pagegraph 0.14.1 → 0.15.1

package/dist/cli.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env bun
-import { $ as decodeUnknownEffect, $i as isNotUndefined, $n as tapErrorTag, $r as Error$1, $t as catchDefect, A as Defect, Ai as fromNullishOr, An as orDie, Ar as void_$2, At as transduce, B as Natural, Bi as none, Bn as runPromise, Br as LogToStderr$1, Bt as offerUnsafe, Ci as empty$2, Cn as logWarning, Cr as isDone, Ct as fromPull, D as BooleanLiterals, Di as make$22, Dn as matchEffect, Dr as isFailure, Dt as run$5, E as Boolean$4, Ei as getUnsafe, En as match$2, Er as fail$1, Et as mkString, F as Int$4, Fi as isNone, Fn as provideService, Ft as unwrap$1, G as String$6, Gi as assignProperty, Gn as serviceOption, Gr as onExitPrimitive, Gt as interrupt$1, H as Number$3, Hi as Prototype, Hr as callback, Ht as take, I as Json, Ii as isOption, In as raceFirst, Ir as hasInterruptsOnly, It as endUnsafe, J as TaggedStruct, Ji as redact, Jn as suspend$1, Jr as suspend, Jt as acquireUseRelease, K as Struct, Ki as BaseProto, Kn as sleep, Kr as succeed$1, Kt as runIn, L as Literal, Li as isSome, Ln as result, Lt as failCauseUnsafe, M as Error$2, Mi as getOrElse, Mn as promise, Mr as UnknownError$1, Mt as fromTransform$1, N as FalseLiterals, Ni as getOrNull, Nn as provide$1, Nr as done, Nt as mapDone, O as Class, Oi as exists, On as onExit, Or as isSuccess, Ot as runCollect, P as Finite, Pi as getOrUndefined, Pn as provideContext, Pr as fail$2, Pt as toTransform, Q as Unknown, Qi as isNotNull, Qn as tapError, Qr as MinimumLogLevel$1, Qt as callback$1, R as Literals$2, Ri as map$5, Rn as runFork, Rr as squash, Rt as make$20, Si as add, Sn as logInfo, Sr as doneUnsafe, St as fromChannel$1, T as ArraySchema, Ti as getOrUndefined$1, Tn as mapError, Tr as makeUnsafe$3, Tt as merge, U as Record, Ui as PipeInspectableProto, Un as scope, Ur as flatMap$1, Ut as make$19, V as NullOr, Vi as some, Vr as asSome, Vt as poll, W as Redacted, Wi as withFiber, Wn as scoped, Wr as getCurrentFiber, Wt as makeUnsafe$2, X as Tuple, Xi as isBoolean$1, Xn as tap, Xr as uninterruptibleMask, Xt as andThen, Y as TrueLiterals, Yi as hasProperty, Yn as sync$1, Yr as sync, Yt as addFinalizer$1, Z as Union, Zi as isFunction, Zn as tapCause, Zr as void_$1, Zt as as, _ as prependUrl, _i as reduce, _n as ignore, _r as addFinalizer, _t as make$21, a as layer$13, aa as constVoid, ai as millis, an as context, ar as void_, at as is, bi as Reference, bn as logDebug, br as makeUnsafe$1, bt as decodeText, c as mapRequest, ca as identity, ci as toMillis, cn as ensuring, cr as catchDone, ct as suspend$2, d as acceptJson, di as findFirstIndex, dn as fn, dr as mergeAll, dt as toCodecStringTree, ea as isNullish, ei as TaggedError, en as catchFilter, et as decodeUnknownOption, f as bearerToken, fi as findLast, fn as fnUntraced, fr as provide, ft as toJsonSchemaDocument, g as post, gi as of, gn as gen, gr as Scope, gt as isRedacted, h as get$3, hi as match$1, hn as forkScoped, hr as succeedContext, ht as withDecodingDefault, ia as isUndefined, ii as isFinite, in as clockWith, ir as uninterruptibleMask$1, it as fromJsonString, j as Duration, ji as fromUndefinedOr, jn as orElseSucceed, jr as Done, jt as unwrap$2, k as DateTimeUtc, ki as flatMap$3, kn as option, kr as succeed$4, kt as splitLines, la as pipe, li as empty$1, ln as fail, lr as effect, lt as tag, mi as map$4, mn as forever, mr as succeed$5, mt as withConstructorDefault, na as isObject$1, ni as format$1, nn as catchTags, nr as try_, nt as encodeEffect, o as HttpClient, oa as dual, on as contextWith, or as withFiber$1, ot as optional$3, p as bodyJson, pi as isReadonlyArrayNonEmpty, pn as forEach$1, pr as provideMerge, pt as toTaggedUnion, q as TaggedError$1, qi as format, qn as succeed$2, qr as succeedNone, qt as acquireRelease, r as decodeResearchState, ra as isString, ri as fromInputUnsafe$1, rn as catch_, rr as uninterruptible, rt as encodeSync, s as filterStatusOk, sa as flow, si as seconds, sn as effectify, sr as withSpan, st as optionalKey, ta as isNumber, ti as taggedEnum, tn as catchTag, tr as tryPromise, tt as decodeUnknownSync, u as schemaBodyJson, ua as pipeArguments, ui as findFirst, un as flatMap$2, ur as merge$1, ut as toCodecJson, vi as fail$3, vn as interrupt, vr as addFinalizerExit, vt as value, wi as get$2, wn as map$3, wr as isDoneUnsafe, wt as isStream, xi as Service, xn as logError, xr as _await, xt as empty, y as Redacted$1, yi as succeed$3, yn as isEffect, yr as close, yt as callback$2, z as MutableJson, zi as match, zn as runForkWith, zr as ConsoleRef, zt as offer } from "./state-BuJP_3Lr.js";
+import { $ as JsonObject, $i as getOrUndefined, $n as provideContext, $r as fail$2, $t as toTransform, A as writeResearchCheckpoint, Ai as findFirstIndex, An as fn, Ar as mergeAll, At as toCodecStringTree, Bi as Service, Bn as logError, Br as _await, Bt as empty, C as readWorkflowEdits, Ca as isUndefined, Ci as isFinite, Cn as clockWith, Cr as uninterruptibleMask$1, Ct as is, D as resolveWorkflowRepositoryRoot, Da as identity, Di as toMillis, Dn as ensuring, Dr as catchDone, Dt as suspend$2, E as resolveRepositoryReadPath, Ea as flow, Ei as seconds, En as effectify, Er as withSpan, Et as optionalKey, F as Redacted$1, Fi as of, Fn as gen, Fr as Scope, Ft as isRedacted, G as DateTimeUtc, Gi as getUnsafe, Gn as match$2, Gr as fail$1, Gt as mkString, H as Boolean$4, Hi as empty$2, Hn as logWarning, Hr as isDone, Ht as fromPull, Ii as reduce, In as ignore, Ir as addFinalizer, It as make$21, J as Error$2, Ji as flatMap$3, Jn as option, Jr as succeed$4, Jt as splitLines, K as Defect, Ki as make$22, Kn as matchEffect, Kr as isFailure, Kt as run$6, Li as fail$3, Ln as interrupt, Lr as addFinalizerExit, Lt as value, M as writeWorkflowFailure, Mi as isReadonlyArrayNonEmpty, Mn as forEach$1, Mr as provideMerge, Mt as toTaggedUnion, N as writeWorkflowProgress, Ni as map$4, Nn as forever, Nr as succeed$5, Nt as withConstructorDefault, O as createRunId, Oa as pipe, Oi as empty$1, On as fail, Or as effect, Ot as tag, P as TextTemplate, Pi as match$1, Pn as forkScoped, Pr as succeedContext, Pt as withDecodingDefault, Q as Json, Qi as getOrNull, Qn as provide$1, Qr as done, Qt as mapDone, Ri as succeed$3, Rn as isEffect, Rr as close, Rt as callback$2, Sa as isString, Si as fromInputUnsafe$1, Sn as catch_, Sr as uninterruptible, St as fromJsonString, T as writeWorkflowEdits, Ta as dual, Tn as contextWith, Tr as withFiber$1, Tt as optional$3, U as BooleanLiterals, Ui as get$2, Un as map$3, Ur as isDoneUnsafe, Ut as isStream, V as ArraySchema, Vi as add, Vn as logInfo, Vr as doneUnsafe, Vt as fromChannel$1, W as Class, Wi as getOrUndefined$1, Wn as mapError, Wr as makeUnsafe$3, Wt as merge, X as Finite, Xi as fromUndefinedOr, Xn as orElseSucceed, Xr as Done, Xt as unwrap$2, Y as FalseLiterals, Yi as fromNullishOr, Yn as orDie, Yr as void_$2, Yt as transduce, Z as Int$4, Zi as getOrElse, Zn as promise, Zr as UnknownError$1, Zt as fromTransform$1, _ as prependUrl, _a as isNotNull, _i as MinimumLogLevel$1, _n as callback$1, _r as tapError, _t as decodeUnknownEffect, a as layer$13, aa as none, ai as LogToStderr$1, an as offerUnsafe, ar as runPromise, at as NullOr, b as applyWorkflowEdits, ba as isNumber, bi as taggedEnum, bn as catchTag, br as tryPromise, bt as encodeEffect, c as mapRequest, ca as PipeInspectableProto, ci as flatMap$1, cn as make$19, cr as scope, ct as Redacted, d as acceptJson, da as BaseProto, di as succeed$1, dn as runIn, dr as sleep, dt as TaggedError$1, ea as isNone, en as unwrap$1, er as provideService, et as Literal, f as bearerToken, fa as format, fi as succeedNone, fn as acquireRelease, fr as succeed$2, ft as TaggedStruct, g as post, ga as isFunction, gi as void_$1, gn as as, gr as tapCause, gt as Unknown, h as get$3, ha as isBoolean$1, hi as uninterruptibleMask, hn as andThen, hr as tap, ht as Union, ia as match, ii as ConsoleRef, in as offer, ir as runForkWith, it as Null, j as writeRunBundle, ji as findLast, jn as fnUntraced, jr as provide, jt as toJsonSchemaDocument, k as serializeCause, ka as pipeArguments, ki as findFirst, kn as flatMap$2, kr as merge$1, kt as toCodecJson, la as withFiber, li as getCurrentFiber, ln as makeUnsafe$2, lr as scoped, lt as String$6, ma as hasProperty, mi as sync, mn as addFinalizer$1, mr as sync$1, mt as Tuple, na as isSome, nn as failCauseUnsafe, nr as result$1, nt as MutableJson, o as HttpClient, oa as some, oi as asSome, on as poll, ot as Number$3, p as bodyJson, pa as redact, pi as suspend, pn as acquireUseRelease, pr as suspend$1, pt as TrueLiterals, q as Duration, qi as exists, qn as onExit, qr as isSuccess, qt as runCollect, ra as map$5, ri as squash, rn as make$20, rr as runFork, rt as Natural, s as filterStatusOk, sa as Prototype, si as callback, sn as take, st as Record, t as decodeResearchState, ta as isOption, ti as hasInterruptsOnly, tn as endUnsafe, tr as raceFirst, tt as Literals$2, u as schemaBodyJson, ua as assignProperty, ui as onExitPrimitive, un as interrupt$1, ur as serviceOption, ut as Struct, va as isNotUndefined, vi as Error$1, vn as catchDefect, vr as tapErrorTag, vt as decodeUnknownOption, w as workflowEditsArtifact, wa as constVoid, wi as millis, wn as context, wr as void_, wt as mutable, x as decodeActionState, xa as isObject$1, xi as format$1, xn as catchTags, xr as try_, xt as encodeSync, ya as isNullish, yi as TaggedError, yn as catchFilter, yt as decodeUnknownSync, zi as Reference, zn as logDebug, zr as makeUnsafe$1, zt as decodeText } from "./state-2ikjo7uI.js";
 import * as NFS from "node:fs";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import * as NodeChildProcess from "node:child_process";
 import { execFileSync, spawn } from "node:child_process";
 import { PassThrough } from "node:stream";
 import * as NodeCrypto from "node:crypto";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import * as OS from "node:os";
 import { tmpdir } from "node:os";
 import * as Path from "node:path";
-import { dirname, join, relative, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import * as NodeUrl from "node:url";
 import { pathToFileURL } from "node:url";
 import * as readline from "node:readline";
-import { mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
 import { createRunnableDevEnvironment, resolveConfig } from "vite";
 import { createServer, request } from "node:http";
 import { request as request$1 } from "node:https";
@@ -2362,7 +2362,7 @@ const layer$12 = /*#__PURE__*/ effect(ChildProcessSpawner, /* @__PURE__ */ gen(f
 						evaluate: () => nodeStream,
 						onError: (error) => toPlatformError(`fromWritable(fd${fd})`, toError(error), command)
 					});
-					if (config.stream) yield* forkScoped(run$5(config.stream, sink));
+					if (config.stream) yield* forkScoped(run$6(config.stream, sink));
 					inputSinks.set(fd, sink);
 					break;
 				}
@@ -2396,7 +2396,7 @@ const layer$12 = /*#__PURE__*/ effect(ChildProcessSpawner, /* @__PURE__ */ gen(f
 			endOnDone: config.endOnDone,
 			encoding: config.encoding
 		});
-		if (isStream(config.stream)) return as(forkScoped(run$5(config.stream, sink)), sink);
+		if (isStream(config.stream)) return as(forkScoped(run$6(config.stream, sink)), sink);
 		return succeed$2(sink);
 	});
 	const setupChildOutputStreams = (command, childProcess, stdoutConfig, stderrConfig) => {
@@ -3204,7 +3204,7 @@ const makeFileInfo = (stat) => try_({
 	}),
 	catch: handleBadArgument("stat")
 });
-const stat = /*#__PURE__*/ (() => {
+const stat$1 = /*#__PURE__*/ (() => {
 	const nodeStat = /*#__PURE__*/ effectify(NFS.stat, /*#__PURE__*/ handleErrnoException("FileSystem", "stat"), /*#__PURE__*/ handleBadArgument("stat"));
 	return (path) => flatMap$2(nodeStat(path, { bigint: true }), makeFileInfo);
 })();
@@ -3226,7 +3226,7 @@ const watchNode = (path, info, options) => callback$2((queue) => acquireRelease(
 		if (!path) return;
 		switch (event) {
 			case "rename":
-				runFork(matchEffect(stat(Path.resolve(directory, path)), {
+				runFork(matchEffect(stat$1(Path.resolve(directory, path)), {
 					onSuccess: (_) => offer(queue, {
 						_tag: "Create",
 						path
@@ -3259,7 +3259,7 @@ const watchNode = (path, info, options) => callback$2((queue) => acquireRelease(
 	});
 	return watcher;
 }), (watcher) => sync$1(() => watcher.close())));
-const watch = (backend, path, options) => stat(path).pipe(map$3((stat) => backend.pipe(flatMap$3((_) => _.register(path, stat, options)), getOrElse(() => watchNode(path, stat, options)))), unwrap$2);
+const watch = (backend, path, options) => stat$1(path).pipe(map$3((stat) => backend.pipe(flatMap$3((_) => _.register(path, stat, options)), getOrElse(() => watchNode(path, stat, options)))), unwrap$2);
 const writeFile$1 = (path, data, options) => callback$1((resume, signal) => {
 	try {
 		NFS.writeFile(path, data, {
@@ -3294,7 +3294,7 @@ const makeFileSystem = /*#__PURE__*/ map$3(/*#__PURE__*/ serviceOption(WatchBack
 	realPath,
 	remove,
 	rename: rename$1,
-	stat,
+	stat: stat$1,
 	symlink,
 	truncate,
 	utimes,
@@ -6009,7 +6009,7 @@ const Password = (options) => basePrompt(options, "password").pipe(map$2(make$21
 * @category running
 * @since 4.0.0
 */
-const run$4 = /*#__PURE__*/ fnUntraced(function* (self) {
+const run$5 = /*#__PURE__*/ fnUntraced(function* (self) {
 	const terminal = yield* Terminal;
 	const input = yield* terminal.readInput;
 	return yield* runWithInput(self, terminal, input);
@@ -6100,7 +6100,7 @@ const proto = {
 	.../*#__PURE__*/ Prototype({
 		label: "Prompt",
 		evaluate() {
-			return run$4(this);
+			return run$5(this);
 		}
 	}),
 	[TypeId$6]: { _Output: (_) => _ }
@@ -9603,7 +9603,7 @@ const scanCommandLevel = (tokens, context) => {
 };
 //#endregion
 //#region node_modules/effect/dist/cli/internal/wizard.js
-const run$3 = /*#__PURE__*/ fnUntraced(function* (command, options) {
+const run$4 = /*#__PURE__*/ fnUntraced(function* (command, options) {
 	const commandPath = options?.commandPath ?? [command.name];
 	const selected = getCommandAtPath(command, commandPath);
 	const commandLine = (options?.prefix ?? commandPath).map((value) => commandLineArg(value));
@@ -9638,7 +9638,7 @@ const promptCommand = /*#__PURE__*/ fnUntraced(function* (command, commandLine,
 		if (visibleSubcommands.length > 0) yield* logCurrentCommand(commandLine);
 	}
 	if (visibleSubcommands.length === 0) return;
-	const child = yield* run$4(Select({
+	const child = yield* run$5(Select({
 		message: "Command",
 		choices: visibleSubcommands.map((command) => ({
 			title: command.name,
@@ -9658,7 +9658,7 @@ const promptParam = /*#__PURE__*/ fnUntraced(function* (param) {
 	const single = getUnderlyingSingleOrThrow(param);
 	const metadata = getParamMetadata(param);
 	if (metadata.isOptional) {
-		if (!(yield* run$4(Confirm({
+		if (!(yield* run$5(Confirm({
 			message: `Set ${renderParamLabel(single)}?`,
 			initial: false
 		})))) {
@@ -9666,7 +9666,7 @@ const promptParam = /*#__PURE__*/ fnUntraced(function* (param) {
 			return [];
 		}
 	}
-	const count = !metadata.isVariadic ? 1 : yield* run$4(Int$2({
+	const count = !metadata.isVariadic ? 1 : yield* run$5(Int$2({
 		message: `${renderParamLabel(single)} count`,
 		default: getOrElse(metadata.variadicMin, () => 0),
 		min: getOrElse(metadata.variadicMin, () => 0),
@@ -9689,7 +9689,7 @@ const promptParam = /*#__PURE__*/ fnUntraced(function* (param) {
 const promptSingle = (single) => {
 	const message = renderParamMessage(single);
 	switch (single.primitiveType._tag) {
-		case "Boolean": return map$3(run$4(Confirm({
+		case "Boolean": return map$3(run$5(Confirm({
 			message,
 			label: {
 				confirm: "true",
@@ -9702,7 +9702,7 @@ const promptSingle = (single) => {
 		})), (value) => commandLineArg(String(value)));
 		case "Choice": {
 			const choices = getChoiceKeys(single.primitiveType) ?? [];
-			return map$3(run$4(Select({
+			return map$3(run$5(Select({
 				message,
 				choices: choices.map((choice) => ({
 					title: choice,
@@ -9710,11 +9710,11 @@ const promptSingle = (single) => {
 				}))
 			})), commandLineArg);
 		}
-		case "Date": return map$3(run$4(Date$1({ message })), (date) => commandLineArg(date.toISOString()));
-		case "Finite": return map$3(run$4(Number$1({ message })), (value) => commandLineArg(String(value)));
-		case "Int": return map$3(run$4(Int$2({ message })), (value) => commandLineArg(String(value)));
-		case "Redacted": return map$3(run$4(Password({ message })), (value$1) => commandLineArg(value(value$1), "<redacted>"));
-		default: return map$3(run$4(String$4({ message })), commandLineArg);
+		case "Date": return map$3(run$5(Date$1({ message })), (date) => commandLineArg(date.toISOString()));
+		case "Finite": return map$3(run$5(Number$1({ message })), (value) => commandLineArg(String(value)));
+		case "Int": return map$3(run$5(Int$2({ message })), (value) => commandLineArg(String(value)));
+		case "Redacted": return map$3(run$5(Password({ message })), (value$1) => commandLineArg(value(value$1), "<redacted>"));
+		default: return map$3(run$5(String$4({ message })), commandLineArg);
 	}
 };
 const commandLineArg = (value, displayValue = value) => ({
@@ -10276,7 +10276,7 @@ const showUserError = (error$4) => gen(function* () {
 * @category running
 * @since 4.0.0
 */
-const run$2 = /*#__PURE__*/ dual(2, (command, config) => Stdio.use(({ args }) => flatMap$2(args, (args) => runWith(command, config)(args))));
+const run$3 = /*#__PURE__*/ dual(2, (command, config) => Stdio.use(({ args }) => flatMap$2(args, (args) => runWith(command, config)(args))));
 /**
 * Runs a command with explicitly provided arguments instead of using arguments from `Stdio`.
 *
@@ -10387,12 +10387,12 @@ const runWith = (command, config) => {
 			if (flag === Wizard) return yield* gen(function* () {
 				yield* log(renderIntroduction(command.name, config.version, command.description));
 				const prefix = [command.name, ...args.filter((arg) => arg !== "--wizard" && !arg.startsWith("--wizard="))];
-				const wizardResult = yield* run$3(command, {
+				const wizardResult = yield* run$4(command, {
 					commandPath,
 					prefix
 				});
 				yield* log(renderCompletion(wizardResult.displayArgs));
-				if (yield* run$4(Toggle({
+				if (yield* run$5(Toggle({
 					message: "Run this command?",
 					initial: true,
 					active: "yes",
@@ -10412,7 +10412,7 @@ const runWith = (command, config) => {
 			commandPath,
 			errors: parsedArgs.errors
 		});
-		const parseResult = yield* result(commandImpl.parse(parsedArgs));
+		const parseResult = yield* result$1(commandImpl.parse(parsedArgs));
 		if (parseResult._tag === "Failure") return yield* new ShowHelp({
 			commandPath,
 			errors: [parseResult.failure]
@@ -10434,7 +10434,378 @@ const runWith = (command, config) => {
 };
 //#endregion
 //#region package.json
-var version = "0.14.1";
+var version = "0.15.1";
+//#endregion
+//#region node_modules/effect/dist/cli/Argument.js
+/**
+* Creates a positional string argument.
+*
+* **Example** (Creating a string argument)
+*
+* ```ts import.meta.vitest
+* import { Argument } from "effect/cli"
+*
+* const filename = Argument.String("filename")
+* filename.kind // => "argument"
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const String$1 = (name) => String$3(argumentKind, name);
+/**
+* Makes a positional argument optional.
+*
+* **Example** (Making an argument optional)
+*
+* ```ts import.meta.vitest
+* import { Argument } from "effect/cli"
+*
+* const optionalVersion = Argument.String("version").pipe(Argument.optional)
+* optionalVersion.kind // => "argument"
+* ```
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const optional = (arg) => optional$2(arg);
+/**
+* Adds a description to a positional argument.
+*
+* **Example** (Adding an argument description)
+*
+* ```ts import.meta.vitest
+* import { Argument } from "effect/cli"
+*
+* const filename = Argument.String("filename").pipe(
+*   Argument.withDescription("The input file to process")
+* )
+* filename.kind // => "argument"
+* ```
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const withDescription = /*#__PURE__*/ dual(2, (self, description) => withDescription$3(self, description));
+/**
+* Creates a variadic positional argument that accepts multiple values.
+*
+* **Example** (Accepting multiple values)
+*
+* ```ts import.meta.vitest
+* import { Argument } from "effect/cli"
+*
+* // Accept any number of files
+* const anyFiles = Argument.String("files").pipe(Argument.variadic)
+*
+* // Accept at least 1 file
+* const atLeastOneFile = Argument.String("files").pipe(
+*   Argument.variadic({ min: 1 })
+* )
+*
+* // Accept between 1 and 5 files
+* const limitedFiles = Argument.String("files").pipe(
+*   Argument.variadic({ min: 1, max: 5 })
+* )
+*
+* const kinds = [anyFiles.kind, atLeastOneFile.kind, limitedFiles.kind] // => ["argument", "argument", "argument"]
+* ```
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const variadic = /*#__PURE__*/ dual((args) => isParam(args[0]), (self, options) => variadic$1(self, options));
+//#endregion
+//#region src/cli/output.ts
+/**
+* Shared surfaces for the `pagegraph` CLI. The three output planes:
+*  - **data** → stdout via {@link printJson} / {@link printText}. Under `--json`
+*    this is the *only* thing on stdout: no ANSI, no status, valid JSON.
+*  - **status** → stderr via Effect leveled logging (`Effect.logInfo` /
+*    `Effect.logDebug`), routed off stdout by `Logger.LogToStderr` in `main.ts`
+*    and gated by the built-in `--log-level` flag.
+*  - **diagnostics** → stderr; expected failures surface as {@link SeoCliError},
+*    printed by the entrypoint with a non-zero exit.
+*/
+/** Expected, user-facing CLI failure — message to stderr, process exits non-zero. */
+var SeoCliError = class extends TaggedError("SeoCliError") {};
+/** Machine-readable output. When set, stdout is exactly the JSON payload. */
+const jsonFlag = Boolean$1("json").pipe(withDescription$2("Emit the payload as JSON on stdout (no status, no color)"), withDefault(false));
+/**
+* Absolute origin the sitemap/robots projection is rendered under. It carries no
+* static default: the fallback comes from the loaded graph's site, which is not
+* known until the graph is acquired. Resolve it with {@link originOf}.
+*/
+const originFlag = String$2("origin").pipe(withDescription$2("Absolute origin for URLs (default: origin from the loaded graph)"), optional$1);
+/** The `--origin` flag when given, else the origin in the loaded graph's site identity. */
+const originOf = (flag, configured) => getOrElse(flag, () => configured);
+/**
+* `--indexable` / `--no-indexable`. When omitted, the loaded graph's site identity
+* decides; a non-indexable host yields a disallow-all robots.txt with no Sitemap line.
+*/
+const indexableFlag = Boolean$1("indexable").pipe(withDescription$2("Render as an indexable host; --no-indexable = disallow-all robots.txt"), optional$1);
+/** The `--indexable` flag when given, else the graph host's indexability. */
+const indexableOf = (flag, configured) => getOrElse(flag, () => configured);
+/** Data plane: pretty-printed JSON on stdout. */
+const printJson = (value) => log(JSON.stringify(value, null, 2));
+/** Data plane: a block of already-formatted text on stdout. */
+const printText = (text) => log(text);
+//#endregion
+//#region src/cli/load-config.ts
+/**
+* Config discovery and graph acquisition for the `pagegraph` CLI.
+*
+* The CLI knows how to *view* a graph; the host knows how to *produce* one. That
+* seam is a `pagegraph.config.ts` at the app root, found by walking up from the working
+* directory — so `bun run pagegraph check` works from anywhere inside the app.
+*
+* The config is a TypeScript module the CLI imports directly, which is one of the
+* reasons the `bin` runs under Bun (the other being the synchronous fd-1 flush in
+* `main.ts`).
+*/
+const CONFIG_FILENAMES = [
+	"pagegraph.config.ts",
+	"pagegraph.config.js",
+	"pagegraph.config.mjs"
+];
+const LEGACY_CONFIG_FILENAMES = [
+	"seo.config.ts",
+	"seo.config.js",
+	"seo.config.mjs"
+];
+const messageOf$2 = (cause) => cause instanceof Error ? cause.message : String(cause);
+/** First `pagegraph.config.*` at or above `from`, or undefined at the filesystem root. */
+const findConfigFile = (from) => {
+	let directory = resolve(from);
+	for (;;) {
+		for (const filename of CONFIG_FILENAMES) {
+			const candidate = join(directory, filename);
+			if (existsSync(candidate)) return candidate;
+		}
+		const parent = dirname(directory);
+		if (parent === directory) return void 0;
+		directory = parent;
+	}
+};
+/** Find an old config only to provide the explicit breaking-rename error. */
+const findLegacyConfigFile = (from) => {
+	let directory = resolve(from);
+	for (;;) {
+		for (const filename of LEGACY_CONFIG_FILENAMES) {
+			const candidate = join(directory, filename);
+			if (existsSync(candidate)) return candidate;
+		}
+		const parent = dirname(directory);
+		if (parent === directory) return void 0;
+		directory = parent;
+	}
+};
+const configNotFoundMessage = (cwd) => {
+	if (findLegacyConfigFile(cwd) !== void 0) return "seo.config.ts was renamed to pagegraph.config.ts; rename the file";
+	return `No ${CONFIG_FILENAMES[0]} in ${cwd} or any parent directory. Create one that exports \`defineSeoConfig({ loadGraph })\` from "pagegraph/config".`;
+};
+const isStringArray = (value) => Array.isArray(value) && value.every(isString);
+const isCoverageRules = (value) => Array.isArray(value) && value.every((rule) => isObject$1(rule) && isString(rule["path"]) && Number.isSafeInteger(rule["minInbound"]) && rule["minInbound"] > 0);
+const isPositiveInteger = (value) => Number.isSafeInteger(value) && value > 0;
+const isContentPolicy = (value) => isObject$1(value) && (value["minWords"] === void 0 || Array.isArray(value["minWords"]) && value["minWords"].every((rule) => isObject$1(rule) && isString(rule["path"]) && isPositiveInteger(rule["minWords"])));
+const isOgImagePolicy = (value) => isObject$1(value) && Object.keys(value).every((key) => key === "severity" || key === "publicDirectory") && (value["severity"] === void 0 || value["severity"] === "structural" || value["severity"] === "editorial" || value["severity"] === "off") && (value["publicDirectory"] === void 0 || isString(value["publicDirectory"]) && value["publicDirectory"].trim().length > 0);
+const isFreshnessPolicy = (value) => isObject$1(value) && isPositiveInteger(value["maxAgeDays"]);
+const isStringRecord = (value) => isObject$1(value) && Object.values(value).every(isString);
+const isWorkflowTimeout = (value) => Number.isSafeInteger(value) && value > 0 && value <= 2147483647;
+const isStringArrayRecord = (value) => isObject$1(value) && Object.values(value).every(isStringArray);
+const isWorkflowConfig = (value) => {
+	if (!isObject$1(value) || !isObject$1(value["agent"])) return false;
+	const agent = value["agent"];
+	const context = value["context"];
+	return isString(agent["presetDirectory"]) && isString(agent["defaultModel"]) && (agent["models"] === void 0 || isStringRecord(agent["models"])) && (agent["timeoutMs"] === void 0 || isWorkflowTimeout(agent["timeoutMs"])) && (context === void 0 || isObject$1(context) && (context["files"] === void 0 || isStringArray(context["files"])) && (context["byWorkflow"] === void 0 || isStringArrayRecord(context["byWorkflow"]))) && (value["runsDirectory"] === void 0 || isString(value["runsDirectory"])) && (value["repositoryRoot"] === void 0 || isString(value["repositoryRoot"]) && value["repositoryRoot"].trim().length > 0);
+};
+const CLI_CONFIG_FIELDS = /* @__PURE__ */ new Set([
+	"loadGraph",
+	"transform",
+	"coverage",
+	"ogImage",
+	"content",
+	"freshness",
+	"workflows"
+]);
+/**
+* `pagegraph.config.ts` is the consumer's file and may be plain JS, so its types are
+* a suggestion, not a guarantee. Check every field the CLI consumes at this boundary.
+*/
+const isSeoCliConfig = (value) => isObject$1(value) && Object.keys(value).every((key) => CLI_CONFIG_FIELDS.has(key)) && isFunction(value["loadGraph"]) && (value["transform"] === void 0 || isFunction(value["transform"])) && (value["coverage"] === void 0 || isCoverageRules(value["coverage"])) && (value["content"] === void 0 || isContentPolicy(value["content"])) && (value["ogImage"] === void 0 || isOgImagePolicy(value["ogImage"])) && (value["freshness"] === void 0 || isFreshnessPolicy(value["freshness"])) && (value["workflows"] === void 0 || isWorkflowConfig(value["workflows"]));
+/** Import and validate one config path. */
+const loadConfigFile = (configPath) => gen(function* () {
+	yield* logDebug(`Loading SEO config from ${configPath}`);
+	const module = yield* tryPromise({
+		try: () => import(pathToFileURL(configPath).href),
+		catch: (cause) => new SeoCliError({ message: `Could not load ${configPath}: ${messageOf$2(cause)}` })
+	});
+	if (!isSeoCliConfig(module.default)) {
+		const duplicatedField = isObject$1(module.default) ? Object.keys(module.default).find((key) => !CLI_CONFIG_FIELDS.has(key)) : void 0;
+		return yield* new SeoCliError({ message: duplicatedField === void 0 ? `${configPath} must default-export defineSeoConfig({ loadGraph }).` : `${configPath} contains unsupported field "${duplicatedField}"; pagegraph.config.ts accepts only CLI fields, while site identity and plugin options belong to the graph loader and pagegraph() in vite.config.ts.` });
+	}
+	return module.default;
+});
+/**
+* Load the app's `pagegraph.config.ts`. Cheap to run more than once per process: the
+* ESM cache evaluates the config module exactly once.
+*/
+const loadSeoConfig = gen(function* () {
+	const cwd = process.cwd();
+	const configPath = findConfigFile(cwd);
+	if (configPath === void 0) return yield* new SeoCliError({ message: configNotFoundMessage(cwd) });
+	return yield* loadConfigFile(configPath);
+});
+/** Load the config together with the project root that owns it. */
+const loadSeoProjectConfig = gen(function* () {
+	const cwd = process.cwd();
+	const configPath = findConfigFile(cwd);
+	if (configPath === void 0) return yield* new SeoCliError({ message: configNotFoundMessage(cwd) });
+	return {
+		config: yield* loadConfigFile(configPath),
+		configPath,
+		root: dirname(configPath)
+	};
+});
+/**
+* Like {@link loadSeoConfig}, but `undefined` when no config exists. For a
+* framework-independent command that enriches its report when an app is present
+* without requiring one. A config that exists but fails to load still fails —
+* silence would hide a broken declaration.
+*/
+const loadSeoConfigOptional = gen(function* () {
+	const configPath = findConfigFile(process.cwd());
+	if (configPath === void 0) {
+		if (findLegacyConfigFile(process.cwd()) !== void 0) return yield* new SeoCliError({ message: configNotFoundMessage(process.cwd()) });
+		return;
+	}
+	return yield* loadConfigFile(configPath);
+});
+/**
+* The live SEO graph as a scoped resource: whatever the loader acquired (for
+* {@link viteGraphLoader}, an in-process Vite server) is released when the
+* surrounding `Effect.scoped` exits, on success or failure.
+*/
+const acquireLoadedGraph = (config, environment) => gen(function* () {
+	yield* logDebug("Loading the SEO graph…");
+	const load = async () => {
+		const loaded = await config.loadGraph(void 0, environment);
+		if (!isLoadedSeoGraph(loaded)) {
+			let disposeFailure;
+			if (isObject$1(loaded) && isFunction(loaded["dispose"])) try {
+				await loaded["dispose"]();
+			} catch (cause) {
+				disposeFailure = cause;
+			}
+			const contractError = "The graph loader must return { graph, site: { origin, indexable, robots }, dispose }.";
+			throw new Error(disposeFailure === void 0 ? contractError : `${contractError} Releasing the invalid result also failed: ${messageOf$2(disposeFailure)}`);
+		}
+		return loaded;
+	};
+	const loaded = yield* acquireRelease(tryPromise({
+		try: load,
+		catch: (cause) => new SeoCliError({ message: messageOf$2(cause) })
+	}), (acquired) => promise(() => acquired.dispose()).pipe(catchDefect((defect) => logWarning(`Could not dispose the SEO graph loader: ${messageOf$2(defect)}`))));
+	yield* logDebug(`Loaded SEO graph: ${loaded.graph.nodes.size} nodes, ${loaded.graph.edges.length} edges.`);
+	return loaded;
+});
+const isLoadedSeoGraph = (value) => {
+	if (!isObject$1(value) || !isObject$1(value["graph"]) || !(value["graph"]["nodes"] instanceof Map) || !Array.isArray(value["graph"]["edges"]) || !isFunction(value["dispose"]) || !isObject$1(value["site"])) return false;
+	const site = value["site"];
+	const robots = site["robots"];
+	let canonicalOrigin = false;
+	if (isString(site["origin"])) try {
+		const url = new URL(site["origin"]);
+		canonicalOrigin = (url.protocol === "http:" || url.protocol === "https:") && url.origin === site["origin"];
+	} catch {
+		canonicalOrigin = false;
+	}
+	return canonicalOrigin && isBoolean$1(site["indexable"]) && isObject$1(robots) && isStringArray(robots["disallow"]) && (robots["contentSignal"] === void 0 || isString(robots["contentSignal"])) && (robots["directives"] === void 0 || isStringArray(robots["directives"]));
+};
+/** {@link acquireLoadedGraph}, for commands that need only the graph. */
+const acquireGraph = (config) => map$3(acquireLoadedGraph(config), (loaded) => loaded.graph);
+//#endregion
+//#region src/cli/commands/apply.ts
+const runArgument = String$1("run").pipe(withDescription("Improve workflow run directory or run ID containing edits.json"));
+const onlyFlag = String$2("only").pipe(withDescription$2("Edit ID to apply (repeatable or comma-separated; default: every edit)"), between(0, 256));
+const checkFlag = Boolean$1("check").pipe(withDescription$2("Report which edits would apply without writing files"), withDefault(false));
+const symbols = {
+	applied: "✓",
+	applicable: "✓",
+	stale: "✗",
+	failed: "✗"
+};
+const renderApplyReport = (report) => [
+	...report.edits.map((edit) => `${symbols[edit.status]} ${edit.id} ${edit.status} ${edit.path}${edit.reason === void 0 ? "" : `: ${edit.reason}`}`),
+	"",
+	report.check ? `${report.counts.applicable} applicable, ${report.counts.stale} stale, ${report.counts.failed} failed (check only; no files changed)` : `${report.counts.applied} applied, ${report.counts.stale} stale, ${report.counts.failed} failed`
+].join("\n");
+const applyCommand = make$6("apply", {
+	run: runArgument,
+	only: onlyFlag,
+	check: checkFlag,
+	json: jsonFlag
+}).pipe(withDescription$1("Apply the edits an improve workflow recorded, refusing edits whose target text changed"), withExamples([
+	{
+		command: "pagegraph apply <run-id> --check",
+		description: "Report which recorded edits still apply"
+	},
+	{
+		command: "pagegraph apply <run-id>",
+		description: "Apply every recorded edit that still matches"
+	},
+	{
+		command: "pagegraph apply .pagegraph/runs/<run-id> --only e1,e3",
+		description: "Apply a subset of edits"
+	}
+]), withHandler(fnUntraced(function* ({ run, only, check, json }) {
+	const project = yield* loadSeoProjectConfig;
+	const workflows = project.config.workflows;
+	if (workflows === void 0) return yield* new SeoCliError({ message: "pagegraph.config.ts has no workflows configuration; run `pagegraph init` and configure workflows." });
+	const runsDirectory = workflows.runsDirectory ?? ".pagegraph/runs";
+	const loaded = yield* try_({
+		try: () => readWorkflowEdits(project.root, runsDirectory, run),
+		catch: (cause) => new SeoCliError({ message: cause instanceof Error ? cause.message : String(cause) })
+	});
+	if ((yield* try_({
+		try: () => realpathSync(loaded.edits.root),
+		catch: () => new SeoCliError({ message: `The run's recorded app root no longer exists: ${loaded.edits.root}` })
+	})) !== realpathSync(project.root)) return yield* new SeoCliError({ message: `Run ${loaded.edits.id} recorded edits for ${loaded.edits.root}; run apply from that app's pagegraph.config.ts directory.` });
+	const ids = only.flatMap((value) => value.split(",")).map((value) => value.trim()).filter((value) => value.length > 0);
+	const unknown = ids.filter((id) => !loaded.edits.edits.some((edit) => edit.id === id));
+	if (unknown.length > 0) return yield* new SeoCliError({ message: `Unknown edit ID(s) for run ${loaded.edits.id}: ${unknown.join(", ")}. Recorded: ${loaded.edits.edits.map((edit) => edit.id).join(", ") || "none"}.` });
+	const selected = ids.length === 0 ? loaded.edits.edits : loaded.edits.edits.filter((edit) => ids.includes(edit.id));
+	const outcomes = yield* tryPromise({
+		try: () => applyWorkflowEdits(project.root, selected, {
+			presetDirectory: resolve(project.root, workflows.agent.presetDirectory),
+			runsDirectory: resolve(project.root, runsDirectory),
+			check
+		}),
+		catch: (cause) => new SeoCliError({ message: cause instanceof Error ? cause.message : String(cause) })
+	});
+	const count = (status) => outcomes.filter((outcome) => outcome.status === status).length;
+	const report = {
+		kind: "pagegraph-apply-report",
+		schemaVersion: 1,
+		run: loaded.edits.id,
+		directory: loaded.directory,
+		check,
+		edits: outcomes,
+		counts: {
+			applied: count("applied"),
+			applicable: count("applicable"),
+			stale: count("stale"),
+			failed: count("failed")
+		}
+	};
+	if (json) yield* printJson(report);
+	else yield* printText(selected.length === 0 ? `Run ${loaded.edits.id} recorded no edits.` : renderApplyReport(report));
+	if (report.counts.stale + report.counts.failed > 0) return yield* new SeoCliError({ message: `${report.counts.stale} stale and ${report.counts.failed} failed edit(s) were not applied; see the report above.` });
+})));
 //#endregion
 //#region node_modules/effect/dist/ai/AiError.js
 /**
@@ -12125,7 +12496,7 @@ const TypeId$2 = "~effect/ai/DecisionModel";
 * @category models
 * @since 4.0.0
 */
-var DecisionUsage = class extends Class("effect/ai/DecisionModel/DecisionUsage")({
+var DecisionUsage$1 = class extends Class("effect/ai/DecisionModel/DecisionUsage")({
 	inputTokens: /*#__PURE__*/ optional$3(Finite),
 	outputTokens: /*#__PURE__*/ optional$3(Finite)
 }) {};
@@ -12244,7 +12615,7 @@ const make$3 = (params) => sync$1(() => {
 			decisions: definition.decisions
 		})), flatMap$2((response) => map$3(validateAnswers(definition.decisions, response.answers, roundingError), (answers) => ({
 			answers,
-			usage: new DecisionUsage({
+			usage: new DecisionUsage$1({
 				inputTokens: response.usage.inputTokens,
 				outputTokens: response.usage.outputTokens
 			})
@@ -12391,7 +12762,7 @@ const make$2 = (provider, modelName, layer) => Object.assign(Object.create(Proto
 * @category constructors
 * @since 4.0.0
 */
-const model = (model) => make$2("typesafe", model, layer({ model }));
+const model$1 = (model) => make$2("typesafe", model, layer({ model }));
 /**
 * Builds a decision service. Probabilities arrive rounded to two decimals, so
 * DecisionModel rescales small sum drift when it validates distributions and
@@ -13000,6 +13371,17 @@ function checkGraph(graph, options = {}) {
 		message: raw.message,
 		fix: raw.fix
 	})));
+	const imageSeverity = options.ogImage?.severity ?? "structural";
+	if (imageSeverity !== "off") for (const node of graph.nodes.values()) {
+		if (!isSitemapEligible(node) || node.head?.image?.url.trim()) continue;
+		violations.push({
+			rule: "missing-og-image",
+			severity: imageSeverity,
+			path: node.path,
+			message: `Sitemap page "${node.path}" has no resolved OG image.`,
+			fix: "Declare staticData.seo.head.image (or a collection image), or supply an ogImage resolver to pagegraph()."
+		});
+	}
 	const coverage = options.coverage;
 	if (coverage !== void 0 && coverage.length > 0) violations.push(...checkCoverage(graph, coverage));
 	if (options.freshness !== void 0) violations.push(...checkFreshness(graph, options.freshness, options.now));
@@ -14192,6 +14574,40 @@ const make = (options) => {
 	};
 };
 //#endregion
+//#region src/decide/record.ts
+/**
+* The one record every decision family emits, and the batch report that groups
+* them. A record is self-describing: which family, model, threshold, and input
+* produced the verdict, plus the raw family-decoded answers the model returned.
+*
+* Answers stay `Schema.Unknown` because each family owns its own answer shape;
+* the record is the transport, not another schema to keep in sync. `review`
+* mirrors `verdict === "review"` and is what `--review-out` selects on.
+*/
+/** Provider-reported token usage; unreported counts stay `undefined`. */
+const DecisionUsage = Struct({
+	inputTokens: optional$3(Number$3),
+	outputTokens: optional$3(Number$3)
+});
+/** One answered decision: what was asked, what came back, and how it landed. */
+const DecisionRecord = Struct({
+	/** Family-qualified stable id: `<family>:<index>` within the batch. */
+	decisionId: String$6,
+	schemaVersion: Literal(1),
+	family: String$6,
+	model: String$6,
+	threshold: Number$3,
+	/** sha256 of the canonical input JSON — the cache key. */
+	inputHash: String$6,
+	/** Human reference for the input: a URL, `query:…`, or `from → to`. */
+	inputRef: String$6,
+	verdict: String$6,
+	review: Boolean$4,
+	/** Family-decoded model answers, exactly as the family reads them. */
+	answers: Unknown,
+	usage: optional$3(DecisionUsage)
+});
+//#endregion
 //#region src/decide/run.ts
 /**
 * The decision runner. A family supplies its input schema, a definition built
@@ -14474,184 +14890,65 @@ function verifyDocuments(documents, heads) {
 	for (const document of documents) {
 		verifyPath(document.path);
 		if (paths.has(document.path)) throw new Error(`Duplicate captured document path "${document.path}"`);
-		paths.add(document.path);
-		const { hash, ...content } = document;
-		if (!/^[0-9a-f]{64}$/.test(hash) || hashDocument(content) !== hash) throw new Error(`Invalid captured document hash for "${document.path}"; build the app again.`);
-	}
-	const headPaths = /* @__PURE__ */ new Set();
-	for (const head of heads) {
-		verifyPath(head.path);
-		if (paths.has(head.path)) throw new Error(`Duplicate captured page path "${head.path}"`);
-		if (headPaths.has(head.path)) throw new Error(`Duplicate captured head path "${head.path}"`);
-		headPaths.add(head.path);
-	}
-	if (documents.length === 0 && heads.length === 0) throw new Error("No captured markdown pages; build the app or use --dev <origin>.");
-}
-/** Read the persisted document tree and graph heads; malformed captures always fail. */
-async function readMarkdownCapture(root, origin) {
-	const directory = resolve(root, ".pagegraph/documents");
-	const documents = [];
-	const visit = async (folder) => {
-		for (const entry of await readdir(folder, { withFileTypes: true })) {
-			const file = resolve(folder, entry.name);
-			if (entry.isDirectory()) {
-				await visit(file);
-				continue;
-			}
-			if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-			const document = decodeUnknownSync(fromJsonString(PageDocument))(await readFile(file, "utf8"), { onExcessProperty: "error" });
-			verifyPath(document.path);
-			const name = document.path === "/" ? "index" : document.path.slice(1);
-			if (file !== resolve(directory, `${name}.json`)) throw new Error(`Captured document "${document.path}" is stored at the wrong path: ${file}`);
-			documents.push(document);
-		}
-	};
-	try {
-		await visit(directory);
-	} catch (cause) {
-		if (cause instanceof Error && "code" in cause && cause.code === "ENOENT") throw new Error(`Missing markdown captures at ${directory}; build the app or use --dev <origin>.`);
-		throw cause;
-	}
-	const heads = decodeUnknownSync(fromJsonString(CaptureBundle.fields.heads))(await readFile(resolve(root, ".pagegraph/heads.json"), "utf8"), { onExcessProperty: "error" });
-	verifyDocuments(documents, heads);
-	return {
-		origin,
-		documents: documents.sort((a, b) => a.path.localeCompare(b.path)),
-		heads
-	};
-}
-/** The development endpoint supplies a complete capture from the running Start app. */
-async function readDevMarkdownCapture(origin) {
-	const base = new URL(origin);
-	if (!/^https?:$/.test(base.protocol) || base.origin !== origin) throw new Error(`Invalid development server origin "${origin}"; use an http(s) origin.`);
-	const endpoint = new URL("/__pagegraph/markdown.json", base);
-	const response = await fetch(endpoint);
-	if (!response.ok) throw new Error(`GET ${endpoint} returned HTTP ${response.status}.`);
-	const bundle = decodeUnknownSync(fromJsonString(CaptureBundle))(await response.text(), { onExcessProperty: "error" });
-	const canonical = new URL(bundle.origin);
-	if (!/^https?:$/.test(canonical.protocol) || canonical.origin !== bundle.origin) throw new Error(`Invalid captured markdown origin "${bundle.origin}"`);
-	verifyDocuments(bundle.documents, bundle.heads);
-	return bundle;
-}
-//#endregion
-//#region src/cli/output.ts
-/**
-* Shared surfaces for the `pagegraph` CLI. The three output planes:
-*  - **data** → stdout via {@link printJson} / {@link printText}. Under `--json`
-*    this is the *only* thing on stdout: no ANSI, no status, valid JSON.
-*  - **status** → stderr via Effect leveled logging (`Effect.logInfo` /
-*    `Effect.logDebug`), routed off stdout by `Logger.LogToStderr` in `main.ts`
-*    and gated by the built-in `--log-level` flag.
-*  - **diagnostics** → stderr; expected failures surface as {@link SeoCliError},
-*    printed by the entrypoint with a non-zero exit.
-*/
-/** Expected, user-facing CLI failure — message to stderr, process exits non-zero. */
-var SeoCliError = class extends TaggedError("SeoCliError") {};
-/** Machine-readable output. When set, stdout is exactly the JSON payload. */
-const jsonFlag = Boolean$1("json").pipe(withDescription$2("Emit the payload as JSON on stdout (no status, no color)"), withDefault(false));
-/**
-* Absolute origin the sitemap/robots projection is rendered under. It carries no
-* static default: the fallback comes from the loaded graph's site, which is not
-* known until the graph is acquired. Resolve it with {@link originOf}.
-*/
-const originFlag = String$2("origin").pipe(withDescription$2("Absolute origin for URLs (default: origin from the loaded graph)"), optional$1);
-/** The `--origin` flag when given, else the origin in the loaded graph's site identity. */
-const originOf = (flag, configured) => getOrElse(flag, () => configured);
-/**
-* `--indexable` / `--no-indexable`. When omitted, the loaded graph's site identity
-* decides; a non-indexable host yields a disallow-all robots.txt with no Sitemap line.
-*/
-const indexableFlag = Boolean$1("indexable").pipe(withDescription$2("Render as an indexable host; --no-indexable = disallow-all robots.txt"), optional$1);
-/** The `--indexable` flag when given, else the graph host's indexability. */
-const indexableOf = (flag, configured) => getOrElse(flag, () => configured);
-/** Data plane: pretty-printed JSON on stdout. */
-const printJson = (value) => log(JSON.stringify(value, null, 2));
-/** Data plane: a block of already-formatted text on stdout. */
-const printText = (text) => log(text);
-//#endregion
-//#region node_modules/effect/dist/cli/Argument.js
-/**
-* Creates a positional string argument.
-*
-* **Example** (Creating a string argument)
-*
-* ```ts import.meta.vitest
-* import { Argument } from "effect/cli"
-*
-* const filename = Argument.String("filename")
-* filename.kind // => "argument"
-* ```
-*
-* @stability unstable
-* @category constructors
-* @since 4.0.0
-*/
-const String$1 = (name) => String$3(argumentKind, name);
-/**
-* Makes a positional argument optional.
-*
-* **Example** (Making an argument optional)
-*
-* ```ts import.meta.vitest
-* import { Argument } from "effect/cli"
-*
-* const optionalVersion = Argument.String("version").pipe(Argument.optional)
-* optionalVersion.kind // => "argument"
-* ```
-*
-* @stability unstable
-* @category combinators
-* @since 4.0.0
-*/
-const optional = (arg) => optional$2(arg);
-/**
-* Adds a description to a positional argument.
-*
-* **Example** (Adding an argument description)
-*
-* ```ts import.meta.vitest
-* import { Argument } from "effect/cli"
-*
-* const filename = Argument.String("filename").pipe(
-*   Argument.withDescription("The input file to process")
-* )
-* filename.kind // => "argument"
-* ```
-*
-* @stability unstable
-* @category combinators
-* @since 4.0.0
-*/
-const withDescription = /*#__PURE__*/ dual(2, (self, description) => withDescription$3(self, description));
-/**
-* Creates a variadic positional argument that accepts multiple values.
-*
-* **Example** (Accepting multiple values)
-*
-* ```ts import.meta.vitest
-* import { Argument } from "effect/cli"
-*
-* // Accept any number of files
-* const anyFiles = Argument.String("files").pipe(Argument.variadic)
-*
-* // Accept at least 1 file
-* const atLeastOneFile = Argument.String("files").pipe(
-*   Argument.variadic({ min: 1 })
-* )
-*
-* // Accept between 1 and 5 files
-* const limitedFiles = Argument.String("files").pipe(
-*   Argument.variadic({ min: 1, max: 5 })
-* )
-*
-* const kinds = [anyFiles.kind, atLeastOneFile.kind, limitedFiles.kind] // => ["argument", "argument", "argument"]
-* ```
-*
-* @stability unstable
-* @category combinators
-* @since 4.0.0
-*/
-const variadic = /*#__PURE__*/ dual((args) => isParam(args[0]), (self, options) => variadic$1(self, options));
+		paths.add(document.path);
+		const { hash, ...content } = document;
+		if (!/^[0-9a-f]{64}$/.test(hash) || hashDocument(content) !== hash) throw new Error(`Invalid captured document hash for "${document.path}"; build the app again.`);
+	}
+	const headPaths = /* @__PURE__ */ new Set();
+	for (const head of heads) {
+		verifyPath(head.path);
+		if (paths.has(head.path)) throw new Error(`Duplicate captured page path "${head.path}"`);
+		if (headPaths.has(head.path)) throw new Error(`Duplicate captured head path "${head.path}"`);
+		headPaths.add(head.path);
+	}
+	if (documents.length === 0 && heads.length === 0) throw new Error("No captured markdown pages; build the app or use --dev <origin>.");
+}
+/** Read the persisted document tree and graph heads; malformed captures always fail. */
+async function readMarkdownCapture(root, origin) {
+	const directory = resolve(root, ".pagegraph/documents");
+	const documents = [];
+	const visit = async (folder) => {
+		for (const entry of await readdir(folder, { withFileTypes: true })) {
+			const file = resolve(folder, entry.name);
+			if (entry.isDirectory()) {
+				await visit(file);
+				continue;
+			}
+			if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
+			const document = decodeUnknownSync(fromJsonString(PageDocument))(await readFile(file, "utf8"), { onExcessProperty: "error" });
+			verifyPath(document.path);
+			const name = document.path === "/" ? "index" : document.path.slice(1);
+			if (file !== resolve(directory, `${name}.json`)) throw new Error(`Captured document "${document.path}" is stored at the wrong path: ${file}`);
+			documents.push(document);
+		}
+	};
+	try {
+		await visit(directory);
+	} catch (cause) {
+		if (cause instanceof Error && "code" in cause && cause.code === "ENOENT") throw new Error(`Missing markdown captures at ${directory}; build the app or use --dev <origin>.`);
+		throw cause;
+	}
+	const heads = decodeUnknownSync(fromJsonString(CaptureBundle.fields.heads))(await readFile(resolve(root, ".pagegraph/heads.json"), "utf8"), { onExcessProperty: "error" });
+	verifyDocuments(documents, heads);
+	return {
+		origin,
+		documents: documents.sort((a, b) => a.path.localeCompare(b.path)),
+		heads
+	};
+}
+/** The development endpoint supplies a complete capture from the running Start app. */
+async function readDevMarkdownCapture(origin) {
+	const base = new URL(origin);
+	if (!/^https?:$/.test(base.protocol) || base.origin !== origin) throw new Error(`Invalid development server origin "${origin}"; use an http(s) origin.`);
+	const endpoint = new URL("/__pagegraph/markdown.json", base);
+	const response = await fetch(endpoint);
+	if (!response.ok) throw new Error(`GET ${endpoint} returned HTTP ${response.status}.`);
+	const bundle = decodeUnknownSync(fromJsonString(CaptureBundle))(await response.text(), { onExcessProperty: "error" });
+	const canonical = new URL(bundle.origin);
+	if (!/^https?:$/.test(canonical.protocol) || canonical.origin !== bundle.origin) throw new Error(`Invalid captured markdown origin "${bundle.origin}"`);
+	verifyDocuments(bundle.documents, bundle.heads);
+	return bundle;
+}
 //#endregion
 //#region src/markdown/lock.ts
 const compare = (left, right) => left < right ? -1 : left > right ? 1 : 0;
@@ -14768,230 +15065,58 @@ const withCleanStdout = async (run) => {
 */
 const GRAPH_ENVIRONMENT = "pagegraph";
 const cliEnvironmentOverride = (command) => command === "build" ? { [GRAPH_ENVIRONMENT]: { isBundled: false } } : void 0;
-/** Locate the config without overriding its authored root with an inline root. */
-const appConfig = (options) => ({
-	configFile: options.configFile ?? [
-		"js",
-		"mjs",
-		"ts",
-		"cjs",
-		"mts",
-		"cts"
-	].map((extension) => resolve(options.root, `vite.config.${extension}`)).find(existsSync) ?? false,
-	logLevel: "error",
-	plugins: [{
-		name: "pagegraph:loader-root",
-		enforce: "pre",
-		config(config) {
-			config.root ??= options.root;
-		}
-	}]
-});
-const pluginApi = (plugins, configFile) => {
-	const plugin = plugins.find((candidate) => candidate.name === "pagegraph");
-	if (plugin?.api === void 0) throw new Error(`${configFile ?? "The Vite config"} does not register pagegraph() from "pagegraph/tanstack-start".`);
-	return plugin.api;
-};
-/** Resolve settings, artifact root and facts together without route discovery. */
-async function loadPagegraphSettings(options) {
-	const command = options.command ?? "build";
-	return withCleanStdout(async () => {
-		const config = await resolveConfig({
-			...appConfig(options),
-			mode: options.mode ?? "production",
-			environments: cliEnvironmentOverride(command)
-		}, command);
-		const settings = pluginApi(config.plugins, config.configFile).options;
-		let facts = {};
-		if (settings.facts !== void 0) {
-			const environment = createRunnableDevEnvironment(GRAPH_ENVIRONMENT, config, { hot: false });
-			await environment.init();
-			try {
-				await environment.pluginContainer.buildStart({});
-				facts = decodeFacts((await environment.runner.import(resolve(config.root, settings.facts)))["facts"]);
-			} finally {
-				await environment.close();
-			}
-		}
-		return {
-			root: config.root,
-			options: settings,
-			facts
-		};
-	});
-}
-//#endregion
-//#region src/cli/load-config.ts
-/**
-* Config discovery and graph acquisition for the `pagegraph` CLI.
-*
-* The CLI knows how to *view* a graph; the host knows how to *produce* one. That
-* seam is a `pagegraph.config.ts` at the app root, found by walking up from the working
-* directory — so `bun run pagegraph check` works from anywhere inside the app.
-*
-* The config is a TypeScript module the CLI imports directly, which is one of the
-* reasons the `bin` runs under Bun (the other being the synchronous fd-1 flush in
-* `main.ts`).
-*/
-const CONFIG_FILENAMES = [
-	"pagegraph.config.ts",
-	"pagegraph.config.js",
-	"pagegraph.config.mjs"
-];
-const LEGACY_CONFIG_FILENAMES = [
-	"seo.config.ts",
-	"seo.config.js",
-	"seo.config.mjs"
-];
-const messageOf$2 = (cause) => cause instanceof Error ? cause.message : String(cause);
-/** First `pagegraph.config.*` at or above `from`, or undefined at the filesystem root. */
-const findConfigFile = (from) => {
-	let directory = resolve(from);
-	for (;;) {
-		for (const filename of CONFIG_FILENAMES) {
-			const candidate = join(directory, filename);
-			if (existsSync(candidate)) return candidate;
-		}
-		const parent = dirname(directory);
-		if (parent === directory) return void 0;
-		directory = parent;
-	}
-};
-/** Find an old config only to provide the explicit breaking-rename error. */
-const findLegacyConfigFile = (from) => {
-	let directory = resolve(from);
-	for (;;) {
-		for (const filename of LEGACY_CONFIG_FILENAMES) {
-			const candidate = join(directory, filename);
-			if (existsSync(candidate)) return candidate;
-		}
-		const parent = dirname(directory);
-		if (parent === directory) return void 0;
-		directory = parent;
-	}
-};
-const configNotFoundMessage = (cwd) => {
-	if (findLegacyConfigFile(cwd) !== void 0) return "seo.config.ts was renamed to pagegraph.config.ts; rename the file";
-	return `No ${CONFIG_FILENAMES[0]} in ${cwd} or any parent directory. Create one that exports \`defineSeoConfig({ loadGraph })\` from "pagegraph/config".`;
-};
-const isStringArray = (value) => Array.isArray(value) && value.every(isString);
-const isCoverageRules = (value) => Array.isArray(value) && value.every((rule) => isObject$1(rule) && isString(rule["path"]) && Number.isSafeInteger(rule["minInbound"]) && rule["minInbound"] > 0);
-const isPositiveInteger = (value) => Number.isSafeInteger(value) && value > 0;
-const isContentPolicy = (value) => isObject$1(value) && (value["minWords"] === void 0 || Array.isArray(value["minWords"]) && value["minWords"].every((rule) => isObject$1(rule) && isString(rule["path"]) && isPositiveInteger(rule["minWords"])));
-const isFreshnessPolicy = (value) => isObject$1(value) && isPositiveInteger(value["maxAgeDays"]);
-const isStringRecord = (value) => isObject$1(value) && Object.values(value).every(isString);
-const isWorkflowTimeout = (value) => Number.isSafeInteger(value) && value > 0 && value <= 2147483647;
-const isStringArrayRecord = (value) => isObject$1(value) && Object.values(value).every(isStringArray);
-const isWorkflowConfig = (value) => {
-	if (!isObject$1(value) || !isObject$1(value["agent"])) return false;
-	const agent = value["agent"];
-	const context = value["context"];
-	return isString(agent["presetDirectory"]) && isString(agent["defaultModel"]) && (agent["models"] === void 0 || isStringRecord(agent["models"])) && (agent["timeoutMs"] === void 0 || isWorkflowTimeout(agent["timeoutMs"])) && (context === void 0 || isObject$1(context) && (context["files"] === void 0 || isStringArray(context["files"])) && (context["byWorkflow"] === void 0 || isStringArrayRecord(context["byWorkflow"]))) && (value["runsDirectory"] === void 0 || isString(value["runsDirectory"]));
-};
-const CLI_CONFIG_FIELDS = /* @__PURE__ */ new Set([
-	"loadGraph",
-	"transform",
-	"coverage",
-	"content",
-	"freshness",
-	"workflows"
-]);
-/**
-* `pagegraph.config.ts` is the consumer's file and may be plain JS, so its types are
-* a suggestion, not a guarantee. Check every field the CLI consumes at this boundary.
-*/
-const isSeoCliConfig = (value) => isObject$1(value) && Object.keys(value).every((key) => CLI_CONFIG_FIELDS.has(key)) && isFunction(value["loadGraph"]) && (value["transform"] === void 0 || isFunction(value["transform"])) && (value["coverage"] === void 0 || isCoverageRules(value["coverage"])) && (value["content"] === void 0 || isContentPolicy(value["content"])) && (value["freshness"] === void 0 || isFreshnessPolicy(value["freshness"])) && (value["workflows"] === void 0 || isWorkflowConfig(value["workflows"]));
-/** Import and validate one config path. */
-const loadConfigFile = (configPath) => gen(function* () {
-	yield* logDebug(`Loading SEO config from ${configPath}`);
-	const module = yield* tryPromise({
-		try: () => import(pathToFileURL(configPath).href),
-		catch: (cause) => new SeoCliError({ message: `Could not load ${configPath}: ${messageOf$2(cause)}` })
-	});
-	if (!isSeoCliConfig(module.default)) {
-		const duplicatedField = isObject$1(module.default) ? Object.keys(module.default).find((key) => !CLI_CONFIG_FIELDS.has(key)) : void 0;
-		return yield* new SeoCliError({ message: duplicatedField === void 0 ? `${configPath} must default-export defineSeoConfig({ loadGraph }).` : `${configPath} contains unsupported field "${duplicatedField}"; pagegraph.config.ts accepts only CLI fields, while site identity and plugin options belong to the graph loader and pagegraph() in vite.config.ts.` });
-	}
-	return module.default;
-});
-/**
-* Load the app's `pagegraph.config.ts`. Cheap to run more than once per process: the
-* ESM cache evaluates the config module exactly once.
-*/
-const loadSeoConfig = gen(function* () {
-	const cwd = process.cwd();
-	const configPath = findConfigFile(cwd);
-	if (configPath === void 0) return yield* new SeoCliError({ message: configNotFoundMessage(cwd) });
-	return yield* loadConfigFile(configPath);
-});
-/** Load the config together with the project root that owns it. */
-const loadSeoProjectConfig = gen(function* () {
-	const cwd = process.cwd();
-	const configPath = findConfigFile(cwd);
-	if (configPath === void 0) return yield* new SeoCliError({ message: configNotFoundMessage(cwd) });
-	return {
-		config: yield* loadConfigFile(configPath),
-		configPath,
-		root: dirname(configPath)
-	};
-});
-/**
-* Like {@link loadSeoConfig}, but `undefined` when no config exists. For a
-* framework-independent command that enriches its report when an app is present
-* without requiring one. A config that exists but fails to load still fails —
-* silence would hide a broken declaration.
-*/
-const loadSeoConfigOptional = gen(function* () {
-	const configPath = findConfigFile(process.cwd());
-	if (configPath === void 0) {
-		if (findLegacyConfigFile(process.cwd()) !== void 0) return yield* new SeoCliError({ message: configNotFoundMessage(process.cwd()) });
-		return;
-	}
-	return yield* loadConfigFile(configPath);
-});
-/**
-* The live SEO graph as a scoped resource: whatever the loader acquired (for
-* {@link viteGraphLoader}, an in-process Vite server) is released when the
-* surrounding `Effect.scoped` exits, on success or failure.
-*/
-const acquireLoadedGraph = (config, environment) => gen(function* () {
-	yield* logDebug("Loading the SEO graph…");
-	const load = async () => {
-		const loaded = await config.loadGraph(void 0, environment);
-		if (!isLoadedSeoGraph(loaded)) {
-			let disposeFailure;
-			if (isObject$1(loaded) && isFunction(loaded["dispose"])) try {
-				await loaded["dispose"]();
-			} catch (cause) {
-				disposeFailure = cause;
-			}
-			const contractError = "The graph loader must return { graph, site: { origin, indexable, robots }, dispose }.";
-			throw new Error(disposeFailure === void 0 ? contractError : `${contractError} Releasing the invalid result also failed: ${messageOf$2(disposeFailure)}`);
+/** Locate the config without overriding its authored root with an inline root. */
+const appConfig = (options) => ({
+	configFile: options.configFile ?? [
+		"js",
+		"mjs",
+		"ts",
+		"cjs",
+		"mts",
+		"cts"
+	].map((extension) => resolve(options.root, `vite.config.${extension}`)).find(existsSync) ?? false,
+	logLevel: "error",
+	plugins: [{
+		name: "pagegraph:loader-root",
+		enforce: "pre",
+		config(config) {
+			config.root ??= options.root;
 		}
-		return loaded;
-	};
-	const loaded = yield* acquireRelease(tryPromise({
-		try: load,
-		catch: (cause) => new SeoCliError({ message: messageOf$2(cause) })
-	}), (acquired) => promise(() => acquired.dispose()).pipe(catchDefect((defect) => logWarning(`Could not dispose the SEO graph loader: ${messageOf$2(defect)}`))));
-	yield* logDebug(`Loaded SEO graph: ${loaded.graph.nodes.size} nodes, ${loaded.graph.edges.length} edges.`);
-	return loaded;
+	}]
 });
-const isLoadedSeoGraph = (value) => {
-	if (!isObject$1(value) || !isObject$1(value["graph"]) || !(value["graph"]["nodes"] instanceof Map) || !Array.isArray(value["graph"]["edges"]) || !isFunction(value["dispose"]) || !isObject$1(value["site"])) return false;
-	const site = value["site"];
-	const robots = site["robots"];
-	let canonicalOrigin = false;
-	if (isString(site["origin"])) try {
-		const url = new URL(site["origin"]);
-		canonicalOrigin = (url.protocol === "http:" || url.protocol === "https:") && url.origin === site["origin"];
-	} catch {
-		canonicalOrigin = false;
-	}
-	return canonicalOrigin && isBoolean$1(site["indexable"]) && isObject$1(robots) && isStringArray(robots["disallow"]) && (robots["contentSignal"] === void 0 || isString(robots["contentSignal"])) && (robots["directives"] === void 0 || isStringArray(robots["directives"]));
+const pluginApi = (plugins, configFile) => {
+	const plugin = plugins.find((candidate) => candidate.name === "pagegraph");
+	if (plugin?.api === void 0) throw new Error(`${configFile ?? "The Vite config"} does not register pagegraph() from "pagegraph/tanstack-start".`);
+	return plugin.api;
 };
-/** {@link acquireLoadedGraph}, for commands that need only the graph. */
-const acquireGraph = (config) => map$3(acquireLoadedGraph(config), (loaded) => loaded.graph);
+/** Resolve settings, artifact root and facts together without route discovery. */
+async function loadPagegraphSettings(options) {
+	const command = options.command ?? "build";
+	return withCleanStdout(async () => {
+		const config = await resolveConfig({
+			...appConfig(options),
+			mode: options.mode ?? "production",
+			environments: cliEnvironmentOverride(command)
+		}, command);
+		const settings = pluginApi(config.plugins, config.configFile).options;
+		let facts = {};
+		if (settings.facts !== void 0) {
+			const environment = createRunnableDevEnvironment(GRAPH_ENVIRONMENT, config, { hot: false });
+			await environment.init();
+			try {
+				await environment.pluginContainer.buildStart({});
+				facts = decodeFacts((await environment.runner.import(resolve(config.root, settings.facts)))["facts"]);
+			} finally {
+				await environment.close();
+			}
+		}
+		return {
+			root: config.root,
+			options: settings,
+			facts
+		};
+	});
+}
 //#endregion
 //#region src/cli/commands/markdown.ts
 const devFlag = String$2("dev").pipe(optional$1, withDescription$2("Read captures from a running development-server origin"));
@@ -15179,7 +15304,7 @@ const checkCommand$1 = make$6("check", {
 	const capture = yield* markdownCapture(root, markdown.origin, dev);
 	const ask = suspend$1(() => {
 		const id = claims.model.startsWith("typesafe/") ? claims.model.slice(9) : claims.model;
-		const layer = model(id === "jev" ? "jev-latest" : id).pipe(provide(layerConfig()), provide(layer$13));
+		const layer = model$1(id === "jev" ? "jev-latest" : id).pipe(provide(layerConfig()), provide(layer$13));
 		return runClaims(root, capture.documents, capture.heads, facts, claims, { refresh }).pipe(provide$1(layer));
 	});
 	const report = yield* (refresh ? ask : replayClaims(root, capture.documents, capture.heads, facts, claims).pipe(catchTag("ClaimsFailed", (error) => succeed$2(error.report)), catchTag("DecisionCacheMiss", () => ask))).pipe(mapError((error) => new SeoCliError({ message: String(error) })));
@@ -16923,6 +17048,57 @@ const crawlRenderedPages = async (seed, options) => {
 	};
 };
 //#endregion
+//#region src/cli/og-images.ts
+const contained = (root, file) => {
+	const path = relative(root, file);
+	return path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+};
+/** Verify static same-origin image assets without fetching external images. */
+async function checkLocalOgImages(graph, origin, projectRoot, policy) {
+	const severity = policy?.severity ?? "structural";
+	if (severity === "off") return [];
+	const siteOrigin = new URL(origin).origin;
+	const publicRoot = resolve(projectRoot, policy?.publicDirectory ?? "public");
+	const findings = [];
+	for (const node of graph.nodes.values()) {
+		const image = node.head?.image;
+		if (!isSitemapEligible(node) || !image?.url.trim()) continue;
+		let url;
+		try {
+			url = new URL(image.url, origin);
+			if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error("Invalid image protocol");
+		} catch {
+			findings.push({
+				severity,
+				rule: "invalid-og-image",
+				path: node.path,
+				message: `Sitemap page "${node.path}" has an invalid OG image URL "${image.url}".`,
+				fix: "Declare an HTTP(S) image URL or a local asset path."
+			});
+			continue;
+		}
+		if (url.origin !== siteOrigin) continue;
+		let valid = false;
+		try {
+			const pathname = decodeURIComponent(url.pathname);
+			if (pathname.includes("\0") || pathname.includes("\\")) throw new Error("Invalid asset path");
+			const file = resolve(publicRoot, `.${pathname}`);
+			if (contained(publicRoot, file)) {
+				const [realRoot, realFile] = await Promise.all([realpath(publicRoot), realpath(file)]);
+				valid = contained(realRoot, realFile) && (await stat(realFile)).isFile();
+			}
+		} catch {}
+		if (!valid) findings.push({
+			severity,
+			rule: "missing-og-image-file",
+			path: node.path,
+			message: `Sitemap page "${node.path}" references OG image "${image.url}" without a file inside "${publicRoot}".`,
+			fix: "Generate or add the image in the public asset directory, update its URL, or configure ogImage.publicDirectory."
+		});
+	}
+	return findings;
+}
+//#endregion
 //#region src/cli/render.ts
 /** Count of edges pointing *at* each node — 0 means nothing links to it. */
 const incomingCounts = (graph) => {
@@ -17293,7 +17469,8 @@ const checkCommand = make$6("check", {
 		description: "Also check headings, structured data, robots, and canonicals in rendered HTML"
 	}
 ]), withHandler(fnUntraced(function* (flags) {
-	const config = yield* loadSeoConfig;
+	const project = yield* loadSeoProjectConfig;
+	const config = project.config;
 	const flagRules = yield* forEach$1(flags.requireInbound, parseCoverageRule);
 	const coverage = flagRules.length > 0 ? flagRules : config.coverage ?? [];
 	const renderOptions = {
@@ -17304,11 +17481,16 @@ const checkCommand = make$6("check", {
 	};
 	const loaded = yield* scoped(acquireLoadedGraph(config));
 	const graph = loaded.graph;
-	const violations = checkGraph(graph, config.freshness === void 0 ? { coverage } : {
+	const violations = checkGraph(graph, config.freshness === void 0 ? {
 		coverage,
+		ogImage: config.ogImage
+	} : {
+		coverage,
+		ogImage: config.ogImage,
 		freshness: config.freshness,
 		now: /* @__PURE__ */ new Date()
 	});
+	violations.push(...yield* promise(() => checkLocalOgImages(graph, loaded.site.origin, project.root, config.ogImage)));
 	let rendered;
 	if (isSome(flags.site)) {
 		const documents = yield* renderSite(graph, flags.site.value, renderOptions);
@@ -19356,114 +19538,6 @@ const decodeLinksSuggestionReport = (value, origin) => {
 	};
 };
 //#endregion
-//#region src/workflows/prompts/summary.md
-var summary_default = "# PageGraph {{workflow}}\n\n- Run: `{{runId}}`\n- Model: `{{model}}`\n- Pages: {{pages}}\n- Decisions: {{decisions}} ({{review}} review)\n- Executor searches: {{executorSearches}}\n- Executor calls: {{executorCalls}}\n- Changed files: {{changedFiles}}\n\n{{summary}}\n";
-//#endregion
-//#region src/workflows/template.ts
-const placeholder = /\{\{([A-Za-z][A-Za-z0-9]*)\}\}/g;
-/** A small immutable builder for checked text templates imported with `type: "text"`. */
-var TextTemplate = class TextTemplate {
-	#source;
-	#values;
-	constructor(source, values) {
-		this.#source = source;
-		this.#values = values;
-	}
-	static from(source) {
-		return new TextTemplate(source, {});
-	}
-	value(name, value) {
-		return new TextTemplate(this.#source, {
-			...this.#values,
-			[name]: String(value)
-		});
-	}
-	values(values) {
-		let template = this;
-		for (const [name, value] of Object.entries(values)) template = template.value(name, value);
-		return template;
-	}
-	render() {
-		const missing = /* @__PURE__ */ new Set();
-		const rendered = this.#source.replace(placeholder, (_match, name) => {
-			const value = this.#values[name];
-			if (value === void 0) {
-				missing.add(name);
-				return "";
-			}
-			return value;
-		});
-		if (missing.size > 0) throw new Error(`Missing template values: ${[...missing].sort().join(", ")}`);
-		return rendered;
-	}
-};
-//#endregion
-//#region src/workflows/artifact.ts
-const createRunId = (date = /* @__PURE__ */ new Date(), workflow = "workflow", nonce = randomUUID()) => `${date.toISOString().replaceAll(":", "-").replace(".", "-")}-${nonce.slice(0, 8)}-${workflow.replaceAll(".", "-")}`;
-const resultSummary$1 = (result) => {
-	if (result !== null && typeof result === "object") {
-		const summary = result["summary"];
-		if (typeof summary === "string") return summary;
-	}
-	return "Workflow completed; inspect run.json for the structured result.";
-};
-const summary = (run) => {
-	const counts = run.decisions[0]?.report.counts;
-	return TextTemplate.from(summary_default).values({
-		workflow: run.workflow,
-		runId: run.id,
-		model: `${run.model.provider}/${run.model.id}`,
-		pages: run.targets.pages.length,
-		decisions: counts?.inputs ?? 0,
-		review: counts?.review ?? 0,
-		executorSearches: run.evidence.executor.searches.length,
-		executorCalls: run.evidence.executor.calls.length,
-		changedFiles: run.changes.files.length,
-		summary: resultSummary$1(run.result)
-	}).render();
-};
-const writeRunBundle = (root, runsDirectory, run) => {
-	const directory = resolve(root, runsDirectory, run.id);
-	mkdirSync(directory, { recursive: true });
-	writeFileSync(resolve(directory, "run.json"), `${JSON.stringify(run, null, 2)}\n`, "utf8");
-	writeFileSync(resolve(directory, "summary.md"), summary(run), "utf8");
-	return directory;
-};
-const writeResearchCheckpoint = (root, runsDirectory, checkpoint) => {
-	const directory = resolve(root, runsDirectory, checkpoint.id);
-	mkdirSync(directory, { recursive: true });
-	const path = resolve(directory, "research.json");
-	writeFileSync(path, `${JSON.stringify(checkpoint, null, 2)}\n`, "utf8");
-	return path;
-};
-const writeWorkflowFailure = (root, runsDirectory, id, details) => {
-	const directory = resolve(root, runsDirectory, id);
-	mkdirSync(directory, { recursive: true });
-	const path = resolve(directory, "failure.json");
-	writeFileSync(path, `${JSON.stringify(details, null, 2)}\n`, "utf8");
-	return path;
-};
-const serializeCause = (value, top = true, seen = /* @__PURE__ */ new Set()) => {
-	if (seen.has(value)) return {
-		name: "CircularCause",
-		message: "Circular error cause"
-	};
-	if (value !== null && typeof value === "object") {
-		seen.add(value);
-		return {
-			message: value instanceof Error ? value.message : "message" in value ? String(value.message) : JSON.stringify(value),
-			name: value instanceof Error ? value.name : "name" in value ? String(value.name) : "Error",
-			...top && value instanceof Error ? { stack: value.stack } : {},
-			..."cause" in value ? { cause: serializeCause(value.cause, false, seen) } : {},
-			...value instanceof AggregateError ? { errors: value.errors.map((error) => serializeCause(error, false, new Set(seen))) } : {}
-		};
-	}
-	return {
-		name: "Error",
-		message: String(value)
-	};
-};
-//#endregion
 //#region src/workflows/specs/types.ts
 const defineWorkflow = (definition) => {
 	const decodeState = decodeUnknownSync(definition.stateSchema, { errors: "all" });
@@ -19913,7 +19987,7 @@ const improveContentWorkflow = defineWorkflow({
 	decisionInputs: (state) => state.items,
 	family: contentFamily,
 	researchInstructions: "Inspect the target page and its supporting research before proposing a bounded content improvement.",
-	actionInstructions: "Apply only evidence-backed copy edits that preserve the page's category, intent, and public product claims; leave the diff uncommitted."
+	actionInstructions: "Submit edits only for evidence-backed copy changes that preserve the page's category, intent, and public product claims."
 });
 //#endregion
 //#region src/workflows/specs/keywords.ts
@@ -20029,7 +20103,7 @@ const linksWorkflow = defineWorkflow({
 		evaluate: (_input, answers, threshold) => classify$1(answers, threshold)
 	},
 	researchInstructions: "Use the deterministic PageGraph edges and source content to propose useful contextual internal links and safe anchor text.",
-	actionInstructions: "Apply only useful, supported links at the owning source or route declaration; preserve generated graph contracts and leave the diff uncommitted."
+	actionInstructions: "Submit edits only for useful, supported links at the owning source or route declaration, and preserve generated graph contracts."
 });
 //#endregion
 //#region src/decide/families/meta.ts
@@ -20134,7 +20208,7 @@ const metadataWorkflow = defineWorkflow({
 	decisionInputs: (state) => state.items,
 	family: metaFamily,
 	researchInstructions: "Inspect route intent and current head metadata using repository and live provider evidence. For every proposed improvement, draft at least two distinct title/description candidates with unique ids so the decision step can rank them. Retain the current metadata as a candidate when it remains truthful. Return an empty items array when evidence supports no improvement.",
-	actionInstructions: "Apply the selected metadata candidate to the owning route or Fumadocs source, preserve truthful claims, and leave the diff uncommitted."
+	actionInstructions: "Submit an edit applying the selected metadata candidate at the owning route or Fumadocs source, and preserve truthful claims."
 });
 //#endregion
 //#region src/decide/families/serp.ts
@@ -20295,7 +20369,7 @@ const schemaWorkflow = defineWorkflow({
 		evaluate: (_input, answers, threshold) => classify(answers, threshold)
 	},
 	researchInstructions: "Inspect rendered head output and the route or Fumadocs source to derive only structured-data types justified by visible content.",
-	actionInstructions: "Apply justified JSON-LD changes at the owning source, preserve the existing composition contracts, and leave the diff uncommitted."
+	actionInstructions: "Submit edits for justified JSON-LD changes at the owning source and preserve the existing composition contracts."
 });
 //#endregion
 //#region src/workflows/catalog.ts
@@ -20393,24 +20467,24 @@ const selectNeighborhood = (graph, targetPaths) => {
 		outbound
 	};
 };
-const collectContextFiles = (root, workflow, context) => {
+const collectContextFiles = async (root, workflow, context, readOptions) => {
 	const paths = [...context?.files ?? [], ...context?.byWorkflow?.[workflow] ?? []];
-	return [...new Set(paths)].map((path) => ({
+	return Promise.all([...new Set(paths)].map(async (path) => ({
 		path,
-		content: readFileSync(resolve(root, path), "utf8")
-	}));
+		content: await readFile(await resolveRepositoryReadPath(root, path, readOptions), "utf8")
+	})));
 };
-const collectWorkflowEvidence = (graph, options, root, workflow, context) => {
+const collectWorkflowEvidence = async (graph, options, root, workflow, context, readOptions) => {
 	const selected = selectGraph(graph, options);
 	return {
 		graph: serializeGraph(selected),
 		neighborhood: selectNeighborhood(graph, new Set(selected.nodes.keys())),
-		sources: collectContextFiles(root, workflow, context)
+		sources: await collectContextFiles(root, workflow, context, readOptions)
 	};
 };
 //#endregion
 //#region src/workflows/git.ts
-const run$1 = (cwd, args) => execFileSync("git", args, {
+const run$2 = (cwd, args) => execFileSync("git", args, {
 	cwd,
 	encoding: "utf8",
 	stdio: [
@@ -20423,7 +20497,7 @@ const nul = (value) => value.split("\0").filter((item) => item.length > 0);
 const fingerprint = (root, gitRoot, path) => {
 	const absolute = resolve(root, path);
 	const gitPath = relative(gitRoot, absolute);
-	const status = run$1(gitRoot, [
+	const status = run$2(gitRoot, [
 		"status",
 		"--short",
 		"--",
@@ -20432,14 +20506,14 @@ const fingerprint = (root, gitRoot, path) => {
 	let content;
 	if (!existsSync(absolute)) content = Buffer.from("<deleted>");
 	else if (statSync(absolute).isDirectory()) {
-		const stage = run$1(gitRoot, [
+		const stage = run$2(gitRoot, [
 			"ls-files",
 			"--stage",
 			"--",
 			gitPath
 		]);
 		if (stage.split(/\s+/, 1)[0] !== "160000") throw new Error(`Cannot fingerprint directory reported as a Git file: ${path}`);
-		const submoduleRoot = realpathSync(run$1(absolute, ["rev-parse", "--show-toplevel"]));
+		const submoduleRoot = realpathSync(run$2(absolute, ["rev-parse", "--show-toplevel"]));
 		if (submoduleRoot !== realpathSync(absolute)) throw new Error(`Git submodule is unavailable: ${path}`);
 		content = Buffer.from(`gitlink:${stage}\0${JSON.stringify(inspectGit(submoduleRoot))}`);
 	} else content = readFileSync(absolute);
@@ -20449,7 +20523,7 @@ const inspectGit = (root) => {
 	const absoluteRoot = realpathSync(root);
 	let gitTopLevel;
 	try {
-		gitTopLevel = run$1(absoluteRoot, ["rev-parse", "--show-toplevel"]);
+		gitTopLevel = run$2(absoluteRoot, ["rev-parse", "--show-toplevel"]);
 	} catch {
 		return {
 			dirty: false,
@@ -20458,13 +20532,13 @@ const inspectGit = (root) => {
 		};
 	}
 	const gitRoot = realpathSync(gitTopLevel);
-	const tracked = nul(run$1(gitRoot, [
+	const tracked = nul(run$2(gitRoot, [
 		"diff",
 		"--name-only",
 		"-z",
 		"HEAD"
 	]));
-	const untracked = nul(run$1(gitRoot, [
+	const untracked = nul(run$2(gitRoot, [
 		"ls-files",
 		"--others",
 		"--exclude-standard",
@@ -20473,7 +20547,7 @@ const inspectGit = (root) => {
 	]));
 	const files = [.../* @__PURE__ */ new Set([...tracked, ...untracked])].map((path) => relative(absoluteRoot, resolve(gitRoot, path))).sort();
 	return {
-		head: run$1(gitRoot, ["rev-parse", "HEAD"]),
+		head: run$2(gitRoot, ["rev-parse", "HEAD"]),
 		dirty: files.length > 0,
 		files,
 		fingerprints: Object.fromEntries(files.map((path) => [path, fingerprint(absoluteRoot, gitRoot, path)]))
@@ -20496,11 +20570,514 @@ const createWorkflowMutationPolicy = (options) => {
 };
 //#endregion
 //#region src/workflows/prompts/action.md
-var action_default = "Continue PageGraph's {{workflow}} workflow.\n\n{{instructions}}\n\nObserved state:\n{{state}}\n\nJev decisions:\n{{decisions}}\n\nApply only records in the resolved set whose verdict calls for a change. Never apply review records;\nleave them in the artifact for a human. If nothing is safely resolved, return no-change.\n\nRepository mutation mode: {{mutationMode}}. {{mutationInstruction}}\n\nCall submit_result with the final action result matching this shape:\n{\"summary\":\"...\",\"files\":[\"relative/path\"],\"outcome\":\"applied|dry-run|no-change\"}\n";
+var action_default = "Continue PageGraph's {{workflow}} workflow.\n\n{{instructions}}\n\nObserved state:\n{{state}}\n\nJev decisions:\n{{decisions}}\n\nAct only on records in the resolved set whose verdict calls for a change. Never act on review\nrecords; PageGraph lists them for a human in review.md.\n\nYou cannot write files. Express every source change as one entry in `edits`:\n- `path`: the file as `read_file` names it, inside the app root `{{appRoot}}`.\n- `oldText`: text copied exactly from the current file, with enough context to match exactly once.\n  Omit it only to create a new file.\n- `newText`: the replacement text.\n- `reason` and `evidence`: why the change is justified, citing repository and provider evidence.\n\nUse `reviewItems` (`path`, `reason`, `evidence`) for recommendations you cannot or should not edit,\nsuch as generated output, unclear source ownership, or a claim the evidence does not settle. Submit\nempty `edits` when nothing is safely resolved.\n\nRepository mutation mode: {{mutationMode}}. {{mutationInstruction}}\n\nCall submit_result with the final action result matching this shape:\n{\"summary\":\"...\",\"edits\":[{\"path\":\"...\",\"oldText\":\"...\",\"newText\":\"...\",\"reason\":\"...\",\"evidence\":[\"...\"]}],\"reviewItems\":[{\"path\":\"...\",\"reason\":\"...\",\"evidence\":[\"...\"]}]}\n";
 //#endregion
 //#region src/workflows/prompts/research.md
 var research_default = "You are running PageGraph's {{workflow}} workflow.\n\n{{instructions}}\n\nUse these skills: {{skills}}. Treat the supplied project evidence as the deterministic baseline.\nThe graph contains the selected target pages. Its neighborhood preserves incoming and outgoing\nrelationships to pages outside that selection; those neighbors are context, not additional targets.\nWhen suggestion evidence is supplied, preserve each candidate's exact source sentence as `context`,\nverbatim anchor, source and destination paths. Do not invent additional link placements.\nReturn at most {{limit}} items or opportunities. Keep exploration scoped to these targets and stop\nwhen the collected evidence supports the requested decision; do not expand into a site-wide audit.\n\nUse executor_search with a short intent phrase to discover relevant tools and inspect their\nTypeScript input shapes. Never guess arguments from a description. If discovery returns no\nmatches, simplify the query. Use executor_execute with a TypeScript snippet that calls\n`tools.<namespace>.<tool>(input)` and includes a top-level `return` for the result. Compose\nwhichever current integrations best support this workflow; tools and providers are discovered\ndynamically. Repository research tools are read_file, list_files, and search_text.\nCall at least one relevant discovered tool and preserve source references and provider errors in the\nstructured state. Do not treat an errored call or empty dataset as proof of indexing or traffic.\nDistinguish project market settings from the country, language, device, and date filters actually\napplied to provider data; report only the segments supported by the call and its response.\n\n{{resultInstruction}} matching this JSON Schema:\n{{stateSchema}}\n\nMarket: {{market}}\nLanguage: {{language}}\nDevice: {{device}}\nRefresh requested: {{refresh}}\nDo not ask questions or create interactive forms. Fail clearly if required\ninput is missing.\nSeed queries: {{queries}}\nCompetitor seeds: {{competitors}}\nAuthority-domain seeds: {{domains}}\nDeterministic evidence:\n{{evidence}}\n";
 //#endregion
+//#region src/workflows/resume-codecs.ts
+const array = (schema) => mutable(ArraySchema(schema));
+const strings$1 = array(String$6);
+const optionalString$1 = optional$3(String$6);
+const model = Struct({
+	provider: String$6,
+	id: String$6
+});
+const usage = Struct({
+	input: Number$3,
+	output: Number$3,
+	cacheRead: Number$3,
+	cacheWrite: Number$3,
+	cacheWrite1h: optional$3(Number$3),
+	reasoning: optional$3(Number$3),
+	totalTokens: Number$3,
+	cost: Struct({
+		input: Number$3,
+		output: Number$3,
+		cacheRead: Number$3,
+		cacheWrite: Number$3,
+		total: Number$3
+	})
+});
+const text = Struct({
+	type: Literal("text"),
+	text: String$6,
+	textSignature: optionalString$1
+});
+const image = Struct({
+	type: Literal("image"),
+	data: String$6,
+	mimeType: String$6
+});
+const thinking = Struct({
+	type: Literal("thinking"),
+	thinking: String$6,
+	thinkingSignature: optionalString$1,
+	redacted: optional$3(Boolean$4)
+});
+const toolCall = Struct({
+	type: Literal("toolCall"),
+	id: String$6,
+	name: String$6,
+	arguments: JsonObject,
+	thoughtSignature: optionalString$1,
+	namespace: optionalString$1
+});
+const diagnostic = Struct({
+	type: String$6,
+	timestamp: Number$3,
+	details: optional$3(JsonObject),
+	error: optional$3(Struct({
+		name: optionalString$1,
+		message: String$6,
+		stack: optionalString$1,
+		code: optional$3(Union([String$6, Number$3]))
+	}))
+});
+const deferred = Struct({
+	provider: String$6,
+	modelId: String$6,
+	api: String$6,
+	id: String$6,
+	expiresAt: optional$3(Number$3),
+	pollAfterMs: optional$3(Number$3),
+	data: optional$3(Json)
+});
+const tool = Struct({
+	name: String$6,
+	description: String$6,
+	parameters: JsonObject,
+	constrainedSampling: optional$3(Union([
+		Literal(false),
+		Struct({
+			type: Literal("json_schema"),
+			strict: Literals$2(["prefer", "require"])
+		}),
+		Struct({
+			type: Literal("grammar"),
+			variants: Struct({
+				openai_lark: optionalString$1,
+				openai_regex: optionalString$1
+			})
+		})
+	]))
+});
+const message = Union([
+	Struct({
+		role: Literal("system"),
+		content: Union([String$6, array(text)]),
+		timestamp: Number$3,
+		sections: optional$3(Record(String$6, Union([String$6, Null]))),
+		toolsAdded: optional$3(array(tool)),
+		toolsRemoved: optional$3(array(Struct({ name: String$6 })))
+	}),
+	Struct({
+		role: Literal("user"),
+		content: Union([String$6, array(Union([text, image]))]),
+		timestamp: Number$3
+	}),
+	Struct({
+		role: Literal("assistant"),
+		content: array(Union([
+			text,
+			thinking,
+			toolCall
+		])),
+		api: String$6,
+		provider: String$6,
+		model: String$6,
+		responseModel: optionalString$1,
+		responseId: optionalString$1,
+		providerThinkingLevel: optionalString$1,
+		thinkingLevel: optional$3(Literals$2([
+			"off",
+			"minimal",
+			"low",
+			"medium",
+			"high",
+			"xhigh",
+			"max"
+		])),
+		diagnostics: optional$3(array(diagnostic)),
+		usage,
+		stopReason: Literals$2([
+			"pending",
+			"stop",
+			"length",
+			"toolUse",
+			"error",
+			"aborted",
+			"deferred"
+		]),
+		deferred: optional$3(deferred),
+		errorMessage: optionalString$1,
+		rawStopReason: optionalString$1,
+		endTurn: optional$3(Boolean$4),
+		timestamp: Number$3
+	}),
+	Struct({
+		role: Literal("toolResult"),
+		toolCallId: String$6,
+		toolName: String$6,
+		content: array(Union([text, image])),
+		details: optional$3(Json),
+		usage: optional$3(usage),
+		isError: Boolean$4,
+		timestamp: Number$3,
+		nestedCalls: optional$3(Struct({
+			complete: Boolean$4,
+			calls: array(Struct({
+				id: String$6,
+				name: String$6,
+				arguments: optional$3(JsonObject),
+				argumentsBytes: optional$3(Number$3),
+				status: Literals$2([
+					"ok",
+					"error",
+					"unfinished"
+				]),
+				durationMs: optional$3(Number$3),
+				error: optionalString$1
+			}))
+		}))
+	})
+]);
+const agent = Struct({
+	runtime: Literal("pi"),
+	model,
+	messages: array(message),
+	usage
+});
+const rejectedItems = optional$3(array(Struct({
+	index: Int$4,
+	reason: String$6
+})));
+const executorRecord = Struct({
+	tool: String$6,
+	input: Unknown,
+	output: Unknown
+});
+const executor = Struct({
+	searches: array(executorRecord),
+	calls: array(executorRecord)
+});
+const edge = Struct({
+	from: String$6,
+	to: String$6,
+	type: Literals$2([
+		"crumb-parent",
+		"related",
+		"redirect",
+		"collection-member"
+	])
+});
+const node = Struct({
+	path: String$6,
+	kind: String$6,
+	source: String$6,
+	policy: Struct({
+		kind: String$6,
+		crumb: optionalString$1,
+		robots: optionalString$1,
+		related: optional$3(strings$1),
+		redirectTo: optionalString$1,
+		link: optional$3(Struct({
+			title: String$6,
+			description: String$6
+		})),
+		sitemap: optional$3(Union([Literal(false), Struct({
+			priority: Number$3,
+			changeFrequency: Literals$2(["weekly", "monthly"])
+		})]))
+	}),
+	instance: optional$3(Struct({
+		title: String$6,
+		description: optionalString$1,
+		publishedAt: optionalString$1,
+		modifiedAt: optionalString$1
+	}))
+});
+const neighbor = Struct({
+	edge,
+	node
+});
+const suggestions = Struct({
+	kind: Literal("links-candidates"),
+	schemaVersion: Literal(2),
+	origin: String$6,
+	limit: Number$3,
+	pageLimit: Number$3,
+	maxBodyBytes: Number$3,
+	total: Number$3,
+	truncated: Boolean$4,
+	skipped: array(Struct({
+		path: String$6,
+		reason: String$6
+	})),
+	candidates: array(Struct({
+		source: String$6,
+		destination: String$6,
+		cluster: String$6,
+		reason: String$6,
+		sentence: String$6,
+		anchor: String$6,
+		targetSentence: String$6,
+		score: Number$3,
+		scores: Struct({
+			topical: Number$3,
+			rarity: Number$3,
+			inboundNeed: Number$3,
+			graph: Number$3
+		})
+	}))
+});
+const evidence = Struct({
+	graph: Struct({
+		nodes: array(node),
+		edges: array(edge)
+	}),
+	neighborhood: Struct({
+		inbound: array(neighbor),
+		outbound: array(neighbor)
+	}),
+	sources: array(Struct({
+		path: String$6,
+		content: String$6
+	})),
+	suggestions: optional$3(suggestions),
+	executor
+});
+const options = Struct({
+	pages: strings$1,
+	queries: strings$1,
+	kinds: strings$1,
+	competitors: strings$1,
+	domains: strings$1,
+	limit: Int$4,
+	market: optionalString$1,
+	language: optionalString$1,
+	device: optional$3(Literals$2(["desktop", "mobile"])),
+	refresh: Boolean$4,
+	dryRun: Boolean$4,
+	allowDirty: Boolean$4,
+	allowPrivate: optional$3(Boolean$4),
+	suggestions: optionalString$1
+});
+const project = Struct({
+	root: String$6,
+	head: optionalString$1,
+	dirtyAtStart: Boolean$4,
+	filesAtStart: strings$1
+});
+const git = Struct({
+	head: optionalString$1,
+	dirty: Boolean$4,
+	files: strings$1,
+	fingerprints: Record(String$6, String$6)
+});
+const workflow = Literals$2([
+	"research.keywords",
+	"research.competitors",
+	"research.authority",
+	"analyze.serp",
+	"analyze.content",
+	"analyze.ai-search",
+	"plan.architecture",
+	"improve.content",
+	"improve.metadata",
+	"improve.schema",
+	"improve.links"
+]);
+const common = {
+	schemaVersion: Literal(2),
+	id: String$6,
+	workflow
+};
+const decisions = Struct({
+	kind: Literal("decide"),
+	schemaVersion: Literal(1),
+	family: String$6,
+	model: String$6,
+	threshold: Number$3,
+	counts: Struct({
+		inputs: Number$3,
+		resolved: Number$3,
+		review: Number$3
+	}),
+	verdicts: Record(String$6, Number$3),
+	resolved: array(DecisionRecord),
+	review: array(DecisionRecord)
+});
+const research = Struct({
+	...common,
+	kind: Literal("pagegraph-workflow-research-checkpoint"),
+	startedAt: String$6,
+	checkpointedAt: String$6,
+	project,
+	options,
+	evidence,
+	state: Unknown,
+	decisionInputs: array(Unknown),
+	agent,
+	rejectedItems
+});
+const result = Struct({
+	state: Unknown,
+	messages: array(message),
+	usage,
+	executor,
+	rejectedItems
+});
+const progress = Struct({
+	...common,
+	kind: Literal("pagegraph-workflow-progress"),
+	startedAt: String$6,
+	project,
+	options,
+	evidence,
+	repositoryRoot: String$6,
+	git,
+	research: optional$3(research),
+	decisions: optional$3(decisions),
+	actionStarted: optional$3(Boolean$4),
+	action: optional$3(result),
+	actionGit: optional$3(git),
+	actionSources: optional$3(array(Struct({
+		path: String$6,
+		content: String$6
+	})))
+});
+const failure = Struct({
+	...common,
+	kind: Literal("pagegraph-workflow-failure"),
+	stage: String$6,
+	agent: optional$3(agent),
+	executor: optional$3(executor),
+	cause: Unknown
+});
+const run$1 = Struct({
+	...common,
+	kind: Literal("pagegraph-workflow-run"),
+	startedAt: String$6,
+	finishedAt: String$6,
+	project: Struct({
+		root: String$6,
+		head: optionalString$1,
+		dirtyAtStart: Boolean$4
+	}),
+	options,
+	model,
+	targets: Struct({
+		pages: strings$1,
+		queries: strings$1,
+		kinds: strings$1
+	}),
+	evidence,
+	decisions: array(Struct({
+		family: String$6,
+		questions: array(Struct({
+			inputRef: String$6,
+			decisions: Record(String$6, Unknown)
+		})),
+		report: decisions
+	})),
+	changes: Struct({
+		files: strings$1,
+		providerCalls: strings$1
+	}),
+	result: Unknown,
+	agent,
+	rejectedItems
+});
+const decodeWorkflowProgress = decodeUnknownSync(progress);
+const decodeWorkflowFailure = decodeUnknownSync(failure);
+const decodeWorkflowRun = decodeUnknownSync(run$1);
+//#endregion
+//#region src/workflows/resume.ts
+const readArtifact = (directory, filename, decode, workflow) => {
+	const path = resolve(directory, filename);
+	if (!existsSync(path)) return void 0;
+	let value;
+	try {
+		value = decode(JSON.parse(readFileSync(path, "utf8")));
+	} catch (cause) {
+		throw new Error(`Cannot resume ${path}: invalid or unsupported schema-version-2 artifact. ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+	}
+	if (value.workflow !== workflow || value.id !== basename(directory)) throw new Error(`Cannot resume ${path}: workflow or run ID differs from the requested ${workflow} run directory.`);
+	return value;
+};
+const assertProjectRoot = (root, recordedRoot, directory) => {
+	if (realpathSync(root) !== realpathSync(recordedRoot)) throw new Error(`Cannot resume ${directory}: the recorded project root differs from this config directory.`);
+};
+const inspectWorkflowGit = (root, runDirectory) => {
+	const git = inspectGit(root);
+	const canonicalRoot = realpathSync(root);
+	let existing = runDirectory;
+	while (!existsSync(existing)) existing = dirname(existing);
+	const canonicalRun = resolve(realpathSync(existing), relative(existing, runDirectory));
+	const files = git.files.filter((path) => {
+		const within = relative(canonicalRun, resolve(canonicalRoot, path));
+		return within === ".." || within.startsWith(`..${sep}`) || isAbsolute(within);
+	});
+	return {
+		...git,
+		files,
+		dirty: files.length > 0,
+		fingerprints: Object.fromEntries(files.map((path) => [path, git.fingerprints[path]]))
+	};
+};
+const resumeDirectory = (root, runsDirectory, from) => isAbsolute(from) || from.includes("/") || from.includes("\\") ? resolve(root, from) : resolve(root, runsDirectory, from);
+const loadCompletedWorkflowRun = (root, runsDirectory, from, workflow) => {
+	const directory = resumeDirectory(root, runsDirectory, from);
+	const run = readArtifact(directory, "run.json", decodeWorkflowRun, workflow);
+	if (run === void 0) return void 0;
+	assertProjectRoot(root, run.project.root, directory);
+	return {
+		directory,
+		run
+	};
+};
+const readRecordedWorkflowSources = async (repositoryRoot, sources, runsDirectory) => {
+	if (await realpath(repositoryRoot) !== repositoryRoot) throw new Error("The recorded repository read root is no longer its original canonical directory.");
+	return Promise.all(sources.map(async ({ path }) => ({
+		path,
+		content: await readFile(await resolveRepositoryReadPath(repositoryRoot, path, { runsDirectory }), "utf8")
+	})));
+};
+const loadWorkflowResume = async (root, runsDirectory, from, workflow) => {
+	const completed = loadCompletedWorkflowRun(root, runsDirectory, from, workflow);
+	if (completed !== void 0) return completed;
+	const directory = resumeDirectory(root, runsDirectory, from);
+	const progress = readArtifact(directory, "progress.json", decodeWorkflowProgress, workflow);
+	if (progress === void 0) throw new Error(`Cannot resume ${directory}: no resumable progress.json is recorded. Completed run.json artifacts can also be reused.`);
+	assertProjectRoot(root, progress.project.root, directory);
+	const failure = readArtifact(directory, "failure.json", decodeWorkflowFailure, workflow);
+	if (progress.actionStarted === true && progress.action === void 0) throw new Error(`Cannot resume ${directory}: its action started but did not record completion. Inspect repository edits before starting a new run; an interrupted action cannot be replayed safely.`);
+	if (progress.action !== void 0 && (progress.actionStarted !== true || progress.research === void 0 || progress.decisions === void 0)) throw new Error(`Cannot resume ${directory}: action completion is missing its stage boundaries.`);
+	const checkpointGit = progress.action === void 0 ? progress.git : progress.actionGit;
+	if (checkpointGit === void 0) throw new Error(`Cannot resume ${directory}: action completion lacks its repository snapshot.`);
+	const currentGit = inspectWorkflowGit(root, directory);
+	if (checkpointGit.head !== currentGit.head || JSON.stringify(checkpointGit.fingerprints) !== JSON.stringify(currentGit.fingerprints)) throw new Error(`Cannot resume ${directory}: repository HEAD or file contents changed since the recorded checkpoint. Restore the recorded source state or start a new run.`);
+	const expectedSources = progress.action === void 0 ? progress.evidence.sources : progress.actionSources;
+	if (expectedSources === void 0) throw new Error(`Cannot resume ${directory}: action completion lacks its context source snapshot.`);
+	let currentSources;
+	try {
+		currentSources = await readRecordedWorkflowSources(progress.repositoryRoot, expectedSources, dirname(directory));
+	} catch (cause) {
+		throw new Error(`Cannot resume ${directory}: a recorded context source is unreadable or outside its original read bounds. ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+	}
+	for (const [index, source] of expectedSources.entries()) if (source.content !== currentSources[index].content) throw new Error(`Cannot resume ${directory}: recorded context source changed since the checkpoint: ${source.path}. Restore the recorded context or start a new run.`);
+	if (progress.research !== void 0) {
+		assertProjectRoot(root, progress.research.project.root, directory);
+		if (progress.research.workflow !== workflow || progress.research.id !== progress.id) throw new Error(`Cannot resume ${directory}: research checkpoint differs from its progress artifact.`);
+	} else if (failure?.agent === void 0 || failure.executor === void 0 || failure.stage !== "research") throw new Error(`Cannot resume ${directory}: its failed research did not record a Pi session and Executor evidence.`);
+	return {
+		directory,
+		progress,
+		...failure === void 0 ? {} : { failure }
+	};
+};
+//#endregion
 //#region src/workflows/run.ts
 const readCurrentSuggestionSentences = async (origin, path, allowPrivate, maxBodyBytes, signal) => {
 	const options = {
@@ -20539,7 +21116,7 @@ const readCurrentSuggestionSentences = async (origin, path, allowPrivate, maxBod
 };
 /** Served-page reads use only the report origin and the same bounded robots checks as freshness validation. */
 const createFetchPageTool = async (report, allowPrivate, readSentences = readCurrentSuggestionSentences) => {
-	const { Type } = await import("./dist-cFoAzruL.js").then((n) => n.t);
+	const { Type } = await import("./dist-Br2oOB2Q.js").then((n) => n.t);
 	return {
 		name: "fetch_page",
 		label: "Read served page",
@@ -20563,7 +21140,7 @@ const createFetchPageTool = async (report, allowPrivate, readSentences = readCur
 	};
 };
 const defaultDecide = async (inputs, spec) => {
-	const layer = model("jev-latest").pipe(provide(layerConfig()), provide(layer$13));
+	const layer = model$1("jev-latest").pipe(provide(layerConfig()), provide(layer$13));
 	return runPromise(gen(function* () {
 		yield* Redacted$1("TYPESAFE_API_KEY");
 		return yield* spec.runDecisions({
@@ -20589,41 +21166,67 @@ const researchPrompt = (spec, evidence, options) => TextTemplate.from(research_d
 	domains: JSON.stringify(options.domains),
 	evidence: JSON.stringify(evidence)
 }).render();
-const actionPrompt = (spec, state, decisions, policy) => TextTemplate.from(action_default).values({
+const actionPrompt = (spec, state, decisions, policy, appRoot) => TextTemplate.from(action_default).values({
 	workflow: spec.id,
 	instructions: spec.actionInstructions ?? "Produce the final recommendation.",
 	state: JSON.stringify(state),
 	decisions: JSON.stringify(decisions),
+	appRoot,
 	mutationMode: policy.mode,
-	mutationInstruction: policy.mode === "dry-run" ? "Do not edit files. Describe the exact intended changes only." : "Edit the owning source files through edit_file or write_file and inspect the resulting files."
+	mutationInstruction: policy.mode === "dry-run" ? "PageGraph validates your edits and records them in edits.json and review.md without changing source files; a human applies them later with `pagegraph apply`." : "PageGraph validates your edits against the current files and then applies them."
 }).render();
 const decisionArtifact = (spec, inputs, report) => ({
 	family: spec.familyName,
 	questions: spec.decisionQuestions(inputs),
 	report
 });
+const failureRecovery = (stage, runDirectory) => {
+	if (stage === "acquire") return "inspect that file; check the agent preset and Executor tools configuration";
+	if (stage === "decide") return `inspect that file and research.json; check the decision provider configuration and resume with --from ${runDirectory}`;
+	if (stage === "action") return `inspect the agent messages and repository; interrupted actions cannot be resumed safely. If ${runDirectory}/edits.json exists, \`pagegraph apply ${runDirectory} --check\` reports which edits remain`;
+	return `inspect the agent messages in that file; resume with --from ${runDirectory}, optionally --model <id>, or raise workflows.agent.timeoutMs`;
+};
 const runWorkflow = async (input, dependencies = {}) => {
 	const workflows = input.config.workflows;
 	if (workflows === void 0) throw new Error("pagegraph.config.ts has no workflows configuration; run `pagegraph init` and configure workflows.");
 	const spec = getWorkflowSpec(input.workflow);
 	const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
-	const started = now();
-	const id = createRunId(started, spec.id);
-	const runsDirectory = input.out ?? workflows.runsDirectory ?? ".pagegraph/runs";
+	let runsDirectory = input.out ?? workflows.runsDirectory ?? ".pagegraph/runs";
+	const resumed = input.from === void 0 ? void 0 : await loadWorkflowResume(input.root, runsDirectory, input.from, spec.id);
+	if (resumed?.run !== void 0) return {
+		run: resumed.run,
+		directory: resumed.directory
+	};
+	if (resumed !== void 0) {
+		runsDirectory = dirname(resumed.directory);
+		input = {
+			...input,
+			options: {
+				...resumed.progress.options,
+				dryRun: resumed.progress.options.dryRun || resumed.progress.action === void 0 && input.options.dryRun
+			}
+		};
+	}
+	const started = resumed?.progress === void 0 ? now() : new Date(resumed.progress.startedAt);
+	const id = resumed?.progress?.id ?? createRunId(started, spec.id);
+	const runDirectory = resolve(input.root, runsDirectory, id);
+	let progress = resumed?.progress;
+	let executorEvidence;
 	let stage = "acquire";
 	let agentArtifact;
 	let pi;
 	let selectedModel;
 	try {
-		const gitAtStart = inspectGit(input.root);
+		const gitAtStart = progress?.git ?? inspectWorkflowGit(input.root, runDirectory);
 		const mutation = createWorkflowMutationPolicy({
 			dirtyAtStart: gitAtStart.dirty,
 			dryRun: spec.mutatesFiles ? input.options.dryRun : true,
 			allowDirty: input.options.allowDirty
 		});
 		if (spec.mutatesFiles) mutation.assertStartAllowed();
-		const evidence = collectWorkflowEvidence(input.graph, input.options, input.root, spec.id, workflows.context);
-		const suggestionReport = input.options.suggestions === void 0 ? void 0 : (() => {
+		const repositoryRoot = progress?.repositoryRoot ?? await resolveWorkflowRepositoryRoot(input.root, workflows.repositoryRoot);
+		const evidence = progress?.evidence ?? await collectWorkflowEvidence(input.graph, input.options, repositoryRoot, spec.id, workflows.context, { runsDirectory: resolve(input.root, runsDirectory) });
+		const suggestionReport = progress?.evidence.suggestions ?? (input.options.suggestions === void 0 ? void 0 : (() => {
 			if (spec.id !== "improve.links") throw new Error("--suggestions is only valid for improve links");
 			const report = decodeLinksSuggestionReport(JSON.parse(readFileSync(resolve(input.root, input.options.suggestions), "utf8")), new URL(input.site.origin).origin);
 			const selectedSources = selectGraph(input.graph, input.options).nodes;
@@ -20632,19 +21235,61 @@ const runWorkflow = async (input, dependencies = {}) => {
 				if (!selectedSources.has(candidate.source)) throw new Error(`Suggestion source is outside workflow page/kind/limit targets: ${candidate.source}`);
 			}
 			return report;
-		})();
+		})());
 		const suppliedEvidence = suggestionReport === void 0 ? evidence : {
 			...evidence,
 			suggestions: suggestionReport
 		};
-		pi = await import("./pi-D3mMmYey.js");
-		const runner = await (dependencies.acquireRunner ?? pi.acquireWorkflowRunner)({
+		progress ??= {
+			kind: "pagegraph-workflow-progress",
+			schemaVersion: 2,
+			id,
+			workflow: spec.id,
+			startedAt: started.toISOString(),
+			project: {
+				root: input.root,
+				head: gitAtStart.head,
+				dirtyAtStart: gitAtStart.dirty,
+				filesAtStart: gitAtStart.files
+			},
+			options: input.options,
+			evidence: {
+				...suppliedEvidence,
+				executor: {
+					searches: [],
+					calls: []
+				}
+			},
+			repositoryRoot,
+			git: gitAtStart
+		};
+		const restoredAgent = progress.research?.agent ?? resumed?.failure?.agent;
+		const restoredExecutor = progress.research?.evidence.executor ?? resumed?.failure?.executor;
+		if (!dependencies.decide && progress?.decisions === void 0 && !process.env.TYPESAFE_API_KEY?.trim()) throw new Error("Missing decision provider credentials; set TYPESAFE_API_KEY before starting this workflow.");
+		pi = await import("./pi-Bz4BgZdC.js");
+		const runner = progress.research !== void 0 && (!spec.mutatesFiles || progress.action !== void 0) ? {
+			model: progress.research.agent.model,
+			research: async () => {
+				throw new Error("Recorded research must not be repeated.");
+			},
+			act: async () => {
+				throw new Error("Recorded action must not be repeated.");
+			},
+			close: async () => {}
+		} : await (dependencies.acquireRunner ?? pi.acquireWorkflowRunner)({
 			root: input.root,
+			repositoryRoot,
+			runDirectory,
 			config: workflows.agent,
-			model: input.model ?? workflows.agent.models?.[spec.id],
+			model: input.model ?? (restoredAgent === void 0 ? workflows.agent.models?.[spec.id] : `${restoredAgent.model.provider}/${restoredAgent.model.id}`),
 			limit: input.options.limit,
 			executor: dependencies.executor,
 			runsDirectory: resolve(input.root, runsDirectory),
+			...restoredAgent === void 0 || restoredExecutor === void 0 ? {} : { resume: {
+				agent: restoredAgent,
+				executor: restoredExecutor,
+				phase: progress.research === void 0 ? "research" : "action"
+			} },
 			additionalTools: spec.id === "improve.links" && suggestionReport !== void 0 ? [await createFetchPageTool(suggestionReport, input.options.allowPrivate === true, dependencies.readSuggestionSentences)] : []
 		});
 		const model = runner.model;
@@ -20656,6 +21301,7 @@ const runWorkflow = async (input, dependencies = {}) => {
 				messages: result.messages,
 				usage: result.usage
 			};
+			executorEvidence = result.executor;
 		};
 		retainRunnerResult({
 			messages: [],
@@ -20668,13 +21314,19 @@ const runWorkflow = async (input, dependencies = {}) => {
 		let turnFailed = false;
 		try {
 			stage = "research";
-			const researched = await runner.research(spec, researchPrompt(spec, suppliedEvidence, input.options), { signal: AbortSignal.timeout(workflows.agent.timeoutMs ?? 18e4) });
+			const researched = progress.research === void 0 ? await runner.research(spec, `${resumed === void 0 ? "" : "Resume the recorded research conversation. Reuse completed Executor calls and their evidence; finish only the remaining research and submission.\n\n"}${researchPrompt(spec, suppliedEvidence, input.options)}`, { signal: AbortSignal.timeout(workflows.agent.timeoutMs ?? 18e4) }) : {
+				state: progress.research.state,
+				messages: progress.research.agent.messages,
+				usage: progress.research.agent.usage,
+				executor: progress.research.evidence.executor,
+				rejectedItems: progress.research.rejectedItems
+			};
 			retainRunnerResult(researched);
 			const assertResearchReadOnly = () => {
-				const researchFiles = changedFiles(gitAtStart, inspectGit(input.root));
+				const researchFiles = changedFiles(gitAtStart, inspectWorkflowGit(input.root, runDirectory));
 				if (researchFiles.length > 0) throw new Error(`${spec.id} changed repository files during its read-only research turn: ${researchFiles.join(", ")}`);
 			};
-			assertResearchReadOnly();
+			if (progress.action === void 0) assertResearchReadOnly();
 			const state = decodeResearchState(spec, researched.state, input.options.limit);
 			const decisionInputs = spec.decisionInputs(state);
 			if (suggestionReport !== void 0) {
@@ -20704,13 +21356,25 @@ const runWorkflow = async (input, dependencies = {}) => {
 				},
 				state,
 				decisionInputs,
-				agent: agentArtifact
+				agent: agentArtifact,
+				...researched.rejectedItems === void 0 ? {} : { rejectedItems: researched.rejectedItems }
 			};
 			const checkpointPath = writeResearchCheckpoint(input.root, runsDirectory, checkpoint);
-			const gitAtCheckpoint = inspectGit(input.root);
+			const checkpointContents = readFileSync(checkpointPath, "utf8");
+			progress = {
+				...progress,
+				research: checkpoint
+			};
+			writeWorkflowProgress(input.root, runsDirectory, progress);
+			const gitAtCheckpoint = progress.git;
 			stage = "decide";
 			try {
-				const decisionReport = await (dependencies.decide ?? defaultDecide)(decisionInputs, spec);
+				const decisionReport = progress.decisions ?? await (dependencies.decide ?? defaultDecide)(decisionInputs, spec);
+				progress = {
+					...progress,
+					decisions: decisionReport
+				};
+				writeWorkflowProgress(input.root, runsDirectory, progress);
 				const accepted = spec.id === "improve.links" ? decisionReport.resolved.filter((record) => record.verdict === "add" || record.verdict === "update") : void 0;
 				const acceptedIndexes = /* @__PURE__ */ new Set();
 				if (accepted !== void 0) for (const record of accepted) {
@@ -20750,15 +21414,68 @@ const runWorkflow = async (input, dependencies = {}) => {
 					}
 				};
 				const mayAct = spec.mutatesFiles && (actionItems === void 0 || actionItems.length > 0);
-				if (mayAct) stage = "action";
-				const acted = mayAct ? await runner.act(spec, actionPrompt(spec, actionState, actionDecisions, mutation), {
-					mode: mutation.mode,
-					signal: AbortSignal.timeout(workflows.agent.timeoutMs ?? 18e4)
-				}) : researched;
+				if (mayAct) {
+					stage = "action";
+					if (progress.action === void 0) {
+						progress = {
+							...progress,
+							actionStarted: true
+						};
+						writeWorkflowProgress(input.root, runsDirectory, progress);
+					}
+				}
+				const actionRecorded = progress.action !== void 0;
+				const acted = progress.action ?? (mayAct ? await runner.act(spec, actionPrompt(spec, actionState, actionDecisions, mutation, relative(repositoryRoot, realpathSync(input.root)) || "."), { signal: AbortSignal.timeout(workflows.agent.timeoutMs ?? 18e4) }) : researched);
 				retainRunnerResult(acted);
-				const gitAfter = inspectGit(input.root);
+				if (readFileSync(checkpointPath, "utf8") !== checkpointContents) throw new Error(`${spec.id} changed repository files while running in read-only mode: ${checkpointPath}`);
+				if (!actionRecorded) {
+					const agentFiles = changedFiles(gitAtCheckpoint, inspectWorkflowGit(input.root, runDirectory));
+					if (agentFiles.length > 0) throw new Error(`${spec.id} changed repository files while running in read-only mode: ${agentFiles.join(", ")}`);
+				}
+				const action = !spec.mutatesFiles ? void 0 : decodeActionState(mayAct ? acted.state : {
+					summary: "No link suggestions accepted.",
+					edits: [],
+					reviewItems: []
+				});
+				const edits = action === void 0 ? void 0 : workflowEditsArtifact({
+					id,
+					workflow: spec.id,
+					mode: mutation.mode,
+					root: input.root,
+					action,
+					decisions: decisionReport,
+					decisionInputs
+				});
+				if (edits !== void 0) {
+					writeWorkflowEdits(runDirectory, edits);
+					if (!actionRecorded && mutation.mode === "write" && edits.edits.length > 0) {
+						const writeOptions = {
+							presetDirectory: resolve(input.root, workflows.agent.presetDirectory),
+							runsDirectory: resolve(input.root, runsDirectory)
+						};
+						const refused = (await applyWorkflowEdits(input.root, edits.edits, {
+							...writeOptions,
+							check: true
+						})).filter((outcome) => outcome.status !== "applicable");
+						if (refused.length > 0) throw new Error(`Recorded edits no longer apply: ${refused.map((outcome) => `${outcome.id} (${outcome.path}): ${outcome.reason}`).join("; ")}`);
+						const failed = (await applyWorkflowEdits(input.root, edits.edits, {
+							...writeOptions,
+							check: false
+						})).filter((outcome) => outcome.status !== "applied");
+						if (failed.length > 0) throw new Error(`Could not apply recorded edits: ${failed.map((outcome) => `${outcome.id} (${outcome.path}): ${outcome.reason}`).join("; ")}`);
+					}
+				}
+				const gitAfter = inspectWorkflowGit(input.root, runDirectory);
 				const files = changedFiles(gitAtCheckpoint, gitAfter);
-				if ((!spec.mutatesFiles || input.options.dryRun) && files.length > 0) throw new Error(`${spec.id} changed repository files while running in read-only mode: ${files.join(", ")}`);
+				if (mayAct) {
+					progress = {
+						...progress,
+						action: acted,
+						actionGit: gitAfter,
+						actionSources: await readRecordedWorkflowSources(repositoryRoot, progress.evidence.sources, resolve(input.root, runsDirectory))
+					};
+					writeWorkflowProgress(input.root, runsDirectory, progress);
+				}
 				const run = {
 					kind: "pagegraph-workflow-run",
 					schemaVersion: 2,
@@ -20787,12 +21504,14 @@ const runWorkflow = async (input, dependencies = {}) => {
 						files,
 						providerCalls: acted.executor.calls.map((call) => call.tool)
 					},
-					result: mayAct ? acted.state : accepted !== void 0 ? {
-						summary: "No link suggestions accepted.",
-						outcome: "no-change",
-						files: []
-					} : state,
-					agent: agentArtifact
+					result: edits === void 0 ? state : {
+						summary: edits.summary,
+						outcome: edits.edits.length === 0 ? "no-change" : edits.mode === "write" ? "applied" : "dry-run",
+						edits: edits.edits,
+						reviewItems: edits.reviewItems
+					},
+					agent: agentArtifact,
+					...researched.rejectedItems === void 0 ? {} : { rejectedItems: researched.rejectedItems }
 				};
 				return {
 					run,
@@ -20824,6 +21543,7 @@ const runWorkflow = async (input, dependencies = {}) => {
 					messages: current.result.messages,
 					usage: current.result.usage
 				};
+				executorEvidence = current.result.executor;
 				break;
 			}
 			current = current.cause;
@@ -20831,6 +21551,7 @@ const runWorkflow = async (input, dependencies = {}) => {
 		const message = cause instanceof Error ? cause.message : String(cause);
 		let path;
 		try {
+			if (progress !== void 0) writeWorkflowProgress(input.root, runsDirectory, progress);
 			path = writeWorkflowFailure(input.root, runsDirectory, id, {
 				kind: "pagegraph-workflow-failure",
 				schemaVersion: 2,
@@ -20838,6 +21559,7 @@ const runWorkflow = async (input, dependencies = {}) => {
 				workflow: spec.id,
 				stage,
 				...agentArtifact === void 0 ? {} : { agent: agentArtifact },
+				...executorEvidence === void 0 ? {} : { executor: executorEvidence },
 				cause: serializeCause(cause)
 			});
 		} catch (writeError) {
@@ -20847,7 +21569,8 @@ const runWorkflow = async (input, dependencies = {}) => {
 			}
 			throw new Error(`${message}\nCould not write failure artifact: ${String(writeError)}`, { cause });
 		}
-		throw new Error(`${message}\nFailure artifact: ${path}\nNext: ${stage === "acquire" ? "inspect that file; check the agent preset and Executor tools configuration" : stage === "decide" ? "inspect that file and research.json; check the decision provider configuration and retry" : "inspect the agent messages in that file; rerun with --model <id> or raise workflows.agent.timeoutMs"}`, { cause });
+		const next = failureRecovery(stage, runDirectory);
+		throw new Error(`${message}\nFailure artifact: ${path}\nNext: ${next}`, { cause });
 	}
 };
 //#endregion
@@ -20864,8 +21587,9 @@ const domainFlag = String$2("domain").pipe(withDescription$2("Authority target d
 const refreshFlag = Boolean$1("refresh").pipe(withDescription$2("Ask discovered tools to bypass reusable evidence when supported"), withDefault(false));
 const modelFlag = String$2("model").pipe(withDescription$2("Agent provider/model override"), optional$1);
 const presetDirectoryFlag = String$2("preset-directory").pipe(withDescription$2("Agent preset-directory override"), optional$1);
+const fromFlag = String$2("from").pipe(withDescription$2("Resume a recorded run directory or run ID, retaining its targets and completed stages"), optional$1);
 const outFlag = String$2("out").pipe(withDescription$2("Run-artifact directory override"), optional$1);
-const dryRunFlag$1 = Boolean$1("dry-run").pipe(withDescription$2("Suppress file writes; discovered Executor tools remain available"), withDefault(false));
+const dryRunFlag$1 = Boolean$1("dry-run").pipe(withDescription$2("Record edits in edits.json and review.md without changing source files"), withDefault(false));
 const allowDirtyFlag$1 = Boolean$1("allow-dirty").pipe(withDescription$2("Permit file changes when the working tree is already dirty"), withDefault(false));
 const suggestionsFlag = String$2("suggestions").pipe(withDescription$2("Schema-version-2 links candidate JSON to evaluate"), optional$1);
 const baseFlags = {
@@ -20876,6 +21600,7 @@ const baseFlags = {
 	model: modelFlag,
 	presetDirectory: presetDirectoryFlag,
 	out: outFlag,
+	from: fromFlag,
 	json: jsonFlag
 };
 const researchFlags = {
@@ -20924,10 +21649,16 @@ const resultSummary = (result) => {
 	}
 	return `${result.run.workflow} completed.`;
 };
-/** Run one workflow command after loading the consumer's graph and config. */
+/** Reuse a completed run, or load the consumer's graph for remaining workflow stages. */
 const runWorkflowCommand = async (workflow, flags, extra = {}) => {
 	const project = await runPromise(loadSeoProjectConfig);
 	if (project.config.workflows === void 0) throw new Error("pagegraph.config.ts has no workflows configuration; run `pagegraph init` and add it.");
+	const from = optionalString(flags.from);
+	const out = optionalString(flags.out);
+	if (from !== void 0) {
+		const completed = loadCompletedWorkflowRun(project.root, out ?? project.config.workflows.runsDirectory ?? ".pagegraph/runs", from, workflow);
+		if (completed !== void 0) return completed;
+	}
 	const configured = optionalString(flags.presetDirectory);
 	const config = configured === void 0 ? project.config : {
 		...project.config,
@@ -20949,7 +21680,8 @@ const runWorkflowCommand = async (workflow, flags, extra = {}) => {
 			workflow,
 			options: optionsFrom(flags, extra),
 			model: optionalString(flags.model),
-			out: optionalString(flags.out)
+			out,
+			from
 		};
 		return yield* promise(() => runWorkflow(input));
 	})));
@@ -20976,7 +21708,13 @@ const workflowCommand = (input) => {
 			catch: (cause) => new SeoCliError({ message: messageOf$1(cause) })
 		});
 		if (rawFlags.json === true) yield* printJson(result.run);
-		else yield* printText(`${resultSummary(result)}\n\nRun artifact: ${result.directory}`);
+		else yield* printText([
+			resultSummary(result),
+			"",
+			`Run artifact: ${result.directory}`,
+			...input.writesFiles ? [`Review: ${join(result.directory, "review.md")}`] : [],
+			...input.writesFiles && result.run.options.dryRun ? [`Apply: pagegraph apply ${result.directory} --check`] : []
+		].join("\n"));
 	})));
 };
 const researchCommandGroup = make$6("research").pipe(withDescription$1("Research page-backed organic-search opportunities with Pi and Executor"), withSubcommands([
@@ -21164,76 +21902,76 @@ const inspectCommand = make$6("inspect", {
 var gitignore_default = "runs/\n";
 //#endregion
 //#region src/cli/preset/agent/AGENTS.md
-var AGENTS_default = "# PageGraph SEO\n\nUse the seo agent for PageGraph workflows. Preserve the consumer repository's instructions and\nproduct truth. Use only the workflow skills attached by PageGraph, cite repository and provider\nevidence, and search Executor before choosing live SEO tools.\n\nPageGraph runs the workflow on Pi. Use `executor_search` to discover live tools and their TypeScript\ninput and result shapes, then `executor_execute` with a TypeScript snippet calling the discovered\n`tools.<namespace>.<tool>(input)` and a top-level `return`. Repository evidence is available through\n`read_file`, `list_files`, and `search_text`. Submit structured workflow state with `submit_result`.\n\nFor improve workflows, the action turn exposes `edit_file` and `write_file` only in write mode.\nDry-run actions describe intended changes using read tools. There is no shell tool.\n\nConfigure `workflows.agent.presetDirectory: \".pagegraph/agent\"` in `pagegraph.config.ts`.\n";
+var AGENTS_default = "# PageGraph SEO\n\nUse the seo agent for PageGraph workflows. Preserve the consumer repository's instructions and\nproduct truth. Use only the workflow skills attached by PageGraph, cite repository and provider\nevidence, and search Executor before choosing live SEO tools.\n\nPageGraph runs the workflow on Pi. Use `executor_search` to discover live tools and their TypeScript\ninput and result shapes, then `executor_execute` with a TypeScript snippet calling the discovered\n`tools.<namespace>.<tool>(input)` and a top-level `return`. Inside each `executor_execute` snippet, project the result to only the fields\nand rows needed; large results can exceed the preview limit. For example, use\n`rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({ keyword, searchVolume, keywordDifficulty }))`.\nWhen a result says it was truncated, read its named JSON file with `read_file`; use `offset` and\n`maxBytes` to page through large artifacts. Repository evidence is available through `read_file`,\n`list_files`, and `search_text`. Submit structured workflow state with `submit_result`.\n\nImprove workflows have no file-writing tools. Their action turn submits `edits`, each with a path,\n`oldText` copied exactly from the current file, `newText`, a reason, and evidence, plus `reviewItems`\nfor changes a human must make. PageGraph applies edits only in write mode. There is no shell tool.\n\nConfigure `workflows.agent.presetDirectory: \".pagegraph/agent\"` in `pagegraph.config.ts`.\n";
 //#endregion
 //#region src/cli/preset/agent/agents/seo.md
-var seo_default = "---\ndescription: Execute PageGraph SEO workflows from repository and live search evidence\n---\n\nExecute the PageGraph workflow supplied by the host. Start from PageGraph's deterministic route,\nsource, and rendered evidence, and load only the workflow skills attached to the request.\n\nExecutor is required for live evidence. Search its catalog before selecting integrations, then call\nthe discovered tools with their TypeScript arguments. Recipes are examples rather than an inventory.\nPrefer relevant cached evidence when it covers the requested market, language, device, and freshness window.\n\nKeep repository evidence, owned-site evidence, external provider estimates, observed search\nresults, and inference distinct. Record market, language, device, dates, freshness, limits, and cost\nwhen available. Product claims come from the consumer repository, not search-volume estimates.\n\nResearch is read-only. Do not edit files or mutate provider state during research. Apply repository\nchanges only when the host starts a post-decision action turn in write mode.\n\nDo not ask questions or create forms. Fail clearly when required evidence or configuration is\nunavailable.\n\nUse `executor_search` to discover tools and inspect their TypeScript shapes. Call them with\n`executor_execute`: the snippet calls the discovered `tools.<namespace>.<tool>(input)` and uses\na top-level `return` for the evidence. Use `read_file`, `list_files`, and `search_text` for repository evidence,\nand `submit_result` for the workflow's structured research or action result. Improve action turns\nexpose `edit_file` and `write_file` in write mode; dry-run turns keep only read tools.\n";
+var seo_default = "---\ndescription: Execute PageGraph SEO workflows from repository and live search evidence\n---\n\nExecute the PageGraph workflow supplied by the host. Start from PageGraph's deterministic route,\nsource, and rendered evidence, and load only the workflow skills attached to the request.\n\nExecutor is required for live evidence. Search its catalog before selecting integrations, then call\nthe discovered tools with their TypeScript arguments. Recipes are examples rather than an inventory.\nPrefer relevant cached evidence when it covers the requested market, language, device, and freshness window.\n\nKeep repository evidence, owned-site evidence, external provider estimates, observed search\nresults, and inference distinct. Record market, language, device, dates, freshness, limits, and cost\nwhen available. Product claims come from the consumer repository, not search-volume estimates.\n\nResearch is read-only. Do not mutate provider state. Propose repository changes only as structured\nedits in the post-decision action turn; PageGraph applies them in write mode.\n\nDo not ask questions or create forms. Fail clearly when required evidence or configuration is\nunavailable.\n\nUse `executor_search` to discover tools and inspect their TypeScript shapes. Call them with\n`executor_execute`: the snippet calls the discovered `tools.<namespace>.<tool>(input)` and uses\na top-level `return` for the evidence. Use `read_file`, `list_files`, and `search_text` for repository evidence,\nand `submit_result` for the workflow's structured research or action result. Improve action turns\nsubmit `edits` and `reviewItems`; no tool writes files.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/ai-search/SKILL.md
 var SKILL_default$11 = "---\nname: ai-search\ndescription: Evaluate answer extractability, entity clarity, support, and citation readiness.\n---\n\n# AI Search Analysis\n\nStart from the page's visible content, structured data, route context, and cited sources. Read\n[Executor Starters](references/executor.md) before collecting current AI-search observations.\n\nEvaluate whether an answer engine can identify the subject, extract a concise answer, understand\nentity relationships, and trace material claims to first-party or trustworthy support. Distinguish\nobserved citations from inferred readiness. Do not claim a visibility lift from formatting alone.\n\nReturn the structured state requested by the workflow. This workflow produces evidence and a\ndiagnosis; it does not edit pages or submit them to an answer engine.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/ai-search/references/executor.md
-var executor_default$10 = "# Executor Starters for AI Search Analysis\n\nThese snippets are starting points, not an inventory. Search for current citation, brand-mention,\nanswer-engine, and owned-performance capabilities available through Executor.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `AI search citations answer visibility brand mentions`\n- `Google Search Console generative AI performance page`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  domain,\n  queries,\n  market,\n  language,\n});\n~~~\n\nRecord engine or surface, query, market, collection date, cited URL, response excerpt, sampling\nmethod, task status, errors, and cost. Missing citations in a small sample do not prove absence.\nDo not mutate provider projects or publish content.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$10 = "# Executor Starters for AI Search Analysis\n\nThese snippets are starting points, not an inventory. Search for current citation, brand-mention,\nanswer-engine, and owned-performance capabilities available through Executor.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `AI search citations answer visibility brand mentions`\n- `Google Search Console generative AI performance page`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  domain,\n  queries,\n  market,\n  language,\n});\n~~~\n\nRecord engine or surface, query, market, collection date, cited URL, response excerpt, sampling\nmethod, task status, errors, and cost. Missing citations in a small sample do not prove absence.\nDo not mutate provider projects or publish content.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/authority-research/SKILL.md
 var SKILL_default$10 = "---\nname: authority-research\ndescription: Qualify legitimate citation, directory, editorial, partner, and community opportunities.\n---\n\n# Authority Research\n\nUse PageGraph's pages to identify the asset that could reasonably earn each citation. Read\n[Executor Starters](references/executor.md) before collecting backlink or live-page evidence.\n\nUse backlink gaps only to nominate sources. Verify the current page and qualify topical relevance,\nlegitimacy, editorial fit, audience overlap, and eligibility. Reject paid-link schemes, bulk\ndirectories, expired pages, scraped lists, and opportunities with no suitable destination asset.\n\nReturn the structured state requested by the workflow. Contact discovery, outreach, submission,\nand provider project updates are separate operations and remain outside this research workflow.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/authority-research/references/executor.md
-var executor_default$9 = "# Executor Starters for Authority Research\n\nThese snippets are starting points, not an inventory. Discover backlink and live-page capabilities\nbefore composing calls.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO DataForSEO backlink domain intersection`\n- `web search fetch directory editorial partner eligibility`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  targets: [ownedDomain, ...competitors],\n  excludeInternal: true,\n  limit: 100,\n});\n~~~\n\nRecord source URL, target domain, dates, limits, authority metrics, task status, errors, and cost.\nProvider metrics nominate prospects; current pages determine legitimacy. Do not discover personal\ncontact data, send outreach, submit listings, or mutate OpenSEO project state.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$9 = "# Executor Starters for Authority Research\n\nThese snippets are starting points, not an inventory. Discover backlink and live-page capabilities\nbefore composing calls.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO DataForSEO backlink domain intersection`\n- `web search fetch directory editorial partner eligibility`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  targets: [ownedDomain, ...competitors],\n  excludeInternal: true,\n  limit: 100,\n});\n~~~\n\nRecord source URL, target domain, dates, limits, authority metrics, task status, errors, and cost.\nProvider metrics nominate prospects; current pages determine legitimacy. Do not discover personal\ncontact data, send outreach, submit listings, or mutate OpenSEO project state.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/competitive-landscape/SKILL.md
 var SKILL_default$9 = "---\nname: competitive-landscape\ndescription: Identify current search competitors and evidence-backed openings across representative queries.\n---\n\n# Competitive Landscape\n\nUse PageGraph's public-page corpus and product context to decide which domains compete for the same\nneed. Read [Executor Starters](references/executor.md) before collecting live market evidence.\n\nSample representative queries, find domains that recur, and compare their page types, intent,\ncoverage, differentiation, and authority signals. Separate direct product competitors, publishers,\ndirectories, communities, and incidental results. Study only the leaders whose evidence could\nchange a decision.\n\nReturn the structured state requested by the workflow. Do not copy competitor claims, treat every\nranking keyword as desirable, or update a provider's saved competitor list.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/competitive-landscape/references/executor.md
-var executor_default$8 = "# Executor Starters for a Competitive Landscape\n\nThese snippets are starting points, not an inventory. Discover current tools and call the discovered tools\nwith arguments matching their TypeScript shapes.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO SERP competitors recurring domains`\n- `domain overview ranked keywords backlink authority`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  queries,\n  market,\n  language,\n  device,\n});\n~~~\n\nPrefer relevant cached OpenSEO context or research when an existing project matches the domain\nunambiguously. Use external traffic and keyword values as estimates. Record query, market, device,\ndate, result depth, task status, errors, and cost. Do not update project context or competitors.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$8 = "# Executor Starters for a Competitive Landscape\n\nThese snippets are starting points, not an inventory. Discover current tools and call the discovered tools\nwith arguments matching their TypeScript shapes.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO SERP competitors recurring domains`\n- `domain overview ranked keywords backlink authority`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  queries,\n  market,\n  language,\n  device,\n});\n~~~\n\nPrefer relevant cached OpenSEO context or research when an existing project matches the domain\nunambiguously. Use external traffic and keyword values as estimates. Record query, market, device,\ndate, result depth, task status, errors, and cost. Do not update project context or competitors.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/content-analysis/SKILL.md
 var SKILL_default$8 = "---\nname: content-analysis\ndescription: Evaluate a page's substance, intent coverage, answer quality, and differentiation.\n---\n\n# Content Analysis\n\nStart from the supplied source, rendered page, route relationships, and project truth. Read\n[Executor Starters](references/executor.md) when live owned-site or competitive evidence is needed.\n\nJudge whether the page answers its intended need, supports material claims, avoids sibling-page\ncannibalization, and offers useful depth for its format. Use word counts and competitor excerpts as\ndescriptive signals, never as universal targets. Keep product accuracy ahead of search demand.\n\nReturn the structured state requested by the workflow. This workflow diagnoses content; it does not\nedit source files.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/content-analysis/references/executor.md
-var executor_default$7 = "# Executor Starters for Content Analysis\n\nThese snippets are starting points, not an inventory. Discover owned query/page performance and\ncurrent result-page evidence when they can change the diagnosis.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page performance`\n- `OpenSEO current SERP competitor content`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nKeep Search Console or Bing performance separate from provider estimates and live-page\nobservations. Record reporting dates, filters, market, limits, task status, errors, and cost. Do not\nchange content or provider state.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$7 = "# Executor Starters for Content Analysis\n\nThese snippets are starting points, not an inventory. Discover owned query/page performance and\ncurrent result-page evidence when they can change the diagnosis.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page performance`\n- `OpenSEO current SERP competitor content`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nKeep Search Console or Bing performance separate from provider estimates and live-page\nobservations. Record reporting dates, filters, market, limits, task status, errors, and cost. Do not\nchange content or provider state.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/content-improvement/SKILL.md
-var SKILL_default$7 = "---\nname: content-improvement\ndescription: Research and apply bounded content changes supported by PageGraph and live evidence.\n---\n\n# Content Improvement\n\nResearch the target page exactly as described by [Executor Starters](references/executor.md). During\nthe research turn, diagnose intent, substance, differentiation, support, and sibling-page ownership\nwithout editing files.\n\nDuring the host-authorized action turn, apply only recommendations accepted by the decision report.\nPreserve the repository's public positioning and voice, edit the owning source rather than generated\noutput, and keep the change local to the selected page and intent. Do not invent metrics, customers,\ncapabilities, or citations.\n\nLeave the resulting repository diff uncommitted for review. Provider state remains read-only.\n";
+var SKILL_default$7 = "---\nname: content-improvement\ndescription: Research and apply bounded content changes supported by PageGraph and live evidence.\n---\n\n# Content Improvement\n\nResearch the target page exactly as described by [Executor Starters](references/executor.md). During\nthe research turn, diagnose intent, substance, differentiation, support, and sibling-page ownership\nwithout editing files.\n\nDuring the host-authorized action turn, submit edits only for recommendations accepted by the\ndecision report. Preserve the repository's public positioning and voice, target the owning source\nrather than generated output, and keep the change local to the selected page and intent. Record a\nreview item instead of an edit when the owning source or supporting evidence is unclear. Do not invent metrics, customers,\ncapabilities, or citations.\n\nPageGraph leaves applied edits uncommitted for review. Provider state remains read-only.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/content-improvement/references/executor.md
-var executor_default$6 = "# Executor Starters for Content Improvement\n\nThese snippets are starting points, not an inventory. Discover owned performance and current SERP\nevidence during the read-only research turn.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console page query performance`\n- `OpenSEO current SERP intent competitor pages`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  query,\n  market,\n  language,\n  device,\n});\n~~~\n\nRecord market, language, device, dates, limits, task status, errors, and cost. Search evidence may\nsupport a source edit only after the host evaluates it; never edit during research or write to an\nOpenSEO project.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, a write-mode action turn exposes `edit_file` and\n`write_file` for guarded repository edits. In dry-run mode, describe intended edits using only\nread tools.\n";
+var executor_default$6 = "# Executor Starters for Content Improvement\n\nThese snippets are starting points, not an inventory. Discover owned performance and current SERP\nevidence during the read-only research turn.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console page query performance`\n- `OpenSEO current SERP intent competitor pages`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  query,\n  market,\n  language,\n  device,\n});\n~~~\n\nRecord market, language, device, dates, limits, task status, errors, and cost. Search evidence may\nsupport a source edit only after the host evaluates it; never edit during research or write to an\nOpenSEO project.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, the action turn submits structured `edits` (path, exact\n`oldText`, `newText`, reason, evidence) and `reviewItems` through `submit_result`. There are no\nfile-writing tools: PageGraph validates each edit against the current file and records it in the\nrun's `edits.json` and `review.md`, then applies it only in write mode.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/internal-linking/SKILL.md
-var SKILL_default$6 = "---\nname: internal-linking\ndescription: Research and apply useful contextual links supported by route and page evidence.\n---\n\n# Internal Linking\n\nUse PageGraph's nodes and edges to find relevant source-target pairs, then inspect both pages before\nproposing a link. Read [Executor Starters](references/executor.md) only when owned search evidence\ncan clarify page ownership or discoverability.\n\nPrefer links that help a reader continue a task, strengthen a clear hierarchy, or connect an\norphaned but relevant page. Reject forced anchors, repeated links, unsupported wording, and links\nwhose target does not satisfy the promised intent.\n\nDuring the host-authorized action turn, apply only accepted links at the owning source or route\ndeclaration. Preserve generated graph contracts, use natural anchor text, leave the diff uncommitted,\nand keep provider state read-only.\n";
+var SKILL_default$6 = "---\nname: internal-linking\ndescription: Research and apply useful contextual links supported by route and page evidence.\n---\n\n# Internal Linking\n\nUse PageGraph's nodes and edges to find relevant source-target pairs, then inspect both pages before\nproposing a link. Read [Executor Starters](references/executor.md) only when owned search evidence\ncan clarify page ownership or discoverability.\n\nPrefer links that help a reader continue a task, strengthen a clear hierarchy, or connect an\norphaned but relevant page. Reject forced anchors, repeated links, unsupported wording, and links\nwhose target does not satisfy the promised intent.\n\nDuring the host-authorized action turn, submit edits only for accepted links at the owning source or\nroute declaration. Preserve generated graph contracts, use natural anchor text, and keep provider\nstate read-only.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/internal-linking/references/executor.md
-var executor_default$5 = "# Executor Starters for Internal Linking\n\nThese snippets are starting points, not an inventory. PageGraph's graph is primary; discover owned\nquery/page or crawl evidence only when it resolves ownership or discoverability.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page internal ownership`\n- `Bing Webmaster crawl links URL information`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nRecord dates, page and query filters, crawl state, task status, errors, and cost. Search performance\ncan support a graph recommendation but does not override the source content. Do not submit URLs,\nrequest indexing, or mutate provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, a write-mode action turn exposes `edit_file` and\n`write_file` for guarded repository edits. In dry-run mode, describe intended edits using only\nread tools.\n\nUse `fetch_page` to read sentences from served pages on origins in the suggestion report.\n";
+var executor_default$5 = "# Executor Starters for Internal Linking\n\nThese snippets are starting points, not an inventory. PageGraph's graph is primary; discover owned\nquery/page or crawl evidence only when it resolves ownership or discoverability.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page internal ownership`\n- `Bing Webmaster crawl links URL information`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nRecord dates, page and query filters, crawl state, task status, errors, and cost. Search performance\ncan support a graph recommendation but does not override the source content. Do not submit URLs,\nrequest indexing, or mutate provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, the action turn submits structured `edits` (path, exact\n`oldText`, `newText`, reason, evidence) and `reviewItems` through `submit_result`. There are no\nfile-writing tools: PageGraph validates each edit against the current file and records it in the\nrun's `edits.json` and `review.md`, then applies it only in write mode.\n\nUse `fetch_page` to read sentences from served pages on origins in the suggestion report.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/keyword-research/SKILL.md
 var SKILL_default$5 = "---\nname: keyword-research\ndescription: Discover current search demand, validate intent, and map opportunities to public pages.\n---\n\n# Keyword Research\n\nUse PageGraph's route and page evidence as the ownership baseline. Read\n[Executor Starters](references/executor.md) before collecting live evidence.\n\nStart from the supplied seeds and consumer product context. Expand only into queries that match the\nactual product, audience, and market. Use owned-site performance to establish current visibility,\nprovider metrics to estimate demand and competition, and current SERPs to validate intent. A volume\nestimate alone does not establish product fit or justify a new page.\n\nMap each supported query to the strongest existing page. Propose a new page only when no current\npage can satisfy the distinct intent without becoming unfocused. Preserve evidence and caveats for\nevery opportunity.\n\nReturn the structured state requested by the workflow. Do not save keywords, update provider\nprojects, submit URLs, or edit repository files during research.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/keyword-research/references/executor.md
-var executor_default$4 = "# Executor Starters for Keyword Research\n\nThese snippets are starting points, not an inventory. Use `executor_search` before selecting calls, and inspect the returned TypeScript shapes.\n\nDiscover Google Search Console or Bing query/page performance, OpenSEO cached project context and\nkeyword research, provider keyword metrics, and live SERP results. Prefer a relevant cached OpenSEO\nresult when it already covers the requested market, language, device, and freshness. When a matching\nOpenSEO project can be resolved unambiguously, its project context and research log are supporting\nevidence; the consumer repository remains authoritative for product truth.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console performance query page`\n- `OpenSEO project context cached keyword research`\n- `keyword volume difficulty current SERP results`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({ siteUrl, startDate, endDate, dimensions: [\"PAGE\", \"QUERY\"] });\n~~~\n\nTreat Search Console and Bing as owned-site evidence, OpenSEO and DataForSEO as provider evidence,\nand current result pages as observed evidence. Record market, language, device, reporting dates,\nlimits, task status, errors, and cost metadata when returned. Do not create or update an OpenSEO\nproject, save keywords, or perform another provider write.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$4 = "# Executor Starters for Keyword Research\n\nThese snippets are starting points, not an inventory. Use `executor_search` before selecting calls, and inspect the returned TypeScript shapes.\n\nDiscover Google Search Console or Bing query/page performance, OpenSEO cached project context and\nkeyword research, provider keyword metrics, and live SERP results. Prefer a relevant cached OpenSEO\nresult when it already covers the requested market, language, device, and freshness. When a matching\nOpenSEO project can be resolved unambiguously, its project context and research log are supporting\nevidence; the consumer repository remains authoritative for product truth.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console performance query page`\n- `OpenSEO project context cached keyword research`\n- `keyword volume difficulty current SERP results`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({ siteUrl, startDate, endDate, dimensions: [\"PAGE\", \"QUERY\"] });\n~~~\n\nTreat Search Console and Bing as owned-site evidence, OpenSEO and DataForSEO as provider evidence,\nand current result pages as observed evidence. Record market, language, device, reporting dates,\nlimits, task status, errors, and cost metadata when returned. Do not create or update an OpenSEO\nproject, save keywords, or perform another provider write.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/metadata-improvement/SKILL.md
-var SKILL_default$4 = "---\nname: metadata-improvement\ndescription: Research and apply truthful title and description improvements at the owning source.\n---\n\n# Metadata Improvement\n\nUse the route's intent, rendered head, sibling ownership, and live evidence described in\n[Executor Starters](references/executor.md). During research, compare candidate titles and\ndescriptions for accuracy, distinctness, intent alignment, and usefulness rather than fixed length\nor keyword-density targets.\n\nDuring the host-authorized action turn, apply only the accepted candidate at the owning route or\ncontent source. Preserve truthful product claims, existing metadata composition, canonical output,\nand repository conventions. Do not edit generated artifacts.\n\nLeave the resulting repository diff uncommitted. Provider state remains read-only.\n";
+var SKILL_default$4 = "---\nname: metadata-improvement\ndescription: Research and apply truthful title and description improvements at the owning source.\n---\n\n# Metadata Improvement\n\nUse the route's intent, rendered head, sibling ownership, and live evidence described in\n[Executor Starters](references/executor.md). During research, compare candidate titles and\ndescriptions for accuracy, distinctness, intent alignment, and usefulness rather than fixed length\nor keyword-density targets.\n\nDuring the host-authorized action turn, submit an edit only for the accepted candidate at the owning\nroute or content source. Preserve truthful product claims, existing metadata composition, canonical output,\nand repository conventions. Do not edit generated artifacts.\n\nPageGraph leaves applied edits uncommitted. Provider state remains read-only.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/metadata-improvement/references/executor.md
-var executor_default$3 = "# Executor Starters for Metadata Improvement\n\nThese snippets are starting points, not an inventory. Discover owned query/page evidence and a\ncurrent SERP before selecting a candidate.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page CTR position`\n- `current SERP titles snippets intent`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nRecord dates, query and page filters, market, device, task status, errors, and cost. CTR and position\ndescribe observed performance; they do not prove a particular title caused it. Do not mutate\nprovider metadata or request recrawls.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, a write-mode action turn exposes `edit_file` and\n`write_file` for guarded repository edits. In dry-run mode, describe intended edits using only\nread tools.\n";
+var executor_default$3 = "# Executor Starters for Metadata Improvement\n\nThese snippets are starting points, not an inventory. Discover owned query/page evidence and a\ncurrent SERP before selecting a candidate.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console query page CTR position`\n- `current SERP titles snippets intent`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"PAGE\", \"QUERY\"],\n});\n~~~\n\nRecord dates, query and page filters, market, device, task status, errors, and cost. CTR and position\ndescribe observed performance; they do not prove a particular title caused it. Do not mutate\nprovider metadata or request recrawls.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, the action turn submits structured `edits` (path, exact\n`oldText`, `newText`, reason, evidence) and `reviewItems` through `submit_result`. There are no\nfile-writing tools: PageGraph validates each edit against the current file and records it in the\nrun's `edits.json` and `review.md`, then applies it only in write mode.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/schema/SKILL.md
-var SKILL_default$3 = "---\nname: schema\ndescription: Research and apply JSON-LD types justified by visible page content.\n---\n\n# Schema\n\nUse the rendered page, existing JSON-LD, route kind, and owning source as the primary evidence. Read\n[Executor Starters](references/executor.md) when owned search appearance or current eligibility\nevidence is material.\n\nPropose only types and properties that describe visible content. Schema does not repair missing\ncontent, guarantee a rich result, or justify unsupported ratings, prices, authorship, FAQs, or\norganization claims.\n\nDuring the host-authorized action turn, apply only accepted changes through the repository's\nexisting JSON-LD composition primitives. Do not edit rendered or generated output. Leave the diff\nuncommitted and provider state unchanged.\n";
+var SKILL_default$3 = "---\nname: schema\ndescription: Research and apply JSON-LD types justified by visible page content.\n---\n\n# Schema\n\nUse the rendered page, existing JSON-LD, route kind, and owning source as the primary evidence. Read\n[Executor Starters](references/executor.md) when owned search appearance or current eligibility\nevidence is material.\n\nPropose only types and properties that describe visible content. Schema does not repair missing\ncontent, guarantee a rich result, or justify unsupported ratings, prices, authorship, FAQs, or\norganization claims.\n\nDuring the host-authorized action turn, submit edits only for accepted changes, using the\nrepository's existing JSON-LD composition primitives. Do not target rendered or generated output;\nrecord a review item when the owning source is unclear. Provider state stays unchanged.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/schema/references/executor.md
-var executor_default$2 = "# Executor Starters for Schema\n\nThese snippets are starting points, not an inventory. Discover owned search-appearance, URL\ninspection, rich-result, or documentation tools when they can change the eligibility assessment.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console search appearance page`\n- `URL inspection rich results structured data eligibility`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"SEARCH_APPEARANCE\", \"PAGE\"],\n});\n~~~\n\nTreat visible page content and current primary requirements as eligibility authority. Record dates,\npage filters, result types, task status, errors, and cost. Do not request indexing, submit schemas,\nor update provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, a write-mode action turn exposes `edit_file` and\n`write_file` for guarded repository edits. In dry-run mode, describe intended edits using only\nread tools.\n";
+var executor_default$2 = "# Executor Starters for Schema\n\nThese snippets are starting points, not an inventory. Discover owned search-appearance, URL\ninspection, rich-result, or documentation tools when they can change the eligibility assessment.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Google Search Console search appearance page`\n- `URL inspection rich results structured data eligibility`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  siteUrl,\n  startDate,\n  endDate,\n  dimensions: [\"SEARCH_APPEARANCE\", \"PAGE\"],\n});\n~~~\n\nTreat visible page content and current primary requirements as eligibility authority. Record dates,\npage filters, result types, task status, errors, and cost. Do not request indexing, submit schemas,\nor update provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nAfter the host evaluates the research, the action turn submits structured `edits` (path, exact\n`oldText`, `newText`, reason, evidence) and `reviewItems` through `submit_result`. There are no\nfile-writing tools: PageGraph validates each edit against the current file and records it in the\nrun's `edits.json` and `review.md`, then applies it only in write mode.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/serp-analysis/SKILL.md
 var SKILL_default$2 = "---\nname: serp-analysis\ndescription: Compare a target page with current results, intent, formats, features, and title patterns.\n---\n\n# SERP Analysis\n\nTreat each supplied query, market, language, device, and target page as one analysis unit. Read\n[Executor Starters](references/executor.md) before fetching current result evidence.\n\nIdentify dominant intent, page format, result features, recurring domains, title framing, and the\nevidence a useful page must satisfy. Compare the target against those patterns without turning\ncompetitor wording into product truth. Mark mixed or unstable intent rather than forcing a single\nconclusion.\n\nReturn the structured state requested by the workflow. A current SERP is observed evidence for its\nmarket and time, not a universal ranking rule.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/serp-analysis/references/executor.md
-var executor_default$1 = "# Executor Starters for SERP Analysis\n\nThese snippets are starting points, not an inventory. Discover a current organic SERP capability\nand resolve its exact signature before use.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO DataForSEO current organic SERP features intent`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  query,\n  market,\n  language,\n  device,\n  depth: 20,\n});\n~~~\n\nReuse a matching cached OpenSEO SERP when it satisfies the requested freshness. Record query,\nmarket, language, device, collection time, depth, features, task status, errors, and cost. Fetch\nindividual result pages only when their content is material to the decision.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default$1 = "# Executor Starters for SERP Analysis\n\nThese snippets are starting points, not an inventory. Discover a current organic SERP capability\nand resolve its exact signature before use.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `OpenSEO DataForSEO current organic SERP features intent`\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool({\n  query,\n  market,\n  language,\n  device,\n  depth: 20,\n});\n~~~\n\nReuse a matching cached OpenSEO SERP when it satisfies the requested freshness. Record query,\nmarket, language, device, collection time, depth, features, task status, errors, and cost. Fetch\nindividual result pages only when their content is material to the decision.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/site-architecture/SKILL.md
 var SKILL_default$1 = "---\nname: site-architecture\ndescription: Plan clear route ownership, hierarchy, collections, and contextual navigation.\n---\n\n# Site Architecture\n\nUse PageGraph's deterministic route nodes and edges as the primary model. Read\n[Executor Starters](references/executor.md) when owned search or crawl evidence can resolve an\nownership or discoverability question.\n\nAssign one clear intent owner, identify useful collections and parent-child relationships, and\nprefer consolidation when multiple pages compete for the same need. Propose new routes only when a\ndistinct supported intent lacks an adequate owner. Treat URL changes as consequential and preserve\nredirect and canonical requirements in the recommendation.\n\nReturn the structured state requested by the workflow. This planning workflow does not move routes,\nedit navigation, or submit sitemaps.\n";
 //#endregion
 //#region src/cli/preset/agent/skills/site-architecture/references/executor.md
-var executor_default = "# Executor Starters for Site Architecture\n\nThese snippets are starting points, not an inventory. Discover owned page/query, crawl, sitemap,\nand URL evidence only when the deterministic graph does not answer the question.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Search Console page performance`\n- `Bing Webmaster crawl`\n\nInspect a selected tool's TypeScript shape with `executor_search` before executing it.\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool(input);\n~~~\n\nIn a later turn, call that discovered tool with the required fields from its returned signature. Property,\nproject, URL, date, and dimension arguments differ between integrations. Do not copy guessed fields\nfrom a recipe. Prefer page/query performance for demand and ownership questions; use URL inspection\nwhen the question actually concerns crawl, canonical, or indexing state.\n\nKeep submitted, crawled, indexed, ranking, and clicked evidence distinct. Record reporting dates,\nfilters, canonical state, task status, errors, and cost. Do not request indexing, submit sitemaps,\nor update provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n";
+var executor_default = "# Executor Starters for Site Architecture\n\nThese snippets are starting points, not an inventory. Discover owned page/query, crawl, sitemap,\nand URL evidence only when the deterministic graph does not answer the question.\n\nUse `executor_search` for each discovery query below; it returns the current tools and their\nTypeScript input and result shapes:\n\n- `Search Console page performance`\n- `Bing Webmaster crawl`\n\nInspect a selected tool's TypeScript shape with `executor_search` before executing it.\n\nPass a TypeScript snippet to `executor_execute`, replacing `discovered_namespace`, `discovered_tool`, and\narguments with the returned names and required fields:\n\n~~~ts\nreturn await tools.discovered_namespace.discovered_tool(input);\n~~~\n\nIn a later turn, call that discovered tool with the required fields from its returned signature. Property,\nproject, URL, date, and dimension arguments differ between integrations. Do not copy guessed fields\nfrom a recipe. Prefer page/query performance for demand and ownership questions; use URL inspection\nwhen the question actually concerns crawl, canonical, or indexing state.\n\nKeep submitted, crawled, indexed, ranking, and clicked evidence distinct. Record reporting dates,\nfilters, canonical state, task status, errors, and cost. Do not request indexing, submit sitemaps,\nor update provider projects.\n\nUse `read_file`, `list_files`, and `search_text` for repository evidence. Finish the turn with\n`submit_result` using the workflow result shape.\n\nKeep `executor_execute` results small: project to only the fields and rows needed in the TypeScript\nsnippet. For example, use `rows.slice(0, 50).map(({ keyword, searchVolume, keywordDifficulty }) => ({\n  keyword, searchVolume, keywordDifficulty,\n}))`.\nIf PageGraph reports that a result was truncated, read the named JSON artifact with `read_file`.\nUse `offset` and `maxBytes` to read large files in chunks.\n";
 //#endregion
 //#region src/cli/preset/agent/preset.ts
 const skill = (name, definition, executor) => ({
@@ -22007,6 +22745,7 @@ const cli = make$6("pagegraph").pipe(withDescription$1("Inspect, audit, research
 		description: "Run bounded page-backed keyword research"
 	}
 ]), withSubcommands([
+	applyCommand,
 	auditCommand,
 	analyzeCommandGroup,
 	initCommand,
@@ -22102,7 +22841,7 @@ const withStdoutBuffer = (program) => acquireUseRelease(sync$1(() => {
 	if (!state.discard && state.buffer.length > 0) flushStdout(state);
 	else state.buffer.length = 0;
 }));
-const program = withStdoutBuffer(run$2(cli, { version }).pipe(provideService(LogToStderr, true), provide$1(layer$1), tapErrorTag("SeoCliError", (error$2) => error(`✗ ${error$2.message}`))));
+const program = withStdoutBuffer(run$3(cli, { version }).pipe(provideService(LogToStderr, true), provide$1(layer$1), tapErrorTag("SeoCliError", (error$2) => error(`✗ ${error$2.message}`))));
 /**
 * Run the CLI. An explicit call from `bin.ts` rather than an import-time side
 * effect: the package declares `sideEffects: false`, so a body that only ran on