : null;
@@ -67384,7 +67541,7 @@ async function probeApiHost(host, options = {}) {
 }
 
 // ../api-routes/src/doctor/checks/integration-sync.ts
-import { and as and75, count as count7, desc as desc42, eq as eq89, gte as gte22, gt as gt8, inArray as inArray38, isNull as isNull14, notInArray as notInArray3, or as or19 } from "drizzle-orm";
+import { and as and75, count as count7, desc as desc42, eq as eq89, gte as gte22, gt as gt8, inArray as inArray39, isNull as isNull14, notInArray as notInArray3, or as or19 } from "drizzle-orm";
 var SYNC_FAILURE_WINDOW = 3;
 var SUMMARY_ERROR_LIMIT = 300;
 var FINISHED_STATUSES = [RunStatuses.completed, RunStatuses.partial, RunStatuses.failed];
@@ -67477,8 +67634,8 @@ function readSyncRunState(db, projectId, kind, options = {}) {
     ...options.nothingToSyncErrors?.length ? [or19(isNull14(runs.error), notInArray3(runs.error, [...options.nothingToSyncErrors]))] : []
   );
   const graded = options.since ? and75(scope, gte22(runs.createdAt, options.since)) : scope;
-  const recent = db.select({ id: runs.id, status: runs.status, trigger: runs.trigger, error: runs.error, createdAt: runs.createdAt }).from(runs).where(and75(graded, inArray38(runs.status, FINISHED_STATUSES))).orderBy(desc42(runs.createdAt)).limit(SYNC_FAILURE_WINDOW).all();
-  const lastSuccess = db.select({ createdAt: runs.createdAt, finishedAt: runs.finishedAt }).from(runs).where(and75(graded, inArray38(runs.status, SUCCESS_STATUSES))).orderBy(desc42(runs.createdAt)).limit(1).get();
+  const recent = db.select({ id: runs.id, status: runs.status, trigger: runs.trigger, error: runs.error, createdAt: runs.createdAt }).from(runs).where(and75(graded, inArray39(runs.status, FINISHED_STATUSES))).orderBy(desc42(runs.createdAt)).limit(SYNC_FAILURE_WINDOW).all();
+  const lastSuccess = db.select({ createdAt: runs.createdAt, finishedAt: runs.finishedAt }).from(runs).where(and75(graded, inArray39(runs.status, SUCCESS_STATUSES))).orderBy(desc42(runs.createdAt)).limit(1).get();
   const failureCount = db.select({ count: count7() }).from(runs).where(and75(lastSuccess ? and75(graded, gt8(runs.createdAt, lastSuccess.createdAt)) : graded, eq89(runs.status, RunStatuses.failed))).get();
   const failuresSinceSuccess = Number(failureCount?.count ?? 0);
   const latest = recent[0];
@@ -68039,7 +68196,7 @@ var PLACES_CHECK_BY_ID = Object.fromEntries(
 );
 
 // ../api-routes/src/doctor/checks/gbp-reviews.ts
-import { and as and77, desc as desc43, eq as eq93, gte as gte23, inArray as inArray39, sql as sql31 } from "drizzle-orm";
+import { and as and77, desc as desc43, eq as eq93, gte as gte23, inArray as inArray40, sql as sql31 } from "drizzle-orm";
 var REVIEW_EVENTS = /* @__PURE__ */ new Set(["review.negative", "review.rating-dropped"]);
 var V4_ACCESS_REMEDIATION = "Business Profile reviews use the legacy My Business API (mybusiness.googleapis.com), which Google enables per Cloud project only on request; the API Library and `gcloud services enable` cannot turn it on. Open the enable link in the API access approval email as the approved account, or reply to the access-request thread asking Google to enable mybusiness.googleapis.com for your project number, then run `canonry gbp sync`.";
 var reviewsAccessCheck = {
@@ -68162,7 +68319,7 @@ var reviewDeliveryCheck = {
       payload: reviewWebhookDeliveries.payload
     }).from(reviewWebhookDeliveries).where(and77(
       eq93(reviewWebhookDeliveries.projectId, ctx.project.id),
-      inArray39(reviewWebhookDeliveries.state, [ReviewDeliveryStates.Uncertain, ReviewDeliveryStates.Failed]),
+      inArray40(reviewWebhookDeliveries.state, [ReviewDeliveryStates.Uncertain, ReviewDeliveryStates.Failed]),
       gte23(lastTouched, since)
     )).orderBy(desc43(lastTouched)).all();
     if (rows.length === 0) {
@@ -68747,7 +68904,7 @@ var RUNTIME_STATE_CHECKS = [
 ];
 
 // ../api-routes/src/doctor/checks/traffic-source.ts
-import { and as and78, desc as desc44, eq as eq94, gte as gte24, inArray as inArray40, isNotNull as isNotNull9, ne as ne16, sql as sql32 } from "drizzle-orm";
+import { and as and78, desc as desc44, eq as eq94, gte as gte24, inArray as inArray41, isNotNull as isNotNull9, ne as ne16, sql as sql32 } from "drizzle-orm";
 var RECENT_DATA_WARN_DAYS = 7;
 var RECENT_DATA_FAIL_DAYS = 30;
 function isCloudflareDirectPush(source) {
@@ -68927,7 +69084,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
         and78(
           eq94(crawlerEventsHourly.projectId, ctx.project.id),
-          inArray40(crawlerEventsHourly.sourceId, activeSourceIds),
+          inArray41(crawlerEventsHourly.sourceId, activeSourceIds),
           gte24(crawlerEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
@@ -68936,7 +69093,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
         and78(
           eq94(aiReferralEventsHourly.projectId, ctx.project.id),
-          inArray40(aiReferralEventsHourly.sourceId, activeSourceIds),
+          inArray41(aiReferralEventsHourly.sourceId, activeSourceIds),
           gte24(aiReferralEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
@@ -68945,7 +69102,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
         and78(
           eq94(aiUserFetchEventsHourly.projectId, ctx.project.id),
-          inArray40(aiUserFetchEventsHourly.sourceId, activeSourceIds),
+          inArray41(aiUserFetchEventsHourly.sourceId, activeSourceIds),
           gte24(aiUserFetchEventsHourly.tsHour, warnCutoff)
         )
       ).get()?.total ?? 0
@@ -68971,7 +69128,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${crawlerEventsHourly.hits}), 0)` }).from(crawlerEventsHourly).where(
         and78(
           eq94(crawlerEventsHourly.projectId, ctx.project.id),
-          inArray40(crawlerEventsHourly.sourceId, activeSourceIds),
+          inArray41(crawlerEventsHourly.sourceId, activeSourceIds),
           gte24(crawlerEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
@@ -68980,7 +69137,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${aiReferralEventsHourly.sessionsOrHits}), 0)` }).from(aiReferralEventsHourly).where(
         and78(
           eq94(aiReferralEventsHourly.projectId, ctx.project.id),
-          inArray40(aiReferralEventsHourly.sourceId, activeSourceIds),
+          inArray41(aiReferralEventsHourly.sourceId, activeSourceIds),
           gte24(aiReferralEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
@@ -68989,7 +69146,7 @@ var recentDataCheck = {
       ctx.db.select({ total: sql32`COALESCE(SUM(${aiUserFetchEventsHourly.hits}), 0)` }).from(aiUserFetchEventsHourly).where(
         and78(
           eq94(aiUserFetchEventsHourly.projectId, ctx.project.id),
-          inArray40(aiUserFetchEventsHourly.sourceId, activeSourceIds),
+          inArray41(aiUserFetchEventsHourly.sourceId, activeSourceIds),
           gte24(aiUserFetchEventsHourly.tsHour, failCutoff)
         )
       ).get()?.total ?? 0
@@ -70245,7 +70402,7 @@ async function statusRoutes(app, opts) {
 
 // ../api-routes/src/discovery/routes.ts
 import crypto54 from "crypto";
-import { and as and80, desc as desc46, eq as eq96, gte as gte25, inArray as inArray41, isNull as isNull16, or as or20 } from "drizzle-orm";
+import { and as and80, desc as desc46, eq as eq96, gte as gte25, inArray as inArray42, isNull as isNull16, or as or20 } from "drizzle-orm";
 var MAX_INFLIGHT_DISCOVERY_AGE_MS = 2 * 60 * 60 * 1e3;
 async function discoveryRoutes(app, opts) {
   app.post("/projects/:name/discover/run", async (request, reply) => {
@@ -70300,7 +70457,7 @@ async function discoveryRoutes(app, opts) {
         // must never reuse another set's session. Null (= Gemini-only
         // default, including explicit ['gemini']) matches legacy rows.
         seedProviders == null ? isNull16(discoverySessions.seedProviders) : eq96(discoverySessions.seedProviders, seedProviders),
-        inArray41(discoverySessions.status, [
+        inArray42(discoverySessions.status, [
           DiscoverySessionStatuses.queued,
           DiscoverySessionStatuses.seeding,
           DiscoverySessionStatuses.probing
@@ -71008,7 +71165,7 @@ function dedupeStrings(input) {
 
 // ../api-routes/src/technical-aeo.ts
 import crypto56 from "crypto";
-import { and as and82, asc as asc21, count as count8, desc as desc47, eq as eq99, gte as gte26, inArray as inArray42, isNotNull as isNotNull10, isNull as isNull17, lt as lt14, or as or21, sql as sql34 } from "drizzle-orm";
+import { and as and82, asc as asc21, count as count8, desc as desc47, eq as eq99, gte as gte26, inArray as inArray43, isNotNull as isNotNull10, isNull as isNull17, lt as lt14, or as or21, sql as sql34 } from "drizzle-orm";
 import { alias } from "drizzle-orm/sqlite-core";
 
 // ../api-routes/src/technical-aeo-issues.ts
@@ -71644,7 +71801,7 @@ async function technicalAeoRoutes(app, opts) {
     eq99(siteCrawlSnapshots.projectId, projectId),
     eq99(runs.projectId, projectId),
     eq99(runs.kind, RunKinds["site-audit"]),
-    inArray42(runs.status, SURFACEABLE_STATUSES),
+    inArray43(runs.status, SURFACEABLE_STATUSES),
     notProbeRun()
   ];
   const availableScanDatesFor = (projectId, requestedDate) => {
@@ -71714,7 +71871,7 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteAuditSnapshots.projectId, projectId),
       eq99(runs.projectId, projectId),
       eq99(runs.kind, RunKinds["site-audit"]),
-      inArray42(runs.status, SURFACEABLE_STATUSES),
+      inArray43(runs.status, SURFACEABLE_STATUSES),
       notProbeRun(),
       ...recordedBefore ? [lt14(siteAuditSnapshots.createdAt, recordedBefore)] : []
     ];
@@ -71857,7 +72014,7 @@ async function technicalAeoRoutes(app, opts) {
     eq99(runs.id, runId),
     eq99(runs.projectId, projectId),
     eq99(runs.kind, RunKinds["site-audit"]),
-    inArray42(runs.status, SURFACEABLE_STATUSES),
+    inArray43(runs.status, SURFACEABLE_STATUSES),
     notProbeRun()
   )).limit(1).get());
   const assertKnownAuditRun = (projectId, runId) => {
@@ -71867,7 +72024,7 @@ async function technicalAeoRoutes(app, opts) {
     eq99(siteAuditSnapshots.projectId, projectId),
     eq99(runs.projectId, projectId),
     eq99(runs.kind, RunKinds["site-audit"]),
-    inArray42(runs.status, SURFACEABLE_STATUSES),
+    inArray43(runs.status, SURFACEABLE_STATUSES),
     notProbeRun()
   )).limit(1).get());
   const emptyCrawlSummary = (projectName, legacyAuditAvailable) => ({
@@ -71998,7 +72155,7 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteAuditSnapshots.projectId, project.id),
       eq99(runs.projectId, project.id),
       eq99(runs.kind, RunKinds["site-audit"]),
-      inArray42(runs.status, SURFACEABLE_STATUSES),
+      inArray43(runs.status, SURFACEABLE_STATUSES),
       notProbeRun()
     )).orderBy(desc47(siteAuditSnapshots.createdAt)).limit(limit).all();
     return { project: project.name, points: rows.reverse() };
@@ -72313,8 +72470,8 @@ async function technicalAeoRoutes(app, opts) {
         eq99(siteCrawlEdges.internal, true),
         isNotNull10(siteCrawlEdges.targetNodeKey),
         or21(
-          inArray42(siteCrawlEdges.sourceNodeKey, frontier),
-          inArray42(siteCrawlEdges.targetNodeKey, frontier)
+          inArray43(siteCrawlEdges.sourceNodeKey, frontier),
+          inArray43(siteCrawlEdges.targetNodeKey, frontier)
         )
       )).orderBy(asc21(siteCrawlEdges.edgeKey)).limit(maxEdges + maxNodes + 1).all();
       if (candidates.length > maxEdges + maxNodes) queryTruncated = true;
@@ -72351,7 +72508,7 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteCrawlPages.projectId, scope.projectId),
       eq99(siteCrawlPages.runId, scope.runId),
       eq99(siteCrawlPages.attemptId, scope.attemptId),
-      inArray42(siteCrawlPages.nodeKey, nodeKeys)
+      inArray43(siteCrawlPages.nodeKey, nodeKeys)
     )).all();
     const persistedNodeKeys = new Set(pageRows.map((row) => row.nodeKey));
     const outermostNodeKeys = pageRows.filter((row) => distances.get(row.nodeKey) === hops).map((row) => row.nodeKey);
@@ -72361,8 +72518,8 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteCrawlEdges.attemptId, scope.attemptId),
       eq99(siteCrawlEdges.internal, true),
       isNotNull10(siteCrawlEdges.targetNodeKey),
-      inArray42(siteCrawlEdges.sourceNodeKey, outermostNodeKeys),
-      inArray42(siteCrawlEdges.targetNodeKey, outermostNodeKeys)
+      inArray43(siteCrawlEdges.sourceNodeKey, outermostNodeKeys),
+      inArray43(siteCrawlEdges.targetNodeKey, outermostNodeKeys)
     )).limit(1).get();
     if (omittedOutermostEdge && !seenEdgeKeys.has(omittedOutermostEdge.edgeKey)) {
       omittedEdgeKeys.add(omittedOutermostEdge.edgeKey);
@@ -72463,7 +72620,7 @@ async function technicalAeoRoutes(app, opts) {
         eq99(siteCrawlEdges.followable, true),
         eq99(siteCrawlEdges.relation, "anchor"),
         isNotNull10(siteCrawlEdges.targetNodeKey),
-        inArray42(siteCrawlEdges.sourceNodeKey, frontier)
+        inArray43(siteCrawlEdges.sourceNodeKey, frontier)
       )).orderBy(asc21(siteCrawlEdges.edgeKey)).limit(SITE_HEALTH_PATH_MAX_VISITED_NODES + 1).all();
       if (candidates.length > SITE_HEALTH_PATH_MAX_VISITED_NODES) truncated = true;
       const candidateTargetKeys = [...new Set(candidates.map((edge) => edge.targetNodeKey).filter((nodeKey) => nodeKey != null))];
@@ -72471,7 +72628,7 @@ async function technicalAeoRoutes(app, opts) {
         eq99(siteCrawlPages.projectId, scope.projectId),
         eq99(siteCrawlPages.runId, scope.runId),
         eq99(siteCrawlPages.attemptId, scope.attemptId),
-        inArray42(siteCrawlPages.nodeKey, candidateTargetKeys)
+        inArray43(siteCrawlPages.nodeKey, candidateTargetKeys)
       )).all().map((row) => row.nodeKey));
       const next = /* @__PURE__ */ new Set();
       for (const edge of candidates.slice(0, SITE_HEALTH_PATH_MAX_VISITED_NODES)) {
@@ -72516,7 +72673,7 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteCrawlPages.projectId, scope.projectId),
       eq99(siteCrawlPages.runId, scope.runId),
       eq99(siteCrawlPages.attemptId, scope.attemptId),
-      inArray42(siteCrawlPages.nodeKey, pathKeys)
+      inArray43(siteCrawlPages.nodeKey, pathKeys)
     )).all();
     const pageByKey = new Map(pathRows.map((row) => [row.nodeKey, row]));
     const pathDetection = templateDetectionOf(snapshot.templateDetection);
@@ -72807,14 +72964,14 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteCrawlPages.projectId, scope.projectId),
       eq99(siteCrawlPages.runId, scope.runId),
       eq99(siteCrawlPages.attemptId, scope.attemptId),
-      inArray42(siteCrawlPages.nodeKey, pageKeys)
+      inArray43(siteCrawlPages.nodeKey, pageKeys)
     )).all();
     const edgeRowsFor = (scope) => linkKeys.length === 0 ? [] : app.db.select().from(siteCrawlEdges).where(and82(
       eq99(siteCrawlEdges.projectId, scope.projectId),
       eq99(siteCrawlEdges.runId, scope.runId),
       eq99(siteCrawlEdges.attemptId, scope.attemptId),
       eq99(siteCrawlEdges.internal, true),
-      inArray42(siteCrawlEdges.edgeKey, linkKeys)
+      inArray43(siteCrawlEdges.edgeKey, linkKeys)
     )).all();
     const beforePages = new Map(pageRowsFor(beforeScope).map((row) => [row.nodeKey, mapCrawlPage(row)]));
     const afterPages = new Map(pageRowsFor(afterScope).map((row) => [row.nodeKey, mapCrawlPage(row)]));
@@ -73340,9 +73497,9 @@ async function technicalAeoRoutes(app, opts) {
       eq99(siteCrawlSnapshots.projectId, project.id),
       eq99(runs.projectId, project.id),
       eq99(runs.kind, RunKinds["site-audit"]),
-      inArray42(runs.status, SURFACEABLE_STATUSES),
+      inArray43(runs.status, SURFACEABLE_STATUSES),
       notProbeRun(),
-      inArray42(siteCrawlSnapshots.runId, runIds)
+      inArray43(siteCrawlSnapshots.runId, runIds)
     )).all().map((row) => row.runId));
     return {
       project: project.name,
@@ -73483,7 +73640,7 @@ async function technicalAeoRoutes(app, opts) {
       )).where(and82(
         eq99(runs.projectId, project.id),
         eq99(runs.kind, RunKinds["site-audit"]),
-        inArray42(runs.status, [RunStatuses.queued, RunStatuses.running])
+        inArray43(runs.status, [RunStatuses.queued, RunStatuses.running])
       )).get();
       if (existing) {
         if (existing.identityKey === identityKey) {
@@ -74342,6 +74499,7 @@ async function apiRoutes(app, opts) {
       vercelTrafficCredentialStore: opts.vercelTrafficCredentialStore,
       pullVercelTrafficEvents: opts.pullVercelTrafficEvents,
       vercelSyncDeadlineMs: opts.vercelSyncDeadlineMs,
+      trafficBackfillLeaseRenewMs: opts.trafficBackfillLeaseRenewMs,
       cloudflareTrafficCredentialStore: opts.cloudflareTrafficCredentialStore,
       pullCloudflareQueueMessages: opts.pullCloudflareQueueMessages,
       ackCloudflareQueueMessages: opts.ackCloudflareQueueMessages,