semrush-cli 0.3.0 → 0.5.0

package/README.md

@@ -1,221 +1,237 @@
 <p align="center">
-  <img src="assets/logo.svg" width="220" alt="semrush-cli">
+  <img src="assets/logo-lockup.svg" width="720" alt="semrush cli logo">
 </p>
-<h1 align="center">semrush-cli</h1>
+
 <p align="center">
-  <a href="https://github.com/Microck/semrush-cli/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/Microck/semrush-cli/ci.yml?branch=main&style=flat-square&label=ci&color=000000" alt="CI"></a>
-  <a href="https://www.npmjs.com/package/semrush-cli"><img src="https://img.shields.io/npm/v/semrush-cli?style=flat-square&color=000000" alt="npm"></a>
-  <a href="https://github.com/Microck/semrush-cli/releases/latest"><img src="https://img.shields.io/github/v/release/Microck/semrush-cli?style=flat-square&color=000000" alt="release"></a>
-  <a href="LICENSE"><img src="https://img.shields.io/github/license/Microck/semrush-cli?style=flat-square&color=000000" alt="license"></a>
+  <a href="https://github.com/Microck/semrush-cli/releases"><img src="https://img.shields.io/github/v/release/Microck/semrush-cli?display_name=tag&style=flat-square&label=release&color=000000" alt="release badge"></a>
+  <a href="https://www.npmjs.com/package/semrush-cli"><img src="https://img.shields.io/npm/dt/semrush-cli?style=flat-square&label=downloads&color=000000" alt="npm downloads"></a>
+  <a href="https://github.com/Microck/semrush-cli/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/Microck/semrush-cli/ci.yml?branch=main&style=flat-square&label=ci&color=000000" alt="ci badge"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-mit-000000?style=flat-square" alt="license badge"></a>
 </p>
 
 ---
 
-semrush from your terminal and MCP clients. keyword research, organic rankings,
-competitors, backlinks and AI visibility, through your signed-in web account.
-built with TypeScript + Effect. sessions stored in Galleton.
+`semrush` is a terminal cli for semrush. research keywords, check rankings and backlinks, compare competitors, manage projects and keyword lists, and run site audits from your own account. output is json, so you can pipe it into `jq` or give the same commands to an agent through mcp. built with typescript and effect.
+
+[documentation](https://semrush.micr.dev) | [command reference](https://semrush.micr.dev/docs/reports) | [npm](https://www.npmjs.com/package/semrush-cli) | [mcp](https://semrush.micr.dev/docs/mcp)
 
-[docs](https://semrush.micr.dev) · [npm](https://www.npmjs.com/package/semrush-cli) · [mcp](#mcp) · [issues](https://github.com/Microck/semrush-cli/issues)
+![keyword research demo](assets/demo-keywords.gif)
 
 ## why
 
-81 operations with the same input schemas in the CLI and MCP. JSON output for
-scripts, account totals and pagination, project management, and encrypted session storage.
-no Semrush developer API key or Python runtime required.
+if you already pay for semrush, you should be able to use it from the terminal too. this cli uses your existing web session, so there is no developer api key to buy or configure. look up a keyword, save the result, compare a few domains, or let an agent do it through mcp.
 
-The executable is `semrush-cli`. It can coexist with other tools named `semrush`.
+your plan's permissions and limits still apply. it doesn't cover the whole semrush suite. the [coverage page](https://semrush.micr.dev/docs/coverage) lists what works and what still needs the web ui.
 
 ## quickstart
 
-Requires Node.js 22+. Includes Galleton binaries for Linux x64/arm64,
-macOS x64/arm64 and Windows x64.
+### install
 
-```sh
+requires node.js 22 or newer. linux, macos and windows are supported.
+
+```bash
 npm install -g semrush-cli
-semrush-cli setup
-semrush-cli auth login
-semrush-cli domain-overview --domain openai.com --json
+semrush setup
+semrush auth login
+semrush keyword-overview --keyword 'email marketing'
 ```
 
-`setup` installs Chromium and starts a private Galleton daemon. `auth login`
-opens an isolated browser for sign-in, verifies the session, and stores it in
-Galleton. It requires a graphical desktop. On Linux, missing Chromium system
-libraries can be installed with `npx patchright install-deps chromium`.
+`semrush-cli` is the npm package. `semrush` is the command.
+
+`setup` downloads chromium and starts the bundled galleton session engine. there is no separate python or go install. on linux, if chromium needs system libraries, run `npx patchright install-deps chromium`.
 
-To import an existing, authorized Chromium session on a headless machine:
+### auth
 
-```sh
-semrush-cli auth import --cdp-url http://127.0.0.1:9234
-semrush-cli doctor --json
+`semrush auth login` opens a browser. sign in to semrush there and the cli saves the session in galleton's encrypted vault. it doesn't ask for your password in the terminal.
+
+```bash
+semrush auth login
+semrush auth status --check --json
+semrush doctor
 ```
 
-The browser must already expose CDP on a literal loopback HTTP address. This
-supports the browser managed by [semrush-web-mcp](https://github.com/Microck/semrush-web-mcp).
-Import does not stop or change that browser. Keep CDP private; forward it over
-SSH when necessary.
+already have a signed-in browser with a local debugging port? import its session instead:
+
+```bash
+semrush auth import --cdp-url http://127.0.0.1:9234
+semrush doctor
+```
 
-## projects
+the browser has to be running with debugging enabled. import doesn't start or stop it. see the [authentication guide](https://semrush.micr.dev/docs/authentication) for headless hosts and remote browsers.
 
-```sh
-semrush-cli projects --json
-semrush-cli project-create --name 'my website' --domain example.com --dry-run
-semrush-cli project-create --name 'my website' --domain example.com --confirm --json
-semrush-cli project-get --folder-id 123 --json
-semrush-cli project-update --folder-id 123 --name 'new name' --confirm
-semrush-cli project-set-tags --folder-id 123 --tags '["client"]' --confirm
-semrush-cli project-pin --folder-id 123 --pinned --confirm
-semrush-cli project-delete --folder-id 123 --confirm
+semrush can expire your session. sign in or import again when that happens. the cli saves rotated cookies after successful requests, but doesn't renew expired sessions in the background.
+
+```bash
+semrush auth logout
+semrush daemon stop
+semrush daemon start
 ```
 
-Project commands use the current web UI's folder IDs. Creation does not start
-crawls or share the project. Every write requires `--confirm`; `--dry-run` prints
-the request without authentication or network access. SEO project creation and
-automatic Site Audit/Position Tracking setup are separate, explicit commands.
-See [projects](https://semrush.micr.dev/docs/projects) and
-[web UI coverage](https://semrush.micr.dev/docs/coverage).
+logout forgets this cli's saved session. it doesn't log out your other browsers. the daemon keeps running after the terminal closes. start it again after a reboot.
+
+## command surface
 
-## keyword lists
+89 operations, available as cli commands and mcp tools.
 
-```sh
-semrush-cli keyword-lists --json
-semrush-cli keyword-list-create --name 'research' --confirm --json
-semrush-cli keyword-list-import --basket-id 456 --owner-id 123 --keywords '["email marketing"]' --confirm
-semrush-cli keyword-list-keywords --basket-id 456 --owner-id 123 --page-size 20 --json
-semrush-cli keyword-list-add-tags --basket-id 456 --owner-id 123 --keywords '["email marketing"]' --tags '["opportunity"]' --confirm
-semrush-cli keyword-strategy-create --name 'example strategy' --domain example.com --dry-run
+| command | what it does |
+| --- | --- |
+| `keyword-overview`, `keyword-magic` | volume, difficulty, cpc, intent, related keywords and filtered research |
+| `keyword-serp`, `keyword-ads`, `keyword-clusters` | search results, ads and keyword clusters |
+| `domain-overview`, `domain-keywords`, `domain-competitors` | organic rankings and competing domains |
+| `domain-pages`, `domain-subdomains`, `domain-position-changes` | pages, subdomains and ranking changes |
+| `keyword-gap`, `backlink-gap` | compare domains and find keyword or backlink opportunities |
+| `backlink-links`, `backlink-referring-domains`, `backlink-anchors` | inspect backlinks, referring domains and anchor text |
+| `domain-ai-visibility`, `domain-ai-countries`, `domain-ai-sources` | ai visibility, countries and citation sources |
+| `project-create`, `project-get`, `project-update`, `project-delete` | create and manage projects |
+| `project-tags`, `project-set-tags`, `project-pin` | organize your projects |
+| `project-enable-seo`, `project-tools`, `project-toolkits` | enable seo and read project tool status |
+| `keyword-lists`, `keyword-list-create`, `keyword-list-import` | manage keyword lists and import keywords |
+| `keyword-strategy-create`, `keyword-list-cluster` | generate a strategy or cluster a list |
+| `audit-create`, `audit-configure`, `audit-start` | configure and launch a site audit |
+| `audit-status`, `audit-snapshots`, `audit-snapshot` | check progress and read audit results |
+| `reports` | list every operation and its inputs |
+| `mcp` | run the stdio mcp server |
+| `doctor` | check the browser, session engine and semrush connection |
+
+```bash
+semrush reports
+semrush keyword-magic --help
+semrush project-create --help
 ```
 
-Builder list IDs and owner IDs come from `keyword-lists`. Regular list creation
-and structured strategy generation are separate commands. Metric refresh and
-clustering require explicit confirmation and consume account allowances.
-See [keyword lists](https://semrush.micr.dev/docs/keyword-lists).
+global flags: `--json`, `--no-color`, `--no-input`. reports return json with or without `--json`. objects and arrays use json arguments. use `--help` on a command for its filters, pagination and defaults.
 
-## commands
+## examples
 
-```sh
-semrush-cli keyword-overview --keyword 'email marketing' --json
-semrush-cli keyword-magic --keyword 'email marketing' --questions-only --page-size 20 --json
-semrush-cli domain-keywords --domain openai.com --page 2 --page-size 20 --json
-semrush-cli domain-competitors --domain openai.com --page-size 10 --json
-semrush-cli keyword-gap --domains '["openai.com","anthropic.com"]' --json
-semrush-cli backlink-gap --domains '["openai.com","anthropic.com"]' --json
-semrush-cli backlink-links --domain openai.com --filters '+|type||nofollow' --json
-semrush-cli domain-ai-visibility --domain openai.com --json
-semrush-cli snapshot-dates --database us --json
-semrush-cli reports --json
-semrush-cli domain-keywords --help
+### keyword research
+
+```bash
+semrush keyword-overview --keyword 'email marketing'
+semrush keyword-magic --keyword 'email marketing' --questions-only --page-size 20
+semrush keyword-serp --keyword 'email marketing'
 ```
 
-| Area | Reports |
-| --- | --- |
-| Keywords | Overview, ideas, questions, SERPs, ads, clusters, paginated Keyword Magic and groups |
-| Organic | Rankings, pages, subdomains, changes, competitors, topics and trends |
-| Gaps | Keyword overlaps and gaps, backlink prospects and profile comparisons |
-| Backlinks | Links, referring domains, anchors, indexed pages, outbound domains, history and authority |
-| AI visibility | Visibility, mentions, citation sources and country distribution |
-| Keyword lists | Create, read, rename/delete, import, metrics, tags, deletion/undo, clustering and structured strategy generation |
-| Projects | Create, inspect, rename, delete, leave, tags, pinning, toolkit status, dashboard metrics and explicit SEO setup |
-| Account | Limits, permissions, databases, snapshots, folders, saved lists and audit campaigns |
-
-All successful reports use `{authenticated: true, report, data}`. Domain ranking
-and page reports include provider totals. Large integers remain exact as decimal
-strings. Errors go to stderr with a nonzero exit. `--json` works before or after
-the command. Objects and arrays use JSON flags; booleans support explicit `false`.
-See the [full command reference](https://semrush.micr.dev/docs/reports).
+pull out the numbers you care about:
+
+```bash
+semrush keyword-overview --keyword 'email marketing' \
+  | jq '.data | {phrase, volume, difficulty, cpc}'
+```
+
+### competitors and backlinks
+
+```bash
+semrush domain-overview --domain openai.com
+semrush domain-keywords --domain openai.com --page-size 20
+semrush keyword-gap --domains '["openai.com","anthropic.com"]'
+semrush backlink-links --domain openai.com
+semrush backlink-gap --domains '["openai.com","anthropic.com"]'
+```
+
+### projects
+
+preview a write before sending it:
+
+```bash
+semrush project-create --name 'my website' --domain example.com --dry-run
+```
+
+then create it when you're ready:
+
+```bash
+semrush project-create --name 'my website' --domain example.com --confirm
+```
+
+![project request preview demo](assets/demo-projects.gif)
+
+writes need `--confirm`. `--dry-run` validates the inputs and prints the request without connecting to semrush. creating a project doesn't start tools or share it.
+
+### keyword lists
+
+```bash
+semrush keyword-lists
+semrush keyword-list-create --name 'content ideas' --confirm
+```
+
+use the list id and owner id returned by semrush:
+
+```bash
+semrush keyword-list-import --basket-id 123 --owner-id 456 \
+  --keywords '["email marketing","email automation"]' --database us --confirm
+semrush keyword-list-keywords --basket-id 123 --owner-id 456
+```
+
+strategy generation, clustering and metric updates can consume your account allowance. they need explicit confirmation too. see [keyword lists](https://semrush.micr.dev/docs/keyword-lists).
+
+### site audits
+
+```bash
+semrush project-enable-seo --folder-id 123 --confirm
+```
+
+use the returned seo project `id` as the campaign id:
+
+```bash
+semrush audit-create --campaign-id 456 --name 'my audit' \
+  --domain example.com --page-limit 100 --confirm
+semrush audit-start --campaign-id 456 --confirm
+semrush audit-status --campaign-id 456
+semrush audit-snapshots --campaign-id 456
+```
+
+creating an audit saves its settings. starting it is a separate command. defaults are manual scheduling and email off. see [site audit](https://semrush.micr.dev/docs/site-audit) for crawl settings and limits.
 
 ## mcp
 
-Complete setup and authentication, then configure your MCP client:
+finish setup and sign in first, then add this to your client's mcp config:
 
 ```json
 {
   "mcpServers": {
     "semrush": {
-      "command": "semrush-cli",
+      "command": "semrush",
       "args": ["mcp"]
     }
   }
 }
 ```
 
-Use an absolute executable path if your client does not inherit the terminal's
-PATH. `npx -y semrush-cli@0.3.0 mcp` also works. MCP tool names use underscores,
-for example `keyword_overview` and `domain_keywords`. Input schemas and reports
-match the CLI. The 62 read tools carry read-only annotations. The 19 write tools require
-`confirm:true`, or accept `dry_run:true` to preview the request. Delete and leave
-also carry destructive annotations. Login, arbitrary URLs and JavaScript
-execution are not MCP tools.
-
-## sessions
-
-```sh
-semrush-cli auth status --check --json
-semrush-cli auth logout
-semrush-cli daemon stop
-semrush-cli daemon start
-```
+the server exposes the same operations as the cli. tool names use underscores, such as `keyword_overview` and `project_create`. writes need `confirm: true`, or `dry_run: true` to preview the request. it doesn't expose login, arbitrary urls or javascript execution.
 
-Galleton stores credentials under `~/.local/share/semrush-cli/galleton`. The
-private daemon listens on `127.0.0.1:8768`. It continues after the terminal closes;
-run `daemon start` after reboot. The CLI installs no system startup service.
+## what it looks like
 
-Each CLI process restores its encrypted session into a fresh, transient Chromium
-context. The MCP server reuses one context and serializes requests. Successful
-reports capture cookie updates back to Galleton. Session expiry requires sign-in
-or import again. No anonymous fallback or automatic request retries.
+the gifs use captured output for public keyword research and an offline project preview. no account details or credentials. the [capture notes and renderer](docs/demo/README.md) are in the repo if you want to regenerate them.
 
-The unchanged Galleton TypeScript SDK is vendored at a pinned upstream commit
-because it is not on npm. The bundled daemon adds a tested `static` provider for
-storage without renewal. Semrush has no proven renewal contract in the reference
-integration, so this tool does not invent one. See [architecture](docs/architecture.md)
-and [SDK provenance](src/vendor/README.md).
+## building from source
 
-| Variable | Default |
-| --- | --- |
-| `SEMRUSH_GALLETON_URL` | `http://127.0.0.1:8768` |
-| `SEMRUSH_GALLETON_TOKEN_FILE` | `~/.local/share/semrush-cli/galleton/api.token` |
-| `SEMRUSH_SESSION` | `semrush-cli` |
-| `SEMRUSH_BROWSER_EXECUTABLE` | Patchright's Chromium |
-
-The setup/daemon commands manage only the default CLI-owned daemon. An external
-daemon must support the documented static-provider extension. Never expose its
-API token or credential directory.
+```bash
+git clone https://github.com/Microck/semrush-cli.git
+cd semrush-cli
+npm ci
+npm run build
+node dist/cli.js --help
+npm run check
+```
 
-## limits
+the source build uses go to build the pinned galleton engine. npm releases include the engine for supported platforms.
 
-Semrush account permissions, quotas and product access apply. A read-only report
-can consume an allowance. Internal web endpoints may change. Provider caps remain
-visible; there is no unlimited-export claim. Galleton encrypts at rest but its key
-and vault share a private local directory. Other processes running as your OS user
-are within the same trust boundary.
+## documentation
 
-## development
+full docs live at [semrush.micr.dev](https://semrush.micr.dev). setup, authentication, projects, keyword lists, site audits, mcp and the complete command reference.
 
-```sh
-npm ci
-npm run check
-npm --prefix docs-site ci
-npm --prefix docs-site run build
-```
+- [coverage](https://semrush.micr.dev/docs/coverage)
+- [authentication](https://semrush.micr.dev/docs/authentication)
+- [scripting](https://semrush.micr.dev/docs/scripting)
+- [architecture](docs/architecture.md)
 
-Development builds require Go 1.23+ and `tar`/`patch` to build the pinned Galleton
-daemon with its storage-only extension. The build runs the upstream core suite
-with the extension's integration test. Published users do not need Go.
+## contributing
 
-Tests compare all 48 request shapes against the Python reference, use real
-Chromium and Galleton with a local HTTP fixture, and exercise the built executable.
-They never require a Semrush account. See [verification](docs/verification.md) for
-the separate live-account evidence.
+issues and pull requests are welcome. if semrush changes an endpoint, include the command you ran and the error. leave cookies and account details out of the report.
 
-## uninstall
+## disclaimer
 
-```sh
-semrush-cli auth logout
-semrush-cli daemon stop
-npm uninstall -g semrush-cli
-```
+this is an unofficial client, not affiliated with semrush. it uses the web product's internal endpoints, which can change. your subscription and account limits apply.
 
-The private vault and browser cache remain on disk. Remove them only after
-checking they contain nothing you need.
+## license
 
-MIT. Independent project, not affiliated with Semrush.
+[mit license](LICENSE)

package/assets/logo-lockup.svg

@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 230" role="img" aria-labelledby="title">
+<title id="title">semrush cli</title>
+<style>.wordmark{fill:#421983}@media(prefers-color-scheme:dark){.wordmark{fill:#fff}}</style>
+<g transform="translate(12 38) scale(.48)">  <path d="M357.481 3C333.269 3 306.873 11.7835 277.382 27.1205L113.044 114.41H247.71L3 244.524H272.376L136.164 316.977H361.44C446.818 314.792 515.038 245.48 515.038 160.011C515.038 74.5425 444.178 3.04552 357.481 3.04552V3Z" fill="#ff642d"/>
+  <path d="M136.164 316.977L272.376 244.524H408L272 316.977Z" fill="#a76bff"/>
+  <path d="m317 116 47 44-47 44m73 0h52" fill="none" stroke="#421983" stroke-width="22" stroke-linecap="square" stroke-linejoin="miter"/>
+</g>
+<g class="wordmark" transform="translate(287 153) scale(0.13079394217530976 -0.13079394217530976)"><path d="M283 -12Q218 -12 163.0 12.5Q108 37 72.5 82.0Q37 127 30 188H149Q154 157 175.0 133.0Q196 109 225.5 96.0Q255 83 287 83Q331 83 358.5 103.0Q386 123 386 155Q386 186 367.5 203.0Q349 220 319.0 229.5Q289 239 253.5 246.0Q218 253 182.0 262.5Q146 272 116.0 289.5Q86 307 67.5 337.5Q49 368 49 417Q49 468 76.0 506.5Q103 545 152.0 566.5Q201 588 266 588Q326 588 377.5 565.5Q429 543 463.0 502.5Q497 462 504 408H383Q373 445 340.0 469.5Q307 494 261 494Q219 494 194.0 476.0Q169 458 169 429Q169 402 187.5 387.5Q206 373 236.0 364.5Q266 356 302.0 349.0Q338 342 374.0 331.5Q410 321 440.0 302.0Q470 283 488.5 250.5Q507 218 507 166Q507 114 478.0 73.5Q449 33 398.5 10.5Q348 -12 283 -12Z M867 -12Q783 -12 719.5 28.0Q656 68 621.0 136.0Q586 204 586 288Q586 373 620.0 440.5Q654 508 714.5 548.0Q775 588 856 588Q941 588 1002.0 547.5Q1063 507 1091.5 436.5Q1120 366 1107 276H705Q707 225 726.5 184.0Q746 143 782.0 119.5Q818 96 867 96Q920 96 954.5 121.5Q989 147 1000 188H1122Q1105 94 1035.0 41.0Q965 -12 867 -12ZM712 365H990Q986 418 950.5 451.5Q915 485 860 485Q807 485 767.0 453.5Q727 422 712 365Z M1945 0V350Q1945 409 1914.5 444.0Q1884 479 1831 479Q1774 479 1741.0 435.0Q1708 391 1708 327V0H1587V350Q1587 409 1556.5 444.0Q1526 479 1473 479Q1416 479 1383.5 435.0Q1351 391 1351 327V0H1229V576H1335L1345 482Q1370 533 1412.0 560.5Q1454 588 1508 588Q1571 588 1618.5 558.5Q1666 529 1689 476Q1719 533 1764.5 560.5Q1810 588 1866 588Q1955 588 2010.5 531.0Q2066 474 2066 375V0Z M2204 0V576H2310L2319 484Q2332 526 2363.5 551.0Q2395 576 2438 576H2529L2543 470H2446Q2385 470 2355.5 424.5Q2326 379 2326 302V0Z M2826 -12Q2765 -12 2718.0 14.0Q2671 40 2645.0 88.0Q2619 136 2619 201V576H2740V226Q2740 167 2773.0 132.5Q2806 98 2861 98Q2921 98 2955.0 141.5Q2989 185 2989 249V576H3110V0H3005L2995 95Q2969 44 2925.5 16.0Q2882 -12 2826 -12Z M3465 -12Q3400 -12 3345.0 12.5Q3290 37 3254.5 82.0Q3219 127 3212 188H3331Q3336 157 3357.0 133.0Q3378 109 3407.5 96.0Q3437 83 3469 83Q3513 83 3540.5 103.0Q3568 123 3568 155Q3568 186 3549.5 203.0Q3531 220 3501.0 229.5Q3471 239 3435.5 246.0Q3400 253 3364.0 262.5Q3328 272 3298.0 289.5Q3268 307 3249.5 337.5Q3231 368 3231 417Q3231 468 3258.0 506.5Q3285 545 3334.0 566.5Q3383 588 3448 588Q3508 588 3559.5 565.5Q3611 543 3645.0 502.5Q3679 462 3686 408H3565Q3555 445 3522.0 469.5Q3489 494 3443 494Q3401 494 3376.0 476.0Q3351 458 3351 429Q3351 402 3369.5 387.5Q3388 373 3418.0 364.5Q3448 356 3484.0 349.0Q3520 342 3556.0 331.5Q3592 321 3622.0 302.0Q3652 283 3670.5 250.5Q3689 218 3689 166Q3689 114 3660.0 73.5Q3631 33 3580.5 10.5Q3530 -12 3465 -12Z M3923 748V494Q3950 539 3991.5 563.5Q4033 588 4085 588Q4147 588 4194.0 562.0Q4241 536 4267.0 488.5Q4293 441 4293 375V0H4171V350Q4171 410 4138.0 444.0Q4105 478 4050 478Q3990 478 3956.5 434.5Q3923 391 3923 327V0H3801V748Z"/></g>
+<text x="289" y="202" font-family="monospace" font-size="18" letter-spacing="3" fill="#a76bff">cli</text>
+</svg>

package/assets/logo.svg

@@ -1,10 +1,6 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 518 320" role="img" aria-labelledby="title">
-  <title id="title">semrush-cli</title>
-  <defs>
-    <mask id="terminal">
-      <rect width="518" height="320" fill="white"/>
-      <path d="m340 130 29 29-29 29m45 0h35" fill="none" stroke="black" stroke-width="12" stroke-linejoin="miter"/>
-    </mask>
-  </defs>
-  <path d="M357.481 3C333.269 3 306.873 11.7835 277.382 27.1205L113.044 114.41H247.71L3 244.524H272.376L136.164 316.977H361.44C446.818 314.792 515.038 245.48 515.038 160.011C515.038 74.5425 444.178 3.04552 357.481 3.04552V3Z" fill="#ff642d" mask="url(#terminal)"/>
+  <title id="title">semrush terminal comet</title>
+  <path d="M357.481 3C333.269 3 306.873 11.7835 277.382 27.1205L113.044 114.41H247.71L3 244.524H272.376L136.164 316.977H361.44C446.818 314.792 515.038 245.48 515.038 160.011C515.038 74.5425 444.178 3.04552 357.481 3.04552V3Z" fill="#ff642d"/>
+  <path d="M136.164 316.977L272.376 244.524H408L272 316.977Z" fill="#a76bff"/>
+  <path d="m317 116 47 44-47 44m73 0h52" fill="none" stroke="#421983" stroke-width="22" stroke-linecap="square" stroke-linejoin="miter"/>
 </svg>

package/dist/{auth-BZhlPkLq.js → auth-CrYOA8QT.js}

@@ -1,7 +1,7 @@
-import { n as SessionError, r as UsageError } from "./errors-CU9T4acd.js";
-import { i as Sessions, n as origin } from "./session-layer-BDgTji_P.js";
+import { n as SessionError, r as UsageError } from "./errors-DNn_XeoU.js";
+import { a as Sessions, r as origin } from "./session-layer-Bq5OpnR5.js";
 import "./browser-service-BYYE-vSm.js";
-import { t as readBootstrap } from "./browser-layer-BJ4eQAUz.js";
+import { t as readBootstrap } from "./browser-layer-gdm03TCV.js";
 import { Config, Effect, Option } from "effect";
 import { chromium } from "patchright";
 
@@ -79,4 +79,4 @@ const login = Effect.fn("Auth.login")(function* () {
 
 //#endregion
 export { importBrowser, login };
-//# sourceMappingURL=auth-BZhlPkLq.js.map
+//# sourceMappingURL=auth-CrYOA8QT.js.map

package/dist/{auth-BZhlPkLq.js.map → auth-CrYOA8QT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"auth-BZhlPkLq.js","names":["page","browser"],"sources":["../src/auth.ts"],"sourcesContent":["import { Config, Effect, Option } from 'effect';\nimport { chromium, type BrowserContext } from 'patchright';\nimport { Sessions } from './session-service.js';\nimport { origin } from './session-layer.js';\nimport { SessionError, UsageError } from './errors.js';\nimport { readBootstrap } from './browser-layer.js';\n\nconst authFailed = () => new SessionError({ message: 'Could not import a signed-in Semrush session. Check the browser, complete sign-in, and retry. No credentials were logged.' });\nconst authCall = <A>(run: () => Promise<A>) => Effect.tryPromise({ try: run, catch: authFailed });\n\nconst saveContext = Effect.fn('Auth.saveContext')(function* (context: BrowserContext) {\n  const sessions = yield* Sessions;\n  const page = yield* Effect.acquireRelease(authCall(() => context.newPage()), page => Effect.promise(() => page.close()));\n  yield* authCall(() => page.goto(origin + '/robots.txt', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  const html = yield* authCall(() => page.evaluate(async () => {\n    const response = await fetch('/analytics/overview/?db=us', { credentials: 'include', signal: AbortSignal.timeout(45000) });\n    return response.ok ? response.text() : '';\n  }));\n  yield* Effect.try({ try: () => readBootstrap(html), catch: authFailed });\n  const cookies = yield* authCall(() => context.cookies(origin));\n  if (!cookies.length) return yield* Effect.fail(authFailed());\n  // Bare cookies are intentionally bound to the single approved origin by Galleton.\n  return yield* sessions.save({ provider: 'semrush', cookie_origin: origin, cookie_header: cookies.map(cookie => `${cookie.name}=${cookie.value}`).join('; ') });\n});\n\nexport const importBrowser = Effect.fn('Auth.import')(function* (url: string) {\n  const valid = yield* Effect.try({ try: () => {\n    const parsed = new URL(url);\n    if (parsed.protocol !== 'http:' || !['127.0.0.1', '[::1]'].includes(parsed.hostname) || parsed.username || parsed.password) throw new Error('Not loopback');\n    return parsed.origin;\n  }, catch: () => new UsageError({ message: 'CDP must be a literal loopback HTTP URL. Forward remote browsers over SSH first.' }) });\n  const browser = yield* authCall(() => chromium.connectOverCDP(valid, { timeout: 30000 }));\n  // Closing a CDP connection disconnects this client and leaves the existing browser running.\n  yield* Effect.addFinalizer(() => Effect.promise(() => browser.close()));\n  const context = browser.contexts()[0];\n  if (!context) return yield* Effect.fail(authFailed());\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n\nexport const login = Effect.fn('Auth.login')(function* () {\n  const executable = yield* Config.option(Config.String('SEMRUSH_BROWSER_EXECUTABLE'));\n  const browser = yield* Effect.acquireRelease(authCall(() => chromium.launch({ headless: false, executablePath: Option.getOrUndefined(executable) })), browser => Effect.promise(() => browser.close()));\n  const context = yield* authCall(() => browser.newContext({ userAgent: 'OpenAI File Downloader, XaiImageApiFetch/1.0' }));\n  const page = yield* authCall(() => context.newPage());\n  yield* authCall(() => page.goto(origin + '/login/', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  yield* Effect.sync(() => process.stderr.write('Sign into Semrush in the browser. Waiting up to 5 minutes.\\n'));\n  yield* authCall(() => page.waitForURL(url => url.hostname === 'www.semrush.com' && !url.pathname.startsWith('/login') && !url.pathname.startsWith('/signup'), { timeout: 300000 }));\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n"],"mappings":";;;;;;;;AAOA,MAAM,mBAAmB,IAAI,aAAa,EAAE,SAAS,6HAA6H,CAAC;AACnL,MAAM,YAAe,QAA0B,OAAO,WAAW;CAAE,KAAK;CAAK,OAAO;CAAY,CAAC;AAEjG,MAAM,cAAc,OAAO,GAAG,mBAAmB,CAAC,WAAW,SAAyB;CACpF,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,OAAO,eAAe,eAAe,QAAQ,SAAS,CAAC,GAAE,WAAQ,OAAO,cAAcA,OAAK,OAAO,CAAC,CAAC;AACxH,QAAO,eAAe,KAAK,KAAK,SAAS,eAAe;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;CAC3G,MAAM,OAAO,OAAO,eAAe,KAAK,SAAS,YAAY;EAC3D,MAAM,WAAW,MAAM,MAAM,8BAA8B;GAAE,aAAa;GAAW,QAAQ,YAAY,QAAQ,KAAM;GAAE,CAAC;AAC1H,SAAO,SAAS,KAAK,SAAS,MAAM,GAAG;GACvC,CAAC;AACH,QAAO,OAAO,IAAI;EAAE,WAAW,cAAc,KAAK;EAAE,OAAO;EAAY,CAAC;CACxE,MAAM,UAAU,OAAO,eAAe,QAAQ,QAAQ,OAAO,CAAC;AAC9D,KAAI,CAAC,QAAQ,OAAQ,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAE5D,QAAO,OAAO,SAAS,KAAK;EAAE,UAAU;EAAW,eAAe;EAAQ,eAAe,QAAQ,KAAI,WAAU,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK;EAAE,CAAC;EAC9J;AAEF,MAAa,gBAAgB,OAAO,GAAG,cAAc,CAAC,WAAW,KAAa;CAC5E,MAAM,QAAQ,OAAO,OAAO,IAAI;EAAE,WAAW;GAC3C,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,OAAI,OAAO,aAAa,WAAW,CAAC,CAAC,aAAa,QAAQ,CAAC,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY,OAAO,SAAU,OAAM,IAAI,MAAM,eAAe;AAC3J,UAAO,OAAO;;EACb,aAAa,IAAI,WAAW,EAAE,SAAS,oFAAoF,CAAC;EAAE,CAAC;CAClI,MAAM,UAAU,OAAO,eAAe,SAAS,eAAe,OAAO,EAAE,SAAS,KAAO,CAAC,CAAC;AAEzF,QAAO,OAAO,mBAAmB,OAAO,cAAc,QAAQ,OAAO,CAAC,CAAC;CACvE,MAAM,UAAU,QAAQ,UAAU,CAAC;AACnC,KAAI,CAAC,QAAS,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAErD,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE;AAEF,MAAa,QAAQ,OAAO,GAAG,aAAa,CAAC,aAAa;CACxD,MAAM,aAAa,OAAO,OAAO,OAAO,OAAO,OAAO,6BAA6B,CAAC;CACpF,MAAM,UAAU,OAAO,OAAO,eAAe,eAAe,SAAS,OAAO;EAAE,UAAU;EAAO,gBAAgB,OAAO,eAAe,WAAW;EAAE,CAAC,CAAC,GAAE,cAAW,OAAO,cAAcC,UAAQ,OAAO,CAAC,CAAC;CACvM,MAAM,UAAU,OAAO,eAAe,QAAQ,WAAW,EAAE,WAAW,gDAAgD,CAAC,CAAC;CACxH,MAAM,OAAO,OAAO,eAAe,QAAQ,SAAS,CAAC;AACrD,QAAO,eAAe,KAAK,KAAK,SAAS,WAAW;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;AACvG,QAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,+DAA+D,CAAC;AAC9G,QAAO,eAAe,KAAK,YAAW,QAAO,IAAI,aAAa,qBAAqB,CAAC,IAAI,SAAS,WAAW,SAAS,IAAI,CAAC,IAAI,SAAS,WAAW,UAAU,EAAE,EAAE,SAAS,KAAQ,CAAC,CAAC;AAEnL,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE"}
+{"version":3,"file":"auth-CrYOA8QT.js","names":["page","browser"],"sources":["../src/auth.ts"],"sourcesContent":["import { Config, Effect, Option } from 'effect';\nimport { chromium, type BrowserContext } from 'patchright';\nimport { Sessions } from './session-service.js';\nimport { origin } from './session-layer.js';\nimport { SessionError, UsageError } from './errors.js';\nimport { readBootstrap } from './browser-layer.js';\n\nconst authFailed = () => new SessionError({ message: 'Could not import a signed-in Semrush session. Check the browser, complete sign-in, and retry. No credentials were logged.' });\nconst authCall = <A>(run: () => Promise<A>) => Effect.tryPromise({ try: run, catch: authFailed });\n\nconst saveContext = Effect.fn('Auth.saveContext')(function* (context: BrowserContext) {\n  const sessions = yield* Sessions;\n  const page = yield* Effect.acquireRelease(authCall(() => context.newPage()), page => Effect.promise(() => page.close()));\n  yield* authCall(() => page.goto(origin + '/robots.txt', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  const html = yield* authCall(() => page.evaluate(async () => {\n    const response = await fetch('/analytics/overview/?db=us', { credentials: 'include', signal: AbortSignal.timeout(45000) });\n    return response.ok ? response.text() : '';\n  }));\n  yield* Effect.try({ try: () => readBootstrap(html), catch: authFailed });\n  const cookies = yield* authCall(() => context.cookies(origin));\n  if (!cookies.length) return yield* Effect.fail(authFailed());\n  // Bare cookies are intentionally bound to the single approved origin by Galleton.\n  return yield* sessions.save({ provider: 'semrush', cookie_origin: origin, cookie_header: cookies.map(cookie => `${cookie.name}=${cookie.value}`).join('; ') });\n});\n\nexport const importBrowser = Effect.fn('Auth.import')(function* (url: string) {\n  const valid = yield* Effect.try({ try: () => {\n    const parsed = new URL(url);\n    if (parsed.protocol !== 'http:' || !['127.0.0.1', '[::1]'].includes(parsed.hostname) || parsed.username || parsed.password) throw new Error('Not loopback');\n    return parsed.origin;\n  }, catch: () => new UsageError({ message: 'CDP must be a literal loopback HTTP URL. Forward remote browsers over SSH first.' }) });\n  const browser = yield* authCall(() => chromium.connectOverCDP(valid, { timeout: 30000 }));\n  // Closing a CDP connection disconnects this client and leaves the existing browser running.\n  yield* Effect.addFinalizer(() => Effect.promise(() => browser.close()));\n  const context = browser.contexts()[0];\n  if (!context) return yield* Effect.fail(authFailed());\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n\nexport const login = Effect.fn('Auth.login')(function* () {\n  const executable = yield* Config.option(Config.String('SEMRUSH_BROWSER_EXECUTABLE'));\n  const browser = yield* Effect.acquireRelease(authCall(() => chromium.launch({ headless: false, executablePath: Option.getOrUndefined(executable) })), browser => Effect.promise(() => browser.close()));\n  const context = yield* authCall(() => browser.newContext({ userAgent: 'OpenAI File Downloader, XaiImageApiFetch/1.0' }));\n  const page = yield* authCall(() => context.newPage());\n  yield* authCall(() => page.goto(origin + '/login/', { waitUntil: 'domcontentloaded', timeout: 45000 }));\n  yield* Effect.sync(() => process.stderr.write('Sign into Semrush in the browser. Waiting up to 5 minutes.\\n'));\n  yield* authCall(() => page.waitForURL(url => url.hostname === 'www.semrush.com' && !url.pathname.startsWith('/login') && !url.pathname.startsWith('/signup'), { timeout: 300000 }));\n  const status = yield* saveContext(context);\n  return { logged_in: true, source: 'galleton', session: status.id };\n});\n"],"mappings":";;;;;;;;AAOA,MAAM,mBAAmB,IAAI,aAAa,EAAE,SAAS,6HAA6H,CAAC;AACnL,MAAM,YAAe,QAA0B,OAAO,WAAW;CAAE,KAAK;CAAK,OAAO;CAAY,CAAC;AAEjG,MAAM,cAAc,OAAO,GAAG,mBAAmB,CAAC,WAAW,SAAyB;CACpF,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,OAAO,eAAe,eAAe,QAAQ,SAAS,CAAC,GAAE,WAAQ,OAAO,cAAcA,OAAK,OAAO,CAAC,CAAC;AACxH,QAAO,eAAe,KAAK,KAAK,SAAS,eAAe;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;CAC3G,MAAM,OAAO,OAAO,eAAe,KAAK,SAAS,YAAY;EAC3D,MAAM,WAAW,MAAM,MAAM,8BAA8B;GAAE,aAAa;GAAW,QAAQ,YAAY,QAAQ,KAAM;GAAE,CAAC;AAC1H,SAAO,SAAS,KAAK,SAAS,MAAM,GAAG;GACvC,CAAC;AACH,QAAO,OAAO,IAAI;EAAE,WAAW,cAAc,KAAK;EAAE,OAAO;EAAY,CAAC;CACxE,MAAM,UAAU,OAAO,eAAe,QAAQ,QAAQ,OAAO,CAAC;AAC9D,KAAI,CAAC,QAAQ,OAAQ,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAE5D,QAAO,OAAO,SAAS,KAAK;EAAE,UAAU;EAAW,eAAe;EAAQ,eAAe,QAAQ,KAAI,WAAU,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK;EAAE,CAAC;EAC9J;AAEF,MAAa,gBAAgB,OAAO,GAAG,cAAc,CAAC,WAAW,KAAa;CAC5E,MAAM,QAAQ,OAAO,OAAO,IAAI;EAAE,WAAW;GAC3C,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,OAAI,OAAO,aAAa,WAAW,CAAC,CAAC,aAAa,QAAQ,CAAC,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY,OAAO,SAAU,OAAM,IAAI,MAAM,eAAe;AAC3J,UAAO,OAAO;;EACb,aAAa,IAAI,WAAW,EAAE,SAAS,oFAAoF,CAAC;EAAE,CAAC;CAClI,MAAM,UAAU,OAAO,eAAe,SAAS,eAAe,OAAO,EAAE,SAAS,KAAO,CAAC,CAAC;AAEzF,QAAO,OAAO,mBAAmB,OAAO,cAAc,QAAQ,OAAO,CAAC,CAAC;CACvE,MAAM,UAAU,QAAQ,UAAU,CAAC;AACnC,KAAI,CAAC,QAAS,QAAO,OAAO,OAAO,KAAK,YAAY,CAAC;AAErD,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE;AAEF,MAAa,QAAQ,OAAO,GAAG,aAAa,CAAC,aAAa;CACxD,MAAM,aAAa,OAAO,OAAO,OAAO,OAAO,OAAO,6BAA6B,CAAC;CACpF,MAAM,UAAU,OAAO,OAAO,eAAe,eAAe,SAAS,OAAO;EAAE,UAAU;EAAO,gBAAgB,OAAO,eAAe,WAAW;EAAE,CAAC,CAAC,GAAE,cAAW,OAAO,cAAcC,UAAQ,OAAO,CAAC,CAAC;CACvM,MAAM,UAAU,OAAO,eAAe,QAAQ,WAAW,EAAE,WAAW,gDAAgD,CAAC,CAAC;CACxH,MAAM,OAAO,OAAO,eAAe,QAAQ,SAAS,CAAC;AACrD,QAAO,eAAe,KAAK,KAAK,SAAS,WAAW;EAAE,WAAW;EAAoB,SAAS;EAAO,CAAC,CAAC;AACvG,QAAO,OAAO,WAAW,QAAQ,OAAO,MAAM,+DAA+D,CAAC;AAC9G,QAAO,eAAe,KAAK,YAAW,QAAO,IAAI,aAAa,qBAAqB,CAAC,IAAI,SAAS,WAAW,SAAS,IAAI,CAAC,IAAI,SAAS,WAAW,UAAU,EAAE,EAAE,SAAS,KAAQ,CAAC,CAAC;AAEnL,QAAO;EAAE,WAAW;EAAM,QAAQ;EAAY,UAD/B,OAAO,YAAY,QAAQ,EACoB;EAAI;EAClE"}

package/dist/{browser-layer-BJ4eQAUz.js → browser-layer-gdm03TCV.js}

@@ -1,5 +1,5 @@
-import { a as reportParameters, l as webRequest, n as SessionError, s as rpcBody, t as ReportError } from "./errors-CU9T4acd.js";
-import { i as Sessions, n as origin } from "./session-layer-BDgTji_P.js";
+import { a as reportParameters, l as webRequest, n as SessionError, s as rpcBody, t as ReportError } from "./errors-DNn_XeoU.js";
+import { a as Sessions, r as origin } from "./session-layer-Bq5OpnR5.js";
 import { t as Semrush } from "./browser-service-BYYE-vSm.js";
 import { Config, Effect, Layer, Option, Predicate, Schema, Semaphore } from "effect";
 import { chromium } from "patchright";
@@ -19,7 +19,7 @@ const json = JSONbig({
 	protoAction: "error",
 	constructorAction: "error"
 });
-const safeBrowserError = () => new ReportError({ message: "Semrush browser request failed. Run semrush-cli doctor. If your session expired, sign in again with semrush-cli auth login." });
+const safeBrowserError = () => new ReportError({ message: "Semrush browser request failed. Run semrush doctor. If your session expired, sign in again with semrush auth login." });
 const browserCall = (run) => Effect.tryPromise({
 	try: run,
 	catch: safeBrowserError
@@ -74,7 +74,7 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 	}));
 	const auth = yield* Effect.try({
 		try: () => readBootstrap(bootstrap.text),
-		catch: () => new SessionError({ message: "Semrush sign-in metadata unavailable. Run semrush-cli auth login or import a signed-in browser." })
+		catch: () => new SessionError({ message: "Semrush sign-in metadata unavailable. Run semrush auth login or import a signed-in browser." })
 	});
 	const semaphore = yield* Semaphore.make(1);
 	let spectrumToken = "";
@@ -83,21 +83,21 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 			const payload$1 = JSON.parse(encodedPayload);
 			const query = new URLSearchParams();
 			const get = method$1 === "GET";
-			if (get) for (const [key, value] of Object.entries(payload$1)) for (const item of Array.isArray(value) ? value : [value]) query.append(key, String(item));
+			if (get) for (const [key, value] of Object.entries(payload$1 ?? {})) for (const item of Array.isArray(value) ? value : [value]) query.append(key, String(item));
 			const options = {
 				method: method$1,
 				credentials: "include",
 				headers: extraHeaders$1,
 				signal: AbortSignal.timeout(45e3)
 			};
-			if (!get && method$1 !== "DELETE") {
+			if (!get && method$1 !== "DELETE" && payload$1 !== null) {
 				options.headers = {
 					...extraHeaders$1,
 					"Content-Type": "application/json"
 				};
 				options.body = JSON.stringify(payload$1);
 			}
-			const response = await fetch(get && query.size > 0 ? path$1 + "?" + query : path$1, options);
+			const response = await fetch(get && query.size > 0 ? path$1 + (path$1.includes("?") ? "&" : "?") + query : path$1, options);
 			return {
 				status: response.status,
 				text: await response.text()
@@ -124,7 +124,7 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 			try: () => parseWire(wire.text),
 			catch: () => new ReportError({ message: "Semrush returned a page or challenge instead of JSON. Sign in again or retry later." })
 		});
-		if (objectValue(body) && ("error" in body || "status" in body && !(body.status === null || body.status === "SUCCESS" || body.status === "success"))) return yield* Effect.fail(new ReportError({ message: `Semrush report failed: ${JSON.stringify(redact(body.error ?? body.status ?? null, [
+		if (objectValue(body) && ("error" in body || !path.startsWith("/siteaudit/") && "status" in body && !(body.status === null || body.status === "SUCCESS" || body.status === "success"))) return yield* Effect.fail(new ReportError({ message: `Semrush report failed: ${JSON.stringify(redact(body.error ?? body.status ?? null, [
 			auth.apiKey,
 			spectrumToken,
 			spectrumToken.replace(/^Bearer /, "")
@@ -159,6 +159,18 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 		if (!objectValue(body) || !("result" in body)) return yield* Effect.fail(new ReportError({ message: `Semrush ${method}: missing report result.` }));
 		return body.result ?? null;
 	});
+	const checkAuditSettings = Effect.fn("Semrush.checkAuditSettings")(function* (name, query) {
+		if (name === "audit_create") {
+			const campaigns = yield* request("/siteaudit/api/campaigns/seolist", { key: auth.apiKey }, "GET");
+			if (!Array.isArray(campaigns)) return yield* Effect.fail(new ReportError({ message: "Site Audit campaign discovery returned an unexpected response. No settings were saved." }));
+			if (campaigns.some((campaign) => objectValue(campaign) && String(campaign.id) === String(query.campaign_id))) return yield* Effect.fail(new ReportError({ message: "This SEO project already has a Site Audit. Use audit-configure to replace its settings explicitly." }));
+		}
+		if (name === "audit_configure") {
+			const current = yield* request(`/siteaudit/api/campaigns/${query.campaign_id}/info?key=${encodeURIComponent(auth.apiKey)}`, {}, "GET");
+			if (objectValue(current) && Predicate.isString(current.projectDomain) && current.projectDomain !== query.domain) return yield* Effect.fail(new ReportError({ message: "The audit domain must match the SEO project website. Inspect audit-info for projectDomain before configuring it." }));
+			if (objectValue(current) && (Boolean(current.authEnabled) || Boolean(current.webBotAuthEnabled) || objectValue(current.gaSettings) && Object.keys(current.gaSettings).length > 0)) return yield* Effect.fail(new ReportError({ message: "This audit uses protected-site authentication or Google Analytics. Edit its settings in the Semrush web UI to preserve those connections." }));
+		}
+	});
 	const report = Effect.fn("Semrush.report")(function* ({ name, definition, query }) {
 		if (!(yield* browserCall(() => page.evaluate(async () => {
 			const response = await fetch("/home/", {
@@ -168,9 +180,9 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 				signal: AbortSignal.timeout(15e3)
 			});
 			return response.ok && new URL(response.url).pathname === "/home/";
-		})))) return yield* Effect.fail(new SessionError({ message: "Semrush session expired. Run semrush-cli auth login or import a signed-in browser." }));
+		})))) return yield* Effect.fail(new SessionError({ message: "Semrush session expired. Run semrush auth login or import a signed-in browser." }));
 		const family = definition.transport;
-		const planned = family === "project_web" ? webRequest(definition, query) : void 0;
+		const planned = ["project_web", "audit_web"].includes(family) ? webRequest(definition, query) : void 0;
 		const params = planned?.body ?? reportParameters(definition, query);
 		let reportData;
 		if (planned) {
@@ -179,7 +191,8 @@ const makeSemrushLayer = (browserOrigin) => Layer.effect(Semrush, Effect.gen(fun
 				if (!objectValue(current) || !objectValue(current.folder)) return yield* Effect.fail(new ReportError({ message: "Project metadata unavailable. Inspect the project before adding a website." }));
 				if (Predicate.isString(current.folder.domain) && current.folder.domain.length > 0) return yield* Effect.fail(new ReportError({ message: "This project already has a website. The Semrush web UI only allows adding a website when none is set." }));
 			}
-			reportData = yield* request(planned.path, planned.body, planned.method);
+			if (family === "audit_web") yield* checkAuditSettings(name, query);
+			reportData = yield* request(family === "audit_web" ? planned.path + "?key=" + encodeURIComponent(auth.apiKey) : planned.path, planned.body, planned.method);
 		} else if ([
 			"keyword",
 			"domain",
@@ -297,4 +310,4 @@ const captureCookies = Effect.fn("Semrush.captureCookies")(function* (context, c
 
 //#endregion
 export { semrushLive as n, readBootstrap as t };
-//# sourceMappingURL=browser-layer-BJ4eQAUz.js.map
+//# sourceMappingURL=browser-layer-gdm03TCV.js.map