@canonry/canonry 7.76.2 → 7.77.0

package/dist/{chunk-7LLDLEWJ.js → chunk-5QEGJVU5.js}

@@ -2,10 +2,10 @@ import {
   bucketCliCommandDuration,
   isTelemetryEnabled,
   trackEvent
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-IUVJLNW4.js";
 import {
   getConfigDir
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   currentOutcomeAttribution
 } from "./chunk-JPOIDGGF.js";

package/dist/{chunk-4MYZRVJ6.js → chunk-AWSK2DBU.js}

@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-AQLTYL3Q.js";
+} from "./chunk-IQLEMBGA.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-ST6FNS6A.js";
+} from "./chunk-ZER6XCES.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-7LLDLEWJ.js";
+} from "./chunk-5QEGJVU5.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -95,17 +95,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-IUVJLNW4.js";
 import {
   createCanonryMcpServer
-} from "./chunk-MXRCOQT2.js";
+} from "./chunk-TS2B42RE.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-NDTU7FGL.js";
 import {
   ApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -136,7 +136,7 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   getBundledSkillSnapshots
 } from "./chunk-7UVCZZQJ.js";
@@ -5810,7 +5810,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "344e5accb36d0389b07a393dd137b965100081a5" : void 0;
+  const embedded = true ? "c35e40e5e25334c95c1aef2cc0741ac34e2557cf" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -19142,6 +19142,16 @@ function parseDashboardOnboardingMode(value) {
 function resolveDashboardOnboardingMode(env, config) {
   return parseDashboardOnboardingMode(env.CANONRY_ONBOARDING_MODE) ?? config.dashboard?.onboardingMode;
 }
+function parseDashboardBrandMark(value) {
+  const normalized = value?.trim().toLowerCase();
+  return normalized === "mascot" || normalized === "icon" ? normalized : void 0;
+}
+function resolveDashboardBrandMark(env, config) {
+  return parseDashboardBrandMark(env.CANONRY_DASHBOARD_BRAND_MARK) ?? parseDashboardBrandMark(config.dashboard?.brandMark) ?? "mascot";
+}
+function withIconMarkLinks(html) {
+  return html.replace(/href="(\.?\/)favicon\.svg"/, 'href="$1canonry-icon-favicon.svg"').replace(/href="(\.?\/)favicon-32\.png"/, 'href="$1canonry-icon-32.png"').replace(/href="(\.?\/)apple-touch-icon\.png"/, 'href="$1canonry-icon-touch.png"');
+}
 var API_ADAPTERS = [
   geminiAdapter,
   openaiAdapter,
@@ -20388,6 +20398,7 @@ async function createServer(opts) {
   const dashboardShowLocalAgentSetup = resolveDashboardShowLocalAgentSetup(process.env, opts.config);
   const dashboardShowUpdateNotification = resolveDashboardShowUpdateNotification(process.env, opts.config);
   const dashboardOnboardingMode = resolveDashboardOnboardingMode(process.env, opts.config);
+  const dashboardBrandMark = resolveDashboardBrandMark(process.env, opts.config);
   const researchAllowViewers = resolveResearchAllowViewers(process.env, opts.config);
   const researchViewerDailyRunLimit = resolveResearchViewerDailyRunLimit(process.env, opts.config);
   app.log.info(
@@ -21529,6 +21540,9 @@ async function createServer(opts) {
       if (!dashboardShowUpdateNotification) {
         dashboardConfig.showUpdateNotification = false;
       }
+      if (dashboardBrandMark === "icon") {
+        dashboardConfig.brandMark = "icon";
+      }
       if (dashboardManagedRunKinds.length > 0) {
         dashboardConfig.managedRunKinds = dashboardManagedRunKinds;
       }
@@ -21561,7 +21575,7 @@ async function createServer(opts) {
       }
       const configScript = `<script>window.__CANONRY_CONFIG__=${serializeForInlineScript(clientConfig)}</script>`;
       const baseTag = `<base href="${basePath ?? "/"}">`;
-      return html.replace("<head>", `<head>${baseTag}`).replace("</head>", `${configScript}</head>`);
+      return (dashboardBrandMark === "icon" ? withIconMarkLinks(html) : html).replace("<head>", `<head>${baseTag}`).replace("</head>", `${configScript}</head>`);
     };
     const sendSpaDocument = (reply, html) => {
       reply.header("Cache-Control", "no-cache, must-revalidate");

package/dist/{chunk-6NUXSEW6.js → chunk-CKJLL2FQ.js}

@@ -2,7 +2,7 @@ import {
   configExists,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   BUNDLED_SKILL_NAMES,
   installSkills

package/dist/{chunk-KNERCHMI.js → chunk-GUEB3MPU.js}

@@ -4,7 +4,7 @@ import {
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-CMWDXN5D.js");
+  const { serveCommand } = await import("./serve-V67FDERY.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-5W37PWV4.js → chunk-GXJWZOUC.js}

@@ -1,9 +1,9 @@
 import {
   trackIntegrationConnection
-} from "./chunk-7LLDLEWJ.js";
+} from "./chunk-5QEGJVU5.js";
 import {
   cliRuntimeContext
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-IUVJLNW4.js";
 
 // src/cli-connection-telemetry.ts
 function trackCliConnection(properties) {

package/dist/{chunk-66BZEUOK.js → chunk-HCYSFU4U.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-C3UFOS7J.js";
 import {
   loadConfig
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";

package/dist/{chunk-ZWD4W3KU.js → chunk-IFLPQ5RQ.js}

@@ -112,7 +112,9 @@ var clientSchema = z4.object({
   /**
    * `native` is a CLI or desktop app that receives the code on a loopback port it
    * picks per sign-in (RFC 8252 section 7.3). oidc-provider matches its loopback
-   * redirects on any port, so they are registered without one.
+   * redirects on any port, so they are registered without one. A native client
+   * may also register exact HTTPS redirects (section 7.2) when one published
+   * client ID signs in from both a hosted app and a CLI, as ChatGPT and Codex do.
    */
   application_type: z4.enum(["web", "native"]).default("web"),
   redirect_uris: z4.array(z4.url()).min(1),
@@ -175,9 +177,10 @@ var gatewayConfigSchema = z4.object({
     clientIds.add(client.client_id);
     client.redirect_uris.forEach((redirect, redirectIndex) => {
       const parsed = new URL(redirect);
+      const loopback = LOOPBACK_HOSTS.includes(parsed.hostname);
       if (client.application_type === "web") checkTransport(redirect, ["clients", index, "redirect_uris", redirectIndex]);
-      else if (parsed.protocol !== "http:" || !LOOPBACK_HOSTS.includes(parsed.hostname) || parsed.port) {
-        ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Native clients register loopback HTTP redirects without a port" });
+      else if (parsed.protocol === "https:" ? loopback : parsed.protocol !== "http:" || !loopback || parsed.port) {
+        ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Native clients register loopback HTTP redirects without a port, or HTTPS redirects on a public host" });
       }
       if (parsed.username || parsed.password || parsed.hash) {
         ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Redirects cannot contain credentials or fragments" });

package/dist/{chunk-AQLTYL3Q.js → chunk-IQLEMBGA.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-ST6FNS6A.js";
+} from "./chunk-ZER6XCES.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NDTU7FGL.js";
@@ -22,7 +22,7 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-OT6SUK6X.js → chunk-IUVJLNW4.js}

@@ -5,7 +5,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   CANONRY_NPM_PACKAGE_URL,
   compareSemver,

package/dist/{chunk-7KYGOR7N.js → chunk-RHRF7NBX.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{chunk-MXRCOQT2.js → chunk-TS2B42RE.js}

@@ -6,7 +6,7 @@ import {
 import {
   createApiClient,
   runWithUsageTags
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   canonryMcpTools,
   mcpOutputSchema,

package/dist/{chunk-KXSNV6C3.js → chunk-WYQQTWUB.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";

package/dist/{chunk-UWPCUAZM.js → chunk-Z7YPLZRD.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   CliError,
   isMachineFormat

package/dist/{chunk-ST6FNS6A.js → chunk-ZER6XCES.js}

@@ -1,6 +1,6 @@
 import {
   runWithUsageTags
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-X2CE5IME.js → chunk-ZOBE2CMQ.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-WYQQTWUB.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{citations-XJUGQ736.js → citations-C2IJ7RHO.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
 import "./chunk-FCGYYZHL.js";

package/dist/{cli-commands-JFKE3JZB.js → cli-commands-DX4ZVGV2.js}

@@ -1,12 +1,12 @@
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-IAOPQ2VO.js";
+} from "./chunk-4HJO7VFM.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-7KYGOR7N.js";
+import "./chunk-RHRF7NBX.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
-import "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+import "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import "./chunk-RPJJOBKN.js";
 import "./chunk-Z7IUAJOF.js";
 import "./chunk-5QR7D4RQ.js";

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node --import tsx
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-IAOPQ2VO.js";
+} from "./chunk-4HJO7VFM.js";
 import {
   buildSetupState,
   runPendingServeHandoff
-} from "./chunk-KNERCHMI.js";
+} from "./chunk-GUEB3MPU.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-7KYGOR7N.js";
+import "./chunk-RHRF7NBX.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
 import "./chunk-2WBT6TEJ.js";
@@ -24,13 +24,13 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-IUVJLNW4.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-6NUXSEW6.js";
-import "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-CKJLL2FQ.js";
+import "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   accessFilterFromArgs,
   dispatchRegisteredCommand,

package/dist/{competitor-5OEWFXMU.js → competitor-H7MYXUC2.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{content-TUWBGELB.js → content-DDL4LI2E.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{dashboard-3G4P32BY.js → dashboard-CVJEQ56Q.js}

@@ -1,7 +1,7 @@
 import {
   clearDashboardPassword,
   loadConfigRaw
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-IFLPQ5RQ.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";

package/dist/{discover-WZUOPCBV.js → discover-YRCXWFNW.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{discover-eval-SICOH7ML.js → discover-eval-QTOKYZWS.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import "./chunk-AOJU5LKX.js";
 import {
   CliError,

package/dist/{doctor-UMSTE4EO.js → doctor-XC3VBBDF.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{evidence-NLIQFQAK.js → evidence-CKMSRS5C.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{export-cmd-U2BFP7VV.js → export-cmd-YXESSTJV.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isEndpointMissing,

package/dist/{ga-OCN3UUG2.js → ga-B45HBSS4.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{gbp-B2YUDH7S.js → gbp-3IWONAO5.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isMachineFormat

package/dist/{google-EOV6EXSF.js → google-QNIYJEQ6.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{health-cmd-UVJAXG5V.js → health-cmd-WEBLFHNL.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{history-4NOM3SFC.js → history-3DS5VTIQ.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
-import "./chunk-ZWD4W3KU.js";
+} from "./chunk-WYQQTWUB.js";
+import "./chunk-IFLPQ5RQ.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";