@canonry/canonry 7.77.2 → 7.78.2

package/dist/{chunk-GDKMVOZI.js → chunk-PRCBHOVR.js}

@@ -9,14 +9,14 @@ import {
   normalizeCloudflareWorkerEvent,
   sessionizeJourneyRequests,
   verifyRequestSignature
-} from "./chunk-TESDUMVK.js";
+} from "./chunk-O4WBYEGV.js";
 import {
   currentOutcomeAttribution,
   getRequestContext,
   registerRequestContext,
   requestAuditIdentity,
   sanitizeRequestContext
-} from "./chunk-JPOIDGGF.js";
+} from "./chunk-3MGM3U6V.js";
 import {
   SentimentIdempotencyConflict,
   SentimentRepository,
@@ -157,7 +157,7 @@ import {
   userSessions,
   users,
   writeNegativeReviewMaxStars
-} from "./chunk-D5XPB7MM.js";
+} from "./chunk-PH4AESRE.js";
 import {
   ADS_ACTIVATE_SCOPE,
   ADS_ACTIVATION_ABSOLUTE_MAX_ENTITIES,
@@ -371,6 +371,8 @@ import {
   SeoAdapterOutcomes,
   SeoAvailability,
   SeoCapabilities,
+  SeoKeywordGapKinds,
+  SeoKeywordGapModes,
   SeoMarketRankingSearchStatuses,
   SeoMarketRankingSorts,
   SeoRunStatuses,
@@ -534,6 +536,8 @@ import {
   compactDateToIso,
   compareMarketRankingsBy,
   compareSemver,
+  compareSeoCompetitorsBy,
+  compareSeoKeywordGapsBy,
   compareText,
   competitorAliasBlockRequestSchema,
   competitorAliasProjectIdentity,
@@ -1058,9 +1062,16 @@ import {
   sentimentSettingsUpdateSchema,
   sentimentSummaryRequestSchema,
   sentimentSummarySchema,
+  seoCompetitorListSchema,
+  seoCompetitorQuerySchema,
+  seoCompetitorSortSchema,
   seoContextSchema,
   seoDomainIntelligenceListSchema,
   seoEvidenceQuerySchema,
+  seoKeywordGapKindSchema,
+  seoKeywordGapListSchema,
+  seoKeywordGapQuerySchema,
+  seoKeywordGapSortSchema,
   seoKeywordMetricsListSchema,
   seoMarketRankingFilterSchema,
   seoMarketRankingListSchema,
@@ -1196,7 +1207,7 @@ import {
   wordpressSchemaDeployResultDtoSchema,
   wordpressSchemaStatusResultDtoSchema,
   wordpressStatusDtoSchema
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // ../api-routes/src/user-session.ts
 import crypto2 from "crypto";
@@ -7946,6 +7957,8 @@ h1 { margin: 0; font-size: 24px; line-height: 32px; font-weight: 600; letter-spa
 p { margin: 0; overflow-wrap: anywhere; }
 .intro { color: var(--secondary); margin-top: 8px; }
 strong { color: var(--text); font-weight: 550; }
+a { color: var(--text); text-decoration: underline; text-decoration-color: var(--border-strong); text-underline-offset: 3px; }
+a:hover { text-decoration-color: var(--text); }
 .err { margin-top: 16px; color: var(--negative); }
 .warn { margin-top: 16px; padding: 12px; border: 1px solid var(--caution-border); border-radius: 6px; background: var(--caution-surface); color: var(--caution); font-size: 13px; line-height: 20px; }
 .grant { margin: 24px 0 0; padding: 16px 0 20px; border-top: 1px solid var(--border); border-bottom: 1px solid var(--border); font-size: 13px; line-height: 20px; }
@@ -7968,7 +7981,7 @@ button { min-height: 36px; border: 1px solid transparent; border-radius: 6px; pa
 .secondary { border-color: var(--border); background: var(--surface); color: var(--text); }
 .secondary:hover { background: var(--hover); border-color: var(--border-strong); }
 .secondary:active { background: var(--border); }
-:where(input, button):focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; }
+:where(input, button, a):focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; }
 @media (max-width: 480px) {
   main { padding: 32px 16px; align-items: flex-start; }
   .panel { padding: 24px; }
@@ -7993,11 +8006,11 @@ function fontFace(fontUrl) {
   src: url('${fontUrl}') format('woff2');
 }`;
 }
-function gatePage(title, body, fontUrl) {
+function gatePage(title, body, fontUrl, head = "") {
   return `<!doctype html>
 <html lang="en"><head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
-<meta name="color-scheme" content="dark"><meta name="theme-color" content="#0a0a0a">
+<meta name="color-scheme" content="dark"><meta name="theme-color" content="#0a0a0a">${head}
 <title>${title} \xB7 Canonry</title>
 <style>${fontFace(fontUrl)}${styles}</style>
 </head><body><main><div class="gate">
@@ -8032,6 +8045,18 @@ ${o.scope.split(/\s+/).includes(RESEARCH_RUN_SCOPE) ? `<p class="warn">Run resea
 <div class="actions"><button class="primary" type="submit" name="approve" value="yes">Allow</button><button class="secondary" type="submit" name="approve" value="no">Deny</button></div>
 </form>`, o.fontUrl);
 }
+function renderAuthorizationHandoff(o) {
+  const target = escapeHtml(o.target);
+  const title = o.approved ? "Access allowed" : "Access denied";
+  return gatePage(
+    title,
+    `<h1 id="gate-title">${title}</h1>
+<p class="intro">Returning you to <strong>${escapeHtml(o.clientName)}</strong>. If nothing happens, <a href="${target}" rel="noreferrer">continue</a>.</p>`,
+    o.fontUrl,
+    `
+<meta http-equiv="refresh" content="0;url=${target}">`
+  );
+}
 
 // ../api-routes/src/oauth.ts
 var CODE_TTL_MS = 6e4;
@@ -8089,6 +8114,12 @@ function sendGatePage(reply, html) {
     "frame-ancestors 'none'; default-src 'none'; style-src 'unsafe-inline'; font-src 'self'; form-action 'self'"
   ).header("x-frame-options", "DENY").header("referrer-policy", "same-origin").header("cache-control", "no-store").type("text/html").send(html);
 }
+function sendHandoffPage(reply, html) {
+  return reply.header(
+    "content-security-policy",
+    "frame-ancestors 'none'; default-src 'none'; style-src 'unsafe-inline'; font-src 'self'; form-action 'none'; base-uri 'none'"
+  ).header("x-frame-options", "DENY").header("referrer-policy", "no-referrer").header("cache-control", "no-store").type("text/html").send(html);
+}
 var CONSENT_SECRET = crypto10.randomBytes(32);
 function registerOAuthRoutes(app, opts) {
   void app.register(async (scope) => {
@@ -8115,6 +8146,12 @@ function registerOAuthRoutesIn(app, opts) {
   function consentToken(userId, clientId, redirectUri, scope) {
     return crypto10.createHmac("sha256", CONSENT_SECRET).update([userId, clientId, redirectUri, scope].join("\0")).digest("base64url");
   }
+  function selfRegistered(client) {
+    if (client.registration !== "dynamic") return false;
+    const gateway = opts.gatewayClient;
+    const vouched = gateway !== void 0 && client.id === gateway.id && client.redirectUris.length > 0 && client.redirectUris.every((uri) => URL.canParse(uri) && new URL(uri).origin === gateway.origin);
+    return !vouched;
+  }
   function authorizationServerMetadata() {
     return {
       issuer,
@@ -8190,7 +8227,7 @@ function registerOAuthRoutesIn(app, opts) {
     return sendGatePage(reply, renderConsentPage({
       action: request.url,
       clientName: client.name,
-      selfRegistered: client.registration === "dynamic",
+      selfRegistered: selfRegistered(client),
       redirectUri,
       scope: grantedScope,
       userName: user.name,
@@ -8228,7 +8265,12 @@ function registerOAuthRoutesIn(app, opts) {
       const denied = new URL(redirectUri);
       denied.searchParams.set("error", "access_denied");
       if (q.state) denied.searchParams.set("state", q.state);
-      return reply.redirect(denied.toString());
+      return sendHandoffPage(reply, renderAuthorizationHandoff({
+        target: denied.toString(),
+        approved: false,
+        clientName: client.name,
+        fontUrl: opts.fontUrl
+      }));
     }
     const code = newToken();
     const now = /* @__PURE__ */ new Date();
@@ -8247,7 +8289,12 @@ function registerOAuthRoutesIn(app, opts) {
     target.searchParams.set("code", code);
     if (q.state) target.searchParams.set("state", q.state);
     target.searchParams.set("iss", issuer);
-    return reply.redirect(target.toString());
+    return sendHandoffPage(reply, renderAuthorizationHandoff({
+      target: target.toString(),
+      approved: true,
+      clientName: client.name,
+      fontUrl: opts.fontUrl
+    }));
   });
   const registrations = /* @__PURE__ */ new Map();
   let registrationsThisWindow = [];
@@ -15435,7 +15482,9 @@ function resultRows(tasks) {
     keywordMetrics: kept.flatMap((task) => task.results.keywordMetrics),
     domainIntelligence: kept.flatMap((task) => task.results.domainIntelligence),
     rankedKeywords: kept.flatMap((task) => task.results.rankedKeywords),
-    marketRankings: tasks.flatMap(marketRankingRows)
+    marketRankings: tasks.flatMap(marketRankingRows),
+    competitors: kept.flatMap((task) => task.results.competitors ?? []),
+    keywordGaps: kept.flatMap((task) => task.results.keywordGaps ?? [])
   };
 }
 function marketRankingRows(task) {
@@ -15471,14 +15520,14 @@ function scopedPlanTargets(plan, scope) {
   return { targets: plan.targets.filter((target) => targetKeys.includes(target.stableKey)), market, targetKeys };
 }
 function scopeCapabilities(kind, targets) {
-  if (kind === SeoScopeKinds.project) return [SeoCapabilities["keyword-metrics"], SeoCapabilities["domain-intelligence"], SeoCapabilities["ranked-keywords"], SeoCapabilities["market-rankings"]];
+  if (kind === SeoScopeKinds.project) return Object.values(SeoCapabilities);
   const exactHosts = targets.length > 0 && targets.every((target) => target.urlMatchers.length > 0 && target.urlMatchers.every((matcher) => matcher.kind === "host"));
   const markets = kind === SeoScopeKinds.group || kind === SeoScopeKinds.market ? [SeoCapabilities["market-rankings"]] : [];
   return exactHosts ? [SeoCapabilities["keyword-metrics"], SeoCapabilities["ranked-keywords"], ...markets] : [SeoCapabilities["keyword-metrics"], ...markets];
 }
 function scopeReason(capabilities) {
   const markets = capabilities.includes(SeoCapabilities["market-rankings"]);
-  return capabilities.includes(SeoCapabilities["ranked-keywords"]) ? `Supports explicit keyword metrics${markets ? ", market rankings" : ""} and exact-host ranked keywords. Whole-domain intelligence requires project scope.` : `Supports explicit keyword metrics${markets ? " and market rankings" : " only"}. Path and entity Properties cannot be replaced by whole-domain data.`;
+  return capabilities.includes(SeoCapabilities["ranked-keywords"]) ? `Supports explicit keyword metrics${markets ? ", market rankings" : ""} and exact-host ranked keywords. Use project scope for domain intelligence, competitor discovery and keyword gaps.` : `Supports explicit keyword metrics${markets ? " and market rankings" : " only"}. Use project scope for domain research; path and entity Properties cannot be replaced by whole-domain data.`;
 }
 function cancelSeoRefresh(db, projectId, id) {
   db.transaction((tx) => {
@@ -15503,6 +15552,7 @@ function resolveScope2(db, projectId, input) {
   const { market, targetKeys, targets } = scopedPlanTargets(plan, input.scope);
   const supported = scopeCapabilities(input.scope.kind, targets);
   if (input.capabilities.some((capability) => !supported.includes(capability))) {
+    if (input.capabilities.includes(SeoCapabilities["competitor-discovery"]) || input.capabilities.includes(SeoCapabilities["keyword-gaps"])) throw validationError("Competitor discovery and keyword gaps compare whole domains. Select project scope with an explicit domain Target; Property, group and market scope cannot be broadened automatically.");
     if (supported.includes(SeoCapabilities["ranked-keywords"])) throw validationError("Domain intelligence requires project scope with a whole-domain Target. This Advanced scope supports exact-host ranked keywords and explicit keyword metrics.");
     throw validationError("This Advanced scope contains path or entity Properties and supports explicit keyword metrics only. Select a host-only scope for ranked keywords, or project scope for whole-domain intelligence.");
   }
@@ -15515,13 +15565,24 @@ function resolveScope2(db, projectId, input) {
 }
 function normalizeProfile(input) {
   if (new Set(input.capabilities).size !== input.capabilities.length) throw validationError("Select each SEO capability once.");
-  const targets = input.targets.map((target) => {
+  const normalized = [...input.targets, ...input.competitors ?? []].map((target) => {
     const host = normalizeHostname(target.value);
     if (!host) throw validationError("SEO Targets must be plain hostnames without paths or ports.");
     if (target.kind === SeoTargetKinds.host && target.includeSubdomains) throw validationError("Exact host Targets cannot include subdomains.");
     return { ...target, value: host };
   });
+  const targets = normalized.slice(0, input.targets.length);
+  const comparisonTargets = normalized.slice(input.targets.length);
   if (new Set(targets.map((target) => `${target.kind}:${target.value}:${target.includeSubdomains}`)).size !== targets.length) throw validationError("SEO Targets must be distinct.");
+  const competitive = input.capabilities.includes(SeoCapabilities["competitor-discovery"]) || input.capabilities.includes(SeoCapabilities["keyword-gaps"]);
+  if (competitive && [...targets, ...comparisonTargets].some((target) => target.kind !== SeoTargetKinds.domain || !target.includeSubdomains || registrableDomain(target.value) !== target.value)) throw validationError("Competitor discovery and keyword gaps require root domain Targets with subdomains included. Exact host comparisons are not supported by this source.");
+  if (input.capabilities.includes(SeoCapabilities["keyword-gaps"])) {
+    if (!comparisonTargets.length) throw validationError("Keyword gaps requires at least one explicit competitor domain.");
+    if (new Set(comparisonTargets.map((target) => target.value)).size !== comparisonTargets.length) throw validationError("Competitor domains must be distinct.");
+    if (comparisonTargets.some((competitor) => targets.some((target) => target.value === competitor.value))) throw validationError("A keyword-gap competitor must differ from every Target domain.");
+  } else if (input.competitors !== void 0) {
+    throw validationError("Comparison competitors apply only to keyword gaps.");
+  }
   const keywords = [...new Set(input.keywords)];
   if (input.capabilities.includes(SeoCapabilities["keyword-metrics"]) && !keywords.length) throw validationError("Keyword metrics requires at least one explicit keyword.");
   if (input.capabilities.some((capability) => capability !== SeoCapabilities["keyword-metrics"]) && !targets.length) throw validationError("Domain capabilities require at least one explicit Target.");
@@ -15535,7 +15596,7 @@ function normalizeProfile(input) {
   } else if (input.rankings) {
     throw validationError("Search settings apply only to market rankings.");
   }
-  return { ...input, targets, keywords };
+  return { ...input, targets, keywords, ...input.competitors === void 0 ? {} : { competitors: comparisonTargets } };
 }
 var NO_MARKET_RANKINGS = { searches: [] };
 function advancedMarketQueries(plan, scope) {
@@ -15630,6 +15691,18 @@ function marketRankingPlan(db, projectId, input) {
 }
 function taskRequests(profile, rankings) {
   return profile.capabilities.flatMap((capability) => {
+    if (capability === SeoCapabilities["keyword-gaps"]) {
+      return profile.targets.flatMap((target) => (profile.competitors ?? []).flatMap((competitor) => Object.values(SeoKeywordGapModes).map((mode) => ({
+        capability,
+        target,
+        keywords: [],
+        locationCode: profile.locationCode,
+        languageCode: profile.languageCode,
+        limit: profile.limit,
+        tag: "",
+        comparison: { competitor, mode }
+      }))));
+    }
     if (capability === SeoCapabilities["market-rankings"]) {
       const settings = profile.rankings;
       return rankings.searches.map((search) => ({
@@ -15891,7 +15964,7 @@ async function seoRoutes(app, opts) {
     const row = job(resolveProject(app.db, request.params.name).id, request.params.id);
     const rows = tasks(row.id);
     const results = resultRows(rows);
-    return { ...runDto(row, rows.map((task) => ({ status: task.status, count: 1 }))), tasks: rows.map((task) => ({ id: task.id, capability: task.request.capability, target: task.request.target, status: task.status, error: task.error, remoteTaskId: task.receipts[0]?.remoteTaskId ?? null, ...taskSearch(task), retried: task.retryOf !== null })), results: { keywordMetrics: results.keywordMetrics.slice(0, 20), domainIntelligence: results.domainIntelligence.slice(0, 20), rankedKeywords: results.rankedKeywords.slice(0, 20), marketRankings: [...results.marketRankings].sort(compareMarketRankings).slice(0, 20) }, resultCounts: { keywordMetrics: results.keywordMetrics.length, domainIntelligence: results.domainIntelligence.length, rankedKeywords: results.rankedKeywords.length, marketRankings: results.marketRankings.length }, resultsTruncated: Object.values(results).some((items) => items.length > 20) };
+    return { ...runDto(row, rows.map((task) => ({ status: task.status, count: 1 }))), tasks: rows.map((task) => ({ id: task.id, capability: task.request.capability, target: task.request.target, comparison: task.request.comparison ?? null, status: task.status, error: task.error, remoteTaskId: task.receipts[0]?.remoteTaskId ?? null, ...taskSearch(task), retried: task.retryOf !== null })), results: { keywordMetrics: results.keywordMetrics.slice(0, 20), domainIntelligence: results.domainIntelligence.slice(0, 20), rankedKeywords: results.rankedKeywords.slice(0, 20), marketRankings: [...results.marketRankings].sort(compareMarketRankings).slice(0, 20), competitors: results.competitors.slice(0, 20), keywordGaps: results.keywordGaps.slice(0, 20) }, resultCounts: { keywordMetrics: results.keywordMetrics.length, domainIntelligence: results.domainIntelligence.length, rankedKeywords: results.rankedKeywords.length, marketRankings: results.marketRankings.length, competitors: results.competitors.length, keywordGaps: results.keywordGaps.length }, resultsTruncated: Object.values(results).some((items) => items.length > 20) };
   });
   app.post("/projects/:name/seo/runs/:id/cancel", { config: { paidRead: true, writeScope: SEO_RUN_SCOPE } }, async (request) => {
     requireScope(request, SEO_RUN_SCOPE);
@@ -15910,7 +15983,7 @@ async function seoRoutes(app, opts) {
     const results = resultRows(rows);
     const primary = row?.profile.targets[0];
     const domain = primary ? results.domainIntelligence.find((result) => result.target.kind === primary.kind && result.target.value === primary.value && result.target.includeSubdomains === primary.includeSubdomains) : null;
-    return { status: status(project.id), profiles: profiles(project.id), latestRun: latest ? runSummary(latest) : null, evidenceRunId: row?.id ?? null, evidenceRun: row ? runDto(row, rows.map((task) => ({ status: task.status, count: 1 }))) : null, keywordMetricsCount: results.keywordMetrics.length, domainIntelligenceCount: results.domainIntelligence.length, rankedKeywordCount: results.rankedKeywords.length, marketRankingCount: results.marketRankings.length, summary: domain ? { target: domain.target, organicKeywords: domain.organicKeywords, inTop10: domain.top1 !== null && domain.top2To3 !== null && domain.top4To10 !== null ? domain.top1 + domain.top2To3 + domain.top4To10 : null, estimatedOrganicTraffic: domain.estimatedOrganicTraffic, provenance: domain.provenance } : null };
+    return { status: status(project.id), profiles: profiles(project.id), latestRun: latest ? runSummary(latest) : null, evidenceRunId: row?.id ?? null, evidenceRun: row ? runDto(row, rows.map((task) => ({ status: task.status, count: 1 }))) : null, keywordMetricsCount: results.keywordMetrics.length, domainIntelligenceCount: results.domainIntelligence.length, rankedKeywordCount: results.rankedKeywords.length, marketRankingCount: results.marketRankings.length, competitorCount: results.competitors.length, keywordGapCount: results.keywordGaps.length, summary: domain ? { target: domain.target, organicKeywords: domain.organicKeywords, inTop10: domain.top1 !== null && domain.top2To3 !== null && domain.top4To10 !== null ? domain.top1 + domain.top2To3 + domain.top4To10 : null, estimatedOrganicTraffic: domain.estimatedOrganicTraffic, provenance: domain.provenance } : null };
   });
   for (const [path8, key] of [["keyword-metrics", "keywordMetrics"], ["domain-intelligence", "domainIntelligence"], ["ranked-keywords", "rankedKeywords"]]) app.get(`/projects/:name/seo/${path8}`, async (request) => {
     const query = queryInput(request.query);
@@ -15920,6 +15993,30 @@ async function seoRoutes(app, opts) {
     const offset = query.offset ?? 0;
     return { runId: row?.id ?? null, items: items.slice(offset, offset + limit), total: items.length, limit, offset };
   });
+  app.get("/projects/:name/seo/competitors", async (request) => {
+    const raw = request.query;
+    const parsed = seoCompetitorQuerySchema.safeParse({ ...raw, ...raw.limit === void 0 ? {} : { limit: Number(raw.limit) }, ...raw.offset === void 0 ? {} : { offset: Number(raw.offset) } });
+    if (!parsed.success) throw validationError("Invalid SEO competitor selection.");
+    const query = parsed.data;
+    const row = selected(resolveProject(app.db, request.params.name).id, query, true);
+    const items = row ? resultRows(tasks(row.id)).competitors : [];
+    if (query.sort) items.sort(compareSeoCompetitorsBy(query.sort));
+    const limit = query.limit ?? 50;
+    const offset = query.offset ?? 0;
+    return { runId: row?.id ?? null, items: items.slice(offset, offset + limit), total: items.length, limit, offset };
+  });
+  app.get("/projects/:name/seo/keyword-gaps", async (request) => {
+    const raw = request.query;
+    const parsed = seoKeywordGapQuerySchema.safeParse({ ...raw, ...raw.limit === void 0 ? {} : { limit: Number(raw.limit) }, ...raw.offset === void 0 ? {} : { offset: Number(raw.offset) } });
+    if (!parsed.success) throw validationError("Invalid SEO keyword-gap selection.");
+    const query = parsed.data;
+    const row = selected(resolveProject(app.db, request.params.name).id, query, true);
+    const items = (row ? resultRows(tasks(row.id)).keywordGaps : []).filter((item2) => !query.kind || (query.kind === SeoKeywordGapKinds.shared ? item2.kind !== SeoKeywordGapKinds.missing : item2.kind === query.kind));
+    if (query.sort) items.sort(compareSeoKeywordGapsBy(query.sort));
+    const limit = query.limit ?? 50;
+    const offset = query.offset ?? 0;
+    return { runId: row?.id ?? null, items: items.slice(offset, offset + limit), total: items.length, limit, offset };
+  });
   app.get("/projects/:name/seo/market-rankings", async (request) => {
     const raw = request.query ?? {};
     const parsed = seoMarketRankingQuerySchema.safeParse({ ...raw, ...raw.limit === void 0 ? {} : { limit: Number(raw.limit) }, ...raw.offset === void 0 ? {} : { offset: Number(raw.offset) } });
@@ -34192,6 +34289,8 @@ var SCHEMA_TABLE = {
   SeoRunList: seoRunListSchema,
   SeoOverview: seoOverviewSchema,
   SeoKeywordMetricsList: seoKeywordMetricsListSchema,
+  SeoCompetitorList: seoCompetitorListSchema,
+  SeoKeywordGapList: seoKeywordGapListSchema,
   SeoDomainIntelligenceList: seoDomainIntelligenceListSchema,
   SeoRankedKeywordList: seoRankedKeywordListSchema,
   SeoMarketRankingList: seoMarketRankingListSchema,
@@ -35425,12 +35524,40 @@ var routeCatalog = [
       409: errorResponse("Selection, intent or execution identity changed.")
     }
   },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/seo/competitors",
+    summary: "Read stored organic search competitors",
+    tags: ["seo"],
+    description: "Stored whole-domain organic competitor discovery only; never calls a provider. Available for Simple and Advanced project profiles. Each row names its target and source locale. Results are bounded provider database observations, not an exhaustive competitor inventory or a market/Property measurement.",
+    parameters: [nameParameter, ...seoEvidenceParameters, { name: "sort", in: "query", description: "Sort the complete saved result before pagination: domain, shared searches, average position or estimated traffic. Prefix with - for descending. Missing values stay last in both directions. Omitted preserves stored order.", schema: { type: "string", enum: [...seoCompetitorSortSchema.options] } }],
+    responses: {
+      200: jsonResponse("Saved organic competitor evidence.", "SeoCompetitorList"),
+      400: errorResponse("Invalid scope or input."),
+      403: errorResponse("Insufficient authority."),
+      404: errorResponse("Project or selected evidence not found.")
+    }
+  },
+  {
+    method: "get",
+    path: "/api/v1/projects/{name}/seo/keyword-gaps",
+    summary: "Read stored organic keyword comparisons",
+    tags: ["seo"],
+    description: "Stored whole-domain comparisons only; never calls a provider. Missing means the source database has a competitor ranking and no target ranking, not absence from Google. Shared includes outranked searches where both domains rank; outranked selects only those with the competitor ahead. Filters apply before pagination; total counts saved rows, not the full provider keyword universe. A signed rankGap is target position minus competitor position and is null when the target is missing.",
+    parameters: [nameParameter, ...seoEvidenceParameters, { name: "kind", in: "query", description: "shared includes outranked; missing and outranked select that exact kind. Omitted returns all saved comparisons.", schema: { type: "string", enum: [...seoKeywordGapKindSchema.options] } }, { name: "sort", in: "query", description: "Sort after filtering and before pagination: keyword, kind, target rank, competitor rank, rank gap or monthly search volume. Prefix with - for descending. Missing values stay last in both directions. Omitted preserves stored order.", schema: { type: "string", enum: [...seoKeywordGapSortSchema.options] } }],
+    responses: {
+      200: jsonResponse("Saved keyword comparison evidence.", "SeoKeywordGapList"),
+      400: errorResponse("Invalid scope or input."),
+      403: errorResponse("Insufficient authority."),
+      404: errorResponse("Project or selected evidence not found.")
+    }
+  },
   {
     method: "get",
     path: "/api/v1/projects/{name}/seo/market-rankings",
     summary: "Read stored market rankings",
     tags: ["seo"],
-    description: "Stored evidence only; never calls a provider. The project's position for each tracked non-brand query, searched on Google from its market's location. searchStatus says how each search ended: in a completed or partial row a null rank means the site was not in the checked results (depth, which is lower when only part of the results came back); a failed or cancelled search keeps its rows with no rank. outcome says where each row landed (a partial search without the site is partly-checked, never not-ranked) and rivalAhead whether a tracked competitor ranks above the site.",
+    description: "Stored evidence only; never calls a provider. The project's position for each tracked non-brand query, searched on Google from its market's location. searchStatus says how each search ended: in a completed or partial row a null rank means the site was not in the checked results (depth, which is lower when only part of the results came back); a failed or cancelled search keeps its rows with no rank. outcome says where each row landed (a partial search without the site is partly-checked, never not-ranked) and rivalAhead whether a tracked competitor ranks above the site. topCompetitor is the best tracked rival, and rankGap is the target position minus that rival position, null when either rank is unavailable.",
     parameters: [
       nameParameter,
       ...seoEvidenceParameters,
@@ -35474,7 +35601,7 @@ var routeCatalog = [
     path: "/api/v1/projects/{name}/seo/profiles/{id}",
     summary: "Save an SEO profile",
     tags: ["seo"],
-    description: "Requires seo.write and an administrator session. Saving never starts provider work. Scope, locale, targets, capabilities, keywords and row limit are identity parameters.",
+    description: "Requires seo.write and an administrator session. Saving never starts provider work. Scope, locale, targets, comparison competitors, capabilities, keywords and row limit are identity parameters. Keyword gaps requires one to five explicit competitor root domains; shared and missing datasets are reserved separately for each target/competitor pair. Competitor discovery and keyword gaps support project scope with whole-domain targets only, including Advanced projects.",
     parameters: [nameParameter, { name: "id", in: "path", required: true, description: "Exact project-scoped identifier.", schema: stringSchema }],
     requestBody: { required: true, content: { "application/json": { schema: { $ref: "#/components/schemas/SeoProfileInput" } } } },
     responses: {

package/dist/{chunk-JZ4UFSVR.js → chunk-R26CF4WT.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-JRVKW4OO.js";
+} from "./chunk-7OAXEMOF.js";
 import {
   CliError,
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
 import {
   describeError
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // src/commands/mcp.ts
 import fs from "fs";

package/dist/{chunk-Z2FY6AGZ.js → chunk-TZRYVW75.js}

@@ -1,11 +1,11 @@
 import {
   getRequestContext
-} from "./chunk-JPOIDGGF.js";
+} from "./chunk-3MGM3U6V.js";
 import {
   diagnosticIdentity,
   redactLogString,
   redactLogValue
-} from "./chunk-FCGYYZHL.js";
+} from "./chunk-PM2DB3HE.js";
 
 // ../api-routes/src/runtime-logger.ts
 import { format } from "util";