@canonry/canonry 7.72.1 → 7.73.0

package/dist/{chunk-GA2EHZTI.js → chunk-3WPTMLQI.js}

@@ -2,11 +2,11 @@ import {
   dedupeGscSitemapUrls,
   resolveDiscoveredGscSitemapUrls,
   submitGscSitemapBatches
-} from "./chunk-J523Y7X2.js";
+} from "./chunk-2Y6MSB4J.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-3AG3LPZX.js";
+} from "./chunk-MRSNLKSM.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
@@ -77,6 +77,7 @@ import {
   keywordGenerateRequestSchema,
   logQuerySchema,
   maxOperationAccess,
+  mcpProfileDtoSchema,
   measurementChangesQuerySchema,
   measurementDataQualityQuerySchema,
   measurementDiscoveryRequestSchema,
@@ -177,7 +178,7 @@ import {
   trafficSeriesGranularitySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/mcp/tool-registry.ts
 import { z as z2 } from "zod";
@@ -239,13 +240,15 @@ function uniqueStrings(values) {
 // src/mcp/tool-registry.ts
 var readAnnotations = (openWorldHint) => ({
   readOnlyHint: true,
-  ...openWorldHint ? { openWorldHint } : {}
+  idempotentHint: true,
+  destructiveHint: false,
+  openWorldHint: Boolean(openWorldHint)
 });
 var writeAnnotations = (opts) => ({
   readOnlyHint: false,
   idempotentHint: opts.idempotentHint,
   destructiveHint: Boolean(opts.destructiveHint),
-  ...opts.openWorldHint ? { openWorldHint: opts.openWorldHint } : {}
+  openWorldHint: opts.openWorldHint ?? true
 });
 function toolOperationAccess(tool) {
   const derived = maxOperationAccess(tool.openApiOperations.map((operation) => {
@@ -1557,6 +1560,19 @@ var rawCanonryMcpTools = [
     openApiOperations: ["POST /api/v1/projects/{name}/query-tracking/commit"],
     handler: (client, input) => client.commitQueryTracking(input.project, input.request)
   }),
+  defineTool({
+    name: "canonry_mcp_profile",
+    requiresConnectionProfile: true,
+    title: "Read the connected Canonry identity",
+    description: "Read the signed-in user identity, effective read scope and instance audience. Requires a named user connection; an unbound API key has no user profile.",
+    access: "read",
+    tier: "core",
+    inputSchema: emptyInputSchema,
+    outputSchema: mcpProfileDtoSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/mcp/profile"],
+    handler: (client) => client.getMcpProfile()
+  }),
   defineTool({
     name: "canonry_projects_list",
     title: "List Canonry projects",
@@ -2398,7 +2414,7 @@ var rawCanonryMcpTools = [
     access: "write",
     tier: "bing",
     inputSchema: projectInputSchema,
-    annotations: writeAnnotations({ idempotentHint: true }),
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: false }),
     openApiOperations: ["GET /api/v1/projects/{name}/bing/coverage"],
     handler: (client, input) => client.bingCoverage(input.project)
   }),

package/dist/{chunk-QDN3FL2A.js → chunk-3YIKSZHN.js}

@@ -5,7 +5,7 @@ import {
   AppError,
   parseWindowIn,
   resolveDateRange
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/cli-access.ts
 var CLI_ACCESS_BY_ID = Object.freeze({
@@ -245,6 +245,7 @@ var CLI_ACCESS_BY_ID = Object.freeze({
   "mcp": "write",
   "mcp.config": "write",
   "mcp.install": "write",
+  "mcp.profile": "stored",
   "measurement-plan.advanced": "write",
   "measurement-plan.assignments.apply": "write",
   "measurement-plan.assignments.preview": "stored",

package/dist/{chunk-H4HNXCDF.js → chunk-4B6DE7BB.js}

@@ -1,9 +1,9 @@
 import {
   trackIntegrationConnection
-} from "./chunk-4LTL5RNY.js";
+} from "./chunk-S77W2XSI.js";
 import {
   cliRuntimeContext
-} from "./chunk-MJYO6UK2.js";
+} from "./chunk-PRSQ4R47.js";
 
 // src/cli-connection-telemetry.ts
 function trackCliConnection(properties) {

package/dist/{chunk-UWBJWKDQ.js → chunk-4JMTDLFV.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-ATT3ZCSS.js";
+} from "./chunk-WH2M2MQF.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";
@@ -19,7 +19,7 @@ import {
   formatMicros,
   formatRunErrorOneLine,
   resolveProviderInput
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/commands/run.ts
 function getClient() {

package/dist/{chunk-QKMGGM4B.js → chunk-5PA7SJ2M.js}

@@ -1,6 +1,9 @@
+import {
+  createLogger
+} from "./chunk-AZQNJX3T.js";
 import {
   pickProjectCitedDomain
-} from "./chunk-DRGCVTYH.js";
+} from "./chunk-JPM3VC6A.js";
 import {
   GBP_INSIGHT_PROVIDER,
   PERSISTENT_GAP_THRESHOLD,
@@ -14,10 +17,7 @@ import {
   mergeGscQueryTotalsWithFallback,
   readGscQueryDailyRows,
   readLatestGscDataDate
-} from "./chunk-7KOAP47B.js";
-import {
-  getRequestContext
-} from "./chunk-BADJCT6U.js";
+} from "./chunk-WLWOGBLJ.js";
 import {
   competitors,
   gbpDailyMetrics,
@@ -35,278 +35,18 @@ import {
   queries,
   querySnapshots,
   runs
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   CitationStates,
   RunKinds,
   RunStatuses,
   RunTriggers,
-  diagnosticIdentity,
-  effectiveDomains,
-  redactLogString,
-  redactLogValue
-} from "./chunk-YXAKL5HM.js";
+  effectiveDomains
+} from "./chunk-SF5JLMLG.js";
 
 // src/intelligence-service.ts
 import { eq, desc, asc, and, ne, or, inArray, gte, lte, isNull, sql, exists } from "drizzle-orm";
 import crypto from "crypto";
-
-// ../api-routes/src/runtime-logger.ts
-import { format } from "util";
-var IS_TTY = process.stdout.isTTY === true;
-var MAX_IDENTITY_LENGTH = 512;
-var RESERVED_FIELDS = /* @__PURE__ */ new Set([
-  "ts",
-  "level",
-  "module",
-  "action",
-  "msg",
-  "requestId",
-  "actor",
-  "credentialId",
-  "userAgent",
-  "actorSession",
-  "__runtimeRequestId"
-]);
-var listeners = /* @__PURE__ */ new Set();
-function addLogListener(listener) {
-  listeners.add(listener);
-  return () => listeners.delete(listener);
-}
-function createLogger(module) {
-  const emit = (level, action, context) => {
-    const msg = context ? safeProperty(context, "msg") : void 0;
-    emitRuntimeLog({ level, module, action, context, ...typeof msg === "string" ? { msg } : {} });
-  };
-  return {
-    info: (action, ctx) => emit("info", action, ctx),
-    warn: (action, ctx) => emit("warn", action, ctx),
-    error: (action, ctx) => emit("error", action, ctx)
-  };
-}
-function createFastifyLogger(options = {}) {
-  return buildFastifyLogger(options.module ?? "HTTP", options.enabled !== false, {});
-}
-var LEVELS = { trace: 10, debug: 20, info: 30, warn: 40, error: 50, fatal: 60, silent: Infinity };
-function buildFastifyLogger(module, enabled, bindings, inheritedLevel = "info") {
-  let level = inheritedLevel;
-  const emit = (severity, args) => {
-    if (LEVELS[severity] >= LEVELS[level]) logFastify(severity, module, enabled, bindings, args);
-  };
-  const logger = {
-    get level() {
-      return level;
-    },
-    set level(value) {
-      if (Object.hasOwn(LEVELS, value)) level = value;
-    },
-    trace: (...args) => emit("trace", args),
-    debug: (...args) => emit("debug", args),
-    info: (...args) => emit("info", args),
-    warn: (...args) => emit("warn", args),
-    error: (...args) => emit("error", args),
-    fatal: (...args) => emit("fatal", args),
-    silent: () => void 0,
-    child: (childBindings) => buildFastifyLogger(module, enabled, mergeBindings(bindings, childBindings), level)
-  };
-  return logger;
-}
-function logFastify(level, module, enabled, bindings, args) {
-  const { context, msg } = normalizePinoArgs(args);
-  emitRuntimeLog({
-    level,
-    module,
-    action: `fastify.${level}`,
-    msg,
-    context: { ...bindings, ...context },
-    trustedRequestId: asBoundString(bindings.__runtimeRequestId),
-    enabled
-  });
-}
-function normalizePinoArgs(args) {
-  const first = args[0];
-  const second = args[1];
-  if (typeof first === "string") return { context: {}, msg: safeFormat(first, args.slice(1)) };
-  if (first instanceof Error) {
-    return { context: { err: first }, msg: typeof second === "string" ? safeFormat(second, args.slice(2)) : void 0 };
-  }
-  if (isObject(first)) {
-    return { context: copyOwnData(first), msg: typeof second === "string" ? safeFormat(second, args.slice(2)) : void 0 };
-  }
-  return { context: {}, msg: typeof second === "string" ? safeFormat(second, args.slice(2)) : void 0 };
-}
-function emitRuntimeLog({
-  level,
-  module,
-  action,
-  msg,
-  context,
-  trustedRequestId,
-  enabled = true
-}) {
-  const safeContext = sanitizeContext(context);
-  const error = safeContext.err ?? safeContext.error;
-  const errorMessage = typeof error === "string" ? error : isRecord(error) && typeof error.message === "string" ? error.message : void 0;
-  const message = errorMessage && errorMessage !== msg ? [msg, errorMessage].filter(Boolean).join(": ") : msg;
-  const entry = {
-    ts: (/* @__PURE__ */ new Date()).toISOString(),
-    level,
-    module: boundText(module, "Runtime"),
-    action: boundText(action, "log"),
-    ...message === void 0 ? {} : { msg: redactLogString(message) },
-    ...safeContext,
-    ...trustedAttribution(getRequestContext(trustedRequestId), trustedRequestId)
-  };
-  if (enabled) writeEntry(entry);
-  for (const listener of listeners) {
-    try {
-      listener(entry);
-    } catch {
-    }
-  }
-}
-function sanitizeContext(context) {
-  if (!context) return {};
-  const output = {};
-  for (const key of safeKeys(context).slice(0, 100)) {
-    if (RESERVED_FIELDS.has(key)) continue;
-    const value = safeProperty(context, key);
-    if (key === "req" || key === "request") {
-      Object.assign(output, normalizeRequest(value));
-      continue;
-    }
-    if (key === "res" || key === "reply") {
-      Object.assign(output, normalizeReply(value));
-      continue;
-    }
-    if (key === "responseTime" || key === "duration") {
-      if (typeof value === "number" && Number.isFinite(value)) output.durationMs = value;
-      continue;
-    }
-    output[key] = value;
-  }
-  delete output.__runtimeRequestId;
-  const redacted = redactLogValue(output);
-  return isRecord(redacted) ? redacted : {};
-}
-function trustedAttribution(context, trustedRequestId) {
-  const requestId = boundOptional(context?.requestId) ?? trustedRequestId;
-  const actor = diagnosticIdentity("actor", context?.actor);
-  const credentialId = diagnosticIdentity("credentialId", context?.credentialId);
-  const userAgent = boundOptional(context?.userAgent);
-  const actorSession = boundOptional(context?.actorSession);
-  const method = boundOptional(context?.method);
-  const route = boundOptional(context?.route);
-  return {
-    ...requestId ? { requestId } : {},
-    ...actor ? { actor } : {},
-    ...credentialId ? { credentialId } : {},
-    ...userAgent ? { userAgent } : {},
-    ...actorSession ? { actorSession } : {},
-    ...method ? { method } : {},
-    ...route ? { route } : {},
-    ...context?.statusCode === void 0 ? {} : { statusCode: context.statusCode }
-  };
-}
-function mergeBindings(parent, child) {
-  const merged = { ...parent };
-  if (!isObject(child)) return merged;
-  for (const key of safeKeys(child).slice(0, 100)) {
-    const value = safeProperty(child, key);
-    if (key === "req" || key === "request") Object.assign(merged, normalizeRequest(value));
-    else if (key === "res" || key === "reply") Object.assign(merged, normalizeReply(value));
-    else if (key === "reqId") {
-      merged.reqId = value;
-      merged.__runtimeRequestId = value;
-    } else if (!RESERVED_FIELDS.has(key)) merged[key] = value;
-  }
-  return merged;
-}
-function normalizeRequest(value) {
-  if (!isObject(value)) return {};
-  const id = asBoundString(safeProperty(value, "id"));
-  const method = asBoundString(safeProperty(value, "method"));
-  const routeOptions = safeProperty(value, "routeOptions");
-  const route = isObject(routeOptions) ? asBoundString(safeProperty(routeOptions, "url")) : void 0;
-  return {
-    ...id ? { reqId: id, __runtimeRequestId: id } : {},
-    ...method ? { method } : {},
-    ...route ? { route } : {}
-  };
-}
-function normalizeReply(value) {
-  if (!isObject(value)) return {};
-  const statusCode = safeProperty(value, "statusCode");
-  return typeof statusCode === "number" && Number.isFinite(statusCode) ? { statusCode } : {};
-}
-function writeEntry(entry) {
-  const stream = entry.level === "error" || entry.level === "fatal" ? process.stderr : process.stdout;
-  const line = IS_TTY ? formatTTY(entry) : JSON.stringify(entry);
-  try {
-    stream.write(`${line}
-`);
-  } catch {
-  }
-}
-function formatTTY(entry) {
-  const { ts, level, module, action, msg, ...context } = entry;
-  const levelTag = level === "fatal" || level === "error" ? "ERR" : level === "warn" ? "WRN" : "INF";
-  const parts = safeKeys(context).map((key) => `${key}=${safeDisplay(safeProperty(context, key))}`);
-  return `${ts.slice(11, 19)} ${levelTag} [${module}] ${action}${msg ? ` ${msg}` : ""}${parts.length ? ` ${parts.join(" ")}` : ""}`;
-}
-function safeDisplay(value) {
-  try {
-    return typeof value === "string" ? value : JSON.stringify(value);
-  } catch {
-    return "[UNSERIALIZABLE]";
-  }
-}
-function safeFormat(message, args) {
-  try {
-    return args.length ? format(message, ...args) : message;
-  } catch {
-    return message;
-  }
-}
-function isObject(value) {
-  return value !== null && typeof value === "object";
-}
-function isRecord(value) {
-  return isObject(value) && !Array.isArray(value);
-}
-function safeKeys(value) {
-  try {
-    return Object.keys(value);
-  } catch {
-    return [];
-  }
-}
-function safeProperty(value, key) {
-  try {
-    const descriptor = Object.getOwnPropertyDescriptor(value, key);
-    return descriptor && "value" in descriptor ? descriptor.value : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function copyOwnData(value) {
-  const output = {};
-  for (const key of safeKeys(value)) output[key] = safeProperty(value, key);
-  return output;
-}
-function boundText(value, fallback) {
-  return boundOptional(value) ?? fallback;
-}
-function asBoundString(value) {
-  return typeof value === "string" ? boundOptional(value) : void 0;
-}
-function boundOptional(value) {
-  if (typeof value !== "string") return void 0;
-  const redacted = redactLogString(value).replace(/[\r\n]+/g, " ").trim().slice(0, MAX_IDENTITY_LENGTH);
-  return redacted || void 0;
-}
-
-// src/intelligence-service.ts
 var RECURRENCE_LOOKBACK_RUNS = 5;
 var HISTORY_WINDOW_RUNS = Math.max(PERSISTENT_GAP_THRESHOLD, 5);
 var log = createLogger("IntelligenceService");
@@ -1026,9 +766,6 @@ var IntelligenceService = class {
 };
 
 export {
-  addLogListener,
-  createLogger,
-  createFastifyLogger,
   HISTORY_WINDOW_RUNS,
   IntelligenceService
 };

package/dist/{chunk-JO73L677.js → chunk-6ATKY252.js}

@@ -1,6 +1,6 @@
 import {
   parseJsonColumn
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   AI_ENGINE_DOMAINS,
   AI_ENGINE_SELF_DOMAINS,
@@ -26,7 +26,7 @@ import {
   retryAfterDelayMs,
   usageCount,
   withRetry
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../provider-openai/src/normalize.ts
 import OpenAI from "openai";

package/dist/{chunk-XR6ZVMYK.js → chunk-6W5AR4IW.js}

@@ -28,7 +28,7 @@ import {
   unknownUsageObservation,
   usdToMicros,
   withRetry
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../provider-answer-services/src/core/http.ts
 var MAX_RESPONSE_BYTES = 8 * 1024 * 1024;

package/dist/{chunk-IZMT4WLZ.js → chunk-6YW24AUN.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -15,7 +15,7 @@ import {
   factorStatusFromDistribution,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {