@canonry/canonry 7.80.0 → 7.82.0

package/dist/{chunk-DKONZ36U.js → chunk-J2DA4LUR.js}

@@ -1,7 +1,7 @@
 import {
   answerServiceAdapters,
   answerServiceDescriptors
-} from "./chunk-WSWHLKKJ.js";
+} from "./chunk-JDEHNF7K.js";
 import {
   AeroLlmUsageFeatures,
   aeroTurnStatus,
@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-MIQMUSE4.js";
+} from "./chunk-5NDUJLUL.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-JJO5XNS6.js";
+} from "./chunk-J7EYQFMJ.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -53,7 +53,7 @@ import {
   removeCloudflareTrafficConnection,
   removeCloudflareTrafficConnectionBySourceId,
   upsertCloudflareTrafficConnection
-} from "./chunk-KZB6HLFT.js";
+} from "./chunk-SVF4P6DB.js";
 import {
   claudeAdapter,
   embedQueries,
@@ -64,7 +64,7 @@ import {
   openaiAdapter,
   openrouterAdapter,
   perplexityAdapter
-} from "./chunk-7S6SQFFT.js";
+} from "./chunk-GKHM5OT6.js";
 import {
   classifyUsageSurface,
   createApiUsageTelemetry,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-PLLDJUG2.js";
+} from "./chunk-NNUZ37NJ.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -84,7 +84,7 @@ import {
   isApiProviderRegistrable,
   isCdpProviderRegistrable,
   registeredProviderNames
-} from "./chunk-FCYGY4FT.js";
+} from "./chunk-JMUSNZJR.js";
 import {
   checkLatestVersionForServer,
   getOrCreateAnonymousId,
@@ -96,17 +96,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-4GEEYY3N.js";
+} from "./chunk-VWYB4RA4.js";
 import {
   createCanonryMcpServer
-} from "./chunk-RPTOVEZT.js";
+} from "./chunk-T76RQIGK.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-JI7FDO7I.js";
 import {
   ApiClient
-} from "./chunk-7OAXEMOF.js";
+} from "./chunk-ZX7XDVPC.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -138,21 +138,21 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-3QJWOF2B.js";
+} from "./chunk-7ZJHKLTK.js";
 import {
   getBundledSkillSnapshots
-} from "./chunk-AI44ZCMK.js";
+} from "./chunk-462CIYLY.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-OIRHCT63.js";
+} from "./chunk-DWFVH3E2.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-MUYTDD35.js";
+} from "./chunk-HDVJNYYE.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -161,16 +161,16 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   IntelligenceService
-} from "./chunk-QAVJ6LHN.js";
+} from "./chunk-ZR3RYJF3.js";
 import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-TZRYVW75.js";
+} from "./chunk-VVOCZTNC.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
-} from "./chunk-JERATA5R.js";
+} from "./chunk-OH42CAWP.js";
 import {
   BingApiError,
   CC_CACHE_DIR,
@@ -291,7 +291,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-R3US2RG6.js";
+} from "./chunk-NPMJFPBM.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -376,8 +376,10 @@ import {
   siteCrawlSnapshots,
   siteLivenessState,
   trafficSources,
+  unrecognizedAgentEventsHourly,
+  unrecognizedAgentNotifyState,
   usageCounters
-} from "./chunk-HRFPGXON.js";
+} from "./chunk-2GJLKCXL.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AI_ENGINE_DOMAINS,
@@ -633,7 +635,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-PM2DB3HE.js";
+} from "./chunk-S6IC7ZK2.js";
 
 // src/google-marketing-runtime.ts
 import crypto2 from "crypto";
@@ -3323,7 +3325,7 @@ import path5 from "path";
 import { isIP as isIP2 } from "net";
 import { fileURLToPath } from "url";
 import { setImmediate as yieldToEventLoop4 } from "timers/promises";
-import { and as and27, eq as eq33, isNotNull as isNotNull5, isNull as isNull8, lte as lte3, max, ne as ne4, or as or4, sql as sql13 } from "drizzle-orm";
+import { and as and28, eq as eq34, isNotNull as isNotNull5, isNull as isNull8, lte as lte3, max, ne as ne4, or as or4, sql as sql14 } from "drizzle-orm";
 
 // src/seo-runtime.ts
 import { eq, inArray } from "drizzle-orm";
@@ -5937,7 +5939,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "7de408778ee8c17a4b7d4e10315544e07bc057a8" : void 0;
+  const embedded = true ? "2d31f874106c0d9772c47b19f7d79f2257976fef" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -14297,9 +14299,84 @@ async function deliverReviewEvent(options) {
   return sent;
 }
 
+// src/unrecognized-agent-alerts.ts
+import { and as and19, desc as desc8, eq as eq22, gte as gte3, sql as sql9 } from "drizzle-orm";
+var log20 = createLogger("UnrecognizedAgentAlerts");
+var UNRECOGNIZED_AGENT_ALERT_WINDOW_MS = 7 * 864e5;
+var UNRECOGNIZED_AGENT_ALERT_MIN_HITS = 3;
+var UNRECOGNIZED_AGENT_ALERT_INTERVAL_MS = 15 * 6e4;
+var UnrecognizedAgentNotifyStates = {
+  sent: "sent",
+  skipped: "skipped",
+  stale: "stale",
+  baseline: "baseline"
+};
+function projectsWithRecentUnrecognizedAgents(db, now) {
+  const since = new Date(now - UNRECOGNIZED_AGENT_ALERT_WINDOW_MS).toISOString();
+  return db.selectDistinct({ projectId: unrecognizedAgentEventsHourly.projectId }).from(unrecognizedAgentEventsHourly).where(gte3(unrecognizedAgentEventsHourly.tsHour, since)).all().map((row) => row.projectId);
+}
+function undecidedUnrecognizedAgents(db, projectId, now) {
+  const decided = new Set(db.select({ agentName: unrecognizedAgentNotifyState.agentName }).from(unrecognizedAgentNotifyState).where(eq22(unrecognizedAgentNotifyState.projectId, projectId)).all().map((row) => row.agentName));
+  const totals = db.select({
+    name: unrecognizedAgentEventsHourly.agentName,
+    hits: sql9`SUM(${unrecognizedAgentEventsHourly.hits})`,
+    firstSeenAt: sql9`MIN(${unrecognizedAgentEventsHourly.tsHour})`,
+    lastSeenAt: sql9`MAX(${unrecognizedAgentEventsHourly.tsHour})`
+  }).from(unrecognizedAgentEventsHourly).where(eq22(unrecognizedAgentEventsHourly.projectId, projectId)).groupBy(unrecognizedAgentEventsHourly.agentName).all();
+  const windowStart = new Date(now - UNRECOGNIZED_AGENT_ALERT_WINDOW_MS).toISOString();
+  const recordingStart = totals.reduce((earliest, total) => earliest === null || total.firstSeenAt < earliest ? total.firstSeenAt : earliest, null);
+  const baselineEnd = recordingStart === null ? null : new Date(Date.parse(recordingStart) + UNRECOGNIZED_AGENT_ALERT_WINDOW_MS).toISOString();
+  const due = [];
+  const stale = [];
+  const baseline = [];
+  for (const total of totals) {
+    if (decided.has(total.name)) continue;
+    if (total.firstSeenAt < windowStart) {
+      stale.push(total.name);
+      continue;
+    }
+    if (baselineEnd !== null && total.firstSeenAt < baselineEnd) {
+      baseline.push(total.name);
+      continue;
+    }
+    if (Number(total.hits) < UNRECOGNIZED_AGENT_ALERT_MIN_HITS) continue;
+    const latest = db.select({ sampledUserAgent: unrecognizedAgentEventsHourly.sampledUserAgent, sampledPath: unrecognizedAgentEventsHourly.sampledPath }).from(unrecognizedAgentEventsHourly).where(and19(eq22(unrecognizedAgentEventsHourly.projectId, projectId), eq22(unrecognizedAgentEventsHourly.agentName, total.name))).orderBy(desc8(unrecognizedAgentEventsHourly.tsHour)).limit(1).get();
+    due.push({
+      name: total.name,
+      hits: Number(total.hits),
+      firstSeenAt: total.firstSeenAt,
+      lastSeenAt: total.lastSeenAt,
+      sampleUserAgent: latest?.sampledUserAgent ?? null,
+      samplePath: latest?.sampledPath ?? null
+    });
+  }
+  due.sort((a, b) => b.hits - a.hits || a.name.localeCompare(b.name));
+  return { due, stale, baseline };
+}
+function recordUnrecognizedAgentDecisions(db, projectId, names, state, now) {
+  const recordedAt = new Date(now).toISOString();
+  for (const agentName of names) {
+    db.insert(unrecognizedAgentNotifyState).values({ projectId, agentName, state, recordedAt }).onConflictDoNothing().run();
+  }
+}
+function startUnrecognizedAgentAlertLoop(dispatch, intervalMs = UNRECOGNIZED_AGENT_ALERT_INTERVAL_MS) {
+  let running = false;
+  const timer = setInterval(() => {
+    if (running) return;
+    running = true;
+    void dispatch().catch((err) => {
+      log20.warn("unrecognized-agent-alerts.dispatch-failed", { error: describeError(err) });
+    }).finally(() => {
+      running = false;
+    });
+  }, intervalMs);
+  timer.unref?.();
+  return () => clearInterval(timer);
+}
+
 // src/provider-batch-poller.ts
-import { and as and19, eq as eq22, inArray as inArray11, isNotNull as isNotNull3, isNull as isNull4, notExists as notExists2, sql as sql9 } from "drizzle-orm";
-var log20 = createLogger("ProviderBatchPoller");
+import { and as and20, eq as eq23, inArray as inArray11, isNotNull as isNotNull3, isNull as isNull4, notExists as notExists2, sql as sql10 } from "drizzle-orm";
+var log21 = createLogger("ProviderBatchPoller");
 var PROVIDER_BATCH_POLL_INITIAL_MS = 3e4;
 var PROVIDER_BATCH_POLL_MAX_MS = 10 * 6e4;
 var PROVIDER_BATCH_CANCEL_GRACE_MS = 60 * 6e4;
@@ -14323,7 +14400,7 @@ var ProviderBatchPoller = class {
       try {
         if (await this.advance(row)) settledRuns.set(row.runId, row.projectId);
       } catch (err) {
-        log20.warn("batch.advance-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
+        log21.warn("batch.advance-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
         this.reschedule(row.id, null);
       }
     }
@@ -14332,7 +14409,7 @@ var ProviderBatchPoller = class {
       try {
         this.deps.runner.finalizeBatchRun(runId, projectId);
       } catch (err) {
-        log20.warn("batch.finalize-failed", { runId, error: describeError(err) });
+        log21.warn("batch.finalize-failed", { runId, error: describeError(err) });
       }
     }
   }
@@ -14341,7 +14418,7 @@ var ProviderBatchPoller = class {
    * outstanding (ingested or cancelled), so its run may now finalize.
    */
   async advance(row) {
-    const runStatus = this.deps.db.select({ status: runs.status }).from(runs).where(eq22(runs.id, row.runId)).get()?.status;
+    const runStatus = this.deps.db.select({ status: runs.status }).from(runs).where(eq23(runs.id, row.runId)).get()?.status;
     if (runStatus !== RunStatuses.running) {
       await this.deps.runner.abandonProviderBatches([row.id], "Cancelled because its run is no longer running.");
       this.schedule.delete(row.id);
@@ -14358,15 +14435,15 @@ var ProviderBatchPoller = class {
         status = poll.status;
         if (poll.status === "ended") {
           const endedAt = poll.endedAt ?? new Date(this.now()).toISOString();
-          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and19(eq22(providerBatches.id, row.id), eq22(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and20(eq23(providerBatches.id, row.id), eq23(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
           this.schedule.delete(row.id);
           return ended ? this.ingest({ ...row, status: ProviderBatchStatuses.ended, resultsExpireAt: poll.resultsExpireAt ?? null }) : false;
         }
       } catch (err) {
-        log20.warn("batch.poll-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
+        log21.warn("batch.poll-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error: describeError(err) });
       }
     } else {
-      log20.warn("batch.poll-unavailable", { batchId: row.id, runId: row.runId, provider: row.provider });
+      log21.warn("batch.poll-unavailable", { batchId: row.id, runId: row.runId, provider: row.provider });
     }
     this.reschedule(row.id, status);
     return this.enforceDeadline(row, registered);
@@ -14382,18 +14459,18 @@ var ProviderBatchPoller = class {
     const at = new Date(now).toISOString();
     if (row.cancelRequestedAt === null) {
       if (now < Date.parse(row.deadlineAt)) return false;
-      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and19(
-        eq22(providerBatches.id, row.id),
-        eq22(providerBatches.status, ProviderBatchStatuses.submitted),
+      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and20(
+        eq23(providerBatches.id, row.id),
+        eq23(providerBatches.status, ProviderBatchStatuses.submitted),
         isNull4(providerBatches.cancelRequestedAt)
       )).run().changes === 1;
       if (!claimed) return false;
-      log20.warn("batch.deadline-passed", { batchId: row.id, runId: row.runId, provider: row.provider, deadlineAt: row.deadlineAt });
+      log21.warn("batch.deadline-passed", { batchId: row.id, runId: row.runId, provider: row.provider, deadlineAt: row.deadlineAt });
       if (registered?.adapter.batch && row.providerBatchId) {
         try {
           await registered.adapter.batch.cancel(row.providerBatchId, registered.config);
         } catch (err) {
-          log20.warn("batch.cancel-failed", { batchId: row.id, provider: row.provider, error: describeError(err) });
+          log21.warn("batch.cancel-failed", { batchId: row.id, provider: row.provider, error: describeError(err) });
         }
       }
       return false;
@@ -14403,9 +14480,9 @@ var ProviderBatchPoller = class {
       status: ProviderBatchStatuses.cancelled,
       error: `The provider batch did not end within an hour of being cancelled at its deadline; its ${row.requestCount} answer(s) were not recorded.`,
       updatedAt: at
-    }).where(and19(eq22(providerBatches.id, row.id), eq22(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+    }).where(and20(eq23(providerBatches.id, row.id), eq23(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
     this.schedule.delete(row.id);
-    if (gaveUp) log20.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
+    if (gaveUp) log21.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
     return gaveUp;
   }
   async ingest(row) {
@@ -14414,7 +14491,7 @@ var ProviderBatchPoller = class {
       return result.kind !== "skipped";
     } catch (err) {
       const error = describeError(err);
-      log20.warn("batch.ingest-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error });
+      log21.warn("batch.ingest-failed", { batchId: row.id, runId: row.runId, provider: row.provider, error });
       const now = this.now();
       const unreadable = row.resultsExpireAt !== null && now >= Date.parse(row.resultsExpireAt);
       if (unreadable || now >= Date.parse(row.deadlineAt) + PROVIDER_BATCH_CANCEL_GRACE_MS) {
@@ -14443,10 +14520,10 @@ var ProviderBatchPoller = class {
   /** Runs the sweep handed off whose batches have all settled. */
   finalizableRuns() {
     const holding = [ProviderBatchStatuses.submitting, ...OUTSTANDING_PROVIDER_BATCH_STATUSES];
-    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and19(
-      eq22(runs.status, RunStatuses.running),
+    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and20(
+      eq23(runs.status, RunStatuses.running),
       isNotNull3(runs.pendingProviderErrors),
-      notExists2(this.deps.db.select({ one: sql9`1` }).from(providerBatches).where(and19(eq22(providerBatches.runId, runs.id), inArray11(providerBatches.status, holding))))
+      notExists2(this.deps.db.select({ one: sql10`1` }).from(providerBatches).where(and20(eq23(providerBatches.runId, runs.id), inArray11(providerBatches.status, holding))))
     )).all();
   }
 };
@@ -14456,7 +14533,7 @@ function startProviderBatchPoller(deps, intervalMs = PROVIDER_BATCH_TICK_MS) {
   const timer = setInterval(() => {
     if (running) return;
     running = true;
-    void poller.tick().catch((err) => log20.warn("batch.pass-failed", { error: describeError(err) })).finally(() => {
+    void poller.tick().catch((err) => log21.warn("batch.pass-failed", { error: describeError(err) })).finally(() => {
       running = false;
     });
   }, intervalMs);
@@ -14465,7 +14542,7 @@ function startProviderBatchPoller(deps, intervalMs = PROVIDER_BATCH_TICK_MS) {
 }
 
 // src/data-refresh.ts
-var log21 = createLogger("DataRefresh");
+var log22 = createLogger("DataRefresh");
 function gaRefreshDays(now = /* @__PURE__ */ new Date()) {
   const [reportMonth] = reportMonthsForDoctor(void 0, now);
   const reach = inclusiveDayCount(`${reportMonth}-01`, now.toISOString().slice(0, 10)) ?? 0;
@@ -14506,15 +14583,15 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
     if (result.status === "rejected") {
       const reason = result.reason;
       const message = describeError(reason);
-      log21.warn("integration.refresh-failed", { projectName, integration, error: message });
+      log22.warn("integration.refresh-failed", { projectName, integration, error: message });
       return;
     }
     switch (completion) {
       case "synchronous":
-        log21.info("integration.refreshed", { projectName, integration });
+        log22.info("integration.refreshed", { projectName, integration });
         return;
       case "queued":
-        log21.info("integration.queued", { projectName, integration, ...queuedRun(result.value) });
+        log22.info("integration.queued", { projectName, integration, ...queuedRun(result.value) });
         return;
       default: {
         const _exhaustive = completion;
@@ -14525,9 +14602,9 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 }
 
 // src/notifier.ts
-import { eq as eq23, desc as desc8, and as and20, inArray as inArray12, or as or2, isNull as isNull5 } from "drizzle-orm";
+import { eq as eq24, desc as desc9, and as and21, inArray as inArray12, or as or2, isNull as isNull5 } from "drizzle-orm";
 import crypto21 from "crypto";
-var log22 = createLogger("Notifier");
+var log23 = createLogger("Notifier");
 var sampleDelivery = createOutcomeSampler({ burst: 20, refillMs: 6e4, now: () => Date.now() });
 function trackWebhookDelivery(input) {
   const sample = sampleDelivery(input.failure ? "failed" : "succeeded");
@@ -14638,6 +14715,8 @@ var Notifier = class {
   allowLoopbackWebhooks;
   /** Projects with a review dispatch in progress; see {@link dispatchReviewAlerts}. */
   reviewDispatchInFlight = /* @__PURE__ */ new Set();
+  /** Set while a {@link dispatchUnrecognizedAgentAlerts} pass runs, so passes never overlap. */
+  unrecognizedAgentDispatchInFlight = false;
   constructor(db, serverUrl, opts = {}) {
     this.db = db;
     this.serverUrl = serverUrl;
@@ -14645,26 +14724,26 @@ var Notifier = class {
   }
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId, opts) {
-    log22.info("run.completed", { runId, projectId, origin: opts?.origin ?? "sweep" });
-    const notifs = this.db.select().from(notifications).where(eq23(notifications.projectId, projectId)).all().filter((n) => n.enabled);
+    log23.info("run.completed", { runId, projectId, origin: opts?.origin ?? "sweep" });
+    const notifs = this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled);
     if (notifs.length === 0) {
-      log22.info("notifications.none-enabled", { projectId });
+      log23.info("notifications.none-enabled", { projectId });
       return;
     }
-    log22.info("notifications.found", { projectId, count: notifs.length });
-    const run = this.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    log23.info("notifications.found", { projectId, count: notifs.length });
+    const run = this.db.select().from(runs).where(eq24(runs.id, runId)).get();
     if (!run) {
-      log22.error("run.not-found", { runId, msg: "skipping notification dispatch" });
+      log23.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
-    const project = this.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
-      log22.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
+      log23.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
     }
     const transitions = this.computeTransitions(runId, projectId);
     const events = [];
-    log22.info("run.status", { runId: run.id, status: run.status, projectId });
+    log23.info("run.status", { runId: run.id, status: run.status, projectId });
     if ((run.status === "completed" || run.status === "partial") && opts?.origin !== "fill") {
       events.push("run.completed");
     }
@@ -14680,7 +14759,7 @@ var Notifier = class {
       if (!config.url) continue;
       const subscribedEvents = config.events;
       const matchingEvents = events.filter((e) => subscribedEvents.includes(e));
-      log22.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
+      log23.info("notification.match", { notificationId: notif.id, subscribedEvents, matchedEvents: matchingEvents });
       if (matchingEvents.length === 0) continue;
       for (const event of matchingEvents) {
         const relevantTransitions = event === "citation.lost" ? lostTransitions : event === "citation.gained" ? gainedTransitions : transitions;
@@ -14736,9 +14815,9 @@ var Notifier = class {
    * than inferred from the absence of a webhook.
    */
   async onHealthChecked(projectId, report) {
-    const project = this.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
-      log22.error("project.not-found", { projectId, msg: "skipping health notification" });
+      log23.error("project.not-found", { projectId, msg: "skipping health notification" });
       return null;
     }
     const rank = healthRank;
@@ -14769,7 +14848,7 @@ var Notifier = class {
     const status = noSignal ? "warn" : worst ? worst.status : "ok";
     const code = noSignal ? HEALTH_NO_SIGNAL_CODE : worst?.code ?? "health.ok";
     const summary = noSignal ? `No health check produced a result (${healthChecks.length} skipped) \u2014 health is unknown, not confirmed.` : worst?.summary ?? `All ${graded.length} health check(s) passing.`;
-    const previous = this.db.select().from(doctorHealthState).where(eq23(doctorHealthState.projectId, projectId)).get();
+    const previous = this.db.select().from(doctorHealthState).where(eq24(doctorHealthState.projectId, projectId)).get();
     const previousStatus = previous?.status ?? null;
     const failingSignature = failing.map((c) => `${c.status}:${c.code}`).join(",");
     const failingNow = failing.map((c) => ({ id: c.id, code: c.code, rank: rank(c.status) }));
@@ -14839,7 +14918,7 @@ var Notifier = class {
     const urgentById = new Map(urgentItems.map((item) => [item.id, item]));
     const generalEvent = event;
     const urgentRecord = previous?.urgentNotified ?? null;
-    const enabled = generalEvent || urgentItems.length > 0 || urgentRecord ? this.db.select().from(notifications).where(eq23(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
+    const enabled = generalEvent || urgentItems.length > 0 || urgentRecord ? this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
     const listedEvents = (notif) => notif.config.events;
     const hasUrl = (notif) => Boolean(notif.config.url);
     const urgentSubscribers = enabled.filter((n) => hasUrl(n) && (listedEvents(n) ?? []).some((e) => URGENT_HEALTH_EVENTS.has(e)));
@@ -14887,7 +14966,7 @@ var Notifier = class {
     if (previous === void 0) {
       this.db.insert(doctorHealthState).values({ ...observation, notifiedAt: null }).run();
     } else {
-      this.db.update(doctorHealthState).set(observation).where(eq23(doctorHealthState.projectId, projectId)).run();
+      this.db.update(doctorHealthState).set(observation).where(eq24(doctorHealthState.projectId, projectId)).run();
     }
     for (const group of urgentGroups) {
       const { urgentEvent, urgentTold, urgentNew, urgentCleared, urgentNotifs, urgentSettled } = group;
@@ -14931,10 +15010,10 @@ var Notifier = class {
       }
       if (accepted > 0) {
         recordUrgentReceipts(urgentReceipts, group.subscribers, formatUrgentBreaches(urgentSettled) || null);
-        this.db.update(doctorHealthState).set({ urgentNotified: doctorUrgentSummary(urgentReceipts), urgentReceipts }).where(eq23(doctorHealthState.projectId, projectId)).run();
+        this.db.update(doctorHealthState).set({ urgentNotified: doctorUrgentSummary(urgentReceipts), urgentReceipts }).where(eq24(doctorHealthState.projectId, projectId)).run();
       }
       if (urgentNotifs.length > 0) {
-        log22.info("health.urgent-notified", {
+        log23.info("health.urgent-notified", {
           projectId,
           event: urgentEvent,
           codes: urgentEvent === "health.urgent" ? breachCodes(urgentNew) : breachCodes(urgentCleared),
@@ -14945,9 +15024,9 @@ var Notifier = class {
     }
     if (!event) {
       if (clearedThisPass.length > 0 || easedThisPass.length > 0) {
-        log22.info("health.improved", { projectId, status, code, cleared: clearedThisPass, eased: easedThisPass });
+        log23.info("health.improved", { projectId, status, code, cleared: clearedThisPass, eased: easedThisPass });
       } else {
-        log22.info("health.unchanged", { projectId, status, code });
+        log23.info("health.unchanged", { projectId, status, code });
       }
       return null;
     }
@@ -14975,9 +15054,9 @@ var Notifier = class {
       if (await this.sendWebhook(config.url, payload, notif.id, projectId, notif.webhookSecret ?? null)) delivered += 1;
     }
     if (delivered > 0) {
-      this.db.update(doctorHealthState).set({ notifiedAt: now, notifiedSignature: formatBreaches(failingNow), pendingSignature: null }).where(eq23(doctorHealthState.projectId, projectId)).run();
+      this.db.update(doctorHealthState).set({ notifiedAt: now, notifiedSignature: formatBreaches(failingNow), pendingSignature: null }).where(eq24(doctorHealthState.projectId, projectId)).run();
     }
-    log22.info("health.notified", {
+    log23.info("health.notified", {
       projectId,
       event,
       status,
@@ -15005,12 +15084,12 @@ var Notifier = class {
   async onSiteLivenessChecked(projectId, result) {
     const { check, checkedAt } = result;
     if (check.status !== "ok" && check.status !== "fail") return null;
-    const project = this.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) {
-      log22.error("project.not-found", { projectId, msg: "skipping site liveness notification" });
+      log23.error("project.not-found", { projectId, msg: "skipping site liveness notification" });
       return null;
     }
-    const previous = this.db.select().from(siteLivenessState).where(eq23(siteLivenessState.projectId, projectId)).get();
+    const previous = this.db.select().from(siteLivenessState).where(eq24(siteLivenessState.projectId, projectId)).get();
     const sincePrevious = previous ? Date.parse(checkedAt) - Date.parse(previous.checkedAt) : Number.NaN;
     const countsAsRepeat = Number.isFinite(sincePrevious) && sincePrevious >= SITE_LIVENESS_MIN_PASS_GAP_MS && sincePrevious <= SITE_LIVENESS_MAX_PASS_GAP_MS;
     const failures = check.status === "fail" ? countsAsRepeat ? (previous?.consecutiveFailures ?? 0) + 1 : 1 : 0;
@@ -15020,7 +15099,7 @@ var Notifier = class {
     if (check.status === "ok" && outagePaged) event = "health.recovered";
     const confirmed = check.status === "fail" && failures >= SITE_LIVENESS_FAILURES_TO_PAGE;
     const urgentRecord = previous?.urgentNotifiedAt ?? null;
-    const enabled = event !== null || confirmed || urgentRecord !== null ? this.db.select().from(notifications).where(eq23(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
+    const enabled = event !== null || confirmed || urgentRecord !== null ? this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
     const listedEvents = (notif) => notif.config.events;
     const hasUrl = (notif) => Boolean(notif.config.url);
     const scoped = enabled.filter((n) => hasUrl(n) && (listedEvents(n) ?? []).some((e) => URGENT_HEALTH_EVENTS.has(e)));
@@ -15053,7 +15132,7 @@ var Notifier = class {
     if (previous === void 0) {
       this.db.insert(siteLivenessState).values(observation).run();
     } else {
-      this.db.update(siteLivenessState).set(observation).where(eq23(siteLivenessState.projectId, projectId)).run();
+      this.db.update(siteLivenessState).set(observation).where(eq24(siteLivenessState.projectId, projectId)).run();
     }
     if (!event && urgentGroups.every((group) => group.urgentEvent === null)) return null;
     const payloadFor = (name) => {
@@ -15089,9 +15168,9 @@ var Notifier = class {
         }
       }
       if (event === "health.degraded" && delivered > 0) {
-        this.db.update(siteLivenessState).set({ notifiedAt: checkedAt }).where(eq23(siteLivenessState.projectId, projectId)).run();
+        this.db.update(siteLivenessState).set({ notifiedAt: checkedAt }).where(eq24(siteLivenessState.projectId, projectId)).run();
       }
-      log22.info("site-liveness.notified", { projectId, event, code: check.code, subscribers: notifs.length, delivered });
+      log23.info("site-liveness.notified", { projectId, event, code: check.code, subscribers: notifs.length, delivered });
     }
     for (const group of urgentGroups) {
       const { urgentEvent, urgentNotifs, generalIds } = group;
@@ -15103,10 +15182,10 @@ var Notifier = class {
       }
       if (accepted > 0) {
         recordUrgentReceipts(urgentReceipts, group.subscribers, group.settled);
-        this.db.update(siteLivenessState).set({ urgentNotifiedAt: siteUrgentSummary(urgentReceipts), urgentReceipts }).where(eq23(siteLivenessState.projectId, projectId)).run();
+        this.db.update(siteLivenessState).set({ urgentNotifiedAt: siteUrgentSummary(urgentReceipts), urgentReceipts }).where(eq24(siteLivenessState.projectId, projectId)).run();
       }
       if (urgentNotifs.length > 0 || generalIds.size > 0) {
-        log22.info("site-liveness.urgent-notified", { projectId, event: urgentEvent, code: check.code, subscribers: urgentNotifs.length + generalIds.size, delivered: accepted });
+        log23.info("site-liveness.urgent-notified", { projectId, event: urgentEvent, code: check.code, subscribers: urgentNotifs.length + generalIds.size, delivered: accepted });
       }
     }
     return event;
@@ -15129,7 +15208,7 @@ var Notifier = class {
    */
   isNewInsightNews(projectId, insight) {
     const key = insightNotifyKey(projectId, insight);
-    const previous = this.db.select().from(insightNotifyState).where(eq23(insightNotifyState.key, key)).get();
+    const previous = this.db.select().from(insightNotifyState).where(eq24(insightNotifyState.key, key)).get();
     if (!previous) return true;
     if (severityRank(insight.severity) > severityRank(previous.severity)) return true;
     const magnitude = insightMagnitude(insight);
@@ -15151,9 +15230,9 @@ var Notifier = class {
       magnitude: insightMagnitude(insight),
       notifiedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    const existing = this.db.select().from(insightNotifyState).where(eq23(insightNotifyState.key, key)).get();
+    const existing = this.db.select().from(insightNotifyState).where(eq24(insightNotifyState.key, key)).get();
     if (existing) {
-      this.db.update(insightNotifyState).set(row).where(eq23(insightNotifyState.key, key)).run();
+      this.db.update(insightNotifyState).set(row).where(eq24(insightNotifyState.key, key)).run();
     } else {
       this.db.insert(insightNotifyState).values(row).run();
     }
@@ -15167,11 +15246,11 @@ var Notifier = class {
     if (criticalInsights.length > 0) insightEvents.push("insight.critical");
     if (highInsights.length > 0) insightEvents.push("insight.high");
     if (insightEvents.length === 0) return;
-    const notifs = this.db.select().from(notifications).where(eq23(notifications.projectId, projectId)).all().filter((n) => n.enabled);
+    const notifs = this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled);
     if (notifs.length === 0) return;
-    const run = this.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq24(runs.id, runId)).get();
     if (!run) return;
-    const project = this.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) return;
     for (const notif of notifs) {
       const config = notif.config;
@@ -15252,9 +15331,9 @@ var Notifier = class {
     return delivered;
   }
   async dispatchQueuedReviewAlerts(projectId) {
-    const pendingReviews = this.db.select().from(gbpReviews).where(and20(eq23(gbpReviews.projectId, projectId), eq23(gbpReviews.alertState, "pending"))).all();
-    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and20(eq23(gbpReviewRatings.projectId, projectId), eq23(gbpReviewRatings.alertState, "pending"))).all();
-    const project = this.db.select().from(projects).where(eq23(projects.id, projectId)).get();
+    const pendingReviews = this.db.select().from(gbpReviews).where(and21(eq24(gbpReviews.projectId, projectId), eq24(gbpReviews.alertState, "pending"))).all();
+    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and21(eq24(gbpReviewRatings.projectId, projectId), eq24(gbpReviewRatings.alertState, "pending"))).all();
+    const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
     if (!project) return { reviews: 0, ratingDrops: 0, delivered: 0 };
     const chatSendsLeft = /* @__PURE__ */ new Map();
     const now = /* @__PURE__ */ new Date();
@@ -15266,10 +15345,10 @@ var Notifier = class {
         displayName: gbpLocations.displayName,
         mapsUri: gbpLocations.mapsUri,
         reviewsAccess: gbpLocations.reviewsAccess
-      }).from(gbpLocations).where(eq23(gbpLocations.projectId, projectId)).all().map((loc) => [loc.locationName, loc])
+      }).from(gbpLocations).where(eq24(gbpLocations.projectId, projectId)).all().map((loc) => [loc.locationName, loc])
     );
     const v4HasWorked = new Set(
-      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and20(eq23(gbpReviewRatings.projectId, projectId), eq23(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
+      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and21(eq24(gbpReviewRatings.projectId, projectId), eq24(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
     );
     const coveredByBusinessProfile = (locationName) => businessProfileReviewsCover(locations.get(locationName)?.reviewsAccess ?? null, v4HasWorked.has(locationName));
     const locationRef = (locationName) => {
@@ -15298,7 +15377,7 @@ var Notifier = class {
       else if (row.rating === null || row.previousRating === null) setRatingState([row.id], "none");
       else ratingsToSend.push(row);
     }
-    const enabled = this.db.select().from(notifications).where(eq23(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url);
+    const enabled = this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url);
     const subscribedTo = (event) => enabled.filter((n) => (n.config.events ?? []).includes(event));
     const projectRef = { name: project.name, canonicalDomain: project.canonicalDomain };
     const dashboardUrl = `${this.serverUrl}/projects/${project.name}`;
@@ -15352,13 +15431,13 @@ var Notifier = class {
             if (!sent) all = false;
           }
           if (all) {
-            this.db.update(gbpReviews).set({ alertState: "sent", alertStateAt: nowIso }).where(and20(
-              eq23(gbpReviews.id, review.id),
-              eq23(gbpReviews.alertState, "pending"),
-              eq23(gbpReviews.updateTime, review.updateTime),
-              review.alertStateAt === null ? isNull5(gbpReviews.alertStateAt) : eq23(gbpReviews.alertStateAt, review.alertStateAt),
-              review.comment === null ? isNull5(gbpReviews.comment) : eq23(gbpReviews.comment, review.comment),
-              review.starRating === null ? isNull5(gbpReviews.starRating) : eq23(gbpReviews.starRating, review.starRating)
+            this.db.update(gbpReviews).set({ alertState: "sent", alertStateAt: nowIso }).where(and21(
+              eq24(gbpReviews.id, review.id),
+              eq24(gbpReviews.alertState, "pending"),
+              eq24(gbpReviews.updateTime, review.updateTime),
+              review.alertStateAt === null ? isNull5(gbpReviews.alertStateAt) : eq24(gbpReviews.alertStateAt, review.alertStateAt),
+              review.comment === null ? isNull5(gbpReviews.comment) : eq24(gbpReviews.comment, review.comment),
+              review.starRating === null ? isNull5(gbpReviews.starRating) : eq24(gbpReviews.starRating, review.starRating)
             )).run();
           }
         }
@@ -15390,7 +15469,7 @@ var Notifier = class {
         delivered += accepted;
       }
     }
-    log22.info("reviews.dispatched", {
+    log23.info("reviews.dispatched", {
       projectId,
       reviews: reviewsToSend.length,
       ratingDrops: ratingsToSend.length,
@@ -15399,21 +15478,21 @@ var Notifier = class {
     return { reviews: reviewsToSend.length, ratingDrops: ratingsToSend.length, delivered };
   }
   computeTransitions(runId, projectId) {
-    const thisRun = this.db.select().from(runs).where(eq23(runs.id, runId)).get();
+    const thisRun = this.db.select().from(runs).where(eq24(runs.id, runId)).get();
     if (!thisRun) return [];
     const completeness = measurementRunCompleteness(this.db, runId);
     if (completeness.planned && !completeness.complete) {
-      log22.info("transitions.skipped-incomplete", {
+      log23.info("transitions.skipped-incomplete", {
         runId,
         executed: completeness.executed,
         expected: completeness.expected
       });
       return [];
     }
-    const groupSiblings = this.db.select().from(runs).where(and20(
-      eq23(runs.projectId, projectId),
-      eq23(runs.kind, thisRun.kind),
-      eq23(runs.createdAt, thisRun.createdAt),
+    const groupSiblings = this.db.select().from(runs).where(and21(
+      eq24(runs.projectId, projectId),
+      eq24(runs.kind, thisRun.kind),
+      eq24(runs.createdAt, thisRun.createdAt),
       notProbeRun()
     )).all();
     const stillPending = groupSiblings.some((r) => r.status === "queued" || r.status === "running");
@@ -15430,20 +15509,20 @@ var Notifier = class {
       return candidate.id > best.id ? candidate : best;
     });
     if (winner.id !== runId) return [];
-    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq23(projects.id, projectId)).get();
+    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq24(projects.id, projectId)).get();
     const locationCount = Math.max(
       1,
       (projectLocations?.locations ?? []).length
     );
     const RECENT_FETCH_LIMIT = Math.max(8, locationCount * 4);
     const recentRuns = this.db.select().from(runs).where(
-      and20(
-        eq23(runs.projectId, projectId),
-        eq23(runs.kind, thisRun.kind),
-        or2(eq23(runs.status, "completed"), eq23(runs.status, "partial")),
+      and21(
+        eq24(runs.projectId, projectId),
+        eq24(runs.kind, thisRun.kind),
+        or2(eq24(runs.status, "completed"), eq24(runs.status, "partial")),
         notProbeRun()
       )
-    ).orderBy(desc8(runs.createdAt), desc8(runs.id)).limit(RECENT_FETCH_LIMIT).all();
+    ).orderBy(desc9(runs.createdAt), desc9(runs.id)).limit(RECENT_FETCH_LIMIT).all();
     const groups = groupRunsByCreatedAt(recentRuns);
     const currentGroupIdx = groups.findIndex((g) => g[0]?.createdAt === thisRun.createdAt);
     if (currentGroupIdx < 0) return [];
@@ -15458,7 +15537,7 @@ var Notifier = class {
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(queries, eq23(querySnapshots.queryId, queries.id)).where(inArray12(querySnapshots.runId, currentRunIds)).all();
+    }).from(querySnapshots).leftJoin(queries, eq24(querySnapshots.queryId, queries.id)).where(inArray12(querySnapshots.runId, currentRunIds)).all();
     const previousSnapshots = this.db.select({
       queryId: querySnapshots.queryId,
       provider: querySnapshots.provider,
@@ -15488,6 +15567,55 @@ var Notifier = class {
     return transitions;
   }
   /** True only when the destination accepted the payload. Callers that record "already said" must not count an attempt. */
+  /**
+   * Send `traffic.agent.discovered` for bots and agents no rule recognizes:
+   * one message per project listing the names first seen in the last 7 days
+   * that reached 3 hits. A name is decided once: `sent` when a webhook accepted
+   * it, `skipped` when nothing subscribed, so subscribing later starts from new
+   * names, `stale` when first seen before the window, and `baseline` when first
+   * seen in the project's first 7 days of recorded traffic. When every delivery
+   * fails the names stay undecided and the next pass retries them until they
+   * age out of the window. Returns how many names were sent.
+   */
+  async dispatchUnrecognizedAgentAlerts(now = Date.now()) {
+    if (this.unrecognizedAgentDispatchInFlight) return 0;
+    this.unrecognizedAgentDispatchInFlight = true;
+    let sentNames = 0;
+    try {
+      for (const projectId of projectsWithRecentUnrecognizedAgents(this.db, now)) {
+        const { due, stale, baseline } = undecidedUnrecognizedAgents(this.db, projectId, now);
+        recordUnrecognizedAgentDecisions(this.db, projectId, stale, UnrecognizedAgentNotifyStates.stale, now);
+        recordUnrecognizedAgentDecisions(this.db, projectId, baseline, UnrecognizedAgentNotifyStates.baseline, now);
+        if (due.length === 0) continue;
+        const names = due.map((agent) => agent.name);
+        const subscribed = this.db.select().from(notifications).where(eq24(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url && n.config.events.includes("traffic.agent.discovered"));
+        if (subscribed.length === 0) {
+          recordUnrecognizedAgentDecisions(this.db, projectId, names, UnrecognizedAgentNotifyStates.skipped, now);
+          continue;
+        }
+        const project = this.db.select().from(projects).where(eq24(projects.id, projectId)).get();
+        if (!project) continue;
+        const payload = {
+          source: "canonry",
+          event: "traffic.agent.discovered",
+          project: { name: project.name, canonicalDomain: project.canonicalDomain },
+          agents: due,
+          dashboardUrl: `${this.serverUrl}/projects/${project.name}`
+        };
+        let accepted = false;
+        for (const notif of subscribed) {
+          if (await this.sendWebhook(notif.config.url, payload, notif.id, projectId, notif.webhookSecret ?? null)) accepted = true;
+        }
+        if (accepted) {
+          recordUnrecognizedAgentDecisions(this.db, projectId, names, UnrecognizedAgentNotifyStates.sent, now);
+          sentNames += names.length;
+        }
+      }
+    } finally {
+      this.unrecognizedAgentDispatchInFlight = false;
+    }
+    return sentNames;
+  }
   async sendWebhook(url, payload, notificationId, projectId, webhookSecret) {
     const elapsed = startOutcomeTimer();
     const destination = resolveDestination(url);
@@ -15496,7 +15624,7 @@ var Notifier = class {
     const targetLabel = redactNotificationUrl(url).urlDisplay;
     const targetCheck = await resolveWebhookTarget(url, { allowLoopback: this.allowLoopbackWebhooks });
     if (!targetCheck.ok) {
-      log22.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
+      log23.error("webhook.ssrf-blocked", { url: targetLabel, reason: targetCheck.message });
       this.logDelivery(projectId, notificationId, payload.event, "failed", `SSRF: ${targetCheck.message}`);
       const reasonCode = webhookTargetRefusalReason(targetCheck);
       trackWebhookDelivery({
@@ -15509,7 +15637,7 @@ var Notifier = class {
       });
       return false;
     }
-    log22.info("webhook.send", { event: payload.event, url: targetLabel });
+    log23.info("webhook.send", { event: payload.event, url: targetLabel });
     const maxRetries = 3;
     const delays = [1e3, 4e3, 16e3];
     let lastStatusClass = "network";
@@ -15518,13 +15646,13 @@ var Notifier = class {
       try {
         const response = await deliverWebhook(targetCheck.target, body, signingSecret);
         if (response.status >= 200 && response.status < 300) {
-          log22.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
+          log23.info("webhook.delivered", { event: payload.event, url: targetLabel, httpStatus: response.status });
           this.logDelivery(projectId, notificationId, payload.event, "sent", null);
           trackWebhookDelivery({ url, event: payload.event, attempts: attempt + 1, durationBucket: elapsed(), statusClass: "2xx" });
           return true;
         }
         const errorDetail = response.error ?? `HTTP ${response.status}`;
-        log22.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
+        log23.warn("webhook.attempt-failed", { event: payload.event, url: targetLabel, attempt: attempt + 1, maxRetries, httpStatus: response.status, error: errorDetail });
         lastStatusClass = response.status === 0 && response.timedOut ? "timeout" : statusClassOf(response.status);
         lastFailure = { reasonCode: webhookResponseReason(response) ?? "UNKNOWN" };
         if (attempt === maxRetries - 1) {
@@ -15536,7 +15664,7 @@ var Notifier = class {
         lastFailure = outcomeFailure(err);
         if (attempt === maxRetries - 1) {
           this.logDelivery(projectId, notificationId, payload.event, "failed", errorDetail);
-          log22.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
+          log23.error("webhook.exhausted", { event: payload.event, url: targetLabel, maxRetries, error: errorDetail });
         }
       }
       if (attempt < maxRetries - 1) {
@@ -15568,8 +15696,8 @@ var Notifier = class {
 };
 
 // src/run-coordinator.ts
-import { eq as eq24 } from "drizzle-orm";
-var log23 = createLogger("RunCoordinator");
+import { eq as eq25 } from "drizzle-orm";
+var log24 = createLogger("RunCoordinator");
 function reportInsightsGenerated(runTrigger, outcome) {
   trackFeatureCompleted({
     feature: "insights",
@@ -15602,22 +15730,22 @@ var RunCoordinator = class {
    */
   onAnswersRecorded;
   async onRunCompleted(runId, projectId, opts) {
-    const runRow = this.db.select().from(runs).where(eq24(runs.id, runId)).get();
+    const runRow = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
     const kind = runRow?.kind ?? RunKinds["answer-visibility"];
     if (runRow?.trigger === RunTriggers.probe) {
-      log23.info("probe.skip-side-effects", { runId, projectId, kind });
+      log24.info("probe.skip-side-effects", { runId, projectId, kind });
       return;
     }
     if (kind === RunKinds["answer-visibility"] && (runRow?.status === RunStatuses.completed || runRow?.status === RunStatuses.partial) && this.onAnswersRecorded) {
       try {
         await this.onAnswersRecorded(runId, projectId);
       } catch (err) {
-        log23.error("answers-recorded.failed", { runId, projectId, error: describeError(err) });
+        log24.error("answers-recorded.failed", { runId, projectId, error: describeError(err) });
       }
     }
     const completeness = measurementRunCompleteness(this.db, runId);
     if (completeness.planned && !completeness.complete) {
-      log23.info("measurement.incomplete-skip-derived", {
+      log24.info("measurement.incomplete-skip-derived", {
         runId,
         projectId,
         executed: completeness.executed,
@@ -15626,7 +15754,7 @@ var RunCoordinator = class {
       try {
         await this.notifier.onRunCompleted(runId, projectId);
       } catch (err) {
-        log23.error("notifier.failed", { runId, error: describeError(err) });
+        log24.error("notifier.failed", { runId, error: describeError(err) });
       }
       return;
     }
@@ -15634,7 +15762,7 @@ var RunCoordinator = class {
       try {
         await this.onSentimentCompleted(runId, projectId);
       } catch {
-        log23.error("sentiment.wakeup-failed", { runId, projectId });
+        log24.error("sentiment.wakeup-failed", { runId, projectId });
       }
     }
     let insightCount = 0;
@@ -15654,12 +15782,12 @@ var RunCoordinator = class {
             try {
               await this.onInsightsGenerated(runId, projectId, result);
             } catch (err) {
-              log23.error("insight-webhook.failed", { runId, error: describeError(err) });
+              log24.error("insight-webhook.failed", { runId, error: describeError(err) });
             }
           }
         }
       } catch (err) {
-        log23.error("intelligence.failed", { runId, error: describeError(err) });
+        log24.error("intelligence.failed", { runId, error: describeError(err) });
         insightsOutcome = { status: OutcomeStatuses.failed, ...outcomeFailure(err), durationBucket: elapsed() };
       }
       reportInsightsGenerated(runRow?.trigger, insightsOutcome);
@@ -15677,24 +15805,24 @@ var RunCoordinator = class {
           try {
             await this.onInsightsGenerated(runId, projectId, analysisResultFromInsights(gbpInsights));
           } catch (err) {
-            log23.error("gbp-insight-webhook.failed", { runId, error: describeError(err) });
+            log24.error("gbp-insight-webhook.failed", { runId, error: describeError(err) });
           }
         }
       } catch (err) {
-        log23.error("gbp-intelligence.failed", { runId, error: describeError(err) });
+        log24.error("gbp-intelligence.failed", { runId, error: describeError(err) });
         insightsOutcome = { status: OutcomeStatuses.failed, ...outcomeFailure(err), durationBucket: elapsed() };
       }
       reportInsightsGenerated(runRow?.trigger, insightsOutcome);
       try {
         await this.notifier.dispatchReviewAlerts(projectId);
       } catch (err) {
-        log23.error("review-webhook.failed", { runId, error: describeError(err) });
+        log24.error("review-webhook.failed", { runId, error: describeError(err) });
       }
     }
     try {
       await (opts ? this.notifier.onRunCompleted(runId, projectId, opts) : this.notifier.onRunCompleted(runId, projectId));
     } catch (err) {
-      log23.error("notifier.failed", { runId, error: describeError(err) });
+      log24.error("notifier.failed", { runId, error: describeError(err) });
     }
     if (this.onAeroEvent) {
       try {
@@ -15707,7 +15835,7 @@ var RunCoordinator = class {
         };
         await this.onAeroEvent(ctx);
       } catch (err) {
-        log23.error("aero.failed", { runId, error: describeError(err) });
+        log24.error("aero.failed", { runId, error: describeError(err) });
       }
     }
   }
@@ -15722,7 +15850,7 @@ var RunCoordinator = class {
    * so the Aero queue is never starved of a follow-up.
    */
   buildDiscoveryAeroContext(runId, projectId, status, error) {
-    const session = this.db.select().from(discoverySessions).where(eq24(discoverySessions.runId, runId)).get();
+    const session = this.db.select().from(discoverySessions).where(eq25(discoverySessions.runId, runId)).get();
     const competitorMap = session ? session.competitorMap : [];
     return {
       kind: RunKinds["aeo-discover-probe"],
@@ -15765,12 +15893,12 @@ function analysisResultFromInsights(insights2) {
 
 // src/agent/session-registry.ts
 import crypto23 from "crypto";
-import { eq as eq27 } from "drizzle-orm";
+import { eq as eq28 } from "drizzle-orm";
 
 // src/agent/remote-mcp.ts
 import { Type } from "@earendil-works/pi-ai";
 import { Client, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
-var log24 = createLogger("RemoteMcp");
+var log25 = createLogger("RemoteMcp");
 var AERO_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([]);
 async function connectStreamableHttp(server) {
   const transport = new StreamableHTTPClientTransport(new URL(server.url), {
@@ -15838,7 +15966,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
     try {
       client = await connect(server);
     } catch (err) {
-      log24.error("external-mcp.connect-failed", {
+      log25.error("external-mcp.connect-failed", {
         label,
         error: describeError(err)
       });
@@ -15848,7 +15976,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
     try {
       listed = await client.listTools();
     } catch (err) {
-      log24.error("external-mcp.list-failed", {
+      log25.error("external-mcp.list-failed", {
         label,
         error: describeError(err)
       });
@@ -15859,7 +15987,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
       if (!isReadOnly(tool)) continue;
       tools.push(adaptRemoteTool(client, tool));
     }
-    log24.info("external-mcp.loaded", {
+    log25.info("external-mcp.loaded", {
       label,
       discovered: listed.tools.length,
       adopted: tools.length
@@ -15870,7 +15998,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
 
 // src/agent/memory-store.ts
 import crypto22 from "crypto";
-import { and as and21, desc as desc9, eq as eq25, like, sql as sql10, or as or3 } from "drizzle-orm";
+import { and as and22, desc as desc10, eq as eq26, like, sql as sql11, or as or3 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto(row) {
@@ -15884,7 +16012,7 @@ function rowToDto(row) {
   };
 }
 function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq25(agentMemory.projectId, projectId)).orderBy(desc9(agentMemory.updatedAt));
+  const query = db.select().from(agentMemory).where(eq26(agentMemory.projectId, projectId)).orderBy(desc10(agentMemory.updatedAt));
   const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
   return rows.map(rowToDto);
 }
@@ -15915,22 +16043,22 @@ function upsertMemoryEntry(db, args) {
       updatedAt: now
     }
   }).run();
-  const row = db.select().from(agentMemory).where(and21(eq25(agentMemory.projectId, args.projectId), eq25(agentMemory.key, args.key))).get();
+  const row = db.select().from(agentMemory).where(and22(eq26(agentMemory.projectId, args.projectId), eq26(agentMemory.key, args.key))).get();
   if (!row) throw new Error("memory upsert produced no row");
   return rowToDto(row);
 }
 function deleteMemoryEntry(db, projectId, key) {
-  const result = db.delete(agentMemory).where(and21(eq25(agentMemory.projectId, projectId), eq25(agentMemory.key, key))).run();
+  const result = db.delete(agentMemory).where(and22(eq26(agentMemory.projectId, projectId), eq26(agentMemory.key, key))).run();
   const changes = result.changes ?? 0;
   return changes > 0;
 }
 function loadRecentForHydrate(db, projectId, limit, sessionId) {
   if (sessionId === void 0) return listMemoryEntries(db, projectId, { limit });
   const sessionPrefix = `compaction:${sessionId ?? ""}:`;
-  return db.select().from(agentMemory).where(and21(
-    eq25(agentMemory.projectId, projectId),
-    or3(sql10`substr(${agentMemory.key}, 1, ${COMPACTION_KEY_PREFIX.length}) <> ${COMPACTION_KEY_PREFIX}`, sessionId ? sql10`substr(${agentMemory.key}, 1, ${sessionPrefix.length}) = ${sessionPrefix}` : void 0)
-  )).orderBy(desc9(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
+  return db.select().from(agentMemory).where(and22(
+    eq26(agentMemory.projectId, projectId),
+    or3(sql11`substr(${agentMemory.key}, 1, ${COMPACTION_KEY_PREFIX.length}) <> ${COMPACTION_KEY_PREFIX}`, sessionId ? sql11`substr(${agentMemory.key}, 1, ${sessionPrefix.length}) = ${sessionPrefix}` : void 0)
+  )).orderBy(desc10(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
 }
 function writeCompactionNote(db, args) {
   if (Buffer.byteLength(args.summary, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
@@ -15954,16 +16082,16 @@ function writeCompactionNote(db, args) {
     }).run();
     const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
     const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
-      and21(
-        eq25(agentMemory.projectId, args.projectId),
+      and22(
+        eq26(agentMemory.projectId, args.projectId),
         like(agentMemory.key, `${sessionPrefix}%`)
       )
-    ).orderBy(desc9(agentMemory.updatedAt)).all();
+    ).orderBy(desc10(agentMemory.updatedAt)).all();
     const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
     if (stale.length > 0) {
-      tx.delete(agentMemory).where(sql10`${agentMemory.id} IN (${sql10.join(stale.map((s) => sql10`${s}`), sql10`, `)})`).run();
+      tx.delete(agentMemory).where(sql11`${agentMemory.id} IN (${sql11.join(stale.map((s) => sql11`${s}`), sql11`, `)})`).run();
     }
-    const row = tx.select().from(agentMemory).where(and21(eq25(agentMemory.projectId, args.projectId), eq25(agentMemory.key, key))).get();
+    const row = tx.select().from(agentMemory).where(and22(eq26(agentMemory.projectId, args.projectId), eq26(agentMemory.key, key))).get();
     if (row) inserted = rowToDto(row);
   });
   if (!inserted) throw new Error("compaction note write produced no row");
@@ -16037,7 +16165,7 @@ function trackAeroTurn(agent, turn) {
 }
 
 // src/agent/project-shape.ts
-import { and as and22, count as count4, eq as eq26 } from "drizzle-orm";
+import { and as and23, count as count4, eq as eq27 } from "drizzle-orm";
 var ADVANCED_TOOLS = [
   "canonry_measurement_portfolio_summary",
   "canonry_measurement_overview",
@@ -16064,10 +16192,10 @@ var ADVANCED_ROUTES = [
 ];
 function aeroProjectShape(db, projectId) {
   try {
-    const pointer = db.select().from(measurementPlans).where(eq26(measurementPlans.projectId, projectId)).get();
-    const version = pointer ? db.select().from(measurementPlanVersions).where(and22(
-      eq26(measurementPlanVersions.projectId, projectId),
-      eq26(measurementPlanVersions.id, pointer.activeVersionId)
+    const pointer = db.select().from(measurementPlans).where(eq27(measurementPlans.projectId, projectId)).get();
+    const version = pointer ? db.select().from(measurementPlanVersions).where(and23(
+      eq27(measurementPlanVersions.projectId, projectId),
+      eq27(measurementPlanVersions.id, pointer.activeVersionId)
     )).get() : void 0;
     if (version) {
       const plan = JSON.parse(version.canonicalJson);
@@ -16094,7 +16222,7 @@ canonry_visibility_report describes the whole project, not one Property. canonry
         pinned: ADVANCED_TOOLS
       };
     }
-    const tracked = db.select({ total: count4() }).from(queries).where(eq26(queries.projectId, projectId)).get()?.total ?? 0;
+    const tracked = db.select({ total: count4() }).from(queries).where(eq27(queries.projectId, projectId)).get()?.total ?? 0;
     return {
       prompt: `
 
@@ -16234,7 +16362,7 @@ async function compactMessages(args) {
 }
 
 // src/agent/session-registry.ts
-var log25 = createLogger("SessionRegistry");
+var log26 = createLogger("SessionRegistry");
 var MAX_HYDRATE_NOTES = 20;
 var MAX_HYDRATE_BYTES = 32 * 1024;
 function escapeMemoryFragment(value) {
@@ -16293,7 +16421,7 @@ var SessionRegistry = class {
     if (!this.externalToolsPromise) {
       this.externalToolsPromise = loadExternalMcpTools(this.opts.config.externalMcpServers).catch(
         (err) => {
-          log25.error("external-mcp.load-failed", {
+          log26.error("external-mcp.load-failed", {
             error: describeError(err)
           });
           return [];
@@ -16350,7 +16478,7 @@ var SessionRegistry = class {
           modelProvider: effectiveProvider,
           modelId: effectiveModelId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(eq27(agentSessions.projectId, projectId)).run();
+        }).where(eq28(agentSessions.projectId, projectId)).run();
       }
       const agent2 = createAeroSession({
         projectName,
@@ -16569,13 +16697,13 @@ ${lines.join("\n")}
       agent.state.messages = result.messages;
       setAeroSystemPrompt(agent, this.buildHydratedSystemPrompt(projectId, row.systemPrompt));
       this.save(projectName);
-      log25.info("compaction.completed", {
+      log26.info("compaction.completed", {
         projectName,
         removedCount: result.removedCount,
         summaryBytes: Buffer.byteLength(result.summary, "utf8")
       });
     } catch (err) {
-      log25.error("compaction.failed", {
+      log26.error("compaction.failed", {
         projectName,
         error: describeError(err)
       });
@@ -16669,7 +16797,7 @@ ${lines.join("\n")}
       modelProvider: nextProvider,
       modelId: nextModelId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq27(agentSessions.projectId, projectId)).run();
+    }).where(eq28(agentSessions.projectId, projectId)).run();
   }
   /** Snapshot pending work without consuming it before an atomic conversation switch. */
   prepareConversationChange(projectName) {
@@ -16753,7 +16881,7 @@ ${lines.join("\n")}
       }
       trackAeroTurn(agent, { trigger: OutcomeTriggers.agent });
     } catch (err) {
-      log25.error("drain.failed", {
+      log26.error("drain.failed", {
         projectName,
         error: describeError(err)
       });
@@ -16850,11 +16978,11 @@ ${lines.join("\n")}
     return id;
   }
   tryResolveProjectId(projectName) {
-    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq27(projects.name, projectName)).get();
+    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq28(projects.name, projectName)).get();
     return row?.id;
   }
   loadRow(projectId) {
-    const row = this.opts.db.select().from(agentSessions).where(eq27(agentSessions.projectId, projectId)).get();
+    const row = this.opts.db.select().from(agentSessions).where(eq28(agentSessions.projectId, projectId)).get();
     return row ?? null;
   }
   insertRow(params) {
@@ -16874,7 +17002,7 @@ ${lines.join("\n")}
   }
   updateRow(projectId, patch) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq27(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq28(agentSessions.projectId, projectId)).run();
   }
   /**
    * Store a refreshed prompt snapshot without touching `updatedAt`, which the
@@ -16883,13 +17011,13 @@ ${lines.join("\n")}
    * recently used right after an upgrade.
    */
   persistPromptSnapshot(projectId, systemPrompt) {
-    this.opts.db.update(agentSessions).set({ systemPrompt }).where(eq27(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ systemPrompt }).where(eq28(agentSessions.projectId, projectId)).run();
   }
 };
 
 // src/agent/viewer-sessions.ts
 import crypto24 from "crypto";
-import { and as and23, eq as eq28, isNotNull as isNotNull4, like as like2 } from "drizzle-orm";
+import { and as and24, eq as eq29, isNotNull as isNotNull4, like as like2 } from "drizzle-orm";
 var AERO_VIEWER_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
   CanonryMcpToolNames.canonry_ads_account,
   CanonryMcpToolNames.canonry_ads_geo_search,
@@ -17066,12 +17194,12 @@ var ViewerAeroSessions = class {
    */
   removeKey(id) {
     try {
-      this.opts.db.delete(apiKeys).where(eq28(apiKeys.id, id)).run();
+      this.opts.db.delete(apiKeys).where(eq29(apiKeys.id, id)).run();
     } catch {
       try {
         this.opts.db.transaction((tx) => {
-          tx.delete(dashboardSessions).where(eq28(dashboardSessions.apiKeyId, id)).run();
-          tx.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq28(apiKeys.id, id)).run();
+          tx.delete(dashboardSessions).where(eq29(dashboardSessions.apiKeyId, id)).run();
+          tx.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq29(apiKeys.id, id)).run();
         });
       } catch {
       }
@@ -17084,7 +17212,7 @@ var ViewerAeroSessions = class {
    */
   revokeOrphanedKeys() {
     try {
-      this.opts.db.delete(apiKeys).where(and23(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull4(apiKeys.delegatedUserId))).run();
+      this.opts.db.delete(apiKeys).where(and24(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull4(apiKeys.delegatedUserId))).run();
     } catch {
     }
   }
@@ -17101,7 +17229,7 @@ var ViewerAeroSessions = class {
 // src/mcp-http.ts
 import crypto25 from "crypto";
 import { isIP } from "net";
-import { and as and24, eq as eq29, isNull as isNull6 } from "drizzle-orm";
+import { and as and25, eq as eq30, isNull as isNull6 } from "drizzle-orm";
 import { NodeStreamableHTTPServerTransport, toNodeHandler, toWebRequest } from "@modelcontextprotocol/node";
 import { McpServer, createMcpHandler, isInitializeRequest, isLegacyRequest } from "@modelcontextprotocol/server";
 var SESSION_IDLE_MS = 10 * 60 * 1e3;
@@ -17207,12 +17335,12 @@ function registerMcpHttpRoutes(scope, opts) {
     try {
       withoutLockWait(() => {
         opts.db.transaction((tx) => {
-          tx.delete(dashboardSessions).where(eq29(dashboardSessions.apiKeyId, id)).run();
-          tx.update(apiKeys).set({ revokedAt: new Date(now()).toISOString() }).where(and24(eq29(apiKeys.id, id), isNull6(apiKeys.revokedAt))).run();
+          tx.delete(dashboardSessions).where(eq30(dashboardSessions.apiKeyId, id)).run();
+          tx.update(apiKeys).set({ revokedAt: new Date(now()).toISOString() }).where(and25(eq30(apiKeys.id, id), isNull6(apiKeys.revokedAt))).run();
         });
         if (remove) {
           try {
-            opts.db.delete(apiKeys).where(eq29(apiKeys.id, id)).run();
+            opts.db.delete(apiKeys).where(eq30(apiKeys.id, id)).run();
           } catch (error) {
             scope.log.warn({ err: error, keyId: id }, "Retained revoked MCP request key after deletion failed");
           }
@@ -17263,14 +17391,14 @@ function registerMcpHttpRoutes(scope, opts) {
       withoutLockWait(() => {
         const cutoff = now() - SESSION_IDLE_MS;
         for (const session of legacyServers) {
-          const key = session.sessionKeyId ? opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq29(apiKeys.id, session.sessionKeyId)).get() : void 0;
+          const key = session.sessionKeyId ? opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq30(apiKeys.id, session.sessionKeyId)).get() : void 0;
           if (session.lastSeenAt < cutoff || session.expiresAt !== void 0 && session.expiresAt <= now() || session.sessionKeyId && (!key || key.revokedAt)) {
             void session.close().catch((error) => scope.log.error({ err: error }, "Failed to close expired MCP session"));
           }
         }
         for (const exchange of modernExchanges) {
           if (!exchange.sessionKey) continue;
-          const key = opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq29(apiKeys.id, exchange.sessionKey.id)).get();
+          const key = opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq30(apiKeys.id, exchange.sessionKey.id)).get();
           if (!key || key.revokedAt || exchange.sessionKey.expiresAt <= now()) {
             void exchange.close().catch((error) => scope.log.error({ err: error }, "Failed to close expired MCP request"));
           }
@@ -17520,7 +17648,7 @@ function registerMcpHttpRoutes(scope, opts) {
 }
 
 // src/agent/agent-routes.ts
-import { eq as eq30 } from "drizzle-orm";
+import { eq as eq31 } from "drizzle-orm";
 function viewerAeroCaller(request, opts) {
   if (!opts.viewerSessions) return null;
   const principal = request.principal;
@@ -17560,7 +17688,7 @@ function turnAttribution(request) {
   };
 }
 function resolveProject(db, name) {
-  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq30(projects.name, name)).get();
+  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq31(projects.name, name)).get();
   if (!row) throw notFound("project", name);
   return row;
 }
@@ -17679,7 +17807,7 @@ function registerAgentRoutes(app, opts) {
       }
       requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
-      const row = opts.db.select().from(agentSessions).where(eq30(agentSessions.projectId, project.id)).get();
+      const row = opts.db.select().from(agentSessions).where(eq31(agentSessions.projectId, project.id)).get();
       const nextTurn = opts.sessionRegistry.nextTurnModel(project.name);
       if (!row) {
         return { conversationId: null, messages: [], modelProvider: null, modelId: null, nextTurn, updatedAt: null };
@@ -17721,7 +17849,7 @@ function registerAgentRoutes(app, opts) {
       const project = resolveProject(opts.db, request.params.name);
       if (opts.sessionRegistry.isBusy(project.name)) throw agentBusy(project.name);
       opts.sessionRegistry.reset(project.name);
-      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq30(agentSessions.projectId, project.id)).run();
+      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq31(agentSessions.projectId, project.id)).run();
       return { status: "reset" };
     }
   );
@@ -17745,7 +17873,7 @@ function registerAgentRoutes(app, opts) {
       return streamViewerTurn(opts, project, viewerId, body, reply, turnAttribution(request));
     }
     if (body.conversationId !== void 0) {
-      const current = opts.db.select({ id: agentSessions.id }).from(agentSessions).where(eq30(agentSessions.projectId, project.id)).get();
+      const current = opts.db.select({ id: agentSessions.id }).from(agentSessions).where(eq31(agentSessions.projectId, project.id)).get();
       if ((current?.id ?? null) !== body.conversationId) throw validationError("The active conversation changed. Reload the conversation before sending.");
     }
     const promptText = body.prompt;
@@ -18156,7 +18284,7 @@ function stripHtml(html) {
 }
 
 // src/snapshot-service.ts
-var log26 = createLogger("Snapshot");
+var log27 = createLogger("Snapshot");
 var ANALYSIS_PROVIDER_PRIORITY = ["openai", "claude", "gemini", "perplexity", "muse", "local"];
 var SNAPSHOT_QUERY_COUNT = 6;
 var SnapshotService = class {
@@ -18258,7 +18386,7 @@ var SnapshotService = class {
       return mapAuditReport(report);
     } catch (err) {
       const message = describeError(err);
-      log26.warn("audit.failed", { homepageUrl, error: message });
+      log27.warn("audit.failed", { homepageUrl, error: message });
       return {
         url: homepageUrl,
         finalUrl: homepageUrl,
@@ -18287,7 +18415,7 @@ var SnapshotService = class {
           queries: parsedQueries
         };
       } catch (err) {
-        log26.warn("profile.generation-failed", {
+        log27.warn("profile.generation-failed", {
           domain: ctx.domain,
           provider: ctx.analysisProvider.adapter.name,
           error: describeError(err)
@@ -18435,7 +18563,7 @@ var SnapshotService = class {
         recommendedActions: uniqueStrings2(parsed.recommendedActions ?? []).slice(0, 4)
       };
     } catch (err) {
-      log26.warn("response.analysis-failed", {
+      log27.warn("response.analysis-failed", {
         provider: ctx.analysisProvider.adapter.name,
         error: describeError(err)
       });
@@ -18705,7 +18833,7 @@ function clipText(value, length) {
 }
 
 // src/research-runner.ts
-import { and as and25, eq as eq31, inArray as inArray13, sql as sql11 } from "drizzle-orm";
+import { and as and26, eq as eq32, inArray as inArray13, sql as sql12 } from "drizzle-orm";
 var unfinishedResearchQueryStatuses = [ResearchQueryStatuses.queued, ResearchQueryStatuses.running];
 function finalResearchRunStatus(completed, failed, waiting) {
   if (waiting > 0) return ResearchRunStatuses["waiting-upstream"];
@@ -18713,13 +18841,13 @@ function finalResearchRunStatus(completed, failed, waiting) {
   return completed > 0 ? ResearchRunStatuses.partial : ResearchRunStatuses.failed;
 }
 async function executeResearchRun(db, registry, runId, projectId, options = {}) {
-  const run = db.select().from(researchRuns).where(and25(eq31(researchRuns.id, runId), eq31(researchRuns.projectId, projectId))).get();
+  const run = db.select().from(researchRuns).where(and26(eq32(researchRuns.id, runId), eq32(researchRuns.projectId, projectId))).get();
   if (!run || run.status !== ResearchRunStatuses.queued) return;
-  const project = db.select().from(projects).where(eq31(projects.id, projectId)).get();
+  const project = db.select().from(projects).where(eq32(projects.id, projectId)).get();
   if (!project) return;
   const provider = registry.get(run.provider);
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and25(eq31(researchRuns.id, runId), eq31(researchRuns.status, ResearchRunStatuses.queued))).run();
+  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and26(eq32(researchRuns.id, runId), eq32(researchRuns.status, ResearchRunStatuses.queued))).run();
   if (claim.changes !== 1) return;
   const elapsed = startOutcomeTimer();
   const requested = currentOutcomeOrigin();
@@ -18753,8 +18881,8 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
     }
     reserved = run.totalQueries;
     reservation = { scope, period };
-    const rows = db.select().from(researchRunQueries).where(eq31(researchRunQueries.researchRunId, runId)).orderBy(researchRunQueries.position).all();
-    const competitorRows = db.select(competitorIdentityColumns).from(competitors).where(eq31(competitors.projectId, projectId)).orderBy(competitors.domain).all();
+    const rows = db.select().from(researchRunQueries).where(eq32(researchRunQueries.researchRunId, runId)).orderBy(researchRunQueries.position).all();
+    const competitorRows = db.select(competitorIdentityColumns).from(competitors).where(eq32(competitors.projectId, projectId)).orderBy(competitors.domain).all();
     const competitorDomains = competitorRows.map((row) => row.domain);
     const competitorAliases = new Map(competitorRows.map((row) => [row.domain, competitorIdentityAliases(row)]).filter(([, aliases]) => aliases.length > 0));
     const domains = effectiveDomains(project);
@@ -18764,7 +18892,7 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
     await mapWithConcurrency(rows, Math.max(1, provider.config.quotaPolicy.maxConcurrency), async (row) => {
       try {
         const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and25(eq31(researchRunQueries.id, row.id), eq31(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
+        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and26(eq32(researchRunQueries.id, row.id), eq32(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
         const raw = await gate.run(async () => {
           dispatched++;
           return provider.adapter.executeTrackedQuery({ query: row.queryText, canonicalDomains: domains, competitorDomains, ...run.location ? { location: run.location } : {} }, config);
@@ -18795,7 +18923,7 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
           rawResponse: raw.rawResponse,
           answerEvidence: raw.evidence ?? null,
           finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(and25(eq31(researchRunQueries.id, row.id), eq31(researchRunQueries.status, ResearchQueryStatuses.running))).run();
+        }).where(and26(eq32(researchRunQueries.id, row.id), eq32(researchRunQueries.status, ResearchQueryStatuses.running))).run();
         if (completed.changes === 1) incrementResearchProgress(db, runId, "completedQueries");
       } catch (error) {
         if (!(error instanceof IncompleteAnswerError && error.resumable)) queryFailure ??= error;
@@ -18846,11 +18974,11 @@ function researchOutcomeStatus(status) {
   }
 }
 function incrementResearchProgress(db, runId, column) {
-  db.update(researchRuns).set({ [column]: sql11`${researchRuns[column]} + 1` }).where(eq31(researchRuns.id, runId)).run();
+  db.update(researchRuns).set({ [column]: sql12`${researchRuns[column]} + 1` }).where(eq32(researchRuns.id, runId)).run();
 }
 function markResearchQueryFailed(db, runId, queryId, error) {
   const message = describeError(error);
-  const unfinished = and25(eq31(researchRunQueries.id, queryId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses));
+  const unfinished = and26(eq32(researchRunQueries.id, queryId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses));
   if (error instanceof IncompleteAnswerError && error.resumable) {
     db.update(researchRunQueries).set({
       status: ResearchQueryStatuses["waiting-upstream"],
@@ -18866,10 +18994,10 @@ function markResearchQueryFailed(db, runId, queryId, error) {
   if (failed.changes === 1) incrementResearchProgress(db, runId, "failedQueries");
 }
 function markUnfinishedResearchQueriesFailed(db, runId, error) {
-  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and25(eq31(researchRunQueries.researchRunId, runId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
+  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and26(eq32(researchRunQueries.researchRunId, runId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
 }
 function finalizeResearchRun(db, runId, fatalError) {
-  const rows = db.select({ status: researchRunQueries.status }).from(researchRunQueries).where(eq31(researchRunQueries.researchRunId, runId)).all();
+  const rows = db.select({ status: researchRunQueries.status }).from(researchRunQueries).where(eq32(researchRunQueries.researchRunId, runId)).all();
   const completed = rows.filter((row) => row.status === ResearchQueryStatuses.completed).length;
   const failed = rows.filter((row) => row.status === ResearchQueryStatuses.failed).length;
   const waiting = rows.filter((row) => row.status === ResearchQueryStatuses["waiting-upstream"]).length;
@@ -18881,12 +19009,12 @@ function finalizeResearchRun(db, runId, fatalError) {
     error: fatalError ?? (failed === rows.length ? "Every research query failed." : null),
     // A run waiting on upstream jobs has not finished.
     finishedAt: waiting > 0 ? null : (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq31(researchRuns.id, runId)).run();
+  }).where(eq32(researchRuns.id, runId)).run();
   return { status, total: rows.length, completed, failed };
 }
 
 // src/google-marketing-sync.ts
-import { and as and26, eq as eq32, isNull as isNull7, sql as sql12 } from "drizzle-orm";
+import { and as and27, eq as eq33, isNull as isNull7, sql as sql13 } from "drizzle-orm";
 var RUNTIME_FAILURE_REASONS = {
   INVALID_INPUT: OutcomeReasonCodes.VALIDATION,
   NOT_CONFIGURED: OutcomeReasonCodes.NOT_CONNECTED,
@@ -18923,10 +19051,10 @@ function assertSnapshotContext(metadata, expected) {
   }
 }
 function requireSyncRun(db, runId, projectId, kind) {
-  const run = db.select().from(runs).where(and26(
-    eq32(runs.id, runId),
-    eq32(runs.projectId, projectId),
-    eq32(runs.kind, kind)
+  const run = db.select().from(runs).where(and27(
+    eq33(runs.id, runId),
+    eq33(runs.projectId, projectId),
+    eq33(runs.kind, kind)
   )).get();
   if (!run) throw withOutcomeReason(new Error(`Run ${runId} is not a ${kind} run for this project.`), OutcomeReasonCodes.NOT_FOUND);
   if (run.status !== RunStatuses.queued) {
@@ -18942,19 +19070,19 @@ function markFailed(db, runId, projectId, kind, expectedStatus, error) {
     status: RunStatuses.failed,
     error: serializeRunError({ message: safeErrorMessage(error) }),
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(and26(
-    eq32(runs.id, runId),
-    eq32(runs.projectId, projectId),
-    eq32(runs.kind, kind),
-    eq32(runs.status, expectedStatus)
+  }).where(and27(
+    eq33(runs.id, runId),
+    eq33(runs.projectId, projectId),
+    eq33(runs.kind, kind),
+    eq33(runs.status, expectedStatus)
   )).run();
 }
 function claimSyncRun(db, runId, projectId, kind, startedAt) {
-  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and26(
-    eq32(runs.id, runId),
-    eq32(runs.projectId, projectId),
-    eq32(runs.kind, kind),
-    eq32(runs.status, RunStatuses.queued)
+  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and27(
+    eq33(runs.id, runId),
+    eq33(runs.projectId, projectId),
+    eq33(runs.kind, kind),
+    eq33(runs.status, RunStatuses.queued)
   )).run();
   return claim.changes === 1;
 }
@@ -18964,9 +19092,9 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
   let evidenceCollected = false;
   try {
     requireSyncRun(db, runId, projectId, RunKinds["google-ads-sync"]);
-    const project = db.select().from(projects).where(eq32(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq33(projects.id, projectId)).get();
     if (!project) throw withOutcomeReason(new Error(`Project ${projectId} was not found.`), OutcomeReasonCodes.NOT_FOUND);
-    const connection = db.select().from(googleAdsConnections).where(eq32(googleAdsConnections.projectId, projectId)).get();
+    const connection = db.select().from(googleAdsConnections).where(eq33(googleAdsConnections.projectId, projectId)).get();
     if (!connection?.selectedCustomerId) {
       throw withOutcomeReason(new Error("Google Ads needs a selected customer before it can sync."), OutcomeReasonCodes.ACCOUNT_NOT_FOUND);
     }
@@ -19018,11 +19146,11 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and26(
-        eq32(runs.id, runId),
-        eq32(runs.projectId, projectId),
-        eq32(runs.kind, RunKinds["google-ads-sync"]),
-        eq32(runs.status, RunStatuses.running)
+      }).where(and27(
+        eq33(runs.id, runId),
+        eq33(runs.projectId, projectId),
+        eq33(runs.kind, RunKinds["google-ads-sync"]),
+        eq33(runs.status, RunStatuses.running)
       )).run();
       if (terminalClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19042,12 +19170,12 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         lastMetricsSnapshotAt: result.metrics?.metadata.capturedAt ?? connection.lastMetricsSnapshotAt,
         lastMetricsSnapshotId: result.metrics?.metadata.id ?? connection.lastMetricsSnapshotId,
         updatedAt: finishedAt
-      }).where(and26(
-        eq32(googleAdsConnections.id, connection.id),
-        eq32(googleAdsConnections.projectId, projectId),
-        eq32(googleAdsConnections.selectedCustomerId, connection.selectedCustomerId),
-        connection.selectedLoginCustomerId === null ? isNull7(googleAdsConnections.selectedLoginCustomerId) : eq32(googleAdsConnections.selectedLoginCustomerId, connection.selectedLoginCustomerId),
-        eq32(googleAdsConnections.selectionGeneration, connection.selectionGeneration)
+      }).where(and27(
+        eq33(googleAdsConnections.id, connection.id),
+        eq33(googleAdsConnections.projectId, projectId),
+        eq33(googleAdsConnections.selectedCustomerId, connection.selectedCustomerId),
+        connection.selectedLoginCustomerId === null ? isNull7(googleAdsConnections.selectedLoginCustomerId) : eq33(googleAdsConnections.selectedLoginCustomerId, connection.selectedLoginCustomerId),
+        eq33(googleAdsConnections.selectionGeneration, connection.selectionGeneration)
       )).run();
       if (connectionClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19087,9 +19215,9 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
   let evidenceCollected = false;
   try {
     requireSyncRun(db, runId, projectId, RunKinds["gtm-sync"]);
-    const project = db.select().from(projects).where(eq32(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq33(projects.id, projectId)).get();
     if (!project) throw withOutcomeReason(new Error(`Project ${projectId} was not found.`), OutcomeReasonCodes.NOT_FOUND);
-    const connection = db.select().from(gtmConnections).where(eq32(gtmConnections.projectId, projectId)).get();
+    const connection = db.select().from(gtmConnections).where(eq33(gtmConnections.projectId, projectId)).get();
     if (!connection?.selectedAccountId || !connection.selectedContainerId) {
       throw withOutcomeReason(new Error("GTM needs a selected account and container before it can sync."), OutcomeReasonCodes.ACCOUNT_NOT_FOUND);
     }
@@ -19127,11 +19255,11 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and26(
-        eq32(runs.id, runId),
-        eq32(runs.projectId, projectId),
-        eq32(runs.kind, RunKinds["gtm-sync"]),
-        eq32(runs.status, RunStatuses.running)
+      }).where(and27(
+        eq33(runs.id, runId),
+        eq33(runs.projectId, projectId),
+        eq33(runs.kind, RunKinds["gtm-sync"]),
+        eq33(runs.status, RunStatuses.running)
       )).run();
       if (terminalClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19146,19 +19274,19 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         selectedWorkspaceName: selectedWorkspace?.name ?? null,
         ...workspaceReplaced ? {
           selectedWorkspaceId: workspaceId,
-          selectionGeneration: sql12`${gtmConnections.selectionGeneration} + 1`
+          selectionGeneration: sql13`${gtmConnections.selectionGeneration} + 1`
         } : {},
         lastValidatedAt: snapshot.metadata.capturedAt,
         lastSnapshotAt: snapshot.metadata.capturedAt,
         lastSnapshotId: snapshot.metadata.id,
         updatedAt: finishedAt
-      }).where(and26(
-        eq32(gtmConnections.id, connection.id),
-        eq32(gtmConnections.projectId, projectId),
-        eq32(gtmConnections.selectedAccountId, connection.selectedAccountId),
-        eq32(gtmConnections.selectedContainerId, connection.selectedContainerId),
-        connection.selectedWorkspaceId === null ? isNull7(gtmConnections.selectedWorkspaceId) : eq32(gtmConnections.selectedWorkspaceId, connection.selectedWorkspaceId),
-        eq32(gtmConnections.selectionGeneration, connection.selectionGeneration)
+      }).where(and27(
+        eq33(gtmConnections.id, connection.id),
+        eq33(gtmConnections.projectId, projectId),
+        eq33(gtmConnections.selectedAccountId, connection.selectedAccountId),
+        eq33(gtmConnections.selectedContainerId, connection.selectedContainerId),
+        connection.selectedWorkspaceId === null ? isNull7(gtmConnections.selectedWorkspaceId) : eq33(gtmConnections.selectedWorkspaceId, connection.selectedWorkspaceId),
+        eq33(gtmConnections.selectionGeneration, connection.selectionGeneration)
       )).run();
       if (connectionClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19196,7 +19324,7 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
 // src/server.ts
 var _require = createRequire(import.meta.url);
 var { version: PKG_VERSION } = _require("../package.json");
-var log27 = createLogger("Server");
+var log28 = createLogger("Server");
 var runtimeStartupByServer = /* @__PURE__ */ new WeakMap();
 function waitForServerRuntimeStartup(app) {
   const startup = runtimeStartupByServer.get(app);
@@ -19446,7 +19574,7 @@ function applyLegacyCredentials(rows, config, persistConfigPatch = saveConfigPat
   }
   if (migratedGoogle > 0) {
     persistConfigPatch({ google: config.google });
-    log27.info("credentials.migrated", { type: "google", count: migratedGoogle });
+    log28.info("credentials.migrated", { type: "google", count: migratedGoogle });
   }
   let migratedGa4 = 0;
   for (const row of rows.ga4) {
@@ -19464,7 +19592,7 @@ function applyLegacyCredentials(rows, config, persistConfigPatch = saveConfigPat
   }
   if (migratedGa4 > 0) {
     persistConfigPatch({ ga4: config.ga4 });
-    log27.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
+    log28.info("credentials.migrated", { type: "ga4", count: migratedGa4 });
   }
 }
 function isLoopbackPeerAddress(address) {
@@ -19747,17 +19875,17 @@ async function createServer(opts) {
       applyLegacyCredentials(legacyRows, opts.config, persistConfigPatch);
       dropLegacyCredentialColumns(opts.db);
     } catch (err) {
-      log27.warn("credentials.migration.failed", {
+      log28.warn("credentials.migration.failed", {
         error: describeError(err)
       });
     }
   }
-  log27.info("providers.configured", {
+  log28.info("providers.configured", {
     providers: registeredProviderNames({ providers, cdp: opts.config.cdp })
   });
   registry.replace(configuredProviderEntries(opts.config, API_ADAPTERS, cdpChatgptAdapter));
   for (const name of providersWithUnsupportedBatch(providers, (provider) => adapterMap[provider])) {
-    log27.warn("provider.batch.unsupported", {
+    log28.warn("provider.batch.unsupported", {
       provider: name,
       message: `providers.${name}.batch.enabled is true, but the ${name} adapter has no batch API; its sweeps run sync.`
     });
@@ -19814,7 +19942,7 @@ async function createServer(opts) {
     async (ctx) => {
       if (!sessionRegistry) return;
       if (!agentProactive) return;
-      const project = opts.db.select({ name: projects.name }).from(projects).where(eq33(projects.id, ctx.projectId)).get();
+      const project = opts.db.select({ name: projects.name }).from(projects).where(eq34(projects.id, ctx.projectId)).get();
       if (!project) return;
       let content;
       if (ctx.kind === RunKinds["aeo-discover-probe"]) {
@@ -20243,6 +20371,7 @@ async function createServer(opts) {
   };
   let stopSiteLiveness = null;
   let stopReviewDeliveries = null;
+  let stopUnrecognizedAgentAlerts = null;
   let stopProviderBatchPoller = null;
   let stopInstallState = null;
   const scheduler = new Scheduler(opts.db, {
@@ -20286,7 +20415,7 @@ async function createServer(opts) {
       void (async () => {
         try {
           const report = await schedulerClient.runDoctor({ project: projectName, checkIds: scheduledHealthCheckIds() });
-          const project = opts.db.select().from(projects).where(eq33(projects.name, projectName)).get();
+          const project = opts.db.select().from(projects).where(eq34(projects.name, projectName)).get();
           if (!project) {
             app.log.warn({ projectName }, "doctor schedule fired for an unknown project");
             return;
@@ -20578,7 +20707,7 @@ async function createServer(opts) {
   })();
   if (opts.config.apiKey) {
     const keyHash = hashApiKey(opts.config.apiKey);
-    const existing = opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, keyHash)).get();
+    const existing = opts.db.select().from(apiKeys).where(eq34(apiKeys.keyHash, keyHash)).get();
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
@@ -20597,14 +20726,14 @@ async function createServer(opts) {
   );
   const currentPasswordFingerprint = () => hashSessionToken(opts.config.dashboardPasswordHash ?? "");
   opts.db.delete(dashboardSessions).where(or4(
-    eq33(dashboardSessions.apiKeyHash, ""),
-    and27(
+    eq34(dashboardSessions.apiKeyHash, ""),
+    and28(
       isNotNull5(dashboardSessions.passwordFingerprint),
       ne4(dashboardSessions.passwordFingerprint, currentPasswordFingerprint())
     )
   )).run();
   if (!opts.config.dashboardPasswordHash) {
-    const lastPasswordEventAt = (action) => opts.db.select({ at: max(auditLog.createdAt) }).from(auditLog).where(and27(eq33(auditLog.entityType, "dashboard-password"), eq33(auditLog.action, action))).get()?.at ?? null;
+    const lastPasswordEventAt = (action) => opts.db.select({ at: max(auditLog.createdAt) }).from(auditLog).where(and28(eq34(auditLog.entityType, "dashboard-password"), eq34(auditLog.action, action))).get()?.at ?? null;
     const createdAt = lastPasswordEventAt("dashboard-password.created");
     const clearedAt = lastPasswordEventAt("dashboard-password.cleared");
     if (createdAt !== null && (clearedAt === null || clearedAt < createdAt)) {
@@ -20638,23 +20767,23 @@ async function createServer(opts) {
       currentApiKeyHash: apiKeys.keyHash,
       passwordFingerprint: dashboardSessions.passwordFingerprint,
       expiresAt: dashboardSessions.expiresAt
-    }).from(dashboardSessions).innerJoin(apiKeys, eq33(apiKeys.id, dashboardSessions.apiKeyId)).where(and27(eq33(dashboardSessions.tokenHash, tokenHash), isNull8(apiKeys.revokedAt))).get();
+    }).from(dashboardSessions).innerJoin(apiKeys, eq34(apiKeys.id, dashboardSessions.apiKeyId)).where(and28(eq34(dashboardSessions.tokenHash, tokenHash), isNull8(apiKeys.revokedAt))).get();
     if (!session) return null;
     const expiresAt = Date.parse(session.expiresAt);
     if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || session.apiKeyHash !== session.currentApiKeyHash || session.passwordFingerprint !== null && session.passwordFingerprint !== currentPasswordFingerprint()) {
-      opts.db.delete(dashboardSessions).where(eq33(dashboardSessions.tokenHash, tokenHash)).run();
+      opts.db.delete(dashboardSessions).where(eq34(dashboardSessions.tokenHash, tokenHash)).run();
       return null;
     }
     return session.apiKeyId;
   };
   const clearSession = (sessionId) => {
     if (sessionId) {
-      opts.db.delete(dashboardSessions).where(eq33(dashboardSessions.tokenHash, hashSessionToken(sessionId))).run();
+      opts.db.delete(dashboardSessions).where(eq34(dashboardSessions.tokenHash, hashSessionToken(sessionId))).run();
     }
   };
   const getDefaultApiKey = () => {
     if (!opts.config.apiKey) return void 0;
-    return opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
+    return opts.db.select().from(apiKeys).where(eq34(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
   };
   const setSessionCookie = (reply, sessionId) => {
     reply.header(
@@ -20815,12 +20944,12 @@ async function createServer(opts) {
       return reply.send({ authenticated: true });
     }
     if (apiKey) {
-      const key = opts.db.select().from(apiKeys).where(eq33(apiKeys.keyHash, hashApiKey(apiKey))).get();
+      const key = opts.db.select().from(apiKeys).where(eq34(apiKeys.keyHash, hashApiKey(apiKey))).get();
       if (!key || key.revokedAt) {
         const err2 = authInvalid();
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
-      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq33(apiKeys.id, key.id)).run();
+      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq34(apiKeys.id, key.id)).run();
       setSessionCookie(reply, createSession(key));
       return reply.send({ authenticated: true });
     }
@@ -20886,7 +21015,7 @@ async function createServer(opts) {
   const sentimentPoller = createSentimentPoller(
     () => sentimentWorker.tick(),
     () => {
-      log27.error("sentiment.worker-failed", { reason: "Stored sentiment worker could not finish its tick." });
+      log28.error("sentiment.worker-failed", { reason: "Stored sentiment worker could not finish its tick." });
     }
   );
   const pollSentiment = sentimentPoller.poll;
@@ -20898,7 +21027,7 @@ async function createServer(opts) {
   const recomputeDebts = /* @__PURE__ */ new Map();
   let recomputeSequence = 0;
   const markAnswerFieldRecompute = (projectId, full) => {
-    opts.db.update(projects).set({ answerFieldsRecompute: full ? "full" : sql13`CASE WHEN ${projects.answerFieldsRecompute} = 'full' THEN 'full' ELSE 'competitors' END` }).where(eq33(projects.id, projectId)).run();
+    opts.db.update(projects).set({ answerFieldsRecompute: full ? "full" : sql14`CASE WHEN ${projects.answerFieldsRecompute} = 'full' THEN 'full' ELSE 'competitors' END` }).where(eq34(projects.id, projectId)).run();
   };
   const requestAnswerFieldRecompute = (projectId, projectName, scope, reason) => {
     const sequence = ++recomputeSequence;
@@ -20916,10 +21045,10 @@ async function createServer(opts) {
         if (pass.full && debt.latestFull <= sequence) debt.latestFull = 0;
         try {
           if (debt.latest === sequence && debt.latestFull === 0) {
-            opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq33(projects.id, projectId)).run();
+            opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq34(projects.id, projectId)).run();
             if (recomputeDebts.get(projectId) === debt) recomputeDebts.delete(projectId);
           } else if (debt.latestFull === 0) {
-            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and27(eq33(projects.id, projectId), eq33(projects.answerFieldsRecompute, "full"))).run();
+            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and28(eq34(projects.id, projectId), eq34(projects.answerFieldsRecompute, "full"))).run();
           }
         } catch (err) {
           app.log.error({ err, projectId }, "could not clear the owed answer field recompute");
@@ -20956,7 +21085,7 @@ async function createServer(opts) {
     await yieldToEventLoop4();
     const reason = (competitorAutoAliasReasons.get(projectId) ?? []).join(",");
     competitorAutoAliasReasons.delete(projectId);
-    const project = opts.db.select().from(projects).where(eq33(projects.id, projectId)).get();
+    const project = opts.db.select().from(projects).where(eq34(projects.id, projectId)).get();
     if (!project || project.competitorAutoAliases === "off") return;
     if (project.competitorAutoAliases === "apply") {
       await competitorAutoAliases.request(projectId, reason).catch(() => void 0);
@@ -21156,8 +21285,8 @@ async function createServer(opts) {
     getAgentPin: () => describeAgentPin(opts.config),
     getGoogleMarketingDoctorInput: (ctx) => {
       if (!ctx.project) return null;
-      const googleAds = opts.db.select().from(googleAdsConnections).where(eq33(googleAdsConnections.projectId, ctx.project.id)).get();
-      const gtm = opts.db.select().from(gtmConnections).where(eq33(gtmConnections.projectId, ctx.project.id)).get();
+      const googleAds = opts.db.select().from(googleAdsConnections).where(eq34(googleAdsConnections.projectId, ctx.project.id)).get();
+      const gtm = opts.db.select().from(gtmConnections).where(eq34(gtmConnections.projectId, ctx.project.id)).get();
       const googleAdsCredential = getGoogleAdsConnection(opts.config, ctx.project.id);
       const gtmCredential = getGtmConnection(opts.config, ctx.project.id);
       const googleAdsConnected = Boolean(googleAdsCredential?.accessToken);
@@ -21407,7 +21536,7 @@ async function createServer(opts) {
         ...inspectOpts,
         config: opts.config
       }).then(() => {
-        const finished = opts.db.select({ status: runs.status }).from(runs).where(eq33(runs.id, runId)).get();
+        const finished = opts.db.select({ status: runs.status }).from(runs).where(eq34(runs.id, runId)).get();
         if (finished?.status === RunStatuses.completed || finished?.status === RunStatuses.partial) {
           return maybeRefreshGscCoverage(
             opts.db,
@@ -21897,6 +22026,7 @@ async function createServer(opts) {
         notify: (projectId, result) => notifier.onSiteLivenessChecked(projectId, result)
       });
       stopReviewDeliveries = startReviewDeliveryLoop(() => notifier.drainDueReviewDeliveries());
+      stopUnrecognizedAgentAlerts = startUnrecognizedAgentAlertLoop(() => notifier.dispatchUnrecognizedAgentAlerts());
       stopProviderBatchPoller = startProviderBatchPoller({ db: opts.db, registry, runner: jobRunner });
       if (!embed.enabled) {
         stopInstallState = startInstallStateTelemetry({
@@ -21906,7 +22036,7 @@ async function createServer(opts) {
           isBacklinksInstalled: () => isDuckdbInstalled()
         });
       }
-      for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq33(researchRuns.status, ResearchRunStatuses.queued)).all()) {
+      for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq34(researchRuns.status, ResearchRunStatuses.queued)).all()) {
         dispatchResearchRun(run.id, run.projectId, OutcomeTriggers.startup);
       }
       runtimeStartupSettled = true;
@@ -21923,6 +22053,8 @@ async function createServer(opts) {
     stopSiteLiveness = null;
     stopReviewDeliveries?.();
     stopReviewDeliveries = null;
+    stopUnrecognizedAgentAlerts?.();
+    stopUnrecognizedAgentAlerts = null;
     stopProviderBatchPoller?.();
     stopProviderBatchPoller = null;
     stopInstallState?.();