@canonry/canonry 7.76.2 → 7.77.1

package/dist/{chunk-AQLTYL3Q.js → chunk-B7JHQ3FW.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-ST6FNS6A.js";
+} from "./chunk-JZT3ZRD3.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NDTU7FGL.js";
@@ -22,7 +22,7 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-5W37PWV4.js → chunk-CCNPBUQ5.js}

@@ -1,9 +1,9 @@
 import {
   trackIntegrationConnection
-} from "./chunk-7LLDLEWJ.js";
+} from "./chunk-TJYS2XCI.js";
 import {
   cliRuntimeContext
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-YMOQSEO3.js";
 
 // src/cli-connection-telemetry.ts
 function trackCliConnection(properties) {

package/dist/{chunk-4MYZRVJ6.js → chunk-CQMNWC5K.js}

@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-AQLTYL3Q.js";
+} from "./chunk-B7JHQ3FW.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-ST6FNS6A.js";
+} from "./chunk-JZT3ZRD3.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-7LLDLEWJ.js";
+} from "./chunk-TJYS2XCI.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -95,17 +95,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-YMOQSEO3.js";
 import {
   createCanonryMcpServer
-} from "./chunk-MXRCOQT2.js";
+} from "./chunk-2SCPPWRW.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-NDTU7FGL.js";
 import {
   ApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-X7UC755Q.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -136,7 +136,7 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 import {
   getBundledSkillSnapshots
 } from "./chunk-7UVCZZQJ.js";
@@ -5810,7 +5810,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "344e5accb36d0389b07a393dd137b965100081a5" : void 0;
+  const embedded = true ? "68e116717d6c9f8e51f1909b38f184f264855ffe" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -8493,7 +8493,8 @@ async function executeGscSync(db, runId, projectId, opts) {
         tokenExpiresAt: new Date(Date.now() + tokens.expires_in * 1e3).toISOString(),
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
-      saveConfigPatch(opts.config);
+      const persistConfigPatch = opts.saveConfigPatch ?? saveConfigPatch;
+      persistConfigPatch(opts.config);
     }
     const lagOffset = GSC_DATA_LAG_DAYS;
     const endDate = formatIsoDateInTimeZone((/* @__PURE__ */ new Date()).toISOString(), GSC_REPORTING_TIME_ZONE);
@@ -8918,7 +8919,8 @@ async function executeGbpSync(db, runId, projectId, opts) {
         tokenExpiresAt: new Date(Date.now() + tokens.expires_in * 1e3).toISOString(),
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
-      saveConfigPatch(opts.config);
+      const persistConfigPatch = opts.saveConfigPatch ?? saveConfigPatch;
+      persistConfigPatch(opts.config);
     }
     let locationRows = db.select().from(gbpLocations).where(and7(eq9(gbpLocations.projectId, projectId), eq9(gbpLocations.selected, true))).all();
     if (opts.locationNames?.length) {
@@ -10349,7 +10351,8 @@ async function executeInspectSitemap(db, runId, projectId, opts) {
         tokenExpiresAt: new Date(Date.now() + tokens.expires_in * 1e3).toISOString(),
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
-      saveConfigPatch(opts.config);
+      const persistConfigPatch = opts.saveConfigPatch ?? saveConfigPatch;
+      persistConfigPatch(opts.config);
     }
     const sitemapUrl = opts.sitemapUrl || conn.sitemapUrl || `https://${project.canonicalDomain}/sitemap.xml`;
     log8.info("sitemap.fetch", { runId, projectId, sitemapUrl });
@@ -19142,6 +19145,16 @@ function parseDashboardOnboardingMode(value) {
 function resolveDashboardOnboardingMode(env, config) {
   return parseDashboardOnboardingMode(env.CANONRY_ONBOARDING_MODE) ?? config.dashboard?.onboardingMode;
 }
+function parseDashboardBrandMark(value) {
+  const normalized = value?.trim().toLowerCase();
+  return normalized === "mascot" || normalized === "icon" ? normalized : void 0;
+}
+function resolveDashboardBrandMark(env, config) {
+  return parseDashboardBrandMark(env.CANONRY_DASHBOARD_BRAND_MARK) ?? parseDashboardBrandMark(config.dashboard?.brandMark) ?? "mascot";
+}
+function withIconMarkLinks(html) {
+  return html.replace(/href="(\.?\/)favicon\.svg"/, 'href="$1canonry-icon-favicon.svg"').replace(/href="(\.?\/)favicon-32\.png"/, 'href="$1canonry-icon-32.png"').replace(/href="(\.?\/)apple-touch-icon\.png"/, 'href="$1canonry-icon-touch.png"');
+}
 var API_ADAPTERS = [
   geminiAdapter,
   openaiAdapter,
@@ -19281,7 +19294,7 @@ function serializeSessionCookie(opts) {
   }
   return parts.join("; ");
 }
-function applyLegacyCredentials(rows, config) {
+function applyLegacyCredentials(rows, config, persistConfigPatch = saveConfigPatch) {
   let migratedGoogle = 0;
   for (const row of rows.google) {
     const existing = getGoogleConnection(
@@ -19305,7 +19318,7 @@ function applyLegacyCredentials(rows, config) {
     migratedGoogle++;
   }
   if (migratedGoogle > 0) {
-    saveConfigPatch({ google: config.google });
+    persistConfigPatch({ google: config.google });
     log27.info("credentials.migrated", { type: "google", count: migratedGoogle });
   }
   let migratedGa4 = 0;
@@ -19323,7 +19336,7 @@ function applyLegacyCredentials(rows, config) {
     migratedGa4++;
   }
   if (migratedGa4 > 0) {
-    saveConfigPatch({ ga4: config.ga4 });
+    persistConfigPatch({ ga4: config.ga4 });
     log27.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
   }
 }
@@ -19520,8 +19533,16 @@ function createGoogleMarketingConfigCredentialStore(input) {
   };
 }
 async function createServer(opts) {
-  const runtimeConfigPath = path5.resolve(getConfigPath());
+  const runtimeConfigPath = path5.resolve(opts.configPath ?? getConfigPath());
   const runtimeConfigIdentity = runtimePathIdentity(runtimeConfigPath);
+  const persistedConfigPath = opts.configPath === void 0 ? void 0 : runtimeConfigPath;
+  const persistConfigPatch = (patch, options = {}) => {
+    if (persistedConfigPath !== void 0) saveConfigPatch(patch, { ...options, configPath: persistedConfigPath });
+  };
+  const ownsDefaultConfig = persistedConfigPath !== void 0 && runtimeConfigIdentity === runtimePathIdentity(getConfigPath());
+  const coverageRefreshDeps = {
+    executeInspectSitemap: (db, runId, projectId, inspectOpts) => executeInspectSitemap(db, runId, projectId, { ...inspectOpts, saveConfigPatch: persistConfigPatch })
+  };
   const runtimeDatabasePath = opts.config.database;
   const runtimeDatabaseIdentity = runtimePathIdentity(runtimeDatabasePath);
   const embed = resolveEmbedConfig(process.env, opts.config);
@@ -19586,14 +19607,16 @@ async function createServer(opts) {
     };
   }
   opts.config.providers = providers;
-  try {
-    const legacyRows = extractLegacyCredentials(opts.db);
-    applyLegacyCredentials(legacyRows, opts.config);
-    dropLegacyCredentialColumns(opts.db);
-  } catch (err) {
-    log27.warn("credentials.migration.failed", {
-      error: describeError(err)
-    });
+  if (persistedConfigPath !== void 0) {
+    try {
+      const legacyRows = extractLegacyCredentials(opts.db);
+      applyLegacyCredentials(legacyRows, opts.config, persistConfigPatch);
+      dropLegacyCredentialColumns(opts.db);
+    } catch (err) {
+      log27.warn("credentials.migration.failed", {
+        error: describeError(err)
+      });
+    }
   }
   log27.info("providers.configured", {
     providers: registeredProviderNames({ providers, cdp: opts.config.cdp })
@@ -19610,8 +19633,9 @@ async function createServer(opts) {
   const jobRunner = new JobRunner(opts.db, registry, {
     // The one-time first-sweep thank-you. Lives on the serve console because
     // runs execute here, including the foreground serve that init hands off
-    // to. TTY-gated inside, so supervised deployments never see it.
-    onFirstActivation: () => maybeShowActivationNotice()
+    // to. TTY-gated inside, so supervised deployments never see it. It marks
+    // the default config.yaml, so only the server running from it asks.
+    ...ownsDefaultConfig ? { onFirstActivation: () => maybeShowActivationNotice() } : {}
   });
   jobRunner.recoverStaleRuns();
   const seoRuntime = new SeoRuntime(opts.db, () => loadConfig(runtimeConfigPath).seo, () => {
@@ -19684,17 +19708,18 @@ async function createServer(opts) {
   );
   const removedGoogleMarketingCredentials = removeLegacyGoogleAdsConnections(opts.config) + removeLegacyGtmConnections(opts.config) + removeOrphanedGoogleAdsConnections(opts.config, liveProjectIds) + removeOrphanedGtmConnections(opts.config, liveProjectIds);
   if (removedGoogleMarketingCredentials > 0) {
-    saveConfigPatch({
+    persistConfigPatch({
       googleAds: opts.config.googleAds,
       gtm: opts.config.gtm
     });
   }
   const googleMarketingRuntime = createGoogleMarketingRuntime({
     config: opts.config,
-    saveConfigPatch
+    saveConfigPatch: persistConfigPatch
   });
   const googleMarketingCredentialStore = createGoogleMarketingConfigCredentialStore({
-    config: opts.config
+    config: opts.config,
+    saveConfigPatch: persistConfigPatch
   });
   const prepareGoogleMarketingCredentialDelete = (projectId) => {
     const previousGoogleAdsConnections = opts.config.googleAds?.connections;
@@ -19707,7 +19732,7 @@ async function createServer(opts) {
     const removedGtm = removeGtmConnection(opts.config, projectId);
     if (!removedGoogleAds && !removedGtm) return void 0;
     try {
-      saveConfigPatch({
+      persistConfigPatch({
         googleAds: opts.config.googleAds,
         gtm: opts.config.gtm
       });
@@ -19718,7 +19743,7 @@ async function createServer(opts) {
     return () => {
       restore();
       try {
-        saveConfigPatch({
+        persistConfigPatch({
           googleAds: opts.config.googleAds,
           gtm: opts.config.gtm
         });
@@ -19790,7 +19815,8 @@ async function createServer(opts) {
     }
     executeGbpSync(opts.db, runId, projectId, {
       ...syncOpts,
-      config: opts.config
+      config: opts.config,
+      saveConfigPatch: persistConfigPatch
     }).then(() => runCoordinator.onRunCompleted(runId, projectId)).catch((err) => {
       app.log.error({ runId, err }, "GBP sync failed");
     });
@@ -19818,12 +19844,12 @@ async function createServer(opts) {
     },
     upsertConnection: (connection) => {
       const updated = upsertOpenAiAdsConnection(opts.config, connection);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     removeConnection: (projectName) => {
       const removed = removeOpenAiAdsConnection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20208,7 +20234,7 @@ async function createServer(opts) {
       } else {
         opts.config.bing.connections.push(normalized);
       }
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return normalized;
     },
     updateConnection: (domain, patch) => {
@@ -20217,7 +20243,7 @@ async function createServer(opts) {
       );
       if (!conn) return void 0;
       Object.assign(conn, patch);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return conn;
     },
     deleteConnection: (domain) => {
@@ -20227,7 +20253,7 @@ async function createServer(opts) {
       );
       if (idx < 0) return false;
       opts.config.bing.connections.splice(idx, 1);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return true;
     }
   };
@@ -20237,12 +20263,12 @@ async function createServer(opts) {
     },
     upsertConnection: (connection) => {
       const updated = upsertGa4Connection(opts.config, connection);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
       const removed = removeGa4Connection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20252,12 +20278,12 @@ async function createServer(opts) {
     },
     upsertConnection: (record) => {
       const updated = upsertCloudRunConnection(opts.config, record);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
       const removed = removeCloudRunConnection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20267,7 +20293,7 @@ async function createServer(opts) {
     },
     upsertConnection: (record) => {
       const updated = upsertWordpressTrafficConnection(opts.config, record);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
@@ -20275,7 +20301,7 @@ async function createServer(opts) {
         opts.config,
         projectName
       );
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20285,12 +20311,12 @@ async function createServer(opts) {
     },
     upsertConnection: (record) => {
       const updated = upsertVercelTrafficConnection(opts.config, record);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
       const removed = removeVercelTrafficConnection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20303,12 +20329,12 @@ async function createServer(opts) {
     },
     upsertConnection: (record) => {
       const updated = upsertCloudflareTrafficConnection(opts.config, record);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
       const removed = removeCloudflareTrafficConnection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     },
     deleteConnectionBySourceId: (sourceId) => {
@@ -20316,7 +20342,7 @@ async function createServer(opts) {
         opts.config,
         sourceId
       );
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20326,7 +20352,7 @@ async function createServer(opts) {
     getConnection: (domain, connectionType) => getGoogleConnection(opts.config, domain, connectionType),
     upsertConnection: (connection) => {
       const updated = upsertGoogleConnection(opts.config, connection);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     updateConnection: (domain, connectionType, patch) => {
@@ -20336,7 +20362,7 @@ async function createServer(opts) {
         connectionType,
         patch
       );
-      if (updated) saveConfigPatch(opts.config);
+      if (updated) persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (domain, connectionType) => {
@@ -20345,7 +20371,7 @@ async function createServer(opts) {
         domain,
         connectionType
       );
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20355,17 +20381,17 @@ async function createServer(opts) {
     },
     upsertConnection: (connection) => {
       const updated = upsertWordpressConnection(opts.config, connection);
-      saveConfigPatch(opts.config);
+      persistConfigPatch(opts.config);
       return updated;
     },
     updateConnection: (projectName, patch) => {
       const updated = patchWordpressConnection(opts.config, projectName, patch);
-      if (updated) saveConfigPatch(opts.config);
+      if (updated) persistConfigPatch(opts.config);
       return updated;
     },
     deleteConnection: (projectName) => {
       const removed = removeWordpressConnection(opts.config, projectName);
-      if (removed) saveConfigPatch(opts.config);
+      if (removed) persistConfigPatch(opts.config);
       return removed;
     }
   };
@@ -20388,6 +20414,7 @@ async function createServer(opts) {
   const dashboardShowLocalAgentSetup = resolveDashboardShowLocalAgentSetup(process.env, opts.config);
   const dashboardShowUpdateNotification = resolveDashboardShowUpdateNotification(process.env, opts.config);
   const dashboardOnboardingMode = resolveDashboardOnboardingMode(process.env, opts.config);
+  const dashboardBrandMark = resolveDashboardBrandMark(process.env, opts.config);
   const researchAllowViewers = resolveResearchAllowViewers(process.env, opts.config);
   const researchViewerDailyRunLimit = resolveResearchViewerDailyRunLimit(process.env, opts.config);
   app.log.info(
@@ -20600,7 +20627,7 @@ async function createServer(opts) {
           diff: { authorizedBy: presentedRootKey ? "root-api-key" : "local-request" }
         }));
         const created = createSession(defaultKey, true, tx);
-        saveConfigPatch(opts.config, { setDashboardPasswordHash: passwordHash });
+        persistConfigPatch(opts.config, { setDashboardPasswordHash: passwordHash });
         return created;
       });
     } catch (err) {
@@ -20631,18 +20658,20 @@ async function createServer(opts) {
         password,
         opts.config.dashboardPasswordHash
       );
-      const onDisk = verification.ok && verification.needsRehash ? loadConfigRaw() : null;
+      const onDisk = verification.ok && verification.needsRehash && persistedConfigPath !== void 0 ? loadConfigRaw(persistedConfigPath) : null;
       if (!verification.ok || onDisk && onDisk.dashboardPasswordHash !== opts.config.dashboardPasswordHash) {
         return reply.status(401).send({
           error: { code: "AUTH_INVALID", message: "Incorrect password" }
         });
       }
       if (verification.needsRehash) {
-        if (fs5.existsSync(getConfigPath()) && (!onDisk || typeof onDisk !== "object" || Array.isArray(onDisk) || !onDisk.apiUrl || !onDisk.database || !onDisk.apiKey)) {
+        if (persistedConfigPath !== void 0 && fs5.existsSync(persistedConfigPath) && (!onDisk || typeof onDisk !== "object" || Array.isArray(onDisk) || !onDisk.apiUrl || !onDisk.database || !onDisk.apiKey)) {
           throw new Error("Cannot migrate dashboard password: config.yaml is unreadable or invalid");
         }
         const migratedHash = hashDashboardPassword(password);
-        saveConfig({ ...onDisk ?? opts.config, dashboardPasswordHash: migratedHash });
+        if (persistedConfigPath !== void 0) {
+          saveConfig({ ...onDisk ?? opts.config, dashboardPasswordHash: migratedHash }, persistedConfigPath);
+        }
         opts.config.dashboardPasswordHash = migratedHash;
       }
       if (!createPasswordSession(reply)) {
@@ -21057,9 +21086,10 @@ async function createServer(opts) {
       }
       executeGscSync(opts.db, runId, projectId, {
         ...syncOpts,
-        config: opts.config
+        config: opts.config,
+        saveConfigPatch: persistConfigPatch
       }).then(
-        () => maybeRefreshGscCoverage(opts.db, opts.config, projectId, void 0, Date.now(), {
+        () => maybeRefreshGscCoverage(opts.db, opts.config, projectId, coverageRefreshDeps, Date.now(), {
           userInitiated: runWasUserInitiated(opts.db, runId)
         })
       ).catch((err) => {
@@ -21077,7 +21107,8 @@ async function createServer(opts) {
       }
       executeInspectSitemap(opts.db, runId, projectId, {
         ...inspectOpts,
-        config: opts.config
+        config: opts.config,
+        saveConfigPatch: persistConfigPatch
       }).catch((err) => {
         app.log.error({ runId, err }, "Inspect sitemap failed");
       });
@@ -21248,7 +21279,7 @@ async function createServer(opts) {
             opts.db,
             opts.config,
             projectId,
-            void 0,
+            coverageRefreshDeps,
             Date.now(),
             { userInitiated: runWasUserInitiated(opts.db, runId) }
           );
@@ -21350,7 +21381,7 @@ async function createServer(opts) {
         ...existing?.pricing ? { pricing: existing.pricing } : {}
       };
       try {
-        saveConfigPatch(fs5.existsSync(runtimeConfigPath) ? { providers: { [name]: opts.config.providers[name] } } : opts.config);
+        persistConfigPatch(fs5.existsSync(runtimeConfigPath) ? { providers: { [name]: opts.config.providers[name] } } : opts.config);
       } catch (err) {
         app.log.error({ err }, "Failed to save config");
         return null;
@@ -21370,7 +21401,7 @@ async function createServer(opts) {
     onGoogleSettingsUpdate: (clientId, clientSecret) => {
       try {
         setGoogleAuthConfig(opts.config, { clientId, clientSecret });
-        saveConfigPatch(opts.config);
+        persistConfigPatch(opts.config);
         googleSettingsSummary.configured = true;
         return { ...googleSettingsSummary };
       } catch (err) {
@@ -21382,7 +21413,7 @@ async function createServer(opts) {
       try {
         if (!opts.config.bing) opts.config.bing = {};
         opts.config.bing.apiKey = apiKey;
-        saveConfigPatch(opts.config);
+        persistConfigPatch(opts.config);
         bingSettingsSummary.configured = true;
         return { ...bingSettingsSummary };
       } catch (err) {
@@ -21409,7 +21440,7 @@ async function createServer(opts) {
       const removedGoogleAds = removeGoogleAdsConnection(opts.config, projectId);
       const removedGtm = removeGtmConnection(opts.config, projectId);
       if (removedGoogleAds || removedGtm) {
-        saveConfigPatch({
+        persistConfigPatch({
           googleAds: opts.config.googleAds,
           gtm: opts.config.gtm
         });
@@ -21427,10 +21458,12 @@ async function createServer(opts) {
     operatorApiKeyIds,
     listOperationalLogs: (query) => operationalLogs.list(query),
     getTelemetryStatus,
-    setTelemetryEnabled: (enabled, attribution) => {
+    // The preference lives in the default config.yaml; a server running from
+    // any other config leaves it alone, and the route answers 501.
+    setTelemetryEnabled: ownsDefaultConfig ? (enabled, attribution) => {
       void setTelemetryPreference(enabled, "api", outcomeAttribution(attribution));
       opts.config.telemetry = enabled;
-    },
+    } : void 0,
     recordOnboardingEvent: (event) => recordDashboardEvent(event),
     // Answers false while telemetry is off or the per-process cap is spent, so
     // the dashboard stops sending for the session.
@@ -21441,7 +21474,7 @@ async function createServer(opts) {
       opts.config.cdp.host = host;
       opts.config.cdp.port = port2;
       try {
-        saveConfigPatch(opts.config);
+        persistConfigPatch(opts.config);
       } catch (err) {
         app.log.error({ err }, "Failed to save CDP config");
         throw err;
@@ -21529,6 +21562,9 @@ async function createServer(opts) {
       if (!dashboardShowUpdateNotification) {
         dashboardConfig.showUpdateNotification = false;
       }
+      if (dashboardBrandMark === "icon") {
+        dashboardConfig.brandMark = "icon";
+      }
       if (dashboardManagedRunKinds.length > 0) {
         dashboardConfig.managedRunKinds = dashboardManagedRunKinds;
       }
@@ -21561,7 +21597,7 @@ async function createServer(opts) {
       }
       const configScript = `<script>window.__CANONRY_CONFIG__=${serializeForInlineScript(clientConfig)}</script>`;
       const baseTag = `<base href="${basePath ?? "/"}">`;
-      return html.replace("<head>", `<head>${baseTag}`).replace("</head>", `${configScript}</head>`);
+      return (dashboardBrandMark === "icon" ? withIconMarkLinks(html) : html).replace("<head>", `<head>${baseTag}`).replace("</head>", `${configScript}</head>`);
     };
     const sendSpaDocument = (reply, html) => {
       reply.header("Cache-Control", "no-cache, must-revalidate");

package/dist/{chunk-6NUXSEW6.js → chunk-FXIZBJZ4.js}

@@ -2,7 +2,7 @@ import {
   configExists,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 import {
   BUNDLED_SKILL_NAMES,
   installSkills

package/dist/{chunk-66BZEUOK.js → chunk-H4ANN32B.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-C3UFOS7J.js";
 import {
   loadConfig
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";

package/dist/{chunk-ST6FNS6A.js → chunk-JZT3ZRD3.js}

@@ -1,6 +1,6 @@
 import {
   runWithUsageTags
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-X7UC755Q.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-KNERCHMI.js → chunk-P3BWUKJL.js}

@@ -4,7 +4,7 @@ import {
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-CMWDXN5D.js");
+  const { serveCommand } = await import("./serve-UNVCQSRC.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-7LLDLEWJ.js → chunk-TJYS2XCI.js}

@@ -2,10 +2,10 @@ import {
   bucketCliCommandDuration,
   isTelemetryEnabled,
   trackEvent
-} from "./chunk-OT6SUK6X.js";
+} from "./chunk-YMOQSEO3.js";
 import {
   getConfigDir
-} from "./chunk-ZWD4W3KU.js";
+} from "./chunk-2BRVGCVU.js";
 import {
   currentOutcomeAttribution
 } from "./chunk-JPOIDGGF.js";

package/dist/{chunk-UWPCUAZM.js → chunk-TRW4XLQK.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-X7UC755Q.js";
 import {
   CliError,
   isMachineFormat

package/dist/{chunk-7KYGOR7N.js → chunk-UB65XBH2.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-KXSNV6C3.js";
+} from "./chunk-X7UC755Q.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";