@canonry/canonry 7.82.0 → 7.83.0

package/dist/{chunk-J7EYQFMJ.js → chunk-4XM3T65L.js}

@@ -1,16 +1,16 @@
 import {
   runWithUsageTags
-} from "./chunk-ZX7XDVPC.js";
+} from "./chunk-IPPNN5KE.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-HDVJNYYE.js";
+} from "./chunk-HIC62JTS.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
 import {
   buildOpenApiDocument
-} from "./chunk-NPMJFPBM.js";
+} from "./chunk-OIHR2BDK.js";
 import {
   DEFAULT_COMPETITOR_AUTO_ALIAS_MODE,
   MeasurementPortfolioLists,
@@ -23,7 +23,7 @@ import {
   seoDatasetWithoutVendor,
   seoProviderSchema,
   truncateUtf16
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/agent/tools.ts
 import { Type as Type2 } from "@earendil-works/pi-ai";

package/dist/{chunk-QHEKMJL4.js → chunk-7Q5BSCKN.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-ZX7XDVPC.js";
+} from "./chunk-IPPNN5KE.js";
 import {
   CliError,
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";
 import {
   describeError
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/commands/mcp.ts
 import fs from "fs";

package/dist/{chunk-JMUSNZJR.js → chunk-AA6P5NK3.js}

@@ -1,7 +1,7 @@
 import {
   API_PROVIDER_NAMES,
   ProviderNames
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/provider-registration.ts
 function isApiProviderRegistrable(name, entry) {

package/dist/{chunk-462CIYLY.js → chunk-CBAYQHNX.js}

@@ -15,7 +15,7 @@ import {
   formatCanonryPluginUpdateHint,
   formatCanonryPluginVersionMismatch,
   skillsClientSchema
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/commands/skills.ts
 import crypto from "crypto";

package/dist/{chunk-J2DA4LUR.js → chunk-DRZDOL3P.js}

@@ -1,7 +1,7 @@
 import {
   answerServiceAdapters,
   answerServiceDescriptors
-} from "./chunk-JDEHNF7K.js";
+} from "./chunk-NCM6PX64.js";
 import {
   AeroLlmUsageFeatures,
   aeroTurnStatus,
@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-5NDUJLUL.js";
+} from "./chunk-4PPF3SIU.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-J7EYQFMJ.js";
+} from "./chunk-4XM3T65L.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -53,7 +53,7 @@ import {
   removeCloudflareTrafficConnection,
   removeCloudflareTrafficConnectionBySourceId,
   upsertCloudflareTrafficConnection
-} from "./chunk-SVF4P6DB.js";
+} from "./chunk-QAJDHHC5.js";
 import {
   claudeAdapter,
   embedQueries,
@@ -64,7 +64,7 @@ import {
   openaiAdapter,
   openrouterAdapter,
   perplexityAdapter
-} from "./chunk-GKHM5OT6.js";
+} from "./chunk-OMNS42ZQ.js";
 import {
   classifyUsageSurface,
   createApiUsageTelemetry,
@@ -76,7 +76,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-NNUZ37NJ.js";
+} from "./chunk-P76XOEWL.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -84,7 +84,7 @@ import {
   isApiProviderRegistrable,
   isCdpProviderRegistrable,
   registeredProviderNames
-} from "./chunk-JMUSNZJR.js";
+} from "./chunk-AA6P5NK3.js";
 import {
   checkLatestVersionForServer,
   getOrCreateAnonymousId,
@@ -96,17 +96,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-VWYB4RA4.js";
+} from "./chunk-YJOGWS7F.js";
 import {
   createCanonryMcpServer
-} from "./chunk-T76RQIGK.js";
+} from "./chunk-32U5LFIT.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
-} from "./chunk-JI7FDO7I.js";
+} from "./chunk-MTW37GXF.js";
 import {
   ApiClient
-} from "./chunk-ZX7XDVPC.js";
+} from "./chunk-IPPNN5KE.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -138,21 +138,21 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-7ZJHKLTK.js";
+} from "./chunk-WA4FD5Y6.js";
 import {
   getBundledSkillSnapshots
-} from "./chunk-462CIYLY.js";
+} from "./chunk-CBAYQHNX.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-DWFVH3E2.js";
+} from "./chunk-Y7WHB65J.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-HDVJNYYE.js";
+} from "./chunk-HIC62JTS.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -161,16 +161,16 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   IntelligenceService
-} from "./chunk-ZR3RYJF3.js";
+} from "./chunk-JECDHS6M.js";
 import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-VVOCZTNC.js";
+} from "./chunk-SVMTN7MI.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
-} from "./chunk-OH42CAWP.js";
+} from "./chunk-LZGVQSZL.js";
 import {
   BingApiError,
   CC_CACHE_DIR,
@@ -291,7 +291,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-NPMJFPBM.js";
+} from "./chunk-OIHR2BDK.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -379,7 +379,7 @@ import {
   unrecognizedAgentEventsHourly,
   unrecognizedAgentNotifyState,
   usageCounters
-} from "./chunk-2GJLKCXL.js";
+} from "./chunk-3UFQI4KL.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AI_ENGINE_DOMAINS,
@@ -635,7 +635,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/google-marketing-runtime.ts
 import crypto2 from "crypto";
@@ -5939,7 +5939,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "2d31f874106c0d9772c47b19f7d79f2257976fef" : void 0;
+  const embedded = true ? "422c745a4356201c9edcd13c64e567ce2d8afe73" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {

package/dist/{chunk-M7WS2BL3.js → chunk-FICCBAAY.js}

@@ -1,14 +1,93 @@
 import {
   AI_ENGINE_DOMAINS,
+  AgentTrustLevels,
+  AgentTrustReasons,
   AiReferralTrafficClasses,
   TrafficEventConfidences,
   TrafficEvidenceKinds,
+  TrafficPathClasses,
   TrafficSourceTypes,
   classifyAiReferralTrafficClass,
   classifyJourneyEntry,
+  classifyTrafficPath,
   hostMatchesDomain,
   hostOf
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
+
+// ../integration-traffic/src/agent-trust.ts
+var SCANNER_SEGMENTS = /* @__PURE__ */ new Set([
+  ".git",
+  ".svn",
+  ".hg",
+  ".github",
+  ".aws",
+  ".ssh",
+  ".docker",
+  ".kube",
+  ".npmrc",
+  ".htpasswd",
+  ".htaccess",
+  ".ds_store",
+  "wp-login.php",
+  "xmlrpc.php",
+  "phpmyadmin",
+  "phpunit",
+  "eval-stdin.php"
+]);
+var ENCODED_TRAVERSAL = /(?:%2e%2e|%2e\.|\.%2e)(?:\/|\\|%2f|%5c|$)|\.\.(?:%2f|%5c)|%252e%252e/i;
+var REASON_ORDER = [
+  AgentTrustReasons["scanner-path"],
+  AgentTrustReasons["unusual-user-agent"],
+  AgentTrustReasons["ip-in-published-list"],
+  AgentTrustReasons["ip-outside-published-list"],
+  AgentTrustReasons["no-ip"],
+  AgentTrustReasons["no-published-list"],
+  AgentTrustReasons["documented-user-agent"]
+];
+var FAKE_REASONS = /* @__PURE__ */ new Set([
+  AgentTrustReasons["scanner-path"],
+  AgentTrustReasons["unusual-user-agent"]
+]);
+function isScannerPath(rawPath) {
+  const pathOnly = (rawPath.split(/[?#]/)[0] ?? "").toLowerCase();
+  if (ENCODED_TRAVERSAL.test(pathOnly)) return true;
+  let decoded = pathOnly;
+  try {
+    decoded = decodeURIComponent(pathOnly);
+  } catch {
+  }
+  for (const segment of decoded.split(/[\\/]+/)) {
+    if (!segment) continue;
+    if (segment === ".." || segment.endsWith("..")) return true;
+    if (SCANNER_SEGMENTS.has(segment) || segment.startsWith("wp-config")) return true;
+    if (segment === ".env" || segment.startsWith(".env.") || segment.endsWith(".env")) return true;
+  }
+  return false;
+}
+function sortAgentTrustReasons(reasons) {
+  const present = new Set(reasons);
+  return REASON_ORDER.filter((reason) => present.has(reason));
+}
+function ipReason(input) {
+  if (input.verification.verified) return AgentTrustReasons["ip-in-published-list"];
+  if (input.verification.manifest) return AgentTrustReasons["ip-outside-published-list"];
+  return input.listPublished ? AgentTrustReasons["no-ip"] : AgentTrustReasons["no-published-list"];
+}
+function assessAgentTrust(input) {
+  const reasons = /* @__PURE__ */ new Set([ipReason(input)]);
+  const documented = input.rule.documentedUserAgents;
+  if (documented && documented.length > 0) {
+    reasons.add(documented.some((pattern) => pattern.test(input.userAgent.trim())) ? AgentTrustReasons["documented-user-agent"] : AgentTrustReasons["unusual-user-agent"]);
+  }
+  if (isScannerPath(input.path)) reasons.add(AgentTrustReasons["scanner-path"]);
+  return { trust: trustFor(reasons), trustReasons: sortAgentTrustReasons(reasons) };
+}
+function trustFor(reasons) {
+  if (reasons.has(AgentTrustReasons["ip-in-published-list"])) return AgentTrustLevels.verified;
+  for (const reason of reasons) if (FAKE_REASONS.has(reason)) return AgentTrustLevels.likely_fake;
+  const unchecked = reasons.has(AgentTrustReasons["no-ip"]) || reasons.has(AgentTrustReasons["no-published-list"]);
+  return unchecked && reasons.has(AgentTrustReasons["documented-user-agent"]) ? AgentTrustLevels.likely_real : AgentTrustLevels.unknown;
+}
 
 // ../integration-traffic/src/ip-ranges/amazonbot.json
 var amazonbot_default = {
@@ -13966,6 +14045,10 @@ function verifyIpForRuleDecision(ip, ruleId) {
   const data = CACHE.get(ruleId);
   return data ? decideIpVerification(ip, data) : { verified: false, manifest: null };
 }
+function hasVerificationDataFor(ruleId) {
+  const data = CACHE.get(ruleId);
+  return !!data && data.ranges.length > 0;
+}
 
 // ../integration-traffic/src/rules.ts
 var SELF_TRAFFIC_USER_AGENT_PATTERNS = [
@@ -14000,7 +14083,10 @@ var DEFAULT_AI_CRAWLER_RULES = [
     operator: "OpenAI",
     product: "ChatGPT-User",
     purpose: "user-agent",
-    userAgentPatterns: [/ChatGPT-User\//i]
+    userAgentPatterns: [/ChatGPT-User\//i],
+    // OpenAI's published "full user-agent string". The version may move.
+    // src: https://developers.openai.com/api/docs/bots
+    documentedUserAgents: [/^Mozilla\/5\.0 AppleWebKit\/537\.36 \(KHTML, like Gecko\); compatible; ChatGPT-User\/\d+(?:\.\d+)*; \+https:\/\/openai\.com\/bot$/]
   },
   {
     // Observed MCP requests from ChatGPT integrations use this UA. OpenAI's
@@ -14165,7 +14251,10 @@ var DEFAULT_AI_CRAWLER_RULES = [
     operator: "Mistral AI",
     product: "MistralAI-User",
     purpose: "user-agent",
-    userAgentPatterns: [/MistralAI-User\//i]
+    userAgentPatterns: [/MistralAI-User\//i],
+    // Mistral's published "full user-agent string". The version may move.
+    // src: https://docs.mistral.ai/robots
+    documentedUserAgents: [/^Mozilla\/5\.0 AppleWebKit\/537\.36 \(KHTML, like Gecko; compatible; MistralAI-User\/\d+(?:\.\d+)*; \+https:\/\/docs\.mistral\.ai\/robots\)$/]
   },
   {
     // Mistral's search-index crawler. Unlike the legacy MistralBot UA below,
@@ -14451,13 +14540,21 @@ function classifyAiUserFetch(event) {
     if (rule.purpose !== USER_FETCH_PURPOSE) continue;
     if (rule.userAgentPatterns.some((pattern) => pattern.test(userAgent))) {
       const decision = verifyIpForRuleDecision(event.remoteIp, rule.id);
+      const trust = assessAgentTrust({
+        rule,
+        userAgent,
+        path: event.path,
+        verification: decision,
+        listPublished: hasVerificationDataFor(rule.id)
+      });
       return {
         botId: rule.id,
         operator: rule.operator,
         product: rule.product,
         verificationStatus: decision.verified ? "verified" : "claimed_unverified",
         verificationManifest: decision.manifest,
-        matchedUserAgent: userAgent
+        matchedUserAgent: userAgent,
+        ...trust
       };
     }
   }
@@ -14829,6 +14926,41 @@ function sessionizeJourneyRequests(requests, state, options) {
   return { visits: [...visits.values()], events, visitors, dropped, capped };
 }
 
+// ../integration-traffic/src/agent-journeys.ts
+function extractAgentJourneyRequests(events) {
+  const requests = [];
+  for (const event of events) {
+    if (isSelfTraffic(event)) continue;
+    const agent = classifyAiUserFetch(event);
+    if (!agent || agent.trust === AgentTrustLevels.likely_fake) continue;
+    const timestamp = Date.parse(event.observedAt);
+    if (!Number.isFinite(timestamp)) continue;
+    const path = event.path.split(/[?#]/)[0] || "/";
+    if (classifyTrafficPath(path) === TrafficPathClasses.asset && !/\.json\/?$/i.test(path)) continue;
+    const maskedPath = maskJourneyPath(path);
+    const retainedPath = maskedPath.length > 512 ? `${maskedPath.slice(0, 505)}/:token` : maskedPath;
+    requests.push({
+      sourceEventId: event.eventId,
+      ts: new Date(timestamp).toISOString(),
+      remoteIp: event.remoteIp?.trim() || null,
+      userAgent: agent.matchedUserAgent,
+      agentId: agent.botId,
+      operator: agent.operator,
+      product: agent.product,
+      verificationStatus: agent.verificationStatus,
+      verificationManifest: agent.verificationManifest,
+      trust: agent.trust,
+      trustReasons: agent.trustReasons,
+      host: hostOf(event.host) ?? hostOf(event.requestUrl),
+      path: retainedPath,
+      method: event.method?.trim().toUpperCase() || null,
+      status: event.status,
+      latencyMs: event.latencyMs !== null && Number.isFinite(event.latencyMs) && event.latencyMs >= 0 ? event.latencyMs : null
+    });
+  }
+  return requests;
+}
+
 // ../integration-traffic/src/unlisted-agents.ts
 var UNLISTED_AGENT_SKIPPED_EXTENSIONS = [
   "avif",
@@ -15008,6 +15140,9 @@ function sortCrawlerBuckets(a, b) {
 function sortAiUserFetchBuckets(a, b) {
   return a.tsHour.localeCompare(b.tsHour) || a.botId.localeCompare(b.botId) || a.verificationStatus.localeCompare(b.verificationStatus) || (a.verificationManifest?.id ?? "").localeCompare(b.verificationManifest?.id ?? "") || a.pathNormalized.localeCompare(b.pathNormalized) || String(a.status).localeCompare(String(b.status));
 }
+function sortLikelyFakeBuckets(a, b) {
+  return a.tsHour.localeCompare(b.tsHour) || a.botId.localeCompare(b.botId) || a.reason.localeCompare(b.reason);
+}
 function sortReferralBuckets(a, b) {
   return a.tsHour.localeCompare(b.tsHour) || a.product.localeCompare(b.product) || a.sourceDomain.localeCompare(b.sourceDomain) || a.landingPathNormalized.localeCompare(b.landingPathNormalized) || String(a.status).localeCompare(String(b.status));
 }
@@ -15020,6 +15155,7 @@ function buildTrafficProbeReport(events, options = {}) {
   const aiReferralSessionWindowMs = configuredSessionWindowMs > 0 ? configuredSessionWindowMs : DEFAULT_AI_REFERRAL_SESSION_WINDOW_MS;
   const crawlerBuckets = /* @__PURE__ */ new Map();
   const aiUserFetchBuckets = /* @__PURE__ */ new Map();
+  const likelyFakeBuckets = /* @__PURE__ */ new Map();
   const aiReferralBuckets = /* @__PURE__ */ new Map();
   const unrecognizedAgentBuckets = /* @__PURE__ */ new Map();
   const aiReferralSessions = /* @__PURE__ */ new Map();
@@ -15033,6 +15169,7 @@ function buildTrafficProbeReport(events, options = {}) {
   const selfTrafficExcluded = events.length - includedEvents.length;
   let crawlerHits = 0;
   let aiUserFetchHits = 0;
+  let aiUserFetchLikelyFakeHits = 0;
   let aiReferralHits = 0;
   let aiReferralPaidSessions = 0;
   let aiReferralOrganicSessions = 0;
@@ -15077,7 +15214,14 @@ function buildTrafficProbeReport(events, options = {}) {
       else topBots.set(botKey, { fields: { botId: crawler.botId, operator: crawler.operator }, hits: 1 });
       incrementBucket(topCrawlerPaths, pathNormalized, { pathNormalized });
     }
-    if (aiUserFetch) {
+    if (aiUserFetch?.trust === AgentTrustLevels.likely_fake) {
+      aiUserFetchLikelyFakeHits += 1;
+      const reason = aiUserFetch.trustReasons[0];
+      const key = [tsHour, aiUserFetch.botId, reason].join("	");
+      const existing = likelyFakeBuckets.get(key);
+      if (existing) existing.hits += 1;
+      else likelyFakeBuckets.set(key, { tsHour, botId: aiUserFetch.botId, operator: aiUserFetch.operator, reason, hits: 1 });
+    } else if (aiUserFetch) {
       aiUserFetchHits += 1;
       const key = [
         tsHour,
@@ -15200,6 +15344,7 @@ function buildTrafficProbeReport(events, options = {}) {
       selfTrafficExcluded,
       crawlerHits,
       aiUserFetchHits,
+      aiUserFetchLikelyFakeHits,
       aiReferralSessions: aiReferralSessions.size,
       aiReferralPaidSessions,
       aiReferralOrganicSessions,
@@ -15208,6 +15353,7 @@ function buildTrafficProbeReport(events, options = {}) {
     },
     crawlerEventsHourly: [...crawlerBuckets.values()].sort(sortCrawlerBuckets),
     aiUserFetchEventsHourly: [...aiUserFetchBuckets.values()].sort(sortAiUserFetchBuckets),
+    aiUserFetchLikelyFakeHourly: [...likelyFakeBuckets.values()].sort(sortLikelyFakeBuckets),
     aiReferralEventsHourly: [...aiReferralBuckets.values()].sort(sortReferralBuckets),
     unrecognizedAgentEventsHourly: busiestUnrecognizedAgents(unrecognizedAgentBuckets),
     topBots: topEntries(topBots, 10),
@@ -15838,6 +15984,7 @@ export {
   classifyAiUserFetch,
   extractJourneyRequests,
   sessionizeJourneyRequests,
+  extractAgentJourneyRequests,
   buildTrafficProbeReport,
   normalizeCloudflareWorkerEvent,
   CLOUDFLARE_WORKER_BINDINGS,

package/dist/{chunk-HDVJNYYE.js → chunk-HIC62JTS.js}

@@ -2,11 +2,11 @@ import {
   dedupeGscSitemapUrls,
   resolveDiscoveredGscSitemapUrls,
   submitGscSitemapBatches
-} from "./chunk-WB6VIQ7L.js";
+} from "./chunk-W5ZBMBBZ.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-2FIDPBWE.js";
+} from "./chunk-KFMU6CLU.js";
 import {
   CliError
 } from "./chunk-HGMYEDAQ.js";
@@ -42,6 +42,7 @@ import {
   adsPauseRequestSchema,
   adsUnresolvedOperationListQuerySchema,
   agentConversationCreateSchema,
+  agentJourneysQuerySchema,
   apiKeyDtoSchema,
   auditHistoryQuerySchema,
   backlinkSourceSchema,
@@ -183,7 +184,7 @@ import {
   trafficUnrecognizedAgentsQuerySchema,
   visibilityCompareSelectionSchema,
   visibilityReportRequestSchema
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/mcp/tool-registry.ts
 import { z as z2 } from "zod";
@@ -2920,6 +2921,34 @@ var rawCanonryMcpTools = [
       return client.trafficListSamples(project, query);
     }
   }),
+  defineTool({
+    name: "canonry_traffic_agent_journeys",
+    title: "List agent journeys",
+    description: "Read stored user-triggered agent request sequences with trust levels (verified by published IP list, likely real, or unknown), inferred or unlinked correlation, and source/retention/cap limits. Likely fake requests are counted in coverage.likelyFakeRequests, never listed. IP and user-agent grouping does not prove a single user task. Simple and Advanced projects use the same evidence; targetKey filters URL matches against the current plan, not historical task intent. No provider calls or writes.",
+    access: "read",
+    tier: "traffic",
+    inputSchema: agentJourneysQuerySchema.extend({ project: projectNameSchema }),
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/traffic/agent-journeys"],
+    handler: (client, input) => {
+      const { project, ...query } = input;
+      return client.trafficAgentJourneys(project, query);
+    }
+  }),
+  defineTool({
+    name: "canonry_traffic_agent_journey",
+    title: "Read an agent journey",
+    description: "Read the ordered request timeline for an id from canonry_traffic_agent_journeys. Preserve the list window and selectors. Requests include time, host, masked path, method, status, latency, verification, trust level with reasons, and Property attribution. HTTP responses do not prove business outcomes; no prompt, private reasoning or off-site browsing is recorded. No provider calls or writes.",
+    access: "read",
+    tier: "traffic",
+    inputSchema: agentJourneysQuerySchema.extend({ project: projectNameSchema, journeyId: z2.string().min(1) }),
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/traffic/agent-journeys/{journeyId}"],
+    handler: (client, input) => {
+      const { project, journeyId, ...query } = input;
+      return client.trafficAgentJourney(project, journeyId, query);
+    }
+  }),
   defineTool({
     name: "canonry_traffic_unrecognized_agents",
     title: "List unrecognized bots and agents",
@@ -2951,7 +2980,7 @@ var rawCanonryMcpTools = [
   defineTool({
     name: "canonry_journeys_list",
     title: "List AI visitor journeys",
-    description: "List stored AI visitors, newest first AI visit first, with their first 20 visits (entry class and name, landing path, page count; visitCount is the total). Filter by first AI engine or by whether they came back. Visits are 30-minute sessions; visits within 30 days after an AI visit are kept, 180-day retention. A high cappedDays means a user agent many people share; partialSources names sources whose logs miss later visits. No provider call or write.",
+    description: "List stored AI visitors, newest first AI visit first, with up to 20 visits from the first AI visit on (entry class and name, landing path, page count; visitCount is the total). Filter by first AI engine or by whether they came back. Visits are 30-minute sessions; visits within 30 days after an AI visit are kept, 180-day retention. A high cappedDays means a user agent many people share; partialSources names sources whose logs miss later visits. No provider call or write.",
     access: "read",
     tier: "traffic",
     inputSchema: journeysQuerySchema.extend({ project: projectNameSchema }),
@@ -2965,7 +2994,7 @@ var rawCanonryMcpTools = [
   defineTool({
     name: "canonry_journey_get",
     title: "Read one AI visitor journey",
-    description: "Read one AI visitor key from canonry_journeys_list: a page of its stored visits in time order (limit 1 to 500, default 100; totalVisits is the total), each with its requests (time, method, path, status, page or data). No provider call or write.",
+    description: "Read one AI visitor key from canonry_journeys_list: a page of its stored visits in time order (limit 1 to 500, default 100; totalVisits is the total), each with its requests (time, method, path, status, page or data). events=pages returns page requests plus every non-GET/HEAD request; each visit keeps its stored requestCount. No provider call or write.",
     access: "read",
     tier: "traffic",
     inputSchema: journeyDetailQuerySchema.extend({ project: projectNameSchema, visitorKey: z2.string().min(1) }),

package/dist/{chunk-ZX7XDVPC.js → chunk-IPPNN5KE.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-7ZJHKLTK.js";
+} from "./chunk-WA4FD5Y6.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -36,7 +36,7 @@ import {
   sentimentSettingsReadSchema,
   sentimentSummaryReadSchema,
   upgradeCommandFor
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // ../api-client-generated/src/generated/core/bodySerializer.gen.ts
 var jsonBodySerializer = {
@@ -3235,6 +3235,16 @@ var getApiV1ProjectsByNameTrafficSamples = (options) => (options.client ?? clien
   url: "/api/v1/projects/{name}/traffic/samples",
   ...options
 });
+var getApiV1ProjectsByNameTrafficAgentJourneys = (options) => (options.client ?? client).get({
+  security: [{ scheme: "bearer", type: "http" }],
+  url: "/api/v1/projects/{name}/traffic/agent-journeys",
+  ...options
+});
+var getApiV1ProjectsByNameTrafficAgentJourneysByJourneyId = (options) => (options.client ?? client).get({
+  security: [{ scheme: "bearer", type: "http" }],
+  url: "/api/v1/projects/{name}/traffic/agent-journeys/{journeyId}",
+  ...options
+});
 var getApiV1ProjectsByNameTrafficUnrecognizedAgents = (options) => (options.client ?? client).get({
   security: [{ scheme: "bearer", type: "http" }],
   url: "/api/v1/projects/{name}/traffic/unrecognized-agents",
@@ -6046,6 +6056,12 @@ var ApiClient = class {
   async trafficListSamples(project, query) {
     return this.invoke(() => getApiV1ProjectsByNameTrafficSamples({ client: this.heyClient, path: { name: project }, query }));
   }
+  async trafficAgentJourneys(project, query) {
+    return this.invoke(() => getApiV1ProjectsByNameTrafficAgentJourneys({ client: this.heyClient, path: { name: project }, query }));
+  }
+  async trafficAgentJourney(project, journeyId, query) {
+    return this.invoke(() => getApiV1ProjectsByNameTrafficAgentJourneysByJourneyId({ client: this.heyClient, path: { name: project, journeyId }, query }));
+  }
   async trafficUnrecognizedAgents(project, query) {
     return this.invoke(() => getApiV1ProjectsByNameTrafficUnrecognizedAgents({ client: this.heyClient, path: { name: project }, query }));
   }

package/dist/{chunk-LRFCNERP.js → chunk-JCWXEVYW.js}

@@ -1,13 +1,13 @@
 import {
   createApiClient
-} from "./chunk-ZX7XDVPC.js";
+} from "./chunk-IPPNN5KE.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";
 import {
   measurementDraftOperationSchema,
   runMeasurementDraftAction
-} from "./chunk-2FIDPBWE.js";
+} from "./chunk-KFMU6CLU.js";
 import {
   isMachineFormat,
   systemError
@@ -37,7 +37,7 @@ import {
   unattributedAnswersLabel,
   uncheckedSourcesLabel,
   visibilityReportRequestSchema
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/commands/measurement-plan.ts
 import crypto from "crypto";

package/dist/{chunk-ZR3RYJF3.js → chunk-JECDHS6M.js}

@@ -1,9 +1,9 @@
 import {
   createLogger
-} from "./chunk-VVOCZTNC.js";
+} from "./chunk-SVMTN7MI.js";
 import {
   pickProjectCitedDomain
-} from "./chunk-OH42CAWP.js";
+} from "./chunk-LZGVQSZL.js";
 import {
   GBP_INSIGHT_PROVIDER,
   PERSISTENT_GAP_THRESHOLD,
@@ -17,7 +17,7 @@ import {
   mergeGscQueryTotalsWithFallback,
   readGscQueryDailyRows,
   readLatestGscDataDate
-} from "./chunk-NPMJFPBM.js";
+} from "./chunk-OIHR2BDK.js";
 import {
   competitors,
   gbpDailyMetrics,
@@ -35,14 +35,14 @@ import {
   queries,
   querySnapshots,
   runs
-} from "./chunk-2GJLKCXL.js";
+} from "./chunk-3UFQI4KL.js";
 import {
   CitationStates,
   RunKinds,
   RunStatuses,
   RunTriggers,
   effectiveDomains
-} from "./chunk-S6IC7ZK2.js";
+} from "./chunk-PHVIMUAQ.js";
 
 // src/intelligence-service.ts
 import { eq, desc, asc, and, ne, or, inArray, gte, lte, isNull, sql, exists } from "drizzle-orm";