semrush-cli 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Microck
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,166 @@
-# Temporary Holding Version
+<p align="center"><img src="assets/logo.svg" width="100" alt="semrush-cli"></p>
+<h1 align="center">semrush-cli</h1>
+<p align="center">Semrush research from your terminal and MCP clients.</p>
+<p align="center"><a href="https://semrush.micr.dev">Documentation</a> · <a href="https://www.npmjs.com/package/semrush-cli">npm</a> · <a href="https://github.com/Microck/semrush-cli/issues">Issues</a></p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The executable is `semrush-cli`. It can coexist with other tools named `semrush`.
+
+48 read-only web reports for keyword research, organic rankings, competitors,
+keyword and backlink gaps, backlinks, historical/mobile research and AI visibility.
+Written in TypeScript with Effect. Sessions live in an encrypted Galleton vault.
+No Semrush developer API key, Python runtime or CAPTCHA service required.
+
+## Install
+
+Requires Node.js 22+. Includes Galleton binaries for Linux x64/arm64,
+macOS x64/arm64 and Windows x64.
+
+```sh
+npm install -g semrush-cli
+semrush-cli setup
+semrush-cli auth login
+semrush-cli domain-overview --domain openai.com --json
+```
+
+`setup` installs Chromium and starts a private Galleton daemon. `auth login`
+opens an isolated browser for sign-in, verifies the session, and stores it in
+Galleton. It requires a graphical desktop. On Linux, missing Chromium system
+libraries can be installed with `npx patchright install-deps chromium`.
+
+To import an existing, authorized Chromium session on a headless machine:
+
+```sh
+semrush-cli auth import --cdp-url http://127.0.0.1:9234
+semrush-cli doctor --json
+```
+
+The browser must already expose CDP on a literal loopback HTTP address. This
+supports the browser managed by [semrush-web-mcp](https://github.com/Microck/semrush-web-mcp).
+Import does not stop or change that browser. Keep CDP private; forward it over
+SSH when necessary.
+
+## Research
+
+```sh
+semrush-cli keyword-overview --keyword 'email marketing' --json
+semrush-cli keyword-magic --keyword 'email marketing' --questions-only --page-size 20 --json
+semrush-cli domain-keywords --domain openai.com --page 2 --page-size 20 --json
+semrush-cli domain-competitors --domain openai.com --page-size 10 --json
+semrush-cli keyword-gap --domains '["openai.com","anthropic.com"]' --json
+semrush-cli backlink-gap --domains '["openai.com","anthropic.com"]' --json
+semrush-cli backlink-links --domain openai.com --filters '+|type||nofollow' --json
+semrush-cli domain-ai-visibility --domain openai.com --json
+semrush-cli snapshot-dates --database us --json
+semrush-cli reports --json
+semrush-cli domain-keywords --help
+```
+
+| Area | Reports |
+| --- | --- |
+| Keywords | Overview, ideas, questions, SERPs, ads, clusters, paginated Keyword Magic and groups |
+| Organic | Rankings, pages, subdomains, changes, competitors, topics and trends |
+| Gaps | Keyword overlaps and gaps, backlink prospects and profile comparisons |
+| Backlinks | Links, referring domains, anchors, indexed pages, outbound domains, history and authority |
+| AI visibility | Visibility, mentions, citation sources and country distribution |
+| Account | Limits, permissions, databases, snapshots, projects, folders, saved lists and audit campaigns |
+
+All successful reports use `{authenticated: true, report, data}`. Domain ranking
+and page reports include provider totals. Large integers remain exact as decimal
+strings. Errors go to stderr with a nonzero exit. `--json` works before or after
+the command. Objects and arrays use JSON flags; booleans support explicit `false`.
+See the [full command reference](https://semrush.micr.dev/docs/reports).
+
+## MCP
+
+Complete setup and authentication, then configure your MCP client:
+
+```json
+{
+  "mcpServers": {
+    "semrush": {
+      "command": "semrush-cli",
+      "args": ["mcp"]
+    }
+  }
+}
+```
+
+Use an absolute executable path if your client does not inherit the terminal's
+PATH. `npx -y semrush-cli@0.1.1 mcp` also works. MCP tool names use underscores,
+for example `keyword_overview` and `domain_keywords`. Input schemas and reports
+match the CLI. All 48 tools are annotated read-only. Login, account mutations,
+arbitrary URLs and JavaScript execution are not MCP tools.
+
+## Sessions
+
+```sh
+semrush-cli auth status --check --json
+semrush-cli auth logout
+semrush-cli daemon stop
+semrush-cli daemon start
+```
+
+Galleton stores credentials under `~/.local/share/semrush-cli/galleton`. The
+private daemon listens on `127.0.0.1:8768`. It continues after the terminal closes;
+run `daemon start` after reboot. The CLI installs no system startup service.
+
+Each CLI process restores its encrypted session into a fresh, transient Chromium
+context. The MCP server reuses one context and serializes requests. Successful
+reports capture cookie updates back to Galleton. Session expiry requires sign-in
+or import again. No anonymous fallback or automatic request retries.
+
+The unchanged Galleton TypeScript SDK is vendored at a pinned upstream commit
+because it is not on npm. The bundled daemon adds a tested `static` provider for
+storage without renewal. Semrush has no proven renewal contract in the reference
+integration, so this tool does not invent one. See [architecture](docs/architecture.md)
+and [SDK provenance](src/vendor/README.md).
+
+| Variable | Default |
+| --- | --- |
+| `SEMRUSH_GALLETON_URL` | `http://127.0.0.1:8768` |
+| `SEMRUSH_GALLETON_TOKEN_FILE` | `~/.local/share/semrush-cli/galleton/api.token` |
+| `SEMRUSH_SESSION` | `semrush-cli` |
+| `SEMRUSH_BROWSER_EXECUTABLE` | Patchright's Chromium |
+
+The setup/daemon commands manage only the default CLI-owned daemon. An external
+daemon must support the documented static-provider extension. Never expose its
+API token or credential directory.
+
+## Limits
+
+Semrush account permissions, quotas and product access apply. A read-only report
+can consume an allowance. Internal web endpoints may change. Provider caps remain
+visible; there is no unlimited-export claim. Galleton encrypts at rest but its key
+and vault share a private local directory. Other processes running as your OS user
+are within the same trust boundary.
+
+## Development
+
+```sh
+npm ci
+npm run check
+npm --prefix docs-site ci
+npm --prefix docs-site run build
+```
+
+Development builds require Go 1.23+ and `tar`/`patch` to build the pinned Galleton
+daemon with its storage-only extension. The build runs the upstream core suite
+with the extension's integration test. Published users do not need Go.
+
+Tests compare all 48 request shapes against the Python reference, use real
+Chromium and Galleton with a local HTTP fixture, and exercise the built executable.
+They never require a Semrush account. See [verification](docs/verification.md) for
+the separate live-account evidence.
+
+## Uninstall
+
+```sh
+semrush-cli auth logout
+semrush-cli daemon stop
+npm uninstall -g semrush-cli
+```
+
+The private vault and browser cache remain on disk. Remove them only after
+checking they contain nothing you need.
+
+MIT. Independent project, not affiliated with Semrush.

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,19 @@
+# Third-party notices
+
+## Galleton
+
+The TypeScript SDK and bundled daemon derive from Microck/galleton, commit
+`efe7b742536d6c118c37a269bf626c5927e2a1b9`, under MIT.
+The original license is included at `src/vendor/GALLETON-LICENSE`.
+The SDK source is unchanged. The daemon includes the documented storage-only
+provider patch at `patches/galleton-static-provider.patch` in the source repository.
+
+## Semrush web report contracts
+
+The report catalog, schemas and request-shape fixtures derive from
+Microck/semrush-web-mcp, commit `764d102f`, under MIT.
+Copyright (c) 2026 Microck. See the repository LICENSE.
+
+All package dependencies retain their own licenses in their installed packages.
+This project is independent of Semrush and does not include Semrush trademarks
+or credentials in its distribution.

package/assets/logo.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><title>semrush-cli</title><path d="m9 19 12 13L9 45" fill="none" stroke="#fff" stroke-width="7" stroke-linejoin="miter"/><path fill="#ff8a3d" d="M27 36h7v12h-7zm11-9h7v21h-7zm11-11h7v32h-7z"/></svg>

package/dist/auth-BcUPx0Nk.js

@@ -0,0 +1,82 @@
+import { n as SessionError, r as UsageError } from "./errors-BhvanypE.js";
+import { i as Sessions, n as origin } from "./session-layer-BUU0ZG9M.js";
+import "./browser-service-BYYE-vSm.js";
+import { t as readBootstrap } from "./browser-layer-D6mEyv9Y.js";
+import { Config, Effect, Option } from "effect";
+import { chromium } from "patchright";
+
+//#region src/auth.ts
+const authFailed = () => new SessionError({ message: "Could not import a signed-in Semrush session. Check the browser, complete sign-in, and retry. No credentials were logged." });
+const authCall = (run) => Effect.tryPromise({
+	try: run,
+	catch: authFailed
+});
+const saveContext = Effect.fn("Auth.saveContext")(function* (context) {
+	const sessions = yield* Sessions;
+	const page = yield* Effect.acquireRelease(authCall(() => context.newPage()), (page$1) => Effect.promise(() => page$1.close()));
+	yield* authCall(() => page.goto(origin + "/robots.txt", {
+		waitUntil: "domcontentloaded",
+		timeout: 45e3
+	}));
+	const html = yield* authCall(() => page.evaluate(async () => {
+		const response = await fetch("/analytics/overview/?db=us", {
+			credentials: "include",
+			signal: AbortSignal.timeout(45e3)
+		});
+		return response.ok ? response.text() : "";
+	}));
+	yield* Effect.try({
+		try: () => readBootstrap(html),
+		catch: authFailed
+	});
+	const cookies = yield* authCall(() => context.cookies(origin));
+	if (!cookies.length) return yield* Effect.fail(authFailed());
+	return yield* sessions.save({
+		provider: "semrush",
+		cookie_origin: origin,
+		cookie_header: cookies.map((cookie) => `${cookie.name}=${cookie.value}`).join("; ")
+	});
+});
+const importBrowser = Effect.fn("Auth.import")(function* (url) {
+	const valid = yield* Effect.try({
+		try: () => {
+			const parsed = new URL(url);
+			if (parsed.protocol !== "http:" || !["127.0.0.1", "[::1]"].includes(parsed.hostname) || parsed.username || parsed.password) throw new Error("Not loopback");
+			return parsed.origin;
+		},
+		catch: () => new UsageError({ message: "CDP must be a literal loopback HTTP URL. Forward remote browsers over SSH first." })
+	});
+	const browser = yield* authCall(() => chromium.connectOverCDP(valid, { timeout: 3e4 }));
+	yield* Effect.addFinalizer(() => Effect.promise(() => browser.close()));
+	const context = browser.contexts()[0];
+	if (!context) return yield* Effect.fail(authFailed());
+	return {
+		logged_in: true,
+		source: "galleton",
+		session: (yield* saveContext(context)).id
+	};
+});
+const login = Effect.fn("Auth.login")(function* () {
+	const executable = yield* Config.option(Config.String("SEMRUSH_BROWSER_EXECUTABLE"));
+	const browser = yield* Effect.acquireRelease(authCall(() => chromium.launch({
+		headless: false,
+		executablePath: Option.getOrUndefined(executable)
+	})), (browser$1) => Effect.promise(() => browser$1.close()));
+	const context = yield* authCall(() => browser.newContext({ userAgent: "OpenAI File Downloader, XaiImageApiFetch/1.0" }));
+	const page = yield* authCall(() => context.newPage());
+	yield* authCall(() => page.goto(origin + "/login/", {
+		waitUntil: "domcontentloaded",
+		timeout: 45e3
+	}));
+	yield* Effect.sync(() => process.stderr.write("Sign into Semrush in the browser. Waiting up to 5 minutes.\n"));
+	yield* authCall(() => page.waitForURL((url) => url.hostname === "www.semrush.com" && !url.pathname.startsWith("/login") && !url.pathname.startsWith("/signup"), { timeout: 3e5 }));
+	return {
+		logged_in: true,
+		source: "galleton",
+		session: (yield* saveContext(context)).id
+	};
+});
+
+//#endregion
+export { importBrowser, login };
+//# sourceMappingURL=auth-BcUPx0Nk.js.map

package/dist/auth-BcUPx0Nk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-BcUPx0Nk.js","names":["page","browser"],"sources":["../src/auth.ts"],"sourcesContent":["import { Config, Effect, Option } from 'effect';\nimport { chromium, type BrowserContext } from 'patchright';\nimport { Sessions } from './session-service.js';\nimport { origin } from './session-layer.js';\nimport { SessionError, UsageError } from './errors.js';\nimport { readBootstrap } from './browser-layer.js';\n\nconst authFailed = () => new SessionError({ message: 'Could not import a signed-in Semrush session. Check the browser, complete sign-in, and retry. No credentials were logged.' });\nconst authCall = <A>(run: () => Promise<A>) => Effect.tryPromise({ try: run, catch: authFailed });\n\nconst saveContext = Effect.fn('Auth.saveContext')(function* (context: BrowserContext) {\n  const sessions = yield* Sessions;\n  const page = yield* Effect.acquireRelease(authCall(() => context.newPage()), page => Effect.promise(() => page.close()));\n  yield* authCall(() => page.goto(origin + '/robots.txt', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  const html = yield* authCall(() => page.evaluate(async () => {\n    const response = await fetch('/analytics/overview/?db=us', { credentials: 'include', signal: AbortSignal.timeout(45000) });\n    return response.ok ? response.text() : '';\n  }));\n  yield* Effect.try({ try: () => readBootstrap(html), catch: authFailed });\n  const cookies = yield* authCall(() => context.cookies(origin));\n  if (!cookies.length) return yield* Effect.fail(authFailed());\n  // Bare cookies are intentionally bound to the single approved origin by Galleton.\n  return yield* sessions.save({ provider: 'semrush', cookie_origin: origin, cookie_header: cookies.map(cookie => `${cookie.name}=${cookie.value}`).join('; ') });\n});\n\nexport const importBrowser = Effect.fn('Auth.import')(function* (url: string) {\n  const valid = yield* Effect.try({ try: () => {\n    const parsed = new URL(url);\n    if (parsed.protocol !== 'http:' || !['127.0.0.1', '[::1]'].includes(parsed.hostname) || parsed.username || parsed.password) throw new Error('Not loopback');\n    return parsed.origin;\n  }, catch: () => new UsageError({ message: 'CDP must be a literal loopback HTTP URL. Forward remote browsers over SSH first.' }) });\n  const browser = yield* authCall(() => chromium.connectOverCDP(valid, { timeout: 30000 }));\n  // Closing a CDP connection disconnects this client and leaves the existing browser running.\n  yield* Effect.addFinalizer(() => Effect.promise(() => browser.close()));\n  const context = browser.contexts()[0];\n  if (!context) return yield* Effect.fail(authFailed());\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n\nexport const login = Effect.fn('Auth.login')(function* () {\n  const executable = yield* Config.option(Config.String('SEMRUSH_BROWSER_EXECUTABLE'));\n  const browser = yield* Effect.acquireRelease(authCall(() => chromium.launch({ headless: false, executablePath: Option.getOrUndefined(executable) })), browser => Effect.promise(() => browser.close()));\n  const context = yield* authCall(() => browser.newContext({ userAgent: 'OpenAI File Downloader, XaiImageApiFetch/1.0' }));\n  const page = yield* authCall(() => context.newPage());\n  yield* authCall(() => page.goto(origin + '/login/', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  yield* Effect.sync(() => process.stderr.write('Sign into Semrush in the browser. Waiting up to 5 minutes.\\n'));\n  yield* authCall(() => page.waitForURL(url => url.hostname === 'www.semrush.com' && !url.pathname.startsWith('/login') && !url.pathname.startsWith('/signup'), { timeout: 300000 }));\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n"],"mappings":";;;;;;;;AAOA,MAAM,mBAAmB,IAAI,aAAa,EAAE,SAAS,6HAA6H,CAAC;AACnL,MAAM,YAAe,QAA0B,OAAO,WAAW;CAAE,KAAK;CAAK,OAAO;CAAY,CAAC;AAEjG,MAAM,cAAc,OAAO,GAAG,mBAAmB,CAAC,WAAW,SAAyB;CACpF,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,OAAO,eAAe,eAAe,QAAQ,SAAS,CAAC,GAAE,WAAQ,OAAO,cAAcA,OAAK,OAAO,CAAC,CAAC;AACxH,QAAO,eAAe,KAAK,KAAK,SAAS,eAAe;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;CAC3G,MAAM,OAAO,OAAO,eAAe,KAAK,SAAS,YAAY;EAC3D,MAAM,WAAW,MAAM,MAAM,8BAA8B;GAAE,aAAa;GAAW,QAAQ,YAAY,QAAQ,KAAM;GAAE,CAAC;AAC1H,SAAO,SAAS,KAAK,SAAS,MAAM,GAAG;GACvC,CAAC;AACH,QAAO,OAAO,IAAI;EAAE,WAAW,cAAc,KAAK;EAAE,OAAO;EAAY,CAAC;CACxE,MAAM,UAAU,OAAO,eAAe,QAAQ,QAAQ,OAAO,CAAC;AAC9D,KAAI,CAAC,QAAQ,OAAQ,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAE5D,QAAO,OAAO,SAAS,KAAK;EAAE,UAAU;EAAW,eAAe;EAAQ,eAAe,QAAQ,KAAI,WAAU,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK;EAAE,CAAC;EAC9J;AAEF,MAAa,gBAAgB,OAAO,GAAG,cAAc,CAAC,WAAW,KAAa;CAC5E,MAAM,QAAQ,OAAO,OAAO,IAAI;EAAE,WAAW;GAC3C,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,OAAI,OAAO,aAAa,WAAW,CAAC,CAAC,aAAa,QAAQ,CAAC,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY,OAAO,SAAU,OAAM,IAAI,MAAM,eAAe;AAC3J,UAAO,OAAO;;EACb,aAAa,IAAI,WAAW,EAAE,SAAS,oFAAoF,CAAC;EAAE,CAAC;CAClI,MAAM,UAAU,OAAO,eAAe,SAAS,eAAe,OAAO,EAAE,SAAS,KAAO,CAAC,CAAC;AAEzF,QAAO,OAAO,mBAAmB,OAAO,cAAc,QAAQ,OAAO,CAAC,CAAC;CACvE,MAAM,UAAU,QAAQ,UAAU,CAAC;AACnC,KAAI,CAAC,QAAS,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAErD,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE;AAEF,MAAa,QAAQ,OAAO,GAAG,aAAa,CAAC,aAAa;CACxD,MAAM,aAAa,OAAO,OAAO,OAAO,OAAO,OAAO,6BAA6B,CAAC;CACpF,MAAM,UAAU,OAAO,OAAO,eAAe,eAAe,SAAS,OAAO;EAAE,UAAU;EAAO,gBAAgB,OAAO,eAAe,WAAW;EAAE,CAAC,CAAC,GAAE,cAAW,OAAO,cAAcC,UAAQ,OAAO,CAAC,CAAC;CACvM,MAAM,UAAU,OAAO,eAAe,QAAQ,WAAW,EAAE,WAAW,gDAAgD,CAAC,CAAC;CACxH,MAAM,OAAO,OAAO,eAAe,QAAQ,SAAS,CAAC;AACrD,QAAO,eAAe,KAAK,KAAK,SAAS,WAAW;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;AACvG,QAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,+DAA+D,CAAC;AAC9G,QAAO,eAAe,KAAK,YAAW,QAAO,IAAI,aAAa,qBAAqB,CAAC,IAAI,SAAS,WAAW,SAAS,IAAI,CAAC,IAAI,SAAS,WAAW,UAAU,EAAE,EAAE,SAAS,KAAQ,CAAC,CAAC;AAEnL,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE"}

package/dist/browser-layer-D6mEyv9Y.js

@@ -0,0 +1,269 @@
+import { i as reportParameters, n as SessionError, t as ReportError } from "./errors-BhvanypE.js";
+import { i as Sessions, n as origin } from "./session-layer-BUU0ZG9M.js";
+import { t as Semrush } from "./browser-service-BYYE-vSm.js";
+import { Config, Effect, Layer, Option, Predicate, Schema, Semaphore } from "effect";
+import { chromium } from "patchright";
+import { randomUUID } from "node:crypto";
+import JSONbig from "json-bigint";
+
+//#region src/browser-layer.ts
+const transportPaths = new Map([
+	["domain", "/dpa/rpc"],
+	["direct", "/dpa/rpc"],
+	["magic", "/kmtgw/v2/webapi"],
+	["keyword", "/kwogw/v2/webapi"]
+]);
+const json = JSONbig({
+	storeAsString: true,
+	protoAction: "error",
+	constructorAction: "error"
+});
+const safeBrowserError = () => new ReportError({ message: "Semrush browser request failed. Run semrush-cli doctor. If your session expired, sign in again with semrush-cli auth login." });
+const browserCall = (run) => Effect.tryPromise({
+	try: run,
+	catch: safeBrowserError
+});
+const objectValue = (value) => Predicate.isObject(value) && !Array.isArray(value);
+/** JSON never passes through the browser's number parser, preserving 64-bit IDs. */
+function parseWire(text) {
+	return Schema.decodeUnknownSync(Schema.Json)(json.parse(text));
+}
+/** Remove credential fields and echoed secrets, including nested provider errors. */
+function redact(value, secrets) {
+	if (Array.isArray(value)) return value.map((item) => redact(item, secrets));
+	if (objectValue(value)) return Object.fromEntries(Object.entries(value).filter(([key]) => !/^(api_?key|key|user_?id|access_token|refresh_token|authorization|cookie|set-cookie)$/i.test(key)).map(([key, item]) => [key, redact(item, secrets)]));
+	if (Predicate.isString(value)) return secrets.filter((secret) => secret.length > 0).reduce((text, secret) => text.replaceAll(secret, "[redacted]"), value);
+	return value;
+}
+const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(function* () {
+	const sessions = yield* Sessions;
+	const executable = yield* Config.option(Config.String("SEMRUSH_BROWSER_EXECUTABLE"));
+	const headers = yield* sessions.headers();
+	const browser = yield* Effect.acquireRelease(browserCall(() => chromium.launch({
+		headless: true,
+		executablePath: Option.getOrUndefined(executable)
+	})), (browser$1) => Effect.promise(() => browser$1.close()));
+	const context = yield* browserCall(() => browser.newContext({ userAgent: "OpenAI File Downloader, XaiImageApiFetch/1.0" }));
+	const cookieHeader = headers.Cookie ?? headers.cookie ?? "";
+	yield* browserCall(() => context.addCookies(cookieHeader.split(";").filter((cookie) => cookie.includes("=")).map((cookie) => {
+		const separator = cookie.indexOf("=");
+		return {
+			name: cookie.slice(0, separator).trim(),
+			value: cookie.slice(separator + 1).trim(),
+			url: browserOrigin,
+			httpOnly: true,
+			secure: browserOrigin.startsWith("https:"),
+			sameSite: "Lax"
+		};
+	})));
+	const page = yield* browserCall(() => context.newPage());
+	yield* browserCall(() => page.goto(browserOrigin + "/robots.txt", {
+		waitUntil: "domcontentloaded",
+		timeout: 45e3
+	}));
+	const bootstrap = yield* browserCall(() => page.evaluate(async () => {
+		const response = await fetch("/analytics/overview/?db=us", {
+			credentials: "include",
+			signal: AbortSignal.timeout(45e3)
+		});
+		return {
+			status: response.status,
+			text: response.ok ? await response.text() : ""
+		};
+	}));
+	const auth = yield* Effect.try({
+		try: () => readBootstrap(bootstrap.text),
+		catch: () => new SessionError({ message: "Semrush sign-in metadata unavailable. Run semrush-cli auth login or import a signed-in browser." })
+	});
+	const semaphore = yield* Semaphore.make(1);
+	let spectrumToken = "";
+	const request = Effect.fn("Semrush.request")(function* (path, payload, get = false, extraHeaders = {}) {
+		const wire = yield* browserCall(() => page.evaluate(async ({ path: path$1, encodedPayload, get: get$1, extraHeaders: extraHeaders$1 }) => {
+			const payload$1 = JSON.parse(encodedPayload);
+			const query = new URLSearchParams();
+			if (get$1) for (const [key, value] of Object.entries(payload$1)) for (const item of Array.isArray(value) ? value : [value]) query.append(key, String(item));
+			const options = {
+				method: get$1 ? "GET" : "POST",
+				credentials: "include",
+				headers: extraHeaders$1,
+				signal: AbortSignal.timeout(45e3)
+			};
+			if (!get$1) {
+				options.headers = {
+					...extraHeaders$1,
+					"Content-Type": "application/json"
+				};
+				options.body = JSON.stringify(payload$1);
+			}
+			const response = await fetch(get$1 ? path$1 + "?" + query : path$1, options);
+			return {
+				status: response.status,
+				text: response.ok ? await response.text() : ""
+			};
+		}, {
+			path,
+			encodedPayload: JSON.stringify(payload),
+			get,
+			extraHeaders
+		}));
+		if (wire.status !== 200) return yield* Effect.fail(new ReportError({ message: `Semrush report returned HTTP ${wire.status}. Check your session and account permissions.` }));
+		const body = yield* Effect.try({
+			try: () => parseWire(wire.text),
+			catch: () => new ReportError({ message: "Semrush returned a page or challenge instead of JSON. Sign in again or retry later." })
+		});
+		if (objectValue(body) && ("error" in body || "status" in body && !(body.status === null || body.status === "SUCCESS" || body.status === "success"))) return yield* Effect.fail(new ReportError({ message: `Semrush report failed: ${JSON.stringify(redact(body.error ?? body.status ?? null, [
+			auth.apiKey,
+			spectrumToken,
+			spectrumToken.replace(/^Bearer /, "")
+		])).slice(0, 500)}` }));
+		return body;
+	});
+	const rpc = Effect.fn("Semrush.rpc")(function* (method, params, transport = "keyword", webReport = "domain.overview") {
+		const payload = transport === "domain" ? {
+			request_id: randomUUID(),
+			report: webReport,
+			args: params,
+			...auth
+		} : transport === "direct" ? {
+			...params,
+			...auth
+		} : params;
+		const body = yield* request(transportPaths.get(transport) ?? "/kwogw/v2/webapi", {
+			id: 1,
+			jsonrpc: "2.0",
+			method,
+			params: payload
+		});
+		if (!objectValue(body) || !("result" in body)) return yield* Effect.fail(new ReportError({ message: `Semrush ${method}: missing report result.` }));
+		return body.result ?? null;
+	});
+	const report = Effect.fn("Semrush.report")(function* ({ name, definition, query }) {
+		if (!(yield* browserCall(() => page.evaluate(async () => {
+			const response = await fetch("/home/", {
+				method: "HEAD",
+				credentials: "include",
+				cache: "no-store",
+				signal: AbortSignal.timeout(15e3)
+			});
+			return response.ok && new URL(response.url).pathname === "/home/";
+		})))) return yield* Effect.fail(new SessionError({ message: "Semrush session expired. Run semrush-cli auth login or import a signed-in browser." }));
+		const params = reportParameters(definition, query);
+		const family = definition.transport;
+		let reportData;
+		if ([
+			"keyword",
+			"domain",
+			"direct",
+			"magic"
+		].includes(family)) reportData = yield* rpc(definition.method, params, family, definition.web_report);
+		else {
+			const extra = {};
+			if (family === "gap") {
+				if (!spectrumToken) spectrumToken = yield* browserCall(() => observeSpectrum(page, browserOrigin));
+				Object.assign(extra, {
+					authorization: spectrumToken,
+					"x-report": "gap.keywords",
+					"x-request-id": randomUUID()
+				});
+			}
+			let path = definition.method;
+			if (family.startsWith("backlink")) {
+				path = "/analytics/backlinks/webapi2/";
+				params.key = auth.apiKey;
+				if (family === "backlink_overview") {
+					path += "overview/" + definition.method;
+					extra["x-request-id"] = randomUUID();
+					yield* request("/analytics/backlinks/webapi2/overview/init", params, true, extra);
+				}
+			} else if (path.startsWith("/siteaudit/")) params.key = auth.apiKey;
+			reportData = yield* request(path, params, ![
+				"post",
+				"gap",
+				"projects"
+			].includes(family), extra);
+		}
+		if (definition.total_method) {
+			const totalParams = name === "domain_position_changes" ? Object.fromEntries(Object.entries(params).filter(([key]) => key !== "display")) : params;
+			const total = yield* rpc(definition.total_method, totalParams, "domain", definition.web_report);
+			reportData = {
+				rows: reportData,
+				total,
+				page: query.page ?? null,
+				page_size: query.page_size ?? null
+			};
+		}
+		if (name === "keyword_overview") {
+			const rows = objectValue(reportData) ? reportData.keywords : void 0;
+			reportData = Array.isArray(rows) ? rows.find((item) => objectValue(item) && item.database === query.database) : void 0;
+			if (!reportData) return yield* Effect.fail(new ReportError({ message: "No keyword data for the selected database." }));
+		} else if (name === "domain_overview") {
+			const search = Array.isArray(reportData) ? reportData.find((item) => objectValue(item) && item.database === query.database) : void 0;
+			if (!search) return yield* Effect.fail(new ReportError({ message: "No domain data for the selected database." }));
+			reportData = {
+				search,
+				backlinks: yield* rpc("backlinks.Summary", {
+					searchItem: query.domain ?? null,
+					searchType: "domain"
+				}, "domain")
+			};
+		}
+		if (Predicate.isNumber(query.limit) && Array.isArray(reportData)) reportData = reportData.slice(0, query.limit);
+		yield* captureCookies(context, sessions.capture, browserOrigin);
+		return {
+			authenticated: true,
+			report: name,
+			data: redact(reportData ?? null, [
+				auth.apiKey,
+				spectrumToken,
+				spectrumToken.replace(/^Bearer /, "")
+			])
+		};
+	});
+	return Semrush.of({ report: (request$1) => semaphore.withPermits(1)(report(request$1)) });
+}));
+const semrushLive = makeSemrushLayer(origin);
+function readBootstrap(html) {
+	const match = /window\.sm2\.user\s*=\s*/.exec(html);
+	if (!match) throw new Error("No bootstrap");
+	const start = match.index + match[0].length;
+	let depth = 0, quoted = false, escaped = false;
+	for (let index = start; index < html.length; index++) {
+		const char = html[index];
+		if (quoted) {
+			if (escaped) escaped = false;
+			else if (char === "\\") escaped = true;
+			else if (char === "\"") quoted = false;
+		} else if (char === "\"") quoted = true;
+		else if (char === "{") depth++;
+		else if (char === "}" && --depth === 0) {
+			const user = parseWire(html.slice(start, index + 1));
+			if (objectValue(user) && Predicate.isString(user.api_key) && (Predicate.isString(user.id) || Predicate.isNumber(user.id))) return {
+				apiKey: user.api_key,
+				userId: user.id
+			};
+			break;
+		}
+	}
+	throw new Error("Invalid bootstrap");
+}
+async function observeSpectrum(page, browserOrigin) {
+	try {
+		const [observed] = await Promise.all([page.waitForRequest((request) => request.url().startsWith(browserOrigin + "/spectrum/") && Boolean(request.headers().authorization), { timeout: 2e4 }), page.goto(browserOrigin + "/analytics/keywordgap/?db=us", {
+			waitUntil: "domcontentloaded",
+			timeout: 45e3
+		})]);
+		return observed.headers().authorization ?? "";
+	} finally {
+		await page.goto(browserOrigin + "/robots.txt", {
+			waitUntil: "domcontentloaded",
+			timeout: 45e3
+		});
+	}
+}
+const captureCookies = Effect.fn("Semrush.captureCookies")(function* (context, capture, cookieOrigin) {
+	yield* capture((yield* browserCall(() => context.cookies(cookieOrigin))).map((cookie) => `${cookie.name}=${cookie.value}; Path=${cookie.path}${cookieOrigin.startsWith("https:") ? "; Secure" : ""}${cookie.httpOnly ? "; HttpOnly" : ""}${cookie.expires > 0 ? "; Expires=" + (/* @__PURE__ */ new Date(cookie.expires * 1e3)).toUTCString() : ""}`));
+});
+
+//#endregion
+export { semrushLive as n, readBootstrap as t };
+//# sourceMappingURL=browser-layer-D6mEyv9Y.js.map

package/dist/browser-layer-D6mEyv9Y.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-layer-D6mEyv9Y.js","names":["browser","payload: Schema.JsonObject","get","payload","options: RequestInit","extraHeaders","path","reportData: Schema.Json | undefined","extra: Record<string, string>","request"],"sources":["../src/browser-layer.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { Config, Effect, Layer, Option, Semaphore, Schema, Predicate } from 'effect';\nimport { chromium, type BrowserContext, type Page } from 'patchright';\nimport JSONbig from 'json-bigint';\nimport { Semrush } from './browser-service.js';\nimport { Sessions } from './session-service.js';\nimport { origin } from './session-layer.js';\nimport { ReportError, SessionError } from './errors.js';\nimport { reportParameters, type Query } from './report-parameters.js';\nimport type { ReportRequest } from './validation.js';\n\nconst transportPaths = new Map([['domain', '/dpa/rpc'], ['direct', '/dpa/rpc'], ['magic', '/kmtgw/v2/webapi'], ['keyword', '/kwogw/v2/webapi']]);\nconst json = JSONbig({ storeAsString: true, protoAction: 'error', constructorAction: 'error' });\nconst safeBrowserError = () => new ReportError({ message: 'Semrush browser request failed. Run semrush-cli doctor. If your session expired, sign in again with semrush-cli auth login.' });\nconst browserCall = <A>(run: () => Promise<A>) => Effect.tryPromise({ try: run, catch: safeBrowserError });\nconst objectValue = (value: Schema.Json | undefined): value is Schema.JsonObject => Predicate.isObject(value) && !Array.isArray(value);\n\n/** JSON never passes through the browser's number parser, preserving 64-bit IDs. */\nexport function parseWire(text: string): Schema.Json { return Schema.decodeUnknownSync(Schema.Json)(json.parse(text)); }\n\n/** Remove credential fields and echoed secrets, including nested provider errors. */\nexport function redact(value: Schema.Json, secrets: string[]): Schema.Json {\n  if (Array.isArray(value)) return value.map(item => redact(item, secrets));\n  if (objectValue(value)) return Object.fromEntries(Object.entries(value).filter(([key]) => !/^(api_?key|key|user_?id|access_token|refresh_token|authorization|cookie|set-cookie)$/i.test(key)).map(([key, item]) => [key, redact(item, secrets)]));\n  if (Predicate.isString(value)) return secrets.filter(secret => secret.length > 0).reduce((text, secret) => text.replaceAll(secret, '[redacted]'), value);\n  return value;\n}\n\nexport const makeSemrushLayer = (browserOrigin: string) => Layer.effect(Semrush, Effect.gen(function* () {\n  const sessions = yield* Sessions;\n  const executable = yield* Config.option(Config.String('SEMRUSH_BROWSER_EXECUTABLE'));\n  const headers = yield* sessions.headers();\n  const browser = yield* Effect.acquireRelease(browserCall(() => chromium.launch({ headless: true, executablePath: Option.getOrUndefined(executable) })), browser => Effect.promise(() => browser.close()));\n  const context = yield* browserCall(() => browser.newContext({ userAgent: 'OpenAI File Downloader, XaiImageApiFetch/1.0' }));\n  const cookieHeader = headers.Cookie ?? headers.cookie ?? '';\n  yield* browserCall(() => context.addCookies(cookieHeader.split(';').filter(cookie => cookie.includes('=')).map(cookie => {\n    const separator = cookie.indexOf('=');\n    return { name: cookie.slice(0, separator).trim(), value: cookie.slice(separator + 1).trim(), url: browserOrigin, httpOnly: true, secure: browserOrigin.startsWith('https:'), sameSite: 'Lax' as const };\n  })));\n  const page = yield* browserCall(() => context.newPage());\n  yield* browserCall(() => page.goto(browserOrigin + '/robots.txt', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  const bootstrap = yield* browserCall(() => page.evaluate(async () => {\n    const response = await fetch('/analytics/overview/?db=us', { credentials: 'include', signal: AbortSignal.timeout(45000) });\n    return { status: response.status, text: response.ok ? await response.text() : '' };\n  }));\n  // Extract the JSON value with a balanced scanner, never eval page-owned JavaScript.\n  const auth = yield* Effect.try({ try: () => readBootstrap(bootstrap.text), catch: () => new SessionError({ message: 'Semrush sign-in metadata unavailable. Run semrush-cli auth login or import a signed-in browser.' }) });\n  const semaphore = yield* Semaphore.make(1);\n  let spectrumToken = '';\n  const request = Effect.fn('Semrush.request')(function* (path: string, payload: Query, get = false, extraHeaders: Record<string, string> = {}) {\n    const wire = yield* browserCall(() => page.evaluate(async ({ path, encodedPayload, get, extraHeaders }) => {\n      const payload: Schema.JsonObject = JSON.parse(encodedPayload);\n      const query = new URLSearchParams();\n      if (get) for (const [key, value] of Object.entries(payload)) for (const item of Array.isArray(value) ? value : [value]) query.append(key, String(item));\n      const options: RequestInit = { method: get ? 'GET' : 'POST', credentials: 'include', headers: extraHeaders, signal: AbortSignal.timeout(45000) };\n      if (!get) { options.headers = { ...extraHeaders, 'Content-Type': 'application/json' }; options.body = JSON.stringify(payload); }\n      const response = await fetch(get ? path + '?' + query : path, options);\n      return { status: response.status, text: response.ok ? await response.text() : '' };\n    }, { path, encodedPayload: JSON.stringify(payload), get, extraHeaders }));\n    if (wire.status !== 200) return yield* Effect.fail(new ReportError({ message: `Semrush report returned HTTP ${wire.status}. Check your session and account permissions.` }));\n    const body = yield* Effect.try({ try: () => parseWire(wire.text), catch: () => new ReportError({ message: 'Semrush returned a page or challenge instead of JSON. Sign in again or retry later.' }) });\n    if (objectValue(body) && ('error' in body || ('status' in body && !(body.status === null || body.status === 'SUCCESS' || body.status === 'success')))) return yield* Effect.fail(new ReportError({ message: `Semrush report failed: ${JSON.stringify(redact(body.error ?? body.status ?? null, [auth.apiKey, spectrumToken, spectrumToken.replace(/^Bearer /, '')])).slice(0, 500)}` }));\n    return body;\n  });\n  const rpc = Effect.fn('Semrush.rpc')(function* (method: string, params: Query, transport = 'keyword', webReport = 'domain.overview') {\n    const payload = transport === 'domain' ? { request_id: randomUUID(), report: webReport, args: params, ...auth } : transport === 'direct' ? { ...params, ...auth } : params;\n    const body = yield* request(transportPaths.get(transport) ?? '/kwogw/v2/webapi', { id: 1, jsonrpc: '2.0', method, params: payload });\n    if (!objectValue(body) || !('result' in body)) return yield* Effect.fail(new ReportError({ message: `Semrush ${method}: missing report result.` }));\n    return body.result ?? null;\n  });\n  const report = Effect.fn('Semrush.report')(function* ({ name, definition, query }: ReportRequest) {\n    const valid = yield* browserCall(() => page.evaluate(async () => {\n      const response = await fetch('/home/', { method: 'HEAD', credentials: 'include', cache: 'no-store', signal: AbortSignal.timeout(15000) });\n      return response.ok && new URL(response.url).pathname === '/home/';\n    }));\n    if (!valid) return yield* Effect.fail(new SessionError({ message: 'Semrush session expired. Run semrush-cli auth login or import a signed-in browser.' }));\n    const params = reportParameters(definition, query);\n    const family = definition.transport;\n    let reportData: Schema.Json | undefined;\n    if (['keyword', 'domain', 'direct', 'magic'].includes(family)) reportData = yield* rpc(definition.method, params, family, definition.web_report);\n    else {\n      const extra: Record<string, string> = {};\n      if (family === 'gap') {\n        if (!spectrumToken) spectrumToken = yield* browserCall(() => observeSpectrum(page, browserOrigin));\n        Object.assign(extra, { authorization: spectrumToken, 'x-report': 'gap.keywords', 'x-request-id': randomUUID() });\n      }\n      let path = definition.method;\n      if (family.startsWith('backlink')) {\n        path = '/analytics/backlinks/webapi2/';\n        params.key = auth.apiKey;\n        if (family === 'backlink_overview') {\n          path += 'overview/' + definition.method;\n          extra['x-request-id'] = randomUUID();\n          yield* request('/analytics/backlinks/webapi2/overview/init', params, true, extra);\n        }\n      } else if (path.startsWith('/siteaudit/')) params.key = auth.apiKey;\n      reportData = yield* request(path, params, !['post', 'gap', 'projects'].includes(family), extra);\n    }\n    if (definition.total_method) {\n      const totalParams = name === 'domain_position_changes' ? Object.fromEntries(Object.entries(params).filter(([key]) => key !== 'display')) : params;\n      const total = yield* rpc(definition.total_method, totalParams, 'domain', definition.web_report);\n      reportData = { rows: reportData, total, page: query.page ?? null, page_size: query.page_size ?? null };\n    }\n    if (name === 'keyword_overview') {\n      const rows = objectValue(reportData) ? reportData.keywords : undefined;\n      reportData = Array.isArray(rows) ? rows.find(item => objectValue(item) && item.database === query.database) : undefined;\n      if (!reportData) return yield* Effect.fail(new ReportError({ message: 'No keyword data for the selected database.' }));\n    } else if (name === 'domain_overview') {\n      const search = Array.isArray(reportData) ? reportData.find(item => objectValue(item) && item.database === query.database) : undefined;\n      if (!search) return yield* Effect.fail(new ReportError({ message: 'No domain data for the selected database.' }));\n      reportData = { search, backlinks: yield* rpc('backlinks.Summary', { searchItem: query.domain ?? null, searchType: 'domain' }, 'domain') };\n    }\n    if (Predicate.isNumber(query.limit) && Array.isArray(reportData)) reportData = reportData.slice(0, query.limit);\n    yield* captureCookies(context, sessions.capture, browserOrigin);\n    return { authenticated: true as const, report: name, data: redact(reportData ?? null, [auth.apiKey, spectrumToken, spectrumToken.replace(/^Bearer /, '')]) };\n  });\n  return Semrush.of({ report: request => semaphore.withPermits(1)(report(request)) });\n}));\n\nexport const semrushLive = makeSemrushLayer(origin);\n\ninterface BootstrapAuth { readonly apiKey: string; readonly userId: string | number; }\nexport function readBootstrap(html: string): BootstrapAuth {\n  const match = /window\\.sm2\\.user\\s*=\\s*/.exec(html);\n  if (!match) throw new Error('No bootstrap');\n  const start = match.index + match[0].length;\n  let depth = 0, quoted = false, escaped = false;\n  for (let index = start; index < html.length; index++) {\n    const char = html[index];\n    if (quoted) {\n      if (escaped) escaped = false;\n      else if (char === '\\\\') escaped = true;\n      else if (char === '\"') quoted = false;\n    } else if (char === '\"') quoted = true;\n    else if (char === '{') depth++;\n    else if (char === '}' && --depth === 0) {\n      const user = parseWire(html.slice(start, index + 1));\n      if (objectValue(user) && Predicate.isString(user.api_key) && (Predicate.isString(user.id) || Predicate.isNumber(user.id))) return { apiKey: user.api_key, userId: user.id };\n      break;\n    }\n  }\n  throw new Error('Invalid bootstrap');\n}\n\nasync function observeSpectrum(page: Page, browserOrigin: string): Promise<string> {\n  try {\n    // Observe and navigate together so either timeout is handled immediately.\n    const [observed] = await Promise.all([\n      page.waitForRequest(request => request.url().startsWith(browserOrigin + '/spectrum/') && Boolean(request.headers().authorization), { timeout: 20000 }),\n      page.goto(browserOrigin + '/analytics/keywordgap/?db=us', { waitUntil: 'domcontentloaded', timeout: 45000 }),\n    ]);\n    return observed.headers().authorization ?? '';\n  } finally {\n    await page.goto(browserOrigin + '/robots.txt', { waitUntil: 'domcontentloaded', timeout: 45000 });\n  }\n}\n\nconst captureCookies = Effect.fn('Semrush.captureCookies')(function* (context: BrowserContext, capture: (cookies: string[]) => Effect.Effect<void, SessionError>, cookieOrigin: string) {\n  const cookies = yield* browserCall(() => context.cookies(cookieOrigin));\n  yield* capture(cookies.map(cookie => `${cookie.name}=${cookie.value}; Path=${cookie.path}${cookieOrigin.startsWith('https:') ? '; Secure' : ''}${cookie.httpOnly ? '; HttpOnly' : ''}${cookie.expires > 0 ? '; Expires=' + new Date(cookie.expires * 1000).toUTCString() : ''}`));\n});\n"],"mappings":";;;;;;;;;AAWA,MAAM,iBAAiB,IAAI,IAAI;CAAC,CAAC,UAAU,WAAW;CAAE,CAAC,UAAU,WAAW;CAAE,CAAC,SAAS,mBAAmB;CAAE,CAAC,WAAW,mBAAmB;CAAC,CAAC;AAChJ,MAAM,OAAO,QAAQ;CAAE,eAAe;CAAM,aAAa;CAAS,mBAAmB;CAAS,CAAC;AAC/F,MAAM,yBAAyB,IAAI,YAAY,EAAE,SAAS,+HAA+H,CAAC;AAC1L,MAAM,eAAkB,QAA0B,OAAO,WAAW;CAAE,KAAK;CAAK,OAAO;CAAkB,CAAC;AAC1G,MAAM,eAAe,UAA+D,UAAU,SAAS,MAAM,IAAI,CAAC,MAAM,QAAQ,MAAM;;AAGtI,SAAgB,UAAU,MAA2B;AAAE,QAAO,OAAO,kBAAkB,OAAO,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC;;;AAGrH,SAAgB,OAAO,OAAoB,SAAgC;AACzE,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,KAAI,SAAQ,OAAO,MAAM,QAAQ,CAAC;AACzE,KAAI,YAAY,MAAM,CAAE,QAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,wFAAwF,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,KAAK,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC;AACjP,KAAI,UAAU,SAAS,MAAM,CAAE,QAAO,QAAQ,QAAO,WAAU,OAAO,SAAS,EAAE,CAAC,QAAQ,MAAM,WAAW,KAAK,WAAW,QAAQ,aAAa,EAAE,MAAM;AACxJ,QAAO;;AAGT,MAAa,oBAAoB,kBAA0B,MAAM,OAAO,SAAS,OAAO,IAAI,aAAa;CACvG,MAAM,WAAW,OAAO;CACxB,MAAM,aAAa,OAAO,OAAO,OAAO,OAAO,OAAO,6BAA6B,CAAC;CACpF,MAAM,UAAU,OAAO,SAAS,SAAS;CACzC,MAAM,UAAU,OAAO,OAAO,eAAe,kBAAkB,SAAS,OAAO;EAAE,UAAU;EAAM,gBAAgB,OAAO,eAAe,WAAW;EAAE,CAAC,CAAC,GAAE,cAAW,OAAO,cAAcA,UAAQ,OAAO,CAAC,CAAC;CACzM,MAAM,UAAU,OAAO,kBAAkB,QAAQ,WAAW,EAAE,WAAW,gDAAgD,CAAC,CAAC;CAC3H,MAAM,eAAe,QAAQ,UAAU,QAAQ,UAAU;AACzD,QAAO,kBAAkB,QAAQ,WAAW,aAAa,MAAM,IAAI,CAAC,QAAO,WAAU,OAAO,SAAS,IAAI,CAAC,CAAC,KAAI,WAAU;EACvH,MAAM,YAAY,OAAO,QAAQ,IAAI;AACrC,SAAO;GAAE,MAAM,OAAO,MAAM,GAAG,UAAU,CAAC,MAAM;GAAE,OAAO,OAAO,MAAM,YAAY,EAAE,CAAC,MAAM;GAAE,KAAK;GAAe,UAAU;GAAM,QAAQ,cAAc,WAAW,SAAS;GAAE,UAAU;GAAgB;GACvM,CAAC,CAAC;CACJ,MAAM,OAAO,OAAO,kBAAkB,QAAQ,SAAS,CAAC;AACxD,QAAO,kBAAkB,KAAK,KAAK,gBAAgB,eAAe;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;CACrH,MAAM,YAAY,OAAO,kBAAkB,KAAK,SAAS,YAAY;EACnE,MAAM,WAAW,MAAM,MAAM,8BAA8B;GAAE,aAAa;GAAW,QAAQ,YAAY,QAAQ,KAAM;GAAE,CAAC;AAC1H,SAAO;GAAE,QAAQ,SAAS;GAAQ,MAAM,SAAS,KAAK,MAAM,SAAS,MAAM,GAAG;GAAI;GAClF,CAAC;CAEH,MAAM,OAAO,OAAO,OAAO,IAAI;EAAE,WAAW,cAAc,UAAU,KAAK;EAAE,aAAa,IAAI,aAAa,EAAE,SAAS,mGAAmG,CAAC;EAAE,CAAC;CAC3N,MAAM,YAAY,OAAO,UAAU,KAAK,EAAE;CAC1C,IAAI,gBAAgB;CACpB,MAAM,UAAU,OAAO,GAAG,kBAAkB,CAAC,WAAW,MAAc,SAAgB,MAAM,OAAO,eAAuC,EAAE,EAAE;EAC5I,MAAM,OAAO,OAAO,kBAAkB,KAAK,SAAS,OAAO,EAAE,cAAM,gBAAgB,YAAK,mCAAmB;GACzG,MAAMC,YAA6B,KAAK,MAAM,eAAe;GAC7D,MAAM,QAAQ,IAAI,iBAAiB;AACnC,OAAIC,MAAK,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQC,UAAQ,CAAE,MAAK,MAAM,QAAQ,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAE,OAAM,OAAO,KAAK,OAAO,KAAK,CAAC;GACvJ,MAAMC,UAAuB;IAAE,QAAQF,QAAM,QAAQ;IAAQ,aAAa;IAAW,SAASG;IAAc,QAAQ,YAAY,QAAQ,KAAM;IAAE;AAChJ,OAAI,CAACH,OAAK;AAAE,YAAQ,UAAU;KAAE,GAAGG;KAAc,gBAAgB;KAAoB;AAAE,YAAQ,OAAO,KAAK,UAAUF,UAAQ;;GAC7H,MAAM,WAAW,MAAM,MAAMD,QAAMI,SAAO,MAAM,QAAQA,QAAM,QAAQ;AACtE,UAAO;IAAE,QAAQ,SAAS;IAAQ,MAAM,SAAS,KAAK,MAAM,SAAS,MAAM,GAAG;IAAI;KACjF;GAAE;GAAM,gBAAgB,KAAK,UAAU,QAAQ;GAAE;GAAK;GAAc,CAAC,CAAC;AACzE,MAAI,KAAK,WAAW,IAAK,QAAO,OAAO,OAAO,KAAK,IAAI,YAAY,EAAE,SAAS,gCAAgC,KAAK,OAAO,gDAAgD,CAAC,CAAC;EAC5K,MAAM,OAAO,OAAO,OAAO,IAAI;GAAE,WAAW,UAAU,KAAK,KAAK;GAAE,aAAa,IAAI,YAAY,EAAE,SAAS,uFAAuF,CAAC;GAAE,CAAC;AACrM,MAAI,YAAY,KAAK,KAAK,WAAW,QAAS,YAAY,QAAQ,EAAE,KAAK,WAAW,QAAQ,KAAK,WAAW,aAAa,KAAK,WAAW,YAAc,QAAO,OAAO,OAAO,KAAK,IAAI,YAAY,EAAE,SAAS,0BAA0B,KAAK,UAAU,OAAO,KAAK,SAAS,KAAK,UAAU,MAAM;GAAC,KAAK;GAAQ;GAAe,cAAc,QAAQ,YAAY,GAAG;GAAC,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC;AACxX,SAAO;GACP;CACF,MAAM,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,QAAgB,QAAe,YAAY,WAAW,YAAY,mBAAmB;EACnI,MAAM,UAAU,cAAc,WAAW;GAAE,YAAY,YAAY;GAAE,QAAQ;GAAW,MAAM;GAAQ,GAAG;GAAM,GAAG,cAAc,WAAW;GAAE,GAAG;GAAQ,GAAG;GAAM,GAAG;EACpK,MAAM,OAAO,OAAO,QAAQ,eAAe,IAAI,UAAU,IAAI,oBAAoB;GAAE,IAAI;GAAG,SAAS;GAAO;GAAQ,QAAQ;GAAS,CAAC;AACpI,MAAI,CAAC,YAAY,KAAK,IAAI,EAAE,YAAY,MAAO,QAAO,OAAO,OAAO,KAAK,IAAI,YAAY,EAAE,SAAS,WAAW,OAAO,2BAA2B,CAAC,CAAC;AACnJ,SAAO,KAAK,UAAU;GACtB;CACF,MAAM,SAAS,OAAO,GAAG,iBAAiB,CAAC,WAAW,EAAE,MAAM,YAAY,SAAwB;AAKhG,MAAI,EAJU,OAAO,kBAAkB,KAAK,SAAS,YAAY;GAC/D,MAAM,WAAW,MAAM,MAAM,UAAU;IAAE,QAAQ;IAAQ,aAAa;IAAW,OAAO;IAAY,QAAQ,YAAY,QAAQ,KAAM;IAAE,CAAC;AACzI,UAAO,SAAS,MAAM,IAAI,IAAI,SAAS,IAAI,CAAC,aAAa;IACzD,CAAC,EACS,QAAO,OAAO,OAAO,KAAK,IAAI,aAAa,EAAE,SAAS,sFAAsF,CAAC,CAAC;EAC1J,MAAM,SAAS,iBAAiB,YAAY,MAAM;EAClD,MAAM,SAAS,WAAW;EAC1B,IAAIC;AACJ,MAAI;GAAC;GAAW;GAAU;GAAU;GAAQ,CAAC,SAAS,OAAO,CAAE,cAAa,OAAO,IAAI,WAAW,QAAQ,QAAQ,QAAQ,WAAW,WAAW;OAC3I;GACH,MAAMC,QAAgC,EAAE;AACxC,OAAI,WAAW,OAAO;AACpB,QAAI,CAAC,cAAe,iBAAgB,OAAO,kBAAkB,gBAAgB,MAAM,cAAc,CAAC;AAClG,WAAO,OAAO,OAAO;KAAE,eAAe;KAAe,YAAY;KAAgB,gBAAgB,YAAY;KAAE,CAAC;;GAElH,IAAI,OAAO,WAAW;AACtB,OAAI,OAAO,WAAW,WAAW,EAAE;AACjC,WAAO;AACP,WAAO,MAAM,KAAK;AAClB,QAAI,WAAW,qBAAqB;AAClC,aAAQ,cAAc,WAAW;AACjC,WAAM,kBAAkB,YAAY;AACpC,YAAO,QAAQ,8CAA8C,QAAQ,MAAM,MAAM;;cAE1E,KAAK,WAAW,cAAc,CAAE,QAAO,MAAM,KAAK;AAC7D,gBAAa,OAAO,QAAQ,MAAM,QAAQ,CAAC;IAAC;IAAQ;IAAO;IAAW,CAAC,SAAS,OAAO,EAAE,MAAM;;AAEjG,MAAI,WAAW,cAAc;GAC3B,MAAM,cAAc,SAAS,4BAA4B,OAAO,YAAY,OAAO,QAAQ,OAAO,CAAC,QAAQ,CAAC,SAAS,QAAQ,UAAU,CAAC,GAAG;GAC3I,MAAM,QAAQ,OAAO,IAAI,WAAW,cAAc,aAAa,UAAU,WAAW,WAAW;AAC/F,gBAAa;IAAE,MAAM;IAAY;IAAO,MAAM,MAAM,QAAQ;IAAM,WAAW,MAAM,aAAa;IAAM;;AAExG,MAAI,SAAS,oBAAoB;GAC/B,MAAM,OAAO,YAAY,WAAW,GAAG,WAAW,WAAW;AAC7D,gBAAa,MAAM,QAAQ,KAAK,GAAG,KAAK,MAAK,SAAQ,YAAY,KAAK,IAAI,KAAK,aAAa,MAAM,SAAS,GAAG;AAC9G,OAAI,CAAC,WAAY,QAAO,OAAO,OAAO,KAAK,IAAI,YAAY,EAAE,SAAS,8CAA8C,CAAC,CAAC;aAC7G,SAAS,mBAAmB;GACrC,MAAM,SAAS,MAAM,QAAQ,WAAW,GAAG,WAAW,MAAK,SAAQ,YAAY,KAAK,IAAI,KAAK,aAAa,MAAM,SAAS,GAAG;AAC5H,OAAI,CAAC,OAAQ,QAAO,OAAO,OAAO,KAAK,IAAI,YAAY,EAAE,SAAS,6CAA6C,CAAC,CAAC;AACjH,gBAAa;IAAE;IAAQ,WAAW,OAAO,IAAI,qBAAqB;KAAE,YAAY,MAAM,UAAU;KAAM,YAAY;KAAU,EAAE,SAAS;IAAE;;AAE3I,MAAI,UAAU,SAAS,MAAM,MAAM,IAAI,MAAM,QAAQ,WAAW,CAAE,cAAa,WAAW,MAAM,GAAG,MAAM,MAAM;AAC/G,SAAO,eAAe,SAAS,SAAS,SAAS,cAAc;AAC/D,SAAO;GAAE,eAAe;GAAe,QAAQ;GAAM,MAAM,OAAO,cAAc,MAAM;IAAC,KAAK;IAAQ;IAAe,cAAc,QAAQ,YAAY,GAAG;IAAC,CAAC;GAAE;GAC5J;AACF,QAAO,QAAQ,GAAG,EAAE,SAAQ,cAAW,UAAU,YAAY,EAAE,CAAC,OAAOC,UAAQ,CAAC,EAAE,CAAC;EACnF,CAAC;AAEH,MAAa,cAAc,iBAAiB,OAAO;AAGnD,SAAgB,cAAc,MAA6B;CACzD,MAAM,QAAQ,2BAA2B,KAAK,KAAK;AACnD,KAAI,CAAC,MAAO,OAAM,IAAI,MAAM,eAAe;CAC3C,MAAM,QAAQ,MAAM,QAAQ,MAAM,GAAG;CACrC,IAAI,QAAQ,GAAG,SAAS,OAAO,UAAU;AACzC,MAAK,IAAI,QAAQ,OAAO,QAAQ,KAAK,QAAQ,SAAS;EACpD,MAAM,OAAO,KAAK;AAClB,MAAI,QACF;OAAI,QAAS,WAAU;YACd,SAAS,KAAM,WAAU;YACzB,SAAS,KAAK,UAAS;aACvB,SAAS,KAAK,UAAS;WACzB,SAAS,IAAK;WACd,SAAS,OAAO,EAAE,UAAU,GAAG;GACtC,MAAM,OAAO,UAAU,KAAK,MAAM,OAAO,QAAQ,EAAE,CAAC;AACpD,OAAI,YAAY,KAAK,IAAI,UAAU,SAAS,KAAK,QAAQ,KAAK,UAAU,SAAS,KAAK,GAAG,IAAI,UAAU,SAAS,KAAK,GAAG,EAAG,QAAO;IAAE,QAAQ,KAAK;IAAS,QAAQ,KAAK;IAAI;AAC3K;;;AAGJ,OAAM,IAAI,MAAM,oBAAoB;;AAGtC,eAAe,gBAAgB,MAAY,eAAwC;AACjF,KAAI;EAEF,MAAM,CAAC,YAAY,MAAM,QAAQ,IAAI,CACnC,KAAK,gBAAe,YAAW,QAAQ,KAAK,CAAC,WAAW,gBAAgB,aAAa,IAAI,QAAQ,QAAQ,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,KAAO,CAAC,EACtJ,KAAK,KAAK,gBAAgB,gCAAgC;GAAE,WAAW;GAAoB,SAAS;GAAO,CAAC,CAC7G,CAAC;AACF,SAAO,SAAS,SAAS,CAAC,iBAAiB;WACnC;AACR,QAAM,KAAK,KAAK,gBAAgB,eAAe;GAAE,WAAW;GAAoB,SAAS;GAAO,CAAC;;;AAIrG,MAAM,iBAAiB,OAAO,GAAG,yBAAyB,CAAC,WAAW,SAAyB,SAAmE,cAAsB;AAEtL,QAAO,SADS,OAAO,kBAAkB,QAAQ,QAAQ,aAAa,CAAC,EAChD,KAAI,WAAU,GAAG,OAAO,KAAK,GAAG,OAAO,MAAM,SAAS,OAAO,OAAO,aAAa,WAAW,SAAS,GAAG,aAAa,KAAK,OAAO,WAAW,eAAe,KAAK,OAAO,UAAU,IAAI,gCAAe,IAAI,KAAK,OAAO,UAAU,IAAK,EAAC,aAAa,GAAG,KAAK,CAAC;EACjR"}

package/dist/browser-service-BYYE-vSm.js

@@ -0,0 +1,9 @@
+import { Context } from "effect";
+
+//#region src/browser-service.ts
+/** One serialized browser context per runtime. Report callers never handle cookies or pages. */
+var Semrush = class extends Context.Service()("semrush/Semrush") {};
+
+//#endregion
+export { Semrush as t };
+//# sourceMappingURL=browser-service-BYYE-vSm.js.map

package/dist/browser-service-BYYE-vSm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-service-BYYE-vSm.js","names":[],"sources":["../src/browser-service.ts"],"sourcesContent":["import { Context, Effect } from 'effect';\nimport type { ReportRequest } from './validation.js';\nimport type { ReportError, SessionError, UsageError } from './errors.js';\n\n/** One serialized browser context per runtime. Report callers never handle cookies or pages. */\nexport class Semrush extends Context.Service<Semrush, {\n  readonly report: (request: ReportRequest) => Effect.Effect<{ authenticated: true; report: string; data: unknown }, ReportError | SessionError | UsageError>;\n}>()('semrush/Semrush') {}\n"],"mappings":";;;;AAKA,IAAa,UAAb,cAA6B,QAAQ,SAEjC,CAAC,kBAAkB,CAAC"}

package/dist/browser-service-CL8YPaIT.js

@@ -0,0 +1,3 @@
+import { t as Semrush } from "./browser-service-BYYE-vSm.js";
+
+export { Semrush };