@canonry/canonry 7.77.2 → 7.78.2

package/dist/{chunk-CHTKK43G.js → chunk-COUM462G.js}

@@ -1,7 +1,7 @@
 import {
   answerServiceAdapters,
   answerServiceDescriptors
-} from "./chunk-ZXYCPRNY.js";
+} from "./chunk-WSWHLKKJ.js";
 import {
   AeroLlmUsageFeatures,
   aeroTurnStatus,
@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-5LKK2MCJ.js";
+} from "./chunk-OES6PSQK.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-ORZBHCZR.js";
+} from "./chunk-IYMTQHPD.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -53,7 +53,7 @@ import {
   removeCloudflareTrafficConnection,
   removeCloudflareTrafficConnectionBySourceId,
   upsertCloudflareTrafficConnection
-} from "./chunk-PSNTEGNY.js";
+} from "./chunk-KZB6HLFT.js";
 import {
   claudeAdapter,
   embedQueries,
@@ -64,7 +64,7 @@ import {
   openaiAdapter,
   openrouterAdapter,
   perplexityAdapter
-} from "./chunk-C3UFOS7J.js";
+} from "./chunk-5NBXPO4G.js";
 import {
   classifyUsageSurface,
   createApiUsageTelemetry,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-JEXBP7CR.js";
+} from "./chunk-PLLDJUG2.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -84,7 +84,7 @@ import {
   isApiProviderRegistrable,
   isCdpProviderRegistrable,
   registeredProviderNames
-} from "./chunk-2WBT6TEJ.js";
+} from "./chunk-FCYGY4FT.js";
 import {
   checkLatestVersionForServer,
   getOrCreateAnonymousId,
@@ -96,17 +96,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-6KPBYCPE.js";
+} from "./chunk-4GEEYY3N.js";
 import {
   createCanonryMcpServer
-} from "./chunk-LKEFPJQ2.js";
+} from "./chunk-BKOG3GEI.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
-} from "./chunk-NDTU7FGL.js";
+} from "./chunk-WVCDUKJ2.js";
 import {
   ApiClient
-} from "./chunk-JRVKW4OO.js";
+} from "./chunk-7OAXEMOF.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -138,21 +138,21 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-7JC4Z6FQ.js";
+} from "./chunk-3QJWOF2B.js";
 import {
   getBundledSkillSnapshots
-} from "./chunk-7UVCZZQJ.js";
+} from "./chunk-AI44ZCMK.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-46KV7CZU.js";
+} from "./chunk-LBNUTWPK.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4QHTXT4A.js";
+} from "./chunk-MUYTDD35.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -161,16 +161,16 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   IntelligenceService
-} from "./chunk-HD2VVIPD.js";
+} from "./chunk-BTMLE3EN.js";
 import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-Z2FY6AGZ.js";
+} from "./chunk-TZRYVW75.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
-} from "./chunk-XYYWKCJQ.js";
+} from "./chunk-JERATA5R.js";
 import {
   BingApiError,
   CC_CACHE_DIR,
@@ -291,7 +291,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-GDKMVOZI.js";
+} from "./chunk-PRCBHOVR.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -377,7 +377,7 @@ import {
   siteLivenessState,
   trafficSources,
   usageCounters
-} from "./chunk-D5XPB7MM.js";
+} from "./chunk-PH4AESRE.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AI_ENGINE_DOMAINS,
@@ -457,6 +457,7 @@ import {
   SentimentOutcomes,
   SeoAdapterOutcomes,
   SeoCapabilities,
+  SeoKeywordGapModes,
   SeoMarketRankingSearchStatuses,
   SeoProviders,
   SeoRunStatuses,
@@ -576,6 +577,7 @@ import {
   normalizeIdTokens,
   normalizeMeasurementExecutionQueryText,
   normalizeProjectDomain,
+  normalizeQueryText,
   normalizeServedModel,
   normalizeSiteAuditRunRequest,
   normalizeUrlPath,
@@ -606,6 +608,8 @@ import {
   sentimentEvaluatorProvider,
   sentimentSelectionSchema,
   seoDeviceSchema,
+  seoKeywordGapComparison,
+  seoKeywordGapModeSchema,
   seoProfileInputSchema,
   seoRankingSettingsSchema,
   serializeForInlineScript,
@@ -629,7 +633,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/google-marketing-runtime.ts
 import crypto2 from "crypto";
@@ -3459,8 +3463,27 @@ var resultSchema = z2.object({
   location_code: z2.number().int(),
   language_code: z2.string(),
   target: z2.string().optional(),
+  target1: z2.string().optional(),
+  target2: z2.string().optional(),
   items: z2.array(z2.unknown()).nullable()
 });
+var competitorItemSchema = z2.object({
+  domain: z2.string(),
+  intersections: count,
+  avg_position: amount,
+  full_domain_metrics: z2.object({ organic: z2.object({ count, etv: amount }).nullish() }).nullish()
+});
+var comparisonSerpSchema = z2.object({
+  type: z2.literal("organic"),
+  domain: z2.string(),
+  url: z2.string().nullish(),
+  rank_group: z2.number().int().positive()
+});
+var gapItemSchema = z2.object({
+  keyword_data: keywordDataSchema,
+  first_domain_serp_element: comparisonSerpSchema,
+  second_domain_serp_element: comparisonSerpSchema.nullish()
+});
 var serpResultSchema = z2.object({
   keyword: z2.string(),
   location_code: z2.number().int(),
@@ -3570,11 +3593,75 @@ function normalizeDataForSeoResults(rawResults, request, collectedAt, options =
       throw new Error("SEO provider returned a different market.");
     }
     const providerTarget = request.target?.kind === SeoTargetKinds.host ? registrableDomain(request.target.value) : request.target?.value.toLowerCase();
-    if (request.target && result.target?.toLowerCase() !== providerTarget) {
+    if (request.capability === SeoCapabilities["keyword-gaps"]) {
+      if (result.target1?.toLowerCase() !== request.comparison?.competitor.value.toLowerCase() || result.target2?.toLowerCase() !== providerTarget) {
+        throw new Error("SEO provider returned a different comparison pair.");
+      }
+    } else if (request.target && result.target?.toLowerCase() !== providerTarget) {
       throw new Error("SEO provider returned a different target.");
     }
     const items = result.items ?? [];
     switch (request.capability) {
+      case SeoCapabilities["competitor-discovery"]: {
+        if (!request.target) throw new Error("SEO target is required.");
+        const seen = /* @__PURE__ */ new Set();
+        for (const rawItem of items) {
+          const item = competitorItemSchema.parse(rawItem);
+          const domain = normalizeHostname(item.domain);
+          if (!domain || !registrableDomain(domain)) throw new Error("SEO provider returned an invalid competitor domain.");
+          if (registrableDomain(domain) === request.target.value.toLowerCase() || seen.has(domain)) continue;
+          seen.add(domain);
+          output.competitors.push({
+            target: request.target,
+            domain,
+            sharedKeywords: item.intersections ?? null,
+            averagePosition: item.avg_position ?? null,
+            organicKeywords: item.full_domain_metrics?.organic?.count ?? null,
+            estimatedOrganicTraffic: item.full_domain_metrics?.organic?.etv ?? null,
+            // The endpoint does not return its weekly dataset timestamp.
+            provenance: provenance(request, collectedAt, null)
+          });
+        }
+        break;
+      }
+      case SeoCapabilities["keyword-gaps"]: {
+        if (!request.target || !request.comparison) throw new Error("SEO comparison is required.");
+        const { competitor, mode } = request.comparison;
+        const seen = /* @__PURE__ */ new Set();
+        for (const rawItem of items) {
+          const item = gapItemSchema.parse(rawItem);
+          const rival = item.first_domain_serp_element;
+          const own = item.second_domain_serp_element;
+          const rivalHost = normalizeHostname(rival.domain);
+          const ownHost = own ? normalizeHostname(own.domain) : null;
+          if (!rivalHost || !hostBelongsTo(rivalHost, competitor) || own && (!ownHost || !hostBelongsTo(ownHost, request.target))) {
+            throw new Error("SEO provider returned rankings outside the comparison pair.");
+          }
+          if (mode === SeoKeywordGapModes.shared && !own || mode === SeoKeywordGapModes.missing && own) {
+            throw new Error("SEO provider returned a different comparison population.");
+          }
+          const key = normalizeQueryText(item.keyword_data.keyword);
+          if (seen.has(key)) continue;
+          seen.add(key);
+          const metric = keywordMetrics(item.keyword_data, request, collectedAt);
+          const targetRankOrganic = own?.rank_group ?? null;
+          output.keywordGaps.push({
+            target: request.target,
+            competitor,
+            keyword: metric.keyword,
+            targetRankOrganic,
+            competitorRankOrganic: rival.rank_group,
+            targetUrl: own?.url ?? null,
+            competitorUrl: rival.url ?? null,
+            searchVolume: metric.searchVolume,
+            keywordDifficulty: metric.keywordDifficulty,
+            cpcUsd: metric.cpcUsd,
+            ...seoKeywordGapComparison(targetRankOrganic, rival.rank_group),
+            provenance: provenance(request, collectedAt, item.keyword_data.serp_info?.last_updated_time ?? null)
+          });
+        }
+        break;
+      }
       case SeoCapabilities["keyword-metrics"]: {
         const requested = new Map(request.keywords.map((keyword) => [keyword.toLowerCase(), keyword]));
         for (const rawItem of items) {
@@ -3643,7 +3730,9 @@ var ENDPOINTS = {
   [SeoCapabilities["keyword-metrics"]]: "dataforseo_labs/google/keyword_overview/live",
   [SeoCapabilities["domain-intelligence"]]: "dataforseo_labs/google/domain_rank_overview/live",
   [SeoCapabilities["ranked-keywords"]]: "dataforseo_labs/google/ranked_keywords/live",
-  [SeoCapabilities["market-rankings"]]: "serp/google/organic/live/advanced"
+  [SeoCapabilities["market-rankings"]]: "serp/google/organic/live/advanced",
+  [SeoCapabilities["competitor-discovery"]]: "dataforseo_labs/google/competitors_domain/live",
+  [SeoCapabilities["keyword-gaps"]]: "dataforseo_labs/google/domain_intersection/live"
 };
 var MAX_SEARCH_TEXT_LENGTH = 700;
 var SURCHARGED_OPERATORS = [
@@ -3734,6 +3823,40 @@ function taskPayload(request) {
   const host = targetHost(target);
   const domain = registrableDomain(host);
   switch (request.capability) {
+    case SeoCapabilities["competitor-discovery"]:
+      if (target.kind !== SeoTargetKinds.domain) throw validationError("Competitor discovery requires a whole-domain scope.");
+      return {
+        ...common,
+        target: host,
+        limit: request.limit,
+        offset: 0,
+        item_types: ["organic"],
+        include_clickstream_data: false,
+        ignore_synonyms: false,
+        exclude_domains: [host],
+        order_by: ["intersections,desc"]
+      };
+    case SeoCapabilities["keyword-gaps"]: {
+      const comparison = request.comparison;
+      if (target.kind !== SeoTargetKinds.domain || !comparison || comparison.competitor.kind !== SeoTargetKinds.domain) {
+        throw validationError("Keyword gaps require a whole-domain target and comparison domain.");
+      }
+      if (!seoKeywordGapModeSchema.safeParse(comparison.mode).success) throw validationError("Choose shared or missing searches for keyword gaps.");
+      const competitor = targetHost(comparison.competitor);
+      if (competitor === host) throw validationError("Choose a comparison domain different from the target.");
+      return {
+        ...common,
+        target1: competitor,
+        target2: host,
+        intersections: comparison.mode === SeoKeywordGapModes.shared,
+        limit: request.limit,
+        offset: 0,
+        item_types: ["organic"],
+        include_serp_info: true,
+        include_clickstream_data: false,
+        order_by: ["keyword_data.keyword_info.search_volume,desc"]
+      };
+    }
     case SeoCapabilities["domain-intelligence"]:
       if (target.kind !== SeoTargetKinds.domain) throw validationError("Domain intelligence requires a whole-domain scope.");
       return { ...common, target: host, limit: 1, ignore_synonyms: false };
@@ -3768,6 +3891,8 @@ function appendResults(target, source) {
   target.domainIntelligence.push(...source.domainIntelligence);
   target.rankedKeywords.push(...source.rankedKeywords);
   target.marketRankings.push(...source.marketRankings);
+  target.competitors.push(...source.competitors);
+  target.keywordGaps.push(...source.keywordGaps);
 }
 function createDataForSeoAdapter(credentials) {
   const auth = { login: credentials.login.trim(), password: credentials.password };
@@ -5812,7 +5937,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "31abb805953cc5f5c6cfa83e68610c6944e35b6c" : void 0;
+  const embedded = true ? "3e41f6b61554e34c70c1fdc85a111f880cc15215" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -21703,11 +21828,14 @@ async function createServer(opts) {
   if (publicOrigin) {
     const dashboardAssets = path5.join(assetsDir, "assets");
     const gateFont = fs5.existsSync(dashboardAssets) ? fs5.readdirSync(dashboardAssets).find((name) => /^geist-latin-wght-normal-[\w-]+\.woff2$/.test(name)) : void 0;
+    const gateway = opts.config.mcpGateway;
+    const gatewayClient = gateway?.clientId && URL.canParse(gateway.url) ? { id: gateway.clientId, origin: new URL(gateway.url).origin } : void 0;
     registerOAuthRoutes(app, {
       db: opts.db,
       issuer: publicOrigin,
       authorizationPath,
       ...gateFont ? { fontUrl: `${basePath ?? "/"}assets/${gateFont}` } : {},
+      ...gatewayClient ? { gatewayClient } : {},
       resourcePaths: mcpTransportPaths().map(
         (suffix) => `${basePath ?? "/"}api/v1${suffix}`.replace("//", "/")
       ),

package/dist/{chunk-2WBT6TEJ.js → chunk-FCYGY4FT.js}

@@ -1,7 +1,7 @@
 import {
   API_PROVIDER_NAMES,
   ProviderNames
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/provider-registration.ts
 function isApiProviderRegistrable(name, entry) {

package/dist/{chunk-JMCURBZG.js → chunk-GEHRGKQT.js}

@@ -1,10 +1,10 @@
 import {
   registeredProviderNames
-} from "./chunk-2WBT6TEJ.js";
+} from "./chunk-FCYGY4FT.js";
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-7JC4Z6FQ.js";
+} from "./chunk-3QJWOF2B.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -28,7 +28,7 @@ async function buildSetupState() {
   }
   if (dbPath && fs.existsSync(dbPath)) {
     try {
-      const { createClient, projects, queries: queriesTable } = await import("./src-SXB3MOP3.js");
+      const { createClient, projects, queries: queriesTable } = await import("./src-AQ5MHQGQ.js");
       const db = createClient(dbPath);
       project_count = db.select({ id: projects.id }).from(projects).all().length;
       const firstQuery = db.select({ id: queriesTable.id }).from(queriesTable).limit(1).all();
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-PJXATOSY.js");
+  const { serveCommand } = await import("./serve-J7WR3J6I.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-ORZBHCZR.js → chunk-IYMTQHPD.js}

@@ -1,16 +1,16 @@
 import {
   runWithUsageTags
-} from "./chunk-JRVKW4OO.js";
+} from "./chunk-7OAXEMOF.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4QHTXT4A.js";
+} from "./chunk-MUYTDD35.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-GDKMVOZI.js";
+} from "./chunk-PRCBHOVR.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,
@@ -23,7 +23,7 @@ import {
   seoDatasetWithoutVendor,
   seoProviderSchema,
   truncateUtf16
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/agent/tools.ts
 import { Type as Type2 } from "@earendil-works/pi-ai";

package/dist/{chunk-XYYWKCJQ.js → chunk-JERATA5R.js}

@@ -1,6 +1,6 @@
 import {
   hostMatchesDomain
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/citation-utils.ts
 function pickProjectCitedDomain(citedDomains, projectDomains) {

package/dist/{chunk-AAUMUHUI.js → chunk-KF7I7FBI.js}

@@ -1,9 +1,9 @@
 import {
   trackIntegrationConnection
-} from "./chunk-JEXBP7CR.js";
+} from "./chunk-PLLDJUG2.js";
 import {
   cliRuntimeContext
-} from "./chunk-6KPBYCPE.js";
+} from "./chunk-4GEEYY3N.js";
 
 // src/cli-connection-telemetry.ts
 function trackCliConnection(properties) {

package/dist/{chunk-PSNTEGNY.js → chunk-KZB6HLFT.js}

@@ -1,6 +1,6 @@
 import {
   cloudflareQueueNameSchema
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/cloudflare-traffic-config.ts
 function unsupportedDeliveryMode(deliveryMode) {

package/dist/{chunk-46KV7CZU.js → chunk-LBNUTWPK.js}

@@ -5,7 +5,7 @@ import {
   siteCrawlGraphNodes,
   siteCrawlPages,
   siteCrawlSnapshots
-} from "./chunk-D5XPB7MM.js";
+} from "./chunk-PH4AESRE.js";
 import {
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
@@ -15,7 +15,7 @@ import {
   factorStatusFromDistribution,
   factorStatusFromScore,
   roundPreservingTotal
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/site-audit-factors.ts
 function recordedSharePct(factor) {

package/dist/{chunk-4QHTXT4A.js → chunk-MUYTDD35.js}

@@ -2,11 +2,11 @@ import {
   dedupeGscSitemapUrls,
   resolveDiscoveredGscSitemapUrls,
   submitGscSitemapBatches
-} from "./chunk-JSCO223C.js";
+} from "./chunk-ZHFE6J3A.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-5QR7D4RQ.js";
+} from "./chunk-7HB6QLX4.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
@@ -138,9 +138,13 @@ import {
   sentimentSettingsUpdateSchema,
   sentimentSummaryIncludeSchema,
   sentimentSummaryReadSchema,
+  seoCompetitorListSchema,
+  seoCompetitorQuerySchema,
   seoContextSchema,
   seoDomainIntelligenceListSchema,
   seoEvidenceQuerySchema,
+  seoKeywordGapListSchema,
+  seoKeywordGapQuerySchema,
   seoKeywordMetricsListSchema,
   seoMarketRankingListSchema,
   seoMarketRankingQuerySchema,
@@ -178,7 +182,7 @@ import {
   trafficSeriesGranularitySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/mcp/tool-registry.ts
 import { z as z2 } from "zod";
@@ -1131,6 +1135,8 @@ var sentimentPreviewInputSchema = sentimentBackfillSelectionSchema.safeExtend({
 var sentimentBackfillInputSchema = sentimentBackfillRequestSchema.extend({ project: projectNameSchema });
 var seoIdInputSchema = projectInputSchema.extend({ id: z2.string().min(1) });
 var seoEvidenceInputSchema = seoEvidenceQuerySchema.extend({ project: projectNameSchema });
+var seoCompetitorInputSchema = seoCompetitorQuerySchema.extend({ project: projectNameSchema });
+var seoKeywordGapInputSchema = seoKeywordGapQuerySchema.extend({ project: projectNameSchema });
 var seoMarketRankingInputSchema = seoMarketRankingQuerySchema.extend({ project: projectNameSchema });
 var seoMarketRankingSummaryInputSchema = seoMarketRankingSummaryQuerySchema.extend({ project: projectNameSchema });
 var rawCanonryMcpTools = [
@@ -1344,10 +1350,40 @@ var rawCanonryMcpTools = [
       return client.getSeoRankedKeywords(project, query);
     }
   }),
+  defineTool({
+    name: "canonry_seo_competitors",
+    title: "SEO organic competitors",
+    description: "Read saved whole-domain organic competitor discovery only. No provider calls or automatic competitor pins. Preserve target, location, language, source date and runId while paging. Shared-search counts and traffic are provider database estimates; saved rows are bounded by the profile limit. Optional sort orders all saved rows before paging; a leading minus descends, missing values stay last, and omission preserves source order. Preserve sort while paging.",
+    access: "read",
+    tier: "seo",
+    inputSchema: seoCompetitorInputSchema,
+    outputSchema: seoCompetitorListSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/seo/competitors"],
+    handler: (client, input) => {
+      const { project, ...query } = input;
+      return client.getSeoCompetitors(project, query);
+    }
+  }),
+  defineTool({
+    name: "canonry_seo_keyword_gaps",
+    title: "SEO keyword gaps",
+    description: "Read saved whole-domain organic search comparisons only. No provider calls. kind=shared includes all searches where both domains rank, including outranked; missing means the source database has a rival rank and no target rank; outranked means the rival ranks higher. rankGap is target rank minus rival rank and null without both. Preserve exact targets, locale, source date and runId while paging. Results are a bounded source sample, not all possible opportunities. Optional sort orders all filtered rows before paging; a leading minus descends, missing values stay last, and omission preserves source order. Preserve sort while paging.",
+    access: "read",
+    tier: "seo",
+    inputSchema: seoKeywordGapInputSchema,
+    outputSchema: seoKeywordGapListSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/seo/keyword-gaps"],
+    handler: (client, input) => {
+      const { project, ...query } = input;
+      return client.getSeoKeywordGaps(project, query);
+    }
+  }),
   defineTool({
     name: "canonry_seo_market_rankings",
     title: "SEO market rankings",
-    description: "Read stored SEO data only. No provider calls. The site's Google position for each tracked non-brand query in each market, searched from that market's location; these are the same tracked queries AI visibility measures, and searchText is the exact text searched. searchStatus says how each search ended: a null rank in a completed or partial row means not in the checked results (depth, lower when only part of the results came back); a failed or cancelled row has no rank because the search returned nothing. outcome says where each row landed (page-1, ranks-11-20, ranks-21-plus, not-ranked, partly-checked for a partial search without the site, failed, cancelled) and rivalAhead whether a tracked competitor ranks above the site. Filter with marketKey, regionKey, outcome (needs-work = off page 1 with a result) and q; sort=rank puts the closest to page 1 first. Keep runId fixed while paging.",
+    description: "Read stored SEO data only. No provider calls. The site's Google position for each tracked non-brand query in each market, searched from that market's location; these are the same tracked queries AI visibility measures, and searchText is the exact text searched. searchStatus says how each search ended: a null rank in a completed or partial row means not in the checked results (depth, lower when only part of the results came back); a failed or cancelled row has no rank because the search returned nothing. outcome says where each row landed (page-1, ranks-11-20, ranks-21-plus, not-ranked, partly-checked for a partial search without the site, failed, cancelled) and rivalAhead whether a tracked competitor ranks above the site. topCompetitor is the best tracked rival; rankGap is target rank minus rival rank and null without both. Filter with marketKey, regionKey, outcome (needs-work = off page 1 with a result) and q; sort=rank puts the closest to page 1 first. Keep runId fixed while paging.",
     access: "read",
     tier: "seo",
     inputSchema: seoMarketRankingInputSchema,

package/dist/{chunk-TESDUMVK.js → chunk-O4WBYEGV.js}

@@ -8,7 +8,7 @@ import {
   classifyJourneyEntry,
   hostMatchesDomain,
   hostOf
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // ../integration-traffic/src/ip-ranges/amazonbot.json
 var amazonbot_default = {

package/dist/{chunk-5LKK2MCJ.js → chunk-OES6PSQK.js}

@@ -5,10 +5,10 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-ORZBHCZR.js";
+} from "./chunk-IYMTQHPD.js";
 import {
   CANONRY_MCP_TOOLKITS
-} from "./chunk-NDTU7FGL.js";
+} from "./chunk-WVCDUKJ2.js";
 import {
   AGENT_REASONING_LEVELS,
   aeroStreamFn,
@@ -22,18 +22,18 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-7JC4Z6FQ.js";
+} from "./chunk-3QJWOF2B.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-4QHTXT4A.js";
+} from "./chunk-MUYTDD35.js";
 import {
   createLogger
-} from "./chunk-Z2FY6AGZ.js";
+} from "./chunk-TZRYVW75.js";
 import {
   agentToolEvents,
   llmUsageEvents
-} from "./chunk-D5XPB7MM.js";
+} from "./chunk-PH4AESRE.js";
 import {
   MeasurementPortfolioLists,
   SeoCapabilities,
@@ -42,7 +42,7 @@ import {
   describeError,
   validationError,
   visibilityReportRequestSchema
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/agent/session.ts
 import fs3 from "fs";

package/dist/{chunk-D5XPB7MM.js → chunk-PH4AESRE.js}

@@ -20,7 +20,7 @@ import {
   templateLinkRatio,
   templateLinkUbiquityAvailable,
   validationError
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -919,6 +919,8 @@ var oauthClients = sqliteTable2("oauth_clients", {
    * chose its own display name — so that name is a claim, not a fact, and the
    * consent page must say so. A client calling itself "Canonry Dashboard"
    * otherwise reads as first-party on the one screen where trust is decided.
+   * The one exception is the shared MCP gateway's client once the operator
+   * names it in config (`mcpGateway.clientId`); its row stays `dynamic`.
    */
   registration: text2("registration").$type().notNull().default("operator"),
   createdAt: text2("created_at").notNull(),

package/dist/{chunk-JEXBP7CR.js → chunk-PLLDJUG2.js}

@@ -2,13 +2,13 @@ import {
   bucketCliCommandDuration,
   isTelemetryEnabled,
   trackEvent
-} from "./chunk-6KPBYCPE.js";
+} from "./chunk-4GEEYY3N.js";
 import {
   getConfigDir
-} from "./chunk-7JC4Z6FQ.js";
+} from "./chunk-3QJWOF2B.js";
 import {
   currentOutcomeAttribution
-} from "./chunk-JPOIDGGF.js";
+} from "./chunk-3MGM3U6V.js";
 import {
   AGENT_NONE,
   OutcomeSurfaces,
@@ -19,7 +19,7 @@ import {
   integrationConnectionPropertiesSchema,
   normalizeAgentSlug,
   usageSurfaceSchema
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/outcome-telemetry.ts
 import fs from "fs";