fix(intelligence): label citation gains/regressions with the project's own domain

[evolv3ai]

Summary

A project citation gain/regression is correctly gated on citationState === 'cited' (the project's own domain appearing in the sources) — that part is fine. But the citationUrl carried into the resulting insight was citedDomains[0]:

// intelligence-service.ts buildRunData (before)
citationUrl: domains[0] ?? undefined,   // domains = the FULL citedDomains set

citedDomains is the full co-cited set in provider order — project domains, tracked competitors, and third-party references intermingled. When a competitor or third-party sorts ahead of the project's own domain, the insight's recommendation.target points at the wrong site: a genuine regression on the project's page surfaces as audit winntile.com.

The detection is right; only the labeled URL is wrong.

Fix

buildRunData now resolves Snapshot.citationUrl through a new helper:

// citation-utils.ts
export function pickProjectCitedDomain(
  citedDomains: readonly string[],
  projectDomains: string[],
): string | undefined

It returns the first cited domain that matches the project's canonical or owned domains (reusing the existing domainMatches semantics), or undefined when the citation was established via a grounding-source match with no project domain in citedDomains — better an empty target than a competitor's. Project domains are loaded once per run in buildRunData via effectiveDomains.

The transition gate (cited: r.citationState === CitationStates.cited) is untouched.

Tests

Three new intelligence-service.test.ts cases:

• regression with citedDomains: ['winntile.com', 'example.com'] → previousCitationUrl and the persisted recommendation.target are example.com, not the competitor sorted first.
• gain with the same shape → citationUrl is example.com.
• grounding-only (citationState: 'cited', citedDomains: ['winntile.com'], no project domain) → previousCitationUrl is undefined.

All existing intelligence-service tests use citedDomains: ['example.com'] (project first), so they're unaffected.

Test plan

• pnpm --filter @ainyc/canonry run typecheck
• npx vitest run packages/canonry/test/intelligence-service.test.ts — 31 passed (28 existing + 3 new)
• Full pnpm run test — only 2 unrelated pre-existing failures remain (packages/db/test/schedules-migration.test.ts, which shells out to a sqlite3 CLI binary absent from the sandbox; verified identical on clean main)
• eslint clean on both changed source files (0 new warnings)
• Version bump 4.55.2 → 4.55.3 (root + @ainyc/canonry)

Context

Found while triaging a real project whose dashboard kept surfacing audit <competitor>.com recommendations for its own citation losses. Companion to #399 (the short-displayName matcher fix) — same investigation, different subsystem.

🤖 Generated with Claude Code