[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_549":550,"_551":552},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":26,"_124":125,"_126":24,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":24,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":26},"version",44,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_23":26},"previous","deleted",true,"deletedHere",false,"path","src/mcp/skills/aero-references-reporting.0.ts","latestPath","fileId","93f1db76-a63e-11f1-8d00-1607ee4eb77e","name","aero-references-reporting.0.ts","fileType","script","content","// Generated by scripts/sync-val-town-skills.mjs. Do not edit.\n// Source of truth: skills// at the repository root.\nexport const part = \"---\\nname: reporting\\ndescription: Weekly and monthly report templates with metric tables, regression/gain sections, and recommended-actions structure. Read when asked to produce a client-facing summary.\\n---\\n\\n# Reporting Templates\\n\\n## Month-over-month AEO (do this right)\\n\\nFor ANY month-over-month AEO claim, use `cnry visibility-compare --from --to ` — never diff two `visibility-stats --month` calls by hand. It returns the statistically honest comparison. **Share of voice is less exposed to an engine's broad naming propensity than an absolute rate**, and is computed over non-brand queries only (see the branded caveat below), but it does **not** bypass model continuity. The comparison is restricted to the query/provider PAIRS present in BOTH months, then to providers with one known, identical configured model id in both months. Every figure carries a Wilson interval and a `verdict`:\\n\\n- **`within-noise`** — the periods' intervals overlap. **No confirmed change; never report it as a rise or a decline.**\\n- **`moved`** — disjoint intervals; a real directional move (the point sign is the direction).\\n- **`model-discontinuous` / `model-unknown`** — the engine's configured model changed, was mixed within a month, or is unrecorded (legacy rows). **No directional call is made for that comparison; never attribute the swing to the site.** Read `continuity` (its `status` plus the per-provider evidence) for what was excluded and why — `continuity` is the enforcement decision, `modelChanges` is advisory context only.\\n\\nA silent upstream version bump under an unchanged configured id is undetectable; the tool does not pretend otherwise. Honor `lowRunCount` (a month under 5 sweeps → intervals too wide to resolve a move; recommend raising the sweep schedule). Report the point with its interval, not a bare number.\\n\\n## Branded and non-brand questions are different instruments\\n\\nNever pool them into one headline. A branded question (\\\" reviews\\\") measures demand the brand already created: the answer names the brand because the question did, so a near-100% mention rate is the expected floor, not an achievement. A non-brand question (\\\"best for \\\") measures demand to win, and it is the number that says whether the work is landing. A pooled figure mostly measures how famous the brand already is and hides whether anything moved.\\n\\n**This matters most for share of voice, and the split is now enforced.** `visibility-stats --share-of-voice`, `visibility-compare`, the project overview's Mention Share card and its breakdown chart, and the client report's mention landscape are all scoped to NON-BRAND queries by default. Every one of them echoes the class it served (`queryClass` / `scope`), and branded is returned beside the figure rather than inside it. Pass `--query-class branded` when you want brand recall.\\n\\nWhy it is enforced rather than advised: on a real basket (13 queries × 4 engines, 5 branded), the subject was named in 20 of 20 branded answers and 1 of 32 category answers. Pooled, the chart put them FIRST at ~42%. Non-brand, they were LAST at ~3%, behind all seven tracked competitors. Same run, opposite conclusion, and the pooled version is the one a client would have read as category leadership.\\n\\nA figure labelled `pooled` means the project has no usable brand alias, so no split was possible. That is a configuration gap to fix (set a display name or aliases), not a number to quote as competitive.\\n\\nClassification does not use a new heuristic: the project's own identity (display name, aliases, domain labels) is run against the QUERY text with the same exact-identity matcher that decides whether an ANSWER mentions the brand — `compileQueryClassifier` over `packages/contracts/src/brand-matching.ts`, the same enum advanced measurement publishes. Complete-adjacent-word matching means presentation variants fold and near-misses never match, so a project whose identity is two words is not matched by a bare one-word term that belongs to someone else.\\n\\n## The measured question set is versioned\\n\\nRuns are stamped with a query basket revision, and the analytics payload carries `referenceBasketRevision` plus a `basketChanges` list of real add/remove events with dates. Membership is compared by normalized query text, so removing and re-adding the same question rejoins its own history instead of reading as a brand new query.\\n\\nTwo consequences for any report:\\n\\n- **Check `basketChanges` before presenting a month-over-month delta.** If the set moved inside the window, the comparison covers only the questions present in both periods. State that in one plain sentence rather than showing a clean delta.\\n- **A question added mid-window is no longer silently dropped.** Analytics used to hold out any query created after a bucket started, which quietly removed real mentions from both numerator and denominator and could read as 0% on an engine that was in fact naming the brand. Reports built against older engines may show that artifact.\\n\\n## A partial run is not a low reading\\n\\nA sweep crippled by a provider outage captures fewer questions and looks identical to a collapse in visibility. Before narrating any drop, check whether the latest run is `partial` and what its capture count was against the project's basket size. Report a capture failure as a capture failure.\\n\\n## One-Command HTML Report\\n\\nWhen a client asks for a \\\"current state\\\" or \\\"AEO report\\\" without a specific custom narrative, prefer the bundled report instead of hand-rolling sections:\\n\\n```bash\\ncnry report # writes canonry-report--YYYY-MM-DD.html in cwd\\ncnry report --output dist/aeo.html # custom path\\ncnry report --format json # raw payload, useful for narrating in chat\\n```\\n\\nThe HTML is self-contained (inline CSS + SVG charts, no network dependencies) and leads visually with mention coverage (the primary gauge), then covers: executive summary, per-query × per-provider matrix (mention + citation), competitor landscape, AI citation sources, GSC + GA4 performance, social and AI referrals, indexing health, trend, prioritized insights, and recommended next steps. Same payload is available via `GET /api/v1/projects//report` and the `canonry_report` MCP tool — use `--format json` when you want to summarize specific numbers in a thread instead of attaching the file.\\n\\nBehaviors worth knowing before narrating numbers from the report:\\n- **Mention is the primary metric; citation is secondary.** Narrate the mention figures first. `executiveSummary.mentionRate` is **per-query** — `mentionedQueryCount / totalQueryCount`, where a query counts as mentioned if any provider's answer text named the brand in the run. The report leads visually with mention coverage, but the machine field backing that headline is not confirmed in the CLI docs — [confirm field name against `cnry report --format json` / `ProjectReportDto`] before quoting it as the headline; `executiveSummary.mentionRate` / `mentionedQueryCount` are the confirmed per-query mention fields.\\n- `executiveSummary.citationRate` is the **secondary**, per-query citation signal — `citedQueryCount / totalQueryCount`, where a query counts as cited if any provider in the run cited it. The denominator is total tracked queries (not (query × provider) pairs), so the rate stays comparable when provider count varies between runs. Use `citedQueryCount` / `totalQueryCount` directly when narrating ratios. Mention and citation are independent — never compute one from the other.\\n- The same per-query definition powers every `citationsTrend[].citationRate` so trend deltas reflect real movement, not provider-mix variance.\\n- `citationsTrend` excludes partial runs. A project with only one completed run shows `trend: \\\"unknown\\\"` — never claim a comparison that isn't there.\\n- Project ownership and competitor tagging use subdomain-aware matching: `blog.example.com` counts as the project when `example.com` is the canonical domain or in `ownedDomains`; `blog.rival.com` is tagged `isCompetitor: true` when `rival.com` is tracked.\\n- AI referral totals dedupe overlapping GA4 attribution dimensions (`session` / `first_user` / `manual_utm`).\\n\\nThe hand-rolled templates below are still the right call when the user wants a focused weekly/monthly digest with custom regression and gain narratives that the bundled report doesn't surface.\\n\\n## Weekly Report\\n\\n```\\n# Weekly AEO Report: ()\\n\\n## Summary\\n- Mention rate: % (Δ<+/-Y>% from last week) ← primary KPI\\n- Mention share (non-brand): % (Δ<+/-Y>% from last week) ← share-of-voice vs competitors; NEVER pooled with branded\\n- Cited rate: % (Δ<+/-Y>% from last week) ← secondary signal\\n- Regressions: new, resolved (lead with lost mentions; note lost citations second)\\n- Gains: new mentions / new citations\\n- Providers monitored: \\n\\n## Key Changes\\n- \\n- \\n- \\n\\n## Regressions\\n| Query | Provider | Status | Suspected Cause |\\n|-------|----------|--------|-----------------|\\n| | | New/Investigating/Resolved | |\\n\\n## Gains\\n| Query | Provider | Position | Page |\\n|-------|----------|----------|------|\\n| | | | |\\n\\n## Competitor Watch\\n- : \\n\\n## Recommended Actions\\n1. \\n2. \\n3. \\n```\\n\\n## Monthly Report\\n\\n```\\n# Monthly AEO Report: ()\\n\\n## Executive Summary\\n<2-3 sentence overview of the month>\\n\\n## Metrics\\n| Metric | Start of Month | End of Month | Change |\\n|--------|---------------|--------------|--------|\\n| Mention rate (primary) | % | % | <Δ>% |\\n| Mention share (primary) | % | % | <Δ>% |\\n| Cited rate (secondary) | % | % | <Δ>% |\\n| Queries monitored | | | <Δ> |\\n| Active regressions | | | <Δ> |\\n\\n## Provider Breakdown\\n| Provider | Mention Rate | Mention Trend | Cited Rate | Cited Trend |\\n|----------|--------------|---------------|-----------|-------------|\\n| | % | ↑/↓/→ | % | ↑/↓/→ |\\n\\n## Fixes Deployed\\n| Date | Fix | Status | Impact |\\n|------|-----|--------|--------|\\n| | | Monitoring/Confirmed | |\\n\\n## Next Month Priorities\\n1. \\n2. \\n3. \\n```\\n\"\n","createdAt",["D",1788292312527],"branchVersion","branchId","a4524491-dcb3-470a-a361-437a88df6a63","id","b1194860-7c77-41d7-b0b7-f3529a80e15b","AI-Visibility-Check",["D",1788292195151],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Does AI mention your brand and cite your site? Free check.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f4d36c97-6af9-485c-0fa5-13e825466c01/square512?exp=1789595999&sig=3cddb371616d5028897c91f17f3a690884f11de4d1c36fb284c4c58d03ed7d0a","891d245e-ec71-404d-a5ca-223733ee2844","pinnedFileId","92ee44ee-a63e-11f1-8fd4-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0460b-6625-75ce-9e7f-9a6b062b0798","tursoName","b11948607c7741d7b0b7f3529a80e15b","tursoHostname","b11948607c7741d7b0b7f3529a80e15b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789514495229],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":26},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",333,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","canonry","handle","displayName","Canonry","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/5ae39d80-0d23-48e5-89d8-6bd2a7096401/square512?exp=1789595999&sig=7817dfdf1c0a104e87d0fc7eab44aa745242b472c75abccdbafd6e3bd4420170","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":544,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":24,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":545,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":546,"_84":547,"_86":548,"_88":26},"tree",[201,239,240,241,242,243,244],"files",[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244],"counts",{"_190":63,"_191":186,"_192":63,"_193":194,"_195":196},"contents",[131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":183,"_32":184,"_30":185,"_140":-5,"_41":42,"_40":186,"_142":24,"_38":187,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_27":189},{"_43":176,"_32":177,"_30":178,"_140":-5,"_41":42,"_40":179,"_142":26,"_38":180,"_13":63,"_34":20,"_36":181,"_23":26,"_146":-5,"_27":182},{"_43":169,"_32":170,"_30":171,"_140":-5,"_41":42,"_40":172,"_142":26,"_38":173,"_13":63,"_34":20,"_36":174,"_23":26,"_146":-5,"_27":175},{"_43":162,"_32":163,"_30":164,"_140":-5,"_41":42,"_40":165,"_142":24,"_38":166,"_13":63,"_34":20,"_36":167,"_23":26,"_146":-5,"_27":168},{"_43":155,"_32":156,"_30":157,"_140":-5,"_41":42,"_40":158,"_142":26,"_38":159,"_13":63,"_34":20,"_36":160,"_23":26,"_146":-5,"_27":161},{"_43":148,"_32":149,"_30":150,"_140":-5,"_41":42,"_40":151,"_142":26,"_38":152,"_13":63,"_34":20,"_36":153,"_23":26,"_146":-5,"_27":154},{"_43":138,"_32":139,"_30":58,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":143,"_13":63,"_34":144,"_36":145,"_23":26,"_146":-5,"_27":147},"5188999e-ad25-4c5c-8de9-2938d6984856","main.http.tsx","parentId",15,"latest",["D",1788292310790],"http","import { sqlite } from '@valtown/sqlite'\nimport { createValTownApp } from './src/app/app.ts'\nimport { loadValTownConfig } from './src/config/index.ts'\nimport { createPublicCheckRunner, createRequestBoundDispatcher } from './src/jobs/public-check.ts'\nimport { createSiteHealthRunner } from './src/site-health/runner.ts'\nimport { ValSqliteCheckStore } from './src/storage/val-sqlite.ts'\nimport {\n canonryDemoClientScript,\n canonryDemoStyles,\n createPublicCheckForm,\n demoCanonryViewModel,\n renderCanonryDemo,\n toCanonryDemoViewModel,\n} from './src/ui/index.ts'\nimport { createGeminiValVisibilityProbe } from './src/visibility/gemini-probe.ts'\n\nconst config = loadValTownConfig()\nconst store = new ValSqliteCheckStore(sqlite)\nawait store.initialize()\n\nconst visibilityProbe = config.geminiApiKey\n ? createGeminiValVisibilityProbe({ apiKey: config.geminiApiKey, model: config.geminiModel ?? undefined })\n : null\nconst runner = createPublicCheckRunner({\n store,\n visibilityProbe,\n siteHealthRunner: createSiteHealthRunner(),\n ttlMs: config.checkTtlMs,\n})\n\nconst form = createPublicCheckForm(config)\n\nconst app = createValTownApp({\n store,\n config,\n dispatcher: createRequestBoundDispatcher(runner),\n renderPage: (record) =>\n record\n ? renderCanonryDemo(toCanonryDemoViewModel(record, { form, title: 'Canonry sample' }))\n : renderCanonryDemo({ ...demoCanonryViewModel, form }),\n assets: { styles: canonryDemoStyles, script: canonryDemoClientScript },\n})\n\nexport default app.fetch\n","label",[139],"fbb68b0c-0ce2-4e8d-9ee4-3fb5259c1a6d","deno.json","935238aa-a63e-11f1-9f99-1607ee4eb77e",26,["D",1788292310786],"{\n \"compilerOptions\": {\n \"strict\": true,\n \"noUncheckedIndexedAccess\": true\n },\n \"imports\": {\n \"hono\": \"npm:hono@4.12.25\",\n \"@canonry/aeo-audit\": \"npm:@canonry/aeo-audit@7.1.0\",\n \"@google/genai\": \"npm:@google/genai@1.46.0\",\n \"@valtown/sqlite\": \"https://esm.town/v/std/sqlite/main.ts\"\n },\n \"tasks\": {\n \"check\": \"deno check --allow-import --frozen main.http.tsx\",\n \"test\": \"deno test --allow-env --allow-net --allow-import --frozen test\",\n \"lint\": \"deno lint --allow-import main.http.tsx src test\",\n \"dev\": \"deno run --allow-net --allow-env --allow-import test/dev-server.ts\"\n },\n \"fmt\": {\n \"lineWidth\": 120,\n \"singleQuote\": true,\n \"semiColons\": false\n }\n}\n",[149],"d96e6cf8-bc82-4972-bc5b-b415d772d5e5","README.md","92e8b0ce-a63e-11f1-91a7-1607ee4eb77e",14,["D",1788292310785],"# AEO Check — a Canonry sample on Val Town\n\nThis directory contains **AEO Check** (`canonry/aeo-check`), a free, bounded public sample of Canonry. Git is the\nsource for every file in the Val.\n\nIt is deliberately not called Canonry: one check is 3 generated non-brand queries against Gemini plus a 5-page audit,\nwhile Canonry tracks Gemini, ChatGPT, Claude, and Perplexity on a schedule with no such limits. Every surface — header\nbyline, footer, MCP `initialize` instructions, the `self_host` tool, and the bundled skills — points back at the\nopen-source project at [github.com/Canonry/canonry](https://github.com/Canonry/canonry).\n\nThe sample uses one Canonry interface for two reports:\n\n- **AI Visibility** shows a sample trend, fresh Gemini results, and source evidence for each query.\n- **Site Health** shows a bounded Technical AEO score, factors, fixes, and page evidence.\n\nThe same data is also served to agents over MCP at `POST /mcp`, together with the bundled `canonry` and `aero` skills.\n\nThe four-engine trend contains labeled sample data. A fresh domain check contains one real Gemini snapshot and no\ninvented history.\n\n## Architecture\n\n```mermaid\nflowchart LR\n B[Browser] --> H[Val Town Deno host]\n H --> V[Val-local visibility core]\n H --> A[@canonry/aeo-audit]\n V --> G[Gemini: 1 plan + 3 queries]\n A --> C[5-page site sample]\n G --> S[Sanitized check result]\n C --> S\n S --> Q[Val-scoped SQLite]\n Q --> B\n Q --> M[MCP endpoint /mcp]\n K[canonry + aero skills] --> M\n M --> N[Any MCP client]\n```\n\nThe Deno host owns HTTP routes, Turnstile, quotas, cache records, job leases, and HTML. Technical AEO comes from the\npinned audit engine. This Val owns the visibility contracts, bounded evidence runner, Gemini planner, and Gemini adapter.\nThe visibility core does not read environment, storage, or HTTP state.\n\n## Directory map\n\n```text\napps/val-town/\n├── main.http.tsx Val HTTP entry\n├── deno.json Production imports and Deno tasks\n├── deno.lock Deno dependency lock\n├── .vt/state.json Val and branch identity\n├── src/\n│ ├── app/ HTTP routes and response policy\n│ ├── config/ Environment configuration\n│ ├── jobs/ Request-bound check runner\n│ ├── mcp/ MCP transport, tools, and generated skill resources\n│ ├── security/ URL and Turnstile checks\n│ ├── site-health/ Technical AEO adapter\n│ ├── storage/ SQLite and memory ports\n│ ├── ui/ Canonry HTML, CSS, and browser script\n│ └── visibility/ Local contracts, evidence runner, Gemini planner and adapter\n└── test/ Deno backend and UI tests\n```\n\n## Connect an agent\n\n`POST /mcp` speaks the Model Context Protocol over Streamable HTTP. Point any MCP client at the Val's `/mcp` URL; no\ncredential is required, because everything it serves is already public.\n\n```json\n{ \"mcpServers\": { \"aeo-check\": { \"url\": \"https:///mcp\" } } }\n```\n\nIt exposes six read tools — `get_check`, `get_ai_visibility`, `get_site_health`, `list_skills`, `read_skill`,\n`self_host` — plus `start_check`, and serves all 16 `canonry` and `aero` skill documents as MCP resources, entry points first. An agent\nreads the entry point for how to interpret coverage, then opens the reference the task calls for, exactly as it would\nin a local install.\n\nReads address a check by `checkId` or by `domain` and never spend: a domain resolves to the most recent cached check,\nor reports a miss. `start_check` runs a fresh one and blocks until it finishes, up to about 45 seconds, because\nexecution is request-bound and there is no background queue.\n\n`start_check` skips Turnstile, which an agent cannot solve, and spends from its own daily bucket\n(`CANONRY_MCP_PER_CLIENT_DAILY_LIMIT`, default 2) keyed on the caller's edge IP. It shares the same global daily cap\nand the same single execution lease as the browser, so MCP widens who may spend the budget, never how large it is. A\ndomain checked within the cache TTL returns immediately at no cost. Set `CANONRY_MCP_START_CHECKS=0` to remove the\ntool entirely.\n\nBoth protocol revisions work: the sessionless `2026-07-28` transport and the older `initialize` handshake that current\nclients still use.\n\n`src/mcp/skills/` is generated from `skills/` at the repository root — Val Town caps a file at 80,000 characters and\n`canonry-cli.md` is over it, so the mirror chunks each document. Run `node scripts/sync-val-town-skills.mjs` after\nediting a skill and commit the result; `--check` fails on drift.\n\n## Fixed public limits\n\n- One grounded Gemini planning call creates three non-brand queries.\n- Three Gemini checks run with a concurrency limit of two.\n- The site sample checks at most five pages and 2,500 edges.\n- The full request stops after 45 seconds.\n- Turnstile, daily quotas, one active job, and a 24-hour cache bound public use.\n\nThe host never sets `allowPrivateHost`. Failed provider checks stay `Not measured` and do not reduce the reported rates.\n\n## Run it locally\n\n```sh\ncd apps/val-town\ndeno task dev # http://localhost:8787 — stub runners, no network\nGEMINI_API_KEY=… deno task dev # real Gemini planner, probes, and crawl\n```\n\nIn-memory storage and no Turnstile, so the UI and `/mcp` both work without credentials. Smoke-test the endpoint with:\n\n```sh\ncurl -s localhost:8787/mcp -H 'content-type: application/json' \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\"}'\n```\n\nOr drive it from a real client: `npx @modelcontextprotocol/inspector`, then connect to\n`http://localhost:8787/mcp` over Streamable HTTP.\n\n## Local checks\n\n```sh\nnode scripts/sync-val-town-skills.mjs --check # from the repository root\n\ncd apps/val-town\nnpx --yes deno@2.7.5 check --allow-import --frozen --config deno.json main.http.tsx\nnpx --yes deno@2.7.5 lint --config deno.json main.http.tsx src test\nnpx --yes deno@2.7.5 test --allow-env --allow-net --allow-import --frozen --config deno.json test\n```\n\n## Production configuration\n\nSet these environment variables in Val Town:\n\n- `VAL_TOWN_ENV=production`\n- `GEMINI_API_KEY`\n- `CANONRY_QUOTA_SALT`\n- `TURNSTILE_SECRET_KEY`\n- `TURNSTILE_SITE_KEY`\n- `TURNSTILE_ALLOWED_HOSTNAMES`\n\nOptional: `CANONRY_MCP_START_CHECKS=0` disables MCP-started checks; `CANONRY_MCP_PER_CLIENT_DAILY_LIMIT` sets their\ndaily per-caller allowance (default 2).\n\nThe host disables public checks when the production quota salt or Turnstile configuration is absent.\n\n## Release order\n\n1. Regenerate `deno.lock` with `deno.json`, and the skill mirror with `node scripts/sync-val-town-skills.mjs`.\n2. Run the local checks.\n3. Run `vt push --dry-run` from this directory.\n4. Review the file plan.\n5. Run `vt push` only after approval.\n6. Request `/healthz` and make sure that it returns `{\"ok\":true}`.\n\n`vt push` makes the Val match this directory. It deletes remote-only files, so do not edit production in the Val Town\neditor.\n",[156],"655360bd-bc32-4a60-b9ab-c9156f924695","CLAUDE.md","930d2c42-a63e-11f1-8d00-1607ee4eb77e",18,["D",1788292310988],"@AGENTS.md\n",[163],"45bc70da-b408-45c0-826b-7bd5c2e0dc27","AGENTS.md","92f64d1a-a63e-11f1-8d00-1607ee4eb77e",16,["D",1788292310802],"# AEO Check (Val Town)\n\nThis directory is the exact source mirrored to the public `canonry/aeo-check` val. Git is authoritative; do not make\nproduction-only edits in Val Town because `vt push` removes remote-only files.\n\n## Naming\n\nThe Val is **AEO Check**, not Canonry. It runs 3 generated queries against one engine and audits 5 pages; Canonry\ntracks four engines on a schedule with no such limits. Calling this \"Canonry\" would tell a visitor — or an agent\nreading `serverInfo` — that they had the platform when they have a sample of it, so the product name, the val name,\nand the MCP `serverInfo.name` all say `aeo-check`.\n\nAttribution runs the other way, and deliberately: every surface points back at the open-source project. The header\nbyline, the footer (with the install command), the MCP `initialize` instructions, the `self_host` tool, and the\nbundled skills all name Canonry and link to it. Keep that; a sample that does not lead anywhere is just a toy.\n\n## Boundaries\n\n- Keep the host Deno-native and web-standard. Do not import the Node Canonry server, Fastify, `better-sqlite3`, or the\n Vite dashboard.\n- Import reusable engines through exact pins. Technical AEO uses `@canonry/aeo-audit`; AI Visibility is implemented\n locally under `src/visibility/` so this Val owns its Gemini planner, adapter, and evidence runner.\n- The browser never receives provider, Turnstile-secret, deployment, or signing credentials.\n- Anonymous work is bounded by human verification, atomic quotas, cache reuse, output clipping, and hard provider/crawl\n deadlines.\n- Never set `allowPrivateHost`. Keep Technical AEO labeled as a bounded page sample, not a whole-site score.\n- Mention and citation are independent signals. Summary denominators contain successful checks only; failures stay\n visible.\n- The visibility core (`contracts`, `runtime`, `brand`, `runner`) must not read environment, storage, or HTTP state.\n Only the Gemini adapter makes provider calls; the host owns credentials, quotas, and scheduling.\n- Demo history must be explicitly labeled sample data. A fresh check is a snapshot until real history exists.\n- Never present the Val as the full platform. Bounds stay stated on the surface that shows the number.\n- `src/mcp/skills/` is generated. Edit `skills//` at the repository root, then run\n `node scripts/sync-val-town-skills.mjs` and commit the result. Never hand-edit a generated module.\n\n## MCP endpoint\n\n`POST /mcp` serves Model Context Protocol over Streamable HTTP so an agent can read this Val's checks directly. It is\nadditive: every browser route is unchanged, and the endpoint shares the same `CheckStore`, so an agent sees exactly the\nchecks the UI shows.\n\n- **Reads never spend.** `get_check`, `get_ai_visibility`, and `get_site_health` resolve through `store.get` and\n `store.findReusable` only. They must never reach `admit` or `dispatch`; a test asserts an uncached domain lookup\n leaves the store untouched.\n- **`start_check` is the only tool that spends,** and it runs the host's full admission path. It skips Turnstile,\n which an agent cannot solve, and spends from its own `mcp:` quota subject with its own daily limit. It must keep\n sharing the global daily cap and the single execution lease: the global cap is what bounds the bill, so MCP may\n widen who spends the budget but never how large it is. Disable with `CANONRY_MCP_START_CHECKS=0`.\n- **It blocks.** Execution is request-bound (`AbortSignal.timeout(45_000)`); there is no background queue, so\n returning a check ID early would kill the work with the request.\n- **Anonymous, on purpose.** Everything reachable here is already public: `/api/checks/:id` serves any check without a\n credential, and the skills ship in a public npm package. A token would gate nothing and would make the endpoint\n useless as something an agent is simply pointed at.\n- **Two protocol eras.** Revision `2026-07-28` removed sessions and the GET stream; every shipping client still opens\n with `initialize`. Both work. Keep the strict mirrored-header checks keyed off the version the caller declared, or\n legacy clients break.\n- Responses are always `application/json`. Nothing here streams, so do not add an SSE encoder.\n- `self_host` is the conversion path and costs nothing. Keep it in the read set and keep its comparison honest.\n- Mention and citation stay independent in tool output, and a failed check stays `null` rather than becoming `false`.\n\n## UI\n\nMatch the Canonry dashboard's restrained evidence-first hierarchy: compact header, underline tabs,\ncharts/tables/details, visible focus, and native disclosure controls. Do not port the full React SPA or add a card grid.\n\n## Verification\n\nRun `deno task check`, `deno task lint`, and `deno task test` from this directory, and\n`node scripts/sync-val-town-skills.mjs --check` from the repository root. A deployment additionally requires a\n`vt push --dry-run` and a live health smoke test.\n",[170],"32515d7c-b260-427a-af1a-f218e7d2f15a",".vtignore","92ff2520-a63e-11f1-91a7-1607ee4eb77e",17,["D",1788292310911],".env\n.env.*\ncoverage/\ntest/\n",[177],"70fabb5a-32a8-428a-9a8c-08292618dd57","src","91c8aac8-a63e-11f1-b64b-1607ee4eb77e",1,["D",1788292308897],"directory",[184],"pulls","branches","forks","envVars",{"_197":199,"_200":63},"connections",{"_197":63,"_198":63},"count","unfilledCount",7,"emptyCount",{"_43":183,"_32":184,"_30":185,"_140":-5,"_41":42,"_40":186,"_142":24,"_38":541,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":542,"_27":543},{"_43":536,"_32":535,"_30":529,"_140":185,"_41":42,"_40":537,"_142":24,"_38":538,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":539,"_27":540},{"_43":526,"_32":527,"_30":528,"_140":529,"_41":42,"_40":530,"_142":26,"_38":531,"_13":63,"_34":35,"_36":532,"_23":26,"_146":-5,"_246":533,"_27":534},{"_43":521,"_32":520,"_30":514,"_140":185,"_41":42,"_40":522,"_142":26,"_38":523,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":524,"_27":525},{"_43":512,"_32":346,"_30":513,"_140":514,"_41":42,"_40":515,"_142":26,"_38":516,"_13":63,"_34":35,"_36":517,"_23":26,"_146":-5,"_246":518,"_27":519},{"_43":505,"_32":506,"_30":507,"_140":185,"_41":42,"_40":508,"_142":26,"_38":509,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":510,"_27":511},{"_43":498,"_32":499,"_30":500,"_140":185,"_41":42,"_40":501,"_142":24,"_38":502,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":503,"_27":504},{"_43":493,"_32":449,"_30":443,"_140":185,"_41":42,"_40":494,"_142":24,"_38":495,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":496,"_27":497},{"_43":488,"_32":475,"_30":469,"_140":443,"_41":42,"_40":489,"_142":26,"_38":490,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":491,"_27":492},{"_43":480,"_32":481,"_30":482,"_140":469,"_41":42,"_40":483,"_142":26,"_38":484,"_13":63,"_34":35,"_36":485,"_23":26,"_146":-5,"_246":486,"_27":487},{"_43":476,"_32":33,"_30":31,"_140":469,"_41":42,"_40":14,"_142":26,"_38":477,"_13":63,"_34":35,"_36":37,"_23":26,"_146":-5,"_246":478,"_27":479},{"_43":466,"_32":467,"_30":468,"_140":469,"_41":42,"_40":470,"_142":26,"_38":471,"_13":63,"_34":35,"_36":472,"_23":26,"_146":-5,"_246":473,"_27":474},{"_43":458,"_32":459,"_30":460,"_140":443,"_41":42,"_40":461,"_142":26,"_38":462,"_13":63,"_34":35,"_36":463,"_23":26,"_146":-5,"_246":464,"_27":465},{"_43":450,"_32":451,"_30":452,"_140":443,"_41":42,"_40":453,"_142":26,"_38":454,"_13":63,"_34":35,"_36":455,"_23":26,"_146":-5,"_246":456,"_27":457},{"_43":440,"_32":441,"_30":442,"_140":443,"_41":42,"_40":444,"_142":26,"_38":445,"_13":63,"_34":35,"_36":446,"_23":26,"_146":-5,"_246":447,"_27":448},{"_43":436,"_32":427,"_30":421,"_140":185,"_41":42,"_40":199,"_142":24,"_38":437,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":438,"_27":439},{"_43":428,"_32":429,"_30":430,"_140":421,"_41":42,"_40":431,"_142":26,"_38":432,"_13":63,"_34":35,"_36":433,"_23":26,"_146":-5,"_246":434,"_27":435},{"_43":419,"_32":320,"_30":420,"_140":421,"_41":42,"_40":422,"_142":26,"_38":423,"_13":63,"_34":35,"_36":424,"_23":26,"_146":-5,"_246":425,"_27":426},{"_43":414,"_32":405,"_30":399,"_140":185,"_41":42,"_40":415,"_142":26,"_38":416,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":417,"_27":418},{"_43":406,"_32":407,"_30":408,"_140":399,"_41":42,"_40":409,"_142":26,"_38":410,"_13":63,"_34":35,"_36":411,"_23":26,"_146":-5,"_246":412,"_27":413},{"_43":396,"_32":397,"_30":398,"_140":399,"_41":42,"_40":400,"_142":26,"_38":401,"_13":63,"_34":35,"_36":402,"_23":26,"_146":-5,"_246":403,"_27":404},{"_43":389,"_32":390,"_30":391,"_140":185,"_41":42,"_40":392,"_142":24,"_38":393,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":394,"_27":395},{"_43":382,"_32":383,"_30":384,"_140":185,"_41":42,"_40":385,"_142":26,"_38":386,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":387,"_27":388},{"_43":377,"_32":328,"_30":322,"_140":185,"_41":42,"_40":378,"_142":24,"_38":379,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":380,"_27":381},{"_43":369,"_32":370,"_30":371,"_140":322,"_41":42,"_40":372,"_142":26,"_38":373,"_13":63,"_34":35,"_36":374,"_23":26,"_146":-5,"_246":375,"_27":376},{"_43":361,"_32":362,"_30":363,"_140":322,"_41":42,"_40":364,"_142":26,"_38":365,"_13":63,"_34":35,"_36":366,"_23":26,"_146":-5,"_246":367,"_27":368},{"_43":353,"_32":354,"_30":355,"_140":322,"_41":42,"_40":356,"_142":26,"_38":357,"_13":63,"_34":35,"_36":358,"_23":26,"_146":-5,"_246":359,"_27":360},{"_43":345,"_32":346,"_30":347,"_140":322,"_41":42,"_40":348,"_142":26,"_38":349,"_13":63,"_34":35,"_36":350,"_23":26,"_146":-5,"_246":351,"_27":352},{"_43":337,"_32":338,"_30":339,"_140":322,"_41":42,"_40":340,"_142":26,"_38":341,"_13":63,"_34":35,"_36":342,"_23":26,"_146":-5,"_246":343,"_27":344},{"_43":329,"_32":330,"_30":331,"_140":322,"_41":42,"_40":332,"_142":26,"_38":333,"_13":63,"_34":35,"_36":334,"_23":26,"_146":-5,"_246":335,"_27":336},{"_43":319,"_32":320,"_30":321,"_140":322,"_41":42,"_40":323,"_142":26,"_38":324,"_13":63,"_34":35,"_36":325,"_23":26,"_146":-5,"_246":326,"_27":327},{"_43":314,"_32":273,"_30":267,"_140":185,"_41":42,"_40":315,"_142":26,"_38":316,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_246":317,"_27":318},{"_43":306,"_32":307,"_30":308,"_140":267,"_41":42,"_40":309,"_142":26,"_38":310,"_13":63,"_34":35,"_36":311,"_23":26,"_146":-5,"_246":312,"_27":313},{"_43":298,"_32":299,"_30":300,"_140":267,"_41":42,"_40":301,"_142":26,"_38":302,"_13":63,"_34":35,"_36":303,"_23":26,"_146":-5,"_246":304,"_27":305},{"_43":290,"_32":291,"_30":292,"_140":267,"_41":42,"_40":293,"_142":26,"_38":294,"_13":63,"_34":35,"_36":295,"_23":26,"_146":-5,"_246":296,"_27":297},{"_43":282,"_32":283,"_30":284,"_140":267,"_41":42,"_40":285,"_142":26,"_38":286,"_13":63,"_34":35,"_36":287,"_23":26,"_146":-5,"_246":288,"_27":289},{"_43":274,"_32":275,"_30":276,"_140":267,"_41":42,"_40":277,"_142":26,"_38":278,"_13":63,"_34":35,"_36":279,"_23":26,"_146":-5,"_246":280,"_27":281},{"_43":264,"_32":265,"_30":266,"_140":267,"_41":42,"_40":268,"_142":26,"_38":269,"_13":63,"_34":35,"_36":270,"_23":26,"_146":-5,"_246":271,"_27":272},{"_43":176,"_32":177,"_30":178,"_140":-5,"_41":42,"_40":179,"_142":26,"_38":261,"_13":63,"_34":20,"_36":181,"_23":26,"_146":-5,"_246":262,"_27":263},{"_43":169,"_32":170,"_30":171,"_140":-5,"_41":42,"_40":172,"_142":26,"_38":258,"_13":63,"_34":20,"_36":174,"_23":26,"_146":-5,"_246":259,"_27":260},{"_43":162,"_32":163,"_30":164,"_140":-5,"_41":42,"_40":165,"_142":24,"_38":255,"_13":63,"_34":20,"_36":167,"_23":26,"_146":-5,"_246":256,"_27":257},{"_43":155,"_32":156,"_30":157,"_140":-5,"_41":42,"_40":158,"_142":26,"_38":252,"_13":63,"_34":20,"_36":160,"_23":26,"_146":-5,"_246":253,"_27":254},{"_43":148,"_32":149,"_30":150,"_140":-5,"_41":42,"_40":151,"_142":26,"_38":249,"_13":63,"_34":20,"_36":153,"_23":26,"_146":-5,"_246":250,"_27":251},{"_43":138,"_32":139,"_30":58,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":245,"_13":63,"_34":144,"_36":145,"_23":26,"_146":-5,"_246":247,"_27":248},["D",1788292310790],"children",[],[139],["D",1788292310786],[],[149],["D",1788292310785],[],[156],["D",1788292310988],[],[163],["D",1788292310802],[],[170],["D",1788292310911],[],[177],"c839bdb8-988e-4523-919e-ece5a8822925","runtime.ts","9370d1ac-a63e-11f1-b150-1607ee4eb77e","92153f82-a63e-11f1-8621-1607ee4eb77e",30,["D",1788292311627],"import type { VisibilityProbeLimits } from './contracts.ts'\n\nconst HARD_LIMITS = {\n timeoutMs: { min: 1_000, max: 30_000 },\n maxConcurrency: { min: 1, max: 4 },\n maxQueries: { min: 1, max: 20 },\n maxProviders: { min: 1, max: 8 },\n maxAnswerChars: { min: 256, max: 20_000 },\n maxSources: { min: 1, max: 50 },\n maxSourceUrlChars: { min: 128, max: 4_096 },\n maxSourceTitleChars: { min: 32, max: 1_024 },\n maxSearchQueries: { min: 0, max: 25 },\n maxSearchQueryChars: { min: 32, max: 512 },\n} as const\n\nexport const MAX_QUERY_CHARS = 512\n/** Stable query IDs are returned verbatim, so reject oversize caller input. */\nexport const MAX_QUERY_ID_CHARS = 160\n/** Provider names are public report identities, not arbitrary display text. */\nexport const MAX_PROVIDER_ID_CHARS = 80\n/** Requested/served model identifiers are public report identities. */\nexport const MAX_MODEL_ID_CHARS = 256\nexport const MAX_BRAND_NAME_CHARS = 128\nexport const MAX_BRAND_NAMES = 20\nexport const MAX_DOMAIN_CHARS = 253\nexport const MAX_PROVIDER_ERROR_CHARS = 180\nexport const MAX_EXTRACTED_SOURCES = 100\n\nexport function resolveLimits(\n defaults: VisibilityProbeLimits,\n partial: Partial | undefined,\n): VisibilityProbeLimits {\n const candidate = { ...defaults, ...partial }\n return {\n timeoutMs: boundedInteger(candidate.timeoutMs, HARD_LIMITS.timeoutMs),\n maxConcurrency: boundedInteger(candidate.maxConcurrency, HARD_LIMITS.maxConcurrency),\n maxQueries: boundedInteger(candidate.maxQueries, HARD_LIMITS.maxQueries),\n maxProviders: boundedInteger(candidate.maxProviders, HARD_LIMITS.maxProviders),\n maxAnswerChars: boundedInteger(candidate.maxAnswerChars, HARD_LIMITS.maxAnswerChars),\n maxSources: boundedInteger(candidate.maxSources, HARD_LIMITS.maxSources),\n maxSourceUrlChars: boundedInteger(candidate.maxSourceUrlChars, HARD_LIMITS.maxSourceUrlChars),\n maxSourceTitleChars: boundedInteger(candidate.maxSourceTitleChars, HARD_LIMITS.maxSourceTitleChars),\n maxSearchQueries: boundedInteger(candidate.maxSearchQueries, HARD_LIMITS.maxSearchQueries),\n maxSearchQueryChars: boundedInteger(candidate.maxSearchQueryChars, HARD_LIMITS.maxSearchQueryChars),\n }\n}\n\nfunction boundedInteger(value: number, bounds: { min: number; max: number }): number {\n if (!Number.isFinite(value)) return bounds.min\n return Math.max(bounds.min, Math.min(bounds.max, Math.floor(value)))\n}\n\nexport function clipText(value: string, maxChars: number): { value: string; truncated: boolean } {\n if (value.length <= maxChars) return { value, truncated: false }\n return { value: value.slice(0, maxChars), truncated: true }\n}\n\nexport function cleanText(value: unknown): string {\n return typeof value === 'string' ? value.trim() : ''\n}\n\nexport function uniqueStable(values: readonly string[]): string[] {\n const seen = new Set()\n const unique: string[] = []\n for (const value of values) {\n if (seen.has(value)) continue\n seen.add(value)\n unique.push(value)\n }\n return unique\n}\n\nexport interface DeadlineSignal {\n signal: AbortSignal\n didTimeout(): boolean\n dispose(): void\n}\n\n/** Web-standard timeout composition that works in Node and Deno without globals. */\nexport function createDeadlineSignal(parent: AbortSignal | undefined, timeoutMs: number): DeadlineSignal {\n const controller = new AbortController()\n let timedOut = false\n const timeoutReason = new DOMException('Visibility provider request timed out.', 'TimeoutError')\n const abortFromParent = () => controller.abort(parent?.reason)\n if (parent?.aborted) abortFromParent()\n else parent?.addEventListener('abort', abortFromParent, { once: true })\n const timer = setTimeout(() => {\n timedOut = true\n controller.abort(timeoutReason)\n }, timeoutMs)\n return {\n signal: controller.signal,\n didTimeout: () => timedOut,\n dispose: () => {\n clearTimeout(timer)\n parent?.removeEventListener('abort', abortFromParent)\n },\n }\n}\n\nexport function isAbortError(error: unknown): boolean {\n if (error instanceof DOMException) return error.name === 'AbortError' || error.name === 'TimeoutError'\n if (!(error instanceof Error)) return false\n return error.name === 'AbortError' || error.name === 'TimeoutError' || /\\babort(?:ed|ing)?\\b/i.test(error.message)\n}\n\n/** Do not echo provider response bodies, URLs, or accidental credentials into report storage. */\nexport function safeProviderErrorMessage(error: unknown): string {\n const generic = 'The provider request failed.'\n if (!(error instanceof Error)) return generic\n const message = error.message.replace(/[\\r\\n\\t]+/g, ' ').trim()\n if (!message) return generic\n // Provider SDK messages commonly embed request IDs and error bodies. Keep a\n // small classified surface instead of a transport dump.\n if (/\\b429\\b/.test(message)) return 'The provider rate-limited this request.'\n if (/\\b(?:500|501|502|503|504)\\b/.test(message)) return 'The provider was temporarily unavailable.'\n if (/invalid api key|api[_ -]?key|unauthori[sz]ed|forbidden/i.test(message)) {\n return 'The provider credentials were rejected.'\n }\n if (/timeout|timed out/i.test(message)) return 'The provider request timed out.'\n return clipText(generic, MAX_PROVIDER_ERROR_CHARS).value\n}\n\nexport function nowIso(now: (() => Date) | undefined): string {\n return (now?.() ?? new Date()).toISOString()\n}\n\nexport function throwIfAborted(signal: AbortSignal): void {\n if (!signal.aborted) return\n throw signal.reason instanceof Error ? signal.reason : new DOMException('Aborted', 'AbortError')\n}\n\nexport function sleep(delayMs: number, signal: AbortSignal): Promise {\n return new Promise((resolve, reject) => {\n throwIfAborted(signal)\n const timer = setTimeout(done, delayMs)\n const onAbort = () => {\n clearTimeout(timer)\n signal.removeEventListener('abort', onAbort)\n reject(signal.reason instanceof Error ? signal.reason : new DOMException('Aborted', 'AbortError'))\n }\n function done(): void {\n signal.removeEventListener('abort', onAbort)\n resolve()\n }\n signal.addEventListener('abort', onAbort, { once: true })\n })\n}\n",[],[184,273,265],"visibility","abbdcbe9-fc5e-403a-94fd-785d60bfad8a","runner.ts","938767d2-a63e-11f1-a6d3-1607ee4eb77e",33,["D",1788292311828],"import {\n DEFAULT_VISIBILITY_PROBE_LIMITS,\n type RunVisibilityProbeInput,\n VISIBILITY_PROBE_SCHEMA_VERSION,\n type VisibilityProbeCheck,\n type VisibilityProbeFailure,\n type VisibilityProbeQuery,\n type VisibilityProbeReport,\n type VisibilityProbeReportStatus,\n type VisibilityProbeSourceEvidence,\n type VisibilityProbeSummary,\n type VisibilityProbeTarget,\n type VisibilityProviderAdapter,\n type VisibilityProviderResponse,\n} from './contracts.ts'\nimport {\n type CitationEvidence,\n detectCitation,\n detectMention,\n type NormalizedTarget,\n normalizeTarget,\n} from './brand.ts'\nimport {\n cleanText,\n clipText,\n createDeadlineSignal,\n isAbortError,\n MAX_EXTRACTED_SOURCES,\n MAX_MODEL_ID_CHARS,\n MAX_PROVIDER_ID_CHARS,\n MAX_QUERY_CHARS,\n MAX_QUERY_ID_CHARS,\n nowIso,\n resolveLimits,\n safeProviderErrorMessage,\n throwIfAborted,\n uniqueStable,\n} from './runtime.ts'\n\ninterface PreparedQuery extends VisibilityProbeQuery {\n id: string\n text: string\n}\n\ninterface PreparedAdapter {\n adapter: VisibilityProviderAdapter\n name: string\n requestedModel: string | null\n}\n\ninterface CheckSlot {\n query: PreparedQuery\n adapter: PreparedAdapter\n}\n\n/**\n * Execute a bounded query × provider matrix and return only normalized evidence.\n * A failed check is intentionally represented with null metrics, never coerced\n * into `not-mentioned` / `not-cited`.\n */\nexport async function runVisibilityProbe(input: RunVisibilityProbeInput): Promise {\n const limits = resolveLimits(DEFAULT_VISIBILITY_PROBE_LIMITS, input.limits)\n const target = normalizeTarget(input.target)\n const queries = prepareQueries(input.queries, limits.maxQueries)\n const adapters = prepareAdapters(input.adapters, limits.maxProviders)\n const startedAt = nowIso(input.now)\n const slots = createSlots(queries, adapters)\n const checks = new Array(slots.length)\n let cursor = 0\n\n const worker = async (): Promise => {\n while (cursor < slots.length) {\n const index = cursor\n cursor += 1\n checks[index] = await executeSlot(slots[index]!, target, limits, input.signal, input.now)\n }\n }\n await Promise.all(Array.from({ length: Math.min(limits.maxConcurrency, slots.length) }, worker))\n\n const summary = summarize(checks)\n return {\n schemaVersion: VISIBILITY_PROBE_SCHEMA_VERSION,\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n startedAt,\n completedAt: nowIso(input.now),\n status: reportStatus(summary),\n checks,\n summary,\n }\n}\n\nfunction prepareQueries(input: readonly VisibilityProbeQuery[], maxQueries: number): PreparedQuery[] {\n if (input.length === 0) throw new Error('at least one query is required')\n if (input.length > maxQueries) throw new Error(`at most ${maxQueries} queries are allowed`)\n const ids = new Set()\n return input.map((candidate, index) => {\n const text = cleanText(candidate.text)\n if (!text) throw new Error(`query ${index + 1} must not be empty`)\n if (text.length > MAX_QUERY_CHARS) {\n throw new Error(`query ${index + 1} must be at most ${MAX_QUERY_CHARS} characters`)\n }\n const id = cleanText(candidate.id) || `query-${index + 1}`\n if (id.length > MAX_QUERY_ID_CHARS) {\n throw new Error(`query ${index + 1} ID must be at most ${MAX_QUERY_ID_CHARS} characters`)\n }\n if (ids.has(id)) throw new Error('query IDs must be unique')\n ids.add(id)\n return { id, text }\n })\n}\n\nfunction prepareAdapters(input: readonly VisibilityProviderAdapter[], maxProviders: number): PreparedAdapter[] {\n if (input.length === 0) throw new Error('at least one provider adapter is required')\n if (input.length > maxProviders) throw new Error(`at most ${maxProviders} provider adapters are allowed`)\n const names = new Set()\n return input.map((adapter) => {\n const name = cleanText(adapter.name)\n if (!name || typeof adapter.execute !== 'function') {\n throw new Error('each provider adapter must have a name and execute function')\n }\n if (name.length > MAX_PROVIDER_ID_CHARS) {\n throw new Error(`provider adapter names must be at most ${MAX_PROVIDER_ID_CHARS} characters`)\n }\n if (names.has(name)) throw new Error('provider adapter names must be unique')\n const requestedModel = boundedIdentifier(adapter.requestedModel, MAX_MODEL_ID_CHARS)\n if (adapter.requestedModel !== undefined && !requestedModel) {\n throw new Error(`provider adapter requestedModel must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n }\n names.add(name)\n return { adapter, name, requestedModel }\n })\n}\n\nfunction createSlots(queries: readonly PreparedQuery[], adapters: readonly PreparedAdapter[]): CheckSlot[] {\n const slots: CheckSlot[] = []\n for (const query of queries) {\n for (const adapter of adapters) slots.push({ query, adapter })\n }\n return slots\n}\n\nasync function executeSlot(\n slot: CheckSlot,\n target: NormalizedTarget,\n limits: ReturnType,\n parentSignal: AbortSignal | undefined,\n now: (() => Date) | undefined,\n): Promise {\n const deadline = createDeadlineSignal(parentSignal, limits.timeoutMs)\n try {\n throwIfAborted(deadline.signal)\n const response = await slot.adapter.adapter.execute({\n query: slot.query,\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n signal: deadline.signal,\n limits,\n })\n throwIfAborted(deadline.signal)\n return successfulCheck(slot, response, target, limits, now)\n } catch (error) {\n return failedCheck(slot, classifyFailure(error, deadline.didTimeout()), now)\n } finally {\n deadline.dispose()\n }\n}\n\nfunction successfulCheck(\n slot: CheckSlot,\n response: VisibilityProviderResponse,\n target: NormalizedTarget,\n limits: ReturnType,\n now: (() => Date) | undefined,\n): VisibilityProbeCheck {\n const answer = cleanText(response.answerText)\n if (!answer) {\n return failedCheck(\n slot,\n { code: 'invalid-response', message: 'The provider response contained no answer text.' },\n now,\n )\n }\n const requestedModel = boundedIdentifier(response.requestedModel, MAX_MODEL_ID_CHARS)\n if (!requestedModel) {\n return failedCheck(slot, {\n code: 'invalid-response',\n message: 'The provider response has an invalid requested model.',\n }, now)\n }\n // Match only the evidence that will be returned. This keeps the verdict\n // auditable and caps work even for a malformed custom adapter.\n const clippedAnswer = clipText(answer, limits.maxAnswerChars)\n const mention = detectMention(clippedAnswer.value, target)\n const citation = detectCitation((response.sources ?? []).slice(0, MAX_EXTRACTED_SOURCES), target)\n const clippedSources = clipSources(citation, limits)\n const normalizedSearchQueries = normalizeSearchQueries(response.searchQueries, limits)\n return {\n queryId: slot.query.id,\n query: slot.query.text,\n provider: slot.adapter.name,\n requestedModel,\n servedModel: boundedIdentifier(response.servedModel, MAX_MODEL_ID_CHARS),\n completedAt: nowIso(now),\n status: 'success',\n answerText: clippedAnswer.value,\n answerTruncated: clippedAnswer.truncated,\n mentioned: mention.mentioned,\n matchedTerms: mention.matchedTerms,\n cited: citation.cited,\n citedDomains: uniqueStable(\n clippedSources.map((source) => source.domain).filter((domain): domain is string => Boolean(domain)),\n ),\n citedUrls: clippedSources.map((source) => source.url),\n // Derive every outward-facing URL/domain array from the clipped source\n // set. `citation` may inspect up to the extraction hard cap to preserve\n // the verdict, but it must never leak an unbounded provider URL.\n matchedCitationDomains: uniqueStable(\n clippedSources.filter((source) => source.targetDomainMatch)\n .map((source) => source.domain)\n .filter((domain): domain is string => Boolean(domain)),\n ),\n matchedCitationUrls: clippedSources.filter((source) => source.targetDomainMatch).map((source) => source.url),\n sources: clippedSources,\n sourceCount: citation.sources.length,\n sourcesTruncated: citation.sources.length > clippedSources.length,\n searchQueries: normalizedSearchQueries.values,\n searchQueriesTruncated: normalizedSearchQueries.truncated,\n retrievalStatus: response.retrievalStatus ?? 'unknown',\n error: null,\n }\n}\n\nfunction clipSources(\n citation: CitationEvidence,\n limits: ReturnType,\n): VisibilityProbeSourceEvidence[] {\n // If output clipping occurs, keep target matches first so `cited: true`\n // always has visible source evidence. Relative provider order is preserved\n // within the matching and non-matching groups.\n const ordered = [\n ...citation.sources.filter((source) => source.targetDomainMatch),\n ...citation.sources.filter((source) => !source.targetDomainMatch),\n ]\n return ordered.slice(0, limits.maxSources).map((source) => ({\n url: clipText(source.url, limits.maxSourceUrlChars).value,\n title: source.title ? clipText(source.title, limits.maxSourceTitleChars).value : null,\n domain: source.domain,\n targetDomainMatch: source.targetDomainMatch,\n }))\n}\n\nfunction normalizeSearchQueries(\n values: readonly string[] | undefined,\n limits: ReturnType,\n): { values: string[]; truncated: boolean } {\n const source = (values ?? []).slice(0, MAX_EXTRACTED_SOURCES)\n const cleaned = uniqueStable(source.map(cleanText).filter(Boolean))\n return {\n values: cleaned.slice(0, limits.maxSearchQueries).map((value) => clipText(value, limits.maxSearchQueryChars).value),\n truncated: values !== undefined && (values.length > source.length || cleaned.length > limits.maxSearchQueries),\n }\n}\n\nfunction failedCheck(\n slot: CheckSlot,\n error: VisibilityProbeFailure,\n now: (() => Date) | undefined,\n): VisibilityProbeCheck {\n return {\n queryId: slot.query.id,\n query: slot.query.text,\n provider: slot.adapter.name,\n requestedModel: slot.adapter.requestedModel,\n servedModel: null,\n completedAt: nowIso(now),\n status: 'failed',\n answerText: null,\n answerTruncated: false,\n mentioned: null,\n matchedTerms: [],\n cited: null,\n citedDomains: [],\n citedUrls: [],\n matchedCitationDomains: [],\n matchedCitationUrls: [],\n sources: [],\n sourceCount: 0,\n sourcesTruncated: false,\n searchQueries: [],\n searchQueriesTruncated: false,\n retrievalStatus: 'unknown',\n error,\n }\n}\n\nfunction boundedIdentifier(value: unknown, maxChars: number): string | null {\n const normalized = cleanText(value)\n return normalized && normalized.length <= maxChars ? normalized : null\n}\n\nfunction classifyFailure(error: unknown, timedOut: boolean): VisibilityProbeFailure {\n if (timedOut) return { code: 'timeout', message: 'The provider request timed out.' }\n if (isAbortError(error)) return { code: 'aborted', message: 'The provider request was cancelled.' }\n return { code: 'provider-error', message: safeProviderErrorMessage(error) }\n}\n\nfunction summarize(checks: readonly VisibilityProbeCheck[]): VisibilityProbeSummary {\n const successfulChecks = checks.filter((check) => check.status === 'success')\n const mentionedChecks = successfulChecks.filter((check) => check.mentioned === true).length\n const citedChecks = successfulChecks.filter((check) => check.cited === true).length\n const denominator = successfulChecks.length\n return {\n totalChecks: checks.length,\n successfulChecks: denominator,\n failedChecks: checks.length - denominator,\n mentionedChecks,\n citedChecks,\n mentionRate: denominator > 0 ? mentionedChecks / denominator : null,\n citationRate: denominator > 0 ? citedChecks / denominator : null,\n }\n}\n\nfunction reportStatus(summary: VisibilityProbeSummary): VisibilityProbeReportStatus {\n if (summary.successfulChecks === 0) return 'failed'\n return summary.failedChecks > 0 ? 'partial' : 'completed'\n}\n\n/** Public helper for callers that want to validate normalized target input before a run. */\nexport function normalizeVisibilityProbeTarget(target: VisibilityProbeTarget): VisibilityProbeTarget {\n const normalized = normalizeTarget(target)\n return { canonicalDomain: normalized.canonicalDomain, brandNames: normalized.brandNames }\n}\n",[],[184,273,275],"910191b8-ae0d-426c-98fa-4fd7b945f7b1","gemini.ts","9378da96-a63e-11f1-9b04-1607ee4eb77e",31,["D",1788292311720],"import { type GenerateContentParameters, type GenerateContentResponse, GoogleGenAI } from '@google/genai'\n\nimport type {\n VisibilityProbeTarget,\n VisibilityProviderAdapter,\n VisibilityProviderRequest,\n VisibilityProviderResponse,\n VisibilityQueryPlan,\n VisibilityQueryPlanner,\n VisibilityQueryPlanningInput,\n VisibilitySource,\n} from './contracts.ts'\nimport { detectMention, hostOf, normalizeTarget } from './brand.ts'\nimport {\n cleanText,\n clipText,\n createDeadlineSignal,\n isAbortError,\n MAX_EXTRACTED_SOURCES,\n MAX_MODEL_ID_CHARS,\n nowIso,\n sleep,\n throwIfAborted,\n uniqueStable,\n} from './runtime.ts'\n\nexport const DEFAULT_GEMINI_VISIBILITY_MODEL = 'gemini-2.5-flash'\nconst VERTEX_AI_SEARCH_PROXY_DOMAIN = 'vertexaisearch.cloud.google.com'\nconst MAX_PLANNER_CONTEXT_CHARS = 12_000\nconst MAX_PLANNER_OUTPUT_TOKENS = 700\n\nexport interface GeminiVisibilityAdapterOptions {\n apiKey: string\n model?: string\n /** 0–2 retries for 429/5xx/network failures. Defaults to one retry. */\n maxRetries?: number\n retryBaseDelayMs?: number\n /** Bounded model output. Defaults to 1,200 and is capped at 2,048. */\n maxOutputTokens?: number\n /** Test/advanced-runtime seam; normal hosts should omit this and use the SDK client. */\n client?: GeminiContentClient\n}\n\nexport interface GeminiContentClient {\n models: {\n generateContent(params: GenerateContentParameters): Promise\n }\n}\n\n/**\n * A Gemini adapter that asks Gemini to use native Google Search grounding.\n * It emits only normalized answer/source evidence and never retains a raw SDK\n * response. The caller owns key storage, budgets, and request admission.\n */\nexport function createGeminiVisibilityAdapter(options: GeminiVisibilityAdapterOptions): VisibilityProviderAdapter {\n const config = normalizeGeminiOptions(options)\n const client = options.client ?? createGeminiClient(config)\n return {\n name: 'gemini',\n requestedModel: config.model,\n async execute(request: VisibilityProviderRequest): Promise {\n const response = await withBoundedRetry(\n () =>\n client.models.generateContent({\n model: config.model,\n contents: request.query.text,\n config: {\n tools: [{ googleSearch: {} }],\n candidateCount: 1,\n temperature: 0,\n maxOutputTokens: config.maxOutputTokens,\n abortSignal: request.signal,\n },\n }),\n request.signal,\n config,\n )\n return normalizeGeminiVisibilityResponse(response, config.model)\n },\n }\n}\n\n/**\n * One bounded planning call for public-domain onboarding. It plans aliases and\n * non-brand buyer queries from caller-provided homepage text; it never fetches\n * the domain itself and does not run a visibility probe.\n */\nexport function createGeminiVisibilityQueryPlanner(options: GeminiVisibilityAdapterOptions): VisibilityQueryPlanner {\n const config = normalizeGeminiOptions(options)\n const client = options.client ?? createGeminiClient(config)\n return {\n name: 'gemini',\n requestedModel: config.model,\n async plan(input: VisibilityQueryPlanningInput): Promise {\n const target = normalizeTarget({ canonicalDomain: input.canonicalDomain, brandNames: input.brandNames ?? [] })\n const context = cleanText(input.homepageContext)\n const maxQueries = boundedPlannerQueryCount(input.maxQueries)\n const deadline = createDeadlineSignal(input.signal, 15_000)\n try {\n throwIfAborted(deadline.signal)\n const response = await withBoundedRetry(\n () =>\n client.models.generateContent({\n model: config.model,\n contents: buildPlannerPrompt({\n canonicalDomain: target.canonicalDomain,\n homepageContext: context ? clipText(context, MAX_PLANNER_CONTEXT_CHARS).value : null,\n maxQueries,\n }),\n config: {\n temperature: 0,\n candidateCount: 1,\n maxOutputTokens: MAX_PLANNER_OUTPUT_TOKENS,\n // Gemini 2.5 does not support structured output plus a built-in\n // tool. We rely on the strict JSON/fence parser below instead.\n tools: [{ googleSearch: {} }],\n abortSignal: deadline.signal,\n },\n }),\n deadline.signal,\n // Planning is one logical and one provider call in the public\n // funnel. Hosts may re-admit a new plan explicitly if desired.\n { ...config, maxRetries: 0 },\n )\n return parseGeminiQueryPlan({\n responseText: extractAnswerText(response),\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n maxQueries,\n requestedModel: config.model,\n servedModel: extractServedModel(response),\n generatedAt: nowIso(input.now),\n })\n } finally {\n deadline.dispose()\n }\n },\n }\n}\n\ninterface NormalizedGeminiOptions {\n apiKey: string\n model: string\n maxRetries: number\n retryBaseDelayMs: number\n maxOutputTokens: number\n}\n\nfunction normalizeGeminiOptions(options: GeminiVisibilityAdapterOptions): NormalizedGeminiOptions {\n const apiKey = cleanText(options.apiKey)\n if (!apiKey) throw new Error('Gemini API key is required')\n const model = cleanText(options.model) || DEFAULT_GEMINI_VISIBILITY_MODEL\n if (model.length > MAX_MODEL_ID_CHARS) {\n throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} characters`)\n }\n return {\n apiKey,\n model,\n maxRetries: clampInteger(options.maxRetries ?? 1, 0, 2),\n retryBaseDelayMs: clampInteger(options.retryBaseDelayMs ?? 400, 100, 2_000),\n maxOutputTokens: clampInteger(options.maxOutputTokens ?? 1_200, 128, 2_048),\n }\n}\n\nexport function createGeminiClient(options: Pick): GoogleGenAI {\n return new GoogleGenAI({ apiKey: options.apiKey })\n}\n\nasync function withBoundedRetry(\n operation: () => Promise,\n signal: AbortSignal,\n config: Pick,\n): Promise {\n let attempt = 0\n for (;;) {\n throwIfAborted(signal)\n try {\n return await operation()\n } catch (error) {\n if (attempt >= config.maxRetries || !isRetryable(error) || isAbortError(error) || signal.aborted) throw error\n const delay = Math.min(config.retryBaseDelayMs * (2 ** attempt), 4_000)\n attempt += 1\n await sleep(delay, signal)\n }\n }\n}\n\nfunction isRetryable(error: unknown): boolean {\n if (error instanceof TypeError) return true\n if (!error || typeof error !== 'object') return false\n const record = error as Record\n const candidate = record.status ?? record.statusCode ?? record.code\n const status = typeof candidate === 'number' ? candidate : Number(candidate)\n if (Number.isInteger(status)) return status === 429 || status >= 500\n const message = error instanceof Error ? error.message : ''\n return /\\b(?:429|500|501|502|503|504)\\b|fetch failed|network/i.test(message)\n}\n\n/** Exported for provider fixture tests; it is deliberately raw-payload free. */\nexport function normalizeGeminiVisibilityResponse(\n response: GenerateContentResponse,\n requestedModel: string,\n): VisibilityProviderResponse {\n const model = boundedModelId(requestedModel)\n if (!model) throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n return {\n requestedModel: model,\n servedModel: extractServedModel(response),\n answerText: extractAnswerText(response),\n sources: extractGroundedSources(response),\n searchQueries: extractSearchQueries(response),\n // Google Search grounding is requested, but the API does not reliably\n // attest whether a search actually ran for each answer.\n retrievalStatus: 'unknown',\n }\n}\n\nfunction asRecord(value: unknown): Record | null {\n return value && typeof value === 'object' ? value as Record : null\n}\n\nfunction asRecords(value: unknown): Record[] {\n return Array.isArray(value)\n ? value.flatMap((item) => {\n const record = asRecord(item)\n return record ? [record] : []\n })\n : []\n}\n\nexport function extractAnswerText(response: GenerateContentResponse): string {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const content = asRecord(candidate?.content)\n const parts = asRecords(content?.parts)\n return parts.flatMap((part) => typeof part.text === 'string' ? [part.text] : []).join('')\n}\n\nfunction extractServedModel(response: GenerateContentResponse): string | null {\n return boundedModelId(asRecord(response)?.modelVersion)\n}\n\nexport function extractGroundedSources(response: GenerateContentResponse): VisibilitySource[] {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const metadata = asRecord(candidate?.groundingMetadata)\n const chunks = asRecords(metadata?.groundingChunks)\n const indices = new Set()\n for (const support of asRecords(metadata?.groundingSupports)) {\n const values = support.groundingChunkIndices\n if (!Array.isArray(values)) continue\n for (const value of values) {\n if (typeof value === 'number' && Number.isInteger(value) && value >= 0 && value < chunks.length) {\n indices.add(value)\n }\n }\n }\n const selected = indices.size > 0 ? [...indices].map((index) => chunks[index]!).filter(Boolean) : chunks\n const sources: VisibilitySource[] = []\n const seen = new Set()\n for (const chunk of selected) {\n if (sources.length >= MAX_EXTRACTED_SOURCES) break\n const web = asRecord(chunk.web)\n const source = typeof web?.uri === 'string'\n ? normalizeGeminiSource(web.uri, typeof web.title === 'string' ? web.title : null)\n : null\n if (!source || seen.has(source.url)) continue\n seen.add(source.url)\n sources.push(source)\n }\n return sources\n}\n\nfunction normalizeGeminiSource(uri: string, title: string | null): VisibilitySource | null {\n try {\n const parsed = new URL(uri)\n if (hostOf(parsed.hostname) !== VERTEX_AI_SEARCH_PROXY_DOMAIN) {\n return { url: parsed.toString(), title }\n }\n const prefix = '/grounding-api-redirect/'\n if (parsed.pathname.startsWith(prefix)) {\n try {\n const redirect = decodeURIComponent(parsed.pathname.slice(prefix.length))\n const redirected = new URL(redirect)\n if (redirected.protocol === 'https:' || redirected.protocol === 'http:') {\n return { url: redirected.toString(), title }\n }\n } catch {\n // Opaque redirect; retain its URL below without treating its host as a citation.\n }\n }\n // Vertex can return an opaque redirect. Preserve the evidence URL but\n // never attribute the proxy hostname as a source. A title is only usable\n // when it is itself exactly a hostname/domain, never ordinary prose.\n return { url: parsed.toString(), title, domain: titleDomain(title) }\n } catch {\n return null\n }\n}\n\nfunction titleDomain(title: string | null): string | null {\n const candidate = cleanText(title)\n if (!candidate || !/^[a-z0-9.-]+$/i.test(candidate)) return null\n const domain = hostOf(candidate)\n return domain && domain.includes('.') ? domain : null\n}\n\nexport function extractSearchQueries(response: GenerateContentResponse): string[] {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const metadata = asRecord(candidate?.groundingMetadata)\n const values = metadata?.webSearchQueries\n return Array.isArray(values) ? uniqueStable(values.flatMap((value) => typeof value === 'string' ? [value] : [])) : []\n}\n\nfunction boundedPlannerQueryCount(value: number | undefined): number {\n return clampInteger(value ?? 3, 1, 3)\n}\n\nfunction clampInteger(value: number, min: number, max: number): number {\n if (!Number.isFinite(value)) return min\n return Math.max(min, Math.min(max, Math.floor(value)))\n}\n\nexport interface GeminiQueryPlanParseInput {\n responseText: string\n target: VisibilityProbeTarget\n maxQueries: number\n requestedModel: string\n servedModel: string | null\n generatedAt: string\n}\n\n/**\n * Deterministic parser/validator for the planner's one-call JSON response.\n * It accepts only exact JSON and removes branded, duplicate, empty, and\n * overlong queries before returning a plan.\n */\nexport function parseGeminiQueryPlan(input: GeminiQueryPlanParseInput): VisibilityQueryPlan {\n const requestedModel = boundedModelId(input.requestedModel)\n if (!requestedModel) throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n let parsed: unknown\n try {\n parsed = JSON.parse(stripCodeFence(input.responseText))\n } catch {\n throw new Error('The query planner returned invalid JSON.')\n }\n const record = asRecord(parsed)\n const rawNames = Array.isArray(record?.brandNames) ? record.brandNames.slice(0, 20) : []\n const rawQueries = Array.isArray(record?.queries) ? record.queries.slice(0, 20) : []\n const plannerNames = rawNames.flatMap((value) => typeof value === 'string' ? [cleanText(value)] : [])\n .filter((name) => name.length > 0 && name.length <= 128)\n const target = normalizeTarget({\n canonicalDomain: input.target.canonicalDomain,\n brandNames: uniqueStable([...input.target.brandNames, ...plannerNames]),\n })\n const seenQueries = new Set()\n const queries = rawQueries.flatMap((value) => typeof value === 'string' ? [cleanText(value)] : [])\n .filter((query) => query.length > 0 && query.length <= 512)\n .filter((query) => {\n const key = query.toLocaleLowerCase('en').replace(/\\s+/g, ' ')\n if (seenQueries.has(key)) return false\n seenQueries.add(key)\n return !detectMention(query, target).mentioned\n })\n .slice(0, input.maxQueries)\n .map((text, index) => ({ id: `planned-query-${index + 1}`, text }))\n if (queries.length !== input.maxQueries) {\n throw new Error(`The query planner did not return ${input.maxQueries} non-brand buyer queries.`)\n }\n return {\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n queries,\n planner: 'gemini',\n requestedModel,\n servedModel: boundedModelId(input.servedModel),\n generatedAt: input.generatedAt,\n }\n}\n\nfunction boundedModelId(value: unknown): string | null {\n const model = cleanText(value)\n return model && model.length <= MAX_MODEL_ID_CHARS ? model : null\n}\n\nfunction stripCodeFence(value: string): string {\n const trimmed = value.trim()\n if (!trimmed.startsWith('```') || !trimmed.endsWith('```')) return trimmed\n const firstNewline = trimmed.indexOf('\\n')\n if (firstNewline === -1) return trimmed\n const language = trimmed.slice(3, firstNewline).trim().toLowerCase()\n if (language && language !== 'json') return trimmed\n return trimmed.slice(firstNewline + 1, -3).trim()\n}\n\nexport function buildPlannerPrompt(input: {\n canonicalDomain: string\n homepageContext: string | null\n maxQueries: number\n}): string {\n return [\n 'You create a small AI-visibility probe plan from a company website.',\n 'Return JSON only, with this exact shape: {\"brandNames\":[\"...\"],\"queries\":[\"...\"]}.',\n `Return 1-5 exact company/brand aliases and exactly ${input.maxQueries} non-brand buyer-intent queries.`,\n 'Queries must be natural questions or searches a prospective buyer could use before knowing the company.',\n 'Do not include the company name, domain, URLs, competitors, explanations, markdown, or extra keys.',\n `Domain: ${input.canonicalDomain}`,\n input.homepageContext\n ? 'Homepage extract:'\n : 'No homepage extract was provided. Use Google Search grounding to verify the domain context.',\n ...(input.homepageContext ? [input.homepageContext] : []),\n ].join('\\n')\n}\n",[],[184,273,283],"396ac57b-3fb8-40c9-8e0f-13271ea85e04","gemini-probe.ts","9381a0ae-a63e-11f1-8fd4-1607ee4eb77e",32,["D",1788292311602],"import {\n createGeminiVisibilityAdapter,\n createGeminiVisibilityQueryPlanner,\n type GeminiContentClient,\n} from './gemini.ts'\nimport type { VisibilityProbeCheck, VisibilityProbeReport } from './contracts.ts'\nimport { runVisibilityProbe } from './runner.ts'\nimport type {\n VisibilityEvidence,\n VisibilityProbeInput,\n VisibilityProbePort,\n VisibilityReport,\n} from '../runtime/types.ts'\n\nexport interface GeminiValVisibilityProbeOptions {\n apiKey: string\n model?: string\n /** Test seam; production uses the SDK client created by the local adapter. */\n client?: GeminiContentClient\n}\n\nexport const VAL_TOWN_GEMINI_VISIBILITY_LIMITS = {\n maxPlannerCalls: 1,\n maxProbeCalls: 3,\n plannerTimeoutMs: 10_000,\n probeTimeoutMs: 10_000,\n probeConcurrency: 2,\n} as const\n\n/**\n * Val-specific composition of the local planner, provider adapter, and\n * evidence runner. The public host can make exactly one planning call and at\n * most three probe calls per check.\n */\nexport function createGeminiValVisibilityProbe(options: GeminiValVisibilityProbeOptions): VisibilityProbePort {\n const planner = createGeminiVisibilityQueryPlanner({\n apiKey: options.apiKey,\n model: options.model,\n maxRetries: 0,\n maxOutputTokens: 700,\n client: options.client,\n })\n const adapter = createGeminiVisibilityAdapter({\n apiKey: options.apiKey,\n model: options.model,\n maxRetries: 0,\n maxOutputTokens: 1_000,\n client: options.client,\n })\n\n return {\n async probe(input: VisibilityProbeInput): Promise {\n const plannerSignal = AbortSignal.any([\n input.signal,\n AbortSignal.timeout(VAL_TOWN_GEMINI_VISIBILITY_LIMITS.plannerTimeoutMs),\n ])\n const plan = await planner.plan({\n canonicalDomain: input.domain,\n brandNames: [],\n maxQueries: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.maxProbeCalls,\n signal: plannerSignal,\n })\n const report = await runVisibilityProbe({\n target: plan.target,\n queries: plan.queries,\n adapters: [adapter],\n signal: input.signal,\n limits: {\n maxQueries: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.maxProbeCalls,\n maxProviders: 1,\n maxConcurrency: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.probeConcurrency,\n timeoutMs: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.probeTimeoutMs,\n maxAnswerChars: 4_000,\n maxSources: 12,\n maxSearchQueries: 12,\n },\n })\n return toHostReport(input.domain, report)\n },\n }\n}\n\nfunction toHostReport(domain: string, report: VisibilityProbeReport): VisibilityReport {\n return {\n schemaVersion: String(report.schemaVersion),\n domain,\n startedAt: report.startedAt,\n completedAt: report.completedAt,\n summary: {\n successfulChecks: report.summary.successfulChecks,\n failedChecks: report.summary.failedChecks,\n mentionRate: report.summary.mentionRate,\n citationRate: report.summary.citationRate,\n },\n evidence: report.checks.map(toEvidence),\n }\n}\n\nfunction toEvidence(check: VisibilityProbeCheck): VisibilityEvidence {\n return {\n query: check.query,\n provider: check.provider,\n requestedModel: check.requestedModel,\n servedModel: check.servedModel,\n completedAt: check.completedAt,\n answerText: check.answerText,\n mentioned: check.mentioned,\n matchedTerms: check.matchedTerms,\n cited: check.cited,\n citedDomains: check.citedDomains,\n citedUrls: check.citedUrls,\n matchedCitationDomains: check.matchedCitationDomains,\n matchedCitationUrls: check.matchedCitationUrls,\n sources: check.sources.map((source) => ({ url: source.url, title: source.title })),\n searchQueries: check.searchQueries,\n retrievalStatus: check.status === 'failed'\n ? 'error'\n : check.retrievalStatus === 'used'\n ? 'grounded'\n : check.retrievalStatus === 'not-used'\n ? 'not-grounded'\n : 'unknown',\n error: check.error?.message ?? null,\n }\n}\n",[],[184,273,291],"0ddab71a-7a15-42ed-82e7-e1ec8b4c27e8","contracts.ts","93687142-a63e-11f1-9f99-1607ee4eb77e",29,["D",1788292311586],"/** A versioned, persistence-free report contract. */\nexport const VISIBILITY_PROBE_SCHEMA_VERSION = 1 as const\n\n/**\n * User-approved identity for one site. `brandNames` are exact aliases, not\n * fuzzy search terms. A domain counts as an answer mention only when it is\n * written explicitly; the probe never silently derives a prose alias from it.\n */\nexport interface VisibilityProbeTarget {\n canonicalDomain: string\n brandNames: readonly string[]\n}\n\nexport interface VisibilityProbeQuery {\n /** Stable caller identity. A deterministic position-based ID is used when omitted. */\n id?: string\n text: string\n}\n\nexport type VisibilityRetrievalStatus = 'used' | 'not-used' | 'unknown'\n\n/** A provider-normalized source. Never pass raw provider response objects here. */\nexport interface VisibilitySource {\n url: string\n title?: string | null\n /**\n * Optional provider-normalized source domain. `null` explicitly says an\n * opaque provider redirect could not be attributed to a website, so callers\n * must not fall back to the redirect host.\n */\n domain?: string | null\n}\n\n/**\n * What a provider adapter returns after it has interpreted its own response.\n * The runner applies the target-specific mention/citation detection and output\n * caps, so adapters have no Canonry persistence or UI knowledge.\n */\nexport interface VisibilityProviderResponse {\n requestedModel: string\n /** Only use a provider-disclosed identity; never fall back to requestedModel. */\n servedModel?: string | null\n answerText: string\n sources?: readonly VisibilitySource[]\n searchQueries?: readonly string[]\n retrievalStatus?: VisibilityRetrievalStatus\n}\n\nexport interface VisibilityProviderRequest {\n query: VisibilityProbeQuery\n target: VisibilityProbeTarget\n signal: AbortSignal\n limits: VisibilityProbeLimits\n}\n\n/** Provider-neutral execution seam. Adapters own credentials passed at construction. */\nexport interface VisibilityProviderAdapter {\n /** Stable machine identifier, for example `gemini`. */\n readonly name: string\n /** Configuration identity, useful when a request fails before the provider responds. */\n readonly requestedModel?: string\n execute(request: VisibilityProviderRequest): Promise\n}\n\n/**\n * All values are bounded by hard local limits. The public Val Town sample sets\n * tighter product limits (three Gemini queries).\n */\nexport interface VisibilityProbeLimits {\n /** Per query-provider request deadline. */\n timeoutMs: number\n maxConcurrency: number\n maxQueries: number\n maxProviders: number\n maxAnswerChars: number\n maxSources: number\n maxSourceUrlChars: number\n maxSourceTitleChars: number\n maxSearchQueries: number\n maxSearchQueryChars: number\n}\n\nexport const DEFAULT_VISIBILITY_PROBE_LIMITS: VisibilityProbeLimits = {\n timeoutMs: 16_000,\n maxConcurrency: 1,\n maxQueries: 10,\n maxProviders: 4,\n maxAnswerChars: 12_000,\n maxSources: 20,\n maxSourceUrlChars: 2_048,\n maxSourceTitleChars: 512,\n maxSearchQueries: 10,\n maxSearchQueryChars: 300,\n}\n\nexport interface RunVisibilityProbeInput {\n target: VisibilityProbeTarget\n queries: readonly VisibilityProbeQuery[]\n adapters: readonly VisibilityProviderAdapter[]\n limits?: Partial\n /** Cancels outstanding work. A cancellation becomes a failed check, never a false negative. */\n signal?: AbortSignal\n /** Deterministic test seam; no wall-clock state is retained. */\n now?: () => Date\n}\n\nexport type VisibilityProbeCheckStatus = 'success' | 'failed'\nexport type VisibilityProbeReportStatus = 'completed' | 'partial' | 'failed'\n\nexport type VisibilityProbeFailureCode = 'aborted' | 'timeout' | 'provider-error' | 'invalid-response'\n\n/** Safe, clipped error information. Provider bodies and credentials never leave an adapter. */\nexport interface VisibilityProbeFailure {\n code: VisibilityProbeFailureCode\n message: string\n}\n\n/** A source selected for display after output caps are applied. */\nexport interface VisibilityProbeSourceEvidence {\n url: string\n title: string | null\n domain: string | null\n /** This source points to the target domain or one of its subdomains. */\n targetDomainMatch: boolean\n}\n\n/** One query × provider observation. `null` means the check failed, not false. */\nexport interface VisibilityProbeCheck {\n queryId: string\n query: string\n provider: string\n requestedModel: string | null\n servedModel: string | null\n completedAt: string\n status: VisibilityProbeCheckStatus\n answerText: string | null\n answerTruncated: boolean\n mentioned: boolean | null\n matchedTerms: string[]\n cited: boolean | null\n /** All domain identities emitted by the provider's source list, subject to output caps. */\n citedDomains: string[]\n /** All source URLs emitted by the provider's source list, subject to output caps. */\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: VisibilityProbeSourceEvidence[]\n sourceCount: number\n sourcesTruncated: boolean\n searchQueries: string[]\n searchQueriesTruncated: boolean\n retrievalStatus: VisibilityRetrievalStatus\n error: VisibilityProbeFailure | null\n}\n\n/** Rates use successful query-provider checks only. They are null when none succeeded. */\nexport interface VisibilityProbeSummary {\n totalChecks: number\n successfulChecks: number\n failedChecks: number\n mentionedChecks: number\n citedChecks: number\n mentionRate: number | null\n citationRate: number | null\n}\n\nexport interface VisibilityProbeReport {\n schemaVersion: typeof VISIBILITY_PROBE_SCHEMA_VERSION\n target: VisibilityProbeTarget\n startedAt: string\n completedAt: string\n status: VisibilityProbeReportStatus\n checks: VisibilityProbeCheck[]\n summary: VisibilityProbeSummary\n}\n\n/**\n * Separate optional planning seam. The host supplies any homepage text it has\n * already fetched; the planner never fetches a website to plan a probe.\n */\nexport interface VisibilityQueryPlanningInput {\n canonicalDomain: string\n /** Optional host-fetched homepage extract. An empty value uses grounded domain research only. */\n homepageContext?: string\n brandNames?: readonly string[]\n maxQueries?: number\n signal?: AbortSignal\n /** Deterministic test seam; no wall-clock state is retained. */\n now?: () => Date\n}\n\nexport interface VisibilityQueryPlan {\n target: VisibilityProbeTarget\n queries: VisibilityProbeQuery[]\n planner: string\n requestedModel: string\n servedModel: string | null\n generatedAt: string\n}\n\nexport interface VisibilityQueryPlanner {\n readonly name: string\n readonly requestedModel: string\n plan(input: VisibilityQueryPlanningInput): Promise\n}\n",[],[184,273,299],"40410abf-b9cd-4f61-b495-e6b8b0487782","brand.ts","935818ec-a63e-11f1-b64b-1607ee4eb77e",27,["D",1788292311530],"import type { VisibilityProbeTarget, VisibilitySource } from './contracts.ts'\nimport { cleanText, MAX_BRAND_NAME_CHARS, MAX_BRAND_NAMES, MAX_DOMAIN_CHARS, uniqueStable } from './runtime.ts'\n\n/**\n * Exact brand identity matching, kept Val-local so the probe core has no\n * dependency on Canonry's private workspace contracts at runtime. The behavior\n * deliberately mirrors Canonry's approved-alias model: adjacent\n * complete words only, never substring or edit-distance guesses.\n */\nconst WORD_SEGMENTER = new Intl.Segmenter('en', { granularity: 'word' })\nconst NON_WORD = /[^\\p{L}\\p{N}]+/gu\nconst WORD_RUNS = /[\\p{L}\\p{N}]+/gu\nconst ACCENT_BEARING_SCRIPT = /[\\p{Script=Latin}\\p{Script=Greek}\\p{Script=Cyrillic}]/u\nconst NON_ASCII = /\\P{ASCII}/u\nconst WRITTEN_URL_OR_DOMAIN =\n /(?:https?:\\/\\/|www\\.)[^\\s<>(){}]+|\\b(?:[\\p{L}\\p{N}](?:[\\p{L}\\p{N}-]{0,61}[\\p{L}\\p{N}])?\\.)+[a-z]{2,63}(?:[/?#][^\\s<>(){}]*)?/giu\n\nexport interface NormalizedTarget {\n canonicalDomain: string\n /** Explicit caller-approved names, safe to return on the public report. */\n brandNames: string[]\n /** Exact-match aliases. These are caller-approved names only. */\n aliases: string[]\n}\n\nexport interface MentionEvidence {\n mentioned: boolean\n matchedTerms: string[]\n}\n\nexport interface CitationEvidence {\n cited: boolean\n citedDomains: string[]\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: NormalizedSource[]\n}\n\nexport interface NormalizedSource {\n url: string\n title: string | null\n domain: string | null\n targetDomainMatch: boolean\n}\n\nfunction foldAccents(value: string): string {\n if (!NON_ASCII.test(value)) return value\n let folded = ''\n for (const character of value) {\n if (character.charCodeAt(0) < 0x80) {\n folded += character\n continue\n }\n const decomposed = character.normalize('NFD')\n const base = decomposed[0]!\n folded += decomposed.length > 1 && ACCENT_BEARING_SCRIPT.test(base) ? base : character\n }\n return folded\n}\n\nfunction normalizedWords(value: string): string[] {\n const normalized = foldAccents(value.normalize('NFKC')).toLocaleLowerCase('en')\n const words: string[] = []\n for (const segment of WORD_SEGMENTER.segment(normalized)) {\n if (!segment.isWordLike) continue\n for (const word of segment.segment.match(WORD_RUNS) ?? []) words.push(word)\n }\n return words\n}\n\nfunction brandKey(value: string): string {\n return normalizedWords(value).join('')\n}\n\nfunction matchedAliasKeys(text: string, aliases: readonly string[]): Set {\n const keys = new Set(aliases.map(brandKey).filter(Boolean))\n if (keys.size === 0) return new Set()\n const normalized = foldAccents(text.normalize('NFKC')).toLocaleLowerCase('en')\n const compact = normalized.replace(NON_WORD, '')\n const reachable = new Set([...keys].filter((key) => compact.includes(key)))\n if (reachable.size === 0) return new Set()\n\n const longest = Math.max(...[...reachable].map((key) => key.length))\n const found = new Set()\n const words = normalizedWords(text)\n for (let start = 0; start < words.length; start++) {\n let candidate = ''\n for (let end = start; end < words.length; end++) {\n candidate += words[end]\n if (reachable.has(candidate)) found.add(candidate)\n if (candidate.length >= longest) break\n }\n if (found.size === reachable.size) break\n }\n return found\n}\n\n/** Normalize only a hostname / http(s) URL; output never retains credentials. */\nexport function hostOf(value: string | null | undefined): string | null {\n const candidate = cleanText(value)\n // A source URL can legitimately be longer than its hostname. Bound the\n // parser input, then validate the resulting hostname independently.\n if (!candidate || candidate.length > 8_192) return null\n const withScheme = /^https?:\\/\\//i.test(candidate) ? candidate : `https://${candidate}`\n try {\n const hostname = new URL(withScheme).hostname.replace(/^www\\./i, '').replace(/\\.$/, '').toLowerCase()\n return hostname && hostname.length <= MAX_DOMAIN_CHARS ? hostname : null\n } catch {\n return null\n }\n}\n\nexport function hostMatchesDomain(candidate: string | null | undefined, domain: string): boolean {\n const candidateHost = hostOf(candidate)\n return candidateHost === domain || Boolean(candidateHost?.endsWith(`.${domain}`))\n}\n\nexport function normalizeTarget(target: VisibilityProbeTarget): NormalizedTarget {\n const canonicalDomain = hostOf(target.canonicalDomain)\n if (!canonicalDomain || !canonicalDomain.includes('.')) {\n throw new Error('target.canonicalDomain must be a valid public hostname')\n }\n if (!Array.isArray(target.brandNames)) throw new Error('target.brandNames must be an array')\n if (target.brandNames.length > MAX_BRAND_NAMES) {\n throw new Error(`target.brandNames may contain at most ${MAX_BRAND_NAMES} entries`)\n }\n\n const explicitNames = target.brandNames.map(cleanText).filter(Boolean)\n if (explicitNames.some((name) => name.length > MAX_BRAND_NAME_CHARS)) {\n throw new Error(`target.brandNames entries must be at most ${MAX_BRAND_NAME_CHARS} characters`)\n }\n const brandNames = uniqueStable(explicitNames)\n return { canonicalDomain, brandNames, aliases: brandNames }\n}\n\nfunction normalizeSourceUrl(value: string): string | null {\n const raw = cleanText(value)\n if (!raw) return null\n try {\n const parsed = new URL(raw)\n if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') return null\n parsed.username = ''\n parsed.password = ''\n return parsed.toString()\n } catch {\n return null\n }\n}\n\n/** Find explicit written URLs/domains in answer prose, not fuzzy word fragments. */\nfunction writtenHosts(text: string): string[] {\n const hosts: string[] = []\n for (const match of text.matchAll(WRITTEN_URL_OR_DOMAIN)) {\n const candidate = match[0]!.replace(/[.,;:!?]+$/, '')\n const host = hostOf(candidate)\n if (host) hosts.push(host)\n }\n return uniqueStable(hosts)\n}\n\nexport function detectMention(answerText: string, target: NormalizedTarget): MentionEvidence {\n const matchedTerms: string[] = []\n if (writtenHosts(answerText).some((host) => hostMatchesDomain(host, target.canonicalDomain))) {\n matchedTerms.push(target.canonicalDomain)\n }\n\n const matchedKeys = matchedAliasKeys(answerText, target.aliases)\n for (const alias of target.aliases) {\n if (matchedKeys.has(brandKey(alias))) matchedTerms.push(alias)\n }\n const unique = uniqueStable(matchedTerms)\n return {\n mentioned: unique.length > 0,\n matchedTerms: unique,\n }\n}\n\n/**\n * Derive citation evidence strictly from the source list. This intentionally\n * does not inspect answer prose: a mention without a source is not a citation.\n */\nexport function detectCitation(\n inputSources: readonly VisibilitySource[] | undefined,\n target: NormalizedTarget,\n): CitationEvidence {\n const sourceMap = new Map()\n for (const source of inputSources ?? []) {\n const url = normalizeSourceUrl(source.url)\n if (!url || sourceMap.has(url)) continue\n // An adapter may explicitly set `domain: null` for an opaque provider\n // redirect. Do not turn that infrastructure hostname into a citation.\n const domain = source.domain === undefined ? hostOf(url) : hostOf(source.domain)\n sourceMap.set(url, {\n url,\n title: cleanText(source.title) || null,\n domain,\n targetDomainMatch: domain ? hostMatchesDomain(domain, target.canonicalDomain) : false,\n })\n }\n const sources = [...sourceMap.values()]\n const citedDomains = uniqueStable(sources.flatMap((source) => source.domain ? [source.domain] : []))\n const citedUrls = sources.map((source) => source.url)\n const matchedSources = sources.filter((source) => source.targetDomainMatch)\n return {\n cited: matchedSources.length > 0,\n citedDomains,\n citedUrls,\n matchedCitationDomains: uniqueStable(matchedSources.flatMap((source) => source.domain ? [source.domain] : [])),\n matchedCitationUrls: matchedSources.map((source) => source.url),\n sources,\n }\n}\n",[],[184,273,307],"7093d43c-bb87-4fe5-82ad-1c7711051c31",4,["D",1788292309391],[233,234,235,236,237,238],[184,273],"b9daa5e5-0737-4b14-b647-904b6d187cb0","types.ts","931ff2a0-a63e-11f1-b64b-1607ee4eb77e","91e63a7a-a63e-11f1-9a7d-1607ee4eb77e",20,["D",1788292311121],"/**\n * The public Val Town page consumes this intentionally small, serializable\n * view model. The runtime maps normalized Canonry results into it; this layer\n * never reads secrets, provider payloads, or storage directly.\n */\n\nexport type DemoUiStatus =\n | 'demo'\n | 'ready'\n | 'loading'\n | 'partial'\n | 'error'\n | 'rate-limited'\n | 'empty'\n\nexport type VisibilityMetric = 'mentioned' | 'cited'\nexport type EvidenceState = 'success' | 'pending' | 'failed' | 'not-measured'\n\nexport interface UiAction {\n label: string\n href?: string\n /** Submit action when the action is represented by the public check form. */\n formAction?: string\n}\n\nexport interface UiNotice {\n title: string\n detail: string\n tone: 'neutral' | 'positive' | 'caution' | 'negative'\n action?: UiAction\n}\n\nexport interface ProviderDescriptor {\n id: string\n label: string\n /** Requested model, never inferred from a response. */\n model?: string\n color?: string\n}\n\nexport interface VisibilityTrendPoint {\n /** Human-readable bucket label, for example \"May 06\". */\n label: string\n observedAt?: string\n values: Record>>\n}\n\nexport interface VisibilitySummaryMetric {\n /** 0..100 only when denominator is known. */\n rate: number | null\n numerator: number\n denominator: number\n deltaPoints?: number | null\n}\n\nexport interface EvidenceSource {\n url: string\n title?: string | null\n /** Whether the source URL belongs to the checked domain. */\n isTargetDomain?: boolean\n}\n\nexport interface QueryEvidenceViewModel {\n id: string\n query: string\n provider: string\n providerLabel?: string\n requestedModel?: string | null\n servedModel?: string | null\n completedAt?: string | null\n /** A null signal means unavailable, never false. */\n mentioned: boolean | null\n /** A null signal means unavailable, never false. */\n cited: boolean | null\n matchedTerms?: readonly string[]\n answerText?: string | null\n sources?: readonly EvidenceSource[]\n searchQueries?: readonly string[]\n retrievalStatus?: EvidenceState\n error?: string | null\n}\n\nexport interface VisibilityViewModel {\n /** Demo history is explicitly synthetic. Fresh live work is a snapshot. */\n historyKind: 'demo-history' | 'snapshot'\n checkedAt?: string | null\n requestedAt?: string | null\n providers: readonly ProviderDescriptor[]\n summaries: Record\n trend?: readonly VisibilityTrendPoint[]\n evidence: readonly QueryEvidenceViewModel[]\n /** Successful checks only are the denominator for the summary rates. */\n completedChecks: number\n requestedChecks: number\n failedChecks?: number\n notice?: UiNotice\n}\n\nexport type SiteHealthFactorState = 'measured' | 'not-applicable' | 'unavailable'\n\nexport interface SiteHealthFactorViewModel {\n id: string\n label: string\n state: SiteHealthFactorState\n score: number | null\n detail: string\n}\n\nexport type PageHealthStatus = 'good' | 'needs-attention' | 'unavailable'\n\nexport interface SiteHealthPageViewModel {\n url: string\n score: number | null\n status: PageHealthStatus\n findings: readonly string[]\n indexable?: boolean | null\n}\n\nexport interface SiteHealthFixViewModel {\n id: string\n title: string\n detail: string\n affectedPages?: number | null\n}\n\nexport interface SiteHealthProvenanceViewModel {\n /** Crawl-result schema retained so the bounded sample remains traceable. */\n schemaVersion?: string | null\n /** Requested and resolved crawl roots distinguish a redirect from a source URL. */\n rootUrl?: string | null\n finalRootUrl?: string | null\n /** Hosts the bounded runner actually attempted, in order. */\n attemptedHosts?: readonly string[]\n /** Optional engine identity when the host makes it available. */\n engineVersion?: string | null\n}\n\nexport interface SiteHealthViewModel {\n /** Must remain an honest bounded-sample label in the public demo. */\n sampleLabel: string\n score: number | null\n /** URLs found by the bounded crawl, not a total site-page count. */\n discoveredPages: number\n attemptedPages: number\n completedPages: number\n failedPages: number\n checkedAt?: string | null\n factors: readonly SiteHealthFactorViewModel[]\n topFixes: readonly SiteHealthFixViewModel[]\n worstPages: readonly SiteHealthPageViewModel[]\n /** Durable reason a bounded crawl ended before completion, never synthesized. */\n terminationReason?: string | null\n provenance?: SiteHealthProvenanceViewModel\n notice?: UiNotice\n}\n\nexport interface CheckFormViewModel {\n action: string\n method?: 'get' | 'post'\n /** Field read by the server-side verifier. Never render a secret in this model. */\n verificationFieldName?: string\n /** A public Cloudflare Turnstile site key. Omit it for local/test bypasses. */\n turnstileSiteKey?: string | null\n /** `audit` is intentionally fixed so the server can reject action mismatches. */\n turnstileAction?: 'audit'\n /** Production without a configured verifier is truthfully disabled. */\n verificationStatus?: 'ready' | 'not-required' | 'unavailable'\n verificationUnavailableMessage?: string\n submitLabel?: string\n}\n\nexport interface CanonryDemoViewModel {\n status: DemoUiStatus\n title?: string\n displayName: string\n domain: string\n locale?: string\n form?: CheckFormViewModel\n visibility?: VisibilityViewModel\n siteHealth?: SiteHealthViewModel\n notice?: UiNotice\n}\n",[],[184,328,320],"ui","3634ab7f-7575-4b55-bad7-eb76244ebd09","styles.ts","933382e8-a63e-11f1-91a7-1607ee4eb77e",22,["D",1788292311113],"/** Self-contained styles served from `/assets/canonry-ui.css` by the Val host. */\nexport const canonryDemoStyles = String.raw`\n:root {\n color-scheme: dark;\n --bg: #09090b;\n --surface: #111113;\n --surface-soft: #18181b;\n --surface-hover: #202024;\n --border: #29292e;\n --border-strong: #414147;\n --text: #f4f4f5;\n --text-strong: #e4e4e7;\n --secondary: #a1a1aa;\n --muted: #87878f;\n --faint: #62626b;\n --positive: #34d399;\n --caution: #fbbf24;\n --negative: #fb7185;\n --link: #93c5fd;\n --focus: #f4f4f5;\n --sans: Geist, Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n --mono: \"Geist Mono\", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;\n}\n* { box-sizing: border-box; }\nhtml { background: var(--bg); }\nbody { margin: 0; background: var(--bg); color: var(--text); font-family: var(--sans); font-size: 14px; line-height: 1.5; }\nbutton, input { font: inherit; }\na { color: var(--link); }\na:focus-visible, button:focus-visible, input:focus-visible, summary:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; }\n.canonry-demo { width: min(100%, 1440px); margin: 0 auto; min-height: 100vh; padding: 0 32px 28px; }\n.app-header { min-height: 74px; display: flex; align-items: center; justify-content: space-between; gap: 22px; border-bottom: 1px solid var(--border); }\n.brand-lockup { display: flex; align-items: baseline; gap: 10px; white-space: nowrap; }\n.wordmark { color: var(--text); font-size: 18px; font-weight: 700; letter-spacing: -.04em; text-decoration: none; }\n.brand-lockup > span { color: var(--muted); font-size: 12px; }\n.domain-form { display: grid; grid-template-columns: auto minmax(360px, 1fr); gap: 6px 10px; align-items: center; max-width: 620px; }\n.domain-form > label { color: var(--secondary); font-size: 13px; white-space: nowrap; }\n.domain-form-row { display: flex; min-width: 0; }\n.domain-form input { min-width: 0; width: 100%; height: 38px; border: 1px solid var(--border-strong); border-radius: 6px 0 0 6px; background: var(--surface); color: var(--text); padding: 0 11px; }\n.domain-form input::placeholder { color: var(--muted); }\n.domain-form button { min-height: 38px; border: 1px solid var(--text); border-radius: 0 6px 6px 0; background: var(--text); color: var(--bg); padding: 0 13px; font-weight: 650; cursor: pointer; white-space: nowrap; }\n.domain-form button:hover { background: #d4d4d8; border-color: #d4d4d8; }\n.domain-form button:active { transform: translateY(1px); }\n.domain-form button:disabled, .domain-form input:disabled { cursor: not-allowed; opacity: .55; }\n.domain-form button:disabled:hover { background: var(--text); border-color: var(--text); }\n.domain-form > p { grid-column: 2; margin: 0; color: var(--muted); font-size: 13px; }\n.verification-slot { grid-column: 2; min-height: 0; }\n.turnstile-wrap { margin-top: 3px; min-height: 65px; }\n.verification-unavailable { display: flex; gap: 7px; align-items: center; margin: 3px 0 0; color: var(--caution); font-size: 13px; }\n.verification-unavailable span { display: grid; width: 17px; height: 17px; place-items: center; border: 1px solid currentColor; border-radius: 50%; font-family: var(--mono); font-size: 11px; }\n.report-header { display: flex; justify-content: space-between; gap: 20px; padding: 38px 0 32px; border-bottom: 1px solid var(--border); }\n.eyebrow { margin: 0 0 7px; color: var(--muted); font-size: 11px; font-weight: 650; letter-spacing: .13em; text-transform: uppercase; }\nh1, h2, h3, p { margin-top: 0; }\nh1 { margin-bottom: 8px; color: var(--text); font-size: clamp(24px, 3vw, 34px); letter-spacing: -.035em; line-height: 1.15; }\nh1 span { display: block; color: var(--secondary); font-size: .55em; font-weight: 500; letter-spacing: -.015em; margin-top: 4px; }\nh2 { margin: 0; color: var(--text-strong); font-size: 21px; font-weight: 600; letter-spacing: -.025em; }\nh3 { color: var(--text-strong); font-size: 15px; font-weight: 600; margin: 0 0 12px; }\n.report-domain { margin: 0; color: var(--secondary); font-family: var(--mono); font-size: 13px; }\n.sample-badge { height: fit-content; border: 1px solid var(--border-strong); border-radius: 999px; color: var(--secondary); font-size: 12px; padding: 4px 9px; white-space: nowrap; }\n.notice { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; gap: 10px; align-items: start; margin: 18px 0 0; border: 1px solid var(--border); border-left-width: 3px; padding: 11px 13px; background: var(--surface); }\n.notice-neutral { border-left-color: var(--secondary); }\n.notice-positive { border-left-color: var(--positive); }\n.notice-caution { border-left-color: var(--caution); }\n.notice-negative { border-left-color: var(--negative); }\n.notice-glyph { display: grid; width: 18px; height: 18px; place-items: center; border: 1px solid currentColor; border-radius: 50%; color: var(--secondary); font-family: var(--mono); font-size: 11px; line-height: 1; }\n.notice-caution .notice-glyph { color: var(--caution); }\n.notice-negative .notice-glyph { color: var(--negative); }\n.notice-title { margin: 0; color: var(--text-strong); font-weight: 600; }\n.notice-detail { margin: 1px 0 0; color: var(--secondary); font-size: 13px; }\n.notice-link { align-self: center; font-size: 13px; white-space: nowrap; }\n.report-tabs { display: flex; gap: 28px; height: 62px; align-items: end; border-bottom: 1px solid var(--border); }\n.report-tabs button { position: relative; min-height: 45px; border: 0; padding: 0 0 14px; background: transparent; color: var(--secondary); cursor: pointer; font-size: 15px; font-weight: 550; }\n.report-tabs button:hover { color: var(--text); }\n.report-tabs button[aria-selected=\"true\"] { color: var(--text); }\n.report-tabs button[aria-selected=\"true\"]::after { position: absolute; right: 0; bottom: -1px; left: 0; height: 2px; background: var(--text); content: \"\"; }\n[data-report-panel] { padding-top: 34px; }\n.analysis-section { padding: 0 0 36px; border-bottom: 1px solid var(--border); }\n.analysis-section + .analysis-section { padding-top: 32px; }\n.section-heading { display: flex; align-items: start; justify-content: space-between; gap: 18px; margin-bottom: 22px; }\n.section-heading .eyebrow { margin-bottom: 5px; }\n.trend-heading { align-items: end; }\n.signal-summary { display: flex; align-items: baseline; justify-content: flex-end; flex-wrap: wrap; gap: 8px; text-align: right; }\n.signal-summary .metric-label { color: var(--secondary); font-size: 13px; }\n.signal-summary strong { color: var(--text); font-family: var(--mono); font-size: 30px; letter-spacing: -.06em; line-height: 1; }\n.metric-delta { font-family: var(--mono); font-size: 13px; font-weight: 600; }\n.metric-delta.up { color: var(--positive); }\n.metric-delta.down { color: var(--negative); }\n.chart-toolbar { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-bottom: 15px; }\n.segmented-control { display: inline-flex; border: 1px solid var(--border-strong); border-radius: 6px; overflow: hidden; }\n.metric-toggle { min-height: 34px; border: 0; border-right: 1px solid var(--border-strong); padding: 0 12px; background: transparent; color: var(--secondary); cursor: pointer; font-weight: 550; }\n.metric-toggle:last-child { border-right: 0; }\n.metric-toggle:hover { background: var(--surface-hover); color: var(--text); }\n.metric-toggle.is-active { background: #42424a; color: var(--text); }\n.chart-denominator { margin: 0; color: var(--muted); font-family: var(--mono); font-size: 13px; }\n.chart-legend { display: flex; flex-wrap: wrap; gap: 9px 20px; margin: 0 0 14px; padding: 0; list-style: none; }\n.chart-legend li { display: inline-flex; align-items: center; gap: 7px; color: var(--secondary); font-size: 13px; }\n.chart-legend strong { color: var(--text-strong); font-family: var(--mono); font-size: 12px; }\n.chart-legend code { color: var(--muted); font-family: var(--mono); font-size: 11px; }\n.legend-line { width: 23px; height: 3px; border-radius: 999px; background: var(--series-color, var(--secondary)); }\n.series-0 { --series-color: #fb923c; }\n.series-1 { --series-color: #60a5fa; }\n.series-2 { --series-color: #34d399; }\n.series-3 { --series-color: #22d3ee; }\n.series-4 { --series-color: #a78bfa; }\n.trend-chart { min-height: 275px; border-top: 1px solid var(--border); border-bottom: 1px solid var(--border); padding: 14px 0 4px; }\n.trend-svg { display: block; width: 100%; height: 275px; overflow: visible; }\n.chart-grid { stroke: #29292e; stroke-width: 1; }\n.chart-axis { fill: #94949d; font-family: var(--mono); font-size: 11px; }\n.chart-line { fill: none; stroke: var(--series-color, var(--secondary)); stroke-width: 3; stroke-linecap: round; stroke-linejoin: round; vector-effect: non-scaling-stroke; }\n.chart-dot { fill: var(--series-color, var(--secondary)); }\n.chart-caption { margin: 12px 0 0; color: var(--secondary); font-size: 13px; }\n.data-disclosure { margin-top: 14px; color: var(--secondary); }\n.data-disclosure > summary, .evidence-detail > summary, .page-detail > summary { width: fit-content; color: var(--link); cursor: pointer; font-size: 13px; }\n.data-disclosure > summary:hover, .evidence-detail > summary:hover, .page-detail > summary:hover { color: #dbeafe; }\n.table-wrap { overflow-x: auto; max-width: 100%; }\n.compact-table, .evidence-table { width: 100%; border-collapse: collapse; min-width: 680px; text-align: left; }\n.compact-table { margin-top: 12px; }\nth { color: var(--secondary); font-size: 11px; font-weight: 650; letter-spacing: .075em; text-transform: uppercase; }\nth, td { border-bottom: 1px solid var(--border); padding: 11px 12px; vertical-align: top; }\ntbody th { color: var(--text-strong); font-size: 13px; font-weight: 550; letter-spacing: normal; text-transform: none; }\ntd { color: var(--secondary); font-size: 13px; }\n.section-intro { max-width: 68ch; margin: -10px 0 18px; color: var(--secondary); font-size: 13px; }\n.query-text { display: inline-block; max-width: 37ch; }\n.signal { display: inline-flex; align-items: center; gap: 5px; white-space: nowrap; font-size: 13px; font-weight: 550; }\n.signal-positive { color: var(--positive); }\n.signal-neutral { color: var(--secondary); }\n.signal-caution { color: var(--caution); }\n.signal-unavailable { color: var(--muted); }\n.evidence-detail > summary, .page-detail > summary { white-space: nowrap; }\n.evidence-content { max-width: 720px; padding: 12px 0 4px; }\n.evidence-meta { display: flex; flex-wrap: wrap; gap: 6px 16px; color: var(--muted); font-size: 12px; }\ncode { color: var(--text-strong); font-family: var(--mono); font-size: .92em; }\n.detail-label { display: block; margin: 12px 0 4px; color: var(--muted); font-size: 11px; font-weight: 650; letter-spacing: .09em; text-transform: uppercase; }\n.evidence-answer blockquote { max-width: 72ch; margin: 0; border-left: 2px solid var(--border-strong); padding-left: 11px; color: var(--text-strong); }\n.detail-empty { color: var(--muted); font-size: 13px; }\n.detail-error { color: var(--negative); }\n.source-list { display: grid; gap: 7px; margin: 0; padding: 0; list-style: none; }\n.source-title { display: block; overflow: hidden; max-width: 70ch; color: var(--link); text-overflow: ellipsis; white-space: nowrap; }\n.source-host { display: block; color: var(--muted); font-family: var(--mono); font-size: 11px; }\n.empty-state, .snapshot-state { display: flex; gap: 12px; align-items: flex-start; border: 1px dashed var(--border-strong); padding: 19px; color: var(--secondary); }\n.empty-state p, .snapshot-state p { margin: 0; }\n.empty-title, .snapshot-title { color: var(--text-strong); font-weight: 600; }\n.snapshot-icon { color: var(--muted); font-family: var(--mono); font-size: 22px; line-height: 1; }\n.snapshot-metrics { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 18px; margin: 18px 0 0; }\n.snapshot-metrics > div { border-top: 1px solid var(--border); padding-top: 11px; }\n.snapshot-metrics dt { color: var(--secondary); font-size: 13px; }\n.snapshot-metrics dd { margin: 3px 0 0; color: var(--text); font-family: var(--mono); font-size: 25px; font-weight: 650; letter-spacing: -.05em; }\n.snapshot-metrics span { color: var(--muted); font-size: 13px; }\n.checked-at { margin: 0; color: var(--muted); font-family: var(--mono); font-size: 12px; }\n.site-score { display: flex; align-items: baseline; gap: 9px; white-space: nowrap; }\n.site-score span { color: var(--secondary); font-size: 13px; }\n.site-score strong { color: var(--text); font-family: var(--mono); font-size: 24px; letter-spacing: -.05em; }\n.sample-facts { display: flex; flex-wrap: wrap; gap: 6px 16px; margin: -6px 0 24px; color: var(--secondary); font-size: 13px; }\n.sample-facts span + span::before { display: inline-block; margin-right: 16px; color: var(--faint); content: \"·\"; }\n.sample-facts strong { color: var(--text-strong); font-family: var(--mono); }\n.site-grid { display: grid; grid-template-columns: minmax(0, 1.2fr) minmax(300px, .8fr); gap: 34px; }\n.factor-list, .fix-list { margin: 0; padding: 0; list-style: none; }\n.factor-row { display: grid; grid-template-columns: minmax(0, 1fr) minmax(150px, .42fr); gap: 16px; align-items: center; border-top: 1px solid var(--border); padding: 12px 0; }\n.factor-row:last-child { border-bottom: 1px solid var(--border); }\n.factor-row p, .fix-list p { margin: 0; color: var(--text-strong); font-weight: 550; }\n.factor-row > div > span, .fix-list span { display: block; margin-top: 2px; color: var(--secondary); font-size: 13px; }\n.factor-score { display: flex; align-items: center; gap: 9px; }\n.factor-score meter { width: 100%; height: 9px; accent-color: var(--secondary); }\n.factor-positive meter { accent-color: var(--positive); }\n.factor-caution meter { accent-color: var(--caution); }\n.factor-negative meter { accent-color: var(--negative); }\n.factor-score strong { min-width: 58px; color: var(--text-strong); font-family: var(--mono); font-size: 13px; text-align: right; white-space: nowrap; }\n.factor-state { color: var(--muted); font-size: 13px; text-align: right; }\n.fix-list { display: grid; gap: 0; border-top: 1px solid var(--border); }\n.fix-list li { display: grid; grid-template-columns: 25px minmax(0, 1fr); gap: 9px; border-bottom: 1px solid var(--border); padding: 12px 0; }\n.fix-index { display: grid; width: 20px; height: 20px; place-items: center; border: 1px solid var(--border-strong); border-radius: 50%; color: var(--secondary); font-family: var(--mono); font-size: 11px; }\n.worst-pages { margin-top: 34px; }\n.url-cell a { display: inline-block; max-width: 48ch; overflow: hidden; color: var(--text-strong); text-overflow: ellipsis; white-space: nowrap; }\n.score-cell { color: var(--text-strong); font-family: var(--mono); white-space: nowrap; }\n.page-detail > div { max-width: 60ch; padding: 10px 0 2px; }\n.page-detail ul { display: grid; gap: 4px; margin: 0; padding-left: 18px; color: var(--secondary); }\n.page-indexability { margin: 10px 0 0; color: var(--secondary); }\n.sample-scope > p { max-width: 70ch; margin: 9px 0 0; color: var(--secondary); font-size: 13px; }\n.sample-scope .sample-provenance { color: var(--muted); font-family: var(--mono); font-size: 12px; }\n.no-js-site-health { padding-top: 34px; }\n.app-footer { display: flex; justify-content: space-between; gap: 14px; padding: 23px 0 4px; color: var(--muted); font-size: 12px; }\n.app-footer a { color: var(--secondary); }\n.app-footer > span:first-child { max-width: 62ch; }\n.footer-links { display: flex; align-items: baseline; gap: 13px; white-space: nowrap; }\n.footer-links code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11px; color: var(--secondary); }\n.sr-only { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; }\n[hidden] { display: none !important; }\n@media (max-width: 860px) {\n .canonry-demo { padding: 0 20px 24px; }\n .app-header { align-items: flex-start; flex-direction: column; padding: 18px 0; }\n .domain-form { width: 100%; max-width: none; grid-template-columns: 1fr; }\n .domain-form > p, .verification-slot { grid-column: 1; }\n .domain-form > label { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; }\n .report-header { padding: 28px 0 24px; }\n .site-grid { grid-template-columns: 1fr; gap: 28px; }\n}\n@media (max-width: 600px) {\n body { font-size: 14px; }\n .canonry-demo { padding: 0 14px 20px; }\n .report-header, .section-heading, .trend-heading { align-items: flex-start; flex-direction: column; }\n .signal-summary { justify-content: flex-start; text-align: left; }\n .chart-toolbar { align-items: flex-start; flex-direction: column; }\n .chart-legend { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; }\n .chart-legend li { min-width: 0; flex-wrap: wrap; gap: 5px; }\n .chart-legend code { display: none; }\n .trend-chart, .trend-svg { min-height: 225px; height: 225px; }\n .site-score { margin-top: -10px; }\n .snapshot-metrics { grid-template-columns: 1fr; gap: 12px; }\n .factor-row { grid-template-columns: 1fr; gap: 8px; }\n .factor-state { text-align: left; }\n .sample-facts { display: grid; gap: 5px; }\n .sample-facts span + span::before { display: none; }\n .notice { grid-template-columns: auto minmax(0, 1fr); }\n .notice-link { grid-column: 2; }\n}\n@media (prefers-reduced-motion: reduce) {\n *, *::before, *::after { scroll-behavior: auto !important; transition-duration: .01ms !important; animation-duration: .01ms !important; animation-iteration-count: 1 !important; }\n}\n`\n",[],[184,328,330],"9d0af8f4-4821-482d-a8f5-0411cfb49b7c","render.ts","9343b730-a63e-11f1-a6d3-1607ee4eb77e",24,["D",1788292311388],"import type {\n CanonryDemoViewModel,\n DemoUiStatus,\n EvidenceSource,\n QueryEvidenceViewModel,\n SiteHealthFactorViewModel,\n SiteHealthPageViewModel,\n UiNotice,\n VisibilityMetric,\n VisibilityViewModel,\n} from './types.ts'\n\nconst DEFAULT_CSS_HREF = '/assets/canonry-ui.css'\nconst DEFAULT_SCRIPT_SRC = '/assets/canonry-ui.js'\nconst MAX_ANSWER_CHARS = 1_400\n\nfunction escapeHtml(value: unknown): string {\n return String(value ?? '')\n .replaceAll('&', '&')\n .replaceAll('<', '<')\n .replaceAll('>', '>')\n .replaceAll('\"', '"')\n .replaceAll(\"'\", ''')\n}\n\nfunction escapeAttr(value: unknown): string {\n return escapeHtml(value).replaceAll('`', '`')\n}\n\nfunction safeUrl(value: string): string | null {\n try {\n const url = new URL(value)\n return url.protocol === 'https:' || url.protocol === 'http:' ? url.toString() : null\n } catch {\n return null\n }\n}\n\nfunction safeHref(value: string): string | null {\n if (value.startsWith('/') && !value.startsWith('//')) return value\n return safeUrl(value)\n}\n\nfunction safeFormAction(value: string): string {\n return value.startsWith('/') && !value.startsWith('//') ? value : '/check'\n}\n\nfunction safeHost(value: string): string {\n const url = safeUrl(value)\n if (!url) return 'Unavailable source'\n return new URL(url).hostname\n}\n\nfunction clip(value: string | null | undefined, limit = MAX_ANSWER_CHARS): string {\n if (!value) return ''\n return value.length > limit ? `${value.slice(0, limit - 1).trimEnd()}…` : value\n}\n\nfunction isFiniteNumber(value: number | null | undefined): value is number {\n return typeof value === 'number' && Number.isFinite(value)\n}\n\nfunction asPercent(value: number | null | undefined): string {\n if (!isFiniteNumber(value)) return 'Not measured'\n return `${Number.isInteger(value) ? value : value.toFixed(1)}%`\n}\n\nfunction asScore(value: number | null | undefined): string {\n return isFiniteNumber(value) ? `${Math.round(value)} / 100` : 'Not measured'\n}\n\nfunction formatTime(value: string | null | undefined): string | null {\n if (!value) return null\n const date = new Date(value)\n if (Number.isNaN(date.valueOf())) return null\n return new Intl.DateTimeFormat('en-US', {\n month: 'short',\n day: 'numeric',\n year: 'numeric',\n hour: 'numeric',\n minute: '2-digit',\n }).format(date)\n}\n\nfunction statusCopy(status: DemoUiStatus): UiNotice | null {\n switch (status) {\n case 'loading':\n return {\n tone: 'neutral',\n title: 'Checking this domain',\n detail: 'The report will appear here when the bounded checks finish.',\n }\n case 'partial':\n return {\n tone: 'caution',\n title: 'Partial result',\n detail: 'Only completed checks are included below. Failed checks are shown separately.',\n }\n case 'error':\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: 'Try again later or use a domain that responds publicly.',\n }\n case 'rate-limited':\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: 'This public sample has reached its current limit. Try again later.',\n }\n case 'empty':\n return { tone: 'neutral', title: 'No report yet', detail: 'Enter a public domain to create a bounded snapshot.' }\n default:\n return null\n }\n}\n\nfunction renderNotice(notice: UiNotice | undefined): string {\n if (!notice) return ''\n const href = notice.action?.href ? safeHref(notice.action.href) : null\n const action = href && notice.action\n ? `${escapeHtml(notice.action.label)}`\n : ''\n return `\n `\n}\n\nfunction providerSeriesClass(index: number): string {\n return `series-${index % 5}`\n}\n\nfunction chartPointX(index: number, count: number): number {\n const left = 56\n const right = 892\n if (count <= 1) return (left + right) / 2\n return left + ((right - left) * index) / (count - 1)\n}\n\nfunction chartPointY(value: number): number {\n const top = 18\n const bottom = 218\n const normalized = Math.max(0, Math.min(100, value))\n return bottom - ((bottom - top) * normalized) / 100\n}\n\nfunction renderTrendPath(values: Array, pointCount: number): string {\n let segment = ''\n let started = false\n for (let index = 0; index < pointCount; index += 1) {\n const value = values[index]\n if (!isFiniteNumber(value)) {\n started = false\n continue\n }\n const command = started ? 'L' : 'M'\n segment += `${command}${chartPointX(index, pointCount).toFixed(1)},${chartPointY(value).toFixed(1)} `\n started = true\n }\n return segment.trim()\n}\n\nfunction renderTrendSvg(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const trend = visibility.trend ?? []\n const gridLabels = [100, 75, 50, 25, 0]\n const grids = gridLabels.map((value) => {\n const y = chartPointY(value)\n return `${value}%`\n }).join('')\n const labels = trend.map((point, index) => (\n `${\n escapeHtml(point.label)\n }`\n )).join('')\n const paths = visibility.providers.map((provider, index) => {\n const values = trend.map((point) => point.values[provider.id]?.[metric] ?? null)\n const path = renderTrendPath(values, trend.length)\n const series = providerSeriesClass(index)\n const dots = values.map((value, pointIndex) =>\n isFiniteNumber(value)\n ? ``\n : ''\n ).join('')\n return path ? `${dots}` : ''\n }).join('')\n const title = metric === 'mentioned' ? 'Mentioned in answer trend' : 'Cited in source trend'\n return `\n `\n}\n\nfunction renderTrendData(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const trend = visibility.trend ?? []\n if (trend.length === 0) return ''\n const columns = visibility.providers.map((provider) => `${escapeHtml(provider.label)}`).join('')\n const rows = trend.map((point) => {\n const cells = visibility.providers.map((provider) =>\n `${asPercent(point.values[provider.id]?.[metric] ?? null)}`\n ).join('')\n return `${escapeHtml(point.label)}${cells}`\n }).join('')\n return `\n

Trend data

${columns}${rows}

Date

`\n}\n\nfunction metricLabel(metric: VisibilityMetric): string {\n return metric === 'mentioned' ? 'Mentioned' : 'Cited'\n}\n\nfunction renderMetricSummary(visibility: VisibilityViewModel, metric: VisibilityMetric, hidden = false): string {\n const summary = visibility.summaries[metric]\n return `

\n ${metricLabel(metric)}${asPercent(summary.rate)}${\n isFiniteNumber(summary.deltaPoints)\n ? `= 0 ? 'up' : 'down'}\">${summary.deltaPoints >= 0 ? '+' : ''}${\n summary.deltaPoints.toFixed(1)\n } pts`\n : ''\n }\n

`\n}\n\nfunction renderTrendLegend(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const latest = visibility.trend?.at(-1)\n const rows = visibility.providers.map((provider, index) => {\n const latestValue = latest?.values[provider.id]?.[metric] ?? null\n return `

${\n escapeHtml(provider.label)\n }${provider.model ? `${escapeHtml(provider.model)}` : ''}${\n asPercent(latestValue)\n }

`\n }).join('')\n return `

${rows}`\n}\n\nfunction renderTrendMetricPanel(visibility: VisibilityViewModel, metric: VisibilityMetric, hidden = false): string {\n return `

\n ${renderTrendLegend(visibility, metric)}\n

${renderTrendSvg(visibility, metric)}

Mentioned is answer text. Cited is a source link to this domain. They are independent signals.

${renderTrendData(visibility, metric)}

`\n}\n\nfunction renderVisibilityChart(visibility: VisibilityViewModel): string {\n const isHistory = visibility.historyKind === 'demo-history' && (visibility.trend?.length ?? 0) > 1\n const mention = visibility.summaries.mentioned\n const cite = visibility.summaries.cited\n const checkedAt = formatTime(visibility.checkedAt)\n if (!isHistory) {\n return `\n

AI visibility

Fresh snapshot

\n ${checkedAt ? `

Checked ${escapeHtml(checkedAt)}

` : ''}\n

\n ○\n

No trend yet

A fresh domain is measured once. Canonry does not invent prior history.

Mentioned: ${\n asPercent(mention.rate)\n }
Cited: ${\n asPercent(cite.rate)\n }

`\n }\n return `\n

Trend

Answer-engine trend

\n ${renderMetricSummary(visibility, 'mentioned')}\n ${renderMetricSummary(visibility, 'cited', true)}\n

\n \n ${renderTrendMetricPanel(visibility, 'mentioned')}\n ${renderTrendMetricPanel(visibility, 'cited', true)}\n

`\n}\n\nfunction signalLabel(value: boolean | null, positive: string, negative: string): string {\n if (value === true) return positive\n if (value === false) return negative\n return 'Not measured'\n}\n\nfunction signalClass(value: boolean | null): string {\n if (value === true) return 'signal-positive'\n if (value === false) return 'signal-neutral'\n return 'signal-unavailable'\n}\n\nfunction renderSource(source: EvidenceSource): string {\n const url = safeUrl(source.url)\n const title = source.title?.trim() || safeHost(source.url)\n if (!url) {\n return `

${\n escapeHtml(title)\n }Unavailable URL

`\n }\n return `

${\n escapeHtml(title)\n }${escapeHtml(safeHost(url))}${\n source.isTargetDomain ? ' · target source' : ''\n }

`\n}\n\nfunction renderEvidenceDetails(row: QueryEvidenceViewModel): string {\n const answer = row.answerText\n ? `

${escapeHtml(clip(row.answerText))}

`\n : '

Answer text was not retained for this result.

'\n const sources = row.sources?.length\n ? `

${row.sources.map(renderSource).join('')}`\n : '

No source URLs were recorded.

'\n const matched = row.matchedTerms?.length\n ? `

Matched terms${escapeHtml(row.matchedTerms.join(', '))}

`\n : ''\n const models = [\n row.requestedModel ? `Requested: ${escapeHtml(row.requestedModel)}` : '',\n row.servedModel ? `Served: ${escapeHtml(row.servedModel)}` : '',\n ].filter(Boolean).join('')\n const searches = row.searchQueries?.length\n ? `

Search queries${escapeHtml(row.searchQueries.join(', '))}

`\n : ''\n const error = row.error\n ? `

Unavailable${escapeHtml(row.error)}

`\n : ''\n return `\n

View evidence

${models}${\n row.completedAt && formatTime(row.completedAt)\n ? `Completed: ${escapeHtml(formatTime(row.completedAt)!)}`\n : ''\n }

Answer

${answer}

\n ${matched}${searches}${error}\n

Sources

${sources}

`\n}\n\nfunction renderEvidence(visibility: VisibilityViewModel): string {\n const rows = visibility.evidence.map((row) => `\n \n ${escapeHtml(row.query)}\n ${escapeHtml(row.providerLabel ?? row.provider)}\n ${\n row.mentioned === true ? '✓' : row.mentioned === false ? '−' : '?'\n }${signalLabel(row.mentioned, 'Mentioned', 'Not mentioned')}\n ${\n row.cited === true ? '✓' : row.cited === false ? '−' : '?'\n }${signalLabel(row.cited, 'Cited', 'Not cited')}\n ${renderEvidenceDetails(row)}\n `).join('')\n const empty =\n '

No completed query evidence

Evidence appears after a check returns an answer.

'\n return `\n

Evidence

Query evidence

Mentioned means the brand appears in answer text. Cited means a source URL belongs to the checked domain.

\n ${visibility.notice ? renderNotice(visibility.notice) : ''}\n ${\n visibility.evidence.length\n ? `

${rows}

Query	Engine	Mentioned	Cited	Evidence

`\n : empty\n }\n

`\n}\n\nfunction factorTone(factor: SiteHealthFactorViewModel): string {\n if (factor.state !== 'measured' || !isFiniteNumber(factor.score)) return 'factor-unavailable'\n if (factor.score >= 80) return 'factor-positive'\n if (factor.score >= 60) return 'factor-caution'\n return 'factor-negative'\n}\n\nfunction renderFactor(factor: SiteHealthFactorViewModel): string {\n const content = factor.state === 'measured' && isFiniteNumber(factor.score)\n ? `

${\n asScore(factor.score)\n }

`\n : `${factor.state === 'not-applicable' ? 'Not applicable' : 'Unavailable'}`\n return `

${escapeHtml(factor.label)}

${\n escapeHtml(factor.detail)\n }

${content}

`\n}\n\nfunction pageStatusLabel(status: SiteHealthPageViewModel['status']): string {\n if (status === 'good') return 'Good'\n if (status === 'needs-attention') return 'Needs attention'\n return 'Unavailable'\n}\n\nfunction renderPageDetails(page: SiteHealthPageViewModel): string {\n const facts = page.findings.length\n ? `

${escapeHtml(finding)}

`\n : '

No page-level findings were retained.

'\n return `

View findings

${facts}${\n page.indexable != null\n ? `

${\n page.indexable ? 'Indexable in this sample.' : 'Not indexable in this sample.'\n }

`\n : ''\n }

`\n}\n\nfunction readableValue(value: string): string {\n return value.replaceAll(/[-_]+/g, ' ').replaceAll(/\\s+/g, ' ').trim()\n}\n\nfunction renderSiteHealth(siteHealth: CanonryDemoViewModel['siteHealth'], idPrefix = 'site-health'): string {\n const headingId = `${idPrefix}-heading`\n const factorHeadingId = `${idPrefix}-factors`\n const fixHeadingId = `${idPrefix}-fixes`\n const worstPagesHeadingId = `${idPrefix}-worst-pages`\n if (!siteHealth) {\n return `\n

Site health

Technical AEO sample

No site-health sample

A bounded crawl can appear with a domain check.

`\n }\n const checkedAt = formatTime(siteHealth.checkedAt)\n const pages = siteHealth.worstPages.map((page) => {\n const url = safeUrl(page.url)\n const label = escapeHtml(page.url.replace(/^https?:\\/\\//, ''))\n const pageLink = url\n ? `${label}`\n : `${label}`\n return `${pageLink}${escapeHtml(pageStatusLabel(page.status))}${asScore(page.score)}${\n renderPageDetails(page)\n }`\n }).join('')\n const fixes = siteHealth.topFixes.map((fix, index) =>\n `

${index + 1}

${escapeHtml(fix.title)}

${\n escapeHtml(fix.detail)\n }${\n isFiniteNumber(fix.affectedPages)\n ? ` ${fix.affectedPages} sampled ${fix.affectedPages === 1 ? 'page' : 'pages'}.`\n : ''\n }

`\n ).join('')\n const termination = siteHealth.terminationReason\n ? `

Partial termination: ${escapeHtml(readableValue(siteHealth.terminationReason))}.

`\n : ''\n const provenance = [\n siteHealth.provenance?.schemaVersion ? `Crawl schema ${siteHealth.provenance.schemaVersion}` : '',\n siteHealth.provenance?.engineVersion ? `Engine ${siteHealth.provenance.engineVersion}` : '',\n ].filter(Boolean).join(' · ')\n return `\n

Site health

${escapeHtml(siteHealth.sampleLabel)}

Sample score${asScore(siteHealth.score)}

${siteHealth.completedPages} of ${siteHealth.attemptedPages} pages completed${siteHealth.discoveredPages} pages discovered${\n siteHealth.failedPages === 0\n ? 'No failed pages'\n : `${siteHealth.failedPages} failed ${siteHealth.failedPages === 1 ? 'page' : 'pages'}`\n }${checkedAt ? `Checked ${escapeHtml(checkedAt)}` : ''}

\n ${siteHealth.notice ? renderNotice(siteHealth.notice) : ''}\n

Factors

${\n siteHealth.factors.map(renderFactor).join('')\n }

Top fixes

${\n siteHealth.topFixes.length\n ? `

${fixes}`\n : '

No prioritized fixes in this sample.

'\n }

Worst sampled pages

${\n pages\n ? `

${pages}

Page	Status	Score	Findings

`\n : '

No page audit evidence is available.

'\n }

Sample scope

This is a bounded page sample, not a complete technical audit. A score applies only to the pages and factors checked here.

${termination}${\n provenance ? `

${escapeHtml(provenance)}

` : ''\n }

`\n}\n\nfunction renderCheckForm(model: CanonryDemoViewModel): string {\n if (!model.form) return ''\n const value = model.status === 'demo' || model.status === 'empty' ? '' : model.domain\n const verificationStatus = model.form.verificationStatus ?? (model.form.turnstileSiteKey ? 'ready' : 'not-required')\n const hasTurnstile = Boolean(model.form.turnstileSiteKey && verificationStatus === 'ready')\n const disabled = verificationStatus === 'unavailable'\n const verification = hasTurnstile\n ? `

`\n : verificationStatus === 'unavailable'\n ? `

!${\n escapeHtml(\n model.form.verificationUnavailableMessage ?? 'Human verification is unavailable. Public checks are disabled.',\n )\n }

`\n : ''\n const verificationSlot = verification\n ? `

${verification}

`\n : ''\n return `\n `\n}\n\nfunction renderMain(model: CanonryDemoViewModel): string {\n const globalNotice =\n (model.status === 'demo' || model.status === 'ready' ? model.notice : model.notice ?? statusCopy(model.status)) ??\n undefined\n const loading = model.status === 'loading'\n const visibility = model.visibility\n return `\n

\n \n

${model.status === 'demo' ? 'Demo report' : 'Domain report'}

${escapeHtml(model.displayName)}AI visibility and site health

${escapeHtml(model.domain)}${\n model.locale ? ` · ${escapeHtml(model.locale)}` : ''\n }

\n ${model.status === 'demo' ? 'Sample data' : ''}\n

\n ${renderNotice(globalNotice)}\n

\n \n \n

\n ${\n visibility\n ? `${renderVisibilityChart(visibility)}${renderEvidence(visibility)}`\n : '

No visibility result

Start a check to inspect answer-engine evidence.

'\n }\n

\n \n \n \n

`\n}\n\n/** Returns a complete document so the runtime can use it as an HTTP response body. */\nexport function renderCanonryDemo(model: CanonryDemoViewModel): string {\n const title = `${model.displayName} | Canonry`\n return `\n\n \n \n \n \n ${escapeHtml(title)}\n \n \n ${\n model.form?.turnstileSiteKey && (model.form.verificationStatus ?? 'ready') === 'ready'\n ? ''\n : ''\n }\n \n ${renderMain(model)}\n`\n}\n\n/** Useful for a host that owns the outer document or wants an embedded fragment. */\nexport function renderCanonryDemoBody(model: CanonryDemoViewModel): string {\n return renderMain(model)\n}\n",[],[184,328,338],"97e365c1-708a-43b8-8d79-ebbb0b4a4610","index.ts","93608ea0-a63e-11f1-9b04-1607ee4eb77e",28,["D",1788292311400],"export { demoCanonryViewModel } from '../fixtures/demo-report.ts'\nexport { createPublicCheckForm } from './check-form.ts'\nexport { canonryDemoClientScript } from './client.ts'\nexport { toCanonryDemoViewModel } from './from-check-record.ts'\nexport type { CheckRecordViewOptions } from './from-check-record.ts'\nexport { renderCanonryDemo, renderCanonryDemoBody } from './render.ts'\nexport { canonryDemoStyles } from './styles.ts'\nexport type {\n CanonryDemoViewModel,\n CheckFormViewModel,\n DemoUiStatus,\n EvidenceSource,\n EvidenceState,\n ProviderDescriptor,\n QueryEvidenceViewModel,\n SiteHealthFactorState,\n SiteHealthFactorViewModel,\n SiteHealthFixViewModel,\n SiteHealthPageViewModel,\n SiteHealthProvenanceViewModel,\n SiteHealthViewModel,\n UiAction,\n UiNotice,\n VisibilityMetric,\n VisibilitySummaryMetric,\n VisibilityTrendPoint,\n VisibilityViewModel,\n} from './types.ts'\n",[],[184,328,346],"6b5562ec-bdd4-495a-93a1-30472a334cc6","from-check-record.ts","9329ca82-a63e-11f1-9b04-1607ee4eb77e",21,["D",1788292311210],"import type {\n CheckRecord,\n CheckResult,\n SiteHealthPageSample,\n SiteHealthSample,\n VisibilityEvidence,\n VisibilityReport,\n} from '../runtime/types.ts'\nimport { PUBLIC_RATE_LIMITED_ERROR_CODE } from '../runtime/types.ts'\nimport type {\n CanonryDemoViewModel,\n CheckFormViewModel,\n QueryEvidenceViewModel,\n SiteHealthFactorViewModel,\n SiteHealthFixViewModel,\n SiteHealthPageViewModel,\n VisibilityViewModel,\n} from './types.ts'\n\nexport interface CheckRecordViewOptions {\n form?: CheckFormViewModel\n displayName?: string\n locale?: string\n title?: string\n}\n\nconst LOCAL_READY_FORM: CheckFormViewModel = {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n verificationStatus: 'not-required',\n submitLabel: 'Check a domain',\n}\n\n/**\n * Converts a sanitized, durable public-check record into the narrow UI model.\n * It deliberately never turns an absent provider report into a 0% score.\n */\nexport function toCanonryDemoViewModel(\n record: CheckRecord | null,\n options: CheckRecordViewOptions = {},\n): CanonryDemoViewModel {\n const domain = record?.domain ?? ''\n const result = record?.result ?? null\n const status = record ? mapStatus(record) : 'empty'\n const resultDomain = result?.domain || domain\n const displayName = options.displayName ?? nameFromDomain(resultDomain || 'Canonry')\n const visibility = result?.visibility ? mapVisibility(result.visibility) : undefined\n const siteHealth = result?.siteHealth ? mapSiteHealth(result.siteHealth, result.generatedAt) : undefined\n\n return {\n status,\n title: options.title,\n displayName,\n domain: resultDomain,\n locale: options.locale,\n form: { ...LOCAL_READY_FORM, ...options.form },\n visibility,\n siteHealth,\n notice: buildNotice(record, result),\n }\n}\n\nfunction mapStatus(record: CheckRecord): CanonryDemoViewModel['status'] {\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) return 'rate-limited'\n switch (record.status) {\n case 'queued':\n case 'running':\n return 'loading'\n case 'partial':\n return 'partial'\n case 'failed':\n return 'error'\n case 'complete':\n return 'ready'\n }\n}\n\nfunction mapVisibility(report: VisibilityReport): VisibilityViewModel {\n const providers = uniqueProviders(report.evidence)\n const denominator = report.summary.successfulChecks\n const mentioned = report.evidence.filter((row) => row.mentioned).length\n const cited = report.evidence.filter((row) => row.cited).length\n const failed = report.summary.failedChecks\n return {\n historyKind: 'snapshot',\n requestedAt: report.startedAt,\n checkedAt: report.completedAt,\n providers,\n summaries: {\n mentioned: {\n rate: percent(report.summary.mentionRate),\n numerator: mentioned,\n denominator,\n },\n cited: {\n rate: percent(report.summary.citationRate),\n numerator: cited,\n denominator,\n },\n },\n completedChecks: denominator,\n requestedChecks: denominator + failed,\n failedChecks: failed,\n evidence: report.evidence.map(mapEvidence),\n notice: failed > 0\n ? {\n tone: 'caution',\n title: `${failed} ${failed === 1 ? 'check' : 'checks'} unavailable`,\n detail: 'Mention and citation rates use completed checks only.',\n }\n : undefined,\n }\n}\n\nfunction uniqueProviders(evidence: readonly VisibilityEvidence[]): VisibilityViewModel['providers'] {\n const seen = new Map()\n for (const row of evidence) {\n if (seen.has(row.provider)) continue\n seen.set(row.provider, {\n id: row.provider,\n label: providerLabel(row.provider),\n model: row.requestedModel ?? undefined,\n })\n }\n return [...seen.values()]\n}\n\nfunction mapEvidence(row: VisibilityEvidence): QueryEvidenceViewModel {\n // The portable probe distinguishes all provider sources from the sources\n // whose URL actually matches the target. Accept the old runtime shape while\n // it rolls forward, but never mark every cited source as a target citation.\n const matchedCitationUrls = new Set(readMatchedCitationUrls(row))\n return {\n id: `${row.provider}:${row.query}:${row.completedAt}`,\n query: row.query,\n provider: row.provider,\n providerLabel: providerLabel(row.provider),\n requestedModel: row.requestedModel,\n servedModel: row.servedModel,\n completedAt: row.completedAt,\n mentioned: row.mentioned,\n cited: row.cited,\n matchedTerms: row.matchedTerms,\n answerText: row.answerText,\n sources: row.sources.map((source) => ({\n url: source.url,\n title: source.title,\n isTargetDomain: matchedCitationUrls.has(source.url),\n })),\n searchQueries: row.searchQueries,\n retrievalStatus: mapRetrievalStatus(row.retrievalStatus),\n error: row.error,\n }\n}\n\nfunction readMatchedCitationUrls(row: VisibilityEvidence): readonly string[] {\n return (row as VisibilityEvidence & { matchedCitationUrls?: readonly string[] }).matchedCitationUrls ?? []\n}\n\nfunction percent(value: number | null): number | null {\n if (value == null || !Number.isFinite(value)) return null\n return Math.max(0, Math.min(100, value * 100))\n}\n\nfunction mapRetrievalStatus(status: VisibilityEvidence['retrievalStatus']): QueryEvidenceViewModel['retrievalStatus'] {\n if (status === 'error') return 'failed'\n if (status === 'grounded') return 'success'\n if (status === 'not-grounded') return 'not-measured'\n return 'pending'\n}\n\nfunction mapSiteHealth(sample: SiteHealthSample, checkedAt: string): NonNullable {\n const complete = sample.pages.filter((page) => page.status === 'success').length\n const failed = sample.pages.filter((page) => page.status === 'error').length\n const attempted = Math.min(5, Math.max(sample.pages.length, sample.pagesObserved))\n return {\n sampleLabel: sample.label,\n score: sample.score,\n discoveredPages: sample.pagesDiscovered,\n attemptedPages: attempted,\n completedPages: complete,\n failedPages: failed,\n checkedAt,\n factors: sample.factors.map((factor) => {\n const state = factorState(sample, factor.id, factor.count)\n return {\n id: factor.id,\n label: factor.name,\n state,\n score: state === 'measured' ? factor.averageScore : null,\n detail: state === 'measured'\n ? `Measured across ${factor.count} sampled ${factor.count === 1 ? 'page' : 'pages'}.`\n : state === 'not-applicable'\n ? 'Not applicable to the sampled page types.'\n : 'Not measured in this sample.',\n }\n }),\n topFixes: topFixes(sample),\n worstPages: sample.pages.map(mapSiteHealthPage),\n terminationReason: sample.terminationReason,\n provenance: {\n schemaVersion: sample.schemaVersion,\n rootUrl: sample.rootUrl,\n finalRootUrl: sample.finalRootUrl,\n attemptedHosts: sample.attemptedHosts,\n engineVersion: readOptionalString(sample, 'engineVersion') ?? readOptionalString(sample, 'crawlEngineVersion'),\n },\n notice: sample.status === 'error' || sample.error\n ? {\n tone: 'caution',\n title: 'Site sample unavailable',\n detail: sample.error ?? 'The Technical AEO sample could not complete.',\n }\n : sample.status === 'partial'\n ? {\n tone: 'caution',\n title: 'Partial site sample',\n detail: 'Only completed pages contribute to the shown evidence.',\n }\n : sample.warnings.length\n ? { tone: 'caution', title: 'Sample warning', detail: sample.warnings[0]! }\n : undefined,\n }\n}\n\nfunction factorState(sample: SiteHealthSample, factorId: string, count: number): SiteHealthFactorViewModel['state'] {\n if (count > 0) return 'measured'\n const sampled = sample.pages.flatMap((page) => page.factors.filter((factor) => factor.id === factorId))\n if (sampled.length > 0 && sampled.every((factor) => factor.applicable === false)) return 'not-applicable'\n return 'unavailable'\n}\n\nfunction readOptionalString(value: object, key: string): string | null {\n const candidate = (value as Record)[key]\n return typeof candidate === 'string' && candidate.trim() ? candidate.trim() : null\n}\n\nfunction mapSiteHealthPage(page: SiteHealthPageSample): SiteHealthPageViewModel {\n const findings = [\n ...page.criticalDefects.map((defect) => defect.detail),\n ...page.factors.flatMap((factor) => factor.findings.map((finding) => finding.message)),\n ...(page.error ? [page.error] : []),\n ].filter(Boolean).slice(0, 6)\n return {\n url: page.url,\n score: page.score,\n status: page.status === 'error' ? 'unavailable' : (page.score ?? 0) >= 80 ? 'good' : 'needs-attention',\n findings,\n indexable: indexability(page.indexability),\n }\n}\n\nfunction topFixes(sample: SiteHealthSample): SiteHealthFixViewModel[] {\n const fixes = new Map\n }>()\n for (const page of sample.pages) {\n for (const defect of page.criticalDefects) {\n addFix(fixes, page.url, defect.recommendation || defect.detail, defect.detail)\n }\n for (const factor of page.factors) {\n for (const recommendation of factor.recommendations) {\n addFix(fixes, page.url, recommendation, factor.name)\n }\n }\n }\n return [...fixes.values()].slice(0, 3).map((fix) => ({\n id: fix.id,\n title: fix.title,\n detail: fix.detail,\n affectedPages: fix.affectedPageUrls.size,\n }))\n}\n\nfunction addFix(\n fixes: Map }>,\n pageUrl: string,\n recommendation: string,\n detail: string,\n): void {\n const title = firstSentence(recommendation || detail)\n const key = title.toLocaleLowerCase('en-US')\n if (!title) return\n const known = fixes.get(key)\n if (known) {\n known.affectedPageUrls.add(pageUrl)\n return\n }\n fixes.set(key, {\n id: `${fixes.size + 1}:${key}`,\n title,\n detail: recommendation && recommendation !== title ? recommendation : detail,\n affectedPageUrls: new Set([pageUrl]),\n })\n}\n\nfunction firstSentence(value: string): string {\n const sentence = value.split(/[.!?]\\s|[.!?]$/)[0] ?? value\n return sentence.trim().slice(0, 110)\n}\n\nfunction indexability(value: string | null): boolean | null {\n if (!value) return null\n if (value === 'eligible' || value === 'indexable') return true\n if (value === 'hidden' || value === 'failed' || value === 'not-indexable') return false\n return null\n}\n\nfunction providerLabel(provider: string): string {\n const known: Record = {\n gemini: 'Gemini',\n openai: 'OpenAI',\n claude: 'Claude',\n perplexity: 'Perplexity',\n }\n return known[provider] ?? (provider ? `${provider.slice(0, 1).toUpperCase()}${provider.slice(1)}` : 'Unknown engine')\n}\n\nfunction buildNotice(record: CheckRecord | null, result: CheckResult | null): CanonryDemoViewModel['notice'] {\n if (!record) return undefined\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) {\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: record.errorMessage ?? 'This public sample has reached its current limit. Try again later.',\n }\n }\n if (record.status === 'failed') {\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: record.errorMessage ?? 'Try another public domain later.',\n }\n }\n if (result?.errors.length) {\n const first = result.errors[0]!\n return {\n tone: 'caution',\n title: first.area === 'visibility' ? 'Visibility was unavailable' : 'Site sample was unavailable',\n detail: first.message,\n }\n }\n return undefined\n}\n\nfunction nameFromDomain(domain: string): string {\n const host = domain.replace(/^www\\./i, '').split('.')[0] ?? domain\n return host\n .replace(/[-_]+/g, ' ')\n .replace(/\\b\\w/g, (letter) => letter.toUpperCase())\n}\n",[],[184,328,354],"30630697-9c4a-43ce-a84d-3c67ca3a125b","client.ts","933a30f2-a63e-11f1-aa2a-1607ee4eb77e",23,["D",1788292311298],"/** Client-side enhancement only. The page remains usable with native forms and details. */\nexport const canonryDemoClientScript = `\n(() => {\n const tabs = Array.from(document.querySelectorAll('[data-report-tab]'));\n const panels = Array.from(document.querySelectorAll('[data-report-panel]'));\n const setTab = (name, focus) => {\n tabs.forEach((tab) => {\n const active = tab.dataset.reportTab === name;\n tab.setAttribute('aria-selected', String(active));\n tab.tabIndex = active ? 0 : -1;\n if (active && focus) tab.focus();\n });\n panels.forEach((panel) => { panel.hidden = panel.dataset.reportPanel !== name; });\n };\n tabs.forEach((tab, index) => {\n tab.addEventListener('click', () => setTab(tab.dataset.reportTab, false));\n tab.addEventListener('keydown', (event) => {\n if (!['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(event.key)) return;\n event.preventDefault();\n const target = event.key === 'Home' ? 0 : event.key === 'End' ? tabs.length - 1 : (index + (event.key === 'ArrowRight' ? 1 : tabs.length - 1)) % tabs.length;\n const next = tabs[target];\n if (next) setTab(next.dataset.reportTab, true);\n });\n });\n const metricButtons = Array.from(document.querySelectorAll('[data-visibility-metric]'));\n const metricPanels = Array.from(document.querySelectorAll('[data-visibility-panel]'));\n const metricSummaries = Array.from(document.querySelectorAll('[data-visibility-summary]'));\n metricButtons.forEach((button) => {\n button.addEventListener('click', () => {\n const metric = button.dataset.visibilityMetric;\n metricButtons.forEach((item) => {\n const active = item === button;\n item.classList.toggle('is-active', active);\n item.setAttribute('aria-pressed', String(active));\n });\n metricPanels.forEach((panel) => { panel.hidden = panel.dataset.visibilityPanel !== metric; });\n metricSummaries.forEach((summary) => { summary.hidden = summary.dataset.visibilitySummary !== metric; });\n });\n });\n\n const form = document.querySelector('[data-domain-check-form]');\n if (form) {\n const submit = form.querySelector('[data-domain-submit]');\n const busy = form.querySelector('[data-form-busy]');\n form.addEventListener('submit', () => {\n form.setAttribute('aria-busy', 'true');\n if (submit instanceof HTMLButtonElement) {\n submit.disabled = true;\n submit.setAttribute('aria-disabled', 'true');\n submit.textContent = 'Starting…';\n }\n if (busy) {\n busy.hidden = false;\n busy.textContent = 'Starting check…';\n }\n });\n }\n})();\n`\n",[],[184,328,362],"bdd01eca-55df-4b2d-8bff-52e3ec3f77da","check-form.ts","9316a416-a63e-11f1-8fd4-1607ee4eb77e",19,["D",1788292311023],"import type { ValTownConfig } from '../config/index.ts'\nimport type { CheckFormViewModel } from './types.ts'\n\ntype PublicCheckFormConfig = Pick<\n ValTownConfig,\n | 'publicChecksEnabled'\n | 'publicChecksUnavailableMessage'\n | 'humanVerificationStatus'\n | 'turnstileSiteKey'\n>\n\n/** Builds the public form from the complete admission capability, not CAPTCHA alone. */\nexport function createPublicCheckForm(config: PublicCheckFormConfig): CheckFormViewModel {\n const unavailable = !config.publicChecksEnabled\n return {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n turnstileSiteKey: unavailable ? null : config.turnstileSiteKey,\n turnstileAction: 'audit',\n verificationStatus: unavailable ? 'unavailable' : config.humanVerificationStatus,\n verificationUnavailableMessage: unavailable\n ? config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.'\n : 'Human verification is not configured. Public checks are disabled.',\n submitLabel: 'Check a domain',\n }\n}\n",[],[184,328,370],"860a6741-04fd-4cac-81b8-88fa850c061e",2,["D",1788292309086],[225,226,227,228,229,230,231],[184,328],"01568ee8-b51f-43e3-8630-3492a546a4c6","storage","927bf83a-a63e-11f1-8d00-1607ee4eb77e",9,["D",1788292310084],[],[184,383],"9872971b-6df7-4db3-a940-d575fb5071df","site-health","92bd6c2a-a63e-11f1-9f99-1607ee4eb77e",12,["D",1788292310513],[],[184,390],"ec409f06-74cc-48dc-8496-7ea08a6c02f3","url.ts","938ff438-a63e-11f1-9193-1607ee4eb77e","92429036-a63e-11f1-9a7d-1607ee4eb77e",34,["D",1788292311893],"const MAX_DOMAIN_INPUT_LENGTH = 253\n\nexport class PublicUrlError extends Error {\n override name = 'PublicUrlError'\n}\n\nexport interface NormalizedPublicDomain {\n domain: string\n rootUrl: string\n}\n\nfunction isBlockedIpv4(host: string): boolean {\n const parts = host.split('.').map(Number)\n if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) return false\n const a = parts[0]!\n const b = parts[1]!\n const c = parts[2]!\n return a === 0 ||\n a === 10 ||\n a === 127 ||\n (a === 100 && b >= 64 && b <= 127) ||\n (a === 169 && b === 254) ||\n (a === 172 && b >= 16 && b <= 31) ||\n (a === 192 && b === 0 && c === 0) ||\n (a === 192 && b === 168) ||\n (a === 198 && (b === 18 || b === 19)) ||\n a >= 224\n}\n\n/** `URL.hostname` retains brackets around an IPv6 literal. */\nfunction normalizedIpv6Literal(host: string): string | null {\n const value = host.toLowerCase()\n const unbracketed = value.startsWith('[') && value.endsWith(']') ? value.slice(1, -1) : value\n // A parsed URL hostname contains a colon only for an IPv6 literal. Do not\n // run IPv6 prefix checks against DNS names such as fda.gov or fc2.com.\n return unbracketed.includes(':') ? unbracketed : null\n}\n\nfunction isBlockedIpv6(value: string): boolean {\n return value === '::1' ||\n value === '::' ||\n value.startsWith('fe80:') ||\n value.startsWith('fc') ||\n value.startsWith('fd')\n}\n\n/**\n * Normalizes a user domain to a HTTPS root. This is a first-line guard; the\n * crawler still performs DNS and per-hop SSRF validation before every fetch.\n */\nexport function normalizePublicDomain(input: unknown): NormalizedPublicDomain {\n if (typeof input !== 'string') throw new PublicUrlError('Enter a domain.')\n const trimmed = input.trim()\n if (!trimmed || trimmed.length > MAX_DOMAIN_INPUT_LENGTH) throw new PublicUrlError('Enter a valid public domain.')\n\n const candidate = /^[a-z][a-z0-9+.-]*:\\/\\//i.test(trimmed) ? trimmed : `https://${trimmed}`\n let url: URL\n try {\n url = new URL(candidate)\n } catch {\n throw new PublicUrlError('Enter a valid public domain.')\n }\n\n if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n throw new PublicUrlError('Only HTTP(S) domains can be checked.')\n }\n if (url.username || url.password) throw new PublicUrlError('Credentials are not allowed in a domain.')\n if (url.port && url.port !== '80' && url.port !== '443') {\n throw new PublicUrlError('Only standard web ports can be checked.')\n }\n if (url.pathname !== '/' || url.search || url.hash) throw new PublicUrlError('Enter a domain, not a page URL.')\n\n const hostname = url.hostname.toLowerCase().replace(/\\.$/, '')\n if (!hostname || hostname === 'localhost' || hostname.endsWith('.localhost') || hostname.endsWith('.local')) {\n throw new PublicUrlError('Private and local hosts cannot be checked.')\n }\n if (isBlockedIpv4(hostname)) {\n throw new PublicUrlError('Private and local hosts cannot be checked.')\n }\n\n const ipv6 = normalizedIpv6Literal(hostname)\n if (ipv6) {\n if (isBlockedIpv6(ipv6)) throw new PublicUrlError('Private and local hosts cannot be checked.')\n throw new PublicUrlError('IPv6 literal domains are not supported.')\n }\n\n // URL already performs IDNA conversion. IPv6 literals were rejected above;\n // require a DNS-looking name or a public IPv4 literal.\n const isIpv4 = /^\\d{1,3}(?:\\.\\d{1,3}){3}$/.test(hostname)\n if (!isIpv4 && (!hostname.includes('.') || hostname.length > MAX_DOMAIN_INPUT_LENGTH)) {\n throw new PublicUrlError('Enter a public domain with a valid hostname.')\n }\n\n return { domain: hostname, rootUrl: `https://${hostname}/` }\n}\n\n/** The sole alternate hostname the public host may attempt after a failed root crawl. */\nexport function wwwAlternate(domain: string): string | null {\n if (/^\\d{1,3}(?:\\.\\d{1,3}){3}$/.test(domain) || domain.includes(':')) return null\n return domain.startsWith('www.') ? domain.slice(4) : `www.${domain}`\n}\n\nexport function utcDay(now: Date = new Date()): string {\n return now.toISOString().slice(0, 10)\n}\n",[],[184,405,397],"security","a0bcfaff-8b0b-4a2e-90df-4d7ad01ae08d","turnstile.ts","93acddaa-a63e-11f1-a387-1607ee4eb77e",37,["D",1788292311919],"export class HumanVerificationError extends Error {\n override name = 'HumanVerificationError'\n constructor(message: string, readonly code: 'unavailable' | 'invalid' | 'transport' = 'invalid') {\n super(message)\n }\n}\n\nexport interface HumanVerificationInput {\n token: string | null\n remoteIp: string | null\n}\n\nexport interface HumanVerifier {\n verify(input: HumanVerificationInput): Promise\n}\n\nexport interface TurnstileVerifierOptions {\n secret: string\n allowedHostnames: readonly string[]\n fetchImpl?: typeof fetch\n}\n\n/** One public form, one server-enforced action. Do not make this client/env configurable. */\nexport const TURNSTILE_AUDIT_ACTION = 'audit'\n\ninterface TurnstileResponse {\n success?: boolean\n action?: string\n hostname?: string\n ['error-codes']?: string[]\n}\n\n/** Server-side only Turnstile verification. Tokens never become stored check data. */\nexport function createTurnstileVerifier(options: TurnstileVerifierOptions): HumanVerifier {\n const allowedHostnames = new Set(options.allowedHostnames.map((hostname) => hostname.toLowerCase()))\n const fetchImpl = options.fetchImpl ?? fetch\n\n return {\n async verify({ token, remoteIp }) {\n if (!token || token.length > 2048) throw new HumanVerificationError('Complete the human verification challenge.')\n const form = new URLSearchParams({\n secret: options.secret,\n response: token,\n idempotency_key: crypto.randomUUID(),\n })\n if (remoteIp) form.set('remoteip', remoteIp)\n\n let response: Response\n try {\n response = await fetchImpl('https://challenges.cloudflare.com/turnstile/v0/siteverify', {\n method: 'POST',\n headers: { 'content-type': 'application/x-www-form-urlencoded' },\n body: form,\n signal: AbortSignal.timeout(10_000),\n })\n } catch {\n throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n }\n if (!response.ok) throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n\n let payload: TurnstileResponse\n try {\n payload = await response.json() as TurnstileResponse\n } catch {\n throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n }\n if (!payload.success) throw new HumanVerificationError('Complete the human verification challenge.')\n if (payload.action !== TURNSTILE_AUDIT_ACTION) {\n throw new HumanVerificationError('Human verification did not match this check.')\n }\n if (allowedHostnames.size > 0 && (!payload.hostname || !allowedHostnames.has(payload.hostname.toLowerCase()))) {\n throw new HumanVerificationError('Human verification did not match this site.')\n }\n },\n }\n}\n\n/** Production deliberately fails closed until a real Turnstile secret is configured. */\nexport class UnavailableHumanVerifier implements HumanVerifier {\n verify(): Promise {\n return Promise.reject(new HumanVerificationError('Human verification is not configured.', 'unavailable'))\n }\n}\n\n/** Development/test-only seam. It is never selected by a production configuration. */\nexport class LocalBypassHumanVerifier implements HumanVerifier {\n verify(): Promise {\n return Promise.resolve()\n }\n}\n",[],[184,405,407],"b8bce09a-c6af-4a10-812e-6d794b08426b",6,["D",1788292309698],[220,221],[184,405],"e28b7a02-6dfe-4e71-8516-ee38c41cd453","93a5c9fc-a63e-11f1-8fd4-1607ee4eb77e","9256932e-a63e-11f1-9a7d-1607ee4eb77e",36,["D",1788292311987],"/**\n * Runtime-neutral contracts for the public Canonry sample. The Val host owns\n * request handling and persistence; package adapters own provider and crawler\n * implementation details.\n */\n\nexport const CHECK_RESULT_SCHEMA_VERSION = '1.0' as const\n/** Controlled presentation code for native public-form quota failures. */\nexport const PUBLIC_RATE_LIMITED_ERROR_CODE = 'public-rate-limited' as const\n\nexport type CheckStatus = 'queued' | 'running' | 'complete' | 'partial' | 'failed'\n\nexport interface VisibilitySource {\n url: string\n title: string | null\n}\n\n/** A normalized, display-safe answer observation. Never place a raw provider response here. */\nexport interface VisibilityEvidence {\n query: string\n provider: string\n requestedModel: string | null\n servedModel: string | null\n completedAt: string\n answerText: string | null\n /** Null means the provider check failed; it is never silently converted to false. */\n mentioned: boolean | null\n matchedTerms: string[]\n /** Null means the provider check failed; it is never silently converted to false. */\n cited: boolean | null\n citedDomains: string[]\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: VisibilitySource[]\n searchQueries: string[]\n retrievalStatus: 'grounded' | 'not-grounded' | 'unknown' | 'error'\n error: string | null\n}\n\nexport interface VisibilitySummary {\n successfulChecks: number\n failedChecks: number\n mentionRate: number | null\n citationRate: number | null\n}\n\nexport interface VisibilityReport {\n schemaVersion: string\n domain: string\n startedAt: string\n completedAt: string\n summary: VisibilitySummary\n evidence: VisibilityEvidence[]\n}\n\nexport interface VisibilityProbeInput {\n domain: string\n /** The package may use this one capped call to derive a profile/query basket. */\n maxPlannerCalls: 1\n /** The package may issue at most this many grounded answer-engine probes. */\n maxProbeCalls: 3\n signal: AbortSignal\n}\n\n/**\n * Boundary between public-check orchestration and the Val-local visibility\n * implementation. The public result never includes raw provider responses.\n */\nexport interface VisibilityProbePort {\n probe(input: VisibilityProbeInput): Promise\n}\n\nexport interface FactorSample {\n id: string\n name: string\n score: number\n applicable: boolean | null\n findings: Array<{ code: string; message: string }>\n recommendations: string[]\n}\n\nexport interface SiteHealthPageSample {\n url: string\n status: 'success' | 'error'\n score: number | null\n depth: number | null\n indexability: string | null\n factors: FactorSample[]\n criticalDefects: Array<{\n id: string\n severity: string\n detail: string\n recommendation: string\n }>\n error: string | null\n}\n\nexport interface SiteHealthSample {\n schemaVersion: string\n label: '5-page Technical AEO sample'\n domain: string\n rootUrl: string\n finalRootUrl: string | null\n status: 'complete' | 'partial' | 'error'\n score: number | null\n pagesDiscovered: number\n pagesFetched: number\n pagesObserved: number\n elapsedMs: number\n terminationReason: string | null\n warnings: string[]\n factors: Array<{ id: string; name: string; averageScore: number; count: number }>\n pages: SiteHealthPageSample[]\n attemptedHosts: string[]\n error: string | null\n}\n\nexport interface CheckResult {\n schemaVersion: typeof CHECK_RESULT_SCHEMA_VERSION\n domain: string\n generatedAt: string\n visibility: VisibilityReport | null\n siteHealth: SiteHealthSample | null\n errors: Array<{ area: 'visibility' | 'site-health'; code: string; message: string }>\n}\n\nexport interface CheckRecord {\n id: string\n fingerprint: string\n domain: string\n status: CheckStatus\n createdAt: string\n updatedAt: string\n expiresAt: string | null\n result: CheckResult | null\n errorCode: string | null\n errorMessage: string | null\n /** A durable execution claim. It prevents two Val isolates from running one check. */\n leaseOwner: string | null\n leaseUntil: string | null\n}\n\nexport interface CheckQuotaClaim {\n scope: 'client' | 'global'\n subject: string\n day: string\n max: number\n}\n\n/**\n * A durable admission result. The store owns this whole decision so concurrent\n * Val isolates cannot independently spend quota and start the same domain.\n */\nexport type CheckAdmission =\n | { kind: 'created'; record: CheckRecord }\n | { kind: 'reused'; record: CheckRecord }\n | { kind: 'reclaimed'; record: CheckRecord }\n | { kind: 'quota-exhausted'; scope: 'client' | 'global' }\n | { kind: 'busy' }\n\nexport interface CheckAdmissionInput {\n candidate: CheckRecord\n now: string\n clientQuota: CheckQuotaClaim\n globalQuota: CheckQuotaClaim\n}\n\nexport interface CheckStore {\n initialize(): Promise\n /**\n * Atomically reuse an active/fresh check, reclaim a crashed lease, or spend\n * quota and create one new record. Production executes this as one durable\n * SQLite admission batch; callers must not compose these steps.\n */\n admit(input: CheckAdmissionInput): Promise\n /** Legacy/read seam used by tests and status helpers; it never returns an expired running lease. */\n findReusable(fingerprint: string, now: string): Promise\n create(record: CheckRecord): Promise\n get(id: string): Promise\n update(\n id: string,\n patch: Partial>,\n ): Promise\n /** Atomically transition a queued/stale check to running and attach a per-check lease. */\n claimJob(id: string, owner: string, now: string, leaseUntil: string): Promise\n /** Publish a terminal result only if this isolate still owns the per-check lease. */\n finalizeJob(\n id: string,\n owner: string,\n patch: Partial>,\n ): Promise\n /** Return an unstarted claimed job to the durable queue when global capacity is occupied. */\n requeueJob(id: string, owner: string, now: string): Promise\n /** One active paid/public check at a time, with expiry so a crashed isolate recovers. */\n claimGlobalLease(name: string, holder: string, now: string, leaseUntil: string): Promise\n releaseGlobalLease(name: string, holder: string): Promise\n /** Atomically spend one unit only while the current UTC-day total is below max. */\n claimQuota(scope: string, subject: string, day: string, max: number): Promise\n}\n\nexport interface SiteHealthRunner {\n run(domain: string, signal: AbortSignal): Promise\n}\n\n/**\n * Internal-only handoff for a request that already reserved the one global\n * execution slot before durable admission. It is never derived from client\n * input or exposed by the public API.\n */\nexport interface PublicCheckDispatchOptions {\n executionLeaseOwner?: string\n}\n\nexport interface PublicCheckRunner {\n run(checkId: string, options?: PublicCheckDispatchOptions): Promise<'completed' | 'busy' | 'ignored'>\n}\n\nexport interface JobDispatcher {\n dispatch(checkId: string, options?: PublicCheckDispatchOptions): Promise<'completed' | 'busy' | 'ignored'>\n}\n",[],[184,427,320],"runtime","32337a79-34bd-4825-bc29-e031191682b9","records.ts","93b29a9c-a63e-11f1-965f-1607ee4eb77e",38,["D",1788292312042],"/**\n * Shared record identity and lifetime rules.\n *\n * Both the HTTP app and the MCP endpoint resolve checks and decide whether one\n * is still readable. Two copies of either rule would drift silently: a\n * mismatched fingerprint makes the MCP endpoint miss cached work the UI can\n * see, and a mismatched expiry lets one surface serve a result the other has\n * already retired.\n */\nimport type { CheckRecord } from './types.ts'\n\n/**\n * Reuse identity for a domain check. It is versioned because it keys the cache\n * and the one-active-check index: changing what a check measures without\n * changing this prefix would let an old result answer a new question.\n */\nexport function checkFingerprint(domain: string): string {\n return `visibility-v1:${domain}`\n}\n\n/** A record with no `expiresAt` never expires; anything at or past it is gone. */\nexport function isCheckExpired(record: CheckRecord, at: Date): boolean {\n if (!record.expiresAt) return false\n const expiresAt = Date.parse(record.expiresAt)\n return Number.isFinite(expiresAt) && expiresAt <= at.getTime()\n}\n",[],[184,427,429],"eb2d53de-7095-4756-867a-252fd03349cc",["D",1788292309828],[217,218],[184,427],"01c6d3d9-d0c9-45d6-a1e5-c8cd31e1cc50","tools.ts","93d9894a-a63e-11f1-8fd4-1607ee4eb77e","9269bbca-a63e-11f1-8d00-1607ee4eb77e",41,["D",1788292312291],"/**\n * The MCP tool surface: reads over checks this val has already run, plus the\n * bundled skills for clients that do not implement MCP resources.\n *\n * Every tool but `start_check` is a read, and `start_check` runs the host's\n * full admission path — same global daily cap, same single execution lease,\n * same cache reuse — differing only in that it skips Turnstile, which an agent\n * cannot solve, and spends from its own tighter per-caller bucket. The global\n * cap is what bounds the bill; Turnstile bounds fairness, so this widens who\n * may spend the budget without widening the budget.\n *\n * Results are JSON in a text block rather than `structuredContent`, because\n * every client across both protocol eras renders text content, while typed\n * output is newer and unevenly implemented.\n */\nimport { checkFingerprint, isCheckExpired } from '../runtime/records.ts'\nimport type { CheckRecord, CheckStore, VisibilityEvidence } from '../runtime/types.ts'\nimport { normalizePublicDomain, PublicUrlError } from '../security/url.ts'\nimport { listSkillResources, readSkillResource, skillIndex } from './resources.ts'\n\nconst CHECK_ID = /^[0-9a-f-]{36}$/i\n\nexport interface McpToolDefinition {\n name: string\n title: string\n description: string\n inputSchema: Record\n}\n\nexport interface McpToolResult {\n content: Array<{ type: 'text'; text: string }>\n isError?: boolean\n}\n\n/** Runs the host's full admission path; absent when the host disables MCP starts. */\nexport type StartCheckFn = (\n domain: string,\n remoteIp: string | null,\n) => Promise<{ record: CheckRecord; reused: boolean }>\n\nexport interface McpToolContext {\n store: CheckStore\n now: () => Date\n startCheck?: StartCheckFn\n /** Edge-provided caller identity, used only as the quota subject. */\n remoteIp?: string | null\n}\n\nfunction ok(payload: unknown): McpToolResult {\n return { content: [{ type: 'text', text: JSON.stringify(payload, null, 2) }] }\n}\n\nfunction fail(message: string, hint?: string): McpToolResult {\n return {\n content: [{ type: 'text', text: JSON.stringify(hint ? { error: message, hint } : { error: message }, null, 2) }],\n isError: true,\n }\n}\n\nconst TARGET_SCHEMA = {\n type: 'object',\n properties: {\n checkId: { type: 'string', description: 'A check ID returned by a previous tool call or shown in the web UI.' },\n domain: {\n type: 'string',\n description:\n 'A domain such as \"example.com\". Resolves the most recent cached check; it never starts one. Use start_check ' +\n 'to run a fresh check.',\n },\n },\n additionalProperties: false,\n} as const\n\n/**\n * Resolve either addressing mode to a readable record.\n *\n * A domain lookup only ever finds work the val already did — it never starts\n * a check — so a miss is reported as a miss rather than quietly queuing paid\n * work the caller did not ask for.\n */\nasync function resolveCheck(\n context: McpToolContext,\n args: Record,\n): Promise<{ record: CheckRecord } | { error: McpToolResult }> {\n const checkId = typeof args.checkId === 'string' ? args.checkId.trim() : ''\n const domain = typeof args.domain === 'string' ? args.domain.trim() : ''\n\n if (!checkId && !domain) return { error: fail('Provide either \"checkId\" or \"domain\".') }\n\n const now = context.now()\n\n if (checkId) {\n if (!CHECK_ID.test(checkId)) return { error: fail(`\"${checkId}\" is not a valid check ID.`) }\n const record = await context.store.get(checkId)\n if (!record || isCheckExpired(record, now)) {\n return { error: fail(`No check found for ID \"${checkId}\".`, 'Public checks expire; run a new one from the web UI.') }\n }\n return { record }\n }\n\n let normalized: string\n try {\n normalized = normalizePublicDomain(domain).domain\n } catch (error) {\n return { error: fail(error instanceof PublicUrlError ? error.message : 'Enter a valid public domain.') }\n }\n\n const record = await context.store.findReusable(checkFingerprint(normalized), now.toISOString())\n if (!record) {\n return {\n error: fail(\n `No cached check for \"${normalized}\".`,\n 'Run one with start_check, or from the web UI, then read it here.',\n ),\n }\n }\n return { record }\n}\n\n/** Shared envelope so every tool reports status and freshness the same way. */\nfunction recordEnvelope(record: CheckRecord) {\n return {\n checkId: record.id,\n domain: record.domain,\n status: record.status,\n createdAt: record.createdAt,\n updatedAt: record.updatedAt,\n expiresAt: record.expiresAt,\n error: record.errorCode ? { code: record.errorCode, message: record.errorMessage } : null,\n }\n}\n\n/**\n * Mention and citation are independent signals and are always reported as a\n * pair. A rate is null when nothing succeeded, never 0 — a provider failure is\n * an absent measurement, not a miss, and collapsing the two would report a site\n * as invisible when the check simply did not complete.\n */\nfunction visibilitySummary(record: CheckRecord) {\n const visibility = record.result?.visibility\n if (!visibility) return { measured: false as const }\n return {\n measured: true as const,\n scope: 'non-brand',\n scopeNote: 'Queries are generated non-brand queries, so the project cannot be handed its own answer.',\n successfulChecks: visibility.summary.successfulChecks,\n failedChecks: visibility.summary.failedChecks,\n mentionRate: visibility.summary.mentionRate,\n citationRate: visibility.summary.citationRate,\n rateNote: 'Rates are over successful checks only. A null rate means nothing succeeded, not a rate of zero.',\n startedAt: visibility.startedAt,\n completedAt: visibility.completedAt,\n }\n}\n\nfunction siteHealthSummary(record: CheckRecord) {\n const siteHealth = record.result?.siteHealth\n if (!siteHealth) return { measured: false as const }\n return {\n measured: true as const,\n label: siteHealth.label,\n status: siteHealth.status,\n score: siteHealth.score,\n pagesDiscovered: siteHealth.pagesDiscovered,\n pagesFetched: siteHealth.pagesFetched,\n pagesObserved: siteHealth.pagesObserved,\n terminationReason: siteHealth.terminationReason,\n warnings: siteHealth.warnings,\n error: siteHealth.error,\n }\n}\n\nfunction evidenceRow(evidence: VisibilityEvidence) {\n return {\n query: evidence.query,\n provider: evidence.provider,\n servedModel: evidence.servedModel,\n completedAt: evidence.completedAt,\n // Both signals, always. `null` on either means that check failed.\n mentioned: evidence.mentioned,\n matchedTerms: evidence.matchedTerms,\n cited: evidence.cited,\n matchedCitationDomains: evidence.matchedCitationDomains,\n matchedCitationUrls: evidence.matchedCitationUrls,\n citedDomains: evidence.citedDomains,\n sources: evidence.sources,\n searchQueries: evidence.searchQueries,\n retrievalStatus: evidence.retrievalStatus,\n answerText: evidence.answerText,\n error: evidence.error,\n }\n}\n\n/**\n * The conversion path. An agent that has just shown a user their coverage is\n * exactly where \"how do I get this properly\" gets asked, and without this it\n * would have to guess at an install command.\n */\nconst SELF_HOST_TOOL: McpToolDefinition = {\n name: 'self_host',\n title: 'How to self-host Canonry',\n description:\n 'How to run the full Canonry platform instead of this bounded sample: install command, repository, docs, and ' +\n 'what self-hosting adds over this endpoint. Call it when the user asks for more engines, scheduled tracking, ' +\n 'more queries, their own data, or how any of this actually works.',\n inputSchema: { type: 'object', properties: {}, additionalProperties: false },\n}\n\nconst START_CHECK_TOOL: McpToolDefinition = {\n name: 'start_check',\n title: 'Run a new Canonry check',\n description:\n 'Run a fresh check for a domain: three grounded Gemini queries plus a bounded Technical AEO page sample. ' +\n 'Blocks until the check finishes, up to about 45 seconds, and returns the same shape as get_check. A domain ' +\n 'checked in the last 24 hours returns the cached result immediately and costs nothing. Daily limits apply.',\n inputSchema: {\n type: 'object',\n properties: { domain: { type: 'string', description: 'A domain such as \"example.com\".' } },\n required: ['domain'],\n additionalProperties: false,\n },\n}\n\nconst READ_TOOLS: readonly McpToolDefinition[] = [\n SELF_HOST_TOOL,\n {\n name: 'get_check',\n title: 'Get a Canonry check',\n description:\n 'Status and headline numbers for one domain check: AI visibility (mention and citation rates over non-brand ' +\n 'queries) and the bounded Technical AEO site sample. Address it by checkId or by domain. Reads existing work ' +\n 'only — it never starts a new check.',\n inputSchema: TARGET_SCHEMA,\n },\n {\n name: 'get_ai_visibility',\n title: 'Get AI visibility evidence',\n description:\n 'Per query and answer engine evidence for one check. Every row carries \"mentioned\" (the brand appears in the ' +\n 'answer text) and \"cited\" (the domain appears in the sources behind the answer) as independent signals, plus ' +\n 'the answer text, the cited domains and URLs, and the search queries the engine issued. A null signal means ' +\n 'that check failed and was not measured.',\n inputSchema: TARGET_SCHEMA,\n },\n {\n name: 'get_site_health',\n title: 'Get Technical AEO site sample',\n description:\n 'The bounded Technical AEO sample for one check: overall score, per-factor averages, and per-page scores with ' +\n 'findings, critical defects, and recommendations. This is a small page sample, not a whole-site audit.',\n inputSchema: TARGET_SCHEMA,\n },\n {\n name: 'list_skills',\n title: 'List Canonry skill documents',\n description:\n 'Index of the bundled canonry (operator) and aero (analyst) skill documents available from this endpoint. ' +\n 'Entry points come first; read one with read_skill. Clients that support MCP resources can read the same ' +\n 'documents from resources/list.',\n inputSchema: { type: 'object', properties: {}, additionalProperties: false },\n },\n {\n name: 'read_skill',\n title: 'Read a Canonry skill document',\n description:\n 'Read one skill document as markdown. Accepts a canonry-skill:// URI or a path such as ' +\n '\"aero/references/regression-playbook.md\". Start with an entry point from list_skills, then open the ' +\n 'reference the task calls for.',\n inputSchema: {\n type: 'object',\n properties: {\n uri: { type: 'string', description: 'A canonry-skill:// URI, or \"/\", or a bare reference path.' },\n },\n required: ['uri'],\n additionalProperties: false,\n },\n },\n]\n\n/** The advertised catalog. `start_check` appears only when the host can honour it. */\nexport function mcpTools(context: McpToolContext): readonly McpToolDefinition[] {\n return context.startCheck ? [...READ_TOOLS, START_CHECK_TOOL] : READ_TOOLS\n}\n\nexport async function callMcpTool(\n context: McpToolContext,\n name: string,\n args: Record,\n): Promise {\n switch (name) {\n case 'get_check': {\n const resolved = await resolveCheck(context, args)\n if ('error' in resolved) return resolved.error\n return ok({\n ...recordEnvelope(resolved.record),\n aiVisibility: visibilitySummary(resolved.record),\n siteHealth: siteHealthSummary(resolved.record),\n partialErrors: resolved.record.result?.errors ?? [],\n })\n }\n\n case 'get_ai_visibility': {\n const resolved = await resolveCheck(context, args)\n if ('error' in resolved) return resolved.error\n const visibility = resolved.record.result?.visibility\n if (!visibility) {\n return ok({\n ...recordEnvelope(resolved.record),\n measured: false,\n reason: resolved.record.status === 'queued' || resolved.record.status === 'running'\n ? 'The check is still running.'\n : 'This check has no AI visibility result.',\n })\n }\n return ok({\n ...recordEnvelope(resolved.record),\n summary: visibilitySummary(resolved.record),\n evidence: visibility.evidence.map(evidenceRow),\n })\n }\n\n case 'get_site_health': {\n const resolved = await resolveCheck(context, args)\n if ('error' in resolved) return resolved.error\n const siteHealth = resolved.record.result?.siteHealth\n if (!siteHealth) {\n return ok({\n ...recordEnvelope(resolved.record),\n measured: false,\n reason: resolved.record.status === 'queued' || resolved.record.status === 'running'\n ? 'The check is still running.'\n : 'This check has no Technical AEO result.',\n })\n }\n return ok({\n ...recordEnvelope(resolved.record),\n summary: siteHealthSummary(resolved.record),\n rootUrl: siteHealth.rootUrl,\n finalRootUrl: siteHealth.finalRootUrl,\n factors: siteHealth.factors,\n pages: siteHealth.pages,\n })\n }\n\n case 'start_check': {\n if (!context.startCheck) return fail('Starting a check is not enabled on this endpoint.')\n const domain = typeof args.domain === 'string' ? args.domain.trim() : ''\n if (!domain) return fail('Provide a \"domain\".')\n try {\n const { record, reused } = await context.startCheck(domain, context.remoteIp ?? null)\n return ok({\n ...recordEnvelope(record),\n reused,\n aiVisibility: visibilitySummary(record),\n siteHealth: siteHealthSummary(record),\n partialErrors: record.result?.errors ?? [],\n })\n } catch (error) {\n // The host throws typed admission failures (quota, capacity, invalid\n // domain). Their messages are already caller-safe and actionable.\n return fail(error instanceof Error ? error.message : 'The check could not be started.')\n }\n }\n\n case 'self_host':\n return ok({\n summary:\n 'This endpoint is a bounded sample. Canonry is the full platform it samples: open source, self-hosted, ' +\n 'agent-first, with your own data in local SQLite.',\n install: 'npm install -g @canonry/canonry',\n quickstart: [\n 'npm install -g @canonry/canonry',\n 'canonry init',\n 'canonry project create my-site --domain example.com --country US --language en',\n 'canonry query add my-site \"best example widgets\"',\n 'canonry run my-site',\n 'canonry visibility-stats my-site',\n ],\n repository: 'https://github.com/Canonry/canonry',\n website: 'https://canonry.ai',\n package: 'https://www.npmjs.com/package/@canonry/canonry',\n license: 'FSL-1.1-ALv2',\n whatSelfHostingAdds: [\n 'All four answer engines — Gemini, ChatGPT, Claude, Perplexity — not Gemini alone.',\n 'Unlimited tracked queries and scheduled sweeps, instead of 3 generated queries on demand.',\n 'Whole-site technical audits, instead of a 5-page sample.',\n 'History, trends, competitor mention share, and regression insights over time.',\n 'Google Search Console, GA4, Bing, Business Profile, and server-side traffic joined to the same view.',\n 'Your own MCP server (canonry-mcp, 188 tools) and the built-in Aero analyst agent.',\n 'Your data stays in your own SQLite database.',\n ],\n skills:\n 'The canonry and aero skill documents served by this endpoint are the same playbooks a local install ' +\n 'ships. Read canonry-skill://canonry/SKILL.md to operate the CLI.',\n })\n\n case 'list_skills':\n return ok({ skills: skillIndex(), resources: listSkillResources().length })\n\n case 'read_skill': {\n const uri = typeof args.uri === 'string' ? args.uri.trim() : ''\n if (!uri) return fail('Provide a skill document \"uri\".')\n const contents = readSkillResource(uri)\n if (!contents) {\n return fail(`No skill document matches \"${uri}\".`, 'Call list_skills for the available URIs.')\n }\n return { content: [{ type: 'text', text: contents.text }] }\n }\n\n default:\n return null\n }\n}\n",[],[184,449,441],"mcp","0f16cbfc-2035-48da-893f-092c47b72357","skill-types.ts","93c6ea42-a63e-11f1-9a7d-1607ee4eb77e",40,["D",1788292312217],"/**\n * One bundled skill document, served as an MCP resource.\n *\n * The shape mirrors how the skills are meant to be read: `entryPoint` marks\n * `SKILL.md`, which a connecting agent should load first, and everything else\n * is a reference it opens only when the task calls for it. That is the same\n * lazy-load contract the skills already have in a local install, so an agent\n * reaching them over MCP does not need a second set of rules.\n */\nexport interface SkillDocument {\n /** Stable `canonry-skill:///` identity. */\n uri: string\n skill: string\n /** Path relative to the skill root, for example `references/reporting.md`. */\n path: string\n title: string\n /**\n * For an entry point this is the skill's frontmatter `description` — its\n * entire trigger surface. For a reference it names the owning skill.\n */\n description: string\n entryPoint: boolean\n characters: number\n content: string\n}\n",[],[184,449,451],"ccfbc8ea-f94f-4497-a994-e882d008b341","resources.ts","93b7d796-a63e-11f1-9193-1607ee4eb77e",39,["D",1788292312132],"/**\n * The bundled `canonry` and `aero` skills, served as MCP resources.\n *\n * This is the half of the endpoint that makes the other half worth connecting\n * to. Coverage numbers on their own need interpretation — which signal moved,\n * whether the denominator is comparable, what to do next — and that\n * interpretation is exactly what the two skills already write down. An agent\n * that reads them alongside the data behaves like an analyst instead of a JSON\n * pretty-printer.\n *\n * `resources/list` returns entry points and references together, with\n * `SKILL.md` first, so a client can load the entry point and open a reference\n * only when the task calls for it. That is the same contract a local install\n * has, so nothing new has to be explained to the agent.\n */\nimport type { SkillDocument } from './skill-types.ts'\nimport { SKILL_DOCUMENTS } from './skills/catalog.ts'\n\nexport const SKILL_RESOURCE_MIME_TYPE = 'text/markdown'\n\nexport interface McpResourceDescriptor {\n uri: string\n name: string\n title: string\n description: string\n mimeType: string\n}\n\nexport interface McpResourceContents {\n uri: string\n mimeType: string\n text: string\n}\n\n/** Entry points first, then references, each group alphabetical by URI. */\nconst ORDERED_DOCUMENTS: readonly SkillDocument[] = [...SKILL_DOCUMENTS].sort((a, b) => {\n if (a.entryPoint !== b.entryPoint) return a.entryPoint ? -1 : 1\n return a.uri.localeCompare(b.uri)\n})\n\nconst BY_URI = new Map(ORDERED_DOCUMENTS.map((document) => [document.uri, document]))\n\n/**\n * Also index by `/` and by bare path so a caller that reconstructs\n * a reference from prose in `SKILL.md` — which links them as\n * `references/reporting.md` — reaches the document instead of a not-found.\n */\nconst BY_ALIAS = new Map()\nfor (const document of ORDERED_DOCUMENTS) {\n BY_ALIAS.set(`${document.skill}/${document.path}`, document)\n const bare = document.path\n // A bare path is ambiguous only if two skills share it; first one wins and\n // the qualified form above always remains exact.\n if (!BY_ALIAS.has(bare)) BY_ALIAS.set(bare, document)\n}\n\nexport function listSkillResources(): McpResourceDescriptor[] {\n return ORDERED_DOCUMENTS.map((document) => ({\n uri: document.uri,\n name: `${document.skill}/${document.path}`,\n title: document.title,\n description: document.entryPoint\n ? `Entry point for the ${document.skill} skill. ${document.description}`\n : document.description,\n mimeType: SKILL_RESOURCE_MIME_TYPE,\n }))\n}\n\nexport function findSkillDocument(uri: string): SkillDocument | null {\n const trimmed = uri.trim()\n return BY_URI.get(trimmed) ?? BY_ALIAS.get(trimmed.replace(/^canonry-skill:\\/\\//, '')) ?? null\n}\n\nexport function readSkillResource(uri: string): McpResourceContents | null {\n const document = findSkillDocument(uri)\n if (!document) return null\n return { uri: document.uri, mimeType: SKILL_RESOURCE_MIME_TYPE, text: document.content }\n}\n\n/** Compact index used by the `read_skill` tool, for clients without resource support. */\nexport function skillIndex(): Array<{ uri: string; skill: string; path: string; title: string; entryPoint: boolean }> {\n return ORDERED_DOCUMENTS.map((document) => ({\n uri: document.uri,\n skill: document.skill,\n path: document.path,\n title: document.title,\n entryPoint: document.entryPoint,\n }))\n}\n",[],[184,449,459],"ceed4eda-5188-4cd3-9d3d-b42272bd8ba0","canonry-references-google-business-profile.0.ts","93ebebf8-a63e-11f1-91a7-1607ee4eb77e","92d014b0-a63e-11f1-8fd4-1607ee4eb77e",43,["D",1788292312311],"// Generated by scripts/sync-val-town-skills.mjs. Do not edit.\n// Source of truth: skills// at the repository root.\nexport const part = \"# Google Business Profile Integration\\n\\nCanonry integrates with the Google Business Profile (GBP) API to surface local AEO signals: search-keyword impressions, daily performance metrics, hotel lodging attributes, and booking/reservation CTAs (plus reviews on the projects where Google has granted v4 access — see the gating section). This data feeds the local-AEO dashboard and the Aero analyst.\\n\\n> **Q&A is not available.** Google **retired** the My Business Q&A API (`mybusinessqanda.googleapis.com`) on 2025-11-03, and began winding down the public Q&A section on profiles shortly after. There is no programmatic way to read or write profile Q&A. Don't plan around it.\\n\\n## What Canonry Automates\\n\\n- Discover GBP accounts and locations the connected user manages, with explicit per-location selection\\n- Sync search-keyword impressions aggregated over a date window (default ~12 months; stored with `periodStart`/`periodEnd`)\\n- Sync daily performance metrics — impressions, website clicks, call clicks, direction requests (all 11 `DailyMetric`s)\\n- For hotels: sync lodging attributes (amenities, accessibility, pets, etc.) and place action links (booking CTAs)\\n- Roll the above into a composite summary scorecard (`canonry gbp summary`)\\n- Sync reviews per location — **only where Google has granted v4 access** (gated; unavailable on most projects — see below)\\n\\n## What Stays Manual\\n\\n- Replying to reviews (Phase 4 — write surface)\\n- Posting local posts / offers (Phase 4)\\n- Updating lodging attributes (Phase 4)\\n- Pub/Sub notifications setup (Phase 4)\\n\\nFor now, canonry is read-only on GBP. The Aero agent can draft suggested replies, but applying them is manual.\\n\\n## Hard Prerequisite: API Access Approval\\n\\n**Before anything works**, your Google Cloud project must be approved through Google's Business Profile API Basic Access form. Until approved, every API call returns HTTP 403 / 0 QPM — regardless of OAuth scope or which APIs you've enabled.\\n\\n### Eligibility requirements\\n\\nFrom [Google's prerequisites doc](https://developers.google.com/my-business/content/prereqs#request-access):\\n\\n- **Active Verified Profile** — \\\"Manage a Google Business Profile that is verified and active for 60+ days.\\\"\\n- **Website Requirement** — \\\"Have a website representing the business listed on the GBP.\\\"\\n- **Profile Completeness** — Google recommends the profile be \\\"fully complete and kept up-to-date with the current business information.\\\"\\n\\nBrand-new profiles (under 60 days) and profiles with no associated website are not eligible.\\n\\n### Submitting the access request\\n\\n1. Go to the GBP API contact form: \\n2. Select **\\\"Application for Basic API Access\\\"** from the dropdown.\\n3. Provide:\\n - Your **Google Cloud Console project number** (Cloud Console → Project Info dashboard, *not* the project ID)\\n - Email address listed as an **owner or manager** on the target GBP profile\\n\\n### Approval timeline\\n\\n- Google sends a follow-up email after review (timing varies; common reports are days to a few weeks).\\n- Approval is signaled by a **quota change** in Google Cloud Console:\\n - **Not approved**: quota is **0 QPM** (Queries Per Minute) — every API call returns 403.\\n - **Approved**: quota is **300 QPM** — all enabled APIs become callable.\\n\\nCheck quota at Cloud Console → APIs & Services → quotas, filtered by one of the GBP APIs.\\n\\n## GCP Setup\\n\\n### Enable the right APIs\\n\\nIn Cloud Console → APIs & Services → Library, enable:\\n\\n| API | Purpose |\\n|---|---|\\n| My Business Account Management API | List accounts |\\n| My Business Business Information API | List locations + place action links |\\n| Business Profile Performance API | Daily metrics + monthly search keywords |\\n| My Business Verifications API | (optional) Voice-of-Merchant state |\\n| **My Business Lodging API** | **Hotel attributes — required if working with lodging properties** |\\n| **My Business Place Actions API** | **Booking / reservation CTAs — required if hotels or restaurants use them** |\\n\\n**Do NOT enable \\\"My Business Q&A API\\\"** — Google **retired** it on 2025-11-03. It's listed in some older setup docs but no longer functions.\\n\\n### The legacy \\\"Google My Business API\\\" (v4 — reviews)\\n\\nThe **reviews** endpoint lives on the legacy `mybusiness.googleapis.com` (v4), a separate API from the v1 family above. It is the single biggest stumbling block, and **production testing (May 2026) proved the Basic API Access approval does NOT grant it.**\\n\\nWhat we confirmed, with a project approved and running the v1 family at 300 QPM, authenticated as the exact approved account with the `business.manage` scope:\\n\\n- The v4 reviews call still returns `403 SERVICE_DISABLED`.\\n- The API is **not searchable in the API Library** — the library page returns \\\"Failed to load.\\\"\\n- `gcloud services enable mybusiness.googleapis.com` returns `PERMISSION_DENIED` reason `110002` (`AUTH_PERMISSION_DENIED`) **even as the approved account** — this is the signature of a producer-restricted (Google-allowlisted) service that the project owner cannot toggle.\\n- Per Google's [Basic setup](https://developers.google.com/my-business/content/basic-setup) doc: *\\\"The Google My Business API is only visible in the Google API Console to users who submit and receive approval for their Google Account through the access request form.\\\"*\\n\\n**Conclusion:** the v4 GMB API is gated independently of the v1 approval and Google controls the switch. The only routes are (1) the **shortcut \\\"enable\\\" link from the access-approval email**, opened as the approved account in the browser, or (2) replying to the access-request thread asking Google to enable `mybusiness.googleapis.com` for your project number. Self-service (library, gcloud) does not work. Build reviews behind this gate and ship the rest without it.\\n\\n**Account-credential gotcha:** API calls use your **Application Default Credentials** (`gcloud auth application-default login` → `print-access-token`), while `gcloud services enable` uses the separate **gcloud CLI account** (`gcloud config get-value account`). These can be different identities. Verify the token's real account with `curl \\\"https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=$TOKEN\\\"` before concluding anything about access — a \\\"wrong account\\\" symptom is often just the two credential stores disagreeing.\\n\\n### Create OAuth client credentials\\n\\n1. Cloud Console → APIs & Services → **OAuth consent screen** → set up consent (External works). Add your own email under \\\"Test users\\\" while the app is in test mode.\\n2. Cloud Console → APIs & Services → **Credentials** → **+ Create Credentials** → **OAuth client ID**.\\n3. Application type: **Web application**.\\n4. Authorized redirect URIs: `http://localhost:53682/callback` (or whatever port canonry's connect flow uses — match it exactly).\\n5. Save the **Client ID** and **Client secret**.\\n\\n### Store credentials for canonry\\n\\nEither set env vars before running CLI commands:\\n\\n```bash\\nexport GOOGLE_CLIENT_ID=\\\"…\\\"\\nexport GOOGLE_CLIENT_SECRET=\\\"…\\\"\\n```\\n\\nOr persist them in `~/.canonry/config.yaml`:\\n\\n```yaml\\ngoogle:\\n clientId: \\\"your-client-id\\\"\\n clientSecret: \\\"your-client-secret\\\"\\n```\\n\\nOAuth tokens (per-user, obtained at connect time) are stored in the same file under `google.connections`. They are never written to the canonry database.\\n\\n## Connect a Project\\n\\nOnce GCP setup is done and the access form is approved:\\n\\n```bash\\ncanonry gbp connect \\ncanonry gbp accounts # list accessible accounts (pick one)\\ncanonry gbp locations discover --account accounts/123 # discover that account's locations\\ncanonry gbp locations # verify discovered locations\\ncanonry gbp sync --wait # run a first sync\\ncanonry gbp summary # check derived metrics\\n```\\n\\nThe OAuth scope requested is `https://www.googleapis.com/auth/business.manage`. **There is no read-only variant** — Google does not publish one. The consent screen will say \\\"manage your business profile\\\" even though canonry's read-only surface cannot write anything until Phase 4.\\n\\n### Account selection is per project\\n\\nA single OAuth user often manages **multiple GBP accounts** (a personal account, a location group, agency-managed businesses). Each canonry project tracks **one** account's locations — so to track two businesses, use two projects.\\n\\n- **List accounts:** `canonry gbp accounts ` (API `GET /gbp/accounts`, MCP `canonry_gbp_accounts`) shows every account the connection can see, with its `accounts/{n}` resource name.\\n- **Pick one at discover time:** `canonry gbp locations discover --account accounts/{n}`. Omitting `--account` reuses the account the project already tracks; on the very first discover with no `--account`, canonry falls back to the **first** account the user can see — so if you manage more than one account, always pass `--account` the first time to avoid silently tracking the wrong business.\\n- **Switching accounts is destructive:** re-pointing a project at a *different* account would drop the old account's locations and all its synced data, so it's rejected unless you pass `--switch-account` (API `switchAccount: true`). You can also `canonry gbp disconnect ` (which now clears the project's entire GBP footprint) and start fresh.\\n\\n## The Summary Scorecard (`canonry gbp summary`)\\n\\n`canonry gbp summary [--location locations/XXX]` (API: `GET /gbp/summary`, MCP: `canonry_gbp_summary`) is the single composite read that rolls every synced GBP surface into one scorecard. All math lives in the API (`buildGbpSummary`) — the CLI and dashboard only render it, so `--format json` matches the API response field-for-field. Fields:\\n\\n- **`scope`** — `{ locationName, locationCount }`. `locationName` is null when summarizing across all selected locations.\\n- **`performance`** — daily-metric roll-up:\\n - `totals` — sum per `DailyMetric` over everything synced.\\n - `recent7d` / `prior7d` — per-metric sums for the last 7 days vs the 7 days before, anchored to the **last complete (non-zero) day** (`freshness.dataThroughDate`), not wall-clock and not the max stored date. GBP data lags ~2–3 days and the trailing days can arrive as not-yet-reported zeros; anchoring to the last complete day keeps those lag zeros out of the recent window so a reporting-lag artifact is never shown as a real decline (#658). Both maps are backfilled with the union of metrics as explicit `0`s.\\n - `deltaPct` — percent change recent-vs-prior per metric, **over complete days only**; **`null` when the prior window is `0`** (no divide-by-zero, and \\\"appeared from nothing\\\" is not a percentage).\\n- **`freshness`** — `{ dataThroughDate, latestStoredDate, pendingDays }` (#658). `dataThroughDate` is the last day with reported activity; `latestStoredDate` is the max stored date (≥ dataThroughDate when the lag tail was stored as zeros); `pendingDays` is how many trailing days are still pending vs today. Renderers show \\\"data through <date> · Nd pending\\\" and never treat the tail as a drop.\\n- **`timeseries`** — `[{ date, pending, metrics }]` over the most recent ~30 days, for the trend charts. Each day carries every in-window metric (0 where absent that day) and a `pending` flag marking the reporting-lag tail.\\n- **`keywords`** — `{ total, thresholdedCount, thresholdedPct }`. `thresholdedPct` (0–100) is the share of keywords whose exact count Google redacted — your headline data-fidelity number (expect ~89% for a busy hotel, 100% for an SMB).\\n- **`placeActions`** — `{ total, hasReservationCta, hasBookingCta, hasDirectMerchantCta }`. `hasDirectMerchantCta` is false when the only booking links are OTA/aggregator (Expedia/Booking) — a recommendation to add a direct CTA.\\n- **`lodging`** — `{ lodgingLocationCount, populatedLodgingCount, emptyLodgingCount }`. `emptyLodgingCount` counts lodging-capable locations whose Lodging API response contains zero readable structured groups. That is common even for complete hotels (the owner-set \\\"Hotel details\\\" amenity panel can be populated while this API response is still only `{name}`), so it is a verify signal, not a confirmed gap.\\n\\n## Scheduling\\n\\n`gbp-sync` is a schedulable run kind (alongside `answer-visibility` and `traffic-sync`). It needs no source — it syncs the project's selected locations:\\n\\n```bash\\ncanonry schedule set --kind gbp-sync --preset daily\\ncanonry schedule show --kind gbp-sync\\n```\\n\\nOne schedule row per `(project, kind)`, so a GBP sync schedule coexists with a visibility-sweep schedule. The scheduler creates the `gbp-sync` run and runs the same worker the manual `canonry gbp sync` uses; on completion the run flows through the post-run pipeline (insights + Aero wake-up).\\n\\n## Health Checks (`canonry doctor`)\\n\\n```bash\\ncanonry doctor --project --check 'gbp.*'\\n```\\n\\n- `gbp.auth.connection` — OAuth creds present + refresh token works.\\n- `gbp.auth.scopes` — granted scope includes `business.manage`.\\n- `gbp.account.access` — the tracked account is still listable. A `gbp.account.quota-pending` **warn** means the API access form is still pending Google approval (0 QPM) — auth is fine, the API just isn't enabled yet.\\n- `gbp.places.api-key` — Places API readiness for the listing cross-reference (#648). **Warns** when GBP is connected but no Places key is set, or when no selected location carries a Maps place id (re-run `gbp locations discover`). Skipped when Places is disabled (`places.tier: off`) or GBP isn't connected.\\n- `gbp.data.recent-sync` — a selected location synced in the last 7d (warn) / 30d (fail); warns when never synced.\\n\\n## Insights (after a `gbp-sync` run)\\n\\nA completed `gbp-sync` run generates location-scoped insights (`provider = 'gbp'`), surfaced in `canonry insights`, the dashboard, notifications (`insight.critical`/`insight.high`), and Aero's proactive wake-up:\\n\\n- `gbp-lodging-gap` (low) — a lodging-capable location whose structured Lodging attributes canonry can't read via the GBP Lodging API, **and no Places evidence available** (Places disabled, no key, or no snapshot yet). This is a **verify-nudge, not a confirmed gap**: the Lodging API returns empty even for complete hotels because the owner-set \\\"Hotel details\\\" amenity panel writes to a separate surface the API doesn't expose. Treat `populatedGroupCount === 0` as \\\"can't confirm via the API\\\", not \\\"owner set no amenities\\\", and recommend verifying the \\\"Hotel details\\\" panel.\\n- `gbp-listing-discrepancy` (medium) — the version of the above with Places evidence (#648 Phase B): canonry can't read the Lodging attributes, *plus* a Places snapshot showing the public listing advertises specific amenities (e.g. breakfast, parking, pet-friendly). Because Places can read amenities the Lodging API can't, those amenities are likely already set in \\\"Hotel details\\\" and simply not API-readable, so this is still a **verify** (confirm in \\\"Hotel details\\\"), not a confirmed gap. Names the exact amenities. **Supersedes `gbp-lodging-gap`** when Places data exists. Requires a Places API key + a synced lodging location with a place id.\\n- `gbp-cta-gap` (medium) — place actions present but no direct-merchant booking CTA (only aggregators).\\n- `gbp-description-missing` (low) — a selected location with no owner business description (`profile.description`). Unlike the lodging nudge this is a **reliable, confirmable gap** (the description reads straight from the Business Information API): recommend adding a description (up to 750 chars), the cheapest owner-controlled prose AI engines lift to describe the business.\\n- `gbp-metric-drop` (high/medium) — a headline conversion metric (direction requests, website clicks, call clicks) fell sharply week-over-week within the synced window.\\n- `gbp-keyword-drop` (high/medium) — a head search term's impressions fell month-over-month.\\n\\nThe month-over-month keyword signal is powered by the **accumulating** `gbp_keyword_monthly` table: each sync fetches the last few complete months (one call per month, since the API aggregates a range into a single figure) and preserves older in-retention months, so a real monthly series builds up over time. The current-snapshot reads (`gbp keywords`, `gbp summary`) are unchanged — they still use the trailing-window `gbp_keyword_impressions` table.\\n\\n## Owner-Set Attributes (`gbp attributes`)\\n\\nEvery `gbp sync` also captures the location's **owner-set attributes** via the Business Information API (`getAttributes`) and stores them snapshot-on-change in `gbp_attributes_snapshots`. Unlike the Lodging API (hotels only) this works for **any** business category: amenity / service / accessibility / identity / social-URL tags such as `has_onsite_services`, `offers_online_estimates`, `is_owned_by_women`, wheelchair accessibility, `url_instagram`, `url_facebook`. The API returns **only the attributes the owner has set**, so `attributeCount` is a reliable, owner-readable completeness signal (not a verify-nudge like the lodging gap).\\n\\nRead them with `canonry gbp attributes [--location ] [--format json]` (API `GET /gbp/attributes`, MCP `canonry_gbp_attributes`). The CLI prints each location's set attributes (`key: value`); `--format json` returns the full normalized records (`{name, valueType, values, unsetValues, uris}`).\\n\\n## The Dashboard (`GbpSection`)\\n\\nThe project page shows a self-gating \\\"Google Business Profile\\\" section (only when a GBP connection exists): a **graph-first** performance block — a daily conversion-trend chart (the hero) plus a reach (impressions) area, with the reporting-lag tail greyed as \\\"pending\\\", a \\\"data through <date>\\\" label, and all-zero series collapsed to a \\\"Not active\\\" footnote (#658) — alongside the owner-vs-public gap insight (`gbp-listing-discrepancy`), the public-listing (Places) amenity block, a search-terms table, and a locations table with a track/untrack toggle and a Sync button. Every number is computed server-side by `buildGbpSummary`; the component only renders (Recharts via `ChartPrimitives`). The raw owner-configured Place Action CTAs and the lodging-completeness count are **deliberately not shown in the dashboard**: they are owner-set with no public counterpart to cross-reference, so an \\\"Absent\\\" / \\\"empty\\\" tile would read as a fact about the live listing when it is only an unverifiable owner signal (#648, PR #660). Operators still read them via `cnry gbp place-actions` / `cnry gbp lodging`, and the `/gbp/summary` API still carries both fields.\\n\\n## Hotel-Specific Setup\\n\\nFor hotel groups, two extra signal sources are critical:\\n\\n### Lodging attributes (`canonry gbp lodging`)\\n\\nHotel amenities are a high-signal local-AEO surface: answer engines often answer queries like \\\"does X hotel have a pool?\\\" or \\\"is Y pet-friendly?\\\" from structured hotel facts instead of website copy alone. Canonry therefore treats the Lodging API as a separate hotel-only source from generic Business Information `getAttributes`.\\n\\nCanonry snapshots the raw Lodging API resource on every `gbp sync` and reports how many top-level groups are readable. It does **not** infer missing amenities from a zero-group response, and it does **not** treat generic `getAttributes` tags as a substitute for Hotel details. A zero-group Lodging API response remains a verify-the-Hotel-details-panel signal.\\n\\nA non-lodging location returns HTTP 400 `FAILED_PRECONDITION` (\\\"This operation is not supported for this location. Please check the value of `Location.location_state.can_operate_lodging_data`\\\") — not a 404. Fix the primary category in the Business Profile UI to a lodging category first. A lodging-category location can return HTTP 200 with only `{ \\\"name\\\": \\\"...\\\" }`. That is the common case observed on a complete hotel, even when the owner-facing \\\"Hotel details\\\" panel has amenities filled in. So an empty result is a \\\"can't read via the API\\\" verify, not proof the hotel has no amenities.\\n\\n### Place action links (`canonry gbp place-actions`)\\n\\nBooking and reservation CTAs surfaced in AI answers come from `placeActionLinks`, not from the website URL. Canonry tracks:\\n\\n- `placeActionType` (`RESERVATION`, `BOOK`, `ORDER_FOOD`, …)\\n- `providerType` (`MERCHANT` for direct, `AGGREGATOR` for OTA links like Expedia/Booking)\\n- `isPreferred` flag\\n- `uri`\\n\\nA property with only aggregator booking links and no direct merchant CTA is a recommendation to surface.\\n\\n## Places enrichment — the rendered-listing cross-reference (#648)\\n\\nFor lodging locations, canonry pulls the **Places API (New) Place Details** — the amenities Google's *public* listing advertises (breakfast, parking, pet policy, accessibility, editorial summary) — and cross-references them against the owner-configured GBP profile. When the Lodging API returns nothing but the public listing advertises amenities, the `gbp-listing-discrepancy` insight names those amenities so the operator can verify they are set in the \\\"Hotel details\\\" panel (the listing may already be drawing them from there even though this Lodging API response returned no readable groups).\\n\\n**Setup** — the Places API uses a plain **API key**, not OAuth (unrelated to `google.clientId`). A billing account (card) is required on the GCP project even within the free tier.\\n\\n```yaml\\n# ~/.canonry/config.yaml — top-level `places` block (an API key, not OAuth, so\\n# it is separate from the `google` block — same as `ga4`, `bing`, `wordpress`).\\nplaces:\\n apiKey: \\\"AIza...\\\" # or env GOOGLE_PLACES_API_KEY\\n tier: atmosphere # atmosphere (default) | pro | off\\n refreshIntervalDays: 7 # cost lever — re-fetch a location at most weekly\\n```\\n\\nThe next `gbp sync` then snapshots Place Details for selected lodging locations that carry a Maps place id (re-run `gbp locations discover` if `gbp.places.api-key` warns there are none). Read it back with `canonry gbp places ` (the `amenities` list is computed server-side).\\n\\n**Cost** — Place Details is billed at the highest field-mask tier requested. The amenity booleans powering the cross-reference are the **Enterprise + Atmosphere** SKU: **1,000 free calls/month, then $25/1,000**. Because canonry fetches Places only for lodging locations and only past the refresh interval (default weekly), a typical operator book (a handful to ~200 hotels on a weekly refresh) stays inside the free tier — **$0/month**. Drop `tier` to `pro` (5,000 free, accessibility-only — thinner cross-reference) or `off` to disable. `accessibilityOptions` is Pro tier; the IDs-only refresh is free.\\n\\n## Provenance: the three data planes (how to present GBP)\\n\\nEvery GBP number belongs to one of three planes. **Tag each figure by plane before you show or say it.** The two classic mistakes are presenting plane 1 as if it were plane 2, and presenting a plane-3 lag artifact as a real change.\\n\\n| Plane | Source | How to present it |\\n|---|---|---|\\n| **1. Owner-configured / owner-readable** (CTAs, profile fields, generic attributes, readable lodging groups) | Business Info / Place Actions / Lodging APIs | \\\"Owner profile completeness\\\", never a fact about the live listing. An empty field is the operator's blind spot, not proof the public listing is empty. Surface as a finding **only when cross-referenced** against plane 2. |\\n| **2. Public rendered** (what searchers and AI see) | Places API (New): a thin, schema-bound subset | Label it a **partial** public view. Thin or empty Places data is NOT evidence the listing is sparse, because the full rendered listing also synthesizes Hotel Center pricing, OTA links, and Local Guide contributions that no API returns. |\\n| **3. Performance** (impressions, clicks, directions, calls) | Performance API, ~2 to 3 day reporting lag | NOT an owner-content signal: the owner-configured caveat does not apply. The honesty lever here is the lag. Anchor windows to the last complete day, show `freshness`, and never call the unreported tail a decline (worse right after US holidays). |\\n\\n**The only thing to present as a \\\"finding\\\"** is the plane-1-vs-plane-2 delta: the `gbp-listing-discrepancy` insight. Quote its named amenities as a floor (\\\"the public listing advertises at least X that your profile doesn't\\\"), never a complete inventory.\\n\\n## Important Constraints\\n\\n- **GBP API returns owner-configured data only** — the API exposes only what the profile owner has set. Google's *rendered* hotel listing synthesizes additional amenities, room pricing, and booking links from Google Hotel Center, OTA feeds (Booking/Expedia/Hotels.com), and Places/user-contributed data — none of which the GBP API returns. So an empty Lodging API result does **not** mean the public listing is empty, and it does **not** prove the owner set no amenities: the owner-facing \\\"Hotel details\\\" amenity panel writes to a separate surface the Lodging API does not return, so it is commonly empty even for complete hotels. Treat it as a \\\"verify the Hotel details panel\\\", not a confirmed gap. **Canonry pulls the rendered-listing side from the Places API and cross-references it against the GBP profile** (issue #648, shipped) — see \\\"Places enrichment\\\" below.\\n- **No read-only OAuth scope** — `business.manage` is the only published scope. The consent screen will warn about write access even though canonry's v1 is read-only.\\n- **300 QPM shared quota** — across all GBP sub-APIs on one Google Cloud project. Canonry's sync worker caps per-location concurrency at 4 (~28 in-flight calls at peak) to stay well under the cap.\\n- **10 edits/min per profile** — hard cap on writes (relevant for Phase 4). Cannot be raised.\\n- **Privacy-redacted keyword impressions** — for each keyword aggregated over the requested window, Google returns either an exact `value` or only a `threshold` floor (` --location locations/XXX` to retry a subset.\\n\\n## Real-World Data Shapes & Signal Patterns\\n\\nValidated against three live businesses of different types (a computer-support shop, a roofing contractor, and a Venice Beach hotel). Bake these into any parsing or analysis code.\\n\\n### Response-shape quirks (the parser MUST handle these)\\n\\n- **Values are string-encoded integers.** Keyword counts come as `{ \\\"insightsValue\\\": { \\\"value\\\": \\\"10939\\\" } }` or `{ \\\"insightsValue\\\": { \\\"threshold\\\": \\\"15\\\" } }` — note the nesting under `insightsValue` and that `\\\"10939\\\"` is a string. `Number()` it.\\n- **Daily-metric zero days omit the value entirely.** A datedValue with no traffic is `{ \\\"date\\\": {\\\"year\\\":2026,\\\"month\\\":5,\\\"day\\\":1} }` — there is no `\\\"value\\\": \\\"0\\\"`. Treat a missing `value` as 0; don't skip the row.\\n- **Dates are split objects** (`{year, month, day}`), not ISO strings. Reassemble.\\n\\n### Signal patterns (what the data actually looks like)\\n\\n- **`BUSINESS_DIRECTION_REQUESTS` is the most reliably-populated conversion signal** across every business type — even a tiny roofing contractor logged 66/30d while its website-clicks (2) and call-clicks (1) were near-zero. For local/service businesses it's the headline AEO-conversion proxy, not website clicks.\\n- **Most of the 11 daily metrics are all-zero** for non-retail businesses (`BUSINESS_CONVERSATIONS`, `BUSINESS_BOOKINGS`, `BUSINESS_FOOD_*` were 0 for all three). Syncing all 11 is fine (zeros are cheap) but the dashboard should hide all-zero series.\\n- **Impressions skew to Maps for physical-destination businesses.** The hotel pulled 7,402 desktop-maps impressions vs 2,257 desktop-search in 30 days — people find it on Maps.\\n- **Keyword thresholding scales with volume.** A busy hotel was ~89% thresholded (its head terms like `hotels`→10,939 had exact values); both small businesses were **100% thresholded** (every keyword redacted). For the typical SMB location, expect zero exact keyword values — design the UI to lead with the `/ at the repository root.\nexport const part = \"---\\nname: orchestration\\ndescription: Workflow recipes — baseline, regression response, weekly review, content gap analysis. Read when planning a multi-step task or recurring review.\\n---\\n\\n# Orchestration Workflows\\n\\n**Read the mention signal first in every workflow.** Compute and compare **mention rate + mention share** before cited rate. The fast mention read is `cnry overview --format json` (returns `queryCounts.mentionRate`, `scores.mention`, `scores.mentionShare`) plus `cnry analytics --feature gaps --format json` (returns `mentionedQueries[]`, `mentionGap[]`, `notMentioned[]` alongside the cited buckets). Use `cnry evidence ` for the per-query drilldown — it prints the two-glyph `[C/c][M/m]` cell per (query × provider) and a `Mentioned: X / Y` line next to `Cited: X / Y`. Mention and citation are independent — never derive one from the other. Treat `answerMentioned = null` as \\\"not checked,\\\" never as not-mentioned.\\n\\n## Workflow 1: New Client Baseline\\n\\nTrigger: First sweep completes for a new project\\n\\nSteps:\\n1. `cnry overview --format json` → mention read first: `queryCounts.mentionRate`, `scores.mention`, `scores.mentionShare`. Then `cnry analytics --feature gaps --format json` for `mentionedQueries[]` / `mentionGap[]` / `notMentioned[]`, and `cnry evidence --format json` for the per-query `[C/c][M/m]` drilldown and the secondary cited data.\\n2. Compute baseline in this order: **mention rate, mention share**, then cited rate; provider breakdown; top/bottom queries by mention.\\n3. With explicit operator approval for the crawl and persisted run, `cnry technical-aeo run --wait`, then `cnry technical-aeo score --format json` for site readiness. Use `cnry site-health overview --format json` only to add crawl metadata (root, completeness, budgets, and termination); it never replaces the score. The crawl discovers the in-scope URL inventory from the root, sitemaps, and internal links. The default budgets are 1,000 pages and 100,000 edges; use `--max-pages`, `--max-edges`, or `--max-depth` to tighten them. Dead-link checks remain off unless `--check-dead-links` is explicit. For architecture investigation, use bounded Site Health subgraph/path/changes reads rather than attempting to load the visualization graph. Treat `countAccuracy: \\\"lower-bound\\\"` subgraph counts as minimums, and qualify an incomplete path's unreachable/truncated result with `complete: false` plus `termination`; neither is a site-wide conclusion. Persists to the dashboard and is trendable via `cnry technical-aeo trend `.\\n4. Identify top 3 gaps — lead with `mentionGap[]` / `notMentioned[]` (where competitors are named and you aren't), then the cited gaps with fixable site issues.\\n5. Generate onboarding report with baseline + action plan\\n6. Store baseline metrics in memory (include mention rate + mention share, not just cited rate)\\n\\n## Workflow 2: Regression Response\\n\\nTrigger: Comparison shows decline or webhook fires regression.detected\\n\\nSteps:\\n1. `cnry overview --format json` → current state, mention first: did `scores.mention` / `scores.mentionShare` move? Then `cnry analytics --feature gaps --format json` (`mentionGap[]` / `notMentioned[]`) and `cnry evidence --format json` for the per-query `[C/c][M/m]` drilldown (which signal actually dropped on which provider).\\n2. `cnry history ` → trend for affected query\\n3. Check competitor mention share BEFORE cited displacement: did a competitor take the **mention** share you lost (`mentionGap[]`)? Only then ask whether a competitor gained the **citation** you lost.\\n4. Check indexing: `cnry google coverage ` → is the page still indexed? (a deindexed/thin page starves both signals)\\n5. Audit the page: `npx @canonry/aeo-audit@4 \\\"\\\" --format json`\\n6. Diagnose cause: indexing issue / content issue / competitive displacement (mention-share loss first, citation loss second)\\n7. Recommend fix with evidence — lead with what restores the mention\\n8. If content fix: generate diff (schema, llms.txt, or content changes)\\n9. Update memory with regression event + diagnosis (record which signal regressed: mention, citation, or both)\\n\\n**Want to verify the regression is real / reproducible before reporting?**\\nPropose the exact provider/query and get explicit approval, then use a probe\\nrun instead of a real sweep:\\n\\n```\\ncnry run --probe --provider

--query \\\"\\\"\\n```\\n\\nThen `cnry runs get ` to inspect the snapshot. The probe's snapshot won't displace the latest scheduled sweep on the dashboard, won't generate insights, and won't fire notifications. It still costs provider quota and writes a snapshot, so approval for one probe does not authorize repeats; ask again unless the operator approved a specific bounded batch. Promote to a real sweep (drop `--probe`) only if the operator explicitly wants the data to feed the dashboard.\\n\\n## Workflow 3: Weekly Review\\n\\nTrigger: Scheduled (weekly, or on-demand)\\n\\nSteps:\\n1. `cnry overview --format json` → current metrics, mention first (`queryCounts.mentionRate`, `scores.mention`, `scores.mentionShare`); `cnry analytics --feature gaps --format json` for the mention gaps; `cnry evidence --format json` for the per-query `[C/c][M/m]` drilldown\\n2. Compare to baseline/prior week from memory — mention rate + mention share first, cited rate second\\n3. Compute deltas: mentions gained/lost/stable (primary), then citations gained/lost/stable (secondary)\\n4. Flag any new regressions not yet addressed (lead with lost mentions)\\n5. Check competitor movement — mention share swing first, then cited-domain displacement\\n6. Generate summary with key changes + recommended next steps\\n\\n## Workflow 4: Content Gap Analysis\\n\\nTrigger: User asks \\\"why aren't we mentioned/cited for X?\\\" or multiple not-mentioned / uncited queries detected\\n\\nSteps:\\n1. `cnry overview --format json` + `cnry analytics --feature gaps --format json` → confirm the gap, mention first: is the query in `notMentioned[]` (not named at all) or `mentionGap[]` (a competitor is named, you aren't)? Then `cnry evidence ` for the per-query `[C/c][M/m]` cell to see whether you also lack the citation. Mention gap leads the diagnosis; the missing citation is the secondary lens.\\n2. Check if a relevant page exists on the domain\\n3. If no page: recommend content creation (topic, target queries) — give the engine a reason to name you\\n4. If page exists: `npx @canonry/aeo-audit@4 \\\"\\\"` → diagnose why neither mentioned nor cited\\n5. Check schema completeness, llms.txt coverage, indexing status\\n6. Generate prioritized fix list — fixes that earn the mention first, then the citation\\n\"\n",[],[184,449,475,481],"b605cbd6-3f6c-41a7-9331-771bbb222029",13,["D",1788292310636],[210,211,212],[184,449,475],"ae91bccc-3e31-4356-834f-cb508c834a4f",8,["D",1788292309949],[209,213,214,215],[184,449],"96780fc5-c060-4b02-86a2-4b51b47199f6","jobs","92af4352-a63e-11f1-9f99-1607ee4eb77e",11,["D",1788292310414],[],[184,499],"6ddf4a2e-04bf-4c6c-bba6-3dc1c98830a9","fixtures","929d710e-a63e-11f1-8621-1607ee4eb77e",10,["D",1788292310299],[],[184,506],"3f38e0a0-df02-47e0-b3d1-c0c6af1feaec","939da182-a63e-11f1-b150-1607ee4eb77e","92281dc8-a63e-11f1-8621-1607ee4eb77e",35,["D",1788292311811],"import {\n createTurnstileVerifier,\n type HumanVerifier,\n LocalBypassHumanVerifier,\n UnavailableHumanVerifier,\n} from '../security/turnstile.ts'\n\nexport interface ValTownConfig {\n environment: 'production' | 'development' | 'test'\n checkTtlMs: number\n perClientDailyLimit: number\n globalDailyLimit: number\n quotaSalt: string\n humanVerifier: HumanVerifier\n turnstileSiteKey: string | null\n humanVerificationStatus: 'ready' | 'not-required' | 'unavailable'\n geminiApiKey: string | null\n geminiModel: string | null\n publicChecksEnabled: boolean\n publicChecksUnavailableMessage: string | null\n /** Whether the MCP endpoint may start a check. Reads are always available. */\n mcpStartChecksEnabled: boolean\n /** Daily per-caller allowance for MCP-started checks, in its own quota bucket. */\n mcpPerClientDailyLimit: number\n}\n\nfunction positiveInt(input: string | undefined, fallback: number): number {\n const parsed = Number(input)\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback\n}\n\nfunction splitCsv(input: string | undefined): string[] {\n return (input ?? '').split(',').map((value) => value.trim()).filter(Boolean)\n}\n\n/**\n * Env parsing is intentionally small. A deployed production val refuses every\n * public check if Turnstile isn't configured; local/test can opt into the\n * explicit bypass to keep tests free of secrets.\n */\nexport function loadValTownConfig(env: Record = Deno.env.toObject()): ValTownConfig {\n // There is no trusted implicit signal that a Val is a development host.\n // Default to production so the local bypass must always be opted into with\n // both an explicit environment and its deliberately unsafe flag.\n const environment = env.VAL_TOWN_ENV === 'development'\n ? 'development'\n : env.VAL_TOWN_ENV === 'test'\n ? 'test'\n : 'production'\n const secret = env.TURNSTILE_SECRET_KEY?.trim()\n const siteKey = env.TURNSTILE_SITE_KEY?.trim()\n const allowedHostnames = splitCsv(env.TURNSTILE_ALLOWED_HOSTNAMES)\n const hasCompleteTurnstileConfig = Boolean(secret && siteKey && allowedHostnames.length > 0)\n const configuredQuotaSalt = env.CANONRY_QUOTA_SALT?.trim() || null\n\n let humanVerifier: HumanVerifier\n let humanVerificationStatus: ValTownConfig['humanVerificationStatus']\n if (hasCompleteTurnstileConfig && secret) {\n humanVerifier = createTurnstileVerifier({ secret, allowedHostnames })\n humanVerificationStatus = 'ready'\n } else if (environment !== 'production' && env.ALLOW_INSECURE_LOCAL_HUMAN_BYPASS === '1') {\n humanVerifier = new LocalBypassHumanVerifier()\n humanVerificationStatus = 'not-required'\n } else {\n humanVerifier = new UnavailableHumanVerifier()\n humanVerificationStatus = 'unavailable'\n }\n\n return {\n environment,\n checkTtlMs: positiveInt(env.CANONRY_CHECK_CACHE_TTL_MS, 86_400_000),\n perClientDailyLimit: positiveInt(env.CANONRY_PER_CLIENT_DAILY_LIMIT, 3),\n globalDailyLimit: positiveInt(env.CANONRY_GLOBAL_DAILY_LIMIT, 100),\n // A stable shared salt is required in production. A process-local fallback\n // would make per-IP quotas disappear whenever Val starts another isolate.\n quotaSalt: configuredQuotaSalt || (environment === 'production' ? '' : 'local-development-only'),\n humanVerifier,\n turnstileSiteKey: humanVerificationStatus === 'ready' ? siteKey || null : null,\n humanVerificationStatus,\n geminiApiKey: env.GEMINI_API_KEY?.trim() || null,\n geminiModel: env.GEMINI_VISIBILITY_MODEL?.trim() || null,\n publicChecksEnabled: environment !== 'production' || Boolean(configuredQuotaSalt),\n publicChecksUnavailableMessage: environment === 'production' && !configuredQuotaSalt\n ? 'Public checks are temporarily unavailable.'\n : null,\n // An agent cannot solve a Turnstile challenge, so the MCP write path trades\n // human verification for a much tighter per-caller allowance. The global\n // daily cap and the single execution lease are unchanged, so this widens\n // who may spend the budget, never how large the budget is.\n mcpStartChecksEnabled: env.CANONRY_MCP_START_CHECKS !== '0',\n mcpPerClientDailyLimit: positiveInt(env.CANONRY_MCP_PER_CLIENT_DAILY_LIMIT, 2),\n }\n}\n",[],[184,520,346],"config","5b29d0bc-67f9-4641-abd9-7035be8a9b71",5,["D",1788292309530],[205],[184,520],"b63d1832-e923-4d48-889b-33fad39743a9","app.ts","9349f686-a63e-11f1-b64b-1607ee4eb77e","91f8f4bc-a63e-11f1-8621-1607ee4eb77e",25,["D",1788292311428],"import { Hono } from 'hono'\nimport type { ValTownConfig } from '../config/index.ts'\nimport { createMcpHandler } from '../mcp/server.ts'\nimport {\n newCheckRecord,\n PUBLIC_CHECK_EXECUTION_LEASE_MS,\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n PublicQuotaError,\n} from '../jobs/public-check.ts'\nimport { checkFingerprint, isCheckExpired } from '../runtime/records.ts'\nimport {\n type CheckRecord,\n type CheckStore,\n type JobDispatcher,\n PUBLIC_RATE_LIMITED_ERROR_CODE,\n} from '../runtime/types.ts'\nimport { HumanVerificationError } from '../security/turnstile.ts'\nimport { normalizePublicDomain, PublicUrlError, utcDay } from '../security/url.ts'\n\nconst MAX_BODY_BYTES = 4_096\nconst CHECK_ID = /^[0-9a-f-]{36}$/i\n\nexport interface PageAssets {\n styles: string\n script: string\n}\n\nexport interface ValTownAppDependencies {\n store: CheckStore\n config: ValTownConfig\n dispatcher: JobDispatcher\n /** The UI is injected so this host stays independent from the renderer implementation. */\n renderPage: (record: CheckRecord | null) => string\n assets: PageAssets\n now?: () => Date\n}\n\nexport class PublicCheckUnavailableError extends Error {\n override name = 'PublicCheckUnavailableError'\n}\n\nclass PublicCheckAdmissionBusyError extends Error {\n override name = 'PublicCheckAdmissionBusyError'\n constructor() {\n super('Another request for this domain is being accepted. Try again shortly.')\n }\n}\n\nclass PublicCheckCapacityError extends Error {\n override name = 'PublicCheckCapacityError'\n constructor() {\n super('The public check is at capacity. Try again shortly.')\n }\n}\n\nexport function createValTownApp(deps: ValTownAppDependencies): Hono {\n const app = new Hono()\n const now = deps.now ?? (() => new Date())\n\n app.use('*', async (context, next) => {\n const turnstileAllowed = deps.config.publicChecksEnabled &&\n deps.config.humanVerificationStatus === 'ready' && Boolean(deps.config.turnstileSiteKey)\n context.header('Content-Security-Policy', contentSecurityPolicy(turnstileAllowed))\n context.header('X-Content-Type-Options', 'nosniff')\n context.header('Referrer-Policy', 'strict-origin-when-cross-origin')\n context.header('Permissions-Policy', 'camera=(), microphone=(), geolocation=(), payment=()')\n context.header('Cross-Origin-Opener-Policy', 'same-origin')\n await next()\n })\n\n app.get('/healthz', (context) => context.json({ ok: true }))\n\n // Anonymous, read-only MCP over Streamable HTTP. It shares this app's store\n // so an agent reads exactly the checks the UI shows, and it owns its own\n // method/origin/envelope handling — including the 405 for a non-POST, which\n // is why it is registered for every method rather than POST alone.\n const mcp = createMcpHandler({\n store: deps.store,\n now,\n startCheck: deps.config.mcpStartChecksEnabled\n ? async (domain, remoteIp) => {\n const outcome = await submitCheck(deps, { domain, token: null, remoteIp, now: now(), admission: 'mcp' })\n return { record: (await deps.store.get(outcome.record.id)) ?? outcome.record, reused: outcome.reused }\n }\n : undefined,\n })\n app.all('/mcp', (context) => mcp(context.req.raw))\n app.get('/assets/canonry-ui.css', (context) => {\n context.header('Cache-Control', 'public, max-age=3600')\n return context.body(deps.assets.styles, 200, { 'content-type': 'text/css; charset=utf-8' })\n })\n app.get('/assets/canonry-ui.js', (context) => {\n context.header('Cache-Control', 'public, max-age=3600')\n return context.body(deps.assets.script, 200, { 'content-type': 'application/javascript; charset=utf-8' })\n })\n\n app.get('/', async (context) => {\n const requestedId = context.req.query('check')\n const stored = requestedId && CHECK_ID.test(requestedId) ? await deps.store.get(requestedId) : null\n const record = stored && !isCheckExpired(stored, now()) ? stored : null\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(record))\n })\n\n app.get('/api/checks/:id', async (context) => {\n const id = context.req.param('id')\n if (!CHECK_ID.test(id)) return apiError(context, 404, 'not-found', 'Check not found.')\n const record = await deps.store.get(id)\n if (!record || isCheckExpired(record, now())) return apiError(context, 404, 'not-found', 'Check not found.')\n context.header('Cache-Control', 'no-store')\n return context.json({ check: publicCheckRecord(record) })\n })\n\n app.post('/api/checks', async (context) => {\n const payload = await parseJsonBody(context.req.raw)\n const outcome = await submitCheck(deps, {\n domain: payload.domain,\n token: typeof payload.turnstileToken === 'string' ? payload.turnstileToken : null,\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n context.header('Cache-Control', 'no-store')\n if (outcome.dispatch === 'busy') {\n return apiError(context, 503, 'busy', 'The public check is at capacity. Try again shortly.')\n }\n return context.json(\n { check: publicCheckRecord(outcome.record), reused: outcome.reused },\n outcome.record.status === 'queued' || outcome.record.status === 'running' ? 202 : 200,\n )\n })\n\n app.post('/check', async (context) => {\n let submittedDomain: unknown = null\n try {\n const form = await parseFormBody(context.req.raw)\n submittedDomain = form.get('domain')\n const outcome = await submitCheck(deps, {\n domain: submittedDomain,\n token: form.get('cf-turnstile-response'),\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n if (outcome.dispatch === 'busy') throw new PublicCheckCapacityError()\n return context.redirect(`/?check=${encodeURIComponent(outcome.record.id)}`, 303)\n } catch (error) {\n const failure = formFailureRecord(submittedDomain, now(), error)\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(failure), formFailureStatus(error))\n }\n })\n\n app.notFound((context) => apiError(context, 404, 'not-found', 'Not found.'))\n app.onError((error, context) => {\n if (error instanceof PublicUrlError) return apiError(context, 400, 'invalid-domain', error.message)\n if (error instanceof HumanVerificationError) {\n const status = error.code === 'unavailable' || error.code === 'transport' ? 503 : 403\n return apiError(context, status, `human-verification-${error.code}`, error.message)\n }\n if (error instanceof PublicQuotaError) return apiError(context, 429, `${error.scope}-quota`, error.message)\n if (error instanceof PublicCheckAdmissionBusyError) return apiError(context, 503, 'admission-busy', error.message)\n if (error instanceof PublicCheckCapacityError) return apiError(context, 503, 'busy', error.message)\n if (error instanceof PublicCheckUnavailableError) return apiError(context, 503, 'unavailable', error.message)\n if (error instanceof BodyTooLargeError) {\n return apiError(context, 413, 'body-too-large', 'Request body is too large.')\n }\n if (error instanceof InvalidBodyError) return apiError(context, 400, 'invalid-body', error.message)\n return apiError(context, 500, 'internal-error', 'The public check could not be started.')\n })\n\n return app\n}\n\ninterface SubmitInput {\n domain: unknown\n token: string | null\n remoteIp: string | null\n now: Date\n /**\n * Which admission rules apply. `mcp` skips human verification, which an\n * agent cannot perform, and spends from a separate, tighter daily bucket so\n * it cannot consume the browser allowance. Every other control — the global\n * daily cap, the single execution lease, cache reuse — is identical.\n */\n admission?: 'browser' | 'mcp'\n}\n\nasync function submitCheck(\n deps: ValTownAppDependencies,\n input: SubmitInput,\n): Promise<{ record: CheckRecord; reused: boolean; dispatch: 'completed' | 'busy' | 'ignored' }> {\n if (!deps.config.publicChecksEnabled) {\n throw new PublicCheckUnavailableError(\n deps.config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.',\n )\n }\n const target = normalizePublicDomain(input.domain)\n const viaMcp = input.admission === 'mcp'\n if (!viaMcp) await deps.config.humanVerifier.verify({ token: input.token, remoteIp: input.remoteIp })\n const fingerprint = checkFingerprint(target.domain)\n const timestamp = input.now.toISOString()\n\n // Cached and already-active work is useful without consuming the one global\n // execution slot. This keeps same-domain retries quota- and capacity-free.\n const reusable = await deps.store.findReusable(fingerprint, timestamp)\n if (reusable) return dispatchExistingCheck(deps, reusable)\n\n const hashedClient = await hashQuotaSubject(deps.config.quotaSalt, input.remoteIp ?? 'unknown')\n // A distinct subject rather than a distinct scope: `CheckQuotaClaim.scope` is\n // a closed union, and prefixing keeps the two buckets disjoint without\n // widening a durable contract.\n const clientSubject = viaMcp ? `mcp:${hashedClient}` : hashedClient\n const clientMax = viaMcp ? deps.config.mcpPerClientDailyLimit : deps.config.perClientDailyLimit\n const day = utcDay(input.now)\n const executionLeaseOwner = crypto.randomUUID()\n const executionLeaseUntil = new Date(input.now.getTime() + PUBLIC_CHECK_EXECUTION_LEASE_MS).toISOString()\n const capacityAvailable = await deps.store.claimGlobalLease(\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n executionLeaseOwner,\n timestamp,\n executionLeaseUntil,\n )\n if (!capacityAvailable) throw new PublicCheckCapacityError()\n\n let capacityHeld = true\n let dispatchOwnsCapacity = false\n const releaseCapacity = async () => {\n if (!capacityHeld) return\n await deps.store.releaseGlobalLease(PUBLIC_CHECK_EXECUTION_LEASE_NAME, executionLeaseOwner)\n capacityHeld = false\n }\n\n try {\n const admission = await deps.store.admit({\n candidate: newCheckRecord({ id: crypto.randomUUID(), fingerprint, domain: target.domain, now: input.now }),\n now: timestamp,\n clientQuota: { scope: 'client', subject: clientSubject, day, max: clientMax },\n globalQuota: { scope: 'global', subject: 'all', day, max: deps.config.globalDailyLimit },\n })\n if (admission.kind === 'quota-exhausted') throw new PublicQuotaError(admission.scope)\n if (admission.kind === 'busy') throw new PublicCheckAdmissionBusyError()\n\n if (admission.kind === 'reused') {\n // A concurrent same-domain admission won. It must not inherit capacity\n // reserved by this request, so it goes through ordinary reuse dispatch.\n await releaseCapacity()\n return dispatchExistingCheck(deps, admission.record)\n }\n\n let dispatch: 'completed' | 'busy' | 'ignored' = 'ignored'\n if (admission.record.status === 'queued') {\n // Request-bound dispatch takes responsibility for this owner as soon as\n // it receives the promise. Its runner releases even a lost job claim.\n const dispatched = deps.dispatcher.dispatch(admission.record.id, { executionLeaseOwner })\n dispatchOwnsCapacity = true\n dispatch = await dispatched\n }\n return {\n record: (await deps.store.get(admission.record.id)) ?? admission.record,\n reused: admission.kind !== 'created',\n dispatch,\n }\n } finally {\n // The runner owns capacity only after dispatch receives the owner. The app\n // releases every admission, reuse, quota, and pre-dispatch error path.\n if (!dispatchOwnsCapacity) await releaseCapacity()\n }\n}\n\nasync function dispatchExistingCheck(\n deps: ValTownAppDependencies,\n record: CheckRecord,\n): Promise<{ record: CheckRecord; reused: true; dispatch: 'completed' | 'busy' | 'ignored' }> {\n const dispatch = record.status === 'queued' ? await deps.dispatcher.dispatch(record.id) : 'ignored'\n return {\n record: (await deps.store.get(record.id)) ?? record,\n reused: true,\n dispatch,\n }\n}\n\nfunction publicCheckRecord(record: CheckRecord): Omit {\n const { fingerprint: _fingerprint, leaseOwner: _leaseOwner, leaseUntil: _leaseUntil, ...safe } = record\n return safe\n}\n\nfunction apiError(\n context: { json: (body: unknown, status?: number) => Response; header: (name: string, value: string) => void },\n status: number,\n code: string,\n message: string,\n): Response {\n context.header('Cache-Control', 'no-store')\n return context.json({ error: { code, message } }, status)\n}\n\nclass BodyTooLargeError extends Error {}\nclass InvalidBodyError extends Error {}\n\nasync function parseJsonBody(request: Request): Promise> {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/json')) {\n throw new InvalidBodyError('Expected a JSON request body.')\n }\n const text = await readLimitedBody(request)\n try {\n const parsed = JSON.parse(text)\n if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error()\n return parsed as Record\n } catch {\n throw new InvalidBodyError('Request body must be a JSON object.')\n }\n}\n\nasync function parseFormBody(request: Request): Promise {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/x-www-form-urlencoded')) {\n throw new InvalidBodyError('Expected a form submission.')\n }\n return new URLSearchParams(await readLimitedBody(request))\n}\n\nasync function readLimitedBody(request: Request): Promise {\n const contentLength = Number(request.headers.get('content-length'))\n if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES) throw new BodyTooLargeError()\n if (!request.body) return ''\n const reader = request.body.getReader()\n const chunks: Uint8Array[] = []\n let length = 0\n while (true) {\n const next = await reader.read()\n if (next.done) break\n length += next.value.byteLength\n if (length > MAX_BODY_BYTES) {\n await reader.cancel()\n throw new BodyTooLargeError()\n }\n chunks.push(next.value)\n }\n const output = new Uint8Array(length)\n let offset = 0\n for (const chunk of chunks) {\n output.set(chunk, offset)\n offset += chunk.byteLength\n }\n return new TextDecoder().decode(output)\n}\n\nfunction remoteIp(request: Request): string | null {\n // Val injects this edge header. `x-forwarded-for` is caller-controlled on a\n // public val, so it is deliberately ignored for quota identity.\n const cf = request.headers.get('cf-connecting-ip')?.trim()\n if (cf && cf.length <= 128) return cf\n return null\n}\n\nasync function hashQuotaSubject(salt: string, value: string): Promise {\n const bytes = new TextEncoder().encode(`${salt}\\u0000${value}`)\n const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes))\n return [...digest].map((byte) => byte.toString(16).padStart(2, '0')).join('')\n}\n\nfunction contentSecurityPolicy(turnstileAllowed: boolean): string {\n const turnstile = turnstileAllowed ? ' https://challenges.cloudflare.com' : ''\n return [\n \"default-src 'self'\",\n \"base-uri 'none'\",\n \"object-src 'none'\",\n \"frame-ancestors 'none'\",\n \"form-action 'self'\",\n `script-src 'self'${turnstile}`,\n \"style-src 'self'\",\n `connect-src 'self'${turnstile}`,\n `frame-src${turnstile || \" 'none'\"}`,\n \"img-src 'self' data: https:\",\n ].join('; ')\n}\n\nfunction formFailureRecord(domain: unknown, now: Date, error: unknown): CheckRecord {\n const displayDomain = typeof domain === 'string' ? domain.trim().slice(0, 253) : ''\n const timestamp = now.toISOString()\n return {\n id: crypto.randomUUID(),\n fingerprint: '',\n domain: displayDomain,\n status: 'failed',\n createdAt: timestamp,\n updatedAt: timestamp,\n expiresAt: null,\n result: null,\n errorCode: error instanceof PublicQuotaError ? PUBLIC_RATE_LIMITED_ERROR_CODE : 'form-submission-failed',\n errorMessage: formFailureMessage(error),\n leaseOwner: null,\n leaseUntil: null,\n }\n}\n\nfunction formFailureMessage(error: unknown): string {\n if (\n error instanceof PublicUrlError || error instanceof PublicQuotaError || error instanceof HumanVerificationError ||\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return error.message\n if (error instanceof BodyTooLargeError) return 'The submission was too large. Enter only a domain.'\n if (error instanceof InvalidBodyError) return 'The form could not be read. Try again.'\n return 'The public check could not be started. Try again later.'\n}\n\nfunction formFailureStatus(error: unknown): 400 | 403 | 413 | 429 | 503 {\n if (error instanceof PublicUrlError || error instanceof InvalidBodyError) return 400\n if (error instanceof BodyTooLargeError) return 413\n if (error instanceof PublicQuotaError) return 429\n if (\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return 503\n if (error instanceof HumanVerificationError) return error.code === 'invalid' ? 403 : 503\n return 503\n}\n",[],[184,535,527],"app","099c2e2e-a5d0-494f-ae81-754dd43458ad",3,["D",1788292309199],[203],[184,535],["D",1788292308897],[202,204,206,207,208,216,219,222,223,224,232],[184],["D",1788292195151],["D",1789514495229],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":26},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":582,"_583":584,"_585":586,"_587":26,"_588":26,"_589":26,"_590":24,"_591":-5,"_592":-7,"_593":-7,"_594":63,"_595":26,"_596":26,"_597":-5,"_598":26,"_599":26,"_600":26,"_601":-5},"ENV",{"_553":554,"_555":556,"_557":90,"_558":559,"_560":561,"_562":563,"_564":565,"_566":567,"_568":569,"_570":571,"_572":573,"_574":575,"_576":577,"_578":579,"_580":581},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v44