@siteoshq/cli 2.0.0 → 2.2.0

package/dist/cli.js

@@ -7840,11 +7840,15 @@ var filters = [
   "cursor"
 ];
 var TRACE_EXPLORER_FLAGS = {
+  coverage: ["environment"],
+  "gtm summary": ["environment", "period"],
+  "notifications show": ["environment"],
+  "notifications destinations": ["environment", "cursor"],
   destinations: filters,
   events: filters,
   properties: filters,
-  issues: filters,
-  observations: filters,
+  issues: [...filters, "container-id", "tag-id"],
+  observations: [...filters, "container-id", "tag-id", "result"],
   "issue show": ["environment", "id", "cursor"],
   "observation show": ["environment", "batch-id", "event-id"]
 };
@@ -7860,6 +7864,21 @@ var FilterValues = z11.object({
   event: z11.string().min(1).max(160).optional(),
   property: z11.string().min(1).max(160).optional(),
   "page-view": z11.string().uuid().optional(),
+  "container-id": z11.string().regex(/^GTM-[A-Z0-9]{4,20}$/u).optional(),
+  "tag-id": z11.string().regex(/^[0-9]{1,20}$/u).optional(),
+  result: z11.enum([
+    "success",
+    "failure",
+    "exception",
+    "timeout",
+    "initiated",
+    "completed_2xx",
+    "completed_4xx",
+    "completed_5xx",
+    "network_error",
+    "beacon_accepted",
+    "result_unknown"
+  ]).optional(),
   search: z11.string().max(160).optional(),
   state: z11.enum([
     "all",
@@ -7873,6 +7892,7 @@ var FilterValues = z11.object({
   ]).optional(),
   rule: z11.string().min(1).max(80).optional(),
   kind: z11.enum([
+    "tag_execution",
     "data_layer",
     "fetch",
     "xhr",
@@ -7891,18 +7911,22 @@ function traceExplorerSuffix(route, values) {
   if (route === "issue show" || route === "observation show") {
     const keys = route === "issue show" ? ["id"] : ["batch-id", "event-id"];
     for (const key of keys) {
-      if (!z11.string().uuid().safeParse(values[key]).success)
+      const value = values[key];
+      const plain = key === "id" && typeof value === "string" ? value.replace(/^trc_incident_/u, "") : value;
+      if (!z11.string().uuid().safeParse(plain).success)
         throw new Error(`Use --${key} with the UUID returned by Trace.`);
     }
     if (values.cursor !== void 0) {
-      if (!z11.string().uuid().safeParse(values.cursor).success)
+      if (!z11.string().uuid().safeParse(
+        typeof values.cursor === "string" ? values.cursor.replace(/^trc_finding_/u, "") : values.cursor
+      ).success)
         throw new Error(
           "Use --cursor with the nextCursor returned by this issue."
         );
       query.set("cursor", values.cursor);
     }
-    const suffix = route === "issue show" ? `/issues/${encodeURIComponent(values.id)}` : `/observations/${encodeURIComponent(values["batch-id"])}/${encodeURIComponent(values["event-id"])}`;
-    return `${suffix}${query.size ? `?${query}` : ""}`;
+    const suffix2 = route === "issue show" ? `/issues/${encodeURIComponent(values.id)}` : `/observations/${encodeURIComponent(values["batch-id"])}/${encodeURIComponent(values["event-id"])}`;
+    return `${suffix2}${query.size ? `?${query}` : ""}`;
   }
   const parsed = FilterValues.safeParse(values);
   if (!parsed.success) {
@@ -7913,9 +7937,21 @@ function traceExplorerSuffix(route, values) {
   }
   for (const [key, value] of Object.entries(parsed.data)) {
     if (value !== void 0)
-      query.set(key === "page-view" ? "pageView" : key, value);
+      query.set(
+        {
+          "page-view": "pageView",
+          "container-id": "containerId",
+          "tag-id": "tagId"
+        }[key] ?? key,
+        value
+      );
   }
-  return `/${route}${query.size ? `?${query}` : ""}`;
+  const suffix = {
+    "gtm summary": "gtm/summary",
+    "notifications show": "notifications",
+    "notifications destinations": "notification-destinations"
+  }[route] ?? route;
+  return `/${suffix}${query.size ? `?${query}` : ""}`;
 }
 function tracePublicationVersion(value) {
   if (value === void 0) return void 0;
@@ -7956,11 +7992,18 @@ Usage:
   siteos trace status [--json]
   siteos trace environments [--json]
   siteos trace report [--environment <slug>] [--json]
+  siteos trace coverage [--environment <slug>] [--json]
+  siteos trace gtm summary [--environment <slug>] [--period <24h|7d>] [--json]
+  siteos trace notifications show [--environment <slug>] [--json]
+  siteos trace notifications destinations [--environment <slug>] [--cursor <cursor>] [--json]
+  siteos trace notifications save --input <settings.json> [--environment <slug>] [--json]
+  siteos trace notifications retry --input <retry.json> [--environment <slug>] [--json]
+  siteos trace schema restart --input <baseline.json> [--environment <slug>] [--json]
   siteos trace destinations [--environment <slug>] [--period <24h|7d>] [--cursor <cursor>] [--json]
   siteos trace events [--environment <slug>] [--provider <provider>] [--event <name>] [--search <text>] [--state <all|new|issues|tracked|ignored>] [--period <24h|7d>] [--cursor <cursor>] [--json]
   siteos trace properties [--environment <slug>] [--provider <provider>] [--event <name>] [--property <name>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
-  siteos trace issues [--environment <slug>] [--provider <provider>] [--event <name>] [--state <all|active|snoozed|resolved|new>] [--rule <rule>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
-  siteos trace observations [--environment <slug>] [--provider <provider>] [--event <name>] [--kind <kind>] [--page-view <uuid>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace issues [--environment <slug>] [--provider <provider>] [--event <name>] [--state <all|active|snoozed|resolved|new>] [--rule <rule>] [--container-id <GTM-ID>] [--tag-id <id>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace observations [--environment <slug>] [--provider <provider>] [--event <name>] [--kind <kind>] [--page-view <uuid>] [--container-id <GTM-ID>] [--tag-id <id>] [--result <result>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
   siteos trace issue show --id <uuid> [--environment <slug>] [--cursor <finding-cursor>] [--json]
   siteos trace observation show --batch-id <uuid> --event-id <uuid> [--environment <slug>] [--json]
   siteos trace installation <show|ensure|save|publish> [--environment <slug>] [--input <draft.json>] [--json]
@@ -7974,7 +8017,7 @@ Use --expected-draft-version when publishing a reviewed tracking plan; a conflic
 Explorer commands require the matching Trace server. They read one page and return nextCursor.
 Reuse the same filters with that cursor; omit it to start a fresh time window.
 Providers: siteos_analytics, ga4, google_ads, hubspot, meta, custom (data layer source).
-Kinds: data_layer, fetch, xhr, beacon, resource, consent, heartbeat, runtime_diagnostic.
+Kinds: data_layer, fetch, xhr, beacon, resource, consent, heartbeat, runtime_diagnostic, tag_execution.
 Lists also accept --provider, --event, --property, --page-view, --search, --state, --rule and --kind.
 Destinations are observed analytics services; a data layer event alone does not prove delivery.`,
   integrations: `Manage shared Organization connections and notification destinations.
@@ -8016,6 +8059,9 @@ async function runServiceCommand(service, options) {
         event: { type: "string" },
         property: { type: "string" },
         "page-view": { type: "string" },
+        "container-id": { type: "string" },
+        "tag-id": { type: "string" },
+        result: { type: "string" },
         search: { type: "string" },
         state: { type: "string" },
         rule: { type: "string" },
@@ -8050,6 +8096,9 @@ async function runServiceCommand(service, options) {
         environments: [],
         report: ["environment"],
         ...TRACE_EXPLORER_FLAGS,
+        "notifications save": ["environment", "input"],
+        "notifications retry": ["environment", "input"],
+        "schema restart": ["environment", "input"],
         ...Object.fromEntries(
           ["installation", "tracking-plan"].flatMap(
             (section) => ["show", "ensure", "save", "publish"].map((operation) => [
@@ -8246,7 +8295,7 @@ async function runServiceCommand(service, options) {
         result = await request(site);
       else if (action === "environments" && positionals.length === 1)
         result = await request(`${site}/environments`);
-      else if (action === "report" || action === "installation" || action === "tracking-plan" || explorerSuffix !== null) {
+      else if (action === "notifications" || action === "schema" || action === "report" || action === "installation" || action === "tracking-plan" || explorerSuffix !== null) {
         const response = z13.object({
           environments: z13.array(
             z13.object({ id: z13.string(), slug: z13.string() })
@@ -8275,6 +8324,12 @@ async function runServiceCommand(service, options) {
         const base = `/environments/${encodeURIComponent(matches[0].id)}`;
         if (explorerSuffix !== null) {
           result = await request(`${base}${explorerSuffix}`);
+        } else if (route === "notifications retry" || route === "schema restart") {
+          result = await request(
+            `${base}/${route === "schema restart" ? "schema-baselines/reset" : "notification-retries"}`,
+            "POST",
+            await inputFile()
+          );
         } else if (action === "report" && positionals.length === 1) {
           const detail = z13.object({
             site: z13.object({
@@ -8710,16 +8765,8 @@ async function runAnalyticsCommand(options) {
   }
 }
 
-// src/services/seo-command.ts
-import { writeFile as writeFile10 } from "fs/promises";
-import path28 from "path";
-import { parseArgs as parseArgs8 } from "util";
-import { z as z19 } from "zod";
-
-// src/services/seo-research-command.ts
-import { randomUUID as randomUUID6 } from "crypto";
-import { setTimeout as setTimeout2 } from "timers/promises";
-import { isDeepStrictEqual, parseArgs as parseArgs5 } from "util";
+// src/services/seo-repair-command.ts
+import { parseArgs as parseArgs5 } from "util";
 import { z as z16 } from "zod";
 
 // src/services/seo-report-client.ts
@@ -8823,7 +8870,110 @@ function seoReportFailure(cause, json, idempotencyKey) {
   };
 }
 
+// src/services/seo-repair-command.ts
+async function runSeoRepairCommand(options) {
+  const json = options.args.includes("--json");
+  try {
+    const { positionals, values } = parseArgs5({
+      args: options.args,
+      allowPositionals: true,
+      strict: true,
+      options: {
+        json: { type: "boolean" },
+        environment: { type: "string" },
+        resource: { type: "string" },
+        audit: { type: "string" },
+        url: { type: "string", multiple: true },
+        rule: { type: "string" }
+      }
+    });
+    const recheck = positionals[0] === "recheck";
+    if (positionals.length !== 1 || !recheck && positionals[0] !== "repair" || recheck && values.rule)
+      throw new Error(
+        "Use siteos seo repair or siteos seo recheck with documented flags."
+      );
+    if (!values.audit || values.audit.length > 160 || !values.url?.length || values.url.length > 20)
+      throw new Error(
+        "Choose a source --audit and between 1 and 20 --url values."
+      );
+    if (values.rule && values.rule.length > 120)
+      throw new Error("Use a documented rule ID.");
+    for (const value of values.url) {
+      const url = new URL(value);
+      if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.port || value.length > 2048)
+        throw new Error("Use eligible public HTTP(S) URLs.");
+    }
+    const client = await seoReportClient(options, values.environment);
+    if (values.resource && client.resourceId !== values.resource)
+      throw new Error(
+        "The selected Project environment does not match --resource. Select the environment from the repair brief first."
+      );
+    const urls = [...new Set(values.url)];
+    const response = recheck ? await client.request("/rechecks", "seo:audits:write", {
+      auditId: values.audit,
+      urls
+    }) : await client.request("/repair-brief", "seo:workspace:read", {
+      audit: values.audit,
+      urls,
+      ...values.rule ? { rule: values.rule } : {}
+    });
+    const record = versionedReport.parse(await response.json());
+    if (recheck) {
+      z16.object({
+        id: z16.string(),
+        resourceId: z16.literal(client.resourceId),
+        organizationId: z16.literal(client.organizationId),
+        state: z16.literal("queued")
+      }).parse(record.audit);
+      return { exitCode: 0, stdout: JSON.stringify(record, null, 2) };
+    }
+    const brief = z16.object({
+      schemaVersion: z16.literal(1),
+      context: z16.object({
+        auditId: z16.literal(values.audit),
+        resourceId: z16.literal(client.resourceId),
+        organizationId: z16.literal(client.organizationId),
+        selectedUrls: z16.array(z16.string()).min(1).max(20),
+        ruleId: z16.literal(values.rule ?? null)
+      }),
+      evidence: z16.array(
+        z16.object({
+          url: z16.string(),
+          findings: z16.array(z16.unknown()).max(12)
+        })
+      ).min(1).max(20),
+      suggestedGroups: z16.array(z16.unknown()),
+      verificationCommand: z16.string().min(1),
+      text: z16.string().min(1)
+    }).parse(record);
+    const canonical = (value) => {
+      const url = new URL(value);
+      url.hash = "";
+      return url.href;
+    };
+    const expected = new Set(urls.map(canonical));
+    if (brief.context.selectedUrls.length !== expected.size || new Set(brief.context.selectedUrls).size !== expected.size || brief.context.selectedUrls.some((url) => !expected.has(url)) || brief.evidence.length !== expected.size || new Set(brief.evidence.map((page) => page.url)).size !== expected.size || brief.evidence.some((page) => !expected.has(page.url)))
+      throw new Error("The repair brief does not match the selected URLs.");
+    return {
+      exitCode: 0,
+      stdout: json ? JSON.stringify(record, null, 2) : brief.text
+    };
+  } catch (cause) {
+    return seoReportFailure(cause, json);
+  }
+}
+
+// src/services/seo-command.ts
+import { writeFile as writeFile10 } from "fs/promises";
+import path28 from "path";
+import { parseArgs as parseArgs9 } from "util";
+import { z as z20 } from "zod";
+
 // src/services/seo-research-command.ts
+import { randomUUID as randomUUID6 } from "crypto";
+import { setTimeout as setTimeout2 } from "timers/promises";
+import { isDeepStrictEqual, parseArgs as parseArgs6 } from "util";
+import { z as z17 } from "zod";
 var RESEARCH_HELP = `
   siteos seo research summary [--environment <slug>] [--json]
   siteos seo research status --kind <kind> [--environment <slug>] [--json]
@@ -8864,11 +9014,11 @@ var kinds = [
   "brand",
   "ai-visibility"
 ];
-var requestSchema = z16.object({
-  kind: z16.enum(["domain", ...kinds]).transform((kind) => kind === "domain" ? "competitors" : kind),
-  target: z16.string().min(1).max(253)
+var requestSchema = z17.object({
+  kind: z17.enum(["domain", ...kinds]).transform((kind) => kind === "domain" ? "competitors" : kind),
+  target: z17.string().min(1).max(253)
 }).passthrough();
-var runStates = z16.enum([
+var runStates = z17.enum([
   "queued",
   "running",
   "completed",
@@ -8884,7 +9034,7 @@ var csvCell = (value) => {
 async function runSeoResearchCommand(options) {
   let idempotencyKey;
   try {
-    const { values, positionals } = parseArgs5({
+    const { values, positionals } = parseArgs6({
       args: options.args.slice(1),
       strict: true,
       allowPositionals: true,
@@ -8965,26 +9115,26 @@ async function runSeoResearchCommand(options) {
         );
     }
     const client = await seoReportClient(options, values.environment);
-    const resourceSchema = z16.object({
-      id: z16.literal(client.resourceId),
-      organizationId: z16.literal(client.organizationId)
+    const resourceSchema = z17.object({
+      id: z17.literal(client.resourceId),
+      organizationId: z17.literal(client.organizationId)
     }).passthrough();
-    const runSchema = z16.object({
-      id: z16.string(),
-      resourceId: z16.literal(client.resourceId),
-      organizationId: z16.literal(client.organizationId),
-      websiteUrl: z16.string(),
+    const runSchema = z17.object({
+      id: z17.string(),
+      resourceId: z17.literal(client.resourceId),
+      organizationId: z17.literal(client.organizationId),
+      websiteUrl: z17.string(),
       request: requestSchema,
       state: runStates,
-      createdAt: z16.string(),
-      finishedAt: z16.string().nullable(),
-      parts: z16.array(
-        z16.object({
-          key: z16.string(),
-          state: z16.enum(["completed", "failed"]),
-          error: z16.string().nullable(),
-          dataset: z16.record(z16.unknown()).nullable(),
-          observedAt: z16.string()
+      createdAt: z17.string(),
+      finishedAt: z17.string().nullable(),
+      parts: z17.array(
+        z17.object({
+          key: z17.string(),
+          state: z17.enum(["completed", "failed"]),
+          error: z17.string().nullable(),
+          dataset: z17.record(z17.unknown()).nullable(),
+          observedAt: z17.string()
         }).passthrough()
       )
     }).passthrough();
@@ -8998,36 +9148,36 @@ async function runSeoResearchCommand(options) {
     const query = `?kind=${encodeURIComponent(values.kind ?? "rankings")}`;
     let record;
     if (action.startsWith("serp ")) {
-      const snapshotSchema = z16.object({
-        id: z16.string(),
-        organizationId: z16.literal(client.organizationId),
-        resourceId: z16.literal(client.resourceId),
-        sourceRunId: z16.literal(id),
+      const snapshotSchema = z17.object({
+        id: z17.string(),
+        organizationId: z17.literal(client.organizationId),
+        resourceId: z17.literal(client.resourceId),
+        sourceRunId: z17.literal(id),
         request: requestSchema,
-        keywordKey: z16.literal(
+        keywordKey: z17.literal(
           values.keyword.normalize("NFKC").trim().toLowerCase().replace(/\s+/gu, " ")
         ),
-        state: z16.enum([
+        state: z17.enum([
           "queued",
           "running",
           "completed",
           "failed",
           "cancelled"
         ]),
-        dataset: z16.object({
-          type: z16.literal("serp"),
-          keyword: z16.string(),
-          country: z16.string(),
-          language: z16.string(),
-          device: z16.enum(["desktop", "mobile"]),
-          observedAt: z16.string(),
-          rows: z16.array(
-            z16.object({
-              position: z16.number(),
-              title: z16.string(),
-              url: z16.string(),
-              domain: z16.string(),
-              description: z16.string()
+        dataset: z17.object({
+          type: z17.literal("serp"),
+          keyword: z17.string(),
+          country: z17.string(),
+          language: z17.string(),
+          device: z17.enum(["desktop", "mobile"]),
+          observedAt: z17.string(),
+          rows: z17.array(
+            z17.object({
+              position: z17.number(),
+              title: z17.string(),
+              url: z17.string(),
+              domain: z17.string(),
+              description: z17.string()
             })
           )
         }).nullable()
@@ -9120,9 +9270,9 @@ async function runSeoResearchCommand(options) {
           name: values.name.trim(),
           ...values.id ? { id: values.id } : {}
         });
-        const saved = z16.object({
-          id: z16.string(),
-          name: z16.literal(values.name.trim()),
+        const saved = z17.object({
+          id: z17.string(),
+          name: z17.literal(values.name.trim()),
           request: requestSchema
         }).parse(record.saved);
         if (values.id && saved.id !== values.id || !isDeepStrictEqual(saved.request, plan.request))
@@ -9136,23 +9286,23 @@ async function runSeoResearchCommand(options) {
         action === "cancel" ? "run" : "write",
         {}
       );
-      z16.literal(true).parse(
+      z17.literal(true).parse(
         record[action === "cancel" ? "cancelled" : "removed"]
       );
     } else if (action === "summary") {
       record = await get("/summary");
       resourceSchema.parse(record.resource);
-      z16.array(z16.object({ kind: z16.enum(kinds), summary: z16.unknown() })).parse(
+      z17.array(z17.object({ kind: z17.enum(kinds), summary: z17.unknown() })).parse(
         record.checks
       );
     } else if (["status", "history", "saved list"].includes(action)) {
       const view = await get(query);
       resourceSchema.parse(view.resource);
-      const runs = z16.array(runSchema).parse(view.runs);
-      const saved = z16.array(
-        z16.object({
-          id: z16.string(),
-          name: z16.string(),
+      const runs = z17.array(runSchema).parse(view.runs);
+      const saved = z17.array(
+        z17.object({
+          id: z17.string(),
+          name: z17.string(),
           request: requestSchema
         }).passthrough()
       ).parse(view.saved);
@@ -9268,8 +9418,8 @@ async function runSeoResearchCommand(options) {
 }
 
 // src/services/seo-gsc-command.ts
-import { parseArgs as parseArgs6 } from "util";
-import { z as z17 } from "zod";
+import { parseArgs as parseArgs7 } from "util";
+import { z as z18 } from "zod";
 var GSC_HELP = `
   siteos seo gsc status [--environment <slug>] [--json]
   siteos seo gsc report [--dataset <pages|queries>] [--query <text>] [--filter <all|issues|declining>] [--sort <clicks|change|impressions>] [--page <number>] [--url <page-url>] [--environment <slug>] [--json]
@@ -9287,7 +9437,7 @@ Bind/disconnect require a current revision and separate settings authority. Disc
 `;
 async function runSeoGscCommand(options) {
   try {
-    const { values, positionals } = parseArgs6({
+    const { values, positionals } = parseArgs7({
       args: options.args.slice(1),
       strict: true,
       allowPositionals: true,
@@ -9369,13 +9519,13 @@ async function runSeoGscCommand(options) {
       `seo:search:${action === "sync" ? "sync" : writing ? "write" : "read"}`,
       body
     );
-    const runSchema = z17.object({
-      id: z17.string(),
-      resourceId: z17.literal(client.resourceId),
-      organizationId: z17.literal(client.organizationId),
-      websiteUrl: z17.string(),
-      siteUrl: z17.string(),
-      state: z17.enum([
+    const runSchema = z18.object({
+      id: z18.string(),
+      resourceId: z18.literal(client.resourceId),
+      organizationId: z18.literal(client.organizationId),
+      websiteUrl: z18.string(),
+      siteUrl: z18.string(),
+      state: z18.enum([
         "queued",
         "running",
         "completed",
@@ -9383,32 +9533,32 @@ async function runSeoGscCommand(options) {
         "failed",
         "cancelled"
       ]),
-      dates: z17.unknown()
+      dates: z18.unknown()
     }).passthrough();
-    const bindingSchema = z17.object({
-      resourceId: z17.literal(client.resourceId),
-      organizationId: z17.literal(client.organizationId),
-      websiteUrl: z17.string(),
-      siteUrl: z17.string(),
-      revision: z17.number().int().positive()
+    const bindingSchema = z18.object({
+      resourceId: z18.literal(client.resourceId),
+      organizationId: z18.literal(client.organizationId),
+      websiteUrl: z18.string(),
+      siteUrl: z18.string(),
+      revision: z18.number().int().positive()
     }).passthrough();
-    const metrics = z17.object({
-      clicks: z17.number(),
-      impressions: z17.number(),
-      ctr: z17.number(),
-      position: z17.number()
+    const metrics = z18.object({
+      clicks: z18.number(),
+      impressions: z18.number(),
+      ctr: z18.number(),
+      position: z18.number()
     }).passthrough().nullable();
     const validateView = (data) => {
       const record2 = versionedReport.parse(data);
-      z17.literal(client.resourceId).parse(record2.resourceId);
+      z18.literal(client.resourceId).parse(record2.resourceId);
       bindingSchema.nullable().parse(record2.binding);
       runSchema.nullable().parse(record2.latest);
       runSchema.nullable().parse(record2.report);
-      z17.array(
-        z17.object({ key: z17.string(), current: metrics, previous: metrics }).passthrough()
+      z18.array(
+        z18.object({ key: z18.string(), current: metrics, previous: metrics }).passthrough()
       ).parse(record2.rows);
-      z17.number().int().nonnegative().parse(record2.total);
-      z17.literal(values.dataset ?? "pages").parse(record2.dataset);
+      z18.number().int().nonnegative().parse(record2.total);
+      z18.literal(values.dataset ?? "pages").parse(record2.dataset);
       return record2;
     };
     if (action === "export") {
@@ -9424,9 +9574,9 @@ async function runSeoGscCommand(options) {
       const text = await response.text();
       if (values.format === "json") {
         const report = validateView(JSON.parse(text));
-        z17.literal(reportId).parse(runSchema.parse(report.report).id);
-        z17.array(z17.unknown()).length(rows).parse(report.rows);
-        z17.literal(truncated === "true").parse(report.truncated);
+        z18.literal(reportId).parse(runSchema.parse(report.report).id);
+        z18.array(z18.unknown()).length(rows).parse(report.rows);
+        z18.literal(truncated === "true").parse(report.truncated);
       }
       const output = await writeSeoReport(options, values.output, text);
       return {
@@ -9447,7 +9597,7 @@ async function runSeoGscCommand(options) {
       };
     }
     const record = versionedReport.parse(await response.json());
-    if (action === "disconnect") z17.literal(true).parse(record.unbound);
+    if (action === "disconnect") z18.literal(true).parse(record.unbound);
     else if (writing) {
       runSchema.parse(record.run);
       if (action === "bind") {
@@ -9469,8 +9619,8 @@ import { randomUUID as randomUUID7 } from "crypto";
 import { writeFile as writeFile9 } from "fs/promises";
 import path27 from "path";
 import { setTimeout as setTimeout3 } from "timers/promises";
-import { parseArgs as parseArgs7 } from "util";
-import { z as z18 } from "zod";
+import { parseArgs as parseArgs8 } from "util";
+import { z as z19 } from "zod";
 var PERFORMANCE_HELP = `
   siteos seo performance run --audit <id> --url <url> [--url <url>...] [--device <mobile|desktop>] [--idempotency-key <key>] [--environment <slug>] [--json]
   siteos seo performance list [--device <mobile|desktop>] [--environment <slug>] [--json]
@@ -9487,7 +9637,7 @@ Reuse the returned idempotency key after an uncertain run response. Wait default
 async function runSeoPerformanceCommand(options) {
   let idempotencyKey;
   try {
-    const { values, positionals } = parseArgs7({
+    const { values, positionals } = parseArgs8({
       args: options.args.slice(1),
       strict: true,
       allowPositionals: true,
@@ -9558,12 +9708,12 @@ async function runSeoPerformanceCommand(options) {
     const runtime = commonProjectRuntime(options);
     const writing = ["run", "cancel"].includes(action);
     const scope = writing ? "seo:audits:write" : "seo:workspace:read";
-    const batchSchema = z18.object({
-      id: z18.string(),
-      resourceId: z18.literal(context.resourceId),
-      organizationId: z18.literal(context.overview.project.organizationId),
-      sourceAuditId: z18.string(),
-      state: z18.enum([
+    const batchSchema = z19.object({
+      id: z19.string(),
+      resourceId: z19.literal(context.resourceId),
+      organizationId: z19.literal(context.overview.project.organizationId),
+      sourceAuditId: z19.string(),
+      state: z19.enum([
         "queued",
         "running",
         "completed",
@@ -9571,8 +9721,8 @@ async function runSeoPerformanceCommand(options) {
         "failed",
         "cancelled"
       ]),
-      device: z18.enum(["mobile", "desktop"]),
-      urls: z18.array(z18.string()).min(1).max(10)
+      device: z19.enum(["mobile", "desktop"]),
+      urls: z19.array(z19.string()).min(1).max(10)
     }).passthrough();
     const query = new URLSearchParams();
     if (values.device) query.set("device", values.device);
@@ -9620,10 +9770,10 @@ async function runSeoPerformanceCommand(options) {
           );
         const text = await response.text();
         if (values.format === "json") {
-          const parsed = z18.object({
-            contractVersion: z18.literal(1),
+          const parsed = z19.object({
+            contractVersion: z19.literal(1),
             batch: batchSchema,
-            pages: z18.array(z18.unknown())
+            pages: z19.array(z19.unknown())
           }).parse(JSON.parse(text));
           if (parsed.batch.id !== id)
             throw new Error(
@@ -9646,8 +9796,8 @@ async function runSeoPerformanceCommand(options) {
       }
       const data = await response.json();
       if (!response.ok) {
-        const error = z18.object({
-          error: z18.object({ code: z18.string(), message: z18.string().max(500) })
+        const error = z19.object({
+          error: z19.object({ code: z19.string(), message: z19.string().max(500) })
         }).safeParse(data);
         throw new SiteOSAuthApiError({
           code: error.success ? error.data.error.code : "SEO_REQUEST_FAILED",
@@ -9655,8 +9805,8 @@ async function runSeoPerformanceCommand(options) {
           status: response.status
         });
       }
-      const record = z18.object({ contractVersion: z18.literal(1) }).passthrough().parse(data);
-      if (action === "cancel") z18.literal(true).parse(record.cancelled);
+      const record = z19.object({ contractVersion: z19.literal(1) }).passthrough().parse(data);
+      if (action === "cancel") z19.literal(true).parse(record.cancelled);
       else if (action === "run") {
         const accepted = batchSchema.parse(record.batch);
         const normalize = (url) => {
@@ -9669,8 +9819,8 @@ async function runSeoPerformanceCommand(options) {
             "The queued check does not match the requested source, device and URLs."
           );
       } else {
-        z18.literal(context.resourceId).parse(record.resourceId);
-        z18.array(batchSchema).parse(record.batches);
+        z19.literal(context.resourceId).parse(record.resourceId);
+        z19.array(batchSchema).parse(record.batches);
         const selected = batchSchema.nullable().parse(record.batch);
         if (id && selected?.id !== id)
           throw new Error(
@@ -9697,7 +9847,7 @@ async function runSeoPerformanceCommand(options) {
   } catch (cause) {
     const error = {
       code: cause instanceof SiteOSAuthApiError ? cause.code : "SEO_COMMAND_FAILED",
-      message: cause instanceof z18.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The performance command failed."
+      message: cause instanceof z19.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The performance command failed."
     };
     return {
       exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,
@@ -9733,7 +9883,8 @@ Usage:
   siteos seo pages [--audit <id>] [--query <text>] [--url <url>] [--page <number>] [--environment <slug>] [--json]
   siteos seo issues [--audit <id>] [--rule <id>] [--page <number>] [--environment <slug>] [--json]
   siteos seo changes [--audit <id>] [--state <new|reopened|still_present|resolved|not_rechecked>] [--page <number>] [--environment <slug>] [--json]
-  siteos seo recheck --audit <id> --url <url> [--environment <slug>] [--json]
+  siteos seo repair --audit <id> --url <url> [--url <url>...] [--rule <id>] [--resource <expected-id>] [--environment <slug>] [--json]
+  siteos seo recheck --audit <id> --url <url> [--url <url>...] [--resource <expected-id>] [--environment <slug>] [--json]
   siteos seo issue <ignore|restore> --audit <id> --url <url> --rule <id> --reason <text> --revision <number> [--environment <slug>] [--json]
   siteos seo schedule show [--environment <slug>] [--json]
   siteos seo schedule set --enabled <true|false> --weekday <1-7> --time <HH:mm> --timezone <IANA> --revision <number> [--environment <slug>] [--json]
@@ -9749,7 +9900,9 @@ ${GSC_HELP.trim().split("\n\n")[0]}
 Schedule and notification writes require an owner/admin and the saved revision (initially 0).
 Export writes all matching rows to a new file; existing files are never overwritten.
 Runs are queued. Read audit show until terminal; an accepted run is not a completed check.
-Recheck accepts a URL observed in the source audit. Cross-page rules require a full audit.
+Repair reads a bounded brief for selected saved evidence; it does not start work.
+Recheck accepts 1\u201320 URLs observed in the source audit. Cross-page rules require a full audit.
+--resource verifies the selected environment binding before requesting a brief or recheck.
 Read the current disposition revision before ignore/restore; use 0 if no decision exists.
 Setup: siteos project connect seo. No crawl runs during setup.
 ${PERFORMANCE_HELP.trim().split("\n\n").slice(1).join("\n\n")}
@@ -9762,9 +9915,11 @@ async function runSeoCommand(options) {
     return runSeoPerformanceCommand(options);
   if (options.args[0] === "research") return runSeoResearchCommand(options);
   if (options.args[0] === "gsc") return runSeoGscCommand(options);
+  if (["repair", "recheck"].includes(options.args[0] ?? ""))
+    return runSeoRepairCommand(options);
   const json = options.args.includes("--json");
   try {
-    const { positionals, values } = parseArgs8({
+    const { positionals, values } = parseArgs9({
       args: options.args,
       strict: true,
       allowPositionals: true,
@@ -9827,7 +9982,6 @@ async function runSeoCommand(options) {
       pages: { flags: ["audit", "url", "query", "page"], args: 1 },
       issues: { flags: ["audit", "rule", "page"], args: 1 },
       changes: { flags: ["audit", "state", "page"], args: 1 },
-      recheck: { flags: ["audit", "url"], args: 1 },
       "issue ignore": {
         flags: ["audit", "url", "rule", "reason", "revision"],
         args: 2
@@ -9844,8 +9998,6 @@ async function runSeoCommand(options) {
       throw new Error(
         "Invalid SEO operation or flags. Run `siteos seo --help`."
       );
-    if (action === "recheck" && (!values.audit || !values.url))
-      throw new Error("Recheck requires --audit and --url.");
     if (action === "issue" && ["audit", "url", "rule", "reason", "revision"].some(
       (key) => !values[key]
     ))
@@ -9895,13 +10047,9 @@ async function runSeoCommand(options) {
       );
     const runtime = commonProjectRuntime(options);
     const retryNotification = route === "notifications retry";
-    const writing = retryNotification || setting || [
-      "audit run",
-      "audit cancel",
-      "recheck",
-      "issue ignore",
-      "issue restore"
-    ].includes(route);
+    const writing = retryNotification || setting || ["audit run", "audit cancel", "issue ignore", "issue restore"].includes(
+      route
+    );
     const scope = retryNotification ? "seo:notifications:write" : setting ? action === "schedule" ? "seo:schedule:write" : "seo:notifications:write" : !writing ? "seo:workspace:read" : action === "issue" ? "seo:issues:write" : "seo:audits:write";
     const grant = await runtime.grants.acquire({
       audience: "siteos-seo",
@@ -9930,7 +10078,7 @@ async function runSeoCommand(options) {
       query.set("state", values.state);
     }
     if (route === "audit show") query.set("audit", positionals[2]);
-    const suffix = retryNotification ? "/notification-retries" : automation ? setting ? `/${action}` : route === "notifications destinations" ? "/destinations" : "/automation" : action === "export" ? `/export?${query}` : route === "audit run" ? "/audits" : route === "audit cancel" ? `/audits/${encodeURIComponent(positionals[2])}/cancel` : action === "recheck" ? "/rechecks" : action === "issue" ? "/dispositions" : `?${query}`;
+    const suffix = retryNotification ? "/notification-retries" : automation ? setting ? `/${action}` : route === "notifications destinations" ? "/destinations" : "/automation" : action === "export" ? `/export?${query}` : route === "audit run" ? "/audits" : route === "audit cancel" ? `/audits/${encodeURIComponent(positionals[2])}/cancel` : action === "issue" ? "/dispositions" : `?${query}`;
     const body = retryNotification ? { notificationId: positionals[2] } : route === "schedule set" ? {
       enabled: values.enabled === "true",
       weekday: Number(values.weekday),
@@ -9943,7 +10091,7 @@ async function runSeoCommand(options) {
       minimumSeverity: values.severity,
       includeFailures: values.failures === "true",
       expectedRevision: Number(values.revision)
-    } : action === "recheck" ? { auditId: values.audit, urls: [values.url] } : action === "issue" ? {
+    } : action === "issue" ? {
       auditId: values.audit,
       url: values.url,
       ruleId: values.rule,
@@ -9977,15 +10125,15 @@ async function runSeoCommand(options) {
         );
       const text = await response.text();
       if (values.format === "json")
-        z19.object({
-          contractVersion: z19.literal(1),
-          audit: z19.object({
-            id: z19.literal(values.audit),
-            resourceId: z19.literal(context.resourceId)
+        z20.object({
+          contractVersion: z20.literal(1),
+          audit: z20.object({
+            id: z20.literal(values.audit),
+            resourceId: z20.literal(context.resourceId)
           }),
-          kind: z19.literal(values.kind),
-          totalRows: z19.literal(rows),
-          rows: z19.array(z19.unknown()).length(rows)
+          kind: z20.literal(values.kind),
+          totalRows: z20.literal(rows),
+          rows: z20.array(z20.unknown()).length(rows)
         }).parse(JSON.parse(text));
       const output = path28.resolve(options.cwd ?? process.cwd(), values.output);
       await writeFile10(output, text, { flag: "wx", mode: 384 });
@@ -10006,8 +10154,8 @@ async function runSeoCommand(options) {
     }
     const data = await response.json();
     if (!response.ok) {
-      const result = z19.object({
-        error: z19.object({ code: z19.string(), message: z19.string().max(500) })
+      const result = z20.object({
+        error: z20.object({ code: z20.string(), message: z20.string().max(500) })
       }).safeParse(data);
       throw new SiteOSAuthApiError({
         code: result.success ? result.data.error.code : "SEO_REQUEST_FAILED",
@@ -10015,34 +10163,34 @@ async function runSeoCommand(options) {
         status: response.status
       });
     }
-    const record = z19.object({ contractVersion: z19.literal(1) }).passthrough().parse(data);
+    const record = z20.object({ contractVersion: z20.literal(1) }).passthrough().parse(data);
     if (automation) {
-      z19.literal(context.resourceId).parse(record.resourceId);
-      const schedule = z19.object({
-        enabled: z19.boolean(),
-        weekday: z19.number().int().min(1).max(7),
-        time: z19.string(),
-        timeZone: z19.string(),
-        revision: z19.number().int().min(0),
-        nextRunAt: z19.string().nullable()
+      z20.literal(context.resourceId).parse(record.resourceId);
+      const schedule = z20.object({
+        enabled: z20.boolean(),
+        weekday: z20.number().int().min(1).max(7),
+        time: z20.string(),
+        timeZone: z20.string(),
+        revision: z20.number().int().min(0),
+        nextRunAt: z20.string().nullable()
       });
-      const notificationRoute = z19.object({
-        enabled: z19.boolean(),
-        minimumSeverity: z19.enum(["error", "warning"]),
-        includeFailures: z19.boolean(),
-        revision: z19.number().int().min(0),
-        destinationId: z19.string().nullable()
+      const notificationRoute = z20.object({
+        enabled: z20.boolean(),
+        minimumSeverity: z20.enum(["error", "warning"]),
+        includeFailures: z20.boolean(),
+        revision: z20.number().int().min(0),
+        destinationId: z20.string().nullable()
       });
       if (retryNotification) {
-        z19.literal(true).parse(record.retryQueued);
-        z19.literal(positionals[2]).parse(record.notificationId);
+        z20.literal(true).parse(record.retryQueued);
+        z20.literal(positionals[2]).parse(record.notificationId);
       } else if (route === "notifications destinations")
-        z19.object({
-          candidates: z19.array(
-            z19.object({
-              candidateId: z19.string(),
-              label: z19.string(),
-              availability: z19.literal("available")
+        z20.object({
+          candidates: z20.array(
+            z20.object({
+              candidateId: z20.string(),
+              label: z20.string(),
+              availability: z20.literal("available")
             })
           )
         }).parse(record);
@@ -10055,46 +10203,46 @@ async function runSeoCommand(options) {
         notificationRoute.parse(record.route);
       }
     } else if (!writing) {
-      const validated = z19.object({
-        resource: z19.object({
-          id: z19.literal(context.resourceId),
-          organizationId: z19.literal(context.overview.project.organizationId)
+      const validated = z20.object({
+        resource: z20.object({
+          id: z20.literal(context.resourceId),
+          organizationId: z20.literal(context.overview.project.organizationId)
         }),
-        audits: z19.array(z19.object({ id: z19.string() }).passthrough()),
-        audit: z19.object({
-          id: z19.string(),
-          resourceId: z19.literal(context.resourceId)
+        audits: z20.array(z20.object({ id: z20.string() }).passthrough()),
+        audit: z20.object({
+          id: z20.string(),
+          resourceId: z20.literal(context.resourceId)
         }).passthrough().nullable(),
-        pages: z19.array(z19.unknown()),
-        issues: z19.array(z19.unknown()),
-        changes: z19.array(z19.unknown()),
-        totalChanges: z19.number(),
-        dispositions: z19.array(z19.unknown())
+        pages: z20.array(z20.unknown()),
+        issues: z20.array(z20.unknown()),
+        changes: z20.array(z20.unknown()),
+        totalChanges: z20.number(),
+        dispositions: z20.array(z20.unknown())
       }).passthrough().parse(record);
       const selected = query.get("audit");
       if (selected && validated.audit?.id !== selected)
         throw new Error("The SEO response does not match the requested audit.");
     } else if (record.audit)
-      z19.object({
-        id: z19.string(),
-        resourceId: z19.literal(context.resourceId),
-        organizationId: z19.literal(context.overview.project.organizationId),
-        state: z19.literal("queued")
+      z20.object({
+        id: z20.string(),
+        resourceId: z20.literal(context.resourceId),
+        organizationId: z20.literal(context.overview.project.organizationId),
+        state: z20.literal("queued")
       }).parse(record.audit);
-    else if (route === "audit cancel") z19.literal(true).parse(record.cancelled);
+    else if (route === "audit cancel") z20.literal(true).parse(record.cancelled);
     else if (action === "issue")
-      z19.object({
-        url: z19.literal(values.url),
-        ruleId: z19.literal(values.rule),
-        ignored: z19.literal(positionals[1] === "ignore"),
-        revision: z19.literal(Number(values.revision) + 1)
+      z20.object({
+        url: z20.literal(values.url),
+        ruleId: z20.literal(values.rule),
+        ignored: z20.literal(positionals[1] === "ignore"),
+        revision: z20.literal(Number(values.revision) + 1)
       }).parse(record.disposition);
     else throw new Error("The SEO service returned an invalid response.");
     return { exitCode: 0, stdout: JSON.stringify(record, null, 2) };
   } catch (cause) {
     const error = {
       code: cause instanceof SiteOSAuthApiError ? cause.code : "SEO_COMMAND_FAILED",
-      message: cause instanceof z19.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The SEO command failed."
+      message: cause instanceof z20.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The SEO command failed."
     };
     return {
       exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,