@canonry/canonry 7.75.0 → 7.76.1

package/dist/{chunk-MJGY7NBK.js → chunk-KXSNV6C3.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";

package/dist/{chunk-NKNA2DSS.js → chunk-MXRCOQT2.js}

@@ -6,7 +6,7 @@ import {
 import {
   createApiClient,
   runWithUsageTags
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   canonryMcpTools,
   mcpOutputSchema,

package/dist/{chunk-GD3L63V5.js → chunk-NMP3G5HT.js}

@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-KF76GJ7L.js";
+} from "./chunk-3KM3L5AG.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-WWZ6RZJ5.js";
+} from "./chunk-NRFG2HJV.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-7J7E2F3M.js";
+} from "./chunk-7LLDLEWJ.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -95,17 +95,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-W5GZENMO.js";
+} from "./chunk-OT6SUK6X.js";
 import {
   createCanonryMcpServer
-} from "./chunk-NKNA2DSS.js";
+} from "./chunk-MXRCOQT2.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-NDTU7FGL.js";
 import {
   ApiClient
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -136,7 +136,7 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   getBundledSkillSnapshots
 } from "./chunk-7UVCZZQJ.js";
@@ -159,7 +159,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   IntelligenceService
-} from "./chunk-OF6UW77Y.js";
+} from "./chunk-DKROFKRY.js";
 import {
   addLogListener,
   createFastifyLogger,
@@ -289,7 +289,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-M7OLPSCA.js";
+} from "./chunk-C5YPTA3W.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -5810,7 +5810,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "c83461c5dec416cec973e066da1c60bb964869b0" : void 0;
+  const embedded = true ? "5a4f2fade99941435df511cec79521f1e3168254" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {

package/dist/{chunk-WWZ6RZJ5.js → chunk-NRFG2HJV.js}

@@ -1,6 +1,6 @@
 import {
   runWithUsageTags
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
@@ -10,7 +10,7 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-M7OLPSCA.js";
+} from "./chunk-C5YPTA3W.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,

package/dist/{chunk-W5GZENMO.js → chunk-OT6SUK6X.js}

@@ -5,7 +5,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   CANONRY_NPM_PACKAGE_URL,
   compareSemver,

package/dist/{chunk-U5UXQV57.js → chunk-UWPCUAZM.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   CliError,
   isMachineFormat

package/dist/{chunk-LBFWNA4V.js → chunk-WMY3JDSE.js}

@@ -4,7 +4,7 @@ import {
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-IZ2FZ7F3.js");
+  const { serveCommand } = await import("./serve-4IOKXZPK.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-TRAD6XS4.js → chunk-WRKJ57AR.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-C3UFOS7J.js";
 import {
   loadConfig
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
@@ -23,7 +23,7 @@ import {
   createRunCompetitorResolver,
   readMarketCompetitorNames,
   refreshSnapshotMentionIdentity
-} from "./chunk-M7OLPSCA.js";
+} from "./chunk-C5YPTA3W.js";
 import {
   classifyAiUserFetch,
   classifyCrawler
@@ -437,7 +437,7 @@ No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService } = await import("./intelligence-service-G6NCD4JJ.js");
+  const { IntelligenceService } = await import("./intelligence-service-KMSKPRXT.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);

package/dist/{chunk-4LR2SXYB.js → chunk-X2CE5IME.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{chunk-5SVPFDUM.js → chunk-ZWD4W3KU.js}

@@ -105,9 +105,16 @@ var gatewayTenantSchema = z4.object({
   catalogVersion: z4.literal("canonry-readonly-v1"),
   upstreamClientId: nonempty.optional()
 }).strict();
+var LOOPBACK_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
 var clientSchema = z4.object({
   client_id: identifier,
   client_name: nonempty.max(200),
+  /**
+   * `native` is a CLI or desktop app that receives the code on a loopback port it
+   * picks per sign-in (RFC 8252 section 7.3). oidc-provider matches its loopback
+   * redirects on any port, so they are registered without one.
+   */
+  application_type: z4.enum(["web", "native"]).default("web"),
   redirect_uris: z4.array(z4.url()).min(1),
   token_endpoint_auth_method: z4.literal("none").default("none"),
   grant_types: z4.array(z4.enum(["authorization_code", "refresh_token"])).default(["authorization_code", "refresh_token"]),
@@ -129,7 +136,7 @@ var gatewayConfigSchema = z4.object({
 }).strict().superRefine((config, ctx) => {
   const checkTransport = (value, path2) => {
     const parsed = new URL(value);
-    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(parsed.hostname);
+    const loopback = LOOPBACK_HOSTS.includes(parsed.hostname);
     if (parsed.protocol !== "https:" && !(config.development && loopback && parsed.protocol === "http:")) {
       ctx.addIssue({ code: "custom", path: path2, message: "HTTPS is required except explicit development on loopback" });
     }
@@ -167,8 +174,11 @@ var gatewayConfigSchema = z4.object({
     if (clientIds.has(client.client_id)) ctx.addIssue({ code: "custom", path: ["clients", index, "client_id"], message: "Client IDs must be unique" });
     clientIds.add(client.client_id);
     client.redirect_uris.forEach((redirect, redirectIndex) => {
-      checkTransport(redirect, ["clients", index, "redirect_uris", redirectIndex]);
       const parsed = new URL(redirect);
+      if (client.application_type === "web") checkTransport(redirect, ["clients", index, "redirect_uris", redirectIndex]);
+      else if (parsed.protocol !== "http:" || !LOOPBACK_HOSTS.includes(parsed.hostname) || parsed.port) {
+        ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Native clients register loopback HTTP redirects without a port" });
+      }
       if (parsed.username || parsed.password || parsed.hash) {
         ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Redirects cannot contain credentials or fragments" });
       }

package/dist/{citations-K44GWHAZ.js → citations-XJUGQ736.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
 import "./chunk-FCGYYZHL.js";

package/dist/{cli-commands-RQTNKS2T.js → cli-commands-JSWRWESM.js}

@@ -1,12 +1,12 @@
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CYXUQNIQ.js";
+} from "./chunk-JX5HZ5KY.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-E6NE3FJC.js";
+import "./chunk-7KYGOR7N.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
-import "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+import "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-RPJJOBKN.js";
 import "./chunk-Z7IUAJOF.js";
 import "./chunk-5QR7D4RQ.js";

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node --import tsx
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CYXUQNIQ.js";
+} from "./chunk-JX5HZ5KY.js";
 import {
   buildSetupState,
   runPendingServeHandoff
-} from "./chunk-LBFWNA4V.js";
+} from "./chunk-WMY3JDSE.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-E6NE3FJC.js";
+import "./chunk-7KYGOR7N.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
 import "./chunk-2WBT6TEJ.js";
@@ -24,13 +24,13 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-W5GZENMO.js";
+} from "./chunk-OT6SUK6X.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-3TCCNK2T.js";
-import "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-6NUXSEW6.js";
+import "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   accessFilterFromArgs,
   dispatchRegisteredCommand,

package/dist/{competitor-MHYOHVOJ.js → competitor-5OEWFXMU.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{content-AWDA3GYL.js → content-TUWBGELB.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{dashboard-P2ODMTQG.js → dashboard-7XMBI56X.js}

@@ -1,13 +1,13 @@
 import {
   clearDashboardPassword,
   loadConfigRaw
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
 import {
   anyUsersExist
-} from "./chunk-M7OLPSCA.js";
+} from "./chunk-C5YPTA3W.js";
 import "./chunk-TESDUMVK.js";
 import "./chunk-JPOIDGGF.js";
 import {

package/dist/{demo-FSRCJINC.js → demo-WOA365EE.js}

@@ -40,7 +40,7 @@ function parseDemoTrustedProxies(values) {
 async function demoCommand(options) {
   const { host, port } = parseDemoListenOptions(options);
   const trustProxy = parseDemoTrustedProxies(options.trustProxy);
-  const { createDemoServer } = await import("./demo-server-ROGIRBAR.js");
+  const { createDemoServer } = await import("./demo-server-S5BHIF47.js");
   const app = await createDemoServer({ trustProxy });
   let stopping = false;
   const stop = () => {

package/dist/{demo-server-ROGIRBAR.js → demo-server-S5BHIF47.js}

@@ -18,7 +18,7 @@ import "./chunk-HGMYEDAQ.js";
 import {
   HISTORY_WINDOW_RUNS,
   IntelligenceService
-} from "./chunk-OF6UW77Y.js";
+} from "./chunk-DKROFKRY.js";
 import "./chunk-Z2FY6AGZ.js";
 import {
   determineCitationState
@@ -26,7 +26,7 @@ import {
 import {
   apiRoutes,
   assessConversionTrackingIntegrity
-} from "./chunk-M7OLPSCA.js";
+} from "./chunk-C5YPTA3W.js";
 import "./chunk-TESDUMVK.js";
 import "./chunk-JPOIDGGF.js";
 import {

package/dist/{discover-I2SVIHRG.js → discover-WZUOPCBV.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{discover-eval-VV2AKXCV.js → discover-eval-SICOH7ML.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   CliError,

package/dist/{doctor-25I3JSKE.js → doctor-UMSTE4EO.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{evidence-PNYKUX2F.js → evidence-NLIQFQAK.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{export-cmd-F4XZGLGF.js → export-cmd-U2BFP7VV.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isEndpointMissing,

package/dist/{ga-S4DIQ5SZ.js → ga-OCN3UUG2.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{gbp-IYCVTLP7.js → gbp-B2YUDH7S.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isMachineFormat

package/dist/{google-FAJ5RL57.js → google-EOV6EXSF.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{health-cmd-HLAFQSU7.js → health-cmd-UVJAXG5V.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{history-U67NTFZP.js → history-4NOM3SFC.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";