@canonry/canonry 7.68.2 → 7.69.0

package/dist/{chunk-6R76X2XV.js → chunk-6JGQT4OH.js}

@@ -493,6 +493,14 @@ function queryTrackingPreviewStale(expectedWorkspaceVersion, actualWorkspaceVers
     { expectedWorkspaceVersion, actualWorkspaceVersion }
   );
 }
+function embedQueryLimitReached(limit, attempted) {
+  return new AppError(
+    "EMBED_QUERY_LIMIT",
+    `This dashboard can track up to ${limit} queries. Remove one to add another.`,
+    409,
+    { limit, attempted }
+  );
+}
 function runNotCancellable(runId, status) {
   return new AppError("RUN_NOT_CANCELLABLE", `Run '${runId}' is already in terminal state '${status}' and cannot be cancelled`, 409);
 }
@@ -20699,6 +20707,7 @@ var PROJECTS_WRITE_SCOPE = "projects.write";
 var ADS_WRITE_SCOPE = "ads.write";
 var ADS_APPROVE_SCOPE = "ads.approve";
 var ADS_ACTIVATE_SCOPE = "ads.activate";
+var EMBED_QUERIES_WRITE_SCOPE = "embed.queries.write";
 var GOOGLE_MARKETING_LIVE_READ_SCOPE = "google-marketing.read-live";
 var GOOGLE_MARKETING_WRITE_SCOPE = "google-marketing.write";
 function grantsWrite(scope) {
@@ -20706,7 +20715,7 @@ function grantsWrite(scope) {
 }
 function restrictedWriteScopes(scopes) {
   const writes = scopes.filter(grantsWrite);
-  const restricted = /* @__PURE__ */ new Set([ADS_WRITE_SCOPE, ADS_APPROVE_SCOPE, ADS_ACTIVATE_SCOPE, RESEARCH_RUN_SCOPE, SEO_RUN_SCOPE, SEO_WRITE_SCOPE, GBP_POSTS_WRITE_SCOPE]);
+  const restricted = /* @__PURE__ */ new Set([ADS_WRITE_SCOPE, ADS_APPROVE_SCOPE, ADS_ACTIVATE_SCOPE, RESEARCH_RUN_SCOPE, SEO_RUN_SCOPE, SEO_WRITE_SCOPE, GBP_POSTS_WRITE_SCOPE, EMBED_QUERIES_WRITE_SCOPE]);
   return writes.length > 0 && writes.every((scope) => restricted.has(scope)) ? writes : null;
 }
 function intersectScopes(authority, requested) {
@@ -25149,6 +25158,14 @@ function escapeLikePattern(value) {
 }
 
 // ../contracts/src/embed.ts
+var EMBED_QUERY_LIMIT_HEADER = "x-canonry-embed-query-limit";
+var EMBED_QUERY_LIMIT_MAX = 1e3;
+function parseEmbedQueryLimit(raw) {
+  const value = Array.isArray(raw) ? raw[0] : raw;
+  if (typeof value !== "string" || !/^[1-9]\d{0,3}$/.test(value)) return void 0;
+  const limit = Number(value);
+  return limit <= EMBED_QUERY_LIMIT_MAX ? limit : void 0;
+}
 function embedProjectTabsError(projectTabs) {
   if (projectTabs?.some((tab) => tab.trim().toLowerCase() === "report")) {
     return "The report embed tab has been retired. Remove report from the allowed tabs; explicitly configure overview to display AI Visibility.";
@@ -25254,16 +25271,18 @@ function parseRenderTokenOverride(raw) {
   if (typeof value !== "string" || value.length === 0 || value.length > 4096) return void 0;
   return value;
 }
-function embedClientConfigForRequest(resolved, projectTabsOverride, themeOverride, renderTokenOverride) {
+function embedClientConfigForRequest(resolved, projectTabsOverride, themeOverride, renderTokenOverride, queryLimitOverride) {
   const base = buildEmbedClientConfig(resolved);
   if (!base) return void 0;
   const tabs = normalizeIdTokens(splitList(projectTabsOverride));
   const theme = parseThemeOverride(themeOverride);
   const renderToken = parseRenderTokenOverride(renderTokenOverride);
+  const queryLimit = parseEmbedQueryLimit(queryLimitOverride);
   let out = base;
   if (tabs) out = { ...out, projectTabs: tabs };
   if (theme) out = { ...out, theme };
   if (renderToken) out = { ...out, renderToken };
+  if (queryLimit !== void 0) out = { ...out, queries: { limit: queryLimit } };
   return out;
 }
 function serializeForInlineScript(value) {
@@ -26455,6 +26474,7 @@ export {
   measurementIdempotencyKeyRequired,
   measurementIdempotencyKeyConflict,
   queryTrackingPreviewStale,
+  embedQueryLimitReached,
   runNotCancellable,
   unsupportedKind,
   notImplemented,
@@ -27512,11 +27532,14 @@ export {
   ADS_WRITE_SCOPE,
   ADS_APPROVE_SCOPE,
   ADS_ACTIVATE_SCOPE,
+  EMBED_QUERIES_WRITE_SCOPE,
   GOOGLE_MARKETING_LIVE_READ_SCOPE,
   GOOGLE_MARKETING_WRITE_SCOPE,
   restrictedWriteScopes,
   intersectScopes,
   isReadOnlyKey,
+  EMBED_QUERY_LIMIT_HEADER,
+  parseEmbedQueryLimit,
   embedProjectTabsError,
   splitList,
   parseOriginList,

package/dist/{chunk-D33TZL7S.js → chunk-6RI7JFFI.js}

@@ -20,7 +20,7 @@ import {
   resolveProviderModel,
   schedulableRunKindSchema,
   sentimentEvaluatorProviderSchema
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../config/src/index.ts
 import { z as z4 } from "zod";

package/dist/{chunk-34GYS64G.js → chunk-7W4KNDAW.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-QZUEQP5G.js";
+} from "./chunk-XOCF2U54.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -15,7 +15,7 @@ import {
   factorStatusFromDistribution,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {

package/dist/{chunk-CUR2SI66.js → chunk-BGTJTKOJ.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-D33TZL7S.js";
+} from "./chunk-6RI7JFFI.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -36,7 +36,7 @@ import {
   sentimentSettingsReadSchema,
   sentimentSummaryReadSchema,
   upgradeCommandFor
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../api-client-generated/src/generated/core/bodySerializer.gen.ts
 var jsonBodySerializer = {

package/dist/{chunk-JZRCF3IX.js → chunk-BRT5GE3Z.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-LX5IQZHL.js";
+} from "./chunk-DW3KF33I.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NDTU7FGL.js";
@@ -22,15 +22,15 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-D33TZL7S.js";
+} from "./chunk-6RI7JFFI.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4KVUUBKF.js";
+} from "./chunk-QNSMMQJY.js";
 import {
   agentToolEvents,
   llmUsageEvents
-} from "./chunk-QZUEQP5G.js";
+} from "./chunk-XOCF2U54.js";
 import {
   MeasurementPortfolioLists,
   SeoCapabilities,
@@ -39,7 +39,7 @@ import {
   describeError,
   validationError,
   visibilityReportRequestSchema
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/agent/session.ts
 import fs3 from "fs";

package/dist/{chunk-ROCSYWLF.js → chunk-CNSLBHFP.js}

@@ -8,7 +8,7 @@ import {
   classifyJourneyEntry,
   hostMatchesDomain,
   hostOf
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../integration-traffic/src/ip-ranges/amazonbot.json
 var amazonbot_default = {

package/dist/{chunk-TPZ6RLGX.js → chunk-CSDDKEL6.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   describeError
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/gsc-sitemap-submission.ts
 function dedupeGscSitemapUrls(urls) {

package/dist/{chunk-LX5IQZHL.js → chunk-DW3KF33I.js}

@@ -1,16 +1,16 @@
 import {
   runWithUsageTags
-} from "./chunk-CUR2SI66.js";
+} from "./chunk-BGTJTKOJ.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4KVUUBKF.js";
+} from "./chunk-QNSMMQJY.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-D4TXUHVA.js";
+} from "./chunk-JGO7LGVN.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,
@@ -23,7 +23,7 @@ import {
   seoDatasetWithoutVendor,
   seoProviderSchema,
   truncateUtf16
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/agent/tools.ts
 import { Type as Type2 } from "@earendil-works/pi-ai";

package/dist/{chunk-35XANOXF.js → chunk-EIRIZPR6.js}

@@ -1,6 +1,6 @@
 import {
   parseJsonColumn
-} from "./chunk-QZUEQP5G.js";
+} from "./chunk-XOCF2U54.js";
 import {
   AI_ENGINE_DOMAINS,
   AI_ENGINE_SELF_DOMAINS,
@@ -26,7 +26,7 @@ import {
   retryAfterDelayMs,
   usageCount,
   withRetry
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../provider-openai/src/normalize.ts
 import OpenAI from "openai";

package/dist/{chunk-7PPEX3GD.js → chunk-G6VOLODK.js}

@@ -1,10 +1,10 @@
 import {
   registeredProviderNames
-} from "./chunk-535S4WXN.js";
+} from "./chunk-3ZF3T3OG.js";
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-D33TZL7S.js";
+} from "./chunk-6RI7JFFI.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -28,7 +28,7 @@ async function buildSetupState() {
   }
   if (dbPath && fs.existsSync(dbPath)) {
     try {
-      const { createClient, projects, queries: queriesTable } = await import("./src-X4GNC6AB.js");
+      const { createClient, projects, queries: queriesTable } = await import("./src-WDWTA7ON.js");
       const db = createClient(dbPath);
       project_count = db.select({ id: projects.id }).from(projects).all().length;
       const firstQuery = db.select({ id: queriesTable.id }).from(queriesTable).limit(1).all();
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-7SCK3TEE.js");
+  const { serveCommand } = await import("./serve-4E6LBEHL.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-D4TXUHVA.js → chunk-JGO7LGVN.js}

@@ -9,14 +9,14 @@ import {
   normalizeCloudflareWorkerEvent,
   sessionizeJourneyRequests,
   verifyRequestSignature
-} from "./chunk-ROCSYWLF.js";
+} from "./chunk-CNSLBHFP.js";
 import {
   currentOutcomeAttribution,
   getRequestContext,
   registerRequestContext,
   requestAuditIdentity,
   sanitizeRequestContext
-} from "./chunk-FLCTZSLI.js";
+} from "./chunk-KDV5NQZH.js";
 import {
   SentimentIdempotencyConflict,
   SentimentRepository,
@@ -156,7 +156,7 @@ import {
   userSessions,
   users,
   writeNegativeReviewMaxStars
-} from "./chunk-QZUEQP5G.js";
+} from "./chunk-XOCF2U54.js";
 import {
   ADS_ACTIVATE_SCOPE,
   ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
@@ -234,6 +234,8 @@ import {
   DiscoveryCompetitorTypes,
   DiscoveryPromoteCompetitorSkipReasons,
   DiscoverySessionStatuses,
+  EMBED_QUERIES_WRITE_SCOPE,
+  EMBED_QUERY_LIMIT_HEADER,
   FeatureNames,
   GA4_AI_ASSISTANT_CHANNEL_GROUP,
   GA_OVERVIEW_HISTORY_DAYS,
@@ -609,6 +611,7 @@ import {
   domainClassificationsResponseDtoSchema,
   effectiveBrandNames,
   effectiveDomains,
+  embedQueryLimitReached,
   emptyCitationVisibility,
   emptySentimentCounts,
   escapeLikePattern,
@@ -925,6 +928,7 @@ import {
   organicEvidenceDtoSchema,
   outcomeSurfaceSchema,
   parseBoundedRate,
+  parseEmbedQueryLimit,
   parseInclusiveEndMs,
   parseMeasurementDraftEtagVersion,
   parseMeasurementRunManifestV1,
@@ -1188,7 +1192,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../api-routes/src/user-session.ts
 import crypto2 from "crypto";
@@ -6285,17 +6289,25 @@ function isTechnicalAeoRead(request, url) {
   }
   return rest === "technical-aeo" || rest === "technical-aeo/pages" || rest === "technical-aeo/trend" || rest === "technical-aeo/crawl" || rest === "technical-aeo/graph" || rest === "technical-aeo/subgraph" || rest === "technical-aeo/path" || rest === "technical-aeo/changes" || rest === "technical-aeo/crawl/pages/audit" || rest === "technical-aeo/crawl/pages" || rest === "technical-aeo/runs" || rest === "technical-aeo/structure" || rest === "technical-aeo/internal-links" || rest === "technical-aeo/internal-links/neighbors" || rest === "technical-aeo/dead-links";
 }
+function isEmbedQueryWrite(request) {
+  return request.routeOptions.config.writeScope === EMBED_QUERIES_WRITE_SCOPE && (principalScopes(request) ?? []).includes(EMBED_QUERIES_WRITE_SCOPE);
+}
+function isEmbedQueryRead(request, url) {
+  if (parseEmbedQueryLimit(request.headers[EMBED_QUERY_LIMIT_HEADER]) === void 0) return false;
+  return projectRouteRest(url) === "query-tracking";
+}
 function enforceEmbedProjectTabs(request, configuredTabs) {
   const policy = requestEmbedProjectTabs(request, configuredTabs);
   if (policy === void 0) return;
   if (request.method === "OPTIONS") return;
   const { tabs } = policy;
-  if (policy.fromEmbedSurface && WRITE_METHODS2.has(request.method)) {
+  if (policy.fromEmbedSurface && WRITE_METHODS2.has(request.method) && !isEmbedQueryWrite(request)) {
     throw forbidden("This endpoint is not available in embed mode.");
   }
   if (WRITE_METHODS2.has(request.method)) return;
   const url = request.url.split("?")[0];
   if (isProjectShellRead(request, url)) return;
+  if (isEmbedQueryRead(request, url)) return;
   if (tabs.includes("overview") && isOverviewRead(url)) return;
   if (tabs.includes("technical-aeo") && isTechnicalAeoRead(request, url)) return;
   throw forbidden("This endpoint is not available for the configured embed tabs.");
@@ -24929,6 +24941,31 @@ function readVisibilityComparisonRuns(db, projectId, since, until, includeEviden
 // ../api-routes/src/query-tracking.ts
 import crypto24 from "crypto";
 import { and as and33, desc as desc17, eq as eq41, inArray as inArray22, isNotNull as isNotNull5, isNull as isNull8, ne as ne8 } from "drizzle-orm";
+
+// ../api-routes/src/embed-queries.ts
+function embedQueryWriteLimit(request) {
+  const principal = request.principal;
+  const scopes = principal?.scopes ?? request.apiKey?.scopes ?? [];
+  if (!scopes.includes(EMBED_QUERIES_WRITE_SCOPE)) return void 0;
+  if (scopes.includes(WILDCARD_SCOPE) || scopes.includes(MEASUREMENT_PLAN_WRITE_SCOPE)) return void 0;
+  const projectId = principal?.kind === "api-key" ? principal.projectId : request.apiKey?.projectId;
+  if (!projectId) throw forbidden("An embedded query key must be scoped to one project.");
+  const limit = parseEmbedQueryLimit(request.headers[EMBED_QUERY_LIMIT_HEADER]);
+  if (limit === void 0) throw forbidden("An embedded query change needs the dashboard query limit.");
+  return limit;
+}
+function assertEmbedQueryChange(mutation) {
+  const plain = mutation.additions.length + mutation.removals.length === 1 && (mutation.edits ?? []).length === 0 && mutation.additions.every((addition) => addition.input.source === "manual" && addition.audience === void 0 && addition.contexts === void 0 && addition.queryClass === void 0) && mutation.removals.every((removal) => removal.queryId !== void 0 && removal.audience === void 0);
+  if (!plain) throw forbidden("An embedded dashboard can add or remove one query at a time.");
+}
+function assertEmbedQueryWorkspace(mode) {
+  if (mode !== "simple") throw forbidden("Your agency manages the queries for this project.");
+}
+function assertWithinEmbedQueryLimit(before, after, limit) {
+  if (after > limit && after > before) throw embedQueryLimitReached(limit, after);
+}
+
+// ../api-routes/src/query-tracking.ts
 var SOURCE_LIMIT = 100;
 var MAX_REVIEW_AGE_MS = 15 * 60 * 1e3;
 var MAX_REVIEW_FUTURE_SKEW_MS = 60 * 1e3;
@@ -26345,17 +26382,21 @@ async function queryTrackingRoutes(app, opts = {}) {
     const project = resolveProject(app.db, request.params.name);
     return workspaceDto(app.db, readWorkspace(app.db, project), opts);
   });
-  app.post("/projects/:name/query-tracking/preview", async (request) => {
-    requireScope(request, MEASUREMENT_PLAN_WRITE_SCOPE);
+  app.post("/projects/:name/query-tracking/preview", { config: { writeScope: EMBED_QUERIES_WRITE_SCOPE } }, async (request) => {
+    const embedLimit = embedQueryWriteLimit(request);
+    if (embedLimit === void 0) requireScope(request, MEASUREMENT_PLAN_WRITE_SCOPE);
     const parsed = queryTrackingPreviewRequestSchema.safeParse(request.body);
     if (!parsed.success) throw validationError("Invalid query tracking preview payload", { issues: parsed.error.issues });
+    if (embedLimit !== void 0) assertEmbedQueryChange(parsed.data);
     const project = resolveProject(app.db, request.params.name);
     const state = readWorkspace(app.db, project);
+    if (embedLimit !== void 0) assertEmbedQueryWorkspace(state.mode);
     if (parsed.data.expectedWorkspaceVersion !== state.workspaceVersion) {
       throw queryTrackingPreviewStale(parsed.data.expectedWorkspaceVersion, state.workspaceVersion);
     }
     const reviewedAt = (/* @__PURE__ */ new Date()).toISOString();
     const candidate = buildCandidate(app.db, state, parsed.data, opts, reviewedAt);
+    if (embedLimit !== void 0) assertWithinEmbedQueryLimit(state.queryRows.length, candidate.queryRows.size, embedLimit);
     return queryTrackingPreviewResponseSchema.parse({
       mode: state.mode,
       workspaceVersion: state.workspaceVersion,
@@ -26367,10 +26408,12 @@ async function queryTrackingRoutes(app, opts = {}) {
       workload: candidate.workload
     });
   });
-  app.post("/projects/:name/query-tracking/commit", async (request, reply) => {
-    requireScope(request, MEASUREMENT_PLAN_WRITE_SCOPE);
+  app.post("/projects/:name/query-tracking/commit", { config: { writeScope: EMBED_QUERIES_WRITE_SCOPE } }, async (request, reply) => {
+    const embedLimit = embedQueryWriteLimit(request);
+    if (embedLimit === void 0) requireScope(request, MEASUREMENT_PLAN_WRITE_SCOPE);
     const parsed = queryTrackingCommitRequestSchema.safeParse(request.body);
     if (!parsed.success) throw validationError("Invalid query tracking commit payload", { issues: parsed.error.issues });
+    if (embedLimit !== void 0) assertEmbedQueryChange(parsed.data);
     const project = resolveProject(app.db, request.params.name);
     const lookup = { operation: "query-tracking.commit", key: parsed.data.previewToken, checksum: requestChecksum(parsed.data) };
     const replay = replayReceipt(app.db, project.id, lookup, reply);
@@ -26382,6 +26425,7 @@ async function queryTrackingRoutes(app, opts = {}) {
       const currentProject = tx.select().from(projects).where(eq41(projects.id, project.id)).get();
       if (!currentProject) throw notFound("Project", project.name);
       const state = readWorkspace(tx, currentProject);
+      if (embedLimit !== void 0) assertEmbedQueryWorkspace(state.mode);
       if (parsed.data.expectedWorkspaceVersion !== state.workspaceVersion) {
         throw queryTrackingPreviewStale(parsed.data.expectedWorkspaceVersion, state.workspaceVersion);
       }
@@ -26389,6 +26433,7 @@ async function queryTrackingRoutes(app, opts = {}) {
       if (parsed.data.previewToken !== mutationPreviewToken(candidate, parsed.data, reviewedAt)) {
         throw queryTrackingPreviewStale(parsed.data.expectedWorkspaceVersion, state.workspaceVersion);
       }
+      if (embedLimit !== void 0) assertWithinEmbedQueryLimit(state.queryRows.length, candidate.queryRows.size, embedLimit);
       if (!candidate.diff.noOp && !rowsEqual(new Map(state.queryRows.map((row) => [row.id, row])), candidate.queryRows)) {
         assertNoActivePlanlessSweep(tx, { projectId: project.id, projectName: project.name });
       }
@@ -26401,7 +26446,12 @@ async function queryTrackingRoutes(app, opts = {}) {
           actor: "api",
           action: "query-tracking.updated",
           entityType: "query",
-          diff: { added: candidate.diff.added.length, removed: candidate.diff.removed.length, reused: candidate.diff.reused.length }
+          diff: {
+            added: candidate.diff.added.length,
+            removed: candidate.diff.removed.length,
+            reused: candidate.diff.reused.length,
+            ...embedLimit !== void 0 ? { via: "embed" } : {}
+          }
         }));
         active = null;
       } else if (!candidate.diff.noOp) {

package/dist/{chunk-MDJG5NPR.js → chunk-JNRMODJS.js}

@@ -15,7 +15,7 @@ import {
   formatCanonryPluginUpdateHint,
   formatCanonryPluginVersionMismatch,
   skillsClientSchema
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/commands/skills.ts
 import crypto from "crypto";

package/dist/{chunk-YTYOUQQ7.js → chunk-JZ2A55L5.js}

@@ -1,7 +1,7 @@
 import {
   answerServiceAdapters,
   answerServiceDescriptors
-} from "./chunk-ON2RUGPD.js";
+} from "./chunk-SFMCFMJR.js";
 import {
   AeroLlmUsageFeatures,
   aeroTurnStatus,
@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-JZRCF3IX.js";
+} from "./chunk-BRT5GE3Z.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-LX5IQZHL.js";
+} from "./chunk-DW3KF33I.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -53,7 +53,7 @@ import {
   removeCloudflareTrafficConnection,
   removeCloudflareTrafficConnectionBySourceId,
   upsertCloudflareTrafficConnection
-} from "./chunk-XU7GZ544.js";
+} from "./chunk-RPYSCFFA.js";
 import {
   claudeAdapter,
   embedQueries,
@@ -64,7 +64,7 @@ import {
   openaiAdapter,
   openrouterAdapter,
   perplexityAdapter
-} from "./chunk-35XANOXF.js";
+} from "./chunk-EIRIZPR6.js";
 import {
   classifyUsageSurface,
   createApiUsageTelemetry,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-4Q64QWKU.js";
+} from "./chunk-3LTLLHCD.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -84,7 +84,7 @@ import {
   isApiProviderRegistrable,
   isCdpProviderRegistrable,
   registeredProviderNames
-} from "./chunk-535S4WXN.js";
+} from "./chunk-3ZF3T3OG.js";
 import {
   checkLatestVersionForServer,
   getOrCreateAnonymousId,
@@ -95,17 +95,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-HF7ONR3Z.js";
+} from "./chunk-RVEXUQHP.js";
 import {
   createCanonryMcpServer
-} from "./chunk-AGHKWDUB.js";
+} from "./chunk-PHHQVV3G.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-NDTU7FGL.js";
 import {
   ApiClient
-} from "./chunk-CUR2SI66.js";
+} from "./chunk-BGTJTKOJ.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -136,21 +136,21 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-D33TZL7S.js";
+} from "./chunk-6RI7JFFI.js";
 import {
   getBundledSkillSnapshots
-} from "./chunk-MDJG5NPR.js";
+} from "./chunk-JNRMODJS.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-34GYS64G.js";
+} from "./chunk-7W4KNDAW.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4KVUUBKF.js";
+} from "./chunk-QNSMMQJY.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -162,11 +162,11 @@ import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-KXJDLN64.js";
+} from "./chunk-42JQQZZQ.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
-} from "./chunk-R5YKG2YP.js";
+} from "./chunk-R7RTWOOV.js";
 import {
   BingApiError,
   CC_CACHE_DIR,
@@ -286,7 +286,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-D4TXUHVA.js";
+} from "./chunk-JGO7LGVN.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -372,7 +372,7 @@ import {
   siteLivenessState,
   trafficSources,
   usageCounters
-} from "./chunk-QZUEQP5G.js";
+} from "./chunk-XOCF2U54.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AI_ENGINE_DOMAINS,
@@ -389,6 +389,7 @@ import {
   CheckStatuses,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
   DiscoveryCompetitorTypes,
+  EMBED_QUERY_LIMIT_HEADER,
   FEEDBACK_LIMITS,
   FeatureNames,
   GBP_NO_SELECTED_LOCATIONS_ERROR,
@@ -621,7 +622,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // src/google-marketing-runtime.ts
 import crypto2 from "crypto";
@@ -5804,7 +5805,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "440bdfd1f6f914d117deb7ad2990625702ecc606" : void 0;
+  const embedded = true ? "b237135d4193b22493d7723946c7a8964b181a4f" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -21303,7 +21304,7 @@ async function createServer(opts) {
   const assetsDir = opts.assetsDir ?? path5.join(dirname, "..", "assets");
   if (fs5.existsSync(assetsDir)) {
     const indexPath = path5.join(assetsDir, "index.html");
-    const injectConfig = (html, projectTabsOverride, themeOverride, renderTokenOverride) => {
+    const injectConfig = (html, projectTabsOverride, themeOverride, renderTokenOverride, queryLimitOverride) => {
       const clientConfig = {};
       if (basePath) clientConfig.basePath = basePath;
       const dashboardConfig = {};
@@ -21338,7 +21339,13 @@ async function createServer(opts) {
         };
       }
       if (embed.enabled) {
-        const embedClient = embedClientConfigForRequest(embed, projectTabsOverride, themeOverride, renderTokenOverride);
+        const embedClient = embedClientConfigForRequest(
+          embed,
+          projectTabsOverride,
+          themeOverride,
+          renderTokenOverride,
+          queryLimitOverride
+        );
         const projectTabsError = embedProjectTabsError(embedClient?.projectTabs);
         if (projectTabsError) throw validationError(projectTabsError);
         if (embedClient) clientConfig.embed = embedClient;
@@ -21355,7 +21362,8 @@ async function createServer(opts) {
           html,
           reply.request.headers["x-canonry-embed-tabs"],
           reply.request.headers["x-canonry-embed-theme"],
-          reply.request.headers["x-canonry-embed-render-token"]
+          reply.request.headers["x-canonry-embed-render-token"],
+          reply.request.headers[EMBED_QUERY_LIMIT_HEADER]
         )
       );
     };

package/dist/{chunk-FLCTZSLI.js → chunk-KDV5NQZH.js}

@@ -1,7 +1,7 @@
 import {
   USAGE_TELEMETRY_HEADERS,
   redactLogString
-} from "./chunk-6R76X2XV.js";
+} from "./chunk-6JGQT4OH.js";
 
 // ../api-routes/src/request-context.ts
 import { AsyncLocalStorage } from "async_hooks";