agentlinkops 0.6.11 → 0.6.16

package/shared/monitoring-chronology-export.js

@@ -0,0 +1,57 @@
+// Offline frozen chronology export. No hosted store, authentication, network or
+// collection dependency belongs in the customer's CLI export closure.
+const fail=(status,code,message)=>{throw Object.assign(new Error(message),{name:'ChronologyExportError',status,code});};
+const iso=value=>typeof value==='string'&&Number.isFinite(Date.parse(value))?new Date(value).toISOString():null;
+const validIdentity=value=>{
+ if(!value||typeof value!=='object'||Array.isArray(value))return false;
+ const id=v=>typeof v==='string'&&v.length>0&&v.length<=200&&!/[\s\x00-\x1f\x7f]/u.test(v);
+ const url=v=>{if(typeof v!=='string'||!v||v.length>4096)return false;try{const u=new URL(v);return ['http:','https:'].includes(u.protocol)&&!u.username&&!u.password;}catch{return false;}};
+ return ['workspaceId','projectId','watchId'].every(k=>id(value[k]))&&url(value.sourceUrl)&&url(value.targetUrl)
+  &&['exact','domain','subdomain','path'].includes(value.targetScope)&&(value.targetId===null||id(value.targetId))
+  &&(value.localReference===null||typeof value.localReference==='string'&&value.localReference.length<=2048)
+  &&value.matchBasis==='configured_target_url';
+};
+const compare=(a,b)=>a.sortAt>b.sortAt?-1:a.sortAt<b.sortAt?1:a.id>b.id?-1:a.id<b.id?1:0;
+const sha256=async value=>Array.from(new Uint8Array(await crypto.subtle.digest('SHA-256',new TextEncoder().encode(value))),b=>b.toString(16).padStart(2,'0')).join('');
+const baseItem=(stream,row,identity,observedAt,recordedAt,kind)=>({id:`${stream}:${row.id}`,rawId:row.id,stream,kind,identity,observedAt:iso(observedAt),recordedAt:iso(recordedAt),sortAt:iso(observedAt)??iso(recordedAt),state:null,reason:null,sourceKey:null,method:null,checkerVersion:null,evidence:{sha256:null,reference:null,expiresAt:null,availability:'not_checked'},data:{}});
+
+// Export only a supplied frozen dataset. This function never reads current DB
+// state or fills a missing origin with today's projection.
+export async function freezeChronology(pages,{localItems=[]}={}){
+ if(!Array.isArray(pages)||!pages.length||pages.length>10000||!Array.isArray(localItems)||localItems.length>10000)fail(400,'INVALID_CHRONOLOGY_EXPORT','Provide bounded chronology pages.');
+ const first=pages[0];if(!validIdentity(first?.identity)||iso(first?.asOf)!==first.asOf||!/^[a-f0-9]{64}$/.test(first?.snapshotId??''))fail(400,'INVALID_CHRONOLOGY_EXPORT','A frozen page requires an exact placement identity, watermark and snapshot digest.');
+ const byId=new Map();let continuous=first.pageCursor===null;
+ for(let i=0;i<pages.length;i++){
+  const page=pages[i];if(!page||page.schemaVersion!==1||page.snapshotId!==first.snapshotId||page.asOf!==first.asOf||JSON.stringify(page.identity)!==JSON.stringify(first.identity)||!Array.isArray(page.items))fail(400,'CHRONOLOGY_EXPORT_SCOPE_MISMATCH','Export pages must belong to one frozen placement read.');
+  if(typeof page.hasMore!=='boolean'||(page.hasMore?typeof page.nextCursor!=='string'||!page.nextCursor||page.nextCursor.length>12000:page.nextCursor!==null))fail(400,'INVALID_CHRONOLOGY_EXPORT','Each frozen page must declare whether another page exists with a consistent continuation cursor.');
+  if(i&&pages[i-1].nextCursor!==page.pageCursor)continuous=false;
+  for(const row of page.items){if(!row||JSON.stringify(row.identity)!==JSON.stringify(first.identity))fail(400,'CHRONOLOGY_EXPORT_SCOPE_MISMATCH','Every retained row must belong to this exact frozen placement.');const previous=byId.get(row.id);if(previous&&JSON.stringify(previous)!==JSON.stringify(row))fail(400,'CHRONOLOGY_EXPORT_CONFLICT','A frozen row changed between pages.');byId.set(row.id,row);}
+ }
+ for(const row of localItems){if(row.stream!=='local_submissions'||JSON.stringify(row.identity)!==JSON.stringify(first.identity)||!iso(row.sortAt)||row.sortAt>first.asOf)fail(400,'CHRONOLOGY_EXPORT_SCOPE_MISMATCH','Local submission context must match this placement and cutoff.');const previous=byId.get(row.id);if(previous&&JSON.stringify(previous)!==JSON.stringify(row))fail(400,'CHRONOLOGY_EXPORT_CONFLICT','A local receipt identity changed.');byId.set(row.id,row);}
+ const complete=continuous&&pages.at(-1).hasMore===false,coverage=JSON.parse(JSON.stringify(pages.at(-1).coverage));
+ if(localItems.length)coverage.local_submissions={status:'available',reason:'validated_local_reported_receipts',hasMore:false,providerAuthenticity:'not_established'};
+ const items=[...byId.values()].sort(compare),gaps=[];
+ for(const [stream,origin] of Object.entries(coverage)){
+  if(origin.status==='available'){const loaded=items.filter(row=>row.stream===stream);origin.loadedRange={newestAt:loaded[0]?.sortAt??null,oldestAt:loaded.at(-1)?.sortAt??null,itemCount:loaded.length};}
+  if(origin.status!=='available'||origin.compactedBefore||origin.retentionFloor>0)gaps.push({stream,reason:origin.reason,...(origin.compactedBefore?{compactedBefore:origin.compactedBefore}:{}),...(origin.retentionFloor>0?{retentionFloor:origin.retentionFloor}:{})});
+ }
+ if(!complete)gaps.push({stream:'pagination',reason:'partial_pagination'});
+ const data={schemaVersion:1,identity:first.identity,asOf:first.asOf,snapshotId:first.snapshotId,items,coverage,gaps,pagination:{complete,pageCount:pages.length,reason:complete?'all_loaded_pages':'partial_pagination',nextCursor:pages.at(-1).nextCursor??null},historyMeaning:first.historyMeaning};
+ const frozen=JSON.parse(JSON.stringify(data));return {...frozen,contentHash:await sha256(JSON.stringify(frozen))};
+}
+
+// This is an offline normalization boundary, not server ingestion, collection or
+// proof of provider authenticity. The hash uses the existing CLI receipt format.
+export async function normalizeLocalSubmissions(rows,identity){
+ if(!validIdentity(identity))fail(400,'INVALID_SUBMISSION_RECEIPT','An exact placement identity is required.');
+ if(!Array.isArray(rows)||rows.length>10000)fail(400,'INVALID_SUBMISSION_RECEIPT','Provide bounded local submission receipts.');
+ const fields=['v','id','project_id','url','channel','endpoint','submitted_at','http_status','evidence_sha256'],items=[],byId=new Map();
+ for(const row of rows){
+  if(!row||Object.keys(row).some(k=>!fields.includes(k))||fields.some(k=>!Object.hasOwn(row,k))||row.v!==1||!/^[\w-]{1,128}$/.test(row.id??'')||!/^[\w-]{1,128}$/.test(row.project_id??'')||row.channel!=='indexnow'||row.endpoint!=='https://api.indexnow.org/indexnow'||iso(row.submitted_at)!==row.submitted_at||row.http_status!==null&&(!Number.isInteger(row.http_status)||row.http_status<100||row.http_status>599))fail(400,'INVALID_SUBMISSION_RECEIPT','Use the existing validated local submission format.');
+  let url;try{url=new URL(row.url);}catch{fail(400,'INVALID_SUBMISSION_RECEIPT','The submission URL is invalid.');}if(url.href!==row.url||!['http:','https:'].includes(url.protocol)||url.username||url.password||url.hash)fail(400,'INVALID_SUBMISSION_RECEIPT','The submission URL must be exact HTTP(S).');
+  const body=Object.fromEntries(fields.filter(k=>k!=='evidence_sha256').map(k=>[k,row[k]]));if(await sha256(JSON.stringify(body))!==row.evidence_sha256)fail(400,'INVALID_SUBMISSION_RECEIPT','The local receipt hash does not match.');
+  const key=`${row.project_id}:${row.id}`,previous=byId.get(key);if(previous&&JSON.stringify(previous)!==JSON.stringify(row))fail(409,'SUBMISSION_IDENTITY_CONFLICT','A local submission ID has conflicting contents.');byId.set(key,row);if(previous||row.project_id!==identity.projectId||![identity.sourceUrl,identity.targetUrl].includes(row.url))continue;
+  const item=baseItem('local_submissions',{id:key},identity,null,null,'reported_submission');items.push({...item,sortAt:row.submitted_at,reason:row.http_status===200?'received':row.http_status===202?'key_validation_pending':row.http_status===null?'unknown':'failed',method:'reported_indexnow_http_response',evidence:{...item.evidence,sha256:row.evidence_sha256,availability:'local_receipt'},data:{...row,subject:row.url===identity.sourceUrl?'source':'target',reportedSubmissionAt:row.submitted_at,sortTimeMeaning:'reported_submission_time',retrievedAt:null,providerAuthenticity:'not_established',participantIndexingVerified:false,causationEstablished:false}});
+ }
+ return items.sort(compare);
+}

package/shared/monitoring-read-contract.js

@@ -0,0 +1,41 @@
+import {z} from 'zod';
+const id=z.string().min(1).max(200),time=z.string().datetime(),nullableTime=time.nullable(),count=z.number().int().nonnegative();
+export const chronologyStreams=['context','link_observations','target_observations','link_events','target_events','index_observations','index_events','local_submissions'];
+export const chronologyInput=z.object({watchId:id,limit:z.number().int().min(1).max(100).optional(),cursor:z.string().max(12000).optional(),streams:z.array(z.enum(chronologyStreams)).min(1).max(8).refine(values=>new Set(values).size===values.length).optional()}).strict();
+const identity=z.object({workspaceId:id,projectId:id,watchId:id,sourceUrl:z.url(),targetUrl:z.url(),targetScope:z.enum(['exact','domain','subdomain','path']),targetId:id.nullable(),localReference:z.string().nullable(),matchBasis:z.literal('configured_target_url')});
+export const chronologyResponse=z.object({schemaVersion:z.literal(1),identity,asOf:time,snapshotId:z.string().regex(/^[a-f0-9]{64}$/),items:z.array(z.looseObject({id:z.string(),rawId:z.string(),stream:z.enum(chronologyStreams),kind:z.string(),identity,observedAt:nullableTime,recordedAt:nullableTime,sortAt:time,state:z.string().nullable(),reason:z.string().nullable(),sourceKey:z.string().nullable(),method:z.string().nullable(),checkerVersion:z.string().nullable(),evidence:z.looseObject({sha256:z.string().nullable(),reference:z.string().nullable(),expiresAt:nullableTime,availability:z.string()}),data:z.record(z.string(),z.unknown())})),pageCursor:z.string().nullable(),nextCursor:z.string().nullable(),hasMore:z.boolean(),coverage:z.partialRecord(z.enum(chronologyStreams),z.looseObject({status:z.enum(['available','denied','unavailable']),reason:z.string()})),historyMeaning:z.string()}).passthrough();
+// Additive retained-data projection; absence preserves older backend responses.
+const nullableSeconds=z.number().nonnegative().nullable();
+const coverageProjection=z.object({
+ supplied:count,active:count,paused:count,recordedHeld:count,schedulingCandidates:count,busy:count,dueCandidates:count,
+ eligibility:z.object({status:z.literal('unavailable'),eligible:z.null(),reason:z.literal('admission_not_rechecked')}),
+ denominatorMeaning:z.string(),freshnessWindow:z.string(),cadenceSeconds:z.object({minimum:count.nullable(),maximum:count.nullable()}),
+ oldestOverdueAt:nullableTime,oldestOverdueAgeSeconds:nullableSeconds,nextScheduledAt:nullableTime,nextEligibleAt:z.null(),nextEligibleReason:z.literal('admission_not_rechecked'),
+ neverAttempted:count,neverConclusive:count,currentUnknown:count,unknownReasons:z.record(z.string(),count),freshConclusive:count,staleConclusive:count,
+ shares:z.object({currentUnknown:z.number().min(0).max(1).nullable(),neverAttempted:z.number().min(0).max(1).nullable(),freshConclusive:z.number().min(0).max(1).nullable()}),shareMeaning:z.string(),
+ freshRetainedLinkVerification:count.optional(),linkVerificationMeaning:z.string().optional(),reasonCounts:z.object({due:z.record(z.string(),count),deferred:z.record(z.string(),count),unavailable:z.record(z.string(),count).optional()})
+});
+const projectedJobs=z.object({
+ retained:count,queued:count,running:count,succeeded:count,failed:count,cancelled:count,everClaimed:count,claimAttempts:count,retryClaims:count,retryExhausted:count,expiredRunningLeases:count,
+ oldestQueuedAt:nullableTime,oldestQueuedAgeSeconds:nullableSeconds,oldestRunningAdmissionAt:nullableTime,oldestRunningAdmissionAgeSeconds:nullableSeconds,latestAdmissionAt:nullableTime,latestCompletionAt:nullableTime,
+ scopedRetainedDeadLetters:count,deadLetterMeaning:z.string(),admissionToTerminal:z.object({samples:count,minimumSeconds:nullableSeconds,maximumSeconds:nullableSeconds,meaning:z.string()}),
+ startedAt:z.null(),queueWaitSeconds:z.null(),providerLatencySeconds:z.null(),timingReason:z.literal('first_start_and_provider_timing_not_retained'),
+ dispatch:z.object({outstanding:count,deferred:count,expiredSendingLeases:count,nextDispatchAt:nullableTime,meaning:z.string()}),historyMeaning:z.string()
+});
+const projectedPlane=z.object({coverage:coverageProjection,jobs:projectedJobs});
+const indexProjection=z.discriminatedUnion('status',[
+ z.object({status:z.literal('denied'),reason:z.string()}).strict(),z.object({status:z.literal('unavailable'),reason:z.string()}).strict(),
+ z.object({status:z.literal('available'),reason:z.string(),suppliedSourceWatches:count,activeSourceWatches:count,
+  lanes:z.array(z.object({lane:z.enum(['gsc','licensed_site']),retainedStates:count,observedActiveWatches:count,neverObservedActiveWatches:count,currentUnknownStates:count,latestObservationAt:nullableTime,oldestObservationAt:nullableTime,oldestObservationAgeSeconds:nullableSeconds})).length(2),
+  schedule:z.discriminatedUnion('status',[z.object({status:z.literal('unavailable'),reason:z.literal('schema_unavailable')}),z.object({status:z.literal('available'),projectOptedIn:z.boolean(),inspectionEnabled:z.boolean(),schedulerEnabled:z.boolean(),cadenceSeconds:count.nullable(),dailyLimit:count.nullable(),nextProjectScanAt:nullableTime,propertyEligibleWatches:z.null(),propertyEligibilityReason:z.literal('current_source_property_grant_not_assessed'),eligibleWatches:z.null(),eligibilityReason:z.literal('admission_not_rechecked')})]),meaning:z.string()})
+]);
+export const monitoringAssuranceProjection=z.object({schemaVersion:z.literal(1),source:projectedPlane,target:projectedPlane,index:indexProjection,
+ serviceTickWindow:z.object({expectedTicks:z.null(),completedTicks:z.null(),availabilityShare:z.null(),reason:z.literal('tick_history_not_retained')}),
+ capacity:z.object({dueOpportunities:z.null(),missedOpportunities:z.null(),checksPerEligibleWatch:z.null(),reason:z.literal('bounded_roster_opportunity_history_not_retained')}),meaning:z.string()});
+export const assuranceInput=z.object({projectId:id}).strict();
+const metric=z.object({supplied:count,active:count,paused:count,neverAttempted:count,neverConclusive:count,due:count,overdue:count,currentUnknown:count,latestAttemptAt:nullableTime,oldestAttemptAt:nullableTime,oldestAttemptAgeSeconds:z.number().nonnegative().nullable(),latestConclusiveAt:nullableTime,oldestConclusiveAt:nullableTime,oldestConclusiveAgeSeconds:z.number().nonnegative().nullable()});
+export const assuranceResponse=z.object({schemaVersion:z.literal(1),workspaceId:id,projectId:id,asOf:time,source:metric,target:metric,monitoringProjection:monitoringAssuranceProjection.optional(),sourceLinkVerification:z.object({latestRetainedAt:nullableTime,oldestRetainedAt:nullableTime,observedWatches:count,meaning:z.string()}),sourceJobs:z.object({queued:count,running:count}),overdueReasons:z.record(z.string(),count),index:z.discriminatedUnion('status',[z.object({status:z.literal('available'),reason:z.string(),observedWatches:count,latestObservationAt:nullableTime,oldestObservationAt:nullableTime,oldestObservationAgeSeconds:z.number().nonnegative().nullable(),denominator:z.string()}),z.object({status:z.literal('denied'),reason:z.string()}),z.object({status:z.literal('unavailable'),reason:z.string()})]),serviceTicks:z.object({status:z.enum(['available','unavailable']),meaning:z.string(),items:z.array(z.object({plan:z.string(),latestAttemptAt:time,latestCompletionAt:nullableTime,latestSuccessAt:nullableTime,latestOutcome:z.enum(['running','succeeded','failed']),ageSeconds:z.number().nonnegative()}))}),assurance:z.object({elapsedSoak:z.literal('not_established'),backupRestore:z.literal('not_established'),externalDelivery:z.literal('not_established')}),denominator:z.string()}).passthrough();
+export const monitoringReadResponses={get_placement_chronology:chronologyResponse,get_monitoring_service_assurance:assuranceResponse};
+const at='2026-10-07T00:00:00.000Z',projectId='pr_example',workspaceId='ws_example';
+const emptyMetric={supplied:0,active:0,paused:0,neverAttempted:0,neverConclusive:0,due:0,overdue:0,currentUnknown:0,latestAttemptAt:null,oldestAttemptAt:null,oldestAttemptAgeSeconds:null,latestConclusiveAt:null,oldestConclusiveAt:null,oldestConclusiveAgeSeconds:null};
+export const monitoringReadExamples={get_placement_chronology:{schemaVersion:1,identity:{workspaceId,projectId,watchId:'watch_example',sourceUrl:'https://publisher.example.org/resource',targetUrl:'https://example.org/guide',targetScope:'exact',targetId:null,localReference:null,matchBasis:'configured_target_url'},asOf:at,snapshotId:'a'.repeat(64),items:[],pageCursor:null,nextCursor:null,hasMore:false,coverage:{context:{status:'available',reason:'recorded_declarations_only'},local_submissions:{status:'unavailable',reason:'local_only_not_hosted'}},historyMeaning:'Retained evidence only; gaps do not establish inactivity.'},get_monitoring_service_assurance:{schemaVersion:1,workspaceId,projectId,asOf:at,source:emptyMetric,target:emptyMetric,sourceLinkVerification:{latestRetainedAt:null,oldestRetainedAt:null,observedWatches:0,meaning:'Retained complete link receipts.'},sourceJobs:{queued:0,running:0},overdueReasons:{},index:{status:'unavailable',reason:'not_configured'},serviceTicks:{status:'unavailable',meaning:'Scheduler metadata, not customer coverage.',items:[]},assurance:{elapsedSoak:'not_established',backupRestore:'not_established',externalDelivery:'not_established'},denominator:'Supplied project records; zero is not an inventory of all backlinks.'}};

package/shared/observation-event.js

@@ -6,7 +6,7 @@ export function eventSnapshot(state) {
     rel: (item.rel || []).slice(0, 20),
   }));
   return {
-    schema_version: 1, target_scope: state.target_scope,
+    schema_version: 1, display_state: state.pipeline?.intent==='prospect' && !state.wasEverPresent ? 'prospect' : ['confirmed_missing','suspected_missing'].includes(state.state) && !state.wasEverPresent ? 'unverified' : state.state||'unknown', was_ever_present:state.wasEverPresent === true, intent:state.pipeline?.intent??'earned', target_scope: state.target_scope,
     check_state: latest.state ?? 'unknown', link_signature: latest.linkSignature ?? null,
     checker_version: latest.evidence?.checkerVersion ?? null,
     // Hash the captured document, not the enclosing R2 receipt object. Older events

package/shared/onboarding.js

@@ -0,0 +1,20 @@
+import {z} from 'zod';
+
+export const initialOnboarding = () => ({version:1,revision:0,step:'website',projectId:null,gsc:null,returnTo:null,completedAt:null});
+export const onboardingState = z.object({
+  version:z.literal(1),revision:z.number().int().nonnegative(),step:z.enum(['website','google','finish','complete']),
+  projectId:z.string().nullable(),gsc:z.enum(['connected','later']).nullable(),returnTo:z.string().nullable(),completedAt:z.string().nullable(),
+});
+export const onboardingResponse = z.object({required:z.boolean(),state:onboardingState.nullable()});
+
+// Keep only the two existing account-return destinations. Never persist an OAuth code,
+// bearer, arbitrary URL or user-supplied permission scope in workspace metadata.
+export function onboardingReturnTo(value) {
+  if(typeof value!=='string'||!value.startsWith('#/'))return null;
+  const [route,query]=value.slice(2).split('?'),params=new URLSearchParams(query);
+  if(route==='workspace'&&params.get('section')==='invitations')return '#/workspace?section=invitations';
+  const clientId=params.get('clientId');
+  if(route==='access'&&params.get('section')==='grants'&&params.getAll('clientId').length===1&&clientId&&clientId.length<=2048&&!/[\s\u0000-\u001f\u007f]/.test(clientId))
+    return `#/access?${new URLSearchParams({section:'grants',clientId})}`;
+  return null;
+}

package/shared/response-contract.js

@@ -1,18 +1,32 @@
+import {onboardingResponse} from './onboarding.js';
+import {internalLinkPreviewOutput,internalLinkSnapshotOutput,internalLinkListOutput,internalLinkQueryOutput} from './internal-links-contract.js';
+import {profileHistoryOutput,profileHistoryRecordsOutput} from './analytics-history-contract.js';
+import {classificationMetadataResponse,classificationMetadataWriteResponse,classificationMetadataOccurrenceResponse,classificationResponse,classificationHistoryResponse,classificationQuoteResponse,classificationJobResponse} from './classification-contract.js';
+import {chronologyResponse,assuranceResponse} from './monitoring-read-contract.js';
 import {lifecycleOutput} from './lifecycle-contract.js';
+import {contactResponses} from './contact-record-contract.js';
+import {prospectResponses} from './campaign-prospect-contract.js';
+import {campaignOutcomeResponses} from './campaign-outcome-contract.js';
 import {searchConnectionsResponse,searchRowsResponse,searchSyncResponse,searchPropertiesResponse,searchStartResponse,searchConnection,searchImportResponse} from './search-connection-contract.js';
+import {linkSummaryResponse} from './link-summary-contract.js';
+import {linkCategoryFields,linkLabelledWatchResponse,linkLabelledWatchesResponse} from './link-category-contract.js';
+export {linkSummaryResponse};
 import {z} from 'zod';
 export const objectResponse=z.looseObject({});
 export const pageResponse=z.looseObject({items:z.array(objectResponse),next_cursor:z.string().nullable().optional()});
-export const watchResponse=z.looseObject({id:z.string(),source_url:z.string(),target_url:z.string(),state:z.string(),observation_state:objectResponse});
+// Category fields share the documented contract while remaining additive for older
+// deployments. List rows may be concise; detailed watch requirements stay separate.
+export const watchPageResponse=pageResponse.extend({items:z.array(z.looseObject(linkCategoryFields))});
+export const watchResponse=z.looseObject({...linkCategoryFields,id:z.string(),source_url:z.string(),target_url:z.string(),state:z.string(),observation_state:objectResponse});
 export const targetResponse=z.looseObject({id:z.string(),url:z.string(),state:z.string(),observation_state:objectResponse});
 export const historyResponse=z.looseObject({items:z.array(z.looseObject({id:z.string(),state:z.string(),checked_at:z.string(),result:objectResponse})),next_cursor:z.string().nullable().optional()});
 export const jobResponse=z.looseObject({id:z.string(),state:z.enum(['queued','running','succeeded','failed','cancelled'])});
 export const observationEvent=z.looseObject({id:z.string(),data:objectResponse});
-export const eventFeedResponse=z.looseObject({events:z.array(observationEvent),next_cursor:z.string(),has_more:z.boolean()});
+export const eventFeedResponse=z.looseObject({events:z.array(observationEvent),next_cursor:z.string().nullable(),has_more:z.boolean()});
 export const linkChangeReportResponse=z.looseObject({schema_version:z.literal(1),workspace_id:z.string(),project_id:z.string(),coverage_scope:z.literal('retained_event_feed'),
   from:z.string(),as_of:z.string(),through_sequence:z.number().int().nonnegative(),count:z.number().int().nonnegative(),
   limit:z.literal(500),truncated:z.boolean(),complete:z.boolean(),retention_limited:z.boolean(),scan_limit:z.literal(10000),scan_limited:z.boolean(),
-  events:z.array(z.looseObject({id:z.string(),workspace_id:z.string(),project_id:z.string(),type:z.enum(['placement_acquired','placement_recovered','placement_lost']),created_at:z.string()})).max(500)});
+  events:z.array(z.looseObject({id:z.string(),workspace_id:z.string(),project_id:z.string(),type:z.enum(['placement_acquired','placement_recovered','placement_lost','prospect_won']),created_at:z.string()})).max(500)});
 export const usageResponse=z.looseObject({
   workspace_id:z.string(),period:z.string().regex(/^\d{4}-\d{2}$/),plan:z.string(),
   check_reservations:z.looseObject({reserved:z.number().nonnegative(),consumed:z.number().nonnegative(),released:z.number().nonnegative()}),
@@ -41,11 +55,27 @@ export const candidateMonitoringResponse=z.looseObject({
 });
 /** Network boundary shared by the console and command adapters. Unknown fields survive evolution. */
 export function restResponseContract(path,method='GET') {
+  const contactCommand=path.split('?')[0].match(/^\/v1\/commands\/([^/]+)$/)?.[1];
+  const campaignResponse=prospectResponses[contactCommand]??campaignOutcomeResponses[contactCommand]??contactResponses[contactCommand];
+  if(method==='POST'&&campaignResponse)return campaignResponse;
+  if(/^\/v1\/projects\/[^/]+\/classification-metadata(?:\/(definitions|settings|occurrences))?(?:\?|$)/.test(path))return method==='GET'?(path.split('?')[0].endsWith('/occurrences')?classificationMetadataOccurrenceResponse:classificationMetadataResponse):classificationMetadataWriteResponse;
+  if(/^\/v1\/watches\/[^/]+\/classification\/history(?:\?|$)/.test(path))return classificationHistoryResponse;
+  if(/^\/v1\/watches\/[^/]+\/classification\/quote(?:\?|$)/.test(path))return classificationQuoteResponse;
+  if(/^\/v1\/watches\/[^/]+\/classification\/(?:classify|jobs\/[^/?]+(?:\/reconcile)?)(?:\?|$)/.test(path))return classificationJobResponse;
+  if(/^\/v1\/watches\/[^/]+\/classification(?:\/prepare)?(?:\?|$)/.test(path))return classificationResponse;
   const pathname=path.split('?')[0];
+  if(pathname==='/v1/onboarding')return onboardingResponse;
+  if(pathname==='/v1/internal-links/preview'&&method==='POST')return internalLinkPreviewOutput;
+  if(pathname==='/v1/internal-links/snapshots')return method==='GET'?internalLinkListOutput:internalLinkSnapshotOutput;
+  if(/^\/v1\/internal-links\/snapshots\/[^/]+\/query$/.test(pathname))return internalLinkQueryOutput;
+  if(/^\/v1\/internal-links\/snapshots\/[^/]+(?:\/process)?$/.test(pathname))return internalLinkSnapshotOutput;
+  if(method==='PUT' && /^\/v1\/watches\/[^/]+\/type$/.test(pathname))return linkLabelledWatchResponse;
+  if(method==='POST' && pathname==='/v1/watches/bulk-labels')return linkLabelledWatchesResponse;
+  if(['POST','DELETE'].includes(method) && /^\/v1\/watches\/[^/]+\/tags(?:\/[^/]+)?$/.test(pathname))return linkLabelledWatchesResponse;
   if(method==='POST' && /^\/v1\/discovery\/runs\/[^/]+\/verification-batches$/.test(pathname))return candidateVerificationBatchResponse;
   if(method==='GET' && /^\/v1\/discovery\/verification-batches\/[^/]+$/.test(pathname))return candidateVerificationBatchResponse;
   if(method==='POST' && /^\/v1\/discovery\/verifications\/[^/]+\/monitor$/.test(pathname))return candidateMonitoringResponse;
-  if(pathname==='/v1/search-connections'&&method==='GET')return searchConnectionsResponse;
+  if(pathname==='/v1/search-connections'&&method==='GET')return /[?&]all=1(?:&|$)/.test(path)?z.looseObject({websites:z.array(z.looseObject({project:z.looseObject({id:z.string()})}))}):searchConnectionsResponse;
   if(pathname==='/v1/search-connections/start'&&method==='POST')return searchStartResponse;
   if(/^\/v1\/search-connections\/[^/]+\/rows$/.test(pathname)&&method==='GET')return searchRowsResponse;
   if(/^\/v1\/search-connections\/[^/]+\/properties$/.test(pathname)&&method==='GET')return searchPropertiesResponse;
@@ -55,12 +85,18 @@ export function restResponseContract(path,method='GET') {
   if(/^\/v1\/search-connections\/[^/]+\/disconnect$/.test(pathname)&&method==='POST')return z.object({disconnected:z.literal(true),retainedRows:z.literal(true)});
   if(/^\/v1\/search-connections\/[^/]+$/.test(pathname)&&method==='DELETE')return z.object({forgotten:z.literal(true)});
   if(method!=='GET')return objectResponse;
+  if(/^\/v1\/watches\/[^/]+\/chronology$/.test(pathname))return chronologyResponse;
+  if(/^\/v1\/projects\/[^/]+\/monitoring-assurance$/.test(pathname))return assuranceResponse;
   if(/^\/v1\/(?:watches|targets)\/[^/]+\/history$/.test(pathname))return historyResponse;
   if(/^\/v1\/watches\/[^/]+$/.test(pathname))return watchResponse;
   if(/^\/v1\/targets\/[^/]+$/.test(pathname))return targetResponse;
-  if(['/v1/watches','/v1/targets','/v1/projects','/v1/exports/watches'].includes(pathname))return pageResponse;
+  if(['/v1/watches','/v1/exports/watches'].includes(pathname))return watchPageResponse;
+  if(['/v1/targets','/v1/projects'].includes(pathname))return pageResponse;
   if(pathname==='/v1/usage')return usageResponse;
   if(pathname==='/v1/reports/link-changes')return linkChangeReportResponse;
+  if(pathname==='/v1/reports/history')return profileHistoryOutput;
+  if(pathname==='/v1/reports/history/records')return profileHistoryRecordsOutput;
+  if(pathname==='/v1/reports/summary')return linkSummaryResponse;
   if(['/v1/events','/v1/target-events'].includes(pathname))return eventFeedResponse;
   if(/^\/v1\/(?:jobs|target-jobs)\/[^/]+$/.test(pathname))return jobResponse;
   return objectResponse;

package/shared/search-connection-contract.js

@@ -1,4 +1,5 @@
 import {z} from 'zod';
+import {browsePageOutput} from './table-page-contract.js';
 const text=z.string(),nullable=text.nullable();
 export const searchConnection=z.looseObject({
  id:text,project_id:text,provider:z.enum(['google','bing']),status:text,property:nullable,
@@ -11,7 +12,7 @@ export const searchProviderRow=z.discriminatedUnion('kind',[
  z.looseObject({...rowMeta,kind:z.literal('search_performance'),page:text,query:text,clicks:z.number().nonnegative(),impressions:z.number().nonnegative(),ctr:z.number().nonnegative(),position:z.number().nonnegative(),startDate:text,endDate:text}),
  z.looseObject({...rowMeta,kind:z.literal('backlinks'),source_url:text,target_url:text,anchor:nullable,supplier:z.literal('bing_webmaster_tools'),verification_status:z.literal('unverified')}),
 ]);
-export const searchRowsResponse=z.looseObject({connection:searchConnection,rows:z.array(searchProviderRow),nextCursor:nullable});
+export const searchRowsResponse=z.looseObject({...browsePageOutput,connection:searchConnection,rows:z.array(searchProviderRow),nextCursor:nullable});
 export const searchSyncResponse=z.looseObject({connection:searchConnection,rowCount:z.number().int().nonnegative()});
 export const searchPropertiesResponse=z.looseObject({properties:z.array(z.looseObject({property:text,permission:text}))});
 export const searchStartResponse=z.looseObject({authorizationUrl:z.url(),expiresAt:text});

package/shared/table-page-contract.js

@@ -0,0 +1,13 @@
+import {z} from 'zod';
+const filter=z.strictObject({column:z.string().min(1).max(80),operator:z.enum(['contains','is','is_not','empty']),value:z.string().max(500)});
+export const browsePageInput={
+ browse:z.boolean().optional().describe('Server-sorted authorized saved rows; omit for legacy paging.'),
+ sort:z.string().min(1).max(80).optional().describe('Allowlisted saved-field identifier.'),
+ order:z.enum(['asc','desc']).optional().describe('Sort direction; stable ID ties, nulls last.'),
+ q:z.string().max(500).optional().describe('Literal search of supported saved fields.'),
+ table_filters:z.union([z.string().max(8192),z.array(filter).max(12)]).optional().describe('Up to 12 allowlisted column filters before paging.'),
+};
+export const browseCursor=z.string().min(1).max(16384);
+const count=z.number().int().nonnegative().nullable();
+export const browsePageOutput={total:count.optional(),has_more:z.boolean().optional(),next_cursor:browseCursor.nullable().optional(),
+ page:z.strictObject({limit:z.number().int().positive(),sort:z.string(),order:z.enum(['asc','desc']),total:count,query_scope:z.literal('server_dataset'),nulls:z.literal('last')}).optional()};

package/skills/agentlinkops-assets/SKILL-DEPS.json

@@ -0,0 +1,290 @@
+{
+  "schemaVersion": 1,
+  "skill": "agentlinkops-assets",
+  "pack": "product",
+  "contractSha256": "e3d29a169dd1ecae2db26b22ab666419c4057e84831653df655f04ae61725e93",
+  "sourceManifest": [
+    {
+      "path": "references/cli.md",
+      "sha256": "7b665f9d9b60cdab1f0238b71500f8389e0a6df4ea9777db69af6627a000a766"
+    },
+    {
+      "path": "references/disavow.md",
+      "sha256": "f8a2ad2c779e15547c6cf6a199b1d4af18ad2ef2c0aa8f27094c00f366c55aaa"
+    },
+    {
+      "path": "references/reports.md",
+      "sha256": "361ea12f145daf15c30d35cfaec3f41bfa677fee9c5eabf7dc10b6004cbe617e"
+    },
+    {
+      "path": "scripts/agentlinkops.py",
+      "sha256": "91d541768f95e17c059396624c153ca86395bccfc565a8bf3470e2e006404e28"
+    },
+    {
+      "path": "scripts/disavow.py",
+      "sha256": "cae36ad7d9e4aef27510975b4c15a66e5649250f6e76df7ca2bfb025a696432e"
+    },
+    {
+      "path": "scripts/migrations/001_crm.sql",
+      "sha256": "049fbd38b05c5b8dbab00b6ebee5342b8ed5cf48f65fe6cc1bbf41330ceedf54"
+    },
+    {
+      "path": "scripts/migrations/002_cloud_events.sql",
+      "sha256": "9040c607408ffd9a168bb3c30431846ddbc7a3429b2a30ba3ecafd4048ccc0c3"
+    },
+    {
+      "path": "scripts/migrations/003_disavow.sql",
+      "sha256": "ff47da734afaff5ab364dc0ae53c3db58254d0a30ca5250de8172a67f8ec2772"
+    },
+    {
+      "path": "scripts/migrations/004_placement_costs.sql",
+      "sha256": "e25732a3abd95d54320984068d9a4242ee2d0b89f6c70330a24f63bd0a3671a2"
+    },
+    {
+      "path": "scripts/report.py",
+      "sha256": "c7088c3314d0453d62e8a70f0c80f535b219b2ea127ca7d1c0731b216a9cb602"
+    },
+    {
+      "path": "skills/agentlinkops-assets/SKILL.md",
+      "sha256": "c7a16a272103c062c1a846f4a5af23a89b5c06dacd4712bbfa3b5d68c912aed0"
+    },
+    {
+      "path": "skills/agentlinkops-assets/agents/openai.yaml",
+      "sha256": "ee49f3058b6fb130d8865c4811231579d65c2e58ac13f30cd010c317c1702504"
+    },
+    {
+      "path": "templates/campaigns.v1.json",
+      "sha256": "768e1610d64b82a4e5872c301eb2a537705821b2f01e9f2265c8056f7da4a496"
+    }
+  ],
+  "members": [
+    {
+      "path": "SKILL.md",
+      "sha256": "25dba1dbed4e524408dd41794eb7fb7c56c7334e3118b6b108d363534365a0d9"
+    },
+    {
+      "path": "agents/openai.yaml",
+      "sha256": "ee49f3058b6fb130d8865c4811231579d65c2e58ac13f30cd010c317c1702504"
+    },
+    {
+      "path": "references/portable/references/cli.md",
+      "sha256": "55ad759a920ed5bb683b0354739b7a929a0d733e987c6164977ea466ff606955"
+    },
+    {
+      "path": "references/portable/references/disavow.md",
+      "sha256": "47b4b335f7695209ad0758fc19f3b23b38792032a6850277e563a9b7d80eabf1"
+    },
+    {
+      "path": "references/portable/references/reports.md",
+      "sha256": "4fc4791d03c7497f0193fb3d6b4114095aad4d551bb063c8c9e9c485f0c8ca56"
+    },
+    {
+      "path": "references/portable/scripts/agentlinkops.py",
+      "sha256": "91d541768f95e17c059396624c153ca86395bccfc565a8bf3470e2e006404e28"
+    },
+    {
+      "path": "references/portable/scripts/disavow.py",
+      "sha256": "cae36ad7d9e4aef27510975b4c15a66e5649250f6e76df7ca2bfb025a696432e"
+    },
+    {
+      "path": "references/portable/scripts/migrations/001_crm.sql",
+      "sha256": "049fbd38b05c5b8dbab00b6ebee5342b8ed5cf48f65fe6cc1bbf41330ceedf54"
+    },
+    {
+      "path": "references/portable/scripts/migrations/002_cloud_events.sql",
+      "sha256": "9040c607408ffd9a168bb3c30431846ddbc7a3429b2a30ba3ecafd4048ccc0c3"
+    },
+    {
+      "path": "references/portable/scripts/migrations/003_disavow.sql",
+      "sha256": "ff47da734afaff5ab364dc0ae53c3db58254d0a30ca5250de8172a67f8ec2772"
+    },
+    {
+      "path": "references/portable/scripts/migrations/004_placement_costs.sql",
+      "sha256": "e25732a3abd95d54320984068d9a4242ee2d0b89f6c70330a24f63bd0a3671a2"
+    },
+    {
+      "path": "references/portable/scripts/report.py",
+      "sha256": "c7088c3314d0453d62e8a70f0c80f535b219b2ea127ca7d1c0731b216a9cb602"
+    },
+    {
+      "path": "references/portable/templates/campaigns.v1.json",
+      "sha256": "768e1610d64b82a4e5872c301eb2a537705821b2f01e9f2265c8056f7da4a496"
+    }
+  ],
+  "edges": [
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/references/disavow.md",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/references/reports.md",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/cli.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/disavow.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/disavow.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/disavow.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/disavow.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/disavow.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/reports.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/references/reports.md",
+      "target": "references/portable/scripts/agentlinkops.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/scripts/agentlinkops.py",
+      "target": "references/portable/scripts/disavow.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/scripts/agentlinkops.py",
+      "target": "references/portable/scripts/migrations/001_crm.sql",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/scripts/agentlinkops.py",
+      "target": "references/portable/scripts/report.py",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "references/portable/scripts/agentlinkops.py",
+      "target": "references/portable/templates/campaigns.v1.json",
+      "kind": "required-bundled"
+    },
+    {
+      "from": "SKILL.md",
+      "target": "../../references/recipes/internal-link-improvement.md",
+      "kind": "optional-selected",
+      "selection": "agentlinkops agent setup --recipe internal-link-improvement"
+    },
+    {
+      "from": "SKILL.md",
+      "target": "../../references/recipes/sourced-linkable-asset.md",
+      "kind": "optional-selected",
+      "selection": "agentlinkops agent setup --recipe sourced-linkable-asset"
+    },
+    {
+      "from": "SKILL.md",
+      "target": "references/portable/references/cli.md",
+      "kind": "required-bundled"
+    }
+  ],
+  "externalRuntime": [
+    {
+      "kind": "external-runtime",
+      "id": "agentlinkops-cli",
+      "commands": [
+        "agentlinkops",
+        "linktrail",
+        "node cli/agentlinkops.mjs"
+      ],
+      "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+    },
+    {
+      "kind": "external-runtime",
+      "id": "python-standard-library",
+      "minimumVersion": "3.10",
+      "imports": [
+        "argparse",
+        "contextlib",
+        "csv",
+        "datetime",
+        "decimal",
+        "errno",
+        "fcntl",
+        "hashlib",
+        "html",
+        "importlib",
+        "io",
+        "ipaddress",
+        "json",
+        "os",
+        "pathlib",
+        "re",
+        "sqlite3",
+        "stat",
+        "sys",
+        "tempfile",
+        "time",
+        "urllib"
+      ]
+    },
+    {
+      "kind": "external-runtime",
+      "id": "agentlinkops-hosted-mcp",
+      "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+    }
+  ],
+  "privateExcluded": [
+    "private Fleet/account files",
+    "customer records and credentials",
+    "unselected or uncleared publisher material"
+  ],
+  "coverage": "Assembler records source hashes; independent archive verification recomputes required members, supported links/imports and declared resources. Optional selections and external runtimes remain separate."
+}

package/skills/agentlinkops-assets/SKILL.md

@@ -10,6 +10,8 @@ Preserve the project's rendering and routing conventions. Inspect nearby pages b
 
 Write plainly and specifically. Remove repetition and generic filler without deleting necessary evidence. Add internal links only where the destination answers the reader's next relevant question; inspect the actual routes before linking. Check for an existing competing page before creating a new URL.
 
-Use the site's existing validation commands appropriate to the change. Record the final target URL, reader benefit and evidence in the customer's chosen files, CRM or other record system. The bundled local CRM is optional; use [its contract](../../references/cli.md) only when the customer chooses that store. A completed local edit does not establish that the page is deployed or that a publisher accepted it.
+Use the site's existing validation commands appropriate to the change. Record the final target URL, reader benefit and evidence in the customer's chosen files, CRM or other record system. The bundled local CRM is optional; use [its contract](references/portable/references/cli.md) only when the customer chooses that store. A completed local edit does not establish that the page is deployed or that a publisher accepted it.
 
 Recipes are optional. Choose `agentlinkops agent setup --recipe sourced-linkable-asset` before reading `../../references/recipes/sourced-linkable-asset.md` for draft review receipts and publication state. Select `--recipe site-context-brief` separately before reading that recipe if the audience or evidence needs clarification. Your own brief and editorial process can serve the same task.
+
+For an optional internal-link plan, select `agentlinkops agent setup --recipe internal-link-improvement` before reading `../../references/recipes/internal-link-improvement.md`. It keeps source evidence, semantic choices, site edits, publication claims and independent verification separate. Supplied pages remain sufficient for a useful plan without hosted access.

package/skills/agentlinkops-assets/agents/openai.yaml

@@ -1,5 +1,5 @@
 interface:
   display_name: AgentLinkOps Assets
-  short_description: Improve a code-built site's resource, guide or research page for a specific backlink campaign, with sourced claims and u
+  short_description: "Improve sourced site pages for a specific backlink campaign"
 policy:
   allow_implicit_invocation: true