@canonry/canonry 7.72.2 → 7.73.0

package/dist/{chunk-GA2EHZTI.js → chunk-3WPTMLQI.js}

@@ -2,11 +2,11 @@ import {
   dedupeGscSitemapUrls,
   resolveDiscoveredGscSitemapUrls,
   submitGscSitemapBatches
-} from "./chunk-J523Y7X2.js";
+} from "./chunk-2Y6MSB4J.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-3AG3LPZX.js";
+} from "./chunk-MRSNLKSM.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
@@ -77,6 +77,7 @@ import {
   keywordGenerateRequestSchema,
   logQuerySchema,
   maxOperationAccess,
+  mcpProfileDtoSchema,
   measurementChangesQuerySchema,
   measurementDataQualityQuerySchema,
   measurementDiscoveryRequestSchema,
@@ -177,7 +178,7 @@ import {
   trafficSeriesGranularitySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/mcp/tool-registry.ts
 import { z as z2 } from "zod";
@@ -239,13 +240,15 @@ function uniqueStrings(values) {
 // src/mcp/tool-registry.ts
 var readAnnotations = (openWorldHint) => ({
   readOnlyHint: true,
-  ...openWorldHint ? { openWorldHint } : {}
+  idempotentHint: true,
+  destructiveHint: false,
+  openWorldHint: Boolean(openWorldHint)
 });
 var writeAnnotations = (opts) => ({
   readOnlyHint: false,
   idempotentHint: opts.idempotentHint,
   destructiveHint: Boolean(opts.destructiveHint),
-  ...opts.openWorldHint ? { openWorldHint: opts.openWorldHint } : {}
+  openWorldHint: opts.openWorldHint ?? true
 });
 function toolOperationAccess(tool) {
   const derived = maxOperationAccess(tool.openApiOperations.map((operation) => {
@@ -1557,6 +1560,19 @@ var rawCanonryMcpTools = [
     openApiOperations: ["POST /api/v1/projects/{name}/query-tracking/commit"],
     handler: (client, input) => client.commitQueryTracking(input.project, input.request)
   }),
+  defineTool({
+    name: "canonry_mcp_profile",
+    requiresConnectionProfile: true,
+    title: "Read the connected Canonry identity",
+    description: "Read the signed-in user identity, effective read scope and instance audience. Requires a named user connection; an unbound API key has no user profile.",
+    access: "read",
+    tier: "core",
+    inputSchema: emptyInputSchema,
+    outputSchema: mcpProfileDtoSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/mcp/profile"],
+    handler: (client) => client.getMcpProfile()
+  }),
   defineTool({
     name: "canonry_projects_list",
     title: "List Canonry projects",
@@ -2398,7 +2414,7 @@ var rawCanonryMcpTools = [
     access: "write",
     tier: "bing",
     inputSchema: projectInputSchema,
-    annotations: writeAnnotations({ idempotentHint: true }),
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: false }),
     openApiOperations: ["GET /api/v1/projects/{name}/bing/coverage"],
     handler: (client, input) => client.bingCoverage(input.project)
   }),

package/dist/{chunk-QDN3FL2A.js → chunk-3YIKSZHN.js}

@@ -5,7 +5,7 @@ import {
   AppError,
   parseWindowIn,
   resolveDateRange
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/cli-access.ts
 var CLI_ACCESS_BY_ID = Object.freeze({
@@ -245,6 +245,7 @@ var CLI_ACCESS_BY_ID = Object.freeze({
   "mcp": "write",
   "mcp.config": "write",
   "mcp.install": "write",
+  "mcp.profile": "stored",
   "measurement-plan.advanced": "write",
   "measurement-plan.assignments.apply": "write",
   "measurement-plan.assignments.preview": "stored",

package/dist/{chunk-H4HNXCDF.js → chunk-4B6DE7BB.js}

@@ -1,9 +1,9 @@
 import {
   trackIntegrationConnection
-} from "./chunk-4LTL5RNY.js";
+} from "./chunk-S77W2XSI.js";
 import {
   cliRuntimeContext
-} from "./chunk-MJYO6UK2.js";
+} from "./chunk-PRSQ4R47.js";
 
 // src/cli-connection-telemetry.ts
 function trackCliConnection(properties) {

package/dist/{chunk-UWBJWKDQ.js → chunk-4JMTDLFV.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-ATT3ZCSS.js";
+} from "./chunk-WH2M2MQF.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";
@@ -19,7 +19,7 @@ import {
   formatMicros,
   formatRunErrorOneLine,
   resolveProviderInput
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/commands/run.ts
 function getClient() {

package/dist/{chunk-IY4AJ6DN.js → chunk-5PA7SJ2M.js}

@@ -1,9 +1,9 @@
 import {
   createLogger
-} from "./chunk-HZSE3WSG.js";
+} from "./chunk-AZQNJX3T.js";
 import {
   pickProjectCitedDomain
-} from "./chunk-DRGCVTYH.js";
+} from "./chunk-JPM3VC6A.js";
 import {
   GBP_INSIGHT_PROVIDER,
   PERSISTENT_GAP_THRESHOLD,
@@ -17,7 +17,7 @@ import {
   mergeGscQueryTotalsWithFallback,
   readGscQueryDailyRows,
   readLatestGscDataDate
-} from "./chunk-7KOAP47B.js";
+} from "./chunk-WLWOGBLJ.js";
 import {
   competitors,
   gbpDailyMetrics,
@@ -35,14 +35,14 @@ import {
   queries,
   querySnapshots,
   runs
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   CitationStates,
   RunKinds,
   RunStatuses,
   RunTriggers,
   effectiveDomains
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/intelligence-service.ts
 import { eq, desc, asc, and, ne, or, inArray, gte, lte, isNull, sql, exists } from "drizzle-orm";

package/dist/{chunk-JO73L677.js → chunk-6ATKY252.js}

@@ -1,6 +1,6 @@
 import {
   parseJsonColumn
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   AI_ENGINE_DOMAINS,
   AI_ENGINE_SELF_DOMAINS,
@@ -26,7 +26,7 @@ import {
   retryAfterDelayMs,
   usageCount,
   withRetry
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../provider-openai/src/normalize.ts
 import OpenAI from "openai";

package/dist/{chunk-XR6ZVMYK.js → chunk-6W5AR4IW.js}

@@ -28,7 +28,7 @@ import {
   unknownUsageObservation,
   usdToMicros,
   withRetry
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../provider-answer-services/src/core/http.ts
 var MAX_RESPONSE_BYTES = 8 * 1024 * 1024;

package/dist/{chunk-IZMT4WLZ.js → chunk-6YW24AUN.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -15,7 +15,7 @@ import {
   factorStatusFromDistribution,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {

package/dist/{chunk-HZSE3WSG.js → chunk-AZQNJX3T.js}

@@ -1,11 +1,11 @@
 import {
   getRequestContext
-} from "./chunk-BADJCT6U.js";
+} from "./chunk-GWDMWKM6.js";
 import {
   diagnosticIdentity,
   redactLogString,
   redactLogValue
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../api-routes/src/runtime-logger.ts
 import { format } from "util";

package/dist/{chunk-CF6BUJRK.js → chunk-B6R223HQ.js}

@@ -7,27 +7,27 @@ import {
   reparseStoredResult4,
   reparseStoredResult5,
   resolveStoredApiResponse
-} from "./chunk-JO73L677.js";
+} from "./chunk-6ATKY252.js";
 import {
   loadConfig
-} from "./chunk-JE5QURTR.js";
+} from "./chunk-HKV4UWG5.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
 import {
   determineCitationState
-} from "./chunk-DRGCVTYH.js";
+} from "./chunk-JPM3VC6A.js";
 import {
   backfillProjectAnswerMentions,
   competitorIdentityColumns,
   createRunCompetitorResolver,
   readMarketCompetitorNames,
   refreshSnapshotMentionIdentity
-} from "./chunk-7KOAP47B.js";
+} from "./chunk-WLWOGBLJ.js";
 import {
   classifyAiUserFetch,
   classifyCrawler
-} from "./chunk-JEBY6MS6.js";
+} from "./chunk-QS6RIP37.js";
 import {
   aiUserFetchEventsHourly,
   auditLog,
@@ -42,7 +42,7 @@ import {
   querySnapshots,
   rawEventSamples,
   runs
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   ProviderNames,
   RetrievalContracts,
@@ -59,7 +59,7 @@ import {
   extractRecommendedCompetitors,
   normalizeUrlPath,
   openRouterRouteModel
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/commands/backfill.ts
 import { setImmediate as yieldToEventLoop } from "timers/promises";
@@ -437,7 +437,7 @@ No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-LVRH4RJG.js");
+  const { IntelligenceService } = await import("./intelligence-service-EJQQNO65.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-6MYHGP46.js → chunk-DLVGMRM5.js}

@@ -1,7 +1,7 @@
 import {
   API_PROVIDER_NAMES,
   ProviderNames
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/provider-registration.ts
 function isApiProviderRegistrable(name, entry) {

package/dist/{chunk-P3UGNR2Y.js → chunk-ETVM3T7K.js}

@@ -1,16 +1,16 @@
 import {
   runWithUsageTags
-} from "./chunk-ATT3ZCSS.js";
+} from "./chunk-WH2M2MQF.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-GA2EHZTI.js";
+} from "./chunk-3WPTMLQI.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-7KOAP47B.js";
+} from "./chunk-WLWOGBLJ.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,
@@ -23,7 +23,7 @@ import {
   seoDatasetWithoutVendor,
   seoProviderSchema,
   truncateUtf16
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/agent/tools.ts
 import { Type as Type2 } from "@earendil-works/pi-ai";
@@ -884,7 +884,7 @@ function refuseCompetitorBulkAddAcknowledgement(tool) {
   };
 }
 function buildMcpAgentTools(registry, ctx, opts = {}) {
-  return registry.filter((tool) => !AERO_EXCLUDED_MCP_TOOLS.has(tool.name)).filter((tool) => opts.includeNames ? opts.includeNames.has(tool.name) : true).filter((tool) => opts.readOnly ? tool.access === "read" : true).filter((tool) => opts.managedSweeps ? !AERO_MANAGED_SWEEP_MCP_TOOLS.has(tool.name) : true).map((tool) => {
+  return registry.filter((tool) => !AERO_EXCLUDED_MCP_TOOLS.has(tool.name) && !tool.requiresConnectionProfile).filter((tool) => opts.includeNames ? opts.includeNames.has(tool.name) : true).filter((tool) => opts.readOnly ? tool.access === "read" : true).filter((tool) => opts.managedSweeps ? !AERO_MANAGED_SWEEP_MCP_TOOLS.has(tool.name) : true).map((tool) => {
     const agentTool = mcpToAgentTool(tool, ctx);
     if (COMPETITOR_AUTO_ALIAS_MODE_WRITES.has(tool.name)) return refuseCompetitorAutoAliasModeChange(agentTool, ctx);
     if (tool.name === "canonry_competitors_add") return refuseCompetitorBulkAddAcknowledgement(agentTool);

package/dist/{chunk-IV6VZ63E.js → chunk-F5D4GPZQ.js}

@@ -6,12 +6,12 @@ import {
 import {
   createApiClient,
   runWithUsageTags
-} from "./chunk-ATT3ZCSS.js";
+} from "./chunk-WH2M2MQF.js";
 import {
   canonryMcpTools,
   mcpOutputSchema,
   toolOperationAccess
-} from "./chunk-GA2EHZTI.js";
+} from "./chunk-3WPTMLQI.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -24,11 +24,11 @@ import {
   isReadOnlyKey,
   restrictedWriteScopes,
   upgradeCaveatFor
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/mcp/server.ts
 import { randomUUID } from "crypto";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { CLIENT_INFO_META_KEY, McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
 
 // src/mcp/results.ts
@@ -452,7 +452,7 @@ ${updateNoticeInstructions(update)}` : SERVER_INSTRUCTIONS
   });
   server.validateToolInput = async (_tool, args) => args;
   const entries = [];
-  for (const registryTool of getCanonryMcpTools(scope, options.tiers, options.credentialScopes, options.operator)) {
+  for (const registryTool of getCanonryMcpTools(scope, options.tiers, options.credentialScopes, options.operator, options.connectionProfile)) {
     const tool = registryTool;
     const handler = tool.handler;
     const registered = server.registerTool(
@@ -464,12 +464,16 @@ ${updateNoticeInstructions(update)}` : SERVER_INSTRUCTIONS
         outputSchema: tool.outputSchema ? mcpOutputSchema(tool.outputSchema) : void 0,
         annotations: tool.annotations
       },
-      async (input) => withToolErrors(async () => {
+      async (input, context) => withToolErrors(async () => {
         const parsed = tool.inputSchema.parse(input ?? {});
+        const envelope = context.mcpReq.envelope;
+        const identity = envelope && CLIENT_INFO_META_KEY in envelope ? envelope[CLIENT_INFO_META_KEY] : void 0;
+        const clientName = typeof identity === "object" && identity !== null && "name" in identity && typeof identity.name === "string" ? identity.name : server.server.getClientVersion()?.name;
         return runWithUsageTags(client, {
           mcpTool: tool.name,
           mcpCall: randomUUID(),
-          mcpClient: server.server.getClientVersion()?.name
+          mcpClient: clientName,
+          signal: context.mcpReq.signal
         }, () => handler(client, parsed));
       })
     );
@@ -500,8 +504,8 @@ function registerMetaTools(server, catalog, opts) {
     {
       title: "Guide a Canonry workflow",
       description: "Start here: route an intent to available stored-evidence tools, separately listed actions requiring approval, and workflow guidance. No provider calls or installation required. Optionally include full toolkit details.",
-      inputSchema: helpInputSchema.shape,
-      annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false }
+      inputSchema: helpInputSchema,
+      annotations: { readOnlyHint: true, idempotentHint: true, destructiveHint: false, openWorldHint: false }
     },
     async (input) => {
       try {
@@ -522,9 +526,9 @@ function registerMetaTools(server, catalog, opts) {
     "canonry_load_toolkit",
     {
       title: "Load a Canonry MCP toolkit",
-      description: `Register a toolkit's tools for this session and emit one notifications/tools/list_changed. Idempotent. Loaded toolkits remain loaded for the rest of the session. Wait for this call to return before calling any newly enabled tool \u2014 pipelining the call with a tools/call on the same connection can race the registration and fail with "MCP error -32602: Tool ... disabled".`,
-      inputSchema: loadToolkitInputSchema.shape,
-      annotations: { readOnlyHint: false, idempotentHint: true, destructiveHint: false }
+      description: `Register a toolkit's tools for this session and emit one notifications/tools/list_changed. Idempotent. Loaded toolkits remain loaded for the rest of the session. Wait for this call to return before calling any newly enabled tool \u2014 pipelining the call with a tools/call on the same connection can race the registration and fail with "Tool ... disabled".`,
+      inputSchema: loadToolkitInputSchema,
+      annotations: { readOnlyHint: false, idempotentHint: true, destructiveHint: false, openWorldHint: false }
     },
     async (input) => withToolErrors(async () => {
       const parsed = loadToolkitInputSchema.parse(input ?? {});
@@ -532,10 +536,10 @@ function registerMetaTools(server, catalog, opts) {
     })
   );
 }
-function getCanonryMcpTools(scope = "all", tiers, credentialScopes, operator = false) {
+function getCanonryMcpTools(scope = "all", tiers, credentialScopes, operator = false, connectionProfile = false) {
   const readOnly = scope === "read-only" || credentialScopes !== void 0 && isReadOnlyKey(credentialScopes);
   const restricted = credentialScopes && restrictedWriteScopes(credentialScopes);
-  const authorized = canonryMcpTools.filter((tool) => !tool.requiresOperator || operator);
+  const authorized = canonryMcpTools.filter((tool) => (!tool.requiresOperator || operator) && (!tool.requiresConnectionProfile || connectionProfile));
   const byScope = scope === "stored-only" ? authorized.filter((tool) => toolOperationAccess(tool) === OperationAccesses.stored) : readOnly ? authorized.filter((tool) => tool.access === "read") : authorized.filter((tool) => {
     if (!restricted || tool.access === "read") return true;
     if (tool.requiredScope && restricted.includes(tool.requiredScope)) return true;

package/dist/{chunk-NZLK3KHQ.js → chunk-GNBATQS3.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-P3UGNR2Y.js";
+} from "./chunk-ETVM3T7K.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NDTU7FGL.js";
@@ -22,18 +22,18 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-JE5QURTR.js";
+} from "./chunk-HKV4UWG5.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-GA2EHZTI.js";
+} from "./chunk-3WPTMLQI.js";
 import {
   createLogger
-} from "./chunk-HZSE3WSG.js";
+} from "./chunk-AZQNJX3T.js";
 import {
   agentToolEvents,
   llmUsageEvents
-} from "./chunk-O7WOCTBD.js";
+} from "./chunk-PAIYFNNY.js";
 import {
   MeasurementPortfolioLists,
   SeoCapabilities,
@@ -42,7 +42,7 @@ import {
   describeError,
   validationError,
   visibilityReportRequestSchema
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/agent/session.ts
 import fs3 from "fs";

package/dist/{chunk-TEDY3MHN.js → chunk-GUFKUPKZ.js}

@@ -1,13 +1,13 @@
 import {
   createApiClient
-} from "./chunk-ATT3ZCSS.js";
+} from "./chunk-WH2M2MQF.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-3AG3LPZX.js";
+} from "./chunk-MRSNLKSM.js";
 import {
   isMachineFormat,
   systemError
@@ -37,7 +37,7 @@ import {
   unattributedAnswersLabel,
   uncheckedSourcesLabel,
   visibilityReportRequestSchema
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/commands/measurement-plan.ts
 import crypto from "crypto";

package/dist/{chunk-BADJCT6U.js → chunk-GWDMWKM6.js}

@@ -1,7 +1,7 @@
 import {
   USAGE_TELEMETRY_HEADERS,
   redactLogString
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // ../api-routes/src/request-context.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-PPM6Z7CM.js → chunk-HEL6DKDN.js}

@@ -15,7 +15,7 @@ import {
   formatCanonryPluginUpdateHint,
   formatCanonryPluginVersionMismatch,
   skillsClientSchema
-} from "./chunk-YXAKL5HM.js";
+} from "./chunk-SF5JLMLG.js";
 
 // src/commands/skills.ts
 import crypto from "crypto";

package/dist/{chunk-QKDKVPMR.js → chunk-HGMTGC34.js}

@@ -1,10 +1,10 @@
 import {
   registeredProviderNames
-} from "./chunk-6MYHGP46.js";
+} from "./chunk-DLVGMRM5.js";
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-JE5QURTR.js";
+} from "./chunk-HKV4UWG5.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -28,7 +28,7 @@ async function buildSetupState() {
   }
   if (dbPath && fs.existsSync(dbPath)) {
     try {
-      const { createClient, projects, queries: queriesTable } = await import("./src-BXXGJOQB.js");
+      const { createClient, projects, queries: queriesTable } = await import("./src-52USCS7O.js");
       const db = createClient(dbPath);
       project_count = db.select({ id: projects.id }).from(projects).all().length;
       const firstQuery = db.select({ id: queriesTable.id }).from(queriesTable).limit(1).all();
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-SJTQQQQE.js");
+  const { serveCommand } = await import("./serve-BYHHULUU.js");
   await serveCommand(format);
 }