@canonry/canonry 7.97.8 → 7.99.0

package/dist/{chunk-22LX5CWD.js → chunk-XPIMVXAI.js}

@@ -1,7 +1,7 @@
 import {
   answerServiceAdapters,
   answerServiceDescriptors
-} from "./chunk-GMCVZPKO.js";
+} from "./chunk-5ZOM5BJS.js";
 import {
   AeroLlmUsageFeatures,
   aeroTurnStatus,
@@ -27,14 +27,14 @@ import {
   resolveConfiguredAgentProvider,
   resolveSessionProviderAndModel,
   setAeroSystemPrompt
-} from "./chunk-I6G5K5PM.js";
+} from "./chunk-3MKJ4LP6.js";
 import {
   AeroToolProfiles,
   AeroToolScopes,
   buildAeroStateTools,
   isAeroToolProfile,
   truncateToolResult
-} from "./chunk-AI2G7QMW.js";
+} from "./chunk-DMPSA7ZS.js";
 import {
   getGoogleAuthConfig,
   getGoogleConnection,
@@ -53,7 +53,7 @@ import {
   removeCloudflareTrafficConnection,
   removeCloudflareTrafficConnectionBySourceId,
   upsertCloudflareTrafficConnection
-} from "./chunk-FDVCTZXD.js";
+} from "./chunk-PT5HNVCM.js";
 import {
   claudeAdapter,
   embedQueries,
@@ -65,7 +65,7 @@ import {
   openrouterAdapter,
   perplexityAdapter,
   startTrafficReclassification
-} from "./chunk-Q4KVK426.js";
+} from "./chunk-RRXLJPBN.js";
 import {
   classifyUsageSurface,
   createApiUsageTelemetry,
@@ -77,7 +77,7 @@ import {
   startOutcomeTimer,
   trackFeatureCompleted,
   trackInstallState
-} from "./chunk-RABCSQBW.js";
+} from "./chunk-VADVPARO.js";
 import {
   isLoopbackBindHost
 } from "./chunk-TSENU4GG.js";
@@ -85,7 +85,7 @@ import {
   isApiProviderRegistrable,
   isCdpProviderRegistrable,
   registeredProviderNames
-} from "./chunk-C3LS3ZKI.js";
+} from "./chunk-O6RXNSNW.js";
 import {
   checkLatestVersionForServer,
   getOrCreateAnonymousId,
@@ -97,17 +97,17 @@ import {
   recordDashboardEvent,
   setTelemetryPreference,
   trackEvent
-} from "./chunk-TUQYYF4G.js";
+} from "./chunk-C55P75G4.js";
 import {
   createCanonryMcpServer
-} from "./chunk-YO2OW67H.js";
+} from "./chunk-WA6APXI6.js";
 import {
   CANONRY_MCP_TIERS,
   CANONRY_MCP_TOOLKIT_NAMES
 } from "./chunk-MTW37GXF.js";
 import {
   ApiClient
-} from "./chunk-7APKPDOV.js";
+} from "./chunk-AJD252SX.js";
 import {
   AGENT_PROVIDERS,
   adapterSupportsBatch,
@@ -139,21 +139,21 @@ import {
   saveConfigPatch,
   sentimentInstallReadiness,
   updateSharedProviderExecutionGate
-} from "./chunk-RSJBMQMN.js";
+} from "./chunk-3MFYM2IS.js";
 import {
   getBundledSkillSnapshots
-} from "./chunk-QM4PMS52.js";
+} from "./chunk-P764TJKQ.js";
 import {
   computeFactorAverages,
   deleteSiteCrawlGraphLayout,
   persistSiteCrawlGraphLayout,
   prepareSiteCrawlGraphLayout,
   recordedSharePct
-} from "./chunk-UBF2S3DF.js";
+} from "./chunk-SY3CWJR4.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools
-} from "./chunk-LPSKHUCV.js";
+} from "./chunk-DLOWRO5R.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";
@@ -162,16 +162,16 @@ import {
 } from "./chunk-HGMYEDAQ.js";
 import {
   IntelligenceService
-} from "./chunk-NLN7EGU3.js";
+} from "./chunk-LM7HTNUO.js";
 import {
   computeCitedCompetitorDomains,
   determineCitationState
-} from "./chunk-5455IRP3.js";
+} from "./chunk-YBWATBX4.js";
 import {
   addLogListener,
   createFastifyLogger,
   createLogger
-} from "./chunk-4OGRTTZX.js";
+} from "./chunk-UY6SKAKW.js";
 import {
   BingApiError,
   CC_CACHE_DIR,
@@ -316,7 +316,7 @@ import {
   webhookResponseReason,
   webhookTargetRefusalReason,
   writeAuditLog
-} from "./chunk-FZIYHP67.js";
+} from "./chunk-ZGBLNKFN.js";
 import {
   OperationalLogStore,
   SentimentIdempotencyConflict,
@@ -407,13 +407,14 @@ import {
   siteCrawlPages,
   siteCrawlRunRequests,
   siteCrawlSnapshots,
+  siteHealthNotifyState,
   siteLivenessState,
   sitemapListSyncs,
   trafficSources,
   unrecognizedAgentEventsHourly,
   unrecognizedAgentNotifyState,
   usageCounters
-} from "./chunk-66DTIEWN.js";
+} from "./chunk-L53ZSQN5.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AI_ENGINE_DOMAINS,
@@ -628,6 +629,7 @@ import {
   parseMeasurementRunManifestV1,
   parseOriginList,
   parseRunError,
+  parseStoredMeasurementPlanAnyVersion,
   percentOf,
   providerConnectionName,
   providerError,
@@ -673,7 +675,7 @@ import {
   winnabilityClassLabel,
   withRetry,
   withSkippedProviders
-} from "./chunk-ZN3KIIMP.js";
+} from "./chunk-47X24IJG.js";
 
 // src/google-marketing-runtime.ts
 import crypto2 from "crypto";
@@ -3357,13 +3359,13 @@ function createGoogleMarketingRuntime(options) {
 
 // src/server.ts
 import { createRequire } from "module";
-import crypto27 from "crypto";
+import crypto28 from "crypto";
 import fs5 from "fs";
 import path5 from "path";
 import { isIP as isIP2 } from "net";
 import { fileURLToPath } from "url";
 import { setImmediate as yieldToEventLoop4 } from "timers/promises";
-import { and as and29, eq as eq35, isNotNull as isNotNull5, isNull as isNull8, lte as lte3, max, ne as ne4, or as or4, sql as sql15 } from "drizzle-orm";
+import { and as and31, eq as eq37, isNotNull as isNotNull5, isNull as isNull8, lte as lte3, max, ne as ne4, or as or4, sql as sql15 } from "drizzle-orm";
 
 // src/seo-runtime.ts
 import { eq, inArray } from "drizzle-orm";
@@ -6001,7 +6003,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "58098d90ba7afb8fa38629099f82a91d52ed434c" : void 0;
+  const embedded = true ? "74e5d2930f44211335b0da42dd2200f8ac58ae90" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -12233,7 +12235,7 @@ function buildDiscoveryInsightTitle(input) {
 
 // src/execute-site-audit.ts
 import crypto20 from "crypto";
-import { and as and15, eq as eq19, ne as ne2, sql as sql7 } from "drizzle-orm";
+import { and as and16, eq as eq20, ne as ne2, sql as sql7 } from "drizzle-orm";
 import { runSiteCrawl } from "@canonry/agent-readiness";
 
 // src/site-audit-root.ts
@@ -12544,6 +12546,45 @@ function buildSiteCrawlIssueEvidence(siteIssues, pages) {
   return { schemaVersion: "1.0", groupIdentityVersion: GROUP_IDENTITY_VERSION, siteIssues: groups };
 }
 
+// src/site-audit-entity-registry.ts
+import { and as and15, eq as eq19 } from "drizzle-orm";
+function entityMatcher(matcher) {
+  switch (matcher.kind) {
+    case "prefix":
+      return { host: matcher.host, pathPrefix: matcher.pathPrefix };
+    case "host":
+      return { host: matcher.host, pathPrefix: "/" };
+    case "exact": {
+      try {
+        const url = new URL(matcher.url);
+        return { host: url.hostname, pathPrefix: url.pathname };
+      } catch {
+        return null;
+      }
+    }
+  }
+}
+function planEntityRegistry(plan) {
+  if (plan.targets.length === 0) return null;
+  return {
+    entities: plan.targets.map((target) => ({
+      key: target.stableKey,
+      names: [.../* @__PURE__ */ new Set([target.label, ...target.aliases, ...target.identityAliases ?? []])],
+      urlMatchers: target.urlMatchers.map(entityMatcher).filter((matcher) => matcher !== null)
+    }))
+  };
+}
+function activePlanEntityRegistry(db, projectId) {
+  const pointer = db.select({ versionId: measurementPlans.activeVersionId }).from(measurementPlans).where(eq19(measurementPlans.projectId, projectId)).get();
+  if (!pointer) return null;
+  const version = db.select({ revision: measurementPlanVersions.revision, canonicalJson: measurementPlanVersions.canonicalJson }).from(measurementPlanVersions).where(and15(eq19(measurementPlanVersions.projectId, projectId), eq19(measurementPlanVersions.id, pointer.versionId))).get();
+  if (!version) return null;
+  const plan = parseStoredMeasurementPlanAnyVersion(version.canonicalJson);
+  if (plan.schemaVersion !== MEASUREMENT_PLAN_V2_SCHEMA_VERSION) return null;
+  const registry = planEntityRegistry(plan);
+  return registry ? { planRevision: version.revision, registry } : null;
+}
+
 // src/execute-site-audit.ts
 var log15 = createLogger("SiteAudit");
 var SiteAuditCancelledError = class extends Error {
@@ -12697,7 +12738,7 @@ function trackSiteAuditOutcome(db, input) {
     );
     const pagesAudited = input.crawl?.pagesAudited ?? 0;
     if (pagesAudited === 0 || input.trigger === RunTriggers.probe) return;
-    const prior = db.select({ id: siteAuditSnapshots.id }).from(siteAuditSnapshots).where(and15(eq19(siteAuditSnapshots.projectId, input.projectId), ne2(siteAuditSnapshots.runId, input.runId))).limit(1).get();
+    const prior = db.select({ id: siteAuditSnapshots.id }).from(siteAuditSnapshots).where(and16(eq20(siteAuditSnapshots.projectId, input.projectId), ne2(siteAuditSnapshots.runId, input.runId))).limit(1).get();
     if (prior) return;
     trackEvent("activation.completed", {
       flowVersion: ONBOARDING_FLOW_VERSION,
@@ -12711,12 +12752,12 @@ function trackSiteAuditOutcome(db, input) {
 }
 async function executeSiteAudit(db, runId, projectId, opts = {}) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-  const claim = db.update(runs).set({ status: "running", startedAt }).where(and15(eq19(runs.id, runId), eq19(runs.projectId, projectId), eq19(runs.status, "queued"))).run();
+  const claim = db.update(runs).set({ status: "running", startedAt }).where(and16(eq20(runs.id, runId), eq20(runs.projectId, projectId), eq20(runs.status, "queued"))).run();
   if (claim.changes === 0) return;
   const startTime = Date.now();
-  const trigger = db.select({ trigger: runs.trigger }).from(runs).where(eq19(runs.id, runId)).get()?.trigger ?? null;
+  const trigger = db.select({ trigger: runs.trigger }).from(runs).where(eq20(runs.id, runId)).get()?.trigger ?? null;
   let canonicalDomain = null;
-  const attemptNumber = (db.select({ value: sql7`coalesce(max(${siteCrawlAttempts.attemptNumber}), 0)` }).from(siteCrawlAttempts).where(eq19(siteCrawlAttempts.runId, runId)).get()?.value ?? 0) + 1;
+  const attemptNumber = (db.select({ value: sql7`coalesce(max(${siteCrawlAttempts.attemptNumber}), 0)` }).from(siteCrawlAttempts).where(eq20(siteCrawlAttempts.runId, runId)).get()?.value ?? 0) + 1;
   const attemptId = crypto20.randomUUID();
   db.insert(siteCrawlAttempts).values({
     id: attemptId,
@@ -12751,22 +12792,22 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       const nodeKey = nodeKeyByUrl.get(url);
       if (!nodeKey) continue;
       const scope = [
-        eq19(siteCrawlEdges.projectId, projectId),
-        eq19(siteCrawlEdges.runId, runId),
-        eq19(siteCrawlEdges.attemptId, attemptId)
+        eq20(siteCrawlEdges.projectId, projectId),
+        eq20(siteCrawlEdges.runId, runId),
+        eq20(siteCrawlEdges.attemptId, attemptId)
       ];
-      tx.update(siteCrawlEdges).set({ sourceNodeKey: nodeKey, updatedAt: now }).where(and15(
+      tx.update(siteCrawlEdges).set({ sourceNodeKey: nodeKey, updatedAt: now }).where(and16(
         ...scope,
-        eq19(siteCrawlEdges.sourceUrl, url)
+        eq20(siteCrawlEdges.sourceUrl, url)
       )).run();
-      tx.update(siteCrawlEdges).set({ targetNodeKey: nodeKey, updatedAt: now }).where(and15(
+      tx.update(siteCrawlEdges).set({ targetNodeKey: nodeKey, updatedAt: now }).where(and16(
         ...scope,
-        eq19(siteCrawlEdges.targetUrl, url)
+        eq20(siteCrawlEdges.targetUrl, url)
       )).run();
       const pageScope = [
-        eq19(siteCrawlPages.projectId, projectId),
-        eq19(siteCrawlPages.runId, runId),
-        eq19(siteCrawlPages.attemptId, attemptId)
+        eq20(siteCrawlPages.projectId, projectId),
+        eq20(siteCrawlPages.runId, runId),
+        eq20(siteCrawlPages.attemptId, attemptId)
       ];
       const canonicalTargets = tx.select({
         id: siteCrawlPages.id,
@@ -12774,13 +12815,13 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         fetchState: siteCrawlPages.fetchState,
         indexabilityState: siteCrawlPages.indexabilityState,
         indexabilityReasons: siteCrawlPages.indexabilityReasons
-      }).from(siteCrawlPages).where(and15(...pageScope, eq19(siteCrawlPages.canonicalUrl, url))).all();
+      }).from(siteCrawlPages).where(and16(...pageScope, eq20(siteCrawlPages.canonicalUrl, url))).all();
       for (const target of canonicalTargets) {
         tx.update(siteCrawlPages).set({
           canonicalNodeKey: nodeKey,
           healthState: deriveSiteHealthState({ ...target, canonicalNodeKey: nodeKey }),
           updatedAt: now
-        }).where(eq19(siteCrawlPages.id, target.id)).run();
+        }).where(eq20(siteCrawlPages.id, target.id)).run();
       }
     }
   };
@@ -12939,20 +12980,20 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       linkScoreRaw: metrics.linkScoreRaw,
       linkScoreNormalized: metrics.linkScore,
       updatedAt: now
-    }).where(and15(
-      eq19(siteCrawlPages.projectId, projectId),
-      eq19(siteCrawlPages.runId, runId),
-      eq19(siteCrawlPages.attemptId, attemptId),
-      eq19(siteCrawlPages.nodeKey, key)
+    }).where(and16(
+      eq20(siteCrawlPages.projectId, projectId),
+      eq20(siteCrawlPages.runId, runId),
+      eq20(siteCrawlPages.attemptId, attemptId),
+      eq20(siteCrawlPages.nodeKey, key)
     )).run();
   };
   const persistEvent = async (event) => {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     db.transaction((tx) => {
-      const receipt = tx.select({ checksum: siteCrawlEventReceipts.checksum }).from(siteCrawlEventReceipts).where(and15(
-        eq19(siteCrawlEventReceipts.attemptId, attemptId),
-        eq19(siteCrawlEventReceipts.sequence, event.sequence),
-        eq19(siteCrawlEventReceipts.batchId, event.batchId)
+      const receipt = tx.select({ checksum: siteCrawlEventReceipts.checksum }).from(siteCrawlEventReceipts).where(and16(
+        eq20(siteCrawlEventReceipts.attemptId, attemptId),
+        eq20(siteCrawlEventReceipts.sequence, event.sequence),
+        eq20(siteCrawlEventReceipts.batchId, event.batchId)
       )).get();
       if (receipt) {
         if (receipt.checksum !== event.checksum) {
@@ -12987,18 +13028,18 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
           urlVersionsSkipped: event.type === "summary" ? event.summary.urlVersions?.skipped ?? 0 : sql7`${siteCrawlAttempts.urlVersionsSkipped}`,
           edgesDiscovered: progress.edgesObserved,
           updatedAt: now
-        }).where(eq19(siteCrawlAttempts.id, attemptId)).run();
+        }).where(eq20(siteCrawlAttempts.id, attemptId)).run();
       } else {
         tx.update(siteCrawlAttempts).set({
           lastEventSequence: event.sequence,
           lastEventChecksum: event.checksum,
           updatedAt: now
-        }).where(eq19(siteCrawlAttempts.id, attemptId)).run();
+        }).where(eq20(siteCrawlAttempts.id, attemptId)).run();
       }
     });
   };
   try {
-    const project = db.select().from(projects).where(eq19(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq20(projects.id, projectId)).get();
     if (!project) throw new Error(`Project not found: ${projectId}`);
     canonicalDomain = project.canonicalDomain;
     const homepageUrl = toHomepageUrl(project.canonicalDomain);
@@ -13010,6 +13051,12 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
     });
     const crawlRootUrl = resolvedRoot.effectiveUrl;
     if (opts.sitemapUrl) await assertSiteAuditUrlAllowed(opts.sitemapUrl, "sitemapUrl");
+    let entities = null;
+    try {
+      entities = activePlanEntityRegistry(db, projectId);
+    } catch (error) {
+      log15.warn("entity-registry.unavailable", { runId, projectId, error: describeError(error) });
+    }
     log15.info("start", {
       runId,
       projectId,
@@ -13018,7 +13065,8 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       redirects: resolvedRoot.redirects.length,
       maxPages,
       maxEdges,
-      maxDepth: opts.maxDepth ?? null
+      maxDepth: opts.maxDepth ?? null,
+      entityPlanRevision: entities?.planRevision ?? null
     });
     const report = await runSiteCrawl(crawlRootUrl, {
       mode: "summary",
@@ -13030,6 +13078,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       includeGeo: opts.includeGeo ?? false,
       includeAgentSkills: opts.includeAgentSkills ?? true,
       skipUrlVersionsAfter: SITE_AUDIT_SKIP_URL_VERSIONS_AFTER,
+      ...entities ? { entityRegistry: entities.registry } : {},
       signal: opts.signal,
       onEvent: persistEvent
     });
@@ -13102,7 +13151,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
       }
     }
     const published = db.transaction((tx) => {
-      const claim2 = tx.update(runs).set({ status: terminalStatus, finishedAt }).where(and15(eq19(runs.id, runId), eq19(runs.status, "running"))).run();
+      const claim2 = tx.update(runs).set({ status: terminalStatus, finishedAt }).where(and16(eq20(runs.id, runId), eq20(runs.status, "running"))).run();
       if (claim2.changes === 0) return false;
       if (aggregateScore !== null) {
         tx.insert(siteAuditSnapshots).values({
@@ -13158,7 +13207,9 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
           maxDepth: opts.maxDepth ?? null,
           checkDeadLinks: opts.checkDeadLinks ?? false,
           includeGeo: opts.includeGeo ?? false,
-          includeAgentSkills: opts.includeAgentSkills ?? true
+          includeAgentSkills: opts.includeAgentSkills ?? true,
+          // The plan revision whose Properties pages were checked against; null when none were.
+          entityPlanRevision: entities?.planRevision ?? null
         },
         pageBudget: maxPages,
         edgeBudget: maxEdges ?? null,
@@ -13212,7 +13263,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         edgesDiscovered: crawlSummary.edgesObserved,
         finishedAt,
         updatedAt: finishedAt
-      }).where(eq19(siteCrawlAttempts.id, attemptId)).run();
+      }).where(eq20(siteCrawlAttempts.id, attemptId)).run();
       return true;
     });
     if (!published) {
@@ -13225,7 +13276,7 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
           error: describeError(cleanupError)
         });
       }
-      const current = db.select({ status: runs.status }).from(runs).where(eq19(runs.id, runId)).get();
+      const current = db.select({ status: runs.status }).from(runs).where(eq20(runs.id, runId)).get();
       if (current?.status === "cancelled") throw new SiteAuditCancelledError(`Site audit cancelled before publication: ${runId}`);
       throw new Error(`Site audit run was no longer running before publication: ${runId}`);
     }
@@ -13273,12 +13324,12 @@ async function executeSiteAudit(db, runId, projectId, opts = {}) {
         error: message,
         finishedAt,
         updatedAt: finishedAt
-      }).where(eq19(siteCrawlAttempts.id, attemptId)).run();
+      }).where(eq20(siteCrawlAttempts.id, attemptId)).run();
       tx.update(runs).set({
         status: cancelled ? "cancelled" : "failed",
         error: message,
         finishedAt
-      }).where(and15(eq19(runs.id, runId), eq19(runs.status, "running"))).run();
+      }).where(and16(eq20(runs.id, runId), eq20(runs.status, "running"))).run();
     });
     log15.error("failed", { runId, projectId, cancelled, error: message });
     trackSiteAuditOutcome(db, {
@@ -13476,7 +13527,7 @@ function derivedRouteAdapter(adapter, route) {
 }
 
 // src/install-state-telemetry.ts
-import { and as and16, count as count4, eq as eq20, gte as gte2, inArray as inArray8, isNotNull as isNotNull2, isNull as isNull2, ne as ne3, sql as sql8 } from "drizzle-orm";
+import { and as and17, count as count4, eq as eq21, gte as gte2, inArray as inArray8, isNotNull as isNotNull2, isNull as isNull2, ne as ne3, sql as sql8 } from "drizzle-orm";
 var log17 = createLogger("InstallStateTelemetry");
 var INSTALL_STATE_FIRST_DELAY_MS = 5 * 6e4;
 var INSTALL_STATE_INTERVAL_MS = 24 * 60 * 6e4;
@@ -13501,8 +13552,8 @@ function buildInstallState(sources, now, startedAt) {
   const total = (query) => whole(query.get()?.value);
   const googleByType = new Map(db.select({ type: googleConnections.connectionType, value: count4() }).from(googleConnections).groupBy(googleConnections.connectionType).all().map((row) => [row.type, whole(row.value)]));
   const gaServiceAccounts = total(db.select({ value: count4() }).from(gaConnections));
-  const trafficByType = db.select({ type: trafficSources.sourceType, value: count4() }).from(trafficSources).where(and16(isNull2(trafficSources.archivedAt), ne3(trafficSources.status, TrafficSourceStatuses.archived))).groupBy(trafficSources.sourceType).all();
-  const webhookSources = db.select({ config: notifications.config }).from(notifications).where(eq20(notifications.enabled, true)).all().map((row) => row.config.source);
+  const trafficByType = db.select({ type: trafficSources.sourceType, value: count4() }).from(trafficSources).where(and17(isNull2(trafficSources.archivedAt), ne3(trafficSources.status, TrafficSourceStatuses.archived))).groupBy(trafficSources.sourceType).all();
+  const webhookSources = db.select({ config: notifications.config }).from(notifications).where(eq21(notifications.enabled, true)).all().map((row) => row.config.source);
   const agentWebhooks = webhookSources.filter((source) => source === AGENT_WEBHOOK_SOURCE).length;
   const webhooks = webhookSources.length - agentWebhooks;
   const bing = total(db.select({ value: count4() }).from(bingConnections));
@@ -13516,7 +13567,7 @@ function buildInstallState(sources, now, startedAt) {
     queries: total(db.select({ value: count4() }).from(queries)),
     competitors: total(db.select({ value: count4() }).from(competitors)),
     locations: total(db.select({ value: sql8`coalesce(sum(json_array_length(${projects.locations})), 0)` }).from(projects)),
-    schedules: total(db.select({ value: count4() }).from(schedules).where(eq20(schedules.enabled, true))),
+    schedules: total(db.select({ value: count4() }).from(schedules).where(eq21(schedules.enabled, true))),
     webhooks,
     agentWebhooks,
     trafficSources: trafficByType.reduce((sum, row) => sum + whole(row.value), 0),
@@ -13560,14 +13611,14 @@ function buildInstallState(sources, now, startedAt) {
     costMicros: sql8`coalesce(sum(${usagePath("estimatedCostMicros")}), 0)`
   }).from(querySnapshots).where(gte2(querySnapshots.createdAt, since)).groupBy(sql8`+${querySnapshots.provider}`).all();
   for (const row of answers) addCalls(row.provider, whole(row.answers));
-  for (const row of db.select({ provider: researchRuns.provider, answered: sql8`coalesce(sum(${researchRuns.completedQueries}), 0)` }).from(researchRuns).where(and16(inArray8(researchRuns.projectId, projectIds), gte2(researchRuns.createdAt, since))).groupBy(researchRuns.provider).all()) {
+  for (const row of db.select({ provider: researchRuns.provider, answered: sql8`coalesce(sum(${researchRuns.completedQueries}), 0)` }).from(researchRuns).where(and17(inArray8(researchRuns.projectId, projectIds), gte2(researchRuns.createdAt, since))).groupBy(researchRuns.provider).all()) {
     addCalls(row.provider, whole(row.answered));
   }
   for (const session of db.select({
     seedProviders: discoverySessions.seedProviders,
     seedCountRaw: discoverySessions.seedCountRaw,
     probeCount: discoverySessions.probeCount
-  }).from(discoverySessions).where(and16(inArray8(discoverySessions.projectId, projectIds), gte2(discoverySessions.createdAt, since))).all()) {
+  }).from(discoverySessions).where(and17(inArray8(discoverySessions.projectId, projectIds), gte2(discoverySessions.createdAt, since))).all()) {
     if (session.seedCountRaw !== null) {
       for (const provider of session.seedProviders?.length ? session.seedProviders : [ProviderNames.gemini]) addCalls(provider, 1);
     }
@@ -13576,15 +13627,15 @@ function buildInstallState(sources, now, startedAt) {
   const answered = answers.reduce((sum, row) => sum + whole(row.answers), 0);
   const measured = answers.reduce((sum, row) => sum + whole(row.measured), 0);
   const usage24h = {
-    sweeps: total(db.select({ value: count4() }).from(runs).where(and16(
+    sweeps: total(db.select({ value: count4() }).from(runs).where(and17(
       inArray8(runs.projectId, projectIds),
-      eq20(runs.kind, RunKinds["answer-visibility"]),
+      eq21(runs.kind, RunKinds["answer-visibility"]),
       gte2(runs.createdAt, since),
       ne3(runs.trigger, RunTriggers.probe)
     ))),
-    audits: total(db.select({ value: count4() }).from(runs).where(and16(
+    audits: total(db.select({ value: count4() }).from(runs).where(and17(
       inArray8(runs.projectId, projectIds),
-      eq20(runs.kind, RunKinds["site-audit"]),
+      eq21(runs.kind, RunKinds["site-audit"]),
       gte2(runs.createdAt, since)
     ))),
     providerCalls: [...providerCalls.values()].reduce((sum, calls) => sum + calls, 0)
@@ -13601,14 +13652,14 @@ function buildInstallState(sources, now, startedAt) {
     inputTokens: sql8`coalesce(sum(${llmUsageEvents.inputTokens}), 0)`,
     outputTokens: sql8`coalesce(sum(${llmUsageEvents.outputTokens}), 0)`,
     costMillicents: sql8`coalesce(sum(${llmUsageEvents.costMillicents}), 0)`
-  }).from(llmUsageEvents).where(and16(eq20(llmUsageEvents.feature, AeroLlmUsageFeatures.turn), gte2(llmUsageEvents.createdAt, since))).get();
+  }).from(llmUsageEvents).where(and17(eq21(llmUsageEvents.feature, AeroLlmUsageFeatures.turn), gte2(llmUsageEvents.createdAt, since))).get();
   const aeroCalls = whole(aero?.calls);
   usage24h.aeroModelCalls = aeroCalls;
   usage24h.aeroInputTokens = whole(aero?.inputTokens);
   usage24h.aeroOutputTokens = whole(aero?.outputTokens);
   const aeroMillicents = whole(aero?.costMillicents);
   if (aeroCalls === 0 || aeroMillicents > 0) usage24h.aeroCostMicros = aeroMillicents * 10;
-  usage24h.webhookDeliveries = total(db.select({ value: count4() }).from(auditLog).where(and16(gte2(auditLog.createdAt, since), eq20(auditLog.action, WEBHOOK_DELIVERED_ACTION))));
+  usage24h.webhookDeliveries = total(db.select({ value: count4() }).from(auditLog).where(and17(gte2(auditLog.createdAt, since), eq21(auditLog.action, WEBHOOK_DELIVERED_ACTION))));
   const providerCalls24h = Object.fromEntries(PROVIDER_NAMES.flatMap((name) => providerCalls.has(name) ? [[name, providerCalls.get(name)]] : []));
   return {
     providers: registeredProviderNames(config).filter((name) => KNOWN_PROVIDERS2.has(name)),
@@ -13738,7 +13789,7 @@ function configuredProviderEntries(config, apiAdapters, cdpAdapter) {
 
 // src/provider-reload-batch-guard.ts
 import { isDeepStrictEqual } from "util";
-import { and as and17, inArray as inArray9 } from "drizzle-orm";
+import { and as and18, inArray as inArray9 } from "drizzle-orm";
 function pendingBatchIdentity(provider) {
   const { quotaPolicy: _quotaPolicy, ...identity } = resolveRegistration(provider.adapter, provider.config).config;
   return identity;
@@ -13752,7 +13803,7 @@ function assertProviderReloadKeepsPendingBatches(db, previous, next, executing =
   const changed = previous.filter(changedRegistration).map((provider) => provider.adapter.name);
   const active = executing.filter((snapshot) => changedRegistration(snapshot.registration));
   if (changed.length === 0 && active.length === 0) return;
-  const pending = changed.length === 0 ? [] : db.select({ id: providerBatches.id, provider: providerBatches.provider, runId: providerBatches.runId }).from(providerBatches).where(and17(
+  const pending = changed.length === 0 ? [] : db.select({ id: providerBatches.id, provider: providerBatches.provider, runId: providerBatches.runId }).from(providerBatches).where(and18(
     inArray9(providerBatches.provider, changed),
     inArray9(providerBatches.status, [ProviderBatchStatuses.submitting, ProviderBatchStatuses.submitted, ProviderBatchStatuses.ended])
   )).all();
@@ -13834,7 +13885,7 @@ function createProviderModelCatalog(registry) {
 // src/scheduler.ts
 import crypto21 from "crypto";
 import cron from "node-cron";
-import { and as and18, eq as eq21, inArray as inArray10, notExists, sql as sql9 } from "drizzle-orm";
+import { and as and19, eq as eq22, inArray as inArray10, notExists, sql as sql9 } from "drizzle-orm";
 var log18 = createLogger("Scheduler");
 var SLOT_FIRED = { status: OutcomeStatuses.succeeded };
 var slotSkipped = (reasonCode) => ({ status: OutcomeStatuses.skipped, reasonCode });
@@ -13913,9 +13964,9 @@ var Scheduler = class {
    */
   ensureHealthSchedules() {
     const projectsWithoutHealth = this.db.select({ id: projects.id }).from(projects).where(notExists(
-      this.db.select({ one: sql9`1` }).from(schedules).where(and18(
-        eq21(schedules.projectId, projects.id),
-        eq21(schedules.kind, SchedulableRunKinds.doctor)
+      this.db.select({ one: sql9`1` }).from(schedules).where(and19(
+        eq22(schedules.projectId, projects.id),
+        eq22(schedules.kind, SchedulableRunKinds.doctor)
       ))
     )).all();
     if (projectsWithoutHealth.length === 0) return;
@@ -13958,7 +14009,7 @@ var Scheduler = class {
   start() {
     this.ensureHealthSchedules();
     this.ensureQueryBaskets();
-    const allSchedules = this.db.select().from(schedules).where(eq21(schedules.enabled, true)).all();
+    const allSchedules = this.db.select().from(schedules).where(eq22(schedules.enabled, true)).all();
     for (const schedule of allSchedules) {
       const missedRunAt = schedule.nextRunAt;
       const recurrence = scheduleRecurrence(schedule);
@@ -13992,7 +14043,7 @@ var Scheduler = class {
       this.stopTask(key, existing, "Stopped");
       this.tasks.delete(key);
     }
-    const schedule = this.db.select().from(schedules).where(and18(eq21(schedules.projectId, projectId), eq21(schedules.kind, kind))).get();
+    const schedule = this.db.select().from(schedules).where(and19(eq22(schedules.projectId, projectId), eq22(schedules.kind, kind))).get();
     if (schedule && schedule.enabled) {
       this.registerCronTask(schedule);
     }
@@ -14025,12 +14076,12 @@ var Scheduler = class {
   /** Runtime timing writes must not restore a version already issued to a settings caller. */
   updateScheduleTiming(scheduleId, timing) {
     this.db.transaction((tx) => {
-      const current = tx.select({ updatedAt: schedules.updatedAt }).from(schedules).where(eq21(schedules.id, scheduleId)).get();
+      const current = tx.select({ updatedAt: schedules.updatedAt }).from(schedules).where(eq22(schedules.id, scheduleId)).get();
       if (!current) return;
       tx.update(schedules).set({
         ...timing,
         updatedAt: nextScheduleUpdatedAt(current.updatedAt)
-      }).where(eq21(schedules.id, scheduleId)).run();
+      }).where(eq22(schedules.id, scheduleId)).run();
     });
   }
   registerCronTask(schedule, options = {}) {
@@ -14106,7 +14157,7 @@ var Scheduler = class {
     };
     const tick = () => {
       if (stopped) return;
-      const current = this.db.select().from(schedules).where(eq21(schedules.id, scheduleId)).get();
+      const current = this.db.select().from(schedules).where(eq22(schedules.id, scheduleId)).get();
       if (!current || !current.enabled || !scheduleRecurrence(current)) {
         this.remove(projectId, kind);
         return;
@@ -14124,7 +14175,7 @@ var Scheduler = class {
           this.triggerRun(scheduleId, projectId, kind);
         }
       }
-      arm(this.db.select({ nextRunAt: schedules.nextRunAt }).from(schedules).where(eq21(schedules.id, scheduleId)).get()?.nextRunAt);
+      arm(this.db.select({ nextRunAt: schedules.nextRunAt }).from(schedules).where(eq22(schedules.id, scheduleId)).get()?.nextRunAt);
     };
     this.tasks.set(key, task);
     let registeredNextRunAt = schedule.nextRunAt;
@@ -14139,7 +14190,7 @@ var Scheduler = class {
   /** Atomically advance a due callback-only calendar occurrence before dispatch. */
   claimCalendarOccurrence(schedule, dueAt, now) {
     return this.db.transaction((tx) => {
-      const current = tx.select().from(schedules).where(eq21(schedules.id, schedule.id)).get();
+      const current = tx.select().from(schedules).where(eq22(schedules.id, schedule.id)).get();
       if (!current || !current.enabled || current.updatedAt !== schedule.updatedAt || current.nextRunAt !== dueAt) return false;
       const recurrence = scheduleRecurrence(current);
       if (!recurrence) return false;
@@ -14148,11 +14199,11 @@ var Scheduler = class {
       const result = tx.update(schedules).set({
         nextRunAt,
         updatedAt: nextScheduleUpdatedAt(current.updatedAt)
-      }).where(and18(
-        eq21(schedules.id, current.id),
-        eq21(schedules.enabled, true),
-        eq21(schedules.nextRunAt, dueAt),
-        eq21(schedules.updatedAt, schedule.updatedAt)
+      }).where(and19(
+        eq22(schedules.id, current.id),
+        eq22(schedules.enabled, true),
+        eq22(schedules.nextRunAt, dueAt),
+        eq22(schedules.updatedAt, schedule.updatedAt)
       )).run();
       return result.changes === 1;
     });
@@ -14174,7 +14225,7 @@ var Scheduler = class {
   fireSlot(scheduleId, projectId, kind, claimedOccurrence) {
     try {
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const currentSchedule = this.db.select().from(schedules).where(eq21(schedules.id, scheduleId)).get();
+      const currentSchedule = this.db.select().from(schedules).where(eq22(schedules.id, scheduleId)).get();
       if (!currentSchedule || !currentSchedule.enabled) {
         log18.warn("schedule.stale", { scheduleId, projectId, kind, msg: "schedule no longer exists or is disabled" });
         this.remove(projectId, kind);
@@ -14190,7 +14241,7 @@ var Scheduler = class {
         timezone: currentSchedule.timezone,
         recurrence
       });
-      const project = this.db.select().from(projects).where(eq21(projects.id, projectId)).get();
+      const project = this.db.select().from(projects).where(eq22(projects.id, projectId)).get();
       if (!project) {
         log18.error("project.not-found", { projectId, kind, msg: "skipping scheduled run" });
         this.remove(projectId, kind);
@@ -14241,9 +14292,9 @@ var Scheduler = class {
           log18.warn("ads-sync.no-callback", { scheduleId, projectId, msg: "host did not register onAdsSyncRequested" });
           return slotFailed(OutcomeReasonCodes.UNSUPPORTED);
         }
-        const activeAdsRun = this.db.select({ id: runs.id }).from(runs).where(and18(
-          eq21(runs.projectId, projectId),
-          eq21(runs.kind, RunKinds["ads-sync"]),
+        const activeAdsRun = this.db.select({ id: runs.id }).from(runs).where(and19(
+          eq22(runs.projectId, projectId),
+          eq22(runs.kind, RunKinds["ads-sync"]),
           inArray10(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (activeAdsRun) {
@@ -14273,9 +14324,9 @@ var Scheduler = class {
           log18.warn("seo-sync.no-callback", { scheduleId, projectId, msg: "host did not register onSeoSyncRequested" });
           return slotFailed(OutcomeReasonCodes.UNSUPPORTED);
         }
-        const activeSeoRun = this.db.select({ id: runs.id }).from(runs).where(and18(
-          eq21(runs.projectId, projectId),
-          eq21(runs.kind, RunKinds["seo-sync"]),
+        const activeSeoRun = this.db.select({ id: runs.id }).from(runs).where(and19(
+          eq22(runs.projectId, projectId),
+          eq22(runs.kind, RunKinds["seo-sync"]),
           inArray10(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (activeSeoRun) {
@@ -14335,9 +14386,9 @@ var Scheduler = class {
           log18.warn("site-audit.no-callback", { scheduleId, projectId, msg: "host did not register onSiteAuditRequested" });
           return slotFailed(OutcomeReasonCodes.UNSUPPORTED);
         }
-        const active = this.db.select({ id: runs.id }).from(runs).where(and18(
-          eq21(runs.projectId, projectId),
-          eq21(runs.kind, RunKinds["site-audit"]),
+        const active = this.db.select({ id: runs.id }).from(runs).where(and19(
+          eq22(runs.projectId, projectId),
+          eq22(runs.kind, RunKinds["site-audit"]),
           inArray10(runs.status, [RunStatuses.queued, RunStatuses.running])
         )).get();
         if (active) {
@@ -14553,7 +14604,7 @@ function startSiteLivenessLoop(deps, intervalMs = SITE_LIVENESS_INTERVAL_MS) {
 
 // src/review-webhook-delivery.ts
 import { createHash as createHash7 } from "crypto";
-import { and as and19, asc as asc4, eq as eq22, isNull as isNull3, lte as lte2, or } from "drizzle-orm";
+import { and as and20, asc as asc4, eq as eq23, isNull as isNull3, lte as lte2, or } from "drizzle-orm";
 var log20 = createLogger("ReviewDelivery");
 var hash = (value) => createHash7("sha256").update(JSON.stringify(value)).digest("hex");
 var REVIEW_DELIVERY_MAX_ATTEMPTS = 10;
@@ -14581,20 +14632,20 @@ function reviewEventId(projectId, review) {
 function reviewEventRefusal(db, projectId, payload, notification, targetDigest, now) {
   if (!notification?.enabled || !notification.config.events.includes("review.negative")) return "destination_disabled";
   if (targetDigest !== void 0 && hash(notification.config.url) !== targetDigest) return "destination_changed";
-  const project = db.select().from(projects).where(eq22(projects.id, projectId)).get();
+  const project = db.select().from(projects).where(eq23(projects.id, projectId)).get();
   if (!project || project.name !== payload.project.name || project.canonicalDomain !== payload.project.canonicalDomain) return "project_changed";
   const review = payload.reviews[0];
-  const location = db.select().from(gbpLocations).where(and19(
-    eq22(gbpLocations.projectId, projectId),
-    eq22(gbpLocations.locationName, review.location.name),
-    eq22(gbpLocations.selected, true)
+  const location = db.select().from(gbpLocations).where(and20(
+    eq23(gbpLocations.projectId, projectId),
+    eq23(gbpLocations.locationName, review.location.name),
+    eq23(gbpLocations.selected, true)
   )).get();
   if (!location || review.origin === "gbp" && !review.reviewName.startsWith(`${location.accountName}/${location.locationName}/reviews/`)) return "location_removed_or_deselected";
-  const current = db.select().from(gbpReviews).where(and19(
-    eq22(gbpReviews.projectId, projectId),
-    eq22(gbpReviews.origin, review.origin),
-    eq22(gbpReviews.reviewName, review.reviewName),
-    eq22(gbpReviews.locationName, review.location.name)
+  const current = db.select().from(gbpReviews).where(and20(
+    eq23(gbpReviews.projectId, projectId),
+    eq23(gbpReviews.origin, review.origin),
+    eq23(gbpReviews.reviewName, review.reviewName),
+    eq23(gbpReviews.locationName, review.location.name)
   )).get();
   if (!current) return "review_removed";
   if (!isWithinAlertWindow(review.updateTime, now) || !isWithinAlertWindow(current.updateTime, now)) return "review_expired";
@@ -14602,10 +14653,10 @@ function reviewEventRefusal(db, projectId, payload, notification, targetDigest,
   if (!isNegativeReviewRating(current.starRating, threshold) || !isNegativeReviewRating(review.starRating, threshold)) return "review_no_longer_negative";
   if (["baseline", "skipped", "suppressed", "stale", "none"].includes(current.alertState)) return "review_suppressed";
   if (review.origin === "places") {
-    const v4HasWorked = db.select({ id: gbpReviewRatings.id }).from(gbpReviewRatings).where(and19(
-      eq22(gbpReviewRatings.projectId, projectId),
-      eq22(gbpReviewRatings.locationName, review.location.name),
-      eq22(gbpReviewRatings.origin, "gbp")
+    const v4HasWorked = db.select({ id: gbpReviewRatings.id }).from(gbpReviewRatings).where(and20(
+      eq23(gbpReviewRatings.projectId, projectId),
+      eq23(gbpReviewRatings.locationName, review.location.name),
+      eq23(gbpReviewRatings.origin, "gbp")
     )).get() !== void 0;
     if (businessProfileReviewsCover(location.reviewsAccess, v4HasWorked)) return "review_origin_superseded";
   }
@@ -14613,9 +14664,9 @@ function reviewEventRefusal(db, projectId, payload, notification, targetDigest,
 }
 function cancelReviewDelivery(db, id, reason) {
   db.transaction((tx) => {
-    const canceled = tx.update(reviewWebhookDeliveries).set({ state: ReviewDeliveryStates.Canceled, retryAt: null }).where(and19(
-      eq22(reviewWebhookDeliveries.id, id),
-      eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending)
+    const canceled = tx.update(reviewWebhookDeliveries).set({ state: ReviewDeliveryStates.Canceled, retryAt: null }).where(and20(
+      eq23(reviewWebhookDeliveries.id, id),
+      eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending)
     )).returning({ projectId: reviewWebhookDeliveries.projectId, eventId: reviewWebhookDeliveries.eventId, notificationId: reviewWebhookDeliveries.notificationId, targetDigest: reviewWebhookDeliveries.targetDigest }).get();
     if (canceled) writeAuditLog(tx, {
       projectId: canceled.projectId,
@@ -14631,10 +14682,10 @@ function deferReviewDelivery(db, saved, now) {
   if (saved.state !== ReviewDeliveryStates.Pending && saved.state !== ReviewDeliveryStates.Attempting) return;
   const waited = now - Date.parse(saved.createdAt);
   const delay = Math.min(Math.max(RETRY_BASE_MS, Number.isFinite(waited) ? waited / 4 : RETRY_BASE_MS), RETRY_MAX_MS);
-  db.update(reviewWebhookDeliveries).set({ retryAt: new Date(now + delay).toISOString() }).where(and19(
-    eq22(reviewWebhookDeliveries.id, saved.id),
-    eq22(reviewWebhookDeliveries.state, saved.state),
-    eq22(reviewWebhookDeliveries.attempts, saved.attempts)
+  db.update(reviewWebhookDeliveries).set({ retryAt: new Date(now + delay).toISOString() }).where(and20(
+    eq23(reviewWebhookDeliveries.id, saved.id),
+    eq23(reviewWebhookDeliveries.state, saved.state),
+    eq23(reviewWebhookDeliveries.attempts, saved.attempts)
   )).run();
 }
 function auditUndelivered(db, saved, outcome) {
@@ -14651,8 +14702,8 @@ function dueReviewDeliveryProjects(db, now) {
   const at = new Date(now).toISOString();
   const staleAttempt = new Date(now - 6e4).toISOString();
   return db.selectDistinct({ projectId: reviewWebhookDeliveries.projectId }).from(reviewWebhookDeliveries).where(or(
-    and19(eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending), or(isNull3(reviewWebhookDeliveries.retryAt), lte2(reviewWebhookDeliveries.retryAt, at))),
-    and19(eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting), lte2(reviewWebhookDeliveries.attemptedAt, staleAttempt))
+    and20(eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending), or(isNull3(reviewWebhookDeliveries.retryAt), lte2(reviewWebhookDeliveries.retryAt, at))),
+    and20(eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting), lte2(reviewWebhookDeliveries.attemptedAt, staleAttempt))
   )).all().map((row) => row.projectId);
 }
 function startReviewDeliveryLoop(drain, intervalMs = REVIEW_DELIVERY_INTERVAL_MS) {
@@ -14673,12 +14724,12 @@ async function drainReviewDeliveries(options) {
   const now = (options.now ?? Date.now)();
   const at = new Date(now).toISOString();
   const staleAttempt = new Date(now - 6e4).toISOString();
-  const ready = options.db.select().from(reviewWebhookDeliveries).where(and19(
-    eq22(reviewWebhookDeliveries.projectId, options.projectId),
+  const ready = options.db.select().from(reviewWebhookDeliveries).where(and20(
+    eq23(reviewWebhookDeliveries.projectId, options.projectId),
     or(isNull3(reviewWebhookDeliveries.retryAt), lte2(reviewWebhookDeliveries.retryAt, at)),
     or(
-      eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending),
-      and19(eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting), lte2(reviewWebhookDeliveries.attemptedAt, staleAttempt))
+      eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending),
+      and20(eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting), lte2(reviewWebhookDeliveries.attemptedAt, staleAttempt))
     )
   )).orderBy(asc4(reviewWebhookDeliveries.retryAt), asc4(reviewWebhookDeliveries.attemptedAt), asc4(reviewWebhookDeliveries.createdAt), asc4(reviewWebhookDeliveries.id)).limit(100).all();
   let delivered = 0;
@@ -14702,15 +14753,15 @@ async function deliverReviewEvent(options) {
   if (!payload.eventId || !/^evt_[a-f0-9]{64}$/u.test(payload.eventId) || payload.reviews.length !== 1)
     return false;
   const notification = db.select().from(notifications).where(
-    and19(
-      eq22(notifications.id, notificationId),
-      eq22(notifications.projectId, projectId)
+    and20(
+      eq23(notifications.id, notificationId),
+      eq23(notifications.projectId, projectId)
     )
   ).get();
   const id = hash([projectId, notificationId, payload.eventId]);
   const now = options.now ?? Date.now;
   const at = new Date(now()).toISOString();
-  let saved = db.select().from(reviewWebhookDeliveries).where(eq22(reviewWebhookDeliveries.id, id)).get();
+  let saved = db.select().from(reviewWebhookDeliveries).where(eq23(reviewWebhookDeliveries.id, id)).get();
   const event = saved?.payload ?? payload;
   const refusal = reviewEventRefusal(db, projectId, event, notification, saved?.targetDigest, new Date(now()));
   if (refusal) {
@@ -14729,7 +14780,7 @@ async function deliverReviewEvent(options) {
     payload,
     createdAt: at
   }).onConflictDoNothing().run();
-  saved = db.select().from(reviewWebhookDeliveries).where(eq22(reviewWebhookDeliveries.id, id)).get();
+  saved = db.select().from(reviewWebhookDeliveries).where(eq23(reviewWebhookDeliveries.id, id)).get();
   if (!saved || saved.targetDigest !== targetDigest) return false;
   if (saved.state === ReviewDeliveryStates.Sent) return true;
   if (saved.state === ReviewDeliveryStates.Uncertain || saved.state === ReviewDeliveryStates.Canceled) return false;
@@ -14744,17 +14795,17 @@ async function deliverReviewEvent(options) {
       return false;
     const state2 = destination.signed ? ReviewDeliveryStates.Pending : ReviewDeliveryStates.Uncertain;
     const moved = db.update(reviewWebhookDeliveries).set({ state: state2 }).where(
-      and19(
-        eq22(reviewWebhookDeliveries.id, id),
-        eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting),
-        eq22(reviewWebhookDeliveries.attempts, saved.attempts),
-        eq22(reviewWebhookDeliveries.attemptedAt, saved.attemptedAt)
+      and20(
+        eq23(reviewWebhookDeliveries.id, id),
+        eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting),
+        eq23(reviewWebhookDeliveries.attempts, saved.attempts),
+        eq23(reviewWebhookDeliveries.attemptedAt, saved.attemptedAt)
       )
     ).returning({ id: reviewWebhookDeliveries.id }).get();
     if (moved && state2 === ReviewDeliveryStates.Uncertain) {
       auditUndelivered(db, saved, { state: state2, reason: "interrupted_attempt", attempts: saved.attempts });
     }
-    saved = db.select().from(reviewWebhookDeliveries).where(eq22(reviewWebhookDeliveries.id, id)).get();
+    saved = db.select().from(reviewWebhookDeliveries).where(eq23(reviewWebhookDeliveries.id, id)).get();
     if (!saved || saved.state !== ReviewDeliveryStates.Pending) return false;
   }
   if (saved.retryAt && Date.parse(saved.retryAt) > now()) return false;
@@ -14776,9 +14827,9 @@ async function deliverReviewEvent(options) {
     return false;
   }
   const latest = db.select().from(notifications).where(
-    and19(
-      eq22(notifications.id, notificationId),
-      eq22(notifications.projectId, projectId)
+    and20(
+      eq23(notifications.id, notificationId),
+      eq23(notifications.projectId, projectId)
     )
   ).get();
   const latestRefusal = reviewEventRefusal(db, projectId, saved.payload, latest, targetDigest, new Date(now()));
@@ -14791,10 +14842,10 @@ async function deliverReviewEvent(options) {
     attempts: saved.attempts + 1,
     attemptedAt: new Date(now()).toISOString()
   }).where(
-    and19(
-      eq22(reviewWebhookDeliveries.id, id),
-      eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending),
-      eq22(reviewWebhookDeliveries.attempts, saved.attempts)
+    and20(
+      eq23(reviewWebhookDeliveries.id, id),
+      eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Pending),
+      eq23(reviewWebhookDeliveries.attempts, saved.attempts)
     )
   ).returning({ id: reviewWebhookDeliveries.id }).get();
   if (!claimed) return false;
@@ -14821,10 +14872,10 @@ async function deliverReviewEvent(options) {
     deliveredAt: sent ? new Date(now()).toISOString() : null,
     retryAt: state === ReviewDeliveryStates.Pending ? new Date(now() + retryDelayMs(attempts, result.retryAfterSeconds)).toISOString() : null
   }).where(
-    and19(
-      eq22(reviewWebhookDeliveries.id, id),
-      eq22(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting),
-      eq22(reviewWebhookDeliveries.attempts, attempts)
+    and20(
+      eq23(reviewWebhookDeliveries.id, id),
+      eq23(reviewWebhookDeliveries.state, ReviewDeliveryStates.Attempting),
+      eq23(reviewWebhookDeliveries.attempts, attempts)
     )
   ).run();
   if (state === ReviewDeliveryStates.Uncertain || state === ReviewDeliveryStates.Failed) {
@@ -14836,7 +14887,7 @@ async function deliverReviewEvent(options) {
 }
 
 // src/unrecognized-agent-alerts.ts
-import { and as and20, desc as desc8, eq as eq23, gte as gte3, sql as sql10 } from "drizzle-orm";
+import { and as and21, desc as desc8, eq as eq24, gte as gte3, sql as sql10 } from "drizzle-orm";
 var log21 = createLogger("UnrecognizedAgentAlerts");
 var UNRECOGNIZED_AGENT_ALERT_WINDOW_MS = 7 * 864e5;
 var UNRECOGNIZED_AGENT_ALERT_MIN_HITS = 3;
@@ -14852,13 +14903,13 @@ function projectsWithRecentUnrecognizedAgents(db, now) {
   return db.selectDistinct({ projectId: unrecognizedAgentEventsHourly.projectId }).from(unrecognizedAgentEventsHourly).where(gte3(unrecognizedAgentEventsHourly.tsHour, since)).all().map((row) => row.projectId);
 }
 function undecidedUnrecognizedAgents(db, projectId, now) {
-  const decided = new Set(db.select({ agentName: unrecognizedAgentNotifyState.agentName }).from(unrecognizedAgentNotifyState).where(eq23(unrecognizedAgentNotifyState.projectId, projectId)).all().map((row) => row.agentName));
+  const decided = new Set(db.select({ agentName: unrecognizedAgentNotifyState.agentName }).from(unrecognizedAgentNotifyState).where(eq24(unrecognizedAgentNotifyState.projectId, projectId)).all().map((row) => row.agentName));
   const totals = db.select({
     name: unrecognizedAgentEventsHourly.agentName,
     hits: sql10`SUM(${unrecognizedAgentEventsHourly.hits})`,
     firstSeenAt: sql10`MIN(${unrecognizedAgentEventsHourly.tsHour})`,
     lastSeenAt: sql10`MAX(${unrecognizedAgentEventsHourly.tsHour})`
-  }).from(unrecognizedAgentEventsHourly).where(eq23(unrecognizedAgentEventsHourly.projectId, projectId)).groupBy(unrecognizedAgentEventsHourly.agentName).all();
+  }).from(unrecognizedAgentEventsHourly).where(eq24(unrecognizedAgentEventsHourly.projectId, projectId)).groupBy(unrecognizedAgentEventsHourly.agentName).all();
   const windowStart = new Date(now - UNRECOGNIZED_AGENT_ALERT_WINDOW_MS).toISOString();
   const recordingStart = totals.reduce((earliest, total) => earliest === null || total.firstSeenAt < earliest ? total.firstSeenAt : earliest, null);
   const baselineEnd = recordingStart === null ? null : new Date(Date.parse(recordingStart) + UNRECOGNIZED_AGENT_ALERT_WINDOW_MS).toISOString();
@@ -14876,7 +14927,7 @@ function undecidedUnrecognizedAgents(db, projectId, now) {
       continue;
     }
     if (Number(total.hits) < UNRECOGNIZED_AGENT_ALERT_MIN_HITS) continue;
-    const latest = db.select({ sampledUserAgent: unrecognizedAgentEventsHourly.sampledUserAgent, sampledPath: unrecognizedAgentEventsHourly.sampledPath }).from(unrecognizedAgentEventsHourly).where(and20(eq23(unrecognizedAgentEventsHourly.projectId, projectId), eq23(unrecognizedAgentEventsHourly.agentName, total.name))).orderBy(desc8(unrecognizedAgentEventsHourly.tsHour)).limit(1).get();
+    const latest = db.select({ sampledUserAgent: unrecognizedAgentEventsHourly.sampledUserAgent, sampledPath: unrecognizedAgentEventsHourly.sampledPath }).from(unrecognizedAgentEventsHourly).where(and21(eq24(unrecognizedAgentEventsHourly.projectId, projectId), eq24(unrecognizedAgentEventsHourly.agentName, total.name))).orderBy(desc8(unrecognizedAgentEventsHourly.tsHour)).limit(1).get();
     due.push({
       name: total.name,
       hits: Number(total.hits),
@@ -14911,7 +14962,7 @@ function startUnrecognizedAgentAlertLoop(dispatch, intervalMs = UNRECOGNIZED_AGE
 }
 
 // src/provider-batch-poller.ts
-import { and as and21, eq as eq24, inArray as inArray11, isNotNull as isNotNull3, isNull as isNull4, notExists as notExists2, sql as sql11 } from "drizzle-orm";
+import { and as and22, eq as eq25, inArray as inArray11, isNotNull as isNotNull3, isNull as isNull4, notExists as notExists2, sql as sql11 } from "drizzle-orm";
 var log22 = createLogger("ProviderBatchPoller");
 var PROVIDER_BATCH_POLL_INITIAL_MS = 3e4;
 var PROVIDER_BATCH_POLL_MAX_MS = 10 * 6e4;
@@ -14954,7 +15005,7 @@ var ProviderBatchPoller = class {
    * outstanding (ingested or cancelled), so its run may now finalize.
    */
   async advance(row) {
-    const runStatus = this.deps.db.select({ status: runs.status }).from(runs).where(eq24(runs.id, row.runId)).get()?.status;
+    const runStatus = this.deps.db.select({ status: runs.status }).from(runs).where(eq25(runs.id, row.runId)).get()?.status;
     if (runStatus !== RunStatuses.running) {
       await this.deps.runner.abandonProviderBatches([row.id], "Cancelled because its run is no longer running.");
       this.schedule.delete(row.id);
@@ -14971,7 +15022,7 @@ var ProviderBatchPoller = class {
         status = poll.status;
         if (poll.status === "ended") {
           const endedAt = poll.endedAt ?? new Date(this.now()).toISOString();
-          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and21(eq24(providerBatches.id, row.id), eq24(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+          const ended = this.deps.db.update(providerBatches).set({ status: ProviderBatchStatuses.ended, endedAt, resultsExpireAt: poll.resultsExpireAt ?? null, updatedAt: endedAt }).where(and22(eq25(providerBatches.id, row.id), eq25(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
           this.schedule.delete(row.id);
           return ended ? this.ingest({ ...row, status: ProviderBatchStatuses.ended, resultsExpireAt: poll.resultsExpireAt ?? null }) : false;
         }
@@ -14995,9 +15046,9 @@ var ProviderBatchPoller = class {
     const at = new Date(now).toISOString();
     if (row.cancelRequestedAt === null) {
       if (now < Date.parse(row.deadlineAt)) return false;
-      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and21(
-        eq24(providerBatches.id, row.id),
-        eq24(providerBatches.status, ProviderBatchStatuses.submitted),
+      const claimed = this.deps.db.update(providerBatches).set({ cancelRequestedAt: at, updatedAt: at }).where(and22(
+        eq25(providerBatches.id, row.id),
+        eq25(providerBatches.status, ProviderBatchStatuses.submitted),
         isNull4(providerBatches.cancelRequestedAt)
       )).run().changes === 1;
       if (!claimed) return false;
@@ -15016,7 +15067,7 @@ var ProviderBatchPoller = class {
       status: ProviderBatchStatuses.cancelled,
       error: `The provider batch did not end within an hour of being cancelled at its deadline; its ${row.requestCount} answer(s) were not recorded.`,
       updatedAt: at
-    }).where(and21(eq24(providerBatches.id, row.id), eq24(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
+    }).where(and22(eq25(providerBatches.id, row.id), eq25(providerBatches.status, ProviderBatchStatuses.submitted))).run().changes === 1;
     this.schedule.delete(row.id);
     if (gaveUp) log22.warn("batch.abandoned-after-deadline", { batchId: row.id, runId: row.runId, provider: row.provider });
     return gaveUp;
@@ -15056,10 +15107,10 @@ var ProviderBatchPoller = class {
   /** Runs the sweep handed off whose batches have all settled. */
   finalizableRuns() {
     const holding = [ProviderBatchStatuses.submitting, ...OUTSTANDING_PROVIDER_BATCH_STATUSES];
-    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and21(
-      eq24(runs.status, RunStatuses.running),
+    return this.deps.db.select({ id: runs.id, projectId: runs.projectId }).from(runs).where(and22(
+      eq25(runs.status, RunStatuses.running),
       isNotNull3(runs.pendingProviderErrors),
-      notExists2(this.deps.db.select({ one: sql11`1` }).from(providerBatches).where(and21(eq24(providerBatches.runId, runs.id), inArray11(providerBatches.status, holding))))
+      notExists2(this.deps.db.select({ one: sql11`1` }).from(providerBatches).where(and22(eq25(providerBatches.runId, runs.id), inArray11(providerBatches.status, holding))))
     )).all();
   }
 };
@@ -15139,8 +15190,85 @@ async function refreshAllIntegrations(client, projectName, now = /* @__PURE__ */
 }
 
 // src/notifier.ts
-import { eq as eq25, desc as desc9, and as and22, inArray as inArray12, or as or2, isNull as isNull5 } from "drizzle-orm";
+import { eq as eq27, desc as desc10, and as and24, inArray as inArray12, or as or2, isNull as isNull5 } from "drizzle-orm";
+import crypto23 from "crypto";
+
+// src/site-health-alerts.ts
 import crypto22 from "crypto";
+import { and as and23, asc as asc5, desc as desc9, eq as eq26, gt as gt3 } from "drizzle-orm";
+var ISSUE_TITLES = {
+  "missing-h1": "Missing H1",
+  "multiple-h1": "Multiple H1 tags",
+  "missing-title": "Missing title",
+  "names-another-entity": "Names another property"
+};
+var PAGE_BATCH = 500;
+var MAX_EXAMPLES = 5;
+function siteHealthProblemKey(code, url) {
+  return `${code}|${crypto22.createHash("sha256").update(url).digest("hex").slice(0, 16)}`;
+}
+function readSiteHealthScan(db, projectId, runId) {
+  const snapshot = db.select().from(siteCrawlSnapshots).where(and23(eq26(siteCrawlSnapshots.projectId, projectId), eq26(siteCrawlSnapshots.runId, runId))).orderBy(desc9(siteCrawlSnapshots.updatedAt)).limit(1).get();
+  if (!snapshot?.detailsAvailable || !snapshot.attemptId) return null;
+  const scope = and23(
+    eq26(siteCrawlPages.projectId, projectId),
+    eq26(siteCrawlPages.runId, runId),
+    eq26(siteCrawlPages.attemptId, snapshot.attemptId)
+  );
+  const pagesByCode = /* @__PURE__ */ new Map();
+  const keys = /* @__PURE__ */ new Set();
+  let after;
+  for (; ; ) {
+    const pages = db.select({ nodeKey: siteCrawlPages.nodeKey, url: siteCrawlPages.url, auditFields: siteCrawlPages.auditFields }).from(siteCrawlPages).where(after === void 0 ? scope : and23(scope, gt3(siteCrawlPages.nodeKey, after))).orderBy(asc5(siteCrawlPages.nodeKey)).limit(PAGE_BATCH).all();
+    for (const page of pages) {
+      const defects = page.auditFields.criticalDefects;
+      for (const defect of Array.isArray(defects) ? defects : []) {
+        if (!defect || typeof defect !== "object") continue;
+        const { id, severity } = defect;
+        if (typeof id !== "string" || id === "" || severity !== "critical") continue;
+        const key = siteHealthProblemKey(id, page.url);
+        keys.add(key);
+        let pagesForCode = pagesByCode.get(id);
+        if (!pagesForCode) {
+          pagesForCode = /* @__PURE__ */ new Map();
+          pagesByCode.set(id, pagesForCode);
+        }
+        pagesForCode.set(key, page.url);
+      }
+    }
+    if (pages.length < PAGE_BATCH) break;
+    after = pages.at(-1).nodeKey;
+  }
+  return { complete: snapshot.complete, pagesByCode, keys };
+}
+function newSiteHealthIssues(scan, reported) {
+  const issues = [];
+  for (const [code, pages] of scan.pagesByCode) {
+    const fresh = [...pages].filter(([key]) => !reported.has(key)).map(([, url]) => url).sort(compareText);
+    if (fresh.length === 0) continue;
+    issues.push({
+      code,
+      title: ISSUE_TITLES[code] ?? code,
+      severity: "critical",
+      affectedPages: pages.size,
+      newPages: fresh.length,
+      examples: fresh.slice(0, MAX_EXAMPLES)
+    });
+  }
+  return issues.sort((a, b) => b.newPages - a.newPages || compareText(a.code, b.code));
+}
+function settledSiteHealthKeys(scan, reported) {
+  return [...scan.complete ? scan.keys : /* @__PURE__ */ new Set([...reported, ...scan.keys])].sort(compareText);
+}
+function readSiteHealthNotifyState(db, projectId) {
+  return db.select().from(siteHealthNotifyState).where(eq26(siteHealthNotifyState.projectId, projectId)).get() ?? null;
+}
+function writeSiteHealthNotifyState(db, input) {
+  const values = { reportedKeys: input.reportedKeys, runId: input.runId, updatedAt: input.updatedAt, notifiedAt: input.notifiedAt };
+  db.insert(siteHealthNotifyState).values({ projectId: input.projectId, ...values }).onConflictDoUpdate({ target: siteHealthNotifyState.projectId, set: values }).run();
+}
+
+// src/notifier.ts
 var log24 = createLogger("Notifier");
 var sampleDelivery = createOutcomeSampler({ burst: 20, refillMs: 6e4, now: () => Date.now() });
 function trackWebhookDelivery(input) {
@@ -15262,18 +15390,18 @@ var Notifier = class {
   /** Called after a run completes (success, partial, or failed). */
   async onRunCompleted(runId, projectId, opts) {
     log24.info("run.completed", { runId, projectId, origin: opts?.origin ?? "sweep" });
-    const notifs = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled);
+    const notifs = this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled);
     if (notifs.length === 0) {
       log24.info("notifications.none-enabled", { projectId });
       return;
     }
     log24.info("notifications.found", { projectId, count: notifs.length });
-    const run = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq27(runs.id, runId)).get();
     if (!run) {
       log24.error("run.not-found", { runId, msg: "skipping notification dispatch" });
       return;
     }
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) {
       log24.error("project.not-found", { projectId, msg: "skipping notification dispatch" });
       return;
@@ -15352,7 +15480,7 @@ var Notifier = class {
    * than inferred from the absence of a webhook.
    */
   async onHealthChecked(projectId, report) {
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) {
       log24.error("project.not-found", { projectId, msg: "skipping health notification" });
       return null;
@@ -15385,7 +15513,7 @@ var Notifier = class {
     const status = noSignal ? "warn" : worst ? worst.status : "ok";
     const code = noSignal ? HEALTH_NO_SIGNAL_CODE : worst?.code ?? "health.ok";
     const summary = noSignal ? `No health check produced a result (${healthChecks.length} skipped) \u2014 health is unknown, not confirmed.` : worst?.summary ?? `All ${graded.length} health check(s) passing.`;
-    const previous = this.db.select().from(doctorHealthState).where(eq25(doctorHealthState.projectId, projectId)).get();
+    const previous = this.db.select().from(doctorHealthState).where(eq27(doctorHealthState.projectId, projectId)).get();
     const previousStatus = previous?.status ?? null;
     const failingSignature = failing.map((c) => `${c.status}:${c.code}`).join(",");
     const failingNow = failing.map((c) => ({ id: c.id, code: c.code, rank: rank(c.status) }));
@@ -15455,7 +15583,7 @@ var Notifier = class {
     const urgentById = new Map(urgentItems.map((item) => [item.id, item]));
     const generalEvent = event;
     const urgentRecord = previous?.urgentNotified ?? null;
-    const enabled = generalEvent || urgentItems.length > 0 || urgentRecord ? this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
+    const enabled = generalEvent || urgentItems.length > 0 || urgentRecord ? this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
     const listedEvents = (notif) => notif.config.events;
     const hasUrl = (notif) => Boolean(notif.config.url);
     const urgentSubscribers = enabled.filter((n) => hasUrl(n) && (listedEvents(n) ?? []).some((e) => URGENT_HEALTH_EVENTS.has(e)));
@@ -15503,7 +15631,7 @@ var Notifier = class {
     if (previous === void 0) {
       this.db.insert(doctorHealthState).values({ ...observation, notifiedAt: null }).run();
     } else {
-      this.db.update(doctorHealthState).set(observation).where(eq25(doctorHealthState.projectId, projectId)).run();
+      this.db.update(doctorHealthState).set(observation).where(eq27(doctorHealthState.projectId, projectId)).run();
     }
     for (const group of urgentGroups) {
       const { urgentEvent, urgentTold, urgentNew, urgentCleared, urgentNotifs, urgentSettled } = group;
@@ -15547,7 +15675,7 @@ var Notifier = class {
       }
       if (accepted > 0) {
         recordUrgentReceipts(urgentReceipts, group.subscribers, formatUrgentBreaches(urgentSettled) || null);
-        this.db.update(doctorHealthState).set({ urgentNotified: doctorUrgentSummary(urgentReceipts), urgentReceipts }).where(eq25(doctorHealthState.projectId, projectId)).run();
+        this.db.update(doctorHealthState).set({ urgentNotified: doctorUrgentSummary(urgentReceipts), urgentReceipts }).where(eq27(doctorHealthState.projectId, projectId)).run();
       }
       if (urgentNotifs.length > 0) {
         log24.info("health.urgent-notified", {
@@ -15591,7 +15719,7 @@ var Notifier = class {
       if (await this.sendWebhook(config.url, payload, notif.id, projectId, notif.webhookSecret ?? null)) delivered += 1;
     }
     if (delivered > 0) {
-      this.db.update(doctorHealthState).set({ notifiedAt: now, notifiedSignature: formatBreaches(failingNow), pendingSignature: null }).where(eq25(doctorHealthState.projectId, projectId)).run();
+      this.db.update(doctorHealthState).set({ notifiedAt: now, notifiedSignature: formatBreaches(failingNow), pendingSignature: null }).where(eq27(doctorHealthState.projectId, projectId)).run();
     }
     log24.info("health.notified", {
       projectId,
@@ -15621,12 +15749,12 @@ var Notifier = class {
   async onSiteLivenessChecked(projectId, result) {
     const { check, checkedAt } = result;
     if (check.status !== "ok" && check.status !== "fail") return null;
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) {
       log24.error("project.not-found", { projectId, msg: "skipping site liveness notification" });
       return null;
     }
-    const previous = this.db.select().from(siteLivenessState).where(eq25(siteLivenessState.projectId, projectId)).get();
+    const previous = this.db.select().from(siteLivenessState).where(eq27(siteLivenessState.projectId, projectId)).get();
     const sincePrevious = previous ? Date.parse(checkedAt) - Date.parse(previous.checkedAt) : Number.NaN;
     const countsAsRepeat = Number.isFinite(sincePrevious) && sincePrevious >= SITE_LIVENESS_MIN_PASS_GAP_MS && sincePrevious <= SITE_LIVENESS_MAX_PASS_GAP_MS;
     const failures = check.status === "fail" ? countsAsRepeat ? (previous?.consecutiveFailures ?? 0) + 1 : 1 : 0;
@@ -15636,7 +15764,7 @@ var Notifier = class {
     if (check.status === "ok" && outagePaged) event = "health.recovered";
     const confirmed = check.status === "fail" && failures >= SITE_LIVENESS_FAILURES_TO_PAGE;
     const urgentRecord = previous?.urgentNotifiedAt ?? null;
-    const enabled = event !== null || confirmed || urgentRecord !== null ? this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
+    const enabled = event !== null || confirmed || urgentRecord !== null ? this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled) : [];
     const listedEvents = (notif) => notif.config.events;
     const hasUrl = (notif) => Boolean(notif.config.url);
     const scoped = enabled.filter((n) => hasUrl(n) && (listedEvents(n) ?? []).some((e) => URGENT_HEALTH_EVENTS.has(e)));
@@ -15669,7 +15797,7 @@ var Notifier = class {
     if (previous === void 0) {
       this.db.insert(siteLivenessState).values(observation).run();
     } else {
-      this.db.update(siteLivenessState).set(observation).where(eq25(siteLivenessState.projectId, projectId)).run();
+      this.db.update(siteLivenessState).set(observation).where(eq27(siteLivenessState.projectId, projectId)).run();
     }
     if (!event && urgentGroups.every((group) => group.urgentEvent === null)) return null;
     const payloadFor = (name) => {
@@ -15705,7 +15833,7 @@ var Notifier = class {
         }
       }
       if (event === "health.degraded" && delivered > 0) {
-        this.db.update(siteLivenessState).set({ notifiedAt: checkedAt }).where(eq25(siteLivenessState.projectId, projectId)).run();
+        this.db.update(siteLivenessState).set({ notifiedAt: checkedAt }).where(eq27(siteLivenessState.projectId, projectId)).run();
       }
       log24.info("site-liveness.notified", { projectId, event, code: check.code, subscribers: notifs.length, delivered });
     }
@@ -15719,7 +15847,7 @@ var Notifier = class {
       }
       if (accepted > 0) {
         recordUrgentReceipts(urgentReceipts, group.subscribers, group.settled);
-        this.db.update(siteLivenessState).set({ urgentNotifiedAt: siteUrgentSummary(urgentReceipts), urgentReceipts }).where(eq25(siteLivenessState.projectId, projectId)).run();
+        this.db.update(siteLivenessState).set({ urgentNotifiedAt: siteUrgentSummary(urgentReceipts), urgentReceipts }).where(eq27(siteLivenessState.projectId, projectId)).run();
       }
       if (urgentNotifs.length > 0 || generalIds.size > 0) {
         log24.info("site-liveness.urgent-notified", { projectId, event: urgentEvent, code: check.code, subscribers: urgentNotifs.length + generalIds.size, delivered: accepted });
@@ -15745,7 +15873,7 @@ var Notifier = class {
    */
   isNewInsightNews(projectId, insight) {
     const key = insightNotifyKey(projectId, insight);
-    const previous = this.db.select().from(insightNotifyState).where(eq25(insightNotifyState.key, key)).get();
+    const previous = this.db.select().from(insightNotifyState).where(eq27(insightNotifyState.key, key)).get();
     if (!previous) return true;
     if (severityRank(insight.severity) > severityRank(previous.severity)) return true;
     const magnitude = insightMagnitude(insight);
@@ -15767,9 +15895,9 @@ var Notifier = class {
       magnitude: insightMagnitude(insight),
       notifiedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    const existing = this.db.select().from(insightNotifyState).where(eq25(insightNotifyState.key, key)).get();
+    const existing = this.db.select().from(insightNotifyState).where(eq27(insightNotifyState.key, key)).get();
     if (existing) {
-      this.db.update(insightNotifyState).set(row).where(eq25(insightNotifyState.key, key)).run();
+      this.db.update(insightNotifyState).set(row).where(eq27(insightNotifyState.key, key)).run();
     } else {
       this.db.insert(insightNotifyState).values(row).run();
     }
@@ -15783,11 +15911,11 @@ var Notifier = class {
     if (criticalInsights.length > 0) insightEvents.push("insight.critical");
     if (highInsights.length > 0) insightEvents.push("insight.high");
     if (insightEvents.length === 0) return;
-    const notifs = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled);
+    const notifs = this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled);
     if (notifs.length === 0) return;
-    const run = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    const run = this.db.select().from(runs).where(eq27(runs.id, runId)).get();
     if (!run) return;
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) return;
     for (const notif of notifs) {
       const config = notif.config;
@@ -15868,9 +15996,9 @@ var Notifier = class {
     return delivered;
   }
   async dispatchQueuedReviewAlerts(projectId) {
-    const pendingReviews = this.db.select().from(gbpReviews).where(and22(eq25(gbpReviews.projectId, projectId), eq25(gbpReviews.alertState, "pending"))).all();
-    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and22(eq25(gbpReviewRatings.projectId, projectId), eq25(gbpReviewRatings.alertState, "pending"))).all();
-    const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+    const pendingReviews = this.db.select().from(gbpReviews).where(and24(eq27(gbpReviews.projectId, projectId), eq27(gbpReviews.alertState, "pending"))).all();
+    const pendingRatings = this.db.select().from(gbpReviewRatings).where(and24(eq27(gbpReviewRatings.projectId, projectId), eq27(gbpReviewRatings.alertState, "pending"))).all();
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
     if (!project) return { reviews: 0, ratingDrops: 0, delivered: 0 };
     const chatSendsLeft = /* @__PURE__ */ new Map();
     const now = /* @__PURE__ */ new Date();
@@ -15882,10 +16010,10 @@ var Notifier = class {
         displayName: gbpLocations.displayName,
         mapsUri: gbpLocations.mapsUri,
         reviewsAccess: gbpLocations.reviewsAccess
-      }).from(gbpLocations).where(eq25(gbpLocations.projectId, projectId)).all().map((loc) => [loc.locationName, loc])
+      }).from(gbpLocations).where(eq27(gbpLocations.projectId, projectId)).all().map((loc) => [loc.locationName, loc])
     );
     const v4HasWorked = new Set(
-      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and22(eq25(gbpReviewRatings.projectId, projectId), eq25(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
+      this.db.select({ locationName: gbpReviewRatings.locationName }).from(gbpReviewRatings).where(and24(eq27(gbpReviewRatings.projectId, projectId), eq27(gbpReviewRatings.origin, "gbp"))).all().map((row) => row.locationName)
     );
     const coveredByBusinessProfile = (locationName) => businessProfileReviewsCover(locations.get(locationName)?.reviewsAccess ?? null, v4HasWorked.has(locationName));
     const locationRef = (locationName) => {
@@ -15914,7 +16042,7 @@ var Notifier = class {
       else if (row.rating === null || row.previousRating === null) setRatingState([row.id], "none");
       else ratingsToSend.push(row);
     }
-    const enabled = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url);
+    const enabled = this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url);
     const subscribedTo = (event) => enabled.filter((n) => (n.config.events ?? []).includes(event));
     const projectRef = { name: project.name, canonicalDomain: project.canonicalDomain };
     const dashboardUrl = `${this.serverUrl}/projects/${project.name}`;
@@ -15968,13 +16096,13 @@ var Notifier = class {
             if (!sent) all = false;
           }
           if (all) {
-            this.db.update(gbpReviews).set({ alertState: "sent", alertStateAt: nowIso }).where(and22(
-              eq25(gbpReviews.id, review.id),
-              eq25(gbpReviews.alertState, "pending"),
-              eq25(gbpReviews.updateTime, review.updateTime),
-              review.alertStateAt === null ? isNull5(gbpReviews.alertStateAt) : eq25(gbpReviews.alertStateAt, review.alertStateAt),
-              review.comment === null ? isNull5(gbpReviews.comment) : eq25(gbpReviews.comment, review.comment),
-              review.starRating === null ? isNull5(gbpReviews.starRating) : eq25(gbpReviews.starRating, review.starRating)
+            this.db.update(gbpReviews).set({ alertState: "sent", alertStateAt: nowIso }).where(and24(
+              eq27(gbpReviews.id, review.id),
+              eq27(gbpReviews.alertState, "pending"),
+              eq27(gbpReviews.updateTime, review.updateTime),
+              review.alertStateAt === null ? isNull5(gbpReviews.alertStateAt) : eq27(gbpReviews.alertStateAt, review.alertStateAt),
+              review.comment === null ? isNull5(gbpReviews.comment) : eq27(gbpReviews.comment, review.comment),
+              review.starRating === null ? isNull5(gbpReviews.starRating) : eq27(gbpReviews.starRating, review.starRating)
             )).run();
           }
         }
@@ -16015,7 +16143,7 @@ var Notifier = class {
     return { reviews: reviewsToSend.length, ratingDrops: ratingsToSend.length, delivered };
   }
   computeTransitions(runId, projectId) {
-    const thisRun = this.db.select().from(runs).where(eq25(runs.id, runId)).get();
+    const thisRun = this.db.select().from(runs).where(eq27(runs.id, runId)).get();
     if (!thisRun) return [];
     const completeness = measurementRunCompleteness(this.db, runId);
     if (completeness.planned && !completeness.complete) {
@@ -16026,10 +16154,10 @@ var Notifier = class {
       });
       return [];
     }
-    const groupSiblings = this.db.select().from(runs).where(and22(
-      eq25(runs.projectId, projectId),
-      eq25(runs.kind, thisRun.kind),
-      eq25(runs.createdAt, thisRun.createdAt),
+    const groupSiblings = this.db.select().from(runs).where(and24(
+      eq27(runs.projectId, projectId),
+      eq27(runs.kind, thisRun.kind),
+      eq27(runs.createdAt, thisRun.createdAt),
       notProbeRun()
     )).all();
     const stillPending = groupSiblings.some((r) => r.status === "queued" || r.status === "running");
@@ -16046,20 +16174,20 @@ var Notifier = class {
       return candidate.id > best.id ? candidate : best;
     });
     if (winner.id !== runId) return [];
-    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq25(projects.id, projectId)).get();
+    const projectLocations = this.db.select({ locations: projects.locations }).from(projects).where(eq27(projects.id, projectId)).get();
     const locationCount = Math.max(
       1,
       (projectLocations?.locations ?? []).length
     );
     const RECENT_FETCH_LIMIT = Math.max(8, locationCount * 4);
     const recentRuns = this.db.select().from(runs).where(
-      and22(
-        eq25(runs.projectId, projectId),
-        eq25(runs.kind, thisRun.kind),
-        or2(eq25(runs.status, "completed"), eq25(runs.status, "partial")),
+      and24(
+        eq27(runs.projectId, projectId),
+        eq27(runs.kind, thisRun.kind),
+        or2(eq27(runs.status, "completed"), eq27(runs.status, "partial")),
         notProbeRun()
       )
-    ).orderBy(desc9(runs.createdAt), desc9(runs.id)).limit(RECENT_FETCH_LIMIT).all();
+    ).orderBy(desc10(runs.createdAt), desc10(runs.id)).limit(RECENT_FETCH_LIMIT).all();
     const groups = groupRunsByCreatedAt(recentRuns);
     const currentGroupIdx = groups.findIndex((g) => g[0]?.createdAt === thisRun.createdAt);
     if (currentGroupIdx < 0) return [];
@@ -16074,7 +16202,7 @@ var Notifier = class {
       provider: querySnapshots.provider,
       location: querySnapshots.location,
       citationState: querySnapshots.citationState
-    }).from(querySnapshots).leftJoin(queries, eq25(querySnapshots.queryId, queries.id)).where(inArray12(querySnapshots.runId, currentRunIds)).all();
+    }).from(querySnapshots).leftJoin(queries, eq27(querySnapshots.queryId, queries.id)).where(inArray12(querySnapshots.runId, currentRunIds)).all();
     const previousSnapshots = this.db.select({
       queryId: querySnapshots.queryId,
       provider: querySnapshots.provider,
@@ -16125,12 +16253,12 @@ var Notifier = class {
         recordUnrecognizedAgentDecisions(this.db, projectId, baseline, UnrecognizedAgentNotifyStates.baseline, now);
         if (due.length === 0) continue;
         const names = due.map((agent) => agent.name);
-        const subscribed = this.db.select().from(notifications).where(eq25(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url && n.config.events.includes("traffic.agent.discovered"));
+        const subscribed = this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url && n.config.events.includes("traffic.agent.discovered"));
         if (subscribed.length === 0) {
           recordUnrecognizedAgentDecisions(this.db, projectId, names, UnrecognizedAgentNotifyStates.skipped, now);
           continue;
         }
-        const project = this.db.select().from(projects).where(eq25(projects.id, projectId)).get();
+        const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
         if (!project) continue;
         const payload = {
           source: "canonry",
@@ -16153,6 +16281,73 @@ var Notifier = class {
     }
     return sentNames;
   }
+  /**
+   * After a site audit, send `site-health.issue.new` to the webhooks that list
+   * it when the scan found a critical page problem on a page where it was not
+   * reported before.
+   *
+   * What was reported lives in `site_health_notify_state`. It changes when a
+   * subscriber accepts an alert, so a refused alert is owed again after the
+   * next audit, and when a complete scan no longer finds a problem, so the
+   * problem is reported again if it comes back. A partial scan may have missed
+   * pages, so it never clears anything. Nothing is recorded while no webhook
+   * subscribes: a new subscriber hears about every current problem once.
+   *
+   * Returns the event sent, or null when nothing was sent, so "stayed quiet" is
+   * observable in tests.
+   */
+  async onSiteAuditCompleted(runId, projectId) {
+    const run = this.db.select().from(runs).where(eq27(runs.id, runId)).get();
+    if (!run || run.kind !== RunKinds["site-audit"]) return null;
+    if (run.status !== RunStatuses.completed && run.status !== RunStatuses.partial) return null;
+    const subscribed = this.db.select().from(notifications).where(eq27(notifications.projectId, projectId)).all().filter((n) => n.enabled && n.config.url && n.config.events.includes("site-health.issue.new"));
+    if (subscribed.length === 0) return null;
+    const project = this.db.select().from(projects).where(eq27(projects.id, projectId)).get();
+    if (!project) return null;
+    const scan = readSiteHealthScan(this.db, projectId, runId);
+    if (!scan) return null;
+    const state = readSiteHealthNotifyState(this.db, projectId);
+    const reported = new Set(state?.reportedKeys ?? []);
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const issues = newSiteHealthIssues(scan, reported);
+    if (issues.length === 0) {
+      if (state && scan.complete) {
+        writeSiteHealthNotifyState(this.db, {
+          projectId,
+          runId,
+          reportedKeys: settledSiteHealthKeys(scan, reported),
+          updatedAt: now,
+          notifiedAt: state.notifiedAt
+        });
+      }
+      return null;
+    }
+    const payload = {
+      source: "canonry",
+      event: "site-health.issue.new",
+      project: { name: project.name, canonicalDomain: project.canonicalDomain },
+      run: { id: run.id, status: run.status, finishedAt: run.finishedAt },
+      scanComplete: scan.complete,
+      issues,
+      dashboardUrl: `${this.serverUrl}/projects/${project.name}/technical-aeo`
+    };
+    let accepted = false;
+    for (const notif of subscribed) {
+      if (await this.sendWebhook(notif.config.url, payload, notif.id, projectId, notif.webhookSecret ?? null)) accepted = true;
+    }
+    if (!accepted) {
+      log24.info("site-health.alert-owed", { runId, projectId, issues: issues.length });
+      return null;
+    }
+    writeSiteHealthNotifyState(this.db, {
+      projectId,
+      runId,
+      reportedKeys: settledSiteHealthKeys(scan, reported),
+      updatedAt: now,
+      notifiedAt: now
+    });
+    return "site-health.issue.new";
+  }
   async sendWebhook(url, payload, notificationId, projectId, webhookSecret) {
     const elapsed = startOutcomeTimer();
     const destination = resolveDestination(url);
@@ -16220,7 +16415,7 @@ var Notifier = class {
   }
   logDelivery(projectId, notificationId, event, status, error) {
     this.db.insert(auditLog).values({
-      id: crypto22.randomUUID(),
+      id: crypto23.randomUUID(),
       projectId,
       actor: "scheduler",
       action: `notification.${status}`,
@@ -16233,7 +16428,7 @@ var Notifier = class {
 };
 
 // src/run-coordinator.ts
-import { eq as eq26 } from "drizzle-orm";
+import { eq as eq28 } from "drizzle-orm";
 var log25 = createLogger("RunCoordinator");
 function reportInsightsGenerated(runTrigger, outcome) {
   trackFeatureCompleted({
@@ -16267,7 +16462,7 @@ var RunCoordinator = class {
    */
   onAnswersRecorded;
   async onRunCompleted(runId, projectId, opts) {
-    const runRow = this.db.select().from(runs).where(eq26(runs.id, runId)).get();
+    const runRow = this.db.select().from(runs).where(eq28(runs.id, runId)).get();
     const kind = runRow?.kind ?? RunKinds["answer-visibility"];
     if (runRow?.trigger === RunTriggers.probe) {
       log25.info("probe.skip-side-effects", { runId, projectId, kind });
@@ -16361,6 +16556,13 @@ var RunCoordinator = class {
     } catch (err) {
       log25.error("notifier.failed", { runId, error: describeError(err) });
     }
+    if (kind === RunKinds["site-audit"]) {
+      try {
+        await this.notifier.onSiteAuditCompleted(runId, projectId);
+      } catch (err) {
+        log25.error("site-health-webhook.failed", { runId, error: describeError(err) });
+      }
+    }
     if (this.onAeroEvent) {
       try {
         const ctx = kind === RunKinds["aeo-discover-probe"] ? this.buildDiscoveryAeroContext(runId, projectId, runRow?.status === "failed" ? "failed" : "completed", runRow?.error ?? null) : {
@@ -16387,7 +16589,7 @@ var RunCoordinator = class {
    * so the Aero queue is never starved of a follow-up.
    */
   buildDiscoveryAeroContext(runId, projectId, status, error) {
-    const session = this.db.select().from(discoverySessions).where(eq26(discoverySessions.runId, runId)).get();
+    const session = this.db.select().from(discoverySessions).where(eq28(discoverySessions.runId, runId)).get();
     const competitorMap = session ? session.competitorMap : [];
     return {
       kind: RunKinds["aeo-discover-probe"],
@@ -16429,8 +16631,8 @@ function analysisResultFromInsights(insights2) {
 }
 
 // src/agent/session-registry.ts
-import crypto24 from "crypto";
-import { eq as eq29 } from "drizzle-orm";
+import crypto25 from "crypto";
+import { eq as eq31 } from "drizzle-orm";
 
 // src/agent/remote-mcp.ts
 import { Type } from "@earendil-works/pi-ai";
@@ -16534,8 +16736,8 @@ async function loadExternalMcpTools(servers, opts = {}) {
 }
 
 // src/agent/memory-store.ts
-import crypto23 from "crypto";
-import { and as and23, desc as desc10, eq as eq27, like, sql as sql12, or as or3 } from "drizzle-orm";
+import crypto24 from "crypto";
+import { and as and25, desc as desc11, eq as eq29, like, sql as sql12, or as or3 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
 function rowToDto(row) {
@@ -16549,7 +16751,7 @@ function rowToDto(row) {
   };
 }
 function listMemoryEntries(db, projectId, opts = {}) {
-  const query = db.select().from(agentMemory).where(eq27(agentMemory.projectId, projectId)).orderBy(desc10(agentMemory.updatedAt));
+  const query = db.select().from(agentMemory).where(eq29(agentMemory.projectId, projectId)).orderBy(desc11(agentMemory.updatedAt));
   const rows = opts.limit === void 0 ? query.all() : query.limit(opts.limit).all();
   return rows.map(rowToDto);
 }
@@ -16563,7 +16765,7 @@ function upsertMemoryEntry(db, args) {
     throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto23.randomUUID();
+  const id = crypto24.randomUUID();
   db.insert(agentMemory).values({
     id,
     projectId: args.projectId,
@@ -16580,22 +16782,22 @@ function upsertMemoryEntry(db, args) {
       updatedAt: now
     }
   }).run();
-  const row = db.select().from(agentMemory).where(and23(eq27(agentMemory.projectId, args.projectId), eq27(agentMemory.key, args.key))).get();
+  const row = db.select().from(agentMemory).where(and25(eq29(agentMemory.projectId, args.projectId), eq29(agentMemory.key, args.key))).get();
   if (!row) throw new Error("memory upsert produced no row");
   return rowToDto(row);
 }
 function deleteMemoryEntry(db, projectId, key) {
-  const result = db.delete(agentMemory).where(and23(eq27(agentMemory.projectId, projectId), eq27(agentMemory.key, key))).run();
+  const result = db.delete(agentMemory).where(and25(eq29(agentMemory.projectId, projectId), eq29(agentMemory.key, key))).run();
   const changes = result.changes ?? 0;
   return changes > 0;
 }
 function loadRecentForHydrate(db, projectId, limit, sessionId) {
   if (sessionId === void 0) return listMemoryEntries(db, projectId, { limit });
   const sessionPrefix = `compaction:${sessionId ?? ""}:`;
-  return db.select().from(agentMemory).where(and23(
-    eq27(agentMemory.projectId, projectId),
+  return db.select().from(agentMemory).where(and25(
+    eq29(agentMemory.projectId, projectId),
     or3(sql12`substr(${agentMemory.key}, 1, ${COMPACTION_KEY_PREFIX.length}) <> ${COMPACTION_KEY_PREFIX}`, sessionId ? sql12`substr(${agentMemory.key}, 1, ${sessionPrefix.length}) = ${sessionPrefix}` : void 0)
-  )).orderBy(desc10(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
+  )).orderBy(desc11(agentMemory.updatedAt)).limit(limit).all().map(rowToDto);
 }
 function writeCompactionNote(db, args) {
   if (Buffer.byteLength(args.summary, "utf8") > AGENT_MEMORY_VALUE_MAX_BYTES) {
@@ -16605,7 +16807,7 @@ function writeCompactionNote(db, args) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
-  const id = crypto23.randomUUID();
+  const id = crypto24.randomUUID();
   let inserted;
   db.transaction((tx) => {
     tx.insert(agentMemory).values({
@@ -16619,16 +16821,16 @@ function writeCompactionNote(db, args) {
     }).run();
     const sessionPrefix = `${COMPACTION_KEY_PREFIX}${args.sessionId}:`;
     const existing = tx.select({ id: agentMemory.id, updatedAt: agentMemory.updatedAt }).from(agentMemory).where(
-      and23(
-        eq27(agentMemory.projectId, args.projectId),
+      and25(
+        eq29(agentMemory.projectId, args.projectId),
         like(agentMemory.key, `${sessionPrefix}%`)
       )
-    ).orderBy(desc10(agentMemory.updatedAt)).all();
+    ).orderBy(desc11(agentMemory.updatedAt)).all();
     const stale = existing.slice(COMPACTION_NOTES_PER_SESSION).map((r) => r.id);
     if (stale.length > 0) {
       tx.delete(agentMemory).where(sql12`${agentMemory.id} IN (${sql12.join(stale.map((s) => sql12`${s}`), sql12`, `)})`).run();
     }
-    const row = tx.select().from(agentMemory).where(and23(eq27(agentMemory.projectId, args.projectId), eq27(agentMemory.key, key))).get();
+    const row = tx.select().from(agentMemory).where(and25(eq29(agentMemory.projectId, args.projectId), eq29(agentMemory.key, key))).get();
     if (row) inserted = rowToDto(row);
   });
   if (!inserted) throw new Error("compaction note write produced no row");
@@ -16702,7 +16904,7 @@ function trackAeroTurn(agent, turn) {
 }
 
 // src/agent/project-shape.ts
-import { and as and24, count as count5, eq as eq28 } from "drizzle-orm";
+import { and as and26, count as count5, eq as eq30 } from "drizzle-orm";
 var ADVANCED_TOOLS = [
   "canonry_measurement_portfolio_summary",
   "canonry_measurement_overview",
@@ -16729,10 +16931,10 @@ var ADVANCED_ROUTES = [
 ];
 function aeroProjectShape(db, projectId) {
   try {
-    const pointer = db.select().from(measurementPlans).where(eq28(measurementPlans.projectId, projectId)).get();
-    const version = pointer ? db.select().from(measurementPlanVersions).where(and24(
-      eq28(measurementPlanVersions.projectId, projectId),
-      eq28(measurementPlanVersions.id, pointer.activeVersionId)
+    const pointer = db.select().from(measurementPlans).where(eq30(measurementPlans.projectId, projectId)).get();
+    const version = pointer ? db.select().from(measurementPlanVersions).where(and26(
+      eq30(measurementPlanVersions.projectId, projectId),
+      eq30(measurementPlanVersions.id, pointer.activeVersionId)
     )).get() : void 0;
     if (version) {
       const plan = JSON.parse(version.canonicalJson);
@@ -16759,7 +16961,7 @@ canonry_visibility_report describes the whole project, not one Property. canonry
         pinned: ADVANCED_TOOLS
       };
     }
-    const tracked = db.select({ total: count5() }).from(queries).where(eq28(queries.projectId, projectId)).get()?.total ?? 0;
+    const tracked = db.select({ total: count5() }).from(queries).where(eq30(queries.projectId, projectId)).get()?.total ?? 0;
     return {
       prompt: `
 
@@ -17018,7 +17220,7 @@ var SessionRegistry = class {
           modelProvider: effectiveProvider,
           modelId: effectiveModelId,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(eq29(agentSessions.projectId, projectId)).run();
+        }).where(eq31(agentSessions.projectId, projectId)).run();
       }
       const agent2 = createAeroSession({
         projectName,
@@ -17047,7 +17249,7 @@ var SessionRegistry = class {
       return agent2;
     }
     const { provider, modelId } = resolveSessionProviderAndModel(this.opts.config, preferences);
-    const sessionId = crypto24.randomUUID();
+    const sessionId = crypto25.randomUUID();
     const agent = createAeroSession({
       projectName,
       client: this.opts.client,
@@ -17337,7 +17539,7 @@ ${lines.join("\n")}
       modelProvider: nextProvider,
       modelId: nextModelId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }).where(eq29(agentSessions.projectId, projectId)).run();
+    }).where(eq31(agentSessions.projectId, projectId)).run();
   }
   /** Snapshot pending work without consuming it before an atomic conversation switch. */
   prepareConversationChange(projectName) {
@@ -17545,7 +17747,7 @@ ${lines.join("\n")}
   providerAccountKey(provider, apiKey) {
     const canonical = coerceAgentProvider(provider);
     const vendor = canonical ? getAgentProvider(canonical).piAiProvider : provider;
-    return crypto24.createHash("sha256").update(JSON.stringify([vendor, apiKey ?? ""])).digest("hex");
+    return crypto25.createHash("sha256").update(JSON.stringify([vendor, apiKey ?? ""])).digest("hex");
   }
   providerCoolingDown(projectName) {
     for (const [key, cooldown] of this.providerCooldowns) {
@@ -17562,18 +17764,18 @@ ${lines.join("\n")}
     return id;
   }
   tryResolveProjectId(projectName) {
-    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq29(projects.name, projectName)).get();
+    const row = this.opts.db.select({ id: projects.id }).from(projects).where(eq31(projects.name, projectName)).get();
     return row?.id;
   }
   loadRow(projectId) {
-    const row = this.opts.db.select().from(agentSessions).where(eq29(agentSessions.projectId, projectId)).get();
+    const row = this.opts.db.select().from(agentSessions).where(eq31(agentSessions.projectId, projectId)).get();
     return row ?? null;
   }
   insertRow(params) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const modelProvider = params.provider ?? params.modelProvider ?? AgentProviderIds.claude;
     this.opts.db.insert(agentSessions).values({
-      id: params.id ?? crypto24.randomUUID(),
+      id: params.id ?? crypto25.randomUUID(),
       projectId: params.projectId,
       systemPrompt: params.systemPrompt,
       modelProvider,
@@ -17586,7 +17788,7 @@ ${lines.join("\n")}
   }
   updateRow(projectId, patch) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq29(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq31(agentSessions.projectId, projectId)).run();
   }
   /**
    * Store a refreshed prompt snapshot without touching `updatedAt`, which the
@@ -17595,13 +17797,13 @@ ${lines.join("\n")}
    * recently used right after an upgrade.
    */
   persistPromptSnapshot(projectId, systemPrompt) {
-    this.opts.db.update(agentSessions).set({ systemPrompt }).where(eq29(agentSessions.projectId, projectId)).run();
+    this.opts.db.update(agentSessions).set({ systemPrompt }).where(eq31(agentSessions.projectId, projectId)).run();
   }
 };
 
 // src/agent/viewer-sessions.ts
-import crypto25 from "crypto";
-import { and as and25, eq as eq30, isNotNull as isNotNull4, like as like2 } from "drizzle-orm";
+import crypto26 from "crypto";
+import { and as and27, eq as eq32, isNotNull as isNotNull4, like as like2 } from "drizzle-orm";
 var AERO_VIEWER_EXCLUDED_MCP_TOOLS = /* @__PURE__ */ new Set([
   CanonryMcpToolNames.canonry_ads_account,
   CanonryMcpToolNames.canonry_ads_geo_search,
@@ -17654,8 +17856,8 @@ function trimViewerTranscript(messages, max2 = MAX_VIEWER_MESSAGES) {
 }
 var VIEWER_IDLE_MS = 12 * 60 * 60 * 1e3;
 function mintViewerAeroKey(db, userId, now = /* @__PURE__ */ new Date()) {
-  const raw = `cnry_${crypto25.randomBytes(24).toString("hex")}`;
-  const id = crypto25.randomUUID();
+  const raw = `cnry_${crypto26.randomBytes(24).toString("hex")}`;
+  const id = crypto26.randomUUID();
   db.insert(apiKeys).values({
     id,
     name: `${VIEWER_AERO_KEY_PREFIX}${userId}`,
@@ -17778,12 +17980,12 @@ var ViewerAeroSessions = class {
    */
   removeKey(id) {
     try {
-      this.opts.db.delete(apiKeys).where(eq30(apiKeys.id, id)).run();
+      this.opts.db.delete(apiKeys).where(eq32(apiKeys.id, id)).run();
     } catch {
       try {
         this.opts.db.transaction((tx) => {
-          tx.delete(dashboardSessions).where(eq30(dashboardSessions.apiKeyId, id)).run();
-          tx.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq30(apiKeys.id, id)).run();
+          tx.delete(dashboardSessions).where(eq32(dashboardSessions.apiKeyId, id)).run();
+          tx.update(apiKeys).set({ revokedAt: new Date(this.now()).toISOString() }).where(eq32(apiKeys.id, id)).run();
         });
       } catch {
       }
@@ -17796,7 +17998,7 @@ var ViewerAeroSessions = class {
    */
   revokeOrphanedKeys() {
     try {
-      this.opts.db.delete(apiKeys).where(and25(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull4(apiKeys.delegatedUserId))).run();
+      this.opts.db.delete(apiKeys).where(and27(like2(apiKeys.name, `${VIEWER_AERO_KEY_PREFIX}%`), isNotNull4(apiKeys.delegatedUserId))).run();
     } catch {
     }
   }
@@ -17811,9 +18013,9 @@ var ViewerAeroSessions = class {
 };
 
 // src/mcp-http.ts
-import crypto26 from "crypto";
+import crypto27 from "crypto";
 import { isIP } from "net";
-import { and as and26, eq as eq31, isNull as isNull6 } from "drizzle-orm";
+import { and as and28, eq as eq33, isNull as isNull6 } from "drizzle-orm";
 import { NodeStreamableHTTPServerTransport, toNodeHandler, toWebRequest } from "@modelcontextprotocol/node";
 import { McpServer, createMcpHandler, isInitializeRequest, isLegacyRequest } from "@modelcontextprotocol/server";
 var SESSION_IDLE_MS = 10 * 60 * 1e3;
@@ -17822,8 +18024,8 @@ var MAX_CLEANUP_RETRIES_PER_SWEEP = 8;
 var MAX_PENDING_KEY_RETIREMENTS = 256;
 var MAX_CLEANUP_BACKOFF_MS = 10 * 60 * 1e3;
 function mintSessionKey(db, scopes, userId, oauthGrantId, createdAt) {
-  const raw = `cnry_${crypto26.randomBytes(24).toString("hex")}`;
-  const id = crypto26.randomUUID();
+  const raw = `cnry_${crypto27.randomBytes(24).toString("hex")}`;
+  const id = crypto27.randomUUID();
   db.insert(apiKeys).values({
     id,
     name: `mcp-session:${userId}`,
@@ -17919,12 +18121,12 @@ function registerMcpHttpRoutes(scope, opts) {
     try {
       withoutLockWait(() => {
         opts.db.transaction((tx) => {
-          tx.delete(dashboardSessions).where(eq31(dashboardSessions.apiKeyId, id)).run();
-          tx.update(apiKeys).set({ revokedAt: new Date(now()).toISOString() }).where(and26(eq31(apiKeys.id, id), isNull6(apiKeys.revokedAt))).run();
+          tx.delete(dashboardSessions).where(eq33(dashboardSessions.apiKeyId, id)).run();
+          tx.update(apiKeys).set({ revokedAt: new Date(now()).toISOString() }).where(and28(eq33(apiKeys.id, id), isNull6(apiKeys.revokedAt))).run();
         });
         if (remove) {
           try {
-            opts.db.delete(apiKeys).where(eq31(apiKeys.id, id)).run();
+            opts.db.delete(apiKeys).where(eq33(apiKeys.id, id)).run();
           } catch (error) {
             scope.log.warn({ err: error, keyId: id }, "Retained revoked MCP request key after deletion failed");
           }
@@ -17975,14 +18177,14 @@ function registerMcpHttpRoutes(scope, opts) {
       withoutLockWait(() => {
         const cutoff = now() - SESSION_IDLE_MS;
         for (const session of legacyServers) {
-          const key = session.sessionKeyId ? opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq31(apiKeys.id, session.sessionKeyId)).get() : void 0;
+          const key = session.sessionKeyId ? opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq33(apiKeys.id, session.sessionKeyId)).get() : void 0;
           if (session.lastSeenAt < cutoff || session.expiresAt !== void 0 && session.expiresAt <= now() || session.sessionKeyId && (!key || key.revokedAt)) {
             void session.close().catch((error) => scope.log.error({ err: error }, "Failed to close expired MCP session"));
           }
         }
         for (const exchange of modernExchanges) {
           if (!exchange.sessionKey) continue;
-          const key = opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq31(apiKeys.id, exchange.sessionKey.id)).get();
+          const key = opts.db.select({ revokedAt: apiKeys.revokedAt }).from(apiKeys).where(eq33(apiKeys.id, exchange.sessionKey.id)).get();
           if (!key || key.revokedAt || exchange.sessionKey.expiresAt <= now()) {
             void exchange.close().catch((error) => scope.log.error({ err: error }, "Failed to close expired MCP request"));
           }
@@ -18037,7 +18239,7 @@ function registerMcpHttpRoutes(scope, opts) {
       clientName: `canonry-mcp/${PACKAGE_VERSION}`,
       surface: "mcp-http",
       // Correlation only: this is never accepted as caller identity or authority.
-      ...modern ? {} : { actorSession: crypto26.randomUUID() }
+      ...modern ? {} : { actorSession: crypto27.randomUUID() }
     });
     let server;
     try {
@@ -18062,7 +18264,7 @@ function registerMcpHttpRoutes(scope, opts) {
     if (!bearer) return null;
     const { server, sessionKey } = createAuthorizedServer(request, segment, bearer);
     const transport = new NodeStreamableHTTPServerTransport({
-      sessionIdGenerator: () => crypto26.randomUUID(),
+      sessionIdGenerator: () => crypto27.randomUUID(),
       onsessioninitialized: (id) => {
         if (!shuttingDown && !closing) sessions.set(id, session);
       }
@@ -18232,7 +18434,7 @@ function registerMcpHttpRoutes(scope, opts) {
 }
 
 // src/agent/agent-routes.ts
-import { eq as eq32 } from "drizzle-orm";
+import { eq as eq34 } from "drizzle-orm";
 function viewerAeroCaller(request, opts) {
   if (!opts.viewerSessions) return null;
   const principal = request.principal;
@@ -18272,7 +18474,7 @@ function turnAttribution(request) {
   };
 }
 function resolveProject(db, name) {
-  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq32(projects.name, name)).get();
+  const row = db.select({ id: projects.id, name: projects.name }).from(projects).where(eq34(projects.name, name)).get();
   if (!row) throw notFound("project", name);
   return row;
 }
@@ -18391,7 +18593,7 @@ function registerAgentRoutes(app, opts) {
       }
       requireInstanceAdministrator(request);
       const project = resolveProject(opts.db, request.params.name);
-      const row = opts.db.select().from(agentSessions).where(eq32(agentSessions.projectId, project.id)).get();
+      const row = opts.db.select().from(agentSessions).where(eq34(agentSessions.projectId, project.id)).get();
       const nextTurn = opts.sessionRegistry.nextTurnModel(project.name);
       if (!row) {
         return { conversationId: null, messages: [], modelProvider: null, modelId: null, nextTurn, updatedAt: null };
@@ -18433,7 +18635,7 @@ function registerAgentRoutes(app, opts) {
       const project = resolveProject(opts.db, request.params.name);
       if (opts.sessionRegistry.isBusy(project.name)) throw agentBusy(project.name);
       opts.sessionRegistry.reset(project.name);
-      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq32(agentSessions.projectId, project.id)).run();
+      opts.db.update(agentSessions).set({ messages: "[]", followUpQueue: "[]", updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq34(agentSessions.projectId, project.id)).run();
       return { status: "reset" };
     }
   );
@@ -18457,7 +18659,7 @@ function registerAgentRoutes(app, opts) {
       return streamViewerTurn(opts, project, viewerId, body, reply, turnAttribution(request));
     }
     if (body.conversationId !== void 0) {
-      const current = opts.db.select({ id: agentSessions.id }).from(agentSessions).where(eq32(agentSessions.projectId, project.id)).get();
+      const current = opts.db.select({ id: agentSessions.id }).from(agentSessions).where(eq34(agentSessions.projectId, project.id)).get();
       if ((current?.id ?? null) !== body.conversationId) throw validationError("The active conversation changed. Reload the conversation before sending.");
     }
     const promptText = body.prompt;
@@ -19417,7 +19619,7 @@ function clipText(value, length) {
 }
 
 // src/research-runner.ts
-import { and as and27, eq as eq33, inArray as inArray13, sql as sql13 } from "drizzle-orm";
+import { and as and29, eq as eq35, inArray as inArray13, sql as sql13 } from "drizzle-orm";
 var unfinishedResearchQueryStatuses = [ResearchQueryStatuses.queued, ResearchQueryStatuses.running];
 function finalResearchRunStatus(completed, failed, waiting) {
   if (waiting > 0) return ResearchRunStatuses["waiting-upstream"];
@@ -19425,13 +19627,13 @@ function finalResearchRunStatus(completed, failed, waiting) {
   return completed > 0 ? ResearchRunStatuses.partial : ResearchRunStatuses.failed;
 }
 async function executeResearchRun(db, registry, runId, projectId, options = {}) {
-  const run = db.select().from(researchRuns).where(and27(eq33(researchRuns.id, runId), eq33(researchRuns.projectId, projectId))).get();
+  const run = db.select().from(researchRuns).where(and29(eq35(researchRuns.id, runId), eq35(researchRuns.projectId, projectId))).get();
   if (!run || run.status !== ResearchRunStatuses.queued) return;
-  const project = db.select().from(projects).where(eq33(projects.id, projectId)).get();
+  const project = db.select().from(projects).where(eq35(projects.id, projectId)).get();
   if (!project) return;
   const provider = registry.get(run.provider);
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and27(eq33(researchRuns.id, runId), eq33(researchRuns.status, ResearchRunStatuses.queued))).run();
+  const claim = db.update(researchRuns).set({ status: ResearchRunStatuses.running, startedAt: now }).where(and29(eq35(researchRuns.id, runId), eq35(researchRuns.status, ResearchRunStatuses.queued))).run();
   if (claim.changes !== 1) return;
   const elapsed = startOutcomeTimer();
   const requested = currentOutcomeOrigin();
@@ -19465,8 +19667,8 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
     }
     reserved = run.totalQueries;
     reservation = { scope, period };
-    const rows = db.select().from(researchRunQueries).where(eq33(researchRunQueries.researchRunId, runId)).orderBy(researchRunQueries.position).all();
-    const competitorRows = db.select(competitorIdentityColumns).from(competitors).where(eq33(competitors.projectId, projectId)).orderBy(competitors.domain).all();
+    const rows = db.select().from(researchRunQueries).where(eq35(researchRunQueries.researchRunId, runId)).orderBy(researchRunQueries.position).all();
+    const competitorRows = db.select(competitorIdentityColumns).from(competitors).where(eq35(competitors.projectId, projectId)).orderBy(competitors.domain).all();
     const competitorDomains = competitorRows.map((row) => row.domain);
     const competitorAliases = new Map(competitorRows.map((row) => [row.domain, competitorIdentityAliases(row)]).filter(([, aliases]) => aliases.length > 0));
     const domains = effectiveDomains(project);
@@ -19476,7 +19678,7 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
     await mapWithConcurrency(rows, Math.max(1, provider.config.quotaPolicy.maxConcurrency), async (row) => {
       try {
         const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and27(eq33(researchRunQueries.id, row.id), eq33(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
+        db.update(researchRunQueries).set({ status: ResearchQueryStatuses.running, startedAt }).where(and29(eq35(researchRunQueries.id, row.id), eq35(researchRunQueries.status, ResearchQueryStatuses.queued))).run();
         const raw = await gate.run(async () => {
           dispatched++;
           return provider.adapter.executeTrackedQuery({ query: row.queryText, canonicalDomains: domains, competitorDomains, ...run.location ? { location: run.location } : {} }, config);
@@ -19507,7 +19709,7 @@ async function executeResearchRun(db, registry, runId, projectId, options = {})
           rawResponse: raw.rawResponse,
           answerEvidence: raw.evidence ?? null,
           finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-        }).where(and27(eq33(researchRunQueries.id, row.id), eq33(researchRunQueries.status, ResearchQueryStatuses.running))).run();
+        }).where(and29(eq35(researchRunQueries.id, row.id), eq35(researchRunQueries.status, ResearchQueryStatuses.running))).run();
         if (completed.changes === 1) incrementResearchProgress(db, runId, "completedQueries");
       } catch (error) {
         if (!(error instanceof IncompleteAnswerError && error.resumable)) queryFailure ??= error;
@@ -19558,11 +19760,11 @@ function researchOutcomeStatus(status) {
   }
 }
 function incrementResearchProgress(db, runId, column) {
-  db.update(researchRuns).set({ [column]: sql13`${researchRuns[column]} + 1` }).where(eq33(researchRuns.id, runId)).run();
+  db.update(researchRuns).set({ [column]: sql13`${researchRuns[column]} + 1` }).where(eq35(researchRuns.id, runId)).run();
 }
 function markResearchQueryFailed(db, runId, queryId, error) {
   const message = describeError(error);
-  const unfinished = and27(eq33(researchRunQueries.id, queryId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses));
+  const unfinished = and29(eq35(researchRunQueries.id, queryId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses));
   if (error instanceof IncompleteAnswerError && error.resumable) {
     db.update(researchRunQueries).set({
       status: ResearchQueryStatuses["waiting-upstream"],
@@ -19578,10 +19780,10 @@ function markResearchQueryFailed(db, runId, queryId, error) {
   if (failed.changes === 1) incrementResearchProgress(db, runId, "failedQueries");
 }
 function markUnfinishedResearchQueriesFailed(db, runId, error) {
-  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and27(eq33(researchRunQueries.researchRunId, runId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
+  db.update(researchRunQueries).set({ status: ResearchQueryStatuses.failed, error, finishedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and29(eq35(researchRunQueries.researchRunId, runId), inArray13(researchRunQueries.status, unfinishedResearchQueryStatuses))).run();
 }
 function finalizeResearchRun(db, runId, fatalError) {
-  const rows = db.select({ status: researchRunQueries.status }).from(researchRunQueries).where(eq33(researchRunQueries.researchRunId, runId)).all();
+  const rows = db.select({ status: researchRunQueries.status }).from(researchRunQueries).where(eq35(researchRunQueries.researchRunId, runId)).all();
   const completed = rows.filter((row) => row.status === ResearchQueryStatuses.completed).length;
   const failed = rows.filter((row) => row.status === ResearchQueryStatuses.failed).length;
   const waiting = rows.filter((row) => row.status === ResearchQueryStatuses["waiting-upstream"]).length;
@@ -19593,12 +19795,12 @@ function finalizeResearchRun(db, runId, fatalError) {
     error: fatalError ?? (failed === rows.length ? "Every research query failed." : null),
     // A run waiting on upstream jobs has not finished.
     finishedAt: waiting > 0 ? null : (/* @__PURE__ */ new Date()).toISOString()
-  }).where(eq33(researchRuns.id, runId)).run();
+  }).where(eq35(researchRuns.id, runId)).run();
   return { status, total: rows.length, completed, failed };
 }
 
 // src/google-marketing-sync.ts
-import { and as and28, eq as eq34, isNull as isNull7, sql as sql14 } from "drizzle-orm";
+import { and as and30, eq as eq36, isNull as isNull7, sql as sql14 } from "drizzle-orm";
 var RUNTIME_FAILURE_REASONS = {
   INVALID_INPUT: OutcomeReasonCodes.VALIDATION,
   NOT_CONFIGURED: OutcomeReasonCodes.NOT_CONNECTED,
@@ -19635,10 +19837,10 @@ function assertSnapshotContext(metadata, expected) {
   }
 }
 function requireSyncRun(db, runId, projectId, kind) {
-  const run = db.select().from(runs).where(and28(
-    eq34(runs.id, runId),
-    eq34(runs.projectId, projectId),
-    eq34(runs.kind, kind)
+  const run = db.select().from(runs).where(and30(
+    eq36(runs.id, runId),
+    eq36(runs.projectId, projectId),
+    eq36(runs.kind, kind)
   )).get();
   if (!run) throw withOutcomeReason(new Error(`Run ${runId} is not a ${kind} run for this project.`), OutcomeReasonCodes.NOT_FOUND);
   if (run.status !== RunStatuses.queued) {
@@ -19654,19 +19856,19 @@ function markFailed(db, runId, projectId, kind, expectedStatus, error) {
     status: RunStatuses.failed,
     error: serializeRunError({ message: safeErrorMessage(error) }),
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).where(and28(
-    eq34(runs.id, runId),
-    eq34(runs.projectId, projectId),
-    eq34(runs.kind, kind),
-    eq34(runs.status, expectedStatus)
+  }).where(and30(
+    eq36(runs.id, runId),
+    eq36(runs.projectId, projectId),
+    eq36(runs.kind, kind),
+    eq36(runs.status, expectedStatus)
   )).run();
 }
 function claimSyncRun(db, runId, projectId, kind, startedAt) {
-  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and28(
-    eq34(runs.id, runId),
-    eq34(runs.projectId, projectId),
-    eq34(runs.kind, kind),
-    eq34(runs.status, RunStatuses.queued)
+  const claim = db.update(runs).set({ status: RunStatuses.running, startedAt, error: null }).where(and30(
+    eq36(runs.id, runId),
+    eq36(runs.projectId, projectId),
+    eq36(runs.kind, kind),
+    eq36(runs.status, RunStatuses.queued)
   )).run();
   return claim.changes === 1;
 }
@@ -19676,9 +19878,9 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
   let evidenceCollected = false;
   try {
     requireSyncRun(db, runId, projectId, RunKinds["google-ads-sync"]);
-    const project = db.select().from(projects).where(eq34(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq36(projects.id, projectId)).get();
     if (!project) throw withOutcomeReason(new Error(`Project ${projectId} was not found.`), OutcomeReasonCodes.NOT_FOUND);
-    const connection = db.select().from(googleAdsConnections).where(eq34(googleAdsConnections.projectId, projectId)).get();
+    const connection = db.select().from(googleAdsConnections).where(eq36(googleAdsConnections.projectId, projectId)).get();
     if (!connection?.selectedCustomerId) {
       throw withOutcomeReason(new Error("Google Ads needs a selected customer before it can sync."), OutcomeReasonCodes.ACCOUNT_NOT_FOUND);
     }
@@ -19730,11 +19932,11 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and28(
-        eq34(runs.id, runId),
-        eq34(runs.projectId, projectId),
-        eq34(runs.kind, RunKinds["google-ads-sync"]),
-        eq34(runs.status, RunStatuses.running)
+      }).where(and30(
+        eq36(runs.id, runId),
+        eq36(runs.projectId, projectId),
+        eq36(runs.kind, RunKinds["google-ads-sync"]),
+        eq36(runs.status, RunStatuses.running)
       )).run();
       if (terminalClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19754,12 +19956,12 @@ async function executeGoogleAdsMarketingSync(db, runtime, runId, projectId) {
         lastMetricsSnapshotAt: result.metrics?.metadata.capturedAt ?? connection.lastMetricsSnapshotAt,
         lastMetricsSnapshotId: result.metrics?.metadata.id ?? connection.lastMetricsSnapshotId,
         updatedAt: finishedAt
-      }).where(and28(
-        eq34(googleAdsConnections.id, connection.id),
-        eq34(googleAdsConnections.projectId, projectId),
-        eq34(googleAdsConnections.selectedCustomerId, connection.selectedCustomerId),
-        connection.selectedLoginCustomerId === null ? isNull7(googleAdsConnections.selectedLoginCustomerId) : eq34(googleAdsConnections.selectedLoginCustomerId, connection.selectedLoginCustomerId),
-        eq34(googleAdsConnections.selectionGeneration, connection.selectionGeneration)
+      }).where(and30(
+        eq36(googleAdsConnections.id, connection.id),
+        eq36(googleAdsConnections.projectId, projectId),
+        eq36(googleAdsConnections.selectedCustomerId, connection.selectedCustomerId),
+        connection.selectedLoginCustomerId === null ? isNull7(googleAdsConnections.selectedLoginCustomerId) : eq36(googleAdsConnections.selectedLoginCustomerId, connection.selectedLoginCustomerId),
+        eq36(googleAdsConnections.selectionGeneration, connection.selectionGeneration)
       )).run();
       if (connectionClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19799,9 +20001,9 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
   let evidenceCollected = false;
   try {
     requireSyncRun(db, runId, projectId, RunKinds["gtm-sync"]);
-    const project = db.select().from(projects).where(eq34(projects.id, projectId)).get();
+    const project = db.select().from(projects).where(eq36(projects.id, projectId)).get();
     if (!project) throw withOutcomeReason(new Error(`Project ${projectId} was not found.`), OutcomeReasonCodes.NOT_FOUND);
-    const connection = db.select().from(gtmConnections).where(eq34(gtmConnections.projectId, projectId)).get();
+    const connection = db.select().from(gtmConnections).where(eq36(gtmConnections.projectId, projectId)).get();
     if (!connection?.selectedAccountId || !connection.selectedContainerId) {
       throw withOutcomeReason(new Error("GTM needs a selected account and container before it can sync."), OutcomeReasonCodes.ACCOUNT_NOT_FOUND);
     }
@@ -19839,11 +20041,11 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         status: RunStatuses.completed,
         finishedAt,
         error: null
-      }).where(and28(
-        eq34(runs.id, runId),
-        eq34(runs.projectId, projectId),
-        eq34(runs.kind, RunKinds["gtm-sync"]),
-        eq34(runs.status, RunStatuses.running)
+      }).where(and30(
+        eq36(runs.id, runId),
+        eq36(runs.projectId, projectId),
+        eq36(runs.kind, RunKinds["gtm-sync"]),
+        eq36(runs.status, RunStatuses.running)
       )).run();
       if (terminalClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -19864,13 +20066,13 @@ async function executeGtmMarketingSync(db, runtime, runId, projectId) {
         lastSnapshotAt: snapshot.metadata.capturedAt,
         lastSnapshotId: snapshot.metadata.id,
         updatedAt: finishedAt
-      }).where(and28(
-        eq34(gtmConnections.id, connection.id),
-        eq34(gtmConnections.projectId, projectId),
-        eq34(gtmConnections.selectedAccountId, connection.selectedAccountId),
-        eq34(gtmConnections.selectedContainerId, connection.selectedContainerId),
-        connection.selectedWorkspaceId === null ? isNull7(gtmConnections.selectedWorkspaceId) : eq34(gtmConnections.selectedWorkspaceId, connection.selectedWorkspaceId),
-        eq34(gtmConnections.selectionGeneration, connection.selectionGeneration)
+      }).where(and30(
+        eq36(gtmConnections.id, connection.id),
+        eq36(gtmConnections.projectId, projectId),
+        eq36(gtmConnections.selectedAccountId, connection.selectedAccountId),
+        eq36(gtmConnections.selectedContainerId, connection.selectedContainerId),
+        connection.selectedWorkspaceId === null ? isNull7(gtmConnections.selectedWorkspaceId) : eq36(gtmConnections.selectedWorkspaceId, connection.selectedWorkspaceId),
+        eq36(gtmConnections.selectionGeneration, connection.selectionGeneration)
       )).run();
       if (connectionClaim.changes !== 1) {
         throw withOutcomeReason(
@@ -20073,8 +20275,8 @@ var DASHBOARD_SCRYPT_KEYLEN = 64;
 var DASHBOARD_SCRYPT_COST = 1 << 15;
 var DASHBOARD_SCRYPT_MAXMEM = 64 * 1024 * 1024;
 function hashDashboardPassword(password) {
-  const salt = crypto27.randomBytes(16);
-  const derived = crypto27.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
+  const salt = crypto28.randomBytes(16);
+  const derived = crypto28.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
     N: DASHBOARD_SCRYPT_COST,
     maxmem: DASHBOARD_SCRYPT_MAXMEM
   });
@@ -20095,14 +20297,14 @@ function verifyDashboardPassword(password, storedHash) {
     } catch {
       return { ok: false, needsRehash: false };
     }
-    const derived = crypto27.scryptSync(password, salt, expected.length, {
+    const derived = crypto28.scryptSync(password, salt, expected.length, {
       N: DASHBOARD_SCRYPT_COST,
       maxmem: DASHBOARD_SCRYPT_MAXMEM
     });
     if (derived.length !== expected.length)
       return { ok: false, needsRehash: false };
     return {
-      ok: crypto27.timingSafeEqual(derived, expected),
+      ok: crypto28.timingSafeEqual(derived, expected),
       needsRehash: false
     };
   }
@@ -20111,7 +20313,7 @@ function verifyDashboardPassword(password, storedHash) {
     const expected = Buffer.from(storedHash, "hex");
     if (candidate.length !== expected.length)
       return { ok: false, needsRehash: false };
-    const ok = crypto27.timingSafeEqual(candidate, expected);
+    const ok = crypto28.timingSafeEqual(candidate, expected);
     return { ok, needsRehash: ok };
   }
   return { ok: false, needsRehash: false };
@@ -20278,7 +20480,7 @@ function cloneGtmConfig(config) {
 function createGoogleMarketingConfigCredentialStore(input) {
   const persistConfigPatch = input.saveConfigPatch ?? saveConfigPatch;
   const env = input.env ?? process.env;
-  const randomUUID2 = input.randomUUID ?? crypto27.randomUUID;
+  const randomUUID2 = input.randomUUID ?? crypto28.randomUUID;
   const snapshot = () => ({
     googleAds: cloneGoogleAdsConfig(input.config.googleAds),
     gtm: cloneGtmConfig(input.config.gtm)
@@ -20395,7 +20597,7 @@ async function createServer(opts) {
   const trustProxy = resolveTrustProxy(process.env.CANONRY_TRUST_PROXY);
   const app = Fastify({
     loggerInstance: logger,
-    genReqId: () => crypto27.randomUUID(),
+    genReqId: () => crypto28.randomUUID(),
     trustProxy
   });
   if (!ownsDefaultConfig) {
@@ -20526,7 +20728,7 @@ async function createServer(opts) {
     async (ctx) => {
       if (!sessionRegistry) return;
       if (!agentProactive) return;
-      const project = opts.db.select({ name: projects.name }).from(projects).where(eq35(projects.id, ctx.projectId)).get();
+      const project = opts.db.select({ name: projects.name }).from(projects).where(eq37(projects.id, ctx.projectId)).get();
       if (!project) return;
       let content;
       if (ctx.kind === RunKinds["aeo-discover-probe"]) {
@@ -21000,7 +21202,7 @@ async function createServer(opts) {
       void (async () => {
         try {
           const report = await schedulerClient.runDoctor({ project: projectName, checkIds: scheduledHealthCheckIds() });
-          const project = opts.db.select().from(projects).where(eq35(projects.name, projectName)).get();
+          const project = opts.db.select().from(projects).where(eq37(projects.name, projectName)).get();
           if (!project) {
             app.log.warn({ projectName }, "doctor schedule fired for an unknown project");
             return;
@@ -21194,7 +21396,7 @@ async function createServer(opts) {
       return removed;
     }
   };
-  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto27.randomBytes(32).toString("hex");
+  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto28.randomBytes(32).toString("hex");
   const googleConnectionStore = {
     listConnections: (domain) => listGoogleConnections(opts.config, domain),
     getConnection: (domain, connectionType) => getGoogleConnection(opts.config, domain, connectionType),
@@ -21292,11 +21494,11 @@ async function createServer(opts) {
   })();
   if (opts.config.apiKey) {
     const keyHash = hashApiKey(opts.config.apiKey);
-    const existing = opts.db.select().from(apiKeys).where(eq35(apiKeys.keyHash, keyHash)).get();
+    const existing = opts.db.select().from(apiKeys).where(eq37(apiKeys.keyHash, keyHash)).get();
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
-        id: `key_${crypto27.randomBytes(8).toString("hex")}`,
+        id: `key_${crypto28.randomBytes(8).toString("hex")}`,
         name: "default",
         keyHash,
         keyPrefix: prefix,
@@ -21311,14 +21513,14 @@ async function createServer(opts) {
   );
   const currentPasswordFingerprint = () => hashSessionToken(opts.config.dashboardPasswordHash ?? "");
   opts.db.delete(dashboardSessions).where(or4(
-    eq35(dashboardSessions.apiKeyHash, ""),
-    and29(
+    eq37(dashboardSessions.apiKeyHash, ""),
+    and31(
       isNotNull5(dashboardSessions.passwordFingerprint),
       ne4(dashboardSessions.passwordFingerprint, currentPasswordFingerprint())
     )
   )).run();
   if (!opts.config.dashboardPasswordHash) {
-    const lastPasswordEventAt = (action) => opts.db.select({ at: max(auditLog.createdAt) }).from(auditLog).where(and29(eq35(auditLog.entityType, "dashboard-password"), eq35(auditLog.action, action))).get()?.at ?? null;
+    const lastPasswordEventAt = (action) => opts.db.select({ at: max(auditLog.createdAt) }).from(auditLog).where(and31(eq37(auditLog.entityType, "dashboard-password"), eq37(auditLog.action, action))).get()?.at ?? null;
     const createdAt = lastPasswordEventAt("dashboard-password.created");
     const clearedAt = lastPasswordEventAt("dashboard-password.cleared");
     if (createdAt !== null && (clearedAt === null || clearedAt < createdAt)) {
@@ -21333,7 +21535,7 @@ async function createServer(opts) {
   const createSession = (key, passwordBased = false, db = opts.db) => {
     const now = /* @__PURE__ */ new Date();
     db.delete(dashboardSessions).where(lte3(dashboardSessions.expiresAt, now.toISOString())).run();
-    const sessionId = crypto27.randomBytes(32).toString("hex");
+    const sessionId = crypto28.randomBytes(32).toString("hex");
     db.insert(dashboardSessions).values({
       tokenHash: hashSessionToken(sessionId),
       apiKeyId: key.id,
@@ -21352,23 +21554,23 @@ async function createServer(opts) {
       currentApiKeyHash: apiKeys.keyHash,
       passwordFingerprint: dashboardSessions.passwordFingerprint,
       expiresAt: dashboardSessions.expiresAt
-    }).from(dashboardSessions).innerJoin(apiKeys, eq35(apiKeys.id, dashboardSessions.apiKeyId)).where(and29(eq35(dashboardSessions.tokenHash, tokenHash), isNull8(apiKeys.revokedAt))).get();
+    }).from(dashboardSessions).innerJoin(apiKeys, eq37(apiKeys.id, dashboardSessions.apiKeyId)).where(and31(eq37(dashboardSessions.tokenHash, tokenHash), isNull8(apiKeys.revokedAt))).get();
     if (!session) return null;
     const expiresAt = Date.parse(session.expiresAt);
     if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() || session.apiKeyHash !== session.currentApiKeyHash || session.passwordFingerprint !== null && session.passwordFingerprint !== currentPasswordFingerprint()) {
-      opts.db.delete(dashboardSessions).where(eq35(dashboardSessions.tokenHash, tokenHash)).run();
+      opts.db.delete(dashboardSessions).where(eq37(dashboardSessions.tokenHash, tokenHash)).run();
       return null;
     }
     return session.apiKeyId;
   };
   const clearSession = (sessionId) => {
     if (sessionId) {
-      opts.db.delete(dashboardSessions).where(eq35(dashboardSessions.tokenHash, hashSessionToken(sessionId))).run();
+      opts.db.delete(dashboardSessions).where(eq37(dashboardSessions.tokenHash, hashSessionToken(sessionId))).run();
     }
   };
   const getDefaultApiKey = () => {
     if (!opts.config.apiKey) return void 0;
-    return opts.db.select().from(apiKeys).where(eq35(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
+    return opts.db.select().from(apiKeys).where(eq37(apiKeys.keyHash, hashApiKey(opts.config.apiKey))).get();
   };
   const setSessionCookie = (reply, sessionId) => {
     reply.header(
@@ -21397,7 +21599,7 @@ async function createServer(opts) {
     if (parts.length !== 2 || parts[0] !== "Bearer" || !parts[1]) return false;
     const presented = Buffer.from(hashApiKey(parts[1]), "hex");
     const expected = Buffer.from(key.keyHash, "hex");
-    return presented.length === expected.length && crypto27.timingSafeEqual(presented, expected);
+    return presented.length === expected.length && crypto28.timingSafeEqual(presented, expected);
   };
   const namedAccountsInUse = () => anyUsersExist(opts.db);
   const NAMED_ACCOUNTS_MESSAGE = "This install uses named accounts. Sign in with your name and password.";
@@ -21529,12 +21731,12 @@ async function createServer(opts) {
       return reply.send({ authenticated: true });
     }
     if (apiKey) {
-      const key = opts.db.select().from(apiKeys).where(eq35(apiKeys.keyHash, hashApiKey(apiKey))).get();
+      const key = opts.db.select().from(apiKeys).where(eq37(apiKeys.keyHash, hashApiKey(apiKey))).get();
       if (!key || key.revokedAt) {
         const err2 = authInvalid();
         return reply.status(err2.statusCode).send(err2.toJSON());
       }
-      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq35(apiKeys.id, key.id)).run();
+      opts.db.update(apiKeys).set({ lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq37(apiKeys.id, key.id)).run();
       setSessionCookie(reply, createSession(key));
       return reply.send({ authenticated: true });
     }
@@ -21612,7 +21814,7 @@ async function createServer(opts) {
   const recomputeDebts = /* @__PURE__ */ new Map();
   let recomputeSequence = 0;
   const markAnswerFieldRecompute = (projectId, full) => {
-    opts.db.update(projects).set({ answerFieldsRecompute: full ? "full" : sql15`CASE WHEN ${projects.answerFieldsRecompute} = 'full' THEN 'full' ELSE 'competitors' END` }).where(eq35(projects.id, projectId)).run();
+    opts.db.update(projects).set({ answerFieldsRecompute: full ? "full" : sql15`CASE WHEN ${projects.answerFieldsRecompute} = 'full' THEN 'full' ELSE 'competitors' END` }).where(eq37(projects.id, projectId)).run();
   };
   const requestAnswerFieldRecompute = (projectId, projectName, scope, reason) => {
     const sequence = ++recomputeSequence;
@@ -21630,10 +21832,10 @@ async function createServer(opts) {
         if (pass.full && debt.latestFull <= sequence) debt.latestFull = 0;
         try {
           if (debt.latest === sequence && debt.latestFull === 0) {
-            opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq35(projects.id, projectId)).run();
+            opts.db.update(projects).set({ answerFieldsRecompute: null }).where(eq37(projects.id, projectId)).run();
             if (recomputeDebts.get(projectId) === debt) recomputeDebts.delete(projectId);
           } else if (debt.latestFull === 0) {
-            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and29(eq35(projects.id, projectId), eq35(projects.answerFieldsRecompute, "full"))).run();
+            opts.db.update(projects).set({ answerFieldsRecompute: "competitors" }).where(and31(eq37(projects.id, projectId), eq37(projects.answerFieldsRecompute, "full"))).run();
           }
         } catch (err) {
           app.log.error({ err, projectId }, "could not clear the owed answer field recompute");
@@ -21670,7 +21872,7 @@ async function createServer(opts) {
     await yieldToEventLoop4();
     const reason = (competitorAutoAliasReasons.get(projectId) ?? []).join(",");
     competitorAutoAliasReasons.delete(projectId);
-    const project = opts.db.select().from(projects).where(eq35(projects.id, projectId)).get();
+    const project = opts.db.select().from(projects).where(eq37(projects.id, projectId)).get();
     if (!project || project.competitorAutoAliases === "off") return;
     if (project.competitorAutoAliases === "apply") {
       await competitorAutoAliases.request(projectId, reason).catch(() => void 0);
@@ -21870,8 +22072,8 @@ async function createServer(opts) {
     getAgentPin: () => describeAgentPin(opts.config),
     getGoogleMarketingDoctorInput: (ctx) => {
       if (!ctx.project) return null;
-      const googleAds = opts.db.select().from(googleAdsConnections).where(eq35(googleAdsConnections.projectId, ctx.project.id)).get();
-      const gtm = opts.db.select().from(gtmConnections).where(eq35(gtmConnections.projectId, ctx.project.id)).get();
+      const googleAds = opts.db.select().from(googleAdsConnections).where(eq37(googleAdsConnections.projectId, ctx.project.id)).get();
+      const gtm = opts.db.select().from(gtmConnections).where(eq37(gtmConnections.projectId, ctx.project.id)).get();
       const googleAdsCredential = getGoogleAdsConnection(opts.config, ctx.project.id);
       const gtmCredential = getGtmConnection(opts.config, ctx.project.id);
       const googleAdsConnected = Boolean(googleAdsCredential?.accessToken);
@@ -22000,7 +22202,7 @@ async function createServer(opts) {
         deps: {
           enqueueAutoExtract: ({ projectId, release: r }) => {
             const now = (/* @__PURE__ */ new Date()).toISOString();
-            const runId = crypto27.randomUUID();
+            const runId = crypto28.randomUUID();
             opts.db.insert(runs).values({
               id: runId,
               projectId,
@@ -22121,7 +22323,7 @@ async function createServer(opts) {
         ...inspectOpts,
         config: opts.config
       }).then(() => {
-        const finished = opts.db.select({ status: runs.status }).from(runs).where(eq35(runs.id, runId)).get();
+        const finished = opts.db.select({ status: runs.status }).from(runs).where(eq37(runs.id, runId)).get();
         if (finished?.status === RunStatuses.completed || finished?.status === RunStatuses.partial) {
           return maybeRefreshGscCoverage(
             opts.db,
@@ -22633,7 +22835,7 @@ async function createServer(opts) {
           isBacklinksInstalled: () => isDuckdbInstalled()
         });
       }
-      for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq35(researchRuns.status, ResearchRunStatuses.queued)).all()) {
+      for (const run of opts.db.select({ id: researchRuns.id, projectId: researchRuns.projectId }).from(researchRuns).where(eq37(researchRuns.status, ResearchRunStatuses.queued)).all()) {
         dispatchResearchRun(run.id, run.projectId, OutcomeTriggers.startup);
       }
       runtimeStartupSettled = true;